@gusto/embedded-react-sdk 0.56.7 → 0.57.0

package/dist/contexts/ObservabilityProvider/sanitization.js

@@ -1,4 +1,4 @@
-const o = [
+const d = [
   { pattern: /\b\d{3}-\d{2}-\d{4}\b/g, replacement: "[SSN-REDACTED]" },
   { pattern: /\b\d{9}\b/g, replacement: "[SSN-REDACTED]" },
   {
@@ -9,7 +9,7 @@ const o = [
   { pattern: /\(\d{3}\)\s*\d{3}[-.\s]?\d{4}/g, replacement: "[PHONE-REDACTED]" },
   { pattern: /\b\d{4}[-\s]?\d{4}[-\s]?\d{4}[-\s]?\d{4}\b/g, replacement: "[CC-REDACTED]" },
   { pattern: /\b[A-Za-z0-9_-]{32,}\b/g, replacement: "[TOKEN-REDACTED]" }
-], E = [
+], _ = [
   "password",
   "token",
   "apiKey",
@@ -26,70 +26,121 @@ const o = [
   "routingNumber",
   "routing_number",
   "accountNumber",
-  "account_number"
-];
-function d(e) {
-  let t = e;
-  for (const { pattern: n, replacement: r } of o)
-    t = t.replace(n, r);
-  return t;
+  "account_number",
+  "dateOfBirth",
+  "date_of_birth",
+  "birthDate",
+  "birth_date",
+  "birthday",
+  "firstName",
+  "first_name",
+  "lastName",
+  "last_name",
+  "middleName",
+  "middle_name",
+  "fullName",
+  "full_name",
+  "employeeName",
+  "employee_name",
+  "signatureText",
+  "signature_text",
+  "retirementLoanIdentifier",
+  "retirement_loan_identifier",
+  "phone",
+  "zipCode",
+  "zip_code",
+  "postalCode",
+  "postal_code",
+  "preparerCity",
+  "preparer_city",
+  "preparerZip",
+  "preparer_zip",
+  "preparer2City",
+  "preparer2_city",
+  "preparer2Zip",
+  "preparer2_zip",
+  "preparer3City",
+  "preparer3_city",
+  "preparer3Zip",
+  "preparer3_zip",
+  "preparer4City",
+  "preparer4_city",
+  "preparer4Zip",
+  "preparer4_zip",
+  "address",
+  "street1",
+  "street_1",
+  "street2",
+  "street_2",
+  "caseNumber",
+  "case_number",
+  "orderNumber",
+  "order_number",
+  "remittanceNumber",
+  "remittance_number",
+  "documentNumber",
+  "document_number"
+], E = /* @__PURE__ */ new Set(["ein", "dob", "zip", "city"]);
+function s(e) {
+  let r = e;
+  for (const { pattern: t, replacement: i } of d)
+    r = r.replace(t, i);
+  return r;
 }
-function s(e, t = []) {
+function p(e, r = []) {
   if (e == null)
     return e;
   if (typeof e == "string")
-    return d(e);
+    return s(e);
   if (typeof e == "number" || typeof e == "boolean")
     return e;
   if (Array.isArray(e))
-    return e.map((n) => s(n, t));
+    return e.map((t) => p(t, r));
   if (typeof e == "object") {
-    const n = {}, r = [...E, ...t];
-    for (const [a, c] of Object.entries(e)) {
-      if (r.some((u) => a.toLowerCase().includes(u.toLowerCase()))) {
-        n[a] = "[REDACTED]";
+    const t = {}, i = [..._, ...r];
+    for (const [a, n] of Object.entries(e)) {
+      const c = a.toLowerCase();
+      if (E.has(c) || i.some((o) => c.includes(o.toLowerCase()))) {
+        t[a] = "[REDACTED]";
         continue;
       }
-      n[a] = s(c, t);
+      t[a] = p(n, r);
     }
-    return n;
+    return t;
   }
   return e;
 }
-function p(e, t = {}) {
-  const {
-    enabled: n = !0,
-    includeRawError: r = !1,
-    customErrorSanitizer: a,
-    additionalSensitiveFields: c = []
-  } = t;
-  if (a)
-    return a(e);
-  if (!n)
-    return r ? e : { ...e, raw: void 0 };
-  const u = e.fieldErrors.map((i) => ({
-    ...i,
-    message: d(i.message),
-    metadata: i.metadata ? s(i.metadata, c) : void 0
-  }));
-  return {
+function u(e, { enabled: r = !0, includeRawError: t = !1, additionalSensitiveFields: i = [] }) {
+  const a = t ? e.raw : void 0;
+  return r ? {
     ...e,
-    message: d(e.message),
-    fieldErrors: u,
-    raw: r ? e.raw : void 0
-  };
+    message: s(e.message),
+    fieldErrors: e.fieldErrors.map((n) => ({
+      ...n,
+      message: s(n.message),
+      metadata: n.metadata ? p(n.metadata, i) : void 0
+    })),
+    raw: a
+  } : { ...e, raw: a };
 }
-function l(e, t = {}) {
-  const { enabled: n = !0, customMetricSanitizer: r, additionalSensitiveFields: a = [] } = t;
-  return r ? r(e) : n ? {
+function m(e, { enabled: r = !0, additionalSensitiveFields: t = [] }) {
+  return r ? {
     ...e,
-    tags: e.tags ? s(e.tags, a) : void 0
+    tags: e.tags ? p(e.tags, t) : void 0
   } : e;
 }
+function l(e, r = {}) {
+  const t = u(e, r);
+  return r.customErrorSanitizer ? u(r.customErrorSanitizer(t), r) : t;
+}
+function b(e, r = {}) {
+  const t = m(e, r);
+  return r.customMetricSanitizer ? m(r.customMetricSanitizer(t), r) : t;
+}
 export {
-  p as sanitizeError,
-  l as sanitizeMetric,
-  s as sanitizeObject,
-  d as sanitizeString
+  l as sanitizeError,
+  b as sanitizeMetric,
+  p as sanitizeObject,
+  s as sanitizeString
 };
 //# sourceMappingURL=sanitization.js.map

