@proveanything/smartlinks-auth-ui 0.4.6 → 0.4.8

package/dist/index.esm.js

@@ -1,7 +1,7 @@
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 import React, { useEffect, useState, useMemo, useRef, useCallback, createContext, useContext } from 'react';
 import * as smartlinks from '@proveanything/smartlinks';
-import { iframe, SmartlinksApiError } from '@proveanything/smartlinks';
+import { SmartlinksApiError, iframe } from '@proveanything/smartlinks';
 import { post, getApiHeaders, isProxyEnabled } from '@proveanything/smartlinks/dist/http';
 
 const AuthContainer = ({ children, theme = 'light', className = '', config, minimal = false, }) => {
@@ -258,7 +258,7 @@ const AuthModeToggle = ({ mode, onModeChange, disabled = false, }) => {
     return (jsxs("div", { className: "auth-mode-toggle", role: "tablist", "aria-label": "Authentication mode", children: [jsx("button", { type: "button", role: "tab", "aria-selected": mode === 'login', className: `auth-mode-toggle-button ${mode === 'login' ? 'auth-mode-toggle-button--active' : ''}`, onClick: () => onModeChange('login'), disabled: disabled, children: "Sign In" }), jsx("button", { type: "button", role: "tab", "aria-selected": mode === 'register', className: `auth-mode-toggle-button ${mode === 'register' ? 'auth-mode-toggle-button--active' : ''}`, onClick: () => onModeChange('register'), disabled: disabled, children: "Create Account" })] }));
 };
 
-const EmailAuthForm = ({ mode, onSubmit, onModeSwitch, onForgotPassword, loading, error, signupProminence = 'minimal', schema, registrationFieldsConfig = [], additionalFields = [], }) => {
+const EmailAuthForm = ({ mode, onSubmit, onModeSwitch, onForgotPassword, loading, error, signupProminence = 'minimal', signupRedirectUrl, schema, registrationFieldsConfig = [], additionalFields = [], }) => {
     const [formData, setFormData] = useState({
         email: '',
         password: '',
@@ -314,7 +314,7 @@ const EmailAuthForm = ({ mode, onSubmit, onModeSwitch, onForgotPassword, loading
                     if (newMode !== mode) {
                         onModeSwitch();
                     }
-                }, disabled: loading })), jsxs("div", { className: "auth-form-header", children: [jsx("h2", { className: "auth-form-title", children: title }), jsx("p", { className: "auth-form-subtitle", children: subtitle })] }), error && (jsxs("div", { className: "auth-error", role: "alert", children: [jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error] })), mode === 'register' && (jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "displayName", className: "auth-label", children: "Full Name" }), jsx("input", { type: "text", id: "displayName", className: "auth-input", value: formData.displayName || '', onChange: (e) => handleChange('displayName', e.target.value), required: mode === 'register', disabled: loading, placeholder: "John Smith" })] })), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsx("input", { type: "email", id: "email", className: "auth-input", value: formData.email || '', onChange: (e) => handleChange('email', e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] }), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "password", className: "auth-label", children: "Password" }), jsx("input", { type: "password", id: "password", className: "auth-input", value: formData.password || '', onChange: (e) => handleChange('password', e.target.value), required: true, disabled: loading, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", autoComplete: mode === 'login' ? 'current-password' : 'new-password', minLength: 6 })] }), mode === 'register' && hasSchemaFields && schemaFields.inline.map(renderSchemaField), mode === 'register' && hasLegacyFields && additionalFields.map(renderLegacyField), mode === 'register' && hasSchemaFields && schemaFields.postCredentials.length > 0 && (jsxs(Fragment, { children: [jsx("div", { className: "auth-divider", style: { margin: '16px 0' }, children: jsx("span", { children: "Additional Information" }) }), schemaFields.postCredentials.map(renderSchemaField)] })), mode === 'login' && (jsx("div", { className: "auth-form-footer", children: jsx("button", { type: "button", className: "auth-link", onClick: onForgotPassword, disabled: loading, children: "Forgot password?" }) })), jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsx("span", { className: "auth-spinner" })) : mode === 'login' ? ('Sign in') : ('Create account') }), signupProminence !== 'balanced' && (jsxs("div", { className: "auth-divider", children: [jsx("span", { children: mode === 'login' ? "Don't have an account?" : 'Already have an account?' }), jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onModeSwitch, disabled: loading, children: mode === 'login' ? 'Sign up' : 'Sign in' })] }))] }));
+                }, disabled: loading })), jsxs("div", { className: "auth-form-header", children: [jsx("h2", { className: "auth-form-title", children: title }), jsx("p", { className: "auth-form-subtitle", children: subtitle })] }), error && (jsxs("div", { className: "auth-error", role: "alert", children: [jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error] })), mode === 'register' && (jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "displayName", className: "auth-label", children: "Full Name" }), jsx("input", { type: "text", id: "displayName", className: "auth-input", value: formData.displayName || '', onChange: (e) => handleChange('displayName', e.target.value), required: mode === 'register', disabled: loading, placeholder: "John Smith" })] })), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsx("input", { type: "email", id: "email", className: "auth-input", value: formData.email || '', onChange: (e) => handleChange('email', e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] }), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "password", className: "auth-label", children: "Password" }), jsx("input", { type: "password", id: "password", className: "auth-input", value: formData.password || '', onChange: (e) => handleChange('password', e.target.value), required: true, disabled: loading, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", autoComplete: mode === 'login' ? 'current-password' : 'new-password', minLength: 6 })] }), mode === 'register' && hasSchemaFields && schemaFields.inline.map(renderSchemaField), mode === 'register' && hasLegacyFields && additionalFields.map(renderLegacyField), mode === 'register' && hasSchemaFields && schemaFields.postCredentials.length > 0 && (jsxs(Fragment, { children: [jsx("div", { className: "auth-divider", style: { margin: '16px 0' }, children: jsx("span", { children: "Additional Information" }) }), schemaFields.postCredentials.map(renderSchemaField)] })), mode === 'login' && (jsx("div", { className: "auth-form-footer", children: jsx("button", { type: "button", className: "auth-link", onClick: onForgotPassword, disabled: loading, children: "Forgot password?" }) })), jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsx("span", { className: "auth-spinner" })) : mode === 'login' ? ('Sign in') : ('Create account') }), signupProminence !== 'balanced' && signupProminence !== 'none' && (jsxs("div", { className: "auth-divider", children: [jsx("span", { children: mode === 'login' ? "Don't have an account?" : 'Already have an account?' }), signupRedirectUrl && mode === 'login' ? (jsx("a", { href: signupRedirectUrl, target: "_top", className: "auth-link auth-link-bold", children: "Sign up" })) : (jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onModeSwitch, disabled: loading, children: mode === 'login' ? 'Sign up' : 'Sign in' }))] }))] }));
 };
 
 const ProviderButtons = ({ enabledProviders, providerOrder, onEmailLogin, onGoogleLogin, onPhoneLogin, onMagicLinkLogin, loading, }) => {
@@ -10759,7 +10759,8 @@ const PhoneInput = ({ value, onChange, disabled = false, }) => {
     return (jsx(PhoneInputComponent, { international: true, defaultCountry: defaultCountry, value: value, onChange: (value) => onChange(value || ''), disabled: disabled, className: "phone-input-wrapper" }));
 };
 
-const PhoneAuthForm = ({ onSubmit, onBack, loading, error, }) => {
+const PhoneAuthForm = ({ onSubmit, onBack, loading, error, collectName = false, }) => {
+    const [displayName, setDisplayName] = useState('');
     const [phoneNumber, setPhoneNumber] = useState('');
     const [verificationCode, setVerificationCode] = useState('');
     const [codeSent, setCodeSent] = useState(false);
@@ -10776,7 +10777,7 @@ const PhoneAuthForm = ({ onSubmit, onBack, loading, error, }) => {
     const handleSendCode = async (e) => {
         e.preventDefault();
         try {
-            await onSubmit(phoneNumber);
+            await onSubmit(phoneNumber, undefined, collectName ? displayName || undefined : undefined);
             // Only transition to code entry UI AFTER successful send
             setCodeSent(true);
             setResendCooldown(60); // 60 second cooldown
@@ -10803,7 +10804,7 @@ const PhoneAuthForm = ({ onSubmit, onBack, loading, error, }) => {
     };
     return (jsxs("form", { className: "auth-form", onSubmit: codeSent ? handleVerifyCode : handleSendCode, children: [jsxs("div", { className: "auth-form-header", children: [jsx("h2", { className: "auth-form-title", children: "Phone Authentication" }), jsx("p", { className: "auth-form-subtitle", children: codeSent
                             ? 'Enter the verification code sent to your phone.'
