@arcfoundry/core 0.1.2

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/access-approval.js

@@ -0,0 +1,10 @@
+export const accessApprovalSection = `        <div className="approval">
+          <div>
+            <h2>Access approval</h2>
+            <p>Restricted access changes require admin authority and an audit trail.</p>
+          </div>
+          <button type="button" disabled={!canApprove} onClick={approveAccess}>
+            Approve exception
+          </button>
+        </div>`;
+//# sourceMappingURL=access-approval.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/access-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-approval.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/access-approval.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;eAQtB,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/access-panels.d.ts

@@ -0,0 +1 @@
+export declare const accessPanelsSection = "        <div className=\"panels\">\n          <section className=\"panel\" aria-labelledby=\"visible-title\">\n            <h2 id=\"visible-title\">Visible projects</h2>\n            <ul className=\"project-list\">\n              {allowed.map((project) => (\n                <li key={project.id}>\n                  <strong>{project.name}</strong>\n                  <span>{project.owner}</span>\n                  <small>{permissionMessage(role, project)}</small>\n                </li>\n              ))}\n            </ul>\n          </section>\n\n          <section className=\"panel panel--restricted\" aria-labelledby=\"restricted-title\">\n            <h2 id=\"restricted-title\">Restricted projects</h2>\n            {denied.length > 0 ? (\n              <ul className=\"project-list\">\n                {denied.map((project) => (\n                  <li key={project.id}>\n                    <strong>{project.name}</strong>\n                    <span>{project.sensitivity}</span>\n                    <small>{permissionMessage(role, project)}</small>\n                  </li>\n                ))}\n              </ul>\n            ) : (\n              <p className=\"empty\">No projects are restricted for this role.</p>\n            )}\n          </section>\n        </div>";

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/access-panels.js

@@ -0,0 +1,32 @@
+export const accessPanelsSection = `        <div className="panels">
+          <section className="panel" aria-labelledby="visible-title">
+            <h2 id="visible-title">Visible projects</h2>
+            <ul className="project-list">
+              {allowed.map((project) => (
+                <li key={project.id}>
+                  <strong>{project.name}</strong>
+                  <span>{project.owner}</span>
+                  <small>{permissionMessage(role, project)}</small>
+                </li>
+              ))}
+            </ul>
+          </section>
+
+          <section className="panel panel--restricted" aria-labelledby="restricted-title">
+            <h2 id="restricted-title">Restricted projects</h2>
+            {denied.length > 0 ? (
+              <ul className="project-list">
+                {denied.map((project) => (
+                  <li key={project.id}>
+                    <strong>{project.name}</strong>
+                    <span>{project.sensitivity}</span>
+                    <small>{permissionMessage(role, project)}</small>
+                  </li>
+                ))}
+              </ul>
+            ) : (
+              <p className="empty">No projects are restricted for this role.</p>
+            )}
+          </section>
+        </div>`;
+//# sourceMappingURL=access-panels.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/access-panels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-panels.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/access-panels.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA8BpB,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/app.d.ts

