@wildo-ai/saas-frontend-lib 1.0.1

package/dist/esm/components/auth/Auth_Main.js

@@ -0,0 +1,183 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useMemo, useState, useCallback, useEffect } from 'react';
+import { Navigate, useLocation, useNavigate } from 'react-router-dom';
+import { FrontendComponentType, UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { ValidationMode } from '@wildo-ai/zod-decorators';
+import { AuthMethod, AuthSessionPurpose, AuthIdentifyFormDtoSchema, } from '@wildo-ai/saas-models';
+import { useUserOrgs } from '../../core/security/useUserOrgs.js';
+import { useResolvedAuthConfig } from '../../core/security/useResolvedAuthConfig.js';
+import { useI18n } from '../../core/i18n/useI18n.js';
+import { AutomatedForm } from '../../components/form/automated/AutomatedForm.js';
+import { Button, ButtonVariants_Variant } from '../../components/actions/button.js';
+import { FormLayout } from '../../components/resources/skeleton/FormLayout.js';
+import { FormField } from '../../components/form/automated/FormField.js';
+import { SubmitButton } from '../../components/resources/skeleton/SubmitButton.js';
+import { Heading } from '../../components/typography/heading.js';
+import { Text } from '../../components/typography/text.js';
+import { Link } from '../../components/typography/link.js';
+import { Alert, AlertDescription } from '../../components/overlays/containers/alert.js';
+import { CommonRoutePaths } from '../../core/runtime/routes.frontend.definitions.js';
+import { LoggerFrontendService } from '../../core/monitoring/logger.frontend.service.js';
+import { appendAuthRedirectToPath, extractAuthRedirectFromSearch, resolvePostAuthRedirect, } from '../../core/security/auth-redirect.frontend.utils.js';
+import { OAuthProvidersSection } from '../../components/auth/utils/OAuthProvidersSection.js';
+import { AUTH_METHOD_COMPONENTS, sortMethodsByDisplayOrder } from '../../components/auth/methods/auth-method-components.js';
+import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
+import { CorePresetNames } from '@wildo-ai/presets-components-models';
+const logger = LoggerFrontendService.getLogger();
+const logDebug = logger.debugByType('Auth_Main');
+logger.setDebugTypeLogging('Auth_Main', false);
+/**
+ * Self-sufficient template for the email identification form.
+ * Reads auth error from `useUserOrgs()`, labels from `useI18n()`.
+ */
+const IdentifyFormTemplate = () => {
+    const { auth } = useUserOrgs();
+    const { tComponent } = useI18n({
+        component: FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,
+    });
+    const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);
+    return (_jsxs(FormLayout, { children: [_jsx(FormField, { name: "email" }), auth.error && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: auth.error }) })), _jsx(SubmitButton, { label: t(UserAuthLabel.CONTINUE), submittingLabel: "\u2026", fullWidth: true })] }));
+};
+/**
+ * Method display name mapping for selection buttons.
+ * Uses i18n labels for method names shown in the "Or sign in with" section.
+ */
+const METHOD_LABEL_MAP = {
+    [AuthMethod.PASSWORD]: UserAuthLabel.METHOD_PASSWORD,
+    [AuthMethod.MAGIC_LINK]: UserAuthLabel.METHOD_MAGIC_LINK,
+    [AuthMethod.PASSKEY]: UserAuthLabel.METHOD_PASSKEY,
+    [AuthMethod.SMS_OTP]: UserAuthLabel.METHOD_SMS_OTP,
+    [AuthMethod.ORG_SAML]: UserAuthLabel.METHOD_ORG_SSO,
+    [AuthMethod.ORG_OPENID_CONNECT]: UserAuthLabel.METHOD_ORG_SSO,
+    [AuthMethod.EXTERNAL_OAUTH2]: UserAuthLabel.METHOD_EXTERNAL_OAUTH2,
+};
+export const PublicLayoutPreset_UserAuth_Default = ({}) => {
+    const { auth, identifyByEmail, initiateOAuth2Login } = useUserOrgs();
+    const resolvedAuth = useResolvedAuthConfig();
+    const { tComponent, isReady } = useI18n({
+        component: FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,
+    });
+    const navigate = useNavigate();
+    const location = useLocation();
+    const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);
+    const publicRoutes = CommonRoutePaths;
+    const postAuthRedirect = useMemo(() => resolvePostAuthRedirect(location.search), [location.search]);
+    const authRedirectTarget = useMemo(() => extractAuthRedirectFromSearch(location.search), [location.search]);
+    const redirectedAuthError = useMemo(() => {
+        const searchParams = new URLSearchParams(location.search);
+        return searchParams.get('reason') ?? searchParams.get('error');
+    }, [location.search]);
+    const passwordLostHref = useMemo(() => appendAuthRedirectToPath(publicRoutes.passwordLost, authRedirectTarget), [authRedirectTarget, publicRoutes.passwordLost]);
+    const registerHref = useMemo(() => appendAuthRedirectToPath(publicRoutes.register, authRedirectTarget), [authRedirectTarget, publicRoutes.register]);
+    const [activeMethod, setActiveMethod] = useState(null);
+    useEffect(() => {
+        if (auth.mfaRequired && auth.mfaSessionId) {
+            const hasUsableMethods = auth.usableSecondFactorMethods.length > 0;
+            if (!hasUsableMethods) {
+                navigate(appendAuthRedirectToPath(CommonRoutePaths.enrollmentRequired, authRedirectTarget), { replace: true });
+            }
+            else {
+                const email = auth.identification?.email || '';
+                navigate(appendAuthRedirectToPath(`${CommonRoutePaths.mfaChallenge}?sessionId=${auth.mfaSessionId}&email=${encodeURIComponent(email)}`, authRedirectTarget), { replace: true });
+            }
+        }
+    }, [auth.mfaRequired, auth.mfaSessionId, auth.usableSecondFactorMethods, navigate, auth.identification?.email, authRedirectTarget]);
+    const enabledSSOProviders = useMemo(() => {
+        const ssoProviders = resolvedAuth.globalAuth?.ssoProviders;
+        if (!ssoProviders)
+            return [];
+        return Object.entries(ssoProviders)
+            .filter(([, config]) => config.enabled)
+            .map(([key, config]) => ({
+            key,
+            providerRef: config.providerRef,
+            displayName: config.displayName,
+        }));
+    }, [resolvedAuth.globalAuth?.ssoProviders]);
+    const hasIdentification = !!auth.identification;
+    const sessionId = auth.identification?.sessionId || '';
+    const email = auth.identification?.email || '';
+    const availableFirstFactorMethods = useMemo(() => {
+        if (!hasIdentification || !auth.identification?.userExists)
+            return [];
+        const methods = auth.identification?.firstFactorMethods || [];
+        return sortMethodsByDisplayOrder(methods.filter((m) => AUTH_METHOD_COMPONENTS[m.method]));
