@northern.tech/store 0.3.4 → 0.4.0

package/dist/store.cjs

@@ -32,6 +32,7 @@ var store_exports = {};
 __export(store_exports, {
   commonErrorFallback: () => commonErrorFallback,
   commonErrorHandler: () => commonErrorHandler,
+  createAppAsyncThunk: () => createAppAsyncThunk,
   getConfiguredStore: () => getConfiguredStore,
   sessionReducer: () => sessionReducer,
   store: () => store,
@@ -41,362 +42,16 @@ module.exports = __toCommonJS(store_exports);
 var import_react_redux = require("react-redux");
 var import_helpers2 = require("@northern.tech/utils/helpers");
 var import_toolkit9 = require("@reduxjs/toolkit");
+var import_react = require("@sentry/react");
 
-// src/appSlice/constants.ts
-var import_icons_material = require("@mui/icons-material");
-var startingDeviceCount = {
-  os: "for first 50 devices",
-  professional: "for first 250 devices"
-};
-var apiRoot = "/api/management";
-var apiUrl = {
-  v1: `${apiRoot}/v1`,
-  v2: `${apiRoot}/v2`
-};
-var chartTypes = {
-  bar: { key: "bar", Icon: import_icons_material.BarChart },
-  pie: { key: "pie", Icon: import_icons_material.PieChartOutline }
-};
-var emptyChartSelection = { software: "", group: "", chartType: chartTypes.bar.key, attribute: "artifact_name" };
-var defaultReportType = "distribution";
-var defaultReports = [{ ...emptyChartSelection, group: null, attribute: "artifact_name", type: defaultReportType }];
-var PLANS = {
-  os: {
-    id: "os",
-    name: "Basic",
-    offer: true,
-    price: "$32 / month",
-    deviceCount: startingDeviceCount.os,
-    offerprice: "$23 / month for first 50 devices",
-    price2: "for first 6 months;\n$29/month thereafter",
-    features: ["Access to core features of Mender", "Basic support"]
-  },
-  professional: {
-    id: "professional",
-    name: "Professional",
-    offer: true,
-    price: "$269 / month",
-    deviceCount: startingDeviceCount.professional,
-    offerprice: "$200 / month for first 50 devices",
-    price2: "for first 6 months;\n$249/month thereafter",
-    features: ["Advanced OTA features", "Higher priority support"]
-  },
-  enterprise: {
-    id: "enterprise",
-    name: "Enterprise",
-    price: "Custom pricing",
-    deviceCount: "Unlimited devices",
-    features: ["All Mender features", "Advanced security features", "SLA-backed support"]
-  }
-};
-var ADDONS = {
-  configure: {
-    id: "configure",
-    title: "Configure",
-    description: "Expand your plan with device configuration features",
-    needs: ["hasDeviceConfig"],
-    os: {
-      price: "$11/month",
-      deviceCount: startingDeviceCount.os
-    },
-    professional: {
-      price: "$65/month",
-      deviceCount: startingDeviceCount.professional
-    },
-    eligible: ["os", "professional", "enterprise"]
-  },
-  troubleshoot: {
-    id: "troubleshoot",
-    title: "Troubleshoot",
-    description: "Expand your plan with device troubleshooting features",
-    needs: ["hasDeviceConnect"],
-    os: {
-      price: "$27/month",
-      deviceCount: startingDeviceCount.os
-    },
-    professional: {
-      price: "$72/month",
-      deviceCount: startingDeviceCount.professional
-    },
-    eligible: ["os", "professional", "enterprise"]
-  },
-  monitor: {
-    id: "monitor",
-    title: "Monitor",
-    description: "Expand your plan with device monitoring features",
-    needs: ["hasMonitor"],
-    os: {
-      price: "-",
-      deviceCount: "-"
-    },
-    professional: {
-      price: "$86/month",
-      deviceCount: startingDeviceCount.professional
-    },
-    eligible: ["professional", "enterprise"]
-  }
-};
-var BENEFITS = {
-  auditlog: { id: "auditlog", benefit: "trace change across your devices and access troubleshooting session replay", requiredPlan: PLANS.professional.id },
-  dashboard: { id: "dashboard", benefit: "actionable insights into the devices you are updating with Mender", requiredPlan: PLANS.enterprise.id },
-  deltaGeneration: {
-    id: "deltaGeneration",
-    benefit: "automatic delta artifacts generation to minimize data transfer and improve the update delivery",
-    requiredPlan: PLANS.enterprise.id
-  },
-  deviceConfiguration: { id: "deviceConfiguration", benefit: "device configuration features", requiredAddon: ADDONS.configure.id },
-  deviceMonitor: { id: "deviceMonitor", benefit: "device monitoring features", requiredAddon: ADDONS.monitor.id, requiredPlan: PLANS.professional.id },
-  deviceTroubleshoot: { id: "deviceTroubleshoot", benefit: "device troubleshooting features", requiredAddon: ADDONS.troubleshoot.id },
-  dynamicGroups: { id: "dynamicGroups", benefit: "create dynamic groups to ease device management", requiredPlan: PLANS.enterprise.id },
-  fullFiltering: { id: "fullFiltering", benefit: "filtering by multiple attributes to improve the device overview", requiredPlan: PLANS.professional.id },
-  gateway: { id: "gateway", benefit: "see devices connected to your gateway device for easy access", requiredPlans: PLANS.professional.id },
-  pausedDeployments: {
-    id: "pausedDeployments",
-    benefit: "granular control about update rollout to allow synchronization across your fleet",
-    requiredPlan: PLANS.enterprise.id
-  },
-  phasedDeployments: { id: "phasedDeployments", benefit: "choose to roll out deployments in multiple phases", requiredPlan: PLANS.enterprise.id },
-  rbac: { id: "rbac", benefit: "granular role based access control", requiredPlan: PLANS.enterprise.id },
-  retryDeployments: { id: "retryDeployments", benefit: "optional retries for failed rollout attempts", requiredPlan: PLANS.professional.id },
-  scheduledDeployments: {
-    id: "scheduledDeployments",
-    benefit: "scheduled deployments to steer the distribution of your updates.",
-    requiredPlan: PLANS.professional.id
-  },
-  webhookEvents: {
-    id: "webhookEvents",
-    benefit: "receive inventory events and select which type(s) of events the webhook will receive",
-    requiredPlan: PLANS.professional.id
-  },
-  default: { id: "default", benefit: "gain access to this feature", requiredPlan: PLANS.enterprise.id }
-};
+// src/appSlice/index.ts
+var import_toolkit = require("@reduxjs/toolkit");
 
-// src/commonConstants.tsx
-var import_js = require("@mdi/js");
-var import_jsx_runtime = require("react/jsx-runtime");
-var DEVICE_LIST_DEFAULTS = {
-  page: 1,
-  perPage: 20
-};
-var timeUnits = {
-  days: "days",
-  minutes: "minutes",
-  hours: "hours"
-};
-var ALL_DEVICES = "All devices";
-var DEVICE_FILTERING_OPTIONS = {
-  $eq: { key: "$eq", title: "equals", shortform: "=" },
-  $ne: { key: "$ne", title: "not equal", shortform: "!=" },
-  $gt: {
-    key: "$gt",
-    title: ">",
-    shortform: ">",
-    help: 'The "greater than" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $gte: {
-    title: ">=",
-    shortform: ">=",
-    help: 'The "greater than or equal" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $lt: {
-    key: "$lt",
-    title: "<",
-    shortform: "<",
-    help: 'The "lesser than" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $lte: {
-    title: "<=",
-    shortform: "<=",
-    help: 'The "lesser than or equal" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $ltne: {
-    key: "$ltne",
-    title: "$ltne",
-    shortform: "ltne",
-    help: 'The "lesser than or does not exist" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $in: {
-    key: "$in",
-    title: "in",
-    shortform: "in",
-    help: 'The "in" operator accepts a list of comma-separated values. It matches if the selected field is equal to one of the specified values.'
