@wildo-ai/saas-frontend-lib 1.0.1

package/dist/esm/components/auth/methods/OrgOidcAuthMethod.js

@@ -0,0 +1,75 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from 'react';
+import { useLocation } from 'react-router-dom';
+import { UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { WildoHeaderKeys } from '@wildo-ai/saas-models';
+import { Button, ButtonVariants_Variant } from '../../../components/actions/button.js';
+import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
+import { getManualCallsHttpClient } from '../../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
+import { buildAuthRedirectTarget } from '../../../core/security/auth-redirect.frontend.utils.js';
+import { useAppScopeSafe } from '../../../core/scope/useAppScope.js';
+/**
+ * OrgOidcAuthMethod — renders a "Sign in with {orgName}" button
+ * that fetches the enterprise SSO authorization URL and redirects.
+ *
+ * The backend provides config.connectionId, config.scopeType, config.scopeId,
+ * config.organizationId, and config.displayName in the AvailableMethod object.
+ *
+ * [Capacitor] Enterprise Google/Microsoft SSO on mobile has two paths:
+ * - OIDC redirect: Replace window.location.href with Browser.open() + deep-link return.
+ *   Works for all OIDC providers (Google Workspace, Microsoft Entra, etc.).
+ * - Native SDK (Google only): Use initiateNativeSignIn('google') which calls the native
+ *   Google SDK then exchanges the token via POST /auth/native-token/exchange.
+ *   The backend validates the token and handles both consumer and Workspace accounts.
+ */
+const OrgOidcAuthMethod = ({ methodConfig, isLoading, t, factorLevel }) => {
+    const [redirecting, setRedirecting] = useState(false);
+    const [error, setError] = useState(null);
+    const location = useLocation();
+    const appScope = useAppScopeSafe();
+    const displayName = methodConfig.config?.displayName || 'SSO';
+    const connectionId = methodConfig.config?.connectionId;
+    const organizationId = methodConfig.config?.organizationId;
+    const returnUrl = buildAuthRedirectTarget(location);
+    const applicationId = appScope?.currentApplicationId
+        ?? (methodConfig.config?.scopeType === 'application'
+            ? methodConfig.config?.scopeId
+            : undefined);
+    const handleClick = useCallback(async () => {
+        if (!connectionId) {
+            setError('SSO configuration error');
+            return;
+        }
+        setRedirecting(true);
+        setError(null);
+        try {
+            const client = getManualCallsHttpClient();
+            if (!organizationId && !applicationId) {
+                setError('SSO configuration error');
+                setRedirecting(false);
+                return;
+            }
+            const result = organizationId
+                ? await client.getEnterpriseSSOAuthorizationUrl(organizationId, connectionId, returnUrl)
+                : await client.getAppEnterpriseSSOAuthorizationUrl(connectionId, returnUrl, {
+                    headers: {
+                        [WildoHeaderKeys.APPLICATION_ID]: applicationId,
+                    },
+                });
+            // [Capacitor] Replace with Browser.open({ url: result.authorizationUrl })
+            // and handle return via App.addListener('appUrlOpen') deep link.
+            // Alternatively, for Google, use initiateNativeSignIn('google') from useUserOrgs().
+            window.location.href = result.authorizationUrl;
+        }
+        catch (e) {
+            setRedirecting(false);
+            setError(e?.message || 'Failed to initiate SSO');
+        }
+    }, [applicationId, connectionId, organizationId, returnUrl]);
+    const label = factorLevel === 'first'
+        ? (t(UserAuthLabel.CONTINUE_WITH) || 'Continue with {provider}').replace('{provider}', displayName)
+        : displayName;
+    return (_jsxs("div", { className: "space-y-item", children: [_jsxs(Button, { variant: ButtonVariants_Variant.OUTLINE, className: "w-full", onClick: handleClick, disabled: isLoading || redirecting, children: [_jsxs("svg", { className: "size-5 mr-2", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("rect", { x: "3", y: "11", width: "18", height: "11", rx: "2", ry: "2" }), _jsx("path", { d: "M7 11V7a5 5 0 0 1 10 0v4" })] }), redirecting ? '…' : label] }), error && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) }))] }));
+};
+export { OrgOidcAuthMethod };
+//# sourceMappingURL=OrgOidcAuthMethod.js.map

