@oneclick.dev/cms-core-modules 0.0.122 → 0.0.124

package/dist/UserDetail-DpUL3mhk.mjs

@@ -0,0 +1,1483 @@
+import { defineComponent as Ye, ref as h, computed as b, watch as Dt, resolveComponent as u, openBlock as n, createBlock as d, withCtx as l, createVNode as t, createTextVNode as o, createElementVNode as s, toDisplayString as p, unref as r, withKeys as Rt, withModifiers as Qe, createElementBlock as g, createCommentVNode as c, reactive as je, onMounted as Mt, Fragment as L, normalizeClass as It, renderList as Oe } from "vue";
+import { t as E } from "./index-RLz1QPrf.mjs";
+import { AlertTriangle as We, Loader2 as Ze, Trash2 as et, ShieldAlert as be, ArrowLeft as Ke, ShieldCheck as Tt, ShieldX as Et, Ellipsis as zt, KeyRound as Ge, Fingerprint as He, AlertCircle as ne, RefreshCw as Pt, Clipboard as $t, UserRound as Bt, Plus as qe, Check as Lt, Save as Je } from "lucide-vue-next";
+import { useModule as jt, useModuleApi as Ot, useModuleRoute as Wt, useModulePermissions as Kt, useModuleBreadcrumbs as Gt } from "@oneclick.dev/cms-kit";
+import { h as Ht, p as qt, g as Jt, _ as Xe, a as Xt, b as Fe, c as Yt, u as ye, d as ge, f as Qt, e as Se, m as Zt } from "./types-9N-DKxNj.mjs";
+const el = { class: "break-all font-mono" }, tl = { class: "space-y-4 py-5" }, ll = { class: "space-y-2" }, sl = { class: "space-y-2" }, al = { class: "break-all font-mono text-foreground" }, ol = {
+  key: 0,
+  class: "text-xs text-destructive"
+}, il = /* @__PURE__ */ Ye({
+  __name: "DeleteUserDialog",
+  props: {
+    open: { type: Boolean },
+    uid: {},
+    email: { default: null },
+    busy: { type: Boolean, default: !1 },
+    error: { default: "" }
+  },
+  emits: ["update:open", "confirm"],
+  setup(A, { emit: le }) {
+    const H = A, _ = le, C = h(""), z = h(""), j = b(() => z.value === H.uid), F = b(() => j.value && C.value.trim().length >= 3 && !H.busy);
+    Dt(() => H.open, (P) => {
+      P && (C.value = "", z.value = "");
+    });
+    function a() {
+      H.busy || _("update:open", !1);
+    }
+    function q() {
+      F.value && _("confirm", {
+        reason: C.value.trim(),
+        confirmation: z.value
+      });
+    }
+    return (P, v) => {
+      const J = u("ResponsiveModalTitle"), se = u("ResponsiveModalDescription"), ae = u("ResponsiveModalHeader"), D = u("AlertTitle"), w = u("AlertDescription"), O = u("Alert"), S = u("Label"), X = u("Textarea"), Y = u("Input"), W = u("Button"), K = u("ResponsiveModalFooter"), m = u("ResponsiveModalScrollContent"), x = u("ResponsiveModal");
+      return n(), d(x, {
+        open: A.open,
+        "onUpdate:open": v[2] || (v[2] = (R) => _("update:open", R))
+      }, {
+        default: l(() => [
+          t(m, { class: "sm:max-w-lg" }, {
+            default: l(() => [
+              t(ae, null, {
+                default: l(() => [
+                  t(J, null, {
+                    default: l(() => [...v[3] || (v[3] = [
+                      o("Delete Firebase Authentication user", -1)
+                    ])]),
+                    _: 1
+                  }),
+                  t(se, { class: "break-words" }, {
+                    default: l(() => [
+                      v[4] || (v[4] = o(" This permanently removes the sign-in identity for ", -1)),
+                      s("span", el, p(A.email || A.uid), 1),
+                      v[5] || (v[5] = o(". ", -1))
+                    ]),
+                    _: 1
+                  })
+                ]),
+                _: 1
+              }),
+              s("div", tl, [
+                t(O, { variant: "destructive" }, {
+                  default: l(() => [
+                    t(r(We)),
+                    t(D, null, {
+                      default: l(() => [...v[6] || (v[6] = [
+                        o("The linked Firestore profile will be kept", -1)
+                      ])]),
+                      _: 1
+                    }),
+                    t(w, null, {
+                      default: l(() => [...v[7] || (v[7] = [
+                        o(" This action deletes only the Firebase Authentication user. Profile documents, subcollections, and related application data are not removed. With profile linking enabled, this module blocks custom-UID reuse when it finds the retained profile. ", -1)
+                      ])]),
+                      _: 1
+                    })
+                  ]),
+                  _: 1
+                }),
+                s("div", ll, [
+                  t(S, { for: "firebase-delete-reason" }, {
+                    default: l(() => [...v[8] || (v[8] = [
+                      o("Reason", -1)
+                    ])]),
+                    _: 1
+                  }),
+                  t(X, {
+                    id: "firebase-delete-reason",
+                    modelValue: C.value,
+                    "onUpdate:modelValue": v[0] || (v[0] = (R) => C.value = R),
+                    rows: "3",
+                    maxlength: "500",
+                    placeholder: "Why must this authentication user be deleted?",
+                    disabled: A.busy
+                  }, null, 8, ["modelValue", "disabled"]),
+                  v[9] || (v[9] = s("p", { class: "text-xs text-muted-foreground" }, "At least 3 characters; required for the Studio activity record.", -1))
+                ]),
+                s("div", sl, [
+                  t(S, {
+                    for: "firebase-delete-confirmation",
+                    class: "block break-words leading-5"
+                  }, {
+                    default: l(() => [
+                      v[10] || (v[10] = o(" Type the exact UID ", -1)),
+                      s("span", al, p(A.uid), 1),
+                      v[11] || (v[11] = o(" to confirm ", -1))
+                    ]),
+                    _: 1
+                  }),
+                  t(Y, {
+                    id: "firebase-delete-confirmation",
+                    modelValue: z.value,
+                    "onUpdate:modelValue": v[1] || (v[1] = (R) => z.value = R),
+                    autocomplete: "off",
+                    placeholder: A.uid,
+                    disabled: A.busy,
+                    onKeydown: Rt(Qe(q, ["prevent"]), ["enter"])
+                  }, null, 8, ["modelValue", "placeholder", "disabled", "onKeydown"]),
+                  z.value && !j.value ? (n(), g("p", ol, " Enter the exact Firebase UID. ")) : c("", !0)
+                ]),
+                A.error ? (n(), d(O, {
+                  key: 0,
+                  variant: "destructive"
+                }, {
+                  default: l(() => [
+                    t(r(We)),
+                    t(D, null, {
+                      default: l(() => [...v[12] || (v[12] = [
+                        o("Deletion failed", -1)
+                      ])]),
+                      _: 1
+                    }),
+                    t(w, null, {
+                      default: l(() => [
+                        o(p(A.error), 1)
+                      ]),
+                      _: 1
+                    })
+                  ]),
+                  _: 1
+                })) : c("", !0)
+              ]),
+              t(K, { class: "gap-2 sm:justify-end" }, {
+                default: l(() => [
+                  t(W, {
+                    variant: "outline",
+                    disabled: A.busy,
+                    onClick: a
+                  }, {
+                    default: l(() => [...v[13] || (v[13] = [
+                      o("Cancel", -1)
+                    ])]),
+                    _: 1
+                  }, 8, ["disabled"]),
+                  t(W, {
+                    variant: "destructive",
+                    disabled: !F.value,
+                    onClick: q
+                  }, {
+                    default: l(() => [
+                      A.busy ? (n(), d(r(Ze), {
+                        key: 0,
+                        class: "size-4 animate-spin"
+                      })) : (n(), d(r(et), {
+                        key: 1,
+                        class: "size-4"
+                      })),
+                      o(" " + p(A.busy ? "Deleting…" : "Delete Auth user"), 1)
+                    ]),
+                    _: 1
+                  }, 8, ["disabled"])
+                ]),
+                _: 1
+              })
+            ]),
+            _: 1
+          })
+        ]),
+        _: 1
+      }, 8, ["open"]);
+    };
+  }
+}), nl = { class: "mx-auto flex w-full max-w-6xl flex-1 flex-col px-4 py-6 pb-28 sm:px-6 sm:py-10 lg:px-8" }, rl = {
+  key: 0,
+  class: "flex min-h-96 items-center justify-center rounded-xl border border-dashed p-8"
