@baseplate-dev/plugin-auth 0.6.9 → 0.6.11

package/dist/web/assets/web-DiGj_0d0.js

@@ -0,0 +1,118 @@
+import { St as __mf_2, _ as MultiComboboxFieldController, _t as init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__, a as SectionListSection, b as FormActionBar, c as SectionListSectionHeader, ft as __mf_31, g as SwitchFieldController, i as SectionList, l as SectionListSectionTitle, o as SectionListSectionContent, s as SectionListSectionDescription, xt as __mf_1 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-DsLoA9K7.js";
+import { a as __mf_167, d as __mf_231, f as __mf_259, g as __mf_55, n as __mf_142, o as __mf_17, p as __mf_26 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-B6a7L2-k.js";
+import { a as __mf_25, i as __mf_24, n as __mf_19, r as __mf_22, t as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-JKpdJ1L0.js";
+import { n as a, t as AuthConfigTabs } from "./styles-DNVWarsT.js";
+import { t as getAuthPluginDefinition } from "./get-auth-plugin-definition-2vFJROjB.js";
+import { n as createLocalAuthPluginDefinitionSchema, t as createLocalAuthPartialDefinition } from "./models-CORL4i-6.js";
+//#region src/local-auth/core/components/local-auth-definition-editor.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function LocalAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
+	const { definition, definitionContainer, saveDefinitionWithFeedback } = __mf_24();
+	const authPluginDefinitionSchema = __mf_22(createLocalAuthPluginDefinitionSchema);
+	const authDefinition = getAuthPluginDefinition(definition);
+	const roles = authDefinition.roles.filter((role) => !role.builtIn).map((role) => ({
+		label: role.name,
+		value: role.id
+	}));
+	const defaultValues = __mf_31(() => {
+		if (pluginMetadata?.config) return pluginMetadata.config;
+		return {
+			additionalUserAdminRoles: [],
+			requireNameOnRegistration: false
+		};
+	}, [pluginMetadata?.config]);
+	const form = __mf_25({
+		resolver: a(authPluginDefinitionSchema),
+		defaultValues
+	});
+	const { control, reset, handleSubmit } = form;
+	const authFeature = definition.features.find((f) => f.id === authDefinition.authFeatureRef);
+	if (!authFeature) throw new Error(`Auth feature not found for ref: ${authDefinition.authFeatureRef}`);
+	const accountsFeature = definition.features.find((f) => f.id === authDefinition.accountsFeatureRef);
+	if (!accountsFeature) throw new Error(`Accounts feature not found for ref: ${authDefinition.accountsFeatureRef}`);
+	const partialDef = __mf_31(() => createLocalAuthPartialDefinition(authFeature.name, accountsFeature.name), [authFeature.name, accountsFeature.name]);
+	const diff = __mf_31(() => __mf_167(definitionContainer.schema, definitionContainer.definition, partialDef), [definitionContainer, partialDef]);
+	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
+		const updatedData = { ...data };
+		__mf_55(definitionContainer, partialDef)(draftConfig);
+		__mf_26.setPluginConfig(draftConfig, metadata, updatedData, definitionContainer);
+	}, {
+		successMessage: "Successfully saved auth plugin!",
+		onSuccess: () => {
+			onSave();
+		}
+	}));
+	__mf_19({
+		control,
+		reset,
+		onSubmit
+	});
+	return /* @__PURE__ */ __mf_2("div", {
+		className: "auth:relative auth:flex auth:h-full auth:flex-1 auth:flex-col auth:gap-4 auth:overflow-hidden",
+		children: [/* @__PURE__ */ __mf_1(AuthConfigTabs, {}), /* @__PURE__ */ __mf_1("div", {
+			className: "auth:mb-[--action-bar-height] auth:flex auth:flex-1 auth:overflow-y-auto",
+			style: { "--action-bar-height": "52px" },
+			children: /* @__PURE__ */ __mf_2("form", {
+				onSubmit,
+				className: "auth:max-w-6xl auth:flex-1",
+				children: [/* @__PURE__ */ __mf_1("div", {
+					className: "auth:pb-16",
+					children: /* @__PURE__ */ __mf_2(SectionList, { children: [
+						/* @__PURE__ */ __mf_2(SectionListSection, { children: [/* @__PURE__ */ __mf_2(SectionListSectionHeader, { children: [/* @__PURE__ */ __mf_1(SectionListSectionTitle, { children: "Local Auth User Models" }), /* @__PURE__ */ __mf_1(SectionListSectionDescription, { children: "The plugin will automatically configure the models it needs." })] }), /* @__PURE__ */ __mf_1(SectionListSectionContent, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(__mf_0, { diff })
+						})] }),
+						/* @__PURE__ */ __mf_2(SectionListSection, { children: [/* @__PURE__ */ __mf_2(SectionListSectionHeader, { children: [/* @__PURE__ */ __mf_1(SectionListSectionTitle, { children: "User Management Permissions" }), /* @__PURE__ */ __mf_1(SectionListSectionDescription, { children: "The \"admin\" role always has user management permissions. Optionally add more roles that can manage users and assign roles in the admin interface." })] }), /* @__PURE__ */ __mf_1(SectionListSectionContent, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(MultiComboboxFieldController, {
+								label: "Additional User Admin Roles",
+								name: "additionalUserAdminRoles",
+								control,
+								options: roles,
+								description: "Additional roles (beyond admin) that can manage users and assign roles."
