@petrarca/sonnet-shell 0.1.0

package/LICENSE.md

@@ -0,0 +1,190 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2025 Petrarca Labs (Wolfgang Miller)
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/auth/index.d.ts

@@ -0,0 +1,117 @@
+import { ReactNode } from 'react';
+
+/**
+ * TenantSelection -- shown after authentication when the user has
+ * multiple tenants and no default is set. The user must pick a tenant
+ * before the app loads.
+ *
+ * Fully props-driven with no app-specific imports.
+ * Target package: @petrarca/sonnet-shell
+ */
+/** Minimal tenant descriptor. Consumers map their domain type to this shape. */
+interface TenantOption {
+    id: string;
+    name: string;
+}
+interface TenantSelectionProps {
+    tenants: TenantOption[];
+    isLoading: boolean;
+    error: string | null;
+    onSelect: (id: string) => void;
+}
+declare function TenantSelection({ tenants, isLoading, error, onSelect, }: TenantSelectionProps): React.ReactElement;
+
+/**
+ * Login -- multi-step authentication flow.
+ *
+ * Step 1: Credentials (local auth form or OIDC redirect)
+ * Step 2: Tenant selection (if user has multiple tenants and no default)
+ *
+ * Steps are shown conditionally. If the user has a default tenant,
+ * step 2 is skipped and the app loads immediately.
+ *
+ * ProtectedRoute passes a `step` hint in location.state so this
+ * component always opens on the correct step when redirected.
+ *
+ * All auth state and operations are injected via props -- no direct
+ * store or context imports.
+ * Target package: @petrarca/sonnet-shell
+ */
+/** Auth feature flags and provider configuration. Consumer-supplied. */
+interface AuthConfig {
+    enabled: boolean;
+    features: {
+        local_auth: boolean;
+        oauth: boolean;
+    };
+    oauth?: {
+        providers: Record<string, {
+            enabled: boolean;
+            name: string;
+            login_url: string;
+        }>;
+    } | null;
+    ui: {
+        direct_redirect: string | null;
+    };
+}
+interface LoginProps {
+    /** Auth feature flags and OAuth provider config. */
+    config: AuthConfig | null;
+    /** Whether the user is currently authenticated (token present). */
+    isAuthenticated: boolean;
+    /** Active tenant id, null when not yet selected. */
+    activeTenantId: string | null;
+    /** Whether an async operation is in flight. */
+    isLoading: boolean;
+    /** Auth error message to display, null when none. */
+    error: string | null;
+    /** The authenticated user's available tenants. */
+    tenants: TenantOption[] | null;
+    /** Perform credential login. Throws on failure. */
+    onLogin: (credentials: {
+        identifier: string;
+        password: string;
+    }) => Promise<void>;
+    /** Fetch the current user after login to resolve tenant state. */
+    onFetchCurrentUser: () => Promise<void>;
+    /** Switch to the given tenant. Throws on failure. */
+    onSwitchTenant: (id: string) => Promise<void>;
+    /** Clear the current auth error. */
+    onClearError: () => void;
+}
+declare function Login(props: LoginProps): React.ReactElement | null;
+
+/**
+ * ProtectedRoute -- guards the app shell.
+ *
+ * On first mount, calls the injected `initializeAuth` callback so
+ * the consumer can validate or restore a persisted session. While
+ * initialization is in progress a loading spinner is shown.
+ *
+ * Once initialization is complete, guards based on:
+ *   - Auth disabled (`authEnabled` false): allow all access
+ *   - Not authenticated: redirect to /login with step=credentials
+ *   - Authenticated but no tenant: redirect to /login with step=tenant-selection
+ *
+ * All auth state is injected via props -- no direct store or context imports.
+ * Target package: @petrarca/sonnet-shell
+ */
+interface ProtectedRouteProps {
+    children: ReactNode;
+    /** Whether auth is globally enabled. When false, all access is allowed. */
+    authEnabled: boolean;
+    /** Whether the auth config is still loading. */
+    authConfigLoading: boolean;
+    /** Whether the user holds a valid session. */
+    isAuthenticated: boolean;
+    /** The current access token (null when not authenticated). */
+    accessToken: string | null;
+    /** The active tenant id (null when not yet selected). */
+    activeTenantId: string | null;
+    /** Called once on mount to restore and validate a persisted session. */
+    initializeAuth: () => Promise<void>;
+}
+declare function ProtectedRoute({ children, authEnabled, authConfigLoading, isAuthenticated, accessToken, activeTenantId, initializeAuth, }: ProtectedRouteProps): React.ReactElement;
