masks-server 0.13.0 → 0.14.0

data/public/masks-assets/assets/{manage-DpVxe5sv.js → manage-VgOqKj7N.js}

@@ -1,4 +1,4 @@
-import{A as e,B as t,C as n,D as r,E as i,F as a,G as o,H as s,I as c,J as l,K as u,L as d,M as f,N as p,O as m,P as h,Q as g,R as _,S as v,T as y,U as b,V as x,X as S,Y as C,Z as w,_ as T,a as E,at as D,b as O,c as k,ct as A,d as j,dt as M,et as N,f as P,ft as F,g as I,h as ee,i as L,it as te,j as R,k as z,l as B,lt as V,m as ne,o as re,ot as H,p as U,pt as ie,q as W,rt as ae,s as G,st as oe,t as K,tt as q,u as se,ut as J,v as ce,w as Y,y as le,z as ue}from"./initial-Cn-UuAsy.js";var de=`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~`;function fe(e=64){let t=new Uint8Array(e);crypto.getRandomValues(t);let n=``;for(let e of t)n+=de[e%66];return n}function pe(e){let t=``;for(let n of new Uint8Array(e))t+=String.fromCharCode(n);return btoa(t).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=+$/,``)}async function me(e){return pe(await crypto.subtle.digest(`SHA-256`,new TextEncoder().encode(e)))}var he=`S256`;async function ge(){let e=await crypto.subtle.generateKey({name:`ECDSA`,namedCurve:`P-256`},!1,[`sign`,`verify`]),t=await crypto.subtle.exportKey(`jwk`,e.publicKey);return{privateKey:e.privateKey,jwk:{kty:t.kty,crv:t.crv,x:t.x,y:t.y}}}var _e=e=>pe(new TextEncoder().encode(JSON.stringify(e)).buffer);async function ve(e,t,n,r){let i=new URL(n),a={typ:`dpop+jwt`,alg:`ES256`,jwk:e.jwk},o={jti:fe(32),htm:t.toUpperCase(),htu:`${i.origin}${i.pathname}`,iat:Math.floor(Date.now()/1e3)};r&&(o.ath=pe(await crypto.subtle.digest(`SHA-256`,new TextEncoder().encode(r))));let s=`${_e(a)}.${_e(o)}`;return`${s}.${pe(await crypto.subtle.sign({name:`ECDSA`,hash:`SHA-256`},e.privateKey,new TextEncoder().encode(s)))}`}var ye=`masks`,be=`keys`,xe=`dpop`,Se;function Ce(){return Se??=new Promise((e,t)=>{let n=indexedDB.open(ye,1);n.onupgradeneeded=()=>n.result.createObjectStore(be),n.onsuccess=()=>e(n.result),n.onerror=()=>t(n.error)}).catch(e=>{throw Se=void 0,e}),Se}function we(e){return new Promise((t,n)=>{e.onsuccess=()=>t(e.result),e.onerror=()=>n(e.error)})}async function Te(){try{let e=await Ce(),t=await we(e.transaction(be).objectStore(be).get(xe));if(t)return t;let n=await ge();return await we(e.transaction(be,`readwrite`).objectStore(be).put(n,xe)),n}catch{return ge()}}async function Ee(){try{await we((await Ce()).transaction(be,`readwrite`).objectStore(be).delete(xe))}catch{}}var De=class extends Error{code;description;status;constructor(e,t,n){super(t?`${e}: ${t}`:e),this.name=`MasksError`,this.code=e,this.description=t,this.status=n}},Oe=class extends De{},ke={login_required:Oe,interaction_required:Oe,consent_required:class extends De{},access_denied:class extends De{},invalid_grant:class extends De{},invalid_token:class extends De{},invalid_issuer:class extends De{}};function Ae(e,t,n){let r=Object.hasOwn(ke,e)?ke[e]:De,i=new r(e,t,n);return i.name=r.name,i}var je={RS256:`SHA-256`,RS384:`SHA-384`,RS512:`SHA-512`},Me=`RSASSA-PKCS1-v1_5`;function Ne(e){let t=e.replace(/-/g,`+`).replace(/_/g,`/`),n=atob(t.padEnd(t.length+(4-t.length%4)%4,`=`)),r=new Uint8Array(new ArrayBuffer(n.length));for(let e=0;e<n.length;e++)r[e]=n.charCodeAt(e);return r}function Pe(e){try{return JSON.parse(new TextDecoder().decode(Ne(e)))}catch{throw Ae(`invalid_token`,`the id token is not a JWT`)}}function Fe(e){return Array.isArray(e)?e.map(String):e==null?[]:[String(e)]}async function Ie(e,{issuer:t,audience:n,nonce:r,keyFor:i,leeway:a=60}){let[o,s,c,...l]=e.split(`.`);if(!o||!s||!c||l.length>0)throw Ae(`invalid_token`,`the id token is not a JWT`);let u=Pe(o);if(u.typ!==void 0&&String(u.typ).toUpperCase()!==`JWT`)throw Ae(`invalid_token`,`the id token is typed ${u.typ}, which is not an id token`);let d=je[String(u.alg)];if(!d)throw Ae(`invalid_token`,`the id token is signed with ${u.alg}, which this client cannot verify`);let f=await crypto.subtle.importKey(`jwk`,{...await i(String(u.kid)),alg:String(u.alg)},{name:Me,hash:d},!1,[`verify`]);if(!await crypto.subtle.verify(Me,f,Ne(c),new TextEncoder().encode(`${o}.${s}`)))throw Ae(`invalid_token`,`the id token signature does not verify`);let p=Pe(s),m=Math.floor(Date.now()/1e3);if(String(p.iss??``).replace(/\/$/,``)!==t)throw Ae(`invalid_token`,`the id token was issued by ${p.iss}`);if(!Fe(p.aud).includes(n))throw Ae(`invalid_token`,`the id token was issued for another client`);if(typeof p.exp==`number`&&m-a>=p.exp)throw Ae(`invalid_token`,`the id token has expired`);if(typeof p.iat==`number`&&p.iat-a>m)throw Ae(`invalid_token`,`the id token was issued in the future`);if(p.nonce!==r)throw Ae(`invalid_nonce`,`the id token was issued for another request`);return p}function Le(e){return e?Array.isArray(e)?e:e.split(/\s+/).filter(Boolean):[]}var Re=`masks:pending`,ze=`masks:session`;function Be(e){let t=e.issuer.replace(/\/$/,``),n=e.fetch??globalThis.fetch.bind(globalThis),r=e.storage??globalThis.sessionStorage,i=Le(e.scope??[`openid`,`profile`,`email`]),a=Le(e.resource),o=globalThis.location?.origin,s=e.clientId??(o&&`${o}/oauth/client.json`),c=e.redirectUri??(o&&`${o}/`);if(!globalThis.crypto?.subtle)throw Ae(`insecure_context`,`serve the page over https, or from localhost, since the browser hides the cryptography a sign-in needs on any other http page`);if(!s||!c)throw Ae(`invalid_request`,`pass clientId and redirectUri when the client runs outside a browser`);let l=Ve(r),u=null,d=l?.tokens??null,f=l?.identity??null,p=null,m=null,h=null,g=async(t,n,r)=>e.dpop?(h??=Te(),{DPoP:await ve(await h,t,n,r)}):{},_=0,v=()=>{d=null,f=null,y()},y=()=>{try{d?r.setItem(ze,JSON.stringify({tokens:d,identity:f})):r.removeItem(ze)}catch{}},b=async()=>{if(u)return u;let e=await n(`${t}/.well-known/openid-configuration`,{headers:{Accept:`application/json`}});if(!e.ok)throw Ae(`invalid_issuer`,`${t} answered ${e.status}`,e.status);let r=await e.json();if(r.issuer?.replace(/\/$/,``)!==t)throw Ae(`invalid_issuer`,`${t} publishes a document naming ${r.issuer}`);return u=r,r},x=async e=>{let{jwks_uri:r}=await b();if(!r)throw Ae(`invalid_issuer`,`${t} publishes no jwks_uri, so an id token cannot be verified`);let i=await n(r,{headers:{Accept:`application/json`},...e?{cache:`no-cache`}:{}});if(!i.ok)throw Ae(`invalid_issuer`,`${r} answered ${i.status}`,i.status);let a=await i.json();return Object.fromEntries((a.keys??[]).filter(e=>e.kid&&(!e.use||e.use===`sig`)).map(e=>[e.kid,e]))},S=async(e,n=!1)=>{(n||!p)&&(p=await x(n));let r=p[e];if(r)return r;if(!n)return S(e,!0);throw Ae(`invalid_token`,`${t} publishes no key ${e}`)},C=async e=>{let t=_,{token_endpoint:r}=await b(),i=await n(r,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,Accept:`application/json`,...await g(`POST`,r)},body:new URLSearchParams(e).toString()}),a=await i.json().catch(()=>({}));if(!i.ok)throw Ae(a.error??`http_${i.status}`,a.error_description,i.status);if(t!==_)throw Ae(`invalid_grant`,`the client signed out while this request was in flight`);return d={access_token:a.access_token,id_token:a.id_token,refresh_token:a.refresh_token,token_type:a.token_type??`Bearer`,scope:a.scope??``,expires_in:Number(a.expires_in??0),obtained_at:Math.floor(Date.now()/1e3)},d},w=async({returnTo:t,prompt:n,organization:o=e.organization}={})=>{let{authorization_endpoint:l}=await b(),u=fe(),d={state:fe(24),nonce:i.includes(`openid`)?fe(24):``,verifier:u,returnTo:t??`${location.pathname}${location.search}`,...o?{organization:o}:{}};r.setItem(Re,JSON.stringify(d));let f=new URLSearchParams([[`response_type`,`code`],[`client_id`,s],[`redirect_uri`,c],[`scope`,i.join(` `)],[`state`,d.state],[`code_challenge`,await me(u)],[`code_challenge_method`,he]]);d.nonce&&f.append(`nonce`,d.nonce);for(let e of a)f.append(`resource`,e);return n&&f.append(`prompt`,n),o&&f.append(`organization`,o),`${l}?${f.toString()}`},T=async(e,{style:n=`identicon`,size:r}={})=>{let{avatar_endpoint:i,avatar_styles_supported:a}=await b();if(!i)throw Ae(`invalid_issuer`,`${t} publishes no avatar_endpoint`);if(a&&!a.includes(n))throw Ae(`invalid_style`,`${t} does not serve ${n} avatars`);let o=`${i}/${encodeURIComponent(e)}/${n}`;return r?`${o}?size=${r}`:o},E=(e=30)=>!d||Date.now()/1e3+e>=d.obtained_at+d.expires_in,D=async()=>{if(!d?.refresh_token)throw Ae(`invalid_grant`,`no refresh token is held`);let e=d.refresh_token,t=[[`grant_type`,`refresh_token`],[`refresh_token`,e],[`client_id`,s]];for(let e of a)t.push([`resource`,e]);let n;try{n=await C(t)}catch(e){throw e.code===`invalid_grant`&&v(),e}return n.refresh_token??=e,y(),n},O=async()=>(m??