@phis/ui 0.2.1 → 0.3.0

package/plugins/runtime-modules/asset/widgets/media-picker/config.js

@@ -1,3 +1,4 @@
+import { isPhiRecord } from "../../../../../helpers/is-record";
 import { resolvePhiCmsWidgetPluginKey } from "../../../../../constants/cms-widget-types";
 import { normalizePhiMediaKind, PhiMediaKind } from "../../../../../constants/media";
 import { PHI_SIGNAL_VALUE_SCHEMAS, readPhiSignalRouteSet, } from "../../../../../types/signals";
@@ -8,8 +9,8 @@ const PHI_MEDIA_PICKER_DATA_SOURCE = {
     providerKey: PHI_ASSET_RUNTIME_DATA_PROVIDER_KEYS.mediaCollection,
     resourceKey: "assets",
 };
-export function normalizePhiCmsMediaPickerWidgetConfig(config) {
-    if (!config || typeof config !== "object" || Array.isArray(config)) {
+function normalizePhiCmsMediaPickerWidgetConfig(config) {
+    if (!isPhiRecord(config)) {
         return {
             mediaType: PhiMediaKind.Image,
             presentationFlags: null,
@@ -36,7 +37,7 @@ export function normalizePhiCmsMediaPickerWidgetConfig(config) {
         dataSource: PHI_MEDIA_PICKER_DATA_SOURCE,
     };
 }
-export function parsePhiCmsMediaPickerWidgetConfig(config) {
+function parsePhiCmsMediaPickerWidgetConfig(config) {
     return normalizePhiCmsMediaPickerWidgetConfig(config);
 }
 export const PHI_MEDIA_PICKER_WIDGET_DEFINITION = {

package/plugins/runtime-modules/auth/admin-settings-forms.d.ts

@@ -5,11 +5,4 @@ export declare const PHI_AUTH_ADMIN_SETTINGS_FORM_IDS: {
     readonly installationCreate: `${string}/forms/${string}`;
     readonly installationEdit: `${string}/forms/${string}`;
 };
-export declare const PHI_AUTH_ADMIN_SETTINGS_FORM_HANDLER_KEYS: {
-    readonly policy: "auth.admin.policy";
-    readonly passwordMethod: "auth.admin.password-method";
-    readonly totpPolicy: "auth.admin.totp-policy";
-    readonly installationCreate: "auth.admin.installation-create";
-    readonly installationUpdate: "auth.admin.installation-update";
-};
 export declare const PHI_AUTH_ADMIN_SETTINGS_RUNTIME_MODULE_FORMS: readonly [import("../contracts").PhiRuntimeModuleFormDefinition, import("../contracts").PhiRuntimeModuleFormDefinition, import("../contracts").PhiRuntimeModuleFormDefinition, import("../contracts").PhiRuntimeModuleFormDefinition, import("../contracts").PhiRuntimeModuleFormDefinition];

package/plugins/runtime-modules/auth/admin-settings-forms.js

@@ -13,7 +13,7 @@ export const PHI_AUTH_ADMIN_SETTINGS_FORM_IDS = {
     installationCreate: createPhiFormId(PHI_SHARED_PACKAGE_NAME, "auth/admin-installation-create"),
     installationEdit: createPhiFormId(PHI_SHARED_PACKAGE_NAME, "auth/admin-installation-edit"),
 };
-export const PHI_AUTH_ADMIN_SETTINGS_FORM_HANDLER_KEYS = {
+const PHI_AUTH_ADMIN_SETTINGS_FORM_HANDLER_KEYS = {
     policy: "auth.admin.policy",
     passwordMethod: "auth.admin.password-method",
     totpPolicy: "auth.admin.totp-policy",
@@ -313,12 +313,12 @@ async function loadLabels(context) {
         providerGithub: "GitHub",
         providerMicrosoft: "Microsoft",
         installationKey: labels.installations.installationKey,
-        installationKeyRequired: labels.installations.installationKey,
+        installationKeyRequired: labels.installations.installationKeyRequired,
         installationKeyHint: labels.installations.installationKeyHint,
         installationKeyInvalid: labels.installations.installationKeyInvalid,
         installationProvider: labels.installations.provider,
         installationClientId: labels.providers.clientId,
-        installationClientIdRequired: labels.providers.clientId,
+        installationClientIdRequired: labels.providers.clientIdRequired,
         installationClientSecret: labels.providers.clientSecret,
         installationClientSecretHint: labels.providers.secretHint,
         installationTenant: labels.providers.tenant,

