@isi-ui7/bos7-shared 0.2.13 → 0.3.0

package/dist/{index-CPY3DDQN.js → index-1k-PSj-b.js}

@@ -1,8 +1,8 @@
-import { jsx as Ge, jsxs as gt, Fragment as Ri } from "react/jsx-runtime";
-import Mi, { createContext as _n, useState as Ct, useCallback as kt, useEffect as At, useContext as xn, useMemo as Ur } from "react";
-import { createHash as Oi } from "node:crypto";
+import { jsx as Ge, jsxs as gt, Fragment as Mi } from "react/jsx-runtime";
+import Oi, { createContext as _n, useState as Ct, useCallback as kt, useEffect as At, useContext as xn, useMemo as Ur } from "react";
+import { createHash as Ii } from "node:crypto";
 const Sn = _n(null), Cr = "bos7_logout_at";
-function Ii() {
+function Pi() {
   const M = process.env.NEXT_PUBLIC_APP_URL;
   if (M)
     return `${M.replace(/\/+$/, "")}/api/auth/callback`;
@@ -12,7 +12,7 @@ function Ii() {
   }
   return "";
 }
-function Pi() {
+function Ni() {
   const M = process.env.NEXT_PUBLIC_APP_URL;
   if (M)
     return `${M.replace(/\/+$/, "")}/`;
@@ -22,15 +22,15 @@ function Pi() {
   }
   return "/";
 }
-async function Ni() {
+async function ji() {
   const M = new Uint8Array(32);
   return crypto.getRandomValues(M), btoa(String.fromCharCode(...M)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-async function ji(M) {
+async function Di(M) {
   const r = new TextEncoder().encode(M), x = await crypto.subtle.digest("SHA-256", r);
   return btoa(String.fromCharCode(...new Uint8Array(x))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function Di() {
+function Li() {
   const M = new Uint8Array(16);
   return crypto.getRandomValues(M), btoa(String.fromCharCode(...M)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
@@ -39,7 +39,7 @@ function Rr(M) {
   const L = `${M}=`, r = document.cookie.split("; ").find((x) => x.startsWith(L));
   return r ? decodeURIComponent(r.slice(L.length)) : null;
 }
-function Li({ children: M }) {
+function Bi({ children: M }) {
   const [L, r] = Ct({
     isAuthenticated: !1,
     isLoading: !0,
@@ -99,7 +99,7 @@ function Li({ children: M }) {
       const t = process.env.NEXT_PUBLIC_AUTH7_URL, l = process.env.NEXT_PUBLIC_AUTH7_CLIENT_ID;
       if (!t) throw new Error("[bos7] NEXT_PUBLIC_AUTH7_URL env var is required");
       if (!l) throw new Error("[bos7] NEXT_PUBLIC_AUTH7_CLIENT_ID env var is required");
-      const i = await Ni(), s = await ji(i), f = Di(), h = Ii(), u = typeof window < "u" ? window.location.pathname : "/";
+      const i = await ji(), s = await Di(i), f = Li(), h = Pi(), u = typeof window < "u" ? window.location.pathname : "/";
       document.cookie = `auth7_pkce_verifier=${i}; path=/; max-age=600; samesite=lax`, document.cookie = `auth7_oauth_state=${f}; path=/; max-age=600; samesite=lax`, document.cookie = `auth7_return_url=${encodeURIComponent(u)}; path=/; max-age=600; samesite=lax`;
       const p = new URLSearchParams({
         client_id: l,
@@ -119,7 +119,7 @@ function Li({ children: M }) {
     if (!t) throw new Error("[bos7] NEXT_PUBLIC_AUTH7_URL env var is required");
     if (!l) throw new Error("[bos7] NEXT_PUBLIC_AUTH7_CLIENT_ID env var is required");
     await fetch("/api/auth/logout", { method: "POST" }).catch(() => null);
-    const i = `${t}/oauth2/logout?client_id=${l}&post_logout_redirect_uri=${encodeURIComponent(Pi())}`;
+    const i = `${t}/oauth2/logout?client_id=${l}&post_logout_redirect_uri=${encodeURIComponent(Ni())}`;
     window.location.href = i;
   }, []), e = kt(async () => {
     try {
@@ -152,7 +152,7 @@ function En() {
     throw new Error("useAuthContext must be used within AuthProvider");
   return M;
 }
-function Bi() {
+function Fi() {
   const { isAuthenticated: M, isLoading: L, user: r, accessToken: x, error: w, login: c, logout: o, refreshSession: a } = En();
   return {
     isAuthenticated: M,
@@ -173,23 +173,23 @@ function Gt(M) {
 function kn() {
   return typeof window < "u" ? `${window.location.origin}/api/auth/callback` : "";
 }
-async function Fi() {
+async function Ui() {
   const M = new Uint8Array(32);
   return crypto.getRandomValues(M), Zr(M);
 }
-async function Ui(M) {
+async function Hi(M) {
   const r = new TextEncoder().encode(M), x = await crypto.subtle.digest("SHA-256", r);
   return Zr(new Uint8Array(x));
 }
 function Zr(M) {
   return btoa(String.fromCharCode(...M)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function Hi() {
+function zi() {
   const M = new Uint8Array(16);
   return crypto.getRandomValues(M), Zr(M);
 }
-async function ro() {
-  const M = Gt("NEXT_PUBLIC_AUTH7_URL"), L = Gt("AUTH7_CLIENT_ID"), r = await Fi(), x = await Ui(r), w = Hi(), c = kn(), o = "openid profile email roles offline_access", a = new URLSearchParams({
+async function no() {
+  const M = Gt("NEXT_PUBLIC_AUTH7_URL"), L = Gt("AUTH7_CLIENT_ID"), r = await Ui(), x = await Hi(r), w = zi(), c = kn(), o = "openid profile email roles offline_access", a = new URLSearchParams({
     client_id: L,
     redirect_uri: c,
     response_type: "code",
@@ -200,7 +200,7 @@ async function ro() {
   });
   return { url: `${M}/oauth2/authorize?${a.toString()}`, codeVerifier: r, state: w };
 }
-async function no(M, L) {
+async function io(M, L) {
   const r = Gt("NEXT_PUBLIC_AUTH7_URL"), x = Gt("AUTH7_CLIENT_ID"), w = kn(), c = new URLSearchParams({
     grant_type: "authorization_code",
     code: M,
@@ -220,7 +220,7 @@ async function no(M, L) {
   }
   return o.json();
 }
-async function zi(M) {
+async function $i(M) {
   const L = await fetch("/api/auth/refresh", {
     method: "POST",
     headers: {
@@ -238,7 +238,7 @@ async function zi(M) {
     scope: ""
   };
 }
-async function io(M) {
+async function so(M) {
   const L = Gt("NEXT_PUBLIC_AUTH7_URL"), r = Gt("AUTH7_CLIENT_ID"), x = new URLSearchParams({
     token: M,
     token_type_hint: "access_token",
@@ -252,7 +252,7 @@ async function io(M) {
     body: x.toString()
   });
 }
-async function so(M) {
+async function ao(M) {
   const L = await fetch("/api/auth/me", {
     headers: {
       Authorization: `Bearer ${M}`
@@ -262,14 +262,14 @@ async function so(M) {
     throw new Error("Failed to get user info");
   return L.json();
 }
-function $i(M) {
+function Wi(M) {
   return M <= Date.now() + 3e5;
 }
-function Wi(M) {
+function qi(M) {
   const L = Date.now() + M.expires_in * 1e3;
   document.cookie = `access_token=${M.access_token}; path=/; max-age=${M.expires_in}; samesite=lax`, document.cookie = `token_expires_at=${L}; path=/; max-age=${M.expires_in}; samesite=lax`, document.cookie = `token_scope=${M.scope}; path=/; max-age=${M.expires_in}; samesite=lax`, M.refresh_token && (document.cookie = `refresh_token=${M.refresh_token}; path=/; max-age=${8 * 3600}; samesite=lax`), M.id_token && (document.cookie = `id_token=${M.id_token}; path=/; max-age=${M.expires_in}; samesite=lax`);
 }
-function ao() {
+function oo() {
   [
     "access_token",
     "refresh_token",
@@ -291,10 +291,10 @@ function dr() {
   }, L = M("access_token"), r = M("refresh_token"), x = M("token_expires_at"), w = x ? parseInt(x, 10) : 0;
   return { accessToken: L, refreshToken: r, expiresAt: w };
 }
-function oo(M, L, r) {
+function lo(M, L, r) {
   document.cookie = `auth7_pkce_verifier=${M}; path=/; max-age=600; samesite=lax`, document.cookie = `auth7_oauth_state=${L}; path=/; max-age=600; samesite=lax`, document.cookie = `auth7_return_url=${encodeURIComponent(r)}; path=/; max-age=600; samesite=lax`;
 }
-function lo() {
+function uo() {
   const M = (L) => {
     var w;
     const x = `; ${document.cookie}`.split(`; ${L}=`);
@@ -306,16 +306,16 @@ function lo() {
     returnUrl: M("auth7_return_url") ? decodeURIComponent(M("auth7_return_url")) : null
   };
 }
-function uo() {
+function co() {
   document.cookie = "auth7_pkce_verifier=; path=/; max-age=0; samesite=lax", document.cookie = "auth7_oauth_state=; path=/; max-age=0; samesite=lax", document.cookie = "auth7_return_url=; path=/; max-age=0; samesite=lax";
 }
-function co() {
+function fo() {
   const M = En(), [L, r] = Ct(!1), [x, w] = Ct(null);
   At(() => {
     if (!M.isAuthenticated || !M.accessToken)
       return;
     const { expiresAt: o } = dr();
-    if ($i(o)) {
+    if (Wi(o)) {
       r(!0);
       return;
     }
@@ -332,8 +332,8 @@ function co() {
       return;
     }
     try {
-      const a = await zi(o);
-      Wi(a), c();
+      const a = await $i(o);
+      qi(a), c();
     } catch {
       M.logout();
     }
@@ -349,7 +349,7 @@ function co() {
 }
 const bn = process.env.AUTH7_CLIENT_SECRET ?? "";
 let qt = null;
-async function fo() {
+async function ho() {
