@baseplate-dev/plugin-auth 1.0.7 → 1.0.8

package/dist/web/assets/web-BgWG7dYl.js

@@ -0,0 +1,123 @@
+import { $ as __mf_2, Q as __mf_1, _ as __mf_180, g as __mf_179, h as __mf_178, ht as __mf_31, m as __mf_177, p as __mf_176, r as __mf_116, v as __mf_181, yt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__ } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-CXGct_48.js";
+import { a as __mf_167, d as __mf_233, f as __mf_26, g as __mf_55, n as __mf_142, o as __mf_17, p as __mf_263 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-BfSk5vRC.js";
+import { a as __mf_26$1, i as __mf_25, n as __mf_20, r as __mf_23, t as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-DZIcwf2B.js";
+import { n as a, t as AuthConfigTabs } from "./styles-Cuq4wgvD.js";
+import { t as getAuthPluginDefinition } from "./get-auth-plugin-definition-x8oAsN1R.js";
+import "./auth-8qJtXAgU.js";
+import { n as PLACEHOLDER_AUTH_MODELS, t as createPlaceholderAuthPluginDefinitionSchema } from "./plugin-definition-ChBrbazJ.js";
+//#region src/placeholder-auth/core/schema/models.ts
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function createPlaceholderAuthPartialDefinition(authFeatureName) {
+	return { models: [{
+		name: PLACEHOLDER_AUTH_MODELS.user,
+		featureRef: authFeatureName,
+		model: {
+			fields: [{
+				name: "id",
+				type: "uuid",
+				options: { defaultGeneration: "uuidv7" }
+			}, {
+				name: "email",
+				type: "string",
+				isOptional: true
+			}],
+			primaryKeyFieldRefs: ["id"],
+			uniqueConstraints: [{ fields: [{ fieldRef: "email" }] }]
+		},
+		graphql: { objectType: {
+			enabled: true,
+			fields: [{ ref: "id" }, {
+				ref: "email",
+				globalRoles: ["admin"],
+				instanceRoles: ["self"]
+			}]
+		} },
+		authorizer: { roles: [{
+			name: "self",
+			expression: "model.id === userId"
+		}] }
+	}] };
+}
+//#endregion
+//#region src/placeholder-auth/core/components/placeholder-auth-definition-editor.tsx
+function PlaceholderAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
+	const { definition, definitionContainer, saveDefinitionWithFeedback } = __mf_25();
+	const authDefinition = getAuthPluginDefinition(definition);
+	const authPluginDefinitionSchema = __mf_23(createPlaceholderAuthPluginDefinitionSchema);
+	const defaultValues = __mf_31(() => {
+		if (pluginMetadata?.config) return pluginMetadata.config;
+		return {};
+	}, [pluginMetadata?.config]);
+	const form = __mf_26$1({
+		resolver: a(authPluginDefinitionSchema),
+		defaultValues
+	});
+	const { control, reset, handleSubmit } = form;
+	const authFeature = definition.features.find((f) => f.id === authDefinition.authFeatureRef);
+	if (!authFeature) throw new Error(`Auth feature not found for ref: ${authDefinition.authFeatureRef}`);
+	const partialDef = __mf_31(() => createPlaceholderAuthPartialDefinition(authFeature.name), [authFeature.name]);
+	const diff = __mf_31(() => __mf_167(definitionContainer.schema, definitionContainer.definition, partialDef), [definitionContainer, partialDef]);
+	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
+		const updatedData = { ...data };
+		__mf_55(definitionContainer, partialDef)(draftConfig);
+		__mf_26.setPluginConfig(draftConfig, metadata, updatedData, definitionContainer);
+	}, {
+		successMessage: "Successfully saved placeholder auth plugin!",
+		onSuccess: () => {
+			onSave();
+		}
+	}));
+	__mf_20({
+		control,
+		reset,
+		onSubmit
+	});
+	return /* @__PURE__ */ __mf_2("div", {
+		className: "auth:relative auth:flex auth:h-full auth:flex-1 auth:flex-col auth:gap-4 auth:overflow-hidden",
