@abyss-project/commons-front-core 9.6.0 → 10.0.0

package/README.md

@@ -27,7 +27,7 @@ Voir la [documentation produit](https://docs.abyss-project.fr/abyss-project) pou
 
 ## RUM
 
-Le RUM navigateur d'un front (SDK `@abyss-project/monitor-browser`, peer `^1.2.0`) se démarre par `AbyssRumProvider`, monté **sous** `AbyssCookieConsentProvider` et, quand le front en a un, sous `AuthProvider` :
+Le RUM navigateur d'un front (SDK `@abyss-project/monitor-browser`, peer `^1.3.2` ; `setContact` et `setTheme` demandent la version publiée par #285 F) se démarre par `AbyssRumProvider`, monté **sous** `AbyssCookieConsentProvider`, sous le `ThemeProvider` MUI et, quand le front en a un, sous `AuthProvider` :
 
 ```tsx
 <AbyssErrorBoundary appName="abyss-cloud">
@@ -47,6 +47,10 @@ Le RUM navigateur d'un front (SDK `@abyss-project/monitor-browser`, peer `^1.2.0
 - **Acteur.** Sous `AuthProvider`, l'acteur de la session est l'id de l'utilisateur connecté, `null` à la déconnexion, inchangé pendant le chargement de la session. Sans `AuthProvider`, aucun acteur.
 - **`feedbackTicket`** (`intakeSlug`, `internalTicketSectionId`, `appName`, `sessionUrl(sessionId, offsetMs)`, `locale?()`) : chaque retour utilisateur enregistré par Monitor devient un ticket Internal Tickets, par l'intake public d'abyss-console (`fileInternalTicketIntake`, peer `@abyss-project/console` `^12.4.0`, configuré par `AbyssConsoleCore.setConfig` du front). Titre `[<appName>] Retour utilisateur` ; description : le message, l'e-mail, la route et le lien vers la session. Le déclarant est l'e-mail saisi, sinon celui de l'utilisateur connecté ; un retour anonyme sans e-mail ne crée aucun ticket et reste dans Monitor. Un échec de création est journalisé (`console.warn`) et avalé. `locale()` est relue à chaque retour : sa sous-étiquette primaire (`en-GB` → `en`) part comme `locale` de l'intake, la langue des courriels de suivi ; une langue que l'intake ne parle pas (hors `UserLanguage`) n'est pas envoyée.
 - **`onFeedbackSent`** : rappel du front, appelé pour chaque retour enregistré, après le ticket (créé, sauté ou en échec).
+- **Contact (#285 F §7).** Sous `AuthProvider`, `AbyssRum.setContact({ email, name })` reçoit l'e-mail et l'alias de l'utilisateur connecté, `null` à la déconnexion, rien pendant le chargement de la session. Le SDK le garde en mémoire, jamais dans la télémétrie : il pré-remplit « Réponse à … » du signalement et ne part qu'avec un retour. Avec `config={null}`, aucun contact n'est donné.
+- **Thème (#285 F §6.4).** Monté sous le `ThemeProvider` MUI du front, le provider passe à `AbyssRum.setTheme` l'accent (`palette.primary.main`), le rayon (`shape.borderRadius`, borné à 0–48 px) et le mode (`palette.mode`) ; un changement de mode est suivi. Les variables CSS `--abyss-monitor-accent` et `--abyss-monitor-radius` de la page, et l'apparence enregistrée sur une demande de retour, priment.
+- **« Signaler un problème » (#285 F §7).** Avec une `config` non nulle, le provider offre le signalement du SDK aux menus de compte du core placés dessous : `AccountMenu` (après les entrées de l'hôte) et le `AbyssLayoutMenu` legacy (après Facturation) montrent l'entrée « Signaler un problème » / « Report a problem », qui ferme le menu et appelle `AbyssRum.showReportDialog({ locale })` dans la langue du front (`en*` → `RumReportLocale.EN`, sinon `RumReportLocale.FR`). Sans provider ou avec `config={null}`, l'entrée n'existe pas. Elle n'apparaît que tant que `AbyssRum.isReportAvailable()` est vrai — SDK démarré, configuration de l'environnement reçue avec les retours activés (réglage « Retours utilisateurs » dans Monitor) — et le provider la réévalue à chaque `AbyssRum.onConfigChange` : absente avant la réponse de configuration et quand les retours sont coupés.
