@northern.tech/store 0.3.4 → 0.4.0

package/dist/usersSlice/selectors.cjs

@@ -27,17 +27,23 @@ __export(selectors_exports, {
   getIdAttribute: () => getIdAttribute,
   getIsDarkMode: () => getIsDarkMode,
   getOfflineThresholdSettings: () => getOfflineThresholdSettings,
+  getReadAllHelptips: () => getReadAllHelptips,
   getRolesById: () => getRolesById,
+  getRolesInitialized: () => getRolesInitialized,
   getRolesList: () => getRolesList,
   getSelectedDeviceAttribute: () => getSelectedDeviceAttribute,
-  getShowHelptips: () => getShowHelptips,
   getTooltipsById: () => getTooltipsById,
   getTooltipsState: () => getTooltipsState,
   getUserSettings: () => getUserSettings,
+  getUserSettingsInitialized: () => getUserSettingsInitialized,
   getUsersById: () => getUsersById,
   getUsersList: () => getUsersList
 });
 module.exports = __toCommonJS(selectors_exports);
+var import_toolkit = require("@reduxjs/toolkit");
+
+// src/constants.ts
+var import_constants2 = require("@northern.tech/utils/constants");
 
 // src/appSlice/constants.ts
 var import_icons_material = require("@mui/icons-material");
@@ -45,11 +51,6 @@ var startingDeviceCount = {
   os: "for first 50 devices",
   professional: "for first 250 devices"
 };
-var apiRoot = "/api/management";
-var apiUrl = {
-  v1: `${apiRoot}/v1`,
-  v2: `${apiRoot}/v2`
-};
 var chartTypes = {
   bar: { key: "bar", Icon: import_icons_material.BarChart },
   pie: { key: "pie", Icon: import_icons_material.PieChartOutline }
@@ -61,28 +62,30 @@ var PLANS = {
   os: {
     id: "os",
     name: "Basic",
+    minimalDeviceCount: 50,
     offer: true,
-    price: "$32 / month",
+    price: "$34 / month",
     deviceCount: startingDeviceCount.os,
-    offerprice: "$23 / month for first 50 devices",
-    price2: "for first 6 months;\n$29/month thereafter",
+    description: "The core features of Mender. To continue using Enterprise Trial features\u2014like Delta updates, scheduled deployments, phased rollouts, device filtering, dynamic groups, RBAC, audit logs, and more\u2014please upgrade to a higher plan.",
     features: ["Access to core features of Mender", "Basic support"]
   },
   professional: {
     id: "professional",
     name: "Professional",
+    minimalDeviceCount: 250,
     offer: true,
-    price: "$269 / month",
+    price: "$291 / month",
     deviceCount: startingDeviceCount.professional,
-    offerprice: "$200 / month for first 50 devices",
-    price2: "for first 6 months;\n$249/month thereafter",
+    description: "Everything in Basic, plus enhanced update management and automation features.",
     features: ["Advanced OTA features", "Higher priority support"]
   },
   enterprise: {
     id: "enterprise",
     name: "Enterprise",
+    minimalDeviceCount: 1e3,
     price: "Custom pricing",
     deviceCount: "Unlimited devices",
+    description: "Every advanced feature of Mender, tailored for complex and large-scale deployments. Not available as a monthly subscription \u2014 ask us for a quote.",
     features: ["All Mender features", "Advanced security features", "SLA-backed support"]
   }
 };
@@ -102,21 +105,6 @@ var ADDONS = {
     },
     eligible: ["os", "professional", "enterprise"]
   },
-  troubleshoot: {
-    id: "troubleshoot",
-    title: "Troubleshoot",
-    description: "Expand your plan with device troubleshooting features",
-    needs: ["hasDeviceConnect"],
-    os: {
-      price: "$27/month",
-      deviceCount: startingDeviceCount.os
-    },
-    professional: {
-      price: "$72/month",
-      deviceCount: startingDeviceCount.professional
-    },
-    eligible: ["os", "professional", "enterprise"]
-  },
   monitor: {
     id: "monitor",
     title: "Monitor",
@@ -131,6 +119,21 @@ var ADDONS = {
       deviceCount: startingDeviceCount.professional
     },
     eligible: ["professional", "enterprise"]
+  },
+  troubleshoot: {
+    id: "troubleshoot",
+    title: "Troubleshoot",
+    description: "Expand your plan with device troubleshooting features",
+    needs: ["hasDeviceConnect"],
+    os: {
+      price: "$27/month",
+      deviceCount: startingDeviceCount.os
+    },
+    professional: {
+      price: "$72/month",
+      deviceCount: startingDeviceCount.professional
+    },
+    eligible: ["os", "professional", "enterprise"]
   }
 };
 var BENEFITS = {
@@ -171,133 +174,13 @@ var DARK_MODE = "dark";
 
 // src/commonConstants.tsx
 var import_js = require("@mdi/js");
+var import_MenderTypes = require("@northern.tech/types/MenderTypes");
 var import_jsx_runtime = require("react/jsx-runtime");
 var timeUnits = {
   days: "days",
   minutes: "minutes",
   hours: "hours"
 };
-var ALL_DEVICES = "All devices";
-var DEVICE_FILTERING_OPTIONS = {
-  $eq: { key: "$eq", title: "equals", shortform: "=" },
-  $ne: { key: "$ne", title: "not equal", shortform: "!=" },
-  $gt: {
-    key: "$gt",
-    title: ">",
-    shortform: ">",
-    help: 'The "greater than" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $gte: {
