@rebasepro/auth 0.1.2 → 0.2.3

package/dist/index.es.js

@@ -1,8 +1,4 @@
-import { useState, useRef, useEffect, useCallback, useLayoutEffect } from "react";
-import { jsxs, jsx, Fragment } from "react/jsx-runtime";
-import { Menu, MenuItem, iconSize, IconButton, Typography, cls, TextField, LoadingButton, Button, CenteredView, CircularProgress, Container, Table, TableHeader, TableCell, TableBody, TableRow, Tooltip, Checkbox, getColorSchemeForSeed, Chip, Dialog, DialogTitle, DialogContent, DialogActions, MultiSelect, MultiSelectItem } from "@rebasepro/ui";
-import { MoonIcon, SunIcon, SunMoonIcon, MailIcon, ArrowLeftIcon, PlusIcon, Trash2Icon } from "lucide-react";
-import { useModeController, useTranslation, LanguageToggle, ErrorView, RebaseLogo, useRebaseRegistryDispatch, useSnackbarController, ConfirmationDialog, useAuthController } from "@rebasepro/core";
+import { useState, useRef, useEffect, useCallback } from "react";
 let baseApiUrl = "";
 function setApiUrl(url) {
   baseApiUrl = url;
@@ -72,12 +68,11 @@ async function login(email, password) {
   });
   return handleResponse(response);
 }
-async function googleLogin(tokenOrPayload, tokenType = "idToken") {
-  const body = typeof tokenOrPayload === "string" ? { [tokenType]: tokenOrPayload } : tokenOrPayload;
+async function googleLogin(payload) {
   const response = await fetchWithHandling(`${baseApiUrl}/api/auth/google`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(body)
+    body: JSON.stringify(payload)
   });
   return handleResponse(response);
 }
@@ -90,13 +85,11 @@ async function oauthLogin(providerId, payload) {
   return handleResponse(response);
 }
 async function refreshAccessToken(refreshToken) {
-  console.log("[AUTH-API] Calling refresh endpoint...");
   const response = await fetchWithHandling(`${baseApiUrl}/api/auth/refresh`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ refreshToken })
   });
-  console.log("[AUTH-API] Refresh response status:", response.status);
   return handleResponse(response);
 }
 async function logout(refreshToken) {
@@ -198,7 +191,11 @@ async function revokeAllSessions(accessToken) {
   return handleResponse(response);
 }
 let authConfigInflight = null;
+let authConfigCached = null;
 async function fetchAuthConfig() {
+  if (authConfigCached) {
+    return authConfigCached;
+  }
   if (authConfigInflight) {
     return authConfigInflight;
   }
@@ -210,11 +207,17 @@ async function fetchAuthConfig() {
     return handleResponse(response);
   })();
   try {
-    return await authConfigInflight;
+    const result = await authConfigInflight;
+    authConfigCached = result;
+    return result;
   } finally {
     authConfigInflight = null;
   }
 }
+function clearAuthConfigCache() {
+  authConfigCached = null;
+  authConfigInflight = null;
+}
 const STORAGE_KEY = "rebase_auth";
 const TOKEN_REFRESH_BUFFER_MS = 2 * 60 * 1e3;
 function convertToUser(userInfo) {
@@ -225,18 +228,14 @@ function convertToUser(userInfo) {
     photoURL: userInfo.photoURL || null,
     providerId: "custom",
     isAnonymous: false,
-    roles: userInfo.roles || []
+    roles: userInfo.roles || [],
+    metadata: userInfo.metadata
   };
 }
 function saveAuthToStorage(tokens, user) {
   try {
-    const data = {
-      tokens,
-      user
-    };
+    const data = { tokens, user };
     localStorage.setItem(STORAGE_KEY, JSON.stringify(data));
-    const expiryDate = new Date(tokens.accessTokenExpiresAt);
-    const expiryStr = Number.isFinite(tokens.accessTokenExpiresAt) ? expiryDate.toISOString() : "invalid";
   } catch (e) {
   }
 }
@@ -283,6 +282,9 @@ function useRebaseAuthController(props = {}) {
       setApiUrl(apiUrl);
     }
   }, [client, apiUrl]);
+  const clearError = useCallback(() => {
+    setAuthProviderError(null);
+  }, []);
   const clearSessionAndSignOut = useCallback(() => {
     tokensRef.current = null;
     clearAuthFromStorage();
@@ -319,7 +321,6 @@ function useRebaseAuthController(props = {}) {
         if (latestStoredData) {
           saveAuthToStorage(newTokens, latestStoredData.user);
         }
-        const newExpiryStr = Number.isFinite(newTokens.accessTokenExpiresAt) ? new Date(newTokens.accessTokenExpiresAt).toISOString() : "invalid";
         return newTokens;
       } catch (error) {
         if (error instanceof Error && error.code === "NETWORK_ERROR") {
@@ -424,26 +425,20 @@ function useRebaseAuthController(props = {}) {
     }
   }, [client, getAuthToken, refreshAccessToken$1, clearSessionAndSignOut]);
   const handleAuthSuccess = useCallback(async (userInfo, tokens) => {
-    console.log("[Auth] handleAuthSuccess called, user:", userInfo.email, "uid:", userInfo.uid);
     tokensRef.current = tokens;
     let convertedUser = convertToUser(userInfo);
     if (defineRolesFor) {
       const customRoles = await defineRolesFor(convertedUser);
       if (customRoles) {
-        convertedUser = {
-          ...convertedUser,
-          roles: customRoles.map((r) => r.id)
-        };
+        convertedUser = { ...convertedUser, roles: customRoles.map((r) => r.id) };
       }
     }
     saveAuthToStorage(tokens, userInfo);
-    console.log("[Auth] Calling setUser, roles:", convertedUser.roles);
     setUser(convertedUser);
     setAuthError(null);
     setAuthProviderError(null);
     setLoginSkipped(false);
     scheduleTokenRefresh(tokens);
-    console.log("[Auth] handleAuthSuccess completed");
   }, [scheduleTokenRefresh, defineRolesFor]);
   const emailPasswordLogin = useCallback(async (email, password) => {
     setAuthLoading(true);
@@ -471,11 +466,11 @@ function useRebaseAuthController(props = {}) {
       setAuthLoading(false);
     }
   }, [handleAuthSuccess]);
-  const googleLogin$1 = useCallback(async (tokenOrPayload, tokenType) => {
+  const googleLogin$1 = useCallback(async (payload) => {
     setAuthLoading(true);
     setAuthProviderError(null);
     try {
-      const response = typeof tokenOrPayload === "string" ? await googleLogin(tokenOrPayload, tokenType ?? "idToken") : await googleLogin(tokenOrPayload);
+      const response = await googleLogin(payload);
       await handleAuthSuccess(response.user, response.tokens);
     } catch (error) {
       setAuthProviderError(error);
@@ -769,6 +764,8 @@ function useRebaseAuthController(props = {}) {
     fetchSessions: fetchSessions$1,
     revokeSession: revokeSession$1,
     revokeAllSessions: revokeAllSessions$1,
+    clearError,
+    setAuthProviderError,
     extra,
     setExtra,
     capabilities: {
@@ -908,6 +905,12 @@ function useBackendUserManagement(config) {
       setLoading(false);
       return;
     }
+    const userRoles = currentUser.roles ?? [];
+    const isUserAdmin = userRoles.some((r) => r === "admin" || r === "schema-admin");
+    if (!isUserAdmin) {
+      setLoading(false);
+      return;
+    }
     if (lastLoadedUidRef.current === currentUser.uid) {
       setLoading(false);
       return;
@@ -1078,7 +1081,7 @@ function useBackendUserManagement(config) {
     saveRole,
     deleteRole,
     isAdmin,
-    allowDefaultRolesCreation: true,
+    allowDefaultRolesCreation: isAdmin,
     includeCollectionConfigPermissions: true,
     defineRolesFor,
     getUser,
@@ -1088,1197 +1091,9 @@ function useBackendUserManagement(config) {
     bootstrapAdmin
   };
 }
-function RebaseLoginView({
-  logo,
-  authController,
-  noUserComponent,
-  disableSignupScreen = false,
-  disabled = false,
