@hexclave/js 1.0.24 → 1.0.26

package/dist/esm/lib/hexclave-app/apps/implementations/client-app-impl.js

@@ -13,16 +13,16 @@ import { hexclaveAppInternalsSymbol } from "../../common.js";
 import { adminProjectCreateOptionsToCrud } from "../../projects/index.js";
 import { InternalSession } from "@hexclave/shared/dist/sessions";
 import { Store, storeLock } from "@hexclave/shared/dist/utils/stores";
-import { WebAuthnError, startAuthentication, startRegistration } from "@simplewebauthn/browser";
 import { parseJson } from "@hexclave/shared/dist/utils/json";
 import { DependenciesMap } from "@hexclave/shared/dist/utils/maps";
 import { BotChallengeExecutionFailedError, BotChallengeUserCancelledError, withBotChallengeFlow } from "@hexclave/shared/dist/utils/turnstile-flow";
 import { generateUuid } from "@hexclave/shared/dist/utils/uuids";
+import { WebAuthnError, startAuthentication, startRegistration } from "@simplewebauthn/browser";
 import * as cookie from "cookie";
+import { envVars } from "../../../../generated/env.js";
 import { constructRedirectUrl } from "../../../../utils/url.js";
 import { callOAuthCallback, getNewOAuthProviderOrScopeUrl } from "../../../auth.js";
 import { createCookieHelper, createPlaceholderCookieHelper, deleteCookie, deleteCookieClient, getCookieClient, isSecure, saveVerifierAndState, setOrDeleteCookie, setOrDeleteCookieClient } from "../../../cookie.js";
-import { envVars } from "../../../../generated/env.js";
 import { apiKeyCreationOptionsToCrud } from "../../api-keys/index.js";
 import { contactChannelCreateOptionsToCrud, contactChannelUpdateOptionsToCrud } from "../../contact-channels/index.js";
 import { teamCreateOptionsToCrud, teamUpdateOptionsToCrud } from "../../teams/index.js";
@@ -33,6 +33,7 @@ import { crossDomainAuthQueryParams, getCrossDomainHandoffParamsFromCurrentUrl,
 import { SessionRecorder, analyticsOptionsFromJson, analyticsOptionsToJson, getSessionReplayOptions } from "./session-replay.js";
 import { mountClickmapOverlay } from "../../../../clickmap/index.js";
 import { mountDevTool } from "../../../../dev-tool/index.js";
+import { mountPushedConfigErrorOverlay } from "../../../../pushed-config-error-overlay/index.js";
 
