@absolutejs/absolute 0.19.0-beta.1047 → 0.19.0-beta.1049

package/dist/cli/config/server.js

@@ -1113,6 +1113,134 @@ var require_jsx_dev_runtime = __commonJS((exports, module) => {
   }
 });
 
+// src/cli/config/auth/authCatalog.ts
+var AUTH_CORE_ROUTES, AUTH_FEATURES;
+var init_authCatalog = __esm(() => {
+  AUTH_CORE_ROUTES = [
+    "authorize",
+    "callback",
+    "profile",
+    "status",
+    "signout",
+    "refresh",
+    "revoke"
+  ];
+  AUTH_FEATURES = [
+    {
+      blurb: "Email/password \u2014 register, verify-email, login, reset-password \u2014 minting the same session as OAuth.",
+      configKey: "credentials",
+      id: "credentials",
+      kind: "routes",
+      label: "Credentials"
+    },
+    {
+      blurb: "Magic links + email/SMS one-time codes; each verify route mints the same session as every other flow.",
+      configKey: "passwordless",
+      id: "passwordless",
+      kind: "routes",
+      label: "Passwordless"
+    },
+    {
+      blurb: "TOTP + backup codes; auto-wires the login MFA gate over credentials and mounts enroll/challenge routes.",
+      configKey: "mfa",
+      id: "mfa",
+      kind: "routes",
+      label: "MFA"
+    },
+    {
+      blurb: "Passkeys (WebAuthn): registration ceremony for the caller + passwordless authentication ceremony.",
+      configKey: "webauthn",
+      id: "webauthn",
+      kind: "routes",
+      label: "WebAuthn / passkeys"
+    },
+    {
+      blurb: "Per-organization enterprise SSO (OIDC + SAML); id_tokens verified in-house against the issuer JWKS.",
+      configKey: "sso",
+      id: "sso",
+      kind: "routes",
+      label: "Enterprise SSO"
+    },
+    {
+      blurb: "SCIM 2.0 directory provisioning (Okta / Azure AD) with per-org bearer-token auth.",
+      configKey: "scim",
+      id: "scim",
+      kind: "routes",
+      label: "SCIM provisioning"
+    },
+    {
+      blurb: "First-class multi-tenancy: orgs, memberships, invitations, and org-scoped roles.",
+      configKey: "organizations",
+      id: "organizations",
+      kind: "routes",
+      label: "Organizations"
+    },
+    {
+      blurb: "Org-scoped roles & permissions \u2014 list an org\u2019s roles and set a member\u2019s roles.",
+      configKey: "roles",
+      id: "roles",
+      kind: "routes",
+      label: "Roles & permissions"
+    },
+    {
+      blurb: "Headless admin-portal setup-link endpoints so a customer\u2019s IT admin self-serves their SSO/SCIM.",
+      configKey: "portal",
+      id: "portal",
+      kind: "routes",
+      label: "Admin portal"
+    },
+    {
+      blurb: "Self-service session management: list the caller\u2019s active sessions and remote-revoke by id.",
+      configKey: "sessions",
+      id: "sessions",
+      kind: "routes",
+      label: "Session management"
+    },
+    {
+      blurb: "GDPR/CCPA self-service: data export (right to access) + erasure (right to be forgotten).",
+      configKey: "compliance",
+      id: "compliance",
+      kind: "routes",
+      label: "Compliance"
+    },
+    {
+      blurb: "Built-in HTMX fragment routes (login, identities, connectors, account, signout, delete-account).",
+      configKey: "htmx",
+      id: "htmx",
+      kind: "routes",
+      label: "HTMX fragments"
+    },
+    {
+      blurb: "Append-only structured audit events (register, login, mfa_*, logout\u2026) to your store + hook. SOC 2 prerequisite.",
+      configKey: "audit",
+      id: "audit",
+      kind: "behavior",
+      label: "Audit log"
+    },
+    {
+      blurb: "HMAC-signed outbound webhooks (Standard Webhooks) for every emitted auth event.",
+      configKey: "webhooks",
+      id: "webhooks",
+      kind: "behavior",
+      label: "Webhooks"
+    },
+    {
+      blurb: "RBAC/ABAC: adds a protectPermission(check, handler) derive that delegates to your hasPermission hook.",
+      configKey: "authorization",
+      id: "authorization",
+      kind: "behavior",
+      label: "Authorization"
+    },
+    {
+      blurb: "Per-identity attempt throttling + progressive account lockout on the credential login route.",
+      configKey: "lockout",
+      id: "lockout",
+      kind: "behavior",
+      label: "Lockout"
+    }
+  ];
+});
+
 // node_modules/react-dom/cjs/react-dom.development.js
 var require_react_dom_development = __commonJS((exports) => {
   var React = __toESM(require_react());
@@ -31937,13 +32065,192 @@ var init_resolvePackageJson = __esm(() => {
   init_fromType();
 });
 
+// src/cli/config/auth/resolveAuthState.ts
+var exports_resolveAuthState = {};
+__export(exports_resolveAuthState, {
+  resolveAuthState: () => resolveAuthState
+});
+import ts5 from "typescript";
+import { existsSync as existsSync10, readdirSync, readFileSync as readFileSync14 } from "fs";
+import { join as join2, relative, resolve as resolve9 } from "path";
+var AUTH_PACKAGE = "@absolutejs/auth", REPO_URL = "https://github.com/absolutejs/absolute-auth", NPM_URL = "https://www.npmjs.com/package/@absolutejs/auth", SKIP_DIRS, MAX_FILES = 4000, SETUP_EXPORTS, isRecord3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), readJson = (path) => {
+  if (!existsSync10(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync14(path, "utf-8"));
+    return isRecord3(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}, stringField = (record, key) => {
+  const value = record?.[key];
+  return typeof value === "string" ? value : null;
+}, declaredVersionFor = (cwd) => {
+  const pkg = readJson(join2(cwd, "package.json"));
+  if (!pkg)
+    return null;
+  for (const field of ["dependencies", "devDependencies"]) {
+    const group = pkg[field];
+    if (!isRecord3(group))
+      continue;
+    const version3 = group[AUTH_PACKAGE];
+    if (typeof version3 === "string")
+      return version3;
+  }
+  return null;
+}, installedVersionFor = (cwd) => stringField(readJson(join2(cwd, "node_modules", AUTH_PACKAGE, "package.json")), "version"), SOURCE_FILE, safeReaddir = (dir) => {
+  try {
+    return readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+}, sortEntry = (dir, entry, found, dirs) => {
+  const full = join2(dir, entry.name);
+  if (entry.isDirectory()) {
+    if (SKIP_DIRS.has(entry.name) || entry.name.startsWith("."))