@@ -0,0 +1 @@
+export declare const appSection = "function App() {\n  const [role, setRole] = useState<Role>(\"viewer\");\n  const [auditLog, setAuditLog] = useState(\"No access changes requested.\");\n  const allowed = useMemo(() => visibleProjects(role), [role]);\n  const denied = useMemo(() => deniedProjects(role), [role]);\n  const canApprove = canApproveAccess(role);\n\n  function approveAccess() {\n    if (!canApprove) {\n      setAuditLog(\"Denied: only admins can approve restricted access.\");\n      return;\n    }\n    setAuditLog(\"Approved: admin granted a reviewed access exception.\");\n  }\n\n  return (\n    <main className=\"page\">\n      <section className=\"workspace\" aria-labelledby=\"workspace-title\">\n        <div className=\"workspace__header\">\n          <p className=\"eyebrow\">Permission-sensitive verification</p>\n          <h1 id=\"workspace-title\">Client workspace access</h1>\n          <p>\n            Switch roles to verify that confidential projects and restricted actions stay gated.\n          </p>\n        </div>\n\n        <fieldset className=\"role-picker\">\n          <legend>Current role</legend>\n          {roles.map((option) => (\n            <label key={option}>\n              <input\n                checked={role === option}\n                name=\"role\"\n                type=\"radio\"\n                value={option}\n                onChange={() => {\n                  setRole(option);\n                  setAuditLog(\"Role changed to \" + option + \".\");\n                }}\n              />\n              <span>{option}</span>\n            </label>\n          ))}\n        </fieldset>\n\n        <div className=\"panels\">\n          <section className=\"panel\" aria-labelledby=\"visible-title\">\n            <h2 id=\"visible-title\">Visible projects</h2>\n            <ul className=\"project-list\">\n              {allowed.map((project) => (\n                <li key={project.id}>\n                  <strong>{project.name}</strong>\n                  <span>{project.owner}</span>\n                  <small>{permissionMessage(role, project)}</small>\n                </li>\n              ))}\n            </ul>\n          </section>\n\n          <section className=\"panel panel--restricted\" aria-labelledby=\"restricted-title\">\n            <h2 id=\"restricted-title\">Restricted projects</h2>\n            {denied.length > 0 ? (\n              <ul className=\"project-list\">\n                {denied.map((project) => (\n                  <li key={project.id}>\n                    <strong>{project.name}</strong>\n                    <span>{project.sensitivity}</span>\n                    <small>{permissionMessage(role, project)}</small>\n                  </li>\n                ))}\n              </ul>\n            ) : (\n              <p className=\"empty\">No projects are restricted for this role.</p>\n            )}\n          </section>\n        </div>\n\n        <div className=\"approval\">\n          <div>\n            <h2>Access approval</h2>\n            <p>Restricted access changes require admin authority and an audit trail.</p>\n          </div>\n          <button type=\"button\" disabled={!canApprove} onClick={approveAccess}>\n            Approve exception\n          </button>\n        </div>\n\n        <p className=\"audit\" role=\"status\">\n          {auditLog}\n        </p>\n      </section>\n    </main>\n  );\n}";

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/app.js

@@ -0,0 +1,29 @@
+import { accessApprovalSection } from "./access-approval.js";
+import { accessPanelsSection } from "./access-panels.js";
+import { approvalHandlerSection } from "./approval-handler.js";
+import { auditStatusSection } from "./audit-status.js";
+import { rolePickerSection } from "./role-picker.js";
+import { workspaceHeaderSection } from "./workspace-header.js";
+import { workspaceStateSection } from "./workspace-state.js";
+export const appSection = `function App() {
+${workspaceStateSection}
+
+${approvalHandlerSection}
+
+  return (
+    <main className="page">
+      <section className="workspace" aria-labelledby="workspace-title">
+${workspaceHeaderSection}
+
+${rolePickerSection}
+
+${accessPanelsSection}
+
+${accessApprovalSection}
+
+${auditStatusSection}
+      </section>
+    </main>
+  );
+}`;
+//# sourceMappingURL=app.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,UAAU,GAAG;EACxB,qBAAqB;;EAErB,sBAAsB;;;;;EAKtB,sBAAsB;;EAEtB,iBAAiB;;EAEjB,mBAAmB;;EAEnB,qBAAqB;;EAErB,kBAAkB;;;;EAIlB,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/approval-handler.d.ts

@@ -0,0 +1 @@
+export declare const approvalHandlerSection = "  function approveAccess() {\n    if (!canApprove) {\n      setAuditLog(\"Denied: only admins can approve restricted access.\");\n      return;\n    }\n    setAuditLog(\"Approved: admin granted a reviewed access exception.\");\n  }";

