@wildo-ai/saas-frontend-lib 1.1.3 → 1.1.5

package/dist/esm/components/auth/admin-config/SsoConnectionSamlReadSection.js

@@ -13,7 +13,7 @@ import { Button, ButtonVariants_Variant } from '../../../components/actions/butt
 import { ContentSection, ContentSectionLegend } from '../../../components/sections/content-section.js';
 import { FrontendComponentType } from '@wildo-ai/presets-components-models';
 import { useI18n } from '../../../core/i18n/useI18n.js';
-import { extractErrorInfo } from '../../../core/errors/errors.frontend.schemas.js';
+import { useUserFacingErrorMessage } from '../../../core/errors/useUserFacingErrorMessage.js';
 export function SsoConnectionSamlReadSection({ resourceContext, }) {
     const { resourceType, contextResourceIdentifiers } = resourceContext;
     const { registry, doOperation } = useResourceRegistry();
@@ -27,6 +27,7 @@ export function SsoConnectionSamlReadSection({ resourceContext, }) {
     // considered and rejected: for a label with no fallback it converts an ugly but
     // diagnosable `components.RESOURCES_LAYOUTS_READ.saml.import` into an INVISIBLE button.
     const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_READ);
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const [testResult, setTestResult] = useState(null);
     const [isTesting, setIsTesting] = useState(false);
     const ctx = contextResourceIdentifiers;
@@ -65,16 +66,16 @@ export function SsoConnectionSamlReadSection({ resourceContext, }) {
             setTestResult(result);
         }
         catch (err) {
-            // E-5: prefer structured WildoError_Backend message via extractErrorInfo
+            // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.
             setTestResult({
                 overallStatus: 'fail',
-                errors: [extractErrorInfo(err).message],
+                errors: [toUserFacingErrorMessage(err)],
             });
         }
         finally {
             setIsTesting(false);
         }
-    }, [resourceType, resourceContext.parentResourcesRequirements, contextResourceIdentifiers, registry, doOperation, ctx]);
+    }, [resourceType, resourceContext.parentResourcesRequirements, contextResourceIdentifiers, registry, doOperation, ctx, toUserFacingErrorMessage]);
     if (!isReady)
         return null;
     const testLabel = tSaml('saml.testConnection');

package/dist/esm/components/auth/admin-config/SsoConnectionSamlReadSection.js.map

