@nocios/crudify-ui 1.3.2 → 1.3.6

package/dist/index.js

@@ -1290,6 +1290,9 @@ __export(index_exports, {
   ERROR_CODES: () => ERROR_CODES,
   ERROR_SEVERITY_MAP: () => ERROR_SEVERITY_MAP,
   LoginComponent: () => LoginComponent,
+  POLICY_ACTIONS: () => POLICY_ACTIONS,
+  PREFERRED_POLICY_ORDER: () => PREFERRED_POLICY_ORDER,
+  Policies: () => Policies_default,
   ProtectedRoute: () => ProtectedRoute,
   SessionDebugInfo: () => SessionDebugInfo,
   SessionManager: () => SessionManager,
@@ -3321,34 +3324,613 @@ var UserProfileDisplay = ({
 };
 var UserProfileDisplay_default = UserProfileDisplay;
 
+// src/components/PublicPolicies/Policies.tsx
+var import_react15 = require("react");
+var import_react_i18next3 = require("react-i18next");
+var import_material10 = require("@mui/material");
+var import_icons_material4 = require("@mui/icons-material");
+
+// src/components/PublicPolicies/PolicyItem/PolicyItem.tsx
+var import_react14 = require("react");
+var import_react_i18next2 = require("react-i18next");
+var import_material9 = require("@mui/material");
+var import_icons_material3 = require("@mui/icons-material");
+
+// src/components/PublicPolicies/FieldSelector/FieldSelector.tsx
+var import_react13 = require("react");
+var import_react_i18next = require("react-i18next");
+var import_material8 = require("@mui/material");
+var import_icons_material2 = require("@mui/icons-material");
+var import_jsx_runtime12 = require("react/jsx-runtime");
+var FieldSelector = ({
+  value,
+  onChange,
+  availableFields,
+  error,
+  disabled = false
+}) => {
+  const { t } = (0, import_react_i18next.useTranslation)();
+  const [mode, setMode] = (0, import_react13.useState)("custom");
+  const isUpdatingRef = (0, import_react13.useRef)(false);
+  (0, import_react13.useEffect)(() => {
+    const current = value || { allow: [], owner_allow: [], deny: [] };
+    const all = new Set(availableFields);
+    const allow = (current.allow || []).filter((f) => all.has(f));
+    const owner = (current.owner_allow || []).filter((f) => all.has(f));
+    const deny = (current.deny || []).filter((f) => all.has(f));
+    availableFields.forEach((f) => {
+      if (!allow.includes(f) && !owner.includes(f) && !deny.includes(f)) deny.push(f);
+    });
+    const normalized = { allow, owner_allow: owner, deny };
+    if (JSON.stringify(normalized) !== JSON.stringify(current)) {
+      onChange(normalized);
+    }
+    if (allow.length === availableFields.length) setMode("all");
+    else if (deny.length === availableFields.length) setMode("none");
+    else setMode("custom");
+  }, [availableFields, value]);
+  const setAllAllow = () => {
+    isUpdatingRef.current = true;
+    onChange({ allow: [...availableFields], owner_allow: [], deny: [] });
+    setMode("all");
+    setTimeout(() => {
+      isUpdatingRef.current = false;
+    }, 0);
+  };
+  const setAllDeny = () => {
+    isUpdatingRef.current = true;
+    onChange({ allow: [], owner_allow: [], deny: [...availableFields] });
+    setMode("none");
+    setTimeout(() => {
+      isUpdatingRef.current = false;
+    }, 0);
+  };
+  const getFieldState = (fieldName) => {
+    if (value?.allow?.includes(fieldName)) return "allow";
+    if (value?.owner_allow?.includes(fieldName)) return "owner_allow";
+    return "deny";
+  };
+  const setFieldState = (fieldName, state) => {
+    isUpdatingRef.current = true;
+    const allow = new Set(value?.allow || []);
+    const owner = new Set(value?.owner_allow || []);
+    const deny = new Set(value?.deny || []);
+    allow.delete(fieldName);
+    owner.delete(fieldName);
+    deny.delete(fieldName);
+    if (state === "allow") allow.add(fieldName);
+    if (state === "owner_allow") owner.add(fieldName);
+    if (state === "deny") deny.add(fieldName);
+    onChange({ allow: Array.from(allow), owner_allow: Array.from(owner), deny: Array.from(deny) });
+    setMode("custom");
+    setTimeout(() => {
+      isUpdatingRef.current = false;
+    }, 0);
+  };
+  if (availableFields.length === 0) {
+    return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Box, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 1 }, children: t("modules.form.publicPolicies.fields.conditions.label") }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { fontStyle: "italic" }, children: t("modules.form.publicPolicies.fields.conditions.noFieldsAvailable") }),
+      error && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.FormHelperText, { error: true, sx: { mt: 1 }, children: error })
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Box, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: t("modules.form.publicPolicies.fields.conditions.label") }),
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Stack, { direction: "row", spacing: 1, sx: { mb: 3 }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+        import_material8.Button,
+        {
+          variant: mode === "all" ? "contained" : "outlined",
+          startIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material2.SelectAll, {}),
+          onClick: setAllAllow,
+          disabled,
+          size: "small",
+          sx: {
+            minWidth: 120,
+            ...mode === "all" && {
+              backgroundColor: "#16a34a",
+              "&:hover": { backgroundColor: "#15803d" }
+            }
+          },
+          children: t("modules.form.publicPolicies.fields.conditions.allFields")
+        }
+      ),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+        import_material8.Button,
+        {
+          variant: mode === "none" ? "contained" : "outlined",
+          startIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material2.ClearAll, {}),
+          onClick: setAllDeny,
+          disabled,
+          size: "small",
+          sx: {
+            minWidth: 120,
+            ...mode === "none" && {
+              backgroundColor: "#cf222e",
+              "&:hover": { backgroundColor: "#bc1f2c" }
+            }
+          },
+          children: t("modules.form.publicPolicies.fields.conditions.noFields")
+        }
+      )
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Box, { sx: { p: 2, border: "1px solid #d1d9e0", borderRadius: 1, backgroundColor: "#f6f8fa" }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: t("modules.form.publicPolicies.fields.conditions.help") }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Stack, { spacing: 1, children: availableFields.map((fieldName) => {
+        const fieldState = getFieldState(fieldName);
+        return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Stack, { direction: "row", spacing: 1, alignItems: "center", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", sx: { minWidth: 100, fontFamily: "monospace" }, children: fieldName }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.ToggleButtonGroup, { value: fieldState, exclusive: true, size: "small", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
+              import_material8.ToggleButton,
+              {
+                value: "allow",
+                onClick: () => setFieldState(fieldName, "allow"),
+                disabled,
+                sx: {
+                  px: 2,
+                  color: fieldState === "allow" ? "#ffffff" : "#6b7280",
+                  backgroundColor: fieldState === "allow" ? "#16a34a" : "#f3f4f6",
+                  borderColor: fieldState === "allow" ? "#16a34a" : "#d1d5db",
+                  "&:hover": {
+                    backgroundColor: fieldState === "allow" ? "#15803d" : "#e5e7eb",
+                    borderColor: fieldState === "allow" ? "#15803d" : "#9ca3af"
