@arcgis/portal-components 5.2.0-next.12 → 5.2.0-next.121

package/dist/chunks/verified.js

@@ -0,0 +1,40 @@
+/* COPYRIGHT Esri - https://js.arcgis.com/5.2/LICENSE.txt */
+import { f as w, r as h } from "./request.js";
+import { a as b } from "./dom.js";
+async function U(s, e, a, r, t) {
+  const i = s.portal?.portalHostname || r?.portalHostname || r?.restUrl?.replace("/sharing/rest", ""), l = t ? `https://www.arcgis.com/sharing/rest/portals/${e}` : `https://${i}/sharing/rest/portals/${e}`;
+  if (!i && !t)
+    return null;
+  const c = t ? { disableIdentityLookup: !0, addTokenManually: !1 } : {}, o = await h({ url: l, portal: r, options: c }), { urlKey: g, thumbnail: u, customBaseUrl: $ } = o, p = `https://${g}.${$}/`, y = u ? `${p}sharing/rest/portals/self/resources/${u}` : null;
+  let m = "", d = "";
+  try {
+    const n = await h({
+      url: `${l}/resources/localizedOrgProperties`,
+      portal: r,
+      params: { start: 1, num: 100 },
+      options: c
+    });
+    if (n) {
+      const f = n[a] || n.default;
+      m = f.name, d = f.description;
+    }
+  } catch {
+  }
+  return {
+    name: m || o.name,
+    description: b(d || o.description),
+    url: `${p}home/`,
+    thumbnail: y
+  };
+}
+async function q(s, e, a, r) {
+  const t = s.sourceJSON?.orgId ?? s.portal?.id ?? a?.id;
+  return await w({
+    requester: async () => await U(s, t, e, a, r),
+    key: "verified",
+    id: t
+  });
+}
+export {
+  q as f
+};

package/dist/components/arcgis-portal-account-switcher/customElement.d.ts

@@ -0,0 +1,157 @@
+/// <reference path="../../index.d.ts" />
+import type Portal from "@arcgis/core/portal/Portal.js";
+import type { PublicLitElement as LitElement } from "@arcgis/lumina";
+import type { LinkedAccount } from "../../types/user.js";
+import type { SignoutEventDetails } from "./types.js";
+import type { T9nMeta } from "@arcgis/lumina/controllers";
+
+/** Renders an account selection dialog and emits an account switching event. */
+export abstract class ArcgisPortalAccountSwitcher extends LitElement {
+  /** @default "arcgisonline" */
+  accessor clientId: string;
+  /** @internal */
+  protected messages: {
+      switchAccounts: string;
+      linkedAccounts: string;
+      linkedAccountActions: string;
+      currentAccount: string;
+      signedInAs: string;
+      currentAccountLabel: string;
+      usersList: string;
+      linkedAccountSignedIn: string;
+      signedIn: string;
+      signedOut: string;
+      signingOut: string;
+      signedOutHeader: string;
+      closeWindow: string;
+      stillSignedIn: string;
+      clickToSwitch: string;
+      signOutAll: string;
+      emptyListTitle: string;
+      emptyList: string;
+      maxAccounts: string;
+      unlinkAccount: string;
+      unlinkOrgUser: string;
+      unlinkPublicUser: string;
+      linkAccount: string;
+      addAccount: string;
+      switchTo: string;
+      switchToOrgUser: string;
+      switchToPublicUser: string;
+      userDisabled: string;
+      userNotAllowed: string;
+      unlink: string;
+      unlinkTitle: string;
+      unlinkWarning: string;
+      linkTitle: string;
+      linkWarning: string;
+      linkAll: string;
+      alertLabel: string;
+      cancel: string;
+      arcgisProvider: string;
+      githubProvider: string;
+      appleProvider: string;
+      googleProvider: string;
+      facebookProvider: string;
+      samlProvider: string;
+      oidcProvider: string;
+      errors: {