-    title: ">=",
-    shortform: ">=",
-    help: 'The "greater than or equal" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $lt: {
-    key: "$lt",
-    title: "<",
-    shortform: "<",
-    help: 'The "lesser than" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $lte: {
-    title: "<=",
-    shortform: "<=",
-    help: 'The "lesser than or equal" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $ltne: {
-    key: "$ltne",
-    title: "$ltne",
-    shortform: "ltne",
-    help: 'The "lesser than or does not exist" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
-  },
-  $in: {
-    key: "$in",
-    title: "in",
-    shortform: "in",
-    help: 'The "in" operator accepts a list of comma-separated values. It matches if the selected field is equal to one of the specified values.'
-  },
-  $nin: {
-    key: "$nin",
-    title: "not in",
-    shortform: "not in",
-    help: `The "not in" operator accepts a list of comma-separated values. It matches if the selected field's value is not equal to any of the specified options.`
-  },
-  $exists: {
-    key: "$exists",
-    title: "exists",
-    shortform: "exists",
-    value: true,
-    help: `The "exists" operator matches if the selected field's value has a value. No value needs to be provided for this operator.`
-  },
-  $nexists: {
-    key: "$nexists",
-    title: `doesn't exist`,
-    shortform: `doesn't exist`,
-    value: true,
-    help: `The "doesn't exist" operator matches if the selected field's value has no value. No value needs to be provided for this operator.`
-  },
-  $regex: {
-    key: "$regex",
-    title: `matches regular expression`,
-    shortform: `matches`,
-    help: `The "regular expression" operator matches the selected field's value with a Perl compatible regular expression (PCRE), automatically anchored by ^. If the regular expression is not valid, the filter will produce no results. If you need to specify options and flags, you can provide the full regex in the format of /regex/flags, for example.`
-  }
-};
-var DEVICE_ISSUE_OPTIONS = {
-  issues: {
-    isCategory: true,
-    key: "issues",
-    title: "Devices with issues",
-    filterRule: {}
-  },
-  offline: {
-    issueCategory: "issues",
-    key: "offline",
-    needsFullFiltering: true,
-    needsMonitor: false,
-    needsReporting: false,
-    filterRule: {
-      scope: "system",
-      key: "check_in_time",
-      operator: DEVICE_FILTERING_OPTIONS.$ltne.key,
-      value: ({ offlineThreshold }) => offlineThreshold
-    },
-    title: "Offline devices"
-  },
-  failedLastUpdate: {
-    issueCategory: "issues",
-    key: "failedLastUpdate",
-    needsFullFiltering: false,
-    needsMonitor: false,
-    needsReporting: true,
-    filterRule: { scope: "monitor", key: "failed_last_update", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: true },
-    title: "Deployment failed"
-  },
-  monitoring: {
-    issueCategory: "issues",
-    key: "monitoring",
-    needsFullFiltering: false,
-    needsMonitor: true,
-    needsReporting: false,
-    filterRule: { scope: "monitor", key: "alerts", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: true },
-    title: "Monitoring alert"
-  },
-  authRequests: {
-    key: "authRequests",
-    needsFullFiltering: false,
-    needsMonitor: false,
-    needsReporting: true,
-    filterRule: { scope: "monitor", key: "auth_requests", operator: DEVICE_FILTERING_OPTIONS.$gt.key, value: 1 },
-    title: "Devices with new authentication requests"
-  },
-  gatewayDevices: {
-    key: "gatewayDevices",
-    needsFullFiltering: false,
-    needsMonitor: false,
-    needsReporting: true,
-    filterRule: { scope: "inventory", key: "mender_is_gateway", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: "true" },
-    title: "Gateway devices"
-  }
-};
 var oneSecond = 1e3;
 var TIMEOUTS = {
   debounceDefault: 700,
@@ -311,18 +194,11 @@ var TIMEOUTS = {
   refreshLong: 60 * oneSecond
 };
 var DEVICE_ONLINE_CUTOFF = { interval: 1, intervalName: timeUnits.days };
-var ATTRIBUTE_SCOPES = {
-  inventory: "inventory",
-  identity: "identity",
-  monitor: "monitor",
-  system: "system",
-  tags: "tags"
-};
-var defaultIdAttribute = Object.freeze({ attribute: "id", scope: ATTRIBUTE_SCOPES.identity });
+var defaultIdAttribute = Object.freeze({ attribute: "id", scope: import_constants2.ATTRIBUTE_SCOPES.identity });
 var credentialTypes = {
-  aws: "aws",
-  http: "http",
-  sas: "sas",
+  aws: import_MenderTypes.Credentials.type.AWS,
+  http: import_MenderTypes.Credentials.type.HTTP,
+  sas: import_MenderTypes.Credentials.type.SAS,
   x509: "x509"
 };
 var EXTERNAL_PROVIDER = {
@@ -362,406 +238,276 @@ var EXTERNAL_PROVIDER = {
   webhook: {
     credentialsType: credentialTypes.http,
     deviceTwin: false,
+    twinTitle: "",
     // disable the webhook provider here, since it is treated different than other integrations, with a custom configuration & management view, etc.