package/plugins/runtime-modules/auth/controller/definition.d.ts

@@ -1,4 +1,12 @@
-type PhiEmptyControllerConfig = Record<string, never>;
+import { type PhiSignalRouteSet } from "../../../../types/signals";
+/**
+ * Whom the Controller opens, closes and fills: the login Overlay and its Form. The tree that holds them
+ * says so (`controllerSettings`) -- the Area Overlay preset for the sign-in Overlay. Mounted where nothing
+ * names them, as on the sign-in Page, it opens nothing and sends a visitor to the Public `/login`.
+ */
+export type PhiAuthControllerConfig = {
+    signalRoutes: PhiSignalRouteSet | null;
+};
 /**
  * What the Auth Controller is handed about the viewer before it renders.
  *
@@ -80,7 +88,8 @@ export declare const PHI_AUTH_CONTROLLER_DEFINITION: {
             valueSchema: `${string}/signals/${string}`;
         })[];
     };
-    defaultConfig: {};
-    parseConfig: () => PhiEmptyControllerConfig;
+    defaultConfig: {
+        signalRoutes: null;
+    };
+    parseConfig: (raw: Record<string, unknown>) => PhiAuthControllerConfig;
 };
-export {};

package/plugins/runtime-modules/auth/controller/definition.js

@@ -1,4 +1,4 @@
-import { PHI_SIGNAL_VALUE_SCHEMAS } from "../../../../types/signals";
+import { PHI_SIGNAL_VALUE_SCHEMAS, readPhiSignalRouteSet, } from "../../../../types/signals";
 import { PHI_AUTH_CONTROLLER_KEY, PHI_AUTH_CONTROLLER_PLUGIN_KEY, } from "./address";
 export const PHI_AUTH_CONTROLLER_DEFINITION = {
     kind: "controller",
@@ -88,6 +88,6 @@ export const PHI_AUTH_CONTROLLER_DEFINITION = {
             },
         ],
     },
-    defaultConfig: {},
-    parseConfig: () => ({}),
+    defaultConfig: { signalRoutes: null },
+    parseConfig: (raw) => ({ signalRoutes: readPhiSignalRouteSet(raw.signalRoutes) }),
 };

package/plugins/runtime-modules/auth/controller/server-definition.d.ts

@@ -1,5 +1,5 @@
 import "server-only";
-import { type PhiAuthControllerPreload } from "./definition";
+import { type PhiAuthControllerConfig, type PhiAuthControllerPreload } from "./definition";
 /**
  * Where the viewer stands in signing in, read while the page renders.
  *
@@ -14,7 +14,7 @@ import { type PhiAuthControllerPreload } from "./definition";
  * `anonymous`, which is the truth for them.
  */
 export declare const PHI_AUTH_CONTROLLER_SERVER_DEFINITION: {
-    serverPreload: ({ runtime }: import("../../../../types").PhiRuntimeControllerServerPreloadArgs<Record<string, never>>) => Promise<PhiAuthControllerPreload>;
+    serverPreload: ({ runtime }: import("../../../../types").PhiRuntimeControllerServerPreloadArgs<PhiAuthControllerConfig>) => Promise<PhiAuthControllerPreload>;
     kind: "controller";
     pluginKey: string;
     key: "default";
@@ -76,8 +76,8 @@ export declare const PHI_AUTH_CONTROLLER_SERVER_DEFINITION: {
             valueSchema: `${string}/signals/${string}`;
         })[];
     };
-    defaultConfig: {};
-    parseConfig: () => {
-        [x: string]: never;
+    defaultConfig: {
+        signalRoutes: null;
     };
+    parseConfig: (raw: Record<string, unknown>) => PhiAuthControllerConfig;
 };

