powr-sdk-web 6.15.1 → 6.17.1

package/dist/auth/index.js

@@ -10,6 +10,7 @@ var _firebase = require("../utils/firebase");
 var _AddPhonePanel = _interopRequireDefault(require("../onboarding/AddPhonePanel"));
 var _PhoneInput = _interopRequireDefault(require("../components/PhoneInput"));
 var _utils = require("../onboarding/utils");
+var _profileNameStep = require("../onboarding/steps/profileNameStep");
 var _phone = require("../utils/phone");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
 var cache;
@@ -17,13 +18,13 @@ function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e;
 function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
 function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
 function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
+function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
 function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
 function _toPrimitive(t, e) { if ("object" != _typeof(t) || !t) return t; var r; if ("undefined" != typeof Symbol && void 0 !== (r = t[Symbol.toPrimitive])) { var i = r.call(t, e || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === e ? String : Number)(t); }
-function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
-function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
 function _slicedToArray(r, e) { return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest(); }
 function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
 function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
@@ -48,6 +49,14 @@ var PowrLogin = function PowrLogin(_ref) {
     passwordResetHelpUrl = _ref$passwordResetHel === void 0 ? null : _ref$passwordResetHel,
     _ref$passwordResetHel2 = _ref.passwordResetHelpLabel,
     passwordResetHelpLabel = _ref$passwordResetHel2 === void 0 ? 'Forgot password? WhatsApp us' : _ref$passwordResetHel2,
+    _ref$forgotPasswordCh = _ref.forgotPasswordChannel,
+    forgotPasswordChannel = _ref$forgotPasswordCh === void 0 ? null : _ref$forgotPasswordCh,
+    _ref$otpApp = _ref.otpApp,
+    otpApp = _ref$otpApp === void 0 ? null : _ref$otpApp,
+    _ref$powrAccountUrl = _ref.powrAccountUrl,
+    powrAccountUrl = _ref$powrAccountUrl === void 0 ? 'https://lawazia.tech/#identity' : _ref$powrAccountUrl,
+    _ref$otpReset = _ref.otpReset,
+    otpReset = _ref$otpReset === void 0 ? false : _ref$otpReset,
     _ref$completeProfileO = _ref.completeProfileOnLogin,
     completeProfileOnLogin = _ref$completeProfileO === void 0 ? false : _ref$completeProfileO,
     _ref$requireTerms = _ref.requireTerms,
@@ -63,6 +72,7 @@ var PowrLogin = function PowrLogin(_ref) {
     onSessionExpired = _ref.onSessionExpired;
   var projectId = projectIdProp || config.projectId;
   var resolvedDefaultCountry = (0, _phone.resolveCountry)(defaultCountry, defaultCountryCode);
+  var resetChannel = forgotPasswordChannel || (otpReset ? 'otp' : 'whatsapp');
   var _useState = (0, _react.useState)(function () {
       switch (mode) {
         case 'login':
@@ -122,55 +132,116 @@ var PowrLogin = function PowrLogin(_ref) {
     _useState20 = _slicedToArray(_useState19, 2),
     otpSent = _useState20[0],
     setOtpSent = _useState20[1];
-  var _useState21 = (0, _react.useState)(false),
+  var _useState21 = (0, _react.useState)(null),
     _useState22 = _slicedToArray(_useState21, 2),
-    otpLoading = _useState22[0],
-    setOtpLoading = _useState22[1];
+    smsResetStep = _useState22[0],
+    setSmsResetStep = _useState22[1];
   var _useState23 = (0, _react.useState)(''),
     _useState24 = _slicedToArray(_useState23, 2),
-    otp = _useState24[0],
-    setOtp = _useState24[1];
-  var _useState25 = (0, _react.useState)(false),
+    smsOtp = _useState24[0],
+    setSmsOtp = _useState24[1];
+  var _useState25 = (0, _react.useState)(''),
     _useState26 = _slicedToArray(_useState25, 2),
-    firebaseOtpSent = _useState26[0],
-    setFirebaseOtpSent = _useState26[1];
-  var _useState27 = (0, _react.useState)(null),
+    smsNewPassword = _useState26[0],
+    setSmsNewPassword = _useState26[1];
+  var _useState27 = (0, _react.useState)(''),
     _useState28 = _slicedToArray(_useState27, 2),
-    firebaseConfirm = _useState28[0],
-    setFirebaseConfirm = _useState28[1];
-  var _useState29 = (0, _react.useState)(false),
+    smsConfirmPassword = _useState28[0],
+    setSmsConfirmPassword = _useState28[1];
+  var _useState29 = (0, _react.useState)(null),
     _useState30 = _slicedToArray(_useState29, 2),
-    showOtpModal = _useState30[0],
-    setShowOtpModal = _useState30[1];
-  var _useState31 = (0, _react.useState)(false),
+    smsVerifyAuth = _useState30[0],
+    setSmsVerifyAuth = _useState30[1];
+  var _useState31 = (0, _react.useState)('phone'),
     _useState32 = _slicedToArray(_useState31, 2),
-    isPhoneVerified = _useState32[0],
-    setIsPhoneVerified = _useState32[1];
-  var _useState33 = (0, _react.useState)('form'),
+    loginGate = _useState32[0],
+    setLoginGate = _useState32[1];
+  var _useState33 = (0, _react.useState)(false),
     _useState34 = _slicedToArray(_useState33, 2),
-    authView = _useState34[0],
-    setAuthView = _useState34[1];
-  var _useState35 = (0, _react.useState)(null),
+    otpLoading = _useState34[0],
+    setOtpLoading = _useState34[1];
+  var _useState35 = (0, _react.useState)(''),
     _useState36 = _slicedToArray(_useState35, 2),
-    pendingAuth = _useState36[0],
-    setPendingAuth = _useState36[1];
+    otp = _useState36[0],
+    setOtp = _useState36[1];
   var _useState37 = (0, _react.useState)(false),
     _useState38 = _slicedToArray(_useState37, 2),
-    termsAccepted = _useState38[0],
-    setTermsAccepted = _useState38[1];
-  var _useState39 = (0, _react.useState)(resolvedDefaultCountry),
+    firebaseOtpSent = _useState38[0],
+    setFirebaseOtpSent = _useState38[1];
+  var _useState39 = (0, _react.useState)(null),
     _useState40 = _slicedToArray(_useState39, 2),
-    phoneCountry = _useState40[0],
-    setPhoneCountry = _useState40[1];