+    }, [hasIdentification, auth.identification]);
+    const defaultMethod = useMemo(() => {
+        if (availableFirstFactorMethods.length === 0)
+            return null;
+        const defaultFromBackend = auth.identification?.defaultFirstFactorMethod;
+        if (defaultFromBackend && AUTH_METHOD_COMPONENTS[defaultFromBackend])
+            return defaultFromBackend;
+        return availableFirstFactorMethods[0].method;
+    }, [availableFirstFactorMethods, auth.identification?.defaultFirstFactorMethod]);
+    const currentActiveMethod = activeMethod || defaultMethod;
+    const alternativeMethods = availableFirstFactorMethods.filter((m) => m.method !== currentActiveMethod);
+    const handleOAuth2Click = async (providerRef) => {
+        try {
+            await initiateOAuth2Login(providerRef, authRedirectTarget);
+        }
+        catch {
+            // Error is already handled in AuthSessionContext
+        }
+    };
+    const handleIdentify = async (data) => {
+        await identifyByEmail(data.email);
+    };
+    const handleFirstFactorSuccess = useCallback((_response) => {
+        // Token storage and MFA redirect are handled by AuthSessionContext
+        // and the authenticateWithPassword flow respectively.
+        // Nothing to do here — the auth state update triggers re-renders
+        // and the MFA redirect is handled at the page level.
+    }, []);
+    const handleFirstFactorError = useCallback((_error) => {
+        // Errors are displayed within each method component
+    }, []);
+    const isPasswordEnabled = resolvedAuth.userTypeAuth?.authMethodsEnabled?.[AuthMethod.PASSWORD] !== false;
+    const hasSSOProviders = enabledSSOProviders.length > 0;
+    const showIdentifyForm = !hasIdentification || !auth.identification?.userExists;
+    const showPreIdentifyOAuth = hasSSOProviders && showIdentifyForm;
+    const showDivider = showPreIdentifyOAuth && isPasswordEnabled;
+    useEffect(() => {
+        logDebug(`Render isReady=${isReady} accessToken=${auth.accessToken ? 'yes' : 'no'} authLoading=${auth.isLoading ? 'yes' : 'no'} identification=${hasIdentification ? 'yes' : 'no'} showIdentify=${showIdentifyForm ? 'yes' : 'no'} activeMethod=${currentActiveMethod ?? 'none'}`);
+    }, [isReady, auth.accessToken, auth.isLoading, hasIdentification, showIdentifyForm, currentActiveMethod]);
+    if (auth.accessToken) {
+        return _jsx(Navigate, { to: postAuthRedirect, replace: true });
+    }
+    if (!isReady)
+        return null;
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "text-center space-y-item-xs mb-group", children: [_jsx(Heading, { children: auth.purpose === AuthSessionPurpose.REAUTH
+                            ? t(UserAuthLabel.REAUTH_TITLE)
+                            : t(UserAuthLabel.TITLE) }), _jsx(Text, { className: "max-w-sm mx-auto", children: auth.purpose === AuthSessionPurpose.REAUTH
+                            ? t(UserAuthLabel.REAUTH_SUB_TITLE)
+                            : t(UserAuthLabel.SUB_TITLE) })] }), showPreIdentifyOAuth && (_jsx(OAuthProvidersSection, { providers: enabledSSOProviders, onProviderClick: handleOAuth2Click, isLoading: auth.isLoading, continueWithLabel: t(UserAuthLabel.CONTINUE_WITH), dividerLabel: t(UserAuthLabel.DIVIDER_OR), showDivider: showDivider })), !auth.error && redirectedAuthError && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: redirectedAuthError }) })), showIdentifyForm && isPasswordEnabled && (_jsx(AutomatedForm, { schema: AuthIdentifyFormDtoSchema, defaultValues: { email: '' }, onSubmit: handleIdentify, validationMode: ValidationMode.ON_BLUR, disabled: auth.isLoading, labels: {
+                    fields: { email: t(UserAuthLabel.EMAIL_ADDRESS) },
+                }, layoutTemplate: IdentifyFormTemplate }, "identify")), currentActiveMethod && !showIdentifyForm && (() => {
+                const MethodComponent = AUTH_METHOD_COMPONENTS[currentActiveMethod];
+                if (!MethodComponent)
+                    return null;
+                const methodConfig = availableFirstFactorMethods.find((m) => m.method === currentActiveMethod);
+                if (!methodConfig)
+                    return null;
+                const props = {
+                    sessionId,
+                    email,
+                    methodConfig,
+                    onSuccess: handleFirstFactorSuccess,
+                    onError: handleFirstFactorError,
+                    factorLevel: 'first',
+                    isLoading: auth.isLoading,
+                    t,
+                };
+                return _jsx(MethodComponent, { ...props });
+            })(), alternativeMethods.length > 0 && !showIdentifyForm && (_jsxs(_Fragment, { children: [_jsxs("div", { className: "relative my-group", children: [_jsx("div", { className: "absolute inset-0 flex items-center", children: _jsx("div", { className: "w-full border-t border-border" }) }), _jsx("div", { className: "relative flex justify-center text-xs uppercase", children: _jsx("span", { className: "bg-card px-element text-muted-foreground", children: t(UserAuthLabel.OTHER_METHODS_DIVIDER) }) })] }), _jsx("div", { className: "space-y-item", children: alternativeMethods.map((method) => {
+                            const labelKey = METHOD_LABEL_MAP[method.method];
+                            return (_jsx(Button, { variant: ButtonVariants_Variant.OUTLINE, className: "w-full", onClick: () => setActiveMethod(method.method), disabled: auth.isLoading, children: labelKey ? t(labelKey) : method.method }, method.method));
+                        }) })] })), !isPasswordEnabled && !hasIdentification && auth.error && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: auth.error }) })), _jsxs("div", { className: "text-center space-y-item", children: [hasIdentification && auth.identification?.userExists && (_jsx(Text, { children: _jsx(Link, { href: passwordLostHref, children: t(UserAuthLabel.FORGOT_PASSWORD) }) })), auth.purpose !== AuthSessionPurpose.REAUTH && (_jsxs(Text, { children: [t(UserAuthLabel.NO_ACCOUNT), ' ', _jsx(Link, { href: registerHref, children: t(UserAuthLabel.SIGNUP_LINK) })] }))] })] }));
+};
+export function Auth_Main({ preset = CorePresetNames.DEFAULT, ...props }) {
+    const Component = createComponentResolver(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, 'Auth_Main')(preset);
+    logDebug(`Resolve wrapper preset=${preset} component=${Component.displayName ?? Component.name ?? 'anonymous'}`);
+    return _jsx(Component, { ...props });
+}
+//# sourceMappingURL=Auth_Main.js.map