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/approval-handler.js

@@ -0,0 +1,8 @@
+export const approvalHandlerSection = `  function approveAccess() {
+    if (!canApprove) {
+      setAuditLog("Denied: only admins can approve restricted access.");
+      return;
+    }
+    setAuditLog("Approved: admin granted a reviewed access exception.");
+  }`;
+//# sourceMappingURL=approval-handler.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/approval-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-handler.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/approval-handler.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;IAMlC,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/audit-status.d.ts

@@ -0,0 +1 @@
+export declare const auditStatusSection = "        <p className=\"audit\" role=\"status\">\n          {auditLog}\n        </p>";

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/audit-status.js

@@ -0,0 +1,4 @@
+export const auditStatusSection = `        <p className="audit" role="status">
+          {auditLog}
+        </p>`;
+//# sourceMappingURL=audit-status.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/audit-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-status.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/audit-status.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG;;aAErB,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/imports.d.ts

@@ -0,0 +1 @@
+export declare const importsSection = "import React, { useMemo, useState } from \"react\";\nimport { createRoot } from \"react-dom/client\";\nimport {\n  type Role,\n  canApproveAccess,\n  deniedProjects,\n  permissionMessage,\n  visibleProjects,\n} from \"./auth-policy\";\nimport \"./styles.css\";";

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/imports.js

@@ -0,0 +1,11 @@
+export const importsSection = `import React, { useMemo, useState } from "react";
+import { createRoot } from "react-dom/client";
+import {
+  type Role,
+  canApproveAccess,
+  deniedProjects,
+  permissionMessage,
+  visibleProjects,
+} from "./auth-policy";
+import "./styles.css";`;
+//# sourceMappingURL=imports.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/imports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imports.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/imports.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;uBASP,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/role-picker.d.ts

@@ -0,0 +1 @@
+export declare const rolePickerSection = "        <fieldset className=\"role-picker\">\n          <legend>Current role</legend>\n          {roles.map((option) => (\n            <label key={option}>\n              <input\n                checked={role === option}\n                name=\"role\"\n                type=\"radio\"\n                value={option}\n                onChange={() => {\n                  setRole(option);\n                  setAuditLog(\"Role changed to \" + option + \".\");\n                }}\n              />\n              <span>{option}</span>\n            </label>\n          ))}\n        </fieldset>";

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/role-picker.js

@@ -0,0 +1,19 @@
+export const rolePickerSection = `        <fieldset className="role-picker">
+          <legend>Current role</legend>
+          {roles.map((option) => (
+            <label key={option}>
+              <input
+                checked={role === option}
+                name="role"
+                type="radio"
+                value={option}
+                onChange={() => {
+                  setRole(option);
+                  setAuditLog("Role changed to " + option + ".");
+                }}
+              />
+              <span>{option}</span>
+            </label>
+          ))}
+        </fieldset>`;
+//# sourceMappingURL=role-picker.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/role-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-picker.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/role-picker.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;oBAiBb,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/roles.d.ts

@@ -0,0 +1 @@
+export declare const rolesSection = "const roles: Role[] = [\"viewer\", \"manager\", \"admin\"];";

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/roles.js

@@ -0,0 +1,2 @@
+export const rolesSection = `const roles: Role[] = ["viewer", "manager", "admin"];`;
+//# sourceMappingURL=roles.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/roles.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,uDAAuD,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/workspace-header.d.ts

@@ -0,0 +1 @@
+export declare const workspaceHeaderSection = "        <div className=\"workspace__header\">\n          <p className=\"eyebrow\">Permission-sensitive verification</p>\n          <h1 id=\"workspace-title\">Client workspace access</h1>\n          <p>\n            Switch roles to verify that confidential projects and restricted actions stay gated.\n          </p>\n        </div>";

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/workspace-header.js

@@ -0,0 +1,8 @@
+export const workspaceHeaderSection = `        <div className="workspace__header">
+          <p className="eyebrow">Permission-sensitive verification</p>
+          <h1 id="workspace-title">Client workspace access</h1>
+          <p>
+            Switch roles to verify that confidential projects and restricted actions stay gated.
+          </p>
+        </div>`;
+//# sourceMappingURL=workspace-header.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/workspace-header.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-header.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/workspace-header.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;eAMvB,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/workspace-state.d.ts