-  notAllowedError,
-  googleEnabled = false,
-  googleClientId
-}) {
-  const modeState = useModeController();
-  const { mode: colorMode, setMode: setColorMode } = modeState;
-  const { t } = useTranslation();
-  const [mode, setMode] = useState("buttons");
-  const [fadeIn, setFadeIn] = useState(false);
-  const [viewVisible, setViewVisible] = useState(true);
-  const switchMode = (newMode) => {
-    setViewVisible(false);
-    setTimeout(() => {
-      setMode(newMode);
-      setViewVisible(true);
-    }, 150);
-  };
-  const isBootstrapMode = authController.needsSetup;
-  useEffect(() => {
-    const timer = setTimeout(() => setFadeIn(true), 50);
-    return () => clearTimeout(timer);
-  }, []);
-  function buildErrorView() {
-    if (!authController.authProviderError) return null;
-    if (authController.user != null) return null;
-    return /* @__PURE__ */ jsx("div", { className: "w-full", children: /* @__PURE__ */ jsx(ErrorView, { error: authController.authProviderError.message ?? authController.authProviderError }) });
-  }
-  let logoComponent;
-  if (logo) {
-    logoComponent = /* @__PURE__ */ jsx(
-      "img",
-      {
-        src: logo,
-        style: {
-          height: "100%",
-          width: "100%",
-          objectFit: "cover"
-        },
-        alt: "Logo"
-      }
-    );
-  } else {
-    logoComponent = /* @__PURE__ */ jsx(RebaseLogo, {});
-  }
-  let notAllowedMessage;
-  if (notAllowedError) {
-    if (typeof notAllowedError === "string") {
-      notAllowedMessage = notAllowedError;
-    } else if (notAllowedError instanceof Error) {
-      notAllowedMessage = notAllowedError.message;
-    } else {
-      notAllowedMessage = "It looks like you don't have access to the CMS, based on the specified Authenticator configuration";
-    }
-  }
-  const showRegistration = !disableSignupScreen && authController.registrationEnabled;
-  return /* @__PURE__ */ jsxs(
-    "div",
-    {
-      className: cls(
-        "relative flex items-center justify-center h-screen w-screen p-4 transition-opacity duration-500 bg-white dark:bg-surface-900",
-        fadeIn ? "opacity-100" : "opacity-0"
-      ),
-      children: [
-        /* @__PURE__ */ jsxs("div", { className: "absolute top-4 right-4 flex items-center gap-1 z-10", children: [
-          /* @__PURE__ */ jsx(LanguageToggle, {}),
-          /* @__PURE__ */ jsxs(
-            Menu,
-            {
-              trigger: /* @__PURE__ */ jsx(
-                IconButton,
-                {
-                  color: "inherit",
-                  "aria-label": "Toggle theme",
-                  children: colorMode === "dark" ? /* @__PURE__ */ jsx(MoonIcon, { size: iconSize.small }) : /* @__PURE__ */ jsx(SunIcon, { size: iconSize.small })
-                }
-              ),
-              children: [
-                /* @__PURE__ */ jsxs(MenuItem, { onClick: () => setColorMode("dark"), children: [
-                  /* @__PURE__ */ jsx(MoonIcon, { size: iconSize.smallest }),
-                  " ",
-                  t("dark_mode")
-                ] }),
-                /* @__PURE__ */ jsxs(MenuItem, { onClick: () => setColorMode("light"), children: [
-                  /* @__PURE__ */ jsx(SunIcon, { size: iconSize.smallest }),
-                  " ",
-                  t("light_mode")
-                ] }),
-                /* @__PURE__ */ jsxs(MenuItem, { onClick: () => setColorMode("system"), children: [
-                  /* @__PURE__ */ jsx(SunMoonIcon, { size: iconSize.smallest }),
-                  " ",
-                  t("system_mode")
-                ] })
-              ]
-            }
-          )
-        ] }),
-        /* @__PURE__ */ jsxs("div", { className: "flex flex-col items-center w-[480px] max-w-full p-8 sm:p-10", children: [
-          /* @__PURE__ */ jsx("div", { className: "w-32 h-32 m-2 mb-6", children: logoComponent }),
-          notAllowedMessage && /* @__PURE__ */ jsx("div", { className: "p-4 w-full", children: /* @__PURE__ */ jsx(ErrorView, { error: notAllowedMessage }) }),
-          mode !== "forgot" && buildErrorView(),
-          /* @__PURE__ */ jsxs("div", { className: cls(
-            "w-full transition-opacity duration-150",
-            viewVisible ? "opacity-100" : "opacity-0"
-          ), children: [
-            isBootstrapMode && !authController.user && /* @__PURE__ */ jsx(
-              LoginForm,
-              {
-                authController,
-                registrationMode: true,
-                onClose: () => {
-                },
-                onForgotPassword: () => {
-                },
-                noUserComponent,
-                disableSignupScreen: false,
-                bootstrapMode: true
-              }
-            ),
-            !isBootstrapMode && /* @__PURE__ */ jsxs(Fragment, { children: [
-              mode === "buttons" && /* @__PURE__ */ jsxs("div", { className: "w-full flex flex-col gap-3 mt-2", children: [
-                /* @__PURE__ */ jsx(
-                  LoginButton,
-                  {
-                    disabled,
-                    text: "Sign in with email",
-                    icon: /* @__PURE__ */ jsx(MailIcon, {}),
-                    onClick: () => switchMode("login")
-                  }
-                ),
-                googleEnabled && googleClientId && /* @__PURE__ */ jsx(
-                  GoogleLoginButton,
-                  {
-                    disabled,
-                    googleClientId,
-                    authController
-                  }
-                ),
-                showRegistration && /* @__PURE__ */ jsx("div", { className: "mt-2 text-center", children: /* @__PURE__ */ jsxs(Typography, { variant: "body2", color: "secondary", children: [
-                  "Don't have an account?",
-                  " ",
-                  /* @__PURE__ */ jsx(
-                    "button",
-                    {
-                      type: "button",
-                      className: cls(
-                        "font-semibold hover:underline cursor-pointer",
-                        "text-primary-600 dark:text-primary-400"
-                      ),
-                      onClick: () => switchMode("register"),
-                      children: "Create one"
-                    }
-                  )
-                ] }) })
-              ] }),
-              mode === "login" && /* @__PURE__ */ jsx(
-                LoginForm,
-                {
-                  authController,
-                  registrationMode: false,
-                  onClose: () => switchMode("buttons"),
-                  onForgotPassword: () => switchMode("forgot"),
-                  noUserComponent,
-                  disableSignupScreen,
-                  switchToRegister: showRegistration ? () => switchMode("register") : void 0
-                }
-              ),
-              mode === "register" && /* @__PURE__ */ jsx(
-                LoginForm,
-                {
-                  authController,
-                  registrationMode: true,
-                  onClose: () => switchMode("buttons"),
-                  onForgotPassword: () => switchMode("forgot"),
-                  noUserComponent,
-                  disableSignupScreen,
-                  switchToLogin: () => switchMode("login")
-                }
-              ),
-              mode === "forgot" && /* @__PURE__ */ jsx(