+    firebaseConfirm = _useState40[0],
+    setFirebaseConfirm = _useState40[1];
   var _useState41 = (0, _react.useState)(false),
     _useState42 = _slicedToArray(_useState41, 2),
-    registerPhoneValid = _useState42[0],
-    setRegisterPhoneValid = _useState42[1];
-  var _useState43 = (0, _react.useState)(''),
+    showOtpModal = _useState42[0],
+    setShowOtpModal = _useState42[1];
+  var _useState43 = (0, _react.useState)(false),
     _useState44 = _slicedToArray(_useState43, 2),
-    registerPhoneE164 = _useState44[0],
-    setRegisterPhoneE164 = _useState44[1];
-  var shouldShowToggle = mode === 'toggle';
+    isPhoneVerified = _useState44[0],
+    setIsPhoneVerified = _useState44[1];
+  var _useState45 = (0, _react.useState)('form'),
+    _useState46 = _slicedToArray(_useState45, 2),
+    authView = _useState46[0],
+    setAuthView = _useState46[1];
+  var _useState47 = (0, _react.useState)(null),
+    _useState48 = _slicedToArray(_useState47, 2),
+    pendingAuth = _useState48[0],
+    setPendingAuth = _useState48[1];
+  var _useState49 = (0, _react.useState)(false),
+    _useState50 = _slicedToArray(_useState49, 2),
+    termsAccepted = _useState50[0],
+    setTermsAccepted = _useState50[1];
+  var _useState51 = (0, _react.useState)(resolvedDefaultCountry),
+    _useState52 = _slicedToArray(_useState51, 2),
+    phoneCountry = _useState52[0],
+    setPhoneCountry = _useState52[1];
+  var _useState53 = (0, _react.useState)(false),
+    _useState54 = _slicedToArray(_useState53, 2),
+    registerPhoneValid = _useState54[0],
+    setRegisterPhoneValid = _useState54[1];
+  var _useState55 = (0, _react.useState)(''),
+    _useState56 = _slicedToArray(_useState55, 2),
+    registerPhoneE164 = _useState56[0],
+    setRegisterPhoneE164 = _useState56[1];
+  var shouldShowToggle = false;
+  var askForProfile = true;
+  var finishWithSession = function finishWithSession(data) {
+    if (!(data !== null && data !== void 0 && data.token)) return;
+    if (askForProfile && data.user && (0, _utils.needsPhone)(data.user)) {
+      setPendingAuth({
+        user: data.user,
+        token: data.token,
+        refreshToken: data.refreshToken,
+        onTokenRefreshed: function onTokenRefreshed(newToken) {
+          setPendingAuth(function (prev) {
+            return prev ? _objectSpread(_objectSpread({}, prev), {}, {
+              token: newToken
+            }) : prev;
+          });
+        }
+      });
+      setAuthView('add-phone');
+      return;
+    }
+    if (askForProfile && data.user && (0, _utils.needsProfileName)(data.user)) {
+      setPendingAuth({
+        user: data.user,
+        token: data.token,
+        refreshToken: data.refreshToken,
+        onTokenRefreshed: function onTokenRefreshed(newToken) {
+          setPendingAuth(function (prev) {
+            return prev ? _objectSpread(_objectSpread({}, prev), {}, {
+              token: newToken
+            }) : prev;
+          });
+        }
+      });
+      setAuthView('add-name');
+      return;
+    }
+    if (onLogin) onLogin(data);
+  };
   var handleInputChange = /*#__PURE__*/function () {
     var _ref2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(e) {
       var _e$target, name, value;
@@ -401,48 +472,144 @@ var PowrLogin = function PowrLogin(_ref) {
     var emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
     return emailRegex.test(email);
   };
+  var storedPhone = function storedPhone() {
+    return registerPhoneE164 || (0, _phone.coercePhoneForStorage)(formData.phoneOrEmail.trim(), phoneCountry) || (0, _phone.coercePhoneForStorage)(formData.phoneOrEmail.trim(), resolvedDefaultCountry) || (0, _phone.normalizePhone)(formData.phoneOrEmail.trim(), phoneCountry);
+  };
+  var isIndiaNumber = function isIndiaNumber() {
+    var e164 = storedPhone() || '';
+    return e164.startsWith('+91') || phoneCountry === 'IN';
+  };
+  var continuePhone = /*#__PURE__*/function () {
+    var _ref6 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee4() {
+      var phoneOrEmail, _yield$apiCall, data, ok, _t5;
+      return _regenerator().w(function (_context4) {
+        while (1) switch (_context4.p = _context4.n) {
+          case 0:
+            phoneOrEmail = storedPhone();
+            if (registerPhoneValid) {
+              _context4.n = 1;
+              break;
+            }
+            setFieldErrors({
+              phoneOrEmail: 'Enter a valid mobile number'
+            });
+            return _context4.a(2);
+          case 1:
+            setLoading(true);
+            setError('');
+            setSuccess('');
+            _context4.p = 2;
+            _context4.n = 3;
+            return (0, _auth.apiCall)(apiUrl, '/auth/login-options', projectId, {
+              method: 'POST',
+              body: {
+                phoneOrEmail: phoneOrEmail,
+                mobile: smsMobile()
+              }
+            });
+          case 3:
+            _yield$apiCall = _context4.v;
+            data = _yield$apiCall.data;
+            ok = _yield$apiCall.ok;
+            if (!(ok && data.exists && data.hasPassword)) {
+              _context4.n = 4;
+              break;
+            }
+            setLoginGate('password');
+            setSuccess('');
+            return _context4.a(2);
+          case 4:
+            if (!(resetChannel === 'otp')) {
+              _context4.n = 8;
+              break;
+            }
+            if (isIndiaNumber()) {
+              _context4.n = 5;
+              break;
+            }
+            setLoginGate('password');
+            setError('SMS is for Indian numbers. Sign in with your password.');
+            return _context4.a(2);
+          case 5:
+            if (!ok) {
+              _context4.n = 7;
+              break;
+            }
+            setLoading(false);
+            _context4.n = 6;
+            return handleSmsForgotStart();
+          case 6:
+            return _context4.a(2);
+          case 7:
+            setLoginGate('password');
