@wildo-ai/saas-frontend-lib 1.1.3 → 1.1.5

package/dist/esm/components/auth/methods/PasswordAuthMethod.js.map

@@ -1 +1 @@
-{"version":3,"file":"PasswordAuthMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/PasswordAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAyB,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAGhE;;;GAGG;AACH,MAAM,iBAAiB,GAAa,GAAG,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAE3F,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAC,OAAO,GAAG,EAC1B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,IAAI,CAAC,KAAK,IAAI,CACb,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,IAAI,CAAC,KAAK,GAAoB,GAC3C,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAC9B,eAAe,EAAC,QAAG,EACnB,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF,SAAS,+BAA+B,CAAC,KAAU;IACjD,MAAM,mBAAmB,GAAG,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW;WACnE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC;IAC7D,IAAI,OAAO,mBAAmB,KAAK,QAAQ,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9E,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;IACtE,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;IAC/C,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,OAAO,KAAK,EAAE,OAAO,IAAI,uBAAuB,CAAC;AACnD,CAAC;AAED,MAAM,kBAAkB,GAAuC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7G,MAAM,EAAE,wBAAwB,EAAE,GAAG,WAAW,EAAE,CAAC;IAEnD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAAsB,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3E,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,EAAE,CAAC,wBAAwB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEnD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACnC,KAAK;QACL,QAAQ,EAAE,EAAE;KACb,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEb,OAAO,CACL,KAAC,aAAa,IAEZ,MAAM,EAAE,sBAAsB,EAC9B,aAAa,EAAE,aAAoB,EACnC,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,EACnB,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;gBACrC,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC;aACpC;SACF,EACD,cAAc,EAAE,iBAAiB,IAZ7B,eAAe,CAanB,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useMemo } from 'react';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { FrontendComponentType, UserAuthLabel } from '@wildo-ai/presets-components-models';\nimport { AuthLoginFormDtoSchema, type AuthLoginFormDto } from '@wildo-ai/saas-models';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\n/**\n * Self-sufficient template for the password login form.\n * Reads auth error from `useUserOrgs()`, labels from `useI18n()`.\n */\nconst LoginFormTemplate: React.FC = () => {\n  const { auth } = useUserOrgs();\n  const { tComponent, isReady } = useI18n({\n    component: FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n  });\n  const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);\n\n  if (!isReady) return null;\n\n  return (\n    <FormLayout>\n      <FormField name=\"email\" />\n      <FormField name=\"password\" />\n\n      {auth.error && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{auth.error}</AlertDescription>\n        </Alert>\n      )}\n\n      <SubmitButton\n        label={t(UserAuthLabel.SUBMIT)}\n        submittingLabel=\"…\"\n        fullWidth\n      />\n    </FormLayout>\n  );\n};\n\nfunction extractPasswordAuthErrorMessage(error: any): string {\n  const guidanceExplanation = error?.wildoError?.userGuidance?.explanation\n    || error?.response?.data?.error?.userGuidance?.explanation;\n  if (typeof guidanceExplanation === 'string' && guidanceExplanation.length > 0) {\n    return guidanceExplanation;\n  }\n\n  const detailsMessage = error?.response?.data?.error?.details?.message;\n  if (typeof detailsMessage === 'string' && detailsMessage.length > 0) {\n    return detailsMessage;\n  }\n\n  const contextMessage = error?.context?.message;\n  if (typeof contextMessage === 'string' && contextMessage.length > 0) {\n    return contextMessage;\n  }\n\n  return error?.message || 'Authentication failed';\n}\n\nconst PasswordAuthMethod: React.FC<AuthMethodComponentProps> = ({ email, onSuccess, onError, isLoading, t }) => {\n  const { authenticateWithPassword } = useUserOrgs();\n\n  const handleSubmit = useCallback(async (data: AuthLoginFormDto) => {\n    try {\n      const response = await authenticateWithPassword(data.email, data.password);\n      onSuccess(response);\n    } catch (e: any) {\n      onError(extractPasswordAuthErrorMessage(e));\n    }\n  }, [authenticateWithPassword, onSuccess, onError]);\n\n  const defaultValues = useMemo(() => ({\n    email,\n    password: '',\n  }), [email]);\n\n  return (\n    <AutomatedForm\n      key=\"password-auth\"\n      schema={AuthLoginFormDtoSchema}\n      defaultValues={defaultValues as any}\n      onSubmit={handleSubmit}\n      validationMode={ValidationMode.ON_BLUR}\n      disabled={isLoading}\n      labels={{\n        fields: {\n          email: t(UserAuthLabel.EMAIL_ADDRESS),\n          password: t(UserAuthLabel.PASSWORD),\n        },\n      }}\n      layoutTemplate={LoginFormTemplate}\n    />\n  );\n};\n\nexport { PasswordAuthMethod };\n"]}
+{"version":3,"file":"PasswordAuthMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/PasswordAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAyB,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AAGtG;;;GAGG;AACH,MAAM,iBAAiB,GAAa,GAAG,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAE3F,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAC,OAAO,GAAG,EAC1B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,IAAI,CAAC,KAAK,IAAI,CACb,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,IAAI,CAAC,KAAK,GAAoB,GAC3C,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAC9B,eAAe,EAAC,QAAG,EACnB,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAuC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7G,MAAM,EAAE,wBAAwB,EAAE,GAAG,WAAW,EAAE,CAAC;IACnD,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAAsB,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3E,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,EAAE,CAAC,wBAAwB,EAAE,SAAS,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE7E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACnC,KAAK;QACL,QAAQ,EAAE,EAAE;KACb,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEb,OAAO,CACL,KAAC,aAAa,IAEZ,MAAM,EAAE,sBAAsB,EAC9B,aAAa,EAAE,aAAoB,EACnC,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,EACnB,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;gBACrC,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC;aACpC;SACF,EACD,cAAc,EAAE,iBAAiB,IAZ7B,eAAe,CAanB,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useMemo } from 'react';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { FrontendComponentType, UserAuthLabel } from '@wildo-ai/presets-components-models';\nimport { AuthLoginFormDtoSchema, type AuthLoginFormDto } from '@wildo-ai/saas-models';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\n/**\n * Self-sufficient template for the password login form.\n * Reads auth error from `useUserOrgs()`, labels from `useI18n()`.\n */\nconst LoginFormTemplate: React.FC = () => {\n  const { auth } = useUserOrgs();\n  const { tComponent, isReady } = useI18n({\n    component: FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n  });\n  const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);\n\n  if (!isReady) return null;\n\n  return (\n    <FormLayout>\n      <FormField name=\"email\" />\n      <FormField name=\"password\" />\n\n      {auth.error && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{auth.error}</AlertDescription>\n        </Alert>\n      )}\n\n      <SubmitButton\n        label={t(UserAuthLabel.SUBMIT)}\n        submittingLabel=\"…\"\n        fullWidth\n      />\n    </FormLayout>\n  );\n};\n\nconst PasswordAuthMethod: React.FC<AuthMethodComponentProps> = ({ email, onSuccess, onError, isLoading, t }) => {\n  const { authenticateWithPassword } = useUserOrgs();\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const handleSubmit = useCallback(async (data: AuthLoginFormDto) => {\n    try {\n      const response = await authenticateWithPassword(data.email, data.password);\n      onSuccess(response);\n    } catch (e: unknown) {\n      onError(toUserFacingErrorMessage(e));\n    }\n  }, [authenticateWithPassword, onSuccess, onError, toUserFacingErrorMessage]);\n\n  const defaultValues = useMemo(() => ({\n    email,\n    password: '',\n  }), [email]);\n\n  return (\n    <AutomatedForm\n      key=\"password-auth\"\n      schema={AuthLoginFormDtoSchema}\n      defaultValues={defaultValues as any}\n      onSubmit={handleSubmit}\n      validationMode={ValidationMode.ON_BLUR}\n      disabled={isLoading}\n      labels={{\n        fields: {\n          email: t(UserAuthLabel.EMAIL_ADDRESS),\n          password: t(UserAuthLabel.PASSWORD),\n        },\n      }}\n      layoutTemplate={LoginFormTemplate}\n    />\n  );\n};\n\nexport { PasswordAuthMethod };\n"]}

package/dist/esm/components/auth/methods/SmsOtpAuthMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SmsOtpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/SmsOtpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAgBtE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAEnH,QAAA,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAuHxD,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"SmsOtpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/SmsOtpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAkBtE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAEnH,QAAA,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAyHxD,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/SmsOtpAuthMethod.js

