@proveanything/smartlinks-auth-ui 0.4.1 → 0.4.4

package/dist/index.esm.js

@@ -1,8 +1,7 @@
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 import React, { useEffect, useState, useMemo, useRef, useCallback, createContext, useContext } from 'react';
 import * as smartlinks from '@proveanything/smartlinks';
-import { evaluateConditions, iframe, SmartlinksApiError } from '@proveanything/smartlinks';
-export { evaluateConditions } from '@proveanything/smartlinks';
+import { iframe, SmartlinksApiError } from '@proveanything/smartlinks';
 import { post, getApiHeaders, isProxyEnabled } from '@proveanything/smartlinks/dist/http';
 
 const AuthContainer = ({ children, theme = 'light', className = '', config, minimal = false, }) => {
@@ -60,6 +59,52 @@ const AuthContainer = ({ children, theme = 'light', className = '', config, mini
     return (jsx("div", { className: containerClass, children: jsxs("div", { className: cardClass, style: !minimal && config?.branding?.buttonStyle === 'square' ? { borderRadius: '4px' } : undefined, children: [(logoUrl || title || subtitle) && (jsxs("div", { className: "auth-header", children: [logoUrl && (jsx("div", { className: "auth-logo", children: jsx("img", { src: logoUrl, alt: "Logo", style: { maxWidth: '200px', height: 'auto', objectFit: 'contain' } }) })), title && jsx("h1", { className: "auth-title", children: title }), subtitle && jsx("p", { className: "auth-subtitle", children: subtitle })] })), jsx("div", { className: "auth-content", children: children }), (config?.branding?.termsUrl || config?.branding?.privacyUrl) && (jsxs("div", { className: "auth-footer", children: [config.branding.termsUrl && jsx("a", { href: config.branding.termsUrl, target: "_blank", rel: "noopener noreferrer", children: "Terms" }), config.branding.termsUrl && config.branding.privacyUrl && jsx("span", { children: "\u2022" }), config.branding.privacyUrl && jsx("a", { href: config.branding.privacyUrl, target: "_blank", rel: "noopener noreferrer", children: "Privacy" })] }))] }) }));
 };
 
+/**
+ * Evaluate whether a field's conditions are satisfied given current form values.
+ * Local implementation matching SDK's evaluateConditions — avoids Vite ESM export issues.
+ */
+const evaluateConditions = (conditions, showWhen, fieldValues) => {
+    if (!conditions || conditions.length === 0)
+        return true;
+    const results = conditions.map(condition => {
+        const value = fieldValues[condition.targetFieldId];
+        switch (condition.operator) {
+            case 'is_empty':
+                return value == null || value === '' || (Array.isArray(value) && value.length === 0);
+            case 'is_not_empty':
+                return value != null && value !== '' && !(Array.isArray(value) && value.length === 0);
+            case 'is_true':
+                return value === true;
+            case 'is_false':
+                return value === false;
+            case 'equals':
+                return value === condition.value;
+            case 'not_equals':
+                return value !== condition.value;
+            case 'contains':
+                return Array.isArray(value)
+                    ? value.includes(condition.value)
+                    : typeof value === 'string' && value.includes(String(condition.value));
+            case 'not_contains':
+                return Array.isArray(value)
+                    ? !value.includes(condition.value)
+                    : typeof value === 'string' && !value.includes(String(condition.value));
+            case 'greater_than':
+                return typeof value === 'number' && typeof condition.value === 'number'
+                    ? value > condition.value
+                    : String(value) > String(condition.value);
+            case 'less_than':
+                return typeof value === 'number' && typeof condition.value === 'number'
+                    ? value < condition.value
+                    : String(value) < String(condition.value);
+            default:
+                return true;
+        }
+    });
+    return (showWhen ?? 'all') === 'any'
+        ? results.some(Boolean)
+        : results.every(Boolean);
+};
 /**
  * Renders a form field based on a ContactSchemaResponse property + uiSchema entry.