   const M = process.env.AUTH7_API_URL, L = process.env.AUTH7_CLIENT_ID;
   if (!M) throw new Error("[bos7] AUTH7_API_URL env var is required");
   if (!L) throw new Error("[bos7] AUTH7_CLIENT_ID env var is required");
@@ -382,14 +382,14 @@ async function fo() {
     return console.warn("[auth7:service-account] token request error", x), null;
   }
 }
-function ho() {
+function po() {
   qt = null;
 }
-const qi = process.env.AUTH7_API_URL ?? "http://localhost:8090", Vi = process.env.AUTH7_CLIENT_ID ?? "bos7-portal", gn = process.env.AUTH7_CLIENT_SECRET ?? "", Tn = 256, Tt = /* @__PURE__ */ new Map();
-function Xi(M, L) {
-  return Oi("sha256").update(`${M}:${L}`).digest("hex");
+const Vi = process.env.AUTH7_API_URL ?? "http://localhost:8090", Xi = process.env.AUTH7_CLIENT_ID ?? "bos7-portal", gn = process.env.AUTH7_CLIENT_SECRET ?? "", Tn = 256, Tt = /* @__PURE__ */ new Map();
+function Ki(M, L) {
+  return Ii("sha256").update(`${M}:${L}`).digest("hex");
 }
-function Ki() {
+function Gi() {
   const M = Date.now();
   for (const [L, r] of Tt)
     r.expiresAt <= M && Tt.delete(L);
@@ -398,18 +398,18 @@ function Ki() {
     L !== void 0 && Tt.delete(L);
   }
 }
-function po() {
+function mo() {
   Tt.clear();
 }
 async function Jr(M, L, r, x = {}) {
-  const { failClosed: w = !1 } = x, c = Xi(M, L), o = Tt.get(c);
+  const { failClosed: w = !1 } = x, c = Ki(M, L), o = Tt.get(c);
   if (o && o.expiresAt > Date.now())
     return o.result;
   if (!gn) {
     if (w) throw new Error("[auth7:token-exchange] AUTH7_CLIENT_SECRET not configured; fail-closed mode active");
     return { accessToken: M, expiresIn: 900, scope: r ?? "" };
   }
-  const a = Buffer.from(`${Vi}:${gn}`).toString("base64");
+  const a = Buffer.from(`${Xi}:${gn}`).toString("base64");
   try {
     const n = new URLSearchParams({
       grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
@@ -419,7 +419,7 @@ async function Jr(M, L, r, x = {}) {
       audience: L
     });
     r && n.set("scope", r);
-    const e = await fetch(`${qi}/oauth2/token`, {
+    const e = await fetch(`${Vi}/oauth2/token`, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded",
@@ -445,14 +445,14 @@ async function Jr(M, L, r, x = {}) {
       expiresIn: t.expires_in,
       scope: t.scope ?? r ?? ""
     };
-    return Tt.size >= Tn && Ki(), Tt.set(c, { result: l, expiresAt: Date.now() + (t.expires_in - 30) * 1e3 }), l;
+    return Tt.size >= Tn && Gi(), Tt.set(c, { result: l, expiresAt: Date.now() + (t.expires_in - 30) * 1e3 }), l;
   } catch (n) {
     if (console.warn("[auth7:token-exchange] error", n), w) throw n instanceof Error ? n : new Error("[auth7:token-exchange] unexpected error");
     return { accessToken: M, expiresIn: 900, scope: r ?? "" };
   }
 }
-const Gi = process.env.BACKEND_URL ?? "";
-function Yi(M) {
+const Yi = process.env.BACKEND_URL ?? "";
+function Zi(M) {
   const L = M.split(".");
   if (L.length < 2) return {};
   try {
@@ -461,8 +461,8 @@ function Yi(M) {
     return {};
   }
 }
-function Zi(M) {
-  const L = Yi(M), r = (x) => typeof x == "string" ? x : "";
+function Ji(M) {
+  const L = Zi(M), r = (x) => typeof x == "string" ? x : "";
   return {
     "X-Actor-UserID": r(L.sub),
     "X-Actor-Username": r(L.preferred_username),
@@ -493,8 +493,8 @@ async function fr(M, L, r, x, w, c = {}) {
     }
   return a.status === 204 || a.headers.get("content-length") === "0" ? { ok: !0 } : { ok: !0, data: await a.json() };
 }
-async function mo(M, L, r = {}) {
-  const { backendUrl: x = Gi, ...w } = r, { accessToken: c } = await Jr(M, L, void 0, w), o = Zi(M);
+async function bo(M, L, r = {}) {
+  const { backendUrl: x = Yi, ...w } = r, { accessToken: c } = await Jr(M, L, void 0, w), o = Ji(M);
   return {
     get: (a, n) => fr("GET", a, c, x, o, { query: n }),
     post: (a, n) => fr("POST", a, c, x, o, { body: n }),
@@ -502,7 +502,7 @@ async function mo(M, L, r = {}) {
     delete: (a) => fr("DELETE", a, c, x, o)
   };
 }
-const bo = {
+const go = {
   ACCESS_TOKEN: "access_token",
   REFRESH_TOKEN: "refresh_token",
   ID_TOKEN: "id_token",
@@ -511,20 +511,20 @@ const bo = {
   PKCE_VERIFIER: "auth7_pkce_verifier",
   OAUTH_STATE: "auth7_oauth_state",
   OAUTH_RETURN_URL: "auth7_return_url"
-}, go = {
+}, yo = {
   AUTHORIZE: "/oauth2/authorize",
   TOKEN: "/oauth2/token",
   REVOKE: "/oauth2/revoke",
   LOGOUT: "/oauth2/logout",
   USERINFO: "/oauth2/userinfo"
-}, yo = {
+}, vo = {
   OPENID: "openid",
   PROFILE: "profile",
   EMAIL: "email",
   ROLES: "roles"
 };
 var Ze = typeof globalThis < "u" ? globalThis : typeof window < "u" ? window : typeof global < "u" ? global : typeof self < "u" ? self : {};
-function Ji(M) {
+function Qi(M) {
   return M && M.__esModule && Object.prototype.hasOwnProperty.call(M, "default") ? M.default : M;
 }
 var Hr = { exports: {} }, An = {}, Qr = {}, Cn = {};
@@ -1373,23 +1373,23 @@ var Bn = {};
     }
   }
 })(Bn);
-var mr = {}, rn = Object.defineProperty, Qi = Object.getOwnPropertyDescriptor, es = Object.getOwnPropertyNames, ts = Object.prototype.hasOwnProperty, rs = (M, L) => {
+var mr = {}, rn = Object.defineProperty, es = Object.getOwnPropertyDescriptor, ts = Object.getOwnPropertyNames, rs = Object.prototype.hasOwnProperty, ns = (M, L) => {
   for (var r in L)
     rn(M, r, { get: L[r], enumerable: !0 });
-}, ns = (M, L, r, x) => {
+}, is = (M, L, r, x) => {
   if (L && typeof L == "object" || typeof L == "function")
-    for (let w of es(L))
-      !ts.call(M, w) && w !== r && rn(M, w, { get: () => L[w], enumerable: !(x = Qi(L, w)) || x.enumerable });
+    for (let w of ts(L))
+      !rs.call(M, w) && w !== r && rn(M, w, { get: () => L[w], enumerable: !(x = es(L, w)) || x.enumerable });
   return M;
-}, is = (M) => ns(rn({}, "__esModule", { value: !0 }), M), Fn = {};
-rs(Fn, {
-  RequestCookies: () => hs,
-  ResponseCookies: () => ds,
+}, ss = (M) => is(rn({}, "__esModule", { value: !0 }), M), Fn = {};
+ns(Fn, {
+  RequestCookies: () => ds,
+  ResponseCookies: () => ps,
   parseCookie: () => nn,
   parseSetCookie: () => Un,
   stringifyCookie: () => rr
 });
-var ss = is(Fn);
+var as = ss(Fn);
 function rr(M) {
   var L;
   const r = [
@@ -1449,28 +1449,28 @@ function Un(M) {
     ...o && { httpOnly: !0 },
     ...typeof a == "string" && { maxAge: Number(a) },
     path: n,
-    ...e && { sameSite: ls(e) },
+    ...e && { sameSite: us(e) },
     ...t && { secure: !0 },
-    ...i && { priority: cs(i) },
+    ...i && { priority: fs(i) },
     ...l && { partitioned: !0 }
   };
-  return as(s);
+  return os(s);
 }
-function as(M) {
+function os(M) {
   const L = {};
   for (const r in M)
     M[r] && (L[r] = M[r]);
   return L;
 }
-var os = ["strict", "lax", "none"];
-function ls(M) {
-  return M = M.toLowerCase(), os.includes(M) ? M : void 0;
-}
-var us = ["low", "medium", "high"];
-function cs(M) {
-  return M = M.toLowerCase(), us.includes(M) ? M : void 0;
+var ls = ["strict", "lax", "none"];
+function us(M) {
+  return M = M.toLowerCase(), ls.includes(M) ? M : void 0;
 }
+var cs = ["low", "medium", "high"];
 function fs(M) {
+  return M = M.toLowerCase(), cs.includes(M) ? M : void 0;
+}
+function hs(M) {
   if (!M)
     return [];
   var L = [], r = 0, x, w, c, o, a;
@@ -1494,7 +1494,7 @@ function fs(M) {
   }
   return L;
 }
-var hs = class {
+var ds = class {
   constructor(M) {
     this._parsed = /* @__PURE__ */ new Map(), this._headers = M;
     const L = M.get("cookie");
@@ -1560,12 +1560,12 @@ var hs = class {
   toString() {
     return [...this._parsed.values()].map((M) => `${M.name}=${encodeURIComponent(M.value)}`).join("; ");
   }
-}, ds = class {
+}, ps = class {
   constructor(M) {
     this._parsed = /* @__PURE__ */ new Map();
     var L, r, x;
     this._headers = M;
-    const w = (x = (r = (L = M.getSetCookie) == null ? void 0 : L.call(M)) != null ? r : M.get("set-cookie")) != null ? x : [], c = Array.isArray(w) ? w : fs(w);
+    const w = (x = (r = (L = M.getSetCookie) == null ? void 0 : L.call(M)) != null ? r : M.get("set-cookie")) != null ? x : [], c = Array.isArray(w) ? w : hs(w);
     for (const o of c) {
       const a = Un(o);
       a && this._parsed.set(a.name, a);
@@ -1597,7 +1597,7 @@ var hs = class {
    */
   set(...M) {
     const [L, r, x] = M.length === 1 ? [M[0].name, M[0].value, M[0]] : M, w = this._parsed;
-    return w.set(L, ms({ name: L, value: r, ...x })), ps(w, this._headers), this;
+    return w.set(L, bs({ name: L, value: r, ...x })), ms(w, this._headers), this;
   }
   /**
    * {@link https://wicg.github.io/cookie-store/#CookieStore-delete CookieStore#delete} without the Promise.