@@ -3,15 +3,18 @@ import { useCallback, useMemo, useRef, useState } from 'react';
 import { MfaChallengeLabel, ButtonSize } from '@wildo-ai/presets-components-models';
 import { AuthMethod, SmsOtpChallengeFormDtoSchema, } from '@wildo-ai/saas-models';
 import { ValidationMode } from '@wildo-ai/zod-decorators';
-import { Button, ButtonVariants_Variant } from '../../../components/actions/button.js';
+import { Button, ButtonLabelOverflow, ButtonVariants_Variant } from '../../../components/actions/button.js';
 import { AutomatedForm } from '../../../components/form/automated/AutomatedForm.js';
 import { AuthSingleFieldFormLayout } from '../../../components/auth/utils/AuthSingleFieldFormLayout.js';
+import { AuthMethodIcon } from '../../../components/auth/utils/AuthMethodIcon.js';
 import { Text } from '../../../components/typography/text.js';
 import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
 import { getManualCallsHttpClient } from '../../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
 import { useAuthSession } from '../../../core/security/useAuthSession.js';
+import { useUserFacingErrorMessage } from '../../../core/errors/useUserFacingErrorMessage.js';
 const SmsOtpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
     const { handleMfaVerify } = useAuthSession();
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const formMethodsRef = useRef(null);
     const [codeSent, setCodeSent] = useState(false);
     const [codeSending, setCodeSending] = useState(false);
@@ -41,7 +44,7 @@ const SmsOtpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
             setCodeSent(true);
         }
         catch (e) {
-            const message = e?.message || 'Failed to send code';
+            const message = toUserFacingErrorMessage(e, t(MfaChallengeLabel.ERROR_GENERIC));
             if (codeSent) {
                 setCodeFormError(message);
             }
@@ -52,7 +55,7 @@ const SmsOtpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
         finally {
             setCodeSending(false);
         }
-    }, [sessionId, codeSent, clearCodeFormError, setCodeFormError]);
+    }, [sessionId, codeSent, clearCodeFormError, setCodeFormError, t, toUserFacingErrorMessage]);
     const handleVerify = useCallback(async (data) => {
         clearCodeFormError();
         try {
@@ -61,15 +64,15 @@ const SmsOtpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
                 onSuccess(response);
             }
             else {
-                setCodeFormError(response.error || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+                setCodeFormError(toUserFacingErrorMessage(null, t(MfaChallengeLabel.ERROR_INVALID_CODE)));
             }
         }
         catch (e) {
-            setCodeFormError(e?.message || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+            setCodeFormError(toUserFacingErrorMessage(e, t(MfaChallengeLabel.ERROR_INVALID_CODE)));
         }
-    }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError]);
+    }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError, toUserFacingErrorMessage]);
     if (!codeSent) {
-        return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.SMS_OTP_DESCRIPTION) }), _jsx(Button, { className: "w-full", onClick: handleSendCode, disabled: codeSending || isLoading, children: codeSending ? t(MfaChallengeLabel.SMS_OTP_SENDING) : t(MfaChallengeLabel.SMS_OTP_SEND) }), sendError && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: sendError }) }))] }));
+        return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.SMS_OTP_DESCRIPTION) }), _jsxs(Button, { className: "w-full", labelOverflow: ButtonLabelOverflow.WRAP, onClick: handleSendCode, disabled: codeSending || isLoading, children: [_jsx(AuthMethodIcon, { method: AuthMethod.SMS_OTP }), codeSending ? t(MfaChallengeLabel.SMS_OTP_SENDING) : t(MfaChallengeLabel.SMS_OTP_SEND)] }), sendError && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: sendError }) }))] }));
     }
     return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.SMS_OTP_SENT) }), _jsx(AutomatedForm, { schema: SmsOtpChallengeFormDtoSchema, defaultValues: { code: '' }, onSubmit: handleVerify, validationMode: ValidationMode.ON_BLUR, disabled: isLoading || codeSending, onFormReady: handleFormReady, labels: {
                     fields: {

package/dist/esm/components/auth/methods/SmsOtpAuthMethod.js.map

@@ -1 +1 @@
-{"version":3,"file":"SmsOtpAuthMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/SmsOtpAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACpF,OAAO,EACL,UAAU,EACV,4BAA4B,GAE7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAChH,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAGlF,MAAM,gBAAgB,GAAuC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IACtG,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAE7C,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAEhE,MAAM,gBAAgB,GAAG,OAAO,CAAW,GAAG,EAAE;QAC9C,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,MAAM,EAChB,WAAW,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAC/C,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAC/C,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAC/B,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YACvC,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACvD,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,qBAAqB,CAAC;YACpD,IAAI,QAAQ,EAAE,CAAC;gBACb,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEhE,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAA4B,EAAE,EAAE;QACtE,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACxF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,gBAAgB,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAErF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,GACpC,EACP,KAAC,MAAM,IAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,IAAI,SAAS,YACnF,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAChF,EAER,SAAS,IAAI,CACZ,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,GAAoB,GAC1C,CACT,IACG,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAC7B,EAEP,KAAC,aAAa,IAEZ,MAAM,EAAE,4BAA4B,EACpC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,IAAI,WAAW,EAClC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC;qBAC9C;iBACF,EACD,cAAc,EAAE,gBAAgB,IAZ5B,mBAAmB,CAavB,EAEF,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,YAC/G,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAC1B,GACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useMemo, useRef, useState } from 'react';\nimport { MfaChallengeLabel, ButtonSize } from '@wildo-ai/presets-components-models';\nimport {\n  AuthMethod,\n  SmsOtpChallengeFormDtoSchema,\n  type SmsOtpChallengeFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { AuthSingleFieldFormLayout } from '~wildo-frontend-lib/components/auth/utils/AuthSingleFieldFormLayout';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\nconst SmsOtpAuthMethod: React.FC<AuthMethodComponentProps> = ({ sessionId, onSuccess, isLoading, t }) => {\n  const { handleMfaVerify } = useAuthSession();\n\n  const formMethodsRef = useRef<FormMethods | null>(null);\n  const [codeSent, setCodeSent] = useState(false);\n  const [codeSending, setCodeSending] = useState(false);\n  const [sendError, setSendError] = useState<string | null>(null);\n\n  const CodeFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"code\"\n        submitLabel={t(MfaChallengeLabel.VERIFY_BUTTON)}\n        submittingLabel={t(MfaChallengeLabel.VERIFYING)}\n        fieldProps={{ autoFocus: true }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const handleFormReady = useCallback((formMethods: FormMethods) => {\n    formMethodsRef.current = formMethods;\n  }, []);\n\n  const clearCodeFormError = useCallback(() => {\n    formMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const setCodeFormError = useCallback((message: string) => {\n    formMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  const handleSendCode = useCallback(async () => {\n    setCodeSending(true);\n    setSendError(null);\n    clearCodeFormError();\n\n    try {\n      await getManualCallsHttpClient().smsOTPSend(sessionId);\n      setCodeSent(true);\n    } catch (e: any) {\n      const message = e?.message || 'Failed to send code';\n      if (codeSent) {\n        setCodeFormError(message);\n      } else {\n        setSendError(message);\n      }\n    } finally {\n      setCodeSending(false);\n    }\n  }, [sessionId, codeSent, clearCodeFormError, setCodeFormError]);\n\n  const handleVerify = useCallback(async (data: SmsOtpChallengeFormDto) => {\n    clearCodeFormError();\n\n    try {\n      const response = await handleMfaVerify(sessionId, AuthMethod.SMS_OTP, data.code.trim());\n      if (response.success) {\n        onSuccess(response);\n      } else {\n        setCodeFormError(response.error || t(MfaChallengeLabel.ERROR_INVALID_CODE));\n      }\n    } catch (e: any) {\n      setCodeFormError(e?.message || t(MfaChallengeLabel.ERROR_INVALID_CODE));\n    }\n  }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError]);\n\n  if (!codeSent) {\n    return (\n      <div className=\"space-y-item\">\n        <Text className=\"text-sm text-muted-foreground text-center\">\n          {t(MfaChallengeLabel.SMS_OTP_DESCRIPTION)}\n        </Text>\n        <Button className=\"w-full\" onClick={handleSendCode} disabled={codeSending || isLoading}>\n          {codeSending ? t(MfaChallengeLabel.SMS_OTP_SENDING) : t(MfaChallengeLabel.SMS_OTP_SEND)}\n        </Button>\n\n        {sendError && (\n          <Alert variant=\"destructive\">\n            <AlertDescription>{sendError}</AlertDescription>\n          </Alert>\n        )}\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(MfaChallengeLabel.SMS_OTP_SENT)}\n      </Text>\n\n      <AutomatedForm\n        key=\"sms-otp-challenge\"\n        schema={SmsOtpChallengeFormDtoSchema}\n        defaultValues={{ code: '' }}\n        onSubmit={handleVerify}\n        validationMode={ValidationMode.ON_BLUR}\n        disabled={isLoading || codeSending}\n        onFormReady={handleFormReady}\n        labels={{\n          fields: {\n            code: t(MfaChallengeLabel.SMS_OTP_CODE_LABEL),\n          },\n        }}\n        layoutTemplate={CodeFormTemplate}\n      />\n\n      <div className=\"text-center\">\n        <Button variant={ButtonVariants_Variant.GHOST} size={ButtonSize.SM} onClick={handleSendCode} disabled={codeSending}>\n          {t(MfaChallengeLabel.RESEND_CODE)}\n        </Button>\n      </div>\n    </div>\n  );\n};\n\nexport { SmsOtpAuthMethod };\n"]}
+{"version":3,"file":"SmsOtpAuthMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/SmsOtpAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACpF,OAAO,EACL,UAAU,EACV,4BAA4B,GAE7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACpH,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAChH,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AAGtG,MAAM,gBAAgB,GAAuC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IACtG,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAEhE,MAAM,gBAAgB,GAAG,OAAO,CAAW,GAAG,EAAE;QAC9C,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,MAAM,EAChB,WAAW,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAC/C,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAC/C,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAC/B,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YACvC,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACvD,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAChF,IAAI,QAAQ,EAAE,CAAC;gBACb,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE7F,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAA4B,EAAE,EAAE;QACtE,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACxF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,gBAAgB,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE/G,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,GACpC,EACP,MAAC,MAAM,IAAC,SAAS,EAAC,QAAQ,EAAC,aAAa,EAAE,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,IAAI,SAAS,aAC7H,KAAC,cAAc,IAAC,MAAM,EAAE,UAAU,CAAC,OAAO,GAAI,EAC7C,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,IAChF,EAER,SAAS,IAAI,CACZ,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,GAAoB,GAC1C,CACT,IACG,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAC7B,EAEP,KAAC,aAAa,IAEZ,MAAM,EAAE,4BAA4B,EACpC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,IAAI,WAAW,EAClC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC;qBAC9C;iBACF,EACD,cAAc,EAAE,gBAAgB,IAZ5B,mBAAmB,CAavB,EAEF,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,YAC/G,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAC1B,GACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useMemo, useRef, useState } from 'react';\nimport { MfaChallengeLabel, ButtonSize } from '@wildo-ai/presets-components-models';\nimport {\n  AuthMethod,\n  SmsOtpChallengeFormDtoSchema,\n  type SmsOtpChallengeFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { Button, ButtonLabelOverflow, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { AuthSingleFieldFormLayout } from '~wildo-frontend-lib/components/auth/utils/AuthSingleFieldFormLayout';\nimport { AuthMethodIcon } from '~wildo-frontend-lib/components/auth/utils/AuthMethodIcon';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\nconst SmsOtpAuthMethod: React.FC<AuthMethodComponentProps> = ({ sessionId, onSuccess, isLoading, t }) => {\n  const { handleMfaVerify } = useAuthSession();\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const formMethodsRef = useRef<FormMethods | null>(null);\n  const [codeSent, setCodeSent] = useState(false);\n  const [codeSending, setCodeSending] = useState(false);\n  const [sendError, setSendError] = useState<string | null>(null);\n\n  const CodeFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"code\"\n        submitLabel={t(MfaChallengeLabel.VERIFY_BUTTON)}\n        submittingLabel={t(MfaChallengeLabel.VERIFYING)}\n        fieldProps={{ autoFocus: true }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const handleFormReady = useCallback((formMethods: FormMethods) => {\n    formMethodsRef.current = formMethods;\n  }, []);\n\n  const clearCodeFormError = useCallback(() => {\n    formMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const setCodeFormError = useCallback((message: string) => {\n    formMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  const handleSendCode = useCallback(async () => {\n    setCodeSending(true);\n    setSendError(null);\n    clearCodeFormError();\n\n    try {\n      await getManualCallsHttpClient().smsOTPSend(sessionId);\n      setCodeSent(true);\n    } catch (e: unknown) {\n      const message = toUserFacingErrorMessage(e, t(MfaChallengeLabel.ERROR_GENERIC));\n      if (codeSent) {\n        setCodeFormError(message);\n      } else {\n        setSendError(message);\n      }\n    } finally {\n      setCodeSending(false);\n    }\n  }, [sessionId, codeSent, clearCodeFormError, setCodeFormError, t, toUserFacingErrorMessage]);\n\n  const handleVerify = useCallback(async (data: SmsOtpChallengeFormDto) => {\n    clearCodeFormError();\n\n    try {\n      const response = await handleMfaVerify(sessionId, AuthMethod.SMS_OTP, data.code.trim());\n      if (response.success) {\n        onSuccess(response);\n      } else {\n        setCodeFormError(toUserFacingErrorMessage(null, t(MfaChallengeLabel.ERROR_INVALID_CODE)));\n      }\n    } catch (e: unknown) {\n      setCodeFormError(toUserFacingErrorMessage(e, t(MfaChallengeLabel.ERROR_INVALID_CODE)));\n    }\n  }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError, toUserFacingErrorMessage]);\n\n  if (!codeSent) {\n    return (\n      <div className=\"space-y-item\">\n        <Text className=\"text-sm text-muted-foreground text-center\">\n          {t(MfaChallengeLabel.SMS_OTP_DESCRIPTION)}\n        </Text>\n        <Button className=\"w-full\" labelOverflow={ButtonLabelOverflow.WRAP} onClick={handleSendCode} disabled={codeSending || isLoading}>\n          <AuthMethodIcon method={AuthMethod.SMS_OTP} />\n          {codeSending ? t(MfaChallengeLabel.SMS_OTP_SENDING) : t(MfaChallengeLabel.SMS_OTP_SEND)}\n        </Button>\n\n        {sendError && (\n          <Alert variant=\"destructive\">\n            <AlertDescription>{sendError}</AlertDescription>\n          </Alert>\n        )}\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(MfaChallengeLabel.SMS_OTP_SENT)}\n      </Text>\n\n      <AutomatedForm\n        key=\"sms-otp-challenge\"\n        schema={SmsOtpChallengeFormDtoSchema}\n        defaultValues={{ code: '' }}\n        onSubmit={handleVerify}\n        validationMode={ValidationMode.ON_BLUR}\n        disabled={isLoading || codeSending}\n        onFormReady={handleFormReady}\n        labels={{\n          fields: {\n            code: t(MfaChallengeLabel.SMS_OTP_CODE_LABEL),\n          },\n        }}\n        layoutTemplate={CodeFormTemplate}\n      />\n\n      <div className=\"text-center\">\n        <Button variant={ButtonVariants_Variant.GHOST} size={ButtonSize.SM} onClick={handleSendCode} disabled={codeSending}>\n          {t(MfaChallengeLabel.RESEND_CODE)}\n        </Button>\n      </div>\n    </div>\n  );\n};\n\nexport { SmsOtpAuthMethod };\n"]}