-  },
-  $nin: {
-    key: "$nin",
-    title: "not in",
-    shortform: "not in",
-    help: `The "not in" operator accepts a list of comma-separated values. It matches if the selected field's value is not equal to any of the specified options.`
-  },
-  $exists: {
-    key: "$exists",
-    title: "exists",
-    shortform: "exists",
-    value: true,
-    help: `The "exists" operator matches if the selected field's value has a value. No value needs to be provided for this operator.`
-  },
-  $nexists: {
-    key: "$nexists",
-    title: `doesn't exist`,
-    shortform: `doesn't exist`,
-    value: true,
-    help: `The "doesn't exist" operator matches if the selected field's value has no value. No value needs to be provided for this operator.`
-  },
-  $regex: {
-    key: "$regex",
-    title: `matches regular expression`,
-    shortform: `matches`,
-    help: `The "regular expression" operator matches the selected field's value with a Perl compatible regular expression (PCRE), automatically anchored by ^. If the regular expression is not valid, the filter will produce no results. If you need to specify options and flags, you can provide the full regex in the format of /regex/flags, for example.`
-  }
-};
-var DEVICE_ISSUE_OPTIONS = {
-  issues: {
-    isCategory: true,
-    key: "issues",
-    title: "Devices with issues",
-    filterRule: {}
-  },
-  offline: {
-    issueCategory: "issues",
-    key: "offline",
-    needsFullFiltering: true,
-    needsMonitor: false,
-    needsReporting: false,
-    filterRule: {
-      scope: "system",
-      key: "check_in_time",
-      operator: DEVICE_FILTERING_OPTIONS.$ltne.key,
-      value: ({ offlineThreshold }) => offlineThreshold
-    },
-    title: "Offline devices"
-  },
-  failedLastUpdate: {
-    issueCategory: "issues",
-    key: "failedLastUpdate",
-    needsFullFiltering: false,
-    needsMonitor: false,
-    needsReporting: true,
-    filterRule: { scope: "monitor", key: "failed_last_update", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: true },
-    title: "Deployment failed"
-  },
-  monitoring: {
-    issueCategory: "issues",
-    key: "monitoring",
-    needsFullFiltering: false,
-    needsMonitor: true,
-    needsReporting: false,
-    filterRule: { scope: "monitor", key: "alerts", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: true },
-    title: "Monitoring alert"
-  },
-  authRequests: {
-    key: "authRequests",
-    needsFullFiltering: false,
-    needsMonitor: false,
-    needsReporting: true,
-    filterRule: { scope: "monitor", key: "auth_requests", operator: DEVICE_FILTERING_OPTIONS.$gt.key, value: 1 },
-    title: "Devices with new authentication requests"
-  },
-  gatewayDevices: {
-    key: "gatewayDevices",
-    needsFullFiltering: false,
-    needsMonitor: false,
-    needsReporting: true,
-    filterRule: { scope: "inventory", key: "mender_is_gateway", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: "true" },
-    title: "Gateway devices"
-  }
-};
-var oneSecond = 1e3;
-var TIMEOUTS = {
-  debounceDefault: 700,
-  debounceShort: 300,
-  halfASecond: 0.5 * oneSecond,
-  oneSecond,
-  twoSeconds: 2 * oneSecond,
-  threeSeconds: 3 * oneSecond,
-  fiveSeconds: 5 * oneSecond,
-  refreshDefault: 10 * oneSecond,
-  refreshLong: 60 * oneSecond
-};
-var SORTING_OPTIONS = {
-  asc: "asc",
-  desc: "desc"
-};
-var DEVICE_ONLINE_CUTOFF = { interval: 1, intervalName: timeUnits.days };
-var ATTRIBUTE_SCOPES = {
-  inventory: "inventory",
-  identity: "identity",
-  monitor: "monitor",
-  system: "system",
-  tags: "tags"
-};
-var defaultIdAttribute = Object.freeze({ attribute: "id", scope: ATTRIBUTE_SCOPES.identity });
-var credentialTypes = {
-  aws: "aws",
-  http: "http",
-  sas: "sas",
-  x509: "x509"
-};
-var EXTERNAL_PROVIDER = {
-  "iot-core": {
-    credentialsType: credentialTypes.aws,
-    icon: import_js.mdiAws,
-    title: "AWS IoT Core",
-    twinTitle: "Device Shadow",
-    provider: "iot-core",
-    enabled: true,
-    deviceTwin: true,
-    configHint: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_jsx_runtime.Fragment, { children: "For help finding your AWS IoT Core connection string, check the AWS IoT documentation." })
-  },
-  "iot-hub": {
-    credentialsType: credentialTypes.sas,
-    icon: import_js.mdiMicrosoftAzure,
-    title: "Azure IoT Hub",
-    twinTitle: "Device Twin",
-    provider: "iot-hub",
-    enabled: true,
-    deviceTwin: true,
-    configHint: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { children: [
-      "For help finding your Azure IoT Hub connection string, look under 'Shared access policies' in the Microsoft Azure UI as described",
-      " ",
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
-        "a",
-        {
-          href: "https://devblogs.microsoft.com/iotdev/understand-different-connection-strings-in-azure-iot-hub/#iothubconn",
-          target: "_blank",
-          rel: "noopener noreferrer",
-          children: "here"
-        }
-      ),
-      "."