@@ -0,0 +1 @@
+export declare const workspaceStateSection = "  const [role, setRole] = useState<Role>(\"viewer\");\n  const [auditLog, setAuditLog] = useState(\"No access changes requested.\");\n  const allowed = useMemo(() => visibleProjects(role), [role]);\n  const denied = useMemo(() => deniedProjects(role), [role]);\n  const canApprove = canApproveAccess(role);";

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/workspace-state.js

@@ -0,0 +1,6 @@
+export const workspaceStateSection = `  const [role, setRole] = useState<Role>("viewer");
+  const [auditLog, setAuditLog] = useState("No access changes requested.");
+  const allowed = useMemo(() => visibleProjects(role), [role]);
+  const denied = useMemo(() => deniedProjects(role), [role]);
+  const canApprove = canApproveAccess(role);`;
+//# sourceMappingURL=workspace-state.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/main-template/workspace-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-state.js","sourceRoot":"","sources":["../../../../../../src/demo-project/definitions/auth-sensitive/templates/main-template/workspace-state.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;6CAIQ,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/playwright-config-ts.d.ts

@@ -0,0 +1 @@
+export declare const playwrightConfigContent = "import { defineConfig, devices } from \"@playwright/test\";\n\nexport default defineConfig({\n  testDir: \"./e2e\",\n  use: {\n    baseURL: \"http://127.0.0.1:4176\",\n    trace: \"retain-on-failure\",\n  },\n  webServer: {\n    command:\n      \"pnpm --filter @arcfoundry/verification-auth-sensitive build && pnpm --filter @arcfoundry/verification-auth-sensitive exec vite preview --host 127.0.0.1 --port 4176\",\n    url: \"http://127.0.0.1:4176\",\n    reuseExistingServer: !process.env.CI,\n    timeout: 120000,\n  },\n  projects: [\n    { name: \"chromium\", use: { ...devices[\"Desktop Chrome\"] } },\n    { name: \"mobile\", use: { ...devices[\"Pixel 5\"] } },\n  ],\n});\n";

package/dist/demo-project/definitions/auth-sensitive/templates/playwright-config-ts.js

@@ -0,0 +1,22 @@
+export const playwrightConfigContent = `import { defineConfig, devices } from "@playwright/test";
+
+export default defineConfig({
+  testDir: "./e2e",
+  use: {
+    baseURL: "http://127.0.0.1:4176",
+    trace: "retain-on-failure",
+  },
+  webServer: {
+    command:
+      "pnpm --filter @arcfoundry/verification-auth-sensitive build && pnpm --filter @arcfoundry/verification-auth-sensitive exec vite preview --host 127.0.0.1 --port 4176",
+    url: "http://127.0.0.1:4176",
+    reuseExistingServer: !process.env.CI,
+    timeout: 120000,
+  },
+  projects: [
+    { name: "chromium", use: { ...devices["Desktop Chrome"] } },
+    { name: "mobile", use: { ...devices["Pixel 5"] } },
+  ],
+});
+`;
+//# sourceMappingURL=playwright-config-ts.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/playwright-config-ts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright-config-ts.js","sourceRoot":"","sources":["../../../../../src/demo-project/definitions/auth-sensitive/templates/playwright-config-ts.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;CAoBtC,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/src-access-approval-tsx.d.ts

@@ -0,0 +1 @@
+export declare const srcAccessApprovalContent: string;

package/dist/demo-project/definitions/auth-sensitive/templates/src-access-approval-tsx.js