-                ForgotPasswordForm,
-                {
-                  authController,
-                  onClose: () => switchMode("login")
-                }
-              )
-            ] })
-          ] })
-        ] })
-      ]
-    }
-  );
-}
-function LoginButton({
-  icon,
-  onClick,
-  text,
-  disabled
-}) {
-  return /* @__PURE__ */ jsx(
-    Button,
-    {
-      disabled,
-      className: "w-full",
-      variant: "outlined",
-      size: "large",
-      onClick,
-      children: /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-center w-full gap-3 py-1", children: [
-        /* @__PURE__ */ jsx("span", { className: "flex items-center justify-center w-5 h-5", children: icon }),
-        /* @__PURE__ */ jsx(Typography, { variant: "button", children: text })
-      ] })
-    }
-  );
-}
-const GoogleIcon = () => /* @__PURE__ */ jsxs("svg", { viewBox: "0 0 24 24", width: "20", height: "20", children: [
-  /* @__PURE__ */ jsx(
-    "path",
-    {
-      fill: "#4285F4",
-      d: "M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z"
-    }
-  ),
-  /* @__PURE__ */ jsx(
-    "path",
-    {
-      fill: "#34A853",
-      d: "M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z"
-    }
-  ),
-  /* @__PURE__ */ jsx(
-    "path",
-    {
-      fill: "#FBBC05",
-      d: "M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z"
-    }
-  ),
-  /* @__PURE__ */ jsx(
-    "path",
-    {
-      fill: "#EA4335",
-      d: "M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z"
-    }
-  )
-] });
-function GoogleLoginButton({
-  disabled,
-  googleClientId,
-  authController
-}) {
-  const codeClientRef = useRef(null);
-  useEffect(() => {
-    const google = window.google;
-    if (!google || codeClientRef.current) return;
-    codeClientRef.current = google.accounts.oauth2.initCodeClient({
-      client_id: googleClientId,
-      scope: "openid email profile",
-      ux_mode: "popup",
-      callback: async (response) => {
-        if (response.error || !response.code) {
-          console.error("Google login error:", response.error);
-          return;
-        }
-        try {
-          await authController.googleLogin({
-            code: response.code,
-            redirectUri: "postmessage"
-          });
-        } catch (err) {
-          console.error("Google login error:", err);
-        }
-      }
-    });
-  }, [googleClientId, authController]);
-  const handleClick = () => {
-    if (!codeClientRef.current) {
-      console.error("Google Sign-In not loaded");
-      return;
-    }
-    codeClientRef.current.requestCode();
-  };
-  return /* @__PURE__ */ jsx(
-    LoginButton,
-    {
-      disabled,
-      text: "Sign in with Google",
-      icon: /* @__PURE__ */ jsx(GoogleIcon, {}),
-      onClick: handleClick
-    }
-  );
-}
-function LoginForm({
-  onClose,
-  onForgotPassword,
-  authController,
-  registrationMode,
-  noUserComponent,
-  disableSignupScreen,
-  bootstrapMode = false,
-  switchToRegister,
-  switchToLogin
-}) {
-  const passwordRef = useRef(null);
-  const [email, setEmail] = useState();
-  const [password, setPassword] = useState();
-  const [displayName, setDisplayName] = useState();
-  useEffect(() => {
-    if (!document) return;
-    const escFunction = (event) => {
-      if (event.keyCode === 27) {
-        onClose();
-      }
-    };
-    document.addEventListener("keydown", escFunction, false);
-    return () => {
-      document.removeEventListener("keydown", escFunction, false);
-    };
-  }, [onClose]);
-  function handleEnterPassword() {
-    if (email && password) {
-      authController.emailPasswordLogin(email, password);
-    }
-  }
-  function handleRegistration() {
-    if (email && password) {
-      authController.register(email, password, displayName);
-    }
-  }
-  const handleSubmit = (event) => {
-    event.preventDefault();
-    if (registrationMode)
-      handleRegistration();
-    else
-      handleEnterPassword();
-  };
-  const title = bootstrapMode ? "Welcome!" : registrationMode ? "Create account" : "Sign in";
-  const subtitle = bootstrapMode ? "Create your admin account to get started. This account will have admin privileges." : registrationMode ? "Fill in your details to create a new account" : "Enter your credentials to continue";
-  const buttonLabel = registrationMode ? "Create account" : "Sign in";
-  return /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col w-full gap-1 mt-2", children: [
-    !bootstrapMode && /* @__PURE__ */ jsx("div", { className: "w-full mb-2 -ml-2.5", children: /* @__PURE__ */ jsx(IconButton, { onClick: onClose, children: /* @__PURE__ */ jsx(ArrowLeftIcon, {}) }) }),
-    /* @__PURE__ */ jsx(Typography, { variant: "h6", className: "mb-0.5", children: title }),
-    /* @__PURE__ */ jsx(Typography, { variant: "body2", color: "secondary", className: "mb-5", children: subtitle }),
-    registrationMode && noUserComponent && /* @__PURE__ */ jsx("div", { className: "w-full mb-2", children: noUserComponent }),
-    registrationMode && /* @__PURE__ */ jsxs("div", { className: "w-full mb-3", children: [
-      /* @__PURE__ */ jsx(Typography, { variant: "label", color: "secondary", className: "mb-1", children: "Display Name" }),
-      /* @__PURE__ */ jsx(
-        TextField,
-        {
-          placeholder: "Jane Doe (optional)",
-          className: "w-full",
-          value: displayName ?? "",
-          disabled: authController.initialLoading,
-          type: "text",
-          size: "medium",
-          onChange: (event) => setDisplayName(event.target.value)
-        }
-      )
-    ] }),
-    /* @__PURE__ */ jsxs("div", { className: "w-full mb-3", children: [
-      /* @__PURE__ */ jsx(Typography, { variant: "label", color: "secondary", className: "mb-1", children: "Email" }),
-      /* @__PURE__ */ jsx(
-        TextField,
-        {
-          placeholder: "you@example.com",
-          className: "w-full",
-          autoFocus: true,
-          value: email ?? "",
-          disabled: authController.initialLoading,
-          type: "email",
-          size: "medium",
-          onChange: (event) => setEmail(event.target.value)
-        }
-      )
-    ] }),
-    /* @__PURE__ */ jsxs("div", { className: "w-full mb-1", children: [
-      /* @__PURE__ */ jsx(Typography, { variant: "label", color: "secondary", className: "mb-1", children: "Password" }),
-      /* @__PURE__ */ jsx(
-        TextField,
-        {
-          placeholder: "••••••••",
-          className: "w-full",
-          value: password ?? "",
-          disabled: authController.initialLoading,
-          inputRef: passwordRef,
-          type: "password",
-          size: "medium",
-          onChange: (event) => setPassword(event.target.value)
-        }
-      )
-    ] }),
-    registrationMode && /* @__PURE__ */ jsx(Typography, { variant: "caption", color: "secondary", className: "mb-3", children: "Password must be 8+ characters with uppercase, lowercase, and a number" }),
-    !registrationMode && /* @__PURE__ */ jsx("div", { className: "w-full text-right mb-3", children: /* @__PURE__ */ jsx(
-      "button",
-      {
-        type: "button",
-        className: cls(
-          "text-xs font-medium hover:underline cursor-pointer",
-          "text-primary-600 dark:text-primary-400"
-        ),
-        onClick: onForgotPassword,
-        children: "Forgot password?"
