@lunora/studio 1.0.0-alpha.3 → 1.0.0-alpha.30

package/dist/packem_chunks/users-panel.js

@@ -0,0 +1,1265 @@
+import { useLunora } from '@lunora/react';
+import { useState, useEffect } from 'react';
+import { B as Badge } from '../packem_shared/badge-B2PKA1-5.js';
+import { B as Button } from '../packem_shared/button-BhsN2uZH.js';
+import { C as Card, a as CardContent } from '../packem_shared/card-DURq3ElK.js';
+import { E as EmptyState } from '../packem_shared/empty-state-DY_oe0k6.js';
+import { I as Input } from '../packem_shared/input-XH4r1Pt1.js';
+import { T as Table, a as TableHeader, b as TableRow, c as TableHead, d as TableBody, e as TableCell } from '../packem_shared/table-DsCa9Qp9.js';
+import { a as useClientQuery } from '../packem_shared/use-admin-query-BViPA3US.js';
+import { u as useAuthCapabilities } from '../packem_shared/use-auth-capabilities-BHkoBnbZ.js';
+import { useAutoRefresh } from '../packem_shared/DEFAULT_AUTO_REFRESH_MS-Vxwaxx51.js';
+import useDebounced from '../packem_shared/useDebounced-Dxncpg6z.js';
+import { useT } from '../packem_shared/DEFAULT_LOCALE-CiX4W7Kr.js';
+import { f as fireAndForget, e as errorMessage, g as formatTimestamp, d as formatCell } from '../packem_shared/internal-FcNZ3beb.js';
+import { L as Label } from '../packem_shared/label-D8ykjn5J.js';
+import { M as ModalShell } from '../packem_shared/modal-shell-hyaJvIJ6.js';
+import { jsxDEV, Fragment } from 'react/jsx-dev-runtime';
+import { c } from 'react/compiler-runtime';
+
+const UserCreateDialog = ({
+  onClose,
+  onCreated
+}) => {
+  const client = useLunora();
+  const t = useT();
+  const [email, setEmail] = useState("");
+  const [name, setName] = useState("");
+  const [password, setPassword] = useState("");
+  const [role, setRole] = useState("");
+  const [busy, setBusy] = useState(false);
+  const [error, setError] = useState(null);
+  const onEmailChange = (event) => {
+    setEmail(event.target.value);
+  };
+  const onNameChange = (event_0) => {
+    setName(event_0.target.value);
+  };
+  const onPasswordChange = (event_1) => {
+    setPassword(event_1.target.value);
+  };
+  const onRoleChange = (event_2) => {
+    setRole(event_2.target.value);
+  };
+  const submit = async () => {
+    setBusy(true);
+    setError(null);
+    try {
+      await client.createAuthUser({
+        email: email.trim(),
+        name: name.trim(),
+        password: password === "" ? void 0 : password,
+        role: role.trim() === "" ? void 0 : role.trim()
+      });
+      onCreated();
+      onClose();
+    } catch (error_) {
+      setError(errorMessage(error_));
+    } finally {
+      setBusy(false);
+    }
+  };
+  const onSubmit = () => {
+    fireAndForget(submit());
+  };
+  return /* @__PURE__ */ jsxDEV(ModalShell, {
+    label: t("Create user"),
+    onClose,
+    panelTestId: "uc-dialog",
+    testId: "uc-overlay",
+    variant: "dialog",
+    children: [/* @__PURE__ */ jsxDEV("h2", {
+      className: "text-sm font-semibold text-foreground",
+      children: t("Create user")
+    }, void 0, false), /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-col gap-1",
+      children: [/* @__PURE__ */ jsxDEV(Label, {
+        htmlFor: "uc-email",
+        children: t("email")
+      }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+        "data-testid": "uc-email",
+        id: "uc-email",
+        onChange: onEmailChange,
+        type: "email",
+        value: email
+      }, void 0, false)]
+    }, void 0, true), /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-col gap-1",
+      children: [/* @__PURE__ */ jsxDEV(Label, {
+        htmlFor: "uc-name",
+        children: t("name")
+      }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+        "data-testid": "uc-name",
+        id: "uc-name",
+        onChange: onNameChange,
+        value: name
+      }, void 0, false)]
+    }, void 0, true), /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-col gap-1",
+      children: [/* @__PURE__ */ jsxDEV(Label, {
+        htmlFor: "uc-password",
+        children: t("Password (optional)")
+      }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+        "data-testid": "uc-password",
+        id: "uc-password",
+        onChange: onPasswordChange,
+        type: "password",
+        value: password
+      }, void 0, false)]
+    }, void 0, true), /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-col gap-1",
+      children: [/* @__PURE__ */ jsxDEV(Label, {
+        htmlFor: "uc-role",
+        children: t("Role (optional)")
+      }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+        "data-testid": "uc-role",
+        id: "uc-role",
+        onChange: onRoleChange,
+        value: role
+      }, void 0, false)]
+    }, void 0, true), error !== null && /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-destructive",
+      "data-testid": "uc-error",
+      role: "alert",
+      children: error
+    }, void 0, false), /* @__PURE__ */ jsxDEV("div", {
+      className: "flex justify-end gap-2 pt-1",
+      children: [/* @__PURE__ */ jsxDEV(Button, {
+        "data-testid": "uc-cancel",
+        onClick: onClose,
+        size: "sm",
+        type: "button",
+        variant: "outline",
+        children: t("Cancel")
+      }, void 0, false), /* @__PURE__ */ jsxDEV(Button, {
+        "data-testid": "uc-submit",
+        disabled: busy || email.trim() === "" || name.trim() === "",