package/dist/esm/components/auth/methods/TotpAuthMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TotpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/TotpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAa5D,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAEnH,QAAA,MAAM,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAsEtD,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"TotpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/TotpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAuC,MAAM,OAAO,CAAC;AAc5D,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAEnH,QAAA,MAAM,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAuEtD,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/esm/components/auth/methods/TotpAuthMethod.js

@@ -7,8 +7,10 @@ import { AutomatedForm } from '../../../components/form/automated/AutomatedForm.
 import { AuthSingleFieldFormLayout } from '../../../components/auth/utils/AuthSingleFieldFormLayout.js';
 import { Text } from '../../../components/typography/text.js';
 import { useAuthSession } from '../../../core/security/useAuthSession.js';
+import { useUserFacingErrorMessage } from '../../../core/errors/useUserFacingErrorMessage.js';
 const TotpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
     const { handleMfaVerify } = useAuthSession();
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const formMethodsRef = useRef(null);
     const CodeFormTemplate = useMemo(() => {
         const Template = () => (_jsx(AuthSingleFieldFormLayout, { fieldName: "code", submitLabel: t(MfaChallengeLabel.VERIFY_BUTTON), submittingLabel: t(MfaChallengeLabel.VERIFYING), fieldProps: { autoFocus: true } }));
@@ -34,13 +36,13 @@ const TotpAuthMethod = ({ sessionId, onSuccess, isLoading, t }) => {
                 onSuccess(response);
             }
             else {
-                setCodeFormError(response.error || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+                setCodeFormError(toUserFacingErrorMessage(null, t(MfaChallengeLabel.ERROR_INVALID_CODE)));
             }
         }
         catch (e) {
-            setCodeFormError(e?.message || t(MfaChallengeLabel.ERROR_INVALID_CODE));
+            setCodeFormError(toUserFacingErrorMessage(e, t(MfaChallengeLabel.ERROR_INVALID_CODE)));
         }
-    }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError]);
+    }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError, toUserFacingErrorMessage]);
     return (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm text-muted-foreground text-center", children: t(MfaChallengeLabel.TOTP_DESCRIPTION) }), _jsx(AutomatedForm, { schema: TotpChallengeFormDtoSchema, defaultValues: { code: '' }, onSubmit: handleVerify, validationMode: ValidationMode.ON_BLUR, disabled: isLoading, onFormReady: handleFormReady, labels: {
                     fields: {
                         code: t(MfaChallengeLabel.TOTP_CODE_LABEL),