  */
@@ -130,10 +175,13 @@ const SchemaFieldRenderer = ({ field, value, onChange, disabled = false, error,
 const resolveFields = (schema, formValues) => {
     if (!schema)
         return [];
-    const requiredSet = new Set(schema.schema.required || []);
-    return schema.fieldOrder
+    const fieldOrder = schema.fieldOrder ?? [];
+    const properties = schema.schema?.properties ?? {};
+    const uiSchema = schema.uiSchema ?? {};
+    const requiredSet = new Set(schema.schema?.required || []);
+    return fieldOrder
         .filter(fieldId => {
-        const prop = schema.schema.properties[fieldId];
+        const prop = properties[fieldId];
         if (!prop)
             return false;
         // Evaluate conditional visibility
@@ -141,8 +189,8 @@ const resolveFields = (schema, formValues) => {
     })
         .map(fieldId => ({
         key: fieldId,
-        property: schema.schema.properties[fieldId],
-        ui: schema.uiSchema[fieldId] || {},
+        property: properties[fieldId],
+        ui: uiSchema[fieldId] || {},
         required: requiredSet.has(fieldId),
     }));
 };
@@ -159,13 +207,16 @@ const getRegistrationFields = (schema, registrationConfig, formValues) => {
     if (!schema || !registrationConfig.length)
         return [];
     const configMap = new Map(registrationConfig.map(c => [c.key, c]));
-    const requiredSet = new Set(schema.schema.required || []);
-    return schema.fieldOrder
+    const fieldOrder = schema.fieldOrder ?? [];
+    const properties = schema.schema?.properties ?? {};
+    const uiSchema = schema.uiSchema ?? {};
+    const requiredSet = new Set(schema.schema?.required || []);
+    return fieldOrder
         .filter(fieldId => {
         const config = configMap.get(fieldId);
         if (!config?.showDuringRegistration)
             return false;
-        const prop = schema.schema.properties[fieldId];
+        const prop = properties[fieldId];
         if (!prop)
             return false;
         return evaluateConditions(prop.conditions, prop.showWhen, formValues || {});
@@ -174,8 +225,8 @@ const getRegistrationFields = (schema, registrationConfig, formValues) => {
         const config = configMap.get(fieldId);
         return {
             key: fieldId,
-            property: schema.schema.properties[fieldId],
-            ui: schema.uiSchema[fieldId] || {},
+            property: properties[fieldId],
+            ui: uiSchema[fieldId] || {},
             required: config.required ?? requiredSet.has(fieldId),
         };
     });
@@ -263,7 +314,7 @@ const EmailAuthForm = ({ mode, onSubmit, onModeSwitch, onForgotPassword, loading
                     if (newMode !== mode) {
                         onModeSwitch();
                     }
-                }, disabled: loading })), jsxs("div", { className: "auth-form-header", children: [jsx("h2", { className: "auth-form-title", children: title }), jsx("p", { className: "auth-form-subtitle", children: subtitle })] }), error && (jsxs("div", { className: "auth-error", role: "alert", children: [jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error] })), mode === 'register' && (jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "displayName", className: "auth-label", children: "Full Name" }), jsx("input", { type: "text", id: "displayName", className: "auth-input", value: formData.displayName || '', onChange: (e) => handleChange('displayName', e.target.value), required: mode === 'register', disabled: loading, placeholder: "John Doe" })] })), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsx("input", { type: "email", id: "email", className: "auth-input", value: formData.email || '', onChange: (e) => handleChange('email', e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] }), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "password", className: "auth-label", children: "Password" }), jsx("input", { type: "password", id: "password", className: "auth-input", value: formData.password || '', onChange: (e) => handleChange('password', e.target.value), required: true, disabled: loading, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", autoComplete: mode === 'login' ? 'current-password' : 'new-password', minLength: 6 })] }), mode === 'register' && hasSchemaFields && schemaFields.inline.map(renderSchemaField), mode === 'register' && hasLegacyFields && additionalFields.map(renderLegacyField), mode === 'register' && hasSchemaFields && schemaFields.postCredentials.length > 0 && (jsxs(Fragment, { children: [jsx("div", { className: "auth-divider", style: { margin: '16px 0' }, children: jsx("span", { children: "Additional Information" }) }), schemaFields.postCredentials.map(renderSchemaField)] })), mode === 'login' && (jsx("div", { className: "auth-form-footer", children: jsx("button", { type: "button", className: "auth-link", onClick: onForgotPassword, disabled: loading, children: "Forgot password?" }) })), jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsx("span", { className: "auth-spinner" })) : mode === 'login' ? ('Sign in') : ('Create account') }), signupProminence !== 'balanced' && (jsxs("div", { className: "auth-divider", children: [jsx("span", { children: mode === 'login' ? "Don't have an account?" : 'Already have an account?' }), jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onModeSwitch, disabled: loading, children: mode === 'login' ? 'Sign up' : 'Sign in' })] }))] }));