-                            : 'Enter your phone number to receive a verification code.' })] }), error && (jsxs("div", { className: "auth-error", role: "alert", children: [jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error] })), !codeSent ? (jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "phoneNumber", className: "auth-label", children: "Phone Number" }), jsx(PhoneInput, { value: phoneNumber, onChange: setPhoneNumber, disabled: loading })] })) : (jsxs(Fragment, { children: [jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "verificationCode", className: "auth-label", children: "Verification Code" }), jsx(OTPInput, { length: 6, value: verificationCode, onChange: setVerificationCode, disabled: loading })] }), jsx("div", { style: { marginTop: '0.5rem', textAlign: 'center' }, children: jsx("button", { type: "button", className: "auth-link", onClick: handleResendCode, disabled: loading || resendCooldown > 0, style: {
+                            : 'Enter your phone number to receive a verification code.' })] }), error && (jsxs("div", { className: "auth-error", role: "alert", children: [jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error] })), !codeSent ? (jsxs(Fragment, { children: [collectName && (jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "phoneName", className: "auth-label", children: "Name" }), jsx("input", { id: "phoneName", type: "text", value: displayName, onChange: (e) => setDisplayName(e.target.value), className: "auth-input", placeholder: "John Smith", disabled: loading, autoComplete: "name" })] })), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "phoneNumber", className: "auth-label", children: "Phone Number" }), jsx(PhoneInput, { value: phoneNumber, onChange: setPhoneNumber, disabled: loading })] })] })) : (jsxs(Fragment, { children: [jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "verificationCode", className: "auth-label", children: "Verification Code" }), jsx(OTPInput, { length: 6, value: verificationCode, onChange: setVerificationCode, disabled: loading })] }), jsx("div", { style: { marginTop: '0.5rem', textAlign: 'center' }, children: jsx("button", { type: "button", className: "auth-link", onClick: handleResendCode, disabled: loading || resendCooldown > 0, style: {
                                 cursor: resendCooldown > 0 ? 'not-allowed' : 'pointer',
                                 opacity: resendCooldown > 0 ? 0.5 : 1,
                             }, children: resendCooldown > 0
@@ -10811,7 +10812,7 @@ const PhoneAuthForm = ({ onSubmit, onBack, loading, error, }) => {
                                 : 'Resend code' }) })] })), jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsx("span", { className: "auth-spinner" })) : codeSent ? ('Verify Code') : ('Send Code') }), jsx("div", { className: "auth-divider", children: jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onBack, disabled: loading, children: "\u2190 Back to login" }) })] }));
 };
 
-const PasswordResetForm = ({ onSubmit, onBack, loading, error, success, successMessage, token, }) => {
+const PasswordResetForm = ({ onSubmit, onBack, loading, error, success, successMessage, token, resetEmail, }) => {
     const [email, setEmail] = useState('');
     const [password, setPassword] = useState('');
     const [confirmPassword, setConfirmPassword] = useState('');
@@ -10836,23 +10837,24 @@ const PasswordResetForm = ({ onSubmit, onBack, loading, error, success, successM
             await onSubmit(email);
         }
     };
-    if (success) {
+    if (success && !error) {
         return (jsxs("div", { className: "auth-form", children: [jsxs("div", { className: "auth-form-header", children: [jsx("div", { style: { textAlign: 'center', marginBottom: '1rem' }, children: jsxs("svg", { width: "64", height: "64", viewBox: "0 0 64 64", fill: "none", style: { margin: '0 auto' }, children: [jsx("circle", { cx: "32", cy: "32", r: "32", fill: "#10b981", fillOpacity: "0.1" }), jsx("path", { d: "M20 32l8 8 16-16", stroke: "#10b981", strokeWidth: "4", strokeLinecap: "round", strokeLinejoin: "round" })] }) }), jsx("h2", { className: "auth-form-title", children: token ? 'Password reset!' : 'Check your email' }), jsx("p", { className: "auth-form-subtitle", children: token
                                 ? (successMessage || 'Your password has been successfully reset. You can now sign in with your new password.')
                                 : (successMessage || `We've sent password reset instructions to ${email}`) })] }), jsx("button", { type: "button", className: "auth-button auth-button-primary", onClick: onBack, children: "Back to Sign in" })] }));
     }
     return (jsxs("form", { className: "auth-form", onSubmit: handleSubmit, children: [jsxs("div", { className: "auth-form-header", children: [jsx("h2", { className: "auth-form-title", children: token ? 'Set new password' : 'Reset your password' }), jsx("p", { className: "auth-form-subtitle", children: token
                             ? 'Enter your new password below.'
-                            : "Enter your email address and we'll send you instructions to reset your password." })] }), (error || passwordError) && (jsxs("div", { className: "auth-error", role: "alert", children: [jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error || passwordError] })), token ? (jsxs(Fragment, { children: [jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "password", className: "auth-label", children: "New Password" }), jsx("input", { type: "password", id: "password", className: "auth-input", value: password, onChange: (e) => setPassword(e.target.value), required: true, disabled: loading, placeholder: "Enter new password", autoComplete: "new-password", minLength: 6 })] }), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "confirmPassword", className: "auth-label", children: "Confirm Password" }), jsx("input", { type: "password", id: "confirmPassword", className: "auth-input", value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), required: true, disabled: loading, placeholder: "Confirm new password", autoComplete: "new-password", minLength: 6 })] })] })) : (jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsx("input", { type: "email", id: "email", className: "auth-input", value: email, onChange: (e) => setEmail(e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] })), jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsx("span", { className: "auth-spinner" })) : token ? ('Reset password') : ('Send reset instructions') }), jsx("div", { className: "auth-divider", children: jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onBack, disabled: loading, children: "\u2190 Back to Sign in" }) })] }));
+                            : "Enter your email address and we'll send you instructions to reset your password." })] }), (error || passwordError) && (jsxs("div", { className: "auth-error", role: "alert", children: [jsx("svg", { width: "16", height: "16", viewBox: "0 0 16 16", fill: "currentColor", children: jsx("path", { d: "M8 0C3.58 0 0 3.58 0 8s3.58 8 8 8 8-3.58 8-8-3.58-8-8-8zm1 13H7v-2h2v2zm0-3H7V4h2v6z" }) }), error || passwordError] })), token ? (jsxs(Fragment, { children: [resetEmail && (jsx("input", { type: "email", value: resetEmail, readOnly: true, autoComplete: "username", style: { position: 'absolute', opacity: 0, height: 0, width: 0, overflow: 'hidden', pointerEvents: 'none' }, tabIndex: -1, "aria-hidden": "true" })), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "password", className: "auth-label", children: "New Password" }), jsx("input", { type: "password", id: "password", className: "auth-input", value: password, onChange: (e) => setPassword(e.target.value), required: true, disabled: loading, placeholder: "Enter new password", autoComplete: "new-password", minLength: 6 })] }), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "confirmPassword", className: "auth-label", children: "Confirm Password" }), jsx("input", { type: "password", id: "confirmPassword", className: "auth-input", value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), required: true, disabled: loading, placeholder: "Confirm new password", autoComplete: "new-password", minLength: 6 })] })] })) : (jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "email", className: "auth-label", children: "Email address" }), jsx("input", { type: "email", id: "email", className: "auth-input", value: email, onChange: (e) => setEmail(e.target.value), required: true, disabled: loading, placeholder: "you@example.com", autoComplete: "email" })] })), jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading, children: loading ? (jsx("span", { className: "auth-spinner" })) : token ? ('Reset password') : ('Send reset instructions') }), jsx("div", { className: "auth-divider", children: jsx("button", { type: "button", className: "auth-link auth-link-bold", onClick: onBack, disabled: loading, children: "\u2190 Back to Sign in" }) })] }));
 };
 
-const MagicLinkForm = ({ onSubmit, onCancel, loading = false, error, }) => {
+const MagicLinkForm = ({ onSubmit, onCancel, loading = false, error, collectName = false, }) => {
     const [email, setEmail] = useState('');
+    const [displayName, setDisplayName] = useState('');
     const handleSubmit = async (e) => {
         e.preventDefault();
-        await onSubmit(email);
+        await onSubmit(email, collectName ? displayName || undefined : undefined);
     };
-    return (jsxs("form", { onSubmit: handleSubmit, className: "auth-form", children: [jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "magic-link-email", className: "auth-label", children: "Email Address" }), jsx("input", { id: "magic-link-email", type: "email", value: email, onChange: (e) => setEmail(e.target.value), className: "auth-input", placeholder: "you@example.com", required: true, disabled: loading })] }), error && (jsx("div", { className: "auth-error-message", children: error })), jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading || !email, children: loading ? (jsxs(Fragment, { children: [jsx("span", { className: "auth-spinner" }), "Sending..."] })) : ('Send Magic Link') }), jsx("button", { type: "button", onClick: onCancel, className: "auth-button auth-button-secondary", disabled: loading, children: "Cancel" })] }));
+    return (jsxs("form", { onSubmit: handleSubmit, className: "auth-form", children: [collectName && (jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "magic-link-name", className: "auth-label", children: "Name" }), jsx("input", { id: "magic-link-name", type: "text", value: displayName, onChange: (e) => setDisplayName(e.target.value), className: "auth-input", placeholder: "John Smith", disabled: loading, autoComplete: "name" })] })), jsxs("div", { className: "auth-form-group", children: [jsx("label", { htmlFor: "magic-link-email", className: "auth-label", children: "Email Address" }), jsx("input", { id: "magic-link-email", type: "email", value: email, onChange: (e) => setEmail(e.target.value), className: "auth-input", placeholder: "you@example.com", required: true, disabled: loading })] }), error && (jsx("div", { className: "auth-error-message", children: error })), jsx("button", { type: "submit", className: "auth-button auth-button-primary", disabled: loading || !email, children: loading ? (jsxs(Fragment, { children: [jsx("span", { className: "auth-spinner" }), "Sending..."] })) : ('Send Magic Link') }), jsx("button", { type: "button", onClick: onCancel, className: "auth-button auth-button-secondary", disabled: loading, children: "Cancel" })] }));
 };
 
 /**
@@ -10889,6 +10891,254 @@ function createLoggerWrapper(logger) {
     };
 }
 
+/**
+ * Friendly error messages for common HTTP status codes.
