@baseplate-dev/plugin-auth 0.6.18 → 0.6.19

package/dist/web/assets/{web-xJ-GnSkC.js → web-CypPeiVv.js}

@@ -1,9 +1,9 @@
-import { Q as __mf_2, Z as __mf_1, _ as __mf_200, a as __mf_163, b as __mf_250, f as __mf_195, g as __mf_199, h as __mf_198, m as __mf_197, mt as __mf_34, n as __mf_125, p as __mf_196, vt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__ } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-C2GDE8Py.js";
-import { T as __mf_73, _ as __mf_242, f as __mf_17, g as __mf_238, h as __mf_23, w as __mf_71, y as __mf_55 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-Cx7TvZ_H.js";
-import { c as __mf_25, i as __mf_15, l as __mf_26, n as __mf_11, r as __mf_14, t as __mf_0, u as __mf_7 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-D3Nvasea.js";
-import { n as a, t as AuthConfigTabs } from "./styles-EOyEbGA4.js";
-import { t as getAuthPluginDefinition } from "./get-auth-plugin-definition-DyokUVjX.js";
-import { n as createLocalAuthPluginDefinitionSchema, t as createLocalAuthPartialDefinition } from "./models-BcUgOGGn.js";
+import { Q as __mf_2, Z as __mf_1, d as __mf_202, f as __mf_203, g as __mf_207, h as __mf_206, i as __mf_166, m as __mf_205, mt as __mf_34, p as __mf_204, t as __mf_128, vt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__, y as __mf_262 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-CtIleM_e.js";
+import { T as __mf_74, _ as __mf_244, f as __mf_18, g as __mf_240, h as __mf_24, w as __mf_72, y as __mf_56 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-DE4rTqEA.js";
+import { c as __mf_25, i as __mf_15, l as __mf_26, n as __mf_11, r as __mf_14, t as __mf_0, u as __mf_7 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-mszeXpf-.js";
+import { n as a, t as AuthConfigTabs } from "./styles-BQEcQHoR.js";
+import { t as getAuthPluginDefinition } from "./get-auth-plugin-definition-BgWWHl_Y.js";
+import { n as createLocalAuthPluginDefinitionSchema, t as createLocalAuthPartialDefinition } from "./models-DF6DoXt6.js";
 //#region src/local-auth/core/components/local-auth-definition-editor.tsx
 init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__();
 function LocalAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
@@ -32,11 +32,11 @@ function LocalAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSav
 	const accountsFeature = definition.features.find((f) => f.id === authDefinition.accountsFeatureRef);
 	if (!accountsFeature) throw new Error(`Accounts feature not found for ref: ${authDefinition.accountsFeatureRef}`);
 	const partialDef = __mf_34(() => createLocalAuthPartialDefinition(authFeature.name, accountsFeature.name), [authFeature.name, accountsFeature.name]);
-	const diff = __mf_34(() => __mf_238(definitionContainer.schema, definitionContainer.definition, partialDef), [definitionContainer, partialDef]);
+	const diff = __mf_34(() => __mf_240(definitionContainer.schema, definitionContainer.definition, partialDef), [definitionContainer, partialDef]);
 	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
 		const updatedData = { ...data };
-		__mf_242(definitionContainer, partialDef)(draftConfig);
-		__mf_23.setPluginConfig(draftConfig, metadata, updatedData, definitionContainer);
+		__mf_244(definitionContainer, partialDef)(draftConfig);
+		__mf_24.setPluginConfig(draftConfig, metadata, updatedData, definitionContainer);
 	}, {
 		successMessage: "Successfully saved auth plugin!",
 		onSuccess: () => {
@@ -58,14 +58,14 @@ function LocalAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSav
 				className: "auth:max-w-6xl auth:flex-1",
 				children: [/* @__PURE__ */ __mf_1("div", {
 					className: "auth:pb-16",
-					children: /* @__PURE__ */ __mf_2(__mf_195, { children: [
-						/* @__PURE__ */ __mf_2(__mf_196, { children: [/* @__PURE__ */ __mf_2(__mf_199, { children: [/* @__PURE__ */ __mf_1(__mf_200, { children: "Local Auth User Models" }), /* @__PURE__ */ __mf_1(__mf_198, { children: "The plugin will automatically configure the models it needs." })] }), /* @__PURE__ */ __mf_1(__mf_197, {
+					children: /* @__PURE__ */ __mf_2(__mf_202, { children: [
+						/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "Local Auth User Models" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "The plugin will automatically configure the models it needs." })] }), /* @__PURE__ */ __mf_1(__mf_204, {
 							className: "auth:space-y-6",
 							children: /* @__PURE__ */ __mf_1(__mf_0, { diff })
 						})] }),