package/dist/esm/components/auth/Auth_Main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth_Main.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_Main.tsx"],"names":[],"mappings":";AACA,OAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,yBAAyB,GAI1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAC5F,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAExE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iEAAiE,CAAC;AACxG,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAiC,MAAM,oEAAoE,CAAC;AAGtK,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAA;AACzH,OAAO,EAAG,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAEtE,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;AACjD,MAAM,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAE/C;;;GAGG;AACH,MAAM,oBAAoB,GAAa,GAAG,EAAE;IAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC7B,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAE3F,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAC,OAAO,GAAG,EAEzB,IAAI,CAAC,KAAK,IAAI,CACb,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,IAAI,CAAC,KAAK,GAAoB,GAC3C,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,EAChC,eAAe,EAAC,QAAG,EACnB,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAMF;;;GAGG;AACH,MAAM,gBAAgB,GAA+C;IACnE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,eAAe;IACpD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,iBAAiB;IACxD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc;IAClD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc;IAClD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,cAAc;IACnD,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,cAAc;IAC7D,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,sBAAsB;CACnE,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,EAA4C,EAAqB,EAAE;IACrH,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,mBAAmB,EAAE,GAAG,WAAW,EAAE,CAAC;IACrE,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,gBAAgB,CAAC;IACtC,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,kBAAkB,GAAG,OAAO,CAChC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE;QACvC,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACtB,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,wBAAwB,CAAC,YAAY,CAAC,YAAY,EAAE,kBAAkB,CAAC,EAC7E,CAAC,kBAAkB,EAAE,YAAY,CAAC,YAAY,CAAC,CAChD,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAC1B,GAAG,EAAE,CAAC,wBAAwB,CAAC,YAAY,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EACzE,CAAC,kBAAkB,EAAE,YAAY,CAAC,QAAQ,CAAC,CAC5C,CAAC;IAEF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAE1E,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,QAAQ,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACjH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC/C,QAAQ,CACN,wBAAwB,CACtB,GAAG,gBAAgB,CAAC,YAAY,cAAc,IAAI,CAAC,YAAY,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,EACpG,kBAAkB,CACnB,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,yBAAyB,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEpI,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE;QACvC,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC;QAC3D,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC,CAAC;IACR,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IAE5C,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,SAAS,IAAI,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;IAE/C,MAAM,2BAA2B,GAAsB,OAAO,CAAC,GAAG,EAAE;QAClE,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU;YAAE,OAAO,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,kBAAkB,IAAI,EAAE,CAAC;QAC9D,OAAO,yBAAyB,CAC9B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAE7C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;QACjC,IAAI,2BAA2B,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,MAAM,kBAAkB,GAAG,IAAI,CAAC,cAAc,EAAE,wBAAkD,CAAC;QACnG,IAAI,kBAAkB,IAAI,sBAAsB,CAAC,kBAAkB,CAAC;YAAE,OAAO,kBAAkB,CAAC;QAChG,OAAO,2BAA2B,CAAC,CAAC,CAAC,CAAC,MAAoB,CAAC;IAC7D,CAAC,EAAE,CAAC,2BAA2B,EAAE,IAAI,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEjF,MAAM,mBAAmB,GAAG,YAAY,IAAI,aAAa,CAAC;IAC1D,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,MAAM,CAC3D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CACxC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,EAAE,WAAmB,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,IAAyB,EAAE,EAAE;QACzD,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE;QACjF,mEAAmE;QACnE,sDAAsD;QACtD,iEAAiE;QACjE,qDAAqD;IACvD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,EAAE;QAC5D,oDAAoD;IACtD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,iBAAiB,GAAG,YAAY,CAAC,YAAY,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;IACzG,MAAM,eAAe,GAAG,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC;IAChF,MAAM,oBAAoB,GAAG,eAAe,IAAI,gBAAgB,CAAC;IACjE,MAAM,WAAW,GAAG,oBAAoB,IAAI,iBAAiB,CAAC;IAE9D,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CACN,kBAAkB,OAAO,gBAAgB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,gBAAgB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,mBAAmB,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,iBAAiB,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,iBAAiB,mBAAmB,IAAI,MAAM,EAAE,CACzQ,CAAC;IACJ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAE1G,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cACL,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM;4BACzC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC;4BAC/B,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAClB,EACV,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAC/B,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM;4BACzC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC;4BACnC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,GACzB,IACH,EAEL,oBAAoB,IAAI,CACvB,KAAC,qBAAqB,IACpB,SAAS,EAAE,mBAAmB,EAC9B,eAAe,EAAE,iBAAiB,EAClC,SAAS,EAAE,IAAI,CAAC,SAAS,EACzB,iBAAiB,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,EACjD,YAAY,EAAE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,EACzC,WAAW,EAAE,WAAW,GACxB,CACH,EAEA,CAAC,IAAI,CAAC,KAAK,IAAI,mBAAmB,IAAI,CACrC,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,mBAAmB,GAAoB,GACpD,CACT,EAGA,gBAAgB,IAAI,iBAAiB,IAAI,CACxC,KAAC,aAAa,IAEZ,MAAM,EAAE,yBAAyB,EACjC,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAC5B,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,IAAI,CAAC,SAAS,EACxB,MAAM,EAAE;oBACN,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE;iBAClD,EACD,cAAc,EAAE,oBAAoB,IAThC,UAAU,CAUd,CACH,EAGA,mBAAmB,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,eAAe,GAAG,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;gBACpE,IAAI,CAAC,eAAe;oBAAE,OAAO,IAAI,CAAC;gBAClC,MAAM,YAAY,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;gBAC/F,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAE/B,MAAM,KAAK,GAA6B;oBACtC,SAAS;oBACT,KAAK;oBACL,YAAY;oBACZ,SAAS,EAAE,wBAAwB;oBACnC,OAAO,EAAE,sBAAsB;oBAC/B,WAAW,EAAE,OAAO;oBACpB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,CAAC;iBACF,CAAC;gBAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;YACxC,CAAC,CAAC,EAAE,EAGH,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CACrD,8BACE,eAAK,SAAS,EAAC,mBAAmB,aAChC,cAAK,SAAS,EAAC,oCAAoC,YACjD,cAAK,SAAS,EAAC,+BAA+B,GAAG,GAC7C,EACN,cAAK,SAAS,EAAC,gDAAgD,YAC7D,eAAM,SAAS,EAAC,0CAA0C,YACvD,CAAC,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAClC,GACH,IACF,EAEN,cAAK,SAAS,EAAC,cAAc,YAC1B,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;4BACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAoB,CAAC,CAAC;4BAC/D,OAAO,CACL,KAAC,MAAM,IAEL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,MAAoB,CAAC,EAC3D,QAAQ,EAAE,IAAI,CAAC,SAAS,YAEvB,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IANlC,MAAM,CAAC,MAAM,CAOX,CACV,CAAC;wBACJ,CAAC,CAAC,GACE,IACL,CACJ,EAEA,CAAC,iBAAiB,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,CACzD,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,IAAI,CAAC,KAAK,GAAoB,GAC3C,CACT,EAED,eAAK,SAAS,EAAC,0BAA0B,aACtC,iBAAiB,IAAI,IAAI,CAAC,cAAc,EAAE,UAAU,IAAI,CACvD,KAAC,IAAI,cACH,KAAC,IAAI,IAAC,IAAI,EAAE,gBAAgB,YAAG,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,GAAQ,GAClE,CACR,EAEA,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM,IAAI,CAC7C,MAAC,IAAI,eACF,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,GAAG,EACjC,KAAC,IAAI,IAAC,IAAI,EAAE,YAAY,YAAG,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,GAAQ,IAC1D,CACR,IACG,IACL,CACJ,CAAC;AACJ,CAAC,CAAC;AAGF,MAAM,UAAU,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAmE;IACvI,MAAM,SAAS,GAAG,uBAAuB,CAA2C,qBAAqB,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;IACzJ,QAAQ,CAAC,0BAA0B,MAAM,cAAc,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IACjH,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC"}