+- **Actions clés (#285 F).** `trackKeyAction(AbyssKeyActionEvent.X)` enregistre, au point de succès d'une action du front, une action RUM nommée d'après l'événement du catalogue (`board.card.completed`) : une demande de retour déclenchée par une action s'y règle. Sans RUM démarré, l'appel ne fait rien et ne lève jamais.
 - **Erreurs de rendu.** `AbyssErrorBoundary` envoie l'erreur qu'il attrape à `AbyssRum.captureError(error, { source: 'error-boundary' })` ; sans RUM démarré, l'appel ne fait rien.
 
 ### Construire les options : `buildAbyssRumProviderConfig`

package/dist/{AbyssCookieConsentProvider-D-HRRYCd.js → AbyssCookieConsentProvider-BypueFP-.js}

@@ -35,6 +35,7 @@ const Ms = (p) => p, Ks = {
     TOOLS_SHORT_LINK_COUNT: "Liens courts",
     TOOLS_SHORTLINK_RESOLUTIONS_MONTH: "Clics liens courts",
     MONITOR_WEBHOOK_INVOCATIONS_MONTH: "Webhooks Monitor / mois",
+    CONSOLE_WORKFLOW_CREDITS_MONTH: "Crédits d'automatisation Console",
     RUM_SESSIONS_MONTH: "Sessions navigateur Monitor / mois",
     REHYDRATION_CONCURRENT_JOBS: "Réhydratations simultanées",
     REHYDRATION_ACTIVE_GB: "Logs réhydratés (Go)",
@@ -92,6 +93,7 @@ const Ms = (p) => p, Ks = {
     TOOLS_SHORT_LINK_COUNT: "Short links",
     TOOLS_SHORTLINK_RESOLUTIONS_MONTH: "Short link clicks",
     MONITOR_WEBHOOK_INVOCATIONS_MONTH: "Monitor webhooks / month",
+    CONSOLE_WORKFLOW_CREDITS_MONTH: "Console automation credits",
     RUM_SESSIONS_MONTH: "Monitor browser sessions / month",
     REHYDRATION_CONCURRENT_JOBS: "Concurrent rehydrations",
     REHYDRATION_ACTIVE_GB: "Rehydrated logs (GB)",
@@ -443,6 +445,7 @@ const fm = {
       ABYSS_PLATFORM: "Plateforme",
       ABYSS_STORAGE: "Stockage",
       ABYSS_MONITOR: "Monitoring",
+      ABYSS_CONSOLE: "Automatisation",
       ABYSS_CLOUD: "Cloud",
       ABYSS_CRYPT: "Chiffrement",
       ABYSS_FORM: "Formulaires",
@@ -511,7 +514,8 @@ const fm = {
       settings: "Paramètres",
       billing: "Facturation",
       logout: "Déconnexion",
-      family: "Famille"
+      family: "Famille",
+      "report-problem": "Signaler un problème"
     },
     scope: {
       personal: "Personnel",
@@ -1017,6 +1021,7 @@ const fm = {
     service: {
       ABYSS_PLATFORM: "Plateforme",
       ABYSS_MONITOR: "Abyss Monitor",
+      ABYSS_CONSOLE: "Abyss Console",
       ABYSS_STORAGE: "Abyss Storage",
       ABYSS_CLOUD: "Abyss Cloud",
       ABYSS_CRYPT: "Abyss Crypt",
@@ -1424,6 +1429,10 @@ const fm = {
       email: {
         title: "Connexion à Abyss",
         lede: "Saisissez votre adresse e-mail : nous vous connectons, ou nous créons votre compte.",
+        "back-office": {
+          title: "Connexion au back-office",
+          lede: "Réservé aux comptes administrateurs. Saisissez votre adresse e-mail."
