@baseplate-dev/plugin-auth 0.6.12 → 0.6.14

package/dist/web/assets/{get-auth-plugin-definition-DBdchbBZ.js → get-auth-plugin-definition-D3ocnNxw.js}

@@ -1,4 +1,4 @@
-import { p as __mf_26 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-BX1_Ngjt.js";
+import { f as __mf_26 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-0m3QgjSy.js";
 //#region src/auth/utils/get-auth-plugin-definition.ts
 /**
 * Get the auth plugin definition from the project definition.
@@ -11,4 +11,4 @@ function getAuthPluginDefinition(definition) {
 //#endregion
 export { getAuthPluginDefinition as t };
 
-//# sourceMappingURL=get-auth-plugin-definition-DBdchbBZ.js.map
+//# sourceMappingURL=get-auth-plugin-definition-D3ocnNxw.js.map

package/dist/web/assets/hostInit-D3RxwboF.js

@@ -0,0 +1,99 @@
+import { t as __vitePreload } from "./vite-preload-helper-iIio8xkS.js";
+//#region \0virtual:mf:__mfe_internal__plugin_mf_2_auth__H_A_I__hostAutoInit__H_A_I__.js
+var __mfCacheGlobalKey = "__mf_module_cache__";
+globalThis[__mfCacheGlobalKey] ||= {
+	share: {},
+	remote: {}
+};
+globalThis[__mfCacheGlobalKey].share ||= {};
+globalThis[__mfCacheGlobalKey].remote ||= {};
+var __mfModuleCache = globalThis[__mfCacheGlobalKey];
+for (const __mfShareKey of Object.keys(__mfModuleCache.share)) if (__mfShareKey.startsWith("default:")) {
+	const __mfLegacyShareKey = __mfShareKey.slice(8);
+	if (__mfModuleCache.share[__mfLegacyShareKey] === void 0) __mfModuleCache.share[__mfLegacyShareKey] = __mfModuleCache.share[__mfShareKey];
+} else if (!__mfShareKey.includes(":")) {
+	const __mfDefaultShareKey = "default:" + __mfShareKey;
+	if (__mfModuleCache.share[__mfDefaultShareKey] === void 0) __mfModuleCache.share[__mfDefaultShareKey] = __mfModuleCache.share[__mfShareKey];
+}
+var hostInitPromise;
+async function initHost() {
+	if (!hostInitPromise) hostInitPromise = (async () => {
+		const __mfGetSharedCacheDescriptor = (pkg, singleton, version, scope) => {
+			const scopeName = (Array.isArray(scope) ? scope[0] : scope) || "default";
+			const id = singleton || !version ? pkg : pkg + "@" + version;
+			const descriptor = { canonical: scopeName + ":" + id };
+			if (scopeName === "default") descriptor.aliases = [id];
+			return descriptor;
+		};
+		const __mfReadSharedCache = (cache, descriptor) => {
+			const value = cache[descriptor.canonical];
+			if (value !== void 0) return value;
+			const aliases = descriptor.aliases || [];
+			for (const alias of aliases) {
+				const aliasValue = cache[alias];
+				if (aliasValue !== void 0) {
+					cache[descriptor.canonical] = aliasValue;
+					return aliasValue;
+				}
+			}
+		};
+		const __mfWriteSharedCache = (cache, descriptor, value) => {
+			cache[descriptor.canonical] = value;
+			const aliases = descriptor.aliases || [];
+			for (const alias of aliases) if (cache[alias] === void 0) cache[alias] = value;
+			return value;
+		};
+		const runtime = await (await __vitePreload(() => import("../remoteEntry.js"), [], import.meta.url)).init();
+		const { usedShared } = await __vitePreload(async () => {
+			const { usedShared } = await import("./_virtual_mf-localSharedImportMap___mfe_internal__plugin_mf_2_auth-3sV-KVGF.js");
+			return { usedShared };
+		}, [], import.meta.url);
+		const __mfNormalizeRuntimeShare = (mod) => {
+			let current = mod;
+			for (let i = 0; i < 5; i++) {
+				const defaultExport = current?.default;
+				if (!defaultExport || typeof defaultExport !== "object" || Object.keys(defaultExport).length === 0) break;
+				const namedValues = Object.keys(current).filter((key) => key !== "default").map((key) => current[key]);
+				if (namedValues.length > 0 && namedValues.some((value) => value !== void 0)) break;
+				current = defaultExport;
+			}
+			return current;
+		};
+		const __mfHostInitShareOrder = [
+			"react",
+			"react-dom",
+			"zod",
+			"@baseplate-dev/ui-components",
+			"@baseplate-dev/project-builder-lib/web",
+			"@baseplate-dev/project-builder-lib",
+			"@tanstack/react-router"
+		].concat(Object.keys(usedShared).filter((pkg) => ![
+			"react",
+			"react-dom",
+			"zod",
+			"@baseplate-dev/ui-components",
+			"@baseplate-dev/project-builder-lib/web",
+			"@baseplate-dev/project-builder-lib",
+			"@tanstack/react-router"
+		].includes(pkg)));
+		for (const pkg of __mfHostInitShareOrder) {
+			const share = usedShared[pkg];
+			if (!share) continue;
+			if (share.treeShaking) continue;
+			const cacheDescriptor = __mfGetSharedCacheDescriptor(pkg, share.shareConfig?.singleton, share.version, share.scope);
