@cedros/login-react 0.0.41 → 0.0.43

package/dist/{AuthenticationSettings-CSoFp-_2.js → AuthenticationSettings-CxAubcoz.js}

@@ -2,7 +2,7 @@ import { jsxs as s, jsx as e } from "react/jsx-runtime";
 import { useRef as M, useState as y, useCallback as _, useEffect as $, useMemo as O } from "react";
 import { L } from "./LoadingSpinner-6vml-zwr.js";
 import { E as D } from "./ErrorMessage-CcEK0pYO.js";
-import { u as T, A as j, S as F } from "./AutosaveStatus-DMjvXzP2.js";
+import { u as T, A as j, S as F } from "./AutosaveStatus-DtF_58rC.js";
 import { u as z } from "./useCedrosLogin-CFfID-0i.js";
 import { u as B } from "./useOrgs-C90KT9KP.js";
 function U() {

package/dist/{AuthenticationSettings-CSoFp-_2.js.map → AuthenticationSettings-CxAubcoz.js.map}

@@ -1 +1 @@
-{"version":3,"file":"AuthenticationSettings-CSoFp-_2.js","sources":["../src/hooks/useSsoProviders.ts","../src/components/admin/settings/SsoProvidersSettings.tsx","../src/components/admin/settings/SocialButtonOrderSettings.tsx","../src/components/admin/settings/AuthenticationSettings.tsx"],"sourcesContent":["/**\n * Hook for managing SSO providers (admin)\n */\nimport { useState, useCallback, useRef } from 'react';\nimport { useCedrosLogin } from '../context/useCedrosLogin';\n\nexport interface SsoProvider {\n  id: string;\n  orgId: string;\n  name: string;\n  issuerUrl: string;\n  clientId: string;\n  scopes: string[];\n  enabled: boolean;\n  allowRegistration: boolean;\n  emailDomain: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface CreateSsoProviderInput {\n  orgId: string;\n  name: string;\n  issuerUrl: string;\n  clientId: string;\n  clientSecret: string;\n  scopes?: string[];\n  enabled?: boolean;\n  allowRegistration?: boolean;\n  emailDomain?: string | null;\n}\n\nexport interface UpdateSsoProviderInput {\n  name?: string;\n  issuerUrl?: string;\n  clientId?: string;\n  clientSecret?: string;\n  scopes?: string[];\n  enabled?: boolean;\n  allowRegistration?: boolean;\n  emailDomain?: string | null;\n}\n\ninterface ListResponse {\n  providers: SsoProvider[];\n  total: number;\n  limit: number;\n  offset: number;\n}\n\nexport function useSsoProviders() {\n  const { config, _internal } = useCedrosLogin();\n  const serverUrl = config.serverUrl;\n\n  // PERF-03: Stabilize getAccessToken reference using ref pattern\n  // to prevent unnecessary re-creation of callbacks\n  const getAccessTokenRef = useRef(_internal?.getAccessToken ?? (() => null));\n  getAccessTokenRef.current = _internal?.getAccessToken ?? (() => null);\n\n  const [providers, setProviders] = useState<SsoProvider[]>([]);\n  const [total, setTotal] = useState(0);\n  const [isLoading, setIsLoading] = useState(false);\n  const [error, setError] = useState<Error | null>(null);\n\n  // Memoize getHeaders with empty deps since it uses ref\n  const getHeaders = useCallback(() => {\n    const token = getAccessTokenRef.current();\n    return {\n      'Content-Type': 'application/json',\n      ...(token ? { Authorization: `Bearer ${token}` } : {}),\n    };\n  }, []);\n\n  const fetchProviders = useCallback(\n    async (orgId?: string, limit = 50, offset = 0) => {\n      setIsLoading(true);\n      setError(null);\n      try {\n        const params = new URLSearchParams();\n        if (orgId) params.set('org_id', orgId);\n        params.set('limit', String(limit));\n        params.set('offset', String(offset));\n\n        const res = await fetch(`${serverUrl}/admin/sso-providers?${params}`, {\n          headers: getHeaders(),\n        });\n\n        if (!res.ok) {\n          const err = await res.json().catch(() => ({}));\n          throw new Error(err.error || `Failed to fetch SSO providers: ${res.status}`);\n        }\n\n        const data: ListResponse = await res.json();\n        setProviders(data.providers);\n        setTotal(data.total);\n        return data;\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err));\n        setError(error);\n        throw error;\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [serverUrl, getHeaders]\n  );\n\n  const createProvider = useCallback(\n    async (input: CreateSsoProviderInput): Promise<SsoProvider> => {\n      setIsLoading(true);\n      setError(null);\n      try {\n        const res = await fetch(`${serverUrl}/admin/sso-providers`, {\n          method: 'POST',\n          headers: getHeaders(),\n          body: JSON.stringify(input),\n        });\n\n        if (!res.ok) {\n          const err = await res.json().catch(() => ({}));\n          throw new Error(err.error || `Failed to create SSO provider: ${res.status}`);\n        }\n\n        const provider: SsoProvider = await res.json();\n        setProviders((prev) => [...prev, provider]);\n        setTotal((prev) => prev + 1);\n        return provider;\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err));\n        setError(error);\n        throw error;\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [serverUrl, getHeaders]\n  );\n\n  const updateProvider = useCallback(\n    async (id: string, input: UpdateSsoProviderInput): Promise<SsoProvider> => {\n      setIsLoading(true);\n      setError(null);\n      try {\n        const res = await fetch(`${serverUrl}/admin/sso-providers/${id}`, {\n          method: 'PUT',\n          headers: getHeaders(),\n          body: JSON.stringify(input),\n        });\n\n        if (!res.ok) {\n          const err = await res.json().catch(() => ({}));\n          throw new Error(err.error || `Failed to update SSO provider: ${res.status}`);\n        }\n\n        const provider: SsoProvider = await res.json();\n        setProviders((prev) => prev.map((p) => (p.id === id ? provider : p)));\n        return provider;\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err));\n        setError(error);\n        throw error;\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [serverUrl, getHeaders]\n  );\n\n  const deleteProvider = useCallback(\n    async (id: string): Promise<void> => {\n      setIsLoading(true);\n      setError(null);\n      try {\n        const res = await fetch(`${serverUrl}/admin/sso-providers/${id}`, {\n          method: 'DELETE',\n          headers: getHeaders(),\n        });\n\n        if (!res.ok) {\n          const err = await res.json().catch(() => ({}));\n          throw new Error(err.error || `Failed to delete SSO provider: ${res.status}`);\n        }\n\n        setProviders((prev) => prev.filter((p) => p.id !== id));\n        setTotal((prev) => prev - 1);\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err));\n        setError(error);\n        throw error;\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [serverUrl, getHeaders]\n  );\n\n  const toggleProvider = useCallback(\n    async (id: string, enabled: boolean): Promise<SsoProvider> => {\n      return updateProvider(id, { enabled });\n    },\n    [updateProvider]\n  );\n\n  return {\n    providers,\n    total,\n    isLoading,\n    error,\n    fetchProviders,\n    createProvider,\n    updateProvider,\n    deleteProvider,\n    toggleProvider,\n  };\n}\n","/**\n * SSO Providers settings - manage OIDC identity providers\n */\nimport { useState, useEffect, useCallback } from 'react';\nimport { LoadingSpinner } from '../../shared/LoadingSpinner';\nimport { ErrorMessage } from '../../shared/ErrorMessage';\nimport {\n  useSsoProviders,\n  type SsoProvider,\n  type CreateSsoProviderInput,\n  type UpdateSsoProviderInput,\n} from '../../../hooks/useSsoProviders';\nimport { useOrgs } from '../../../hooks/useOrgs';\n\nexport interface SsoProvidersSettingsProps {\n  className?: string;\n}\n\ntype ViewMode = 'list' | 'add' | 'edit';\n\nexport function SsoProvidersSettings({ className }: SsoProvidersSettingsProps) {\n  const {\n    providers,\n    isLoading,\n    error,\n    fetchProviders,\n    createProvider,\n    updateProvider,\n    deleteProvider,\n    toggleProvider,\n  } = useSsoProviders();\n\n  const { activeOrg } = useOrgs();\n  const [viewMode, setViewMode] = useState<ViewMode>('list');\n  const [editingProvider, setEditingProvider] = useState<SsoProvider | null>(null);\n  const [formError, setFormError] = useState<string | null>(null);\n\n  useEffect(() => {\n    fetchProviders(activeOrg?.id);\n  }, [fetchProviders, activeOrg?.id]);\n\n  const handleAdd = () => {\n    setEditingProvider(null);\n    setFormError(null);\n    setViewMode('add');\n  };\n\n  const handleEdit = (provider: SsoProvider) => {\n    setEditingProvider(provider);\n    setFormError(null);\n    setViewMode('edit');\n  };\n\n  const handleCancel = () => {\n    setViewMode('list');\n    setEditingProvider(null);\n    setFormError(null);\n  };\n\n  const handleDelete = async (provider: SsoProvider) => {\n    if (!confirm(`Delete SSO provider \"${provider.name}\"? This cannot be undone.`)) {\n      return;\n    }\n    try {\n      await deleteProvider(provider.id);\n    } catch {\n      // Error is already set in hook\n    }\n  };\n\n  const handleToggle = async (provider: SsoProvider) => {\n    try {\n      await toggleProvider(provider.id, !provider.enabled);\n    } catch {\n      // Error is already set in hook\n    }\n  };\n\n  const handleSave = async (data: CreateSsoProviderInput | UpdateSsoProviderInput) => {\n    setFormError(null);\n    try {\n      if (viewMode === 'add') {\n        await createProvider(data as CreateSsoProviderInput);\n      } else if (editingProvider) {\n        await updateProvider(editingProvider.id, data as UpdateSsoProviderInput);\n      }\n      setViewMode('list');\n      setEditingProvider(null);\n    } catch (err) {\n      setFormError(err instanceof Error ? err.message : 'Failed to save provider');\n    }\n  };\n\n  if (isLoading && providers.length === 0) {\n    return (\n      <div className={`cedros-system-settings cedros-system-settings-loading ${className ?? ''}`}>\n        <LoadingSpinner />\n        <span>Loading SSO providers...</span>\n      </div>\n    );\n  }\n\n  if (viewMode === 'add' || viewMode === 'edit') {\n    return (\n      <div className={`cedros-system-settings ${className ?? ''}`}>\n        <SsoProviderForm\n          provider={editingProvider}\n          orgId={activeOrg?.id}\n          error={formError}\n          isLoading={isLoading}\n          onSave={handleSave}\n          onCancel={handleCancel}\n        />\n      </div>\n    );\n  }\n\n  return (\n    <div className={`cedros-system-settings ${className ?? ''}`}>\n      <div className=\"cedros-settings-page-header\">\n        <div className=\"cedros-settings-page-header-content\">\n          <h2 className=\"cedros-settings-page-title\">SSO Providers</h2>\n          <p className=\"cedros-settings-page-description\">\n            Configure OIDC identity providers for enterprise single sign-on.\n          </p>\n        </div>\n        <button type=\"button\" className=\"cedros-btn cedros-btn-primary\" onClick={handleAdd}>\n          Add Provider\n        </button>\n      </div>\n\n      {error && <ErrorMessage error={error.message} />}\n\n      {providers.length === 0 ? (\n        <div className=\"cedros-system-settings-empty\">\n          <p>No SSO providers configured.</p>\n          <p className=\"cedros-text-muted\">\n            Add an OIDC provider like Okta, Azure AD, or Auth0 to enable enterprise SSO.\n          </p>\n        </div>\n      ) : (\n        <div className=\"cedros-sso-provider-list\">\n          {providers.map((provider) => (\n            <SsoProviderCard\n              key={provider.id}\n              provider={provider}\n              onEdit={() => handleEdit(provider)}\n              onDelete={() => handleDelete(provider)}\n              onToggle={() => handleToggle(provider)}\n            />\n          ))}\n        </div>\n      )}\n    </div>\n  );\n}\n\n// =============================================================================\n// Provider Card\n// =============================================================================\n\ninterface SsoProviderCardProps {\n  provider: SsoProvider;\n  onEdit: () => void;\n  onDelete: () => void;\n  onToggle: () => void;\n}\n\nfunction SsoProviderCard({ provider, onEdit, onDelete, onToggle }: SsoProviderCardProps) {\n  return (\n    <div\n      className={`cedros-sso-provider-card ${provider.enabled ? '' : 'cedros-sso-provider-card--disabled'}`}\n    >\n      <div className=\"cedros-sso-provider-card-header\">\n        <div className=\"cedros-sso-provider-card-info\">\n          <h3 className=\"cedros-sso-provider-card-name\">{provider.name}</h3>\n          <p className=\"cedros-sso-provider-card-issuer\">{provider.issuerUrl}</p>\n        </div>\n        <button\n          type=\"button\"\n          role=\"switch\"\n          aria-checked={provider.enabled}\n          className={`cedros-toggle ${provider.enabled ? 'cedros-toggle-on' : 'cedros-toggle-off'}`}\n          onClick={onToggle}\n        >\n          <span className=\"cedros-toggle-track\">\n            <span className=\"cedros-toggle-thumb\" />\n          </span>\n          <span className=\"cedros-toggle-label\">{provider.enabled ? 'Enabled' : 'Disabled'}</span>\n        </button>\n      </div>\n\n      <div className=\"cedros-sso-provider-card-details\">\n        <div className=\"cedros-sso-provider-card-detail\">\n          <span className=\"cedros-sso-provider-card-detail-label\">Client ID</span>\n          <code className=\"cedros-sso-provider-card-detail-value\">{provider.clientId}</code>\n        </div>\n        {provider.emailDomain && (\n          <div className=\"cedros-sso-provider-card-detail\">\n            <span className=\"cedros-sso-provider-card-detail-label\">Email Domain</span>\n            <span className=\"cedros-sso-provider-card-detail-value\">@{provider.emailDomain}</span>\n          </div>\n        )}\n        <div className=\"cedros-sso-provider-card-detail\">\n          <span className=\"cedros-sso-provider-card-detail-label\">Registration</span>\n          <span className=\"cedros-sso-provider-card-detail-value\">\n            {provider.allowRegistration ? 'Allowed' : 'Existing users only'}\n          </span>\n        </div>\n      </div>\n\n      <div className=\"cedros-sso-provider-card-actions\">\n        <button type=\"button\" className=\"cedros-btn cedros-btn-ghost\" onClick={onEdit}>\n          Edit\n        </button>\n        <button\n          type=\"button\"\n          className=\"cedros-btn cedros-btn-ghost cedros-btn-danger\"\n          onClick={onDelete}\n        >\n          Delete\n        </button>\n      </div>\n    </div>\n  );\n}\n\n// =============================================================================\n// Provider Form\n// =============================================================================\n\ninterface SsoProviderFormProps {\n  provider: SsoProvider | null;\n  orgId?: string;\n  error: string | null;\n  isLoading: boolean;\n  onSave: (data: CreateSsoProviderInput | UpdateSsoProviderInput) => void;\n  onCancel: () => void;\n}\n\nfunction SsoProviderForm({\n  provider,\n  orgId,\n  error,\n  isLoading,\n  onSave,\n  onCancel,\n}: SsoProviderFormProps) {\n  const isEditing = Boolean(provider);\n\n  const [name, setName] = useState(provider?.name ?? '');\n  const [issuerUrl, setIssuerUrl] = useState(provider?.issuerUrl ?? '');\n  const [clientId, setClientId] = useState(provider?.clientId ?? '');\n  const [clientSecret, setClientSecret] = useState('');\n  const [emailDomain, setEmailDomain] = useState(provider?.emailDomain ?? '');\n  const [allowRegistration, setAllowRegistration] = useState(provider?.allowRegistration ?? true);\n  const [enabled, setEnabled] = useState(provider?.enabled ?? true);\n\n  const handleSubmit = useCallback(\n    (e: React.FormEvent) => {\n      e.preventDefault();\n\n      if (isEditing) {\n        const updates: UpdateSsoProviderInput = {\n          name,\n          issuerUrl,\n          clientId,\n          emailDomain: emailDomain || null,\n          allowRegistration,\n          enabled,\n        };\n        // Only include secret if changed\n        if (clientSecret) {\n          updates.clientSecret = clientSecret;\n        }\n        onSave(updates);\n      } else {\n        if (!orgId) {\n          return;\n        }\n        const data: CreateSsoProviderInput = {\n          orgId,\n          name,\n          issuerUrl,\n          clientId,\n          clientSecret,\n          emailDomain: emailDomain || null,\n          allowRegistration,\n          enabled,\n        };\n        onSave(data);\n      }\n    },\n    [\n      isEditing,\n      orgId,\n      name,\n      issuerUrl,\n      clientId,\n      clientSecret,\n      emailDomain,\n      allowRegistration,\n      enabled,\n      onSave,\n    ]\n  );\n\n  return (\n    <form className=\"cedros-sso-provider-form\" onSubmit={handleSubmit}>\n      <div className=\"cedros-settings-page-header\">\n        <div className=\"cedros-settings-page-header-content\">\n          <h2 className=\"cedros-settings-page-title\">\n            {isEditing ? 'Edit SSO Provider' : 'Add SSO Provider'}\n          </h2>\n          <p className=\"cedros-settings-page-description\">\n            Configure an OIDC identity provider for enterprise single sign-on.\n          </p>\n        </div>\n      </div>\n\n      {error && <ErrorMessage error={error} />}\n\n      <div className=\"cedros-form-section\">\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-name\">\n            Provider Name\n          </label>\n          <input\n            id=\"sso-name\"\n            type=\"text\"\n            className=\"cedros-form-input\"\n            value={name}\n            onChange={(e) => setName(e.target.value)}\n            placeholder=\"e.g., Okta, Azure AD\"\n            required\n          />\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-issuer\">\n            Issuer URL\n          </label>\n          <input\n            id=\"sso-issuer\"\n            type=\"url\"\n            className=\"cedros-form-input\"\n            value={issuerUrl}\n            onChange={(e) => setIssuerUrl(e.target.value)}\n            placeholder=\"https://your-org.okta.com\"\n            required\n          />\n          <p className=\"cedros-form-hint\">\n            The OIDC issuer URL. Must support discovery at /.well-known/openid-configuration\n          </p>\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-client-id\">\n            Client ID\n          </label>\n          <input\n            id=\"sso-client-id\"\n            type=\"text\"\n            className=\"cedros-form-input\"\n            value={clientId}\n            onChange={(e) => setClientId(e.target.value)}\n            placeholder=\"OAuth client ID\"\n            required\n          />\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-client-secret\">\n            Client Secret{' '}\n            {isEditing && (\n              <span className=\"cedros-form-hint-inline\">(leave blank to keep current)</span>\n            )}\n          </label>\n          <input\n            id=\"sso-client-secret\"\n            type=\"password\"\n            className=\"cedros-form-input\"\n            value={clientSecret}\n            onChange={(e) => setClientSecret(e.target.value)}\n            placeholder={isEditing ? '••••••••' : 'OAuth client secret'}\n            required={!isEditing}\n          />\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-email-domain\">\n            Email Domain (optional)\n          </label>\n          <input\n            id=\"sso-email-domain\"\n            type=\"text\"\n            className=\"cedros-form-input\"\n            value={emailDomain}\n            onChange={(e) => setEmailDomain(e.target.value)}\n            placeholder=\"company.com\"\n          />\n          <p className=\"cedros-form-hint\">Restrict to users with emails from this domain</p>\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-checkbox\">\n            <input\n              type=\"checkbox\"\n              checked={allowRegistration}\n              onChange={(e) => setAllowRegistration(e.target.checked)}\n            />\n            <span>Allow new user registration via SSO</span>\n          </label>\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-checkbox\">\n            <input\n              type=\"checkbox\"\n              checked={enabled}\n              onChange={(e) => setEnabled(e.target.checked)}\n            />\n            <span>Enable this provider</span>\n          </label>\n        </div>\n      </div>\n\n      <div className=\"cedros-form-actions\">\n        <button\n          type=\"button\"\n          className=\"cedros-btn cedros-btn-ghost\"\n          onClick={onCancel}\n          disabled={isLoading}\n        >\n          Cancel\n        </button>\n        <button type=\"submit\" className=\"cedros-btn cedros-btn-primary\" disabled={isLoading}>\n          {isLoading ? 