@@ -0,0 +1,21 @@
+import { sourceFile } from "../../../source-template.js";
+export const srcAccessApprovalContent = sourceFile(`export function AccessApproval({
+  canApprove,
+  onApprove,
+}: {
+  canApprove: boolean;
+  onApprove: () => void;
+}) {
+  return (
+    <div className="approval">
+      <div>
+        <h2>Access approval</h2>
+        <p>Restricted access changes require admin authority and an audit trail.</p>
+      </div>
+      <button type="button" disabled={!canApprove} onClick={onApprove}>
+        Approve exception
+      </button>
+    </div>
+  );
+}`);
+//# sourceMappingURL=src-access-approval-tsx.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/src-access-approval-tsx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-access-approval-tsx.js","sourceRoot":"","sources":["../../../../../src/demo-project/definitions/auth-sensitive/templates/src-access-approval-tsx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAAC;;;;;;;;;;;;;;;;;;EAkBjD,CAAC,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/src-app-tsx.d.ts

@@ -0,0 +1 @@
+export declare const srcAppContent: string;

package/dist/demo-project/definitions/auth-sensitive/templates/src-app-tsx.js

@@ -0,0 +1,49 @@
+import { sourceFile } from "../../../source-template.js";
+export const srcAppContent = sourceFile(`import { useMemo, useState } from "react";
+import type { Role } from "./auth-policy";
+import { canApproveAccess, deniedProjects, visibleProjects } from "./auth-policy";
+import { AccessApproval } from "./access-approval";
+import { ProjectPanels } from "./project-panels";
+import { RolePicker } from "./role-picker";
+
+export function App() {
+  const [role, setRole] = useState<Role>("viewer");
+  const [auditLog, setAuditLog] = useState("No access changes requested.");
+  const allowed = useMemo(() => visibleProjects(role), [role]);
+  const denied = useMemo(() => deniedProjects(role), [role]);
+  const canApprove = canApproveAccess(role);
+
+  function approveAccess() {
+    if (!canApprove) {
+      setAuditLog("Denied: only admins can approve restricted access.");
+      return;
+    }
+    setAuditLog("Approved: admin granted a reviewed access exception.");
+  }
+
+  function changeRole(nextRole: Role) {
+    setRole(nextRole);
+    setAuditLog("Role changed to " + nextRole + ".");
+  }
+
+  return (
+    <main className="page">
+      <section className="workspace" aria-labelledby="workspace-title">
+        <div className="workspace__header">
+          <p className="eyebrow">Permission-sensitive verification</p>
+          <h1 id="workspace-title">Client workspace access</h1>
+          <p>
+            Switch roles to verify that confidential projects and restricted actions stay gated.
+          </p>
+        </div>
+        <RolePicker role={role} onRoleChange={changeRole} />
+        <ProjectPanels allowed={allowed} denied={denied} role={role} />
+        <AccessApproval canApprove={canApprove} onApprove={approveAccess} />
+        <p className="audit" role="status">
+          {auditLog}
+        </p>
+      </section>
+    </main>
+  );
+}`);
+//# sourceMappingURL=src-app-tsx.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/src-app-tsx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-app-tsx.js","sourceRoot":"","sources":["../../../../../src/demo-project/definitions/auth-sensitive/templates/src-app-tsx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8CtC,CAAC,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/src-auth-policy-ts.d.ts