     enabled: false,
     provider: "webhook"
   }
 };
-var ALL_RELEASES = "All releases";
-var emptyUiPermissions = Object.freeze({
-  auditlog: [],
-  deployments: [],
-  groups: Object.freeze({}),
-  releases: Object.freeze({}),
-  tenantManagement: [],
-  userManagement: []
-});
-var emptyRole = Object.freeze({
-  name: void 0,
+var emptyWebhook = {
   description: "",
-  permissions: [],
-  uiPermissions: Object.freeze({ ...emptyUiPermissions })
-});
-
-// src/usersSlice/constants.ts
-var useradmApiUrlv1 = `${apiUrl.v1}/useradm`;
-var useradmApiUrlv2 = `${apiUrl.v2}/useradm`;
-var staticRolesByName = {
-  admin: "RBAC_ROLE_PERMIT_ALL",
-  readOnly: "RBAC_ROLE_OBSERVER",
-  ci: "RBAC_ROLE_CI",
-  deploymentsManager: "RBAC_ROLE_DEPLOYMENTS_MANAGER",
-  terminalAccess: "RBAC_ROLE_REMOTE_TERMINAL"
-};
-var PermissionTypes = {
-  Any: "any",
-  Get: "GET",
-  Post: "POST",
-  Put: "PUT",
-  Delete: "DELETE",
-  Patch: "PATCH",
-  DeviceGroup: "DEVICE_GROUP",
-  DeviceId: "DEVICE_ID"
-};
-var permissionSetIds = {
-  Basic: "Basic",
-  ConfigureDevices: "ConfigureDevices",
-  ConnectToDevices: "ConnectToDevices",
-  DeployToDevices: "DeployToDevices",
-  ManageDevices: "ManageDevices",
-  ManageReleases: "ManageReleases",
-  ManageTenants: "ManageTenants",
-  ManageUsers: "ManageUsers",
-  ReadAuditLogs: "ReadAuditLogs",
-  ReadDevices: "ReadDevices",
-  ReadReleases: "ReadReleases",
-  ReadTenants: "ReadTenants",
-  ReadUsers: "ReadUsers",
-  SuperUser: "SuperUser",
-  UploadArtifacts: "UploadArtifacts"
-};
-var uiPermissionsById = {
-  configure: {
-    explanations: { groups: `'Configure' allows the user to use mender-configure features and apply configurations.` },
-    permissionLevel: 2,
-    permissionSets: { groups: permissionSetIds.ConfigureDevices },
-    title: "Configure",
-    value: "configure",
-    verbs: [PermissionTypes.Get, PermissionTypes.Put, PermissionTypes.Post]
-  },
-  connect: {
-    explanations: { groups: `'Connect' allows the user to use mender-connect features and Troubleshoot add-ons.` },
-    permissionLevel: 2,
-    permissionSets: { groups: permissionSetIds.ConnectToDevices },
-    title: "Connect",
-    value: "connect",
-    verbs: [PermissionTypes.Get, PermissionTypes.Put]
-  },
-  deploy: {
-    explanations: { groups: `'Deploy' allows the user to deploy software or configuration updates to devices.` },
-    permissionLevel: 2,
-    permissionSets: { deployments: permissionSetIds.DeployToDevices, groups: permissionSetIds.DeployToDevices },
-    title: "Deploy",
-    value: "deploy",
-    verbs: [PermissionTypes.Post]
-  },
-  manage: {
-    explanations: {
-      groups: `'Manage' allows the user to edit device name, notes, and manage authentication status. For 'All devices' it also allows the user to edit and create device groups.`,
-      releases: `'Manage' allows the user to upload new artifacts, edit release descriptions and remove artifacts.`
-    },
-    permissionLevel: 2,
-    permissionSets: {
-      groups: permissionSetIds.ManageDevices,
-      releases: permissionSetIds.ManageReleases,
-      tenantManagement: permissionSetIds.ManageTenants,
-      userManagement: permissionSetIds.ManageUsers
-    },
-    title: "Manage",
-    value: "manage",
-    verbs: [PermissionTypes.Post, PermissionTypes.Put, PermissionTypes.Patch]
-  },
-  read: {
-    explanations: { groups: `'Read' allows the user to view devices.` },
-    permissionLevel: 1,
-    permissionSets: {
-      auditlog: permissionSetIds.ReadAuditLogs,
-      groups: permissionSetIds.ReadDevices,
-      releases: permissionSetIds.ReadReleases,
-      tenantManagement: permissionSetIds.ReadTenants,
-      userManagement: permissionSetIds.ReadUsers
-    },
-    title: "Read",
-    value: "read",
-    verbs: [PermissionTypes.Get, PermissionTypes.Post]
-  },
