@iblai/iblai-js 1.26.9 → 1.26.10

package/dist/data-layer/security/index.d.ts

@@ -0,0 +1 @@
+export * from '@iblai/web-utils/security';

package/dist/data-layer/security/next.d.ts

@@ -0,0 +1 @@
+export * from '@iblai/web-utils/security/next';

package/dist/playwright/security/index.d.ts

@@ -0,0 +1 @@
+export * from '@iblai/web-utils/security';

package/dist/playwright/security/next.d.ts

@@ -0,0 +1 @@
+export * from '@iblai/web-utils/security/next';

package/dist/security/data-layer/index.d.ts

@@ -0,0 +1 @@
+export * from '@iblai/data-layer';

package/dist/security/index.d.ts

@@ -0,0 +1 @@
+export * from '@iblai/web-utils/security';

package/dist/security/index.esm.js

@@ -0,0 +1,2 @@
+export * from '@iblai/web-utils/security';
+//# sourceMappingURL=index.esm.js.map

package/dist/security/index.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.esm.js","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/security/index.js

@@ -0,0 +1,13 @@
+'use strict';
+
+var security = require('@iblai/web-utils/security');
+
+
+
+Object.keys(security).forEach(function (k) {
+	if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+		enumerable: true,
+		get: function () { return security[k]; }
+	});
+});
+//# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;"}

package/dist/security/next.d.ts

@@ -0,0 +1 @@
+export * from '@iblai/web-utils/security/next';

package/dist/security/next.esm.js

@@ -0,0 +1,2 @@
+export * from '@iblai/web-utils/security/next';
+//# sourceMappingURL=next.esm.js.map

package/dist/security/next.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"next.esm.js","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/security/next.js

@@ -0,0 +1,13 @@
+'use strict';
+
+var next = require('@iblai/web-utils/security/next');
+
+
+
+Object.keys(next).forEach(function (k) {
+	if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+		enumerable: true,
+		get: function () { return next[k]; }
+	});
+});
+//# sourceMappingURL=next.js.map

package/dist/security/next.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"next.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;"}

package/dist/security/playwright/audit-log-helpers.d.ts

@@ -0,0 +1,119 @@
+import { Page } from '@playwright/test';
+/**
+ * Navigate to the Audit tab within the Analytics section.
+ * Assumes the user is already on the analytics page (any tab).
+ */
+export declare function navigateToAuditLog(page: Page): Promise<void>;
+/**
+ * Verify the audit log table is visible with correct headers.
+ */
+export declare function verifyAuditLogTableVisible(page: Page): Promise<void>;
+/**
+ * Get the number of rows currently displayed in the audit log table.
+ * Returns 0 if no table body rows are found.
+ */
+export declare function getAuditLogRowCount(page: Page): Promise<number>;
+/**
+ * Verify that audit log entries contain expected data structure
+ * (person name in first cell, action description in second, timestamp in third).
+ */
+export declare function verifyAuditLogEntryStructure(page: Page): Promise<void>;
+/**
+ * Verify the empty state is displayed when there are no audit log entries.
+ */
+export declare function verifyAuditLogEmptyState(page: Page): Promise<void>;
+/**
+ * Verify the 403 permission error state is displayed.
+ */
+export declare function verifyAuditLogPermissionError(page: Page): Promise<void>;
+/**
+ * Verify the generic error state is displayed.
+ */
+export declare function verifyAuditLogGenericError(page: Page): Promise<void>;
+/**
+ * Verify the loading spinner is displayed while audit logs are being fetched.
+ */
+export declare function verifyAuditLogLoading(page: Page): Promise<void>;
+/**
+ * Wait for the audit log data to finish loading.
+ * Waits for either table data, empty state, or error state to appear.
+ */
+export declare function waitForAuditLogDataLoaded(page: Page, timeout?: number): Promise<void>;
+/**
+ * Filter audit log entries by action type.
+ * @param action - One of 'All Actions', 'Create', 'Update', or 'Delete'
+ */
+export declare function filterByAction(page: Page, action: 'All Actions' | 'Create' | 'Update' | 'Delete'): Promise<void>;
+/**
+ * Filter audit log entries by actor/person using the search combobox.
+ * @param actorName - The username to filter by, or empty string to clear the filter
+ */
+export declare function filterByActor(page: Page, actorName: string): Promise<void>;
+/**
+ * Get the list of actors available in the actor filter dropdown.
+ * Opens the dropdown, reads the options, then closes it.
+ */
+export declare function getAvailableActors(page: Page): Promise<string[]>;
+/**
+ * Open the date range picker and select a date range.
+ * @param fromDate - Start date to select
+ * @param toDate - End date to select
+ */
+export declare function filterByDateRange(page: Page, fromDate: Date, toDate: Date): Promise<void>;
+/**
+ * Clear the date range filter by clicking the date picker and resetting.
+ */
+export declare function clearDateRangeFilter(page: Page): Promise<void>;
+/**
+ * Get the current pagination info text (e.g., "Showing 1 to 20 of 45 results").
+ * Returns null if pagination is not visible.
+ */
+export declare function getPaginationInfo(page: Page): Promise<string | null>;
+/**
+ * Navigate to the next page of audit log results.
+ */
+export declare function goToNextPage(page: Page): Promise<void>;
+/**
+ * Navigate to the previous page of audit log results.
+ */
+export declare function goToPreviousPage(page: Page): Promise<void>;
+/**
+ * Navigate to the first page of audit log results.
+ */
+export declare function goToFirstPage(page: Page): Promise<void>;
+/**
+ * Navigate to the last page of audit log results.
+ * Finds the highest numbered page link in the pagination.
+ */
+export declare function goToLastPage(page: Page): Promise<void>;
+/**
+ * Navigate to a specific page number by clicking its page button.
+ */
+export declare function goToPage(page: Page, pageNumber: number): Promise<void>;
+/**
+ * Verify the current page is highlighted/active in pagination.
+ */
+export declare function verifyCurrentPage(page: Page, expectedPage: number): Promise<void>;
+/**
+ * Check if the next page button is disabled (i.e., we're on the last page).
+ */
+export declare function isOnLastPage(page: Page): Promise<boolean>;
+/**
+ * Check if the previous page button is disabled (i.e., we're on the first page).
+ */
+export declare function isOnFirstPage(page: Page): Promise<boolean>;
+/**
+ * Full workflow: Navigate to audit log tab, wait for data to load,
+ * and verify the table is visible. Use this as a test setup helper.
+ */
+export declare function navigateToAuditLogAndWaitForData(page: Page): Promise<void>;
+/**
+ * Verify audit log entries are displayed after applying action filter.
+ * Returns the row count after filtering.
+ */
+export declare function filterByActionAndVerify(page: Page, action: 'All Actions' | 'Create' | 'Update' | 'Delete'): Promise<number>;
+/**
+ * Verify audit log entries are displayed after applying actor filter.
+ * Returns the row count after filtering.
+ */
+export declare function filterByActorAndVerify(page: Page, actorName: string): Promise<number>;