package/dist/esm/components/auth/methods/OrgOidcAuthMethod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgOidcAuthMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/OrgOidcAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAc,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAG7E;;;;;;;;;;;;;GAaG;AACH,MAAM,iBAAiB,GAAuC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;IAC5G,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,EAAE,WAAW,IAAI,KAAK,CAAC;IAC9D,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,EAAE,YAAkC,CAAC;IAC7E,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,EAAE,cAAoC,CAAC;IACjF,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,QAAQ,EAAE,oBAAoB;WAC/C,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,KAAK,aAAa;YAClD,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAA6B;YACpD,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjB,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,yBAAyB,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC1C,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;gBACtC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;gBACpC,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,cAAc;gBAC3B,CAAC,CAAC,MAAM,MAAM,CAAC,gCAAgC,CAAC,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC;gBACxF,CAAC,CAAC,MAAM,MAAM,CAAC,mCAAmC,CAAC,YAAY,EAAE,SAAS,EAAE;oBACxE,OAAO,EAAE;wBACP,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE,aAAa;qBAChD;iBACF,CAAC,CAAC;YACP,0EAA0E;YAC1E,iEAAiE;YACjE,oFAAoF;YACpF,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACjD,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,wBAAwB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,WAAW,KAAK,OAAO;QACnC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,0BAA0B,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;QACnG,CAAC,CAAC,WAAW,CAAC;IAEhB,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,MAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,SAAS,IAAI,WAAW,aAElC,eAAK,SAAS,EAAC,aAAa,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,aAChK,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,GAAE,EACzD,eAAM,CAAC,EAAC,0BAA0B,GAAE,IAChC,EACL,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IACnB,EACR,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,IACG,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.d.ts

@@ -0,0 +1,18 @@
+import React from 'react';
+import { type AuthMethodComponentProps } from '../../../components/auth/methods/auth-method-components.js';
+/**
+ * OrgSamlAuthMethod — renders a "Sign in with {orgName}" button
+ * that redirects to the SAML SP-initiated login URL.
+ *
+ * Constructs the redirect URL from MANUAL_CONTROLLER_ROUTES_URLS
+ * using the connectionId from config, ensuring URL consistency
+ * with the rest of the engine.
+ *
+ * [Capacitor] On mobile, replace window.location.href with Browser.open()
+ * (ASWebAuthenticationSession / Chrome Custom Tabs). The SAML ACS callback
+ * must be configured to return via deep link (Universal Links / App Links).
+ * Unlike OIDC/Google, SAML has no native SDK path — always uses browser redirect.
+ */
+declare const OrgSamlAuthMethod: React.FC<AuthMethodComponentProps>;
+export { OrgSamlAuthMethod };
+//# sourceMappingURL=OrgSamlAuthMethod.d.ts.map

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgSamlAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/OrgSamlAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAOrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAInH;;;;;;;;;;;;GAYG;AACH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CA6CzD,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.js

@@ -0,0 +1,46 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from 'react';
+import { useLocation } from 'react-router-dom';
+import { UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey } from '@wildo-ai/saas-models';
+import { Button, ButtonVariants_Variant } from '../../../components/actions/button.js';
+import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
+import { buildAuthRedirectTarget } from '../../../core/security/auth-redirect.frontend.utils.js';
+const API_PREFIX = '/api/v1';
+/**
+ * OrgSamlAuthMethod — renders a "Sign in with {orgName}" button
+ * that redirects to the SAML SP-initiated login URL.
+ *
+ * Constructs the redirect URL from MANUAL_CONTROLLER_ROUTES_URLS
+ * using the connectionId from config, ensuring URL consistency
+ * with the rest of the engine.
+ *
+ * [Capacitor] On mobile, replace window.location.href with Browser.open()
+ * (ASWebAuthenticationSession / Chrome Custom Tabs). The SAML ACS callback
+ * must be configured to return via deep link (Universal Links / App Links).
+ * Unlike OIDC/Google, SAML has no native SDK path — always uses browser redirect.
+ */
+const OrgSamlAuthMethod = ({ methodConfig, isLoading, t, factorLevel }) => {
+    const [redirecting, setRedirecting] = useState(false);
+    const [error, setError] = useState(null);
+    const location = useLocation();
+    const displayName = methodConfig.config?.displayName || 'SSO';
+    const connectionId = methodConfig.config?.connectionId;
+    const returnUrl = buildAuthRedirectTarget(location);
+    const handleClick = useCallback(() => {
+        if (!connectionId) {
+            setError('SSO configuration error');
+            return;
+        }
+        setRedirecting(true);
+        const loginPath = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_SAML_LOGIN]
+            .replace(':connectionId', connectionId);
+        window.location.href = `${API_PREFIX}${loginPath}?returnUrl=${encodeURIComponent(returnUrl)}`;
+    }, [connectionId, returnUrl]);
+    const label = factorLevel === 'first'
+        ? (t(UserAuthLabel.CONTINUE_WITH) || 'Continue with {provider}').replace('{provider}', displayName)
+        : displayName;
+    return (_jsxs("div", { className: "space-y-item", children: [_jsxs(Button, { variant: ButtonVariants_Variant.OUTLINE, className: "w-full", onClick: handleClick, disabled: isLoading || redirecting, children: [_jsxs("svg", { className: "size-5 mr-2", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("rect", { x: "3", y: "11", width: "18", height: "11", rx: "2", ry: "2" }), _jsx("path", { d: "M7 11V7a5 5 0 0 1 10 0v4" })] }), redirecting ? '…' : label] }), error && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) }))] }));
+};
+export { OrgSamlAuthMethod };
+//# sourceMappingURL=OrgSamlAuthMethod.js.map