-  upload: {
-    explanations: { groups: `'Upload' allows the user to upload new Artifacts.` },
-    unscopedOnly: { releases: true },
-    permissionLevel: 1,
-    permissionSets: { releases: permissionSetIds.UploadArtifacts },
-    title: "Upload",
-    value: "upload",
-    verbs: [PermissionTypes.Post, PermissionTypes.Put, PermissionTypes.Patch]
-  }
-};
-var scopedPermissionAreas = {
-  groups: { key: "groups", excessiveAccessSelector: ALL_DEVICES, scopeType: "DeviceGroups" },
-  releases: { key: "releases", excessiveAccessSelector: ALL_RELEASES, scopeType: "Releases" }
-};
-var uiPermissionsByArea = {
-  auditlog: {
-    endpoints: [{ path: /\/(auditlog)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] }],
-    explanation: "Granting access to the audit log will allow tracing changes to devices, releases and user accounts, as well as providing information about deployments.",
-    key: "auditlog",
-    uiPermissions: [uiPermissionsById.read],
-    title: "System Audit Log"
-  },
-  deployments: {
-    endpoints: [
-      { path: /\/(deployments\/deployments)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.deploy] },
-      { path: /\/(deployments\/deployments)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
-      { path: /\/(deployments\/config)/i, types: [PermissionTypes.Get, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] }
-    ],
-    explanation: "Providing deploy permissions will allow deployments to be created using the releases and devices a user has access to.",
-    key: "deployments",
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.deploy],
-    title: "Deployments"
-  },
-  groups: {
-    endpoints: [
-      {
-        path: /\/(devauth|inventory|deviceconfig|devicemonitor|deviceconnect\/devices)/i,
-        types: [PermissionTypes.Get],
-        uiPermissions: [uiPermissionsById.read]
-      },
-      { path: /\/(devauth|inventory)/i, types: [PermissionTypes.Put, PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] },
-      { path: /\/(deviceconfig)/i, types: [PermissionTypes.Get, PermissionTypes.Put, PermissionTypes.Post], uiPermissions: [uiPermissionsById.configure] },
-      { path: /\/(deviceconnect\/devices)/i, types: [PermissionTypes.Get, PermissionTypes.Post], uiPermissions: [uiPermissionsById.connect] }
-    ],
-    explanation: "Device group management permissions control the degree to which devices in a group can be accessed and moved to other groups.",
-    key: "groups",
-    scope: scopedPermissionAreas.groups.scopeType,
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.deploy, uiPermissionsById.configure, uiPermissionsById.connect],
-    title: "Group Management"
-  },
-  releases: {
-    endpoints: [
-      { path: /\/(deployments\/artifacts|deployments\/deployments\/releases)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
-      {
-        path: /\/(deployments\/artifacts|deployments\/deployments\/releases)/i,
-        types: [PermissionTypes.Post, PermissionTypes.Put],
-        uiPermissions: [uiPermissionsById.read, uiPermissionsById.upload]
-      },
-      {
-        path: /\/(deployments\/artifacts|deployments\/deployments\/releases)/i,
-        types: [PermissionTypes.Delete],
-        uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage]
-      }
-    ],
-    explanation: "Release permissions can be granted to allow artifact & release modifications, as well as the creation of new releases.",
-    key: "releases",
-    scope: "ReleaseTags",
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.upload],
-    title: "Release Management"
-  },
-  tenantManagement: {
-    endpoints: [
-      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
-      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] },
-      { path: /\/(users\/exists)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.manage] }
