@proveanything/smartlinks-auth-ui 0.3.9 → 0.3.11

package/dist/index.esm.js

@@ -10893,18 +10893,14 @@ class AuthAPI {
         });
     }
     async fetchConfig() {
-        console.log('[AuthAPI] 📋 fetchConfig called with clientId:', this.clientId);
         this.log.log('fetchConfig called with clientId:', this.clientId);
         try {
-            console.log('[AuthAPI] 🌐 Calling smartlinks.authKit.load() - this uses current SDK config (including proxyMode)');
             this.log.log('Calling smartlinks.authKit.load...');
             const result = await smartlinks.authKit.load(this.clientId);
-            console.log('[AuthAPI] ✅ smartlinks.authKit.load returned:', result);
             this.log.log('smartlinks.authKit.load returned:', result);
             return result;
         }
         catch (error) {
-            console.log('[AuthAPI] ❌ Failed to fetch UI config:', error);
             this.log.warn('Failed to fetch UI config, using defaults:', error);
             return {
                 branding: {
@@ -11503,12 +11499,9 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
     }, []);
     // Sync contact to Smartlinks (non-blocking)
     const syncContact = useCallback(async (authUser, customFields) => {
-        if (!collectionId || !shouldSyncContacts) {
-            console.log('[AuthContext] Contact sync skipped: no collectionId or disabled');
+        if (!collectionId || !shouldSyncContacts)
             return null;
-        }
         try {
-            console.log('[AuthContext] Syncing contact for user:', authUser.uid);
             const result = await smartlinks.contact.publicUpsert(collectionId, {
                 userId: authUser.uid,
                 email: authUser.email,
@@ -11517,13 +11510,10 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                 customFields: customFields || {},
                 source: 'authkit',
             });
-            console.log('[AuthContext] Contact synced:', result.contactId);
-            // Store contact ID locally
             if (!proxyMode) {
                 await tokenStorage.saveContactId(result.contactId);
             }
             setContactId(result.contactId);
-            // Fetch full contact to get customFields using public endpoint
             try {
                 const myContactResponse = await smartlinks.contact.publicGetMine(collectionId);
                 if (myContactResponse?.contact) {
@@ -11532,44 +11522,64 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                 }
             }
             catch (lookupErr) {
-                console.warn('[AuthContext] Failed to lookup full contact:', lookupErr);
+                // Non-fatal
             }
             return result.contactId;
         }
         catch (err) {
-            console.warn('[AuthContext] Contact sync failed (non-blocking):', err);
             return null;
         }
     }, [collectionId, shouldSyncContacts, proxyMode, token, accountData, accountInfo, isVerified, notifyAuthStateChange]);
+    // Detect legacy vs new interactionConfig shape
+    const isLegacyConfig = interactionConfig && !('interactionId' in interactionConfig) && ('login' in interactionConfig || 'logout' in interactionConfig || 'signup' in interactionConfig);
+    if (isLegacyConfig) {
+        console.warn('[AuthContext] Deprecated: interactionConfig uses legacy per-event-type IDs. Migrate to { interactionId, scopes? } shape. Legacy support will be removed in a future release.');
+    }
     // Track interaction event (non-blocking)
-    // IMPORTANT: Only tracks if an explicit interaction ID is configured for the event type.
-    // Interaction IDs must be pre-created in SmartLinks - you cannot use arbitrary IDs.
+    // Uses scope-based architecture: single interactionId + scope field to differentiate events.
     const trackInteraction = useCallback(async (eventType, userId, currentContactId, metadata) => {
-        if (!collectionId || !shouldTrackInteractions) {
-            console.log('[AuthContext] Interaction tracking skipped: no collectionId or disabled');
+        if (!collectionId || !shouldTrackInteractions)
             return;
+        let interactionId;
+        let scope;
+        if (isLegacyConfig) {
+            // Legacy: per-event-type IDs (deprecated)
+            const legacyConfig = interactionConfig;
+            const legacyMap = {
+                login: legacyConfig?.login,
+                logout: legacyConfig?.logout,
+                signup: legacyConfig?.signup,
+                session_restore: legacyConfig?.sessionRestore,
+            };
+            interactionId = legacyMap[eventType];
+            if (!interactionId)
+                return;
         }
-        // Only track if explicit interaction ID is configured - no defaults
-        const interactionIdMap = {
-            login: interactionConfig?.login,
-            logout: interactionConfig?.logout,
-            signup: interactionConfig?.signup,
-            session_restore: interactionConfig?.sessionRestore,
-        };
-        const interactionId = interactionIdMap[eventType];
-        if (!interactionId) {
-            console.log(`[AuthContext] No interaction ID configured for '${eventType}', skipping (this is normal if not configured)`);
+        else if (interactionConfig && 'interactionId' in interactionConfig) {
+            // New: single ID + scope
+            interactionId = interactionConfig.interactionId;
+            if (!interactionId)
+                return;
+            const defaultScopes = {
+                login: 'login',
+                logout: 'logout',
+                signup: 'signup',
+                session_restore: 'session_restore',
+            };
+            const customScopes = interactionConfig.scopes || {};
+            scope = customScopes[eventType === 'session_restore' ? 'sessionRestore' : eventType] || defaultScopes[eventType];
+        }
+        else {
             return;
         }
         try {
-            console.log(`[AuthContext] Tracking interaction: ${interactionId}`);
             await smartlinks.interactions.submitPublicEvent(collectionId, {
                 collectionId,
                 interactionId,
                 userId,
                 contactId: currentContactId || undefined,
                 appId: interactionAppId,
-                eventType,
+                scope,
                 outcome: 'completed',
                 metadata: {
                     ...metadata,
@@ -11577,13 +11587,12 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                     source: 'authkit',
                 },
             });
-            console.log(`[AuthContext] Tracked interaction: ${interactionId}`);
             notifyAuthStateChange('INTERACTION_TRACKED', user, token, accountData, accountInfo, isVerified, contact, contactId);
         }
         catch (err) {
-            console.warn('[AuthContext] Interaction tracking failed (non-blocking):', err);
+            // Non-blocking
         }
-    }, [collectionId, shouldTrackInteractions, interactionAppId, interactionConfig, user, token, accountData, accountInfo, isVerified, contact, contactId, notifyAuthStateChange]);
+    }, [collectionId, shouldTrackInteractions, interactionAppId, interactionConfig, isLegacyConfig, user, token, accountData, accountInfo, isVerified, contact, contactId, notifyAuthStateChange]);
     // Keep refs in sync with latest callbacks (avoids stale closures)
     useEffect(() => {
         syncContactRef.current = syncContact;
@@ -11593,20 +11602,13 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
     }, [trackInteraction]);
     // Get contact (with optional refresh)
     const getContact = useCallback(async (forceRefresh = false) => {
-        if (!collectionId) {
-            console.log('[AuthContext] getContact: no collectionId');
+        if (!collectionId)
             return null;
-        }
-        // Need either email or userId to lookup contact
-        if (!user?.email && !user?.uid) {
-            console.log('[AuthContext] getContact: no user email or uid');
+        if (!user?.email && !user?.uid)
             return null;
-        }
-        if (contact && !forceRefresh) {
+        if (contact && !forceRefresh)
             return contact;
-        }
         try {
-            console.log('[AuthContext] Fetching contact via publicGetMine');
             const result = await smartlinks.contact.publicGetMine(collectionId);
             if (result?.contact) {
                 const contactData = result.contact;
@@ -11617,7 +11619,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
             return null;
         }
         catch (err) {
-            console.warn('[AuthContext] Failed to get contact:', err);
             return null;
         }
     }, [collectionId, user, contact]);
@@ -11626,24 +11627,19 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
         if (!collectionId || !contactId) {
             throw new Error('No contact to update. Ensure collectionId is provided and user is synced.');
         }
-        console.log('[AuthContext] Updating contact custom fields:', contactId);
         const updated = await smartlinks.contact.update(collectionId, contactId, { customFields });
         setContact(updated);
         return updated;
     }, [collectionId, contactId]);
     // Initialize auth state
     useEffect(() => {
-        if (initializingRef.current) {
-            console.log('[AuthContext] Skipping initialization - already in progress');
+        if (initializingRef.current)
             return;
-        }
         let isMounted = true;
         initializingRef.current = true;
         const initializeAuth = async () => {
             try {
                 if (proxyMode) {
-                    // PROXY MODE: Check for existing session via parent's auth.getAccount()
-                    console.log('[AuthContext] Proxy mode: checking for existing session via auth.getAccount()');
                     try {
                         const accountResponse = await smartlinks.auth.getAccount();
                         const accountAny = accountResponse;
@@ -11659,17 +11655,16 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                             setAccountData(accountResponse);
                             setAccountInfo(accountResponse);
                             setIsVerified(true);
-                            console.log('[AuthContext] Proxy mode: initialized from parent account, uid:', accountAny.uid);
                             notifyAuthStateChange('LOGIN', userFromAccount, null, accountResponse, accountResponse, true);
                             // Sync contact in background (proxy mode) - use ref for stable dependency
                             syncContactRef.current?.(userFromAccount, accountResponse);
                         }
                         else if (isMounted) {
-                            console.log('[AuthContext] Proxy mode: no valid session (no uid), awaiting login');
+                            // No valid session, awaiting login
                         }
                     }
                     catch (error) {
-                        console.log('[AuthContext] Proxy mode: auth.getAccount() failed, awaiting login:', error);
+                        // auth.getAccount() failed, awaiting login
                     }
                     if (isMounted) {
                         setIsLoading(false);
@@ -11693,31 +11688,25 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                         // Set loading to false IMMEDIATELY after optimistic restore
                         // Don't wait for background verification
                         setIsLoading(false);
-                        console.log('[AuthContext] Session restored optimistically (pending verification)');