package/plugins/runtime-modules/auth/controller-plugin.js

@@ -1,5 +1,6 @@
 "use client";
 import { jsx as _jsx } from "react/jsx-runtime";
+import { isPhiRecord } from "../../../helpers/is-record";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { PHI_AUTH_CONTROLLER_DEFINITION, } from "./controller/definition";
 import { usePhiStateMachineBinding } from "../../../components/runtime/phi-state-machine-binding";
@@ -9,10 +10,9 @@ import { createPhiSignalCorrelationId, usePhiSignalDispatcher, usePhiSignalListe
 import { normalizeLoginRedirectTarget, resolveSafePostLoginTarget, } from "../../../components/widgets/login-redirect";
 import { createPhiRuntimeControllerClient } from "../../../components/runtime/runtime-controller-client-factory";
 import { localizeAreaPath } from "../../../helpers/locale";
-import { createPhiSignalAddress, PHI_SIGNAL_VALUE_SCHEMAS } from "../../../types/signals";
-import { createPhiRuntimeFormControllerAddress } from "../../../components/forms/runtime-form-controller-address";
+import { findPhiSignalRoutesByCapabilityId, PHI_SIGNAL_VALUE_SCHEMAS } from "../../../types/signals";
 import { createPhiCoreRuntimeControllerAddress } from "../../../components/runtime/core-runtime-controller-address";
-import { isPhiAuthLoginOverlayArea, PHI_AUTH_LOGIN_OVERLAY_IDS, } from "./overlay-ids";
+import { dispatchPhiSignalCapability } from "../../../components/runtime/runtime-signal-identity";
 /**
  * Whether the provider on a surface can present the state the machine is in.
  *
@@ -28,7 +28,7 @@ function canPresentPhiAuthState(state, capabilities) {
     const capability = PHI_AUTH_MACHINE_DEFINITION.states[state]?.capability;
     return !capability || capabilities?.includes(capability) === true;
 }
-function PhiAuthControllerView({ address, mountScope, runtime, preloadData, }) {
+function PhiAuthControllerView({ address, mountScope, runtime, config, preloadData, }) {
     const dispatchSignal = usePhiSignalDispatcher();
     /*
      * Where signing in stands, held here rather than in the Widget that draws the second factor.
@@ -89,13 +89,16 @@ function PhiAuthControllerView({ address, mountScope, runtime, preloadData, }) {
     const pendingOpenRef = useRef(null);
     const [openSequence, setOpenSequence] = useState(0);
     const locale = runtime.locale.current;
-    const overlayIds = isPhiAuthLoginOverlayArea(runtime.area)
-        ? PHI_AUTH_LOGIN_OVERLAY_IDS[runtime.area]
-        : null;
-    const overlayAddress = useMemo(() => overlayIds ? createPhiSignalAddress("cms", overlayIds.overlayLogin) : null, [overlayIds]);
-    const formControllerAddress = useMemo(() => overlayIds
-        ? createPhiRuntimeFormControllerAddress(`widget-${overlayIds.widgetLogin}`)
-        : null, [overlayIds]);
+    /*
+     * The login Overlay and its Form, as the tree that holds them named them.
+     *
+     * They used to be read off the Area's preset id map, which named them in this file whether or not
+     * that Overlay was the one on the page. Whether there is an Overlay to open is now whether a route
+     * was written for opening one: without it the visitor goes to the Public `/login` instead.
+     */
+    const emitRoutes = useMemo(() => config.signalRoutes?.emits ?? [], [config.signalRoutes?.emits]);
+    const canOpenOverlay = useMemo(() => findPhiSignalRoutesByCapabilityId(emitRoutes, "loginOverlayOpen").some((route) => route.receiver != null), [emitRoutes]);
+    const emitCapability = useCallback((capabilityId, value, correlationId) => dispatchPhiSignalCapability(dispatchSignal, address, emitRoutes, capabilityId, value, correlationId ?? createPhiSignalCorrelationId()), [address, dispatchSignal, emitRoutes]);
     const dispatch = useCallback((input) => {
         dispatchSignal({
             scope: "area",
@@ -107,18 +110,8 @@ function PhiAuthControllerView({ address, mountScope, runtime, preloadData, }) {
     }, [address, dispatchSignal]);
     const closeOverlay = useCallback((correlationId) => {
         pendingOpenRef.current = null;
-        if (overlayAddress) {
-            dispatch({
-                channel: "dialog",
-                action: "close",
-                value: null,
-                valueType: "none",
-                valueSchema: null,
-                receiver: overlayAddress,
-                correlationId,
-            });
-        }
-    }, [dispatch, overlayAddress]);
+        emitCapability("loginOverlayClose", null, correlationId);
+    }, [emitCapability]);
     /*
      * Every forward this Controller decides is performed by the runtime, never by this component.
      *
@@ -219,7 +212,7 @@ function PhiAuthControllerView({ address, mountScope, runtime, preloadData, }) {
              */
             if (payload?.complete === false) {
                 const next = payload.workflow;
-                if (next && typeof next === "object" && !Array.isArray(next)) {
+                if (isPhiRecord(next)) {
                     setWorkflow(next);
                 }
                 return;
@@ -264,8 +257,7 @@ function PhiAuthControllerView({ address, mountScope, runtime, preloadData, }) {
          * answer today, and it stays the right question if a Site ever opens this modal from somewhere
          * other than the beginning.
          */
-        if (!overlayAddress ||
-            !formControllerAddress ||
+        if (!canOpenOverlay ||
             !canPresentPhiAuthState(PHI_AUTH_MACHINE_DEFINITION.initial, runtime.authUiProvider?.capabilities)) {
             redirectToPublicLogin(next);
             return;
@@ -281,32 +273,16 @@ function PhiAuthControllerView({ address, mountScope, runtime, preloadData, }) {
     });
     useEffect(() => {
         const pendingOpen = pendingOpenRef.current;
-        if (!pendingOpen || !overlayAddress || !formControllerAddress)
+        if (!pendingOpen || !canOpenOverlay)
             return;
-        dispatch({
-            channel: "values",
-            action: "change",
-            value: { values: { next: pendingOpen.nextPath } },
-            valueType: "json",
-            valueSchema: PHI_SIGNAL_VALUE_SCHEMAS.formValues,
-            receiver: formControllerAddress,
-            correlationId: pendingOpen.correlationId,
-        });
-        dispatch({
-            channel: "dialog",
-            action: "activate",
-            value: null,
-            valueType: "none",
-            valueSchema: null,
-            receiver: overlayAddress,
-            correlationId: pendingOpen.correlationId,
-        });
+        emitCapability("loginValues", { values: { next: pendingOpen.nextPath } }, pendingOpen.correlationId);
+        emitCapability("loginOverlayOpen", null, pendingOpen.correlationId);
         pendingOpenRef.current = null;
-    }, [dispatch, formControllerAddress, openSequence, overlayAddress]);
+    }, [canOpenOverlay, emitCapability, openSequence]);
     return null;
 }
 const PHI_AUTH_CONTROLLER_CLIENT_PLUGIN = {
     ...PHI_AUTH_CONTROLLER_DEFINITION,
-    renderController: ({ address, mountScope, runtime, preloadData }) => (_jsx(PhiAuthControllerView, { address: address, mountScope: mountScope, runtime: runtime, preloadData: preloadData })),
+    renderController: ({ address, mountScope, runtime, config, preloadData }) => (_jsx(PhiAuthControllerView, { address: address, mountScope: mountScope, runtime: runtime, config: config, preloadData: preloadData })),
 };
 export const PhiAuthControllerClient = createPhiRuntimeControllerClient(PHI_AUTH_CONTROLLER_CLIENT_PLUGIN);