+			if (__mfReadSharedCache(__mfModuleCache.share, cacheDescriptor) !== void 0) continue;
+			await runtime.loadShare(pkg, { customShareInfo: { shareConfig: share.shareConfig } }).then((factory) => {
+				const mod = typeof factory === "function" ? factory() : factory;
+				return Promise.resolve(mod).then((resolved) => {
+					__mfWriteSharedCache(__mfModuleCache.share, cacheDescriptor, __mfNormalizeRuntimeShare(resolved));
+				});
+			});
+		}
+		await Promise.all([]);
+		return runtime;
+	})();
+	return hostInitPromise;
+}
+hostInitPromise = initHost();
+//#endregion
+export { hostInitPromise, initHost };

package/dist/web/assets/{index-CR54yoeW.js → index-CozZxQl1.js}

@@ -1,2 +1,2 @@
-import "./virtual_mf-exposes___mfe_internal__plugin-auth__remoteEntry_js-B_7IVc8D.js";
-import "./virtual_mf-REMOTE_ENTRY_ID___mfe_internal__plugin-auth__remoteEntry_js-CtbvyMZJ.js";
+import "./virtual_mf-exposes___mfe_internal__plugin-auth__remoteEntry_js-BQ0UMKSv.js";
+import "./virtual_mf-REMOTE_ENTRY_ID___mfe_internal__plugin-auth__remoteEntry_js-aH8n-Nbe.js";

package/dist/web/assets/{mf-entry-bootstrap-0-4f84e81c.js → mf-entry-bootstrap-0-069a3ab2.js}

@@ -25,8 +25,11 @@ const __mfImport = (src) =>
 
 
 (async () => {
-  const __mfHostInit = await __mfImport("./hostInit-CDVLjNbq.js");
+  const __mfHostInit = await __mfImport("./hostInit-D3RxwboF.js");
   await __mfHostInit.__tla;
   const { initHost } = __mfHostInit;
   await initHost();
-})().then(() => __mfImport("./index-CR54yoeW.js"));
+  if (__mfModuleCache.pendingShareLoads) {
+    await Promise.all(__mfModuleCache.pendingShareLoads);
+  }
+})().then(() => __mfImport("./index-CozZxQl1.js"));

package/dist/web/assets/{model-utils-CQpTF3uf.js → model-utils-CYaLYwoX.js}

@@ -1,4 +1,4 @@
-import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-Do-7VDVw.js";
 //#region ../../packages/project-builder-lib/dist/plugins/spec/types.js
 /**
 * Creates a plugin spec with init and use phases.
@@ -61,13 +61,8 @@ function sortBy(arr, criteria) {
 	return orderBy(arr, criteria, ["asc"]);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/es-toolkit@1.44.0/node_modules/es-toolkit/dist/predicate/isPlainObject.mjs
-function isPlainObject(value) {
-	if (!value || typeof value !== "object") return false;
-	const proto = Object.getPrototypeOf(value);
-	if (!(proto === null || proto === Object.prototype || Object.getPrototypeOf(proto) === null)) return false;
-	return Object.prototype.toString.call(value) === "[object Object]";
-}
+//#region ../../node_modules/.pnpm/es-toolkit@1.44.0/node_modules/es-toolkit/dist/function/noop.mjs
+function noop() {}
 //#endregion
 //#region ../../node_modules/.pnpm/es-toolkit@1.44.0/node_modules/es-toolkit/dist/compat/_internal/getSymbols.mjs
 function getSymbols(object) {
@@ -108,6 +103,14 @@ var bigInt64ArrayTag = "[object BigInt64Array]";
 var float32ArrayTag = "[object Float32Array]";
 var float64ArrayTag = "[object Float64Array]";
 //#endregion
+//#region ../../node_modules/.pnpm/es-toolkit@1.44.0/node_modules/es-toolkit/dist/predicate/isPlainObject.mjs
+function isPlainObject(value) {
+	if (!value || typeof value !== "object") return false;
+	const proto = Object.getPrototypeOf(value);
+	if (!(proto === null || proto === Object.prototype || Object.getPrototypeOf(proto) === null)) return false;
+	return Object.prototype.toString.call(value) === "[object Object]";
+}
+//#endregion
 //#region ../../node_modules/.pnpm/es-toolkit@1.44.0/node_modules/es-toolkit/dist/_internal/isEqualsSameValueZero.mjs
 function isEqualsSameValueZero(value, other) {
 	return value === other || Number.isNaN(value) && Number.isNaN(other);
@@ -219,9 +222,6 @@ function areObjectsEqual(a, b, stack, areValuesEqual) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/es-toolkit@1.44.0/node_modules/es-toolkit/dist/function/noop.mjs
-function noop() {}
-//#endregion
 //#region ../../node_modules/.pnpm/es-toolkit@1.44.0/node_modules/es-toolkit/dist/predicate/isEqual.mjs
 function isEqual(a, b) {
 	return isEqualWith(a, b, noop);
@@ -735,6 +735,12 @@ var expressionParserSpec = createFieldMapSpec("core/expression-parsers", (t) =>
 * ```
 */
 var RefExpressionParser = class {
+	/**
+	* One-line summary of the expression language, surfaced to MCP consumers by
+	* `get-entity-schema` so an agent editing this field knows it is a DSL rather
+	* than free-form text. Point at fuller docs rather than restating the grammar.