+        },
         label: "Adresse e-mail",
         submit: "Continuer",
         passkey: "Se connecter avec une passkey",
@@ -1531,6 +1540,7 @@ const fm = {
       "email-change-unavailable": "Cette adresse ne peut pas être utilisée.",
       "reauth-cancelled": "Action annulée : elle demande de confirmer votre identité.",
       "session-revoked": "Votre session a pris fin. Reconnectez-vous.",
+      "admin-required": "Cet accès est réservé aux administrateurs.",
       "ceremony-cancelled": "Opération annulée.",
       "ceremony-unsupported": "Cette méthode n’est pas disponible sur cet appareil.",
       "ceremony-no-credential": "Aucune passkey de ce compte sur cet appareil.",
@@ -1584,6 +1594,7 @@ const fm = {
         current: "Cet appareil",
         platforms: {
           web: "Navigateur",
+          admin: "Back-office",
           ios: "iPhone / iPad",
           android: "Android"
         },
@@ -1839,7 +1850,8 @@ const fm = {
       "account-menu": {
         trigger: "Compte de {name}",
         "dark-mode": "Thème sombre",
-        logout: "Se déconnecter"
+        logout: "Se déconnecter",
+        "report-problem": "Signaler un problème"
       },
       "page-header": {
         breadcrumbs: "Fil d’Ariane"
@@ -2373,6 +2385,7 @@ const fm = {
       ABYSS_PLATFORM: "Platform",
       ABYSS_STORAGE: "Storage",
       ABYSS_MONITOR: "Monitoring",
+      ABYSS_CONSOLE: "Automation",
       ABYSS_CLOUD: "Cloud",
       ABYSS_CRYPT: "Encryption",
       ABYSS_FORM: "Forms",
@@ -2441,7 +2454,8 @@ const fm = {
       settings: "Settings",
       billing: "Billing",
       logout: "Log out",
-      family: "Family"
+      family: "Family",
+      "report-problem": "Report a problem"
     },
     scope: {
       personal: "Personal",
@@ -2947,6 +2961,7 @@ const fm = {
     service: {
       ABYSS_PLATFORM: "Platform",
       ABYSS_MONITOR: "Abyss Monitor",
+      ABYSS_CONSOLE: "Abyss Console",
       ABYSS_STORAGE: "Abyss Storage",
       ABYSS_CLOUD: "Abyss Cloud",
       ABYSS_CRYPT: "Abyss Crypt",
@@ -3354,6 +3369,10 @@ const fm = {
       email: {
         title: "Sign in to Abyss",
         lede: "Enter your email address: we sign you in, or create your account.",
+        "back-office": {
+          title: "Back office sign-in",
+          lede: "For administrator accounts only. Enter your email address."
+        },
         label: "Email address",
         submit: "Continue",
         passkey: "Sign in with a passkey",
@@ -3461,6 +3480,7 @@ const fm = {
       "email-change-unavailable": "This address cannot be used.",
       "reauth-cancelled": "Action cancelled: it requires confirming it is you.",
       "session-revoked": "Your session has ended. Sign in again.",
+      "admin-required": "This access is reserved for administrators.",
       "ceremony-cancelled": "Cancelled.",
       "ceremony-unsupported": "This method is not available on this device.",
       "ceremony-no-credential": "No passkey of this account on this device.",
@@ -3514,6 +3534,7 @@ const fm = {
         current: "This device",
         platforms: {
           web: "Browser",
+          admin: "Back office",
           ios: "iPhone / iPad",
           android: "Android"
         },
@@ -3769,7 +3790,8 @@ const fm = {
       "account-menu": {
         trigger: "Account: {name}",
