@better-forge/ui 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 BetterStatusPage contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,13 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# @better-forge/ui
+
+The interface the Better products share: React components, the API client, hooks and the look.
+
+- **Components and helpers**: `Modal`, `ConfirmModal`, `CopyButton`, `SidePanelFrame`, the form and state components (`Alert`, `Field`, `Switch`, `Toast`, ...), `useDarkMode`, `useDebouncedValue`, date formatting and the changelog parser.
+- **API client** (`api`): cookie session, CSRF header, typed errors.
+- **Look**: `@better-forge/ui/styles.css` (the Material 3 colour tokens for light and dark, base styles, buttons, inputs, the navigation, bundled fonts) and `@better-forge/ui/tailwind-preset` (colours backed by those variables, type faces). An application imports the stylesheet first in its own CSS (`@import '@better-forge/ui/styles.css';`), uses the preset in its Tailwind config and adds `packages/ui/src` to Tailwind's `content`.
+- **`configureUi({ storagePrefix, apiBase, csrfCookie, basePath, redirectAfterSignIn })`** tells the interface what application it is part of: what it keeps in the browser, where the API answers and where the sign-in page is. Call it before anything is rendered.
+
+- **Pages**: sign-in and first-run setup, change password, settings, users, API tokens, audit log, vault, backups and the SSO test result. What is the product's comes in as props (roles, the API's permissions, audit entity names, the sign-in copy) or as `texts` and `brand` of `configureUi`.
+- **Shell**: `createAdminShell(config)` is the signed-in layout (sidebar and drawer, role-filtered sections, footer links, what's new).
+
+Depends on `@better-forge/contracts`; React 19, `react-dom`, `react-router-dom`, `@tanstack/react-query` and `clsx` are peer dependencies.

package/dist/api/client.d.ts

@@ -0,0 +1,42 @@
+export interface AuthUser {
+    userId: number;
+    email: string;
+    role: string;
+    mustChangePassword: boolean;
+    twoFactorEnabled: boolean;
+    authMethod?: 'password' | 'oidc';
+}
+export declare function setSession(user: AuthUser): void;
+export declare function clearSession(): void;
+export declare function getCurrentUser(): AuthUser | null;
+export declare function isAuthenticated(): boolean;
+/**
+ * Where a signed-in user starts. One who does not belong in this interface goes where the application sends them
+ * (which may also have them replace a temporary password); everyone else replaces it here first.
+ */
+export declare function enterAfterSignIn(user: AuthUser, navigate: (path: string) => void): void;
+export declare function mustChangePassword(): boolean;
+/**
+ * A failed API call: `message` is the server's error text, `code` its machine-readable code when it sent one, and
+ * `body` the whole JSON answer, for the endpoints that say more than a message (a list of problems, say).
+ */
+export declare class ApiError extends Error {
+    readonly status: number;
+    readonly code?: string | undefined;
+    readonly body?: unknown | undefined;
+    constructor(message: string, status: number, code?: string | undefined, body?: unknown | undefined);
+}
+export declare const api: {
+    get: <T>(path: string) => Promise<T>;
+    /** GET an answer that is text, for example a YAML document. */
+    getText: (path: string) => Promise<string>;
+    post: <T>(path: string, body?: unknown) => Promise<T>;
+    patch: <T>(path: string, body: unknown) => Promise<T>;
+    put: <T>(path: string, body: unknown) => Promise<T>;
+    delete: (path: string) => Promise<void>;
+    upload: <T>(path: string, formData: FormData) => Promise<T>;
+    /** POST a text body as it is, for example a YAML file, with the given content type. */
+    postText: <T>(path: string, text: string, contentType: string) => Promise<T>;
+    download: (path: string, filename: string) => Promise<void>;
+};
+//# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,kBAAkB,EAAE,OAAO,CAAA;IAC3B,gBAAgB,EAAE,OAAO,CAAA;IACzB,UAAU,CAAC,EAAE,UAAU,GAAG,MAAM,CAAA;CACjC;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAG/C;AAED,wBAAgB,YAAY,IAAI,IAAI,CAGnC;AAED,wBAAgB,cAAc,IAAI,QAAQ,GAAG,IAAI,CAKhD;AAED,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAKvF;AAED,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAED;;;GAGG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACJ,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO;gBAAzF,OAAO,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM,EAAW,IAAI,CAAC,EAAE,MAAM,YAAA,EAAW,IAAI,CAAC,EAAE,OAAO,YAAA;CAItG;AAyDD,eAAO,MAAM,GAAG;UACR,CAAC,QAAQ,MAAM;IACrB,+DAA+D;oBAC/C,MAAM;WACf,CAAC,QAAQ,MAAM,SAAQ,OAAO;YAC7B,CAAC,QAAQ,MAAM,QAAQ,OAAO;UAChC,CAAC,QAAQ,MAAM,QAAQ,OAAO;mBACrB,MAAM;aACZ,CAAC,QAAQ,MAAM,YAAY,QAAQ;IAC5C,uFAAuF;eAC5E,CAAC,QAAQ,MAAM,QAAQ,MAAM,eAAe,MAAM;qBACtC,MAAM,YAAY,MAAM;CAUhD,CAAA"}