-    ] })
-  },
-  webhook: {
-    credentialsType: credentialTypes.http,
-    deviceTwin: false,
-    // disable the webhook provider here, since it is treated different than other integrations, with a custom configuration & management view, etc.
-    enabled: false,
-    provider: "webhook"
-  }
-};
-var ALL_RELEASES = "All releases";
-var emptyUiPermissions = Object.freeze({
-  auditlog: [],
-  deployments: [],
-  groups: Object.freeze({}),
-  releases: Object.freeze({}),
-  tenantManagement: [],
-  userManagement: []
-});
-var emptyRole = Object.freeze({
-  name: void 0,
-  description: "",
-  permissions: [],
-  uiPermissions: Object.freeze({ ...emptyUiPermissions })
-});
+// src/constants.ts
+var import_constants2 = require("@northern.tech/utils/constants");
 
 // src/deploymentsSlice/constants.ts
 var alreadyInstalled = "already-installed";
-var deploymentsApiUrl = `${apiUrl.v1}/deployments`;
-var deploymentsApiUrlV2 = `${apiUrl.v2}/deployments`;
 var deploymentSubstates = {
   aborted: "aborted",
   alreadyInstalled,
@@ -469,9 +124,9 @@ var DEPLOYMENT_STATES = {
 var listDefaultsByState = {
   [DEPLOYMENT_STATES.inprogress]: { page: 1, perPage: 10 },
   [DEPLOYMENT_STATES.pending]: { page: 1, perPage: 10 },
-  [DEPLOYMENT_STATES.scheduled]: { ...DEVICE_LIST_DEFAULTS },
-  [DEPLOYMENT_STATES.finished]: { ...DEVICE_LIST_DEFAULTS },
-  sort: { direction: SORTING_OPTIONS.desc }
+  [DEPLOYMENT_STATES.scheduled]: { ...import_constants2.DEVICE_LIST_DEFAULTS },
+  [DEPLOYMENT_STATES.finished]: { ...import_constants2.DEVICE_LIST_DEFAULTS },
+  sort: { direction: import_constants2.SORTING_OPTIONS.desc }
 };
 var DEFAULT_PENDING_INPROGRESS_COUNT = 10;
 var DEPLOYMENT_ROUTES = {
@@ -528,34 +183,8 @@ var pauseMap = {
     followUp: installationSubstatesMap.reboot.pauseConfigurationIndicator
   }
 };
-var limitDefault = { min: 5, max: 100, default: 10 };
-
-// src/devicesSlice/constants.ts
-var emptyFilter = { key: null, value: "", operator: DEVICE_FILTERING_OPTIONS.$eq.key, scope: "inventory" };
-var deviceAuthV2 = `${apiUrl.v2}/devauth`;
-var deviceConnect = `${apiUrl.v1}/deviceconnect`;
-var inventoryApiUrl = `${apiUrl.v1}/inventory`;
-var inventoryApiUrlV2 = `${apiUrl.v2}/inventory`;
-var deviceConfig = `${apiUrl.v1}/deviceconfig/configurations/device`;
-var reportingApiUrl = `${apiUrl.v1}/reporting`;
-var iotManagerBaseURL = `${apiUrl.v1}/iot-manager`;
-var DEVICE_STATES = {
-  accepted: "accepted",
-  pending: "pending",
-  preauth: "preauthorized",
-  rejected: "rejected"
-};
-var geoAttributes = ["geo-lat", "geo-lon"].map((attribute) => ({ attribute, scope: "inventory" }));
-
-// src/monitorSlice/constants.ts
-var alertChannels = { email: "email" };
-var monitorApiUrlv1 = `${apiUrl.v1}/devicemonitor`;
 
 // src/organizationSlice/constants.ts
-var auditLogsApiUrl = `${apiUrl.v1}/auditlogs`;
-var tenantadmApiUrlv1 = `${apiUrl.v1}/tenantadm`;
-var tenantadmApiUrlv2 = `${apiUrl.v2}/tenantadm`;
-var ssoIdpApiUrlv1 = `${apiUrl.v1}/useradm/sso/idp/metadata`;
 var auditlogTypes = {
   artifact: { title: "Artifact", queryParameter: "object_type", value: "artifact" },
   deployment: { title: "Deployment", queryParameter: "object_deployment_name", value: "deployment" },
@@ -566,397 +195,13 @@ var auditlogTypes = {
 };
 var AUDIT_LOGS_TYPES = [auditlogTypes.artifact, auditlogTypes.deployment, auditlogTypes.device, auditlogTypes.user_access_token, auditlogTypes.user];
 var SP_AUDIT_LOGS_TYPES = [auditlogTypes.user, auditlogTypes.tenant];
-var emptyWebhook = {
-  description: "",
-  enabled: true,
-  credentials: {
-    type: EXTERNAL_PROVIDER.webhook.credentialsType,
-    [EXTERNAL_PROVIDER.webhook.credentialsType]: {
-      secret: "",
-      url: ""
-    }
-  }
-};
 var TENANT_LIST_DEFAULT = {
   page: 1,
   perPage: 20
 };
 
 // src/usersSlice/constants.ts
-var useradmApiUrlv1 = `${apiUrl.v1}/useradm`;
-var useradmApiUrlv2 = `${apiUrl.v2}/useradm`;
-var staticRolesByName = {
-  admin: "RBAC_ROLE_PERMIT_ALL",
-  readOnly: "RBAC_ROLE_OBSERVER",
-  ci: "RBAC_ROLE_CI",
-  deploymentsManager: "RBAC_ROLE_DEPLOYMENTS_MANAGER",
-  terminalAccess: "RBAC_ROLE_REMOTE_TERMINAL"
-};
-var PermissionTypes = {
-  Any: "any",
-  Get: "GET",
-  Post: "POST",
-  Put: "PUT",
-  Delete: "DELETE",
-  Patch: "PATCH",
-  DeviceGroup: "DEVICE_GROUP",
-  DeviceId: "DEVICE_ID"
-};
-var permissionSetIds = {
-  Basic: "Basic",
-  ConfigureDevices: "ConfigureDevices",
-  ConnectToDevices: "ConnectToDevices",
-  DeployToDevices: "DeployToDevices",
-  ManageDevices: "ManageDevices",
-  ManageReleases: "ManageReleases",
-  ManageTenants: "ManageTenants",
-  ManageUsers: "ManageUsers",
-  ReadAuditLogs: "ReadAuditLogs",
-  ReadDevices: "ReadDevices",
-  ReadReleases: "ReadReleases",
-  ReadTenants: "ReadTenants",
-  ReadUsers: "ReadUsers",
-  SuperUser: "SuperUser",
-  UploadArtifacts: "UploadArtifacts"
-};
-var uiPermissionsById = {
-  configure: {
-    explanations: { groups: `'Configure' allows the user to use mender-configure features and apply configurations.` },
-    permissionLevel: 2,
-    permissionSets: { groups: permissionSetIds.ConfigureDevices },
-    title: "Configure",
-    value: "configure",
-    verbs: [PermissionTypes.Get, PermissionTypes.Put, PermissionTypes.Post]
-  },
-  connect: {
-    explanations: { groups: `'Connect' allows the user to use mender-connect features and Troubleshoot add-ons.` },
-    permissionLevel: 2,
-    permissionSets: { groups: permissionSetIds.ConnectToDevices },
-    title: "Connect",
-    value: "connect",
-    verbs: [PermissionTypes.Get, PermissionTypes.Put]
-  },
-  deploy: {
-    explanations: { groups: `'Deploy' allows the user to deploy software or configuration updates to devices.` },
-    permissionLevel: 2,
-    permissionSets: { deployments: permissionSetIds.DeployToDevices, groups: permissionSetIds.DeployToDevices },