package/plugins/runtime-modules/auth/definition.d.ts

@@ -1,5 +1,4 @@
 export declare const PHI_AUTH_RUNTIME_MODULE_DEFINITION: {
-    moduleId: "@phis/ui/modules/auth";
     kind: "module";
     eligibleAreas: ("public" | "app" | "admin")[];
     serverBinding: import("../../../types").PhiRuntimeModuleServerBinding;
@@ -322,4 +321,5 @@ export declare const PHI_AUTH_RUNTIME_MODULE_DEFINITION: {
             })[];
         }[];
     }[];
+    moduleId: "@phis/ui/modules/auth";
 };

package/plugins/runtime-modules/auth/definition.js

@@ -2,12 +2,12 @@ import { PHI_AUTH_CONTROLLER_DEFINITION, } from "./controller/definition";
 import { PHI_AUTH_CONTROLLER_TYPE, } from "./controller/address";
 import { PHI_AUTH_RUNTIME_DATA_PROVIDER_DESCRIPTORS } from "../auth/data-providers";
 import { buildPhiRuntimeModuleControllerDescriptor } from "../contracts";
-import { PHI_AUTH_RUNTIME_MODULE_ID } from "./ids";
+import { PHI_AUTH_RUNTIME_MODULE_IDENTITY } from "./ids";
 import { PHI_AUTH_LOGIN_OVERLAY_IDS } from "./overlay-ids";
 import { PHI_AUTH_FORM_FIELD_TYPE_PROVIDER_DESCRIPTORS, PHI_AUTH_FORM_HANDLER_PROVIDER_DESCRIPTORS, } from "./form-providers";
 import { PHI_CORE_AUTH_SERVER_BINDING, } from "../../../types/server-capabilities";
 export const PHI_AUTH_RUNTIME_MODULE_DEFINITION = {
-    moduleId: PHI_AUTH_RUNTIME_MODULE_ID,
+    ...PHI_AUTH_RUNTIME_MODULE_IDENTITY,
     kind: "module",
     eligibleAreas: ["public", "admin", "app"],
     serverBinding: PHI_CORE_AUTH_SERVER_BINDING,

package/plugins/runtime-modules/auth/form-provider-registry.js

@@ -24,13 +24,17 @@ export const PHI_AUTH_FORM_PROVIDER_REGISTRY = createPhiFormProviderRegistry({
                 const text = readText(field.config?.text);
                 const linkLabel = readText(field.config?.linkLabel);
                 const href = readText(field.config?.href);
+                /*
+                 * The link and its words are the placement's to state; the descriptor declares `href` required.
+                 * A fallback here linked an English sentence to a path with no locale, which looked like a working
+                 * consent while pointing at a page that may not exist.
+                 */
+                if (!href || !linkLabel) {
+                    throw new Error(`Terms consent field "${field.key}" needs both \`href\` and \`linkLabel\` in its config.`);
+                }
                 const sentence = text ? resolvePhiFormText(text, labels, formConfig) : "%1";
-                const resolvedLinkLabel = linkLabel
-                    ? resolvePhiFormText(linkLabel, labels, formConfig)
-                    : "Terms & Conditions";
-                const resolvedHref = href
-                    ? resolvePhiFormText(href, labels, formConfig)
-                    : "/terms-and-conditions";
+                const resolvedLinkLabel = resolvePhiFormText(linkLabel, labels, formConfig);
+                const resolvedHref = resolvePhiFormText(href, labels, formConfig);
                 const [before, after] = sentence.split("%1");
                 return (_jsx(PhiCheckboxControl, { checked: checked, disabled: disabled, label: (_jsxs("span", { children: [before, _jsx(PhiLink, { href: resolvedHref, children: resolvedLinkLabel }), after ?? ""] })), onChange: (nextChecked) => onChange?.(nextChecked) }));
             },

