iatoolkit 0.4.2__py3-none-any.whl → 0.66.2__py3-none-any.whl

iatoolkit/templates/index.html

@@ -0,0 +1,145 @@
+{% extends "base.html" %}
+
+{% block title %}IAToolkit - Framework de IA{% endblock %}
+
+{% block styles %}
+    {# Enlazamos la hoja de estilos del website y los iconos de Bootstrap #}
+    <link rel="stylesheet" href="{{ url_for('static', filename='styles/landing_page.css') }}">
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css">
+{% endblock %}
+
+
+{% block content %}
+<div class="container mt-4">
+
+    <!-- 1. Encabezado con una clase 100% propia y única -->
+    <header class="website-header container">
+        <span class="website-brand">IAToolkit</span>
+    </header>
+
+    <!-- 2. Sección Principal (Hero) -->
+    <section class="hero-section">
+        <div class="container">
+            <div class="row align-items-center g-5 py-5">
+                <div class="col-lg-7">
+                    <h1 class="hero-title gradient-text">Framework de IA Open Source</h1>
+                    <ul class="hero-bullets mt-4">
+                      <li><i class="bi bi-hdd-stack"></i>Integra tus bases de datos SQL y documentos para dar contexto real a tus asistentes.</li>
+                    <li><i class="bi bi-code-slash"></i>Crea un repositorio de prompts validados por tu equipo para estandarizar y acelerar las tareas de IA.</li>
+                    <li><i class="bi bi-shield-lock"></i> Monta la plataforma en tu propia infraestructura con control total sobre el LLM, garantizando la privacidad de los datos.</li>                    </ul>
+                </div>
+                <div class="col-lg-5">
+                    <div class="border rounded-3 p-4 p-md-5 shadow-sm bg-light">
+                        <h3 class="fw-bold text-center mb-3">Prueba la Plataforma</h3>
+                        <p class="text-muted mb-4">
+                            Descubre nuestra demo interactiva, configurada con datos de una empresa de muestra. Explora  las funcionalidades de la plataforma en un entorno práctico.<br>
+                        </p>
+                        <div class="d-grid">
+                            {# Este botón usa la clase .btn-primary, que es estilizada por .hero-section .btn-primary en el CSS #}
+                            <a href="{{ url_for('home', company_short_name='sample_company') }}"
+                               target="_blank"
+                                rel="noopener noreferrer"
+                               class="btn btn-primary btn-lg fw-bold">
+                                Acceder
+                            </a>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </section>
+
+    <!-- 3. Sección de Características -->
+    <section class="features-section">
+        <div class="container">
+            <div class="row g-4">
+                <div class="col-lg-4 d-flex align-items-stretch">
+                    <div class="opensource-box">
+                        <div>
+                            <div class="opensource-icon"><i class="bi bi-github"></i></div>
+                            <h3>100% Open Source</h3>
+                            <p>Construido en Python, IAToolkit te da control total. Audita el código, adáptalo y contribuye a una comunidad en crecimiento.</p>
+                        </div>
+                        <a href="https://github.com/flibedinsky/iatoolkit" target="_blank" class="btn btn-light mt-auto">
+                            <i class="bi bi-github me-2"></i>Ir a GitHub
+                            {% if iatoolkit_version %}
+                                <span class="badge bg-dark ms-2">{{ iatoolkit_version }}</span>
+                            {% endif %}
+                        </a>
+                    </div>
+                </div>
+                <div class="col-lg-4 d-flex align-items-stretch">
+                    <div class="feature-item">
+                        <div class="feature-icon"><i class="bi bi-hdd-stack"></i></div>