+          linkAccount: string;
+          accessAccount: string;
+          selfLink: string;
+          alreadyLinked: string;
+          signout: string;
+          signin: string;
+          unlinkAccount: string;
+          unlinkTitle: string;
+          noAccountSelected: string;
+      };
+      success: {
+          linkAccount: string;
+          linkAccountMultiple: string;
+          unlinkAccount: string;
+          unlinkTitle: string;
+      };
+  } & T9nMeta<{
+      switchAccounts: string;
+      linkedAccounts: string;
+      linkedAccountActions: string;
+      currentAccount: string;
+      signedInAs: string;
+      currentAccountLabel: string;
+      usersList: string;
+      linkedAccountSignedIn: string;
+      signedIn: string;
+      signedOut: string;
+      signingOut: string;
+      signedOutHeader: string;
+      closeWindow: string;
+      stillSignedIn: string;
+      clickToSwitch: string;
+      signOutAll: string;
+      emptyListTitle: string;
+      emptyList: string;
+      maxAccounts: string;
+      unlinkAccount: string;
+      unlinkOrgUser: string;
+      unlinkPublicUser: string;
+      linkAccount: string;
+      addAccount: string;
+      switchTo: string;
+      switchToOrgUser: string;
+      switchToPublicUser: string;
+      userDisabled: string;
+      userNotAllowed: string;
+      unlink: string;
+      unlinkTitle: string;
+      unlinkWarning: string;
+      linkTitle: string;
+      linkWarning: string;
+      linkAll: string;
+      alertLabel: string;
+      cancel: string;
+      arcgisProvider: string;
+      githubProvider: string;
+      appleProvider: string;
+      googleProvider: string;
+      facebookProvider: string;
+      samlProvider: string;
+      oidcProvider: string;
+      errors: {
+          linkAccount: string;
+          accessAccount: string;
+          selfLink: string;
+          alreadyLinked: string;
+          signout: string;
+          signin: string;
+          unlinkAccount: string;
+          unlinkTitle: string;
+          noAccountSelected: string;
+      };
+      success: {
+          linkAccount: string;
+          linkAccountMultiple: string;
+          unlinkAccount: string;
+          unlinkTitle: string;
+      };
+  }>;
+  /** Portal object */
+  accessor portal: Portal;
+  /** @default false */
+  accessor signout: boolean;
+  accessor signoutOptions: {
+      redirectToClientUri?: boolean;
+      displaySignoutComplete?: boolean;
+  };
+  /** Emitted when the user chooses a different account. */
+  readonly arcgisAccountSwitch: import("@arcgis/lumina").TargetedEvent<this, { account: LinkedAccount; }>;
+  /** Emitted when the user closes the account switcher. */
+  readonly arcgisClose: import("@arcgis/lumina").TargetedEvent<this, void>;
+  /** Emitted when the signout(s) have completed */
+  readonly arcgisSignoutComplete: import("@arcgis/lumina").TargetedEvent<this, SignoutEventDetails>;
+  readonly "@eventTypes": {
+    arcgisAccountSwitch: ArcgisPortalAccountSwitcher["arcgisAccountSwitch"]["detail"];
+    arcgisClose: ArcgisPortalAccountSwitcher["arcgisClose"]["detail"];
+    arcgisSignoutComplete: ArcgisPortalAccountSwitcher["arcgisSignoutComplete"]["detail"];
+  };
+}

package/dist/components/arcgis-portal-account-switcher/customElement.js

@@ -0,0 +1,400 @@
+/* COPYRIGHT Esri - https://js.arcgis.com/5.2/LICENSE.txt */
+import { c as L } from "../../chunks/runtime.js";
+import { keyed as _ } from "lit/directives/keyed.js";