package/dist/esm/components/auth/Auth_MfaChallenge.d.ts

@@ -0,0 +1,18 @@
+import React from 'react';
+import { ComponentPresetProps } from '../../core/components-registry/component-registry.frontend.schemas.js';
+export interface PublicLayoutPreset_MfaChallenge_DefaultProps {
+    sessionId?: string | null;
+    sessionEmail?: string;
+}
+/**
+ * MFA challenge default preset.
+ *
+ * Generic MFA challenge component. Accepts `sessionId` prop.
+ * Fetches available second-factor methods, renders the appropriate
+ * method component for each via AUTH_METHOD_COMPONENTS.
+ *
+ * All user-facing strings are i18n-driven via MfaChallengeLabel.
+ */
+export declare const PublicLayoutPreset_MfaChallenge_Default: ({ sessionId, sessionEmail }: PublicLayoutPreset_MfaChallenge_DefaultProps) => React.JSX.Element;
+export declare function Auth_MfaChallenge({ preset, ...props }: PublicLayoutPreset_MfaChallenge_DefaultProps & ComponentPresetProps): React.JSX.Element;
+//# sourceMappingURL=Auth_MfaChallenge.d.ts.map

package/dist/esm/components/auth/Auth_MfaChallenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth_MfaChallenge.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_MfaChallenge.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAoBjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAKxH,MAAM,WAAW,4CAA4C;IAC3D,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AASD;;;;;;;;GAQG;AACH,eAAO,MAAM,uCAAuC,GAAI,6BAAkC,4CAA4C,KAAG,KAAK,CAAC,GAAG,CAAC,OAkLlJ,CAAC;AAGF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,4CAA4C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGxK"}