=D().finally(()=>{m=null}),await m),k=async e=>{let{revocation_endpoint:t}=await b();t&&await n(t,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams([[`token`,e],[`token_type_hint`,`refresh_token`],[`client_id`,s]]).toString()})},A={async ready(){let e=new URL(window.location.href);if(!(e.searchParams.has(`code`)||e.searchParams.has(`error`))||r.getItem(Re)===null)return f;let{returnTo:t}=await A.callback(e.href);return window.history.replaceState(window.history.state,``,t),f},discover:b,authorizeUrl:w,avatarUrl:T,async authorize(e={}){window.location.assign(await w(e))},pending(){return r.getItem(Re)!==null},async callback(e=window.location.href){let n=new URL(e).searchParams,i=r.getItem(Re);if(r.removeItem(Re),n.get(`error`))throw Ae(n.get(`error`),n.get(`error_description`)??void 0);if(!i)throw Ae(`invalid_state`,`this browser has no authorization in flight`);let o=JSON.parse(i);if(n.get(`state`)!==o.state)throw Ae(`invalid_state`,`the callback did not match this browser`);let l=n.get(`code`);if(!l)throw Ae(`invalid_request`,`the callback carried no code`);let u=[[`grant_type`,`authorization_code`],[`code`,l],[`client_id`,s],[`redirect_uri`,c],[`code_verifier`,o.verifier]];for(let e of a)u.push([`resource`,e]);let d=await C(u);if(o.nonce){if(!d.id_token)throw v(),Ae(`invalid_token`,`an id token was asked for and the issuer returned none`);try{f=await Ie(d.id_token,{issuer:t,audience:s,nonce:o.nonce,keyFor:S})}catch(e){throw v(),e}let e=f?.org?.key;if(o.organization&&e&&e!==o.organization)throw v(),Ae(`invalid_token`,`the id token does not name the organization ${o.organization}`)}return y(),{tokens:d,identity:f,returnTo:o.returnTo}},identity(){return f},organization(){return f?.org??null},organizations(){return f?.orgs??[]},async switchOrganization(e,t={}){window.location.assign(await w({...t,organization:e}))},avatars(){return f?.[`masks:avatars`]??null},async photo(e=f?.sub){if(!e||!d)return null;let t=await n(await T(e,{style:`photo`}),{headers:{Authorization:`${d.token_type} ${d.access_token}`,Accept:`image/*`}});return t.ok?await t.blob():null},refresh:O,async fetch(e,t={}){d?.refresh_token&&E()&&await O();let r=d?.access_token,i=new Headers(t.headers);if(r&&d){i.set(`Authorization`,`${d.token_type} ${r}`);for(let[n,a]of Object.entries(await g(t.method??`GET`,e,r)))i.set(n,a)}return await n(e,{...t,headers:i})},async proof(e,t){return(await g(e,t,d?.access_token)).DPoP??null},async freshAccessToken(e=30){return d?.refresh_token&&E(e)&&await O(),d?.access_token??null},accessToken(){return d?.access_token??null},tokens(){return d},authorization(){return d?`${d.token_type} ${d.access_token}`:null},expired:E,async logout({everywhere:n=!1,postLogoutRedirectUri:i}={}){let a=d;if(_+=1,m=null,h=null,r.removeItem(Re),v(),await Promise.all([e.dpop?Ee():void 0,a?.refresh_token?k(a.refresh_token).catch(()=>void 0):void 0]),!n)return;let{end_session_endpoint:o}=await b();if(!o)throw Ae(`invalid_issuer`,`${t} publishes no end_session_endpoint`);let c=new URLSearchParams([[`client_id`,s]]);a?.id_token&&c.append(`id_token_hint`,a.id_token),i&&c.append(`post_logout_redirect_uri`,i),window.location.assign(`${o}?${c.toString()}`)}};return A}function Ve(e){try{let t=e.getItem(ze),n=t?JSON.parse(t):null;return n?.tokens?.access_token?n:null}catch{return null}}var He=/%\{(\w+)\}/g,Ue={},We=new Intl.PluralRules(`en`);function Ge(e,t=`en`){Ue=e??{},We=new Intl.PluralRules(t)}function Ke(e){return e.split(`.`).reduce((e,t)=>e?.[t],Ue)}function qe(e,t){return e.replace(He,(e,n)=>t&&Object.hasOwn(t,n)?String(t[n]):e)}function X(e,t){let n=Ke(e);if(typeof n==`string`)return qe(n,t);if(n&&typeof n==`object`&&t&&`count`in t){let e=n[We.select(Number(t.count))]??n.other;if(typeof e==`string`)return qe(e,t)}return e}var Je=`masks:manage:client`,Ye=[`openid`,`profile`,`email`,`masks:manage`,`masks:manage:security`,`masks:manage:support`,`masks:manage:read`];function Xe(e){try{return JSON.parse(localStorage.getItem(Je)||`null`)?.[e]||null}catch{return null}}function Ze(e,t){let n=JSON.parse(localStorage.getItem(Je)||`{}`);n[e]=t,localStorage.setItem(Je,JSON.stringify(n))}function Qe(e){return Xe(e.issuer)}function $e(e){let t=JSON.parse(localStorage.getItem(Je)||`{}`);delete t[e.issuer],localStorage.setItem(Je,JSON.stringify(t))}function et(e){return`${location.origin}${e.root}/callback`}function tt(e){let t=new URLSearchParams([[`client_name`,`Manage ${e.tenant.name}`],[`resource`,e.resource],[`scope`,Ye.join(` `)],[`return_to`,`${location.origin}${e.root}`],[`post_logout_redirect_uri`,`${location.origin}${e.root}`],[`token_endpoint_auth_method`,`none`],[`redirect_uris`,et(e)]]);return`${e.issuer}/handshake?${t.toString()}`}async function nt(e,t){let n=await fetch(`${e.issuer}/register`,{method:`POST`,headers:{"Content-Type":`application/json`,Accept:`application/json`,Authorization:`Bearer ${t}`},body:JSON.stringify({client_name:`Manage ${e.tenant.name}`,redirect_uris:[et(e)],token_endpoint_auth_method:`none`})}),r=await n.json().catch(()=>({}));if(!n.ok)throw Error(r.error_description||r.error||X(`pairing.registration_failed`));if(r.client_secret)throw Error(X(`pairing.secret_issued`));return Ze(e.issuer,r.client_id),r.client_id}function rt(e){let t=new Map,n=(e,r)=>e instanceof Blob?(t.set(r,e),null):Array.isArray(e)?e.map((e,t)=>n(e,`${r}.${t}`)):e?.constructor===Object?Object.fromEntries(Object.entries(e).map(([e,t])=>[e,n(t,`${r}.${e}`)])):e;return{held:n(e,`variables`),files:t}}function it(e){let t=C({ready:!1,identity:null,failure:null}),n=null,r=()=>{let t=Qe(e);return t?(n||=Be({issuer:e.issuer,clientId:t,redirectUri:et(e),scope:Ye,resource:e.resource}),n):null},i=async()=>{let e=r();if(!e)throw Error(X(`api.unregistered`));return e.expired(30)&&await e.refresh(),e.authorization()};return{state:t,paired(){return!!Qe(e)},signedIn(){return!!r()?.accessToken()},async authorize(e){await r().authorize({returnTo:e})},async callback(){let e=await r().callback();return t.identity=e.identity,t.ready=!0,e},async signOut(){let n=r();if(t.identity=null,!n)return null;let i=n.tokens()?.id_token,a=await n.discover().catch(()=>null);if(n.logout(),!a?.end_session_endpoint)return null;let o=new URLSearchParams({client_id:Qe(e),post_logout_redirect_uri:`${location.origin}${e.root}`});return i&&o.set(`id_token_hint`,i),`${a.end_session_endpoint}?${o}`},unpair(){r()?.logout(),$e(e),n=null},async query(t,n={}){let{held:r,files:a}=rt(n),o={Accept:`application/json`,Authorization:await i()},s;a.size?(s=new FormData,s.append(`operations`,JSON.stringify({query:t,variables:r})),s.append(`map`,JSON.stringify(Object.fromEntries([...a.keys()].map((e,t)=>[t,[e]])))),[...a.values()].forEach((e,t)=>{s.append(String(t),e)})):(o[`Content-Type`]=`application/json`,s=JSON.stringify({query:t,variables:n}));let c=await fetch(e.graphql,{method:`POST`,headers:o,body:s}),l=await c.json().catch(()=>({}));if(c.status===401||c.status===403)throw Error(l.error_description||l.error||X(`api.refused`));if(l.errors?.length)throw Error(l.errors.map(e=>e.message).join(`; `));return l.data}}}var at=Symbol(`router`);function ot(e){let t=C({path:location.pathname,search:location.search}),n=()=>{t.path=location.pathname,t.search=location.search};return addEventListener(`popstate`,n),{state:t,get segments(){return t.path.slice(e.length).split(`/`).filter(Boolean)},get query(){return new URLSearchParams(t.search)},href(t){return`${e}${t}`},go(t){history.pushState({},``,`${e}${t}`),n(),scrollTo({top:0})},replace(t){history.replaceState({},``,`${e}${t}`),n()}}}function st(e){oe(at,e)}function ct(){return te(at)}var lt=f(`<div class="sheet px-6 py-14 text-center"><p class="mx-auto max-w-sm text-sm opacity-85"><!></p></div>`);function ut(t,n){var r=lt(),i=o(r),a=o(i);v(a,()=>n.children),J(i),J(r),e(t,r)}var dt=new Set([`$$slots`,`$$events`,`$$legacy`,`to`,`class`,`children`]),ft=f(`<a><!