-						/* @__PURE__ */ __mf_2(__mf_196, { children: [/* @__PURE__ */ __mf_2(__mf_199, { children: [/* @__PURE__ */ __mf_1(__mf_200, { children: "User Management Permissions" }), /* @__PURE__ */ __mf_1(__mf_198, { children: "The \"admin\" role always has user management permissions. Optionally add more roles that can manage users and assign roles in the admin interface." })] }), /* @__PURE__ */ __mf_1(__mf_197, {
+						/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "User Management Permissions" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "The \"admin\" role always has user management permissions. Optionally add more roles that can manage users and assign roles in the admin interface." })] }), /* @__PURE__ */ __mf_1(__mf_204, {
 							className: "auth:space-y-6",
-							children: /* @__PURE__ */ __mf_1(__mf_163, {
+							children: /* @__PURE__ */ __mf_1(__mf_166, {
 								label: "Additional User Admin Roles",
 								name: "additionalUserAdminRoles",
 								control,
@@ -73,18 +73,18 @@ function LocalAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSav
 								description: "Additional roles (beyond admin) that can manage users and assign roles."
 							})
 						})] }),
-						/* @__PURE__ */ __mf_2(__mf_196, { children: [/* @__PURE__ */ __mf_2(__mf_199, { children: [/* @__PURE__ */ __mf_1(__mf_200, { children: "Registration Settings" }), /* @__PURE__ */ __mf_1(__mf_198, { children: "Configure what information is collected during user registration." })] }), /* @__PURE__ */ __mf_1(__mf_197, {
+						/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "Registration Settings" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "Configure what information is collected during user registration." })] }), /* @__PURE__ */ __mf_1(__mf_204, {
 							className: "auth:space-y-6",
-							children: /* @__PURE__ */ __mf_1(__mf_250, {
+							children: /* @__PURE__ */ __mf_1(__mf_262, {
 								label: "Require Name on Registration",
 								name: "requireNameOnRegistration",
 								control,
 								description: "When enabled, users must provide their name when registering."
 							})
 						})] }),
-						/* @__PURE__ */ __mf_2(__mf_196, { children: [/* @__PURE__ */ __mf_2(__mf_199, { children: [/* @__PURE__ */ __mf_1(__mf_200, { children: "Sign-in Methods" }), /* @__PURE__ */ __mf_1(__mf_198, { children: "Choose how users can sign in, in addition to email and password." })] }), /* @__PURE__ */ __mf_1(__mf_197, {
+						/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "Sign-in Methods" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "Choose how users can sign in, in addition to email and password." })] }), /* @__PURE__ */ __mf_1(__mf_204, {
 							className: "auth:space-y-6",
-							children: /* @__PURE__ */ __mf_1(__mf_250, {
+							children: /* @__PURE__ */ __mf_1(__mf_262, {
 								label: "Email Sign-in Codes",
 								name: "emailOtp",
 								control,
@@ -92,7 +92,7 @@ function LocalAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSav
 							})
 						})] })
 					] })
-				}), /* @__PURE__ */ __mf_1(__mf_125, {
+				}), /* @__PURE__ */ __mf_1(__mf_128, {
 					form,
 					allowSaveWithoutDirty: !pluginMetadata || diff.hasChanges
 				})]
@@ -108,7 +108,7 @@ function LocalAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSav
 * web app form.
 */
 function LocalAuthWebAppSettingsForm({ formProps, pluginKey }) {
-	return /* @__PURE__ */ __mf_1(__mf_250, {
+	return /* @__PURE__ */ __mf_1(__mf_262, {
 		label: "Disable Registration",
 		description: "When enabled, this site's sign-up page and link are hidden so users can only be added via an invite.",
 		control: formProps.control,
@@ -119,11 +119,11 @@ function LocalAuthWebAppSettingsForm({ formProps, pluginKey }) {
 //#region src/local-auth/core/web.ts
 var AUTH_FEATURE_NAME = "accounts/auth";
 var ACCOUNTS_FEATURE_NAME = "accounts/users";
-var web_default = __mf_55({
+var web_default = __mf_56({
 	name: "web",
 	dependencies: {
-		webConfig: __mf_73,
-		pluginDefaults: __mf_71,
+		webConfig: __mf_74,
+		pluginDefaults: __mf_72,
 		webAppSchemaExtensionWeb: __mf_26
 	},
 	initialize: ({ webConfig, pluginDefaults, webAppSchemaExtensionWeb }, { pluginKey }) => {
@@ -133,8 +133,8 @@ var web_default = __mf_55({
 			Form: LocalAuthWebAppSettingsForm
 		}));
 		pluginDefaults.builders.set(pluginKey, ({ draft }) => {
-			__mf_17.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
-			__mf_17.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
+			__mf_18.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			__mf_18.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
 			return {
 				config: {},
 				partialDef: createLocalAuthPartialDefinition(AUTH_FEATURE_NAME, ACCOUNTS_FEATURE_NAME)
@@ -145,4 +145,4 @@ var web_default = __mf_55({
 //#endregion
 export { web_default as default };
 
