@rulebricks/cli 2.1.6 → 2.1.7

package/dist/components/Wizard/steps/FeatureConfigStep.js

@@ -54,9 +54,27 @@ function BucketSelector({ loggingSink, loggingRegion, availableBuckets, isRefres
     const hasBuckets = availableBuckets.length > 0;
     return (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsxs(Text, { bold: true, children: [loggingSink === "s3" && "Select S3 Bucket", loggingSink === "azure-blob" && "Select Azure Storage Account", loggingSink === "gcs" && "Select GCS Bucket"] }), _jsxs(Text, { color: "gray", dimColor: true, children: ["Select an existing bucket in ", loggingRegion] }), isRefreshing ? (_jsx(Box, { marginTop: 1, children: _jsx(Spinner, { label: "Refreshing bucket list..." }) })) : hasBuckets ? (_jsx(Box, { marginTop: 1, height: 10, flexDirection: "column", overflowY: "hidden", children: _jsx(SelectInput, { items: bucketItems, onSelect: onSelect, limit: 8, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) })) : (_jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Text, { color: "yellow", children: ["No buckets found in ", loggingRegion, "."] }), _jsx(Text, { color: "gray", dimColor: true, children: "Create a bucket in your cloud console, then press R to refresh." })] })), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" ", "Sink: ", LOGGING_SINK_INFO[loggingSink]?.name] })] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Region: ", loggingRegion] })] })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: "R to refresh list \u2022 \u2191/\u2193 to navigate \u2022 Enter to select" }) })] }));
 }
-const YES_NO_OPTIONS = [
-    { label: "No, just collect metrics locally", value: false },
-    { label: "Yes, send metrics to external system", value: true },
+const MONITORING_DESTINATIONS = [
+    { label: "Local Grafana (bundled)", value: "local-grafana" },
+    { label: "AWS Managed Prometheus (AMP)", value: "aws-amp" },
+    { label: "Azure Monitor managed Prometheus", value: "azure-monitor" },
+    { label: "Grafana Cloud", value: "grafana-cloud" },
+    { label: "Generic Prometheus remote_write", value: "generic" },
+];
+const REMOTE_WRITE_DESTINATIONS = MONITORING_DESTINATIONS.filter((destination) => destination.value !== "local-grafana");
+const AZURE_REMOTE_WRITE_AUTH = [
+    { label: "Workload identity", value: "workload-identity" },
+    { label: "Managed identity", value: "managed-identity" },
+    { label: "OAuth client secret", value: "oauth" },
+];
+const AZURE_LOGGING_AUTH = [
+    { label: "Workload identity", value: "workload-identity" },
+    { label: "Connection string Secret (fallback)", value: "secret" },
+];
+const GENERIC_REMOTE_WRITE_AUTH = [
+    { label: "No additional auth", value: "none" },
+    { label: "Basic auth from Kubernetes Secret", value: "basic" },
+    { label: "Bearer token from Kubernetes Secret", value: "bearer" },
 ];
 export function FeatureConfigStep({ onComplete, onBack, }) {
     const { state, dispatch } = useWizard();
@@ -88,9 +106,27 @@ export function FeatureConfigStep({ onComplete, onBack, }) {
     const [ssoClientId, setSsoClientId] = useState(state.ssoClientId || "");
     const [ssoClientSecret, setSsoClientSecret] = useState(state.ssoClientSecret || "");
     const [remoteWriteUrl, setRemoteWriteUrl] = useState(state.prometheusRemoteWriteUrl || "");
+    const [remoteWriteDestination, setRemoteWriteDestination] = useState(state.prometheusRemoteWriteDestination);
+    const [remoteWriteAuthType, setRemoteWriteAuthType] = useState(state.prometheusRemoteWriteAuthType);
+    const [remoteWriteAwsRegion, setRemoteWriteAwsRegion] = useState(state.prometheusRemoteWriteAwsRegion || state.region || "us-east-1");
+    const [remoteWriteAwsRoleArn, setRemoteWriteAwsRoleArn] = useState(state.prometheusRemoteWriteAwsRoleArn || "");
+    const [remoteWriteAzureCloud] = useState(state.prometheusRemoteWriteAzureCloud || "AzurePublic");
+    const [remoteWriteClientId, setRemoteWriteClientId] = useState(state.prometheusRemoteWriteClientId || "");
+    const [remoteWriteTenantId, setRemoteWriteTenantId] = useState(state.prometheusRemoteWriteTenantId || "");
+    const [remoteWriteSecretRef, setRemoteWriteSecretRef] = useState(state.prometheusRemoteWriteSecretRef || "");
+    const [remoteWriteUsernameSecretRef, setRemoteWriteUsernameSecretRef] = useState(state.prometheusRemoteWriteUsernameSecretRef || "");
+    const [remoteWritePasswordSecretRef, setRemoteWritePasswordSecretRef] = useState(state.prometheusRemoteWritePasswordSecretRef || "");
+    const [remoteWriteBearerSecretRef, setRemoteWriteBearerSecretRef] = useState(state.prometheusRemoteWriteBearerTokenSecretRef || "");
     const [loggingSink, setLoggingSink] = useState(state.loggingSink);
     const [loggingBucket, setLoggingBucket] = useState(state.loggingBucket || "");
     const [loggingRegion, setLoggingRegion] = useState(state.loggingRegion || "");
+    const [loggingCloudAuthMode, setLoggingCloudAuthMode] = useState(state.loggingCloudAuthMode || "workload-identity");
+    const [s3RoleArn, setS3RoleArn] = useState(state.loggingAwsIamRoleArn || "");
+    const [azureBlobContainer, setAzureBlobContainer] = useState(state.loggingAzureBlobContainer || "rulebricks-logs");
+    const [azureBlobClientId, setAzureBlobClientId] = useState(state.loggingAzureBlobClientId || "");
+    const [azureBlobTenantId, setAzureBlobTenantId] = useState(state.loggingAzureBlobTenantId || "");
+    const [azureBlobConnectionStringSecretRef, setAzureBlobConnectionStringSecretRef,] = useState(state.loggingAzureBlobConnectionStringSecretRef || "");
+    const [gcpServiceAccountEmail, setGcpServiceAccountEmail] = useState(state.loggingGcpServiceAccountEmail || "");
     const [loggingCategory, setLoggingCategory] = useState(null);
     const [error, setError] = useState(null);
     // Logging platform config
@@ -167,9 +203,49 @@ export function FeatureConfigStep({ onComplete, onBack, }) {
                 else
                     onBack();
                 break;
-            case "monitoring-remote-write-url":
+            case "monitoring-remote-write-destination":
                 setSubStep("monitoring-remote-write-ask");
                 break;
+            case "monitoring-remote-write-url":
+                setSubStep("monitoring-remote-write-destination");
+                break;
+            case "monitoring-aws-region":
+                setSubStep("monitoring-remote-write-url");
+                break;
+            case "monitoring-aws-role-arn":
+                setSubStep("monitoring-aws-region");
+                break;
+            case "monitoring-remote-write-azure-auth":
+            case "monitoring-remote-write-generic-auth":
+                setSubStep("monitoring-remote-write-url");
+                break;
+            case "monitoring-remote-write-client-id":
+                if (remoteWriteDestination === "azure-monitor") {
+                    setSubStep("monitoring-remote-write-azure-auth");
+                }
+                else {
+                    setSubStep("monitoring-remote-write-url");
+                }