+
+export { type AuthConfig, Login, type LoginProps, ProtectedRoute, type ProtectedRouteProps, type TenantOption, TenantSelection };

package/dist/auth/index.js

@@ -0,0 +1,305 @@
+// src/auth/Login.tsx
+import { useState as useState2, useEffect, useCallback as useCallback2 } from "react";
+import { useNavigate, useLocation } from "react-router-dom";
+import { Button as Button2 } from "@petrarca/sonnet-ui";
+import { Input } from "@petrarca/sonnet-ui";
+import { Label } from "@petrarca/sonnet-ui";
+import { Alert as Alert2 } from "@petrarca/sonnet-ui";
+
+// src/auth/TenantSelection.tsx
+import { useState, useCallback } from "react";
+import { Check } from "lucide-react";
+import { Button } from "@petrarca/sonnet-ui";
+import { Alert } from "@petrarca/sonnet-ui";
+import { jsx, jsxs } from "react/jsx-runtime";
+function TenantSelection({
+  tenants,
+  isLoading,
+  error,
+  onSelect
+}) {
+  const [selectedId, setSelectedId] = useState(null);
+  const handleContinue = useCallback(() => {
+    if (selectedId) {
+      onSelect(selectedId);
+    }
+  }, [selectedId, onSelect]);
+  return /* @__PURE__ */ jsx("div", { className: "flex items-center justify-center min-h-screen bg-slate-100", children: /* @__PURE__ */ jsxs("div", { className: "w-full max-w-md bg-white rounded-lg shadow-lg p-8", children: [
+    /* @__PURE__ */ jsx("h1", { className: "text-center mb-2", children: "Select Tenant" }),
+    /* @__PURE__ */ jsx("p", { className: "text-center text-sm text-muted-foreground mb-6", children: "Choose the tenant you want to work in." }),
+    error && /* @__PURE__ */ jsx(Alert, { className: "mb-4 border-red-200 bg-red-50 text-red-700", children: /* @__PURE__ */ jsx("p", { className: "text-sm", children: error }) }),
+    /* @__PURE__ */ jsx("div", { className: "space-y-2 mb-6 max-h-64 overflow-y-auto", children: tenants.map((tenant) => /* @__PURE__ */ jsxs(
+      "button",
+      {
+        onClick: () => setSelectedId(tenant.id),
+        className: `w-full flex items-center justify-between px-4 py-3 rounded-md border text-left text-sm transition-colors ${selectedId === tenant.id ? "border-blue-500 bg-blue-50 text-blue-900" : "border-slate-200 hover:bg-slate-50"}`,
+        children: [
+          /* @__PURE__ */ jsx("span", { children: tenant.name }),
+          selectedId === tenant.id && /* @__PURE__ */ jsx(Check, { className: "h-4 w-4 text-blue-500" })
+        ]
+      },
+      tenant.id
+    )) }),
+    /* @__PURE__ */ jsx(
+      Button,
+      {
+        onClick: handleContinue,
+        disabled: !selectedId || isLoading,
+        className: "w-full",
+        children: isLoading ? "Loading..." : "Continue"
+      }
+    )
+  ] }) });
+}
+
+// src/auth/Login.tsx
+import { normalizeError } from "@petrarca/sonnet-core";
+import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+function useLoginFlow(props) {
+  const {
+    config,
+    isAuthenticated,
+    activeTenantId,
+    tenants,
+    onLogin,
+    onFetchCurrentUser,
+    onSwitchTenant,
+    onClearError
+  } = props;
+  const navigate = useNavigate();
+  const location = useLocation();
+  const locationState = location.state;
+  const [redirectTo] = useState2(() => locationState?.from?.pathname ?? "/");
+  const [step, setStep] = useState2(
+    () => locationState?.step ?? "credentials"
+  );
+  const [identifier, setIdentifier] = useState2("");
+  const [password, setPassword] = useState2("");
+  const [tenantError, setTenantError] = useState2(null);
+  useEffect(() => {
+    if (isAuthenticated && activeTenantId)
+      navigate(redirectTo, { replace: true });
+  }, [isAuthenticated, activeTenantId, navigate, redirectTo]);
+  useEffect(() => {
+    if (!isAuthenticated || !tenants || activeTenantId) return;
+    if (tenants.length === 1) {
+      onSwitchTenant(tenants[0].id).catch((err) => {
+        setTenantError(
+          normalizeError(err).message || "Failed to select tenant"
+        );
+        setStep("tenant-selection");
+      });
+    } else if (tenants.length > 1) {
+      setStep("tenant-selection");
+    }
+  }, [isAuthenticated, tenants, activeTenantId, onSwitchTenant]);
+  useEffect(() => {
+    if (config?.ui.direct_redirect)
+      window.location.href = config.ui.direct_redirect;
+  }, [config]);
+  const handleCredentialSubmit = useCallback2(
+    async (e) => {
+      e.preventDefault();
+      onClearError();
+      try {
+        await onLogin({ identifier, password });
+        await onFetchCurrentUser();
+      } catch {
+      }
+    },
+    [identifier, password, onLogin, onFetchCurrentUser, onClearError]
+  );