+      return;
+    dirs.push(full);
+    return;
+  }
+  if (SOURCE_FILE.test(entry.name))
+    found.push(full);
+}, collectFrom = (dir, found, stack) => {
+  for (const entry of safeReaddir(dir))
+    sortEntry(dir, entry, found, stack);
+}, candidateFiles = (root) => {
+  const found = [];
+  const stack = [root];
+  while (stack.length > 0 && found.length < MAX_FILES) {
+    const dir = stack.pop();
+    if (dir === undefined)
+      break;
+    collectFrom(dir, found, stack);
+  }
+  return found;
+}, isAuthPackageImport = (statement) => ts5.isImportDeclaration(statement) && ts5.isStringLiteral(statement.moduleSpecifier) && statement.moduleSpecifier.text === AUTH_PACKAGE, addAuthNames = (statement, names) => {
+  const bindings = statement.importClause?.namedBindings;
+  if (!bindings || !ts5.isNamedImports(bindings))
+    return;
+  for (const element of bindings.elements) {
+    const imported = element.propertyName?.text ?? element.name.text;
+    if (!SETUP_EXPORTS.has(imported))
+      continue;
+    names.add(element.name.text);
+  }
+}, authBindings = (sourceFile) => {
+  const names = new Set;
+  for (const statement of sourceFile.statements) {
+    if (isAuthPackageImport(statement))
+      addAuthNames(statement, names);
+  }
+  return names;
+}, isAuthCall = (node, bindings) => ts5.isIdentifier(node.expression) && bindings.has(node.expression.text), providerCountOf = (property) => {
+  if (!ts5.isPropertyAssignment(property) || !ts5.isObjectLiteralExpression(property.initializer)) {
+    return null;
+  }
+  return property.initializer.properties.length;
+}, readConfigKeys = (object) => {
+  const keys = new Set;
+  let providerCount = null;
+  const usesSpread = object.properties.some((property) => ts5.isSpreadAssignment(property));
+  for (const property of object.properties) {
+    const { name } = property;
+    if (name === undefined || !ts5.isIdentifier(name))
+      continue;
+    keys.add(name.text);
+    if (name.text !== "providersConfiguration")
+      continue;
+    providerCount = providerCountOf(property);
+  }
+  return { keys, providerCount, usesSpread };
+}, matchFromCall = (node) => {
+  const [arg] = node.arguments;
+  if (arg && ts5.isObjectLiteralExpression(arg))
+    return readConfigKeys(arg);
+  return { keys: new Set, providerCount: null, usesSpread: true };
+}, readFileOrNull = (path) => {
+  try {
+    return readFileSync14(path, "utf-8");
+  } catch {
+    return null;
+  }
+}, findSetupInFile = (path) => {
+  const text = readFileOrNull(path);
+  if (text === null || !text.includes(AUTH_PACKAGE))
+    return null;
+  const sourceFile = ts5.createSourceFile(path, text, ts5.ScriptTarget.Latest, true);
+  const bindings = authBindings(sourceFile);
+  if (bindings.size === 0)
+    return null;
+  let match = null;
+  const visit2 = (node) => {
+    if (match)
+      return;
+    if (ts5.isCallExpression(node) && isAuthCall(node, bindings)) {
+      match = matchFromCall(node);
+      return;
+    }
+    ts5.forEachChild(node, visit2);
+  };
+  visit2(sourceFile);
+  return match;
+}, featureStatuses = (keys) => AUTH_FEATURES.map((feature) => ({
+  blurb: feature.blurb,
+  configKey: feature.configKey,
+  configured: keys.has(feature.configKey),
+  id: feature.id,
+  kind: feature.kind,
+  label: feature.label
+})), resolveAuthState = (cwd) => {
+  const installedVersion = installedVersionFor(cwd);
+  const root = existsSync10(join2(cwd, "src")) ? join2(cwd, "src") : cwd;
+  let match = null;
+  let setupPath = null;
+  for (const file of candidateFiles(root)) {
+    const found = findSetupInFile(file);
+    if (found === null)
+      continue;
+    match = found;
+    setupPath = relative(cwd, resolve9(file));
+    break;
+  }
+  const keys = match?.keys ?? new Set;
+  const state = {
+    declaredVersion: declaredVersionFor(cwd),
+    features: featureStatuses(keys),
+    installed: installedVersion !== null,
+    installedVersion,
+    introspected: match !== null,
+    npmUrl: NPM_URL,
+    providerCount: match?.providerCount ?? null,
+    repoUrl: REPO_URL,
+    setupPath,
+    usesSpread: match?.usesSpread ?? false
+  };
+  return state;
+};
+var init_resolveAuthState = __esm(() => {
+  init_authCatalog();
+  SKIP_DIRS = new Set([
+    "node_modules",
+    ".git",
+    "build",
+    "dist",
+    ".absolutejs",
+    "coverage",
+    ".next"
+  ]);
+  SETUP_EXPORTS = new Set(["auth", "absoluteAuth"]);
+  SOURCE_FILE = /\.(ts|tsx|mts|cts|js|mjs)$/;
+});
+
 // src/cli/config/server.ts
 import { Elysia as Elysia2 } from "elysia";
-import { existsSync as existsSync10, readFileSync as readFileSync14 } from "fs";
-import { resolve as resolve9 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync15 } from "fs";
+import { resolve as resolve10 } from "path";
 
 // src/cli/config/page/PanelHost.tsx
-var import_react7 = __toESM(require_react(), 1);
+var import_react8 = __toESM(require_react(), 1);
 
 // src/cli/config/eslint/EslintPanel.tsx
 var import_react2 = __toESM(require_react(), 1);
@@ -34082,11 +34389,66 @@ var AbsoluteConfigPanel = ({
   }, undefined, true, undefined, this);
 };
 
-// src/cli/config/packageJson/PackageJsonPanel.tsx
+// src/cli/config/integrations/IntegrationsPanel.tsx
 var import_react6 = __toESM(require_react(), 1);
 var jsx_dev_runtime6 = __toESM(require_jsx_dev_runtime(), 1);
-var matchesQuery5 = (query, text) => query === "" || text.toLowerCase().includes(query.toLowerCase());
-var FieldRow2 = ({ field, isSet, onSave, value }) => {
+var CONFIG_INTEGRATIONS = [
+  { field: "openapi", title: "OpenAPI" },
+  { field: "telemetry", title: "OpenTelemetry" }
+];
+var MANUAL_PLUGINS = [
+  {
+    blurb: "Cross-origin resource sharing (CORS) headers.",
+    id: "@elysiajs/cors",
+    install: "bun add @elysiajs/cors",
+    wire: ".use(cors())"
+  },
+  {
+    blurb: "Sign and verify your own JWTs \u2014 custom API/service tokens.",
+    id: "@elysiajs/jwt",
+    install: "bun add @elysiajs/jwt",
+    note: "Not for user login. For authentication (OAuth2, SSO, MFA, passkeys, sessions) use the Auth panel + @absolutejs/auth.",
+    wire: ".use(jwt({ name: 'jwt', secret: getEnv('JWT_SECRET') }))"
+  },
+  {
+    blurb: "Scheduled jobs on a cron pattern.",
+    id: "@elysiajs/cron",
+    install: "bun add @elysiajs/cron",
+    wire: ".use(cron({ name: 'heartbeat', pattern: '0 */6 * * *', run() {} }))"
+  }
+];
+var ManualPluginCard = ({ blurb, id, install, note, wire }) => /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+  className: "rule",
+  children: /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+    className: "rule-main",
+    children: [
+      /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+        className: "rule-name-row",
+        children: /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+          className: "rule-name",
+          children: id
+        }, undefined, false, undefined, this)
+      }, undefined, false, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("p", {
+        className: "rule-desc",
+        children: blurb
+      }, undefined, false, undefined, this),
+      note && /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("p", {
+        className: "intg-note",
+        children: note
+      }, undefined, false, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("pre", {
+        className: "intg-code",
+        children: install
+      }, undefined, false, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("pre", {
+        className: "intg-code",
+        children: wire
+      }, undefined, false, undefined, this)
+    ]
+  }, undefined, true, undefined, this)
+}, undefined, false, undefined, this);
+var FieldRow2 = ({ busy, field, isSet, onSave, title, value }) => {
   const [draft, setDraft] = import_react6.useState(value);
   return /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
     className: "rule fe-block",
@@ -34099,14 +34461,22 @@ var FieldRow2 = ({ field, isSet, onSave, value }) => {
             children: [
               /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
                 className: "rule-name",
+                children: title
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+                className: "badge dep",
                 children: field.name
               }, undefined, false, undefined, this),
               isSet && /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
                 className: "badge src",
-                children: "set"
+                children: "on"
               }, undefined, false, undefined, this)
             ]
           }, undefined, true, undefined, this),
+          field.description !== "" && /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("p", {
+            className: "rule-desc",
+            children: field.description
+          }, undefined, false, undefined, this),
           /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
             className: "fe-root",
             children: /* @__PURE__ */ jsx_dev_runtime6.jsxDEV(FieldEditor, {