+            return _context4.a(2);
+          case 8:
+            if (!(ok && (!data.exists || !data.hasPassword))) {
+              _context4.n = 9;
+              break;
+            }
+            setLoginGate('help');
+            return _context4.a(2);
+          case 9:
+            setLoginGate('password');
+            _context4.n = 11;
+            break;
+          case 10:
+            _context4.p = 10;
+            _t5 = _context4.v;
+            setLoginGate('password');
+          case 11:
+            _context4.p = 11;
+            setLoading(false);
+            return _context4.f(11);
+          case 12:
+            return _context4.a(2);
+        }
+      }, _callee4, null, [[2, 10, 11, 12]]);
+    }));
+    return function continuePhone() {
+      return _ref6.apply(this, arguments);
+    };
+  }();
   var handleSubmit = /*#__PURE__*/function () {
-    var _ref6 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee4(e) {
+    var _ref7 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee5(e) {
       var skipPhoneValidation,
         errors,
         value,
-        isEmail,
         endpoint,
         normalizedPhone,
         payload,
-        _yield$apiCall,
+        _yield$apiCall2,
         data,
         ok,
-        _args4 = arguments,
-        _t5;
-      return _regenerator().w(function (_context4) {
-        while (1) switch (_context4.p = _context4.n) {
+        _login$data,
+        login,
+        _args5 = arguments,
+        _t6;
+      return _regenerator().w(function (_context5) {
+        while (1) switch (_context5.p = _context5.n) {
           case 0:
-            skipPhoneValidation = _args4.length > 1 && _args4[1] !== undefined ? _args4[1] : false;
+            skipPhoneValidation = _args5.length > 1 && _args5[1] !== undefined ? _args5[1] : false;
             if (e) e.preventDefault();
-            setLoading(true);
             setError('');
             setSuccess('');
             setFieldErrors({});
             errors = {};
             value = formData.phoneOrEmail.trim();
-            isEmail = value.includes('@');
+            if (!(isLogin && loginGate === 'phone' && !smsResetStep)) {
+              _context5.n = 2;
+              break;
+            }
+            _context5.n = 1;
+            return continuePhone();
+          case 1:
+            return _context5.a(2);
+          case 2:
             if (!formData.phoneOrEmail.trim()) {
-              errors.phoneOrEmail = isLogin ? 'Phone or email is required' : 'Phone number is required';
+              errors.phoneOrEmail = 'Phone number is required';
             }
-
-            // Registration: Only allow phone numbers
-            if (!isLogin && !registerPhoneValid) {
-              errors.phoneOrEmail = international ? 'Please enter a valid phone number' : 'Please enter a valid mobile number';
-            }
-
-            // Login: Allow both phone and email
-            if (isLogin) {
-              if (isEmail && !isValidEmail(value)) {
-                errors.phoneOrEmail = 'Please enter a valid email address';
-              } else if (!isEmail && !(0, _phone.coercePhoneForStorage)(value, resolvedDefaultCountry)) {
-                errors.phoneOrEmail = 'Please enter a valid phone number (include country code, e.g. +1…) or email';
-              }
+            if (!registerPhoneValid && !storedPhone()) {
+              errors.phoneOrEmail = 'Please enter a valid mobile number';
             }
             if (!formData.password.trim()) {
               errors.password = 'Password is required';
@@ -462,72 +629,62 @@ var PowrLogin = function PowrLogin(_ref) {
               errors.terms = 'Please accept the terms to continue';
             }
             if (!(Object.keys(errors).length > 0)) {
-              _context4.n = 1;
+              _context5.n = 3;
               break;
             }
             setFieldErrors(errors);
-            setLoading(false);
-            return _context4.a(2);
-          case 1:
-            _context4.p = 1;
+            return _context5.a(2);
+          case 3:
+            setLoading(true);
+            _context5.p = 4;
             endpoint = isLogin ? "/auth/login" : "/auth/register";
-            normalizedPhone = isLogin ? isEmail ? value : (0, _phone.coercePhoneForStorage)(value, resolvedDefaultCountry) || (0, _phone.normalizePhone)(value, resolvedDefaultCountry) : registerPhoneE164 || (0, _phone.coercePhoneForStorage)(value, phoneCountry) || (0, _phone.normalizePhone)(value, phoneCountry);
+            normalizedPhone = storedPhone() || value;
             payload = isLogin ? {
-              phoneOrEmail: isEmail ? value : normalizedPhone,
+              phoneOrEmail: normalizedPhone,
               password: formData.password
             } : {
               fullName: formData.fullName,
               phoneOrEmail: normalizedPhone,
               password: formData.password
             };
-            _context4.n = 2;
+            _context5.n = 5;
             return (0, _auth.apiCall)(apiUrl, endpoint, projectId, {
               method: 'POST',
               body: payload
             });
-          case 2:
-            _yield$apiCall = _context4.v;
-            data = _yield$apiCall.data;
-            ok = _yield$apiCall.ok;
+          case 5:
+            _yield$apiCall2 = _context5.v;
+            data = _yield$apiCall2.data;
+            ok = _yield$apiCall2.ok;
             if (!ok) {
-              _context4.n = 6;
+              _context5.n = 9;
               break;
             }
             setSuccess(isLogin ? 'Login successful!' : 'Registration successful!');
             if (!isLogin) {
-              _context4.n = 4;
-              break;
-            }
-            if (!(completeProfileOnLogin && (0, _utils.needsPhone)(data.user))) {
-              _context4.n = 3;
+              _context5.n = 6;
               break;
             }
-            setPendingAuth({
-              user: data.user,