+							})
+						})] }),
+						/* @__PURE__ */ __mf_2(SectionListSection, { children: [/* @__PURE__ */ __mf_2(SectionListSectionHeader, { children: [/* @__PURE__ */ __mf_1(SectionListSectionTitle, { children: "Registration Settings" }), /* @__PURE__ */ __mf_1(SectionListSectionDescription, { children: "Configure what information is collected during user registration." })] }), /* @__PURE__ */ __mf_1(SectionListSectionContent, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(SwitchFieldController, {
+								label: "Require Name on Registration",
+								name: "requireNameOnRegistration",
+								control,
+								description: "When enabled, users must provide their name when registering."
+							})
+						})] })
+					] })
+				}), /* @__PURE__ */ __mf_1(FormActionBar, {
+					form,
+					allowSaveWithoutDirty: !pluginMetadata || diff.hasChanges
+				})]
+			})
+		})]
+	});
+}
+//#endregion
+//#region src/local-auth/core/web.ts
+var AUTH_FEATURE_NAME = "accounts/auth";
+var ACCOUNTS_FEATURE_NAME = "accounts/users";
+var web_default = __mf_142({
+	name: "web",
+	dependencies: {
+		webConfig: __mf_259,
+		pluginDefaults: __mf_231
+	},
+	initialize: ({ webConfig, pluginDefaults }, { pluginKey }) => {
+		webConfig.components.set(pluginKey, LocalAuthDefinitionEditor);
+		pluginDefaults.builders.set(pluginKey, ({ draft }) => {
+			__mf_17.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			__mf_17.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
+			return {
+				config: {},
+				partialDef: createLocalAuthPartialDefinition(AUTH_FEATURE_NAME, ACCOUNTS_FEATURE_NAME)
+			};
+		});
+	}
+});
+//#endregion
+export { web_default as default };
+
+//# sourceMappingURL=web-DiGj_0d0.js.map

package/dist/web/assets/web-OntIhIfe.js

@@ -0,0 +1,355 @@
+import { n as __mf_88, t as __mf_53 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-CGsbw2Lx.js";
+import { B as useFieldArray$1, C as DialogDescription, E as DialogTitle, F as MdEdit, G as AlertDescription, K as AlertTitle, M as Button, N as MdAdd, O as useConfirmDialog, P as MdDeleteOutline, S as DialogContent, St as __mf_2, T as DialogHeader, U as useWatch, V as useForm, W as Alert, _t as init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__, a as SectionListSection, b as FormActionBar, bt as __mf_0, c as SectionListSectionHeader, d as RecordViewActions, f as RecordViewItem, ft as __mf_31, i as SectionList, j as Badge, l as SectionListSectionTitle, lt as __mf_27, mt as __mf_35, o as SectionListSectionContent, p as RecordViewItemList, r as SelectFieldController, s as SectionListSectionDescription, u as RecordView, w as DialogFooter, x as Dialog, xt as __mf_1, y as InputFieldController } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-DsLoA9K7.js";
+import { c as __mf_189, d as __mf_231, f as __mf_259, n as __mf_142, o as __mf_17, p as __mf_26, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-B6a7L2-k.js";
+import { n as createAuthRoleSchema, r as createDefaultAuthRoles, t as createAuthPluginDefinitionSchema } from "./plugin-definition-UAfMRa7u.js";
+import { a as __mf_25, i as __mf_24, n as __mf_19, o as __mf_3, r as __mf_22 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-JKpdJ1L0.js";
+import { n as a, t as AuthConfigTabs } from "./styles-DNVWarsT.js";
+//#region ../../node_modules/.pnpm/@hookform+lenses@0.8.1_react-hook-form@7.71.1_react@19.1.0/node_modules/@hookform/lenses/dist/rhf/index.js
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function useFieldArray(props) {
+	const original = useFieldArray$1(props);
+	return {
+		fields: __mf_31(() => {
+			if (!props.getTransformer) return original.fields;