-    ],
-    explanation: "Tenant management permissions allow listing, creating and modifying child tenants",
-    key: "tenantManagement",
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
-    title: "Tenant Management"
-  },
-  userManagement: {
-    endpoints: [
-      { path: /\/(useradm)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
-      { path: /\/(useradm)/i, types: [PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] }
-    ],
-    explanation: "User management permissions should be granted carefully, as these allow privilege increases for any users managed by a user with user management permissions",
-    key: "userManagement",
-    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
-    title: "User Management"
-  }
-};
-var permissionMapper = (permission) => permission.value;
-var rolesById = Object.freeze({
-  [staticRolesByName.admin]: {
-    name: "Admin",
-    value: staticRolesByName.admin,
-    description: "Full access",
-    permissions: [],
-    // permissions refers to the values returned from the backend
-    uiPermissions: {
-      ...emptyUiPermissions,
-      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
-      deployments: uiPermissionsByArea.deployments.uiPermissions.map(permissionMapper),
-      groups: { [ALL_DEVICES]: uiPermissionsByArea.groups.uiPermissions.map(permissionMapper) },
-      releases: { [ALL_RELEASES]: uiPermissionsByArea.releases.uiPermissions.map(permissionMapper) },
-      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper)
-    }
-  },
-  [staticRolesByName.readOnly]: {
-    name: "Read Access",
-    value: staticRolesByName.readOnly,
-    description: "",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      deployments: [uiPermissionsById.read.value],
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value] },
-      releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] },
-      userManagement: [uiPermissionsById.read.value]
-    }
-  },
-  [staticRolesByName.ci]: {
-    name: "Releases Manager",
-    value: staticRolesByName.ci,
-    description: "",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      releases: { [ALL_RELEASES]: uiPermissionsByArea.releases.uiPermissions.map(permissionMapper) }
-    }
-  },
-  [staticRolesByName.deploymentsManager]: {
-    name: "Deployments Manager",
-    value: staticRolesByName.deploymentsManager,
-    description: "",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      deployments: uiPermissionsByArea.deployments.uiPermissions.map(permissionMapper),
-      groups: { [ALL_DEVICES]: [uiPermissionsById.deploy.value, uiPermissionsById.read.value] },
-      releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
-    }
-  },
-  [staticRolesByName.terminalAccess]: {
-    name: "Troubleshooting",
-    value: staticRolesByName.terminalAccess,
-    description: "Access to the troubleshooting features: Remote Terminal, File Transfer, Port Forwarding",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      groups: { [ALL_DEVICES]: [uiPermissionsById.connect.value] }
-    }
-  }
-});
-var serviceProviderRolesById = {
-  admin: {
-    name: "Admin",
-    value: staticRolesByName.admin,
-    description: "Full access",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
-      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper),
-      tenantManagement: uiPermissionsByArea.tenantManagement.uiPermissions.map(permissionMapper)
-    }
-  },
-  readOnly: {
-    name: "Read access",
-    value: staticRolesByName.readOnly,
-    description: "This role can see all linked organizations but cannot make any changes",
-    permissions: [],
-    uiPermissions: {
-      ...emptyUiPermissions,
-      auditlog: [uiPermissionsById.read.value],
-      userManagement: [uiPermissionsById.read.value],