package/dist/contexts/ObservabilityProvider/sanitization.js.map

@@ -1 +1 @@
-{"version":3,"file":"sanitization.js","sources":["../../../src/contexts/ObservabilityProvider/sanitization.ts"],"sourcesContent":["import type {\n  ObservabilityError,\n  ObservabilityMetric,\n  SanitizationConfig,\n} from '@/types/observability'\n\nconst PII_PATTERNS = [\n  { pattern: /\\b\\d{3}-\\d{2}-\\d{4}\\b/g, replacement: '[SSN-REDACTED]' },\n  { pattern: /\\b\\d{9}\\b/g, replacement: '[SSN-REDACTED]' },\n  {\n    pattern: /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Z|a-z]{2,}\\b/g,\n    replacement: '[EMAIL-REDACTED]',\n  },\n  { pattern: /\\b\\d{3}[-.\\s]?\\d{3}[-.\\s]?\\d{4}\\b/g, replacement: '[PHONE-REDACTED]' },\n  { pattern: /\\(\\d{3}\\)\\s*\\d{3}[-.\\s]?\\d{4}/g, replacement: '[PHONE-REDACTED]' },\n  { pattern: /\\b\\d{4}[-\\s]?\\d{4}[-\\s]?\\d{4}[-\\s]?\\d{4}\\b/g, replacement: '[CC-REDACTED]' },\n  { pattern: /\\b[A-Za-z0-9_-]{32,}\\b/g, replacement: '[TOKEN-REDACTED]' },\n]\n\nconst SENSITIVE_FIELD_NAMES = [\n  'password',\n  'token',\n  'apiKey',\n  'api_key',\n  'secret',\n  'ssn',\n  'social_security_number',\n  'creditCard',\n  'credit_card',\n  'cvv',\n  'pin',\n  'bankAccount',\n  'bank_account',\n  'routingNumber',\n  'routing_number',\n  'accountNumber',\n  'account_number',\n]\n\n/**\n * Replaces PII patterns (SSN, email, phone, credit card, long tokens) in a string with redacted placeholders.\n *\n * @param value - The string to scan and redact.\n * @returns The input with each matched pattern replaced by a `[TYPE-REDACTED]` placeholder.\n * @internal\n */\nexport function sanitizeString(value: string): string {\n  let sanitized = value\n\n  for (const { pattern, replacement } of PII_PATTERNS) {\n    sanitized = sanitized.replace(pattern, replacement)\n  }\n\n  return sanitized\n}\n\n/**\n * Recursively walks a value, redacting sensitive object keys and PII patterns in nested strings.\n *\n * @remarks\n * Keys whose names match (case-insensitively contain) any built-in sensitive field name or any\n * entry in `additionalSensitiveFields` have their values replaced with `[REDACTED]`. String\n * values are passed through {@link sanitizeString} so PII patterns inside them are also redacted.\n * Numbers, booleans, `null`, and `undefined` pass through unchanged.\n *\n * @param obj - The value to sanitize. May be any JSON-shaped structure.\n * @param additionalSensitiveFields - Extra field names to treat as sensitive (case-insensitive substring match).\n * @returns A new value of the same shape with sensitive fields and PII patterns redacted.\n * @internal\n */\nexport function sanitizeObject(obj: unknown, additionalSensitiveFields: string[] = []): unknown {\n  if (obj === null || obj === undefined) {\n    return obj\n  }\n\n  if (typeof obj === 'string') {\n    return sanitizeString(obj)\n  }\n\n  if (typeof obj === 'number' || typeof obj === 'boolean') {\n    return obj\n  }\n\n  if (Array.isArray(obj)) {\n    return obj.map(item => sanitizeObject(item, additionalSensitiveFields))\n  }\n\n  if (typeof obj === 'object') {\n    const sanitized: Record<string, unknown> = {}\n\n    const allSensitiveFields = [...SENSITIVE_FIELD_NAMES, ...additionalSensitiveFields]\n\n    for (const [key, value] of Object.entries(obj)) {\n      if (allSensitiveFields.some(field => key.toLowerCase().includes(field.toLowerCase()))) {\n        sanitized[key] = '[REDACTED]'\n        continue\n      }\n\n      sanitized[key] = sanitizeObject(value, additionalSensitiveFields)\n    }\n\n    return sanitized\n  }\n\n  return obj\n}\n\n/**\n * Returns a copy of an observability error with PII redacted from messages and field-error metadata.\n *\n * @remarks\n * If `config.customErrorSanitizer` is provided, it is invoked and its result returned directly.\n * When sanitization is disabled, the error passes through unchanged except that `raw` is stripped\n * unless `includeRawError` is true. When enabled, `message` and each `fieldErrors[].message` run\n * through {@link sanitizeString}, and each `fieldErrors[].metadata` runs through {@link sanitizeObject}\n * with `additionalSensitiveFields` applied.\n *\n * @param error - The error reported by SDK error boundaries or form submissions.\n * @param config - Optional sanitization configuration; defaults to enabled with `raw` stripped.\n * @returns The sanitized error suitable for forwarding to a partner observability hook.\n * @internal\n */\nexport function sanitizeError(\n  error: ObservabilityError,\n  config: SanitizationConfig = {},\n): ObservabilityError {\n  const {\n    enabled = true,\n    includeRawError = false,\n    customErrorSanitizer,\n    additionalSensitiveFields = [],\n  } = config\n\n  if (customErrorSanitizer) {\n    return customErrorSanitizer(error)\n  }\n\n  if (!enabled) {\n    return includeRawError ? error : { ...error, raw: undefined }\n  }\n\n  const sanitizedFieldErrors = error.fieldErrors.map(fe => ({\n    ...fe,\n    message: sanitizeString(fe.message),\n    metadata: fe.metadata\n      ? (sanitizeObject(fe.metadata, additionalSensitiveFields) as Record<string, unknown>)\n      : undefined,\n  }))\n\n  return {\n    ...error,\n    message: sanitizeString(error.message),\n    fieldErrors: sanitizedFieldErrors,\n    raw: includeRawError ? error.raw : undefined,\n  }\n}\n\n/**\n * Returns a copy of an observability metric with sensitive values redacted from its tags.\n *\n * @remarks\n * If `config.customMetricSanitizer` is provided, it is invoked and its result returned directly.\n * When sanitization is disabled, the metric passes through unchanged. Otherwise the `tags` record\n * is run through {@link sanitizeObject} with `additionalSensitiveFields` applied.\n *\n * @param metric - The metric reported by SDK component instrumentation.\n * @param config - Optional sanitization configuration; defaults to enabled.\n * @returns The sanitized metric suitable for forwarding to a partner observability hook.\n * @internal\n */\nexport function sanitizeMetric(\n  metric: ObservabilityMetric,\n  config: SanitizationConfig = {},\n): ObservabilityMetric {\n  const { enabled = true, customMetricSanitizer, additionalSensitiveFields = [] } = config\n\n  if (customMetricSanitizer) {\n    return customMetricSanitizer(metric)\n  }\n\n  if (!enabled) {\n    return metric\n  }\n\n  return {\n    ...metric,\n    tags: metric.tags\n      ? (sanitizeObject(metric.tags, additionalSensitiveFields) as Record<string, string>)\n      : undefined,\n  }\n}\n"],"names":["PII_PATTERNS","SENSITIVE_FIELD_NAMES","sanitizeString","value","sanitized","pattern","replacement","sanitizeObject","obj","additionalSensitiveFields","item","allSensitiveFields","key","field","sanitizeError","error","config","enabled","includeRawError","customErrorSanitizer","sanitizedFieldErrors","fe","sanitizeMetric","metric","customMetricSanitizer"],"mappings":"AAMA,MAAMA,IAAe;AAAA,EACnB,EAAE,SAAS,0BAA0B,aAAa,iBAAA;AAAA,EAClD,EAAE,SAAS,cAAc,aAAa,iBAAA;AAAA,EACtC;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,EAAA;AAAA,EAEf,EAAE,SAAS,sCAAsC,aAAa,mBAAA;AAAA,EAC9D,EAAE,SAAS,kCAAkC,aAAa,mBAAA;AAAA,EAC1D,EAAE,SAAS,+CAA+C,aAAa,gBAAA;AAAA,EACvE,EAAE,SAAS,2BAA2B,aAAa,mBAAA;AACrD,GAEMC,IAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AASO,SAASC,EAAeC,GAAuB;AACpD,MAAIC,IAAYD;AAEhB,aAAW,EAAE,SAAAE,GAAS,aAAAC,EAAA,KAAiBN;AACrC,IAAAI,IAAYA,EAAU,QAAQC,GAASC,CAAW;AAGpD,SAAOF;AACT;AAgBO,SAASG,EAAeC,GAAcC,IAAsC,IAAa;AAC9F,MAAID,KAAQ;AACV,WAAOA;AAGT,MAAI,OAAOA,KAAQ;AACjB,WAAON,EAAeM,CAAG;AAG3B,MAAI,OAAOA,KAAQ,YAAY,OAAOA,KAAQ;AAC5C,WAAOA;AAGT,MAAI,MAAM,QAAQA,CAAG;AACnB,WAAOA,EAAI,IAAI,CAAAE,MAAQH,EAAeG,GAAMD,CAAyB,CAAC;AAGxE,MAAI,OAAOD,KAAQ,UAAU;AAC3B,UAAMJ,IAAqC,CAAA,GAErCO,IAAqB,CAAC,GAAGV,GAAuB,GAAGQ,CAAyB;AAElF,eAAW,CAACG,GAAKT,CAAK,KAAK,OAAO,QAAQK,CAAG,GAAG;AAC9C,UAAIG,EAAmB,KAAK,CAAAE,MAASD,EAAI,YAAA,EAAc,SAASC,EAAM,YAAA,CAAa,CAAC,GAAG;AACrF,QAAAT,EAAUQ,CAAG,IAAI;AACjB;AAAA,MACF;AAEA,MAAAR,EAAUQ,CAAG,IAAIL,EAAeJ,GAAOM,CAAyB;AAAA,IAClE;AAEA,WAAOL;AAAA,EACT;AAEA,SAAOI;AACT;AAiBO,SAASM,EACdC,GACAC,IAA6B,IACT;AACpB,QAAM;AAAA,IACJ,SAAAC,IAAU;AAAA,IACV,iBAAAC,IAAkB;AAAA,IAClB,sBAAAC;AAAA,IACA,2BAAAV,IAA4B,CAAA;AAAA,EAAC,IAC3BO;AAEJ,MAAIG;AACF,WAAOA,EAAqBJ,CAAK;AAGnC,MAAI,CAACE;AACH,WAAOC,IAAkBH,IAAQ,EAAE,GAAGA,GAAO,KAAK,OAAA;AAGpD,QAAMK,IAAuBL,EAAM,YAAY,IAAI,CAAAM,OAAO;AAAA,IACxD,GAAGA;AAAA,IACH,SAASnB,EAAemB,EAAG,OAAO;AAAA,IAClC,UAAUA,EAAG,WACRd,EAAec,EAAG,UAAUZ,CAAyB,IACtD;AAAA,EAAA,EACJ;AAEF,SAAO;AAAA,IACL,GAAGM;AAAA,IACH,SAASb,EAAea,EAAM,OAAO;AAAA,IACrC,aAAaK;AAAA,IACb,KAAKF,IAAkBH,EAAM,MAAM;AAAA,EAAA;AAEvC;AAeO,SAASO,EACdC,GACAP,IAA6B,IACR;AACrB,QAAM,EAAE,SAAAC,IAAU,IAAM,uBAAAO,GAAuB,2BAAAf,IAA4B,CAAA,MAAOO;AAElF,SAAIQ,IACKA,EAAsBD,CAAM,IAGhCN,IAIE;AAAA,IACL,GAAGM;AAAA,IACH,MAAMA,EAAO,OACRhB,EAAegB,EAAO,MAAMd,CAAyB,IACtD;AAAA,EAAA,IAPGc;AASX;"}
