@plumile/backoffice-react 0.1.104 → 0.1.106

package/lib/esm/_virtual/_rolldown/runtime.js

@@ -0,0 +1,7 @@
+//#region \0rolldown/runtime.js
+var e = (e, t) => () => (t || (e((t = { exports: {} }).exports, t), e = null), t.exports), t = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
+	if (typeof require < "u") return require.apply(this, arguments);
+	throw Error("Calling `require` for \"" + e + "\" in an environment that doesn't expose the `require` function. See https://rolldown.rs/in-depth/bundling-cjs#require-external-modules for more details.");
+});
+//#endregion
+export { e as __commonJSMin, t as __require };

package/lib/esm/auth/AuthRefreshNotice.js

@@ -0,0 +1,38 @@
+import { indicator as e, root as t, text as n } from "./authRefreshNotice.css.js";
+import { useSyncExternalStore as r } from "react";
+import { addAuthRefreshStateListener as i, getAuthRefreshState as a } from "@plumile/auth";
+import { cx as o } from "@plumile/ui";
+import { jsx as s, jsxs as c } from "react/jsx-runtime";
+//#region src/auth/AuthRefreshNotice.tsx
+var l = (e) => i(() => {
+	e();
+}), u = () => a(), d = () => r(l, u, u), f = ({ messages: r, className: i }) => {
+	let a = d();
+	return a.status === "temporarily_unavailable" ? /* @__PURE__ */ c("div", {
+		className: o(t, i),
+		role: "status",
+		"aria-live": "polite",
+		children: [/* @__PURE__ */ s("span", {
+			className: e,
+			"aria-hidden": "true"
+		}), /* @__PURE__ */ s("p", {
+			className: n,
+			children: r.temporarilyUnavailable
+		})]
+	}) : a.status === "session_expired" ? /* @__PURE__ */ c("div", {
+		className: o(t, i),
+		role: "status",
+		"aria-live": "polite",
+		children: [/* @__PURE__ */ s("span", {
+			className: e,
+			"aria-hidden": "true"
+		}), /* @__PURE__ */ s("p", {
+			className: n,
+			children: r.sessionExpired
+		})]
+	}) : null;
+};
+//#endregion
+export { f as AuthRefreshNotice, f as default, d as useAuthRefreshStateSnapshot };
+
+//# sourceMappingURL=AuthRefreshNotice.js.map

package/lib/esm/auth/AuthRefreshNotice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthRefreshNotice.js","names":[],"sources":["../../../src/auth/AuthRefreshNotice.tsx"],"sourcesContent":["import { useSyncExternalStore, type JSX } from 'react';\n\nimport {\n  addAuthRefreshStateListener,\n  getAuthRefreshState,\n  type AuthRefreshState,\n} from '@plumile/auth';\nimport { cx } from '@plumile/ui';\n\nimport * as styles from './authRefreshNotice.css.js';\n\nexport type AuthRefreshNoticeMessages = {\n  temporarilyUnavailable: string;\n  sessionExpired: string;\n};\n\nexport type AuthRefreshNoticeProps = {\n  messages: AuthRefreshNoticeMessages;\n  className?: string;\n};\n\nconst subscribe = (onStoreChange: () => void): (() => void) => {\n  return addAuthRefreshStateListener(() => {\n    onStoreChange();\n  });\n};\n\nconst getSnapshot = (): AuthRefreshState => {\n  return getAuthRefreshState();\n};\n\nexport const useAuthRefreshStateSnapshot = (): AuthRefreshState => {\n  return useSyncExternalStore(subscribe, getSnapshot, getSnapshot);\n};\n\nexport const AuthRefreshNotice = ({\n  messages,\n  className,\n}: AuthRefreshNoticeProps): JSX.Element | null => {\n  const state = useAuthRefreshStateSnapshot();\n\n  if (state.status === 'temporarily_unavailable') {\n    return (\n      <div\n        className={cx(styles.root, className)}\n        role=\"status\"\n        aria-live=\"polite\"\n      >\n        <span className={styles.indicator} aria-hidden=\"true\" />\n        <p className={styles.text}>{messages.temporarilyUnavailable}</p>\n      </div>\n    );\n  }\n\n  if (state.status === 'session_expired') {\n    return (\n      <div\n        className={cx(styles.root, className)}\n        role=\"status\"\n        aria-live=\"polite\"\n      >\n        <span className={styles.indicator} aria-hidden=\"true\" />\n        <p className={styles.text}>{messages.sessionExpired}</p>\n      </div>\n    );\n  }\n\n  return null;\n};\n\nexport default AuthRefreshNotice;\n"],"mappings":";;;;;;AAqBA,IAAM,KAAa,MACV,QAAkC;CACvC,GAAe;EACf,EAGE,UACG,GAAqB,EAGjB,UACJ,EAAqB,GAAW,GAAa,EAAY,EAGrD,KAAqB,EAChC,aACA,mBACgD;CAChD,IAAM,IAAQ,GAA6B;CA4B3C,OA1BI,EAAM,WAAW,4BAEjB,kBAAC,OAAD;EACE,WAAW,EAAG,GAAa,EAAU;EACrC,MAAK;EACL,aAAU;YAHZ,CAKE,kBAAC,QAAD;GAAM,WAAW;GAAkB,eAAY;GAAS,CAAA,EACxD,kBAAC,KAAD;GAAG,WAAW;aAAc,EAAS;GAA2B,CAAA,CAC5D;MAIN,EAAM,WAAW,oBAEjB,kBAAC,OAAD;EACE,WAAW,EAAG,GAAa,EAAU;EACrC,MAAK;EACL,aAAU;YAHZ,CAKE,kBAAC,QAAD;GAAM,WAAW;GAAkB,eAAY;GAAS,CAAA,EACxD,kBAAC,KAAD;GAAG,WAAW;aAAc,EAAS;GAAmB,CAAA,CACpD;MAIH"}

package/lib/esm/auth/TotpQrCode.js

@@ -0,0 +1,28 @@
+import { jsx as e } from "react/jsx-runtime";
+import t from "react-qr-code";
+//#region src/auth/TotpQrCode.tsx
+function n({ secret: e, issuer: t, accountName: n, algorithm: r = "SHA1", digits: i = 6, period: a = 30 }) {
+	let o = n ?? t, s = new URLSearchParams({
+		secret: e,
+		issuer: t,
+		algorithm: r,
+		digits: String(i),
+		period: String(a)
+	});
+	return `otpauth://totp/${encodeURIComponent(o)}?${s.toString()}`;
+}
+var r = ({ secret: r, issuer: i, accountName: a, otpauthUrl: o, size: s = 220, algorithm: c, digits: l, period: u }) => /* @__PURE__ */ e(t, {
+	value: o ?? n({
+		secret: r,
+		issuer: i,
+		accountName: a,
+		algorithm: c,
+		digits: l,
+		period: u
+	}),
+	size: s
+});
+//#endregion
+export { r as TotpQrCode, r as default, n as buildTotpOtpAuthUri };
+
+//# sourceMappingURL=TotpQrCode.js.map

