@better-forge/ui 0.0.0-stage → 0.1.0

package/dist/components/ModalShell.d.ts

@@ -0,0 +1,58 @@
+import { type ReactNode } from 'react';
+export declare const MODAL_Z_INDEX = 9999;
+export declare const MODAL_BACKDROP = "rgba(0,0,0,0.55)";
+interface ModalShellProps {
+    children: ReactNode;
+    /** `top` for tall forms that scroll with the page; `center` for short dialogs. */
+    align?: 'center' | 'top' | undefined;
+    /** Called when Escape is pressed while this is the topmost modal. Omit to ignore Escape. */
+    onClose?: (() => void) | undefined;
+    /**
+     * Accessible name. When given (or `labelledBy`), the shell itself carries role="dialog" aria-modal —
+     * use it when the child panel does not declare its own dialog role.
+     */
+    label?: string | undefined;
+    labelledBy?: string | undefined;
+}
+/**
+ * The single backdrop every admin modal renders through, so stacking, dimming and dismissal stay consistent:
+ * portalled to <body>, z-index 9999, a 55% black scrollable overlay, and a backdrop click never dismisses —
+ * a stray click must not throw away a half-filled form. Dialogs close from their own Cancel / × controls and,
+ * when `onClose` is passed, from Escape. Focus moves into the modal on open (unless a child already took it
+ * with autoFocus), Tab cycles inside it, and focus returns to the opener on close.
+ */
+export declare function ModalShell({ children, align, onClose, label, labelledBy }: ModalShellProps): import("react").ReactPortal;
+interface ModalHeaderProps {
+    /** Material Symbols name shown before the title, so every dialog header reads the same way. */
+    icon: string;
+    title: ReactNode;
+    /** Id for the heading, when the dialog is labelled by it via `labelledBy`. */
+    titleId?: string | undefined;
+    onClose: () => void;
+}
+/** The shared dialog header: icon, title and a × close button above a divider. */
+export declare function ModalHeader({ icon, title, titleId, onClose }: ModalHeaderProps): import("react").JSX.Element;
+interface ModalProps {
+    title: string;
+    /** Material Symbols name for the header icon. */
+    icon: string;
+    onClose: () => void;
+    children: ReactNode;
+    /** Skip the padded body so the content can bring its own, with a `ModalFooter` as the last thing in the dialog. */
+    flush?: boolean;
+}
+/** A titled panel with a close button inside the shared shell, for simple forms. Escape closes it. */
+export declare function Modal({ title, icon, onClose, children, flush }: ModalProps): import("react").JSX.Element;
+interface ModalFooterProps {
+    /** Secondary tools on the left (YAML, Test, …); kept apart from the buttons that close or save. */
+    start?: ReactNode;
+    /** Cancel and the main action, on the right. */
+    children: ReactNode;
+}
+/**
+ * The action row of a form dialog, stuck to the bottom of the screen while the form scrolls, so the main
+ * action never hides below the fold. Put it last inside the `<form>`, after the padded body.
+ */
+export declare function ModalFooter({ start, children }: ModalFooterProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=ModalShell.d.ts.map

package/dist/components/ModalShell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModalShell.d.ts","sourceRoot":"","sources":["../../src/components/ModalShell.tsx"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAGnE,eAAO,MAAM,aAAa,OAAO,CAAA;AACjC,eAAO,MAAM,cAAc,qBAAqB,CAAA;AAOhD,UAAU,eAAe;IACvB,QAAQ,EAAE,SAAS,CAAA;IACnB,kFAAkF;IAClF,KAAK,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAA;IACpC,4FAA4F;IAC5F,OAAO,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAA;IAClC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAChC;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,eAAe,+BA0DrG;AAED,UAAU,gBAAgB;IACxB,+FAA+F;IAC/F,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,SAAS,CAAA;IAChB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,OAAO,EAAE,MAAM,IAAI,CAAA;CACpB;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,gBAAgB,+BAY9E;AAED,UAAU,UAAU;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,QAAQ,EAAE,SAAS,CAAA;IACnB,mHAAmH;IACnH,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,sGAAsG;AACtG,wBAAgB,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,UAAU,+BAS1E;AAED,UAAU,gBAAgB;IACxB,mGAAmG;IACnG,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,gDAAgD;IAChD,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,gBAAgB,+BAUhE"}

package/dist/components/ModalShell.js

@@ -0,0 +1,92 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useRef, useState } from 'react';
+import { createPortal } from 'react-dom';
+export const MODAL_Z_INDEX = 9999;
+export const MODAL_BACKDROP = 'rgba(0,0,0,0.55)';
+const FOCUSABLE = 'a[href], button:not([disabled]), input:not([disabled]):not([type="hidden"]), select:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex="-1"])';
+/** Open shells, innermost last: only the top one reacts to Escape and traps Tab. */
+const openShells = [];
+/**
+ * The single backdrop every admin modal renders through, so stacking, dimming and dismissal stay consistent:
+ * portalled to <body>, z-index 9999, a 55% black scrollable overlay, and a backdrop click never dismisses —
+ * a stray click must not throw away a half-filled form. Dialogs close from their own Cancel / × controls and,
+ * when `onClose` is passed, from Escape. Focus moves into the modal on open (unless a child already took it
+ * with autoFocus), Tab cycles inside it, and focus returns to the opener on close.
+ */
+export function ModalShell({ children, align = 'center', onClose, label, labelledBy }) {
+    const panelRef = useRef(null);
+    const onCloseRef = useRef(onClose);
+    useEffect(() => { onCloseRef.current = onClose; });
+    // Read during the first render, before an autoFocus child steals focus, so closing returns it to the opener.
+    const [opener] = useState(() => document.activeElement instanceof HTMLElement ? document.activeElement : null);
+    useEffect(() => {
+        const panel = panelRef.current;
+        if (!panel)
+            return;
+        openShells.push(panel);
+        if (!panel.contains(document.activeElement))
+            panel.focus({ preventScroll: true });
+        const onKeyDown = (event) => {
+            if (openShells[openShells.length - 1] !== panel || event.defaultPrevented || event.isComposing)
+                return;
+            if (event.key === 'Escape') {
+                if (onCloseRef.current) {
+                    event.preventDefault();
+                    onCloseRef.current();
+                }
+                return;
+            }
+            if (event.key !== 'Tab')
+                return;
+            const focusable = Array.from(panel.querySelectorAll(FOCUSABLE));
+            if (focusable.length === 0) {
+                event.preventDefault();
+                return;
+            }
+            const first = focusable[0];
+            const last = focusable[focusable.length - 1];
+            const active = document.activeElement;
+            if (event.shiftKey && (active === first || active === panel)) {
+                event.preventDefault();
+                last.focus();
+            }
+            else if (!event.shiftKey && active === last) {
+                event.preventDefault();
+                first.focus();
+            }
+            else if (!panel.contains(active)) {
+                event.preventDefault();
+                first.focus();
+            }
+        };
+        document.addEventListener('keydown', onKeyDown);
+        return () => {
+            document.removeEventListener('keydown', onKeyDown);
+            const index = openShells.lastIndexOf(panel);
+            if (index >= 0)
+                openShells.splice(index, 1);
+            if (opener && opener.isConnected)
+                opener.focus({ preventScroll: true });
+        };
+    }, [opener]);
+    const dialogProps = label || labelledBy
+        ? { role: 'dialog', 'aria-modal': true, 'aria-label': label, 'aria-labelledby': labelledBy }
+        : {};
+    return createPortal(_jsx("div", { "data-testid": "modal-backdrop", style: { position: 'fixed', inset: 0, zIndex: MODAL_Z_INDEX, background: MODAL_BACKDROP, overflowY: 'auto' }, children: _jsx("div", { ref: panelRef, tabIndex: -1, ...dialogProps, style: { display: 'flex', minHeight: '100%', alignItems: align === 'top' ? 'flex-start' : 'center', justifyContent: 'center', padding: '16px', outline: 'none' }, children: children }) }), document.body);
+}
+/** The shared dialog header: icon, title and a × close button above a divider. */
+export function ModalHeader({ icon, title, titleId, onClose }) {
+    return (_jsxs("div", { className: "flex items-center justify-between gap-3 px-6 py-5", style: { borderBottom: '1px solid var(--m3-outline-variant)' }, children: [_jsxs("div", { className: "flex items-center gap-3 min-w-0", children: [_jsx("span", { className: "material-symbols-outlined shrink-0", "aria-hidden": "true", style: { fontSize: '22px', color: 'var(--m3-primary)' }, children: icon }), _jsx("h3", { id: titleId, className: "font-headline font-bold text-lg break-words min-w-0", style: { color: 'var(--m3-on-surface)' }, children: title })] }), _jsx("button", { type: "button", onClick: onClose, "aria-label": "Close", className: "btn-icon shrink-0", children: _jsx("span", { className: "material-symbols-outlined", "aria-hidden": "true", children: "close" }) })] }));
+}
+/** A titled panel with a close button inside the shared shell, for simple forms. Escape closes it. */
+export function Modal({ title, icon, onClose, children, flush }) {
+    return (_jsx(ModalShell, { onClose: onClose, children: _jsxs("div", { role: "dialog", "aria-modal": "true", "aria-label": title, className: "w-full max-w-md rounded-2xl", style: { background: 'var(--m3-surface-container-low)', border: '1px solid var(--m3-outline-variant)' }, children: [_jsx(ModalHeader, { icon: icon, title: title, onClose: onClose }), flush ? children : _jsx("div", { className: "p-6", children: children })] }) }));
+}
+/**
+ * The action row of a form dialog, stuck to the bottom of the screen while the form scrolls, so the main
+ * action never hides below the fold. Put it last inside the `<form>`, after the padded body.
+ */
+export function ModalFooter({ start, children }) {
+    return (_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-3 px-4 sm:px-6 py-4", style: { position: 'sticky', bottom: 0, zIndex: 1, background: 'var(--m3-surface-container-low)', borderTop: '1px solid var(--m3-outline-variant)', borderRadius: '0 0 15px 15px' }, children: [start ? _jsx("div", { className: "flex flex-wrap gap-3", children: start }) : _jsx("span", {}), _jsx("div", { className: "flex flex-wrap gap-3 ml-auto", children: children })] }));
+}
+//# sourceMappingURL=ModalShell.js.map

