@kong-ui-public/entities-vaults 4.18.2-pr.3869.e876c8c8a.0 → 4.18.2

package/dist/entities-vaults.es.js

@@ -0,0 +1,3106 @@
+import { defineComponent as be, computed as b, ref as N, watch as Ge, onBeforeMount as Ne, resolveComponent as q, openBlock as _, createElementBlock as G, createVNode as u, unref as e, createSlots as Je, withCtx as g, createTextVNode as pe, toDisplayString as $, createElementVNode as x, createBlock as S, Teleport as gt, createCommentVNode as M, reactive as Te, resolveDynamicComponent as Qe, TransitionGroup as yt, renderSlot as ot, Fragment as it, renderList as bt, mergeProps as rt, normalizeClass as ht, nextTick as Vt } from "vue";
+import { useRouter as De } from "vue-router";
+import { BookIcon as Ye, AddIcon as qe, SecurityIcon as wt, FolderIcon as kt, ConjourIcon as Ct, AzureIcon as Xe, HashicorpIcon as At, GoogleCloudIcon as St, AwsIcon as Rt, CodeIcon as Et, KongIcon as It } from "@kong/icons";
+import { useAxios as Se, useTableState as xt, useManagedByColumn as Ut, useFetcher as nt, useDeleteUrlBuilder as st, FetcherStatus as dt, EntityBaseTable as ut, PermissionsWrapper as Ae, getManagedByLabel as Ht, TableTags as Tt, EntityFilter as ct, EntityDeleteModal as ft, EntityTypes as pt, useErrors as mt, EntityBaseFormType as me, useGatewayFeatureSupported as Mt, EntityBaseForm as _t, SupportedEntityType as Ze, EntityFormSection as ze, SensitiveInput as He, useStringHelpers as Gt, useHelpers as $t, ConfigurationSchemaType as Pt, ConfigurationSchemaSection as et, EntityBaseConfigCard as Ot, ConfigCardItem as Ft, useDebouncedFilter as tt } from "@kong-ui-public/entities-shared";
+import { createI18n as Nt, i18nTComponent as Kt } from "@kong-ui-public/i18n";
+import { SecretInput as Ce } from "@kong-ui-public/misc-widgets";
+import "@kong-ui-public/misc-widgets/dist/style.css";
+const Wt = { create: "New vault", copy_id: "Copy ID", copy_json: "Copy JSON", edit: "Edit", delete: "Delete", view: "View details", loading: "Loading..." }, jt = { general: "Vaults could not be retrieved", delete: "The vault could not be deleted at this time.", copy: "Failed to copy to clipboard" }, qt = { placeholder_for_vaults: { konnect: "Filter by exact prefix or ID" }, placeholder_for_secrets: { konnect: "Filter by exact key" } }, zt = { title: "Vaults", list: { toolbar_actions: { new_vault: "New vault" }, table_headers: { prefix: "Prefix", prefix_ai_gateway: "Name", name: "Vault type", description: "Description", tags: "Tags", id: "ID" }, empty_state: { title: "Configure a new vault", description: "Improve the security of your Kong Gateway deployment with centralized secrets." }, empty_state_v2: { title: "Configure your first vault", group: "Vaults created in gateways within this group will automatically appear here.", description: "Vaults securely and centrally store sensitive information, such as credentials, tokens, and keys, to simplify secrets management.", create_cta: "New vault", learn_more: "Learn more" } } }, Lt = { title: "Secrets", list: { toolbar_actions: { new_secret: "Store new secret" }, table_headers: { key: "Secret key", updated_at: "Updated At" }, empty_state: { title: "No secrets stored", description: "Improve the security of your Kong Gateway deployment with centralized secrets." } }, form: { info: { title: "Secret", description: "Enter the secret key and secret value to be stored in Konnect vault" }, fields: { key: { label: "Key", placeholder: "Enter key" }, value: { label: "Value", placeholder: "Enter value here, can be simple values or multi-line", rotateLabel: "Rotate value" } }, hint: "Once saved, the secret value will not be visible" } }, Dt = { success: "Copied {val} to clipboard", success_brief: "Successfully copied to clipboard" }, Zt = { vault_type: "Vault type", vault_type_ai_gateway: "Type", vault_name_ai_gateway: "Name" }, Bt = { sections: { general: { title: "General information", description: "General information helps identify and manage this vault instance." }, config: { title: "Vault configuration", description: "Select a type of vault and configure properties specific to each type of Vault." } }, fields: { prefix: { label: "Prefix", placeholder: "Enter a unique prefix for this vault", help: "e.g. my-vault", tooltip: "The reference prefix. You need this prefix to access secrets stored in this vault. For example, {vault://<your-prefix>/<some-secret>}." }, prefix_ai_gateway: { label: "Name", placeholder: "Enter a unique name for this vault", help: "e.g. my-vault", tooltip: "The reference name. You need this name to access secrets stored in this vault. For example, {vault://<your-name>/<some-secret>}." }, description: { label: "Description", placeholder: "Enter some description for this vault" }, tags: { label: "Tags", placeholder: "Enter a list of tags separated by comma", help: "e.g. tag1, tag2, tag3" } }, config: { konnect: { label: "Konnect", description: "Access secrets stored directly in Konnect's unified platform to easily reference in Kong Gateway configuration." }, env: { label: "Environment variables", description: "Access secrets stored via variables to be made available in Kong Gateway at runtime.", fields: { prefix: { label: "Environment variable prefix", placeholder: "Enter your environment variable vault prefix", tooltip: "Data plane will access all the environment variables starting with this prefix." } } }, aws: { label: "AWS Secrets Manager", description: "Access secrets stored in AWS Secrets Manager for Kong Gateway configuration.", fields: { region: { label: "Region", placeholder: "Select an AWS region", tooltip: "The AWS region your vault is located in", locations: { "us-east-1": { location: "N. Virginia" }, "us-east-2": { location: "Ohio" }, "us-west-1": { location: "N. California" }, "us-west-2": { location: "Oregon" }, "af-south-1": { location: "Cape Town" }, "ap-east-1": { location: "Hong Kong" }, "ap-southeast-3": { location: "Jakarta" }, "ap-south-1": { location: "Mumbai" }, "ap-northeast-1": { location: "Tokyo" }, "ap-northeast-2": { location: "Seoul" }, "ap-northeast-3": { location: "Osaka" }, "ap-southeast-1": { location: "Singapore" }, "ap-southeast-2": { location: "Sydney" }, "ca-central-1": { location: "Canada" }, "eu-central-1": { location: "Frankfurt" }, "eu-west-1": { location: "Ireland" }, "eu-west-2": { location: "London" }, "eu-west-3": { location: "Paris" }, "eu-south-1": { location: "Milan" }, "eu-north-1": { location: "Stockholm" }, "me-south-1": { location: "Bahrain" }, "sa-east-1": { location: "São Paulo" }, "us-gov-east-1": { location: "US East" }, "us-gov-west-1": { location: "US West" } } }, endpoint_url: { label: "Endpoint URL", tooltip: 'The AWS SecretsManager service endpoint url. If not specified, the value used by vault will be the official AWS SecretsManager service url which is `https://secretsmanager.<region>.amazonaws.com`. You can specify a complete URL(including the "http/https" scheme) to override the endpoint that vault will connect to.' }, assume_role_arn: { label: "Assume role ARN", tooltip: "The target AWS IAM role ARN that will be assumed. Typically this is used for operating between multiple roles or cross-accounts. If you are not using assume role you should not specify this value." }, role_session_name: { label: "Role session name", tooltip: "The role session name used for role assuming." }, sts_endpoint_url: { label: "STS endpoint URL", tooltip: "The custom STS endpoint URL used for role assuming in AWS Vault. Note that this value will override the default STS endpoint URL(which should be `https: //sts.amazonaws.com`, or `https: //sts.<region>.amazonaws.com` if you have `AWS_STS_REGIONAL_ENDPOINTS` set to `regional`). If you are not using private VPC endpoint for STS service, you should not specify this value." } } }, gcp: { label: "Google Secret Manager", description: "Access secrets stored in Google Secret Manager for Kong Gateway configuration.", fields: { project_id: { label: "Project ID", placeholder: "Enter your Google Cloud Project ID", tooltip: { text: "Visit your Google API Console and select {italic-text} in the projects list to see your project ID", italicText: "Manage all projects" } } } }, hcv: { label: "HashiCorp Vault", description: "Access secrets stored in HashiCorp Vault for Kong Gateway configuration.", fields: { protocol: { label: "Protocol" }, host: { label: "Host" }, port: { label: "Port" }, mount: { label: "Mount" }, kv: { label: "KV" }, namespace: { label: "Namespace" }, ssl_verify: { label: "SSL verify" }, auth_method: { label: "Authentication method" }, token: { label: "Token" }, kube_role: { label: "Kubernetes role" }, kube_auth_path: { label: "Kubernetes auth path" }, kube_api_token_file: { label: "Kubernetes API token file" }, aws_auth_role: { label: "AWS auth role" }, aws_auth_region: { label: "AWS auth region" }, aws_access_key_id: { label: "AWS access key ID" }, aws_secret_access_key: { label: "AWS secret access key" }, aws_auth_nonce: { label: "AWS auth nonce" }, aws_login_path: { label: "AWS login path" }, azure_auth_role: { label: "Azure auth role" }, azure_login_path: { label: "Azure login path" }, gcp_auth_role: { label: "GCP auth role" }, gcp_login_path: { label: "GCP login path" }, gcp_service_account: { label: "GCP service account" }, gcp_jwt_exp: { label: "GCP JWT exp" }, aws_sts_endpoint_url: { label: "AWS STS endpoint URL" }, aws_assume_role_arn: { label: "AWS assume role ARN" }, aws_role_session_name: { label: "AWS role session name" }, approle_auth_path: { label: "App role auth path" }, approle_role_id: { label: "App role role ID" }, approle_secret_id: { label: "App role secret ID" }, approle_secret_id_file: { label: "App role secret ID file" }, approle_response_wrapping: { label: "App role response wrapping" }, cert_auth_cert: { label: "Cert" }, cert_auth_cert_key: { label: "Cert key", rotateLabel: "Rotate cert key", rotateAlert: "Once saved, the cert key value will not be visible." }, cert_auth_role_name: { label: "Role name" }, oauth2_audiences: { label: "OAuth2 audiences", tooltip: "Comma-separated list of OAuth2 audiences." }, oauth2_client_id: { label: "OAuth2 client ID" }, oauth2_client_secret: { label: "OAuth2 client secret" }, jwt_role: { label: "JWT role", tooltip: "The configured role name in HashiCorp Vault for JWT auth. When creating the role in HashiCorp Vault, make sure that the `role_type` is `jwt` and the `token_policies` have permissions to read the secrets." }, oauth2_token_endpoint: { label: "OAuth2 token endpoint" } } }, azure: { label: "Azure Vault", description: "Access secrets stored in Azure Key Vault for Kong Gateway configuration.", fields: { location: { label: "Location" }, vault_uri: { label: "Vault URI" }, credential_prefix: { label: "Credential prefix" }, type: { label: "Type", placeholder: "Select a type" }, client_id: { label: "Client ID" }, tenant_id: { label: "Tenant ID" } } }, "azure-certs": { label: "Azure Key Vault (Certificates)", description: "Access certificates stored in Azure Key Vault for Kong Gateway TLS termination.", fields: { vault_uri: { label: "Vault URI" }, credential_prefix: { label: "Credential prefix" }, client_id: { label: "Client ID" }, tenant_id: { label: "Tenant ID" } } }, conjur: { label: "CyberArk Secrets Manager (Conjur)", description: "Access secrets stored in CyberArk Secrets Manager (Conjur) for Kong Gateway configuration.", fields: { endpoint_url: { label: "Server", tooltip: "The CyberArk Secrets Manager (Conjur) backend url. Accepts http or https." }, login: { label: "Workload identity", tooltip: "Identity of the workload or host authenticating to CyberArk Secrets Manager (Conjur). In this case Kong is the workload/host." }, api_key: { label: "API key", tooltip: "The API key issued to the workload." }, account: { label: "Account", tooltip: "The CyberArk Secrets Manager (Conjur) account for which the token will be issued. This is the identifier provided during CyberArk Secrets Manager (Conjur) configuration." } } }, fs: { label: "File system", description: "Access secrets stored in the file system.", fields: { prefix: { label: "File path prefix", tooltip: "The prefix path for the file vault referenced files." } } }, advancedFields: { title: "View advanced fields", ttl: "TTL", ttlTooltip: `Time-to-live (in seconds) of a secret from the vault when it's cached. The special value of 0 means "no rotation" and it's the default. When using non-zero values, it is recommended that they're at least 1 minute.`, negTtl: "Negative TTL", negTtlTooltip: "Time-to-live (in seconds) of a vault miss (no secret). Negatively cached secrets will remain valid until neg_ttl is reached, after which Kong will attempt to refresh the secret again. The default value for neg_ttl is 0, meaning no negative caching occurs.", resurrectTtl: "Resurrect TTL", resurrectTtlTooltip: "Time (in seconds) for how long secrets will remain in use after they are expired (config.ttl is over). This is useful when a vault becomes unreachable, or when a secret is deleted from the Vault and isn't replaced immediately. On both cases, the Gateway will keep trying to refresh the secret for resurrect_ttl seconds. After that, it will stop trying to refresh. We recommend assigning a sufficiently high value to this configuration option to ensure a seamless transition in case there are unexpected issues with the Vault. The default value for resurrect_ttl is 1e8 seconds, which is about 3 years." }, commonFields: { base64_decode: { label: "Base64 decode", tooltip: "Decode all secrets in this vault as base64, useful for binary data. If some of the secrets are not base64 encoded, an error will occur when using them. It's recommended to create a separate vault for base64 secrets." } } }, unavailable: "This vault provider is available on Enterprise." }, Jt = { title: "Look up key in vault", vault: { label: "Vault", placeholder: "Select a vault" }, secret_id: { label: "Secret ID", input_placeholder: "Enter a secret ID", select_placeholder: "Select or enter a complete secret ID" }, optional_secret_key: { label: "Secret key", placeholder: "Enter the key or key path to access a nested secret value", help: "Optional. e.g. tokens, tokens/refresh_token" }, fetch_error: { vaults: "Could not fetch available vaults", secrets: "Could not fetch available secrets", vaults_and_secrets: "Could not fetch available vaults and secrets" }, no_results: "No results found", actions: { use_key: "Use key" }, provider: { complete_action: "Look up {cta}", cta: "key in vault" } }, Qt = {
+  actions: Wt,
+  delete: { title: "Delete a vault", title_for_secret: "Delete a secret", description: "This action cannot be reversed." },
+  errors: jt,
+  search: qt,
+  vaults: zt,
+  secrets: Lt,
+  copy: Dt,
+  labels: Zt,
+  form: Bt,
+  vault_secret_picker: Jt
+};
+function Yt() {
+  const l = Nt("en-us", Qt);
+  return {
+    i18n: l,
+    i18nT: Kt(l)
+    // Translation component <i18n-t>
+  };
+}
+const Re = {
+  useI18n: Yt
+}, Ke = "/v2/control-planes/{controlPlaneId}/core-entities/{workspace}", at = "/v2/control-planes/{controlPlaneId}/{workspace}/config-stores", We = "/{workspace}", Me = "/v1/ai-gateways/{aiGatewayId}", se = {
+  list: {
+    konnect: {
+      getAll: `${Ke}/vaults`,
+      deleteConfigStore: `${at}/{id}?force=true`
+    },
+    kongManager: {
+      getAll: `${We}/vaults`
+    },
+    aiGateway: {
+      getAll: `${Me}/vaults`,
+      deleteConfigStore: `${Me}/config-stores/{id}?force=true`
+    }
+  },
+  form: {
+    konnect: {
+      create: `${Ke}/vaults`,
+      createConfigStore: at,
+      edit: `${Ke}/vaults/{id}`
+    },
+    kongManager: {
+      create: `${We}/vaults`,
+      edit: `${We}/vaults/{id}`
+    },
+    aiGateway: {
+      create: `${Me}/vaults`,
+      edit: `${Me}/vaults/{id}`,
+      createConfigStore: `${Me}/config-stores`
+    }
+  }
+};
+var t = /* @__PURE__ */ ((l) => (l.AWS = "aws", l.GCP = "gcp", l.HCV = "hcv", l.ENV = "env", l.AZURE = "azure", l.AZURE_CERTS = "azure-certs", l.KONNECT = "konnect", l.CONJUR = "conjur", l.FS = "fs", l))(t || {}), m = /* @__PURE__ */ ((l) => (l.TOKEN = "token", l.K8S = "kubernetes", l.APP_ROLE = "approle", l.CERT = "cert", l.JWT = "jwt", l.AWS_IAM = "aws_iam", l.AWS_EC2 = "aws_ec2", l.AZURE = "azure", l.GCP_GCE = "gcp_gce", l.GCP_IAM = "gcp_iam", l))(m || {});
+const vt = {
+  [m.TOKEN]: {
+    token: "token"
+  },
+  [m.CERT]: {
+    cert_auth_cert: "cert",
+    cert_auth_cert_key: "key",
+    cert_auth_role_name: "role_name"
+  },
+  [m.JWT]: {
+    jwt_role: "role",
+    oauth2_token_endpoint: "token_endpoint",
+    oauth2_client_id: "client_id",
+    oauth2_client_secret: "client_secret",
+    oauth2_audiences: "audiences"
+  },
+  [m.APP_ROLE]: {
+    approle_auth_path: "path",
+    approle_response_wrapping: "response_wrapping",
+    approle_role_id: "role_id",
+    approle_secret_id: "secret_id",
+    approle_secret_id_file: "secret_id_file"
+  },
+  [m.K8S]: {
+    kube_role: "role",
+    kube_auth_path: "path",
+    kube_api_token_file: "api_token_file"
+  },
+  [m.GCP_IAM]: {
+    gcp_auth_role: "role",
+    gcp_service_account: "service_account",
+    gcp_jwt_exp: "jwt_exp",
+    gcp_login_path: "login_path"
+  },
+  [m.GCP_GCE]: {
+    gcp_auth_role: "role",
+    gcp_login_path: "login_path"
+  },
+  [m.AWS_IAM]: {
+    aws_auth_role: "role",
+    aws_auth_region: "region",
+    aws_login_path: "login_path",
+    aws_access_key_id: "access_key_id",
+    aws_secret_access_key: "secret_access_key",
+    aws_sts_endpoint_url: "sts_endpoint_url",
+    aws_assume_role_arn: "assume_role_arn",
+    aws_role_session_name: "role_session_name"
+  },
+  [m.AWS_EC2]: {
+    aws_auth_role: "role",
+    aws_auth_nonce: "nonce",
+    aws_login_path: "login_path"
+  },
+  [m.AZURE]: {
+    azure_auth_role: "role",
+    azure_login_path: "login_path"
+  }
+}, Xt = [
+  "protocol",
+  "host",
+  "port",
+  "mount",
+  "kv",
+  "namespace",
+  "ssl_verify",
+  "auth_method",
+  "base64_decode",
+  "ttl",
+  "neg_ttl",
+  "resurrect_ttl"
+], ea = (l) => Object.fromEntries(Object.entries(l).map(([y, n]) => [n, y])), ta = (l) => l == null, Le = (l) => Object.fromEntries(Object.entries(l).filter(([, y]) => !ta(y))), aa = (l) => {
+  const y = vt[l.auth_method] ?? {}, n = {};
+  for (const s of Xt)
+    s in l && (n[s] = l[s]);
+  for (const [s, f] of Object.entries(y))
+    s in l && (n[f] = l[s]);
+  return Le(n);
+}, la = (l) => {
+  const y = l.name;
+  let n = l.config ?? {};
+  if (y === t.HCV)
+    n = aa(n);
+  else if (y === t.CONJUR) {
+    const s = { ...n };
+    delete s.auth_method, n = Le(s);
+  } else
+    n = Le(n);
+  return {
+    type: y,
+    name: l.prefix,
+    // AI Gateway description is a non-nullable string; coerce the gateway's `null`
+    // (used for an empty description) to an empty string.
