@proveanything/smartlinks-auth-ui 0.4.4 → 0.4.6

package/dist/components/SmartlinksAuthUI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SmartlinksAuthUI.d.ts","sourceRoot":"","sources":["../../src/components/SmartlinksAuthUI.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAY5D,OAAO,KAAK,EAAE,qBAAqB,EAAyF,MAAM,UAAU,CAAC;AA8I7I,QAAA,MAAM,mBAAmB,QAAa,OAAO,CAAC,IAAI,CAmCjD,CAAC;AAwEF,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAK/B,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CA8sD5D,CAAC"}
+{"version":3,"file":"SmartlinksAuthUI.d.ts","sourceRoot":"","sources":["../../src/components/SmartlinksAuthUI.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAY5D,OAAO,KAAK,EAAE,qBAAqB,EAAyF,MAAM,UAAU,CAAC;AA+L7I,QAAA,MAAM,mBAAmB,QAAa,OAAO,CAAC,IAAI,CAqBjD,CAAC;AAqDF,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAI/B,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAgyD5D,CAAC"}

package/dist/components/SmartlinksFrame/useIframeMessages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useIframeMessages.d.ts","sourceRoot":"","sources":["../../../src/components/SmartlinksFrame/useIframeMessages.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAQV,UAAU,EACX,MAAM,4BAA4B,CAAC;AAepC,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IAEvB,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrI,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;IACtE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AASD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAC7C,OAAO,EAAE,oBAAoB,GAC5B,IAAI,CA8aN"}
+{"version":3,"file":"useIframeMessages.d.ts","sourceRoot":"","sources":["../../../src/components/SmartlinksFrame/useIframeMessages.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAQV,UAAU,EACX,MAAM,4BAA4B,CAAC;AAepC,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IAEvB,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrI,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;IACtE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AASD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAC7C,OAAO,EAAE,oBAAoB,GAC5B,IAAI,CAsbN"}

package/dist/index.esm.js

@@ -12498,9 +12498,30 @@ function getErrorCode(error) {
     }
     return undefined;
 }
+/**
+ * Error codes that indicate the user needs to verify their email.
+ */
+const EMAIL_VERIFICATION_ERROR_CODES = new Set([
+    'EMAIL_NOT_VERIFIED',
+    'ACCOUNT_LOCKED',
+    'EMAIL_VERIFICATION_EXPIRED',
+]);
+/**
+ * Checks if an error requires email verification action from the user.
+ */
+function requiresEmailVerification(error) {
+    const code = getErrorCode(error);
+    if (code && EMAIL_VERIFICATION_ERROR_CODES.has(code))
+        return true;
+    // Also check the flag from the response body
+    if (error && typeof error === 'object' && 'requiresEmailVerification' in error) {
+        return error.requiresEmailVerification === true;
+    }
+    return false;
+}
 
 // VERSION: Update this when making changes to help identify which version is running
-const AUTH_UI_VERSION = '44';
+const AUTH_UI_VERSION = '45';
 const LOG_PREFIX = `[SmartlinksAuthUI:v${AUTH_UI_VERSION}]`;
 // Helper to check for URL auth params synchronously (runs during initialization)
 // This prevents the form from flashing before detecting deep-link flows
@@ -12615,6 +12636,43 @@ const getNativeBridge = () => {
         return native;
     return null;
 };
+// Helper to register an AuthKit.onAuthResult handler for a specific callbackId
+// The Android native app calls: window.AuthKit.onAuthResult(resultJson)
+const registerAuthKitCallback = (callbackId, onResult, timeoutMs = 5000, onTimeout) => {
+    const bridge = window.AuthKit;
+    if (!bridge) {
+        console.warn('[AuthKit] No AuthKit bridge found, cannot register callback');
+        onTimeout?.();
+        return () => { };
+    }
+    // Store the previous handler so we can restore on cleanup
+    const previousHandler = bridge.onAuthResult;
+    const timeout = setTimeout(() => {
+        // Restore previous handler on timeout
+        bridge.onAuthResult = previousHandler;
+        onTimeout?.();
+    }, timeoutMs);
+    bridge.onAuthResult = (resultOrJson) => {
+        const result = typeof resultOrJson === 'string' ? JSON.parse(resultOrJson) : resultOrJson;
+        // Match by callbackId if present, otherwise accept any result
+        if (result.callbackId && result.callbackId !== callbackId) {
+            // Not for us — pass through to previous handler if any
+            if (typeof previousHandler === 'function') {
+                previousHandler(resultOrJson);
+            }
+            return;
+        }
+        clearTimeout(timeout);
+        // Restore previous handler
+        bridge.onAuthResult = previousHandler;
+        onResult(result);
+    };
+    // Return cleanup function
+    return () => {
+        clearTimeout(timeout);
+        bridge.onAuthResult = previousHandler;
+    };
+};
 // Sign out from Google on the native side (clears cached Google account)
 // This is fire-and-forget with a timeout - gracefully degrades if not supported
 const signOutGoogleNative = async () => {