package/dist/esm/components/auth/methods/TotpAuthMethod.js.map

@@ -1 +1 @@
-{"version":3,"file":"TotpAuthMethod.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/TotpAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,UAAU,EACV,0BAA0B,GAE3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAChH,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAGlF,MAAM,cAAc,GAAuC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IACpG,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IAExD,MAAM,gBAAgB,GAAG,OAAO,CAAW,GAAG,EAAE;QAC9C,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,MAAM,EAChB,WAAW,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAC/C,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAC/C,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAC/B,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YACvC,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAA0B,EAAE,EAAE;QACpE,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACrF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,gBAAgB,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAErF,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,GACjC,EAEP,KAAC,aAAa,IAEZ,MAAM,EAAE,0BAA0B,EAClC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,EACnB,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC;qBAC3C;iBACF,EACD,cAAc,EAAE,gBAAgB,IAZ5B,gBAAgB,CAapB,IACE,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC","sourcesContent":["import React, { useCallback, useMemo, useRef } from 'react';\nimport { MfaChallengeLabel } from '@wildo-ai/presets-components-models';\nimport {\n  AuthMethod,\n  TotpChallengeFormDtoSchema,\n  type TotpChallengeFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { AuthSingleFieldFormLayout } from '~wildo-frontend-lib/components/auth/utils/AuthSingleFieldFormLayout';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\nconst TotpAuthMethod: React.FC<AuthMethodComponentProps> = ({ sessionId, onSuccess, isLoading, t }) => {\n  const { handleMfaVerify } = useAuthSession();\n  const formMethodsRef = useRef<FormMethods | null>(null);\n\n  const CodeFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"code\"\n        submitLabel={t(MfaChallengeLabel.VERIFY_BUTTON)}\n        submittingLabel={t(MfaChallengeLabel.VERIFYING)}\n        fieldProps={{ autoFocus: true }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const handleFormReady = useCallback((formMethods: FormMethods) => {\n    formMethodsRef.current = formMethods;\n  }, []);\n\n  const clearCodeFormError = useCallback(() => {\n    formMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const setCodeFormError = useCallback((message: string) => {\n    formMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  const handleVerify = useCallback(async (data: TotpChallengeFormDto) => {\n    clearCodeFormError();\n\n    try {\n      const response = await handleMfaVerify(sessionId, AuthMethod.TOTP, data.code.trim());\n      if (response.success) {\n        onSuccess(response);\n      } else {\n        setCodeFormError(response.error || t(MfaChallengeLabel.ERROR_INVALID_CODE));\n      }\n    } catch (e: any) {\n      setCodeFormError(e?.message || t(MfaChallengeLabel.ERROR_INVALID_CODE));\n    }\n  }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError]);\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(MfaChallengeLabel.TOTP_DESCRIPTION)}\n      </Text>\n\n      <AutomatedForm\n        key=\"totp-challenge\"\n        schema={TotpChallengeFormDtoSchema}\n        defaultValues={{ code: '' }}\n        onSubmit={handleVerify}\n        validationMode={ValidationMode.ON_BLUR}\n        disabled={isLoading}\n        onFormReady={handleFormReady}\n        labels={{\n          fields: {\n            code: t(MfaChallengeLabel.TOTP_CODE_LABEL),\n          },\n        }}\n        layoutTemplate={CodeFormTemplate}\n      />\n    </div>\n  );\n};\n\nexport { TotpAuthMethod };\n"]}
+{"version":3,"file":"TotpAuthMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/TotpAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EACL,UAAU,EACV,0BAA0B,GAE3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAChH,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AAGtG,MAAM,cAAc,GAAuC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IACpG,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAC7D,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IAExD,MAAM,gBAAgB,GAAG,OAAO,CAAW,GAAG,EAAE;QAC9C,MAAM,QAAQ,GAAa,GAAG,EAAE,CAAC,CAC/B,KAAC,yBAAyB,IACxB,SAAS,EAAC,MAAM,EAChB,WAAW,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAC/C,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAC/C,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAC/B,CACH,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;YACvC,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAA0B,EAAE,EAAE;QACpE,kBAAkB,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACrF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,gBAAgB,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE/G,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,GACjC,EAEP,KAAC,aAAa,IAEZ,MAAM,EAAE,0BAA0B,EAClC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3B,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,EACnB,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC;qBAC3C;iBACF,EACD,cAAc,EAAE,gBAAgB,IAZ5B,gBAAgB,CAapB,IACE,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC","sourcesContent":["import React, { useCallback, useMemo, useRef } from 'react';\nimport { MfaChallengeLabel } from '@wildo-ai/presets-components-models';\nimport {\n  AuthMethod,\n  TotpChallengeFormDtoSchema,\n  type TotpChallengeFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { AuthSingleFieldFormLayout } from '~wildo-frontend-lib/components/auth/utils/AuthSingleFieldFormLayout';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\nconst TotpAuthMethod: React.FC<AuthMethodComponentProps> = ({ sessionId, onSuccess, isLoading, t }) => {\n  const { handleMfaVerify } = useAuthSession();\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n  const formMethodsRef = useRef<FormMethods | null>(null);\n\n  const CodeFormTemplate = useMemo<React.FC>(() => {\n    const Template: React.FC = () => (\n      <AuthSingleFieldFormLayout\n        fieldName=\"code\"\n        submitLabel={t(MfaChallengeLabel.VERIFY_BUTTON)}\n        submittingLabel={t(MfaChallengeLabel.VERIFYING)}\n        fieldProps={{ autoFocus: true }}\n      />\n    );\n\n    return Template;\n  }, [t]);\n\n  const handleFormReady = useCallback((formMethods: FormMethods) => {\n    formMethodsRef.current = formMethods;\n  }, []);\n\n  const clearCodeFormError = useCallback(() => {\n    formMethodsRef.current?.clearErrors('root');\n  }, []);\n\n  const setCodeFormError = useCallback((message: string) => {\n    formMethodsRef.current?.setError('root', {\n      type: 'server',\n      message,\n    });\n  }, []);\n\n  const handleVerify = useCallback(async (data: TotpChallengeFormDto) => {\n    clearCodeFormError();\n\n    try {\n      const response = await handleMfaVerify(sessionId, AuthMethod.TOTP, data.code.trim());\n      if (response.success) {\n        onSuccess(response);\n      } else {\n        setCodeFormError(toUserFacingErrorMessage(null, t(MfaChallengeLabel.ERROR_INVALID_CODE)));\n      }\n    } catch (e: unknown) {\n      setCodeFormError(toUserFacingErrorMessage(e, t(MfaChallengeLabel.ERROR_INVALID_CODE)));\n    }\n  }, [sessionId, handleMfaVerify, onSuccess, t, clearCodeFormError, setCodeFormError, toUserFacingErrorMessage]);\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(MfaChallengeLabel.TOTP_DESCRIPTION)}\n      </Text>\n\n      <AutomatedForm\n        key=\"totp-challenge\"\n        schema={TotpChallengeFormDtoSchema}\n        defaultValues={{ code: '' }}\n        onSubmit={handleVerify}\n        validationMode={ValidationMode.ON_BLUR}\n        disabled={isLoading}\n        onFormReady={handleFormReady}\n        labels={{\n          fields: {\n            code: t(MfaChallengeLabel.TOTP_CODE_LABEL),\n          },\n        }}\n        layoutTemplate={CodeFormTemplate}\n      />\n    </div>\n  );\n};\n\nexport { TotpAuthMethod };\n"]}

package/dist/esm/components/auth/methods/auth-method-components.d.ts

@@ -19,18 +19,24 @@ export interface AuthMethodComponentProps {
     factorLevel: UIFactorLevel;
     isLoading: boolean;
     /**
-     * Component-label resolver for the HOST layout's component type, already
-     * miss-normalized: it returns `''` when the key has no label, never the key
-     * path.
+     * Component-label resolver bound to the `PUBLIC_LAYOUTS_USER_AUTH` namespace —
+     * the one these method components label themselves from, whichever layout hosts
+     * them. Build it with `makeComponentLabelResolver` so the binding lives in one
+     * place: a host passing its OWN namespace (the MFA challenge did) resolves
+     * `continueWith` against a bundle that never declares it.
      *
-     * That guarantee is part of the contract because three of these method
-     * components write `t(UserAuthLabel.CONTINUE_WITH) || 'Continue with {provider}'`.
-     * A raw `tComponent` returns the key path on a miss — a non-empty string — so
-     * those fallbacks were dead and `components.PUBLIC_LAYOUTS_MFA_CHALLENGE.continueWith`
-     * would render as the sign-in button's label. Build it with
-     * `makeComponentLabelResolver`, not by hand.
+     * It answers a miss with the KEY PATH, like every resolver. Do not follow it with
+     * `|| 'English'`: three of these components used to, and that literal was a second,
+     * untranslatable source for a label `Auth_Main.labels.ts` already declares (#1414).
      */
     t: (key: string) => string;
+    /**
+     * The post-auth deep link the host screen is carrying (`extractAuthRedirectFromSearch`), for a method whose
+     * sign-in completes on ANOTHER page. Magic link is that method: the link is opened from an email, so the
+     * deep link has to travel inside it or it is lost (#1014). Methods that complete in place ignore it — the
+     * host screen already forwards on their success.
+     */
+    authRedirectTarget?: string;
 }
 export type AuthMethodComponent = React.ComponentType<AuthMethodComponentProps>;
 /**
@@ -41,13 +47,4 @@ export type AuthMethodComponent = React.ComponentType<AuthMethodComponentProps>;
  * Methods not in this map are silently skipped.
  */
 export declare const AUTH_METHOD_COMPONENTS: Partial<Record<AuthMethod, React.LazyExoticComponent<AuthMethodComponent> | AuthMethodComponent>>;
-/**
- * Get the display order for method selection UI.
- * Methods are shown in this priority order; unlisted methods appear last.
- */
-export declare const AUTH_METHOD_DISPLAY_ORDER: readonly AuthMethod[];
-/**
- * Sort available methods by display order.
- */
-export declare function sortMethodsByDisplayOrder(methods: AvailableMethod[]): AvailableMethod[];
 //# sourceMappingURL=auth-method-components.d.ts.map

package/dist/esm/components/auth/methods/auth-method-components.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-method-components.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/auth-method-components.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAYjG;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,eAAe,CAAC;IAC9B,SAAS,EAAE,CAAC,QAAQ,EAAE,sBAAsB,KAAK,IAAI,CAAC;IACtD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,WAAW,EAAE,aAAa,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;AAEhF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC,CAAM,CAAC;AAe5I;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,UAAU,EAUjD,CAAC;AAEX;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAQvF"}
+{"version":3,"file":"auth-method-components.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/auth-method-components.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAYjG;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,eAAe,CAAC;IAC9B,SAAS,EAAE,CAAC,QAAQ,EAAE,sBAAsB,KAAK,IAAI,CAAC;IACtD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,WAAW,EAAE,aAAa,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;OAUG;IACH,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;AAEhF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC,CAAM,CAAC"}