+    description: l.description ?? "",
+    config: n
+  };
+}, oa = (l) => {
+  const y = ea(vt[l.auth_method] ?? {}), n = {};
+  for (const [s, f] of Object.entries(l))
+    n[y[s] ?? s] = f;
+  return n;
+}, $e = (l) => {
+  const y = l?.type;
+  let n = l?.config ? { ...l.config } : {};
+  return y === t.HCV ? n = oa(n) : y === t.CONJUR && (n = { ...n, auth_method: "api_key" }), {
+    id: l?.id,
+    created_at: l?.created_at,
+    updated_at: l?.updated_at,
+    name: y,
+    prefix: l?.name,
+    description: l?.description ?? "",
+    labels: Object.entries(l?.labels ?? {}).map(([s, f]) => `${s}: ${f}`),
+    config: n
+  };
+}, ia = { class: "kong-ui-entities-vaults-list" }, ra = { class: "button-row" }, na = { class: "table-content-overflow-wrapper" }, sa = { class: "table-content-overflow-wrapper" }, da = /* @__PURE__ */ be({
+  __name: "VaultList",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (l) => !(!l || !["konnect", "kongManager"].includes(l?.app) || !l.createRoute || !l.getViewRoute || !l.getEditRoute || l.app === "kongManager" && !l.isExactMatch && !l.filterSchema || l.apiType === "aiGateway" && !l.aiGatewayId)
+    },
+    // used to override the default identifier for the cache entry
+    cacheIdentifier: {
+      type: String,
+      default: ""
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can create a new entity */
+    canCreate: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can delete a given entity */
+    canDelete: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can edit a given entity */
+    canEdit: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can retrieve (view details) a given entity */
+    canRetrieve: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** default to false, setting to true will teleport the toolbar button to the destination in the consuming app */
+    useActionOutside: {
+      type: Boolean,
+      default: !1
+    }
+  },
+  emits: ["error", "click:learn-more", "copy:success", "copy:error", "delete:success"],
+  setup(l, { emit: y }) {
+    const n = y, s = l, { i18n: { t: f } } = Re.useI18n(), i = De(), P = b(() => s.config.apiType === "aiGateway"), U = b(() => P.value ? "aiGateway" : s.config.app), h = (k) => k.replace(/{aiGatewayId}/gi, s.config.aiGatewayId || ""), { axiosInstance: V } = Se(s.config?.axiosRequestConfig), { hasRecords: A, handleStateChange: R } = xt(() => ee.value), I = b(() => A.value && s.config.app === "konnect"), d = b(() => s.config.app !== "kongManager" || !!s.config.disableSorting), H = {
+      // the Prefix column is non-hidable
+      prefix: { label: f("vaults.list.table_headers.prefix"), searchable: !0, sortable: !0, hidable: !1 },
+      // it's "Vault Type" on display, but we still use "name" to fit API schema
+      name: { label: f("vaults.list.table_headers.name"), searchable: !0, sortable: !0 },
+      description: { label: f("vaults.list.table_headers.description"), sortable: !1 },
+      tags: { label: f("vaults.list.table_headers.tags"), sortable: !1 }
+    }, p = b(() => {
+      if (P.value) {
+        const { description: k, name: T, prefix: j } = H;
+        return {
+          prefix: { ...j, label: f("vaults.list.table_headers.prefix_ai_gateway") },
+          name: T,
+          description: k
+        };
+      }
+      return H;
+    }), { defaultTablePreferences: Z, tableHeaders: le } = Ut(p), z = b(() => {
+      let k = `${s.config.apiBaseUrl}${se.list[U.value].getAll}`;
+      return s.config.app === "konnect" && (k = k.replace(/{controlPlaneId}/gi, s.config?.controlPlaneId || "")), h(k).replace(/\/{workspace}/gi, s.config?.workspace ? `/${s.config.workspace}` : "");
+    }), ee = N(""), B = b(() => {
+      if (s.config.app === "konnect" || s.config.isExactMatch)
+        return {
+          isExactMatch: !0,
+          placeholder: f("search.placeholder_for_vaults.konnect")
+        };
+      const { prefix: T, name: j } = H;
+      return {
+        isExactMatch: !1,
+        fields: { name: j, prefix: T },
+        schema: s.config.filterSchema
+      };
+    }), {
+      fetcher: L,
+      fetcherState: ie,
+      fetcherCacheKey: w
+    } = nt(b(() => ({ ...s.config, cacheIdentifier: s.cacheIdentifier })), z), a = P.value ? async (k) => {
+      const T = await L(k);
+      return { ...T, data: (T.data ?? []).map($e) };
+    } : L, de = () => {
+      ee.value = "";
+    }, _e = () => {
+      w.value++;
+    }, te = N(null), ue = async (k, T) => {
+      const j = k.id;
+      if (!await T(j)) {
+        n("copy:error", {
+          entity: k,
+          field: "id",
+          message: f("errors.copy")
+        });
+        return;
+      }
+      n("copy:success", {
+        entity: k,
+        field: "id",
+        message: f("copy.success", { val: j })
+      });
+    }, W = async (k, T) => {
+      const j = JSON.stringify(k);
+      if (!await T(j)) {
+        n("copy:error", {
+          entity: k,
+          message: f("errors.copy")
+        });
+        return;
+      }
+      n("copy:success", {
+        entity: k,
+        message: f("copy.success_brief")
+      });
+    }, J = async (k) => {
+      await s.canRetrieve?.(k) && i.push(s.config.getViewRoute(k.id));
+    }, Q = (k) => ({
+      label: f("actions.view"),
+      to: s.config.getViewRoute(k)
+    }), ve = (k) => ({
+      label: f("actions.edit"),
+      to: s.config.getEditRoute(k)
+    }), K = N(void 0), ge = N(!1), ae = N(!1), C = N(""), E = st(s.config, z.value), O = (k) => {
+      K.value = k, ge.value = !0;
+    }, ne = () => {
+      ge.value = !1;
+    }, ce = async (k) => {
+      const { apiBaseUrl: T, controlPlaneId: j } = s.config, he = h(`${T}${se.list[P.value ? "aiGateway" : "konnect"].deleteConfigStore}`).replace(/{controlPlaneId}/gi, j || "").replace(/\/{workspace}/gi, s.config?.workspace ? `/${s.config.workspace}` : "").replace(/{id}/gi, k);
+      try {
+        await V.delete(he);
+      } catch {
+      }
+    }, D = async () => {
+      if (K.value?.id) {
+        ae.value = !0;
+        try {
+          await V.delete(E(K.value.id)), s.config.app === "konnect" && K.value.config?.config_store_id && ce(K.value.config.config_store_id), ae.value = !1, ge.value = !1, w.value++, n("delete:success", K.value);
+        } catch (k) {
+          C.value = k.response?.data?.message || k.message || f("errors.delete"), n("error", k);
+        } finally {
+          ae.value = !1;
+        }
+      }
+    }, F = () => {
+      i.push(s.config.createRoute);
+    };
+    Ge(ie, (k) => {
+      if (k.status === dt.Error) {
+        te.value = {
+          title: f("errors.general")
+        }, k.error?.response?.data?.message && (te.value.message = k.error.response.data.message), n("error", k.error);
+        return;
+      }
+      te.value = null;
+    });
+    const ye = N({
+      ctaPath: s.config.createRoute,
+      ctaText: void 0,
+      message: `${f("vaults.list.empty_state.description")}${s.config.additionMessageForEmptyState ? ` ${s.config.additionMessageForEmptyState}` : ""}`,
+      title: f("vaults.title")
+    }), ke = N(!1);
+    return Ne(async () => {
+      ke.value = await s.canCreate(), ke.value && (ye.value.title = f("vaults.list.empty_state.title"), ye.value.ctaText = f("actions.create"));
+    }), (k, T) => {
+      const j = q("KButton"), he = q("KEmptyState"), Ve = q("KDropdownItem"), Pe = q("KClipboardProvider");
+      return _(), G("div", ia, [
+        u(e(ut), {
+          "cache-identifier": l.cacheIdentifier,
+          "default-table-preferences": e(Z),
+          "disable-sorting": d.value,
+          "empty-state-options": ye.value,
+          "enable-entity-actions": "",
+          "error-message": te.value,
+          fetcher: e(a),
+          "fetcher-cache-key": e(w),
+          "pagination-type": "offset",
+          "preferences-storage-key": "kong-ui-entities-vaults-list",
+          query: ee.value,
+          "table-headers": e(le),
+          onClearSearchInput: de,
+          "onClick:row": T[3] || (T[3] = (c) => J(c)),
+          onSort: _e,
+          onState: e(R)
+        }, Je({
+          "toolbar-filter": g(() => [
+            u(e(ct), {
+              modelValue: ee.value,
+              "onUpdate:modelValue": T[0] || (T[0] = (c) => ee.value = c),
+              config: B.value
+            }, null, 8, ["modelValue", "config"])
+          ]),
+          "toolbar-button": g(() => [
+            (_(), S(gt, {
+              disabled: !l.useActionOutside,
+              to: "#kong-ui-app-page-header-action-button"
+            }, [
+              x("div", ra, [
+                I.value ? (_(), S(j, {
+                  key: 0,
+                  appearance: "secondary",
+                  class: "open-learning-hub",
+                  "data-testid": "vault-learn-more-button",
+                  icon: "",
+                  onClick: T[1] || (T[1] = (c) => k.$emit("click:learn-more"))
+                }, {
+                  default: g(() => [
+                    u(e(Ye), { decorative: "" })
+                  ]),
+                  _: 1
+                })) : M("", !0),
+                u(e(Ae), {
+                  "auth-function": () => l.canCreate()
+                }, {
+                  default: g(() => [
+                    u(j, {
+                      appearance: "primary",
+                      "data-testid": "toolbar-add-vault",
+                      size: l.useActionOutside ? "medium" : "large",
+                      to: l.config.createRoute
+                    }, {
+                      default: g(() => [
+                        u(e(qe)),
+                        pe(" " + $(e(f)("vaults.list.toolbar_actions.new_vault")), 1)
+                      ]),
+                      _: 1
+                    }, 8, ["size", "to"])
+                  ]),
+                  _: 1
+                }, 8, ["auth-function"])
+              ])
+            ], 8, ["disabled"]))
+          ]),
+          prefix: g(({ rowValue: c }) => [
+            x("div", na, [
+              x("b", null, $(c ?? "-"), 1)
+            ])
+          ]),
+          name: g(({ rowValue: c }) => [
+            x("b", null, $(c ?? "-"), 1)
+          ]),
+          description: g(({ rowValue: c }) => [
+            x("div", sa, $(c ?? "-"), 1)
+          ]),
+          tags: g(({ rowValue: c }) => [
+            u(e(Tt), { tags: c }, null, 8, ["tags"])
+          ]),
+          managed_by: g(({ rowValue: c }) => [
+            pe($(e(Ht)(c) ?? "-"), 1)
+          ]),
+          actions: g(({ row: c }) => [
+            u(Pe, null, {
+              default: g(({ copyToClipboard: o }) => [
+                u(Ve, {
+                  "data-testid": "action-entity-copy-id",
+                  onClick: (fe) => ue(c, o)
+                }, {
+                  default: g(() => [
+                    pe($(e(f)("actions.copy_id")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["onClick"])
+              ]),
+              _: 2
+            }, 1024),
+            u(Pe, null, {
+              default: g(({ copyToClipboard: o }) => [
+                u(Ve, {
+                  "data-testid": "action-entity-copy-json",
+                  onClick: (fe) => W(c, o)
+                }, {
+                  default: g(() => [
+                    pe($(e(f)("actions.copy_json")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["onClick"])
+              ]),
+              _: 2
+            }, 1024),
+            u(e(Ae), {
+              "auth-function": () => l.canRetrieve(c)
+            }, {
+              default: g(() => [
+                u(Ve, {
+                  "data-testid": "action-entity-view",
+                  "has-divider": "",
+                  item: Q(c.id)
+                }, null, 8, ["item"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"]),
+            u(e(Ae), {
+              "auth-function": () => l.canEdit(c)
+            }, {
+              default: g(() => [
+                u(Ve, {
+                  "data-testid": "action-entity-edit",
+                  item: ve(c.id)
+                }, null, 8, ["item"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"]),
+            u(e(Ae), {
+              "auth-function": () => l.canDelete(c)
+            }, {
+              default: g(() => [
+                u(Ve, {
+                  danger: "",
+                  "data-testid": "action-entity-delete",
+                  "has-divider": "",
+                  onClick: (o) => O(c)
+                }, {
+                  default: g(() => [
+                    pe($(e(f)("actions.delete")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["onClick"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"])
+          ]),
+          _: 2
+        }, [
+          !ee.value && l.config.app === "konnect" ? {
+            name: "empty-state",
+            fn: g(() => [
+              u(he, {
+                "data-testid": "vaults-entity-empty-state",
+                "icon-background": "",
+                message: e(f)("vaults.list.empty_state_v2.description"),
+                title: e(f)("vaults.list.empty_state_v2.title")
+              }, Je({
+                icon: g(() => [
+                  u(e(wt), { decorative: "" })
+                ]),
+                action: g(() => [
+                  ke.value ? (_(), S(j, {
+                    key: 0,
+                    "data-testid": "entity-create-button",
+                    onClick: F
+                  }, {
+                    default: g(() => [
+                      u(e(qe), { decorative: "" }),
+                      pe(" " + $(e(f)("vaults.list.empty_state_v2.create_cta")), 1)
+                    ]),
+                    _: 1
+                  })) : M("", !0),
+                  u(j, {
+                    appearance: "secondary",
+                    "data-testid": "entity-learn-more-button",
+                    onClick: T[2] || (T[2] = (c) => k.$emit("click:learn-more"))
+                  }, {
+                    default: g(() => [
+                      u(e(Ye), { decorative: "" }),
+                      pe(" " + $(e(f)("vaults.list.empty_state_v2.learn_more")), 1)
+                    ]),
+                    _: 1
+                  })
+                ]),
+                _: 2
+              }, [
+                l.config?.isControlPlaneGroup ? {
+                  name: "default",
+                  fn: g(() => [
+                    pe($(e(f)("vaults.list.empty_state_v2.group")), 1)
+                  ]),
+                  key: "0"
+                } : void 0
+              ]), 1032, ["message", "title"])
+            ]),
+            key: "0"
+          } : void 0
+        ]), 1032, ["cache-identifier", "default-table-preferences", "disable-sorting", "empty-state-options", "error-message", "fetcher", "fetcher-cache-key", "query", "table-headers", "onState"]),
+        u(e(ft), {
+          "action-pending": ae.value,
+          description: e(f)("delete.description"),
+          "entity-name": K.value && (K.value.prefix || K.value.id),
+          "entity-type": e(pt).Vault,
+          error: C.value,
+          title: e(f)("delete.title"),
+          visible: ge.value,
+          onCancel: ne,
+          onProceed: D
+        }, null, 8, ["action-pending", "description", "entity-name", "entity-type", "error", "title", "visible"])
+      ]);
+    };
+  }
+}), we = (l, y) => {
+  const n = l.__vccOpts || l;
+  for (const [s, f] of y)
+    n[s] = f;
+  return n;
+}, cl = /* @__PURE__ */ we(da, [["__scopeId", "data-v-76fe55c5"]]), ua = { class: "kong-ui-entities-vault-form" }, ca = { class: "vault-form-provider-cards-container" }, fa = ["data-testid"], pa = { class: "provider-item-title-container" }, ma = { class: "provider-item-title" }, _a = { class: "provider-item-description" }, va = {
+  key: "kong-vault-config-fields",
+  class: "vault-form-config-fields-container"
+}, ga = {
+  key: 1,
+  class: "vault-form-config-auth-method-container"
+}, ya = {
+  key: 2,
+  class: "vault-form-config-auth-method-container"
+}, ba = {
+  key: 3,
+  class: "vault-form-config-auth-method-container"
+}, ha = {
+  key: 4,
+  class: "vault-form-config-auth-method-container"
+}, Va = {
+  key: 5,
+  class: "vault-form-config-auth-method-container"
+}, wa = {
+  key: 6,
+  class: "vault-form-config-auth-method-container"
+}, ka = {
+  key: 7,
+  class: "vault-form-config-auth-method-container"
+}, Ca = {
+  key: 8,
+  class: "vault-form-config-auth-method-container"
+}, Aa = {
+  key: 9,
+  class: "vault-form-config-auth-method-container"
+}, Sa = {
+  key: 10,
+  class: "vault-form-config-auth-method-container"
+}, Ra = { key: 8 }, Ea = { class: "wrapper" }, Ia = { class: "item-50" }, xa = { class: "item-50" }, Ua = { class: "wrapper" }, Ha = { class: "item-100" }, Ta = /* @__PURE__ */ be({
+  __name: "VaultForm",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (l) => !(!l || !["konnect", "kongManager"].includes(l?.app) || l?.app === "konnect" && l?.apiType !== "aiGateway" && !l?.controlPlaneId || l?.app === "kongManager" && typeof l?.workspace != "string" || l?.apiType === "aiGateway" && !l?.aiGatewayId || !l?.cancelRoute)
+    },
+    /** If a valid vaultId is provided, it will put the form in Edit mode instead of Create */
+    vaultId: {
+      type: String,
+      required: !1,
+      default: null
+    }
+  },
+  emits: ["update", "error", "loading"],
+  setup(l, { emit: y }) {
+    const n = l, s = y, { i18nT: f, i18n: { t: i } } = Re.useI18n(), P = De(), { axiosInstance: U } = Se(n.config?.axiosRequestConfig), { getMessageFromError: h } = mt(), V = b(() => n.config.apiType === "aiGateway"), A = b(() => V.value ? "aiGateway" : n.config.app), R = (c) => c.replace(/{aiGatewayId}/gi, n.config.aiGatewayId || ""), I = V.value ? "https" : "http", d = Te({