package/dist/api/client.js

@@ -0,0 +1,130 @@
+import { safeSessionStorage } from '@better-forge/contracts';
+import { storageKey, uiConfig } from '../config';
+import { navigation } from '../navigation';
+const userKey = () => storageKey('auth-user');
+export function setSession(user) {
+    safeSessionStorage.set(userKey(), JSON.stringify(user));
+    window.dispatchEvent(new CustomEvent(storageKey('auth-change')));
+}
+export function clearSession() {
+    safeSessionStorage.remove(userKey());
+    window.dispatchEvent(new CustomEvent(storageKey('auth-change')));
+}
+export function getCurrentUser() {
+    try {
+        const stored = safeSessionStorage.get(userKey());
+        return stored ? JSON.parse(stored) : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function isAuthenticated() {
+    return getCurrentUser() !== null;
+}
+/**
+ * Where a signed-in user starts. One who does not belong in this interface goes where the application sends them
+ * (which may also have them replace a temporary password); everyone else replaces it here first.
+ */
+export function enterAfterSignIn(user, navigate) {
+    const elsewhere = uiConfig().redirectAfterSignIn?.(user) ?? null;
+    if (elsewhere)
+        navigation.assign(elsewhere);
+    else if (user.mustChangePassword)
+        navigate(`${uiConfig().basePath}/change-password`);
+    else
+        navigate(`${uiConfig().basePath}/`);
+}
+export function mustChangePassword() {
+    return !!getCurrentUser()?.mustChangePassword;
+}
+/**
+ * A failed API call: `message` is the server's error text, `code` its machine-readable code when it sent one, and
+ * `body` the whole JSON answer, for the endpoints that say more than a message (a list of problems, say).
+ */
+export class ApiError extends Error {
+    status;
+    code;
+    body;
+    constructor(message, status, code, body) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.body = body;
+        this.name = 'ApiError';
+    }
+}
+function cookie(name) {
+    const prefix = `${encodeURIComponent(name)}=`;
+    const part = document.cookie.split('; ').find((item) => item.startsWith(prefix));
+    return part ? decodeURIComponent(part.slice(prefix.length)) : null;
+}
+async function request(method, path, body, isFormData = false, 
+/** Sends `body` (a string) as it is with this content type, instead of as JSON. */
+contentType, 
+/** Reads the answer as text instead of JSON. */
+asText = false) {
+    const headers = {};
+    if (contentType)
+        headers['Content-Type'] = contentType;
+    else if (!isFormData && body !== undefined)
+        headers['Content-Type'] = 'application/json';
+    if (!['GET', 'HEAD', 'OPTIONS'].includes(method)) {
+        const csrf = cookie(uiConfig().csrfCookie);
+        if (csrf)
+            headers['X-CSRF-Token'] = csrf;
+    }
+    const fetchBody = contentType ? body : isFormData ? body : body !== undefined ? JSON.stringify(body) : null;
+    const res = await fetch(`${uiConfig().apiBase}${path}`, {
+        method,
+        headers,
+        credentials: 'same-origin',
+        ...(fetchBody !== null ? { body: fetchBody } : {}),
+    });
+    if (!res.ok) {
+        const err = await res.json().catch(() => ({ error: res.statusText }));
+        if (res.status === 403 && err.code === 'PASSWORD_CHANGE_REQUIRED') {
+            const user = getCurrentUser();
+            if (user && !user.mustChangePassword)
+                setSession({ ...user, mustChangePassword: true });
+            if (!window.location.pathname.includes('/change-password')) {
+                window.location.href = `${uiConfig().basePath}/change-password`;
+            }
+        }
+        if (res.status === 401) {
+            clearSession();
+            const isLoginRequest = path === '/auth/login' || path === '/auth/2fa/verify';
+            if (!isLoginRequest && !window.location.pathname.includes('/login')) {
+                window.location.href = `${uiConfig().basePath}/login`;
+            }
+        }
+        throw new ApiError(err.error ?? res.statusText, res.status, err.code, err);
+    }
+    if (res.status === 204)
+        return undefined;
+    return (asText ? res.text() : res.json());
+}
+export const api = {
+    get: (path) => request('GET', path),
+    /** GET an answer that is text, for example a YAML document. */
+    getText: (path) => request('GET', path, undefined, false, undefined, true),
+    post: (path, body = {}) => request('POST', path, body),
+    patch: (path, body) => request('PATCH', path, body),
+    put: (path, body) => request('PUT', path, body),
+    delete: (path) => request('DELETE', path),
+    upload: (path, formData) => request('POST', path, formData, true),
+    /** POST a text body as it is, for example a YAML file, with the given content type. */
+    postText: (path, text, contentType) => request('POST', path, text, false, contentType),
+    download: async (path, filename) => {
+        const res = await fetch(`${uiConfig().apiBase}${path}`, { credentials: 'same-origin' });
+        if (!res.ok)
+            throw new Error('Download failed');
+        const url = URL.createObjectURL(await res.blob());
+        const link = document.createElement('a');
+        link.href = url;
+        link.download = filename;
+        link.click();
+        URL.revokeObjectURL(url);
+    },
+};
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAE1C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;AAW7C,MAAM,UAAU,UAAU,CAAC,IAAc;IACvC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IACvD,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;IACpC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QAChD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAa,CAAC,CAAC,CAAC,IAAI,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,cAAc,EAAE,KAAK,IAAI,CAAA;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc,EAAE,QAAgC;IAC/E,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;IAChE,IAAI,SAAS;QAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;SACtC,IAAI,IAAI,CAAC,kBAAkB;QAAE,QAAQ,CAAC,GAAG,QAAQ,EAAE,CAAC,QAAQ,kBAAkB,CAAC,CAAA;;QAC/E,QAAQ,CAAC,GAAG,QAAQ,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,kBAAkB,CAAA;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACK;IAAyB;IAAwB;IAAvF,YAAY,OAAe,EAAW,MAAc,EAAW,IAAa,EAAW,IAAc;QACnG,KAAK,CAAC,OAAO,CAAC,CAAA;QADsB,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAS;QAAW,SAAI,GAAJ,IAAI,CAAU;QAEnG,IAAI,CAAC,IAAI,GAAG,UAAU,CAAA;IACxB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAA;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IAChF,OAAO,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACpE,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,UAAU,GAAG,KAAK;AAClB,mFAAmF;AACnF,WAAoB;AACpB,gDAAgD;AAChD,MAAM,GAAG,KAAK;IAEd,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,IAAI,WAAW;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,WAAW,CAAA;SACjD,IAAI,CAAC,UAAU,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;IACxF,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,CAAA;QAC1C,IAAI,IAAI;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAA;IAC1C,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAE,IAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,IAAiB,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACrI,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,EAAE,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;QACtD,MAAM;QACN,OAAO;QACP,WAAW,EAAE,aAAa;QAC1B,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAsC,CAAA;QAC1G,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,cAAc,EAAE,CAAA;YAC7B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAAE,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAA;YACvF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,QAAQ,EAAE,CAAC,QAAQ,kBAAkB,CAAA;YACjE,CAAC;QACH,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,YAAY,EAAE,CAAA;YACd,MAAM,cAAc,GAAG,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,kBAAkB,CAAA;YAC5E,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpE,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,QAAQ,EAAE,CAAC,QAAQ,QAAQ,CAAA;YACvD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC5E,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAc,CAAA;IAC7C,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAe,CAAA;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,GAAG,EAAE,CAAI,IAAY,EAAE,EAAE,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,CAAC;IACjD,+DAA+D;IAC/D,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAS,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC;IAC1F,IAAI,EAAE,CAAI,IAAY,EAAE,OAAgB,EAAE,EAAE,EAAE,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;IAC7E,KAAK,EAAE,CAAI,IAAY,EAAE,IAAa,EAAE,EAAE,CAAC,OAAO,CAAI,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;IAC1E,GAAG,EAAE,CAAI,IAAY,EAAE,IAAa,EAAE,EAAE,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;IACtE,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAO,QAAQ,EAAE,IAAI,CAAC;IACvD,MAAM,EAAE,CAAI,IAAY,EAAE,QAAkB,EAAE,EAAE,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC;IACzF,uFAAuF;IACvF,QAAQ,EAAE,CAAI,IAAY,EAAE,IAAY,EAAE,WAAmB,EAAE,EAAE,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC;IACpH,QAAQ,EAAE,KAAK,EAAE,IAAY,EAAE,QAAgB,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,EAAE,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAA;QACvF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAA;QACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;CACF,CAAA"}

package/dist/components/ConfirmIdentityModal.d.ts

@@ -0,0 +1,18 @@
+interface ConfirmIdentityModalProps {
+    title: string;
+    message: string;
+    confirmLabel: string;
+    pendingLabel?: string;
+    danger?: boolean;
+    /**
+     * Runs the action. `currentPassword` is undefined in an SSO session, which is confirmed at the identity
+     * provider instead. A rejection is shown in the dialog, which stays open for another try.
+     */
+    action: (currentPassword: string | undefined) => Promise<unknown>;
+    /** Called when the action succeeded or the user gave up. */
+    onClose: () => void;
+}
+/** Asks the signed-in user to prove it is them (password, or SSO) before a sensitive action goes through. */
+export declare function ConfirmIdentityModal({ title, message, confirmLabel, pendingLabel, danger, action, onClose }: ConfirmIdentityModalProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=ConfirmIdentityModal.d.ts.map