package/dist/security/playwright/auth-flow-builder.d.ts

@@ -0,0 +1,13 @@
+import { Page } from '@playwright/test';
+import { StepFn } from './helpers';
+export declare class AuthFlowBuilder {
+    flow: string;
+    idp: string;
+    authHost: string;
+    constructor(flow?: string, idp?: string, authHost?: string);
+    run(page: Page, step: StepFn, username: string, password: string, hostUrl: string, authUrl: string, postLoginUrlMatcher?: (url: URL) => boolean): Promise<void>;
+    usernamePasswordFlow(page: Page, username: string, password: string, hostUrl: string, authUrl: string, postLoginUrlMatcher?: (url: URL) => boolean): Promise<void>;
+    magicLinkFlow(page: Page): Promise<void>;
+    ssoFlow(page: Page, username: string, password: string, hostUrl: string, authUrl: string): Promise<void>;
+    directSsoFlow(page: Page, step: StepFn, username: string, password: string, hostUrl: string, authUrl: string): Promise<void>;
+}

package/dist/security/playwright/auth-helpers.d.ts

@@ -0,0 +1,10 @@
+import { Locator, Page } from '@playwright/test';
+export interface SignUpCredentials {
+    email: string;
+    password: string;
+}
+export declare function signUpWithEmailAndPassword(page: Page, authHost: string, postSignUpUrl: string, credentials?: SignUpCredentials, alreadyInSignupPage?: boolean): Promise<void>;
+export declare function loginWithEmailAndPassword(page: Page, username: string, password: string, hostUrl: string, postLoginUrlMatcher?: (url: URL) => boolean): Promise<void>;
+export declare function loginWithMicrosoftIdp(page: Page, username: string, password: string): Promise<void>;
+export declare function canChatWithEmbedMentor(page: Page, openChatButton: Locator): Promise<void>;
+export declare function getMentorIdFromUrl(url: string): string | null;