package/dist/esm/components/auth/methods/auth-method-components.js

@@ -26,31 +26,14 @@ AUTH_METHOD_COMPONENTS[AuthMethod.PASSKEY] = PasskeyAuthMethod;
 AUTH_METHOD_COMPONENTS[AuthMethod.ORG_SAML] = OrgSamlAuthMethod;
 AUTH_METHOD_COMPONENTS[AuthMethod.ORG_OPENID_CONNECT] = OrgOidcAuthMethod;
 AUTH_METHOD_COMPONENTS[AuthMethod.EXTERNAL_OAUTH2] = ExternalOAuth2AuthMethod;
-/**
- * Get the display order for method selection UI.
- * Methods are shown in this priority order; unlisted methods appear last.
- */
-export const AUTH_METHOD_DISPLAY_ORDER = [
-    AuthMethod.ORG_SAML,
-    AuthMethod.ORG_OPENID_CONNECT,
-    AuthMethod.PASSWORD,
-    AuthMethod.PASSKEY,
-    AuthMethod.MAGIC_LINK,
-    AuthMethod.EXTERNAL_OAUTH2,
-    AuthMethod.SMS_OTP,
-    AuthMethod.EMAIL_OTP,
-    AuthMethod.TOTP,
-];
-/**
- * Sort available methods by display order.
+/*
+ * The display order and its sorter lived here and are GONE (#1218).
+ *
+ * They were a second authority: the backend returned a method list and a `defaultFirstFactorMethod` computed from it,
+ * and this file re-sorted the list on arrival — so the method a page showed first and the method the server said was
+ * the default could disagree, and did, for every domain routed to an enterprise identity provider. The order is now
+ * `AUTH_METHOD_PRECEDENCE` in `@wildo-ai/saas-models`, applied by the backend where the default is decided.
+ *
+ * A client that re-sorts what it is given is how the two came apart. Render what the server sent.
  */
-export function sortMethodsByDisplayOrder(methods) {
-    return [...methods].sort((a, b) => {
-        const aIndex = AUTH_METHOD_DISPLAY_ORDER.indexOf(a.method);
-        const bIndex = AUTH_METHOD_DISPLAY_ORDER.indexOf(b.method);
-        const aOrder = aIndex === -1 ? AUTH_METHOD_DISPLAY_ORDER.length : aIndex;
-        const bOrder = bIndex === -1 ? AUTH_METHOD_DISPLAY_ORDER.length : bIndex;
-        return aOrder - bOrder;
-    });
-}
 //# sourceMappingURL=auth-method-components.js.map

package/dist/esm/components/auth/methods/auth-method-components.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-method-components.js","sourceRoot":"","sources":["../../../../../src/components/auth/methods/auth-method-components.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAqD,MAAM,uBAAuB,CAAC;AAGtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAoCtE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsG,EAAE,CAAC;AAE5I,yEAAyE;AAGzE,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAAC;AACjE,sBAAsB,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,mBAAmB,CAAC;AACpE,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,gBAAgB,CAAC;AAC9D,sBAAsB,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC;AAClE,sBAAsB,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;AACzD,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,iBAAiB,CAAC;AAC/D,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC;AAChE,sBAAsB,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,iBAAiB,CAAC;AAC1E,sBAAsB,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,wBAAwB,CAAC;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,kBAAkB;IAC7B,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,UAAU;IACrB,UAAU,CAAC,eAAe;IAC1B,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,SAAS;IACpB,UAAU,CAAC,IAAI;CACP,CAAC;AAEX;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAA0B;IAClE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACzE,OAAO,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type React from 'react';\nimport { AuthMethod, type AvailableMethod, type AuthenticationResponse } from '@wildo-ai/saas-models';\nimport type { UIFactorLevel } from '~wildo-frontend-lib/core/security/security.frontend.schemas';\n\nimport { PasswordAuthMethod } from './PasswordAuthMethod';\nimport { MagicLinkAuthMethod } from './MagicLinkAuthMethod';\nimport { SmsOtpAuthMethod } from './SmsOtpAuthMethod';\nimport { EmailOtpAuthMethod } from './EmailOtpAuthMethod';\nimport { TotpAuthMethod } from './TotpAuthMethod';\nimport { PasskeyAuthMethod } from './PasskeyAuthMethod';\nimport { OrgSamlAuthMethod } from './OrgSamlAuthMethod';\nimport { OrgOidcAuthMethod } from './OrgOidcAuthMethod';\nimport { ExternalOAuth2AuthMethod } from './ExternalOAuth2AuthMethod';\n\n/**\n * Shared props for all auth method components.\n *\n * Each method (password, magic link, passkey, SMS OTP, etc.) receives these props\n * and handles its own flow internally — loading states, API calls, error display.\n *\n * The login page and MFA page iterate over available methods from the backend\n * and render the appropriate component for each via AUTH_METHOD_COMPONENTS.\n */\nexport interface AuthMethodComponentProps {\n  sessionId: string;\n  email: string;\n  methodConfig: AvailableMethod;\n  onSuccess: (response: AuthenticationResponse) => void;\n  onError: (error: string) => void;\n  factorLevel: UIFactorLevel;\n  isLoading: boolean;\n  /**\n   * Component-label resolver for the HOST layout's component type, already\n   * miss-normalized: it returns `''` when the key has no label, never the key\n   * path.\n   *\n   * That guarantee is part of the contract because three of these method\n   * components write `t(UserAuthLabel.CONTINUE_WITH) || 'Continue with {provider}'`.\n   * A raw `tComponent` returns the key path on a miss — a non-empty string — so\n   * those fallbacks were dead and `components.PUBLIC_LAYOUTS_MFA_CHALLENGE.continueWith`\n   * would render as the sign-in button's label. Build it with\n   * `makeComponentLabelResolver`, not by hand.\n   */\n  t: (key: string) => string;\n}\n\nexport type AuthMethodComponent = React.ComponentType<AuthMethodComponentProps>;\n\n/**\n * Registry of auth method → React component.\n *\n * Both the login page and MFA page use this map to render available methods.\n * New methods are added by importing the component and registering it here.\n * Methods not in this map are silently skipped.\n */\nexport const AUTH_METHOD_COMPONENTS: Partial<Record<AuthMethod, React.LazyExoticComponent<AuthMethodComponent> | AuthMethodComponent>> = {};\n\n// Explicit registration — no side-effect loader. Import and assign here.\n\n\nAUTH_METHOD_COMPONENTS[AuthMethod.PASSWORD] = PasswordAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.MAGIC_LINK] = MagicLinkAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.SMS_OTP] = SmsOtpAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.EMAIL_OTP] = EmailOtpAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.TOTP] = TotpAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.PASSKEY] = PasskeyAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.ORG_SAML] = OrgSamlAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.ORG_OPENID_CONNECT] = OrgOidcAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.EXTERNAL_OAUTH2] = ExternalOAuth2AuthMethod;\n\n/**\n * Get the display order for method selection UI.\n * Methods are shown in this priority order; unlisted methods appear last.\n */\nexport const AUTH_METHOD_DISPLAY_ORDER: readonly AuthMethod[] = [\n  AuthMethod.ORG_SAML,\n  AuthMethod.ORG_OPENID_CONNECT,\n  AuthMethod.PASSWORD,\n  AuthMethod.PASSKEY,\n  AuthMethod.MAGIC_LINK,\n  AuthMethod.EXTERNAL_OAUTH2,\n  AuthMethod.SMS_OTP,\n  AuthMethod.EMAIL_OTP,\n  AuthMethod.TOTP,\n] as const;\n\n/**\n * Sort available methods by display order.\n */\nexport function sortMethodsByDisplayOrder(methods: AvailableMethod[]): AvailableMethod[] {\n  return [...methods].sort((a, b) => {\n    const aIndex = AUTH_METHOD_DISPLAY_ORDER.indexOf(a.method as AuthMethod);\n    const bIndex = AUTH_METHOD_DISPLAY_ORDER.indexOf(b.method as AuthMethod);\n    const aOrder = aIndex === -1 ? AUTH_METHOD_DISPLAY_ORDER.length : aIndex;\n    const bOrder = bIndex === -1 ? AUTH_METHOD_DISPLAY_ORDER.length : bIndex;\n    return aOrder - bOrder;\n  });\n}\n"]}
+{"version":3,"file":"auth-method-components.js","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/auth-method-components.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAqD,MAAM,uBAAuB,CAAC;AAGtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AA0CtE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsG,EAAE,CAAC;AAE5I,yEAAyE;AAGzE,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAAC;AACjE,sBAAsB,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,mBAAmB,CAAC;AACpE,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,gBAAgB,CAAC;AAC9D,sBAAsB,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC;AAClE,sBAAsB,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;AACzD,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,iBAAiB,CAAC;AAC/D,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC;AAChE,sBAAsB,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,iBAAiB,CAAC;AAC1E,sBAAsB,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,wBAAwB,CAAC;AAE9E;;;;;;;;;GASG","sourcesContent":["import type React from 'react';\nimport { AuthMethod, type AvailableMethod, type AuthenticationResponse } from '@wildo-ai/saas-models';\nimport type { UIFactorLevel } from '~wildo-frontend-lib/core/security/security.frontend.schemas';\n\nimport { PasswordAuthMethod } from './PasswordAuthMethod';\nimport { MagicLinkAuthMethod } from './MagicLinkAuthMethod';\nimport { SmsOtpAuthMethod } from './SmsOtpAuthMethod';\nimport { EmailOtpAuthMethod } from './EmailOtpAuthMethod';\nimport { TotpAuthMethod } from './TotpAuthMethod';\nimport { PasskeyAuthMethod } from './PasskeyAuthMethod';\nimport { OrgSamlAuthMethod } from './OrgSamlAuthMethod';\nimport { OrgOidcAuthMethod } from './OrgOidcAuthMethod';\nimport { ExternalOAuth2AuthMethod } from './ExternalOAuth2AuthMethod';\n\n/**\n * Shared props for all auth method components.\n *\n * Each method (password, magic link, passkey, SMS OTP, etc.) receives these props\n * and handles its own flow internally — loading states, API calls, error display.\n *\n * The login page and MFA page iterate over available methods from the backend\n * and render the appropriate component for each via AUTH_METHOD_COMPONENTS.\n */\nexport interface AuthMethodComponentProps {\n  sessionId: string;\n  email: string;\n  methodConfig: AvailableMethod;\n  onSuccess: (response: AuthenticationResponse) => void;\n  onError: (error: string) => void;\n  factorLevel: UIFactorLevel;\n  isLoading: boolean;\n  /**\n   * Component-label resolver bound to the `PUBLIC_LAYOUTS_USER_AUTH` namespace —\n   * the one these method components label themselves from, whichever layout hosts\n   * them. Build it with `makeComponentLabelResolver` so the binding lives in one\n   * place: a host passing its OWN namespace (the MFA challenge did) resolves\n   * `continueWith` against a bundle that never declares it.\n   *\n   * It answers a miss with the KEY PATH, like every resolver. Do not follow it with\n   * `|| 'English'`: three of these components used to, and that literal was a second,\n   * untranslatable source for a label `Auth_Main.labels.ts` already declares (#1414).\n   */\n  t: (key: string) => string;\n  /**\n   * The post-auth deep link the host screen is carrying (`extractAuthRedirectFromSearch`), for a method whose\n   * sign-in completes on ANOTHER page. Magic link is that method: the link is opened from an email, so the\n   * deep link has to travel inside it or it is lost (#1014). Methods that complete in place ignore it — the\n   * host screen already forwards on their success.\n   */\n  authRedirectTarget?: string;\n}\n\nexport type AuthMethodComponent = React.ComponentType<AuthMethodComponentProps>;\n\n/**\n * Registry of auth method → React component.\n *\n * Both the login page and MFA page use this map to render available methods.\n * New methods are added by importing the component and registering it here.\n * Methods not in this map are silently skipped.\n */\nexport const AUTH_METHOD_COMPONENTS: Partial<Record<AuthMethod, React.LazyExoticComponent<AuthMethodComponent> | AuthMethodComponent>> = {};\n\n// Explicit registration — no side-effect loader. Import and assign here.\n\n\nAUTH_METHOD_COMPONENTS[AuthMethod.PASSWORD] = PasswordAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.MAGIC_LINK] = MagicLinkAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.SMS_OTP] = SmsOtpAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.EMAIL_OTP] = EmailOtpAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.TOTP] = TotpAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.PASSKEY] = PasskeyAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.ORG_SAML] = OrgSamlAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.ORG_OPENID_CONNECT] = OrgOidcAuthMethod;\nAUTH_METHOD_COMPONENTS[AuthMethod.EXTERNAL_OAUTH2] = ExternalOAuth2AuthMethod;\n\n/*\n * The display order and its sorter lived here and are GONE (#1218).\n *\n * They were a second authority: the backend returned a method list and a `defaultFirstFactorMethod` computed from it,\n * and this file re-sorted the list on arrival — so the method a page showed first and the method the server said was\n * the default could disagree, and did, for every domain routed to an enterprise identity provider. The order is now\n * `AUTH_METHOD_PRECEDENCE` in `@wildo-ai/saas-models`, applied by the backend where the default is decided.\n *\n * A client that re-sorts what it is given is how the two came apart. Render what the server sent.\n */\n"]}