@@ -34122,11 +34492,503 @@ var FieldRow2 = ({ field, isSet, onSave, value }) => {
         children: [
           /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("button", {
             className: "ts-btn",
+            disabled: busy,
             onClick: () => onSave(draft),
             type: "button",
             children: "save"
           }, undefined, false, undefined, this),
           isSet && /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("button", {
+            className: "ts-clear",
+            onClick: () => onSave(undefined, true),
+            type: "button",
+            children: "disable"
+          }, undefined, false, undefined, this)
+        ]
+      }, undefined, true, undefined, this)
+    ]
+  }, undefined, true, undefined, this);
+};
+var IntegrationsPanel = ({
+  state: initial
+}) => {
+  const [state, setState] = import_react6.useState(initial);
+  const [busy, setBusy] = import_react6.useState(null);
+  const [notice, setNotice] = import_react6.useState(null);
+  const save = (name) => async (value, remove) => {
+    setBusy(name);
+    setNotice(null);
+    try {
+      const response = await fetch("/api/absolute", {
+        body: JSON.stringify({ name, remove, value }),
+        headers: { "Content-Type": "application/json" },
+        method: "POST"
+      });
+      const result = await response.json();
+      if (result.ok && result.state) {
+        setState(result.state);
+        setNotice({ kind: "ok", text: result.message });
+      } else {
+        setNotice({
+          kind: "err",
+          text: result.message ?? "Update failed"
+        });
+      }
+    } catch (error) {
+      setNotice({ kind: "err", text: String(error) });
+    } finally {
+      setBusy(null);
+    }
+  };
+  const rows = CONFIG_INTEGRATIONS.map((entry) => ({
+    field: state.fields.find((candidate) => candidate.name === entry.field),
+    title: entry.title
+  })).filter((row) => Boolean(row.field));
+  return /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+    className: "shell",
+    children: [
+      /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("header", {
+        className: "topbar",
+        children: /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+          className: "brand",
+          children: [
+            /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("h1", {
+              className: "wordmark",
+              children: [
+                "integrations ",
+                /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("em", {
+                  children: "\xB7plugins"
+                }, undefined, false, undefined, this)
+              ]
+            }, undefined, true, undefined, this),
+            /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+              className: "subpath",
+              children: [
+                /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+                  className: "dot"
+                }, undefined, false, undefined, this),
+                "official Elysia plugins, wired the AbsoluteJS way"
+              ]
+            }, undefined, true, undefined, this)
+          ]
+        }, undefined, true, undefined, this)
+      }, undefined, false, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("main", {
+        children: [
+          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("section", {
+            className: "section",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+                className: "section-head",
+                children: [
+                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("h2", {
+                    className: "section-title",
+                    children: "Config-driven"
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+                    className: "section-files",
+                    children: "toggle in absolute.config.ts"
+                  }, undefined, false, undefined, this)
+                ]
+              }, undefined, true, undefined, this),
+              rows.map((row) => /* @__PURE__ */ jsx_dev_runtime6.jsxDEV(FieldRow2, {
+                busy: busy === row.field.name,
+                field: row.field,
+                isSet: Object.prototype.hasOwnProperty.call(state.current, row.field.name),
+                onSave: save(row.field.name),
+                title: row.title,
+                value: state.current[row.field.name]
+              }, row.field.name, false, undefined, this))
+            ]
+          }, undefined, true, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("section", {
+            className: "section",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+                className: "section-head",
+                children: [
+                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("h2", {
+                    className: "section-title",
+                    children: "More official plugins"
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+                    className: "section-files",
+                    children: "install + wire"
+                  }, undefined, false, undefined, this)
+                ]
+              }, undefined, true, undefined, this),
+              MANUAL_PLUGINS.map((plugin) => /* @__PURE__ */ jsx_dev_runtime6.jsxDEV(ManualPluginCard, {
+                ...plugin
+              }, plugin.id, false, undefined, this))
+            ]
+          }, undefined, true, undefined, this)
+        ]
+      }, undefined, true, undefined, this),
+      notice && /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+        className: `toast ${notice.kind}`,
+        children: [
+          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("b", {
+            children: notice.kind === "ok" ? "\u2713" : "\u2715"
+          }, undefined, false, undefined, this),
+          notice.text
+        ]
+      }, undefined, true, undefined, this)
+    ]
+  }, undefined, true, undefined, this);
+};
+
+// src/cli/config/auth/AuthPanel.tsx
+init_authCatalog();
+var jsx_dev_runtime7 = __toESM(require_jsx_dev_runtime(), 1);
+var FeatureCard = ({ blurb, configKey, configured, kind, label }) => /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+  className: "rule",
+  children: /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+    className: "rule-main",
+    children: [
+      /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+        className: "rule-name-row",
+        children: [
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+            className: "rule-name",
+            children: label
+          }, undefined, false, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+            className: "badge dep",
+            children: configKey
+          }, undefined, false, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+            className: "badge",
+            children: kind
+          }, undefined, false, undefined, this),
+          configured && /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+            className: "badge src",
+            children: "configured"
+          }, undefined, false, undefined, this)
+        ]
+      }, undefined, true, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("p", {
+        className: "rule-desc",
+        children: blurb
+      }, undefined, false, undefined, this)
+    ]
+  }, undefined, true, undefined, this)
+}, undefined, false, undefined, this);
+var NotInstalled = ({ npmUrl, repoUrl }) => /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+  className: "shell",
+  children: [
+    /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("header", {
+      className: "topbar",
+      children: /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+        className: "brand",
+        children: [
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("h1", {
+            className: "wordmark",
+            children: [
+              "auth ",
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("em", {
+                children: "\xB7@absolutejs/auth"
+              }, undefined, false, undefined, this)
+            ]
+          }, undefined, true, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+            className: "subpath",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+                className: "dot"
+              }, undefined, false, undefined, this),
+              "not installed in this project"
+            ]
+          }, undefined, true, undefined, this)
+        ]
+      }, undefined, true, undefined, this)
+    }, undefined, false, undefined, this),
+    /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("main", {
+      children: /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("section", {
+        className: "section",
+        children: [
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("p", {
+            className: "rule-desc",
+            children: "Enterprise auth for AbsoluteJS \u2014 OAuth2, credentials, SSO, SCIM, MFA, passkeys, organizations, and more. Install it, then this panel introspects your setup."