+			return original.fields.map(props.getTransformer);
+		}, [original.fields, props.getTransformer]),
+		move: original.move,
+		remove: original.remove,
+		swap: original.swap,
+		prepend: (value, options) => {
+			if (!props.setTransformer) return original.prepend(value, options);
+			const newValue = Array.isArray(value) ? value.map(props.setTransformer) : props.setTransformer(value);
+			original.prepend(newValue, options);
+		},
+		append: (value, options) => {
+			if (!props.setTransformer) return original.append(value, options);
+			const newValue = Array.isArray(value) ? value.map(props.setTransformer) : props.setTransformer(value);
+			original.append(newValue, options);
+		},
+		insert: (index, value, options) => {
+			if (!props.setTransformer) return original.insert(index, value, options);
+			const newValue = Array.isArray(value) ? value.map(props.setTransformer) : props.setTransformer(value);
+			original.insert(index, newValue, options);
+		},
+		update: (index, value) => {
+			if (!props.setTransformer) return original.update(index, value);
+			const newValue = props.setTransformer(value);
+			original.update(index, newValue);
+		},
+		replace: (value) => {
+			if (!props.setTransformer) return original.replace(value);
+			const newValue = props.setTransformer(value);
+			original.replace(newValue);
+		}
+	};
+}
+//#endregion
+//#region src/auth/core/components/role-editor-form/role-dialog.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function RoleDialog({ open, onOpenChange, role, isNew = false, onSave }) {
+	const { control, handleSubmit } = useForm({
+		resolver: a(__mf_22(createAuthRoleSchema)),
+		values: role
+	});
+	const onSubmit = handleSubmit((data) => {
+		onSave(data);
+		onOpenChange?.(false);
+	});
+	const formId = __mf_27();
+	return /* @__PURE__ */ __mf_1(Dialog, {
+		open,
+		onOpenChange,
+		children: /* @__PURE__ */ __mf_1(DialogContent, { children: /* @__PURE__ */ __mf_2("form", {
+			id: formId,
+			onSubmit: (e) => {
+				e.stopPropagation();
+				return onSubmit(e);
+			},
+			children: [
+				/* @__PURE__ */ __mf_2(DialogHeader, { children: [/* @__PURE__ */ __mf_1(DialogTitle, { children: isNew ? "Add Role" : "Edit Role" }), /* @__PURE__ */ __mf_1(DialogDescription, { children: isNew ? "Enter the details for the new role." : "Update the role details below." })] }),
+				/* @__PURE__ */ __mf_2("div", {
+					className: "auth:space-y-4 auth:py-4",
+					children: [/* @__PURE__ */ __mf_1(InputFieldController, {
+						label: "Role Name",
+						name: "name",
+						control,
+						placeholder: "Enter role name"
+					}), /* @__PURE__ */ __mf_1(InputFieldController, {
+						label: "Description",
+						name: "comment",
+						control,
+						placeholder: "Describe this role's purpose"
+					})]
+				}),
+				/* @__PURE__ */ __mf_2(DialogFooter, { children: [/* @__PURE__ */ __mf_1(Button, {
+					type: "button",
+					variant: "outline",
+					onClick: () => {
+						onOpenChange?.(false);
+					},
+					children: "Cancel"
+				}), /* @__PURE__ */ __mf_2(Button, {
+					form: formId,
+					type: "submit",
+					children: [isNew ? "Add" : "Update", " Role"]
+				})] })
+			]
+		}) })
+	});
+}
+//#endregion
+//#region src/auth/core/components/role-editor-form/role-editor-form.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function RoleEditorForm({ className, control }) {
+	const { requestConfirm } = useConfirmDialog();
+	const { append, update, remove } = useFieldArray({
+		control,
+		name: "roles"
+	});
+	const [roleToEdit, setRoleToEdit] = __mf_35();
+	const [isEditing, setIsEditing] = __mf_35(false);