+      fields: {
+        prefix: "",
+        description: "",
+        tags: "",
+        labelList: []
+      },
+      isReadonly: !1,
+      errorMessage: ""
+    }), H = Te({
+      prefix: "",
+      description: "",
+      tags: "",
+      labelList: []
+    }), p = N(n.config.app === "konnect" ? t.KONNECT : t.ENV), Z = N(null), le = N();
+    let z = 0;
+    const ee = (c) => Object.entries(c).map(([o, fe]) => ({ id: `label-${z++}`, key: o, value: fe })), B = (c) => {
+      d.fields.labelList = c;
+    }, L = b(() => [t.AWS, t.GCP, t.HCV, t.AZURE, t.CONJUR, t.FS, t.AZURE_CERTS].includes(p.value)), ie = b(() => V.value ? [
+      { label: i("form.config.konnect.label"), value: t.KONNECT },
+      { label: i("form.config.env.label"), value: t.ENV },
+      { label: i("form.config.aws.label"), value: t.AWS },
+      { label: i("form.config.gcp.label"), value: t.GCP },
+      { label: i("form.config.hcv.label"), value: t.HCV },
+      { label: i("form.config.azure.label"), value: t.AZURE },
+      { label: i("form.config.conjur.label"), value: t.CONJUR }
+    ] : [
+      ...n.config.app === "konnect" ? [{
+        label: i("form.config.konnect.label"),
+        value: t.KONNECT
+      }] : [],
+      {
+        label: i("form.config.env.label"),
+        value: t.ENV
+      },
+      {
+        label: i("form.config.aws.label"),
+        value: t.AWS,
+        disabled: !ae.value
+      },
+      {
+        label: i("form.config.gcp.label"),
+        value: t.GCP,
+        disabled: !ae.value
+      },
+      {
+        label: i("form.config.hcv.label"),
+        value: t.HCV,
+        disabled: !ae.value
+      },
+      ...n.config.azureVaultProviderAvailable ? [{
+        label: i("form.config.azure.label"),
+        value: t.AZURE,
+        disabled: !ae.value
+      }] : [],
+      ...n.config.conjurVaultProviderAvailable ? [{
+        label: i("form.config.conjur.label"),
+        value: t.CONJUR,
+        disabled: !ae.value
+      }] : [],
+      ...n.config.fsVaultProviderAvailable ? [{
+        label: i("form.config.fs.label"),
+        value: t.FS,
+        disabled: !ae.value
+      }] : [],
+      ...n.config.azureCertsVaultProviderAvailable ? [{
+        label: i("form.config.azure-certs.label"),
+        value: t.AZURE_CERTS,
+        disabled: !ae.value
+      }] : []
+    ]), w = n.config.base64FieldAvailable ? { base64_decode: !1 } : {}, a = Te({
+      [t.KONNECT]: {},
+      [t.ENV]: {
+        prefix: "",
+        ...w
+      },
+      [t.AWS]: {
+        region: "",
+        endpoint_url: "",
+        assume_role_arn: "",
+        role_session_name: "KongVault",
+        ...w
+      },
+      [t.GCP]: {
+        project_id: "",
+        ...w
+      },
+      [t.HCV]: {
+        protocol: I,
+        host: "127.0.0.1",
+        port: 8200,
+        mount: "secret",
+        kv: "v1",
+        namespace: "",
+        ssl_verify: !0,
+        auth_method: m.TOKEN,
+        token: "",
+        kube_role: "",
+        kube_auth_path: "",
+        kube_api_token_file: "",
+        aws_auth_role: "",
+        aws_auth_region: "",
+        aws_auth_nonce: "",
+        aws_login_path: "",
+        aws_access_key_id: "",
+        aws_secret_access_key: "",
+        aws_sts_endpoint_url: "",
+        aws_assume_role_arn: "",
+        aws_role_session_name: "",
+        azure_auth_role: "",
+        azure_login_path: "",
+        gcp_auth_role: "",
+        gcp_login_path: "",
+        gcp_service_account: "",
+        gcp_jwt_exp: void 0,
+        approle_auth_path: "",
+        approle_role_id: "",
+        approle_secret_id: "",
+        approle_secret_id_file: "",
+        approle_response_wrapping: !1,
+        cert_auth_cert: "",
+        cert_auth_cert_key: "",
+        cert_auth_role_name: "",
+        oauth2_client_id: "",
+        oauth2_client_secret: "",
+        jwt_role: "",
+        oauth2_token_endpoint: "",
+        oauth2_audiences: "",
+        ...w
+      },
+      [t.AZURE]: {
+        location: "",
+        vault_uri: "",
+        type: "secrets",
+        credentials_prefix: "AZURE",
+        client_id: "",
+        tenant_id: "",
+        ...w
+      },
+      [t.AZURE_CERTS]: {
+        vault_uri: "",
+        credentials_prefix: "AZURE",
+        client_id: "",
+        tenant_id: "",
+        ttl: 3600
+      },
+      [t.CONJUR]: {
+        endpoint_url: "",
+        auth_method: "api_key",
+        ...w
+      },
+      [t.FS]: {
+        prefix: "",
+        ...w
+      }
+    }), de = Te({
+      [t.KONNECT]: {},
+      [t.ENV]: {
+        prefix: "",
+        ...w
+      },
+      [t.AWS]: {
+        region: "",
+        endpoint_url: "",
+        assume_role_arn: "",
+        role_session_name: "KongVault",
+        ...w
+      },
+      [t.GCP]: {
+        project_id: "",
+        ...w
+      },
+      [t.HCV]: {
+        protocol: I,
+        host: "127.0.0.1",
+        port: 8200,
+        mount: "secret",
+        kv: "v1",
+        namespace: "",
+        ssl_verify: !0,
+        auth_method: m.TOKEN,
+        token: "",
+        kube_role: "",
+        kube_auth_path: "",
+        kube_api_token_file: "",
+        aws_auth_role: "",
+        aws_auth_region: "",
+        aws_auth_nonce: "",
+        aws_login_path: "",
+        aws_access_key_id: "",
+        aws_secret_access_key: "",
+        aws_sts_endpoint_url: "",
+        aws_assume_role_arn: "",
+        aws_role_session_name: "",
+        azure_auth_role: "",
+        azure_login_path: "",
+        gcp_auth_role: "",
+        gcp_login_path: "",
+        gcp_service_account: "",
+        gcp_jwt_exp: void 0,
+        approle_auth_path: "",
+        approle_role_id: "",
+        approle_secret_id: "",
+        approle_secret_id_file: "",
+        approle_response_wrapping: !1,
+        cert_auth_cert: "",
+        cert_auth_cert_key: "",
+        cert_auth_role_name: "",
+        oauth2_client_id: "",
+        oauth2_client_secret: "",
+        jwt_role: "",
+        oauth2_token_endpoint: "",
+        oauth2_audiences: "",
+        ...w
+      },
+      [t.AZURE]: {
+        location: "",
+        vault_uri: "",
+        type: "secrets",
+        credentials_prefix: "AZURE",
+        client_id: "",
+        tenant_id: "",
+        ...w
+      },
+      [t.AZURE_CERTS]: {
+        vault_uri: "",
+        credentials_prefix: "AZURE",
+        client_id: "",
+        tenant_id: "",
+        ttl: 3600
+      },
+      [t.CONJUR]: {
+        endpoint_url: "",
+        auth_method: "api_key",
+        ...w
+      },
+      [t.FS]: {
+        prefix: "",
+        ...w
+      }
+    }), _e = [
+      { label: `${i("form.config.aws.fields.region.locations.us-east-1.location")} (us-east-1)`, value: "us-east-1" },
+      { label: `${i("form.config.aws.fields.region.locations.us-east-2.location")} (us-east-2)`, value: "us-east-2" },
+      { label: `${i("form.config.aws.fields.region.locations.us-west-1.location")} (us-west-1)`, value: "us-west-1" },
+      { label: `${i("form.config.aws.fields.region.locations.us-west-2.location")} (us-west-2)`, value: "us-west-2" },
+      { label: `${i("form.config.aws.fields.region.locations.af-south-1.location")} (af-south-1)`, value: "af-south-1" },
+      { label: `${i("form.config.aws.fields.region.locations.ap-east-1.location")} (ap-east-1)`, value: "ap-east-1" },
+      { label: `${i("form.config.aws.fields.region.locations.ap-southeast-3.location")} (ap-southeast-3)`, value: "ap-southeast-3" },
+      { label: `${i("form.config.aws.fields.region.locations.ap-south-1.location")} (ap-south-1)`, value: "ap-south-1" },
+      { label: `${i("form.config.aws.fields.region.locations.ap-northeast-1.location")} (ap-northeast-1)`, value: "ap-northeast-1" },
+      { label: `${i("form.config.aws.fields.region.locations.ap-northeast-2.location")} (ap-northeast-2)`, value: "ap-northeast-2" },
+      { label: `${i("form.config.aws.fields.region.locations.ap-northeast-3.location")} (ap-northeast-3)`, value: "ap-northeast-3" },
+      { label: `${i("form.config.aws.fields.region.locations.ap-southeast-1.location")} (ap-southeast-1)`, value: "ap-southeast-1" },
+      { label: `${i("form.config.aws.fields.region.locations.ap-southeast-2.location")} (ap-southeast-2)`, value: "ap-southeast-2" },
+      { label: `${i("form.config.aws.fields.region.locations.ca-central-1.location")} (ca-central-1)`, value: "ca-central-1" },
+      { label: `${i("form.config.aws.fields.region.locations.eu-central-1.location")} (eu-central-1)`, value: "eu-central-1" },
+      { label: `${i("form.config.aws.fields.region.locations.eu-west-1.location")} (eu-west-1)`, value: "eu-west-1" },
+      { label: `${i("form.config.aws.fields.region.locations.eu-west-2.location")} (eu-west-2)`, value: "eu-west-2" },
+      { label: `${i("form.config.aws.fields.region.locations.eu-west-3.location")} (eu-west-3)`, value: "eu-west-3" },
+      { label: `${i("form.config.aws.fields.region.locations.eu-south-1.location")} (eu-south-1)`, value: "eu-south-1" },
+      { label: `${i("form.config.aws.fields.region.locations.eu-north-1.location")} (eu-north-1)`, value: "eu-north-1" },
+      { label: `${i("form.config.aws.fields.region.locations.me-south-1.location")} (me-south-1)`, value: "me-south-1" },
+      { label: `${i("form.config.aws.fields.region.locations.sa-east-1.location")} (sa-east-1)`, value: "sa-east-1" },
+      { label: `${i("form.config.aws.fields.region.locations.us-gov-east-1.location")} (us-gov-east-1)`, value: "us-gov-east-1" },
+      { label: `${i("form.config.aws.fields.region.locations.us-gov-west-1.location")} (us-gov-west-1)`, value: "us-gov-west-1" }
+    ], te = [{ label: "secrets", value: "secrets" }], ue = [{ label: "http", value: "http" }, { label: "https", value: "https" }], W = [{ label: "v1", value: "v1" }, { label: "v2", value: "v2" }], J = b(() => n.vaultId ? me.Edit : me.Create), Q = b(() => J.value === me.Edit ? "edit" : "create"), ve = N(!1), K = b(() => R(se.form[A.value]?.edit)), ge = b(() => J.value === me.Edit && (n.config.app === "kongManager" || V.value)), ae = b(() => n.config.app === "konnect" || Mt({
+      gatewayInfo: n.config.gatewayInfo,
+      // vault name can only be `env` in Gateway Community Edition
+      supportedRange: {
+        enterprise: []
+      }
+    })), C = () => {
+      P.push(n.config?.cancelRoute || { name: "vault-list" });
+    }, E = (c) => {
+      s("loading", c);
+    }, O = (c) => {
+      s("error", c);
+    }, ne = (c) => {
+      switch (c) {
+        case t.KONNECT:
+          return It;
+        case t.ENV:
+          return Et;
+        case t.AWS:
+          return Rt;
+        case t.GCP:
+          return St;
+        case t.HCV:
+          return At;
+        case t.AZURE:
+          return Xe;
+        case t.AZURE_CERTS:
+          return Xe;
+        case t.CONJUR:
+          return Ct;
+        case t.FS:
+          return kt;
+      }
+    }, ce = (c) => {
+      switch (c) {
+        case t.KONNECT:
+          return i("form.config.konnect.description");
+        case t.ENV:
+          return i("form.config.env.description");
+        case t.AWS:
+          return i("form.config.aws.description");
+        case t.GCP:
+          return i("form.config.gcp.description");
+        case t.HCV:
+          return i("form.config.hcv.description");
+        case t.AZURE:
+          return i("form.config.azure.description");
+        case t.AZURE_CERTS:
+          return i("form.config.azure-certs.description");
+        case t.CONJUR:
+          return i("form.config.conjur.description");
+        case t.FS:
+          return i("form.config.fs.description");
+      }
+    }, D = (c) => {
+      const o = V.value ? $e(c?.item ?? c) : c;
+      d.fields.prefix = o?.item?.prefix || o?.prefix || "", d.fields.description = o?.item?.description || o?.description || "";
+      const fe = o?.item?.tags || o?.tags || [];
+      if (d.fields.tags = fe?.join(", ") || "", V.value) {
+        const v = o?.labels ?? {};
+        d.fields.labelList = ee(v);
+      }
+      Object.assign(H, d.fields), H.labelList = d.fields.labelList.map((v) => ({ ...v }));
+      const oe = o?.item?.config || o?.config || null;
+      oe && (Object.keys(oe).length || o?.name === t.KONNECT) ? (p.value = o?.item?.name || o?.name || "", Z.value = p.value, le.value = o?.config?.config_store_id || void 0, Object.assign(a[p.value], oe), Object.assign(de[p.value], oe)) : d.errorMessage = "Error loading vault config";
+    }, F = (c) => c === "" || c == null, ye = b(() => p.value === t.HCV ? !Object.keys(a[t.HCV]).filter((c) => [
+      "namespace",
+      "ttl",
+      "neg_ttl",
+      "resurrect_ttl",
+      "kube_role",
+      "kube_api_token_file",
+      "cert_auth_role_name",
+      "kube_auth_path",
+      "approle_auth_path",
+      "approle_secret_id",
+      "approle_secret_id_file",
+      "oauth2_audiences",
+      "aws_login_path",
+      "aws_sts_endpoint_url",
+      "aws_assume_role_arn",
+      "aws_role_session_name",
+      "azure_login_path",
+      "gcp_login_path"
+    ].includes(c) || !n.config.hcvCspAuthMethodsAvailable && ["aws_auth_role", "aws_auth_region", "aws_auth_nonce", "aws_access_key_id", "aws_secret_access_key", "aws_login_path", "aws_sts_endpoint_url", "aws_assume_role_arn", "aws_role_session_name", "azure_auth_role", "azure_login_path", "gcp_auth_role", "gcp_login_path", "gcp_service_account", "gcp_jwt_exp"].includes(c) || ![m.AWS_IAM, m.AWS_EC2].includes(a[t.HCV].auth_method) && c === "aws_auth_role" || a[t.HCV].auth_method !== m.AWS_IAM && ["aws_auth_region", "aws_access_key_id", "aws_secret_access_key"].includes(c) || a[t.HCV].auth_method === m.AWS_IAM && ["aws_access_key_id", "aws_secret_access_key"].includes(c) || a[t.HCV].auth_method !== m.AWS_EC2 && c === "aws_auth_nonce" || a[t.HCV].auth_method !== m.AZURE && c === "azure_auth_role" || ![m.GCP_GCE, m.GCP_IAM].includes(a[t.HCV].auth_method) && c === "gcp_auth_role" || a[t.HCV].auth_method !== m.GCP_IAM && ["gcp_service_account", "gcp_jwt_exp"].includes(c) || a[t.HCV].auth_method !== m.TOKEN && c === "token" || V.value && J.value === me.Edit && ["token", "oauth2_client_secret", "cert_auth_cert_key"].includes(c) || a[t.HCV].auth_method !== m.APP_ROLE && (c === "approle_role_id" || c === "approle_response_wrapping") || a[t.HCV].auth_method === m.APP_ROLE && c === "approle_response_wrapping" && typeof a[p.value][c] == "boolean" || a[t.HCV].auth_method !== m.CERT && ["cert_auth_cert", "cert_auth_cert_key"].includes(c) || a[t.HCV].auth_method !== m.JWT && ["oauth2_client_id", "oauth2_client_secret", "jwt_role", "oauth2_token_endpoint"].includes(c) ? !1 : F(a[p.value][c])).length : p.value === t.AZURE ? !Object.keys(a[t.AZURE]).filter((c) => ["client_id", "tenant_id", "ttl", "neg_ttl", "resurrect_ttl"].includes(c) ? !1 : F(a[p.value][c])).length : p.value === t.AZURE_CERTS ? !Object.keys(a[t.AZURE_CERTS]).filter((c) => ["client_id", "tenant_id", "ttl", "neg_ttl", "resurrect_ttl"].includes(c) ? !1 : F(a[p.value][c])).length : p.value === t.AWS ? !Object.keys(a[t.AWS]).filter((c) => ["endpoint_url", "assume_role_arn", "ttl", "neg_ttl", "resurrect_ttl", "sts_endpoint_url"].includes(c) ? !1 : F(a[p.value][c])).length : !Object.keys(a[p.value]).filter((c) => ["ttl", "neg_ttl", "resurrect_ttl"].includes(c) ? !1 : F(a[p.value][c])).length), ke = b(() => !!d.fields.prefix && ye.value), k = b(() => JSON.stringify(d.fields) !== JSON.stringify(H) || p.value !== Z.value || JSON.stringify(a[p.value]) !== JSON.stringify(de[p.value])), T = b(() => {
+      let c = `${n.config.apiBaseUrl}${se.form[A.value][J.value]}`;
+      return n.config.app === "konnect" && (c = c.replace(/{controlPlaneId}/gi, n.config?.controlPlaneId || "")), R(c).replace(/\/{workspace}/gi, n.config?.workspace ? `/${n.config.workspace}` : "").replace(/{id}/gi, n.vaultId ?? "");
+    }), j = b(() => {
+      const c = parseInt(String(a[t.HCV].gcp_jwt_exp), 10), o = {
+        protocol: a[t.HCV].protocol,
+        host: a[t.HCV].host,
+        port: parseInt(a[t.HCV].port.toString()),
+        mount: a[t.HCV].mount,
+        kv: a[t.HCV].kv,
+        namespace: a[t.HCV].namespace || null,
+        ...n.config.hcvSslVerifyAvailable && { ssl_verify: a[t.HCV].ssl_verify ?? !0 },
+        auth_method: a[t.HCV].auth_method,
+        ...n.config.base64FieldAvailable && { base64_decode: a[t.HCV].base64_decode },
+        ...a[t.HCV].auth_method === m.TOKEN && { token: a[t.HCV].token },
+        // For Kong Admin API, when auth_method is kubernetes, token must be in the request body and its value has to be null
+        ...a[t.HCV].auth_method === m.K8S && {
+          kube_role: a[t.HCV].kube_role || void 0,
+          kube_auth_path: a[t.HCV].kube_auth_path || void 0,
+          kube_api_token_file: a[t.HCV].kube_api_token_file || void 0,
+          token: null
+        },
+        ...a[t.HCV].auth_method === m.AWS_IAM && {
+          aws_auth_role: a[t.HCV].aws_auth_role || void 0,
+          aws_auth_region: a[t.HCV].aws_auth_region || void 0,
+          aws_login_path: a[t.HCV].aws_login_path || void 0,
+          aws_access_key_id: a[t.HCV].aws_access_key_id || void 0,
+          aws_secret_access_key: a[t.HCV].aws_secret_access_key || void 0,
+          aws_sts_endpoint_url: a[t.HCV].aws_sts_endpoint_url || void 0,
+          aws_assume_role_arn: a[t.HCV].aws_assume_role_arn || void 0,
+          aws_role_session_name: a[t.HCV].aws_role_session_name || void 0
+        },
+        ...a[t.HCV].auth_method === m.AWS_EC2 && {