-//# sourceMappingURL=web-xJ-GnSkC.js.map
+//# sourceMappingURL=web-CypPeiVv.js.map

package/dist/web/assets/{web-Dgb85jhs.js → web-CzK_la2_.js}

@@ -1,9 +1,9 @@
-import { A as __mf_83, C as __mf_34$1, D as __mf_6, K as useWatch, L as MdAdd, M as __mf_85, N as __mf_88, O as __mf_80, Q as __mf_2, R as MdDeleteOutline, T as __mf_5, U as useFieldArray$1, W as useForm, X as __mf_0, Z as __mf_1, _ as __mf_200, c as __mf_189, d as __mf_192, dt as __mf_30, f as __mf_195, g as __mf_199, gt as __mf_38, h as __mf_198, j as __mf_84, k as __mf_82, l as __mf_190, m as __mf_197, mt as __mf_34, n as __mf_125, p as __mf_196, r as __mf_133, u as __mf_191, v as __mf_202, vt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__, w as __mf_4, x as __mf_273, y as __mf_24, z as MdEdit } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-C2GDE8Py.js";
-import { n as __mf_92, t as __mf_13 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-CiccpWjh.js";
-import { T as __mf_73, b as __mf_58, c as __mf_145, f as __mf_17, h as __mf_23, w as __mf_71, y as __mf_55 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-Cx7TvZ_H.js";
-import { n as createAuthRoleSchema, r as createDefaultAuthRoles, t as createAuthPluginDefinitionSchema } from "./plugin-definition-D1EImXIf.js";
-import { i as __mf_15, n as __mf_11, r as __mf_14, s as __mf_2$1, u as __mf_7 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-D3Nvasea.js";
-import { n as a, t as AuthConfigTabs } from "./styles-EOyEbGA4.js";
+import { A as __mf_86, C as __mf_3, D as __mf_6, K as useWatch, L as MdAdd, M as __mf_88, N as __mf_91, O as __mf_83, Q as __mf_2, R as MdDeleteOutline, T as __mf_5, U as useFieldArray$1, W as useForm, X as __mf_0, Z as __mf_1, _ as __mf_214, c as __mf_197, d as __mf_202, dt as __mf_30, f as __mf_203, g as __mf_207, gt as __mf_38, h as __mf_206, j as __mf_87, k as __mf_85, l as __mf_198, m as __mf_205, mt as __mf_34, n as __mf_136, p as __mf_204, s as __mf_196, t as __mf_128, u as __mf_199, v as __mf_24, vt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__, w as __mf_37, x as __mf_296, z as MdEdit } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-CtIleM_e.js";
+import { n as __mf_92, t as __mf_13 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-BckLhSjF.js";
+import { T as __mf_74, b as __mf_59, c as __mf_146, f as __mf_18, h as __mf_24$1, w as __mf_72, y as __mf_56 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-DE4rTqEA.js";
+import { n as createAuthRoleSchema, r as createDefaultAuthRoles, t as createAuthPluginDefinitionSchema } from "./plugin-definition--k0VAeK3.js";
+import { i as __mf_15, n as __mf_11, r as __mf_14, s as __mf_2$1, u as __mf_7 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-mszeXpf-.js";
+import { n as a, t as AuthConfigTabs } from "./styles-BQEcQHoR.js";
 //#region ../../node_modules/.pnpm/@hookform+lenses@0.8.1_react-hook-form@7.71.1_react@19.2.8/node_modules/@hookform/lenses/dist/rhf/index.js
 init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__();
 function useFieldArray(props) {
@@ -57,39 +57,39 @@ function RoleDialog({ open, onOpenChange, role, isNew = false, onSave }) {
 		onOpenChange?.(false);
 	});
 	const formId = __mf_30();
-	return /* @__PURE__ */ __mf_1(__mf_80, {
+	return /* @__PURE__ */ __mf_1(__mf_83, {
 		open,
 		onOpenChange,
-		children: /* @__PURE__ */ __mf_1(__mf_82, { children: /* @__PURE__ */ __mf_2("form", {
+		children: /* @__PURE__ */ __mf_1(__mf_85, { children: /* @__PURE__ */ __mf_2("form", {
 			id: formId,
 			onSubmit: (e) => {
 				e.stopPropagation();
 				return onSubmit(e);
 			},
 			children: [
-				/* @__PURE__ */ __mf_2(__mf_85, { children: [/* @__PURE__ */ __mf_1(__mf_88, { children: isNew ? "Add Role" : "Edit Role" }), /* @__PURE__ */ __mf_1(__mf_83, { children: isNew ? "Enter the details for the new role." : "Update the role details below." })] }),