+          }, undefined, false, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("pre", {
+            className: "intg-code",
+            children: "bun add @absolutejs/auth"
+          }, undefined, false, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+            className: "auth-links",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("a", {
+                className: "auth-link",
+                href: repoUrl,
+                rel: "noreferrer",
+                target: "_blank",
+                children: "GitHub \u2197"
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("a", {
+                className: "auth-link",
+                href: npmUrl,
+                rel: "noreferrer",
+                target: "_blank",
+                children: "npm \u2197"
+              }, undefined, false, undefined, this)
+            ]
+          }, undefined, true, undefined, this)
+        ]
+      }, undefined, true, undefined, this)
+    }, undefined, false, undefined, this)
+  ]
+}, undefined, true, undefined, this);
+var AuthPanel = ({ state }) => {
+  if (!state.installed)
+    return /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(NotInstalled, {
+      ...state
+    }, undefined, false, undefined, this);
+  const configuredCount = state.features.filter((feature) => feature.configured).length;
+  const version = state.installedVersion ?? state.declaredVersion ?? "\u2014";
+  return /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+    className: "shell",
+    children: [
+      /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("header", {
+        className: "topbar",
+        children: [
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+            className: "brand",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("h1", {
+                className: "wordmark",
+                children: [
+                  "auth ",
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("em", {
+                    children: "\xB7@absolutejs/auth"
+                  }, undefined, false, undefined, this)
+                ]
+              }, undefined, true, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+                className: "subpath",
+                children: [
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+                    className: "dot"
+                  }, undefined, false, undefined, this),
+                  state.setupPath ?? "no auth() call found"
+                ]
+              }, undefined, true, undefined, this)
+            ]
+          }, undefined, true, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+            className: "counts",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+                className: "count",
+                children: [
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("b", {
+                    children: version
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+                    children: "version"
+                  }, undefined, false, undefined, this)
+                ]
+              }, undefined, true, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+                className: "count",
+                children: [
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("b", {
+                    children: configuredCount
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+                    children: "features on"
+                  }, undefined, false, undefined, this)
+                ]
+              }, undefined, true, undefined, this)
+            ]
+          }, undefined, true, undefined, this)
+        ]
+      }, undefined, true, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("main", {
+        children: [
+          state.introspected ? /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+            className: "auth-banner",
+            children: [
+              "Detected your ",
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("code", {
+                children: "auth()"
+              }, undefined, false, undefined, this),
+              " setup",
+              state.setupPath ? ` in ${state.setupPath}` : "",
+              state.providerCount === null ? "" : ` \xB7 ${state.providerCount} OAuth providers`,
+              state.usesSpread ? " \xB7 config uses a spread, some keys may be hidden" : "",
+              "."
+            ]
+          }, undefined, true, undefined, this) : /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+            className: "auth-banner warn",
+            children: [
+              "Couldn\u2019t find an ",
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("code", {
+                children: "auth()"
+              }, undefined, false, undefined, this),
+              " call to introspect \u2014 showing the full capability catalog as a reference. Features are configured in code where you call ",
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("code", {
+                children: "auth()"
+              }, undefined, false, undefined, this),
+              "."
+            ]
+          }, undefined, true, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("section", {
+            className: "section",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+                className: "section-head",
+                children: [
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("h2", {
+                    className: "section-title",
+                    children: "Core OAuth2 routes"
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+                    className: "section-files",
+                    children: "always mounted"
+                  }, undefined, false, undefined, this)
+                ]
+              }, undefined, true, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+                className: "auth-chips",
+                children: AUTH_CORE_ROUTES.map((route) => /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+                  className: "auth-chip",
+                  children: route
+                }, route, false, undefined, this))
+              }, undefined, false, undefined, this)
+            ]
+          }, undefined, true, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("section", {
+            className: "section",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+                className: "section-head",
+                children: [
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("h2", {
+                    className: "section-title",
+                    children: "Features"
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("span", {
+                    className: "section-files",
+                    children: [
+                      configuredCount,
+                      " of ",
+                      state.features.length,
+                      " configured"
+                    ]
+                  }, undefined, true, undefined, this)
+                ]
+              }, undefined, true, undefined, this),
+              state.features.map((feature) => /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(FeatureCard, {
+                ...feature
+              }, feature.id, false, undefined, this))
+            ]
+          }, undefined, true, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("section", {
+            className: "section",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+                className: "section-head",
+                children: /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("h2", {
+                  className: "section-title",
+                  children: "Related"
+                }, undefined, false, undefined, this)
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("p", {
+                className: "rule-desc",
+                children: [
+                  "Signing your own API/service tokens (not user login)? See",
+                  " ",
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("code", {
+                    children: "@elysiajs/jwt"
+                  }, undefined, false, undefined, this),
+                  " in the",
+                  " ",
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("a", {
+                    className: "auth-link",
+                    href: "/integrations",
+                    children: "Integrations panel"
+                  }, undefined, false, undefined, this),
+                  "."