+}, ul = { class: "max-w-md text-center" }, dl = { class: "mx-auto flex size-11 items-center justify-center rounded-full bg-muted" }, ml = { class: "mt-4 font-semibold" }, fl = { class: "flex flex-col gap-5 sm:flex-row sm:items-start sm:justify-between" }, pl = { class: "flex min-w-0 items-start gap-3" }, vl = { class: "min-w-0" }, cl = { class: "flex flex-wrap items-center gap-2" }, bl = { class: "truncate text-2xl font-semibold tracking-tight sm:text-3xl" }, yl = { class: "mt-1 truncate text-sm text-muted-foreground" }, gl = {
+  key: 0,
+  class: "flex w-full flex-wrap gap-2 sm:w-auto sm:justify-end"
+}, xl = {
+  key: 2,
+  class: "mt-8 grid gap-5 @4xl:grid-cols-[minmax(0,2fr)_minmax(18rem,1fr)]"
+}, kl = { class: "space-y-5" }, _l = { class: "space-y-5" }, wl = { class: "grid gap-5 @4xl:grid-cols-[minmax(0,2fr)_minmax(18rem,1fr)]" }, hl = { class: "space-y-5" }, Cl = { class: "space-y-2 sm:col-span-2" }, Vl = { class: "space-y-2 sm:col-span-2" }, Al = { class: "space-y-2" }, Nl = { class: "space-y-2" }, Fl = { class: "space-y-2 sm:col-span-2" }, Sl = { class: "space-y-2" }, Ul = {
+  key: 0,
+  class: "grid gap-5 sm:grid-cols-2"
+}, Dl = { class: "space-y-2 sm:col-span-2" }, Rl = { class: "space-y-2" }, Ml = { class: "space-y-2" }, Il = {
+  key: 1,
+  class: "grid gap-4 sm:grid-cols-2"
+}, Tl = { class: "rounded-lg border p-4 sm:col-span-2" }, El = { class: "mt-1 break-words text-sm font-medium" }, zl = { class: "rounded-lg border p-4" }, Pl = { class: "mt-1 break-words text-sm font-medium" }, $l = { class: "rounded-lg border p-4" }, Bl = { class: "mt-1 break-words text-sm font-medium" }, Ll = {
+  key: 3,
+  class: "flex items-start justify-between gap-4 rounded-lg border p-4"
+}, jl = {
+  key: 4,
+  class: "space-y-2 border-t pt-5"
+}, Ol = { class: "rounded-lg border p-4" }, Wl = { class: "text-xs text-muted-foreground" }, Kl = { class: "mt-1 break-words text-sm font-medium" }, Gl = { class: "rounded-lg border p-4" }, Hl = { class: "text-xs text-muted-foreground" }, ql = { class: "mt-1 break-words text-sm font-medium" }, Jl = { class: "rounded-lg border p-4" }, Xl = { class: "text-xs text-muted-foreground" }, Yl = { class: "mt-1 break-words text-sm font-medium" }, Ql = { class: "rounded-lg border p-4" }, Zl = { class: "text-xs text-muted-foreground" }, es = { class: "mt-1 break-words text-sm font-medium" }, ts = { class: "space-y-5" }, ls = { class: "flex items-start justify-between gap-4 rounded-lg border p-4" }, ss = { class: "flex items-start justify-between gap-4 rounded-lg border p-4" }, as = {
+  key: 0,
+  class: "flex cursor-pointer items-start gap-3 rounded-lg border p-4"
+}, os = { class: "flex items-center justify-between gap-3" }, is = {
+  key: 0,
+  class: "flex items-center justify-between gap-3"
+}, ns = { class: "flex items-center justify-between gap-3" }, rs = { class: "text-sm font-medium" }, us = { class: "mt-2 flex flex-wrap gap-1.5" }, ds = {
+  key: 0,
+  class: "text-sm text-muted-foreground"
+}, ms = { class: "space-y-3 text-sm" }, fs = { class: "mt-1" }, ps = { class: "mt-1" }, vs = { class: "mt-1" }, cs = {
+  key: 1,
+  class: "grid gap-2 border-t pt-4"
+}, bs = {
+  key: 0,
+  class: "space-y-2"
+}, ys = {
+  key: 1,
+  class: "sticky bottom-4 z-20 mt-6 flex items-center justify-between gap-4 rounded-xl border bg-background/90 p-3 shadow-lg backdrop-blur"
+}, gs = { class: "hidden text-sm text-muted-foreground sm:block" }, xe = "none", Cs = /* @__PURE__ */ Ye({
+  __name: "UserDetail",
+  setup(A) {
+    function le(i) {
+      return i === null ? xe : `role:${JSON.stringify(i)}`;
+    }
+    function H(i) {
+      if (i === xe || !i.startsWith("role:")) return null;
+      try {
+        const e = JSON.parse(i.slice(5));
+        return typeof e == "string" ? e : null;
+      } catch {
+        return null;
+      }
+    }
+    const { config: _ } = jt(), C = Ot(), { params: z, navigateTo: j } = Wt(), { hasPermission: F } = Kt(), a = h(null), q = h(!1), P = h(""), v = h(!1), J = h(""), se = h(""), ae = h(""), D = h(""), w = h(null), O = h(!1), S = h(""), X = h(!1), Y = h(!1), W = h(""), K = h(xe), m = je({
+      email: "",
+      password: "",
+      uid: "",
+      displayName: "",
+      phoneNumber: "",
+      emailVerified: !1,
+      disabled: !1,
+      createProfile: !1
+    }), x = je({
+      displayName: "",
+      email: "",
+      phoneNumber: "",
+      emailVerified: !1
+    }), R = b(() => String(z.value?.uid || "")), y = b(() => R.value.length === 0), ke = b(() => {
+      if (y.value) return "";
+      try {
+        return Ht(R.value);
+      } catch {
+        return "";
+      }
+    }), _e = b(() => F("view-auth-users")), U = b(() => F("view-auth-user-pii")), tt = b(() => F("create-auth-users")), oe = b(() => F("edit-auth-users") && U.value), lt = b(() => F("manage-auth-status")), re = b(() => F("manage-auth-sessions")), ue = b(() => F("manage-auth-mfa")), Ue = b(() => F("manage-auth-roles")), De = b(() => F("manage-auth-profiles")), st = b(() => F("delete-auth-users")), at = b(() => y.value ? tt.value : _e.value), we = b(() => !!(_.linkFirestoreProfiles && De.value));
+    m.createProfile = we.value;
+    const ot = b(() => qt(_.roleOptions)), Re = b(() => {
+      const i = [...ot.value];
+      return a.value?.role && !i.includes(a.value.role) && i.unshift(a.value.role), i;
+    }), it = b(() => !!(_.manageRoleClaim && _.roleClaimKey)), he = b(() => y.value ? "New Firebase user" : a.value ? U.value ? a.value.displayName || a.value.email || a.value.phoneNumber || "Unnamed user" : `User ${a.value.uid.slice(0, 8)}` : ke.value), Me = b(() => a.value ? U.value && (a.value.email || a.value.phoneNumber) || a.value.uid : ke.value), Ce = b(() => x.displayName.trim() || null), ie = b(() => x.phoneNumber.trim() || null), G = b(() => x.email.trim()), de = b(() => !a.value || y.value ? !1 : Ce.value !== (a.value.displayName || null) || G.value !== (a.value.email || "") || ie.value !== (a.value.phoneNumber || null) || x.emailVerified !== a.value.emailVerified), Ve = b(() => m.email.trim() ? /^\S+@\S+\.\S+$/.test(m.email.trim()) ? m.password.length < 8 ? "Password must contain at least 8 characters." : m.uid && m.uid !== m.uid.trim() ? "Custom UID may not begin or end with whitespace." : m.uid.length > 128 ? "Custom UID may not exceed 128 characters." : m.phoneNumber.trim() && !/^\+[1-9]\d{6,14}$/.test(m.phoneNumber.trim()) ? "Phone number must use E.164 format, for example +32470000000." : "" : "Enter a valid email address." : "Email is required."), Ae = b(() => a.value ? a.value.email && !G.value ? "An existing email address cannot be cleared here." : G.value && !/^\S+@\S+\.\S+$/.test(G.value) ? "Enter a valid email address." : ie.value && !/^\+[1-9]\d{6,14}$/.test(ie.value) ? "Phone number must use E.164 format, for example +32470000000." : x.emailVerified && !G.value ? "An email address is required before it can be marked verified." : "" : ""), Ie = b(() => v.value ? !0 : y.value ? !!Ve.value : !oe.value || !de.value || !!Ae.value || D.value.trim().length < 3);
+    Gt(() => [
+      { text: y.value ? "New Firebase user" : he.value }
+    ]);
+    function me(i) {
+      a.value = i, x.displayName = i.displayName || "", x.email = i.email || "", x.phoneNumber = i.phoneNumber || "", x.emailVerified = i.emailVerified, K.value = le(i.role);
+    }
+    function fe(i) {
+      Zt(i) && (se.value = "The account change completed, but Studio could not confirm that its activity entry was recorded.", E.warning("Action completed without a confirmed activity entry"));
+    }
+    function nt(i) {
+      !("user" in i) || !i.profileError || (ae.value = i.profileError, E.warning("User created, but the linked profile failed"));
+    }
+    async function Te() {
+      if (!(y.value || !_e.value)) {
+        if (!ke.value) {
+          P.value = "This Firebase user link is invalid.";
+          return;
+        }
+        q.value = !0, P.value = "";
+        try {
+          const i = await C.get(`/users/${R.value}`);
+          me(ye(i));
+        } catch (i) {
+          P.value = ge(i, "This Firebase Authentication user could not be loaded.");
+        } finally {
+          q.value = !1;
+        }
+      }
+    }
+    function rt() {
+      if (!a.value) throw new Error("No user is loaded.");
+      const i = { reason: D.value.trim() };
+      return Ce.value !== (a.value.displayName || null) && (i.displayName = Ce.value), G.value !== (a.value.email || "") && (i.email = G.value), ie.value !== (a.value.phoneNumber || null) && (i.phoneNumber = ie.value), x.emailVerified !== a.value.emailVerified && (i.emailVerified = x.emailVerified), i;
+    }
+    async function ut() {
+      if (!Ie.value) {
+        v.value = !0, J.value = "";
+        try {
+          if (y.value) {