         "dark-mode": "Dark theme",
-        logout: "Log out"
+        logout: "Log out",
+        "report-problem": "Report a problem"
       },
       "page-header": {
         breadcrumbs: "Breadcrumb"

package/dist/{CookieConsentSettings.component-iG_abYsq.js → CookieConsentSettings.component-CYmew9vg.js}

@@ -1,7 +1,7 @@
 import { jsx as e, jsxs as a } from "react/jsx-runtime";
 import { useState as m, useEffect as C } from "react";
 import { Card as v, CardContent as b, Stack as u, Typography as o, FormControlLabel as l, Box as r, Checkbox as d, Button as M } from "@mui/material";
-import { g as R, u as x } from "./AbyssCookieConsentProvider-D-HRRYCd.js";
+import { g as R, u as x } from "./AbyssCookieConsentProvider-BypueFP-.js";
 const B = () => {
   const t = R(), { consent: i, save: y } = x(), [h, g] = m((i == null ? void 0 : i.analytics) ?? !1), [k, f] = m((i == null ? void 0 : i.marketing) ?? !1), c = i == null ? void 0 : i.analytics, n = i == null ? void 0 : i.marketing;
   return C(() => {

package/dist/auth/client/web-bridge.d.ts

@@ -1,3 +1,4 @@
+import { SessionPlatform } from '@abyss-project/main';
 import { AuthBridge } from './auth-bridge';
 export declare const GOOGLE_IDENTITY_SCRIPT_URL = "https://accounts.google.com/gsi/client";
 export declare const APPLE_ID_SCRIPT_URL = "https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1.0/en_US/appleid.auth.js";
@@ -13,6 +14,11 @@ export interface WebBridgeConfig {
     appleServiceId?: string;
     /** Return URL declared on the Services ID; required by Apple JS even in popup mode. */
     appleRedirectUri?: string;
+    /**
+     * The browser platform of the sessions this bridge opens: `WEB` (default), or `ADMIN` for the
+     * back-office, whose sessions the server tells apart from the web ones.
+     */
+    platform?: SessionPlatform.WEB | SessionPlatform.ADMIN;
 }
 /** The bridge of every web front: WebAuthn, Google Identity Services, Sign in with Apple JS. */
 export declare const createWebBridge: (config: WebBridgeConfig) => AuthBridge;

package/dist/auth/components/AuthFlow/AuthFlow.component.d.ts

@@ -1,6 +1,6 @@
 import { IAuthResult } from '@abyss-project/main';
 import { AuthFlowProviders } from '../AuthProviderButtons/AuthProviderButtons.component';
-import { AuthFlowContext, AuthFlowLegal, AuthFlowResult } from './auth-flow.types';
+import { AuthFlowContext, AuthFlowLegal, AuthFlowResult, AuthFlowVariant } from './auth-flow.types';
 export type AuthFlowProps = {
     initialEmail?: string;
     /**
@@ -12,6 +12,13 @@ export type AuthFlowProps = {
      * that token (the e-mail shown is never an editable field, there or here).
      */
     initialResult?: IAuthResult;
+    /**
+     * `false` for a front that has no sign-up (the back-office): a `SIGNUP_REQUIRED` result never
+     * opens the sign-up step, the current step shows the `admin-required` error instead.
+     */
+    allowSignup?: boolean;
+    /** `BACK_OFFICE` only changes the title and the lede of the e-mail step. */
+    variant?: AuthFlowVariant;
     context: AuthFlowContext;
     providers: AuthFlowProviders;
     /**
@@ -27,4 +34,4 @@ export type AuthFlowProps = {
  * mandatory MFA set-up for an administrator; passkey proposal. Must be rendered inside
  * `<AuthProvider>`: every session goes through its client.