package/lib/esm/auth/TotpQrCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpQrCode.js","names":[],"sources":["../../../src/auth/TotpQrCode.tsx"],"sourcesContent":["import type { JSX } from 'react';\nimport QRCode from 'react-qr-code';\n\nexport type BuildTotpOtpAuthUriOptions = {\n  secret: string;\n  issuer: string;\n  accountName?: string;\n  algorithm?: string;\n  digits?: number;\n  period?: number;\n};\n\nexport type TotpQrCodeProps = BuildTotpOtpAuthUriOptions & {\n  otpauthUrl?: string;\n  size?: number;\n};\n\n/**\n *\n */\nexport function buildTotpOtpAuthUri({\n  secret,\n  issuer,\n  accountName,\n  algorithm = 'SHA1',\n  digits = 6,\n  period = 30,\n}: BuildTotpOtpAuthUriOptions): string {\n  const label = accountName ?? issuer;\n  const params = new URLSearchParams({\n    secret,\n    issuer,\n    algorithm,\n    digits: String(digits),\n    period: String(period),\n  });\n\n  return `otpauth://totp/${encodeURIComponent(label)}?${params.toString()}`;\n}\n\nexport const TotpQrCode = ({\n  secret,\n  issuer,\n  accountName,\n  otpauthUrl,\n  size = 220,\n  algorithm,\n  digits,\n  period,\n}: TotpQrCodeProps): JSX.Element => {\n  const otpAuthUri =\n    otpauthUrl ??\n    buildTotpOtpAuthUri({\n      secret,\n      issuer,\n      accountName,\n      algorithm,\n      digits,\n      period,\n    });\n\n  return <QRCode value={otpAuthUri} size={size} />;\n};\n\nexport default TotpQrCode;\n"],"mappings":";;;AAoBA,SAAgB,EAAoB,EAClC,WACA,WACA,gBACA,eAAY,QACZ,YAAS,GACT,YAAS,MAC4B;CACrC,IAAM,IAAQ,KAAe,GACvB,IAAS,IAAI,gBAAgB;EACjC;EACA;EACA;EACA,QAAQ,OAAO,EAAO;EACtB,QAAQ,OAAO,EAAO;EACvB,CAAC;CAEF,OAAO,kBAAkB,mBAAmB,EAAM,CAAC,GAAG,EAAO,UAAU;;AAGzE,IAAa,KAAc,EACzB,WACA,WACA,gBACA,eACA,UAAO,KACP,cACA,WACA,gBAaO,kBAAC,GAAD;CAAQ,OAVb,KACA,EAAoB;EAClB;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CAEoC;CAAQ,CAAA"}

package/lib/esm/auth/authRefreshNotice.css.js

@@ -0,0 +1,7 @@
+/* empty css                                 */
+//#region src/auth/authRefreshNotice.css.ts
+var e = "tc0xii0 txvbqbptp txvbqb9ip txvbqbcp txvbqbaog txvbqb8y txvbqbuwp", t = "tc0xii1", n = "txvbqbfcp";
+//#endregion
+export { t as indicator, e as root, n as text };
+
+//# sourceMappingURL=authRefreshNotice.css.js.map

package/lib/esm/auth/authRefreshNotice.css.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authRefreshNotice.css.js","names":[],"sources":["../../../src/auth/authRefreshNotice.css.ts"],"sourcesContent":["import { style } from '@vanilla-extract/css';\n\nimport { sprinkles, vars } from '@plumile/ui';\n\nexport const root = style([\n  sprinkles({\n    position: 'fixed',\n    display: 'flex',\n    alignItems: 'center',\n    gap: 3,\n    fontSize: 'sm',\n    zIndex: 50,\n  }),\n  {\n    left: '16px',\n    right: '16px',\n    bottom: '16px',\n    maxWidth: '720px',\n    margin: '0 auto',\n    padding: '10px 14px',\n    color: vars.colors.text,\n    backgroundColor: vars.colors.white,\n    border: `1px solid ${vars.colors.borderStrong}`,\n    boxShadow: vars.boxShadow.lg,\n  },\n]);\n\nexport const indicator = style({\n  flex: '0 0 auto',\n  width: '8px',\n  height: '8px',\n  borderRadius: '999px',\n  backgroundColor: vars.colors.warning,\n});\n\nexport const text = sprinkles({\n  margin: 0,\n});\n"],"mappings":""}

package/lib/esm/{AuthPanel-BaIRFGbX.js → auth/login/AuthPanel.js}

@@ -1,28 +1,28 @@
-import { i as e, l as t, n, s as r, u as i } from "./loginPage.css-B7Io_DuU.js";
+import { block as e, footer as t, helper as n, panel as r, panelTitle as i } from "./loginPage.css.js";
 import { jsx as a, jsxs as o } from "react/jsx-runtime";
 //#region src/auth/login/AuthPanel.tsx
 var s = ({ title: s, description: c, children: l, footer: u }) => /* @__PURE__ */ a("div", {
-	className: t,
+	className: r,
 	children: /* @__PURE__ */ o("div", {
-		className: n,
+		className: e,
 		children: [
 			s == null ? null : /* @__PURE__ */ a("h2", {
 				className: i,
 				children: s
 			}),
 			c == null ? null : /* @__PURE__ */ a("p", {
-				className: r,
+				className: n,
 				children: c
 			}),
 			l,
 			u == null ? null : /* @__PURE__ */ a("div", {
-				className: e,
+				className: t,
 				children: u
 			})
 		]
 	})
 });
 //#endregion
-export { s as t };
+export { s as AuthPanel, s as default };
 
-//# sourceMappingURL=AuthPanel-BaIRFGbX.js.map
+//# sourceMappingURL=AuthPanel.js.map

package/lib/esm/auth/login/AuthPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthPanel.js","names":[],"sources":["../../../../src/auth/login/AuthPanel.tsx"],"sourcesContent":["/* eslint-disable no-ternary */\nimport { type JSX, type ReactNode } from 'react';\n\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  title?: string;\n  description?: string;\n  children: ReactNode;\n  footer?: ReactNode;\n};\n\nexport const AuthPanel = ({\n  title,\n  description,\n  children,\n  footer,\n}: Props): JSX.Element => {\n  return (\n    <div className={styles.panel}>\n      <div className={styles.block}>\n        {title != null ? <h2 className={styles.panelTitle}>{title}</h2> : null}\n        {description != null ? (\n          <p className={styles.helper}>{description}</p>\n        ) : null}\n        {children}\n        {footer != null ? <div className={styles.footer}>{footer}</div> : null}\n      </div>\n    </div>\n  );\n};\n\nexport default AuthPanel;\n"],"mappings":";;;AAYA,IAAa,KAAa,EACxB,UACA,gBACA,aACA,QAAA,QAGE,kBAAC,OAAD;CAAK,WAAW;WACd,kBAAC,OAAD;EAAK,WAAW;YAAhB;GACG,KAAS,OAAwD,OAAjD,kBAAC,MAAD;IAAI,WAAW;cAAoB;IAAW,CAAA;GAC9D,KAAe,OAEZ,OADF,kBAAC,KAAD;IAAG,WAAW;cAAgB;IAAgB,CAAA;GAE/C;GACA,KAAU,OAAuD,OAAhD,kBAAC,OAAD;IAAK,WAAW;cAAgB;IAAa,CAAA;GAC3D;;CACF,CAAA"}

package/lib/esm/auth/login/EmailCapturePanel.js

@@ -0,0 +1,50 @@
+import { actionsRow as e, formSurface as t, helper as n, inlineLink as r } from "./loginPage.css.js";
+import { AuthPanel as i } from "./AuthPanel.js";
+import { useBackofficeReactTranslation as a } from "../../i18n/useBackofficeReactTranslation.js";
+import { Button as o, FormError as s, FormField as c } from "@plumile/ui";
+import { jsx as l, jsxs as u } from "react/jsx-runtime";
+//#region src/auth/login/EmailCapturePanel.tsx
+var d = ({ email: d, errorMessage: f, isLoading: p, onEmailChange: m, onContinue: h, onForgotPassword: g }) => {
+	let { t: _ } = a();
+	return /* @__PURE__ */ l(i, { children: /* @__PURE__ */ u("div", {
+		className: t,
+		children: [
+			/* @__PURE__ */ l("p", {
+				className: n,
+				children: _("auth.emailCapture.description")
+			}),
+			f != null && /* @__PURE__ */ l(s, { children: f }),
+			/* @__PURE__ */ l(c, {
+				label: _("auth.emailCapture.emailLabel"),
+				name: "email",
+				type: "email",
+				value: d,
+				onChange: (e) => {
+					m(e.target.value);
+				},
+				placeholder: _("auth.emailCapture.emailPlaceholder"),
+				autoComplete: "email",
+				required: !0
+			}),
+			/* @__PURE__ */ u("div", {
+				className: e,
+				children: [/* @__PURE__ */ l(o, {
+					type: "button",
+					variant: "primary",
+					onClick: h,
+					isLoading: p,
+					children: _("auth.emailCapture.continue")
+				}), /* @__PURE__ */ l("button", {
+					type: "button",
+					className: r,
+					onClick: g,
+					children: _("auth.emailCapture.forgotPassword")
+				})]
+			})
+		]
+	}) });
+};
+//#endregion
+export { d as EmailCapturePanel };
+
+//# sourceMappingURL=EmailCapturePanel.js.map