+                  },
+                  "&.Mui-selected": {
+                    backgroundColor: "#16a34a",
+                    color: "#ffffff",
+                    "&:hover": {
+                      backgroundColor: "#15803d"
+                    }
+                  }
+                },
+                children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material2.CheckCircle, { sx: { fontSize: 16, mr: 0.5 } }),
+                  t("modules.form.publicPolicies.fields.conditions.states.allow")
+                ]
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+              import_material8.ToggleButton,
+              {
+                value: "owner_allow",
+                onClick: () => setFieldState(fieldName, "owner_allow"),
+                disabled,
+                sx: {
+                  px: 2,
+                  color: fieldState === "owner_allow" ? "#ffffff" : "#6b7280",
+                  backgroundColor: fieldState === "owner_allow" ? "#0ea5e9" : "#f3f4f6",
+                  borderColor: fieldState === "owner_allow" ? "#0ea5e9" : "#d1d5db",
+                  "&:hover": {
+                    backgroundColor: fieldState === "owner_allow" ? "#0284c7" : "#e5e7eb",
+                    borderColor: fieldState === "owner_allow" ? "#0284c7" : "#9ca3af"
+                  },
+                  "&.Mui-selected": {
+                    backgroundColor: "#0ea5e9",
+                    color: "#ffffff",
+                    "&:hover": {
+                      backgroundColor: "#0284c7"
+                    }
+                  }
+                },
+                children: t("modules.form.publicPolicies.fields.conditions.states.ownerAllow")
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
+              import_material8.ToggleButton,
+              {
+                value: "deny",
+                onClick: () => setFieldState(fieldName, "deny"),
+                disabled,
+                sx: {
+                  px: 2,
+                  color: fieldState === "deny" ? "#ffffff" : "#6b7280",
+                  backgroundColor: fieldState === "deny" ? "#dc2626" : "#f3f4f6",
+                  borderColor: fieldState === "deny" ? "#dc2626" : "#d1d5db",
+                  "&:hover": {
+                    backgroundColor: fieldState === "deny" ? "#b91c1c" : "#e5e7eb",
+                    borderColor: fieldState === "deny" ? "#b91c1c" : "#9ca3af"
+                  },
+                  "&.Mui-selected": {
+                    backgroundColor: "#dc2626",
+                    color: "#ffffff",
+                    "&:hover": {
+                      backgroundColor: "#b91c1c"
+                    }
+                  }
+                },
+                children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material2.Cancel, { sx: { fontSize: 16, mr: 0.5 } }),
+                  t("modules.form.publicPolicies.fields.conditions.states.deny")
+                ]
+              }
+            )
+          ] })
+        ] }, fieldName);
+      }) })
+    ] }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.FormHelperText, { error: true, sx: { mt: 1 }, children: error })
+  ] });
+};
+var FieldSelector_default = FieldSelector;
+
+// src/components/PublicPolicies/constants.ts
+var POLICY_ACTIONS = ["create", "read", "update", "delete"];
+var PREFERRED_POLICY_ORDER = [
+  "create",
+  "read",
+  "update",
+  "delete"
+];
+
+// src/components/PublicPolicies/PolicyItem/PolicyItem.tsx
+var import_jsx_runtime13 = require("react/jsx-runtime");
+var PolicyItem = (0, import_react14.forwardRef)(({
+  policy,
+  onChange,
+  onRemove,
+  availableFields,
+  isSubmitting = false,
+  usedActions,
+  error
+}, ref) => {
+  const { t } = (0, import_react_i18next2.useTranslation)();
+  const takenActions = new Set(Array.from(usedActions || []));
+  takenActions.delete(policy.action);
+  const actionOptions = POLICY_ACTIONS.map((a) => ({
+    value: a,
+    label: t(`modules.form.publicPolicies.fields.action.options.${a}`)
+  }));
+  return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(
+    import_material9.Paper,
+    {
+      ref,
+      sx: {
+        p: 3,
+        border: "1px solid #d1d9e0",
+        borderRadius: 2,
+        position: "relative",
+        backgroundColor: "#ffffff"
+      },
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { sx: { display: "flex", justifyContent: "space-between", alignItems: "flex-start", mb: 3 }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+            import_material9.Typography,
+            {
+              variant: "subtitle1",
+              sx: {
+                fontWeight: 600,
+                color: "#111418",
+                fontSize: "1rem"
+              },
+              children: t("modules.form.publicPolicies.policyTitle")
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+            import_material9.IconButton,
+            {
+              onClick: onRemove,
+              size: "small",
+              disabled: isSubmitting,
+              "aria-label": t("modules.form.publicPolicies.removePolicy"),
+              sx: {
+                color: "#656d76",
+                "&:hover": {
+                  color: "#cf222e",
+                  backgroundColor: "rgba(207, 34, 46, 0.1)"
+                }
+              },
+              children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_icons_material3.Delete, {})
+            }
+          )
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Stack, { spacing: 3, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Stack, { direction: { xs: "column", md: "row" }, spacing: 2, children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Box, { sx: { flex: 1, minWidth: 200 }, children: /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.FormControl, { fullWidth: true, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.InputLabel, { children: t("modules.form.publicPolicies.fields.action.label") }),
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+              import_material9.Select,
+              {
+                value: policy.action,
+                label: t("modules.form.publicPolicies.fields.action.label"),
+                disabled: isSubmitting,
+                onChange: (e) => {
+                  const newAction = e.target.value;
+                  const next = { ...policy, action: newAction };
+                  if (newAction === "delete") {
+                    next.permission = "deny";
+                    delete next.fields;
+                  } else {
+                    next.fields = { allow: [], owner_allow: [], deny: availableFields };
+                    delete next.permission;
+                  }
+                  onChange(next);
+                },
+                sx: {
+                  backgroundColor: "#ffffff",
+                  "&:hover .MuiOutlinedInput-notchedOutline": {
+                    borderColor: "#8c959f"
+                  },
+                  "&.Mui-focused .MuiOutlinedInput-notchedOutline": {
+                    borderColor: "#0969da",
+                    borderWidth: 2
+                  }
+                },
+                children: actionOptions.map((option) => {
+                  const disabledOption = takenActions.has(option.value);
+                  return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.MenuItem, { value: option.value, disabled: disabledOption, children: option.label }, option.value);
+                })
+              }
+            ),
