@replicated/portal-components 0.0.19 → 0.0.21

package/dist/index.js

@@ -3,6 +3,7 @@
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
 var buffer = require('buffer');
+var headers = require('next/headers');
 var Link = require('next/link');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -13,10 +14,119 @@ var Link__default = /*#__PURE__*/_interopDefault(Link);
  * Enterprise Portal Components
  * This file is generated by tsup. Do not edit manually.
  */
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// datadog/tracer.ts
+var tracer_exports = {};
+__export(tracer_exports, {
+  default: () => tracer_default
+});
+var rawFlag, isEnabled, tracer, getRoutePattern, tracer_default;
+var init_tracer = __esm({
+  "datadog/tracer.ts"() {
+    rawFlag = String(process.env.USE_DATADOG_APM || "").toLowerCase();
+    isEnabled = rawFlag === "true";
+    process.env.DD_TRACE_ENABLED = isEnabled ? "1" : "0";
+    tracer = null;
+    if (isEnabled) {
+      const serviceName = process.env.DD_SERVICE || "enterprise-portal";
+      const environment = process.env.DD_ENV || process.env.NODE_ENV || "development";
+      const version = process.env.DD_VERSION || process.env.NEXT_PUBLIC_VERSION || "0.0.0-dev";
+      const agentHost = process.env.DD_AGENT_HOST || process.env.DATADOG_AGENT_HOST || "127.0.0.1";
+      const agentPort = process.env.DD_TRACE_AGENT_PORT || "8126";
+      process.env.DD_SERVICE = serviceName;
+      process.env.DD_ENV = environment;
+      {
+        process.env.DD_VERSION = version;
+      }
+      process.env.DD_AGENT_HOST = agentHost;
+      process.env.DD_TRACE_AGENT_PORT = agentPort;
+      const dbmPropagationMode = process.env.DD_DBM_PROPAGATION_MODE || "full";
+      process.env.DD_DBM_PROPAGATION_MODE = dbmPropagationMode;
+      try {
+        const ddTrace = __require("dd-trace");
+        tracer = ddTrace.init({
+          service: serviceName,
+          env: environment,
+          version,
+          logInjection: true,
+          runtimeMetrics: true,
+          appsec: false,
+          profiling: false,
+          startupLogs: true
+          // Enable for debugging
+        });
+        console.log(`[datadog] Tracer initialized: service=${serviceName}, env=${environment}, version=${version}, agent=${agentHost}:${agentPort}`);
+        tracer.use("dns", false);
+        tracer.use("net", false);
+        tracer.use("http", {
+          server: {
+            hooks: {
+              request: (span, req) => {
+                if (!span) return;
+                const url = req?.url || "";
+                const method = req?.method || "GET";
+                const path = url.split("?")[0];
+                if (path.startsWith("/_next/")) {
+                  span.context()._trace.isRecording = false;
+                  return;
+                }
+                const routePattern = getRoutePattern(path);
+                span.setTag("resource.name", `${method} ${routePattern}`);
+                span.setTag("http.route", routePattern);
+              }
+            }
+          }
+        });
+      } catch (err) {
+        console.error("[datadog] failed to initialize tracing", err);
+        tracer = null;
+      }
+    }
+    getRoutePattern = (path) => {
+      const routePatterns = [
+        // Update instance routes - normalize dynamic segments (capture suffix to preserve sub-routes)
+        { pattern: /^\/update\/instance\/[^/]+(.*)$/, replacement: "/update/instance/[instanceId]$1" }
+      ];
+      for (const { pattern, replacement } of routePatterns) {
+        if (pattern.test(path)) {
+          return path.replace(pattern, replacement);
+        }
+      }
+      return path;
+    };
+    tracer_default = tracer;
+  }
+});
 
 // package.json
 var package_default = {
-  version: "0.0.19"};
+  version: "0.0.21"};
 
 // src/tokens/index.ts
 var baseTokens = {
@@ -132,6 +242,12 @@ var Button = react.forwardRef(
 Button.displayName = "Button";
 
 // src/utils/api-client.ts
+var UnauthorizedError = class extends Error {
+  constructor(message = "Unauthorized") {
+    super(message);
+    this.name = "UnauthorizedError";
+  }
+};
 function isRedirectError(error) {
   return typeof error === "object" && error !== null && "digest" in error && typeof error.digest === "string" && error.digest.startsWith("NEXT_REDIRECT");
 }
@@ -157,8 +273,17 @@ async function handle401() {
   const { redirect } = await import('next/navigation');
   return redirect("/?expired=1");
 }
+function isErrorPage(url) {
+  try {
+    const urlObj = new URL(url);
+    return urlObj.pathname === "/error";
+  } catch {
+    return url === "/error" || url.startsWith("/error?");
+  }
+}
 async function handleServerError(statusCode) {
   const { redirect } = await import('next/navigation');
+  const { cookies: cookies2 } = await import('next/headers');
   let sourceUrl;
   try {
     const { headers } = await import('next/headers');
@@ -166,12 +291,20 @@ async function handleServerError(statusCode) {
     const referer = headersList.get("referer");
     const host = headersList.get("host");
     const pathname = headersList.get("x-invoke-path") || headersList.get("x-forwarded-path");
-    if (referer) {
+    if (referer && !isErrorPage(referer)) {
       sourceUrl = referer;
     } else if (host && pathname) {
       const protocol = headersList.get("x-forwarded-proto") || "https";
       sourceUrl = `${protocol}://${host}${pathname}`;
     }
+    if (!sourceUrl || isErrorPage(sourceUrl)) {
+      const cookieStore = await cookies2();
+      const preservedSource = cookieStore.get("portal_error_source");
+      if (preservedSource?.value) {
+        sourceUrl = decodeURIComponent(preservedSource.value);
+        cookieStore.delete("portal_error_source");
+      }
+    }
   } catch (error) {
     console.debug("[portal-components] Could not determine source URL", error);
   }
@@ -182,6 +315,359 @@ async function handleServerError(statusCode) {
   return redirect(`/error?${params.toString()}`);
 }
 
+// src/utils/observability/tracing.ts
+var tracerCache = void 0;
+function getTracer() {
+  if (tracerCache !== void 0) {
+    return tracerCache;
+  }
+  const rawFlag2 = String(process.env.USE_DATADOG_APM || "").toLowerCase();
+  const isEnabled2 = rawFlag2 === "true";
+  if (!isEnabled2) {
+    tracerCache = null;
+    return null;
+  }
+  try {
+    const tracerModule = (init_tracer(), __toCommonJS(tracer_exports));
+    const tracer2 = tracerModule.default || tracerModule;
+    if (tracer2 && typeof tracer2.trace === "function") {
+      tracerCache = tracer2;
+      return tracerCache;
+    }
+  } catch (err) {
+    console.warn("Failed to load tracer:", err);
+  }
+  tracerCache = null;
+  return null;
+}
+async function withTrace(name, fn) {
+  const activeTracer = getTracer();
+  if (!activeTracer) {
+    return fn(void 0);
+  }
+  return activeTracer.trace(name, async (span) => {
+    if (span) {
+      span.setTag("component", "application");
+    }
+    try {
+      const result = await fn(span);
+      return result;
+    } catch (error) {
+      if (span) {
+        span.setTag("error", error);
+      }
+      throw error;
+    }
+  });
+}
+function traceServerAction(name, fn) {
+  const spanName = name.startsWith("server.action.") ? name : `server.action.${name}`;
+  const traced = async (...args) => {
+    return withTrace(spanName, async (span) => {
+      if (span) {
+        span.setTag("component", "server-action");
+      }
+      const result = await fn(...args);
+      return result;
+    });
+  };
+  return traced;
+}
+var deriveInstallMethods = (licenseData) => {
+  const methods = [];
+  if (licenseData.isKotsInstallEnabled) {
+    methods.push("Replicated KOTS");
+  }
+  if (licenseData.isHelmInstallEnabled) {
+    methods.push("Helm");
+  }
+  if (licenseData.isHelmAirgapEnabled) {
+    methods.push("Helm Airgap");
+  }
+  if (licenseData.isEmbeddedClusterDownloadEnabled || licenseData.isEmbeddedClusterMultiNodeEnabled) {
+    methods.push("Embedded Cluster");
+  }
+  if (licenseData.isKurlInstallEnabled) {
+    methods.push("kURL");
+  }
+  if (licenseData.isGitopsSupported) {
+    methods.push("GitOps");
+  }
+  return Array.from(new Set(methods));
+};
+var convertEntitlementsToFields = (entitlementFields, entitlementValues) => {
+  const valuesMap = /* @__PURE__ */ new Map();
+  entitlementValues.forEach((ev) => {
+    valuesMap.set(ev.name, ev.value);
+  });
+  return entitlementFields.filter((field) => field.hidden === 0).map((field) => ({
+    key: field.name,
+    label: field.title || field.name,
+    value: valuesMap.get(field.name) || field.defaultVal || null,
+    isSecret: field.type === "Password"
+  }));
+};
+async function fetchLicenseCore() {
