@burdenoff/microfe-auth 2026.520.1 → 2026.521.1

package/dist/auth/pages/SsoConfigPage.js

@@ -8,11 +8,12 @@ import { useCallback as c, useEffect as l, useRef as u, useState as d } from "re
 import { useNavigate as f } from "react-router-dom";
 import { useI18n as p } from "@burdenoff/fe-libs/shared/providers/shell";
 import { Fragment as m, jsx as h, jsxs as g } from "react/jsx-runtime";
+import { useFeatureFlagDetails as _ } from "@burdenoff/fe-libs/shared/feature-flags";
 //#region src/auth/pages/SsoConfigPage.tsx
-var _ = async (e) => {
+var v = async (e) => {
 	o("light"), s(await a(e) ? "success" : "error");
 };
-function v(e) {
+function y(e) {
 	try {
 		let t = new DOMParser().parseFromString(e, "text/xml"), n = t.querySelector("parsererror");
 		if (n) return console.error("XML parse error:", n.textContent), null;
@@ -45,11 +46,11 @@ function v(e) {
 		return console.error("Failed to parse SAML metadata:", e), null;
 	}
 }
-function y() {
-	let a = f(), { canManageSsoConfig: y, isLoading: ee } = t(), b = u(null), { ssoConfig: x, oidcConfig: S, isLoading: C, isSaving: w, isDeleting: T, saveSsoConfig: E, deleteSsoConfig: D } = e("burdenoff.com"), { t: O } = p(), k = c((e, t) => {
-		let n = O(e);
+function b() {
+	let a = f(), { canManageSsoConfig: b, isLoading: ee } = t(), te = _("workspace.auth.enterprise-sso")?.value === !0, x = u(null), { ssoConfig: S, oidcConfig: C, isLoading: w, isSaving: T, isDeleting: E, saveSsoConfig: D, deleteSsoConfig: O } = e("burdenoff.com"), { t: k } = p(), A = c((e, t) => {
+		let n = k(e);
 		return n === e ? t : n;
-	}, [O]), [A, j] = d("saml"), [M, N] = d(!1), [P, F] = d(!1), [I, L] = d(null), [R, z] = d(null), [B, V] = d(""), [H, U] = d(!1), [W, G] = d(!1), [K, q] = d({
+	}, [k]), [j, M] = d("saml"), [N, P] = d(!1), [ne, F] = d(!1), [I, L] = d(null), [R, z] = d(null), [B, V] = d(""), [H, U] = d(!1), [W, G] = d(!1), [K, q] = d({
 		client_name: "",
 		redirect_uris: "",
 		grant_types: ["authorization_code", "refresh_token"],
@@ -62,37 +63,37 @@ function y() {
 		enabled: !1
 	});
 	return l(() => {
-		x && $({
-			entityId: x.entityId || "",
-			ssoUrl: x.ssoUrl || "",
-			sloUrl: x.sloUrl || "",
-			certificate: x.certificate || "",
-			enabled: x.enabled || !1
+		S && $({
+			entityId: S.entityId || "",
+			ssoUrl: S.ssoUrl || "",
+			sloUrl: S.sloUrl || "",
+			certificate: S.certificate || "",
+			enabled: S.enabled || !1
 		});
-	}, [x]), ee ? /* @__PURE__ */ h("div", {
+	}, [S]), ee ? /* @__PURE__ */ h("div", {
 		className: "max-w-5xl mx-auto p-6",
 		children: /* @__PURE__ */ g("div", {
 			className: "text-center py-16",
 			children: [/* @__PURE__ */ h(r, { className: "w-8 h-8 mx-auto text-text-secondary animate-spin" }), /* @__PURE__ */ h("p", {
 				className: "mt-4 text-text-secondary",
-				children: k("auth.sso.loadingPermissions", "Loading permissions...")
+				children: A("auth.sso.loadingPermissions", "Loading permissions...")
 			})]
 		})
-	}) : y ? /* @__PURE__ */ g("div", {
+	}) : b ? te ? /* @__PURE__ */ g("div", {
 		className: "max-w-5xl mx-auto p-6",
 		children: [
 			/* @__PURE__ */ h(i, {
-				open: P,
+				open: ne,
 				onOpenChange: F,
-				title: k("auth.sso.deleteConfirmTitle", "Delete SSO configuration?"),
-				description: k("auth.sso.deleteConfirmDesc", "Users will immediately lose the ability to sign in with this SSO setup until a new configuration is saved."),
-				confirmText: k("auth.sso.deleteConfirmButton", "Delete configuration"),
+				title: A("auth.sso.deleteConfirmTitle", "Delete SSO configuration?"),
+				description: A("auth.sso.deleteConfirmDesc", "Users will immediately lose the ability to sign in with this SSO setup until a new configuration is saved."),
+				confirmText: A("auth.sso.deleteConfirmButton", "Delete configuration"),
 				variant: "danger",
-				isPending: T,
+				isPending: E,
 				onConfirm: async () => {
 					L(null), z(null), o("medium");
 					try {
-						await D(), s("success"), z(k("auth.sso.deleteSuccess", "SSO configuration deleted successfully.")), F(!1), $({
+						await O(), s("success"), z(A("auth.sso.deleteSuccess", "SSO configuration deleted successfully.")), F(!1), $({
 							entityId: "",
 							ssoUrl: "",
 							sloUrl: "",
@@ -100,7 +101,7 @@ function y() {
 							enabled: !1
 						});
 					} catch (e) {
-						s("error"), L(e instanceof Error ? e.message : k("auth.sso.deleteFailed", "Failed to delete configuration"));
+						s("error"), L(e instanceof Error ? e.message : A("auth.sso.deleteFailed", "Failed to delete configuration"));
 					}
 				}
 			}),
@@ -110,7 +111,7 @@ function y() {
 					className: "flex items-center gap-4",
 					children: [/* @__PURE__ */ h("button", {
 						onClick: () => a("/auth/security"),
-						"aria-label": k("auth.sso.backToSecurity", "Back to Security"),
+						"aria-label": A("auth.sso.backToSecurity", "Back to Security"),
 						className: "p-2 rounded-lg hover:bg-bg-sunken transition-colors",
 						children: /* @__PURE__ */ h("svg", {
 							className: "w-5 h-5 text-text-secondary",
@@ -127,31 +128,31 @@ function y() {
 						})
 					}), /* @__PURE__ */ g("div", { children: [/* @__PURE__ */ h("h1", {
 						className: "text-2xl font-semibold text-text-primary",
-						children: k("auth.sso.title", "Single Sign-On (SSO)")
+						children: A("auth.sso.title", "Single Sign-On (SSO)")
 					}), /* @__PURE__ */ h("p", {
 						className: "text-text-secondary mt-1",
-						children: k("auth.sso.description", "Configure enterprise SSO with SAML 2.0 or OIDC")
+						children: A("auth.sso.description", "Configure enterprise SSO with SAML 2.0 or OIDC")
 					})] })]
-				}), x && /* @__PURE__ */ g("div", {
+				}), S && /* @__PURE__ */ g("div", {
 					className: "flex items-center gap-3",
 					children: [/* @__PURE__ */ h("span", {
 						className: `px-3 py-1 rounded-full text-sm font-medium ${Q.enabled ? "bg-status-success-bg-subtle text-status-success-text" : "bg-bg-sunken text-text-secondary"}`,
-						children: Q.enabled ? k("auth.sso.enabled", "Enabled") : k("auth.sso.disabled", "Disabled")
+						children: Q.enabled ? A("auth.sso.enabled", "Enabled") : A("auth.sso.disabled", "Disabled")