-      }
-    ) }),
-    /* @__PURE__ */ jsx(
-      LoadingButton,
-      {
-        type: "submit",
-        variant: "filled",
-        color: "primary",
-        className: "w-full mt-1",
-        size: "large",
-        loading: authController.authLoading,
-        disabled: authController.authLoading || !email || !password,
-        children: buttonLabel
-      }
-    ),
-    switchToRegister && /* @__PURE__ */ jsx("div", { className: "mt-4 text-center", children: /* @__PURE__ */ jsxs(Typography, { variant: "body2", color: "secondary", children: [
-      "Don't have an account?",
-      " ",
-      /* @__PURE__ */ jsx(
-        "button",
-        {
-          type: "button",
-          className: cls(
-            "font-semibold hover:underline cursor-pointer",
-            "text-primary-600 dark:text-primary-400"
-          ),
-          onClick: switchToRegister,
-          children: "Create one"
-        }
-      )
-    ] }) }),
-    switchToLogin && /* @__PURE__ */ jsx("div", { className: "mt-4 text-center", children: /* @__PURE__ */ jsxs(Typography, { variant: "body2", color: "secondary", children: [
-      "Already have an account?",
-      " ",
-      /* @__PURE__ */ jsx(
-        "button",
-        {
-          type: "button",
-          className: cls(
-            "font-semibold hover:underline cursor-pointer",
-            "text-primary-600 dark:text-primary-400"
-          ),
-          onClick: switchToLogin,
-          children: "Sign in"
-        }
-      )
-    ] }) })
-  ] });
-}
-function ForgotPasswordForm({
-  onClose,
-  authController
-}) {
-  const [email, setEmail] = useState("");
-  const [submitted, setSubmitted] = useState(false);
-  const [error, setError] = useState(null);
-  useEffect(() => {
-    if (!document) return;
-    const escFunction = (event) => {
-      if (event.keyCode === 27) {
-        onClose();
-      }
-    };
-    document.addEventListener("keydown", escFunction, false);
-    return () => {
-      document.removeEventListener("keydown", escFunction, false);
-    };
-  }, [onClose]);
-  const handleSubmit = async (event) => {
-    event.preventDefault();
-    setError(null);
-    if (!email) {
-      setError("Please enter your email address");
-      return;
-    }
-    try {
-      await authController.forgotPassword(email);
-      setSubmitted(true);
-    } catch (err) {
-      if (err instanceof Error && err.code === "EMAIL_NOT_CONFIGURED") {
-        setError("Password reset is not available. Please contact your administrator.");
-      } else {
-        setSubmitted(true);
-      }
-    }
-  };
-  if (submitted) {
-    return /* @__PURE__ */ jsxs("div", { className: "flex flex-col w-full gap-4 mt-2", children: [
-      /* @__PURE__ */ jsx("div", { className: "w-full -ml-2.5", children: /* @__PURE__ */ jsx(IconButton, { onClick: onClose, children: /* @__PURE__ */ jsx(ArrowLeftIcon, {}) }) }),
-      /* @__PURE__ */ jsxs("div", { className: cls(
-        "text-center rounded-xl p-6",
-        "bg-surface-50 dark:bg-surface-950"
-      ), children: [
-        /* @__PURE__ */ jsx("div", { className: "text-3xl mb-3", children: "📧" }),
-        /* @__PURE__ */ jsx(Typography, { variant: "subtitle1", className: "mb-2", children: "Check your email" }),
-        /* @__PURE__ */ jsxs(Typography, { variant: "body2", color: "secondary", children: [
-          "If an account exists for ",
-          /* @__PURE__ */ jsx("strong", { children: email }),
-          ", you'll receive a password reset link shortly."