                         notifyAuthStateChange('SESSION_RESTORED_OFFLINE', storedUser, storedToken.token, storedAccountData || null, null, false, null, storedContactId);
                     }
-                    // BACKGROUND: Verify token (non-blocking)
                     try {
-                        console.log('[AuthContext] Verifying stored token in background...');
                         await smartlinks.auth.verifyToken(storedToken.token);
                         if (isMounted) {
                             setIsVerified(true);
                             pendingVerificationRef.current = false;
-                            console.log('[AuthContext] Session verified successfully');
                             notifyAuthStateChange('SESSION_VERIFIED', storedUser, storedToken.token, storedAccountData || null, null, true, null, storedContactId);
                             // Track session restore interaction (optional) - use ref for stable dependency
-                            if (interactionConfig?.sessionRestore) {
+                            if (interactionConfig && ('interactionId' in interactionConfig || interactionConfig?.sessionRestore)) {
                                 trackInteractionRef.current?.('session_restore', storedUser.uid, storedContactId);
                             }
                         }
                     }
                     catch (err) {
                         if (isNetworkError(err)) {
-                            console.warn('[AuthContext] Network error during verification, will retry on reconnect:', err);
                             pendingVerificationRef.current = true;
                         }
                         else {
-                            console.warn('[AuthContext] Token verification failed (auth error), clearing credentials:', err);
                             if (isMounted) {
                                 setToken(null);
                                 setUser(null);
@@ -11754,16 +11743,14 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
         return () => {
             isMounted = false;
         };
-    }, [proxyMode, notifyAuthStateChange, isNetworkError, interactionConfig?.sessionRestore]);
+    }, [proxyMode, notifyAuthStateChange, isNetworkError, interactionConfig]);
     // Listen for parent auth state changes (proxy mode only)
     useEffect(() => {
         if (!proxyMode)
             return;
-        console.log('[AuthContext] Proxy mode: setting up parent message listener');
         const handleParentMessage = (event) => {
             if (event.data?.type === 'smartlinks:authkit:state') {
                 const { user: parentUser, accountData: parentAccountData, authenticated } = event.data.payload || {};
-                console.log('[AuthContext] Proxy mode: received state from parent:', { authenticated });
                 if (authenticated && parentUser) {
                     const userObj = {
                         uid: parentUser.uid || parentUser.id,
@@ -11776,7 +11763,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                     setAccountInfo(parentAccountData || null);
                     setIsVerified(true);
                     notifyAuthStateChange('CROSS_TAB_SYNC', userObj, null, parentAccountData || null, parentAccountData || null, true);
-                    // Sync contact on cross-tab state - use ref for stable dependency
                     syncContactRef.current?.(userObj, parentAccountData);
                 }
                 else {
@@ -11793,7 +11779,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
         };
         window.addEventListener('message', handleParentMessage);
         return () => {
-            console.log('[AuthContext] Proxy mode: cleaning up parent message listener');
             window.removeEventListener('message', handleParentMessage);
         };
     }, [proxyMode, notifyAuthStateChange]);
@@ -11801,12 +11786,9 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
     useEffect(() => {
         if (proxyMode)
             return;
-        console.log('[AuthContext] Setting up cross-tab synchronization');
         const unsubscribe = onStorageChange(async (event) => {
-            console.log('[AuthContext] Cross-tab storage event:', event.type, event.key);
             try {
                 if (event.type === 'clear') {
-                    console.log('[AuthContext] Detected logout in another tab');
                     setToken(null);
                     setUser(null);
                     setAccountData(null);
@@ -11818,7 +11800,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                     notifyAuthStateChange('CROSS_TAB_SYNC', null, null, null, null, false);
                 }
                 else if (event.type === 'remove' && (event.key === 'token' || event.key === 'user')) {
-                    console.log('[AuthContext] Detected token/user removal in another tab');
                     setToken(null);
                     setUser(null);
                     setAccountData(null);
@@ -11830,7 +11811,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                     notifyAuthStateChange('CROSS_TAB_SYNC', null, null, null, null, false);
                 }
                 else if (event.type === 'set' && event.key === 'token') {
-                    console.log('[AuthContext] Detected login in another tab');
                     const storedToken = await tokenStorage.getToken();
                     const storedUser = await tokenStorage.getUser();
                     const storedAccountData = await tokenStorage.getAccountData();
@@ -11843,9 +11823,7 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                             setContactId(storedContactId);
                         }
                         setIsVerified(true);
-                        smartlinks.auth.verifyToken(storedToken.token).catch(err => {
-                            console.warn('[AuthContext] Failed to restore bearer token from cross-tab sync:', err);
-                        });
+                        smartlinks.auth.verifyToken(storedToken.token).catch(() => { });
                         notifyAuthStateChange('CROSS_TAB_SYNC', storedUser, storedToken.token, storedAccountData, null, true, null, storedContactId);
                     }
                 }
@@ -11853,7 +11831,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                     const cached = await tokenStorage.getAccountInfo();
                     if (cached && !cached.isStale) {
                         setAccountInfo(cached.data);
-                        console.log('[AuthContext] Account info synced from another tab');
                     }
                 }
             }
@@ -11862,7 +11839,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
             }
         });
         return () => {
-            console.log('[AuthContext] Cleaning up cross-tab synchronization');
             unsubscribe();
         };
     }, [proxyMode, notifyAuthStateChange]);
@@ -11877,22 +11853,14 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                     event.data?.messageId === messageId) {
                     window.removeEventListener('message', handleAck);
                     clearTimeout(timeoutHandle);
-                    if (event.data.success) {
-                        console.log('[AuthContext] Parent acknowledged login successfully');
-                    }
-                    else {
-                        console.warn('[AuthContext] Parent rejected login:', event.data.error);
-                    }
                     resolve();
                 }
             };
             const timeoutHandle = setTimeout(() => {
                 window.removeEventListener('message', handleAck);
-                console.warn('[AuthContext] Parent login acknowledgment timed out, proceeding anyway');
-                resolve(); // Don't block forever - fallback to current behavior
+                resolve();
             }, timeoutMs);
             window.addEventListener('message', handleAck);
-            console.log('[AuthContext] Sending login to parent, awaiting acknowledgment:', messageId);
             iframe.sendParentCustom('smartlinks:authkit:login', {
                 messageId,
                 token: authToken,
@@ -11912,9 +11880,7 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                 if (authAccountData) {
                     await tokenStorage.saveAccountData(authAccountData);
                 }
-                smartlinks.auth.verifyToken(authToken).catch(err => {
-                    console.warn('Failed to set bearer token on login:', err);
-                });
+                smartlinks.auth.verifyToken(authToken).catch(() => { });
             }
             // Always update memory state (but NOT isVerified yet - wait for parent ack in iframe mode)
             setToken(authToken);
@@ -11926,7 +11892,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
             // This ensures the parent has validated the token and the server recognizes
             // the session before we attempt any authenticated API calls (like syncContact)
             if (iframe.isIframe()) {
-                console.log('[AuthContext] Notifying parent of login and waiting for acknowledgment');
                 await notifyParentLoginAndWait(authToken, authUser, authAccountData);
             }
             // NOW set isVerified - after parent has acknowledged and session is ready
@@ -11940,9 +11905,7 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
             });
             // Optionally preload account info on login (standalone mode only)
             if (!proxyMode && preloadAccountInfo) {
-                getAccount(true).catch(error => {
-                    console.warn('[AuthContext] Failed to preload account info:', error);
-                });
+                getAccount(true).catch(() => { });
             }
         }
         catch (error) {
@@ -11954,18 +11917,12 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
         const currentUser = user;
         const currentContactId = contactId;
         try {
-            // Clear Google Sign-In session on native side (fire-and-forget with timeout)
-            // This ensures the next login shows the account picker instead of auto-signing in
-            console.log('[AuthContext] Checking for native Google sign-out...');
             try {
-                // Dynamic import to avoid circular dependency
                 const { signOutGoogleNative } = await Promise.resolve().then(function () { return SmartlinksAuthUI$1; });
                 await signOutGoogleNative();
-                console.log('[AuthContext] Native Google sign-out completed');
             }
             catch (err) {
-                // signOutGoogleNative is fire-and-forget, errors are expected if no native bridge
-                console.log('[AuthContext] Native Google sign-out skipped or failed (non-blocking):', err);
+                // signOutGoogleNative is fire-and-forget
             }
             // Only clear persistent storage in standalone mode
             if (!proxyMode) {
@@ -11983,7 +11940,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
             pendingVerificationRef.current = false;
             // Cross-iframe auth state synchronization
             if (iframe.isIframe()) {
-                console.log('[AuthContext] Notifying parent of logout via postMessage');
                 iframe.sendParentCustom('smartlinks:authkit:logout', {});
             }
             notifyAuthStateChange('LOGOUT', null, null, null, null, false);
@@ -12025,7 +11981,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
     // Refresh token - validates current token and extends session if backend supports it
     const refreshToken = useCallback(async () => {
         if (proxyMode) {