+          aws_auth_role: a[t.HCV].aws_auth_role || void 0,
+          aws_auth_nonce: a[t.HCV].aws_auth_nonce || void 0,
+          aws_login_path: a[t.HCV].aws_login_path || void 0
+        },
+        ...a[t.HCV].auth_method === m.AZURE && {
+          azure_auth_role: a[t.HCV].azure_auth_role || void 0,
+          azure_login_path: a[t.HCV].azure_login_path || void 0
+        },
+        ...a[t.HCV].auth_method === m.GCP_GCE && {
+          gcp_auth_role: a[t.HCV].gcp_auth_role || void 0,
+          gcp_login_path: a[t.HCV].gcp_login_path || void 0
+        },
+        ...a[t.HCV].auth_method === m.GCP_IAM && {
+          gcp_auth_role: a[t.HCV].gcp_auth_role || void 0,
+          gcp_login_path: a[t.HCV].gcp_login_path || void 0,
+          gcp_service_account: a[t.HCV].gcp_service_account || void 0,
+          gcp_jwt_exp: Number.isNaN(c) ? void 0 : c
+        },
+        ...a[t.HCV].auth_method === m.APP_ROLE && {
+          approle_auth_path: a[t.HCV].approle_auth_path || void 0,
+          approle_role_id: a[t.HCV].approle_role_id,
+          approle_secret_id: a[t.HCV].approle_secret_id || void 0,
+          approle_secret_id_file: a[t.HCV].approle_secret_id_file || void 0,
+          approle_response_wrapping: a[t.HCV].approle_response_wrapping ?? !1
+        },
+        ...a[t.HCV].auth_method === m.CERT && {
+          cert_auth_role_name: a[t.HCV].cert_auth_role_name || void 0,
+          cert_auth_cert: a[t.HCV].cert_auth_cert,
+          cert_auth_cert_key: a[t.HCV].cert_auth_cert_key
+        },
+        ...a[t.HCV].auth_method === m.JWT && {
+          oauth2_audiences: a[t.HCV].oauth2_audiences || null,
+          oauth2_client_id: a[t.HCV].oauth2_client_id,
+          oauth2_client_secret: a[t.HCV].oauth2_client_secret,
+          jwt_role: a[t.HCV].jwt_role,
+          oauth2_token_endpoint: a[t.HCV].oauth2_token_endpoint
+        }
+      }, fe = {
+        ...a[p.value],
+        client_id: a[p.value].client_id || null,
+        tenant_id: a[p.value].tenant_id || null
+      }, oe = {
+        ...a[p.value],
+        client_id: a[p.value].client_id || null,
+        tenant_id: a[p.value].tenant_id || null
+      }, v = {
+        ...a[p.value],
+        endpoint_url: a[p.value].endpoint_url || null,
+        assume_role_arn: a[p.value].assume_role_arn || null,
+        ...n.config.awsStsEndpointUrlAvailable ? { sts_endpoint_url: a[p.value].sts_endpoint_url || null } : {}
+      };
+      let Y = a[p.value];
+      p.value === t.HCV ? Y = o : p.value === t.AZURE ? Y = fe : p.value === t.AZURE_CERTS ? Y = oe : p.value === t.AWS && (Y = v);
+      let Ee = {};
+      if (![t.KONNECT, t.ENV].includes(p.value)) {
+        const X = a[p.value], xe = X.ttl, Ue = X.neg_ttl, Be = X.resurrect_ttl;
+        Ee = {
+          ttl: xe ? parseInt(xe.toString(), 10) : null,
+          neg_ttl: Ue ? parseInt(Ue.toString(), 10) : null,
+          resurrect_ttl: Be ? parseInt(Be.toString(), 10) : null
+        };
+      }
+      const Oe = {
+        prefix: d.fields.prefix,
+        description: d.fields.description || null,
+        tags: d.fields.tags.split(",")?.map((X) => String(X || "").trim())?.filter((X) => X !== ""),
+        name: p.value,
+        config: {
+          ...Y,
+          ...Ee
+        }
+      };
+      if (!V.value) return Oe;
+      const Ie = la(Oe), r = {};
+      for (const X of d.fields.labelList) {
+        const xe = X.key.trim();
+        xe && (r[xe] = X.value.trim());
+      }
+      if (Object.keys(r).length > 0 && (Ie.labels = r), J.value === me.Edit) {
+        const X = { ...Ie.config };
+        return ["token", "client_secret", "secret_access_key", "api_key", "key"].forEach((Ue) => {
+          Ue in X && F(X[Ue]) && delete X[Ue];
+        }), { ...Ie, config: X };
+      }
+      return Ie;
+    }), he = b(() => ({
+      ...j.value,
+      config: {
+        ...j.value.config,
+        config_store_id: le.value
+      }
+    })), Ve = async () => {
+      const c = R(`${n.config.apiBaseUrl}${se.form[V.value ? "aiGateway" : "konnect"].createConfigStore}`).replace(/{controlPlaneId}/gi, n.config?.controlPlaneId || "").replace(/\/{workspace}/gi, n.config?.workspace ? `/${n.config.workspace}` : ""), o = V.value ? { name: d.fields.prefix } : void 0;
+      return (await U.post(c, o))?.data.id;
+    }, Pe = async () => {
+      try {
+        d.isReadonly = !0;
+        let c;
+        J.value === "create" ? p.value === t.KONNECT ? (le.value = await Ve(), c = await U.post(T.value, he.value)) : c = await U.post(T.value, j.value) : J.value === "edit" && (p.value === t.KONNECT && !le.value ? (le.value = await Ve(), c = await U.put(T.value, he.value)) : c = n.config?.app === "konnect" ? await U.put(T.value, he.value) : await U.patch(T.value, j.value)), D(c?.data), s("update", c?.data);
+      } catch (c) {
+        d.errorMessage = h(c), s("error", c);
+      } finally {
+        d.isReadonly = !1;
+      }
+    };
+    return (c, o) => {
+      const fe = q("KTooltip"), oe = q("KSelect"), v = q("KInput"), Y = q("KCheckbox"), Ee = q("KTextArea"), Oe = q("KAlert"), Ie = q("KCollapse");
+      return _(), G("div", ua, [
+        u(e(_t), {
+          "can-submit": ke.value && k.value,
+          config: l.config,
+          "edit-id": l.vaultId,
+          "entity-type": e(Ze).Vault,
+          "error-message": d.errorMessage,
+          "fetch-url": K.value,
+          "form-fields": j.value,
+          "is-readonly": d.isReadonly,
+          "tabs-to-hide": l.config.apiType === "aiGateway" ? ["terraform", "deck"] : [],
+          onCancel: C,
+          "onFetch:error": O,
+          "onFetch:success": D,
+          onLoading: E,
+          onSubmit: Pe
+        }, {
+          default: g(() => [
+            u(e(ze), {
+              description: e(i)("form.sections.config.description"),
+              title: e(i)("form.sections.config.title")
+            }, {
+              default: g(() => [
+                x("div", ca, [
+                  u(oe, {
+                    modelValue: p.value,
+                    "onUpdate:modelValue": o[0] || (o[0] = (r) => p.value = r),
+                    "data-testid": "provider-select",
+                    disabled: ge.value,
+                    "dropdown-max-height": "500",
+                    items: ie.value,
+                    readonly: d.isReadonly
+                  }, {
+                    "selected-item-template": g(({ item: r }) => [
+                      (_(), S(Qe(ne(r.value)))),
+                      x("span", null, $(r?.label), 1)
+                    ]),
+                    "item-template": g(({ item: r }) => [
+                      u(fe, {
+                        placement: "top",
+                        text: r.disabled ? e(i)("form.unavailable") : ""
+                      }, {
+                        default: g(() => [
+                          x("div", {
+                            class: "provider-item",
+                            "data-testid": `vault-form-provider-${r.value}`
+                          }, [
+                            (_(), S(Qe(ne(r.value)))),
+                            x("div", pa, [
+                              x("span", ma, $(r?.label), 1),
+                              x("span", _a, $(ce(r.value)), 1)
+                            ])
+                          ], 8, fa)
+                        ]),
+                        _: 2
+                      }, 1032, ["text"])
+                    ]),
+                    _: 1
+                  }, 8, ["modelValue", "disabled", "items", "readonly"])
+                ]),
+                u(yt, { name: "appear" }, {
+                  default: g(() => [
+                    p.value === e(t).ENV ? (_(), G("div", va, [
+                      u(v, {
+                        modelValue: a[e(t).ENV].prefix,
+                        "onUpdate:modelValue": o[1] || (o[1] = (r) => a[e(t).ENV].prefix = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-kong-prefix",
+                        label: e(i)("form.config.env.fields.prefix.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.env.fields.prefix.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        placeholder: e(i)("form.config.env.fields.prefix.placeholder"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "placeholder", "readonly"]),
+                      l.config.base64FieldAvailable ? (_(), S(Y, {
+                        key: 0,
+                        modelValue: a[e(t).ENV].base64_decode,
+                        "onUpdate:modelValue": o[2] || (o[2] = (r) => a[e(t).ENV].base64_decode = r),
+                        "data-testid": "vault-form-config-env-base64_decode",
+                        label: e(i)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : M("", !0)
+                    ])) : M("", !0),
+                    p.value === e(t).AWS ? (_(), G("div", {
+                      key: `${e(t).AWS}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(oe, {
+                        modelValue: a[e(t).AWS].region,
+                        "onUpdate:modelValue": o[3] || (o[3] = (r) => a[e(t).AWS].region = r),
+                        "data-testid": "vault-form-config-aws-region",
+                        items: _e,
+                        label: e(i)("form.config.aws.fields.region.label"),
+                        "label-attributes": { info: e(i)("form.config.aws.fields.region.tooltip") },
+                        placeholder: e(i)("form.config.aws.fields.region.placeholder"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "placeholder", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AWS].endpoint_url,
+                        "onUpdate:modelValue": o[4] || (o[4] = (r) => a[e(t).AWS].endpoint_url = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-aws-endpoint_url",
+                        label: e(i)("form.config.aws.fields.endpoint_url.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.aws.fields.endpoint_url.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AWS].assume_role_arn,
+                        "onUpdate:modelValue": o[5] || (o[5] = (r) => a[e(t).AWS].assume_role_arn = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-aws-assume_role_arn",
+                        label: e(i)("form.config.aws.fields.assume_role_arn.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.aws.fields.assume_role_arn.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AWS].role_session_name,
+                        "onUpdate:modelValue": o[6] || (o[6] = (r) => a[e(t).AWS].role_session_name = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-aws-role_session_name",
+                        label: e(i)("form.config.aws.fields.role_session_name.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.aws.fields.role_session_name.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      l.config.awsStsEndpointUrlAvailable ? (_(), S(v, {
+                        key: 0,
+                        modelValue: a[e(t).AWS].sts_endpoint_url,
+                        "onUpdate:modelValue": o[7] || (o[7] = (r) => a[e(t).AWS].sts_endpoint_url = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-aws-sts_endpoint_url",
+                        label: e(i)("form.config.aws.fields.sts_endpoint_url.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.aws.fields.sts_endpoint_url.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : M("", !0),
+                      l.config.base64FieldAvailable ? (_(), S(Y, {
+                        key: 1,
+                        modelValue: a[e(t).AWS].base64_decode,
+                        "onUpdate:modelValue": o[8] || (o[8] = (r) => a[e(t).AWS].base64_decode = r),
+                        "data-testid": "vault-form-config-aws-base64_decode",
+                        label: e(i)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : M("", !0)
+                    ])) : M("", !0),
+                    p.value === e(t).GCP ? (_(), G("div", {
+                      key: `${e(t).GCP}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(v, {
+                        modelValue: a[e(t).GCP].project_id,
+                        "onUpdate:modelValue": o[9] || (o[9] = (r) => a[e(t).GCP].project_id = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-gcp-project-id",
+                        label: e(i)("form.config.gcp.fields.project_id.label"),
+                        placeholder: e(i)("form.config.gcp.fields.project_id.placeholder"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, {
+                        "label-tooltip": g(() => [
+                          u(e(f), {
+                            keypath: "form.config.gcp.fields.project_id.tooltip.text",
+                            scope: "global"
+                          }, {
+                            "italic-text": g(() => [
+                              x("em", null, $(e(i)("form.config.gcp.fields.project_id.tooltip.italicText")), 1)
+                            ]),
+                            _: 1
+                          })
+                        ]),
+                        _: 1
+                      }, 8, ["modelValue", "label", "placeholder", "readonly"]),
+                      l.config.base64FieldAvailable ? (_(), S(Y, {
+                        key: 0,
+                        modelValue: a[e(t).GCP].base64_decode,
+                        "onUpdate:modelValue": o[10] || (o[10] = (r) => a[e(t).GCP].base64_decode = r),
+                        "data-testid": "vault-form-config-gcp-base64_decode",
+                        label: e(i)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : M("", !0)
+                    ])) : M("", !0),
+                    p.value === e(t).HCV ? (_(), G("div", {
+                      key: `${e(t).HCV}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(oe, {
+                        modelValue: a[e(t).HCV].protocol,
+                        "onUpdate:modelValue": o[11] || (o[11] = (r) => a[e(t).HCV].protocol = r),
+                        "data-testid": "vault-form-config-hcv-protocol",
+                        items: ue,
+                        label: e(i)("form.config.hcv.fields.protocol.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      l.config.hcvSslVerifyAvailable ? (_(), S(Y, {
+                        key: 0,
+                        modelValue: a[e(t).HCV].ssl_verify,
+                        "onUpdate:modelValue": o[12] || (o[12] = (r) => a[e(t).HCV].ssl_verify = r),
+                        "data-testid": "vault-form-config-hcv-ssl_verify",
+                        label: e(i)("form.config.hcv.fields.ssl_verify.label"),
+                        readonly: d.isReadonly
+                      }, null, 8, ["modelValue", "label", "readonly"])) : M("", !0),
+                      u(v, {
+                        modelValue: a[e(t).HCV].host,
+                        "onUpdate:modelValue": o[13] || (o[13] = (r) => a[e(t).HCV].host = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-hcv-host",
+                        label: e(i)("form.config.hcv.fields.host.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).HCV].port,
+                        "onUpdate:modelValue": o[14] || (o[14] = (r) => a[e(t).HCV].port = r),
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-hcv-port",
+                        label: e(i)("form.config.hcv.fields.port.label"),
+                        min: "0",
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "number"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).HCV].mount,
+                        "onUpdate:modelValue": o[15] || (o[15] = (r) => a[e(t).HCV].mount = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-hcv-mount",
+                        label: e(i)("form.config.hcv.fields.mount.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(oe, {
+                        modelValue: a[e(t).HCV].kv,
+                        "onUpdate:modelValue": o[16] || (o[16] = (r) => a[e(t).HCV].kv = r),
+                        "data-testid": "vault-form-config-hcv-kv",
+                        items: W,
+                        label: e(i)("form.config.hcv.fields.kv.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).HCV].namespace,
+                        "onUpdate:modelValue": o[17] || (o[17] = (r) => a[e(t).HCV].namespace = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-hcv-namespace",
+                        label: e(i)("form.config.hcv.fields.namespace.label"),
+                        readonly: d.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(oe, {
+                        modelValue: a[e(t).HCV].auth_method,
+                        "onUpdate:modelValue": o[18] || (o[18] = (r) => a[e(t).HCV].auth_method = r),
+                        "data-testid": "vault-form-config-hcv-auth_method",
+                        items: [
+                          { label: e(m).TOKEN, value: e(m).TOKEN },
+                          { label: e(m).K8S, value: e(m).K8S },
+                          ...l.config.hcvAppRoleMethodAvailable ? [{ label: e(m).APP_ROLE, value: e(m).APP_ROLE }] : [],
+                          ...l.config.hcvCertMethodAvailable ? [{ label: e(m).CERT, value: e(m).CERT }] : [],
+                          ...l.config.hcvJwtMethodAvailable ? [{ label: e(m).JWT, value: e(m).JWT }] : [],
+                          ...l.config.hcvCspAuthMethodsAvailable ? [
+                            { label: e(m).AWS_IAM, value: e(m).AWS_IAM },
+                            { label: e(m).AWS_EC2, value: e(m).AWS_EC2 },
+                            { label: e(m).AZURE, value: e(m).AZURE },
+                            { label: e(m).GCP_GCE, value: e(m).GCP_GCE },
+                            { label: e(m).GCP_IAM, value: e(m).GCP_IAM }