@@ -12623,21 +12681,7 @@ const signOutGoogleNative = async () => {
         return;
     const callbackId = `google_signout_${Date.now()}`;
     return new Promise((resolve) => {
-        const timeout = setTimeout(() => resolve(), 3000);
-        // Store original callback to restore later
-        const originalCallback = window.smartlinksNativeCallback;
-        window.smartlinksNativeCallback = (result) => {
-            if (result.callbackId === callbackId) {
-                clearTimeout(timeout);
-                // Restore original callback
-                window.smartlinksNativeCallback = originalCallback;
-                resolve();
-            }
-            else if (originalCallback) {
-                // Pass through to original callback for other messages
-                originalCallback(result);
-            }
-        };
+        registerAuthKitCallback(callbackId, () => resolve(), 3000, () => resolve());
         const payload = JSON.stringify({
             type: 'GOOGLE_SIGN_OUT',
             callbackId,
@@ -12651,37 +12695,25 @@ const checkSilentGoogleSignIn = async (clientId, googleClientId) => {
         return null;
     const callbackId = `google_check_${Date.now()}`;
     return new Promise((resolve) => {
-        const timeout = setTimeout(() => resolve(null), 5000);
-        // Store original callback to restore later
-        const originalCallback = window.smartlinksNativeCallback;
-        window.smartlinksNativeCallback = (result) => {
-            if (result.callbackId === callbackId) {
-                clearTimeout(timeout);
-                // Restore original callback
-                window.smartlinksNativeCallback = originalCallback;
-                if (result.success) {
-                    resolve({
-                        isSignedIn: result.isSignedIn || false,
-                        idToken: result.idToken,
-                        email: result.email,
-                        name: result.name,
-                        picture: result.picture,
-                    });
-                }
-                else {
-                    resolve(null);
-                }
+        registerAuthKitCallback(callbackId, (result) => {
+            if (result.success) {
+                resolve({
+                    isSignedIn: result.isSignedIn || false,
+                    idToken: result.idToken,
+                    email: result.email,
+                    name: result.name,
+                    picture: result.picture,
+                });
             }
-            else if (originalCallback) {
-                // Pass through to original callback for other messages
-                originalCallback(result);
+            else {
+                resolve(null);
             }
-        };
+        }, 5000, () => resolve(null));
         const payload = JSON.stringify({
             type: 'GOOGLE_CHECK_SIGN_IN',
             clientId,
             googleClientId,
-            serverClientId: googleClientId, // Alias for Android SDK
+            serverClientId: googleClientId,
             callbackId,
         });
         nativeBridge.checkGoogleSignIn(payload);
@@ -12725,6 +12757,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
     const [contactSchema, setContactSchema] = useState(null); // Schema for registration fields
     const [silentSignInChecked, setSilentSignInChecked] = useState(false); // Track if silent sign-in has been checked
     const [googleFallbackToPopup, setGoogleFallbackToPopup] = useState(false); // Show popup fallback when FedCM is blocked/dismissed
+    const [googleNativeTimedOut, setGoogleNativeTimedOut] = useState(false); // Native bridge callback timed out
     const log = useMemo(() => createLoggerWrapper(logger), [logger]);
     const api = new AuthAPI(apiEndpoint, clientId, clientName, logger);
     const auth = useAuth();
@@ -13001,6 +13034,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             if (urlMode === 'verifyEmail') {
                 log.log('Verifying email with token:', token);
                 const response = await api.verifyEmailWithToken(token);
+                log.log('Email verification response:', { hasToken: !!response.token, hasUser: !!response.user, emailVerificationMode: response.emailVerificationMode, isNewUser: response.isNewUser });
                 // Get email verification mode from response or config
                 const verificationMode = response.emailVerificationMode || config?.emailVerification?.mode || 'verify-auto-login';
                 if ((verificationMode === 'verify-auto-login' || verificationMode === 'immediate') && response.token) {
@@ -13045,6 +13079,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 log.log('Verifying reset token:', token);
                 // Verify token is valid, then show password reset form
                 const verifyResult = await api.verifyResetToken(token);
+                log.log('Reset token verification result:', { valid: verifyResult.valid, hasEmail: !!verifyResult.email, message: verifyResult.message });
                 // Check if token is valid before proceeding
                 if (!verifyResult.valid) {