+        onClick: onSubmit,
+        size: "sm",
+        type: "button",
+        children: busy ? t("Creating…") : t("Create")
+      }, void 0, false)]
+    }, void 0, true)]
+  }, void 0, true);
+};
+
+const SectionHeading = (t0) => {
+  const $ = c(2);
+  const {
+    children
+  } = t0;
+  let t1;
+  if ($[0] !== children) {
+    t1 = /* @__PURE__ */ jsxDEV("h3", {
+      className: "font-mono text-[11px] tracking-wide text-muted-foreground uppercase",
+      children
+    }, void 0, false);
+    $[0] = children;
+    $[1] = t1;
+  } else {
+    t1 = $[1];
+  }
+  return t1;
+};
+const UserSessionsPanel = (t0) => {
+  const $ = c(29);
+  const {
+    busy,
+    runAction,
+    userId,
+    version
+  } = t0;
+  const client = useLunora();
+  const t = useT();
+  const [sessions, setSessions] = useState(null);
+  const [error, setError] = useState(null);
+  let t1;
+  if ($[0] !== client || $[1] !== userId) {
+    t1 = () => {
+      fireAndForget((async () => {
+        setError(null);
+        try {
+          const page = await client.listAuthSessions({
+            limit: 50,
+            userId
+          });
+          setSessions(page.rows);
+        } catch (t22) {
+          const error_ = t22;
+          setSessions(null);
+          setError(errorMessage(error_));
+        }
+      })());
+    };
+    $[0] = client;
+    $[1] = userId;
+    $[2] = t1;
+  } else {
+    t1 = $[2];
+  }
+  let t2;
+  if ($[3] !== client || $[4] !== userId || $[5] !== version) {
+    t2 = [client, userId, version];
+    $[3] = client;
+    $[4] = userId;
+    $[5] = version;
+    $[6] = t2;
+  } else {
+    t2 = $[6];
+  }
+  useEffect(t1, t2);
+  let t3;
+  if ($[7] !== client || $[8] !== runAction) {
+    t3 = (sessionId) => {
+      runAction(() => client.revokeAuthSession({
+        sessionId
+      }));
+    };
+    $[7] = client;
+    $[8] = runAction;
+    $[9] = t3;
+  } else {
+    t3 = $[9];
+  }
+  const onRevoke = t3;
+  let t4;
+  if ($[10] !== t) {
+    t4 = t("Sessions");
+    $[10] = t;
+    $[11] = t4;
+  } else {
+    t4 = $[11];
+  }
+  let t5;
+  if ($[12] !== t4) {
+    t5 = /* @__PURE__ */ jsxDEV(SectionHeading, {
+      children: t4
+    }, void 0, false);
+    $[12] = t4;
+    $[13] = t5;
+  } else {
+    t5 = $[13];
+  }
+  let t6;
+  if ($[14] !== error) {
+    t6 = error !== null && /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-destructive",
+      "data-testid": "ud-sessions-error",
+      role: "alert",
+      children: error
+    }, void 0, false);
+    $[14] = error;
+    $[15] = t6;
+  } else {
+    t6 = $[15];
+  }
+  let t7;
+  if ($[16] !== sessions || $[17] !== t) {
+    t7 = sessions !== null && sessions.length === 0 && /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-muted-foreground",
+      "data-testid": "ud-sessions-empty",
+      children: t("No active sessions.")
+    }, void 0, false);
+    $[16] = sessions;
+    $[17] = t;
+    $[18] = t7;
+  } else {
+    t7 = $[18];
+  }
+  let t8;
+  if ($[19] !== busy || $[20] !== onRevoke || $[21] !== sessions || $[22] !== t) {
+    t8 = sessions !== null && sessions.length > 0 && /* @__PURE__ */ jsxDEV(Card, {
+      className: "overflow-hidden py-0",
+      children: /* @__PURE__ */ jsxDEV(CardContent, {
+        className: "px-0",
+        children: /* @__PURE__ */ jsxDEV(Table, {
+          "data-testid": "ud-sessions-table",
+          children: [/* @__PURE__ */ jsxDEV(TableHeader, {
+            children: /* @__PURE__ */ jsxDEV(TableRow, {
+              children: [/* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("expires")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("ip")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("user agent")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                "aria-label": t("Actions")
+              }, void 0, false)]
+            }, void 0, true)
+          }, void 0, false), /* @__PURE__ */ jsxDEV(TableBody, {
+            children: sessions.map((session) => /* @__PURE__ */ jsxDEV(TableRow, {
+              "data-testid": `ud-session-${session.id}`,
+              children: [/* @__PURE__ */ jsxDEV(TableCell, {
+                className: "text-muted-foreground tabular-nums",
+                children: formatTimestamp(session.expiresAt)
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                children: session.ipAddress ?? ""
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                className: "max-w-40 truncate",
+                children: session.userAgent ?? ""
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                children: /* @__PURE__ */ jsxDEV(Button, {
+                  "data-testid": `ud-revoke-${session.id}`,
+                  disabled: busy,
+                  onClick: () => {
+                    onRevoke(session.id);
+                  },
+                  size: "xs",
+                  type: "button",
+                  variant: "ghost",
+                  children: t("Revoke")
+                }, void 0, false)
+              }, void 0, false)]
+            }, session.id, true))
+          }, void 0, false)]
+        }, void 0, true)
+      }, void 0, false)
+    }, void 0, false);
+    $[19] = busy;
+    $[20] = onRevoke;
+    $[21] = sessions;
+    $[22] = t;
+    $[23] = t8;
+  } else {
+    t8 = $[23];
+  }
+  let t9;