+                break;
+            case "monitoring-remote-write-tenant-id":
+                setSubStep("monitoring-remote-write-client-id");
+                break;
+            case "monitoring-remote-write-secret-ref":
+                setSubStep(remoteWriteDestination === "azure-monitor"
+                    ? "monitoring-remote-write-tenant-id"
+                    : "monitoring-remote-write-url");
+                break;
+            case "monitoring-remote-write-username-secret-ref":
+                setSubStep(remoteWriteDestination === "grafana-cloud"
+                    ? "monitoring-remote-write-url"
+                    : "monitoring-remote-write-generic-auth");
+                break;
+            case "monitoring-remote-write-password-secret-ref":
+                setSubStep("monitoring-remote-write-username-secret-ref");
+                break;
+            case "monitoring-remote-write-bearer-secret-ref":
+                setSubStep("monitoring-remote-write-generic-auth");
+                break;
             case "logging-category":
                 if (needsMonitoring)
                     setSubStep("monitoring-remote-write-ask");
@@ -191,6 +267,27 @@ export function FeatureConfigStep({ onComplete, onBack, }) {
             case "logging-bucket-loading":
                 setSubStep("logging-region");
                 break;
+            case "logging-s3-role-arn":
+                setSubStep("logging-bucket");
+                break;
+            case "logging-azure-container":
+                setSubStep("logging-bucket");
+                break;
+            case "logging-azure-auth":
+                setSubStep("logging-azure-container");
+                break;
+            case "logging-azure-client-id":
+                setSubStep("logging-azure-auth");
+                break;
+            case "logging-azure-tenant-id":
+                setSubStep("logging-azure-client-id");
+                break;
+            case "logging-azure-connection-string-secret":
+                setSubStep("logging-azure-auth");
+                break;
+            case "logging-gcp-service-account":
+                setSubStep("logging-bucket");
+                break;
             // Logging platform config steps
             case "logging-datadog-config":
             case "logging-splunk-config":
@@ -261,7 +358,18 @@ export function FeatureConfigStep({ onComplete, onBack, }) {
                     onComplete();
                 break;
             case "monitoring-remote-write-ask":
+            case "monitoring-remote-write-destination":
             case "monitoring-remote-write-url":
+            case "monitoring-aws-region":
+            case "monitoring-aws-role-arn":
+            case "monitoring-remote-write-azure-auth":
+            case "monitoring-remote-write-generic-auth":
+            case "monitoring-remote-write-client-id":
+            case "monitoring-remote-write-tenant-id":
+            case "monitoring-remote-write-secret-ref":
+            case "monitoring-remote-write-username-secret-ref":
+            case "monitoring-remote-write-password-secret-ref":
+            case "monitoring-remote-write-bearer-secret-ref":
                 if (needsLogging)
                     setSubStep("logging-category");
                 else if (needsCustomEmails)
@@ -270,6 +378,10 @@ export function FeatureConfigStep({ onComplete, onBack, }) {
                     onComplete();
                 break;
             case "logging-bucket":
+            case "logging-s3-role-arn":
+            case "logging-azure-tenant-id":
+            case "logging-azure-connection-string-secret":
+            case "logging-gcp-service-account":
                 // Cloud storage config complete, check for custom emails
                 if (needsCustomEmails)
                     setSubStep("email-subject-invite");
@@ -362,13 +474,35 @@ export function FeatureConfigStep({ onComplete, onBack, }) {
     };
     // === Monitoring Configuration ===
     const handleRemoteWriteAsk = (item) => {
-        if (item.value) {
-            setSubStep("monitoring-remote-write-url");
-        }
-        else {
+        const destination = item.value;
+        if (destination === "local-grafana") {
+            setRemoteWriteDestination(null);
             dispatch({ type: "SET_PROMETHEUS_REMOTE_WRITE", url: "" });
+            dispatch({
+                type: "SET_PROMETHEUS_REMOTE_WRITE_CONFIG",
+                config: {
+                    prometheusMonitoringDestination: "local-grafana",
+                    prometheusRemoteWriteDestination: null,
+                    prometheusRemoteWriteAuthType: null,
+                },
+            });
             advanceToNext("monitoring-remote-write-ask");
+            return;
         }
+        handleRemoteWriteDestinationSelect({ value: destination });
+    };
+    const handleRemoteWriteDestinationSelect = (item) => {
+        const destination = item.value;
+        setRemoteWriteDestination(destination);
+        setError(null);
+        dispatch({
+            type: "SET_PROMETHEUS_REMOTE_WRITE_CONFIG",
+            config: {
+                prometheusMonitoringDestination: destination,
+                prometheusRemoteWriteDestination: destination,
+            },
+        });
+        setSubStep("monitoring-remote-write-url");
     };
     const handleRemoteWriteUrlSubmit = () => {
         if (remoteWriteUrl) {
@@ -382,8 +516,165 @@ export function FeatureConfigStep({ onComplete, onBack, }) {
         }
         setError(null);
         dispatch({ type: "SET_PROMETHEUS_REMOTE_WRITE", url: remoteWriteUrl });
+        if (remoteWriteDestination === "aws-amp") {
+            setSubStep("monitoring-aws-region");
+        }
+        else if (remoteWriteDestination === "azure-monitor") {
+            setSubStep("monitoring-remote-write-azure-auth");
+        }
+        else if (remoteWriteDestination === "grafana-cloud") {
+            setRemoteWriteAuthType("basic");
+            dispatch({
+                type: "SET_PROMETHEUS_REMOTE_WRITE_CONFIG",
+                config: { prometheusRemoteWriteAuthType: "basic" },
+            });
+            setSubStep("monitoring-remote-write-username-secret-ref");
+        }
+        else if (remoteWriteDestination === "generic") {
+            setSubStep("monitoring-remote-write-generic-auth");
+        }
+        else {
+            setError("Select a remote_write destination first");
+        }
+    };
+    const handleAwsRemoteWriteRegionSubmit = () => {
+        if (!remoteWriteAwsRegion) {
+            setError("AWS region is required");
+            return;
+        }
+        setError(null);
+        setSubStep("monitoring-aws-role-arn");
+    };
+    const handleAwsRemoteWriteRoleArnSubmit = () => {
+        if (remoteWriteAwsRoleArn && !remoteWriteAwsRoleArn.startsWith("arn:")) {
+            setError("Enter a valid IAM role ARN or leave blank");
+            return;
+        }
+        dispatch({
+            type: "SET_PROMETHEUS_REMOTE_WRITE_CONFIG",
+            config: {