package/lib/esm/auth/login/EmailCapturePanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailCapturePanel.js","names":[],"sources":["../../../../src/auth/login/EmailCapturePanel.tsx"],"sourcesContent":["import { type JSX } from 'react';\nimport { useBackofficeReactTranslation } from '../../i18n/useBackofficeReactTranslation.js';\n\nimport { Button, FormError, FormField } from '@plumile/ui';\n\nimport { AuthPanel } from './AuthPanel.js';\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  email: string;\n  errorMessage: string | null;\n  isLoading: boolean;\n  onEmailChange: (value: string) => void;\n  onContinue: () => void;\n  onForgotPassword: () => void;\n};\n\nexport const EmailCapturePanel = ({\n  email,\n  errorMessage,\n  isLoading,\n  onEmailChange,\n  onContinue,\n  onForgotPassword,\n}: Props): JSX.Element => {\n  const { t } = useBackofficeReactTranslation();\n  return (\n    <AuthPanel>\n      <div className={styles.formSurface}>\n        <p className={styles.helper}>{t('auth.emailCapture.description')}</p>\n        {errorMessage != null && <FormError>{errorMessage}</FormError>}\n        <FormField\n          label={t('auth.emailCapture.emailLabel')}\n          name=\"email\"\n          type=\"email\"\n          value={email}\n          onChange={(event) => {\n            onEmailChange(event.target.value);\n          }}\n          placeholder={t('auth.emailCapture.emailPlaceholder')}\n          autoComplete=\"email\"\n          required\n        />\n        <div className={styles.actionsRow}>\n          <Button\n            type=\"button\"\n            variant=\"primary\"\n            onClick={onContinue}\n            isLoading={isLoading}\n          >\n            {t('auth.emailCapture.continue')}\n          </Button>\n          <button\n            type=\"button\"\n            className={styles.inlineLink}\n            onClick={onForgotPassword}\n          >\n            {t('auth.emailCapture.forgotPassword')}\n          </button>\n        </div>\n      </div>\n    </AuthPanel>\n  );\n};\n"],"mappings":";;;;;;AAiBA,IAAa,KAAqB,EAChC,UACA,iBACA,cACA,kBACA,eACA,0BACwB;CACxB,IAAM,EAAE,SAAM,GAA+B;CAC7C,OACE,kBAAC,GAAD,EAAA,UACE,kBAAC,OAAD;EAAK,WAAW;YAAhB;GACE,kBAAC,KAAD;IAAG,WAAW;cAAgB,EAAE,gCAAgC;IAAK,CAAA;GACpE,KAAgB,QAAQ,kBAAC,GAAD,EAAA,UAAY,GAAyB,CAAA;GAC9D,kBAAC,GAAD;IACE,OAAO,EAAE,+BAA+B;IACxC,MAAK;IACL,MAAK;IACL,OAAO;IACP,WAAW,MAAU;KACnB,EAAc,EAAM,OAAO,MAAM;;IAEnC,aAAa,EAAE,qCAAqC;IACpD,cAAa;IACb,UAAA;IACA,CAAA;GACF,kBAAC,OAAD;IAAK,WAAW;cAAhB,CACE,kBAAC,GAAD;KACE,MAAK;KACL,SAAQ;KACR,SAAS;KACE;eAEV,EAAE,6BAA6B;KACzB,CAAA,EACT,kBAAC,UAAD;KACE,MAAK;KACL,WAAW;KACX,SAAS;eAER,EAAE,mCAAmC;KAC/B,CAAA,CACL;;GACF;KACI,CAAA"}

package/lib/esm/auth/login/LoginFlow.js

@@ -0,0 +1,130 @@
+import { AuthPanel as e } from "./AuthPanel.js";
+import { useBackofficeReactTranslation as t } from "../../i18n/useBackofficeReactTranslation.js";
+import { EmailCapturePanel as n } from "./EmailCapturePanel.js";
+import { MfaChallengeForm as r } from "./MfaChallengeForm.js";
+import { PasskeyLoginForm as i } from "./PasskeyLoginForm.js";
+import { MethodChooser as a } from "./MethodChooser.js";
+import { PasswordLoginPanel as o } from "./PasswordLoginPanel.js";
+import { useCallback as s, useEffect as c, useMemo as l, useRef as u, useState as d } from "react";
+import { AuthLayout as f } from "@plumile/ui";
+import { jsx as p } from "react/jsx-runtime";
+//#region src/auth/login/LoginFlow.tsx
+var m = ({ auth: m, oidcProviders: h, onLoginSuccess: g, onForgotPassword: _ }) => {
+	let { t: v } = t(), [y, b] = d(""), [x, S] = d([]), [C, w] = d(null), [T, E] = d("email"), [D, O] = d(!1), [k, A] = d(null), j = u(!0), M = l(() => ({
+		...m,
+		beginAuthentication: async (e) => {
+			let t = await m.beginAuthentication(e);
+			return b(e), S(t.methods), w(t.lockedUntil), t;
+		}
+	}), [m]), N = s(({ force: e } = { force: !1 }) => {
+		!e && m.nextStep === "TOTP" || g();
+	}, [m.nextStep, g]), P = m.nextStep === "TOTP" || T === "mfa", F = v(P ? "auth.loginFlow.title.mfa" : "auth.loginFlow.title.default"), I = v(P ? "auth.loginFlow.subtitle.mfa" : "auth.loginFlow.subtitle.default"), L = s(async (e) => {
+		A(null);
+		try {
+			let t = e.trim(), n = await m.beginAuthentication(t);
+			b(t), S(n.methods), w(n.lockedUntil), n.methods.some((e) => e === "PASSKEY") ? E("passkey") : n.methods.includes("PASSWORD") ? E("password") : E("methods");
+		} catch {
+			A(v("auth.loginFlow.errors.tryAgain"));
+		}
+	}, [m, v]);
+	c(() => {
+		j.current = !0;
+		let e = y.trim();
+		return T === "passkey" && !D && e !== "" && (O(!0), (async () => {
+			try {
+				let t = await M.loginWithPasskey({ email: e });
+				if (!j.current) return;
+				if (t === "success") {
+					N();
+					return;
+				}
+				if (t === "mfa-required") {
+					E("mfa");
+					return;
+				}
+				E("methods"), A(v("auth.loginFlow.errors.passkeyUnavailable"));
+			} catch {
+				if (!j.current) return;
+				A(v("auth.loginFlow.errors.passkeyUnavailable")), E("methods");
+			}
+		})().catch(() => {})), () => {
+			j.current = !1;
+		};
+	}, [
+		y,
+		N,
+		D,
+		M,
+		v,
+		T
+	]);
+	let R;
+	return R = P ? /* @__PURE__ */ p(e, { children: /* @__PURE__ */ p(r, {
+		auth: m,
+		onSuccess: () => {
+			N({ force: !0 });
+		},
+		onBack: () => {
+			m.reset(), E("email");
+		}
+	}) }) : T === "passkey" ? /* @__PURE__ */ p(e, {
+		title: v("auth.loginFlow.passkey.title"),
+		description: v("auth.loginFlow.passkey.description", { email: y }),
+		children: /* @__PURE__ */ p(i, {
+			auth: M,
+			onSuccess: N,
+			onShowMethods: () => {
+				E("methods");
+			},
+			defaultEmail: y,
+			isAttemptingPasskey: m.isLoading
+		})
+	}) : T === "methods" ? /* @__PURE__ */ p(e, {
+		title: v("auth.loginFlow.methods.title"),
+		children: /* @__PURE__ */ p(a, {
+			email: y,
+			methods: x,
+			lockedUntil: C,
+			onSelect: (e) => {
+				if (e === "PASSKEY") {
+					E("passkey");
+					return;
+				}
+				e === "PASSWORD" && E("password");
+			},
+			onBack: () => {
+				E("email");
+			}
+		})
+	}) : T === "password" ? /* @__PURE__ */ p(o, {
+		auth: M,
+		defaultEmail: y,
+		onForgotPassword: _,
+		onSuccess: N,
+		providers: h
+	}) : /* @__PURE__ */ p(n, {
+		email: y,
+		errorMessage: k,
+		isLoading: m.isLoading,
+		onEmailChange: (e) => {
+			b(e), A(null);
+		},
+		onContinue: () => {
+			let e = y.trim();
+			if (e === "") {
+				A(v("auth.loginFlow.errors.emailRequired"));
+				return;
+			}
+			L(e).catch(() => {});
+		},
+		onForgotPassword: _
+	}), /* @__PURE__ */ p(f, {
+		title: F,
+		subtitle: I,
+		children: R
+	});
+};
+//#endregion
+export { m as LoginFlow };
+
+//# sourceMappingURL=LoginFlow.js.map