'Saving...' : isEditing ? 'Save Changes' : 'Add Provider'}\n        </button>\n      </div>\n    </form>\n  );\n}\n","/**\n * Drag-and-drop social button order settings with live preview.\n *\n * Uses HTML5 Drag and Drop API (no library needed for 4 items).\n * Reads enabled state from shared settings map (`auth_*_enabled` keys).\n */\nimport { useState, useCallback, useRef, type ReactNode } from 'react';\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface SocialButtonOrderSettingsProps {\n  /** Settings map (key -> SystemSetting[]) from useSettingsAutosave */\n  settings: Record<string, { key: string; value: string }[]>;\n  /** Autosave handler from parent */\n  handleChange: (key: string, value: string) => void;\n}\n\ninterface ProviderMeta {\n  label: string;\n  icon: ReactNode;\n  enabledKey: string;\n}\n\n// ---------------------------------------------------------------------------\n// Provider metadata + icons (matching existing button components)\n// ---------------------------------------------------------------------------\n\nfunction GoogleIcon() {\n  return (\n    <svg width=\"18\" height=\"18\" viewBox=\"0 0 18 18\" fill=\"none\" aria-hidden=\"true\">\n      <path d=\"M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844c-.209 1.125-.843 2.078-1.796 2.717v2.258h2.908c1.702-1.567 2.684-3.874 2.684-6.615z\" fill=\"#4285F4\" />\n      <path d=\"M9.003 18c2.43 0 4.467-.806 5.956-2.18l-2.909-2.26c-.806.54-1.836.86-3.047.86-2.344 0-4.328-1.584-5.036-3.711H.96v2.332A8.997 8.997 0 0 0 9.003 18z\" fill=\"#34A853\" />\n      <path d=\"M3.964 10.712A5.41 5.41 0 0 1 3.682 9c0-.593.102-1.17.282-1.71V4.958H.96A8.996 8.996 0 0 0 0 9c0 1.452.348 2.827.96 4.042l3.004-2.33z\" fill=\"#FBBC05\" />\n      <path d=\"M9.003 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.464.891 11.428 0 9.002 0A8.997 8.997 0 0 0 .96 4.958l3.005 2.332c.708-2.127 2.692-3.71 5.036-3.71z\" fill=\"#EA4335\" />\n    </svg>\n  );\n}\n\nfunction AppleIcon() {\n  return (\n    <svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"currentColor\" aria-hidden=\"true\">\n      <path d=\"M18.71 19.5c-.83 1.24-1.71 2.45-3.05 2.47-1.34.03-1.77-.79-3.29-.79-1.53 0-2 .77-3.27.82-1.31.05-2.3-1.32-3.14-2.53C4.25 17 2.94 12.45 4.7 9.39c.87-1.52 2.43-2.48 4.12-2.51 1.28-.02 2.5.87 3.29.87.78 0 2.26-1.07 3.81-.91.65.03 2.47.26 3.64 1.98-.09.06-2.17 1.28-2.15 3.81.03 3.02 2.65 4.03 2.68 4.04-.03.07-.42 1.44-1.38 2.83M13 3.5c.73-.83 1.94-1.46 2.94-1.5.13 1.17-.34 2.35-1.04 3.19-.69.85-1.83 1.51-2.95 1.42-.15-1.15.41-2.35 1.05-3.11z\" />\n    </svg>\n  );\n}\n\nfunction SolanaIcon() {\n  return (\n    <svg width=\"18\" height=\"18\" viewBox=\"0 0 128 128\" fill=\"currentColor\" aria-hidden=\"true\">\n      <path d=\"M25.38 96.04a4.35 4.35 0 0 1 3.07-1.27h91.68c1.93 0 2.9 2.34 1.54 3.7l-17.71 17.72a4.35 4.35 0 0 1-3.07 1.27H9.21c-1.93 0-2.9-2.34-1.54-3.7l17.71-17.72z\" />\n      <path d=\"M25.38 11.81a4.47 4.47 0 0 1 3.07-1.27h91.68c1.93 0 2.9 2.34 1.54 3.7L103.96 31.96a4.35 4.35 0 0 1-3.07 1.27H9.21c-1.93 0-2.9-2.34-1.54-3.7L25.38 11.81z\" />\n      <path d=\"M102.62 53.76a4.35 4.35 0 0 0-3.07-1.27H7.87c-1.93 0-2.9 2.34-1.54 3.7l17.71 17.72a4.35 4.35 0 0 0 3.07 1.27h91.68c1.93 0 2.9-2.34 1.54-3.7L102.62 53.76z\" />\n    </svg>\n  );\n}\n\nfunction PasskeyIcon() {\n  return (\n    <svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\" strokeLinecap=\"round\" strokeLinejoin=\"round\" aria-hidden=\"true\">\n      <path d=\"M12 10a2 2 0 0 0-2 2c0 1.02-.1 2.51-.26 4\" />\n      <path d=\"M14 13.12c0 2.38 0 6.38-1 8.88\" />\n      <path d=\"M17.29 21.02c.12-.6.43-2.3.5-3.02\" />\n      <path d=\"M2 12a10 10 0 0 1 18-6\" />\n      <path d=\"M2 16h.01\" />\n      <path d=\"M21.8 16c.2-2 .131-5.354 0-6\" />\n      <path d=\"M5 19.5C5.5 18 6 15 6 12a6 6 0 0 1 .34-2\" />\n      <path d=\"M8.65 22c.21-.66.45-1.32.57-2\" />\n      <path d=\"M9 6.8a6 6 0 0 1 9 5.2v2\" />\n    </svg>\n  );\n}\n\nconst PROVIDERS: Record<string, ProviderMeta> = {\n  webauthn: { label: 'Passkey', icon: <PasskeyIcon />, enabledKey: 'auth_webauthn_enabled' },\n  google: { label: 'Google', icon: <GoogleIcon />, enabledKey: 'auth_google_enabled' },\n  apple: { label: 'Apple', icon: <AppleIcon />, enabledKey: 'auth_apple_enabled' },\n  solana: { label: 'Solana', icon: <SolanaIcon />, enabledKey: 'auth_solana_enabled' },\n};\n\nconst DEFAULT_ORDER = ['webauthn', 'google', 'apple', 'solana'];\n\nconst PREVIEW_LABELS: Record<string, string> = {\n  webauthn: 'Continue with Passkey',\n  google: 'Continue with Google',\n  apple: 'Continue with Apple',\n  solana: 'Continue with Solana',\n};\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Read whether a provider is enabled from the flattened settings. */\nfunction isProviderEnabled(\n  settings: Record<string, { key: string; value: string }[]>,\n  enabledKey: string,\n): boolean {\n  for (const group of Object.values(settings)) {\n    const found = group.find((s) => s.key === enabledKey);\n    if (found) return found.value === 'true';\n  }\n  return true; // default enabled when setting is absent\n}\n\n/** Read current order from settings map, falling back to default. */\nfunction readOrder(settings: Record<string, { key: string; value: string }[]>): string[] {\n  for (const group of Object.values(settings)) {\n    const found = group.find((s) => s.key === 'ui_social_button_order');\n    if (found && found.value) return found.value.split(',').map((s) => s.trim());\n  }\n  return DEFAULT_ORDER;\n}\n\n// ---------------------------------------------------------------------------\n// Grab-handle icon\n// ---------------------------------------------------------------------------\n\nfunction GrabHandle() {\n  return (\n    <svg width=\"16\" height=\"16\" viewBox=\"0 0 16 16\" fill=\"currentColor\" aria-hidden=\"true\" style={{ opacity: 0.4 }}>\n      <circle cx=\"5\" cy=\"3\" r=\"1.5\" />\n      <circle cx=\"11\" cy=\"3\" r=\"1.5\" />\n      <circle cx=\"5\" cy=\"8\" r=\"1.5\" />\n      <circle cx=\"11\" cy=\"8\" r=\"1.5\" />\n      <circle cx=\"5\" cy=\"13\" r=\"1.5\" />\n      <circle cx=\"11\" cy=\"13\" r=\"1.5\" />\n    </svg>\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Component\n// ---------------------------------------------------------------------------\n\nexport function SocialButtonOrderSettings({ settings, handleChange }: SocialButtonOrderSettingsProps) {\n  const [order, setOrder] = useState<string[]>(() => readOrder(settings));\n  const dragIdx = useRef<number | null>(null);\n  const [dragOverIdx, setDragOverIdx] = useState<number | null>(null);\n\n  const persist = useCallback(\n    (newOrder: string[]) => {\n      setOrder(newOrder);\n      handleChange('ui_social_button_order', newOrder.join(','));\n    },\n    [handleChange],\n  );\n\n  const onDragStart = useCallback((idx: number) => {\n    dragIdx.current = idx;\n  }, []);\n\n  const onDragOver = useCallback((e: React.DragEvent, idx: number) => {\n    e.preventDefault();\n    setDragOverIdx(idx);\n  }, []);\n\n  const onDrop = useCallback(\n    (targetIdx: number) => {\n      const fromIdx = dragIdx.current;\n      if (fromIdx === null || fromIdx === targetIdx) {\n        setDragOverIdx(null);\n        return;\n      }\n      const next = [...order];\n      const [moved] = next.splice(fromIdx, 1);\n      next.splice(targetIdx, 0, moved);\n      persist(next);\n      dragIdx.current = null;\n      setDragOverIdx(null);\n    },\n    [order, persist],\n  );\n\n  const onDragEnd = useCallback(() => {\n    dragIdx.current = null;\n    setDragOverIdx(null);\n  }, []);\n\n  return (\n    <div className=\"cedros-system-settings\">\n      <div className=\"cedros-settings-page-header\">\n        <div className=\"cedros-settings-page-header-content\">\n          <h2 className=\"cedros-settings-page-title\">Button Order</h2>\n          <p className=\"cedros-settings-page-description\">\n            Drag to reorder the social login buttons on your sign-in form.\n          </p>\n        </div>\n      </div>\n\n      <div style={{ display: 'flex', gap: '2rem', flexWrap: 'wrap' }}>\n        {/* Left: Reorder list */}\n        <div style={{ flex: '1 1 260px', minWidth: 260 }}>\n          <ul style={{ listStyle: 'none', padding: 0, margin: 0, display: 'flex', flexDirection: 'column', gap: '0.5rem' }}>\n            {order.map((id, idx) => {\n              const meta = PROVIDERS[id];\n              if (!meta) return null;\n              const enabled = isProviderEnabled(settings, meta.enabledKey);\n              const isDragOver = dragOverIdx === idx;\n              return (\n                <li\n                  key={id}\n                  draggable\n                  onDragStart={() => onDragStart(idx)}\n                  onDragOver={(e) => onDragOver(e, idx)}\n                  onDrop={() => onDrop(idx)}\n                  onDragEnd={onDragEnd}\n                  className=\"cedros-btn-order-item\"\n                  style={{\n                    display: 'flex',\n                    alignItems: 'center',\n                    gap: '0.75rem',\n                    padding: '0.625rem 0.75rem',\n                    borderRadius: 'var(--cedros-radius, 0.5rem)',\n                    border: isDragOver\n                      ? '2px solid var(--cedros-primary, #6366f1)'\n                      : '1px solid var(--cedros-border, #e5e7eb)',\n                    background: 'var(--cedros-background, #fff)',\n                    cursor: 'grab',\n                    opacity: enabled ? 1 : 0.5,\n                    transition: 'border-color 0.15s',\n                  }}\n                >\n                  <GrabHandle />\n                  <span className=\"cedros-button-icon\" style={{ display: 'flex', alignItems: 'center' }}>\n                    {meta.icon}\n                  </span>\n                  <span style={{ flex: 1, fontWeight: 500, fontSize: '0.875rem' }}>{meta.label}</span>\n                  <span\n                    style={{\n                      fontSize: '0.7rem',\n                      padding: '0.125rem 0.5rem',\n                      borderRadius: '9999px',\n                      background: enabled\n                        ? 'var(--cedros-primary, #6366f1)'\n                        : 'var(--cedros-muted, #f3f4f6)',\n                      color: enabled\n                        ? 'var(--cedros-primary-foreground, #fff)'\n                        : 'var(--cedros-muted-foreground, #6b7280)',\n                    }}\n                  >\n                    {enabled ? 'Enabled' : 'Disabled'}\n                  </span>\n                </li>\n              );\n            })}\n          </ul>\n        </div>\n\n        {/* Right: Live preview */}\n        <div style={{ flex: '1 1 280px', minWidth: 280 }}>\n          <p style={{ fontSize: '0.75rem', color: 'var(--cedros-muted-foreground, #6b7280)', margin: '0 0 0.75rem' }}>\n            This is how your login form buttons will appear:\n          </p>\n          <div\n            style={{\n              display: 'flex',\n              flexDirection: 'column',\n              gap: '0.5rem',\n              padding: '1.25rem',\n              borderRadius: 'var(--cedros-radius, 0.5rem)',\n              border: '1px solid var(--cedros-border, #e5e7eb)',\n              background: 'var(--cedros-background, #fff)',\n            }}\n          >\n            {order.map((id) => {\n              const meta = PROVIDERS[id];\n              if (!meta) return null;\n              const enabled = isProviderEnabled(settings, meta.enabledKey);\n              if (!enabled) return null;\n              return (\n                <button\n                  key={id}\n                  type=\"button\"\n                  className=\"cedros-button cedros-button-social\"\n                  style={{ pointerEvents: 'none', width: '100%' }}\n                  tabIndex={-1}\n                >\n                  <span className=\"cedros-button-icon\">{meta.icon}</span>\n                  {PREVIEW_LABELS[id]}\n                </button>\n              );\n            })}\n          </div>\n        </div>\n      </div>\n    </div>\n  );\n}\n","/**\n * Authentication settings page - configure auth providers with tabs\n */\nimport { useState, useEffect, useMemo } from 'react';\nimport { LoadingSpinner } from '../../shared/LoadingSpinner';\nimport { ErrorMessage } from '../../shared/ErrorMessage';\nimport { useSettingsAutosave } from '../../../hooks/useSettingsAutosave';\nimport { SettingsSection } from './settingsInputs';\nimport { AutosaveStatus } from './AutosaveStatus';\nimport { SsoProvidersSettings } from './SsoProvidersSettings';\nimport { SocialButtonOrderSettings } from './SocialButtonOrderSettings';\n\ntype AuthTab = 'email' | 'google' | 'apple' | 'solana' | 'passkeys' | 'instantlink' | 'sso' | 'buttonorder' | 'postlogin';\n\ninterface TabConfig {\n  id: AuthTab;\n  label: string;\n  /** Categories to pull settings from (not used for 'sso' tab) */\n  categories: string[];\n  /** Optional list of specific keys to show (if omitted, show all in categories) */\n  keys?: string[];\n  /** If true, renders a custom component instead of settings section */\n  isCustom?: boolean;\n}\n\nconst TABS: TabConfig[] = [\n  { id: 'email', label: 'Email', categories: ['auth.email'],\n    keys: ['auth_email_enabled', 'auth_email_require_verification', 'auth_email_block_disposable'] },\n  { id: 'google', label: 'Google', categories: ['auth.google'],\n    keys: ['auth_google_enabled', 'auth_google_client_id'] },\n  { id: 'apple', label: 'Apple', categories: ['auth.apple'],\n    keys: ['auth_apple_enabled', 'auth_apple_client_id', 'auth_apple_team_id'] },\n  { id: 'solana', label: 'Solana', categories: ['auth.solana'],\n    keys: ['auth_solana_enabled', 'auth_solana_challenge_expiry'] },\n  { id: 'passkeys', label: 'Passkeys', categories: ['auth.webauthn'],\n    keys: ['auth_webauthn_enabled', 'auth_webauthn_rp_id', 'auth_webauthn_rp_name', 'auth_webauthn_rp_origin'] },\n  { id: 'instantlink', label: 'Instant Link', categories: ['auth.instantlink'],\n    keys: ['auth_instantlink_enabled', 'auth_instantlink_expiry', 'auth_instantlink_rate_limit'] },\n  { id: 'sso', label: 'SSO Providers', categories: [], isCustom: true },\n  { id: 'buttonorder', label: 'Button Order', categories: [], isCustom: true },\n  { id: 'postlogin', label: 'Post-Login', categories: ['postlogin', 'postlogin.welcome', 'postlogin.username', 'postlogin.complete', 'postlogin.wallet'],\n    keys: ['postlogin_redirect_url', 'postlogin_welcome_enabled', 'postlogin_welcome_route', 'postlogin_username_enabled', 'postlogin_complete_enabled', 'postlogin_wallet_enroll_enabled', 'postlogin_show_recovery_enabled'] },\n];\n\nexport interface AuthenticationSettingsProps {\n  className?: string;\n}\n\nexport function AuthenticationSettings({ className }: AuthenticationSettingsProps) {\n  const {\n    settings,\n    edits,\n    isLoading,\n    autosaveStatus,\n    autosaveError,\n    error,\n    fetchSettings,\n    handleChange,\n  } = useSettingsAutosave();\n\n  const [activeTab, setActiveTab] = useState<AuthTab>('email');\n\n  useEffect(() => {\n    fetchSettings();\n  }, [fetchSettings]);\n\n  // Get current tab config\n  const currentTab = TABS.find((t) => t.id === activeTab);\n\n  // Collect settings from all categories for the current tab\n  const allTabSettings = useMemo(() => {\n    if (!currentTab) return [];\n    const allSettings: (typeof settings)[string] = [];\n    for (const category of currentTab.categories) {\n      const categorySettings = settings[category] ?? [];\n      allSettings.push(...categorySettings);\n    }\n    return allSettings;\n  }, [settings, currentTab]);\n\n  const currentSettings = useMemo(() => {\n    if (!currentTab?.keys) return allTabSettings;\n    // Filter and sort by keys order\n    return allTabSettings\n      .filter((s) => currentTab.keys!.includes(s.key))\n      .sort((a, b) => currentTab.keys!.indexOf(a.key) - currentTab.keys!.indexOf(b.key));\n  }, [allTabSettings, currentTab]);\n\n  if (isLoading && Object.keys(settings).length === 0) {\n    return (\n      <div className={`cedros-system-settings cedros-system-settings-loading ${className ?? ''}`}>\n        <LoadingSpinner />\n        <span>Loading settings...</span>\n      </div>\n    );\n  }\n\n  if (error) {\n    return (\n      <div className={`cedros-system-settings ${className ?? ''}`}>\n        <ErrorMessage error={error.message} />\n      </div>\n    );\n  }\n\n  return (\n    <div className={`cedros-system-settings ${className ?? ''}`}>\n      <div className=\"cedros-settings-page-header\">\n        <div className=\"cedros-settings-page-header-content\">\n          <h2 className=\"cedros-settings-page-title\">Authentication</h2>\n          <p className=\"cedros-settings-page-description\">\n            Configure authentication providers and methods for user sign-in.\n          </p>\n        </div>\n        <AutosaveStatus status={autosaveStatus} error={autosaveError} />\n      </div>\n\n      {/* Tabs */}\n      <div className=\"cedros-admin-tabs cedros-admin-tabs--line\">\n        {TABS.map((tab) => (\n          <button\n            key={tab.id}\n            type=\"button\"\n            className={`cedros-admin-tab ${activeTab === tab.id ? 'cedros-admin-tab-active' : ''}`}\n            onClick={() => setActiveTab(tab.id)}\n            aria-selected={activeTab === tab.id}\n            role=\"tab\"\n          >\n            {tab.label}\n          </button>\n        ))}\n      </div>\n\n      {/* Tab content */}\n      <div className=\"cedros-admin-tab-content\" role=\"tabpanel\">\n        {currentTab?.id === 'buttonorder' ? (\n          <SocialButtonOrderSettings settings={settings} handleChange={handleChange} />\n        ) : currentTab?.isCustom ? (\n          <SsoProvidersSettings />\n        ) : currentSettings.length === 0 ? (\n          <div className=\"cedros-system-settings-empty\">\n            <p>No settings found for {currentTab?.label ?? 'this provider'}.