+				/* @__PURE__ */ __mf_2(__mf_88, { children: [/* @__PURE__ */ __mf_1(__mf_91, { children: isNew ? "Add Role" : "Edit Role" }), /* @__PURE__ */ __mf_1(__mf_86, { children: isNew ? "Enter the details for the new role." : "Update the role details below." })] }),
 				/* @__PURE__ */ __mf_2("div", {
 					className: "auth:space-y-4 auth:py-4",
-					children: [/* @__PURE__ */ __mf_1(__mf_133, {
+					children: [/* @__PURE__ */ __mf_1(__mf_136, {
 						label: "Role Name",
 						name: "name",
 						control,
 						placeholder: "Enter role name"
-					}), /* @__PURE__ */ __mf_1(__mf_133, {
+					}), /* @__PURE__ */ __mf_1(__mf_136, {
 						label: "Description",
 						name: "comment",
 						control,
 						placeholder: "Describe this role's purpose"
 					})]
 				}),
-				/* @__PURE__ */ __mf_2(__mf_84, { children: [/* @__PURE__ */ __mf_1(__mf_34$1, {
+				/* @__PURE__ */ __mf_2(__mf_87, { children: [/* @__PURE__ */ __mf_1(__mf_37, {
 					type: "button",
 					variant: "outline",
 					onClick: () => {
 						onOpenChange?.(false);
 					},
 					children: "Cancel"
-				}), /* @__PURE__ */ __mf_2(__mf_34$1, {
+				}), /* @__PURE__ */ __mf_2(__mf_37, {
 					form: formId,
 					type: "submit",
 					children: [isNew ? "Add" : "Update", " Role"]
@@ -102,7 +102,7 @@ function RoleDialog({ open, onOpenChange, role, isNew = false, onSave }) {
 //#region src/auth/core/components/role-editor-form/role-editor-form.tsx
 init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__();
 function RoleEditorForm({ className, control }) {
-	const { requestConfirm } = __mf_273();
+	const { requestConfirm } = __mf_296();
 	const { append, update, remove } = useFieldArray({
 		control,
 		name: "roles"
@@ -129,27 +129,27 @@ function RoleEditorForm({ className, control }) {
 			}
 		});
 	}
-	return /* @__PURE__ */ __mf_2(__mf_196, {
+	return /* @__PURE__ */ __mf_2(__mf_203, {
 		className,
-		children: [/* @__PURE__ */ __mf_2(__mf_199, { children: [/* @__PURE__ */ __mf_1(__mf_200, { children: "User Roles" }), /* @__PURE__ */ __mf_1(__mf_198, { children: "Define roles for your application. Default roles are protected and cannot be removed." })] }), /* @__PURE__ */ __mf_2(__mf_197, {
+		children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "User Roles" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "Define roles for your application. Default roles are protected and cannot be removed." })] }), /* @__PURE__ */ __mf_2(__mf_204, {
 			className: "auth:space-y-4",
 			children: [
-				roles.map((role, roleIdx) => /* @__PURE__ */ __mf_2(__mf_189, { children: [/* @__PURE__ */ __mf_2(__mf_192, { children: [/* @__PURE__ */ __mf_1(__mf_191, {
+				roles.map((role, roleIdx) => /* @__PURE__ */ __mf_2(__mf_196, { children: [/* @__PURE__ */ __mf_2(__mf_199, { children: [/* @__PURE__ */ __mf_1(__mf_198, {
 					title: "Name",
 					children: /* @__PURE__ */ __mf_1("div", {
 						className: "auth:flex auth:items-center auth:gap-2",
 						children: /* @__PURE__ */ __mf_1("span", { children: role.name })
 					})
-				}), /* @__PURE__ */ __mf_1(__mf_191, {
+				}), /* @__PURE__ */ __mf_1(__mf_198, {
 					title: "Description",
 					children: role.comment.trim() || /* @__PURE__ */ __mf_1("span", {
 						className: "auth:text-muted-foreground",
 						children: "No description"
 					})
-				})] }), /* @__PURE__ */ __mf_2(__mf_190, { children: [role.builtIn && /* @__PURE__ */ __mf_1(__mf_24, {
+				})] }), /* @__PURE__ */ __mf_2(__mf_197, { children: [role.builtIn && /* @__PURE__ */ __mf_1(__mf_24, {
 					variant: "secondary",
 					children: "Default Role"
-				}), !role.builtIn && /* @__PURE__ */ __mf_2(__mf_0, { children: [/* @__PURE__ */ __mf_1(__mf_34$1, {
+				}), !role.builtIn && /* @__PURE__ */ __mf_2(__mf_0, { children: [/* @__PURE__ */ __mf_1(__mf_37, {
 					variant: "ghost",
 					size: "icon",
 					title: "Edit",
@@ -159,7 +159,7 @@ function RoleEditorForm({ className, control }) {
 						setIsEditing(true);
 					},