+	*/
+	description;
 	/**
 	* Convenience method that combines parse() and getWarnings() into a single call.
 	* Parses the expression and returns all validation warnings (including parse errors).
@@ -1267,6 +1273,33 @@ function getModelIdByNameOrDefault(projectDefinition, name) {
 function getPrimaryKeyFields(model) {
 	return model.model.primaryKeyFieldRefs.map((id) => getScalarFieldById(model, id));
 }
+/**
+* Whether a field with the given read-role restriction is safe to expose as
+* a where-filter operand on a query with the given read-role restriction.
+*
+* A field is safe to filter on only if every principal who can call the
+* query can also read the field's value — i.e. the field's own restriction
+* (if any) is no narrower than the query's. Role lists are OR'd (holding
+* *any* listed role grants access), and an EMPTY role list means
+* "unrestricted" (everyone), not "no one" — the widest grant, not the
+* narrowest. So:
+*  - field unrestricted (empty) -> always safe, regardless of the query.
+*  - query unrestricted (empty) but field restricted -> never safe (the
+*    query admits everyone; the field doesn't).
+*  - both restricted -> safe only if every query role is also a field role
+*    (the query's role set is a SUBSET of the field's), so no principal can
+*    pass the query's gate without also passing the field's.
+*
+* @param field - The field's `globalRoles`/`instanceRoles` restriction.
+* @param query - The query's `globalRoles`/`instanceRoles` restriction.
+* @returns Whether the field is safe to filter on given the query's gate.
+*/
+function isFieldSafeToFilter(field, query) {
+	if (!(field.globalRoles.length > 0 || field.instanceRoles.length > 0)) return true;
+	if (!(query.globalRoles.length > 0 || query.instanceRoles.length > 0)) return false;
+	const isSubset = (subset, superset) => subset.every((role) => superset.includes(role));
+	return isSubset(query.globalRoles, field.globalRoles) && isSubset(query.instanceRoles, field.instanceRoles);
+}
 var ModelUtils = {
 	byId,
 	byIdOrThrow,
@@ -1279,9 +1312,10 @@ var ModelUtils = {
 	hasService,
 	validateModelName,
 	getModelIdByNameOrDefault,
-	getPrimaryKeyFields
+	getPrimaryKeyFields,
+	isFieldSafeToFilter
 };
 //#endregion
-export { getSymbols as $, argumentsTag as A, int8ArrayTag as B, createPluginFieldMap as C, validationHintRegistry as D, CASE_VALIDATORS as E, dateTag as F, setTag as G, numberTag as H, float32ArrayTag as I, uint16ArrayTag as J, stringTag as K, float64ArrayTag as L, arrayTag as M, booleanTag as N, isEqual as O, dataViewTag as P, getTag as Q, int16ArrayTag as R, createFieldMapSpec as S, runInPluginContext as T, objectTag as U, mapTag as V, regexpTag as W, uint8ArrayTag as X, uint32ArrayTag as Y, uint8ClampedArrayTag as Z, createRefContextSlot as _, featureEntityType as a, expressionParserSpec as b, createEntityType as c, definitionSchemaWithSlots as d, isPlainObject as et, withPlaceholderSlots as f, withRef as g, withEnt as h, createFeaturesSchema as i, arrayBufferTag as j, isEqualsSameValueZero as k, createDefinitionSchemaParserContext as l, definitionDefaultRegistry as m, FeatureUtils as n, createPluginSpec as nt, featureNameSchema as o, withDefault as p, symbolTag as q, createFeatureSchema as r, DefinitionEntityType as s, ModelUtils as t, sortBy as tt, definitionSchema as u, createRefContextSlotMap as v, getPluginContext as w, definitionRefRegistry as x, RefExpressionParser as y, int32ArrayTag as z };
+export { getTag as $, isPlainObject as A, int32ArrayTag as B, createPluginFieldMap as C, validationHintRegistry as D, CASE_VALIDATORS as E, dataViewTag as F, regexpTag as G, mapTag as H, dateTag as I, symbolTag as J, setTag as K, float32ArrayTag as L, arrayBufferTag as M, arrayTag as N, isEqual as O, booleanTag as P, uint8ClampedArrayTag as Q, float64ArrayTag as R, createFieldMapSpec as S, runInPluginContext as T, numberTag as U, int8ArrayTag as V, objectTag as W, uint32ArrayTag as X, uint16ArrayTag as Y, uint8ArrayTag as Z, createRefContextSlot as _, featureEntityType as a, expressionParserSpec as b, createEntityType as c, definitionSchemaWithSlots as d, getSymbols as et, withPlaceholderSlots as f, withRef as g, withEnt as h, createFeaturesSchema as i, argumentsTag as j, isEqualsSameValueZero as k, createDefinitionSchemaParserContext as l, definitionDefaultRegistry as m, FeatureUtils as n, createPluginSpec as nt, featureNameSchema as o, withDefault as p, stringTag as q, createFeatureSchema as r, DefinitionEntityType as s, ModelUtils as t, sortBy as tt, definitionSchema as u, createRefContextSlotMap as v, getPluginContext as w, definitionRefRegistry as x, RefExpressionParser as y, int16ArrayTag as z };
 