+  const handleTenantSelect = useCallback2(
+    async (id) => {
+      setTenantError(null);
+      try {
+        await onSwitchTenant(id);
+      } catch (err) {
+        setTenantError(
+          normalizeError(err).message || "Failed to select tenant"
+        );
+      }
+    },
+    [onSwitchTenant]
+  );
+  return {
+    step,
+    identifier,
+    setIdentifier,
+    password,
+    setPassword,
+    tenantError,
+    handleCredentialSubmit,
+    handleTenantSelect
+  };
+}
+function Login(props) {
+  const { config, isLoading, error, tenants } = props;
+  const flow = useLoginFlow(props);
+  if (config?.ui.direct_redirect) {
+    return /* @__PURE__ */ jsx2(RedirectingMessage, {});
+  }
+  if (flow.step === "tenant-selection" && tenants) {
+    return /* @__PURE__ */ jsx2(
+      TenantSelection,
+      {
+        tenants,
+        isLoading,
+        error: flow.tenantError,
+        onSelect: flow.handleTenantSelect
+      }
+    );
+  }
+  return /* @__PURE__ */ jsx2(
+    CredentialPage,
+    {
+      config,
+      error,
+      isLoading,
+      flow
+    }
+  );
+}
+function RedirectingMessage() {
+  return /* @__PURE__ */ jsx2("div", { className: "flex items-center justify-center min-h-screen", children: /* @__PURE__ */ jsx2("p", { className: "text-muted-foreground", children: "Redirecting to authentication..." }) });
+}
+function CredentialPage({
+  config,
+  error,
+  isLoading,
+  flow
+}) {
+  return /* @__PURE__ */ jsx2("div", { className: "flex items-center justify-center min-h-screen bg-slate-100", children: /* @__PURE__ */ jsxs2("div", { className: "w-full max-w-md bg-white rounded-lg shadow-lg p-8", children: [
+    /* @__PURE__ */ jsx2("h1", { className: "text-center mb-6", children: "Sign In" }),
+    error && /* @__PURE__ */ jsx2(Alert2, { className: "mb-4 border-red-200 bg-red-50 text-red-700", children: /* @__PURE__ */ jsx2("p", { className: "text-sm", children: error }) }),
+    config?.features.local_auth && /* @__PURE__ */ jsx2(
+      CredentialForm,
+      {
+        identifier: flow.identifier,
+        password: flow.password,
+        isLoading,
+        onIdentifierChange: flow.setIdentifier,
+        onPasswordChange: flow.setPassword,
+        onSubmit: flow.handleCredentialSubmit
+      }
+    ),
+    config?.features.oauth && config.oauth?.providers && /* @__PURE__ */ jsx2(OAuthProviders, { providers: config.oauth.providers })
+  ] }) });
+}
+function CredentialForm({
+  identifier,
+  password,
+  isLoading,
+  onIdentifierChange,
+  onPasswordChange,
+  onSubmit
+}) {
+  return /* @__PURE__ */ jsxs2("form", { onSubmit, className: "space-y-4", children: [
+    /* @__PURE__ */ jsxs2("div", { className: "space-y-2", children: [
+      /* @__PURE__ */ jsx2(Label, { htmlFor: "identifier", children: "Email or Username" }),
+      /* @__PURE__ */ jsx2(
+        Input,
+        {
+          id: "identifier",
+          type: "text",
+          value: identifier,
+          onChange: (e) => onIdentifierChange(e.target.value),
+          required: true,
+          placeholder: "Enter your email or username"
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsxs2("div", { className: "space-y-2", children: [
+      /* @__PURE__ */ jsx2(Label, { htmlFor: "password", children: "Password" }),
+      /* @__PURE__ */ jsx2(
+        Input,
+        {
+          id: "password",
+          type: "password",
+          value: password,
+          onChange: (e) => onPasswordChange(e.target.value),
+          required: true,
+          placeholder: "Enter your password"
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsx2(Button2, { type: "submit", disabled: isLoading, className: "w-full", children: isLoading ? "Signing in..." : "Sign In" })
+  ] });
+}
+function OAuthProviders({ providers }) {
+  return /* @__PURE__ */ jsxs2("div", { className: "mt-6", children: [
+    /* @__PURE__ */ jsxs2("div", { className: "relative mb-4", children: [
+      /* @__PURE__ */ jsx2("div", { className: "absolute inset-0 flex items-center", children: /* @__PURE__ */ jsx2("div", { className: "w-full border-t border-slate-300" }) }),
+      /* @__PURE__ */ jsx2("div", { className: "relative flex justify-center text-sm", children: /* @__PURE__ */ jsx2("span", { className: "px-2 bg-white text-muted-foreground", children: "Or continue with" }) })
+    ] }),
+    /* @__PURE__ */ jsx2("div", { className: "space-y-2", children: Object.entries(providers).map(
+      ([key, provider]) => provider.enabled ? /* @__PURE__ */ jsxs2(
+        "a",
+        {
+          href: provider.login_url,