+ */
+const STATUS_MESSAGES = {
+    400: 'Invalid request. Please check your input and try again.',
+    401: 'Invalid credentials. Please check your email and password.',
+    403: 'Access denied. You do not have permission to perform this action.',
+    404: 'Account not found. Please check your email or create a new account.',
+    409: 'This email is already registered.',
+    429: 'Too many attempts. Please wait a moment and try again.',
+};
+/**
+ * Context-specific error messages for different auth operations.
+ */
+const ERROR_CODE_MESSAGES = {
+    // 400 - Validation errors
+    'MISSING_FIELDS': 'Email and password are required.',
+    'MISSING_EMAIL': 'Email is required.',
+    'MISSING_PASSWORD': 'Password is required.',
+    'MISSING_TOKEN': 'Token is required.',
+    'MISSING_PHONE_NUMBER': 'Phone number is required.',
+    'MISSING_VERIFICATION_CODE': 'Phone number and verification code are required.',
+    'MISSING_REDIRECT_URL': 'Redirect URL is required.',
+    'MISSING_GOOGLE_TOKEN': 'Google token is required.',
+    'INVALID_CLIENT_ID': 'Invalid client configuration.',
+    'INVALID_REDIRECT_URL': 'Invalid redirect URL.',
+    'INVALID_PHONE_NUMBER': 'Invalid phone number. Please check the format and try again.',
+    'INVALID_GOOGLE_TOKEN': 'Invalid Google sign-in token.',
+    'PASSWORD_TOO_SHORT': 'Password must be at least 8 characters long.',
+    'PASSWORD_REQUIREMENTS_NOT_MET': 'New password must be at least 6 characters.',
+    'EMAIL_ALREADY_VERIFIED': 'Your email is already verified.',
+    'INVALID_CONFIRMATION': 'Please type DELETE to confirm account deletion.',
+    // 401 - Authentication errors
+    'INVALID_CREDENTIALS': 'Invalid email or password.',
+    'INCORRECT_PASSWORD': 'Current password is incorrect.',
+    'INVALID_VERIFICATION_CODE': 'Invalid or expired verification code. Please try again.',
+    'INVALID_TOKEN': 'This link has expired or is invalid. Please request a new one.',
+    'TOKEN_EXPIRED': 'This link has expired. Please request a new one.',
+    'TOKEN_ALREADY_USED': 'This link has already been used. Please request a new one.',
+    'UNAUTHORIZED': 'You must be logged in to perform this action.',
+    'GOOGLE_TOKEN_AUDIENCE_MISMATCH': 'Google sign-in failed. Token was not issued for this application.',
+    // 403 - Forbidden / verification required
+    'EMAIL_NOT_VERIFIED': 'Please verify your email before signing in.',
+    'ACCOUNT_LOCKED': 'Your account has been locked. Please verify your email to unlock.',
+    'EMAIL_VERIFICATION_EXPIRED': 'Your verification deadline has passed and your account is locked. Please contact support.',
+    // 404
+    'USER_NOT_FOUND': 'Account not found. Please check your email or create a new account.',
+    // 409 - Conflicts
+    'EMAIL_ALREADY_EXISTS': 'This email is already registered.',
+    'EMAIL_IN_USE': 'This email is already in use.',
+    // 429 - Rate limiting
+    'RATE_LIMIT_EXCEEDED': 'Too many requests. Please try again later.',
+    'TOO_MANY_MAGIC_LINKS': 'Too many magic link requests. Please try again later.',
+    'TOO_MANY_VERIFICATION_ATTEMPTS': 'Too many verification attempts. Please wait and try again.',
+    'MAX_VERIFICATION_ATTEMPTS': 'Maximum verification attempts reached. Please try again later.',
+    // 500 - Server errors
+    'LOGIN_FAILED': 'Login failed. Please try again later.',
+    'REGISTRATION_FAILED': 'Registration failed. Please try again later.',
+    'GOOGLE_AUTH_NOT_CONFIGURED': 'Google sign-in is not available for this application.',
+    'GOOGLE_AUTH_FAILED': 'Google sign-in failed. Please try again.',
+    'GOOGLE_USERINFO_FAILED': 'Failed to retrieve your Google account information. Please try again.',
+    'PHONE_VERIFICATION_FAILED': 'Phone verification failed. Please try again.',
+    'SEND_VERIFICATION_CODE_FAILED': 'Failed to send verification code. Please try again.',
+    'MAGIC_LINK_SEND_FAILED': 'Failed to send magic link. Please try again.',
+    'MAGIC_LINK_VERIFICATION_FAILED': 'Magic link verification failed. Please try again.',
+    'PASSWORD_RESET_FAILED': 'Failed to process password reset. Please try again.',
+    'PASSWORD_RESET_COMPLETE_FAILED': 'Failed to reset password. Please try again.',
+    'EMAIL_VERIFICATION_SEND_FAILED': 'Failed to send verification email. Please try again.',
+    'EMAIL_VERIFICATION_FAILED': 'Email verification failed. Please try again.',
+    // Account management 500s
+    'UPDATE_PROFILE_FAILED': 'Failed to update profile. Please try again.',
+    'CHANGE_PASSWORD_FAILED': 'Failed to change password. Please try again.',
+    'CHANGE_EMAIL_FAILED': 'Failed to change email. Please try again.',
+    'UPDATE_PHONE_FAILED': 'Failed to update phone number. Please try again.',
+    'DELETE_ACCOUNT_FAILED': 'Failed to delete account. Please try again.',
+    'CONFIG_FETCH_FAILED': 'Failed to load configuration. Please try again.',
+    'INTERNAL_ERROR': 'An unexpected error occurred. Please try again.',
+    // Legacy aliases (kept for backward compatibility)
+    'INVALID_CODE': 'Invalid verification code. Please check and try again.',
+    'CODE_EXPIRED': 'This code has expired. Please request a new one.',
+    'PHONE_NOT_SUPPORTED': 'This phone number is not supported. Please try a different number.',
+    'INVALID_PHONE': 'Invalid phone number. Please check the format and try again.',
+    'PASSWORD_TOO_WEAK': 'Password is too weak. Please use at least 8 characters with a mix of letters and numbers.',
+    'RATE_LIMITED': 'Too many attempts. Please wait a moment and try again.',
+};
+function isApiErrorLike(error) {
+    if (error instanceof SmartlinksApiError)
+        return true;
+    if (error && typeof error === 'object' && 'statusCode' in error && 'message' in error) {
+        const e = error;
+        return typeof e.statusCode === 'number' && typeof e.message === 'string';
+    }
+    return false;
+}
+/**
+ * Extracts a user-friendly error message from an error.
+ *
+ * Handles:
+ * - SmartlinksApiError (and duck-typed equivalents from proxy mode)
+ * - Standard Error: Uses message property
+ * - String: Passes through directly (for native bridge errors)
+ * - Unknown: Returns generic message
+ */
+function getFriendlyErrorMessage(error) {
+    // Handle SmartlinksApiError or duck-typed API errors (proxy mode)
+    if (isApiErrorLike(error)) {
+        // First, check for specific error code (most precise)
+        const errorCode = error.errorCode || error.details?.errorCode || error.details?.error;
+        // For rate-limit errors, prefer the backend's message as it includes specific wait times
+        if (errorCode === 'RATE_LIMIT_EXCEEDED' && error.message && error.message !== '[object Object]') {
+            return error.message;
+        }
+        if (errorCode && ERROR_CODE_MESSAGES[errorCode]) {
+            return ERROR_CODE_MESSAGES[errorCode];
+        }
+        // Then, check status code for general category messages
+        if (error.statusCode >= 500) {
+            return 'Server error. Please try again later.';
+        }
+        // For 429 status, prefer backend message (may include wait time)
+        if (error.statusCode === 429 && error.message && error.message !== '[object Object]') {
+            return error.message;
+        }
+        if (STATUS_MESSAGES[error.statusCode]) {
+            return STATUS_MESSAGES[error.statusCode];
+        }
+        // Fall back to the server's message (already human-readable from backend)
+        return error.message;
+    }
+    // Handle standard Error objects
+    if (error instanceof Error) {
+        // SDK bug workaround: SDK may do `throw new Error(responseBodyObject)` which produces
+        // message "[object Object]". Check for API error properties attached to the Error instance.