  */
-export declare const AuthFlow: ({ initialEmail, initialResult, context, providers, onAuthenticated, legal, }: AuthFlowProps) => import("react/jsx-runtime").JSX.Element;
+export declare const AuthFlow: ({ initialEmail, initialResult, allowSignup, variant, context, providers, onAuthenticated, legal, }: AuthFlowProps) => import("react/jsx-runtime").JSX.Element;

package/dist/auth/components/AuthFlow/auth-flow.types.d.ts

@@ -22,6 +22,11 @@ export interface AuthFlowResult {
     /** Always `false` once the flow ends: an enrolment it required was completed inside it. */
     mfaEnrollmentRequired: boolean;
 }
+/** The wording of the e-mail step: the usual sign-in, or the back-office's. */
+export declare enum AuthFlowVariant {
+    APP = "app",
+    BACK_OFFICE = "back-office"
+}
 export declare enum AuthFlowStepKind {
     EMAIL = "email",
     CODE = "code",

package/dist/auth/components/AuthFlow/steps/EmailStep.component.d.ts

@@ -1,7 +1,10 @@
 import { ReactNode } from 'react';
 import { AuthErrorKind } from '../../shared/auth-errors';
+import { AuthFlowVariant } from '../auth-flow.types';
 export declare const isEmailLike: (value: string) => boolean;
 export type EmailStepProps = {
+    /** `BACK_OFFICE` swaps the title and the lede; the form is the same. */
+    variant: AuthFlowVariant;
     email: string;
     onEmailChange: (email: string) => void;
     onSubmit: () => void;
@@ -19,4 +22,4 @@ export type EmailStepProps = {
     /** Google / Apple (and Discord / Slack on the web) above the form. */
     providers?: ReactNode;
 };
-export declare const EmailStep: ({ email, onEmailChange, onSubmit, busy, error, passkeySupported, onStartConditionalPasskey, onPasskey, providers, }: EmailStepProps) => import("react/jsx-runtime").JSX.Element;
+export declare const EmailStep: ({ variant, email, onEmailChange, onSubmit, busy, error, passkeySupported, onStartConditionalPasskey, onPasskey, providers, }: EmailStepProps) => import("react/jsx-runtime").JSX.Element;

package/dist/auth/components/index.d.ts

@@ -3,6 +3,7 @@ export type { AuthFlowProps } from './AuthFlow/AuthFlow.component';
 export { AuthHeroLayout, AuthHeroLayoutVariant, } from './AuthHeroLayout/AuthHeroLayout.component';
 export type { AuthHeroLayoutProps } from './AuthHeroLayout/AuthHeroLayout.component';
 export { useAuthHero } from './AuthHeroLayout/auth-hero.context';
+export { AuthFlowVariant } from './AuthFlow/auth-flow.types';
 export type { AuthFlowContext, AuthFlowLegal, AuthFlowResult, } from './AuthFlow/auth-flow.types';
 export { AuthProviderButtons, AuthProviderKind, } from './AuthProviderButtons/AuthProviderButtons.component';
 export type { AuthFlowProviders, AuthProviderButtonsProps, } from './AuthProviderButtons/AuthProviderButtons.component';

package/dist/auth/components/shared/auth-errors.d.ts

@@ -22,6 +22,7 @@ export declare enum AuthErrorKind {
     EMAIL_CHANGE_UNAVAILABLE = "email-change-unavailable",
     REAUTH_CANCELLED = "reauth-cancelled",
     SESSION_REVOKED = "session-revoked",
+    ADMIN_REQUIRED = "admin-required",
     CEREMONY_CANCELLED = "ceremony-cancelled",
     CEREMONY_UNSUPPORTED = "ceremony-unsupported",
     CEREMONY_NO_CREDENTIAL = "ceremony-no-credential",

package/dist/auth/components/shared/auth-errors.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/auth-client.js

@@ -1,4 +1,4 @@
-import { q as e, t as R, u as r, A as E, G as t, L as _, a as o, k as A, j as S, m as T, n as L, g as u, h as i, R as c, U as d, p as h, f as n, b as g, d as I, o as G, s as M, c as O, i as b, l as C, r as P, e as N, v as U } from "./use-auth.hook-oRxzI95f.js";
+import { q as e, t as R, u as r, A as E, G as t, L as _, a as o, k as A, j as S, m as T, n as L, g as u, h as i, R as c, U as d, p as h, f as n, b as g, d as I, o as G, s as M, c as O, i as b, l as C, r as P, e as N, v as U } from "./use-auth.hook-D8vfSYRv.js";
 import { a as H, A as Y, R as l, b as F, c as y, s as f } from "./token-storage-CbWrBeIP.js";
 export {
   e as APPLE_ID_SCRIPT_URL,

package/dist/components/inputs/DropZone/DropZone.d.ts

@@ -10,6 +10,11 @@ export interface DropZoneProps {
     accept?: Accept;
     /** Largest accepted file, in bytes; shown under the zone. */
     maxSize?: number;
+    /**
+     * The line under the zone, in place of the default « Taille maximale par fichier : … » that
+     * `maxSize` writes: the host's own wording of the limit. Without `maxSize`, shown all the same.