-      tenantManagement: [uiPermissionsById.read.value]
+  provider: import_MenderTypes.Integration.provider.WEBHOOK,
+  credentials: {
+    type: EXTERNAL_PROVIDER.webhook.credentialsType,
+    [EXTERNAL_PROVIDER.webhook.credentialsType]: {
+      secret: "",
+      url: ""
     }
   }
 };
-var defaultPermissionSets = {
-  [permissionSetIds.Basic]: {
-    name: permissionSetIds.Basic,
-    result: {
-      // this is needed to prevent the detailed permissions of the basic permission set from being interpreted as allowing read & management access to user endpoints
-      userManagement: [uiPermissionsById.read.value]
-    }
-  },
-  [permissionSetIds.SuperUser]: {
-    name: permissionSetIds.SuperUser,
-    result: {
-      ...rolesById[staticRolesByName.admin].uiPermissions
-    }
-  },
-  [permissionSetIds.ManageUsers]: {
-    name: permissionSetIds.ManageUsers,
-    result: {
-      userManagement: [uiPermissionsById.manage.value]
-    }
-  },
-  [permissionSetIds.ReadAuditLogs]: {
-    name: permissionSetIds.ReadAuditLogs,
-    result: {
-      auditlog: [uiPermissionsById.read.value]
-    }
-  },
-  [permissionSetIds.ReadReleases]: {
-    name: permissionSetIds.ReadReleases,
-    result: {
-      releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
-    }
-  },
-  [permissionSetIds.ReadTenants]: {
-    name: permissionSetIds.ReadTenants,
-    result: {
-      tenantManagement: [uiPermissionsById.read.value]
-    }
-  },
-  [permissionSetIds.ManageTenants]: {
-    name: permissionSetIds.ManageTenants,
-    result: {
-      tenantManagement: [uiPermissionsById.manage.value]
-    }
-  },
-  [permissionSetIds.ReadUsers]: {
-    name: permissionSetIds.ReadUsers,
-    result: {
-      userManagement: [uiPermissionsById.read.value]
-    }
-  },
-  [permissionSetIds.UploadArtifacts]: {
-    name: permissionSetIds.UploadArtifacts,
-    result: {
-      releases: { [ALL_RELEASES]: [uiPermissionsById.upload.value] }
-    }
-  },
-  [permissionSetIds.ManageReleases]: {
-    name: permissionSetIds.ManageReleases,
-    result: {
-      releases: { [ALL_RELEASES]: [uiPermissionsById.manage.value] }
-    }
-  },
-  [permissionSetIds.ConfigureDevices]: {
-    name: permissionSetIds.ConfigureDevices,
-    result: {
-      deployments: [uiPermissionsById.read.value, uiPermissionsById.deploy.value],
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value, uiPermissionsById.configure.value] }
-    }
-  },
-  [permissionSetIds.ConnectToDevices]: {
-    name: permissionSetIds.ConnectToDevices,
-    result: {
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value, uiPermissionsById.connect.value] }
-    }
-  },
-  [permissionSetIds.DeployToDevices]: {
-    name: permissionSetIds.DeployToDevices,
-    result: {
-      deployments: [uiPermissionsById.deploy.value, uiPermissionsById.manage.value, uiPermissionsById.read.value],
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value, uiPermissionsById.deploy.value] }
-    }
-  },
-  [permissionSetIds.ManageDevices]: {
-    name: permissionSetIds.ManageDevices,
-    result: {
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value, uiPermissionsById.manage.value] }
-    }
-  },
-  [permissionSetIds.ReadDevices]: {
-    name: permissionSetIds.ReadDevices,
-    result: {
-      groups: { [ALL_DEVICES]: [uiPermissionsById.read.value] }
-    }
-  }
-};
-var rolesByName = {
-  ...staticRolesByName,
-  deploymentCreation: { action: "CREATE_DEPLOYMENT", object: { type: "DEVICE_GROUP", value: void 0 } },
-  groupAccess: { action: "VIEW_DEVICE", object: { type: "DEVICE_GROUP", value: void 0 } },
-  userManagement: { action: "http", object: { type: "any", value: `${useradmApiUrlv1}/.*` } }
-};
-var twoFAStates = {
-  enabled: "enabled",
-  disabled: "disabled",
-  unverified: "unverified"
-};