package/lib/esm/auth/login/LoginFlow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginFlow.js","names":[],"sources":["../../../../src/auth/login/LoginFlow.tsx"],"sourcesContent":["/* eslint-disable no-ternary */\nimport {\n  type JSX,\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from 'react';\nimport { useBackofficeReactTranslation } from '../../i18n/useBackofficeReactTranslation.js';\n\nimport { AuthLayout } from '@plumile/ui';\n\nimport type {\n  AuthMethod,\n  OidcProviderKind,\n} from '../../modules/sharedSchemaTypes.js';\nimport type { UseAuthReturn } from '../../hooks/useAuth.js';\n\nimport { MfaChallengeForm } from './MfaChallengeForm.js';\nimport { PasskeyLoginForm } from './PasskeyLoginForm.js';\nimport { MethodChooser } from './MethodChooser.js';\nimport AuthPanel from './AuthPanel.js';\nimport { EmailCapturePanel } from './EmailCapturePanel.js';\nimport { PasswordLoginPanel } from './PasswordLoginPanel.js';\n\nexport type LoginFlowProps = {\n  auth: UseAuthReturn;\n  oidcProviders: readonly OidcProviderKind[];\n  onLoginSuccess: () => void;\n  onForgotPassword: () => void;\n};\n\ntype View = 'email' | 'passkey' | 'methods' | 'password' | 'mfa';\n\nexport const LoginFlow = ({\n  auth,\n  oidcProviders,\n  onLoginSuccess,\n  onForgotPassword,\n}: LoginFlowProps): JSX.Element => {\n  const { t } = useBackofficeReactTranslation();\n  const [email, setEmail] = useState('');\n  const [methods, setMethods] = useState<readonly AuthMethod[]>([]);\n  const [lockedUntil, setLockedUntil] = useState<string | null>(null);\n  const [view, setView] = useState<View>('email');\n  const [hasTriedPasskey, setHasTriedPasskey] = useState(false);\n  const [localError, setLocalError] = useState<string | null>(null);\n  const passkeyAttemptActive = useRef(true);\n\n  const loginAdapter = useMemo(() => {\n    return {\n      ...auth,\n      beginAuthentication: async (inputEmail: string) => {\n        const result = await auth.beginAuthentication(inputEmail);\n        setEmail(inputEmail);\n        setMethods(result.methods);\n        setLockedUntil(result.lockedUntil);\n        return result;\n      },\n    };\n  }, [auth]);\n\n  const handleLoginSuccess = useCallback(\n    ({ force } = { force: false }) => {\n      if (!force && auth.nextStep === 'TOTP') {\n        return;\n      }\n      onLoginSuccess();\n    },\n    [auth.nextStep, onLoginSuccess],\n  );\n\n  const isMfaStep = auth.nextStep === 'TOTP' || view === 'mfa';\n  const title = isMfaStep\n    ? t('auth.loginFlow.title.mfa')\n    : t('auth.loginFlow.title.default');\n  const subtitle = isMfaStep\n    ? t('auth.loginFlow.subtitle.mfa')\n    : t('auth.loginFlow.subtitle.default');\n\n  const startFlowForEmail = useCallback(\n    async (inputEmail: string) => {\n      setLocalError(null);\n      try {\n        const trimmed = inputEmail.trim();\n        const result = await auth.beginAuthentication(trimmed);\n        setEmail(trimmed);\n        setMethods(result.methods);\n        setLockedUntil(result.lockedUntil);\n        const hasPasskey = result.methods.some((method) => {\n          return method === 'PASSKEY';\n        });\n\n        if (hasPasskey) {\n          setView('passkey');\n        } else if (result.methods.includes('PASSWORD')) {\n          setView('password');\n        } else {\n          setView('methods');\n        }\n      } catch {\n        setLocalError(t('auth.loginFlow.errors.tryAgain'));\n      }\n    },\n    [auth, t],\n  );\n\n  useEffect(() => {\n    passkeyAttemptActive.current = true;\n    const trimmedEmail = email.trim();\n    const shouldAttempt =\n      view === 'passkey' && !hasTriedPasskey && trimmedEmail !== '';\n\n    if (shouldAttempt) {\n      setHasTriedPasskey(true);\n      const runPasskeyLogin = async () => {\n        try {\n          const status = await loginAdapter.loginWithPasskey({\n            email: trimmedEmail,\n          });\n\n          if (!passkeyAttemptActive.current) {\n            return;\n          }\n\n          if (status === 'success') {\n            handleLoginSuccess();\n            return;\n          }\n\n          if (status === 'mfa-required') {\n            setView('mfa');\n            return;\n          }\n\n          setView('methods');\n          setLocalError(t('auth.loginFlow.errors.passkeyUnavailable'));\n        } catch {\n          if (!passkeyAttemptActive.current) {\n            return;\n          }\n\n          setLocalError(t('auth.loginFlow.errors.passkeyUnavailable'));\n          setView('methods');\n        }\n      };\n      runPasskeyLogin().catch(() => {\n        // Errors are handled inside runPasskeyLogin; ignore any unexpected rethrow.