></a>`);function Z(t,n){H(n,!0);let r=L(n,`class`,3,`link link-hover`),i=E(n,dt),a=ct();function s(e){e.metaKey||e.ctrlKey||e.shiftKey||e.altKey||e.button===0&&(e.preventDefault(),e.stopPropagation(),a.go(n.to))}var c=ft();se(c,e=>({...i,class:r(),href:e,onclick:s}),[()=>a.href(n.to)]);var l=o(c);v(l,()=>n.children),J(c),e(t,c),D()}var pt=f(`<div class="grid place-items-center py-16" role="status"><span class="loading loading-spinner"></span> <span class="sr-only"> </span></div>`);function mt(t,n){H(n,!0);let r=L(n,`label`,19,()=>X(`ui.loading`));var i=pt(),a=l(o(i),2),c=W(a,!0);J(i),s(()=>z(c,r())),e(t,i),D()}var ht=f(`<span role="img"><svg viewBox="0 0 20 20" fill="none" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"></svg></span>`),gt=f(`<span class="marks"></span>`);function _t(i,a){H(a,!0);let c={manager:`<path d="M10 2.75 16 5v4.6c0 3.7-2.5 6.4-6 7.65-3.5-1.25-6-3.95-6-7.65V5z"/>`,key:`<circle cx="6.75" cy="10" r="3.25"/><path d="M10 10h7.25M14.5 10v2.5M17.25 10v2"/>`,invited:`<rect x="2.75" y="4.75" width="14.5" height="10.5" rx="1.5"/><path d="m3.25 5.5 6.75 5.25 6.75-5.25"/>`,unconfirmed:`<circle cx="10" cy="10" r="7"/><path d="M10 6.25v4.5M10 13.75v.01"/>`,waiting:`<circle cx="10" cy="10" r="7"/><path d="M10 6.25V10l2.75 1.75"/>`,help:`<circle cx="10" cy="10" r="7"/><path d="M7.9 7.9a2.15 2.15 0 1 1 3 1.95c-.55.3-.9.75-.9 1.3v.35M10 13.75v.01"/>`,suspended:`<circle cx="10" cy="10" r="7"/><path d="M8.1 7.25v5.5M11.9 7.25v5.5"/>`,blocked:`<circle cx="10" cy="10" r="7"/><path d="m5.05 5.05 9.9 9.9"/>`,dynamic:`<path d="M7 3.25v3.5M13 3.25v3.5"/><rect x="4.75" y="6.75" width="10.5" height="5.5" rx="1.5"/><path d="M10 12.25v4.5"/>`,owns:`<circle cx="8" cy="7" r="3"/><path d="M2.75 16.25c.6-2.9 2.75-4.5 5.25-4.5s4.65 1.6 5.25 4.5M15.5 6.5v5M13 9h5"/>`,signals:`<circle cx="10" cy="10" r="1.5"/><path d="M6.75 13.25a4.6 4.6 0 0 1 0-6.5M13.25 6.75a4.6 4.6 0 0 1 0 6.5M4.4 15.6a7.9 7.9 0 0 1 0-11.2M15.6 4.4a7.9 7.9 0 0 1 0 11.2"/>`,delegates:`<path d="M11.5 3.75h4.75V8.5M16.25 3.75 9.5 10.5"/><path d="M14.5 11.5v3.25c0 .7-.55 1.25-1.25 1.25h-8c-.7 0-1.25-.55-1.25-1.25v-8c0-.7.55-1.25 1.25-1.25H8.5"/>`,mail:`<rect x="2.75" y="4.75" width="14.5" height="10.5" rx="1.5"/><path d="m3.25 5.5 6.75 5.25 6.75-5.25"/>`,archived:`<rect x="2.75" y="4" width="14.5" height="3.5" rx="1"/><path d="M4.25 7.5v7.25c0 .7.55 1.25 1.25 1.25h9c.7 0 1.25-.55 1.25-1.25V7.5M8.25 10.5h3.5"/>`};var l=R(),d=u(l),f=r=>{var i=gt();Y(i,21,()=>a.marks,([e,t,n])=>e,(r,i)=>{var a=q(()=>ie(t(i),3));let l=()=>t(a)[0],u=()=>t(a)[1],d=()=>t(a)[2];var f=ht(),p=o(f);n(p,()=>c[l()],!0),J(p),J(f),s(()=>{le(f,1,`mark mark-${d()??`quiet`??``}`),P(f,`aria-label`,u()),P(f,`title`,u())}),e(r,f)}),J(i),e(r,i)};r(d,e=>{a.marks.length&&e(f)}),e(i,l),D()}var vt=e=>e.devices.some(e=>e.blockedAt),yt=e=>[e.scopes.some(e=>e.startsWith(`masks:`))&&[`manager`,X(`actors.marks.manager`),`primary`],e.otpEnabled&&[`key`,X(`actors.marks.second_factor`,{count:e.backupCodesRemaining}),`good`],!e.activated&&[`invited`,X(`actors.marks.invited`),`info`],e.email&&!e.emailVerified&&[`unconfirmed`,X(`actors.marks.unconfirmed`),`warn`],e.pendingApproval&&[`waiting`,X(`actors.marks.waiting`),`warn`],e.recoveryRequestedAt&&[`help`,X(`actors.marks.help`),`warn`],e.suspendedAt&&[`suspended`,X(`actors.marks.suspended`),`bad`],vt(e)&&[`blocked`,X(`actors.marks.blocked`),`bad`]].filter(Boolean);function bt(e=25){let t=C({cursors:[null],total:null});return{size:e,state:t,get cursor(){return t.cursors.at(-1)},get first(){return(t.cursors.length-1)*e+1},reset(){t.cursors=[null]},forward(e){t.cursors=[...t.cursors,e]},back(){t.cursors.length>1&&(t.cursors=t.cursors.slice(0,-1))},counted(e){t.total=e}}}var xt=f(`<nav class="pager"><span class="hint"> </span> <div class="join"><button type="button" class="btn btn-sm join-item"> </button> <button type="button" class="btn btn-sm join-item"> </button></div></nav>`);function St(n,i){H(i,!0);let a=L(i,`busy`,3,!1),c=q(()=>i.pages.first),f=q(()=>t(c)+i.shown-1),p=q(()=>i.pages.state.total),m=q(()=>i.pages.state.cursors.length>1),h=q(()=>t(p)===null?i.shown===i.pages.size:t(f)<t(p));var g=R(),_=u(g),v=n=>{var r=xt(),u=o(r),g=W(u,!0),_=l(u,2),v=o(_),y=W(v,!0),b=l(v,2),x=W(b,!0);J(_),J(r),s((e,n,i,o)=>{P(r,`aria-label`,e),z(g,n),v.disabled=a()||!t(m),z(y,i),b.disabled=a()||!t(h),z(x,o)},[()=>X(`ui.pager.label`),()=>t(p)===null?X(`ui.pager.range`,{first:t(c).toLocaleString(),last:t(f).toLocaleString()}):X(`ui.pager.range_of`,{first:t(c).toLocaleString(),last:t(f).toLocaleString(),total:t(p).toLocaleString()}),()=>X(`ui.pager.previous`),()=>X(`ui.pager.next`)]),d(`click`,v,()=>i.onpage(`back`)),d(`click`,b,()=>i.onpage(`forward`)),e(n,r)};r(_,e=>{i.shown&&(t(m)||t(h))&&e(v)}),e(n,g),D()}c([`click`]);function Ct(){let e=C({notice:null,failure:null}),t=()=>{e.notice=null,e.failure=null},n=t=>{e.notice=null,e.failure=t?.message??String(t)};return{state:e,clear:t,blame:n,say(t){e.failure=null,e.notice=t},async attempt(r,i=null){t();try{let t=await r()??!0;return i&&(e.notice=i),t}catch(e){return n(e),null}}}}var wt=new Map;function Tt(){return document.documentElement.lang||void 0}function Et(e,t){let n=`${e}:${Tt()??``}`;return wt.has(n)||wt.set(n,t(Tt())),wt.get(n)}var Dt=()=>Et(`day`,e=>new Intl.DateTimeFormat(e,{day:`numeric`,month:`short`,year:`numeric`})),Ot=()=>Et(`moment`,e=>new Intl.DateTimeFormat(e,{day:`numeric`,month:`short`,hour:`2-digit`,minute:`2-digit`})),kt=()=>Et(`relative`,e=>new Intl.RelativeTimeFormat(e,{numeric:`auto`})),At=[[`year`,31536e6],[`month`,2592e6],[`week`,6048e5],[`day`,864e5],[`hour`,36e5],[`minute`,6e4]];function jt(e){if(!e)return null;let t=new Date(e);return Number.isNaN(t.getTime())?null:t}function Mt(e,t=`—`){let n=jt(e);return n?Dt().format(n):t}function Nt(e,t=`—`){let n=jt(e);return n?Ot().format(n):t}function Pt(e,t=`—`){let n=jt(e);if(!n)return t;let r=n.getTime()-Date.now();for(let[e,t]of At)if(Math.abs(r)>=t)return kt().format(Math.round(r/t),e);return kt().format(Math.round(r/1e3),`second`)}function Ft(e,t=`—`){let n=(e??[]).filter(Boolean);return n.length?n.join(` `):t}var It=f(`<span class="tip"><button type="button" class="tip-mark">?</button> <span class="tip-body" role="tooltip"> </span></span>`);function Lt(t,n){let r=h();H(n,!0);let i=L(n,`label`,19,()=>X(`ui.more_about`));var a=It(),c=o(a),u=l(c,2),d=W(u,!0);J(a),s(()=>{P(c,`aria-label`,i()),P(c,`aria-describedby`,r),P(u,`id`,r),z(d,n.text)}),e(t,a),D()}var Rt=f(`<div class="flex items-center gap-2"><h2 class="subhead"> </h2> <!></div>`),zt=f(`<p class="deck-sm"> </p>`),Bt=f(`<div class="flex min-w-0 max-w-full flex-wrap items-center gap-2"><!></div>`),Vt=f(`<div class="section-head"><div class="flex min-w-0 flex-col gap-1.5"><!> <!></div> <!></div>`),Ht=f(`<section><!> <div class="section-body"><!></div></section>`);function Q(n,i){H(i,!0);let a=L(i,`title`,3,null),c=L(i,`lede`,3,null),u=L(i,`help`,3,null),d=L(i,`row`,3,!1);var f=Ht();let p;var m=o(f),h=n=>{var d=Vt(),f=o(d),p=o(f),m=n=>{var i=Rt(),c=o(i),d=W(c,!0),f=l(c,2),p=e=>{{let n=q(()=>X(`ui.about`,{title:a().toLowerCase()}));Lt(e,{get text(){return u()},get label(){return t(n)}})}};r(f,e=>{u()&&e(p)}),J(i),s(()=>z(d,a())),e(n,i)};r(p,e=>{a()&&e(m)});var h=l(p,2),g=t=>{var n=zt(),r=W(n,!0);s(()=>z(r,c())),e(t,n)};r(h,e=>{c()&&e(g)}),J(f);var _=l(f,2),y=t=>{var n=Bt(),r=o(n);v(r,()=>i.actions),J(n),e(t,n)};r(_,e=>{i.actions&&e(y)}),J(d),e(n,d)};r(m,e=>{(a()||c()||i.actions)&&e(h)});var g=l(m,2),_=o(g);v(_,()=>i.children),J(g),J(f),s(()=>p=le(f,1,`section`,null,p,{"section-row":d()})),e(n,f),D()}var Ut=f(`<tr class="hover cursor-pointer"><!></tr>`);function Wt(t,n){H(n,!0);let r=ct();function i(e){e.target.closest(`a, button, input, label`)||getSelection()?.toString()||r.go(n.to)}var a=Ut(),s=o(a);v(s,()=>n.children),J(a),d(`click`,a,i),e(t,a),D()}c([`click`]);var Gt=f(`<div class="join w-full sm:w-auto"><input class="input input-sm join-item w-full sm:w-48 md:w-56" type="search"/> <button type="button" class="btn btn-sm join-item"> </button></div>`);function Kt(t,n){H(n,!0);let r=L(n,`value`,15,``);var i=Gt(),a=o(i);j(a);var c=l(a,2),u=W(c,!0);J(i),s(e=>{P(a,`aria-label`,n.label),P(a,`placeholder`,n.placeholder),z(u,e)},[()=>X(`ui.search`)]),d(`keydown`,a,e=>e.key===`Enter`&&n.onsearch()),B(a,r),d(`click`,c,function(...e){n.onsearch?.apply(this,e)}),e(t,i),D()}c([`keydown`,`click`]);var qt=f(`<th> </th>`),Jt=f(`<div class="sheet overflow-x-auto"><table class="table"><thead><tr></tr></thead><tbody><!></tbody></table></div>`);function Yt(n,i){H(i,!0);let c=q(()=>i.columns.map(e=>typeof e==`string`?{label:e}:e));var d=R(),f=u(d),p=t=>{ut(t,{children:(t,n)=>{V();var r=a();s(()=>z(r,i.empty)),e(t,r)},$$slots:{default:!0}})},m=n=>{var r=Jt(),a=o(r),u=o(a),d=o(u);Y(d,21,()=>t(c),y,(n,r)=>{var i=qt(),a=W(i,!0);s(()=>{le(i,1,`${t(r).right?`text-right`:``} ${t(r).hide?`hidden md:table-cell`:``}`),z(a,t(r).label??``)}),e(n,i)}),J(d),J(u);var f=l(u),p=o(f);v(p,()=>i.rows),J(f),J(a),J(r),e(n,r)};r(f,e=>{i.count===0?e(p):e(m,-1)}),e(n,d),D()}var Xt=f(`<button type="button"> </button>`),Zt=f(`<!