-    title: "Deploy",
-    value: "deploy",
-    verbs: [PermissionTypes.Post]
-  },
-  manage: {
-    explanations: {
-      groups: `'Manage' allows the user to edit device name, notes, and manage authentication status. For 'All devices' it also allows the user to edit and create device groups.`,
-      releases: `'Manage' allows the user to upload new artifacts, edit release descriptions and remove artifacts.`
-    },
-    permissionLevel: 2,
-    permissionSets: {
-      groups: permissionSetIds.ManageDevices,
-      releases: permissionSetIds.ManageReleases,
-      tenantManagement: permissionSetIds.ManageTenants,
-      userManagement: permissionSetIds.ManageUsers
-    },
-    title: "Manage",
-    value: "manage",
-    verbs: [PermissionTypes.Post, PermissionTypes.Put, PermissionTypes.Patch]
-  },
-  read: {
-    explanations: { groups: `'Read' allows the user to view devices.` },
-    permissionLevel: 1,
-    permissionSets: {
-      auditlog: permissionSetIds.ReadAuditLogs,
-      groups: permissionSetIds.ReadDevices,
-      releases: permissionSetIds.ReadReleases,
-      tenantManagement: permissionSetIds.ReadTenants,
-      userManagement: permissionSetIds.ReadUsers
-    },
-    title: "Read",
-    value: "read",
-    verbs: [PermissionTypes.Get, PermissionTypes.Post]
-  },
-  upload: {
-    explanations: { groups: `'Upload' allows the user to upload new Artifacts.` },
-    unscopedOnly: { releases: true },
-    permissionLevel: 1,
-    permissionSets: { releases: permissionSetIds.UploadArtifacts },
-    title: "Upload",
-    value: "upload",
-    verbs: [PermissionTypes.Post, PermissionTypes.Put, PermissionTypes.Patch]
-  }
-};
-var scopedPermissionAreas = {
-  groups: { key: "groups", excessiveAccessSelector: ALL_DEVICES, scopeType: "DeviceGroups" },
-  releases: { key: "releases", excessiveAccessSelector: ALL_RELEASES, scopeType: "Releases" }
-};
-var uiPermissionsByArea = {
-  auditlog: {
-    endpoints: [{ path: /\/(auditlog)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] }],
-    explanation: "Granting access to the audit log will allow tracing changes to devices, releases and user accounts, as well as providing information about deployments.",
-    key: "auditlog",
-    uiPermissions: [uiPermissionsById.read],
-    title: "System Audit Log"
-  },
-  deployments: {
-    endpoints: [
-      { path: /\/(deployments\/deployments)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.deploy] },
-      { path: /\/(deployments\/deployments)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
-      { path: /\/(deployments\/config)/i, types: [PermissionTypes.Get, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] }
-    ],
-    explanation: "Providing deploy permissions will allow deployments to be created using the releases and devices a user has access to.",
-    key: "deployments",
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.deploy],
-    title: "Deployments"
-  },
-  groups: {
-    endpoints: [
-      {
-        path: /\/(devauth|inventory|deviceconfig|devicemonitor|deviceconnect\/devices)/i,
-        types: [PermissionTypes.Get],
-        uiPermissions: [uiPermissionsById.read]
-      },
-      { path: /\/(devauth|inventory)/i, types: [PermissionTypes.Put, PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] },
-      { path: /\/(deviceconfig)/i, types: [PermissionTypes.Get, PermissionTypes.Put, PermissionTypes.Post], uiPermissions: [uiPermissionsById.configure] },
-      { path: /\/(deviceconnect\/devices)/i, types: [PermissionTypes.Get, PermissionTypes.Post], uiPermissions: [uiPermissionsById.connect] }
-    ],
-    explanation: "Device group management permissions control the degree to which devices in a group can be accessed and moved to other groups.",
-    key: "groups",
-    scope: scopedPermissionAreas.groups.scopeType,
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.deploy, uiPermissionsById.configure, uiPermissionsById.connect],
-    title: "Group Management"
-  },
-  releases: {
-    endpoints: [
-      { path: /\/(deployments\/artifacts|deployments\/deployments\/releases)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
-      {
-        path: /\/(deployments\/artifacts|deployments\/deployments\/releases)/i,
-        types: [PermissionTypes.Post, PermissionTypes.Put],
-        uiPermissions: [uiPermissionsById.read, uiPermissionsById.upload]
-      },
-      {
-        path: /\/(deployments\/artifacts|deployments\/deployments\/releases)/i,
-        types: [PermissionTypes.Delete],
-        uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage]
-      }
-    ],
-    explanation: "Release permissions can be granted to allow artifact & release modifications, as well as the creation of new releases.",
-    key: "releases",
-    scope: "ReleaseTags",
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.upload],
-    title: "Release Management"
-  },
-  tenantManagement: {
-    endpoints: [
-      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
-      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] },
-      { path: /\/(users\/exists)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.manage] }
-    ],
-    explanation: "Tenant management permissions allow listing, creating and modifying child tenants",
-    key: "tenantManagement",
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
-    title: "Tenant Management"
-  },
-  userManagement: {
-    endpoints: [
-      { path: /\/(useradm)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
-      { path: /\/(useradm)/i, types: [PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] }
-    ],
-    explanation: "User management permissions should be granted carefully, as these allow privilege increases for any users managed by a user with user management permissions",
-    key: "userManagement",
