@ollaid/native-sso 1.0.0

package/dist/index.cjs

@@ -0,0 +1,4493 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const jsxRuntime = require("react/jsx-runtime");
+const react = require("react");
+const iconProps = { width: "100%", height: "100%", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: 2, strokeLinecap: "round", strokeLinejoin: "round" };
+function IconShieldCheck(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "m9 12 2 2 4-4" })
+  ] });
+}
+function IconMail(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("rect", { width: "20", height: "16", x: "2", y: "4", rx: "2" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "m22 7-8.97 5.7a1.94 1.94 0 0 1-2.06 0L2 7" })
+  ] });
+}
+function IconPhone(props) {
+  return /* @__PURE__ */ jsxRuntime.jsx("svg", { ...iconProps, ...props, children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M22 16.92v3a2 2 0 0 1-2.18 2 19.79 19.79 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6 19.79 19.79 0 0 1-3.07-8.67A2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72 12.84 12.84 0 0 0 .7 2.81 2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45 12.84 12.84 0 0 0 2.81.7A2 2 0 0 1 22 16.92z" }) });
+}
+function IconLock(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("rect", { width: "18", height: "11", x: "3", y: "11", rx: "2", ry: "2" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M7 11V7a5 5 0 0 1 10 0v4" })
+  ] });
+}
+function IconKeyRound(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M2.586 17.414A2 2 0 0 0 2 18.828V21a1 1 0 0 0 1 1h3a1 1 0 0 0 1-1v-1a1 1 0 0 1 1-1h1a1 1 0 0 0 1-1v-1a1 1 0 0 1 1-1h.172a2 2 0 0 0 1.414-.586l.814-.814a6.5 6.5 0 1 0-4-4z" }),
+    /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "16.5", cy: "7.5", r: ".5", fill: "currentColor" })
+  ] });
+}
+function IconArrowLeft(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "m12 19-7-7 7-7" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M19 12H5" })
+  ] });
+}
+function IconEye(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M2.062 12.348a1 1 0 0 1 0-.696 10.75 10.75 0 0 1 19.876 0 1 1 0 0 1 0 .696 10.75 10.75 0 0 1-19.876 0" }),
+    /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "12", cy: "12", r: "3" })
+  ] });
+}
+function IconEyeOff(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M10.733 5.076a10.744 10.744 0 0 1 11.205 6.575 1 1 0 0 1 0 .696 10.747 10.747 0 0 1-1.444 2.49" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M14.084 14.158a3 3 0 0 1-4.242-4.242" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M17.479 17.499a10.75 10.75 0 0 1-15.417-5.151 1 1 0 0 1 0-.696 10.75 10.75 0 0 1 4.446-5.143" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "m2 2 20 20" })
+  ] });
+}
+function IconCheckCircle2(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "12", cy: "12", r: "10" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "m9 12 2 2 4-4" })
+  ] });
+}
+function IconLoader2(props) {
+  return /* @__PURE__ */ jsxRuntime.jsx("svg", { ...iconProps, ...props, style: { animation: "spin 1s linear infinite", ...props.style || {} }, children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M21 12a9 9 0 1 1-6.219-8.56" }) });
+}
+function IconSmartphone(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("rect", { width: "14", height: "20", x: "5", y: "2", rx: "2", ry: "2" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M12 18h.01" })
+  ] });
+}
+function IconHome(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M15 21v-8a1 1 0 0 0-1-1h-4a1 1 0 0 0-1 1v8" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M3 10a2 2 0 0 1 .709-1.528l7-5.999a2 2 0 0 1 2.582 0l7 5.999A2 2 0 0 1 21 10v9a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z" })
+  ] });
+}
+function IconCalendar(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M8 2v4" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M16 2v4" }),
+    /* @__PURE__ */ jsxRuntime.jsx("rect", { width: "18", height: "18", x: "3", y: "4", rx: "2" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M3 10h18" })
+  ] });
+}
+function IconBell(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M6 8a6 6 0 0 1 12 0c0 7 3 9 3 9H3s3-2 3-9" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M10.3 21a1.94 1.94 0 0 0 3.4 0" })
+  ] });
+}
+function IconMessageCircle(props) {
+  return /* @__PURE__ */ jsxRuntime.jsx("svg", { ...iconProps, ...props, children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M7.9 20A9 9 0 1 0 4 16.1L2 22z" }) });
+}
+function IconUsers(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2" }),
+    /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "9", cy: "7", r: "4" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M22 21v-2a4 4 0 0 0-3-3.87" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M16 3.13a4 4 0 0 1 0 7.75" })
+  ] });
+}
+function IconSettings(props) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { ...iconProps, ...props, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M12.22 2h-.44a2 2 0 0 0-2 2v.18a2 2 0 0 1-1 1.73l-.43.25a2 2 0 0 1-2 0l-.15-.08a2 2 0 0 0-2.73.73l-.22.38a2 2 0 0 0 .73 2.73l.15.1a2 2 0 0 1 1 1.72v.51a2 2 0 0 1-1 1.74l-.15.09a2 2 0 0 0-.73 2.73l.22.38a2 2 0 0 0 2.73.73l.15-.08a2 2 0 0 1 2 0l.43.25a2 2 0 0 1 1 1.73V20a2 2 0 0 0 2 2h.44a2 2 0 0 0 2-2v-.18a2 2 0 0 1 1-1.73l.43-.25a2 2 0 0 1 2 0l.15.08a2 2 0 0 0 2.73-.73l.22-.39a2 2 0 0 0-.73-2.73l-.15-.08a2 2 0 0 1-1-1.74v-.5a2 2 0 0 1 1-1.74l.15-.09a2 2 0 0 0 .73-2.73l-.22-.38a2 2 0 0 0-2.73-.73l-.15.08a2 2 0 0 1-2 0l-.43-.25a2 2 0 0 1-1-1.73V4a2 2 0 0 0-2-2z" }),
+    /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "12", cy: "12", r: "3" })
+  ] });
+}
+const DialogContext = react.createContext({ open: false, onOpenChange: () => {
+} });
+function Dialog({ open, onOpenChange, children }) {
+  react.useEffect(() => {
+    if (open) {
+      document.body.style.overflow = "hidden";
+    } else {
+      document.body.style.overflow = "";
+    }
+    return () => {
+      document.body.style.overflow = "";
+    };
+  }, [open]);
+  if (!open) return null;
+  return /* @__PURE__ */ jsxRuntime.jsx(DialogContext.Provider, { value: { open, onOpenChange }, children });
+}
+function DialogContent({ children, className = "" }) {
+  const { onOpenChange } = react.useContext(DialogContext);
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { position: "fixed", inset: 0, zIndex: 50, display: "flex", alignItems: "center", justifyContent: "center" }, children: [
+    /* @__PURE__ */ jsxRuntime.jsx(
+      "div",
+      {
+        style: { position: "fixed", inset: 0, backgroundColor: "rgba(0,0,0,0.5)" },
+        onClick: () => onOpenChange(false)
+      }
+    ),
+    /* @__PURE__ */ jsxRuntime.jsxs(
+      "div",
+      {
+        className,
+        style: {
+          position: "relative",
+          zIndex: 51,
+          width: "100%",
+          maxWidth: "28rem",
+          margin: "1rem",
+          padding: "1.5rem",
+          borderRadius: "0.75rem",
+          backgroundColor: "white",
+          boxShadow: "0 25px 50px -12px rgba(0,0,0,0.25)",
+          maxHeight: "90vh",
+          overflowY: "auto"
+        },
+        children: [
+          /* @__PURE__ */ jsxRuntime.jsx(
+            "button",
+            {
+              onClick: () => onOpenChange(false),
+              style: { position: "absolute", right: "1rem", top: "1rem", background: "none", border: "none", cursor: "pointer", fontSize: "1.25rem", color: "#9ca3af", lineHeight: 1 },
+              "aria-label": "Close",
+              children: "✕"
+            }
+          ),
+          children
+        ]
+      }
+    )
+  ] });
+}
+function DialogHeader({ children, className = "", style }) {
+  return /* @__PURE__ */ jsxRuntime.jsx("div", { className, style: { marginBottom: "0.5rem", ...style }, children });
+}
+function DialogTitle({ children, className = "" }) {
+  return /* @__PURE__ */ jsxRuntime.jsx("h2", { className, style: { fontSize: "1.25rem", fontWeight: 600, color: "#111827" }, children });
+}
+function DialogDescription({ children, className = "" }) {
+  return /* @__PURE__ */ jsxRuntime.jsx("p", { className, style: { fontSize: "0.875rem", color: "#6b7280", marginTop: "0.25rem" }, children });
+}
+const Button = react.forwardRef(({
+  variant = "default",
+  size = "default",
+  className = "",
+  style,
+  disabled,
+  children,
+  ...props
+}, ref) => {
+  const baseStyle = {
+    display: "inline-flex",
+    alignItems: "center",
+    justifyContent: "center",
+    borderRadius: "0.5rem",
+    fontWeight: 500,
+    cursor: disabled ? "not-allowed" : "pointer",
+    transition: "all 0.15s",
+    border: "none",
+    opacity: disabled ? 0.5 : 1,
+    fontSize: size === "sm" ? "0.875rem" : "0.9375rem",
+    padding: size === "sm" ? "0.375rem 0.75rem" : size === "lg" ? "0.75rem 1.5rem" : "0.625rem 1rem",
+    height: size === "sm" ? "2rem" : size === "lg" ? "3rem" : "2.5rem",
+    ...variant === "default" ? { backgroundColor: "#002147", color: "white" } : {},
+    ...variant === "outline" ? { backgroundColor: "transparent", border: "1px solid #d1d5db", color: "#374151" } : {},
+    ...variant === "ghost" ? { backgroundColor: "transparent", color: "#374151" } : {},
+    ...style
+  };
+  return /* @__PURE__ */ jsxRuntime.jsx("button", { ref, className, style: baseStyle, disabled, ...props, children });
+});
+Button.displayName = "Button";
+const Input = react.forwardRef(
+  ({ className = "", style, ...props }, ref) => {
+    return /* @__PURE__ */ jsxRuntime.jsx(
+      "input",
+      {
+        ref,
+        className,
+        style: {
+          width: "100%",
+          padding: "0.5rem 0.75rem",
+          borderRadius: "0.375rem",
+          border: "1px solid #d1d5db",
+          fontSize: "0.9375rem",
+          outline: "none",
+          transition: "border-color 0.15s",
+          backgroundColor: "#f9fafb",
+          color: "#111827",
+          ...style
+        },
+        ...props
+      }
+    );
+  }
+);
+Input.displayName = "Input";
+const Label = react.forwardRef(
+  ({ className = "", style, ...props }, ref) => {
+    return /* @__PURE__ */ jsxRuntime.jsx(
+      "label",
+      {
+        ref,
+        className,
+        style: { fontSize: "0.875rem", fontWeight: 500, color: "#374151", ...style },
+        ...props
+      }
+    );
+  }
+);
+Label.displayName = "Label";
+const RadioGroupContext = react.createContext({ value: "", onValueChange: () => {
+} });
+function RadioGroup({ value, onValueChange, children, className = "" }) {
+  return /* @__PURE__ */ jsxRuntime.jsx(RadioGroupContext.Provider, { value: { value, onValueChange }, children: /* @__PURE__ */ jsxRuntime.jsx("div", { className, children }) });
+}
+function RadioGroupItem({ value, id }) {
+  const { value: groupValue, onValueChange } = react.useContext(RadioGroupContext);
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    "input",
+    {
+      type: "radio",
+      id,
+      checked: groupValue === value,
+      onChange: () => onValueChange(value),
+      style: { width: "1rem", height: "1rem", accentColor: "#002147" }
+    }
+  );
+}
+if (typeof document !== "undefined") {
+  const styleId = "ollaid-sso-keyframes";
+  if (!document.getElementById(styleId)) {
+    const style = document.createElement("style");
+    style.id = styleId;
+    style.textContent = `@keyframes spin { to { transform: rotate(360deg); } }`;
+    document.head.appendChild(style);
+  }
+}
+function OTPInput({
+  length = 6,
+  value,
+  onChange,
+  onComplete,
+  disabled = false,
+  autoFocus = true
+}) {
+  const inputRefs = react.useRef([]);
+  const [activeIndex, setActiveIndex] = react.useState(0);
+  react.useEffect(() => {
+    inputRefs.current = inputRefs.current.slice(0, length);
+  }, [length]);
+  react.useEffect(() => {
+    if (autoFocus && inputRefs.current[0]) inputRefs.current[0].focus();
+  }, [autoFocus]);
+  react.useEffect(() => {
+    if (value.length === length && onComplete) onComplete(value);
+  }, [value, length, onComplete]);
+  const handleChange = (index, char) => {
+    var _a;
+    if (disabled) return;
+    const digit = char.replace(/[^0-9]/g, "");
+    if (!digit) return;
+    const newValue = value.split("");
+    newValue[index] = digit;
+    onChange(newValue.join("").slice(0, length));
+    if (index < length - 1) {
+      (_a = inputRefs.current[index + 1]) == null ? void 0 : _a.focus();
+      setActiveIndex(index + 1);
+    }
+  };
+  const handleKeyDown = (index, e) => {
+    var _a, _b, _c;
+    if (disabled) return;
+    if (e.key === "Backspace") {
+      e.preventDefault();
+      const newValue = value.split("");
+      if (value[index]) {
+        newValue[index] = "";
+        onChange(newValue.join(""));
+      } else if (index > 0) {
+        newValue[index - 1] = "";
+        onChange(newValue.join(""));
+        (_a = inputRefs.current[index - 1]) == null ? void 0 : _a.focus();
+        setActiveIndex(index - 1);
+      }
+    } else if (e.key === "ArrowLeft" && index > 0) {
+      (_b = inputRefs.current[index - 1]) == null ? void 0 : _b.focus();
+      setActiveIndex(index - 1);
+    } else if (e.key === "ArrowRight" && index < length - 1) {
+      (_c = inputRefs.current[index + 1]) == null ? void 0 : _c.focus();
+      setActiveIndex(index + 1);
+    }
+  };
+  const handlePaste = (e) => {
+    var _a;
+    if (disabled) return;
+    e.preventDefault();
+    const pasted = e.clipboardData.getData("text").replace(/[^0-9]/g, "");
+    if (pasted) {
+      const newValue = pasted.slice(0, length);
+      onChange(newValue);
+      const focusIndex = Math.min(newValue.length, length - 1);
+      (_a = inputRefs.current[focusIndex]) == null ? void 0 : _a.focus();
+      setActiveIndex(focusIndex);
+    }
+  };
+  return /* @__PURE__ */ jsxRuntime.jsx("div", { style: { display: "flex", alignItems: "center", justifyContent: "center", gap: "0.5rem" }, children: Array.from({ length }).map((_, index) => /* @__PURE__ */ jsxRuntime.jsx(
+    "input",
+    {
+      ref: (el) => inputRefs.current[index] = el,
+      type: "text",
+      inputMode: "numeric",
+      maxLength: 1,
+      value: value[index] || "",
+      onChange: (e) => handleChange(index, e.target.value),
+      onKeyDown: (e) => handleKeyDown(index, e),
+      onPaste: handlePaste,
+      onFocus: () => setActiveIndex(index),
+      disabled,
+      "aria-label": `Digit ${index + 1}`,
+      style: {
+        width: "2.5rem",
+        height: "3rem",
+        textAlign: "center",
+        fontSize: "1.25rem",
+        fontWeight: 600,
+        borderRadius: "0.375rem",
+        border: "2px solid",
+        borderColor: activeIndex === index && !disabled ? "hsl(var(--primary, 222 47% 11%))" : value[index] ? "hsl(var(--primary, 222 47% 11%) / 0.5)" : "#d1d5db",
+        backgroundColor: value[index] ? "hsl(var(--primary, 222 47% 11%) / 0.05)" : "white",
+        outline: "none",
+        transition: "all 0.2s",
+        opacity: disabled ? 0.5 : 1,
+        cursor: disabled ? "not-allowed" : "text"
+      }
+    },
+    index
+  )) });
+}
+const MAX_LOGS = 50;
+let apiLogs = [];
+let listeners = [];
+function notifyListeners() {
+  listeners.forEach((fn) => fn([...apiLogs]));
+}
+function logApiCall(method, endpoint, requestBody, requestHeaders) {
+  const id = `${Date.now()}-${Math.random().toString(36).substring(2, 7)}`;
+  const log = {
+    id,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    method,
+    endpoint,
+    requestBody,
+    requestHeaders,
+    responseStatus: null,
+    responseBody: null,
+    duration: 0
+  };
+  apiLogs.unshift(log);
+  if (apiLogs.length > MAX_LOGS) {
+    apiLogs = apiLogs.slice(0, MAX_LOGS);
+  }
+  notifyListeners();
+  return id;
+}
+function logApiResponse(logId, responseStatus, responseBody, startTime, error) {
+  const log = apiLogs.find((l) => l.id === logId);
+  if (log) {
+    log.responseStatus = responseStatus;
+    log.responseBody = responseBody;
+    log.duration = Date.now() - startTime;
+    log.error = error;
+    notifyListeners();
+  }
+}
+function clearApiLogs() {
+  apiLogs = [];
+  notifyListeners();
+}
+function subscribeToLogs(callback) {
+  listeners.push(callback);
+  return () => {
+    listeners = listeners.filter((fn) => fn !== callback);
+  };
+}
+function exportLogsAsText() {
+  if (apiLogs.length === 0) return "Aucun appel API enregistré.";
+  const lines = [
+    "=".repeat(60),
+    "NATIVE SSO DEBUG LOGS",
+    `Exporté le: ${(/* @__PURE__ */ new Date()).toISOString()}`,
+    "=".repeat(60),
+    ""
+  ];
+  apiLogs.slice().reverse().forEach((log, index) => {
+    const emoji = log.responseStatus === null ? "⏳" : log.responseStatus >= 200 && log.responseStatus < 300 ? "✅" : "❌";
+    lines.push(`[${index + 1}] ${emoji} ${log.method} ${log.endpoint}`);
+    lines.push(`    Status: ${log.responseStatus ?? "En cours..."} | Durée: ${log.duration}ms`);
+    if (log.requestBody) lines.push(`    Request: ${JSON.stringify(log.requestBody)}`);
+    if (log.responseBody) lines.push(`    Response: ${JSON.stringify(log.responseBody)}`);
+    if (log.error) lines.push(`    ⚠️ Error: ${log.error}`);
+    lines.push("");
+  });
+  return lines.join("\n");
+}
+class ApiError extends Error {
+  constructor(message, type, statusCode, errorType, response) {
+    super(message);
+    __publicField(this, "type");
+    __publicField(this, "statusCode");
+    __publicField(this, "errorType");
+    __publicField(this, "response");
+    this.name = "ApiError";
+    this.type = type;
+    this.statusCode = statusCode;
+    this.errorType = errorType;
+    this.response = response;
+  }
+}
+let config = {
+  saasApiUrl: "",
+  iamApiUrl: "",
+  timeout: 3e4,
+  debug: false
+};
+const setNativeAuthConfig = (newConfig) => {
+  config = { ...config, ...newConfig };
+  if (config.debug) {
+    console.log("🔐 @ollaid/native-sso Config:", {
+      saasApiUrl: config.saasApiUrl,
+      iamApiUrl: config.iamApiUrl
+    });
+  }
+};
+const getNativeAuthConfig = () => ({ ...config });
+const isDebugMode = () => config.debug === true;
+const DEVICE_ID_KEY = "native_sso_device_id";
+const getDeviceId = () => {
+  if (typeof localStorage === "undefined") return "";
+  let deviceId = localStorage.getItem(DEVICE_ID_KEY);
+  if (!deviceId) {
+    deviceId = `nat_${Date.now()}_${Math.random().toString(36).substring(2, 15)}`;
+    localStorage.setItem(DEVICE_ID_KEY, deviceId);
+  }
+  return deviceId;
+};
+const STORAGE = {
+  AUTH_TOKEN: "auth_token",
+  TOKEN: "token",
+  USER: "user",
+  ACCOUNT_TYPE: "account_type"
+};
+const setAuthToken = (token) => {
+  if (typeof localStorage !== "undefined") {
+    localStorage.setItem(STORAGE.AUTH_TOKEN, token);
+    localStorage.setItem(STORAGE.TOKEN, token);
+  }
+};
+const getAuthToken = () => {
+  if (typeof localStorage === "undefined") return null;
+  return localStorage.getItem(STORAGE.AUTH_TOKEN) || localStorage.getItem(STORAGE.TOKEN);
+};
+const clearAuthToken = () => {
+  if (typeof localStorage !== "undefined") {
+    localStorage.removeItem(STORAGE.AUTH_TOKEN);
+    localStorage.removeItem(STORAGE.TOKEN);
+    localStorage.removeItem(STORAGE.USER);
+    localStorage.removeItem(STORAGE.ACCOUNT_TYPE);
+  }
+};
+const setAuthUser = (user) => {
+  if (typeof localStorage !== "undefined") {
+    localStorage.setItem(STORAGE.USER, JSON.stringify(user));
+  }
+};
+const getAuthUser = () => {
+  if (typeof localStorage === "undefined") return null;
+  const user = localStorage.getItem(STORAGE.USER);
+  if (!user) return null;
+  try {
+    return JSON.parse(user);
+  } catch {
+    localStorage.removeItem(STORAGE.USER);
+    return null;
+  }
+};
+const getAccountType = () => {
+  if (typeof localStorage === "undefined") return null;
+  return localStorage.getItem(STORAGE.ACCOUNT_TYPE);
+};
+async function fetchWithTimeout(url, options, timeout) {
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), timeout);
+  const method = options.method || "GET";
+  const logId = isDebugMode() ? logApiCall(method, url, options.body ? JSON.parse(options.body) : void 0) : null;
+  const startTime = Date.now();
+  try {
+    const response = await fetch(url, {
+      ...options,
+      signal: controller.signal
+    });
+    clearTimeout(timeoutId);
+    const contentType = response.headers.get("content-type");
+    if (!(contentType == null ? void 0 : contentType.includes("application/json"))) {
+      const text = await response.text();
+      if (isDebugMode()) {
+        console.error("❌ Réponse non-JSON:", text.substring(0, 500));
+        if (logId) logApiResponse(logId, response.status, { raw: text.substring(0, 200) }, startTime, "Non-JSON response");
+      }
+      throw new ApiError(`Erreur serveur (${response.status})`, "server", response.status);
+    }
+    const data = await response.json();
+    if (!response.ok) {
+      if (logId) logApiResponse(logId, response.status, data, startTime, data.message);
+      throw new ApiError(
+        data.message || `Erreur ${response.status}`,
+        response.status === 401 ? "auth" : response.status >= 500 ? "server" : "validation",
+        response.status,
+        data.error_type,
+        data
+      );
+    }
+    if (logId) logApiResponse(logId, response.status, data, startTime);
+    return data;
+  } catch (error) {
+    clearTimeout(timeoutId);
+    if (error instanceof ApiError) throw error;
+    if (error instanceof Error) {
+      if (error.name === "AbortError") {
+        if (logId) logApiResponse(logId, 0, null, startTime, "Timeout");
+        throw new ApiError("Délai d'attente dépassé", "timeout");
+      }
+      if (error instanceof TypeError) {
+        if (logId) logApiResponse(logId, 0, null, startTime, "Network error");
+        throw new ApiError("Impossible de contacter le serveur", "network");
+      }
+    }
+    if (logId) logApiResponse(logId, 0, null, startTime, "Unknown error");
+    throw new ApiError("Erreur inattendue", "unknown");
+  }
+}
+function getHeaders(token) {
+  const headers = {
+    "Content-Type": "application/json",
+    "Accept": "application/json"
+  };
+  const deviceId = getDeviceId();
+  if (deviceId) {
+    headers["X-Device-Id"] = deviceId;
+  }
+  if (token) {
+    headers["Authorization"] = `Bearer ${token}`;
+  }
+  return headers;
+}
+let credentials = null;
+const nativeAuthService = {
+  hasCredentials() {
+    return credentials !== null;
+  },
+  getCredentials() {
+    return credentials ? { ...credentials } : null;
+  },
+  async loadCredentials() {
+    const config2 = getNativeAuthConfig();
+    if (!config2.saasApiUrl) {
+      throw new ApiError("saasApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [SaaS] GET /native/config");
+    }
+    const response = await fetchWithTimeout(
+      `${config2.saasApiUrl}/native/config`,
+      { method: "GET", headers: getHeaders() },
+      config2.timeout || 3e4
+    );
+    if (!response.success || !response.encrypted_credentials || !response.app_key) {
+      throw new ApiError("Configuration invalide reçue du SaaS (app_key ou encrypted_credentials manquant)", "server");
+    }
+    credentials = {
+      appKey: response.app_key,
+      encryptedCredentials: response.encrypted_credentials
+    };
+    if (typeof response.debug === "boolean") {
+      const currentConfig = getNativeAuthConfig();
+      if (currentConfig.debug !== true) {
+        setNativeAuthConfig({ debug: response.debug });
+      }
+    }
+    if (isDebugMode()) {
+      console.log("✅ [SaaS] Credentials chargés (debug:", response.debug ?? "non défini", ")");
+    }
+    return credentials;
+  },
+  async encrypt(type, data) {
+    if (!credentials) {
+      throw new ApiError("Credentials non chargés. Appelez loadCredentials() d'abord.", "auth");
+    }
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    const payload = {
+      type,
+      app_key: credentials.appKey,
+      encrypted_credentials: credentials.encryptedCredentials,
+      ...data
+    };
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/encrypt", { type, ...data });