+{"version":3,"file":"sanitization.js","sources":["../../../src/contexts/ObservabilityProvider/sanitization.ts"],"sourcesContent":["import type {\n  ObservabilityError,\n  ObservabilityMetric,\n  SanitizationConfig,\n} from '@/types/observability'\n\nconst PII_PATTERNS = [\n  { pattern: /\\b\\d{3}-\\d{2}-\\d{4}\\b/g, replacement: '[SSN-REDACTED]' },\n  { pattern: /\\b\\d{9}\\b/g, replacement: '[SSN-REDACTED]' },\n  {\n    pattern: /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Z|a-z]{2,}\\b/g,\n    replacement: '[EMAIL-REDACTED]',\n  },\n  { pattern: /\\b\\d{3}[-.\\s]?\\d{3}[-.\\s]?\\d{4}\\b/g, replacement: '[PHONE-REDACTED]' },\n  { pattern: /\\(\\d{3}\\)\\s*\\d{3}[-.\\s]?\\d{4}/g, replacement: '[PHONE-REDACTED]' },\n  { pattern: /\\b\\d{4}[-\\s]?\\d{4}[-\\s]?\\d{4}[-\\s]?\\d{4}\\b/g, replacement: '[CC-REDACTED]' },\n  { pattern: /\\b[A-Za-z0-9_-]{32,}\\b/g, replacement: '[TOKEN-REDACTED]' },\n]\n\nconst SENSITIVE_FIELD_NAMES = [\n  'password',\n  'token',\n  'apiKey',\n  'api_key',\n  'secret',\n  'ssn',\n  'social_security_number',\n  'creditCard',\n  'credit_card',\n  'cvv',\n  'pin',\n  'bankAccount',\n  'bank_account',\n  'routingNumber',\n  'routing_number',\n  'accountNumber',\n  'account_number',\n  'dateOfBirth',\n  'date_of_birth',\n  'birthDate',\n  'birth_date',\n  'birthday',\n  'firstName',\n  'first_name',\n  'lastName',\n  'last_name',\n  'middleName',\n  'middle_name',\n  'fullName',\n  'full_name',\n  'employeeName',\n  'employee_name',\n  'signatureText',\n  'signature_text',\n  'retirementLoanIdentifier',\n  'retirement_loan_identifier',\n  'phone',\n  'zipCode',\n  'zip_code',\n  'postalCode',\n  'postal_code',\n  'preparerCity',\n  'preparer_city',\n  'preparerZip',\n  'preparer_zip',\n  'preparer2City',\n  'preparer2_city',\n  'preparer2Zip',\n  'preparer2_zip',\n  'preparer3City',\n  'preparer3_city',\n  'preparer3Zip',\n  'preparer3_zip',\n  'preparer4City',\n  'preparer4_city',\n  'preparer4Zip',\n  'preparer4_zip',\n  'address',\n  'street1',\n  'street_1',\n  'street2',\n  'street_2',\n  'caseNumber',\n  'case_number',\n  'orderNumber',\n  'order_number',\n  'remittanceNumber',\n  'remittance_number',\n  'documentNumber',\n  'document_number',\n]\n\nconst EXACT_SENSITIVE_FIELD_NAMES = new Set(['ein', 'dob', 'zip', 'city'])\n\n/**\n * Replaces PII patterns (SSN, email, phone, credit card, long tokens) in a string with redacted placeholders.\n *\n * @param value - The string to scan and redact.\n * @returns The input with each matched pattern replaced by a `[TYPE-REDACTED]` placeholder.\n * @internal\n */\nexport function sanitizeString(value: string): string {\n  let sanitized = value\n\n  for (const { pattern, replacement } of PII_PATTERNS) {\n    sanitized = sanitized.replace(pattern, replacement)\n  }\n\n  return sanitized\n}\n\n/**\n * Recursively walks a value, redacting sensitive object keys and PII patterns in nested strings.\n *\n * @remarks\n * Keys whose names match (case-insensitively contain) any built-in sensitive field name or any\n * entry in `additionalSensitiveFields` have their values replaced with `[REDACTED]`. Short names\n * (`ein`, `dob`, `zip`, `city`) match the whole key, case-insensitively. String\n * values are passed through {@link sanitizeString} so PII patterns inside them are also redacted.\n * Numbers, booleans, `null`, and `undefined` pass through unchanged.\n *\n * @param obj - The value to sanitize. May be any JSON-shaped structure.\n * @param additionalSensitiveFields - Extra field names to treat as sensitive (case-insensitive substring match).\n * @returns A new value of the same shape with sensitive fields and PII patterns redacted.\n * @internal\n */\nexport function sanitizeObject(obj: unknown, additionalSensitiveFields: string[] = []): unknown {\n  if (obj === null || obj === undefined) {\n    return obj\n  }\n\n  if (typeof obj === 'string') {\n    return sanitizeString(obj)\n  }\n\n  if (typeof obj === 'number' || typeof obj === 'boolean') {\n    return obj\n  }\n\n  if (Array.isArray(obj)) {\n    return obj.map(item => sanitizeObject(item, additionalSensitiveFields))\n  }\n\n  if (typeof obj === 'object') {\n    const sanitized: Record<string, unknown> = {}\n\n    const allSensitiveFields = [...SENSITIVE_FIELD_NAMES, ...additionalSensitiveFields]\n\n    for (const [key, value] of Object.entries(obj)) {\n      const lowerKey = key.toLowerCase()\n      if (\n        EXACT_SENSITIVE_FIELD_NAMES.has(lowerKey) ||\n        allSensitiveFields.some(field => lowerKey.includes(field.toLowerCase()))\n      ) {\n        sanitized[key] = '[REDACTED]'\n        continue\n      }\n\n      sanitized[key] = sanitizeObject(value, additionalSensitiveFields)\n    }\n\n    return sanitized\n  }\n\n  return obj\n}\n\nfunction redactError(\n  error: ObservabilityError,\n  { enabled = true, includeRawError = false, additionalSensitiveFields = [] }: SanitizationConfig,\n): ObservabilityError {\n  const raw = includeRawError ? error.raw : undefined\n\n  if (!enabled) {\n    return { ...error, raw }\n  }\n\n  return {\n    ...error,\n    message: sanitizeString(error.message),\n    fieldErrors: error.fieldErrors.map(fieldError => ({\n      ...fieldError,\n      message: sanitizeString(fieldError.message),\n      metadata: fieldError.metadata\n        ? (sanitizeObject(fieldError.metadata, additionalSensitiveFields) as Record<\n            string,\n            unknown\n          >)\n        : undefined,\n    })),\n    raw,\n  }\n}\n\nfunction redactMetric(\n  metric: ObservabilityMetric,\n  { enabled = true, additionalSensitiveFields = [] }: SanitizationConfig,\n): ObservabilityMetric {\n  if (!enabled) {\n    return metric\n  }\n\n  return {\n    ...metric,\n    tags: metric.tags\n      ? (sanitizeObject(metric.tags, additionalSensitiveFields) as Record<string, string>)\n      : undefined,\n  }\n}\n\n/**\n * Redacts error messages and field-error metadata before and after a custom sanitizer runs.\n *\n * @remarks\n * `enabled: false` skips redaction. Independently, `raw` is excluded before and after the\n * custom sanitizer unless `includeRawError: true`. Opted-in `raw` is passed through unchanged.\n * Other error properties are preserved without redaction.\n *\n * @internal\n */\nexport function sanitizeError(\n  error: ObservabilityError,\n  config: SanitizationConfig = {},\n): ObservabilityError {\n  const sanitized = redactError(error, config)\n  return config.customErrorSanitizer\n    ? redactError(config.customErrorSanitizer(sanitized), config)\n    : sanitized\n}\n\n/**\n * Redacts metric tags before and after a custom sanitizer runs, unless `enabled: false`.\n *\n * @remarks\n * Other metric properties are preserved without redaction.\n *\n * @internal\n */\nexport function sanitizeMetric(\n  metric: ObservabilityMetric,\n  config: SanitizationConfig = {},\n): ObservabilityMetric {\n  const sanitized = redactMetric(metric, config)\n  return config.customMetricSanitizer\n    ? redactMetric(config.customMetricSanitizer(sanitized), config)\n    : sanitized\n}\n"],"names":["PII_PATTERNS","SENSITIVE_FIELD_NAMES","EXACT_SENSITIVE_FIELD_NAMES","sanitizeString","value","sanitized","pattern","replacement","sanitizeObject","obj","additionalSensitiveFields","item","allSensitiveFields","key","lowerKey","field","redactError","error","enabled","includeRawError","raw","fieldError","redactMetric","metric","sanitizeError","config","sanitizeMetric"],"mappings":"AAMA,MAAMA,IAAe;AAAA,EACnB,EAAE,SAAS,0BAA0B,aAAa,iBAAA;AAAA,EAClD,EAAE,SAAS,cAAc,aAAa,iBAAA;AAAA,EACtC;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,EAAA;AAAA,EAEf,EAAE,SAAS,sCAAsC,aAAa,mBAAA;AAAA,EAC9D,EAAE,SAAS,kCAAkC,aAAa,mBAAA;AAAA,EAC1D,EAAE,SAAS,+CAA+C,aAAa,gBAAA;AAAA,EACvE,EAAE,SAAS,2BAA2B,aAAa,mBAAA;AACrD,GAEMC,IAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAEMC,wBAAkC,IAAI,CAAC,OAAO,OAAO,OAAO,MAAM,CAAC;AASlE,SAASC,EAAeC,GAAuB;AACpD,MAAIC,IAAYD;AAEhB,aAAW,EAAE,SAAAE,GAAS,aAAAC,EAAA,KAAiBP;AACrC,IAAAK,IAAYA,EAAU,QAAQC,GAASC,CAAW;AAGpD,SAAOF;AACT;AAiBO,SAASG,EAAeC,GAAcC,IAAsC,IAAa;AAC9F,MAAID,KAAQ;AACV,WAAOA;AAGT,MAAI,OAAOA,KAAQ;AACjB,WAAON,EAAeM,CAAG;AAG3B,MAAI,OAAOA,KAAQ,YAAY,OAAOA,KAAQ;AAC5C,WAAOA;AAGT,MAAI,MAAM,QAAQA,CAAG;AACnB,WAAOA,EAAI,IAAI,CAAAE,MAAQH,EAAeG,GAAMD,CAAyB,CAAC;AAGxE,MAAI,OAAOD,KAAQ,UAAU;AAC3B,UAAMJ,IAAqC,CAAA,GAErCO,IAAqB,CAAC,GAAGX,GAAuB,GAAGS,CAAyB;AAElF,eAAW,CAACG,GAAKT,CAAK,KAAK,OAAO,QAAQK,CAAG,GAAG;AAC9C,YAAMK,IAAWD,EAAI,YAAA;AACrB,UACEX,EAA4B,IAAIY,CAAQ,KACxCF,EAAmB,KAAK,CAAAG,MAASD,EAAS,SAASC,EAAM,YAAA,CAAa,CAAC,GACvE;AACA,QAAAV,EAAUQ,CAAG,IAAI;AACjB;AAAA,MACF;AAEA,MAAAR,EAAUQ,CAAG,IAAIL,EAAeJ,GAAOM,CAAyB;AAAA,IAClE;AAEA,WAAOL;AAAA,EACT;AAEA,SAAOI;AACT;AAEA,SAASO,EACPC,GACA,EAAE,SAAAC,IAAU,IAAM,iBAAAC,IAAkB,IAAO,2BAAAT,IAA4B,CAAA,KACnD;AACpB,QAAMU,IAAMD,IAAkBF,EAAM,MAAM;AAE1C,SAAKC,IAIE;AAAA,IACL,GAAGD;AAAA,IACH,SAASd,EAAec,EAAM,OAAO;AAAA,IACrC,aAAaA,EAAM,YAAY,IAAI,CAAAI,OAAe;AAAA,MAChD,GAAGA;AAAA,MACH,SAASlB,EAAekB,EAAW,OAAO;AAAA,MAC1C,UAAUA,EAAW,WAChBb,EAAea,EAAW,UAAUX,CAAyB,IAI9D;AAAA,IAAA,EACJ;AAAA,IACF,KAAAU;AAAA,EAAA,IAhBO,EAAE,GAAGH,GAAO,KAAAG,EAAA;AAkBvB;AAEA,SAASE,EACPC,GACA,EAAE,SAAAL,IAAU,IAAM,2BAAAR,IAA4B,CAAA,KACzB;AACrB,SAAKQ,IAIE;AAAA,IACL,GAAGK;AAAA,IACH,MAAMA,EAAO,OACRf,EAAee,EAAO,MAAMb,CAAyB,IACtD;AAAA,EAAA,IAPGa;AASX;AAYO,SAASC,EACdP,GACAQ,IAA6B,IACT;AACpB,QAAMpB,IAAYW,EAAYC,GAAOQ,CAAM;AAC3C,SAAOA,EAAO,uBACVT,EAAYS,EAAO,qBAAqBpB,CAAS,GAAGoB,CAAM,IAC1DpB;AACN;AAUO,SAASqB,EACdH,GACAE,IAA6B,IACR;AACrB,QAAMpB,IAAYiB,EAAaC,GAAQE,CAAM;AAC7C,SAAOA,EAAO,wBACVH,EAAaG,EAAO,sBAAsBpB,CAAS,GAAGoB,CAAM,IAC5DpB;AACN;"}