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
-    title: "User Management"
-  }
-};
-var permissionMapper = (permission) => permission.value;
-var rolesById = Object.freeze({
-  [staticRolesByName.admin]: {
-    name: "Admin",
-    value: staticRolesByName.admin,
-    description: "Full access",
-    permissions: [],
-    // permissions refers to the values returned from the backend
-    uiPermissions: {
-      ...emptyUiPermissions,
-      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
-      deployments: uiPermissionsByArea.deployments.uiPermissions.map(permissionMapper),
-      groups: { [ALL_DEVICES]: uiPermissionsByArea.groups.uiPermissions.map(permissionMapper) },
-      releases: { [ALL_RELEASES]: uiPermissionsByArea.releases.uiPermissions.map(permissionMapper) },
-      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper)
-    }
-  },
-  [staticRolesByName.readOnly]: {
-    name: "Read Access",
-    value: staticRolesByName.readOnly,
-    description: "",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      deployments: [uiPermissionsById.read.value],
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value] },
-      releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] },
-      userManagement: [uiPermissionsById.read.value]
-    }
-  },
-  [staticRolesByName.ci]: {
-    name: "Releases Manager",
-    value: staticRolesByName.ci,
-    description: "",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      releases: { [ALL_RELEASES]: uiPermissionsByArea.releases.uiPermissions.map(permissionMapper) }
-    }
-  },
-  [staticRolesByName.deploymentsManager]: {
-    name: "Deployments Manager",
-    value: staticRolesByName.deploymentsManager,
-    description: "",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      deployments: uiPermissionsByArea.deployments.uiPermissions.map(permissionMapper),
-      groups: { [ALL_DEVICES]: [uiPermissionsById.deploy.value, uiPermissionsById.read.value] },
-      releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
-    }
-  },
-  [staticRolesByName.terminalAccess]: {
-    name: "Troubleshooting",
-    value: staticRolesByName.terminalAccess,
-    description: "Access to the troubleshooting features: Remote Terminal, File Transfer, Port Forwarding",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      groups: { [ALL_DEVICES]: [uiPermissionsById.connect.value] }
-    }
-  }
-});
-var serviceProviderRolesById = {
-  admin: {
-    name: "Admin",
-    value: staticRolesByName.admin,
-    description: "Full access",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
-      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper),
-      tenantManagement: uiPermissionsByArea.tenantManagement.uiPermissions.map(permissionMapper)
-    }
-  },
-  readOnly: {
-    name: "Read access",
-    value: staticRolesByName.readOnly,
-    description: "This role can see all linked organizations but cannot make any changes",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      auditlog: [uiPermissionsById.read.value],
-      userManagement: [uiPermissionsById.read.value],
-      tenantManagement: [uiPermissionsById.read.value]
-    }
-  }
-};
-var defaultPermissionSets = {
-  [permissionSetIds.Basic]: {
-    name: permissionSetIds.Basic,
-    result: {
-      // this is needed to prevent the detailed permissions of the basic permission set from being interpreted as allowing read & management access to user endpoints
-      userManagement: [uiPermissionsById.read.value]
-    }
-  },
-  [permissionSetIds.SuperUser]: {
-    name: permissionSetIds.SuperUser,
-    result: {
-      ...rolesById[staticRolesByName.admin].uiPermissions
-    }
-  },
-  [permissionSetIds.ManageUsers]: {
-    name: permissionSetIds.ManageUsers,
-    result: {
-      userManagement: [uiPermissionsById.manage.value]
-    }
-  },
-  [permissionSetIds.ReadAuditLogs]: {
-    name: permissionSetIds.ReadAuditLogs,
-    result: {
-      auditlog: [uiPermissionsById.read.value]
-    }
-  },
-  [permissionSetIds.ReadReleases]: {
-    name: permissionSetIds.ReadReleases,
-    result: {
-      releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
-    }
-  },
-  [permissionSetIds.ReadTenants]: {
-    name: permissionSetIds.ReadTenants,
-    result: {
-      tenantManagement: [uiPermissionsById.read.value]
-    }
-  },
-  [permissionSetIds.ManageTenants]: {
-    name: permissionSetIds.ManageTenants,
-    result: {
-      tenantManagement: [uiPermissionsById.manage.value]
-    }
-  },
-  [permissionSetIds.ReadUsers]: {
-    name: permissionSetIds.ReadUsers,
-    result: {
-      userManagement: [uiPermissionsById.read.value]
-    }
-  },
-  [permissionSetIds.UploadArtifacts]: {
-    name: permissionSetIds.UploadArtifacts,
-    result: {
-      releases: { [ALL_RELEASES]: [uiPermissionsById.upload.value] }
-    }
-  },
-  [permissionSetIds.ManageReleases]: {
-    name: permissionSetIds.ManageReleases,
-    result: {
-      releases: { [ALL_RELEASES]: [uiPermissionsById.manage.value] }
-    }
-  },
-  [permissionSetIds.ConfigureDevices]: {
-    name: permissionSetIds.ConfigureDevices,
-    result: {
-      deployments: [uiPermissionsById.read.value, uiPermissionsById.deploy.value],
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value, uiPermissionsById.configure.value] }
-    }
-  },
-  [permissionSetIds.ConnectToDevices]: {
-    name: permissionSetIds.ConnectToDevices,
-    result: {
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value, uiPermissionsById.connect.value] }
-    }
-  },
-  [permissionSetIds.DeployToDevices]: {
-    name: permissionSetIds.DeployToDevices,
-    result: {
-      deployments: [uiPermissionsById.deploy.value, uiPermissionsById.manage.value, uiPermissionsById.read.value],
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value, uiPermissionsById.deploy.value] }