+  if ($[24] !== t5 || $[25] !== t6 || $[26] !== t7 || $[27] !== t8) {
+    t9 = /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-col gap-2",
+      "data-testid": "ud-sessions",
+      children: [t5, t6, t7, t8]
+    }, void 0, true);
+    $[24] = t5;
+    $[25] = t6;
+    $[26] = t7;
+    $[27] = t8;
+    $[28] = t9;
+  } else {
+    t9 = $[28];
+  }
+  return t9;
+};
+const UserAccountsPanel = (t0) => {
+  const $ = c(30);
+  const {
+    busy,
+    runAction,
+    userId,
+    version
+  } = t0;
+  const client = useLunora();
+  const t = useT();
+  const [accounts, setAccounts] = useState(null);
+  const [error, setError] = useState(null);
+  let t1;
+  if ($[0] !== client || $[1] !== userId) {
+    t1 = () => {
+      fireAndForget((async () => {
+        setError(null);
+        try {
+          setAccounts(await client.listAuthAccounts({
+            userId
+          }));
+        } catch (t22) {
+          const error_ = t22;
+          setAccounts(null);
+          setError(errorMessage(error_));
+        }
+      })());
+    };
+    $[0] = client;
+    $[1] = userId;
+    $[2] = t1;
+  } else {
+    t1 = $[2];
+  }
+  let t2;
+  if ($[3] !== client || $[4] !== userId || $[5] !== version) {
+    t2 = [client, userId, version];
+    $[3] = client;
+    $[4] = userId;
+    $[5] = version;
+    $[6] = t2;
+  } else {
+    t2 = $[6];
+  }
+  useEffect(t1, t2);
+  let t3;
+  if ($[7] !== client || $[8] !== runAction || $[9] !== userId) {
+    t3 = (accountId) => {
+      runAction(() => client.unlinkAuthAccount({
+        accountId,
+        userId
+      }));
+    };
+    $[7] = client;
+    $[8] = runAction;
+    $[9] = userId;
+    $[10] = t3;
+  } else {
+    t3 = $[10];
+  }
+  const onUnlink = t3;
+  let t4;
+  if ($[11] !== t) {
+    t4 = t("Linked accounts");
+    $[11] = t;
+    $[12] = t4;
+  } else {
+    t4 = $[12];
+  }
+  let t5;
+  if ($[13] !== t4) {
+    t5 = /* @__PURE__ */ jsxDEV(SectionHeading, {
+      children: t4
+    }, void 0, false);
+    $[13] = t4;
+    $[14] = t5;
+  } else {
+    t5 = $[14];
+  }
+  let t6;
+  if ($[15] !== error) {
+    t6 = error !== null && /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-destructive",
+      role: "alert",
+      children: error
+    }, void 0, false);
+    $[15] = error;
+    $[16] = t6;
+  } else {
+    t6 = $[16];
+  }
+  let t7;
+  if ($[17] !== accounts || $[18] !== t) {
+    t7 = accounts !== null && accounts.length === 0 && /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-muted-foreground",
+      children: t("No linked accounts.")
+    }, void 0, false);
+    $[17] = accounts;
+    $[18] = t;
+    $[19] = t7;
+  } else {
+    t7 = $[19];
+  }
+  let t8;
+  if ($[20] !== accounts || $[21] !== busy || $[22] !== onUnlink || $[23] !== t) {
+    t8 = accounts !== null && accounts.length > 0 && /* @__PURE__ */ jsxDEV(Card, {
+      className: "overflow-hidden py-0",
+      children: /* @__PURE__ */ jsxDEV(CardContent, {
+        className: "px-0",
+        children: /* @__PURE__ */ jsxDEV(Table, {
+          "data-testid": "ud-accounts-table",
+          children: [/* @__PURE__ */ jsxDEV(TableHeader, {
+            children: /* @__PURE__ */ jsxDEV(TableRow, {
+              children: [/* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("provider")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("created")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                "aria-label": t("Actions")
+              }, void 0, false)]
+            }, void 0, true)
+          }, void 0, false), /* @__PURE__ */ jsxDEV(TableBody, {
+            children: accounts.map((account) => {
+              const id = formatCell(account.id);
+              return /* @__PURE__ */ jsxDEV(TableRow, {
+                "data-testid": `ud-account-${id}`,
+                children: [/* @__PURE__ */ jsxDEV(TableCell, {
+                  children: formatCell(account.providerId)
+                }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                  className: "text-muted-foreground tabular-nums",
+                  children: formatTimestamp(account.createdAt)
+                }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                  children: /* @__PURE__ */ jsxDEV(Button, {
+                    "data-testid": `ud-unlink-${id}`,
+                    disabled: busy,
+                    onClick: () => {
+                      onUnlink(id);
+                    },
+                    size: "xs",
+                    type: "button",
+                    variant: "ghost",
+                    children: t("Unlink")
+                  }, void 0, false)
+                }, void 0, false)]
+              }, id, true);
+            })
+          }, void 0, false)]
+        }, void 0, true)
+      }, void 0, false)
+    }, void 0, false);
+    $[20] = accounts;
+    $[21] = busy;
+    $[22] = onUnlink;
+    $[23] = t;
+    $[24] = t8;
+  } else {
+    t8 = $[24];
+  }
+  let t9;
+  if ($[25] !== t5 || $[26] !== t6 || $[27] !== t7 || $[28] !== t8) {
+    t9 = /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-col gap-2",
+      "data-testid": "ud-accounts",
+      children: [t5, t6, t7, t8]
+    }, void 0, true);
+    $[25] = t5;
+    $[26] = t6;
+    $[27] = t7;
+    $[28] = t8;
+    $[29] = t9;
+  } else {
+    t9 = $[29];
+  }
+  return t9;
+};
+const UserSecurityPanel = (t0) => {
+  const $ = c(40);