+            const i = {
+              email: m.email.trim(),
+              password: m.password,
+              emailVerified: m.emailVerified,
+              disabled: m.disabled,
+              createProfile: !!(we.value && m.createProfile)
+            };
+            m.uid && (i.uid = m.uid), m.displayName.trim() && (i.displayName = m.displayName.trim()), m.phoneNumber.trim() && (i.phoneNumber = m.phoneNumber.trim());
+            const e = await C.post("/users", { body: i }), k = ye(e);
+            me(k), m.password = "", E.success("Firebase user created"), fe(e), nt(e), j(Qt(k.uid));
+          } else if (a.value) {
+            const i = await C.patch(
+              `/users/${Se(a.value.uid)}`,
+              { body: rt() }
+            );
+            me(ye(i)), D.value = "", E.success("User identity updated"), fe(i);
+          }
+        } catch (i) {
+          J.value = ge(i, y.value ? "The Firebase user could not be created." : "The Firebase identity could not be updated.");
+        } finally {
+          v.value = !1;
+        }
+      }
+    }
+    async function dt() {
+      if (a.value)
+        try {
+          await navigator.clipboard.writeText(a.value.uid), E.success("UID copied");
+        } catch {
+          E.error("UID could not be copied");
+        }
+    }
+    function mt() {
+      if (!a.value) return;
+      const i = a.value.disabled;
+      w.value = {
+        kind: "status",
+        disabled: !i,
+        title: i ? "Restore sign-in" : "Suspend sign-in",
+        description: i ? "This user will be allowed to authenticate with the connected Firebase project again." : "This user will no longer be able to sign in or refresh their Firebase session.",
+        confirmLabel: i ? "Restore sign-in" : "Suspend sign-in",
+        destructive: !i
+      }, S.value = "";
+    }
+    function Ee() {
+      w.value = {
+        kind: "sessions",
+        title: "Revoke all sessions",
+        description: "All Firebase refresh tokens will be revoked. Existing ID tokens can remain valid until they expire unless the connected app checks revocation.",
+        confirmLabel: "Revoke sessions",
+        destructive: !0
+      }, S.value = "";
+    }
+    function ze() {
+      w.value = {
+        kind: "mfa",
+        title: "Reset multi-factor authentication",
+        description: "Every enrolled second factor will be removed. The user must enroll MFA again in the connected application.",
+        confirmLabel: "Reset MFA",
+        destructive: !0
+      }, S.value = "";
+    }
+    function ft() {
+      const i = H(K.value);
+      w.value = {
+        kind: "role",
+        role: i,
+        title: i ? `Assign ${i} role` : "Remove role claim",
+        description: i ? `The ${_.roleClaimKey} custom claim will be changed to “${i}”. Existing sessions may not see the change until their token refreshes.` : `The ${_.roleClaimKey} custom claim will be removed. Existing sessions may not see the change until their token refreshes.`,
+        confirmLabel: i ? "Change role" : "Remove role",
+        destructive: !i
+      }, S.value = "";
+    }
+    function pt() {
+      w.value = {
+        kind: "profile",
+        title: "Create linked Firestore profile",
+        description: `A new document will be created in ${_.profileCollection || "the configured profile collection"} using this Firebase UID. Existing data is never overwritten.`,
+        confirmLabel: "Create profile"
+      }, S.value = "";
+    }
+    function Pe(i) {
+      i || (w.value = null, S.value = "");
+    }
+    async function vt(i) {
+      if (!w.value || !a.value || O.value) return;
+      const e = w.value, k = Se(a.value.uid);
+      O.value = !0, S.value = "";
+      try {
+        let V;
+        e.kind === "status" ? V = await C.post(`/users/${k}/status`, {
+          body: { disabled: !!e.disabled, reason: i }
+        }) : e.kind === "sessions" ? V = await C.post(`/users/${k}/revoke-sessions`, { body: { reason: i } }) : e.kind === "mfa" ? V = await C.post(`/users/${k}/reset-mfa`, { body: { reason: i } }) : e.kind === "role" ? V = await C.post(`/users/${k}/role`, { body: { role: e.role ?? null, reason: i } }) : V = await C.post(`/users/${k}/profile`, { body: { reason: i } }), me(ye(V));
+        const pe = {
+          status: a.value.disabled ? "Sign-in suspended" : "Sign-in restored",
+          sessions: "Sessions revoked",
+          mfa: "Multi-factor authentication reset",
+          role: "Role claim updated",
+          profile: "user" in V && V.profileCreated === !1 ? "Linked profile already exists; state refreshed" : "Linked profile created"
+        };
+        e.kind === "profile" && "user" in V && V.profileCreated === !1 ? E.info(pe[e.kind]) : E.success(pe[e.kind]), fe(V), Pe(!1);
+      } catch (V) {
+        S.value = ge(V, "The account action could not be completed.");
+      } finally {
+        O.value = !1;
+      }
+    }
+    function ct() {
+      W.value = "", X.value = !0;
+    }
+    async function bt(i) {
+      if (!(!a.value || Y.value)) {
+        Y.value = !0, W.value = "";
+        try {
+          const e = await C.del(
+            `/users/${Se(a.value.uid)}`,
+            { body: i }
+          );
+          E.success("Firebase Authentication user deleted"), fe(e), X.value = !1, j("");
+        } catch (e) {
+          W.value = ge(e, "The Firebase Authentication user could not be deleted.");
+        } finally {
+          Y.value = !1;
+        }
+      }
+    }
+    return Mt(() => {
+      !y.value && _e.value && Te();
+    }), (i, e) => {
+      const k = u("Button"), V = u("AvatarImage"), pe = u("AvatarFallback"), yt = u("Avatar"), gt = u("DropdownMenuTrigger"), $e = u("DropdownMenuItem"), xt = u("DropdownMenuContent"), kt = u("DropdownMenu"), M = u("AlertTitle"), I = u("AlertDescription"), T = u("Alert"), ve = u("Skeleton"), Q = u("CardTitle"), Z = u("CardDescription"), ee = u("CardHeader"), N = u("Label"), $ = u("Input"), B = u("CardContent"), _t = u("InputGroupInput"), wt = u("InputGroupButton"), ht = u("InputGroupAddon"), Ct = u("InputGroup"), Ne = u("Switch"), Vt = u("Textarea"), te = u("Card"), ce = u("Badge"), At = u("Checkbox"), Be = u("Separator"), Nt = u("SelectValue"), Ft = u("SelectTrigger"), Le = u("SelectItem"), St = u("SelectContent"), Ut = u("Select");
+      return n(), g("main", nl, [
+        at.value ? (n(), g(L, { key: 1 }, [
+          s("header", fl, [
+            s("div", pl, [
+              t(k, {
+                variant: "ghost",
+                size: "icon",
+                class: "mt-0.5 shrink-0",
+                "aria-label": "Back to Firebase users",
+                onClick: e[1] || (e[1] = (f) => r(j)(""))
+              }, {
+                default: l(() => [
+                  t(r(Ke), { class: "size-4" })
+                ]),
+                _: 1
+              }),
+              a.value && !y.value ? (n(), d(yt, {
+                key: 0,
+                class: "size-11 shrink-0"
+              }, {
+                default: l(() => [
+                  U.value && a.value.photoURL ? (n(), d(V, {
+                    key: 0,
+                    src: a.value.photoURL,
+                    alt: he.value
+                  }, null, 8, ["src", "alt"])) : c("", !0),
+                  t(pe, null, {
+                    default: l(() => [
+                      o(p(U.value ? r(Jt)(a.value) : "U"), 1)
+                    ]),
+                    _: 1
+                  })
+                ]),
+                _: 1
+              })) : c("", !0),
+              s("div", vl, [
+                s("div", cl, [
+                  s("h1", bl, p(he.value), 1),
+                  a.value && !y.value ? (n(), d(Xe, {
+                    key: 0,
+                    disabled: a.value.disabled
+                  }, null, 8, ["disabled"])) : c("", !0)
+                ]),
+                s("p", yl, p(y.value ? "Create an Authentication identity and optional linked profile." : Me.value), 1)
+              ])
+            ]),
+            a.value && !y.value ? (n(), g("div", gl, [
+              lt.value ? (n(), d(k, {
+                key: 0,
+                variant: a.value.disabled ? "default" : "outline",
+                class: "flex-1 sm:flex-none",
+                onClick: mt
+              }, {
+                default: l(() => [
+                  a.value.disabled ? (n(), d(r(Tt), {
+                    key: 0,
+                    class: "size-4"
+                  })) : (n(), d(r(Et), {
+                    key: 1,
+                    class: "size-4"
+                  })),
+                  o(" " + p(a.value.disabled ? "Restore sign-in" : "Suspend sign-in"), 1)
+                ]),