-    }
-  },
-  [permissionSetIds.ManageDevices]: {
-    name: permissionSetIds.ManageDevices,
-    result: {
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value, uiPermissionsById.manage.value] }
-    }
-  },
-  [permissionSetIds.ReadDevices]: {
-    name: permissionSetIds.ReadDevices,
-    result: {
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value] }
-    }
-  }
-};
 var USER_LOGOUT = "USER_LOGOUT";
-var rolesByName = {
-  ...staticRolesByName,
-  deploymentCreation: { action: "CREATE_DEPLOYMENT", object: { type: "DEVICE_GROUP", value: void 0 } },
-  groupAccess: { action: "VIEW_DEVICE", object: { type: "DEVICE_GROUP", value: void 0 } },
-  userManagement: { action: "http", object: { type: "any", value: `${useradmApiUrlv1}/.*` } }
-};
 var settingsKeys = { initialized: "settings-initialized" };
 var READ_STATES = {
   read: "read",
@@ -965,7 +210,6 @@ var READ_STATES = {
 };
 
 // src/appSlice/index.ts
-var import_toolkit = require("@reduxjs/toolkit");
 var sliceName = "app";
 var getYesterday = () => {
   const today = /* @__PURE__ */ new Date();
@@ -974,17 +218,15 @@ var getYesterday = () => {
 };
 var initialState = {
   cancelSource: void 0,
+  commit: "",
   demoArtifactLink: "https://dgsbl4vditpls.cloudfront.net/mender-demo-artifact.mender",
   hostAddress: null,
   snackbar: {
-    open: false,
-    message: "",
-    maxWidth: 900,
-    autoHideDuration: void 0,
     action: void 0,
-    children: void 0,
-    onClick: void 0,
-    onClose: void 0
+    autoHideDuration: void 0,
+    message: "",
+    open: false,
+    preventClickToCopy: false
   },
   // return boolean rather than organization details
   features: {
@@ -997,7 +239,7 @@ var initialState = {
     hasMonitor: false,
     hasReporting: false,
     isDemoMode: false,
-    isHosted: false,
+    isHosted: true,
     isEnterprise: false
   },
   feedbackProbability: 0.3,
@@ -1009,16 +251,22 @@ var initialState = {
     deviceIds: [],
     searchTerm: "",
     searchTotal: 0,
+    isSearching: false,
     sort: {
-      direction: SORTING_OPTIONS.desc
+      direction: import_constants2.SORTING_OPTIONS.desc
       // key: null,
       // scope: null
     }
   },
+  sentry: {
+    location: "",
+    replaysSessionSampleRate: 0.1,
+    tracesSampleRate: 1
+  },
   stripeAPIKey: "",
   trackerCode: "",
   uploadsById: {
-    // id: { uploading: false, uploadProgress: 0, cancelSource: undefined }
+    // id: { progress: 0, cancelSource: undefined }
   },
   newThreshold: getYesterday(),
   offlineThreshold: getYesterday(),
@@ -1026,11 +274,7 @@ var initialState = {
     Integration: "",
     "Mender-Client": "",
     "Mender-Artifact": "",
-    "Meta-Mender": "",
-    Deployments: "",
-    Deviceauth: "",
-    Inventory: "",
-    GUI: "latest"
+    "Meta-Mender": ""
   },
   yesterday: void 0
 };
@@ -1045,19 +289,17 @@ var appSlice = (0, import_toolkit.createSlice)({
       };
     },
     setSnackbar: (state, { payload }) => {
-      let { message, autoHideDuration, action, children, onClick, onClose } = payload;
-      if (typeof payload === "string" || payload instanceof String) {
-        message = payload;
+      if (typeof payload === "string") {
+        state.snackbar.message = payload;
+        return;
       }
+      const { message, autoHideDuration, action, preventClickToCopy = false } = payload;
       state.snackbar = {
-        open: message ? true : false,
         message,
-        maxWidth: 900,
         autoHideDuration,
         action,
-        children,
-        onClick,
-        onClose
+        preventClickToCopy,
+        open: !!message
       };
     },
     setFirstLoginAfterSignup: (state, action) => {
@@ -1127,20 +369,20 @@ var initialState2 = {
       sourceWindow: -1
     },
     binaryDeltaLimits: {
-      timeout: { ...limitDefault, default: 60, max: 3600, min: 60 },
-      sourceWindow: limitDefault,
-      inputWindow: limitDefault,
-      duplicatesWindow: limitDefault,
-      instructionBuffer: limitDefault
+      timeout: { ...import_constants2.limitDefault, default: 60, max: 3600, min: 60 },
+      sourceWindow: import_constants2.limitDefault,
+      inputWindow: import_constants2.limitDefault,
+      duplicatesWindow: import_constants2.limitDefault,
+      instructionBuffer: import_constants2.limitDefault
     }
   },
   deploymentDeviceLimit: 5e3,
   selectedDeviceIds: [],
   selectionState: {
-    finished: { ...DEVICE_LIST_DEFAULTS, endDate: void 0, search: "", selection: [], startDate: void 0, total: 0, type: "" },
-    inprogress: { ...DEVICE_LIST_DEFAULTS, perPage: DEFAULT_PENDING_INPROGRESS_COUNT, selection: [] },
-    pending: { ...DEVICE_LIST_DEFAULTS, perPage: DEFAULT_PENDING_INPROGRESS_COUNT, selection: [] },
-    scheduled: { ...DEVICE_LIST_DEFAULTS, selection: [] },
+    finished: { ...import_constants2.DEVICE_LIST_DEFAULTS, endDate: void 0, search: "", selection: [], startDate: void 0, total: 0, type: "" },
+    inprogress: { ...import_constants2.DEVICE_LIST_DEFAULTS, perPage: DEFAULT_PENDING_INPROGRESS_COUNT, selection: [] },
+    pending: { ...import_constants2.DEVICE_LIST_DEFAULTS, perPage: DEFAULT_PENDING_INPROGRESS_COUNT, selection: [] },
+    scheduled: { ...import_constants2.DEVICE_LIST_DEFAULTS, selection: [] },
     general: {
       state: DEPLOYMENT_ROUTES.active.key,
       showCreationDialog: false,
@@ -1162,7 +404,8 @@ var deploymentsSlice = (0, import_toolkit2.createSlice)({
       };
       state.byStatus[DEPLOYMENT_STATES.pending].total = state.byStatus[DEPLOYMENT_STATES.pending].total + 1;
       state.byStatus[DEPLOYMENT_STATES.pending].deploymentIds = [...state.byStatus.pending.deploymentIds, action.payload.id];
-      state.selectionState[DEPLOYMENT_STATES.pending].selection = [action.payload.id, ...state.selectionState[DEPLOYMENT_STATES.pending].selection], state.selectionState[DEPLOYMENT_STATES.pending].total = state.selectionState[DEPLOYMENT_STATES.pending].total + 1;