+	const roles = useWatch({
+		control,
+		name: "roles"
+	});
+	function handleSaveRole(newRole) {
+		const existingIndex = roles.findIndex((role) => role.id === newRole.id);
+		if (existingIndex === -1) append(newRole);
+		else update(existingIndex, newRole);
+	}
+	function handleDeleteRole(roleIdx) {
+		const role = roles[roleIdx];
+		requestConfirm({
+			title: "Delete Role",
+			content: `Are you sure you want to delete the role "${role.name}"?`,
+			onConfirm: () => {
+				remove(roleIdx);
+			}
+		});
+	}
+	return /* @__PURE__ */ __mf_2(SectionListSection, {
+		className,
+		children: [/* @__PURE__ */ __mf_2(SectionListSectionHeader, { children: [/* @__PURE__ */ __mf_1(SectionListSectionTitle, { children: "User Roles" }), /* @__PURE__ */ __mf_1(SectionListSectionDescription, { children: "Define roles for your application. Default roles are protected and cannot be removed." })] }), /* @__PURE__ */ __mf_2(SectionListSectionContent, {
+			className: "auth:space-y-4",
+			children: [
+				roles.map((role, roleIdx) => /* @__PURE__ */ __mf_2(RecordView, { children: [/* @__PURE__ */ __mf_2(RecordViewItemList, { children: [/* @__PURE__ */ __mf_1(RecordViewItem, {
+					title: "Name",
+					children: /* @__PURE__ */ __mf_1("div", {
+						className: "auth:flex auth:items-center auth:gap-2",
+						children: /* @__PURE__ */ __mf_1("span", { children: role.name })
+					})
+				}), /* @__PURE__ */ __mf_1(RecordViewItem, {
+					title: "Description",
+					children: role.comment.trim() || /* @__PURE__ */ __mf_1("span", {
+						className: "auth:text-muted-foreground",
+						children: "No description"
+					})
+				})] }), /* @__PURE__ */ __mf_2(RecordViewActions, { children: [role.builtIn && /* @__PURE__ */ __mf_1(Badge, {
+					variant: "secondary",
+					children: "Default Role"
+				}), !role.builtIn && /* @__PURE__ */ __mf_2(__mf_0, { children: [/* @__PURE__ */ __mf_1(Button, {
+					variant: "ghost",
+					size: "icon",
+					title: "Edit",
+					"aria-label": "Edit role",
+					onClick: () => {
+						setRoleToEdit(role);
+						setIsEditing(true);
+					},
+					children: /* @__PURE__ */ __mf_1(MdEdit, {})
+				}), /* @__PURE__ */ __mf_1(Button, {
+					variant: "ghostDestructive",
+					size: "icon",
+					title: "Delete",
+					"aria-label": "Delete role",
+					onClick: () => {
+						handleDeleteRole(roleIdx);
+					},
+					children: /* @__PURE__ */ __mf_1(MdDeleteOutline, {})
+				})] })] })] }, role.id)),
+				/* @__PURE__ */ __mf_1(RoleDialog, {
+					open: isEditing,
+					onOpenChange: setIsEditing,
+					role: roleToEdit,
+					isNew: roleToEdit ? !roles.some((r) => r.id === roleToEdit.id) : true,
+					onSave: handleSaveRole
+				}),
+				/* @__PURE__ */ __mf_2(Button, {
+					variant: "secondary",
+					size: "sm",
+					onClick: () => {
+						setRoleToEdit({
+							id: __mf_59.generateNewId(),
+							name: "",
+							comment: "",
+							builtIn: false
+						});
+						setIsEditing(true);
+					},
+					children: [/* @__PURE__ */ __mf_1(MdAdd, {}), "Add Role"]
+				})
+			]
+		})]
+	});
+}
+//#endregion
+//#region src/auth/core/components/auth-definition-editor.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
+	const { definition, definitionContainer, schemaParserContext, saveDefinitionWithFeedback } = __mf_24();
+	const authPluginDefinitionSchema = __mf_22(createAuthPluginDefinitionSchema);
+	const availableImplementations = __mf_189(schemaParserContext.pluginStore, metadata.key);
+	const defaultImplementation = availableImplementations.find((i) => i.fullyQualifiedName === "@baseplate-dev/plugin-auth:local-auth") ?? availableImplementations[0];