package/dist/helpers/validations.js

@@ -1,7 +1,7 @@
 import { z as n } from "zod";
 import { formatWithMask as o, commonMasks as i } from "./mask.js";
 import { removeNonDigits as r } from "./formattedStrings.js";
-const s = /^([a-zA-Z\xC0-\uFFFF]+([ \-']{0,1}[a-zA-Z\xC0-\uFFFF]+)*[.]{0,1}){1,2}$/, g = n.string().min(1).regex(s), N = n.string().refine((t) => /(^\d{5}$)|(^\d{5}-\d{4}$)/.test(t)), F = /^(?!(000|666|9))\d{3}(?!00)\d{2}(?!0000)\d{4}$/, R = /^\d{2}-\d{7}$/, f = n.string().transform((t) => o(t, i.phoneMask)).refine((t) => r(t).length === 10), e = /^[0-9]{9}$/, p = n.string().regex(e), a = /^[0-9]{1,17}$/, u = n.string().regex(a);
+const s = /^([a-zA-Z\xC0-\uFFFF]+([ \-']{0,1}[a-zA-Z\xC0-\uFFFF]+)*[.]{0,1}){1,2}$/, g = n.string().trim().min(1).regex(s), N = n.string().refine((t) => /(^\d{5}$)|(^\d{5}-\d{4}$)/.test(t)), F = /^(?!(000|666|9))\d{3}(?!00)\d{2}(?!0000)\d{4}$/, R = /^\d{2}-\d{7}$/, f = n.string().transform((t) => o(t, i.phoneMask)).refine((t) => r(t).length === 10), e = /^[0-9]{9}$/, p = n.string().regex(e), a = /^[0-9]{1,17}$/, u = n.string().regex(a);
 export {
   a as ACCOUNT_NUMBER_REGEX,
   R as EIN_REGEX,