+		children: [/* @__PURE__ */ __mf_1(AuthConfigTabs, {}), /* @__PURE__ */ __mf_1("div", {
+			className: "auth:mb-[--action-bar-height] auth:flex auth:flex-1 auth:overflow-y-auto",
+			style: { "--action-bar-height": "52px" },
+			children: /* @__PURE__ */ __mf_2("form", {
+				onSubmit,
+				className: "auth:max-w-6xl auth:flex-1",
+				children: [/* @__PURE__ */ __mf_1("div", {
+					className: "auth:pb-16",
+					children: /* @__PURE__ */ __mf_1(__mf_176, { children: /* @__PURE__ */ __mf_2(__mf_177, { children: [/* @__PURE__ */ __mf_2(__mf_180, { children: [/* @__PURE__ */ __mf_1(__mf_181, { children: "Placeholder Auth Configuration" }), /* @__PURE__ */ __mf_1(__mf_179, { children: "The plugin will automatically configure the models it needs." })] }), /* @__PURE__ */ __mf_1(__mf_178, {
+						className: "auth:space-y-6",
+						children: /* @__PURE__ */ __mf_1(__mf_0, {
+							diff,
+							upToDateMessage: "All required models are already configured correctly. No changes needed."
+						})
+					})] }) })
+				}), /* @__PURE__ */ __mf_1(__mf_116, {
+					form,
+					allowSaveWithoutDirty: !pluginMetadata || diff.hasChanges
+				})]
+			})
+		})]
+	});
+}
+//#endregion
+//#region src/placeholder-auth/core/web.ts
+var AUTH_FEATURE_NAME = "accounts/auth";
+var web_default = __mf_142({
+	name: "web",
+	dependencies: {
+		webConfig: __mf_263,
+		pluginDefaults: __mf_233
+	},
+	initialize: ({ webConfig, pluginDefaults }, { pluginKey }) => {
+		webConfig.components.set(pluginKey, PlaceholderAuthDefinitionEditor);
+		pluginDefaults.builders.set(pluginKey, ({ draft }) => {
+			__mf_17.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			return {
+				config: {},
+				partialDef: createPlaceholderAuthPartialDefinition(AUTH_FEATURE_NAME)
+			};
+		});
+	}
+});
+//#endregion
+export { web_default as default };
+
+//# sourceMappingURL=web-BgWG7dYl.js.map

package/dist/web/assets/web-CXHw8SK7.js

@@ -0,0 +1,118 @@
+import { $ as __mf_2, Q as __mf_1, S as __mf_234, _ as __mf_180, g as __mf_179, h as __mf_178, ht as __mf_31, m as __mf_177, o as __mf_145, p as __mf_176, r as __mf_116, v as __mf_181, yt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__ } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-CXGct_48.js";
+import { a as __mf_167, d as __mf_233, f as __mf_26, g as __mf_55, n as __mf_142, o as __mf_17, p as __mf_263 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-BfSk5vRC.js";
+import { a as __mf_26$1, i as __mf_25, n as __mf_20, r as __mf_23, t as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-DZIcwf2B.js";
+import { n as a, t as AuthConfigTabs } from "./styles-Cuq4wgvD.js";
+import { t as getAuthPluginDefinition } from "./get-auth-plugin-definition-x8oAsN1R.js";
+import { n as createLocalAuthPluginDefinitionSchema, t as createLocalAuthPartialDefinition } from "./models-CKab4MTC.js";
+//#region src/local-auth/core/components/local-auth-definition-editor.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function LocalAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
+	const { definition, definitionContainer, saveDefinitionWithFeedback } = __mf_25();
+	const authPluginDefinitionSchema = __mf_23(createLocalAuthPluginDefinitionSchema);
+	const authDefinition = getAuthPluginDefinition(definition);
+	const roles = authDefinition.roles.filter((role) => !role.builtIn).map((role) => ({
+		label: role.name,
+		value: role.id
+	}));
+	const defaultValues = __mf_31(() => {
+		if (pluginMetadata?.config) return pluginMetadata.config;
+		return {
+			additionalUserAdminRoles: [],
+			requireNameOnRegistration: false
+		};
+	}, [pluginMetadata?.config]);