package/dist/components/ConfirmIdentityModal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfirmIdentityModal.d.ts","sourceRoot":"","sources":["../../src/components/ConfirmIdentityModal.tsx"],"names":[],"mappings":"AAKA,UAAU,yBAAyB;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;OAGG;IACH,MAAM,EAAE,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACjE,4DAA4D;IAC5D,OAAO,EAAE,MAAM,IAAI,CAAA;CACpB;AAED,6GAA6G;AAC7G,wBAAgB,oBAAoB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,YAAyB,EAAE,MAAc,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,yBAAyB,+BA4D3J"}

package/dist/components/ConfirmIdentityModal.js

@@ -0,0 +1,30 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useId, useState } from 'react';
+import { ModalFooter, ModalHeader, ModalShell } from './ModalShell';
+import { SsoConfirmationNote, isSsoSession, useSsoConfirmation } from './SsoConfirmation';
+import { Alert } from './ui';
+/** Asks the signed-in user to prove it is them (password, or SSO) before a sensitive action goes through. */
+export function ConfirmIdentityModal({ title, message, confirmLabel, pendingLabel = 'Working…', danger = false, action, onClose }) {
+    const sso = isSsoSession();
+    const ssoConfirmation = useSsoConfirmation();
+    const [currentPassword, setCurrentPassword] = useState('');
+    const [pending, setPending] = useState(false);
+    const [error, setError] = useState('');
+    const titleId = useId();
+    const canConfirm = !pending && (sso || currentPassword.length > 0);
+    async function confirm() {
+        setPending(true);
+        setError('');
+        try {
+            await ssoConfirmation.run(() => action(sso ? undefined : currentPassword));
+            onClose();
+        }
+        catch (err) {
+            setError(err instanceof Error && err.message ? err.message : 'Something went wrong. Try again.');
+            setPending(false);
+        }
+    }
+    return (_jsx(ModalShell, { onClose: pending ? undefined : onClose, children: _jsxs("form", { role: "dialog", "aria-modal": "true", "aria-labelledby": titleId, "aria-busy": pending || undefined, className: "rounded-2xl w-full max-w-md", style: { background: 'var(--m3-surface-container-low)', border: '1px solid var(--m3-outline-variant)' }, onSubmit: (event) => { event.preventDefault(); if (canConfirm)
+                void confirm(); }, children: [_jsx(ModalHeader, { icon: "shield_lock", titleId: titleId, title: title, onClose: pending ? () => { } : onClose }), _jsxs("div", { className: "p-6 space-y-4", children: [_jsx("p", { className: "text-sm", style: { color: 'var(--m3-on-surface-variant)' }, children: message }), error && _jsx(Alert, { tone: "error", children: error }), sso ? _jsx(SsoConfirmationNote, { confirmation: ssoConfirmation }) : (_jsxs("label", { className: "block space-y-2 text-sm", style: { color: 'var(--m3-on-surface-variant)' }, children: [_jsx("span", { children: "Your current password" }), _jsx("input", { type: "password", autoComplete: "current-password", autoFocus: true, value: currentPassword, disabled: pending, onChange: (event) => setCurrentPassword(event.target.value), className: "input-sig w-full" })] }))] }), _jsxs(ModalFooter, { children: [_jsx("button", { type: "button", onClick: onClose, disabled: pending, className: "btn btn-secondary", children: "Cancel" }), _jsx("button", { type: "submit", disabled: !canConfirm, className: `btn ${danger ? 'btn-danger' : 'btn-primary'}`, children: pending ? pendingLabel : confirmLabel })] })] }) }));
+}
+//# sourceMappingURL=ConfirmIdentityModal.js.map

package/dist/components/ConfirmIdentityModal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfirmIdentityModal.js","sourceRoot":"","sources":["../../src/components/ConfirmIdentityModal.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzF,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAiB5B,6GAA6G;AAC7G,MAAM,UAAU,oBAAoB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,GAAG,UAAU,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,EAAE,OAAO,EAA6B;IAC1J,MAAM,GAAG,GAAG,YAAY,EAAE,CAAA;IAC1B,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAA;IAC5C,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,KAAK,EAAE,CAAA;IACvB,MAAM,UAAU,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAElE,KAAK,UAAU,OAAO;QACpB,UAAU,CAAC,IAAI,CAAC,CAAA;QAChB,QAAQ,CAAC,EAAE,CAAC,CAAA;QACZ,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAA;YAC1E,OAAO,EAAE,CAAA;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAA;YAChG,UAAU,CAAC,KAAK,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IAED,OAAO,CACL,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,YAChD,gBACE,IAAI,EAAC,QAAQ,gBACF,MAAM,qBACA,OAAO,eACb,OAAO,IAAI,SAAS,EAC/B,SAAS,EAAC,6BAA6B,EACvC,KAAK,EAAE,EAAE,UAAU,EAAE,iCAAiC,EAAE,MAAM,EAAE,qCAAqC,EAAE,EACvG,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,UAAU;gBAAE,KAAK,OAAO,EAAE,CAAA,CAAC,CAAC,aAE/E,KAAC,WAAW,IAAC,IAAI,EAAC,aAAa,EAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,OAAO,GAAI,EACzG,eAAK,SAAS,EAAC,eAAe,aAC5B,YAAG,SAAS,EAAC,SAAS,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,YAAG,OAAO,GAAK,EACrF,KAAK,IAAI,KAAC,KAAK,IAAC,IAAI,EAAC,OAAO,YAAE,KAAK,GAAS,EAC5C,GAAG,CAAC,CAAC,CAAC,KAAC,mBAAmB,IAAC,YAAY,EAAE,eAAe,GAAI,CAAC,CAAC,CAAC,CAC9D,iBAAO,SAAS,EAAC,yBAAyB,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,aACzF,mDAAkC,EAClC,gBACE,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,kBAAkB,EAC/B,SAAS,QACT,KAAK,EAAE,eAAe,EACtB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3D,SAAS,EAAC,kBAAkB,GAC5B,IACI,CACT,IACG,EACN,MAAC,WAAW,eACV,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAC,mBAAmB,uBAAgB,EACxG,iBAAQ,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,YACnG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,GAC/B,IACG,IACT,GACI,CACd,CAAA;AACH,CAAC"}

package/dist/components/ConfirmModal.d.ts

@@ -0,0 +1,18 @@
+interface ConfirmModalProps {
+    title: string;
+    message: string;
+    confirmLabel?: string | undefined;
+    danger?: boolean | undefined;
+    confirmationText?: string | undefined;
+    /**
+     * While true the modal stays open with both buttons disabled and the confirm button reading
+     * `pendingLabel`, so callers can keep it up until their mutation settles and close it in onSuccess.
+     */
+    pending?: boolean | undefined;
+    pendingLabel?: string | undefined;
+    onConfirm: () => void;
+    onCancel: () => void;
+}
+export declare function ConfirmModal({ title, message, confirmLabel, danger, confirmationText, pending, pendingLabel, onConfirm, onCancel, }: ConfirmModalProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=ConfirmModal.d.ts.map

package/dist/components/ConfirmModal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfirmModal.d.ts","sourceRoot":"","sources":["../../src/components/ConfirmModal.tsx"],"names":[],"mappings":"AAGA,UAAU,iBAAiB;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,SAAS,EAAE,MAAM,IAAI,CAAA;IACrB,QAAQ,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,wBAAgB,YAAY,CAAC,EAC3B,KAAK,EACL,OAAO,EACP,YAAuB,EACvB,MAAa,EACb,gBAAgB,EAChB,OAAe,EACf,YAAyB,EACzB,SAAS,EACT,QAAQ,GACT,EAAE,iBAAiB,+BAqDnB"}