package/dist/helpers/validations.js.map

@@ -1 +1 @@
-{"version":3,"file":"validations.js","sources":["../../src/helpers/validations.ts"],"sourcesContent":["import { z } from 'zod'\nimport { commonMasks, formatWithMask } from './mask'\nimport { removeNonDigits } from '@/helpers/formattedStrings'\n\n/**\n * Regex matching personal names: one or two words composed of Latin or extended-Latin letters,\n * with optional internal spaces, hyphens, or apostrophes, and an optional trailing period.\n *\n * @internal\n */\nexport const NAME_REGEX = /^([a-zA-Z\\xC0-\\uFFFF]+([ \\-']{0,1}[a-zA-Z\\xC0-\\uFFFF]+)*[.]{0,1}){1,2}$/\n\n/**\n * Zod schema validating a non-empty personal name against {@link NAME_REGEX}.\n *\n * @internal\n */\nexport const nameValidation = z.string().min(1).regex(NAME_REGEX)\n\n/**\n * Zod schema validating a US ZIP code in either 5-digit (`12345`) or ZIP+4 (`12345-6789`) form.\n *\n * @internal\n */\nexport const zipValidation = z.string().refine(zip => /(^\\d{5}$)|(^\\d{5}-\\d{4}$)/.test(zip))\n\n/**\n * Regex matching a valid US Social Security Number. Rejects reserved area numbers (000, 666, 9xx),\n * a group number of 00, and a serial number of 0000.\n *\n * @internal\n */\nexport const SSN_REGEX = /^(?!(000|666|9))\\d{3}(?!00)\\d{2}(?!0000)\\d{4}$/\n\n/**\n * Regex matching a federal EIN in the canonical display format `NN-NNNNNNN`\n * (two digits, a hyphen, then seven digits). Pair with `normalizeEin` to format\n * raw input before testing.\n *\n * @internal\n */\nexport const EIN_REGEX = /^\\d{2}-\\d{7}$/\n\n/**\n * Zod schema validating a US phone number. Formats the input with the phone mask and accepts it\n * only when the digit-only form is exactly ten digits.\n *\n * @internal\n */\nexport const phoneValidation = z\n  .string()\n  .transform(value => formatWithMask(value, commonMasks.phoneMask))\n  .refine(phone => {\n    const digits = removeNonDigits(phone)\n    return digits.length === 10\n  })\n\n/**\n * Regex matching a bank routing number (exactly nine digits).\n *\n * @internal\n */\nexport const ROUTING_NUMBER_REGEX = /^[0-9]{9}$/\n\n/**\n * Zod schema validating a bank routing number (exactly nine digits).\n *\n * @internal\n */\nexport const routingNumberValidation = z.string().regex(ROUTING_NUMBER_REGEX)\n\n/**\n * Regex matching a bank account number (one to seventeen digits).\n *\n * @internal\n */\nexport const ACCOUNT_NUMBER_REGEX = /^[0-9]{1,17}$/\n\n/**\n * Zod schema validating a bank account number (one to seventeen digits).\n *\n * @internal\n */\nexport const accountNumberValidation = z.string().regex(ACCOUNT_NUMBER_REGEX)\n"],"names":["NAME_REGEX","nameValidation","z","zipValidation","zip","SSN_REGEX","EIN_REGEX","phoneValidation","value","formatWithMask","commonMasks","phone","removeNonDigits","ROUTING_NUMBER_REGEX","routingNumberValidation","ACCOUNT_NUMBER_REGEX","accountNumberValidation"],"mappings":";;;AAUO,MAAMA,IAAa,2EAObC,IAAiBC,EAAE,OAAA,EAAS,IAAI,CAAC,EAAE,MAAMF,CAAU,GAOnDG,IAAgBD,EAAE,SAAS,OAAO,CAAAE,MAAO,4BAA4B,KAAKA,CAAG,CAAC,GAQ9EC,IAAY,kDASZC,IAAY,iBAQZC,IAAkBL,EAC5B,OAAA,EACA,UAAU,CAAAM,MAASC,EAAeD,GAAOE,EAAY,SAAS,CAAC,EAC/D,OAAO,CAAAC,MACSC,EAAgBD,CAAK,EACtB,WAAW,EAC1B,GAOUE,IAAuB,cAOvBC,IAA0BZ,EAAE,OAAA,EAAS,MAAMW,CAAoB,GAO/DE,IAAuB,iBAOvBC,IAA0Bd,EAAE,OAAA,EAAS,MAAMa,CAAoB;"}
+{"version":3,"file":"validations.js","sources":["../../src/helpers/validations.ts"],"sourcesContent":["import { z } from 'zod'\nimport { commonMasks, formatWithMask } from './mask'\nimport { removeNonDigits } from '@/helpers/formattedStrings'\n\n/**\n * Regex matching personal names: one or two words composed of Latin or extended-Latin letters,\n * with optional internal spaces, hyphens, or apostrophes, and an optional trailing period.\n *\n * @internal\n */\nexport const NAME_REGEX = /^([a-zA-Z\\xC0-\\uFFFF]+([ \\-']{0,1}[a-zA-Z\\xC0-\\uFFFF]+)*[.]{0,1}){1,2}$/\n\n/**\n * Zod schema validating a non-empty personal name against {@link NAME_REGEX}.\n *\n * @internal\n */\nexport const nameValidation = z.string().trim().min(1).regex(NAME_REGEX)\n\n/**\n * Zod schema validating a US ZIP code in either 5-digit (`12345`) or ZIP+4 (`12345-6789`) form.\n *\n * @internal\n */\nexport const zipValidation = z.string().refine(zip => /(^\\d{5}$)|(^\\d{5}-\\d{4}$)/.test(zip))\n\n/**\n * Regex matching a valid US Social Security Number. Rejects reserved area numbers (000, 666, 9xx),\n * a group number of 00, and a serial number of 0000.\n *\n * @internal\n */\nexport const SSN_REGEX = /^(?!(000|666|9))\\d{3}(?!00)\\d{2}(?!0000)\\d{4}$/\n\n/**\n * Regex matching a federal EIN in the canonical display format `NN-NNNNNNN`\n * (two digits, a hyphen, then seven digits). Pair with `normalizeEin` to format\n * raw input before testing.\n *\n * @internal\n */\nexport const EIN_REGEX = /^\\d{2}-\\d{7}$/\n\n/**\n * Zod schema validating a US phone number. Formats the input with the phone mask and accepts it\n * only when the digit-only form is exactly ten digits.\n *\n * @internal\n */\nexport const phoneValidation = z\n  .string()\n  .transform(value => formatWithMask(value, commonMasks.phoneMask))\n  .refine(phone => {\n    const digits = removeNonDigits(phone)\n    return digits.length === 10\n  })\n\n/**\n * Regex matching a bank routing number (exactly nine digits).\n *\n * @internal\n */\nexport const ROUTING_NUMBER_REGEX = /^[0-9]{9}$/\n\n/**\n * Zod schema validating a bank routing number (exactly nine digits).\n *\n * @internal\n */\nexport const routingNumberValidation = z.string().regex(ROUTING_NUMBER_REGEX)\n\n/**\n * Regex matching a bank account number (one to seventeen digits).\n *\n * @internal\n */\nexport const ACCOUNT_NUMBER_REGEX = /^[0-9]{1,17}$/\n\n/**\n * Zod schema validating a bank account number (one to seventeen digits).\n *\n * @internal\n */\nexport const accountNumberValidation = z.string().regex(ACCOUNT_NUMBER_REGEX)\n"],"names":["NAME_REGEX","nameValidation","z","zipValidation","zip","SSN_REGEX","EIN_REGEX","phoneValidation","value","formatWithMask","commonMasks","phone","removeNonDigits","ROUTING_NUMBER_REGEX","routingNumberValidation","ACCOUNT_NUMBER_REGEX","accountNumberValidation"],"mappings":";;;AAUO,MAAMA,IAAa,2EAObC,IAAiBC,EAAE,SAAS,KAAA,EAAO,IAAI,CAAC,EAAE,MAAMF,CAAU,GAO1DG,IAAgBD,EAAE,SAAS,OAAO,CAAAE,MAAO,4BAA4B,KAAKA,CAAG,CAAC,GAQ9EC,IAAY,kDASZC,IAAY,iBAQZC,IAAkBL,EAC5B,OAAA,EACA,UAAU,CAAAM,MAASC,EAAeD,GAAOE,EAAY,SAAS,CAAC,EAC/D,OAAO,CAAAC,MACSC,EAAgBD,CAAK,EACtB,WAAW,EAC1B,GAOUE,IAAuB,cAOvBC,IAA0BZ,EAAE,OAAA,EAAS,MAAMW,CAAoB,GAO/DE,IAAuB,iBAOvBC,IAA0Bd,EAAE,OAAA,EAAS,MAAMa,CAAoB;"}