 					children: /* @__PURE__ */ __mf_1(MdEdit, {})
-				}), /* @__PURE__ */ __mf_1(__mf_34$1, {
+				}), /* @__PURE__ */ __mf_1(__mf_37, {
 					variant: "ghostDestructive",
 					size: "icon",
 					title: "Delete",
@@ -176,12 +176,12 @@ function RoleEditorForm({ className, control }) {
 					isNew: roleToEdit ? !roles.some((r) => r.id === roleToEdit.id) : true,
 					onSave: handleSaveRole
 				}),
-				/* @__PURE__ */ __mf_2(__mf_34$1, {
+				/* @__PURE__ */ __mf_2(__mf_37, {
 					variant: "secondary",
 					size: "sm",
 					onClick: () => {
 						setRoleToEdit({
-							id: __mf_145.generateNewId(),
+							id: __mf_146.generateNewId(),
 							name: "",
 							comment: "",
 							builtIn: false
@@ -200,12 +200,12 @@ init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react
 function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
 	const { definition, definitionContainer, schemaParserContext, saveDefinitionWithFeedback } = __mf_14();
 	const authPluginDefinitionSchema = __mf_11(createAuthPluginDefinitionSchema);
-	const availableImplementations = __mf_58(schemaParserContext.pluginStore, metadata.key);
+	const availableImplementations = __mf_59(schemaParserContext.pluginStore, metadata.key);
 	const defaultImplementation = availableImplementations.find((i) => i.fullyQualifiedName === "@baseplate-dev/plugin-auth:local-auth") ?? availableImplementations[0];
 	const defaultValues = __mf_34(() => {
 		if (pluginMetadata?.config) return pluginMetadata.config;
-		const defaultAuthFeatureRef = __mf_17.getFeatureIdByNameOrDefault(definition, "accounts/auth");
-		const defaultAccountsFeatureRef = __mf_17.getFeatureIdByNameOrDefault(definition, "accounts/users");
+		const defaultAuthFeatureRef = __mf_18.getFeatureIdByNameOrDefault(definition, "accounts/auth");
+		const defaultAccountsFeatureRef = __mf_18.getFeatureIdByNameOrDefault(definition, "accounts/users");
 		if (!defaultImplementation) throw new Error("No auth implementation plugins are available");
 		return {
 			implementationPluginKey: defaultImplementation.key,
@@ -225,20 +225,20 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 	const { control, reset, handleSubmit, watch } = form;
 	const implementationPluginKey = watch("implementationPluginKey");
 	const selectedPlugin = implementationPluginKey && availableImplementations.find((i) => i.key === implementationPluginKey);
-	const isSelectedImplementationActive = !!__mf_23.byKey(definitionContainer.definition, implementationPluginKey);
+	const isSelectedImplementationActive = !!__mf_24$1.byKey(definitionContainer.definition, implementationPluginKey);
 	const hasSelectedImplementationChanged = implementationPluginKey !== (pluginMetadata?.config)?.implementationPluginKey;
 	const selectedImplementationUrl = selectedPlugin ? `/plugins/edit/${selectedPlugin.key}` : void 0;
 	const navigate = __mf_92();
 	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
-		const featureRef = __mf_17.ensureFeatureByNameRecursively(draftConfig, data.authFeatureRef);
-		const accountsFeatureRef = __mf_17.ensureFeatureByNameRecursively(draftConfig, data.accountsFeatureRef);
-		__mf_23.setPluginConfig(draftConfig, metadata, {
+		const featureRef = __mf_18.ensureFeatureByNameRecursively(draftConfig, data.authFeatureRef);
+		const accountsFeatureRef = __mf_18.ensureFeatureByNameRecursively(draftConfig, data.accountsFeatureRef);
+		__mf_24$1.setPluginConfig(draftConfig, metadata, {
 			...data,
 			authFeatureRef: featureRef,
 			accountsFeatureRef
 		}, definitionContainer);
 		const otherPlugins = availableImplementations.filter((i) => i.key !== implementationPluginKey);
-		for (const plugin of otherPlugins) __mf_23.disablePlugin(draftConfig, plugin.key, definitionContainer.parserContext);
+		for (const plugin of otherPlugins) __mf_24$1.disablePlugin(draftConfig, plugin.key, definitionContainer.parserContext);
 	}, {