+import { LitElement as C, createEvent as w, safeClassMap as x, nothing as v } from "@arcgis/lumina";
+import { html as d, svg as T } from "lit";
+import { s as M } from "../../chunks/portal-account-switcher.js";
+import { g as K, a as N, l as E, u as H } from "../../chunks/user.js";
+import f from "@arcgis/core/identity/IdentityManager.js";
+import { t as P } from "../../chunks/functionalities.js";
+import { u as W } from "../../chunks/useT9n.js";
+import { m as B } from "../../chunks/icons.js";
+import { substitute as m } from "@arcgis/core/intl.js";
+import { g as R } from "../../chunks/services.js";
+const U = 1260 * 1e3;
+function I(o, t = "_blank", s = 582, e = 670) {
+  const n = window.screenLeft ?? 0, i = window.screenTop ?? 0, a = window.innerWidth || document.documentElement.clientWidth || window.screen.width, r = window.innerHeight || document.documentElement.clientHeight || window.screen.height, c = a / 2 - s / 2 + n, u = r / 2 - e / 2 + i, l = window.open(o, t, `scrollbars=no, width=${s}, height=${e}, top=${u}, left=${c}`);
+  return l?.focus(), l;
+}
+function J(o, t) {
+  const s = f.findOAuthInfo(o.url), { appId: e, locale: n = "en", expiration: i = U } = s ?? {}, a = new URLSearchParams({
+    locale: n,
+    client_id: t ?? e ?? "arcgisonline",
+    response_type: "token",
+    expiration: `${i}`,
+    linkUserRequest: "true",
+    showSocialLogins: "true",
+    hideEnterpriseLogins: "false",
+    force_login: "true",
+    parent: window.location.origin,
+    redirect_uri: `https://${o.portalHostname}/home/link_account_callback.html`,
+    state: JSON.stringify({ useMessage: !0 })
+  }), r = `https://${o.portalHostname}/sharing/oauth2/authorize?${a.toString()}`;
+  I(r);
+}
+function A(o) {
+  const {
+    config: t,
+    token: s,
+    clientId: e = "arcgisonline",
+    redirectToClientUri: n = !1,
+    displaySignoutComplete: i = !1
+  } = o, a = new URLSearchParams({
+    display: "iframe",
+    client_id: e,
+    ...s && { token: s },
+    parent: window.location.origin,
+    redirect_uri: `${t.baseUrl}signout_callback.html`,
+    state: JSON.stringify({
+      signout: !0,
+      origin: window.location.origin,
+      redirectToClientUri: n,
+      displaySignoutComplete: i
+    })
+  }), r = `${t.restBaseUrl}oauth2/signout?${a.toString()}`, c = document.createElement("iframe");
+  c.src = r, c.style.display = "none", document.body.appendChild(c);
+}
+function D(o, t, s) {
+  const e = g(o.orgUrlKey, t), n = f.findOAuthInfo(e), { appId: i, locale: a = "en", expiration: r = U } = n ?? {}, c = S(o.provider), u = new URLSearchParams({
+    locale: a,
+    client_id: s ?? i ?? "arcgisonline",
+    response_type: "token",
+    expiration: `${r}`,
+    parent: window.location.origin,
+    ...c === "social" && { socialLoginProviderName: o.provider },
+    ...c === "default" && { prepopulatedusername: o.username },
+    force_login: "true",
+    redirect_uri: `${e}/home/sign_in_callback.html`,
+    state: JSON.stringify({
+      user: o.username,
+      server: e,
+      portalUrl: e,
+      origin: window.location.origin
+    })
+  }), l = `${y(o, t)}?${u.toString()}`;
+  I(l);
+}
+function j({
+  accounts: o,
+  clientId: t = "arcgisonline",
+  usersToFilter: s = [],
+  accountsToFilter: e = ""
+}) {
+  const n = {};
+  return o.reduce((i, a) => {
+    const r = {
+      disabled: a.disabled ?? !1,
+      allowed: a.clientAppAccessAllowed ?? !0
+    };