-//# sourceMappingURL=model-utils-CQpTF3uf.js.map
+//# sourceMappingURL=model-utils-CYaLYwoX.js.map

package/dist/web/assets/{models-Bc3L4Vsl.js → models-BX4xFiEn.js}

@@ -1,5 +1,5 @@
-import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
-import { i as __mf_163, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-BX1_Ngjt.js";
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-Do-7VDVw.js";
+import { i as __mf_163, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-0m3QgjSy.js";
 import { t as BETTER_AUTH_MODELS } from "./model-names-CUS5rSei.js";
 //#region src/better-auth/core/schema/plugin-definition.ts
 var createBetterAuthPluginDefinitionSchema = __mf_163((ctx) => __mf_0.object({ additionalUserAdminRoles: ctx.withDefault(__mf_0.array(ctx.withRef({
@@ -301,4 +301,4 @@ function createBetterAuthPartialDefinition(authFeatureName, accountsFeatureName)
 //#endregion
 export { createBetterAuthPluginDefinitionSchema as n, createBetterAuthPartialDefinition as t };
 
-//# sourceMappingURL=models-Bc3L4Vsl.js.map
+//# sourceMappingURL=models-BX4xFiEn.js.map

package/dist/web/assets/{models-BIKzGkW3.js → models-k-iaCft-.js}

@@ -1,5 +1,5 @@
-import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
-import { i as __mf_163, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-BX1_Ngjt.js";
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-Do-7VDVw.js";
+import { i as __mf_163, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-0m3QgjSy.js";
 import { t as LOCAL_AUTH_MODELS } from "./model-names-BluImOzu.js";
 //#region src/local-auth/core/schema/plugin-definition.ts
 var createLocalAuthPluginDefinitionSchema = __mf_163((ctx) => __mf_0.object({
@@ -282,4 +282,4 @@ function createLocalAuthPartialDefinition(authFeatureName, accountsFeatureName)
 //#endregion
 export { createLocalAuthPluginDefinitionSchema as n, createLocalAuthPartialDefinition as t };
 
-//# sourceMappingURL=models-BIKzGkW3.js.map
+//# sourceMappingURL=models-k-iaCft-.js.map

package/dist/web/assets/{plugin-definition-33i4r91s.js → plugin-definition-BI565qFo.js}

@@ -1,5 +1,5 @@
-import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
-import { i as __mf_163 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-BX1_Ngjt.js";
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-Do-7VDVw.js";
+import { i as __mf_163 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-0m3QgjSy.js";
 //#region src/placeholder-auth/constants/model-names.ts
 var PLACEHOLDER_AUTH_MODELS = { user: "User" };
 //#endregion
@@ -8,4 +8,4 @@ var createPlaceholderAuthPluginDefinitionSchema = __mf_163(() => __mf_0.object({
 //#endregion
 export { PLACEHOLDER_AUTH_MODELS as n, createPlaceholderAuthPluginDefinitionSchema as t };
 
-//# sourceMappingURL=plugin-definition-33i4r91s.js.map
+//# sourceMappingURL=plugin-definition-BI565qFo.js.map

package/dist/web/assets/{plugin-definition-BhNnSvrD.js → plugin-definition-CI1aEVGv.js}

@@ -1,5 +1,5 @@
-import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
-import { i as __mf_163, s as __mf_172, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-BX1_Ngjt.js";
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-Do-7VDVw.js";
+import { i as __mf_163, s as __mf_172, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-0m3QgjSy.js";
 //#region src/auth/core/schema/roles/constants.ts
 var AUTH_DEFAULT_ROLES = [
 	{
@@ -75,4 +75,4 @@ var createAuthPluginDefinitionSchema = __mf_163((ctx) => __mf_0.object({
 //#endregion
 export { createAuthRoleSchema as n, createDefaultAuthRoles as r, createAuthPluginDefinitionSchema as t };
 
-//# sourceMappingURL=plugin-definition-BhNnSvrD.js.map
+//# sourceMappingURL=plugin-definition-CI1aEVGv.js.map