+                }, disabled: loading })), jsxs("div", { className: "auth-form-header", children: [jsx("h2", { className: "auth-form-title", children: title }), jsx("p", { className: "auth-form-subtitle", children: subtitle })] }), error && (jsxs("div", { className: "auth-error", role: "alert", children: [jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error] })), mode === 'register' && (jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "displayName", className: "auth-label", children: "Full Name" }), jsx("input", { type: "text", id: "displayName", className: "auth-input", value: formData.displayName || '', onChange: (e) => handleChange('displayName', e.target.value), required: mode === 'register', disabled: loading, placeholder: "John Smith" })] })), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsx("input", { type: "email", id: "email", className: "auth-input", value: formData.email || '', onChange: (e) => handleChange('email', e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] }), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "password", className: "auth-label", children: "Password" }), jsx("input", { type: "password", id: "password", className: "auth-input", value: formData.password || '', onChange: (e) => handleChange('password', e.target.value), required: true, disabled: loading, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", autoComplete: mode === 'login' ? 'current-password' : 'new-password', minLength: 6 })] }), mode === 'register' && hasSchemaFields && schemaFields.inline.map(renderSchemaField), mode === 'register' && hasLegacyFields && additionalFields.map(renderLegacyField), mode === 'register' && hasSchemaFields && schemaFields.postCredentials.length > 0 && (jsxs(Fragment, { children: [jsx("div", { className: "auth-divider", style: { margin: '16px 0' }, children: jsx("span", { children: "Additional Information" }) }), schemaFields.postCredentials.map(renderSchemaField)] })), mode === 'login' && (jsx("div", { className: "auth-form-footer", children: jsx("button", { type: "button", className: "auth-link", onClick: onForgotPassword, disabled: loading, children: "Forgot password?" }) })), jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsx("span", { className: "auth-spinner" })) : mode === 'login' ? ('Sign in') : ('Create account') }), signupProminence !== 'balanced' && (jsxs("div", { className: "auth-divider", children: [jsx("span", { children: mode === 'login' ? "Don't have an account?" : 'Already have an account?' }), jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onModeSwitch, disabled: loading, children: mode === 'login' ? 'Sign up' : 'Sign in' })] }))] }));
 };
 
 const ProviderButtons = ({ enabledProviders, providerOrder, onEmailLogin, onGoogleLogin, onPhoneLogin, onMagicLinkLogin, loading, }) => {
@@ -11681,15 +11732,27 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                     const headers = getApiHeaders();
                     const hasBearer = !!headers['Authorization'];
                     const hasSdkProxy = isProxyEnabled();
+                    console.log('[AuthContext] 🔍 Proxy mode init:', {
+                        hasBearer,
+                        hasSdkProxy,
+                        authHeader: headers['Authorization'] ? `${headers['Authorization'].substring(0, 20)}...` : '(none)',
+                        willCallGetAccount: hasBearer || hasSdkProxy,
+                    });
                     if (!hasBearer && !hasSdkProxy) {
-                        console.debug('[AuthContext] Skipping getAccount - no credentials available');
+                        console.log('[AuthContext] ⏭️ Skipping getAccount - no bearer token and SDK proxy not enabled');
                         // Fall through to "no valid session" state
                     }
                     else {
+                        console.log('[AuthContext] 📡 Calling auth.getAccount() via', hasSdkProxy ? 'proxy' : 'bearer');
                         try {
                             const accountResponse = await smartlinks.auth.getAccount();
                             const accountAny = accountResponse;
                             const hasValidSession = accountAny?.uid && accountAny.uid.length > 0;
+                            console.log('[AuthContext] 📋 getAccount response:', {
+                                hasValidSession,
+                                uid: accountAny?.uid || '(none)',
+                                email: accountAny?.email || '(none)',
+                            });
                             if (hasValidSession && isMounted) {
                                 const userFromAccount = {
                                     uid: accountAny.uid,
@@ -11706,10 +11769,11 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
                                 syncContactRef.current?.(userFromAccount, accountResponse);
                             }
                             else if (isMounted) {
-                                // No valid session, awaiting login
+                                console.log('[AuthContext] ℹ️ No valid session found via proxy');
                             }
                         }
                         catch (error) {
+                            console.warn('[AuthContext] ❌ getAccount() failed:', error);
                             // auth.getAccount() failed, awaiting login
                         }
                     } // end else (has credentials)
@@ -12218,7 +12282,6 @@ const useAuth = () => {
 
 /**
  * Friendly error messages for common HTTP status codes.
- * Maps status codes to context-specific user-friendly messages.
  */
 const STATUS_MESSAGES = {
     400: 'Invalid request. Please check your input and try again.',
@@ -12230,41 +12293,103 @@ const STATUS_MESSAGES = {
 };
 /**
  * Context-specific error messages for different auth operations.
- * Use `errorCode` from the SDK when available, otherwise fall back to status code.