package/plugins/runtime-modules/auth/ids.d.ts

@@ -1,4 +1,20 @@
 export declare const PHI_AUTH_RUNTIME_MODULE_ID: "@phis/ui/modules/auth";
+/**
+ * The Module's identity as its Label Sets inherit it (`definePhiRuntimeModuleLabelSet`): the id and,
+ * where a Module declares one, its source locale. Stated here beside the id and spread into the
+ * definition, so a Label Set a tree or a form reads does not import the definition that imports the
+ * tree -- and a Module that writes in another language says so once.
+ */
+export declare const PHI_AUTH_RUNTIME_MODULE_IDENTITY: {
+    readonly moduleId: "@phis/ui/modules/auth";
+};
+/**
+ * The route preset the Public login Page is: what the Area access guard looks up in the active route
+ * table to learn where signing in is answered on this Site. The identity lives in the Foundation
+ * (`constants/public-login-route.ts`) because the guard may not import this Module; the key is read from
+ * there so the Module's route and the guard's lookup are one statement. The path is the Site's to assign.
+ */
+export declare const PHI_AUTH_PUBLIC_LOGIN_ROUTE_PRESET_KEY: "public-login-page";
 export declare const PHI_AUTH_RUNTIME_DATA_PROVIDER_KEYS: {
     readonly installations: `${string}/${string}`;
 };

package/plugins/runtime-modules/auth/ids.js

@@ -1,6 +1,23 @@
 import { PHI_SHARED_PACKAGE_NAME } from "../../../types/signals";
 import { createPhiSharedRuntimeDataProviderKey } from "../../../constants/runtime-data-provider-key";
+import { PHI_PUBLIC_LOGIN_ROUTE_IDENTITY } from "../../../constants/public-login-route";
 export const PHI_AUTH_RUNTIME_MODULE_ID = `${PHI_SHARED_PACKAGE_NAME}/modules/auth`;
+/**
+ * The Module's identity as its Label Sets inherit it (`definePhiRuntimeModuleLabelSet`): the id and,
+ * where a Module declares one, its source locale. Stated here beside the id and spread into the
+ * definition, so a Label Set a tree or a form reads does not import the definition that imports the
+ * tree -- and a Module that writes in another language says so once.
+ */
+export const PHI_AUTH_RUNTIME_MODULE_IDENTITY = {
+    moduleId: PHI_AUTH_RUNTIME_MODULE_ID,
+};
+/**
+ * The route preset the Public login Page is: what the Area access guard looks up in the active route
+ * table to learn where signing in is answered on this Site. The identity lives in the Foundation
+ * (`constants/public-login-route.ts`) because the guard may not import this Module; the key is read from
+ * there so the Module's route and the guard's lookup are one statement. The path is the Site's to assign.
+ */
+export const PHI_AUTH_PUBLIC_LOGIN_ROUTE_PRESET_KEY = PHI_PUBLIC_LOGIN_ROUTE_IDENTITY.presetKey;
 export const PHI_AUTH_RUNTIME_DATA_PROVIDER_KEYS = {
     installations: createPhiSharedRuntimeDataProviderKey("tables", "auth-installations"),
 };

package/plugins/runtime-modules/auth/machine.d.ts

@@ -1,17 +1,4 @@
 import type { PhiStateMachineDefinition, PhiStateMachineReference } from "../../../types/state-machine";
-/**
- * Where a viewer stands in signing in, as Core decides it and this package only shows it.
- *
- * The first consumer of [design/STATE_MACHINES.md](../../../design/STATE_MACHINES.md), and the reason
- * `server` authority exists. `phis-server` AUTHENTICATION.md §9 forbids the browser reconstructing the
- * authentication state machine; until now there was nowhere else to put it, so the second-factor state
- * arrived as a field on the login response and lived in a Widget's `useState` -- which a reload threw
- * away, for a state Core would still have answered for.
- *
- * Under `server` authority there is no local transition function to write, so that failure mode is not
- * available here. An event is a request; `project()` brings back whatever Core said.
- */
-export declare const PHI_AUTH_MACHINE_KEY = "workflow";
 export declare const PHI_AUTH_MACHINE_REFERENCE: PhiStateMachineReference;
 /**
  * What the Widgets around it are allowed to ask, and the whole of it.