+    }
+    const response = await fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/encrypt`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify(payload)
+      },
+      config2.timeout || 3e4
+    );
+    if (isDebugMode()) {
+      console.log("✅ [IAM] native_token reçu, expire dans", response.expires_in, "s");
+    }
+    return response;
+  },
+  async init(nativeToken) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/init");
+    }
+    const response = await fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/init`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({ native_token: nativeToken })
+      },
+      config2.timeout || 3e4
+    );
+    if (isDebugMode()) {
+      console.log("✅ [IAM] Init:", { status: response.status, hasProcessToken: !!response.process_token });
+    }
+    return response;
+  },
+  async validate(processToken, creds) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/validate");
+    }
+    const response = await fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/validate`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          process_token: processToken,
+          ...creds
+        })
+      },
+      config2.timeout || 3e4
+    );
+    if (isDebugMode()) {
+      console.log("✅ [IAM] Validate:", {
+        hasCallback: !!response.callback_token,
+        requires2fa: response.requires_2fa
+      });
+    }
+    return response;
+  },
+  async verifyTotp(processToken, totpCode) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/verify-totp");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/verify-totp`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          process_token: processToken,
+          totp_code: totpCode
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  async grantAccess(processToken) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/grant-access");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/grant-access`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({ process_token: processToken })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  async resendOtp(processToken) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/resend-otp");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/resend-otp`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({ process_token: processToken })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  async exchange(callbackToken) {
+    var _a;
+    const config2 = getNativeAuthConfig();
+    if (!config2.saasApiUrl) {
+      throw new ApiError("saasApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [SaaS] POST /native/exchange");
+    }
+    const response = await fetchWithTimeout(
+      `${config2.saasApiUrl}/native/exchange`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({ callback_token: callbackToken })
+      },
+      config2.timeout || 3e4
+    );
+    if (response.success && response.token) {
+      setAuthToken(response.token);
+      if (response.user) {
+        setAuthUser(response.user);
+      }
+    }
+    if (isDebugMode()) {
+      console.log("✅ [SaaS] Session établie:", { user: (_a = response.user) == null ? void 0 : _a.name });
+    }
+    return response;
+  },
+  async checkToken(token) {
+    const cfg = getNativeAuthConfig();
+    if (!cfg.saasApiUrl) {
+      throw new ApiError("saasApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [SaaS] POST /native/check-token");
+    }
+    try {
+      const response = await fetchWithTimeout(
+        `${cfg.saasApiUrl}/native/check-token`,
+        {
+          method: "POST",
+          headers: getHeaders(token)
+        },
+        1e4
+      );
+      return { valid: response.valid !== false, user_infos: response.user_infos };
+    } catch (err) {
+      if (err instanceof ApiError && err.statusCode === 401) {
+        return { valid: false };
+      }
+      throw err;
+    }
+  },
+  async logout(token) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.saasApiUrl) {
+      throw new ApiError("saasApiUrl non configurée", "unknown");
+    }
+    try {
+      const response = await fetchWithTimeout(
+        `${config2.saasApiUrl}/native/logout`,
+        {
+          method: "POST",
+          headers: getHeaders(token)
+        },
+        config2.timeout || 3e4
+      );
+      clearAuthToken();
+      credentials = null;
+      return response;
+    } catch {
+      clearAuthToken();
+      credentials = null;
+      return { success: true };
+    }
+  },
+  clearCredentials() {
+    credentials = null;
+  },
+  // ============================================
+  // High-level methods
+  // ============================================
+  async loginEmail(email, accountType = "user") {
+    const { native_token } = await this.encrypt("login_email", {
+      email,
+      account_type: accountType
+    });
+    return this.init(native_token);
+  },
+  async loginPhone(ccphone, phone, accountType = "user") {
+    const { native_token } = await this.encrypt("login_phone", {
+      ccphone,
+      phone,
+      account_type: accountType
+    });
+    return this.init(native_token);
+  },
+  async loginAccessOtp(otpCode) {
+    const { native_token } = await this.encrypt("login_access_otp", {
+      otp_code: otpCode.replace(/[\s-]/g, "")
+    });
+    return this.init(native_token);
+  },
+  async register(data) {
+    const { native_token } = await this.encrypt("register", {
+      ...data,
+      registration_type: data.registration_type || "email"
+    });
+    return this.init(native_token);
+  },
+  async registerPhoneOnly(data) {
+    if (data.ccphone !== "+221") {
+      throw new ApiError(
+        "L'inscription par téléphone est réservée aux numéros sénégalais (+221)",
+        "validation",
+        422,
+        "invalid_country_code"
+      );
+    }
+    const { native_token } = await this.encrypt("register", {
+      ...data,
+      email: "",
+      registration_type: "phone"
+    });
+    return this.init(native_token);
+  },
+  async recoverPassword(method, identifier) {
+    const { native_token } = await this.encrypt("recovery_password", {
+      method,
+      ...identifier
+    });
+    return this.init(native_token);
+  }
+};
+function getIAMHeaders() {
+  const creds = nativeAuthService.getCredentials();
+  if (!creds) {
+    throw new ApiError("Credentials non chargés. Appelez loadCredentials() d'abord.", "auth");
+  }
+  return {
+    "Content-Type": "application/json",
+    "Accept": "application/json"
+  };
+}
+const mobilePasswordService = {
+  hasCredentials() {
+    return nativeAuthService.hasCredentials();
+  },
+  async loadCredentials() {
+    return nativeAuthService.loadCredentials();
+  },
+  async initRecovery(email) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    if (!nativeAuthService.hasCredentials()) {
+      await nativeAuthService.loadCredentials();
+    }
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/password/init", { email });
+    }
+    const response = await fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/password/init`,
+      {
+        method: "POST",
+        headers: getIAMHeaders(),
+        body: JSON.stringify({ email })
+      },
+      config2.timeout || 3e4
+    );
+    if (isDebugMode()) {
+      console.log("✅ [IAM] Init recovery:", {
+        status: response.status,
+        hasOtp: !!response.otp_code
+      });
+    }
+    return response;
+  },
+  async selectMethod(processToken, receiveChoice) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/password/select-method", { receiveChoice });
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/password/select-method`,
+      {
+        method: "POST",
+        headers: getIAMHeaders(),
+        body: JSON.stringify({
+          process_token: processToken,
+          receive_choice: receiveChoice
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  validateOtpLocally(inputCode, storedCode) {
+    return inputCode === storedCode;
+  },
+  async reset(processToken, password) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/password/reset");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/password/reset`,
+      {
+        method: "POST",
+        headers: getIAMHeaders(),
+        body: JSON.stringify({
+          process_token: processToken,
+          password,
+          password_confirmation: password
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  async resendOtp(processToken) {
+    const config2 = getNativeAuthConfig();
+    if (!config2.iamApiUrl) {
+      throw new ApiError("iamApiUrl non configurée", "unknown");
+    }
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/password/resend");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/password/resend`,
+      {
+        method: "POST",
+        headers: getIAMHeaders(),
+        body: JSON.stringify({ process_token: processToken })
+      },
+      config2.timeout || 3e4
+    );
+  }
+};
+function getErrorMessage$2(err, context) {
+  if (err instanceof ApiError) {
+    return { message: err.message, type: err.type };
+  }
+  if (err instanceof Error) {
+    if (err.message.includes("fetch") || err.message.includes("network")) {
+      return { message: "Vérifiez votre connexion Internet", type: "network" };
+    }
+    if (err.message.includes("timeout")) {
+      return { message: "Le serveur met trop de temps à répondre", type: "timeout" };
+    }
+    return { message: err.message, type: "unknown" };
+  }
+  return { message: `Erreur lors de ${context}`, type: "unknown" };
+}
+function useMobilePassword(options) {
+  const { saasApiUrl, iamApiUrl, autoLoadCredentials = true, debug = false } = options;
+  const configuredRef = react.useRef(false);
+  react.useEffect(() => {
+    if (!configuredRef.current) {
+      setNativeAuthConfig({ saasApiUrl, iamApiUrl, debug });
+      configuredRef.current = true;
+    }
+  }, [saasApiUrl, iamApiUrl, debug]);
+  const [state, setState] = react.useState({
+    credentialsLoaded: false,
+    processToken: null,
+    status: "idle",
+    storedOtp: null,
+    receiveMode: null,
+    maskedEmail: null,
+    maskedPhone: null,
+    loading: false,
+    error: null,
+    errorType: null
+  });
+  react.useEffect(() => {
+    if (autoLoadCredentials && !state.credentialsLoaded) {
+      loadCredentials();
+    }
+  }, [autoLoadCredentials, state.credentialsLoaded]);
+  const loadCredentials = react.useCallback(async () => {
+    setState((prev) => ({ ...prev, loading: true, error: null, errorType: null }));
+    try {
+      await mobilePasswordService.loadCredentials();
+      setState((prev) => ({ ...prev, credentialsLoaded: true, loading: false }));
+      return { success: true };
+    } catch (err) {
+      const { message, type } = getErrorMessage$2(err, "le chargement");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, []);
+  const initRecovery = react.useCallback(async (email) => {
+    setState((prev) => ({ ...prev, loading: true, error: null, errorType: null }));
+    try {
+      if (!mobilePasswordService.hasCredentials()) {
+        await mobilePasswordService.loadCredentials();
+      }
+      const response = await mobilePasswordService.initRecovery(email);
+      if (response.success && response.process_token) {
+        if (response.status === "choice_required") {
+          setState((prev) => ({
+            ...prev,
+            credentialsLoaded: true,
+            processToken: response.process_token,
+            status: "choice_required",
+            maskedEmail: response.masked_email || null,
+            maskedPhone: response.masked_phone || null,
+            loading: false
+          }));
+          return { success: true, status: "choice_required" };
+        } else {
+          setState((prev) => ({
+            ...prev,
+            credentialsLoaded: true,
+            processToken: response.process_token,
+            status: "pending_otp",
+            storedOtp: response.otp_code || null,
+            receiveMode: "email",
+            maskedEmail: response.masked_email || null,
+            loading: false
+          }));
+          return { success: true, status: "pending_otp" };
+        }
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Aucun compte trouvé avec cet email",
+        errorType: response.error_type || "unknown"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$2(err, "la recherche du compte");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, []);
+  const selectMethod = react.useCallback(async (choice) => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null, errorType: null }));
+    try {
+      const response = await mobilePasswordService.selectMethod(state.processToken, choice);
+      if (response.success) {
+        setState((prev) => ({
+          ...prev,
+          status: "pending_otp",
+          storedOtp: response.otp_code || null,
+          receiveMode: response.receive_mode || choice,
+          loading: false
+        }));
+        return { success: true };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Impossible d'envoyer le code",
+        errorType: response.error_type || "unknown"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$2(err, "l'envoi du code");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, [state.processToken]);
+  const verifyOtp = react.useCallback((inputCode) => {
+    if (!state.storedOtp) {
+      setState((prev) => ({ ...prev, error: "Session invalide", errorType: "invalid_session" }));
+      return false;
+    }
+    const isValid = mobilePasswordService.validateOtpLocally(inputCode, state.storedOtp);
+    if (isValid) {
+      setState((prev) => ({ ...prev, status: "pending_password", error: null, errorType: null }));
+      return true;
+    }
+    setState((prev) => ({ ...prev, error: "Code incorrect", errorType: "invalid_otp" }));
+    return false;
+  }, [state.storedOtp]);
+  const resetPassword = react.useCallback(async (password) => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null, errorType: null }));
+    try {
+      const response = await mobilePasswordService.reset(state.processToken, password);
+      if (response.success) {
+        setState((prev) => ({ ...prev, status: "completed", loading: false }));
+        return { success: true };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Erreur lors de la réinitialisation",
+        errorType: response.error_type || "unknown"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$2(err, "la réinitialisation");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, [state.processToken]);
+  const resendOtp = react.useCallback(async () => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null, errorType: null }));
+    try {
+      const response = await mobilePasswordService.resendOtp(state.processToken);
+      if (response.success && response.otp_code) {
+        setState((prev) => ({ ...prev, storedOtp: response.otp_code, loading: false }));
+        return { success: true, cooldown: response.cooldown_remaining };
+      }
+      setState((prev) => ({ ...prev, loading: false }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$2(err, "le renvoi");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, [state.processToken]);
+  const reset = react.useCallback(() => {
+    setState({
+      credentialsLoaded: state.credentialsLoaded,
+      processToken: null,
+      status: "idle",
+      storedOtp: null,
+      receiveMode: null,
+      maskedEmail: null,
+      maskedPhone: null,
+      loading: false,
+      error: null,
+      errorType: null
+    });
+  }, [state.credentialsLoaded]);
+  const clearError = react.useCallback(() => {
+    setState((prev) => ({ ...prev, error: null, errorType: null }));
+  }, []);
+  return {
+    credentialsLoaded: state.credentialsLoaded,
+    processToken: state.processToken,
+    status: state.status,
+    storedOtp: state.storedOtp,
+    receiveMode: state.receiveMode,
+    maskedEmail: state.maskedEmail,
+    maskedPhone: state.maskedPhone,
+    loading: state.loading,
+    error: state.error,
+    errorType: state.errorType,
+    isCompleted: state.status === "completed",
+    isChoiceRequired: state.status === "choice_required",
+    isPendingOtp: state.status === "pending_otp",
+    isPendingPassword: state.status === "pending_password",
+    loadCredentials,
+    initRecovery,
+    selectMethod,
+    verifyOtp,
+    resetPassword,
+    resendOtp,
+    reset,
+    clearError
+  };
+}
+const C$3 = {
+  primary: "#002147",
+  green: "#16a34a",
+  greenBg: "#dcfce7",
+  gray200: "#e5e7eb",
+  gray500: "#6b7280",
+  gray700: "#374151",
+  red: "#dc2626",
+  redBg: "#fef2f2"
+};
+const iconCircle$2 = (bg, size = "3rem") => ({
+  margin: "0 auto",
+  width: size,
+  height: size,
+  backgroundColor: bg,
+  borderRadius: "50%",
+  display: "flex",
+  alignItems: "center",
+  justifyContent: "center"
+});
+const backBtnStyle$2 = {
+  position: "absolute",
+  left: "1rem",
+  top: "1rem",
+  background: "none",
+  border: "none",
+  cursor: "pointer",
+  padding: "0.5rem",
+  borderRadius: "0.375rem",
+  color: C$3.gray700,
+  zIndex: 10
+};
+function PasswordRecoveryModal({ open, onOpenChange, onSuccess, saasApiUrl, iamApiUrl, debug = false }) {
+  const {
+    status,
+    loading: pwLoading,
+    error: pwError,
+    receiveMode,
+    maskedEmail,
+    maskedPhone,
+    initRecovery,
+    selectMethod,
+    verifyOtp,
+    resetPassword,
+    resendOtp,
+    reset: resetHook,
+    clearError
+  } = useMobilePassword({ saasApiUrl, iamApiUrl, debug });
+  const [step, setStep] = react.useState("email");
+  const [email, setEmail] = react.useState("");
+  const [otp, setOtp] = react.useState("");
+  const [password, setPassword] = react.useState("");
+  const [confirmPassword, setConfirmPassword] = react.useState("");
+  const [localError, setLocalError] = react.useState(null);
+  const [selectedMethod, setSelectedMethod] = react.useState("email");
+  const [resendCooldown, setResendCooldown] = react.useState(0);
+  const error = localError || pwError;
+  react.useEffect(() => {
+    if (status === "choice_required") setStep("method-choice");
+    else if (status === "pending_otp") {
+      setStep("otp");
+      setResendCooldown(60);
+    } else if (status === "pending_password") setStep("password");
+    else if (status === "completed") setStep("success");
+  }, [status]);
+  react.useEffect(() => {
+    if (resendCooldown > 0) {
+      const timer = setTimeout(() => setResendCooldown(resendCooldown - 1), 1e3);
+      return () => clearTimeout(timer);
+    }
+  }, [resendCooldown]);
+  const resetState = () => {
+    setStep("email");
+    setEmail("");
+    setOtp("");
+    setPassword("");
+    setConfirmPassword("");
+    setLocalError(null);
+    setSelectedMethod("email");
+    setResendCooldown(0);
+    resetHook();
+  };
+  const handleClose = () => {
+    resetState();
+    onOpenChange(false);
+  };
+  const handleBackToLogin = () => {
+    resetState();
+    onSuccess();
+  };
+  const handleEmailSubmit = async () => {
+    setLocalError(null);
+    clearError();
+    if (!email.trim()) {
+      setLocalError("L'adresse email est requise");
+      return;
+    }
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email.trim())) {
+      setLocalError("Veuillez entrer une adresse email valide");
+      return;
+    }
+    await initRecovery(email.trim());
+  };
+  const handleMethodSubmit = async () => {
+    setLocalError(null);
+    clearError();
+    await selectMethod(selectedMethod);
+  };
+  const handleOTPSubmit = () => {
+    if (otp.length !== 6) {
+      setLocalError("Veuillez entrer le code à 6 chiffres");
+      return;
+    }
+    setLocalError(null);
+    clearError();
+    const isValid = verifyOtp(otp);
+    if (!isValid) setLocalError("Code incorrect");
+  };
+  const handleResendOTP = async () => {
+    if (resendCooldown > 0) return;
+    const result = await resendOtp();
+    if (result.success) {
+      setResendCooldown(result.cooldown || 60);
+      setOtp("");
+      setLocalError(null);
+    }
+  };
+  const handlePasswordSubmit = async () => {
+    if (password.length < 8) {
+      setLocalError("Le mot de passe doit contenir au moins 8 caractères");
+      return;
+    }
+    if (password !== confirmPassword) {
+      setLocalError("Les mots de passe ne correspondent pas");
+      return;
+    }
+    setLocalError(null);
+    clearError();
+    await resetPassword(password);
+  };
+  const goBack = () => {
+    setLocalError(null);
+    clearError();
+    if (step === "method-choice") {
+      setStep("email");
+      resetHook();
+    } else if (step === "otp") {
+      setStep(maskedPhone ? "method-choice" : "email");
+      resetHook();
+    } else if (step === "password") setStep("otp");
+  };
+  if (step === "success") {
+    return /* @__PURE__ */ jsxRuntime.jsx(Dialog, { open, onOpenChange: handleClose, children: /* @__PURE__ */ jsxRuntime.jsxs(DialogContent, { children: [
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: { ...iconCircle$2(C$3.greenBg), width: "5rem", height: "5rem" }, children: /* @__PURE__ */ jsxRuntime.jsx(IconCheckCircle2, { style: { width: "3rem", height: "3rem", color: C$3.green } }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Mot de passe modifié !" }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: "Votre mot de passe a été changé avec succès." })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: handleBackToLogin, style: { width: "100%", marginTop: "1rem" }, children: "Retour à la connexion" })
+    ] }) });
+  }
+  return /* @__PURE__ */ jsxRuntime.jsx(Dialog, { open, onOpenChange: handleClose, children: /* @__PURE__ */ jsxRuntime.jsxs(DialogContent, { children: [
+    step !== "email" && /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: goBack, style: backBtnStyle$2, type: "button", children: /* @__PURE__ */ jsxRuntime.jsx(IconArrowLeft, { style: { width: "1rem", height: "1rem" } }) }),
+    /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+      /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle$2(C$3.primary + "1a"), children: step === "otp" ? /* @__PURE__ */ jsxRuntime.jsx(IconKeyRound, { style: { width: "1.5rem", height: "1.5rem", color: C$3.primary } }) : /* @__PURE__ */ jsxRuntime.jsx(IconLock, { style: { width: "1.5rem", height: "1.5rem", color: C$3.primary } }) }),
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogTitle, { children: [
+        step === "email" && "Récupération de mot de passe",
+        step === "method-choice" && "Recevoir le code de vérification",
+        step === "otp" && "Vérification",
+        step === "password" && "Nouveau mot de passe"
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogDescription, { children: [
+        step === "email" && "Veuillez entrer votre adresse email",
+        step === "method-choice" && "Comment souhaitez-vous recevoir le code ?",
+        step === "otp" && (receiveMode === "phone" ? `Code envoyé par SMS au ${maskedPhone}` : `Code envoyé par email à ${maskedEmail}`),
+        step === "password" && "Définissez votre nouveau mot de passe"
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "1rem" }, children: [
+      error && /* @__PURE__ */ jsxRuntime.jsx("div", { style: { padding: "0.75rem", borderRadius: "0.375rem", backgroundColor: C$3.redBg, color: C$3.red, fontSize: "0.875rem" }, children: error }),
+      step === "email" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Label, { htmlFor: "recovery-email", children: "Adresse email" }),
+          /* @__PURE__ */ jsxRuntime.jsx(Input, { id: "recovery-email", type: "email", placeholder: "vous@exemple.com", value: email, onChange: (e) => setEmail(e.target.value), disabled: pwLoading })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: handleEmailSubmit, disabled: pwLoading, style: { width: "100%" }, children: pwLoading ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", gap: "0.5rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+          " Vérification..."