+                _: 1
+              }, 8, ["variant"])) : c("", !0),
+              re.value || ue.value && a.value.mfaFactorCount > 0 ? (n(), d(kt, { key: 1 }, {
+                default: l(() => [
+                  t(gt, { "as-child": "" }, {
+                    default: l(() => [
+                      t(k, {
+                        variant: "outline",
+                        size: "icon",
+                        "aria-label": "More account actions"
+                      }, {
+                        default: l(() => [
+                          t(r(zt), { class: "size-4" })
+                        ]),
+                        _: 1
+                      })
+                    ]),
+                    _: 1
+                  }),
+                  t(xt, {
+                    align: "end",
+                    class: "w-60"
+                  }, {
+                    default: l(() => [
+                      re.value ? (n(), d($e, {
+                        key: 0,
+                        onClick: Ee
+                      }, {
+                        default: l(() => [
+                          t(r(Ge), { class: "size-4" }),
+                          e[19] || (e[19] = o(" Revoke sessions ", -1))
+                        ]),
+                        _: 1
+                      })) : c("", !0),
+                      ue.value && a.value.mfaFactorCount > 0 ? (n(), d($e, {
+                        key: 1,
+                        variant: "destructive",
+                        onClick: ze
+                      }, {
+                        default: l(() => [
+                          t(r(He), { class: "size-4" }),
+                          e[20] || (e[20] = o(" Reset MFA ", -1))
+                        ]),
+                        _: 1
+                      })) : c("", !0)
+                    ]),
+                    _: 1
+                  })
+                ]),
+                _: 1
+              })) : c("", !0)
+            ])) : c("", !0)
+          ]),
+          se.value ? (n(), d(T, {
+            key: 0,
+            class: "mt-6 border-amber-400/60 bg-amber-50 dark:border-amber-800/70 dark:bg-amber-950/30"
+          }, {
+            default: l(() => [
+              t(r(be)),
+              t(M, null, {
+                default: l(() => [...e[21] || (e[21] = [
+                  o("Activity entry confirmation missing", -1)
+                ])]),
+                _: 1
+              }),
+              t(I, null, {
+                default: l(() => [
+                  o(p(se.value), 1)
+                ]),
+                _: 1
+              })
+            ]),
+            _: 1
+          })) : c("", !0),
+          ae.value ? (n(), d(T, {
+            key: 1,
+            class: "mt-6 border-amber-400/60 bg-amber-50 dark:border-amber-800/70 dark:bg-amber-950/30"
+          }, {
+            default: l(() => [
+              t(r(ne)),
+              t(M, null, {
+                default: l(() => [...e[22] || (e[22] = [
+                  o("Linked profile was not created", -1)
+                ])]),
+                _: 1
+              }),
+              t(I, null, {
+                default: l(() => [
+                  o(p(ae.value), 1)
+                ]),
+                _: 1
+              })
+            ]),
+            _: 1
+          })) : c("", !0),
+          q.value ? (n(), g("section", xl, [
+            s("div", kl, [
+              t(ve, { class: "h-96 w-full rounded-xl" }),
+              t(ve, { class: "h-64 w-full rounded-xl" })
+            ]),
+            s("div", _l, [
+              t(ve, { class: "h-72 w-full rounded-xl" }),
+              t(ve, { class: "h-56 w-full rounded-xl" })
+            ])
+          ])) : P.value ? (n(), d(T, {
+            key: 3,
+            variant: "destructive",
+            class: "mt-8"
+          }, {
+            default: l(() => [
+              t(r(ne)),
+              t(M, null, {
+                default: l(() => [...e[23] || (e[23] = [
+                  o("Could not load this user", -1)
+                ])]),
+                _: 1
+              }),
+              t(I, { class: "flex flex-col items-start gap-3 sm:flex-row sm:items-center sm:justify-between" }, {
+                default: l(() => [
+                  s("span", null, p(P.value), 1),
+                  t(k, {
+                    variant: "outline",
+                    size: "sm",
+                    onClick: Te
+                  }, {
+                    default: l(() => [
+                      t(r(Pt), { class: "size-4" }),
+                      e[24] || (e[24] = o(" Try again ", -1))
+                    ]),
+                    _: 1
+                  })
+                ]),
+                _: 1
+              })
+            ]),
+            _: 1
+          })) : y.value || a.value ? (n(), g("form", {
+            key: 4,
+            id: "firebase-auth-user-form",
+            class: "mt-8",
+            onSubmit: Qe(ut, ["prevent"])
+          }, [
+            s("div", wl, [
+              s("div", hl, [
+                t(te, null, {
+                  default: l(() => [
+                    t(ee, null, {
+                      default: l(() => [
+                        t(Q, null, {
+                          default: l(() => [...e[25] || (e[25] = [
+                            o("Identity", -1)
+                          ])]),
+                          _: 1
+                        }),
+                        t(Z, null, {
+                          default: l(() => [
+                            o(p(y.value ? "Create the primary Firebase Authentication record." : "Authentication-owned identity fields."), 1)
+                          ]),
+                          _: 1
+                        })
+                      ]),
+                      _: 1
+                    }),
+                    y.value ? (n(), d(B, {
+                      key: 0,
+                      class: "grid gap-5 sm:grid-cols-2"
+                    }, {
+                      default: l(() => [
+                        s("div", Cl, [
+                          t(N, { for: "firebase-create-email" }, {
+                            default: l(() => [...e[26] || (e[26] = [
+                              o("Email", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t($, {
+                            id: "firebase-create-email",
+                            modelValue: m.email,
+                            "onUpdate:modelValue": e[2] || (e[2] = (f) => m.email = f),
+                            type: "email",
+                            autocomplete: "off",
+                            placeholder: "user@example.com",
+                            required: ""
+                          }, null, 8, ["modelValue"])
+                        ]),
+                        s("div", Vl, [
+                          t(N, { for: "firebase-create-password" }, {
+                            default: l(() => [...e[27] || (e[27] = [
+                              o("Initial password", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t($, {
+                            id: "firebase-create-password",
+                            modelValue: m.password,
+                            "onUpdate:modelValue": e[3] || (e[3] = (f) => m.password = f),
+                            type: "password",
+                            autocomplete: "new-password",
+                            minlength: "8",
+                            required: ""
+                          }, null, 8, ["modelValue"]),
+                          e[28] || (e[28] = s("p", { class: "text-xs text-muted-foreground" }, "At least 8 characters. It is submitted through Studio’s server to Firebase and is not returned in the response.", -1))
+                        ]),
+                        s("div", Al, [
+                          t(N, { for: "firebase-create-name" }, {
+                            default: l(() => [...e[29] || (e[29] = [
+                              o("Display name", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t($, {
+                            id: "firebase-create-name",
+                            modelValue: m.displayName,
+                            "onUpdate:modelValue": e[4] || (e[4] = (f) => m.displayName = f),
+                            autocomplete: "off",
+                            placeholder: "Optional"
+                          }, null, 8, ["modelValue"])
+                        ]),
+                        s("div", Nl, [
+                          t(N, { for: "firebase-create-phone" }, {
+                            default: l(() => [...e[30] || (e[30] = [