 //#region src/lib/hexclave-app/apps/implementations/client-app-impl.ts
 const prefetchedCrossDomainHandoffTtlMs = 3300 * 1e3;
@@ -133,7 +134,7 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 			const location = await getNewOAuthProviderOrScopeUrl(this._interface, {
 				provider: options.providerId,
 				redirectUrl: this._getOAuthCallbackRedirectUri(),
-				errorRedirectUrl: this.urls.error,
+				errorRedirectUrl: this._getUrls().error,
 				providerScope: mergeScopeStrings(options.scope || "", (this._oauthScopesOnSignIn[options.providerId] ?? []).join(" "))
 			}, options.session);
 			await this._redirectTo({ url: location });
@@ -244,7 +245,7 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 			const location = await getNewOAuthProviderOrScopeUrl(this._interface, {
 				provider,
 				redirectUrl: this._getOAuthCallbackRedirectUri(),
-				errorRedirectUrl: this.urls.error,
+				errorRedirectUrl: this._getUrls().error,
 				providerScope: mergeScopeStrings(scopeString, (this._oauthScopesOnSignIn[provider] ?? []).join(" "))
 			}, session);
 			await this._redirectTo({ url: location });
@@ -427,7 +428,10 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 			});
 		}
 		if (isBrowserLike() && resolvedOptions.devTool !== false) mountDevTool(this, resolvedOptions.devTool);
-		if (isBrowserLike()) mountClickmapOverlay(this);
+		if (isBrowserLike()) {
+			mountClickmapOverlay(this);
+			mountPushedConfigErrorOverlay(this);
+		}
 	}
 	_initUniqueIdentifier() {
 		if (!this._uniqueIdentifier) throw new HexclaveAssertionError("Unique identifier not initialized");
@@ -484,7 +488,7 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 		return currentUrl.searchParams.has("code") && currentUrl.searchParams.has("state") && currentUrl.searchParams.has(nestedCrossDomainAuthQueryParams.refreshTokenId);
 	}
 	_getOAuthCallbackRedirectUri() {
-		if (!this._isOAuthCallbackUrlHosted()) return this.urls.oauthCallback;
+		if (!this._isOAuthCallbackUrlHosted()) return this._getUrls().oauthCallback;
 		if (typeof window === "undefined") throw new HexclaveAssertionError("Hosted OAuth callback URLs require a browser environment to use the current URL as the redirect URI");
 		const currentUrl = new URL(window.location.href);
 		for (const param of oauthCallbackResponseQueryParams) currentUrl.searchParams.delete(param);
@@ -1004,6 +1008,8 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 		return {
 			id: crud.id,
 			displayName: crud.display_name,
+			pushedConfigError: crud.pushed_config_error == null ? null : { message: crud.pushed_config_error.message },
+			configWarnings: crud.config_warnings.map((warning) => ({ message: warning.message })),
 			config: {
 				signUpEnabled: crud.config.sign_up_enabled,
 				credentialEnabled: crud.config.credential_enabled,
@@ -1988,10 +1994,10 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 		return await this._redirectToHandler("mfa", options);
 	}
 	async sendForgotPasswordEmail(email, options) {
-		return await this._interface.sendForgotPasswordEmail(email, options?.callbackUrl ?? constructRedirectUrl(this.urls.passwordReset, "callbackUrl"));
+		return await this._interface.sendForgotPasswordEmail(email, options?.callbackUrl ?? constructRedirectUrl(this._getUrls().passwordReset, "callbackUrl"));
 	}
 	async sendMagicLinkEmail(email, options) {
-		const callbackUrl = options?.callbackUrl ?? constructRedirectUrl(this.urls.magicLinkCallback, "callbackUrl");
+		const callbackUrl = options?.callbackUrl ?? constructRedirectUrl(this._getUrls().magicLinkCallback, "callbackUrl");
 		return await this._executeResultWithBotChallengeFlow({
 			action: "send_magic_link_email",
 			execute: async (challenge) => {
@@ -2131,7 +2137,7 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 			return await this._interface.authorizeOAuth({
 				provider,
 				redirectUrl: constructRedirectUrl(this._getOAuthCallbackRedirectUri(), "redirectUrl"),
-				errorRedirectUrl: constructRedirectUrl(this.urls.error, "errorRedirectUrl"),
+				errorRedirectUrl: constructRedirectUrl(this._getUrls().error, "errorRedirectUrl"),
 				afterCallbackRedirectUrl,
 				type: "authenticate",
 				providerScope: this._oauthScopesOnSignIn[provider]?.join(" "),
@@ -2204,7 +2210,7 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 		if (options.noVerificationCallback && options.verificationCallbackUrl) throw new HexclaveAssertionError("verificationCallbackUrl is not allowed when noVerificationCallback is true");
 		this._ensurePersistentTokenStore();
 		const session = await this._getSession();
-		const emailVerificationRedirectUrl = options.noVerificationCallback ? void 0 : options.verificationCallbackUrl ?? constructRedirectUrl(this.urls.emailVerification, "verificationCallbackUrl");
+		const emailVerificationRedirectUrl = options.noVerificationCallback ? void 0 : options.verificationCallbackUrl ?? constructRedirectUrl(this._getUrls().emailVerification, "verificationCallbackUrl");
 		const executeSignUp = async (challenge) => {
 			let result = await this._interface.signUpWithCredential(options.email, options.password, emailVerificationRedirectUrl, session, this._toInterfaceBotChallengeInput(challenge));
 			if (result.status === "error" && result.error instanceof KnownErrors.RedirectUrlNotWhitelisted && emailVerificationRedirectUrl !== void 0) {
@@ -2298,7 +2304,7 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 		const pollingCode = initResult.polling_code;
 		const loginCode = initResult.login_code;
 		const url = buildCliAuthConfirmUrl({
-			cliAuthConfirmUrl: this.urls.cliAuthConfirm,
+			cliAuthConfirmUrl: this._getUrls().cliAuthConfirm,
 			appUrl: options.appUrl,
 			loginCode
 		});
@@ -2567,6 +2573,7 @@ var _HexclaveClientAppImplIncomplete = class _HexclaveClientAppImplIncomplete {
 			sendRequest: async (path, requestOptions, requestType = "client") => {
 				return await this._interface.sendClientRequest(path, requestOptions, await this._getSession(), requestType);
 			},
+			getUrls: () => this._getUrls(),
 			getRedirectMethod: () => this._redirectMethod ?? throwErr("Redirect method should have been initialized in the Stack client app constructor"),
 			redirectToUrl: async (url, options) => {
 				await this._redirectTo({