package/dist/components/ConfirmModal.js

@@ -0,0 +1,11 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useId, useState } from 'react';
+import { ModalFooter, ModalHeader, ModalShell } from './ModalShell';
+export function ConfirmModal({ title, message, confirmLabel = 'Delete', danger = true, confirmationText, pending = false, pendingLabel = 'Working…', onConfirm, onCancel, }) {
+    const [typedConfirmation, setTypedConfirmation] = useState('');
+    const titleId = useId();
+    const messageId = useId();
+    const canConfirm = (!confirmationText || typedConfirmation === confirmationText) && !pending;
+    return (_jsx(ModalShell, { onClose: pending ? undefined : onCancel, children: _jsxs("div", { role: "dialog", "aria-modal": "true", "aria-labelledby": titleId, "aria-describedby": messageId, "aria-busy": pending || undefined, className: "rounded-2xl w-full max-w-sm", style: { background: 'var(--m3-surface-container-low)', border: '1px solid var(--m3-outline-variant)' }, children: [_jsx(ModalHeader, { icon: danger ? 'warning' : 'help', titleId: titleId, title: title, onClose: pending ? () => { } : onCancel }), _jsxs("div", { className: "p-6 space-y-4", children: [_jsx("p", { id: messageId, className: "text-sm", style: { color: 'var(--m3-on-surface-variant)' }, children: message }), confirmationText && (_jsxs("label", { className: "block space-y-2 text-sm", style: { color: 'var(--m3-on-surface-variant)' }, children: [_jsxs("span", { children: ["Type ", _jsx("strong", { className: "font-mono", children: confirmationText }), " to confirm:"] }), _jsx("input", { autoFocus: true, value: typedConfirmation, disabled: pending, autoComplete: "off", spellCheck: false, onChange: (event) => setTypedConfirmation(event.target.value), className: "input-m3" })] }))] }), _jsxs(ModalFooter, { children: [_jsx("button", { type: "button", onClick: onCancel, disabled: pending, className: "btn btn-secondary", children: "Cancel" }), _jsx("button", { type: "button", onClick: onConfirm, disabled: !canConfirm, className: `btn ${danger ? 'btn-danger' : 'btn-primary'}`, children: pending ? pendingLabel : confirmLabel })] })] }) }));
+}
+//# sourceMappingURL=ConfirmModal.js.map

package/dist/components/ConfirmModal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfirmModal.js","sourceRoot":"","sources":["../../src/components/ConfirmModal.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAkBnE,MAAM,UAAU,YAAY,CAAC,EAC3B,KAAK,EACL,OAAO,EACP,YAAY,GAAG,QAAQ,EACvB,MAAM,GAAG,IAAI,EACb,gBAAgB,EAChB,OAAO,GAAG,KAAK,EACf,YAAY,GAAG,UAAU,EACzB,SAAS,EACT,QAAQ,GACU;IAClB,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC9D,MAAM,OAAO,GAAG,KAAK,EAAE,CAAA;IACvB,MAAM,SAAS,GAAG,KAAK,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,CAAC,CAAC,gBAAgB,IAAI,iBAAiB,KAAK,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAA;IAE5F,OAAO,CACL,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,YACjD,eACE,IAAI,EAAC,QAAQ,gBACF,MAAM,qBACA,OAAO,sBACN,SAAS,eAChB,OAAO,IAAI,SAAS,EAC/B,SAAS,EAAC,6BAA6B,EACvC,KAAK,EAAE,EAAE,UAAU,EAAE,iCAAiC,EAAE,MAAM,EAAE,qCAAqC,EAAE,aAEvG,KAAC,WAAW,IAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAI,EAC1H,eAAK,SAAS,EAAC,eAAe,aAC9B,YAAG,EAAE,EAAE,SAAS,EAAE,SAAS,EAAC,SAAS,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,YACnF,OAAO,GACN,EACH,gBAAgB,IAAI,CACnB,iBAAO,SAAS,EAAC,yBAAyB,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,aACzF,oCAAW,iBAAQ,SAAS,EAAC,WAAW,YAAE,gBAAgB,GAAU,oBAAmB,EACvF,gBACE,SAAS,QACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,OAAO,EACjB,YAAY,EAAC,KAAK,EAClB,UAAU,EAAE,KAAK,EACjB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAC7D,SAAS,EAAC,UAAU,GACpB,IACI,CACT,IACK,EACN,MAAC,WAAW,eACV,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAC,mBAAmB,uBAEhF,EACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,SAAS,EAClB,QAAQ,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,OAAO,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,YAExD,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,GAC/B,IACG,IACV,GACK,CACd,CAAA;AACH,CAAC"}

package/dist/components/CopyButton.d.ts

@@ -0,0 +1,11 @@
+interface CopyButtonProps {
+    value: string;
+    label?: string | undefined;
+    copiedLabel?: string | undefined;
+    failedLabel?: string | undefined;
+    /** Show only the icon; the label still names the button for assistive technology. */
+    iconOnly?: boolean | undefined;
+}
+export declare function CopyButton({ value, label, copiedLabel, failedLabel, iconOnly }: CopyButtonProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=CopyButton.d.ts.map

package/dist/components/CopyButton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CopyButton.d.ts","sourceRoot":"","sources":["../../src/components/CopyButton.tsx"],"names":[],"mappings":"AAEA,UAAU,eAAe;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,qFAAqF;IACrF,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC/B;AAwBD,wBAAgB,UAAU,CAAC,EAAE,KAAK,EAAE,KAAc,EAAE,WAAuB,EAAE,WAA2B,EAAE,QAAgB,EAAE,EAAE,eAAe,+BAqC5I"}

package/dist/components/CopyButton.js

@@ -0,0 +1,44 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useRef, useState } from 'react';
+/** Clipboard API first; outside a secure context (plain-HTTP deployments) fall back to a hidden textarea. */
+async function writeClipboard(value) {
+    if (navigator.clipboard?.writeText) {
+        await navigator.clipboard.writeText(value);
+        return;
+    }
+    const textarea = document.createElement('textarea');
+    textarea.value = value;
+    textarea.setAttribute('readonly', '');
+    textarea.style.position = 'fixed';
+    textarea.style.opacity = '0';
+    document.body.appendChild(textarea);
+    textarea.select();
+    try {
+        if (!document.execCommand('copy'))
+            throw new Error('Copy command was rejected');
+    }
+    finally {
+        textarea.remove();
+    }
+}
+export function CopyButton({ value, label = 'Copy', copiedLabel = 'Copied!', failedLabel = 'Copy failed', iconOnly = false }) {
+    const [state, setState] = useState('idle');
+    const timer = useRef(undefined);
+    useEffect(() => () => clearTimeout(timer.current), []);
+    async function copy() {
+        let next;
+        try {
+            await writeClipboard(value);
+            next = 'copied';
+        }
+        catch {
+            next = 'failed';
+        }
+        setState(next);
+        clearTimeout(timer.current);
+        timer.current = setTimeout(() => setState('idle'), 2000);
+    }
+    const text = state === 'copied' ? copiedLabel : state === 'failed' ? failedLabel : label;
+    return (_jsxs("button", { type: "button", onClick: () => void copy(), "aria-label": text, title: iconOnly ? text : undefined, className: "copy-feedback-button flex items-center gap-1.5 text-xs px-3 py-2 rounded-lg font-semibold", "data-copied": state === 'copied' || undefined, "data-failed": state === 'failed' || undefined, children: [_jsx("span", { className: "material-symbols-outlined", "aria-hidden": "true", style: { fontSize: '14px' }, children: state === 'copied' ? 'check' : state === 'failed' ? 'error' : 'content_copy' }), !iconOnly && _jsx("span", { "aria-live": "polite", children: text })] }));
+}
+//# sourceMappingURL=CopyButton.js.map