-            console.log('[AuthContext] Proxy mode: token refresh handled by parent');
             throw new Error('Token refresh in proxy mode is handled by the parent application');
         }
         const storedToken = await tokenStorage.getToken();
@@ -12033,20 +11988,13 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
             throw new Error('No token to refresh. Please login first.');
         }
         try {
-            console.log('[AuthContext] Refreshing token...');
-            // Verify current token is still valid
             const verifyResult = await smartlinks.auth.verifyToken(storedToken.token);
             if (!verifyResult.valid) {
-                console.warn('[AuthContext] Token is no longer valid, clearing session');
                 await logout();
                 throw new Error('Token expired or invalid. Please login again.');
             }
-            // Token is valid - extend its expiration locally
-            // Backend JWT remains valid, we just update our local tracking
-            const newExpiresAt = Date.now() + (7 * 24 * 60 * 60 * 1000); // 7 days from now
+            const newExpiresAt = Date.now() + (7 * 24 * 60 * 60 * 1000);
             await tokenStorage.saveToken(storedToken.token, newExpiresAt);
-            console.log('[AuthContext] Token verified and expiration extended to:', new Date(newExpiresAt).toISOString());
-            // Update verified state
             setIsVerified(true);
             pendingVerificationRef.current = false;
             notifyAuthStateChange('TOKEN_REFRESH', user, storedToken.token, accountData, accountInfo, true, contact, contactId);
@@ -12054,12 +12002,9 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
         }
         catch (error) {
             console.error('[AuthContext] Token refresh failed:', error);
-            // If it's a network error, don't logout
             if (isNetworkError(error)) {
-                console.warn('[AuthContext] Network error during refresh, keeping session');
                 throw error;
             }
-            // Auth error - clear session
             await logout();
             throw new Error('Token refresh failed. Please login again.');
         }
@@ -12067,7 +12012,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
     const getAccount = useCallback(async (forceRefresh = false) => {
         try {
             if (proxyMode) {
-                console.log('[AuthContext] Proxy mode: fetching account from parent');
                 const freshAccountInfo = await smartlinks.auth.getAccount();
                 setAccountInfo(freshAccountInfo);
                 setAccountData(freshAccountInfo);
@@ -12080,11 +12024,9 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
             if (!forceRefresh) {
                 const cached = await tokenStorage.getAccountInfo();
                 if (cached && !cached.isStale) {
-                    console.log('[AuthContext] Returning cached account info');
                     return cached.data;
                 }
             }
-            console.log('[AuthContext] Fetching fresh account info from API');
             const freshAccountInfo = await smartlinks.auth.getAccount();
             await tokenStorage.saveAccountInfo(freshAccountInfo, accountCacheTTL);
             setAccountInfo(freshAccountInfo);
@@ -12096,7 +12038,6 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
             if (!proxyMode) {
                 const cached = await tokenStorage.getAccountInfo();
                 if (cached) {
-                    console.warn('[AuthContext] Returning stale cached data due to API error');
                     return cached.data;
                 }
             }
@@ -12119,30 +12060,22 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
         };
     }, []);
     const retryVerification = useCallback(async () => {
-        if (!token || !user) {
-            console.log('[AuthContext] No session to verify');
+        if (!token || !user)
             return false;
-        }
-        if (isVerified) {
-            console.log('[AuthContext] Session already verified');
+        if (isVerified)
             return true;
-        }
         try {
-            console.log('[AuthContext] Retrying session verification...');
             await smartlinks.auth.verifyToken(token);
             setIsVerified(true);
             pendingVerificationRef.current = false;
-            console.log('[AuthContext] Session verified on retry');
             notifyAuthStateChange('SESSION_VERIFIED', user, token, accountData, accountInfo, true, contact, contactId);
             return true;
         }
         catch (err) {
             if (isNetworkError(err)) {
-                console.warn('[AuthContext] Network still unavailable, will retry later');
                 return false;
             }
             else {
-                console.warn('[AuthContext] Session invalid on retry, logging out');
                 await logout();
                 return false;
             }
@@ -12153,15 +12086,12 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
         if (proxyMode)
             return;
         const handleOnline = () => {
-            console.log('[AuthContext] Network reconnected');
             setIsOnline(true);
             if (pendingVerificationRef.current && token && user) {
-                console.log('[AuthContext] Retrying pending verification after reconnect...');
                 retryVerification();
             }
         };
         const handleOffline = () => {
-            console.log('[AuthContext] Network disconnected');
             setIsOnline(false);
         };
         window.addEventListener('online', handleOnline);
@@ -12176,46 +12106,31 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
         if (proxyMode || !enableAutoRefresh || !token || !user) {
             return;
         }
-        console.log('[AuthContext] Setting up automatic token refresh (interval:', refreshCheckInterval, 'ms, threshold:', refreshThresholdPercent, '%)');
         const checkAndRefresh = async () => {
             try {
                 const storedToken = await tokenStorage.getToken();
-                if (!storedToken?.expiresAt) {
-                    console.log('[AuthContext] No token expiration info, skipping refresh check');
+                if (!storedToken?.expiresAt)
                     return;
-                }
                 const now = Date.now();
-                const tokenLifetime = storedToken.expiresAt - (storedToken.expiresAt - (7 * 24 * 60 * 60 * 1000)); // Assume 7-day lifetime
-                const tokenAge = now - (storedToken.expiresAt - (7 * 24 * 60 * 60 * 1000));
-                const percentUsed = (tokenAge / tokenLifetime) * 100;
-                // Calculate time remaining
-                const timeRemaining = storedToken.expiresAt - now;
-                const hoursRemaining = Math.round(timeRemaining / (60 * 60 * 1000));
+                const remainingMs = storedToken.expiresAt - now;
+                const totalLifetimeMs = 7 * 24 * 60 * 60 * 1000;
+                const percentUsed = totalLifetimeMs > 0 ? ((totalLifetimeMs - remainingMs) / totalLifetimeMs) * 100 : 100;
                 if (percentUsed >= refreshThresholdPercent) {
-                    console.log(`[AuthContext] Token at ${Math.round(percentUsed)}% lifetime (${hoursRemaining}h remaining), refreshing...`);
                     try {
                         await refreshToken();
-                        console.log('[AuthContext] Automatic token refresh successful');
                     }
                     catch (refreshError) {
-                        console.warn('[AuthContext] Automatic token refresh failed:', refreshError);
-                        // Don't logout on refresh failure - user can still use the app until token actually expires
+                        // Don't logout on refresh failure
                     }
                 }
-                else {
-                    console.log(`[AuthContext] Token at ${Math.round(percentUsed)}% lifetime (${hoursRemaining}h remaining), no refresh needed`);
-                }
             }
             catch (error) {
                 console.error('[AuthContext] Error checking token for refresh:', error);
             }
         };
-        // Check immediately on mount
         checkAndRefresh();
-        // Set up periodic check
         const intervalId = setInterval(checkAndRefresh, refreshCheckInterval);
         return () => {
-            console.log('[AuthContext] Cleaning up automatic token refresh timer');
             clearInterval(intervalId);
         };
     }, [proxyMode, enableAutoRefresh, refreshCheckInterval, refreshThresholdPercent, token, user, refreshToken]);
@@ -12395,6 +12310,25 @@ const getExpirationFromResponse = (response) => {
 };
 // Default Smartlinks Google OAuth Client ID (public - safe to expose)
 const DEFAULT_GOOGLE_CLIENT_ID = '696509063554-jdlbjl8vsjt7cr0vgkjkjf3ffnvi3a70.apps.googleusercontent.com';
+// Default Google OAuth proxy URL (hosted on our whitelisted domain)
+const DEFAULT_GOOGLE_PROXY_URL = 'https://smartlinks-auth-kit.lovable.app/google-proxy.html';
+// Exact hostnames where Google OAuth is registered and inline/OneTap flow works directly.
+// Only specific registered origins — NOT broad wildcards like *.lovable.app
+const WHITELISTED_GOOGLE_OAUTH_HOSTS = [
+    'smartlinks-auth-kit.lovable.app', // This app's dev/preview domain (registered in Google Console)
+    'smartlinks.app', // Production root
+    'localhost', // Local dev
+    '127.0.0.1', // Local dev
+];
+/**
+ * Check if the current domain is whitelisted for direct Google OAuth.
+ * Uses exact hostname match (plus subdomain match for smartlinks.app production).
+ * Returns true if OneTap/inline flow can work without a proxy.
+ */
+const isWhitelistedGoogleDomain = () => {
+    const hostname = window.location.hostname;
+    return WHITELISTED_GOOGLE_OAUTH_HOSTS.some(domain => hostname === domain || hostname.endsWith(`.${domain}`));
+};
 // Default auth UI configuration when no clientId is provided
 const DEFAULT_AUTH_CONFIG = {
     branding: {
@@ -12439,75 +12373,42 @@ const loadGoogleIdentityServices = () => {
 // Helper to detect WebView environments (Android/iOS)
 const detectWebView = () => {
     const ua = navigator.userAgent;
-    console.log(`${LOG_PREFIX} 🔍 detectWebView checking UA:`, ua);
     // Android WebView detection
     if (/Android/i.test(ua)) {
-        console.log(`${LOG_PREFIX} 🔍 Android device detected`);
-        // Modern Android WebViews include "wv" in UA string
-        if (/\bwv\b/i.test(ua)) {
-            console.log(`${LOG_PREFIX} ✅ Android WebView detected (wv in UA)`);
+        if (/\bwv\b/i.test(ua))
             return true;
-        }
-        // Check for AuthKit native bridge
-        if (typeof window.AuthKit !== 'undefined') {
-            console.log(`${LOG_PREFIX} ✅ Android WebView detected (AuthKit bridge exists)`);
+        if (typeof window.AuthKit !== 'undefined')
             return true;
-        }
-        console.log(`${LOG_PREFIX} ❌ Android but not WebView`);
     }
     // iOS WKWebView detection
     if (/iPhone|iPad|iPod/i.test(ua)) {
-        console.log(`${LOG_PREFIX} 🔍 iOS device detected`);
         const hasWebKitHandlers = !!window.webkit?.messageHandlers;
         const isSafari = !!window.safari;
-        console.log(`${LOG_PREFIX} 🔍 iOS check:`, { hasWebKitHandlers, isSafari });
-        // WKWebView has webkit handlers but no safari object
-        if (hasWebKitHandlers && !isSafari) {
-            console.log(`${LOG_PREFIX} ✅ iOS WKWebView detected`);
+        if (hasWebKitHandlers && !isSafari)
             return true;
-        }
-        console.log(`${LOG_PREFIX} ❌ iOS but not WKWebView (likely Safari)`);
     }
-    console.log(`${LOG_PREFIX} ❌ Not a WebView environment`);