+                        <h3>Conecta tus Datos</h3>
+                        <p>Integra tus bases de datos SQL, documentos (PDFs, TXT) y otros sistemas para que el asistente tenga un contexto real de tu negocio.</p>
+                    </div>
+                </div>
+                <div class="col-lg-4 d-flex align-items-stretch">
+                    <div class="feature-item">
+                        <div class="feature-icon"><i class="bi bi-gem"></i></div>
+                        <h3>Multi-LLM</h3>
+                        <p>No te ates a un solo proveedor. IAToolkit está diseñado para funcionar con diferentes modelos, incluyendo Gemini y OpenAI (GPT).</p>
+                    </div>
+                </div>
+            </div>
+            <div class="row g-4 mt-4">
+                <div class="col-lg-4 d-flex align-items-stretch">
+                    <div class="feature-item">
+                        <div class="feature-icon"><i class="bi bi-magic"></i></div>
+                        <h3>Prompt Manager</h3>
+                        <p>Crea, gestiona y comparte una librería de prompts personalizados para tu empresa, optimizando las tareas repetitivas.</p>
+                    </div>
+                </div>
+                <div class="col-lg-4 d-flex align-items-stretch">
+                    <div class="feature-item">
+                        <div class="feature-icon"><i class="bi bi-palette"></i></div>
+                        <h3>100% Personalizable</h3>
+                        <p>Adapta cada aspecto, desde la apariencia visual hasta las capacidades y herramientas del asistente, para que se alinee con la identidad de tu marca.</p>
+                    </div>
+                </div>
+                <div class="col-lg-4 d-flex align-items-stretch">
+                    <div class="feature-item">
+                        <div class="feature-icon"><i class="bi bi-shield-lock"></i></div>
+                        <h3>Privacidad Primero</h3>
+                        <p>Despliega IAToolkit en tus propios servidores. Tus datos y consultas nunca son compartidos con terceros, garantizando la máxima confidencialidad.</p>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </section>
+
+    <!-- 3.5 Sobre el Autor -->
+    <section class="author-section py-5">
+        <div class="container">
+            <div class="author-card p-4">
+                <div class="row align-items-center g-4">
+                    <div class="col-md-2 text-center">
+                        <img src="{{ url_for('static', filename='images/fernando.jpeg') }}" alt="Foto de Fernando Libedinsky" class="img-fluid rounded-circle" style="max-width: 120px;">
+                    </div>
+                    <div class="col-md-10">
+                        <div class="d-flex flex-wrap align-items-center mb-2">
+                            <h5 class="mb-0 me-3">Sobre el autor</h5>
+                            <a href="https://www.linkedin.com/in/fernandolibedinsky" target="_blank" rel="noopener" class="author-linkedin ms-auto">
+                                <i class="bi bi-linkedin me-1"></i> LinkedIn
+                            </a>
+                        </div>
+                        <p class="author-bio mb-0">
+                            Soy <strong>Fernando Libedinsky</strong>, ingeniero de software y creador de <strong>IAToolkit</strong>.
+                            <br>Tras una extensa trayectoria en el desarrollo de software, sigo movido por la misma curiosidad que me llevó a programar por primera vez: aprender, explorar y construir cosas nuevas.
+                            <br>IAToolkit es la continuación de ese impulso, una plataforma creada para conectar rapidamente empresas con la IA.
+                        </p>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </section>
+
+    <!-- 4. Footer -->
+    <footer class="landing-footer">
+        <div class="container">
+            &copy; 2024 IAToolkit - Proyecto Open Source
+        </div>
+    </footer>
+</div>
+{% endblock %}