+                          ] : []
+                        ],
+                        label: e(i)("form.config.hcv.fields.auth_method.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "items", "label", "readonly"]),
+                      a[e(t).HCV].auth_method === e(m).TOKEN ? (_(), G("div", ga, [
+                        V.value ? (_(), S(e(He), {
+                          key: 1,
+                          modelValue: a[e(t).HCV].token,
+                          "onUpdate:modelValue": o[20] || (o[20] = (r) => a[e(t).HCV].token = r),
+                          "data-testid": "vault-form-config-hcv-token",
+                          label: e(i)("form.config.hcv.fields.token.label"),
+                          mode: Q.value,
+                          readonly: d.isReadonly,
+                          required: Q.value === "create",
+                          "use-secret-input": ""
+                        }, null, 8, ["modelValue", "label", "mode", "readonly", "required"])) : (_(), S(e(Ce), {
+                          key: 0,
+                          modelValue: a[e(t).HCV].token,
+                          "onUpdate:modelValue": o[19] || (o[19] = (r) => a[e(t).HCV].token = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-token",
+                          label: e(i)("form.config.hcv.fields.token.label"),
+                          readonly: d.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]))
+                      ])) : a[e(t).HCV].auth_method === e(m).K8S ? (_(), G("div", ya, [
+                        u(v, {
+                          modelValue: a[e(t).HCV].kube_role,
+                          "onUpdate:modelValue": o[21] || (o[21] = (r) => a[e(t).HCV].kube_role = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-kube_role",
+                          label: e(i)("form.config.hcv.fields.kube_role.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].kube_auth_path,
+                          "onUpdate:modelValue": o[22] || (o[22] = (r) => a[e(t).HCV].kube_auth_path = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-kube_auth_path",
+                          label: e(i)("form.config.hcv.fields.kube_auth_path.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].kube_api_token_file,
+                          "onUpdate:modelValue": o[23] || (o[23] = (r) => a[e(t).HCV].kube_api_token_file = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-kube_api_token_file",
+                          label: e(i)("form.config.hcv.fields.kube_api_token_file.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"])
+                      ])) : l.config.hcvCspAuthMethodsAvailable && a[e(t).HCV].auth_method === e(m).AWS_IAM ? (_(), G("div", ba, [
+                        u(v, {
+                          modelValue: a[e(t).HCV].aws_auth_role,
+                          "onUpdate:modelValue": o[24] || (o[24] = (r) => a[e(t).HCV].aws_auth_role = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_auth_role",
+                          label: e(i)("form.config.hcv.fields.aws_auth_role.label"),
+                          readonly: d.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].aws_auth_region,
+                          "onUpdate:modelValue": o[25] || (o[25] = (r) => a[e(t).HCV].aws_auth_region = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_auth_region",
+                          label: e(i)("form.config.hcv.fields.aws_auth_region.label"),
+                          readonly: d.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].aws_login_path,
+                          "onUpdate:modelValue": o[26] || (o[26] = (r) => a[e(t).HCV].aws_login_path = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_login_path",
+                          label: e(i)("form.config.hcv.fields.aws_login_path.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(e(Ce), {
+                          modelValue: a[e(t).HCV].aws_access_key_id,
+                          "onUpdate:modelValue": o[27] || (o[27] = (r) => a[e(t).HCV].aws_access_key_id = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_access_key_id",
+                          label: e(i)("form.config.hcv.fields.aws_access_key_id.label"),
+                          readonly: d.isReadonly
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        V.value ? (_(), S(e(He), {
+                          key: 1,
+                          modelValue: a[e(t).HCV].aws_secret_access_key,
+                          "onUpdate:modelValue": o[29] || (o[29] = (r) => a[e(t).HCV].aws_secret_access_key = r),
+                          "data-testid": "vault-form-config-hcv-aws_secret_access_key",
+                          label: e(i)("form.config.hcv.fields.aws_secret_access_key.label"),
+                          mode: Q.value,
+                          readonly: d.isReadonly,
+                          "use-secret-input": ""
+                        }, null, 8, ["modelValue", "label", "mode", "readonly"])) : (_(), S(e(Ce), {
+                          key: 0,
+                          modelValue: a[e(t).HCV].aws_secret_access_key,
+                          "onUpdate:modelValue": o[28] || (o[28] = (r) => a[e(t).HCV].aws_secret_access_key = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_secret_access_key",
+                          label: e(i)("form.config.hcv.fields.aws_secret_access_key.label"),
+                          readonly: d.isReadonly
+                        }, null, 8, ["modelValue", "label", "readonly"])),
+                        u(v, {
+                          modelValue: a[e(t).HCV].aws_sts_endpoint_url,
+                          "onUpdate:modelValue": o[30] || (o[30] = (r) => a[e(t).HCV].aws_sts_endpoint_url = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_sts_endpoint_url",
+                          label: e(i)("form.config.hcv.fields.aws_sts_endpoint_url.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].aws_assume_role_arn,
+                          "onUpdate:modelValue": o[31] || (o[31] = (r) => a[e(t).HCV].aws_assume_role_arn = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_assume_role_arn",
+                          label: e(i)("form.config.hcv.fields.aws_assume_role_arn.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].aws_role_session_name,
+                          "onUpdate:modelValue": o[32] || (o[32] = (r) => a[e(t).HCV].aws_role_session_name = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_role_session_name",
+                          label: e(i)("form.config.hcv.fields.aws_role_session_name.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"])
+                      ])) : l.config.hcvCspAuthMethodsAvailable && a[e(t).HCV].auth_method === e(m).AWS_EC2 ? (_(), G("div", ha, [
+                        u(v, {
+                          modelValue: a[e(t).HCV].aws_auth_role,
+                          "onUpdate:modelValue": o[33] || (o[33] = (r) => a[e(t).HCV].aws_auth_role = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_auth_role",
+                          label: e(i)("form.config.hcv.fields.aws_auth_role.label"),
+                          readonly: d.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(e(Ce), {
+                          modelValue: a[e(t).HCV].aws_auth_nonce,
+                          "onUpdate:modelValue": o[34] || (o[34] = (r) => a[e(t).HCV].aws_auth_nonce = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_auth_nonce",
+                          label: e(i)("form.config.hcv.fields.aws_auth_nonce.label"),
+                          readonly: d.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].aws_login_path,
+                          "onUpdate:modelValue": o[35] || (o[35] = (r) => a[e(t).HCV].aws_login_path = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-aws_login_path",
+                          label: e(i)("form.config.hcv.fields.aws_login_path.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"])
+                      ])) : l.config.hcvCspAuthMethodsAvailable && a[e(t).HCV].auth_method === e(m).AZURE ? (_(), G("div", Va, [
+                        u(v, {
+                          modelValue: a[e(t).HCV].azure_auth_role,
+                          "onUpdate:modelValue": o[36] || (o[36] = (r) => a[e(t).HCV].azure_auth_role = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-azure_auth_role",
+                          label: e(i)("form.config.hcv.fields.azure_auth_role.label"),
+                          readonly: d.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].azure_login_path,
+                          "onUpdate:modelValue": o[37] || (o[37] = (r) => a[e(t).HCV].azure_login_path = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-azure_login_path",
+                          label: e(i)("form.config.hcv.fields.azure_login_path.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"])
+                      ])) : l.config.hcvCspAuthMethodsAvailable && a[e(t).HCV].auth_method === e(m).GCP_GCE ? (_(), G("div", wa, [
+                        u(v, {
+                          modelValue: a[e(t).HCV].gcp_auth_role,
+                          "onUpdate:modelValue": o[38] || (o[38] = (r) => a[e(t).HCV].gcp_auth_role = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-gcp_auth_role",
+                          label: e(i)("form.config.hcv.fields.gcp_auth_role.label"),
+                          readonly: d.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].gcp_login_path,
+                          "onUpdate:modelValue": o[39] || (o[39] = (r) => a[e(t).HCV].gcp_login_path = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-gcp_login_path",
+                          label: e(i)("form.config.hcv.fields.gcp_login_path.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"])
+                      ])) : l.config.hcvCspAuthMethodsAvailable && a[e(t).HCV].auth_method === e(m).GCP_IAM ? (_(), G("div", ka, [
+                        u(v, {
+                          modelValue: a[e(t).HCV].gcp_auth_role,
+                          "onUpdate:modelValue": o[40] || (o[40] = (r) => a[e(t).HCV].gcp_auth_role = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-gcp_auth_role",
+                          label: e(i)("form.config.hcv.fields.gcp_auth_role.label"),
+                          readonly: d.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].gcp_login_path,
+                          "onUpdate:modelValue": o[41] || (o[41] = (r) => a[e(t).HCV].gcp_login_path = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-gcp_login_path",
+                          label: e(i)("form.config.hcv.fields.gcp_login_path.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].gcp_service_account,
+                          "onUpdate:modelValue": o[42] || (o[42] = (r) => a[e(t).HCV].gcp_service_account = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-gcp_service_account",
+                          label: e(i)("form.config.hcv.fields.gcp_service_account.label"),
+                          readonly: d.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].gcp_jwt_exp,
+                          "onUpdate:modelValue": o[43] || (o[43] = (r) => a[e(t).HCV].gcp_jwt_exp = r),
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-gcp_jwt_exp",
+                          label: e(i)("form.config.hcv.fields.gcp_jwt_exp.label"),
+                          readonly: d.isReadonly,
+                          required: "",
+                          type: "number"
+                        }, null, 8, ["modelValue", "label", "readonly"])
+                      ])) : a[e(t).HCV].auth_method === e(m).APP_ROLE ? (_(), G("div", Ca, [
+                        u(v, {
+                          modelValue: a[e(t).HCV].approle_auth_path,
+                          "onUpdate:modelValue": o[44] || (o[44] = (r) => a[e(t).HCV].approle_auth_path = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-approle_auth_path",
+                          label: e(i)("form.config.hcv.fields.approle_auth_path.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].approle_role_id,
+                          "onUpdate:modelValue": o[45] || (o[45] = (r) => a[e(t).HCV].approle_role_id = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-approle_role_id",
+                          label: e(i)("form.config.hcv.fields.approle_role_id.label"),
+                          readonly: d.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(e(Ce), {
+                          modelValue: a[e(t).HCV].approle_secret_id,
+                          "onUpdate:modelValue": o[46] || (o[46] = (r) => a[e(t).HCV].approle_secret_id = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-approle_secret_id",
+                          label: e(i)("form.config.hcv.fields.approle_secret_id.label"),
+                          readonly: d.isReadonly
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].approle_secret_id_file,
+                          "onUpdate:modelValue": o[47] || (o[47] = (r) => a[e(t).HCV].approle_secret_id_file = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-approle_secret_id_file",
+                          label: e(i)("form.config.hcv.fields.approle_secret_id_file.label"),
+                          readonly: d.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(Y, {
+                          modelValue: a[e(t).HCV].approle_response_wrapping,
+                          "onUpdate:modelValue": o[48] || (o[48] = (r) => a[e(t).HCV].approle_response_wrapping = r),
+                          "data-testid": "vault-form-config-hcv-approle_response_wrapping",
+                          label: e(i)("form.config.hcv.fields.approle_response_wrapping.label")
+                        }, null, 8, ["modelValue", "label"])
+                      ])) : a[e(t).HCV].auth_method === e(m).CERT ? (_(), G("div", Aa, [
+                        u(v, {
+                          modelValue: a[e(t).HCV].cert_auth_role_name,
+                          "onUpdate:modelValue": o[49] || (o[49] = (r) => a[e(t).HCV].cert_auth_role_name = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-cert_auth_role_name",
+                          label: e(i)("form.config.hcv.fields.cert_auth_role_name.label"),
+                          readonly: d.isReadonly
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(Ee, {
+                          modelValue: a[e(t).HCV].cert_auth_cert,
+                          "onUpdate:modelValue": o[50] || (o[50] = (r) => a[e(t).HCV].cert_auth_cert = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-cert_auth_cert",
+                          label: e(i)("form.config.hcv.fields.cert_auth_cert.label"),
+                          readonly: d.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        V.value ? (_(), S(e(He), {
+                          key: 1,
+                          modelValue: a[e(t).HCV].cert_auth_cert_key,
+                          "onUpdate:modelValue": o[52] || (o[52] = (r) => a[e(t).HCV].cert_auth_cert_key = r),
+                          "data-testid": "vault-form-config-hcv-cert_auth_cert_key",
+                          label: e(i)("form.config.hcv.fields.cert_auth_cert_key.label"),
+                          labels: { rotateLabel: e(i)("form.config.hcv.fields.cert_auth_cert_key.rotateLabel") },
+                          mode: Q.value,
+                          multiline: "",
+                          placeholder: "",
+                          readonly: d.isReadonly,
+                          required: Q.value === "create",
+                          onRotate: o[53] || (o[53] = (r) => ve.value = !0)
+                        }, {
+                          alert: g(() => [
+                            ve.value ? (_(), S(Oe, {
+                              key: 0,
+                              message: e(i)("form.config.hcv.fields.cert_auth_cert_key.rotateAlert")
+                            }, null, 8, ["message"])) : M("", !0)
+                          ]),
+                          _: 1
+                        }, 8, ["modelValue", "label", "labels", "mode", "readonly", "required"])) : (_(), S(Ee, {
+                          key: 0,
+                          modelValue: a[e(t).HCV].cert_auth_cert_key,
+                          "onUpdate:modelValue": o[51] || (o[51] = (r) => a[e(t).HCV].cert_auth_cert_key = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-cert_auth_cert_key",
+                          label: e(i)("form.config.hcv.fields.cert_auth_cert_key.label"),
+                          readonly: d.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]))
+                      ])) : a[e(t).HCV].auth_method === e(m).JWT ? (_(), G("div", Sa, [
+                        u(v, {
+                          modelValue: a[e(t).HCV].oauth2_client_id,
+                          "onUpdate:modelValue": o[54] || (o[54] = (r) => a[e(t).HCV].oauth2_client_id = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-oauth2_client_id",
+                          label: e(i)("form.config.hcv.fields.oauth2_client_id.label"),
+                          readonly: d.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        V.value ? (_(), S(e(He), {
+                          key: 1,
+                          modelValue: a[e(t).HCV].oauth2_client_secret,
+                          "onUpdate:modelValue": o[56] || (o[56] = (r) => a[e(t).HCV].oauth2_client_secret = r),
+                          "data-testid": "vault-form-config-hcv-oauth2_client_secret",
+                          label: e(i)("form.config.hcv.fields.oauth2_client_secret.label"),
+                          mode: Q.value,
+                          readonly: d.isReadonly,