package/dist/security/playwright/auth-setup.d.ts

@@ -0,0 +1,34 @@
+export interface AuthSetupConfig {
+    /** The app's host URL (e.g., https://mentor.example.com) */
+    hostUrl: string;
+    /** The auth service host URL (e.g., https://auth.example.com) */
+    authHost: string;
+    /** App name used in the login redirect URL (e.g., 'mentor', 'skills') */
+    appName: string;
+    /** Function to match the post-login URL to confirm authentication succeeded */
+    postLoginUrlMatcher: (url: URL) => boolean;
+    /** Auth flow type. Defaults to reading AUTH_FLOW env var or 'username_password' */
+    authFlow?: 'username_password' | 'magic_link' | 'sso' | 'direct_sso';
+    /** Auth IDP name for SSO flows */
+    authIdp?: string;
+}
+/**
+ * Creates a Playwright setup test function for authentication.
+ * Use this as the test body in your auth.setup.ts file:
+ *
+ * ```ts
+ * import { test as setup } from '@iblai/iblai-js/playwright';
+ * import { createAuthSetup } from '@iblai/iblai-js/playwright';
+ *
+ * setup('authenticate', createAuthSetup({
+ *   hostUrl: process.env.MENTOR_NEXTJS_HOST || '',
+ *   authHost: process.env.AUTH_HOST || '',
+ *   appName: 'mentor',
+ *   postLoginUrlMatcher: (url) => url.href.includes('/platform/'),
+ * }));
+ * ```
+ */
+export declare function createAuthSetup(config: AuthSetupConfig): ({ browser, step }: {
+    browser: any;
+    step: any;
+}, testInfo: any) => Promise<void>;

package/dist/security/playwright/billing-tab-helpers.d.ts

@@ -0,0 +1,88 @@
+import { Locator, Page } from '@playwright/test';
+import type { CreditBalancePlan } from './credit-balance-helpers';
+export type BillingAutoRechargeStatus = 'Enabled' | 'Disabled';
+/** Locator for the Plan section card on the BillingTab. */
+export declare function billingPlanSection(page: Page): Locator;
+/** Locator for the Credits section card on the BillingTab. */
+export declare function billingCreditsSection(page: Page): Locator;
+/** Locator for the Auto Recharge section card on the BillingTab.
+ *  This section is only rendered for non-Free plans with a payment method on file.
+ */
+export declare function billingAutoRechargeSection(page: Page): Locator;
+/** Reads the plan label (Free / Trial / Premium) from the Plan section. */
+export declare function getBillingPlanLabel(page: Page): Promise<CreditBalancePlan | null>;
+/** Reads the auto-recharge status badge (Enabled / Disabled) when the section is rendered. */
+export declare function getBillingAutoRechargeStatus(page: Page): Promise<BillingAutoRechargeStatus | null>;
+/** Waits for the BillingTab loading skeletons to clear by waiting for the Plan
+ *  section card to mount. */
+export declare function waitForBillingTabReady(page: Page): Promise<void>;
+/**
+ * Asserts the Plan section state for a given plan. Verifies:
+ *  - The plan label text matches `options.plan`
+ *  - The "Current" pill is visible
+ *  - The Upgrade button is visible iff the plan is not Premium
+ */
+export declare function expectBillingPlanSection(page: Page, options: {
+    plan: CreditBalancePlan;
+}): Promise<void>;
+/**
+ * Asserts the Credits section state. Always verifies the "Available" stat row.
+ * The action button rule mirrors the component:
+ *   - Free plan → no Add Credits / Manage Billing button
+ *   - Non-Free + hasPaymentMethod=true → "Add Credits" visible, "Manage Billing" absent
+ *   - Non-Free + hasPaymentMethod=false → "Manage Billing" visible, "Add Credits" absent
+ *   - Non-Free with hasPaymentMethod omitted → only the "Available" row is asserted
+ */
+export declare function expectBillingCreditsSection(page: Page, options: {
+    plan: CreditBalancePlan;
+    hasPaymentMethod?: boolean;
+}): Promise<void>;
+/**
+ * Asserts the Auto Recharge section visibility. Section is rendered only when
+ * `hasPaymentMethod && !isFreePlan` in the component. Pass `expectVisible: false`
+ * to assert the section is absent. When visible and `status` is provided, also
+ * asserts the Enabled/Disabled badge text.
+ */
+export declare function expectBillingAutoRechargeSection(page: Page, options: {
+    expectVisible: boolean;
+    status?: BillingAutoRechargeStatus;
+}): Promise<void>;
+/**
+ * Free plan: Plan="Free" with Upgrade visible; Credits section has no action;
+ * Auto Recharge section is hidden entirely (regardless of has_payment_method).
+ */
+export declare function expectBillingTabForFreePlan(page: Page): Promise<void>;
+/**
+ * Trial plan: Plan="Trial" with Upgrade visible; Credits action depends on
+ * `hasPaymentMethod` (Add Credits when true, Manage Billing when false);
+ * Auto Recharge section is rendered iff `hasPaymentMethod` is true.
+ */
+export declare function expectBillingTabForTrialPlan(page: Page, options: {
+    hasPaymentMethod: boolean;
+}): Promise<void>;
+/**
+ * Premium plan: Plan="Premium" with Upgrade hidden; Credits action depends on
+ * `hasPaymentMethod` (Add Credits when true, Manage Billing when false);
+ * Auto Recharge section is rendered iff `hasPaymentMethod` is true.
+ */
+export declare function expectBillingTabForPremiumPlan(page: Page, options: {
+    hasPaymentMethod: boolean;
+}): Promise<void>;
+/**
+ * Convenience: detects the active plan from the Plan section badge and runs
+ * the matching state assertions. Returns the detected plan.
+ *
+ * For non-Free plans, pass `hasPaymentMethod` to assert the Credits/Auto Recharge
+ * sub-states; if omitted, only the Plan section + base Credits row is verified.
+ */
+export declare function expectBillingTabForCurrentPlan(page: Page, options?: {
+    hasPaymentMethod?: boolean;
+}): Promise<CreditBalancePlan>;
+/** Clicks the Upgrade button in the Plan section (visible only on non-Premium plans). */
+export declare function clickBillingUpgrade(page: Page): Promise<void>;
+/** Clicks the Add Credits button in the Credits section (non-Free + has payment method). */
+export declare function clickBillingAddCredits(page: Page): Promise<void>;
+/** Clicks the Manage Billing button in the Credits section (non-Free + no payment method). */
+export declare function clickBillingManageBilling(page: Page): Promise<void>;
+/** Clicks the Manage Usage button in the Auto Recharge section. */
+export declare function clickBillingManageUsage(page: Page): Promise<void>;