+            error && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.FormHelperText, { error: true, children: error })
+          ] }) }) }),
+          policy.action === "delete" ? /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: t("modules.form.publicPolicies.fields.conditions.label") }),
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Stack, { direction: "row", spacing: 1, sx: { mb: 3 }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+                import_material9.Button,
+                {
+                  variant: policy.permission === "*" ? "contained" : "outlined",
+                  startIcon: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_icons_material3.SelectAll, {}),
+                  onClick: () => onChange({ ...policy, permission: "*" }),
+                  disabled: isSubmitting,
+                  size: "small",
+                  sx: {
+                    minWidth: 140,
+                    whiteSpace: "nowrap",
+                    ...policy.permission === "*" && {
+                      backgroundColor: "#16a34a",
+                      "&:hover": { backgroundColor: "#15803d" }
+                    }
+                  },
+                  children: t("modules.form.publicPolicies.fields.conditions.allFields")
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+                import_material9.Button,
+                {
+                  variant: policy.permission === "owner" ? "contained" : "outlined",
+                  onClick: () => onChange({ ...policy, permission: "owner" }),
+                  disabled: isSubmitting,
+                  size: "small",
+                  sx: {
+                    minWidth: 140,
+                    whiteSpace: "nowrap",
+                    ...policy.permission === "owner" && {
+                      backgroundColor: "#0ea5e9",
+                      "&:hover": { backgroundColor: "#0284c7" }
+                    }
+                  },
+                  children: t("modules.form.publicPolicies.fields.conditions.states.ownerAllow")
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+                import_material9.Button,
+                {
+                  variant: policy.permission === "deny" ? "contained" : "outlined",
+                  startIcon: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_icons_material3.ClearAll, {}),
+                  onClick: () => onChange({ ...policy, permission: "deny" }),
+                  disabled: isSubmitting,
+                  size: "small",
+                  sx: {
+                    minWidth: 140,
+                    whiteSpace: "nowrap",
+                    ...policy.permission === "deny" && {
+                      backgroundColor: "#cf222e",
+                      "&:hover": { backgroundColor: "#bc1f2c" }
+                    }
+                  },
+                  children: t("modules.form.publicPolicies.fields.conditions.noFields")
+                }
+              )
+            ] })
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+            FieldSelector_default,
+            {
+              value: policy.fields || { allow: [], owner_allow: [], deny: [] },
+              onChange: (nextFields) => onChange({ ...policy, fields: nextFields }),
+              availableFields,
+              disabled: isSubmitting
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Paper, { variant: "outlined", sx: { p: 2, backgroundColor: "#f9fafb" }, children: policy.action === "delete" ? /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { component: "span", sx: {
+              color: policy.permission === "*" ? "#16a34a" : policy.permission === "owner" ? "#0ea5e9" : "#dc2626"
+            }, children: [
+              t("modules.form.publicPolicies.fields.conditions.states.allow"),
+              ":"
+            ] }),
+            " ",
+            policy.permission || "-"
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Stack, { spacing: 0.5, divider: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Divider, { sx: { borderColor: "#e5e7eb" } }), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { component: "span", sx: { color: "#16a34a" }, children: [
+                t("modules.form.publicPolicies.fields.conditions.states.allow"),
+                ":"
+              ] }),
+              " ",
+              (policy?.fields?.allow || []).join(", ") || "-"
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { component: "span", sx: { color: "#0ea5e9" }, children: [
+                t("modules.form.publicPolicies.fields.conditions.states.ownerAllow"),
+                ":"
+              ] }),
+              " ",
+              (policy?.fields?.owner_allow || []).join(", ") || "-"
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { component: "span", sx: { color: "#dc2626" }, children: [
+                t("modules.form.publicPolicies.fields.conditions.states.deny"),
+                ":"
+              ] }),
+              " ",
+              (policy?.fields?.deny || []).join(", ") || "-"
+            ] })
+          ] }) })
+        ] })
+      ]
+    }
+  );
+});
+var PolicyItem_default = PolicyItem;
+
+// src/components/PublicPolicies/Policies.tsx
+var import_jsx_runtime14 = require("react/jsx-runtime");
+var generateId = () => {
+  const c = globalThis?.crypto;
+  if (c && typeof c.randomUUID === "function") return c.randomUUID();
+  return `${Date.now()}-${Math.random().toString(16).slice(2)}`;
+};
+var Policies = ({
+  policies,
+  onChange,
+  availableFields,
+  errors,
+  isSubmitting = false
+}) => {
+  const { t } = (0, import_react_i18next3.useTranslation)();
+  const policyRefs = (0, import_react15.useRef)({});
+  const takenActions = new Set((policies || []).map((p) => p.action).filter(Boolean));
+  const remainingActions = PREFERRED_POLICY_ORDER.filter((a) => !takenActions.has(a));
+  const canAddPolicy = remainingActions.length > 0;
+  const addPolicy = () => {
+    const defaultAction = remainingActions[0] || "create";
+    const newPolicy = {
+      id: generateId(),
+      action: defaultAction
+    };
+    if (defaultAction === "delete") {
+      newPolicy.permission = "deny";
+    } else {
+      newPolicy.fields = {
+        allow: [],
+        owner_allow: [],
+        deny: availableFields
+      };
+    }
+    const next = [...policies || [], newPolicy];
+    onChange(next);
+    setTimeout(() => {
+      const newIndex = next.length - 1;
+      const el = policyRefs.current[newIndex];
+      if (el) {
+        el.scrollIntoView({ behavior: "smooth", block: "center" });
+      }
+    }, 100);
+  };
+  const removePolicy = (index) => {
+    const next = [...policies];
+    next.splice(index, 1);
+    onChange(next);
+  };
+  const arrayError = (() => {
+    if (!errors) return null;
+    if (typeof errors === "string") return errors;
+    const msg = errors._error;
+    return typeof msg === "string" ? msg : null;
+  })();
+  const usedActions = new Set((policies || []).map((p) => p.action));
+  return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_jsx_runtime14.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Divider, { sx: { borderColor: "#e0e4e7" } }),
+    /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_material10.Box, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Box, { display: "flex", justifyContent: "space-between", alignItems: "center", mb: 3, children: /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_material10.Box, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+          import_material10.Typography,
+          {
+            variant: "h6",