 					}), /* @__PURE__ */ h("button", {
 						onClick: async () => {
 							L(null);
 							try {
-								await E({
+								await D({
 									...Q,
 									enabled: !Q.enabled
-								}), z(Q.enabled ? k("auth.sso.ssoDisabled", "SSO disabled") : k("auth.sso.ssoEnabled", "SSO enabled"));
+								}), z(Q.enabled ? A("auth.sso.ssoDisabled", "SSO disabled") : A("auth.sso.ssoEnabled", "SSO enabled"));
 							} catch (e) {
-								L(e instanceof Error ? e.message : k("auth.sso.statusUpdateFailed", "Failed to update status"));
+								L(e instanceof Error ? e.message : A("auth.sso.statusUpdateFailed", "Failed to update status"));
 							}
 						},
-						disabled: w,
+						disabled: T,
 						className: "px-4 py-2 rounded-lg border border-border-default text-text-primary hover:bg-bg-sunken transition-colors text-sm font-medium",
-						children: Q.enabled ? k("auth.sso.disable", "Disable") : k("auth.sso.enable", "Enable")
+						children: Q.enabled ? A("auth.sso.disable", "Disable") : A("auth.sso.enable", "Enable")
 					})]
 				})]
 			}),
@@ -165,7 +166,7 @@ function y() {
 					}), /* @__PURE__ */ h("button", {
 						onClick: () => L(null),
 						className: "mt-2 text-sm text-status-error-text hover:underline",
-						children: k("auth.sso.dismiss", "Dismiss")
+						children: A("auth.sso.dismiss", "Dismiss")
 					})]
 				})]
 			}),
@@ -188,7 +189,7 @@ function y() {
 					}), /* @__PURE__ */ h("button", {
 						onClick: () => z(null),
 						className: "mt-2 text-sm text-status-success-text hover:underline",
-						children: k("auth.sso.dismiss", "Dismiss")
+						children: A("auth.sso.dismiss", "Dismiss")
 					})]
 				})]
 			}),
@@ -199,42 +200,42 @@ function y() {
 					children: [
 						{
 							id: "saml",
-							label: k("auth.sso.samlTab", "SAML 2.0"),
+							label: A("auth.sso.samlTab", "SAML 2.0"),
 							icon: "🔐"
 						},
 						{
 							id: "oidc",
-							label: k("auth.sso.oidcTab", "OIDC Provider"),
+							label: A("auth.sso.oidcTab", "OIDC Provider"),
 							icon: "🌐"
 						},
 						{
 							id: "clients",
-							label: k("auth.sso.clientsTab", "OIDC Clients"),
+							label: A("auth.sso.clientsTab", "OIDC Clients"),
 							icon: "🔑"
 						},
 						{
 							id: "test",
-							label: k("auth.sso.testTab", "Test SSO"),
+							label: A("auth.sso.testTab", "Test SSO"),
 							icon: "🧪"
 						}
 					].map((e) => /* @__PURE__ */ g("button", {
-						onClick: () => j(e.id),
-						className: `pb-3 text-sm font-medium transition-colors relative ${A === e.id ? "text-text-link" : "text-text-secondary hover:text-text-primary"}`,
+						onClick: () => M(e.id),
+						className: `pb-3 text-sm font-medium transition-colors relative ${j === e.id ? "text-text-link" : "text-text-secondary hover:text-text-primary"}`,
 						children: [/* @__PURE__ */ g("span", {
 							className: "flex items-center gap-2",
 							children: [/* @__PURE__ */ h("span", { children: e.icon }), e.label]
-						}), A === e.id && /* @__PURE__ */ h("span", { className: "absolute bottom-0 left-0 right-0 h-0.5 bg-action-primary-bg" })]
+						}), j === e.id && /* @__PURE__ */ h("span", { className: "absolute bottom-0 left-0 right-0 h-0.5 bg-action-primary-bg" })]
 					}, e.id))
 				})
 			}),
-			C && /* @__PURE__ */ g("div", {
+			w && /* @__PURE__ */ g("div", {
 				className: "flex items-center justify-center py-12",
 				children: [/* @__PURE__ */ h(r, { className: "w-8 h-8 text-text-link animate-spin" }), /* @__PURE__ */ h("span", {
 					className: "ml-3 text-text-secondary",
-					children: k("auth.sso.loadingConfig", "Loading configuration...")
+					children: A("auth.sso.loadingConfig", "Loading configuration...")
 				})]
 			}),
-			!C && A === "saml" && /* @__PURE__ */ g("div", {
+			!w && j === "saml" && /* @__PURE__ */ g("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ g("div", {
@@ -242,18 +243,18 @@ function y() {
 						children: [
 							/* @__PURE__ */ h("h3", {
 								className: "font-medium text-status-info-text mb-2",
-								children: k("auth.sso.samlConfigTitle", "SAML 2.0 Configuration")
+								children: A("auth.sso.samlConfigTitle", "SAML 2.0 Configuration")
 							}),
 							/* @__PURE__ */ h("p", {
 								className: "text-sm text-status-info-text",
-								children: k("auth.sso.samlConfigDesc", "Configure your Identity Provider (IdP) to enable enterprise SSO. You'll need to get the following information from your IdP (Okta, Azure AD, OneLogin, etc.):")
+								children: A("auth.sso.samlConfigDesc", "Configure your Identity Provider (IdP) to enable enterprise SSO. You'll need to get the following information from your IdP (Okta, Azure AD, OneLogin, etc.):")
 							}),
 							/* @__PURE__ */ g("ul", {
 								className: "mt-2 text-sm text-status-info-text list-disc list-inside",
 								children: [
-									/* @__PURE__ */ h("li", { children: k("auth.sso.entityIdItem", "Entity ID (Issuer URL)") }),
-									/* @__PURE__ */ h("li", { children: k("auth.sso.ssoUrlItem", "SSO URL (Login URL)") }),
-									/* @__PURE__ */ h("li", { children: k("auth.sso.certificateItem", "X.509 Certificate") })
+									/* @__PURE__ */ h("li", { children: A("auth.sso.entityIdItem", "Entity ID (Issuer URL)") }),
+									/* @__PURE__ */ h("li", { children: A("auth.sso.ssoUrlItem", "SSO URL (Login URL)") }),
+									/* @__PURE__ */ h("li", { children: A("auth.sso.certificateItem", "X.509 Certificate") })
 								]
 							})
 						]
@@ -263,11 +264,11 @@ function y() {
 						children: [
 							/* @__PURE__ */ h("h3", {
 								className: "text-lg font-medium text-text-primary mb-4",
-								children: k("auth.sso.importMetadata", "Import IdP Metadata")
+								children: A("auth.sso.importMetadata", "Import IdP Metadata")
 							}),
 							/* @__PURE__ */ h("p", {
 								className: "text-sm text-text-secondary mb-4",
-								children: k("auth.sso.importMetadataDesc", "Automatically configure SSO by importing your IdP's metadata XML file or URL.")
+								children: A("auth.sso.importMetadataDesc", "Automatically configure SSO by importing your IdP's metadata XML file or URL.")