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgSamlAuthMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/OrgSamlAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAc,6BAA6B,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC5G,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AAGzG,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B;;;;;;;;;;;;GAYG;AACH,MAAM,iBAAiB,GAAuC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;IAC5G,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,EAAE,WAAW,IAAI,KAAK,CAAC;IAC9D,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,EAAE,YAAkC,CAAC;IAC7E,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QACnC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,yBAAyB,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,eAAe,CAAC;aACtF,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,UAAU,GAAG,SAAS,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IAChG,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IAE9B,MAAM,KAAK,GAAG,WAAW,KAAK,OAAO;QACnC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,0BAA0B,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;QACnG,CAAC,CAAC,WAAW,CAAC;IAEhB,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,MAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,SAAS,IAAI,WAAW,aAElC,eAAK,SAAS,EAAC,aAAa,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,aAChK,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,GAAE,EACzD,eAAM,CAAC,EAAC,0BAA0B,GAAE,IAChC,EACL,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IACnB,EACR,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,IACG,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/PasskeyAuthMethod.d.ts

@@ -0,0 +1,5 @@
+import React from 'react';
+import { type AuthMethodComponentProps } from '../../../components/auth/methods/auth-method-components.js';
+declare const PasskeyAuthMethod: React.FC<AuthMethodComponentProps>;
+export { PasskeyAuthMethod };
+//# sourceMappingURL=PasskeyAuthMethod.d.ts.map

package/dist/esm/components/auth/methods/PasskeyAuthMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasskeyAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/PasskeyAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAyC,MAAM,OAAO,CAAC;AAO9D,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAEnH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAqEzD,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/PasskeyAuthMethod.js

@@ -0,0 +1,55 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useMemo, useState } from 'react';
+import { MfaChallengeLabel, UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { isWildoBackendError } from '@wildo-ai/saas-models';
+import { Button } from '../../../components/actions/button.js';
+import { Text } from '../../../components/typography/text.js';
+import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
+import { useAuthSession } from '../../../core/security/useAuthSession.js';
+const PasskeyAuthMethod = ({ sessionId, onSuccess, onError, isLoading, t, factorLevel }) => {
+    const { handlePasskeyAuth } = useAuthSession();
+    const [authenticating, setAuthenticating] = useState(false);
+    const [error, setError] = useState(null);
+    const labels = useMemo(() => factorLevel === 'first' ? UserAuthLabel : MfaChallengeLabel, [factorLevel]);
+    const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;
+    const handleClick = useCallback(async () => {
+        setAuthenticating(true);
+        setError(null);
+        try {
+            const response = await handlePasskeyAuth(sessionId, factorLevel);
+            if (response.success) {
+                onSuccess(response);
+            }
+            else {
+                const msg = response.error || t(labels.PASSKEY_ERROR);
+                setError(msg);
+                onError(msg);
+            }
+        }
+        catch (e) {
+            const err = e;
+            let msg;
+            if (err?.name === 'NotAllowedError') {
+                msg = t(labels.PASSKEY_CANCELLED);
+            }
+            else if (isWildoBackendError(e)) {
+                const wErr = e;
+                msg = wErr.userGuidance?.explanation || wErr.message || t(labels.PASSKEY_ERROR);
+            }
+            else {
+                msg = err?.message || t(labels.PASSKEY_ERROR);
+            }
+            setError(msg);
+            onError(msg);
+        }
+        finally {
+            setAuthenticating(false);
+        }
+    }, [sessionId, factorLevel, handlePasskeyAuth, onSuccess, onError, t, labels]);
+    if (!isSupported) {
+        return (_jsx("div", { className: "space-y-item", children: _jsx(Alert, { children: _jsx(AlertDescription, { children: t(labels.PASSKEY_UNSUPPORTED) }) }) }));
+    }
+    return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(labels.PASSKEY_DESCRIPTION) }), error && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) })), _jsx(Button, { className: "w-full", onClick: handleClick, disabled: authenticating || isLoading, children: authenticating ? t(labels.PASSKEY_AUTHENTICATING) : t(labels.PASSKEY_BUTTON) })] }));
+};
+export { PasskeyAuthMethod };
+//# sourceMappingURL=PasskeyAuthMethod.js.map

package/dist/esm/components/auth/methods/PasskeyAuthMethod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasskeyAuthMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/PasskeyAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,EAAc,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,+CAA+C,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAGlF,MAAM,iBAAiB,GAAuC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;IAC7H,MAAM,EAAE,iBAAiB,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/C,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACzG,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAElF,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACjE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACtD,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAAwC,CAAC;YACrD,IAAI,GAAW,CAAC;YAChB,IAAI,GAAG,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACpC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,CAAkE,CAAC;gBAChF,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAClF,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAChD,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAE/E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,cAAK,SAAS,EAAC,cAAc,YAC3B,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,GAAoB,GAC9D,GACJ,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,GACzB,EAEN,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,MAAM,IACL,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,cAAc,IAAI,SAAS,YAEpC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,GACtE,IACL,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/PasswordAuthMethod.d.ts