+        ] }) : "Continuer" }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { variant: "ghost", onClick: handleBackToLogin, style: { width: "100%" }, children: "Retour à la connexion" })
+      ] }),
+      step === "method-choice" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsx(RadioGroup, { value: selectedMethod, onValueChange: (v) => setSelectedMethod(v), children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "0.75rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", gap: "0.75rem", padding: "1rem", borderRadius: "0.5rem", border: `2px solid ${selectedMethod === "email" ? C$3.primary : C$3.gray200}`, cursor: "pointer" }, onClick: () => setSelectedMethod("email"), children: [
+            /* @__PURE__ */ jsxRuntime.jsx(RadioGroupItem, { value: "email", id: "method-email" }),
+            /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontWeight: 500 }, children: "Par email" }),
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontSize: "0.75rem", color: C$3.gray500 }, children: maskedEmail })
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", gap: "0.75rem", padding: "1rem", borderRadius: "0.5rem", border: `2px solid ${selectedMethod === "phone" ? C$3.primary : C$3.gray200}`, cursor: "pointer" }, onClick: () => setSelectedMethod("phone"), children: [
+            /* @__PURE__ */ jsxRuntime.jsx(RadioGroupItem, { value: "phone", id: "method-phone" }),
+            /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontWeight: 500 }, children: "Par SMS" }),
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontSize: "0.75rem", color: C$3.gray500 }, children: maskedPhone })
+            ] })
+          ] })
+        ] }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: handleMethodSubmit, disabled: pwLoading, style: { width: "100%" }, children: pwLoading ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", gap: "0.5rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+          " Envoi..."
+        ] }) : "Envoyer le code" })
+      ] }),
+      step === "otp" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsx(OTPInput, { value: otp, onChange: setOtp, disabled: pwLoading }),
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: { textAlign: "center", fontSize: "0.875rem" }, children: resendCooldown > 0 ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { color: C$3.gray500 }, children: [
+          "Renvoyer dans ",
+          resendCooldown,
+          "s"
+        ] }) : /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", style: { color: C$3.primary, background: "none", border: "none", cursor: "pointer", textDecoration: "underline" }, onClick: handleResendOTP, children: "Code non reçu ? Renvoyer" }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: handleOTPSubmit, disabled: otp.length !== 6, style: { width: "100%" }, children: "Vérifier" })
+      ] }),
+      step === "password" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Nouveau mot de passe" }),
+          /* @__PURE__ */ jsxRuntime.jsx(Input, { type: "password", placeholder: "Minimum 8 caractères", value: password, onChange: (e) => setPassword(e.target.value), disabled: pwLoading })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Confirmer le mot de passe" }),
+          /* @__PURE__ */ jsxRuntime.jsx(Input, { type: "password", placeholder: "Retapez votre mot de passe", value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), disabled: pwLoading })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: handlePasswordSubmit, disabled: pwLoading || !password || !confirmPassword, style: { width: "100%" }, children: pwLoading ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", gap: "0.5rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+          " Modification..."
+        ] }) : "Modifier le mot de passe" })
+      ] })
+    ] })
+  ] }) });
+}
+const FIRST_CHECK_DELAY = 2 * 60 * 1e3;
+const INTERVAL_DELAY = 5 * 60 * 1e3;
+async function checkTokenValidity(saasApiUrl, token, debug) {
+  if (typeof navigator !== "undefined" && !navigator.onLine) {
+    if (debug) console.log("🔄 [HealthCheck] Offline — skip");
+    throw new Error("offline");
+  }
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), 1e4);
+  try {
+    const response = await fetch(`${saasApiUrl}/native/check-token`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "Accept": "application/json",
+        "Authorization": `Bearer ${token}`
+      },
+      signal: controller.signal
+    });
+    clearTimeout(timeoutId);
+    if (response.status === 401) {
+      if (debug) console.log("🔄 [HealthCheck] Token invalide (401)");
+      return { valid: false };
+    }
+    if (!response.ok) {
+      if (debug) console.log(`🔄 [HealthCheck] Serveur erreur ${response.status} — session conservée`);
+      throw new Error(`server_error_${response.status}`);
+    }
+    const data = await response.json();
+    if (debug) console.log("🔄 [HealthCheck] Token valide ✅");
+    return {
+      valid: data.valid !== false,
+      user_infos: data.user_infos
+    };
+  } catch (error) {
+    clearTimeout(timeoutId);
+    if (error instanceof Error && error.message === "offline") {
+      throw error;
+    }
+    if (debug) {
+      const msg = error instanceof Error ? error.message : "unknown";
+      console.log(`🔄 [HealthCheck] Erreur réseau/serveur (${msg}) — session conservée`);
+    }
+    throw error;
+  }
+}
+function useTokenHealthCheck(options) {
+  const { enabled, saasApiUrl, onTokenInvalid, onUserUpdated, debug = false } = options;
+  const timerRef = react.useRef(null);
+  const intervalRef = react.useRef(null);
+  const enabledRef = react.useRef(enabled);
+  const callbacksRef = react.useRef({ onTokenInvalid, onUserUpdated });
+  enabledRef.current = enabled;
+  callbacksRef.current = { onTokenInvalid, onUserUpdated };
+  const performCheck = react.useCallback(async () => {
+    if (!enabledRef.current) return;
+    const token = typeof localStorage !== "undefined" ? localStorage.getItem(STORAGE.AUTH_TOKEN) || localStorage.getItem(STORAGE.TOKEN) : null;
+    if (!token) {
+      if (debug) console.log("🔄 [HealthCheck] Pas de token — arrêt");
+      return;
+    }
+    try {
+      const result = await checkTokenValidity(saasApiUrl, token, debug);
+      if (!result.valid) {
+        callbacksRef.current.onTokenInvalid();
+        return;
+      }
+      if (result.user_infos && callbacksRef.current.onUserUpdated) {
+        callbacksRef.current.onUserUpdated(result.user_infos);
+      }
+    } catch {
+    }
+  }, [saasApiUrl, debug]);
+  react.useEffect(() => {
+    if (timerRef.current) {
+      clearTimeout(timerRef.current);
+      timerRef.current = null;
+    }
+    if (intervalRef.current) {
+      clearInterval(intervalRef.current);
+      intervalRef.current = null;
+    }
+    if (!enabled || !saasApiUrl) return;
+    if (debug) console.log("🔄 [HealthCheck] Activé — premier check dans 2 min");
+    timerRef.current = setTimeout(() => {
+      performCheck();
+      intervalRef.current = setInterval(performCheck, INTERVAL_DELAY);
+    }, FIRST_CHECK_DELAY);
+    return () => {
+      if (timerRef.current) clearTimeout(timerRef.current);
+      if (intervalRef.current) clearInterval(intervalRef.current);
+    };
+  }, [enabled, saasApiUrl, performCheck, debug]);
+}
+function saveSession(exchangeResult, accountType) {
+  const sanctumToken = exchangeResult.auth_token || exchangeResult.token;
+  localStorage.setItem(STORAGE.AUTH_TOKEN, sanctumToken);
+  localStorage.setItem(STORAGE.TOKEN, sanctumToken);
+  const userToStore = exchangeResult.user_infos ? { ...exchangeResult.user, ...exchangeResult.user_infos } : exchangeResult.user;
+  const acctType = accountType === "phone-only" ? "client" : "user";
+  localStorage.setItem(STORAGE.USER, JSON.stringify(userToStore));
+  localStorage.setItem(STORAGE.ACCOUNT_TYPE, acctType);
+  return { token: sanctumToken, user: userToStore };
+}
+function clearSession() {
+  localStorage.removeItem(STORAGE.AUTH_TOKEN);
+  localStorage.removeItem(STORAGE.TOKEN);
+  localStorage.removeItem(STORAGE.USER);
+  localStorage.removeItem(STORAGE.ACCOUNT_TYPE);
+}
+function getErrorMessage$1(err, context) {
+  if (err instanceof Error) {
+    if (err.message.includes("fetch") || err.message.includes("network")) {
+      return { message: "Vérifiez votre connexion Internet", type: "network" };
+    }
+    if (err.message.includes("timeout")) {
+      return { message: "Le serveur met trop de temps à répondre", type: "timeout" };
+    }
+    return { message: err.message, type: "unknown" };
+  }
+  return { message: `Erreur lors de ${context}`, type: "unknown" };
+}
+function useNativeAuth(options) {
+  const { saasApiUrl, iamApiUrl, autoLoadCredentials = true, debug = false } = options;
+  const configuredRef = react.useRef(false);
+  react.useEffect(() => {
+    if (!configuredRef.current) {
+      setNativeAuthConfig({ saasApiUrl, iamApiUrl, debug });
+      configuredRef.current = true;
+    }
+  }, [saasApiUrl, iamApiUrl, debug]);
+  const [state, setState] = react.useState({
+    credentialsLoaded: false,
+    processToken: null,
+    status: null,
+    user: null,
+    application: null,
+    prompt: null,
+    alternativeMethod: null,
+    conflict: null,
+    loading: false,
+    error: null,
+    errorType: null,
+    otpMethod: null,
+    otpSentTo: null
+  });
+  const [accountType, setAccountType] = react.useState("email");
+  const handleTokenInvalid = react.useCallback(() => {
+    if (debug) console.log("🔐 [HealthCheck] Token invalide — déconnexion locale");
+    clearSession();
+    setState({
+      credentialsLoaded: false,
+      processToken: null,
+      status: null,
+      user: null,
+      application: null,
+      prompt: null,
+      alternativeMethod: null,
+      conflict: null,
+      loading: false,
+      error: null,
+      errorType: null,
+      otpMethod: null,
+      otpSentTo: null
+    });
+  }, [debug]);
+  const handleUserUpdated = react.useCallback((userInfos) => {
+    const storedRaw = localStorage.getItem(STORAGE.USER);
+    if (storedRaw) {
+      try {
+        const stored = JSON.parse(storedRaw);
+        const merged = { ...stored, ...userInfos };
+        localStorage.setItem(STORAGE.USER, JSON.stringify(merged));
+        setState((prev) => ({ ...prev, user: merged }));
+      } catch {
+      }
+    }
+  }, []);
+  useTokenHealthCheck({
+    enabled: state.status === "completed" && state.user !== null,
+    saasApiUrl,
+    onTokenInvalid: handleTokenInvalid,
+    onUserUpdated: handleUserUpdated,
+    debug
+  });
+  react.useEffect(() => {
+    const storedToken = localStorage.getItem(STORAGE.AUTH_TOKEN) || localStorage.getItem(STORAGE.TOKEN);
+    const storedUser = localStorage.getItem(STORAGE.USER);
+    if (storedToken && storedUser) {
+      try {
+        const user = JSON.parse(storedUser);
+        setState((prev) => ({ ...prev, user, status: "completed" }));
+      } catch {
+        clearSession();
+      }
+    }
+  }, []);
+  react.useEffect(() => {
+    if (autoLoadCredentials && !state.credentialsLoaded && !state.user) {
+      loadCredentials();
+    }
+  }, [autoLoadCredentials, state.credentialsLoaded, state.user]);
+  const loadCredentials = react.useCallback(async () => {
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      await nativeAuthService.loadCredentials();
+      setState((prev) => ({ ...prev, credentialsLoaded: true, loading: false }));
+      return { success: true };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "le chargement");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, []);
+  const loginWithEmail = react.useCallback(async (email, acctType = "user") => {
+    setState((prev) => ({ ...prev, loading: true, error: null, errorType: null }));
+    try {
+      if (!nativeAuthService.hasCredentials()) {
+        await nativeAuthService.loadCredentials();
+      }
+      const response = await nativeAuthService.loginEmail(email, acctType);
+      if (response.success && (response.status === "needs_access" || response.needs_access)) {
+        setState((prev) => ({
+          ...prev,
+          processToken: response.process_token || null,
+          status: "needs_access",
+          application: response.application || null,
+          prompt: response.prompt || null,
+          user: response.user ? {
+            reference: `USR-${response.user.id}`,
+            name: response.user.name,
+            email: response.user.email
+          } : null,
+          loading: false
+        }));
+        return { success: true, status: "needs_access" };
+      }
+      if (response.success && response.process_token) {
+        setState((prev) => ({
+          ...prev,
+          processToken: response.process_token,
+          status: response.status,
+          application: response.application || null,
+          prompt: response.prompt || null,
+          user: response.user ? {
+            reference: `USR-${response.user.id}`,
+            name: response.user.name,
+            email: response.user.email
+          } : null,
+          loading: false
+        }));
+        return { success: true, status: response.status };
+      }
+      if (response.error_type === "alias_disabled" && response.alternative_method) {
+        setState((prev) => ({
+          ...prev,
+          alternativeMethod: {
+            type: response.alternative_method,
+            value: response.alternative_method === "email" ? response.alternative_email : response.alternative_phone
+          },
+          loading: false,
+          error: "Cette méthode de connexion est désactivée",
+          errorType: "alias_disabled"
+        }));
+        return { success: false, error_type: "alias_disabled" };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Erreur d'authentification",
+        errorType: response.error_type || "unknown"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "l'authentification");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, []);
+  const loginWithPhone = react.useCallback(async (ccphone, phone, acctType = "user") => {
+    setState((prev) => ({ ...prev, loading: true, error: null, errorType: null }));
+    try {
+      if (!nativeAuthService.hasCredentials()) {
+        await nativeAuthService.loadCredentials();
+      }
+      const response = await nativeAuthService.loginPhone(ccphone, phone, acctType);
+      if (response.success && (response.status === "needs_access" || response.needs_access)) {
+        setState((prev) => ({
+          ...prev,
+          processToken: response.process_token || null,
+          status: "needs_access",
+          application: response.application || null,
+          user: response.user ? {
+            reference: `USR-${response.user.id}`,
+            name: response.user.name,
+            email: response.user.email
+          } : null,
+          loading: false
+        }));
+        return { success: true, status: "needs_access" };
+      }
+      if (response.success && response.process_token) {
+        setState((prev) => ({
+          ...prev,
+          processToken: response.process_token,
+          status: response.status,
+          application: response.application || null,
+          loading: false
+        }));
+        return { success: true, status: response.status };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Erreur d'authentification",
+        errorType: response.error_type || "unknown"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "l'authentification");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, []);
+  const loginWithAccessOtp = react.useCallback(async (otpCode) => {
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      if (!nativeAuthService.hasCredentials()) {
+        await nativeAuthService.loadCredentials();
+      }
+      const response = await nativeAuthService.loginAccessOtp(otpCode);
+      if (response.success && response.needs_access && response.process_token) {
+        setState((prev) => ({
+          ...prev,
+          processToken: response.process_token,
+          status: "needs_access",
+          application: response.application || null,
+          user: response.user ? {
+            reference: `USR-${response.user.id}`,
+            name: response.user.name,
+            email: response.user.email
+          } : null,
+          loading: false
+        }));
+        return { success: true, status: "needs_access" };
+      }
+      if (response.success && response.callback_token) {
+        setState((prev) => ({ ...prev, loading: false }));
+        return { success: true, status: "completed", callback_token: response.callback_token };
+      }
+      if (response.success && response.process_token) {
+        setState((prev) => ({
+          ...prev,
+          processToken: response.process_token,
+          status: response.status,
+          loading: false
+        }));
+        return { success: true, status: response.status };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Code invalide",
+        errorType: response.error_type || "invalid_otp"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "l'authentification");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, []);
+  const register = react.useCallback(async (data) => {
+    setState((prev) => ({ ...prev, loading: true, error: null, errorType: null }));
+    try {
+      if (!nativeAuthService.hasCredentials()) {
+        await nativeAuthService.loadCredentials();
+      }
+      const registrationType = accountType === "phone-only" ? "phone" : "email";
+      const response = await nativeAuthService.register({
+        ...data,
+        email: registrationType === "phone" ? "" : data.email,
+        registration_type: registrationType
+      });
+      if (response.success && response.process_token) {
+        setState((prev) => ({
+          ...prev,
+          processToken: response.process_token,
+          status: response.status,
+          otpMethod: response.otp_method || null,
+          otpSentTo: response.otp_sent_to || null,
+          conflict: response.conflict ? {
+            type: response.conflict.type,
+            maskedIdentifier: response.conflict.masked_identifier,
+            options: {
+              canLogin: response.conflict.options.can_login,
+              canRecoverByEmail: response.conflict.options.can_recover_by_email,
+              canRecoverBySms: response.conflict.options.can_recover_by_sms,
+              maskedEmail: response.conflict.options.masked_email,
+              maskedPhone: response.conflict.options.masked_phone
+            }
+          } : null,
+          loading: false
+        }));
+        return { success: true, status: response.status };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Erreur lors de l'inscription",
+        errorType: response.error_type || "unknown"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "l'inscription");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, [accountType]);
+  const submitPassword = react.useCallback(async (password) => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      const response = await nativeAuthService.validate(state.processToken, { password });
+      if (response.success && response.callback_token) {
+        const exchangeResult = await nativeAuthService.exchange(response.callback_token);
+        if (exchangeResult.success) {
+          const { user: savedUser } = saveSession(exchangeResult, accountType);
+          setState((prev) => ({
+            ...prev,
+            status: "completed",
+            user: savedUser,
+            processToken: null,
+            loading: false
+          }));
+          return { success: true, user: savedUser, callback_token: response.callback_token };
+        }
+        setState((prev) => ({
+          ...prev,
+          loading: false,
+          error: exchangeResult.message || "Erreur lors de l'échange",
+          errorType: "exchange_failed"
+        }));
+        return { success: false, error_type: "exchange_failed" };
+      }
+      if (response.requires_2fa) {
+        setState((prev) => ({ ...prev, status: "pending_2fa", loading: false }));
+        return { success: true, requires_2fa: true };
+      }
+      if (response.success && (response.status === "needs_access" || response.needs_access)) {
+        setState((prev) => ({
+          ...prev,
+          status: "needs_access",