> <div class="range" role="group"></div>`,1),Qt=f(`<div class="alert alert-warning alert-soft flex-col items-start gap-2"><p class="text-sm"> <code class="font-mono"> </code>. <button type="button" class="link"> </button></p> <label class="flex items-center gap-2 text-sm"><input type="checkbox" class="checkbox"/> </label> <button type="button" class="btn btn-sm btn-error btn-outline"> </button></div>`),$t=f(`<p class="text-sm opacity-85"> <code class="font-mono"> </code>. <button type="button" class="link"> </button></p>`),en=f(`<span class="hint"> </span>`),tn=f(`<div class="flex flex-wrap items-center gap-3"><label class="flex items-center gap-2 text-sm"><input type="checkbox" class="checkbox"/> </label> <!> <!></div>`),nn=f(`<span class="badge badge-error badge-xs"> </span>`),rn=f(`<span class="badge badge-warning badge-xs"> </span>`),an=f(`<span class="badge badge-success badge-xs"> </span>`),on=f(`<div class="truncate font-mono text-xs opacity-80"> </div>`),sn=f(` <!>`,1),cn=f(`<div class="truncate"></div>`),ln=f(`<span class="opacity-80"> </span>`),un=f(`<td class="w-0"><input type="checkbox" class="checkbox"/></td> <td class="max-w-[18rem]"><!> <div class="flex flex-wrap items-center gap-1.5"><span class="truncate text-xs opacity-75"> </span> <!> <!></div> <!></td> <td class="hidden max-w-[16rem] text-xs md:table-cell"><!></td> <td class="hidden font-mono text-xs opacity-85 md:table-cell"> </td> <td class="text-xs whitespace-nowrap opacity-85"> </td>`,1),dn=f(`<!> <!> <!>`,1),fn=f(`<div id="devices" class="scroll-mt-20"><!></div>`);function pn(n,i){H(i,!0);let c=[[`allowed`,X(`devices.lenses.allowed`),{blocked:!1}],[`blocked`,X(`devices.lenses.blocked`),{blocked:!0}],[`unattached`,X(`devices.lenses.unattached`),{unattached:!0}]],f=[``,X(`devices.columns.device`),{label:X(`devices.columns.who`),hide:!0},{label:X(`devices.columns.ip_address`),hide:!0},X(`devices.columns.last_seen`)],p=w(C([])),m=w(!0),h=w(`allowed`),g=w(``),_=w(``),v=w(C(new Set)),y=w(!1),b=w(!1),x=w(null),T=q(()=>c.find(([e])=>e===t(h))?.[2]??{});async function E(){S(m,!0);let e=await i.feedback.attempt(()=>i.api.query(`
+import{A as e,B as t,C as n,D as r,E as i,F as a,G as o,H as s,I as c,J as l,K as u,L as d,M as f,N as p,O as m,P as h,Q as g,R as _,S as v,T as y,U as b,V as x,X as S,Y as C,Z as w,_ as T,a as E,at as D,b as O,c as k,ct as A,d as j,dt as M,et as N,f as P,ft as F,g as I,h as ee,i as L,it as te,j as R,k as z,l as B,lt as V,m as ne,o as re,ot as H,p as U,pt as ie,q as W,rt as ae,s as G,st as oe,t as K,tt as q,u as se,ut as J,v as ce,w as Y,y as le,z as ue}from"./initial-Cn-UuAsy.js";var de=`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~`;function fe(e=64){let t=new Uint8Array(e);crypto.getRandomValues(t);let n=``;for(let e of t)n+=de[e%66];return n}function pe(e){let t=``;for(let n of new Uint8Array(e))t+=String.fromCharCode(n);return btoa(t).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=+$/,``)}async function me(e){return pe(await crypto.subtle.digest(`SHA-256`,new TextEncoder().encode(e)))}var he=`S256`;async function ge(){let e=await crypto.subtle.generateKey({name:`ECDSA`,namedCurve:`P-256`},!1,[`sign`,`verify`]),t=await crypto.subtle.exportKey(`jwk`,e.publicKey);return{privateKey:e.privateKey,jwk:{kty:t.kty,crv:t.crv,x:t.x,y:t.y}}}var _e=e=>pe(new TextEncoder().encode(JSON.stringify(e)).buffer);async function ve(e,t,n,r){let i=new URL(n),a={typ:`dpop+jwt`,alg:`ES256`,jwk:e.jwk},o={jti:fe(32),htm:t.toUpperCase(),htu:`${i.origin}${i.pathname}`,iat:Math.floor(Date.now()/1e3)};r&&(o.ath=pe(await crypto.subtle.digest(`SHA-256`,new TextEncoder().encode(r))));let s=`${_e(a)}.${_e(o)}`;return`${s}.${pe(await crypto.subtle.sign({name:`ECDSA`,hash:`SHA-256`},e.privateKey,new TextEncoder().encode(s)))}`}var ye=`masks`,be=`keys`,xe=`dpop`,Se;function Ce(){return Se??=new Promise((e,t)=>{let n=indexedDB.open(ye,1);n.onupgradeneeded=()=>n.result.createObjectStore(be),n.onsuccess=()=>e(n.result),n.onerror=()=>t(n.error)}).catch(e=>{throw Se=void 0,e}),Se}function we(e){return new Promise((t,n)=>{e.onsuccess=()=>t(e.result),e.onerror=()=>n(e.error)})}async function Te(){try{let e=await Ce(),t=await we(e.transaction(be).objectStore(be).get(xe));if(t)return t;let n=await ge();return await we(e.transaction(be,`readwrite`).objectStore(be).put(n,xe)),n}catch{return ge()}}async function Ee(){try{await we((await Ce()).transaction(be,`readwrite`).objectStore(be).delete(xe))}catch{}}var De=class extends Error{code;description;status;constructor(e,t,n){super(t?`${e}: ${t}`:e),this.name=`MasksError`,this.code=e,this.description=t,this.status=n}},Oe=class extends De{},ke={login_required:Oe,interaction_required:Oe,consent_required:class extends De{},access_denied:class extends De{},invalid_grant:class extends De{},invalid_token:class extends De{},invalid_issuer:class extends De{}};function Ae(e,t,n){let r=Object.hasOwn(ke,e)?ke[e]:De,i=new r(e,t,n);return i.name=r.name,i}var je={RS256:`SHA-256`,RS384:`SHA-384`,RS512:`SHA-512`},Me=`RSASSA-PKCS1-v1_5`;function Ne(e){let t=e.replace(/-/g,`+`).replace(/_/g,`/`),n=atob(t.padEnd(t.length+(4-t.length%4)%4,`=`)),r=new Uint8Array(new ArrayBuffer(n.length));for(let e=0;e<n.length;e++)r[e]=n.charCodeAt(e);return r}function Pe(e){try{return JSON.parse(new TextDecoder().decode(Ne(e)))}catch{throw Ae(`invalid_token`,`the id token is not a JWT`)}}function Fe(e){return Array.isArray(e)?e.map(String):e==null?[]:[String(e)]}async function Ie(e,{issuer:t,audience:n,nonce:r,keyFor:i,leeway:a=60}){let[o,s,c,...l]=e.split(`.`);if(!o||!s||!c||l.length>0)throw Ae(`invalid_token`,`the id token is not a JWT`);let u=Pe(o);if(u.typ!==void 0&&String(u.typ).toUpperCase()!==`JWT`)throw Ae(`invalid_token`,`the id token is typed ${u.typ}, which is not an id token`);let d=je[String(u.alg)];if(!d)throw Ae(`invalid_token`,`the id token is signed with ${u.alg}, which this client cannot verify`);let f=await crypto.subtle.importKey(`jwk`,{...await i(String(u.kid)),alg:String(u.alg)},{name:Me,hash:d},!1,[`verify`]);if(!await crypto.subtle.verify(Me,f,Ne(c),new TextEncoder().encode(`${o}.${s}`)))throw Ae(`invalid_token`,`the id token signature does not verify`);let p=Pe(s),m=Math.floor(Date.now()/1e3);if(String(p.iss??``).replace(/\/$/,``)!==t)throw Ae(`invalid_token`,`the id token was issued by ${p.iss}`);if(!Fe(p.aud).includes(n))throw Ae(`invalid_token`,`the id token was issued for another client`);if(typeof p.exp==`number`&&m-a>=p.exp)throw Ae(`invalid_token`,`the id token has expired`);if(typeof p.iat==`number`&&p.iat-a>m)throw Ae(`invalid_token`,`the id token was issued in the future`);if(p.nonce!==r)throw Ae(`invalid_nonce`,`the id token was issued for another request`);return p}function Le(e){return e?Array.isArray(e)?e:e.split(/\s+/).filter(Boolean):[]}var Re=`masks:pending`,ze=`masks:session`;function Be(e){let t=e.issuer.replace(/\/$/,``),n=e.fetch??globalThis.fetch.bind(globalThis),r=e.storage??globalThis.sessionStorage,i=Le(e.scope??[`openid`,`profile`,`email`]),a=Le(e.resource),o=globalThis.location?.origin,s=e.clientId??(o&&`${o}/oauth/client.json`),c=e.redirectUri??(o&&`${o}/`);if(!globalThis.crypto?.subtle)throw Ae(`insecure_context`,`serve the page over https, or from localhost, since the browser hides the cryptography a sign-in needs on any other http page`);if(!s||!c)throw Ae(`invalid_request`,`pass clientId and redirectUri when the client runs outside a browser`);let l=Ve(r),u=null,d=l?.tokens??null,f=l?.identity??null,p=null,m=null,h=null,g=async(t,n,r)=>e.dpop?(h??=Te(),{DPoP:await ve(await h,t,n,r)}):{},_=0,v=()=>{d=null,f=null,y()},y=()=>{try{d?r.setItem(ze,JSON.stringify({tokens:d,identity:f})):r.removeItem(ze)}catch{}},b=async()=>{if(u)return u;let e=await n(`${t}/.well-known/openid-configuration`,{headers:{Accept:`application/json`}});if(!e.ok)throw Ae(`invalid_issuer`,`${t} answered ${e.status}`,e.status);let r=await e.json();if(r.issuer?.replace(/\/$/,``)!==t)throw Ae(`invalid_issuer`,`${t} publishes a document naming ${r.issuer}`);return u=r,r},x=async e=>{let{jwks_uri:r}=await b();if(!r)throw Ae(`invalid_issuer`,`${t} publishes no jwks_uri, so an id token cannot be verified`);let i=await n(r,{headers:{Accept:`application/json`},...e?{cache:`no-cache`}:{}});if(!i.ok)throw Ae(`invalid_issuer`,`${r} answered ${i.status}`,i.status);let a=await i.json();return Object.fromEntries((a.keys??[]).filter(e=>e.kid&&(!e.use||e.use===`sig`)).map(e=>[e.kid,e]))},S=async(e,n=!1)=>{(n||!p)&&(p=await x(n));let r=p[e];if(r)return r;if(!n)return S(e,!0);throw Ae(`invalid_token`,`${t} publishes no key ${e}`)},C=async e=>{let t=_,{token_endpoint:r}=await b(),i=await n(r,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,Accept:`application/json`,...await g(`POST`,r)},body:new URLSearchParams(e).toString()}),a=await i.json().catch(()=>({}));if(!i.ok)throw Ae(a.error??`http_${i.status}`,a.error_description,i.status);if(t!