</p>\n          </div>\n        ) : (\n          <SettingsSection settings={currentSettings} edits={edits} onChange={handleChange} />\n        )}\n      </div>\n    </div>\n  );\n}\n"],"names":["useSsoProviders","config","_internal","useCedrosLogin","serverUrl","getAccessTokenRef","useRef","providers","setProviders","useState","total","setTotal","isLoading","setIsLoading","error","setError","getHeaders","useCallback","token","fetchProviders","orgId","limit","offset","params","res","err","data","createProvider","input","provider","prev","updateProvider","id","p","deleteProvider","toggleProvider","enabled","SsoProvidersSettings","className","activeOrg","useOrgs","viewMode","setViewMode","editingProvider","setEditingProvider","formError","setFormError","useEffect","handleAdd","handleEdit","handleCancel","handleDelete","handleToggle","handleSave","jsx","LoadingSpinner","SsoProviderForm","jsxs","ErrorMessage","SsoProviderCard","onEdit","onDelete","onToggle","onSave","onCancel","isEditing","name","setName","issuerUrl","setIssuerUrl","clientId","setClientId","clientSecret","setClientSecret","emailDomain","setEmailDomain","allowRegistration","setAllowRegistration","setEnabled","handleSubmit","e","updates","GoogleIcon","AppleIcon","SolanaIcon","PasskeyIcon","PROVIDERS","DEFAULT_ORDER","PREVIEW_LABELS","isProviderEnabled","settings","enabledKey","group","found","s","readOrder","GrabHandle","SocialButtonOrderSettings","handleChange","order","setOrder","dragIdx","dragOverIdx","setDragOverIdx","persist","newOrder","onDragStart","idx","onDragOver","onDrop","targetIdx","fromIdx","next","moved","onDragEnd","meta","TABS","AuthenticationSettings","edits","autosaveStatus","autosaveError","fetchSettings","useSettingsAutosave","activeTab","setActiveTab","currentTab","t","allTabSettings","useMemo","allSettings","category","categorySettings","currentSettings","a","b","AutosaveStatus","tab","SettingsSection"],"mappings":";;;;;;;AAkDO,SAASA,IAAkB;AAChC,QAAM,EAAE,QAAAC,GAAQ,WAAAC,EAAA,IAAcC,EAAA,GACxBC,IAAYH,EAAO,WAInBI,IAAoBC,EAAOJ,GAAW,mBAAmB,MAAM,KAAK;AAC1E,EAAAG,EAAkB,UAAUH,GAAW,mBAAmB,MAAM;AAEhE,QAAM,CAACK,GAAWC,CAAY,IAAIC,EAAwB,CAAA,CAAE,GACtD,CAACC,GAAOC,CAAQ,IAAIF,EAAS,CAAC,GAC9B,CAACG,GAAWC,CAAY,IAAIJ,EAAS,EAAK,GAC1C,CAACK,GAAOC,CAAQ,IAAIN,EAAuB,IAAI,GAG/CO,IAAaC,EAAY,MAAM;AACnC,UAAMC,IAAQb,EAAkB,QAAA;AAChC,WAAO;AAAA,MACL,gBAAgB;AAAA,MAChB,GAAIa,IAAQ,EAAE,eAAe,UAAUA,CAAK,OAAO,CAAA;AAAA,IAAC;AAAA,EAExD,GAAG,CAAA,CAAE,GAECC,IAAiBF;AAAA,IACrB,OAAOG,GAAgBC,IAAQ,IAAIC,IAAS,MAAM;AAChD,MAAAT,EAAa,EAAI,GACjBE,EAAS,IAAI;AACb,UAAI;AACF,cAAMQ,IAAS,IAAI,gBAAA;AACnB,QAAIH,KAAOG,EAAO,IAAI,UAAUH,CAAK,GACrCG,EAAO,IAAI,SAAS,OAAOF,CAAK,CAAC,GACjCE,EAAO,IAAI,UAAU,OAAOD,CAAM,CAAC;AAEnC,cAAME,IAAM,MAAM,MAAM,GAAGpB,CAAS,wBAAwBmB,CAAM,IAAI;AAAA,UACpE,SAASP,EAAA;AAAA,QAAW,CACrB;AAED,YAAI,CAACQ,EAAI,IAAI;AACX,gBAAMC,IAAM,MAAMD,EAAI,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AAC7C,gBAAM,IAAI,MAAMC,EAAI,SAAS,kCAAkCD,EAAI,MAAM,EAAE;AAAA,QAC7E;AAEA,cAAME,IAAqB,MAAMF,EAAI,KAAA;AACrC,eAAAhB,EAAakB,EAAK,SAAS,GAC3Bf,EAASe,EAAK,KAAK,GACZA;AAAA,MACT,SAASD,GAAK;AACZ,cAAMX,IAAQW,aAAe,QAAQA,IAAM,IAAI,MAAM,OAAOA,CAAG,CAAC;AAChE,cAAAV,EAASD,CAAK,GACRA;AAAAA,MACR,UAAA;AACE,QAAAD,EAAa,EAAK;AAAA,MACpB;AAAA,IACF;AAAA,IACA,CAACT,GAAWY,CAAU;AAAA,EAAA,GAGlBW,IAAiBV;AAAA,IACrB,OAAOW,MAAwD;AAC7D,MAAAf,EAAa,EAAI,GACjBE,EAAS,IAAI;AACb,UAAI;AACF,cAAMS,IAAM,MAAM,MAAM,GAAGpB,CAAS,wBAAwB;AAAA,UAC1D,QAAQ;AAAA,UACR,SAASY,EAAA;AAAA,UACT,MAAM,KAAK,UAAUY,CAAK;AAAA,QAAA,CAC3B;AAED,YAAI,CAACJ,EAAI,IAAI;AACX,gBAAMC,IAAM,MAAMD,EAAI,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AAC7C,gBAAM,IAAI,MAAMC,EAAI,SAAS,kCAAkCD,EAAI,MAAM,EAAE;AAAA,QAC7E;AAEA,cAAMK,IAAwB,MAAML,EAAI,KAAA;AACxC,eAAAhB,EAAa,CAACsB,MAAS,CAAC,GAAGA,GAAMD,CAAQ,CAAC,GAC1ClB,EAAS,CAACmB,MAASA,IAAO,CAAC,GACpBD;AAAA,MACT,SAASJ,GAAK;AACZ,cAAMX,IAAQW,aAAe,QAAQA,IAAM,IAAI,MAAM,OAAOA,CAAG,CAAC;AAChE,cAAAV,EAASD,CAAK,GACRA;AAAAA,MACR,UAAA;AACE,QAAAD,EAAa,EAAK;AAAA,MACpB;AAAA,IACF;AAAA,IACA,CAACT,GAAWY,CAAU;AAAA,EAAA,GAGlBe,IAAiBd;AAAA,IACrB,OAAOe,GAAYJ,MAAwD;AACzE,MAAAf,EAAa,EAAI,GACjBE,EAAS,IAAI;AACb,UAAI;AACF,cAAMS,IAAM,MAAM,MAAM,GAAGpB,CAAS,wBAAwB4B,CAAE,IAAI;AAAA,UAChE,QAAQ;AAAA,UACR,SAAShB,EAAA;AAAA,UACT,MAAM,KAAK,UAAUY,CAAK;AAAA,QAAA,CAC3B;AAED,YAAI,CAACJ,EAAI,IAAI;AACX,gBAAMC,IAAM,MAAMD,EAAI,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AAC7C,gBAAM,IAAI,MAAMC,EAAI,SAAS,kCAAkCD,EAAI,MAAM,EAAE;AAAA,QAC7E;AAEA,cAAMK,IAAwB,MAAML,EAAI,KAAA;AACxC,eAAAhB,EAAa,CAACsB,MAASA,EAAK,IAAI,CAACG,MAAOA,EAAE,OAAOD,IAAKH,IAAWI,CAAE,CAAC,GAC7DJ;AAAA,MACT,SAASJ,GAAK;AACZ,cAAMX,IAAQW,aAAe,QAAQA,IAAM,IAAI,MAAM,OAAOA,CAAG,CAAC;AAChE,cAAAV,EAASD,CAAK,GACRA;AAAAA,MACR,UAAA;AACE,QAAAD,EAAa,EAAK;AAAA,MACpB;AAAA,IACF;AAAA,IACA,CAACT,GAAWY,CAAU;AAAA,EAAA,GAGlBkB,IAAiBjB;AAAA,IACrB,OAAOe,MAA8B;AACnC,MAAAnB,EAAa,EAAI,GACjBE,EAAS,IAAI;AACb,UAAI;AACF,cAAMS,IAAM,MAAM,MAAM,GAAGpB,CAAS,wBAAwB4B,CAAE,IAAI;AAAA,UAChE,QAAQ;AAAA,UACR,SAAShB,EAAA;AAAA,QAAW,CACrB;AAED,YAAI,CAACQ,EAAI,IAAI;AACX,gBAAMC,IAAM,MAAMD,EAAI,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AAC7C,gBAAM,IAAI,MAAMC,EAAI,SAAS,kCAAkCD,EAAI,MAAM,EAAE;AAAA,QAC7E;AAEA,QAAAhB,EAAa,CAACsB,MAASA,EAAK,OAAO,CAACG,MAAMA,EAAE,OAAOD,CAAE,CAAC,GACtDrB,EAAS,CAACmB,MAASA,IAAO,CAAC;AAAA,MAC7B,SAASL,GAAK;AACZ,cAAMX,IAAQW,aAAe,QAAQA,IAAM,IAAI,MAAM,OAAOA,CAAG,CAAC;AAChE,cAAAV,EAASD,CAAK,GACRA;AAAAA,MACR,UAAA;AACE,QAAAD,EAAa,EAAK;AAAA,MACpB;AAAA,IACF;AAAA,IACA,CAACT,GAAWY,CAAU;AAAA,EAAA,GAGlBmB,IAAiBlB;AAAA,IACrB,OAAOe,GAAYI,MACVL,EAAeC,GAAI,EAAE,SAAAI,GAAS;AAAA,IAEvC,CAACL,CAAc;AAAA,EAAA;AAGjB,SAAO;AAAA,IACL,WAAAxB;AAAA,IACA,OAAAG;AAAA,IACA,WAAAE;AAAA,IACA,OAAAE;AAAA,IACA,gBAAAK;AAAA,IACA,gBAAAQ;AAAA,IACA,gBAAAI;AAAA,IACA,gBAAAG;AAAA,IACA,gBAAAC;AAAA,EAAA;AAEJ;AClMO,SAASE,EAAqB,EAAE,WAAAC,KAAwC;AAC7E,QAAM;AAAA,IACJ,WAAA/B;AAAA,IACA,WAAAK;AAAA,IACA,OAAAE;AAAA,IACA,gBAAAK;AAAA,IACA,gBAAAQ;AAAA,IACA,gBAAAI;AAAA,IACA,gBAAAG;AAAA,IACA,gBAAAC;AAAA,EAAA,IACEnC,EAAA,GAEE,EAAE,WAAAuC,EAAA,IAAcC,EAAA,GAChB,CAACC,GAAUC,CAAW,IAAIjC,EAAmB,MAAM,GACnD,CAACkC,GAAiBC,CAAkB,IAAInC,EAA6B,IAAI,GACzE,CAACoC,GAAWC,CAAY,IAAIrC,EAAwB,IAAI;AAE9D,EAAAsC,EAAU,MAAM;AACd,IAAA5B,EAAeoB,GAAW,EAAE;AAAA,EAC9B,GAAG,CAACpB,GAAgBoB,GAAW,EAAE,CAAC;AAElC,QAAMS,IAAY,MAAM;AACtB,IAAAJ,EAAmB,IAAI,GACvBE,EAAa,IAAI,GACjBJ,EAAY,KAAK;AAAA,EACnB,GAEMO,IAAa,CAACpB,MAA0B;AAC5C,IAAAe,EAAmBf,CAAQ,GAC3BiB,EAAa,IAAI,GACjBJ,EAAY,MAAM;AAAA,EACpB,GAEMQ,IAAe,MAAM;AACzB,IAAAR,EAAY,MAAM,GAClBE,EAAmB,IAAI,GACvBE,EAAa,IAAI;AAAA,EACnB,GAEMK,IAAe,OAAOtB,MAA0B;AACpD,QAAK,QAAQ,wBAAwBA,EAAS,IAAI,2BAA2B;AAG7E,UAAI;AACF,cAAMK,EAAeL,EAAS,EAAE;AAAA,MAClC,QAAQ;AAAA,MAER;AAAA,EACF,GAEMuB,IAAe,OAAOvB,MAA0B;AACpD,QAAI;AACF,YAAMM,EAAeN,EAAS,IAAI,CAACA,EAAS,OAAO;AAAA,IACrD,QAAQ;AAAA,IAER;AAAA,EACF,GAEMwB,IAAa,OAAO3B,MAA0D;AAClF,IAAAoB,EAAa,IAAI;AACjB,QAAI;AACF,MAAIL,MAAa,QACf,MAAMd,EAAeD,CAA8B,IAC1CiB,KACT,MAAMZ,EAAeY,EAAgB,IAAIjB,CAA8B,GAEzEgB,EAAY,MAAM,GAClBE,EAAmB,IAAI;AAAA,IACzB,SAASnB,GAAK;AACZ,MAAAqB,EAAarB,aAAe,QAAQA,EAAI,UAAU,yBAAyB;AAAA,IAC7E;AAAA,EACF;AAEA,SAAIb,KAAaL,EAAU,WAAW,sBAEjC,OAAA,EAAI,WAAW,yDAAyD+B,KAAa,EAAE,IACtF,UAAA;AAAA,IAAA,gBAAAgB,EAACC,GAAA,EAAe;AAAA,IAChB,gBAAAD,EAAC,UAAK,UAAA,2BAAA,CAAwB;AAAA,EAAA,GAChC,IAIAb,MAAa,SAASA,MAAa,2BAElC,OAAA,EAAI,WAAW,0BAA0BH,KAAa,EAAE,IACvD,UAAA,gBAAAgB;AAAA,IAACE;AAAA,IAAA;AAAA,MACC,UAAUb;AAAA,MACV,OAAOJ,GAAW;AAAA,MAClB,OAAOM;AAAA,MACP,WAAAjC;AAAA,MACA,QAAQyC;AAAA,MACR,UAAUH;AAAA,IAAA;AAAA,EAAA,GAEd,sBAKD,OAAA,EAAI,WAAW,0BAA0BZ,KAAa,EAAE,IACvD,UAAA;AAAA,IAAA,gBAAAmB,EAAC,OAAA,EAAI,WAAU,+BACb,UAAA;AAAA,MAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,uCACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,8BAA6B,UAAA,iBAAa;AAAA,QACxD,gBAAAA,EAAC,KAAA,EAAE,WAAU,oCAAmC,UAAA,mEAAA,CAEhD;AAAA,MAAA,GACF;AAAA,MACA,gBAAAA,EAAC,YAAO,MAAK,UAAS,WAAU,iCAAgC,SAASN,GAAW,UAAA,eAAA,CAEpF;AAAA,IAAA,GACF;AAAA,IAEClC,KAAS,gBAAAwC,EAACI,GAAA,EAAa,OAAO5C,EAAM,SAAS;AAAA,IAE7CP,EAAU,WAAW,IACpB,gBAAAkD,EAAC,OAAA,EAAI,WAAU,gCACb,UAAA;AAAA,MAAA,gBAAAH,EAAC,OAAE,UAAA,+BAAA,CAA4B;AAAA,MAC/B,gBAAAA,EAAC,KAAA,EAAE,WAAU,qBAAoB,UAAA,+EAAA,CAEjC;AAAA,IAAA,EAAA,CACF,sBAEC,OAAA,EAAI,WAAU,4BACZ,UAAA/C,EAAU,IAAI,CAACsB,MACd,gBAAAyB;AAAA,MAACK;AAAA,MAAA;AAAA,QAEC,UAAA9B;AAAA,QACA,QAAQ,MAAMoB,EAAWpB,CAAQ;AAAA,QACjC,UAAU,MAAMsB,EAAatB,CAAQ;AAAA,QACrC,UAAU,MAAMuB,EAAavB,CAAQ;AAAA,MAAA;AAAA,MAJhCA,EAAS;AAAA,IAAA,CAMjB,EAAA,CACH;AAAA,EAAA,GAEJ;AAEJ;AAaA,SAAS8B,EAAgB,EAAE,UAAA9B,GAAU,QAAA+B,GAAQ,UAAAC,GAAU,UAAAC,KAAkC;AACvF,SACE,gBAAAL;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,WAAW,4BAA4B5B,EAAS,UAAU,KAAK,oCAAoC;AAAA,MAEnG,UAAA;AAAA,QAAA,gBAAA4B,EAAC,OAAA,EAAI,WAAU,mCACb,UAAA;AAAA,UAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,iCACb,UAAA;AAAA,YAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,iCAAiC,UAAAzB,EAAS,MAAK;AAAA,YAC7D,gBAAAyB,EAAC,KAAA,EAAE,WAAU,mCAAmC,YAAS,UAAA,CAAU;AAAA,UAAA,GACrE;AAAA,UACA,gBAAAG;AAAA,YAAC;AAAA,YAAA;AAAA,cACC,MAAK;AAAA,cACL,MAAK;AAAA,cACL,gBAAc5B,EAAS;AAAA,cACvB,WAAW,iBAAiBA,EAAS,UAAU,qBAAqB,mBAAmB;AAAA,cACvF,SAASiC;AAAA,cAET,UAAA;AAAA,gBAAA,gBAAAR,EAAC,UAAK,WAAU,uBACd,4BAAC,QAAA,EAAK,WAAU,uBAAsB,EAAA,CACxC;AAAA,kCACC,QAAA,EAAK,WAAU,uBAAuB,UAAAzB,EAAS,UAAU,YAAY,WAAA,CAAW;AAAA,cAAA;AAAA,YAAA;AAAA,UAAA;AAAA,QACnF,GACF;AAAA,QAEA,gBAAA4B,EAAC,OAAA,EAAI,WAAU,oCACb,UAAA;AAAA,UAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,mCACb,UAAA;AAAA,YAAA,gBAAAH,EAAC,QAAA,EAAK,WAAU,yCAAwC,UAAA,aAAS;AAAA,YACjE,gBAAAA,EAAC,QAAA,EAAK,WAAU,yCAAyC,YAAS,SAAA,CAAS;AAAA,UAAA,GAC7E;AAAA,UACCzB,EAAS,eACR,gBAAA4B,EAAC,OAAA,EAAI,WAAU,mCACb,UAAA;AAAA,YAAA,gBAAAH,EAAC,QAAA,EAAK,WAAU,yCAAwC,UAAA,gBAAY;AAAA,YACpE,gBAAAG,EAAC,QAAA,EAAK,WAAU,yCAAwC,UAAA;AAAA,cAAA;AAAA,cAAE5B,EAAS;AAAA,YAAA,EAAA,CAAY;AAAA,UAAA,GACjF;AAAA,UAEF,gBAAA4B,EAAC,OAAA,EAAI,WAAU,mCACb,UAAA;AAAA,YAAA,gBAAAH,EAAC,QAAA,EAAK,WAAU,yCAAwC,UAAA,gBAAY;AAAA,8BACnE,QAAA,EAAK,WAAU,yCACb,UAAAzB,EAAS,oBAAoB,YAAY,sBAAA,CAC5C;AAAA,UAAA,EAAA,CACF;AAAA,QAAA,GACF;AAAA,QAEA,gBAAA4B,EAAC,OAAA,EAAI,WAAU,oCACb,UAAA;AAAA,UAAA,gBAAAH,EAAC,YAAO,MAAK,UAAS,WAAU,+BAA8B,SAASM,GAAQ,UAAA,OAAA,CAE/E;AAAA,UACA,gBAAAN;AAAA,YAAC;AAAA,YAAA;AAAA,cACC,MAAK;AAAA,cACL,WAAU;AAAA,cACV,SAASO;AAAA,cACV,UAAA;AAAA,YAAA;AAAA,UAAA;AAAA,QAED,EAAA,CACF;AAAA,MAAA;AAAA,IAAA;AAAA,EAAA;AAGN;AAeA,SAASL,EAAgB;AAAA,EACvB,UAAA3B;AAAA,EACA,OAAAT;AAAA,EACA,OAAAN;AAAA,EACA,WAAAF;AAAA,EACA,QAAAmD;AAAA,EACA,UAAAC;AACF,GAAyB;AACvB,QAAMC,IAAY,EAAQpC,GAEpB,CAACqC,GAAMC,CAAO,IAAI1D,EAASoB,GAAU,QAAQ,EAAE,GAC/C,CAACuC,GAAWC,CAAY,IAAI5D,EAASoB,GAAU,aAAa,EAAE,GAC9D,CAACyC,GAAUC,CAAW,IAAI9D,EAASoB,GAAU,YAAY,EAAE,GAC3D,CAAC2C,GAAcC,CAAe,IAAIhE,EAAS,EAAE,GAC7C,CAACiE,GAAaC,CAAc,IAAIlE,EAASoB,GAAU,eAAe,EAAE,GACpE,CAAC+C,GAAmBC,CAAoB,IAAIpE,EAASoB,GAAU,qBAAqB,EAAI,GACxF,CAACO,GAAS0C,CAAU,IAAIrE,EAASoB,GAAU,WAAW,EAAI,GAE1DkD,IAAe9D;AAAA,IACnB,CAAC+D,MAAuB;AAGtB,UAFAA,EAAE,eAAA,GAEEf,GAAW;AACb,cAAMgB,IAAkC;AAAA,UACtC,MAAAf;AAAA,UACA,WAAAE;AAAA,UACA,UAAAE;AAAA,UACA,aAAaI,KAAe;AAAA,UAC5B,mBAAAE;AAAA,UACA,SAAAxC;AAAA,QAAA;AAGF,QAAIoC,MACFS,EAAQ,eAAeT,IAEzBT,EAAOkB,CAAO;AAAA,MAChB,OAAO;AACL,YAAI,CAAC7D;AACH;AAYF,QAAA2C,EAVqC;AAAA,UACnC,OAAA3C;AAAA,UACA,MAAA8C;AAAA,UACA,WAAAE;AAAA,UACA,UAAAE;AAAA,UACA,cAAAE;AAAA,UACA,aAAaE,KAAe;AAAA,UAC5B,mBAAAE;AAAA,UACA,SAAAxC;AAAA,QAAA,CAES;AAAA,MACb;AAAA,IACF;AAAA,IACA;AAAA,MACE6B;AAAA,MACA7C;AAAA,MACA8C;AAAA,MACAE;AAAA,MACAE;AAAA,MACAE;AAAA,MACAE;AAAA,MACAE;AAAA,MACAxC;AAAA,MACA2B;AAAA,IAAA;AAAA,EACF;AAGF,SACE,gBAAAN,EAAC,QAAA,EAAK,WAAU,4BAA2B,UAAUsB,GACnD,UAAA;AAAA,IAAA,gBAAAzB,EAAC,SAAI,WAAU,+BACb,UAAA,gBAAAG,EAAC,OAAA,EAAI,WAAU,uCACb,UAAA;AAAA,MAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,8BACX,UAAAW,IAAY,sBAAsB,oBACrC;AAAA,MACA,gBAAAX,EAAC,KAAA,EAAE,WAAU,oCAAmC,UAAA,qEAAA,CAEhD;AAAA,IAAA,EAAA,CACF,EAAA,CACF;AAAA,IAECxC,KAAS,gBAAAwC,EAACI,GAAA,EAAa,OAAA5C,EAAA,CAAc;AAAA,IAEtC,gBAAA2C,EAAC,OAAA,EAAI,WAAU,uBACb,UAAA;AAAA,MAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,YAAW,UAAA,iBAExD;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOY;AAAA,YACP,UAAU,CAACc,MAAMb,EAAQa,EAAE,OAAO,KAAK;AAAA,YACvC,aAAY;AAAA,YACZ,UAAQ;AAAA,UAAA;AAAA,QAAA;AAAA,MACV,GACF;AAAA,MAEA,gBAAAvB,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,cAAa,UAAA,cAE1D;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOc;AAAA,YACP,UAAU,CAACY,MAAMX,EAAaW,EAAE,OAAO,KAAK;AAAA,YAC5C,aAAY;AAAA,YACZ,UAAQ;AAAA,UAAA;AAAA,QAAA;AAAA,QAEV,gBAAA1B,EAAC,KAAA,EAAE,WAAU,oBAAmB,UAAA,mFAAA,CAEhC;AAAA,MAAA,GACF;AAAA,MAEA,gBAAAG,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,iBAAgB,UAAA,aAE7D;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOgB;AAAA,YACP,UAAU,CAACU,MAAMT,EAAYS,EAAE,OAAO,KAAK;AAAA,YAC3C,aAAY;AAAA,YACZ,UAAQ;AAAA,UAAA;AAAA,QAAA;AAAA,MACV,GACF;AAAA,MAEA,gBAAAvB,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAA,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,qBAAoB,UAAA;AAAA,UAAA;AAAA,UACjD;AAAA,UACbQ,KACC,gBAAAX,EAAC,QAAA,EAAK,WAAU,2BAA0B,UAAA,gCAAA,CAA6B;AAAA,QAAA,GAE3E;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOkB;AAAA,YACP,UAAU,CAACQ,MAAMP,EAAgBO,EAAE,OAAO,KAAK;AAAA,YAC/C,aAAaf,IAAY,aAAa;AAAA,YACtC,UAAU,CAACA;AAAA,UAAA;AAAA,QAAA;AAAA,MACb,GACF;AAAA,MAEA,gBAAAR,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,oBAAmB,UAAA,2BAEhE;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOoB;AAAA,YACP,UAAU,CAACM,MAAML,EAAeK,EAAE,OAAO,KAAK;AAAA,YAC9C,aAAY;AAAA,UAAA;AAAA,QAAA;AAAA,QAEd,gBAAA1B,EAAC,KAAA,EAAE,WAAU,oBAAmB,UAAA,iDAAA,CAA8C;AAAA,MAAA,GAChF;AAAA,wBAEC,OAAA,EAAI,WAAU,qBACb,UAAA,gBAAAG,EAAC,SAAA,EAAM,WAAU,wBACf,UAAA;AAAA,QAAA,gBAAAH;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,MAAK;AAAA,YACL,SAASsB;AAAA,YACT,UAAU,CAACI,MAAMH,EAAqBG,EAAE,OAAO,OAAO;AAAA,UAAA;AAAA,QAAA;AAAA,QAExD,gBAAA1B,EAAC,UAAK,UAAA,sCAAA,CAAmC;AAAA,MAAA,EAAA,CAC3C,EAAA,CACF;AAAA,wBAEC,OAAA,EAAI,WAAU,qBACb,UAAA,gBAAAG,EAAC,SAAA,EAAM,WAAU,wBACf,UAAA;AAAA,QAAA,gBAAAH;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,MAAK;AAAA,YACL,SAASlB;AAAA,YACT,UAAU,CAAC4C,MAAMF,EAAWE,EAAE,OAAO,OAAO;AAAA,UAAA;AAAA,QAAA;AAAA,QAE9C,gBAAA1B,EAAC,UAAK,UAAA,uBAAA,CAAoB;AAAA,MAAA,EAAA,CAC5B,EAAA,CACF;AAAA,IAAA,GACF;AAAA,IAEA,gBAAAG,EAAC,OAAA,EAAI,WAAU,uBACb,UAAA;AAAA,MAAA,gBAAAH;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,SAASU;AAAA,UACT,UAAUpD;AAAA,UACX,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,MAGD,gBAAA0C,EAAC,UAAA,EAAO,MAAK,UAAS,WAAU,iCAAgC,UAAU1C,GACvE,UAAAA,IAAY,cAAcqD,IAAY,iBAAiB,eAAA,CAC1D;AAAA,IAAA,EAAA,CACF;AAAA,EAAA,GACF;AAEJ;AC7ZA,SAASiB,IAAa;AACpB,SACE,gBAAAzB,EAAC,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,aAAY,MAAK,QAAO,eAAY,QACtE,UAAA;AAAA,IAAA,gBAAAH,EAAC,QAAA,EAAK,GAAE,4IAA2I,MAAK,WAAU;AAAA,IAClK,gBAAAA,EAAC,QAAA,EAAK,GAAE,uJAAsJ,MAAK,WAAU;AAAA,IAC7K,gBAAAA,EAAC,QAAA,EAAK,GAAE,yIAAwI,MAAK,WAAU;AAAA,IAC/J,gBAAAA,EAAC,QAAA,EAAK,GAAE,6JAA4J,MAAK,UAAA,CAAU;AAAA,EAAA,GACrL;AAEJ;AAEA,SAAS6B,IAAY;AACnB,2BACG,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,aAAY,MAAK,gBAAe,eAAY,QAC9E,UAAA,gBAAA7B,EAAC,QAAA,EAAK,GAAE,6bAA4b,GACtc;AAEJ;AAEA,SAAS8B,IAAa;AACpB,SACE,gBAAA3B,EAAC,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,eAAc,MAAK,gBAAe,eAAY,QAChF,UAAA;AAAA,IAAA,gBAAAH,EAAC,QAAA,EAAK,GAAE,2JAAA,CAA2J;AAAA,IACnK,gBAAAA,EAAC,QAAA,EAAK,GAAE,2JAAA,CAA2J;AAAA,IACnK,gBAAAA,EAAC,QAAA,EAAK,GAAE,4JAAA,CAA4J;AAAA,EAAA,GACtK;AAEJ;AAEA,SAAS+B,IAAc;AACrB,2BACG,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAAM,eAAc,SAAQ,gBAAe,SAAQ,eAAY,QAC3J,UAAA;AAAA,IAAA,gBAAA/B,EAAC,QAAA,EAAK,GAAE,4CAAA,CAA4C;AAAA,IACpD,gBAAAA,EAAC,QAAA,EAAK,GAAE,iCAAA,CAAiC;AAAA,IACzC,gBAAAA,EAAC,QAAA,EAAK,GAAE,oCAAA,CAAoC;AAAA,IAC5C,gBAAAA,EAAC,QAAA,EAAK,GAAE,yBAAA,CAAyB;AAAA,IACjC,gBAAAA,EAAC,QAAA,EAAK,GAAE,YAAA,CAAY;AAAA,IACpB,gBAAAA,EAAC,QAAA,EAAK,GAAE,+BAAA,CAA+B;AAAA,IACvC,gBAAAA,EAAC,QAAA,EAAK,GAAE,2CAAA,CAA2C;AAAA,IACnD,gBAAAA,EAAC,QAAA,EAAK,GAAE,gCAAA,CAAgC;AAAA,IACxC,gBAAAA,EAAC,QAAA,EAAK,GAAE,2BAAA,CAA2B;AAAA,EAAA,GACrC;AAEJ;AAEA,MAAMgC,IAA0C;AAAA,EAC9C,UAAU,EAAE,OAAO,WAAW,MAAM,gBAAAhC,EAAC+B,GAAA,CAAA,CAAY,GAAI,YAAY,wBAAA;AAAA,EACjE,QAAQ,EAAE,OAAO,UAAU,MAAM,gBAAA/B,EAAC4B,GAAA,CAAA,CAAW,GAAI,YAAY,sBAAA;AAAA,EAC7D,OAAO,EAAE,OAAO,SAAS,MAAM,gBAAA5B,EAAC6B,GAAA,CAAA,CAAU,GAAI,YAAY,qBAAA;AAAA,EAC1D,QAAQ,EAAE,OAAO,UAAU,MAAM,gBAAA7B,EAAC8B,GAAA,CAAA,CAAW,GAAI,YAAY,sBAAA;AAC/D,GAEMG,IAAgB,CAAC,YAAY,UAAU,SAAS,QAAQ,GAExDC,IAAyC;AAAA,EAC7C,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AACV;AAOA,SAASC,EACPC,GACAC,GACS;AACT,aAAWC,KAAS,OAAO,OAAOF,CAAQ,GAAG;AAC3C,UAAMG,IAAQD,EAAM,KAAK,CAACE,MAAMA,EAAE,QAAQH,CAAU;AACpD,QAAIE,EAAO,QAAOA,EAAM,UAAU;AAAA,EACpC;AACA,SAAO;AACT;AAGA,SAASE,EAAUL,GAAsE;AACvF,aAAWE,KAAS,OAAO,OAAOF,CAAQ,GAAG;AAC3C,UAAMG,IAAQD,EAAM,KAAK,CAACE,MAAMA,EAAE,QAAQ,wBAAwB;AAClE,QAAID,KAASA,EAAM,MAAO,QAAOA,EAAM,MAAM,MAAM,GAAG,EAAE,IAAI,CAACC,MAAMA,EAAE,MAAM;AAAA,EAC7E;AACA,SAAOP;AACT;AAMA,SAASS,IAAa;AACpB,2BACG,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,aAAY,MAAK,gBAAe,eAAY,QAAO,OAAO,EAAE,SAAS,OACvG,UAAA;AAAA,IAAA,gBAAA1C,EAAC,YAAO,IAAG,KAAI,IAAG,KAAI,GAAE,OAAM;AAAA,sBAC7B,UAAA,EAAO,IAAG,MAAK,IAAG,KAAI,GAAE,OAAM;AAAA,sBAC9B,UAAA,EAAO,IAAG,KAAI,IAAG,KAAI,GAAE,OAAM;AAAA,sBAC7B,UAAA,EAAO,IAAG,MAAK,IAAG,KAAI,GAAE,OAAM;AAAA,sBAC9B,UAAA,EAAO,IAAG,KAAI,IAAG,MAAK,GAAE,OAAM;AAAA,sBAC9B,UAAA,EAAO,IAAG,MAAK,IAAG,MAAK,GAAE,MAAA,CAAM;AAAA,EAAA,GAClC;AAEJ;AAMO,SAAS2C,GAA0B,EAAE,UAAAP,GAAU,cAAAQ,KAAgD;AACpG,QAAM,CAACC,GAAOC,CAAQ,IAAI3F,EAAmB,MAAMsF,EAAUL,CAAQ,CAAC,GAChEW,IAAU/F,EAAsB,IAAI,GACpC,CAACgG,GAAaC,CAAc,IAAI9F,EAAwB,IAAI,GAE5D+F,IAAUvF;AAAA,IACd,CAACwF,MAAuB;AACtB,MAAAL,EAASK,CAAQ,GACjBP,EAAa,0BAA0BO,EAAS,KAAK,GAAG,CAAC;AAAA,IAC3D;AAAA,IACA,CAACP,CAAY;AAAA,EAAA,GAGTQ,IAAczF,EAAY,CAAC0F,MAAgB;AAC/C,IAAAN,EAAQ,UAAUM;AAAA,EACpB,GAAG,CAAA,CAAE,GAECC,IAAa3F,EAAY,CAAC+D,GAAoB2B,MAAgB;AAClE,IAAA3B,EAAE,eAAA,GACFuB,EAAeI,CAAG;AAAA,EACpB,GAAG,CAAA,CAAE,GAECE,IAAS5F;AAAA,IACb,CAAC6F,MAAsB;AACrB,YAAMC,IAAUV,EAAQ;AACxB,UAAIU,MAAY,QAAQA,MAAYD,GAAW;AAC7C,QAAAP,EAAe,IAAI;AACnB;AAAA,MACF;AACA,YAAMS,IAAO,CAAC,GAAGb,CAAK,GAChB,CAACc,CAAK,IAAID,EAAK,OAAOD,GAAS,CAAC;AACtC,MAAAC,EAAK,OAAOF,GAAW,GAAGG,CAAK,GAC/BT,EAAQQ,CAAI,GACZX,EAAQ,UAAU,MAClBE,EAAe,IAAI;AAAA,IACrB;AAAA,IACA,CAACJ,GAAOK,CAAO;AAAA,EAAA,GAGXU,IAAYjG,EAAY,MAAM;AAClC,IAAAoF,EAAQ,UAAU,MAClBE,EAAe,IAAI;AAAA,EACrB,GAAG,CAAA,CAAE;AAEL,SACE,gBAAA9C,EAAC,OAAA,EAAI,WAAU,0BACb,UAAA;AAAA,IAAA,gBAAAH,EAAC,SAAI,WAAU,+BACb,UAAA,gBAAAG,EAAC,OAAA,EAAI,WAAU,uCACb,UAAA;AAAA,MAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,8BAA6B,UAAA,gBAAY;AAAA,MACvD,gBAAAA,EAAC,KAAA,EAAE,WAAU,oCAAmC,UAAA,iEAAA,CAEhD;AAAA,IAAA,EAAA,CACF,EAAA,CACF;AAAA,IAEA,gBAAAG,EAAC,OAAA,EAAI,OAAO,EAAE,SAAS,QAAQ,KAAK,QAAQ,UAAU,OAAA,GAEpD,UAAA;AAAA,MAAA,gBAAAH,EAAC,OAAA,EAAI,OAAO,EAAE,MAAM,aAAa,UAAU,IAAA,GACzC,UAAA,gBAAAA,EAAC,MAAA,EAAG,OAAO,EAAE,WAAW,QAAQ,SAAS,GAAG,QAAQ,GAAG,SAAS,QAAQ,eAAe,UAAU,KAAK,SAAA,GACnG,UAAA6C,EAAM,IAAI,CAACnE,GAAI2E,MAAQ;AACtB,cAAMQ,IAAO7B,EAAUtD,CAAE;AACzB,YAAI,CAACmF,EAAM,QAAO;AAClB,cAAM/E,IAAUqD,EAAkBC,GAAUyB,EAAK,UAAU;AAE3D,eACE,gBAAA1D;AAAA,UAAC;AAAA,UAAA;AAAA,YAEC,WAAS;AAAA,YACT,aAAa,MAAMiD,EAAYC,CAAG;AAAA,YAClC,YAAY,CAAC3B,MAAM4B,EAAW5B,GAAG2B,CAAG;AAAA,YACpC,QAAQ,MAAME,EAAOF,CAAG;AAAA,YACxB,WAAAO;AAAA,YACA,WAAU;AAAA,YACV,OAAO;AAAA,cACL,SAAS;AAAA,cACT,YAAY;AAAA,cACZ,KAAK;AAAA,cACL,SAAS;AAAA,cACT,cAAc;AAAA,cACd,QAhBaZ,MAAgBK,IAiBzB,6CACA;AAAA,cACJ,YAAY;AAAA,cACZ,QAAQ;AAAA,cACR,SAASvE,IAAU,IAAI;AAAA,cACvB,YAAY;AAAA,YAAA;AAAA,YAGd,UAAA;AAAA,cAAA,gBAAAkB,EAAC0C,GAAA,EAAW;AAAA,cACZ,gBAAA1C,EAAC,QAAA,EAAK,WAAU,sBAAqB,OAAO,EAAE,SAAS,QAAQ,YAAY,SAAA,GACxE,UAAA6D,EAAK,KAAA,CACR;AAAA,cACA,gBAAA7D,EAAC,QAAA,EAAK,OAAO,EAAE,MAAM,GAAG,YAAY,KAAK,UAAU,WAAA,GAAe,UAAA6D,EAAK,MAAA,CAAM;AAAA,cAC7E,gBAAA7D;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBACC,OAAO;AAAA,oBACL,UAAU;AAAA,oBACV,SAAS;AAAA,oBACT,cAAc;AAAA,oBACd,YAAYlB,IACR,mCACA;AAAA,oBACJ,OAAOA,IACH,2CACA;AAAA,kBAAA;AAAA,kBAGL,cAAU,YAAY;AAAA,gBAAA;AAAA,cAAA;AAAA,YACzB;AAAA,UAAA;AAAA,UAzCKJ;AAAA,QAAA;AAAA,MA4CX,CAAC,GACH,GACF;AAAA,MAGA,gBAAAyB,EAAC,SAAI,OAAO,EAAE,MAAM,aAAa,UAAU,OACzC,UAAA;AAAA,QAAA,gBAAAH,EAAC,KAAA,EAAE,OAAO,EAAE,UAAU,WAAW,OAAO,2CAA2C,QAAQ,cAAA,GAAiB,UAAA,mDAAA,CAE5G;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,OAAO;AAAA,cACL,SAAS;AAAA,cACT,eAAe;AAAA,cACf,KAAK;AAAA,cACL,SAAS;AAAA,cACT,cAAc;AAAA,cACd,QAAQ;AAAA,cACR,YAAY;AAAA,YAAA;AAAA,YAGb,UAAA6C,EAAM,IAAI,CAACnE,MAAO;AACjB,oBAAMmF,IAAO7B,EAAUtD,CAAE;AAGzB,qBAFI,CAACmF,KAED,CADY1B,EAAkBC,GAAUyB,EAAK,UAAU,IACtC,OAEnB,gBAAA1D;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBAEC,MAAK;AAAA,kBACL,WAAU;AAAA,kBACV,OAAO,EAAE,eAAe,QAAQ,OAAO,OAAA;AAAA,kBACvC,UAAU;AAAA,kBAEV,UAAA;AAAA,oBAAA,gBAAAH,EAAC,QAAA,EAAK,WAAU,sBAAsB,UAAA6D,EAAK,MAAK;AAAA,oBAC/C3B,EAAexD,CAAE;AAAA,kBAAA;AAAA,gBAAA;AAAA,gBAPbA;AAAA,cAAA;AAAA,YAUX,CAAC;AAAA,UAAA;AAAA,QAAA;AAAA,MACH,EAAA,CACF;AAAA,IAAA,EAAA,CACF;AAAA,EAAA,GACF;AAEJ;ACxQA,MAAMoF,IAAoB;AAAA,EACxB;AAAA,IAAE,IAAI;AAAA,IAAS,OAAO;AAAA,IAAS,YAAY,CAAC,YAAY;AAAA,IACtD,MAAM,CAAC,sBAAsB,mCAAmC,6BAA6B;AAAA,EAAA;AAAA,EAC/F;AAAA,IAAE,IAAI;AAAA,IAAU,OAAO;AAAA,IAAU,YAAY,CAAC,aAAa;AAAA,IACzD,MAAM,CAAC,uBAAuB,uBAAuB;AAAA,EAAA;AAAA,EACvD;AAAA,IAAE,IAAI;AAAA,IAAS,OAAO;AAAA,IAAS,YAAY,CAAC,YAAY;AAAA,IACtD,MAAM,CAAC,sBAAsB,wBAAwB,oBAAoB;AAAA,EAAA;AAAA,EAC3E;AAAA,IAAE,IAAI;AAAA,IAAU,OAAO;AAAA,IAAU,YAAY,CAAC,aAAa;AAAA,IACzD,MAAM,CAAC,uBAAuB,8BAA8B;AAAA,EAAA;AAAA,EAC9D;AAAA,IAAE,IAAI;AAAA,IAAY,OAAO;AAAA,IAAY,YAAY,CAAC,eAAe;AAAA,IAC/D,MAAM,CAAC,yBAAyB,uBAAuB,yBAAyB,yBAAyB;AAAA,EAAA;AAAA,EAC3G;AAAA,IAAE,IAAI;AAAA,IAAe,OAAO;AAAA,IAAgB,YAAY,CAAC,kBAAkB;AAAA,IACzE,MAAM,CAAC,4BAA4B,2BAA2B,6BAA6B;AAAA,EAAA;AAAA,EAC7F,EAAE,IAAI,OAAO,OAAO,iBAAiB,YAAY,CAAA,GAAI,UAAU,GAAA;AAAA,EAC/D,EAAE,IAAI,eAAe,OAAO,gBAAgB,YAAY,CAAA,GAAI,UAAU,GAAA;AAAA,EACtE;AAAA,IAAE,IAAI;AAAA,IAAa,OAAO;AAAA,IAAc,YAAY,CAAC,aAAa,qBAAqB,sBAAsB,sBAAsB,kBAAkB;AAAA,IACnJ,MAAM,CAAC,0BAA0B,6BAA6B,2BAA2B,8BAA8B,8BAA8B,mCAAmC,iCAAiC;AAAA,EAAA;AAC7N;AAMO,SAASC,GAAuB,EAAE,WAAA/E,KAA0C;AACjF,QAAM;AAAA,IACJ,UAAAoD;AAAA,IACA,OAAA4B;AAAA,IACA,WAAA1G;AAAA,IACA,gBAAA2G;AAAA,IACA,eAAAC;AAAA,IACA,OAAA1G;AAAA,IACA,eAAA2G;AAAA,IACA,cAAAvB;AAAA,EAAA,IACEwB,EAAA,GAEE,CAACC,GAAWC,CAAY,IAAInH,EAAkB,OAAO;AAE3D,EAAAsC,EAAU,MAAM;AACd,IAAA0E,EAAA;AAAA,EACF,GAAG,CAACA,CAAa,CAAC;AAGlB,QAAMI,IAAaT,EAAK,KAAK,CAACU,MAAMA,EAAE,OAAOH,CAAS,GAGhDI,IAAiBC,EAAQ,MAAM;AACnC,QAAI,CAACH,EAAY,QAAO,CAAA;AACxB,UAAMI,IAAyC,CAAA;AAC/C,eAAWC,KAAYL,EAAW,YAAY;AAC5C,YAAMM,IAAmBzC,EAASwC,CAAQ,KAAK,CAAA;AAC/C,MAAAD,EAAY,KAAK,GAAGE,CAAgB;AAAA,IACtC;AACA,WAAOF;AAAA,EACT,GAAG,CAACvC,GAAUmC,CAAU,CAAC,GAEnBO,IAAkBJ,EAAQ,MACzBH,GAAY,OAEVE,EACJ,OAAO,CAACjC,MAAM+B,EAAW,KAAM,SAAS/B,EAAE,GAAG,CAAC,EAC9C,KAAK,CAACuC,GAAGC,MAAMT,EAAW,KAAM,QAAQQ,EAAE,GAAG,IAAIR,EAAW,KAAM,QAAQS,EAAE,GAAG,CAAC,IAJrDP,GAK7B,CAACA,GAAgBF,CAAU,CAAC;AAE/B,SAAIjH,KAAa,OAAO,KAAK8E,CAAQ,EAAE,WAAW,sBAE7C,OAAA,EAAI,WAAW,yDAAyDpD,KAAa,EAAE,IACtF,UAAA;AAAA,IAAA,gBAAAgB,EAACC,GAAA,EAAe;AAAA,IAChB,gBAAAD,EAAC,UAAK,UAAA,sBAAA,CAAmB;AAAA,EAAA,GAC3B,IAIAxC,IAEA,gBAAAwC,EAAC,OAAA,EAAI,WAAW,0BAA0BhB,KAAa,EAAE,IACvD,UAAA,gBAAAgB,EAACI,GAAA,EAAa,OAAO5C,EAAM,QAAA,CAAS,GACtC,sBAKD,OAAA,EAAI,WAAW,0BAA0BwB,KAAa,EAAE,IACvD,UAAA;AAAA,IAAA,gBAAAmB,EAAC,OAAA,EAAI,WAAU,+BACb,UAAA;AAAA,MAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,uCACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,8BAA6B,UAAA,kBAAc;AAAA,QACzD,gBAAAA,EAAC,KAAA,EAAE,WAAU,oCAAmC,UAAA,mEAAA,CAEhD;AAAA,MAAA,GACF;AAAA,MACA,gBAAAA,EAACiF,GAAA,EAAe,QAAQhB,GAAgB,OAAOC,EAAA,CAAe;AAAA,IAAA,GAChE;AAAA,sBAGC,OAAA,EAAI,WAAU,6CACZ,UAAAJ,EAAK,IAAI,CAACoB,MACT,gBAAAlF;AAAA,MAAC;AAAA,MAAA;AAAA,QAEC,MAAK;AAAA,QACL,WAAW,oBAAoBqE,MAAca,EAAI,KAAK,4BAA4B,EAAE;AAAA,QACpF,SAAS,MAAMZ,EAAaY,EAAI,EAAE;AAAA,QAClC,iBAAeb,MAAca,EAAI;AAAA,QACjC,MAAK;AAAA,QAEJ,UAAAA,EAAI;AAAA,MAAA;AAAA,MAPAA,EAAI;AAAA,IAAA,CASZ,GACH;AAAA,IAGA,gBAAAlF,EAAC,OAAA,EAAI,WAAU,4BAA2B,MAAK,YAC5C,UAAAuE,GAAY,OAAO,gBAClB,gBAAAvE,EAAC2C,IAAA,EAA0B,UAAAP,GAAoB,cAAAQ,EAAA,CAA4B,IACzE2B,GAAY,WACd,gBAAAvE,EAACjB,GAAA,CAAA,CAAqB,IACpB+F,EAAgB,WAAW,IAC7B,gBAAA9E,EAAC,OAAA,EAAI,WAAU,gCACb,UAAA,gBAAAG,EAAC,KAAA,EAAE,UAAA;AAAA,MAAA;AAAA,MAAuBoE,GAAY,SAAS;AAAA,MAAgB;AAAA,IAAA,EAAA,CAAC,EAAA,CAClE,IAEA,gBAAAvE,EAACmF,GAAA,EAAgB,UAAUL,GAAiB,OAAAd,GAAc,UAAUpB,EAAA,CAAc,EAAA,CAEtF;AAAA,EAAA,GACF;AAEJ;"}