+                prometheusRemoteWriteDestination: "aws-amp",
+                prometheusMonitoringDestination: "aws-amp",
+                prometheusRemoteWriteAuthType: "none",
+                prometheusRemoteWriteAwsRegion: remoteWriteAwsRegion,
+                prometheusRemoteWriteAwsRoleArn: remoteWriteAwsRoleArn,
+            },
+        });
+        setError(null);
+        advanceToNext("monitoring-aws-role-arn");
+    };
+    const saveRemoteWriteConfig = (authType, overrides = {}) => {
+        if (!remoteWriteDestination || !remoteWriteUrl) {
+            setError("Remote write destination and URL are required");
+            return;
+        }
+        dispatch({
+            type: "SET_PROMETHEUS_REMOTE_WRITE_CONFIG",
+            config: {
+                prometheusRemoteWriteDestination: remoteWriteDestination,
+                prometheusMonitoringDestination: remoteWriteDestination,
+                prometheusRemoteWriteAuthType: authType,
+                prometheusRemoteWriteAzureCloud: remoteWriteAzureCloud,
+                prometheusRemoteWriteClientId: overrides.clientId ?? remoteWriteClientId,
+                prometheusRemoteWriteTenantId: overrides.tenantId ?? remoteWriteTenantId,
+                prometheusRemoteWriteSecretRef: overrides.secretRef ?? remoteWriteSecretRef,
+                prometheusRemoteWriteUsernameSecretRef: overrides.usernameSecretRef ?? remoteWriteUsernameSecretRef,
+                prometheusRemoteWritePasswordSecretRef: overrides.passwordSecretRef ?? remoteWritePasswordSecretRef,
+                prometheusRemoteWriteBearerTokenSecretRef: overrides.bearerTokenSecretRef ?? remoteWriteBearerSecretRef,
+            },
+        });
+        setError(null);
         advanceToNext("monitoring-remote-write-url");
     };
+    const handleAzureRemoteWriteAuthSelect = (item) => {
+        const authType = item.value;
+        setRemoteWriteAuthType(authType);
+        dispatch({
+            type: "SET_PROMETHEUS_REMOTE_WRITE_CONFIG",
+            config: { prometheusRemoteWriteAuthType: authType },
+        });
+        setSubStep("monitoring-remote-write-client-id");
+    };
+    const handleGenericRemoteWriteAuthSelect = (item) => {
+        const authType = item.value;
+        setRemoteWriteAuthType(authType);
+        if (authType === "none") {
+            saveRemoteWriteConfig("none");
+        }
+        else if (authType === "basic") {
+            setSubStep("monitoring-remote-write-username-secret-ref");
+        }
+        else {
+            setSubStep("monitoring-remote-write-bearer-secret-ref");
+        }
+    };
+    const handleRemoteWriteClientIdSubmit = () => {
+        if (!remoteWriteClientId) {
+            setError("Client ID is required");
+            return;
+        }
+        if (remoteWriteAuthType === "managed-identity") {
+            saveRemoteWriteConfig("managed-identity", {
+                clientId: remoteWriteClientId,
+            });
+            return;
+        }
+        setError(null);
+        setSubStep("monitoring-remote-write-tenant-id");
+    };
+    const handleRemoteWriteTenantIdSubmit = () => {
+        if (!remoteWriteTenantId) {
+            setError("Tenant ID is required");
+            return;
+        }
+        if (remoteWriteAuthType === "workload-identity") {
+            saveRemoteWriteConfig("workload-identity", {
+                clientId: remoteWriteClientId,
+                tenantId: remoteWriteTenantId,
+            });
+            return;
+        }
+        setError(null);
+        setSubStep("monitoring-remote-write-secret-ref");
+    };
+    const handleRemoteWriteSecretRefSubmit = () => {
+        if (!remoteWriteSecretRef.includes(":")) {
+            setError("Use secret-name:key format");
+            return;
+        }
+        saveRemoteWriteConfig(remoteWriteAuthType || "oauth", {
+            clientId: remoteWriteClientId,
+            tenantId: remoteWriteTenantId,
+            secretRef: remoteWriteSecretRef,
+        });
+    };
+    const handleRemoteWriteUsernameSecretRefSubmit = () => {
+        if (!remoteWriteUsernameSecretRef.includes(":")) {
+            setError("Use secret-name:key format");
+            return;
+        }
+        setError(null);
+        setSubStep("monitoring-remote-write-password-secret-ref");
+    };
+    const handleRemoteWritePasswordSecretRefSubmit = () => {
+        if (!remoteWritePasswordSecretRef.includes(":")) {
+            setError("Use secret-name:key format");
+            return;
+        }
+        saveRemoteWriteConfig("basic", {
+            usernameSecretRef: remoteWriteUsernameSecretRef,
+            passwordSecretRef: remoteWritePasswordSecretRef,
+        });
+    };
+    const handleRemoteWriteBearerSecretRefSubmit = () => {
+        if (!remoteWriteBearerSecretRef.includes(":")) {
+            setError("Use secret-name:key format");
+            return;
+        }
+        saveRemoteWriteConfig("bearer", {
+            bearerTokenSecretRef: remoteWriteBearerSecretRef,
+        });
+    };
     // === Logging Configuration ===
     // Map logging sink to cloud provider
     const sinkToProvider = (sink) => {
@@ -505,8 +796,114 @@ export function FeatureConfigStep({ onComplete, onBack, }) {
             type: "SET_LOGGING_CONFIG",
             config: { loggingBucket: item.value },
         });
+        if (loggingSink === "s3") {
+            setSubStep("logging-s3-role-arn");
+            return;
+        }
+        if (loggingSink === "azure-blob") {
+            setSubStep("logging-azure-container");
+            return;
+        }
+        if (loggingSink === "gcs") {
+            setSubStep("logging-gcp-service-account");
+            return;
+        }
         advanceToNext("logging-bucket");
     };
+    const handleS3RoleArnSubmit = () => {
+        if (!s3RoleArn.startsWith("arn:")) {
+            setError("IAM role ARN is required for S3 IRSA");
+            return;
+        }
+        setError(null);
+        dispatch({
+            type: "SET_LOGGING_CONFIG",
+            config: {
+                loggingCloudAuthMode: "workload-identity",
+                loggingAwsIamRoleArn: s3RoleArn,
+            },
+        });
+        advanceToNext("logging-s3-role-arn");
+    };
+    const handleAzureBlobContainerSubmit = () => {
+        if (!azureBlobContainer) {
+            setError("Azure Blob container name is required");
+            return;
+        }
+        setError(null);
+        dispatch({
+            type: "SET_LOGGING_CONFIG",
+            config: { loggingAzureBlobContainer: azureBlobContainer },
+        });
+        setSubStep("logging-azure-auth");
+    };
+    const handleAzureBlobAuthSelect = (item) => {
+        const authMode = item.value;
+        setLoggingCloudAuthMode(authMode);
+        dispatch({
+            type: "SET_LOGGING_CONFIG",
+            config: { loggingCloudAuthMode: authMode },
+        });
+        setSubStep(authMode === "workload-identity"
+            ? "logging-azure-client-id"
+            : "logging-azure-connection-string-secret");