package/dist/components/ModalShell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModalShell.js","sourceRoot":"","sources":["../../src/components/ModalShell.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAExC,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAA;AACjC,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAA;AAEhD,MAAM,SAAS,GAAG,gKAAgK,CAAA;AAElL,oFAAoF;AACpF,MAAM,UAAU,GAAkB,EAAE,CAAA;AAgBpC;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAmB;IACpG,MAAM,QAAQ,GAAG,MAAM,CAAiB,IAAI,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAClC,SAAS,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,GAAG,OAAO,CAAA,CAAC,CAAC,CAAC,CAAA;IACjD,6GAA6G;IAC7G,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,YAAY,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAE9G,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAA;QAC9B,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,KAAK,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAEjF,MAAM,SAAS,GAAG,CAAC,KAAoB,EAAE,EAAE;YACzC,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,WAAW;gBAAE,OAAM;YACtG,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC3B,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;oBACvB,KAAK,CAAC,cAAc,EAAE,CAAA;oBACtB,UAAU,CAAC,OAAO,EAAE,CAAA;gBACtB,CAAC;gBACD,OAAM;YACR,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK;gBAAE,OAAM;YAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAc,SAAS,CAAC,CAAC,CAAA;YAC5E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAE,CAAA;YAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;YAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAA;YACrC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAAC,IAAI,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;iBACjG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;iBACjF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;QAC7E,CAAC,CAAA;QACD,QAAQ,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAC/C,OAAO,GAAG,EAAE;YACV,QAAQ,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YAClD,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YAC3C,IAAI,KAAK,IAAI,CAAC;gBAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAC3C,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW;gBAAE,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QACzE,CAAC,CAAA;IACH,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAEZ,MAAM,WAAW,GAAG,KAAK,IAAI,UAAU;QACrC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE;QAC5F,CAAC,CAAC,EAAE,CAAA;IAEN,OAAO,YAAY,CACjB,6BAAiB,gBAAgB,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,YAC5I,cACE,GAAG,EAAE,QAAQ,EACb,QAAQ,EAAE,CAAC,CAAC,KACR,WAAW,EACf,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAE/J,QAAQ,GACL,GACF,EACN,QAAQ,CAAC,IAAI,CACd,CAAA;AACH,CAAC;AAWD,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB;IAC7E,OAAO,CACL,eAAK,SAAS,EAAC,mDAAmD,EAAC,KAAK,EAAE,EAAE,YAAY,EAAE,qCAAqC,EAAE,aAC/H,eAAK,SAAS,EAAC,iCAAiC,aAC9C,eAAM,SAAS,EAAC,oCAAoC,iBAAa,MAAM,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,YAAG,IAAI,GAAQ,EAC9I,aAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAC,qDAAqD,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,YAAG,KAAK,GAAM,IACnI,EACN,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,OAAO,gBAAa,OAAO,EAAC,SAAS,EAAC,mBAAmB,YACtF,eAAM,SAAS,EAAC,2BAA2B,iBAAa,MAAM,sBAAa,GACpE,IACL,CACP,CAAA;AACH,CAAC;AAYD,sGAAsG;AACtG,MAAM,UAAU,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAc;IACzE,OAAO,CACL,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,YAC1B,eAAK,IAAI,EAAC,QAAQ,gBAAY,MAAM,gBAAa,KAAK,EAAE,SAAS,EAAC,6BAA6B,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,iCAAiC,EAAE,MAAM,EAAE,qCAAqC,EAAE,aACrM,KAAC,WAAW,IAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAI,EAC1D,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAK,SAAS,EAAC,KAAK,YAAE,QAAQ,GAAO,IACrD,GACK,CACd,CAAA;AACH,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAoB;IAC/D,OAAO,CACL,eACE,SAAS,EAAC,qEAAqE,EAC/E,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,iCAAiC,EAAE,SAAS,EAAE,qCAAqC,EAAE,YAAY,EAAE,eAAe,EAAE,aAElL,KAAK,CAAC,CAAC,CAAC,cAAK,SAAS,EAAC,sBAAsB,YAAE,KAAK,GAAO,CAAC,CAAC,CAAC,gBAAQ,EACvE,cAAK,SAAS,EAAC,8BAA8B,YAAE,QAAQ,GAAO,IAC1D,CACP,CAAA;AACH,CAAC"}

package/dist/components/ResetTwoFactorModal.d.ts

@@ -0,0 +1,14 @@
+import { type SsoConfirmationState } from './SsoConfirmation';
+interface ResetTwoFactorModalProps {
+    email: string;
+    pending: boolean;
+    error?: string;
+    /** Progress of the SSO confirmation popup, which `onConfirm` opens when the API asks for it. */
+    ssoConfirmation?: Pick<SsoConfirmationState, 'waiting' | 'cancel'>;
+    /** `currentPassword` is undefined in an SSO session, which is confirmed at the identity provider instead. */
+    onConfirm: (currentPassword: string | undefined) => void;
+    onCancel: () => void;
+}
+export declare function ResetTwoFactorModal({ email, pending, error, ssoConfirmation, onConfirm, onCancel }: ResetTwoFactorModalProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=ResetTwoFactorModal.d.ts.map

package/dist/components/ResetTwoFactorModal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetTwoFactorModal.d.ts","sourceRoot":"","sources":["../../src/components/ResetTwoFactorModal.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAqC,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAKhG,UAAU,wBAAwB;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gGAAgG;IAChG,eAAe,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAA;IAClE,6GAA6G;IAC7G,SAAS,EAAE,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAA;IACxD,QAAQ,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,wBAAgB,mBAAmB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,eAAmC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,wBAAwB,+BAuDhJ"}