package/dist/i18n/en/Company.AssignSignatory.json.js

@@ -1,4 +1,4 @@
-const e = "Assign a company signatory", t = `The company signatory is responsible for electronically signing all government forms Gusto creates and is generally a member of the business or partnership. Each time a signatory is updated, we'll file a new Form 8655 with the IRS to give Gusto the "Reporting Agent Authorization" we need to file and pay your taxes. Your signatory must be authorized by the IRS.`, i = { label: "Signing options", selfSign: "I'm authorized to sign official documents for the company.", appointOther: "I'll appoint another person to sign official documents." }, s = { title: "Signatory person details", description: "Make sure this information is accurate. We'll use it to submit IRS Form 8655 so we can file and pay your federal taxes. If you don't know who your authorized signatory is, please call the IRS at (800) 829-4933.", firstName: "First name", lastName: "Last name", email: "Email address", phone: "Phone number", ssn: "Social security number", birthday: "Date of birth", titleSelect: { label: "Title", placeholder: "Select title..." } }, a = { title: "Signatory home address", description: "To verify your identity, please enter your home address. If you're unsure what address to use, use the one listed on your driver's license.", street1: "Street 1", street2: "Street 2", city: "City", state: "State", statePlaceholder: "Select state...", zip: "Zip" }, o = { title: "Invite a signatory", description: "Make sure this information is accurate. We'll use it to submit IRS Form 8655 so we can file and pay your federal taxes. If you don't know who your authorized signatory is, please call the IRS at (800) 829-4933.", signatoryEmail: "Signatory email", confirmEmail: "Confirm signatory email", firstName: "First name", lastName: "Last name" }, r = { signDocuments: "Sign documents", inviteSignatory: "Invite signatory" }, n = { dob: "Date of birth is required", email: "Email address is required and must be valid", emailMismatch: "Email addresses must match", firstName: "First name is required", lastName: "Last name is required", phone: "Phone number must be 10 digits", title: "Title is required", address: { street1: "Street address is required", city: "City is required", state: "State is required", zip: "ZIP code must be 5 digits" } }, l = {
+const e = "Assign a company signatory", t = `The company signatory is responsible for electronically signing all government forms Gusto creates and is generally a member of the business or partnership. Each time a signatory is updated, we'll file a new Form 8655 with the IRS to give Gusto the "Reporting Agent Authorization" we need to file and pay your taxes. Your signatory must be authorized by the IRS.`, i = { label: "Signing options", selfSign: "I'm authorized to sign official documents for the company.", appointOther: "I'll appoint another person to sign official documents." }, s = { title: "Signatory person details", description: "Make sure this information is accurate. We'll use it to submit IRS Form 8655 so we can file and pay your federal taxes. If you don't know who your authorized signatory is, please call the IRS at (800) 829-4933.", firstName: "First name", lastName: "Last name", email: "Email address", phone: "Phone number", ssn: "Social security number", birthday: "Date of birth", titleSelect: { label: "Title", placeholder: "Select title..." } }, a = { title: "Signatory home address", description: "To verify your identity, please enter your home address. If you're unsure what address to use, use the one listed on your driver's license.", street1: "Street 1", street2: "Street 2", city: "City", state: "State", statePlaceholder: "Select state...", zip: "Zip" }, o = { title: "Invite a signatory", description: "Make sure this information is accurate. We'll use it to submit IRS Form 8655 so we can file and pay your federal taxes. If you don't know who your authorized signatory is, please call the IRS at (800) 829-4933.", signatoryEmail: "Signatory email", confirmEmail: "Confirm signatory email", firstName: "First name", lastName: "Last name" }, r = { signDocuments: "Sign documents", inviteSignatory: "Invite signatory" }, n = { dob: "Date of birth is required", email: "Email address is required and must be valid", emailMismatch: "Email addresses must match", firstName: "Enter a valid first name", lastName: "Enter a valid last name", phone: "Phone number must be 10 digits", title: "Title is required", address: { street1: "Street address is required", city: "City is required", state: "State is required", zip: "ZIP code must be 5 digits" } }, l = {
   title: e,
   description: t,
   signingOptions: i,

package/dist/i18n/en/Company.Management.PaySchedule.json.js

@@ -1,24 +1,34 @@
-const e = "Pay schedule", t = "You have assigned everyone to be on one pay schedule.", a = "Manage", n = "Edit", o = "Edit pay schedule", s = "Edit AutoPilot", d = { name: "Name", frequency: "Frequency" }, l = { label: "AutoPilot", enabled: "Enabled", disabled: "Disabled" }, i = { assignmentUpdated: "Pay schedule assignment updated." }, c = {
+const e = "Pay schedule", t = "You have assigned everyone to be on one pay schedule.", a = "You have assigned employees to pay schedules by compensation type.", s = "Pay schedules by compensation type", o = "Manage", n = "Edit", c = "Edit schedule", l = "Edit pay schedule", d = "Edit AutoPilot", i = "Pay schedule actions", u = { name: "Name", frequency: "Frequency", schedule: "Schedule" }, y = { hourly: "Hourly", salaried: "Salaried" }, p = { label: "AutoPilot", enabled: "Enabled", disabled: "Disabled" }, h = { assignmentUpdated: "Pay schedule assignment updated." }, r = {
   title: e,
   description: t,
-  manageCta: a,
+  compensationDescription: a,
+  compensationTableLabel: s,
+  manageCta: o,
   editCta: n,
-  editScheduleAriaLabel: o,
-  editAutoPilotAriaLabel: s,
-  labels: d,
-  autoPilot: l,
-  alerts: i
+  editScheduleCta: c,
+  editScheduleAriaLabel: l,
+  editAutoPilotAriaLabel: d,
+  rowMenuTriggerLabel: i,
+  labels: u,
+  compensationTypes: y,
+  autoPilot: p,
+  alerts: h
 };
 export {
-  i as alerts,
-  l as autoPilot,
-  c as default,
+  h as alerts,
+  p as autoPilot,
+  a as compensationDescription,
+  s as compensationTableLabel,
+  y as compensationTypes,
+  r as default,
   t as description,
-  s as editAutoPilotAriaLabel,
+  d as editAutoPilotAriaLabel,
   n as editCta,
-  o as editScheduleAriaLabel,
-  d as labels,
-  a as manageCta,
+  l as editScheduleAriaLabel,
+  c as editScheduleCta,
+  u as labels,
+  o as manageCta,
+  i as rowMenuTriggerLabel,
   e as title
 };
 //# sourceMappingURL=Company.Management.PaySchedule.json.js.map

package/dist/i18n/en/Company.Management.PaySchedule.json.js.map

@@ -1 +1 @@
-{"version":3,"file":"Company.Management.PaySchedule.json.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;"}
+{"version":3,"file":"Company.Management.PaySchedule.json.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;"}