package/dist/security/playwright/chat-privacy-helpers.d.ts

@@ -0,0 +1,127 @@
+import { Locator, Page } from '@playwright/test';
+/**
+ * Chat-privacy Playwright bindings.
+ *
+ * Three surfaces, three groups of helpers:
+ *
+ *  1. **Header toggle** — the nav-bar `ChatPrivacyToggle` (`<HatGlasses />`
+ *     icon-button that morphs into the "Private Mode" pill).
+ *  2. **User profile** — the "Private Mode" tab in `UserProfileModal`
+ *     (three radio-card options: Normal / Anonymized / Disabled).
+ *  3. **Tenant admin** — the "Allow users to control chat privacy" row in
+ *     the Advanced settings tab (`<Switch>`).
+ *
+ * All selectors target stable hooks — primarily `data-testid` plus the
+ * `data-state` / `data-source` / `aria-pressed` attributes the components
+ * already expose. Avoid asserting on visible copy directly (it changes);
+ * the label maps below are kept for readable assertions on the rare cases
+ * where copy IS the thing we want to lock.
+ */
+export declare const CHAT_PRIVACY_LABELS: {
+    readonly toggle: {
+        /** Title of the mid-session confirmation dialog. */
+        readonly dialogTitle: "Enable Private Mode for this chat?";
+        /** Label on the dialog's confirm button (matches both idle + busy state via regex). */
+        readonly dialogConfirm: RegExp;
+    };
+    readonly profileTab: {
+        /** Tab name in the user profile modal sidebar. */
+        readonly tabName: "Private Mode";
+        /** Section heading inside the tab body. */
+        readonly sectionHeading: "Default Private Mode";
+        /** Label text on each radio card. Kept in case the test wants to assert
+         *  copy explicitly — the click + read paths use the testid instead. */
+        readonly cards: {
+            readonly normal: "Normal";
+            readonly anonymized: "Anonymized";
+            readonly disabled: "Disabled";
+        };
+    };
+    readonly tenantToggle: {
+        /** Visible row label. */
+        readonly rowLabel: "Allow users to control chat privacy";
+    };
+};
+/** The four `effective.source` values the chat-privacy resolver returns. */
+export type ChatPrivacySource = 'mentor' | 'tenant' | 'user' | 'session' | 'default';
+/** The user-pickable modes on the profile tab. */
+export type ChatPrivacyMode = 'normal' | 'anonymized' | 'disabled';
+/** `data-state` on the header toggle. */
+export type ChatPrivacyToggleState = 'on' | 'off';
+/**
+ * Locator for the nav-bar Private-Mode toggle. The toggle is hidden below
+ * the `md` breakpoint — assertions in mobile contexts should use
+ * `expectChatPrivacyToggleVisible(scope, false)`.
+ */
+export declare function getChatPrivacyToggle(scope: Page | Locator): Locator;
+export declare function expectChatPrivacyToggleVisible(scope: Page | Locator, visible: boolean): Promise<void>;
+/**
+ * Assert the toggle is on / off via `data-state` (driven by the resolved
+ * effective mode + the local optimistic overlay).
+ */
+export declare function expectChatPrivacyState(scope: Page | Locator, state: ChatPrivacyToggleState): Promise<void>;
+/**
+ * Assert the resolved precedence-source via `data-source` (mentor / tenant
+ * / user / session / default). Useful for verifying the chat-privacy-
+ * effective endpoint resolved to the expected tier.
+ */
+export declare function expectChatPrivacySource(scope: Page | Locator, source: ChatPrivacySource): Promise<void>;
+/**
+ * Lock state is signalled via `aria-disabled` (the component uses
+ * `aria-disabled` instead of native `disabled` so the source-aware tooltip