+      state.selectionState[DEPLOYMENT_STATES.pending].selection = [action.payload.id, ...state.selectionState[DEPLOYMENT_STATES.pending].selection];
+      state.selectionState[DEPLOYMENT_STATES.pending].total = (state.selectionState[DEPLOYMENT_STATES.pending].total || 0) + 1;
     },
     removedDeployment: (state, action) => {
       const { [action.payload]: removedDeployment, ...remainder } = state.byId;
@@ -1239,26 +482,30 @@ var initialState3 = {
     // }
   },
   byStatus: {
-    [DEVICE_STATES.accepted]: { deviceIds: [], total: 0 },
+    [import_constants2.DEVICE_STATES.accepted]: { deviceIds: [], total: 0 },
     active: { deviceIds: [], total: 0 },
     inactive: { deviceIds: [], total: 0 },
-    [DEVICE_STATES.pending]: { deviceIds: [], total: 0 },
-    [DEVICE_STATES.preauth]: { deviceIds: [], total: 0 },
-    [DEVICE_STATES.rejected]: { deviceIds: [], total: 0 }
+    [import_constants2.DEVICE_STATES.pending]: { deviceIds: [], total: 0 },
+    [import_constants2.DEVICE_STATES.preauth]: { deviceIds: [], total: 0 },
+    [import_constants2.DEVICE_STATES.rejected]: { deviceIds: [], total: 0 }
   },
   deviceList: {
     deviceIds: [],
-    ...DEVICE_LIST_DEFAULTS,
+    ...import_constants2.DEVICE_LIST_DEFAULTS,
     selectedAttributes: [],
     selectedIssues: [],
     selection: [],
     sort: {
-      direction: SORTING_OPTIONS.desc
+      direction: import_constants2.SORTING_OPTIONS.desc
       // key: null,
       // scope: null
     },
-    state: DEVICE_STATES.accepted,
-    total: 0
+    state: import_constants2.DEVICE_STATES.accepted,
+    total: 0,
+    refreshTrigger: false,
+    isLoading: false,
+    detailsTab: "",
+    open: false
   },
   filters: [
     // { key: 'device_type', value: 'raspberry', operator: '$eq', scope: 'inventory' }
@@ -1330,7 +577,7 @@ var devicesSlice = (0, import_toolkit3.createSlice)({
       };
     },
     selectGroup: (state, { payload: group }) => {
-      state.deviceList.deviceIds = state.groups.byId[group] && state.groups.byId[group].deviceIds.length > 0 ? state.groups.byId[group].deviceIds : [];
+      state.deviceList.deviceIds = group && state.groups.byId[group] && state.groups.byId[group].deviceIds && state.groups.byId[group].deviceIds.length > 0 ? state.groups.byId[group].deviceIds : [];
       state.groups.selectedGroup = group;
     },
     removeGroup: (state, action) => {
@@ -1382,9 +629,6 @@ var devicesSlice = (0, import_toolkit3.createSlice)({
       const { count, status } = action.payload;
       state.byStatus[status].total = count;
     },
-    setTotalDevices: (state, action) => {
-      state.total = action.payload;
-    },
     setDeviceLimit: (state, action) => {
       state.limit = action.payload;
     },
@@ -1397,8 +641,8 @@ var devicesSlice = (0, import_toolkit3.createSlice)({
     maybeUpdateDevicesByStatus: (state, action) => {
       const { deviceId, authId } = action.payload;
       const device = state.byId[deviceId];
-      const hasMultipleAuthSets = authId ? device.auth_sets.filter((authset) => authset.id !== authId).length > 0 : false;
-      if (!hasMultipleAuthSets && Object.values(DEVICE_STATES).includes(device.status)) {
+      const hasMultipleAuthSets = authId && device.auth_sets ? device.auth_sets.filter((authset) => authset.id !== authId).length > 0 : false;
+      if (!hasMultipleAuthSets && Object.values(import_constants2.DEVICE_STATES).includes(device.status)) {
         const deviceIds = state.byStatus[device.status].deviceIds.filter((id) => id !== deviceId);
         state.byStatus[device.status] = { deviceIds, total: Math.max(0, state.byStatus[device.status].total - 1) };
       }
@@ -1413,16 +657,16 @@ var import_toolkit4 = require("@reduxjs/toolkit");
 var sliceName4 = "monitor";
 var initialState4 = {
   alerts: {
-    alertList: { ...DEVICE_LIST_DEFAULTS, total: 0 },
+    alertList: { ...import_constants2.DEVICE_LIST_DEFAULTS, total: 0 },
     byDeviceId: {}
   },
   issueCounts: {
-    byType: Object.values(DEVICE_ISSUE_OPTIONS).reduce((accu, { key }) => ({ ...accu, [key]: { filtered: 0, total: 0 } }), {})
+    byType: Object.keys(import_constants2.DEVICE_ISSUE_OPTIONS).reduce((accu, key) => ({ ...accu, [key]: { filtered: 0, total: 0 } }), {})
   },
   settings: {
     global: {
       channels: {
-        ...Object.keys(alertChannels).reduce((accu, item) => ({ ...accu, [item]: { enabled: true } }), {})
+        ...Object.keys(import_constants2.alertChannels).reduce((accu, item) => ({ ...accu, [item]: { enabled: true } }), {})
       }
     }
   }
@@ -1514,7 +758,7 @@ var initialState6 = {
     tenants: [],
     selectedTenant: null,
     sort: {
-      direction: SORTING_OPTIONS.desc,
+      direction: import_constants2.SORTING_OPTIONS.desc,
       key: "name"
     }
   },
@@ -1524,15 +768,16 @@ var initialState6 = {
   auditlog: {
     events: [],
     selectionState: {
-      ...DEVICE_LIST_DEFAULTS,
+      ...import_constants2.DEVICE_LIST_DEFAULTS,
       detail: void 0,
       endDate: void 0,
       selectedIssue: void 0,
-      sort: { direction: SORTING_OPTIONS.desc },
+      sort: { direction: import_constants2.SORTING_OPTIONS.desc },
       startDate: void 0,
       total: 0,
       type: void 0,
-      user: void 0
+      user: void 0,
+      isLoading: false
     }
   },
   externalDeviceIntegrations: [
@@ -1570,6 +815,12 @@ var organizationSlice = (0, import_toolkit6.createSlice)({
     setOrganization: (state, action) => {
       state.organization = { ...state.organization, ...action.payload };
     },
+    setSubscription: (state, action) => {
+      state.organization.subscription = { ...state.organization.subscription, ...action.payload };
+    },
+    setBillingProfile: (state, action) => {