  */
 const ERROR_CODE_MESSAGES = {
-    // Auth-specific error codes
+    // 400 - Validation errors
+    'MISSING_FIELDS': 'Email and password are required.',
+    'MISSING_EMAIL': 'Email is required.',
+    'MISSING_PASSWORD': 'Password is required.',
+    'MISSING_TOKEN': 'Token is required.',
+    'MISSING_PHONE_NUMBER': 'Phone number is required.',
+    'MISSING_VERIFICATION_CODE': 'Phone number and verification code are required.',
+    'MISSING_REDIRECT_URL': 'Redirect URL is required.',
+    'MISSING_GOOGLE_TOKEN': 'Google token is required.',
+    'INVALID_CLIENT_ID': 'Invalid client configuration.',
+    'INVALID_REDIRECT_URL': 'Invalid redirect URL.',
+    'INVALID_PHONE_NUMBER': 'Invalid phone number. Please check the format and try again.',
+    'INVALID_GOOGLE_TOKEN': 'Invalid Google sign-in token.',
+    'PASSWORD_TOO_SHORT': 'Password must be at least 8 characters long.',
+    'PASSWORD_REQUIREMENTS_NOT_MET': 'New password must be at least 6 characters.',
+    'EMAIL_ALREADY_VERIFIED': 'Your email is already verified.',
+    'INVALID_CONFIRMATION': 'Please type DELETE to confirm account deletion.',
+    // 401 - Authentication errors
     'INVALID_CREDENTIALS': 'Invalid email or password.',
-    'EMAIL_ALREADY_EXISTS': 'This email is already registered.',
+    'INCORRECT_PASSWORD': 'Current password is incorrect.',
+    'INVALID_VERIFICATION_CODE': 'Invalid or expired verification code. Please try again.',
+    'INVALID_TOKEN': 'This link has expired or is invalid. Please request a new one.',
+    'TOKEN_EXPIRED': 'This link has expired. Please request a new one.',
+    'TOKEN_ALREADY_USED': 'This link has already been used. Please request a new one.',
+    'UNAUTHORIZED': 'You must be logged in to perform this action.',
+    'GOOGLE_TOKEN_AUDIENCE_MISMATCH': 'Google sign-in failed. Token was not issued for this application.',
+    // 403 - Forbidden / verification required
     'EMAIL_NOT_VERIFIED': 'Please verify your email before signing in.',
-    'ACCOUNT_LOCKED': 'Your account has been locked. Please contact support.',
+    'ACCOUNT_LOCKED': 'Your account has been locked. Please verify your email to unlock.',
+    'EMAIL_VERIFICATION_EXPIRED': 'Your verification deadline has passed and your account is locked. Please contact support.',
+    // 404
+    'USER_NOT_FOUND': 'Account not found. Please check your email or create a new account.',
+    // 409 - Conflicts
+    'EMAIL_ALREADY_EXISTS': 'This email is already registered.',
+    'EMAIL_IN_USE': 'This email is already in use.',
+    // 429 - Rate limiting
+    'RATE_LIMIT_EXCEEDED': 'Too many requests. Please try again later.',
+    'TOO_MANY_MAGIC_LINKS': 'Too many magic link requests. Please try again later.',
+    'TOO_MANY_VERIFICATION_ATTEMPTS': 'Too many verification attempts. Please wait and try again.',
+    'MAX_VERIFICATION_ATTEMPTS': 'Maximum verification attempts reached. Please try again later.',
+    // 500 - Server errors
+    'LOGIN_FAILED': 'Login failed. Please try again later.',
+    'REGISTRATION_FAILED': 'Registration failed. Please try again later.',
+    'GOOGLE_AUTH_NOT_CONFIGURED': 'Google sign-in is not available for this application.',
+    'GOOGLE_AUTH_FAILED': 'Google sign-in failed. Please try again.',
+    'GOOGLE_USERINFO_FAILED': 'Failed to retrieve your Google account information. Please try again.',
+    'PHONE_VERIFICATION_FAILED': 'Phone verification failed. Please try again.',
+    'SEND_VERIFICATION_CODE_FAILED': 'Failed to send verification code. Please try again.',
+    'MAGIC_LINK_SEND_FAILED': 'Failed to send magic link. Please try again.',
+    'MAGIC_LINK_VERIFICATION_FAILED': 'Magic link verification failed. Please try again.',
+    'PASSWORD_RESET_FAILED': 'Failed to process password reset. Please try again.',
+    'PASSWORD_RESET_COMPLETE_FAILED': 'Failed to reset password. Please try again.',
+    'EMAIL_VERIFICATION_SEND_FAILED': 'Failed to send verification email. Please try again.',
+    'EMAIL_VERIFICATION_FAILED': 'Email verification failed. Please try again.',
+    // Account management 500s
+    'UPDATE_PROFILE_FAILED': 'Failed to update profile. Please try again.',
+    'CHANGE_PASSWORD_FAILED': 'Failed to change password. Please try again.',
+    'CHANGE_EMAIL_FAILED': 'Failed to change email. Please try again.',
+    'UPDATE_PHONE_FAILED': 'Failed to update phone number. Please try again.',
+    'DELETE_ACCOUNT_FAILED': 'Failed to delete account. Please try again.',
+    'CONFIG_FETCH_FAILED': 'Failed to load configuration. Please try again.',
+    'INTERNAL_ERROR': 'An unexpected error occurred. Please try again.',
+    // Legacy aliases (kept for backward compatibility)
     'INVALID_CODE': 'Invalid verification code. Please check and try again.',
     'CODE_EXPIRED': 'This code has expired. Please request a new one.',
-    'INVALID_TOKEN': 'This link has expired or is invalid. Please request a new one.',
-    'TOKEN_EXPIRED': 'This link has expired. Please request a new one.',
     'PHONE_NOT_SUPPORTED': 'This phone number is not supported. Please try a different number.',
     'INVALID_PHONE': 'Invalid phone number. Please check the format and try again.',
     'PASSWORD_TOO_WEAK': 'Password is too weak. Please use at least 8 characters with a mix of letters and numbers.',
     'RATE_LIMITED': 'Too many attempts. Please wait a moment and try again.',
 };
+function isApiErrorLike(error) {
+    if (error instanceof SmartlinksApiError)
+        return true;
+    if (error && typeof error === 'object' && 'statusCode' in error && 'message' in error) {
+        const e = error;
+        return typeof e.statusCode === 'number' && typeof e.message === 'string';
+    }
+    return false;
+}
 /**
  * Extracts a user-friendly error message from an error.