iatoolkit/templates/login_simulation.html

@@ -0,0 +1,34 @@
+{% extends "base.html" %}
+
+{% block title %}Prueba de Login para {{ company_short_name }}{% endblock %}
+
+{% block content %}
+<div class="container-fluid">
+  <div class="row flex-fill mt-5 justify-content-center">
+    <div class="col-12 col-lg-6">
+      <div class="border rounded p-4 p-md-5 shadow-sm bg-light">
+        <h3 class="text-muted fw-semibold text-start mb-3">
+          Login Externo para <span style="color:#0d6efd;">{{ company_short_name }}</span>
+        </h3>
+        <div class="text-center mb-4">
+          <p class="text-muted widget-intro-text">
+            Este formulario simula el inicio de una sesión externa. Al enviar, serás redirigido a la URL de login final.
+          </p>
+        </div>
+
+        <!-- Formulario HTML estándar que hace un POST a la misma URL -->
+        <form method="POST" action="">
+          <div class="mb-3">
+            <label for="external_user_id" class="form-label d-block">External user ID</label>
+            <input type="text" id="external_user_id" name="external_user_id" class="form-control" required>
+          </div>
+          <button type="submit" class="btn btn-primary">
+            Redirigir a External Login
+          </button>
+        </form>
+      </div>
+    </div>
+  </div>
+</div>
+{% endblock %}
+

iatoolkit/templates/onboarding_shell.html

@@ -0,0 +1,104 @@
+{% extends "base.html" %}
+
+{% block title %}Iniciando {{ branding.name | default('IAToolkit') }} IA...{% endblock %}
+
+{% block styles %}
+{% endblock %}
+
+{% block content %}
+
+<link rel="stylesheet" href="{{ url_for('static', filename='styles/llm_output.css', _external=True) }}?v=6">
+<link rel="stylesheet" href="{{ url_for('static', filename='styles/onboarding.css', _external=True) }}?v=6">
+
+<style>
+  {% if branding and branding.css_variables %}
+    {{ branding.css_variables|safe }}
+  {% endif %}
+
+  {# 2. Ahora definimos las reglas que usan esas variables #}
+  .onboarding-shell-root { position: relative; height: 100vh; }
+  .onboarding-shell-root #loader-wrapper { position: absolute; inset: 0; background: #f4f7f6; z-index: 1000; display:flex; align-items:center; justify-content:center; padding:20px; box-sizing:border-box; transition: opacity .5s; }
+  .onboarding-shell-root .ob-stack { width:100%; max-width:520px; display:flex; flex-direction:column; gap:16px; }
+  .onboarding-shell-root .ob-loading-band { display:flex; align-items:center; justify-content:center; gap:12px; padding:12px 14px; background:#fff; border-radius:12px; box-shadow:0 4px 20px rgba(0,0,0,.08); }
+  .onboarding-shell-root .spinner { width:28px; height:28px; border:4px solid rgba(0,0,0,.1); border-top-color: var(--brand-primary-color, #FF5100); border-radius:50%; animation: spin 1s linear infinite; }
+  @keyframes spin { to { transform: rotate(360deg); } }
+  .onboarding-shell-root #content-container { width:100%; height:100%; }
+  .onboarding-shell-root #content-container iframe { width:100%; height:100%; border:none; }
+
+  /* Forzar colores de marca (sube especificidad y evita overrides) */
+  .onboarding-shell-root .ob-brand-header { color: var(--brand-secondary-color, #06326B) !important; }
+  .onboarding-shell-root .ob-brand-header .brand-name { color: var(--brand-primary-color, #FF5100) !important; }
+  .onboarding-shell-root .ob-icon { color: var(--brand-primary-color, #FF5100) !important; }
+  .onboarding-shell-root .ob-btn { background-color: var(--brand-secondary-color, #06326B) !important; color: var(--brand-text-on-secondary, #FFFFFF) !important; border:none !important; }
+  .onboarding-shell-root .ob-dots > div.active { background-color: var(--brand-primary-color, #FF5100) !important; }
+</style>
+
+<div class="onboarding-shell-root ob-root">
+  <div id="loader-wrapper">
+    <div class="ob-stack">
+      <h1 id="ob-brand-header" class="ob-brand-header">
+        <span class="brand-name text-brand-primary">{{ branding.name | default('IAToolkit') }}</span>
+        <span class="brand-rest"> IA</span>
+      </h1>
+
+      <div id="card-container" class="ob-card">
+        <div id="card-icon" class="ob-icon"><i class="fas fa-lightbulb"></i></div>
+        <h3 id="card-title" class="ob-title">Título de la Tarjeta</h3>
+        <p id="card-text" class="ob-text">Descripción de la tarjeta de capacitación.</p>
+        <div class="ob-nav">
+          <button id="prev-card" class="ob-btn btn-branded-primary" aria-label="Anterior">
+            <i class="fas fa-chevron-left"></i>
+          </button>
+          <div id="progress-dots" class="ob-dots"></div>
+          <button id="next-card" class="ob-btn btn-branded-primary" aria-label="Siguiente">
+            <i class="fas fa-chevron-right"></i>
+          </button>
+        </div>
+      </div>
+
+      <div id="loading-status" class="ob-loading-band">
+        <div class="spinner"></div>
+        <p>Inicializando el contexto de {{ branding.name }} para la IA...</p>
+      </div>
+    </div>
+  </div>
+
+  <div id="content-container"></div>
+</div>
+{% endblock %}
+
+{% block scripts %}
+<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css">
+
+<script src="{{ url_for('static', filename='js/chat_onboarding_button.js', _external=True) }}"></script>
+<script>
+  (function() {
+    const cardsData = {{ onboarding_cards | tojson }};
+    const iframeSrc = "{{ iframe_src_url }}";
+
+    if (!window.initOnboarding) {
+      console.error('initOnboarding no está disponible. Verifica la carga de chat_onboarding.js');
+      return;
+    }
+
+    const onboarding = initOnboarding({
+      mode: 'shell',
+      cards: cardsData,
+      ui: {
+        icon: '#card-icon',
+        title: '#card-title',
+        text: '#card-text',
+        dots: '#progress-dots',
+        prev: '#prev-card',
+        next: '#next-card',
+        loader: '#loader-wrapper',
+        container: '#content-container'
+      },
+      autoRotateMs: 5000,
+      shell: { iframeSrc: iframeSrc }
+    });
+
+    onboarding.start();
+  })();
+</script>
+{% endblock %}