package/dist/esm/components/auth/methods/auth-method-presentation.d.ts

@@ -0,0 +1,105 @@
+import { UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { AuthMethod } from '@wildo-ai/saas-models';
+import { StandardIconReference } from '../../../core/icons/icon-registry.frontend.schemas';
+/**
+ * The glyph that identifies each authentication method wherever a person chooses or starts one —
+ * the sign-in, registration, invitation, second-factor and enrollment choosers, and the button that
+ * STARTS a method where it has one (passkey, magic link, organization SSO, the email and SMS
+ * send-code buttons). Password and authenticator-app codes are typed into a form whose submit button
+ * belongs to the form, not to the method, so those carry no glyph.
+ *
+ * TOTAL over `AuthMethod` on purpose: a method added to the enum is a compile error here, so no screen
+ * can offer a method without an icon. `KEY` and `FINGERPRINT` are the glyphs the Security settings panel
+ * uses for password and passkeys. That panel shows its phone factor with `MAIL`; the sign-in surfaces
+ * use `MESSAGE_CIRCLE` for SMS, because in the second-factor chooser it sits beside email codes.
+ *
+ * `MAGIC_LINK` and `EMAIL_OTP` share `MAIL`: both are delivered to the inbox, and they never appear in
+ * the same chooser (the first is first-factor only, the second is second-factor only). `SMS_OTP` and
+ * `TOTP` DO meet in the second-factor chooser, so they are kept apart — a message for the text, a
+ * handset for the authenticator app.
+ */
+export declare const AUTH_METHOD_ICON_REFERENCES: Readonly<Record<AuthMethod, StandardIconReference>>;
+/**
+ * The words that name a first-factor method on a chooser, in the `USER_AUTH` label namespace.
+ *
+ * One source for the sign-in, registration and invitation screens, which each carried their own copy
+ * of this map so a method would "read the same wherever it is chosen" — a promise three hand-kept
+ * copies could not keep. SAML and OIDC share the organization-SSO label. The second-factor chooser
+ * names methods in its own namespace (`MfaChallengeLabel`) and does not use this map.
+ */
+export declare const AUTH_METHOD_CHOICE_LABELS: Readonly<Partial<Record<AuthMethod, UserAuthLabel>>>;
+/**
+ * What a federated method offers to be named BY — the connection or provider behind it.
+ *
+ * `AUTH_METHOD_CHOICE_LABELS` names a method by its KIND, which is right for password, passkey and
+ * the emailed link: there is one of each and its kind is its name. It is wrong for the two federated
+ * kinds, where the thing a person recognises is the PROVIDER — "Google", "Okta", "Acme SSO" — and the
+ * kind is an implementation word they have no reason to know.
+ *
+ * Every other surface already knew this. The pre-identify section renders one button per provider
+ * reading "Continue with Google"; the ACTIVE enterprise method renders `CONTINUE_WITH` filled from the
+ * connection's own `displayName`. Only the "other sign-in methods" chooser fell back to the kind, and
+ * it did so while HOLDING the name: its three call sites each mapped their descriptors down to a bare
+ * `AuthMethod` before asking for a label, so the provider was discarded one line above the lookup that
+ * needed it. On Wonder Todos that rendered "External sign-in" for what every other surface calls
+ * "Continue with Google".
+ */
+export interface AuthMethodNamingSources {
+    /**
+     * The offered-method descriptor, when the surface has one. `identify` fills `config.displayName`
+     * with the enterprise connection's own name and `oauth2ProviderRefs` with the social providers the
+     * method stands for. Registration and invitation have no descriptor — they offer a method before
+     * anyone is identified — so they pass only `socialProviders`.
+     */
+    offeredMethod?: {
+        readonly config?: {
+            readonly displayName?: string;
+        } | undefined;
+        readonly oauth2ProviderRefs?: readonly string[] | undefined;
+    } | undefined;
+    /** The application's configured social providers, as the pre-identify section already resolves them. */
+    socialProviders?: readonly {
+        readonly providerRef: string;
+        readonly displayName?: string | undefined;
+        readonly displayNameLabelKey?: string | undefined;
+    }[] | undefined;
+}
+/**
+ * The provider name a federated method should be called by, or `undefined` when there is not exactly
+ * one to name.
+ *
+ * **Exactly one is the whole condition, and it is not conservatism.** `oauth2ProviderRefs` is a LIST:
+ * one `EXTERNAL_OAUTH2` entry can stand for Google AND GitHub, and one organization can publish
+ * several connections. Naming such a button after the first would tell the person they are signing in
+ * with a provider that may not be the one the button reaches — worse than the generic kind, because it
+ * is specific and wrong. Where several are offered, the kind is the honest word and the caller keeps
+ * its existing label.
+ *
+ * The social branch resolves through the SAME helper the provider buttons use, so a provider renamed
+ * in configuration is renamed in the chooser, and a raw `providerRef` ("google") can never reach a
+ * person as the brand name.
+ */
+export declare function resolveAuthMethodProviderName(method: AuthMethod, sources: AuthMethodNamingSources, resolveSocialProviderLabel: (provider: {
+    providerRef: string;
+    displayName?: string | undefined;
+    displayNameLabelKey?: string | undefined;
+}) => string): string | undefined;
+/**
+ * The words a chooser puts on one method's button: the provider's own name where exactly one is
+ * nameable, and the method's kind otherwise.
+ *
+ * Returned whole rather than as a name the caller interpolates, because the three choosers were
+ * already three copies of one decision — which is what `AUTH_METHOD_CHOICE_LABELS` exists to prevent —
+ * and a name plus a template is two things to copy instead of one.
+ */
+export declare function resolveAuthMethodChoiceLabel(method: AuthMethod, input: AuthMethodNamingSources & {
+    /** `t(UserAuthLabel.CONTINUE_WITH)` — the already-translated "Continue with {provider}" template. */
+    continueWithTemplate: string;
+    translateLabel: (label: UserAuthLabel) => string;
+    resolveSocialProviderLabel: (provider: {
+        providerRef: string;
+        displayName?: string | undefined;
+        displayNameLabelKey?: string | undefined;
+    }) => string;
+}): string;
+//# sourceMappingURL=auth-method-presentation.d.ts.map