@@ -1 +1 @@
-{"version":3,"file":"SsoConnectionSamlReadSection.js","sourceRoot":"","sources":["../../../../../src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":";AAAA;;;GAGG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EACL,aAAa,EACb,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAC1H,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AA4B3F,MAAM,UAAU,4BAA4B,CAAC,EAC3C,eAAe,GACmB;IAClC,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,GAAG,eAAe,CAAC;IACrE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC1G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,wFAAwF;IACxF,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;IAE5E,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,0BAAyF,CAAC;IACtG,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,MAAM,SAAS,GAAG,KAAK,IAAI,IAAI;QAC7B,CAAC,CAAC,aAAa,CAAC,YAAY;QAC5B,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,GAAG,IAAI,uBAAuB,SAAS,IAAI,OAAO,EAAE,CAAC;IAC9D,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzB,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAClD,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBACxE,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,eAAe;gBAC7D,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,yBAAyB,CAC1E,0BAA0B,EAC1B,QAAQ,CACT,CAAC;YAEF,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;gBACpC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE;gBACzC,oBAAoB;gBACpB,2BAA2B,EAAE,eAAe,CAAC,2BAA2B;gBACxE,WAAW,EAAE,EAAE,YAAY,EAAE;aAC9B,CAAC,CAAe,CAAC;YAElB,aAAa,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,aAAa,CAAC;gBACZ,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC,2BAA2B,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IAExH,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAEzD,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,MAAC,cAAc,eACb,KAAC,oBAAoB,cAClB,KAAK,CAAC,gBAAgB,CAAC,GACH,EACvB,eAAK,SAAS,EAAC,0BAA0B,aACtC,WAAW,IAAI,CACd,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,kBACtD,YAAG,IAAI,EAAE,WAAW,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,YAC5D,eAAe,GACd,GACG,CACV,EACD,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,SAAS,YAElB,SAAS;oCACR,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oCACzB,CAAC,CAAC,SAAS,GACN,IACL,IACS,EAEhB,UAAU,IAAI,CACb,MAAC,cAAc,IACb,SAAS,EACP,UAAU,CAAC,aAAa,KAAK,MAAM;oBACjC,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;wBACtC,CAAC,CAAC,gCAAgC;wBAClC,CAAC,CAAC,wCAAwC,aAGhD,KAAC,oBAAoB,cAClB,KAAK,CAAC,kBAAkB,CAAC,GACL,EACvB,eAAK,SAAS,EAAC,yBAAyB,aACrC,UAAU,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAC9C,wBACG,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,qBAAiB,GAAG,EAC7D,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,IAC9D,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAgB,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IACrG,CACL,EACA,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gCACxC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;gCAC9C,MAAM,eAAe,GACnB,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC;oCACnD,CAAC,CAAC,kBAAkB;oCACpB,CAAC,CAAC,aAAa,GAAG,EAAE;wCAClB,CAAC,CAAC,cAAc;wCAChB,CAAC,CAAC,EAAE,CAAC;gCACX,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW;oCACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oCAC3E,CAAC,CAAC,IAAI,CAAC;gCACT,OAAO,CACL,eAAa,SAAS,EAAE,cAAc,eAAe,EAAE,aACrD,wBACG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,mBAAe,CAAC,GAAG,CAAC,OAAG,GAAG,EAChD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,qBAAY,GAAG,EAC/C,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAI,IAAI,CAAC,aAAa,YAC3D,eAAe,IAAI,IAAI,IAAI,CAC1B,gBAAM,SAAS,EAAC,oCAAoC,kBAChD,eAAe,SACZ,CACR,IACC,EACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,IAAI,CAC5B,YAAG,SAAS,EAAC,sBAAsB,YAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GACvB,CACL,KAfO,CAAC,CAgBL,CACP,CAAC;4BACJ,CAAC,CAAC,EACD,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAChC,YAAW,SAAS,EAAC,kBAAkB,YACpC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACD,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAClC,YAAW,SAAS,EAAC,cAAc,YAChC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACF,aAAG,SAAS,EAAC,wBAAwB,0BACzB,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,IACxH,IACA,IACS,CAClB,IACG,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * SAML-specific section for SSO Connection Read view.\n * Shows SP metadata download, certificate expiry, and Test Connection results.\n */\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport {\n  AuthScopeType,\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { frontendResourceUtils, FrontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport type { FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { extractErrorInfo } from '~wildo-frontend-lib/core/errors/errors.frontend.schemas';\n\ninterface SsoConnectionSamlReadSectionProps {\n  resourceContext: FrontendResourceOperationContext;\n}\n\ninterface CertificateResult {\n  index: number;\n  valid: boolean;\n  expiresAt: string;\n  daysRemaining: number;\n  fingerprint: string;\n  warnings: string[];\n}\n\ninterface TestResult {\n  overallStatus: 'pass' | 'warning' | 'fail';\n  entityIdConfigured?: boolean;\n  ssoUrlReachable?: boolean;\n  ssoUrlStatus?: number;\n  sloUrlReachable?: boolean;\n  sloUrlStatus?: number;\n  spMetadataValid?: boolean;\n  certificates?: CertificateResult[];\n  errors?: string[];\n  warnings?: string[];\n}\n\nexport function SsoConnectionSamlReadSection({\n  resourceContext,\n}: SsoConnectionSamlReadSectionProps): React.JSX.Element | null {\n  const { resourceType, contextResourceIdentifiers } = resourceContext;\n  const { registry, doOperation } = useResourceRegistry();\n  const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_READ });\n  // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n  // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n  // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n  // string) and are gone rather than revived — every key here IS declared in the\n  // layout's `*.labels.ts`, so a component-local literal would be a second source of\n  // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n  // considered and rejected: for a label with no fallback it converts an ugly but\n  // diagnosable `components.RESOURCES_LAYOUTS_READ.saml.import` into an INVISIBLE button.\n  const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_READ);\n\n  const [testResult, setTestResult] = useState<TestResult | null>(null);\n  const [isTesting, setIsTesting] = useState(false);\n\n  const ctx = contextResourceIdentifiers as Record<string, string | { resourceId: string } | undefined>;\n  const orgId = ctx.organizations ? frontendResourceUtils.getResourceId(ctx.organizations) : undefined;\n  const appId = ctx.applications ? frontendResourceUtils.getResourceId(ctx.applications) : undefined;\n  const scopeType = orgId != null\n    ? AuthScopeType.ORGANIZATION\n    : AuthScopeType.APPLICATION;\n  const scopeId = String(orgId ?? appId ?? '');\n\n  const metadataUrl = useMemo(() => {\n    if (!scopeId) return null;\n    const base = envLoader.getApiUrl();\n    return `${base}/auth/saml/metadata/${scopeType}/${scopeId}`;\n  }, [scopeType, scopeId]);\n\n  const handleTestConnection = useCallback(async () => {\n    setIsTesting(true);\n    setTestResult(null);\n    try {\n      const pathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n        resourceIdentifier: resourceType,\n        operationIdentifier: SsoConnection_Operations.TEST_CONNECTION,\n        variantType: ResourceOperationVariantType.API_CALL,\n        isOperationDefault: true,\n        isBulkOperation: false,\n      });\n\n      const contextualParameters = FrontendResourceUtils.buildContextualParameters(\n        contextResourceIdentifiers,\n        registry\n      );\n\n      const connectionId = ctx[resourceType]\n        ? frontendResourceUtils.getResourceId(ctx[resourceType]!)\n        : '';\n      const result = (await doOperation(pathKey, {\n        contextualParameters,\n        parentResourcesRequirements: resourceContext.parentResourcesRequirements,\n        requestData: { connectionId },\n      })) as TestResult;\n\n      setTestResult(result);\n    } catch (err) {\n      // E-5: prefer structured WildoError_Backend message via extractErrorInfo\n      setTestResult({\n        overallStatus: 'fail',\n        errors: [extractErrorInfo(err).message],\n      });\n    } finally {\n      setIsTesting(false);\n    }\n  }, [resourceType, resourceContext.parentResourcesRequirements, contextResourceIdentifiers, registry, doOperation, ctx]);\n\n  if (!isReady) return null;\n\n  const testLabel = tSaml('saml.testConnection');\n  const spMetadataLabel = tSaml('saml.downloadSpMetadata');\n\n  return (\n    <div className=\"space-y-section max-w-4xl\">\n      <ContentSection>\n        <ContentSectionLegend>\n          {tSaml('saml.samlTools')}\n        </ContentSectionLegend>\n        <div className=\"flex flex-wrap gap-field\">\n          {metadataUrl && (\n            <Button variant={ButtonVariants_Variant.OUTLINE} asChild>\n              <a href={metadataUrl} target=\"_blank\" rel=\"noopener noreferrer\">\n                {spMetadataLabel}\n              </a>\n            </Button>\n          )}\n          <Button\n            type=\"button\"\n            variant={ButtonVariants_Variant.OUTLINE}\n            onClick={handleTestConnection}\n            disabled={isTesting}\n          >\n            {isTesting\n              ? (tSaml('saml.testing'))\n              : testLabel}\n          </Button>\n        </div>\n      </ContentSection>\n\n      {testResult && (\n        <ContentSection\n          className={\n            testResult.overallStatus === 'pass'\n              ? 'border-success/50 bg-success/5'\n              : testResult.overallStatus === 'warning'\n                ? 'border-warning/50 bg-warning/5'\n                : 'border-destructive/50 bg-destructive/5'\n          }\n        >\n          <ContentSectionLegend>\n            {tSaml('saml.testResults')}\n          </ContentSectionLegend>\n          <div className=\"space-y-item-sm text-sm\">\n            {testResult.entityIdConfigured !== undefined && (\n              <p>\n                {testResult.entityIdConfigured ? '✓' : '✗'} IdP Entity ID:{' '}\n                {testResult.entityIdConfigured ? 'Configured' : 'Not configured'}\n              </p>\n            )}\n            {testResult.ssoUrlReachable !== undefined && (\n              <p>\n                {testResult.ssoUrlReachable ? '✓' : '✗'} SSO URL:{' '}\n                {testResult.ssoUrlReachable\n                  ? `Reachable (${testResult.ssoUrlStatus ?? 'OK'})`\n                  : 'Not reachable'}\n              </p>\n            )}\n            {testResult.sloUrlReachable !== undefined && (\n              <p>\n                {testResult.sloUrlReachable ? '✓' : '✗'} SLO URL:{' '}\n                {testResult.sloUrlReachable\n                  ? `Reachable (${testResult.sloUrlStatus ?? 'OK'})`\n                  : 'Not reachable'}\n              </p>\n            )}\n            {testResult.spMetadataValid !== undefined && (\n              <p>\n                {testResult.spMetadataValid ? '✓' : '✗'} SP Metadata: {testResult.spMetadataValid ? 'Valid' : 'Invalid'}\n              </p>\n            )}\n            {testResult.certificates?.map((cert, i) => {\n              const daysRemaining = cert.daysRemaining ?? 0;\n              const certStatusClass =\n                !cert.valid || daysRemaining < 0 || daysRemaining < 7\n                  ? 'text-destructive'\n                  : daysRemaining < 30\n                    ? 'text-warning'\n                    : '';\n              const fingerprintAbbr = cert.fingerprint\n                ? cert.fingerprint.slice(0, 12) + (cert.fingerprint.length > 12 ? '…' : '')\n                : null;\n              return (\n                <div key={i} className={`pl-item-sm ${certStatusClass}`}>\n                  <p>\n                    {cert.valid ? '✓' : '✗'} Certificate {i + 1}:{' '}\n                    {cert.valid ? 'Valid' : 'Invalid'} — expires{' '}\n                    {cert.expiresAt?.slice(0, 10) ?? 'N/A'} ({cert.daysRemaining} days)\n                    {fingerprintAbbr != null && (\n                      <span className=\"text-muted-foreground text-xs ml-1\">\n                        ({fingerprintAbbr})\n                      </span>\n                    )}\n                  </p>\n                  {cert.warnings?.length > 0 && (\n                    <p className=\"text-warning text-xs\">\n                      {cert.warnings.join('; ')}\n                    </p>\n                  )}\n                </div>\n              );\n            })}\n            {testResult.errors?.map((e, i) => (\n              <p key={i} className=\"text-destructive\">\n                {e}\n              </p>\n            ))}\n            {testResult.warnings?.map((w, i) => (\n              <p key={i} className=\"text-warning\">\n                {w}\n              </p>\n            ))}\n            <p className=\"font-medium mt-item-sm\">\n              Overall: {testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'}\n            </p>\n          </div>\n        </ContentSection>\n      )}\n    </div>\n  );\n}\n"]}
+{"version":3,"file":"SsoConnectionSamlReadSection.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":";AAAA;;;GAGG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EACL,aAAa,EACb,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAC1H,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AA4BtG,MAAM,UAAU,4BAA4B,CAAC,EAC3C,eAAe,GACmB;IAClC,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,GAAG,eAAe,CAAC;IACrE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC1G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,wFAAwF;IACxF,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;IAC5E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,0BAAyF,CAAC;IACtG,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,MAAM,SAAS,GAAG,KAAK,IAAI,IAAI;QAC7B,CAAC,CAAC,aAAa,CAAC,YAAY;QAC5B,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,GAAG,IAAI,uBAAuB,SAAS,IAAI,OAAO,EAAE,CAAC;IAC9D,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzB,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAClD,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBACxE,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,eAAe;gBAC7D,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,yBAAyB,CAC1E,0BAA0B,EAC1B,QAAQ,CACT,CAAC;YAEF,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;gBACpC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE;gBACzC,oBAAoB;gBACpB,2BAA2B,EAAE,eAAe,CAAC,2BAA2B;gBACxE,WAAW,EAAE,EAAE,YAAY,EAAE;aAC9B,CAAC,CAAe,CAAC;YAElB,aAAa,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,aAAa,CAAC;gBACZ,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC,2BAA2B,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElJ,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAEzD,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,MAAC,cAAc,eACb,KAAC,oBAAoB,cAClB,KAAK,CAAC,gBAAgB,CAAC,GACH,EACvB,eAAK,SAAS,EAAC,0BAA0B,aACtC,WAAW,IAAI,CACd,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,kBACtD,YAAG,IAAI,EAAE,WAAW,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,YAC5D,eAAe,GACd,GACG,CACV,EACD,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,SAAS,YAElB,SAAS;oCACR,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oCACzB,CAAC,CAAC,SAAS,GACN,IACL,IACS,EAEhB,UAAU,IAAI,CACb,MAAC,cAAc,IACb,SAAS,EACP,UAAU,CAAC,aAAa,KAAK,MAAM;oBACjC,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;wBACtC,CAAC,CAAC,gCAAgC;wBAClC,CAAC,CAAC,wCAAwC,aAGhD,KAAC,oBAAoB,cAClB,KAAK,CAAC,kBAAkB,CAAC,GACL,EACvB,eAAK,SAAS,EAAC,yBAAyB,aACrC,UAAU,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAC9C,wBACG,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,qBAAiB,GAAG,EAC7D,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,IAC9D,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAgB,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IACrG,CACL,EACA,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gCACxC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;gCAC9C,MAAM,eAAe,GACnB,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC;oCACnD,CAAC,CAAC,kBAAkB;oCACpB,CAAC,CAAC,aAAa,GAAG,EAAE;wCAClB,CAAC,CAAC,cAAc;wCAChB,CAAC,CAAC,EAAE,CAAC;gCACX,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW;oCACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oCAC3E,CAAC,CAAC,IAAI,CAAC;gCACT,OAAO,CACL,eAAa,SAAS,EAAE,cAAc,eAAe,EAAE,aACrD,wBACG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,mBAAe,CAAC,GAAG,CAAC,OAAG,GAAG,EAChD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,qBAAY,GAAG,EAC/C,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAI,IAAI,CAAC,aAAa,YAC3D,eAAe,IAAI,IAAI,IAAI,CAC1B,gBAAM,SAAS,EAAC,oCAAoC,kBAChD,eAAe,SACZ,CACR,IACC,EACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,IAAI,CAC5B,YAAG,SAAS,EAAC,sBAAsB,YAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GACvB,CACL,KAfO,CAAC,CAgBL,CACP,CAAC;4BACJ,CAAC,CAAC,EACD,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAChC,YAAW,SAAS,EAAC,kBAAkB,YACpC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACD,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAClC,YAAW,SAAS,EAAC,cAAc,YAChC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACF,aAAG,SAAS,EAAC,wBAAwB,0BACzB,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,IACxH,IACA,IACS,CAClB,IACG,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * SAML-specific section for SSO Connection Read view.\n * Shows SP metadata download, certificate expiry, and Test Connection results.\n */\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport {\n  AuthScopeType,\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { frontendResourceUtils, FrontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport type { FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\n\ninterface SsoConnectionSamlReadSectionProps {\n  resourceContext: FrontendResourceOperationContext;\n}\n\ninterface CertificateResult {\n  index: number;\n  valid: boolean;\n  expiresAt: string;\n  daysRemaining: number;\n  fingerprint: string;\n  warnings: string[];\n}\n\ninterface TestResult {\n  overallStatus: 'pass' | 'warning' | 'fail';\n  entityIdConfigured?: boolean;\n  ssoUrlReachable?: boolean;\n  ssoUrlStatus?: number;\n  sloUrlReachable?: boolean;\n  sloUrlStatus?: number;\n  spMetadataValid?: boolean;\n  certificates?: CertificateResult[];\n  errors?: string[];\n  warnings?: string[];\n}\n\nexport function SsoConnectionSamlReadSection({\n  resourceContext,\n}: SsoConnectionSamlReadSectionProps): React.JSX.Element | null {\n  const { resourceType, contextResourceIdentifiers } = resourceContext;\n  const { registry, doOperation } = useResourceRegistry();\n  const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_READ });\n  // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n  // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n  // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n  // string) and are gone rather than revived — every key here IS declared in the\n  // layout's `*.labels.ts`, so a component-local literal would be a second source of\n  // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n  // considered and rejected: for a label with no fallback it converts an ugly but\n  // diagnosable `components.RESOURCES_LAYOUTS_READ.saml.import` into an INVISIBLE button.\n  const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_READ);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const [testResult, setTestResult] = useState<TestResult | null>(null);\n  const [isTesting, setIsTesting] = useState(false);\n\n  const ctx = contextResourceIdentifiers as Record<string, string | { resourceId: string } | undefined>;\n  const orgId = ctx.organizations ? frontendResourceUtils.getResourceId(ctx.organizations) : undefined;\n  const appId = ctx.applications ? frontendResourceUtils.getResourceId(ctx.applications) : undefined;\n  const scopeType = orgId != null\n    ? AuthScopeType.ORGANIZATION\n    : AuthScopeType.APPLICATION;\n  const scopeId = String(orgId ?? appId ?? '');\n\n  const metadataUrl = useMemo(() => {\n    if (!scopeId) return null;\n    const base = envLoader.getApiUrl();\n    return `${base}/auth/saml/metadata/${scopeType}/${scopeId}`;\n  }, [scopeType, scopeId]);\n\n  const handleTestConnection = useCallback(async () => {\n    setIsTesting(true);\n    setTestResult(null);\n    try {\n      const pathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n        resourceIdentifier: resourceType,\n        operationIdentifier: SsoConnection_Operations.TEST_CONNECTION,\n        variantType: ResourceOperationVariantType.API_CALL,\n        isOperationDefault: true,\n        isBulkOperation: false,\n      });\n\n      const contextualParameters = FrontendResourceUtils.buildContextualParameters(\n        contextResourceIdentifiers,\n        registry\n      );\n\n      const connectionId = ctx[resourceType]\n        ? frontendResourceUtils.getResourceId(ctx[resourceType]!)\n        : '';\n      const result = (await doOperation(pathKey, {\n        contextualParameters,\n        parentResourcesRequirements: resourceContext.parentResourcesRequirements,\n        requestData: { connectionId },\n      })) as TestResult;\n\n      setTestResult(result);\n    } catch (err) {\n      // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n      setTestResult({\n        overallStatus: 'fail',\n        errors: [toUserFacingErrorMessage(err)],\n      });\n    } finally {\n      setIsTesting(false);\n    }\n  }, [resourceType, resourceContext.parentResourcesRequirements, contextResourceIdentifiers, registry, doOperation, ctx, toUserFacingErrorMessage]);\n\n  if (!isReady) return null;\n\n  const testLabel = tSaml('saml.testConnection');\n  const spMetadataLabel = tSaml('saml.downloadSpMetadata');\n\n  return (\n    <div className=\"space-y-section max-w-4xl\">\n      <ContentSection>\n        <ContentSectionLegend>\n          {tSaml('saml.samlTools')}\n        </ContentSectionLegend>\n        <div className=\"flex flex-wrap gap-field\">\n          {metadataUrl && (\n            <Button variant={ButtonVariants_Variant.OUTLINE} asChild>\n              <a href={metadataUrl} target=\"_blank\" rel=\"noopener noreferrer\">\n                {spMetadataLabel}\n              </a>\n            </Button>\n          )}\n          <Button\n            type=\"button\"\n            variant={ButtonVariants_Variant.OUTLINE}\n            onClick={handleTestConnection}\n            disabled={isTesting}\n          >\n            {isTesting\n              ? (tSaml('saml.testing'))\n              : testLabel}\n          </Button>\n        </div>\n      </ContentSection>\n\n      {testResult && (\n        <ContentSection\n          className={\n            testResult.overallStatus === 'pass'\n              ? 'border-success/50 bg-success/5'\n              : testResult.overallStatus === 'warning'\n                ? 'border-warning/50 bg-warning/5'\n                : 'border-destructive/50 bg-destructive/5'\n          }\n        >\n          <ContentSectionLegend>\n            {tSaml('saml.testResults')}\n          </ContentSectionLegend>\n          <div className=\"space-y-item-sm text-sm\">\n            {testResult.entityIdConfigured !== undefined && (\n              <p>\n                {testResult.entityIdConfigured ? '✓' : '✗'} IdP Entity ID:{' '}\n                {testResult.entityIdConfigured ? 'Configured' : 'Not configured'}\n              </p>\n            )}\n            {testResult.ssoUrlReachable !== undefined && (\n              <p>\n                {testResult.ssoUrlReachable ? '✓' : '✗'} SSO URL:{' '}\n                {testResult.ssoUrlReachable\n                  ? `Reachable (${testResult.ssoUrlStatus ?? 'OK'})`\n                  : 'Not reachable'}\n              </p>\n            )}\n            {testResult.sloUrlReachable !== undefined && (\n              <p>\n                {testResult.sloUrlReachable ? '✓' : '✗'} SLO URL:{' '}\n                {testResult.sloUrlReachable\n                  ? `Reachable (${testResult.sloUrlStatus ?? 'OK'})`\n                  : 'Not reachable'}\n              </p>\n            )}\n            {testResult.spMetadataValid !== undefined && (\n              <p>\n                {testResult.spMetadataValid ? '✓' : '✗'} SP Metadata: {testResult.spMetadataValid ? 'Valid' : 'Invalid'}\n              </p>\n            )}\n            {testResult.certificates?.map((cert, i) => {\n              const daysRemaining = cert.daysRemaining ?? 0;\n              const certStatusClass =\n                !cert.valid || daysRemaining < 0 || daysRemaining < 7\n                  ? 'text-destructive'\n                  : daysRemaining < 30\n                    ? 'text-warning'\n                    : '';\n              const fingerprintAbbr = cert.fingerprint\n                ? cert.fingerprint.slice(0, 12) + (cert.fingerprint.length > 12 ? '…' : '')\n                : null;\n              return (\n                <div key={i} className={`pl-item-sm ${certStatusClass}`}>\n                  <p>\n                    {cert.valid ? '✓' : '✗'} Certificate {i + 1}:{' '}\n                    {cert.valid ? 'Valid' : 'Invalid'} — expires{' '}\n                    {cert.expiresAt?.slice(0, 10) ?? 'N/A'} ({cert.daysRemaining} days)\n                    {fingerprintAbbr != null && (\n                      <span className=\"text-muted-foreground text-xs ml-1\">\n                        ({fingerprintAbbr})\n                      </span>\n                    )}\n                  </p>\n                  {cert.warnings?.length > 0 && (\n                    <p className=\"text-warning text-xs\">\n                      {cert.warnings.join('; ')}\n                    </p>\n                  )}\n                </div>\n              );\n            })}\n            {testResult.errors?.map((e, i) => (\n              <p key={i} className=\"text-destructive\">\n                {e}\n              </p>\n            ))}\n            {testResult.warnings?.map((w, i) => (\n              <p key={i} className=\"text-warning\">\n                {w}\n              </p>\n            ))}\n            <p className=\"font-medium mt-item-sm\">\n              Overall: {testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'}\n            </p>\n          </div>\n        </ContentSection>\n      )}\n    </div>\n  );\n}\n"]}