@@ -1613,14 +1613,14 @@ var hs = class {
     return [...this._parsed.values()].map(rr).join("; ");
   }
 };
-function ps(M, L) {
+function ms(M, L) {
   L.delete("set-cookie");
   for (const [, r] of M) {
     const x = rr(r);
     L.append("set-cookie", x);
   }
 }
-function ms(M = { name: "", value: "" }) {
+function bs(M = { name: "", value: "" }) {
   return typeof M.expires == "number" && (M.expires = new Date(M.expires)), M.maxAge && (M.expires = new Date(Date.now() + M.maxAge * 1e3)), (M.path === null || M.path === void 0) && (M.path = "/"), M;
 }
 (function(M) {
@@ -1644,7 +1644,7 @@ function ms(M = { name: "", value: "" }) {
       return r.stringifyCookie;
     }
   });
-  const r = ss;
+  const r = as;
 })(mr);
 (function(M) {
   Object.defineProperty(M, "__esModule", {
@@ -1978,7 +1978,7 @@ var zr = {}, Wn = { exports: {} };
   var x = r(226);
   Wn.exports = x;
 })();
-var bs = Wn.exports;
+var gs = Wn.exports;
 (function(M) {
   Object.defineProperty(M, "__esModule", {
     value: !0
@@ -2000,7 +2000,7 @@ var bs = Wn.exports;
       return c;
     }
   });
-  const r = /* @__PURE__ */ x(bs);
+  const r = /* @__PURE__ */ x(gs);
   function x(a) {
     return a && a.__esModule ? a : {
       default: a
@@ -2246,7 +2246,7 @@ var $r = { exports: {} };
   ], s = "_rsc", f = "x-nextjs-stale-time", h = "x-nextjs-postponed", u = "x-nextjs-rewritten-path", p = "x-nextjs-rewritten-query", d = "x-nextjs-prerender", v = "x-nextjs-action-not-found", S = "x-nextjs-request-id", C = "x-nextjs-html-request-id", j = "x-action-revalidated";
   (typeof L.default == "function" || typeof L.default == "object" && L.default !== null) && typeof L.default.__esModule > "u" && (Object.defineProperty(L.default, "__esModule", { value: !0 }), Object.assign(L.default, L), M.exports = L.default);
 })($r, $r.exports);
-var gs = $r.exports, Er = {};
+var ys = $r.exports, Er = {};
 (function(M) {
   Object.defineProperty(M, "__esModule", {
     value: !0
@@ -2307,7 +2307,7 @@ var gs = $r.exports, Er = {};
       return r.workUnitAsyncStorageInstance;
     }
   });
-  const r = Yn, x = gs, w = Er;
+  const r = Yn, x = ys, w = Er;
   function c(h) {
     throw Object.defineProperty(new Error(`\`${h}\` was called outside a request scope. Read more: https://nextjs.org/docs/messages/next-dynamic-api-wrong-context`), "__NEXT_ERROR_CODE", {
       value: "E251",
@@ -2471,7 +2471,7 @@ var Zn = {}, Wr = { exports: {} };
   }
   (typeof L.default == "function" || typeof L.default == "object" && L.default !== null) && typeof L.default.__esModule > "u" && (Object.defineProperty(L.default, "__esModule", { value: !0 }), Object.assign(L.default, L), M.exports = L.default);
 })(Wr, Wr.exports);
-var ys = Wr.exports, qr = { exports: {} };
+var vs = Wr.exports, qr = { exports: {} };
 (function(M, L) {
   Object.defineProperty(L, "__esModule", {
     value: !0
@@ -2758,7 +2758,7 @@ var ei = {};
       return $;
     }
   });
-  const r = /* @__PURE__ */ i(Mi), x = ys, w = an, c = sn, o = xr, a = on, n = Jn, e = Qn, t = ei, l = Er;
+  const r = /* @__PURE__ */ i(Oi), x = vs, w = an, c = sn, o = xr, a = on, n = Jn, e = Qn, t = ei, l = Er;
   function i(Y) {
     return Y && Y.__esModule ? Y : {
       default: Y
@@ -3492,10 +3492,10 @@ var ii = {}, si = {};
 })(Hr, Hr.exports);
 var Dt = Hr.exports;
 const Mr = "bos7";
-function vo(M) {
+function wo(M) {
   return M.nextUrl.pathname.toLowerCase().includes("/approve") ? "approve" : M.method === "GET" || M.method === "HEAD" ? "read" : "write";
 }
-function vs(M) {
+function ws(M) {
   var r;
   const L = (r = M.cookies.get("access_token")) == null ? void 0 : r.value;
   if (!L) return [];
@@ -3508,19 +3508,19 @@ function vs(M) {
     return [];
   }
 }
-function wo(M, L) {
-  const r = vs(M), x = `${Mr}:${L}`;
+function _o(M, L) {
+  const r = ws(M), x = `${Mr}:${L}`;
   return (r.includes(`${Mr}:approve`) || L === "read" && r.includes(`${Mr}:write`) ? !0 : r.includes(x)) ? null : Dt.NextResponse.json(
     { error: { code: "INSUFFICIENT_SCOPE", message: `required scope: ${x}` } },
     { status: 403 }
   );
 }
-function ws(M) {
+function _s(M) {
   const L = M.split(":")[0], r = L.split(".");
   if (!(r.length < 2 || L === "localhost"))
     return "." + r.slice(-2).join(".");
 }
-async function _o(M, L) {
+async function xo(M, L) {
   var l;
   const r = (l = M.cookies.get("access_token")) == null ? void 0 : l.value;
   if (!r)
@@ -3575,7 +3575,7 @@ async function _o(M, L) {
   });
   const t = x.branch_id ?? c.branch_id;
   if (t) {
-    const s = (L.branchCookieDomain ?? ws)(M.headers.get("host") || "");
+    const s = (L.branchCookieDomain ?? _s)(M.headers.get("host") || "");
     s && o.cookies.set("bos7_branch", t, {
       httpOnly: !1,
       secure: a,
@@ -3587,10 +3587,10 @@ async function _o(M, L) {
   }
   return o;
 }
-function xo({ children: M }) {
+function So({ children: M }) {
   return /* @__PURE__ */ Ge("div", { className: "page", children: M });
 }
-function So({
+function Eo({
   title: M,
   subtitle: L,
   titleExtra: r,
@@ -3612,31 +3612,31 @@ function So({
     w && /* @__PURE__ */ Ge("div", { className: "page__actions", children: w })
   ] });
 }
-function Eo({ children: M }) {
+function ko({ children: M }) {
   return /* @__PURE__ */ Ge("div", { className: "page__body", children: M });
 }
-function ko({
+function To({
   children: M,
   spread: L = !1
 }) {
   return /* @__PURE__ */ Ge("div", { className: `page__footer${L ? " page__footer--spread" : ""}`, children: M });
 }
 const ln = crypto, ai = (M) => M instanceof CryptoKey, Kt = new TextEncoder(), Vr = new TextDecoder();
-function _s(...M) {
+function xs(...M) {
   const L = M.reduce((w, { length: c }) => w + c, 0), r = new Uint8Array(L);
   let x = 0;
   for (const w of M)
     r.set(w, x), x += w.length;
   return r;
 }
-const xs = (M) => {
+const Ss = (M) => {
   let L = M;
   typeof L == "string" && (L = Kt.encode(L));
   const r = 32768, x = [];
   for (let w = 0; w < L.length; w += r)
     x.push(String.fromCharCode.apply(null, L.subarray(w, w + r)));
   return btoa(x.join(""));
-}, Or = (M) => xs(M).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_"), Ss = (M) => {
+}, Or = (M) => Ss(M).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_"), Es = (M) => {
   const L = atob(M), r = new Uint8Array(L.length);
   for (let x = 0; x < L.length; x++)
     r[x] = L.charCodeAt(x);
@@ -3645,7 +3645,7 @@ const xs = (M) => {
   let L = M;
   L instanceof Uint8Array && (L = Vr.decode(L)), L = L.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
   try {
-    return Ss(L);
+    return Es(L);
   } catch {
     throw new TypeError("The input to be decoded is not correctly encoded.");
   }
@@ -3657,42 +3657,42 @@ class vt extends Error {
   }
 }
 vt.code = "ERR_JOSE_GENERIC";
-class Es extends vt {
+class ks extends vt {
   constructor(L, r, x = "unspecified", w = "unspecified") {
     super(L, { cause: { claim: x, reason: w, payload: r } }), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = x, this.reason = w, this.payload = r;
   }
 }
-Es.code = "ERR_JWT_CLAIM_VALIDATION_FAILED";
-class ks extends vt {
+ks.code = "ERR_JWT_CLAIM_VALIDATION_FAILED";
+class Ts extends vt {
   constructor(L, r, x = "unspecified", w = "unspecified") {
     super(L, { cause: { claim: x, reason: w, payload: r } }), this.code = "ERR_JWT_EXPIRED", this.claim = x, this.reason = w, this.payload = r;
   }
 }
-ks.code = "ERR_JWT_EXPIRED";
-class Ts extends vt {
+Ts.code = "ERR_JWT_EXPIRED";
+class As extends vt {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_ALG_NOT_ALLOWED";
   }
 }
-Ts.code = "ERR_JOSE_ALG_NOT_ALLOWED";
+As.code = "ERR_JOSE_ALG_NOT_ALLOWED";
 class Lt extends vt {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_NOT_SUPPORTED";
   }
 }
 Lt.code = "ERR_JOSE_NOT_SUPPORTED";
-class As extends vt {
+class Cs extends vt {
   constructor(L = "decryption operation failed", r) {
     super(L, r), this.code = "ERR_JWE_DECRYPTION_FAILED";
   }
 }
-As.code = "ERR_JWE_DECRYPTION_FAILED";
-class Cs extends vt {
+Cs.code = "ERR_JWE_DECRYPTION_FAILED";
+class Rs extends vt {
   constructor() {
     super(...arguments), this.code = "ERR_JWE_INVALID";
   }
 }
-Cs.code = "ERR_JWE_INVALID";
+Rs.code = "ERR_JWE_INVALID";
 class Vt extends vt {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_INVALID";
@@ -3705,42 +3705,42 @@ class oi extends vt {
   }
 }
 oi.code = "ERR_JWT_INVALID";
-class Rs extends vt {
+class Ms extends vt {
   constructor() {
     super(...arguments), this.code = "ERR_JWK_INVALID";
   }
 }
-Rs.code = "ERR_JWK_INVALID";
-class Ms extends vt {
+Ms.code = "ERR_JWK_INVALID";
+class Os extends vt {
   constructor() {
     super(...arguments), this.code = "ERR_JWKS_INVALID";
   }
 }
-Ms.code = "ERR_JWKS_INVALID";
-class Os extends vt {
+Os.code = "ERR_JWKS_INVALID";
+class Is extends vt {
   constructor(L = "no applicable key found in the JSON Web Key Set", r) {