+        const errAny = error;
+        // Check if the Error has API error properties directly attached (e.g., error.statusCode, error.errorCode)
+        if (typeof errAny.statusCode === 'number' || errAny.errorCode || errAny.response) {
+            // Try to extract from attached properties
+            const apiLike = errAny.response || errAny;
+            if (isApiErrorLike(apiLike)) {
+                return getFriendlyErrorMessage(apiLike);
+            }
+        }
+        // Check if the Error has a `cause` with API error details (modern Error cause pattern)
+        if (errAny.cause && typeof errAny.cause === 'object') {
+            if (isApiErrorLike(errAny.cause)) {
+                return getFriendlyErrorMessage(errAny.cause);
+            }
+        }
+        // If the message is "[object Object]", the error was constructed from a plain object
+        // This is useless - return a generic message instead
+        if (error.message === '[object Object]') {
+            // Log the actual error for debugging
+            console.warn('[AuthKit] Error with [object Object] message. Raw error:', JSON.stringify(errAny, Object.getOwnPropertyNames(errAny)));
+            return 'An unexpected error occurred. Please try again.';
+        }
+        // Check if the message itself contains a known API error pattern
+        if (/already (registered|exists)/i.test(error.message)) {
+            return 'This email is already registered.';
+        }
+        return error.message;
+    }
+    // Handle plain strings (e.g., from native bridge callbacks)
+    if (typeof error === 'string') {
+        return error;
+    }
+    // Unknown error type
+    return 'An unexpected error occurred. Please try again.';
+}
+/**
+ * Checks if an error represents a conflict (409) - typically duplicate registration.
+ */
+function isConflictError(error) {
+    if (isApiErrorLike(error))
+        return error.statusCode === 409;
+    // Also check error message for keyword match (resilient fallback)
+    if (error instanceof Error && /already (registered|exists)/i.test(error.message))
+        return true;
+    return false;
+}
+/**
+ * Checks if an error represents invalid credentials (401).
+ */
+function isAuthError(error) {
+    if (error instanceof SmartlinksApiError)
+        return error.isAuthError();
+    if (isApiErrorLike(error))
+        return error.statusCode === 401 || error.statusCode === 403;
+    return false;
+}
+/**
+ * Checks if an error represents rate limiting (429).
+ */
+function isRateLimitError(error) {
+    if (error instanceof SmartlinksApiError)
+        return error.isRateLimited();
+    if (isApiErrorLike(error))
+        return error.statusCode === 429;
+    return false;
+}
+/**
+ * Checks if an error represents a server error (5xx).
+ */
+function isServerError(error) {
+    if (error instanceof SmartlinksApiError)
+        return error.isServerError();
+    if (isApiErrorLike(error))
+        return error.statusCode >= 500;
+    return false;
+}
+/**
+ * Gets the HTTP status code from an error, if available.
+ */
+function getErrorStatusCode(error) {
+    if (isApiErrorLike(error))
+        return error.statusCode;
+    return undefined;
+}
+/**
+ * Gets the server-specific error code from an error, if available.
+ */
+function getErrorCode(error) {
+    if (isApiErrorLike(error)) {
+        return error.errorCode || error.details?.errorCode || error.details?.error;
+    }
+    return undefined;
+}
+/**
+ * Error codes that indicate the user needs to verify their email.
+ */
+const EMAIL_VERIFICATION_ERROR_CODES = new Set([
+    'EMAIL_NOT_VERIFIED',
+    'ACCOUNT_LOCKED',
+    'EMAIL_VERIFICATION_EXPIRED',
+]);
+/**
+ * Checks if an error requires email verification action from the user.
+ */
+function requiresEmailVerification(error) {
+    const code = getErrorCode(error);
+    if (code && EMAIL_VERIFICATION_ERROR_CODES.has(code))
+        return true;
+    // Also check the flag from the response body
+    if (error && typeof error === 'object' && 'requiresEmailVerification' in error) {
+        return error.requiresEmailVerification === true;
+    }
+    return false;
+}
+
 /**
  * AuthAPI - Thin wrapper around Smartlinks SDK authKit namespace
  * All authentication operations now use the global Smartlinks SDK
@@ -10949,14 +11199,46 @@ class AuthAPI {
         return smartlinks.authKit.verifyPhoneCode(this.clientId, phoneNumber, code);
     }
     async requestPasswordReset(email, redirectUrl) {
-        return smartlinks.authKit.requestPasswordReset(this.clientId, {
-            email,
-            redirectUrl,
-            clientName: this.clientName
-        });
+        console.log('[AuthKit:API] requestPasswordReset called', { clientId: this.clientId, email, redirectUrl });
+        try {
+            const result = await smartlinks.authKit.requestPasswordReset(this.clientId, {
+                email,
+                redirectUrl,
+                clientName: this.clientName
+            });
+            console.log('[AuthKit:API] requestPasswordReset resolved:', JSON.stringify(result));
+            return result;
+        }
+        catch (error) {
+            const err = error;
+            console.error('[AuthKit:API] requestPasswordReset threw:', {
+                type: typeof error,
+                message: err?.message,
+                statusCode: err?.statusCode ?? err?.response?.status,
+                errorCode: err?.errorCode ?? err?.details?.errorCode,
+                details: err?.details ?? err?.response?.data,
+                keys: err ? Object.keys(err) : [],
+            });
+            throw error;
+        }
     }
     async verifyResetToken(token) {
-        return smartlinks.authKit.verifyResetToken(this.clientId, token);
+        console.log('[AuthKit:API] verifyResetToken called');
+        try {
+            const result = await smartlinks.authKit.verifyResetToken(this.clientId, token);
+            console.log('[AuthKit:API] verifyResetToken resolved:', JSON.stringify(result));
+            return result;
+        }
+        catch (error) {
+            const err = error;
+            console.error('[AuthKit:API] verifyResetToken threw:', {
+                type: typeof error,
+                message: err?.message,
+                statusCode: err?.statusCode ?? err?.response?.status,
+                errorCode: err?.errorCode ?? err?.details?.errorCode,
+            });
+            throw error;
+        }
     }
     async completePasswordReset(token, newPassword) {
         return smartlinks.authKit.completePasswordReset(this.clientId, token, newPassword);
@@ -10992,7 +11274,6 @@ class AuthAPI {
             this.log.warn('Failed to fetch UI config, using defaults:', error);
             return {
                 branding: {
-                    title: 'Smartlinks Auth',
                     subtitle: 'Sign in to your account',
                     primaryColor: '#3B82F6',
                     secondaryColor: '#1D4ED8',
@@ -11003,6 +11284,32 @@ class AuthAPI {
             };
         }
     }
+    /**
+     * Ensure an account exists for the given email (or phone).
+     * Calls register and silently handles 409 (account already exists).
+     * This enables passwordless flows (magic link, phone) to work for new users.