package/plugins/runtime-modules/auth/machine.js

@@ -11,7 +11,7 @@ import { PHI_AUTH_RUNTIME_MODULE_ID } from "./ids";
  * Under `server` authority there is no local transition function to write, so that failure mode is not
  * available here. An event is a request; `project()` brings back whatever Core said.
  */
-export const PHI_AUTH_MACHINE_KEY = "workflow";
+const PHI_AUTH_MACHINE_KEY = "workflow";
 export const PHI_AUTH_MACHINE_REFERENCE = {
     ownerModuleId: PHI_AUTH_RUNTIME_MODULE_ID,
     machineKey: PHI_AUTH_MACHINE_KEY,

package/plugins/runtime-modules/auth/overlay-ids.d.ts

@@ -20,4 +20,3 @@ export declare const PHI_AUTH_LOGIN_OVERLAY_IDS: {
         readonly presetKey: string;
     };
 };
-export declare function isPhiAuthLoginOverlayArea(area: PhiCmsAreaKey): area is PhiAuthLoginOverlayArea;

package/plugins/runtime-modules/auth/overlay-ids.js

@@ -22,6 +22,3 @@ export const PHI_AUTH_LOGIN_OVERLAY_IDS = {
     public: createAuthLoginOverlayIds("public"),
     app: createAuthLoginOverlayIds("app"),
 };
-export function isPhiAuthLoginOverlayArea(area) {
-    return area === "public" || area === "app";
-}

package/plugins/runtime-modules/auth/services/installations-table.js

@@ -1,5 +1,6 @@
 "use client";
 import { PHI_AUTH_RUNTIME_DATA_PROVIDER_KEYS } from "../ids";
+import { isPhiRecord } from "../../../../helpers/is-record";
 import { PhiTableProviderError, } from "../../../../types/table-widget";
 import { createPhiTableProviderClient } from "../../../../components/widgets/client/shared/phi-table-provider";
 import { fetchPhiCsrfToken } from "../../../../helpers/csrf-token";
@@ -7,7 +8,7 @@ import { PHI_AUTH_RUNTIME_DATA_PROVIDER_DESCRIPTORS } from "../data-providers";
 import { readPhiTableProviderResponse, } from "../../../../components/widgets/client/shared/phi-table-provider-response";
 const API_PATH = "/api/auth/admin/installations";
 function flattenValidation(row) {
-    const validation = row.validation && typeof row.validation === "object" && !Array.isArray(row.validation)
+    const validation = isPhiRecord(row.validation)
         ? row.validation
         : null;
     return {
@@ -35,7 +36,7 @@ async function loadInstallations(signal) {
         signal,
     }), RESPONSE_OPTIONS);
     return (Array.isArray(result?.installations) ? result.installations : [])
-        .filter((row) => Boolean(row) && typeof row === "object" && !Array.isArray(row))
+        .filter((row) => isPhiRecord(row))
         .map(flattenValidation);
 }
 async function queryInstallations({ resourceKey, signal, }) {
@@ -87,7 +88,7 @@ async function mutateInstallation(request) {
             headers: baseHeaders,
             body: JSON.stringify({ [request.fieldKey]: request.proposedValue }),
         }), RESPONSE_OPTIONS);
-        const row = result?.installation && typeof result.installation === "object" && !Array.isArray(result.installation)
+        const row = isPhiRecord(result?.installation)
             ? flattenValidation(result.installation)
             : null;
         const canonicalValue = row?.[request.fieldKey];