+  const {
+    busy,
+    capabilities,
+    runAction,
+    userId,
+    version
+  } = t0;
+  const client = useLunora();
+  const t = useT();
+  const [passkeys, setPasskeys] = useState(null);
+  let t1;
+  if ($[0] !== capabilities.passkey || $[1] !== client || $[2] !== userId) {
+    t1 = () => {
+      if (!capabilities.passkey) {
+        return;
+      }
+      fireAndForget((async () => {
+        try {
+          setPasskeys(await client.listAuthPasskeys({
+            userId
+          }));
+        } catch {
+          setPasskeys(null);
+        }
+      })());
+    };
+    $[0] = capabilities.passkey;
+    $[1] = client;
+    $[2] = userId;
+    $[3] = t1;
+  } else {
+    t1 = $[3];
+  }
+  let t2;
+  if ($[4] !== capabilities.passkey || $[5] !== client || $[6] !== userId || $[7] !== version) {
+    t2 = [capabilities.passkey, client, userId, version];
+    $[4] = capabilities.passkey;
+    $[5] = client;
+    $[6] = userId;
+    $[7] = version;
+    $[8] = t2;
+  } else {
+    t2 = $[8];
+  }
+  useEffect(t1, t2);
+  let t3;
+  if ($[9] !== client || $[10] !== runAction || $[11] !== userId) {
+    t3 = () => {
+      runAction(() => client.disableAuthTwoFactor({
+        userId
+      }));
+    };
+    $[9] = client;
+    $[10] = runAction;
+    $[11] = userId;
+    $[12] = t3;
+  } else {
+    t3 = $[12];
+  }
+  const onDisable2fa = t3;
+  let t4;
+  if ($[13] !== client || $[14] !== runAction) {
+    t4 = (passkeyId) => {
+      runAction(() => client.deleteAuthPasskey({
+        passkeyId
+      }));
+    };
+    $[13] = client;
+    $[14] = runAction;
+    $[15] = t4;
+  } else {
+    t4 = $[15];
+  }
+  const onDeletePasskey = t4;
+  let t5;
+  if ($[16] !== t) {
+    t5 = t("Security");
+    $[16] = t;
+    $[17] = t5;
+  } else {
+    t5 = $[17];
+  }
+  let t6;
+  if ($[18] !== t5) {
+    t6 = /* @__PURE__ */ jsxDEV(SectionHeading, {
+      children: t5
+    }, void 0, false);
+    $[18] = t5;
+    $[19] = t6;
+  } else {
+    t6 = $[19];
+  }
+  let t7;
+  if ($[20] !== busy || $[21] !== capabilities.twoFactor || $[22] !== onDisable2fa || $[23] !== t) {
+    t7 = capabilities.twoFactor && /* @__PURE__ */ jsxDEV(Button, {
+      "data-testid": "ud-disable-2fa",
+      disabled: busy,
+      onClick: onDisable2fa,
+      size: "sm",
+      type: "button",
+      variant: "outline",
+      children: t("Disable two-factor")
+    }, void 0, false);
+    $[20] = busy;
+    $[21] = capabilities.twoFactor;
+    $[22] = onDisable2fa;
+    $[23] = t;
+    $[24] = t7;
+  } else {
+    t7 = $[24];
+  }
+  let t8;
+  if ($[25] !== capabilities.passkey || $[26] !== passkeys || $[27] !== t) {
+    t8 = capabilities.passkey && passkeys !== null && passkeys.length === 0 && /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-muted-foreground",
+      children: t("No passkeys.")
+    }, void 0, false);
+    $[25] = capabilities.passkey;
+    $[26] = passkeys;
+    $[27] = t;
+    $[28] = t8;
+  } else {
+    t8 = $[28];
+  }
+  let t9;
+  if ($[29] !== busy || $[30] !== capabilities.passkey || $[31] !== onDeletePasskey || $[32] !== passkeys || $[33] !== t) {
+    t9 = capabilities.passkey && passkeys !== null && passkeys.length > 0 && /* @__PURE__ */ jsxDEV(Card, {
+      className: "overflow-hidden py-0",
+      children: /* @__PURE__ */ jsxDEV(CardContent, {
+        className: "px-0",
+        children: /* @__PURE__ */ jsxDEV(Table, {
+          "data-testid": "ud-passkeys-table",
+          children: [/* @__PURE__ */ jsxDEV(TableHeader, {
+            children: /* @__PURE__ */ jsxDEV(TableRow, {
+              children: [/* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("name")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("created")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                "aria-label": t("Actions")
+              }, void 0, false)]
+            }, void 0, true)
+          }, void 0, false), /* @__PURE__ */ jsxDEV(TableBody, {
+            children: passkeys.map((passkey) => {
+              const id = formatCell(passkey.id);
+              return /* @__PURE__ */ jsxDEV(TableRow, {
+                "data-testid": `ud-passkey-${id}`,
+                children: [/* @__PURE__ */ jsxDEV(TableCell, {
+                  children: formatCell(passkey.name) || id
+                }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                  className: "text-muted-foreground tabular-nums",
+                  children: formatTimestamp(passkey.createdAt)
+                }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                  children: /* @__PURE__ */ jsxDEV(Button, {
+                    "data-testid": `ud-delete-passkey-${id}`,
+                    disabled: busy,
+                    onClick: () => {
+                      onDeletePasskey(id);
+                    },
+                    size: "xs",
+                    type: "button",
+                    variant: "ghost",
+                    children: t("Delete")
+                  }, void 0, false)
+                }, void 0, false)]
+              }, id, true);
+            })
+          }, void 0, false)]
+        }, void 0, true)
+      }, void 0, false)
+    }, void 0, false);
+    $[29] = busy;
+    $[30] = capabilities.passkey;
+    $[31] = onDeletePasskey;
+    $[32] = passkeys;
+    $[33] = t;
+    $[34] = t9;
+  } else {
+    t9 = $[34];
+  }
+  let t10;