-        ] })
-      ] }),
-      /* @__PURE__ */ jsx(Button, { onClick: onClose, variant: "text", className: "mt-2", children: "Back to sign in" })
-    ] });
-  }
-  return /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col w-full gap-1 mt-2", children: [
-    /* @__PURE__ */ jsx("div", { className: "w-full mb-2 -ml-2.5", children: /* @__PURE__ */ jsx(IconButton, { onClick: onClose, children: /* @__PURE__ */ jsx(ArrowLeftIcon, {}) }) }),
-    /* @__PURE__ */ jsx(Typography, { variant: "h6", className: "mb-0.5", children: "Reset password" }),
-    /* @__PURE__ */ jsx(Typography, { variant: "body2", color: "secondary", className: "mb-5", children: "Enter your email and we'll send you a reset link." }),
-    error && /* @__PURE__ */ jsx("div", { className: "w-full mb-3", children: /* @__PURE__ */ jsx(ErrorView, { error }) }),
-    /* @__PURE__ */ jsxs("div", { className: "w-full mb-3", children: [
-      /* @__PURE__ */ jsx(Typography, { variant: "label", color: "secondary", className: "mb-1", children: "Email" }),
-      /* @__PURE__ */ jsx(
-        TextField,
-        {
-          placeholder: "you@example.com",
-          className: "w-full",
-          autoFocus: true,
-          value: email,
-          type: "email",
-          size: "medium",
-          onChange: (event) => setEmail(event.target.value)
-        }
-      )
-    ] }),
-    /* @__PURE__ */ jsx(
-      LoadingButton,
-      {
-        type: "submit",
-        variant: "filled",
-        color: "primary",
-        className: "w-full",
-        size: "large",
-        loading: authController.authLoading,
-        disabled: authController.authLoading || !email,
-        children: "Send reset link"
-      }
-    )
-  ] });
-}
-function RebaseAuth({ loginView }) {
-  const dispatch = useRebaseRegistryDispatch();
-  const registeredRef = useRef(false);
-  useLayoutEffect(() => {
-    dispatch.registerAuth({ loginView });
-    registeredRef.current = true;
-    return () => {
-      registeredRef.current = false;
-      dispatch.unregisterAuth();
-    };
-  }, [dispatch, loginView]);
-  return null;
-}
-function createUserManagementAdminViews({ userManagement, apiUrl, getAuthToken, collections = [] }) {
-  return [
-    {
-      slug: "dev/users",
-      name: "CMS Users",
-      icon: "face",
-      view: /* @__PURE__ */ jsx(UsersView, { userManagement, apiUrl, getAuthToken })
-    },
-    {
-      slug: "dev/roles",
-      name: "Roles",
-      icon: "gpp_good",
-      view: /* @__PURE__ */ jsx(RolesView, { userManagement, collections })
-    }
-  ];
-}
-function RoleChip({ role }) {
-  let colorScheme;
-  if (role.isAdmin) {
-    colorScheme = "blue";
-  } else if (role.id === "editor") {
-    colorScheme = "yellow";
-  } else if (role.id === "viewer") {
-    colorScheme = "gray";
-  } else {
-    colorScheme = getColorSchemeForSeed(role.id);
-  }
-  return /* @__PURE__ */ jsx(Chip, { colorScheme, children: role.name }, role.id);
-}
-function UsersView({ userManagement, apiUrl, getAuthToken }) {
-  const { users, roles, saveUser, deleteUser, loading } = userManagement;
-  const usersError = "usersError" in userManagement ? userManagement.usersError : void 0;
-  const snackbarController = useSnackbarController();
-  const { user: loggedInUser } = useAuthController();
-  const [dialogOpen, setDialogOpen] = useState(false);
-  const [selectedUser, setSelectedUser] = useState();
-  const [deleteConfirmOpen, setDeleteConfirmOpen] = useState(false);
-  const [userToDelete, setUserToDelete] = useState();
-  const [deleteInProgress, setDeleteInProgress] = useState(false);
-  const [formKey, setFormKey] = useState(0);
-  const [bootstrapping, setBootstrapping] = useState(false);
-  const hasAdmin = users.some((u) => u.roles?.includes("admin"));
-  const handleBootstrap = async () => {
-    setBootstrapping(true);
-    try {
-      const token = await getAuthToken();
-      const response = await fetch(`${apiUrl}/api/admin/bootstrap`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          "Authorization": `Bearer ${token}`
-        }
-      });
-      const data = await response.json();
-      if (!response.ok) {
-        throw new Error(data.error?.message || "Bootstrap failed");
-      }
-      snackbarController.open({
-        type: "success",
-        message: "You are now an admin! Refreshing..."
-      });
-      window.location.reload();
-    } catch (error) {
-      snackbarController.open({
-        type: "error",
-        message: error instanceof Error ? error.message : "Failed to bootstrap admin"
-      });
-    } finally {
-      setBootstrapping(false);
-    }
-  };
-  const handleAddUser = () => {
-    setSelectedUser(void 0);
-    setFormKey((k) => k + 1);
-    setDialogOpen(true);
-  };
-  const handleEditUser = (user) => {
-    setSelectedUser(user);
-    setDialogOpen(true);
-  };
-  const handleClose = () => {
-    setDialogOpen(false);
-    setSelectedUser(void 0);
-  };
-  const handleDelete = async () => {
-    if (!userToDelete) return;
-    setDeleteInProgress(true);
-    try {
-      await deleteUser(userToDelete);
-      snackbarController.open({
-        type: "success",
-        message: "User deleted successfully"
-      });
-      setDeleteConfirmOpen(false);
-      setUserToDelete(void 0);
-    } catch (error) {
-      snackbarController.open({
-        type: "error",
-        message: error instanceof Error ? error.message : "Error deleting user"
-      });
-    } finally {
-      setDeleteInProgress(false);
-    }
-  };
-  if (loading) {
-    return /* @__PURE__ */ jsx(CenteredView, { children: /* @__PURE__ */ jsx(CircularProgress, {}) });
-  }
-  return /* @__PURE__ */ jsxs(Container, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
-    !hasAdmin && loggedInUser && /* @__PURE__ */ jsxs("div", { className: "bg-yellow-100 dark:bg-yellow-900 border border-yellow-400 dark:border-yellow-700 rounded p-4 flex items-center justify-between", children: [
-      /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Typography, { variant: "label", className: "text-yellow-800 dark:text-yellow-200", children: "No admin users exist. You can make yourself an admin." }) }),
-      /* @__PURE__ */ jsx(
-        Button,
-        {
-          onClick: handleBootstrap,
-          disabled: bootstrapping,
-          children: bootstrapping ? /* @__PURE__ */ jsx(CircularProgress, { size: "small" }) : "Make me admin"
-        }
-      )
-    ] }),
-    /* @__PURE__ */ jsxs("div", { className: "flex items-center mt-12", children: [
-      /* @__PURE__ */ jsx(Typography, { gutterBottom: true, variant: "h4", className: "grow", component: "h4", children: "Users" }),
-      /* @__PURE__ */ jsx(Button, { startIcon: /* @__PURE__ */ jsx(PlusIcon, {}), onClick: handleAddUser, children: "Add user" })
-    ] }),
-    /* @__PURE__ */ jsx("div", { className: "overflow-auto", children: /* @__PURE__ */ jsxs(Table, { className: "w-full", children: [
-      /* @__PURE__ */ jsxs(TableHeader, { children: [
-        /* @__PURE__ */ jsx(TableCell, { header: true, className: "truncate w-16" }),
-        /* @__PURE__ */ jsx(TableCell, { header: true, children: "Email" }),