+  const sessionStore = await headers.cookies();
+  const session = sessionStore.get("portal_session");
+  const token = session?.value;
+  if (!token) {
+    throw new Error("No session found - user must be authenticated");
+  }
+  const endpoint = `${getApiOrigin()}/enterprise-portal/license`;
+  if (process.env.NODE_ENV !== "production") {
+    console.debug("[portal-components] fetching license via %s (Enterprise Portal API)", endpoint);
+  }
+  const response = await authenticatedFetch(endpoint, {
+    method: "GET",
+    token,
+    headers: {
+      Accept: "application/json"
+    }
+  });
+  if (!response.ok) {
+    throw new Error(
+      `License request failed (${response.status} ${response.statusText})`
+    );
+  }
+  const envelope = await response.json();
+  const licenseData = envelope.data;
+  const license = {
+    ...licenseData,
+    // Alias fields for backward compatibility
+    expiresAt: licenseData.expireAt,
+    environment: licenseData.licenseType,
+    // Extract channel names from channels array
+    releaseChannels: (licenseData.channels || []).map((ch) => ch.channelName),
+    // Derive install methods from feature flags
+    installMethods: deriveInstallMethods(licenseData),
+    // Convert entitlements to fields format
+    fields: convertEntitlementsToFields(licenseData.entitlementFields || [], licenseData.entitlementValues || [])
+  };
+  return license;
+}
+var fetchLicenseImpl = react.cache(fetchLicenseCore);
+var fetchLicense = fetchLicenseImpl;
+
+// src/utils/constants.ts
+var DEFAULT_FAVICON = "data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='%239ca3af' stroke-width='1.5'%3E%3Ccircle cx='12' cy='12' r='10'/%3E%3Cellipse cx='12' cy='12' rx='4' ry='10'/%3E%3Cpath d='M2 12h20'/%3E%3C/svg%3E";
+var DEFAULT_PRIMARY_COLOR = "#4f46e5";
+var DEFAULT_SECONDARY_COLOR = "#6366f1";
+var isHttpApiOrigin = () => {
+  return process.env.REPLICATED_APP_ORIGIN?.startsWith("http://") || false;
+};
+
+// src/utils/branding.ts
+var normalizeColor = (color) => {
+  if (!color || typeof color !== "string") {
+    return void 0;
+  }
+  const trimmed = color.trim();
+  if (/^#?[0-9a-fA-F]{3}([0-9a-fA-F]{3})?$/.test(trimmed)) {
+    return trimmed.startsWith("#") ? trimmed : `#${trimmed}`;
+  }
+  console.debug("[portal-components] Invalid color format rejected (only hex supported):", trimmed);
+  return void 0;
+};
+var sanitizeUrlForCss = (url) => {
+  if (!url || typeof url !== "string") {
+    return void 0;
+  }
+  const trimmed = url.trim();
+  try {
+    const urlObj = new URL(trimmed);
+    if (!["http:", "https:", "data:"].includes(urlObj.protocol)) {
+      console.debug("[portal-components] Invalid URL protocol for background image:", urlObj.protocol);
+      return void 0;
+    }
+  } catch {
+    console.debug("[portal-components] Invalid URL format for background image:", trimmed);
+    return void 0;
+  }
+  const escaped = trimmed.replace(/\\/g, "\\\\").replace(/\)/g, "\\)").replace(/"/g, '\\"').replace(/'/g, "\\'").replace(/[\x00-\x1F\x7F]/g, "");
+  return escaped;
+};
+var decodeBranding = ({ brandingData }) => {
+  if (!brandingData || typeof brandingData !== "string") {
+    return {
+      primaryColor: DEFAULT_PRIMARY_COLOR,
+      secondaryColor: DEFAULT_SECONDARY_COLOR
+    };
+  }
+  try {
+    const decoded = buffer.Buffer.from(brandingData, "base64").toString("utf-8");
+    const parsed = JSON.parse(decoded);
+    const logo = typeof parsed.logo === "string" ? parsed.logo : void 0;
+    const titleRaw = typeof parsed.title === "string" ? parsed.title.trim() : "";
+    const title = titleRaw ? titleRaw : void 0;
+    const favicon = typeof parsed.favicon === "string" ? parsed.favicon : void 0;
+    const primaryColorRaw = parsed.primaryColor ?? parsed.primary_color;
+    const secondaryColorRaw = parsed.secondaryColor ?? parsed.secondary_color;
+    const primaryColor = normalizeColor(primaryColorRaw);
+    const secondaryColor = normalizeColor(secondaryColorRaw);
+    const supportPortalLink = typeof parsed.supportPortalLink === "string" ? parsed.supportPortalLink : void 0;
+    const backgroundRaw = parsed.background;
+    const background = backgroundRaw === "minimal" || backgroundRaw === "custom" || backgroundRaw === "image" ? backgroundRaw : void 0;
+    const backgroundImage = sanitizeUrlForCss(parsed.backgroundImage);
+    const backgroundGradientStart = normalizeColor(parsed.customColor1);
+    const backgroundGradientEnd = normalizeColor(parsed.customColor2);
+    return {
+      logo,
+      title,
+      favicon,
+      primaryColor: primaryColor || DEFAULT_PRIMARY_COLOR,
+      secondaryColor: secondaryColor || DEFAULT_SECONDARY_COLOR,
+      supportPortalLink,
+      background,
+      backgroundImage,
+      backgroundGradientStart,
+      backgroundGradientEnd
+    };
+  } catch (error) {
+    console.debug("[portal-components] unable to parse branding JSON", error);
+    return {
+      primaryColor: DEFAULT_PRIMARY_COLOR,
+      secondaryColor: DEFAULT_SECONDARY_COLOR
+    };
+  }
+};
+
+// src/utils/session.ts
+async function validateSession(token) {
+  if (!token || typeof token !== "string" || !token.trim()) {
+    return false;
+  }
+  try {
+    const endpoint = `${getApiOrigin()}/enterprise-portal/user`;
+    const response = await fetch(endpoint, {
+      method: "GET",
+      headers: {
+        authorization: `Bearer ${token}`
+      },
+      // Short timeout for validation
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (response.status === 401) {
+      return false;
+    }
+    return response.ok;
+  } catch (error) {
+    console.warn("[portal-components] session validation error:", error);
+    return true;
+  }
+}
+async function deleteSessionCookie() {
+  const { cookies: cookies2 } = await import('next/headers');
+  const cookieStore = await cookies2();
+  cookieStore.delete("portal_session");
+}
+
+// src/utils/format.ts
+function formatBytes(bytes, decimals = 1) {
+  if (bytes === 0) return "0 Bytes";
+  const k = 1024;
+  const dm = decimals < 0 ? 0 : decimals;
+  const sizes = ["Bytes", "KB", "MB", "GB", "TB"];
+  const i = Math.floor(Math.log(bytes) / Math.log(k));
+  return `${parseFloat((bytes / Math.pow(k, i)).toFixed(dm))} ${sizes[i]}`;
+}
+function formatDateShort(dateString) {
+  if (!dateString) return "Never";
+  const date = new Date(dateString);
+  if (isNaN(date.getTime())) {
+    return dateString;
+  }
+  return date.toLocaleDateString("en-US", {
+    year: "numeric",
+    month: "2-digit",
+    day: "2-digit"
+  });
+}
+function formatDate(dateString) {
+  if (!dateString) return "Never";
+  const date = new Date(dateString);
+  if (isNaN(date.getTime())) {
+    return dateString;
+  }
+  return date.toLocaleDateString("en-US", {
+    month: "short",
+    day: "numeric",
+    year: "numeric",
+    hour: "numeric",
+    minute: "2-digit",
+    hour12: true
+  });
+}
+function formatDateTime(dateString) {
+  const date = new Date(dateString);
+  if (isNaN(date.getTime())) {
+    return dateString;
+  }
+  return date.toLocaleString("en-US", {
+    timeZone: "UTC",
+    year: "numeric",
+    month: "2-digit",
+    day: "2-digit",
+    hour: "2-digit",
+    minute: "2-digit",
+    second: "2-digit",
+    hour12: false
+  }) + " UTC";
+}
+function formatDateTimeLocal(dateString) {
+  if (!dateString) return "N/A";
+  try {
+    const date = new Date(dateString);
+    if (isNaN(date.getTime())) {
+      return dateString;
+    }
+    return date.toLocaleDateString("en-US", {
+      month: "numeric",
+      day: "numeric",
+      year: "numeric",
+      hour: "numeric",
+      minute: "2-digit",
+      hour12: true
+    });
+  } catch {
+    return "N/A";
+  }
+}
+
+// src/utils/release-helpers.ts
+function convertToReleaseEntry(release, channelName, options) {
+  const sections = [];
+  if (release.release_notes && release.release_notes.trim().length > 0) {
+    if (options.releaseNotesMode === "markdown") {
+      sections.push({
+        title: "Release Notes",
+        description: release.release_notes
+      });
+    } else {
+      const releaseNotesItems = release.release_notes.split(/\r?\n/).map((line) => line.trim()).filter((line) => line.length > 0);
+      sections.push({
+        title: "Release Notes",
+        description: releaseNotesItems.length === 0 ? release.release_notes : void 0,
+        items: releaseNotesItems.length > 0 ? releaseNotesItems : void 0
+      });
+    }
+  }
+  const charts = release.helm_charts ? release.helm_charts.filter((chart) => !chart.is_kots_installer_only).map((chart) => `${chart.name} v${chart.version}`) : [];
+  if (charts.length > 0) {
+    sections.push({
+      title: "Helm Charts",
+      items: charts,
+      description: "Latest chart versions included in this release."