package/dist/esm/components/auth/enrollment/PasskeyEnrollmentMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PasskeyEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AASrD,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAMrK,QAAA,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAkErE,CAAC;AAGF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}
+{"version":3,"file":"PasskeyEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAUrD,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAMrK,QAAA,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAmErE,CAAC;AAGF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/esm/components/auth/enrollment/PasskeyEnrollmentMethod.js

@@ -7,6 +7,7 @@ import { Text } from '../../../components/typography/text.js';
 import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
 import { startRegistration } from '@simplewebauthn/browser';
 import { getManualCallsHttpClient } from '../../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
+import { useUserFacingErrorMessage } from '../../../core/errors/useUserFacingErrorMessage.js';
 import { registerEnrollmentMethodComponent } from '../../../components/auth/enrollment/enrollment-method-components.js';
 function buildSessionHeaders(sessionId) {
     return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;
@@ -14,6 +15,7 @@ function buildSessionHeaders(sessionId) {
 const PasskeyEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t }) => {
     const [registering, setRegistering] = useState(false);
     const [error, setError] = useState(null);
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;
     const handleRegister = useCallback(async () => {
         setRegistering(true);
@@ -22,20 +24,20 @@ const PasskeyEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t
             const headers = buildSessionHeaders(sessionId);
             const options = await getManualCallsHttpClient().passkeyRegisterOptions(undefined, headers ? { headers } : undefined);
             const credential = await startRegistration({ optionsJSON: options });
-            await getManualCallsHttpClient().passkeyRegisterVerify({ response: credential }, headers ? { headers } : undefined);
-            onComplete();
+            const result = await getManualCallsHttpClient().passkeyRegisterVerify({ response: credential }, headers ? { headers } : undefined);
+            onComplete(result.enrollmentSession);
         }
         catch (e) {
             const msg = e?.name === 'NotAllowedError'
                 ? t(EnrollmentRequiredLabel.PASSKEY_CANCELLED)
-                : (e?.message || t(EnrollmentRequiredLabel.ENROLL_ERROR));
+                : toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));
             setError(msg);
             onError(msg);
         }
         finally {
             setRegistering(false);
         }
-    }, [sessionId, onComplete, onError, t]);
+    }, [sessionId, onComplete, onError, t, toUserFacingErrorMessage]);
     if (!isSupported) {
         return (_jsx("div", { className: "space-y-item", children: _jsx(Alert, { children: _jsx(AlertDescription, { children: t(EnrollmentRequiredLabel.PASSKEY_UNSUPPORTED) }) }) }));
     }

package/dist/esm/components/auth/enrollment/PasskeyEnrollmentMethod.js.map

@@ -1 +1 @@
-{"version":3,"file":"PasskeyEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,+CAA+C,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AAErK,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,uBAAuB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7H,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAElF,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE,CAAC,sBAAsB,CACrE,SAAS,EACT,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CACmB,CAAC;YAEvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YAErE,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CACpD,EAAE,QAAQ,EAAE,UAAU,EAAE,EACxB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YAEF,UAAU,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,iBAAiB;gBACvC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC;gBAC9C,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YAC5D,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAExC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,cAAK,SAAS,EAAC,cAAc,YAC3B,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAAoB,GAC/E,GACJ,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAC1C,EAEN,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,MAAM,IACL,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,WAAW,IAAI,SAAS,YAEjC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,GAC3G,IACL,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { Button } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> | undefined {\n  return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\nconst PasskeyEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n  const [registering, setRegistering] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n\n  const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n\n  const handleRegister = useCallback(async () => {\n    setRegistering(true);\n    setError(null);\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      const options = await getManualCallsHttpClient().passkeyRegisterOptions(\n        undefined,\n        headers ? { headers } : undefined,\n      ) as unknown as PublicKeyCredentialCreationOptionsJSON;\n\n      const credential = await startRegistration({ optionsJSON: options });\n\n      await getManualCallsHttpClient().passkeyRegisterVerify(\n        { response: credential },\n        headers ? { headers } : undefined,\n      );\n\n      onComplete();\n    } catch (e: any) {\n      const msg = e?.name === 'NotAllowedError'\n        ? t(EnrollmentRequiredLabel.PASSKEY_CANCELLED)\n        : (e?.message || t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      setError(msg);\n      onError(msg);\n    } finally {\n      setRegistering(false);\n    }\n  }, [sessionId, onComplete, onError, t]);\n\n  if (!isSupported) {\n    return (\n      <div className=\"space-y-item\">\n        <Alert>\n          <AlertDescription>{t(EnrollmentRequiredLabel.PASSKEY_UNSUPPORTED)}</AlertDescription>\n        </Alert>\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(EnrollmentRequiredLabel.PASSKEY_DESCRIPTION)}\n      </Text>\n\n      {error && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{error}</AlertDescription>\n        </Alert>\n      )}\n\n      <Button\n        className=\"w-full\"\n        onClick={handleRegister}\n        disabled={registering || isLoading}\n      >\n        {registering ? t(EnrollmentRequiredLabel.PASSKEY_REGISTERING) : t(EnrollmentRequiredLabel.PASSKEY_REGISTER_BUTTON)}\n      </Button>\n    </div>\n  );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.PASSKEY, PasskeyEnrollmentMethod);\nexport { PasskeyEnrollmentMethod };\n"]}
+{"version":3,"file":"PasskeyEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,+CAA+C,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AAErK,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,uBAAuB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7H,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAElF,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE,CAAC,sBAAsB,CACrE,SAAS,EACT,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CACmB,CAAC;YAEvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CACnE,EAAE,QAAQ,EAAE,UAAU,EAAE,EACxB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YAEF,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,iBAAiB;gBACvC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC;gBAC9C,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,cAAK,SAAS,EAAC,cAAc,YAC3B,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAAoB,GAC/E,GACJ,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAC1C,EAEN,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,MAAM,IACL,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,WAAW,IAAI,SAAS,YAEjC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,GAC3G,IACL,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { Button } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> | undefined {\n  return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\nconst PasskeyEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n  const [registering, setRegistering] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n\n  const handleRegister = useCallback(async () => {\n    setRegistering(true);\n    setError(null);\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      const options = await getManualCallsHttpClient().passkeyRegisterOptions(\n        undefined,\n        headers ? { headers } : undefined,\n      ) as unknown as PublicKeyCredentialCreationOptionsJSON;\n\n      const credential = await startRegistration({ optionsJSON: options });\n\n      const result = await getManualCallsHttpClient().passkeyRegisterVerify(\n        { response: credential },\n        headers ? { headers } : undefined,\n      );\n\n      onComplete(result.enrollmentSession);\n    } catch (e: any) {\n      const msg = e?.name === 'NotAllowedError'\n        ? t(EnrollmentRequiredLabel.PASSKEY_CANCELLED)\n        : toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      setError(msg);\n      onError(msg);\n    } finally {\n      setRegistering(false);\n    }\n  }, [sessionId, onComplete, onError, t, toUserFacingErrorMessage]);\n\n  if (!isSupported) {\n    return (\n      <div className=\"space-y-item\">\n        <Alert>\n          <AlertDescription>{t(EnrollmentRequiredLabel.PASSKEY_UNSUPPORTED)}</AlertDescription>\n        </Alert>\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(EnrollmentRequiredLabel.PASSKEY_DESCRIPTION)}\n      </Text>\n\n      {error && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{error}</AlertDescription>\n        </Alert>\n      )}\n\n      <Button\n        className=\"w-full\"\n        onClick={handleRegister}\n        disabled={registering || isLoading}\n      >\n        {registering ? t(EnrollmentRequiredLabel.PASSKEY_REGISTERING) : t(EnrollmentRequiredLabel.PASSKEY_REGISTER_BUTTON)}\n      </Button>\n    </div>\n  );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.PASSKEY, PasskeyEnrollmentMethod);\nexport { PasskeyEnrollmentMethod };\n"]}

package/dist/esm/components/auth/enrollment/PhoneEnrollmentMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PhoneEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/PhoneEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAgBtE,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAOrK,QAAA,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAsMnE,CAAC;AAGF,OAAO,EAAE,qBAAqB,EAAE,CAAC"}
+{"version":3,"file":"PhoneEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PhoneEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAiBtE,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAOrK,QAAA,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAwMnE,CAAC;AAGF,OAAO,EAAE,qBAAqB,EAAE,CAAC"}