+	const form = __mf_26$1({
+		resolver: a(authPluginDefinitionSchema),
+		defaultValues
+	});
+	const { control, reset, handleSubmit } = form;
+	const authFeature = definition.features.find((f) => f.id === authDefinition.authFeatureRef);
+	if (!authFeature) throw new Error(`Auth feature not found for ref: ${authDefinition.authFeatureRef}`);
+	const accountsFeature = definition.features.find((f) => f.id === authDefinition.accountsFeatureRef);
+	if (!accountsFeature) throw new Error(`Accounts feature not found for ref: ${authDefinition.accountsFeatureRef}`);
+	const partialDef = __mf_31(() => createLocalAuthPartialDefinition(authFeature.name, accountsFeature.name), [authFeature.name, accountsFeature.name]);
+	const diff = __mf_31(() => __mf_167(definitionContainer.schema, definitionContainer.definition, partialDef), [definitionContainer, partialDef]);
+	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
+		const updatedData = { ...data };
+		__mf_55(definitionContainer, partialDef)(draftConfig);
+		__mf_26.setPluginConfig(draftConfig, metadata, updatedData, definitionContainer);
+	}, {
+		successMessage: "Successfully saved auth plugin!",
+		onSuccess: () => {
+			onSave();
+		}
+	}));
+	__mf_20({
+		control,
+		reset,
+		onSubmit
+	});
+	return /* @__PURE__ */ __mf_2("div", {
+		className: "auth:relative auth:flex auth:h-full auth:flex-1 auth:flex-col auth:gap-4 auth:overflow-hidden",
+		children: [/* @__PURE__ */ __mf_1(AuthConfigTabs, {}), /* @__PURE__ */ __mf_1("div", {
+			className: "auth:mb-[--action-bar-height] auth:flex auth:flex-1 auth:overflow-y-auto",
+			style: { "--action-bar-height": "52px" },
+			children: /* @__PURE__ */ __mf_2("form", {
+				onSubmit,
+				className: "auth:max-w-6xl auth:flex-1",
+				children: [/* @__PURE__ */ __mf_1("div", {
+					className: "auth:pb-16",
+					children: /* @__PURE__ */ __mf_2(__mf_176, { children: [
+						/* @__PURE__ */ __mf_2(__mf_177, { children: [/* @__PURE__ */ __mf_2(__mf_180, { children: [/* @__PURE__ */ __mf_1(__mf_181, { children: "Local Auth User Models" }), /* @__PURE__ */ __mf_1(__mf_179, { children: "The plugin will automatically configure the models it needs." })] }), /* @__PURE__ */ __mf_1(__mf_178, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(__mf_0, { diff })
+						})] }),
+						/* @__PURE__ */ __mf_2(__mf_177, { children: [/* @__PURE__ */ __mf_2(__mf_180, { children: [/* @__PURE__ */ __mf_1(__mf_181, { children: "User Management Permissions" }), /* @__PURE__ */ __mf_1(__mf_179, { children: "The \"admin\" role always has user management permissions. Optionally add more roles that can manage users and assign roles in the admin interface." })] }), /* @__PURE__ */ __mf_1(__mf_178, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(__mf_145, {
+								label: "Additional User Admin Roles",
+								name: "additionalUserAdminRoles",
+								control,
+								options: roles,
+								description: "Additional roles (beyond admin) that can manage users and assign roles."
+							})
+						})] }),
+						/* @__PURE__ */ __mf_2(__mf_177, { children: [/* @__PURE__ */ __mf_2(__mf_180, { children: [/* @__PURE__ */ __mf_1(__mf_181, { children: "Registration Settings" }), /* @__PURE__ */ __mf_1(__mf_179, { children: "Configure what information is collected during user registration." })] }), /* @__PURE__ */ __mf_1(__mf_178, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(__mf_234, {
+								label: "Require Name on Registration",
+								name: "requireNameOnRegistration",
+								control,
+								description: "When enabled, users must provide their name when registering."