package/dist/esm/components/auth/Auth_MfaChallenge.js

@@ -0,0 +1,131 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { Navigate, useLocation } from 'react-router-dom';
+import { FrontendComponentType, MfaChallengeLabel, ButtonSize, CorePresetNames } from '@wildo-ai/presets-components-models';
+import { AuthMethod } from '@wildo-ai/saas-models';
+import { useAuthSession } from '../../core/security/useAuthSession.js';
+import { useI18n } from '../../core/i18n/useI18n.js';
+import { CommonRoutePaths } from '../../core/runtime/routes.frontend.definitions.js';
+import { Button, ButtonVariants_Variant } from '../../components/actions/button.js';
+import { Heading } from '../../components/typography/heading.js';
+import { Text } from '../../components/typography/text.js';
+import { Link } from '../../components/typography/link.js';
+import { Alert, AlertDescription } from '../../components/overlays/containers/alert.js';
+import { AUTH_METHOD_COMPONENTS, sortMethodsByDisplayOrder } from '../../components/auth/methods/auth-method-components.js';
+import { appendAuthRedirectToPath, extractAuthRedirectFromSearch, resolvePostAuthRedirect, } from '../../core/security/auth-redirect.frontend.utils.js';
+import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
+import { LoadingSpinner } from '../../components/feedback/loading-spinner.js';
+const MFA_METHOD_LABEL_MAP = {
+    [AuthMethod.SMS_OTP]: MfaChallengeLabel.SMS_OTP_TITLE,
+    [AuthMethod.EMAIL_OTP]: MfaChallengeLabel.EMAIL_OTP_TITLE,
+    [AuthMethod.TOTP]: MfaChallengeLabel.TOTP_TITLE,
+    [AuthMethod.PASSKEY]: MfaChallengeLabel.PASSKEY_TITLE,
+};
+/**
+ * MFA challenge default preset.
+ *
+ * Generic MFA challenge component. Accepts `sessionId` prop.
+ * Fetches available second-factor methods, renders the appropriate
+ * method component for each via AUTH_METHOD_COMPONENTS.
+ *
+ * All user-facing strings are i18n-driven via MfaChallengeLabel.
+ */
+export const PublicLayoutPreset_MfaChallenge_Default = ({ sessionId, sessionEmail = '' }) => {
+    const { getSessionState, auth } = useAuthSession();
+    const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE });
+    const location = useLocation();
+    const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, key);
+    const redirectTarget = useMemo(() => extractAuthRedirectFromSearch(location.search), [location.search]);
+    const loginPath = useMemo(() => appendAuthRedirectToPath(CommonRoutePaths.login, redirectTarget), [redirectTarget]);
+    const postAuthRedirect = useMemo(() => resolvePostAuthRedirect(location.search), [location.search]);
+    const [availableMethods, setAvailableMethods] = useState([]);
+    const [selectedMethod, setSelectedMethod] = useState(null);
+    const [error, setError] = useState(null);
+    const [pageError, setPageError] = useState(null);
+    const fetchedRef = useRef(false);
+    useEffect(() => {
+        if (fetchedRef.current || !sessionId)
+            return;
+        fetchedRef.current = true;
+        getSessionState(sessionId)
+            .then((session) => {
+            const usableSet = new Set(session.usableSecondFactorMethods || []);
+            const allMethods = session.availableSecondFactorMethods || [];
+            const secondFactorMethods = (usableSet.size > 0
+                ? allMethods.filter((m) => usableSet.has(m.method))
+                : allMethods).filter((m) => AUTH_METHOD_COMPONENTS[m.method]);
+            if (secondFactorMethods.length === 0) {
+                setPageError('no_methods');
+                return;
+            }
+            const sorted = sortMethodsByDisplayOrder(secondFactorMethods);
+            setAvailableMethods(sorted);
+            if (sorted.length === 1) {
+                setSelectedMethod(sorted[0].method);
+            }
+        })
+            .catch((e) => {
+            const status = e?.response?.status;
+            if (status === 404 || status === 410) {
+                setPageError('expired');
+            }
+            else {
+                setPageError('generic');
+            }
+        });
+    }, [sessionId, getSessionState]);
+    const handleSuccess = useCallback((_response) => {
+        // Token storage handled by AuthSessionContext — auth state change triggers redirect
+    }, []);
+    const handleError = useCallback((errorMsg) => {
+        setError(errorMsg);
+    }, []);
+    const handleChangeMethod = useCallback(() => {
+        setSelectedMethod(null);
+        setError(null);
+    }, []);
+    if (auth.accessToken && !auth.isLoading) {
+        return _jsx(Navigate, { to: postAuthRedirect, replace: true });
+    }
+    if (!isReady)
+        return null;
+    if (!sessionId || pageError) {
+        const errorLabelMap = {
+            expired: MfaChallengeLabel.ERROR_EXPIRED,
+            no_methods: MfaChallengeLabel.ERROR_NO_METHODS,
+            generic: MfaChallengeLabel.ERROR_GENERIC,
+        };
+        const errorLabel = pageError ? errorLabelMap[pageError] : MfaChallengeLabel.ERROR_GENERIC;
+        return (_jsxs(_Fragment, { children: [_jsx("div", { className: "text-center space-y-item-xs mb-group", children: _jsx(Heading, { children: t(MfaChallengeLabel.TITLE) }) }), _jsx(Alert, { variant: pageError === 'no_methods' ? 'default' : 'destructive', children: _jsx(AlertDescription, { children: t(errorLabel) }) }), _jsx("div", { className: "text-center mt-group", children: _jsx(Link, { href: loginPath, children: t(MfaChallengeLabel.BACK_TO_LOGIN) }) })] }));
+    }
+    if (availableMethods.length === 0) {
+        return (_jsxs("div", { role: "status", "aria-live": "polite", className: "text-center space-y-item-xs py-section", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element", "aria-hidden": "true", children: _jsx(LoadingSpinner, { size: 24, className: "text-primary" }) }), _jsx(Text, { className: "text-muted-foreground", children: t(MfaChallengeLabel.VERIFYING) })] }));
+    }
+    return (_jsxs("div", { className: "space-y-group", children: [_jsxs("div", { className: "text-center space-y-item-xs", children: [_jsx(Heading, { children: t(MfaChallengeLabel.TITLE) }), _jsx(Text, { className: "max-w-sm mx-auto text-muted-foreground", children: t(MfaChallengeLabel.SUB_TITLE) })] }), !selectedMethod && availableMethods.length > 1 && (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm font-medium", children: t(MfaChallengeLabel.SELECT_METHOD) }), availableMethods.map((method) => {
+                        const labelKey = MFA_METHOD_LABEL_MAP[method.method];
+                        return (_jsx(Button, { variant: ButtonVariants_Variant.OUTLINE, className: "w-full justify-start", onClick: () => setSelectedMethod(method.method), children: labelKey ? t(labelKey) : method.method }, method.method));
+                    })] })), selectedMethod && (() => {
+                const MethodComponent = AUTH_METHOD_COMPONENTS[selectedMethod];
+                if (!MethodComponent)
+                    return null;
+                const methodConfig = availableMethods.find((m) => m.method === selectedMethod);
+                if (!methodConfig)
+                    return null;
+                const props = {
+                    sessionId: sessionId,
+                    email: sessionEmail,
+                    methodConfig,
+                    onSuccess: handleSuccess,
+                    onError: handleError,
+                    factorLevel: 'second',
+                    isLoading: auth.isLoading,
+                    t,
+                };
+                return _jsx(MethodComponent, { ...props });
+            })(), error && !selectedMethod && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) })), selectedMethod && availableMethods.length > 1 && (_jsx("div", { className: "text-center", children: _jsx(Button, { variant: ButtonVariants_Variant.GHOST, size: ButtonSize.SM, onClick: handleChangeMethod, children: t(MfaChallengeLabel.CHANGE_METHOD) }) })), _jsx("div", { className: "text-center", children: _jsx(Link, { href: loginPath, children: t(MfaChallengeLabel.BACK_TO_LOGIN) }) })] }));
+};
+export function Auth_MfaChallenge({ preset = CorePresetNames.DEFAULT, ...props }) {
+    const Component = createComponentResolver(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, 'Auth_MfaChallenge')(preset);
+    return _jsx(Component, { ...props });
+}
+//# sourceMappingURL=Auth_MfaChallenge.js.map