 							}),
 							/* @__PURE__ */ g("div", {
 								className: "grid grid-cols-1 md:grid-cols-2 gap-6",
@@ -276,10 +277,10 @@ function y() {
 									children: [
 										/* @__PURE__ */ h("label", {
 											className: "block text-sm font-medium text-text-primary",
-											children: k("auth.sso.uploadFile", "Upload Metadata File")
+											children: A("auth.sso.uploadFile", "Upload Metadata File")
 										}),
 										/* @__PURE__ */ h("input", {
-											ref: b,
+											ref: x,
 											type: "file",
 											accept: ".xml,application/xml,text/xml",
 											onChange: async (e) => {
@@ -287,18 +288,18 @@ function y() {
 												if (t) {
 													L(null), U(!0);
 													try {
-														let e = v(await t.text());
+														let e = y(await t.text());
 														e ? ($({
 															...Q,
 															entityId: e.entityId,
 															ssoUrl: e.ssoUrl,
 															sloUrl: e.sloUrl || "",
 															certificate: e.certificate
-														}), z(k("auth.sso.importSuccess", "SAML metadata imported successfully! Review and save the configuration.")), N(!0)) : L(k("auth.sso.parseError", "Failed to parse SAML metadata. Make sure the file contains valid IdP metadata XML."));
+														}), z(A("auth.sso.importSuccess", "SAML metadata imported successfully! Review and save the configuration.")), P(!0)) : L(A("auth.sso.parseError", "Failed to parse SAML metadata. Make sure the file contains valid IdP metadata XML."));
 													} catch {
-														L(k("auth.sso.readError", "Failed to read metadata file"));
+														L(A("auth.sso.readError", "Failed to read metadata file"));
 													} finally {
-														U(!1), b.current && (b.current.value = "");
+														U(!1), x.current && (x.current.value = "");
 													}
 												}
 											},
@@ -321,7 +322,7 @@ function y() {
 												})
 											}), /* @__PURE__ */ h("span", {
 												className: "text-sm text-text-secondary",
-												children: H ? k("auth.sso.importing", "Importing...") : k("auth.sso.chooseFile", "Choose XML file")
+												children: H ? A("auth.sso.importing", "Importing...") : A("auth.sso.chooseFile", "Choose XML file")
 											})]
 										})
 									]
@@ -329,7 +330,7 @@ function y() {
 									className: "space-y-3",
 									children: [/* @__PURE__ */ h("label", {
 										className: "block text-sm font-medium text-text-primary",
-										children: k("auth.sso.fetchFromUrl", "Fetch from URL")
+										children: A("auth.sso.fetchFromUrl", "Fetch from URL")
 									}), /* @__PURE__ */ g("div", {
 										className: "flex gap-2",
 										children: [/* @__PURE__ */ h("input", {
@@ -338,29 +339,29 @@ function y() {
 											value: B,
 											onChange: (e) => V(e.target.value),
 											placeholder: "https://idp.example.com/metadata.xml",
-											"aria-label": k("auth.sso.fetchFromUrl", "Fetch from URL"),
+											"aria-label": A("auth.sso.fetchFromUrl", "Fetch from URL"),
 											className: "flex-1 px-4 py-2.5 border border-border-default rounded-xl bg-bg-surface text-text-primary placeholder-text-tertiary focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all text-sm"
 										}), /* @__PURE__ */ g("button", {
 											type: "button",
 											onClick: async () => {
 												if (!B) {
-													L(k("auth.sso.enterUrl", "Please enter a metadata URL"));
+													L(A("auth.sso.enterUrl", "Please enter a metadata URL"));
 													return;
 												}
 												L(null), U(!0);
 												try {
 													let e = await fetch(B);
 													if (!e.ok) throw Error(`Failed to fetch: ${e.statusText}`);
-													let t = v(await e.text());
+													let t = y(await e.text());
 													t ? ($({
 														...Q,
 														entityId: t.entityId,
 														ssoUrl: t.ssoUrl,
 														sloUrl: t.sloUrl || "",
 														certificate: t.certificate
-													}), z(k("auth.sso.importSuccessFromUrl", "SAML metadata imported successfully! Review and save the configuration.")), N(!0), V("")) : L(k("auth.sso.parseUrlError", "Failed to parse SAML metadata from URL."));
+													}), z(A("auth.sso.importSuccessFromUrl", "SAML metadata imported successfully! Review and save the configuration.")), P(!0), V("")) : L(A("auth.sso.parseUrlError", "Failed to parse SAML metadata from URL."));
 												} catch (e) {
-													L(e instanceof Error ? e.message : k("auth.sso.fetchError", "Failed to fetch metadata from URL"));
+													L(e instanceof Error ? e.message : A("auth.sso.fetchError", "Failed to fetch metadata from URL"));
 												} finally {
 													U(!1);
 												}
@@ -378,7 +379,7 @@ function y() {
 													strokeWidth: 2,
 													d: "M4 16v1a3 3 0 003 3h10a3 3 0 003-3v-1m-4-4l-4 4m0 0l-4-4m4 4V4"
 												})
-											}), k("auth.sso.fetch", "Fetch")]
+											}), A("auth.sso.fetch", "Fetch")]
 										})]
 									})]
 								})]
@@ -390,39 +391,39 @@ function y() {
 						children: [
 							/* @__PURE__ */ h("h3", {
 								className: "text-lg font-medium text-text-primary mb-4",
-								children: k("auth.sso.spMetadata", "Service Provider (SP) Metadata")
+								children: A("auth.sso.spMetadata", "Service Provider (SP) Metadata")
 							}),
 							/* @__PURE__ */ h("p", {
 								className: "text-sm text-text-secondary mb-4",
-								children: k("auth.sso.spMetadataDesc", "Provide these values to your Identity Provider when setting up the SAML integration:")
+								children: A("auth.sso.spMetadataDesc", "Provide these values to your Identity Provider when setting up the SAML integration:")
 							}),
 							/* @__PURE__ */ g("div", {
 								className: "space-y-4",
 								children: [/* @__PURE__ */ g("div", { children: [/* @__PURE__ */ h("label", {
 									className: "block text-sm font-medium text-text-primary mb-1",
-									children: k("auth.sso.spEntityId", "SP Entity ID / Audience URI")
+									children: A("auth.sso.spEntityId", "SP Entity ID / Audience URI")
 								}), /* @__PURE__ */ g("div", {
 									className: "flex items-center gap-2",
 									children: [/* @__PURE__ */ g("code", {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-sunken text-sm text-text-primary font-mono",
 										children: [window.location.origin, "/auth/saml/metadata"]
 									}), /* @__PURE__ */ h("button", {
-										onClick: () => void _(`${window.location.origin}/auth/saml/metadata`),
+										onClick: () => void v(`${window.location.origin}/auth/saml/metadata`),
 										className: "px-3 py-2 rounded-lg border border-border-default text-text-secondary hover:bg-bg-sunken",
-										children: k("auth.sso.copy", "Copy")
+										children: A("auth.sso.copy", "Copy")
 									})]
 								})] }), /* @__PURE__ */ g("div", { children: [/* @__PURE__ */ h("label", {
 									className: "block text-sm font-medium text-text-primary mb-1",
-									children: k("auth.sso.acsUrl", "Assertion Consumer Service (ACS) URL")
+									children: A("auth.sso.acsUrl", "Assertion Consumer Service (ACS) URL")
 								}), /* @__PURE__ */ g("div", {
 									className: "flex items-center gap-2",
 									children: [/* @__PURE__ */ g("code", {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-sunken text-sm text-text-primary font-mono",
 										children: [window.location.origin, "/auth/sso/callback"]
 									}), /* @__PURE__ */ h("button", {
-										onClick: () => void _(`${window.location.origin}/auth/sso/callback`),
+										onClick: () => void v(`${window.location.origin}/auth/sso/callback`),
 										className: "px-3 py-2 rounded-lg border border-border-default text-text-secondary hover:bg-bg-sunken",
-										children: k("auth.sso.copy", "Copy")
+										children: A("auth.sso.copy", "Copy")
 									})]
 								})] })]
 							})
@@ -432,9 +433,9 @@ function y() {
 						onSubmit: async (e) => {
 							e.preventDefault(), L(null), z(null);
 							try {
-								await E(Q), z(k("auth.sso.saveSuccess", "SSO configuration saved successfully!")), N(!1);
+								await D(Q), z(A("auth.sso.saveSuccess", "SSO configuration saved successfully!")), P(!1);
 							} catch (e) {
-								L(e instanceof Error ? e.message : k("auth.sso.saveFailed", "Failed to save configuration"));
+								L(e instanceof Error ? e.message : A("auth.sso.saveFailed", "Failed to save configuration"));
 							}
 						},
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
@@ -443,12 +444,12 @@ function y() {
 								className: "flex items-center justify-between mb-6",
 								children: [/* @__PURE__ */ h("h3", {
 									className: "text-lg font-medium text-text-primary",