package/plugins/runtime-modules/auth/trees/phi-auth-area-overlay-tree.server.js

@@ -1,12 +1,13 @@
 import { PHI_CMS_DEFAULT_SLOT_INDEX } from "../../../../constants/cms-layout-types";
 import { createPhiCmsPresetNodes } from "../../../../helpers/cms-preset-nodes";
-import { PHI_COLOR, PHI_SPACE } from "../../../../theme/antd-css-var-contract";
 import { createPhiSignalAddress, PHI_SIGNAL_VALUE_SCHEMAS } from "../../../../types/signals";
 import { buildPhiLoginNodes, PHI_LOGIN_FORM_LAYOUT_CONFIG, } from "./phi-login-form-nodes";
 import { getPhiLoginFormLabels } from "../../../../components/widgets/label-sets/account";
-import { createPhiAuthControllerAddress } from "../controller/address";
+import { createPhiAuthControllerAddress, PHI_AUTH_CONTROLLER_TYPE } from "../controller/address";
+import { createPhiRuntimeFormControllerAddress } from "../../../../components/forms/runtime-form-controller-address";
 import { PHI_AUTH_LOGIN_OVERLAY_IDS, } from "../overlay-ids";
 import { readPhiServerApiCredentials } from "../../../../helpers/phis-server-credentials";
+import { PHI_DIALOG_BODY_CONFIG } from "../../../../helpers/cms-dialog";
 export async function buildPhiAuthAreaLoginOverlayTree({ page, runtime, area, }) {
     const ids = PHI_AUTH_LOGIN_OVERLAY_IDS[area];
     const login = buildPhiLoginNodes({
@@ -23,8 +24,39 @@ export async function buildPhiAuthAreaLoginOverlayTree({ page, runtime, area, })
         locale: runtime.locale.current,
     });
     const nodes = createPhiCmsPresetNodes(page);
+    const overlayAddress = createPhiSignalAddress("cms", ids.overlayLogin);
     return {
         page,
+        /*
+         * Whom the Auth Controller opens, closes and fills: this Overlay and its Form.
+         *
+         * The Controller used to look both up in the Area's preset id map. They are this tree's nodes, so
+         * this tree names them, and the setting arrives with the Overlay's zones as the Controller does
+         * (`materializePhiOverlayRuntimeControllerSettings`).
+         */
+        controllerSettings: [{
+                type: PHI_AUTH_CONTROLLER_TYPE,
+                instanceKey: "default",
+                mountScope: "area",
+                config: {
+                    signalRoutes: {
+                        emits: [
+                            { routeKey: `auth-${area}-login-controller-open`, capabilityId: "loginOverlayOpen", scope: "area", channel: "dialog", action: "activate", valueType: "none", receiver: overlayAddress },
+                            { routeKey: `auth-${area}-login-controller-close`, capabilityId: "loginOverlayClose", scope: "area", channel: "dialog", action: "close", valueType: "none", receiver: overlayAddress },
+                            {
+                                routeKey: `auth-${area}-login-controller-values`,
+                                capabilityId: "loginValues",
+                                scope: "area",
+                                channel: "values",
+                                action: "change",
+                                valueType: "json",
+                                valueSchema: PHI_SIGNAL_VALUE_SCHEMAS.formValues,
+                                receiver: createPhiRuntimeFormControllerAddress(`widget-${ids.widgetLogin}`),
+                            },
+                        ],
+                    },
+                },
+            }],
         regions: [],
         overlays: [nodes.overlay({
                 id: ids.overlayLogin,
@@ -92,12 +124,8 @@ export async function buildPhiAuthAreaLoginOverlayTree({ page, runtime, area, })
                 sortOrder: 0,
                 label: `${area} auth login body`,
                 config: {
+                    ...PHI_DIALOG_BODY_CONFIG,
                     ...PHI_LOGIN_FORM_LAYOUT_CONFIG,
-                    gap: PHI_SPACE.base,
-                    padding: PHI_SPACE.base,
-                    margin: 0,
-                    background: PHI_COLOR.bgLayout,
-                    border: false,
                 },
             }), ...login.layoutNodes],
         contentWidgets: login.contentWidgets,

package/plugins/runtime-modules/auth/trees/phi-auth-runtime-page-tree.js

@@ -27,7 +27,7 @@ export function buildPhiAuthRuntimePageTree({ page, presetKey, widgetTypeKey, la
                 regionType: PhiCmsRegionType.Content,
                 rootLayoutNodeId: layouts.layoutRoot,
                 sortOrder: 30,
-                config: { border: false },
+                config: {},
             })],
         layoutNodes: [nodes.layout({
                 id: layouts.layoutRoot,

package/plugins/runtime-modules/auth/trees/phi-default-admin-auth-settings-page-tree.js

@@ -162,6 +162,7 @@ export async function buildPhiDefaultAdminAuthSettingsPageTree({ page, runtime,
                                             label: labels.installations.createTitle,
                                             icon: "plus",
                                             display: "icon",
+                                            mode: "primary",
                                             execution: "signal",
                                         },
                                     ],