@@ -0,0 +1 @@
+export declare const srcAuthPolicyContent = "export type Role = \"viewer\" | \"manager\" | \"admin\";\n\nexport type ProtectedProject = {\n  id: string;\n  name: string;\n  owner: string;\n  sensitivity: \"standard\" | \"confidential\" | \"restricted\";\n  requiredRole: Role;\n};\n\nconst roleRank: Record<Role, number> = {\n  viewer: 1,\n  manager: 2,\n  admin: 3,\n};\n\nexport const protectedProjects: ProtectedProject[] = [\n  {\n    id: \"launch\",\n    name: \"Launch site refresh\",\n    owner: \"Growth\",\n    sensitivity: \"standard\",\n    requiredRole: \"viewer\",\n  },\n  {\n    id: \"pipeline\",\n    name: \"Revenue pipeline dashboard\",\n    owner: \"Operations\",\n    sensitivity: \"confidential\",\n    requiredRole: \"manager\",\n  },\n  {\n    id: \"acquisition\",\n    name: \"Acquisition diligence room\",\n    owner: \"Executive\",\n    sensitivity: \"restricted\",\n    requiredRole: \"admin\",\n  },\n];\n\nexport function canAccessProject(role: Role, project: ProtectedProject): boolean {\n  return roleRank[role] >= roleRank[project.requiredRole];\n}\n\nexport function visibleProjects(role: Role, projects: ProtectedProject[] = protectedProjects) {\n  return projects.filter((project) => canAccessProject(role, project));\n}\n\nexport function deniedProjects(role: Role, projects: ProtectedProject[] = protectedProjects) {\n  return projects.filter((project) => !canAccessProject(role, project));\n}\n\nexport function canApproveAccess(role: Role): boolean {\n  return role === \"admin\";\n}\n\nexport function permissionMessage(role: Role, project: ProtectedProject): string {\n  if (canAccessProject(role, project)) {\n    return role + \" may access \" + project.name + \".\";\n  }\n  return project.name + \" requires \" + project.requiredRole + \" access.\";\n}\n";

package/dist/demo-project/definitions/auth-sensitive/templates/src-auth-policy-ts.js

@@ -0,0 +1,64 @@
+export const srcAuthPolicyContent = `export type Role = "viewer" | "manager" | "admin";
+
+export type ProtectedProject = {
+  id: string;
+  name: string;
+  owner: string;
+  sensitivity: "standard" | "confidential" | "restricted";
+  requiredRole: Role;
+};
+
+const roleRank: Record<Role, number> = {
+  viewer: 1,
+  manager: 2,
+  admin: 3,
+};
+
+export const protectedProjects: ProtectedProject[] = [
+  {
+    id: "launch",
+    name: "Launch site refresh",
+    owner: "Growth",
+    sensitivity: "standard",
+    requiredRole: "viewer",
+  },
+  {
+    id: "pipeline",
+    name: "Revenue pipeline dashboard",
+    owner: "Operations",
+    sensitivity: "confidential",
+    requiredRole: "manager",
+  },
+  {
+    id: "acquisition",
+    name: "Acquisition diligence room",
+    owner: "Executive",
+    sensitivity: "restricted",
+    requiredRole: "admin",
+  },
+];
+
+export function canAccessProject(role: Role, project: ProtectedProject): boolean {
+  return roleRank[role] >= roleRank[project.requiredRole];
+}
+
+export function visibleProjects(role: Role, projects: ProtectedProject[] = protectedProjects) {
+  return projects.filter((project) => canAccessProject(role, project));
+}
+
+export function deniedProjects(role: Role, projects: ProtectedProject[] = protectedProjects) {
+  return projects.filter((project) => !canAccessProject(role, project));
+}
+
+export function canApproveAccess(role: Role): boolean {
+  return role === "admin";
+}
+
+export function permissionMessage(role: Role, project: ProtectedProject): string {
+  if (canAccessProject(role, project)) {
+    return role + " may access " + project.name + ".";
+  }
+  return project.name + " requires " + project.requiredRole + " access.";
+}
+`;
+//# sourceMappingURL=src-auth-policy-ts.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/src-auth-policy-ts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-auth-policy-ts.js","sourceRoot":"","sources":["../../../../../src/demo-project/definitions/auth-sensitive/templates/src-auth-policy-ts.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8DnC,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/src-main-tsx.d.ts