+							})
+						})] })
+					] })
+				}), /* @__PURE__ */ __mf_1(__mf_116, {
+					form,
+					allowSaveWithoutDirty: !pluginMetadata || diff.hasChanges
+				})]
+			})
+		})]
+	});
+}
+//#endregion
+//#region src/local-auth/core/web.ts
+var AUTH_FEATURE_NAME = "accounts/auth";
+var ACCOUNTS_FEATURE_NAME = "accounts/users";
+var web_default = __mf_142({
+	name: "web",
+	dependencies: {
+		webConfig: __mf_263,
+		pluginDefaults: __mf_233
+	},
+	initialize: ({ webConfig, pluginDefaults }, { pluginKey }) => {
+		webConfig.components.set(pluginKey, LocalAuthDefinitionEditor);
+		pluginDefaults.builders.set(pluginKey, ({ draft }) => {
+			__mf_17.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			__mf_17.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
+			return {
+				config: {},
+				partialDef: createLocalAuthPartialDefinition(AUTH_FEATURE_NAME, ACCOUNTS_FEATURE_NAME)
+			};
+		});
+	}
+});
+//#endregion
+export { web_default as default };
+
+//# sourceMappingURL=web-CXHw8SK7.js.map

package/dist/web/assets/web-CnB-sqCR.js

@@ -0,0 +1,357 @@
+import { $ as __mf_2, A as __mf_76, K as useWatch, L as MdAdd, M as __mf_78, N as __mf_81, O as __mf_73, Q as __mf_1, R as MdDeleteOutline, T as __mf_270, U as useFieldArray$1, W as useForm, Z as __mf_0, _ as __mf_180, _t as __mf_35, b as __mf_19, d as __mf_172, f as __mf_173, ft as __mf_27, g as __mf_179, h as __mf_178, ht as __mf_31, i as __mf_124, j as __mf_77, k as __mf_75, l as __mf_170, m as __mf_177, n as __mf_1$1, p as __mf_176, r as __mf_116, t as __mf_0$1, u as __mf_171, v as __mf_181, w as __mf_27$1, x as __mf_2$1, y as __mf_185, yt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__, z as MdEdit } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-CXGct_48.js";
+import { n as __mf_92, t as __mf_13 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-Ci5_qYaj.js";
+import { c as __mf_189, d as __mf_233, f as __mf_26, n as __mf_142, o as __mf_17, p as __mf_263, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-BfSk5vRC.js";
+import { n as createAuthRoleSchema, r as createDefaultAuthRoles, t as createAuthPluginDefinitionSchema } from "./plugin-definition-8Exesd6T.js";
+import { a as __mf_26$1, i as __mf_25, n as __mf_20, o as __mf_3, r as __mf_23 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-DZIcwf2B.js";
+import { n as a, t as AuthConfigTabs } from "./styles-Cuq4wgvD.js";
+//#region ../../node_modules/.pnpm/@hookform+lenses@0.8.1_react-hook-form@7.71.1_react@19.1.0/node_modules/@hookform/lenses/dist/rhf/index.js
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function useFieldArray(props) {
+	const original = useFieldArray$1(props);
+	return {
+		fields: __mf_31(() => {
+			if (!props.getTransformer) return original.fields;
+			return original.fields.map(props.getTransformer);
+		}, [original.fields, props.getTransformer]),
+		move: original.move,
+		remove: original.remove,
+		swap: original.swap,
+		prepend: (value, options) => {
+			if (!props.setTransformer) return original.prepend(value, options);
+			const newValue = Array.isArray(value) ? value.map(props.setTransformer) : props.setTransformer(value);
+			original.prepend(newValue, options);
+		},
+		append: (value, options) => {
+			if (!props.setTransformer) return original.append(value, options);
+			const newValue = Array.isArray(value) ? value.map(props.setTransformer) : props.setTransformer(value);