  *
  * Handles:
- * - SmartlinksApiError: Uses statusCode and errorCode for precise messaging
+ * - SmartlinksApiError (and duck-typed equivalents from proxy mode)
  * - Standard Error: Uses message property
  * - String: Passes through directly (for native bridge errors)
  * - Unknown: Returns generic message
- *
- * @param error - The caught error (SmartlinksApiError, Error, string, or unknown)
- * @returns A user-friendly error message suitable for display
  */
 function getFriendlyErrorMessage(error) {
-    // Handle SmartlinksApiError with structured data
-    if (error instanceof SmartlinksApiError) {
+    // Handle SmartlinksApiError or duck-typed API errors (proxy mode)
+    if (isApiErrorLike(error)) {
         // First, check for specific error code (most precise)
-        if (error.errorCode && ERROR_CODE_MESSAGES[error.errorCode]) {
-            return ERROR_CODE_MESSAGES[error.errorCode];
+        const errorCode = error.errorCode || error.details?.errorCode || error.details?.error;
+        if (errorCode && ERROR_CODE_MESSAGES[errorCode]) {
+            return ERROR_CODE_MESSAGES[errorCode];
         }
         // Then, check status code for general category messages
         if (error.statusCode >= 500) {
@@ -12278,6 +12403,34 @@ function getFriendlyErrorMessage(error) {
     }
     // Handle standard Error objects
     if (error instanceof Error) {
+        // SDK bug workaround: SDK may do `throw new Error(responseBodyObject)` which produces
+        // message "[object Object]". Check for API error properties attached to the Error instance.
+        const errAny = error;
+        // Check if the Error has API error properties directly attached (e.g., error.statusCode, error.errorCode)
+        if (typeof errAny.statusCode === 'number' || errAny.errorCode || errAny.response) {
+            // Try to extract from attached properties
+            const apiLike = errAny.response || errAny;
+            if (isApiErrorLike(apiLike)) {
+                return getFriendlyErrorMessage(apiLike);
+            }
+        }
+        // Check if the Error has a `cause` with API error details (modern Error cause pattern)
+        if (errAny.cause && typeof errAny.cause === 'object') {
+            if (isApiErrorLike(errAny.cause)) {
+                return getFriendlyErrorMessage(errAny.cause);
+            }
+        }
+        // If the message is "[object Object]", the error was constructed from a plain object
+        // This is useless - return a generic message instead
+        if (error.message === '[object Object]') {
+            // Log the actual error for debugging
+            console.warn('[AuthKit] Error with [object Object] message. Raw error:', JSON.stringify(errAny, Object.getOwnPropertyNames(errAny)));
+            return 'An unexpected error occurred. Please try again.';
+        }
+        // Check if the message itself contains a known API error pattern
+        if (/already (registered|exists)/i.test(error.message)) {
+            return 'This email is already registered.';
+        }
         return error.message;
     }
     // Handle plain strings (e.g., from native bridge callbacks)
@@ -12291,41 +12444,57 @@ function getFriendlyErrorMessage(error) {
  * Checks if an error represents a conflict (409) - typically duplicate registration.
  */
 function isConflictError(error) {
-    return error instanceof SmartlinksApiError && error.statusCode === 409;
+    if (isApiErrorLike(error))
+        return error.statusCode === 409;
+    // Also check error message for keyword match (resilient fallback)
+    if (error instanceof Error && /already (registered|exists)/i.test(error.message))
+        return true;
+    return false;
 }
 /**
  * Checks if an error represents invalid credentials (401).
  */
 function isAuthError(error) {
-    return error instanceof SmartlinksApiError && error.isAuthError();
+    if (error instanceof SmartlinksApiError)
+        return error.isAuthError();
+    if (isApiErrorLike(error))
+        return error.statusCode === 401 || error.statusCode === 403;
+    return false;
 }
 /**
  * Checks if an error represents rate limiting (429).
  */
 function isRateLimitError(error) {
-    return error instanceof SmartlinksApiError && error.isRateLimited();
+    if (error instanceof SmartlinksApiError)
+        return error.isRateLimited();
+    if (isApiErrorLike(error))
+        return error.statusCode === 429;
+    return false;
 }
 /**
  * Checks if an error represents a server error (5xx).