+     */
+    caption?: string;
     /** Title above the zone, which names it. */
     title?: string;
     /**
@@ -20,4 +25,4 @@ export interface DropZoneProps {
     /** Replaces the icon and the prompt inside the zone (a preview of the current file, say). */
     children?: ReactNode;
 }
-export declare function DropZone({ onDrop, multiple, accept, maxSize, title, cloudImport, children, }: DropZoneProps): import("react/jsx-runtime").JSX.Element;
+export declare function DropZone({ onDrop, multiple, accept, maxSize, caption, title, cloudImport, children, }: DropZoneProps): import("react/jsx-runtime").JSX.Element;

package/dist/components/layers/ProductTour/product-tour-geometry.d.ts

@@ -39,6 +39,8 @@ export declare const placeBubble: (target: TourRect, bubble: TourSize, viewport:
 export declare const centerBubble: (bubble: TourSize, viewport: TourSize, margin: number) => Pick<BubblePlacement, "top" | "left">;
 /** The rectangle `rect` grown by `by` px on every side. */
 export declare const inflateRect: (rect: TourRect, by: number) => TourRect;
+/** The part of `rect` that lies `inset` px or more inside the viewport. */
+export declare const clampRect: (rect: TourRect, viewport: TourSize, inset: number) => TourRect;
 export declare const toTourRect: (rect: DOMRectReadOnly) => TourRect;
 export declare const sameRect: (a: TourRect | null, b: TourRect | null) => boolean;
 export declare const sameSize: (a: TourSize, b: TourSize) => boolean;

package/dist/components/structure/AccountMenu/AccountMenu.d.ts

@@ -22,6 +22,7 @@ export interface AccountMenuProps {
 }
 /**
  * The account entry of the top bar: the viewer's avatar opens a menu with their name and email,
- * the host's entries (account, settings, billing…), the dark theme switch and the logout.
+ * the host's entries (account, settings, billing…), « Report a problem » under an installed
+ * `AbyssRumProvider`, the dark theme switch and the logout.
  */
 export declare function AccountMenu({ user, themeMode, onThemeModeChange, items, onLogout, }: AccountMenuProps): import("react/jsx-runtime").JSX.Element;

package/dist/components/structure/AppShell/app-shell.types.d.ts

@@ -39,6 +39,11 @@ export interface NavItem {
      * drawer, absent from the rail.
      */
     action?: NavItemAction;
+    /**
+     * A sub-entry of the product entry above it: drawn without its icon, indented under it, in the
+     * sidebar and the drawer, and absent from the rail. `icon` stays required but is not rendered.
+     */
+    nested?: boolean;
 }
 export interface NavSection {
     id: string;

package/dist/cookie-consent.js

@@ -1,5 +1,5 @@
-import { A as e, c as a, C as n, D as C, R as i, V as t, d as r, f as A, r as k, e as c, u as l, b, a as f, w as u } from "./AbyssCookieConsentProvider-D-HRRYCd.js";
-import { C as E } from "./CookieConsentSettings.component-iG_abYsq.js";
+import { A as e, c as a, C as n, D as C, R as i, V as t, d as r, f as A, r as k, e as c, u as l, b, a as f, w as u } from "./AbyssCookieConsentProvider-BypueFP-.js";
+import { C as E } from "./CookieConsentSettings.component-CYmew9vg.js";
 export {
   e as AbyssCookieConsentProvider,
   a as COOKIE_NAME,