package/dist/i18n/en/Company.Management.PayScheduleAssignment.json.js

@@ -1,18 +1,20 @@
-const e = { heading: "Choose schedule type", description: "After you choose, you can create a pay schedule for each group.", options: { single: { label: "Everyone on one schedule", description: "Choose one pay schedule for all your employees" } } }, a = { heading: "Assign employees", payScheduleLabel: "Pay schedule", payScheduleDescription: "The pay schedule to use for all employees.", addPayScheduleCta: "Add pay schedule" }, n = { heading: "Review changes", noChangesHeading: "There are no changes to review.", noChangesDescription: "If you intended to make changes, please go back and make them.", employeeChangesHeading: "Employees affected", nameLabel: "Name", transitionPayPeriodLabel: "Transition pay period", payFrequencyLabel: "New pay frequency", firstPayPeriodLabel: "First pay period", noTransitionNeeded: "No transition needed" }, o = "Back", s = "Continue", t = "Submit", i = {
+const e = { heading: "Choose schedule type", description: "After you choose, you can create a pay schedule for each group.", options: { single: { label: "Everyone on one schedule", description: "Choose one pay schedule for all your employees" }, hourlySalaried: { label: "Separate schedules by compensation type", description: "Choose one pay schedule for hourly employees and another for salaried employees" } } }, a = { heading: "Assign employees", payScheduleLabel: "Pay schedule", payScheduleDescription: "The pay schedule to use for all employees.", addPayScheduleCta: "Add pay schedule" }, o = { heading: "Assign employees", hourlyPayScheduleLabel: "Hourly employees", hourlyPayScheduleDescription: "The pay schedule to use for hourly employees.", salariedPayScheduleLabel: "Salaried employees", salariedPayScheduleDescription: "The pay schedule to use for salaried employees.", addPayScheduleCta: "Add pay schedule" }, s = { heading: "Review changes", noChangesHeading: "There are no changes to review.", noChangesDescription: "If you intended to make changes, please go back and make them.", employeeChangesHeading: "Employees affected", nameLabel: "Name", transitionPayPeriodLabel: "Transition pay period", payFrequencyLabel: "New pay frequency", firstPayPeriodLabel: "First pay period", noTransitionNeeded: "No transition needed" }, n = "Back", l = "Continue", d = "Submit", t = {
   typeStep: e,
   scheduleStep: a,
-  reviewStep: n,
-  backCta: o,
-  continueCta: s,
-  submitCta: t
+  compensationStep: o,
+  reviewStep: s,
+  backCta: n,
+  continueCta: l,
+  submitCta: d
 };
 export {
-  o as backCta,
-  s as continueCta,
-  i as default,
-  n as reviewStep,
+  n as backCta,
+  o as compensationStep,
+  l as continueCta,
+  t as default,
+  s as reviewStep,
   a as scheduleStep,
-  t as submitCta,
+  d as submitCta,
   e as typeStep
 };
 //# sourceMappingURL=Company.Management.PayScheduleAssignment.json.js.map

package/dist/i18n/en/Company.Management.PayScheduleAssignment.json.js.map

@@ -1 +1 @@
-{"version":3,"file":"Company.Management.PayScheduleAssignment.json.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;"}
+{"version":3,"file":"Company.Management.PayScheduleAssignment.json.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;"}

package/dist/package.json.js

@@ -1,4 +1,4 @@
-const e = "@gusto/embedded-react-sdk", o = "0.56.7";
+const e = "@gusto/embedded-react-sdk", o = "0.57.0";
 export {
   e as name,
   o as version

package/dist/src/components/Company/PaySchedule/management/PayScheduleAssignment/AssignmentCompensationStepPresentation.d.ts

@@ -0,0 +1,15 @@
+import { PayScheduleShow } from '@gusto/embedded-api/models/components/payscheduleshow';
+/** @internal */
+export interface AssignmentCompensationStepPresentationProps {
+    schedules: PayScheduleShow[];
+    hourlyPayScheduleUuid?: string;
+    salariedPayScheduleUuid?: string;
+    onBack: () => void;
+    onAddPaySchedule: () => void;
+    onContinue: (selection: {
+        hourlyPayScheduleUuid: string;
+        salariedPayScheduleUuid: string;
+    }) => void;
+}
+/** @internal */
+export declare function AssignmentCompensationStepPresentation({ schedules, hourlyPayScheduleUuid, salariedPayScheduleUuid, onBack, onAddPaySchedule, onContinue, }: AssignmentCompensationStepPresentationProps): import('react').JSX.Element;

package/dist/src/components/Company/PaySchedule/management/PayScheduleAssignment/AssignmentTypeStepPresentation.d.ts

@@ -1,9 +1,9 @@
-import { PayScheduleAssignmentBodyType } from '@gusto/embedded-api/models/components/payscheduleassignmentbody';
+import { SupportedAssignmentType } from './usePayScheduleAssignment';
 /** @internal */
 export interface AssignmentTypeStepPresentationProps {
-    defaultType?: typeof PayScheduleAssignmentBodyType.Single;
+    defaultType?: SupportedAssignmentType;
     onBack: () => void;
-    onContinue: (type: PayScheduleAssignmentBodyType) => void;
+    onContinue: (type: SupportedAssignmentType) => void;
 }
 /** @internal */
 export declare function AssignmentTypeStepPresentation({ defaultType, onBack, onContinue, }: AssignmentTypeStepPresentationProps): import('react').JSX.Element;

package/dist/src/components/Company/PaySchedule/management/PayScheduleAssignment/PayScheduleAssignment.d.ts

@@ -13,8 +13,12 @@ export interface PayScheduleAssignmentProps extends BaseComponentInterface<'Comp
  *
  * @remarks
  * Walks through choosing an assignment type, picking (or creating) a pay schedule, and reviewing
- * the employees and transition payrolls affected before submitting. Only the single-schedule
- * assignment type is currently supported. Can be mounted directly or launched from
+ * the employees and transition payrolls affected before submitting. Opens on the company's
+ * current assignment, so submitting without changing anything is a no-op rather than a
+ * reassignment. Two assignment types are
+ * supported: one schedule for everyone (`single`), or separate schedules for hourly and salaried
+ * employees (`hourly_salaried`). Picking the same schedule for both compensation types is
+ * submitted as `single`. Can be mounted directly or launched from
  * `CompanyManagement.PaySchedule`'s Manage action.
  *
  * The internal step-to-step selection events (assignment type chosen, schedule picked) also
@@ -28,7 +32,7 @@ export interface PayScheduleAssignmentProps extends BaseComponentInterface<'Comp
  * | `paySchedule/create` | The user chose to add a new pay schedule from the picker step | — |
  * | `paySchedule/created` | A new pay schedule was created from the picker step | `{ paySchedule: PayScheduleShow }` |
  * | `paySchedule/management/assignment/cancel` | The user backed out of the flow entirely, from the first step | — |
- * | `paySchedule/management/assignment/assigned` | The assignment was submitted successfully | `{ type: PayScheduleAssignmentBodyType; defaultPayScheduleUuid: string; employeeChanges: PayScheduleAssignmentEmployeeChange[] }` |
+ * | `paySchedule/management/assignment/assigned` | The assignment was submitted successfully | `{ employeeChanges: PayScheduleAssignmentEmployeeChange[] }` plus either `{ type: 'single'; defaultPayScheduleUuid: string }` or `{ type: 'hourly_salaried'; hourlyPayScheduleUuid: string; salariedPayScheduleUuid: string }` |
  *
  * @alpha
  */

package/dist/src/components/Company/PaySchedule/management/PayScheduleAssignment/PayScheduleAssignmentComponents.d.ts