+    return i[a.username] = r, (s.includes(a.username) || s.includes(a.username.toLowerCase()) || e === "org" && a.orgUrlKey || t === "esriapps" && a.userType !== "both") && (r.allowed = !1), i;
+  }, n), n;
+}
+function q({
+  account: o,
+  credential: t,
+  client_id: s,
+  portal: e
+}) {
+  const n = S(o.provider), i = y(o, e), a = O(o, e), r = new URLSearchParams({
+    client_id: s,
+    redirect_uri: a,
+    parent: window.location.origin,
+    response_type: "token",
+    force_login: "false",
+    ...t.userId && { prepopulatedusername: t.userId },
+    ...n === "social" && { socialLoginProviderName: o.provider },
+    expiration: `${(t?.expires ?? Date.now() + U) - Date.now()}`
+  });
+  return `${i}?${r.toString()}`;
+}
+function S(o) {
+  return z(o) ? "social" : o === "enterprise" ? "enterprise" : o.includes("oidc") ? "oidc" : "default";
+}
+function z(o) {
+  return ["apple", "facebook", "github", "google"].includes(o);
+}
+function y(o, t) {
+  const s = g(o.orgUrlKey, t).toLowerCase(), e = S(o.provider);
+  let n = "";
+  switch (e) {
+    case "social":
+      n = "social/";
+      break;
+    case "enterprise":
+      n = "saml/";
+      break;
+    case "oidc":
+      n = `oidc/${o.provider.split("_")[1]}/`;
+      break;
+  }
+  return `${s}/sharing/rest/oauth2/${n}authorize`;
+}
+function g(o, t) {
+  return o?.startsWith("https://") ? o : o && t.customBaseUrl ? `https://${o}.${t.customBaseUrl}` : `https://${t.portalHostname}`;
+}
+function O(o, t) {
+  return `${g(o.orgUrlKey, t)}/home/accountswitcher-callback.html`;
+}
+function F(o, t) {
+  return f.findCredential(g(o.orgUrlKey, t), o.username);
+}
+function G(o, t) {
+  const s = F(o, t);
+  if (s)
+    return s;
+  const e = g(o.orgUrlKey, t), n = `${e}/home/check_sign_in_status.html#state=${JSON.stringify({
+    origin: window.location.origin,
+    server: e,
+    orgKey: e
+  })}`;
+  Q(n, `iframe__for-${e}`);
+}
+function Q(o, t) {
+  const s = document.createElement("iframe");
+  s.src = o, s.id = t, s.style.display = "none", document.body.appendChild(s);
+}
+const $ = 100;
+class V extends C {
+  constructor() {
+    super(), this.messages = W({ blocking: !0 }), this.targetUser = "", this.targetToken = "", this.accountAccess = {}, this.remainingSignouts = 0, this.signoutHandle = 0, this.linkedAccounts = [], this.loading = !1, this.signedInStatus = {}, this.showAssociatedAccountsWarning = !1, this.signedInAccounts = [], this.clientId = "arcgisonline", this.signout = !1, this.signoutOptions = {
+      redirectToClientUri: !1,
+      displaySignoutComplete: !1
+    }, this.arcgisAccountSwitch = w(), this.arcgisClose = w(), this.arcgisSignoutComplete = w(), this.listenOn(window, "message", this.handleMessageEvent);
+  }
+  static {
+    this.properties = { linkedAccounts: 16, userAccounts: 16, user: 16, credential: 16, alertOptions: 16, loading: 16, signedInStatus: 16, showAssociatedAccountsWarning: 16, signedInAccounts: 16, portal: 0, clientId: 1, signout: 5, signoutOptions: 0 };
+  }
+  static {
+    this.styles = M;
+  }
+  willUpdate(t) {
+    if (t.has("portal") && (this.user = this.portal?.user), (t.has("portal") || t.has("user")) && this.portal && this.user) {
+      this.findLinkedUsers();
+      return;
+    }
+    if (t.has("linkedAccounts") || t.has("signedInStatus")) {
+      if (this.signout) {
+        const { signedInStatus: s, linkedAccounts: e, portal: n, signoutOptions: i, clientId: a } = this, r = Object.keys(s).filter((p) => s[p] !== null).map((p) => e.find((k) => k.username === p));