+var regionNames = new Intl.DisplayNames(["en"], { type: "region" });
+var countries = [
+  "AD",
+  "AE",
+  "AF",
+  "AG",
+  "AI",
+  "AL",
+  "AM",
+  "AO",
+  "AQ",
+  "AR",
+  "AS",
+  "AT",
+  "AU",
+  "AW",
+  "AX",
+  "AZ",
+  "BA",
+  "BB",
+  "BD",
+  "BE",
+  "BF",
+  "BG",
+  "BH",
+  "BI",
+  "BJ",
+  "BL",
+  "BM",
+  "BN",
+  "BO",
+  "BR",
+  "BS",
+  "BT",
+  "BV",
+  "BW",
+  "BY",
+  "BZ",
+  "CA",
+  "CC",
+  "CD",
+  "CF",
+  "CG",
+  "CH",
+  "CI",
+  "CK",
+  "CL",
+  "CM",
+  "CN",
+  "CO",
+  "CR",
+  "CU",
+  "CV",
+  "CW",
+  "CX",
+  "CY",
+  "CZ",
+  "DE",
+  "DJ",
+  "DK",
+  "DM",
+  "DO",
+  "DZ",
+  "EC",
+  "EE",
+  "EG",
+  "EH",
+  "ER",
+  "ES",
+  "ET",
+  "FI",
+  "FJ",
+  "FK",
+  "FM",
+  "FO",
+  "FR",
+  "GA",
+  "GB",
+  "GD",
+  "GE",
+  "GF",
+  "GG",
+  "GH",
+  "GI",
+  "GL",
+  "GM",
+  "GN",
+  "GP",
+  "GQ",
+  "GR",
+  "GS",
+  "GT",
+  "GU",
+  "GW",
+  "GY",
+  "HK",
+  "HM",
+  "HN",
+  "HR",
+  "HT",
+  "HU",
+  "ID",
+  "IE",
+  "IL",
+  "IM",
+  "IN",
+  "IO",
+  "IQ",
+  "IR",
+  "IS",
+  "IT",
+  "JE",
+  "JM",
+  "JO",
+  "JP",
+  "KE",
+  "KG",
+  "KH",
+  "KI",
+  "KM",
+  "KN",
+  "KP",
+  "KR",
+  "KW",
+  "KY",
+  "KZ",
+  "LA",
+  "LB",
+  "LC",
+  "LI",
+  "LK",
+  "LR",
+  "LS",
+  "LT",
+  "LU",
+  "LV",
+  "LY",
+  "MA",
+  "MC",
+  "MD",
+  "ME",
+  "MF",
+  "MG",
+  "MH",
+  "MK",
+  "ML",
+  "MM",
+  "MN",
+  "MO",
+  "MP",
+  "MQ",
+  "MR",
+  "MS",
+  "MT",
+  "MU",
+  "MV",
+  "MW",
+  "MX",
+  "MY",
+  "MZ",
+  "NA",
+  "NC",
+  "NE",
+  "NF",
+  "NG",
+  "NI",
+  "NL",
+  "NO",
+  "NP",
+  "NR",
+  "NU",
+  "NZ",
+  "OM",
+  "PA",
+  "PE",
+  "PF",
+  "PG",
+  "PH",
+  "PK",
+  "PL",
+  "PM",
+  "PN",
+  "PR",
+  "PS",
+  "PT",
+  "PW",
+  "PY",
+  "QA",
+  "RE",
+  "RO",
+  "RS",
+  "RU",
+  "RW",
+  "SA",
+  "SB",
+  "SC",
+  "SD",
+  "SE",
+  "SG",
+  "SH",
+  "SI",
+  "SJ",
+  "SK",
+  "SL",
+  "SM",
+  "SN",
+  "SO",
+  "SR",
+  "SS",
+  "ST",
+  "SV",
+  "SX",
+  "SY",
+  "SZ",
+  "TC",
+  "TD",
+  "TF",
+  "TG",
+  "TH",
+  "TJ",
+  "TK",
+  "TL",
+  "TM",
+  "TN",
+  "TO",
+  "TR",
+  "TT",
+  "TV",
+  "TW",
+  "TZ",
+  "UA",
+  "UG",
+  "US",
+  "UY",
+  "UZ",
+  "VA",
+  "VC",
+  "VE",
+  "VG",
+  "VI",
+  "VN",
+  "VU",
+  "WF",
+  "WS",
+  "XK",
+  "YE",
+  "YT",
+  "ZA",
+  "ZM",
+  "ZW"
+].map((code) => ({ code, label: regionNames.of(code) })).sort((a, b) => a.label.localeCompare(b.label));
+
+// src/usersSlice/constants.ts
 var READ_STATES = {
   read: "read",
   seen: "seen",
@@ -771,39 +517,43 @@ var READ_STATES = {
 // src/utils.ts
 var import_helpers = require("@northern.tech/utils/helpers");
 var filterProcessors = {
-  [DEVICE_FILTERING_OPTIONS.$gt.key]: (val) => Number(val) || val,
-  [DEVICE_FILTERING_OPTIONS.$gte.key]: (val) => Number(val) || val,
-  [DEVICE_FILTERING_OPTIONS.$lt.key]: (val) => Number(val) || val,
-  [DEVICE_FILTERING_OPTIONS.$lte.key]: (val) => Number(val) || val,
-  [DEVICE_FILTERING_OPTIONS.$ltne.key]: (val) => Number(val) || val,
-  [DEVICE_FILTERING_OPTIONS.$in.key]: (val) => ("" + val).split(",").map((i) => i.trim()),
-  [DEVICE_FILTERING_OPTIONS.$nin.key]: (val) => ("" + val).split(",").map((i) => i.trim()),
-  [DEVICE_FILTERING_OPTIONS.$exists.key]: import_helpers.yes,
-  [DEVICE_FILTERING_OPTIONS.$nexists.key]: () => false
+  [import_constants2.DEVICE_FILTERING_OPTIONS.$gt.key]: (val) => Number(val) || val,
+  [import_constants2.DEVICE_FILTERING_OPTIONS.$gte.key]: (val) => Number(val) || val,
+  [import_constants2.DEVICE_FILTERING_OPTIONS.$lt.key]: (val) => Number(val) || val,
+  [import_constants2.DEVICE_FILTERING_OPTIONS.$lte.key]: (val) => Number(val) || val,
+  [import_constants2.DEVICE_FILTERING_OPTIONS.$ltne.key]: (val) => Number(val) || val,
+  [import_constants2.DEVICE_FILTERING_OPTIONS.$in.key]: (val) => ("" + val).split(",").map((i) => i.trim()),