package/dist/components/ResetTwoFactorModal.js

@@ -0,0 +1,16 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useId, useState } from 'react';
+import { ModalFooter, ModalHeader, ModalShell } from './ModalShell';
+import { SsoConfirmationNote, isSsoSession } from './SsoConfirmation';
+import { Alert } from './ui';
+const IDLE_CONFIRMATION = { waiting: false, cancel: () => { } };
+export function ResetTwoFactorModal({ email, pending, error, ssoConfirmation = IDLE_CONFIRMATION, onConfirm, onCancel }) {
+    const sso = isSsoSession();
+    const [currentPassword, setCurrentPassword] = useState('');
+    const [typedEmail, setTypedEmail] = useState('');
+    const titleId = useId();
+    const canConfirm = !pending && (sso || currentPassword.length > 0) && typedEmail === email;
+    const confirm = () => onConfirm(sso ? undefined : currentPassword);
+    return (_jsx(ModalShell, { onClose: pending ? undefined : onCancel, children: _jsxs("div", { role: "dialog", "aria-modal": "true", "aria-labelledby": titleId, "aria-busy": pending || undefined, className: "rounded-2xl w-full max-w-md", style: { background: 'var(--m3-surface-container-low)', border: '1px solid var(--m3-outline-variant)' }, children: [_jsx(ModalHeader, { icon: "shield_lock", titleId: titleId, title: "Reset two-factor authentication", onClose: pending ? () => { } : onCancel }), _jsxs("div", { className: "p-6 space-y-4", children: [_jsx("div", { children: _jsxs("p", { className: "text-sm", style: { color: 'var(--m3-on-surface-variant)' }, children: ["This removes 2FA from ", _jsx("strong", { children: email }), " and signs out all of their active sessions. Their password will not change."] }) }), error && _jsx(Alert, { tone: "error", children: error }), sso ? _jsx(SsoConfirmationNote, { confirmation: ssoConfirmation }) : _jsxs("label", { className: "block space-y-2 text-sm", style: { color: 'var(--m3-on-surface-variant)' }, children: [_jsx("span", { children: "Your current password" }), _jsx("input", { type: "password", autoComplete: "current-password", autoFocus: true, value: currentPassword, onChange: (event) => setCurrentPassword(event.target.value), className: "input-sig w-full" })] }), _jsxs("label", { className: "block space-y-2 text-sm", style: { color: 'var(--m3-on-surface-variant)' }, children: [_jsxs("span", { children: ["Type ", _jsx("strong", { className: "font-mono", children: email }), " to confirm"] }), _jsx("input", { value: typedEmail, onChange: (event) => setTypedEmail(event.target.value), autoFocus: sso, autoComplete: "off", spellCheck: false, className: "input-sig w-full" })] })] }), _jsxs(ModalFooter, { children: [_jsx("button", { type: "button", onClick: onCancel, disabled: pending, className: "btn btn-secondary", children: "Cancel" }), _jsx("button", { type: "button", onClick: confirm, disabled: !canConfirm, className: "btn btn-danger-outline", children: pending ? 'Resetting…' : 'Reset 2FA' })] })] }) }));
+}
+//# sourceMappingURL=ResetTwoFactorModal.js.map

package/dist/components/ResetTwoFactorModal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetTwoFactorModal.js","sourceRoot":"","sources":["../../src/components/ResetTwoFactorModal.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAA6B,MAAM,mBAAmB,CAAA;AAChG,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAE5B,MAAM,iBAAiB,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAA;AAa9D,MAAM,UAAU,mBAAmB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,GAAG,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAA4B;IAC/I,MAAM,GAAG,GAAG,YAAY,EAAE,CAAA;IAC1B,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,KAAK,EAAE,CAAA;IACvB,MAAM,UAAU,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,UAAU,KAAK,KAAK,CAAA;IAC1F,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;IAElE,OAAO,CACL,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,YACjD,eACE,IAAI,EAAC,QAAQ,gBACF,MAAM,qBACA,OAAO,eACb,OAAO,IAAI,SAAS,EAC/B,SAAS,EAAC,6BAA6B,EACvC,KAAK,EAAE,EAAE,UAAU,EAAE,iCAAiC,EAAE,MAAM,EAAE,qCAAqC,EAAE,aAEvG,KAAC,WAAW,IAAC,IAAI,EAAC,aAAa,EAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAC,iCAAiC,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAI,EACpI,eAAK,SAAS,EAAC,eAAe,aAC9B,wBACE,aAAG,SAAS,EAAC,SAAS,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,uCAC/C,2BAAS,KAAK,GAAU,oFAC5C,GACA,EAEL,KAAK,IAAI,KAAC,KAAK,IAAC,IAAI,EAAC,OAAO,YAAE,KAAK,GAAS,EAE5C,GAAG,CAAC,CAAC,CAAC,KAAC,mBAAmB,IAAC,YAAY,EAAE,eAAe,GAAI,CAAC,CAAC,CAAC,iBAAO,SAAS,EAAC,yBAAyB,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,aACzJ,mDAAkC,EAClC,gBACE,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,kBAAkB,EAC/B,SAAS,QACT,KAAK,EAAE,eAAe,EACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3D,SAAS,EAAC,kBAAkB,GAC5B,IACI,EAER,iBAAO,SAAS,EAAC,yBAAyB,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,aACzF,oCAAW,iBAAQ,SAAS,EAAC,WAAW,YAAE,KAAK,GAAU,mBAAkB,EAC3E,gBAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAC,KAAK,EAAC,UAAU,EAAE,KAAK,EAAE,SAAS,EAAC,kBAAkB,GAAG,IACjK,IAEF,EACN,MAAC,WAAW,eACV,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAC,mBAAmB,uBAAgB,EACzG,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAC,wBAAwB,YAC9F,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,GAC9B,IACG,IACV,GACK,CACd,CAAA;AACH,CAAC"}

package/dist/components/SidePanel.d.ts

@@ -0,0 +1,35 @@
+import type { ReactNode } from 'react';
+export interface SidePanelMeta {
+    icon: string;
+    label: string;
+}
+/**
+ * `row`: the panel always sits to the right of the form (legacy layout).
+ * `responsive`: below the lg breakpoint the panel spans the full width under the form with a top border;
+ * from lg up it becomes the right-hand column. The parent must switch to `flex-col lg:flex-row` to match.
+ */
+export type SidePanelLayout = 'row' | 'responsive';
+/** The expandable column to the right of a modal form: a title bar and the open section. */
+export declare function SidePanelFrame({ meta, children, layout, className }: {
+    meta: SidePanelMeta;
+    children: ReactNode;
+    layout?: SidePanelLayout | undefined;
+    className?: string | undefined;
+}): import("react").JSX.Element;
+export interface SideTab<K extends string> {
+    key: K;
+    badge: string | null;
+}
+/**
+ * The icon strip that opens and closes side-panel sections: vertical at the form's right edge, or with
+ * `layout="responsive"` a horizontal row below lg and the vertical strip from lg up.
+ */
+export declare function SideTabStrip<K extends string>({ tabs, meta, active, onToggle, layout, className }: {
+    tabs: SideTab<K>[];
+    meta: Record<K, SidePanelMeta>;
+    active: K | null;
+    onToggle: (key: K | null) => void;
+    layout?: SidePanelLayout | undefined;
+    className?: string | undefined;
+}): import("react").JSX.Element;
+//# sourceMappingURL=SidePanel.d.ts.map

package/dist/components/SidePanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SidePanel.d.ts","sourceRoot":"","sources":["../../src/components/SidePanel.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAEtC,MAAM,WAAW,aAAa;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAE9D;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,YAAY,CAAA;AAElD,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAc,EAAE,SAAS,EAAE,EAAE;IAC5E,IAAI,EAAE,aAAa,CAAA;IACnB,QAAQ,EAAE,SAAS,CAAA;IACnB,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IACpC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,+BAsBA;AAED,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,MAAM;IAAI,GAAG,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAE3E;;;GAGG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAc,EAAE,SAAS,EAAE,EAAE;IAC1G,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;IAClB,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;IAC9B,MAAM,EAAE,CAAC,GAAG,IAAI,CAAA;IAChB,QAAQ,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,KAAK,IAAI,CAAA;IACjC,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IACpC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,+BAwCA"}