-									children: k("auth.sso.idpSettings", "Identity Provider (IdP) Settings")
-								}), !M && x && /* @__PURE__ */ h("button", {
+									children: A("auth.sso.idpSettings", "Identity Provider (IdP) Settings")
+								}), !N && S && /* @__PURE__ */ h("button", {
 									type: "button",
-									onClick: () => N(!0),
+									onClick: () => P(!0),
 									className: "px-4 py-2 rounded-lg border border-status-info-border text-text-link hover:bg-status-info-bg-subtle text-sm font-medium transition-colors",
-									children: k("auth.sso.editConfig", "Edit Configuration")
+									children: A("auth.sso.editConfig", "Edit Configuration")
 								})]
 							}),
 							/* @__PURE__ */ g("div", {
@@ -459,7 +460,7 @@ function y() {
 											htmlFor: "sso-entity-id",
 											className: "block text-sm font-medium text-text-primary mb-2",
 											children: [
-												k("auth.sso.idpEntityId", "IdP Entity ID / Issuer URL"),
+												A("auth.sso.idpEntityId", "IdP Entity ID / Issuer URL"),
 												" ",
 												/* @__PURE__ */ h("span", {
 													className: "text-status-error-text",
@@ -476,8 +477,8 @@ function y() {
 												...Q,
 												entityId: e.target.value
 											}),
-											disabled: !M && !!x,
-											placeholder: k("auth.sso.idpEntityIdPlaceholder", "https://your-idp.example.com/saml/metadata"),
+											disabled: !N && !!S,
+											placeholder: A("auth.sso.idpEntityIdPlaceholder", "https://your-idp.example.com/saml/metadata"),
 											required: !0,
 											"aria-required": "true",
 											"aria-describedby": "sso-entity-id-hint",
@@ -486,7 +487,7 @@ function y() {
 										/* @__PURE__ */ h("p", {
 											id: "sso-entity-id-hint",
 											className: "mt-1 text-xs text-text-secondary",
-											children: k("auth.sso.idpEntityIdHelper", "The unique identifier of your Identity Provider")
+											children: A("auth.sso.idpEntityIdHelper", "The unique identifier of your Identity Provider")
 										})
 									] }),
 									/* @__PURE__ */ g("div", { children: [
@@ -494,7 +495,7 @@ function y() {
 											htmlFor: "sso-sso-url",
 											className: "block text-sm font-medium text-text-primary mb-2",
 											children: [
-												k("auth.sso.ssoUrl", "SSO URL (Login URL)"),
+												A("auth.sso.ssoUrl", "SSO URL (Login URL)"),
 												" ",
 												/* @__PURE__ */ h("span", {
 													className: "text-status-error-text",
@@ -511,8 +512,8 @@ function y() {
 												...Q,
 												ssoUrl: e.target.value
 											}),
-											disabled: !M && !!x,
-											placeholder: k("auth.sso.ssoUrlPlaceholder", "https://your-idp.example.com/saml/sso"),
+											disabled: !N && !!S,
+											placeholder: A("auth.sso.ssoUrlPlaceholder", "https://your-idp.example.com/saml/sso"),
 											required: !0,
 											"aria-required": "true",
 											"aria-describedby": "sso-sso-url-hint",
@@ -521,14 +522,14 @@ function y() {
 										/* @__PURE__ */ h("p", {
 											id: "sso-sso-url-hint",
 											className: "mt-1 text-xs text-text-secondary",
-											children: k("auth.sso.ssoUrlHelper", "The URL where users are redirected to authenticate")
+											children: A("auth.sso.ssoUrlHelper", "The URL where users are redirected to authenticate")
 										})
 									] }),
 									/* @__PURE__ */ g("div", { children: [
 										/* @__PURE__ */ h("label", {
 											htmlFor: "sso-slo-url",
 											className: "block text-sm font-medium text-text-primary mb-2",
-											children: k("auth.sso.sloUrl", "Single Logout (SLO) URL")
+											children: A("auth.sso.sloUrl", "Single Logout (SLO) URL")
 										}),
 										/* @__PURE__ */ h("input", {
 											id: "sso-slo-url",
@@ -538,15 +539,15 @@ function y() {
 												...Q,
 												sloUrl: e.target.value
 											}),
-											disabled: !M && !!x,
-											placeholder: k("auth.sso.sloUrlPlaceholder", "https://your-idp.example.com/saml/slo"),
+											disabled: !N && !!S,
+											placeholder: A("auth.sso.sloUrlPlaceholder", "https://your-idp.example.com/saml/slo"),
 											"aria-describedby": "sso-slo-url-hint",
 											className: "block w-full px-4 py-3 border border-border-default rounded-xl bg-bg-surface text-text-primary placeholder-text-tertiary focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg disabled:opacity-60 disabled:cursor-not-allowed transition-all"
 										}),
 										/* @__PURE__ */ h("p", {
 											id: "sso-slo-url-hint",
 											className: "mt-1 text-xs text-text-secondary",
-											children: k("auth.sso.sloUrlHelper", "Optional: URL for single logout across all applications")
+											children: A("auth.sso.sloUrlHelper", "Optional: URL for single logout across all applications")
 										})
 									] }),
 									/* @__PURE__ */ g("div", { children: [
@@ -554,7 +555,7 @@ function y() {
 											htmlFor: "sso-certificate",
 											className: "block text-sm font-medium text-text-primary mb-2",
 											children: [
-												k("auth.sso.certificate", "X.509 Certificate"),
+												A("auth.sso.certificate", "X.509 Certificate"),
 												" ",
 												/* @__PURE__ */ h("span", {
 													className: "text-status-error-text",
@@ -570,8 +571,8 @@ function y() {
 												...Q,
 												certificate: e.target.value
 											}),
-											disabled: !M && !!x,
-											placeholder: k("auth.sso.certificatePlaceholder", "-----BEGIN CERTIFICATE-----\nMIIDpDCCAoygAwIBAgIGAX...\n-----END CERTIFICATE-----"),
+											disabled: !N && !!S,
+											placeholder: A("auth.sso.certificatePlaceholder", "-----BEGIN CERTIFICATE-----\nMIIDpDCCAoygAwIBAgIGAX...\n-----END CERTIFICATE-----"),
 											required: !0,
 											"aria-required": "true",
 											"aria-describedby": "sso-certificate-hint",
@@ -581,67 +582,67 @@ function y() {
 										/* @__PURE__ */ h("p", {
 											id: "sso-certificate-hint",
 											className: "mt-1 text-xs text-text-secondary",
-											children: k("auth.sso.certificateHelper", "The public X.509 certificate from your IdP for signature verification")
+											children: A("auth.sso.certificateHelper", "The public X.509 certificate from your IdP for signature verification")
 										})
 									] })
 								]
 							}),
-							(M || !x) && /* @__PURE__ */ g("div", {
+							(N || !S) && /* @__PURE__ */ g("div", {
 								className: "mt-6 flex items-center gap-3",
 								children: [/* @__PURE__ */ h("button", {
 									type: "submit",
-									disabled: w,
+									disabled: T,
 									className: "auth-primary-button flex items-center gap-2 px-6 py-3 font-medium",
-									children: w ? /* @__PURE__ */ g(m, { children: [/* @__PURE__ */ h(r, { className: "w-4 h-4 animate-spin" }), k("auth.sso.saving", "Saving...")] }) : k("auth.sso.saveConfig", "Save Configuration")
-								}), M && /* @__PURE__ */ h("button", {
+									children: T ? /* @__PURE__ */ g(m, { children: [/* @__PURE__ */ h(r, { className: "w-4 h-4 animate-spin" }), A("auth.sso.saving", "Saving...")] }) : A("auth.sso.saveConfig", "Save Configuration")
+								}), N && /* @__PURE__ */ h("button", {
 									type: "button",
 									onClick: () => {
-										N(!1), x && $({
-											entityId: x.entityId || "",
-											ssoUrl: x.ssoUrl || "",
-											sloUrl: x.sloUrl || "",
-											certificate: x.certificate || "",
-											enabled: x.enabled || !1
+										P(!1), S && $({
+											entityId: S.entityId || "",
+											ssoUrl: S.ssoUrl || "",
+											sloUrl: S.sloUrl || "",
+											certificate: S.certificate || "",
+											enabled: S.enabled || !1
 										});
 									},
 									className: "px-6 py-3 rounded-xl border border-border-default text-text-primary font-medium hover:bg-bg-sunken transition-colors",
-									children: k("auth.sso.cancel", "Cancel")
+									children: A("auth.sso.cancel", "Cancel")
 								})]
 							})
 						]
 					}),
-					x && /* @__PURE__ */ g("div", {
+					S && /* @__PURE__ */ g("div", {
 						className: "p-6 rounded-xl border border-status-error-border bg-status-error-bg-subtle",
 						children: [
 							/* @__PURE__ */ h("h3", {
 								className: "text-lg font-medium text-status-error-text mb-2",
-								children: k("auth.sso.dangerZone", "Danger Zone")
+								children: A("auth.sso.dangerZone", "Danger Zone")
 							}),
 							/* @__PURE__ */ h("p", {
 								className: "text-sm text-status-error-text mb-4",
-								children: k("auth.sso.dangerZoneDesc", "Deleting the SSO configuration will prevent users from signing in with their enterprise credentials. This action cannot be undone.")