+  if ($[35] !== t6 || $[36] !== t7 || $[37] !== t8 || $[38] !== t9) {
+    t10 = /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-col gap-2",
+      "data-testid": "ud-security",
+      children: [t6, t7, t8, t9]
+    }, void 0, true);
+    $[35] = t6;
+    $[36] = t7;
+    $[37] = t8;
+    $[38] = t9;
+    $[39] = t10;
+  } else {
+    t10 = $[39];
+  }
+  return t10;
+};
+
+const TIMESTAMP_RE = /(?:at|expires)$/iu;
+const SUMMARY_FIELDS = /* @__PURE__ */ new Set(["banExpires", "banned", "banReason", "email", "emailVerified", "id", "name", "role"]);
+const formatField = (key, value) => {
+  if (typeof value === "number" && TIMESTAMP_RE.test(key)) {
+    return formatTimestamp(value);
+  }
+  return formatCell(value);
+};
+const UserDetailDrawer = ({
+  capabilities,
+  onChanged,
+  onClose,
+  user
+}) => {
+  const client = useLunora();
+  const t = useT();
+  const banned = user.banned === true;
+  const [actionError, setActionError] = useState(null);
+  const [busy, setBusy] = useState(false);
+  const [version, setVersion] = useState(0);
+  const [roleInput, setRoleInput] = useState(typeof user.role === "string" ? user.role : "");
+  const [banReason, setBanReason] = useState("");
+  const [banDays, setBanDays] = useState("");
+  const [newPassword, setNewPassword] = useState("");
+  const [impersonationToken, setImpersonationToken] = useState(null);
+  const [confirmDelete, setConfirmDelete] = useState(false);
+  const runAction = (action, options) => {
+    fireAndForget((async () => {
+      setBusy(true);
+      setActionError(null);
+      try {
+        const result = await action();
+        if (options?.refresh !== false) {
+          setVersion((value) => value + 1);
+          onChanged();
+        }
+        options?.onResult?.(result);
+      } catch (error_) {
+        setActionError(errorMessage(error_));
+      } finally {
+        setBusy(false);
+      }
+    })());
+  };
+  const onRoleInputChange = (event) => {
+    setRoleInput(event.target.value);
+  };
+  const onBanReasonChange = (event_0) => {
+    setBanReason(event_0.target.value);
+  };
+  const onBanDaysChange = (event_1) => {
+    setBanDays(event_1.target.value);
+  };
+  const onNewPasswordChange = (event_2) => {
+    setNewPassword(event_2.target.value);
+  };
+  const onSetRole = () => {
+    const role = roleInput.trim();
+    if (role === "") {
+      return;
+    }
+    runAction(async () => {
+      await client.setAuthUserRole({
+        role,
+        userId: user.id
+      });
+    });
+  };
+  const onBan = () => {
+    const days = Number.parseInt(banDays, 10);
+    const expiresInSeconds = Number.isFinite(days) && days > 0 ? days * 86400 : void 0;
+    runAction(async () => {
+      await client.banAuthUser({
+        expiresInSeconds,
+        reason: banReason.trim() === "" ? void 0 : banReason.trim(),
+        userId: user.id
+      });
+    });
+  };
+  const onUnban = () => {
+    runAction(async () => {
+      await client.unbanAuthUser({
+        userId: user.id
+      });
+    });
+  };
+  const onSetPassword = () => {
+    runAction(async () => {
+      await client.setAuthUserPassword({
+        newPassword,
+        userId: user.id
+      });
+      setNewPassword("");
+    });
+  };
+  const onImpersonate = () => {
+    runAction(() => client.impersonateAuthUser({
+      userId: user.id
+    }), {
+      onResult: (result_0) => {
+        setImpersonationToken(result_0.token);
+      },
+      refresh: false
+    });
+  };
+  const onRevokeAll = () => {
+    runAction(async () => {
+      await client.revokeAuthUserSessions({
+        userId: user.id
+      });
+    });
+  };
+  const onDelete = () => {
+    runAction(async () => {
+      await client.removeAuthUser({
+        userId: user.id
+      });
+      onClose();
+    });
+  };
+  const onConfirmDelete = () => {
+    setConfirmDelete(true);
+  };
+  const onCancelDelete = () => {
+    setConfirmDelete(false);
+  };
+  const rawFields = Object.entries(user).filter(([key]) => !SUMMARY_FIELDS.has(key));
+  return /* @__PURE__ */ jsxDEV(ModalShell, {
+    label: t("User details"),
+    onClose,
+    panelTestId: "ud-panel",
+    testId: "ud-overlay",
+    variant: "drawer",
+    children: [/* @__PURE__ */ jsxDEV("div", {
+      className: "flex items-start justify-between gap-2",
+      children: [/* @__PURE__ */ jsxDEV("div", {
+        className: "flex flex-col gap-1",
+        children: [/* @__PURE__ */ jsxDEV("h2", {
+          className: "text-sm font-semibold text-foreground",
+          children: user.name ?? user.email ?? user.id
+        }, void 0, false), /* @__PURE__ */ jsxDEV("p", {
+          className: "font-mono text-xs text-muted-foreground",
+          children: user.id
+        }, void 0, false), /* @__PURE__ */ jsxDEV("div", {
+          className: "flex flex-wrap items-center gap-1.5 pt-1",
+          children: [typeof user.role === "string" && user.role !== "" && /* @__PURE__ */ jsxDEV(Badge, {
+            variant: "secondary",
+            children: user.role
+          }, void 0, false), banned ? /* @__PURE__ */ jsxDEV(Badge, {
+            variant: "destructive",
+            children: t("Banned")
+          }, void 0, false) : /* @__PURE__ */ jsxDEV(Badge, {
+            variant: "outline",
+            children: t("Active")
+          }, void 0, false), user.emailVerified === true ? /* @__PURE__ */ jsxDEV(Badge, {