package/dist/components/SidePanel.js

@@ -0,0 +1,19 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import clsx from 'clsx';
+/** The expandable column to the right of a modal form: a title bar and the open section. */
+export function SidePanelFrame({ meta, children, layout = 'row', className }) {
+    return (_jsxs("div", { "data-testid": "side-panel-frame", className: clsx('flex flex-col flex-1 min-w-0 border-outline-variant', layout === 'row' ? 'border-l lg:min-w-[360px]' : 'w-full border-t lg:w-auto lg:border-t-0 lg:border-l lg:min-w-[360px]', className), children: [_jsxs("div", { className: "flex items-center gap-2 px-5 py-4", style: { borderBottom: '1px solid var(--m3-outline-variant)' }, children: [_jsx("span", { className: "material-symbols-outlined", style: { fontSize: '16px', color: 'var(--m3-primary)' }, children: meta.icon }), _jsx("span", { className: "font-mono text-xs uppercase tracking-wider font-medium", style: { color: 'var(--m3-on-surface)', flex: 1 }, children: meta.label })] }), _jsx("div", { className: "p-5 space-y-4 overflow-y-auto", style: { flex: 1 }, children: children })] }));
+}
+/**
+ * The icon strip that opens and closes side-panel sections: vertical at the form's right edge, or with
+ * `layout="responsive"` a horizontal row below lg and the vertical strip from lg up.
+ */
+export function SideTabStrip({ tabs, meta, active, onToggle, layout = 'row', className }) {
+    const responsive = layout === 'responsive';
+    return (_jsx("div", { role: "toolbar", "aria-orientation": responsive ? undefined : 'vertical', className: clsx('flex items-stretch border-outline-variant', responsive ? 'flex-row w-full border-t overflow-hidden rounded-b-2xl lg:w-11 lg:flex-none lg:flex-col lg:border-t-0 lg:border-l lg:rounded-b-none lg:rounded-r-2xl' : 'flex-col flex-none w-11 border-l', className), children: tabs.map((tab) => {
+            const isActive = active === tab.key;
+            const current = meta[tab.key];
+            return (_jsxs("button", { type: "button", "aria-pressed": isActive, "aria-label": current.label, title: current.label, onClick: () => onToggle(isActive ? null : tab.key), className: clsx('relative flex flex-col items-center justify-center transition-all border-outline-variant focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-inset focus-visible:ring-outline', responsive ? 'flex-1 py-3 border-r last:border-r-0 lg:flex-none lg:py-4 lg:border-r-0 lg:border-b' : 'py-4 border-b', isActive ? 'side-tab-active' : 'hover:bg-surface-container'), style: { color: isActive ? 'var(--m3-primary)' : 'var(--m3-secondary)', background: isActive ? 'var(--m3-primary-fixed)' : undefined }, children: [_jsx("span", { className: "material-symbols-outlined", style: { fontSize: '18px' }, children: current.icon }), tab.badge && (_jsx("span", { className: `absolute top-1.5 right-1 flex items-center justify-center rounded-full font-bold leading-none ${isActive ? 'side-tab-badge-active' : ''}`, style: { background: isActive ? 'var(--m3-primary)' : 'var(--m3-on-surface-variant)', color: isActive ? 'var(--m3-on-primary)' : 'var(--m3-surface)', minWidth: '14px', height: '14px', fontSize: '9px', padding: '0 2px' }, children: tab.badge }))] }, tab.key));
+        }) }));
+}
+//# sourceMappingURL=SidePanel.js.map

package/dist/components/SidePanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SidePanel.js","sourceRoot":"","sources":["../../src/components/SidePanel.tsx"],"names":[],"mappings":";AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AAYvB,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,EAAE,SAAS,EAKzE;IACC,OAAO,CACL,8BACc,kBAAkB,EAC9B,SAAS,EAAE,IAAI,CACb,qDAAqD,EACrD,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,sEAAsE,EACvH,SAAS,CACV,aAGD,eAAK,SAAS,EAAC,mCAAmC,EAAC,KAAK,EAAE,EAAE,YAAY,EAAE,qCAAqC,EAAE,aAC/G,eAAM,SAAS,EAAC,2BAA2B,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,YAAG,IAAI,CAAC,IAAI,GAAQ,EACvH,eAAM,SAAS,EAAC,wDAAwD,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,EAAE,YAAG,IAAI,CAAC,KAAK,GAAQ,IAC3I,EAGN,cAAK,SAAS,EAAC,+BAA+B,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,YAC9D,QAAQ,GACL,IACF,CACP,CAAA;AACH,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,EAAE,SAAS,EAOvG;IACC,MAAM,UAAU,GAAG,MAAM,KAAK,YAAY,CAAA;IAC1C,OAAO,CACL,cACE,IAAI,EAAC,SAAS,sBACI,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EACrD,SAAS,EAAE,IAAI,CACb,2CAA2C,EAC3C,UAAU,CAAC,CAAC,CAAC,sJAAsJ,CAAC,CAAC,CAAC,kCAAkC,EACxM,SAAS,CACV,YAEA,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAChB,MAAM,QAAQ,GAAG,MAAM,KAAK,GAAG,CAAC,GAAG,CAAA;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC7B,OAAO,CACL,kBAAsB,IAAI,EAAC,QAAQ,kBACnB,QAAQ,gBACV,OAAO,CAAC,KAAK,EACzB,KAAK,EAAE,OAAO,CAAC,KAAK,EACpB,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAClD,SAAS,EAAE,IAAI,CACb,8LAA8L,EAC9L,UAAU,CAAC,CAAC,CAAC,qFAAqF,CAAC,CAAC,CAAC,eAAe,EACpH,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,4BAA4B,CAC5D,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,qBAAqB,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,EAAE,aAEtI,eAAM,SAAS,EAAC,2BAA2B,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAG,OAAO,CAAC,IAAI,GAAQ,EAC7F,GAAG,CAAC,KAAK,IAAI,CACZ,eAAM,SAAS,EAAE,iGAAiG,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,EAAE,EACzJ,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,8BAA8B,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,YAC1N,GAAG,CAAC,KAAK,GACL,CACR,KAlBU,GAAG,CAAC,GAAG,CAmBX,CACV,CAAA;QACH,CAAC,CAAC,GACE,CACP,CAAA;AACH,CAAC"}

package/dist/components/SingleSignOnModal.d.ts

@@ -0,0 +1,4 @@
+export declare function SingleSignOnModal({ onClose }: {
+    onClose: () => void;
+}): import("react").JSX.Element;
+//# sourceMappingURL=SingleSignOnModal.d.ts.map

package/dist/components/SingleSignOnModal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SingleSignOnModal.d.ts","sourceRoot":"","sources":["../../src/components/SingleSignOnModal.tsx"],"names":[],"mappings":"AAwBA,wBAAgB,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE;IAAE,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,+BAwIrE"}