+     */
+    async ensureAccount(data) {
+        try {
+            // Generate a random password since passwordless users won't use it
+            const randomPassword = crypto.randomUUID?.() || Math.random().toString(36).slice(2) + Math.random().toString(36).slice(2);
+            await this.register({
+                email: data.email,
+                password: randomPassword,
+                displayName: data.displayName,
+            });
+            this.log.log('ensureAccount: new account created for', data.email || data.phoneNumber);
+        }
+        catch (err) {
+            // 409 = account already exists, which is fine
+            if (isConflictError(err)) {
+                this.log.log('ensureAccount: account already exists for', data.email || data.phoneNumber);
+                return;
+            }
+            // Re-throw any other error
+            throw err;
+        }
+    }
     async sendMagicLink(email, redirectUrl) {
         return smartlinks.authKit.sendMagicLink(this.clientId, {
             email,
@@ -12160,368 +12467,128 @@ collectionId, enableContactSync, enableInteractionTracking, interactionAppId, in
     }, [getAccount]);
     const clearAccountCache = useCallback(async () => {
         if (!proxyMode) {
-            await tokenStorage.clearAccountInfo();
-        }
-        setAccountInfo(null);
-    }, [proxyMode]);
-    const onAuthStateChange = useCallback((callback) => {
-        callbacksRef.current.add(callback);
-        return () => {
-            callbacksRef.current.delete(callback);
-        };
-    }, []);
-    const retryVerification = useCallback(async () => {
-        if (!token || !user)
-            return false;
-        if (isVerified)
-            return true;
-        try {
-            await smartlinks.auth.verifyToken(token);
-            setIsVerified(true);
-            pendingVerificationRef.current = false;
-            notifyAuthStateChange('SESSION_VERIFIED', user, token, accountData, accountInfo, true, contact, contactId);
-            return true;
-        }
-        catch (err) {
-            if (isNetworkError(err)) {
-                return false;
-            }
-            else {
-                await logout();
-                return false;
-            }
-        }
-    }, [token, user, isVerified, accountData, accountInfo, contact, contactId, notifyAuthStateChange, isNetworkError, logout]);
-    // Online/offline event listener for auto-retry verification
-    useEffect(() => {
-        if (proxyMode)
-            return;
-        const handleOnline = () => {
-            setIsOnline(true);
-            if (pendingVerificationRef.current && token && user) {
-                retryVerification();
-            }
-        };
-        const handleOffline = () => {
-            setIsOnline(false);
-        };
-        window.addEventListener('online', handleOnline);
-        window.addEventListener('offline', handleOffline);
-        return () => {
-            window.removeEventListener('online', handleOnline);
-            window.removeEventListener('offline', handleOffline);
-        };
-    }, [proxyMode, token, user, retryVerification]);
-    // Automatic background token refresh
-    useEffect(() => {
-        if (proxyMode || !enableAutoRefresh || !token || !user) {
-            return;
-        }
-        const checkAndRefresh = async () => {
-            try {
-                const storedToken = await tokenStorage.getToken();
-                if (!storedToken?.expiresAt)
-                    return;
-                const now = Date.now();
-                const remainingMs = storedToken.expiresAt - now;
-                const totalLifetimeMs = 7 * 24 * 60 * 60 * 1000;
-                const percentUsed = totalLifetimeMs > 0 ? ((totalLifetimeMs - remainingMs) / totalLifetimeMs) * 100 : 100;
-                if (percentUsed >= refreshThresholdPercent) {
-                    try {
-                        await refreshToken();
-                    }
-                    catch (refreshError) {
-                        // Don't logout on refresh failure
-                    }
-                }
-            }
-            catch (error) {
-                console.error('[AuthContext] Error checking token for refresh:', error);
-            }
-        };
-        checkAndRefresh();
-        const intervalId = setInterval(checkAndRefresh, refreshCheckInterval);
-        return () => {
-            clearInterval(intervalId);
-        };
-    }, [proxyMode, enableAutoRefresh, refreshCheckInterval, refreshThresholdPercent, token, user, refreshToken]);
-    const value = {
-        user,
-        token,
-        accountData,
-        accountInfo,
-        isAuthenticated: !!user,
-        isVerified,
-        isLoading,
-        isOnline,
-        proxyMode,
-        contact,
-        contactId,
-        getContact,
-        updateContactCustomFields,
-        login,
-        logout,
-        getToken,
-        getTokenInfo,
-        refreshToken,
-        getAccount,
-        refreshAccount,
-        clearAccountCache,
-        onAuthStateChange,
-        retryVerification,
-    };
-    return jsx(AuthContext.Provider, { value: value, children: children });
-};
-const useAuth = () => {
-    const context = useContext(AuthContext);
-    if (context === undefined) {
-        throw new Error('useAuth must be used within an AuthProvider');
-    }
-    return context;
-};
-
-/**
- * Friendly error messages for common HTTP status codes.
- */
-const STATUS_MESSAGES = {
-    400: 'Invalid request. Please check your input and try again.',
-    401: 'Invalid credentials. Please check your email and password.',
-    403: 'Access denied. You do not have permission to perform this action.',
-    404: 'Account not found. Please check your email or create a new account.',
-    409: 'This email is already registered.',
-    429: 'Too many attempts. Please wait a moment and try again.',
-};
-/**
- * Context-specific error messages for different auth operations.
- */
-const ERROR_CODE_MESSAGES = {
-    // 400 - Validation errors
-    'MISSING_FIELDS': 'Email and password are required.',
-    'MISSING_EMAIL': 'Email is required.',
-    'MISSING_PASSWORD': 'Password is required.',
-    'MISSING_TOKEN': 'Token is required.',
-    'MISSING_PHONE_NUMBER': 'Phone number is required.',
-    'MISSING_VERIFICATION_CODE': 'Phone number and verification code are required.',
-    'MISSING_REDIRECT_URL': 'Redirect URL is required.',
-    'MISSING_GOOGLE_TOKEN': 'Google token is required.',
-    'INVALID_CLIENT_ID': 'Invalid client configuration.',
-    'INVALID_REDIRECT_URL': 'Invalid redirect URL.',
-    'INVALID_PHONE_NUMBER': 'Invalid phone number. Please check the format and try again.',
-    'INVALID_GOOGLE_TOKEN': 'Invalid Google sign-in token.',
-    'PASSWORD_TOO_SHORT': 'Password must be at least 8 characters long.',
-    'PASSWORD_REQUIREMENTS_NOT_MET': 'New password must be at least 6 characters.',
-    'EMAIL_ALREADY_VERIFIED': 'Your email is already verified.',
-    'INVALID_CONFIRMATION': 'Please type DELETE to confirm account deletion.',
-    // 401 - Authentication errors
-    'INVALID_CREDENTIALS': 'Invalid email or password.',
-    'INCORRECT_PASSWORD': 'Current password is incorrect.',
-    'INVALID_VERIFICATION_CODE': 'Invalid or expired verification code. Please try again.',
-    'INVALID_TOKEN': 'This link has expired or is invalid. Please request a new one.',
-    'TOKEN_EXPIRED': 'This link has expired. Please request a new one.',
-    'TOKEN_ALREADY_USED': 'This link has already been used. Please request a new one.',
-    'UNAUTHORIZED': 'You must be logged in to perform this action.',
-    'GOOGLE_TOKEN_AUDIENCE_MISMATCH': 'Google sign-in failed. Token was not issued for this application.',
-    // 403 - Forbidden / verification required
-    'EMAIL_NOT_VERIFIED': 'Please verify your email before signing in.',
-    'ACCOUNT_LOCKED': 'Your account has been locked. Please verify your email to unlock.',
-    'EMAIL_VERIFICATION_EXPIRED': 'Your verification deadline has passed and your account is locked. Please contact support.',
-    // 404
-    'USER_NOT_FOUND': 'Account not found. Please check your email or create a new account.',
-    // 409 - Conflicts
-    'EMAIL_ALREADY_EXISTS': 'This email is already registered.',
-    'EMAIL_IN_USE': 'This email is already in use.',
-    // 429 - Rate limiting
-    'RATE_LIMIT_EXCEEDED': 'Too many requests. Please try again later.',
-    'TOO_MANY_MAGIC_LINKS': 'Too many magic link requests. Please try again later.',
-    'TOO_MANY_VERIFICATION_ATTEMPTS': 'Too many verification attempts. Please wait and try again.',
-    'MAX_VERIFICATION_ATTEMPTS': 'Maximum verification attempts reached. Please try again later.',
-    // 500 - Server errors
-    'LOGIN_FAILED': 'Login failed. Please try again later.',
-    'REGISTRATION_FAILED': 'Registration failed. Please try again later.',
-    'GOOGLE_AUTH_NOT_CONFIGURED': 'Google sign-in is not available for this application.',
-    'GOOGLE_AUTH_FAILED': 'Google sign-in failed. Please try again.',
-    'GOOGLE_USERINFO_FAILED': 'Failed to retrieve your Google account information. Please try again.',
-    'PHONE_VERIFICATION_FAILED': 'Phone verification failed. Please try again.',
-    'SEND_VERIFICATION_CODE_FAILED': 'Failed to send verification code. Please try again.',
-    'MAGIC_LINK_SEND_FAILED': 'Failed to send magic link. Please try again.',
-    'MAGIC_LINK_VERIFICATION_FAILED': 'Magic link verification failed. Please try again.',
-    'PASSWORD_RESET_FAILED': 'Failed to process password reset. Please try again.',
-    'PASSWORD_RESET_COMPLETE_FAILED': 'Failed to reset password. Please try again.',
-    'EMAIL_VERIFICATION_SEND_FAILED': 'Failed to send verification email. Please try again.',
-    'EMAIL_VERIFICATION_FAILED': 'Email verification failed. Please try again.',
-    // Account management 500s
-    'UPDATE_PROFILE_FAILED': 'Failed to update profile. Please try again.',
-    'CHANGE_PASSWORD_FAILED': 'Failed to change password. Please try again.',
-    'CHANGE_EMAIL_FAILED': 'Failed to change email. Please try again.',
-    'UPDATE_PHONE_FAILED': 'Failed to update phone number. Please try again.',
-    'DELETE_ACCOUNT_FAILED': 'Failed to delete account. Please try again.',
-    'CONFIG_FETCH_FAILED': 'Failed to load configuration. Please try again.',
-    'INTERNAL_ERROR': 'An unexpected error occurred. Please try again.',
-    // Legacy aliases (kept for backward compatibility)
-    'INVALID_CODE': 'Invalid verification code. Please check and try again.',
-    'CODE_EXPIRED': 'This code has expired. Please request a new one.',
-    'PHONE_NOT_SUPPORTED': 'This phone number is not supported. Please try a different number.',
-    'INVALID_PHONE': 'Invalid phone number. Please check the format and try again.',
-    'PASSWORD_TOO_WEAK': 'Password is too weak. Please use at least 8 characters with a mix of letters and numbers.',
-    'RATE_LIMITED': 'Too many attempts. Please wait a moment and try again.',
-};
-function isApiErrorLike(error) {
-    if (error instanceof SmartlinksApiError)
-        return true;
-    if (error && typeof error === 'object' && 'statusCode' in error && 'message' in error) {
-        const e = error;
-        return typeof e.statusCode === 'number' && typeof e.message === 'string';
-    }
-    return false;
-}
-/**
- * Extracts a user-friendly error message from an error.