     super(L, r), this.code = "ERR_JWKS_NO_MATCHING_KEY";
   }
 }
-Os.code = "ERR_JWKS_NO_MATCHING_KEY";
-class Is extends vt {
+Is.code = "ERR_JWKS_NO_MATCHING_KEY";
+class Ps extends vt {
   constructor(L = "multiple matching keys found in the JSON Web Key Set", r) {
     super(L, r), this.code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
   }
 }
-Is.code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
-class Ps extends vt {
+Ps.code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
+class Ns extends vt {
   constructor(L = "request timed out", r) {
     super(L, r), this.code = "ERR_JWKS_TIMEOUT";
   }
 }
-Ps.code = "ERR_JWKS_TIMEOUT";
-class Ns extends vt {
+Ns.code = "ERR_JWKS_TIMEOUT";
+class js extends vt {
   constructor(L = "signature verification failed", r) {
     super(L, r), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
   }
 }
-Ns.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+js.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
 function St(M, L = "algorithm.name") {
   return new TypeError(`CryptoKey does not support this operation, its ${L} must be ${M}`);
 }
@@ -3750,7 +3750,7 @@ function Zt(M, L) {
 function Ir(M) {
   return parseInt(M.name.slice(4), 10);
 }
-function js(M) {
+function Ds(M) {
   switch (M) {
     case "ES256":
       return "P-256";
@@ -3762,7 +3762,7 @@ function js(M) {
       throw new Error("unreachable");
   }
 }
-function Ds(M, L) {
+function Ls(M, L) {
   if (L.length && !L.some((r) => M.usages.includes(r))) {
     let r = "CryptoKey does not support this operation, its usages must include ";
     if (L.length > 2) {
@@ -3772,7 +3772,7 @@ function Ds(M, L) {
     throw new TypeError(r);
   }
 }
-function Ls(M, L, ...r) {
+function Bs(M, L, ...r) {
   switch (L) {
     case "HS256":
     case "HS384":
@@ -3819,7 +3819,7 @@ function Ls(M, L, ...r) {
     case "ES512": {
       if (!Zt(M.algorithm, "ECDSA"))
         throw St("ECDSA");
-      const x = js(L);
+      const x = Ds(L);
       if (M.algorithm.namedCurve !== x)
         throw St(x, "algorithm.namedCurve");
       break;
@@ -3827,7 +3827,7 @@ function Ls(M, L, ...r) {
     default:
       throw new TypeError("CryptoKey does not support this operation");
   }
-  Ds(M, r);
+  Ls(M, r);
 }
 function li(M, L, ...r) {
   var x;
@@ -3841,7 +3841,7 @@ const yn = (M, ...L) => li("Key must be ", M, ...L);
 function ui(M, L, ...r) {
   return li(`Key for the ${M} algorithm must be `, L, ...r);
 }
-const ci = (M) => ai(M) ? !0 : (M == null ? void 0 : M[Symbol.toStringTag]) === "KeyObject", br = ["CryptoKey"], Bs = (...M) => {
+const ci = (M) => ai(M) ? !0 : (M == null ? void 0 : M[Symbol.toStringTag]) === "KeyObject", br = ["CryptoKey"], Fs = (...M) => {
   const L = M.filter(Boolean);
   if (L.length === 0 || L.length === 1)
     return !0;
@@ -3860,11 +3860,11 @@ const ci = (M) => ai(M) ? !0 : (M == null ? void 0 : M[Symbol.toStringTag]) ===
   }
   return !0;
 };
-function Fs(M) {
+function Us(M) {
   return typeof M == "object" && M !== null;
 }
 function fi(M) {
-  if (!Fs(M) || Object.prototype.toString.call(M) !== "[object Object]")
+  if (!Us(M) || Object.prototype.toString.call(M) !== "[object Object]")
     return !1;
   if (Object.getPrototypeOf(M) === null)
     return !0;
@@ -3873,7 +3873,7 @@ function fi(M) {
     L = Object.getPrototypeOf(L);
   return Object.getPrototypeOf(M) === L;
 }
-const Us = (M, L) => {
+const Hs = (M, L) => {
   if (M.startsWith("RS") || M.startsWith("PS")) {
     const { modulusLength: r } = L.algorithm;
     if (typeof r != "number" || r < 2048)
@@ -3883,16 +3883,16 @@ const Us = (M, L) => {
 function nr(M) {
   return fi(M) && typeof M.kty == "string";
 }
-function Hs(M) {
+function zs(M) {
   return M.kty !== "oct" && typeof M.d == "string";
 }
-function zs(M) {
+function $s(M) {
   return M.kty !== "oct" && typeof M.d > "u";
 }
-function $s(M) {
+function Ws(M) {
   return nr(M) && M.kty === "oct" && typeof M.k == "string";
 }
-function Ws(M) {
+function qs(M) {
   let L, r;
   switch (M.kty) {
     case "RSA": {
@@ -3967,10 +3967,10 @@ function Ws(M) {
   }
   return { algorithm: L, keyUsages: r };
 }
-const qs = async (M) => {
+const Vs = async (M) => {
   if (!M.alg)
     throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  const { algorithm: L, keyUsages: r } = Ws(M), x = [
+  const { algorithm: L, keyUsages: r } = qs(M), x = [
     L,
     M.ext ?? !1,
     M.key_ops ?? r
@@ -3982,21 +3982,21 @@ const di = (M) => (M == null ? void 0 : M[Symbol.toStringTag]) === "KeyObject",
   let c = M.get(L);
   if (c != null && c[x])
     return c[x];
-  const o = await qs({ ...r, alg: x });
+  const o = await Vs({ ...r, alg: x });
   return w && Object.freeze(L), c ? c[x] = o : M.set(L, { [x]: o }), o;
-}, Vs = (M, L) => {
+}, Xs = (M, L) => {
   if (di(M)) {
     let r = M.export({ format: "jwk" });
     return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? hi(r.k) : (Wt || (Wt = /* @__PURE__ */ new WeakMap()), gr(Wt, M, r, L));
   }
   return nr(M) ? M.k ? un(M.k) : (Wt || (Wt = /* @__PURE__ */ new WeakMap()), gr(Wt, M, M, L, !0)) : M;
-}, Xs = (M, L) => {
+}, Ks = (M, L) => {
   if (di(M)) {
     let r = M.export({ format: "jwk" });
     return r.k ? hi(r.k) : ($t || ($t = /* @__PURE__ */ new WeakMap()), gr($t, M, r, L));
   }
   return nr(M) ? M.k ? un(M.k) : ($t || ($t = /* @__PURE__ */ new WeakMap()), gr($t, M, M, L, !0)) : M;
-}, Ks = { normalizePublicKey: Vs, normalizePrivateKey: Xs }, Xt = (M) => M == null ? void 0 : M[Symbol.toStringTag], Xr = (M, L, r) => {
+}, Gs = { normalizePublicKey: Xs, normalizePrivateKey: Ks }, Xt = (M) => M == null ? void 0 : M[Symbol.toStringTag], Xr = (M, L, r) => {
   var x, w;
   if (L.use !== void 0 && L.use !== "sig")
     throw new TypeError("Invalid key for this operation, when present its use must be sig");
@@ -4005,10 +4005,10 @@ const di = (M) => (M == null ? void 0 : M[Symbol.toStringTag]) === "KeyObject",
   if (L.alg !== void 0 && L.alg !== M)
     throw new TypeError(`Invalid key for this operation, when present its alg must be ${M}`);
   return !0;
-}, Gs = (M, L, r, x) => {
+}, Ys = (M, L, r, x) => {
   if (!(L instanceof Uint8Array)) {
     if (x && nr(L)) {
-      if ($s(L) && Xr(M, L, r))
+      if (Ws(L) && Xr(M, L, r))
         return;
       throw new TypeError('JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present');
     }
@@ -4017,15 +4017,15 @@ const di = (M) => (M == null ? void 0 : M[Symbol.toStringTag]) === "KeyObject",
     if (L.type !== "secret")
       throw new TypeError(`${Xt(L)} instances for symmetric algorithms must be of type "secret"`);
   }
-}, Ys = (M, L, r, x) => {
+}, Zs = (M, L, r, x) => {
   if (x && nr(L))
     switch (r) {
       case "sign":
-        if (Hs(L) && Xr(M, L, r))
+        if (zs(L) && Xr(M, L, r))
           return;
         throw new TypeError("JSON Web Key for this operation be a private JWK");
       case "verify":
-        if (zs(L) && Xr(M, L, r))
+        if ($s(L) && Xr(M, L, r))
           return;
         throw new TypeError("JSON Web Key for this operation be a public JWK");
     }
@@ -4043,11 +4043,11 @@ const di = (M) => (M == null ? void 0 : M[Symbol.toStringTag]) === "KeyObject",
     throw new TypeError(`${Xt(L)} instances for asymmetric algorithm encryption must be of type "public"`);
 };
 function pi(M, L, r, x) {
-  L.startsWith("HS") || L === "dir" || L.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(L) ? Gs(L, r, x, M) : Ys(L, r, x, M);
+  L.startsWith("HS") || L === "dir" || L.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(L) ? Ys(L, r, x, M) : Zs(L, r, x, M);
 }
 pi.bind(void 0, !1);
-const Zs = pi.bind(void 0, !0);
-function Js(M, L, r, x, w) {
+const Js = pi.bind(void 0, !0);
+function Qs(M, L, r, x, w) {
   if (w.crit !== void 0 && (x == null ? void 0 : x.crit) === void 0)
     throw new M('"crit" (Critical) Header Parameter MUST be integrity protected');
   if (!x || x.crit === void 0)
@@ -4066,7 +4066,7 @@ function Js(M, L, r, x, w) {
   }
   return new Set(x.crit);
 }
-function Qs(M, L) {
+function ea(M, L) {
   const r = `SHA-${M.slice(-3)}`;
   switch (M) {
     case "HS256":
@@ -4093,9 +4093,9 @@ function Qs(M, L) {
       throw new Lt(`alg ${M} is not supported either by JOSE or your javascript runtime`);
   }
 }
-async function ea(M, L, r) {
-  if (L = await Ks.normalizePrivateKey(L, M), ai(L))
-    return Ls(L, M, r), L;
+async function ta(M, L, r) {
+  if (L = await Gs.normalizePrivateKey(L, M), ai(L))
+    return Bs(L, M, r), L;
   if (L instanceof Uint8Array) {
     if (!M.startsWith("HS"))
       throw new TypeError(yn(L, ...br));
@@ -4103,8 +4103,8 @@ async function ea(M, L, r) {
   }
   throw new TypeError(yn(L, ...br, "Uint8Array", "JSON Web Key"));
 }
-const Nt = (M) => Math.floor(M.getTime() / 1e3), mi = 60, bi = mi * 60, cn = bi * 24, ta = cn * 7, ra = cn * 365.25, na = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, Pr = (M) => {
-  const L = na.exec(M);