package/dist/components/CopyButton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CopyButton.js","sourceRoot":"","sources":["../../src/components/CopyButton.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAanD,6GAA6G;AAC7G,KAAK,UAAU,cAAc,CAAC,KAAa;IACzC,IAAI,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC1C,OAAM;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IACnD,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAA;IACtB,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IACrC,QAAQ,CAAC,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAA;IACjC,QAAQ,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAA;IAC5B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IACjF,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,MAAM,EAAE,CAAA;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,WAAW,GAAG,SAAS,EAAE,WAAW,GAAG,aAAa,EAAE,QAAQ,GAAG,KAAK,EAAmB;IAC3I,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAY,MAAM,CAAC,CAAA;IACrD,MAAM,KAAK,GAAG,MAAM,CAA4C,SAAS,CAAC,CAAA;IAE1E,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;IAEtD,KAAK,UAAU,IAAI;QACjB,IAAI,IAAe,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,KAAK,CAAC,CAAA;YAC3B,IAAI,GAAG,QAAQ,CAAA;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,QAAQ,CAAA;QACjB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC3B,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAA;IAExF,OAAO,CACL,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,gBACd,IAAI,EAChB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAClC,SAAS,EAAC,2FAA2F,iBACxF,KAAK,KAAK,QAAQ,IAAI,SAAS,iBAC/B,KAAK,KAAK,QAAQ,IAAI,SAAS,aAE5C,eAAM,SAAS,EAAC,2BAA2B,iBAAa,MAAM,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,YACvF,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,GACxE,EACN,CAAC,QAAQ,IAAI,4BAAgB,QAAQ,YAAE,IAAI,GAAQ,IAC7C,CACV,CAAA;AACH,CAAC"}

package/dist/components/CredentialSection.d.ts

@@ -0,0 +1,38 @@
+import type { ReactNode } from 'react';
+import type { VaultRef } from '@better-forge/contracts';
+import { type VaultPickerProps } from './formParts';
+interface CredentialSectionProps extends VaultPickerProps {
+    vault: VaultRef | undefined;
+    onVaultChange: (v: VaultRef | undefined) => void;
+    mappingFields: {
+        key: string;
+        label: string;
+    }[];
+    /** Optional note shown at the top of the vault/direct section */
+    note?: string;
+    /** What a `value` secret is used as; defaults to the password / client secret. */
+    valueLabel?: string;
+    /** Replaces the note shown for a User / Password secret when its username and password are not a username and password. */
+    userpassNote?: string;
+    /** Restricts the secret dropdown to these types; every type is offered when omitted. */
+    secretTypes?: string[];
+    /** Direct-input fields — rendered only when not using vault */
+    children: ReactNode;
+}
+/**
+ * Wraps a set of credential fields with a Direct / Vault source toggle.
+ * In direct mode: shows a warning banner + the credential inputs (children).
+ * In vault mode: shows vault → secret dropdowns + JSON field mapping if needed.
+ */
+export declare function CredentialSection({ vault, onVaultChange, vaults, secretsByVault, onLoadSecrets, mappingFields, note, valueLabel, userpassNote, secretTypes, children, }: CredentialSectionProps): import("react").JSX.Element;
+interface ConnectionStringSectionProps extends VaultPickerProps {
+    vault: VaultRef | undefined;
+    onVaultChange: (v: VaultRef | undefined) => void;
+}
+/**
+ * Vault-only picker for SQL database connection strings.
+ * Direct input is intentionally not available — a connection string contains credentials.
+ */
+export declare function ConnectionStringSection({ vault, onVaultChange, vaults, secretsByVault, onLoadSecrets, }: ConnectionStringSectionProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=CredentialSection.d.ts.map

package/dist/components/CredentialSection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialSection.d.ts","sourceRoot":"","sources":["../../src/components/CredentialSection.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEhE,UAAU,sBAAuB,SAAQ,gBAAgB;IACvD,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC3B,aAAa,EAAE,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,KAAK,IAAI,CAAA;IAChD,aAAa,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC/C,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2HAA2H;IAC3H,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,+DAA+D;IAC/D,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,cAAc,EAAE,aAAa,EACrC,aAAa,EAAE,IAAI,EAAE,UAAuC,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,GAClG,EAAE,sBAAsB,+BA8IxB;AAED,UAAU,4BAA6B,SAAQ,gBAAgB;IAC7D,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC3B,aAAa,EAAE,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,KAAK,IAAI,CAAA;CACjD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,EACtC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,GAC5D,EAAE,4BAA4B,+BAqF9B"}