==_)throw Ae(`invalid_grant`,`the client signed out while this request was in flight`);return d={access_token:a.access_token,id_token:a.id_token,refresh_token:a.refresh_token,token_type:a.token_type??`Bearer`,scope:a.scope??``,expires_in:Number(a.expires_in??0),obtained_at:Math.floor(Date.now()/1e3)},d},w=async({returnTo:t,prompt:n,organization:o=e.organization}={})=>{let{authorization_endpoint:l}=await b(),u=fe(),d={state:fe(24),nonce:i.includes(`openid`)?fe(24):``,verifier:u,returnTo:t??`${location.pathname}${location.search}`,...o?{organization:o}:{}};r.setItem(Re,JSON.stringify(d));let f=new URLSearchParams([[`response_type`,`code`],[`client_id`,s],[`redirect_uri`,c],[`scope`,i.join(` `)],[`state`,d.state],[`code_challenge`,await me(u)],[`code_challenge_method`,he]]);d.nonce&&f.append(`nonce`,d.nonce);for(let e of a)f.append(`resource`,e);return n&&f.append(`prompt`,n),o&&f.append(`organization`,o),`${l}?${f.toString()}`},T=async(e,{style:n=`identicon`,size:r}={})=>{let{avatar_endpoint:i,avatar_styles_supported:a}=await b();if(!i)throw Ae(`invalid_issuer`,`${t} publishes no avatar_endpoint`);if(a&&!a.includes(n))throw Ae(`invalid_style`,`${t} does not serve ${n} avatars`);let o=`${i}/${encodeURIComponent(e)}/${n}`;return r?`${o}?size=${r}`:o},E=(e=30)=>!d||Date.now()/1e3+e>=d.obtained_at+d.expires_in,D=async()=>{if(!d?.refresh_token)throw Ae(`invalid_grant`,`no refresh token is held`);let e=d.refresh_token,t=[[`grant_type`,`refresh_token`],[`refresh_token`,e],[`client_id`,s]];for(let e of a)t.push([`resource`,e]);let n;try{n=await C(t)}catch(e){throw e.code===`invalid_grant`&&v(),e}return n.refresh_token??=e,y(),n},O=async()=>(m??=D().finally(()=>{m=null}),await m),k=async e=>{let{revocation_endpoint:t}=await b();t&&await n(t,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams([[`token`,e],[`token_type_hint`,`refresh_token`],[`client_id`,s]]).toString()})},A={async ready(){let e=new URL(window.location.href);if(!(e.searchParams.has(`code`)||e.searchParams.has(`error`))||r.getItem(Re)===null)return f;let{returnTo:t}=await A.callback(e.href);return window.history.replaceState(window.history.state,``,t),f},discover:b,authorizeUrl:w,avatarUrl:T,async authorize(e={}){window.location.assign(await w(e))},pending(){return r.getItem(Re)!==null},async callback(e=window.location.href){let n=new URL(e).searchParams,i=r.getItem(Re);if(r.removeItem(Re),n.get(`error`))throw Ae(n.get(`error`),n.get(`error_description`)??void 0);if(!i)throw Ae(`invalid_state`,`this browser has no authorization in flight`);let o=JSON.parse(i);if(n.get(`state`)!==o.state)throw Ae(`invalid_state`,`the callback did not match this browser`);let l=n.get(`code`);if(!l)throw Ae(`invalid_request`,`the callback carried no code`);let u=[[`grant_type`,`authorization_code`],[`code`,l],[`client_id`,s],[`redirect_uri`,c],[`code_verifier`,o.verifier]];for(let e of a)u.push([`resource`,e]);let d=await C(u);if(o.nonce){if(!d.id_token)throw v(),Ae(`invalid_token`,`an id token was asked for and the issuer returned none`);try{f=await Ie(d.id_token,{issuer:t,audience:s,nonce:o.nonce,keyFor:S})}catch(e){throw v(),e}let e=f?.org?.key;if(o.organization&&e&&e!==o.organization)throw v(),Ae(`invalid_token`,`the id token does not name the organization ${o.organization}`)}return y(),{tokens:d,identity:f,returnTo:o.returnTo}},identity(){return f},organization(){return f?.org??null},organizations(){return f?.orgs??[]},async switchOrganization(e,t={}){window.location.assign(await w({...t,organization:e}))},avatars(){return f?.[`masks:avatars`]??null},async photo(e=f?.sub){if(!e||!d)return null;let t=await n(await T(e,{style:`photo`}),{headers:{Authorization:`${d.token_type} ${d.access_token}`,Accept:`image/*`}});return t.ok?await t.blob():null},refresh:O,async fetch(e,t={}){d?.refresh_token&&E()&&await O();let r=d?.access_token,i=new Headers(t.headers);if(r&&d){i.set(`Authorization`,`${d.token_type} ${r}`);for(let[n,a]of Object.entries(await g(t.method??`GET`,e,r)))i.set(n,a)}return await n(e,{...t,headers:i})},async proof(e,t){return(await g(e,t,d?.access_token)).DPoP??null},async freshAccessToken(e=30){return d?.refresh_token&&E(e)&&await O(),d?.access_token??null},accessToken(){return d?.access_token??null},tokens(){return d},authorization(){return d?`${d.token_type} ${d.access_token}`:null},expired:E,async logout({everywhere:n=!1,postLogoutRedirectUri:i}={}){let a=d;if(_+=1,m=null,h=null,r.removeItem(Re),v(),await Promise.all([e.dpop?Ee():void 0,a?.refresh_token?k(a.refresh_token).catch(()=>void 0):void 0]),!n)return;let{end_session_endpoint:o}=await b();if(!o)throw Ae(`invalid_issuer`,`${t} publishes no end_session_endpoint`);let c=new URLSearchParams([[`client_id`,s]]);a?.id_token&&c.append(`id_token_hint`,a.id_token),i&&c.append(`post_logout_redirect_uri`,i),window.location.assign(`${o}?${c.toString()}`)}};return A}function Ve(e){try{let t=e.getItem(ze),n=t?JSON.parse(t):null;return n?.tokens?.access_token?n:null}catch{return null}}var He=/%\{(\w+)\}/g,Ue={},We=new Intl.PluralRules(`en`);function Ge(e,t=`en`){Ue=e??{},We=new Intl.PluralRules(t)}function Ke(e){return e.split(`.`).reduce((e,t)=>e?.[t],Ue)}function qe(e,t){return e.replace(He,(e,n)=>t&&Object.hasOwn(t,n)?String(t[n]):e)}function X(e,t){let n=Ke(e);if(typeof n==`string`)return qe(n,t);if(n&&typeof n==`object`&&t&&`count`in t){let e=n[We.select(Number(t.count))]??n.other;if(typeof e==`string`)return qe(e,t)}return e}var Je=`masks:manage:client`,Ye=[`openid`,`profile`,`email`,`masks:manage`,`masks:manage:security`,`masks:manage:support`,`masks:manage:read`];function Xe(e){try{return JSON.parse(localStorage.getItem(Je)||`null`)?.[e]||null}catch{return null}}function Ze(e,t){let n=JSON.parse(localStorage.getItem(Je)||`{}`);n[e]=t,localStorage.setItem(Je,JSON.stringify(n))}function Qe(e){return Xe(e.issuer)||e.clientId||null}function $e(e){let t=JSON.parse(localStorage.getItem(Je)||`{}`);delete t[e.issuer],localStorage.setItem(Je,JSON.stringify(t))}function et(e){return`${location.origin}${e.root}/callback`}function tt(e){let t=new URLSearchParams([[`client_name`,`Manage ${e.tenant.name}`],[`resource`,e.resource],[`scope`,Ye.join(` `)],[`return_to`,`${location.origin}${e.root}`],[`post_logout_redirect_uri`,`${location.origin}${e.root}`],[`token_endpoint_auth_method`,`none`],[`redirect_uris`,et(e)]]);return`${e.issuer}/handshake?${t.toString()}`}async function nt(e,t){let n=await fetch(`${e.issuer}/register`,{method:`POST`,headers:{"Content-Type":`application/json`,Accept:`application/json`,Authorization:`Bearer ${t}`},body:JSON.stringify({client_name:`Manage ${e.tenant.name}`,redirect_uris:[et(e)],token_endpoint_auth_method:`none`})}),r=await n.json().catch(()=>({}));if(!n.ok)throw Error(r.error_description||r.error||X(`pairing.registration_failed`));if(r.client_secret)throw Error(X(`pairing.secret_issued`));return Ze(e.issuer,r.client_id),r.client_id}function rt(e){let t=new Map,n=(e,r)=>e instanceof Blob?(t.set(r,e),null):Array.isArray(e)?e.map((e,t)=>n(e,`${r}.${t}`)):e?.constructor===Object?Object.fromEntries(Object.entries(e).map(([e,t])=>[e,n(t,`${r}.${e}`)])):e;return{held:n(e,`variables`),files:t}}function it(e){let t=C({ready:!1,identity:null,failure:null}),n=null,r=()=>{let t=Qe(e);return t?(n||=Be({issuer:e.issuer,clientId:t,redirectUri:et(e),scope:Ye,resource:e.resource}),n):null},i=async()=>{let e=r();if(!e)throw Error(X(`api.unregistered`));return e.expired(30)&&await e.refresh(),e.authorization()};return{state:t,paired(){return!!Qe(e)},signedIn(){return!!r()?.accessToken()},async authorize(e){await r().authorize({returnTo:e})},async callback(){let e=await r().callback();return t.identity=e.identity,t.ready=!0,e},async signOut(){let n=r();if(t.identity=null,!n)return null;let i=n.tokens()?.id_token,a=await n.discover().catch(()=>null);if(n.logout(),!a?.end_session_endpoint)return null;let o=new URLSearchParams({client_id:Qe(e),post_logout_redirect_uri:`${location.origin}${e.root}`});return i&&o.set(`id_token_hint`,i),`${a.end_session_endpoint}?${o}`},unpair(){r()?.logout(),$e(e),n=null},async query(t,n={}){let{held:r,files:a}=rt(n),o={Accept:`application/json`,Authorization:await i()},s;a.size?