package/dist/web/assets/{styles-BT_OTXuv.js → styles-f4jHVv0S.js}

@@ -1,20 +1,22 @@
-import { t as __mf_53 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-CGsbw2Lx.js";
-import { L as appendErrors, R as get, St as __mf_2, h as NavigationTabsItem, m as NavigationTabs, xt as __mf_1, z as set } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-DsLoA9K7.js";
-import { a as parse, o as parseAsync, s as $ZodError } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
-import { p as __mf_26 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-BX1_Ngjt.js";
-import { i as __mf_24 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-CQuBII8a.js";
+import { t as __mf_53 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-CJ027_El.js";
+import { B as appendErrors, H as set, V as get, bt as __mf_2, c as __mf_157, s as __mf_156, yt as __mf_1 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-BTSgZGcl.js";
+import { a as parseAsync, i as parse, o as $ZodError } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-Do-7VDVw.js";
+import { f as __mf_26 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-0m3QgjSy.js";
+import { i as __mf_25 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-QrOyqu9V.js";
 //#region ../../node_modules/.pnpm/@hookform+resolvers@5.2.2_react-hook-form@7.71.1/node_modules/@hookform/resolvers/dist/resolvers.mjs
 var r = (t, r, o) => {
 	if (t && "reportValidity" in t) {
 		const s = get(o, r);
 		t.setCustomValidity(s && s.message || ""), t.reportValidity();
 	}
-}, o = (e, t) => {
+};
+var o = (e, t) => {
 	for (const o in t.fields) {
 		const s = t.fields[o];
 		s && s.ref && "reportValidity" in s.ref ? r(s.ref, o, e) : s && s.refs && s.refs.forEach((t) => r(t, o, e));
 	}
-}, s$1 = (r, s) => {
+};
+var s$1 = (r, s) => {
 	s.shouldUseNativeValidation && o(r, s);
 	const n = {};
 	for (const o in r) {
@@ -25,7 +27,8 @@ var r = (t, r, o) => {
 		} else set(n, o, c);
 	}
 	return n;
-}, i$1 = (e, t) => {
+};
+var i$1 = (e, t) => {
 	const r = n(t);
 	return e.some((e) => n(e).match(`^${r}\\.\\d+`));
 };
@@ -146,20 +149,20 @@ function a(o$1, a, u) {
 //#endregion
 //#region src/common/components/auth-config-tabs.tsx
 function AuthConfigTabs() {
-	const { definition, schemaParserContext } = __mf_24();
+	const { definition, schemaParserContext } = __mf_25();
 	const authPlugin = schemaParserContext.pluginStore.availablePlugins.find((p) => p.metadata.packageName === "@baseplate-dev/plugin-auth" && p.metadata.name === "auth");
 	if (!authPlugin) return null;
 	const implementationPluginKey = __mf_26.configByKey(definition, authPlugin.metadata.key)?.implementationPluginKey;
 	const authImplementationPlugin = schemaParserContext.pluginStore.availablePlugins.find((p) => p.metadata.key === implementationPluginKey);
 	if (!authImplementationPlugin) return null;
-	return /* @__PURE__ */ __mf_2(NavigationTabs, { children: [/* @__PURE__ */ __mf_1(NavigationTabsItem, {
+	return /* @__PURE__ */ __mf_2(__mf_156, { children: [/* @__PURE__ */ __mf_1(__mf_157, {
 		render: /* @__PURE__ */ __mf_1(__mf_53, {
 			to: "/plugins/edit/$key",
 			params: { key: authPlugin.metadata.key },
 			activeOptions: { exact: true }
 		}),
 		children: "Auth"
-	}), /* @__PURE__ */ __mf_1(NavigationTabsItem, {
+	}), /* @__PURE__ */ __mf_1(__mf_157, {
 		render: /* @__PURE__ */ __mf_1(__mf_53, {
 			to: `/plugins/edit/${authImplementationPlugin.metadata.key}`,
 			activeOptions: { exact: true }
@@ -170,4 +173,4 @@ function AuthConfigTabs() {
 //#endregion
 export { a as n, AuthConfigTabs as t };
 
-//# sourceMappingURL=styles-BT_OTXuv.js.map
+//# sourceMappingURL=styles-f4jHVv0S.js.map

package/dist/web/assets/{virtualExposes-B_hX31Ln.js → virtualExposes-BHQhgLE-.js}

@@ -1,2 +1,2 @@
-import { t as virtual_mf_exposes___mfe_internal__plugin_auth__remoteEntry_js_default } from "./virtual_mf-exposes___mfe_internal__plugin-auth__remoteEntry_js-B_7IVc8D.js";
+import { t as virtual_mf_exposes___mfe_internal__plugin_auth__remoteEntry_js_default } from "./virtual_mf-exposes___mfe_internal__plugin-auth__remoteEntry_js-BQ0UMKSv.js";
 export { virtual_mf_exposes___mfe_internal__plugin_auth__remoteEntry_js_default as default };