+    });
+  }
+  return {
+    version: release.label || `Release ${release.release_sequence}`,
+    channel: channelName || `Channel ${release.channel_sequence}`,
+    releasedAt: release.release_date,
+    sections
+  };
+}
+
 // src/actions/index.ts
 var getApiOrigin = () => {
   return (process.env.REPLICATED_APP_ORIGIN || "https://replicated.app").replace(/\/+$/, "");
@@ -321,11 +807,15 @@ var fetchCustomBrandingImpl = async () => {
   const payload = await response.json();
   const brandingObject = {
     logo: payload.logoUrl,
-    title: payload.appName,
-    customColor1: payload.primaryColor,
-    customColor2: payload.secondaryColor,
+    title: payload.title,
+    primaryColor: payload.primaryColor,
+    secondaryColor: payload.secondaryColor,
     favicon: payload.faviconUrl,
-    supportPortalLink: payload.supportPortalLink || ""
+    supportPortalLink: payload.supportPortalLink || "",
+    background: payload.background,
+    backgroundImage: payload.backgroundImage,
+    customColor1: payload.customColor1,
+    customColor2: payload.customColor2
   };
   const brandingData = buffer.Buffer.from(JSON.stringify(brandingObject)).toString("base64");
   return {
@@ -588,353 +1078,38 @@ var uploadSupportBundle = defineServerAction({
 var getSupportBundleUploadUrl = (appId) => {
   return `${getApiOrigin()}/enterprise-portal/support-bundles/upload/${encodeURIComponent(appId)}`;
 };
-var listReleases = defineServerAction({
-  id: "releases/list",
-  description: "Lists available releases for the authenticated customer.",
-  visibility: "customer",
-  tags: ["releases"],
-  async run({ token }, context) {
-    if (!token || typeof token !== "string") {
-      throw new Error("List releases requires a session token");
-    }
-    const endpoint = `${getApiOrigin()}/enterprise-portal/releases`;
-    if (process.env.NODE_ENV !== "production") {
-      console.debug("[portal-components] fetching releases via %s (Enterprise Portal API)", endpoint);
-    }
-    const response = await authenticatedFetch(endpoint, {
-      method: "GET",
-      token,
-      headers: {
-        accept: "application/json"
-      },
-      signal: context?.signal
-    });
-    const bodyText = await response.text().catch((error) => {
-      console.warn("[portal-components] listReleases read error", error);
-      return null;
-    });
-    if (!response.ok) {
-      throw new Error(
-        `List releases request failed (${response.status} ${response.statusText})`
-      );
-    }
-    return {
-      status: response.status,
-      body: bodyText
-    };
-  }
-});
-var asRecord = (value) => {
-  if (value && typeof value === "object") {
-    return value;
-  }
-  return void 0;
-};
-var getValue = (record, key) => record ? record[key] : void 0;
-var getString = (record, key) => {
-  const value = getValue(record, key);
-  return typeof value === "string" ? value : void 0;
-};
-var getBoolean = (record, key) => {
-  const value = getValue(record, key);
-  if (typeof value === "boolean") {
-    return value;
-  }
-  if (typeof value === "number") {
-    return value === 1;
-  }
-  if (typeof value === "string") {
-    const normalized = value.trim().toLowerCase();
-    if (["true", "1", "yes"].includes(normalized)) {
-      return true;
-    }
-    if (["false", "0", "no"].includes(normalized)) {
-      return false;
-    }
-  }
-  return void 0;
-};
-var toDisplayValue = (value) => {
-  if (value === null || value === void 0) {
-    return null;
-  }
-  if (typeof value === "string") {
-    return value;
-  }
-  if (typeof value === "number" || typeof value === "boolean") {
-    return String(value);
-  }
-  try {
-    return JSON.stringify(value);
-  } catch {
-    return String(value);
-  }
-};
-var normalizeStringArray = (value) => {
-  if (Array.isArray(value)) {
-    const normalized = value.map(
-      (item) => typeof item === "string" ? item.trim() : ""
-    ).filter((item) => item.length > 0);
-    return normalized.length ? normalized : void 0;
-  }
-  if (typeof value === "string") {
-    const normalized = value.split(",").map((item) => item.trim()).filter((item) => item.length > 0);
-    return normalized.length ? normalized : void 0;
-  }
-  return void 0;
-};
-var normalizeLicenseFields = (input) => {
-  if (!input) {
-    return [];
-  }
-  if (Array.isArray(input)) {
-    return input.map((field, index) => {
-      if (!field || typeof field !== "object") {
-        return null;
-      }
-      const candidate = field;
-      const key = typeof candidate.key === "string" && candidate.key.trim().length ? candidate.key.trim() : typeof candidate.name === "string" && candidate.name.trim().length ? candidate.name.trim() : typeof candidate.label === "string" && candidate.label.trim().length ? candidate.label.trim() : `field-${index}`;
-      const label = typeof candidate.label === "string" && candidate.label.trim().length ? candidate.label.trim() : typeof candidate.name === "string" && candidate.name.trim().length ? candidate.name.trim() : key;
-      let value = candidate.value ?? candidate.data ?? candidate.content;
-      if ((value === void 0 || value === null) && typeof candidate.text === "string") {
-        value = candidate.text;
-      }
-      if ((value === void 0 || value === null) && typeof candidate.defaultValue === "string") {
-        value = candidate.defaultValue;
-      }
-      const isSecret = Boolean(
-        candidate.isSecret ?? candidate.secret ?? candidate.masked
-      );
-      const resolved = toDisplayValue(value);
-      return {
-        key,
-        label,
-        value: resolved,
-        isSecret
-      };
-    }).filter((field) => Boolean(field));
-  }
-  if (typeof input === "object") {
-    return Object.entries(input).map(
-      ([key, value]) => {
-        let resolvedValue = value;
-        let isSecret = false;
-        if (value && typeof value === "object") {
-          const obj = value;
-          if ("value" in obj) {
-            resolvedValue = obj.value;
-          }
-          isSecret = Boolean(obj.isSecret ?? obj.secret ?? obj.masked);
-        }
-        const normalized = toDisplayValue(resolvedValue);
-        return {
-          key,
-          label: key,
-          value: normalized,
-          isSecret
-        };
-      }
-    );
-  }
-  return [];
-};
-var extractChannelNames = (input) => {
-  if (!Array.isArray(input)) {
-    return void 0;
+async function listReleasesImpl() {
+  const { cookies: cookies2 } = await import('next/headers');
+  const sessionStore = await cookies2();
+  const session = sessionStore.get("portal_session");
+  const token = session?.value;
+  if (!token) {
+    throw new Error("List releases requires a session token");
+  }
+  const endpoint = `${getApiOrigin()}/enterprise-portal/releases`;
+  if (process.env.NODE_ENV !== "production") {
+    console.debug("[portal-components] fetching releases via %s (Enterprise Portal API)", endpoint);
   }
-  const names = input.map((item) => {
-    if (typeof item === "string") {
-      return item.trim();
-    }
-    const record = asRecord(item);
-    if (!record) {
-      return null;
-    }
-    return getString(record, "name") ?? getString(record, "channelName") ?? getString(record, "channel") ?? getString(record, "channelSlug") ?? getString(record, "slug") ?? void 0;
-  }).filter((name) => Boolean(name && name.length));
-  return names.length ? names : void 0;
-};
-var normalizeEntitlementFields = (fieldsInput, valuesInput) => {
-  const valuesMap = /* @__PURE__ */ new Map();
-  const assignValue = (key, value) => {