package/dist/esm/components/auth/methods/auth-method-presentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-method-presentation.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/auth-method-presentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AAEtG;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAU3F,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAQ1F,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,aAAa,CAAC,EAAE;QACd,QAAQ,CAAC,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;QAChE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;KAC7D,GAAG,SAAS,CAAC;IACd,wGAAwG;IACxG,eAAe,CAAC,EAAE,SAAS;QACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnD,EAAE,GAAG,SAAS,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,uBAAuB,EAChC,0BAA0B,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C,KAAK,MAAM,GACX,MAAM,GAAG,SAAS,CAuBpB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,uBAAuB,GAAG;IAC/B,qGAAqG;IACrG,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,MAAM,CAAC;IACjD,0BAA0B,EAAE,CAAC,QAAQ,EAAE;QACrC,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC1C,KAAK,MAAM,CAAC;CACd,GACA,MAAM,CAQR"}

package/dist/esm/components/auth/methods/auth-method-presentation.js

@@ -0,0 +1,103 @@
+import { UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { AuthMethod } from '@wildo-ai/saas-models';
+import { StandardIconReference } from '../../../core/icons/icon-registry.frontend.schemas.js';
+/**
+ * The glyph that identifies each authentication method wherever a person chooses or starts one —
+ * the sign-in, registration, invitation, second-factor and enrollment choosers, and the button that
+ * STARTS a method where it has one (passkey, magic link, organization SSO, the email and SMS
+ * send-code buttons). Password and authenticator-app codes are typed into a form whose submit button
+ * belongs to the form, not to the method, so those carry no glyph.
+ *
+ * TOTAL over `AuthMethod` on purpose: a method added to the enum is a compile error here, so no screen
+ * can offer a method without an icon. `KEY` and `FINGERPRINT` are the glyphs the Security settings panel
+ * uses for password and passkeys. That panel shows its phone factor with `MAIL`; the sign-in surfaces
+ * use `MESSAGE_CIRCLE` for SMS, because in the second-factor chooser it sits beside email codes.
+ *
+ * `MAGIC_LINK` and `EMAIL_OTP` share `MAIL`: both are delivered to the inbox, and they never appear in
+ * the same chooser (the first is first-factor only, the second is second-factor only). `SMS_OTP` and
+ * `TOTP` DO meet in the second-factor chooser, so they are kept apart — a message for the text, a
+ * handset for the authenticator app.
+ */
+export const AUTH_METHOD_ICON_REFERENCES = {
+    [AuthMethod.PASSWORD]: StandardIconReference.KEY,
+    [AuthMethod.PASSKEY]: StandardIconReference.FINGERPRINT,
+    [AuthMethod.MAGIC_LINK]: StandardIconReference.MAIL,
+    [AuthMethod.EMAIL_OTP]: StandardIconReference.MAIL,
+    [AuthMethod.SMS_OTP]: StandardIconReference.MESSAGE_CIRCLE,
+    [AuthMethod.TOTP]: StandardIconReference.SMARTPHONE,
+    [AuthMethod.ORG_SAML]: StandardIconReference.ORGANIZATION,
+    [AuthMethod.ORG_OPENID_CONNECT]: StandardIconReference.ORGANIZATION,
+    [AuthMethod.EXTERNAL_OAUTH2]: StandardIconReference.LINK,
+};
+/**
+ * The words that name a first-factor method on a chooser, in the `USER_AUTH` label namespace.
+ *
+ * One source for the sign-in, registration and invitation screens, which each carried their own copy
+ * of this map so a method would "read the same wherever it is chosen" — a promise three hand-kept
+ * copies could not keep. SAML and OIDC share the organization-SSO label. The second-factor chooser
+ * names methods in its own namespace (`MfaChallengeLabel`) and does not use this map.
+ */
+export const AUTH_METHOD_CHOICE_LABELS = {
+    [AuthMethod.PASSWORD]: UserAuthLabel.METHOD_PASSWORD,
+    [AuthMethod.MAGIC_LINK]: UserAuthLabel.METHOD_MAGIC_LINK,
+    [AuthMethod.PASSKEY]: UserAuthLabel.METHOD_PASSKEY,
+    [AuthMethod.SMS_OTP]: UserAuthLabel.METHOD_SMS_OTP,
+    [AuthMethod.ORG_SAML]: UserAuthLabel.METHOD_ORG_SSO,
+    [AuthMethod.ORG_OPENID_CONNECT]: UserAuthLabel.METHOD_ORG_SSO,
+    [AuthMethod.EXTERNAL_OAUTH2]: UserAuthLabel.METHOD_EXTERNAL_OAUTH2,
+};
+/**
+ * The provider name a federated method should be called by, or `undefined` when there is not exactly
+ * one to name.
+ *
+ * **Exactly one is the whole condition, and it is not conservatism.** `oauth2ProviderRefs` is a LIST:
+ * one `EXTERNAL_OAUTH2` entry can stand for Google AND GitHub, and one organization can publish
+ * several connections. Naming such a button after the first would tell the person they are signing in
+ * with a provider that may not be the one the button reaches — worse than the generic kind, because it
+ * is specific and wrong. Where several are offered, the kind is the honest word and the caller keeps
+ * its existing label.
+ *
+ * The social branch resolves through the SAME helper the provider buttons use, so a provider renamed
+ * in configuration is renamed in the chooser, and a raw `providerRef` ("google") can never reach a
+ * person as the brand name.
+ */
+export function resolveAuthMethodProviderName(method, sources, resolveSocialProviderLabel) {
+    if (method === AuthMethod.ORG_SAML || method === AuthMethod.ORG_OPENID_CONNECT) {
+        const displayName = sources.offeredMethod?.config?.displayName?.trim();
+        return displayName ? displayName : undefined;
+    }
+    if (method !== AuthMethod.EXTERNAL_OAUTH2)
+        return undefined;
+    /*
+     * The descriptor's refs are authoritative when present — they are what `identify` says THIS method
+     * reaches. Registration and invitation have no descriptor, so they fall back to the application's
+     * configured providers, which is the same set their own provider buttons render.
+     */
+    const refs = sources.offeredMethod?.oauth2ProviderRefs;
+    const configured = sources.socialProviders ?? [];
+    const candidates = refs && refs.length > 0
+        ? configured.filter((provider) => refs.includes(provider.providerRef))
+        : configured;
+    // A ref the application does not declare cannot be named — resolving it would print the raw ref.
+    if (candidates.length !== 1)
+        return undefined;
+    const label = resolveSocialProviderLabel(candidates[0]).trim();
+    return label ? label : undefined;
+}
+/**
+ * The words a chooser puts on one method's button: the provider's own name where exactly one is
+ * nameable, and the method's kind otherwise.
+ *
+ * Returned whole rather than as a name the caller interpolates, because the three choosers were
+ * already three copies of one decision — which is what `AUTH_METHOD_CHOICE_LABELS` exists to prevent —
+ * and a name plus a template is two things to copy instead of one.
+ */
+export function resolveAuthMethodChoiceLabel(method, input) {
+    const providerName = resolveAuthMethodProviderName(method, input, input.resolveSocialProviderLabel);
+    if (providerName && input.continueWithTemplate.includes('{provider}')) {
+        return input.continueWithTemplate.replace('{provider}', providerName);
+    }
+    const labelKey = AUTH_METHOD_CHOICE_LABELS[method];
+    return labelKey ? input.translateLabel(labelKey) : method;
+}
+//# sourceMappingURL=auth-method-presentation.js.map