package/dist/esm/components/auth/enrollment/PhoneEnrollmentMethod.js

@@ -8,6 +8,7 @@ import { ButtonSize } from '@wildo-ai/presets-components-models';
 import { AutomatedForm } from '../../../components/form/automated/AutomatedForm.js';
 import { Text } from '../../../components/typography/text.js';
 import { getManualCallsHttpClient } from '../../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
+import { useUserFacingErrorMessage } from '../../../core/errors/useUserFacingErrorMessage.js';
 import { registerEnrollmentMethodComponent } from '../../../components/auth/enrollment/enrollment-method-components.js';
 import { AuthSingleFieldFormLayout } from '../../../components/auth/utils/AuthSingleFieldFormLayout.js';
 function buildSessionHeaders(sessionId) {
@@ -16,6 +17,7 @@ function buildSessionHeaders(sessionId) {
 const PhoneEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t }) => {
     const phoneFormMethodsRef = useRef(null);
     const codeFormMethodsRef = useRef(null);
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const [phoneNumber, setPhoneNumber] = useState('');
     const [codeSent, setCodeSent] = useState(false);
     const [codeSending, setCodeSending] = useState(false);
@@ -74,7 +76,7 @@ const PhoneEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t })
             setCodeSent(true);
         }
         catch (e) {
-            const msg = e?.message || t(EnrollmentRequiredLabel.ENROLL_ERROR);
+            const msg = toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));
             if (errorTarget === 'phone') {
                 setPhoneFormError(msg);
             }
@@ -90,6 +92,7 @@ const PhoneEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t })
         sessionId,
         onError,
         t,
+        toUserFacingErrorMessage,
         clearPhoneFormError,
         clearCodeFormError,
         setPhoneFormError,
@@ -107,18 +110,18 @@ const PhoneEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t })
             const headers = buildSessionHeaders(sessionId);
             const result = await getManualCallsHttpClient().phoneVerifyConfirm(phoneNumber.trim(), data.code.trim(), headers ? { headers } : undefined);
             if (result.verified) {
-                onComplete();
+                onComplete(result.enrollmentSession);
             }
             else {
                 setCodeFormError(t(EnrollmentRequiredLabel.ENROLL_ERROR));
             }
         }
         catch (e) {
-            const msg = e?.message || t(EnrollmentRequiredLabel.ENROLL_ERROR);
+            const msg = toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));
             setCodeFormError(msg);
             onError(msg);
         }
-    }, [phoneNumber, sessionId, onComplete, onError, t, clearCodeFormError, setCodeFormError]);
+    }, [phoneNumber, sessionId, onComplete, onError, t, clearCodeFormError, setCodeFormError, toUserFacingErrorMessage]);
     if (!codeSent) {
         return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(EnrollmentRequiredLabel.PHONE_DESCRIPTION) }), _jsx(AutomatedForm, { schema: PhoneEnrollmentStartFormDtoSchema, defaultValues: { phoneNumber }, onSubmit: handleSendCode, validationMode: ValidationMode.ON_BLUR, disabled: codeSending || isLoading, onFormReady: handlePhoneFormReady, labels: {
                         fields: {

package/dist/esm/components/auth/enrollment/PhoneEnrollmentMethod.js.map

@@ -1 +1 @@
-{"version":3,"file":"PhoneEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/PhoneEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EACL,UAAU,EACV,iCAAiC,EACjC,kCAAkC,GAGnC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AACrK,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAEhH,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,qBAAqB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC3H,MAAM,mBAAmB,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IAC7D,MAAM,kBAAkB,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IAE5D,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtD,MAAM,uBAAuB,GAAG,OAAO,CAAW,GAAG,EAAE;QACrD,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,aAAa,EACvB,WAAW,EAAE,CAAC,CAAC,uBAAuB,CAAC,eAAe,CAAC,EACvD,eAAe,EAAE,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,EACzD,UAAU,EAAE;gBACV,IAAI,EAAE,KAAK;gBACX,WAAW,EAAE,iBAAiB;gBAC9B,SAAS,EAAE,IAAI;aAChB,GACD,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,gBAAgB,GAAG,OAAO,CAAW,GAAG,EAAE;QAC9C,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,MAAM,EAChB,WAAW,EAAE,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,EAC3D,eAAe,EAAE,CAAC,CAAC,uBAAuB,CAAC,eAAe,CAAC,EAC3D,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAC/B,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QACpE,mBAAmB,CAAC,OAAO,GAAG,WAAW,CAAC;IAC5C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,mBAAmB,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QACnE,kBAAkB,CAAC,OAAO,GAAG,WAAW,CAAC;IAC3C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3C,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,iBAAiB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACxD,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YAC5C,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YAC3C,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,yBAAyB,GAAG,WAAW,CAAC,KAAK,EACjD,cAAsB,EACtB,WAA6B,EAC7B,EAAE;QACF,MAAM,qBAAqB,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,mBAAmB,EAAE,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,kBAAkB,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,wBAAwB,EAAE,CAAC,eAAe,CAC9C,qBAAqB,EACrB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YACF,cAAc,CAAC,qBAAqB,CAAC,CAAC;YACtC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YAClE,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;gBAC5B,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE;QACD,SAAS;QACT,OAAO;QACP,CAAC;QACD,mBAAmB;QACnB,kBAAkB;QAClB,iBAAiB;QACjB,gBAAgB;KACjB,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,EAAE,IAAiC,EAAE,EAAE;QAC7E,MAAM,yBAAyB,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAEhC,MAAM,gBAAgB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC9C,MAAM,yBAAyB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC,EAAE,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAE7C,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAAkC,EAAE,EAAE;QAC5E,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAChE,WAAW,CAAC,IAAI,EAAE,EAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAChB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YACF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,UAAU,EAAE,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YAClE,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,GACxC,EAEP,KAAC,aAAa,IAEZ,MAAM,EAAE,iCAAiC,EACzC,aAAa,EAAE,EAAE,WAAW,EAAE,EAC9B,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,WAAW,IAAI,SAAS,EAClC,WAAW,EAAE,oBAAoB,EACjC,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,WAAW,EAAE,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC;yBAC3D;qBACF,EACD,cAAc,EAAE,uBAAuB,IAZnC,wBAAwB,CAa5B,IACE,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,eAAe,CAAC,GACtC,EAEP,KAAC,aAAa,IAEZ,MAAM,EAAE,kCAAkC,EAC1C,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,WAAW,IAAI,SAAS,EAClC,WAAW,EAAE,mBAAmB,EAChC,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,IAAI,EAAE,CAAC,CAAC,uBAAuB,CAAC,gBAAgB,CAAC;qBAClD;iBACF,EACD,cAAc,EAAE,gBAAgB,IAZ5B,yBAAyB,CAa7B,EAEF,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,YACjH,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,GACjC,GACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useMemo, useRef, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport {\n  AuthMethod,\n  PhoneEnrollmentStartFormDtoSchema,\n  PhoneEnrollmentVerifyFormDtoSchema,\n  type PhoneEnrollmentStartFormDto,\n  type PhoneEnrollmentVerifyFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ButtonSize } from '@wildo-ai/presets-components-models';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\nimport { AuthSingleFieldFormLayout } from '~wildo-frontend-lib/components/auth/utils/AuthSingleFieldFormLayout';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> | undefined {\n  return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\nconst PhoneEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n  const phoneFormMethodsRef = useRef<FormMethods | null>(null);\n  const codeFormMethodsRef = useRef<FormMethods | null>(null);\n\n  const [phoneNumber, setPhoneNumber] = useState('');\n  const [codeSent, setCodeSent] = useState(false);\n  const [codeSending, setCodeSending] = useState(false);\n\n  const PhoneNumberFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"phoneNumber\"\n        submitLabel={t(EnrollmentRequiredLabel.PHONE_SEND_CODE)}\n        submittingLabel={t(EnrollmentRequiredLabel.PHONE_SENDING)}\n        fieldProps={{\n          type: 'tel',\n          placeholder: '+1 555 123 4567',\n          autoFocus: true,\n        }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const CodeFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"code\"\n        submitLabel={t(EnrollmentRequiredLabel.PHONE_VERIFY_BUTTON)}\n        submittingLabel={t(EnrollmentRequiredLabel.PHONE_VERIFYING)}\n        fieldProps={{ autoFocus: true }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const handlePhoneFormReady = useCallback((formMethods: FormMethods) => {\n    phoneFormMethodsRef.current = formMethods;\n  }, []);\n\n  const handleCodeFormReady = useCallback((formMethods: FormMethods) => {\n    codeFormMethodsRef.current = formMethods;\n  }, []);\n\n  const clearPhoneFormError = useCallback(() => {\n    phoneFormMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const clearCodeFormError = useCallback(() => {\n    codeFormMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const setPhoneFormError = useCallback((message: string) => {\n    phoneFormMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  const setCodeFormError = useCallback((message: string) => {\n    codeFormMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  const sendPhoneVerificationCode = useCallback(async (\n    rawPhoneNumber: string,\n    errorTarget: 'phone' | 'code',\n  ) => {\n    const normalizedPhoneNumber = rawPhoneNumber.trim();\n    if (!normalizedPhoneNumber) {\n      return;\n    }\n\n    setCodeSending(true);\n    if (errorTarget === 'phone') {\n      clearPhoneFormError();\n    } else {\n      clearCodeFormError();\n    }\n\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      await getManualCallsHttpClient().phoneVerifySend(\n        normalizedPhoneNumber,\n        headers ? { headers } : undefined,\n      );\n      setPhoneNumber(normalizedPhoneNumber);\n      setCodeSent(true);\n    } catch (e: any) {\n      const msg = e?.message || t(EnrollmentRequiredLabel.ENROLL_ERROR);\n      if (errorTarget === 'phone') {\n        setPhoneFormError(msg);\n      } else {\n        setCodeFormError(msg);\n      }\n      onError(msg);\n    } finally {\n      setCodeSending(false);\n    }\n  }, [\n    sessionId,\n    onError,\n    t,\n    clearPhoneFormError,\n    clearCodeFormError,\n    setPhoneFormError,\n    setCodeFormError,\n  ]);\n\n  const handleSendCode = useCallback(async (data: PhoneEnrollmentStartFormDto) => {\n    await sendPhoneVerificationCode(data.phoneNumber, 'phone');\n  }, [sendPhoneVerificationCode]);\n\n  const handleResendCode = useCallback(async () => {\n    await sendPhoneVerificationCode(phoneNumber, 'code');\n  }, [phoneNumber, sendPhoneVerificationCode]);\n\n  const handleVerify = useCallback(async (data: PhoneEnrollmentVerifyFormDto) => {\n    clearCodeFormError();\n\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      const result = await getManualCallsHttpClient().phoneVerifyConfirm(\n        phoneNumber.trim(),\n        data.code.trim(),\n        headers ? { headers } : undefined,\n      );\n      if (result.verified) {\n        onComplete();\n      } else {\n        setCodeFormError(t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      }\n    } catch (e: any) {\n      const msg = e?.message || t(EnrollmentRequiredLabel.ENROLL_ERROR);\n      setCodeFormError(msg);\n      onError(msg);\n    }\n  }, [phoneNumber, sessionId, onComplete, onError, t, clearCodeFormError, setCodeFormError]);\n\n  if (!codeSent) {\n    return (\n      <div className=\"space-y-item\">\n        <Text className=\"text-sm text-muted-foreground text-center\">\n          {t(EnrollmentRequiredLabel.PHONE_DESCRIPTION)}\n        </Text>\n\n        <AutomatedForm\n          key=\"phone-enrollment-start\"\n          schema={PhoneEnrollmentStartFormDtoSchema}\n          defaultValues={{ phoneNumber }}\n          onSubmit={handleSendCode}\n          validationMode={ValidationMode.ON_BLUR}\n          disabled={codeSending || isLoading}\n          onFormReady={handlePhoneFormReady}\n          labels={{\n            fields: {\n              phoneNumber: t(EnrollmentRequiredLabel.PHONE_NUMBER_LABEL),\n            },\n          }}\n          layoutTemplate={PhoneNumberFormTemplate}\n        />\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(EnrollmentRequiredLabel.PHONE_CODE_SENT)}\n      </Text>\n\n      <AutomatedForm\n        key=\"phone-enrollment-verify\"\n        schema={PhoneEnrollmentVerifyFormDtoSchema}\n        defaultValues={{ code: '' }}\n        onSubmit={handleVerify}\n        validationMode={ValidationMode.ON_BLUR}\n        disabled={codeSending || isLoading}\n        onFormReady={handleCodeFormReady}\n        labels={{\n          fields: {\n            code: t(EnrollmentRequiredLabel.PHONE_CODE_LABEL),\n          },\n        }}\n        layoutTemplate={CodeFormTemplate}\n      />\n\n      <div className=\"text-center\">\n        <Button variant={ButtonVariants_Variant.GHOST} size={ButtonSize.SM} onClick={handleResendCode} disabled={codeSending}>\n          {t(EnrollmentRequiredLabel.PHONE_RESEND)}\n        </Button>\n      </div>\n    </div>\n  );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.SMS_OTP, PhoneEnrollmentMethod);\nexport { PhoneEnrollmentMethod };\n"]}
+{"version":3,"file":"PhoneEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PhoneEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EACL,UAAU,EACV,iCAAiC,EACjC,kCAAkC,GAGnC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AACrK,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAEhH,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,qBAAqB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC3H,MAAM,mBAAmB,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IAC7D,MAAM,kBAAkB,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IAC5D,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtD,MAAM,uBAAuB,GAAG,OAAO,CAAW,GAAG,EAAE;QACrD,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,aAAa,EACvB,WAAW,EAAE,CAAC,CAAC,uBAAuB,CAAC,eAAe,CAAC,EACvD,eAAe,EAAE,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,EACzD,UAAU,EAAE;gBACV,IAAI,EAAE,KAAK;gBACX,WAAW,EAAE,iBAAiB;gBAC9B,SAAS,EAAE,IAAI;aAChB,GACD,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,gBAAgB,GAAG,OAAO,CAAW,GAAG,EAAE;QAC9C,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,MAAM,EAChB,WAAW,EAAE,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,EAC3D,eAAe,EAAE,CAAC,CAAC,uBAAuB,CAAC,eAAe,CAAC,EAC3D,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAC/B,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QACpE,mBAAmB,CAAC,OAAO,GAAG,WAAW,CAAC;IAC5C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,mBAAmB,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QACnE,kBAAkB,CAAC,OAAO,GAAG,WAAW,CAAC;IAC3C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3C,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,iBAAiB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACxD,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YAC5C,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YAC3C,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,yBAAyB,GAAG,WAAW,CAAC,KAAK,EACjD,cAAsB,EACtB,WAA6B,EAC7B,EAAE;QACF,MAAM,qBAAqB,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,mBAAmB,EAAE,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,kBAAkB,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,wBAAwB,EAAE,CAAC,eAAe,CAC9C,qBAAqB,EACrB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YACF,cAAc,CAAC,qBAAqB,CAAC,CAAC;YACtC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YACjF,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;gBAC5B,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE;QACD,SAAS;QACT,OAAO;QACP,CAAC;QACD,wBAAwB;QACxB,mBAAmB;QACnB,kBAAkB;QAClB,iBAAiB;QACjB,gBAAgB;KACjB,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,EAAE,IAAiC,EAAE,EAAE;QAC7E,MAAM,yBAAyB,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAEhC,MAAM,gBAAgB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC9C,MAAM,yBAAyB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC,EAAE,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAE7C,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAAkC,EAAE,EAAE;QAC5E,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAChE,WAAW,CAAC,IAAI,EAAE,EAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAChB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YACF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YACjF,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAErH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,GACxC,EAEP,KAAC,aAAa,IAEZ,MAAM,EAAE,iCAAiC,EACzC,aAAa,EAAE,EAAE,WAAW,EAAE,EAC9B,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,WAAW,IAAI,SAAS,EAClC,WAAW,EAAE,oBAAoB,EACjC,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,WAAW,EAAE,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC;yBAC3D;qBACF,EACD,cAAc,EAAE,uBAAuB,IAZnC,wBAAwB,CAa5B,IACE,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,eAAe,CAAC,GACtC,EAEP,KAAC,aAAa,IAEZ,MAAM,EAAE,kCAAkC,EAC1C,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,WAAW,IAAI,SAAS,EAClC,WAAW,EAAE,mBAAmB,EAChC,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,IAAI,EAAE,CAAC,CAAC,uBAAuB,CAAC,gBAAgB,CAAC;qBAClD;iBACF,EACD,cAAc,EAAE,gBAAgB,IAZ5B,yBAAyB,CAa7B,EAEF,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,YACjH,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,GACjC,GACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useMemo, useRef, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport {\n  AuthMethod,\n  PhoneEnrollmentStartFormDtoSchema,\n  PhoneEnrollmentVerifyFormDtoSchema,\n  type PhoneEnrollmentStartFormDto,\n  type PhoneEnrollmentVerifyFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ButtonSize } from '@wildo-ai/presets-components-models';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\nimport { AuthSingleFieldFormLayout } from '~wildo-frontend-lib/components/auth/utils/AuthSingleFieldFormLayout';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> | undefined {\n  return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\nconst PhoneEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n  const phoneFormMethodsRef = useRef<FormMethods | null>(null);\n  const codeFormMethodsRef = useRef<FormMethods | null>(null);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const [phoneNumber, setPhoneNumber] = useState('');\n  const [codeSent, setCodeSent] = useState(false);\n  const [codeSending, setCodeSending] = useState(false);\n\n  const PhoneNumberFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"phoneNumber\"\n        submitLabel={t(EnrollmentRequiredLabel.PHONE_SEND_CODE)}\n        submittingLabel={t(EnrollmentRequiredLabel.PHONE_SENDING)}\n        fieldProps={{\n          type: 'tel',\n          placeholder: '+1 555 123 4567',\n          autoFocus: true,\n        }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const CodeFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"code\"\n        submitLabel={t(EnrollmentRequiredLabel.PHONE_VERIFY_BUTTON)}\n        submittingLabel={t(EnrollmentRequiredLabel.PHONE_VERIFYING)}\n        fieldProps={{ autoFocus: true }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const handlePhoneFormReady = useCallback((formMethods: FormMethods) => {\n    phoneFormMethodsRef.current = formMethods;\n  }, []);\n\n  const handleCodeFormReady = useCallback((formMethods: FormMethods) => {\n    codeFormMethodsRef.current = formMethods;\n  }, []);\n\n  const clearPhoneFormError = useCallback(() => {\n    phoneFormMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const clearCodeFormError = useCallback(() => {\n    codeFormMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const setPhoneFormError = useCallback((message: string) => {\n    phoneFormMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  const setCodeFormError = useCallback((message: string) => {\n    codeFormMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  const sendPhoneVerificationCode = useCallback(async (\n    rawPhoneNumber: string,\n    errorTarget: 'phone' | 'code',\n  ) => {\n    const normalizedPhoneNumber = rawPhoneNumber.trim();\n    if (!normalizedPhoneNumber) {\n      return;\n    }\n\n    setCodeSending(true);\n    if (errorTarget === 'phone') {\n      clearPhoneFormError();\n    } else {\n      clearCodeFormError();\n    }\n\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      await getManualCallsHttpClient().phoneVerifySend(\n        normalizedPhoneNumber,\n        headers ? { headers } : undefined,\n      );\n      setPhoneNumber(normalizedPhoneNumber);\n      setCodeSent(true);\n    } catch (e: any) {\n      const msg = toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      if (errorTarget === 'phone') {\n        setPhoneFormError(msg);\n      } else {\n        setCodeFormError(msg);\n      }\n      onError(msg);\n    } finally {\n      setCodeSending(false);\n    }\n  }, [\n    sessionId,\n    onError,\n    t,\n    toUserFacingErrorMessage,\n    clearPhoneFormError,\n    clearCodeFormError,\n    setPhoneFormError,\n    setCodeFormError,\n  ]);\n\n  const handleSendCode = useCallback(async (data: PhoneEnrollmentStartFormDto) => {\n    await sendPhoneVerificationCode(data.phoneNumber, 'phone');\n  }, [sendPhoneVerificationCode]);\n\n  const handleResendCode = useCallback(async () => {\n    await sendPhoneVerificationCode(phoneNumber, 'code');\n  }, [phoneNumber, sendPhoneVerificationCode]);\n\n  const handleVerify = useCallback(async (data: PhoneEnrollmentVerifyFormDto) => {\n    clearCodeFormError();\n\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      const result = await getManualCallsHttpClient().phoneVerifyConfirm(\n        phoneNumber.trim(),\n        data.code.trim(),\n        headers ? { headers } : undefined,\n      );\n      if (result.verified) {\n        onComplete(result.enrollmentSession);\n      } else {\n        setCodeFormError(t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      }\n    } catch (e: any) {\n      const msg = toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      setCodeFormError(msg);\n      onError(msg);\n    }\n  }, [phoneNumber, sessionId, onComplete, onError, t, clearCodeFormError, setCodeFormError, toUserFacingErrorMessage]);\n\n  if (!codeSent) {\n    return (\n      <div className=\"space-y-item\">\n        <Text className=\"text-sm text-muted-foreground text-center\">\n          {t(EnrollmentRequiredLabel.PHONE_DESCRIPTION)}\n        </Text>\n\n        <AutomatedForm\n          key=\"phone-enrollment-start\"\n          schema={PhoneEnrollmentStartFormDtoSchema}\n          defaultValues={{ phoneNumber }}\n          onSubmit={handleSendCode}\n          validationMode={ValidationMode.ON_BLUR}\n          disabled={codeSending || isLoading}\n          onFormReady={handlePhoneFormReady}\n          labels={{\n            fields: {\n              phoneNumber: t(EnrollmentRequiredLabel.PHONE_NUMBER_LABEL),\n            },\n          }}\n          layoutTemplate={PhoneNumberFormTemplate}\n        />\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(EnrollmentRequiredLabel.PHONE_CODE_SENT)}\n      </Text>\n\n      <AutomatedForm\n        key=\"phone-enrollment-verify\"\n        schema={PhoneEnrollmentVerifyFormDtoSchema}\n        defaultValues={{ code: '' }}\n        onSubmit={handleVerify}\n        validationMode={ValidationMode.ON_BLUR}\n        disabled={codeSending || isLoading}\n        onFormReady={handleCodeFormReady}\n        labels={{\n          fields: {\n            code: t(EnrollmentRequiredLabel.PHONE_CODE_LABEL),\n          },\n        }}\n        layoutTemplate={CodeFormTemplate}\n      />\n\n      <div className=\"text-center\">\n        <Button variant={ButtonVariants_Variant.GHOST} size={ButtonSize.SM} onClick={handleResendCode} disabled={codeSending}>\n          {t(EnrollmentRequiredLabel.PHONE_RESEND)}\n        </Button>\n      </div>\n    </div>\n  );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.SMS_OTP, PhoneEnrollmentMethod);\nexport { PhoneEnrollmentMethod };\n"]}