\n      });\n    }\n\n    return () => {\n      passkeyAttemptActive.current = false;\n    };\n  }, [email, handleLoginSuccess, hasTriedPasskey, loginAdapter, t, view]);\n\n  let content: JSX.Element;\n\n  if (isMfaStep) {\n    content = (\n      <AuthPanel>\n        <MfaChallengeForm\n          auth={auth}\n          onSuccess={() => {\n            handleLoginSuccess({ force: true });\n          }}\n          onBack={() => {\n            auth.reset();\n            setView('email');\n          }}\n        />\n      </AuthPanel>\n    );\n  } else if (view === 'passkey') {\n    content = (\n      <AuthPanel\n        title={t('auth.loginFlow.passkey.title')}\n        description={t('auth.loginFlow.passkey.description', { email })}\n      >\n        <PasskeyLoginForm\n          auth={loginAdapter}\n          onSuccess={handleLoginSuccess}\n          onShowMethods={() => {\n            setView('methods');\n          }}\n          defaultEmail={email}\n          isAttemptingPasskey={auth.isLoading}\n        />\n      </AuthPanel>\n    );\n  } else if (view === 'methods') {\n    content = (\n      <AuthPanel title={t('auth.loginFlow.methods.title')}>\n        <MethodChooser\n          email={email}\n          methods={methods}\n          lockedUntil={lockedUntil}\n          onSelect={(method) => {\n            if (method === 'PASSKEY') {\n              setView('passkey');\n              return;\n            }\n            if (method === 'PASSWORD') {\n              setView('password');\n            }\n          }}\n          onBack={() => {\n            setView('email');\n          }}\n        />\n      </AuthPanel>\n    );\n  } else if (view === 'password') {\n    content = (\n      <PasswordLoginPanel\n        auth={loginAdapter}\n        defaultEmail={email}\n        onForgotPassword={onForgotPassword}\n        onSuccess={handleLoginSuccess}\n        providers={oidcProviders}\n      />\n    );\n  } else {\n    // email capture only\n    content = (\n      <EmailCapturePanel\n        email={email}\n        errorMessage={localError}\n        isLoading={auth.isLoading}\n        onEmailChange={(value) => {\n          setEmail(value);\n          setLocalError(null);\n        }}\n        onContinue={() => {\n          const trimmed = email.trim();\n          if (trimmed === '') {\n            setLocalError(t('auth.loginFlow.errors.emailRequired'));\n            return;\n          }\n          startFlowForEmail(trimmed).catch(() => {\n            // startFlowForEmail handles its own errors.\n          });\n        }}\n        onForgotPassword={onForgotPassword}\n      />\n    );\n  }\n\n  return (\n    <AuthLayout title={title} subtitle={subtitle}>\n      {content}\n    </AuthLayout>\n  );\n};\n"],"mappings":";;;;;;;;;;;AAmCA,IAAa,KAAa,EACxB,SACA,kBACA,mBACA,0BACiC;CACjC,IAAM,EAAE,SAAM,GAA+B,EACvC,CAAC,GAAO,KAAY,EAAS,GAAG,EAChC,CAAC,GAAS,KAAc,EAAgC,EAAE,CAAC,EAC3D,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAC7D,CAAC,GAAM,KAAW,EAAe,QAAQ,EACzC,CAAC,GAAiB,KAAsB,EAAS,GAAM,EACvD,CAAC,GAAY,KAAiB,EAAwB,KAAK,EAC3D,IAAuB,EAAO,GAAK,EAEnC,IAAe,SACZ;EACL,GAAG;EACH,qBAAqB,OAAO,MAAuB;GACjD,IAAM,IAAS,MAAM,EAAK,oBAAoB,EAAW;GAIzD,OAHA,EAAS,EAAW,EACpB,EAAW,EAAO,QAAQ,EAC1B,EAAe,EAAO,YAAY,EAC3B;;EAEV,GACA,CAAC,EAAK,CAAC,EAEJ,IAAqB,GACxB,EAAE,aAAU,EAAE,OAAO,IAAO,KAAK;EAC5B,CAAC,KAAS,EAAK,aAAa,UAGhC,GAAgB;IAElB,CAAC,EAAK,UAAU,EAAe,CAChC,EAEK,IAAY,EAAK,aAAa,UAAU,MAAS,OACjD,IACF,EADU,IACR,6BACA,+BAA+B,EAC/B,IACF,EADa,IACX,gCACA,kCAAkC,EAElC,IAAoB,EACxB,OAAO,MAAuB;EAC5B,EAAc,KAAK;EACnB,IAAI;GACF,IAAM,IAAU,EAAW,MAAM,EAC3B,IAAS,MAAM,EAAK,oBAAoB,EAAQ;GAQtD,AAPA,EAAS,EAAQ,EACjB,EAAW,EAAO,QAAQ,EAC1B,EAAe,EAAO,YAAY,EACf,EAAO,QAAQ,MAAM,MAC/B,MAAW,UAGhB,GACF,EAAQ,UAAU,GACT,EAAO,QAAQ,SAAS,WAAW,GAC5C,EAAQ,WAAW,GAEnB,EAAQ,UAAU;UAEd;GACN,EAAc,EAAE,iCAAiC,CAAC;;IAGtD,CAAC,GAAM,EAAE,CACV;CAED,QAAgB;EACd,EAAqB,UAAU;EAC/B,IAAM,IAAe,EAAM,MAAM;EA0CjC,OAxCE,MAAS,aAAa,CAAC,KAAmB,MAAiB,OAG3D,EAAmB,GAAK,GAgCxB,YA/BoC;GAClC,IAAI;IACF,IAAM,IAAS,MAAM,EAAa,iBAAiB,EACjD,OAAO,GACR,CAAC;IAEF,IAAI,CAAC,EAAqB,SACxB;IAGF,IAAI,MAAW,WAAW;KACxB,GAAoB;KACpB;;IAGF,IAAI,MAAW,gBAAgB;KAC7B,EAAQ,MAAM;KACd;;IAIF,AADA,EAAQ,UAAU,EAClB,EAAc,EAAE,2CAA2C,CAAC;WACtD;IACN,IAAI,CAAC,EAAqB,SACxB;IAIF,AADA,EAAc,EAAE,2CAA2C,CAAC,EAC5D,EAAQ,UAAU;;MAGL,CAAC,YAAY,GAE5B,SAGS;GACX,EAAqB,UAAU;;IAEhC;EAAC;EAAO;EAAoB;EAAiB;EAAc;EAAG;EAAK,CAAC;CAEvE,IAAI;CA4FJ,OA1FA,AAkEE,IAlEE,IAEA,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;EACQ;EACN,iBAAiB;GACf,EAAmB,EAAE,OAAO,IAAM,CAAC;;EAErC,cAAc;GAEZ,AADA,EAAK,OAAO,EACZ,EAAQ,QAAQ;;EAElB,CAAA,EACQ,CAAA,GAEL,MAAS,YAEhB,kBAAC,GAAD;EACE,OAAO,EAAE,+BAA+B;EACxC,aAAa,EAAE,sCAAsC,EAAE,UAAO,CAAC;YAE/D,kBAAC,GAAD;GACE,MAAM;GACN,WAAW;GACX,qBAAqB;IACnB,EAAQ,UAAU;;GAEpB,cAAc;GACd,qBAAqB,EAAK;GAC1B,CAAA;EACQ,CAAA,GAEL,MAAS,YAEhB,kBAAC,GAAD;EAAW,OAAO,EAAE,+BAA+B;YACjD,kBAAC,GAAD;GACS;GACE;GACI;GACb,WAAW,MAAW;IACpB,IAAI,MAAW,WAAW;KACxB,EAAQ,UAAU;KAClB;;IAEF,AAAI,MAAW,cACb,EAAQ,WAAW;;GAGvB,cAAc;IACZ,EAAQ,QAAQ;;GAElB,CAAA;EACQ,CAAA,GAEL,MAAS,aAEhB,kBAAC,GAAD;EACE,MAAM;EACN,cAAc;EACI;EAClB,WAAW;EACX,WAAW;EACX,CAAA,GAKF,kBAAC,GAAD;EACS;EACP,cAAc;EACd,WAAW,EAAK;EAChB,gBAAgB,MAAU;GAExB,AADA,EAAS,EAAM,EACf,EAAc,KAAK;;EAErB,kBAAkB;GAChB,IAAM,IAAU,EAAM,MAAM;GAC5B,IAAI,MAAY,IAAI;IAClB,EAAc,EAAE,sCAAsC,CAAC;IACvD;;GAEF,EAAkB,EAAQ,CAAC,YAAY,GAErC;;EAEc;EAClB,CAAA,EAKJ,kBAAC,GAAD;EAAmB;EAAiB;YACjC;EACU,CAAA"}