+          className: "w-full flex items-center justify-center py-2 px-4 border border-slate-300 rounded-md hover:bg-slate-50",
+          children: [
+            "Continue with ",
+            provider.name
+          ]
+        },
+        key
+      ) : null
+    ) })
+  ] });
+}
+
+// src/auth/ProtectedRoute.tsx
+import { Navigate, useLocation as useLocation2 } from "react-router-dom";
+import { useEffect as useEffect2, useRef, useState as useState3 } from "react";
+import { Spinner } from "@petrarca/sonnet-ui";
+import { Fragment, jsx as jsx3 } from "react/jsx-runtime";
+function ProtectedRoute({
+  children,
+  authEnabled,
+  authConfigLoading,
+  isAuthenticated,
+  accessToken,
+  activeTenantId,
+  initializeAuth
+}) {
+  const location = useLocation2();
+  const [initializing, setInitializing] = useState3(true);
+  const initRef = useRef(initializeAuth);
+  useEffect2(() => {
+    initRef.current().finally(() => setInitializing(false));
+  }, []);
+  if (authConfigLoading || initializing) {
+    return /* @__PURE__ */ jsx3("div", { className: "flex items-center justify-center min-h-screen", children: /* @__PURE__ */ jsx3(Spinner, { size: "lg" }) });
+  }
+  if (!authEnabled) {
+    return /* @__PURE__ */ jsx3(Fragment, { children });
+  }
+  if (!isAuthenticated || !accessToken) {
+    return /* @__PURE__ */ jsx3(
+      Navigate,
+      {
+        to: "/login",
+        state: { from: location, step: "credentials" },
+        replace: true
+      }
+    );
+  }
+  if (!activeTenantId) {
+    return /* @__PURE__ */ jsx3(
+      Navigate,
+      {
+        to: "/login",
+        state: { from: location, step: "tenant-selection" },
+        replace: true
+      }
+    );
+  }
+  return /* @__PURE__ */ jsx3(Fragment, { children });
+}
+export {
+  Login,
+  ProtectedRoute,
+  TenantSelection
+};
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/Login.tsx","../../src/auth/TenantSelection.tsx","../../src/auth/ProtectedRoute.tsx"],"sourcesContent":["import { useState, useEffect, useCallback } from \"react\";\nimport { useNavigate, useLocation } from \"react-router-dom\";\nimport { Button } from \"@petrarca/sonnet-ui\";\nimport { Input } from \"@petrarca/sonnet-ui\";\nimport { Label } from \"@petrarca/sonnet-ui\";\nimport { Alert } from \"@petrarca/sonnet-ui\";\nimport { TenantSelection, type TenantOption } from \"./TenantSelection\";\nimport { normalizeError } from \"@petrarca/sonnet-core\";\n\n/**\n * Login -- multi-step authentication flow.\n *\n * Step 1: Credentials (local auth form or OIDC redirect)\n * Step 2: Tenant selection (if user has multiple tenants and no default)\n *\n * Steps are shown conditionally. If the user has a default tenant,\n * step 2 is skipped and the app loads immediately.\n *\n * ProtectedRoute passes a `step` hint in location.state so this\n * component always opens on the correct step when redirected.\n *\n * All auth state and operations are injected via props -- no direct\n * store or context imports.\n * Target package: @petrarca/sonnet-shell\n */\n\n/** Auth feature flags and provider configuration. Consumer-supplied. */\nexport interface AuthConfig {\n  enabled: boolean;\n  features: {\n    local_auth: boolean;\n    oauth: boolean;\n  };\n  oauth?: {\n    providers: Record<\n      string,\n      {\n        enabled: boolean;\n        name: string;\n        login_url: string;\n      }\n    >;\n  } | null;\n  ui: {\n    direct_redirect: string | null;\n  };\n}\n\ntype LoginStep = \"credentials\" | \"tenant-selection\";\n\ninterface LocationState {\n  from?: { pathname: string };\n  step?: LoginStep;\n}\n\nexport interface LoginProps {\n  /** Auth feature flags and OAuth provider config. */\n  config: AuthConfig | null;\n  /** Whether the user is currently authenticated (token present). */\n  isAuthenticated: boolean;\n  /** Active tenant id, null when not yet selected. */\n  activeTenantId: string | null;\n  /** Whether an async operation is in flight. */\n  isLoading: boolean;\n  /** Auth error message to display, null when none. */\n  error: string | null;\n  /** The authenticated user's available tenants. */\n  tenants: TenantOption[] | null;\n  /** Perform credential login. Throws on failure. */\n  onLogin: (credentials: {\n    identifier: string;\n    password: string;\n  }) => Promise<void>;\n  /** Fetch the current user after login to resolve tenant state. */\n  onFetchCurrentUser: () => Promise<void>;\n  /** Switch to the given tenant. Throws on failure. */\n  onSwitchTenant: (id: string) => Promise<void>;\n  /** Clear the current auth error. */\n  onClearError: () => void;\n}\n\n// Custom hook: manages the login flow state (steps, redirects, tenant resolution).