+	const defaultValues = __mf_31(() => {
+		if (pluginMetadata?.config) return pluginMetadata.config;
+		const defaultAuthFeatureRef = __mf_17.getFeatureIdByNameOrDefault(definition, "accounts/auth");
+		const defaultAccountsFeatureRef = __mf_17.getFeatureIdByNameOrDefault(definition, "accounts/users");
+		return {
+			implementationPluginKey: defaultImplementation.key,
+			authFeatureRef: defaultAuthFeatureRef,
+			accountsFeatureRef: defaultAccountsFeatureRef,
+			roles: createDefaultAuthRoles()
+		};
+	}, [
+		definition,
+		pluginMetadata?.config,
+		defaultImplementation
+	]);
+	const form = __mf_25({
+		resolver: a(authPluginDefinitionSchema),
+		defaultValues
+	});
+	const { control, reset, handleSubmit, watch } = form;
+	const implementationPluginKey = watch("implementationPluginKey");
+	const selectedPlugin = implementationPluginKey && availableImplementations.find((i) => i.key === implementationPluginKey);
+	const isSelectedImplementationActive = !!__mf_26.byKey(definitionContainer.definition, implementationPluginKey);
+	const hasSelectedImplementationChanged = implementationPluginKey !== (pluginMetadata?.config)?.implementationPluginKey;
+	const selectedImplementationUrl = selectedPlugin ? `/plugins/edit/${selectedPlugin.key}` : void 0;
+	const navigate = __mf_88();
+	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
+		const featureRef = __mf_17.ensureFeatureByNameRecursively(draftConfig, data.authFeatureRef);
+		const accountsFeatureRef = __mf_17.ensureFeatureByNameRecursively(draftConfig, data.accountsFeatureRef);
+		__mf_26.setPluginConfig(draftConfig, metadata, {
+			...data,
+			authFeatureRef: featureRef,
+			accountsFeatureRef
+		}, definitionContainer);
+		const otherPlugins = availableImplementations.filter((i) => i.key !== implementationPluginKey);
+		for (const plugin of otherPlugins) __mf_26.disablePlugin(draftConfig, plugin.key, definitionContainer.parserContext);
+	}, {
+		successMessage: `Successfully saved auth plugin! ${selectedImplementationUrl && !isSelectedImplementationActive ? `Please configure the provider plugin before syncing.` : ""}`,
+		onSuccess: () => {
+			onSave();
+			if (selectedImplementationUrl && !isSelectedImplementationActive) setTimeout(() => {
+				navigate({ to: selectedImplementationUrl });
+			}, 100);
+		}
+	}));
+	__mf_19({
+		control,
+		reset,
+		onSubmit
+	});
+	return /* @__PURE__ */ __mf_2("div", {
+		className: "auth:relative auth:flex auth:h-full auth:flex-1 auth:flex-col auth:gap-4 auth:overflow-hidden",
+		children: [/* @__PURE__ */ __mf_1(AuthConfigTabs, {}), /* @__PURE__ */ __mf_1("div", {
+			className: "auth:mb-[--action-bar-height] auth:flex auth:flex-1 auth:overflow-y-auto",
+			style: { "--action-bar-height": "52px" },
+			children: /* @__PURE__ */ __mf_2("form", {
+				onSubmit,
+				className: "auth:max-w-6xl auth:flex-1",
+				children: [/* @__PURE__ */ __mf_2("div", {
+					className: "auth:pb-16",
+					children: [!isSelectedImplementationActive && selectedPlugin && !hasSelectedImplementationChanged && /* @__PURE__ */ __mf_2(Alert, {
+						variant: "warning",
+						children: [/* @__PURE__ */ __mf_1(AlertTitle, { children: "Implementation Provider Not Active" }), /* @__PURE__ */ __mf_1(AlertDescription, { children: /* @__PURE__ */ __mf_2("p", { children: [
+							"The selected implementation provider is not active. Please make sure",
+							" ",
+							/* @__PURE__ */ __mf_1(__mf_53, {
+								to: selectedImplementationUrl,
+								className: "auth:inline-block auth:font-medium",
+								children: "configure the provider"
+							}),
+							" ",
+							"before syncing."