     return false;
 };
 const getNativeBridge = () => {
-    console.log(`${LOG_PREFIX} 🔍 getNativeBridge checking for AuthKit bridge...`);
-    console.log(`${LOG_PREFIX} 🔍 window.AuthKit:`, window.AuthKit);
     const native = window.AuthKit;
-    if (native?.signInWithGoogle) {
-        console.log(`${LOG_PREFIX} ✅ Native bridge found!`, {
-            signInWithGoogle: !!native.signInWithGoogle,
-            signOutGoogle: !!native.signOutGoogle,
-            checkGoogleSignIn: !!native.checkGoogleSignIn,
-        });
+    if (native?.signInWithGoogle)
         return native;
-    }
-    console.log(`${LOG_PREFIX} ❌ No native bridge found (AuthKit.signInWithGoogle not available)`);
     return null;
 };
 // Sign out from Google on the native side (clears cached Google account)
 // This is fire-and-forget with a timeout - gracefully degrades if not supported
 const signOutGoogleNative = async () => {
     const nativeBridge = getNativeBridge();
-    if (!nativeBridge?.signOutGoogle) {
-        console.log(`${LOG_PREFIX} 🚪 signOutGoogleNative: no native bridge or signOutGoogle not available`);
+    if (!nativeBridge?.signOutGoogle)
         return;
-    }
     const callbackId = `google_signout_${Date.now()}`;
-    console.log(`${LOG_PREFIX} 🚪 Initiating native Google sign-out, callbackId:`, callbackId);
     return new Promise((resolve) => {
-        // Timeout after 3 seconds - don't block logout on native response
-        const timeout = setTimeout(() => {
-            console.log(`${LOG_PREFIX} 🚪 Native sign-out timed out (continuing anyway)`);
-            resolve();
-        }, 3000);
+        const timeout = setTimeout(() => resolve(), 3000);
         // Store original callback to restore later
         const originalCallback = window.smartlinksNativeCallback;
         window.smartlinksNativeCallback = (result) => {
             if (result.callbackId === callbackId) {
                 clearTimeout(timeout);
-                console.log(`${LOG_PREFIX} 🚪 Native Google sign-out result:`, result);
                 // Restore original callback
                 window.smartlinksNativeCallback = originalCallback;
                 resolve();
@@ -12521,37 +12422,21 @@ const signOutGoogleNative = async () => {
             type: 'GOOGLE_SIGN_OUT',
             callbackId,
         });
-        console.log(`${LOG_PREFIX} 🚪 Calling nativeBridge.signOutGoogle with payload:`, payload);
-        // Use non-null assertion - method exists (verified by guard check above)
-        // IMPORTANT: Must call directly on nativeBridge object for WebView proxy binding
         nativeBridge.signOutGoogle(payload);
     });
 };
 const checkSilentGoogleSignIn = async (clientId, googleClientId) => {
     const nativeBridge = getNativeBridge();
-    if (!nativeBridge?.checkGoogleSignIn) {
-        console.log(`${LOG_PREFIX} 🔇 checkSilentGoogleSignIn: no native bridge or checkGoogleSignIn not available`);
+    if (!nativeBridge?.checkGoogleSignIn)
         return null;
-    }
     const callbackId = `google_check_${Date.now()}`;
-    console.log(`${LOG_PREFIX} 🔇 Checking for silent Google sign-in, callbackId:`, callbackId);
     return new Promise((resolve) => {
-        // Timeout after 5 seconds
-        const timeout = setTimeout(() => {
-            console.log(`${LOG_PREFIX} 🔇 Silent sign-in check timed out`);
-            resolve(null);
-        }, 5000);
+        const timeout = setTimeout(() => resolve(null), 5000);
         // Store original callback to restore later
         const originalCallback = window.smartlinksNativeCallback;
         window.smartlinksNativeCallback = (result) => {
             if (result.callbackId === callbackId) {
                 clearTimeout(timeout);
-                console.log(`${LOG_PREFIX} 🔇 Silent sign-in check result:`, {
-                    success: result.success,
-                    isSignedIn: result.isSignedIn,
-                    hasIdToken: !!result.idToken,
-                    email: result.email,
-                });
                 // Restore original callback
                 window.smartlinksNativeCallback = originalCallback;
                 if (result.success) {
@@ -12579,9 +12464,6 @@ const checkSilentGoogleSignIn = async (clientId, googleClientId) => {
             serverClientId: googleClientId, // Alias for Android SDK
             callbackId,
         });
-        console.log(`${LOG_PREFIX} 🔇 Calling nativeBridge.checkGoogleSignIn with payload:`, payload);
-        // Use non-null assertion - method exists (verified by guard check above)
-        // IMPORTANT: Must call directly on nativeBridge object for WebView proxy binding
         nativeBridge.checkGoogleSignIn(payload);
     });
 };
@@ -12668,43 +12550,15 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         mediaQuery.addEventListener('change', updateTheme);
         return () => mediaQuery.removeEventListener('change', updateTheme);
     }, [theme]);
-    // Log all props on mount for debugging
-    useEffect(() => {
-        console.log(`${LOG_PREFIX} 🚀 COMPONENT MOUNTED with props:`, {
-            apiEndpoint,
-            clientId,
-            clientName,
-            redirectUrl,
-            redirectUrlType: typeof redirectUrl,
-            redirectUrlTruthy: !!redirectUrl,
-            proxyMode,
-            theme,
-            initialMode,
-            skipConfigFetch,
-            minimal,
-            enableSilentGoogleSignIn,
-            enabledProviders,
-            timestamp: new Date().toISOString()
-        });
-    }, []); // Only log on mount
+    // Version tracking for debugging if needed
+    // console.log(`${LOG_PREFIX} Component mounted, v${AUTH_UI_VERSION}`);
     // Reinitialize Smartlinks SDK when apiEndpoint or proxyMode changes
     // IMPORTANT: Preserve bearer token during reinitialization
     useEffect(() => {
-        console.log(`${LOG_PREFIX} 🔧 SDK INIT useEffect triggered`, {
-            apiEndpoint,
-            proxyMode,
-            hasLogger: !!logger,
-            timestamp: new Date().toISOString()
-        });
         log.log('SDK reinitialize useEffect triggered', { apiEndpoint, proxyMode });
         setSdkReady(false); // Mark SDK as not ready during reinitialization
         const reinitializeWithToken = async () => {
             if (apiEndpoint) {
-                console.log(`${LOG_PREFIX} 🔧 Reinitializing SDK with:`, {
-                    baseURL: apiEndpoint,
-                    proxyMode: proxyMode,
-                    ngrokSkipBrowserWarning: true
-                });
                 log.log('Reinitializing SDK with baseURL:', apiEndpoint, 'proxyMode:', proxyMode);
                 // Get current token before reinitializing (only in standalone mode)
                 const currentToken = !proxyMode ? await auth.getToken() : null;
@@ -12714,7 +12568,6 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     ngrokSkipBrowserWarning: true,
                     logger: logger, // Pass logger to SDK for verbose SDK logging
                 });
-                console.log(`${LOG_PREFIX} ✅ SDK reinitialized, proxyMode:`, proxyMode);
                 log.log('SDK reinitialized successfully');
                 // Restore bearer token after reinitialization using auth.verifyToken (standalone mode only)
                 if (currentToken && !proxyMode) {
@@ -12722,20 +12575,15 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                         log.warn('Failed to restore bearer token after reinit:', err);
                     });
                 }
-                // Mark SDK as ready
-                console.log(`${LOG_PREFIX} ✅ Setting sdkReady=true (with apiEndpoint)`);
                 setSdkReady(true);
             }
             else if (proxyMode) {
                 // In proxy mode without custom endpoint, SDK should already be initialized by parent
-                console.log(`${LOG_PREFIX} ⚠️ Proxy mode WITHOUT apiEndpoint - expecting SDK already initialized by parent`);
                 log.log('Proxy mode without apiEndpoint, SDK already initialized by parent');
                 setSdkReady(true);
             }
             else {
-                console.log(`${LOG_PREFIX} ℹ️ No apiEndpoint, no proxyMode - SDK already initialized by App`);
                 log.log('No apiEndpoint, SDK already initialized by App');
-                // SDK was initialized by App component, mark as ready
                 setSdkReady(true);
             }
         };
@@ -12743,48 +12591,19 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
     }, [apiEndpoint, proxyMode, auth, logger, log]);
     // Get the effective redirect URL (use prop or default to current page)
     const getRedirectUrl = () => {
-        console.log(`${LOG_PREFIX} 🔗 getRedirectUrl() called`, {
-            redirectUrlProp: redirectUrl,
-            redirectUrlPropType: typeof redirectUrl,
-            redirectUrlPropTruthy: !!redirectUrl,
-            currentHref: window.location.href
-        });
-        if (redirectUrl) {
-            console.log(`${LOG_PREFIX} 🔗 Using redirectUrl prop:`, redirectUrl);
+        if (redirectUrl)
             return redirectUrl;
-        }
-        // Get the full current URL including hash routes
-        // Remove any existing query parameters to avoid duplication
-        const currentUrl = window.location.href.split('?')[0];
-        console.log(`${LOG_PREFIX} 🔗 No redirectUrl prop, using current URL:`, currentUrl);
-        return currentUrl;
+        // Get the full current URL including hash routes, strip query params
+        return window.location.href.split('?')[0];
     };
     // Fetch UI configuration
     useEffect(() => {
-        console.log(`${LOG_PREFIX} 📋 CONFIG FETCH useEffect triggered`, {
-            skipConfigFetch,
-            clientId,
-            apiEndpoint,
-            sdkReady,
-            proxyMode,
-            timestamp: new Date().toISOString()
-        });
-        log.log('Config fetch useEffect triggered', {
-            skipConfigFetch,
-            clientId,
-            clientIdType: typeof clientId,
-            clientIdTruthy: !!clientId,
-            apiEndpoint,
-            sdkReady
-        });
         // Wait for SDK to be ready before fetching config
         if (!sdkReady) {
-            console.log(`${LOG_PREFIX} ⏳ SDK not ready yet, waiting before config fetch...`);
             log.log('SDK not ready yet, waiting...');
             return;
         }
         if (skipConfigFetch) {
-            console.log(`${LOG_PREFIX} ⏭️ Skipping config fetch - skipConfigFetch is true`);
             log.log('Skipping config fetch - skipConfigFetch is true');
             setConfig(customization || {});
             return;
@@ -12792,7 +12611,6 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         const fetchConfig = async () => {
             // If no clientId provided, use default config immediately without API call
             if (!clientId) {
-                console.log(`${LOG_PREFIX} ⚠️ No clientId provided, using default config`);
                 log.log('No clientId provided, using default config');
                 const defaultConfig = {
                     ...DEFAULT_AUTH_CONFIG,
@@ -12812,39 +12630,25 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                         const age = Date.now() - timestamp;
                         // Use cache if less than 1 hour old
                         if (age < 3600000) {
-                            console.log(`${LOG_PREFIX} 📦 Using cached config (age:`, Math.round(age / 1000), 'seconds)');
                             setConfig({ ...cachedConfig, ...customization });
                             setConfigLoading(false);
                             // Fetch in background to update cache
-                            console.log(`${LOG_PREFIX} 🔄 Background refresh of config via SDK...`);