+								children: A("auth.sso.dangerZoneDesc", "Deleting the SSO configuration will prevent users from signing in with their enterprise credentials. This action cannot be undone.")
 							}),
 							/* @__PURE__ */ h("button", {
 								onClick: () => F(!0),
-								disabled: T,
+								disabled: E,
 								className: "px-4 py-2 rounded-lg bg-status-error-bg text-white font-medium hover:bg-status-error-bg-hover disabled:opacity-50 transition-colors flex items-center gap-2",
-								children: T ? /* @__PURE__ */ g(m, { children: [/* @__PURE__ */ h(r, { className: "w-4 h-4 animate-spin" }), k("auth.sso.deleting", "Deleting...")] }) : k("auth.sso.deleteConfig", "Delete SSO Configuration")
+								children: E ? /* @__PURE__ */ g(m, { children: [/* @__PURE__ */ h(r, { className: "w-4 h-4 animate-spin" }), A("auth.sso.deleting", "Deleting...")] }) : A("auth.sso.deleteConfig", "Delete SSO Configuration")
 							})
 						]
 					})
 				]
 			}),
-			!C && A === "oidc" && /* @__PURE__ */ g("div", {
+			!w && j === "oidc" && /* @__PURE__ */ g("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ g("div", {
 						className: "p-4 rounded-xl bg-accent-purple-subtle border border-accent-purple-subtle",
 						children: [/* @__PURE__ */ h("h3", {
 							className: "font-medium text-accent-purple mb-2",
-							children: k("auth.sso.oidcProviderInfo", "OIDC Provider Information")
+							children: A("auth.sso.oidcProviderInfo", "OIDC Provider Information")
 						}), /* @__PURE__ */ h("p", {
 							className: "text-sm text-accent-purple",
-							children: k("auth.sso.oidcProviderInfoDesc", "Your auth service acts as an OpenID Connect Provider. This allows other applications to authenticate users through your system using standard OAuth 2.0/OIDC flows.")
+							children: A("auth.sso.oidcProviderInfoDesc", "Your auth service acts as an OpenID Connect Provider. This allows other applications to authenticate users through your system using standard OAuth 2.0/OIDC flows.")
 						})]
 					}),
 					/* @__PURE__ */ g("div", {
@@ -649,56 +650,56 @@ function y() {
 						children: [
 							/* @__PURE__ */ h("h3", {
 								className: "text-lg font-medium text-text-primary mb-4",
-								children: k("auth.sso.discoveryEndpoint", "Discovery Endpoint")
+								children: A("auth.sso.discoveryEndpoint", "Discovery Endpoint")
 							}),
 							/* @__PURE__ */ h("p", {
 								className: "text-sm text-text-secondary mb-4",
-								children: k("auth.sso.discoveryEndpointDesc", "Applications can auto-configure by fetching the OpenID Connect Discovery document:")
+								children: A("auth.sso.discoveryEndpointDesc", "Applications can auto-configure by fetching the OpenID Connect Discovery document:")
 							}),
 							/* @__PURE__ */ g("div", {
 								className: "flex items-center gap-2",
 								children: [/* @__PURE__ */ h("code", {
 									className: "flex-1 px-3 py-2 rounded-lg bg-bg-sunken text-sm text-text-primary font-mono break-all",
-									children: S?.issuer ? `${S.issuer}/.well-known/openid-configuration` : "Discovery endpoint unavailable until OIDC is configured"
+									children: C?.issuer ? `${C.issuer}/.well-known/openid-configuration` : "Discovery endpoint unavailable until OIDC is configured"
 								}), /* @__PURE__ */ h("button", {
 									onClick: () => {
-										let e = S?.issuer ? `${S.issuer}/.well-known/openid-configuration` : "";
-										e && _(e);
+										let e = C?.issuer ? `${C.issuer}/.well-known/openid-configuration` : "";
+										e && v(e);
 									},
-									disabled: !S?.issuer,
+									disabled: !C?.issuer,
 									className: "px-3 py-2 rounded-lg border border-border-default text-text-secondary hover:bg-bg-sunken flex-shrink-0",
-									children: k("auth.sso.copy", "Copy")
+									children: A("auth.sso.copy", "Copy")
 								})]
 							})
 						]
 					}),
-					S && /* @__PURE__ */ g("div", {
+					C && /* @__PURE__ */ g("div", {
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [/* @__PURE__ */ h("h3", {
 							className: "text-lg font-medium text-text-primary mb-4",
-							children: k("auth.sso.oidcEndpoints", "OIDC Endpoints")
+							children: A("auth.sso.oidcEndpoints", "OIDC Endpoints")
 						}), /* @__PURE__ */ h("div", {
 							className: "space-y-4",
 							children: [
 								{
-									label: k("auth.sso.issuer", "Issuer"),
-									value: S.issuer
+									label: A("auth.sso.issuer", "Issuer"),
+									value: C.issuer
 								},
 								{
-									label: k("auth.sso.authorizationEndpoint", "Authorization Endpoint"),
-									value: S.authorizationEndpoint
+									label: A("auth.sso.authorizationEndpoint", "Authorization Endpoint"),
+									value: C.authorizationEndpoint
 								},
 								{
-									label: k("auth.sso.tokenEndpoint", "Token Endpoint"),
-									value: S.tokenEndpoint
+									label: A("auth.sso.tokenEndpoint", "Token Endpoint"),
+									value: C.tokenEndpoint
 								},
 								{
-									label: k("auth.sso.userinfoEndpoint", "UserInfo Endpoint"),
-									value: S.userinfoEndpoint
+									label: A("auth.sso.userinfoEndpoint", "UserInfo Endpoint"),
+									value: C.userinfoEndpoint
 								},
 								{
-									label: k("auth.sso.jwksUri", "JWKS URI"),
-									value: S.jwksUri
+									label: A("auth.sso.jwksUri", "JWKS URI"),
+									value: C.jwksUri
 								}
 							].map((e) => /* @__PURE__ */ g("div", {
 								className: "flex items-start gap-4",
@@ -716,32 +717,32 @@ function y() {
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [/* @__PURE__ */ h("h3", {
 							className: "text-lg font-medium text-text-primary mb-4",
-							children: k("auth.sso.supportedFeatures", "Supported Features")
+							children: A("auth.sso.supportedFeatures", "Supported Features")
 						}), /* @__PURE__ */ h("div", {
 							className: "grid grid-cols-2 gap-4",
 							children: [
 								{
-									name: k("auth.sso.featAuthCodePkce", "Authorization Code + PKCE"),
+									name: A("auth.sso.featAuthCodePkce", "Authorization Code + PKCE"),
 									status: !0
 								},
 								{
-									name: k("auth.sso.featClientCreds", "Client Credentials"),
+									name: A("auth.sso.featClientCreds", "Client Credentials"),
 									status: !0
 								},
 								{
-									name: k("auth.sso.featDeviceAuth", "Device Authorization"),
+									name: A("auth.sso.featDeviceAuth", "Device Authorization"),
 									status: !0
 								},
 								{
-									name: k("auth.sso.featRefreshTokens", "Refresh Tokens"),
+									name: A("auth.sso.featRefreshTokens", "Refresh Tokens"),