+                ]
+              }, undefined, true, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+                className: "auth-links",
+                children: [
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("a", {
+                    className: "auth-link",
+                    href: `${state.repoUrl}#features`,
+                    rel: "noreferrer",
+                    target: "_blank",
+                    children: "Features \u2197"
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("a", {
+                    className: "auth-link",
+                    href: `${state.repoUrl}#configuration-options`,
+                    rel: "noreferrer",
+                    target: "_blank",
+                    children: "Configuration \u2197"
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("a", {
+                    className: "auth-link",
+                    href: state.npmUrl,
+                    rel: "noreferrer",
+                    target: "_blank",
+                    children: "npm \u2197"
+                  }, undefined, false, undefined, this)
+                ]
+              }, undefined, true, undefined, this)
+            ]
+          }, undefined, true, undefined, this)
+        ]
+      }, undefined, true, undefined, this)
+    ]
+  }, undefined, true, undefined, this);
+};
+
+// src/cli/config/packageJson/PackageJsonPanel.tsx
+var import_react7 = __toESM(require_react(), 1);
+var jsx_dev_runtime8 = __toESM(require_jsx_dev_runtime(), 1);
+var matchesQuery5 = (query, text) => query === "" || text.toLowerCase().includes(query.toLowerCase());
+var FieldRow3 = ({ field, isSet, onSave, value }) => {
+  const [draft, setDraft] = import_react7.useState(value);
+  return /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
+    className: "rule fe-block",
+    children: [
+      /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
+        className: "rule-main",
+        children: [
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
+            className: "rule-name-row",
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
+                className: "rule-name",
+                children: field.name
+              }, undefined, false, undefined, this),
+              isSet && /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
+                className: "badge src",
+                children: "set"
+              }, undefined, false, undefined, this)
+            ]
+          }, undefined, true, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
+            className: "fe-root",
+            children: /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(FieldEditor, {
+              onChange: setDraft,
+              schema: field.schema,
+              value: draft
+            }, undefined, false, undefined, this)
+          }, undefined, false, undefined, this)
+        ]
+      }, undefined, true, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
+        className: "rule-controls fe-actions",
+        children: [
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("button", {
+            className: "ts-btn",
+            onClick: () => onSave(draft),
+            type: "button",
+            children: "save"
+          }, undefined, false, undefined, this),
+          isSet && /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("button", {
             className: "ts-clear",
             onClick: () => onSave(undefined, true),
             type: "button",
@@ -34138,23 +35000,23 @@ var FieldRow2 = ({ field, isSet, onSave, value }) => {
   }, undefined, true, undefined, this);
 };
 var ScriptRow = ({ onRemove, onSave, script }) => {
-  const [draft, setDraft] = import_react6.useState(script.command);
-  return /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+  const [draft, setDraft] = import_react7.useState(script.command);
+  return /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
     className: "rule",
-    children: /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+    children: /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
       className: "rule-main",
       children: [
-        /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+        /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
           className: "rule-name-row",
-          children: /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+          children: /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
             className: "rule-name",
             children: script.name
           }, undefined, false, undefined, this)
         }, undefined, false, undefined, this),
-        /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+        /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
           className: "ts-control",
           children: [
-            /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("input", {
+            /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("input", {
               className: "ts-input wide",
               onChange: (event) => setDraft(event.target.value),
               onKeyDown: (event) => {
@@ -34164,13 +35026,13 @@ var ScriptRow = ({ onRemove, onSave, script }) => {
               spellCheck: false,
               value: draft
             }, undefined, false, undefined, this),
-            /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("button", {
+            /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("button", {
               className: "ts-btn",
               onClick: () => onSave(draft),
               type: "button",
               children: "save"
             }, undefined, false, undefined, this),
-            /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("button", {
+            /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("button", {
               className: "ts-clear",
               onClick: onRemove,
               type: "button",
@@ -34183,8 +35045,8 @@ var ScriptRow = ({ onRemove, onSave, script }) => {
   }, undefined, false, undefined, this);
 };
 var AddScript = ({ onAdd }) => {
-  const [name, setName] = import_react6.useState("");
-  const [command, setCommand] = import_react6.useState("");
+  const [name, setName] = import_react7.useState("");
+  const [command, setCommand] = import_react7.useState("");
   const add = () => {
     if (name.trim() === "")
       return;
@@ -34192,21 +35054,21 @@ var AddScript = ({ onAdd }) => {
     setName("");
     setCommand("");
   };
-  return /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+  return /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
     className: "rule",
-    children: /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+    children: /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
       className: "rule-main",
-      children: /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+      children: /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
         className: "ts-control",
         children: [
-          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("input", {
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("input", {
             className: "ts-input",
             onChange: (event) => setName(event.target.value),
             placeholder: "script name",
             spellCheck: false,
             value: name
           }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("input", {
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("input", {
             className: "ts-input wide",
             onChange: (event) => setCommand(event.target.value),
             onKeyDown: (event) => {
@@ -34217,7 +35079,7 @@ var AddScript = ({ onAdd }) => {
             spellCheck: false,
             value: command
           }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("button", {
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("button", {
             className: "ts-btn",
             onClick: add,
             type: "button",
@@ -34229,9 +35091,9 @@ var AddScript = ({ onAdd }) => {
   }, undefined, false, undefined, this);
 };
 var PackageJsonPanel = ({ state: initial }) => {
-  const [state, setState] = import_react6.useState(initial);
-  const [query, setQuery] = import_react6.useState("");
-  const [notice, setNotice] = import_react6.useState(null);
+  const [state, setState] = import_react7.useState(initial);
+  const [query, setQuery] = import_react7.useState("");
+  const [notice, setNotice] = import_react7.useState(null);
   const post = async (path, body) => {
     setNotice(null);
     try {
@@ -34257,28 +35119,28 @@ var PackageJsonPanel = ({ state: initial }) => {
   const saveField = (name) => (value, remove) => post("/api/package/field", { name, remove, value });
   const scripts = state.scripts.filter((script) => matchesQuery5(query, script.name) || matchesQuery5(query, script.command));
   const fields = state.fields.filter((field) => matchesQuery5(query, field.name));
-  return /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+  return /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
     className: "shell",
     children: [
-      /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("header", {
+      /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("header", {
         className: "topbar",
         children: [
-          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
             className: "brand",
             children: [
-              /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("h1", {
+              /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("h1", {