 		successMessage: `Successfully saved auth plugin! ${selectedImplementationUrl && !isSelectedImplementationActive ? `Please configure the provider plugin before syncing.` : ""}`,
 		onSuccess: () => {
@@ -263,7 +263,7 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 				className: "auth:max-w-6xl auth:flex-1",
 				children: [/* @__PURE__ */ __mf_2("div", {
 					className: "auth:pb-16",
-					children: [!isSelectedImplementationActive && selectedPlugin && !hasSelectedImplementationChanged && /* @__PURE__ */ __mf_2(__mf_4, {
+					children: [!isSelectedImplementationActive && selectedPlugin && !hasSelectedImplementationChanged && /* @__PURE__ */ __mf_2(__mf_3, {
 						variant: "warning",
 						children: [/* @__PURE__ */ __mf_1(__mf_6, { children: "Implementation Provider Not Active" }), /* @__PURE__ */ __mf_1(__mf_5, { children: /* @__PURE__ */ __mf_2("p", { children: [
 							"The selected implementation provider is not active. Please make sure",
@@ -276,7 +276,7 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 							" ",
 							"before syncing."
 						] }) })]
-					}), /* @__PURE__ */ __mf_2(__mf_195, { children: [/* @__PURE__ */ __mf_2(__mf_196, { children: [/* @__PURE__ */ __mf_2(__mf_199, { children: [/* @__PURE__ */ __mf_1(__mf_200, { children: "General Settings" }), /* @__PURE__ */ __mf_1(__mf_198, { children: "Configure the general settings for the auth plugin." })] }), /* @__PURE__ */ __mf_2(__mf_197, {
+					}), /* @__PURE__ */ __mf_2(__mf_202, { children: [/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "General Settings" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "Configure the general settings for the auth plugin." })] }), /* @__PURE__ */ __mf_2(__mf_204, {
 						className: "auth:space-y-6",
 						children: [
 							/* @__PURE__ */ __mf_1(__mf_2$1, {
@@ -293,7 +293,7 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 								canCreate: true,
 								description: "Specify the feature path where user account models will be generated"
 							}),
-							/* @__PURE__ */ __mf_1(__mf_202, {
+							/* @__PURE__ */ __mf_1(__mf_214, {
 								label: "Authentication Provider",
 								name: "implementationPluginKey",
 								control,
@@ -314,7 +314,7 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 							})
 						]
 					})] }), /* @__PURE__ */ __mf_1(RoleEditorForm, { control })] })]
-				}), /* @__PURE__ */ __mf_1(__mf_125, {
+				}), /* @__PURE__ */ __mf_1(__mf_128, {
 					form,
 					allowSaveWithoutDirty: !pluginMetadata
 				})]
@@ -328,17 +328,17 @@ var AUTH_FEATURE_NAME = "accounts/auth";
 var ACCOUNTS_FEATURE_NAME = "accounts/users";
 var AUTH_IMPL_FQN_PREFIX = "@baseplate-dev/plugin-auth:";
 var PARENT_AUTH_FQN = "@baseplate-dev/plugin-auth:auth";
-var web_default = __mf_55({
+var web_default = __mf_56({
 	name: "web",
 	dependencies: {
-		webConfig: __mf_73,
-		pluginDefaults: __mf_71
+		webConfig: __mf_74,
+		pluginDefaults: __mf_72
 	},
 	initialize: ({ webConfig, pluginDefaults }, { pluginKey }) => {
 		webConfig.components.set(pluginKey, AuthDefinitionEditor);
 		pluginDefaults.builders.set(pluginKey, ({ draft, enabledPluginFqns, findPluginMetadataByFqn }) => {
-			const authFeatureRef = __mf_17.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
-			const accountsFeatureRef = __mf_17.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
+			const authFeatureRef = __mf_18.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			const accountsFeatureRef = __mf_18.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
 			const implFqn = [...enabledPluginFqns].find((fqn) => fqn.startsWith(AUTH_IMPL_FQN_PREFIX) && fqn !== PARENT_AUTH_FQN);
 			if (!implFqn) throw new Error("No auth implementation plugin enabled. Add an auth implementation (e.g. local-auth or better-auth) to the enabled plugins.");
 			const implPlugin = findPluginMetadataByFqn(implFqn);
@@ -355,4 +355,4 @@ var web_default = __mf_55({
 //#endregion
 export { web_default as default };
 