package/dist/esm/components/auth/Auth_MfaChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth_MfaChallenge.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_MfaChallenge.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC5H,OAAO,EAAE,UAAU,EAAqD,MAAM,uBAAuB,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAiC,MAAM,oEAAoE,CAAC;AAEtK,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAGxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAQzF,MAAM,oBAAoB,GAAmD;IAC3E,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,aAAa;IACrD,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,eAAe;IACzD,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,UAAU;IAC/C,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,aAAa;CACtD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,EAAE,SAAS,EAAE,YAAY,GAAG,EAAE,EAAgD,EAAqB,EAAE;IAC3J,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;IACnD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC3G,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,EACtE,CAAC,cAAc,CAAC,CACjB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAC9E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,SAAS;YAAE,OAAO;QAC7C,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAE1B,eAAe,CAAC,SAAS,CAAC;aACvB,IAAI,CAAC,CAAC,OAAY,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;YAC3E,MAAM,UAAU,GAAsB,OAAO,CAAC,4BAA4B,IAAI,EAAE,CAAC;YACjF,MAAM,mBAAmB,GAAsB,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;gBAChE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACpE,CAAC,CAAC,UAAU,CACb,CAAC,MAAM,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CAAC;YAEjF,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;YAC9D,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAE5B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC;YACnC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAEjC,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE;QACtE,oFAAoF;IACtF,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,QAAgB,EAAE,EAAE;QACnD,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAsC;YACvD,OAAO,EAAE,iBAAiB,CAAC,aAAa;YACxC,UAAU,EAAE,iBAAiB,CAAC,gBAAgB;YAC9C,OAAO,EAAE,iBAAiB,CAAC,aAAa;SACzC,CAAC;QACF,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC;QAE1F,OAAO,CACL,8BACE,cAAK,SAAS,EAAC,sCAAsC,YACnD,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,GAC3C,EACN,KAAC,KAAK,IAAC,OAAO,EAAE,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,YACpE,KAAC,gBAAgB,cAAE,CAAC,CAAC,UAAU,CAAC,GAAoB,GAC9C,EACR,cAAK,SAAS,EAAC,sBAAsB,YACnC,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAQ,GAC9D,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,CACL,eAAK,IAAI,EAAC,QAAQ,eAAW,QAAQ,EAAC,SAAS,EAAC,wCAAwC,aACtF,cAAK,SAAS,EAAC,0FAA0F,iBAAa,MAAM,YAC1H,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,cAAc,GAAG,GACjD,EACN,KAAC,IAAI,IAAC,SAAS,EAAC,uBAAuB,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IAC3E,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,eAAe,aAC5B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,EAC/C,KAAC,IAAI,IAAC,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IAC5F,EAEL,CAAC,cAAc,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CACjD,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAQ,EAChF,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;wBAC/B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAoB,CAAC,CAAC;wBACnE,OAAO,CACL,KAAC,MAAM,IAEL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,sBAAsB,EAChC,OAAO,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAoB,CAAC,YAE5D,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IALlC,MAAM,CAAC,MAAM,CAMX,CACV,CAAC;oBACJ,CAAC,CAAC,IACE,CACP,EAEA,cAAc,IAAI,CAAC,GAAG,EAAE;gBACvB,MAAM,eAAe,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;gBAC/D,IAAI,CAAC,eAAe;oBAAE,OAAO,IAAI,CAAC;gBAClC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;gBAC/E,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAE/B,MAAM,KAAK,GAA6B;oBACtC,SAAS,EAAE,SAAU;oBACrB,KAAK,EAAE,YAAY;oBACnB,YAAY;oBACZ,SAAS,EAAE,aAAa;oBACxB,OAAO,EAAE,WAAW;oBACpB,WAAW,EAAE,QAAQ;oBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,CAAC;iBACF,CAAC;gBAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;YACxC,CAAC,CAAC,EAAE,EAEH,KAAK,IAAI,CAAC,cAAc,IAAI,CAC3B,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAEA,cAAc,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAChD,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,kBAAkB,YAC5F,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAC5B,GACL,CACP,EAED,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAQ,GAC9D,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAGF,MAAM,UAAU,iBAAiB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAuE;IACnJ,MAAM,SAAS,GAAG,uBAAuB,CAA+C,qBAAqB,CAAC,4BAA4B,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;IACzK,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC"}

package/dist/esm/components/auth/Auth_OneOffSession.d.ts

@@ -0,0 +1,19 @@
+import React from 'react';
+import { ComponentPresetProps } from '../../core/components-registry/component-registry.frontend.schemas.js';
+export interface PublicLayoutPreset_OneOffSession_DefaultProps {
+    token?: string;
+}
+/**
+ * W7.3b: One-off session exchange default preset.
+ *
+ * Follows the same pattern as Auth_ConfirmEmail:
+ * extracts the consumable token, exchanges it via handleOneOffTokenExchange,
+ * and redirects to the target page on success (resolved from tokenType + targeting),
+ * or home as fallback.
+ *
+ * Guards against same-tab SPA navigation (storage must be ephemeral).
+ * All user-facing strings are i18n-driven via OneOffSessionLabel.
+ */
+export declare const PublicLayoutPreset_OneOffSession_Default: ({ token }: PublicLayoutPreset_OneOffSession_DefaultProps) => React.JSX.Element;
+export declare function Auth_OneOffSession({ preset, ...props }: PublicLayoutPreset_OneOffSession_DefaultProps & ComponentPresetProps): React.JSX.Element;
+//# sourceMappingURL=Auth_OneOffSession.d.ts.map