+{"version":3,"file":"AuthenticationSettings-CxAubcoz.js","sources":["../src/hooks/useSsoProviders.ts","../src/components/admin/settings/SsoProvidersSettings.tsx","../src/components/admin/settings/SocialButtonOrderSettings.tsx","../src/components/admin/settings/AuthenticationSettings.tsx"],"sourcesContent":["/**\n * Hook for managing SSO providers (admin)\n */\nimport { useState, useCallback, useRef } from 'react';\nimport { useCedrosLogin } from '../context/useCedrosLogin';\n\nexport interface SsoProvider {\n  id: string;\n  orgId: string;\n  name: string;\n  issuerUrl: string;\n  clientId: string;\n  scopes: string[];\n  enabled: boolean;\n  allowRegistration: boolean;\n  emailDomain: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface CreateSsoProviderInput {\n  orgId: string;\n  name: string;\n  issuerUrl: string;\n  clientId: string;\n  clientSecret: string;\n  scopes?: string[];\n  enabled?: boolean;\n  allowRegistration?: boolean;\n  emailDomain?: string | null;\n}\n\nexport interface UpdateSsoProviderInput {\n  name?: string;\n  issuerUrl?: string;\n  clientId?: string;\n  clientSecret?: string;\n  scopes?: string[];\n  enabled?: boolean;\n  allowRegistration?: boolean;\n  emailDomain?: string | null;\n}\n\ninterface ListResponse {\n  providers: SsoProvider[];\n  total: number;\n  limit: number;\n  offset: number;\n}\n\nexport function useSsoProviders() {\n  const { config, _internal } = useCedrosLogin();\n  const serverUrl = config.serverUrl;\n\n  // PERF-03: Stabilize getAccessToken reference using ref pattern\n  // to prevent unnecessary re-creation of callbacks\n  const getAccessTokenRef = useRef(_internal?.getAccessToken ?? (() => null));\n  getAccessTokenRef.current = _internal?.getAccessToken ?? (() => null);\n\n  const [providers, setProviders] = useState<SsoProvider[]>([]);\n  const [total, setTotal] = useState(0);\n  const [isLoading, setIsLoading] = useState(false);\n  const [error, setError] = useState<Error | null>(null);\n\n  // Memoize getHeaders with empty deps since it uses ref\n  const getHeaders = useCallback(() => {\n    const token = getAccessTokenRef.current();\n    return {\n      'Content-Type': 'application/json',\n      ...(token ? { Authorization: `Bearer ${token}` } : {}),\n    };\n  }, []);\n\n  const fetchProviders = useCallback(\n    async (orgId?: string, limit = 50, offset = 0) => {\n      setIsLoading(true);\n      setError(null);\n      try {\n        const params = new URLSearchParams();\n        if (orgId) params.set('org_id', orgId);\n        params.set('limit', String(limit));\n        params.set('offset', String(offset));\n\n        const res = await fetch(`${serverUrl}/admin/sso-providers?${params}`, {\n          headers: getHeaders(),\n        });\n\n        if (!res.ok) {\n          const err = await res.json().catch(() => ({}));\n          throw new Error(err.error || `Failed to fetch SSO providers: ${res.status}`);\n        }\n\n        const data: ListResponse = await res.json();\n        setProviders(data.providers);\n        setTotal(data.total);\n        return data;\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err));\n        setError(error);\n        throw error;\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [serverUrl, getHeaders]\n  );\n\n  const createProvider = useCallback(\n    async (input: CreateSsoProviderInput): Promise<SsoProvider> => {\n      setIsLoading(true);\n      setError(null);\n      try {\n        const res = await fetch(`${serverUrl}/admin/sso-providers`, {\n          method: 'POST',\n          headers: getHeaders(),\n          body: JSON.stringify(input),\n        });\n\n        if (!res.ok) {\n          const err = await res.json().catch(() => ({}));\n          throw new Error(err.error || `Failed to create SSO provider: ${res.status}`);\n        }\n\n        const provider: SsoProvider = await res.json();\n        setProviders((prev) => [...prev, provider]);\n        setTotal((prev) => prev + 1);\n        return provider;\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err));\n        setError(error);\n        throw error;\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [serverUrl, getHeaders]\n  );\n\n  const updateProvider = useCallback(\n    async (id: string, input: UpdateSsoProviderInput): Promise<SsoProvider> => {\n      setIsLoading(true);\n      setError(null);\n      try {\n        const res = await fetch(`${serverUrl}/admin/sso-providers/${id}`, {\n          method: 'PUT',\n          headers: getHeaders(),\n          body: JSON.stringify(input),\n        });\n\n        if (!res.ok) {\n          const err = await res.json().catch(() => ({}));\n          throw new Error(err.error || `Failed to update SSO provider: ${res.status}`);\n        }\n\n        const provider: SsoProvider = await res.json();\n        setProviders((prev) => prev.map((p) => (p.id === id ? provider : p)));\n        return provider;\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err));\n        setError(error);\n        throw error;\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [serverUrl, getHeaders]\n  );\n\n  const deleteProvider = useCallback(\n    async (id: string): Promise<void> => {\n      setIsLoading(true);\n      setError(null);\n      try {\n        const res = await fetch(`${serverUrl}/admin/sso-providers/${id}`, {\n          method: 'DELETE',\n          headers: getHeaders(),\n        });\n\n        if (!res.ok) {\n          const err = await res.json().catch(() => ({}));\n          throw new Error(err.error || `Failed to delete SSO provider: ${res.status}`);\n        }\n\n        setProviders((prev) => prev.filter((p) => p.id !== id));\n        setTotal((prev) => prev - 1);\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err));\n        setError(error);\n        throw error;\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [serverUrl, getHeaders]\n  );\n\n  const toggleProvider = useCallback(\n    async (id: string, enabled: boolean): Promise<SsoProvider> => {\n      return updateProvider(id, { enabled });\n    },\n    [updateProvider]\n  );\n\n  return {\n    providers,\n    total,\n    isLoading,\n    error,\n    fetchProviders,\n    createProvider,\n    updateProvider,\n    deleteProvider,\n    toggleProvider,\n  };\n}\n","/**\n * SSO Providers settings - manage OIDC identity providers\n */\nimport { useState, useEffect, useCallback } from 'react';\nimport { LoadingSpinner } from '../../shared/LoadingSpinner';\nimport { ErrorMessage } from '../../shared/ErrorMessage';\nimport {\n  useSsoProviders,\n  type SsoProvider,\n  type CreateSsoProviderInput,\n  type UpdateSsoProviderInput,\n} from '../../../hooks/useSsoProviders';\nimport { useOrgs } from '../../../hooks/useOrgs';\n\nexport interface SsoProvidersSettingsProps {\n  className?: string;\n}\n\ntype ViewMode = 'list' | 'add' | 'edit';\n\nexport function SsoProvidersSettings({ className }: SsoProvidersSettingsProps) {\n  const {\n    providers,\n    isLoading,\n    error,\n    fetchProviders,\n    createProvider,\n    updateProvider,\n    deleteProvider,\n    toggleProvider,\n  } = useSsoProviders();\n\n  const { activeOrg } = useOrgs();\n  const [viewMode, setViewMode] = useState<ViewMode>('list');\n  const [editingProvider, setEditingProvider] = useState<SsoProvider | null>(null);\n  const [formError, setFormError] = useState<string | null>(null);\n\n  useEffect(() => {\n    fetchProviders(activeOrg?.id);\n  }, [fetchProviders, activeOrg?.id]);\n\n  const handleAdd = () => {\n    setEditingProvider(null);\n    setFormError(null);\n    setViewMode('add');\n  };\n\n  const handleEdit = (provider: SsoProvider) => {\n    setEditingProvider(provider);\n    setFormError(null);\n    setViewMode('edit');\n  };\n\n  const handleCancel = () => {\n    setViewMode('list');\n    setEditingProvider(null);\n    setFormError(null);\n  };\n\n  const handleDelete = async (provider: SsoProvider) => {\n    if (!confirm(`Delete SSO provider \"${provider.name}\"? This cannot be undone.`)) {\n      return;\n    }\n    try {\n      await deleteProvider(provider.id);\n    } catch {\n      // Error is already set in hook\n    }\n  };\n\n  const handleToggle = async (provider: SsoProvider) => {\n    try {\n      await toggleProvider(provider.id, !provider.enabled);\n    } catch {\n      // Error is already set in hook\n    }\n  };\n\n  const handleSave = async (data: CreateSsoProviderInput | UpdateSsoProviderInput) => {\n    setFormError(null);\n    try {\n      if (viewMode === 'add') {\n        await createProvider(data as CreateSsoProviderInput);\n      } else if (editingProvider) {\n        await updateProvider(editingProvider.id, data as UpdateSsoProviderInput);\n      }\n      setViewMode('list');\n      setEditingProvider(null);\n    } catch (err) {\n      setFormError(err instanceof Error ? err.message : 'Failed to save provider');\n    }\n  };\n\n  if (isLoading && providers.length === 0) {\n    return (\n      <div className={`cedros-system-settings cedros-system-settings-loading ${className ?? ''}`}>\n        <LoadingSpinner />\n        <span>Loading SSO providers...</span>\n      </div>\n    );\n  }\n\n  if (viewMode === 'add' || viewMode === 'edit') {\n    return (\n      <div className={`cedros-system-settings ${className ?? ''}`}>\n        <SsoProviderForm\n          provider={editingProvider}\n          orgId={activeOrg?.id}\n          error={formError}\n          isLoading={isLoading}\n          onSave={handleSave}\n          onCancel={handleCancel}\n        />\n      </div>\n    );\n  }\n\n  return (\n    <div className={`cedros-system-settings ${className ?? ''}`}>\n      <div className=\"cedros-settings-page-header\">\n        <div className=\"cedros-settings-page-header-content\">\n          <h2 className=\"cedros-settings-page-title\">SSO Providers</h2>\n          <p className=\"cedros-settings-page-description\">\n            Configure OIDC identity providers for enterprise single sign-on.\n          </p>\n        </div>\n        <button type=\"button\" className=\"cedros-btn cedros-btn-primary\" onClick={handleAdd}>\n          Add Provider\n        </button>\n      </div>\n\n      {error && <ErrorMessage error={error.message} />}\n\n      {providers.length === 0 ? (\n        <div className=\"cedros-system-settings-empty\">\n          <p>No SSO providers configured.</p>\n          <p className=\"cedros-text-muted\">\n            Add an OIDC provider like Okta, Azure AD, or Auth0 to enable enterprise SSO.\n          </p>\n        </div>\n      ) : (\n        <div className=\"cedros-sso-provider-list\">\n          {providers.map((provider) => (\n            <SsoProviderCard\n              key={provider.id}\n              provider={provider}\n              onEdit={() => handleEdit(provider)}\n              onDelete={() => handleDelete(provider)}\n              onToggle={() => handleToggle(provider)}\n            />\n          ))}\n        </div>\n      )}\n    </div>\n  );\n}\n\n// =============================================================================\n// Provider Card\n// =============================================================================\n\ninterface SsoProviderCardProps {\n  provider: SsoProvider;\n  onEdit: () => void;\n  onDelete: () => void;\n  onToggle: () => void;\n}\n\nfunction SsoProviderCard({ provider, onEdit, onDelete, onToggle }: SsoProviderCardProps) {\n  return (\n    <div\n      className={`cedros-sso-provider-card ${provider.enabled ? '' : 'cedros-sso-provider-card--disabled'}`}\n    >\n      <div className=\"cedros-sso-provider-card-header\">\n        <div className=\"cedros-sso-provider-card-info\">\n          <h3 className=\"cedros-sso-provider-card-name\">{provider.name}</h3>\n          <p className=\"cedros-sso-provider-card-issuer\">{provider.issuerUrl}</p>\n        </div>\n        <button\n          type=\"button\"\n          role=\"switch\"\n          aria-checked={provider.enabled}\n          className={`cedros-toggle ${provider.enabled ? 'cedros-toggle-on' : 'cedros-toggle-off'}`}\n          onClick={onToggle}\n        >\n          <span className=\"cedros-toggle-track\">\n            <span className=\"cedros-toggle-thumb\" />\n          </span>\n          <span className=\"cedros-toggle-label\">{provider.enabled ? 'Enabled' : 'Disabled'}</span>\n        </button>\n      </div>\n\n      <div className=\"cedros-sso-provider-card-details\">\n        <div className=\"cedros-sso-provider-card-detail\">\n          <span className=\"cedros-sso-provider-card-detail-label\">Client ID</span>\n          <code className=\"cedros-sso-provider-card-detail-value\">{provider.clientId}</code>\n        </div>\n        {provider.emailDomain && (\n          <div className=\"cedros-sso-provider-card-detail\">\n            <span className=\"cedros-sso-provider-card-detail-label\">Email Domain</span>\n            <span className=\"cedros-sso-provider-card-detail-value\">@{provider.emailDomain}</span>\n          </div>\n        )}\n        <div className=\"cedros-sso-provider-card-detail\">\n          <span className=\"cedros-sso-provider-card-detail-label\">Registration</span>\n          <span className=\"cedros-sso-provider-card-detail-value\">\n            {provider.allowRegistration ? 'Allowed' : 'Existing users only'}\n          </span>\n        </div>\n      </div>\n\n      <div className=\"cedros-sso-provider-card-actions\">\n        <button type=\"button\" className=\"cedros-btn cedros-btn-ghost\" onClick={onEdit}>\n          Edit\n        </button>\n        <button\n          type=\"button\"\n          className=\"cedros-btn cedros-btn-ghost cedros-btn-danger\"\n          onClick={onDelete}\n        >\n          Delete\n        </button>\n      </div>\n    </div>\n  );\n}\n\n// =============================================================================\n// Provider Form\n// =============================================================================\n\ninterface SsoProviderFormProps {\n  provider: SsoProvider | null;\n  orgId?: string;\n  error: string | null;\n  isLoading: boolean;\n  onSave: (data: CreateSsoProviderInput | UpdateSsoProviderInput) => void;\n  onCancel: () => void;\n}\n\nfunction SsoProviderForm({\n  provider,\n  orgId,\n  error,\n  isLoading,\n  onSave,\n  onCancel,\n}: SsoProviderFormProps) {\n  const isEditing = Boolean(provider);\n\n  const [name, setName] = useState(provider?.name ?? '');\n  const [issuerUrl, setIssuerUrl] = useState(provider?.issuerUrl ?? '');\n  const [clientId, setClientId] = useState(provider?.clientId ?? '');\n  const [clientSecret, setClientSecret] = useState('');\n  const [emailDomain, setEmailDomain] = useState(provider?.emailDomain ?? '');\n  const [allowRegistration, setAllowRegistration] = useState(provider?.allowRegistration ?? true);\n  const [enabled, setEnabled] = useState(provider?.enabled ?? true);\n\n  const handleSubmit = useCallback(\n    (e: React.FormEvent) => {\n      e.preventDefault();\n\n      if (isEditing) {\n        const updates: UpdateSsoProviderInput = {\n          name,\n          issuerUrl,\n          clientId,\n          emailDomain: emailDomain || null,\n          allowRegistration,\n          enabled,\n        };\n        // Only include secret if changed\n        if (clientSecret) {\n          updates.clientSecret = clientSecret;\n        }\n        onSave(updates);\n      } else {\n        if (!orgId) {\n          return;\n        }\n        const data: CreateSsoProviderInput = {\n          orgId,\n          name,\n          issuerUrl,\n          clientId,\n          clientSecret,\n          emailDomain: emailDomain || null,\n          allowRegistration,\n          enabled,\n        };\n        onSave(data);\n      }\n    },\n    [\n      isEditing,\n      orgId,\n      name,\n      issuerUrl,\n      clientId,\n      clientSecret,\n      emailDomain,\n      allowRegistration,\n      enabled,\n      onSave,\n    ]\n  );\n\n  return (\n    <form className=\"cedros-sso-provider-form\" onSubmit={handleSubmit}>\n      <div className=\"cedros-settings-page-header\">\n        <div className=\"cedros-settings-page-header-content\">\n          <h2 className=\"cedros-settings-page-title\">\n            {isEditing ? 'Edit SSO Provider' : 'Add SSO Provider'}\n          </h2>\n          <p className=\"cedros-settings-page-description\">\n            Configure an OIDC identity provider for enterprise single sign-on.\n          </p>\n        </div>\n      </div>\n\n      {error && <ErrorMessage error={error} />}\n\n      <div className=\"cedros-form-section\">\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-name\">\n            Provider Name\n          </label>\n          <input\n            id=\"sso-name\"\n            type=\"text\"\n            className=\"cedros-form-input\"\n            value={name}\n            onChange={(e) => setName(e.target.value)}\n            placeholder=\"e.g., Okta, Azure AD\"\n            required\n          />\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-issuer\">\n            Issuer URL\n          </label>\n          <input\n            id=\"sso-issuer\"\n            type=\"url\"\n            className=\"cedros-form-input\"\n            value={issuerUrl}\n            onChange={(e) => setIssuerUrl(e.target.value)}\n            placeholder=\"https://your-org.okta.com\"\n            required\n          />\n          <p className=\"cedros-form-hint\">\n            The OIDC issuer URL. Must support discovery at /.well-known/openid-configuration\n          </p>\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-client-id\">\n            Client ID\n          </label>\n          <input\n            id=\"sso-client-id\"\n            type=\"text\"\n            className=\"cedros-form-input\"\n            value={clientId}\n            onChange={(e) => setClientId(e.target.value)}\n            placeholder=\"OAuth client ID\"\n            required\n          />\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-client-secret\">\n            Client Secret{' '}\n            {isEditing && (\n              <span className=\"cedros-form-hint-inline\">(leave blank to keep current)</span>\n            )}\n          </label>\n          <input\n            id=\"sso-client-secret\"\n            type=\"password\"\n            className=\"cedros-form-input\"\n            value={clientSecret}\n            onChange={(e) => setClientSecret(e.target.value)}\n            placeholder={isEditing ? '••••••••' : 'OAuth client secret'}\n            required={!isEditing}\n          />\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-label\" htmlFor=\"sso-email-domain\">\n            Email Domain (optional)\n          </label>\n          <input\n            id=\"sso-email-domain\"\n            type=\"text\"\n            className=\"cedros-form-input\"\n            value={emailDomain}\n            onChange={(e) => setEmailDomain(e.target.value)}\n            placeholder=\"company.com\"\n          />\n          <p className=\"cedros-form-hint\">Restrict to users with emails from this domain</p>\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-checkbox\">\n            <input\n              type=\"checkbox\"\n              checked={allowRegistration}\n              onChange={(e) => setAllowRegistration(e.target.checked)}\n            />\n            <span>Allow new user registration via SSO</span>\n          </label>\n        </div>\n\n        <div className=\"cedros-form-group\">\n          <label className=\"cedros-form-checkbox\">\n            <input\n              type=\"checkbox\"\n              checked={enabled}\n              onChange={(e) => setEnabled(e.target.checked)}\n            />\n            <span>Enable this provider</span>\n          </label>\n        </div>\n      </div>\n\n      <div className=\"cedros-form-actions\">\n        <button\n          type=\"button\"\n          className=\"cedros-btn cedros-btn-ghost\"\n          onClick={onCancel}\n          disabled={isLoading}\n        >\n          Cancel\n        </button>\n        <button type=\"submit\" className=\"cedros-btn cedros-btn-primary\" disabled={isLoading}>\n          {isLoading ? 'Saving...' : isEditing ? 'Save Changes' : 'Add Provider'}\n        </button>\n      </div>\n    </form>\n  );\n}\n","/**\n * Drag-and-drop social button order settings with live preview.