package/plugins/runtime-modules/auth/trees/phi-default-pub-confirm-page-tree.js

@@ -2,10 +2,12 @@ import { createPhiPresetCmsInstanceIdMap } from "../../../../types/cms-instance-
 import { PHI_SPACE } from "../../../../theme/antd-css-var-contract";
 import { PHI_AUTH_RUNTIME_MODULE_ID } from "../ids";
 import { PHI_CMS_DEFAULT_SLOT_INDEX, PHI_CMS_SPLIT_LAYOUT_SLOT_INDEX, } from "../../../../constants/cms-layout-types";
-import { PhiCmsPageType, PhiCmsRegionType, } from "../../../../constants/phi-cms";
+import { PhiCmsPageType } from "../../../../constants/phi-cms";
+import { buildPhiBasePageContentScaffold, PHI_BASE_PAGE_LAYOUT_NODE_ID, } from "../../../../components/regions/presets/phi-base-page-layout";
 import { createPhiCmsPresetNodes } from "../../../../helpers/cms-preset-nodes";
 import { PHI_SHARED_FORM_IDS } from "../../../../components/forms/shared-form-ids";
 import { createPhiSignalAddress, PHI_SIGNAL_VALUE_SCHEMAS } from "../../../../types/signals";
+import { PHI_SURFACE_CARD } from "../../../../helpers/surface-presets";
 const SYNTHETIC_CONFIRM_REGION_IDS = {
     regionContent: -210,
 };
@@ -14,7 +16,7 @@ export async function buildPhiDefaultPubConfirmPageTree({ page, presetKey, }) {
         domain: "page",
         ownerModuleId: PHI_AUTH_RUNTIME_MODULE_ID,
         presetKey,
-    }, ["layoutContent", "layoutForm"]);
+    }, ["layoutContent", "layoutForm", "layoutAside"]);
     const SYNTHETIC_CONFIRM_WIDGET_IDS = createPhiPresetCmsInstanceIdMap({
         domain: "page",
         ownerModuleId: PHI_AUTH_RUNTIME_MODULE_ID,
@@ -50,47 +52,48 @@ export async function buildPhiDefaultPubConfirmPageTree({ page, presetKey, }) {
         operator: "truthy",
     };
     const nodes = createPhiCmsPresetNodes(page);
+    const scaffold = buildPhiBasePageContentScaffold({ page, regionId: SYNTHETIC_CONFIRM_REGION_IDS.regionContent });
     return {
         page: nodes.page({ pageType: PhiCmsPageType.Standard }),
         overlays: [],
-        regions: [
-            nodes.region({
-                id: SYNTHETIC_CONFIRM_REGION_IDS.regionContent,
-                regionType: PhiCmsRegionType.Content,
-                rootLayoutNodeId: SYNTHETIC_CONFIRM_LAYOUT_IDS.layoutContent,
-                sortOrder: 30,
-            }),
-        ],
+        regions: [scaffold.region],
         layoutNodes: [
+            // The base scaffold every module Page stands on; it carries the page's padding, the card its own.
+            scaffold.layoutNode,
             nodes.layout({
                 creationPreset: { layoutKind: "split", preset: "panel" },
                 typeKey: "split-card",
                 id: SYNTHETIC_CONFIRM_LAYOUT_IDS.layoutContent,
-                parentLayoutNodeId: null,
+                parentLayoutNodeId: PHI_BASE_PAGE_LAYOUT_NODE_ID,
                 slotIndex: PHI_CMS_DEFAULT_SLOT_INDEX,
                 sortOrder: 0,
                 label: "pub confirmation page",
-                config: {
-                    gap: PHI_SPACE.base,
-                },
+                // The inset of the cards; a Split Card has none of its own.
+                config: { padding: PHI_SPACE.base },
+            }),
+            nodes.layout({
+                typeKey: "flex-vertical",
+                id: SYNTHETIC_CONFIRM_LAYOUT_IDS.layoutAside,
+                parentLayoutNodeId: SYNTHETIC_CONFIRM_LAYOUT_IDS.layoutContent,
+                slotIndex: PHI_CMS_SPLIT_LAYOUT_SLOT_INDEX.Left,
+                sortOrder: 0,
+                label: "pub confirm aside layout",
             }),
             nodes.layout({
-                creationPreset: { layoutKind: "verticalflex", preset: "panel" },
                 typeKey: "flex-vertical",
                 id: SYNTHETIC_CONFIRM_LAYOUT_IDS.layoutForm,
                 parentLayoutNodeId: SYNTHETIC_CONFIRM_LAYOUT_IDS.layoutContent,
                 slotIndex: PHI_CMS_SPLIT_LAYOUT_SLOT_INDEX.Right,
                 sortOrder: 0,
                 label: "pub confirmation form layout",
-                config: { padding: 0 },
             }),
         ],
         contentWidgets: [
             nodes.widget({
                 typeKey: "description",
                 id: SYNTHETIC_CONFIRM_WIDGET_IDS.widgetDescription,
-                parentLayoutNodeId: SYNTHETIC_CONFIRM_LAYOUT_IDS.layoutContent,
-                slotIndex: PHI_CMS_SPLIT_LAYOUT_SLOT_INDEX.Left,
+                parentLayoutNodeId: SYNTHETIC_CONFIRM_LAYOUT_IDS.layoutAside,
+                slotIndex: 0,
                 sortOrder: 0,
                 label: "pub confirmation description widget",
                 config: {
@@ -99,10 +102,11 @@ export async function buildPhiDefaultPubConfirmPageTree({ page, presetKey, }) {
                     description: "Review your registration details and confirm your email address to activate access.",
                     asideTitle: "What happens next",
                     asideItems: [
-                        "Your email address is verified.",
-                        "Your customer account is activated.",
-                        "You can then sign in with your chosen password.",
+                        { text: "Your email address is verified." },
+                        { text: "Your customer account is activated." },
+                        { text: "You can then sign in with your chosen password." },
                     ],
+                    asideList: { itemSurface: PHI_SURFACE_CARD },
                     footer: "If the link is no longer valid, return to registration and request a new verification email.",
                 },
             }),