+            variant: "secondary",
+            children: t("verified")
+          }, void 0, false) : /* @__PURE__ */ jsxDEV(Badge, {
+            variant: "outline",
+            children: t("unverified")
+          }, void 0, false)]
+        }, void 0, true)]
+      }, void 0, true), /* @__PURE__ */ jsxDEV(Button, {
+        "data-testid": "ud-close",
+        onClick: onClose,
+        size: "sm",
+        type: "button",
+        variant: "ghost",
+        children: t("Close")
+      }, void 0, false)]
+    }, void 0, true), actionError !== null && /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-destructive",
+      "data-testid": "ud-action-error",
+      role: "alert",
+      children: actionError
+    }, void 0, false), capabilities.admin && /* @__PURE__ */ jsxDEV(Card, {
+      className: "gap-0 py-0",
+      children: [/* @__PURE__ */ jsxDEV("header", {
+        className: "border-b border-border px-4 py-3",
+        children: /* @__PURE__ */ jsxDEV("span", {
+          className: "font-mono text-[11px] tracking-wide text-muted-foreground uppercase",
+          children: t("Actions")
+        }, void 0, false)
+      }, void 0, false), /* @__PURE__ */ jsxDEV(CardContent, {
+        className: "flex flex-col gap-3 p-3",
+        children: [/* @__PURE__ */ jsxDEV("div", {
+          className: "flex items-end gap-2",
+          children: [/* @__PURE__ */ jsxDEV("div", {
+            className: "flex flex-1 flex-col gap-1",
+            children: [/* @__PURE__ */ jsxDEV(Label, {
+              htmlFor: "ud-role",
+              children: t("Role")
+            }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+              "data-testid": "ud-role-input",
+              id: "ud-role",
+              onChange: onRoleInputChange,
+              value: roleInput
+            }, void 0, false)]
+          }, void 0, true), /* @__PURE__ */ jsxDEV(Button, {
+            "data-testid": "ud-set-role",
+            disabled: busy || roleInput.trim() === "",
+            onClick: onSetRole,
+            size: "sm",
+            type: "button",
+            variant: "outline",
+            children: t("Set role")
+          }, void 0, false)]
+        }, void 0, true), banned ? /* @__PURE__ */ jsxDEV(Button, {
+          "data-testid": "ud-unban",
+          disabled: busy,
+          onClick: onUnban,
+          size: "sm",
+          type: "button",
+          variant: "outline",
+          children: t("Unban")
+        }, void 0, false) : /* @__PURE__ */ jsxDEV("div", {
+          className: "flex items-end gap-2",
+          children: [/* @__PURE__ */ jsxDEV("div", {
+            className: "flex flex-1 flex-col gap-1",
+            children: [/* @__PURE__ */ jsxDEV(Label, {
+              htmlFor: "ud-ban-reason",
+              children: t("Ban reason (optional)")
+            }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+              "data-testid": "ud-ban-reason",
+              id: "ud-ban-reason",
+              onChange: onBanReasonChange,
+              value: banReason
+            }, void 0, false)]
+          }, void 0, true), /* @__PURE__ */ jsxDEV("div", {
+            className: "flex w-24 flex-col gap-1",
+            children: [/* @__PURE__ */ jsxDEV(Label, {
+              htmlFor: "ud-ban-days",
+              children: t("Days")
+            }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+              "data-testid": "ud-ban-days",
+              id: "ud-ban-days",
+              onChange: onBanDaysChange,
+              type: "number",
+              value: banDays
+            }, void 0, false)]
+          }, void 0, true), /* @__PURE__ */ jsxDEV(Button, {
+            "data-testid": "ud-ban",
+            disabled: busy,
+            onClick: onBan,
+            size: "sm",
+            type: "button",
+            variant: "destructive",
+            children: t("Ban user")
+          }, void 0, false)]
+        }, void 0, true), /* @__PURE__ */ jsxDEV("div", {
+          className: "flex items-end gap-2",
+          children: [/* @__PURE__ */ jsxDEV("div", {
+            className: "flex flex-1 flex-col gap-1",
+            children: [/* @__PURE__ */ jsxDEV(Label, {
+              htmlFor: "ud-password",
+              children: t("New password")
+            }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+              "data-testid": "ud-password",
+              id: "ud-password",
+              onChange: onNewPasswordChange,
+              type: "password",
+              value: newPassword
+            }, void 0, false)]
+          }, void 0, true), /* @__PURE__ */ jsxDEV(Button, {
+            "data-testid": "ud-set-password",
+            disabled: busy || newPassword === "",
+            onClick: onSetPassword,
+            size: "sm",
+            type: "button",
+            variant: "outline",
+            children: t("Set password")
+          }, void 0, false)]
+        }, void 0, true), /* @__PURE__ */ jsxDEV("div", {
+          className: "flex flex-wrap gap-2",
+          children: [/* @__PURE__ */ jsxDEV(Button, {
+            "data-testid": "ud-impersonate",
+            disabled: busy,
+            onClick: onImpersonate,
+            size: "sm",
+            type: "button",
+            variant: "outline",
+            children: t("Impersonate")
+          }, void 0, false), /* @__PURE__ */ jsxDEV(Button, {