+                              o("Phone number", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t($, {
+                            id: "firebase-create-phone",
+                            modelValue: m.phoneNumber,
+                            "onUpdate:modelValue": e[5] || (e[5] = (f) => m.phoneNumber = f),
+                            type: "tel",
+                            autocomplete: "off",
+                            placeholder: "+32470000000"
+                          }, null, 8, ["modelValue"])
+                        ]),
+                        s("div", Fl, [
+                          t(N, { for: "firebase-create-uid" }, {
+                            default: l(() => [...e[31] || (e[31] = [
+                              o("Custom UID", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t($, {
+                            id: "firebase-create-uid",
+                            modelValue: m.uid,
+                            "onUpdate:modelValue": e[6] || (e[6] = (f) => m.uid = f),
+                            class: "font-mono",
+                            autocomplete: "off",
+                            placeholder: "Optional; Firebase generates one when blank"
+                          }, null, 8, ["modelValue"]),
+                          e[32] || (e[32] = s("p", { class: "text-xs leading-5 text-muted-foreground" }, " Preserved exactly. With profile linking enabled, this module blocks the UID when it finds an existing linked profile. ", -1))
+                        ])
+                      ]),
+                      _: 1
+                    })) : a.value ? (n(), d(B, {
+                      key: 1,
+                      class: "space-y-5"
+                    }, {
+                      default: l(() => [
+                        s("div", Sl, [
+                          t(N, { for: "firebase-user-uid" }, {
+                            default: l(() => [...e[33] || (e[33] = [
+                              o("Firebase UID", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t(Ct, null, {
+                            default: l(() => [
+                              t(_t, {
+                                id: "firebase-user-uid",
+                                "model-value": a.value.uid,
+                                class: "font-mono",
+                                readonly: ""
+                              }, null, 8, ["model-value"]),
+                              t(ht, { align: "inline-end" }, {
+                                default: l(() => [
+                                  t(wt, {
+                                    type: "button",
+                                    size: "icon-xs",
+                                    "aria-label": "Copy Firebase UID",
+                                    onClick: dt
+                                  }, {
+                                    default: l(() => [
+                                      t(r($t), { class: "size-3.5" })
+                                    ]),
+                                    _: 1
+                                  })
+                                ]),
+                                _: 1
+                              })
+                            ]),
+                            _: 1
+                          })
+                        ]),
+                        oe.value ? (n(), g("div", Ul, [
+                          s("div", Dl, [
+                            t(N, { for: "firebase-edit-name" }, {
+                              default: l(() => [...e[34] || (e[34] = [
+                                o("Display name", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            t($, {
+                              id: "firebase-edit-name",
+                              modelValue: x.displayName,
+                              "onUpdate:modelValue": e[7] || (e[7] = (f) => x.displayName = f),
+                              placeholder: "No display name"
+                            }, null, 8, ["modelValue"])
+                          ]),
+                          s("div", Rl, [
+                            t(N, { for: "firebase-edit-email" }, {
+                              default: l(() => [...e[35] || (e[35] = [
+                                o("Email", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            t($, {
+                              id: "firebase-edit-email",
+                              modelValue: x.email,
+                              "onUpdate:modelValue": e[8] || (e[8] = (f) => x.email = f),
+                              type: "email",
+                              placeholder: "No email"
+                            }, null, 8, ["modelValue"])
+                          ]),
+                          s("div", Ml, [
+                            t(N, { for: "firebase-edit-phone" }, {
+                              default: l(() => [...e[36] || (e[36] = [
+                                o("Phone number", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            t($, {
+                              id: "firebase-edit-phone",
+                              modelValue: x.phoneNumber,
+                              "onUpdate:modelValue": e[9] || (e[9] = (f) => x.phoneNumber = f),
+                              type: "tel",
+                              placeholder: "No phone number"
+                            }, null, 8, ["modelValue"])
+                          ])
+                        ])) : U.value ? (n(), g("dl", Il, [
+                          s("div", Tl, [
+                            e[37] || (e[37] = s("dt", { class: "text-xs text-muted-foreground" }, "Display name", -1)),
+                            s("dd", El, p(a.value.displayName || "—"), 1)
+                          ]),
+                          s("div", zl, [
+                            e[38] || (e[38] = s("dt", { class: "text-xs text-muted-foreground" }, "Email", -1)),
+                            s("dd", Pl, p(a.value.email || "—"), 1)
+                          ]),
+                          s("div", $l, [
+                            e[39] || (e[39] = s("dt", { class: "text-xs text-muted-foreground" }, "Phone number", -1)),
+                            s("dd", Bl, p(a.value.phoneNumber || "—"), 1)
+                          ])
+                        ])) : (n(), d(T, { key: 2 }, {
+                          default: l(() => [
+                            t(r(be)),
+                            t(M, null, {
+                              default: l(() => [...e[40] || (e[40] = [
+                                o("Personal data is hidden", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            t(I, null, {
+                              default: l(() => [...e[41] || (e[41] = [
+                                o("Ask for the View user personal data permission to see or edit identity fields.", -1)
+                              ])]),
+                              _: 1
+                            })
+                          ]),
+                          _: 1
+                        })),
+                        oe.value ? (n(), g("div", Ll, [
+                          s("div", null, [
+                            t(N, { for: "firebase-edit-verified" }, {
+                              default: l(() => [...e[42] || (e[42] = [
+                                o("Email verified", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            e[43] || (e[43] = s("p", { class: "mt-1 text-xs leading-5 text-muted-foreground" }, " Turning this on asserts email ownership without the user completing a verification flow. ", -1))
+                          ]),
+                          t(Ne, {
+                            id: "firebase-edit-verified",
+                            modelValue: x.emailVerified,
+                            "onUpdate:modelValue": e[10] || (e[10] = (f) => x.emailVerified = f),
+                            disabled: !x.email.trim()
+                          }, null, 8, ["modelValue", "disabled"])
+                        ])) : c("", !0),
+                        oe.value && de.value ? (n(), g("div", jl, [
+                          t(N, { for: "firebase-edit-reason" }, {
+                            default: l(() => [...e[44] || (e[44] = [
+                              o("Reason for identity changes", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t(Vt, {
+                            id: "firebase-edit-reason",
+                            modelValue: D.value,
+                            "onUpdate:modelValue": e[11] || (e[11] = (f) => D.value = f),
+                            rows: "3",
+                            maxlength: "500",
+                            placeholder: "Why is this identity being changed?"