  */
 function isServerError(error) {
-    return error instanceof SmartlinksApiError && error.isServerError();
+    if (error instanceof SmartlinksApiError)
+        return error.isServerError();
+    if (isApiErrorLike(error))
+        return error.statusCode >= 500;
+    return false;
 }
 /**
  * Gets the HTTP status code from an error, if available.
  */
 function getErrorStatusCode(error) {
-    if (error instanceof SmartlinksApiError) {
+    if (isApiErrorLike(error))
         return error.statusCode;
-    }
     return undefined;
 }
 /**
  * Gets the server-specific error code from an error, if available.
  */
 function getErrorCode(error) {
-    if (error instanceof SmartlinksApiError) {
-        return error.errorCode;
+    if (isApiErrorLike(error)) {
+        return error.errorCode || error.details?.errorCode || error.details?.error;
     }
     return undefined;
 }
@@ -12555,6 +12724,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
     const [sdkReady, setSdkReady] = useState(false); // Track SDK initialization state
     const [contactSchema, setContactSchema] = useState(null); // Schema for registration fields
     const [silentSignInChecked, setSilentSignInChecked] = useState(false); // Track if silent sign-in has been checked
+    const [googleFallbackToPopup, setGoogleFallbackToPopup] = useState(false); // Show popup fallback when FedCM is blocked/dismissed
     const log = useMemo(() => createLoggerWrapper(logger), [logger]);
     const api = new AuthAPI(apiEndpoint, clientId, clientName, logger);
     const auth = useAuth();
@@ -13087,6 +13257,8 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             }
         }
         catch (err) {
+            // Debug: log the raw error shape to help diagnose SDK error wrapping issues
+            log.error('handleEmailAuth error:', typeof err, err instanceof Error ? `Error.message=${err.message}` : '', JSON.stringify(err, Object.getOwnPropertyNames(err || {})));
             // Check if error is about email already registered (409 conflict)
             // Handle both SmartlinksApiError (statusCode 409) and plain Error with keyword matching
             if (mode === 'register' && (isConflictError(err) ||
@@ -13098,7 +13270,8 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             else {
                 setError(getFriendlyErrorMessage(err));
             }
-            onAuthError?.(err instanceof Error ? err : new Error(getFriendlyErrorMessage(err)));
+            const friendlyMsg = getFriendlyErrorMessage(err);
+            onAuthError?.(err instanceof Error ? new Error(friendlyMsg) : new Error(friendlyMsg));
         }
         finally {
             setLoading(false);
@@ -13147,6 +13320,22 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             setLoading(false);
         }
     };
+    // Retry Google login using popup flow (fallback when FedCM/OneTap is blocked)
+    const handleGooglePopupFallback = () => {
+        setGoogleFallbackToPopup(false);
+        setError(undefined);
+        // Temporarily override the flow to popup and call handleGoogleLogin
+        const originalFlow = config?.googleOAuthFlow;
+        if (config) {
+            config.googleOAuthFlow = 'popup';
+        }
+        handleGoogleLogin().finally(() => {
+            // Restore original flow setting
+            if (config) {
+                config.googleOAuthFlow = originalFlow;
+            }
+        });
+    };
     const handleGoogleLogin = async () => {
         const hasCustomGoogleClientId = !!config?.googleClientId;
         const googleClientId = config?.googleClientId || DEFAULT_GOOGLE_CLIENT_ID;
@@ -13162,6 +13351,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         const isWhitelisted = isWhitelistedGoogleDomain(config?.whitelistedGoogleDomains);
         const googleProxyUrl = config?.googleOAuthProxyUrl
             || (!hasCustomGoogleClientId && !isWhitelisted ? DEFAULT_GOOGLE_PROXY_URL : undefined);
+        setGoogleFallbackToPopup(false);
         log.log('Google Auth initiated:', {
             configuredFlow,
             effectiveFlow: oauthFlow,
@@ -13472,14 +13662,26 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     cancel_on_tap_outside: true,
                     use_fedcm_for_prompt: true, // Enable FedCM for future browser compatibility
                 });
-                // Use timeout fallback instead of deprecated notification methods
-                // (isNotDisplayed/isSkippedMoment will stop working when FedCM becomes mandatory)
+                // Use timeout fallback — if no prompt interaction after 5s, assume FedCM was blocked
                 const promptTimeout = setTimeout(() => {
+                    log.log('Google OneTap prompt timed out — FedCM may be blocked or unavailable');
+                    setGoogleFallbackToPopup(true);
                     setLoading(false);
                 }, 5000);
-                google.accounts.id.prompt(() => {
-                    // Clear timeout if prompt interaction occurs
+                google.accounts.id.prompt((notification) => {
                     clearTimeout(promptTimeout);
+                    // Check for FedCM/OneTap dismissal or blocking
+                    // notification may have getMomentType(), getDismissedReason(), getSkippedReason()
+                    const momentType = notification?.getMomentType?.();
+                    const dismissedReason = notification?.getDismissedReason?.();