-        /* @__PURE__ */ jsx(TableCell, { header: true, children: "Name" }),
-        /* @__PURE__ */ jsx(TableCell, { header: true, children: "Roles" })
-      ] }),
-      /* @__PURE__ */ jsxs(TableBody, { children: [
-        users.map((user) => /* @__PURE__ */ jsxs(TableRow, { onClick: () => handleEditUser(user), children: [
-          /* @__PURE__ */ jsx(TableCell, { style: { width: "64px" }, children: /* @__PURE__ */ jsx(Tooltip, { asChild: true, title: "Delete this user", children: /* @__PURE__ */ jsx(
-            IconButton,
-            {
-              size: "small",
-              onClick: (e) => {
-                e.stopPropagation();
-                setUserToDelete(user);
-                setDeleteConfirmOpen(true);
-              },
-              children: /* @__PURE__ */ jsx(Trash2Icon, {})
-            }
-          ) }) }),
-          /* @__PURE__ */ jsx(TableCell, { children: user.email }),
-          /* @__PURE__ */ jsx(TableCell, { className: "font-medium", children: user.displayName }),
-          /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx("div", { className: "flex flex-wrap gap-2", children: user.roles?.map((roleId) => {
-            const role = roles.find((r) => r.id === roleId);
-            return role ? /* @__PURE__ */ jsx(RoleChip, { role }, roleId) : /* @__PURE__ */ jsx("span", { children: roleId }, roleId);
-          }) }) })
-        ] }, user.uid)),
-        users.length === 0 && /* @__PURE__ */ jsx(TableRow, { children: /* @__PURE__ */ jsx(TableCell, { colspan: 4, children: /* @__PURE__ */ jsxs(CenteredView, { className: "flex flex-col gap-4 my-8 items-center", children: [
-          /* @__PURE__ */ jsx(Typography, { variant: "label", children: usersError ? "You don't have permission to view users" : "There are no users yet" }),
-          usersError && /* @__PURE__ */ jsx(Typography, { variant: "caption", className: "text-surface-500", children: "Contact an administrator if you need access to this section." })
-        ] }) }) })
-      ] })
-    ] }) }),
-    /* @__PURE__ */ jsx(
-      UserDetailsForm,
-      {
-        open: dialogOpen,
-        user: selectedUser,
-        roles,
-        saveUser,
-        handleClose
-      },
-      selectedUser?.uid ?? `new-${formKey}`
-    ),
-    /* @__PURE__ */ jsx(
-      ConfirmationDialog,
-      {
-        open: deleteConfirmOpen,
-        loading: deleteInProgress,
-        onAccept: handleDelete,
-        onCancel: () => {
-          setDeleteConfirmOpen(false);
-          setUserToDelete(void 0);
-        },
-        title: /* @__PURE__ */ jsx(Fragment, { children: "Delete?" }),
-        body: /* @__PURE__ */ jsx(Fragment, { children: "Are you sure you want to delete this user?" })
-      }
-    )
-  ] });
-}
-function UserDetailsForm({
-  open,
-  user: userProp,
-  roles,
-  saveUser,
-  handleClose
-}) {
-  const snackbarController = useSnackbarController();
-  const isNewUser = !userProp;
-  const [displayName, setDisplayName] = useState(userProp?.displayName || "");
-  const [email, setEmail] = useState(userProp?.email || "");
-  const [selectedRoleIds, setSelectedRoleIds] = useState(
-    userProp?.roles || ["editor"]
-  );
-  const [isSubmitting, setIsSubmitting] = useState(false);
-  const [errors, setErrors] = useState({});
-  const [submitCount, setSubmitCount] = useState(0);
-  const validate = () => {
-    const newErrors = {};
-    if (!displayName) newErrors.displayName = "Required";
-    if (!email) newErrors.email = "Required";
-    else if (!/\S+@\S+\.\S+/.test(email)) newErrors.email = "Invalid email";
-    if (selectedRoleIds.length === 0) newErrors.roles = "At least one role is required";
-    setErrors(newErrors);
-    return Object.keys(newErrors).length === 0;
-  };
-  const handleSubmit = async (e) => {
-    e.preventDefault();
-    setSubmitCount((c) => c + 1);
-    if (!validate()) return;
-    setIsSubmitting(true);
-    try {
-      const userToSave = {
-        uid: userProp?.uid || crypto.randomUUID(),
-        email,
-        displayName: displayName || null,
-        photoURL: userProp?.photoURL || null,
-        providerId: "custom",
-        isAnonymous: false,
-        roles: selectedRoleIds
-      };
-      await saveUser(userToSave);
-      handleClose();
-    } catch (error) {
-      snackbarController.open({
-        type: "error",
-        message: error instanceof Error ? error.message : "Failed to save user"
-      });
-    } finally {
-      setIsSubmitting(false);
-    }
-  };
-  const dirty = isNewUser || displayName !== (userProp?.displayName || "") || email !== (userProp?.email || "") || JSON.stringify(selectedRoleIds.sort()) !== JSON.stringify((userProp?.roles || []).sort());
-  return /* @__PURE__ */ jsx(Dialog, { open, onOpenChange: (open2) => !open2 ? handleClose() : void 0, maxWidth: "4xl", children: /* @__PURE__ */ jsxs(
-    "form",
-    {
-      onSubmit: handleSubmit,
-      autoComplete: "off",
-      noValidate: true,
-      style: {
-        display: "flex",
-        flexDirection: "column",
-        position: "relative",
-        height: "100%"
-      },
-      children: [
-        /* @__PURE__ */ jsx(DialogTitle, { variant: "h4", gutterBottom: false, children: "User" }),
-        /* @__PURE__ */ jsx(DialogContent, { className: "h-full grow", children: /* @__PURE__ */ jsxs("div", { className: "grid grid-cols-12 gap-4", children: [
-          /* @__PURE__ */ jsxs("div", { className: "col-span-12", children: [
-            /* @__PURE__ */ jsx(
-              TextField,
-              {
-                name: "displayName",
-                required: true,
-                error: submitCount > 0 && Boolean(errors.displayName),
-                value: displayName,
-                onChange: (e) => setDisplayName(e.target.value),
-                label: "Name"
-              }
-            ),
-            /* @__PURE__ */ jsx(FieldCaption, { children: submitCount > 0 && errors.displayName ? errors.displayName : "Name of this user" })
-          ] }),
-          /* @__PURE__ */ jsxs("div", { className: "col-span-12", children: [
-            /* @__PURE__ */ jsx(
-              TextField,
-              {
-                required: true,
-                error: submitCount > 0 && Boolean(errors.email),
-                name: "email",
-                value: email,
-                onChange: (e) => setEmail(e.target.value),
-                label: "Email",
-                disabled: !isNewUser
-              }
-            ),
-            /* @__PURE__ */ jsx(FieldCaption, { children: submitCount > 0 && errors.email ? errors.email : "Email of this user" })
-          ] }),
-          /* @__PURE__ */ jsx("div", { className: "col-span-12", children: /* @__PURE__ */ jsx(
-            MultiSelect,
-            {
-              className: "w-full",
-              label: "Roles",
-              value: selectedRoleIds,
-              onValueChange: (value) => setSelectedRoleIds(value),
-              children: roles.map((role) => /* @__PURE__ */ jsx(MultiSelectItem, { value: role.id, children: /* @__PURE__ */ jsx(RoleChip, { role }) }, role.id))
-            }
-          ) })
-        ] }) }),
-        /* @__PURE__ */ jsxs(DialogActions, { children: [