package/dist/components/CredentialSection.js

@@ -0,0 +1,69 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { Field, Note } from './formParts';
+/**
+ * Wraps a set of credential fields with a Direct / Vault source toggle.
+ * In direct mode: shows a warning banner + the credential inputs (children).
+ * In vault mode: shows vault → secret dropdowns + JSON field mapping if needed.
+ */
+export function CredentialSection({ vault, onVaultChange, vaults, secretsByVault, onLoadSecrets, mappingFields, note, valueLabel = 'password / client secret', userpassNote, secretTypes, children, }) {
+    const isVault = !!vault;
+    const selectedVaultId = vault?.vaultId;
+    const selectedSecretId = vault?.secretId;
+    const fieldMapping = vault?.fieldMapping ?? {};
+    const secrets = selectedVaultId ? (secretsByVault[selectedVaultId]?.filter((s) => !secretTypes || secretTypes.includes(s.type)) ?? null) : null;
+    const selectedSecret = secrets?.find((s) => s.id === selectedSecretId);
+    return (_jsxs("div", { className: "space-y-3", children: [note && (_jsx("p", { className: "text-xs", style: { color: 'var(--m3-secondary)' }, children: note })), _jsx("div", { className: "flex rounded-lg overflow-hidden", style: { border: '1px solid var(--m3-outline-variant)', width: 'fit-content' }, children: ['direct', 'vault'].map((src) => {
+                    const active = src === 'vault' ? isVault : !isVault;
+                    return (_jsx("button", { type: "button", onClick: () => {
+                            if (src === 'direct') {
+                                onVaultChange(undefined);
+                            }
+                            else {
+                                const first = vaults[0];
+                                if (first)
+                                    onLoadSecrets(first.id);
+                                onVaultChange({ vaultId: first?.id ?? 0, secretId: 0, fieldMapping: {} });
+                            }
+                        }, className: `px-4 py-1.5 text-xs font-medium transition-all ${active ? 'selection-active' : ''}`, style: {
+                            background: active ? 'var(--m3-primary-fixed)' : 'transparent',
+                            color: active ? 'var(--m3-primary)' : 'var(--m3-secondary)',
+                        }, children: src === 'direct' ? 'Direct input' : 'From Vault' }, src));
+                }) }), !isVault && (_jsxs(_Fragment, { children: [_jsx(Note, { tone: "warning", children: "For security, store credentials in Vault rather than entering them directly here." }), children] })), isVault && (_jsxs("div", { className: "space-y-3", children: [_jsxs("div", { className: "grid grid-cols-2 gap-3", children: [_jsx(Field, { label: "Vault", children: _jsxs("select", { className: "input-sig", value: selectedVaultId || '', onChange: (e) => {
+                                        const id = Number(e.target.value);
+                                        onLoadSecrets(id);
+                                        onVaultChange({ vaultId: id, secretId: 0, fieldMapping: {} });
+                                    }, children: [_jsx("option", { value: "", children: "\u2014 select vault \u2014" }), vaults.map((v) => _jsx("option", { value: v.id, children: v.name }, v.id))] }) }), _jsx(Field, { label: "Secret", children: _jsxs("select", { className: "input-sig", value: selectedSecretId || '', disabled: !selectedVaultId, onChange: (e) => {
+                                        onVaultChange({ vaultId: selectedVaultId, secretId: Number(e.target.value), fieldMapping: {} });
+                                    }, children: [_jsx("option", { value: "", children: "\u2014 select secret \u2014" }), (secrets ?? []).map((s) => (_jsxs("option", { value: s.id, children: [s.name, " (", s.type, ")"] }, s.id)))] }) })] }), selectedSecret?.type === 'userpass' && (_jsx("p", { className: "text-xs rounded-lg px-3 py-2", style: { background: 'var(--m3-surface-container)', color: 'var(--m3-secondary)' }, children: userpassNote ?? _jsxs(_Fragment, { children: ["Auto-mapped: ", _jsx("strong", { children: "username" }), " \u2192 username field, ", _jsx("strong", { children: "password" }), " \u2192 password field."] }) })), selectedSecret?.type === 'value' && (_jsxs("p", { className: "text-xs rounded-lg px-3 py-2", style: { background: 'var(--m3-surface-container)', color: 'var(--m3-secondary)' }, children: ["The secret value will be used as the ", _jsx("strong", { children: valueLabel }), "."] })), selectedSecret?.type === 'json' && selectedSecretId && (_jsxs("div", { children: [_jsx("p", { className: "font-mono text-xs uppercase tracking-wider mb-1", style: { color: 'var(--m3-secondary)' }, children: "JSON Field Mapping" }), _jsx("p", { className: "text-xs mb-3", style: { color: 'var(--m3-secondary)' }, children: "For each credential, enter the key name from the JSON secret." }), _jsx("div", { className: "space-y-2", children: mappingFields.map(({ key, label }) => (_jsxs("div", { className: "grid items-center gap-3", style: { gridTemplateColumns: '110px 1fr' }, children: [_jsx("span", { className: "text-xs font-medium truncate", style: { color: 'var(--m3-on-surface-variant)' }, children: label }), _jsx("input", { className: "input-sig text-xs", placeholder: `JSON key (e.g. "${key}")`, value: fieldMapping[key] ?? '', onChange: (e) => {
+                                                onVaultChange({
+                                                    vaultId: selectedVaultId,
+                                                    secretId: selectedSecretId,
+                                                    fieldMapping: { ...fieldMapping, [key]: e.target.value },
+                                                });
+                                            } })] }, key))) })] })), vaults.length === 0 && (_jsx("p", { className: "text-xs", style: { color: 'var(--m3-secondary)' }, children: "No vaults found. Create one in the Vault section first." }))] }))] }));
+}
+/**
+ * Vault-only picker for SQL database connection strings.
+ * Direct input is intentionally not available — a connection string contains credentials.
+ */
+export function ConnectionStringSection({ vault, onVaultChange, vaults, secretsByVault, onLoadSecrets, }) {
+    const selectedVaultId = vault?.vaultId;
+    const selectedSecretId = vault?.secretId;
+    const fieldMapping = vault?.fieldMapping ?? {};
+    const secrets = selectedVaultId ? (secretsByVault[selectedVaultId] ?? null) : null;
+    const selectedSecret = secrets?.find((s) => s.id === selectedSecretId);
+    return (_jsxs("div", { className: "space-y-3", children: [_jsx(Note, { tone: "info", children: "Connection strings contain credentials and must always be stored in Vault." }), _jsxs("div", { className: "grid grid-cols-2 gap-3", children: [_jsx(Field, { label: "Vault", children: _jsxs("select", { className: "input-sig", value: selectedVaultId || '', onChange: (e) => {
+                                const id = Number(e.target.value);
+                                onLoadSecrets(id);
+                                onVaultChange({ vaultId: id, secretId: 0, fieldMapping: {} });
+                            }, children: [_jsx("option", { value: "", children: "\u2014 select vault \u2014" }), vaults.map((v) => _jsx("option", { value: v.id, children: v.name }, v.id))] }) }), _jsx(Field, { label: "Secret", children: _jsxs("select", { className: "input-sig", value: selectedSecretId || '', disabled: !selectedVaultId, onChange: (e) => {
+                                onVaultChange({ vaultId: selectedVaultId, secretId: Number(e.target.value), fieldMapping: {} });
+                            }, children: [_jsx("option", { value: "", children: "\u2014 select secret \u2014" }), (secrets ?? []).map((s) => (_jsxs("option", { value: s.id, children: [s.name, " (", s.type, ")"] }, s.id)))] }) })] }), selectedSecret?.type === 'value' && (_jsx("p", { className: "text-xs rounded-lg px-3 py-2", style: { background: 'var(--m3-surface-container)', color: 'var(--m3-secondary)' }, children: "The secret value will be used as the full connection string." })), selectedSecret?.type === 'userpass' && (_jsxs(Note, { tone: "warning", children: ["A ", _jsx("strong", { children: "userpass" }), " secret cannot be used as a connection string. Use a ", _jsx("strong", { children: "value" }), " or ", _jsx("strong", { children: "json" }), " secret instead."] })), selectedSecret?.type === 'json' && selectedSecretId && (_jsxs("div", { children: [_jsx("p", { className: "font-mono text-xs uppercase tracking-wider mb-1", style: { color: 'var(--m3-secondary)' }, children: "JSON Field Mapping" }), _jsx("p", { className: "text-xs mb-3", style: { color: 'var(--m3-secondary)' }, children: "Enter the JSON key that holds the connection string." }), _jsxs("div", { className: "grid items-center gap-3", style: { gridTemplateColumns: '130px 1fr' }, children: [_jsx("span", { className: "text-xs font-medium", style: { color: 'var(--m3-on-surface-variant)' }, children: "Connection String" }), _jsx("input", { className: "input-sig text-xs", placeholder: 'JSON key (e.g. "connectionString")', value: fieldMapping['connectionString'] ?? '', onChange: (e) => {
+                                    onVaultChange({
+                                        vaultId: selectedVaultId,
+                                        secretId: selectedSecretId,
+                                        fieldMapping: { connectionString: e.target.value },
+                                    });
+                                } })] })] })), vaults.length === 0 && (_jsx("p", { className: "text-xs", style: { color: 'var(--m3-secondary)' }, children: "No vaults found. Create one in the Vault section first." }))] }));
+}
+//# sourceMappingURL=CredentialSection.js.map