package/dist/web/assets/virtual_mf-REMOTE_ENTRY_ID___mfe_internal__plugin-auth__remoteEntry_js-aH8n-Nbe.js

@@ -0,0 +1,259 @@
+import { t as __vitePreload } from "./vite-preload-helper-iIio8xkS.js";
+import { t as init$1 } from "./dist-SBfmsOB2.js";
+//#region virtual:mf-REMOTE_ENTRY_ID:__mfe_internal__plugin-auth__remoteEntry_js
+if (typeof __VUE_HMR_RUNTIME__ === "undefined") globalThis.__VUE_HMR_RUNTIME__ = {
+	createRecord() {},
+	rerender() {},
+	reload() {}
+};
+var __mfResolveGlobalKey = "__mf_init__virtual:mf:__mfe_internal__plugin_mf_2_auth__mf_v__runtimeInit__mf_v__.js__";
+var __mfResolveState = globalThis[__mfResolveGlobalKey];
+if (!__mfResolveState) {
+	let initResolve, initReject;
+	const initPromise = new Promise((re, rj) => {
+		initResolve = re;
+		initReject = rj;
+	});
+	__mfResolveState = globalThis[__mfResolveGlobalKey] = {
+		initPromise,
+		initResolve,
+		initReject
+	};
+}
+var initResolve = __mfResolveState.initResolve;
+var __mfCacheGlobalKey = "__mf_module_cache__";
+globalThis[__mfCacheGlobalKey] ||= {
+	share: {},
+	remote: {}
+};
+globalThis[__mfCacheGlobalKey].share ||= {};
+globalThis[__mfCacheGlobalKey].remote ||= {};
+var __mfModuleCache = globalThis[__mfCacheGlobalKey];
+for (const __mfShareKey of Object.keys(__mfModuleCache.share)) if (__mfShareKey.startsWith("default:")) {
+	const __mfLegacyShareKey = __mfShareKey.slice(8);
+	if (__mfModuleCache.share[__mfLegacyShareKey] === void 0) __mfModuleCache.share[__mfLegacyShareKey] = __mfModuleCache.share[__mfShareKey];
+} else if (!__mfShareKey.includes(":")) {
+	const __mfDefaultShareKey = "default:" + __mfShareKey;
+	if (__mfModuleCache.share[__mfDefaultShareKey] === void 0) __mfModuleCache.share[__mfDefaultShareKey] = __mfModuleCache.share[__mfShareKey];
+}
+var initTokens = {};
+var shareScopeName = "default";
+var mfName = "plugin-auth";
+var localSharedImportMapPromise;
+var exposesMapPromise;
+async function retrySharedInit(fn) {
+	for (let attempt = 0;; attempt++) try {
+		return await fn();
+	} catch (e) {
+		throw e;
+	}
+}
+async function getLocalSharedImportMap() {
+	if (!localSharedImportMapPromise) localSharedImportMapPromise = retrySharedInit(() => __vitePreload(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__plugin_mf_2_auth-3sV-KVGF.js"), [], import.meta.url)).catch((e) => {
+		localSharedImportMapPromise = void 0;
+		throw e;
+	});
+	return localSharedImportMapPromise;
+}
+async function getExposesMap() {
+	if (!exposesMapPromise) exposesMapPromise = retrySharedInit(() => __vitePreload(() => import("./virtualExposes-BHQhgLE-.js"), [], import.meta.url)).then((mod) => mod.default ?? mod).catch((e) => {
+		exposesMapPromise = void 0;
+		throw e;
+	});
+	return exposesMapPromise;
+}
+async function init(shared = {}, initScope = []) {
+	const __mfGetSharedCacheDescriptor = (pkg, singleton, version, scope) => {
+		const scopeName = (Array.isArray(scope) ? scope[0] : scope) || "default";
+		const id = singleton || !version ? pkg : pkg + "@" + version;
+		const descriptor = { canonical: scopeName + ":" + id };
+		if (scopeName === "default") descriptor.aliases = [id];
+		return descriptor;
+	};
+	const __mfReadSharedCache = (cache, descriptor) => {
+		const value = cache[descriptor.canonical];
+		if (value !== void 0) return value;
+		const aliases = descriptor.aliases || [];
+		for (const alias of aliases) {
+			const aliasValue = cache[alias];
+			if (aliasValue !== void 0) {
+				cache[descriptor.canonical] = aliasValue;
+				return aliasValue;
+			}
+		}
+	};
+	const __mfWriteSharedCache = (cache, descriptor, value) => {
+		cache[descriptor.canonical] = value;
+		const aliases = descriptor.aliases || [];
+		for (const alias of aliases) if (cache[alias] === void 0) cache[alias] = value;
+		return value;
+	};
+	const __mfTreeShakingSelectionCacheKey = Symbol.for("module-federation.tree-shaking-shared-selection-cache");
+	const __mfReadTreeShakingSharedSelection = (cache, descriptor, consumer) => {
+		const fullModule = __mfReadSharedCache(cache, descriptor);
+		if (fullModule !== void 0) return fullModule;
+		return cache[__mfTreeShakingSelectionCacheKey]?.[descriptor.canonical]?.[consumer];
+	};