package/dist/esm/components/auth/enrollment/TotpEnrollmentMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TotpEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/TotpEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAkBjF,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAWrK,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CA6MlE,CAAC;AAGF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"TotpEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/TotpEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAmBjF,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAWrK,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CA+MlE,CAAC;AAGF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/esm/components/auth/enrollment/TotpEnrollmentMethod.js

@@ -12,6 +12,7 @@ import { CheckboxRoot } from '../../../components/form/controls/boolean/checkbox
 import { Card, CardContent } from '../../../components/sections/card.js';
 import QRCode from 'qrcode';
 import { getManualCallsHttpClient } from '../../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
+import { useUserFacingErrorMessage } from '../../../core/errors/useUserFacingErrorMessage.js';
 import { registerEnrollmentMethodComponent } from '../../../components/auth/enrollment/enrollment-method-components.js';
 function buildSessionHeaders(sessionId) {
     return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;
@@ -41,6 +42,8 @@ const TotpEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t })
     onErrorRef.current = onError;
     const tRef = useRef(t);
     tRef.current = t;
+    // Stable identity (see the hook), so the once-per-session setup effect may call it without re-firing.
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const setupPromiseRef = useRef(null);
     const CodeFormTemplate = useMemo(() => {
         const Template = () => (_jsx(AuthSingleFieldFormLayout, { fieldName: "code", submitLabel: t(EnrollmentRequiredLabel.TOTP_VERIFY_BUTTON), submittingLabel: t(EnrollmentRequiredLabel.TOTP_VERIFYING), fieldProps: { autoFocus: true } }));
@@ -88,7 +91,7 @@ const TotpEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t })
             catch (e) {
                 if (cancelled)
                     return;
-                const msg = e?.message || tRef.current(EnrollmentRequiredLabel.ENROLL_ERROR);
+                const msg = toUserFacingErrorMessage(e, tRef.current(EnrollmentRequiredLabel.ENROLL_ERROR));
                 setPhaseError(msg);
                 onErrorRef.current(msg);
             }
@@ -102,18 +105,18 @@ const TotpEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t })
             const headers = buildSessionHeaders(sessionId);
             const result = await getManualCallsHttpClient().mfaTOTPVerifySetup(data.code.trim(), headers ? { headers } : undefined);
             if (result.verified) {
-                onComplete();
+                onComplete(result.enrollmentSession);
             }
             else {
                 setCodeFormError(t(EnrollmentRequiredLabel.ENROLL_ERROR));
             }
         }
         catch (e) {
-            const msg = e?.message || t(EnrollmentRequiredLabel.ENROLL_ERROR);
+            const msg = toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));
             setCodeFormError(msg);
             onError(msg);
         }
-    }, [sessionId, onComplete, onError, t, clearCodeFormError, setCodeFormError]);
+    }, [sessionId, onComplete, onError, t, clearCodeFormError, setCodeFormError, toUserFacingErrorMessage]);
     if (phase === 'loading') {
         return (_jsx("div", { className: "space-y-item text-center", children: _jsx(Text, { className: "text-sm text-muted-foreground", children: t(EnrollmentRequiredLabel.LOADING) }) }));
     }