iatoolkit/templates/signup.html

@@ -0,0 +1,76 @@
+{% extends "base.html" %}
+
+{% block title %}{{ t('ui.signup.title') }} - {{ branding.name }}{% endblock %}
+
+{% block styles %}
+    {# ¡Importante! Añadimos los estilos para el branding #}
+    <style>
+        {{ branding.css_variables | safe }}
+    </style>
+    <link rel="stylesheet" href="{{ url_for('static', filename='styles/chat_public.css') }}">
+{% endblock %}
+
+{% block content %}
+<div class="container mt-4">
+
+{% include '_company_header.html' %}
+
+    <section class="hero-section">
+        <div class="container">
+            <div class="row justify-content-center">
+                <!-- Se ha reducido el ancho de la columna a lg-6 y md-8 -->
+                <div class="col-lg-6 col-md-8">
+                    <div class="branded-form-container">
+                        <h4 class="branded-form-title">{{ t('ui.signup.title') }}</h4>
+                        <form action="{{ url_for('signup', company_short_name=company_short_name) }}" method="post">
+                            <div class="mb-3">
+                                <label for="email" class="form-label text-secondary">{{ t('ui.signup.email_label') }}</label>
+                                <input type="email" autocomplete="off" id="email" name="email"
+                                       class="form-control" required
+                                       value="{{ form_data.email if form_data else '' }}">
+                            </div>
+
+                            <div class="row">
+                                <div class="col-md-6 mb-3">
+                                    <label for="first_name" class="form-label text-secondary">{{ t('ui.signup.first_name_label') }}</label>
+                                    <input type="text" id="first_name" name="first_name"
+                                           class="form-control" required
+                                           value="{{ form_data.first_name if form_data else '' }}">
+                                </div>
+                                <div class="col-md-6 mb-3">
+                                    <label for="last_name" class="form-label text-secondary">{{ t('ui.signup.last_name_label') }}</label>
+                                    <input type="text" id="last_name" name="last_name"
+                                           class="form-control" required
+                                           value="{{ form_data.last_name if form_data else '' }}">
+                                </div>
+                            </div>
+
+                            <div class="mb-3">
+                                <label for="password" class="form-label text-secondary">{{ t('ui.signup.password_label') }}</label>
+                                <input type="password" id="password" name="password" class="form-control" required>
+                                <div class="d-flex align-items-start text-muted mt-2" style="font-size: 0.8rem;">
+                                    <i class="bi bi-info-circle me-2" style="font-size: 0.9rem; line-height: 1.4;"></i>
+                                    <span>{{ t('ui.change_password.password_instructions') }}</span>
+                                </div>
+                            </div>
+
+                            <div class="mb-3">
+                                <label for="confirm_password" class="form-label text-secondary">{{ t('ui.signup.confirm_password_label') }}</label>
+                                <input type="password" id="confirm_password" name="confirm_password" class="form-control" required>
+                            </div>
+
+                            <!-- Botón actualizado con la clase de branding -->
+                            <button type="submit" class="btn btn-branded-primary w-100 fw-bold py-2 mt-3">{{ t('ui.signup.signup_button') }}</button>
+                        </form>
+                        <!-- Nota de privacidad -->
+                        <p class="text-muted small mb-0 text-center mt-4">
+                            {{ t('ui.signup.disclaimer') }}
+                        </p>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </section>
+</div>
+
+{% endblock %}