- *
- * Handles:
- * - SmartlinksApiError (and duck-typed equivalents from proxy mode)
- * - Standard Error: Uses message property
- * - String: Passes through directly (for native bridge errors)
- * - Unknown: Returns generic message
- */
-function getFriendlyErrorMessage(error) {
-    // Handle SmartlinksApiError or duck-typed API errors (proxy mode)
-    if (isApiErrorLike(error)) {
-        // First, check for specific error code (most precise)
-        const errorCode = error.errorCode || error.details?.errorCode || error.details?.error;
-        if (errorCode && ERROR_CODE_MESSAGES[errorCode]) {
-            return ERROR_CODE_MESSAGES[errorCode];
-        }
-        // Then, check status code for general category messages
-        if (error.statusCode >= 500) {
-            return 'Server error. Please try again later.';
+            await tokenStorage.clearAccountInfo();
         }
-        if (STATUS_MESSAGES[error.statusCode]) {
-            return STATUS_MESSAGES[error.statusCode];
+        setAccountInfo(null);
+    }, [proxyMode]);
+    const onAuthStateChange = useCallback((callback) => {
+        callbacksRef.current.add(callback);
+        return () => {
+            callbacksRef.current.delete(callback);
+        };
+    }, []);
+    const retryVerification = useCallback(async () => {
+        if (!token || !user)
+            return false;
+        if (isVerified)
+            return true;
+        try {
+            await smartlinks.auth.verifyToken(token);
+            setIsVerified(true);
+            pendingVerificationRef.current = false;
+            notifyAuthStateChange('SESSION_VERIFIED', user, token, accountData, accountInfo, true, contact, contactId);
+            return true;
         }
-        // Fall back to the server's message (already human-readable from backend)
-        return error.message;
-    }
-    // Handle standard Error objects
-    if (error instanceof Error) {
-        // SDK bug workaround: SDK may do `throw new Error(responseBodyObject)` which produces
-        // message "[object Object]". Check for API error properties attached to the Error instance.
-        const errAny = error;
-        // Check if the Error has API error properties directly attached (e.g., error.statusCode, error.errorCode)
-        if (typeof errAny.statusCode === 'number' || errAny.errorCode || errAny.response) {
-            // Try to extract from attached properties
-            const apiLike = errAny.response || errAny;
-            if (isApiErrorLike(apiLike)) {
-                return getFriendlyErrorMessage(apiLike);
+        catch (err) {
+            if (isNetworkError(err)) {
+                return false;
             }
-        }
-        // Check if the Error has a `cause` with API error details (modern Error cause pattern)
-        if (errAny.cause && typeof errAny.cause === 'object') {
-            if (isApiErrorLike(errAny.cause)) {
-                return getFriendlyErrorMessage(errAny.cause);
+            else {
+                await logout();
+                return false;
             }
         }
-        // If the message is "[object Object]", the error was constructed from a plain object
-        // This is useless - return a generic message instead
-        if (error.message === '[object Object]') {
-            // Log the actual error for debugging
-            console.warn('[AuthKit] Error with [object Object] message. Raw error:', JSON.stringify(errAny, Object.getOwnPropertyNames(errAny)));
-            return 'An unexpected error occurred. Please try again.';
-        }
-        // Check if the message itself contains a known API error pattern
-        if (/already (registered|exists)/i.test(error.message)) {
-            return 'This email is already registered.';
+    }, [token, user, isVerified, accountData, accountInfo, contact, contactId, notifyAuthStateChange, isNetworkError, logout]);
+    // Online/offline event listener for auto-retry verification
+    useEffect(() => {
+        if (proxyMode)
+            return;
+        const handleOnline = () => {
+            setIsOnline(true);
+            if (pendingVerificationRef.current && token && user) {
+                retryVerification();
+            }
+        };
+        const handleOffline = () => {
+            setIsOnline(false);
+        };
+        window.addEventListener('online', handleOnline);
+        window.addEventListener('offline', handleOffline);
+        return () => {
+            window.removeEventListener('online', handleOnline);
+            window.removeEventListener('offline', handleOffline);
+        };
+    }, [proxyMode, token, user, retryVerification]);
+    // Automatic background token refresh
+    useEffect(() => {
+        if (proxyMode || !enableAutoRefresh || !token || !user) {
+            return;
         }
-        return error.message;
-    }
-    // Handle plain strings (e.g., from native bridge callbacks)
-    if (typeof error === 'string') {
-        return error;
-    }
-    // Unknown error type
-    return 'An unexpected error occurred. Please try again.';
-}
-/**
- * Checks if an error represents a conflict (409) - typically duplicate registration.
- */
-function isConflictError(error) {
-    if (isApiErrorLike(error))
-        return error.statusCode === 409;
-    // Also check error message for keyword match (resilient fallback)
-    if (error instanceof Error && /already (registered|exists)/i.test(error.message))
-        return true;
-    return false;
-}
-/**
- * Checks if an error represents invalid credentials (401).
- */
-function isAuthError(error) {
-    if (error instanceof SmartlinksApiError)
-        return error.isAuthError();
-    if (isApiErrorLike(error))
-        return error.statusCode === 401 || error.statusCode === 403;
-    return false;
-}
-/**
- * Checks if an error represents rate limiting (429).
- */
-function isRateLimitError(error) {
-    if (error instanceof SmartlinksApiError)
-        return error.isRateLimited();
-    if (isApiErrorLike(error))
-        return error.statusCode === 429;
-    return false;
-}
-/**
- * Checks if an error represents a server error (5xx).
- */
-function isServerError(error) {
-    if (error instanceof SmartlinksApiError)
-        return error.isServerError();
-    if (isApiErrorLike(error))
-        return error.statusCode >= 500;
-    return false;
-}
-/**
- * Gets the HTTP status code from an error, if available.
- */
-function getErrorStatusCode(error) {
-    if (isApiErrorLike(error))
-        return error.statusCode;
-    return undefined;
-}
-/**
- * Gets the server-specific error code from an error, if available.
- */
-function getErrorCode(error) {
-    if (isApiErrorLike(error)) {
-        return error.errorCode || error.details?.errorCode || error.details?.error;
-    }
-    return undefined;
-}
-/**
- * Error codes that indicate the user needs to verify their email.
- */
-const EMAIL_VERIFICATION_ERROR_CODES = new Set([
-    'EMAIL_NOT_VERIFIED',
-    'ACCOUNT_LOCKED',
-    'EMAIL_VERIFICATION_EXPIRED',
-]);
-/**
- * Checks if an error requires email verification action from the user.