+        this.remainingSignouts = r.length + 1;
+        const c = g(n.urlKey ?? "", n), u = `${c}/sharing/rest`;
+        let { displaySignoutComplete: l = !0, redirectToClientUri: h = !0 } = i;
+        r.length > 0 && (l = !1, h = !1), this.loading = !0, A({ displaySignoutComplete: l, redirectToClientUri: h, clientId: a, config: { baseUrl: c, restBaseUrl: u } }), this.signoutHandle = window.setTimeout(() => {
+          this.remainingSignouts -= 1, this.finishSignout({ accountOrigin: c, redirectToClientUri: h, displaySignoutComplete: l });
+        }, 1200);
+      }
+      return;
+    }
+  }
+  handleMessageEvent(t) {
+    if (new URL(t.origin).hostname !== "localhost" && (t.origin.endsWith(".arcgis.com") || t.origin === window.location.origin)) {
+      if (typeof t.data == "string") {
+        JSON.parse(t.data).type === "token_exchange" && this.handleExchangeTokenMessage(t);
+        return;
+      }
+      if ("type" in t.data)
+        switch (t.data.type) {
+          case "signin":
+            this.handleSigninMessage(t);
+            return;
+          case "signout":
+            this.handleSignoutMessage(t);
+            return;
+          case "linkUser":
+            this.handleLinkUserMessage(t);
+            return;
+          case "token_exchange":
+            this.handleExchangeTokenMessage(t);
+            return;
+        }
+      if ("credential" in t.data) {
+        this.handleSigninMessage(t);
+        return;
+      }
+      this.handleCheckSignInStatusMessage(t);
+    }
+  }
+  handleSignoutMessage(t) {
+    const { error: s, signout: e, accountOrigin: n, redirectToClientUri: i, displaySignoutComplete: a } = t.data;
+    if (this.remainingSignouts -= 1, s && s !== "unknown") {
+      console.error(s), this.showAlert("danger", this.messages.errors.signout);
+      return;
+    }
+    e && (this.user = void 0, this.credential = void 0, this.finishSignout({ accountOrigin: n, redirectToClientUri: i, displaySignoutComplete: a }));
+  }
+  handleSigninMessage(t) {
+    const { messages: s, clientId: e } = this, { error: n, status: i, state: a, access_token: r, ssl: c } = t.data;
+    if (n) {
+      console.error(n), this.showAlert("danger", s.errors.signin);
+      return;
+    }
+    if (i === "success") {
+      const { portal: u, user: l } = this, h = this.linkedAccounts.find((b) => b.username === a.user);
+      h?.orgUrlKey === this.portal.urlKey && f.findCredential(`https://${u.portalHostname}`, l?.username)?.destroy();
+      const p = {
+        server: a.portalUrl,
+        userId: a.user,
+        token: r,
+        expires: Number(t.data.expires_in) + Date.now(),
+        ssl: c === void 0 || c !== "false"
+      };
+      f.registerToken(p);
+      const k = q({
+        account: h,
+        credential: p,
+        // eslint-disable-next-line @typescript-eslint/naming-convention
+        client_id: e,
+        portal: u
+      });
+      window.self !== window.top ? window.top?.postMessage({ type: "navigate", url: k }) : window.location.href = k;
+    }
+  }
+  handleCheckSignInStatusMessage(t) {
+    const { success: s, orgKey: e, server: n, userId: i, token: a, expires: r, ssl: c } = t.data;
+    e && n && s && i && a && r && c !== void 0 && (this.signedInStatus[i] = { token: a, expires: r, ssl: c });
+  }
+  async handleLinkUserMessage(t) {
+    const { error: s, username: e, access_token: n } = t.data, { portal: i, user: a, linkedAccounts: r, messages: c } = this;
+    if (s) {