 									status: !0
 								},
 								{
-									name: k("auth.sso.featTokenIntrospection", "Token Introspection"),
+									name: A("auth.sso.featTokenIntrospection", "Token Introspection"),
 									status: !0
 								},
 								{
-									name: k("auth.sso.featTokenRevocation", "Token Revocation"),
+									name: A("auth.sso.featTokenRevocation", "Token Revocation"),
 									status: !0
 								}
 							].map((e) => /* @__PURE__ */ g("div", {
@@ -755,17 +756,17 @@ function y() {
 					})
 				]
 			}),
-			!C && A === "clients" && /* @__PURE__ */ g("div", {
+			!w && j === "clients" && /* @__PURE__ */ g("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ g("div", {
 						className: "p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border",
 						children: [/* @__PURE__ */ h("h3", {
 							className: "font-medium text-status-warning-text mb-2",
-							children: k("auth.sso.clientManagement", "OIDC Client Management")
+							children: A("auth.sso.clientManagement", "OIDC Client Management")
 						}), /* @__PURE__ */ h("p", {
 							className: "text-sm text-status-warning-text",
-							children: k("auth.sso.clientManagementDesc", "Register applications that can authenticate users through your OIDC provider. Each client gets unique credentials to use in the OAuth 2.0 / OIDC flow.")
+							children: A("auth.sso.clientManagementDesc", "Register applications that can authenticate users through your OIDC provider. Each client gets unique credentials to use in the OAuth 2.0 / OIDC flow.")
 						})]
 					}),
 					X && /* @__PURE__ */ g("div", {
@@ -774,10 +775,10 @@ function y() {
 							className: "flex items-start justify-between mb-4",
 							children: [/* @__PURE__ */ g("div", { children: [/* @__PURE__ */ h("h3", {
 								className: "text-lg font-medium text-status-success-text",
-								children: k("auth.sso.clientCreatedTitle", "Client Created Successfully!")
+								children: A("auth.sso.clientCreatedTitle", "Client Created Successfully!")
 							}), /* @__PURE__ */ h("p", {
 								className: "text-sm text-status-success-text mt-1",
-								children: k("auth.sso.clientCreatedDesc", "Save these credentials securely. The client secret will not be shown again.")
+								children: A("auth.sso.clientCreatedDesc", "Save these credentials securely. The client secret will not be shown again.")
 							})] }), /* @__PURE__ */ h("button", {
 								onClick: () => Z(null),
 								className: "text-status-success-text hover:text-status-success-text",
@@ -799,35 +800,35 @@ function y() {
 							children: [
 								/* @__PURE__ */ g("div", { children: [/* @__PURE__ */ h("label", {
 									className: "block text-xs font-medium text-status-success-text mb-1",
-									children: k("auth.sso.clientId", "Client ID")
+									children: A("auth.sso.clientId", "Client ID")
 								}), /* @__PURE__ */ g("div", {
 									className: "flex gap-2",
 									children: [/* @__PURE__ */ h("code", {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-surface text-sm font-mono border border-status-success-border",
 										children: X.client_id
 									}), /* @__PURE__ */ h("button", {
-										onClick: () => void _(X.client_id),
+										onClick: () => void v(X.client_id),
 										className: "px-3 py-2 rounded-lg bg-status-success-bg text-white text-sm hover:bg-status-success-bg",
-										children: k("auth.sso.copy", "Copy")
+										children: A("auth.sso.copy", "Copy")
 									})]
 								})] }),
 								X.client_secret && /* @__PURE__ */ g("div", { children: [/* @__PURE__ */ h("label", {
 									className: "block text-xs font-medium text-status-success-text mb-1",
-									children: k("auth.sso.clientSecret", "Client Secret (save now!)")
+									children: A("auth.sso.clientSecret", "Client Secret (save now!)")
 								}), /* @__PURE__ */ g("div", {
 									className: "flex gap-2",
 									children: [/* @__PURE__ */ h("code", {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-surface text-sm font-mono border border-status-success-border",
 										children: X.client_secret
 									}), /* @__PURE__ */ h("button", {
-										onClick: () => void _(X.client_secret || ""),
+										onClick: () => void v(X.client_secret || ""),
 										className: "px-3 py-2 rounded-lg bg-status-success-bg text-white text-sm hover:bg-status-success-bg",
-										children: k("auth.sso.copy", "Copy")
+										children: A("auth.sso.copy", "Copy")
 									})]
 								})] }),
 								/* @__PURE__ */ g("div", { children: [/* @__PURE__ */ h("label", {
 									className: "block text-xs font-medium text-status-success-text mb-1",
-									children: k("auth.sso.redirectUris", "Redirect URIs")
+									children: A("auth.sso.redirectUris", "Redirect URIs")
 								}), /* @__PURE__ */ h("code", {
 									className: "block px-3 py-2 rounded-lg bg-bg-surface text-sm font-mono border border-status-success-border",
 									children: X.redirect_uris.join(", ")
@@ -841,7 +842,7 @@ function y() {
 							className: "flex items-center justify-between mb-6",
 							children: [/* @__PURE__ */ h("h3", {
 								className: "text-lg font-medium text-text-primary",
-								children: k("auth.sso.registerClient", "Register New Client")
+								children: A("auth.sso.registerClient", "Register New Client")
 							}), !W && /* @__PURE__ */ g("button", {
 								onClick: () => G(!0),
 								className: "px-4 py-2 rounded-lg bg-action-primary-bg text-white font-medium hover:bg-action-primary-bg-hover transition-colors flex items-center gap-2",
@@ -856,7 +857,7 @@ function y() {
 										strokeWidth: 2,
 										d: "M12 4v16m8-8H4"
 									})
-								}), k("auth.sso.newClient", "New Client")]
+								}), A("auth.sso.newClient", "New Client")]
 							})]
 						}), W ? /* @__PURE__ */ g("div", {
 							className: "space-y-5",
@@ -865,7 +866,7 @@ function y() {
 									htmlFor: "oidc-client-name",
 									className: "block text-sm font-medium text-text-primary mb-2",
 									children: [
-										k("auth.sso.clientName", "Client Name"),
+										A("auth.sso.clientName", "Client Name"),
 										" ",
 										/* @__PURE__ */ h("span", {
 											className: "text-status-error-text",
@@ -881,7 +882,7 @@ function y() {
 										...K,
 										client_name: e.target.value
 									}),
-									placeholder: k("auth.sso.clientNamePlaceholder", "My Application"),
+									placeholder: A("auth.sso.clientNamePlaceholder", "My Application"),
 									"aria-required": "true",