package/dist/esm/components/auth/enrollment/TotpEnrollmentMethod.js.map

@@ -1 +1 @@
-{"version":3,"file":"TotpEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/TotpEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EACL,UAAU,EACV,iCAAiC,GAElC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAChH,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,KAAK,EAAE,MAAM,iDAAiD,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,+DAA+D,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AACjF,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AAErK,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAOD,MAAM,oBAAoB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC1H,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAa,SAAS,CAAC,CAAC;IAC1D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IACjD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAW,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAElE,wEAAwE;IACxE,4EAA4E;IAC5E,8EAA8E;IAC9E,2CAA2C;IAC3C,EAAE;IACF,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,wEAAwE;IACxE,sEAAsE;IACtE,4EAA4E;IAC5E,2EAA2E;IAC3E,sBAAsB;IACtB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IACjB,MAAM,eAAe,GAAG,MAAM,CAA8E,IAAI,CAAC,CAAC;IAElH,MAAM,gBAAgB,GAAG,OAAO,CAAW,GAAG,EAAE;QAC9C,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,MAAM,EAChB,WAAW,EAAE,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,EAC1D,eAAe,EAAE,CAAC,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAC1D,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAC/B,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YACvC,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,0EAA0E;QAC1E,6EAA6E;QAC7E,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChF,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,eAAe,CAAC,OAAO,GAAG;gBACxB,SAAS;gBACT,OAAO,EAAE,wBAAwB,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aACpF,CAAC;QACJ,CAAC;QACD,6EAA6E;QAC7E,wCAAwC;QACxC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC;QAEhD,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;gBAC7B,IAAI,SAAS;oBAAE,OAAO;gBAEtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBACpF,IAAI,SAAS;oBAAE,OAAO;gBAEtB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,cAAc,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;gBACzC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,IAAI,SAAS;oBAAE,OAAO;gBACtB,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;gBAC7E,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC;QACF,KAAK,EAAE,CAAC;QAER,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAAiC,EAAE,EAAE;QAC3E,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAChE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAChB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YACF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,UAAU,EAAE,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YAClE,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAE9E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CACL,cAAK,SAAS,EAAC,0BAA0B,YACvC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAQ,GACvF,CACP,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB,MAAM,qBAAqB,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC5E,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAC1C,EAEN,SAAS,IAAI,CACZ,cAAK,SAAS,EAAC,0BAA0B,YACvC,cAAK,GAAG,EAAE,SAAS,EAAE,GAAG,EAAC,cAAc,EAAC,SAAS,EAAC,YAAY,GAAG,GAC7D,CACP,EAED,eAAK,SAAS,EAAC,aAAa,aAC1B,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,GAAQ,EACtG,eAAM,SAAS,EAAC,iFAAiF,YAC9F,MAAM,GACF,IACH,EAEL,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CACzB,KAAC,IAAI,cACH,MAAC,WAAW,IAAC,SAAS,EAAC,gBAAgB,aACrC,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,GAAQ,EAC3F,cAAK,SAAS,EAAC,wBAAwB,YACpC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAC1B,eAAc,SAAS,EAAC,0DAA0D,YAC/E,EAAE,IADM,CAAC,CAEL,CACR,CAAC,GACE,EACN,MAAC,KAAK,IAAC,SAAS,EAAC,6CAA6C,aAC5D,KAAC,YAAY,IACX,OAAO,EAAE,kBAAkB,EAC3B,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,KAAK,IAAI,CAAC,GACrE,EACF,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,GAAQ,IACzE,IACI,GACT,CACR,EAOD,eAAK,SAAS,EAAC,sBAAsB,aACnC,KAAC,IAAI,IAAC,SAAS,EAAC,iCAAiC,YAC9C,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,GACxC,EACP,KAAC,aAAa,IAEZ,MAAM,EAAE,iCAAiC,EACzC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,IAAI,qBAAqB,EAC5C,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;4BACN,MAAM,EAAE;gCACN,IAAI,EAAE,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC;6BACnD;yBACF,EACD,cAAc,EAAE,gBAAgB,IAZ5B,wBAAwB,CAa5B,IACE,EAEL,UAAU,IAAI,CACb,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,UAAU,GAAoB,GAC3C,CACT,IACG,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport {\n  AuthMethod,\n  TotpEnrollmentVerifyFormDtoSchema,\n  type TotpEnrollmentVerifyFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { AuthSingleFieldFormLayout } from '~wildo-frontend-lib/components/auth/utils/AuthSingleFieldFormLayout';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { Label } from '~wildo-frontend-lib/components/typography/label';\nimport { CheckboxRoot } from '~wildo-frontend-lib/components/form/controls/boolean/checkbox';\nimport { Card, CardContent } from '~wildo-frontend-lib/components/sections/card';\nimport QRCode from 'qrcode';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> | undefined {\n  return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\ntype SetupPhase = 'loading' | 'ready';\n\n/** Result shape of `mfaTOTPSetup` — cached per-session to fire the ceremony once. */\ntype TotpSetupResult = { secret: string; qrCodeUri: string; backupCodes?: string[] };\n\nconst TotpEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n  const formMethodsRef = useRef<FormMethods | null>(null);\n  const [phase, setPhase] = useState<SetupPhase>('loading');\n  const [qrDataUrl, setQrDataUrl] = useState<string>('');\n  const [secret, setSecret] = useState<string>('');\n  const [backupCodes, setBackupCodes] = useState<string[]>([]);\n  const [backupAcknowledged, setBackupAcknowledged] = useState(false);\n  const [phaseError, setPhaseError] = useState<string | null>(null);\n\n  // `mfaTOTPSetup` is non-idempotent (each call mints a fresh secret) and\n  // rate-limited, so it must fire EXACTLY ONCE per `sessionId`. Stash `t` and\n  // `onError` in refs so re-renders that swap their identities (callers passing\n  // inline arrows) don't re-fire the effect.\n  //\n  // The setup PROMISE is cached (not a \"did I fire?\" boolean) so the ceremony is\n  // correct under React StrictMode's dev mount→cleanup→remount: mount 1 fires\n  // the request and caches the promise; its cleanup cancels only ITS OWN result\n  // application; the remount re-subscribes to the SAME cached promise and\n  // applies the result through its own live `cancelled` flag. A boolean\n  // once-guard instead strands the component on 'loading' forever — mount 1's\n  // result is dropped by its cancelled flag and the guard blocks the remount\n  // from ever retrying.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const tRef = useRef(t);\n  tRef.current = t;\n  const setupPromiseRef = useRef<{ sessionId: string | undefined; promise: Promise<TotpSetupResult> } | null>(null);\n\n  const CodeFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"code\"\n        submitLabel={t(EnrollmentRequiredLabel.TOTP_VERIFY_BUTTON)}\n        submittingLabel={t(EnrollmentRequiredLabel.TOTP_VERIFYING)}\n        fieldProps={{ autoFocus: true }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const handleFormReady = useCallback((formMethods: FormMethods) => {\n    formMethodsRef.current = formMethods;\n  }, []);\n\n  const clearCodeFormError = useCallback(() => {\n    formMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const setCodeFormError = useCallback((message: string) => {\n    formMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  useEffect(() => {\n    let cancelled = false;\n\n    // Fire setup once per sessionId; reuse the cached promise on a StrictMode\n    // remount (or any re-render) instead of minting a second server-side secret.\n    if (!setupPromiseRef.current || setupPromiseRef.current.sessionId !== sessionId) {\n      const headers = buildSessionHeaders(sessionId);\n      setupPromiseRef.current = {\n        sessionId,\n        promise: getManualCallsHttpClient().mfaTOTPSetup(headers ? { headers } : undefined),\n      };\n    }\n    // Capture the promise for THIS run so a later sessionId change can't swap it\n    // out from under the in-flight handler.\n    const pending = setupPromiseRef.current.promise;\n\n    const apply = async () => {\n      try {\n        const result = await pending;\n        if (cancelled) return;\n\n        const dataUrl = await QRCode.toDataURL(result.qrCodeUri, { width: 256, margin: 2 });\n        if (cancelled) return;\n\n        setSecret(result.secret);\n        setQrDataUrl(dataUrl);\n        setBackupCodes(result.backupCodes || []);\n        setPhase('ready');\n      } catch (e: any) {\n        if (cancelled) return;\n        const msg = e?.message || tRef.current(EnrollmentRequiredLabel.ENROLL_ERROR);\n        setPhaseError(msg);\n        onErrorRef.current(msg);\n      }\n    };\n    apply();\n\n    return () => { cancelled = true; };\n  }, [sessionId]);\n\n  const handleVerify = useCallback(async (data: TotpEnrollmentVerifyFormDto) => {\n    clearCodeFormError();\n\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      const result = await getManualCallsHttpClient().mfaTOTPVerifySetup(\n        data.code.trim(),\n        headers ? { headers } : undefined,\n      );\n      if (result.verified) {\n        onComplete();\n      } else {\n        setCodeFormError(t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      }\n    } catch (e: any) {\n      const msg = e?.message || t(EnrollmentRequiredLabel.ENROLL_ERROR);\n      setCodeFormError(msg);\n      onError(msg);\n    }\n  }, [sessionId, onComplete, onError, t, clearCodeFormError, setCodeFormError]);\n\n  if (phase === 'loading') {\n    return (\n      <div className=\"space-y-item text-center\">\n        <Text className=\"text-sm text-muted-foreground\">{t(EnrollmentRequiredLabel.LOADING)}</Text>\n      </div>\n    );\n  }\n\n  // Single enrollment screen: scan the QR (or enter the secret), save the backup\n  // codes, then enter the 6-digit code from the authenticator app and verify —\n  // all in one place. Previously the code entry sat behind a separate \"Submit\"\n  // step, which read as \"finish\" and left the QR screen with no field to type\n  // the code into.\n  const mustAcknowledgeBackup = backupCodes.length > 0 && !backupAcknowledged;\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(EnrollmentRequiredLabel.TOTP_QR_INSTRUCTION)}\n      </Text>\n\n      {qrDataUrl && (\n        <div className=\"flex justify-center py-2\">\n          <img src={qrDataUrl} alt=\"TOTP QR Code\" className=\"rounded-md\" />\n        </div>\n      )}\n\n      <div className=\"text-center\">\n        <Text className=\"text-xs text-muted-foreground\">{t(EnrollmentRequiredLabel.TOTP_MANUAL_SECRET)}</Text>\n        <code className=\"block mt-1 text-sm font-mono bg-muted px-3 py-2 rounded-md select-all break-all\">\n          {secret}\n        </code>\n      </div>\n\n      {backupCodes.length > 0 && (\n        <Card>\n          <CardContent className=\"space-y-2 pt-4\">\n            <Text className=\"text-sm font-medium\">{t(EnrollmentRequiredLabel.TOTP_BACKUP_CODES)}</Text>\n            <div className=\"grid grid-cols-2 gap-1\">\n              {backupCodes.map((bc, i) => (\n                <code key={i} className=\"text-xs font-mono bg-muted px-2 py-1 rounded text-center\">\n                  {bc}\n                </code>\n              ))}\n            </div>\n            <Label className=\"flex items-center gap-2 cursor-pointer mt-2\">\n              <CheckboxRoot\n                checked={backupAcknowledged}\n                onCheckedChange={(checked) => setBackupAcknowledged(checked === true)}\n              />\n              <Text className=\"text-xs\">{t(EnrollmentRequiredLabel.TOTP_BACKUP_SAVED)}</Text>\n            </Label>\n          </CardContent>\n        </Card>\n      )}\n\n      {/* Verification step, on the SAME screen as the QR. Gated until the backup\n          codes are acknowledged so the user cannot complete enrollment without\n          saving them — `AutomatedForm`'s `disabled` flag drives both the code\n          field and the submit. The submit button lives inside `CodeFormTemplate`\n          (labelled \"Verify Code\"); there is no separate \"Submit\" navigation. */}\n      <div className=\"space-y-item-xs pt-2\">\n        <Text className=\"text-sm font-medium text-center\">\n          {t(EnrollmentRequiredLabel.TOTP_VERIFY_LABEL)}\n        </Text>\n        <AutomatedForm\n          key=\"totp-enrollment-verify\"\n          schema={TotpEnrollmentVerifyFormDtoSchema}\n          defaultValues={{ code: '' }}\n          onSubmit={handleVerify}\n          validationMode={ValidationMode.ON_BLUR}\n          disabled={isLoading || mustAcknowledgeBackup}\n          onFormReady={handleFormReady}\n          labels={{\n            fields: {\n              code: t(EnrollmentRequiredLabel.TOTP_VERIFY_LABEL),\n            },\n          }}\n          layoutTemplate={CodeFormTemplate}\n        />\n      </div>\n\n      {phaseError && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{phaseError}</AlertDescription>\n        </Alert>\n      )}\n    </div>\n  );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.TOTP, TotpEnrollmentMethod);\nexport { TotpEnrollmentMethod };\n"]}