+      if (s.toString().toLowerCase().includes("user denied your request"))
+        return;
+      this.showAlert("danger", c.errors.accessAccount);
+      return;
+    }
+    if (e === a?.username) {
+      this.showAlert("danger", c.errors.selfLink);
+      return;
+    }
+    if (r.find((l) => l.username === e)) {
+      this.showAlert("danger", m(c.errors.alreadyLinked, { username: e }));
+      return;
+    }
+    const u = await K(i, e, n);
+    if (u?.length) {
+      this.userAccounts = u, this.targetUser = e ?? "", this.targetToken = n ?? "", this.showAssociatedAccountsWarning = !0;
+      return;
+    }
+    this.linkAccount(e, n);
+  }
+  handleExchangeTokenMessage(t) {
+    const s = typeof t.data == "string" ? JSON.parse(t.data) : t.data;
+    if (!(s.type && s.type !== "token_exchange")) {
+      if (s.error)
+        console.error(s);
+      else if (s.status === "success" && this.targetUser) {
+        const { portal: e, linkedAccounts: n, targetUser: i, clientId: a } = this, r = n.find((p) => p.username === i);
+        if (!r)
+          return;
+        const c = O(r, e), u = g(r.orgUrlKey, e), l = new URLSearchParams({
+          // eslint-disable-next-line @typescript-eslint/naming-convention
+          response_type: "token",
+          // eslint-disable-next-line @typescript-eslint/naming-convention
+          client_id: a,
+          // eslint-disable-next-line @typescript-eslint/naming-convention
+          redirect_uri: c,
+          state: JSON.stringify({ user: r.username, portalUrl: u })
+        }), h = `${y(r, e)}?${l.toString()}`;
+        window.opener ? (window.opener.location.href = h, window.close()) : window.location.href = h;
+      }
+    }
+  }
+  finishSignout({ accountOrigin: t, redirectToClientUri: s, displaySignoutComplete: e }) {
+    this.signoutHandle && window.clearTimeout(this.signoutHandle), console.info("Signout complete", t, s, e), this.remainingSignouts <= 0 && this.arcgisSignoutComplete.emit({ accountOrigin: t, redirectToClientUri: s, displaySignoutComplete: e });
+  }
+  async findLinkedUsers() {
+    if (this.loading = !0, !this.portal || !this.user) {
+      this.linkedAccounts = [], this.loading = !1;
+      return;
+    }
+    this.linkedAccounts = await N(this.portal, this.user), this.linkedAccounts.length && (this.signedInStatus = this.linkedAccounts.filter((t) => t.orgUrlKey !== this.portal.urlKey).reduce((t, s) => (t[s.username] = G(s, this.portal) ?? null, t), {}), this.accountAccess = j({ accounts: this.linkedAccounts, clientId: this.clientId })), this.loading = !1;
+  }
+  async linkAccount(t, s) {
+    const { portal: e, user: n } = this;
+    if (!e || !n)
+      return;
+    const i = await E({ portal: e, user: n, targetUser: t, targetToken: s }), { messages: a } = this;
+    if (i.error) {
+      this.showAlert("danger", m(a.errors.linkAccount, { username: t })), this.targetUser = "", this.userAccounts = [];
+      return;
+    }
+    const r = this.userAccounts?.length ? a.success.linkAccountMultiple : a.success.linkAccount;
+    this.showAlert("success", m(r, { username: t })), this.targetUser = "", this.userAccounts = [], await P(350), this.findLinkedUsers();
+  }
+  async unlinkAccount(t) {
+    if (!this.portal || !this.user)
+      return;
+    const { messages: s, portal: e, user: n } = this, { success: i } = await H({ portal: e, user: n, linkedUsername: t.username });