iatoolkit/views/__init__.py

@@ -0,0 +1,5 @@
+# Copyright (c) 2024 Fernando Libedinsky
+# Product: IAToolkit
+#
+# IAToolkit is open source software.
+

iatoolkit/views/base_login_view.py

@@ -0,0 +1,92 @@
+# iatoolkit/views/base_login_view.py
+# Copyright (c) 2024 Fernando Libedinsky
+# Product: IAToolkit
+#
+# IAToolkit is open source software.
+
+from flask.views import MethodView
+from flask import render_template, url_for
+from injector import inject
+from iatoolkit.services.profile_service import ProfileService
+from iatoolkit.services.auth_service import AuthService
+from iatoolkit.services.query_service import QueryService
+from iatoolkit.services.branding_service import BrandingService
+from iatoolkit.services.onboarding_service import OnboardingService
+from iatoolkit.services.prompt_manager_service import PromptService
+from iatoolkit.services.i18n_service import I18nService
+from iatoolkit.common.util import Utility
+from iatoolkit.services.jwt_service import JWTService
+from iatoolkit.repositories.models import Company
+
+
+class BaseLoginView(MethodView):
+    """
+    Base class for views that initiate a session and decide the context
+    loading path (fast or slow).
+    """
+    @inject
+    def __init__(self,
+                 profile_service: ProfileService,
+                 auth_service: AuthService,
+                 jwt_service: JWTService,
+                 branding_service: BrandingService,
+                 prompt_service: PromptService,
+                 onboarding_service: OnboardingService,
+                 query_service: QueryService,
+                 i18n_service: I18nService,
+                 utility: Utility
+                 ):
+        self.profile_service = profile_service
+        self.auth_service = auth_service
+        self.jwt_service = jwt_service
+        self.branding_service = branding_service
+        self.prompt_service = prompt_service
+        self.onboarding_service = onboarding_service
+        self.query_service = query_service
+        self.i18n_service = i18n_service
+        self.utility = utility
+
+
+    def _handle_login_path(self,
+                           company: Company,
+                           user_identifier: str,
+                           target_url: str,
+                           redeem_token: str = None):
+        """
+        Centralized logic to decide between the fast path and the slow path.
+        """
+        # --- Get the company branding and onboarding_cards
+        branding_data = self.branding_service.get_company_branding(company)
+        onboarding_cards = self.onboarding_service.get_onboarding_cards(company)
+        company_short_name = company.short_name
+
+        # this service decides is the context needs to be rebuilt or not
+        prep_result = self.query_service.prepare_context(
+            company_short_name=company.short_name, user_identifier=user_identifier
+        )
+
+        if prep_result.get('rebuild_needed'):
+            # --- SLOW PATH: Render the loading shell ---
+            return render_template(
+                "onboarding_shell.html",
+                iframe_src_url=target_url,
+                branding=branding_data,
+                onboarding_cards=onboarding_cards
+            )
+        else:
+            # --- FAST PATH: Render the chat page directly ---
+            prompts = self.prompt_service.get_user_prompts(company_short_name)
+
+            # Get the entire 'js_messages' block in the correct language.
+            js_translations = self.i18n_service.get_translation_block('js_messages')
+
+            return render_template(
+                "chat.html",
+                company_short_name=company_short_name,
+                user_identifier=user_identifier,
+                prompts=prompts,
+                branding=branding_data,
+                onboarding_cards=onboarding_cards,
+                js_translations=js_translations,
+                redeem_token=redeem_token
+            )