-              token: data.token,
-              refreshToken: data.refreshToken,
-              onTokenRefreshed: function onTokenRefreshed(newToken) {
-                setPendingAuth(function (prev) {
-                  return prev ? _objectSpread(_objectSpread({}, prev), {}, {
-                    token: newToken
-                  }) : prev;
-                });
+            finishWithSession(data);
+            _context5.n = 8;
+            break;
+          case 6:
+            _context5.n = 7;
+            return (0, _auth.apiCall)(apiUrl, '/auth/login', projectId, {
+              method: 'POST',
+              body: {
+                phoneOrEmail: normalizedPhone,
+                password: formData.password
               }
             });
-            setAuthView('add-phone');
-            setLoading(false);
-            return _context4.a(2);
-          case 3:
-            if (onLogin) {
-              onLogin(data);
-            }
-            _context4.n = 5;
-            break;
-          case 4:
-            if (!isLogin && onRegister) {
+          case 7:
+            login = _context5.v;
+            if (login.ok && (_login$data = login.data) !== null && _login$data !== void 0 && _login$data.token) {
+              if (onLogin) finishWithSession(login.data);else if (onRegister) onRegister(login.data);
+            } else if (onRegister) {
               onRegister(data);
             }
-          case 5:
+          case 8:
             setFormData({
               phoneOrEmail: '',
               password: '',
@@ -538,9 +695,9 @@ var PowrLogin = function PowrLogin(_ref) {
             setOtp('');
             setFirebaseOtpSent(false);
             setFirebaseConfirm(null);
-            _context4.n = 7;
+            _context5.n = 10;
             break;
-          case 6:
+          case 9:
             if (data.message) {
               setError(data.message);
             } else if (data.error) {
@@ -554,24 +711,24 @@ var PowrLogin = function PowrLogin(_ref) {
             } else {
               setError("".concat(isLogin ? 'Login' : 'Registration', " failed. Please try again."));
             }
-          case 7:
-            _context4.n = 9;
+          case 10:
+            _context5.n = 12;
             break;
-          case 8:
-            _context4.p = 8;
-            _t5 = _context4.v;
+          case 11:
+            _context5.p = 11;
+            _t6 = _context5.v;
             setError('Network error. Please try again.');
-          case 9:
-            _context4.p = 9;
+          case 12:
+            _context5.p = 12;
             setLoading(false);
-            return _context4.f(9);
-          case 10:
-            return _context4.a(2);
+            return _context5.f(12);
+          case 13:
+            return _context5.a(2);
         }
-      }, _callee4, null, [[1, 8, 9, 10]]);
+      }, _callee5, null, [[4, 11, 12, 13]]);
     }));
     return function handleSubmit(_x3) {
-      return _ref6.apply(this, arguments);
+      return _ref7.apply(this, arguments);
     };
   }();
   var toggleMode = function toggleMode() {
@@ -631,26 +788,313 @@ var PowrLogin = function PowrLogin(_ref) {
     }
     setError('Your session timed out. Sign in again to add your phone number.');
   };
+  var smsMobile = function smsMobile() {
+    var digits = formData.phoneOrEmail.replace(/\D/g, '');
+    if (digits.length === 10) return digits;
+    if (digits.length === 12 && digits.startsWith('91')) return digits.slice(2);
+    if (digits.length === 11 && digits.startsWith('0')) return digits.slice(1);
+    return digits;
+  };
+  var hostOtp = /*#__PURE__*/function () {
+    var _ref8 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee6(path, extra) {
+      var body, app, _yield$apiCall3, data, ok;
+      return _regenerator().w(function (_context6) {
+        while (1) switch (_context6.n) {
+          case 0:
+            body = _objectSpread({
+              mobile: smsMobile()
+            }, extra);
+            app = otpApp && String(otpApp).trim();
+            if (app) body.app = app;
+            _context6.n = 1;
+            return (0, _auth.apiCall)(apiUrl, path, projectId, {
+              method: 'POST',
+              body: body
+            });
+          case 1:
+            _yield$apiCall3 = _context6.v;
+            data = _yield$apiCall3.data;
+            ok = _yield$apiCall3.ok;
+            if (!(!ok || data.success === false)) {
+              _context6.n = 2;
+              break;
+            }
+            throw new Error(data.message || 'Could not complete the phone check');
+          case 2:
+            return _context6.a(2, data);
+        }
+      }, _callee6);
+    }));
+    return function hostOtp(_x4, _x5) {
+      return _ref8.apply(this, arguments);
+    };
+  }();
+  var handleSmsForgotStart = /*#__PURE__*/function () {
+    var _ref9 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee7() {
+      var _t7;
+      return _regenerator().w(function (_context7) {
+        while (1) switch (_context7.p = _context7.n) {
+          case 0:
+            if (!(resetChannel !== 'otp')) {
+              _context7.n = 1;
+              break;
+            }
+            return _context7.a(2);
+          case 1:
+            if (!(!isIndiaNumber() || smsMobile().length !== 10)) {
+              _context7.n = 2;
+              break;
+            }
+            setFieldErrors({
+              phoneOrEmail: 'SMS is for a 10-digit Indian mobile'
+            });
+            return _context7.a(2);
+          case 2:
+            setSmsOtp('');
+            setSmsResetStep('otp');
+            setOtpLoading(true);
+            setError('');
+            setSuccess('Sending a code…');
+            _context7.p = 3;
+            _context7.n = 4;
+            return hostOtp('/auth/send-otp');
+          case 4:
+            setSuccess('Code sent. Enter the 5-digit SMS.');
+            _context7.n = 6;
+            break;