+const Nt = (M) => Math.floor(M.getTime() / 1e3), mi = 60, bi = mi * 60, cn = bi * 24, ra = cn * 7, na = cn * 365.25, ia = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, Pr = (M) => {
+  const L = ia.exec(M);
   if (!L || L[4] && L[1])
     throw new TypeError("Invalid time period format");
   const r = parseFloat(L[2]), x = L[3].toLowerCase();
@@ -4139,20 +4139,20 @@ const Nt = (M) => Math.floor(M.getTime() / 1e3), mi = 60, bi = mi * 60, cn = bi
     case "week":
     case "weeks":
     case "w":
-      w = Math.round(r * ta);
+      w = Math.round(r * ra);
       break;
     default:
-      w = Math.round(r * ra);
+      w = Math.round(r * na);
       break;
   }
   return L[1] === "-" || L[4] === "ago" ? -w : w;
-}, ia = async (M, L, r) => {
-  const x = await ea(M, L, "sign");
-  Us(M, x);
-  const w = await ln.subtle.sign(Qs(M, x.algorithm), x, r);
+}, sa = async (M, L, r) => {
+  const x = await ta(M, L, "sign");
+  Hs(M, x);
+  const w = await ln.subtle.sign(ea(M, x.algorithm), x, r);
   return new Uint8Array(w);
 };
-class sa {
+class aa {
   constructor(L) {
     if (!(L instanceof Uint8Array))
       throw new TypeError("payload must be an instance of Uint8Array");
@@ -4171,33 +4171,33 @@ class sa {
   async sign(L, r) {
     if (!this._protectedHeader && !this._unprotectedHeader)
       throw new Vt("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");
-    if (!Bs(this._protectedHeader, this._unprotectedHeader))
+    if (!Fs(this._protectedHeader, this._unprotectedHeader))
       throw new Vt("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
     const x = {
       ...this._protectedHeader,
       ...this._unprotectedHeader
-    }, w = Js(Vt, /* @__PURE__ */ new Map([["b64", !0]]), r == null ? void 0 : r.crit, this._protectedHeader, x);
+    }, w = Qs(Vt, /* @__PURE__ */ new Map([["b64", !0]]), r == null ? void 0 : r.crit, this._protectedHeader, x);
     let c = !0;
     if (w.has("b64") && (c = this._protectedHeader.b64, typeof c != "boolean"))
       throw new Vt('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
     const { alg: o } = x;
     if (typeof o != "string" || !o)
       throw new Vt('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-    Zs(o, L, "sign");
+    Js(o, L, "sign");
     let a = this._payload;
     c && (a = Kt.encode(Or(a)));
     let n;
     this._protectedHeader ? n = Kt.encode(Or(JSON.stringify(this._protectedHeader))) : n = Kt.encode("");
-    const e = _s(n, Kt.encode("."), a), t = await ia(o, L, e), l = {
+    const e = xs(n, Kt.encode("."), a), t = await sa(o, L, e), l = {
       signature: Or(t),
       payload: ""
     };
     return c && (l.payload = Vr.decode(a)), this._unprotectedHeader && (l.header = this._unprotectedHeader), this._protectedHeader && (l.protected = Vr.decode(n)), l;
   }
 }
-class aa {
+class oa {
   constructor(L) {
-    this._flattened = new sa(L);
+    this._flattened = new aa(L);
   }
   setProtectedHeader(L) {
     return this._flattened.setProtectedHeader(L), this;
@@ -4214,7 +4214,7 @@ function jt(M, L) {
     throw new TypeError(`Invalid ${M} input`);
   return L;
 }
-class oa {
+class la {
   constructor(L = {}) {
     if (!fi(L))
       throw new TypeError("JWT Claims Set MUST be an object");
@@ -4245,29 +4245,29 @@ class oa {
     } : this._payload = { ...this._payload, iat: jt("setIssuedAt", L) }, this;
   }
 }
-class gi extends oa {
+class gi extends la {
   setProtectedHeader(L) {
     return this._protectedHeader = L, this;
   }
   async sign(L, r) {
     var w;
-    const x = new aa(Kt.encode(JSON.stringify(this._payload)));
+    const x = new oa(Kt.encode(JSON.stringify(this._payload)));
     if (x.setProtectedHeader(this._protectedHeader), Array.isArray((w = this._protectedHeader) == null ? void 0 : w.crit) && this._protectedHeader.crit.includes("b64") && this._protectedHeader.b64 === !1)
       throw new oi("JWTs MUST NOT use unencoded payload");
     return x.sign(L, r);
   }
 }
-function la() {
+function ua() {
   const M = process.env.BACKEND_URL;
   if (!M) throw new Error("[bos7] BACKEND_URL env var is required");
   return M;
 }
-function ua() {
+function ca() {
   return process.env.BACKEND_JWT_SECRET ?? "";
 }
 const vn = "00000000-0000-0000-0000-000000000001";
-async function ca() {
-  const M = ua();
+async function fa() {
+  const M = ca();
   if (!M)
     throw new Error("[bos7] BACKEND_JWT_SECRET env var is required when accessToken is not provided");
   const L = new TextEncoder().encode(M);
@@ -4278,8 +4278,8 @@ async function ca() {
 }
 async function kr(M, L, r = {}) {
   var n, e;
-  const x = r.accessToken ?? await ca();
-  let c = `${la()}${L}`;
+  const x = r.accessToken ?? await fa();
+  let c = `${ua()}${L}`;
   r.query && Object.keys(r.query).length > 0 && (c += "?" + new URLSearchParams(r.query).toString());
   const o = await fetch(c, {
     method: M,
@@ -4298,16 +4298,16 @@ async function kr(M, L, r = {}) {
     }
   return o.status === 204 || o.headers.get("content-length") === "0" ? { ok: !0 } : { ok: !0, data: await o.json() };
 }
-function To(M, L, r) {
+function Ao(M, L, r) {
   return kr("GET", M, { query: L, accessToken: r });
 }
-function Ao(M, L, r) {
+function Co(M, L, r) {
   return kr("POST", M, { body: L, accessToken: r });
 }
-function Co(M, L, r) {
+function Ro(M, L, r) {
   return kr("PUT", M, { body: L, accessToken: r });
 }
-function Ro(M, L) {
+function Mo(M, L) {
   return kr("DELETE", M, { accessToken: L });
 }
 function hr(M) {
@@ -27327,8 +27327,8 @@ use chrome, FireFox or Internet Explorer 11`);
     }, {}] }, {}, [15])(15);
   });
 })(yi);
-var fa = yi.exports;
-const ha = /* @__PURE__ */ Ji(fa);
+var ha = yi.exports;
+const da = /* @__PURE__ */ Qi(ha);
 function pr(M, L) {
   return M == null ? "" : L === "currency" ? typeof M == "number" ? M : Number(M) || 0 : L === "date" && typeof M == "string" ? M.slice(0, 10) : M;
 }
@@ -27340,10 +27340,10 @@ const jr = {
   left: { style: "thin", color: { argb: "FFD0D0D0" } },
   bottom: { style: "thin", color: { argb: "FFD0D0D0" } },
   right: { style: "thin", color: { argb: "FFD0D0D0" } }
-}, da = { type: "pattern", pattern: "solid", fgColor: { argb: "FF1F61FE" } }, pa = { type: "pattern", pattern: "solid", fgColor: { argb: "FFE8F0FE" } };
-async function Mo(M, L, r, x) {
+}, pa = { type: "pattern", pattern: "solid", fgColor: { argb: "FF1F61FE" } }, ma = { type: "pattern", pattern: "solid", fgColor: { argb: "FFE8F0FE" } };
+async function Oo(M, L, r, x) {
   var h, u;
-  const w = new ha.Workbook(), c = w.addWorksheet(r.slice(0, 31)), o = L.length;
+  const w = new da.Workbook(), c = w.addWorksheet(r.slice(0, 31)), o = L.length;
   let a = 1;
   const n = x == null ? void 0 : x.meta;
   if (n != null && n.title) {
@@ -27362,7 +27362,7 @@ async function Mo(M, L, r, x) {
   const e = a, t = c.getRow(e);
   if (L.forEach((p, d) => {
     const v = t.getCell(d + 1);
-    v.value = p.title, v.font = { bold: !0, color: { argb: "FFFFFFFF" } }, v.fill = da, v.border = jr, v.alignment = { horizontal: Nr(p), vertical: "middle" };
+    v.value = p.title, v.font = { bold: !0, color: { argb: "FFFFFFFF" } }, v.fill = pa, v.border = jr, v.alignment = { horizontal: Nr(p), vertical: "middle" };
   }), t.height = 20, a += 1, M.forEach((p) => {
     const d = c.getRow(a);
     L.forEach((v, S) => {
@@ -27374,7 +27374,7 @@ async function Mo(M, L, r, x) {
     let v = !1;
     L.forEach((S, C) => {
       const j = p.getCell(C + 1);
-      j.font = { bold: !0 }, j.fill = pa, j.border = { ...jr, top: { style: "medium", color: { argb: "FF1F61FE" } } }, j.alignment = { horizontal: Nr(S), vertical: "middle" }, S.field in x.totals ? (j.value = pr(x.totals[S.field], S.displayFormat), S.displayFormat === "currency" && (j.numFmt = "#,##0.00")) : v || (j.value = d, v = !0);
+      j.font = { bold: !0 }, j.fill = ma, j.border = { ...jr, top: { style: "medium", color: { argb: "FF1F61FE" } } }, j.alignment = { horizontal: Nr(S), vertical: "middle" }, S.field in x.totals ? (j.value = pr(x.totals[S.field], S.displayFormat), S.displayFormat === "currency" && (j.numFmt = "#,##0.00")) : v || (j.value = d, v = !0);
     }), a += 1;
   }
   L.forEach((p, d) => {
@@ -27387,14 +27387,14 @@ async function Mo(M, L, r, x) {
   const l = await w.xlsx.writeBuffer(), i = new Blob([l], { type: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet" }), s = URL.createObjectURL(i), f = document.createElement("a");
   f.href = s, f.download = `${r}.xlsx`, document.body.appendChild(f), f.click(), f.remove(), URL.revokeObjectURL(s);
 }
-function ma(M, L) {
+function ba(M, L) {
   return String(pr(M, L));
 }
-async function Oo(M, L, r) {
-  const { default: x } = await import("./jspdf.es.min-Ds3Fsl60.js").then((o) => o.j), { default: w } = await import("./jspdf.plugin.autotable-DcntYaes.js"), c = new x({ orientation: "landscape" });
+async function Io(M, L, r) {