package/dist/components/CredentialSection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialSection.js","sourceRoot":"","sources":["../../src/components/CredentialSection.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAyB,MAAM,aAAa,CAAA;AAkBhE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,cAAc,EAAE,aAAa,EACrC,aAAa,EAAE,IAAI,EAAE,UAAU,GAAG,0BAA0B,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,GAC1E;IACvB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAA;IAEvB,MAAM,eAAe,GAAI,KAAK,EAAE,OAAO,CAAA;IACvC,MAAM,gBAAgB,GAAG,KAAK,EAAE,QAAQ,CAAA;IACxC,MAAM,YAAY,GAAO,KAAK,EAAE,YAAY,IAAI,EAAE,CAAA;IAElD,MAAM,OAAO,GAAU,eAAe,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtJ,MAAM,cAAc,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAA;IAEtE,OAAO,CACL,eAAK,SAAS,EAAC,WAAW,aACvB,IAAI,IAAI,CACP,YAAG,SAAS,EAAC,SAAS,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,YAAG,IAAI,GAAK,CAC3E,EAGD,cAAK,SAAS,EAAC,iCAAiC,EAAC,KAAK,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE,KAAK,EAAE,aAAa,EAAE,YAC3H,CAAC,QAAQ,EAAE,OAAO,CAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;oBAC1C,MAAM,MAAM,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;oBACnD,OAAO,CACL,iBAEE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;4BACZ,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gCACrB,aAAa,CAAC,SAAS,CAAC,CAAA;4BAC1B,CAAC;iCAAM,CAAC;gCACN,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;gCACvB,IAAI,KAAK;oCAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gCAClC,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;4BAC3E,CAAC;wBACH,CAAC,EACD,SAAS,EAAE,kDAAkD,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,EAC/F,KAAK,EAAE;4BACL,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,aAAa;4BAC9D,KAAK,EAAO,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,qBAAqB;yBACjE,YAEA,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,IAjB5C,GAAG,CAkBD,CACV,CAAA;gBACH,CAAC,CAAC,GACE,EAGL,CAAC,OAAO,IAAI,CACX,8BACE,KAAC,IAAI,IAAC,IAAI,EAAC,SAAS,kGAAyF,EAC5G,QAAQ,IACR,CACJ,EAGA,OAAO,IAAI,CACV,eAAK,SAAS,EAAC,WAAW,aACxB,eAAK,SAAS,EAAC,wBAAwB,aACrC,KAAC,KAAK,IAAC,KAAK,EAAC,OAAO,YAClB,kBACE,SAAS,EAAC,WAAW,EACrB,KAAK,EAAE,eAAe,IAAI,EAAE,EAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;wCACd,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;wCACjC,aAAa,CAAC,EAAE,CAAC,CAAA;wCACjB,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;oCAC/D,CAAC,aAED,iBAAQ,KAAK,EAAC,EAAE,2CAA0B,EACzC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAmB,KAAK,EAAE,CAAC,CAAC,EAAE,YAAG,CAAC,CAAC,IAAI,IAA1B,CAAC,CAAC,EAAE,CAAgC,CAAC,IAC9D,GACH,EACR,KAAC,KAAK,IAAC,KAAK,EAAC,QAAQ,YACnB,kBACE,SAAS,EAAC,WAAW,EACrB,KAAK,EAAE,gBAAgB,IAAI,EAAE,EAC7B,QAAQ,EAAE,CAAC,eAAe,EAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;wCACd,aAAa,CAAC,EAAE,OAAO,EAAE,eAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;oCAClG,CAAC,aAED,iBAAQ,KAAK,EAAC,EAAE,4CAA2B,EAC1C,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC1B,kBAAmB,KAAK,EAAE,CAAC,CAAC,EAAE,aAAG,CAAC,CAAC,IAAI,QAAI,CAAC,CAAC,IAAI,UAApC,CAAC,CAAC,EAAE,CAA2C,CAC7D,CAAC,IACK,GACH,IACJ,EAGL,cAAc,EAAE,IAAI,KAAK,UAAU,IAAI,CACtC,YAAG,SAAS,EAAC,8BAA8B,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE,KAAK,EAAE,qBAAqB,EAAE,YAC3H,YAAY,IAAI,+CAAe,wCAAyB,8BAAmB,wCAAyB,+BAAqB,GACxH,CACL,EAGA,cAAc,EAAE,IAAI,KAAK,OAAO,IAAI,CACnC,aAAG,SAAS,EAAC,8BAA8B,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE,KAAK,EAAE,qBAAqB,EAAE,sDACvF,2BAAS,UAAU,GAAU,SAChE,CACL,EAGA,cAAc,EAAE,IAAI,KAAK,MAAM,IAAI,gBAAgB,IAAI,CACtD,0BACE,YAAG,SAAS,EAAC,iDAAiD,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,mCAElG,EACJ,YAAG,SAAS,EAAC,cAAc,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,8EAE/D,EACJ,cAAK,SAAS,EAAC,WAAW,YACvB,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CACrC,eAAe,SAAS,EAAC,yBAAyB,EAAC,KAAK,EAAE,EAAE,mBAAmB,EAAE,WAAW,EAAE,aAC5F,eAAM,SAAS,EAAC,8BAA8B,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,YAAG,KAAK,GAAQ,EAC/G,gBACE,SAAS,EAAC,mBAAmB,EAC7B,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,EAC9B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;gDACd,aAAa,CAAC;oDACZ,OAAO,EAAE,eAAgB;oDACzB,QAAQ,EAAE,gBAAgB;oDAC1B,YAAY,EAAE,EAAE,GAAG,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE;iDACzD,CAAC,CAAA;4CACJ,CAAC,GACD,KAbM,GAAG,CAcP,CACP,CAAC,GACE,IACF,CACP,EAEA,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CACtB,YAAG,SAAS,EAAC,SAAS,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,wEAE1D,CACL,IACG,CACP,IACG,CACP,CAAA;AACH,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACtC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,GAC9B;IAC7B,MAAM,eAAe,GAAI,KAAK,EAAE,OAAO,CAAA;IACvC,MAAM,gBAAgB,GAAG,KAAK,EAAE,QAAQ,CAAA;IACxC,MAAM,YAAY,GAAO,KAAK,EAAE,YAAY,IAAI,EAAE,CAAA;IAElD,MAAM,OAAO,GAAU,eAAe,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzF,MAAM,cAAc,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAA;IAEtE,OAAO,CACL,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,IAAI,IAAC,IAAI,EAAC,MAAM,2FAAkF,EAEnG,eAAK,SAAS,EAAC,wBAAwB,aACrC,KAAC,KAAK,IAAC,KAAK,EAAC,OAAO,YAClB,kBACE,SAAS,EAAC,WAAW,EACrB,KAAK,EAAE,eAAe,IAAI,EAAE,EAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;gCACd,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gCACjC,aAAa,CAAC,EAAE,CAAC,CAAA;gCACjB,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;4BAC/D,CAAC,aAED,iBAAQ,KAAK,EAAC,EAAE,2CAA0B,EACzC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAmB,KAAK,EAAE,CAAC,CAAC,EAAE,YAAG,CAAC,CAAC,IAAI,IAA1B,CAAC,CAAC,EAAE,CAAgC,CAAC,IAC9D,GACH,EACR,KAAC,KAAK,IAAC,KAAK,EAAC,QAAQ,YACnB,kBACE,SAAS,EAAC,WAAW,EACrB,KAAK,EAAE,gBAAgB,IAAI,EAAE,EAC7B,QAAQ,EAAE,CAAC,eAAe,EAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;gCACd,aAAa,CAAC,EAAE,OAAO,EAAE,eAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;4BAClG,CAAC,aAED,iBAAQ,KAAK,EAAC,EAAE,4CAA2B,EAC1C,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC1B,kBAAmB,KAAK,EAAE,CAAC,CAAC,EAAE,aAAG,CAAC,CAAC,IAAI,QAAI,CAAC,CAAC,IAAI,UAApC,CAAC,CAAC,EAAE,CAA2C,CAC7D,CAAC,IACK,GACH,IACJ,EAEL,cAAc,EAAE,IAAI,KAAK,OAAO,IAAI,CACnC,YAAG,SAAS,EAAC,8BAA8B,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE,KAAK,EAAE,qBAAqB,EAAE,6EAE1H,CACL,EAEA,cAAc,EAAE,IAAI,KAAK,UAAU,IAAI,CACtC,MAAC,IAAI,IAAC,IAAI,EAAC,SAAS,mBAChB,wCAAyB,2DAAqD,qCAAsB,UAAI,oCAAqB,wBAC1H,CACR,EAEA,cAAc,EAAE,IAAI,KAAK,MAAM,IAAI,gBAAgB,IAAI,CACtD,0BACE,YAAG,SAAS,EAAC,iDAAiD,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,mCAAwB,EAC9H,YAAG,SAAS,EAAC,cAAc,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,qEAA0D,EAC7H,eAAK,SAAS,EAAC,yBAAyB,EAAC,KAAK,EAAE,EAAE,mBAAmB,EAAE,WAAW,EAAE,aAClF,eAAM,SAAS,EAAC,qBAAqB,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,kCAA0B,EAChH,gBACE,SAAS,EAAC,mBAAmB,EAC7B,WAAW,EAAC,oCAAoC,EAChD,KAAK,EAAE,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAC7C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;oCACd,aAAa,CAAC;wCACZ,OAAO,EAAE,eAAgB;wCACzB,QAAQ,EAAE,gBAAgB;wCAC1B,YAAY,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE;qCACnD,CAAC,CAAA;gCACJ,CAAC,GACD,IACE,IACF,CACP,EAEA,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CACtB,YAAG,SAAS,EAAC,SAAS,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,wEAE1D,CACL,IACG,CACP,CAAA;AACH,CAAC"}