                 className: "wordmark",
                 children: [
                   "package ",
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("em", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("em", {
                     children: ".json"
                   }, undefined, false, undefined, this)
                 ]
               }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+              /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
                 className: "subpath",
                 children: [
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
                     className: "dot"
                   }, undefined, false, undefined, this),
                   state.configPath ?? "no package.json found"
@@ -34286,27 +35148,27 @@ var PackageJsonPanel = ({ state: initial }) => {
               }, undefined, true, undefined, this)
             ]
           }, undefined, true, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
             className: "counts",
             children: [
-              /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+              /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
                 className: "count",
                 children: [
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("b", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("b", {
                     children: state.scripts.length
                   }, undefined, false, undefined, this),
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
                     children: "scripts"
                   }, undefined, false, undefined, this)
                 ]
               }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+              /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
                 className: "count",
                 children: [
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("b", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("b", {
                     children: state.fields.length
                   }, undefined, false, undefined, this),
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
                     children: "fields"
                   }, undefined, false, undefined, this)
                 ]
@@ -34315,28 +35177,28 @@ var PackageJsonPanel = ({ state: initial }) => {
           }, undefined, true, undefined, this)
         ]
       }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+      /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
         className: "controls",
-        children: /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("input", {
+        children: /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("input", {
           className: "search",
           onChange: (event) => setQuery(event.target.value),
           placeholder: "Search scripts or fields\u2026",
           value: query
         }, undefined, false, undefined, this)
       }, undefined, false, undefined, this),
-      /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("main", {
+      /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("main", {
         children: [
-          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("section", {
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("section", {
             className: "section",
             children: [
-              /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+              /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
                 className: "section-head",
                 children: [
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("h2", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("h2", {
                     className: "section-title",
                     children: "Scripts"
                   }, undefined, false, undefined, this),
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
                     className: "section-files",
                     children: [
                       state.scripts.length,
@@ -34345,7 +35207,7 @@ var PackageJsonPanel = ({ state: initial }) => {
                   }, undefined, true, undefined, this)
                 ]
               }, undefined, true, undefined, this),
-              scripts.map((script) => /* @__PURE__ */ jsx_dev_runtime6.jsxDEV(ScriptRow, {
+              scripts.map((script) => /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(ScriptRow, {
                 onRemove: () => post("/api/package/script", {
                   name: script.name,
                   remove: true
@@ -34356,22 +35218,22 @@ var PackageJsonPanel = ({ state: initial }) => {
                 }),
                 script
               }, script.name, false, undefined, this)),
-              query === "" && /* @__PURE__ */ jsx_dev_runtime6.jsxDEV(AddScript, {
+              query === "" && /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(AddScript, {
                 onAdd: (name, command) => post("/api/package/script", { command, name })
               }, undefined, false, undefined, this)
             ]
           }, undefined, true, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("section", {
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("section", {
             className: "section",
             children: [
-              /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+              /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
                 className: "section-head",
                 children: [
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("h2", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("h2", {
                     className: "section-title",
                     children: "Fields"
                   }, undefined, false, undefined, this),
-                  /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("span", {
+                  /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
                     className: "section-files",
                     children: [
                       state.fields.length,
@@ -34380,7 +35242,7 @@ var PackageJsonPanel = ({ state: initial }) => {
                   }, undefined, true, undefined, this)
                 ]
               }, undefined, true, undefined, this),
-              fields.map((field) => /* @__PURE__ */ jsx_dev_runtime6.jsxDEV(FieldRow2, {
+              fields.map((field) => /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(FieldRow3, {
                 field,
                 isSet: Object.prototype.hasOwnProperty.call(state.current, field.name),
                 onSave: saveField(field.name),
@@ -34390,10 +35252,10 @@ var PackageJsonPanel = ({ state: initial }) => {
           }, undefined, true, undefined, this)
         ]
       }, undefined, true, undefined, this),
-      notice && /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("div", {
+      notice && /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
         className: `toast ${notice.kind}`,
         children: [
-          /* @__PURE__ */ jsx_dev_runtime6.jsxDEV("b", {
+          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("b", {
             children: notice.kind === "ok" ? "\u2713" : "\u2715"
           }, undefined, false, undefined, this),
           notice.text
@@ -34404,38 +35266,42 @@ var PackageJsonPanel = ({ state: initial }) => {
 };
 
 // src/cli/config/page/PanelHost.tsx
-var jsx_dev_runtime7 = __toESM(require_jsx_dev_runtime(), 1);
+var jsx_dev_runtime9 = __toESM(require_jsx_dev_runtime(), 1);
 var ENDPOINTS = {
   absolute: "/api/absolute",
+  auth: "/api/auth",
   eslint: "/api/rules",
+  integrations: "/api/absolute",
   package: "/api/package",
   prettier: "/api/prettier",
   tsconfig: "/api/tsconfig"
 };
 var LABELS = {
   absolute: "absolute.config",
+  auth: "Auth",
   eslint: "ESLint",
+  integrations: "Integrations",
   package: "package.json",
   prettier: "Prettier",
   tsconfig: "tsconfig"
 };
-var Message = ({ body, title }) => /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+var Message = ({ body, title }) => /* @__PURE__ */ jsx_dev_runtime9.jsxDEV("div", {
   className: "cfg-placeholder",
   children: [
-    /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("h2", {
+    /* @__PURE__ */ jsx_dev_runtime9.jsxDEV("h2", {
       className: "cfg-placeholder-title",
       children: title
     }, undefined, false, undefined, this),
-    /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("p", {
+    /* @__PURE__ */ jsx_dev_runtime9.jsxDEV("p", {
       className: "cfg-placeholder-text",
       children: body
     }, undefined, false, undefined, this)
   ]
 }, undefined, true, undefined, this);
-var Skeleton = ({ label }) => /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
+var Skeleton = ({ label }) => /* @__PURE__ */ jsx_dev_runtime9.jsxDEV("div", {
   className: "cfg-placeholder",
   children: [
-    /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("h2", {
+    /* @__PURE__ */ jsx_dev_runtime9.jsxDEV("h2", {
       className: "cfg-placeholder-title cfg-loading",
       children: [
         "Loading ",
@@ -34443,7 +35309,7 @@ var Skeleton = ({ label }) => /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("div", {
         "\u2026"
       ]
     }, undefined, true, undefined, this),
-    /* @__PURE__ */ jsx_dev_runtime7.jsxDEV("p", {
+    /* @__PURE__ */ jsx_dev_runtime9.jsxDEV("p", {
       className: "cfg-placeholder-text",
       children: "Reading your configuration."
     }, undefined, false, undefined, this)
@@ -34453,44 +35319,61 @@ var isCatalog = (value) => isRecord(value) && Array.isArray(value.meta) && Array