+	const { usedShared, usedRemotes } = await getLocalSharedImportMap();
+	try {
+		const allInstances = globalThis.__FEDERATION__?.__SHARE__;
+		if (allInstances) {
+			const __mfNormalizeRuntimeShare = (mod) => {
+				let current = mod;
+				for (let i = 0; i < 5; i++) {
+					const defaultExport = current?.default;
+					if (!defaultExport || typeof defaultExport !== "object" || Object.keys(defaultExport).length === 0) break;
+					const namedValues = Object.keys(current).filter((key) => key !== "default").map((key) => current[key]);
+					if (namedValues.length > 0 && namedValues.some((value) => value !== void 0)) break;
+					current = defaultExport;
+				}
+				return current;
+			};
+			for (const [, scopes] of Object.entries(allInstances)) {
+				const scopeShare = scopes?.["default"];
+				if (!scopeShare) continue;
+				for (const [pkg, versionMap] of Object.entries(scopeShare)) {
+					const usedShare = usedShared?.[pkg];
+					const selectedProvider = usedShare?.shareConfig?.import === false ? __mfSelectSharedProvider(versionMap, pkg, usedShare, "version-first") : void 0;
+					const providerEntries = usedShare?.shareConfig?.import === false ? Object.entries(versionMap).filter(([, provider]) => provider === selectedProvider) : Object.entries(versionMap);
+					for (const [version, provider] of providerEntries) {
+						if (!provider.lib) continue;
+						const cacheDescriptor = __mfGetSharedCacheDescriptor(pkg, provider.shareConfig?.singleton, version, "default");
+						if (__mfReadSharedCache(__mfModuleCache.share, cacheDescriptor) !== void 0) continue;
+						const mod = typeof provider.lib === "function" ? provider.lib() : provider.lib;
+						const normalized = __mfNormalizeRuntimeShare(await Promise.resolve(mod));
+						__mfWriteSharedCache(__mfModuleCache.share, cacheDescriptor, normalized);
+						if (provider.shareConfig?.singleton && usedShare) {
+							const usedCacheDescriptor = __mfGetSharedCacheDescriptor(pkg, usedShare.shareConfig?.singleton, usedShare.version, usedShare.scope);
+							if (__mfReadSharedCache(__mfModuleCache.share, usedCacheDescriptor) === void 0) __mfWriteSharedCache(__mfModuleCache.share, usedCacheDescriptor, normalized);
+						}
+					}
+				}
+			}
+		}
+	} catch (e) {
+		console.error("[Module Federation] Failed to bridge external shared modules", e);
+	}
+	for (const [pkg, share] of Object.entries(usedShared)) {
+		const cacheDescriptor = __mfGetSharedCacheDescriptor(pkg, share.shareConfig?.singleton, share.version, share.scope);
+		if (__mfReadSharedCache(__mfModuleCache.share, cacheDescriptor) !== void 0) continue;
+		const singletonCacheDescriptor = __mfGetSharedCacheDescriptor(pkg, true, share.version, share.scope);
+		const singletonModule = __mfReadSharedCache(__mfModuleCache.share, singletonCacheDescriptor);
+		if (singletonModule !== void 0) __mfWriteSharedCache(__mfModuleCache.share, cacheDescriptor, singletonModule);
+	}
+	const __mfSeedKeys = [
+		"react/jsx-runtime",
+		"react",
+		"react-dom",
+		"zod",
+		"@baseplate-dev/ui-components",
+		"@baseplate-dev/project-builder-lib/web",
+		"@baseplate-dev/project-builder-lib",
+		"@tanstack/react-router"
+	].filter((pkg) => usedShared[pkg] !== void 0);
+	const __mfSeedPackageName = (pkg) => pkg.startsWith("@") ? pkg.split("/").slice(0, 2).join("/") : pkg.split("/")[0];
+	for (const pkg of Object.keys(usedShared)) {
+		if (__mfSeedKeys.includes(pkg)) continue;
+		const packageName = __mfSeedPackageName(pkg);
+		const rootIndex = __mfSeedKeys.indexOf(packageName);
+		if (rootIndex === -1) {
+			__mfSeedKeys.push(pkg);
+			continue;
+		}
+		let insertIndex = rootIndex;
+		while (insertIndex > 0 && __mfSeedPackageName(__mfSeedKeys[insertIndex - 1]) === packageName && __mfSeedKeys[insertIndex - 1] !== packageName) insertIndex--;
+		__mfSeedKeys.splice(insertIndex, 0, pkg);
+	}
+	for (const pkg of __mfSeedKeys) {
+		const share = usedShared[pkg];
+		const cacheDescriptor = __mfGetSharedCacheDescriptor(pkg, share.shareConfig?.singleton, share.version, share.scope);
+		if (share.shareConfig?.import === false || Boolean(share.treeShaking) || __mfReadSharedCache(__mfModuleCache.share, cacheDescriptor) !== void 0) continue;