+            sx: {
+              fontWeight: 600,
+              color: "#111418",
+              mb: 1
+            },
+            children: t("modules.form.publicPolicies.title")
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+          import_material10.Typography,
+          {
+            variant: "body2",
+            color: "text.secondary",
+            sx: { fontSize: "0.875rem" },
+            children: t("modules.form.publicPolicies.description")
+          }
+        )
+      ] }) }),
+      arrayError && /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Alert, { severity: "error", sx: { mb: 3 }, children: arrayError }),
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_material10.Stack, { spacing: 3, children: [
+        (policies || []).length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Alert, { severity: "info", children: t("modules.form.publicPolicies.noPolicies") }) : policies.map((policy, index) => /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+          PolicyItem_default,
+          {
+            ref: (el) => {
+              policyRefs.current[index] = el;
+            },
+            policy,
+            onChange: (nextPolicy) => {
+              const next = [...policies];
+              next[index] = nextPolicy;
+              onChange(next);
+            },
+            onRemove: () => removePolicy(index),
+            availableFields,
+            isSubmitting,
+            usedActions,
+            error: typeof errors === "object" && errors && policy.id in errors ? errors[policy.id] : void 0
+          },
+          policy.id
+        )),
+        canAddPolicy && /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Box, { children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+          import_material10.Button,
+          {
+            type: "button",
+            variant: "outlined",
+            startIcon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_icons_material4.Add, {}),
+            onClick: addPolicy,
+            disabled: isSubmitting,
+            sx: {
+              borderColor: "#d0d7de",
+              color: "#656d76",
+              "&:hover": {
+                borderColor: "#8c959f",
+                backgroundColor: "transparent"
+              }
+            },
+            children: t("modules.form.publicPolicies.addPolicy")
+          }
+        ) })
+      ] })
+    ] })
+  ] });
+};
+var Policies_default = Policies;
+
 // src/index.ts
 init_CrudifyDataProvider();
 
 // src/hooks/useCrudifyUser.ts
-var import_react13 = require("react");
+var import_react16 = require("react");
 var import_crudify_browser5 = __toESM(require("@nocios/crudify-browser"));
 init_CrudifyDataProvider();
 var useCrudifyUser = (options = {}) => {
   const { autoFetch = true, retryOnError = false, maxRetries = 3 } = options;
   const { isAuthenticated, isInitialized, user: jwtUser, token } = useCrudifyDataContext();
-  const [userData, setUserData] = (0, import_react13.useState)(null);
-  const [loading, setLoading] = (0, import_react13.useState)(false);
-  const [error, setError] = (0, import_react13.useState)(null);
-  const abortControllerRef = (0, import_react13.useRef)(null);
-  const mountedRef = (0, import_react13.useRef)(true);
-  const requestIdRef = (0, import_react13.useRef)(0);
-  const retryCountRef = (0, import_react13.useRef)(0);
-  const getUserEmailFromJWT = (0, import_react13.useCallback)(() => {
+  const [userData, setUserData] = (0, import_react16.useState)(null);
+  const [loading, setLoading] = (0, import_react16.useState)(false);
+  const [error, setError] = (0, import_react16.useState)(null);
+  const abortControllerRef = (0, import_react16.useRef)(null);
+  const mountedRef = (0, import_react16.useRef)(true);
+  const requestIdRef = (0, import_react16.useRef)(0);
+  const retryCountRef = (0, import_react16.useRef)(0);
+  const getUserEmailFromJWT = (0, import_react16.useCallback)(() => {
     if (!jwtUser) return null;
     return jwtUser.email || jwtUser["cognito:username"] || null;
   }, [jwtUser]);
-  const clearProfile = (0, import_react13.useCallback)(() => {
+  const clearProfile = (0, import_react16.useCallback)(() => {
     setUserData(null);
     setError(null);
     setLoading(false);
     retryCountRef.current = 0;
   }, []);
-  const refreshProfile = (0, import_react13.useCallback)(async () => {
+  const refreshProfile = (0, import_react16.useCallback)(async () => {
     const userEmail = getUserEmailFromJWT();
     console.log("\u{1F464} useCrudifyUser - Refreshing profile for:", userEmail);
     if (!userEmail) {
@@ -3480,14 +4062,14 @@ var useCrudifyUser = (options = {}) => {
       }
     }
   }, [isInitialized, getUserEmailFromJWT, retryOnError, maxRetries]);
-  (0, import_react13.useEffect)(() => {
+  (0, import_react16.useEffect)(() => {
     if (autoFetch && isAuthenticated && isInitialized) {
       refreshProfile();
     } else if (!isAuthenticated) {
       clearProfile();
     }
   }, [autoFetch, isAuthenticated, isInitialized, refreshProfile, clearProfile]);
-  (0, import_react13.useEffect)(() => {
+  (0, import_react16.useEffect)(() => {
     mountedRef.current = true;
     return () => {
       mountedRef.current = false;
@@ -3511,7 +4093,7 @@ var useCrudifyUser = (options = {}) => {
 };
 
 // src/hooks/useCrudifyData.ts
-var import_react14 = require("react");
+var import_react17 = require("react");
 var import_crudify_browser6 = __toESM(require("@nocios/crudify-browser"));
 init_CrudifyDataProvider();
 var useCrudifyData = () => {
@@ -3520,10 +4102,10 @@ var useCrudifyData = () => {
     isInitializing,
     initializationError
   } = useCrudifyDataContext();
-  const isReady = (0, import_react14.useCallback)(() => {
+  const isReady = (0, import_react17.useCallback)(() => {
     return isInitialized && !initializationError && !isInitializing;
   }, [isInitialized, initializationError, isInitializing]);
-  const waitForReady = (0, import_react14.useCallback)(async () => {
+  const waitForReady = (0, import_react17.useCallback)(async () => {
     if (isReady()) return;
     if (initializationError) {
       throw new Error(`Crudify initialization failed: ${initializationError}`);
@@ -3547,13 +4129,13 @@ var useCrudifyData = () => {
       check();
     });
   }, [isReady, initializationError]);
-  const ensureReady = (0, import_react14.useCallback)((operationName) => {
+  const ensureReady = (0, import_react17.useCallback)((operationName) => {
     if (!isReady()) {
       const error = initializationError ? `Crudify initialization failed: ${initializationError}` : isInitializing ? "Crudify is still initializing. Please wait." : "Crudify is not initialized";
       throw new Error(`Cannot perform ${operationName}: ${error}`);
     }
   }, [isReady, initializationError, isInitializing]);
-  const readItems = (0, import_react14.useCallback)(async (moduleKey, filter, options) => {
+  const readItems = (0, import_react17.useCallback)(async (moduleKey, filter, options) => {
     ensureReady("readItems");
     console.log("\u{1F4CA} useCrudifyData - readItems called with:");
     console.log("   - moduleKey:", moduleKey);
@@ -3572,7 +4154,7 @@ var useCrudifyData = () => {
       throw error;
     }
   }, [ensureReady]);
-  const readItem = (0, import_react14.useCallback)(async (moduleKey, filter, options) => {
+  const readItem = (0, import_react17.useCallback)(async (moduleKey, filter, options) => {
     ensureReady("readItem");
     console.log("\u{1F4CA} useCrudifyData - readItem:", { moduleKey, filter, options });
     try {