+      state.organization.billing_profile = action.payload;
+    },
     setTenantListState: (state, action) => {
       state.tenantList = action.payload;
     },
@@ -1632,12 +883,12 @@ var initialState7 = {
     */
   },
   releasesList: {
-    ...DEVICE_LIST_DEFAULTS,
+    ...import_constants2.DEVICE_LIST_DEFAULTS,
     searchedIds: [],
     releaseIds: [],
     selection: [],
     sort: {
-      direction: SORTING_OPTIONS.desc,
+      direction: import_constants2.SORTING_OPTIONS.desc,
       key: "modified"
     },
     isLoading: void 0,
@@ -1706,11 +957,12 @@ var initialState8 = {
     retries: 0
   },
   permissionSetsById: {
-    ...defaultPermissionSets
+    ...import_constants2.defaultPermissionSets
   },
   rolesById: {
-    ...rolesById
+    ...import_constants2.rolesById
   },
+  rolesInitialized: false,
   settingsInitialized: false,
   showConnectDeviceDialog: false,
   showFeedbackDialog: false,
@@ -1746,9 +998,6 @@ var usersSlice = (0, import_toolkit8.createSlice)({
       state.byId[action.payload.id] = action.payload;
       state.currentUser = action.payload.id;
     },
-    createdUser: (state, action) => {
-      state.byId[0] = action.payload;
-    },
     removedUser: (state, action) => {
       const { [action.payload]: removedUser, ...byId } = state.byId;
       state.byId = byId;
@@ -1765,6 +1014,10 @@ var usersSlice = (0, import_toolkit8.createSlice)({
     },
     receivedRoles: (state, action) => {
       state.rolesById = action.payload;
+      state.rolesInitialized = true;
+    },
+    finishedRoleInitialization: (state, action) => {
+      state.rolesInitialized = action.payload;
     },
     createdRole: (state, action) => {
       state.rolesById[action.payload.name] = {
@@ -1795,7 +1048,7 @@ var usersSlice = (0, import_toolkit8.createSlice)({
     },
     setTooltipState: (state, action) => {
       const { id, readState = READ_STATES.read } = action.payload;
-      state.tooltips.byId[id].readState = readState;
+      state.tooltips.byId[id] = { ...state.tooltips.byId[id], readState };
     },
     setTooltipsState: (state, action) => {
       state.tooltips.byId = {
@@ -1832,7 +1085,7 @@ var actions_default = {
 // src/auth.ts
 var import_universal_cookie = __toESM(require("universal-cookie"), 1);
 var cookies = new import_universal_cookie.default();
-var emptySession = Object.freeze({ token: "", exiresAt: void 0 });
+var emptySession = Object.freeze({ token: "", expiresAt: void 0 });
 var tokenCache = "";
 var getSessionInfo = () => {
   let sessionInfo = { ...emptySession };
@@ -1845,15 +1098,15 @@ var getSessionInfo = () => {
     return { ...emptySession };
   }
   if (!sessionInfo.token) {
-    let jwtTokenFromCookie = cookies.get("JWT", { doNotParse: true }) ?? "";
+    const jwtTokenFromCookie = cookies.get("JWT", { doNotParse: true }) ?? "";
     if (jwtTokenFromCookie) {
-      setSessionInfo({ token: jwtTokenFromCookie, undefined: void 0 });
+      setSessionInfo({ token: jwtTokenFromCookie });
       sessionInfo.token = jwtTokenFromCookie;
       cookies.remove("JWT");
       cookies.remove("JWT", { path: "/" });
     }
   }
-  sessionInfo.token = sessionInfo.token || void 0;
+  sessionInfo.token = sessionInfo.token || "";
   tokenCache = sessionInfo.token;
   return sessionInfo;
 };
@@ -1907,20 +1160,50 @@ var rejectionLoggerMiddleware = () => (next) => (action) => {
   }
   return next(action);
 };
+var tracingActionIgnoreList = [actions8.successfullyLoggedIn.type, "users/loginUser/pending", "users/loginUser/fulfilled", "users/loginUser/rejected"];
+var sentryReduxEnhancer = (0, import_react.createReduxEnhancer)({
+  actionTransformer: (action) => {
+    if (tracingActionIgnoreList.includes(action.type)) {
+      return null;
+    }
+    return action;
+  },
+  // Transform the state to remove sensitive information
+  stateTransformer: (state) => {
+    const transformedState = {
+      ...state,
+      users: { ...state.users, currentSession: null },
+      organization: {
+        ...state.organization,
+        organization: {
+          ...state.organization.organization,
+          tenant_token: null
+        }
+      }
+    };
+    return transformedState;
+  }
+});
 var getConfiguredStore = (options = {}) => {
   const { preloadedState = {}, ...config } = options;
   return (0, import_toolkit9.configureStore)({
     ...config,
     preloadedState,
+    enhancers: (getDefaultEnhancers) => {
+      if (window.mender_environment?.sentry?.isReduxEnabled) {
+        return getDefaultEnhancers().concat(sentryReduxEnhancer);
+      }
+      return getDefaultEnhancers();
+    },
     reducer: sessionReducer,
     middleware: (getDefaultMiddleware) => getDefaultMiddleware({
       immutableCheck: {
         ignoredPaths: ["app.uploadsById"]
       },
       serializableCheck: {
-        ignoredActions: [actions6.receiveExternalDeviceIntegrations.name, setSnackbar.name, uploadProgress.name],
-        ignoredActionPaths: ["uploads", "snackbar", /payload\..*$/],
-        ignoredPaths: ["app.uploadsById", "app.snackbar", "organization.externalDeviceIntegrations"]
+        ignoredActions: [actions6.receiveExternalDeviceIntegrations.name, uploadProgress.name],
+        ignoredActionPaths: ["uploads", /payload\..*$/, "meta.arg.file", "meta.arg.integration.configHint"],
+        ignoredPaths: ["app.uploadsById", "organization.externalDeviceIntegrations"]
       }
     }).concat(rejectionLoggerMiddleware)
   });
@@ -1929,10 +1212,12 @@ var store = getConfiguredStore({
   preloadedState: {}
 });
 var useAppDispatch = import_react_redux.useDispatch;
+var createAppAsyncThunk = import_toolkit9.createAsyncThunk.withTypes();
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   commonErrorFallback,
   commonErrorHandler,
+  createAppAsyncThunk,
   getConfiguredStore,
   sessionReducer,
   store,