+		const singletonCacheDescriptor = __mfGetSharedCacheDescriptor(pkg, true, share.version, share.scope);
+		const singletonModule = __mfReadSharedCache(__mfModuleCache.share, singletonCacheDescriptor);
+		if (singletonModule !== void 0) {
+			__mfWriteSharedCache(__mfModuleCache.share, cacheDescriptor, singletonModule);
+			continue;
+		}
+		const factory = await share.get();
+		const mod = typeof factory === "function" ? factory() : factory;
+		const resolved = await Promise.resolve(mod);
+		const __mfNormalizeRuntimeShare = (mod) => {
+			let current = mod;
+			for (let i = 0; i < 5; i++) {
+				const defaultExport = current?.default;
+				if (!defaultExport || typeof defaultExport !== "object" || Object.keys(defaultExport).length === 0) break;
+				const namedValues = Object.keys(current).filter((key) => key !== "default").map((key) => current[key]);
+				if (namedValues.length > 0 && namedValues.some((value) => value !== void 0)) break;
+				current = defaultExport;
+			}
+			return current;
+		};
+		const normalizedModule = __mfNormalizeRuntimeShare(resolved);
+		const exportModule = normalizedModule === resolved ? { ...resolved } : normalizedModule;
+		Object.defineProperty(exportModule, "__esModule", {
+			value: true,
+			enumerable: false
+		});
+		__mfWriteSharedCache(__mfModuleCache.share, cacheDescriptor, exportModule);
+	}
+	const __browserPlugins = [];
+	const __ssrPlugins = typeof globalThis.window === "undefined" ? await Promise.all([]) : [];
+	const initRes = init$1({
+		name: mfName,
+		remotes: usedRemotes,
+		shared: usedShared,
+		plugins: [...__browserPlugins, ...__ssrPlugins],
+		shareStrategy: "version-first"
+	});
+	var initToken = initTokens[shareScopeName];
+	if (!initToken) initToken = initTokens[shareScopeName] = { from: mfName };
+	if (initScope.indexOf(initToken) >= 0) return;
+	initScope.push(initToken);
+	initRes.initShareScopeMap("default", shared);
+	try {
+		await retrySharedInit(async () => {
+			await Promise.all(await initRes.initializeSharing("default", {
+				strategy: "version-first",
+				from: "build",
+				initScope
+			}));
+		});
+	} catch (e) {
+		console.error("[Module Federation]", e);
+	}
+	for (const [pkg, share] of Object.entries(usedShared)) {
+		const cacheDescriptor = __mfGetSharedCacheDescriptor(pkg, share.shareConfig?.singleton, share.version, share.scope);
+		const cachedShare = share.treeShaking ? __mfReadTreeShakingSharedSelection(__mfModuleCache.share, cacheDescriptor, mfName) : __mfReadSharedCache(__mfModuleCache.share, cacheDescriptor);
+		if (share.shareConfig?.import !== false || cachedShare !== void 0) continue;
+		const __mfNormalizeRuntimeShare = (mod) => {
+			let current = mod;
+			for (let i = 0; i < 5; i++) {
+				const defaultExport = current?.default;
+				if (!defaultExport || typeof defaultExport !== "object" || Object.keys(defaultExport).length === 0) break;
+				const namedValues = Object.keys(current).filter((key) => key !== "default").map((key) => current[key]);
+				if (namedValues.length > 0 && namedValues.some((value) => value !== void 0)) break;
+				current = defaultExport;
+			}
+			return current;
+		};
+		const versions = shared?.[pkg];
+		const provider = __mfSelectSharedProvider(versions, pkg, share, "version-first");
+		if (!provider) continue;
+		const factory = provider.lib || (provider.loading ? await provider.loading : await provider.get?.());
+		const mod = typeof factory === "function" ? factory() : factory;
+		const resolved = await Promise.resolve(mod);
+		__mfWriteSharedCache(__mfModuleCache.share, cacheDescriptor, __mfNormalizeRuntimeShare(resolved));
+	}
+	initResolve(initRes);
+	return initRes;
+}
+async function getExposes(moduleName) {
+	const exposesMap = await getExposesMap();
+	if (!(moduleName in exposesMap)) throw new Error(`[Module Federation] Module ${moduleName} does not exist in container.`);
+	if (__mfModuleCache.pendingShareLoads) await Promise.all(__mfModuleCache.pendingShareLoads);
+	return exposesMap[moduleName]().then((res) => () => res);
+}
+//#endregion
+export { init as n, getExposes as t };
+
+//# sourceMappingURL=virtual_mf-REMOTE_ENTRY_ID___mfe_internal__plugin-auth__remoteEntry_js-aH8n-Nbe.js.map