+    i ? this.showAlert("success", m(s.success.unlinkAccount, { username: t.username })) : this.showAlert("danger", m(s.errors.unlinkAccount, { username: t.username })), await this.findLinkedUsers();
+  }
+  startAccountLink() {
+    J(this.portal, this.clientId);
+  }
+  switchAccount(t) {
+    const { portal: s, user: e, clientId: n } = this;
+    if (!s || !e || !t)
+      return;
+    const i = g(e.sourceJSON.orgUrlKey ?? "", s), a = f.findCredential(i, e.id || e.username);
+    a && A({ config: { baseUrl: i, restBaseUrl: `${i}/sharing/rest` }, token: a?.token, clientId: n }), D(t, s, n);
+  }
+  signoutAll(t) {
+    const { portal: s, signedInStatus: e, clientId: n } = this;
+    t.forEach((i) => {
+      const a = g(i.orgUrlKey, s), r = `${a}/sharing/rest`, c = e[i.username];
+      A({ config: { baseUrl: a, restBaseUrl: r }, token: c?.token, clientId: n });
+    });
+  }
+  showAlert(t, s, e) {
+    this.alertOptions = {
+      kind: t,
+      title: e,
+      message: s
+    };
+  }
+  showUnlinkConfirmation(t) {
+    const { messages: s } = this;
+    this.alertOptions = {
+      kind: "danger",
+      icon: "exclamation-mark-triangle-f",
+      title: s.unlinkTitle,
+      message: s.unlinkWarning,
+      actions: [
+        {
+          text: s.unlink,
+          kind: "danger",
+          clickHandler: () => {
+            this.alertOptions = void 0, this.unlinkAccount(t);
+          }
+        }
+      ]
+    };
+  }
+  render() {
+    const { linkedAccounts: t, accountAccess: s, user: e, portal: n, messages: i, signout: a } = this;
+    if (!n || !e)
+      return null;
+    if (a) {
+      const { signedInAccounts: r } = this;
+      return r.length === 0 ? d`<calcite-loader .label=${i.signingOut} .text=${i.signingOut}></calcite-loader>` : d`<arcgis-portal-account-switcher-signout .portal=${n} .signedInAccounts=${r} @arcgisSwitchAccount=${(c) => {
+        this.switchAccount(c.detail.account);
+      }} @arcgisSignOutAll=${() => {
+        this.signoutAll(r);
+      }}></arcgis-portal-account-switcher-signout>`;
+    }
+    return d`<calcite-dialog .heading=${i.switchAccounts} scale=m width=s open modal .loading=${this.loading} outside-close-disabled @calciteDialogClose=${() => {
+      this.arcgisClose.emit();
+    }}><calcite-block .heading=${i.currentAccount} .description=${i.signedInAs} expanded class="current-account-block" tabindex=-1>${_(e.id ?? e.username, d`<calcite-block class="current-account" .label=${n.urlKey ? `${e.username}, ${n.name}` : e.username} heading-level=4 .heading=${e.username} .description=${n.urlKey ? `${e.fullName ?? e.username}, ${n.name}` : e.fullName ?? e.username}><calcite-avatar slot=content-start inert .fullName=${e.fullName ?? void 0} .username=${e.username} .userId=${e.id} .thumbnail=${R(e, n) ?? void 0}></calcite-avatar></calcite-block>`)}</calcite-block>${t.length > 0 ? d`<calcite-block .heading=${i.linkedAccounts} .description=${i.linkedAccountActions} expanded class="linked-accounts-block"><calcite-button slot=content-end icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${t.length >= $}>${i.addAccount}</calcite-button><arcgis-portal-account-switcher-list .portal=${n} .linkedAccounts=${t} .accountAccess=${s} .signedInUsers=${Object.keys(this.signedInStatus).filter((r) => this.signedInStatus[r] !== null)} interactive @arcgisAccountSwitch=${(r) => {
+      this.switchAccount(r.detail.account);
+    }} @arcgisAccountUnlink=${(r) => {
+      this.showUnlinkConfirmation(r.detail.account);