+          processToken: response.process_token || prev.processToken,
+          application: response.application || prev.application,
+          user: response.user ? {
+            reference: `USR-${response.user.id}`,
+            name: response.user.name,
+            email: response.user.email
+          } : prev.user,
+          prompt: response.prompt || prev.prompt,
+          loading: false
+        }));
+        return { success: true, status: "needs_access" };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Mot de passe incorrect",
+        errorType: response.error_type || "invalid_password"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "la validation");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, [state.processToken]);
+  const submitOtp = react.useCallback(async (otpCode) => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      const response = await nativeAuthService.validate(state.processToken, { otp_code: otpCode });
+      if (response.success && response.callback_token) {
+        const exchangeResult = await nativeAuthService.exchange(response.callback_token);
+        if (exchangeResult.success) {
+          const { user: savedUser } = saveSession(exchangeResult, accountType);
+          setState((prev) => ({
+            ...prev,
+            status: "completed",
+            user: savedUser,
+            processToken: null,
+            loading: false
+          }));
+          return { success: true, user: savedUser, callback_token: response.callback_token };
+        }
+        setState((prev) => ({
+          ...prev,
+          loading: false,
+          error: exchangeResult.message || "Erreur lors de l'échange",
+          errorType: "exchange_failed"
+        }));
+        return { success: false, error_type: "exchange_failed" };
+      }
+      if (response.success && response.status === "pending_registration") {
+        setState((prev) => ({ ...prev, status: "pending_registration", loading: false }));
+        return { success: true, status: "pending_registration" };
+      }
+      if (response.success && (response.status === "needs_access" || response.needs_access)) {
+        setState((prev) => ({
+          ...prev,
+          status: "needs_access",
+          processToken: response.process_token || prev.processToken,
+          application: response.application || prev.application,
+          user: response.user ? {
+            reference: `USR-${response.user.id}`,
+            name: response.user.name,
+            email: response.user.email
+          } : prev.user,
+          prompt: response.prompt || prev.prompt,
+          loading: false
+        }));
+        return { success: true, status: "needs_access" };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Code incorrect",
+        errorType: response.error_type || "invalid_otp"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "la vérification");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, [state.processToken]);
+  const submitTotp = react.useCallback(async (totpCode) => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      const response = await nativeAuthService.verifyTotp(state.processToken, totpCode);
+      if (response.success && response.callback_token) {
+        const exchangeResult = await nativeAuthService.exchange(response.callback_token);
+        if (exchangeResult.success) {
+          const { user: savedUser } = saveSession(exchangeResult, accountType);
+          setState((prev) => ({
+            ...prev,
+            status: "completed",
+            user: savedUser,
+            processToken: null,
+            loading: false
+          }));
+          return { success: true, user: savedUser };
+        }
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Code 2FA incorrect",
+        errorType: response.error_type || "invalid_totp"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "la vérification 2FA");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, [state.processToken]);
+  const grantAccess = react.useCallback(async () => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      const response = await nativeAuthService.grantAccess(state.processToken);
+      if (response.success && response.callback_token) {
+        const exchangeResult = await nativeAuthService.exchange(response.callback_token);
+        if (exchangeResult.success) {
+          const { user: savedUser } = saveSession(exchangeResult, accountType);
+          setState((prev) => ({
+            ...prev,
+            status: "completed",
+            user: savedUser,
+            processToken: null,
+            loading: false
+          }));
+          return { success: true, user: savedUser, callback_token: response.callback_token };
+        }
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Erreur lors de l'accès",
+        errorType: response.error_type || "unknown"
+      }));
+      return { success: false };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "l'accès");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false, error_type: type };
+    }
+  }, [state.processToken]);
+  const resendOtp = react.useCallback(async () => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      const response = await nativeAuthService.resendOtp(state.processToken);
+      setState((prev) => ({ ...prev, loading: false }));
+      return {
+        success: response.success,
+        cooldown: response.cooldown_remaining,
+        message: response.message,
+        otp_code_dev: response.otp_code_dev
+      };
+    } catch (err) {
+      const { message, type } = getErrorMessage$1(err, "le renvoi");
+      setState((prev) => ({ ...prev, loading: false, error: message, errorType: type }));
+      return { success: false };
+    }
+  }, [state.processToken]);
+  const setSession = react.useCallback((data) => {
+    const { user: savedUser } = saveSession(data, accountType);
+    setState((prev) => ({
+      ...prev,
+      user: savedUser,
+      status: "completed",
+      processToken: null
+    }));
+  }, [accountType]);
+  const logout = react.useCallback(async () => {
+    const token = localStorage.getItem(STORAGE.AUTH_TOKEN) || localStorage.getItem(STORAGE.TOKEN);
+    try {
+      if (token) {
+        await nativeAuthService.logout(token);
+      }
+    } catch {
+    }
+    clearSession();
+    setState({
+      credentialsLoaded: false,
+      processToken: null,
+      status: null,
+      user: null,
+      application: null,
+      prompt: null,
+      alternativeMethod: null,
+      conflict: null,
+      loading: false,
+      error: null,
+      errorType: null,
+      otpMethod: null,
+      otpSentTo: null
+    });
+  }, []);
+  const reset = react.useCallback(() => {
+    setState((prev) => ({
+      ...prev,
+      processToken: null,
+      status: null,
+      application: null,
+      prompt: null,
+      alternativeMethod: null,
+      conflict: null,
+      error: null,
+      errorType: null
+    }));
+  }, []);
+  const clearError = react.useCallback(() => {
+    setState((prev) => ({ ...prev, error: null, errorType: null }));
+  }, []);
+  return {
+    // State
+    credentialsLoaded: state.credentialsLoaded,
+    processToken: state.processToken,
+    status: state.status,
+    user: state.user,
+    application: state.application,
+    prompt: state.prompt,
+    alternativeMethod: state.alternativeMethod,
+    conflict: state.conflict,
+    loading: state.loading,
+    error: state.error,
+    errorType: state.errorType,
+    isAuthenticated: state.status === "completed" && state.user !== null,
+    accountType,
+    isPhoneOnly: accountType === "phone-only",
+    otpMethod: state.otpMethod,
+    otpSentTo: state.otpSentTo,
+    // Methods
+    loadCredentials,
+    loginWithEmail,
+    loginWithPhone,
+    loginWithAccessOtp,
+    submitPassword,
+    submitOtp,
+    submitTotp,
+    grantAccess,
+    resendOtp,
+    setSession,
+    logout,
+    reset,
+    clearError,
+    register,
+    setAccountType
+  };
+}
+const C$2 = {
+  primary: "#002147",
+  accent: "#e8430a",
+  green: "#16a34a",
+  greenBg: "#dcfce7",
+  amber: "#f59e0b",
+  amberBg: "#fef3c7",
+  gray100: "#f3f4f6",
+  gray200: "#e5e7eb",
+  gray500: "#6b7280",
+  gray700: "#374151",
+  gray900: "#111827",
+  red: "#dc2626",
+  redBg: "#fef2f2",
+  white: "#ffffff"
+};
+const iconCircle$1 = (bg) => ({
+  margin: "0 auto",
+  width: "3rem",
+  height: "3rem",
+  backgroundColor: bg,
+  borderRadius: "50%",
+  display: "flex",
+  alignItems: "center",
+  justifyContent: "center"
+});
+const backBtnStyle$1 = {
+  position: "absolute",
+  left: "1rem",
+  top: "1rem",
+  background: "none",
+  border: "none",
+  cursor: "pointer",
+  padding: "0.5rem",
+  borderRadius: "0.375rem",
+  color: C$2.gray700,
+  zIndex: 10
+};
+const linkStyle$1 = {
+  color: C$2.primary,
+  cursor: "pointer",
+  background: "none",
+  border: "none",
+  fontWeight: 500,
+  textDecoration: "underline",
+  fontSize: "0.875rem"
+};
+const errorBoxStyle = {
+  padding: "0.75rem",
+  borderRadius: "0.375rem",
+  backgroundColor: C$2.redBg,
+  color: C$2.red,
+  fontSize: "0.875rem"
+};
+const methodBtnStyle = {
+  width: "100%",
+  height: "3.5rem",
+  justifyContent: "flex-start",
+  gap: "0.75rem",
+  textAlign: "left",
+  backgroundColor: C$2.gray100,
+  borderColor: C$2.gray200
+};
+const methodIconStyle = (bg) => ({
+  width: "2.5rem",
+  height: "2.5rem",
+  backgroundColor: bg,
+  borderRadius: "0.5rem",
+  display: "flex",
+  alignItems: "center",
+  justifyContent: "center",
+  flexShrink: 0
+});
+function LoginModal({
+  open,
+  onOpenChange,
+  onSwitchToSignup,
+  onLoginSuccess,
+  saasApiUrl,
+  iamApiUrl,
+  loading,
+  showSwitchToSignup = true,
+  debug = false
+}) {
+  const {
+    status,
+    user,
+    application,
+    alternativeMethod,
+    loading: authLoading,
+    error: authError,
+    loginWithEmail,
+    loginWithPhone,
+    submitPassword,
+    submitOtp,
+    grantAccess,
+    loginWithAccessOtp,
+    resendOtp,
+    setSession,
+    reset: resetAuth,
+    clearError
+  } = useNativeAuth({ saasApiUrl, iamApiUrl, debug });
+  const [step, setStep] = react.useState("choice");
+  const [email, setEmail] = react.useState("");
+  const [password, setPassword] = react.useState("");
+  const [showPassword, setShowPassword] = react.useState(false);
+  const [userName, setUserName] = react.useState(null);
+  const [phone, setPhone] = react.useState("");
+  const [phoneOtpCode, setPhoneOtpCode] = react.useState("");
+  const [emailOtpCode, setEmailOtpCode] = react.useState("");
+  const [accessOtpCode, setAccessOtpCode] = react.useState("");
+  const [localError, setLocalError] = react.useState(null);
+  const [resendCooldown, setResendCooldown] = react.useState(0);
+  const [loginSuccess, setLoginSuccess] = react.useState(false);
+  const [loginData, setLoginData] = react.useState(null);
+  const [showPasswordRecovery, setShowPasswordRecovery] = react.useState(false);
+  const CCPHONE = "+221";
+  const isSubmitting = authLoading || loading;
+  const error = localError || authError;
+  react.useEffect(() => {
+    if (resendCooldown > 0) {
+      const timer = setTimeout(() => setResendCooldown((p) => p - 1), 1e3);
+      return () => clearTimeout(timer);
+    }
+  }, [resendCooldown]);
+  react.useEffect(() => {
+    if (status === "pending_password") setStep("email-password");
+    else if (status === "pending_otp") {
+      if (step === "email-check" || step === "email-password") setStep("email-otp");
+      else if (step === "phone-input") setStep("phone-otp");
+      setResendCooldown(60);
+    }
+  }, [status, step]);
+  react.useEffect(() => {
+    if (loginSuccess && loginData) {
+      const timer = setTimeout(() => {
+        setSession({ success: true, token: loginData.token, expires_at: new Date(Date.now() + 30 * 24 * 60 * 60 * 1e3).toISOString(), user: loginData.user });
+        onLoginSuccess == null ? void 0 : onLoginSuccess(loginData.token, loginData.user);
+      }, 1e3);
+      return () => clearTimeout(timer);
+    }
+  }, [loginSuccess, loginData]);
+  const resetState = () => {
+    setStep("choice");
+    setEmail("");
+    setPassword("");
+    setShowPassword(false);
+    setUserName(null);
+    setPhone("");
+    setPhoneOtpCode("");
+    setEmailOtpCode("");
+    setAccessOtpCode("");
+    setLocalError(null);
+    setLoginSuccess(false);
+    setLoginData(null);
+    setResendCooldown(0);
+    resetAuth();
+  };
+  react.useEffect(() => {
+    if (!open) resetState();
+  }, [open]);
+  const exchangeCallbackToken = async (callbackToken) => {
+    try {
+      const response = await nativeAuthService.exchange(callbackToken);
+      if (response.success && response.token) {
+        setLoginData({ token: response.token, user: response.user });
+        setLoginSuccess(true);
+      } else {
+        setLocalError("Erreur lors de la finalisation de la connexion");
+      }
+    } catch {
+      setLocalError("Erreur de connexion au serveur");
+    }
+  };
+  const handleEmailCheck = async () => {
+    setLocalError(null);
+    clearError();
+    if (!email.trim()) {
+      setLocalError("L'adresse email est requise");
+      return;
+    }
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+      setLocalError("Adresse email invalide");
+      return;
+    }
+    const result = await loginWithEmail(email.trim());
+    if (result.success && (user == null ? void 0 : user.name)) setUserName(user.name);
+  };
+  const handleEmailPasswordSubmit = async (e) => {
+    e.preventDefault();
+    setLocalError(null);
+    clearError();
+    if (!password) {
+      setLocalError("Le mot de passe est requis");
+      return;
+    }
+    if (password.length < 8) {
+      setLocalError("Le mot de passe doit contenir au moins 8 caractères");
+      return;
+    }
+    const result = await submitPassword(password);
+    if (result.success && result.callback_token) await exchangeCallbackToken(result.callback_token);
+  };
+  const handleEmailOtpVerify = async () => {
+    setLocalError(null);
+    clearError();
+    if (emailOtpCode.length !== 6) {
+      setLocalError("Le code doit contenir 6 chiffres");
+      return;
+    }
+    const result = await submitOtp(emailOtpCode);
+    if (result.success && result.callback_token) await exchangeCallbackToken(result.callback_token);
+  };
+  const handlePhoneInit = async () => {
+    setLocalError(null);
+    clearError();
+    const cleanPhone = phone.replace(/\s/g, "");
+    if (cleanPhone.length !== 9) {
+      setLocalError("Le numéro doit contenir exactement 9 chiffres");
+      return;
+    }
+    await loginWithPhone(CCPHONE, cleanPhone);
+  };
+  const handlePhoneVerify = async () => {
+    setLocalError(null);
+    clearError();
+    if (phoneOtpCode.length !== 6) {
+      setLocalError("Veuillez entrer le code à 6 chiffres");
+      return;
+    }
+    const result = await submitOtp(phoneOtpCode);
+    if (result.success && result.callback_token) await exchangeCallbackToken(result.callback_token);
+  };
+  const handleAccessOtpSubmit = async () => {
+    setLocalError(null);
+    clearError();
+    if (accessOtpCode.length !== 8) {
+      setLocalError("Veuillez entrer le code à 8 chiffres");
+      return;
+    }
+    const result = await loginWithAccessOtp(accessOtpCode);
+    if (result.success) {
+      if (result.callback_token) {
+        await exchangeCallbackToken(result.callback_token);
+      }
+    }
+  };
+  const handleGrantAccess = async () => {
+    setLocalError(null);
+    clearError();
+    const result = await grantAccess();
+    if (result.success && result.callback_token) await exchangeCallbackToken(result.callback_token);
+  };
+  const handleResendOTP = async () => {
+    if (resendCooldown > 0) return;
+    const result = await resendOtp();
+    if (result.success) setResendCooldown(result.cooldown || 60);
+  };
+  const goBack = () => {
+    setLocalError(null);
+    clearError();
+    switch (step) {
+      case "email-check":
+      case "phone-input":
+      case "access-otp":
+        setStep("choice");
+        resetAuth();
+        break;
+      case "email-password":
+      case "email-otp":
+        setStep("email-check");
+        resetAuth();
+        break;
+      case "phone-otp":
+        setStep("phone-input");
+        resetAuth();
+        break;
+      default:
+        setStep("choice");
+        resetAuth();
+    }
+  };
+  const renderError = () => error ? /* @__PURE__ */ jsxRuntime.jsx("div", { style: errorBoxStyle, children: error }) : null;
+  const renderBackBtn = () => /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: goBack, style: backBtnStyle$1, type: "button", children: /* @__PURE__ */ jsxRuntime.jsx(IconArrowLeft, { style: { width: "1rem", height: "1rem" } }) });
+  const renderResendLink = () => /* @__PURE__ */ jsxRuntime.jsx("div", { style: { textAlign: "center", fontSize: "0.875rem" }, children: resendCooldown > 0 ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { color: C$2.gray500 }, children: [
+    "Renvoyer dans ",
+    resendCooldown,
+    "s"
+  ] }) : /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", style: linkStyle$1, onClick: handleResendOTP, children: "Code non reçu ? Renvoyer" }) });
+  const renderLoaderBtn = (text, loadingText, onClick, disabled, extraStyle) => /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick, disabled: isSubmitting || disabled, style: { width: "100%", ...extraStyle }, children: isSubmitting ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", gap: "0.5rem" }, children: [
+    /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+    loadingText
+  ] }) : text });
+  return /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+    /* @__PURE__ */ jsxRuntime.jsx(Dialog, { open, onOpenChange, children: /* @__PURE__ */ jsxRuntime.jsx(DialogContent, { children: loginSuccess && loginData ? /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+      /* @__PURE__ */ jsxRuntime.jsx("div", { style: { ...iconCircle$1(C$2.greenBg), width: "5rem", height: "5rem" }, children: /* @__PURE__ */ jsxRuntime.jsx(IconCheckCircle2, { style: { width: "3rem", height: "3rem", color: C$2.green } }) }),
+      /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Connexion réussie" }),
+      /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", justifyContent: "center", gap: "0.5rem", marginTop: "0.5rem" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem", color: C$2.gray500 } }),
+        "Redirection en cours..."
+      ] }) })
+    ] }) : status === "needs_access" && user && application ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: { ...iconCircle$1(C$2.primary + "1a"), width: "4rem", height: "4rem" }, children: application.logo ? /* @__PURE__ */ jsxRuntime.jsx("img", { src: application.logo, alt: application.name, style: { width: "2.5rem", height: "2.5rem", borderRadius: "0.5rem" } }) : /* @__PURE__ */ jsxRuntime.jsx(IconShieldCheck, { style: { width: "2rem", height: "2rem", color: C$2.primary } }) }),
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogTitle, { children: [
+          "Bienvenue sur ",
+          application.name,
+          " !"
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogDescription, { children: [
+          "Bonjour ",
+          /* @__PURE__ */ jsxRuntime.jsx("strong", { style: { color: C$2.gray900 }, children: user.name }),
+          ", vous n'avez pas encore de compte sur ",
+          /* @__PURE__ */ jsxRuntime.jsx("strong", { style: { color: C$2.primary }, children: application.name }),
+          "."
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: "1rem", backgroundColor: C$2.gray100, borderRadius: "0.5rem", marginBottom: "1rem", fontSize: "0.875rem", color: C$2.gray500 }, children: [
+          "Votre compte ",
+          /* @__PURE__ */ jsxRuntime.jsx("strong", { style: { color: C$2.primary }, children: "iam.ollaid.com" }),
+          " existe déjà. Cliquez sur Confirmer pour créer votre accès à ",
+          /* @__PURE__ */ jsxRuntime.jsx("strong", { style: { color: C$2.gray900 }, children: application.name }),
+          "."
+        ] }),
+        renderError(),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: handleGrantAccess, disabled: isSubmitting, style: { width: "100%", marginTop: "0.75rem" }, children: isSubmitting ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", gap: "0.5rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+          "Création en cours..."