package/dist/components/SingleSignOnModal.js

@@ -0,0 +1,64 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useCallback, useEffect, useState } from 'react';
+import { api } from '../api/client';
+import { uiConfig } from '../config';
+import { Alert, ErrorState, Field, LoadingState, Switch, useToast } from './ui';
+import { ModalFooter, ModalHeader, ModalShell } from './ModalShell';
+import { SsoConfirmationNote, isSsoSession, useSsoConfirmation } from './SsoConfirmation';
+const errorText = (e) => e instanceof Error ? e.message : String(e);
+const CARD = { background: 'var(--m3-surface-container-lowest)', border: '1px solid var(--m3-outline-variant)', color: 'var(--m3-on-surface)' };
+export function SingleSignOnModal({ onClose }) {
+    const [data, setData] = useState(null);
+    const [form, setForm] = useState(null);
+    const [clientSecret, setClientSecret] = useState('');
+    const [currentPassword, setCurrentPassword] = useState('');
+    const sso = isSsoSession();
+    const confirmation = useSsoConfirmation();
+    const [loadError, setLoadError] = useState('');
+    const [busy, setBusy] = useState(null);
+    const [message, setMessage] = useState(null);
+    const toast = useToast();
+    const load = useCallback(() => api.get('/admin/oidc')
+        .then((res) => { setData(res); setForm(res.settings); setLoadError(''); })
+        .catch((e) => setLoadError(errorText(e))), []);
+    useEffect(() => { void load(); }, [load]);
+    if (!data || !form) {
+        return _jsx(ModalShell, { align: "top", onClose: onClose, label: "Single sign-on", children: _jsxs("div", { className: "rounded-2xl p-6 w-full max-w-2xl", style: CARD, children: [loadError ? _jsx(ErrorState, { message: loadError, onRetry: () => void load() }) : _jsx(LoadingState, { label: "Loading sign-in settings\u2026" }), loadError && _jsx("button", { type: "button", className: "btn btn-secondary mt-4", onClick: onClose, children: "Close" })] }) });
+    }
+    const locked = data.envManaged;
+    const update = (changes) => setForm({ ...form, ...changes });
+    const redirectUri = form.redirectUri || data.defaultRedirectUri;
+    async function test() {
+        setBusy('test');
+        setMessage(null);
+        try {
+            const result = await api.post('/admin/oidc/test', { issuer: form.issuer, clientId: form.clientId, redirectUri: form.redirectUri });
+            setMessage({ tone: 'success', text: `Connected to ${result.issuer}.` });
+        }
+        catch (e) {
+            setMessage({ tone: 'error', text: errorText(e) });
+        }
+        finally {
+            setBusy(null);
+        }
+    }
+    async function save() {
+        setBusy('save');
+        setMessage(null);
+        try {
+            const saved = await confirmation.run(() => api.put('/admin/oidc', {
+                ...form, clientSecret, ...(sso ? {} : { currentPassword }),
+            }));
+            toast.success(saved.enabled ? 'Single sign-on settings saved. They apply immediately.' : 'Single sign-on settings saved.');
+            onClose();
+        }
+        catch (err) {
+            setMessage({ tone: 'error', text: errorText(err) });
+            setBusy(null);
+        }
+    }
+    return _jsx(ModalShell, { align: "top", onClose: busy ? undefined : onClose, label: "Single sign-on", children: _jsxs("div", { className: "w-full max-w-2xl rounded-2xl my-8", style: { background: 'var(--m3-surface-container-low)', border: '1px solid var(--m3-outline-variant)', color: 'var(--m3-on-surface)' }, children: [_jsx(ModalHeader, { icon: "passkey", title: "Single sign-on", onClose: onClose }), _jsxs("form", { onSubmit: (e) => { e.preventDefault(); void save(); }, children: [_jsxs("div", { className: "p-6 space-y-5", children: [locked && _jsx(Alert, { tone: "warning", children: "Single sign-on is configured through OIDC_* environment variables on the server. Remove them to manage it here." }), message && _jsx(Alert, { tone: message.tone, onDismiss: () => setMessage(null), children: message.text }), _jsxs("div", { className: "flex items-start justify-between gap-4", children: [_jsxs("div", { children: [_jsx("h2", { className: "font-headline text-base font-semibold", children: "OpenID Connect" }), _jsxs("p", { className: "text-sm mt-1", style: { color: 'var(--m3-secondary)' }, children: ["Users must already exist; they are matched by the verified email from the identity provider.", uiConfig().texts.ssoSignInHint ? ` ${uiConfig().texts.ssoSignInHint}` : ""] })] }), _jsx(Switch, { checked: form.enabled, disabled: locked, onChange: (enabled) => update({ enabled }), "aria-label": "Enable single sign-on" })] }), _jsxs("fieldset", { disabled: locked || busy !== null, className: "space-y-4", children: [_jsx(Field, { label: "Issuer URL", hint: "For example https://login.microsoftonline.com/<tenant>/v2.0 or https://keycloak.example.com/realms/main", children: _jsx("input", { className: "input-m3", value: form.issuer, onChange: (e) => update({ issuer: e.target.value }), placeholder: "https://idp.example.com" }) }), _jsxs("div", { className: "grid gap-4 md:grid-cols-2", children: [_jsx(Field, { label: "Client ID", children: _jsx("input", { className: "input-m3", value: form.clientId, onChange: (e) => update({ clientId: e.target.value }), autoComplete: "off" }) }), _jsx(Field, { label: "Client secret", hint: form.hasClientSecret ? 'A secret is stored. Leave empty to keep it. Re-enter it when you change the issuer URL or client ID.' : 'Optional for public clients.', children: _jsx("input", { className: "input-m3", type: "password", autoComplete: "new-password", value: clientSecret, onChange: (e) => setClientSecret(e.target.value), placeholder: form.hasClientSecret ? '••••••••' : '' }) })] }), _jsx(Field, { label: "Redirect URI", hint: redirectUri ? _jsxs(_Fragment, { children: ["Register ", _jsx("code", { children: redirectUri }), " as the callback URL in your identity provider."] }) : 'Set PUBLIC_URL on the server or enter the callback URL here.', children: _jsx("input", { className: "input-m3", value: form.redirectUri, onChange: (e) => update({ redirectUri: e.target.value }), placeholder: data.defaultRedirectUri }) }), _jsxs("div", { className: "grid gap-4 md:grid-cols-2", children: [_jsx(Field, { label: "Scopes", children: _jsx("input", { className: "input-m3", value: form.scopes, onChange: (e) => update({ scopes: e.target.value }), placeholder: "openid email profile" }) }), _jsx(Field, { label: "Button label", children: _jsx("input", { className: "input-m3", value: form.buttonLabel, onChange: (e) => update({ buttonLabel: e.target.value }), placeholder: "Sign in with SSO" }) })] }), _jsxs("label", { className: "flex items-start gap-2 text-sm", children: [_jsx("input", { type: "checkbox", className: "mt-1", checked: form.allowUnverifiedEmail, onChange: (e) => update({ allowUnverifiedEmail: e.target.checked }) }), _jsxs("span", { children: ["Accept identity providers that omit ", _jsx("code", { children: "email_verified" }), ". Enable only if the email claim is trustworthy. Not needed for Microsoft Entra ID: add the ", _jsx("code", { children: "xms_edov" }), " optional claim instead."] })] }), _jsxs("label", { className: "flex items-start gap-2 text-sm", children: [_jsx("input", { type: "checkbox", className: "mt-1", checked: form.disablePasswordLogin, onChange: (e) => update({ disablePasswordLogin: e.target.checked }) }), _jsxs("span", { children: ["Disable password sign-in. The identity provider must be reachable to save this. Set ", _jsx("code", { children: "OIDC_FORCE_PASSWORD_LOGIN=true" }), " on the server to recover if it goes down."] })] })] }), !locked && _jsx(_Fragment, { children: sso
+                                        ? _jsx(SsoConfirmationNote, { confirmation: confirmation })
+                                        : _jsx(Field, { label: "Your current password", hint: "Required to change sign-in settings.", children: _jsx("input", { className: "input-m3", type: "password", autoComplete: "current-password", required: true, value: currentPassword, onChange: (e) => setCurrentPassword(e.target.value) }) }) }), !locked && _jsx("p", { className: "text-xs", style: { color: 'var(--m3-secondary)' }, children: "Test sign-in uses the saved settings, so save changes first." })] }), _jsxs(ModalFooter, { start: _jsxs(_Fragment, { children: [!locked && (_jsx("button", { type: "button", disabled: busy !== null || !form.issuer || !form.clientId, onClick: () => void test(), className: "btn btn-secondary", children: busy === 'test' ? 'Testing…' : 'Test connection' })), _jsx("button", { type: "button", disabled: !locked && (busy !== null || !data.settings.issuer || !data.settings.clientId), onClick: () => window.open('/api/v1/admin/oidc/test-sign-in', '_blank', 'noopener'), title: "Signs in at the identity provider in a new tab with the saved settings and shows the claims and the outcome, without signing anyone in.", className: "btn btn-secondary", children: "Test sign-in" })] }), children: [_jsx("button", { type: "button", disabled: busy !== null, onClick: onClose, className: "btn btn-secondary", children: locked ? 'Close' : 'Cancel' }), !locked && _jsx("button", { type: "submit", disabled: busy !== null, className: "btn btn-primary", children: busy === 'save' ? 'Saving…' : 'Save' })] })] })] }) });
+}
+//# sourceMappingURL=SingleSignOnModal.js.map