@@ -3584,7 +4166,7 @@ var useCrudifyData = () => {
       throw error;
     }
   }, [ensureReady]);
-  const createItem = (0, import_react14.useCallback)(async (moduleKey, data, options) => {
+  const createItem = (0, import_react17.useCallback)(async (moduleKey, data, options) => {
     ensureReady("createItem");
     console.log("\u{1F4CA} useCrudifyData - createItem:", { moduleKey, data, options });
     try {
@@ -3596,7 +4178,7 @@ var useCrudifyData = () => {
       throw error;
     }
   }, [ensureReady]);
-  const updateItem = (0, import_react14.useCallback)(async (moduleKey, data, options) => {
+  const updateItem = (0, import_react17.useCallback)(async (moduleKey, data, options) => {
     ensureReady("updateItem");
     console.log("\u{1F4CA} useCrudifyData - updateItem:", { moduleKey, data, options });
     try {
@@ -3608,7 +4190,7 @@ var useCrudifyData = () => {
       throw error;
     }
   }, [ensureReady]);
-  const deleteItem = (0, import_react14.useCallback)(async (moduleKey, id, options) => {
+  const deleteItem = (0, import_react17.useCallback)(async (moduleKey, id, options) => {
     ensureReady("deleteItem");
     console.log("\u{1F4CA} useCrudifyData - deleteItem:", { moduleKey, id, options });
     try {
@@ -3620,7 +4202,7 @@ var useCrudifyData = () => {
       throw error;
     }
   }, [ensureReady]);
-  const transaction = (0, import_react14.useCallback)(async (operations, options) => {
+  const transaction = (0, import_react17.useCallback)(async (operations, options) => {
     ensureReady("transaction");
     console.log("\u{1F4CA} useCrudifyData - transaction:", { operations, options });
     try {
@@ -3632,7 +4214,7 @@ var useCrudifyData = () => {
       throw error;
     }
   }, [ensureReady]);
-  const login = (0, import_react14.useCallback)(async (email, password) => {
+  const login = (0, import_react17.useCallback)(async (email, password) => {
     ensureReady("login");
     console.log("\u{1F4CA} useCrudifyData - login:", { email });
     try {
@@ -3665,7 +4247,7 @@ var useCrudifyData = () => {
 };
 
 // src/hooks/useCrudifyInstance.ts
-var import_react15 = require("react");
+var import_react18 = require("react");
 var import_crudify_browser7 = __toESM(require("@nocios/crudify-browser"));
 init_CrudifyDataProvider();
 var useCrudifyInstance = () => {
@@ -3675,7 +4257,7 @@ var useCrudifyInstance = () => {
     initializationError
   } = useCrudifyDataContext();
   const isReady = isInitialized && !initializationError && !isInitializing;
-  const waitForReady = (0, import_react15.useCallback)(async () => {
+  const waitForReady = (0, import_react18.useCallback)(async () => {
     console.log("\u{1F504} useCrudifyInstance - waitForReady: Starting wait");
     console.log("   - isReady:", isReady);
     console.log("   - isInitialized:", isInitialized);
@@ -3703,14 +4285,14 @@ var useCrudifyInstance = () => {
       throw error;
     }
   }, [isReady, initializationError, isInitialized, isInitializing]);
-  const ensureReady = (0, import_react15.useCallback)(async (operationName) => {
+  const ensureReady = (0, import_react18.useCallback)(async (operationName) => {
     if (!isReady) {
       console.log(`\u{1F504} useCrudifyInstance - ${operationName}: Waiting for crudify to be ready...`);
       await waitForReady();
       console.log(`\u2705 useCrudifyInstance - ${operationName}: Crudify is ready`);
     }
   }, [isReady, waitForReady]);
-  const ensureTokenSync = (0, import_react15.useCallback)(async () => {
+  const ensureTokenSync = (0, import_react18.useCallback)(async () => {
     console.log("\u{1F504} useCrudifyInstance - ensureTokenSync: Starting token sync check");
     const { tokenManager: tokenManager2 } = await Promise.resolve().then(() => (init_TokenManager(), TokenManager_exports));
     const tmToken = tokenManager2.getToken();
@@ -3725,7 +4307,7 @@ var useCrudifyInstance = () => {
       console.log("\u{1F504} useCrudifyInstance - No token sync needed, tokens match or no token");
     }
   }, []);
-  const getStructure = (0, import_react15.useCallback)(async (options) => {
+  const getStructure = (0, import_react18.useCallback)(async (options) => {
     console.log("\u{1F4E1} useCrudifyInstance - getStructure: Starting");
     await ensureReady("getStructure");
     try {
@@ -3746,7 +4328,7 @@ var useCrudifyInstance = () => {
       throw error;
     }
   }, [ensureReady, ensureTokenSync]);
-  const getStructurePublic = (0, import_react15.useCallback)(async (options) => {
+  const getStructurePublic = (0, import_react18.useCallback)(async (options) => {
     console.log("\u{1F4E1} useCrudifyInstance - getStructurePublic: Starting");
     await ensureReady("getStructurePublic");
     try {
@@ -3759,7 +4341,7 @@ var useCrudifyInstance = () => {
       throw error;
     }
   }, [ensureReady]);
-  const readItems = (0, import_react15.useCallback)(async (moduleKey, filter, options) => {
+  const readItems = (0, import_react18.useCallback)(async (moduleKey, filter, options) => {
     await ensureReady("readItems");
     await ensureTokenSync();
     if (moduleKey === "__test_connection__") {
@@ -3774,7 +4356,7 @@ var useCrudifyInstance = () => {
       throw error;
     }
   }, [ensureReady, ensureTokenSync]);
-  const readItem = (0, import_react15.useCallback)(async (moduleKey, filter, options) => {
+  const readItem = (0, import_react18.useCallback)(async (moduleKey, filter, options) => {
     await ensureReady("readItem");
     try {
       const response = await import_crudify_browser7.default.readItem(moduleKey, filter, options);
@@ -3784,7 +4366,7 @@ var useCrudifyInstance = () => {
       throw error;
     }
   }, [ensureReady]);
-  const createItem = (0, import_react15.useCallback)(async (moduleKey, data, options) => {
+  const createItem = (0, import_react18.useCallback)(async (moduleKey, data, options) => {
     await ensureReady("createItem");
     try {
       const response = await import_crudify_browser7.default.createItem(moduleKey, data, options);
@@ -3794,7 +4376,7 @@ var useCrudifyInstance = () => {
       throw error;
     }
   }, [ensureReady]);
-  const updateItem = (0, import_react15.useCallback)(async (moduleKey, data, options) => {
+  const updateItem = (0, import_react18.useCallback)(async (moduleKey, data, options) => {
     await ensureReady("updateItem");
     try {
       const response = await import_crudify_browser7.default.updateItem(moduleKey, data, options);
@@ -3804,7 +4386,7 @@ var useCrudifyInstance = () => {
       throw error;
     }
   }, [ensureReady]);
-  const deleteItem = (0, import_react15.useCallback)(async (moduleKey, id, options) => {
+  const deleteItem = (0, import_react18.useCallback)(async (moduleKey, id, options) => {
     await ensureReady("deleteItem");
     try {
       const response = await import_crudify_browser7.default.deleteItem(moduleKey, id, options);
@@ -3814,7 +4396,7 @@ var useCrudifyInstance = () => {
       throw error;
     }
   }, [ensureReady]);
-  const transaction = (0, import_react15.useCallback)(async (operations, options) => {
+  const transaction = (0, import_react18.useCallback)(async (operations, options) => {
     await ensureReady("transaction");
     try {
       const response = await import_crudify_browser7.default.transaction(operations, options);
@@ -3824,7 +4406,7 @@ var useCrudifyInstance = () => {
       throw error;
     }
   }, [ensureReady]);
-  const login = (0, import_react15.useCallback)(async (email, password) => {
+  const login = (0, import_react18.useCallback)(async (email, password) => {
     await ensureReady("login");