+                    const skippedReason = notification?.getSkippedReason?.();
+                    log.log('Google OneTap prompt notification:', { momentType, dismissedReason, skippedReason });
+                    if (momentType === 'skipped' || momentType === 'dismissed') {
+                        // User dismissed the prompt, or browser blocked it (FedCM disabled)
+                        // Offer popup flow as alternative
+                        log.log('Google OneTap was dismissed/skipped, offering popup fallback');
+                        setGoogleFallbackToPopup(true);
+                    }
                     setLoading(false);
                 });
             }
@@ -13802,33 +14004,68 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                                     fontSize: '0.875rem',
                                     fontWeight: 500,
                                     opacity: loading ? 0.6 : 1
-                                }, children: "Cancel" })] })] })) : (jsx(Fragment, { children: (() => {
-                    const emailDisplayMode = config?.emailDisplayMode || 'form';
-                    const providerOrder = config?.providerOrder || (config?.enabledProviders || enabledProviders);
-                    const actualProviders = config?.enabledProviders || enabledProviders;
-                    // Button mode: show provider selection first, then email form if email is selected
-                    if (emailDisplayMode === 'button' && !showEmailForm) {
-                        return (jsx(ProviderButtons, { enabledProviders: actualProviders, providerOrder: providerOrder, onEmailLogin: () => setShowEmailForm(true), onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }));
-                    }
-                    // Form mode or email button was clicked: show email form with other providers
-                    return (jsxs(Fragment, { children: [emailDisplayMode === 'button' && showEmailForm && (jsx("button", { onClick: () => setShowEmailForm(false), style: {
-                                    marginBottom: '1rem',
-                                    padding: '0.5rem',
-                                    background: 'none',
-                                    border: 'none',
-                                    color: 'var(--auth-text-color, #6B7280)',
-                                    cursor: 'pointer',
+                                }, children: "Cancel" })] })] })) : (jsxs(Fragment, { children: [googleFallbackToPopup && (jsxs("div", { style: {
+                            marginBottom: '1rem',
+                            padding: '0.75rem 1rem',
+                            borderRadius: '0.5rem',
+                            backgroundColor: resolvedTheme === 'dark' ? 'rgba(59, 130, 246, 0.1)' : 'rgba(59, 130, 246, 0.05)',
+                            border: `1px solid ${resolvedTheme === 'dark' ? 'rgba(59, 130, 246, 0.3)' : 'rgba(59, 130, 246, 0.2)'}`,
+                        }, children: [jsx("p", { style: {
+                                    fontSize: '0.8125rem',
+                                    color: resolvedTheme === 'dark' ? '#93c5fd' : '#1e40af',
+                                    marginBottom: '0.5rem',
+                                    lineHeight: 1.4,
+                                }, children: "Google sign-in was blocked by your browser. You can try signing in via a popup window instead." }), jsxs("button", { onClick: handleGooglePopupFallback, disabled: loading, style: {
+                                    width: '100%',
+                                    padding: '0.5rem 1rem',
                                     fontSize: '0.875rem',
+                                    fontWeight: 500,
+                                    color: '#fff',
+                                    backgroundColor: '#4285F4',
+                                    border: 'none',
+                                    borderRadius: '0.375rem',
+                                    cursor: loading ? 'not-allowed' : 'pointer',
+                                    opacity: loading ? 0.6 : 1,
                                     display: 'flex',
                                     alignItems: 'center',
-                                    gap: '0.25rem'
-                                }, children: "\u2190 Back to options" })), jsx(EmailAuthForm, { mode: mode, onSubmit: handleEmailAuth, onModeSwitch: () => {
-                                    setMode(mode === 'login' ? 'register' : 'login');
-                                    setShowResendVerification(false);
-                                    setShowRequestNewReset(false);
-                                    setError(undefined);
-                                }, onForgotPassword: () => setMode('reset-password'), loading: loading, error: error, signupProminence: resolvedSignupProminence, schema: contactSchema, registrationFieldsConfig: config?.registrationFields, additionalFields: config?.signupAdditionalFields }), emailDisplayMode === 'form' && actualProviders.length > 1 && (jsx(ProviderButtons, { enabledProviders: actualProviders.filter((p) => p !== 'email'), providerOrder: providerOrder, onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }))] }));
-                })() })) })) : null }));
+                                    justifyContent: 'center',
+                                    gap: '0.5rem',