+						] }) })]
+					}), /* @__PURE__ */ __mf_2(SectionList, { children: [/* @__PURE__ */ __mf_2(SectionListSection, { children: [/* @__PURE__ */ __mf_2(SectionListSectionHeader, { children: [/* @__PURE__ */ __mf_1(SectionListSectionTitle, { children: "General Settings" }), /* @__PURE__ */ __mf_1(SectionListSectionDescription, { children: "Configure the general settings for the auth plugin." })] }), /* @__PURE__ */ __mf_2(SectionListSectionContent, {
+						className: "auth:space-y-6",
+						children: [
+							/* @__PURE__ */ __mf_1(__mf_3, {
+								label: "Auth Feature Path",
+								name: "authFeatureRef",
+								control,
+								canCreate: true,
+								description: "Specify the feature path where auth infrastructure will be generated"
+							}),
+							/* @__PURE__ */ __mf_1(__mf_3, {
+								label: "Accounts Feature Path",
+								name: "accountsFeatureRef",
+								control,
+								canCreate: true,
+								description: "Specify the feature path where user account models will be generated"
+							}),
+							/* @__PURE__ */ __mf_1(SelectFieldController, {
+								label: "Authentication Provider",
+								name: "implementationPluginKey",
+								control,
+								options: availableImplementations,
+								renderItemLabel: (item) => /* @__PURE__ */ __mf_2("div", {
+									className: "auth:flex auth:flex-col auth:gap-2",
+									children: [/* @__PURE__ */ __mf_1("div", {
+										className: "auth:text-sm auth:font-medium",
+										children: item.displayName
+									}), /* @__PURE__ */ __mf_1("div", {
+										className: "auth:text-sm auth:text-muted-foreground",
+										children: item.description
+									})]
+								}),
+								getOptionLabel: (item) => item.displayName,
+								getOptionValue: (item) => item.key,
+								description: "The authentication provider to use for your project"
+							})
+						]
+					})] }), /* @__PURE__ */ __mf_1(RoleEditorForm, { control })] })]
+				}), /* @__PURE__ */ __mf_1(FormActionBar, {
+					form,
+					allowSaveWithoutDirty: !pluginMetadata
+				})]
+			})
+		})]
+	});
+}
+//#endregion
+//#region src/auth/core/web.ts
+var AUTH_FEATURE_NAME = "accounts/auth";
+var ACCOUNTS_FEATURE_NAME = "accounts/users";
+var AUTH_IMPL_FQN_PREFIX = "@baseplate-dev/plugin-auth:";
+var PARENT_AUTH_FQN = "@baseplate-dev/plugin-auth:auth";
+var web_default = __mf_142({
+	name: "web",
+	dependencies: {
+		webConfig: __mf_259,
+		pluginDefaults: __mf_231
+	},
+	initialize: ({ webConfig, pluginDefaults }, { pluginKey }) => {
+		webConfig.components.set(pluginKey, AuthDefinitionEditor);
+		pluginDefaults.builders.set(pluginKey, ({ draft, enabledPluginFqns, findPluginMetadataByFqn }) => {
+			const authFeatureRef = __mf_17.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			const accountsFeatureRef = __mf_17.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
+			const implFqn = [...enabledPluginFqns].find((fqn) => fqn.startsWith(AUTH_IMPL_FQN_PREFIX) && fqn !== PARENT_AUTH_FQN);
+			if (!implFqn) throw new Error("No auth implementation plugin enabled. Add an auth implementation (e.g. local-auth or better-auth) to the enabled plugins.");
+			const implPlugin = findPluginMetadataByFqn(implFqn);
+			if (!implPlugin) throw new Error(`Auth implementation plugin ${implFqn} is enabled but its metadata could not be resolved.`);
+			return { config: {
+				implementationPluginKey: implPlugin.key,
+				authFeatureRef,
+				accountsFeatureRef,
+				roles: createDefaultAuthRoles()
+			} };
+		});
+	}
+});
+//#endregion
+export { web_default as default };
+
+//# sourceMappingURL=web-OntIhIfe.js.map

package/dist/web/assets/web-y8E7eNgy.js

@@ -0,0 +1,106 @@
+import { St as __mf_2, _ as MultiComboboxFieldController, _t as init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__, a as SectionListSection, b as FormActionBar, c as SectionListSectionHeader, ft as __mf_31, i as SectionList, l as SectionListSectionTitle, o as SectionListSectionContent, s as SectionListSectionDescription, xt as __mf_1 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-DsLoA9K7.js";
+import { a as __mf_167, d as __mf_231, f as __mf_259, g as __mf_55, n as __mf_142, o as __mf_17, p as __mf_26 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-B6a7L2-k.js";
+import { a as __mf_25, i as __mf_24, n as __mf_19, r as __mf_22, t as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-JKpdJ1L0.js";