package/dist/components/ErrorBoundary.d.ts

@@ -0,0 +1,18 @@
+import { Component, type ErrorInfo, type ReactNode } from 'react';
+/** A lazy chunk that failed to load: after a deploy the old file names are gone, so the page needs a reload. */
+export declare function isChunkLoadError(error: unknown): boolean;
+interface Props {
+    children: ReactNode;
+}
+interface State {
+    error: unknown;
+}
+/** Catches errors thrown while rendering (and by lazy imports) so the screen is not left blank; offers a reload. */
+export declare class ErrorBoundary extends Component<Props, State> {
+    state: State;
+    static getDerivedStateFromError(error: unknown): State;
+    componentDidCatch(error: unknown, info: ErrorInfo): void;
+    render(): ReactNode;
+}
+export {};
+//# sourceMappingURL=ErrorBoundary.d.ts.map

package/dist/components/ErrorBoundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorBoundary.d.ts","sourceRoot":"","sources":["../../src/components/ErrorBoundary.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAEjE,gHAAgH;AAChH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGxD;AAED,UAAU,KAAK;IACb,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED,UAAU,KAAK;IACb,KAAK,EAAE,OAAO,CAAA;CACf;AAED,oHAAoH;AACpH,qBAAa,aAAc,SAAQ,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC;IAC/C,KAAK,EAAE,KAAK,CAAkB;IAEvC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK;IAI7C,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI;IAIxD,MAAM,IAAI,SAAS;CAkB7B"}

package/dist/components/ErrorBoundary.js

@@ -0,0 +1,25 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Component } from 'react';
+/** A lazy chunk that failed to load: after a deploy the old file names are gone, so the page needs a reload. */
+export function isChunkLoadError(error) {
+    const message = error instanceof Error ? `${error.name} ${error.message}` : String(error);
+    return /ChunkLoadError|Failed to fetch dynamically imported module|error loading dynamically imported module|Importing a module script failed/i.test(message);
+}
+/** Catches errors thrown while rendering (and by lazy imports) so the screen is not left blank; offers a reload. */
+export class ErrorBoundary extends Component {
+    state = { error: null };
+    static getDerivedStateFromError(error) {
+        return { error: error ?? new Error('Unknown error') };
+    }
+    componentDidCatch(error, info) {
+        console.error(error, info.componentStack);
+    }
+    render() {
+        const { error } = this.state;
+        if (!error)
+            return this.props.children;
+        const stale = isChunkLoadError(error);
+        return (_jsxs("div", { role: "alert", className: "min-h-screen flex flex-col items-center justify-center gap-3 px-6 text-center", style: { background: 'var(--m3-surface)', color: 'var(--m3-on-surface)' }, children: [_jsx("span", { className: "material-symbols-outlined", "aria-hidden": "true", style: { fontSize: '32px', color: 'var(--m3-down)' }, children: "error" }), _jsx("h1", { className: "font-headline text-lg font-bold", children: stale ? 'A new version is available' : 'Something went wrong' }), _jsx("p", { className: "text-sm max-w-md", style: { color: 'var(--m3-secondary)' }, children: stale ? 'This page was updated while it was open. Reload to continue.' : 'The page could not be displayed. Reloading usually fixes it.' }), _jsxs("button", { type: "button", onClick: () => window.location.reload(), className: "btn btn-secondary btn-sm", children: [_jsx("span", { className: "material-symbols-outlined", "aria-hidden": "true", children: "refresh" }), "Reload"] })] }));
+    }
+}
+//# sourceMappingURL=ErrorBoundary.js.map

package/dist/components/ErrorBoundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorBoundary.js","sourceRoot":"","sources":["../../src/components/ErrorBoundary.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAkC,MAAM,OAAO,CAAA;AAEjE,gHAAgH;AAChH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACzF,OAAO,wIAAwI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAC/J,CAAC;AAUD,oHAAoH;AACpH,MAAM,OAAO,aAAc,SAAQ,SAAuB;IAC/C,KAAK,GAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAEvC,MAAM,CAAC,wBAAwB,CAAC,KAAc;QAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,eAAe,CAAC,EAAE,CAAA;IACvD,CAAC;IAEQ,iBAAiB,CAAC,KAAc,EAAE,IAAe;QACxD,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;IAC3C,CAAC;IAEQ,MAAM;QACb,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAA;QAC5B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAA;QACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;QACrC,OAAO,CACL,eAAK,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,+EAA+E,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,sBAAsB,EAAE,aACnL,eAAM,SAAS,EAAC,2BAA2B,iBAAa,MAAM,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,sBAAc,EACjI,aAAI,SAAS,EAAC,iCAAiC,YAAE,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,sBAAsB,GAAM,EACpH,YAAG,SAAS,EAAC,kBAAkB,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,YACpE,KAAK,CAAC,CAAC,CAAC,8DAA8D,CAAC,CAAC,CAAC,8DAA8D,GACtI,EACJ,kBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAC,0BAA0B,aACjG,eAAM,SAAS,EAAC,2BAA2B,iBAAa,MAAM,wBAAe,cAEtE,IACL,CACP,CAAA;IACH,CAAC;CACF"}