+                                }, children: [jsxs("svg", { width: "18", height: "18", viewBox: "0 0 18 18", xmlns: "http://www.w3.org/2000/svg", children: [jsx("path", { d: "M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844a4.14 4.14 0 0 1-1.796 2.716v2.259h2.908c1.702-1.567 2.684-3.875 2.684-6.615Z", fill: "#4285F4" }), jsx("path", { d: "M9 18c2.43 0 4.467-.806 5.956-2.18l-2.908-2.259c-.806.54-1.837.86-3.048.86-2.344 0-4.328-1.584-5.036-3.711H.957v2.332A8.997 8.997 0 0 0 9 18Z", fill: "#34A853" }), jsx("path", { d: "M3.964 10.71A5.41 5.41 0 0 1 3.682 9c0-.593.102-1.17.282-1.71V4.958H.957A8.997 8.997 0 0 0 0 9c0 1.452.348 2.827.957 4.042l3.007-2.332Z", fill: "#FBBC05" }), jsx("path", { d: "M9 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.463.891 11.426 0 9 0A8.997 8.997 0 0 0 .957 4.958L3.964 7.29C4.672 5.163 6.656 3.58 9 3.58Z", fill: "#EA4335" })] }), "Sign in with Google"] }), jsx("button", { onClick: () => setGoogleFallbackToPopup(false), style: {
+                                    marginTop: '0.375rem',
+                                    width: '100%',
+                                    padding: '0.25rem',
+                                    fontSize: '0.75rem',
+                                    color: resolvedTheme === 'dark' ? '#64748b' : '#9ca3af',
+                                    backgroundColor: 'transparent',
+                                    border: 'none',
+                                    cursor: 'pointer',
+                                }, children: "Dismiss" })] })), (() => {
+                        const emailDisplayMode = config?.emailDisplayMode || 'form';
+                        const providerOrder = config?.providerOrder || (config?.enabledProviders || enabledProviders);
+                        const actualProviders = config?.enabledProviders || enabledProviders;
+                        // Button mode: show provider selection first, then email form if email is selected
+                        if (emailDisplayMode === 'button' && !showEmailForm) {
+                            return (jsx(ProviderButtons, { enabledProviders: actualProviders, providerOrder: providerOrder, onEmailLogin: () => setShowEmailForm(true), onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }));
+                        }
+                        // Form mode or email button was clicked: show email form with other providers
+                        return (jsxs(Fragment, { children: [emailDisplayMode === 'button' && showEmailForm && (jsx("button", { onClick: () => setShowEmailForm(false), style: {
+                                        marginBottom: '1rem',
+                                        padding: '0.5rem',
+                                        background: 'none',
+                                        border: 'none',
+                                        color: 'var(--auth-text-color, #6B7280)',
+                                        cursor: 'pointer',
+                                        fontSize: '0.875rem',
+                                        display: 'flex',
+                                        alignItems: 'center',
+                                        gap: '0.25rem'
+                                    }, children: "\u2190 Back to options" })), jsx(EmailAuthForm, { mode: mode, onSubmit: handleEmailAuth, onModeSwitch: () => {
+                                        setMode(mode === 'login' ? 'register' : 'login');
+                                        setShowResendVerification(false);
+                                        setShowRequestNewReset(false);
+                                        setError(undefined);
+                                    }, onForgotPassword: () => setMode('reset-password'), loading: loading, error: error, signupProminence: resolvedSignupProminence, schema: contactSchema, registrationFieldsConfig: config?.registrationFields, additionalFields: config?.signupAdditionalFields }), emailDisplayMode === 'form' && actualProviders.length > 1 && (jsx(ProviderButtons, { enabledProviders: actualProviders.filter((p) => p !== 'email'), providerOrder: providerOrder, onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }))] }));
+                    })()] })) })) : null }));
 };
 
 var SmartlinksAuthUI$1 = /*#__PURE__*/Object.freeze({
@@ -14897,5 +15134,5 @@ async function setDefaultAuthKitId(collectionId, authKitId) {
     });
 }
 
-export { AccountManagement, AuthProvider, AuthUIPreview, SmartlinksAuthUI as FirebaseAuthUI, ProtectedRoute, SchemaFieldRenderer, SmartlinksAuthUI, SmartlinksFrame, buildIframeSrc, getDefaultAuthKitId, getEditableFields, getErrorCode, getErrorStatusCode, getFriendlyErrorMessage, getRegistrationFields, isAdminFromRoles, isAuthError, isConflictError, isRateLimitError, isServerError, resolveFields, setDefaultAuthKitId, sortFieldsByPlacement, tokenStorage, useAdminDetection, useAuth, useIframeMessages, useIframeResize };
+export { AccountManagement, AuthProvider, AuthUIPreview, SmartlinksAuthUI as FirebaseAuthUI, ProtectedRoute, SchemaFieldRenderer, SmartlinksAuthUI, SmartlinksFrame, buildIframeSrc, evaluateConditions, getDefaultAuthKitId, getEditableFields, getErrorCode, getErrorStatusCode, getFriendlyErrorMessage, getRegistrationFields, isAdminFromRoles, isAuthError, isConflictError, isRateLimitError, isServerError, resolveFields, setDefaultAuthKitId, sortFieldsByPlacement, tokenStorage, useAdminDetection, useAuth, useIframeMessages, useIframeResize };
 //# sourceMappingURL=index.esm.js.map