iatoolkit/views/change_password_view.py

@@ -0,0 +1,117 @@
+# Copyright (c) 2024 Fernando Libedinsky
+# Product: IAToolkit
+#
+# IAToolkit is open source software.
+
+from flask.views import MethodView
+from flask import render_template, request, url_for, session, redirect, flash
+from iatoolkit.services.profile_service import ProfileService
+from iatoolkit.services.branding_service import BrandingService
+from iatoolkit.services.i18n_service import I18nService
+from itsdangerous import URLSafeTimedSerializer, SignatureExpired
+from flask_bcrypt import Bcrypt
+from injector import inject
+import os
+
+
+class ChangePasswordView(MethodView):
+    @inject
+    def __init__(self,
+                 profile_service: ProfileService,
+                 branding_service: BrandingService,
+                 i18n_service: I18nService):
+        self.profile_service = profile_service
+        self.branding_service = branding_service
+        self.i18n_service = i18n_service
+
+        self.serializer = URLSafeTimedSerializer(os.getenv("PASS_RESET_KEY"))
+        self.bcrypt = Bcrypt()
+
+    def get(self, company_short_name: str, token: str):
+        try:
+            company = self.profile_service.get_company_by_short_name(company_short_name)
+            if not company:
+                return render_template('error.html',
+                                       message=self.i18n_service.t('errors.templates.company_not_found')), 404
+
+            branding_data = self.branding_service.get_company_branding(company)
+
+            try:
+                # Decodificar el token
+                email = self.serializer.loads(token, salt='password-reset', max_age=3600)
+            except SignatureExpired as e:
+                flash(self.i18n_service.t('errors.change_password.token_expired'), 'error')
+                return render_template('forgot_password.html',
+                                    branding=branding_data)
+
+            return render_template('change_password.html',
+                                   company_short_name=company_short_name,
+                                   company=company,
+                                   branding=branding_data,
+                                   token=token,
+                                   email=email)
+        except Exception as e:
+            message = self.i18n_service.t('errors.templates.processing_error', error=str(e))
+            return render_template(
+                "error.html",
+                company_short_name=company_short_name,
+                branding=branding_data,
+                message=message
+            ), 500
+
+    def post(self, company_short_name: str, token: str):
+        # get company info
+        company = self.profile_service.get_company_by_short_name(company_short_name)
+        if not company:
+            return render_template('error.html',
+                                   message=self.i18n_service.t('errors.templates.company_not_found')), 404
+
+        branding_data = self.branding_service.get_company_branding(company)
+        try:
+            # Decodificar el token
+            email = self.serializer.loads(token, salt='password-reset', max_age=3600)
+        except SignatureExpired:
+            flash(self.i18n_service.t('errors.change_password.token_expired'), 'error')
+
+            return render_template('forgot_password.html',
+                                   company_short_name=company_short_name,
+                                   company=company,
+                                   branding=branding_data)
+
+        try:
+            # Obtener datos del formulario
+            temp_code = request.form.get('temp_code')
+            new_password = request.form.get('new_password')
+            confirm_password = request.form.get('confirm_password')
+
+            response = self.profile_service.change_password(
+                email=email,
+                temp_code=temp_code,
+                new_password=new_password,
+                confirm_password=confirm_password
+            )
+
+            if "error" in response:
+                flash(response["error"], 'error')
+
+                return render_template(
+                    'change_password.html',
+                    token=token,
+                    company_short_name=company_short_name,
+                    company=company,
+                    branding=branding_data,
+                    form_data={"temp_code": temp_code,
+                               "new_password": new_password,
+                               "confirm_password": confirm_password}), 400
+
+            flash(self.i18n_service.t('flash_messages.password_changed_success'), 'success')
+            return redirect(url_for('home', company_short_name=company_short_name))
+
+        except Exception as e:
+            message = self.i18n_service.t('errors.templates.processing_error', error=str(e))
+            return render_template(
+                "error.html",
+                company_short_name=company_short_name,
+                branding=branding_data,
+                message=message
+            ), 500