@@ -0,0 +1,5 @@
+import React from 'react';
+import { type AuthMethodComponentProps } from '../../../components/auth/methods/auth-method-components.js';
+declare const PasswordAuthMethod: React.FC<AuthMethodComponentProps>;
+export { PasswordAuthMethod };
+//# sourceMappingURL=PasswordAuthMethod.d.ts.map

package/dist/esm/components/auth/methods/PasswordAuthMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/PasswordAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA+B,MAAM,OAAO,CAAC;AAWpD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAiCnH,QAAA,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAkC1D,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/PasswordAuthMethod.js

@@ -0,0 +1,48 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useMemo } from 'react';
+import { ValidationMode } from '@wildo-ai/zod-decorators';
+import { FrontendComponentType, UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { AuthLoginFormDtoSchema } from '@wildo-ai/saas-models';
+import { AutomatedForm } from '../../../components/form/automated/AutomatedForm.js';
+import { FormLayout } from '../../../components/resources/skeleton/FormLayout.js';
+import { FormField } from '../../../components/form/automated/FormField.js';
+import { SubmitButton } from '../../../components/resources/skeleton/SubmitButton.js';
+import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
+import { useUserOrgs } from '../../../core/security/useUserOrgs.js';
+import { useI18n } from '../../../core/i18n/useI18n.js';
+/**
+ * Self-sufficient template for the password login form.
+ * Reads auth error from `useUserOrgs()`, labels from `useI18n()`.
+ */
+const LoginFormTemplate = () => {
+    const { auth } = useUserOrgs();
+    const { tComponent } = useI18n({
+        component: FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,
+    });
+    const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);
+    return (_jsxs(FormLayout, { children: [_jsx(FormField, { name: "email" }), _jsx(FormField, { name: "password" }), auth.error && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: auth.error }) })), _jsx(SubmitButton, { label: t(UserAuthLabel.SUBMIT), submittingLabel: "\u2026", fullWidth: true })] }));
+};
+const PasswordAuthMethod = ({ email, onSuccess, onError, isLoading, t }) => {
+    const { authenticateWithPassword } = useUserOrgs();
+    const handleSubmit = useCallback(async (data) => {
+        try {
+            const response = await authenticateWithPassword(data.email, data.password);
+            onSuccess(response);
+        }
+        catch (e) {
+            onError(e?.message || 'Authentication failed');
+        }
+    }, [authenticateWithPassword, onSuccess, onError]);
+    const defaultValues = useMemo(() => ({
+        email,
+        password: '',
+    }), [email]);
+    return (_jsx(AutomatedForm, { schema: AuthLoginFormDtoSchema, defaultValues: defaultValues, onSubmit: handleSubmit, validationMode: ValidationMode.ON_BLUR, disabled: isLoading, labels: {
+            fields: {
+                email: t(UserAuthLabel.EMAIL_ADDRESS),
+                password: t(UserAuthLabel.PASSWORD),
+            },
+        }, layoutTemplate: LoginFormTemplate }, "password-auth"));
+};
+export { PasswordAuthMethod };
+//# sourceMappingURL=PasswordAuthMethod.js.map

package/dist/esm/components/auth/methods/PasswordAuthMethod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordAuthMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/PasswordAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAyB,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAGhE;;;GAGG;AACH,MAAM,iBAAiB,GAAa,GAAG,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC7B,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAE3F,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAC,OAAO,GAAG,EAC1B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,IAAI,CAAC,KAAK,IAAI,CACb,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,IAAI,CAAC,KAAK,GAAoB,GAC3C,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAC9B,eAAe,EAAC,QAAG,EACnB,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAuC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7G,MAAM,EAAE,wBAAwB,EAAE,GAAG,WAAW,EAAE,CAAC;IAEnD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAAsB,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3E,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,EAAE,OAAO,IAAI,uBAAuB,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,EAAE,CAAC,wBAAwB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEnD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACnC,KAAK;QACL,QAAQ,EAAE,EAAE;KACb,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEb,OAAO,CACL,KAAC,aAAa,IAEZ,MAAM,EAAE,sBAAsB,EAC9B,aAAa,EAAE,aAAoB,EACnC,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,EACnB,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;gBACrC,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC;aACpC;SACF,EACD,cAAc,EAAE,iBAAiB,IAZ7B,eAAe,CAanB,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/SmsOtpAuthMethod.d.ts