+    };
+    const handleAzureBlobClientIdSubmit = () => {
+        if (!azureBlobClientId) {
+            setError("Managed identity client ID is required");
+            return;
+        }
+        setError(null);
+        setSubStep("logging-azure-tenant-id");
+    };
+    const handleAzureBlobTenantIdSubmit = () => {
+        if (!azureBlobTenantId) {
+            setError("Azure tenant ID is required");
+            return;
+        }
+        setError(null);
+        dispatch({
+            type: "SET_LOGGING_CONFIG",
+            config: {
+                loggingCloudAuthMode: "workload-identity",
+                loggingAzureBlobContainer: azureBlobContainer,
+                loggingAzureBlobClientId: azureBlobClientId,
+                loggingAzureBlobTenantId: azureBlobTenantId,
+            },
+        });
+        advanceToNext("logging-azure-tenant-id");
+    };
+    const handleAzureBlobConnectionStringSecretSubmit = () => {
+        if (!azureBlobConnectionStringSecretRef.includes(":")) {
+            setError("Use secret-name:key format");
+            return;
+        }
+        setError(null);
+        dispatch({
+            type: "SET_LOGGING_CONFIG",
+            config: {
+                loggingAzureBlobContainer: azureBlobContainer,
+                loggingCloudAuthMode: "secret",
+                loggingAzureBlobConnectionStringSecretRef: azureBlobConnectionStringSecretRef,
+            },
+        });
+        advanceToNext("logging-azure-connection-string-secret");
+    };
+    const handleGcpServiceAccountSubmit = () => {
+        if (!gcpServiceAccountEmail.includes("@")) {
+            setError("Google service account email is required");
+            return;
+        }
+        setError(null);
+        dispatch({
+            type: "SET_LOGGING_CONFIG",
+            config: {
+                loggingCloudAuthMode: "workload-identity",
+                loggingGcpServiceAccountEmail: gcpServiceAccountEmail,
+            },
+        });
+        advanceToNext("logging-gcp-service-account");
+    };
     // === Logging Platform Config Handlers ===
     const handleDatadogConfigSubmit = () => {
         if (!datadogApiKey) {
@@ -752,14 +1149,14 @@ export function FeatureConfigStep({ onComplete, onBack, }) {
     return (_jsxs(BorderBox, { title: "Feature Configuration", children: [subStep === "openai-key" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "OpenAI API Key" }), _jsx(Text, { color: "gray", dimColor: true, children: "Required for AI-powered rule generation features" }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: openaiKey, onChange: setOpenaiKey, onSubmit: handleOpenAIKeySubmit, placeholder: "sk-...", mask: "*" }) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: "Get your API key at: https://platform.openai.com/api-keys" }) })] })), subStep === "sso-provider" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "SSO Provider" }), _jsx(Text, { color: "gray", dimColor: true, children: "Select your identity provider" }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: SSO_PROVIDERS, onSelect: handleSsoProviderSelect, itemComponent: ({ isSelected, label }) => (_jsx(Text, { color: isSelected ? colors.accent : undefined, children: label })) }) }), _jsx(ProgressSummary, {})] })), subStep === "sso-url" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsxs(Text, { bold: true, children: [ssoProvider?.toUpperCase(), " Provider URL"] }), _jsxs(Text, { color: "gray", dimColor: true, children: [ssoProvider === "azure" &&
                                 "e.g., https://login.microsoftonline.com/your-tenant-id", ssoProvider === "okta" && "e.g., https://your-org.okta.com", ssoProvider === "keycloak" &&
                                 "e.g., https://keycloak.example.com/realms/your-realm", ssoProvider === "ory" &&
-                                "e.g., https://your-project.projects.oryapis.com", ssoProvider === "other" && "The base URL of your OIDC provider"] }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: ssoUrl, onChange: setSsoUrl, onSubmit: handleSsoUrlSubmit, placeholder: "https://..." }) }), _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Provider: ", ssoProvider] })] })] })), subStep === "sso-client-id" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "OAuth Client ID" }), _jsx(Text, { color: "gray", dimColor: true, children: "The client/application ID from your identity provider" }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: ssoClientId, onChange: setSsoClientId, onSubmit: handleSsoClientIdSubmit, placeholder: "your-client-id" }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Provider: ", ssoProvider] })] }), ssoUrl && (_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" URL: ", ssoUrl] })] }))] })] })), subStep === "sso-client-secret" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "OAuth Client Secret" }), _jsx(Text, { color: "gray", dimColor: true, children: "The client secret from your identity provider" }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: ssoClientSecret, onChange: setSsoClientSecret, onSubmit: handleSsoClientSecretSubmit, placeholder: "your-client-secret", mask: "*" }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Provider: ", ssoProvider] })] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsx(Text, { color: "gray", children: " Client ID configured" })] })] })] })), subStep === "monitoring-remote-write-ask" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Prometheus Remote Write" }), _jsx(Text, { color: "gray", dimColor: true, children: "Do you want to send metrics to an external monitoring system?" }), _jsx(Text, { color: "gray", dimColor: true, children: "(e.g., Datadog, Grafana Cloud, Chronosphere)" }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: YES_NO_OPTIONS, onSelect: handleRemoteWriteAsk, itemComponent: ({ isSelected, label }) => (_jsx(Text, { color: isSelected ? colors.accent : undefined, children: label })) }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-url" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Remote Write URL" }), _jsx(Text, { color: "gray", dimColor: true, children: "Prometheus remote_write endpoint URL" }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWriteUrl, onChange: setRemoteWriteUrl, onSubmit: handleRemoteWriteUrlSubmit, placeholder: "https://metrics.example.com/api/v1/write" }) }), _jsx(ProgressSummary, {})] })), subStep === "logging-category" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "External Logging Destination" }), _jsx(Text, { color: "gray", dimColor: true, children: "Choose how you want to store decision logs (Console logging is always included)" }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: LOGGING_CATEGORIES, onSelect: handleLoggingCategorySelect, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) }), _jsx(ProgressSummary, {})] })), subStep === "logging-sink" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: loggingCategory === "cloud-storage"