-    if (!key) {
-      return;
+  const response = await authenticatedFetch(endpoint, {
+    method: "GET",
+    token,
+    headers: {
+      accept: "application/json"
     }
-    valuesMap.set(key, toDisplayValue(value));
-  };
-  if (Array.isArray(valuesInput)) {
-    valuesInput.forEach((item) => {
-      const record = asRecord(item);
-      if (!record) {
-        if (typeof item === "string") {
-          assignValue(item, item);
-        }
-        return;
-      }
-      const key = getString(record, "name") ?? getString(record, "field") ?? getString(record, "title") ?? getString(record, "label") ?? getString(record, "slug") ?? (() => {
-        const idValue = getValue(record, "id");
-        if (typeof idValue === "string" || typeof idValue === "number") {
-          return String(idValue);
-        }
-        return void 0;
-      })();
-      const value = getValue(record, "value") ?? getValue(record, "currentValue") ?? getValue(record, "entitlementValue") ?? getValue(record, "content") ?? getValue(record, "data") ?? getValue(record, "defaultVal") ?? getValue(record, "defaultValue");
-      assignValue(key, value);
-    });
-  } else if (valuesInput && typeof valuesInput === "object") {
-    Object.entries(valuesInput).forEach(
-      ([key, value]) => assignValue(key, value)
+  });
+  if (!response.ok) {
+    throw new Error(
+      `List releases request failed (${response.status} ${response.statusText})`
     );
   }
-  const normalized = [];
-  if (Array.isArray(fieldsInput)) {
-    fieldsInput.forEach((item, index) => {
-      const record = asRecord(item);
-      if (!record) {
-        return;
-      }
-      const baseKey = getString(record, "name") ?? getString(record, "field") ?? getString(record, "slug") ?? `entitlement-${index}`;
-      const key = `entitlement-${baseKey}`;
-      const label = getString(record, "title") ?? getString(record, "label") ?? baseKey;
-      const defaultValue = getString(record, "defaultVal") ?? getString(record, "default") ?? getString(record, "defaultValue");
-      const value = valuesMap.get(baseKey) ?? valuesMap.get(label) ?? defaultValue ?? null;
-      const isSecret = Boolean(
-        getBoolean(record, "secret") ?? getBoolean(record, "isSecret") ?? getBoolean(record, "masked")
-      );
-      normalized.push({
-        key,
-        label,
-        value,
-        isSecret
-      });
-    });
-  }
-  valuesMap.forEach((value, key) => {
-    const normalizedKey = `entitlement-${key}`;
-    if (!normalized.some((field) => field.key === normalizedKey)) {
-      normalized.push({
-        key: normalizedKey,
-        label: key,
-        value
-      });
-    }
-  });
-  return normalized;
-};
-var normalizeLicensePayload = (payload) => {
-  const payloadRecord = asRecord(payload);
-  const rootRecord = asRecord(getValue(payloadRecord, "license")) ?? asRecord(getValue(payloadRecord, "data")) ?? payloadRecord ?? {};
-  const sourceRecord = asRecord(getValue(rootRecord, "metadata")) ?? rootRecord;
-  const customer = asRecord(getValue(rootRecord, "customer")) ?? asRecord(getValue(sourceRecord, "customer")) ?? asRecord(getValue(payloadRecord, "customer")) ?? {};
-  let releaseChannels = normalizeStringArray(
-    getValue(rootRecord, "releaseChannels") ?? getValue(sourceRecord, "releaseChannels") ?? getValue(sourceRecord, "channels") ?? getValue(rootRecord, "channels") ?? getValue(sourceRecord, "channel") ?? getValue(rootRecord, "channel")
-  ) ?? void 0;
-  if (!releaseChannels) {
-    releaseChannels = extractChannelNames(getValue(rootRecord, "channels")) ?? extractChannelNames(getValue(sourceRecord, "channels")) ?? void 0;
-  }
-  let installMethods = normalizeStringArray(
-    getValue(rootRecord, "installMethods") ?? getValue(sourceRecord, "installMethods") ?? getValue(sourceRecord, "install_options") ?? getValue(rootRecord, "install_options") ?? getValue(sourceRecord, "installOptions")
-  ) ?? void 0;
-  if (!installMethods || installMethods.length === 0) {
-    const resolved = [];
-    const flag = (key) => getBoolean(rootRecord, key) ?? getBoolean(sourceRecord, key) ?? false;
-    if (flag("isKotsInstallEnabled")) {
-      resolved.push("Replicated KOTS");
-    }
-    if (flag("isHelmInstallEnabled")) {
-      resolved.push("Helm");
-    }
-    if (flag("isHelmAirgapEnabled")) {
-      resolved.push("Helm Airgap");
-    }
-    if (flag("isEmbeddedClusterDownloadEnabled") || flag("isEmbeddedClusterMultiNodeEnabled")) {
-      resolved.push("Embedded Cluster");
-    }
-    if (flag("isKurlInstallEnabled")) {
-      resolved.push("kURL");
-    }
-    if (flag("isGitopsSupported")) {
-      resolved.push("GitOps");
-    }
-    if (resolved.length) {
-      installMethods = Array.from(new Set(resolved));
-    }
-  }
-  const expiresAtSource = getValue(sourceRecord, "expiresAt") ?? getValue(sourceRecord, "expireAt") ?? getValue(sourceRecord, "expire_at") ?? getValue(sourceRecord, "expiration") ?? getValue(sourceRecord, "expirationDate") ?? getValue(sourceRecord, "expires_on") ?? getValue(rootRecord, "expiresAt") ?? getValue(rootRecord, "expireAt") ?? getValue(rootRecord, "expire_at") ?? getValue(rootRecord, "expiration");
-  const expiresAt = typeof expiresAtSource === "string" && expiresAtSource.trim().length ? expiresAtSource : expiresAtSource === null ? null : void 0;
-  const baseFields = normalizeLicenseFields(
-    getValue(rootRecord, "additionalFields") ?? getValue(sourceRecord, "additionalFields") ?? getValue(sourceRecord, "fields") ?? getValue(rootRecord, "fields") ?? getValue(payloadRecord, "fields") ?? getValue(payloadRecord, "additional_fields")
-  );
-  const entitlementFields = normalizeEntitlementFields(
-    getValue(rootRecord, "entitlementFields") ?? getValue(sourceRecord, "entitlementFields"),
-    getValue(rootRecord, "entitlementValues") ?? getValue(sourceRecord, "entitlementValues")
-  );
-  const fields = [
-    ...baseFields,
-    ...entitlementFields.filter(
-      (field) => !baseFields.some((existing) => existing.key === field.key)
-    )
-  ];
-  const statusFromSource = getString(sourceRecord, "status") ?? getString(sourceRecord, "state");
-  const statusLabelFromSource = getString(sourceRecord, "statusLabel") ?? getString(sourceRecord, "stateLabel");
-  const expiredFlag = getBoolean(sourceRecord, "isExpired") ?? getBoolean(rootRecord, "isExpired");
-  const derivedStatus = statusFromSource ?? (typeof expiredFlag === "boolean" ? expiredFlag ? "expired" : "active" : void 0);
-  const statusLabel = statusLabelFromSource ?? (derivedStatus ? derivedStatus.charAt(0).toUpperCase() + derivedStatus.slice(1) : void 0);
-  const licenseType = getString(sourceRecord, "licenseType") ?? getString(rootRecord, "licenseType");
-  const status = derivedStatus;
-  const license = {
-    id: getString(rootRecord, "id") ?? getString(sourceRecord, "id") ?? getString(sourceRecord, "licenseId") ?? getString(customer, "licenseId") ?? void 0,
-    status,
-    statusLabel,
-    environment: getString(sourceRecord, "environment") ?? getString(sourceRecord, "tier") ?? licenseType ?? void 0,
-    expiresAt: expiresAt ?? null,
-    releaseChannels: releaseChannels ?? [
-      getString(rootRecord, "channelName") ?? getString(rootRecord, "channel") ?? void 0
-    ].filter((value) => Boolean(value)),
-    installMethods,
-    installNotes: getString(sourceRecord, "installNotes"),
-    customerName: getString(sourceRecord, "customerName") ?? getString(customer, "name") ?? void 0,
-    customerId: getString(sourceRecord, "customerId") ?? getString(customer, "id") ?? getString(rootRecord, "customerId") ?? void 0,