(s=new FormData,s.append(`operations`,JSON.stringify({query:t,variables:r})),s.append(`map`,JSON.stringify(Object.fromEntries([...a.keys()].map((e,t)=>[t,[e]])))),[...a.values()].forEach((e,t)=>{s.append(String(t),e)})):(o[`Content-Type`]=`application/json`,s=JSON.stringify({query:t,variables:n}));let c=await fetch(e.graphql,{method:`POST`,headers:o,body:s}),l=await c.json().catch(()=>({}));if(c.status===401||c.status===403)throw Error(l.error_description||l.error||X(`api.refused`));if(l.errors?.length)throw Error(l.errors.map(e=>e.message).join(`; `));return l.data}}}var at=Symbol(`router`);function ot(e){let t=C({path:location.pathname,search:location.search}),n=()=>{t.path=location.pathname,t.search=location.search};return addEventListener(`popstate`,n),{state:t,get segments(){return t.path.slice(e.length).split(`/`).filter(Boolean)},get query(){return new URLSearchParams(t.search)},href(t){return`${e}${t}`},go(t){history.pushState({},``,`${e}${t}`),n(),scrollTo({top:0})},replace(t){history.replaceState({},``,`${e}${t}`),n()}}}function st(e){oe(at,e)}function ct(){return te(at)}var lt=f(`<div class="sheet px-6 py-14 text-center"><p class="mx-auto max-w-sm text-sm opacity-85"><!></p></div>`);function ut(t,n){var r=lt(),i=o(r),a=o(i);v(a,()=>n.children),J(i),J(r),e(t,r)}var dt=new Set([`$$slots`,`$$events`,`$$legacy`,`to`,`class`,`children`]),ft=f(`<a><!></a>`);function Z(t,n){H(n,!0);let r=L(n,`class`,3,`link link-hover`),i=E(n,dt),a=ct();function s(e){e.metaKey||e.ctrlKey||e.shiftKey||e.altKey||e.button===0&&(e.preventDefault(),e.stopPropagation(),a.go(n.to))}var c=ft();se(c,e=>({...i,class:r(),href:e,onclick:s}),[()=>a.href(n.to)]);var l=o(c);v(l,()=>n.children),J(c),e(t,c),D()}var pt=f(`<div class="grid place-items-center py-16" role="status"><span class="loading loading-spinner"></span> <span class="sr-only"> </span></div>`);function mt(t,n){H(n,!0);let r=L(n,`label`,19,()=>X(`ui.loading`));var i=pt(),a=l(o(i),2),c=W(a,!0);J(i),s(()=>z(c,r())),e(t,i),D()}var ht=f(`<span role="img"><svg viewBox="0 0 20 20" fill="none" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"></svg></span>`),gt=f(`<span class="marks"></span>`);function _t(i,a){H(a,!0);let c={manager:`<path d="M10 2.75 16 5v4.6c0 3.7-2.5 6.4-6 7.65-3.5-1.25-6-3.95-6-7.65V5z"/>`,key:`<circle cx="6.75" cy="10" r="3.25"/><path d="M10 10h7.25M14.5 10v2.5M17.25 10v2"/>`,invited:`<rect x="2.75" y="4.75" width="14.5" height="10.5" rx="1.5"/><path d="m3.25 5.5 6.75 5.25 6.75-5.25"/>`,unconfirmed:`<circle cx="10" cy="10" r="7"/><path d="M10 6.25v4.5M10 13.75v.01"/>`,waiting:`<circle cx="10" cy="10" r="7"/><path d="M10 6.25V10l2.75 1.75"/>`,help:`<circle cx="10" cy="10" r="7"/><path d="M7.9 7.9a2.15 2.15 0 1 1 3 1.95c-.55.3-.9.75-.9 1.3v.35M10 13.75v.01"/>`,suspended:`<circle cx="10" cy="10" r="7"/><path d="M8.1 7.25v5.5M11.9 7.25v5.5"/>`,blocked:`<circle cx="10" cy="10" r="7"/><path d="m5.05 5.05 9.9 9.9"/>`,dynamic:`<path d="M7 3.25v3.5M13 3.25v3.5"/><rect x="4.75" y="6.75" width="10.5" height="5.5" rx="1.5"/><path d="M10 12.25v4.5"/>`,owns:`<circle cx="8" cy="7" r="3"/><path d="M2.75 16.25c.6-2.9 2.75-4.5 5.25-4.5s4.65 1.6 5.25 4.5M15.5 6.5v5M13 9h5"/>`,signals:`<circle cx="10" cy="10" r="1.5"/><path d="M6.75 13.25a4.6 4.6 0 0 1 0-6.5M13.25 6.75a4.6 4.6 0 0 1 0 6.5M4.4 15.6a7.9 7.9 0 0 1 0-11.2M15.6 4.4a7.9 7.9 0 0 1 0 11.2"/>`,delegates:`<path d="M11.5 3.75h4.75V8.5M16.25 3.75 9.5 10.5"/><path d="M14.5 11.5v3.25c0 .7-.55 1.25-1.25 1.25h-8c-.7 0-1.25-.55-1.25-1.25v-8c0-.7.55-1.25 1.25-1.25H8.5"/>`,mail:`<rect x="2.75" y="4.75" width="14.5" height="10.5" rx="1.5"/><path d="m3.25 5.5 6.75 5.25 6.75-5.25"/>`,archived:`<rect x="2.75" y="4" width="14.5" height="3.5" rx="1"/><path d="M4.25 7.5v7.25c0 .7.55 1.25 1.25 1.25h9c.7 0 1.25-.55 1.25-1.25V7.5M8.25 10.5h3.5"/>`};var l=R(),d=u(l),f=r=>{var i=gt();Y(i,21,()=>a.marks,([e,t,n])=>e,(r,i)=>{var a=q(()=>ie(t(i),3));let l=()=>t(a)[0],u=()=>t(a)[1],d=()=>t(a)[2];var f=ht(),p=o(f);n(p,()=>c[l()],!0),J(p),J(f),s(()=>{le(f,1,`mark mark-${d()??`quiet`??``}`),P(f,`aria-label`,u()),P(f,`title`,u())}),e(r,f)}),J(i),e(r,i)};r(d,e=>{a.marks.length&&e(f)}),e(i,l),D()}var vt=e=>e.devices.some(e=>e.blockedAt),yt=e=>[e.scopes.some(e=>e.startsWith(`masks:`))&&[`manager`,X(`actors.marks.manager`),`primary`],e.otpEnabled&&[`key`,X(`actors.marks.second_factor`,{count:e.backupCodesRemaining}),`good`],!e.activated&&[`invited`,X(`actors.marks.invited`),`info`],e.email&&!e.emailVerified&&[`unconfirmed`,X(`actors.marks.unconfirmed`),`warn`],e.pendingApproval&&[`waiting`,X(`actors.marks.waiting`),`warn`],e.recoveryRequestedAt&&[`help`,X(`actors.marks.help`),`warn`],e.suspendedAt&&[`suspended`,X(`actors.marks.suspended`),`bad`],vt(e)&&[`blocked`,X(`actors.marks.blocked`),`bad`]].filter(Boolean);function bt(e=25){let t=C({cursors:[null],total:null});return{size:e,state:t,get cursor(){return t.cursors.at(-1)},get first(){return(t.cursors.length-1)*e+1},reset(){t.cursors=[null]},forward(e){t.cursors=[...t.cursors,e]},back(){t.cursors.length>1&&(t.cursors=t.cursors.slice(0,-1))},counted(e){t.total=e}}}var xt=f(`<nav class="pager"><span class="hint"> </span> <div class="join"><button type="button" class="btn btn-sm join-item"> </button> <button type="button" class="btn btn-sm join-item"> </button></div></nav>`);function St(n,i){H(i,!0);let a=L(i,`busy`,3,!1),c=q(()=>i.pages.first),f=q(()=>t(c)+i.shown-1),p=q(()=>i.pages.state.total),m=q(()=>i.pages.state.cursors.length>1),h=q(()=>t(p)===null?i.shown===i.pages.size:t(f)<t(p));var g=R(),_=u(g),v=n=>{var r=xt(),u=o(r),g=W(u,!0),_=l(u,2),v=o(_),y=W(v,!0),b=l(v,2),x=W(b,!0);J(_),J(r),s((e,n,i,o)=>{P(r,`aria-label`,e),z(g,n),v.disabled=a()||!t(m),z(y,i),b.disabled=a()||!t(h),z(x,o)},[()=>X(`ui.pager.label`),()=>t(p)===null?X(`ui.pager.range`,{first:t(c).toLocaleString(),last:t(f).toLocaleString()}):X(`ui.pager.range_of`,{first:t(c).toLocaleString(),last:t(f).toLocaleString(),total:t(p).toLocaleString()}),()=>X(`ui.pager.previous`),()=>X(`ui.pager.next`)]),d(`click`,v,()=>i.onpage(`back`)),d(`click`,b,()=>i.onpage(`forward`)),e(n,r)};r(_,e=>{i.shown&&(t(m)||t(h))&&e(v)}),e(n,g),D()}c([`click`]);function Ct(){let e=C({notice:null,failure:null}),t=()=>{e.notice=null,e.failure=null},n=t=>{e.notice=null,e.failure=t?.message??String(t)};return{state:e,clear:t,blame:n,say(t){e.failure=null,e.notice=t},async attempt(r,i=null){t();try{let t=await r()??!0;return i&&(e.notice=i),t}catch(e){return n(e),null}}}}var wt=new Map;function Tt(){return document.documentElement.lang||void 0}function Et(e,t){let n=`${e}:${Tt()??``}`;return wt.has(n)||wt.set(n,t(Tt())),wt.get(n)}var Dt=()=>Et(`day`,e=>new Intl.DateTimeFormat(e,{day:`numeric`,month:`short`,year:`numeric`})),Ot=()=>Et(`moment`,e=>new Intl.DateTimeFormat(e,{day:`numeric`,month:`short`,hour:`2-digit`,minute:`2-digit`})),kt=()=>Et(`relative`,e=>new Intl.RelativeTimeFormat(e,{numeric:`auto`})),At=[[`year`,31536e6],[`month`,2592e6],[`week`,6048e5],[`day`,864e5],[`hour`,36e5],[`minute`,6e4]];function jt(e){if(!e)return null;let t=new Date(e);return Number.isNaN(t.getTime())?null:t}function Mt(e,t=`—`){let n=jt(e);return n?Dt().format(n):t}function Nt(e,t=`—`){let n=jt(e);return n?Ot().format(n):t}function Pt(e,t=`—`){let n=jt(e);if(!n)return t;let r=n.getTime()-Date.now();for(let[e,t]of At)if(Math.abs(r)>=t)return kt().format(Math.round(r/t),e);return kt().format(Math.round(r/1e3),`second`)}function Ft(e,t=`—`){let n=(e??[]).filter(Boolean);return n.length?n.join(` `):t}var It=f(`<span class="tip"><button type="button" class="tip-mark">?</button> <span class="tip-body" role="tooltip"> </span></span>`);function Lt(t,n){let r=h();H(n,!0);let i=L(n,`label`,19,()=>X(`ui.more_about`));var a=It(),c=o(a),u=l(c,2),d=W(u,!0);J(a),s(()=>{P(c,`aria-label`,i()),P(c,`aria-describedby`,r),P(u,`id`,r),z(d,n.text)}),e(t,a),D()}var Rt=f(`<div class="flex items-center gap-2"><h2 class="subhead"> </h2> <!></div>`),zt=f(`<p class="deck-sm"> </p>`),Bt=f(`<div class="flex min-w-0 max-w-full flex-wrap items-center gap-2"><!></div>`),Vt=f(`<div class="section-head"><div class="flex min-w-0 flex-col gap-1.5"><!> <!></div> <!></div>`),Ht=f(`<section><!> <div class="section-body"><!></div></section>`);function Q(n,i){H(i,!0);let a=L(i,`title`,3,null),c=L(i,`lede`,3,null),u=L(i,`help`,3,null),d=L(i,`row`,3,!1);var f=Ht();let p;var m=o(f),h=n=>{var d=Vt(),f=o(d),p=o(f),m=n=>{var i=Rt(),c=o(i),d=W(c,!0),f=l(c,2),p=e=>{{let n=q(()=>X(`ui.about`,{title:a().toLowerCase()}));Lt(e,{get text(){return u()},get label(){return t(n)}})}};r(f,e=>{u()&&e(p)}),J(i),s(()=>z(d,a())),e(n,i)};r(p,e=>{a()&&e(m)});var h=l(p,2),g=t=>{var n=zt(),r=W(n,!0);s(()=>z(r,c())),e(t,n)};r(h,e=>{c()&&e(g)}),J(f);var _=l(f,2),y=t=>{var n=Bt(),r=o(n);v(r,()=>i.actions),J(n),e(t,n)};r(_,e=>{i.actions&&e(y)}),J(d),e(n,d)};r(m,e=>{(a()||c()||i.actions)&&e(h)});var g=l(m,2),_=o(g);v(_,()=>i.children),J(g),J(f),s(()=>p=le(f,1,`section`,null,p,{"section-row":d()})),e(n,f),D()}var Ut=f(`<tr class="hover cursor-pointer"><!