                             api.fetchConfig().then(freshConfig => {
-                                console.log(`${LOG_PREFIX} ✅ Background config refresh complete`);
                                 localStorage.setItem(cacheKey, JSON.stringify({
                                     config: freshConfig,
                                     timestamp: Date.now()
                                 }));
-                                // Update config if it changed
                                 setConfig({ ...freshConfig, ...customization });
-                            }).catch(err => {
-                                console.log(`${LOG_PREFIX} ❌ Background config refresh failed:`, err);
-                            });
+                            }).catch(() => { });
                             return;
                         }
                     }
                 }
-                else {
-                    console.log(`${LOG_PREFIX} ⚠️ Config caching disabled, fetching fresh config`);
-                }
-                // Fetch from API
-                console.log(`${LOG_PREFIX} 🌐 Fetching config via SDK for clientId:`, clientId, 'proxyMode:', proxyMode);
                 log.log('Fetching config from API for clientId:', clientId);
                 const fetchedConfig = await api.fetchConfig();
-                console.log(`${LOG_PREFIX} ✅ Config fetched successfully:`, fetchedConfig);
                 log.log('Received config:', fetchedConfig);
-                // Merge with customization props (props take precedence)
                 const mergedConfig = { ...fetchedConfig, ...customization };
                 setConfig(mergedConfig);
-                // Cache the fetched config (unless caching is disabled)
                 if (!disableConfigCache) {
                     localStorage.setItem(cacheKey, JSON.stringify({
                         config: fetchedConfig,
@@ -12853,7 +12657,6 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 }
             }
             catch (err) {
-                console.log(`${LOG_PREFIX} ❌ Config fetch failed:`, err);
                 log.error('Failed to fetch config:', err);
                 setConfig(customization || {});
             }
@@ -12869,13 +12672,10 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             return;
         const fetchSchema = async () => {
             try {
-                console.log(`${LOG_PREFIX} 📋 Fetching contact schema for collection:`, collectionId);
                 const schema = await smartlinks.contact.publicGetSchema(collectionId);
-                console.log(`${LOG_PREFIX} ✅ Schema loaded:`, schema);
                 setContactSchema(schema);
             }
             catch (err) {
-                console.warn(`${LOG_PREFIX} ⚠️ Failed to fetch schema (non-fatal):`, err);
                 // Non-fatal - registration will work without schema fields
             }
         };
@@ -12889,17 +12689,14 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         }
         const googleClientId = config?.googleClientId || DEFAULT_GOOGLE_CLIENT_ID;
         const performSilentSignIn = async () => {
-            console.log(`${LOG_PREFIX} 🔇 Silent Google Sign-In check enabled, checking native session...`);
             try {
                 const result = await checkSilentGoogleSignIn(clientId, googleClientId);
                 setSilentSignInChecked(true);
                 if (result?.isSignedIn && result.idToken) {
-                    console.log(`${LOG_PREFIX} 🔇 Silent sign-in found existing Google session, authenticating...`);
                     setLoading(true);
                     try {
                         const authResponse = await api.loginWithGoogle(result.idToken);
                         if (authResponse.token) {
-                            console.log(`${LOG_PREFIX} 🔇 Silent sign-in successful!`);
                             await auth.login(authResponse.token, authResponse.user, authResponse.accountData, false, getExpirationFromResponse(authResponse));
                             setAuthSuccess(true);
                             setSuccessMessage('Signed in automatically with Google!');
@@ -12907,19 +12704,14 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                         }
                     }
                     catch (err) {
-                        console.warn(`${LOG_PREFIX} 🔇 Silent sign-in backend auth failed:`, err);
                         // Don't show error - user can still log in manually
                     }
                     finally {
                         setLoading(false);
                     }
                 }
-                else {
-                    console.log(`${LOG_PREFIX} 🔇 No existing Google session found`);
-                }
             }
             catch (err) {
-                console.warn(`${LOG_PREFIX} 🔇 Silent sign-in check failed:`, err);
                 setSilentSignInChecked(true);
             }
         };
@@ -13164,7 +12956,12 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             // Defensive check: validate response before accessing properties
             // SDK should throw on 401/error responses, but handle edge cases gracefully
             if (!response) {
-                throw new Error('Authentication failed - no response received');
+                // For registration, a missing response might indicate a 409 that wasn't thrown
+                if (mode === 'login') {
+                    throw new Error('Authentication failed - no response received');
+                }
+                // For register mode, throw a more specific error
+                throw new Error('Registration failed - please try again');
             }
             // Get email verification mode from response or config (default: verify-auto-login)
             const verificationMode = response.emailVerificationMode || config?.emailVerification?.mode || 'verify-auto-login';
@@ -13240,7 +13037,9 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         }
         catch (err) {
             // Check if error is about email already registered (409 conflict)
-            if (mode === 'register' && isConflictError(err)) {
+            // Handle both SmartlinksApiError (statusCode 409) and plain Error with keyword matching
+            if (mode === 'register' && (isConflictError(err) ||
+                (err instanceof Error && /already (registered|exists)/i.test(err.message)))) {
                 setShowResendVerification(true);
                 setResendEmail(data.email);
                 setError('This email is already registered. If you didn\'t receive the verification email, you can resend it below.');
@@ -13298,184 +13097,168 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         }
     };
     const handleGoogleLogin = async () => {
-        console.log(`${LOG_PREFIX} 🚀 handleGoogleLogin called`);
-        // Use custom client ID from config, or fall back to default Smartlinks client ID
+        const hasCustomGoogleClientId = !!config?.googleClientId;
         const googleClientId = config?.googleClientId || DEFAULT_GOOGLE_CLIENT_ID;
-        // Determine OAuth flow: default to 'oneTap' for better UX, but allow 'popup' for iframe compatibility
         const configuredFlow = config?.googleOAuthFlow || 'oneTap';
-        // Check for native bridge and WebView environment
-        console.log(`${LOG_PREFIX} 🔍 Checking environment...`);
         const isWebView = detectWebView();
         const nativeBridge = getNativeBridge();
-        // For oneTap, automatically use redirect flow in WebView environments (if no native bridge)
         const oauthFlow = (configuredFlow === 'oneTap' && isWebView && !nativeBridge) ? 'redirect' : configuredFlow;
-        // Log Google Auth configuration for debugging
-        console.log(`${LOG_PREFIX} 📋 Google Auth configuration:`, {
-            googleClientId,
-            configuredFlow,
-            effectiveFlow: oauthFlow,
-            isWebView,
-            hasNativeBridge: !!nativeBridge,
-            currentOrigin: window.location.origin,
-            currentHref: window.location.href,
-            configGoogleClientId: config?.googleClientId,
-            usingDefaultClientId: !config?.googleClientId,
-        });
+        // Auto-detect proxy need:
+        // - If explicitly configured, use that URL
+        // - If user has their own Google Client ID, they've registered their domains — no proxy needed
+        // - If on a whitelisted SmartLinks domain, inline flow works directly
+        // - Otherwise, auto-use the default proxy URL
+        const isWhitelisted = isWhitelistedGoogleDomain();
+        const googleProxyUrl = config?.googleOAuthProxyUrl
+            || (!hasCustomGoogleClientId && !isWhitelisted ? DEFAULT_GOOGLE_PROXY_URL : undefined);
         log.log('Google Auth initiated:', {
-            googleClientId,
             configuredFlow,
             effectiveFlow: oauthFlow,
             isWebView,
             hasNativeBridge: !!nativeBridge,
-            currentOrigin: window.location.origin,
-            currentHref: window.location.href,
-            configGoogleClientId: config?.googleClientId,
-            usingDefaultClientId: !config?.googleClientId,
+            hasCustomGoogleClientId,
+            isWhitelistedDomain: isWhitelisted,
+            usingProxy: !!googleProxyUrl,
+            proxyUrl: googleProxyUrl,
         });
         setLoading(true);
         setError(undefined);
         try {
-            // Priority 1: Use native bridge if available (for WebView environments)
             if (nativeBridge) {
-                console.log(`${LOG_PREFIX} 🌉 NATIVE BRIDGE PATH - Using native bridge for Google Sign-In`);
                 log.log('Using native bridge for Google Sign-In');
                 const callbackId = `google_auth_${Date.now()}`;
-                console.log(`${LOG_PREFIX} 🔑 Generated callbackId:`, callbackId);
-                // Set up callback for native response
-                console.log(`${LOG_PREFIX} 📡 Registering window.smartlinksNativeCallback...`);
                 window.smartlinksNativeCallback = async (result) => {
-                    console.log(`${LOG_PREFIX} 📨 smartlinksNativeCallback INVOKED with:`, {
-                        callbackId: result.callbackId,
-                        success: result.success,
-                        hasIdToken: !!result.idToken,
-                        idTokenLength: result.idToken?.length,
-                        email: result.email,
-                        name: result.name,
-                        error: result.error,
-                        errorCode: result.errorCode,
-                    });
                     // Ignore stale callbacks
                     if (result.callbackId !== callbackId) {
-                        console.log(`${LOG_PREFIX} ⚠️ Ignoring stale callback. Expected:`, callbackId, 'Got:', result.callbackId);
                         log.log('Ignoring stale native callback:', result.callbackId);
                         return;
                     }
-                    console.log(`${LOG_PREFIX} ✅ Callback ID matches, processing result...`);
                     log.log('Native callback received:', {
                         success: result.success,
                         hasIdToken: !!result.idToken,
                         email: result.email,
                         error: result.error,
-                        errorCode: result.errorCode,
                     });
                     try {
                         if (result.success && result.idToken) {
-                            console.log(`${LOG_PREFIX} 🔐 Success! Calling api.loginWithGoogle with idToken...`);
-                            // Process through existing Google auth flow
                             const authResponse = await api.loginWithGoogle(result.idToken);