package/dist/esm/components/auth/methods/auth-method-presentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-method-presentation.js","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/auth-method-presentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AAEtG;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAwD;IAC9F,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,GAAG;IAChD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,WAAW;IACvD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,qBAAqB,CAAC,IAAI;IACnD,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC,IAAI;IAClD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,cAAc;IAC1D,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC,UAAU;IACnD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,YAAY;IACzD,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,CAAC,YAAY;IACnE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAC,IAAI;CACzD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAyD;IAC7F,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,eAAe;IACpD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,iBAAiB;IACxD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc;IAClD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc;IAClD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,cAAc;IACnD,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,cAAc;IAC7D,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,sBAAsB;CACnE,CAAC;AAqCF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAkB,EAClB,OAAgC,EAChC,0BAIY;IAEZ,IAAI,MAAM,KAAK,UAAU,CAAC,QAAQ,IAAI,MAAM,KAAK,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACvE,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAED,IAAI,MAAM,KAAK,UAAU,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IAE5D;;;;OAIG;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QACxC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACtE,CAAC,CAAC,UAAU,CAAC;IAEf,iGAAiG;IACjG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAkB,EAClB,KASC;IAED,MAAM,YAAY,GAAG,6BAA6B,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpG,IAAI,YAAY,IAAI,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC","sourcesContent":["import { UserAuthLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { StandardIconReference } from '~wildo-frontend-lib/core/icons/icon-registry.frontend.schemas';\n\n/**\n * The glyph that identifies each authentication method wherever a person chooses or starts one —\n * the sign-in, registration, invitation, second-factor and enrollment choosers, and the button that\n * STARTS a method where it has one (passkey, magic link, organization SSO, the email and SMS\n * send-code buttons). Password and authenticator-app codes are typed into a form whose submit button\n * belongs to the form, not to the method, so those carry no glyph.\n *\n * TOTAL over `AuthMethod` on purpose: a method added to the enum is a compile error here, so no screen\n * can offer a method without an icon. `KEY` and `FINGERPRINT` are the glyphs the Security settings panel\n * uses for password and passkeys. That panel shows its phone factor with `MAIL`; the sign-in surfaces\n * use `MESSAGE_CIRCLE` for SMS, because in the second-factor chooser it sits beside email codes.\n *\n * `MAGIC_LINK` and `EMAIL_OTP` share `MAIL`: both are delivered to the inbox, and they never appear in\n * the same chooser (the first is first-factor only, the second is second-factor only). `SMS_OTP` and\n * `TOTP` DO meet in the second-factor chooser, so they are kept apart — a message for the text, a\n * handset for the authenticator app.\n */\nexport const AUTH_METHOD_ICON_REFERENCES: Readonly<Record<AuthMethod, StandardIconReference>> = {\n  [AuthMethod.PASSWORD]: StandardIconReference.KEY,\n  [AuthMethod.PASSKEY]: StandardIconReference.FINGERPRINT,\n  [AuthMethod.MAGIC_LINK]: StandardIconReference.MAIL,\n  [AuthMethod.EMAIL_OTP]: StandardIconReference.MAIL,\n  [AuthMethod.SMS_OTP]: StandardIconReference.MESSAGE_CIRCLE,\n  [AuthMethod.TOTP]: StandardIconReference.SMARTPHONE,\n  [AuthMethod.ORG_SAML]: StandardIconReference.ORGANIZATION,\n  [AuthMethod.ORG_OPENID_CONNECT]: StandardIconReference.ORGANIZATION,\n  [AuthMethod.EXTERNAL_OAUTH2]: StandardIconReference.LINK,\n};\n\n/**\n * The words that name a first-factor method on a chooser, in the `USER_AUTH` label namespace.\n *\n * One source for the sign-in, registration and invitation screens, which each carried their own copy\n * of this map so a method would \"read the same wherever it is chosen\" — a promise three hand-kept\n * copies could not keep. SAML and OIDC share the organization-SSO label. The second-factor chooser\n * names methods in its own namespace (`MfaChallengeLabel`) and does not use this map.\n */\nexport const AUTH_METHOD_CHOICE_LABELS: Readonly<Partial<Record<AuthMethod, UserAuthLabel>>> = {\n  [AuthMethod.PASSWORD]: UserAuthLabel.METHOD_PASSWORD,\n  [AuthMethod.MAGIC_LINK]: UserAuthLabel.METHOD_MAGIC_LINK,\n  [AuthMethod.PASSKEY]: UserAuthLabel.METHOD_PASSKEY,\n  [AuthMethod.SMS_OTP]: UserAuthLabel.METHOD_SMS_OTP,\n  [AuthMethod.ORG_SAML]: UserAuthLabel.METHOD_ORG_SSO,\n  [AuthMethod.ORG_OPENID_CONNECT]: UserAuthLabel.METHOD_ORG_SSO,\n  [AuthMethod.EXTERNAL_OAUTH2]: UserAuthLabel.METHOD_EXTERNAL_OAUTH2,\n};\n\n/**\n * What a federated method offers to be named BY — the connection or provider behind it.\n *\n * `AUTH_METHOD_CHOICE_LABELS` names a method by its KIND, which is right for password, passkey and\n * the emailed link: there is one of each and its kind is its name. It is wrong for the two federated\n * kinds, where the thing a person recognises is the PROVIDER — \"Google\", \"Okta\", \"Acme SSO\" — and the\n * kind is an implementation word they have no reason to know.\n *\n * Every other surface already knew this. The pre-identify section renders one button per provider\n * reading \"Continue with Google\"; the ACTIVE enterprise method renders `CONTINUE_WITH` filled from the\n * connection's own `displayName`. Only the \"other sign-in methods\" chooser fell back to the kind, and\n * it did so while HOLDING the name: its three call sites each mapped their descriptors down to a bare\n * `AuthMethod` before asking for a label, so the provider was discarded one line above the lookup that\n * needed it. On Wonder Todos that rendered \"External sign-in\" for what every other surface calls\n * \"Continue with Google\".\n */\nexport interface AuthMethodNamingSources {\n  /**\n   * The offered-method descriptor, when the surface has one. `identify` fills `config.displayName`\n   * with the enterprise connection's own name and `oauth2ProviderRefs` with the social providers the\n   * method stands for. Registration and invitation have no descriptor — they offer a method before\n   * anyone is identified — so they pass only `socialProviders`.\n   */\n  offeredMethod?: {\n    readonly config?: { readonly displayName?: string } | undefined;\n    readonly oauth2ProviderRefs?: readonly string[] | undefined;\n  } | undefined;\n  /** The application's configured social providers, as the pre-identify section already resolves them. */\n  socialProviders?: readonly {\n    readonly providerRef: string;\n    readonly displayName?: string | undefined;\n    readonly displayNameLabelKey?: string | undefined;\n  }[] | undefined;\n}\n\n/**\n * The provider name a federated method should be called by, or `undefined` when there is not exactly\n * one to name.\n *\n * **Exactly one is the whole condition, and it is not conservatism.** `oauth2ProviderRefs` is a LIST:\n * one `EXTERNAL_OAUTH2` entry can stand for Google AND GitHub, and one organization can publish\n * several connections. Naming such a button after the first would tell the person they are signing in\n * with a provider that may not be the one the button reaches — worse than the generic kind, because it\n * is specific and wrong. Where several are offered, the kind is the honest word and the caller keeps\n * its existing label.\n *\n * The social branch resolves through the SAME helper the provider buttons use, so a provider renamed\n * in configuration is renamed in the chooser, and a raw `providerRef` (\"google\") can never reach a\n * person as the brand name.\n */\nexport function resolveAuthMethodProviderName(\n  method: AuthMethod,\n  sources: AuthMethodNamingSources,\n  resolveSocialProviderLabel: (provider: {\n    providerRef: string;\n    displayName?: string | undefined;\n    displayNameLabelKey?: string | undefined;\n  }) => string,\n): string | undefined {\n  if (method === AuthMethod.ORG_SAML || method === AuthMethod.ORG_OPENID_CONNECT) {\n    const displayName = sources.offeredMethod?.config?.displayName?.trim();\n    return displayName ? displayName : undefined;\n  }\n\n  if (method !== AuthMethod.EXTERNAL_OAUTH2) return undefined;\n\n  /*\n   * The descriptor's refs are authoritative when present — they are what `identify` says THIS method\n   * reaches. Registration and invitation have no descriptor, so they fall back to the application's\n   * configured providers, which is the same set their own provider buttons render.\n   */\n  const refs = sources.offeredMethod?.oauth2ProviderRefs;\n  const configured = sources.socialProviders ?? [];\n  const candidates = refs && refs.length > 0\n    ? configured.filter((provider) => refs.includes(provider.providerRef))\n    : configured;\n\n  // A ref the application does not declare cannot be named — resolving it would print the raw ref.\n  if (candidates.length !== 1) return undefined;\n  const label = resolveSocialProviderLabel(candidates[0]!).trim();\n  return label ? label : undefined;\n}\n\n/**\n * The words a chooser puts on one method's button: the provider's own name where exactly one is\n * nameable, and the method's kind otherwise.\n *\n * Returned whole rather than as a name the caller interpolates, because the three choosers were\n * already three copies of one decision — which is what `AUTH_METHOD_CHOICE_LABELS` exists to prevent —\n * and a name plus a template is two things to copy instead of one.\n */\nexport function resolveAuthMethodChoiceLabel(\n  method: AuthMethod,\n  input: AuthMethodNamingSources & {\n    /** `t(UserAuthLabel.CONTINUE_WITH)` — the already-translated \"Continue with {provider}\" template. */\n    continueWithTemplate: string;\n    translateLabel: (label: UserAuthLabel) => string;\n    resolveSocialProviderLabel: (provider: {\n      providerRef: string;\n      displayName?: string | undefined;\n      displayNameLabelKey?: string | undefined;\n    }) => string;\n  },\n): string {\n  const providerName = resolveAuthMethodProviderName(method, input, input.resolveSocialProviderLabel);\n  if (providerName && input.continueWithTemplate.includes('{provider}')) {\n    return input.continueWithTemplate.replace('{provider}', providerName);\n  }\n\n  const labelKey = AUTH_METHOD_CHOICE_LABELS[method];\n  return labelKey ? input.translateLabel(labelKey) : method;\n}\n"]}

package/dist/esm/components/auth/pages/AuthPage_AuthCallback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_AuthCallback.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_AuthCallback.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAYzC,CAAC"}
+{"version":3,"file":"AuthPage_AuthCallback.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_AuthCallback.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAYzC,CAAC"}