+        ] }) : "Confirmer la création de mon compte" }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { variant: "outline", onClick: () => {
+          resetAuth();
+          setStep("choice");
+        }, disabled: isSubmitting, style: { width: "100%", marginTop: "0.5rem" }, children: "Annuler" })
+      ] })
+    ] }) : alternativeMethod ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: { ...iconCircle$1(C$2.amberBg), width: "4rem", height: "4rem" }, children: alternativeMethod.type === "email" ? /* @__PURE__ */ jsxRuntime.jsx(IconMail, { style: { width: "2rem", height: "2rem", color: C$2.amber } }) : /* @__PURE__ */ jsxRuntime.jsx(IconPhone, { style: { width: "2rem", height: "2rem", color: C$2.amber } }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Moyen de connexion désactivé" }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: "Vos identifiants sont corrects, mais vous avez désactivé ce moyen de connexion depuis votre compte IAM." })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem" }, children: [
+        alternativeMethod.value && /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: "1rem", backgroundColor: C$2.gray100, borderRadius: "0.5rem", marginBottom: "1rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("p", { style: { fontSize: "0.875rem", color: C$2.gray500, marginBottom: "0.75rem" }, children: "Vous pouvez vous connecter avec :" }),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", gap: "0.5rem", fontSize: "0.875rem", fontWeight: 500, color: C$2.gray900 }, children: [
+            alternativeMethod.type === "phone" ? /* @__PURE__ */ jsxRuntime.jsx(IconPhone, { style: { width: "1rem", height: "1rem", color: C$2.primary } }) : /* @__PURE__ */ jsxRuntime.jsx(IconMail, { style: { width: "1rem", height: "1rem", color: C$2.primary } }),
+            /* @__PURE__ */ jsxRuntime.jsx("span", { children: alternativeMethod.value })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: () => {
+          if (alternativeMethod.type === "phone") setStep("phone-input");
+          else setStep("email-check");
+          resetAuth();
+        }, style: { width: "100%" }, children: alternativeMethod.type === "phone" ? "Se connecter par téléphone" : "Se connecter par email" }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { variant: "outline", onClick: () => window.open("https://iam.ollaid.com", "_blank"), style: { width: "100%", marginTop: "0.5rem" }, children: "Réactiver depuis iam.ollaid.com" }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { variant: "ghost", onClick: () => onOpenChange(false), style: { width: "100%", marginTop: "0.5rem" }, children: "Annuler" })
+      ] })
+    ] }) : /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      step !== "choice" && renderBackBtn(),
+      step === "choice" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle$1(C$2.gray100), children: /* @__PURE__ */ jsxRuntime.jsx(IconShieldCheck, { style: { width: "1.5rem", height: "1.5rem", color: C$2.primary } }) }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Connexion" }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: "Choisissez votre méthode de connexion" })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "0.75rem" }, children: [
+          renderError(),
+          /* @__PURE__ */ jsxRuntime.jsxs(Button, { variant: "outline", onClick: () => setStep("email-check"), style: methodBtnStyle, children: [
+            /* @__PURE__ */ jsxRuntime.jsx("div", { style: methodIconStyle(C$2.accent), children: /* @__PURE__ */ jsxRuntime.jsx(IconMail, { style: { width: "1.25rem", height: "1.25rem", color: C$2.white } }) }),
+            /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontWeight: 500, color: C$2.gray900 }, children: "Adresse email" }),
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontSize: "0.75rem", color: C$2.gray500 }, children: "Connexion avec email" })
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsxs(Button, { variant: "outline", onClick: () => setStep("phone-input"), style: methodBtnStyle, children: [
+            /* @__PURE__ */ jsxRuntime.jsx("div", { style: methodIconStyle(C$2.accent), children: /* @__PURE__ */ jsxRuntime.jsx(IconPhone, { style: { width: "1.25rem", height: "1.25rem", color: C$2.white } }) }),
+            /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+              /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { fontWeight: 500, color: C$2.gray900 }, children: [
+                "Numéro de téléphone ",
+                /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: C$2.gray500 }, children: "(Sénégal)" })
+              ] }),
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontSize: "0.75rem", color: C$2.gray500 }, children: "Connexion avec code SMS" })
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsxs(Button, { variant: "outline", onClick: () => setStep("access-otp"), style: methodBtnStyle, children: [
+            /* @__PURE__ */ jsxRuntime.jsx("div", { style: methodIconStyle(C$2.primary), children: /* @__PURE__ */ jsxRuntime.jsx(IconKeyRound, { style: { width: "1.25rem", height: "1.25rem", color: C$2.white } }) }),
+            /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontWeight: 500, color: C$2.gray900 }, children: "Accès OTP" }),
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontSize: "0.75rem", color: C$2.gray500 }, children: "Disponible sur le backoffice IAM" })
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { textAlign: "center", fontSize: "0.875rem", paddingTop: "0.5rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: C$2.gray500 }, children: "Mot de passe oublié ? " }),
+            /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", style: linkStyle$1, onClick: () => setShowPasswordRecovery(true), children: "Récupérer" })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: { position: "relative", padding: "0.5rem 0" }, children: /* @__PURE__ */ jsxRuntime.jsx("div", { style: { position: "absolute", inset: 0, display: "flex", alignItems: "center" }, children: /* @__PURE__ */ jsxRuntime.jsx("span", { style: { width: "100%", borderTop: `1px solid ${C$2.gray200}` } }) }) }),
+          showSwitchToSignup && /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { textAlign: "center", fontSize: "0.875rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: C$2.gray500 }, children: "Pas encore de compte ? " }),
+            /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", style: linkStyle$1, onClick: onSwitchToSignup, children: "Inscrivez-vous" })
+          ] })
+        ] })
+      ] }),
+      step === "email-check" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle$1(C$2.accent), children: /* @__PURE__ */ jsxRuntime.jsx(IconMail, { style: { width: "1.5rem", height: "1.5rem", color: C$2.white } }) }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Connexion par email" }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: "Entrez votre adresse email" })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "1rem" }, children: [
+          renderError(),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "0.25rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx(Label, { htmlFor: "email", children: "Adresse email" }),
+            /* @__PURE__ */ jsxRuntime.jsx(
+              Input,
+              {
+                id: "email",
+                type: "email",
+                placeholder: "vous@exemple.com",
+                value: email,
+                onChange: (e) => setEmail(e.target.value),
+                disabled: isSubmitting,
+                onKeyDown: (e) => {
+                  if (e.key === "Enter") {
+                    e.preventDefault();
+                    handleEmailCheck();
+                  }
+                }
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: { textAlign: "right" }, children: /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", style: { ...linkStyle$1, fontSize: "0.75rem" }, onClick: () => setShowPasswordRecovery(true), children: "Mot de passe oublié ?" }) }),
+          renderLoaderBtn("Continuer", "Vérification...", handleEmailCheck, !email.trim()),
+          showSwitchToSignup && /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { textAlign: "center", fontSize: "0.875rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: C$2.gray500 }, children: "Pas encore de compte ? " }),
+            /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", style: linkStyle$1, onClick: onSwitchToSignup, children: "Inscrivez-vous" })
+          ] })
+        ] })
+      ] }),
+      step === "email-password" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle$1(C$2.accent), children: /* @__PURE__ */ jsxRuntime.jsx(IconLock, { style: { width: "1.5rem", height: "1.5rem", color: C$2.white } }) }),
+          userName && /* @__PURE__ */ jsxRuntime.jsxs(DialogTitle, { children: [
+            "Bonjour ",
+            userName,
+            " 👋"
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: email })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: handleEmailPasswordSubmit, style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "1rem" }, children: [
+          renderError(),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "0.25rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", justifyContent: "space-between", alignItems: "center" }, children: [
+              /* @__PURE__ */ jsxRuntime.jsx(Label, { htmlFor: "password", children: "Mot de passe" }),
+              /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", style: { ...linkStyle$1, fontSize: "0.75rem" }, onClick: () => setShowPasswordRecovery(true), children: "Mot de passe oublié ?" })
+            ] }),
+            /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { position: "relative" }, children: [
+              /* @__PURE__ */ jsxRuntime.jsx(
+                Input,
+                {
+                  id: "password",
+                  type: showPassword ? "text" : "password",
+                  placeholder: "••••••••",
+                  value: password,
+                  onChange: (e) => setPassword(e.target.value),
+                  disabled: isSubmitting,
+                  style: { paddingRight: "2.5rem" }
+                }
+              ),
+              /* @__PURE__ */ jsxRuntime.jsx(
+                "button",
+                {
+                  type: "button",
+                  onClick: () => setShowPassword(!showPassword),
+                  style: { position: "absolute", right: 0, top: 0, height: "100%", padding: "0 0.75rem", background: "none", border: "none", cursor: "pointer" },
+                  children: showPassword ? /* @__PURE__ */ jsxRuntime.jsx(IconEyeOff, { style: { width: "1rem", height: "1rem", color: C$2.gray500 } }) : /* @__PURE__ */ jsxRuntime.jsx(IconEye, { style: { width: "1rem", height: "1rem", color: C$2.gray500 } })
+                }
+              )
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsx(Button, { type: "submit", disabled: isSubmitting || !password, style: { width: "100%" }, children: isSubmitting ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", gap: "0.5rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+            "Connexion..."
+          ] }) : "Se connecter" })
+        ] })
+      ] }),
+      step === "email-otp" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle$1(C$2.accent), children: /* @__PURE__ */ jsxRuntime.jsx(IconKeyRound, { style: { width: "1.5rem", height: "1.5rem", color: C$2.white } }) }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Vérification" }),
+          /* @__PURE__ */ jsxRuntime.jsxs(DialogDescription, { children: [
+            "Un code de vérification a été envoyé à",
+            /* @__PURE__ */ jsxRuntime.jsx("br", {}),
+            /* @__PURE__ */ jsxRuntime.jsx("strong", { style: { color: C$2.gray900 }, children: email })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "1rem" }, children: [
+          renderError(),
+          /* @__PURE__ */ jsxRuntime.jsx(OTPInput, { value: emailOtpCode, onChange: setEmailOtpCode, disabled: isSubmitting }),
+          renderResendLink(),
+          renderLoaderBtn("Vérifier", "Vérification...", handleEmailOtpVerify, emailOtpCode.length !== 6)
+        ] })
+      ] }),
+      step === "phone-input" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle$1(C$2.accent), children: /* @__PURE__ */ jsxRuntime.jsx(IconPhone, { style: { width: "1.5rem", height: "1.5rem", color: C$2.white } }) }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Connexion par téléphone" }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: "Entrez votre numéro pour recevoir un code SMS" })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "1rem" }, children: [
+          renderError(),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "0.25rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Indicatif" }),
+            /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", gap: "0.5rem", padding: "0.75rem", backgroundColor: C$2.gray100, borderRadius: "0.375rem" }, children: [
+              /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontSize: "1.125rem" }, children: "🇸🇳" }),
+              /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontWeight: 500, color: C$2.gray900 }, children: "Sénégal (+221)" })
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "0.25rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx(Label, { htmlFor: "login-phone", children: "Numéro de téléphone" }),
+            /* @__PURE__ */ jsxRuntime.jsx(
+              Input,
+              {
+                id: "login-phone",
+                type: "tel",
+                placeholder: "77 123 45 67",
+                value: phone,
+                onChange: (e) => {
+                  const val = e.target.value.replace(/\D/g, "").slice(0, 9);
+                  setPhone(val);
+                },
+                disabled: isSubmitting,
+                maxLength: 9,
+                onKeyDown: (e) => {
+                  if (e.key === "Enter") {
+                    e.preventDefault();
+                    handlePhoneInit();
+                  }
+                }
+              }
+            ),
+            /* @__PURE__ */ jsxRuntime.jsxs("p", { style: { fontSize: "0.75rem", color: C$2.gray500 }, children: [
+              "9 chiffres requis (",
+              phone.replace(/\D/g, "").length,
+              "/9)"
+            ] })
+          ] }),
+          renderLoaderBtn("Recevoir le code SMS", "Envoi en cours...", handlePhoneInit, phone.replace(/\D/g, "").length !== 9),
+          showSwitchToSignup && /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { textAlign: "center", fontSize: "0.875rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: C$2.gray500 }, children: "Pas encore de compte ? " }),
+            /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", style: linkStyle$1, onClick: onSwitchToSignup, children: "Inscrivez-vous" })
+          ] })
+        ] })
+      ] }),
+      step === "phone-otp" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle$1(C$2.accent), children: /* @__PURE__ */ jsxRuntime.jsx(IconPhone, { style: { width: "1.5rem", height: "1.5rem", color: C$2.white } }) }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Vérification" }),
+          /* @__PURE__ */ jsxRuntime.jsxs(DialogDescription, { children: [
+            "Un code a été envoyé au",
+            " ",
+            /* @__PURE__ */ jsxRuntime.jsxs("strong", { style: { color: C$2.gray900 }, children: [
+              "+221 ",
+              phone.slice(0, 2),
+              "***",
+              phone.slice(-2)
+            ] })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "1rem" }, children: [
+          renderError(),
+          /* @__PURE__ */ jsxRuntime.jsx(OTPInput, { value: phoneOtpCode, onChange: setPhoneOtpCode, disabled: isSubmitting }),
+          renderResendLink(),
+          renderLoaderBtn("Se connecter", "Vérification...", handlePhoneVerify, phoneOtpCode.length !== 6)
+        ] })
+      ] }),
+      step === "access-otp" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle$1(C$2.primary), children: /* @__PURE__ */ jsxRuntime.jsx(IconKeyRound, { style: { width: "1.5rem", height: "1.5rem", color: C$2.white } }) }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Code d'accès" }),
+          /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: "Entrez le code d'accès à 8 chiffres" })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "1rem" }, children: [
+          renderError(),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "0.25rem" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Code d'accès (8 chiffres)" }),
+            /* @__PURE__ */ jsxRuntime.jsx(
+              Input,
+              {
+                type: "text",
+                inputMode: "numeric",
+                placeholder: "0000-0000",
+                value: accessOtpCode,
+                onChange: (e) => setAccessOtpCode(e.target.value.replace(/\D/g, "").slice(0, 8)),
+                disabled: isSubmitting,
+                style: { textAlign: "center", fontSize: "1.5rem", letterSpacing: "0.15em", fontFamily: "monospace" },
+                maxLength: 8
+              }
+            )
+          ] }),
+          renderLoaderBtn("Se connecter", "Vérification...", handleAccessOtpSubmit, accessOtpCode.length !== 8)
+        ] })
+      ] })
+    ] }) }) }),
+    /* @__PURE__ */ jsxRuntime.jsx(
+      PasswordRecoveryModal,
+      {
+        open: showPasswordRecovery,
+        onOpenChange: setShowPasswordRecovery,
+        onSuccess: () => setShowPasswordRecovery(false),
+        saasApiUrl,
+        iamApiUrl,
+        debug
+      }
+    )
+  ] });
+}
+const SUPPORTED_COUNTRIES = [
+  { code: "+221", name: "Sénégal", flag: "🇸🇳", digits: 9 },
+  { code: "+229", name: "Bénin", flag: "🇧🇯", digits: 8 },
+  { code: "+225", name: "Côte d'Ivoire", flag: "🇨🇮", digits: 10 },
+  { code: "+228", name: "Togo", flag: "🇹🇬", digits: 8 },
+  { code: "+237", name: "Cameroun", flag: "🇨🇲", digits: 9 },
+  { code: "+33", name: "France", flag: "🇫🇷", digits: 9 }
+];
+function PhoneInput({
+  value,
+  onChange,
+  ccphone = "+221",
+  onCcphoneChange,
+  disabled = false,
+  error,
+  placeholder = "77 123 45 67",
+  lockCcphone = false
+}) {
+  const selectedCountry = SUPPORTED_COUNTRIES.find((c) => c.code === ccphone) || SUPPORTED_COUNTRIES[0];
+  const handleChange = (e) => {
+    const cleaned = e.target.value.replace(/\D/g, "");
+    onChange(cleaned.slice(0, selectedCountry.digits));
+  };
+  const formatPhone = (phone) => {
+    if (phone.length <= 2) return phone;
+    if (phone.length <= 5) return `${phone.slice(0, 2)} ${phone.slice(2)}`;
+    if (phone.length <= 7) return `${phone.slice(0, 2)} ${phone.slice(2, 5)} ${phone.slice(5)}`;
+    return `${phone.slice(0, 2)} ${phone.slice(2, 5)} ${phone.slice(5, 7)} ${phone.slice(7)}`;
+  };
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { style: {
+      display: "flex",
+      alignItems: "center",
+      border: `2px solid ${error ? "#ef4444" : "#d1d5db"}`,
+      borderRadius: "0.5rem",
+      overflow: "hidden",
+      opacity: disabled ? 0.5 : 1,
+      backgroundColor: disabled ? "#f3f4f6" : "white"
+    }, children: [
+      onCcphoneChange && !lockCcphone ? /* @__PURE__ */ jsxRuntime.jsx(
+        "select",
+        {
+          value: ccphone,
+          onChange: (e) => onCcphoneChange(e.target.value),
+          disabled,
+          style: { padding: "0.75rem", backgroundColor: "#f9fafb", borderRight: "1px solid #e5e7eb", fontWeight: 500, color: "#374151", outline: "none", border: "none" },
+          children: SUPPORTED_COUNTRIES.map((c) => /* @__PURE__ */ jsxRuntime.jsxs("option", { value: c.code, children: [
+            c.flag,
+            " ",
+            c.code
+          ] }, c.code))
+        }
+      ) : /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", gap: "0.5rem", padding: "0.75rem", backgroundColor: "#f9fafb", borderRight: "1px solid #e5e7eb" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontSize: "1.125rem" }, children: selectedCountry.flag }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontWeight: 500, color: "#374151" }, children: selectedCountry.code })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsx(
+        "input",
+        {
+          type: "tel",
+          inputMode: "numeric",
+          value: formatPhone(value),
+          onChange: handleChange,
+          disabled,
+          placeholder,
+          style: { flex: 1, padding: "0.75rem", fontSize: "1.125rem", border: "none", outline: "none", backgroundColor: "transparent" }
+        }
+      )
+    ] }),
+    error && /* @__PURE__ */ jsxRuntime.jsx("p", { style: { fontSize: "0.875rem", color: "#ef4444", marginTop: "0.25rem" }, children: error }),
+    /* @__PURE__ */ jsxRuntime.jsxs("p", { style: { fontSize: "0.75rem", color: "#6b7280", marginTop: "0.25rem" }, children: [
+      selectedCountry.digits,
+      " chiffres requis (",
+      value.length,
+      "/",
+      selectedCountry.digits,
+      ")"
+    ] })
+  ] });
+}
+function AppsLogoSlider({ speed = "normal", className = "" }) {
+  const scrollRef = react.useRef(null);
+  const [isPaused, setIsPaused] = react.useState(false);
+  const [applications, setApplications] = react.useState([]);
+  const [isLoading, setIsLoading] = react.useState(true);
+  const speedMap = { slow: 50, normal: 30, fast: 15 };
+  react.useEffect(() => {
+    const fetchApps = async () => {
+      try {
+        const config2 = getNativeAuthConfig();
+        const iamBaseUrl = config2.iamApiUrl.replace("/api", "");
+        const response = await fetch(`${iamBaseUrl}/api/public/applications`, { headers: { "Accept": "application/json" } });
+        if (response.ok) {
+          const data = await response.json();