-                            console.log(`${LOG_PREFIX} 📦 api.loginWithGoogle response:`, {
-                                hasToken: !!authResponse.token,
-                                hasUser: !!authResponse.user,
-                                isNewUser: authResponse.isNewUser,
-                            });
                             if (authResponse.token) {
-                                console.log(`${LOG_PREFIX} 🎉 Login successful! Calling auth.login and onAuthSuccess...`);
                                 await auth.login(authResponse.token, authResponse.user, authResponse.accountData, authResponse.isNewUser, getExpirationFromResponse(authResponse));
                                 setAuthSuccess(true);
                                 setSuccessMessage('Google login successful!');
                                 onAuthSuccess(authResponse.token, authResponse.user, authResponse.accountData);
                             }
                             else {
-                                console.log(`${LOG_PREFIX} ❌ No token in authResponse`);
                                 throw new Error('Authentication failed - no token received');
                             }
                         }
                         else {
-                            // Handle error from native
-                            console.log(`${LOG_PREFIX} ❌ Native returned error:`, result.error, result.errorCode);
                             setError(getFriendlyErrorMessage(result.error || 'Google Sign-In failed'));
                             onAuthError?.(new Error(result.error || 'Google Sign-In failed'));
                         }
                     }
                     catch (err) {
-                        console.log(`${LOG_PREFIX} 💥 Exception in callback handler:`, err);
                         setError(getFriendlyErrorMessage(err));
                         onAuthError?.(err instanceof Error ? err : new Error(getFriendlyErrorMessage(err)));
                     }
                     finally {
-                        console.log(`${LOG_PREFIX} 🏁 Callback processing complete, setting loading=false`);
                         setLoading(false);
                     }
                 };
-                console.log(`${LOG_PREFIX} ✅ window.smartlinksNativeCallback registered`);
-                // Invoke native sign-in
-                // Pass comprehensive payload for Android to configure Google Sign-In correctly
                 const payloadObj = {
                     type: 'GOOGLE_SIGN_IN',
-                    clientId, // Smartlinks Auth Kit client ID
-                    googleClientId, // Web/Server Client ID - use this for requestIdToken()
-                    serverClientId: googleClientId, // Explicit alias - Android should use this for GoogleSignInOptions.requestIdToken()
+                    clientId,
+                    googleClientId,
+                    serverClientId: googleClientId,
                     callbackId,
-                    // Additional context that might help Android configuration
-                    scopes: ['email', 'profile'], // Requested OAuth scopes
-                    requestIdToken: true, // We need an ID token for backend verification
-                    requestServerAuthCode: false, // We don't need server auth code
+                    scopes: ['email', 'profile'],
+                    requestIdToken: true,
+                    requestServerAuthCode: false,
                 };
                 const payload = JSON.stringify(payloadObj);
-                console.log(`${LOG_PREFIX} 📤 Calling nativeBridge.signInWithGoogle with payload object:`, payloadObj);
-                console.log(`${LOG_PREFIX} 📤 Payload JSON string:`, payload);
-                log.log('Invoking native signInWithGoogle with payload:', payloadObj);
-                // 🔍 DEBUG: Re-validate bridge before invocation
-                console.log(`${LOG_PREFIX} 🔍 Re-validating bridge before invocation...`);
-                console.log(`${LOG_PREFIX} 🔍 window.AuthKit:`, window.AuthKit);
-                console.log(`${LOG_PREFIX} 🔍 window.AuthKit.signInWithGoogle:`, window.AuthKit?.signInWithGoogle);
-                console.log(`${LOG_PREFIX} 🔍 typeof signInWithGoogle:`, typeof window.AuthKit?.signInWithGoogle);
-                console.log(`${LOG_PREFIX} 🔍 nativeBridge === window.AuthKit:`, nativeBridge === window.AuthKit);
-                console.log(`${LOG_PREFIX} 🔍 nativeBridge.signInWithGoogle:`, nativeBridge.signInWithGoogle);
-                console.log(`${LOG_PREFIX} 🔍 typeof nativeBridge.signInWithGoogle:`, typeof nativeBridge.signInWithGoogle);
-                // 🔍 DEBUG: Bridge method comparison
-                console.log(`${LOG_PREFIX} 🔍 Bridge method comparison:`);
-                const authKit = window.AuthKit;
-                if (authKit) {
-                    console.log(`${LOG_PREFIX}   - signInWithGoogle: ${typeof authKit.signInWithGoogle} | descriptor:`, Object.getOwnPropertyDescriptor(authKit, 'signInWithGoogle'));
-                    console.log(`${LOG_PREFIX}   - signOutGoogle: ${typeof authKit.signOutGoogle} | descriptor:`, Object.getOwnPropertyDescriptor(authKit, 'signOutGoogle'));
-                    console.log(`${LOG_PREFIX}   - checkGoogleSignIn: ${typeof authKit.checkGoogleSignIn} | descriptor:`, Object.getOwnPropertyDescriptor(authKit, 'checkGoogleSignIn'));
-                    console.log(`${LOG_PREFIX}   - All keys:`, Object.keys(authKit));
-                    try {
-                        console.log(`${LOG_PREFIX}   - Prototype:`, Object.getPrototypeOf(authKit));
-                    }
-                    catch (e) {
-                        console.log(`${LOG_PREFIX}   - Prototype: (error getting prototype)`, e);
-                    }
-                }
-                // 🔍 DEBUG: Wrap invocation in try/catch to capture exact exception
+                log.log('Invoking native signInWithGoogle');
                 try {
-                    console.log(`${LOG_PREFIX} 📤 About to invoke nativeBridge.signInWithGoogle...`);
                     nativeBridge.signInWithGoogle(payload);
-                    console.log(`${LOG_PREFIX} ✅ nativeBridge.signInWithGoogle called successfully`);
-                    console.log(`${LOG_PREFIX} ⏳ Waiting for native callback...`);
-                    console.log(`${LOG_PREFIX} 💡 Android should use serverClientId for GoogleSignInOptions.Builder().requestIdToken(serverClientId)`);
                 }
                 catch (invokeError) {
-                    console.error(`${LOG_PREFIX} 💥 EXCEPTION invoking signInWithGoogle:`, invokeError);
-                    console.error(`${LOG_PREFIX} 💥 Error type:`, typeof invokeError);
-                    console.error(`${LOG_PREFIX} 💥 Error constructor:`, invokeError?.constructor?.name);
-                    console.error(`${LOG_PREFIX} 💥 Error message:`, invokeError?.message);
-                    console.error(`${LOG_PREFIX} 💥 Error stack:`, invokeError?.stack);
-                    throw invokeError; // Re-throw so it propagates normally
+                    console.error(`${LOG_PREFIX} Exception invoking signInWithGoogle:`, invokeError);
+                    throw invokeError;
                 }
                 // Don't set loading to false - waiting for native callback
                 return;
             }
             // Priority 2: If WebView but no native bridge, show helpful error
             if (isWebView) {
-                console.log(`${LOG_PREFIX} ⚠️ WebView detected but NO native bridge - showing error`);
                 log.log('WebView detected but no native bridge available');
                 setError('Google Sign-In is not available in this app. Please use email or phone login instead.');
                 setLoading(false);
                 return;
             }
-            console.log(`${LOG_PREFIX} 🌐 WEB PATH - Using web-based OAuth flow:`, oauthFlow);
+            // Priority 3: Google OAuth Proxy popup (for custom domains not registered in Google Console)
+            if (googleProxyUrl) {
+                log.log('Using Google OAuth proxy popup:', googleProxyUrl);
+                const proxyParams = new URLSearchParams({
+                    clientId,
+                    returnOrigin: window.location.origin,
+                    ...(apiEndpoint ? { apiEndpoint } : {}),
+                });
+                const popupUrl = `${googleProxyUrl}?${proxyParams.toString()}`;
+                const popup = window.open(popupUrl, 'google-oauth-proxy', 'width=500,height=600,menubar=no,toolbar=no,location=yes');
+                if (!popup) {
+                    setError('Popup blocked. Please allow popups for this site and try again.');
+                    setLoading(false);
+                    return;
+                }
+                // Listen for result from proxy popup
+                const handleProxyMessage = async (event) => {
+                    // Validate origin matches proxy URL
+                    try {
+                        const proxyOrigin = new URL(googleProxyUrl).origin;
+                        if (event.origin !== proxyOrigin)
+                            return;
+                    }
+                    catch {
+                        return;
+                    }
+                    if (event.data?.type !== 'smartlinks:google-proxy:result')
+                        return;
+                    window.removeEventListener('message', handleProxyMessage);
+                    clearInterval(checkClosed);
+                    try {
+                        if (event.data.success && event.data.token) {
+                            const { token, user, accountData, isNewUser, expiresAt, expiresIn } = event.data;
+                            const expiration = expiresAt || (expiresIn ? Date.now() + expiresIn : undefined);
+                            await auth.login(token, user, accountData, isNewUser, expiration);
+                            setAuthSuccess(true);
+                            setSuccessMessage('Google login successful!');
+                            onAuthSuccess(token, user, accountData);
+                        }
+                        else {
+                            const errorMsg = event.data.error || 'Google login failed';
+                            setError(getFriendlyErrorMessage(errorMsg));
+                            onAuthError?.(new Error(errorMsg));
+                        }
+                    }
+                    catch (err) {
+                        setError(getFriendlyErrorMessage(err));
+                        onAuthError?.(err instanceof Error ? err : new Error(getFriendlyErrorMessage(err)));
+                    }
+                    finally {
+                        setLoading(false);
+                    }
+                };
+                window.addEventListener('message', handleProxyMessage);
+                // Monitor popup close without result (user closed it)
+                const checkClosed = setInterval(() => {
+                    if (popup.closed) {
+                        clearInterval(checkClosed);
+                        window.removeEventListener('message', handleProxyMessage);
+                        setLoading(false);
+                    }
+                }, 500);
+                return; // Don't set loading to false - waiting for popup
+            }
+            log.log('Using web-based OAuth flow:', oauthFlow);
             // Priority 3: Web-based flows (redirect, popup, oneTap)
             // Dynamically load Google Identity Services if not already loaded
             await loadGoogleIdentityServices();
@@ -13704,21 +13487,12 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         setLoading(true);
         setError(undefined);
         const effectiveRedirectUrl = getRedirectUrl();