@@ -0,0 +1,5 @@
+import React from 'react';
+import { type AuthMethodComponentProps } from '../../../components/auth/methods/auth-method-components.js';
+declare const SmsOtpAuthMethod: React.FC<AuthMethodComponentProps>;
+export { SmsOtpAuthMethod };
+//# sourceMappingURL=SmsOtpAuthMethod.d.ts.map

package/dist/esm/components/auth/methods/SmsOtpAuthMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SmsOtpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/SmsOtpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AASrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAEnH,QAAA,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CA2FxD,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/SmsOtpAuthMethod.js

@@ -0,0 +1,59 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from 'react';
+import { MfaChallengeLabel } from '@wildo-ai/presets-components-models';
+import { AuthMethod } from '@wildo-ai/saas-models';
+import { Button, ButtonVariants_Variant } from '../../../components/actions/button.js';
+import { ButtonSize } from '@wildo-ai/presets-components-models';
+import { Text } from '../../../components/typography/text.js';
+import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
+import { getManualCallsHttpClient } from '../../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
+import { useAuthSession } from '../../../core/security/useAuthSession.js';
+const SmsOtpAuthMethod = ({ sessionId, onSuccess, onError, isLoading, t }) => {
+    const { handleMfaVerify } = useAuthSession();
+    const [codeSent, setCodeSent] = useState(false);
+    const [codeSending, setCodeSending] = useState(false);
+    const [code, setCode] = useState('');
+    const [verifying, setVerifying] = useState(false);
+    const [error, setError] = useState(null);
+    const handleSendCode = useCallback(async () => {
+        setCodeSending(true);
+        setError(null);
+        try {
+            await getManualCallsHttpClient().smsOTPSend(sessionId);
+            setCodeSent(true);
+        }
+        catch (e) {
+            setError(e?.message || 'Failed to send code');
+        }
+        finally {
+            setCodeSending(false);
+        }
+    }, [sessionId]);
+    const handleVerify = useCallback(async () => {
+        if (!code.trim())
+            return;
+        setVerifying(true);
+        setError(null);
+        try {
+            const response = await handleMfaVerify(sessionId, AuthMethod.SMS_OTP, code.trim());
+            if (response.success) {
+                onSuccess(response);
+            }
+            else {
+                setError(response.error || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+            }
+        }
+        catch (e) {
+            setError(e?.message || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+        }
+        finally {
+            setVerifying(false);
+        }
+    }, [sessionId, code, handleMfaVerify, onSuccess, t]);
+    if (!codeSent) {
+        return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.SMS_OTP_DESCRIPTION) }), _jsx(Button, { className: "w-full", onClick: handleSendCode, disabled: codeSending || isLoading, children: codeSending ? t(MfaChallengeLabel.SMS_OTP_SENDING) : t(MfaChallengeLabel.SMS_OTP_SEND) })] }));
+    }
+    return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.SMS_OTP_SENT) }), _jsxs("div", { children: [_jsx("label", { className: "block text-sm font-medium mb-1", children: t(MfaChallengeLabel.SMS_OTP_CODE_LABEL) }), _jsx("input", { type: "text", inputMode: "numeric", autoComplete: "one-time-code", value: code, onChange: (e) => setCode(e.target.value), className: "flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2", maxLength: 8, autoFocus: true })] }), error && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) })), _jsx(Button, { className: "w-full", onClick: handleVerify, disabled: verifying || !code.trim(), children: verifying ? t(MfaChallengeLabel.VERIFYING) : t(MfaChallengeLabel.VERIFY_BUTTON) }), _jsx("div", { className: "text-center", children: _jsx(Button, { variant: ButtonVariants_Variant.GHOST, size: ButtonSize.SM, onClick: handleSendCode, disabled: codeSending, children: t(MfaChallengeLabel.RESEND_CODE) }) })] }));
+};
+export { SmsOtpAuthMethod };
+//# sourceMappingURL=SmsOtpAuthMethod.js.map

package/dist/esm/components/auth/methods/SmsOtpAuthMethod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SmsOtpAuthMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/SmsOtpAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAGlF,MAAM,gBAAgB,GAAuC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC/G,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAE7C,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACvD,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,qBAAqB,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QACzB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACnF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAClE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,GACpC,EACP,KAAC,MAAM,IAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,IAAI,SAAS,YACnF,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAChF,IACL,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAC7B,EACP,0BACE,gBAAO,SAAS,EAAC,gCAAgC,YAC9C,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,GAClC,EACR,gBACE,IAAI,EAAC,MAAM,EACX,SAAS,EAAC,SAAS,EACnB,YAAY,EAAC,eAAe,EAC5B,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACxC,SAAS,EAAC,8OAA8O,EACxP,SAAS,EAAE,CAAC,EACZ,SAAS,SACT,IACE,EAEL,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,MAAM,IAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAClF,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GACzE,EAET,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,YAC/G,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAC1B,GACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/TotpAuthMethod.d.ts