+  const { default: x } = await import("./jspdf.es.min-CnDMxfNp.js").then((o) => o.j), { default: w } = await import("./jspdf.plugin.autotable-DcntYaes.js"), c = new x({ orientation: "landscape" });
   c.setFontSize(14), c.text(r, 14, 15), c.setFontSize(10), w(c, {
     head: [L.map((o) => o.title)],
-    body: M.map((o) => L.map((a) => ma(o[a.field], a.displayFormat))),
+    body: M.map((o) => L.map((a) => ba(o[a.field], a.displayFormat))),
     startY: 22,
     styles: { fontSize: 8 },
     headStyles: { fillColor: [31, 97, 254] }
@@ -27402,7 +27402,7 @@ async function Oo(M, L, r) {
   }), c.save(`${r}.pdf`);
 }
 const vi = "";
-async function Io(M, L) {
+async function Po(M, L) {
   const r = await fetch(`${vi}/api/${M}`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
@@ -27412,7 +27412,7 @@ async function Io(M, L) {
     throw new Error(`queryList(${M}) gagal: ${r.status} ${r.statusText}`);
   return r.json();
 }
-async function Po(M, L, r) {
+async function No(M, L, r) {
   const x = { payload: r }, w = await fetch(`${vi}/api/${M}/service/${L}`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
@@ -27422,7 +27422,7 @@ async function Po(M, L, r) {
     throw new Error(`callService(${M}, ${L}) gagal: ${w.status} ${w.statusText}`);
   return w.json();
 }
-class ba {
+class ga {
   constructor(L) {
     this.conn = null, this.subscriptions = /* @__PURE__ */ new Map(), this.config = {
       name: "bos7-client",
@@ -27458,17 +27458,17 @@ class ba {
   }
 }
 let er = null;
-async function ga(M) {
-  const L = new ba(M);
+async function ya(M) {
+  const L = new ga(M);
   return await L.connect(), er = L, L;
 }
-function No() {
+function jo() {
   return er;
 }
-function jo() {
+function Do() {
   return (er == null ? void 0 : er.isConnected()) ?? !1;
 }
-class ya {
+class va {
   constructor(L) {
     this.handlers = /* @__PURE__ */ new Map(), this.subjects = /* @__PURE__ */ new Map(), this.client = L;
   }
@@ -27491,17 +27491,17 @@ class ya {
   }
 }
 let yr = null;
-async function Do(M) {
-  const L = await ga({
+async function Lo(M) {
+  const L = await ya({
     url: M.url,
     name: M.name ?? "bos7-event-bus"
   });
-  return yr = new ya(L), yr;
+  return yr = new va(L), yr;
 }
-function Lo() {
+function Bo() {
   return yr;
 }
-function Bo() {
+function Fo() {
   return yr;
 }
 const wi = "https://workflow.bos7.local";
@@ -27509,10 +27509,10 @@ function fn(M, L) {
   const r = window.open(M, L);
   r == null || r.focus();
 }
-function Fo(M) {
+function Uo(M) {
   fn(M, "bos7PortalNotificationsWindow");
 }
-function va(M, L = wi) {
+function wa(M, L = wi) {
   if (!M) return !1;
   try {
     const r = new URL(M, window.location.origin), x = new URL(L).origin;
@@ -27521,7 +27521,7 @@ function va(M, L = wi) {
     return !1;
   }
 }
-function Uo(M, L, r = wi) {
+function Ho(M, L, r = wi) {
   if (!M) return;
   if (M.startsWith("/inbox"))
     try {
@@ -27536,7 +27536,7 @@ function Uo(M, L, r = wi) {
     L(M);
     return;
   }
-  if (!va(M, r)) {
+  if (!wa(M, r)) {
     try {
       const w = new URL(M);
       if (w.origin === window.location.origin) {
@@ -27550,7 +27550,7 @@ function Uo(M, L, r = wi) {
     window.open(M, "_blank", "noopener,noreferrer");
   }
 }
-const Ho = {
+const zo = {
   labelSpacing: "6px",
   labelFontSize: "12px",
   labelFontWeight: 500,
@@ -27565,7 +27565,7 @@ const Ho = {
   columnGap: "16px",
   readonlyBackground: "#f4f4f4",
   readonlyCursor: "default"
-}, zo = {
+}, $o = {
   labelSpacing: "--ui7-form-label-gap",
   labelFontSize: "--ui7-form-label-font-size",
   labelFontWeight: "--ui7-form-label-font-weight",
@@ -27598,7 +27598,7 @@ const Ho = {
   controlReadonly: "ui7-form-control--readonly",
   helper: "ui7-form-helper",
   readonlyValue: "ui7-form-readonly-value"
-}, $o = {
+}, Wo = {
   compact: {
     controlHeight: "2rem",
     rowGap: "1rem",
@@ -27612,13 +27612,13 @@ const Ho = {
     columnGap: "1.25rem"
   }
 };
-function wa(M, L = "compact") {
+function _a(M, L = "compact") {
   return M === "compact" ? "compact" : M === "comfortable" || M === "normal" ? "comfortable" : L;
 }
-function _a(M, L = "compact") {
-  return wa(M, L) === "compact" ? Bt.densityCompact : Bt.densityComfortable;
+function xa(M, L = "compact") {
+  return _a(M, L) === "compact" ? Bt.densityCompact : Bt.densityComfortable;
 }
-function xa(M) {
+function Sa(M) {
   switch (M) {
     case "half":
       return Bt.widthHalf;
@@ -27629,11 +27629,11 @@ function xa(M) {
       return Bt.widthTwoThirds;
   }
 }
-function Wo(M) {
+function qo(M) {
   const L = [Bt.scope];
-  return (M == null ? void 0 : M.density) !== void 0 && L.push(_a(M.density)), L.push(xa(M == null ? void 0 : M.width)), M != null && M.readonly && L.push(Bt.readonly), M != null && M.className && L.push(M.className), L.join(" ");
+  return (M == null ? void 0 : M.density) !== void 0 && L.push(xa(M.density)), L.push(Sa(M == null ? void 0 : M.width)), M != null && M.readonly && L.push(Bt.readonly), M != null && M.className && L.push(M.className), L.join(" ");
 }
-const vr = "id", _i = "core7_locale", Sa = {
+const vr = "id", _i = "core7_locale", Ea = {
   "ui7.rowsPerPage": "Tampil",
   "ui7.search": "Cari",
   "ui7.noData": "Tidak ada data",
@@ -27715,7 +27715,7 @@ const vr = "id", _i = "core7_locale", Sa = {
   "bos7.deleteTitle": "Konfirmasi Hapus",
   "bos7.deleteDescription": "Data berikut akan dihapus permanen.",
   "bos7.deleteConfirm": "Hapus"
-}, Ea = {
+}, ka = {
   "ui7.rowsPerPage": "Show",
   "ui7.search": "Search",
   "ui7.noData": "No data",
@@ -27798,23 +27798,23 @@ const vr = "id", _i = "core7_locale", Sa = {
   "bos7.deleteDescription": "The following data will be permanently deleted.",
   "bos7.deleteConfirm": "Delete"
 }, Kr = {
-  id: Sa,
-  en: Ea
+  id: Ea,
+  en: ka
 };
-function ka() {
+function Ta() {
   if (typeof document > "u") return null;
   const M = document.cookie.split(";").map((r) => r.trim()).find((r) => r.startsWith(`${_i}=`));
   if (!M) return null;
   const L = M.split("=", 2)[1] ?? "";
   return L === "en" ? "en" : L === "id" ? "id" : null;
 }
-function Ta() {
+function Aa() {
   if (typeof navigator > "u") return null;
   const M = (navigator.language || "").toLowerCase();
   return M.startsWith("en") ? "en" : M.startsWith("id") ? "id" : null;
 }
-function Aa(M) {
-  return ka() ?? M ?? Ta() ?? vr;
+function Ca(M) {
+  return Ta() ?? M ?? Aa() ?? vr;
 }
 function Dr(M) {
   typeof document > "u" || (document.cookie = `${_i}=${M}; path=/; max-age=31536000; samesite=lax`);
@@ -27826,7 +27826,7 @@ const xi = _n({
   t: (M, L) => L ?? M,
   dictionary: Kr[vr]
 });
-function Ca({
+function Ra({
   children: M,
   locale: L,
   defaultLocale: r,
@@ -27853,7 +27853,7 @@ function Ca({
   return At(() => {
     if (L) return;
     let n = !1;
-    const e = Aa(r);
+    const e = Ca(r);
     return c(e), Dr(e), fetch("/api/auth/preferences", { cache: "no-store" }).then(async (t) => t.ok ? await t.json() : null).then((t) => {
       if (n) return;
       const l = t == null ? void 0 : t.locale;
@@ -27870,7 +27870,7 @@ function hn() {
 function Si() {
   return hn().t;
 }
-function Ra() {
+function Ma() {
   const M = Si();
   return {
     rowsPerPage: M("ui7.rowsPerPage", "Tampil"),
@@ -27912,14 +27912,14 @@ function Ra() {
     viewAll: M("ui7.viewAll", "Lihat semua")
   };
 }
-function qo(M) {
+function Vo(M) {
   const L = (M == null ? void 0 : M.withAuth) ?? !0, r = M == null ? void 0 : M.dictionaries, x = (M == null ? void 0 : M.defaultLocale) ?? "en";
   return function({ children: c, Layout: o }) {
-    const a = /* @__PURE__ */ Ge(Ca, { defaultLocale: x, dictionaries: r, children: /* @__PURE__ */ Ge(o, { children: c }) });
-    return L ? /* @__PURE__ */ Ge(Li, { children: a }) : a;
+    const a = /* @__PURE__ */ Ge(Ra, { defaultLocale: x, dictionaries: r, children: /* @__PURE__ */ Ge(o, { children: c }) });
+    return L ? /* @__PURE__ */ Ge(Bi, { children: a }) : a;
   };
 }
-function Ma(M, L, r) {
+function Oa(M, L, r) {
   if (M === "profile") {
     window.open(`${L}/profile`, "_blank");
     return;
@@ -27930,7 +27930,7 @@ function Ma(M, L, r) {
   }
   r();
 }
-function Oa(M) {
+function Ia(M) {
   var L;
   return (L = document.cookie.split("; ").find((r) => r.startsWith(`${M}=`))) == null ? void 0 : L.split("=")[1];
 }
@@ -27945,17 +27945,17 @@ async function Ei(M, L = "/api/auth/switch-branch") {
     return !1;
   }
 }
-function Ia(M, L) {
+function Pa(M, L) {
   const r = "bos7_branch", x = "/api/auth/switch-branch", w = () => window.location.reload(), c = () => {
     if (document.visibilityState !== "visible") return;
-    const o = Oa(r);
+    const o = Ia(r);
     !o || o === M || Ei(o, x).then((a) => {
       a && w();
     });
   };
   return document.addEventListener("visibilitychange", c), () => document.removeEventListener("visibilitychange", c);
 }
-function Pa({
+function Na({
   branches: M,
   currentBranch: L,
   onSwitch: r
@@ -27990,7 +27990,7 @@ function Pa({
     ] })