\nfunction useLoginFlow(props: LoginProps) {\n  const {\n    config,\n    isAuthenticated,\n    activeTenantId,\n    tenants,\n    onLogin,\n    onFetchCurrentUser,\n    onSwitchTenant,\n    onClearError,\n  } = props;\n  const navigate = useNavigate();\n  const location = useLocation();\n  const locationState = location.state as LocationState | null;\n\n  const [redirectTo] = useState(() => locationState?.from?.pathname ?? \"/\");\n  const [step, setStep] = useState<LoginStep>(\n    () => locationState?.step ?? \"credentials\",\n  );\n  const [identifier, setIdentifier] = useState(\"\");\n  const [password, setPassword] = useState(\"\");\n  const [tenantError, setTenantError] = useState<string | null>(null);\n\n  useEffect(() => {\n    if (isAuthenticated && activeTenantId)\n      navigate(redirectTo, { replace: true });\n  }, [isAuthenticated, activeTenantId, navigate, redirectTo]);\n\n  useEffect(() => {\n    if (!isAuthenticated || !tenants || activeTenantId) return;\n    if (tenants.length === 1) {\n      onSwitchTenant(tenants[0].id).catch((err) => {\n        setTenantError(\n          normalizeError(err).message || \"Failed to select tenant\",\n        );\n        setStep(\"tenant-selection\");\n      });\n    } else if (tenants.length > 1) {\n      setStep(\"tenant-selection\");\n    }\n  }, [isAuthenticated, tenants, activeTenantId, onSwitchTenant]);\n\n  useEffect(() => {\n    if (config?.ui.direct_redirect)\n      window.location.href = config.ui.direct_redirect;\n  }, [config]);\n\n  const handleCredentialSubmit = useCallback(\n    async (e: React.FormEvent) => {\n      e.preventDefault();\n      onClearError();\n      try {\n        await onLogin({ identifier, password });\n        await onFetchCurrentUser();\n      } catch {\n        /* error via prop */\n      }\n    },\n    [identifier, password, onLogin, onFetchCurrentUser, onClearError],\n  );\n\n  const handleTenantSelect = useCallback(\n    async (id: string) => {\n      setTenantError(null);\n      try {\n        await onSwitchTenant(id);\n      } catch (err) {\n        setTenantError(\n          normalizeError(err).message || \"Failed to select tenant\",\n        );\n      }\n    },\n    [onSwitchTenant],\n  );\n\n  return {\n    step,\n    identifier,\n    setIdentifier,\n    password,\n    setPassword,\n    tenantError,\n    handleCredentialSubmit,\n    handleTenantSelect,\n  };\n}\n\nexport function Login(props: LoginProps): React.ReactElement | null {\n  const { config, isLoading, error, tenants } = props;\n  const flow = useLoginFlow(props);\n\n  if (config?.ui.direct_redirect) {\n    return <RedirectingMessage />;\n  }\n\n  if (flow.step === \"tenant-selection\" && tenants) {\n    return (\n      <TenantSelection\n        tenants={tenants}\n        isLoading={isLoading}\n        error={flow.tenantError}\n        onSelect={flow.handleTenantSelect}\n      />\n    );\n  }\n\n  return (\n    <CredentialPage\n      config={config}\n      error={error}\n      isLoading={isLoading}\n      flow={flow}\n    />\n  );\n}\n\nfunction RedirectingMessage() {\n  return (\n    <div className=\"flex items-center justify-center min-h-screen\">\n      <p className=\"text-muted-foreground\">Redirecting to authentication...</p>\n    </div>\n  );\n}\n\ninterface CredentialPageProps {\n  config: AuthConfig | null;\n  error: string | null;\n  isLoading: boolean;\n  flow: ReturnType<typeof useLoginFlow>;\n}\n\nfunction CredentialPage({\n  config,\n  error,\n  isLoading,\n  flow,\n}: CredentialPageProps) {\n  return (\n    <div className=\"flex items-center justify-center min-h-screen bg-slate-100\">\n      <div className=\"w-full max-w-md bg-white rounded-lg shadow-lg p-8\">\n        <h1 className=\"text-center mb-6\">Sign In</h1>\n\n        {error && (\n          <Alert className=\"mb-4 border-red-200 bg-red-50 text-red-700\">\n            <p className=\"text-sm\">{error}</p>\n          </Alert>\n        )}\n\n        {config?.features.local_auth && (\n          <CredentialForm\n            identifier={flow.identifier}\n            password={flow.password}\n            isLoading={isLoading}\n            onIdentifierChange={flow.setIdentifier}\n            onPasswordChange={flow.setPassword}\n            onSubmit={flow.handleCredentialSubmit}\n          />\n        )}\n\n        {config?.features.oauth && config.oauth?.providers && (\n          <OAuthProviders providers={config.oauth.providers} />\n        )}\n      </div>\n    </div>\n  );\n}\n\n// -- Sub-components extracted to reduce Login complexity --\n\ninterface CredentialFormProps {\n  identifier: string;\n  password: string;\n  isLoading: boolean;\n  onIdentifierChange: (value: string) => void;\n  onPasswordChange: (value: string) => void;\n  onSubmit: (e: React.FormEvent) => void;\n}\n\nfunction CredentialForm({\n  identifier,\n  password,\n  isLoading,\n  onIdentifierChange,\n  onPasswordChange,\n  onSubmit,\n}: CredentialFormProps) {\n  return (\n    <form onSubmit={onSubmit} className=\"space-y-4\">\n      <div className=\"space-y-2\">\n        <Label htmlFor=\"identifier\">Email or Username</Label>\n        <Input\n          id=\"identifier\"\n          type=\"text\"\n          value={identifier}\n          onChange={(e) => onIdentifierChange(e.target.value)}\n          required\n          placeholder=\"Enter your email or username\"\n        />\n      </div>\n\n      <div className=\"space-y-2\">\n        <Label htmlFor=\"password\">Password</Label>\n        <Input\n          id=\"password\"\n          type=\"password\"\n          value={password}\n          onChange={(e) => onPasswordChange(e.target.value)}\n          required\n          placeholder=\"Enter your password\"\n        />\n      </div>\n\n      <Button type=\"submit\" disabled={isLoading} className=\"w-full\">\n        {isLoading ? \"Signing in...\" : \"Sign In\"}\n      </Button>\n    </form>\n  );\n}\n\ninterface OAuthProvidersProps {\n  providers: Record<\n    string,\n    { enabled: boolean; name: string; login_url: string }\n  >;\n}\n\nfunction OAuthProviders({ providers }: OAuthProvidersProps) {\n  return (\n    <div className=\"mt-6\">\n      <div className=\"relative mb-4\">\n        <div className=\"absolute inset-0 flex items-center\">\n          <div className=\"w-full border-t border-slate-300\"></div>\n        </div>\n        <div className=\"relative flex justify-center text-sm\">\n          <span className=\"px-2 bg-white text-muted-foreground\">\n            Or continue with\n          </span>\n        </div>\n      </div>\n\n      <div className=\"space-y-2\">\n        {Object.entries(providers).map(([key, provider]) =>\n          provider.enabled ? (\n            <a\n              key={key}\n              href={provider.login_url}\n              className=\"w-full flex items-center justify-center py-2 px-4 border border-slate-300 rounded-md hover:bg-slate-50\"\n            >\n              Continue with {provider.name}\n            </a>\n          ) : null,\n        )}\n      </div>\n    </div>\n  );\n}\n","import { useState, useCallback } from \"react\";\nimport { Check } from \"lucide-react\";\nimport { Button } from \"@petrarca/sonnet-ui\";\nimport { Alert } from \"@petrarca/sonnet-ui\";\n\n/**\n * TenantSelection -- shown after authentication when the user has\n * multiple tenants and no default is set. The user must pick a tenant\n * before the app loads.\n *\n * Fully props-driven with no app-specific imports.\n * Target package: @petrarca/sonnet-shell\n */\n\n/** Minimal tenant descriptor. Consumers map their domain type to this shape. */\nexport interface TenantOption {\n  id: string;\n  name: string;\n}\n\ninterface TenantSelectionProps {\n  tenants: TenantOption[];\n  isLoading: boolean;\n  error: string | null;\n  onSelect: (id: string) => void;\n}\n\nexport function TenantSelection({\n  tenants,\n  isLoading,\n  error,\n  onSelect,\n}: TenantSelectionProps): React.ReactElement {\n  const [selectedId, setSelectedId] = useState<string | null>(null);\n\n  const handleContinue = useCallback(() => {\n    if (selectedId) {\n      onSelect(selectedId);\n    }\n  }, [selectedId, onSelect]);\n\n  return (\n    <div className=\"flex items-center justify-center min-h-screen bg-slate-100\">\n      <div className=\"w-full max-w-md bg-white rounded-lg shadow-lg p-8\">\n        <h1 className=\"text-center mb-2\">Select Tenant</h1>\n        <p className=\"text-center text-sm text-muted-foreground mb-6\">\n          Choose the tenant you want to work in.\n        </p>\n\n        {error && (\n          <Alert className=\"mb-4 border-red-200 bg-red-50 text-red-700\">\n            <p className=\"text-sm\">{error}</p>\n          </Alert>\n        )}\n\n        <div className=\"space-y-2 mb-6 max-h-64 overflow-y-auto\">\n          {tenants.map((tenant) => (\n            <button\n              key={tenant.id}\n              onClick={() => setSelectedId(tenant.id)}\n              className={`w-full flex items-center justify-between px-4 py-3 rounded-md border text-left text-sm transition-colors ${\n                selectedId === tenant.id\n                  ? \"border-blue-500 bg-blue-50 text-blue-900\"\n                  : \"border-slate-200 hover:bg-slate-50\"\n              }`}\n            >\n              <span>{tenant.name}</span>\n              {selectedId === tenant.id && (\n                <Check className=\"h-4 w-4 text-blue-500\" />\n              )}\n            </button>\n          ))}\n        </div>\n\n        <Button\n          onClick={handleContinue}\n          disabled={!selectedId || isLoading}\n          className=\"w-full\"\n        >\n          {isLoading ? \"Loading...