+          case 5:
+            _context7.p = 5;
+            _t7 = _context7.v;
+            setSmsResetStep(null);
+            setSuccess('');
+            setError(_t7.message || 'Could not send the code.');
+          case 6:
+            _context7.p = 6;
+            setOtpLoading(false);
+            return _context7.f(6);
+          case 7:
+            return _context7.a(2);
+        }
+      }, _callee7, null, [[3, 5, 6, 7]]);
+    }));
+    return function handleSmsForgotStart() {
+      return _ref9.apply(this, arguments);
+    };
+  }();
+  var handleSmsVerify = /*#__PURE__*/function () {
+    var _ref0 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee8() {
+      var code, data, _t8;
+      return _regenerator().w(function (_context8) {
+        while (1) switch (_context8.p = _context8.n) {
+          case 0:
+            code = smsOtp.replace(/\D/g, '').slice(0, 5);
+            if (!(code.length !== 5)) {
+              _context8.n = 1;
+              break;
+            }
+            setError('Enter the 5-digit code.');
+            return _context8.a(2);
+          case 1:
+            setOtpLoading(true);
+            setError('');
+            _context8.p = 2;
+            _context8.n = 3;
+            return hostOtp('/auth/verify-otp', {
+              otp: code
+            });
+          case 3:
+            data = _context8.v;
+            setSmsVerifyAuth(data);
+            setSmsNewPassword('');
+            setSmsConfirmPassword('');
+            setSmsResetStep('password');
+            setSuccess(data.user ? 'Phone confirmed. Set a new password.' : 'Create a password. Next time you sign in with this number and password.');
+            _context8.n = 5;
+            break;
+          case 4:
+            _context8.p = 4;
+            _t8 = _context8.v;
+            setError(_t8.message || 'Could not verify the code.');
+          case 5:
+            _context8.p = 5;
+            setOtpLoading(false);
+            return _context8.f(5);
+          case 6:
+            return _context8.a(2);
+        }
+      }, _callee8, null, [[2, 4, 5, 6]]);
+    }));
+    return function handleSmsVerify() {
+      return _ref0.apply(this, arguments);
+    };
+  }();
+  var handleSmsSavePassword = /*#__PURE__*/function () {
+    var _ref1 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee0() {
+      var phoneOrEmail, resetExisting, registered, _registered$data, msg, login, _login$data2, _t9;
+      return _regenerator().w(function (_context0) {
+        while (1) switch (_context0.p = _context0.n) {
+          case 0:
+            if (!(smsNewPassword.length < 6)) {
+              _context0.n = 1;
+              break;
+            }
+            setError('Password must be at least 6 characters');
+            return _context0.a(2);
+          case 1:
+            if (!(smsNewPassword !== smsConfirmPassword)) {
+              _context0.n = 2;
+              break;
+            }
+            setError('Passwords do not match');
+            return _context0.a(2);
+          case 2:
+            phoneOrEmail = storedPhone() || formData.phoneOrEmail.trim();
+            setOtpLoading(true);
+            setError('');
+            _context0.p = 3;
+            resetExisting = /*#__PURE__*/function () {
+              var _ref10 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee9() {
+                var _forgot$data;
+                var forgot, _forgot$data2, reset, _reset$data;
+                return _regenerator().w(function (_context9) {
+                  while (1) switch (_context9.n) {
+                    case 0:
+                      _context9.n = 1;
+                      return (0, _auth.apiCall)(apiUrl, '/auth/forgot-password', projectId, {
+                        method: 'POST',
+                        body: {
+                          phoneOrEmail: phoneOrEmail
+                        }
+                      });
+                    case 1:
+                      forgot = _context9.v;
+                      if (!(!forgot.ok || !((_forgot$data = forgot.data) !== null && _forgot$data !== void 0 && _forgot$data.resetToken))) {
+                        _context9.n = 2;
+                        break;
+                      }
+                      throw new Error(((_forgot$data2 = forgot.data) === null || _forgot$data2 === void 0 ? void 0 : _forgot$data2.message) || 'Could not reset password.');
+                    case 2:
+                      _context9.n = 3;
+                      return (0, _auth.apiCall)(apiUrl, '/auth/reset-password', projectId, {
+                        method: 'POST',
+                        body: {
+                          resetToken: forgot.data.resetToken,
+                          newPassword: smsNewPassword
+                        }
+                      });
+                    case 3:
+                      reset = _context9.v;
+                      if (reset.ok) {
+                        _context9.n = 4;
+                        break;
+                      }
+                      throw new Error(((_reset$data = reset.data) === null || _reset$data === void 0 ? void 0 : _reset$data.message) || 'Could not save the new password.');
+                    case 4:
+                      return _context9.a(2);
+                  }
+                }, _callee9);
+              }));
+              return function resetExisting() {
+                return _ref10.apply(this, arguments);
+              };
+            }();
+            if (!(smsVerifyAuth !== null && smsVerifyAuth !== void 0 && smsVerifyAuth.user)) {
+              _context0.n = 5;
+              break;
+            }
+            _context0.n = 4;
+            return resetExisting();
+          case 4:
+            _context0.n = 9;
+            break;
+          case 5:
+            _context0.n = 6;
+            return (0, _auth.apiCall)(apiUrl, '/auth/register', projectId, {
+              method: 'POST',
+              body: {