+ * stays reachable on the locked pill).
+ */
+export declare function expectChatPrivacyLocked(scope: Page | Locator, locked: boolean): Promise<void>;
+/**
+ * Click the toggle. Covers two scenarios:
+ *  - Off → on (with no user messages) → starts a fresh private session.
+ *  - On (user-initiated, no user messages) → starts a fresh normal session.
+ * Use `confirmEnableChatPrivacyMidSession` for the mid-conversation flow.
+ */
+export declare function clickChatPrivacyToggle(scope: Page | Locator): Promise<void>;
+/** Locator for the AlertDialog content that the mid-session enable opens. */
+export declare function getChatPrivacyConfirmDialog(scope: Page | Locator): Locator;
+export declare function expectChatPrivacyConfirmDialogOpen(scope: Page | Locator, open: boolean): Promise<void>;
+/**
+ * Mid-conversation enable flow:
+ *  1. Click the toggle (opens the confirm dialog).
+ *  2. Click the "Enable Private Mode" action.
+ * The session-level disable-chathistory POST is one-way per spec; the
+ * helper resolves once the dialog closes after a successful confirm.
+ */
+export declare function confirmEnableChatPrivacyMidSession(scope: Page | Locator): Promise<void>;
+/** Cancel the confirm dialog without enabling. */
+export declare function cancelEnableChatPrivacyMidSession(scope: Page | Locator): Promise<void>;
+/**
+ * Switch to the Private Mode tab inside the user profile modal. Assumes
+ * the modal is already open. The tab only appears when the tenant has
+ * `allow_user_chat_privacy_control` on, so a `false` return from
+ * `isPrivateModeTabVisible` is a meaningful state, not an error.
+ */
+export declare function isPrivateModeTabVisible(page: Page): Promise<boolean>;
+export declare function switchToPrivateModeTab(page: Page): Promise<void>;
+/** Locator for one of the three radio cards. */
+export declare function getPrivateModeCard(scope: Page | Locator, mode: ChatPrivacyMode): Locator;
+/**
+ * Pick a mode by clicking its card. Resolves once the card flips into
+ * the selected state via `aria-pressed="true"` — i.e. the mutation came
+ * back and the local pending state caught up.
+ */
+export declare function selectPrivateMode(scope: Page | Locator, mode: ChatPrivacyMode): Promise<void>;
+/** Assert which mode is currently selected. Uses `aria-pressed` + `data-state`. */
+export declare function expectPrivateModeSelected(scope: Page | Locator, mode: ChatPrivacyMode): Promise<void>;
+/** Assert every card is rendered. Useful as a "tab loaded" sanity check. */
+export declare function expectPrivateModeTabReady(scope: Page | Locator): Promise<void>;
+/** Locator for the tenant-wide "Allow users to control chat privacy" switch. */
+export declare function getTenantChatPrivacySwitch(scope: Page | Locator): Locator;
+/** Locator for the surrounding row (useful for scoping label / spinner queries). */
+export declare function getTenantChatPrivacyRow(scope: Page | Locator): Locator;
+export declare function expectTenantChatPrivacyVisible(scope: Page | Locator, visible: boolean): Promise<void>;
+/** Assert the tenant gate's current state via `aria-checked` on the Radix switch. */
+export declare function expectTenantChatPrivacyEnabled(scope: Page | Locator, enabled: boolean): Promise<void>;
+/**
+ * Flip the tenant gate to the desired state. Idempotent — does nothing if
+ * the switch is already in the target state. Backend rejects this for
+ * non-admins (403) and the component surfaces an error toast in that case.
+ */
+export declare function setTenantChatPrivacyEnabled(scope: Page | Locator, enabled: boolean): Promise<void>;