@@ -0,0 +1 @@
+export declare const srcMainContent: string;

package/dist/demo-project/definitions/auth-sensitive/templates/src-main-tsx.js

@@ -0,0 +1,6 @@
+import { renderRootSection } from "../../../react-main-template.js";
+import { sourceFile } from "../../../source-template.js";
+export const srcMainContent = sourceFile(`import { createRoot } from "react-dom/client";
+import { App } from "./app";
+import "./styles.css";`, renderRootSection);
+//# sourceMappingURL=src-main-tsx.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/src-main-tsx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-main-tsx.js","sourceRoot":"","sources":["../../../../../src/demo-project/definitions/auth-sensitive/templates/src-main-tsx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CACtC;;uBAEqB,EACrB,iBAAiB,CAClB,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/src-project-panels-tsx.d.ts

@@ -0,0 +1 @@
+export declare const srcProjectPanelsContent: string;

package/dist/demo-project/definitions/auth-sensitive/templates/src-project-panels-tsx.js

@@ -0,0 +1,48 @@
+import { sourceFile } from "../../../source-template.js";
+export const srcProjectPanelsContent = sourceFile(`import type { ProtectedProject, Role } from "./auth-policy";
+import { permissionMessage } from "./auth-policy";
+
+export function ProjectPanels({
+  allowed,
+  denied,
+  role,
+}: {
+  allowed: ProtectedProject[];
+  denied: ProtectedProject[];
+  role: Role;
+}) {
+  return (
+    <div className="panels">
+      <section className="panel" aria-labelledby="visible-title">
+        <h2 id="visible-title">Visible projects</h2>
+        <ul className="project-list">
+          {allowed.map((project) => (
+            <li key={project.id}>
+              <strong>{project.name}</strong>
+              <span>{project.owner}</span>
+              <small>{permissionMessage(role, project)}</small>
+            </li>
+          ))}
+        </ul>
+      </section>
+
+      <section className="panel panel--restricted" aria-labelledby="restricted-title">
+        <h2 id="restricted-title">Restricted projects</h2>
+        {denied.length > 0 ? (
+          <ul className="project-list">
+            {denied.map((project) => (
+              <li key={project.id}>
+                <strong>{project.name}</strong>
+                <span>{project.sensitivity}</span>
+                <small>{permissionMessage(role, project)}</small>
+              </li>
+            ))}
+          </ul>
+        ) : (
+          <p className="empty">No projects are restricted for this role.</p>
+        )}
+      </section>
+    </div>
+  );
+}`);
+//# sourceMappingURL=src-project-panels-tsx.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/src-project-panels-tsx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-project-panels-tsx.js","sourceRoot":"","sources":["../../../../../src/demo-project/definitions/auth-sensitive/templates/src-project-panels-tsx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,CAAC,MAAM,uBAAuB,GAClC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6CX,CAAC,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/src-role-picker-tsx.d.ts

@@ -0,0 +1 @@
+export declare const srcRolePickerContent: string;

package/dist/demo-project/definitions/auth-sensitive/templates/src-role-picker-tsx.js

@@ -0,0 +1,30 @@
+import { sourceFile } from "../../../source-template.js";
+export const srcRolePickerContent = sourceFile(`import type { Role } from "./auth-policy";
+import { roles } from "./roles";
+
+export function RolePicker({
+  onRoleChange,
+  role,
+}: {
+  onRoleChange: (role: Role) => void;
+  role: Role;
+}) {
+  return (
+    <fieldset className="role-picker">
+      <legend>Current role</legend>
+      {roles.map((option) => (
+        <label key={option}>
+          <input
+            checked={role === option}
+            name="role"
+            type="radio"
+            value={option}
+            onChange={() => onRoleChange(option)}
+          />
+          <span>{option}</span>
+        </label>
+      ))}
+    </fieldset>
+  );
+}`);
+//# sourceMappingURL=src-role-picker-tsx.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/src-role-picker-tsx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-role-picker-tsx.js","sourceRoot":"","sources":["../../../../../src/demo-project/definitions/auth-sensitive/templates/src-role-picker-tsx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2B7C,CAAC,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/src-roles-ts.d.ts