\n *\n * Uses HTML5 Drag and Drop API (no library needed for 4 items).\n * Reads enabled state from shared settings map (`auth_*_enabled` keys).\n */\nimport { useState, useCallback, useRef, type ReactNode } from 'react';\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface SocialButtonOrderSettingsProps {\n  /** Settings map (key -> SystemSetting[]) from useSettingsAutosave */\n  settings: Record<string, { key: string; value: string }[]>;\n  /** Autosave handler from parent */\n  handleChange: (key: string, value: string) => void;\n}\n\ninterface ProviderMeta {\n  label: string;\n  icon: ReactNode;\n  enabledKey: string;\n}\n\n// ---------------------------------------------------------------------------\n// Provider metadata + icons (matching existing button components)\n// ---------------------------------------------------------------------------\n\nfunction GoogleIcon() {\n  return (\n    <svg width=\"18\" height=\"18\" viewBox=\"0 0 18 18\" fill=\"none\" aria-hidden=\"true\">\n      <path d=\"M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844c-.209 1.125-.843 2.078-1.796 2.717v2.258h2.908c1.702-1.567 2.684-3.874 2.684-6.615z\" fill=\"#4285F4\" />\n      <path d=\"M9.003 18c2.43 0 4.467-.806 5.956-2.18l-2.909-2.26c-.806.54-1.836.86-3.047.86-2.344 0-4.328-1.584-5.036-3.711H.96v2.332A8.997 8.997 0 0 0 9.003 18z\" fill=\"#34A853\" />\n      <path d=\"M3.964 10.712A5.41 5.41 0 0 1 3.682 9c0-.593.102-1.17.282-1.71V4.958H.96A8.996 8.996 0 0 0 0 9c0 1.452.348 2.827.96 4.042l3.004-2.33z\" fill=\"#FBBC05\" />\n      <path d=\"M9.003 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.464.891 11.428 0 9.002 0A8.997 8.997 0 0 0 .96 4.958l3.005 2.332c.708-2.127 2.692-3.71 5.036-3.71z\" fill=\"#EA4335\" />\n    </svg>\n  );\n}\n\nfunction AppleIcon() {\n  return (\n    <svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"currentColor\" aria-hidden=\"true\">\n      <path d=\"M18.71 19.5c-.83 1.24-1.71 2.45-3.05 2.47-1.34.03-1.77-.79-3.29-.79-1.53 0-2 .77-3.27.82-1.31.05-2.3-1.32-3.14-2.53C4.25 17 2.94 12.45 4.7 9.39c.87-1.52 2.43-2.48 4.12-2.51 1.28-.02 2.5.87 3.29.87.78 0 2.26-1.07 3.81-.91.65.03 2.47.26 3.64 1.98-.09.06-2.17 1.28-2.15 3.81.03 3.02 2.65 4.03 2.68 4.04-.03.07-.42 1.44-1.38 2.83M13 3.5c.73-.83 1.94-1.46 2.94-1.5.13 1.17-.34 2.35-1.04 3.19-.69.85-1.83 1.51-2.95 1.42-.15-1.15.41-2.35 1.05-3.11z\" />\n    </svg>\n  );\n}\n\nfunction SolanaIcon() {\n  return (\n    <svg width=\"18\" height=\"18\" viewBox=\"0 0 128 128\" fill=\"currentColor\" aria-hidden=\"true\">\n      <path d=\"M25.38 96.04a4.35 4.35 0 0 1 3.07-1.27h91.68c1.93 0 2.9 2.34 1.54 3.7l-17.71 17.72a4.35 4.35 0 0 1-3.07 1.27H9.21c-1.93 0-2.9-2.34-1.54-3.7l17.71-17.72z\" />\n      <path d=\"M25.38 11.81a4.47 4.47 0 0 1 3.07-1.27h91.68c1.93 0 2.9 2.34 1.54 3.7L103.96 31.96a4.35 4.35 0 0 1-3.07 1.27H9.21c-1.93 0-2.9-2.34-1.54-3.7L25.38 11.81z\" />\n      <path d=\"M102.62 53.76a4.35 4.35 0 0 0-3.07-1.27H7.87c-1.93 0-2.9 2.34-1.54 3.7l17.71 17.72a4.35 4.35 0 0 0 3.07 1.27h91.68c1.93 0 2.9-2.34 1.54-3.7L102.62 53.76z\" />\n    </svg>\n  );\n}\n\nfunction PasskeyIcon() {\n  return (\n    <svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\" strokeLinecap=\"round\" strokeLinejoin=\"round\" aria-hidden=\"true\">\n      <path d=\"M12 10a2 2 0 0 0-2 2c0 1.02-.1 2.51-.26 4\" />\n      <path d=\"M14 13.12c0 2.38 0 6.38-1 8.88\" />\n      <path d=\"M17.29 21.02c.12-.6.43-2.3.5-3.02\" />\n      <path d=\"M2 12a10 10 0 0 1 18-6\" />\n      <path d=\"M2 16h.01\" />\n      <path d=\"M21.8 16c.2-2 .131-5.354 0-6\" />\n      <path d=\"M5 19.5C5.5 18 6 15 6 12a6 6 0 0 1 .34-2\" />\n      <path d=\"M8.65 22c.21-.66.45-1.32.57-2\" />\n      <path d=\"M9 6.8a6 6 0 0 1 9 5.2v2\" />\n    </svg>\n  );\n}\n\nconst PROVIDERS: Record<string, ProviderMeta> = {\n  webauthn: { label: 'Passkey', icon: <PasskeyIcon />, enabledKey: 'auth_webauthn_enabled' },\n  google: { label: 'Google', icon: <GoogleIcon />, enabledKey: 'auth_google_enabled' },\n  apple: { label: 'Apple', icon: <AppleIcon />, enabledKey: 'auth_apple_enabled' },\n  solana: { label: 'Solana', icon: <SolanaIcon />, enabledKey: 'auth_solana_enabled' },\n};\n\nconst DEFAULT_ORDER = ['webauthn', 'google', 'apple', 'solana'];\n\nconst PREVIEW_LABELS: Record<string, string> = {\n  webauthn: 'Continue with Passkey',\n  google: 'Continue with Google',\n  apple: 'Continue with Apple',\n  solana: 'Continue with Solana',\n};\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Read whether a provider is enabled from the flattened settings. */\nfunction isProviderEnabled(\n  settings: Record<string, { key: string; value: string }[]>,\n  enabledKey: string,\n): boolean {\n  for (const group of Object.values(settings)) {\n    const found = group.find((s) => s.key === enabledKey);\n    if (found) return found.value === 'true';\n  }\n  return true; // default enabled when setting is absent\n}\n\n/** Read current order from settings map, falling back to default. */\nfunction readOrder(settings: Record<string, { key: string; value: string }[]>): string[] {\n  for (const group of Object.values(settings)) {\n    const found = group.find((s) => s.key === 'ui_social_button_order');\n    if (found && found.value) return found.value.split(',').map((s) => s.trim());\n  }\n  return DEFAULT_ORDER;\n}\n\n// ---------------------------------------------------------------------------\n// Grab-handle icon\n// ---------------------------------------------------------------------------\n\nfunction GrabHandle() {\n  return (\n    <svg width=\"16\" height=\"16\" viewBox=\"0 0 16 16\" fill=\"currentColor\" aria-hidden=\"true\" style={{ opacity: 0.4 }}>\n      <circle cx=\"5\" cy=\"3\" r=\"1.5\" />\n      <circle cx=\"11\" cy=\"3\" r=\"1.5\" />\n      <circle cx=\"5\" cy=\"8\" r=\"1.5\" />\n      <circle cx=\"11\" cy=\"8\" r=\"1.5\" />\n      <circle cx=\"5\" cy=\"13\" r=\"1.5\" />\n      <circle cx=\"11\" cy=\"13\" r=\"1.5\" />\n    </svg>\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Component\n// ---------------------------------------------------------------------------\n\nexport function SocialButtonOrderSettings({ settings, handleChange }: SocialButtonOrderSettingsProps) {\n  const [order, setOrder] = useState<string[]>(() => readOrder(settings));\n  const dragIdx = useRef<number | null>(null);\n  const [dragOverIdx, setDragOverIdx] = useState<number | null>(null);\n\n  const persist = useCallback(\n    (newOrder: string[]) => {\n      setOrder(newOrder);\n      handleChange('ui_social_button_order', newOrder.join(','));\n    },\n    [handleChange],\n  );\n\n  const onDragStart = useCallback((idx: number) => {\n    dragIdx.current = idx;\n  }, []);\n\n  const onDragOver = useCallback((e: React.DragEvent, idx: number) => {\n    e.preventDefault();\n    setDragOverIdx(idx);\n  }, []);\n\n  const onDrop = useCallback(\n    (targetIdx: number) => {\n      const fromIdx = dragIdx.current;\n      if (fromIdx === null || fromIdx === targetIdx) {\n        setDragOverIdx(null);\n        return;\n      }\n      const next = [...order];\n      const [moved] = next.splice(fromIdx, 1);\n      next.splice(targetIdx, 0, moved);\n      persist(next);\n      dragIdx.current = null;\n      setDragOverIdx(null);\n    },\n    [order, persist],\n  );\n\n  const onDragEnd = useCallback(() => {\n    dragIdx.current = null;\n    setDragOverIdx(null);\n  }, []);\n\n  return (\n    <div className=\"cedros-system-settings\">\n      <div className=\"cedros-settings-page-header\">\n        <div className=\"cedros-settings-page-header-content\">\n          <h2 className=\"cedros-settings-page-title\">Button Order</h2>\n          <p className=\"cedros-settings-page-description\">\n            Drag to reorder the social login buttons on your sign-in form.\n          </p>\n        </div>\n      </div>\n\n      <div style={{ display: 'flex', gap: '2rem', flexWrap: 'wrap' }}>\n        {/* Left: Reorder list */}\n        <div style={{ flex: '1 1 260px', minWidth: 260 }}>\n          <ul style={{ listStyle: 'none', padding: 0, margin: 0, display: 'flex', flexDirection: 'column', gap: '0.5rem' }}>\n            {order.map((id, idx) => {\n              const meta = PROVIDERS[id];\n              if (!meta) return null;\n              const enabled = isProviderEnabled(settings, meta.enabledKey);\n              const isDragOver = dragOverIdx === idx;\n              return (\n                <li\n                  key={id}\n                  draggable\n                  onDragStart={() => onDragStart(idx)}\n                  onDragOver={(e) => onDragOver(e, idx)}\n                  onDrop={() => onDrop(idx)}\n                  onDragEnd={onDragEnd}\n                  className=\"cedros-btn-order-item\"\n                  style={{\n                    display: 'flex',\n                    alignItems: 'center',\n                    gap: '0.75rem',\n                    padding: '0.625rem 0.75rem',\n                    borderRadius: 'var(--cedros-radius, 0.5rem)',\n                    border: isDragOver\n                      ? '2px solid var(--cedros-primary, #6366f1)'\n                      : '1px solid var(--cedros-border, #e5e7eb)',\n                    background: 'var(--cedros-background, #fff)',\n                    cursor: 'grab',\n                    opacity: enabled ? 1 : 0.5,\n                    transition: 'border-color 0.15s',\n                  }}\n                >\n                  <GrabHandle />\n                  <span className=\"cedros-button-icon\" style={{ display: 'flex', alignItems: 'center' }}>\n                    {meta.icon}\n                  </span>\n                  <span style={{ flex: 1, fontWeight: 500, fontSize: '0.875rem' }}>{meta.label}</span>\n                  <span\n                    style={{\n                      fontSize: '0.7rem',\n                      padding: '0.125rem 0.5rem',\n                      borderRadius: '9999px',\n                      background: enabled\n                        ? 'var(--cedros-primary, #6366f1)'\n                        : 'var(--cedros-muted, #f3f4f6)',\n                      color: enabled\n                        ? 'var(--cedros-primary-foreground, #fff)'\n                        : 'var(--cedros-muted-foreground, #6b7280)',\n                    }}\n                  >\n                    {enabled ? 'Enabled' : 'Disabled'}\n                  </span>\n                </li>\n              );\n            })}\n          </ul>\n        </div>\n\n        {/* Right: Live preview */}\n        <div style={{ flex: '1 1 280px', minWidth: 280 }}>\n          <p style={{ fontSize: '0.75rem', color: 'var(--cedros-muted-foreground, #6b7280)', margin: '0 0 0.75rem' }}>\n            This is how your login form buttons will appear:\n          </p>\n          <div\n            style={{\n              display: 'flex',\n              flexDirection: 'column',\n              gap: '0.5rem',\n              padding: '1.25rem',\n              borderRadius: 'var(--cedros-radius, 0.5rem)',\n              border: '1px solid var(--cedros-border, #e5e7eb)',\n              background: 'var(--cedros-background, #fff)',\n            }}\n          >\n            {order.map((id) => {\n              const meta = PROVIDERS[id];\n              if (!meta) return null;\n              const enabled = isProviderEnabled(settings, meta.enabledKey);\n              if (!enabled) return null;\n              return (\n                <button\n                  key={id}\n                  type=\"button\"\n                  className=\"cedros-button cedros-button-social\"\n                  style={{ pointerEvents: 'none', width: '100%' }}\n                  tabIndex={-1}\n                >\n                  <span className=\"cedros-button-icon\">{meta.icon}</span>\n                  {PREVIEW_LABELS[id]}\n                </button>\n              );\n            })}\n          </div>\n        </div>\n      </div>\n    </div>\n  );\n}\n","/**\n * Authentication settings page - configure auth providers with tabs\n */\nimport { useState, useEffect, useMemo } from 'react';\nimport { LoadingSpinner } from '../../shared/LoadingSpinner';\nimport { ErrorMessage } from '../../shared/ErrorMessage';\nimport { useSettingsAutosave } from '../../../hooks/useSettingsAutosave';\nimport { SettingsSection } from './settingsInputs';\nimport { AutosaveStatus } from './AutosaveStatus';\nimport { SsoProvidersSettings } from './SsoProvidersSettings';\nimport { SocialButtonOrderSettings } from './SocialButtonOrderSettings';\n\ntype AuthTab = 'email' | 'google' | 'apple' | 'solana' | 'passkeys' | 'instantlink' | 'sso' | 'buttonorder' | 'postlogin';\n\ninterface TabConfig {\n  id: AuthTab;\n  label: string;\n  /** Categories to pull settings from (not used for 'sso' tab) */\n  categories: string[];\n  /** Optional list of specific keys to show (if omitted, show all in categories) */\n  keys?: string[];\n  /** If true, renders a custom component instead of settings section */\n  isCustom?: boolean;\n}\n\nconst TABS: TabConfig[] = [\n  { id: 'email', label: 'Email', categories: ['auth.email'],\n    keys: ['auth_email_enabled', 'auth_email_require_verification', 'auth_email_block_disposable'] },\n  { id: 'google', label: 'Google', categories: ['auth.google'],\n    keys: ['auth_google_enabled', 'auth_google_client_id'] },\n  { id: 'apple', label: 'Apple', categories: ['auth.apple'],\n    keys: ['auth_apple_enabled', 'auth_apple_client_id', 'auth_apple_team_id'] },\n  { id: 'solana', label: 'Solana', categories: ['auth.solana'],\n    keys: ['auth_solana_enabled', 'auth_solana_challenge_expiry'] },\n  { id: 'passkeys', label: 'Passkeys', categories: ['auth.webauthn'],\n    keys: ['auth_webauthn_enabled', 'auth_webauthn_rp_id', 'auth_webauthn_rp_name', 'auth_webauthn_rp_origin'] },\n  { id: 'instantlink', label: 'Instant Link', categories: ['auth.instantlink'],\n    keys: ['auth_instantlink_enabled', 'auth_instantlink_expiry', 'auth_instantlink_rate_limit'] },\n  { id: 'sso', label: 'SSO Providers', categories: [], isCustom: true },\n  { id: 'buttonorder', label: 'Button Order', categories: [], isCustom: true },\n  { id: 'postlogin', label: 'Post-Login', categories: ['postlogin', 'postlogin.welcome', 'postlogin.username', 'postlogin.complete', 'postlogin.wallet'],\n    keys: ['postlogin_redirect_url', 'postlogin_welcome_enabled', 'postlogin_welcome_route', 'postlogin_username_enabled', 'postlogin_complete_enabled', 'postlogin_wallet_enroll_enabled', 'postlogin_show_recovery_enabled'] },\n];\n\nexport interface AuthenticationSettingsProps {\n  className?: string;\n}\n\nexport function AuthenticationSettings({ className }: AuthenticationSettingsProps) {\n  const {\n    settings,\n    edits,\n    isLoading,\n    autosaveStatus,\n    autosaveError,\n    error,\n    fetchSettings,\n    handleChange,\n  } = useSettingsAutosave();\n\n  const [activeTab, setActiveTab] = useState<AuthTab>('email');\n\n  useEffect(() => {\n    fetchSettings();\n  }, [fetchSettings]);\n\n  // Get current tab config\n  const currentTab = TABS.find((t) => t.id === activeTab);\n\n  // Collect settings from all categories for the current tab\n  const allTabSettings = useMemo(() => {\n    if (!currentTab) return [];\n    const allSettings: (typeof settings)[string] = [];\n    for (const category of currentTab.categories) {\n      const categorySettings = settings[category] ?? [];\n      allSettings.push(...categorySettings);\n    }\n    return allSettings;\n  }, [settings, currentTab]);\n\n  const currentSettings = useMemo(() => {\n    if (!currentTab?.keys) return allTabSettings;\n    // Filter and sort by keys order\n    return allTabSettings\n      .filter((s) => currentTab.keys!.includes(s.key))\n      .sort((a, b) => currentTab.keys!.indexOf(a.key) - currentTab.keys!.indexOf(b.key));\n  }, [allTabSettings, currentTab]);\n\n  if (isLoading && Object.keys(settings).length === 0) {\n    return (\n      <div className={`cedros-system-settings cedros-system-settings-loading ${className ?? ''}`}>\n        <LoadingSpinner />\n        <span>Loading settings...</span>\n      </div>\n    );\n  }\n\n  if (error) {\n    return (\n      <div className={`cedros-system-settings ${className ?? ''}`}>\n        <ErrorMessage error={error.message} />\n      </div>\n    );\n  }\n\n  return (\n    <div className={`cedros-system-settings ${className ?? ''}`}>\n      <div className=\"cedros-settings-page-header\">\n        <div className=\"cedros-settings-page-header-content\">\n          <h2 className=\"cedros-settings-page-title\">Authentication</h2>\n          <p className=\"cedros-settings-page-description\">\n            Configure authentication providers and methods for user sign-in.\n          </p>\n        </div>\n        <AutosaveStatus status={autosaveStatus} error={autosaveError} />\n      </div>\n\n      {/* Tabs */}\n      <div className=\"cedros-admin-tabs cedros-admin-tabs--line\">\n        {TABS.map((tab) => (\n          <button\n            key={tab.id}\n            type=\"button\"\n            className={`cedros-admin-tab ${activeTab === tab.id ? 'cedros-admin-tab-active' : ''}`}\n            onClick={() => setActiveTab(tab.id)}\n            aria-selected={activeTab === tab.id}\n            role=\"tab\"\n          >\n            {tab.label}\n          </button>\n        ))}\n      </div>\n\n      {/* Tab content */}\n      <div className=\"cedros-admin-tab-content\" role=\"tabpanel\">\n        {currentTab?.id === 'buttonorder' ? (\n          <SocialButtonOrderSettings settings={settings} handleChange={handleChange} />\n        ) : currentTab?.isCustom ? (\n          <SsoProvidersSettings />\n        ) : currentSettings.length === 0 ? (\n          <div className=\"cedros-system-settings-empty\">\n            <p>No settings found for {currentTab?.label ?? 'this provider'}.