-          /* @__PURE__ */ jsx(Button, { variant: "text", onClick: handleClose, children: "Cancel" }),
-          /* @__PURE__ */ jsx(
-            LoadingButton,
-            {
-              variant: "filled",
-              type: "submit",
-              disabled: !dirty,
-              loading: isSubmitting,
-              children: isNewUser ? "Create user" : "Update"
-            }
-          )
-        ] })
-      ]
-    }
-  ) });
-}
-function RolesView({ userManagement, collections = [] }) {
-  const { roles, saveRole, deleteRole, loading, allowDefaultRolesCreation } = userManagement;
-  const rolesError = "rolesError" in userManagement ? userManagement.rolesError : void 0;
-  const snackbarController = useSnackbarController();
-  const [dialogOpen, setDialogOpen] = useState(false);
-  const [selectedRole, setSelectedRole] = useState();
-  const [deleteConfirmOpen, setDeleteConfirmOpen] = useState(false);
-  const [roleToDelete, setRoleToDelete] = useState();
-  const [deleteInProgress, setDeleteInProgress] = useState(false);
-  const handleAddRole = () => {
-    setSelectedRole(void 0);
-    setDialogOpen(true);
-  };
-  const handleEditRole = (role) => {
-    setSelectedRole(role);
-    setDialogOpen(true);
-  };
-  const handleClose = () => {
-    setDialogOpen(false);
-    setSelectedRole(void 0);
-  };
-  const handleDelete = async () => {
-    if (!roleToDelete) return;
-    setDeleteInProgress(true);
-    try {
-      await deleteRole(roleToDelete);
-      snackbarController.open({
-        type: "success",
-        message: "Role deleted successfully"
-      });
-      setDeleteConfirmOpen(false);
-      setRoleToDelete(void 0);
-    } catch (error) {
-      snackbarController.open({
-        type: "error",
-        message: error instanceof Error ? error.message : "Error deleting role"
-      });
-    } finally {
-      setDeleteInProgress(false);
-    }
-  };
-  const createDefaultRoles = () => {
-    const defaultRoles = [
-      {
-        id: "admin",
-        name: "Admin",
-        isAdmin: true
-      },
-      {
-        id: "editor",
-        name: "Editor",
-        isAdmin: false
-      },
-      {
-        id: "viewer",
-        name: "Viewer",
-        isAdmin: false
-      }
-    ];
-    defaultRoles.forEach((role) => saveRole(role));
-  };
-  if (loading) {
-    return /* @__PURE__ */ jsx(CenteredView, { children: /* @__PURE__ */ jsx(CircularProgress, {}) });
-  }
-  return /* @__PURE__ */ jsxs(Container, { className: "w-full flex flex-col py-4 gap-4", maxWidth: "6xl", children: [
-    /* @__PURE__ */ jsxs("div", { className: "flex items-center mt-12", children: [
-      /* @__PURE__ */ jsx(Typography, { gutterBottom: true, variant: "h4", className: "grow", component: "h4", children: "Roles" }),
-      /* @__PURE__ */ jsx(Button, { startIcon: /* @__PURE__ */ jsx(PlusIcon, {}), onClick: handleAddRole, children: "Add role" })
-    ] }),
-    /* @__PURE__ */ jsx("div", { className: "w-full overflow-auto", children: /* @__PURE__ */ jsxs(Table, { className: "w-full", children: [
-      /* @__PURE__ */ jsxs(TableHeader, { children: [
-        /* @__PURE__ */ jsx(TableCell, { header: true, className: "w-16" }),
-        /* @__PURE__ */ jsx(TableCell, { header: true, children: "Role" }),
-        /* @__PURE__ */ jsx(TableCell, { header: true, className: "items-center", children: "Is Admin" })
-      ] }),
-      /* @__PURE__ */ jsxs(TableBody, { children: [
-        roles.map((role) => {
-          return /* @__PURE__ */ jsxs(TableRow, { onClick: () => handleEditRole(role), children: [
-            /* @__PURE__ */ jsx(TableCell, { style: { width: "64px" }, children: !role.isAdmin && /* @__PURE__ */ jsx(Tooltip, { asChild: true, title: "Delete this role", children: /* @__PURE__ */ jsx(
-              IconButton,
-              {
-                size: "small",
-                onClick: (e) => {
-                  e.stopPropagation();
-                  setRoleToDelete(role);
-                  setDeleteConfirmOpen(true);
-                },
-                children: /* @__PURE__ */ jsx(Trash2Icon, {})
-              }
-            ) }) }),
-            /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx(RoleChip, { role }) }),
-            /* @__PURE__ */ jsx(TableCell, { className: "items-center", children: /* @__PURE__ */ jsx(Checkbox, { checked: role.isAdmin ?? false }) })
-          ] }, role.id);
-        }),
-        roles.length === 0 && /* @__PURE__ */ jsx(TableRow, { children: /* @__PURE__ */ jsx(TableCell, { colspan: 4, children: /* @__PURE__ */ jsxs(CenteredView, { className: "flex flex-col gap-4 my-8 items-center", children: [
-          /* @__PURE__ */ jsx(Typography, { variant: "label", children: rolesError ? "You don't have permission to view roles" : "You don't have any roles yet." }),
-          rolesError && /* @__PURE__ */ jsx(Typography, { variant: "caption", className: "text-surface-500", children: "Contact an administrator if you need access to this section." }),
-          !rolesError && allowDefaultRolesCreation && /* @__PURE__ */ jsx(Button, { onClick: createDefaultRoles, children: "Create default roles" })
-        ] }) }) })
-      ] })
-    ] }) }),
-    /* @__PURE__ */ jsx(
-      RoleDetailsForm,
-      {
-        open: dialogOpen,
-        role: selectedRole,
-        saveRole,
-        handleClose,
-        collections
-      },
-      selectedRole?.id ?? "new"
-    ),
-    /* @__PURE__ */ jsx(
-      ConfirmationDialog,
-      {
-        open: deleteConfirmOpen,
-        loading: deleteInProgress,
-        onAccept: handleDelete,
-        onCancel: () => {
-          setDeleteConfirmOpen(false);
-          setRoleToDelete(void 0);
-        },
-        title: /* @__PURE__ */ jsx(Fragment, { children: "Delete?" }),
-        body: /* @__PURE__ */ jsx(Fragment, { children: "Are you sure you want to delete this role?" })
-      }
-    )
-  ] });
-}
-function RoleDetailsForm({
-  open,
-  role: roleProp,
-  saveRole,
-  handleClose,
-  collections = []
-}) {
-  const snackbarController = useSnackbarController();
-  const isNewRole = !roleProp;
-  const [roleId, setRoleId] = useState(roleProp?.id || "");
-  const [roleName, setRoleName] = useState(roleProp?.name || "");
-  const [isAdmin, setIsAdmin] = useState(roleProp?.isAdmin ?? false);
-  const [isSubmitting, setIsSubmitting] = useState(false);
-  const [errors, setErrors] = useState({});
-  const [submitCount, setSubmitCount] = useState(0);
-  const validate = () => {
-    const newErrors = {};
-    if (!roleId) newErrors.id = "Required";
-    if (!roleName) newErrors.name = "Required";
-    setErrors(newErrors);
-    return Object.keys(newErrors).length === 0;
-  };
-  const handleSubmit = async (e) => {
-    e.preventDefault();
-    setSubmitCount((c) => c + 1);
-    if (!validate()) return;
-    setIsSubmitting(true);
-    try {
-      await saveRole({
-        id: roleId,
-        name: roleName,
-        isAdmin
-      });
-      handleClose();
-    } catch (error) {
-      snackbarController.open({
-        type: "error",
-        message: error instanceof Error ? error.message : "Failed to save role"
-      });
-    } finally {
-      setIsSubmitting(false);