@@ -1,21 +1,37 @@
 import { PayScheduleAssignmentBodyType } from '@gusto/embedded-api/models/components/payscheduleassignmentbody';
 import { PayScheduleAssignmentEmployeeChange } from '@gusto/embedded-api/models/components/payscheduleassignmentemployeechange';
 import { PayScheduleShow } from '@gusto/embedded-api/models/components/payscheduleshow';
+import { SupportedAssignmentType } from './usePayScheduleAssignment';
 import { componentEvents } from '../../../../../shared/constants';
+/**
+ * The assignment the user built, already collapsed to the type that actually gets submitted.
+ * Doubles as the request body and as the `assigned` event payload.
+ *
+ * @internal
+ */
+export type AssignmentSelection = {
+    type: typeof PayScheduleAssignmentBodyType.Single;
+    defaultPayScheduleUuid: string;
+} | {
+    type: typeof PayScheduleAssignmentBodyType.HourlySalaried;
+    hourlyPayScheduleUuid: string;
+    salariedPayScheduleUuid: string;
+};
 /** @internal */
 export type EventPayloads = {
     [componentEvents.PAY_SCHEDULE_ASSIGNMENT_TYPE_SELECTED]: {
-        type: PayScheduleAssignmentBodyType;
+        type: SupportedAssignmentType;
     };
     [componentEvents.PAY_SCHEDULE_ASSIGNMENT_SCHEDULE_SELECTED]: {
         defaultPayScheduleUuid: string;
+    } | {
+        hourlyPayScheduleUuid: string;
+        salariedPayScheduleUuid: string;
     };
     [componentEvents.PAY_SCHEDULE_CREATED]: {
         paySchedule: PayScheduleShow;
     };
-    [componentEvents.PAY_SCHEDULE_ASSIGNED]: {
-        type: PayScheduleAssignmentBodyType;
-        defaultPayScheduleUuid: string;
+    [componentEvents.PAY_SCHEDULE_ASSIGNED]: AssignmentSelection & {
         employeeChanges: PayScheduleAssignmentEmployeeChange[];
     };
 };

package/dist/src/components/Company/PaySchedule/management/PayScheduleAssignment/scheduleLabel.d.ts

@@ -0,0 +1,3 @@
+import { PayScheduleShow } from '@gusto/embedded-api/models/components/payscheduleshow';
+/** @internal */
+export declare function scheduleLabel(schedule: PayScheduleShow): string;

package/dist/src/components/Company/PaySchedule/management/PayScheduleAssignment/usePayScheduleAssignment.d.ts

@@ -1,9 +1,18 @@
 import { PayScheduleAssignmentBodyType } from '@gusto/embedded-api/models/components/payscheduleassignmentbody';
 import { FlowContextInterface } from '../../../../Flow/useFlow';
+/**
+ * The assignment types this flow supports. `by_employee` and `by_department` exist in the API
+ * but have no step implementations, so they're unrepresentable here.
+ *
+ * @internal
+ */
+export type SupportedAssignmentType = Extract<PayScheduleAssignmentBodyType, 'single' | 'hourly_salaried'>;
 /** @internal */
 export interface PayScheduleAssignmentContextInterface extends FlowContextInterface {
     companyId: string;
-    assignmentType?: PayScheduleAssignmentBodyType;
+    assignmentType?: SupportedAssignmentType;
     defaultPayScheduleUuid?: string;
+    hourlyPayScheduleUuid?: string;
+    salariedPayScheduleUuid?: string;
     component: React.ComponentType | null;
 }

package/dist/src/components/Company/PaySchedule/management/PayScheduleCompensationOverviewPresentation.d.ts

@@ -0,0 +1,25 @@
+import { PayScheduleShow } from '@gusto/embedded-api/models/components/payscheduleshow';
+/** @internal */
+export type CompensationType = 'hourly' | 'salaried';
+/** @internal */
+export interface PayScheduleCompensationRow {
+    compensationType: CompensationType;
+    schedule: PayScheduleShow;
+}
+/** @internal */
+export interface PayScheduleCompensationOverviewPresentationProps {
+    /** One row per compensation type, in display order. */
+    rows: PayScheduleCompensationRow[];
+    /** Shows the AutoPilot column and its row action when `true`. */
+    enableAutoPilot?: boolean;
+    /** Shows the Manage action when `true`. */
+    enableMultipleSchedules?: boolean;
+    /** Fired when the user chooses Edit schedule from a row menu. */
+    onEditSchedule: (schedule: PayScheduleShow) => void;
+    /** Fired when the user clicks Manage. */
+    onManageAssignment: () => void;
+    /** Fired when the user chooses AutoPilot from a row menu. */
+    onEditAutoPilot: (schedule: PayScheduleShow) => void;
+}
+/** @internal */
+export declare function PayScheduleCompensationOverviewPresentation({ rows, enableAutoPilot, enableMultipleSchedules, onEditSchedule, onManageAssignment, onEditAutoPilot, }: PayScheduleCompensationOverviewPresentationProps): import('react').JSX.Element;

package/dist/src/components/Employee/Profile/shared/useEmployeeDetailsForm/employeeDetailsSchema.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/contexts/ApiProvider/createSdkQueryClient.d.ts

@@ -5,6 +5,8 @@ import { QueryClient } from '@tanstack/react-query';
  * @remarks
  * Defaults applied:
  * - `retry: false` on both queries and mutations.
+ * - `networkMode: 'always'` on both queries and mutations, so requests made while the browser reports offline fail with an error instead of
+ *   staying paused (and showing an indefinite loading state) until connectivity returns.
  * - On any successful mutation, every SDK query under the namespace is invalidated so the next read refetches fresh data.
  *
  * {@link ApiProvider} uses this when no `queryClient` prop is supplied, and `GustoTestProvider` uses it so tests faithfully replicate production

package/dist/src/contexts/ApiProvider/createSdkQueryClient.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/contexts/ObservabilityProvider/sanitization.d.ts

@@ -12,7 +12,8 @@ export declare function sanitizeString(value: string): string;
  *
  * @remarks
  * Keys whose names match (case-insensitively contain) any built-in sensitive field name or any
- * entry in `additionalSensitiveFields` have their values replaced with `[REDACTED]`. String
+ * entry in `additionalSensitiveFields` have their values replaced with `[REDACTED]`. Short names
+ * (`ein`, `dob`, `zip`, `city`) match the whole key, case-insensitively. String
  * values are passed through {@link sanitizeString} so PII patterns inside them are also redacted.
  * Numbers, booleans, `null`, and `undefined` pass through unchanged.
  *
@@ -23,32 +24,22 @@ export declare function sanitizeString(value: string): string;
  */
 export declare function sanitizeObject(obj: unknown, additionalSensitiveFields?: string[]): unknown;
 /**
- * Returns a copy of an observability error with PII redacted from messages and field-error metadata.
+ * Redacts error messages and field-error metadata before and after a custom sanitizer runs.
  *
  * @remarks
- * If `config.customErrorSanitizer` is provided, it is invoked and its result returned directly.
- * When sanitization is disabled, the error passes through unchanged except that `raw` is stripped
- * unless `includeRawError` is true. When enabled, `message` and each `fieldErrors[].message` run
- * through {@link sanitizeString}, and each `fieldErrors[].metadata` runs through {@link sanitizeObject}
- * with `additionalSensitiveFields` applied.
+ * `enabled: false` skips redaction. Independently, `raw` is excluded before and after the
+ * custom sanitizer unless `includeRawError: true`. Opted-in `raw` is passed through unchanged.
+ * Other error properties are preserved without redaction.
  *
- * @param error - The error reported by SDK error boundaries or form submissions.
- * @param config - Optional sanitization configuration; defaults to enabled with `raw` stripped.
- * @returns The sanitized error suitable for forwarding to a partner observability hook.
  * @internal
  */
 export declare function sanitizeError(error: ObservabilityError, config?: SanitizationConfig): ObservabilityError;
 /**
- * Returns a copy of an observability metric with sensitive values redacted from its tags.
+ * Redacts metric tags before and after a custom sanitizer runs, unless `enabled: false`.
  *
  * @remarks
- * If `config.customMetricSanitizer` is provided, it is invoked and its result returned directly.
- * When sanitization is disabled, the metric passes through unchanged. Otherwise the `tags` record
- * is run through {@link sanitizeObject} with `additionalSensitiveFields` applied.
+ * Other metric properties are preserved without redaction.
  *
- * @param metric - The metric reported by SDK component instrumentation.
- * @param config - Optional sanitization configuration; defaults to enabled.
- * @returns The sanitized metric suitable for forwarding to a partner observability hook.
  * @internal
  */
 export declare function sanitizeMetric(metric: ObservabilityMetric, config?: SanitizationConfig): ObservabilityMetric;

package/dist/src/contexts/ObservabilityProvider/useSanitizedObservability.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/helpers/validations.test.d.ts

@@ -0,0 +1 @@
+export {};