</p>\n          </div>\n        ) : (\n          <SettingsSection settings={currentSettings} edits={edits} onChange={handleChange} />\n        )}\n      </div>\n    </div>\n  );\n}\n"],"names":["useSsoProviders","config","_internal","useCedrosLogin","serverUrl","getAccessTokenRef","useRef","providers","setProviders","useState","total","setTotal","isLoading","setIsLoading","error","setError","getHeaders","useCallback","token","fetchProviders","orgId","limit","offset","params","res","err","data","createProvider","input","provider","prev","updateProvider","id","p","deleteProvider","toggleProvider","enabled","SsoProvidersSettings","className","activeOrg","useOrgs","viewMode","setViewMode","editingProvider","setEditingProvider","formError","setFormError","useEffect","handleAdd","handleEdit","handleCancel","handleDelete","handleToggle","handleSave","jsx","LoadingSpinner","SsoProviderForm","jsxs","ErrorMessage","SsoProviderCard","onEdit","onDelete","onToggle","onSave","onCancel","isEditing","name","setName","issuerUrl","setIssuerUrl","clientId","setClientId","clientSecret","setClientSecret","emailDomain","setEmailDomain","allowRegistration","setAllowRegistration","setEnabled","handleSubmit","e","updates","GoogleIcon","AppleIcon","SolanaIcon","PasskeyIcon","PROVIDERS","DEFAULT_ORDER","PREVIEW_LABELS","isProviderEnabled","settings","enabledKey","group","found","s","readOrder","GrabHandle","SocialButtonOrderSettings","handleChange","order","setOrder","dragIdx","dragOverIdx","setDragOverIdx","persist","newOrder","onDragStart","idx","onDragOver","onDrop","targetIdx","fromIdx","next","moved","onDragEnd","meta","TABS","AuthenticationSettings","edits","autosaveStatus","autosaveError","fetchSettings","useSettingsAutosave","activeTab","setActiveTab","currentTab","t","allTabSettings","useMemo","allSettings","category","categorySettings","currentSettings","a","b","AutosaveStatus","tab","SettingsSection"],"mappings":";;;;;;;AAkDO,SAASA,IAAkB;AAChC,QAAM,EAAE,QAAAC,GAAQ,WAAAC,EAAA,IAAcC,EAAA,GACxBC,IAAYH,EAAO,WAInBI,IAAoBC,EAAOJ,GAAW,mBAAmB,MAAM,KAAK;AAC1E,EAAAG,EAAkB,UAAUH,GAAW,mBAAmB,MAAM;AAEhE,QAAM,CAACK,GAAWC,CAAY,IAAIC,EAAwB,CAAA,CAAE,GACtD,CAACC,GAAOC,CAAQ,IAAIF,EAAS,CAAC,GAC9B,CAACG,GAAWC,CAAY,IAAIJ,EAAS,EAAK,GAC1C,CAACK,GAAOC,CAAQ,IAAIN,EAAuB,IAAI,GAG/CO,IAAaC,EAAY,MAAM;AACnC,UAAMC,IAAQb,EAAkB,QAAA;AAChC,WAAO;AAAA,MACL,gBAAgB;AAAA,MAChB,GAAIa,IAAQ,EAAE,eAAe,UAAUA,CAAK,OAAO,CAAA;AAAA,IAAC;AAAA,EAExD,GAAG,CAAA,CAAE,GAECC,IAAiBF;AAAA,IACrB,OAAOG,GAAgBC,IAAQ,IAAIC,IAAS,MAAM;AAChD,MAAAT,EAAa,EAAI,GACjBE,EAAS,IAAI;AACb,UAAI;AACF,cAAMQ,IAAS,IAAI,gBAAA;AACnB,QAAIH,KAAOG,EAAO,IAAI,UAAUH,CAAK,GACrCG,EAAO,IAAI,SAAS,OAAOF,CAAK,CAAC,GACjCE,EAAO,IAAI,UAAU,OAAOD,CAAM,CAAC;AAEnC,cAAME,IAAM,MAAM,MAAM,GAAGpB,CAAS,wBAAwBmB,CAAM,IAAI;AAAA,UACpE,SAASP,EAAA;AAAA,QAAW,CACrB;AAED,YAAI,CAACQ,EAAI,IAAI;AACX,gBAAMC,IAAM,MAAMD,EAAI,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AAC7C,gBAAM,IAAI,MAAMC,EAAI,SAAS,kCAAkCD,EAAI,MAAM,EAAE;AAAA,QAC7E;AAEA,cAAME,IAAqB,MAAMF,EAAI,KAAA;AACrC,eAAAhB,EAAakB,EAAK,SAAS,GAC3Bf,EAASe,EAAK,KAAK,GACZA;AAAA,MACT,SAASD,GAAK;AACZ,cAAMX,IAAQW,aAAe,QAAQA,IAAM,IAAI,MAAM,OAAOA,CAAG,CAAC;AAChE,cAAAV,EAASD,CAAK,GACRA;AAAAA,MACR,UAAA;AACE,QAAAD,EAAa,EAAK;AAAA,MACpB;AAAA,IACF;AAAA,IACA,CAACT,GAAWY,CAAU;AAAA,EAAA,GAGlBW,IAAiBV;AAAA,IACrB,OAAOW,MAAwD;AAC7D,MAAAf,EAAa,EAAI,GACjBE,EAAS,IAAI;AACb,UAAI;AACF,cAAMS,IAAM,MAAM,MAAM,GAAGpB,CAAS,wBAAwB;AAAA,UAC1D,QAAQ;AAAA,UACR,SAASY,EAAA;AAAA,UACT,MAAM,KAAK,UAAUY,CAAK;AAAA,QAAA,CAC3B;AAED,YAAI,CAACJ,EAAI,IAAI;AACX,gBAAMC,IAAM,MAAMD,EAAI,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AAC7C,gBAAM,IAAI,MAAMC,EAAI,SAAS,kCAAkCD,EAAI,MAAM,EAAE;AAAA,QAC7E;AAEA,cAAMK,IAAwB,MAAML,EAAI,KAAA;AACxC,eAAAhB,EAAa,CAACsB,MAAS,CAAC,GAAGA,GAAMD,CAAQ,CAAC,GAC1ClB,EAAS,CAACmB,MAASA,IAAO,CAAC,GACpBD;AAAA,MACT,SAASJ,GAAK;AACZ,cAAMX,IAAQW,aAAe,QAAQA,IAAM,IAAI,MAAM,OAAOA,CAAG,CAAC;AAChE,cAAAV,EAASD,CAAK,GACRA;AAAAA,MACR,UAAA;AACE,QAAAD,EAAa,EAAK;AAAA,MACpB;AAAA,IACF;AAAA,IACA,CAACT,GAAWY,CAAU;AAAA,EAAA,GAGlBe,IAAiBd;AAAA,IACrB,OAAOe,GAAYJ,MAAwD;AACzE,MAAAf,EAAa,EAAI,GACjBE,EAAS,IAAI;AACb,UAAI;AACF,cAAMS,IAAM,MAAM,MAAM,GAAGpB,CAAS,wBAAwB4B,CAAE,IAAI;AAAA,UAChE,QAAQ;AAAA,UACR,SAAShB,EAAA;AAAA,UACT,MAAM,KAAK,UAAUY,CAAK;AAAA,QAAA,CAC3B;AAED,YAAI,CAACJ,EAAI,IAAI;AACX,gBAAMC,IAAM,MAAMD,EAAI,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AAC7C,gBAAM,IAAI,MAAMC,EAAI,SAAS,kCAAkCD,EAAI,MAAM,EAAE;AAAA,QAC7E;AAEA,cAAMK,IAAwB,MAAML,EAAI,KAAA;AACxC,eAAAhB,EAAa,CAACsB,MAASA,EAAK,IAAI,CAACG,MAAOA,EAAE,OAAOD,IAAKH,IAAWI,CAAE,CAAC,GAC7DJ;AAAA,MACT,SAASJ,GAAK;AACZ,cAAMX,IAAQW,aAAe,QAAQA,IAAM,IAAI,MAAM,OAAOA,CAAG,CAAC;AAChE,cAAAV,EAASD,CAAK,GACRA;AAAAA,MACR,UAAA;AACE,QAAAD,EAAa,EAAK;AAAA,MACpB;AAAA,IACF;AAAA,IACA,CAACT,GAAWY,CAAU;AAAA,EAAA,GAGlBkB,IAAiBjB;AAAA,IACrB,OAAOe,MAA8B;AACnC,MAAAnB,EAAa,EAAI,GACjBE,EAAS,IAAI;AACb,UAAI;AACF,cAAMS,IAAM,MAAM,MAAM,GAAGpB,CAAS,wBAAwB4B,CAAE,IAAI;AAAA,UAChE,QAAQ;AAAA,UACR,SAAShB,EAAA;AAAA,QAAW,CACrB;AAED,YAAI,CAACQ,EAAI,IAAI;AACX,gBAAMC,IAAM,MAAMD,EAAI,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AAC7C,gBAAM,IAAI,MAAMC,EAAI,SAAS,kCAAkCD,EAAI,MAAM,EAAE;AAAA,QAC7E;AAEA,QAAAhB,EAAa,CAACsB,MAASA,EAAK,OAAO,CAACG,MAAMA,EAAE,OAAOD,CAAE,CAAC,GACtDrB,EAAS,CAACmB,MAASA,IAAO,CAAC;AAAA,MAC7B,SAASL,GAAK;AACZ,cAAMX,IAAQW,aAAe,QAAQA,IAAM,IAAI,MAAM,OAAOA,CAAG,CAAC;AAChE,cAAAV,EAASD,CAAK,GACRA;AAAAA,MACR,UAAA;AACE,QAAAD,EAAa,EAAK;AAAA,MACpB;AAAA,IACF;AAAA,IACA,CAACT,GAAWY,CAAU;AAAA,EAAA,GAGlBmB,IAAiBlB;AAAA,IACrB,OAAOe,GAAYI,MACVL,EAAeC,GAAI,EAAE,SAAAI,GAAS;AAAA,IAEvC,CAACL,CAAc;AAAA,EAAA;AAGjB,SAAO;AAAA,IACL,WAAAxB;AAAA,IACA,OAAAG;AAAA,IACA,WAAAE;AAAA,IACA,OAAAE;AAAA,IACA,gBAAAK;AAAA,IACA,gBAAAQ;AAAA,IACA,gBAAAI;AAAA,IACA,gBAAAG;AAAA,IACA,gBAAAC;AAAA,EAAA;AAEJ;AClMO,SAASE,EAAqB,EAAE,WAAAC,KAAwC;AAC7E,QAAM;AAAA,IACJ,WAAA/B;AAAA,IACA,WAAAK;AAAA,IACA,OAAAE;AAAA,IACA,gBAAAK;AAAA,IACA,gBAAAQ;AAAA,IACA,gBAAAI;AAAA,IACA,gBAAAG;AAAA,IACA,gBAAAC;AAAA,EAAA,IACEnC,EAAA,GAEE,EAAE,WAAAuC,EAAA,IAAcC,EAAA,GAChB,CAACC,GAAUC,CAAW,IAAIjC,EAAmB,MAAM,GACnD,CAACkC,GAAiBC,CAAkB,IAAInC,EAA6B,IAAI,GACzE,CAACoC,GAAWC,CAAY,IAAIrC,EAAwB,IAAI;AAE9D,EAAAsC,EAAU,MAAM;AACd,IAAA5B,EAAeoB,GAAW,EAAE;AAAA,EAC9B,GAAG,CAACpB,GAAgBoB,GAAW,EAAE,CAAC;AAElC,QAAMS,IAAY,MAAM;AACtB,IAAAJ,EAAmB,IAAI,GACvBE,EAAa,IAAI,GACjBJ,EAAY,KAAK;AAAA,EACnB,GAEMO,IAAa,CAACpB,MAA0B;AAC5C,IAAAe,EAAmBf,CAAQ,GAC3BiB,EAAa,IAAI,GACjBJ,EAAY,MAAM;AAAA,EACpB,GAEMQ,IAAe,MAAM;AACzB,IAAAR,EAAY,MAAM,GAClBE,EAAmB,IAAI,GACvBE,EAAa,IAAI;AAAA,EACnB,GAEMK,IAAe,OAAOtB,MAA0B;AACpD,QAAK,QAAQ,wBAAwBA,EAAS,IAAI,2BAA2B;AAG7E,UAAI;AACF,cAAMK,EAAeL,EAAS,EAAE;AAAA,MAClC,QAAQ;AAAA,MAER;AAAA,EACF,GAEMuB,IAAe,OAAOvB,MAA0B;AACpD,QAAI;AACF,YAAMM,EAAeN,EAAS,IAAI,CAACA,EAAS,OAAO;AAAA,IACrD,QAAQ;AAAA,IAER;AAAA,EACF,GAEMwB,IAAa,OAAO3B,MAA0D;AAClF,IAAAoB,EAAa,IAAI;AACjB,QAAI;AACF,MAAIL,MAAa,QACf,MAAMd,EAAeD,CAA8B,IAC1CiB,KACT,MAAMZ,EAAeY,EAAgB,IAAIjB,CAA8B,GAEzEgB,EAAY,MAAM,GAClBE,EAAmB,IAAI;AAAA,IACzB,SAASnB,GAAK;AACZ,MAAAqB,EAAarB,aAAe,QAAQA,EAAI,UAAU,yBAAyB;AAAA,IAC7E;AAAA,EACF;AAEA,SAAIb,KAAaL,EAAU,WAAW,sBAEjC,OAAA,EAAI,WAAW,yDAAyD+B,KAAa,EAAE,IACtF,UAAA;AAAA,IAAA,gBAAAgB,EAACC,GAAA,EAAe;AAAA,IAChB,gBAAAD,EAAC,UAAK,UAAA,2BAAA,CAAwB;AAAA,EAAA,GAChC,IAIAb,MAAa,SAASA,MAAa,2BAElC,OAAA,EAAI,WAAW,0BAA0BH,KAAa,EAAE,IACvD,UAAA,gBAAAgB;AAAA,IAACE;AAAA,IAAA;AAAA,MACC,UAAUb;AAAA,MACV,OAAOJ,GAAW;AAAA,MAClB,OAAOM;AAAA,MACP,WAAAjC;AAAA,MACA,QAAQyC;AAAA,MACR,UAAUH;AAAA,IAAA;AAAA,EAAA,GAEd,sBAKD,OAAA,EAAI,WAAW,0BAA0BZ,KAAa,EAAE,IACvD,UAAA;AAAA,IAAA,gBAAAmB,EAAC,OAAA,EAAI,WAAU,+BACb,UAAA;AAAA,MAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,uCACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,8BAA6B,UAAA,iBAAa;AAAA,QACxD,gBAAAA,EAAC,KAAA,EAAE,WAAU,oCAAmC,UAAA,mEAAA,CAEhD;AAAA,MAAA,GACF;AAAA,MACA,gBAAAA,EAAC,YAAO,MAAK,UAAS,WAAU,iCAAgC,SAASN,GAAW,UAAA,eAAA,CAEpF;AAAA,IAAA,GACF;AAAA,IAEClC,KAAS,gBAAAwC,EAACI,GAAA,EAAa,OAAO5C,EAAM,SAAS;AAAA,IAE7CP,EAAU,WAAW,IACpB,gBAAAkD,EAAC,OAAA,EAAI,WAAU,gCACb,UAAA;AAAA,MAAA,gBAAAH,EAAC,OAAE,UAAA,+BAAA,CAA4B;AAAA,MAC/B,gBAAAA,EAAC,KAAA,EAAE,WAAU,qBAAoB,UAAA,+EAAA,CAEjC;AAAA,IAAA,EAAA,CACF,sBAEC,OAAA,EAAI,WAAU,4BACZ,UAAA/C,EAAU,IAAI,CAACsB,MACd,gBAAAyB;AAAA,MAACK;AAAA,MAAA;AAAA,QAEC,UAAA9B;AAAA,QACA,QAAQ,MAAMoB,EAAWpB,CAAQ;AAAA,QACjC,UAAU,MAAMsB,EAAatB,CAAQ;AAAA,QACrC,UAAU,MAAMuB,EAAavB,CAAQ;AAAA,MAAA;AAAA,MAJhCA,EAAS;AAAA,IAAA,CAMjB,EAAA,CACH;AAAA,EAAA,GAEJ;AAEJ;AAaA,SAAS8B,EAAgB,EAAE,UAAA9B,GAAU,QAAA+B,GAAQ,UAAAC,GAAU,UAAAC,KAAkC;AACvF,SACE,gBAAAL;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,WAAW,4BAA4B5B,EAAS,UAAU,KAAK,oCAAoC;AAAA,MAEnG,UAAA;AAAA,QAAA,gBAAA4B,EAAC,OAAA,EAAI,WAAU,mCACb,UAAA;AAAA,UAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,iCACb,UAAA;AAAA,YAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,iCAAiC,UAAAzB,EAAS,MAAK;AAAA,YAC7D,gBAAAyB,EAAC,KAAA,EAAE,WAAU,mCAAmC,YAAS,UAAA,CAAU;AAAA,UAAA,GACrE;AAAA,UACA,gBAAAG;AAAA,YAAC;AAAA,YAAA;AAAA,cACC,MAAK;AAAA,cACL,MAAK;AAAA,cACL,gBAAc5B,EAAS;AAAA,cACvB,WAAW,iBAAiBA,EAAS,UAAU,qBAAqB,mBAAmB;AAAA,cACvF,SAASiC;AAAA,cAET,UAAA;AAAA,gBAAA,gBAAAR,EAAC,UAAK,WAAU,uBACd,4BAAC,QAAA,EAAK,WAAU,uBAAsB,EAAA,CACxC;AAAA,kCACC,QAAA,EAAK,WAAU,uBAAuB,UAAAzB,EAAS,UAAU,YAAY,WAAA,CAAW;AAAA,cAAA;AAAA,YAAA;AAAA,UAAA;AAAA,QACnF,GACF;AAAA,QAEA,gBAAA4B,EAAC,OAAA,EAAI,WAAU,oCACb,UAAA;AAAA,UAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,mCACb,UAAA;AAAA,YAAA,gBAAAH,EAAC,QAAA,EAAK,WAAU,yCAAwC,UAAA,aAAS;AAAA,YACjE,gBAAAA,EAAC,QAAA,EAAK,WAAU,yCAAyC,YAAS,SAAA,CAAS;AAAA,UAAA,GAC7E;AAAA,UACCzB,EAAS,eACR,gBAAA4B,EAAC,OAAA,EAAI,WAAU,mCACb,UAAA;AAAA,YAAA,gBAAAH,EAAC,QAAA,EAAK,WAAU,yCAAwC,UAAA,gBAAY;AAAA,YACpE,gBAAAG,EAAC,QAAA,EAAK,WAAU,yCAAwC,UAAA;AAAA,cAAA;AAAA,cAAE5B,EAAS;AAAA,YAAA,EAAA,CAAY;AAAA,UAAA,GACjF;AAAA,UAEF,gBAAA4B,EAAC,OAAA,EAAI,WAAU,mCACb,UAAA;AAAA,YAAA,gBAAAH,EAAC,QAAA,EAAK,WAAU,yCAAwC,UAAA,gBAAY;AAAA,8BACnE,QAAA,EAAK,WAAU,yCACb,UAAAzB,EAAS,oBAAoB,YAAY,sBAAA,CAC5C;AAAA,UAAA,EAAA,CACF;AAAA,QAAA,GACF;AAAA,QAEA,gBAAA4B,EAAC,OAAA,EAAI,WAAU,oCACb,UAAA;AAAA,UAAA,gBAAAH,EAAC,YAAO,MAAK,UAAS,WAAU,+BAA8B,SAASM,GAAQ,UAAA,OAAA,CAE/E;AAAA,UACA,gBAAAN;AAAA,YAAC;AAAA,YAAA;AAAA,cACC,MAAK;AAAA,cACL,WAAU;AAAA,cACV,SAASO;AAAA,cACV,UAAA;AAAA,YAAA;AAAA,UAAA;AAAA,QAED,EAAA,CACF;AAAA,MAAA;AAAA,IAAA;AAAA,EAAA;AAGN;AAeA,SAASL,EAAgB;AAAA,EACvB,UAAA3B;AAAA,EACA,OAAAT;AAAA,EACA,OAAAN;AAAA,EACA,WAAAF;AAAA,EACA,QAAAmD;AAAA,EACA,UAAAC;AACF,GAAyB;AACvB,QAAMC,IAAY,EAAQpC,GAEpB,CAACqC,GAAMC,CAAO,IAAI1D,EAASoB,GAAU,QAAQ,EAAE,GAC/C,CAACuC,GAAWC,CAAY,IAAI5D,EAASoB,GAAU,aAAa,EAAE,GAC9D,CAACyC,GAAUC,CAAW,IAAI9D,EAASoB,GAAU,YAAY,EAAE,GAC3D,CAAC2C,GAAcC,CAAe,IAAIhE,EAAS,EAAE,GAC7C,CAACiE,GAAaC,CAAc,IAAIlE,EAASoB,GAAU,eAAe,EAAE,GACpE,CAAC+C,GAAmBC,CAAoB,IAAIpE,EAASoB,GAAU,qBAAqB,EAAI,GACxF,CAACO,GAAS0C,CAAU,IAAIrE,EAASoB,GAAU,WAAW,EAAI,GAE1DkD,IAAe9D;AAAA,IACnB,CAAC+D,MAAuB;AAGtB,UAFAA,EAAE,eAAA,GAEEf,GAAW;AACb,cAAMgB,IAAkC;AAAA,UACtC,MAAAf;AAAA,UACA,WAAAE;AAAA,UACA,UAAAE;AAAA,UACA,aAAaI,KAAe;AAAA,UAC5B,mBAAAE;AAAA,UACA,SAAAxC;AAAA,QAAA;AAGF,QAAIoC,MACFS,EAAQ,eAAeT,IAEzBT,EAAOkB,CAAO;AAAA,MAChB,OAAO;AACL,YAAI,CAAC7D;AACH;AAYF,QAAA2C,EAVqC;AAAA,UACnC,OAAA3C;AAAA,UACA,MAAA8C;AAAA,UACA,WAAAE;AAAA,UACA,UAAAE;AAAA,UACA,cAAAE;AAAA,UACA,aAAaE,KAAe;AAAA,UAC5B,mBAAAE;AAAA,UACA,SAAAxC;AAAA,QAAA,CAES;AAAA,MACb;AAAA,IACF;AAAA,IACA;AAAA,MACE6B;AAAA,MACA7C;AAAA,MACA8C;AAAA,MACAE;AAAA,MACAE;AAAA,MACAE;AAAA,MACAE;AAAA,MACAE;AAAA,MACAxC;AAAA,MACA2B;AAAA,IAAA;AAAA,EACF;AAGF,SACE,gBAAAN,EAAC,QAAA,EAAK,WAAU,4BAA2B,UAAUsB,GACnD,UAAA;AAAA,IAAA,gBAAAzB,EAAC,SAAI,WAAU,+BACb,UAAA,gBAAAG,EAAC,OAAA,EAAI,WAAU,uCACb,UAAA;AAAA,MAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,8BACX,UAAAW,IAAY,sBAAsB,oBACrC;AAAA,MACA,gBAAAX,EAAC,KAAA,EAAE,WAAU,oCAAmC,UAAA,qEAAA,CAEhD;AAAA,IAAA,EAAA,CACF,EAAA,CACF;AAAA,IAECxC,KAAS,gBAAAwC,EAACI,GAAA,EAAa,OAAA5C,EAAA,CAAc;AAAA,IAEtC,gBAAA2C,EAAC,OAAA,EAAI,WAAU,uBACb,UAAA;AAAA,MAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,YAAW,UAAA,iBAExD;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOY;AAAA,YACP,UAAU,CAACc,MAAMb,EAAQa,EAAE,OAAO,KAAK;AAAA,YACvC,aAAY;AAAA,YACZ,UAAQ;AAAA,UAAA;AAAA,QAAA;AAAA,MACV,GACF;AAAA,MAEA,gBAAAvB,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,cAAa,UAAA,cAE1D;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOc;AAAA,YACP,UAAU,CAACY,MAAMX,EAAaW,EAAE,OAAO,KAAK;AAAA,YAC5C,aAAY;AAAA,YACZ,UAAQ;AAAA,UAAA;AAAA,QAAA;AAAA,QAEV,gBAAA1B,EAAC,KAAA,EAAE,WAAU,oBAAmB,UAAA,mFAAA,CAEhC;AAAA,MAAA,GACF;AAAA,MAEA,gBAAAG,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,iBAAgB,UAAA,aAE7D;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOgB;AAAA,YACP,UAAU,CAACU,MAAMT,EAAYS,EAAE,OAAO,KAAK;AAAA,YAC3C,aAAY;AAAA,YACZ,UAAQ;AAAA,UAAA;AAAA,QAAA;AAAA,MACV,GACF;AAAA,MAEA,gBAAAvB,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAA,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,qBAAoB,UAAA;AAAA,UAAA;AAAA,UACjD;AAAA,UACbQ,KACC,gBAAAX,EAAC,QAAA,EAAK,WAAU,2BAA0B,UAAA,gCAAA,CAA6B;AAAA,QAAA,GAE3E;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOkB;AAAA,YACP,UAAU,CAACQ,MAAMP,EAAgBO,EAAE,OAAO,KAAK;AAAA,YAC/C,aAAaf,IAAY,aAAa;AAAA,YACtC,UAAU,CAACA;AAAA,UAAA;AAAA,QAAA;AAAA,MACb,GACF;AAAA,MAEA,gBAAAR,EAAC,OAAA,EAAI,WAAU,qBACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,SAAA,EAAM,WAAU,qBAAoB,SAAQ,oBAAmB,UAAA,2BAEhE;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,WAAU;AAAA,YACV,OAAOoB;AAAA,YACP,UAAU,CAACM,MAAML,EAAeK,EAAE,OAAO,KAAK;AAAA,YAC9C,aAAY;AAAA,UAAA;AAAA,QAAA;AAAA,QAEd,gBAAA1B,EAAC,KAAA,EAAE,WAAU,oBAAmB,UAAA,iDAAA,CAA8C;AAAA,MAAA,GAChF;AAAA,wBAEC,OAAA,EAAI,WAAU,qBACb,UAAA,gBAAAG,EAAC,SAAA,EAAM,WAAU,wBACf,UAAA;AAAA,QAAA,gBAAAH;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,MAAK;AAAA,YACL,SAASsB;AAAA,YACT,UAAU,CAACI,MAAMH,EAAqBG,EAAE,OAAO,OAAO;AAAA,UAAA;AAAA,QAAA;AAAA,QAExD,gBAAA1B,EAAC,UAAK,UAAA,sCAAA,CAAmC;AAAA,MAAA,EAAA,CAC3C,EAAA,CACF;AAAA,wBAEC,OAAA,EAAI,WAAU,qBACb,UAAA,gBAAAG,EAAC,SAAA,EAAM,WAAU,wBACf,UAAA;AAAA,QAAA,gBAAAH;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,MAAK;AAAA,YACL,SAASlB;AAAA,YACT,UAAU,CAAC4C,MAAMF,EAAWE,EAAE,OAAO,OAAO;AAAA,UAAA;AAAA,QAAA;AAAA,QAE9C,gBAAA1B,EAAC,UAAK,UAAA,uBAAA,CAAoB;AAAA,MAAA,EAAA,CAC5B,EAAA,CACF;AAAA,IAAA,GACF;AAAA,IAEA,gBAAAG,EAAC,OAAA,EAAI,WAAU,uBACb,UAAA;AAAA,MAAA,gBAAAH;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,SAASU;AAAA,UACT,UAAUpD;AAAA,UACX,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,MAGD,gBAAA0C,EAAC,UAAA,EAAO,MAAK,UAAS,WAAU,iCAAgC,UAAU1C,GACvE,UAAAA,IAAY,cAAcqD,IAAY,iBAAiB,eAAA,CAC1D;AAAA,IAAA,EAAA,CACF;AAAA,EAAA,GACF;AAEJ;AC7ZA,SAASiB,IAAa;AACpB,SACE,gBAAAzB,EAAC,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,aAAY,MAAK,QAAO,eAAY,QACtE,UAAA;AAAA,IAAA,gBAAAH,EAAC,QAAA,EAAK,GAAE,4IAA2I,MAAK,WAAU;AAAA,IAClK,gBAAAA,EAAC,QAAA,EAAK,GAAE,uJAAsJ,MAAK,WAAU;AAAA,IAC7K,gBAAAA,EAAC,QAAA,EAAK,GAAE,yIAAwI,MAAK,WAAU;AAAA,IAC/J,gBAAAA,EAAC,QAAA,EAAK,GAAE,6JAA4J,MAAK,UAAA,CAAU;AAAA,EAAA,GACrL;AAEJ;AAEA,SAAS6B,IAAY;AACnB,2BACG,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,aAAY,MAAK,gBAAe,eAAY,QAC9E,UAAA,gBAAA7B,EAAC,QAAA,EAAK,GAAE,6bAA4b,GACtc;AAEJ;AAEA,SAAS8B,IAAa;AACpB,SACE,gBAAA3B,EAAC,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,eAAc,MAAK,gBAAe,eAAY,QAChF,UAAA;AAAA,IAAA,gBAAAH,EAAC,QAAA,EAAK,GAAE,2JAAA,CAA2J;AAAA,IACnK,gBAAAA,EAAC,QAAA,EAAK,GAAE,2JAAA,CAA2J;AAAA,IACnK,gBAAAA,EAAC,QAAA,EAAK,GAAE,4JAAA,CAA4J;AAAA,EAAA,GACtK;AAEJ;AAEA,SAAS+B,IAAc;AACrB,2BACG,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAAM,eAAc,SAAQ,gBAAe,SAAQ,eAAY,QAC3J,UAAA;AAAA,IAAA,gBAAA/B,EAAC,QAAA,EAAK,GAAE,4CAAA,CAA4C;AAAA,IACpD,gBAAAA,EAAC,QAAA,EAAK,GAAE,iCAAA,CAAiC;AAAA,IACzC,gBAAAA,EAAC,QAAA,EAAK,GAAE,oCAAA,CAAoC;AAAA,IAC5C,gBAAAA,EAAC,QAAA,EAAK,GAAE,yBAAA,CAAyB;AAAA,IACjC,gBAAAA,EAAC,QAAA,EAAK,GAAE,YAAA,CAAY;AAAA,IACpB,gBAAAA,EAAC,QAAA,EAAK,GAAE,+BAAA,CAA+B;AAAA,IACvC,gBAAAA,EAAC,QAAA,EAAK,GAAE,2CAAA,CAA2C;AAAA,IACnD,gBAAAA,EAAC,QAAA,EAAK,GAAE,gCAAA,CAAgC;AAAA,IACxC,gBAAAA,EAAC,QAAA,EAAK,GAAE,2BAAA,CAA2B;AAAA,EAAA,GACrC;AAEJ;AAEA,MAAMgC,IAA0C;AAAA,EAC9C,UAAU,EAAE,OAAO,WAAW,MAAM,gBAAAhC,EAAC+B,GAAA,CAAA,CAAY,GAAI,YAAY,wBAAA;AAAA,EACjE,QAAQ,EAAE,OAAO,UAAU,MAAM,gBAAA/B,EAAC4B,GAAA,CAAA,CAAW,GAAI,YAAY,sBAAA;AAAA,EAC7D,OAAO,EAAE,OAAO,SAAS,MAAM,gBAAA5B,EAAC6B,GAAA,CAAA,CAAU,GAAI,YAAY,qBAAA;AAAA,EAC1D,QAAQ,EAAE,OAAO,UAAU,MAAM,gBAAA7B,EAAC8B,GAAA,CAAA,CAAW,GAAI,YAAY,sBAAA;AAC/D,GAEMG,IAAgB,CAAC,YAAY,UAAU,SAAS,QAAQ,GAExDC,IAAyC;AAAA,EAC7C,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AACV;AAOA,SAASC,EACPC,GACAC,GACS;AACT,aAAWC,KAAS,OAAO,OAAOF,CAAQ,GAAG;AAC3C,UAAMG,IAAQD,EAAM,KAAK,CAACE,MAAMA,EAAE,QAAQH,CAAU;AACpD,QAAIE,EAAO,QAAOA,EAAM,UAAU;AAAA,EACpC;AACA,SAAO;AACT;AAGA,SAASE,EAAUL,GAAsE;AACvF,aAAWE,KAAS,OAAO,OAAOF,CAAQ,GAAG;AAC3C,UAAMG,IAAQD,EAAM,KAAK,CAACE,MAAMA,EAAE,QAAQ,wBAAwB;AAClE,QAAID,KAASA,EAAM,MAAO,QAAOA,EAAM,MAAM,MAAM,GAAG,EAAE,IAAI,CAACC,MAAMA,EAAE,MAAM;AAAA,EAC7E;AACA,SAAOP;AACT;AAMA,SAASS,IAAa;AACpB,2BACG,OAAA,EAAI,OAAM,MAAK,QAAO,MAAK,SAAQ,aAAY,MAAK,gBAAe,eAAY,QAAO,OAAO,EAAE,SAAS,OACvG,UAAA;AAAA,IAAA,gBAAA1C,EAAC,YAAO,IAAG,KAAI,IAAG,KAAI,GAAE,OAAM;AAAA,sBAC7B,UAAA,EAAO,IAAG,MAAK,IAAG,KAAI,GAAE,OAAM;AAAA,sBAC9B,UAAA,EAAO,IAAG,KAAI,IAAG,KAAI,GAAE,OAAM;AAAA,sBAC7B,UAAA,EAAO,IAAG,MAAK,IAAG,KAAI,GAAE,OAAM;AAAA,sBAC9B,UAAA,EAAO,IAAG,KAAI,IAAG,MAAK,GAAE,OAAM;AAAA,sBAC9B,UAAA,EAAO,IAAG,MAAK,IAAG,MAAK,GAAE,MAAA,CAAM;AAAA,EAAA,GAClC;AAEJ;AAMO,SAAS2C,GAA0B,EAAE,UAAAP,GAAU,cAAAQ,KAAgD;AACpG,QAAM,CAACC,GAAOC,CAAQ,IAAI3F,EAAmB,MAAMsF,EAAUL,CAAQ,CAAC,GAChEW,IAAU/F,EAAsB,IAAI,GACpC,CAACgG,GAAaC,CAAc,IAAI9F,EAAwB,IAAI,GAE5D+F,IAAUvF;AAAA,IACd,CAACwF,MAAuB;AACtB,MAAAL,EAASK,CAAQ,GACjBP,EAAa,0BAA0BO,EAAS,KAAK,GAAG,CAAC;AAAA,IAC3D;AAAA,IACA,CAACP,CAAY;AAAA,EAAA,GAGTQ,IAAczF,EAAY,CAAC0F,MAAgB;AAC/C,IAAAN,EAAQ,UAAUM;AAAA,EACpB,GAAG,CAAA,CAAE,GAECC,IAAa3F,EAAY,CAAC+D,GAAoB2B,MAAgB;AAClE,IAAA3B,EAAE,eAAA,GACFuB,EAAeI,CAAG;AAAA,EACpB,GAAG,CAAA,CAAE,GAECE,IAAS5F;AAAA,IACb,CAAC6F,MAAsB;AACrB,YAAMC,IAAUV,EAAQ;AACxB,UAAIU,MAAY,QAAQA,MAAYD,GAAW;AAC7C,QAAAP,EAAe,IAAI;AACnB;AAAA,MACF;AACA,YAAMS,IAAO,CAAC,GAAGb,CAAK,GAChB,CAACc,CAAK,IAAID,EAAK,OAAOD,GAAS,CAAC;AACtC,MAAAC,EAAK,OAAOF,GAAW,GAAGG,CAAK,GAC/BT,EAAQQ,CAAI,GACZX,EAAQ,UAAU,MAClBE,EAAe,IAAI;AAAA,IACrB;AAAA,IACA,CAACJ,GAAOK,CAAO;AAAA,EAAA,GAGXU,IAAYjG,EAAY,MAAM;AAClC,IAAAoF,EAAQ,UAAU,MAClBE,EAAe,IAAI;AAAA,EACrB,GAAG,CAAA,CAAE;AAEL,SACE,gBAAA9C,EAAC,OAAA,EAAI,WAAU,0BACb,UAAA;AAAA,IAAA,gBAAAH,EAAC,SAAI,WAAU,+BACb,UAAA,gBAAAG,EAAC,OAAA,EAAI,WAAU,uCACb,UAAA;AAAA,MAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,8BAA6B,UAAA,gBAAY;AAAA,MACvD,gBAAAA,EAAC,KAAA,EAAE,WAAU,oCAAmC,UAAA,iEAAA,CAEhD;AAAA,IAAA,EAAA,CACF,EAAA,CACF;AAAA,IAEA,gBAAAG,EAAC,OAAA,EAAI,OAAO,EAAE,SAAS,QAAQ,KAAK,QAAQ,UAAU,OAAA,GAEpD,UAAA;AAAA,MAAA,gBAAAH,EAAC,OAAA,EAAI,OAAO,EAAE,MAAM,aAAa,UAAU,IAAA,GACzC,UAAA,gBAAAA,EAAC,MAAA,EAAG,OAAO,EAAE,WAAW,QAAQ,SAAS,GAAG,QAAQ,GAAG,SAAS,QAAQ,eAAe,UAAU,KAAK,SAAA,GACnG,UAAA6C,EAAM,IAAI,CAACnE,GAAI2E,MAAQ;AACtB,cAAMQ,IAAO7B,EAAUtD,CAAE;AACzB,YAAI,CAACmF,EAAM,QAAO;AAClB,cAAM/E,IAAUqD,EAAkBC,GAAUyB,EAAK,UAAU;AAE3D,eACE,gBAAA1D;AAAA,UAAC;AAAA,UAAA;AAAA,YAEC,WAAS;AAAA,YACT,aAAa,MAAMiD,EAAYC,CAAG;AAAA,YAClC,YAAY,CAAC3B,MAAM4B,EAAW5B,GAAG2B,CAAG;AAAA,YACpC,QAAQ,MAAME,EAAOF,CAAG;AAAA,YACxB,WAAAO;AAAA,YACA,WAAU;AAAA,YACV,OAAO;AAAA,cACL,SAAS;AAAA,cACT,YAAY;AAAA,cACZ,KAAK;AAAA,cACL,SAAS;AAAA,cACT,cAAc;AAAA,cACd,QAhBaZ,MAAgBK,IAiBzB,6CACA;AAAA,cACJ,YAAY;AAAA,cACZ,QAAQ;AAAA,cACR,SAASvE,IAAU,IAAI;AAAA,cACvB,YAAY;AAAA,YAAA;AAAA,YAGd,UAAA;AAAA,cAAA,gBAAAkB,EAAC0C,GAAA,EAAW;AAAA,cACZ,gBAAA1C,EAAC,QAAA,EAAK,WAAU,sBAAqB,OAAO,EAAE,SAAS,QAAQ,YAAY,SAAA,GACxE,UAAA6D,EAAK,KAAA,CACR;AAAA,cACA,gBAAA7D,EAAC,QAAA,EAAK,OAAO,EAAE,MAAM,GAAG,YAAY,KAAK,UAAU,WAAA,GAAe,UAAA6D,EAAK,MAAA,CAAM;AAAA,cAC7E,gBAAA7D;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBACC,OAAO;AAAA,oBACL,UAAU;AAAA,oBACV,SAAS;AAAA,oBACT,cAAc;AAAA,oBACd,YAAYlB,IACR,mCACA;AAAA,oBACJ,OAAOA,IACH,2CACA;AAAA,kBAAA;AAAA,kBAGL,cAAU,YAAY;AAAA,gBAAA;AAAA,cAAA;AAAA,YACzB;AAAA,UAAA;AAAA,UAzCKJ;AAAA,QAAA;AAAA,MA4CX,CAAC,GACH,GACF;AAAA,MAGA,gBAAAyB,EAAC,SAAI,OAAO,EAAE,MAAM,aAAa,UAAU,OACzC,UAAA;AAAA,QAAA,gBAAAH,EAAC,KAAA,EAAE,OAAO,EAAE,UAAU,WAAW,OAAO,2CAA2C,QAAQ,cAAA,GAAiB,UAAA,mDAAA,CAE5G;AAAA,QACA,gBAAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,OAAO;AAAA,cACL,SAAS;AAAA,cACT,eAAe;AAAA,cACf,KAAK;AAAA,cACL,SAAS;AAAA,cACT,cAAc;AAAA,cACd,QAAQ;AAAA,cACR,YAAY;AAAA,YAAA;AAAA,YAGb,UAAA6C,EAAM,IAAI,CAACnE,MAAO;AACjB,oBAAMmF,IAAO7B,EAAUtD,CAAE;AAGzB,qBAFI,CAACmF,KAED,CADY1B,EAAkBC,GAAUyB,EAAK,UAAU,IACtC,OAEnB,gBAAA1D;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBAEC,MAAK;AAAA,kBACL,WAAU;AAAA,kBACV,OAAO,EAAE,eAAe,QAAQ,OAAO,OAAA;AAAA,kBACvC,UAAU;AAAA,kBAEV,UAAA;AAAA,oBAAA,gBAAAH,EAAC,QAAA,EAAK,WAAU,sBAAsB,UAAA6D,EAAK,MAAK;AAAA,oBAC/C3B,EAAexD,CAAE;AAAA,kBAAA;AAAA,gBAAA;AAAA,gBAPbA;AAAA,cAAA;AAAA,YAUX,CAAC;AAAA,UAAA;AAAA,QAAA;AAAA,MACH,EAAA,CACF;AAAA,IAAA,EAAA,CACF;AAAA,EAAA,GACF;AAEJ;ACxQA,MAAMoF,IAAoB;AAAA,EACxB;AAAA,IAAE,IAAI;AAAA,IAAS,OAAO;AAAA,IAAS,YAAY,CAAC,YAAY;AAAA,IACtD,MAAM,CAAC,sBAAsB,mCAAmC,6BAA6B;AAAA,EAAA;AAAA,EAC/F;AAAA,IAAE,IAAI;AAAA,IAAU,OAAO;AAAA,IAAU,YAAY,CAAC,aAAa;AAAA,IACzD,MAAM,CAAC,uBAAuB,uBAAuB;AAAA,EAAA;AAAA,EACvD;AAAA,IAAE,IAAI;AAAA,IAAS,OAAO;AAAA,IAAS,YAAY,CAAC,YAAY;AAAA,IACtD,MAAM,CAAC,sBAAsB,wBAAwB,oBAAoB;AAAA,EAAA;AAAA,EAC3E;AAAA,IAAE,IAAI;AAAA,IAAU,OAAO;AAAA,IAAU,YAAY,CAAC,aAAa;AAAA,IACzD,MAAM,CAAC,uBAAuB,8BAA8B;AAAA,EAAA;AAAA,EAC9D;AAAA,IAAE,IAAI;AAAA,IAAY,OAAO;AAAA,IAAY,YAAY,CAAC,eAAe;AAAA,IAC/D,MAAM,CAAC,yBAAyB,uBAAuB,yBAAyB,yBAAyB;AAAA,EAAA;AAAA,EAC3G;AAAA,IAAE,IAAI;AAAA,IAAe,OAAO;AAAA,IAAgB,YAAY,CAAC,kBAAkB;AAAA,IACzE,MAAM,CAAC,4BAA4B,2BAA2B,6BAA6B;AAAA,EAAA;AAAA,EAC7F,EAAE,IAAI,OAAO,OAAO,iBAAiB,YAAY,CAAA,GAAI,UAAU,GAAA;AAAA,EAC/D,EAAE,IAAI,eAAe,OAAO,gBAAgB,YAAY,CAAA,GAAI,UAAU,GAAA;AAAA,EACtE;AAAA,IAAE,IAAI;AAAA,IAAa,OAAO;AAAA,IAAc,YAAY,CAAC,aAAa,qBAAqB,sBAAsB,sBAAsB,kBAAkB;AAAA,IACnJ,MAAM,CAAC,0BAA0B,6BAA6B,2BAA2B,8BAA8B,8BAA8B,mCAAmC,iCAAiC;AAAA,EAAA;AAC7N;AAMO,SAASC,GAAuB,EAAE,WAAA/E,KAA0C;AACjF,QAAM;AAAA,IACJ,UAAAoD;AAAA,IACA,OAAA4B;AAAA,IACA,WAAA1G;AAAA,IACA,gBAAA2G;AAAA,IACA,eAAAC;AAAA,IACA,OAAA1G;AAAA,IACA,eAAA2G;AAAA,IACA,cAAAvB;AAAA,EAAA,IACEwB,EAAA,GAEE,CAACC,GAAWC,CAAY,IAAInH,EAAkB,OAAO;AAE3D,EAAAsC,EAAU,MAAM;AACd,IAAA0E,EAAA;AAAA,EACF,GAAG,CAACA,CAAa,CAAC;AAGlB,QAAMI,IAAaT,EAAK,KAAK,CAACU,MAAMA,EAAE,OAAOH,CAAS,GAGhDI,IAAiBC,EAAQ,MAAM;AACnC,QAAI,CAACH,EAAY,QAAO,CAAA;AACxB,UAAMI,IAAyC,CAAA;AAC/C,eAAWC,KAAYL,EAAW,YAAY;AAC5C,YAAMM,IAAmBzC,EAASwC,CAAQ,KAAK,CAAA;AAC/C,MAAAD,EAAY,KAAK,GAAGE,CAAgB;AAAA,IACtC;AACA,WAAOF;AAAA,EACT,GAAG,CAACvC,GAAUmC,CAAU,CAAC,GAEnBO,IAAkBJ,EAAQ,MACzBH,GAAY,OAEVE,EACJ,OAAO,CAACjC,MAAM+B,EAAW,KAAM,SAAS/B,EAAE,GAAG,CAAC,EAC9C,KAAK,CAACuC,GAAGC,MAAMT,EAAW,KAAM,QAAQQ,EAAE,GAAG,IAAIR,EAAW,KAAM,QAAQS,EAAE,GAAG,CAAC,IAJrDP,GAK7B,CAACA,GAAgBF,CAAU,CAAC;AAE/B,SAAIjH,KAAa,OAAO,KAAK8E,CAAQ,EAAE,WAAW,sBAE7C,OAAA,EAAI,WAAW,yDAAyDpD,KAAa,EAAE,IACtF,UAAA;AAAA,IAAA,gBAAAgB,EAACC,GAAA,EAAe;AAAA,IAChB,gBAAAD,EAAC,UAAK,UAAA,sBAAA,CAAmB;AAAA,EAAA,GAC3B,IAIAxC,IAEA,gBAAAwC,EAAC,OAAA,EAAI,WAAW,0BAA0BhB,KAAa,EAAE,IACvD,UAAA,gBAAAgB,EAACI,GAAA,EAAa,OAAO5C,EAAM,QAAA,CAAS,GACtC,sBAKD,OAAA,EAAI,WAAW,0BAA0BwB,KAAa,EAAE,IACvD,UAAA;AAAA,IAAA,gBAAAmB,EAAC,OAAA,EAAI,WAAU,+BACb,UAAA;AAAA,MAAA,gBAAAA,EAAC,OAAA,EAAI,WAAU,uCACb,UAAA;AAAA,QAAA,gBAAAH,EAAC,MAAA,EAAG,WAAU,8BAA6B,UAAA,kBAAc;AAAA,QACzD,gBAAAA,EAAC,KAAA,EAAE,WAAU,oCAAmC,UAAA,mEAAA,CAEhD;AAAA,MAAA,GACF;AAAA,MACA,gBAAAA,EAACiF,GAAA,EAAe,QAAQhB,GAAgB,OAAOC,EAAA,CAAe;AAAA,IAAA,GAChE;AAAA,sBAGC,OAAA,EAAI,WAAU,6CACZ,UAAAJ,EAAK,IAAI,CAACoB,MACT,gBAAAlF;AAAA,MAAC;AAAA,MAAA;AAAA,QAEC,MAAK;AAAA,QACL,WAAW,oBAAoBqE,MAAca,EAAI,KAAK,4BAA4B,EAAE;AAAA,QACpF,SAAS,MAAMZ,EAAaY,EAAI,EAAE;AAAA,QAClC,iBAAeb,MAAca,EAAI;AAAA,QACjC,MAAK;AAAA,QAEJ,UAAAA,EAAI;AAAA,MAAA;AAAA,MAPAA,EAAI;AAAA,IAAA,CASZ,GACH;AAAA,IAGA,gBAAAlF,EAAC,OAAA,EAAI,WAAU,4BAA2B,MAAK,YAC5C,UAAAuE,GAAY,OAAO,gBAClB,gBAAAvE,EAAC2C,IAAA,EAA0B,UAAAP,GAAoB,cAAAQ,EAAA,CAA4B,IACzE2B,GAAY,WACd,gBAAAvE,EAACjB,GAAA,CAAA,CAAqB,IACpB+F,EAAgB,WAAW,IAC7B,gBAAA9E,EAAC,OAAA,EAAI,WAAU,gCACb,UAAA,gBAAAG,EAAC,KAAA,EAAE,UAAA;AAAA,MAAA;AAAA,MAAuBoE,GAAY,SAAS;AAAA,MAAgB;AAAA,IAAA,EAAA,CAAC,EAAA,CAClE,IAEA,gBAAAvE,EAACmF,GAAA,EAAgB,UAAUL,GAAiB,OAAAd,GAAc,UAAUpB,EAAA,CAAc,EAAA,CAEtF;AAAA,EAAA,GACF;AAEJ;"}