+                                "e.g., https://your-project.projects.oryapis.com", ssoProvider === "other" && "The base URL of your OIDC provider"] }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: ssoUrl, onChange: setSsoUrl, onSubmit: handleSsoUrlSubmit, placeholder: "https://..." }) }), _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Provider: ", ssoProvider] })] })] })), subStep === "sso-client-id" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "OAuth Client ID" }), _jsx(Text, { color: "gray", dimColor: true, children: "The client/application ID from your identity provider" }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: ssoClientId, onChange: setSsoClientId, onSubmit: handleSsoClientIdSubmit, placeholder: "your-client-id" }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Provider: ", ssoProvider] })] }), ssoUrl && (_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" URL: ", ssoUrl] })] }))] })] })), subStep === "sso-client-secret" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "OAuth Client Secret" }), _jsx(Text, { color: "gray", dimColor: true, children: "The client secret from your identity provider" }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: ssoClientSecret, onChange: setSsoClientSecret, onSubmit: handleSsoClientSecretSubmit, placeholder: "your-client-secret", mask: "*" }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Provider: ", ssoProvider] })] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsx(Text, { color: "gray", children: " Client ID configured" })] })] })] })), subStep === "monitoring-remote-write-ask" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Monitoring Destination" }), _jsx(Text, { color: "gray", dimColor: true, children: "Choose where Prometheus metrics should be viewed or sent." }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: MONITORING_DESTINATIONS, onSelect: handleRemoteWriteAsk, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-url" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Remote Write URL" }), _jsx(Text, { color: "gray", dimColor: true, children: "Prometheus remote_write endpoint URL" }), remoteWriteDestination === "azure-monitor" && (_jsx(Text, { color: "gray", dimColor: true, children: "Use the ingestion URL from your Azure Monitor workspace/Data Collection Rule." })), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWriteUrl, onChange: setRemoteWriteUrl, onSubmit: handleRemoteWriteUrlSubmit, placeholder: "https://metrics.example.com/api/v1/write" }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-aws-region" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "AWS Managed Prometheus Region" }), _jsx(Text, { color: "gray", dimColor: true, children: "Region used for SigV4 signing." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWriteAwsRegion, onChange: setRemoteWriteAwsRegion, onSubmit: handleAwsRemoteWriteRegionSubmit, placeholder: "us-east-1" }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-aws-role-arn" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Prometheus IRSA Role ARN" }), _jsx(Text, { color: "gray", dimColor: true, children: "Optional. If provided, the Prometheus service account will be annotated with this role." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWriteAwsRoleArn, onChange: setRemoteWriteAwsRoleArn, onSubmit: handleAwsRemoteWriteRoleArnSubmit, placeholder: "arn:aws:iam::123456789012:role/rulebricks-prometheus" }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-destination" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Remote Write Destination" }), _jsx(Text, { color: "gray", dimColor: true, children: "Select the monitoring backend so required auth fields can be collected." }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: REMOTE_WRITE_DESTINATIONS, onSelect: handleRemoteWriteDestinationSelect, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-azure-auth" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Azure Monitor Authentication" }), _jsx(Text, { color: "gray", dimColor: true, children: "Azure Monitor managed Prometheus requires Azure AD authentication." }), _jsxs(Text, { color: "gray", dimColor: true, children: ["Cloud: ", remoteWriteAzureCloud] }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: AZURE_REMOTE_WRITE_AUTH, onSelect: handleAzureRemoteWriteAuthSelect, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-generic-auth" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Generic Remote Write Authentication" }), _jsx(Text, { color: "gray", dimColor: true, children: "Choose the auth method required by the remote_write endpoint." }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: GENERIC_REMOTE_WRITE_AUTH, onSelect: handleGenericRemoteWriteAuthSelect, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-client-id" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Azure Client ID" }), _jsx(Text, { color: "gray", dimColor: true, children: "Use the managed identity, workload identity, or app registration client ID." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWriteClientId, onChange: setRemoteWriteClientId, onSubmit: handleRemoteWriteClientIdSubmit, placeholder: "00000000-0000-0000-0000-000000000000" }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-tenant-id" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Azure Tenant ID" }), _jsx(Text, { color: "gray", dimColor: true, children: "Required for workload identity and OAuth client-secret auth." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWriteTenantId, onChange: setRemoteWriteTenantId, onSubmit: handleRemoteWriteTenantIdSubmit, placeholder: "00000000-0000-0000-0000-000000000000" }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-secret-ref" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Client Secret Reference" }), _jsx(Text, { color: "gray", dimColor: true, children: "Existing Kubernetes Secret key in the format name:key." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWriteSecretRef, onChange: setRemoteWriteSecretRef, onSubmit: handleRemoteWriteSecretRefSubmit, placeholder: "azure-monitor-oauth:client-secret" }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-username-secret-ref" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Basic Auth Username Reference" }), _jsx(Text, { color: "gray", dimColor: true, children: "Existing Kubernetes Secret key in the format name:key. For Grafana Cloud, this is the instance ID." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWriteUsernameSecretRef, onChange: setRemoteWriteUsernameSecretRef, onSubmit: handleRemoteWriteUsernameSecretRefSubmit, placeholder: "prometheus-remote-write:username" }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-password-secret-ref" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Basic Auth Password Reference" }), _jsx(Text, { color: "gray", dimColor: true, children: "Existing Kubernetes Secret key in the format name:key. For Grafana Cloud, this is an API token." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWritePasswordSecretRef, onChange: setRemoteWritePasswordSecretRef, onSubmit: handleRemoteWritePasswordSecretRefSubmit, placeholder: "prometheus-remote-write:password" }) }), _jsx(ProgressSummary, {})] })), subStep === "monitoring-remote-write-bearer-secret-ref" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Bearer Token Reference" }), _jsx(Text, { color: "gray", dimColor: true, children: "Existing Kubernetes Secret key in the format name:key." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: remoteWriteBearerSecretRef, onChange: setRemoteWriteBearerSecretRef, onSubmit: handleRemoteWriteBearerSecretRefSubmit, placeholder: "prometheus-remote-write:token" }) }), _jsx(ProgressSummary, {})] })), subStep === "logging-category" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "External Logging Destination" }), _jsx(Text, { color: "gray", dimColor: true, children: "Choose how you want to store decision logs (Console logging is always included)" }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: LOGGING_CATEGORIES, onSelect: handleLoggingCategorySelect, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) }), _jsx(ProgressSummary, {})] })), subStep === "logging-sink" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: loggingCategory === "cloud-storage"
                             ? "Select Cloud Storage"
                             : "Select Logging Platform" }), _jsx(Text, { color: "gray", dimColor: true, children: loggingCategory === "cloud-storage"
                             ? "Store logs in cloud object storage"
                             : "Send logs to a centralized logging platform" }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: loggingCategory === "cloud-storage"
                                 ? CLOUD_STORAGE_SINKS
                                 : LOGGING_PLATFORM_SINKS, onSelect: handleLoggingSinkSelect, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) }), state.infrastructureMode === "existing" &&
-                        loggingCategory === "cloud-storage" && (_jsx(Box, { marginTop: 1, borderStyle: "round", borderColor: "yellow", paddingX: 1, children: _jsx(Text, { color: "yellow", children: "Note: Cloud storage requires IRSA/Workload Identity in your cluster." }) })), _jsx(ProgressSummary, {})] })), subStep === "logging-region-loading" && (_jsx(Box, { flexDirection: "column", marginY: 1, children: _jsx(Spinner, { label: "Loading available regions..." }) })), subStep === "logging-region" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsxs(Text, { bold: true, children: [loggingSink === "s3" && "Select AWS Region", loggingSink === "azure-blob" && "Select Azure Region", loggingSink === "gcs" && "Select GCP Region"] }), _jsx(Text, { color: "gray", dimColor: true, children: "Select the region where logs will be stored" }), _jsx(Box, { marginTop: 1, height: 10, flexDirection: "column", overflowY: "hidden", children: _jsx(SelectInput, { items: getLoggingRegions(), onSelect: handleLoggingRegionSelect, limit: 8, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) }), _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" ", "Sink: ", LOGGING_SINK_INFO[loggingSink]?.name] })] })] })), subStep === "logging-bucket-loading" && (_jsx(Box, { flexDirection: "column", marginY: 1, children: _jsx(Spinner, { label: `Loading buckets in ${loggingRegion}...` }) })), subStep === "logging-bucket" && (_jsx(BucketSelector, { loggingSink: loggingSink, loggingRegion: loggingRegion, availableBuckets: availableBuckets, isRefreshing: isRefreshing, onSelect: handleLoggingBucketSelect, onRefresh: refreshBuckets, colors: colors })), subStep === "logging-datadog-config" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Datadog Configuration" }), _jsx(Text, { color: "gray", dimColor: true, children: "Configure Datadog Logs integration" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "API Key:" }), _jsx(Box, { children: _jsx(TextInput, { value: datadogApiKey, onChange: setDatadogApiKey, placeholder: "your-api-key", mask: "*" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Datadog Site:" }), _jsx(SelectInput, { items: DATADOG_SITES, initialIndex: DATADOG_SITES.findIndex((s) => s.value === datadogSite), onSelect: (item) => setDatadogSite(item.value), indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: "Press Enter after selecting site to continue" }) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: datadogApiKey ? colors.accent : colors.muted, bold: !!datadogApiKey, children: datadogApiKey
+                        loggingCategory === "cloud-storage" && (_jsx(Box, { marginTop: 1, borderStyle: "round", borderColor: "yellow", paddingX: 1, children: _jsx(Text, { color: "yellow", children: "Note: Cloud storage requires IRSA/Workload Identity in your cluster." }) })), _jsx(ProgressSummary, {})] })), subStep === "logging-region-loading" && (_jsx(Box, { flexDirection: "column", marginY: 1, children: _jsx(Spinner, { label: "Loading available regions..." }) })), subStep === "logging-region" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsxs(Text, { bold: true, children: [loggingSink === "s3" && "Select AWS Region", loggingSink === "azure-blob" && "Select Azure Region", loggingSink === "gcs" && "Select GCP Region"] }), _jsx(Text, { color: "gray", dimColor: true, children: "Select the region where logs will be stored" }), _jsx(Box, { marginTop: 1, height: 10, flexDirection: "column", overflowY: "hidden", children: _jsx(SelectInput, { items: getLoggingRegions(), onSelect: handleLoggingRegionSelect, limit: 8, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) }), _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" ", "Sink: ", LOGGING_SINK_INFO[loggingSink]?.name] })] })] })), subStep === "logging-bucket-loading" && (_jsx(Box, { flexDirection: "column", marginY: 1, children: _jsx(Spinner, { label: `Loading buckets in ${loggingRegion}...` }) })), subStep === "logging-bucket" && (_jsx(BucketSelector, { loggingSink: loggingSink, loggingRegion: loggingRegion, availableBuckets: availableBuckets, isRefreshing: isRefreshing, onSelect: handleLoggingBucketSelect, onRefresh: refreshBuckets, colors: colors })), subStep === "logging-s3-role-arn" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Vector S3 IRSA Role ARN" }), _jsx(Text, { color: "gray", dimColor: true, children: "IAM role trusted by the Vector Kubernetes service account." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: s3RoleArn, onChange: setS3RoleArn, onSubmit: handleS3RoleArnSubmit, placeholder: "arn:aws:iam::123456789012:role/rulebricks-vector" }) }), _jsx(Box, { marginTop: 1, children: _jsxs(Text, { color: colors.success, children: ["\u2713 S3 bucket: ", loggingBucket] }) })] })), subStep === "logging-azure-container" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Azure Blob Container" }), _jsx(Text, { color: "gray", dimColor: true, children: "Enter the container where Rulebricks decision logs should be written." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: azureBlobContainer, onChange: setAzureBlobContainer, onSubmit: handleAzureBlobContainerSubmit, placeholder: "rulebricks-logs" }) }), _jsx(Box, { marginTop: 1, flexDirection: "column", children: _jsxs(Text, { color: colors.success, children: ["\u2713 Storage account: ", loggingBucket] }) })] })), subStep === "logging-azure-auth" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Azure Blob Authentication" }), _jsx(Text, { color: "gray", dimColor: true, children: "Workload identity is recommended. Connection string Secret is a fallback for clusters without Azure Workload Identity." }), _jsx(Box, { marginTop: 1, children: _jsx(SelectInput, { items: AZURE_LOGGING_AUTH, onSelect: handleAzureBlobAuthSelect, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) }) })] })), subStep === "logging-azure-client-id" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Azure Managed Identity Client ID" }), _jsx(Text, { color: "gray", dimColor: true, children: "Client ID for the identity federated to Vector's service account." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: azureBlobClientId, onChange: setAzureBlobClientId, onSubmit: handleAzureBlobClientIdSubmit, placeholder: "00000000-0000-0000-0000-000000000000" }) })] })), subStep === "logging-azure-tenant-id" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Azure Tenant ID" }), _jsx(Text, { color: "gray", dimColor: true, children: "Tenant ID used by Azure Workload Identity." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: azureBlobTenantId, onChange: setAzureBlobTenantId, onSubmit: handleAzureBlobTenantIdSubmit, placeholder: "00000000-0000-0000-0000-000000000000" }) })] })), subStep === "logging-azure-connection-string-secret" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Azure Storage Connection String Secret" }), _jsx(Text, { color: "gray", dimColor: true, children: "Enter an existing Kubernetes Secret key in the format name:key." }), _jsx(Text, { color: "gray", dimColor: true, children: "The key should contain the Azure Storage connection string." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: azureBlobConnectionStringSecretRef, onChange: setAzureBlobConnectionStringSecretRef, onSubmit: handleAzureBlobConnectionStringSecretSubmit, placeholder: "azure-blob-logs:connection-string" }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Text, { color: colors.success, children: ["\u2713 Storage account: ", loggingBucket] }), _jsxs(Text, { color: colors.success, children: ["\u2713 Container: ", azureBlobContainer] })] })] })), subStep === "logging-gcp-service-account" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Google Service Account Email" }), _jsx(Text, { color: "gray", dimColor: true, children: "GSA bound to the Vector Kubernetes service account through GKE Workload Identity." }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: gcpServiceAccountEmail, onChange: setGcpServiceAccountEmail, onSubmit: handleGcpServiceAccountSubmit, placeholder: "rulebricks-vector@project.iam.gserviceaccount.com" }) }), _jsx(Box, { marginTop: 1, children: _jsxs(Text, { color: colors.success, children: ["\u2713 GCS bucket: ", loggingBucket] }) })] })), subStep === "logging-datadog-config" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Datadog Configuration" }), _jsx(Text, { color: "gray", dimColor: true, children: "Configure Datadog Logs integration" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "API Key:" }), _jsx(Box, { children: _jsx(TextInput, { value: datadogApiKey, onChange: setDatadogApiKey, placeholder: "your-api-key", mask: "*" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Datadog Site:" }), _jsx(SelectInput, { items: DATADOG_SITES, initialIndex: DATADOG_SITES.findIndex((s) => s.value === datadogSite), onSelect: (item) => setDatadogSite(item.value), indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => (_jsxs(Text, { color: isSelected ? colors.accent : undefined, children: [isSelected ? "❯ " : "  ", label] })) })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: "Press Enter after selecting site to continue" }) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: datadogApiKey ? colors.accent : colors.muted, bold: !!datadogApiKey, children: datadogApiKey
                                 ? "→ Press Enter to continue"
                                 : "Enter API key to continue" }) }), datadogApiKey && (_jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: "", onChange: () => { }, onSubmit: handleDatadogConfigSubmit, placeholder: "" }) }))] })), subStep === "logging-splunk-config" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Splunk HEC Configuration" }), _jsx(Text, { color: "gray", dimColor: true, children: "Configure Splunk HTTP Event Collector" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "HEC URL:" }), _jsx(Box, { children: _jsx(TextInput, { value: splunkUrl, onChange: setSplunkUrl, placeholder: "https://splunk.example.com:8088" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "HEC Token:" }), _jsx(Box, { children: _jsx(TextInput, { value: splunkHecToken, onChange: setSplunkHecToken, onSubmit: handleSplunkConfigSubmit, placeholder: "your-hec-token", mask: "*" }) })] })] })), subStep === "logging-elasticsearch-config" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Elasticsearch Configuration" }), _jsx(Text, { color: "gray", dimColor: true, children: "Configure Elasticsearch logging destination" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Elasticsearch URL:" }), _jsx(Box, { children: _jsx(TextInput, { value: elasticsearchUrl, onChange: setElasticsearchUrl, placeholder: "https://elasticsearch.example.com:9200" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Username (optional):" }), _jsx(Box, { children: _jsx(TextInput, { value: elasticsearchUser, onChange: setElasticsearchUser, placeholder: "elastic" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Password (optional):" }), _jsx(Box, { children: _jsx(TextInput, { value: elasticsearchPass, onChange: setElasticsearchPass, placeholder: "", mask: "*" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Index name:" }), _jsx(Box, { children: _jsx(TextInput, { value: elasticsearchIndex, onChange: setElasticsearchIndex, onSubmit: handleElasticsearchConfigSubmit, placeholder: "rulebricks-logs" }) })] })] })), subStep === "logging-loki-config" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Grafana Loki Configuration" }), _jsx(Text, { color: "gray", dimColor: true, children: "Configure Loki logging destination" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Loki URL:" }), _jsx(Text, { color: "gray", dimColor: true, children: "Include /loki/api/v1/push endpoint" }), _jsx(Box, { children: _jsx(TextInput, { value: lokiUrl, onChange: setLokiUrl, onSubmit: handleLokiConfigSubmit, placeholder: "https://loki.example.com/loki/api/v1/push" }) })] })] })), subStep === "logging-newrelic-config" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "New Relic Configuration" }), _jsx(Text, { color: "gray", dimColor: true, children: "Configure New Relic Logs integration" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "License Key:" }), _jsx(Box, { children: _jsx(TextInput, { value: newrelicLicenseKey, onChange: setNewrelicLicenseKey, placeholder: "your-license-key", mask: "*" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Account