 									className: "block w-full px-4 py-3 border border-border-default rounded-xl bg-bg-surface text-text-primary placeholder-text-tertiary focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all"
 								})] }),
@@ -890,7 +891,7 @@ function y() {
 										htmlFor: "oidc-redirect-uris",
 										className: "block text-sm font-medium text-text-primary mb-2",
 										children: [
-											k("auth.sso.redirectUris", "Redirect URIs"),
+											A("auth.sso.redirectUris", "Redirect URIs"),
 											" ",
 											/* @__PURE__ */ h("span", {
 												className: "text-status-error-text",
@@ -907,7 +908,7 @@ function y() {
 											...K,
 											redirect_uris: e.target.value
 										}),
-										placeholder: k("auth.sso.redirectUrisPlaceholder", "http://localhost:3000/callback, https://app.example.com/callback"),
+										placeholder: A("auth.sso.redirectUrisPlaceholder", "http://localhost:3000/callback, https://app.example.com/callback"),
 										"aria-required": "true",
 										"aria-describedby": "oidc-redirect-uris-hint",
 										className: "block w-full px-4 py-3 border border-border-default rounded-xl bg-bg-surface text-text-primary placeholder-text-tertiary focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all"
@@ -915,12 +916,12 @@ function y() {
 									/* @__PURE__ */ h("p", {
 										id: "oidc-redirect-uris-hint",
 										className: "mt-1 text-xs text-text-secondary",
-										children: k("auth.sso.redirectUrisHelper", "Separate multiple URIs with commas")
+										children: A("auth.sso.redirectUrisHelper", "Separate multiple URIs with commas")
 									})
 								] }),
 								/* @__PURE__ */ g("div", { children: [/* @__PURE__ */ h("label", {
 									className: "block text-sm font-medium text-text-primary mb-2",
-									children: k("auth.sso.grantTypes", "Grant Types")
+									children: A("auth.sso.grantTypes", "Grant Types")
 								}), /* @__PURE__ */ h("div", {
 									className: "flex flex-wrap gap-3",
 									children: [
@@ -951,7 +952,7 @@ function y() {
 								/* @__PURE__ */ g("div", { children: [/* @__PURE__ */ h("label", {
 									htmlFor: "oidc-token-auth-method",
 									className: "block text-sm font-medium text-text-primary mb-2",
-									children: k("auth.sso.tokenEndpointAuth", "Token Endpoint Auth Method")
+									children: A("auth.sso.tokenEndpointAuth", "Token Endpoint Auth Method")
 								}), /* @__PURE__ */ g("select", {
 									id: "oidc-token-auth-method",
 									value: K.token_endpoint_auth_method,
@@ -963,15 +964,15 @@ function y() {
 									children: [
 										/* @__PURE__ */ h("option", {
 											value: "none",
-											children: k("auth.sso.tokenAuthNone", "None (Public Client - SPAs, Mobile Apps)")
+											children: A("auth.sso.tokenAuthNone", "None (Public Client - SPAs, Mobile Apps)")
 										}),
 										/* @__PURE__ */ h("option", {
 											value: "client_secret_basic",
-											children: k("auth.sso.tokenAuthBasic", "Client Secret Basic")
+											children: A("auth.sso.tokenAuthBasic", "Client Secret Basic")
 										}),
 										/* @__PURE__ */ h("option", {
 											value: "client_secret_post",
-											children: k("auth.sso.tokenAuthPost", "Client Secret Post")
+											children: A("auth.sso.tokenAuthPost", "Client Secret Post")
 										})
 									]
 								})] }),
@@ -980,13 +981,13 @@ function y() {
 									children: [/* @__PURE__ */ h("button", {
 										onClick: async () => {
 											if (!K.client_name || !K.redirect_uris) {
-												L(k("auth.sso.clientRequired", "Client name and redirect URI are required"));
+												L(A("auth.sso.clientRequired", "Client name and redirect URI are required"));
 												return;
 											}
 											Y(!0), L(null);
 											try {
-												let e = S?.registrationEndpoint;
-												if (!e) throw Error(k("auth.sso.oidcNotConfigured", "OIDC dynamic client registration is not configured for this environment."));
+												let e = C?.registrationEndpoint;
+												if (!e) throw Error(A("auth.sso.oidcNotConfigured", "OIDC dynamic client registration is not configured for this environment."));
 												let t = await fetch(e, {
 													method: "POST",
 													headers: { "Content-Type": "application/json" },
@@ -1002,21 +1003,21 @@ function y() {
 													let e = await t.json();
 													throw Error(e.error_description || e.error || "Registration failed");
 												}
-												Z(await t.json()), z(k("auth.sso.clientRegistered", "OIDC client registered successfully! Save the client credentials.")), G(!1), q({
+												Z(await t.json()), z(A("auth.sso.clientRegistered", "OIDC client registered successfully! Save the client credentials.")), G(!1), q({
 													client_name: "",
 													redirect_uris: "",
 													grant_types: ["authorization_code", "refresh_token"],
 													token_endpoint_auth_method: "none"
 												});
 											} catch (e) {
-												L(e instanceof Error ? e.message : k("auth.sso.registerFailed", "Failed to register client"));
+												L(e instanceof Error ? e.message : A("auth.sso.registerFailed", "Failed to register client"));
 											} finally {
 												Y(!1);
 											}
 										},
 										disabled: J,
 										className: "auth-primary-button flex items-center gap-2 px-6 py-3 font-medium",
-										children: J ? /* @__PURE__ */ g(m, { children: [/* @__PURE__ */ h(r, { className: "w-4 h-4 animate-spin" }), k("auth.sso.registering", "Registering...")] }) : k("auth.sso.registerClientButton", "Register Client")
+										children: J ? /* @__PURE__ */ g(m, { children: [/* @__PURE__ */ h(r, { className: "w-4 h-4 animate-spin" }), A("auth.sso.registering", "Registering...")] }) : A("auth.sso.registerClientButton", "Register Client")
 									}), /* @__PURE__ */ h("button", {
 										onClick: () => {
 											G(!1), q({
@@ -1027,7 +1028,7 @@ function y() {
 											});
 										},
 										className: "px-6 py-3 rounded-xl border border-border-default text-text-primary font-medium hover:bg-bg-sunken transition-colors",
-										children: k("auth.sso.cancel", "Cancel")
+										children: A("auth.sso.cancel", "Cancel")
 									})]
 								})
 							]
@@ -1046,7 +1047,7 @@ function y() {
 								})
 							}), /* @__PURE__ */ h("p", {
 								className: "text-sm",
-								children: k("auth.sso.emptyClients", "Click \"New Client\" to register an OAuth 2.0 / OIDC client application.")
+								children: A("auth.sso.emptyClients", "Click \"New Client\" to register an OAuth 2.0 / OIDC client application.")