- */
-function requiresEmailVerification(error) {
-    const code = getErrorCode(error);
-    if (code && EMAIL_VERIFICATION_ERROR_CODES.has(code))
-        return true;
-    // Also check the flag from the response body
-    if (error && typeof error === 'object' && 'requiresEmailVerification' in error) {
-        return error.requiresEmailVerification === true;
+        const checkAndRefresh = async () => {
+            try {
+                const storedToken = await tokenStorage.getToken();
+                if (!storedToken?.expiresAt)
+                    return;
+                const now = Date.now();
+                const remainingMs = storedToken.expiresAt - now;
+                const totalLifetimeMs = 7 * 24 * 60 * 60 * 1000;
+                const percentUsed = totalLifetimeMs > 0 ? ((totalLifetimeMs - remainingMs) / totalLifetimeMs) * 100 : 100;
+                if (percentUsed >= refreshThresholdPercent) {
+                    try {
+                        await refreshToken();
+                    }
+                    catch (refreshError) {
+                        // Don't logout on refresh failure
+                    }
+                }
+            }
+            catch (error) {
+                console.error('[AuthContext] Error checking token for refresh:', error);
+            }
+        };
+        checkAndRefresh();
+        const intervalId = setInterval(checkAndRefresh, refreshCheckInterval);
+        return () => {
+            clearInterval(intervalId);
+        };
+    }, [proxyMode, enableAutoRefresh, refreshCheckInterval, refreshThresholdPercent, token, user, refreshToken]);
+    const value = {
+        user,
+        token,
+        accountData,
+        accountInfo,
+        isAuthenticated: !!user,
+        isVerified,
+        isLoading,
+        isOnline,
+        proxyMode,
+        contact,
+        contactId,
+        getContact,
+        updateContactCustomFields,
+        login,
+        logout,
+        getToken,
+        getTokenInfo,
+        refreshToken,
+        getAccount,
+        refreshAccount,
+        clearAccountCache,
+        onAuthStateChange,
+        retryVerification,
+    };
+    return jsx(AuthContext.Provider, { value: value, children: children });
+};
+const useAuth = () => {
+    const context = useContext(AuthContext);
+    if (context === undefined) {
+        throw new Error('useAuth must be used within an AuthProvider');
     }
-    return false;
-}
+    return context;
+};
 
 // VERSION: Update this when making changes to help identify which version is running
-const AUTH_UI_VERSION = '45';
+const AUTH_UI_VERSION = '46';
 const LOG_PREFIX = `[SmartlinksAuthUI:v${AUTH_UI_VERSION}]`;
 // Helper to check for URL auth params synchronously (runs during initialization)
 // This prevents the form from flashing before detecting deep-link flows
@@ -12545,6 +12612,24 @@ const getExpirationFromResponse = (response) => {
         return Date.now() + response.expiresIn;
     return undefined; // Will use 7-day default in tokenStorage
 };
+const getActionResultErrorMessage = (result) => {
+    if (!result || typeof result !== 'object')
+        return null;
+    const candidate = result;
+    const numericStatusCode = typeof candidate.statusCode === 'string'
+        ? Number(candidate.statusCode)
+        : candidate.statusCode;
+    const hasFailureStatus = typeof numericStatusCode === 'number' && !Number.isNaN(numericStatusCode) && numericStatusCode >= 400;
+    const isFailure = candidate.success === false || candidate.ok === false || !!candidate.errorCode || hasFailureStatus;
+    if (!isFailure)
+        return null;
+    return getFriendlyErrorMessage({
+        statusCode: hasFailureStatus ? numericStatusCode : 400,
+        errorCode: candidate.errorCode,
+        message: candidate.message || 'Request failed. Please try again.',
+        details: candidate.details,
+    });
+};
 // Default Smartlinks Google OAuth Client ID (public - safe to expose)
 const DEFAULT_GOOGLE_CLIENT_ID = '696509063554-jdlbjl8vsjt7cr0vgkjkjf3ffnvi3a70.apps.googleusercontent.com';
 // Default Google OAuth proxy URL (hosted on our whitelisted domain)
@@ -12720,7 +12805,7 @@ const checkSilentGoogleSignIn = async (clientId, googleClientId) => {
     });
 };
 // getFriendlyErrorMessage is now imported from ../utils/errorHandling
-const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAuthSuccess, onAuthError, onRedirect, enabledProviders = ['email', 'google', 'phone'], initialMode, signupProminence, redirectUrl, theme = 'auto', className, customization, skipConfigFetch = false, minimal = false, logger, proxyMode = false, collectionId, disableConfigCache = false, enableSilentGoogleSignIn = false, }) => {
+const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAuthSuccess, onAuthError, onRedirect, enabledProviders = ['email', 'google', 'phone'], initialMode, signupProminence, redirectUrl, theme = 'light', className, customization, skipConfigFetch = false, minimal = false, logger, proxyMode = false, collectionId, disableConfigCache = false, enableSilentGoogleSignIn = false, }) => {
     // Resolve signup prominence from props, customization, config, or default
     const resolvedSignupProminence = signupProminence || customization?.signupProminence || 'minimal';
     // Determine initial mode based on signupProminence setting
@@ -13079,10 +13164,9 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 log.log('Verifying reset token:', token);
                 // Verify token is valid, then show password reset form
                 const verifyResult = await api.verifyResetToken(token);
-                log.log('Reset token verification result:', { valid: verifyResult.valid, hasEmail: !!verifyResult.email, message: verifyResult.message });
-                // Check if token is valid before proceeding
-                if (!verifyResult.valid) {
-                    throw new Error(verifyResult.message || 'Invalid or expired token');
+                // Guard against undefined result (proxy mode may resolve without data)
+                if (!verifyResult || !verifyResult.valid) {
+                    throw new Error(verifyResult?.message || 'Invalid or expired token');
                 }
                 setUrlAuthProcessing(false); // Clear processing state - showing reset form
                 setResetToken(token); // Store token for use in password reset
@@ -13360,17 +13444,46 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             return;
         setLoading(true);
         setError(undefined);
+        setAuthSuccess(false);
+        setResetSuccess(false);
+        setSuccessMessage(undefined);
+        setShowResendVerification(false);
         try {
             const result = await api.requestPasswordReset(resetRequestEmail, getRedirectUrl());
-            // Use resetSuccess (not authSuccess) to show password reset confirmation, not "Login successful"
+            const resultError = getActionResultErrorMessage(result);
+            if (resultError) {
+                setAuthSuccess(false);
+                setResetSuccess(false);
+                setSuccessMessage(undefined);
+                setError(resultError);
+                setShowRequestNewReset(true);
+                return;
+            }
+            const resultAny = result;
+            const isConfirmedSuccess = result && (resultAny.success === true ||
+                resultAny.ok === true ||
+                (resultAny.message && !resultAny.errorCode && !resultAny.statusCode));
+            if (!isConfirmedSuccess) {
+                setAuthSuccess(false);
+                setResetSuccess(false);
+                setSuccessMessage(undefined);
+                setError(resultAny?.message || 'Unable to send password reset email. Please try again.');
+                setShowRequestNewReset(true);
+                return;
+            }
+            setAuthSuccess(false);
+            setMode('reset-password');
             setResetSuccess(true);
-            // Use backend message if available, otherwise default
             setSuccessMessage(result?.message || 'Password reset email sent! Please check your inbox.');
             setShowRequestNewReset(false);
             setResetRequestEmail('');
         }
         catch (err) {
+            setAuthSuccess(false);
+            setResetSuccess(false);
+            setSuccessMessage(undefined);
             setError(getFriendlyErrorMessage(err));
+            setShowRequestNewReset(true);
             onAuthError?.(err instanceof Error ? err : new Error(getFriendlyErrorMessage(err)));
         }
         finally {
@@ -13697,9 +13810,13 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     client_id: googleClientId,
                     origin: window.location.origin,
                 });
+                // Track whether the credential callback has fired (user selected an account)
+                // so we don't show the "blocked" fallback when the prompt closes after a successful selection
+                let credentialCallbackFired = false;
                 google.accounts.id.initialize({
                     client_id: googleClientId,
                     callback: async (response) => {
+                        credentialCallbackFired = true;
                         try {
                             const idToken = response.credential;
                             const authResponse = await api.loginWithGoogle(idToken);
@@ -13727,23 +13844,29 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                     cancel_on_tap_outside: true,
                     use_fedcm_for_prompt: true, // Enable FedCM for future browser compatibility
                 });
-                // Use timeout fallback — if no prompt interaction after 5s, assume FedCM was blocked
+                // Use timeout fallback — if no prompt interaction after 15s, assume FedCM was blocked
+                // (15s gives users enough time to choose a Google account from the picker)
                 const promptTimeout = setTimeout(() => {
+                    if (credentialCallbackFired)
+                        return; // Auth is already in progress, don't show fallback
                     log.log('Google OneTap prompt timed out — FedCM may be blocked or unavailable');
                     setGoogleFallbackToPopup(true);
                     setLoading(false);
-                }, 5000);
+                }, 15000);
                 google.accounts.id.prompt((notification) => {
                     clearTimeout(promptTimeout);
+                    // If the credential callback already fired, the user successfully selected an account
+                    // The prompt closing with 'dismissed' is expected — don't show fallback
+                    if (credentialCallbackFired) {
+                        log.log('Google OneTap prompt closed after credential selection — ignoring');
+                        return;
+                    }
                     // Check for FedCM/OneTap dismissal or blocking
-                    // notification may have getMomentType(), getDismissedReason(), getSkippedReason()
                     const momentType = notification?.getMomentType?.();
                     const dismissedReason = notification?.getDismissedReason?.();
                     const skippedReason = notification?.getSkippedReason?.();
                     log.log('Google OneTap prompt notification:', { momentType, dismissedReason, skippedReason });
                     if (momentType === 'skipped' || momentType === 'dismissed') {
-                        // User dismissed the prompt, or browser blocked it (FedCM disabled)