+                          }, null, 8, ["modelValue"]),
+                          e[45] || (e[45] = s("p", { class: "text-xs text-muted-foreground" }, "At least 3 characters; required for the Studio activity record.", -1))
+                        ])) : c("", !0)
+                      ]),
+                      _: 1
+                    })) : c("", !0)
+                  ]),
+                  _: 1
+                }),
+                r(_).linkFirestoreProfiles && !y.value && a.value ? (n(), d(te, { key: 0 }, {
+                  default: l(() => [
+                    t(ee, null, {
+                      default: l(() => [
+                        t(Q, { class: "flex flex-wrap items-center gap-2" }, {
+                          default: l(() => [
+                            e[46] || (e[46] = o(" Linked Firestore profile ", -1)),
+                            t(ce, {
+                              variant: "outline",
+                              class: It(a.value.profile?.enabled && a.value.profile.exists ? "border-emerald-400/60 text-emerald-700 dark:text-emerald-300" : a.value.profile?.enabled ? "border-amber-400/60 text-amber-700 dark:text-amber-300" : "text-muted-foreground")
+                            }, {
+                              default: l(() => [
+                                o(p(a.value.profile?.enabled ? a.value.profile.exists ? "Linked" : "Missing" : "Unavailable"), 1)
+                              ]),
+                              _: 1
+                            }, 8, ["class"])
+                          ]),
+                          _: 1
+                        }),
+                        t(Z, null, {
+                          default: l(() => [
+                            e[47] || (e[47] = o(" Read-only mapped fields from ", -1)),
+                            s("code", null, p(r(_).profileCollection || "users"), 1),
+                            e[48] || (e[48] = o(". Unknown fields remain untouched. ", -1))
+                          ]),
+                          _: 1
+                        })
+                      ]),
+                      _: 1
+                    }),
+                    a.value.profile?.exists ? (n(), d(B, {
+                      key: 0,
+                      class: "grid gap-4 sm:grid-cols-2"
+                    }, {
+                      default: l(() => [
+                        s("div", Ol, [
+                          s("p", Wl, p(r(_).profileNameField || "Name"), 1),
+                          s("p", Kl, p(U.value ? a.value.profile.name || "—" : "Hidden"), 1)
+                        ]),
+                        s("div", Gl, [
+                          s("p", Hl, p(r(_).profileEmailField || "Email"), 1),
+                          s("p", ql, p(U.value ? a.value.profile.email || "—" : "Hidden"), 1)
+                        ]),
+                        s("div", Jl, [
+                          s("p", Xl, p(r(_).profileRoleField || "Role"), 1),
+                          s("p", Yl, p(U.value ? a.value.profile.role || "—" : "Hidden"), 1)
+                        ]),
+                        s("div", Ql, [
+                          s("p", Zl, p(r(_).profileStatusField || "Status"), 1),
+                          s("p", es, p(U.value ? a.value.profile.status || "—" : "Hidden"), 1)
+                        ])
+                      ]),
+                      _: 1
+                    })) : (n(), d(B, {
+                      key: 1,
+                      class: "flex flex-col items-start gap-4"
+                    }, {
+                      default: l(() => [
+                        a.value.profile?.enabled ? (n(), d(T, { key: 0 }, {
+                          default: l(() => [
+                            t(r(Bt)),
+                            t(M, null, {
+                              default: l(() => [...e[49] || (e[49] = [
+                                o("No linked profile exists", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            t(I, null, {
+                              default: l(() => [...e[50] || (e[50] = [
+                                o(" Creating one writes only the configured mapped fields and never overwrites an existing document. ", -1)
+                              ])]),
+                              _: 1
+                            })
+                          ]),
+                          _: 1
+                        })) : (n(), d(T, {
+                          key: 1,
+                          variant: "destructive"
+                        }, {
+                          default: l(() => [
+                            t(r(ne)),
+                            t(M, null, {
+                              default: l(() => [...e[51] || (e[51] = [
+                                o("Profile lookup is unavailable", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            t(I, null, {
+                              default: l(() => [...e[52] || (e[52] = [
+                                o("Review this module’s Firestore profile mapping and Firebase permissions.", -1)
+                              ])]),
+                              _: 1
+                            })
+                          ]),
+                          _: 1
+                        })),
+                        De.value && a.value.profile?.enabled ? (n(), d(k, {
+                          key: 2,
+                          variant: "outline",
+                          type: "button",
+                          onClick: pt
+                        }, {
+                          default: l(() => [
+                            t(r(qe), { class: "size-4" }),
+                            e[53] || (e[53] = o(" Create linked profile ", -1))
+                          ]),
+                          _: 1
+                        })) : c("", !0)
+                      ]),
+                      _: 1
+                    }))
+                  ]),
+                  _: 1
+                })) : c("", !0),
+                J.value ? (n(), d(T, {
+                  key: 1,
+                  variant: "destructive"
+                }, {
+                  default: l(() => [
+                    t(r(ne)),
+                    t(M, null, {
+                      default: l(() => [
+                        o(p(y.value ? "User creation failed" : "Identity update failed"), 1)
+                      ]),
+                      _: 1
+                    }),
+                    t(I, null, {
+                      default: l(() => [
+                        o(p(J.value), 1)
+                      ]),
+                      _: 1
+                    })
+                  ]),
+                  _: 1
+                })) : c("", !0)
+              ]),
+              s("aside", ts, [
+                y.value ? (n(), d(te, { key: 0 }, {
+                  default: l(() => [
+                    t(ee, null, {
+                      default: l(() => [
+                        t(Q, null, {
+                          default: l(() => [...e[54] || (e[54] = [
+                            o("Initial access", -1)
+                          ])]),
+                          _: 1
+                        }),
+                        t(Z, null, {
+                          default: l(() => [...e[55] || (e[55] = [
+                            o("Choose the account state at creation time.", -1)
+                          ])]),
+                          _: 1
+                        })
+                      ]),
+                      _: 1
+                    }),
+                    t(B, { class: "space-y-4" }, {
+                      default: l(() => [
+                        s("div", ls, [
+                          s("div", null, [
+                            t(N, { for: "firebase-create-verified" }, {
+                              default: l(() => [...e[56] || (e[56] = [
+                                o("Email verified", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            e[57] || (e[57] = s("p", { class: "mt-1 text-xs leading-5 text-muted-foreground" }, "Keep off unless ownership was verified elsewhere.", -1))
+                          ]),
+                          t(Ne, {
+                            id: "firebase-create-verified",
+                            modelValue: m.emailVerified,
+                            "onUpdate:modelValue": e[12] || (e[12] = (f) => m.emailVerified = f)
+                          }, null, 8, ["modelValue"])
+                        ]),
+                        s("div", ss, [
+                          s("div", null, [
+                            t(N, { for: "firebase-create-disabled" }, {
+                              default: l(() => [...e[58] || (e[58] = [
+                                o("Start suspended", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            e[59] || (e[59] = s("p", { class: "mt-1 text-xs leading-5 text-muted-foreground" }, "The identity is created but cannot sign in.", -1))