package/dist/esm/components/auth/Auth_OneOffSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth_OneOffSession.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OneOffSession.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA+C,MAAM,OAAO,CAAC;AAcpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAMxH,MAAM,WAAW,6CAA6C;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA0DD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wCAAwC,GAAI,WAAW,6CAA6C,KAAG,KAAK,CAAC,GAAG,CAAC,OAmF7H,CAAC;AAGF,wBAAgB,kBAAkB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,6CAA6C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG1K"}

package/dist/esm/components/auth/Auth_OneOffSession.js

@@ -0,0 +1,121 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useEffect, useMemo, useRef, useState } from 'react';
+import { Navigate } from 'react-router-dom';
+import { useAuthSession } from '../../core/security/useAuthSession.js';
+import { useI18n } from '../../core/i18n/useI18n.js';
+import { useResourceRegistry } from '../../core/resources/useResourceRegistry.js';
+import { EphemeralSessionTokenStorage } from '../../core/security/session-token-storage.frontend.service.js';
+import { NavigationUtils } from '../../core/navigation/navigation.utils.js';
+import { CommonRoutePaths } from '../../core/runtime/routes.frontend.definitions.js';
+import { Heading } from '../../components/typography/heading.js';
+import { Text } from '../../components/typography/text.js';
+import { Link } from '../../components/typography/link.js';
+import { Alert, AlertDescription } from '../../components/overlays/containers/alert.js';
+import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
+import { FrontendComponentType, CorePresetNames, OneOffSessionLabel } from '@wildo-ai/presets-components-models';
+import { LoadingSpinner } from '../../components/feedback/loading-spinner.js';
+/**
+ * Resolves the target frontend URL from the token exchange context.
+ *
+ * Searches the resource registry for an operation whose tokenAuthentication.types
+ * includes the given tokenType, then builds a concrete URL using the targeting
+ * initiatorIds as path parameters.
+ *
+ * Returns undefined if no matching operation is found or URL cannot be resolved
+ * (fallback to home).
+ */
+function resolveTargetUrl(tokenType, initiatorIds, registry) {
+    if (!initiatorIds || Object.keys(initiatorIds).length === 0)
+        return undefined;
+    let matchedConfig;
+    let matchedOperation;
+    for (const rc of Object.values(registry.resourceConfigurations)) {
+        const ops = Array.isArray(rc.operations) ? rc.operations : [];
+        for (const op of ops) {
+            const tokenAuth = op.tokenAuthentication;
+            if (tokenAuth?.types?.includes(tokenType) && op.operationFrontendConfig?.isAddressable) {
+                matchedConfig = rc;
+                matchedOperation = op;
+                break;
+            }
+        }
+        if (matchedOperation)
+            break;
+    }
+    if (!matchedConfig || !matchedOperation)
+        return undefined;
+    // initiatorIds uses fieldIdentifier keys (e.g., organizationId, tasksId).
+    // resolveResourceUrl expects candidateContextIdentifiers with resourceType keys
+    // (e.g., ORGANIZATIONS, TASKS).
+    const candidateContextIdentifiers = {};
+    for (const [fieldId, id] of Object.entries(initiatorIds)) {
+        const resourceType = registry.fieldIdentifierToResourceType[fieldId];
+        if (resourceType) {
+            candidateContextIdentifiers[resourceType] = id;
+        }
+    }
+    const result = NavigationUtils.resolveResourceUrl(matchedConfig, matchedOperation, candidateContextIdentifiers, registry.allResourceFieldIdentifiers);
+    return result?.resolvedUrl ?? undefined;
+}
+/**
+ * W7.3b: One-off session exchange default preset.
+ *
+ * Follows the same pattern as Auth_ConfirmEmail:
+ * extracts the consumable token, exchanges it via handleOneOffTokenExchange,
+ * and redirects to the target page on success (resolved from tokenType + targeting),
+ * or home as fallback.
+ *
+ * Guards against same-tab SPA navigation (storage must be ephemeral).
+ * All user-facing strings are i18n-driven via OneOffSessionLabel.
+ */
+export const PublicLayoutPreset_OneOffSession_Default = ({ token }) => {
+    const { handleOneOffTokenExchange, auth, tokenStorage } = useAuthSession();
+    const { registry } = useResourceRegistry();
+    const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_ONE_OFF_SESSION });
+    const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_ONE_OFF_SESSION, key);
+    const loginPath = CommonRoutePaths.login;
+    const [error, setError] = useState(null);
+    const exchangeAttemptedRef = useRef(false);
+    const targetUrl = useMemo(() => {
+        if (!auth.oneOffContext || !auth.accessToken)
+            return CommonRoutePaths.home;
+        const resolved = resolveTargetUrl(auth.oneOffContext.tokenType, auth.oneOffContext.scopedInitiatorIds, registry);
+        return resolved ?? CommonRoutePaths.home;
+    }, [auth.oneOffContext, auth.accessToken, registry]);
+    useEffect(() => {
+        if (exchangeAttemptedRef.current)
+            return;
+        if (!(tokenStorage instanceof EphemeralSessionTokenStorage)) {
+            exchangeAttemptedRef.current = true;
+            setError(t(OneOffSessionLabel.ERROR_WRONG_TAB));
+            return;
+        }
+        if (!token) {
+            exchangeAttemptedRef.current = true;
+            setError(t(OneOffSessionLabel.ERROR_NO_TOKEN));
+            return;
+        }
+        if (auth.accessToken) {
+            exchangeAttemptedRef.current = true;
+            return;
+        }
+        exchangeAttemptedRef.current = true;
+        handleOneOffTokenExchange(token).catch((e) => {
+            setError(e?.message || t(OneOffSessionLabel.ERROR_GENERIC));
+        });
+    }, [token, auth.accessToken, handleOneOffTokenExchange, tokenStorage]); // eslint-disable-line react-hooks/exhaustive-deps
+    if (auth.accessToken && !auth.isLoading) {
+        return _jsx(Navigate, { to: targetUrl, replace: true });
+    }
+    if (!isReady)
+        return null;
+    if (error) {
+        return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "text-center space-y-item-xs mb-group", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-destructive/10 mb-element", children: _jsx("svg", { className: "h-6 w-6 text-destructive", fill: "none", viewBox: "0 0 24 24", stroke: "currentColor", strokeWidth: "2", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", d: "M6 18L18 6M6 6l12 12" }) }) }), _jsx(Heading, { children: t(OneOffSessionLabel.ERROR_TITLE) })] }), _jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) }), _jsx("div", { className: "text-center mt-group", children: _jsx(Link, { href: loginPath, children: t(OneOffSessionLabel.LOGIN_LINK) }) })] }));
+    }
+    return (_jsxs("div", { role: "status", "aria-live": "polite", className: "text-center space-y-item-xs", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element", "aria-hidden": "true", children: _jsx(LoadingSpinner, { size: 24, className: "text-primary" }) }), _jsx(Text, { className: "max-w-sm mx-auto", children: t(OneOffSessionLabel.VERIFYING) })] }));
+};
+export function Auth_OneOffSession({ preset = CorePresetNames.DEFAULT, ...props }) {
+    const Component = createComponentResolver(FrontendComponentType.PUBLIC_LAYOUTS_ONE_OFF_SESSION, 'Auth_OneOffSession')(preset);
+    return _jsx(Component, { ...props });
+}
+//# sourceMappingURL=Auth_OneOffSession.js.map