+{"version":3,"file":"TotpEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/TotpEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EACL,UAAU,EACV,iCAAiC,GAElC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAChH,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,KAAK,EAAE,MAAM,iDAAiD,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,+DAA+D,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AACjF,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AAErK,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAOD,MAAM,oBAAoB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC1H,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAa,SAAS,CAAC,CAAC;IAC1D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IACjD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAW,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAElE,wEAAwE;IACxE,4EAA4E;IAC5E,8EAA8E;IAC9E,2CAA2C;IAC3C,EAAE;IACF,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,wEAAwE;IACxE,sEAAsE;IACtE,4EAA4E;IAC5E,2EAA2E;IAC3E,sBAAsB;IACtB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IACjB,sGAAsG;IACtG,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAC7D,MAAM,eAAe,GAAG,MAAM,CAA8E,IAAI,CAAC,CAAC;IAElH,MAAM,gBAAgB,GAAG,OAAO,CAAW,GAAG,EAAE;QAC9C,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,MAAM,EAChB,WAAW,EAAE,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,EAC1D,eAAe,EAAE,CAAC,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAC1D,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAC/B,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YACvC,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,0EAA0E;QAC1E,6EAA6E;QAC7E,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChF,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,eAAe,CAAC,OAAO,GAAG;gBACxB,SAAS;gBACT,OAAO,EAAE,wBAAwB,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aACpF,CAAC;QACJ,CAAC;QACD,6EAA6E;QAC7E,wCAAwC;QACxC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC;QAEhD,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;gBAC7B,IAAI,SAAS;oBAAE,OAAO;gBAEtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBACpF,IAAI,SAAS;oBAAE,OAAO;gBAEtB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,cAAc,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;gBACzC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,IAAI,SAAS;oBAAE,OAAO;gBACtB,MAAM,GAAG,GAAG,wBAAwB,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC5F,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC;QACF,KAAK,EAAE,CAAC;QAER,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAAiC,EAAE,EAAE;QAC3E,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAChE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAChB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YACF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YACjF,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAExG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CACL,cAAK,SAAS,EAAC,0BAA0B,YACvC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAQ,GACvF,CACP,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB,MAAM,qBAAqB,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC5E,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAC1C,EAEN,SAAS,IAAI,CACZ,cAAK,SAAS,EAAC,0BAA0B,YACvC,cAAK,GAAG,EAAE,SAAS,EAAE,GAAG,EAAC,cAAc,EAAC,SAAS,EAAC,YAAY,GAAG,GAC7D,CACP,EAED,eAAK,SAAS,EAAC,aAAa,aAC1B,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,GAAQ,EACtG,eAAM,SAAS,EAAC,iFAAiF,YAC9F,MAAM,GACF,IACH,EAEL,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CACzB,KAAC,IAAI,cACH,MAAC,WAAW,IAAC,SAAS,EAAC,gBAAgB,aACrC,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,GAAQ,EAC3F,cAAK,SAAS,EAAC,wBAAwB,YACpC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAC1B,eAAc,SAAS,EAAC,0DAA0D,YAC/E,EAAE,IADM,CAAC,CAEL,CACR,CAAC,GACE,EACN,MAAC,KAAK,IAAC,SAAS,EAAC,6CAA6C,aAC5D,KAAC,YAAY,IACX,OAAO,EAAE,kBAAkB,EAC3B,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,KAAK,IAAI,CAAC,GACrE,EACF,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,GAAQ,IACzE,IACI,GACT,CACR,EAOD,eAAK,SAAS,EAAC,sBAAsB,aACnC,KAAC,IAAI,IAAC,SAAS,EAAC,iCAAiC,YAC9C,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,GACxC,EACP,KAAC,aAAa,IAEZ,MAAM,EAAE,iCAAiC,EACzC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,IAAI,qBAAqB,EAC5C,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;4BACN,MAAM,EAAE;gCACN,IAAI,EAAE,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC;6BACnD;yBACF,EACD,cAAc,EAAE,gBAAgB,IAZ5B,wBAAwB,CAa5B,IACE,EAEL,UAAU,IAAI,CACb,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,UAAU,GAAoB,GAC3C,CACT,IACG,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport {\n  AuthMethod,\n  TotpEnrollmentVerifyFormDtoSchema,\n  type TotpEnrollmentVerifyFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { AuthSingleFieldFormLayout } from '~wildo-frontend-lib/components/auth/utils/AuthSingleFieldFormLayout';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { Label } from '~wildo-frontend-lib/components/typography/label';\nimport { CheckboxRoot } from '~wildo-frontend-lib/components/form/controls/boolean/checkbox';\nimport { Card, CardContent } from '~wildo-frontend-lib/components/sections/card';\nimport QRCode from 'qrcode';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> | undefined {\n  return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\ntype SetupPhase = 'loading' | 'ready';\n\n/** Result shape of `mfaTOTPSetup` — cached per-session to fire the ceremony once. */\ntype TotpSetupResult = { secret: string; qrCodeUri: string; backupCodes?: string[] };\n\nconst TotpEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n  const formMethodsRef = useRef<FormMethods | null>(null);\n  const [phase, setPhase] = useState<SetupPhase>('loading');\n  const [qrDataUrl, setQrDataUrl] = useState<string>('');\n  const [secret, setSecret] = useState<string>('');\n  const [backupCodes, setBackupCodes] = useState<string[]>([]);\n  const [backupAcknowledged, setBackupAcknowledged] = useState(false);\n  const [phaseError, setPhaseError] = useState<string | null>(null);\n\n  // `mfaTOTPSetup` is non-idempotent (each call mints a fresh secret) and\n  // rate-limited, so it must fire EXACTLY ONCE per `sessionId`. Stash `t` and\n  // `onError` in refs so re-renders that swap their identities (callers passing\n  // inline arrows) don't re-fire the effect.\n  //\n  // The setup PROMISE is cached (not a \"did I fire?\" boolean) so the ceremony is\n  // correct under React StrictMode's dev mount→cleanup→remount: mount 1 fires\n  // the request and caches the promise; its cleanup cancels only ITS OWN result\n  // application; the remount re-subscribes to the SAME cached promise and\n  // applies the result through its own live `cancelled` flag. A boolean\n  // once-guard instead strands the component on 'loading' forever — mount 1's\n  // result is dropped by its cancelled flag and the guard blocks the remount\n  // from ever retrying.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const tRef = useRef(t);\n  tRef.current = t;\n  // Stable identity (see the hook), so the once-per-session setup effect may call it without re-firing.\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n  const setupPromiseRef = useRef<{ sessionId: string | undefined; promise: Promise<TotpSetupResult> } | null>(null);\n\n  const CodeFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"code\"\n        submitLabel={t(EnrollmentRequiredLabel.TOTP_VERIFY_BUTTON)}\n        submittingLabel={t(EnrollmentRequiredLabel.TOTP_VERIFYING)}\n        fieldProps={{ autoFocus: true }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const handleFormReady = useCallback((formMethods: FormMethods) => {\n    formMethodsRef.current = formMethods;\n  }, []);\n\n  const clearCodeFormError = useCallback(() => {\n    formMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const setCodeFormError = useCallback((message: string) => {\n    formMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  useEffect(() => {\n    let cancelled = false;\n\n    // Fire setup once per sessionId; reuse the cached promise on a StrictMode\n    // remount (or any re-render) instead of minting a second server-side secret.\n    if (!setupPromiseRef.current || setupPromiseRef.current.sessionId !== sessionId) {\n      const headers = buildSessionHeaders(sessionId);\n      setupPromiseRef.current = {\n        sessionId,\n        promise: getManualCallsHttpClient().mfaTOTPSetup(headers ? { headers } : undefined),\n      };\n    }\n    // Capture the promise for THIS run so a later sessionId change can't swap it\n    // out from under the in-flight handler.\n    const pending = setupPromiseRef.current.promise;\n\n    const apply = async () => {\n      try {\n        const result = await pending;\n        if (cancelled) return;\n\n        const dataUrl = await QRCode.toDataURL(result.qrCodeUri, { width: 256, margin: 2 });\n        if (cancelled) return;\n\n        setSecret(result.secret);\n        setQrDataUrl(dataUrl);\n        setBackupCodes(result.backupCodes || []);\n        setPhase('ready');\n      } catch (e: any) {\n        if (cancelled) return;\n        const msg = toUserFacingErrorMessage(e, tRef.current(EnrollmentRequiredLabel.ENROLL_ERROR));\n        setPhaseError(msg);\n        onErrorRef.current(msg);\n      }\n    };\n    apply();\n\n    return () => { cancelled = true; };\n  }, [sessionId]);\n\n  const handleVerify = useCallback(async (data: TotpEnrollmentVerifyFormDto) => {\n    clearCodeFormError();\n\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      const result = await getManualCallsHttpClient().mfaTOTPVerifySetup(\n        data.code.trim(),\n        headers ? { headers } : undefined,\n      );\n      if (result.verified) {\n        onComplete(result.enrollmentSession);\n      } else {\n        setCodeFormError(t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      }\n    } catch (e: any) {\n      const msg = toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      setCodeFormError(msg);\n      onError(msg);\n    }\n  }, [sessionId, onComplete, onError, t, clearCodeFormError, setCodeFormError, toUserFacingErrorMessage]);\n\n  if (phase === 'loading') {\n    return (\n      <div className=\"space-y-item text-center\">\n        <Text className=\"text-sm text-muted-foreground\">{t(EnrollmentRequiredLabel.LOADING)}</Text>\n      </div>\n    );\n  }\n\n  // Single enrollment screen: scan the QR (or enter the secret), save the backup\n  // codes, then enter the 6-digit code from the authenticator app and verify —\n  // all in one place. Previously the code entry sat behind a separate \"Submit\"\n  // step, which read as \"finish\" and left the QR screen with no field to type\n  // the code into.\n  const mustAcknowledgeBackup = backupCodes.length > 0 && !backupAcknowledged;\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(EnrollmentRequiredLabel.TOTP_QR_INSTRUCTION)}\n      </Text>\n\n      {qrDataUrl && (\n        <div className=\"flex justify-center py-2\">\n          <img src={qrDataUrl} alt=\"TOTP QR Code\" className=\"rounded-md\" />\n        </div>\n      )}\n\n      <div className=\"text-center\">\n        <Text className=\"text-xs text-muted-foreground\">{t(EnrollmentRequiredLabel.TOTP_MANUAL_SECRET)}</Text>\n        <code className=\"block mt-1 text-sm font-mono bg-muted px-3 py-2 rounded-md select-all break-all\">\n          {secret}\n        </code>\n      </div>\n\n      {backupCodes.length > 0 && (\n        <Card>\n          <CardContent className=\"space-y-2 pt-4\">\n            <Text className=\"text-sm font-medium\">{t(EnrollmentRequiredLabel.TOTP_BACKUP_CODES)}</Text>\n            <div className=\"grid grid-cols-2 gap-1\">\n              {backupCodes.map((bc, i) => (\n                <code key={i} className=\"text-xs font-mono bg-muted px-2 py-1 rounded text-center\">\n                  {bc}\n                </code>\n              ))}\n            </div>\n            <Label className=\"flex items-center gap-2 cursor-pointer mt-2\">\n              <CheckboxRoot\n                checked={backupAcknowledged}\n                onCheckedChange={(checked) => setBackupAcknowledged(checked === true)}\n              />\n              <Text className=\"text-xs\">{t(EnrollmentRequiredLabel.TOTP_BACKUP_SAVED)}</Text>\n            </Label>\n          </CardContent>\n        </Card>\n      )}\n\n      {/* Verification step, on the SAME screen as the QR. Gated until the backup\n          codes are acknowledged so the user cannot complete enrollment without\n          saving them — `AutomatedForm`'s `disabled` flag drives both the code\n          field and the submit. The submit button lives inside `CodeFormTemplate`\n          (labelled \"Verify Code\"); there is no separate \"Submit\" navigation. */}\n      <div className=\"space-y-item-xs pt-2\">\n        <Text className=\"text-sm font-medium text-center\">\n          {t(EnrollmentRequiredLabel.TOTP_VERIFY_LABEL)}\n        </Text>\n        <AutomatedForm\n          key=\"totp-enrollment-verify\"\n          schema={TotpEnrollmentVerifyFormDtoSchema}\n          defaultValues={{ code: '' }}\n          onSubmit={handleVerify}\n          validationMode={ValidationMode.ON_BLUR}\n          disabled={isLoading || mustAcknowledgeBackup}\n          onFormReady={handleFormReady}\n          labels={{\n            fields: {\n              code: t(EnrollmentRequiredLabel.TOTP_VERIFY_LABEL),\n            },\n          }}\n          layoutTemplate={CodeFormTemplate}\n        />\n      </div>\n\n      {phaseError && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{phaseError}</AlertDescription>\n        </Alert>\n      )}\n    </div>\n  );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.TOTP, TotpEnrollmentMethod);\nexport { TotpEnrollmentMethod };\n"]}