   ] });
 }
-function Na() {
+function ja() {
   const { t: M, locale: L, setLocale: r } = hn(), [x, w] = Ct(!1), c = (e) => `profile-branch-item${L === e ? " profile-branch-item--active" : ""}`, o = L === "en" ? M("ui7.languageEn", "English") : M("ui7.languageId", "Bahasa Indonesia"), a = L === "en" ? "Language" : "Bahasa", n = kt((e) => {
     r(e), fetch("/api/auth/preferences", {
       method: "POST",
@@ -28023,7 +28023,7 @@ function Na() {
     ] })
   ] });
 }
-function Vo({
+function Xo({
   children: M,
   deps: L,
   navItems: r,
@@ -28042,7 +28042,7 @@ function Vo({
   sideNavItems: h
 }) {
   var g;
-  const u = process.env.NEXT_PUBLIC_CORPORATE_ID || "carbon-default", p = process.env.NEXT_PUBLIC_APP_NAME || w, d = process.env.NEXT_PUBLIC_AUTH7_URL || c, v = process.env.NEXT_PUBLIC_PORTAL_URL || o, S = L.usePathname(), C = L.useRouter(), j = L.useAuth ?? Bi, { isAuthenticated: B, isLoading: N, user: D, login: F, logout: z } = j();
+  const u = process.env.NEXT_PUBLIC_CORPORATE_ID || "carbon-default", p = process.env.NEXT_PUBLIC_APP_NAME || w, d = process.env.NEXT_PUBLIC_AUTH7_URL || c, v = process.env.NEXT_PUBLIC_PORTAL_URL || o, S = L.usePathname(), C = L.useRouter(), j = L.useAuth ?? Fi, { isAuthenticated: B, isLoading: N, user: D, login: F, logout: z } = j();
   At(() => {
     !N && !B && F();
   }, [N, B, F]);
@@ -28061,7 +28061,7 @@ function Vo({
     k && (e ? e(k, (O) => C.push(O)) : C.push(k));
   }, [A, _, e, C]), b = Ur(() => x(r, S), [x, r, S]);
   return N || !B ? /* @__PURE__ */ Ge("div", { style: { padding: "2rem", color: "#525252" }, children: N ? "Loading…" : "Redirecting to sign-in…" }) : /* @__PURE__ */ Ge(
-    ja,
+    Da,
     {
       deps: L,
       corporateId: u,
@@ -28090,16 +28090,16 @@ function Vo({
     }
   );
 }
-function ja({
+function Da({
   deps: M,
   corporateId: L,
   children: r,
   ...x
 }) {
-  const w = M.GlobalTheme, c = M.ModalProvider, o = Ra();
-  return /* @__PURE__ */ Ge(w, { corporateId: L, variant: "white", labels: o, children: /* @__PURE__ */ Ge(c, { children: /* @__PURE__ */ Ge(Da, { deps: M, ...x, children: r }) }) });
+  const w = M.GlobalTheme, c = M.ModalProvider, o = Ma();
+  return /* @__PURE__ */ Ge(w, { corporateId: L, variant: "white", labels: o, children: /* @__PURE__ */ Ge(c, { children: /* @__PURE__ */ Ge(La, { deps: M, ...x, children: r }) }) });
 }
-function Da({
+function La({
   deps: M,
   appName: L,
   auth7UiUrl: r,
@@ -28151,12 +28151,12 @@ function Da({
         B([_]), D(_);
       }
     });
-  }, [h]), At(() => Ia(h ?? void 0), [h]);
+  }, [h]), At(() => Pa(h ?? void 0), [h]);
   const F = kt(async (A) => {
     await Ei(A.id) && window.location.reload();
-  }, []), z = f ? `${f.charAt(0).toUpperCase()}${f.slice(1)}` : x || void 0, U = /* @__PURE__ */ gt(Ri, { children: [
-    /* @__PURE__ */ Ge(Pa, { branches: j, currentBranch: N, onSwitch: F }),
-    /* @__PURE__ */ Ge(Na, {})
+  }, []), z = f ? `${f.charAt(0).toUpperCase()}${f.slice(1)}` : x || void 0, U = /* @__PURE__ */ gt(Mi, { children: [
+    /* @__PURE__ */ Ge(Na, { branches: j, currentBranch: N, onSwitch: F }),
+    /* @__PURE__ */ Ge(ja, {})
   ] }), E = M.UiShell;
   return /* @__PURE__ */ Ge(
     E,
@@ -28187,7 +28187,7 @@ function Da({
         email: s || ""
       },
       profileActions: ["profile", "change-password", "logout"],
-      onProfileAction: (A) => Ma(A, r, v),
+      onProfileAction: (A) => Oa(A, r, v),
       profileExtra: U,
       apps: n ? void 0 : {
         onFetch: () => fetch("/api/apps").then((A) => A.json()).then((A) => A.apps),
@@ -28204,7 +28204,7 @@ function Da({
     }
   );
 }
-const Gr = process.env.NOTIF7_URL ?? "", ki = process.env.NOTIF7_JWT_SECRET ?? "", Qt = "b0000000-0000-0000-0000-000000000001", La = "c0000000-0000-0000-0000-000000000001";
+const Gr = process.env.NOTIF7_URL ?? "", ki = process.env.NOTIF7_JWT_SECRET ?? "", Qt = "b0000000-0000-0000-0000-000000000001", Ba = "c0000000-0000-0000-0000-000000000001";
 function dn(M) {
   var r, x, w, c;
   const L = ((w = (x = (r = M.cookies) == null ? void 0 : r.get) == null ? void 0 : x.call(r, "access_token")) == null ? void 0 : w.value) ?? ((c = (M.headers.get("cookie") ?? "").split(";").find((o) => o.trim().startsWith("access_token="))) == null ? void 0 : c.split("=").slice(1).join("=").trim());
@@ -28218,12 +28218,12 @@ function dn(M) {
     return Qt;
   }
 }
-async function Ba(M) {
+async function Fa(M) {
   const L = new TextEncoder().encode(ki);
-  return new gi({ branch_id: La, roles: ["app_user"] }).setProtectedHeader({ alg: "HS256" }).setSubject(M).setJti(crypto.randomUUID()).setExpirationTime("60s").setIssuedAt().sign(L);
+  return new gi({ branch_id: Ba, roles: ["app_user"] }).setProtectedHeader({ alg: "HS256" }).setSubject(M).setJti(crypto.randomUUID()).setExpirationTime("60s").setIssuedAt().sign(L);
 }
 async function tr(M, L, r = {}) {
-  const x = r.userID ?? Qt, w = r.accessToken ? `Bearer ${r.accessToken}` : ki ? `Bearer ${await Ba(x)}` : "", c = r.query ? `${Gr}${L}?${r.query}` : `${Gr}${L}`;
+  const x = r.userID ?? Qt, w = r.accessToken ? `Bearer ${r.accessToken}` : ki ? `Bearer ${await Fa(x)}` : "", c = r.query ? `${Gr}${L}?${r.query}` : `${Gr}${L}`;
   return fetch(c, {
     method: M,
     headers: {
@@ -28233,7 +28233,7 @@ async function tr(M, L, r = {}) {
     ...r.body !== void 0 ? { body: r.body } : {}
   });
 }
-const Fa = /* @__PURE__ */ new Set([
+const Ua = /* @__PURE__ */ new Set([
   "task.assign",
   "task.assigned",
   "task.delegated_to_you",
@@ -28243,26 +28243,26 @@ function Tr(M) {
   var L, r, x, w;
   return ((x = (r = (L = M.cookies) == null ? void 0 : L.get) == null ? void 0 : r.call(L, "access_token")) == null ? void 0 : x.value) ?? ((w = (M.headers.get("cookie") ?? "").split(";").find((c) => c.trim().startsWith("access_token="))) == null ? void 0 : w.split("=").slice(1).join("=").trim());
 }
-function Ua(M) {
+function Ha(M) {
   const L = M.Payload;
   if (!L) return;
   const r = [L.task_id, L.taskId, L.taskID, L.id, L.ref_id];
   for (const x of r)
     if (typeof x == "string" && x.trim() !== "") return x;
 }
-const Ha = /* @__PURE__ */ new Set([
+const za = /* @__PURE__ */ new Set([
   "instance.completed",
   "instance.cancelled"
 ]);
 function wn(M, L, r) {
   const x = (M.EventType || "").toLowerCase();
-  if (Ha.has(x)) return;
+  if (za.has(x)) return;
   if (!r.has(x)) return M.RefURL || void 0;
-  const w = Ua(M);
+  const w = Ha(M);
   return w ? `${L}/inbox/${w}` : `${L}/inbox`;
 }
-async function Xo(M, L = {}) {
-  const r = L.workflowBaseUrl || process.env.NEXT_PUBLIC_BOS7_WORKFLOW_URL || "https://workflow.bos7.local", x = L.taskEventTypes || Fa, w = L.includeUserID ?? !0, c = L.graceful ?? !0, o = L.tableActionField || "action_url", a = L.bellTitleMap || {}, n = L.bellTimestampLocale ?? !1, t = new URL(M.url).searchParams, l = t.has("page") || t.has("per_page"), i = Tr(M), s = w ? dn(M) : void 0;
+async function Ko(M, L = {}) {
+  const r = L.workflowBaseUrl || process.env.NEXT_PUBLIC_BOS7_WORKFLOW_URL || "https://workflow.bos7.local", x = L.taskEventTypes || Ua, w = L.includeUserID ?? !0, c = L.graceful ?? !0, o = L.tableActionField || "action_url", a = L.bellTitleMap || {}, n = L.bellTimestampLocale ?? !1, t = new URL(M.url).searchParams, l = t.has("page") || t.has("per_page"), i = Tr(M), s = w ? dn(M) : void 0;
   try {
     if (l) {
       const v = Math.max(1, Number(t.get("page") ?? "1")), S = Math.max(1, Number(t.get("per_page") ?? "20")), C = t.get("is_read"), j = new URLSearchParams({
@@ -28327,7 +28327,7 @@ async function Xo(M, L = {}) {
     return Response.json({ notifications: [], badgeCount: 0 });
   }
 }
-async function Ko(M, L = {}) {
+async function Go(M, L = {}) {
   const r = L.includeUserID ?? !0, x = L.path || "/api/v1/notifications/read-all", w = L.graceful ?? !1, c = Tr(M), o = r ? dn(M) : void 0;
   try {
     const a = await tr("POST", x, { userID: o, accessToken: c, body: "{}" }), n = await a.json().catch(() => ({}));
@@ -28336,7 +28336,7 @@ async function Ko(M, L = {}) {
     return w ? Response.json({ ok: !0 }) : Response.json({ ok: !1 }, { status: 502 });
   }
 }
-async function Go(M, L, r = {}) {
+async function Yo(M, L, r = {}) {
   const x = r.includeUserID ?? !0, w = r.graceful ?? !1, c = Tr(M), o = x ? dn(M) : void 0;
   try {
     const a = await tr("PATCH", `/api/v1/notifications/${L}/read`, { userID: o, accessToken: c }), n = await a.json().catch(() => ({}));
@@ -28345,7 +28345,7 @@ async function Go(M, L, r = {}) {
     return w ? Response.json({ ok: !0 }) : Response.json({ ok: !1 }, { status: 502 });
   }
 }
-async function Yo(M, L = {}) {
+async function Zo(M, L = {}) {
   const r = Tr(M);
   if (!r)
     return new Response(
@@ -28383,11 +28383,11 @@ async function Yo(M, L = {}) {
     }
   });
 }
-async function Zo(M, L, r) {
+async function Jo(M, L, r) {
   if (M)
     return M(L, r);
 }
-function Jo(M, L) {
+function Qo(M, L) {