package/dist/esm/components/auth/Auth_OneOffSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth_OneOffSession.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OneOffSession.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,0EAA0E,CAAC;AACxH,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AAGnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACjH,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAOzF;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,SAAiB,EACjB,YAAgD,EAChD,QAAkM;IAElM,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9E,IAAI,aAA2D,CAAC;IAChE,IAAI,gBAAqE,CAAC;IAE1E,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,MAAM,SAAS,GAAI,EAAU,CAAC,mBAAmB,CAAC;YAClD,IAAI,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,uBAAuB,EAAE,aAAa,EAAE,CAAC;gBACvF,aAAa,GAAG,EAAE,CAAC;gBACnB,gBAAgB,GAAG,EAAE,CAAC;gBACtB,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,gBAAgB;YAAE,MAAM;IAC9B,CAAC;IAED,IAAI,CAAC,aAAa,IAAI,CAAC,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAE1D,0EAA0E;IAC1E,gFAAgF;IAChF,gCAAgC;IAChC,MAAM,2BAA2B,GAA2B,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,MAAM,YAAY,GAAG,QAAQ,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC;QACrE,IAAI,YAAY,EAAE,CAAC;YACjB,2BAA2B,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,kBAAkB,CAC/C,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,QAAQ,CAAC,2BAA2B,CACrC,CAAC;IAEF,OAAO,MAAM,EAAE,WAAW,IAAI,SAAS,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,EAAE,KAAK,EAAiD,EAAqB,EAAE;IACtI,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,cAAc,EAAE,CAAC;IAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC3C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,8BAA8B,EAAE,CAAC,CAAC;IAE7G,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC;IAEzC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE;QAC7B,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC;QAC3E,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,IAAI,CAAC,aAAa,CAAC,SAAS,EAC5B,IAAI,CAAC,aAAa,CAAC,kBAAkB,EACrC,QAAQ,CACT,CAAC;QACF,OAAO,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC;IAC3C,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAErD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,oBAAoB,CAAC,OAAO;YAAE,OAAO;QAEzC,IAAI,CAAC,CAAC,YAAY,YAAY,4BAA4B,CAAC,EAAE,CAAC;YAC5D,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;YACpC,OAAO;QACT,CAAC;QAED,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpC,yBAAyB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE;YAChD,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,yBAAyB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,kDAAkD;IAE1H,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,SAAS,EAAE,OAAO,SAAG,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,cAAK,SAAS,EAAC,8FAA8F,YAC3G,cAAK,SAAS,EAAC,0BAA0B,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,YAC7G,eAAM,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,CAAC,EAAC,sBAAsB,GAAG,GAC1E,GACF,EACN,KAAC,OAAO,cAAE,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,GAAW,IAClD,EACN,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,EACR,cAAK,SAAS,EAAC,sBAAsB,YACnC,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,GAAQ,GAC5D,IACL,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,IAAI,EAAC,QAAQ,eAAW,QAAQ,EAAC,SAAS,EAAC,6BAA6B,aAC3E,cAAK,SAAS,EAAC,0FAA0F,iBAAa,MAAM,YAC1H,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,cAAc,GAAG,GACjD,EACN,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAQ,IACvE,CACP,CAAC;AACJ,CAAC,CAAC;AAGF,MAAM,UAAU,kBAAkB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAwE;IACrJ,MAAM,SAAS,GAAG,uBAAuB,CAAgD,qBAAqB,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7K,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC"}

package/dist/esm/components/auth/Auth_PasswordLost.d.ts

@@ -0,0 +1,8 @@
+import React from 'react';
+import { ComponentPresetProps } from '../../core/components-registry/component-registry.frontend.schemas.js';
+export interface PublicLayoutPreset_UserPasswordLost_DefaultProps {
+    resetToken?: string;
+}
+export declare const PublicLayoutPreset_UserPasswordLost_Default: ({ resetToken }: PublicLayoutPreset_UserPasswordLost_DefaultProps) => React.JSX.Element;
+export declare function Auth_PasswordLost({ preset, ...props }: PublicLayoutPreset_UserPasswordLost_DefaultProps & ComponentPresetProps): React.JSX.Element;
+//# sourceMappingURL=Auth_PasswordLost.d.ts.map

package/dist/esm/components/auth/Auth_PasswordLost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth_PasswordLost.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_PasswordLost.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAiD,MAAM,OAAO,CAAC;AA2BtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AA2ExH,MAAM,WAAW,gDAAgD;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAGD,eAAO,MAAM,2CAA2C,GAAI,gBAAgB,gDAAgD,KAAG,KAAK,CAAC,GAAG,CAAC,OA+MxI,CAAC;AAGF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,gDAAgD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG5K"}