-    customerOrganization: getString(customer, "organization") ?? getString(sourceRecord, "customerOrganization") ?? getString(rootRecord, "customerOrganization") ?? void 0,
-    fields
+  const envelope = await response.json();
+  const data = envelope.data;
+  return {
+    releases: Array.isArray(data?.releases) ? data.releases : [],
+    totalCount: data?.totalCount || 0
   };
-  return license;
-};
-var fetchLicenseDetails = defineServerAction({
-  id: "license/fetch-details",
-  description: "Fetches the authenticated user's enterprise license details.",
-  visibility: "customer",
-  tags: ["license", "entitlements"],
-  async run({ token }, context) {
-    if (typeof token !== "string" || token.trim().length === 0) {
-      throw new Error("fetchLicenseDetails requires a non-empty token");
-    }
-    const endpoint = `${getApiOrigin()}/enterprise-portal/license`;
-    if (process.env.NODE_ENV !== "production") {
-      console.debug("[portal-components] fetching license via %s (Enterprise Portal API)", endpoint);
-    }
-    const response = await authenticatedFetch(endpoint, {
-      method: "GET",
-      token,
-      headers: {
-        accept: "application/json"
-      },
-      signal: context?.signal
-    });
-    if (!response.ok) {
-      throw new Error(
-        `License request failed (${response.status} ${response.statusText})`
-      );
-    }
-    const payload = await response.json();
-    const licenseData = payload.data;
-    const license = normalizeLicensePayload(licenseData);
-    return {
-      license,
-      raw: licenseData ?? null
-    };
-  }
-});
+}
+var listReleases = traceServerAction("listReleases", listReleasesImpl);
 var getSecurityInfo = defineServerAction({
   id: "security/get-info",
   description: "Fetches CVE security scan results for a specific release",
@@ -1413,12 +1588,12 @@ var InfoRow = ({
   icon,
   title,
   children
-}) => /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-start space-x-3", children: [
-  /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mt-1 text-gray-900", children: icon }),
-  /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
-    /* @__PURE__ */ jsxRuntime.jsx("h3", { className: "text-sm font-medium text-gray-900", children: title }),
-    children
-  ] })
+}) => /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+  /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-baseline gap-2", children: [
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex h-4 w-4 flex-shrink-0 items-center justify-center text-gray-900", children: icon }),
+    /* @__PURE__ */ jsxRuntime.jsx("h3", { className: "text-sm font-medium leading-4 text-gray-900", children: title })
+  ] }),
+  /* @__PURE__ */ jsxRuntime.jsx("div", { className: "pl-6", children })
 ] });
 var renderInstallOrChannel = (values) => {
   if (!values || values.length === 0) {
@@ -1433,12 +1608,12 @@ var buildPrimaryRows = (license) => {
     node: /* @__PURE__ */ jsxRuntime.jsxs(
       InfoRow,
       {
-        icon: /* @__PURE__ */ jsxRuntime.jsx(ShieldIcon, { className: "h-5 w-5" }),
+        icon: /* @__PURE__ */ jsxRuntime.jsx(ShieldIcon, { className: "h-4 w-4" }),
         title: "License Status",
         children: [
           /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "mt-1 flex items-center text-sm text-gray-600", children: [
             /* @__PURE__ */ jsxRuntime.jsx(CheckIcon, { className: "mr-1.5 h-4 w-4 text-green-500" }),
-            /* @__PURE__ */ jsxRuntime.jsx("span", { children: license.statusLabel ?? (license.status ? license.status.charAt(0).toUpperCase() + license.status.slice(1) : "Unknown") })
+            /* @__PURE__ */ jsxRuntime.jsx("span", { children: license.isExpired ? "Expired" : "Active" })
           ] }),
           license.environment ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-1 text-sm text-gray-500", children: license.environment }) : null
         ]
@@ -1450,7 +1625,7 @@ var buildPrimaryRows = (license) => {
     node: /* @__PURE__ */ jsxRuntime.jsx(
       InfoRow,
       {
-        icon: /* @__PURE__ */ jsxRuntime.jsx(CalendarIcon, { className: "h-5 w-5" }),
+        icon: /* @__PURE__ */ jsxRuntime.jsx(CalendarIcon, { className: "h-4 w-4" }),
         title: "Expiration Date",
         children: /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-1 text-sm text-gray-500", children: formatExpiration(license.expiresAt) })
       }
@@ -1461,7 +1636,7 @@ var buildPrimaryRows = (license) => {
     node: /* @__PURE__ */ jsxRuntime.jsx(
       InfoRow,
       {
-        icon: /* @__PURE__ */ jsxRuntime.jsx(ShieldIcon, { className: "h-5 w-5" }),
+        icon: /* @__PURE__ */ jsxRuntime.jsx(ShieldIcon, { className: "h-4 w-4" }),
         title: "Release Channel(s)",
         children: renderInstallOrChannel(license.releaseChannels)
       }
@@ -1472,7 +1647,7 @@ var buildPrimaryRows = (license) => {
     node: /* @__PURE__ */ jsxRuntime.jsx(
       InfoRow,
       {
-        icon: /* @__PURE__ */ jsxRuntime.jsx(DownloadIcon, { className: "h-5 w-5" }),
+        icon: /* @__PURE__ */ jsxRuntime.jsx(DownloadIcon, { className: "h-4 w-4" }),
         title: "Install Options",
         children: renderInstallOrChannel(license.installMethods)
       }
@@ -1483,7 +1658,7 @@ var buildPrimaryRows = (license) => {
     node: /* @__PURE__ */ jsxRuntime.jsxs(
       InfoRow,
       {
-        icon: /* @__PURE__ */ jsxRuntime.jsx(BuildingIcon, { className: "h-5 w-5" }),
+        icon: /* @__PURE__ */ jsxRuntime.jsx(BuildingIcon, { className: "h-4 w-4" }),
         title: "Customer Name",
         children: [
           /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-1 text-sm text-gray-500", children: license.customerName ?? "Unknown customer" }),
@@ -1501,7 +1676,7 @@ var renderFields = (fields) => {
   if (!fields.length) {
     return /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-500", children: "No additional fields available." });
   }
-  return /* @__PURE__ */ jsxRuntime.jsx("div", { className: "grid grid-cols-1 gap-6 md:grid-cols-2 lg:grid-cols-3", children: fields.map((field) => /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col", children: [
+  return /* @__PURE__ */ jsxRuntime.jsx("div", { className: "grid grid-cols-1 gap-6 md:grid-cols-2 xl:grid-cols-3", children: fields.map((field) => /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col", children: [
     /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm font-medium text-gray-900", children: field.label }),
     /* @__PURE__ */ jsxRuntime.jsx(
       "p",
@@ -1522,9 +1697,7 @@ var LicenseDetails = async ({
   if (typeof token !== "string" || token.trim().length === 0) {
     throw new Error("LicenseDetails component requires a non-empty token");
   }
-  const response = await fetchLicenseDetails.run({ token });
-  console.debug("[portal-components] license response", response.raw);
-  const { license } = response;
+  const license = await fetchLicense();
   const rows = buildPrimaryRows(license);
   return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "rounded border border-gray-100 bg-white p-8 shadow-[0_18px_45px_rgba(17,24,39,0.08)]", children: [
     /* @__PURE__ */ jsxRuntime.jsxs("header", { className: "flex flex-col border-b border-gray-100 pb-6", children: [
@@ -1532,7 +1705,7 @@ var LicenseDetails = async ({
       description ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm text-gray-600", children: description }) : null
     ] }),
     /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "mt-6 space-y-6", children: [