+                          ]),
+                          t(Ne, {
+                            id: "firebase-create-disabled",
+                            modelValue: m.disabled,
+                            "onUpdate:modelValue": e[13] || (e[13] = (f) => m.disabled = f)
+                          }, null, 8, ["modelValue"])
+                        ]),
+                        we.value ? (n(), g("label", as, [
+                          t(At, {
+                            modelValue: m.createProfile,
+                            "onUpdate:modelValue": e[14] || (e[14] = (f) => m.createProfile = f),
+                            class: "mt-0.5"
+                          }, null, 8, ["modelValue"]),
+                          e[60] || (e[60] = s("span", null, [
+                            s("span", { class: "block text-sm font-medium" }, "Create linked profile"),
+                            s("span", { class: "mt-1 block text-xs leading-5 text-muted-foreground" }, "Create the configured Firestore profile after Auth succeeds.")
+                          ], -1))
+                        ])) : c("", !0)
+                      ]),
+                      _: 1
+                    })
+                  ]),
+                  _: 1
+                })) : a.value ? (n(), g(L, { key: 1 }, [
+                  t(te, null, {
+                    default: l(() => [
+                      t(ee, null, {
+                        default: l(() => [
+                          t(Q, null, {
+                            default: l(() => [...e[61] || (e[61] = [
+                              o("Access & security", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t(Z, null, {
+                            default: l(() => [...e[62] || (e[62] = [
+                              o("Authentication state and recent Firebase metadata.", -1)
+                            ])]),
+                            _: 1
+                          })
+                        ]),
+                        _: 1
+                      }),
+                      t(B, { class: "space-y-4" }, {
+                        default: l(() => [
+                          s("div", os, [
+                            e[63] || (e[63] = s("span", { class: "text-sm text-muted-foreground" }, "Access", -1)),
+                            t(Xe, {
+                              disabled: a.value.disabled
+                            }, null, 8, ["disabled"])
+                          ]),
+                          U.value ? (n(), g("div", is, [
+                            e[66] || (e[66] = s("span", { class: "text-sm text-muted-foreground" }, "Email", -1)),
+                            a.value.emailVerified ? (n(), d(ce, {
+                              key: 0,
+                              variant: "outline",
+                              class: "gap-1 text-emerald-700 dark:text-emerald-300"
+                            }, {
+                              default: l(() => [
+                                t(r(Lt), { class: "size-3" }),
+                                e[64] || (e[64] = o(" Verified ", -1))
+                              ]),
+                              _: 1
+                            })) : (n(), d(ce, {
+                              key: 1,
+                              variant: "outline"
+                            }, {
+                              default: l(() => [...e[65] || (e[65] = [
+                                o("Unverified", -1)
+                              ])]),
+                              _: 1
+                            }))
+                          ])) : c("", !0),
+                          s("div", ns, [
+                            e[67] || (e[67] = s("span", { class: "text-sm text-muted-foreground" }, "MFA factors", -1)),
+                            s("span", rs, p(a.value.mfaFactorCount), 1)
+                          ]),
+                          t(Be),
+                          s("div", null, [
+                            e[68] || (e[68] = s("p", { class: "text-xs text-muted-foreground" }, "Providers", -1)),
+                            s("div", us, [
+                              (n(!0), g(L, null, Oe(a.value.providers, (f) => (n(), d(ce, {
+                                key: f,
+                                variant: "secondary"
+                              }, {
+                                default: l(() => [
+                                  o(p(r(Xt)(f)), 1)
+                                ]),
+                                _: 2
+                              }, 1024))), 128)),
+                              a.value.providers.length === 0 ? (n(), g("span", ds, "None reported")) : c("", !0)
+                            ])
+                          ]),
+                          t(Be),
+                          s("dl", ms, [
+                            s("div", null, [
+                              e[69] || (e[69] = s("dt", { class: "text-xs text-muted-foreground" }, "Created", -1)),
+                              s("dd", fs, p(r(Fe)(a.value.createdAt)), 1)
+                            ]),
+                            s("div", null, [
+                              e[70] || (e[70] = s("dt", { class: "text-xs text-muted-foreground" }, "Last sign-in", -1)),
+                              s("dd", ps, p(r(Fe)(a.value.lastSignInAt)), 1)
+                            ]),
+                            s("div", null, [
+                              e[71] || (e[71] = s("dt", { class: "text-xs text-muted-foreground" }, "Last token refresh", -1)),
+                              s("dd", vs, p(r(Fe)(a.value.lastRefreshAt)), 1)
+                            ])
+                          ]),
+                          re.value || ue.value && a.value.mfaFactorCount > 0 ? (n(), g("div", cs, [
+                            re.value ? (n(), d(k, {
+                              key: 0,
+                              type: "button",
+                              variant: "outline",
+                              class: "justify-start",
+                              onClick: Ee
+                            }, {
+                              default: l(() => [
+                                t(r(Ge), { class: "size-4" }),
+                                e[72] || (e[72] = o(" Revoke sessions ", -1))
+                              ]),
+                              _: 1
+                            })) : c("", !0),
+                            ue.value && a.value.mfaFactorCount > 0 ? (n(), d(k, {
+                              key: 1,
+                              type: "button",
+                              variant: "outline",
+                              class: "justify-start text-destructive hover:text-destructive",
+                              onClick: ze
+                            }, {
+                              default: l(() => [
+                                t(r(He), { class: "size-4" }),
+                                e[73] || (e[73] = o(" Reset MFA ", -1))
+                              ]),
+                              _: 1
+                            })) : c("", !0)
+                          ])) : c("", !0)
+                        ]),
+                        _: 1
+                      })
+                    ]),
+                    _: 1
+                  }),
+                  it.value ? (n(), d(te, { key: 0 }, {
+                    default: l(() => [
+                      t(ee, null, {
+                        default: l(() => [
+                          t(Q, null, {
+                            default: l(() => [...e[74] || (e[74] = [
+                              o("Role claim", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t(Z, null, {
+                            default: l(() => [
+                              e[75] || (e[75] = o("Configured claim key: ", -1)),
+                              s("code", null, p(r(_).roleClaimKey), 1)
+                            ]),
+                            _: 1
+                          })
+                        ]),
+                        _: 1
+                      }),
+                      t(B, { class: "space-y-4" }, {
+                        default: l(() => [
+                          Re.value.length > 0 ? (n(), g("div", bs, [
+                            t(N, { for: "firebase-user-role" }, {
+                              default: l(() => [...e[76] || (e[76] = [
+                                o("Role", -1)
+                              ])]),
+                              _: 1
+                            }),
+                            t(Ut, {
+                              modelValue: K.value,
+                              "onUpdate:modelValue": e[15] || (e[15] = (f) => K.value = f),
+                              disabled: !Ue.value
+                            }, {
+                              default: l(() => [
+                                t(Ft, { id: "firebase-user-role" }, {