+  [import_constants2.DEVICE_FILTERING_OPTIONS.$nin.key]: (val) => ("" + val).split(",").map((i) => i.trim()),
+  [import_constants2.DEVICE_FILTERING_OPTIONS.$exists.key]: import_helpers.yes,
+  [import_constants2.DEVICE_FILTERING_OPTIONS.$nexists.key]: () => false
 };
 var filterAliases = {
-  $nexists: { alias: DEVICE_FILTERING_OPTIONS.$exists.key, value: false }
+  $nexists: { alias: import_constants2.DEVICE_FILTERING_OPTIONS.$exists.key, value: false }
 };
 var isDarkMode = (mode) => mode === DARK_MODE;
 
 // src/usersSlice/selectors.ts
-var import_toolkit = require("@reduxjs/toolkit");
+var emptyObject = {};
 var getRolesById = (state) => state.users.rolesById;
 var getTooltipsById = (state) => state.users.tooltips.byId;
 var getGlobalSettings = (state) => state.users.globalSettings;
+var getUserSettingsInitialized = (state) => state.users.settingsInitialized;
 var getCurrentUserId = (state) => state.users.currentUser;
 var getUsersById = (state) => state.users.byId;
 var getUsersList = (0, import_toolkit.createSelector)([getUsersById], (usersById) => Object.values(usersById));
-var getCurrentUser = (0, import_toolkit.createSelector)([getUsersById, getCurrentUserId], (usersById, userId) => usersById[userId] ?? {});
+var getCurrentUser = (0, import_toolkit.createSelector)(
+  [getUsersById, getCurrentUserId],
+  (usersById, userId) => userId ? usersById[userId] ?? emptyObject : emptyObject
+);
 var getUserSettings = (state) => state.users.userSettings;
 var getSelectedDeviceAttribute = (0, import_toolkit.createSelector)(
   [getUserSettings],
   ({ columnSelection }) => columnSelection.map((attribute) => ({ attribute: attribute.key, scope: attribute.scope }))
 );
 var getIsDarkMode = (0, import_toolkit.createSelector)([getUserSettings], ({ mode }) => isDarkMode(mode));
-var getShowHelptips = (0, import_toolkit.createSelector)(
+var getReadAllHelptips = (0, import_toolkit.createSelector)(
   [getTooltipsById],
-  (tooltips) => Object.values(tooltips).reduce((accu, { readState }) => accu || readState === READ_STATES.unread, false)
+  (tooltips) => Object.values(tooltips).every(({ readState }) => readState === READ_STATES.read)
 );
 var getTooltipsState = (0, import_toolkit.createSelector)(
   [getTooltipsById, getUserSettings],
@@ -817,7 +567,7 @@ var getTooltipsState = (0, import_toolkit.createSelector)(
 );
 var getHas2FA = (0, import_toolkit.createSelector)(
   [getCurrentUser],
-  (currentUser) => currentUser.hasOwnProperty("tfa_status") && currentUser.tfa_status === twoFAStates.enabled
+  (currentUser) => currentUser.hasOwnProperty("tfa_status") && currentUser.tfa_status === import_constants2.twoFAStates.enabled
 );
 var getIdAttribute = (0, import_toolkit.createSelector)([getGlobalSettings], ({ id_attribute = { ...defaultIdAttribute } }) => id_attribute);
 var getOfflineThresholdSettings = (0, import_toolkit.createSelector)([getGlobalSettings], ({ offlineThreshold }) => ({
@@ -826,6 +576,7 @@ var getOfflineThresholdSettings = (0, import_toolkit.createSelector)([getGlobalS
 }));
 var getRolesList = (0, import_toolkit.createSelector)([getRolesById], (rolesById2) => Object.entries(rolesById2).map(([value, role]) => ({ value, ...role })));
 var getCurrentSession = (state) => state.users.currentSession;
+var getRolesInitialized = (state) => state.users.rolesInitialized;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   getCurrentSession,
@@ -835,13 +586,15 @@ var getCurrentSession = (state) => state.users.currentSession;
   getIdAttribute,
   getIsDarkMode,
   getOfflineThresholdSettings,
+  getReadAllHelptips,
   getRolesById,
+  getRolesInitialized,
   getRolesList,
   getSelectedDeviceAttribute,
-  getShowHelptips,
   getTooltipsById,
   getTooltipsState,
   getUserSettings,
+  getUserSettingsInitialized,
   getUsersById,
   getUsersList
 });