-    }
-  };
-  return /* @__PURE__ */ jsx(Dialog, { open, onOpenChange: (open2) => !open2 ? handleClose() : void 0, maxWidth: "6xl", children: /* @__PURE__ */ jsxs(
-    "form",
-    {
-      onSubmit: handleSubmit,
-      autoComplete: "off",
-      noValidate: true,
-      style: {
-        display: "flex",
-        flexDirection: "column",
-        position: "relative",
-        height: "100%"
-      },
-      children: [
-        /* @__PURE__ */ jsx(DialogTitle, { variant: "h4", gutterBottom: false, children: "Role" }),
-        /* @__PURE__ */ jsx(DialogContent, { className: "h-full grow overflow-y-auto", children: /* @__PURE__ */ jsxs("div", { className: "grid grid-cols-12 gap-4", children: [
-          /* @__PURE__ */ jsxs("div", { className: "col-span-12 sm:col-span-4", children: [
-            /* @__PURE__ */ jsx(
-              TextField,
-              {
-                name: "id",
-                required: true,
-                error: submitCount > 0 && Boolean(errors.id),
-                value: roleId,
-                onChange: (e) => setRoleId(e.target.value),
-                label: "Role ID",
-                disabled: !isNewRole
-              }
-            ),
-            /* @__PURE__ */ jsx(FieldCaption, { children: submitCount > 0 && errors.id ? errors.id : "Unique identifier for this role" })
-          ] }),
-          /* @__PURE__ */ jsxs("div", { className: "col-span-12 sm:col-span-4", children: [
-            /* @__PURE__ */ jsx(
-              TextField,
-              {
-                name: "name",
-                required: true,
-                error: submitCount > 0 && Boolean(errors.name),
-                value: roleName,
-                onChange: (e) => setRoleName(e.target.value),
-                label: "Role Name"
-              }
-            ),
-            /* @__PURE__ */ jsx(FieldCaption, { children: submitCount > 0 && errors.name ? errors.name : "Display name for this role" })
-          ] }),
-          /* @__PURE__ */ jsx("div", { className: "col-span-12 sm:col-span-4 flex items-start pt-2", children: /* @__PURE__ */ jsxs("label", { className: "flex items-center gap-2 cursor-pointer mt-3", children: [
-            /* @__PURE__ */ jsx(
-              Checkbox,
-              {
-                checked: isAdmin,
-                onCheckedChange: (checked) => setIsAdmin(Boolean(checked))
-              }
-            ),
-            /* @__PURE__ */ jsx("span", { className: "font-medium", children: "Is Admin" })
-          ] }) }),
-          /* @__PURE__ */ jsx("div", { className: "col-span-12", children: /* @__PURE__ */ jsx(CollectionPermissionsMatrix, { roleId, isAdmin, collections }) })
-        ] }) }),
-        /* @__PURE__ */ jsxs(DialogActions, { children: [
-          /* @__PURE__ */ jsx(Button, { variant: "text", onClick: handleClose, children: "Cancel" }),
-          /* @__PURE__ */ jsx(
-            LoadingButton,
-            {
-              variant: "filled",
-              type: "submit",
-              loading: isSubmitting,
-              children: isNewRole ? "Create role" : "Update"
-            }
-          )
-        ] })
-      ]
-    }
-  ) });
-}
-const CRUD_OPS = [
-  {
-    op: "select",
-    label: "Read"
-  },
-  {
-    op: "insert",
-    label: "Create"
-  },
-  {
-    op: "update",
-    label: "Edit"
-  },
-  {
-    op: "delete",
-    label: "Delete"
-  }
-];
-function hasRoleAccess(rules, roleId, op) {
-  if (!rules || rules.length === 0) return true;
-  const applicable = rules.filter(
-    (r) => r.operation === op || r.operation === "all" || r.operations?.includes(op) || r.operations?.includes("all")
-  );
-  if (applicable.length === 0) return false;
-  const forRole = applicable.filter(
-    (r) => !r.roles || r.roles.length === 0 || r.roles.includes(roleId) || r.roles.includes("public")
-  );
-  if (forRole.length === 0) return false;
-  for (const r of forRole) {
-    if ((r.mode ?? "permissive") === "restrictive") return false;
-  }
-  return forRole.some((r) => (r.mode ?? "permissive") === "permissive");
-}
-function PermCell({ granted }) {
-  return /* @__PURE__ */ jsx(
-    "span",
-    {
-      className: granted ? "text-green-500 dark:text-green-400 text-base select-none" : "text-surface-300 dark:text-surface-600 text-base select-none",
-      children: granted ? "✓" : "✗"
-    }
-  );
-}
-function CollectionPermissionsMatrix({ roleId, isAdmin, collections }) {
-  if (!collections || collections.length === 0) {
-    return /* @__PURE__ */ jsx("div", { className: "mt-4", children: /* @__PURE__ */ jsx(Typography, { variant: "label", className: "text-surface-400", children: "No collections configured" }) });
-  }
-  const topLevel = collections;
-  return /* @__PURE__ */ jsxs("div", { className: "mt-6", children: [
-    /* @__PURE__ */ jsx(Typography, { variant: "label", className: "mb-2 block text-surface-600 dark:text-surface-400 uppercase tracking-wide text-xs", children: "Collection permissions" }),
-    /* @__PURE__ */ jsx("div", { className: "rounded-lg border border-surface-200 dark:border-surface-700 overflow-hidden", children: /* @__PURE__ */ jsxs(Table, { children: [
-      /* @__PURE__ */ jsx(TableHeader, { children: /* @__PURE__ */ jsxs(TableRow, { children: [
-        /* @__PURE__ */ jsx(TableCell, { header: true, children: "Collection" }),
-        CRUD_OPS.map(({ op, label }) => /* @__PURE__ */ jsx(TableCell, { header: true, className: "text-center w-24", children: label }, op))
-      ] }) }),
-      /* @__PURE__ */ jsx(TableBody, { children: topLevel.map((collection) => {
-        const extCol = collection;
-        const noRules = !extCol.securityRules || extCol.securityRules.length === 0;
-        return /* @__PURE__ */ jsxs(TableRow, { children: [
-          /* @__PURE__ */ jsxs(TableCell, { children: [
-            /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
-              /* @__PURE__ */ jsx("span", { className: "font-medium", children: collection.name }),
-              noRules && !isAdmin && /* @__PURE__ */ jsx(Tooltip, { title: "No security rules — unrestricted", children: /* @__PURE__ */ jsx(Chip, { className: "text-xs", colorScheme: "yellow", children: "No rules" }) })
-            ] }),
-            /* @__PURE__ */ jsx("span", { className: "text-xs text-surface-400 font-mono", children: collection.slug })
-          ] }),
-          CRUD_OPS.map(({ op }) => /* @__PURE__ */ jsx(TableCell, { className: "text-center", children: /* @__PURE__ */ jsx(PermCell, { granted: isAdmin || hasRoleAccess(extCol.securityRules, roleId, op) }) }, op))
-        ] }, collection.slug);
-      }) })
-    ] }) }),
-    !roleId && /* @__PURE__ */ jsx(Typography, { variant: "caption", className: "mt-2 text-surface-400 italic", children: "Enter a role ID above to preview permissions" })
-  ] });
-}
-function FieldCaption({ children }) {
-  return /* @__PURE__ */ jsx(Typography, { variant: "caption", className: "text-surface-500 mt-1.5 ml-1 block", children });
-}
 export {
   AuthApiError,
-  RebaseAuth,
-  RebaseLoginView,
-  RolesView,
-  UsersView,
-  createUserManagementAdminViews,
+  clearAuthConfigCache,
   fetchAuthConfig,
   getApiUrl,
   setApiUrl,