package/lib/esm/auth/login/MethodChooser.js

@@ -0,0 +1,49 @@
+import { brandGhostButton as e, formSurface as t, fullWidth as n, helper as r, inlineLink as i, stack as a } from "./loginPage.css.js";
+import { useBackofficeReactTranslation as o } from "../../i18n/useBackofficeReactTranslation.js";
+import { Button as s, FormError as c, cx as l } from "@plumile/ui";
+import { jsx as u, jsxs as d } from "react/jsx-runtime";
+import { Trans as f } from "react-i18next";
+//#region src/auth/login/MethodChooser.tsx
+var p = ({ email: p, methods: m, lockedUntil: h, onSelect: g, onBack: _ }) => {
+	let { t: v } = o(), y = m.length === 0, b = h == null ? v("auth.methodChooser.locked") : v("auth.methodChooser.lockedWithTime", { time: new Date(h).toLocaleString() }), x = m.map((t) => {
+		let r = t === "PASSKEY" ? v("auth.methodChooser.methods.passkey") : t === "PASSWORD" ? v("auth.methodChooser.methods.password") : v("auth.methodChooser.methods.other", { method: t.toLowerCase() });
+		return /* @__PURE__ */ u(s, {
+			type: "button",
+			variant: "secondary",
+			onClick: () => {
+				g(t);
+			},
+			className: l(n, e),
+			children: r
+		}, t);
+	});
+	return /* @__PURE__ */ u("div", {
+		className: t,
+		children: /* @__PURE__ */ d("div", {
+			className: a,
+			children: [
+				/* @__PURE__ */ u("p", {
+					className: r,
+					children: /* @__PURE__ */ u(f, {
+						i18nKey: "auth.methodChooser.prompt",
+						values: { email: p },
+						components: { strong: /* @__PURE__ */ u("strong", {}) }
+					})
+				}),
+				y ? /* @__PURE__ */ u(c, { children: b }) : null,
+				y ? null : x,
+				/* @__PURE__ */ u(s, {
+					type: "button",
+					variant: "text",
+					onClick: _,
+					className: i,
+					children: v("auth.methodChooser.actions.back")
+				})
+			]
+		})
+	});
+};
+//#endregion
+export { p as MethodChooser };
+
+//# sourceMappingURL=MethodChooser.js.map

package/lib/esm/auth/login/MethodChooser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MethodChooser.js","names":[],"sources":["../../../../src/auth/login/MethodChooser.tsx"],"sourcesContent":["/* eslint-disable no-ternary */\nimport { type JSX } from 'react';\nimport { Trans } from 'react-i18next';\nimport { Button, FormError, cx } from '@plumile/ui';\n\nimport type { AuthMethod } from '../../modules/sharedSchemaTypes.js';\nimport { useBackofficeReactTranslation } from '../../i18n/useBackofficeReactTranslation.js';\n\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  email: string;\n  methods: readonly AuthMethod[];\n  lockedUntil: string | null;\n  onSelect: (method: AuthMethod) => void;\n  onBack: () => void;\n};\n\nexport const MethodChooser = ({\n  email,\n  methods,\n  lockedUntil,\n  onSelect,\n  onBack,\n}: Props): JSX.Element => {\n  const { t } = useBackofficeReactTranslation();\n  const isLocked = methods.length === 0;\n  const lockedMessage =\n    lockedUntil != null\n      ? t('auth.methodChooser.lockedWithTime', {\n          time: new Date(lockedUntil).toLocaleString(),\n        })\n      : t('auth.methodChooser.locked');\n\n  const methodButtons = methods.map((method) => {\n    const label =\n      method === 'PASSKEY'\n        ? t('auth.methodChooser.methods.passkey')\n        : method === 'PASSWORD'\n          ? t('auth.methodChooser.methods.password')\n          : t('auth.methodChooser.methods.other', {\n              method: method.toLowerCase(),\n            });\n    return (\n      <Button\n        key={method}\n        type=\"button\"\n        variant=\"secondary\"\n        onClick={() => {\n          onSelect(method);\n        }}\n        className={cx(styles.fullWidth, styles.brandGhostButton)}\n      >\n        {label}\n      </Button>\n    );\n  });\n\n  return (\n    <div className={styles.formSurface}>\n      <div className={styles.stack}>\n        <p className={styles.helper}>\n          <Trans\n            i18nKey=\"auth.methodChooser.prompt\"\n            values={{ email }}\n            components={{ strong: <strong /> }}\n          />\n        </p>\n        {isLocked ? <FormError>{lockedMessage}</FormError> : null}\n        {!isLocked ? methodButtons : null}\n        <Button\n          type=\"button\"\n          variant=\"text\"\n          onClick={onBack}\n          className={styles.inlineLink}\n        >\n          {t('auth.methodChooser.actions.back')}\n        </Button>\n      </div>\n    </div>\n  );\n};\n"],"mappings":";;;;;;AAkBA,IAAa,KAAiB,EAC5B,UACA,YACA,gBACA,aACA,gBACwB;CACxB,IAAM,EAAE,SAAM,GAA+B,EACvC,IAAW,EAAQ,WAAW,GAC9B,IACJ,KAAe,OAIX,EAAE,4BAA4B,GAH9B,EAAE,qCAAqC,EACrC,MAAM,IAAI,KAAK,EAAY,CAAC,gBAAgB,EAC7C,CAAC,EAGF,IAAgB,EAAQ,KAAK,MAAW;EAC5C,IAAM,IACJ,MAAW,YACP,EAAE,qCAAqC,GACvC,MAAW,aACT,EAAE,sCAAsC,GACxC,EAAE,oCAAoC,EACpC,QAAQ,EAAO,aAAa,EAC7B,CAAC;EACV,OACE,kBAAC,GAAD;GAEE,MAAK;GACL,SAAQ;GACR,eAAe;IACb,EAAS,EAAO;;GAElB,WAAW,EAAG,GAAkB,EAAwB;aAEvD;GACM,EATF,EASE;GAEX;CAEF,OACE,kBAAC,OAAD;EAAK,WAAW;YACd,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,KAAD;KAAG,WAAW;eACZ,kBAAC,GAAD;MACE,SAAQ;MACR,QAAQ,EAAE,UAAO;MACjB,YAAY,EAAE,QAAQ,kBAAC,UAAD,EAAU,CAAA,EAAE;MAClC,CAAA;KACA,CAAA;IACH,IAAW,kBAAC,GAAD,EAAA,UAAY,GAA0B,CAAA,GAAG;IACnD,IAA2B,OAAhB;IACb,kBAAC,GAAD;KACE,MAAK;KACL,SAAQ;KACR,SAAS;KACT,WAAW;eAEV,EAAE,kCAAkC;KAC9B,CAAA;IACL;;EACF,CAAA"}