\" : \"Continue\"}\n        </Button>\n      </div>\n    </div>\n  );\n}\n","import { Navigate, useLocation } from \"react-router-dom\";\nimport { type ReactNode, useEffect, useRef, useState } from \"react\";\nimport { Spinner } from \"@petrarca/sonnet-ui\";\n\n/**\n * ProtectedRoute -- guards the app shell.\n *\n * On first mount, calls the injected `initializeAuth` callback so\n * the consumer can validate or restore a persisted session. While\n * initialization is in progress a loading spinner is shown.\n *\n * Once initialization is complete, guards based on:\n *   - Auth disabled (`authEnabled` false): allow all access\n *   - Not authenticated: redirect to /login with step=credentials\n *   - Authenticated but no tenant: redirect to /login with step=tenant-selection\n *\n * All auth state is injected via props -- no direct store or context imports.\n * Target package: @petrarca/sonnet-shell\n */\n\nexport interface ProtectedRouteProps {\n  children: ReactNode;\n  /** Whether auth is globally enabled. When false, all access is allowed. */\n  authEnabled: boolean;\n  /** Whether the auth config is still loading. */\n  authConfigLoading: boolean;\n  /** Whether the user holds a valid session. */\n  isAuthenticated: boolean;\n  /** The current access token (null when not authenticated). */\n  accessToken: string | null;\n  /** The active tenant id (null when not yet selected). */\n  activeTenantId: string | null;\n  /** Called once on mount to restore and validate a persisted session. */\n  initializeAuth: () => Promise<void>;\n}\n\nexport function ProtectedRoute({\n  children,\n  authEnabled,\n  authConfigLoading,\n  isAuthenticated,\n  accessToken,\n  activeTenantId,\n  initializeAuth,\n}: ProtectedRouteProps): React.ReactElement {\n  const location = useLocation();\n  const [initializing, setInitializing] = useState(true);\n  const initRef = useRef(initializeAuth);\n\n  useEffect(() => {\n    initRef.current().finally(() => setInitializing(false));\n  }, []);\n\n  if (authConfigLoading || initializing) {\n    return (\n      <div className=\"flex items-center justify-center min-h-screen\">\n        <Spinner size=\"lg\" />\n      </div>\n    );\n  }\n\n  // Auth disabled: allow all access\n  if (!authEnabled) {\n    return <>{children}</>;\n  }\n\n  // Not authenticated: go to credentials step\n  if (!isAuthenticated || !accessToken) {\n    return (\n      <Navigate\n        to=\"/login\"\n        state={{ from: location, step: \"credentials\" }}\n        replace\n      />\n    );\n  }\n\n  // Authenticated but no tenant: go to tenant selection step\n  if (!activeTenantId) {\n    return (\n      <Navigate\n        to=\"/login\"\n        state={{ from: location, step: \"tenant-selection\" }}\n        replace\n      />\n    );\n  }\n\n  return <>{children}</>;\n}\n"],"mappings":";AAAA,SAAS,YAAAA,WAAU,WAAW,eAAAC,oBAAmB;AACjD,SAAS,aAAa,mBAAmB;AACzC,SAAS,UAAAC,eAAc;AACvB,SAAS,aAAa;AACtB,SAAS,aAAa;AACtB,SAAS,SAAAC,cAAa;;;ACLtB,SAAS,UAAU,mBAAmB;AACtC,SAAS,aAAa;AACtB,SAAS,cAAc;AACvB,SAAS,aAAa;AAyCd,cAaI,YAbJ;AAjBD,SAAS,gBAAgB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA6C;AAC3C,QAAM,CAAC,YAAY,aAAa,IAAI,SAAwB,IAAI;AAEhE,QAAM,iBAAiB,YAAY,MAAM;AACvC,QAAI,YAAY;AACd,eAAS,UAAU;AAAA,IACrB;AAAA,EACF,GAAG,CAAC,YAAY,QAAQ,CAAC;AAEzB,SACE,oBAAC,SAAI,WAAU,8DACb,+BAAC,SAAI,WAAU,qDACb;AAAA,wBAAC,QAAG,WAAU,oBAAmB,2BAAa;AAAA,IAC9C,oBAAC,OAAE,WAAU,kDAAiD,oDAE9D;AAAA,IAEC,SACC,oBAAC,SAAM,WAAU,8CACf,8BAAC,OAAE,WAAU,WAAW,iBAAM,GAChC;AAAA,IAGF,oBAAC,SAAI,WAAU,2CACZ,kBAAQ,IAAI,CAAC,WACZ;AAAA,MAAC;AAAA;AAAA,QAEC,SAAS,MAAM,cAAc,OAAO,EAAE;AAAA,QACtC,WAAW,4GACT,eAAe,OAAO,KAClB,6CACA,oCACN;AAAA,QAEA;AAAA,8BAAC,UAAM,iBAAO,MAAK;AAAA,UAClB,eAAe,OAAO,MACrB,oBAAC,SAAM,WAAU,yBAAwB;AAAA;AAAA;AAAA,MAVtC,OAAO;AAAA,IAYd,CACD,GACH;AAAA,IAEA;AAAA,MAAC;AAAA;AAAA,QACC,SAAS;AAAA,QACT,UAAU,CAAC,cAAc;AAAA,QACzB,WAAU;AAAA,QAET,sBAAY,eAAe;AAAA;AAAA,IAC9B;AAAA,KACF,GACF;AAEJ;;;AD7EA,SAAS,sBAAsB;AAuKpB,gBAAAC,MA+CL,QAAAC,aA/CK;AA5FX,SAAS,aAAa,OAAmB;AACvC,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,QAAM,WAAW,YAAY;AAC7B,QAAM,WAAW,YAAY;AAC7B,QAAM,gBAAgB,SAAS;AAE/B,QAAM,CAAC,UAAU,IAAIC,UAAS,MAAM,eAAe,MAAM,YAAY,GAAG;AACxE,QAAM,CAAC,MAAM