+            "data-testid": "ud-revoke-all",
+            disabled: busy,
+            onClick: onRevokeAll,
+            size: "sm",
+            type: "button",
+            variant: "outline",
+            children: t("Revoke all sessions")
+          }, void 0, false), confirmDelete ? /* @__PURE__ */ jsxDEV(Fragment, {
+            children: [/* @__PURE__ */ jsxDEV(Button, {
+              "data-testid": "ud-delete-confirm",
+              disabled: busy,
+              onClick: onDelete,
+              size: "sm",
+              type: "button",
+              variant: "destructive",
+              children: t("Confirm delete")
+            }, void 0, false), /* @__PURE__ */ jsxDEV(Button, {
+              "data-testid": "ud-delete-cancel",
+              onClick: onCancelDelete,
+              size: "sm",
+              type: "button",
+              variant: "ghost",
+              children: t("Cancel")
+            }, void 0, false)]
+          }, void 0, true) : /* @__PURE__ */ jsxDEV(Button, {
+            "data-testid": "ud-delete",
+            disabled: busy,
+            onClick: onConfirmDelete,
+            size: "sm",
+            type: "button",
+            variant: "destructive",
+            children: t("Delete user")
+          }, void 0, false)]
+        }, void 0, true), impersonationToken !== null && /* @__PURE__ */ jsxDEV("div", {
+          className: "flex flex-col gap-1",
+          "data-testid": "ud-impersonation",
+          children: [/* @__PURE__ */ jsxDEV(Label, {
+            htmlFor: "ud-token",
+            children: t("Impersonation token")
+          }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+            "data-testid": "ud-token",
+            id: "ud-token",
+            readOnly: true,
+            value: impersonationToken
+          }, void 0, false)]
+        }, void 0, true)]
+      }, void 0, true)]
+    }, void 0, true), /* @__PURE__ */ jsxDEV(UserSessionsPanel, {
+      busy,
+      runAction,
+      userId: user.id,
+      version
+    }, void 0, false), capabilities.accounts && /* @__PURE__ */ jsxDEV(UserAccountsPanel, {
+      busy,
+      runAction,
+      userId: user.id,
+      version
+    }, void 0, false), (capabilities.twoFactor || capabilities.passkey) && /* @__PURE__ */ jsxDEV(UserSecurityPanel, {
+      busy,
+      capabilities,
+      runAction,
+      userId: user.id,
+      version
+    }, void 0, false), /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-col gap-1",
+      "data-testid": "ud-fields",
+      children: [/* @__PURE__ */ jsxDEV("h3", {
+        className: "font-mono text-[11px] tracking-wide text-muted-foreground uppercase",
+        children: t("Fields")
+      }, void 0, false), /* @__PURE__ */ jsxDEV("dl", {
+        className: "flex flex-col",
+        children: rawFields.map(([key_0, value_0]) => /* @__PURE__ */ jsxDEV("div", {
+          className: "flex flex-col border-t border-border py-1.5",
+          children: [/* @__PURE__ */ jsxDEV("dt", {
+            className: "text-xs font-semibold text-muted-foreground",
+            children: key_0
+          }, void 0, false), /* @__PURE__ */ jsxDEV("dd", {
+            className: "m-0 font-mono text-xs break-words",
+            children: formatField(key_0, value_0)
+          }, void 0, false)]
+        }, key_0, true))
+      }, void 0, false)]
+    }, void 0, true)]
+  }, void 0, true);
+};
+
+const DEFAULT_PAGE_SIZE = 50;
+const UsersPanel = ({
+  pageSize = DEFAULT_PAGE_SIZE
+} = {}) => {
+  const client = useLunora();
+  const t = useT();
+  const [search, setSearch] = useState("");
+  const [roleFilter, setRoleFilter] = useState("");
+  const debouncedSearch = useDebounced(search);
+  const [selectedUserId, setSelectedUserId] = useState(null);
+  const [createOpen, setCreateOpen] = useState(false);
+  const {
+    capabilities
+  } = useAuthCapabilities();
+  const trimmedSearch = debouncedSearch.trim();
+  const trimmedRole = roleFilter.trim();
+  const usersQuery = useClientQuery(["lunora-auth-users", trimmedSearch, trimmedRole, pageSize], () => client.listAuthUsers({
+    filterField: trimmedRole === "" ? void 0 : "role",
+    filterValue: trimmedRole === "" ? void 0 : trimmedRole,
+    limit: pageSize,
+    search: trimmedSearch === "" ? void 0 : trimmedSearch
+  }), {
+    keepPreviousData: true
+  });
+  const users = usersQuery.data?.rows ?? null;
+  const usersError = usersQuery.error;
+  const reloadUsers = () => {
+    usersQuery.refetch();
+  };
+  useAutoRefresh(() => {
+    usersQuery.refetch();
+  }, true);
+  const selectedUser = selectedUserId === null ? null : users?.find((user) => user.id === selectedUserId) ?? null;
+  return /* @__PURE__ */ jsxDEV("div", {
+    className: "flex flex-col gap-4",
+    "data-testid": "lunora-users",
+    children: [/* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-wrap items-center gap-2",
+      children: [/* @__PURE__ */ jsxDEV(Input, {
+        "aria-label": t("Search users"),
+        className: "w-56",
+        "data-testid": "us-search",
+        onChange: (event) => {
+          setSearch(event.target.value);
+        },
+        placeholder: t("Search by email or name…"),
+        value: search
+      }, void 0, false), /* @__PURE__ */ jsxDEV(Input, {
+        "aria-label": t("Filter by role"),
+        className: "w-40",