package/dist/components/SingleSignOnModal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SingleSignOnModal.js","sourceRoot":"","sources":["../../src/components/SingleSignOnModal.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACxD,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAC/E,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAgBzF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAC5E,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,oCAAoC,EAAE,MAAM,EAAE,qCAAqC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;AAE/I,MAAM,UAAU,iBAAiB,CAAC,EAAE,OAAO,EAA2B;IACpE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAA;IAC3D,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAA;IAC3D,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpD,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1D,MAAM,GAAG,GAAG,YAAY,EAAE,CAAA;IAC1B,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAA;IACzC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC9C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAyB,IAAI,CAAC,CAAA;IAC9D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAiB,IAAI,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;IAExB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAe,aAAa,CAAC;SAChE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;SACxE,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACzD,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAA,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAExC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,KAAC,UAAU,IAAC,KAAK,EAAC,KAAK,EAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAC,gBAAgB,YACrE,eAAK,SAAS,EAAC,kCAAkC,EAAC,KAAK,EAAE,IAAI,aAC1D,SAAS,CAAC,CAAC,CAAC,KAAC,UAAU,IAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,GAAI,CAAC,CAAC,CAAC,KAAC,YAAY,IAAC,KAAK,EAAC,gCAA2B,GAAG,EAC/H,SAAS,IAAI,iBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,wBAAwB,EAAC,OAAO,EAAE,OAAO,sBAAgB,IACnG,GACK,CAAA;IACf,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAA;IAC9B,MAAM,MAAM,GAAG,CAAC,OAA8B,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IACnF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,kBAAkB,CAAA;IAE/D,KAAK,UAAU,IAAI;QACjB,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAqB,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAK,CAAC,WAAW,EAAE,CAAC,CAAA;YACzJ,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;QACzE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;IAC7F,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAe,aAAa,EAAE;gBAC9E,GAAG,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;aAC3D,CAAC,CAAC,CAAA;YACH,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAA;YAC1H,OAAO,EAAE,CAAA;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;IACtF,CAAC;IAED,OAAO,KAAC,UAAU,IAAC,KAAK,EAAC,KAAK,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,EAAC,gBAAgB,YACxF,eAAK,SAAS,EAAC,mCAAmC,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,iCAAiC,EAAE,MAAM,EAAE,qCAAqC,EAAE,KAAK,EAAE,sBAAsB,EAAE,aACzL,KAAC,WAAW,IAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAC,gBAAgB,EAAC,OAAO,EAAE,OAAO,GAAI,EACvE,gBAAM,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAA,CAAC,CAAC,aAC1D,eAAK,SAAS,EAAC,eAAe,aAC3B,MAAM,IAAI,KAAC,KAAK,IAAC,IAAI,EAAC,SAAS,gIAAwH,EACvJ,OAAO,IAAI,KAAC,KAAK,IAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAG,OAAO,CAAC,IAAI,GAAS,EAChG,eAAK,SAAS,EAAC,wCAAwC,aACrD,0BACE,aAAI,SAAS,EAAC,uCAAuC,+BAAoB,EACzE,aAAG,SAAS,EAAC,cAAc,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,6GAC4B,QAAQ,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,IACrK,IACA,EACN,KAAC,MAAM,IAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,gBAAa,uBAAuB,GAAG,IAC9H,EAEN,oBAAU,QAAQ,EAAE,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,SAAS,EAAC,WAAW,aAChE,KAAC,KAAK,IAAC,KAAK,EAAC,YAAY,EAAC,IAAI,EAAC,yGAAyG,YACtI,gBAAO,SAAS,EAAC,UAAU,EAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,WAAW,EAAC,yBAAyB,GAAG,GACvI,EACR,eAAK,SAAS,EAAC,2BAA2B,aACxC,KAAC,KAAK,IAAC,KAAK,EAAC,WAAW,YACtB,gBAAO,SAAS,EAAC,UAAU,EAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,YAAY,EAAC,KAAK,GAAG,GACxH,EACR,KAAC,KAAK,IAAC,KAAK,EAAC,eAAe,EAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,sGAAsG,CAAC,CAAC,CAAC,8BAA8B,YAC/L,gBACE,SAAS,EAAC,UAAU,EAAC,IAAI,EAAC,UAAU,EAAC,YAAY,EAAC,cAAc,EAAC,KAAK,EAAE,YAAY,EACpF,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAChD,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GACnD,GACI,IACJ,EACN,KAAC,KAAK,IAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,2CAAW,yBAAO,WAAW,GAAQ,uDAAkD,CAAC,CAAC,CAAC,8DAA8D,YACtM,gBAAO,SAAS,EAAC,UAAU,EAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,kBAAkB,GAAI,GACjJ,EACR,eAAK,SAAS,EAAC,2BAA2B,aACxC,KAAC,KAAK,IAAC,KAAK,EAAC,QAAQ,YACnB,gBAAO,SAAS,EAAC,UAAU,EAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,WAAW,EAAC,sBAAsB,GAAG,GACpI,EACR,KAAC,KAAK,IAAC,KAAK,EAAC,cAAc,YACzB,gBAAO,SAAS,EAAC,UAAU,EAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,WAAW,EAAC,kBAAkB,GAAG,GAC1I,IACJ,EACN,iBAAO,SAAS,EAAC,gCAAgC,aAC/C,gBAAO,IAAI,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAI,EACnJ,mEAA0C,4CAA2B,kGAA4F,sCAAqB,gCAA+B,IAC/M,EACR,iBAAO,SAAS,EAAC,gCAAgC,aAC/C,gBAAO,IAAI,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAI,EACnJ,mHAA0F,4DAA2C,kDAAiD,IAChL,IACC,EAEV,CAAC,MAAM,IAAI,4BACT,GAAG;wCACF,CAAC,CAAC,KAAC,mBAAmB,IAAC,YAAY,EAAE,YAAY,GAAI;wCACrD,CAAC,CAAC,KAAC,KAAK,IAAC,KAAK,EAAC,uBAAuB,EAAC,IAAI,EAAC,sCAAsC,YAChF,gBAAO,SAAS,EAAC,UAAU,EAAC,IAAI,EAAC,UAAU,EAAC,YAAY,EAAC,kBAAkB,EAAC,QAAQ,QAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,GAC9J,GACT,EACF,CAAC,MAAM,IAAI,YAAG,SAAS,EAAC,SAAS,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,6EAAkE,IACxI,EAEN,MAAC,WAAW,IACV,KAAK,EAAE,8BACJ,CAAC,MAAM,IAAI,CACV,iBAAQ,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,SAAS,EAAC,mBAAmB,YACvI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,GAC1C,CACV,EACD,iBACE,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACtG,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,QAAQ,EAAE,UAAU,CAAC,EACnF,KAAK,EAAC,yIAAyI,EAC/I,SAAS,EAAC,mBAAmB,6BAGtB,IACR,aAEH,iBAAQ,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,IAAI,KAAK,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAC,mBAAmB,YAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAU,EACpI,CAAC,MAAM,IAAI,iBAAQ,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,IAAI,KAAK,IAAI,EAAE,SAAS,EAAC,iBAAiB,YAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAU,IAC1H,IACP,IACD,GACK,CAAA;AACf,CAAC"}