                     throw new Error(verifyResult.message || 'Invalid or expired token');
@@ -13062,6 +13097,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             else if (urlMode === 'magicLink') {
                 log.log('Verifying magic link token:', token);
                 const response = await api.verifyMagicLink(token);
+                log.log('Magic link verification response:', { hasToken: !!response.token, hasUser: !!response.user, isNewUser: response.isNewUser });
                 // Auto-login with magic link if token is provided
                 if (response.token) {
                     // Always await - auth.login now waits for parent ack automatically in iframe mode
@@ -13137,6 +13173,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             const redirectUri = state.redirectUri || window.location.origin + window.location.pathname;
             // Exchange authorization code for tokens
             const response = await api.loginWithGoogleCode(code, redirectUri);
+            log.log('Google OAuth code exchange response:', { hasToken: !!response.token, hasUser: !!response.user, isNewUser: response.isNewUser });
             if (response.token) {
                 // Await login to ensure token is persisted before any navigation
                 await auth.login(response.token, response.user, response.accountData, response.isNewUser, getExpirationFromResponse(response));
@@ -13167,13 +13204,15 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
         setError(undefined);
         setAuthSuccess(false);
         try {
+            log.log('Submitting email auth:', { mode, email: data.email });
             const response = mode === 'login'
                 ? await api.login(data.email, data.password)
                 : await api.register({
                     ...data,
                     accountData: mode === 'register' ? accountData : undefined,
-                    redirectUrl: getRedirectUrl(), // Include redirect URL for email verification
+                    redirectUrl: getRedirectUrl(),
                 });
+            log.log('Email auth response:', { mode, hasToken: !!response?.token, hasUser: !!response?.user, isNewUser: response?.isNewUser, requiresEmailVerification: response?.requiresEmailVerification, accountLocked: response?.accountLocked, emailVerificationMode: response?.emailVerificationMode });
             // Defensive check: validate response before accessing properties
             // SDK should throw on 401/error responses, but handle edge cases gracefully
             if (!response) {
@@ -13240,10 +13279,18 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 if (response.token) {
                     // Check for account lock or verification requirements
                     if (response.accountLocked) {
-                        throw new Error('Your account has been locked due to unverified email. Please check your email or request a new verification link.');
+                        setShowResendVerification(true);
+                        setResendEmail(data.email);
+                        setError('Your account has been locked due to unverified email. Click below to resend the verification link.');
+                        setLoading(false);
+                        return;
                     }
                     if (response.requiresEmailVerification) {
-                        throw new Error('Please verify your email before logging in. Check your inbox for the verification link.');
+                        setShowResendVerification(true);
+                        setResendEmail(data.email);
+                        setError('Please verify your email before signing in. Click below to resend the verification link.');
+                        setLoading(false);
+                        return;
                     }
                     await auth.login(response.token, response.user, response.accountData, false, getExpirationFromResponse(response));
                     setAuthSuccess(true);
@@ -13252,16 +13299,26 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     // Note: No automatic redirect - app controls navigation via onAuthSuccess callback
                 }
                 else {
-                    throw new Error('Authentication failed - please verify your email before logging in.');
+                    // No token returned - likely requires email verification
+                    setShowResendVerification(true);
+                    setResendEmail(data.email);
+                    setError('Please verify your email before signing in. Click below to resend the verification link.');
+                    setLoading(false);
+                    return;
                 }
             }
         }
         catch (err) {
             // Debug: log the raw error shape to help diagnose SDK error wrapping issues
             log.error('handleEmailAuth error:', typeof err, err instanceof Error ? `Error.message=${err.message}` : '', JSON.stringify(err, Object.getOwnPropertyNames(err || {})));
+            // Check if error requires email verification (403 EMAIL_NOT_VERIFIED, ACCOUNT_LOCKED, etc.)