+			original.append(newValue, options);
+		},
+		insert: (index, value, options) => {
+			if (!props.setTransformer) return original.insert(index, value, options);
+			const newValue = Array.isArray(value) ? value.map(props.setTransformer) : props.setTransformer(value);
+			original.insert(index, newValue, options);
+		},
+		update: (index, value) => {
+			if (!props.setTransformer) return original.update(index, value);
+			const newValue = props.setTransformer(value);
+			original.update(index, newValue);
+		},
+		replace: (value) => {
+			if (!props.setTransformer) return original.replace(value);
+			const newValue = props.setTransformer(value);
+			original.replace(newValue);
+		}
+	};
+}
+//#endregion
+//#region src/auth/core/components/role-editor-form/role-dialog.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function RoleDialog({ open, onOpenChange, role, isNew = false, onSave }) {
+	const { control, handleSubmit } = useForm({
+		resolver: a(__mf_23(createAuthRoleSchema)),
+		values: role
+	});
+	const onSubmit = handleSubmit((data) => {
+		onSave(data);
+		onOpenChange?.(false);
+	});
+	const formId = __mf_27();
+	return /* @__PURE__ */ __mf_1(__mf_73, {
+		open,
+		onOpenChange,
+		children: /* @__PURE__ */ __mf_1(__mf_75, { children: /* @__PURE__ */ __mf_2("form", {
+			id: formId,
+			onSubmit: (e) => {
+				e.stopPropagation();
+				return onSubmit(e);
+			},
+			children: [
+				/* @__PURE__ */ __mf_2(__mf_78, { children: [/* @__PURE__ */ __mf_1(__mf_81, { children: isNew ? "Add Role" : "Edit Role" }), /* @__PURE__ */ __mf_1(__mf_76, { children: isNew ? "Enter the details for the new role." : "Update the role details below." })] }),
+				/* @__PURE__ */ __mf_2("div", {
+					className: "auth:space-y-4 auth:py-4",
+					children: [/* @__PURE__ */ __mf_1(__mf_124, {
+						label: "Role Name",
+						name: "name",
+						control,
+						placeholder: "Enter role name"
+					}), /* @__PURE__ */ __mf_1(__mf_124, {
+						label: "Description",
+						name: "comment",
+						control,
+						placeholder: "Describe this role's purpose"
+					})]
+				}),
+				/* @__PURE__ */ __mf_2(__mf_77, { children: [/* @__PURE__ */ __mf_1(__mf_27$1, {
+					type: "button",
+					variant: "outline",
+					onClick: () => {
+						onOpenChange?.(false);
+					},
+					children: "Cancel"
+				}), /* @__PURE__ */ __mf_2(__mf_27$1, {
+					form: formId,
+					type: "submit",
+					children: [isNew ? "Add" : "Update", " Role"]
+				})] })
+			]
+		}) })
+	});
+}
+//#endregion
+//#region src/auth/core/components/role-editor-form/role-editor-form.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function RoleEditorForm({ className, control }) {
+	const { requestConfirm } = __mf_270();
+	const { append, update, remove } = useFieldArray({
+		control,
+		name: "roles"
+	});
+	const [roleToEdit, setRoleToEdit] = __mf_35();
+	const [isEditing, setIsEditing] = __mf_35(false);
+	const roles = useWatch({
+		control,
+		name: "roles"
+	});
+	function handleSaveRole(newRole) {
+		const existingIndex = roles.findIndex((role) => role.id === newRole.id);
+		if (existingIndex === -1) append(newRole);
+		else update(existingIndex, newRole);
+	}
+	function handleDeleteRole(roleIdx) {
+		const role = roles[roleIdx];
+		if (!role) return;
+		requestConfirm({
+			title: "Delete Role",
+			content: `Are you sure you want to delete the role "${role.name}"?`,