></tr>`);function Wt(t,n){H(n,!0);let r=ct();function i(e){e.target.closest(`a, button, input, label`)||getSelection()?.toString()||r.go(n.to)}var a=Ut(),s=o(a);v(s,()=>n.children),J(a),d(`click`,a,i),e(t,a),D()}c([`click`]);var Gt=f(`<div class="join w-full sm:w-auto"><input class="input input-sm join-item w-full sm:w-48 md:w-56" type="search"/> <button type="button" class="btn btn-sm join-item"> </button></div>`);function Kt(t,n){H(n,!0);let r=L(n,`value`,15,``);var i=Gt(),a=o(i);j(a);var c=l(a,2),u=W(c,!0);J(i),s(e=>{P(a,`aria-label`,n.label),P(a,`placeholder`,n.placeholder),z(u,e)},[()=>X(`ui.search`)]),d(`keydown`,a,e=>e.key===`Enter`&&n.onsearch()),B(a,r),d(`click`,c,function(...e){n.onsearch?.apply(this,e)}),e(t,i),D()}c([`keydown`,`click`]);var qt=f(`<th> </th>`),Jt=f(`<div class="sheet overflow-x-auto"><table class="table"><thead><tr></tr></thead><tbody><!></tbody></table></div>`);function Yt(n,i){H(i,!0);let c=q(()=>i.columns.map(e=>typeof e==`string`?{label:e}:e));var d=R(),f=u(d),p=t=>{ut(t,{children:(t,n)=>{V();var r=a();s(()=>z(r,i.empty)),e(t,r)},$$slots:{default:!0}})},m=n=>{var r=Jt(),a=o(r),u=o(a),d=o(u);Y(d,21,()=>t(c),y,(n,r)=>{var i=qt(),a=W(i,!0);s(()=>{le(i,1,`${t(r).right?`text-right`:``} ${t(r).hide?`hidden md:table-cell`:``}`),z(a,t(r).label??``)}),e(n,i)}),J(d),J(u);var f=l(u),p=o(f);v(p,()=>i.rows),J(f),J(a),J(r),e(n,r)};r(f,e=>{i.count===0?e(p):e(m,-1)}),e(n,d),D()}var Xt=f(`<button type="button"> </button>`),Zt=f(`<!> <div class="range" role="group"></div>`,1),Qt=f(`<div class="alert alert-warning alert-soft flex-col items-start gap-2"><p class="text-sm"> <code class="font-mono"> </code>. <button type="button" class="link"> </button></p> <label class="flex items-center gap-2 text-sm"><input type="checkbox" class="checkbox"/> </label> <button type="button" class="btn btn-sm btn-error btn-outline"> </button></div>`),$t=f(`<p class="text-sm opacity-85"> <code class="font-mono"> </code>. <button type="button" class="link"> </button></p>`),en=f(`<span class="hint"> </span>`),tn=f(`<div class="flex flex-wrap items-center gap-3"><label class="flex items-center gap-2 text-sm"><input type="checkbox" class="checkbox"/> </label> <!> <!></div>`),nn=f(`<span class="badge badge-error badge-xs"> </span>`),rn=f(`<span class="badge badge-warning badge-xs"> </span>`),an=f(`<span class="badge badge-success badge-xs"> </span>`),on=f(`<div class="truncate font-mono text-xs opacity-80"> </div>`),sn=f(` <!>`,1),cn=f(`<div class="truncate"></div>`),ln=f(`<span class="opacity-80"> </span>`),un=f(`<td class="w-0"><input type="checkbox" class="checkbox"/></td> <td class="max-w-[18rem]"><!> <div class="flex flex-wrap items-center gap-1.5"><span class="truncate text-xs opacity-75"> </span> <!> <!></div> <!></td> <td class="hidden max-w-[16rem] text-xs md:table-cell"><!></td> <td class="hidden font-mono text-xs opacity-85 md:table-cell"> </td> <td class="text-xs whitespace-nowrap opacity-85"> </td>`,1),dn=f(`<!> <!> <!>`,1),fn=f(`<div id="devices" class="scroll-mt-20"><!></div>`);function pn(n,i){H(i,!0);let c=[[`allowed`,X(`devices.lenses.allowed`),{blocked:!1}],[`blocked`,X(`devices.lenses.blocked`),{blocked:!0}],[`unattached`,X(`devices.lenses.unattached`),{unattached:!0}]],f=[``,X(`devices.columns.device`),{label:X(`devices.columns.who`),hide:!0},{label:X(`devices.columns.ip_address`),hide:!0},X(`devices.columns.last_seen`)],p=w(C([])),m=w(!0),h=w(`allowed`),g=w(``),_=w(``),v=w(C(new Set)),y=w(!1),b=w(!1),x=w(null),T=q(()=>c.find(([e])=>e===t(h))?.[2]??{});async function E(){S(m,!0);let e=await i.feedback.attempt(()=>i.api.query(`
     query Devices($blocked: Boolean, $unattached: Boolean, $agent: String, $limit: Int) {
       devices(blocked: $blocked, unattached: $unattached, agent: $agent, limit: $limit) {
         id label category known ipAddress userAgent lastSeenAt blockedAt
@@ -602,4 +602,4 @@ actor.deleted"></textarea> <p class="hint"> </p></label> <!> <div class="flex ga
   `),!0)}catch(e){c.blame(e)}}v();async function y(){let e=await c.attempt(()=>i.api.query(`mutation Issue($label: String!, $expiresIn: Int, $organization: ID) {
           issueProvisioningToken(label: $label, expiresIn: $expiresIn, organization: $organization) { secret }
         }`,{label:t(p).trim()||`Provisioning`,expiresIn:t(h)*86400,organization:t(m)||null}));e&&(S(g,e.issueProvisioningToken,!0),S(p,``),await v())}async function b(e){confirm(X(`provisioning.revoke_confirm`,{label:e.label}))&&await c.attempt(()=>i.api.query(`mutation Revoke($id: ID!) { revokeProvisioningToken(id: $id) { provisioningToken { id } } }`,{id:e.id}),X(`provisioning.revoked`,{label:e.label}))&&await v()}{let i=q(()=>X(`provisioning.title`)),v=q(()=>`${X(`provisioning.lede`)} ${X(`provisioning.connect.help`)}`);Q(n,{row:!0,get title(){return t(i)},get help(){return t(v)},children:(n,i)=>{var v=fd(),x=u(v);Nn(x,{get feedback(){return c.state}});var C=l(x,2),w=n=>{var i=dd(),c=u(i),v=o(c),x=W(v,!0),C=l(v,2),w=W(C,!0);J(c);var T=l(c,2),E=n=>{var i=cd();Y(i,21,()=>t(f).provisioningTokens,e=>e.id,(n,i)=>{var a=sd(),c=o(a),u=o(c),f=o(u,!0),p=l(f),m=n=>{var r=od(),a=W(r);s(()=>z(a,`· ${t(i).organization.name??``}`)),e(n,r)};r(p,e=>{t(i).organization&&e(m)}),J(u);var h=l(u,2),g=W(h,!0);J(c);var _=l(c,2),v=W(_,!0);J(a),s((e,n)=>{z(f,t(i).label),z(g,e),z(v,n)},[()=>t(i).issuedBy?X(`provisioning.tokens.issued_by`,{identifier:t(i).issuedBy.identifier,used:Pt(t(i).usedAt,X(`provisioning.tokens.never`)),expires:Mt(t(i).expiresAt)}):X(`provisioning.tokens.detail`,{used:Pt(t(i).usedAt,X(`provisioning.tokens.never`)),expires:Mt(t(i).expiresAt)}),()=>X(`provisioning.tokens.revoke`)]),d(`click`,_,()=>b(t(i))),e(n,a)}),J(i),e(n,i)};r(T,e=>{t(f).provisioningTokens.length&&e(E)});var D=l(T,2),O=o(D);j(O);var k=l(O,2),A=e=>{{let n=q(()=>X(`provisioning.connect.provisions`)),r=q(()=>[[``,X(`provisioning.connect.every_account`)],...t(f).organizations.map(e=>[e.key,X(`provisioning.connect.only_members`,{name:e.name})])]);ra(e,{get name(){return t(n)},get value(){return t(m)},get options(){return t(r)},onchange:e=>S(m,e,!0)})}};r(k,e=>{t(f).organizations.length&&e(A)});var M=l(k,2);Y(M,21,()=>a,([e,t])=>e,(n,r)=>{var i=q(()=>ie(t(r),2));let a=()=>t(i)[0],o=()=>t(i)[1];var c=ld(),l=W(c,!0);s(e=>{P(c,`aria-pressed`,t(h)===a()),z(l,e)},[()=>X(`provisioning.lifetimes.${o()}`)]),d(`click`,c,()=>S(h,a(),!0)),e(n,c)}),J(M);var N=l(M,2),F=W(N,!0);J(D);var I=l(D,2),ee=n=>{var r=ud(),i=o(r),a=W(i,!0),c=l(i,2),u=W(c,!0);J(r),s(e=>{z(a,e),z(u,t(g).secret)},[()=>X(`provisioning.connect.shown_once`)]),e(n,r)};r(I,e=>{t(g)&&e(ee)}),s((e,n,r,i)=>{z(x,e),z(w,t(f).scimBaseUrl),P(O,`aria-label`,n),P(M,`aria-label`,r),z(F,i)},[()=>X(`provisioning.connect.base_url`),()=>X(`provisioning.connect.label`),()=>X(`provisioning.connect.lifetime`),()=>X(`provisioning.connect.issue`)]),_(`submit`,D,e=>{e.preventDefault(),y()}),B(O,()=>t(p),e=>S(p,e)),e(n,i)};r(C,e=>{t(f)&&e(w)}),e(n,v)},$$slots:{default:!0}})}D()}c([`click`]);var md=f(`<div class="grid gap-4"><!> <!></div>`);function hd(n,r){H(r,!0);{let i=q(()=>X(`directory.title`)),a=q(()=>X(`directory.lede`));zn(n,{get title(){return t(i)},get lede(){return t(a)},children:(t,n)=>{var i=md(),a=o(i);pd(a,{get api(){return r.api}}),ad(l(a,2),{get api(){return r.api}}),J(i),e(t,i)},$$slots:{default:!0}})}D()}var gd=f(`<img width="24" height="24" alt=""/>`),_d=f(`<div class="settings"><div class="settings-bar"><nav class="settings-tabs"></nav> <div class="settings-me"><a class="settings-who"><!> <span> </span></a> <button type="button" class="settings-tab"> </button> <button type="button" class="settings-tab settings-quiet"> </button></div></div> <div class="min-w-0"><!></div></div>`);function vd(n,i){H(i,!0);let c=[`settings`,`policies`,`providers`,`directory`,`messages`,`activity`];function u(){confirm(X(`settings_shell.forget_confirm`))&&i.onunpair()}var f=_d(),p=o(f),m=o(p);Y(m,20,()=>c,e=>e,(n,r)=>{{let o=q(()=>`/${r}`),c=q(()=>i.current===r?`settings-tab-on`:``);Z(n,{get to(){return t(o)},get class(){return`settings-tab ${t(c)??``}`},children:(t,n)=>{V();var i=a();s(e=>z(i,e),[()=>X(`settings_shell.tabs.${r}`)]),e(t,i)},$$slots:{default:!0}})}}),J(m);var h=l(m,2),g=o(h),y=o(g),b=t=>{var n=gd();let r;s(()=>{P(n,`src`,`${i.viewer.avatars.photo??i.viewer.avatars.identicon}?size=64`),r=le(n,1,``,null,r,{drawn:!i.viewer.avatars.photo})}),_(`error`,n,e=>e.currentTarget.src=`${i.viewer.avatars.identicon}?size=64`),ue(n),e(t,n)};r(y,e=>{i.viewer&&e(b)});var x=l(y,2),S=W(x,!0);J(g);var C=l(g,2),w=W(C,!0),T=l(C,2),E=W(T,!0);J(h),J(p);var O=l(p,2),k=o(O);v(k,()=>i.children),J(O),J(f),s((e,t,n,r)=>{P(m,`aria-label`,e),P(g,`href`,i.account),P(g,`title`,t),z(S,i.identifier),z(w,n),z(E,r)},[()=>X(`settings_shell.label`),()=>X(`settings_shell.account`),()=>X(`settings_shell.sign_out`),()=>X(`settings_shell.forget`)]),d(`click`,C,function(...e){i.onsignout?.apply(this,e)}),d(`click`,T,u),e(n,f),D()}c([`click`]);var yd=f(`<div class="grid min-h-screen place-items-center"><!