+          if (data.success && Array.isArray(data.data)) setApplications(data.data);
+        }
+      } catch {
+      } finally {
+        setIsLoading(false);
+      }
+    };
+    fetchApps();
+  }, []);
+  react.useEffect(() => {
+    const container = scrollRef.current;
+    if (!container || applications.length === 0) return;
+    let pos = 0;
+    const id = setInterval(() => {
+      if (!isPaused && container) {
+        pos += 1;
+        if (pos >= container.scrollWidth / 2) pos = 0;
+        container.scrollLeft = pos;
+      }
+    }, speedMap[speed]);
+    return () => clearInterval(id);
+  }, [isPaused, speed, applications.length]);
+  const getLogoUrl = (logo) => {
+    if (!logo) return null;
+    if (logo.startsWith("http")) return logo;
+    const config2 = getNativeAuthConfig();
+    return `${config2.iamApiUrl.replace("/api", "")}/storage/applications/${logo}`;
+  };
+  if (isLoading) {
+    return /* @__PURE__ */ jsxRuntime.jsx("div", { className, style: { overflow: "hidden" }, children: /* @__PURE__ */ jsxRuntime.jsx("div", { style: { display: "flex", gap: "1rem", padding: "0.5rem 0" }, children: [1, 2, 3, 4, 5].map((i) => /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { flexShrink: 0, display: "flex", flexDirection: "column", alignItems: "center", gap: "0.5rem" }, children: [
+      /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: "3rem", height: "3rem", borderRadius: "0.75rem", backgroundColor: "#e5e7eb" } }),
+      /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: "2.5rem", height: "0.75rem", borderRadius: "0.25rem", backgroundColor: "#e5e7eb" } })
+    ] }, i)) }) });
+  }
+  if (applications.length === 0) return null;
+  const displayApps = [...applications, ...applications];
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    "div",
+    {
+      className,
+      style: { position: "relative", overflow: "hidden" },
+      onMouseEnter: () => setIsPaused(true),
+      onMouseLeave: () => setIsPaused(false),
+      children: /* @__PURE__ */ jsxRuntime.jsx("div", { ref: scrollRef, style: { display: "flex", gap: "1rem", overflow: "hidden", padding: "0.5rem 0" }, children: displayApps.map((app, index) => {
+        const logoUrl = getLogoUrl(app.logo);
+        return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { flexShrink: 0, display: "flex", flexDirection: "column", alignItems: "center", gap: "0.5rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: "3rem", height: "3rem", borderRadius: "0.75rem", display: "flex", alignItems: "center", justifyContent: "center", boxShadow: "0 1px 3px rgba(0,0,0,0.1)", backgroundColor: "white", border: "1px solid #f3f4f6" }, children: logoUrl ? /* @__PURE__ */ jsxRuntime.jsx("img", { src: logoUrl, alt: app.name, style: { width: "2.5rem", height: "2.5rem", objectFit: "contain", borderRadius: "0.5rem" } }) : /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontWeight: 700, fontSize: "1.125rem", color: "hsl(var(--primary, 222 47% 11%))" }, children: app.name.charAt(0).toUpperCase() }) }),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontSize: "0.75rem", color: "#6b7280", fontWeight: 500 }, children: app.name })
+        ] }, `${app.id}-${index}`);
+      }) })
+    }
+  );
+}
+const mobileRegistrationService = {
+  /**
+   * Init registration via nativeAuth.register() (Frontend-First)
+   */
+  async init(data) {
+    if (!nativeAuthService.hasCredentials()) {
+      await nativeAuthService.loadCredentials();
+    }
+    return nativeAuthService.register({
+      name: data.name,
+      email: data.email,
+      ccphone: data.ccphone,
+      phone: data.phone,
+      town: data.town,
+      country: data.country,
+      registration_type: data.registration_type
+    });
+  },
+  /**
+   * Verify OTP via nativeAuth.validate()
+   */
+  async verifyOtp(processToken, otpCode) {
+    const config2 = getNativeAuthConfig();
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/validate (registration OTP)");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/validate`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          process_token: processToken,
+          otp_code: otpCode
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  /**
+   * Complete registration with password
+   */
+  async complete(processToken, password) {
+    const config2 = getNativeAuthConfig();
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/validate (registration complete)");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/validate`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          process_token: processToken,
+          password,
+          password_confirmation: password
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  /**
+   * Complete phone-only registration (no password)
+   */
+  async completePhoneOnly(processToken) {
+    const config2 = getNativeAuthConfig();
+    if (isDebugMode()) {
+      console.log("📤 [IAM] POST /iam/native/validate (phone-only complete)");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/native/validate`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          process_token: processToken
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  /**
+   * Resend OTP
+   */
+  async resendOtp(processToken) {
+    return nativeAuthService.resendOtp(processToken);
+  }
+};
+function getErrorMessage(err, context) {
+  if (err instanceof Error) {
+    if (err.message.includes("fetch") || err.message.includes("network")) {
+      return "Vérifiez votre connexion Internet";
+    }
+    if (err.message.includes("timeout")) {
+      return "Le serveur met trop de temps à répondre";
+    }
+    return err.message;
+  }
+  return `Erreur lors de ${context}`;
+}
+function useMobileRegistration(options) {
+  const configuredRef = react.useRef(false);
+  react.useEffect(() => {
+    if (options && !configuredRef.current) {
+      setNativeAuthConfig({
+        saasApiUrl: options.saasApiUrl,
+        iamApiUrl: options.iamApiUrl,
+        debug: options.debug
+      });
+      configuredRef.current = true;
+    }
+  }, [options]);
+  const [state, setState] = react.useState({
+    processToken: null,
+    status: "idle",
+    loading: false,
+    error: null,
+    conflict: null
+  });
+  const [formData, setFormData] = react.useState({});
+  const [accountType, setAccountType] = react.useState("email");
+  const updateFormData = react.useCallback((data) => {
+    setFormData((prev) => ({ ...prev, ...data }));
+  }, []);
+  const initRegistration = react.useCallback(async (data) => {
+    setState((prev) => ({ ...prev, loading: true, error: null, conflict: null }));
+    const enrichedData = {
+      ...data,
+      email: accountType === "phone-only" ? "" : data.email,
+      registration_type: accountType === "phone-only" ? "phone" : "email"
+    };
+    setFormData(enrichedData);
+    try {
+      if (!nativeAuthService.hasCredentials()) {
+        await nativeAuthService.loadCredentials();
+      }
+      const response = await mobileRegistrationService.init(enrichedData);
+      if (response.success && response.process_token) {
+        setState((prev) => ({
+          ...prev,
+          processToken: response.process_token,
+          status: "pending_otp",
+          loading: false,
+          conflict: null
+        }));
+        return {
+          success: true,
+          otp_code_dev: response.otp_code_dev,
+          otp_method: response.otp_method,
+          otp_sent_to: response.otp_sent_to
+        };
+      }
+      if (response.conflict) {
+        setState((prev) => ({
+          ...prev,
+          loading: false,
+          error: response.message || "Ce compte existe déjà",
+          conflict: response.conflict
+        }));
+        return { success: false, error_type: response.error_type };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Erreur lors de l'inscription",
+        conflict: null
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const message = getErrorMessage(err, "l'inscription");
+      setState((prev) => ({ ...prev, loading: false, error: message, conflict: null }));
+      return { success: false };
+    }
+  }, [accountType]);
+  const verifyOtp = react.useCallback(async (otpCode) => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      const response = await mobileRegistrationService.verifyOtp(state.processToken, otpCode);
+      if (response.success) {
+        if (response.status === "completed" && response.callback_token) {
+          setState((prev) => ({ ...prev, status: "completed", loading: false }));
+          return { success: true, completed: true, callback_token: response.callback_token };
+        }
+        setState((prev) => ({ ...prev, status: "pending_password", loading: false }));
+        return { success: true, completed: false };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Code incorrect"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const message = getErrorMessage(err, "la vérification");
+      setState((prev) => ({ ...prev, loading: false, error: message }));
+      return { success: false };
+    }
+  }, [state.processToken]);
+  const completeRegistration = react.useCallback(async (password) => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      const response = await mobileRegistrationService.complete(state.processToken, password);
+      if (response.success && response.callback_token) {
+        setState((prev) => ({ ...prev, status: "completed", loading: false }));
+        return { success: true, callback_token: response.callback_token };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Erreur lors de la finalisation"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const message = getErrorMessage(err, "la finalisation");
+      setState((prev) => ({ ...prev, loading: false, error: message }));
+      return { success: false };
+    }
+  }, [state.processToken]);
+  const completePhoneOnlyRegistration = react.useCallback(async () => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      const response = await mobileRegistrationService.completePhoneOnly(state.processToken);
+      if (response.success && response.callback_token) {
+        setState((prev) => ({ ...prev, status: "completed", loading: false }));
+        return { success: true, callback_token: response.callback_token };
+      }
+      setState((prev) => ({
+        ...prev,
+        loading: false,
+        error: response.message || "Erreur lors de la finalisation"
+      }));
+      return { success: false, error_type: response.error_type };
+    } catch (err) {
+      const message = getErrorMessage(err, "la finalisation");
+      setState((prev) => ({ ...prev, loading: false, error: message }));
+      return { success: false };
+    }
+  }, [state.processToken]);
+  const resendOtp = react.useCallback(async () => {
+    if (!state.processToken) {
+      return { success: false, error: "Session invalide" };
+    }
+    setState((prev) => ({ ...prev, loading: true, error: null }));
+    try {
+      const response = await mobileRegistrationService.resendOtp(state.processToken);
+      setState((prev) => ({ ...prev, loading: false }));
+      return {
+        success: response.success,
+        cooldown: response.cooldown_remaining,
+        otp_code_dev: response.otp_code_dev
+      };
+    } catch (err) {
+      const message = getErrorMessage(err, "le renvoi");
+      setState((prev) => ({ ...prev, loading: false, error: message }));
+      return { success: false };
+    }
+  }, [state.processToken]);
+  const reset = react.useCallback(() => {
+    setState({
+      processToken: null,
+      status: "idle",
+      loading: false,
+      error: null,
+      conflict: null
+    });
+    setFormData({});
+    setAccountType("email");
+  }, []);
+  const clearError = react.useCallback(() => {
+    setState((prev) => ({ ...prev, error: null, conflict: null }));
+  }, []);
+  return {
+    processToken: state.processToken,
+    status: state.status,
+    formData,
+    loading: state.loading,
+    error: state.error,
+    conflict: state.conflict,
+    isCompleted: state.status === "completed",
+    hasConflict: state.conflict !== null,
+    accountType,
+    setAccountType,
+    isPhoneOnly: accountType === "phone-only",
+    updateFormData,
+    initRegistration,
+    verifyOtp,
+    completeRegistration,
+    completePhoneOnlyRegistration,
+    resendOtp,
+    reset,
+    clearError
+  };
+}
+const C$1 = {
+  primary: "#002147",
+  accent: "#e8430a",
+  green: "#16a34a",
+  greenBg: "#dcfce7",
+  gray100: "#f3f4f6",
+  gray200: "#e5e7eb",
+  gray500: "#6b7280",
+  gray700: "#374151",
+  gray900: "#111827",
+  red: "#dc2626",
+  redBg: "#fef2f2",
+  amberBg: "#fef3c7",
+  white: "#ffffff"
+};
+const iconCircle = (bg, size = "3rem") => ({
+  margin: "0 auto",
+  width: size,
+  height: size,
+  backgroundColor: bg,
+  borderRadius: "50%",
+  display: "flex",
+  alignItems: "center",
+  justifyContent: "center"
+});
+const backBtnStyle = {
+  position: "absolute",
+  left: "1rem",
+  top: "1rem",
+  background: "none",
+  border: "none",
+  cursor: "pointer",
+  padding: "0.5rem",
+  borderRadius: "0.375rem",
+  color: C$1.gray700,
+  zIndex: 10
+};
+const linkStyle = {
+  color: C$1.primary,
+  cursor: "pointer",
+  background: "none",
+  border: "none",
+  fontWeight: 500,
+  textDecoration: "underline",
+  fontSize: "0.875rem"
+};
+const TOTAL_STEPS = 6;
+function StepIndicator({ current }) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", justifyContent: "center", gap: "0.5rem", marginTop: "0.75rem" }, children: [
+    Array.from({ length: TOTAL_STEPS }, (_, i) => /* @__PURE__ */ jsxRuntime.jsx("div", { style: {
+      width: i + 1 === current ? "1.5rem" : "0.5rem",
+      height: "0.5rem",
+      borderRadius: "9999px",
+      backgroundColor: i + 1 <= current ? C$1.accent : C$1.gray200,
+      transition: "all 0.2s"
+    } }, i)),
+    /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { fontSize: "0.75rem", color: C$1.gray500, marginLeft: "0.5rem" }, children: [
+      "Étape ",
+      current,
+      "/",
+      TOTAL_STEPS
+    ] })
+  ] });
+}
+function SuccessOrbit() {
+  const orbitIcons = [IconHome, IconCalendar, IconBell, IconMessageCircle, IconUsers, IconSettings];
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { position: "relative", width: "10rem", height: "10rem", margin: "0 auto" }, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("div", { style: {
+      position: "absolute",
+      top: "50%",
+      left: "50%",
+      transform: "translate(-50%, -50%)",
+      width: "4rem",
+      height: "4rem",
+      backgroundColor: C$1.greenBg,
+      borderRadius: "50%",
+      display: "flex",
+      alignItems: "center",
+      justifyContent: "center",
+      zIndex: 2
+    }, children: /* @__PURE__ */ jsxRuntime.jsx(IconShieldCheck, { style: { width: "2rem", height: "2rem", color: C$1.green } }) }),
+    orbitIcons.map((Icon, i) => {
+      const angle = i * 360 / orbitIcons.length;
+      return /* @__PURE__ */ jsxRuntime.jsx("div", { style: {
+        position: "absolute",
+        top: "50%",
+        left: "50%",
+        width: "2rem",
+        height: "2rem",
+        transform: `rotate(${angle}deg) translate(4rem) rotate(-${angle}deg)`,
+        transformOrigin: "0 0",
+        animation: `spin ${8 + i}s linear infinite`
+      }, children: /* @__PURE__ */ jsxRuntime.jsx("div", { style: {
+        width: "2rem",
+        height: "2rem",
+        backgroundColor: C$1.gray100,
+        borderRadius: "50%",
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "center"
+      }, children: /* @__PURE__ */ jsxRuntime.jsx(Icon, { style: { width: "1rem", height: "1rem", color: C$1.gray500 } }) }) }, i);
+    })
+  ] });
+}
+function SignupModal({ open, onOpenChange, onSwitchToLogin, onSignupSuccess, saasApiUrl, iamApiUrl, debug = false }) {
+  const {
+    status,
+    formData,
+    loading: regLoading,
+    error: regError,
+    accountType,
+    setAccountType,
+    isPhoneOnly,
+    updateFormData,
+    initRegistration,
+    verifyOtp,
+    completeRegistration,
+    resendOtp,
+    reset: resetReg,
+    clearError
+  } = useMobileRegistration({ saasApiUrl, iamApiUrl, debug });
+  const [step, setStep] = react.useState("intro");
+  const [otpCode, setOtpCode] = react.useState("");
+  const [password, setPassword] = react.useState("");
+  const [passwordConfirm, setPasswordConfirm] = react.useState("");
+  const [localError, setLocalError] = react.useState(null);
+  const [resendCooldown, setResendCooldown] = react.useState(0);
+  const [signupSuccess, setSignupSuccess] = react.useState(false);
+  const [signupData, setSignupData] = react.useState(null);
+  const error = localError || regError;
+  react.useEffect(() => {
+    if (!open) {
+      setStep("intro");
+      setOtpCode("");
+      setPassword("");
+      setPasswordConfirm("");
+      setLocalError(null);
+      setSignupSuccess(false);
+      setSignupData(null);
+      setResendCooldown(0);
+      resetReg();
+    }
+  }, [open]);
+  react.useEffect(() => {
+    if (status === "pending_otp") {
+      setStep("otp");
+      setResendCooldown(60);
+    } else if (status === "pending_password") setStep("password");
+  }, [status]);
+  react.useEffect(() => {
+    if (resendCooldown > 0) {
+      const t = setTimeout(() => setResendCooldown((r) => r - 1), 1e3);
+      return () => clearTimeout(t);
+    }
+  }, [resendCooldown]);
+  react.useEffect(() => {
+    if (signupSuccess && signupData) {
+      const t = setTimeout(() => onSignupSuccess(signupData.token, signupData.user), 2e3);
+      return () => clearTimeout(t);
+    }
+  }, [signupSuccess, signupData]);
+  const exchangeCallbackToken = async (callbackToken) => {
+    try {
+      const response = await nativeAuthService.exchange(callbackToken);
+      if (response.success && response.token) {
+        setSignupData({ token: response.token, user: response.user });
+        setSignupSuccess(true);
+      } else setLocalError("Erreur lors de la finalisation de l'inscription");
+    } catch {
+      setLocalError("Erreur de connexion au serveur");
+    }
+  };
+  const handleInfoSubmit = async (e) => {
+    var _a, _b, _c, _d, _e, _f;
+    e.preventDefault();
+    setLocalError(null);
+    clearError();
+    if (!((_a = formData.name) == null ? void 0 : _a.trim())) {
+      setLocalError("Le nom est requis");
+      return;
+    }
+    if (!isPhoneOnly && !((_b = formData.email) == null ? void 0 : _b.trim())) {
+      setLocalError("L'adresse email est requise");
+      return;
+    }
+    if (!((_c = formData.phone) == null ? void 0 : _c.trim()) || (((_d = formData.phone) == null ? void 0 : _d.length) || 0) < 6) {
+      setLocalError("Numéro de téléphone invalide");
+      return;
+    }
+    if (isPhoneOnly && formData.ccphone !== "+221") {
+      setLocalError("L'inscription par téléphone est réservée aux numéros sénégalais (+221)");
+      return;
+    }
+    if (!((_e = formData.town) == null ? void 0 : _e.trim())) {
+      setLocalError("La ville est requise");
+      return;
+    }
+    if (!((_f = formData.country) == null ? void 0 : _f.trim())) {
+      setLocalError("Le pays est requis");
+      return;
+    }
+    await initRegistration({ name: formData.name || "", email: formData.email || "", ccphone: formData.ccphone || "+221", phone: formData.phone || "", town: formData.town, country: formData.country });
+  };
+  const handleOTPSubmit = async () => {
+    if (otpCode.length !== 6) {
+      setLocalError("Veuillez entrer le code à 6 chiffres");
+      return;
+    }
+    setLocalError(null);
+    clearError();
+    const result = await verifyOtp(otpCode);
+    if (result.success && result.completed && result.callback_token) await exchangeCallbackToken(result.callback_token);
+  };
+  const handlePasswordSubmit = (e) => {
+    e.preventDefault();
+    setLocalError(null);
+    if (!password || password.length < 8) {
+      setLocalError("Le mot de passe doit contenir au moins 8 caractères");
+      return;
+    }
+    if (password !== passwordConfirm) {
+      setLocalError("Les mots de passe ne correspondent pas");
+      return;
+    }
+    setStep("confirm");
+  };
+  const handleConfirm = async () => {
+    setLocalError(null);
+    clearError();
+    const result = await completeRegistration(password);
+    if (result.success && result.callback_token) await exchangeCallbackToken(result.callback_token);
+  };
+  const handleResendOTP = async () => {
+    if (resendCooldown > 0) return;
+    const r = await resendOtp();
+    if (r.success) setResendCooldown(r.cooldown || 60);
+  };
+  const goToStep = (s) => {
+    setLocalError(null);
+    clearError();
+    setStep(s);
+  };
+  const handleAccountTypeSelect = (type) => {
+    setAccountType(type);
+    if (type === "phone-only") updateFormData({ ccphone: "+221", country: "Sénégal", email: "" });
+    goToStep("info");
+  };
+  const renderError = () => error ? /* @__PURE__ */ jsxRuntime.jsx("div", { style: { padding: "0.75rem", borderRadius: "0.375rem", backgroundColor: C$1.redBg, color: C$1.red, fontSize: "0.875rem" }, children: error }) : null;
+  return /* @__PURE__ */ jsxRuntime.jsx(Dialog, { open, onOpenChange, children: /* @__PURE__ */ jsxRuntime.jsx(DialogContent, { children: signupSuccess && signupData ? /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+    /* @__PURE__ */ jsxRuntime.jsx(SuccessOrbit, {}),
+    /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Félicitations !" }),
+    /* @__PURE__ */ jsxRuntime.jsxs(DialogDescription, { children: [
+      "Votre compte a été créé avec succès. Bienvenue ",
+      formData.name,
+      " !"
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", justifyContent: "center", gap: "0.5rem", fontSize: "0.875rem", color: C$1.gray500, marginTop: "1rem" }, children: [
+      /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+      "Connexion automatique en cours..."