+                                  default: l(() => [
+                                    t(Nt, { placeholder: "No role" })
+                                  ]),
+                                  _: 1
+                                }),
+                                t(St, null, {
+                                  default: l(() => [
+                                    t(Le, { value: xe }, {
+                                      default: l(() => [...e[77] || (e[77] = [
+                                        o("No role", -1)
+                                      ])]),
+                                      _: 1
+                                    }),
+                                    (n(!0), g(L, null, Oe(Re.value, (f) => (n(), d(Le, {
+                                      key: f,
+                                      value: le(f)
+                                    }, {
+                                      default: l(() => [
+                                        o(p(f), 1)
+                                      ]),
+                                      _: 2
+                                    }, 1032, ["value"]))), 128))
+                                  ]),
+                                  _: 1
+                                })
+                              ]),
+                              _: 1
+                            }, 8, ["modelValue", "disabled"]),
+                            Ue.value ? (n(), d(k, {
+                              key: 0,
+                              type: "button",
+                              variant: "outline",
+                              class: "w-full",
+                              disabled: K.value === le(a.value.role),
+                              onClick: ft
+                            }, {
+                              default: l(() => [
+                                t(r(Je), { class: "size-4" }),
+                                e[78] || (e[78] = o(" Change role ", -1))
+                              ]),
+                              _: 1
+                            }, 8, ["disabled"])) : c("", !0)
+                          ])) : (n(), d(T, { key: 1 }, {
+                            default: l(() => [
+                              t(r(be)),
+                              t(M, null, {
+                                default: l(() => [...e[79] || (e[79] = [
+                                  o("No allowed roles configured", -1)
+                                ])]),
+                                _: 1
+                              }),
+                              t(I, null, {
+                                default: l(() => [...e[80] || (e[80] = [
+                                  o("Add comma-separated role values in this module’s settings before assigning claims.", -1)
+                                ])]),
+                                _: 1
+                              })
+                            ]),
+                            _: 1
+                          }))
+                        ]),
+                        _: 1
+                      })
+                    ]),
+                    _: 1
+                  })) : c("", !0),
+                  st.value ? (n(), d(te, {
+                    key: 1,
+                    class: "border-destructive/30"
+                  }, {
+                    default: l(() => [
+                      t(ee, null, {
+                        default: l(() => [
+                          t(Q, { class: "text-destructive" }, {
+                            default: l(() => [...e[81] || (e[81] = [
+                              o("Danger zone", -1)
+                            ])]),
+                            _: 1
+                          }),
+                          t(Z, null, {
+                            default: l(() => [...e[82] || (e[82] = [
+                              o("Deletion permanently removes only the Authentication identity.", -1)
+                            ])]),
+                            _: 1
+                          })
+                        ]),
+                        _: 1
+                      }),
+                      t(B, null, {
+                        default: l(() => [
+                          t(k, {
+                            type: "button",
+                            variant: "destructive",
+                            class: "w-full",
+                            onClick: ct
+                          }, {
+                            default: l(() => [
+                              t(r(et), { class: "size-4" }),
+                              e[83] || (e[83] = o(" Delete Auth user ", -1))
+                            ]),
+                            _: 1
+                          })
+                        ]),
+                        _: 1
+                      })
+                    ]),
+                    _: 1
+                  })) : c("", !0)
+                ], 64)) : c("", !0)
+              ])
+            ]),
+            (y.value ? Ve.value : Ae.value) ? (n(), d(T, {
+              key: 0,
+              variant: "destructive",
+              class: "mt-5"
+            }, {
+              default: l(() => [
+                t(r(ne)),
+                t(M, null, {
+                  default: l(() => [...e[84] || (e[84] = [
+                    o("Review the identity form", -1)
+                  ])]),
+                  _: 1
+                }),
+                t(I, null, {
+                  default: l(() => [
+                    o(p(y.value ? Ve.value : Ae.value), 1)
+                  ]),
+                  _: 1
+                })
+              ]),
+              _: 1
+            })) : c("", !0),
+            y.value || oe.value ? (n(), g("div", ys, [
+              s("p", gs, [
+                y.value ? (n(), g(L, { key: 0 }, [
+                  o("Create one Firebase Authentication identity.")
+                ], 64)) : de.value && !D.value.trim() ? (n(), g(L, { key: 1 }, [
+                  o("Add a reason before saving identity changes.")
+                ], 64)) : de.value ? (n(), g(L, { key: 2 }, [
+                  o("Unsaved identity changes")
+                ], 64)) : (n(), g(L, { key: 3 }, [
+                  o("No identity changes")
+                ], 64))
+              ]),
+              t(k, {
+                type: "submit",
+                form: "firebase-auth-user-form",
+                class: "ml-auto",
+                disabled: Ie.value
+              }, {
+                default: l(() => [
+                  v.value ? (n(), d(r(Ze), {
+                    key: 0,
+                    class: "size-4 animate-spin"
+                  })) : y.value ? (n(), d(r(qe), {
+                    key: 1,
+                    class: "size-4"
+                  })) : (n(), d(r(Je), {
+                    key: 2,
+                    class: "size-4"
+                  })),
+                  o(" " + p(v.value ? y.value ? "Creating…" : "Saving…" : y.value ? "Create user" : "Save identity"), 1)
+                ]),
+                _: 1
+              }, 8, ["disabled"])
+            ])) : c("", !0)
+          ], 32)) : c("", !0)
+        ], 64)) : (n(), g("section", rl, [
+          s("div", ul, [
+            s("div", dl, [
+              t(r(be), { class: "size-5 text-muted-foreground" })
+            ]),
+            s("h1", ml, "You cannot " + p(y.value ? "create Firebase users" : "view this Firebase user"), 1),
+            e[18] || (e[18] = s("p", { class: "mt-1 text-sm leading-6 text-muted-foreground" }, " Ask a project administrator for the required module permission. ", -1)),
+            t(k, {
+              variant: "outline",
+              class: "mt-5",
+              onClick: e[0] || (e[0] = (f) => r(j)(""))
+            }, {
+              default: l(() => [
+                t(r(Ke), { class: "size-4" }),
+                e[17] || (e[17] = o(" Back to users ", -1))
+              ]),
+              _: 1
+            })
+          ])
+        ])),
+        w.value && a.value ? (n(), d(Yt, {
+          key: 2,
+          open: !!w.value,
+          title: w.value.title,
+          description: w.value.description,
+          "confirm-label": w.value.confirmLabel,
+          subject: Me.value,
+          destructive: w.value.destructive,
+          busy: O.value,
+          error: S.value,
+          "onUpdate:open": Pe,
+          onConfirm: vt
+        }, null, 8, ["open", "title", "description", "confirm-label", "subject", "destructive", "busy", "error"])) : c("", !0),
+        a.value ? (n(), d(il, {
+          key: 3,
+          open: X.value,
+          "onUpdate:open": e[16] || (e[16] = (f) => X.value = f),
+          uid: a.value.uid,
+          email: U.value ? a.value.email : null,
+          busy: Y.value,
+          error: W.value,
+          onConfirm: bt
+        }, null, 8, ["open", "uid", "email", "busy", "error"])) : c("", !0)
+      ]);
+    };
+  }
+});
+export {
+  Cs as default
+};