></div>`),bd=f(`<div class="auth-page"><main class="auth-col surface-terminus"><div class="flow"><span class="state state-bad"> </span> <h1 class="prompt-title"> </h1> <p class="said"> </p> <button type="button" class="action"> </button></div></main></div>`),xd=f(`<img src="/masks-public/icon.svg" alt="" class="brand-mark"/> `,1),Sd=f(`<span class="nav-count"> </span>`),Cd=f(` <!>`,1),wd=p(`<svg viewBox="0 0 20 20" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M17.03 8.46 L19.13 8.85 L19.13 11.15 L17.03 11.54 L16.06 13.88 L17.27 15.64 L15.64 17.27 L13.88 16.06 L11.54 17.03 L11.15 19.13 L8.85 19.13 L8.46 17.03 L6.12 16.06 L4.36 17.27 L2.73 15.64 L3.94 13.88 L2.97 11.54 L0.87 11.15 L0.87 8.85 L2.97 8.46 L3.94 6.12 L2.73 4.36 L4.36 2.73 L6.12 3.94 L8.46 2.97 L8.85 0.87 L11.15 0.87 L11.54 2.97 L13.88 3.94 L15.64 2.73 L17.27 4.36 L16.06 6.12 Z"></path><circle cx="10" cy="10" r="2.75"></circle></svg>`),Td=f(`<p class="alert alert-info mb-4 text-sm" role="status"> </p>`),Ed=f(`<svg viewBox="0 0 20 20" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"></svg> <span> </span>`,1),Dd=f(`<div class="flex min-h-screen flex-col"><header class="console-top sticky top-0 z-20"><div class="console-bar mx-auto flex w-full max-w-6xl items-center gap-x-6 py-2"><!> <nav class="nav md:flex-1"></nav> <!></div></header> <main class="console-main mx-auto w-full max-w-6xl flex-1"><!> <!></main> <nav class="tabbar md:hidden"></nav></div>`);function Od(i,c){H(c,!0);let f=x(()=>it(c.boot)),p=x(()=>ot(c.boot.root));st(p);let m=w(`starting`),h=w(null),g=w(null),_=w(null),v=q(()=>!t(_)||t(_).includes(`owner`)?null:t(_).includes(`security`)&&t(_).includes(`support`)?X(`app.limited.both`):t(_).includes(`security`)?X(`app.limited.security`):t(_).includes(`support`)?X(`app.limited.support`):X(`app.limited.read`)),y=[[``,`overview`,`<path d="M3.5 10.5 10 4l6.5 6.5"/><path d="M5.5 9v7h9V9"/>`],[`/actors`,`actors`,`<circle cx="10" cy="7" r="3"/><path d="M4 17c.8-3 3.2-4.5 6-4.5s5.2 1.5 6 4.5"/>`],[`/organizations`,`organizations`,`<rect x="3.5" y="7" width="13" height="9.5" rx="1.5"/><path d="M7.5 7V4.5h5V7"/><path d="M3.5 11h13"/>`],[`/clients`,`clients`,`<rect x="3" y="3" width="6" height="6" rx="1.5"/><rect x="11" y="3" width="6" height="6" rx="1.5"/><rect x="3" y="11" width="6" height="6" rx="1.5"/><rect x="11" y="11" width="6" height="6" rx="1.5"/>`]],C=[`settings`,`policies`,`providers`,`directory`,`messages`,`activity`],T=`masks:manage:repaired`;function E(e){if(e===`invalid_client`)return!0;if(e!==`invalid_scope`)return!1;try{return!sessionStorage.getItem(T)&&(sessionStorage.setItem(T,`1`),!0)}catch{return!1}}function O(){location.replace(tt(c.boot))}async function k(){let e=new URLSearchParams(location.search);try{if(E(e.get(`error`))){f.unpair(),O();return}if(e.get(`error`)){S(h,e.get(`error_description`)||e.get(`error`),!0),p.replace(``),S(m,`failed`);return}if(e.get(`initial_access_token`)){await nt(c.boot,e.get(`initial_access_token`)),p.replace(``),await f.authorize(``);return}if(!f.paired()){O();return}if(p.segments[0]===`callback`){let{returnTo:e}=await f.callback();p.replace(e||``),F();return}if(!f.signedIn()){await f.authorize(p.state.path.slice(c.boot.root.length)+p.state.search+location.hash);return}F()}catch(e){S(h,e.message,!0),S(m,`failed`)}}let A=w(0);async function j(){try{let e=await f.query(`query Waiting { approvals: actorCount(pendingApproval: true) help: actorCount(recoveryRequested: true) }`);S(A,e.approvals+e.help)}catch{S(A,0)}}let M=q(()=>p.segments[0]??``),N=q(()=>X(`app.waiting`,{count:t(A)}));b(()=>{t(m)===`ready`&&t(M)!==void 0&&j()});function F(){S(m,`ready`),f.query(`query Viewer { viewer { identifier avatars { photo identicon } } manageLevels }`).then(e=>{S(g,e.viewer,!0),S(_,e.manageLevels,!0)}).catch(()=>{})}k();let I=q(()=>p.segments[0]??``),ee=q(()=>C.includes(t(I))),L=q(()=>t(g)?.identifier??f.state.identity?.preferred_username??X(`app.account`));function te(){location.assign(c.boot.root)}function B(){f.unpair(),te()}async function ne(){location.assign(await f.signOut()??c.boot.root)}var re=R(),U=u(re),ae=n=>{var r=yd(),i=o(r);{let e=q(()=>X(`app.starting`));mt(i,{get label(){return t(e)}})}J(r),e(n,r)},G=n=>{var r=bd(),i=o(r),a=o(i),u=o(a),f=W(u,!0),p=l(u,2),m=W(p,!0),g=l(p,2),_=W(g,!0),v=l(g,2),y=W(v,!0);J(a),J(i),J(r),s((e,n,r)=>{z(f,e),z(m,n),z(_,t(h)),z(y,r)},[()=>X(`app.stopped`),()=>X(`app.failed`,{tenant:c.boot.tenant.name}),()=>X(`app.retry`)]),d(`click`,v,te),e(n,r)},oe=i=>{var d=Dd(),m=o(d),h=o(m),_=o(h);Z(_,{to:``,class:`brand`,children:(t,n)=>{var r=xd(),i=l(u(r),1,!0);s(()=>z(i,c.boot.tenant.name)),e(t,r)},$$slots:{default:!0}});var b=l(_,2);Y(b,21,()=>y,([e,t])=>e,(n,i)=>{var a=q(()=>ie(t(i),2));let o=()=>t(a)[0],c=()=>t(a)[1];{let i=q(()=>t(I)===o().replace(`/`,``)?`nav-item-on`:``);Z(n,{get to(){return o()},get class(){return`nav-item ${t(i)??``}`},children:(n,i)=>{V();var a=Cd(),o=u(a,!0),d=l(o),f=n=>{var r=Sd(),i=W(r,!0);s(()=>{P(r,`title`,t(N)),z(i,t(A))}),e(n,r)};r(d,e=>{c()===`actors`&&t(A)>0&&e(f)}),s(e=>z(o,e),[()=>X(`app.nav.${c()}`)]),e(n,a)},$$slots:{default:!0}})}}),J(b);var x=l(b,2);{let n=q(()=>t(ee)?`console-cog-on`:``),r=q(()=>X(`app.settings`)),i=q(()=>X(`app.settings`));Z(x,{to:`/settings`,get class(){return`console-cog ms-auto ${t(n)??``}`},get"aria-label"(){return t(r)},get title(){return t(i)},children:(t,n)=>{var r=wd();e(t,r)},$$slots:{default:!0}})}J(h),J(m);var S=l(m,2),C=o(S),w=n=>{var r=Td(),i=W(r,!0);s(()=>z(i,t(v))),e(n,r)};r(C,e=>{t(v)&&e(w)});var T=l(C,2),E=e=>{Uc(e,{get api(){return f},get boot(){return c.boot}})},D=t=>{var n=R(),i=u(n),a=e=>{Xi(e,{get api(){return f},get id(){return p.segments[2]}})},o=e=>{Li(e,{get api(){return f},get uuid(){return p.segments[1]},get part(){return p.segments[2]}})},s=e=>{tr(e,{get api(){return f}})};r(i,e=>{p.segments[1]===`devices`&&p.segments[2]?e(a):p.segments[1]?e(o,1):e(s,-1)}),e(t,n)},O=t=>{var n=R(),i=u(n),a=e=>{Ps(e,{get api(){return f},get organizationKey(){return p.segments[1]},get part(){return p.segments[2]}})},o=e=>{ts(e,{get api(){return f}})};r(i,e=>{p.segments[1]?e(a):e(o,-1)}),e(t,n)},k=t=>{var n=R(),i=u(n),a=e=>{Bo(e,{get api(){return f},get clientId(){return p.segments[1]},get part(){return p.segments[2]}})},o=e=>{xa(e,{get api(){return f}})};r(i,e=>{p.segments[1]?e(a):e(o,-1)}),e(t,n)},j=n=>{vd(n,{get current(){return t(I)},get viewer(){return t(g)},get identifier(){return t(L)},get account(){return c.boot.account},onsignout:ne,onunpair:B,children:(n,i)=>{var a=R(),o=u(a),s=e=>{Bl(e,{get api(){return f},get providerKey(){return p.segments[1]},get part(){return p.segments[2]}})},l=e=>{ll(e,{get api(){return f}})},d=e=>{Xu(e,{get api(){return f}})},m=e=>{hd(e,{get api(){return f}})},h=e=>{hu(e,{get api(){return f},get part(){return p.segments[1]}})},g=e=>{Tu(e,{get api(){return f}})},_=e=>{$c(e,{get api(){return f}})},v=e=>{_c(e,{get api(){return f},get boot(){return c.boot}})};r(o,e=>{t(I)===`providers`&&p.segments[1]?e(s):t(I)===`providers`?e(l,1):t(I)===`policies`?e(d,2):t(I)===`directory`?e(m,3):t(I)===`messages`?e(h,4):t(I)===`activity`&&p.segments[1]===`streams`?e(g,5):t(I)===`activity`?e(_,6):e(v,-1)}),e(n,a)},$$slots:{default:!0}})},M=t=>{ut(t,{children:(t,n)=>{V();var r=a();s(e=>z(r,e),[()=>X(`app.missing`)]),e(t,r)},$$slots:{default:!0}})};r(T,e=>{t(I)===``?e(E):t(I)===`actors`?e(D,1):t(I)===`organizations`?e(O,2):t(I)===`clients`?e(k,3):t(ee)?e(j,4):e(M,-1)}),J(S);var F=l(S,2);Y(F,21,()=>y,([e,t,n])=>e,(r,i)=>{var a=q(()=>ie(t(i),3));let o=()=>t(a)[0],c=()=>t(a)[1],d=()=>t(a)[2];{let i=q(()=>t(I)===o().replace(`/`,``)?`tabbar-item-on`:``);Z(r,{get to(){return o()},get class(){return`tabbar-item ${t(i)??``}`},children:(t,r)=>{var i=Ed(),a=u(i);n(a,d,!0),J(a);var o=l(a,2),f=W(o,!0);s(e=>z(f,e),[()=>X(`app.nav.${c()}`)]),e(t,i)},$$slots:{default:!0}})}}),J(F),J(d),s(e=>P(F,`aria-label`,e),[()=>X(`app.sections`)]),e(i,d)};r(U,e=>{t(m)===`starting`?e(ae):t(m)===`failed`?e(G,1):e(oe,-1)}),e(i,re),D()}c([`click`]);var kd=document.getElementById(`manage`);if(kd){let e=JSON.parse(kd.dataset.boot);Ge(e.copy,document.documentElement.lang||`en`),kd.replaceChildren(),m(Od,{target:kd,props:{boot:e}})}
-//# sourceMappingURL=manage-DpVxe5sv.js.map
+//# sourceMappingURL=manage-VgOqKj7N.js.map