@@ -0,0 +1,5 @@
+import React from 'react';
+import { type AuthMethodComponentProps } from '../../../components/auth/methods/auth-method-components.js';
+declare const TotpAuthMethod: React.FC<AuthMethodComponentProps>;
+export { TotpAuthMethod };
+//# sourceMappingURL=TotpAuthMethod.d.ts.map

package/dist/esm/components/auth/methods/TotpAuthMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/TotpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAOrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAEnH,QAAA,MAAM,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAyDtD,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/esm/components/auth/methods/TotpAuthMethod.js

@@ -0,0 +1,38 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from 'react';
+import { MfaChallengeLabel } from '@wildo-ai/presets-components-models';
+import { AuthMethod } from '@wildo-ai/saas-models';
+import { Button } from '../../../components/actions/button.js';
+import { Text } from '../../../components/typography/text.js';
+import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
+import { useAuthSession } from '../../../core/security/useAuthSession.js';
+const TotpAuthMethod = ({ sessionId, onSuccess, onError, isLoading, t }) => {
+    const { handleMfaVerify } = useAuthSession();
+    const [code, setCode] = useState('');
+    const [verifying, setVerifying] = useState(false);
+    const [error, setError] = useState(null);
+    const handleVerify = useCallback(async () => {
+        if (!code.trim())
+            return;
+        setVerifying(true);
+        setError(null);
+        try {
+            const response = await handleMfaVerify(sessionId, AuthMethod.TOTP, code.trim());
+            if (response.success) {
+                onSuccess(response);
+            }
+            else {
+                setError(response.error || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+            }
+        }
+        catch (e) {
+            setError(e?.message || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+        }
+        finally {
+            setVerifying(false);
+        }
+    }, [sessionId, code, handleMfaVerify, onSuccess, t]);
+    return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.TOTP_DESCRIPTION) }), _jsxs("div", { children: [_jsx("label", { className: "block text-sm font-medium mb-1", children: t(MfaChallengeLabel.TOTP_CODE_LABEL) }), _jsx("input", { type: "text", inputMode: "numeric", autoComplete: "one-time-code", value: code, onChange: (e) => setCode(e.target.value), className: "flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2", maxLength: 6, autoFocus: true })] }), error && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) })), _jsx(Button, { className: "w-full", onClick: handleVerify, disabled: verifying || !code.trim() || isLoading, children: verifying ? t(MfaChallengeLabel.VERIFYING) : t(MfaChallengeLabel.VERIFY_BUTTON) })] }));
+};
+export { TotpAuthMethod };
+//# sourceMappingURL=TotpAuthMethod.js.map

package/dist/esm/components/auth/methods/TotpAuthMethod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpAuthMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/TotpAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,+CAA+C,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAGlF,MAAM,cAAc,GAAuC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7G,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAE7C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QACzB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAClE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAErD,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,GACjC,EACP,0BACE,gBAAO,SAAS,EAAC,gCAAgC,YAC9C,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC,GAC/B,EACR,gBACE,IAAI,EAAC,MAAM,EACX,SAAS,EAAC,SAAS,EACnB,YAAY,EAAC,eAAe,EAC5B,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACxC,SAAS,EAAC,8OAA8O,EACxP,SAAS,EAAE,CAAC,EACZ,SAAS,SACT,IACE,EAEL,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,MAAM,IAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,SAAS,YAC/F,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GACzE,IACL,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/esm/components/auth/methods/auth-method-components.d.ts

@@ -0,0 +1,41 @@
+import type React from 'react';
+import { AuthMethod, type AvailableMethod, type AuthenticationResponse } from '@wildo-ai/saas-models';
+import type { UIFactorLevel } from '../../../core/security/security.frontend.schemas.js';
+/**
+ * Shared props for all auth method components.
+ *
+ * Each method (password, magic link, passkey, SMS OTP, etc.) receives these props
+ * and handles its own flow internally — loading states, API calls, error display.
+ *
+ * The login page and MFA page iterate over available methods from the backend
+ * and render the appropriate component for each via AUTH_METHOD_COMPONENTS.
+ */
+export interface AuthMethodComponentProps {
+    sessionId: string;
+    email: string;
+    methodConfig: AvailableMethod;
+    onSuccess: (response: AuthenticationResponse) => void;
+    onError: (error: string) => void;
+    factorLevel: UIFactorLevel;
+    isLoading: boolean;
+    t: (key: string) => string;
+}
+export type AuthMethodComponent = React.ComponentType<AuthMethodComponentProps>;
+/**
+ * Registry of auth method → React component.
+ *
+ * Both the login page and MFA page use this map to render available methods.
+ * New methods are added by importing the component and registering it here.
+ * Methods not in this map are silently skipped.
+ */
+export declare const AUTH_METHOD_COMPONENTS: Partial<Record<AuthMethod, React.LazyExoticComponent<AuthMethodComponent> | AuthMethodComponent>>;
+/**
+ * Get the display order for method selection UI.
+ * Methods are shown in this priority order; unlisted methods appear last.
+ */
+export declare const AUTH_METHOD_DISPLAY_ORDER: readonly AuthMethod[];
+/**
+ * Sort available methods by display order.
+ */
+export declare function sortMethodsByDisplayOrder(methods: AvailableMethod[]): AvailableMethod[];
+//# sourceMappingURL=auth-method-components.d.ts.map