@@ -0,0 +1 @@
+export declare const srcRolesContent: string;

package/dist/demo-project/definitions/auth-sensitive/templates/src-roles-ts.js

@@ -0,0 +1,5 @@
+import { sourceFile } from "../../../source-template.js";
+export const srcRolesContent = sourceFile(`import type { Role } from "./auth-policy";
+
+export const roles: Role[] = ["viewer", "manager", "admin"];`);
+//# sourceMappingURL=src-roles-ts.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/src-roles-ts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-roles-ts.js","sourceRoot":"","sources":["../../../../../src/demo-project/definitions/auth-sensitive/templates/src-roles-ts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;;6DAEmB,CAAC,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/src-styles-css.d.ts

@@ -0,0 +1 @@
+export declare const srcStylesContent: string;

package/dist/demo-project/definitions/auth-sensitive/templates/src-styles-css.js

@@ -0,0 +1,16 @@
+import { appFoundationStyles, cssFile, eyebrowStyles, heroHeadingStyles, introCopyStyles, } from "../../../style-template.js";
+import { workspaceApprovalStyles } from "./styles/workspace-approval.js";
+import { workspaceLayoutStyles } from "./styles/workspace-layout.js";
+import { workspacePanelsStyles } from "./styles/workspace-panels.js";
+import { workspaceResponsiveStyles } from "./styles/workspace-responsive.js";
+import { workspaceRolePickerStyles } from "./styles/workspace-role-picker.js";
+export const srcStylesContent = cssFile(appFoundationStyles({
+    background: "#f6f8f7",
+    pagePadding: "clamp(20px, 4vw, 56px)",
+    controls: ["button", "input"],
+}), workspaceLayoutStyles, eyebrowStyles({ color: "#0f6b45" }), heroHeadingStyles({ fontSize: "clamp(2rem, 4vw, 3.7rem)", margin: "0" }), introCopyStyles(".workspace__header p:last-child", {
+    color: "#4b5961",
+    lineHeight: "1.55",
+    margin: "0",
+}), workspaceRolePickerStyles, workspacePanelsStyles, workspaceApprovalStyles, workspaceResponsiveStyles);
+//# sourceMappingURL=src-styles-css.js.map

package/dist/demo-project/definitions/auth-sensitive/templates/src-styles-css.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-styles-css.js","sourceRoot":"","sources":["../../../../../src/demo-project/definitions/auth-sensitive/templates/src-styles-css.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,eAAe,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CACrC,mBAAmB,CAAC;IAClB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,wBAAwB;IACrC,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC9B,CAAC,EACF,qBAAqB,EACrB,aAAa,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EACnC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EACxE,eAAe,CAAC,iCAAiC,EAAE;IACjD,KAAK,EAAE,SAAS;IAChB,UAAU,EAAE,MAAM;IAClB,MAAM,EAAE,GAAG;CACZ,CAAC,EACF,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,CAC1B,CAAC"}

package/dist/demo-project/definitions/auth-sensitive/templates/styles/workspace-approval.d.ts

@@ -0,0 +1 @@
+export declare const workspaceApprovalStyles = "\n.approval {\n  align-items: center;\n  display: flex;\n  gap: 18px;\n  justify-content: space-between;\n  margin-top: 16px;\n}\n\n.approval p {\n  margin: 0;\n}\n\nbutton {\n  background: #172026;\n  border: 0;\n  border-radius: 8px;\n  color: #ffffff;\n  cursor: pointer;\n  font-weight: 800;\n  min-height: 44px;\n  padding: 0 16px;\n}\n\nbutton:disabled {\n  background: #aab6b2;\n  cursor: not-allowed;\n}\n\nbutton:not(:disabled):hover {\n  background: #0f6b45;\n}\n\nbutton:focus-visible,\ninput:focus-visible {\n  outline: 3px solid #e9c46a;\n  outline-offset: 3px;\n}\n\n.audit {\n  color: #0f6b45;\n  font-weight: 800;\n  min-height: 24px;\n}\n";