+    ] })
+  ] }) : /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+    step === "intro" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle(C$1.accent + "1a", "4rem"), children: /* @__PURE__ */ jsxRuntime.jsx(IconShieldCheck, { style: { width: "2rem", height: "2rem", color: C$1.accent } }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Ouvrez un compte Ollaid" }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: "Un compte unique qui vous donne accès à toutes les applications" })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsx(AppsLogoSlider, {}),
+      /* @__PURE__ */ jsxRuntime.jsx("div", { style: { display: "flex", flexDirection: "column", gap: "0.75rem", fontSize: "0.875rem", color: C$1.gray500, margin: "1rem 0" }, children: ["Un seul compte pour toutes les applications", "Plus besoin de multiples mots de passe", "Connexion simplifiée et sécurisée"].map((text) => /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", gap: "0.75rem" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(IconCheckCircle2, { style: { width: "1.25rem", height: "1.25rem", color: C$1.green, flexShrink: 0 } }),
+        text
+      ] }, text)) }),
+      /* @__PURE__ */ jsxRuntime.jsx(StepIndicator, { current: 1 }),
+      /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: () => goToStep("account-type"), style: { width: "100%", marginTop: "1rem" }, children: "Suivant →" }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { textAlign: "center", fontSize: "0.875rem", marginTop: "1rem" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: C$1.gray500 }, children: "Déjà un compte ? " }),
+        /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", style: linkStyle, onClick: onSwitchToLogin, children: "Connectez-vous" })
+      ] })
+    ] }),
+    step === "account-type" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: () => goToStep("intro"), style: backBtnStyle, type: "button", children: /* @__PURE__ */ jsxRuntime.jsx(IconArrowLeft, { style: { width: "1rem", height: "1rem" } }) }),
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle(C$1.gray100), children: /* @__PURE__ */ jsxRuntime.jsx(IconShieldCheck, { style: { width: "1.5rem", height: "1.5rem", color: C$1.primary } }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Choisissez votre type de compte" })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "0.75rem", marginTop: "1rem" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(
+          "button",
+          {
+            type: "button",
+            onClick: () => handleAccountTypeSelect("email"),
+            style: { width: "100%", padding: "1rem", border: `2px solid ${C$1.gray200}`, borderRadius: "0.5rem", textAlign: "left", cursor: "pointer", background: C$1.white, display: "flex", alignItems: "center", gap: "0.75rem" },
+            children: [
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: "2.5rem", height: "2.5rem", backgroundColor: C$1.accent, borderRadius: "0.5rem", display: "flex", alignItems: "center", justifyContent: "center", flexShrink: 0 }, children: /* @__PURE__ */ jsxRuntime.jsx(IconMail, { style: { width: "1.25rem", height: "1.25rem", color: C$1.white } }) }),
+              /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+                /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontWeight: 600, color: C$1.gray900 }, children: "Email + Téléphone" }),
+                /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontSize: "0.875rem", color: C$1.gray500 }, children: "Compte complet" })
+              ] })
+            ]
+          }
+        ),
+        /* @__PURE__ */ jsxRuntime.jsxs(
+          "button",
+          {
+            type: "button",
+            onClick: () => handleAccountTypeSelect("phone-only"),
+            style: { width: "100%", padding: "1rem", border: `2px solid ${C$1.gray200}`, borderRadius: "0.5rem", textAlign: "left", cursor: "pointer", background: C$1.white, display: "flex", alignItems: "center", gap: "0.75rem" },
+            children: [
+              /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: "2.5rem", height: "2.5rem", backgroundColor: C$1.accent, borderRadius: "0.5rem", display: "flex", alignItems: "center", justifyContent: "center", flexShrink: 0 }, children: /* @__PURE__ */ jsxRuntime.jsx(IconSmartphone, { style: { width: "1.25rem", height: "1.25rem", color: C$1.white } }) }),
+              /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+                /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontWeight: 600, color: C$1.gray900 }, children: "Téléphone uniquement" }),
+                /* @__PURE__ */ jsxRuntime.jsx("div", { style: { fontSize: "0.875rem", color: C$1.gray500 }, children: "🇸🇳 Sénégal uniquement" })
+              ] })
+            ]
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsx(StepIndicator, { current: 2 })
+    ] }),
+    step === "info" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: () => goToStep("account-type"), style: backBtnStyle, type: "button", children: /* @__PURE__ */ jsxRuntime.jsx(IconArrowLeft, { style: { width: "1rem", height: "1rem" } }) }),
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle(C$1.primary + "1a"), children: /* @__PURE__ */ jsxRuntime.jsx(IconShieldCheck, { style: { width: "1.5rem", height: "1.5rem", color: C$1.primary } }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Créer votre compte" })
+      ] }),
+      isPhoneOnly && /* @__PURE__ */ jsxRuntime.jsx("div", { style: { padding: "0.75rem", borderRadius: "0.375rem", backgroundColor: C$1.accent + "1a", color: C$1.accent, fontSize: "0.8125rem", marginTop: "0.5rem", textAlign: "center" }, children: "📱 Inscription par téléphone — 🇸🇳 Sénégal uniquement" }),
+      !isPhoneOnly && /* @__PURE__ */ jsxRuntime.jsx("div", { style: { padding: "0.75rem", borderRadius: "0.375rem", backgroundColor: C$1.amberBg, color: "#92400e", fontSize: "0.8125rem", marginTop: "0.5rem", textAlign: "center" }, children: "⚠️ Un code OTP sera envoyé par email pour vérification" }),
+      /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: handleInfoSubmit, style: { display: "flex", flexDirection: "column", gap: "0.75rem", marginTop: "0.75rem" }, children: [
+        renderError(),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Nom complet" }),
+          /* @__PURE__ */ jsxRuntime.jsx(Input, { placeholder: "Jean Dupont", value: formData.name || "", onChange: (e) => updateFormData({ name: e.target.value }), disabled: regLoading })
+        ] }),
+        !isPhoneOnly && /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Adresse email" }),
+          /* @__PURE__ */ jsxRuntime.jsx(Input, { type: "email", placeholder: "vous@exemple.com", value: formData.email || "", onChange: (e) => updateFormData({ email: e.target.value }), disabled: regLoading })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Numéro de téléphone" }),
+          /* @__PURE__ */ jsxRuntime.jsx(PhoneInput, { value: formData.phone || "", onChange: (p) => updateFormData({ phone: p }), ccphone: formData.ccphone || "+221", onCcphoneChange: (c) => updateFormData({ ccphone: c }), disabled: regLoading, lockCcphone: isPhoneOnly })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "grid", gridTemplateColumns: "1fr 1fr", gap: "0.75rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+            /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Ville" }),
+            /* @__PURE__ */ jsxRuntime.jsx(Input, { placeholder: "Dakar", value: formData.town || "", onChange: (e) => updateFormData({ town: e.target.value }), disabled: regLoading })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+            /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Pays" }),
+            /* @__PURE__ */ jsxRuntime.jsx(Input, { placeholder: "Sénégal", value: formData.country || "", onChange: (e) => updateFormData({ country: e.target.value }), disabled: regLoading || isPhoneOnly })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx(StepIndicator, { current: 3 }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { type: "submit", disabled: regLoading, style: { width: "100%" }, children: regLoading ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", gap: "0.5rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+          " Vérification..."
+        ] }) : "Continuer" })
+      ] })
+    ] }),
+    step === "otp" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: () => goToStep("info"), style: backBtnStyle, type: "button", children: /* @__PURE__ */ jsxRuntime.jsx(IconArrowLeft, { style: { width: "1rem", height: "1rem" } }) }),
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle(C$1.accent), children: /* @__PURE__ */ jsxRuntime.jsx(IconKeyRound, { style: { width: "1.5rem", height: "1.5rem", color: C$1.white } }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Vérification" }),
+        /* @__PURE__ */ jsxRuntime.jsxs(DialogDescription, { children: [
+          "Entrez le code envoyé ",
+          isPhoneOnly ? `au ${formData.ccphone} ${formData.phone}` : `à ${formData.email}`
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "1rem" }, children: [
+        renderError(),
+        /* @__PURE__ */ jsxRuntime.jsx(OTPInput, { value: otpCode, onChange: setOtpCode, disabled: regLoading }),
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: { textAlign: "center", fontSize: "0.875rem" }, children: resendCooldown > 0 ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { color: C$1.gray500 }, children: [
+          "Renvoyer dans ",
+          resendCooldown,
+          "s"
+        ] }) : /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", onClick: handleResendOTP, style: linkStyle, children: "Code non reçu ? Renvoyer" }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(StepIndicator, { current: 4 }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: handleOTPSubmit, disabled: regLoading || otpCode.length !== 6, style: { width: "100%" }, children: regLoading ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", gap: "0.5rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+          " Vérification..."
+        ] }) : "Vérifier" })
+      ] })
+    ] }),
+    step === "password" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: () => goToStep("otp"), style: backBtnStyle, type: "button", children: /* @__PURE__ */ jsxRuntime.jsx(IconArrowLeft, { style: { width: "1rem", height: "1rem" } }) }),
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle(C$1.accent), children: /* @__PURE__ */ jsxRuntime.jsx(IconLock, { style: { width: "1.5rem", height: "1.5rem", color: C$1.white } }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Créer un mot de passe" })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: handlePasswordSubmit, style: { display: "flex", flexDirection: "column", gap: "0.75rem", marginTop: "0.75rem" }, children: [
+        renderError(),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Mot de passe" }),
+          /* @__PURE__ */ jsxRuntime.jsx(Input, { type: "password", placeholder: "Minimum 8 caractères", value: password, onChange: (e) => setPassword(e.target.value), disabled: regLoading })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Label, { children: "Confirmer le mot de passe" }),
+          /* @__PURE__ */ jsxRuntime.jsx(Input, { type: "password", placeholder: "••••••••", value: passwordConfirm, onChange: (e) => setPasswordConfirm(e.target.value), disabled: regLoading })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx(StepIndicator, { current: 5 }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { type: "submit", disabled: regLoading, style: { width: "100%" }, children: "Continuer" })
+      ] })
+    ] }),
+    step === "confirm" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: () => goToStep("password"), style: backBtnStyle, type: "button", children: /* @__PURE__ */ jsxRuntime.jsx(IconArrowLeft, { style: { width: "1rem", height: "1rem" } }) }),
+      /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { style: { textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: iconCircle(C$1.primary + "1a"), children: /* @__PURE__ */ jsxRuntime.jsx(IconShieldCheck, { style: { width: "1.5rem", height: "1.5rem", color: C$1.primary } }) }),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Confirmer votre inscription" })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginTop: "1rem", display: "flex", flexDirection: "column", gap: "0.75rem" }, children: [
+        renderError(),
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: { backgroundColor: C$1.gray100, borderRadius: "0.5rem", padding: "1rem" }, children: [["Nom", formData.name], ...!isPhoneOnly ? [["Email", formData.email]] : [], ["Téléphone", `${formData.ccphone} ${formData.phone}`], ["Ville", formData.town], ["Pays", formData.country]].map(([label, value]) => /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", justifyContent: "space-between", padding: "0.375rem 0" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontSize: "0.875rem", color: C$1.gray500 }, children: label }),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontSize: "0.875rem", fontWeight: 500 }, children: value })
+        ] }, label)) }),
+        /* @__PURE__ */ jsxRuntime.jsx(StepIndicator, { current: 6 }),
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: handleConfirm, disabled: regLoading, style: { width: "100%" }, children: regLoading ? /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { display: "flex", alignItems: "center", gap: "0.5rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(IconLoader2, { style: { width: "1rem", height: "1rem" } }),
+          " Création du compte..."
+        ] }) : "Créer mon compte" })
+      ] })
+    ] })
+  ] }) }) });
+}
+const C = {
+  primary: "#002147",
+  accent: "#e8430a",
+  gray100: "#f3f4f6",
+  gray200: "#e5e7eb",
+  gray500: "#6b7280",
+  gray700: "#374151",
+  white: "#ffffff"
+};
+function OnboardingModal({ open, onOpenChange, user, onComplete, onSkip }) {
+  const needsPhoto = !user.image_url;
+  const needsPhone = !user.phone;
+  const needsEmail = !user.email;
+  const [photoPreview, setPhotoPreview] = react.useState("");
+  const [photoFile, setPhotoFile] = react.useState(null);
+  const [ccphone, setCcphone] = react.useState(user.ccphone || "+221");
+  const [phone, setPhone] = react.useState(user.phone || "");
+  const [email, setEmail] = react.useState("");
+  const [confirmed, setConfirmed] = react.useState(false);
+  const [submitting, setSubmitting] = react.useState(false);
+  const [fileError, setFileError] = react.useState("");
+  const handleFileChange = react.useCallback((e) => {
+    var _a;
+    const file = (_a = e.target.files) == null ? void 0 : _a[0];
+    if (!file) return;
+    if (file.size > 2 * 1024 * 1024) {
+      setFileError("Le fichier dépasse 2 Mo. Veuillez choisir une image plus légère.");
+      e.target.value = "";
+      return;
+    }
+    setFileError("");
+    setPhotoFile(file);
+    const reader = new FileReader();
+    reader.onload = () => setPhotoPreview(reader.result);
+    reader.readAsDataURL(file);
+  }, []);
+  const canSubmit = confirmed && ((needsPhoto ? !!photoPreview : true) && (needsPhone ? phone.length >= 7 : true));
+  const handleSubmit = react.useCallback(() => {
+    if (!canSubmit) return;
+    setSubmitting(true);
+    const data = {};
+    if (needsPhoto && photoPreview) {
+      data.image_url = photoPreview;
+    }
+    if (needsPhone && phone) {
+      data.ccphone = ccphone;
+      data.phone = phone;
+    }
+    if (needsEmail && email.trim()) {
+      data.email = email.trim();
+    }
+    onComplete(data);
+  }, [canSubmit, needsPhoto, needsPhone, needsEmail, photoPreview, ccphone, phone, email, onComplete]);
+  const ShieldIcon = () => /* @__PURE__ */ jsxRuntime.jsxs("svg", { width: "20", height: "20", viewBox: "0 0 24 24", fill: "none", stroke: C.accent, strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "m9 12 2 2 4-4" })
+  ] });
+  return /* @__PURE__ */ jsxRuntime.jsx(Dialog, { open, onOpenChange, children: /* @__PURE__ */ jsxRuntime.jsxs(DialogContent, { children: [
+    /* @__PURE__ */ jsxRuntime.jsxs(DialogHeader, { children: [
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", gap: "0.5rem", marginBottom: "0.25rem" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(ShieldIcon, {}),
+        /* @__PURE__ */ jsxRuntime.jsx(DialogTitle, { children: "Complétez votre profil" })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsx(DialogDescription, { children: "Ajoutez les informations manquantes pour finaliser votre compte." })
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "1.25rem", marginTop: "1rem" }, children: [
+      needsPhoto && /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+        /* @__PURE__ */ jsxRuntime.jsx(Label, { style: { display: "block", marginBottom: "0.5rem", color: C.gray700, fontWeight: 500 }, children: "Photo de profil" }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", gap: "1rem" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: {
+            width: "4rem",
+            height: "4rem",
+            borderRadius: "50%",
+            backgroundColor: C.gray100,
+            border: `2px dashed ${C.gray200}`,
+            overflow: "hidden",
+            display: "flex",
+            alignItems: "center",
+            justifyContent: "center",
+            flexShrink: 0
+          }, children: photoPreview ? /* @__PURE__ */ jsxRuntime.jsx("img", { src: photoPreview, alt: "Preview", style: { width: "100%", height: "100%", objectFit: "cover" } }) : /* @__PURE__ */ jsxRuntime.jsxs("svg", { width: "24", height: "24", viewBox: "0 0 24 24", fill: "none", stroke: C.gray500, strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", children: [
+            /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "12", cy: "8", r: "4" }),
+            /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M5.5 21a8.38 8.38 0 0 1 13 0" })
+          ] }) }),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { flex: 1 }, children: [
+            /* @__PURE__ */ jsxRuntime.jsxs("label", { style: {
+              display: "inline-block",
+              padding: "0.5rem 1rem",
+              backgroundColor: C.gray100,
+              border: `1px solid ${C.gray200}`,
+              borderRadius: "0.375rem",
+              cursor: "pointer",
+              fontSize: "0.875rem",
+              color: C.gray700,
+              fontWeight: 500
+            }, children: [
+              "Choisir une photo",
+              /* @__PURE__ */ jsxRuntime.jsx(
+                "input",
+                {
+                  type: "file",
+                  accept: "image/*",
+                  onChange: handleFileChange,
+                  style: { display: "none" }
+                }
+              )
+            ] }),
+            /* @__PURE__ */ jsxRuntime.jsx("p", { style: { fontSize: "0.75rem", color: fileError ? "#dc2626" : C.gray500, marginTop: "0.25rem" }, children: fileError || "JPG, PNG. Max 2 Mo." })
+          ] })
+        ] })
+      ] }),
+      needsPhone && /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+        /* @__PURE__ */ jsxRuntime.jsx(Label, { style: { display: "block", marginBottom: "0.5rem", color: C.gray700, fontWeight: 500 }, children: "Numéro de téléphone" }),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          PhoneInput,
+          {
+            value: phone,
+            onChange: setPhone,
+            ccphone,
+            onCcphoneChange: setCcphone
+          }
+        )
+      ] }),
+      needsEmail && /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(Label, { style: { display: "block", marginBottom: "0.5rem", color: C.gray700, fontWeight: 500 }, children: [
+          "Adresse email ",
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: C.gray500, fontWeight: 400 }, children: "(optionnel)" })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          "input",
+          {
+            type: "email",
+            value: email,
+            onChange: (e) => setEmail(e.target.value),
+            placeholder: "email@exemple.com",
+            style: {
+              width: "100%",
+              height: "2.5rem",
+              padding: "0 0.75rem",
+              border: `1px solid ${C.gray200}`,
+              borderRadius: "0.375rem",
+              fontSize: "0.875rem",
+              color: C.gray700,
+              backgroundColor: C.white,
+              outline: "none"
+            }
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("label", { style: {
+        display: "flex",
+        alignItems: "flex-start",
+        gap: "0.5rem",
+        cursor: "pointer",
+        fontSize: "0.875rem",
+        color: C.gray700
+      }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(
+          "input",
+          {
+            type: "checkbox",
+            checked: confirmed,
+            onChange: (e) => setConfirmed(e.target.checked),
+            style: {
+              width: "1rem",
+              height: "1rem",
+              marginTop: "0.125rem",
+              accentColor: C.primary,
+              cursor: "pointer"
+            }
+          }
+        ),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Je confirme que ces informations sont exactes" })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "0.5rem" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(
+          Button,
+          {
+            onClick: handleSubmit,
+            disabled: !canSubmit || submitting,
+            style: { width: "100%", height: "2.75rem", opacity: canSubmit && !submitting ? 1 : 0.5 },
+            children: submitting ? "Enregistrement..." : "Valider"
+          }
+        ),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          Button,
+          {
+            variant: "outline",
+            onClick: onSkip,
+            disabled: submitting,
+            style: { width: "100%", height: "2.75rem" },
+            children: "Passer pour l'instant"
+          }
+        )
+      ] })
+    ] })
+  ] }) });
+}
+function DebugPanel({ saasApiUrl, iamApiUrl }) {
+  const [logs, setLogs] = react.useState([]);
+  const [expanded, setExpanded] = react.useState(true);
+  const [selectedLog, setSelectedLog] = react.useState(null);
+  react.useEffect(() => {
+    return subscribeToLogs(setLogs);
+  }, []);
+  const handleCopy = react.useCallback(() => {
+    var _a;
+    const text = exportLogsAsText();
+    (_a = navigator.clipboard) == null ? void 0 : _a.writeText(text).catch(() => {
+    });
+  }, []);
+  const handleClear = react.useCallback(() => {
+    clearApiLogs();
+    setSelectedLog(null);
+  }, []);
+  const statusColor = (status) => {
+    if (status === null) return "#f59e0b";
+    if (status >= 200 && status < 300) return "#22c55e";
+    return "#ef4444";
+  };
+  const statusEmoji = (status) => {
+    if (status === null) return "⏳";
+    if (status >= 200 && status < 300) return "✅";
+    return "❌";
+  };
+  const selected = selectedLog ? logs.find((l) => l.id === selectedLog) : null;
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: {
+    position: "fixed",
+    bottom: 0,
+    left: 0,
+    right: 0,
+    zIndex: 99999,
+    fontFamily: "monospace",
+    fontSize: "12px"
+  }, children: [