package/dist/esm/components/auth/methods/auth-method-components.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-method-components.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/auth-method-components.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAYjG;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,eAAe,CAAC;IAC9B,SAAS,EAAE,CAAC,QAAQ,EAAE,sBAAsB,KAAK,IAAI,CAAC;IACtD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,WAAW,EAAE,aAAa,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;AAEhF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC,CAAM,CAAC;AAe5I;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,UAAU,EAUjD,CAAC;AAEX;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAQvF"}

package/dist/esm/components/auth/methods/auth-method-components.js

@@ -0,0 +1,56 @@
+import { AuthMethod } from '@wildo-ai/saas-models';
+import { PasswordAuthMethod } from './PasswordAuthMethod.js';
+import { MagicLinkAuthMethod } from './MagicLinkAuthMethod.js';
+import { SmsOtpAuthMethod } from './SmsOtpAuthMethod.js';
+import { EmailOtpAuthMethod } from './EmailOtpAuthMethod.js';
+import { TotpAuthMethod } from './TotpAuthMethod.js';
+import { PasskeyAuthMethod } from './PasskeyAuthMethod.js';
+import { OrgSamlAuthMethod } from './OrgSamlAuthMethod.js';
+import { OrgOidcAuthMethod } from './OrgOidcAuthMethod.js';
+import { ExternalOAuth2AuthMethod } from './ExternalOAuth2AuthMethod.js';
+/**
+ * Registry of auth method → React component.
+ *
+ * Both the login page and MFA page use this map to render available methods.
+ * New methods are added by importing the component and registering it here.
+ * Methods not in this map are silently skipped.
+ */
+export const AUTH_METHOD_COMPONENTS = {};
+// Explicit registration — no side-effect loader. Import and assign here.
+AUTH_METHOD_COMPONENTS[AuthMethod.PASSWORD] = PasswordAuthMethod;
+AUTH_METHOD_COMPONENTS[AuthMethod.MAGIC_LINK] = MagicLinkAuthMethod;
+AUTH_METHOD_COMPONENTS[AuthMethod.SMS_OTP] = SmsOtpAuthMethod;
+AUTH_METHOD_COMPONENTS[AuthMethod.EMAIL_OTP] = EmailOtpAuthMethod;
+AUTH_METHOD_COMPONENTS[AuthMethod.TOTP] = TotpAuthMethod;
+AUTH_METHOD_COMPONENTS[AuthMethod.PASSKEY] = PasskeyAuthMethod;
+AUTH_METHOD_COMPONENTS[AuthMethod.ORG_SAML] = OrgSamlAuthMethod;
+AUTH_METHOD_COMPONENTS[AuthMethod.ORG_OPENID_CONNECT] = OrgOidcAuthMethod;
+AUTH_METHOD_COMPONENTS[AuthMethod.EXTERNAL_OAUTH2] = ExternalOAuth2AuthMethod;
+/**
+ * Get the display order for method selection UI.
+ * Methods are shown in this priority order; unlisted methods appear last.
+ */
+export const AUTH_METHOD_DISPLAY_ORDER = [
+    AuthMethod.ORG_SAML,
+    AuthMethod.ORG_OPENID_CONNECT,
+    AuthMethod.PASSWORD,
+    AuthMethod.PASSKEY,
+    AuthMethod.MAGIC_LINK,
+    AuthMethod.EXTERNAL_OAUTH2,
+    AuthMethod.SMS_OTP,
+    AuthMethod.EMAIL_OTP,
+    AuthMethod.TOTP,
+];
+/**
+ * Sort available methods by display order.
+ */
+export function sortMethodsByDisplayOrder(methods) {
+    return [...methods].sort((a, b) => {
+        const aIndex = AUTH_METHOD_DISPLAY_ORDER.indexOf(a.method);
+        const bIndex = AUTH_METHOD_DISPLAY_ORDER.indexOf(b.method);
+        const aOrder = aIndex === -1 ? AUTH_METHOD_DISPLAY_ORDER.length : aIndex;
+        const bOrder = bIndex === -1 ? AUTH_METHOD_DISPLAY_ORDER.length : bIndex;
+        return aOrder - bOrder;
+    });
+}
+//# sourceMappingURL=auth-method-components.js.map