-      /* @__PURE__ */ jsxRuntime.jsx("div", { className: "rounded-lg border border-gray-100 bg-white p-6 sm:p-8", children: /* @__PURE__ */ jsxRuntime.jsx("div", { className: "grid grid-cols-1 gap-6 md:grid-cols-2 lg:grid-cols-3", children: rows.map((row) => /* @__PURE__ */ jsxRuntime.jsx("div", { children: row.node }, row.key)) }) }),
+      /* @__PURE__ */ jsxRuntime.jsx("div", { className: "rounded-lg border border-gray-100 bg-white p-6 sm:p-8", children: /* @__PURE__ */ jsxRuntime.jsx("div", { className: "grid grid-cols-1 items-start gap-6 md:grid-cols-2 xl:grid-cols-3", children: rows.map((row) => /* @__PURE__ */ jsxRuntime.jsx("div", { children: row.node }, row.key)) }) }),
       /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "rounded-lg border border-gray-100 bg-white p-6 sm:p-8", children: [
         /* @__PURE__ */ jsxRuntime.jsx("h2", { className: "mb-4 text-lg font-medium text-gray-900", children: "Additional License Fields" }),
         /* @__PURE__ */ jsxRuntime.jsx("div", { className: "overflow-x-auto", children: renderFields(license.fields ?? []) })
@@ -1725,57 +1898,49 @@ var TopNav = async ({
   currentCustomerId,
   onChangeTeam,
   userMenuChildren,
-  logoutButton
+  logoutButton,
+  branding: brandingProp
 }) => {
   const displayLabel = userMenuLabel || (customerName ? `Team: ${customerName}` : "Team: Example");
   let logo;
   let brandTitle;
-  let customColor1;
-  let customColor2;
-  const normalizeColor = (color) => {
-    if (!color || typeof color !== "string") {
-      return void 0;
-    }
-    const trimmed = color.trim();
-    if (/^#?[0-9a-fA-F]{3}([0-9a-fA-F]{3})?$/.test(trimmed)) {
-      return trimmed.startsWith("#") ? trimmed : `#${trimmed}`;
-    }
-    return trimmed;
-  };
-  try {
-    const branding = await fetchCustomBranding();
-    if (branding.brandingData) {
-      const decoded = buffer.Buffer.from(branding.brandingData, "base64").toString(
-        "utf-8"
-      );
-      try {
-        const parsed = JSON.parse(decoded);
-        if (parsed?.logo && typeof parsed.logo === "string") {
-          logo = parsed.logo;
-        }
-        if (parsed?.title && typeof parsed.title === "string") {
-          const normalizedTitle = parsed.title.trim();
-          if (normalizedTitle) {
-            brandTitle = normalizedTitle;
-          }
-        }
-        if (parsed?.customColor1 && typeof parsed.customColor1 === "string") {
-          customColor1 = normalizeColor(parsed.customColor1);
-        }
-        if (parsed?.customColor2 && typeof parsed.customColor2 === "string") {
-          customColor2 = normalizeColor(parsed.customColor2);
-        }
-      } catch (error) {
-        console.debug(
-          "[portal-components] unable to parse branding JSON",
-          error
-        );
+  let primaryColor;
+  let secondaryColor;
+  let background;
+  let backgroundImageUrl;
+  let backgroundGradientStart;
+  let backgroundGradientEnd;
+  if (brandingProp) {
+    if (brandingProp.logo && typeof brandingProp.logo === "string") {
+      logo = brandingProp.logo;
+    }
+    if (brandingProp.title && typeof brandingProp.title === "string") {
+      const normalizedTitle = brandingProp.title.trim();
+      if (normalizedTitle) {
+        brandTitle = normalizedTitle;
       }
-    } else {
-      console.debug("[portal-components] branding", branding);
     }
-  } catch (error) {
-    console.debug("[portal-components] branding fetch failed", error);
+    primaryColor = normalizeColor(brandingProp.primaryColor);
+    secondaryColor = normalizeColor(brandingProp.secondaryColor);
+    background = brandingProp.background;
+    backgroundImageUrl = brandingProp.backgroundImage;
+    backgroundGradientStart = normalizeColor(brandingProp.backgroundGradientStart);
+    backgroundGradientEnd = normalizeColor(brandingProp.backgroundGradientEnd);
+  } else {
+    try {
+      const brandingResponse = await fetchCustomBranding();
+      const branding = decodeBranding({ brandingData: brandingResponse.brandingData });
+      logo = branding.logo;
+      brandTitle = branding.title;
+      primaryColor = branding.primaryColor;
+      secondaryColor = branding.secondaryColor;
+      background = branding.background;
+      backgroundImageUrl = branding.backgroundImage;
+      backgroundGradientStart = branding.backgroundGradientStart;
+      backgroundGradientEnd = branding.backgroundGradientEnd;
+    } catch (error) {
+      console.debug("[portal-components] branding fetch failed", error);
+    }
   }
   const baseLinks = links ?? defaultTopNavLinks;
   const hiddenSet = hiddenLabels ? new Set(hiddenLabels) : null;
@@ -1786,20 +1951,32 @@ var TopNav = async ({
     resolvedLinks = [...resolvedLinks, ...additionalLinks];
   }
   resolvedLinks = orderLinks(resolvedLinks, order);
-  const gradientStart = customColor1 ?? "rgb(235, 102, 88)";
-  const gradientEnd = customColor2 ?? customColor1 ?? "rgb(184, 83, 71)";
+  const getHeaderBackgroundStyle = () => {
+    if (background === "image" && backgroundImageUrl) {
+      return {
+        background: `url(${backgroundImageUrl})`,
+        backgroundImage: `linear-gradient(to top, rgba(255, 255, 255, 0.3) 30%, rgba(255, 255, 255, 0)), url(${backgroundImageUrl})`,
+        backgroundSize: "cover",
+        backgroundPosition: "center",
+        backgroundRepeat: "no-repeat"
+      };
+    }
+    const gradientStart = background === "custom" && backgroundGradientStart ? backgroundGradientStart : primaryColor;
+    const gradientEnd = background === "custom" && backgroundGradientEnd ? backgroundGradientEnd : secondaryColor;
+    return {
+      backgroundImage: `linear-gradient(to top, rgba(255, 255, 255, 0.15), rgba(255, 255, 255, 0) 33%), linear-gradient(${gradientStart}, ${gradientEnd})`,
+      backgroundRepeat: "no-repeat",
+      backgroundSize: "100% 100%"
+    };
+  };
   return /* @__PURE__ */ jsxRuntime.jsx(
     "div",
     {
       className: "relative flex h-[280px] w-full items-start justify-center",
-      style: {
-        backgroundImage: `linear-gradient(to top, rgba(255, 255, 255, 0.15), rgba(255, 255, 255, 0) 33%), linear-gradient(${gradientStart}, ${gradientEnd})`,
-        backgroundRepeat: "no-repeat",
-        backgroundSize: "100% 100%"
-      },
-      children: /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mx-auto mt-[30px] w-full max-w-[1248px] px-6", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex h-[135px] flex-col justify-between space-y-4 rounded bg-[#ffffffe6] px-6 pt-6 pb-4 shadow-[0_10px_60px_rgba(16,16,16,0.35)]", children: [
+      style: getHeaderBackgroundStyle(),
+      children: /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mx-auto mt-[30px] w-full max-w-[1248px] px-6", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex h-[142px] flex-col justify-between space-y-4 rounded bg-[#ffffffe6] px-6 pt-6 pb-4 shadow-[0_10px_60px_rgba(16,16,16,0.35)]", children: [
         /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-between", children: [
-          logo || brandTitle ? /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-3", children: [
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-3", children: [
             logo ? (
               // eslint-disable-next-line @next/next/no-img-element
               /* @__PURE__ */ jsxRuntime.jsx(
@@ -1814,9 +1991,24 @@ var TopNav = async ({
                   }
                 }
               )
-            ) : null,
-            brandTitle ? /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-lg font-semibold text-gray-900", children: brandTitle }) : null