+            if (requiresEmailVerification(err)) {
+                setShowResendVerification(true);
+                setResendEmail(data.email);
+                setError(getFriendlyErrorMessage(err) + ' Click below to resend the verification link.');
+            }
             // Check if error is about email already registered (409 conflict)
-            // Handle both SmartlinksApiError (statusCode 409) and plain Error with keyword matching
-            if (mode === 'register' && (isConflictError(err) ||
+            else if (mode === 'register' && (isConflictError(err) ||
                 (err instanceof Error && /already (registered|exists)/i.test(err.message)))) {
                 setShowResendVerification(true);
                 setResendEmail(data.email);
@@ -13368,21 +13425,20 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             if (nativeBridge) {
                 log.log('Using native bridge for Google Sign-In');
                 const callbackId = `google_auth_${Date.now()}`;
-                window.smartlinksNativeCallback = async (result) => {
-                    // Ignore stale callbacks
-                    if (result.callbackId !== callbackId) {
-                        log.log('Ignoring stale native callback:', result.callbackId);
-                        return;
-                    }
-                    log.log('Native callback received:', {
+                // Register callback via AuthKit.onAuthResult (the native app calls this)
+                const cleanup = registerAuthKitCallback(callbackId, async (result) => {
+                    log.log('Native Google auth result received:', {
                         success: result.success,
                         hasIdToken: !!result.idToken,
                         email: result.email,
                         error: result.error,
+                        callbackId: result.callbackId,
                     });
+                    setGoogleNativeTimedOut(false);
                     try {
                         if (result.success && result.idToken) {
                             const authResponse = await api.loginWithGoogle(result.idToken);
+                            log.log('Native Google login response:', { hasToken: !!authResponse.token, hasUser: !!authResponse.user, isNewUser: authResponse.isNewUser });
                             if (authResponse.token) {
                                 await auth.login(authResponse.token, authResponse.user, authResponse.accountData, authResponse.isNewUser, getExpirationFromResponse(authResponse));
                                 setAuthSuccess(true);
@@ -13405,7 +13461,12 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     finally {
                         setLoading(false);
                     }
-                };
+                }, 30000, // 30s timeout for interactive Google Sign-In
+                () => {
+                    log.log('Native Google Sign-In timed out after 30s');
+                    setLoading(false);
+                    setGoogleNativeTimedOut(true);
+                });
                 const payloadObj = {
                     type: 'GOOGLE_SIGN_IN',
                     clientId,
@@ -13417,12 +13478,13 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     requestServerAuthCode: false,
                 };
                 const payload = JSON.stringify(payloadObj);
-                log.log('Invoking native signInWithGoogle');
+                log.log('Invoking native signInWithGoogle with callbackId:', callbackId);
                 try {
                     nativeBridge.signInWithGoogle(payload);
                 }
                 catch (invokeError) {
                     console.error(`${LOG_PREFIX} Exception invoking signInWithGoogle:`, invokeError);
+                    cleanup(); // Clean up the callback registration
                     throw invokeError;
                 }
                 // Don't set loading to false - waiting for native callback
@@ -13467,6 +13529,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     clearInterval(checkClosed);
                     try {
                         if (event.data.success && event.data.token) {
+                            log.log('Google proxy result received:', { success: true, hasUser: !!event.data.user, isNewUser: event.data.isNewUser });
                             const { token, user, accountData, isNewUser, expiresAt, expiresIn } = event.data;
                             const expiration = expiresAt || (expiresIn ? Date.now() + expiresIn : undefined);
                             await auth.login(token, user, accountData, isNewUser, expiration);
@@ -13594,6 +13657,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                                     googleUserInfo: userInfo,
                                     tokenType: 'access_token',
                                 });
+                                log.log('Popup Google login response:', { hasToken: !!authResponse.token, hasUser: !!authResponse.user, isNewUser: authResponse.isNewUser });
                                 if (authResponse.token) {
                                     // Google OAuth can be login or signup - use isNewUser flag from backend if available
                                     await auth.login(authResponse.token, authResponse.user, authResponse.accountData, authResponse.isNewUser, getExpirationFromResponse(authResponse));
@@ -13639,6 +13703,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                         try {
                             const idToken = response.credential;
                             const authResponse = await api.loginWithGoogle(idToken);
+                            log.log('OneTap Google login response:', { hasToken: !!authResponse.token, hasUser: !!authResponse.user, isNewUser: authResponse.isNewUser });
                             if (authResponse.token) {
                                 // Google OAuth can be login or signup - use isNewUser flag from backend if available
                                 await auth.login(authResponse.token, authResponse.user, authResponse.accountData, authResponse.isNewUser, getExpirationFromResponse(authResponse));
@@ -13705,6 +13770,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             else {
                 // Verify code - Twilio identifies the verification by phone number