package/dist/{AuthenticationSettings-Cu5Z2mTC.cjs → AuthenticationSettings-DPr882lj.cjs}

@@ -1 +1 @@
-"use strict";const e=require("react/jsx-runtime"),a=require("react"),A=require("./LoadingSpinner-d6sSxgQN.cjs"),C=require("./ErrorMessage-CHbYbVi2.cjs"),_=require("./AutosaveStatus-B1A1zORa.cjs"),M=require("./useCedrosLogin-DtJorrE7.cjs"),I=require("./useOrgs-CNqfn-fk.cjs");function L(){const{config:r,_internal:g}=M.useCedrosLogin(),l=r.serverUrl,p=a.useRef(g?.getAccessToken??(()=>null));p.current=g?.getAccessToken??(()=>null);const[f,y]=a.useState([]),[x,v]=a.useState(0),[N,m]=a.useState(!1),[S,n]=a.useState(null),t=a.useCallback(()=>{const b=p.current();return{"Content-Type":"application/json",...b?{Authorization:`Bearer ${b}`}:{}}},[]),o=a.useCallback(async(b,c=50,d=0)=>{m(!0),n(null);try{const u=new URLSearchParams;b&&u.set("org_id",b),u.set("limit",String(c)),u.set("offset",String(d));const s=await fetch(`${l}/admin/sso-providers?${u}`,{headers:t()});if(!s.ok){const P=await s.json().catch(()=>({}));throw new Error(P.error||`Failed to fetch SSO providers: ${s.status}`)}const j=await s.json();return y(j.providers),v(j.total),j}catch(u){const s=u instanceof Error?u:new Error(String(u));throw n(s),s}finally{m(!1)}},[l,t]),i=a.useCallback(async b=>{m(!0),n(null);try{const c=await fetch(`${l}/admin/sso-providers`,{method:"POST",headers:t(),body:JSON.stringify(b)});if(!c.ok){const u=await c.json().catch(()=>({}));throw new Error(u.error||`Failed to create SSO provider: ${c.status}`)}const d=await c.json();return y(u=>[...u,d]),v(u=>u+1),d}catch(c){const d=c instanceof Error?c:new Error(String(c));throw n(d),d}finally{m(!1)}},[l,t]),h=a.useCallback(async(b,c)=>{m(!0),n(null);try{const d=await fetch(`${l}/admin/sso-providers/${b}`,{method:"PUT",headers:t(),body:JSON.stringify(c)});if(!d.ok){const s=await d.json().catch(()=>({}));throw new Error(s.error||`Failed to update SSO provider: ${d.status}`)}const u=await d.json();return y(s=>s.map(j=>j.id===b?u:j)),u}catch(d){const u=d instanceof Error?d:new Error(String(d));throw n(u),u}finally{m(!1)}},[l,t]),w=a.useCallback(async b=>{m(!0),n(null);try{const c=await fetch(`${l}/admin/sso-providers/${b}`,{method:"DELETE",headers:t()});if(!c.ok){const d=await c.json().catch(()=>({}));throw new Error(d.error||`Failed to delete SSO provider: ${c.status}`)}y(d=>d.filter(u=>u.id!==b)),v(d=>d-1)}catch(c){const d=c instanceof Error?c:new Error(String(c));throw n(d),d}finally{m(!1)}},[l,t]),k=a.useCallback(async(b,c)=>h(b,{enabled:c}),[h]);return{providers:f,total:x,isLoading:N,error:S,fetchProviders:o,createProvider:i,updateProvider:h,deleteProvider:w,toggleProvider:k}}function $({className:r}){const{providers:g,isLoading:l,error:p,fetchProviders:f,createProvider:y,updateProvider:x,deleteProvider:v,toggleProvider:N}=L(),{activeOrg:m}=I.useOrgs(),[S,n]=a.useState("list"),[t,o]=a.useState(null),[i,h]=a.useState(null);a.useEffect(()=>{f(m?.id)},[f,m?.id]);const w=()=>{o(null),h(null),n("add")},k=s=>{o(s),h(null),n("edit")},b=()=>{n("list"),o(null),h(null)},c=async s=>{if(confirm(`Delete SSO provider "${s.name}"? This cannot be undone.`))try{await v(s.id)}catch{}},d=async s=>{try{await N(s.id,!s.enabled)}catch{}},u=async s=>{h(null);try{S==="add"?await y(s):t&&await x(t.id,s),n("list"),o(null)}catch(j){h(j instanceof Error?j.message:"Failed to save provider")}};return l&&g.length===0?e.jsxs("div",{className:`cedros-system-settings cedros-system-settings-loading ${r??""}`,children:[e.jsx(A.LoadingSpinner,{}),e.jsx("span",{children:"Loading SSO providers..."})]}):S==="add"||S==="edit"?e.jsx("div",{className:`cedros-system-settings ${r??""}`,children:e.jsx(T,{provider:t,orgId:m?.id,error:i,isLoading:l,onSave:u,onCancel:b})}):e.jsxs("div",{className:`cedros-system-settings ${r??""}`,children:[e.jsxs("div",{className:"cedros-settings-page-header",children:[e.jsxs("div",{className:"cedros-settings-page-header-content",children:[e.jsx("h2",{className:"cedros-settings-page-title",children:"SSO Providers"}),e.jsx("p",{className:"cedros-settings-page-description",children:"Configure OIDC identity providers for enterprise single sign-on."})]}),e.jsx("button",{type:"button",className:"cedros-btn cedros-btn-primary",onClick:w,children:"Add Provider"})]}),p&&e.jsx(C.ErrorMessage,{error:p.message}),g.length===0?e.jsxs("div",{className:"cedros-system-settings-empty",children:[e.jsx("p",{children:"No SSO providers configured."}),e.jsx("p",{className:"cedros-text-muted",children:"Add an OIDC provider like Okta, Azure AD, or Auth0 to enable enterprise SSO."})]}):e.jsx("div",{className:"cedros-sso-provider-list",children:g.map(s=>e.jsx(R,{provider:s,onEdit:()=>k(s),onDelete:()=>c(s),onToggle:()=>d(s)},s.id))})]})}function R({provider:r,onEdit:g,onDelete:l,onToggle:p}){return e.jsxs("div",{className:`cedros-sso-provider-card ${r.enabled?"":"cedros-sso-provider-card--disabled"}`,children:[e.jsxs("div",{className:"cedros-sso-provider-card-header",children:[e.jsxs("div",{className:"cedros-sso-provider-card-info",children:[e.jsx("h3",{className:"cedros-sso-provider-card-name",children:r.name}),e.jsx("p",{className:"cedros-sso-provider-card-issuer",children:r.issuerUrl})]}),e.jsxs("button",{type:"button",role:"switch","aria-checked":r.enabled,className:`cedros-toggle ${r.enabled?"cedros-toggle-on":"cedros-toggle-off"}`,onClick:p,children:[e.jsx("span",{className:"cedros-toggle-track",children:e.jsx("span",{className:"cedros-toggle-thumb"})}),e.jsx("span",{className:"cedros-toggle-label",children:r.enabled?"Enabled":"Disabled"})]})]}),e.jsxs("div",{className:"cedros-sso-provider-card-details",children:[e.jsxs("div",{className:"cedros-sso-provider-card-detail",children:[e.jsx("span",{className:"cedros-sso-provider-card-detail-label",children:"Client ID"}),e.jsx("code",{className:"cedros-sso-provider-card-detail-value",children:r.clientId})]}),r.emailDomain&&e.jsxs("div",{className:"cedros-sso-provider-card-detail",children:[e.jsx("span",{className:"cedros-sso-provider-card-detail-label",children:"Email Domain"}),e.jsxs("span",{className:"cedros-sso-provider-card-detail-value",children:["@",r.emailDomain]})]}),e.jsxs("div",{className:"cedros-sso-provider-card-detail",children:[e.jsx("span",{className:"cedros-sso-provider-card-detail-label",children:"Registration"}),e.jsx("span",{className:"cedros-sso-provider-card-detail-value",children:r.allowRegistration?"Allowed":"Existing users only"})]})]}),e.jsxs("div",{className:"cedros-sso-provider-card-actions",children:[e.jsx("button",{type:"button",className:"cedros-btn cedros-btn-ghost",onClick:g,children:"Edit"}),e.jsx("button",{type:"button",className:"cedros-btn cedros-btn-ghost cedros-btn-danger",onClick:l,children:"Delete"})]})]})}function T({provider:r,orgId:g,error:l,isLoading:p,onSave:f,onCancel:y}){const x=!!r,[v,N]=a.useState(r?.name??""),[m,S]=a.useState(r?.issuerUrl??""),[n,t]=a.useState(r?.clientId??""),[o,i]=a.useState(""),[h,w]=a.useState(r?.emailDomain??""),[k,b]=a.useState(r?.allowRegistration??!0),[c,d]=a.useState(r?.enabled??!0),u=a.useCallback(s=>{if(s.preventDefault(),x){const j={name:v,issuerUrl:m,clientId:n,emailDomain:h||null,allowRegistration:k,enabled:c};o&&(j.clientSecret=o),f(j)}else{if(!g)return;f({orgId:g,name:v,issuerUrl:m,clientId:n,clientSecret:o,emailDomain:h||null,allowRegistration:k,enabled:c})}},[x,g,v,m,n,o,h,k,c,f]);return e.jsxs("form",{className:"cedros-sso-provider-form",onSubmit:u,children:[e.jsx("div",{className:"cedros-settings-page-header",children:e.jsxs("div",{className:"cedros-settings-page-header-content",children:[e.jsx("h2",{className:"cedros-settings-page-title",children:x?"Edit SSO Provider":"Add SSO Provider"}),e.jsx("p",{className:"cedros-settings-page-description",children:"Configure an OIDC identity provider for enterprise single sign-on."})]})}),l&&e.jsx(C.ErrorMessage,{error:l}),e.jsxs("div",{className:"cedros-form-section",children:[e.jsxs("div",{className:"cedros-form-group",children:[e.jsx("label",{className:"cedros-form-label",htmlFor:"sso-name",children:"Provider Name"}),e.jsx("input",{id:"sso-name",type:"text",className:"cedros-form-input",value:v,onChange:s=>N(s.target.value),placeholder:"e.g., Okta, Azure AD",required:!0})]}),e.jsxs("div",{className:"cedros-form-group",children:[e.jsx("label",{className:"cedros-form-label",htmlFor:"sso-issuer",children:"Issuer URL"}),e.jsx("input",{id:"sso-issuer",type:"url",className:"cedros-form-input",value:m,onChange:s=>S(s.target.value),placeholder:"https://your-org.okta.com",required:!0}),e.jsx("p",{className:"cedros-form-hint",children:"The OIDC issuer URL. Must support discovery at /.well-known/openid-configuration"})]}),e.jsxs("div",{className:"cedros-form-group",children:[e.jsx("label",{className:"cedros-form-label",htmlFor:"sso-client-id",children:"Client ID"}),e.jsx("input",{id:"sso-client-id",type:"text",className:"cedros-form-input",value:n,onChange:s=>t(s.target.value),placeholder:"OAuth client ID",required:!0})]}),e.jsxs("div",{className:"cedros-form-group",children:[e.jsxs("label",{className:"cedros-form-label",htmlFor:"sso-client-secret",children:["Client Secret"," ",x&&e.jsx("span",{className:"cedros-form-hint-inline",children:"(leave blank to keep current)"})]}),e.jsx("input",{id:"sso-client-secret",type:"password",className:"cedros-form-input",value:o,onChange:s=>i(s.target.value),placeholder:x?"••••••••":"OAuth client secret",required:!x})]}),e.jsxs("div",{className:"cedros-form-group",children:[e.jsx("label",{className:"cedros-form-label",htmlFor:"sso-email-domain",children:"Email Domain (optional)"}),e.jsx("input",{id:"sso-email-domain",type:"text",className:"cedros-form-input",value:h,onChange:s=>w(s.target.value),placeholder:"company.com"}),e.jsx("p",{className:"cedros-form-hint",children:"Restrict to users with emails from this domain"})]}),e.jsx("div",{className:"cedros-form-group",children:e.jsxs("label",{className:"cedros-form-checkbox",children:[e.jsx("input",{type:"checkbox",checked:k,onChange:s=>b(s.target.checked)}),e.jsx("span",{children:"Allow new user registration via SSO"})]})}),e.jsx("div",{className:"cedros-form-group",children:e.jsxs("label",{className:"cedros-form-checkbox",children:[e.jsx("input",{type:"checkbox",checked:c,onChange:s=>d(s.target.checked)}),e.jsx("span",{children:"Enable this provider"})]})})]}),e.jsxs("div",{className:"cedros-form-actions",children:[e.jsx("button",{type:"button",className:"cedros-btn cedros-btn-ghost",onClick:y,disabled:p,children:"Cancel"}),e.jsx("button",{type:"submit",className:"cedros-btn cedros-btn-primary",disabled:p,children:p?"Saving...":x?"Save Changes":"Add Provider"})]})]})}function F(){return e.jsxs("svg",{width:"18",height:"18",viewBox:"0 0 18 18",fill:"none","aria-hidden":"true",children:[e.jsx("path",{d:"M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844c-.209 1.125-.843 2.078-1.796 2.717v2.258h2.908c1.702-1.567 2.684-3.874 2.684-6.615z",fill:"#4285F4"}),e.jsx("path",{d:"M9.003 18c2.43 0 4.467-.806 5.956-2.18l-2.909-2.26c-.806.54-1.836.86-3.047.86-2.344 0-4.328-1.584-5.036-3.711H.96v2.332A8.997 8.997 0 0 0 9.003 18z",fill:"#34A853"}),e.jsx("path",{d:"M3.964 10.712A5.41 5.41 0 0 1 3.682 9c0-.593.102-1.17.282-1.71V4.958H.96A8.996 8.996 0 0 0 0 9c0 1.452.348 2.827.96 4.042l3.004-2.33z",fill:"#FBBC05"}),e.jsx("path",{d:"M9.003 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.464.891 11.428 0 9.002 0A8.997 8.997 0 0 0 .96 4.958l3.005 2.332c.708-2.127 2.692-3.71 5.036-3.71z",fill:"#EA4335"})]})}function z(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"currentColor","aria-hidden":"true",children:e.jsx("path",{d:"M18.71 19.5c-.83 1.24-1.71 2.45-3.05 2.47-1.34.03-1.77-.79-3.29-.79-1.53 0-2 .77-3.27.82-1.31.05-2.3-1.32-3.14-2.53C4.25 17 2.94 12.45 4.7 9.39c.87-1.52 2.43-2.48 4.12-2.51 1.28-.02 2.5.87 3.29.87.78 0 2.26-1.07 3.81-.91.65.03 2.47.26 3.64 1.98-.09.06-2.17 1.28-2.15 3.81.03 3.02 2.65 4.03 2.68 4.04-.03.07-.42 1.44-1.38 2.83M13 3.5c.73-.83 1.94-1.46 2.94-1.5.13 1.17-.34 2.35-1.04 3.19-.69.85-1.83 1.51-2.95 1.42-.15-1.15.41-2.35 1.05-3.11z"})})}function B(){return e.jsxs("svg",{width:"18",height:"18",viewBox:"0 0 128 128",fill:"currentColor","aria-hidden":"true",children:[e.jsx("path",{d:"M25.38 96.04a4.35 4.35 0 0 1 3.07-1.27h91.68c1.93 0 2.9 2.34 1.54 3.7l-17.71 17.72a4.35 4.35 0 0 1-3.07 1.27H9.21c-1.93 0-2.9-2.34-1.54-3.7l17.71-17.72z"}),e.jsx("path",{d:"M25.38 11.81a4.47 4.47 0 0 1 3.07-1.27h91.68c1.93 0 2.9 2.34 1.54 3.7L103.96 31.96a4.35 4.35 0 0 1-3.07 1.27H9.21c-1.93 0-2.9-2.34-1.54-3.7L25.38 11.81z"}),e.jsx("path",{d:"M102.62 53.76a4.35 4.35 0 0 0-3.07-1.27H7.87c-1.93 0-2.9 2.34-1.54 3.7l17.71 17.72a4.35 4.35 0 0 0 3.07 1.27h91.68c1.93 0 2.9-2.34 1.54-3.7L102.62 53.76z"})]})}function q(){return e.jsxs("svg",{width:"20",height:"20",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"1.5",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",children:[e.jsx("path",{d:"M12 10a2 2 0 0 0-2 2c0 1.02-.1 2.51-.26 4"}),e.jsx("path",{d:"M14 13.12c0 2.38 0 6.38-1 8.88"}),e.jsx("path",{d:"M17.29 21.02c.12-.6.43-2.3.5-3.02"}),e.jsx("path",{d:"M2 12a10 10 0 0 1 18-6"}),e.jsx("path",{d:"M2 16h.01"}),e.jsx("path",{d:"M21.8 16c.2-2 .131-5.354 0-6"}),e.jsx("path",{d:"M5 19.5C5.5 18 6 15 6 12a6 6 0 0 1 .34-2"}),e.jsx("path",{d:"M8.65 22c.21-.66.45-1.32.57-2"}),e.jsx("path",{d:"M9 6.8a6 6 0 0 1 9 5.2v2"})]})}const E={webauthn:{label:"Passkey",icon:e.jsx(q,{}),enabledKey:"auth_webauthn_enabled"},google:{label:"Google",icon:e.jsx(F,{}),enabledKey:"auth_google_enabled"},apple:{label:"Apple",icon:e.jsx(z,{}),enabledKey:"auth_apple_enabled"},solana:{label:"Solana",icon:e.jsx(B,{}),enabledKey:"auth_solana_enabled"}},U=["webauthn","google","apple","solana"],H={webauthn:"Continue with Passkey",google:"Continue with Google",apple:"Continue with Apple",solana:"Continue with Solana"};function O(r,g){for(const l of Object.values(r)){const p=l.find(f=>f.key===g);if(p)return p.value==="true"}return!0}function K(r){for(const g of Object.values(r)){const l=g.find(p=>p.key==="ui_social_button_order");if(l&&l.value)return l.value.split(",").map(p=>p.trim())}return U}function W(){return e.jsxs("svg",{width:"16",height:"16",viewBox:"0 0 16 16",fill:"currentColor","aria-hidden":"true",style:{opacity:.4},children:[e.jsx("circle",{cx:"5",cy:"3",r:"1.5"}),e.jsx("circle",{cx:"11",cy:"3",r:"1.5"}),e.jsx("circle",{cx:"5",cy:"8",r:"1.5"}),e.jsx("circle",{cx:"11",cy:"8",r:"1.5"}),e.jsx("circle",{cx:"5",cy:"13",r:"1.5"}),e.jsx("circle",{cx:"11",cy:"13",r:"1.5"})]})}function G({settings:r,handleChange:g}){const[l,p]=a.useState(()=>K(r)),f=a.useRef(null),[y,x]=a.useState(null),v=a.useCallback(t=>{p(t),g("ui_social_button_order",t.join(","))},[g]),N=a.useCallback(t=>{f.current=t},[]),m=a.useCallback((t,o)=>{t.preventDefault(),x(o)},[]),S=a.useCallback(t=>{const o=f.current;if(o===null||o===t){x(null);return}const i=[...l],[h]=i.splice(o,1);i.splice(t,0,h),v(i),f.current=null,x(null)},[l,v]),n=a.useCallback(()=>{f.current=null,x(null)},[]);return e.jsxs("div",{className:"cedros-system-settings",children:[e.jsx("div",{className:"cedros-settings-page-header",children:e.jsxs("div",{className:"cedros-settings-page-header-content",children:[e.jsx("h2",{className:"cedros-settings-page-title",children:"Button Order"}),e.jsx("p",{className:"cedros-settings-page-description",children:"Drag to reorder the social login buttons on your sign-in form."})]})}),e.jsxs("div",{style:{display:"flex",gap:"2rem",flexWrap:"wrap"},children:[e.jsx("div",{style:{flex:"1 1 260px",minWidth:260},children:e.jsx("ul",{style:{listStyle:"none",padding:0,margin:0,display:"flex",flexDirection:"column",gap:"0.5rem"},children:l.map((t,o)=>{const i=E[t];if(!i)return null;const h=O(r,i.enabledKey),w=y===o;return e.jsxs("li",{draggable:!0,onDragStart:()=>N(o),onDragOver:k=>m(k,o),onDrop:()=>S(o),onDragEnd:n,className:"cedros-btn-order-item",style:{display:"flex",alignItems:"center",gap:"0.75rem",padding:"0.625rem 0.75rem",borderRadius:"var(--cedros-radius, 0.5rem)",border:w?"2px solid var(--cedros-primary, #6366f1)":"1px solid var(--cedros-border, #e5e7eb)",background:"var(--cedros-background, #fff)",cursor:"grab",opacity:h?1:.5,transition:"border-color 0.15s"},children:[e.jsx(W,{}),e.jsx("span",{className:"cedros-button-icon",style:{display:"flex",alignItems:"center"},children:i.icon}),e.jsx("span",{style:{flex:1,fontWeight:500,fontSize:"0.875rem"},children:i.label}),e.jsx("span",{style:{fontSize:"0.7rem",padding:"0.125rem 0.5rem",borderRadius:"9999px",background:h?"var(--cedros-primary, #6366f1)":"var(--cedros-muted, #f3f4f6)",color:h?"var(--cedros-primary-foreground, #fff)":"var(--cedros-muted-foreground, #6b7280)"},children:h?"Enabled":"Disabled"})]},t)})})}),e.jsxs("div",{style:{flex:"1 1 280px",minWidth:280},children:[e.jsx("p",{style:{fontSize:"0.75rem",color:"var(--cedros-muted-foreground, #6b7280)",margin:"0 0 0.75rem"},children:"This is how your login form buttons will appear:"}),e.jsx("div",{style:{display:"flex",flexDirection:"column",gap:"0.5rem",padding:"1.25rem",borderRadius:"var(--cedros-radius, 0.5rem)",border:"1px solid var(--cedros-border, #e5e7eb)",background:"var(--cedros-background, #fff)"},children:l.map(t=>{const o=E[t];return!o||!O(r,o.enabledKey)?null:e.jsxs("button",{type:"button",className:"cedros-button cedros-button-social",style:{pointerEvents:"none",width:"100%"},tabIndex:-1,children:[e.jsx("span",{className:"cedros-button-icon",children:o.icon}),H[t]]},t)})})]})]})]})}const D=[{id:"email",label:"Email",categories:["auth.email"],keys:["auth_email_enabled","auth_email_require_verification","auth_email_block_disposable"]},{id:"google",label:"Google",categories:["auth.google"],keys:["auth_google_enabled","auth_google_client_id"]},{id:"apple",label:"Apple",categories:["auth.apple"],keys:["auth_apple_enabled","auth_apple_client_id","auth_apple_team_id"]},{id:"solana",label:"Solana",categories:["auth.solana"],keys:["auth_solana_enabled","auth_solana_challenge_expiry"]},{id:"passkeys",label:"Passkeys",categories:["auth.webauthn"],keys:["auth_webauthn_enabled","auth_webauthn_rp_id","auth_webauthn_rp_name","auth_webauthn_rp_origin"]},{id:"instantlink",label:"Instant Link",categories:["auth.instantlink"],keys:["auth_instantlink_enabled","auth_instantlink_expiry","auth_instantlink_rate_limit"]},{id:"sso",label:"SSO Providers",categories:[],isCustom:!0},{id:"buttonorder",label:"Button Order",categories:[],isCustom:!0},{id:"postlogin",label:"Post-Login",categories:["postlogin","postlogin.welcome","postlogin.username","postlogin.complete","postlogin.wallet"],keys:["postlogin_redirect_url","postlogin_welcome_enabled","postlogin_welcome_route","postlogin_username_enabled","postlogin_complete_enabled","postlogin_wallet_enroll_enabled","postlogin_show_recovery_enabled"]}];function V({className:r}){const{settings:g,edits:l,isLoading:p,autosaveStatus:f,autosaveError:y,error:x,fetchSettings:v,handleChange:N}=_.useSettingsAutosave(),[m,S]=a.useState("email");a.useEffect(()=>{v()},[v]);const n=D.find(i=>i.id===m),t=a.useMemo(()=>{if(!n)return[];const i=[];for(const h of n.categories){const w=g[h]??[];i.push(...w)}return i},[g,n]),o=a.useMemo(()=>n?.keys?t.filter(i=>n.keys.includes(i.key)).sort((i,h)=>n.keys.indexOf(i.key)-n.keys.indexOf(h.key)):t,[t,n]);return p&&Object.keys(g).length===0?e.jsxs("div",{className:`cedros-system-settings cedros-system-settings-loading ${r??""}`,children:[e.jsx(A.LoadingSpinner,{}),e.jsx("span",{children:"Loading settings..."})]}):x?e.jsx("div",{className:`cedros-system-settings ${r??""}`,children:e.jsx(C.ErrorMessage,{error:x.message})}):e.jsxs("div",{className:`cedros-system-settings ${r??""}`,children:[e.jsxs("div",{className:"cedros-settings-page-header",children:[e.jsxs("div",{className:"cedros-settings-page-header-content",children:[e.jsx("h2",{className:"cedros-settings-page-title",children:"Authentication"}),e.jsx("p",{className:"cedros-settings-page-description",children:"Configure authentication providers and methods for user sign-in."})]}),e.jsx(_.AutosaveStatus,{status:f,error:y})]}),e.jsx("div",{className:"cedros-admin-tabs cedros-admin-tabs--line",children:D.map(i=>e.jsx("button",{type:"button",className:`cedros-admin-tab ${m===i.id?"cedros-admin-tab-active":""}`,onClick:()=>S(i.id),"aria-selected":m===i.id,role:"tab",children:i.label},i.id))}),e.jsx("div",{className:"cedros-admin-tab-content",role:"tabpanel",children:n?.id==="buttonorder"?e.jsx(G,{settings:g,handleChange:N}):n?.isCustom?e.jsx($,{}):o.length===0?e.jsx("div",{className:"cedros-system-settings-empty",children:e.jsxs("p",{children:["No settings found for ",n?.label??"this provider","."]})}):e.jsx(_.SettingsSection,{settings:o,edits:l,onChange:N})})]})}exports.AuthenticationSettings=V;