package/dist/esm/components/auth/methods/auth-method-components.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-method-components.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/auth-method-components.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAqD,MAAM,uBAAuB,CAAC;AAGtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAwBtE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsG,EAAE,CAAC;AAE5I,yEAAyE;AAGzE,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAAC;AACjE,sBAAsB,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,mBAAmB,CAAC;AACpE,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,gBAAgB,CAAC;AAC9D,sBAAsB,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC;AAClE,sBAAsB,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;AACzD,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,iBAAiB,CAAC;AAC/D,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC;AAChE,sBAAsB,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,iBAAiB,CAAC;AAC1E,sBAAsB,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,wBAAwB,CAAC;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,kBAAkB;IAC7B,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,UAAU;IACrB,UAAU,CAAC,eAAe;IAC1B,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,SAAS;IACpB,UAAU,CAAC,IAAI;CACP,CAAC;AAEX;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAA0B;IAClE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACzE,OAAO,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_AuthCallback.d.ts

@@ -0,0 +1,23 @@
+import React from 'react';
+/**
+ * AuthPage_AuthCallback
+ *
+ * Handles the OAuth2 callback redirect from the backend.
+ * Flow: IdP -> Backend callback -> redirect to /auth/callback?code=xxx -> this page
+ *
+ * Thin page wrapper: extracts query params and delegates to Auth_AuthCallback
+ * (injectable preset component with i18n).
+ *
+ * [Capacitor] [OAuth2] [SAML]
+ * This route-based callback page works for web browsers. When running inside
+ * Ionic Capacitor, the backend's final redirect ({frontendUrl}/auth/callback?code=xxx)
+ * must be intercepted by the native app via deep links:
+ * - Configure Universal Links (iOS) / App Links (Android) for the frontend domain
+ * - Register App.addListener('appUrlOpen', (event) => { ... }) in the Capacitor app entry
+ * - Parse the `code` from the deep link URL and call handleOAuth2Callback(code) directly
+ * - This page still serves as the web fallback but is NOT used in the Capacitor flow;
+ *   the Capacitor deep link handler replaces it as the callback entry point
+ * - Same pattern applies to SAML POST-binding callbacks redirected via the backend
+ */
+export declare const AuthPage_AuthCallback: React.FC;
+//# sourceMappingURL=AuthPage_AuthCallback.d.ts.map

package/dist/esm/components/auth/pages/AuthPage_AuthCallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthPage_AuthCallback.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_AuthCallback.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAYzC,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_AuthCallback.js

@@ -0,0 +1,32 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { useSearchParams } from 'react-router-dom';
+import { PublicLayout_MainContainer } from '../../../components/app/PublicLayout_MainContainer.js';
+import { Auth_AuthCallback } from '../../../components/auth/Auth_AuthCallback.js';
+/**
+ * AuthPage_AuthCallback
+ *
+ * Handles the OAuth2 callback redirect from the backend.
+ * Flow: IdP -> Backend callback -> redirect to /auth/callback?code=xxx -> this page
+ *
+ * Thin page wrapper: extracts query params and delegates to Auth_AuthCallback
+ * (injectable preset component with i18n).
+ *
+ * [Capacitor] [OAuth2] [SAML]
+ * This route-based callback page works for web browsers. When running inside
+ * Ionic Capacitor, the backend's final redirect ({frontendUrl}/auth/callback?code=xxx)
+ * must be intercepted by the native app via deep links:
+ * - Configure Universal Links (iOS) / App Links (Android) for the frontend domain
+ * - Register App.addListener('appUrlOpen', (event) => { ... }) in the Capacitor app entry
+ * - Parse the `code` from the deep link URL and call handleOAuth2Callback(code) directly
+ * - This page still serves as the web fallback but is NOT used in the Capacitor flow;
+ *   the Capacitor deep link handler replaces it as the callback entry point
+ * - Same pattern applies to SAML POST-binding callbacks redirected via the backend
+ */
+export const AuthPage_AuthCallback = () => {
+    const [searchParams] = useSearchParams();
+    const code = searchParams.get('code');
+    const errorParam = searchParams.get('error');
+    const errorDescription = searchParams.get('error_description');
+    return (_jsx(PublicLayout_MainContainer, { useCardLayout: true, children: _jsx(Auth_AuthCallback, { code: code, errorParam: errorParam, errorDescription: errorDescription }) }));
+};
+//# sourceMappingURL=AuthPage_AuthCallback.js.map