 var isTsState = (value) => isRecord(value) && Array.isArray(value.options);
 var isPrettierState = (value) => isRecord(value) && Array.isArray(value.options);
 var isAbsoluteState = (value) => isRecord(value) && Array.isArray(value.fields);
+var isAuthState = (value) => isRecord(value) && Array.isArray(value.features);
 var isPackageState = (value) => isRecord(value) && Array.isArray(value.scripts) && Array.isArray(value.fields);
 var renderPanel = (panel, data) => {
   if (panel === "eslint") {
-    return isCatalog(data) && data.configPath ? /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(EslintPanel, {
+    return isCatalog(data) && data.configPath ? /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(EslintPanel, {
       catalog: data
-    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(Message, {
+    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Message, {
       body: "No flat ESLint config (eslint.config.{js,mjs,cjs,ts}) was found in this project.",
       title: "No ESLint config"
     }, undefined, false, undefined, this);
   }
   if (panel === "tsconfig") {
-    return isTsState(data) && data.configPath ? /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(TsconfigPanel, {
+    return isTsState(data) && data.configPath ? /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(TsconfigPanel, {
       state: data
-    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(Message, {
+    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Message, {
       body: "No tsconfig.json or jsconfig.json was found in this project.",
       title: "No tsconfig found"
     }, undefined, false, undefined, this);
   }
   if (panel === "prettier") {
-    return isPrettierState(data) && data.editable ? /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(PrettierPanel, {
+    return isPrettierState(data) && data.editable ? /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(PrettierPanel, {
       state: data
-    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(Message, {
+    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Message, {
       body: "Prettier isn't installed, or your config uses a JS/YAML format this editor can't rewrite. Switch to .prettierrc.json to edit it here.",
       title: "Prettier unavailable"
     }, undefined, false, undefined, this);
   }
   if (panel === "absolute") {
-    return isAbsoluteState(data) && data.configPath ? /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(AbsoluteConfigPanel, {
+    return isAbsoluteState(data) && data.configPath ? /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(AbsoluteConfigPanel, {
+      state: data
+    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Message, {
+      body: "No absolute.config.ts was found. Run with --config <path> to point at one.",
+      title: "No absolute.config"
+    }, undefined, false, undefined, this);
+  }
+  if (panel === "integrations") {
+    return isAbsoluteState(data) && data.configPath ? /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(IntegrationsPanel, {
       state: data
-    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(Message, {
+    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Message, {
       body: "No absolute.config.ts was found. Run with --config <path> to point at one.",
       title: "No absolute.config"
     }, undefined, false, undefined, this);
   }
+  if (panel === "auth") {
+    return isAuthState(data) ? /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(AuthPanel, {
+      state: data
+    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Message, {
+      body: "Couldn't read the @absolutejs/auth setup for this project.",
+      title: "Auth unavailable"
+    }, undefined, false, undefined, this);
+  }
   if (panel === "package") {
-    return isPackageState(data) && data.configPath ? /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(PackageJsonPanel, {
+    return isPackageState(data) && data.configPath ? /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(PackageJsonPanel, {
       state: data
-    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(Message, {
+    }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Message, {
       body: "No package.json was found in this project.",
       title: "No package.json"
     }, undefined, false, undefined, this);
@@ -34498,9 +35381,9 @@ var renderPanel = (panel, data) => {
   return null;
 };
 var PanelHost = ({ panel }) => {
-  const [data, setData] = import_react7.useState(null);
-  const [phase, setPhase] = import_react7.useState("loading");
-  import_react7.useEffect(() => {
+  const [data, setData] = import_react8.useState(null);
+  const [phase, setPhase] = import_react8.useState("loading");
+  import_react8.useEffect(() => {
     let active = true;
     setPhase("loading");
     fetch(ENDPOINTS[panel]).then((response) => response.json()).then((result) => {
@@ -34517,11 +35400,11 @@ var PanelHost = ({ panel }) => {
     };
   }, [panel]);
   if (phase === "loading")
-    return /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(Skeleton, {
+    return /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Skeleton, {
       label: LABELS[panel]
     }, undefined, false, undefined, this);
   if (phase === "error") {
-    return /* @__PURE__ */ jsx_dev_runtime7.jsxDEV(Message, {
+    return /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Message, {
       body: "The config server didn't respond \u2014 check the terminal where it's running.",
       title: "Couldn't load"
     }, undefined, false, undefined, this);
@@ -35043,6 +35926,54 @@ var CONFIG_CSS = `
 .fe-raw { width: 100%; }
 .fe-raw .opts-input { width: 100%; }
 
+/* ---- integrations panel ---- */
+.intg-note {
+	font-size: 11.5px;
+	color: var(--warn);
+	margin-top: 6px;
+	max-width: 64ch;
+	line-height: 1.45;
+}
+.intg-code {
+	font-family: var(--mono);
+	font-size: 11.5px;
+	color: var(--accent-dim);
+	background: var(--bg);
+	border: 1px solid var(--border);
+	border-radius: 7px;
+	padding: 7px 10px;
+	margin-top: 8px;
+	overflow-x: auto;
+	white-space: pre;
+}
+
+/* ---- auth panel ---- */
+.auth-banner {
+	font-size: 12px;
+	color: var(--dim);
+	background: var(--panel);
+	border: 1px solid var(--border);
+	border-radius: 9px;
+	padding: 10px 14px;
+	margin-bottom: 18px;
+	line-height: 1.5;
+}
+.auth-banner.warn { color: var(--warn); border-color: rgba(240, 180, 41, 0.25); }
+.auth-banner code { color: var(--accent-dim); }
+.auth-chips { display: flex; flex-wrap: wrap; gap: 7px; }
+.auth-chip {
+	font-family: var(--mono);
+	font-size: 11px;
+	color: var(--dim);
+	background: var(--bg);
+	border: 1px solid var(--border);
+	border-radius: 7px;
+	padding: 4px 9px;
+}
+.auth-links { display: flex; flex-wrap: wrap; gap: 14px; margin-top: 10px; }
+.auth-link { font-size: 12px; color: var(--accent); text-decoration: none; }
+.auth-link:hover { text-decoration: underline; }
+
 @media (max-width: 720px) {
 	.cfg { flex-direction: column; }
 	.cfg-nav {
@@ -35064,6 +35995,18 @@ var CONFIG_PANELS = [
     label: "absolute.config",
     status: "ready"
   },
+  {
+    blurb: "Official Elysia plugins",
+    id: "integrations",
+    label: "Integrations",
+    status: "ready"
+  },
+  {
+    blurb: "@absolutejs/auth setup",
+    id: "auth",
+    label: "Auth",
+    status: "ready"
+  },
   {
     blurb: "Scripts & metadata",
     id: "package",
@@ -35092,27 +36035,27 @@ var CONFIG_PANELS = [
 var DEFAULT_PANEL = "absolute";
 
 // src/cli/config/page/ConfigShell.tsx
-var jsx_dev_runtime8 = __toESM(require_jsx_dev_runtime(), 1);
-var NavItem = ({ active, panel }) => /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("a", {
+var jsx_dev_runtime10 = __toESM(require_jsx_dev_runtime(), 1);
+var NavItem = ({ active, panel }) => /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("a", {
   className: "cfg-item",
   "data-active": active,
   "data-soon": panel.status === "soon",
   href: `/${panel.id}`,
   children: [
-    /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
+    /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("span", {
       className: "cfg-item-top",
       children: [
-        /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
+        /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("span", {
           className: "cfg-item-name",
           children: panel.label
         }, undefined, false, undefined, this),
-        panel.status === "soon" && /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
+        panel.status === "soon" && /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("span", {
           className: "cfg-soon",
           children: "soon"
         }, undefined, false, undefined, this)
       ]
     }, undefined, true, undefined, this),
-    /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
+    /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("span", {
       className: "cfg-item-blurb",
       children: panel.blurb
     }, undefined, false, undefined, this)
@@ -35121,74 +36064,74 @@ var NavItem = ({ active, panel }) => /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("a"
 var ConfigShell = ({ panel }) => {
   const active = CONFIG_PANELS.find((entry) => entry.id === panel);
   const activeLabel = active?.label ?? "Config";
-  return /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("html", {
+  return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("html", {
     lang: "en",
     children: [
-      /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("head", {