package/dist/components/SsoConfirmation.d.ts

@@ -0,0 +1,22 @@
+/** The confirmation popup reports on this channel. Some providers cut `window.opener`, so no postMessage. */
+export declare const ssoConfirmChannel: () => string;
+/** True when the session signed in with SSO, so sensitive actions are confirmed there instead of with a password. */
+export declare function isSsoSession(): boolean;
+/** True when the API refused an action until the SSO session is confirmed at the identity provider. */
+export declare function isSsoConfirmationRequired(error: unknown): boolean;
+/**
+ * Runs sensitive API calls of an SSO session. When the API asks for a confirmation, `run` opens the identity
+ * provider in a popup right away and repeats the call once it succeeds; otherwise it throws with the reason.
+ * The popup follows the user's click within one API round trip, which browsers still count as user-initiated.
+ */
+export declare function useSsoConfirmation(): {
+    run: <T>(action: () => Promise<T>) => Promise<T>;
+    waiting: boolean;
+    cancel: () => void | undefined;
+};
+export type SsoConfirmationState = ReturnType<typeof useSsoConfirmation>;
+/** Takes the place of a "current password" field in an SSO session: a note, or the popup's progress. */
+export declare function SsoConfirmationNote({ confirmation }: {
+    confirmation: Pick<SsoConfirmationState, 'waiting' | 'cancel'>;
+}): import("react").JSX.Element;
+//# sourceMappingURL=SsoConfirmation.d.ts.map

package/dist/components/SsoConfirmation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoConfirmation.d.ts","sourceRoot":"","sources":["../../src/components/SsoConfirmation.tsx"],"names":[],"mappings":"AAKA,6GAA6G;AAC7G,eAAO,MAAM,iBAAiB,QAAO,MAAmC,CAAA;AAaxE,qHAAqH;AACrH,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED,uGAAuG;AACvG,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEjE;AAyBD;;;;GAIG;AACH,wBAAgB,kBAAkB;UAKD,CAAC,UAAW,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CAAC;;;EAkBzE;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAExE,wGAAwG;AACxG,wBAAgB,mBAAmB,CAAC,EAAE,YAAY,EAAE,EAAE;IAAE,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAA;CAAE,+BAUvH"}

package/dist/components/SsoConfirmation.js

@@ -0,0 +1,87 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { getCurrentUser } from '../api/client';
+import { storageKey, uiConfig } from '../config';
+import { Alert } from './ui';
+/** The confirmation popup reports on this channel. Some providers cut `window.opener`, so no postMessage. */
+export const ssoConfirmChannel = () => storageKey('sso-confirm');
+const ssoConfirmUrl = () => `${uiConfig().apiBase}/auth/oidc/confirm`;
+// The server-side flow expires after 10 minutes, so a popup left open longer cannot succeed.
+const SSO_CONFIRM_TIMEOUT_MS = 10 * 60 * 1000;
+const OUTCOME_MESSAGES = {
+    failed: 'The single sign-on confirmation did not succeed. Try again.',
+    blocked: 'The browser blocked the sign-in window. Allow pop-ups for this site and try again.',
+    cancelled: 'The single sign-on confirmation was cancelled.',
+};
+/** True when the session signed in with SSO, so sensitive actions are confirmed there instead of with a password. */
+export function isSsoSession() {
+    return getCurrentUser()?.authMethod === 'oidc';
+}
+/** True when the API refused an action until the SSO session is confirmed at the identity provider. */
+export function isSsoConfirmationRequired(error) {
+    return error?.code === 'SSO_CONFIRMATION_REQUIRED';
+}
+function openSsoConfirmation() {
+    const popup = window.open(ssoConfirmUrl(), ssoConfirmChannel(), 'popup,width=520,height=720');
+    if (!popup)
+        return { result: Promise.resolve('blocked'), cancel: () => { } };
+    let finish = () => { };
+    const result = new Promise((resolve) => {
+        const channel = new BroadcastChannel(ssoConfirmChannel());
+        const timer = setTimeout(() => finish('failed'), SSO_CONFIRM_TIMEOUT_MS);
+        finish = (outcome) => {
+            channel.close();
+            clearTimeout(timer);
+            resolve(outcome);
+        };
+        channel.onmessage = (event) => finish(event.data?.ok === true ? 'ok' : 'failed');
+    });
+    return {
+        result,
+        cancel: () => {
+            finish('cancelled');
+            try {
+                popup.close();
+            }
+            catch { /* already closed or no longer ours */ }
+        },
+    };
+}
+/**
+ * Runs sensitive API calls of an SSO session. When the API asks for a confirmation, `run` opens the identity
+ * provider in a popup right away and repeats the call once it succeeds; otherwise it throws with the reason.
+ * The popup follows the user's click within one API round trip, which browsers still count as user-initiated.
+ */
+export function useSsoConfirmation() {
+    const [waiting, setWaiting] = useState(false);
+    const cancelRef = useRef(null);
+    useEffect(() => () => cancelRef.current?.(), []);
+    const run = useCallback(async (action) => {
+        try {
+            return await action();
+        }
+        catch (error) {
+            if (!isSsoConfirmationRequired(error))
+                throw error;
+            const { result, cancel } = openSsoConfirmation();
+            cancelRef.current = cancel;
+            setWaiting(true);
+            const outcome = await result;
+            cancelRef.current = null;
+            setWaiting(false);
+            if (outcome !== 'ok')
+                throw new Error(OUTCOME_MESSAGES[outcome], { cause: error });
+            return action();
+        }
+    }, []);
+    const cancel = useCallback(() => cancelRef.current?.(), []);
+    return { run, waiting, cancel };
+}
+/** Takes the place of a "current password" field in an SSO session: a note, or the popup's progress. */
+export function SsoConfirmationNote({ confirmation }) {
+    if (!confirmation.waiting) {
+        return _jsx("p", { className: "text-xs", style: { color: 'var(--m3-secondary)' }, children: "You signed in with single sign-on, so no password is needed. You may be asked to sign in again in a pop-up window." });
+    }
+    return (_jsxs(Alert, { tone: "info", title: "Confirm it's you", children: [_jsx("p", { children: "Sign in again with your identity provider in the pop-up window. This continues once you are done." }), _jsx("button", { type: "button", className: "btn btn-secondary btn-sm mt-3", onClick: confirmation.cancel, children: "Cancel" })] }));
+}
+//# sourceMappingURL=SsoConfirmation.js.map

package/dist/components/SsoConfirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoConfirmation.js","sourceRoot":"","sources":["../../src/components/SsoConfirmation.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAChE,OAAO,EAAE,cAAc,EAAiB,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAE5B,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAW,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;AACxE,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,OAAO,oBAAoB,CAAA;AACrE,6FAA6F;AAC7F,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAI7C,MAAM,gBAAgB,GAAkD;IACtE,MAAM,EAAE,6DAA6D;IACrE,OAAO,EAAE,oFAAoF;IAC7F,SAAS,EAAE,gDAAgD;CAC5D,CAAA;AAED,qHAAqH;AACrH,MAAM,UAAU,YAAY;IAC1B,OAAO,cAAc,EAAE,EAAE,UAAU,KAAK,MAAM,CAAA;AAChD,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,OAAQ,KAAkC,EAAE,IAAI,KAAK,2BAA2B,CAAA;AAClF,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,EAAE,4BAA4B,CAAC,CAAA;IAC7F,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAA;IAC3E,IAAI,MAAM,GAAsC,GAAG,EAAE,GAAE,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;QACrD,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,CAAC,CAAA;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC,CAAA;QACxE,MAAM,GAAG,CAAC,OAAO,EAAE,EAAE;YACnB,OAAO,CAAC,KAAK,EAAE,CAAA;YACf,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,OAAO,CAAC,CAAA;QAClB,CAAC,CAAA;QACD,OAAO,CAAC,SAAS,GAAG,CAAC,KAAqC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IAClH,CAAC,CAAC,CAAA;IACF,OAAO;QACL,MAAM;QACN,MAAM,EAAE,GAAG,EAAE;YACX,MAAM,CAAC,WAAW,CAAC,CAAA;YACnB,IAAI,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;QACxE,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,MAAM,CAAsB,IAAI,CAAC,CAAA;IACnD,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IAEhD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,EAAM,MAAwB,EAAc,EAAE;QACzE,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,EAAE,CAAA;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAA;YAClD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAA;YAChD,SAAS,CAAC,OAAO,GAAG,MAAM,CAAA;YAC1B,UAAU,CAAC,IAAI,CAAC,CAAA;YAChB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAA;YAC5B,SAAS,CAAC,OAAO,GAAG,IAAI,CAAA;YACxB,UAAU,CAAC,KAAK,CAAC,CAAA;YACjB,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;YAClF,OAAO,MAAM,EAAE,CAAA;QACjB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IAC3D,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AACjC,CAAC;AAID,wGAAwG;AACxG,MAAM,UAAU,mBAAmB,CAAC,EAAE,YAAY,EAAsE;IACtH,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,YAAG,SAAS,EAAC,SAAS,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,mIAAwH,CAAA;IAC/L,CAAC;IACD,OAAO,CACL,MAAC,KAAK,IAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,kBAAkB,aACzC,4HAAwG,EACxG,iBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,+BAA+B,EAAC,OAAO,EAAE,YAAY,CAAC,MAAM,uBAAiB,IACvG,CACT,CAAA;AACH,CAAC"}