-        console.log(`${LOG_PREFIX} 🔑 handlePasswordReset called`, {
-            email: emailOrPassword,
-            hasResetToken: !!resetToken,
-            hasConfirmPassword: !!confirmPassword,
-            effectiveRedirectUrl,
-            redirectUrlProp: redirectUrl
-        });
         try {
             if (resetToken && confirmPassword) {
                 // Complete password reset with token
-                console.log(`${LOG_PREFIX} 🔑 Completing password reset with token`);
                 await api.completePasswordReset(resetToken, emailOrPassword);
                 // Auto-login with the new password if we have the email
                 if (resetEmail) {
-                    console.log(`${LOG_PREFIX} 🔑 Auto-signing in after password reset`);
                     try {
                         const loginResponse = await api.login(resetEmail, emailOrPassword);
                         if (loginResponse.token) {
@@ -13726,15 +13500,13 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                             setAuthSuccess(true);
                             setSuccessMessage('Password reset successful! You are now signed in.');
                             onAuthSuccess(loginResponse.token, loginResponse.user, loginResponse.accountData);
-                            // Clear reset state
                             setResetToken(undefined);
                             setResetEmail(undefined);
-                            return; // Exit early - we've handled everything
+                            return;
                         }
                     }
                     catch (loginErr) {
                         // Auto-login failed, fall back to showing success message
-                        console.log(`${LOG_PREFIX} ⚠️ Auto-login after reset failed, showing manual login prompt`, loginErr);
                     }
                 }
                 // Fallback: show success but require manual login
@@ -13745,7 +13517,6 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             }
             else {
                 // Request password reset email
-                console.log(`${LOG_PREFIX} 🔑 Requesting password reset email with redirectUrl:`, effectiveRedirectUrl);
                 const result = await api.requestPasswordReset(emailOrPassword, effectiveRedirectUrl);
                 setResetSuccess(true);
                 // Use backend message if available
@@ -14044,6 +13815,12 @@ const AccountManagement = ({ apiEndpoint, clientId, collectionId, onError, class
     const [showDeleteConfirm, setShowDeleteConfirm] = useState(false);
     const { showProfileSection = true, showEmailSection = true, showPasswordSection = true, showPhoneSection = true, showDeleteAccount = false, showCustomFields = true, // New: show schema-driven custom fields
      } = customization;
+    // Provider awareness helpers
+    // If providers is undefined (backend not updated yet), fall back to showing everything
+    const providers = profile?.providers;
+    const hasPassword = profile?.hasPassword ?? (providers === undefined ? undefined : providers?.includes('password'));
+    const isGoogleOnly = providers !== undefined && providers.includes('google.com') && !providers.includes('password');
+    const isPhoneOnly = providers !== undefined && providers.includes('phone') && providers.length === 1;
     // Reinitialize Smartlinks SDK when apiEndpoint changes
     useEffect(() => {
         if (apiEndpoint) {
@@ -14061,13 +13838,11 @@ const AccountManagement = ({ apiEndpoint, clientId, collectionId, onError, class
         const loadSchema = async () => {
             setSchemaLoading(true);
             try {
-                console.log('[AccountManagement] Loading schema for collection:', collectionId);
                 const schemaResult = await smartlinks.contact.publicGetSchema(collectionId);
-                console.log('[AccountManagement] Schema loaded:', schemaResult);
                 setSchema(schemaResult);
             }
             catch (err) {
-                console.warn('[AccountManagement] Failed to load schema:', err);
+                // Non-fatal - component works without schema
                 // Non-fatal - component works without schema
             }
             finally {
@@ -14082,7 +13857,6 @@ const AccountManagement = ({ apiEndpoint, clientId, collectionId, onError, class
     // where getContact() is called before the server knows about the user.
     useEffect(() => {
         if (!auth.isAuthenticated || !auth.isVerified) {
-            console.log('[AccountManagement] Waiting for verified authentication before loading profile...');
             return;
         }
         loadProfile();
@@ -14183,7 +13957,7 @@ const AccountManagement = ({ apiEndpoint, clientId, collectionId, onError, class
         setError(undefined);
         setSuccess(undefined);
         try {
-            console.log('[AccountManagement] Updating custom fields:', customFieldValues);
+            await auth.updateContactCustomFields?.(customFieldValues);
             await auth.updateContactCustomFields?.(customFieldValues);
             setSuccess('Profile updated successfully!');
             setEditingSection(null);
@@ -14309,7 +14083,8 @@ const AccountManagement = ({ apiEndpoint, clientId, collectionId, onError, class
             setError('Please type DELETE to confirm account deletion');
             return;
         }
-        if (!deletePassword) {
+        // Only require password for users who have one
+        if (hasPassword !== false && !deletePassword) {
             setError('Password is required');
             return;
         }
@@ -14339,7 +14114,7 @@ const AccountManagement = ({ apiEndpoint, clientId, collectionId, onError, class
     }
     return (jsxs("div", { className: `account-management ${className}`, style: { maxWidth: '600px' }, children: [error && (jsx("div", { className: "auth-error", role: "alert", children: error })), success && (jsx("div", { className: "auth-success", role: "alert", children: success })), showProfileSection && (jsxs("section", { className: "account-section", children: [jsxs("div", { className: "account-field", children: [jsxs("div", { className: "field-info", children: [jsx("label", { className: "field-label", children: "Display Name" }), jsx("div", { className: "field-value", children: profile?.displayName || 'Not set' })] }), editingSection !== 'profile' && (jsx("button", { type: "button", onClick: () => setEditingSection('profile'), className: "auth-button button-secondary", children: "Change" }))] }), editingSection === 'profile' && (jsxs("form", { onSubmit: handleUpdateProfile, className: "edit-form", children: [jsx("div", { className: "form-group", children: jsx("input", { id: "displayName", type: "text", value: displayName, onChange: (e) => setDisplayName(e.target.value), placeholder: "Your display name", className: "auth-input" }) }), jsxs("div", { className: "button-group", children: [jsx("button", { type: "submit", className: "auth-button", disabled: loading, children: loading ? 'Saving...' : 'Save' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })] }))] })), showCustomFields && collectionId && editableCustomFields.length > 0 && (jsxs("section", { className: "account-section", children: [jsx("h3", { className: "section-title", style: { fontSize: '0.9rem', fontWeight: 600, marginBottom: '12px' }, children: "Additional Information" }), editingSection !== 'customFields' ? (jsxs(Fragment, { children: [editableCustomFields.map((field) => (jsx("div", { className: "account-field", children: jsxs("div", { className: "field-info", children: [jsx("label", { className: "field-label", children: field.label }), jsx("div", { className: "field-value", children: customFieldValues[field.key] !== undefined && customFieldValues[field.key] !== ''
                                                 ? String(customFieldValues[field.key])
-                                                : 'Not set' })] }) }, field.key))), jsx("button", { type: "button", onClick: () => setEditingSection('customFields'), className: "auth-button button-secondary", style: { marginTop: '8px' }, children: "Edit Information" })] })) : (jsxs("form", { onSubmit: handleUpdateCustomFields, className: "edit-form", children: [editableCustomFields.map((field) => (jsx(SchemaFieldRenderer, { field: field, value: customFieldValues[field.key], onChange: handleCustomFieldChange, disabled: loading }, field.key))), jsxs("div", { className: "button-group", children: [jsx("button", { type: "submit", className: "auth-button", disabled: loading, children: loading ? 'Saving...' : 'Save' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })] }))] })), showEmailSection && (jsxs("section", { className: "account-section", children: [jsxs("div", { className: "account-field", children: [jsxs("div", { className: "field-info", children: [jsx("label", { className: "field-label", children: "Email Address" }), jsxs("div", { className: "field-value", children: [profile?.email || 'Not set', profile?.emailVerified && (jsx("span", { className: "verification-badge verified", children: "Verified" })), profile?.email && !profile?.emailVerified && (jsx("span", { className: "verification-badge unverified", children: "Unverified" }))] })] }), editingSection !== 'email' && (jsx("button", { type: "button", onClick: () => setEditingSection('email'), className: "auth-button button-secondary", children: "Change Email" }))] }), editingSection === 'email' && (jsxs("form", { onSubmit: handleChangeEmail, className: "edit-form", children: [jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "newEmail", children: "New Email" }), jsx("input", { id: "newEmail", type: "email", value: newEmail, onChange: (e) => setNewEmail(e.target.value), placeholder: "new.email@example.com", className: "auth-input", required: true })] }), jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "emailPassword", children: "Confirm Password" }), jsx("input", { id: "emailPassword", type: "password", value: emailPassword, onChange: (e) => setEmailPassword(e.target.value), placeholder: "Enter your password", className: "auth-input", required: true })] }), jsxs("div", { className: "button-group", children: [jsx("button", { type: "submit", className: "auth-button", disabled: loading, children: loading ? 'Changing...' : 'Change Email' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })] }))] })), showPasswordSection && (jsxs("section", { className: "account-section", children: [jsxs("div", { className: "account-field", children: [jsxs("div", { className: "field-info", children: [jsx("label", { className: "field-label", children: "Password" }), jsx("div", { className: "field-value", children: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] }), editingSection !== 'password' && (jsx("button", { type: "button", onClick: () => setEditingSection('password'), className: "auth-button button-secondary", children: "Change Password" }))] }), editingSection === 'password' && (jsxs("form", { onSubmit: handleChangePassword, className: "edit-form", children: [jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "currentPassword", children: "Current Password" }), jsx("input", { id: "currentPassword", type: "password", value: currentPassword, onChange: (e) => setCurrentPassword(e.target.value), placeholder: "Enter current password", className: "auth-input", required: true })] }), jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "newPassword", children: "New Password" }), jsx("input", { id: "newPassword", type: "password", value: newPassword, onChange: (e) => setNewPassword(e.target.value), placeholder: "Enter new password", className: "auth-input", required: true, minLength: 6 })] }), jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "confirmPassword", children: "Confirm New Password" }), jsx("input", { id: "confirmPassword", type: "password", value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), placeholder: "Confirm new password", className: "auth-input", required: true, minLength: 6 })] }), jsxs("div", { className: "button-group", children: [jsx("button", { type: "submit", className: "auth-button", disabled: loading, children: loading ? 