+    }}></arcgis-portal-account-switcher-list></calcite-block>` : d`<calcite-block .heading=${i.linkedAccounts} expanded class="empty-accounts-block"><div class="empty-accounts-info"><svg class="empty-accounts-icon" width=48 height=48 viewBox="0 0 48 48" fill=none xmlns=http://www.w3.org/2000/svg>${T`<path d=${B.couple ?? v} fill=currentColor />`}</svg><h4>${i.emptyListTitle}</h4><p>${i.emptyList}</p><calcite-button icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${t.length >= $}>${i.linkAccount}</calcite-button></div></calcite-block>`}<calcite-notice kind=info .open=${t.length >= $}><div slot=message>${i.maxAccounts}</div></calcite-notice><calcite-alert .label=${i.alertLabel} slot=alerts .autoClose=${this.alertOptions?.kind !== "danger"} auto-close-duration=fast placement=bottom .kind=${this.alertOptions?.kind} .icon=${this.alertOptions?.icon} .open=${!!this.alertOptions} @calciteAlertClose=${() => {
+      this.alertOptions = void 0;
+    }}>${this.alertOptions?.title && d`<h4 slot=title class="alert-title">${this.alertOptions.title}</h4>` || ""}${this.alertOptions?.message && d`<p slot=message class=${x({ "alert-message": !0, "short-message": !!this.alertOptions?.actions?.length })}>${this.alertOptions.message}</p>` || ""}${this.alertOptions?.actions?.map((r) => d`<calcite-button slot=actions-end .kind=${r.kind} .appearance=${r.appearance} @click=${r.clickHandler}>${r.text}</calcite-button>`)}</calcite-alert></calcite-dialog>${this.showAssociatedAccountsWarning && d`<arcgis-portal-account-switcher-accounts .portal=${n} .targetUser=${this.targetUser} .accounts=${this.userAccounts ?? []} @arcgisLinkAll=${() => {
+      this.linkAccount(this.targetUser, this.targetToken);
+    }} @arcgisCloseDialog=${() => {
+      this.showAssociatedAccountsWarning = !1;
+    }}></arcgis-portal-account-switcher-accounts>` || ""}`;
+  }
+}
+L("arcgis-portal-account-switcher", V);
+export {
+  V as ArcgisPortalAccountSwitcher
+};

package/dist/components/arcgis-portal-account-switcher/index.d.ts

@@ -0,0 +1 @@
+export * from "./customElement.js";

package/dist/components/arcgis-portal-account-switcher/index.js

@@ -0,0 +1,11 @@
+import "@esri/calcite-components/components/calcite-loader";
+import "../arcgis-portal-account-switcher-signout/index.js";
+import "@esri/calcite-components/components/calcite-dialog";
+import "@esri/calcite-components/components/calcite-block";
+import "@esri/calcite-components/components/calcite-avatar";
+import "@esri/calcite-components/components/calcite-button";
+import "../arcgis-portal-account-switcher-list/index.js";
+import "@esri/calcite-components/components/calcite-notice";
+import "@esri/calcite-components/components/calcite-alert";
+import "../arcgis-portal-account-switcher-accounts/index.js";
+export * from "./customElement.js";

package/dist/components/arcgis-portal-account-switcher/types.d.ts

@@ -0,0 +1,26 @@
+export type AccountAccess = Record<string, AccountStatus>;
+
+export type Action = "switch" | "unlink";
+
+export type SignoutEventDetails = Omit<SignoutMessage, "error" | "signout" | "type">;
+
+export type SignoutMessage = ({
+    error: Error | string;
+    signout: never;
+    accountOrigin: never;
+    redirectToClientUri: never;
+    displaySignoutComplete: never;
+} | {
+    error: never;
+    signout: boolean;
+    accountOrigin: string;
+    redirectToClientUri: boolean;
+    displaySignoutComplete: boolean;
+}) & {
+  type: "signout";
+};
+
+export interface AccountStatus {
+  disabled: boolean;
+  allowed: boolean;
+}