+                fullName: (formData.fullName || '').trim() || 'User',
+                phoneOrEmail: phoneOrEmail,
+                password: smsNewPassword
+              }
+            });
+          case 6:
+            registered = _context0.v;
+            if (registered.ok) {
+              _context0.n = 9;
+              break;
+            }
+            msg = ((_registered$data = registered.data) === null || _registered$data === void 0 ? void 0 : _registered$data.message) || '';
+            if (!/exist|already|registered/i.test(msg)) {
+              _context0.n = 8;
+              break;
+            }
+            _context0.n = 7;
+            return resetExisting();
+          case 7:
+            _context0.n = 9;
+            break;
+          case 8:
+            throw new Error(msg || 'Could not create the account.');
+          case 9:
+            _context0.n = 10;
+            return (0, _auth.apiCall)(apiUrl, '/auth/login', projectId, {
+              method: 'POST',
+              body: {
+                phoneOrEmail: phoneOrEmail,
+                password: smsNewPassword
+              }
+            });
+          case 10:
+            login = _context0.v;
+            if (login.ok) {
+              _context0.n = 11;
+              break;
+            }
+            throw new Error(((_login$data2 = login.data) === null || _login$data2 === void 0 ? void 0 : _login$data2.message) || 'Password saved. Sign in with it.');
+          case 11:
+            setSmsResetStep(null);
+            setSmsVerifyAuth(null);
+            setSuccess('Password saved.');
+            finishWithSession(login.data);
+            _context0.n = 13;
+            break;
+          case 12:
+            _context0.p = 12;
+            _t9 = _context0.v;
+            setError(_t9.message || 'Could not reset password.');
+          case 13:
+            _context0.p = 13;
+            setOtpLoading(false);
+            return _context0.f(13);
+          case 14:
+            return _context0.a(2);
+        }
+      }, _callee0, null, [[3, 12, 13, 14]]);
+    }));
+    return function handleSmsSavePassword() {
+      return _ref1.apply(this, arguments);
+    };
+  }();
   var handleGetOtp = /*#__PURE__*/function () {
-    var _ref7 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee5() {
-      var _yield$apiCall2, data, ok, _t6;
-      return _regenerator().w(function (_context5) {
-        while (1) switch (_context5.p = _context5.n) {
+    var _ref11 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee1() {
+      var _yield$apiCall4, data, ok, _t0;
+      return _regenerator().w(function (_context1) {
+        while (1) switch (_context1.p = _context1.n) {
           case 0:
             if (formData.phoneOrEmail.trim()) {
-              _context5.n = 1;
+              _context1.n = 1;
               break;
             }
             setFieldErrors({
               phoneOrEmail: 'Phone or email is required for OTP'
             });
-            return _context5.a(2);
+            return _context1.a(2);
           case 1:
             setOtpLoading(true);
             setError('');
             setFieldErrors({});
-            _context5.p = 2;
-            _context5.n = 3;
+            _context1.p = 2;
+            _context1.n = 3;
             return (0, _auth.apiCall)(apiUrl, "/auth/send-otp", projectId, {
               method: 'POST',
               body: {
@@ -658,9 +1102,9 @@ var PowrLogin = function PowrLogin(_ref) {
               }
             });
           case 3:
-            _yield$apiCall2 = _context5.v;
-            data = _yield$apiCall2.data;
-            ok = _yield$apiCall2.ok;
+            _yield$apiCall4 = _context1.v;
+            data = _yield$apiCall4.data;
+            ok = _yield$apiCall4.ok;
             if (ok) {
               setOtpSent(true);
               setSuccess('OTP sent successfully! Check your phone/email.');
@@ -668,23 +1112,23 @@ var PowrLogin = function PowrLogin(_ref) {
             } else {
               setError(data.message || 'Failed to send OTP. Please try again.');
             }
-            _context5.n = 5;
+            _context1.n = 5;
             break;
           case 4:
-            _context5.p = 4;
-            _t6 = _context5.v;
+            _context1.p = 4;
+            _t0 = _context1.v;
             setError('Network error. Please try again.');
           case 5:
-            _context5.p = 5;
+            _context1.p = 5;
             setOtpLoading(false);
-            return _context5.f(5);
+            return _context1.f(5);
           case 6:
-            return _context5.a(2);
+            return _context1.a(2);
         }
-      }, _callee5, null, [[2, 4, 5, 6]]);
+      }, _callee1, null, [[2, 4, 5, 6]]);
     }));
     return function handleGetOtp() {
-      return _ref7.apply(this, arguments);
+      return _ref11.apply(this, arguments);
     };
   }();
   return /*#__PURE__*/_react["default"].createElement("div", {
@@ -705,7 +1149,10 @@ var PowrLogin = function PowrLogin(_ref) {
     style: styles.subtitleContainer
   }, /*#__PURE__*/_react["default"].createElement("p", {
     style: styles.subtitle
-  }, isLogin ? 'Sign in to your ' : 'Create your ', /*#__PURE__*/_react["default"].createElement("span", {
+  }, isLogin ? 'Sign in to your ' : 'Create your ', powrAccountUrl ? /*#__PURE__*/_react["default"].createElement("a", {
+    href: powrAccountUrl,
+    target: "_blank",
+    rel: "noopener noreferrer",
     style: styles.powrAccountText,
     onMouseEnter: function onMouseEnter() {
       return setShowTooltip(true);
@@ -713,9 +1160,34 @@ var PowrLogin = function PowrLogin(_ref) {
     onMouseLeave: function onMouseLeave() {
       return setShowTooltip(false);
     }
-  }, "PowrAccount")), showTooltip && /*#__PURE__*/_react["default"].createElement("div", {
+  }, "PowrAccount") : /*#__PURE__*/_react["default"].createElement("span", {
+    style: styles.powrAccountText,
+    onMouseEnter: function onMouseEnter() {