+import { n as a, t as AuthConfigTabs } from "./styles-DNVWarsT.js";
+import { n as createBetterAuthPluginDefinitionSchema, t as createBetterAuthPartialDefinition } from "./models-DPPMgQz_.js";
+import { t as getAuthPluginDefinition } from "./get-auth-plugin-definition-2vFJROjB.js";
+//#region src/better-auth/core/components/better-auth-definition-editor.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function BetterAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
+	const { definition, definitionContainer, saveDefinitionWithFeedback } = __mf_24();
+	const betterAuthPluginDefinitionSchema = __mf_22(createBetterAuthPluginDefinitionSchema);
+	const authDefinition = getAuthPluginDefinition(definition);
+	const roles = authDefinition.roles.filter((role) => !role.builtIn).map((role) => ({
+		label: role.name,
+		value: role.id
+	}));
+	const defaultValues = __mf_31(() => {
+		if (pluginMetadata?.config) return pluginMetadata.config;
+		return { additionalUserAdminRoles: [] };
+	}, [pluginMetadata?.config]);
+	const form = __mf_25({
+		resolver: a(betterAuthPluginDefinitionSchema),
+		defaultValues
+	});
+	const { control, reset, handleSubmit } = form;
+	const authFeature = definition.features.find((f) => f.id === authDefinition.authFeatureRef);
+	if (!authFeature) throw new Error(`Auth feature not found for ref: ${authDefinition.authFeatureRef}`);
+	const accountsFeature = definition.features.find((f) => f.id === authDefinition.accountsFeatureRef);
+	if (!accountsFeature) throw new Error(`Accounts feature not found for ref: ${authDefinition.accountsFeatureRef}`);
+	const partialDef = __mf_31(() => createBetterAuthPartialDefinition(authFeature.name, accountsFeature.name), [authFeature.name, accountsFeature.name]);
+	const diff = __mf_31(() => __mf_167(definitionContainer.schema, definitionContainer.definition, partialDef), [definitionContainer, partialDef]);
+	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
+		const updatedData = { ...data };
+		__mf_55(definitionContainer, partialDef)(draftConfig);
+		__mf_26.setPluginConfig(draftConfig, metadata, updatedData, definitionContainer);
+	}, {
+		successMessage: "Successfully saved Better Auth plugin!",
+		onSuccess: () => {
+			onSave();
+		}
+	}));
+	__mf_19({
+		control,
+		reset,
+		onSubmit
+	});
+	return /* @__PURE__ */ __mf_2("div", {
+		className: "auth:relative auth:flex auth:h-full auth:flex-1 auth:flex-col auth:gap-4 auth:overflow-hidden",
+		children: [/* @__PURE__ */ __mf_1(AuthConfigTabs, {}), /* @__PURE__ */ __mf_1("div", {
+			className: "auth:mb-[--action-bar-height] auth:flex auth:flex-1 auth:overflow-y-auto",
+			style: { "--action-bar-height": "52px" },
+			children: /* @__PURE__ */ __mf_2("form", {
+				onSubmit,
+				className: "auth:max-w-6xl auth:flex-1",
+				children: [/* @__PURE__ */ __mf_1("div", {
+					className: "auth:pb-16",
+					children: /* @__PURE__ */ __mf_2(SectionList, { children: [/* @__PURE__ */ __mf_2(SectionListSection, { children: [/* @__PURE__ */ __mf_2(SectionListSectionHeader, { children: [/* @__PURE__ */ __mf_1(SectionListSectionTitle, { children: "Better Auth Configuration" }), /* @__PURE__ */ __mf_1(SectionListSectionDescription, { children: "The plugin will automatically configure the models it needs." })] }), /* @__PURE__ */ __mf_1(SectionListSectionContent, {
+						className: "auth:space-y-6",
+						children: /* @__PURE__ */ __mf_1(__mf_0, {
+							diff,
+							upToDateMessage: "All required models are already configured correctly. No changes needed."
+						})
+					})] }), /* @__PURE__ */ __mf_2(SectionListSection, { children: [/* @__PURE__ */ __mf_2(SectionListSectionHeader, { children: [/* @__PURE__ */ __mf_1(SectionListSectionTitle, { children: "User Management Permissions" }), /* @__PURE__ */ __mf_1(SectionListSectionDescription, { children: "The \"admin\" role always has user management permissions. Optionally add more roles that can manage users and assign roles in the admin interface." })] }), /* @__PURE__ */ __mf_1(SectionListSectionContent, {
+						className: "auth:space-y-6",
+						children: /* @__PURE__ */ __mf_1(MultiComboboxFieldController, {
+							label: "Additional User Admin Roles",
+							name: "additionalUserAdminRoles",
+							control,
+							options: roles,
+							description: "Additional roles (beyond admin) that can manage users and assign roles."