+                          required: Q.value === "create",
+                          "use-secret-input": ""
+                        }, null, 8, ["modelValue", "label", "mode", "readonly", "required"])) : (_(), S(e(Ce), {
+                          key: 0,
+                          modelValue: a[e(t).HCV].oauth2_client_secret,
+                          "onUpdate:modelValue": o[55] || (o[55] = (r) => a[e(t).HCV].oauth2_client_secret = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-oauth2_client_secret",
+                          label: e(i)("form.config.hcv.fields.oauth2_client_secret.label"),
+                          readonly: d.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"])),
+                        u(v, {
+                          modelValue: a[e(t).HCV].jwt_role,
+                          "onUpdate:modelValue": o[57] || (o[57] = (r) => a[e(t).HCV].jwt_role = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-jwt_role",
+                          label: e(i)("form.config.hcv.fields.jwt_role.label"),
+                          "label-attributes": {
+                            info: e(i)("form.config.hcv.fields.jwt_role.tooltip"),
+                            tooltipAttributes: { maxWidth: "400" }
+                          },
+                          readonly: d.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].oauth2_token_endpoint,
+                          "onUpdate:modelValue": o[58] || (o[58] = (r) => a[e(t).HCV].oauth2_token_endpoint = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-oauth2_token_endpoint",
+                          label: e(i)("form.config.hcv.fields.oauth2_token_endpoint.label"),
+                          readonly: d.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(v, {
+                          modelValue: a[e(t).HCV].oauth2_audiences,
+                          "onUpdate:modelValue": o[59] || (o[59] = (r) => a[e(t).HCV].oauth2_audiences = r),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-oauth2_audiences",
+                          label: e(i)("form.config.hcv.fields.oauth2_audiences.label"),
+                          "label-attributes": {
+                            info: e(i)("form.config.hcv.fields.oauth2_audiences.tooltip"),
+                            tooltipAttributes: { maxWidth: "400" }
+                          },
+                          readonly: d.isReadonly
+                        }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])
+                      ])) : M("", !0),
+                      l.config.base64FieldAvailable ? (_(), S(Y, {
+                        key: 11,
+                        modelValue: a[e(t).HCV].base64_decode,
+                        "onUpdate:modelValue": o[60] || (o[60] = (r) => a[e(t).HCV].base64_decode = r),
+                        "data-testid": "vault-form-config-hcv-base64_decode",
+                        label: e(i)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : M("", !0)
+                    ])) : M("", !0),
+                    p.value === e(t).AZURE ? (_(), G("div", {
+                      key: `${e(t).AZURE}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(v, {
+                        modelValue: a[e(t).AZURE].location,
+                        "onUpdate:modelValue": o[61] || (o[61] = (r) => a[e(t).AZURE].location = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-location",
+                        label: e(i)("form.config.azure.fields.location.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AZURE].vault_uri,
+                        "onUpdate:modelValue": o[62] || (o[62] = (r) => a[e(t).AZURE].vault_uri = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-uri",
+                        label: e(i)("form.config.azure.fields.vault_uri.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AZURE].credentials_prefix,
+                        "onUpdate:modelValue": o[63] || (o[63] = (r) => a[e(t).AZURE].credentials_prefix = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-prefix",
+                        label: e(i)("form.config.azure.fields.credential_prefix.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(oe, {
+                        modelValue: a[e(t).AZURE].type,
+                        "onUpdate:modelValue": o[64] || (o[64] = (r) => a[e(t).AZURE].type = r),
+                        "data-testid": "vault-form-config-azure-type",
+                        items: te,
+                        label: e(i)("form.config.azure.fields.type.label"),
+                        placeholder: e(i)("form.config.azure.fields.type.placeholder"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "label", "placeholder", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AZURE].client_id,
+                        "onUpdate:modelValue": o[65] || (o[65] = (r) => a[e(t).AZURE].client_id = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-client-id",
+                        label: e(i)("form.config.azure.fields.client_id.label"),
+                        readonly: d.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AZURE].tenant_id,
+                        "onUpdate:modelValue": o[66] || (o[66] = (r) => a[e(t).AZURE].tenant_id = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-tenant-id",
+                        label: e(i)("form.config.azure.fields.tenant_id.label"),
+                        readonly: d.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      l.config.base64FieldAvailable ? (_(), S(Y, {
+                        key: 0,
+                        modelValue: a[e(t).AZURE].base64_decode,
+                        "onUpdate:modelValue": o[67] || (o[67] = (r) => a[e(t).AZURE].base64_decode = r),
+                        "data-testid": "vault-form-config-azure-base64_decode",
+                        label: e(i)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : M("", !0)
+                    ])) : M("", !0),
+                    p.value === e(t).AZURE_CERTS ? (_(), G("div", {
+                      key: `${e(t).AZURE_CERTS}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(v, {
+                        modelValue: a[e(t).AZURE_CERTS].vault_uri,
+                        "onUpdate:modelValue": o[68] || (o[68] = (r) => a[e(t).AZURE_CERTS].vault_uri = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-certs-vault-uri",
+                        label: e(i)("form.config.azure-certs.fields.vault_uri.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AZURE_CERTS].credentials_prefix,
+                        "onUpdate:modelValue": o[69] || (o[69] = (r) => a[e(t).AZURE_CERTS].credentials_prefix = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-certs-credentials-prefix",
+                        label: e(i)("form.config.azure-certs.fields.credential_prefix.label"),
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AZURE_CERTS].client_id,
+                        "onUpdate:modelValue": o[70] || (o[70] = (r) => a[e(t).AZURE_CERTS].client_id = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-certs-client-id",
+                        label: e(i)("form.config.azure-certs.fields.client_id.label"),
+                        readonly: d.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).AZURE_CERTS].tenant_id,
+                        "onUpdate:modelValue": o[71] || (o[71] = (r) => a[e(t).AZURE_CERTS].tenant_id = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-certs-tenant-id",
+                        label: e(i)("form.config.azure-certs.fields.tenant_id.label"),
+                        readonly: d.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"])
+                    ])) : M("", !0),
+                    p.value === e(t).CONJUR ? (_(), G("div", {
+                      key: `${e(t).CONJUR}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(v, {
+                        modelValue: a[e(t).CONJUR].endpoint_url,
+                        "onUpdate:modelValue": o[72] || (o[72] = (r) => a[e(t).CONJUR].endpoint_url = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-conjur-endpoint_url",
+                        label: e(i)("form.config.conjur.fields.endpoint_url.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.conjur.fields.endpoint_url.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).CONJUR].login,
+                        "onUpdate:modelValue": o[73] || (o[73] = (r) => a[e(t).CONJUR].login = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-conjur-login",
+                        label: e(i)("form.config.conjur.fields.login.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.conjur.fields.login.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      u(v, {
+                        modelValue: a[e(t).CONJUR].account,
+                        "onUpdate:modelValue": o[74] || (o[74] = (r) => a[e(t).CONJUR].account = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-conjur-account",
+                        label: e(i)("form.config.conjur.fields.account.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.conjur.fields.account.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      V.value ? (_(), S(e(He), {
+                        key: 1,
+                        modelValue: a[e(t).CONJUR].api_key,
+                        "onUpdate:modelValue": o[76] || (o[76] = (r) => a[e(t).CONJUR].api_key = r),
+                        "data-testid": "vault-form-config-conjur-api_key",
+                        label: e(i)("form.config.conjur.fields.api_key.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.conjur.fields.api_key.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        mode: Q.value,
+                        readonly: d.isReadonly,
+                        required: Q.value === "create",
+                        "use-secret-input": ""
+                      }, null, 8, ["modelValue", "label", "label-attributes", "mode", "readonly", "required"])) : (_(), S(e(Ce), {
+                        key: 0,
+                        modelValue: a[e(t).CONJUR].api_key,
+                        "onUpdate:modelValue": o[75] || (o[75] = (r) => a[e(t).CONJUR].api_key = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-conjur-api_key",
+                        label: e(i)("form.config.conjur.fields.api_key.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.conjur.fields.api_key.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly,
+                        required: ""
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])),
+                      l.config.base64FieldAvailable ? (_(), S(Y, {
+                        key: 2,
+                        modelValue: a[e(t).CONJUR].base64_decode,
+                        "onUpdate:modelValue": o[77] || (o[77] = (r) => a[e(t).CONJUR].base64_decode = r),
+                        "data-testid": "vault-form-config-env-base64_decode",
+                        label: e(i)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : M("", !0)
+                    ])) : M("", !0),
+                    p.value === e(t).FS ? (_(), G("div", {
+                      key: `${e(t).FS}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(v, {
+                        modelValue: a[e(t).FS].prefix,
+                        "onUpdate:modelValue": o[78] || (o[78] = (r) => a[e(t).FS].prefix = r),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-fs-prefix",
+                        label: e(i)("form.config.fs.fields.prefix.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.fs.fields.prefix.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      l.config.base64FieldAvailable ? (_(), S(Y, {
+                        key: 0,
+                        modelValue: a[e(t).FS].base64_decode,
+                        "onUpdate:modelValue": o[79] || (o[79] = (r) => a[e(t).FS].base64_decode = r),
+                        "data-testid": "vault-form-config-fs-base64_decode",
+                        label: e(i)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(i)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: d.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : M("", !0)
+                    ])) : M("", !0),
+                    l.config.ttl ? (_(), G("div", Ra, [
+                      L.value ? (_(), S(Ie, {
+                        key: 0,
+                        class: "advanced-fields-collapse",
+                        "data-testid": "advanced-fields-collapse",
+                        "trigger-alignment": "leading",
+                        "trigger-label": e(i)("form.config.advancedFields.title")
+                      }, {
+                        default: g(() => [
+                          x("div", Ea, [
+                            x("div", Ia, [
+                              u(v, {
+                                modelValue: a[p.value].ttl,
+                                "onUpdate:modelValue": o[80] || (o[80] = (r) => a[p.value].ttl = r),
+                                "data-testid": "vault-ttl-input",
+                                label: e(i)("form.config.advancedFields.ttl"),
+                                "label-attributes": {
+                                  info: e(i)("form.config.advancedFields.ttlTooltip"),
+                                  tooltipAttributes: { maxWidth: "400" }
+                                },
+                                type: "number"
+                              }, null, 8, ["modelValue", "label", "label-attributes"])
+                            ]),
+                            x("div", xa, [
+                              u(v, {
+                                modelValue: a[p.value].neg_ttl,
+                                "onUpdate:modelValue": o[81] || (o[81] = (r) => a[p.value].neg_ttl = r),
+                                "data-testid": "vault-neg-ttl-input",
+                                label: e(i)("form.config.advancedFields.negTtl"),
+                                "label-attributes": {
+                                  info: e(i)("form.config.advancedFields.negTtlTooltip"),
+                                  tooltipAttributes: { maxWidth: "400" }
+                                },
+                                type: "number"
+                              }, null, 8, ["modelValue", "label", "label-attributes"])
+                            ])
+                          ]),
+                          x("div", Ua, [
+                            x("div", Ha, [
+                              u(v, {
+                                modelValue: a[p.value].resurrect_ttl,
+                                "onUpdate:modelValue": o[82] || (o[82] = (r) => a[p.value].resurrect_ttl = r),
+                                "data-testid": "vault-resurrect-ttl-input",
+                                label: e(i)("form.config.advancedFields.resurrectTtl"),
+                                "label-attributes": {
+                                  info: e(i)("form.config.advancedFields.resurrectTtlTooltip"),
+                                  tooltipAttributes: { maxWidth: "400" }
+                                },
+                                type: "number"
+                              }, null, 8, ["modelValue", "label", "label-attributes"])
+                            ])
+                          ])
+                        ]),
+                        _: 1
+                      }, 8, ["trigger-label"])) : M("", !0)
+                    ])) : M("", !0)
+                  ]),
+                  _: 1
+                })
+              ]),
+              _: 1
+            }, 8, ["description", "title"]),
+            u(e(ze), {
+              description: e(i)("form.sections.general.description"),
+              title: e(i)("form.sections.general.title")
+            }, {
+              default: g(() => [
+                u(v, {
+                  modelValue: d.fields.prefix,
+                  "onUpdate:modelValue": o[83] || (o[83] = (r) => d.fields.prefix = r),
+                  modelModifiers: { trim: !0 },
+                  autocomplete: "off",
+                  "data-testid": "vault-form-prefix",
+                  help: e(i)(V.value ? "form.fields.prefix_ai_gateway.help" : "form.fields.prefix.help"),
+                  label: e(i)(V.value ? "form.fields.prefix_ai_gateway.label" : "form.fields.prefix.label"),
+                  "label-attributes": {
+                    info: e(i)(V.value ? "form.fields.prefix_ai_gateway.tooltip" : "form.fields.prefix.tooltip"),
+                    tooltipAttributes: { maxWidth: "400" }
+                  },
+                  placeholder: e(i)(V.value ? "form.fields.prefix_ai_gateway.placeholder" : "form.fields.prefix.placeholder"),
+                  readonly: d.isReadonly,
+                  required: "",
+                  type: "text"
+                }, null, 8, ["modelValue", "help", "label", "label-attributes", "placeholder", "readonly"]),
+                u(Ee, {
+                  modelValue: d.fields.description,
+                  "onUpdate:modelValue": o[84] || (o[84] = (r) => d.fields.description = r),
+                  modelModifiers: { trim: !0 },
+                  "character-limit": 1e3,
+                  class: "vault-form-textarea",
+                  "data-testid": "vault-form-description",
+                  label: e(i)("form.fields.description.label"),
+                  placeholder: e(i)("form.fields.description.placeholder"),
+                  readonly: d.isReadonly
+                }, null, 8, ["modelValue", "label", "placeholder", "readonly"]),
+                V.value ? M("", !0) : (_(), S(v, {
+                  key: 0,
+                  modelValue: d.fields.tags,
+                  "onUpdate:modelValue": o[85] || (o[85] = (r) => d.fields.tags = r),
+                  modelModifiers: { trim: !0 },