+			onConfirm: () => {
+				remove(roleIdx);
+			}
+		});
+	}
+	return /* @__PURE__ */ __mf_2(__mf_177, {
+		className,
+		children: [/* @__PURE__ */ __mf_2(__mf_180, { children: [/* @__PURE__ */ __mf_1(__mf_181, { children: "User Roles" }), /* @__PURE__ */ __mf_1(__mf_179, { children: "Define roles for your application. Default roles are protected and cannot be removed." })] }), /* @__PURE__ */ __mf_2(__mf_178, {
+			className: "auth:space-y-4",
+			children: [
+				roles.map((role, roleIdx) => /* @__PURE__ */ __mf_2(__mf_170, { children: [/* @__PURE__ */ __mf_2(__mf_173, { children: [/* @__PURE__ */ __mf_1(__mf_172, {
+					title: "Name",
+					children: /* @__PURE__ */ __mf_1("div", {
+						className: "auth:flex auth:items-center auth:gap-2",
+						children: /* @__PURE__ */ __mf_1("span", { children: role.name })
+					})
+				}), /* @__PURE__ */ __mf_1(__mf_172, {
+					title: "Description",
+					children: role.comment.trim() || /* @__PURE__ */ __mf_1("span", {
+						className: "auth:text-muted-foreground",
+						children: "No description"
+					})
+				})] }), /* @__PURE__ */ __mf_2(__mf_171, { children: [role.builtIn && /* @__PURE__ */ __mf_1(__mf_19, {
+					variant: "secondary",
+					children: "Default Role"
+				}), !role.builtIn && /* @__PURE__ */ __mf_2(__mf_0, { children: [/* @__PURE__ */ __mf_1(__mf_27$1, {
+					variant: "ghost",
+					size: "icon",
+					title: "Edit",
+					"aria-label": "Edit role",
+					onClick: () => {
+						setRoleToEdit(role);
+						setIsEditing(true);
+					},
+					children: /* @__PURE__ */ __mf_1(MdEdit, {})
+				}), /* @__PURE__ */ __mf_1(__mf_27$1, {
+					variant: "ghostDestructive",
+					size: "icon",
+					title: "Delete",
+					"aria-label": "Delete role",
+					onClick: () => {
+						handleDeleteRole(roleIdx);
+					},
+					children: /* @__PURE__ */ __mf_1(MdDeleteOutline, {})
+				})] })] })] }, role.id)),
+				/* @__PURE__ */ __mf_1(RoleDialog, {
+					open: isEditing,
+					onOpenChange: setIsEditing,
+					role: roleToEdit,
+					isNew: roleToEdit ? !roles.some((r) => r.id === roleToEdit.id) : true,
+					onSave: handleSaveRole
+				}),
+				/* @__PURE__ */ __mf_2(__mf_27$1, {
+					variant: "secondary",
+					size: "sm",
+					onClick: () => {
+						setRoleToEdit({
+							id: __mf_59.generateNewId(),
+							name: "",
+							comment: "",
+							builtIn: false
+						});
+						setIsEditing(true);
+					},
+					children: [/* @__PURE__ */ __mf_1(MdAdd, {}), "Add Role"]
+				})
+			]
+		})]
+	});
+}
+//#endregion
+//#region src/auth/core/components/auth-definition-editor.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
+	const { definition, definitionContainer, schemaParserContext, saveDefinitionWithFeedback } = __mf_25();
+	const authPluginDefinitionSchema = __mf_23(createAuthPluginDefinitionSchema);
+	const availableImplementations = __mf_189(schemaParserContext.pluginStore, metadata.key);
+	const defaultImplementation = availableImplementations.find((i) => i.fullyQualifiedName === "@baseplate-dev/plugin-auth:local-auth") ?? availableImplementations[0];
+	const defaultValues = __mf_31(() => {
+		if (pluginMetadata?.config) return pluginMetadata.config;
+		const defaultAuthFeatureRef = __mf_17.getFeatureIdByNameOrDefault(definition, "accounts/auth");
+		const defaultAccountsFeatureRef = __mf_17.getFeatureIdByNameOrDefault(definition, "accounts/users");