+      /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("head", {
         children: [
-          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("meta", {
+          /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("meta", {
             charSet: "utf-8"
           }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("meta", {
+          /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("meta", {
             content: "width=device-width, initial-scale=1",
             name: "viewport"
           }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("title", {
+          /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("title", {
             children: `Absolute Config \xB7 ${activeLabel}`
           }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("link", {
+          /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("link", {
             href: "https://fonts.googleapis.com",
             rel: "preconnect"
           }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("link", {
+          /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("link", {
             crossOrigin: "anonymous",
             href: "https://fonts.gstatic.com",
             rel: "preconnect"
           }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("link", {
+          /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("link", {
             href: "https://fonts.googleapis.com/css2?family=Instrument+Serif:ital@0;1&family=JetBrains+Mono:wght@400;500&display=swap",
             rel: "stylesheet"
           }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("style", {
+          /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("style", {
             dangerouslySetInnerHTML: {
               __html: ESLINT_CSS + TSCONFIG_CSS + CONFIG_CSS
             }
           }, undefined, false, undefined, this)
         ]
       }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("body", {
-        children: /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
+      /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("body", {
+        children: /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("div", {
           className: "cfg",
           children: [
-            /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("aside", {
+            /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("aside", {
               className: "cfg-nav",
               children: [
-                /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
+                /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("div", {
                   className: "cfg-brand",
                   children: [
-                    /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
+                    /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("span", {
                       className: "cfg-word",
                       children: [
                         "absolute ",
-                        /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("em", {
+                        /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("em", {
                           children: "config"
                         }, undefined, false, undefined, this)
                       ]
                     }, undefined, true, undefined, this),
-                    /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("span", {
+                    /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("span", {
                       className: "cfg-tag",
                       children: "project tooling"
                     }, undefined, false, undefined, this)
                   ]
                 }, undefined, true, undefined, this),
-                /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("nav", {
+                /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("nav", {
                   className: "cfg-panels",
                   children: [
-                    /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("div", {
+                    /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("div", {
                       className: "cfg-rail-label",
                       children: "Panels"
                     }, undefined, false, undefined, this),
-                    CONFIG_PANELS.map((entry) => /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(NavItem, {
+                    CONFIG_PANELS.map((entry) => /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(NavItem, {
                       active: entry.id === panel,
                       panel: entry
                     }, entry.id, false, undefined, this))
@@ -35196,9 +36139,9 @@ var ConfigShell = ({ panel }) => {
                 }, undefined, true, undefined, this)
               ]
             }, undefined, true, undefined, this),
-            /* @__PURE__ */ jsx_dev_runtime8.jsxDEV("main", {
+            /* @__PURE__ */ jsx_dev_runtime10.jsxDEV("main", {
               className: "cfg-main",
-              children: /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(PanelHost, {
+              children: /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(PanelHost, {
                 panel
               }, undefined, false, undefined, this)
             }, undefined, false, undefined, this)
@@ -36817,14 +37760,15 @@ var packageOps = () => Promise.all([
   Promise.resolve().then(() => (init_editPackageJson(), exports_editPackageJson)),
   Promise.resolve().then(() => (init_resolvePackageJson(), exports_resolvePackageJson))
 ]);
+var authOps = () => Promise.resolve().then(() => (init_resolveAuthState(), exports_resolveAuthState));
 var CLIENT_ROUTE = "/config-client.js";
 var readVersion = () => {
   for (const candidate of [
-    resolve9(import.meta.dir, "..", "..", "..", "package.json"),
-    resolve9(import.meta.dir, "..", "..", "..", "..", "package.json")
+    resolve10(import.meta.dir, "..", "..", "..", "package.json"),
+    resolve10(import.meta.dir, "..", "..", "..", "..", "package.json")
   ]) {
     try {
-      const pkg = JSON.parse(readFileSync14(candidate, "utf-8"));
+      const pkg = JSON.parse(readFileSync15(candidate, "utf-8"));
       if (typeof pkg?.version === "string")
         return pkg.version;
     } catch {}
@@ -36846,8 +37790,8 @@ var resolvePort = (args) => {
 };
 var resolveHost = (args) => flagValue(args, "--host") || process.env.ABSOLUTE_CONFIG_HOST || CONFIG_DEFAULT_HOST;
 var fileScopeOf = (query) => typeof query.file === "string" ? query.file : undefined;
-var distClientBundle = resolve9(import.meta.dir, "client.js");
-var sourceClientEntry = resolve9(import.meta.dir, "client.tsx");
+var distClientBundle = resolve10(import.meta.dir, "client.js");
+var sourceClientEntry = resolve10(import.meta.dir, "client.tsx");
 var cachedClientBundle = null;
 var buildClientBundle = async () => {
   const built = await Bun.build({
@@ -36868,7 +37812,7 @@ var buildClientBundle = async () => {
 var getClientBundle = async () => {
   if (cachedClientBundle !== null)
     return cachedClientBundle;
-  cachedClientBundle = existsSync10(distClientBundle) ? readFileSync14(distClientBundle, "utf-8") : await buildClientBundle();
+  cachedClientBundle = existsSync11(distClientBundle) ? readFileSync15(distClientBundle, "utf-8") : await buildClientBundle();
   return cachedClientBundle;
 };
 var renderShell = (panel) => handleReactPageRequest({
@@ -37079,7 +38023,7 @@ var launchConfig = async (args, cwd = process.cwd()) => {
   const configOverride = flagValue(args, "--config");
   killStaleProcesses(port);
   const cert = httpsRequested ? ensureConfigCert(host) : null;
-  const app = new Elysia2().get("/", () => renderShell(DEFAULT_PANEL)).get("/eslint", () => renderShell("eslint")).get("/tsconfig", () => renderShell("tsconfig")).get("/prettier", () => renderShell("prettier")).get("/absolute", () => renderShell("absolute")).get("/package", () => renderShell("package")).get(CLIENT_ROUTE, async () => {
+  const app = new Elysia2().get("/", () => renderShell(DEFAULT_PANEL)).get("/eslint", () => renderShell("eslint")).get("/tsconfig", () => renderShell("tsconfig")).get("/prettier", () => renderShell("prettier")).get("/absolute", () => renderShell("absolute")).get("/integrations", () => renderShell("integrations")).get("/auth", () => renderShell("auth")).get("/package", () => renderShell("package")).get(CLIENT_ROUTE, async () => {
     const bundle = await getClientBundle();
     return new Response(bundle, {
       headers: { "Content-Type": "text/javascript; charset=utf-8" }
@@ -37096,7 +38040,10 @@ var launchConfig = async (args, cwd = process.cwd()) => {
   }).post("/api/prettier", ({ body }) => handlePrettierEdit(cwd, body)).get("/api/absolute", async () => {
     const [, { resolveAbsoluteConfigState: resolveAbsoluteConfigState2 }] = await absoluteOps();
     return resolveAbsoluteConfigState2(cwd, configOverride);
-  }).post("/api/absolute", ({ body }) => handleAbsoluteEdit(cwd, body, configOverride)).get("/api/package", async () => {
+  }).post("/api/absolute", ({ body }) => handleAbsoluteEdit(cwd, body, configOverride)).get("/api/auth", async () => {
+    const { resolveAuthState: resolveAuthState2 } = await authOps();
+    return resolveAuthState2(cwd);
+  }).get("/api/package", async () => {
     const [, { resolvePackageJsonState: resolvePackageJsonState2 }] = await packageOps();
     return resolvePackageJsonState2(cwd);
   }).post("/api/package/script", ({ body }) => handleScriptEdit(cwd, body)).post("/api/package/field", ({ body }) => handleFieldEdit(cwd, body)).listen(listenOptions(port, cert));