,OAAO,IAAIA;AAAA,IACtB,MAAM,eAAe,QAAQ;AAAA,EAC/B;AACA,QAAM,CAAC,YAAY,aAAa,IAAIA,UAAS,EAAE;AAC/C,QAAM,CAAC,UAAU,WAAW,IAAIA,UAAS,EAAE;AAC3C,QAAM,CAAC,aAAa,cAAc,IAAIA,UAAwB,IAAI;AAElE,YAAU,MAAM;AACd,QAAI,mBAAmB;AACrB,eAAS,YAAY,EAAE,SAAS,KAAK,CAAC;AAAA,EAC1C,GAAG,CAAC,iBAAiB,gBAAgB,UAAU,UAAU,CAAC;AAE1D,YAAU,MAAM;AACd,QAAI,CAAC,mBAAmB,CAAC,WAAW,eAAgB;AACpD,QAAI,QAAQ,WAAW,GAAG;AACxB,qBAAe,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ;AAC3C;AAAA,UACE,eAAe,GAAG,EAAE,WAAW;AAAA,QACjC;AACA,gBAAQ,kBAAkB;AAAA,MAC5B,CAAC;AAAA,IACH,WAAW,QAAQ,SAAS,GAAG;AAC7B,cAAQ,kBAAkB;AAAA,IAC5B;AAAA,EACF,GAAG,CAAC,iBAAiB,SAAS,gBAAgB,cAAc,CAAC;AAE7D,YAAU,MAAM;AACd,QAAI,QAAQ,GAAG;AACb,aAAO,SAAS,OAAO,OAAO,GAAG;AAAA,EACrC,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,yBAAyBC;AAAA,IAC7B,OAAO,MAAuB;AAC5B,QAAE,eAAe;AACjB,mBAAa;AACb,UAAI;AACF,cAAM,QAAQ,EAAE,YAAY,SAAS,CAAC;AACtC,cAAM,mBAAmB;AAAA,MAC3B,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,IACA,CAAC,YAAY,UAAU,SAAS,oBAAoB,YAAY;AAAA,EAClE;AAEA,QAAM,qBAAqBA;AAAA,IACzB,OAAO,OAAe;AACpB,qBAAe,IAAI;AACnB,UAAI;AACF,cAAM,eAAe,EAAE;AAAA,MACzB,SAAS,KAAK;AACZ;AAAA,UACE,eAAe,GAAG,EAAE,WAAW;AAAA,QACjC;AAAA,MACF;AAAA,IACF;AAAA,IACA,CAAC,cAAc;AAAA,EACjB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,MAAM,OAA8C;AAClE,QAAM,EAAE,QAAQ,WAAW,OAAO,QAAQ,IAAI;AAC9C,QAAM,OAAO,aAAa,KAAK;AAE/B,MAAI,QAAQ,GAAG,iBAAiB;AAC9B,WAAO,gBAAAH,KAAC,sBAAmB;AAAA,EAC7B;AAEA,MAAI,KAAK,SAAS,sBAAsB,SAAS;AAC/C,WACE,gBAAAA;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,OAAO,KAAK;AAAA,QACZ,UAAU,KAAK;AAAA;AAAA,IACjB;AAAA,EAEJ;AAEA,SACE,gBAAAA;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA;AAAA,EACF;AAEJ;AAEA,SAAS,qBAAqB;AAC5B,SACE,gBAAAA,KAAC,SAAI,WAAU,iDACb,0BAAAA,KAAC,OAAE,WAAU,yBAAwB,8CAAgC,GACvE;AAEJ;AASA,SAAS,eAAe;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAwB;AACtB,SACE,gBAAAA,KAAC,SAAI,WAAU,8DACb,0BAAAC,MAAC,SAAI,WAAU,qDACb;AAAA,oBAAAD,KAAC,QAAG,WAAU,oBAAmB,qBAAO;AAAA,IAEvC,SACC,gBAAAA,KAACI,QAAA,EAAM,WAAU,8CACf,0BAAAJ,KAAC,OAAE,WAAU,WAAW,iBAAM,GAChC;AAAA,IAGD,QAAQ,SAAS,cAChB,gBAAAA;AAAA,MAAC;AAAA;AAAA,QACC,YAAY,KAAK;AAAA,QACjB,UAAU,KAAK;AAAA,QACf;AAAA,QACA,oBAAoB,KAAK;AAAA,QACzB,kBAAkB,KAAK;AAAA,QACvB,UAAU,KAAK;AAAA;AAAA,IACjB;AAAA,IAGD,QAAQ,SAAS,SAAS,OAAO,OAAO,aACvC,gBAAAA,KAAC,kBAAe,WAAW,OAAO,MAAM,WAAW;AAAA,KAEvD,GACF;AAEJ;AAaA,SAAS,eAAe;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAwB;AACtB,SACE,gBAAAC,MAAC,UAAK,UAAoB,WAAU,aAClC;AAAA,oBAAAA,MAAC,SAAI,WAAU,aACb;AAAA,sBAAAD,KAAC,SAAM,SAAQ,cAAa,+BAAiB;AAAA,MAC7C,gBAAAA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,MAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,mBAAmB,EAAE,OAAO,KAAK;AAAA,UAClD,UAAQ;AAAA,UACR,aAAY;AAAA;AAAA,MACd;AAAA,OACF;AAAA,IAEA,gBAAAC,MAAC,SAAI,WAAU,aACb;AAAA,sBAAAD,KAAC,SAAM,SAAQ,YAAW,sBAAQ;AAAA,MAClC,gBAAAA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,MAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,iBAAiB,EAAE,OAAO,KAAK;AAAA,UAChD,UAAQ;AAAA,UACR,aAAY;AAAA;AAAA,MACd;AAAA,OACF;AAAA,IAEA,gBAAAA,KAACK,SAAA,EAAO,MAAK,UAAS,UAAU,WAAW,WAAU,UAClD,sBAAY,kBAAkB,WACjC;AAAA,KACF;AAEJ;AASA,SAAS,eAAe,EAAE,UAAU,GAAwB;AAC1D,SACE,gBAAAJ,MAAC,SAAI,WAAU,QACb;AAAA,oBAAAA,MAAC,SAAI,WAAU,iBACb;AAAA,sBAAAD,KAAC,SAAI,WAAU,sCACb,0BAAAA,KAAC,SAAI,WAAU,oCAAmC,GACpD;AAAA,MACA,gBAAAA,KAAC,SAAI,WAAU,wCACb,0BAAAA,KAAC,UAAK,WAAU,uCAAsC,8BAEtD,GACF;AAAA,OACF;AAAA,IAEA,gBAAAA,KAAC,SAAI,WAAU,aACZ,iBAAO,QAAQ,SAAS,EAAE;AAAA,MAAI,CAAC,CAAC,KAAK,QAAQ,MAC5C,SAAS,UACP,gBAAAC;AAAA,QAAC;AAAA;AAAA,UAEC,MAAM,SAAS;AAAA,UACf,WAAU;AAAA,UACX;AAAA;AAAA,YACgB,SAAS;AAAA;AAAA;AAAA,QAJnB;AAAA,MAKP,IACE;AAAA,IACN,GACF;AAAA,KACF;AAEJ;;;AEjVA,SAAS,UAAU,eAAAK,oBAAmB;AACtC,SAAyB,aAAAC,YAAW,QAAQ,YAAAC,iBAAgB;AAC5D,SAAS,eAAe;AAsDhB,SAOG,UAPH,OAAAC,YAAA;AApBD,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA4C;AAC1C,QAAM,WAAWH,aAAY;AAC7B,QAAM,CAAC,cAAc,eAAe,IAAIE,UAAS,IAAI;AACrD,QAAM,UAAU,OAAO,cAAc;AAErC,EAAAD,WAAU,MAAM;AACd,YAAQ,QAAQ,EAAE,QAAQ,MAAM,gBAAgB,KAAK,CAAC;AAAA,EACxD,GAAG,CAAC,CAAC;AAEL,MAAI,qBAAqB,cAAc;AACrC,WACE,gBAAAE,KAAC,SAAI,WAAU,iDACb,0BAAAA,KAAC,WAAQ,MAAK,MAAK,GACrB;AAAA,EAEJ;AAGA,MAAI,CAAC,aAAa;AAChB,WAAO,gBAAAA,KAAA,YAAG,UAAS;AAAA,EACrB;AAGA,MAAI,CAAC,mBAAmB,CAAC,aAAa;AACpC,WACE,gBAAAA;AAAA,MAAC;AAAA;AAAA,QACC,IAAG;AAAA,QACH,OAAO,EAAE,MAAM,UAAU,MAAM,cAAc;AAAA,QAC7C,SAAO;AAAA;AAAA,IACT;AAAA,EAEJ;AAGA,MAAI,CAAC,gBAAgB;AACnB,WACE,gBAAAA;AAAA,MAAC;AAAA;AAAA,QACC,IAAG;AAAA,QACH,OAAO,EAAE,MAAM,UAAU,MAAM,mBAAmB;AAAA,QAClD,SAAO;AAAA;AAAA,IACT;AAAA,EAEJ;AAEA,SAAO,gBAAAA,KAAA,YAAG,UAAS;AACrB;","names":["useState","useCallback","Button","Alert","jsx","jsxs","useState","useCallback","Alert","Button","useLocation","useEffect","useState","jsx"]}