@idp.global/catalog 8.0.0 → 8.1.0

package/changelog.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## 2026-11-12 - 8.1.0
+
+### Features
+
+- create a confidential global app from the Platform Apps page (admin)
+  - In the global-admin console, a "New app" action on the Platform Apps page opens a "Create global app" dialog
+    with name, description, app URL, logo URL, a free-text category (at most 256 characters) and the callback,
+    post-logout, scope, grant-type and token-lifetime fields of the configure dialog, validated by the same rules.
+    It always creates a confidential client and has no client-type control.
+  - The dialog says up front that creating a confidential client requires a passkey sign-in within the last
+    5 minutes.
+  - Submitting dispatches `idp-admin-ga-app-create` with an `IIdpAdminGaAppCreateEventDetail`. The first submit
+    freezes the payload: the dialog reopens locked, and a retry dispatches exactly the same values. "Discard and
+    edit" drops the frozen draft, dispatches `idp-admin-ga-app-create-discard` and unlocks the values. After a
+    successful creation the host calls `completeGaAppCreate()` and shows the secret through `oidcClientSecret`,
+    the existing one-time secret notice. A create is refused while a client secret is still displayed.
+  - The admin shell gains a second demo that shows the global-admin Platform Apps page with the action.
+
+### Maintenance
+
+- release tooling currency (tooling)
+  - Replaces the deprecated `@git.zone/tsbuild`, `@git.zone/tsbundle` and `@git.zone/tswatch` with
+    `@git.zone/tsrepo` `^2.1.0`. The scripts run `tsrepo build`, `tsrepo bundle`, `tsrepo watch` and `tsrepo docs`
+    (formerly a global `tsdoc`), and `.smartconfig.json` moves the `@git.zone/tsbundle` and `@git.zone/tswatch`
+    sections to `"@git.zone/tsrepo".bundle` and `.watch`. The build now compiles with the TypeScript 7 native
+    compiler.
+  - `packageManager` pnpm@12.18.0 and `@types/node` `^26.6.6`.
+
 ## 2026-09-29 - 8.0.0
 
 ### Breaking Changes

package/dist_ts_web/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@idp.global/catalog',
-    version: '8.0.0',
+    version: '8.1.0',
     description: 'Web component catalog for idp.global, based on the v5 Apple-system design language.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHNfd2ViLzAwX2NvbW1pdGluZm9fZGF0YS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQTs7R0FFRztBQUNILE1BQU0sQ0FBQyxNQUFNLFVBQVUsR0FBRztJQUN4QixJQUFJLEVBQUUscUJBQXFCO0lBQzNCLE9BQU8sRUFBRSxPQUFPO0lBQ2hCLFdBQVcsRUFBRSxxRkFBcUY7Q0FDbkcsQ0FBQSJ9

package/dist_ts_web/elements/idp-admin-shell.d.ts

@@ -105,6 +105,28 @@ export interface IIdpAdminGaAppConfigureEventDetail {
         refreshTokenLifetime: number;
     };
 }
+/**
+ * Detail of `idp-admin-ga-app-create`: one confidential global OIDC client to create.
+ * The shell freezes these fields at the first submit; every retry dispatches the same
+ * values until the host calls `completeGaAppCreate()` or the admin discards the draft,
+ * which dispatches `idp-admin-ga-app-create-discard`.
+ */
+export interface IIdpAdminGaAppCreateEventDetail {
+    name: string;
+    description: string;
+    logoUrl: string;
+    appUrl: string;
+    category: string;
+    redirectUris: string[];
+    postLogoutRedirectUris: string[];
+    allowedScopes: string[];
+    grantTypes: Array<'authorization_code' | 'refresh_token'>;
+    oidcSettings: {
+        accessTokenLifetime: number;
+        idTokenLifetime: number;
+        refreshTokenLifetime: number;
+    };
+}
 export interface IIdpAdminGaAppRotateSecretEventDetail {
     appId: string;
     gracePeriodSeconds: number;
@@ -327,7 +349,7 @@ export interface IIdpAdminPasskeyEventDetail {
     passkeyId: string;
 }
 export declare class IdpAdminShell extends DeesElement {
-    static demo: () => TemplateResult<1>;
+    static demo: (() => TemplateResult<1>)[];
     static demoGroups: string[];
     static styles: import("@design.estate/dees-element").CSSResult[];
     accessor page: TIdpAdminPage;
@@ -420,6 +442,13 @@ export declare class IdpAdminShell extends DeesElement {
     private accessor dialogIdTokenLifetime;
     private accessor dialogRefreshTokenLifetime;
     private accessor dialogSecretGracePeriod;
+    private accessor dialogAppName;
+    private accessor dialogAppDescription;
+    private accessor dialogAppLogoUrl;
+    private accessor dialogAppUrl;
+    private accessor dialogAppCategory;
+    /** the create payload frozen at its first submit; it outlives the dialog until resolved or discarded */
+    private accessor gaAppCreateSubmission;
     private get safeOrgs();
     private get currentOrg();
     private get userInitials();
@@ -465,11 +494,28 @@ export declare class IdpAdminShell extends DeesElement {
     private openMemberRolesDialog;
     private openAppRoleMappingsDialog;
     private openOidcAppConfigDialog;
+    private openOidcAppCreateDialog;
     private openOidcSecretRotateDialog;
     private parseLines;
     private isValidExactUri;
     private setDialogNumber;
+    /** validates the OIDC client fields the configure and create dialogs share; sets dialogError and returns null when invalid */
+    private validateOidcClientDialogFields;
     private submitOidcAppConfigDialog;
+    /** an HTTPS URL without credentials, as the app stores registered app and logo URLs */
+    private isValidHttpsUrl;
+    /** the app metadata limits idp.global stores: lengths in UTF-16 code units, no control characters */
+    private validateGaAppCreateMetadata;
+    /** only one one-time secret is on screen at a time */
+    private ensureNoDisplayedClientSecret;
+    private submitOidcAppCreateDialog;
+    /** drops the frozen draft and unlocks its values for editing; the next submit is a new creation */
+    private discardOidcAppCreate;
+    /**
+     * The host calls this once `idp-admin-ga-app-create` has created the app (after it set
+     * `oidcClientSecret`): the frozen draft is cleared and an open create dialog closes.
+     */
+    completeGaAppCreate(): void;
     private submitOidcSecretRotateDialog;
     private setDialogRoleField;
     private toggleDialogMemberRole;
@@ -485,6 +531,10 @@ export declare class IdpAdminShell extends DeesElement {
     private renderMemberRolesDialog;
     private renderAppRoleMappingsDialog;
     private renderOidcAppConfigDialog;
+    /** the OIDC client rows the configure and create dialogs share */
+    private renderOidcClientFieldRows;
+    private setDialogAppField;
+    private renderOidcAppCreateDialog;
     private renderOidcSecretRotateDialog;
     private renderCreateOrgDialog;
     private renderLogoutConfirmDialog;