'Changing...' : 'Change Password' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })] }))] })), showPhoneSection && (jsxs("section", { className: "account-section", children: [jsxs("div", { className: "account-field", children: [jsxs("div", { className: "field-info", children: [jsx("label", { className: "field-label", children: "Phone Number" }), jsx("div", { className: "field-value", children: profile?.phoneNumber || 'Not set' })] }), editingSection !== 'phone' && (jsx("button", { type: "button", onClick: () => setEditingSection('phone'), className: "auth-button button-secondary", children: "Change Phone" }))] }), editingSection === 'phone' && (jsxs("form", { onSubmit: handleUpdatePhone, className: "edit-form", children: [jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "newPhone", children: "New Phone Number" }), jsx("input", { id: "newPhone", type: "tel", value: newPhone, onChange: (e) => setNewPhone(e.target.value), placeholder: "+1234567890", className: "auth-input", required: true })] }), !phoneCodeSent ? (jsxs("div", { className: "button-group", children: [jsx("button", { type: "button", onClick: handleSendPhoneCode, className: "auth-button", disabled: loading || !newPhone, children: loading ? 'Sending...' : 'Send Code' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })) : (jsxs(Fragment, { children: [jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "phoneCode", children: "Verification Code" }), jsx("input", { id: "phoneCode", type: "text", value: phoneCode, onChange: (e) => setPhoneCode(e.target.value), placeholder: "Enter 6-digit code", className: "auth-input", required: true, maxLength: 6 })] }), jsxs("div", { className: "button-group", children: [jsx("button", { type: "submit", className: "auth-button", disabled: loading, children: loading ? 'Verifying...' : 'Verify & Save' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })] }))] }))] })), showDeleteAccount && (jsxs("section", { className: "account-section danger-zone", children: [jsx("h3", { className: "section-title text-danger", children: "Danger Zone" }), !showDeleteConfirm ? (jsx("button", { type: "button", onClick: () => setShowDeleteConfirm(true), className: "auth-button button-danger", children: "Delete Account" })) : (jsxs("div", { className: "delete-confirm", children: [jsx("p", { className: "warning-text", children: "\u26A0\uFE0F This action cannot be undone. This will permanently delete your account and all associated data." }), jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "deletePassword", children: "Confirm Password" }), jsx("input", { id: "deletePassword", type: "password", value: deletePassword, onChange: (e) => setDeletePassword(e.target.value), placeholder: "Enter your password", className: "auth-input" })] }), jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "deleteConfirm", children: "Type DELETE to confirm" }), jsx("input", { id: "deleteConfirm", type: "text", value: deleteConfirmText, onChange: (e) => setDeleteConfirmText(e.target.value), placeholder: "DELETE", className: "auth-input" })] }), jsxs("div", { className: "button-group", children: [jsx("button", { type: "button", onClick: handleDeleteAccount, className: "auth-button button-danger", disabled: loading, children: loading ? 'Deleting...' : 'Permanently Delete Account' }), jsx("button", { type: "button", onClick: () => {
+                                                : 'Not set' })] }) }, field.key))), jsx("button", { type: "button", onClick: () => setEditingSection('customFields'), className: "auth-button button-secondary", style: { marginTop: '8px' }, children: "Edit Information" })] })) : (jsxs("form", { onSubmit: handleUpdateCustomFields, className: "edit-form", children: [editableCustomFields.map((field) => (jsx(SchemaFieldRenderer, { field: field, value: customFieldValues[field.key], onChange: handleCustomFieldChange, disabled: loading }, field.key))), jsxs("div", { className: "button-group", children: [jsx("button", { type: "submit", className: "auth-button", disabled: loading, children: loading ? 'Saving...' : 'Save' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })] }))] })), showEmailSection && (jsxs("section", { className: "account-section", children: [jsxs("div", { className: "account-field", children: [jsxs("div", { className: "field-info", children: [jsx("label", { className: "field-label", children: "Email Address" }), jsxs("div", { className: "field-value", children: [profile?.email || 'Not set', profile?.emailVerified && (jsx("span", { className: "verification-badge verified", children: "Verified" })), profile?.email && !profile?.emailVerified && (jsx("span", { className: "verification-badge unverified", children: "Unverified" }))] }), isGoogleOnly && (jsx("div", { className: "field-hint", style: { fontSize: '0.8rem', color: 'var(--color-muted-foreground, #888)', marginTop: '4px' }, children: "This email is managed by your Google account" }))] }), editingSection !== 'email' && !isGoogleOnly && !isPhoneOnly && (jsx("button", { type: "button", onClick: () => setEditingSection('email'), className: "auth-button button-secondary", children: "Change Email" }))] }), editingSection === 'email' && !isGoogleOnly && !isPhoneOnly && (jsxs("form", { onSubmit: handleChangeEmail, className: "edit-form", children: [jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "newEmail", children: "New Email" }), jsx("input", { id: "newEmail", type: "email", value: newEmail, onChange: (e) => setNewEmail(e.target.value), placeholder: "new.email@example.com", className: "auth-input", required: true })] }), jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "emailPassword", children: "Confirm Password" }), jsx("input", { id: "emailPassword", type: "password", value: emailPassword, onChange: (e) => setEmailPassword(e.target.value), placeholder: "Enter your password", className: "auth-input", required: true })] }), jsxs("div", { className: "button-group", children: [jsx("button", { type: "submit", className: "auth-button", disabled: loading, children: loading ? 'Changing...' : 'Change Email' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })] }))] })), showPasswordSection && !isGoogleOnly && !isPhoneOnly && (jsxs("section", { className: "account-section", children: [jsxs("div", { className: "account-field", children: [jsxs("div", { className: "field-info", children: [jsx("label", { className: "field-label", children: "Password" }), jsx("div", { className: "field-value", children: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] }), editingSection !== 'password' && (jsx("button", { type: "button", onClick: () => setEditingSection('password'), className: "auth-button button-secondary", children: "Change Password" }))] }), editingSection === 'password' && (jsxs("form", { onSubmit: handleChangePassword, className: "edit-form", children: [jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "currentPassword", children: "Current Password" }), jsx("input", { id: "currentPassword", type: "password", value: currentPassword, onChange: (e) => setCurrentPassword(e.target.value), placeholder: "Enter current password", className: "auth-input", required: true })] }), jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "newPassword", children: "New Password" }), jsx("input", { id: "newPassword", type: "password", value: newPassword, onChange: (e) => setNewPassword(e.target.value), placeholder: "Enter new password", className: "auth-input", required: true, minLength: 6 })] }), jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "confirmPassword", children: "Confirm New Password" }), jsx("input", { id: "confirmPassword", type: "password", value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), placeholder: "Confirm new password", className: "auth-input", required: true, minLength: 6 })] }), jsxs("div", { className: "button-group", children: [jsx("button", { type: "submit", className: "auth-button", disabled: loading, children: loading ? 'Changing...' : 'Change Password' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })] }))] })), showPhoneSection && (jsxs("section", { className: "account-section", children: [jsxs("div", { className: "account-field", children: [jsxs("div", { className: "field-info", children: [jsx("label", { className: "field-label", children: "Phone Number" }), jsx("div", { className: "field-value", children: profile?.phoneNumber || 'Not set' })] }), editingSection !== 'phone' && (jsx("button", { type: "button", onClick: () => setEditingSection('phone'), className: "auth-button button-secondary", children: "Change Phone" }))] }), editingSection === 'phone' && (jsxs("form", { onSubmit: handleUpdatePhone, className: "edit-form", children: [jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "newPhone", children: "New Phone Number" }), jsx("input", { id: "newPhone", type: "tel", value: newPhone, onChange: (e) => setNewPhone(e.target.value), placeholder: "+1234567890", className: "auth-input", required: true })] }), !phoneCodeSent ? (jsxs("div", { className: "button-group", children: [jsx("button", { type: "button", onClick: handleSendPhoneCode, className: "auth-button", disabled: loading || !newPhone, children: loading ? 'Sending...' : 'Send Code' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })) : (jsxs(Fragment, { children: [jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "phoneCode", children: "Verification Code" }), jsx("input", { id: "phoneCode", type: "text", value: phoneCode, onChange: (e) => setPhoneCode(e.target.value), placeholder: "Enter 6-digit code", className: "auth-input", required: true, maxLength: 6 })] }), jsxs("div", { className: "button-group", children: [jsx("button", { type: "submit", className: "auth-button", disabled: loading, children: loading ? 'Verifying...' : 'Verify & Save' }), jsx("button", { type: "button", onClick: cancelEdit, className: "auth-button button-secondary", children: "Cancel" })] })] }))] }))] })), showDeleteAccount && (jsxs("section", { className: "account-section danger-zone", children: [jsx("h3", { className: "section-title text-danger", children: "Danger Zone" }), !showDeleteConfirm ? (jsx("button", { type: "button", onClick: () => setShowDeleteConfirm(true), className: "auth-button button-danger", children: "Delete Account" })) : (jsxs("div", { className: "delete-confirm", children: [jsx("p", { className: "warning-text", children: "\u26A0\uFE0F This action cannot be undone. This will permanently delete your account and all associated data." }), hasPassword !== false && (jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "deletePassword", children: "Confirm Password" }), jsx("input", { id: "deletePassword", type: "password", value: deletePassword, onChange: (e) => setDeletePassword(e.target.value), placeholder: "Enter your password", className: "auth-input" })] })), jsxs("div", { className: "form-group", children: [jsx("label", { htmlFor: "deleteConfirm", children: "Type DELETE to confirm" }), jsx("input", { id: "deleteConfirm", type: "text", value: deleteConfirmText, onChange: (e) => setDeleteConfirmText(e.target.value), placeholder: "DELETE", className: "auth-input" })] }), jsxs("div", { className: "button-group", children: [jsx("button", { type: "button", onClick: handleDeleteAccount, className: "auth-button button-danger", disabled: loading, children: loading ? 'Deleting...' : 'Permanently Delete Account' }), jsx("button", { type: "button", onClick: () => {
                                             setShowDeleteConfirm(false);
                                             setDeletePassword('');
                                             setDeleteConfirmText('');