-//# sourceMappingURL=web-Dgb85jhs.js.map
+//# sourceMappingURL=web-CzK_la2_.js.map

package/dist/web/index.html

@@ -15,10 +15,10 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>React Remote</title>
-    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-0-3ede9334.js"></script>
-    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-1-3da85eea.js"></script>
-    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-2-32e24e11.js"></script>
-    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-3-a3cfea9d.js"></script>
+    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-0-ea77c09b.js"></script>
+    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-1-9dee3d8d.js"></script>
+    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-2-3179040b.js"></script>
+    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-3-370d200d.js"></script>
   </head>
 
   <body>

package/dist/web/remoteEntry.js

@@ -1,2 +1,2 @@
-import { n as init, t as getExposes } from "./assets/virtual_mf-REMOTE_ENTRY_ID___mfe_internal__plugin-auth__remoteEntry_js-t-KnBiUh.js";
+import { n as init, t as getExposes } from "./assets/virtual_mf-REMOTE_ENTRY_ID___mfe_internal__plugin-auth__remoteEntry_js-BZBRyml2.js";
 export { getExposes as get, init };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@baseplate-dev/plugin-auth",
-  "version": "0.6.18",
+  "version": "0.6.19",
   "description": "Contains the auth plugin for Baseplate",
   "keywords": [
     "authentication",
@@ -43,16 +43,16 @@
     "react-hook-form": "^7.71.1",
     "react-icons": "^5.7.0",
     "zod": "~4.3.6",
-    "@baseplate-dev/core-generators": "0.6.18",
-    "@baseplate-dev/fastify-generators": "0.6.18",
-    "@baseplate-dev/plugin-email": "0.6.18",
-    "@baseplate-dev/plugin-queue": "0.6.18",
-    "@baseplate-dev/plugin-rate-limit": "0.6.18",
-    "@baseplate-dev/project-builder-lib": "0.6.18",
-    "@baseplate-dev/react-generators": "0.6.18",
-    "@baseplate-dev/sync": "0.6.18",
-    "@baseplate-dev/ui-components": "0.6.18",
-    "@baseplate-dev/utils": "0.6.18"
+    "@baseplate-dev/core-generators": "0.6.19",
+    "@baseplate-dev/fastify-generators": "0.6.19",
+    "@baseplate-dev/plugin-email": "0.6.19",
+    "@baseplate-dev/plugin-queue": "0.6.19",
+    "@baseplate-dev/plugin-rate-limit": "0.6.19",
+    "@baseplate-dev/project-builder-lib": "0.6.19",
+    "@baseplate-dev/react-generators": "0.6.19",
+    "@baseplate-dev/sync": "0.6.19",
+    "@baseplate-dev/ui-components": "0.6.19",
+    "@baseplate-dev/utils": "0.6.19"
   },
   "devDependencies": {
     "@module-federation/vite": "1.20.5",
@@ -70,7 +70,7 @@
     "typescript": "6.0.3",
     "vite": "8.2.0",
     "vitest": "4.1.10",
-    "@baseplate-dev/tools": "0.6.18"
+    "@baseplate-dev/tools": "0.6.19"
   },
   "engines": {
     "node": "^24.0.0"

package/dist/local-auth/core/generators/auth-module/templates/module/utils/cookie-signer.d.ts

@@ -1,38 +0,0 @@
-/**
- * Cookie signing utilities
- * Based on node-cookie-signature by TJ Holowaychuk
- * Source: https://github.com/tj/node-cookie-signature
- */
-/**
- * Sign the given `val` with `secret` using HMAC-SHA256.
- *
- * @param val - The value to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed value.
- */
-export declare function sign(val: string, secret: string): string;
-/**
- * Unsign and decode the given `input` with `secret`,
- *
- * @param input - The signed cookie string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The unsigned value or undefined if the signature is invalid.
- */
-export declare function unsign(input: string, secret: string): string | undefined;
-/**
- * Sign an object by JSON stringifying and base64 encoding it, then signing with secret.
- *
- * @param obj - The object to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed encoded object.
- */
-export declare function signObject(obj: unknown, secret: string): string;
-/**
- * Unsign and decode an object that was signed with signObject.
- *
- * @param input - The signed encoded object string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The decoded object or undefined if the signature is invalid.
- */
-export declare function unsignObject(input: string, secret: string): unknown;
-//# sourceMappingURL=cookie-signer.d.ts.map

package/dist/local-auth/core/generators/auth-module/templates/module/utils/cookie-signer.js