                 const response = await api.verifyPhoneCode(phoneNumber, verificationCode);
+                log.log('Phone verification response:', { hasToken: !!response?.token, hasUser: !!response?.user, isNewUser: response?.isNewUser });
                 // Defensive validation: API may return undefined or error object on failure
                 if (!response) {
                     throw new Error('Verification failed - please check your code and try again');
@@ -13859,14 +13925,14 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                             color: config?.branding?.inheritHostStyles
                                 ? 'hsl(var(--foreground, 215 25% 15%))'
                                 : (resolvedTheme === 'dark' ? '#f1f5f9' : '#374151')
-                        }, children: "Verification Link Expired" }), jsx("p", { style: {
+                        }, children: "Email Verification Required" }), jsx("p", { style: {
                             marginBottom: '1rem',
                             fontSize: '0.875rem',
                             color: config?.branding?.inheritHostStyles
                                 ? 'hsl(var(--muted-foreground, 215 15% 45%))'
                                 : (resolvedTheme === 'dark' ? '#94a3b8' : '#6B7280'),
                             lineHeight: '1.5'
-                        }, children: "Your verification link has expired or is no longer valid. Please enter your email address below and we'll send you a new verification link." }), jsx("input", { type: "email", value: resendEmail || '', onChange: (e) => setResendEmail(e.target.value), placeholder: "your@email.com", className: config?.branding?.inheritHostStyles ? 'auth-input' : undefined, style: config?.branding?.inheritHostStyles ? {
+                        }, children: "Your email address needs to be verified before you can sign in. Enter your email below and we'll send you a verification link." }), jsx("input", { type: "email", value: resendEmail || '', onChange: (e) => setResendEmail(e.target.value), placeholder: "your@email.com", className: config?.branding?.inheritHostStyles ? 'auth-input' : undefined, style: config?.branding?.inheritHostStyles ? {
                             width: '100%',
                             padding: '0.625rem',
                             marginBottom: '1rem',
@@ -14039,7 +14105,40 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                                     backgroundColor: 'transparent',
                                     border: 'none',
                                     cursor: 'pointer',
-                                }, children: "Dismiss" })] })), (() => {
+                                }, children: "Dismiss" })] })), googleNativeTimedOut && (jsxs("div", { style: {
+                            marginBottom: '1rem',
+                            padding: '0.75rem 1rem',
+                            borderRadius: '0.5rem',
+                            backgroundColor: resolvedTheme === 'dark' ? 'rgba(245, 158, 11, 0.1)' : 'rgba(245, 158, 11, 0.05)',
+                            border: `1px solid ${resolvedTheme === 'dark' ? 'rgba(245, 158, 11, 0.3)' : 'rgba(245, 158, 11, 0.2)'}`,
+                        }, children: [jsx("p", { style: {
+                                    fontSize: '0.8125rem',
+                                    color: resolvedTheme === 'dark' ? '#fbbf24' : '#92400e',
+                                    marginBottom: '0.5rem',
+                                    lineHeight: 1.4,
+                                }, children: 'Google sign-in didn\'t respond. You can try again or use another sign-in method.' }), jsx("button", { onClick: () => {
+                                    setGoogleNativeTimedOut(false);
+                                    handleGoogleLogin();
+                                }, style: {
+                                    width: '100%',
+                                    padding: '0.5rem 1rem',
+                                    fontSize: '0.875rem',
+                                    fontWeight: 500,
+                                    color: '#fff',
+                                    backgroundColor: '#4285F4',
+                                    border: 'none',
+                                    borderRadius: '0.375rem',
+                                    cursor: 'pointer',
+                                }, children: 'Retry Google Sign-In' }), jsx("button", { onClick: () => setGoogleNativeTimedOut(false), style: {
+                                    marginTop: '0.375rem',
+                                    width: '100%',
+                                    padding: '0.25rem',
+                                    fontSize: '0.75rem',
+                                    color: resolvedTheme === 'dark' ? '#64748b' : '#9ca3af',
+                                    backgroundColor: 'transparent',
+                                    border: 'none',
+                                    cursor: 'pointer',
+                                }, children: 'Dismiss' })] })), (() => {
                         const emailDisplayMode = config?.emailDisplayMode || 'form';
                         const providerOrder = config?.providerOrder || (config?.enabledProviders || enabledProviders);
                         const actualProviders = config?.enabledProviders || enabledProviders;
@@ -14859,7 +14958,15 @@ function useIframeMessages(iframeRef, options) {
         }
         catch (err) {
             console.error('[SmartlinksFrame] Proxy error:', err);
-            response.error = err?.message || 'Unknown error';
+            const statusCode = err?.statusCode ?? err?.response?.status ?? err?.response?.statusCode;
+            const errorBody = err?.details ?? err?.response?.data ?? err?.response ?? err?.cause;
+            response.error = typeof err?.message === 'string' ? err.message : 'Unknown error';
+            if (typeof statusCode === 'number') {
+                response.statusCode = statusCode;
+            }
+            if (errorBody && typeof errorBody === 'object') {
+                response.errorBody = JSON.parse(JSON.stringify(errorBody));
+            }
             onErrorRef.current?.(err);
         }
         sendResponse(event.source, event.origin, response);