+"use strict";const e=require("react/jsx-runtime"),a=require("react"),A=require("./LoadingSpinner-d6sSxgQN.cjs"),C=require("./ErrorMessage-CHbYbVi2.cjs"),_=require("./AutosaveStatus-ByD01ENa.cjs"),M=require("./useCedrosLogin-DtJorrE7.cjs"),I=require("./useOrgs-CNqfn-fk.cjs");function L(){const{config:r,_internal:g}=M.useCedrosLogin(),l=r.serverUrl,p=a.useRef(g?.getAccessToken??(()=>null));p.current=g?.getAccessToken??(()=>null);const[f,y]=a.useState([]),[x,v]=a.useState(0),[N,m]=a.useState(!1),[S,n]=a.useState(null),t=a.useCallback(()=>{const b=p.current();return{"Content-Type":"application/json",...b?{Authorization:`Bearer ${b}`}:{}}},[]),o=a.useCallback(async(b,c=50,d=0)=>{m(!0),n(null);try{const u=new URLSearchParams;b&&u.set("org_id",b),u.set("limit",String(c)),u.set("offset",String(d));const s=await fetch(`${l}/admin/sso-providers?${u}`,{headers:t()});if(!s.ok){const P=await s.json().catch(()=>({}));throw new Error(P.error||`Failed to fetch SSO providers: ${s.status}`)}const j=await s.json();return y(j.providers),v(j.total),j}catch(u){const s=u instanceof Error?u:new Error(String(u));throw n(s),s}finally{m(!1)}},[l,t]),i=a.useCallback(async b=>{m(!0),n(null);try{const c=await fetch(`${l}/admin/sso-providers`,{method:"POST",headers:t(),body:JSON.stringify(b)});if(!c.ok){const u=await c.json().catch(()=>({}));throw new Error(u.error||`Failed to create SSO provider: ${c.status}`)}const d=await c.json();return y(u=>[...u,d]),v(u=>u+1),d}catch(c){const d=c instanceof Error?c:new Error(String(c));throw n(d),d}finally{m(!1)}},[l,t]),h=a.useCallback(async(b,c)=>{m(!0),n(null);try{const d=await fetch(`${l}/admin/sso-providers/${b}`,{method:"PUT",headers:t(),body:JSON.stringify(c)});if(!d.ok){const s=await d.json().catch(()=>({}));throw new Error(s.error||`Failed to update SSO provider: ${d.status}`)}const u=await d.json();return y(s=>s.map(j=>j.id===b?u:j)),u}catch(d){const u=d instanceof Error?d:new Error(String(d));throw n(u),u}finally{m(!1)}},[l,t]),w=a.useCallback(async b=>{m(!0),n(null);try{const c=await fetch(`${l}/admin/sso-providers/${b}`,{method:"DELETE",headers:t()});if(!c.ok){const d=await c.json().catch(()=>({}));throw new Error(d.error||`Failed to delete SSO provider: ${c.status}`)}y(d=>d.filter(u=>u.id!==b)),v(d=>d-1)}catch(c){const d=c instanceof Error?c:new Error(String(c));throw n(d),d}finally{m(!1)}},[l,t]),k=a.useCallback(async(b,c)=>h(b,{enabled:c}),[h]);return{providers:f,total:x,isLoading:N,error:S,fetchProviders:o,createProvider:i,updateProvider:h,deleteProvider:w,toggleProvider:k}}function $({className:r}){const{providers:g,isLoading:l,error:p,fetchProviders:f,createProvider:y,updateProvider:x,deleteProvider:v,toggleProvider:N}=L(),{activeOrg:m}=I.useOrgs(),[S,n]=a.useState("list"),[t,o]=a.useState(null),[i,h]=a.useState(null);a.useEffect(()=>{f(m?.id)},[f,m?.id]);const w=()=>{o(null),h(null),n("add")},k=s=>{o(s),h(null),n("edit")},b=()=>{n("list"),o(null),h(null)},c=async s=>{if(confirm(`Delete SSO provider "${s.name}"? This cannot be undone.`))try{await v(s.id)}catch{}},d=async s=>{try{await N(s.id,!s.enabled)}catch{}},u=async s=>{h(null);try{S==="add"?await y(s):t&&await x(t.id,s),n("list"),o(null)}catch(j){h(j instanceof Error?j.message:"Failed to save provider")}};return l&&g.length===0?e.jsxs("div",{className:`cedros-system-settings cedros-system-settings-loading ${r??""}`,children:[e.jsx(A.LoadingSpinner,{}),e.jsx("span",{children:"Loading SSO providers..."})]}):S==="add"||S==="edit"?e.jsx("div",{className:`cedros-system-settings ${r??""}`,children:e.jsx(T,{provider:t,orgId:m?.id,error:i,isLoading:l,onSave:u,onCancel:b})}):e.jsxs("div",{className:`cedros-system-settings ${r??""}`,children:[e.jsxs("div",{className:"cedros-settings-page-header",children:[e.jsxs("div",{className:"cedros-settings-page-header-content",children:[e.jsx("h2",{className:"cedros-settings-page-title",children:"SSO Providers"}),e.jsx("p",{className:"cedros-settings-page-description",children:"Configure OIDC identity providers for enterprise single sign-on."})]}),e.jsx("button",{type:"button",className:"cedros-btn cedros-btn-primary",onClick:w,children:"Add Provider"})]}),p&&e.jsx(C.ErrorMessage,{error:p.message}),g.length===0?e.jsxs("div",{className:"cedros-system-settings-empty",children:[e.jsx("p",{children:"No SSO providers configured."}),e.jsx("p",{className:"cedros-text-muted",children:"Add an OIDC provider like Okta, Azure AD, or Auth0 to enable enterprise SSO."})]}):e.jsx("div",{className:"cedros-sso-provider-list",children:g.map(s=>e.jsx(R,{provider:s,onEdit:()=>k(s),onDelete:()=>c(s),onToggle:()=>d(s)},s.id))})]})}function R({provider:r,onEdit:g,onDelete:l,onToggle:p}){return e.jsxs("div",{className:`cedros-sso-provider-card ${r.enabled?"":"cedros-sso-provider-card--disabled"}`,children:[e.jsxs("div",{className:"cedros-sso-provider-card-header",children:[e.jsxs("div",{className:"cedros-sso-provider-card-info",children:[e.jsx("h3",{className:"cedros-sso-provider-card-name",children:r.name}),e.jsx("p",{className:"cedros-sso-provider-card-issuer",children:r.issuerUrl})]}),e.jsxs("button",{type:"button",role:"switch","aria-checked":r.enabled,className:`cedros-toggle ${r.enabled?"cedros-toggle-on":"cedros-toggle-off"}`,onClick:p,children:[e.jsx("span",{className:"cedros-toggle-track",children:e.jsx("span",{className:"cedros-toggle-thumb"})}),e.jsx("span",{className:"cedros-toggle-label",children:r.enabled?"Enabled":"Disabled"})]})]}),e.jsxs("div",{className:"cedros-sso-provider-card-details",children:[e.jsxs("div",{className:"cedros-sso-provider-card-detail",children:[e.jsx("span",{className:"cedros-sso-provider-card-detail-label",children:"Client ID"}),e.jsx("code",{className:"cedros-sso-provider-card-detail-value",children:r.clientId})]}),r.emailDomain&&e.jsxs("div",{className:"cedros-sso-provider-card-detail",children:[e.jsx("span",{className:"cedros-sso-provider-card-detail-label",children:"Email Domain"}),e.jsxs("span",{className:"cedros-sso-provider-card-detail-value",children:["@",r.emailDomain]})]}),e.jsxs("div",{className:"cedros-sso-provider-card-detail",children:[e.jsx("span",{className:"cedros-sso-provider-card-detail-label",children:"Registration"}),e.jsx("span",{className:"cedros-sso-provider-card-detail-value",children:r.allowRegistration?"Allowed":"Existing users only"})]})]}),e.jsxs("div",{className:"cedros-sso-provider-card-actions",children:[e.jsx("button",{type:"button",className:"cedros-btn cedros-btn-ghost",onClick:g,children:"Edit"}),e.jsx("button",{type:"button",className:"cedros-btn cedros-btn-ghost cedros-btn-danger",onClick:l,children:"Delete"})]})]})}function T({provider:r,orgId:g,error:l,isLoading:p,onSave:f,onCancel:y}){const x=!!r,[v,N]=a.useState(r?.name??""),[m,S]=a.useState(r?.issuerUrl??""),[n,t]=a.useState(r?.clientId??""),[o,i]=a.useState(""),[h,w]=a.useState(r?.emailDomain??""),[k,b]=a.useState(r?.allowRegistration??!0),[c,d]=a.useState(r?.enabled??!0),u=a.useCallback(s=>{if(s.preventDefault(),x){const j={name:v,issuerUrl:m,clientId:n,emailDomain:h||null,allowRegistration:k,enabled:c};o&&(j.clientSecret=o),f(j)}else{if(!g)return;f({orgId:g,name:v,issuerUrl:m,clientId:n,clientSecret:o,emailDomain:h||null,allowRegistration:k,enabled:c})}},[x,g,v,m,n,o,h,k,c,f]);return e.jsxs("form",{className:"cedros-sso-provider-form",onSubmit:u,children:[e.jsx("div",{className:"cedros-settings-page-header",children:e.jsxs("div",{className:"cedros-settings-page-header-content",children:[e.jsx("h2",{className:"cedros-settings-page-title",children:x?"Edit SSO Provider":"Add SSO Provider"}),e.jsx("p",{className:"cedros-settings-page-description",children:"Configure an OIDC identity provider for enterprise single sign-on."})]})}),l&&e.jsx(C.ErrorMessage,{error:l}),e.jsxs("div",{className:"cedros-form-section",children:[e.jsxs("div",{className:"cedros-form-group",children:[e.jsx("label",{className:"cedros-form-label",htmlFor:"sso-name",children:"Provider Name"}),e.jsx("input",{id:"sso-name",type:"text",className:"cedros-form-input",value:v,onChange:s=>N(s.target.value),placeholder:"e.g., Okta, Azure AD",required:!0})]}),e.jsxs("div",{className:"cedros-form-group",children:[e.jsx("label",{className:"cedros-form-label",htmlFor:"sso-issuer",children:"Issuer URL"}),e.jsx("input",{id:"sso-issuer",type:"url",className:"cedros-form-input",value:m,onChange:s=>S(s.target.value),placeholder:"https://your-org.okta.com",required:!0}),e.jsx("p",{className:"cedros-form-hint",children:"The OIDC issuer URL. Must support discovery at /.well-known/openid-configuration"})]}),e.jsxs("div",{className:"cedros-form-group",children:[e.jsx("label",{className:"cedros-form-label",htmlFor:"sso-client-id",children:"Client ID"}),e.jsx("input",{id:"sso-client-id",type:"text",className:"cedros-form-input",value:n,onChange:s=>t(s.target.value),placeholder:"OAuth client ID",required:!0})]}),e.jsxs("div",{className:"cedros-form-group",children:[e.jsxs("label",{className:"cedros-form-label",htmlFor:"sso-client-secret",children:["Client Secret"," ",x&&e.jsx("span",{className:"cedros-form-hint-inline",children:"(leave blank to keep current)"})]}),e.jsx("input",{id:"sso-client-secret",type:"password",className:"cedros-form-input",value:o,onChange:s=>i(s.target.value),placeholder:x?"••••••••":"OAuth client secret",required:!x})]}),e.jsxs("div",{className:"cedros-form-group",children:[e.jsx("label",{className:"cedros-form-label",htmlFor:"sso-email-domain",children:"Email Domain (optional)"}),e.jsx("input",{id:"sso-email-domain",type:"text",className:"cedros-form-input",value:h,onChange:s=>w(s.target.value),placeholder:"company.com"}),e.jsx("p",{className:"cedros-form-hint",children:"Restrict to users with emails from this domain"})]}),e.jsx("div",{className:"cedros-form-group",children:e.jsxs("label",{className:"cedros-form-checkbox",children:[e.jsx("input",{type:"checkbox",checked:k,onChange:s=>b(s.target.checked)}),e.jsx("span",{children:"Allow new user registration via SSO"})]})}),e.jsx("div",{className:"cedros-form-group",children:e.jsxs("label",{className:"cedros-form-checkbox",children:[e.jsx("input",{type:"checkbox",checked:c,onChange:s=>d(s.target.checked)}),e.jsx("span",{children:"Enable this provider"})]})})]}),e.jsxs("div",{className:"cedros-form-actions",children:[e.jsx("button",{type:"button",className:"cedros-btn cedros-btn-ghost",onClick:y,disabled:p,children:"Cancel"}),e.jsx("button",{type:"submit",className:"cedros-btn cedros-btn-primary",disabled:p,children:p?"Saving...":x?"Save Changes":"Add Provider"})]})]})}function F(){return e.jsxs("svg",{width:"18",height:"18",viewBox:"0 0 18 18",fill:"none","aria-hidden":"true",children:[e.jsx("path",{d:"M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844c-.209 1.125-.843 2.078-1.796 2.717v2.258h2.908c1.702-1.567 2.684-3.874 2.684-6.615z",fill:"#4285F4"}),e.jsx("path",{d:"M9.003 18c2.43 0 4.467-.806 5.956-2.18l-2.909-2.26c-.806.54-1.836.86-3.047.86-2.344 0-4.328-1.584-5.036-3.711H.96v2.332A8.997 8.997 0 0 0 9.003 18z",fill:"#34A853"}),e.jsx("path",{d:"M3.964 10.712A5.41 5.41 0 0 1 3.682 9c0-.593.102-1.17.282-1.71V4.958H.96A8.996 8.996 0 0 0 0 9c0 1.452.348 2.827.96 4.042l3.004-2.33z",fill:"#FBBC05"}),e.jsx("path",{d:"M9.003 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.464.891 11.428 0 9.002 0A8.997 8.997 0 0 0 .96 4.958l3.005 2.332c.708-2.127 2.692-3.71 5.036-3.71z",fill:"#EA4335"})]})}function z(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"currentColor","aria-hidden":"true",children:e.jsx("path",{d:"M18.71 19.5c-.83 1.24-1.71 2.45-3.05 2.47-1.34.03-1.77-.79-3.29-.79-1.53 0-2 .77-3.27.82-1.31.05-2.3-1.32-3.14-2.53C4.25 17 2.94 12.45 4.7 9.39c.87-1.52 2.43-2.48 4.12-2.51 1.28-.02 2.5.87 3.29.87.78 0 2.26-1.07 3.81-.91.65.03 2.47.26 3.64 1.98-.09.06-2.17 1.28-2.15 3.81.03 3.02 2.65 4.03 2.68 4.04-.03.07-.42 1.44-1.38 2.83M13 3.5c.73-.83 1.94-1.46 2.94-1.5.13 1.17-.34 2.35-1.04 3.19-.69.85-1.83 1.51-2.95 1.42-.15-1.15.41-2.35 1.05-3.11z"})})}function B(){return e.jsxs("svg",{width:"18",height:"18",viewBox:"0 0 128 128",fill:"currentColor","aria-hidden":"true",children:[e.jsx("path",{d:"M25.38 96.04a4.35 4.35 0 0 1 3.07-1.27h91.68c1.93 0 2.9 2.34 1.54 3.7l-17.71 17.72a4.35 4.35 0 0 1-3.07 1.27H9.21c-1.93 0-2.9-2.34-1.54-3.7l17.71-17.72z"}),e.jsx("path",{d:"M25.38 11.81a4.47 4.47 0 0 1 3.07-1.27h91.68c1.93 0 2.9 2.34 1.54 3.7L103.96 31.96a4.35 4.35 0 0 1-3.07 1.27H9.21c-1.93 0-2.9-2.34-1.54-3.7L25.38 11.81z"}),e.jsx("path",{d:"M102.62 53.76a4.35 4.35 0 0 0-3.07-1.27H7.87c-1.93 0-2.9 2.34-1.54 3.7l17.71 17.72a4.35 4.35 0 0 0 3.07 1.27h91.68c1.93 0 2.9-2.34 1.54-3.7L102.62 53.76z"})]})}function q(){return e.jsxs("svg",{width:"20",height:"20",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"1.5",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",children:[e.jsx("path",{d:"M12 10a2 2 0 0 0-2 2c0 1.02-.1 2.51-.26 4"}),e.jsx("path",{d:"M14 13.12c0 2.38 0 6.38-1 8.88"}),e.jsx("path",{d:"M17.29 21.02c.12-.6.43-2.3.5-3.02"}),e.jsx("path",{d:"M2 12a10 10 0 0 1 18-6"}),e.jsx("path",{d:"M2 16h.01"}),e.jsx("path",{d:"M21.8 16c.2-2 .131-5.354 0-6"}),e.jsx("path",{d:"M5 19.5C5.5 18 6 15 6 12a6 6 0 0 1 .34-2"}),e.jsx("path",{d:"M8.65 22c.21-.66.45-1.32.57-2"}),e.jsx("path",{d:"M9 6.8a6 6 0 0 1 9 5.2v2"})]})}const E={webauthn:{label:"Passkey",icon:e.jsx(q,{}),enabledKey:"auth_webauthn_enabled"},google:{label:"Google",icon:e.jsx(F,{}),enabledKey:"auth_google_enabled"},apple:{label:"Apple",icon:e.jsx(z,{}),enabledKey:"auth_apple_enabled"},solana:{label:"Solana",icon:e.jsx(B,{}),enabledKey:"auth_solana_enabled"}},U=["webauthn","google","apple","solana"],H={webauthn:"Continue with Passkey",google:"Continue with Google",apple:"Continue with Apple",solana:"Continue with Solana"};function O(r,g){for(const l of Object.values(r)){const p=l.find(f=>f.key===g);if(p)return p.value==="true"}return!0}function K(r){for(const g of Object.values(r)){const l=g.find(p=>p.key==="ui_social_button_order");if(l&&l.value)return l.value.split(",").map(p=>p.trim())}return U}function W(){return e.jsxs("svg",{width:"16",height:"16",viewBox:"0 0 16 16",fill:"currentColor","aria-hidden":"true",style:{opacity:.4},children:[e.jsx("circle",{cx:"5",cy:"3",r:"1.5"}),e.jsx("circle",{cx:"11",cy:"3",r:"1.5"}),e.jsx("circle",{cx:"5",cy:"8",r:"1.5"}),e.jsx("circle",{cx:"11",cy:"8",r:"1.5"}),e.jsx("circle",{cx:"5",cy:"13",r:"1.5"}),e.jsx("circle",{cx:"11",cy:"13",r:"1.5"})]})}function G({settings:r,handleChange:g}){const[l,p]=a.useState(()=>K(r)),f=a.useRef(null),[y,x]=a.useState(null),v=a.useCallback(t=>{p(t),g("ui_social_button_order",t.join(","))},[g]),N=a.useCallback(t=>{f.current=t},[]),m=a.useCallback((t,o)=>{t.preventDefault(),x(o)},[]),S=a.useCallback(t=>{const o=f.current;if(o===null||o===t){x(null);return}const i=[...l],[h]=i.splice(o,1);i.splice(t,0,h),v(i),f.current=null,x(null)},[l,v]),n=a.useCallback(()=>{f.current=null,x(null)},[]);return e.jsxs("div",{className:"cedros-system-settings",children:[e.jsx("div",{className:"cedros-settings-page-header",children:e.jsxs("div",{className:"cedros-settings-page-header-content",children:[e.jsx("h2",{className:"cedros-settings-page-title",children:"Button Order"}),e.jsx("p",{className:"cedros-settings-page-description",children:"Drag to reorder the social login buttons on your sign-in form."})]})}),e.jsxs("div",{style:{display:"flex",gap:"2rem",flexWrap:"wrap"},children:[e.jsx("div",{style:{flex:"1 1 260px",minWidth:260},children:e.jsx("ul",{style:{listStyle:"none",padding:0,margin:0,display:"flex",flexDirection:"column",gap:"0.5rem"},children:l.map((t,o)=>{const i=E[t];if(!i)return null;const h=O(r,i.enabledKey),w=y===o;return e.jsxs("li",{draggable:!0,onDragStart:()=>N(o),onDragOver:k=>m(k,o),onDrop:()=>S(o),onDragEnd:n,className:"cedros-btn-order-item",style:{display:"flex",alignItems:"center",gap:"0.75rem",padding:"0.625rem 0.75rem",borderRadius:"var(--cedros-radius, 0.5rem)",border:w?"2px solid var(--cedros-primary, #6366f1)":"1px solid var(--cedros-border, #e5e7eb)",background:"var(--cedros-background, #fff)",cursor:"grab",opacity:h?1:.5,transition:"border-color 0.15s"},children:[e.jsx(W,{}),e.jsx("span",{className:"cedros-button-icon",style:{display:"flex",alignItems:"center"},children:i.icon}),e.jsx("span",{style:{flex:1,fontWeight:500,fontSize:"0.875rem"},children:i.label}),e.jsx("span",{style:{fontSize:"0.7rem",padding:"0.125rem 0.5rem",borderRadius:"9999px",background:h?"var(--cedros-primary, #6366f1)":"var(--cedros-muted, #f3f4f6)",color:h?"var(--cedros-primary-foreground, #fff)":"var(--cedros-muted-foreground, #6b7280)"},children:h?"Enabled":"Disabled"})]},t)})})}),e.jsxs("div",{style:{flex:"1 1 280px",minWidth:280},children:[e.jsx("p",{style:{fontSize:"0.75rem",color:"var(--cedros-muted-foreground, #6b7280)",margin:"0 0 0.75rem"},children:"This is how your login form buttons will appear:"}),e.jsx("div",{style:{display:"flex",flexDirection:"column",gap:"0.5rem",padding:"1.25rem",borderRadius:"var(--cedros-radius, 0.5rem)",border:"1px solid var(--cedros-border, #e5e7eb)",background:"var(--cedros-background, #fff)"},children:l.map(t=>{const o=E[t];return!o||!O(r,o.enabledKey)?null:e.jsxs("button",{type:"button",className:"cedros-button cedros-button-social",style:{pointerEvents:"none",width:"100%"},tabIndex:-1,children:[e.jsx("span",{className:"cedros-button-icon",children:o.icon}),H[t]]},t)})})]})]})]})}const D=[{id:"email",label:"Email",categories:["auth.email"],keys:["auth_email_enabled","auth_email_require_verification","auth_email_block_disposable"]},{id:"google",label:"Google",categories:["auth.google"],keys:["auth_google_enabled","auth_google_client_id"]},{id:"apple",label:"Apple",categories:["auth.apple"],keys:["auth_apple_enabled","auth_apple_client_id","auth_apple_team_id"]},{id:"solana",label:"Solana",categories:["auth.solana"],keys:["auth_solana_enabled","auth_solana_challenge_expiry"]},{id:"passkeys",label:"Passkeys",categories:["auth.webauthn"],keys:["auth_webauthn_enabled","auth_webauthn_rp_id","auth_webauthn_rp_name","auth_webauthn_rp_origin"]},{id:"instantlink",label:"Instant Link",categories:["auth.instantlink"],keys:["auth_instantlink_enabled","auth_instantlink_expiry","auth_instantlink_rate_limit"]},{id:"sso",label:"SSO Providers",categories:[],isCustom:!0},{id:"buttonorder",label:"Button Order",categories:[],isCustom:!0},{id:"postlogin",label:"Post-Login",categories:["postlogin","postlogin.welcome","postlogin.username","postlogin.complete","postlogin.wallet"],keys:["postlogin_redirect_url","postlogin_welcome_enabled","postlogin_welcome_route","postlogin_username_enabled","postlogin_complete_enabled","postlogin_wallet_enroll_enabled","postlogin_show_recovery_enabled"]}];function V({className:r}){const{settings:g,edits:l,isLoading:p,autosaveStatus:f,autosaveError:y,error:x,fetchSettings:v,handleChange:N}=_.useSettingsAutosave(),[m,S]=a.useState("email");a.useEffect(()=>{v()},[v]);const n=D.find(i=>i.id===m),t=a.useMemo(()=>{if(!n)return[];const i=[];for(const h of n.categories){const w=g[h]??[];i.push(...w)}return i},[g,n]),o=a.useMemo(()=>n?.keys?t.filter(i=>n.keys.includes(i.key)).sort((i,h)=>n.keys.indexOf(i.key)-n.keys.indexOf(h.key)):t,[t,n]);return p&&Object.keys(g).length===0?e.jsxs("div",{className:`cedros-system-settings cedros-system-settings-loading ${r??""}`,children:[e.jsx(A.LoadingSpinner,{}),e.jsx("span",{children:"Loading settings..."})]}):x?e.jsx("div",{className:`cedros-system-settings ${r??""}`,children:e.jsx(C.ErrorMessage,{error:x.message})}):e.jsxs("div",{className:`cedros-system-settings ${r??""}`,children:[e.jsxs("div",{className:"cedros-settings-page-header",children:[e.jsxs("div",{className:"cedros-settings-page-header-content",children:[e.jsx("h2",{className:"cedros-settings-page-title",children:"Authentication"}),e.jsx("p",{className:"cedros-settings-page-description",children:"Configure authentication providers and methods for user sign-in."})]}),e.jsx(_.AutosaveStatus,{status:f,error:y})]}),e.jsx("div",{className:"cedros-admin-tabs cedros-admin-tabs--line",children:D.map(i=>e.jsx("button",{type:"button",className:`cedros-admin-tab ${m===i.id?"cedros-admin-tab-active":""}`,onClick:()=>S(i.id),"aria-selected":m===i.id,role:"tab",children:i.label},i.id))}),e.jsx("div",{className:"cedros-admin-tab-content",role:"tabpanel",children:n?.id==="buttonorder"?e.jsx(G,{settings:g,handleChange:N}):n?.isCustom?e.jsx($,{}):o.length===0?e.jsx("div",{className:"cedros-system-settings-empty",children:e.jsxs("p",{children:["No settings found for ",n?.label??"this provider","."]})}):e.jsx(_.SettingsSection,{settings:o,edits:l,onChange:N})})]})}exports.AuthenticationSettings=V;