 							})]
 						})]
 					}),
@@ -1054,7 +1055,7 @@ function y() {
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [/* @__PURE__ */ h("h3", {
 							className: "text-lg font-medium text-text-primary mb-4",
-							children: k("auth.sso.preconfiguredClients", "Pre-configured Clients")
+							children: A("auth.sso.preconfiguredClients", "Pre-configured Clients")
 						}), /* @__PURE__ */ h("div", {
 							className: "space-y-4",
 							children: /* @__PURE__ */ g("div", {
@@ -1067,12 +1068,12 @@ function y() {
 											children: "tenant-frontend"
 										}), /* @__PURE__ */ h("span", {
 											className: "px-2 py-1 rounded-full text-xs bg-status-success-bg-subtle text-status-success-text",
-											children: k("auth.sso.active", "Active")
+											children: A("auth.sso.active", "Active")
 										})]
 									}),
 									/* @__PURE__ */ h("p", {
 										className: "text-sm text-text-secondary",
-										children: k("auth.sso.preconfigClientDesc", "Default frontend client for tenant authentication")
+										children: A("auth.sso.preconfigClientDesc", "Default frontend client for tenant authentication")
 									}),
 									/* @__PURE__ */ g("div", {
 										className: "mt-2 flex flex-wrap gap-2",
@@ -1087,7 +1088,7 @@ function y() {
 											}),
 											/* @__PURE__ */ h("span", {
 												className: "px-2 py-0.5 rounded bg-bg-sunken text-xs text-text-primary",
-												children: k("auth.sso.pkceRequired", "PKCE required")
+												children: A("auth.sso.pkceRequired", "PKCE required")
 											})
 										]
 									})
@@ -1097,17 +1098,17 @@ function y() {
 					})
 				]
 			}),
-			!C && A === "test" && /* @__PURE__ */ g("div", {
+			!w && j === "test" && /* @__PURE__ */ g("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ g("div", {
 						className: "p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border",
 						children: [/* @__PURE__ */ h("h3", {
 							className: "font-medium text-status-warning-text mb-2",
-							children: k("auth.sso.testLoginTitle", "Test SSO Login")
+							children: A("auth.sso.testLoginTitle", "Test SSO Login")
 						}), /* @__PURE__ */ h("p", {
 							className: "text-sm text-status-warning-text",
-							children: k("auth.sso.testLoginDesc", "Use this section to test your SSO configuration before rolling it out to users. Make sure your IdP is properly configured with the SP metadata above.")
+							children: A("auth.sso.testLoginDesc", "Use this section to test your SSO configuration before rolling it out to users. Make sure your IdP is properly configured with the SP metadata above.")
 						})]
 					}),
 					/* @__PURE__ */ g("div", {
@@ -1115,15 +1116,15 @@ function y() {
 						children: [
 							/* @__PURE__ */ h("h3", {
 								className: "text-lg font-medium text-text-primary mb-4",
-								children: k("auth.sso.spInitiatedTest", "SP-Initiated Login Test")
+								children: A("auth.sso.spInitiatedTest", "SP-Initiated Login Test")
 							}),
 							/* @__PURE__ */ h("p", {
 								className: "text-sm text-text-secondary mb-4",
-								children: k("auth.sso.spInitiatedTestDesc", "Click the button below to initiate an SSO login flow. You will be redirected to your IdP to authenticate.")
+								children: A("auth.sso.spInitiatedTestDesc", "Click the button below to initiate an SSO login flow. You will be redirected to your IdP to authenticate.")
 							}),
-							x && x.enabled ? /* @__PURE__ */ g("a", {
+							S && S.enabled ? /* @__PURE__ */ g("a", {
 								href: `${window.location.origin}/auth/sso/login`,
-								className: "inline-flex items-center gap-2 px-6 py-3 rounded-xl bg-gradient-to-r from-green-600 to-emerald-600 text-white font-medium shadow-lg shadow-green-500/25 hover:shadow-xl hover:shadow-green-500/30 hover:from-green-500 hover:to-emerald-500 transition-all duration-200",
+								className: "inline-flex items-center gap-2 px-6 py-3 rounded-xl bg-status-success-bg text-white font-medium shadow-sm hover:opacity-90 transition-all duration-200",
 								children: [/* @__PURE__ */ h("svg", {
 									className: "w-5 h-5",
 									fill: "none",
@@ -1135,10 +1136,10 @@ function y() {
 										strokeWidth: 2,
 										d: "M11 16l-4-4m0 0l4-4m-4 4h14m-5 4v1a3 3 0 01-3 3H6a3 3 0 01-3-3V7a3 3 0 013-3h7a3 3 0 013 3v1"
 									})
-								}), k("auth.sso.testSsoLoginButton", "Test SSO Login")]
+								}), A("auth.sso.testSsoLoginButton", "Test SSO Login")]
 							}) : /* @__PURE__ */ h("div", {
 								className: "p-4 rounded-xl bg-bg-sunken/50 text-text-secondary text-sm",
-								children: x ? k("auth.sso.disabledTest", "SSO is disabled. Enable it to test the login flow.") : k("auth.sso.notConfigured", "SSO is not configured. Please configure your IdP settings first.")
+								children: S ? A("auth.sso.disabledTest", "SSO is disabled. Enable it to test the login flow.") : A("auth.sso.notConfigured", "SSO is not configured. Please configure your IdP settings first.")
 							})
 						]
 					}),
@@ -1146,15 +1147,38 @@ function y() {
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [/* @__PURE__ */ h("h3", {
 							className: "text-lg font-medium text-text-primary mb-4",
-							children: k("auth.sso.testResults", "Test Results")
+							children: A("auth.sso.testResults", "Test Results")
 						}), /* @__PURE__ */ h("p", {
 							className: "text-sm text-text-secondary",
-							children: k("auth.sso.testResultsDesc", "After testing, results will appear here. Check the browser console for detailed logs.")
+							children: A("auth.sso.testResultsDesc", "After testing, results will appear here. Check the browser console for detailed logs.")
 						})]
 					})
 				]
 			})
 		]
+	}) : /* @__PURE__ */ h("div", {
+		className: "max-w-5xl mx-auto p-6",
+		children: /* @__PURE__ */ g("div", {
+			className: "text-center py-16 border-2 border-dashed border-border-subtle rounded-xl",
+			children: [
+				/* @__PURE__ */ h("div", {
+					className: "w-16 h-16 mx-auto mb-4 rounded-full bg-status-warning-bg-subtle flex items-center justify-center",
+					children: /* @__PURE__ */ h(n, { className: "w-8 h-8 text-status-warning-text" })
+				}),
+				/* @__PURE__ */ h("h2", {
+					className: "text-xl font-semibold text-text-primary mb-2",
+					children: A("auth.sso.enterprisePlanRequired", "Enterprise Plan Required")
+				}),
+				/* @__PURE__ */ h("p", {
+					className: "text-text-secondary mb-2",
+					children: A("auth.sso.enterprisePlanRequiredDesc", "Single Sign-On (SAML / OIDC) configuration is available on the Enterprise plan.")
+				}),
+				/* @__PURE__ */ h("p", {
+					className: "text-sm text-text-secondary",
+					children: A("auth.sso.contactSales", "Contact sales to upgrade your workspace to the Enterprise plan.")
+				})
+			]
+		})
 	}) : /* @__PURE__ */ h("div", {
 		className: "max-w-5xl mx-auto p-6",
 		children: /* @__PURE__ */ g("div", {
@@ -1166,17 +1190,17 @@ function y() {
 				}),
 				/* @__PURE__ */ h("h2", {
 					className: "text-xl font-semibold text-text-primary mb-2",
-					children: k("auth.sso.adminRequired", "Admin Access Required")
+					children: A("auth.sso.adminRequired", "Admin Access Required")
 				}),
 				/* @__PURE__ */ h("p", {
 					className: "text-text-secondary",
-					children: k("auth.sso.adminRequiredDesc", "You need administrator privileges to configure SSO settings.")
+					children: A("auth.sso.adminRequiredDesc", "You need administrator privileges to configure SSO settings.")
 				})
 			]
 		})
 	});
 }
 //#endregion
-export { y as SsoConfigPage };
+export { b as SsoConfigPage };
 
 //# sourceMappingURL=SsoConfigPage.js.map