package/dist/esm/components/auth/enrollment/enrollment-method-components.d.ts

@@ -1,17 +1,25 @@
 import type React from 'react';
 import { AuthMethod } from '@wildo-ai/saas-models';
+import type { EnrollmentSessionSettlementResponse } from '../../../core/requests/wildo-http-client-manual-calls.frontend.service';
 /**
  * Props for enrollment method components.
  *
  * Key differences from AuthMethodComponentProps (login flow):
  * - `sessionId` is optional — present in enrollment gate (dual-auth), absent in settings page (JWT)
  * - No `email` or `methodConfig` — user is already identified via session/JWT
- * - `onComplete` returns void — the enrollment gate re-evaluates completeness
+ * - `onComplete` receives what the ceremony did to the session, when it did anything — the host
+ *   decides the next screen from it (see below)
  * - Components send `X-Auth-Session-Id` header when `sessionId` is provided (D12)
  */
 export interface EnrollmentMethodComponentProps {
     sessionId?: string;
-    onComplete: () => void;
+    /**
+     * Called once the factor is enrolled. `settlement` is the ceremony response's `enrollmentSession`,
+     * passed through UNCHANGED by every enrollment component so the host — not each component — owns
+     * what happens next: a `COMPLETED` registration carries an access token and ends signed in, an
+     * `MFA_REQUIRED` login goes on to the challenge. Undefined when no session moved (the settings page).
+     */
+    onComplete: (settlement?: EnrollmentSessionSettlementResponse) => void;
     onError: (error: string) => void;
     isLoading: boolean;
     t: (key: string) => string;

package/dist/esm/components/auth/enrollment/enrollment-method-components.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enrollment-method-components.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/enrollment-method-components.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,WAAW,8BAA8B;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,yBAAyB,GAAG,KAAK,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC;AAE5F,eAAO,MAAM,4BAA4B,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAM,CAAC;AAEvG,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,yBAAyB,GAAG,IAAI,CAEhH"}
+{"version":3,"file":"enrollment-method-components.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/enrollment-method-components.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,mFAAmF,CAAC;AAE7I;;;;;;;;;GASG;AACH,MAAM,WAAW,8BAA8B;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,mCAAmC,KAAK,IAAI,CAAC;IACvE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,yBAAyB,GAAG,KAAK,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC;AAE5F,eAAO,MAAM,4BAA4B,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAM,CAAC;AAEvG,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,yBAAyB,GAAG,IAAI,CAEhH"}

package/dist/esm/components/auth/enrollment/enrollment-method-components.js.map

@@ -1 +1 @@
-{"version":3,"file":"enrollment-method-components.js","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/enrollment-method-components.ts"],"names":[],"mappings":"AAsBA,MAAM,CAAC,MAAM,4BAA4B,GAA2D,EAAE,CAAC;AAEvG,MAAM,UAAU,iCAAiC,CAAC,MAAkB,EAAE,SAAoC;IACxG,4BAA4B,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;AACnD,CAAC","sourcesContent":["import type React from 'react';\nimport { AuthMethod } from '@wildo-ai/saas-models';\n\n/**\n * Props for enrollment method components.\n *\n * Key differences from AuthMethodComponentProps (login flow):\n * - `sessionId` is optional — present in enrollment gate (dual-auth), absent in settings page (JWT)\n * - No `email` or `methodConfig` — user is already identified via session/JWT\n * - `onComplete` returns void — the enrollment gate re-evaluates completeness\n * - Components send `X-Auth-Session-Id` header when `sessionId` is provided (D12)\n */\nexport interface EnrollmentMethodComponentProps {\n  sessionId?: string;\n  onComplete: () => void;\n  onError: (error: string) => void;\n  isLoading: boolean;\n  t: (key: string) => string;\n}\n\nexport type EnrollmentMethodComponent = React.ComponentType<EnrollmentMethodComponentProps>;\n\nexport const ENROLLMENT_METHOD_COMPONENTS: Partial<Record<AuthMethod, EnrollmentMethodComponent>> = {};\n\nexport function registerEnrollmentMethodComponent(method: AuthMethod, component: EnrollmentMethodComponent): void {\n  ENROLLMENT_METHOD_COMPONENTS[method] = component;\n}\n"]}
+{"version":3,"file":"enrollment-method-components.js","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/enrollment-method-components.ts"],"names":[],"mappings":"AA8BA,MAAM,CAAC,MAAM,4BAA4B,GAA2D,EAAE,CAAC;AAEvG,MAAM,UAAU,iCAAiC,CAAC,MAAkB,EAAE,SAAoC;IACxG,4BAA4B,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;AACnD,CAAC","sourcesContent":["import type React from 'react';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport type { EnrollmentSessionSettlementResponse } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\n\n/**\n * Props for enrollment method components.\n *\n * Key differences from AuthMethodComponentProps (login flow):\n * - `sessionId` is optional — present in enrollment gate (dual-auth), absent in settings page (JWT)\n * - No `email` or `methodConfig` — user is already identified via session/JWT\n * - `onComplete` receives what the ceremony did to the session, when it did anything — the host\n *   decides the next screen from it (see below)\n * - Components send `X-Auth-Session-Id` header when `sessionId` is provided (D12)\n */\nexport interface EnrollmentMethodComponentProps {\n  sessionId?: string;\n  /**\n   * Called once the factor is enrolled. `settlement` is the ceremony response's `enrollmentSession`,\n   * passed through UNCHANGED by every enrollment component so the host — not each component — owns\n   * what happens next: a `COMPLETED` registration carries an access token and ends signed in, an\n   * `MFA_REQUIRED` login goes on to the challenge. Undefined when no session moved (the settings page).\n   */\n  onComplete: (settlement?: EnrollmentSessionSettlementResponse) => void;\n  onError: (error: string) => void;\n  isLoading: boolean;\n  t: (key: string) => string;\n}\n\nexport type EnrollmentMethodComponent = React.ComponentType<EnrollmentMethodComponentProps>;\n\nexport const ENROLLMENT_METHOD_COMPONENTS: Partial<Record<AuthMethod, EnrollmentMethodComponent>> = {};\n\nexport function registerEnrollmentMethodComponent(method: AuthMethod, component: EnrollmentMethodComponent): void {\n  ENROLLMENT_METHOD_COMPONENTS[method] = component;\n}\n"]}

package/dist/esm/components/auth/methods/EmailOtpAuthMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EmailOtpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/EmailOtpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAiBtE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAGnH,QAAA,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAuH1D,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"EmailOtpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/EmailOtpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAkBtE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAInH,QAAA,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAyH1D,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/EmailOtpAuthMethod.js

@@ -3,16 +3,19 @@ import { useCallback, useMemo, useRef, useState } from 'react';
 import { MfaChallengeLabel } from '@wildo-ai/presets-components-models';
 import { AuthMethod, EmailOtpChallengeFormDtoSchema, } from '@wildo-ai/saas-models';
 import { ValidationMode } from '@wildo-ai/zod-decorators';
-import { Button, ButtonVariants_Variant } from '../../../components/actions/button.js';
+import { Button, ButtonLabelOverflow, ButtonVariants_Variant } from '../../../components/actions/button.js';
 import { ButtonSize } from '@wildo-ai/presets-components-models';
 import { AutomatedForm } from '../../../components/form/automated/AutomatedForm.js';
 import { Text } from '../../../components/typography/text.js';
 import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
 import { getManualCallsHttpClient } from '../../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
 import { useAuthSession } from '../../../core/security/useAuthSession.js';
+import { useUserFacingErrorMessage } from '../../../core/errors/useUserFacingErrorMessage.js';
 import { AuthSingleFieldFormLayout } from '../../../components/auth/utils/AuthSingleFieldFormLayout.js';
+import { AuthMethodIcon } from '../../../components/auth/utils/AuthMethodIcon.js';
 const EmailOtpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
     const { handleMfaVerify } = useAuthSession();
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const formMethodsRef = useRef(null);
     const [codeSent, setCodeSent] = useState(false);
     const [codeSending, setCodeSending] = useState(false);
@@ -42,7 +45,7 @@ const EmailOtpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
             setCodeSent(true);
         }
         catch (e) {
-            const message = e?.message || 'Failed to send code';
+            const message = toUserFacingErrorMessage(e, t(MfaChallengeLabel.ERROR_GENERIC));
             if (codeSent) {
                 setCodeFormError(message);
             }
@@ -53,7 +56,7 @@ const EmailOtpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
         finally {
             setCodeSending(false);
         }
-    }, [sessionId, codeSent, clearCodeFormError, setCodeFormError]);
+    }, [sessionId, codeSent, clearCodeFormError, setCodeFormError, t, toUserFacingErrorMessage]);
     const handleVerify = useCallback(async (data) => {
         clearCodeFormError();
         try {
@@ -62,15 +65,15 @@ const EmailOtpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
                 onSuccess(response);
             }
             else {
-                setCodeFormError(response.error || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+                setCodeFormError(toUserFacingErrorMessage(null, t(MfaChallengeLabel.ERROR_INVALID_CODE)));
             }
         }
         catch (e) {
-            setCodeFormError(e?.message || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+            setCodeFormError(toUserFacingErrorMessage(e, t(MfaChallengeLabel.ERROR_INVALID_CODE)));
         }
-    }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError]);
+    }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError, toUserFacingErrorMessage]);
     if (!codeSent) {
-        return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.EMAIL_OTP_DESCRIPTION) }), _jsx(Button, { className: "w-full", onClick: handleSendCode, disabled: codeSending || isLoading, children: codeSending ? t(MfaChallengeLabel.EMAIL_OTP_SENDING) : t(MfaChallengeLabel.EMAIL_OTP_SEND) }), sendError && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: sendError }) }))] }));
+        return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.EMAIL_OTP_DESCRIPTION) }), _jsxs(Button, { className: "w-full", labelOverflow: ButtonLabelOverflow.WRAP, onClick: handleSendCode, disabled: codeSending || isLoading, children: [_jsx(AuthMethodIcon, { method: AuthMethod.EMAIL_OTP }), codeSending ? t(MfaChallengeLabel.EMAIL_OTP_SENDING) : t(MfaChallengeLabel.EMAIL_OTP_SEND)] }), sendError && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: sendError }) }))] }));
     }
     return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.EMAIL_OTP_SENT) }), _jsx(AutomatedForm, { schema: EmailOtpChallengeFormDtoSchema, defaultValues: { code: '' }, onSubmit: handleVerify, validationMode: ValidationMode.ON_BLUR, disabled: isLoading || codeSending, onFormReady: handleFormReady, labels: {
                     fields: {