+		if (!defaultImplementation) throw new Error("No auth implementation plugins are available");
+		return {
+			implementationPluginKey: defaultImplementation.key,
+			authFeatureRef: defaultAuthFeatureRef,
+			accountsFeatureRef: defaultAccountsFeatureRef,
+			roles: createDefaultAuthRoles()
+		};
+	}, [
+		definition,
+		pluginMetadata?.config,
+		defaultImplementation
+	]);
+	const form = __mf_26$1({
+		resolver: a(authPluginDefinitionSchema),
+		defaultValues
+	});
+	const { control, reset, handleSubmit, watch } = form;
+	const implementationPluginKey = watch("implementationPluginKey");
+	const selectedPlugin = implementationPluginKey && availableImplementations.find((i) => i.key === implementationPluginKey);
+	const isSelectedImplementationActive = !!__mf_26.byKey(definitionContainer.definition, implementationPluginKey);
+	const hasSelectedImplementationChanged = implementationPluginKey !== (pluginMetadata?.config)?.implementationPluginKey;
+	const selectedImplementationUrl = selectedPlugin ? `/plugins/edit/${selectedPlugin.key}` : void 0;
+	const navigate = __mf_92();
+	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
+		const featureRef = __mf_17.ensureFeatureByNameRecursively(draftConfig, data.authFeatureRef);
+		const accountsFeatureRef = __mf_17.ensureFeatureByNameRecursively(draftConfig, data.accountsFeatureRef);
+		__mf_26.setPluginConfig(draftConfig, metadata, {
+			...data,
+			authFeatureRef: featureRef,
+			accountsFeatureRef
+		}, definitionContainer);
+		const otherPlugins = availableImplementations.filter((i) => i.key !== implementationPluginKey);
+		for (const plugin of otherPlugins) __mf_26.disablePlugin(draftConfig, plugin.key, definitionContainer.parserContext);
+	}, {
+		successMessage: `Successfully saved auth plugin! ${selectedImplementationUrl && !isSelectedImplementationActive ? `Please configure the provider plugin before syncing.` : ""}`,
+		onSuccess: () => {
+			onSave();
+			if (selectedImplementationUrl && !isSelectedImplementationActive) setTimeout(() => {
+				navigate({ to: selectedImplementationUrl });
+			}, 100);
+		}
+	}));
+	__mf_20({
+		control,
+		reset,
+		onSubmit
+	});
+	return /* @__PURE__ */ __mf_2("div", {
+		className: "auth:relative auth:flex auth:h-full auth:flex-1 auth:flex-col auth:gap-4 auth:overflow-hidden",
+		children: [/* @__PURE__ */ __mf_1(AuthConfigTabs, {}), /* @__PURE__ */ __mf_1("div", {
+			className: "auth:mb-[--action-bar-height] auth:flex auth:flex-1 auth:overflow-y-auto",
+			style: { "--action-bar-height": "52px" },
+			children: /* @__PURE__ */ __mf_2("form", {
+				onSubmit,
+				className: "auth:max-w-6xl auth:flex-1",
+				children: [/* @__PURE__ */ __mf_2("div", {
+					className: "auth:pb-16",
+					children: [!isSelectedImplementationActive && selectedPlugin && !hasSelectedImplementationChanged && /* @__PURE__ */ __mf_2(__mf_0$1, {
+						variant: "warning",
+						children: [/* @__PURE__ */ __mf_1(__mf_2$1, { children: "Implementation Provider Not Active" }), /* @__PURE__ */ __mf_1(__mf_1$1, { children: /* @__PURE__ */ __mf_2("p", { children: [
+							"The selected implementation provider is not active. Please make sure",
+							" ",
+							/* @__PURE__ */ __mf_1(__mf_13, {
+								to: selectedImplementationUrl,
+								className: "auth:inline-block auth:font-medium",
+								children: "configure the provider"
+							}),
+							" ",
+							"before syncing."