     try {
       const response = await import_crudify_browser7.default.login(email, password);
@@ -4265,9 +4847,9 @@ var SessionManager = class _SessionManager {
 };
 
 // src/hooks/useSession.ts
-var import_react16 = require("react");
+var import_react19 = require("react");
 function useSession(options = {}) {
-  const [state, setState] = (0, import_react16.useState)({
+  const [state, setState] = (0, import_react19.useState)({
     isAuthenticated: false,
     isLoading: true,
     isInitialized: false,
@@ -4275,7 +4857,7 @@ function useSession(options = {}) {
     error: null
   });
   const sessionManager = SessionManager.getInstance();
-  const initialize = (0, import_react16.useCallback)(async () => {
+  const initialize = (0, import_react19.useCallback)(async () => {
     try {
       setState((prev) => ({ ...prev, isLoading: true, error: null }));
       const config = {
@@ -4341,7 +4923,7 @@ function useSession(options = {}) {
       }));
     }
   }, [options.autoRestore, options.enableLogging, options.onSessionExpired, options.onSessionRestored]);
-  const login = (0, import_react16.useCallback)(async (email, password) => {
+  const login = (0, import_react19.useCallback)(async (email, password) => {
     setState((prev) => ({ ...prev, isLoading: true, error: null }));
     try {
       const result = await sessionManager.login(email, password);
@@ -4378,7 +4960,7 @@ function useSession(options = {}) {
       };
     }
   }, [sessionManager]);
-  const logout = (0, import_react16.useCallback)(async () => {
+  const logout = (0, import_react19.useCallback)(async () => {
     setState((prev) => ({ ...prev, isLoading: true }));
     try {
       await sessionManager.logout();
@@ -4399,7 +4981,7 @@ function useSession(options = {}) {
       }));
     }
   }, [sessionManager]);
-  const refreshTokens = (0, import_react16.useCallback)(async () => {
+  const refreshTokens = (0, import_react19.useCallback)(async () => {
     try {
       const success = await sessionManager.refreshTokens();
       if (success) {
@@ -4433,13 +5015,13 @@ function useSession(options = {}) {
       return false;
     }
   }, [sessionManager]);
-  const clearError = (0, import_react16.useCallback)(() => {
+  const clearError = (0, import_react19.useCallback)(() => {
     setState((prev) => ({ ...prev, error: null }));
   }, []);
-  const getTokenInfo = (0, import_react16.useCallback)(() => {
+  const getTokenInfo = (0, import_react19.useCallback)(() => {
     return sessionManager.getTokenInfo();
   }, [sessionManager]);
-  (0, import_react16.useEffect)(() => {
+  (0, import_react19.useEffect)(() => {
     initialize();
   }, [initialize]);
   return {
@@ -4460,13 +5042,13 @@ function useSession(options = {}) {
 }
 
 // src/providers/SessionProvider.tsx
-var import_react17 = require("react");
+var import_react20 = require("react");
 init_jwtUtils();
-var import_jsx_runtime12 = require("react/jsx-runtime");
-var SessionContext = (0, import_react17.createContext)(void 0);
+var import_jsx_runtime15 = require("react/jsx-runtime");
+var SessionContext = (0, import_react20.createContext)(void 0);
 function SessionProvider({ children, options = {} }) {
   const sessionHook = useSession(options);
-  const sessionData = (0, import_react17.useMemo)(() => {
+  const sessionData = (0, import_react20.useMemo)(() => {
     if (!sessionHook.tokens?.accessToken || !sessionHook.isAuthenticated) {
       return null;
     }
@@ -4494,10 +5076,10 @@ function SessionProvider({ children, options = {} }) {
     ...sessionHook,
     sessionData
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(SessionContext.Provider, { value: contextValue, children });
+  return /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(SessionContext.Provider, { value: contextValue, children });
 }
 function useSessionContext() {
-  const context = (0, import_react17.useContext)(SessionContext);
+  const context = (0, import_react20.useContext)(SessionContext);
   if (context === void 0) {
     throw new Error("useSessionContext must be used within a SessionProvider");
   }
@@ -4505,28 +5087,28 @@ function useSessionContext() {
 }
 function ProtectedRoute({
   children,
-  fallback = /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { children: "Please log in to access this content" }),
+  fallback = /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { children: "Please log in to access this content" }),
   redirectTo
 }) {
   const { isAuthenticated, isLoading, isInitialized } = useSessionContext();
   if (!isInitialized || isLoading) {
-    return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { children: "Loading..." });
+    return /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { children: "Loading..." });
   }
   if (!isAuthenticated) {
     if (redirectTo) {
       redirectTo();
       return null;
     }
-    return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_jsx_runtime12.Fragment, { children: fallback });
+    return /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_jsx_runtime15.Fragment, { children: fallback });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_jsx_runtime12.Fragment, { children });
+  return /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_jsx_runtime15.Fragment, { children });
 }
 function SessionDebugInfo() {
   const session = useSessionContext();
   if (!session.isInitialized) {
-    return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { children: "Session not initialized" });
+    return /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { children: "Session not initialized" });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { style: {
+  return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { style: {
     padding: "10px",
     margin: "10px",
     border: "1px solid #ccc",
@@ -4534,49 +5116,49 @@ function SessionDebugInfo() {
     fontSize: "12px",
     fontFamily: "monospace"
   }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("h4", { children: "Session Debug Info" }),
-    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("strong", { children: "Authenticated:" }),
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("h4", { children: "Session Debug Info" }),
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("strong", { children: "Authenticated:" }),
       " ",
       session.isAuthenticated ? "Yes" : "No"
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("strong", { children: "Loading:" }),
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("strong", { children: "Loading:" }),
       " ",
       session.isLoading ? "Yes" : "No"
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("strong", { children: "Error:" }),
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("strong", { children: "Error:" }),
       " ",
       session.error || "None"
     ] }),
-    session.tokens && /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_jsx_runtime12.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("strong", { children: "Access Token:" }),
+    session.tokens && /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)(import_jsx_runtime15.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("strong", { children: "Access Token:" }),
         " ",
         session.tokens.accessToken.substring(0, 20),
         "..."
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("strong", { children: "Refresh Token:" }),
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("strong", { children: "Refresh Token:" }),
         " ",
         session.tokens.refreshToken.substring(0, 20),
         "..."