-                        // Offer popup flow as alternative
                         log.log('Google OneTap was dismissed/skipped, offering popup fallback');
                         setGoogleFallbackToPopup(true);
                     }
@@ -13757,11 +13880,13 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             setLoading(false);
         }
     };
-    const handlePhoneAuth = async (phoneNumber, verificationCode) => {
+    const handlePhoneAuth = async (phoneNumber, verificationCode, displayName) => {
         setLoading(true);
         setError(undefined);
         try {
             if (!verificationCode) {
+                // Phone verify endpoint handles account creation on the backend side,
+                // so no need for ensureAccount here (register requires email which phone users may not have)
                 // Send verification code via Twilio Verify Service
                 await api.sendPhoneCode(phoneNumber);
                 // Twilio Verify Service tracks the verification by phone number
@@ -13805,6 +13930,9 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
     const handlePasswordReset = async (emailOrPassword, confirmPassword) => {
         setLoading(true);
         setError(undefined);
+        setAuthSuccess(false);
+        setResetSuccess(false);
+        setSuccessMessage(undefined);
         const effectiveRedirectUrl = getRedirectUrl();
         try {
             if (resetToken && confirmPassword) {
@@ -13813,6 +13941,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                 // Auto-login with the new password if we have the email
                 if (resetEmail) {
                     try {
+                        log.log('Auto-login after password reset for:', resetEmail);
                         const loginResponse = await api.login(resetEmail, emailOrPassword);
                         if (loginResponse.token) {
                             await auth.login(loginResponse.token, loginResponse.user, loginResponse.accountData, false);
@@ -13825,9 +13954,12 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                         }
                     }
                     catch (loginErr) {
-                        // Auto-login failed, fall back to showing success message
+                        log.warn('Auto-login after password reset failed, requiring manual login:', loginErr);
                     }
                 }
+                else {
+                    log.warn('No resetEmail available for auto-login after password reset');
+                }
                 // Fallback: show success but require manual login
                 setResetSuccess(true);
                 setSuccessMessage('Password reset successful! Please sign in with your new password.');
@@ -13837,14 +13969,35 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             else {
                 // Request password reset email
                 const result = await api.requestPasswordReset(emailOrPassword, effectiveRedirectUrl);
+                const resultError = getActionResultErrorMessage(result);
+                if (resultError) {
+                    setAuthSuccess(false);
+                    setResetSuccess(false);
+                    setSuccessMessage(undefined);
+                    setError(resultError);
+                    return;
+                }
+                const resultAny = result;
+                const isConfirmedSuccess = result && (resultAny.success === true ||
+                    resultAny.ok === true ||
+                    (resultAny.message && !resultAny.errorCode && !resultAny.statusCode));
+                if (!isConfirmedSuccess) {
+                    setAuthSuccess(false);
+                    setResetSuccess(false);
+                    setSuccessMessage(undefined);
+                    setError(resultAny?.message || 'Unable to send password reset email. Please try again.');
+                    return;
+                }
                 setResetSuccess(true);
-                // Use backend message if available
                 if (result?.message) {
                     setSuccessMessage(result.message);
                 }
             }
         }
         catch (err) {
+            setAuthSuccess(false);
+            setResetSuccess(false);
+            setSuccessMessage(undefined);
             setError(getFriendlyErrorMessage(err));
             onAuthError?.(err instanceof Error ? err : new Error(getFriendlyErrorMessage(err)));
         }
@@ -13852,10 +14005,12 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
             setLoading(false);
         }
     };
-    const handleMagicLink = async (email) => {
+    const handleMagicLink = async (email, displayName) => {
         setLoading(true);
         setError(undefined);
         try {
+            // Ensure account exists before sending magic link (creates if new, no-op if exists)
+            await api.ensureAccount({ email, displayName });
             await api.sendMagicLink(email, getRedirectUrl());
             setAuthSuccess(true);
             setSuccessMessage('Magic link sent! Check your email to log in.');
@@ -13902,13 +14057,13 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                             ? 'hsl(var(--muted-foreground, 215 15% 45%))'
                             : (resolvedTheme === 'dark' ? '#94a3b8' : '#6B7280'),
                         fontSize: '0.875rem'
-                    }, children: successMessage })] })) : mode === 'magic-link' ? (jsx(MagicLinkForm, { onSubmit: handleMagicLink, onCancel: () => setMode('login'), loading: loading, error: error })) : mode === 'phone' ? (jsx(PhoneAuthForm, { onSubmit: handlePhoneAuth, onBack: () => setMode('login'), loading: loading, error: error })) : mode === 'reset-password' ? (jsx(PasswordResetForm, { onSubmit: handlePasswordReset, onBack: () => {
+                    }, children: successMessage })] })) : mode === 'magic-link' ? (jsx(MagicLinkForm, { onSubmit: handleMagicLink, onCancel: () => setMode('login'), loading: loading, error: error, collectName: config?.collectNameOnPasswordlessSignup })) : mode === 'phone' ? (jsx(PhoneAuthForm, { onSubmit: handlePhoneAuth, onBack: () => setMode('login'), loading: loading, error: error, collectName: config?.collectNameOnPasswordlessSignup })) : mode === 'reset-password' ? (jsx(PasswordResetForm, { onSubmit: handlePasswordReset, onBack: () => {
                 setMode('login');
                 setResetSuccess(false);
                 setResetToken(undefined); // Clear token when going back
                 setResetEmail(undefined); // Clear email when going back
                 setSuccessMessage(undefined); // Clear success message
-            }, loading: loading, error: error, success: resetSuccess, successMessage: successMessage, token: resetToken })) : (mode === 'login' || mode === 'register') ? (jsx(Fragment, { children: showResendVerification ? (jsxs("div", { style: {
+            }, loading: loading, error: error, success: resetSuccess, successMessage: successMessage, token: resetToken, resetEmail: resetEmail })) : (mode === 'login' || mode === 'register') ? (jsx(Fragment, { children: showResendVerification ? (jsxs("div", { style: {
                     marginTop: '1rem',
                     padding: '1.5rem',
                     backgroundColor: config?.branding?.inheritHostStyles
@@ -14006,7 +14161,16 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                             color: config?.branding?.inheritHostStyles
                                 ? 'hsl(var(--foreground, 215 25% 15%))'
                                 : (resolvedTheme === 'dark' ? '#f1f5f9' : '#374151')
-                        }, children: "Password Reset Link Expired" }), jsx("p", { style: {
+                        }, children: "Password Reset Link Expired" }), error && (jsx("div", { style: {
+                            marginBottom: '1rem',
+                            padding: '0.75rem',
+                            backgroundColor: resolvedTheme === 'dark' ? 'rgba(239, 68, 68, 0.15)' : 'rgba(239, 68, 68, 0.1)',
+                            border: `1px solid ${resolvedTheme === 'dark' ? 'rgba(239, 68, 68, 0.3)' : 'rgba(239, 68, 68, 0.2)'}`,
+                            borderRadius: '0.375rem',
+                            color: resolvedTheme === 'dark' ? '#fca5a5' : '#dc2626',
+                            fontSize: '0.875rem',
+                            lineHeight: '1.5',
+                        }, children: error })), jsx("p", { style: {
                             marginBottom: '1rem',
                             fontSize: '0.875rem',
                             color: config?.branding?.inheritHostStyles
@@ -14142,6 +14306,11 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                         const emailDisplayMode = config?.emailDisplayMode || 'form';
                         const providerOrder = config?.providerOrder || (config?.enabledProviders || enabledProviders);
                         const actualProviders = config?.enabledProviders || enabledProviders;
+                        const hasEmailProvider = actualProviders.includes('email');
+                        // If email provider is not enabled, only show provider buttons (no email/password form)
+                        if (!hasEmailProvider) {
+                            return (jsx(ProviderButtons, { enabledProviders: actualProviders, providerOrder: providerOrder, onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }));
+                        }
                         // Button mode: show provider selection first, then email form if email is selected
                         if (emailDisplayMode === 'button' && !showEmailForm) {
                             return (jsx(ProviderButtons, { enabledProviders: actualProviders, providerOrder: providerOrder, onEmailLogin: () => setShowEmailForm(true), onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }));
@@ -14163,7 +14332,7 @@ const SmartlinksAuthUI = ({ apiEndpoint, clientId, clientName, accountData, onAu
                                         setShowResendVerification(false);
                                         setShowRequestNewReset(false);
                                         setError(undefined);
-                                    }, onForgotPassword: () => setMode('reset-password'), loading: loading, error: error, signupProminence: resolvedSignupProminence, schema: contactSchema, registrationFieldsConfig: config?.registrationFields, additionalFields: config?.signupAdditionalFields }), emailDisplayMode === 'form' && actualProviders.length > 1 && (jsx(ProviderButtons, { enabledProviders: actualProviders.filter((p) => p !== 'email'), providerOrder: providerOrder, onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }))] }));
+                                    }, onForgotPassword: () => setMode('reset-password'), loading: loading, error: error, signupProminence: resolvedSignupProminence, signupRedirectUrl: config?.signupRedirectUrl || customization?.signupRedirectUrl, schema: contactSchema, registrationFieldsConfig: config?.registrationFields, additionalFields: config?.signupAdditionalFields }), emailDisplayMode === 'form' && actualProviders.length > 1 && (jsx(ProviderButtons, { enabledProviders: actualProviders.filter((p) => p !== 'email'), providerOrder: providerOrder, onGoogleLogin: handleGoogleLogin, onPhoneLogin: () => setMode('phone'), onMagicLinkLogin: () => setMode('magic-link'), loading: loading }))] }));
                     })()] })) })) : null }));
 };