-          ] }) : /* @__PURE__ */ jsxRuntime.jsx("div", {}),
+            ) : /* @__PURE__ */ jsxRuntime.jsxs(
+              "svg",
+              {
+                className: "h-8 w-8 text-gray-400",
+                viewBox: "0 0 24 24",
+                fill: "none",
+                stroke: "currentColor",
+                strokeWidth: "1.5",
+                "aria-hidden": "true",
+                children: [
+                  /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "12", cy: "12", r: "10" }),
+                  /* @__PURE__ */ jsxRuntime.jsx("ellipse", { cx: "12", cy: "12", rx: "4", ry: "10" }),
+                  /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M2 12h20" })
+                ]
+              }
+            ),
+            /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-xl font-bold text-gray-900", children: brandTitle || "Enterprise Portal" })
+          ] }),
           /* @__PURE__ */ jsxRuntime.jsxs("details", { className: "group relative", children: [
             /* @__PURE__ */ jsxRuntime.jsxs("summary", { className: "flex cursor-pointer items-center gap-2 text-sm font-medium text-gray-600 hover:text-gray-900 list-none", children: [
               /* @__PURE__ */ jsxRuntime.jsxs(
@@ -1878,7 +2070,7 @@ var TopNav = async ({
             ] })
           ] })
         ] }),
-        /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mt-3 flex flex-wrap gap-3 border-b border-gray-200 pb-2 text-sm font-medium text-gray-500", children: resolvedLinks.map(({ label, icon, href }) => {
+        /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mt-3 flex flex-wrap gap-3 pb-2 text-sm font-medium text-gray-500", children: resolvedLinks.map(({ label, icon, href }) => {
           const isActive = activeLabel === label;
           const className = `flex items-center gap-2 px-4 py-1 transition text-gray-500 ${isActive ? "underline underline-offset-8 decoration-2" : ""}`;
           if (href) {
@@ -1931,9 +2123,17 @@ var headingClass = "text-lg font-semibold text-gray-900";
 var contentClass = "mt-4 flex-1 space-y-3";
 var itemClass = "flex items-center gap-3 text-sm text-gray-600";
 var iconClass = "h-5 w-5 text-gray-500";
-var footerClass = "mt-6 flex justify-end text-sm font-semibold text-primary hover:text-primary/80";
-var badgeClass = "ml-2 inline-flex h-5 min-w-[20px] items-center justify-center rounded-full bg-blue-500 px-1.5 text-xs font-medium text-white";
-var Badge = ({ count }) => /* @__PURE__ */ jsxRuntime.jsx("span", { className: badgeClass, "aria-label": `${count} updates available`, children: count });
+var footerClass = "mt-6 flex justify-end text-sm font-semibold hover:opacity-80";
+var badgeClass = "ml-2 inline-flex h-5 min-w-[20px] items-center justify-center rounded-full px-1.5 text-xs font-medium text-white";
+var Badge = ({ count }) => /* @__PURE__ */ jsxRuntime.jsx(
+  "span",
+  {
+    className: badgeClass,
+    style: { backgroundColor: `var(--portal-branding-primary, ${DEFAULT_SECONDARY_COLOR})` },
+    "aria-label": `${count} updates available`,
+    children: count
+  }
+);
 var UpdatesCard = ({
   onlineActiveCount = 0,
   airgapCount = 0,
@@ -1961,7 +2161,7 @@ var UpdatesCard = ({
       airgapUpdates > 0 && /* @__PURE__ */ jsxRuntime.jsx(Badge, { count: airgapUpdates })
     ] })
   ] }),
-  /* @__PURE__ */ jsxRuntime.jsx("footer", { className: footerClass, children: /* @__PURE__ */ jsxRuntime.jsx(Link__default.default, { href: "/update", children: "View updates \u2192" }) })
+  /* @__PURE__ */ jsxRuntime.jsx("footer", { className: footerClass, children: /* @__PURE__ */ jsxRuntime.jsx(Link__default.default, { href: "/update", style: { color: `var(--portal-branding-secondary, ${DEFAULT_SECONDARY_COLOR})` }, children: "View updates \u2192" }) })
 ] });
 UpdatesCard.displayName = "UpdatesCard";
 var UploadIcon = (props) => /* @__PURE__ */ jsxRuntime.jsx(
@@ -2126,7 +2326,7 @@ var TeamsSection = ({
             type: "button",
             onClick: () => !isCurrentTeam && onTeamSwitch?.(team),
             disabled: isCurrentTeam,
-            className: `flex w-full items-center justify-between rounded-lg border p-4 text-left transition ${isCurrentTeam ? "cursor-default border-gray-300 bg-gray-50" : "cursor-pointer border-gray-200 hover:border-indigo-500"}`,
+            className: `flex w-full items-center justify-between rounded-lg border p-4 text-left transition ${isCurrentTeam ? "cursor-default border-gray-300 bg-gray-50" : "cursor-pointer border-gray-200 hover:border-gray-400"}`,
             style: !isCurrentTeam && primaryColor ? { "--hover-border": primaryColor } : void 0,
             children: [
               /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-3", children: [
@@ -2134,7 +2334,7 @@ var TeamsSection = ({
                   "svg",
                   {
                     className: "h-4 w-4",
-                    style: { color: primaryColor || "#6366f1" },
+                    style: { color: primaryColor || DEFAULT_SECONDARY_COLOR },
                     fill: "none",
                     viewBox: "0 0 24 24",
                     stroke: "currentColor",
@@ -2158,7 +2358,7 @@ var TeamsSection = ({
                 "svg",
                 {
                   className: "h-4 w-4",
-                  style: { color: primaryColor || "#6366f1" },
+                  style: { color: primaryColor || DEFAULT_SECONDARY_COLOR },
                   fill: "none",
                   viewBox: "0 0 24 24",
                   stroke: "currentColor",
@@ -2223,7 +2423,10 @@ var ProfileSection = ({
     resetForm();
     setIsEditing(true);
   };
-  const buttonStyle = primaryColor ? { backgroundColor: primaryColor, borderColor: primaryColor } : void 0;
+  const buttonStyle = {
+    backgroundColor: primaryColor || DEFAULT_SECONDARY_COLOR,
+    borderColor: primaryColor || DEFAULT_SECONDARY_COLOR
+  };
   return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "rounded-2xl border border-gray-200 bg-white p-6 shadow-sm", children: [
     /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-start justify-between gap-4", children: [
       /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
@@ -2250,7 +2453,7 @@ var ProfileSection = ({
             onClick: handleSave,
             disabled: isUpdating,
             style: buttonStyle,
-            className: "inline-flex items-center rounded-md bg-indigo-500 px-3 py-1.5 text-sm font-medium text-white shadow-sm transition hover:bg-indigo-600 disabled:opacity-50",
+            className: "inline-flex items-center justify-center rounded-md px-4 py-2 text-sm font-medium text-white shadow-sm transition-opacity duration-200 hover:opacity-90 disabled:opacity-50 min-w-[70px]",
             children: isUpdating ? "Saving..." : "Save"
           }
         )
@@ -2260,7 +2463,7 @@ var ProfileSection = ({
           type: "button",
           onClick: handleEdit,
           style: buttonStyle,
-          className: "inline-flex items-center rounded-md bg-indigo-500 px-3 py-1.5 text-sm font-medium text-white shadow-sm transition hover:bg-indigo-600",
+          className: "inline-flex items-center justify-center rounded-md px-4 py-2 text-sm font-medium text-white shadow-sm transition-opacity duration-200 hover:opacity-90 min-w-[70px]",
           children: "Edit"
         }
       )
@@ -2376,11 +2579,11 @@ UserSettings.displayName = "UserSettings";
 var baseCardClass3 = "flex h-full flex-col rounded-xl border border-gray-200 bg-white p-6 shadow-[0_16px_32px_rgba(15,23,42,0.05)]";
 var headingClass3 = "text-lg font-semibold text-gray-900";