iatoolkit/views/external_login_view.py

@@ -0,0 +1,73 @@
+# Copyright (c) 2024 Fernando Libedinsky
+# Product: IAToolkit
+#
+# IAToolkit is open source software.
+
+import os
+import logging
+from flask import request, jsonify, url_for
+from iatoolkit.views.base_login_view import BaseLoginView
+
+
+class ExternalLoginView(BaseLoginView):
+    """
+    Handles login for external users via API.
+    Authenticates and then delegates the path decision (fast/slow) to the base class.
+    """
+    def post(self, company_short_name: str):
+        # Authenticate the API call.
+        auth_result = self.auth_service.verify()
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code")
+
+        company = self.profile_service.get_company_by_short_name(company_short_name)
+        if not company:
+            return jsonify({"error": "Empresa no encontrada"}), 404
+
+        user_identifier = auth_result.get('user_identifier')
+
+        # 2. Create the external user session.
+        self.profile_service.create_external_user_profile_context(company, user_identifier)
+
+        # 3. create a redeem_token for create session at the end of the process
+        redeem_token = self.jwt_service.generate_chat_jwt(
+            company_short_name=company_short_name,
+            user_identifier=user_identifier,
+            expires_delta_seconds=300
+        )
+
+        if not redeem_token:
+            return jsonify({"error": "Error al generar el redeem_token para login externo."}), 403
+
+        # 4. define URL to call when slow path is finished
+        target_url = url_for('finalize_with_token',
+                             company_short_name=company_short_name,
+                             token=redeem_token,
+                             _external=True)
+
+        # 5. Delegate the path decision to the centralized logic.
+        try:
+            return self._handle_login_path(company, user_identifier, target_url, redeem_token)
+        except Exception as e:
+            logging.exception(f"Error processing external login path for {company_short_name}/{user_identifier}: {e}")
+            return jsonify({"error": f"Internal server error while starting chat. {str(e)}"}), 500
+
+
+class RedeemTokenApiView(BaseLoginView):
+    # this endpoint is only used ONLY by chat_main.js to redeem a chat token
+    def post(self, company_short_name: str):
+        data = request.get_json()
+        if not data or 'token' not in data:
+            return jsonify({"error": "Falta token de validación"}), 400
+
+        # get the token and validate with auth service
+        token = data.get('token')
+        redeem_result = self.auth_service.redeem_token_for_session(
+            company_short_name=company_short_name,
+            token=token
+        )
+
+        if not redeem_result['success']:
+            return {"error": redeem_result['error']}, 401
+
+        return {"status": "ok"}, 200