+                  autocomplete: "off",
+                  "data-testid": "vault-form-tags",
+                  help: e(i)("form.fields.tags.help"),
+                  label: e(i)("form.fields.tags.label"),
+                  placeholder: e(i)("form.fields.tags.placeholder"),
+                  readonly: d.isReadonly,
+                  type: "text"
+                }, null, 8, ["modelValue", "help", "label", "placeholder", "readonly"])),
+                V.value ? ot(c.$slots, "labels", {
+                  disabled: d.isReadonly,
+                  labelList: d.fields.labelList,
+                  updateLabelList: B
+                }, void 0, !0, 1) : M("", !0)
+              ]),
+              _: 3
+            }, 8, ["description", "title"])
+          ]),
+          _: 3
+        }, 8, ["can-submit", "config", "edit-id", "entity-type", "error-message", "fetch-url", "form-fields", "is-readonly", "tabs-to-hide"])
+      ]);
+    };
+  }
+}), fl = /* @__PURE__ */ we(Ta, [["__scopeId", "data-v-3ef5e790"]]), Ma = { class: "kong-ui-vault-entity-config-card" }, lt = "************", pl = /* @__PURE__ */ be({
+  __name: "VaultConfigCard",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (l) => !(!l || !["konnect", "kongManager"].includes(l?.app) || l.app === "konnect" && l.apiType !== "aiGateway" && !l.controlPlaneId || l.app === "kongManager" && typeof l.workspace != "string" || l.apiType === "aiGateway" && !l.aiGatewayId || !l.entityId)
+    },
+    /**
+     * External link for documentation that determines visibility of Documentation button
+     */
+    configCardDoc: {
+      type: String,
+      default: "",
+      required: !1
+    },
+    /**
+     * Control visibility of card title content
+     */
+    hideTitle: {
+      type: Boolean,
+      default: !1
+    }
+  },
+  emits: ["loading", "fetch:error", "fetch:success"],
+  setup(l) {
+    const y = l, n = ["token", "approle_secret_id", "api_key", "aws_access_key_id", "aws_secret_access_key", "aws_auth_nonce", "cert_auth_cert_key", "oauth2_client_secret"], s = b(() => y.config.apiType === "aiGateway"), f = b(() => (s.value ? se.form.aiGateway?.edit : se.form[y.config?.app]?.edit)?.replace(/{aiGatewayId}/gi, y.config.aiGatewayId || "")), i = (I) => s.value ? $e(I) : I, { i18n: { t: P } } = Re.useI18n(), { convertKeyToTitle: U } = Gt(), { getPropValue: h } = $t(), V = b(() => ({
+      id: {},
+      name: {
+        label: P(s.value ? "labels.vault_type_ai_gateway" : "labels.vault_type")
+      },
+      updated_at: {},
+      created_at: {},
+      prefix: {
+        order: 5,
+        section: et.Basic,
+        label: s.value ? P("labels.vault_name_ai_gateway") : void 0
+      },
+      description: {
+        order: 6,
+        section: et.Basic
+      },
+      ...s.value ? {} : {
+        tags: {
+          order: 7
+        }
+      },
+      config: {
+        order: 8,
+        type: Pt.Json
+      }
+    })), A = (I) => {
+      const d = { ...I.config };
+      n.forEach((p) => {
+        p in d && (d[p] = lt);
+      });
+      const H = { ...I, config: d };
+      if (s.value) {
+        const p = { ...H, type: H.name, name: H.prefix };
+        return delete p.prefix, p;
+      }
+      return H;
+    }, R = (I) => V.value?.[I]?.label || U(I);
+    return (I, d) => (_(), G("div", Ma, [
+      u(e(Ot), {
+        "code-block-record-formatter": A,
+        config: l.config,
+        "config-card-doc": l.configCardDoc,
+        "config-schema": V.value,
+        "entity-type": e(Ze).Vault,
+        "fetch-url": f.value,
+        "formats-to-hide": l.config.apiType === "aiGateway" ? ["terraform", "deck"] : [],
+        "hide-title": l.hideTitle,
+        "record-resolver": i,
+        "onFetch:error": d[0] || (d[0] = (H) => I.$emit("fetch:error", H)),
+        "onFetch:success": d[1] || (d[1] = (H) => I.$emit("fetch:success", H)),
+        onLoading: d[2] || (d[2] = (H) => I.$emit("loading", H))
+      }, {
+        config: g(({ rowValue: H }) => [
+          (_(!0), G(it, null, bt(Object.keys(H).sort(), (p) => (_(), S(e(Ft), {
+            key: p,
+            item: {
+              key: p,
+              value: n.includes(p) ? lt : e(h)(p, H),
+              label: R(p)
+            }
+          }, null, 8, ["item"]))), 128))
+        ]),
+        _: 1
+      }, 8, ["config", "config-card-doc", "config-schema", "entity-type", "fetch-url", "formats-to-hide", "hide-title"])
+    ]));
+  }
+}), Ga = "/v2/control-planes/{controlPlaneId}/core-entities/{workspace}", je = "/v2/control-planes/{controlPlaneId}/{workspace}/config-stores", Fe = "/v1/ai-gateways/{aiGatewayId}", re = {
+  getVault: {
+    konnect: `${Ga}/vaults/{id}`,
+    aiGateway: `${Fe}/vaults/{id}`
+  },
+  list: {
+    konnect: `${je}/{id}/secrets`,
+    aiGateway: `${Fe}/config-stores/{id}/secrets`
+  },
+  form: {
+    konnect: {
+      create: `${je}/{id}/secrets`,
+      edit: `${je}/{id}/secrets/{secretId}`
+    },
+    aiGateway: {
+      create: `${Fe}/config-stores/{id}/secrets`,
+      edit: `${Fe}/config-stores/{id}/secrets/{secretId}`
+    }
+  }
+}, $a = { class: "table-content-overflow-wrapper" }, Pa = /* @__PURE__ */ be({
+  inheritAttrs: !1,
+  __name: "SecretListInner",
+  props: {
+    /** The base konnect config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (l) => !(!l || l?.app !== "konnect" || !l.createRoute || !l.getEditRoute || l.apiType === "aiGateway" && !l.aiGatewayId)
+    },
+    // The config store id for the secrets
+    configStoreId: {
+      type: String,
+      required: !0
+    },
+    // used to override the default identifier for the cache entry
+    cacheIdentifier: {
+      type: String,
+      default: ""
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can create a new entity */
+    canCreate: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can delete a given entity */
+    canDelete: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can edit a given entity */
+    canEdit: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    }
+  },
+  emits: ["error", "delete:success"],
+  setup(l, { emit: y }) {
+    const n = y, s = l, { i18n: { t: f, formatUnixTimeStamp: i } } = Re.useI18n(), { axiosInstance: P } = Se(s.config?.axiosRequestConfig), h = {
+      // the Secret Key column is non-hidable
+      key: { label: f("secrets.list.table_headers.key"), sortable: !1, hidable: !1 },
+      updated_at: { label: f("secrets.list.table_headers.updated_at"), sortable: !1 }
+    }, V = (W) => ({
+      "data-testid": W.key
+    }), A = b(() => s.config.apiType === "aiGateway" ? re.list.aiGateway : re.list[s.config.app]), R = b(() => `${s.config.apiBaseUrl}${A.value}`.replace(/{aiGatewayId}/gi, s.config.aiGatewayId || "").replace(/{controlPlaneId}/gi, s.config?.controlPlaneId || "").replace(/\/{workspace}/gi, s.config?.workspace ? `/${s.config.workspace}` : "").replace(/{id}/gi, s.configStoreId || "")), I = N(""), d = {
+      isExactMatch: !0,
+      placeholder: f("search.placeholder_for_secrets.konnect")
+    }, {
+      fetcher: H,
+      fetcherState: p,
+      fetcherCacheKey: Z
+    } = nt(b(() => ({ ...s.config, cacheIdentifier: s.cacheIdentifier })), R), le = () => {
+      I.value = "";
+    }, z = N(null), ee = (W) => ({
+      label: f("actions.edit"),
+      to: s.config.getEditRoute(W)
+    }), B = N(void 0), L = N(!1), ie = N(!1), w = N(""), a = st(s.config, R.value), de = (W) => {
+      B.value = W, L.value = !0;
+    }, _e = () => {
+      L.value = !1;
+    }, te = async () => {
+      if (B.value?.key) {
+        ie.value = !0;
+        try {
+          await P.delete(a(B.value.key)), ie.value = !1, L.value = !1, Z.value++, n("delete:success", B.value);
+        } catch (W) {
+          w.value = W.response?.data?.message || W.message || f("errors.delete"), n("error", W);
+        } finally {
+          ie.value = !1;
+        }
+      }
+    };
+    Ge(p, (W) => {
+      if (W.status === dt.Error) {
+        z.value = {
+          title: f("errors.general")
+        }, W.error?.response?.data?.message && (z.value.message = W.error.response.data.message), n("error", W.error);
+        return;
+      }
+      z.value = null;
+    });
+    const ue = N({
+      ctaPath: s.config.createRoute,
+      ctaText: void 0,
+      message: `${f("secrets.list.empty_state.description")}${s.config.additionMessageForEmptyState ? ` ${s.config.additionMessageForEmptyState}` : ""}`,
+      title: f("secrets.title")
+    });
+    return Ne(async () => {
+      await s.canCreate() && (ue.value.title = f("secrets.list.empty_state.title"), ue.value.ctaText = f("secrets.list.toolbar_actions.new_secret"));
+    }), (W, J) => {
+      const Q = q("KButton"), ve = q("KDropdownItem");
+      return _(), G(it, null, [
+        u(e(ut), {
+          "cache-identifier": l.cacheIdentifier,
+          "disable-sorting": "",
+          "empty-state-options": ue.value,
+          "enable-entity-actions": "",
+          "error-message": z.value,
+          fetcher: e(H),
+          "fetcher-cache-key": e(Z),
+          "pagination-type": "offset",
+          "preferences-storage-key": "kong-ui-entities-secrets-list",
+          query: I.value,
+          "row-attributes": V,
+          "table-headers": e(h),
+          onClearSearchInput: le
+        }, {
+          "toolbar-filter": g(() => [
+            u(e(ct), {
+              modelValue: I.value,
+              "onUpdate:modelValue": J[0] || (J[0] = (K) => I.value = K),
+              config: d
+            }, null, 8, ["modelValue"])
+          ]),
+          "toolbar-button": g(() => [
+            u(e(Ae), {
+              "auth-function": () => l.canCreate()
+            }, {
+              default: g(() => [
+                u(Q, {
+                  appearance: "primary",
+                  "data-testid": "toolbar-add-secret",
+                  size: "large",
+                  to: l.config.createRoute
+                }, {
+                  default: g(() => [
+                    u(e(qe)),
+                    pe(" " + $(e(f)("secrets.list.toolbar_actions.new_secret")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["to"])
+              ]),
+              _: 1
+            }, 8, ["auth-function"])
+          ]),
+          key: g(({ rowValue: K }) => [
+            x("div", $a, [
+              x("b", null, $(K ?? "-"), 1)
+            ])
+          ]),
+          updated_at: g(({ rowValue: K }) => [
+            x("span", null, $(K ? e(i)(new Date(K).getTime() / 1e3) : "-"), 1)
+          ]),
+          actions: g(({ row: K }) => [
+            u(e(Ae), {
+              "auth-function": () => l.canEdit(K)
+            }, {
+              default: g(() => [
+                u(ve, {
+                  "data-testid": "action-entity-edit",
+                  item: ee(K.key)
+                }, null, 8, ["item"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"]),
+            u(e(Ae), {
+              "auth-function": () => l.canDelete(K)
+            }, {
+              default: g(() => [
+                u(ve, {
+                  danger: "",
+                  "data-testid": "action-entity-delete",
+                  "has-divider": "",
+                  onClick: (ge) => de(K)
+                }, {
+                  default: g(() => [
+                    pe($(e(f)("actions.delete")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["onClick"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"])
+          ]),
+          _: 1
+        }, 8, ["cache-identifier", "empty-state-options", "error-message", "fetcher", "fetcher-cache-key", "query", "table-headers"]),
+        u(e(ft), {
+          "action-pending": ie.value,
+          description: e(f)("delete.description"),
+          "entity-name": B.value && B.value.key,
+          "entity-type": e(pt).Secret,
+          error: w.value,
+          title: e(f)("delete.title_for_secret"),
+          visible: L.value,
+          onCancel: _e,
+          onProceed: te
+        }, null, 8, ["action-pending", "description", "entity-name", "entity-type", "error", "title", "visible"])
+      ], 64);
+    };
+  }
+}), Oa = /* @__PURE__ */ we(Pa, [["__scopeId", "data-v-115ca40d"]]), Fa = { class: "kong-ui-entities-secrets-list" }, Na = /* @__PURE__ */ be({
+  __name: "SecretList",
+  props: {
+    /** The base konnect config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (l) => !(!l || l?.app !== "konnect" || !l.createRoute || !l.getEditRoute || l.apiType === "aiGateway" && !l.aiGatewayId)
+    },
+    // The vault id for the secrets
+    vaultId: {
+      type: String,
+      required: !0
+    },
+    // used to override the default identifier for the cache entry
+    cacheIdentifier: {
+      type: String,
+      default: ""
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can create a new entity */
+    canCreate: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can delete a given entity */
+    canDelete: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can edit a given entity */
+    canEdit: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    }
+  },
+  emits: ["error", "delete:success"],
+  setup(l, { emit: y }) {
+    const n = y, s = l, f = (A) => {
+      n("error", A);
+    }, i = (A) => {
+      n("delete:success", A);
+    }, { axiosInstance: P } = Se(s.config?.axiosRequestConfig), U = N(""), h = b(() => s.config.apiType === "aiGateway" ? re.getVault.aiGateway : re.getVault[s.config.app]), V = b(() => `${s.config.apiBaseUrl}${h.value}`.replace(/{aiGatewayId}/gi, s.config.aiGatewayId || "").replace(/{controlPlaneId}/gi, s.config?.controlPlaneId || "").replace(/\/{workspace}/gi, s.config?.workspace ? `/${s.config.workspace}` : "").replace(/{id}/gi, s.vaultId));
+    return Ne(async () => {
+      try {
+        const { data: A } = await P.get(V.value);
+        U.value = A?.config?.config_store_id;
+      } catch (A) {
+        n("error", A);
+      }
+    }), (A, R) => (_(), G("div", Fa, [
+      U.value ? (_(), S(Oa, rt({ key: 0 }, s, {
+        "config-store-id": U.value,
+        "onDelete:success": i,
+        onError: f
+      }), null, 16, ["config-store-id"])) : M("", !0)
+    ]));
+  }
+}), ml = /* @__PURE__ */ we(Na, [["__scopeId", "data-v-e9c157a0"]]), Ka = /* @__PURE__ */ be({
+  inheritAttrs: !1,
+  __name: "SecretFormInner",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (l) => !(!l || l.app !== "konnect" || l.apiType !== "aiGateway" && !l.controlPlaneId || !l.cancelRoute || l.apiType === "aiGateway" && !l.aiGatewayId)
+    },
+    /** Current config store ID */
+    configStoreId: {
+      type: String,
+      required: !0
+    },
+    /** If a valid secretId is provided, it will put the form in Edit mode instead of Create */
+    secretId: {
+      type: String,
+      required: !1,
+      default: ""
+    }
+  },
+  emits: ["update", "error", "loading"],
+  setup(l, { emit: y }) {
+    const n = l, s = y, { i18n: { t: f } } = Re.useI18n(), i = De(), { axiosInstance: P } = Se(n.config?.axiosRequestConfig), { getMessageFromError: U } = mt(), h = Te({
+      fields: {
+        key: "",
+        value: ""
+      },
+      readonly: !1,
+      errorMessage: ""
+    }), V = Te({
+      key: "",
+      value: ""
+    }), A = b(() => n.config.apiType === "aiGateway" ? re.form.aiGateway : re.form[n.config.app]), R = b(
+      () => A.value?.edit.replace(/{aiGatewayId}/gi, n.config.aiGatewayId || "").replace(/{id}/gi, n.configStoreId).replace(/{secretId}/gi, n.secretId)
+    ), I = () => {
+      i.push(n.config?.cancelRoute || { name: "secret-list" });
+    }, d = (w) => {
+      s("loading", w);
+    }, H = (w) => {
+      s("error", w);
+    }, p = (w) => {
+      h.fields.key = w?.item?.key || w?.key || "", h.fields.value = w?.item?.value || w?.value || "", Object.assign(V, h.fields);
+    }, Z = b(() => n.secretId ? me.Edit : me.Create), le = b(() => Z.value === me.Edit ? "edit" : "create"), z = b(() => `${n.config.apiBaseUrl}${A.value[Z.value]}`.replace(/{aiGatewayId}/gi, n.config.aiGatewayId || "").replace(/{controlPlaneId}/gi, n.config?.controlPlaneId || "").replace(/\/{workspace}/gi, n.config?.workspace ? `/${n.config.workspace}` : "").replace(/{id}/gi, n.configStoreId).replace(/{secretId}/gi, n.secretId)), ee = b(() => !!h.fields.key && !!h.fields.value), B = b(() => JSON.stringify(h.fields) !== JSON.stringify(V)), L = b(() => ({
+      key: h.fields.key,
+      value: h.fields.value
+    })), ie = async () => {
+      try {
+        h.readonly = !0;
+        let w;
+        if (Z.value === "create")
+          w = await P.post(z.value, L.value);
+        else if (Z.value === "edit") {
+          const a = n.config.apiType === "aiGateway" ? { value: L.value.value } : L.value;
+          w = await P.put(z.value, a);
+        }
+        p(w?.data), s("update", w?.data);
+      } catch (w) {
+        h.errorMessage = U(w), s("error", w);
+      } finally {
+        h.readonly = !1;
+      }
+    };
+    return (w, a) => {
+      const de = q("KInput"), _e = q("KAlert");
+      return _(), S(e(_t), {
+        "can-submit": ee.value && B.value,
+        config: l.config,
+        "edit-id": l.secretId,
+        "entity-type": e(Ze).Other,
+        "error-message": h.errorMessage,
+        "fetch-url": R.value,
+        "form-fields": L.value,
+        "is-readonly": h.readonly,
+        onCancel: I,
+        "onFetch:error": H,
+        "onFetch:success": p,
+        onLoading: d,
+        onSubmit: ie
+      }, {
+        default: g(() => [
+          x("div", null, [
+            u(e(ze), {
+              description: e(f)("secrets.form.info.description"),
+              "has-divider": "",
+              title: e(f)("secrets.form.info.title")