 var bodySpacerClass = "mt-4 flex-1";
-var footerClass3 = "mt-6 flex justify-end text-sm font-semibold text-primary hover:text-primary/80";
+var footerClass3 = "mt-6 flex justify-end text-sm font-semibold hover:opacity-80";
 var UserSettingsCard = () => /* @__PURE__ */ jsxRuntime.jsxs("section", { className: baseCardClass3, "aria-labelledby": "user-settings-card-heading", children: [
   /* @__PURE__ */ jsxRuntime.jsx("header", { children: /* @__PURE__ */ jsxRuntime.jsx("h2", { id: "user-settings-card-heading", className: headingClass3, children: "User Settings" }) }),
   /* @__PURE__ */ jsxRuntime.jsx("div", { className: bodySpacerClass }),
-  /* @__PURE__ */ jsxRuntime.jsx("footer", { className: footerClass3, children: /* @__PURE__ */ jsxRuntime.jsx(Link__default.default, { href: "/user-settings", children: "View user settings \u2192" }) })
+  /* @__PURE__ */ jsxRuntime.jsx("footer", { className: footerClass3, children: /* @__PURE__ */ jsxRuntime.jsx(Link__default.default, { href: "/user-settings", style: { color: `var(--portal-branding-secondary, ${DEFAULT_SECONDARY_COLOR})` }, children: "View user settings \u2192" }) })
 ] });
 UserSettingsCard.displayName = "UserSettingsCard";
 var UsersIcon = (props) => /* @__PURE__ */ jsxRuntime.jsx(
@@ -2418,7 +2621,7 @@ var headingClass4 = "text-lg font-semibold text-gray-900";
 var contentClass3 = "mt-4 flex-1 space-y-3";
 var itemClass3 = "flex items-center gap-3 text-sm text-gray-600";
 var iconClass3 = "h-5 w-5 text-gray-500";
-var footerClass4 = "mt-6 flex justify-end text-sm font-semibold text-primary hover:text-primary/80";
+var footerClass4 = "mt-6 flex justify-end text-sm font-semibold hover:opacity-80";
 var TeamSettingsCard = ({
   userCount = 0,
   serviceAccountCount = 0
@@ -2442,7 +2645,7 @@ var TeamSettingsCard = ({
       ] })
     ] })
   ] }),
-  /* @__PURE__ */ jsxRuntime.jsx("footer", { className: footerClass4, children: /* @__PURE__ */ jsxRuntime.jsx(Link__default.default, { href: "/team-settings", children: "View team settings \u2192" }) })
+  /* @__PURE__ */ jsxRuntime.jsx("footer", { className: footerClass4, children: /* @__PURE__ */ jsxRuntime.jsx(Link__default.default, { href: "/team-settings", style: { color: `var(--portal-branding-secondary, ${DEFAULT_SECONDARY_COLOR})` }, children: "View team settings \u2192" }) })
 ] });
 TeamSettingsCard.displayName = "TeamSettingsCard";
 var UpdateLayout = ({ children }) => {
@@ -2453,43 +2656,128 @@ var UpdateLayout = ({ children }) => {
 };
 UpdateLayout.displayName = "UpdateLayout";
 
+// src/saml-handlers.ts
+async function setSamlSessionImpl(token) {
+  try {
+    if (!token) {
+      return { success: false, message: "No token provided" };
+    }
+    const cleanToken = token.startsWith("Bearer ") ? token.slice(7) : token;
+    const { cookies: cookies2 } = await import('next/headers');
+    const cookieStore = await cookies2();
+    const isHttpOrigin = process.env.REPLICATED_APP_ORIGIN?.startsWith("http://");
+    const secure = true;
+    const sameSiteValue = isHttpOrigin ? "none" : "lax";
+    cookieStore.set("portal_session", cleanToken, {
+      httpOnly: true,
+      secure,
+      sameSite: sameSiteValue,
+      path: "/"
+    });
+    return { success: true };
+  } catch (error) {
+    console.error("[saml-handlers] Error setting session:", error);
+    return {
+      success: false,
+      message: "Failed to establish session"
+    };
+  }
+}
+async function handleSamlAcs(request) {
+  try {
+    const apiOrigin = getApiOrigin();
+    const formData = await request.formData();
+    const response = await fetch(`${apiOrigin}/saml/acs`, {
+      method: "POST",
+      body: formData,
+      redirect: "manual"
+    });
+    if (response.status === 302 || response.status === 301) {
+      const location = response.headers.get("Location");
+      if (location) {
+        return Response.redirect(location, response.status);
+      }
+    }
+    console.error("[saml-acs] Error response from backend:", {
+      status: response.status,
+      statusText: response.statusText
+    });
+    let errorMessage = "SAML authentication failed";
+    if (response.status === 401 || response.status === 403) {
+      errorMessage = "Authentication failed. Please check your credentials or contact your administrator.";
+    } else if (response.status === 400) {
+      errorMessage = "Invalid SAML request. Please try again.";
+    }
+    return Response.redirect(
+      new URL(`/error?code=${response.status}&message=${encodeURIComponent(errorMessage)}`, request.url),
+      302
+    );
+  } catch (error) {
+    console.error("[saml-acs] Error processing SAML response:", error);
+    return Response.redirect(
+      new URL(`/error?code=500&message=${encodeURIComponent("SAML authentication error")}`, request.url),
+      302
+    );
+  }
+}
+
 // src/index.ts
 var portalComponentsVersion = package_default.version;
 
 exports.Button = Button;
+exports.DEFAULT_FAVICON = DEFAULT_FAVICON;
+exports.DEFAULT_PRIMARY_COLOR = DEFAULT_PRIMARY_COLOR;
+exports.DEFAULT_SECONDARY_COLOR = DEFAULT_SECONDARY_COLOR;
 exports.LicenseDetails = LicenseDetails;
 exports.SupportCard = SupportCard;
 exports.TeamSettingsCard = TeamSettingsCard;
 exports.TopNav = TopNav;
+exports.UnauthorizedError = UnauthorizedError;
 exports.UpdateLayout = UpdateLayout;
 exports.UpdatesCard = UpdatesCard;
 exports.UserSettings = UserSettings;
 exports.UserSettingsCard = UserSettingsCard;
+exports.authenticatedFetch = authenticatedFetch;
+exports.convertToReleaseEntry = convertToReleaseEntry;
 exports.createPortalTheme = createPortalTheme;
+exports.decodeBranding = decodeBranding;
 exports.decodeJwtPayload = decodeJwtPayload;
 exports.defaultTopNavLinks = defaultTopNavLinks;
 exports.defineServerAction = defineServerAction;
+exports.deleteSessionCookie = deleteSessionCookie;
 exports.deleteSupportBundle = deleteSupportBundle;
 exports.downloadSecuritySBOM = downloadSecuritySBOM;
 exports.downloadSupportBundle = downloadSupportBundle;
 exports.fetchCurrentUser = fetchCurrentUser;
 exports.fetchCustomBranding = fetchCustomBranding;
 exports.fetchDashboardComposite = fetchDashboardComposite;
-exports.fetchLicenseDetails = fetchLicenseDetails;
+exports.fetchLicense = fetchLicense;
 exports.fetchNotifications = fetchNotifications;
+exports.formatBytes = formatBytes;
+exports.formatDate = formatDate;
+exports.formatDateShort = formatDateShort;
+exports.formatDateTime = formatDateTime;
+exports.formatDateTimeLocal = formatDateTimeLocal;
 exports.getCustomerIdFromToken = getCustomerIdFromToken;
 exports.getSecurityInfo = getSecurityInfo;
 exports.getSecurityInfoDiff = getSecurityInfoDiff;
 exports.getSecurityInfoSBOM = getSecurityInfoSBOM;
 exports.getSupportBundleUploadUrl = getSupportBundleUploadUrl;
+exports.handleSamlAcs = handleSamlAcs;
 exports.initiateLogin = initiateLogin;
+exports.isHttpApiOrigin = isHttpApiOrigin;
+exports.isRedirectError = isRedirectError;
 exports.listReleases = listReleases;
 exports.listSupportBundles = listSupportBundles;
+exports.normalizeColor = normalizeColor;
 exports.portalComponentsVersion = portalComponentsVersion;
 exports.portalThemeTokens = portalThemeTokens;
+exports.sanitizeUrlForCss = sanitizeUrlForCss;
+exports.setSamlSessionImpl = setSamlSessionImpl;
 exports.updateNotifications = updateNotifications;
 exports.updateUser = updateUser;
 exports.uploadSupportBundle = uploadSupportBundle;
+exports.validateSession = validateSession;
 exports.verifyMagicLink = verifyMagicLink;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map