+    /* @__PURE__ */ jsxRuntime.jsxs(
+      "div",
+      {
+        onClick: () => setExpanded(!expanded),
+        style: {
+          background: "#1a1a2e",
+          color: "#e2e8f0",
+          padding: "6px 12px",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "space-between",
+          cursor: "pointer",
+          borderTop: "2px solid #6366f1"
+        },
+        children: [
+          /* @__PURE__ */ jsxRuntime.jsxs("span", { children: [
+            "🔐 Debug SSO — ",
+            logs.length,
+            " appel",
+            logs.length > 1 ? "s" : ""
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", gap: "8px", alignItems: "center" }, children: [
+            expanded && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+              /* @__PURE__ */ jsxRuntime.jsx(
+                "button",
+                {
+                  onClick: (e) => {
+                    e.stopPropagation();
+                    handleCopy();
+                  },
+                  style: { background: "#334155", color: "#e2e8f0", border: "none", borderRadius: "4px", padding: "2px 8px", cursor: "pointer", fontSize: "11px" },
+                  children: "📋 Copier"
+                }
+              ),
+              /* @__PURE__ */ jsxRuntime.jsx(
+                "button",
+                {
+                  onClick: (e) => {
+                    e.stopPropagation();
+                    handleClear();
+                  },
+                  style: { background: "#334155", color: "#e2e8f0", border: "none", borderRadius: "4px", padding: "2px 8px", cursor: "pointer", fontSize: "11px" },
+                  children: "🗑️ Effacer"
+                }
+              )
+            ] }),
+            /* @__PURE__ */ jsxRuntime.jsx("span", { children: expanded ? "▼" : "▲" })
+          ] })
+        ]
+      }
+    ),
+    expanded && /* @__PURE__ */ jsxRuntime.jsxs("div", { style: {
+      background: "#0f0f23",
+      color: "#e2e8f0",
+      maxHeight: "300px",
+      overflowY: "auto"
+    }, children: [
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: "4px 12px", background: "#1e1e3f", fontSize: "10px", color: "#94a3b8", display: "flex", gap: "16px" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("span", { children: [
+          "SaaS: ",
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: "#6366f1" }, children: saasApiUrl })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("span", { children: [
+          "IAM: ",
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: "#6366f1" }, children: iamApiUrl })
+        ] })
+      ] }),
+      logs.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("div", { style: { padding: "20px", textAlign: "center", color: "#64748b" }, children: "Aucun appel API. Tentez une connexion pour voir les logs." }) : /* @__PURE__ */ jsxRuntime.jsx("div", { children: logs.map((log) => /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(
+          "div",
+          {
+            onClick: () => setSelectedLog(selectedLog === log.id ? null : log.id),
+            style: {
+              padding: "4px 12px",
+              borderBottom: "1px solid #1e293b",
+              cursor: "pointer",
+              display: "flex",
+              alignItems: "center",
+              gap: "8px",
+              background: selectedLog === log.id ? "#1e293b" : "transparent"
+            },
+            children: [
+              /* @__PURE__ */ jsxRuntime.jsx("span", { children: statusEmoji(log.responseStatus) }),
+              /* @__PURE__ */ jsxRuntime.jsx("span", { style: {
+                background: log.method === "GET" ? "#22c55e" : "#3b82f6",
+                color: "#fff",
+                padding: "0 4px",
+                borderRadius: "2px",
+                fontSize: "10px",
+                fontWeight: "bold"
+              }, children: log.method }),
+              /* @__PURE__ */ jsxRuntime.jsx("span", { style: { flex: 1, overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" }, children: log.endpoint }),
+              /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: statusColor(log.responseStatus), minWidth: "30px" }, children: log.responseStatus ?? "..." }),
+              /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: "#64748b", minWidth: "50px", textAlign: "right" }, children: log.duration ? `${log.duration}ms` : "..." })
+            ]
+          }
+        ),
+        selectedLog === log.id && selected && /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: "8px 12px 8px 32px", background: "#111827", borderBottom: "1px solid #1e293b" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { color: "#94a3b8", marginBottom: "4px" }, children: [
+            "⏰ ",
+            new Date(log.timestamp).toLocaleTimeString()
+          ] }),
+          log.requestBody ? /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { marginBottom: "4px" }, children: [
+            /* @__PURE__ */ jsxRuntime.jsx("div", { style: { color: "#6366f1", fontSize: "10px" }, children: "REQUEST:" }),
+            /* @__PURE__ */ jsxRuntime.jsx("pre", { style: { color: "#cbd5e1", whiteSpace: "pre-wrap", wordBreak: "break-all", margin: 0, maxHeight: "80px", overflow: "auto" }, children: JSON.stringify(log.requestBody, null, 2) })
+          ] }) : null,
+          log.responseBody ? /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+            /* @__PURE__ */ jsxRuntime.jsx("div", { style: { color: "#6366f1", fontSize: "10px" }, children: "RESPONSE:" }),
+            /* @__PURE__ */ jsxRuntime.jsx("pre", { style: { color: "#cbd5e1", whiteSpace: "pre-wrap", wordBreak: "break-all", margin: 0, maxHeight: "120px", overflow: "auto" }, children: JSON.stringify(log.responseBody, null, 2) })
+          ] }) : null,
+          log.error && /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { color: "#ef4444", marginTop: "4px" }, children: [
+            "⚠️ ",
+            log.error
+          ] })
+        ] })
+      ] }, log.id)) })
+    ] })
+  ] });
+}
+const COLORS = {
+  primary: "#002147",
+  accent: "#e8430a",
+  card: "#ffffff",
+  cardForeground: "#1a2332",
+  muted: "#6b7280",
+  border: "#e5e7eb",
+  shadow: "0 10px 25px -5px rgba(0,0,0,0.2)"
+};
+const LIGHT_VARS = {
+  "--background": "40 20% 96%",
+  "--foreground": "220 15% 15%",
+  "--card": "0 0% 100%",
+  "--card-foreground": "220 15% 15%",
+  "--popover": "0 0% 100%",
+  "--popover-foreground": "220 15% 15%",
+  "--primary": "209 100% 13%",
+  "--primary-foreground": "0 0% 100%",
+  "--secondary": "40 15% 92%",
+  "--secondary-foreground": "220 15% 25%",
+  "--muted": "40 10% 90%",
+  "--muted-foreground": "220 10% 50%",
+  "--accent": "16 99% 52%",
+  "--accent-foreground": "0 0% 100%",
+  "--destructive": "0 84.2% 60.2%",
+  "--destructive-foreground": "210 40% 98%",
+  "--border": "40 15% 88%",
+  "--input": "40 15% 88%",
+  "--ring": "209 100% 13%"
+};
+const ShieldCheckIcon = () => /* @__PURE__ */ jsxRuntime.jsxs("svg", { width: "24", height: "24", viewBox: "0 0 24 24", fill: "none", stroke: COLORS.accent, strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", children: [
+  /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z" }),
+  /* @__PURE__ */ jsxRuntime.jsx("path", { d: "m9 12 2 2 4-4" })
+] });
+function needsOnboarding(user) {
+  return !user.image_url || !user.phone;
+}
+function NativeSSOPage({
+  saasApiUrl,
+  iamApiUrl,
+  onLoginSuccess,
+  onLogout,
+  onOnboardingComplete,
+  debug,
+  title = "Un compte, plusieurs accès",
+  description = "Connectez-vous avec votre compte Ollaid pour accéder à toutes les applications partenaires.",
+  logoUrl,
+  hideFooter = false
+}) {
+  const [modal, setModal] = react.useState("none");
+  const [showOnboarding, setShowOnboarding] = react.useState(false);
+  const [pendingSession, setPendingSession] = react.useState(null);
+  const [session, setSession] = react.useState(() => {
+    try {
+      const token = localStorage.getItem(STORAGE.AUTH_TOKEN) || localStorage.getItem(STORAGE.TOKEN);
+      const userStr = localStorage.getItem(STORAGE.USER);
+      if (token && userStr) return { token, user: JSON.parse(userStr) };
+    } catch {
+    }
+    return null;
+  });
+  const resolvedDebug = debug !== void 0 ? debug : isDebugMode();
+  react.useEffect(() => {
+    const root = document.documentElement;
+    const originalValues = {};
+    Object.keys(LIGHT_VARS).forEach((key) => {
+      originalValues[key] = root.style.getPropertyValue(key);
+    });
+    Object.entries(LIGHT_VARS).forEach(([key, value]) => {
+      root.style.setProperty(key, value);
+    });
+    root.classList.add("light");
+    root.classList.remove("dark");
+    root.style.colorScheme = "light";
+    const meta = document.createElement("meta");
+    meta.name = "color-scheme";
+    meta.content = "light";
+    document.head.appendChild(meta);
+    return () => {
+      Object.entries(originalValues).forEach(([key, value]) => {
+        if (value) root.style.setProperty(key, value);
+        else root.style.removeProperty(key);
+      });
+      root.classList.remove("light");
+      root.style.colorScheme = "";
+      meta.remove();
+    };
+  }, []);
+  const openLogin = react.useCallback(() => setModal("login"), []);
+  const openSignup = react.useCallback(() => setModal("signup"), []);
+  const closeModal = react.useCallback(() => setModal("none"), []);
+  const switchToSignup = react.useCallback(() => {
+    setModal("none");
+    setTimeout(() => setModal("signup"), 150);
+  }, []);
+  const switchToLogin = react.useCallback(() => {
+    setModal("none");
+    setTimeout(() => setModal("login"), 150);
+  }, []);
+  const handleLoginSuccess = react.useCallback((token, user) => {
+    const userObj = {
+      reference: "",
+      name: user.name,
+      email: user.email || void 0,
+      phone: user.phone,
+      ccphone: user.ccphone,
+      image_url: user.image_url,
+      account_type: user.account_type || "user"
+    };
+    setModal("none");
+    if (needsOnboarding(userObj)) {
+      setPendingSession({ token, user: userObj });
+      setShowOnboarding(true);
+    } else {
+      setSession({ token, user: userObj });
+      onLoginSuccess == null ? void 0 : onLoginSuccess(token, user);
+    }
+  }, [onLoginSuccess]);
+  const handleOnboardingComplete = react.useCallback((data) => {
+    if (!pendingSession) return;
+    const updatedUser = { ...pendingSession.user, ...data };
+    localStorage.setItem(STORAGE.USER, JSON.stringify(updatedUser));
+    setShowOnboarding(false);
+    setSession({ token: pendingSession.token, user: updatedUser });
+    setPendingSession(null);
+    onOnboardingComplete == null ? void 0 : onOnboardingComplete(data);
+    onLoginSuccess == null ? void 0 : onLoginSuccess(pendingSession.token, updatedUser);
+  }, [pendingSession, onLoginSuccess, onOnboardingComplete]);
+  const handleOnboardingSkip = react.useCallback(() => {
+    if (!pendingSession) return;
+    setShowOnboarding(false);
+    setSession(pendingSession);
+    setPendingSession(null);
+    onLoginSuccess == null ? void 0 : onLoginSuccess(pendingSession.token, pendingSession.user);
+  }, [pendingSession, onLoginSuccess]);
+  const handleLogout = react.useCallback(() => {
+    localStorage.removeItem(STORAGE.AUTH_TOKEN);
+    localStorage.removeItem(STORAGE.TOKEN);
+    localStorage.removeItem(STORAGE.USER);
+    localStorage.removeItem(STORAGE.ACCOUNT_TYPE);
+    setSession(null);
+    onLogout == null ? void 0 : onLogout();
+  }, [onLogout]);
+  const containerStyle = {
+    minHeight: "100vh",
+    backgroundColor: COLORS.primary,
+    display: "flex",
+    flexDirection: "column",
+    alignItems: "center",
+    justifyContent: "center",
+    padding: "1rem"
+  };
+  const cardStyle = {
+    width: "100%",
+    maxWidth: "28rem",
+    backgroundColor: COLORS.card,
+    border: `1px solid ${COLORS.border}`,
+    borderRadius: "0.75rem",
+    boxShadow: COLORS.shadow,
+    overflow: "hidden"
+  };
+  const footerStyle = {
+    marginTop: "1.5rem",
+    fontSize: "0.75rem",
+    color: "rgba(255,255,255,0.6)",
+    textAlign: "center"
+  };
+  const BrandingHeader = () => /* @__PURE__ */ jsxRuntime.jsx("div", { style: { textAlign: "center", marginBottom: "1.5rem" }, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", justifyContent: "center", gap: "0.5rem", marginBottom: "0.5rem" }, children: [
+    /* @__PURE__ */ jsxRuntime.jsx(ShieldCheckIcon, {}),
+    /* @__PURE__ */ jsxRuntime.jsxs("span", { style: { fontSize: "1.125rem", fontWeight: 700, color: COLORS.primary }, children: [
+      "iam.",
+      /* @__PURE__ */ jsxRuntime.jsx("span", { style: { color: COLORS.accent }, children: "ollaid" }),
+      ".com"
+    ] })
+  ] }) });
+  if (session) {
+    return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: containerStyle, children: [
+      /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: "100%", maxWidth: "28rem", marginBottom: "1.5rem" }, children: /* @__PURE__ */ jsxRuntime.jsx(AppsLogoSlider, {}) }),
+      /* @__PURE__ */ jsxRuntime.jsx("div", { style: cardStyle, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: "2rem 1.5rem 1.5rem" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(BrandingHeader, {}),
+        /* @__PURE__ */ jsxRuntime.jsxs("h2", { style: { fontSize: "1.25rem", fontWeight: 600, textAlign: "center", color: COLORS.cardForeground }, children: [
+          "Bienvenue, ",
+          session.user.name
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx("p", { style: { fontSize: "0.875rem", color: COLORS.muted, textAlign: "center", marginTop: "0.25rem" }, children: "Vous êtes connecté à votre compte Ollaid SSO" }),
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: { marginTop: "1.5rem" }, children: /* @__PURE__ */ jsxRuntime.jsx(Button, { variant: "outline", onClick: handleLogout, style: { width: "100%" }, children: "Déconnexion" }) })
+      ] }) }),
+      !hideFooter && /* @__PURE__ */ jsxRuntime.jsxs("p", { style: footerStyle, children: [
+        "Géré par",
+        " ",
+        /* @__PURE__ */ jsxRuntime.jsx("a", { href: "https://iam.ollaid.com", target: "_blank", rel: "noopener noreferrer", style: { color: COLORS.accent, textDecoration: "none" }, children: "iam.ollaid.com" }),
+        " ",
+        "— Identity Access Manager"
+      ] })
+    ] });
+  }
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: containerStyle, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: "100%", maxWidth: "28rem", marginBottom: "1.5rem" }, children: logoUrl ? /* @__PURE__ */ jsxRuntime.jsx("img", { src: logoUrl, alt: "Logo", style: { height: "3rem", margin: "0 auto" } }) : /* @__PURE__ */ jsxRuntime.jsx(AppsLogoSlider, {}) }),
+    /* @__PURE__ */ jsxRuntime.jsx("div", { style: cardStyle, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: "2rem 1.5rem 1.5rem" }, children: [
+      /* @__PURE__ */ jsxRuntime.jsx(BrandingHeader, {}),
+      /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { fontSize: "1.25rem", fontWeight: 600, textAlign: "center", color: COLORS.cardForeground, marginBottom: "0.5rem" }, children: title }),
+      /* @__PURE__ */ jsxRuntime.jsx("p", { style: { fontSize: "0.875rem", color: COLORS.muted, textAlign: "center", marginBottom: "1.5rem" }, children: description }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "0.75rem" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(Button, { onClick: openLogin, style: { width: "100%", height: "2.75rem" }, children: "Connexion" }),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          Button,
+          {
+            variant: "outline",
+            onClick: openSignup,
+            style: {
+              width: "100%",
+              height: "2.75rem",
+              borderColor: COLORS.cardForeground,
+              color: COLORS.cardForeground
+            },
+            children: "Inscription"
+          }
+        )
+      ] })
+    ] }) }),
+    !hideFooter && /* @__PURE__ */ jsxRuntime.jsxs("p", { style: footerStyle, children: [
+      "Géré par",
+      " ",
+      /* @__PURE__ */ jsxRuntime.jsx("a", { href: "https://iam.ollaid.com", target: "_blank", rel: "noopener noreferrer", style: { color: COLORS.accent, textDecoration: "none" }, children: "iam.ollaid.com" }),
+      " ",
+      "— Identity Access Manager"
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsx(
+      LoginModal,
+      {
+        open: modal === "login",
+        onOpenChange: (open) => {
+          if (!open) closeModal();
+        },
+        onSwitchToSignup: switchToSignup,
+        onLoginSuccess: handleLoginSuccess,
+        saasApiUrl,
+        iamApiUrl,
+        debug: resolvedDebug
+      }
+    ),
+    /* @__PURE__ */ jsxRuntime.jsx(
+      SignupModal,
+      {
+        open: modal === "signup",
+        onOpenChange: (open) => {
+          if (!open) closeModal();
+        },
+        onSwitchToLogin: switchToLogin,
+        onSignupSuccess: handleLoginSuccess,
+        saasApiUrl,
+        iamApiUrl,
+        debug: resolvedDebug
+      }
+    ),
+    pendingSession && /* @__PURE__ */ jsxRuntime.jsx(
+      OnboardingModal,
+      {
+        open: showOnboarding,
+        onOpenChange: (open) => {
+          if (!open) handleOnboardingSkip();
+        },
+        user: pendingSession.user,
+        onComplete: handleOnboardingComplete,
+        onSkip: handleOnboardingSkip
+      }
+    ),
+    resolvedDebug && /* @__PURE__ */ jsxRuntime.jsx(DebugPanel, { saasApiUrl, iamApiUrl })
+  ] });
+}
+const NativeSSOContext = react.createContext(null);
+function NativeSSOProvider({ config: config2, children }) {
+  const configuredRef = react.useRef(false);
+  react.useEffect(() => {
+    if (!configuredRef.current) {
+      setNativeAuthConfig(config2);
+      configuredRef.current = true;
+    }
+  }, [config2]);
+  return /* @__PURE__ */ jsxRuntime.jsx(NativeSSOContext.Provider, { value: config2, children });
+}
+function useNativeSSOConfig() {
+  const ctx = react.useContext(NativeSSOContext);
+  if (!ctx) {
+    throw new Error("useNativeSSOConfig doit être utilisé dans un <NativeSSOProvider>");
+  }
+  return ctx;
+}
+function getCredentialsOrThrow(params) {
+  const app_key = params.app_key;
+  const secret_key = params.secret_key;
+  if (!app_key || !secret_key) {
+    throw new Error("app_key et secret_key sont requis en paramètre. Ces APIs sont server-to-server et ne peuvent pas utiliser les encrypted_credentials.");
+  }
+  return { app_key, secret_key };
+}
+const iamAccountService = {
+  /**
+   * Lier un numéro de téléphone à un compte utilisateur existant
+   * POST {iamApiUrl}/iam/link-phone
+   */
+  async linkPhone(params) {
+    const config2 = getNativeAuthConfig();
+    const { app_key, secret_key } = getCredentialsOrThrow(params);
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/link-phone`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          app_key,
+          secret_key,
+          iam_reference: params.iam_reference,
+          ccphone: params.ccphone,
+          phone: params.phone
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  /**
+   * Lier une adresse email à un compte utilisateur existant
+   * POST {iamApiUrl}/iam/link-email
+   */
+  async linkEmail(params) {
+    const config2 = getNativeAuthConfig();
+    const { app_key, secret_key } = getCredentialsOrThrow(params);
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/link-email`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          app_key,
+          secret_key,
+          iam_reference: params.iam_reference,
+          email: params.email
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  /**
+   * Récupérer les user_infos d'un utilisateur (mode single)
+   * POST {iamApiUrl}/iam/refresh-user-info
+   */
+  async refreshUserInfo(params) {
+    const config2 = getNativeAuthConfig();
+    const secret_key = params.secret_key;
+    if (!secret_key) {
+      throw new Error("secret_key est requis. Chargez les credentials ou passez-la en paramètre.");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/refresh-user-info`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          secret_key,
+          alias_reference: params.alias_reference
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  /**
+   * Récupérer les user_infos en bulk (max 100 alias_references)
+   * POST {iamApiUrl}/iam/refresh-user-info
+   */
+  async refreshUserInfoBulk(params) {
+    const config2 = getNativeAuthConfig();
+    const secret_key = params.secret_key;
+    if (!secret_key) {
+      throw new Error("secret_key est requis. Chargez les credentials ou passez-la en paramètre.");
+    }
+    if (params.alias_references.length > 100) {
+      throw new Error("Maximum 100 alias_references par requête bulk.");
+    }
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/refresh-user-info`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          secret_key,
+          alias_references: params.alias_references
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  /**
+   * Mettre à jour l'avatar d'un utilisateur pour une application spécifique
+   * POST {iamApiUrl}/iam/update-avatar
+   */
+  async updateAvatar(params) {
+    const config2 = getNativeAuthConfig();
+    const { app_key, secret_key } = getCredentialsOrThrow(params);
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/update-avatar`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          app_key,
+          secret_key,
+          alias_reference: params.alias_reference,
+          avatar_url: params.avatar_url
+        })
+      },
+      config2.timeout || 3e4
+    );
+  },
+  /**
+   * Réinitialiser l'avatar d'un utilisateur (remettre à null pour utiliser l'image globale)
+   * POST {iamApiUrl}/iam/reset-avatar
+   */
+  async resetAvatar(params) {
+    const config2 = getNativeAuthConfig();
+    const { app_key, secret_key } = getCredentialsOrThrow(params);
+    return fetchWithTimeout(
+      `${config2.iamApiUrl}/iam/reset-avatar`,
+      {
+        method: "POST",
+        headers: getHeaders(),
+        body: JSON.stringify({
+          app_key,
+          secret_key,
+          alias_reference: params.alias_reference
+        })
+      },
+      config2.timeout || 3e4
+    );
+  }
+};
+exports.ApiError = ApiError;
+exports.AppsLogoSlider = AppsLogoSlider;
+exports.LoginModal = LoginModal;
+exports.NativeSSOPage = NativeSSOPage;
+exports.NativeSSOProvider = NativeSSOProvider;
+exports.OTPInput = OTPInput;
+exports.OnboardingModal = OnboardingModal;
+exports.PasswordRecoveryModal = PasswordRecoveryModal;
+exports.PhoneInput = PhoneInput;
+exports.SignupModal = SignupModal;
+exports.getAccountType = getAccountType;
+exports.getAuthToken = getAuthToken;
+exports.getAuthUser = getAuthUser;
+exports.getNativeAuthConfig = getNativeAuthConfig;
+exports.iamAccountService = iamAccountService;
+exports.mobilePasswordService = mobilePasswordService;
+exports.nativeAuthService = nativeAuthService;
+exports.setNativeAuthConfig = setNativeAuthConfig;
+exports.useMobilePassword = useMobilePassword;
+exports.useMobileRegistration = useMobileRegistration;
+exports.useNativeAuth = useNativeAuth;
+exports.useNativeSSOConfig = useNativeSSOConfig;
+exports.useTokenHealthCheck = useTokenHealthCheck;
+//# sourceMappingURL=index.cjs.map