+      return setShowTooltip(true);
+    },
+    onMouseLeave: function onMouseLeave() {
+      return setShowTooltip(false);
+    }
+  }, "PowrAccount")), isLogin ? /*#__PURE__*/_react["default"].createElement("p", {
+    style: _objectSpread(_objectSpread({}, styles.subtitle), {}, {
+      marginTop: 6,
+      fontSize: 14,
+      fontWeight: 400
+    })
+  }, loginGate === 'password' ? 'Enter your password.' : smsResetStep === 'otp' ? 'Enter the code we sent.' : loginGate === 'help' ? 'WhatsApp us to get in.' : smsResetStep === 'password' ? 'Set a password for next time.' : 'Enter your mobile number.') : null, showTooltip && /*#__PURE__*/_react["default"].createElement("div", {
     style: styles.tooltip
-  }, "Secure authentication powered by Lawazia Tech"))), authView === 'add-phone' && pendingAuth ? /*#__PURE__*/_react["default"].createElement(_AddPhonePanel["default"], {
+  }, "Secure authentication powered by Lawazia Tech"))), authView === 'add-name' && pendingAuth ? /*#__PURE__*/_react["default"].createElement(_profileNameStep.profileNameStep.Component, {
+    ctx: {
+      user: pendingAuth.user,
+      token: pendingAuth.token,
+      apiUrl: apiUrl,
+      projectId: projectId,
+      defaultCountry: resolvedDefaultCountry
+    },
+    onComplete: function onComplete(patch) {
+      handleAddPhoneComplete(_objectSpread(_objectSpread({}, pendingAuth.user), patch), pendingAuth.token);
+    }
+  }) : authView === 'add-phone' && pendingAuth ? /*#__PURE__*/_react["default"].createElement(_AddPhonePanel["default"], {
     apiUrl: apiUrl,
     projectId: projectId,
     pendingAuth: pendingAuth,
@@ -753,23 +1225,14 @@ var PowrLogin = function PowrLogin(_ref) {
   }, /*#__PURE__*/_react["default"].createElement("label", {
     htmlFor: "phoneOrEmail",
     style: styles.label
-  }, isLogin ? 'Phone or Email' : 'Phone Number'), !isLogin ? /*#__PURE__*/_react["default"].createElement(_PhoneInput["default"], {
+  }, "Mobile"), /*#__PURE__*/_react["default"].createElement(_PhoneInput["default"], {
     value: formData.phoneOrEmail,
     country: phoneCountry,
     onChange: handleRegisterPhoneChange,
-    international: international,
+    international: true,
     allowedCountries: allowedCountries,
     defaultCountry: resolvedDefaultCountry,
     inputStyle: _objectSpread({}, fieldErrors.phoneOrEmail ? styles.inputError : {})
-  }) : /*#__PURE__*/_react["default"].createElement("input", {
-    type: "text",
-    id: "phoneOrEmail",
-    name: "phoneOrEmail",
-    value: formData.phoneOrEmail,
-    onChange: handlePhoneOrEmailChange,
-    style: _objectSpread(_objectSpread({}, styles.input), fieldErrors.phoneOrEmail ? styles.inputError : {}),
-    placeholder: "Phone (+country code) or email",
-    required: true
   }), fieldErrors.phoneOrEmail && /*#__PURE__*/_react["default"].createElement("div", {
     style: styles.fieldError
   }, fieldErrors.phoneOrEmail), !isLogin && requirePhoneVerification && /*#__PURE__*/_react["default"].createElement("div", {
@@ -787,7 +1250,7 @@ var PowrLogin = function PowrLogin(_ref) {
     style: styles.successText
   }, "Phone number verified successfully!"), /*#__PURE__*/_react["default"].createElement("div", {
     id: "recaptcha-container"
-  })), /*#__PURE__*/_react["default"].createElement("div", {
+  })), (!isLogin || loginGate === 'password') && smsResetStep !== 'otp' && smsResetStep !== 'password' && /*#__PURE__*/_react["default"].createElement("div", {
     style: styles.formGroup
   }, /*#__PURE__*/_react["default"].createElement("label", {
     htmlFor: "password",
@@ -867,27 +1330,78 @@ var PowrLogin = function PowrLogin(_ref) {
     style: styles.checkboxText
   }, "I agree to the Terms of Service and Privacy Policy")), fieldErrors.terms && /*#__PURE__*/_react["default"].createElement("div", {
     style: styles.fieldError
-  }, fieldErrors.terms)), isLogin && /*#__PURE__*/_react["default"].createElement("div", {
-    style: styles.rememberSection
-  }, /*#__PURE__*/_react["default"].createElement("label", {
-    style: styles.checkboxLabel
-  }, /*#__PURE__*/_react["default"].createElement("input", {
-    type: "checkbox",
-    style: styles.checkbox
-  }), /*#__PURE__*/_react["default"].createElement("span", {
-    style: styles.checkboxText
-  }, "Remember me")), passwordResetHelpUrl ? /*#__PURE__*/_react["default"].createElement("a", {
+  }, fieldErrors.terms)), isLogin && loginGate === 'help' && !smsResetStep && /*#__PURE__*/_react["default"].createElement("div", {
+    style: styles.otpSection
+  }, /*#__PURE__*/_react["default"].createElement("p", {
+    style: styles.otpText
+  }, "No password on this number yet. WhatsApp us to create an account or reset."), passwordResetHelpUrl ? /*#__PURE__*/_react["default"].createElement("a", {
     href: passwordResetHelpUrl,
     target: "_blank",
     rel: "noopener noreferrer",
-    style: styles.forgotPasswordLink
-  }, passwordResetHelpLabel) : showForgotPassword ? /*#__PURE__*/_react["default"].createElement("button", {
+    style: _objectSpread(_objectSpread({}, styles.otpButton), {}, {
+      display: 'block',
+      textAlign: 'center',
+      textDecoration: 'none'
+    })
+  }, passwordResetHelpLabel) : /*#__PURE__*/_react["default"].createElement("p", {
+    style: styles.otpText
+  }, "WhatsApp the app\u2019s support number."), /*#__PURE__*/_react["default"].createElement("button", {
     type: "button",
     onClick: function onClick() {
-      return setShowOtpOption(!showOtpOption);
+      setLoginGate('password');
+      setError('');
+      setSuccess('');
     },
     style: styles.forgotPasswordLink
-  }, "Forgot password?") : null), isLogin && !passwordResetHelpUrl && showForgotPassword && showOtpOption && /*#__PURE__*/_react["default"].createElement("div", {
+  }, "I already have a password")), isLogin && resetChannel === 'otp' && smsResetStep === 'otp' && /*#__PURE__*/_react["default"].createElement("div", {
+    style: styles.otpSection
+  }, /*#__PURE__*/_react["default"].createElement("p", {