+						] }) })]
+					}), /* @__PURE__ */ __mf_2(__mf_176, { children: [/* @__PURE__ */ __mf_2(__mf_177, { children: [/* @__PURE__ */ __mf_2(__mf_180, { children: [/* @__PURE__ */ __mf_1(__mf_181, { children: "General Settings" }), /* @__PURE__ */ __mf_1(__mf_179, { children: "Configure the general settings for the auth plugin." })] }), /* @__PURE__ */ __mf_2(__mf_178, {
+						className: "auth:space-y-6",
+						children: [
+							/* @__PURE__ */ __mf_1(__mf_3, {
+								label: "Auth Feature Path",
+								name: "authFeatureRef",
+								control,
+								canCreate: true,
+								description: "Specify the feature path where auth infrastructure will be generated"
+							}),
+							/* @__PURE__ */ __mf_1(__mf_3, {
+								label: "Accounts Feature Path",
+								name: "accountsFeatureRef",
+								control,
+								canCreate: true,
+								description: "Specify the feature path where user account models will be generated"
+							}),
+							/* @__PURE__ */ __mf_1(__mf_185, {
+								label: "Authentication Provider",
+								name: "implementationPluginKey",
+								control,
+								options: availableImplementations,
+								renderItemLabel: (item) => /* @__PURE__ */ __mf_2("div", {
+									className: "auth:flex auth:flex-col auth:gap-2",
+									children: [/* @__PURE__ */ __mf_1("div", {
+										className: "auth:text-sm auth:font-medium",
+										children: item.displayName
+									}), /* @__PURE__ */ __mf_1("div", {
+										className: "auth:text-sm auth:text-muted-foreground",
+										children: item.description
+									})]
+								}),
+								getOptionLabel: (item) => item.displayName,
+								getOptionValue: (item) => item.key,
+								description: "The authentication provider to use for your project"
+							})
+						]
+					})] }), /* @__PURE__ */ __mf_1(RoleEditorForm, { control })] })]
+				}), /* @__PURE__ */ __mf_1(__mf_116, {
+					form,
+					allowSaveWithoutDirty: !pluginMetadata
+				})]
+			})
+		})]
+	});
+}
+//#endregion
+//#region src/auth/core/web.ts
+var AUTH_FEATURE_NAME = "accounts/auth";
+var ACCOUNTS_FEATURE_NAME = "accounts/users";
+var AUTH_IMPL_FQN_PREFIX = "@baseplate-dev/plugin-auth:";
+var PARENT_AUTH_FQN = "@baseplate-dev/plugin-auth:auth";
+var web_default = __mf_142({
+	name: "web",
+	dependencies: {
+		webConfig: __mf_263,
+		pluginDefaults: __mf_233
+	},
+	initialize: ({ webConfig, pluginDefaults }, { pluginKey }) => {
+		webConfig.components.set(pluginKey, AuthDefinitionEditor);
+		pluginDefaults.builders.set(pluginKey, ({ draft, enabledPluginFqns, findPluginMetadataByFqn }) => {
+			const authFeatureRef = __mf_17.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			const accountsFeatureRef = __mf_17.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
+			const implFqn = [...enabledPluginFqns].find((fqn) => fqn.startsWith(AUTH_IMPL_FQN_PREFIX) && fqn !== PARENT_AUTH_FQN);
+			if (!implFqn) throw new Error("No auth implementation plugin enabled. Add an auth implementation (e.g. local-auth or better-auth) to the enabled plugins.");
+			const implPlugin = findPluginMetadataByFqn(implFqn);
+			if (!implPlugin) throw new Error(`Auth implementation plugin ${implFqn} is enabled but its metadata could not be resolved.`);
+			return { config: {
+				implementationPluginKey: implPlugin.key,
+				authFeatureRef,
+				accountsFeatureRef,
+				roles: createDefaultAuthRoles()
+			} };
+		});
+	}
+});
+//#endregion
+export { web_default as default };
+
+//# sourceMappingURL=web-CnB-sqCR.js.map