+						})
+					})] })] })
+				}), /* @__PURE__ */ __mf_1(FormActionBar, {
+					form,
+					allowSaveWithoutDirty: !pluginMetadata || diff.hasChanges
+				})]
+			})
+		})]
+	});
+}
+//#endregion
+//#region src/better-auth/core/web.ts
+var AUTH_FEATURE_NAME = "accounts/auth";
+var ACCOUNTS_FEATURE_NAME = "accounts/users";
+var web_default = __mf_142({
+	name: "web",
+	dependencies: {
+		webConfig: __mf_259,
+		pluginDefaults: __mf_231
+	},
+	initialize: ({ webConfig, pluginDefaults }, { pluginKey }) => {
+		webConfig.components.set(pluginKey, BetterAuthDefinitionEditor);
+		pluginDefaults.builders.set(pluginKey, ({ draft }) => {
+			__mf_17.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			__mf_17.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
+			return {
+				config: {},
+				partialDef: createBetterAuthPartialDefinition(AUTH_FEATURE_NAME, ACCOUNTS_FEATURE_NAME)
+			};
+		});
+	}
+});
+//#endregion
+export { web_default as default };
+
+//# sourceMappingURL=web-y8E7eNgy.js.map

package/dist/web/index.html

@@ -15,8 +15,8 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>React Remote</title>
-    <link rel="stylesheet" crossorigin href="/assets/style-DiK_rD1L.css">
-  </head>
+    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-0-13480d2a.js"></script>
+  <link rel="modulepreload" crossorigin href="./assets/hostInit-35H-qR11.js"><link rel="modulepreload" crossorigin href="./assets/index-Cr47LBtj.js"><link rel="modulepreload" crossorigin href="./remoteEntry.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf-localSharedImportMap___mfe_internal__plugin_mf_2_auth-DEljr3MS.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-B6a7L2-k.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-JKpdJ1L0.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-DsLoA9K7.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-CGsbw2Lx.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js"></head>
 
   <body>
     <div id="root"></div>

package/dist/web/remoteEntry.js

@@ -0,0 +1,2 @@
+import { n as init, t as getExposes } from "./assets/virtual_mf-REMOTE_ENTRY_ID___mfe_internal__plugin-auth__remoteEntry_js-Bt9-dftr.js";
+export { getExposes as get, init };

package/dist/web/remoteEntry.ssr.js

@@ -0,0 +1,43 @@
+import { t as __vitePreload } from "./assets/vite-preload-helper-iIio8xkS.js";
+import { init as init$1 } from "@module-federation/runtime";
+//#region virtual:mf-REMOTE_ENTRY_SSR_ID:__mfe_internal__plugin-auth__remoteEntry_js
+var exposesMapPromise;
+async function getExposesMap() {
+	exposesMapPromise ??= __vitePreload(() => import("./assets/virtual_mf-exposes-ssr___mfe_internal__plugin-auth__remoteEntry_js-DC8YPV1Z.js").then((mod) => mod.default ?? mod), [], import.meta.url);
+	return exposesMapPromise;
+}
+/**
+* Called by the MF runtime on the host to register this remote's share scope.
+* On the server the host has already initialised the runtime, so we just need
+* to set up a minimal runtime instance for the remote container.
+*/
+async function init(shared = {}, initScope = []) {
+	const initRes = init$1({
+		name: "plugin-auth",
+		remotes: [],
+		shared: {}
+	});
+	const initToken = { from: "plugin-auth" };
+	if (initScope.indexOf(initToken) >= 0) return;
+	initScope.push(initToken);
+	initRes.initShareScopeMap("default", shared);
+	try {
+		await Promise.all(await initRes.initializeSharing("default", {
+			strategy: "version-first",
+			from: "build",
+			initScope
+		}));
+	} catch (e) {
+		console.error("[Module Federation SSR]", e);
+	}
+	return initRes;
+}
+async function getExposes(moduleName) {
+	const exposesMap = await getExposesMap();
+	if (!(moduleName in exposesMap)) throw new Error(`[Module Federation] Module ${moduleName} does not exist in container.`);
+	return exposesMap[moduleName]().then((res) => () => res);
+}
+//#endregion
+export { getExposes as get, init };
+
+//# sourceMappingURL=remoteEntry.ssr.js.map