+        "data-testid": "us-role-filter",
+        onChange: (event_0) => {
+          setRoleFilter(event_0.target.value);
+        },
+        placeholder: t("Filter by role"),
+        value: roleFilter
+      }, void 0, false), /* @__PURE__ */ jsxDEV(Button, {
+        "data-testid": "us-new",
+        onClick: () => {
+          setCreateOpen(true);
+        },
+        size: "sm",
+        type: "button",
+        children: t("New user")
+      }, void 0, false)]
+    }, void 0, true), usersError !== null && /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-destructive",
+      "data-testid": "us-users-error",
+      role: "alert",
+      children: usersError
+    }, void 0, false), users !== null && users.length === 0 && /* @__PURE__ */ jsxDEV(EmptyState, {
+      description: t("Users who sign up to your app will appear here."),
+      icon: /* @__PURE__ */ jsxDEV("svg", {
+        "aria-hidden": "true",
+        fill: "none",
+        stroke: "currentColor",
+        strokeLinecap: "round",
+        strokeLinejoin: "round",
+        strokeWidth: 1.6,
+        viewBox: "0 0 24 24",
+        children: /* @__PURE__ */ jsxDEV("path", {
+          d: "M16 20v-2a4 4 0 0 0-4-4H7a4 4 0 0 0-4 4v2M9.5 10a3.5 3.5 0 1 0 0-7 3.5 3.5 0 0 0 0 7Zm11.5 10v-2a4 4 0 0 0-3-3.85"
+        }, void 0, false)
+      }, void 0, false),
+      testId: "us-empty",
+      title: t("No users.")
+    }, void 0, false), users !== null && users.length > 0 && /* @__PURE__ */ jsxDEV(Card, {
+      className: "overflow-hidden py-0",
+      children: /* @__PURE__ */ jsxDEV(CardContent, {
+        className: "px-0",
+        children: /* @__PURE__ */ jsxDEV(Table, {
+          "data-testid": "us-table",
+          children: [/* @__PURE__ */ jsxDEV(TableHeader, {
+            children: /* @__PURE__ */ jsxDEV(TableRow, {
+              children: [/* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("id")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("email")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("name")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("role")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("status")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("verified")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                children: t("created")
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+                "aria-label": t("Actions")
+              }, void 0, false)]
+            }, void 0, true)
+          }, void 0, false), /* @__PURE__ */ jsxDEV(TableBody, {
+            children: users.map((user_0) => /* @__PURE__ */ jsxDEV(TableRow, {
+              "data-testid": `us-row-${user_0.id}`,
+              children: [/* @__PURE__ */ jsxDEV(TableCell, {
+                className: "font-mono text-xs",
+                children: user_0.id
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                children: user_0.email ?? ""
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                children: user_0.name ?? ""
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                children: typeof user_0.role === "string" && user_0.role !== "" ? /* @__PURE__ */ jsxDEV(Badge, {
+                  variant: "secondary",
+                  children: user_0.role
+                }, void 0, false) : ""
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                children: user_0.banned === true ? /* @__PURE__ */ jsxDEV(Badge, {
+                  variant: "destructive",
+                  children: t("Banned")
+                }, void 0, false) : /* @__PURE__ */ jsxDEV(Badge, {
+                  variant: "success",
+                  children: t("Active")
+                }, void 0, false)
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                children: user_0.emailVerified === true ? /* @__PURE__ */ jsxDEV(Badge, {
+                  variant: "success",
+                  children: t("yes")
+                }, void 0, false) : /* @__PURE__ */ jsxDEV(Badge, {
+                  variant: "outline",
+                  children: t("no")
+                }, void 0, false)
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                className: "text-muted-foreground tabular-nums",
+                children: formatTimestamp(user_0.createdAt)
+              }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+                children: /* @__PURE__ */ jsxDEV(Button, {
+                  "data-testid": `us-manage-${user_0.id}`,
+                  onClick: () => {
+                    setSelectedUserId(user_0.id);
+                  },
+                  size: "xs",
+                  type: "button",
+                  variant: "ghost",
+                  children: t("Manage")
+                }, void 0, false)
+              }, void 0, false)]
+            }, user_0.id, true))
+          }, void 0, false)]
+        }, void 0, true)
+      }, void 0, false)
+    }, void 0, false), selectedUser !== null && /* @__PURE__ */ jsxDEV(UserDetailDrawer, {
+      capabilities,
+      onChanged: reloadUsers,
+      onClose: () => {
+        setSelectedUserId(null);
+      },
+      user: selectedUser
+    }, void 0, false), createOpen && /* @__PURE__ */ jsxDEV(UserCreateDialog, {
+      onClose: () => {
+        setCreateOpen(false);
+      },
+      onCreated: reloadUsers
+    }, void 0, false)]
+  }, void 0, true);
+};
+
+export { UsersPanel };