@@ -1,71 +0,0 @@
-// @ts-nocheck
-import * as crypto from 'node:crypto';
-/**
- * Cookie signing utilities
- * Based on node-cookie-signature by TJ Holowaychuk
- * Source: https://github.com/tj/node-cookie-signature
- */
-/**
- * Sign the given `val` with `secret` using HMAC-SHA256.
- *
- * @param val - The value to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed value.
- */
-export function sign(val, secret) {
-    return `${val}.${crypto
-        .createHmac('sha256', secret)
-        .update(val)
-        .digest('base64')
-        // remove all equal signs since they are not valid in cookie values
-        .replaceAll('=', '')}`;
-}
-/**
- * Unsign and decode the given `input` with `secret`,
- *
- * @param input - The signed cookie string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The unsigned value or undefined if the signature is invalid.
- */
-export function unsign(input, secret) {
-    const tentativeValue = input.slice(0, input.lastIndexOf('.'));
-    const expectedInput = sign(tentativeValue, secret);
-    const expectedBuffer = Buffer.from(expectedInput);
-    const inputBuffer = Buffer.from(input);
-    if (expectedBuffer.length !== inputBuffer.length ||
-        !crypto.timingSafeEqual(expectedBuffer, inputBuffer)) {
-        return undefined;
-    }
-    return tentativeValue;
-}
-/**
- * Sign an object by JSON stringifying and base64 encoding it, then signing with secret.
- *
- * @param obj - The object to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed encoded object.
- */
-export function signObject(obj, secret) {
-    const encoded = Buffer.from(JSON.stringify(obj)).toString('base64url');
-    return sign(encoded, secret);
-}
-/**
- * Unsign and decode an object that was signed with signObject.
- *
- * @param input - The signed encoded object string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The decoded object or undefined if the signature is invalid.
- */
-export function unsignObject(input, secret) {
-    const unsigned = unsign(input, secret);
-    if (!unsigned)
-        return undefined;
-    try {
-        const decoded = Buffer.from(unsigned, 'base64url').toString('utf8');
-        return JSON.parse(decoded);
-    }
-    catch {
-        return undefined;
-    }
-}
-//# sourceMappingURL=cookie-signer.js.map

package/dist/local-auth/core/generators/auth-module/templates/module/utils/cookie-signer.ts

@@ -1,77 +0,0 @@
-// @ts-nocheck
-
-import * as crypto from 'node:crypto';
-
-/**
- * Cookie signing utilities
- * Based on node-cookie-signature by TJ Holowaychuk
- * Source: https://github.com/tj/node-cookie-signature
- */
-
-/**
- * Sign the given `val` with `secret` using HMAC-SHA256.
- *
- * @param val - The value to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed value.
- */
-export function sign(val: string, secret: string): string {
-  return `${val}.${crypto
-    .createHmac('sha256', secret)
-    .update(val)
-    .digest('base64')
-    // remove all equal signs since they are not valid in cookie values
-    .replaceAll('=', '')}`;
-}
-
-/**
- * Unsign and decode the given `input` with `secret`,
- *
- * @param input - The signed cookie string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The unsigned value or undefined if the signature is invalid.
- */
-export function unsign(input: string, secret: string): string | undefined {
-  const tentativeValue = input.slice(0, input.lastIndexOf('.'));
-  const expectedInput = sign(tentativeValue, secret);
-  const expectedBuffer = Buffer.from(expectedInput);
-  const inputBuffer = Buffer.from(input);
-  if (
-    expectedBuffer.length !== inputBuffer.length ||
-    !crypto.timingSafeEqual(expectedBuffer, inputBuffer)
-  ) {
-    return undefined;
-  }
-  return tentativeValue;
-}
-
-/**
- * Sign an object by JSON stringifying and base64 encoding it, then signing with secret.
- *
- * @param obj - The object to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed encoded object.
- */
-export function signObject(obj: unknown, secret: string): string {
-  const encoded = Buffer.from(JSON.stringify(obj)).toString('base64url');
-  return sign(encoded, secret);
-}
-
-/**
- * Unsign and decode an object that was signed with signObject.
- *
- * @param input - The signed encoded object string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The decoded object or undefined if the signature is invalid.
- */
-export function unsignObject(input: string, secret: string): unknown {
-  const unsigned = unsign(input, secret);
-  if (!unsigned) return undefined;
-
-  try {
-    const decoded = Buffer.from(unsigned, 'base64url').toString('utf8');
-    return JSON.parse(decoded);
-  } catch {
-    return undefined;
-  }
-}

package/dist/web/assets/auth-CsHp2bQi.js

@@ -1 +0,0 @@
-import "./get-auth-plugin-definition-DyokUVjX.js";