package/lib/esm/auth/login/MfaChallengeForm.js

@@ -0,0 +1,80 @@
+import { actionsRow as e, formSurface as t, helper as n, inlineLink as r, stack as i } from "./loginPage.css.js";
+import { useBackofficeReactTranslation as a } from "../../i18n/useBackofficeReactTranslation.js";
+import { useCallback as o, useEffect as s, useState as c } from "react";
+import { Button as l, FormError as u, FormField as d } from "@plumile/ui";
+import { jsx as f, jsxs as p } from "react/jsx-runtime";
+//#region src/auth/login/MfaChallengeForm.tsx
+var m = ({ auth: m, onSuccess: h, onBack: g }) => {
+	let { t: _ } = a(), [v, y] = c(""), [b, x] = c(null);
+	s(() => {
+		m.clearError(), x(null);
+	}, [m]);
+	let S = o(async (e) => {
+		e.preventDefault(), x(null);
+		let t = v.trim();
+		if (t.length < 4) {
+			x(_("auth.mfa.errors.shortCode"));
+			return;
+		}
+		try {
+			let e = { code: t };
+			await m.completeMfa(e), h();
+		} catch {
+			x(_("auth.mfa.errors.verificationFailed"));
+		}
+	}, [
+		m,
+		v,
+		h,
+		_
+	]), C = m.emailHint == null ? _("auth.mfa.helper.default") : _("auth.mfa.helper.withEmail", { email: m.emailHint }), w = b;
+	return /* @__PURE__ */ p("form", {
+		className: t,
+		onSubmit: S,
+		noValidate: !0,
+		children: [/* @__PURE__ */ p("div", {
+			className: i,
+			children: [
+				/* @__PURE__ */ f("p", {
+					className: n,
+					children: C
+				}),
+				w == null ? null : /* @__PURE__ */ f(u, { children: w }),
+				/* @__PURE__ */ f(d, {
+					label: _("auth.mfa.form.label"),
+					name: "code",
+					type: "text",
+					value: v,
+					onChange: (e) => {
+						y(e.target.value), x(null);
+					},
+					placeholder: _("auth.mfa.form.placeholder"),
+					autoComplete: "one-time-code",
+					autoFocus: !0,
+					required: !0
+				})
+			]
+		}), /* @__PURE__ */ p("div", {
+			className: e,
+			children: [/* @__PURE__ */ f(l, {
+				type: "button",
+				variant: "text",
+				size: "small",
+				className: r,
+				onClick: () => {
+					m.reset(), g();
+				},
+				children: _("auth.mfa.actions.back")
+			}), /* @__PURE__ */ f(l, {
+				type: "submit",
+				size: "large",
+				isLoading: m.isLoading,
+				children: _("auth.mfa.actions.submit")
+			})]
+		})]
+	});
+};
+//#endregion
+export { m as MfaChallengeForm };
+
+//# sourceMappingURL=MfaChallengeForm.js.map

package/lib/esm/auth/login/MfaChallengeForm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaChallengeForm.js","names":[],"sources":["../../../../src/auth/login/MfaChallengeForm.tsx"],"sourcesContent":["/* eslint-disable no-ternary */\nimport {\n  useCallback,\n  useEffect,\n  useState,\n  type FormEvent,\n  type JSX,\n} from 'react';\nimport { useBackofficeReactTranslation } from '../../i18n/useBackofficeReactTranslation.js';\n\nimport { Button, FormError, FormField } from '@plumile/ui';\n\nimport type { TotpCredentials, UseAuthReturn } from '../../hooks/useAuth.js';\n\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  auth: Pick<\n    UseAuthReturn,\n    'completeMfa' | 'isLoading' | 'error' | 'emailHint' | 'reset' | 'clearError'\n  >;\n  onSuccess: () => void;\n  onBack: () => void;\n};\n\nexport const MfaChallengeForm = ({\n  auth,\n  onSuccess,\n  onBack,\n}: Props): JSX.Element => {\n  const { t } = useBackofficeReactTranslation();\n  const [code, setCode] = useState('');\n  const [localError, setLocalError] = useState<string | null>(null);\n\n  // Clear any stale errors when the MFA form is shown\n  useEffect(() => {\n    auth.clearError();\n    setLocalError(null);\n  }, [auth]);\n\n  const handleSubmit = useCallback(\n    async (event: FormEvent<HTMLFormElement>) => {\n      event.preventDefault();\n      setLocalError(null);\n\n      const trimmed = code.trim();\n      if (trimmed.length < 4) {\n        setLocalError(t('auth.mfa.errors.shortCode'));\n        return;\n      }\n\n      try {\n        const credentials: TotpCredentials = {\n          code: trimmed,\n        };\n        await auth.completeMfa(credentials);\n        onSuccess();\n      } catch {\n        setLocalError(t('auth.mfa.errors.verificationFailed'));\n      }\n    },\n    [auth, code, onSuccess, t],\n  );\n\n  const helper =\n    auth.emailHint != null\n      ? t('auth.mfa.helper.withEmail', { email: auth.emailHint })\n      : t('auth.mfa.helper.default');\n\n  const formError = localError;\n\n  return (\n    // eslint-disable-next-line @typescript-eslint/no-misused-promises\n    <form className={styles.formSurface} onSubmit={handleSubmit} noValidate>\n      <div className={styles.stack}>\n        <p className={styles.helper}>{helper}</p>\n        {formError != null ? <FormError>{formError}</FormError> : null}\n        <FormField\n          label={t('auth.mfa.form.label')}\n          name=\"code\"\n          type=\"text\"\n          value={code}\n          onChange={(event) => {\n            setCode(event.target.value);\n            setLocalError(null);\n          }}\n          placeholder={t('auth.mfa.form.placeholder')}\n          autoComplete=\"one-time-code\"\n          autoFocus\n          required\n        />\n      </div>\n      <div className={styles.actionsRow}>\n        <Button\n          type=\"button\"\n          variant=\"text\"\n          size=\"small\"\n          className={styles.inlineLink}\n          onClick={() => {\n            auth.reset();\n            onBack();\n          }}\n        >\n          {t('auth.mfa.actions.back')}\n        </Button>\n        <Button type=\"submit\" size=\"large\" isLoading={auth.isLoading}>\n          {t('auth.mfa.actions.submit')}\n        </Button>\n      </div>\n    </form>\n  );\n};\n"],"mappings":";;;;;;AAyBA,IAAa,KAAoB,EAC/B,SACA,cACA,gBACwB;CACxB,IAAM,EAAE,SAAM,GAA+B,EACvC,CAAC,GAAM,KAAW,EAAS,GAAG,EAC9B,CAAC,GAAY,KAAiB,EAAwB,KAAK;CAGjE,QAAgB;EAEd,AADA,EAAK,YAAY,EACjB,EAAc,KAAK;IAClB,CAAC,EAAK,CAAC;CAEV,IAAM,IAAe,EACnB,OAAO,MAAsC;EAE3C,AADA,EAAM,gBAAgB,EACtB,EAAc,KAAK;EAEnB,IAAM,IAAU,EAAK,MAAM;EAC3B,IAAI,EAAQ,SAAS,GAAG;GACtB,EAAc,EAAE,4BAA4B,CAAC;GAC7C;;EAGF,IAAI;GACF,IAAM,IAA+B,EACnC,MAAM,GACP;GAED,AADA,MAAM,EAAK,YAAY,EAAY,EACnC,GAAW;UACL;GACN,EAAc,EAAE,qCAAqC,CAAC;;IAG1D;EAAC;EAAM;EAAM;EAAW;EAAE,CAC3B,EAEK,IACJ,EAAK,aAAa,OAEd,EAAE,0BAA0B,GAD5B,EAAE,6BAA6B,EAAE,OAAO,EAAK,WAAW,CAAC,EAGzD,IAAY;CAElB,OAEE,kBAAC,QAAD;EAAM,WAAW;EAAoB,UAAU;EAAc,YAAA;YAA7D,CACE,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,KAAD;KAAG,WAAW;eAAgB;KAAW,CAAA;IACxC,KAAa,OAA4C,OAArC,kBAAC,GAAD,EAAA,UAAY,GAAsB,CAAA;IACvD,kBAAC,GAAD;KACE,OAAO,EAAE,sBAAsB;KAC/B,MAAK;KACL,MAAK;KACL,OAAO;KACP,WAAW,MAAU;MAEnB,AADA,EAAQ,EAAM,OAAO,MAAM,EAC3B,EAAc,KAAK;;KAErB,aAAa,EAAE,4BAA4B;KAC3C,cAAa;KACb,WAAA;KACA,UAAA;KACA,CAAA;IACE;MACN,kBAAC,OAAD;GAAK,WAAW;aAAhB,CACE,kBAAC,GAAD;IACE,MAAK;IACL,SAAQ;IACR,MAAK;IACL,WAAW;IACX,eAAe;KAEb,AADA,EAAK,OAAO,EACZ,GAAQ;;cAGT,EAAE,wBAAwB;IACpB,CAAA,EACT,kBAAC,GAAD;IAAQ,MAAK;IAAS,MAAK;IAAQ,WAAW,EAAK;cAChD,EAAE,0BAA0B;IACtB,CAAA,CACL;KACD"}