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("strong", { children: "Access Expires In:" }),
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("strong", { children: "Access Expires In:" }),
         " ",
         Math.round(session.expiresIn / 1e3 / 60),
         " minutes"
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("strong", { children: "Refresh Expires In:" }),
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("strong", { children: "Refresh Expires In:" }),
         " ",
         Math.round(session.refreshExpiresIn / 1e3 / 60 / 60),
         " hours"
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("strong", { children: "Expiring Soon:" }),
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("strong", { children: "Expiring Soon:" }),
         " ",
         session.isExpiringSoon ? "Yes" : "No"
       ] })
@@ -4585,13 +5167,13 @@ function SessionDebugInfo() {
 }
 
 // src/components/LoginComponent.tsx
-var import_react18 = require("react");
-var import_material8 = require("@mui/material");
-var import_jsx_runtime13 = require("react/jsx-runtime");
+var import_react21 = require("react");
+var import_material11 = require("@mui/material");
+var import_jsx_runtime16 = require("react/jsx-runtime");
 function LoginComponent() {
-  const [email, setEmail] = (0, import_react18.useState)("");
-  const [password, setPassword] = (0, import_react18.useState)("");
-  const [showForm, setShowForm] = (0, import_react18.useState)(false);
+  const [email, setEmail] = (0, import_react21.useState)("");
+  const [password, setPassword] = (0, import_react21.useState)("");
+  const [showForm, setShowForm] = (0, import_react21.useState)(false);
   const {
     isAuthenticated,
     isLoading,
@@ -4622,31 +5204,31 @@ function LoginComponent() {
     await refreshTokens();
   };
   if (isAuthenticated) {
-    return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material8.Box, { sx: { maxWidth: 600, mx: "auto", p: 3 }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Typography, { variant: "h4", gutterBottom: true, children: "Welcome! \u{1F389}" }),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Alert, { severity: "success", sx: { mb: 3 }, children: "You are successfully logged in with Refresh Token Pattern enabled" }),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material8.Box, { sx: { mb: 3, p: 2, bgcolor: "background.paper", border: 1, borderColor: "divider", borderRadius: 1 }, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Typography, { variant: "h6", gutterBottom: true, children: "Token Status" }),
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material8.Typography, { variant: "body2", color: "text.secondary", children: [
+    return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(import_material11.Box, { sx: { maxWidth: 600, mx: "auto", p: 3 }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Typography, { variant: "h4", gutterBottom: true, children: "Welcome! \u{1F389}" }),
+      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Alert, { severity: "success", sx: { mb: 3 }, children: "You are successfully logged in with Refresh Token Pattern enabled" }),
+      /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(import_material11.Box, { sx: { mb: 3, p: 2, bgcolor: "background.paper", border: 1, borderColor: "divider", borderRadius: 1 }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Typography, { variant: "h6", gutterBottom: true, children: "Token Status" }),
+        /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(import_material11.Typography, { variant: "body2", color: "text.secondary", children: [
           "Access Token expires in: ",
           Math.round(expiresIn / 1e3 / 60),
           " minutes"
         ] }),
-        isExpiringSoon && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Alert, { severity: "warning", sx: { mt: 1 }, children: "Token expires soon - automatic refresh will happen" })
+        isExpiringSoon && /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Alert, { severity: "warning", sx: { mt: 1 }, children: "Token expires soon - automatic refresh will happen" })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material8.Box, { sx: { display: "flex", gap: 2, flexWrap: "wrap" }, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-          import_material8.Button,
+      /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(import_material11.Box, { sx: { display: "flex", gap: 2, flexWrap: "wrap" }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+          import_material11.Button,
           {
             variant: "contained",
             onClick: handleRefreshTokens,
             disabled: isLoading,
-            startIcon: isLoading ? /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.CircularProgress, { size: 16 }) : null,
+            startIcon: isLoading ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.CircularProgress, { size: 16 }) : null,
             children: "Refresh Tokens"
           }
         ),
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-          import_material8.Button,
+        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+          import_material11.Button,
           {
             variant: "outlined",
             color: "error",
@@ -4656,14 +5238,14 @@ function LoginComponent() {
           }
         )
       ] }),
-      error && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Alert, { severity: "error", sx: { mt: 2 }, onClose: clearError, children: error })
+      error && /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Alert, { severity: "error", sx: { mt: 2 }, onClose: clearError, children: error })
     ] });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material8.Box, { sx: { maxWidth: 400, mx: "auto", p: 3 }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Typography, { variant: "h4", gutterBottom: true, align: "center", children: "Login with Refresh Tokens" }),
-    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Alert, { severity: "info", sx: { mb: 3 }, children: "This demo shows the new Refresh Token Pattern with automatic session management" }),
-    !showForm ? /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-      import_material8.Button,
+  return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(import_material11.Box, { sx: { maxWidth: 400, mx: "auto", p: 3 }, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Typography, { variant: "h4", gutterBottom: true, align: "center", children: "Login with Refresh Tokens" }),
+    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Alert, { severity: "info", sx: { mb: 3 }, children: "This demo shows the new Refresh Token Pattern with automatic session management" }),
+    !showForm ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+      import_material11.Button,
       {
         fullWidth: true,
         variant: "contained",
@@ -4672,9 +5254,9 @@ function LoginComponent() {
         sx: { mt: 2 },
         children: "Show Login Form"
       }
-    ) : /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("form", { onSubmit: handleLogin, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-        import_material8.TextField,
+    ) : /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("form", { onSubmit: handleLogin, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+        import_material11.TextField,
         {
           fullWidth: true,
           label: "Email",
@@ -4686,8 +5268,8 @@ function LoginComponent() {
           autoComplete: "email"
         }
       ),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-        import_material8.TextField,
+      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+        import_material11.TextField,
         {
           fullWidth: true,
           label: "Password",
@@ -4699,37 +5281,37 @@ function LoginComponent() {
           autoComplete: "current-password"
         }
       ),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-        import_material8.Button,
+      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+        import_material11.Button,
         {
           type: "submit",
           fullWidth: true,
           variant: "contained",
           size: "large",
           disabled: isLoading,
-          startIcon: isLoading ? /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.CircularProgress, { size: 16 }) : null,
+          startIcon: isLoading ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.CircularProgress, { size: 16 }) : null,
           sx: { mt: 3, mb: 2 },
           children: isLoading ? "Logging in..." : "Login"
         }
       )
     ] }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Alert, { severity: "error", sx: { mt: 2 }, onClose: clearError, children: error })
+    error && /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Alert, { severity: "error", sx: { mt: 2 }, onClose: clearError, children: error })
   ] });
 }
 function SessionStatus() {