package/dist/components/VaultTypePicker.d.ts

@@ -0,0 +1,13 @@
+export type VaultTypeValue = 'local' | 'hashicorp';
+/** Only a local vault stores values; every external vault holds references to secrets kept in the provider. */
+export declare const isReferenceVault: (type: VaultTypeValue) => boolean;
+/** Icon per vault type, shared by the picker and the vault list so they always match. */
+export declare const VAULT_TYPE_ICONS: Record<VaultTypeValue, string>;
+interface Props {
+    value: VaultTypeValue;
+    onChange: (type: VaultTypeValue) => void;
+}
+/** Vault type list in the same dropdown style as the other type pickers. */
+export declare function VaultTypePicker({ value, onChange }: Props): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=VaultTypePicker.d.ts.map

package/dist/components/VaultTypePicker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VaultTypePicker.d.ts","sourceRoot":"","sources":["../../src/components/VaultTypePicker.tsx"],"names":[],"mappings":"AAGA,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,WAAW,CAAA;AAElD,+GAA+G;AAC/G,eAAO,MAAM,gBAAgB,GAAI,MAAM,cAAc,KAAG,OAA2B,CAAA;AAEnF,yFAAyF;AACzF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAA8C,CAAA;AAkB1G,UAAU,KAAK;IACb,KAAK,EAAE,cAAc,CAAA;IACrB,QAAQ,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI,CAAA;CACzC;AAUD,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,+BAyFzD"}

package/dist/components/VaultTypePicker.js

@@ -0,0 +1,62 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useId, useRef, useState } from 'react';
+import { uiConfig } from '../config';
+/** Only a local vault stores values; every external vault holds references to secrets kept in the provider. */
+export const isReferenceVault = (type) => type !== 'local';
+/** Icon per vault type, shared by the picker and the vault list so they always match. */
+export const VAULT_TYPE_ICONS = { local: 'storage', hashicorp: 'vpn_key' };
+/** Vault types in picker order; entries with a null value are announced but cannot be selected yet. */
+const vaultTypeOptions = () => [
+    { value: 'local', label: 'Local', hint: `Encrypted in the ${uiConfig().texts.appName} database`, icon: VAULT_TYPE_ICONS.local },
+    { value: 'hashicorp', label: 'HashiCorp Vault', hint: 'Read secrets from your own HashiCorp Vault', icon: VAULT_TYPE_ICONS.hashicorp },
+    { value: null, label: 'Azure Key Vault', hint: 'Coming soon', icon: 'cloud' },
+    { value: null, label: 'GCP Secret Manager', hint: 'Coming soon', icon: 'cloud' },
+    { value: null, label: 'AWS Secrets Manager', hint: 'Coming soon', icon: 'cloud' },
+];
+function TypeIcon({ icon }) {
+    return (_jsx("span", { className: "flex-none w-8 h-8 rounded-lg grid place-items-center", style: { background: 'var(--admin-icon-container)', color: 'var(--admin-icon-color)' }, children: _jsx("span", { className: "material-symbols-outlined", "aria-hidden": "true", style: { fontSize: 20 }, children: icon }) }));
+}
+/** Vault type list in the same dropdown style as the other type pickers. */
+export function VaultTypePicker({ value, onChange }) {
+    const [open, setOpen] = useState(false);
+    const rootRef = useRef(null);
+    const buttonRef = useRef(null);
+    const labelId = useId();
+    const buttonId = useId();
+    const selected = vaultTypeOptions().find((t) => t.value === value);
+    useEffect(() => {
+        if (!open)
+            return;
+        function onPointerDown(e) {
+            if (!rootRef.current?.contains(e.target))
+                setOpen(false);
+        }
+        function onKeyDown(e) {
+            if (e.key !== 'Escape')
+                return;
+            e.stopPropagation();
+            setOpen(false);
+            buttonRef.current?.focus();
+        }
+        document.addEventListener('mousedown', onPointerDown);
+        document.addEventListener('keydown', onKeyDown, true);
+        return () => {
+            document.removeEventListener('mousedown', onPointerDown);
+            document.removeEventListener('keydown', onKeyDown, true);
+        };
+    }, [open]);
+    function pick(option) {
+        if (!option.value)
+            return;
+        setOpen(false);
+        buttonRef.current?.focus();
+        if (option.value !== value)
+            onChange(option.value);
+    }
+    return (_jsxs("div", { ref: rootRef, className: "relative", children: [_jsx("span", { id: labelId, className: "block font-mono text-xs uppercase tracking-wider mb-2", style: { color: 'var(--m3-secondary)' }, children: "Type" }), _jsxs("button", { ref: buttonRef, id: buttonId, type: "button", "aria-haspopup": "listbox", "aria-expanded": open, "aria-labelledby": `${labelId} ${buttonId}`, onClick: () => setOpen((o) => !o), className: "w-full flex items-center gap-3 text-left rounded-xl px-3 py-2 focus-ring", style: { background: 'var(--m3-surface-container-lowest)', border: '1px solid var(--m3-outline-variant)', color: 'var(--m3-on-surface)' }, children: [_jsx(TypeIcon, { icon: selected.icon }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "block text-sm font-semibold", children: selected.label }), _jsx("span", { className: "block text-xs truncate", style: { color: 'var(--m3-secondary)' }, children: selected.hint })] }), _jsx("span", { className: "material-symbols-outlined", "aria-hidden": "true", style: { color: 'var(--m3-secondary)' }, children: "unfold_more" })] }), open && (_jsx("div", { className: "absolute z-10 left-0 right-0 mt-1.5 rounded-xl overflow-hidden shadow-xl", style: { background: 'var(--m3-surface-container-low)', border: '1px solid var(--m3-outline-variant)' }, children: _jsx("div", { role: "listbox", "aria-labelledby": labelId, className: "max-h-72 overflow-auto p-1.5", children: vaultTypeOptions().map((t) => {
+                        const disabled = t.value === null;
+                        const isSelected = t.value === value;
+                        return (_jsxs("button", { type: "button", role: "option", "aria-selected": isSelected, "aria-disabled": disabled, onClick: () => pick(t), className: `w-full flex items-center gap-3 text-left rounded-lg px-2 py-1.5 focus-ring ${disabled ? 'opacity-40 cursor-not-allowed' : 'hover:bg-[var(--m3-surface-container)]'} ${isSelected ? 'selection-active' : ''}`, style: { border: '1px solid transparent' }, children: [_jsx(TypeIcon, { icon: t.icon }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "block text-sm font-semibold", children: t.label }), _jsx("span", { className: "block text-xs truncate opacity-75", children: t.hint })] })] }, t.label));
+                    }) }) }))] }));
+}
+//# sourceMappingURL=VaultTypePicker.js.map