   return L != null && L.fieldOverrides ? M.filter((r) => {
     var x, w;
     return ((w = (x = L.fieldOverrides) == null ? void 0 : x[r.key]) == null ? void 0 : w.hidden) !== !0;
@@ -28405,11 +28405,11 @@ function Jo(M, L) {
 const Yr = {
   precisionByCurrency: { IDR: 2, USD: 4 },
   defaultPrecision: 2
-}, za = 6;
+}, $a = 6;
 function Ti(M, L, r) {
   return M != null && M.labelKey ? r(M.labelKey, M.label ?? L) : (M == null ? void 0 : M.label) ?? L;
 }
-function $a(M, L) {
+function Wa(M, L) {
   return M != null && M.helpKey ? L(M.helpKey, M.help ?? "") : M == null ? void 0 : M.help;
 }
 function Ai(M, L) {
@@ -28428,7 +28428,7 @@ function Ai(M, L) {
       return Array.isArray(M.enum) ? "select" : M.format === "date" || M.format === "date-time" ? "date" : "text";
   }
 }
-function Wa(M, L) {
+function qa(M, L) {
   const r = L == null ? void 0 : L.numeric;
   if (r)
     switch (r.kind) {
@@ -28463,11 +28463,11 @@ function Ci(M, L, r) {
   if (Array.isArray(M.enum))
     return M.enum.map((w) => ({ value: String(w), label: String(w) }));
 }
-function qa(M, L) {
+function Va(M, L) {
   const r = {};
   return L && (r.required = !0), typeof M.minimum == "number" && (r.min = M.minimum), typeof M.maximum == "number" && (r.max = M.maximum), typeof M.minLength == "number" && (r.minLength = M.minLength), typeof M.maxLength == "number" && (r.maxLength = M.maxLength), typeof M.pattern == "string" && (r.pattern = new RegExp(M.pattern)), Object.keys(r).length ? r : void 0;
 }
-function Va(M) {
+function Xa(M) {
   if (M.default !== void 0) return M.default;
   switch (M.type) {
     case "integer":
@@ -28479,7 +28479,7 @@ function Va(M) {
       return "";
   }
 }
-function Xa(M, L, r) {
+function Ka(M, L, r) {
   const x = Ai(M, L), w = L == null ? void 0 : L.numeric;
   return (w == null ? void 0 : w.kind) === "currency" ? {
     type: "currency",
@@ -28489,7 +28489,7 @@ function Xa(M, L, r) {
     options: (Ci(M, L, r) ?? []).map((c) => ({ value: String(c.value), label: c.label }))
   } : x === "date" ? { type: "date" } : { type: "text", maxLength: M.maxLength, placeholder: L == null ? void 0 : L.placeholder };
 }
-function Ka(M, L) {
+function Ga(M, L) {
   const r = M.items;
   if (!(r != null && r.properties)) return;
   const x = r.properties, w = new Set(r.required ?? []), c = Object.entries(x), o = c.map(([t, l]) => {
@@ -28497,12 +28497,12 @@ function Ka(M, L) {
     return {
       field: t,
       header: Ti(i, t, L),
-      columnType: Xa(l, i, L),
+      columnType: Ka(l, i, L),
       required: w.has(t)
     };
   }), a = () => {
     const t = {};
-    for (const [l, i] of c) t[l] = Va(i);
+    for (const [l, i] of c) t[l] = Xa(i);
     return t;
   }, n = (t) => {
     const l = {};
@@ -28514,14 +28514,14 @@ function Ka(M, L) {
   }, e = M["x-ui"];
   return { columns: o, newRowFactory: a, validateRow: n, maxRows: e == null ? void 0 : e.maxRows };
 }
-function Ga(M, L, r, x) {
+function Ya(M, L, r, x) {
   var e;
   const w = L["x-ui"], c = Ai(L, w), o = {
     key: M,
     label: Ti(w, M, x),
     type: c,
-    span: (w == null ? void 0 : w.span) ?? (c === "detail-rows" ? 12 : za)
-  }, a = $a(w, x);
+    span: (w == null ? void 0 : w.span) ?? (c === "detail-rows" ? 12 : $a)
+  }, a = Wa(w, x);
   if (a && (o.helperText = a), w != null && w.placeholder && (o.placeholder = w.placeholder), typeof L.maxLength == "number" && (o.maxLength = L.maxLength), (e = w == null ? void 0 : w.readonlyOn) != null && e.length) {
     const t = w.readonlyOn;
     o.readonly = (l) => t.includes(l);
@@ -28531,14 +28531,14 @@ function Ga(M, L, r, x) {
     t && (o.options = t);
   }
   if (c === "number") {
-    const t = Wa(L, w);
+    const t = qa(L, w);
     t && (o.numeric = t), o.inputMode = (t == null ? void 0 : t.kind) === "integer" ? "numeric" : "decimal";
   }
   if (c === "toggle" && (w != null && w.toggle) && (o.toggle = { valueOn: w.toggle.valueOn, valueOff: w.toggle.valueOff }), c === "detail-rows") {
-    const t = Ka(L, x);
+    const t = Ga(L, x);
     t && (o.detailRows = t);
   }
-  const n = qa(L, r);
+  const n = Va(L, r);
   return n && (o.validation = n), o;
 }
 function Lr(M) {
@@ -28552,7 +28552,7 @@ function Br(M) {
 function Fr(M, L, r) {
   return M.messageKey ? L(M.messageKey, M.message ?? r) : M.message ?? r;
 }
-function Ya(M, L) {
+function Za(M, L) {
   return M != null && M.length ? (r) => {
     const x = {};
     for (const w of M)
@@ -28582,7 +28582,7 @@ function Ya(M, L) {
     return x;
   } : () => ({});
 }
-function Za(M, L, r, x) {
+function Ja(M, L, r, x) {
   var o, a;
   const w = (o = M["x-ui"]) == null ? void 0 : o.layout;
   if ((a = w == null ? void 0 : w.sections) != null && a.length) {
@@ -28604,21 +28604,21 @@ function Za(M, L, r, x) {
     }
   ];
 }
-function Qo(M, L) {
+function el(M, L) {
   const r = M.properties ?? {}, x = new Set(M.required ?? []), w = /* @__PURE__ */ new Map(), c = /* @__PURE__ */ new Map();
   Object.entries(r).forEach(([n, e], t) => {
     var i;
-    w.set(n, Ga(n, e, x.has(n), L));
+    w.set(n, Ya(n, e, x.has(n), L));
     const l = (i = e["x-ui"]) == null ? void 0 : i.order;
     c.set(n, typeof l == "number" ? l : t);
   });
-  const o = Za(M, w, c, L), a = Ya(M["x-rules"], L);
+  const o = Ja(M, w, c, L), a = Za(M["x-rules"], L);
   return { sections: o, validate: a };
 }
 function Jt(M, L) {
   return M.replace(/\{\{(\w+)\}\}/g, (r, x) => String(L[x] ?? ""));
 }
-function el() {
+function tl() {
   const M = Si();
   return {
     validRequired: (L) => Jt(M("bos7.validRequired", "{{label}} wajib diisi"), { label: L }),
@@ -28656,9 +28656,13 @@ function el() {
     deleteConfirm: M("bos7.deleteConfirm", "Hapus")
   };
 }
-async function Ja(M, L) {
+function Ri(M, L) {
+  const r = new URL(M.url).search;
+  return r ? `${L}${r}` : L;
+}
+async function Qa(M, L) {
   var a;
-  const r = (a = M.cookies.get(L.accessTokenCookie ?? "access_token")) == null ? void 0 : a.value, x = await Jr(r ?? "", L.audience), w = await M.json(), c = await fetch(`${L.backendUrl}${L.path}`, {
+  const r = (a = M.cookies.get(L.accessTokenCookie ?? "access_token")) == null ? void 0 : a.value, x = await Jr(r ?? "", L.audience), w = await M.json(), c = await fetch(`${L.backendUrl}${Ri(M, L.path)}`, {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
@@ -28669,11 +28673,11 @@ async function Ja(M, L) {
   }), o = await c.json();
   return Dt.NextResponse.json(o, { status: c.status });
 }
-async function tl(M, L) {
+async function rl(M, L) {
   var n;
   if (!L.extraColumnTypes)
-    return Ja(M, L);
-  const r = (n = M.cookies.get(L.accessTokenCookie ?? "access_token")) == null ? void 0 : n.value, x = await Jr(r ?? "", L.audience), w = await M.json(), c = await fetch(`${L.backendUrl}${L.path}`, {
+    return Qa(M, L);
+  const r = (n = M.cookies.get(L.accessTokenCookie ?? "access_token")) == null ? void 0 : n.value, x = await Jr(r ?? "", L.audience), w = await M.json(), c = await fetch(`${L.backendUrl}${Ri(M, L.path)}`, {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
@@ -28685,77 +28689,77 @@ async function tl(M, L) {
   return o.columnTypes = { ...a, ...L.extraColumnTypes }, Dt.NextResponse.json(o, { status: c.status });
 }
 export {
-  Uo as $,
-  Li as A,
-  oo as B,
-  lo as C,
-  uo as D,
-  So as E,
-  Eo as F,
-  ko as G,
-  To as H,
-  Ao as I,
-  Co as J,
-  Ro as K,
-  Mo as L,
-  Oo as M,
-  Io as N,
-  bo as O,
-  xo as P,
-  Po as Q,
-  ba as R,
-  ga as S,
-  No as T,
-  jo as U,
-  Do as V,
-  Lo as W,
-  Bo as X,
+  Ho as $,
+  Bi as A,
+  lo as B,
+  uo as C,
+  co as D,
+  Eo as E,
+  ko as F,
+  To as G,
+  Ao as H,
+  Co as I,
+  Ro as J,
+  Mo as K,
+  Oo as L,
+  Io as M,
+  Po as N,
+  go as O,
+  So as P,
+  No as Q,
+  ga as R,
+  ya as S,
+  jo as T,
+  Do as U,
+  Lo as V,
+  Bo as W,
+  Fo as X,
   wi as Y,
-  Fo as Z,
-  va as _,
-  tl as a,
-  Ho as a0,
-  zo as a1,
+  Uo as Z,
+  wa as _,
+  rl as a,
+  zo as a0,
+  $o as a1,
   Bt as a2,
-  $o as a3,
-  wa as a4,
-  _a as a5,
-  xa as a6,
-  Wo as a7,
-  qo as a8,
-  Vo as a9,
-  Xo as aa,
-  Ko as ab,
-  Go as ac,
-  Yo as ad,
-  Zo as ae,
-  Jo as af,
-  Ya as ag,
-  Qo as ah,
-  el as ai,
-  Bi as b,
+  Wo as a3,
+  _a as a4,
+  xa as a5,
+  Sa as a6,
+  qo as a7,
+  Vo as a8,
+  Xo as a9,
+  Ko as aa,
+  Go as ab,
+  Yo as ac,
+  Zo as ad,
+  Jo as ae,
+  Qo as af,
+  Za as ag,
+  el as ah,
+  tl as ai,
+  Fi as b,
   Ze as c,
-  co as d,
-  fo as e,
-  ho as f,
-  Ji as g,
+  fo as d,
+  ho as e,
+  po as f,
+  Qi as g,
   Jr as h,
-  po as i,
-  mo as j,
-  _o as k,
-  go as l,
-  yo as m,
-  ro as n,
-  no as o,
-  Ja as p,
-  zi as q,
-  wo as r,
-  vo as s,
-  io as t,
+  mo as i,
+  bo as j,
+  xo as k,
+  yo as l,
+  vo as m,
+  no as n,
+  io as o,
+  Qa as p,
+  $i as q,
+  _o as r,
+  wo as s,
+  so as t,
   En as u,
-  so as v,
-  $i as w,
-  Wi as x,
-  ao as y,
+  ao as v,
+  Wi as w,
+  qi as x,
+  oo as y,
   dr as z
 };