   const { isAuthenticated, isLoading, isExpiringSoon, expiresIn } = useSessionContext();
   if (isLoading) {
-    return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material8.Box, { sx: { display: "flex", alignItems: "center", gap: 1 }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.CircularProgress, { size: 16 }),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Typography, { variant: "caption", children: "Loading session..." })
+    return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(import_material11.Box, { sx: { display: "flex", alignItems: "center", gap: 1 }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.CircularProgress, { size: 16 }),
+      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Typography, { variant: "caption", children: "Loading session..." })
     ] });
   }
   if (!isAuthenticated) {
-    return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Typography, { variant: "caption", color: "text.secondary", children: "Not logged in" });
+    return /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Typography, { variant: "caption", color: "text.secondary", children: "Not logged in" });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material8.Box, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material8.Typography, { variant: "caption", color: "success.main", children: "\u2713 Authenticated" }),
-    isExpiringSoon && /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material8.Typography, { variant: "caption", color: "warning.main", display: "block", children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(import_material11.Box, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_material11.Typography, { variant: "caption", color: "success.main", children: "\u2713 Authenticated" }),
+    isExpiringSoon && /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(import_material11.Typography, { variant: "caption", color: "warning.main", display: "block", children: [
       "\u26A0 Token expires in ",
       Math.round(expiresIn / 1e3 / 60),
       " min"
@@ -4738,29 +5320,29 @@ function SessionStatus() {
 }
 
 // src/hooks/useUserData.ts
-var import_react19 = require("react");
+var import_react22 = require("react");
 var import_crudify_browser9 = __toESM(require("@nocios/crudify-browser"));
 var useUserData = (options = {}) => {
   const { autoFetch = true, retryOnError = false, maxRetries = 3 } = options;
   const { isAuthenticated, isInitialized, sessionData, tokens } = useSessionContext();
-  const [userData, setUserData] = (0, import_react19.useState)(null);
-  const [loading, setLoading] = (0, import_react19.useState)(false);
-  const [error, setError] = (0, import_react19.useState)(null);
-  const abortControllerRef = (0, import_react19.useRef)(null);
-  const mountedRef = (0, import_react19.useRef)(true);
-  const requestIdRef = (0, import_react19.useRef)(0);
-  const retryCountRef = (0, import_react19.useRef)(0);
-  const getUserEmail = (0, import_react19.useCallback)(() => {
+  const [userData, setUserData] = (0, import_react22.useState)(null);
+  const [loading, setLoading] = (0, import_react22.useState)(false);
+  const [error, setError] = (0, import_react22.useState)(null);
+  const abortControllerRef = (0, import_react22.useRef)(null);
+  const mountedRef = (0, import_react22.useRef)(true);
+  const requestIdRef = (0, import_react22.useRef)(0);
+  const retryCountRef = (0, import_react22.useRef)(0);
+  const getUserEmail = (0, import_react22.useCallback)(() => {
     if (!sessionData) return null;
     return sessionData.email || sessionData["cognito:username"] || null;
   }, [sessionData]);
-  const clearProfile = (0, import_react19.useCallback)(() => {
+  const clearProfile = (0, import_react22.useCallback)(() => {
     setUserData(null);
     setError(null);
     setLoading(false);
     retryCountRef.current = 0;
   }, []);
-  const refreshProfile = (0, import_react19.useCallback)(async () => {
+  const refreshProfile = (0, import_react22.useCallback)(async () => {
     const userEmail = getUserEmail();
     console.log("\u{1F464} useUserData - Refreshing profile for:", userEmail);
     if (!userEmail) {
@@ -4892,14 +5474,14 @@ var useUserData = (options = {}) => {
       }
     }
   }, [isInitialized, getUserEmail, retryOnError, maxRetries]);
-  (0, import_react19.useEffect)(() => {
+  (0, import_react22.useEffect)(() => {
     if (autoFetch && isAuthenticated && isInitialized) {
       refreshProfile();
     } else if (!isAuthenticated) {
       clearProfile();
     }
   }, [autoFetch, isAuthenticated, isInitialized, refreshProfile, clearProfile]);
-  (0, import_react19.useEffect)(() => {
+  (0, import_react22.useEffect)(() => {
     mountedRef.current = true;
     return () => {
       mountedRef.current = false;
@@ -4925,7 +5507,7 @@ var useUserData = (options = {}) => {
 };
 
 // src/hooks/useAuth.ts
-var import_react20 = require("react");
+var import_react23 = require("react");
 var useAuth = () => {
   const {
     isAuthenticated,
@@ -4943,7 +5525,7 @@ var useAuth = () => {
     expiresIn,
     refreshExpiresIn
   } = useSessionContext();
-  const setToken = (0, import_react20.useCallback)((token) => {
+  const setToken = (0, import_react23.useCallback)((token) => {
     if (token) {
       console.warn("useAuth.setToken() is deprecated. Use login() method instead for better security.");
     } else {
@@ -4978,7 +5560,7 @@ var useAuth = () => {
 };
 
 // src/hooks/useData.ts
-var import_react21 = require("react");
+var import_react24 = require("react");
 var import_crudify_browser10 = __toESM(require("@nocios/crudify-browser"));
 var useData = () => {
   const {
@@ -4988,10 +5570,10 @@ var useData = () => {
     isAuthenticated,
     login: sessionLogin
   } = useSessionContext();
-  const isReady = (0, import_react21.useCallback)(() => {
+  const isReady = (0, import_react24.useCallback)(() => {
     return isInitialized && !isLoading && !error;
   }, [isInitialized, isLoading, error]);
-  const waitForReady = (0, import_react21.useCallback)(async () => {
+  const waitForReady = (0, import_react24.useCallback)(async () => {
     return new Promise((resolve, reject) => {
       const checkReady = () => {
         if (isReady()) {
@@ -5005,36 +5587,36 @@ var useData = () => {
       checkReady();
     });
   }, [isReady, error]);
-  const ensureReady = (0, import_react21.useCallback)(async () => {
+  const ensureReady = (0, import_react24.useCallback)(async () => {
     if (!isReady()) {
       throw new Error("System not ready. Check isInitialized, isLoading, and error states.");
     }
   }, [isReady]);
-  const readItems = (0, import_react21.useCallback)(async (moduleKey, filter, options) => {
+  const readItems = (0, import_react24.useCallback)(async (moduleKey, filter, options) => {
     await ensureReady();
     return await import_crudify_browser10.default.readItems(moduleKey, filter || {}, options);
   }, [ensureReady]);
-  const readItem = (0, import_react21.useCallback)(async (moduleKey, filter, options) => {
+  const readItem = (0, import_react24.useCallback)(async (moduleKey, filter, options) => {
     await ensureReady();
     return await import_crudify_browser10.default.readItem(moduleKey, filter, options);
   }, [ensureReady]);
-  const createItem = (0, import_react21.useCallback)(async (moduleKey, data, options) => {
+  const createItem = (0, import_react24.useCallback)(async (moduleKey, data, options) => {
     await ensureReady();
     return await import_crudify_browser10.default.createItem(moduleKey, data, options);
   }, [ensureReady]);
-  const updateItem = (0, import_react21.useCallback)(async (moduleKey, data, options) => {
+  const updateItem = (0, import_react24.useCallback)(async (moduleKey, data, options) => {
     await ensureReady();
     return await import_crudify_browser10.default.updateItem(moduleKey, data, options);
   }, [ensureReady]);
-  const deleteItem = (0, import_react21.useCallback)(async (moduleKey, id, options) => {
+  const deleteItem = (0, import_react24.useCallback)(async (moduleKey, id, options) => {
     await ensureReady();
     return await import_crudify_browser10.default.deleteItem(moduleKey, id, options);
   }, [ensureReady]);
-  const transaction = (0, import_react21.useCallback)(async (operations, options) => {
+  const transaction = (0, import_react24.useCallback)(async (operations, options) => {
     await ensureReady();
     return await import_crudify_browser10.default.transaction(operations, options);
   }, [ensureReady]);
-  const login = (0, import_react21.useCallback)(async (email, password) => {
+  const login = (0, import_react24.useCallback)(async (email, password) => {
     try {
       const result = await sessionLogin(email, password);
       if (result.success) {
@@ -5081,6 +5663,9 @@ var useData = () => {
   ERROR_CODES,
   ERROR_SEVERITY_MAP,
   LoginComponent,
+  POLICY_ACTIONS,
+  PREFERRED_POLICY_ORDER,
+  Policies,
   ProtectedRoute,
   SessionDebugInfo,
   SessionManager,