package/lib/esm/auth/login/OidcButtons.js

@@ -0,0 +1,29 @@
+import { brandGhostButton as e, stack as t } from "./loginPage.css.js";
+import { useBackofficeReactTranslation as n } from "../../i18n/useBackofficeReactTranslation.js";
+import { Button as r } from "@plumile/ui";
+import { jsx as i } from "react/jsx-runtime";
+//#region src/auth/login/OidcButtons.tsx
+var a = "/auth/oidc/start", o = ({ providers: o }) => {
+	let { t: s } = n();
+	return o.length === 0 ? null : /* @__PURE__ */ i("div", {
+		className: t,
+		children: o.map((t) => {
+			let n = s("auth.oidc.buttons.generic");
+			t === "GOOGLE" ? n = s("auth.oidc.buttons.google") : t === "APPLE" && (n = s("auth.oidc.buttons.apple"));
+			let o = t.toLowerCase();
+			return /* @__PURE__ */ i(r, {
+				type: "button",
+				variant: "secondary",
+				className: e,
+				onClick: () => {
+					window.location.assign(`${a}?provider=${o}`);
+				},
+				children: n
+			}, t);
+		})
+	});
+};
+//#endregion
+export { o as OidcButtons };
+
+//# sourceMappingURL=OidcButtons.js.map

package/lib/esm/auth/login/OidcButtons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OidcButtons.js","names":[],"sources":["../../../../src/auth/login/OidcButtons.tsx"],"sourcesContent":["import { type JSX } from 'react';\n\nimport { Button } from '@plumile/ui';\n\nimport type { OidcProviderKind } from '../../modules/sharedSchemaTypes.js';\nimport { useBackofficeReactTranslation } from '../../i18n/useBackofficeReactTranslation.js';\n\nimport * as styles from './loginPage.css.js';\n\nconst OIDC_START_PATH = '/auth/oidc/start';\n\ntype Props = {\n  providers: readonly OidcProviderKind[];\n};\n\nexport const OidcButtons = ({ providers }: Props): JSX.Element | null => {\n  const { t } = useBackofficeReactTranslation();\n\n  if (providers.length === 0) {\n    return null;\n  }\n\n  return (\n    <div className={styles.stack}>\n      {providers.map((provider) => {\n        let label = t('auth.oidc.buttons.generic');\n        if (provider === 'GOOGLE') {\n          label = t('auth.oidc.buttons.google');\n        } else if (provider === 'APPLE') {\n          label = t('auth.oidc.buttons.apple');\n        }\n        const providerName = provider.toLowerCase();\n        return (\n          <Button\n            key={provider}\n            type=\"button\"\n            variant=\"secondary\"\n            className={styles.brandGhostButton}\n            onClick={() => {\n              window.location.assign(\n                `${OIDC_START_PATH}?provider=${providerName}`,\n              );\n            }}\n          >\n            {label}\n          </Button>\n        );\n      })}\n    </div>\n  );\n};\n"],"mappings":";;;;;AASA,IAAM,IAAkB,oBAMX,KAAe,EAAE,mBAA2C;CACvE,IAAM,EAAE,SAAM,GAA+B;CAM7C,OAJI,EAAU,WAAW,IAChB,OAIP,kBAAC,OAAD;EAAK,WAAW;YACb,EAAU,KAAK,MAAa;GAC3B,IAAI,IAAQ,EAAE,4BAA4B;GAC1C,AAAI,MAAa,WACf,IAAQ,EAAE,2BAA2B,GAC5B,MAAa,YACtB,IAAQ,EAAE,0BAA0B;GAEtC,IAAM,IAAe,EAAS,aAAa;GAC3C,OACE,kBAAC,GAAD;IAEE,MAAK;IACL,SAAQ;IACR,WAAW;IACX,eAAe;KACb,OAAO,SAAS,OACd,GAAG,EAAgB,YAAY,IAChC;;cAGF;IACM,EAXF,EAWE;IAEX;EACE,CAAA"}

package/lib/esm/auth/login/PasskeyLoginForm.js

@@ -0,0 +1,81 @@
+import { actionsRow as e, formSurface as t, helper as n, inlineLink as r, stack as i } from "./loginPage.css.js";
+import { useBackofficeReactTranslation as a } from "../../i18n/useBackofficeReactTranslation.js";
+import { useCallback as o, useEffect as s, useState as c } from "react";
+import { Button as l, FormError as u, FormField as d } from "@plumile/ui";
+import { jsx as f, jsxs as p } from "react/jsx-runtime";
+//#region src/auth/login/PasskeyLoginForm.tsx
+var m = ({ auth: m, onSuccess: h, defaultEmail: g, isAttemptingPasskey: _ = !1, onShowMethods: v }) => {
+	let { t: y } = a(), [b, x] = c(m.emailHint ?? ""), [S, C] = c(null);
+	s(() => {
+		m.emailHint != null && m.emailHint !== "" ? x(m.emailHint) : g != null && g !== "" && x(g);
+	}, [m.emailHint, g]);
+	let w = o(async (e) => {
+		if (e.preventDefault(), C(null), b.trim() === "") {
+			C(y("auth.passkey.errors.emailRequired"));
+			return;
+		}
+		try {
+			let e = await m.beginAuthentication(b.trim());
+			if (Array.isArray(e.methods) && e.methods.length === 0) {
+				C(e.lockedUntil == null ? y("auth.passkey.errors.locked") : y("auth.passkey.errors.lockedWithTime", { time: new Date(e.lockedUntil).toLocaleString() }));
+				return;
+			}
+			if (Array.isArray(e.methods) && !e.methods.includes("PASSKEY")) {
+				C(y("auth.passkey.errors.notAvailable"));
+				return;
+			}
+			await m.loginWithPasskey({ email: b.trim() }) === "success" && h();
+		} catch {
+			C(y("auth.passkey.errors.failed"));
+		}
+	}, [
+		m,
+		b,
+		h,
+		y
+	]), T = S;
+	return /* @__PURE__ */ p("form", {
+		className: t,
+		onSubmit: w,
+		noValidate: !0,
+		children: [/* @__PURE__ */ p("div", {
+			className: i,
+			children: [
+				/* @__PURE__ */ f("p", {
+					className: n,
+					children: y("auth.passkey.helper")
+				}),
+				T == null ? null : /* @__PURE__ */ f(u, { children: T }),
+				/* @__PURE__ */ f(d, {
+					label: y("auth.passkey.form.emailLabel"),
+					name: "passkey-email",
+					type: "email",
+					value: b,
+					onChange: (e) => {
+						x(e.target.value), C(null);
+					},
+					placeholder: y("auth.passkey.form.emailPlaceholder"),
+					autoComplete: "email",
+					required: !0
+				})
+			]
+		}), /* @__PURE__ */ p("div", {
+			className: e,
+			children: [/* @__PURE__ */ f(l, {
+				type: "submit",
+				variant: "primary",
+				isLoading: m.isLoading,
+				children: y(_ ? "auth.passkey.actions.submitting" : "auth.passkey.actions.submit")
+			}), v == null ? null : /* @__PURE__ */ f("button", {
+				type: "button",
+				className: r,
+				onClick: v,
+				children: y("auth.passkey.actions.showMethods")
+			})]
+		})]
+	});
+};
+//#endregion
+export { m as PasskeyLoginForm };
+
+//# sourceMappingURL=PasskeyLoginForm.js.map