+            }, {
+              default: g(() => [
+                u(de, {
+                  modelValue: h.fields.key,
+                  "onUpdate:modelValue": a[0] || (a[0] = (te) => h.fields.key = te),
+                  modelModifiers: { trim: !0 },
+                  autocomplete: "off",
+                  class: "key-field",
+                  "data-testid": "secret-form-key",
+                  disabled: Z.value === e(me).Edit,
+                  label: e(f)("secrets.form.fields.key.label"),
+                  placeholder: e(f)("secrets.form.fields.key.placeholder"),
+                  readonly: h.readonly,
+                  required: "",
+                  type: "text"
+                }, null, 8, ["modelValue", "disabled", "label", "placeholder", "readonly"]),
+                u(e(He), {
+                  modelValue: h.fields.value,
+                  "onUpdate:modelValue": a[1] || (a[1] = (te) => h.fields.value = te),
+                  modelModifiers: { trim: !0 },
+                  "data-testid": "secret-form-value",
+                  label: e(f)("secrets.form.fields.value.label"),
+                  labels: { rotateLabel: e(f)("secrets.form.fields.value.rotateLabel") },
+                  mode: le.value,
+                  multiline: "",
+                  placeholder: e(f)("secrets.form.fields.value.placeholder"),
+                  readonly: h.readonly,
+                  required: ""
+                }, null, 8, ["modelValue", "label", "labels", "mode", "placeholder", "readonly"]),
+                u(_e, {
+                  appearance: "warning",
+                  message: e(f)("secrets.form.hint")
+                }, null, 8, ["message"])
+              ]),
+              _: 1
+            }, 8, ["description", "title"])
+          ])
+        ]),
+        _: 1
+      }, 8, ["can-submit", "config", "edit-id", "entity-type", "error-message", "fetch-url", "form-fields", "is-readonly"]);
+    };
+  }
+}), Wa = /* @__PURE__ */ we(Ka, [["__scopeId", "data-v-6ff371de"]]), ja = { class: "kong-ui-entities-secret-form" }, qa = /* @__PURE__ */ be({
+  __name: "SecretForm",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (l) => !(!l || l.app !== "konnect" || l.apiType !== "aiGateway" && !l.controlPlaneId || !l.cancelRoute || l.apiType === "aiGateway" && !l.aiGatewayId)
+    },
+    /** Current vault ID */
+    vaultId: {
+      type: String,
+      required: !0
+    },
+    /** If a valid secretId is provided, it will put the form in Edit mode instead of Create */
+    secretId: {
+      type: String,
+      required: !1,
+      default: ""
+    }
+  },
+  emits: ["update", "error", "loading"],
+  setup(l, { emit: y }) {
+    const n = l, s = y, f = (R) => {
+      s("update", R);
+    }, i = (R) => {
+      s("error", R);
+    }, P = (R) => {
+      s("loading", R);
+    }, { axiosInstance: U } = Se(n.config?.axiosRequestConfig), h = N(""), V = b(() => n.config.apiType === "aiGateway" ? re.getVault.aiGateway : re.getVault[n.config.app]), A = b(() => `${n.config.apiBaseUrl}${V.value}`.replace(/{aiGatewayId}/gi, n.config.aiGatewayId || "").replace(/{controlPlaneId}/gi, n.config?.controlPlaneId || "").replace(/\/{workspace}/gi, n.config?.workspace ? `/${n.config.workspace}` : "").replace(/{id}/gi, n.vaultId));
+    return Ne(async () => {
+      try {
+        const { data: R } = await U.get(A.value);
+        h.value = R?.config?.config_store_id;
+      } catch (R) {
+        s("error", R);
+      }
+    }), (R, I) => (_(), G("div", ja, [
+      h.value ? (_(), S(Wa, rt({ key: 0 }, n, {
+        "config-store-id": h.value,
+        onError: i,
+        onLoading: P,
+        onUpdate: f
+      }), null, 16, ["config-store-id"])) : M("", !0)
+    ]));
+  }
+}), _l = /* @__PURE__ */ we(qa, [["__scopeId", "data-v-1651a0c6"]]), za = {
+  class: "vault-secret-picker-provider"
+}, La = /* @__PURE__ */ be({
+  __name: "VaultSecretPickerProvider",
+  props: {
+    value: {},
+    disabled: {
+      type: Boolean
+    },
+    update: {
+      type: Function
+    }
+  },
+  emits: ["open"],
+  setup(l, {
+    emit: y
+  }) {
+    const n = l, s = y, {
+      i18n: {
+        t: f
+      },
+      i18nT: i
+    } = Re.useI18n();
+    return (P, U) => (_(), G("div", za, [u(e(i), {
+      keypath: "vault_secret_picker.provider.complete_action",
+      scope: "global"
+    }, {
+      cta: g(() => [x("span", {
+        class: ht({
+          "vault-secret-picker-provider-action": !0,
+          disabled: n.disabled
+        }),
+        onClick: U[0] || (U[0] = () => !n.disabled && s("open", n.value, n.update))
+      }, $(e(f)("vault_secret_picker.provider.cta")), 3)]),
+      _: 1
+    })]));
+  }
+}), vl = /* @__PURE__ */ we(La, [["__scopeId", "data-v-fdd70514"]]), Da = (l) => {
+  let y = l.trim();
+  if (!y.startsWith("{") || !y.endsWith("}"))
+    throw new Error("Invalid secret reference: must be enclosed in curly braces");
+  if (y = y.substring(1, y.length - 1).trim(), !y.startsWith("vault://"))
+    throw new Error("Invalid secret reference: must start with vault://");
+  const n = new URL(`http://${y.substring(8)}`);
+  if (!n)
+    throw new Error("Invalid secret reference: must have a vault prefix");
+  const s = n.host, [, f, ...i] = n.pathname.split("/");
+  if (!s)
+    throw new Error("Invalid secret reference: must have a vault prefix");
+  return {
+    vaultPrefix: s,
+    secretId: f || void 0,
+    // Non-empty string or undefined
+    optionalSecretKey: i?.join("/")
+    // Non-empty string or undefined
+  };
+}, Za = (l) => {
+  if (!l.vaultPrefix)
+    throw new Error("Invalid secret reference: must have a vault prefix");
+  let y = `vault://${l.vaultPrefix}`;
+  return l.secretId && (y = `${y}/${l.secretId}`), l.optionalSecretKey && (y = `${y}/${l.optionalSecretKey}`), `{${y}}`;
+}, Ba = {
+  key: 1,
+  class: "inputs-wrapper"
+}, Ja = { "data-testid": "no-search-results" }, Qa = { class: "k-select-selected-item-label" }, Ya = { class: "vault-secret-picker-vault-dropdown-item" }, Xa = { class: "select-item-label" }, el = { class: "select-item-description" }, tl = { class: "select-item-description" }, al = { "data-testid": "no-search-results" }, ll = /* @__PURE__ */ be({
+  __name: "VaultSecretPicker",
+  props: {
+    config: {
+      type: Object,
+      required: !0,
+      validator: (l) => !(!l || !["konnect", "kongManager"].includes(l?.app) || l.app === "konnect" && l.apiType !== "aiGateway" && !l.controlPlaneId || l.app === "kongManager" && typeof l.workspace != "string" || l.apiType === "aiGateway" && !l.aiGatewayId)
+    },
+    setup: {
+      type: null,
+      required: !1,
+      default: !1
+    },
+    title: {
+      type: String,
+      required: !1,
+      default: void 0
+    },
+    proceedButtonText: {
+      type: String,
+      required: !1,
+      default: void 0
+    },
+    additionalDisabled: {
+      type: Boolean,
+      required: !1,
+      default: !1
+    },
+    allowedProviders: {
+      type: Array,
+      required: !1,
+      default: void 0
+    },
+    showSecretKey: {
+      type: Boolean,
+      required: !1,
+      default: !0
+    }
+  },
+  emits: ["proceed", "cancel"],
+  setup(l, { emit: y }) {
+    const { i18n: { t: n } } = Re.useI18n(), s = l, f = y, { axiosInstance: i } = Se({
+      // 404 errors are allowed in this components
+      validateStatus: (C) => C === 404 || C >= 200 && C < 300,
+      // Spread the passed-in config later to allow overriding
+      ...s.config?.axiosRequestConfig
+    }), P = N(!1), U = N(""), h = N(""), V = N(""), A = N(), R = b(() => s.config.apiType === "aiGateway"), I = (C) => C.replace(/{aiGatewayId}/gi, s.config.aiGatewayId || ""), d = b(() => R.value ? I(se.list.aiGateway.getAll) : se.list[s.config.app].getAll), H = b(() => R.value ? I(re.list.aiGateway).replace(/{id}/gi, A.value?.config?.config_store_id ?? "") : s.config.app === "konnect" ? re.list[s.config.app].replace(/{id}/gi, A.value?.config?.config_store_id ?? "") : "<not_applicable>"), p = b(() => {
+      if (z && w)
+        return n("vault_secret_picker.fetch_error.vaults_and_secrets");
+      if (z)
+        return n("vault_secret_picker.fetch_error.vaults");
+      if (w)
+        return n("vault_secret_picker.fetch_error.secrets");
+    }), {
+      debouncedQueryChange: Z,
+      loading: le,
+      error: z,
+      loadItems: ee,
+      results: B
+    } = tt(s.config, d, void 0, {
+      fetchedItemsKey: "data",
+      // AI Gateway vaults carry the identifier in `name`; gateway vaults in `prefix`.
+      searchKeys: R.value ? ["name"] : ["prefix"]
+    }), {
+      debouncedQueryChange: L,
+      loading: ie,
+      error: w,
+      loadItems: a,
+      results: de
+    } = tt(s.config, H, void 0, {
+      fetchedItemsKey: "data",
+      searchKeys: ["key"],
+      exactMatchKey: "key"
+    }), _e = (C) => s.allowedProviders?.length ? s.allowedProviders.includes(C) : C !== t.AZURE_CERTS, te = b(() => R.value ? (B.value ?? []).map((C) => $e(C)) : B.value ?? []), ue = b(() => {
+      let C = !1;
+      const E = (te.value ?? []).filter((O) => _e(O.name)).map((O) => (O.prefix === U.value && (C = !0), { label: O.prefix, value: O.prefix, vault: O }));
+      return !C && A.value && E.push({
+        label: A.value.prefix,
+        value: A.value.prefix,
+        vault: A.value
+      }), E;
+    }), W = b(() => {
+      let C = !1;
+      const E = de.value?.map((O) => (O.key === h.value && (C = !0), { label: O.key, value: O.key })) ?? [];
+      return !C && h.value && E.push({ label: h.value, value: h.value }), E;
+    }), J = b(() => A?.value?.name === "konnect"), Q = b(() => !!A.value && !!h.value && !s.additionalDisabled), ve = (C) => C.label ? `${C.label} - (${C.vault.name} - ${C.vault.id})` : C.value, K = (C) => {
+      const E = R.value ? se.form.aiGateway.edit : se.form[s.config.app].edit;
+      let O = `${s.config.apiBaseUrl}${E}`;
+      return s.config.app === "konnect" && (O = O.replace(/{controlPlaneId}/gi, s.config?.controlPlaneId || "")), I(O).replace(/\/{workspace}/gi, s.config?.workspace ? `/${s.config.workspace}` : "").replace(/{id}/gi, C);
+    }, ge = (C, E) => {
+      if (s.config.app !== "konnect")
+        return "<not_applicable>";
+      const O = R.value ? re.form.aiGateway.edit : re.form[s.config.app].edit;
+      return I(`${s.config.apiBaseUrl}${O}`).replace(/{controlPlaneId}/gi, s.config?.controlPlaneId || "").replace(/\/{workspace}/gi, s.config?.workspace ? `/${s.config.workspace}` : "").replace(/{id}/gi, E).replace(/{secretId}/gi, C);
+    }, ae = () => {
+      f("proceed", Za({
+        vaultPrefix: U.value,
+        secretId: h.value || void 0,
+        // Either a non-empty string or undefined
+        optionalSecretKey: V.value || void 0
+        // Either a non-empty string or undefined
+      }));
+    };
+    return Ge(() => s.setup, async (C) => {
+      if (C !== !1) {
+        if (P.value = !0, U.value = "", A.value = void 0, h.value = "", V.value = "", typeof C == "string" && C.trim().length > 0)
+          try {
+            let E, O = "", ne = "", ce = "";
+            const D = Da(C), { data: F } = await i.get(K(D.vaultPrefix)), ye = F && R.value ? $e(F) : F;
+            if (ye?.name)
+              if (E = ye, O = D.vaultPrefix, E.name === "konnect") {
+                if (D.secretId) {
+                  const { data: ke } = await i.get(ge(D.secretId, ye.config.config_store_id));
+                  ke.key === D.secretId && (ne = D.secretId, ce = D.optionalSecretKey ?? "");
+                }
+              } else
+                ne = D.secretId ?? "", ce = D.optionalSecretKey ?? "";
+            await Vt(() => {
+              U.value = O, A.value = E, h.value = ne, V.value = ce;
+            });
+          } catch (E) {
+            console.debug(E);
+          }
+        P.value = !1, await ee();
+      }
+    }, { immediate: !0 }), Ge(U, async (C, E) => {
+      P.value || C === E || (A.value = ue.value.find((O) => O.value === C)?.vault, h.value = "", V.value = "");
+    }), Ge(H, async () => {
+      J.value && await a();
+    }, { immediate: !0 }), (C, E) => {
+      const O = q("KEmptyState"), ne = q("KSelect"), ce = q("KInput"), D = q("KModal");
+      return _(), S(D, {
+        "action-button-disabled": !Q.value,
+        "action-button-text": l.proceedButtonText || e(n)("vault_secret_picker.actions.use_key"),
+        class: "vault-secret-picker",
+        "data-testid": "vault-secret-picker-modal",
+        title: l.title || e(n)("vault_secret_picker.title"),
+        visible: s.setup !== !1,
+        onCancel: E[4] || (E[4] = () => f("cancel")),
+        onProceed: ae
+      }, {
+        default: g(() => [
+          e(z) || e(w) ? (_(), S(O, {
+            key: 0,
+            "data-testid": "vault-secret-picker-fetch-error",
+            "icon-variant": "error",
+            message: p.value
+          }, null, 8, ["message"])) : (_(), G("div", Ba, [
+            ot(C.$slots, "form-prefix", {}, void 0, !0),
+            u(ne, {
+              modelValue: U.value,
+              "onUpdate:modelValue": E[0] || (E[0] = (F) => U.value = F),
+              clearable: "",
+              "data-testid": "vault-secret-picker-vault-select",
+              disabled: P.value,
+              "enable-filtering": "",
+              "filter-function": () => !0,
+              items: ue.value,
+              "kpop-attributes": { "data-testid": "vault-secret-picker-vault-popover" },
+              label: e(n)("vault_secret_picker.vault.label"),
+              loading: e(le),
+              placeholder: e(n)("vault_secret_picker.vault.placeholder"),
+              required: "",
+              "reuse-item-template": "",
+              width: "100%",
+              onQueryChange: e(Z)
+            }, {
+              loading: g(() => [
+                x("div", null, $(e(n)("actions.loading")), 1)
+              ]),
+              empty: g(() => [
+                x("div", Ja, $(e(n)("vault_secret_picker.no_results")), 1)
+              ]),
+              "selected-item-template": g(({ item: F }) => [
+                x("span", Qa, $(ve(F)), 1)
+              ]),
+              "item-template": g(({ item: F }) => [
+                x("div", Ya, [
+                  x("span", Xa, $(F.label), 1),
+                  x("span", el, $(F.vault.name), 1),
+                  x("span", tl, $(F.vault.id), 1)
+                ])
+              ]),
+              _: 1
+            }, 8, ["modelValue", "disabled", "items", "label", "loading", "placeholder", "onQueryChange"]),
+            J.value ? (_(), S(ne, {
+              key: 0,
+              modelValue: h.value,
+              "onUpdate:modelValue": E[1] || (E[1] = (F) => h.value = F),
+              clearable: "",
+              "data-testid": "vault-secret-picker-secret-id-select",
+              disabled: P.value || !A.value,
+              "enable-filtering": "",
+              "filter-function": () => !0,
+              items: W.value,
+              "kpop-attributes": { "data-testid": "vault-secret-picker-secret-id-popover" },
+              label: e(n)("vault_secret_picker.secret_id.label"),
+              loading: e(ie),
+              placeholder: e(n)("vault_secret_picker.secret_id.select_placeholder"),
+              required: "",
+              "reuse-item-template": "",
+              width: "100%",
+              onQueryChange: e(L)
+            }, {
+              loading: g(() => [
+                x("div", null, $(e(n)("actions.loading")), 1)
+              ]),
+              empty: g(() => [
+                x("div", al, $(e(n)("vault_secret_picker.no_results")), 1)
+              ]),
+              _: 1
+            }, 8, ["modelValue", "disabled", "items", "label", "loading", "placeholder", "onQueryChange"])) : (_(), S(ce, {
+              key: 1,
+              modelValue: h.value,
+              "onUpdate:modelValue": E[2] || (E[2] = (F) => h.value = F),
+              modelModifiers: { trim: !0 },
+              autocomplete: "off",
+              "data-testid": "vault-secret-picker-secret-id-input",
+              disabled: P.value || !A.value,
+              label: e(n)("vault_secret_picker.secret_id.label"),
+              placeholder: e(n)("vault_secret_picker.secret_id.input_placeholder"),
+              required: "",
+              type: "text"
+            }, null, 8, ["modelValue", "disabled", "label", "placeholder"])),
+            l.showSecretKey ? (_(), S(ce, {
+              key: 2,
+              modelValue: V.value,
+              "onUpdate:modelValue": E[3] || (E[3] = (F) => V.value = F),
+              modelModifiers: { trim: !0 },
+              autocomplete: "off",
+              "data-testid": "vault-secret-picker-secret-key-input",
+              disabled: P.value || !A.value,
+              help: e(n)("vault_secret_picker.optional_secret_key.help"),
+              label: e(n)("vault_secret_picker.optional_secret_key.label"),
+              placeholder: e(n)("vault_secret_picker.optional_secret_key.placeholder"),
+              type: "text"
+            }, null, 8, ["modelValue", "disabled", "help", "label", "placeholder"])) : M("", !0)
+          ]))
+        ]),
+        _: 3
+      }, 8, ["action-button-disabled", "action-button-text", "title", "visible"]);
+    };
+  }
+}), gl = /* @__PURE__ */ we(ll, [["__scopeId", "data-v-2ab21bd2"]]);
+export {
+  _l as SecretForm,
+  ml as SecretList,
+  m as VaultAuthMethods,
+  pl as VaultConfigCard,
+  fl as VaultForm,
+  cl as VaultList,
+  t as VaultProviders,
+  gl as VaultSecretPicker,
+  vl as VaultSecretPickerProvider,
+  re as secretsEndpoints,
+  se as vaultsEndpoints
+};