+    style: styles.otpText
+  }, otpLoading && success === 'Sending a code…' ? 'Sending a code to your phone…' : 'Enter the 5-digit code we sent to your phone.'), /*#__PURE__*/_react["default"].createElement("input", {
+    type: "text",
+    inputMode: "numeric",
+    autoComplete: "one-time-code",
+    value: smsOtp.replace(/\D/g, '').slice(0, 5),
+    onChange: function onChange(e) {
+      return setSmsOtp(e.target.value);
+    },
+    placeholder: "5-digit code",
+    style: styles.input
+  }), /*#__PURE__*/_react["default"].createElement("button", {
+    type: "button",
+    onClick: handleSmsVerify,
+    disabled: otpLoading || smsOtp.replace(/\D/g, '').length !== 5,
+    style: _objectSpread(_objectSpread({}, styles.otpButton), otpLoading ? styles.buttonDisabled : {})
+  }, otpLoading ? 'Checking…' : 'Verify code')), isLogin && resetChannel === 'otp' && smsResetStep === 'password' && /*#__PURE__*/_react["default"].createElement("div", {
+    style: styles.otpSection
+  }, /*#__PURE__*/_react["default"].createElement("p", {
+    style: styles.otpText
+  }, smsVerifyAuth !== null && smsVerifyAuth !== void 0 && smsVerifyAuth.user ? 'Set a new password for this number.' : 'Create a password. Next time you sign in without SMS.'), /*#__PURE__*/_react["default"].createElement("input", {
+    type: "password",
+    autoComplete: "new-password",
+    value: smsNewPassword,
+    onChange: function onChange(e) {
+      return setSmsNewPassword(e.target.value);
+    },
+    placeholder: "New password",
+    style: _objectSpread(_objectSpread({}, styles.input), {}, {
+      marginBottom: 8
+    })
+  }), /*#__PURE__*/_react["default"].createElement("input", {
+    type: "password",
+    autoComplete: "new-password",
+    value: smsConfirmPassword,
+    onChange: function onChange(e) {
+      return setSmsConfirmPassword(e.target.value);
+    },
+    placeholder: "Confirm password",
+    style: styles.input
+  }), /*#__PURE__*/_react["default"].createElement("button", {
+    type: "button",
+    onClick: handleSmsSavePassword,
+    disabled: otpLoading || smsNewPassword.length < 6,
+    style: _objectSpread(_objectSpread({}, styles.otpButton), otpLoading ? styles.buttonDisabled : {})
+  }, otpLoading ? 'Saving…' : 'Save password and sign in')), isLogin && resetChannel !== 'otp' && resetChannel !== 'whatsapp' && !passwordResetHelpUrl && showForgotPassword && showOtpOption && /*#__PURE__*/_react["default"].createElement("div", {
     style: styles.otpSection
   }, /*#__PURE__*/_react["default"].createElement("p", {
     style: styles.otpText
@@ -902,33 +1416,32 @@ var PowrLogin = function PowrLogin(_ref) {
     style: styles.errorMessage
   }, error), success && /*#__PURE__*/_react["default"].createElement("div", {
     style: styles.successMessage
-  }, success), /*#__PURE__*/_react["default"].createElement("button", {
+  }, success), !smsResetStep && loginGate !== 'help' && /*#__PURE__*/_react["default"].createElement("button", {
     type: "submit",
-    disabled: loading,
-    style: _objectSpread(_objectSpread({}, styles.button), loading ? styles.buttonDisabled : {})
-  }, loading ? /*#__PURE__*/_react["default"].createElement("div", {
+    disabled: loading || otpLoading,
+    style: _objectSpread(_objectSpread({}, styles.button), loading || otpLoading ? styles.buttonDisabled : {})
+  }, loading || otpLoading ? /*#__PURE__*/_react["default"].createElement("div", {
     style: _objectSpread(_objectSpread({}, styles.spinner), {}, {
       animation: 'spin 1s linear infinite'
     })
-  }) : isLogin ? 'Sign In' : 'Sign Up')), /*#__PURE__*/_react["default"].createElement("div", {
-    style: styles.navigationSection
-  }, /*#__PURE__*/_react["default"].createElement("p", {
-    style: styles.navigationText
-  }, isLogin ? /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, "Don't have an account?", ' ', shouldShowToggle ? /*#__PURE__*/_react["default"].createElement("button", {
-    type: "button",
-    onClick: toggleMode,
-    style: styles.navigationLink
-  }, "Create one here") : /*#__PURE__*/_react["default"].createElement("a", {
-    href: "/signup",
-    style: styles.navigationLink
-  }, "Create one here")) : /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, "Already have an account?", ' ', shouldShowToggle ? /*#__PURE__*/_react["default"].createElement("button", {
+  }) : isLogin ? loginGate === 'password' ? 'Sign In' : 'Continue' : 'Sign Up'), isLogin && loginGate === 'password' && !smsResetStep && /*#__PURE__*/_react["default"].createElement("div", {
+    style: {
+      textAlign: 'center',
+      marginTop: 12
+    }
+  }, resetChannel === 'otp' ? /*#__PURE__*/_react["default"].createElement("button", {
     type: "button",
-    onClick: toggleMode,
-    style: styles.navigationLink
-  }, "Sign in here") : /*#__PURE__*/_react["default"].createElement("a", {
-    href: "/login",
-    style: styles.navigationLink
-  }, "Sign in here")))))), showOtpModal && /*#__PURE__*/_react["default"].createElement("div", {
+    onClick: handleSmsForgotStart,
+    disabled: otpLoading,
+    style: styles.forgotPasswordLink
+  }, otpLoading ? 'Sending a code…' : 'Forgot password? Get a code') : passwordResetHelpUrl ? /*#__PURE__*/_react["default"].createElement("a", {
+    href: passwordResetHelpUrl,
+    target: "_blank",
+    rel: "noopener noreferrer",
+    style: styles.forgotPasswordLink
+  }, passwordResetHelpLabel) : /*#__PURE__*/_react["default"].createElement("span", {
+    style: styles.forgotPasswordLink
+  }, "Forgot password? WhatsApp us"))))), showOtpModal && /*#__PURE__*/_react["default"].createElement("div", {
     style: styles.modalOverlay
   }, /*#__PURE__*/_react["default"].createElement("div", {
     style: styles.modalContent
@@ -1390,7 +1903,8 @@ var styles = {
   powrAccountText: {
     color: '#ff6b35',
     fontWeight: '600',
-    cursor: 'help'
+    cursor: 'pointer',
+    textDecoration: 'none'
   },
   tooltip: {
     position: 'absolute',