ID:" }), _jsx(Box, { children: _jsx(TextInput, { value: newrelicAccountId, onChange: setNewrelicAccountId, onSubmit: handleNewrelicConfigSubmit, placeholder: "1234567" }) })] })] })), subStep === "logging-axiom-config" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Axiom Configuration" }), _jsx(Text, { color: "gray", dimColor: true, children: "Configure Axiom logging destination" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "API Token:" }), _jsx(Box, { children: _jsx(TextInput, { value: axiomApiToken, onChange: setAxiomApiToken, placeholder: "xaat-...", mask: "*" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Dataset:" }), _jsx(Box, { children: _jsx(TextInput, { value: axiomDataset, onChange: setAxiomDataset, onSubmit: handleAxiomConfigSubmit, placeholder: "rulebricks" }) })] })] })), subStep === "email-subject-invite" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Custom Email Templates" }), _jsx(Text, { color: "gray", dimColor: true, children: "Customize Supabase auth email subjects and templates." }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: "First, let's customize the subject lines. Press Enter to use defaults." }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Invite Email Subject:" }), _jsxs(Text, { color: "gray", dimColor: true, children: ["Default: \"", DEFAULT_EMAIL_SUBJECTS.invite, "\""] }), _jsx(Box, { children: _jsx(TextInput, { value: emailSubjectInvite, onChange: setEmailSubjectInvite, onSubmit: handleEmailSubjectInviteSubmit, placeholder: DEFAULT_EMAIL_SUBJECTS.invite }) })] })] })), subStep === "email-subject-confirm" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Custom Email Templates - Subject Lines" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Confirmation Email Subject:" }), _jsxs(Text, { color: "gray", dimColor: true, children: ["Default: \"", DEFAULT_EMAIL_SUBJECTS.confirmation, "\""] }), _jsx(Box, { children: _jsx(TextInput, { value: emailSubjectConfirm, onChange: setEmailSubjectConfirm, onSubmit: handleEmailSubjectConfirmSubmit, placeholder: DEFAULT_EMAIL_SUBJECTS.confirmation }) })] }), _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Invite: ", emailSubjectInvite] })] })] })), subStep === "email-subject-recovery" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Custom Email Templates - Subject Lines" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Password Recovery Email Subject:" }), _jsxs(Text, { color: "gray", dimColor: true, children: ["Default: \"", DEFAULT_EMAIL_SUBJECTS.recovery, "\""] }), _jsx(Box, { children: _jsx(TextInput, { value: emailSubjectRecovery, onChange: setEmailSubjectRecovery, onSubmit: handleEmailSubjectRecoverySubmit, placeholder: DEFAULT_EMAIL_SUBJECTS.recovery }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Invite: ", emailSubjectInvite] })] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Confirmation: ", emailSubjectConfirm] })] })] })] })), subStep === "email-subject-change" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Custom Email Templates - Subject Lines" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Email Change Subject:" }), _jsxs(Text, { color: "gray", dimColor: true, children: ["Default: \"", DEFAULT_EMAIL_SUBJECTS.emailChange, "\""] }), _jsx(Box, { children: _jsx(TextInput, { value: emailSubjectChange, onChange: setEmailSubjectChange, onSubmit: handleEmailSubjectChangeSubmit, placeholder: DEFAULT_EMAIL_SUBJECTS.emailChange }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Invite: ", emailSubjectInvite] })] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Confirmation: ", emailSubjectConfirm] })] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Recovery: ", emailSubjectRecovery] })] })] })] })), subStep === "email-template-invite" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Custom Email Templates - Template URLs" }), _jsx(Text, { color: "gray", dimColor: true, children: "Provide URLs to your custom HTML email templates." }), _jsx(Text, { color: "gray", dimColor: true, children: "Templates must be publicly accessible (S3, GCS, or any HTTPS URL)." }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Invite Template URL:" }), _jsx(Box, { children: _jsx(TextInput, { value: emailTemplateInvite, onChange: setEmailTemplateInvite, onSubmit: handleEmailTemplateInviteSubmit, placeholder: "https://bucket.s3.amazonaws.com/templates/invite.html" }) })] }), _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsx(Text, { color: "gray", children: " All subject lines configured" })] })] })), subStep === "email-template-confirm" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Custom Email Templates - Template URLs" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Confirmation Template URL:" }), _jsx(Box, { children: _jsx(TextInput, { value: emailTemplateConfirm, onChange: setEmailTemplateConfirm, onSubmit: handleEmailTemplateConfirmSubmit, placeholder: "https://bucket.s3.amazonaws.com/templates/verify.html" }) })] }), _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Invite: ", emailTemplateInvite] })] })] })), subStep === "email-template-recovery" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Custom Email Templates - Template URLs" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Recovery Template URL:" }), _jsx(Box, { children: _jsx(TextInput, { value: emailTemplateRecovery, onChange: setEmailTemplateRecovery, onSubmit: handleEmailTemplateRecoverySubmit, placeholder: "https://bucket.s3.amazonaws.com/templates/password_change.html" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Invite: ", emailTemplateInvite] })] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Confirmation: ", emailTemplateConfirm] })] })] })] })), subStep === "email-template-change" && (_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { bold: true, children: "Custom Email Templates - Template URLs" }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { children: "Email Change Template URL:" }), _jsx(Box, { children: _jsx(TextInput, { value: emailTemplateChange, onChange: setEmailTemplateChange, onSubmit: handleEmailTemplateChangeSubmit, placeholder: "https://bucket.s3.amazonaws.com/templates/email_change.html" }) })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Invite: ", emailTemplateInvite] })] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Confirmation: ", emailTemplateConfirm] })] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.success, children: "\u2713" }), _jsxs(Text, { color: "gray", children: [" Recovery: ", emailTemplateRecovery] })] })] })] })), error && (_jsx(Box, { marginTop: 1, children: _jsxs(Text, { color: "red", children: ["\u2717 ", error] }) })), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: "Esc to go back \u2022 Enter to continue" }) })] }));
 }

package/dist/components/Wizard/steps/ReviewStep.js

@@ -43,7 +43,12 @@ export function ReviewStep({ onComplete, onBack }) {
         dispatch({ type: 'SET_NAME', name });
         setEditingName(false);
     };
-    const tierConfig = state.tier ? TIER_CONFIGS[state.tier] : null;
+    const tierConfig = state.infrastructureMode !== 'existing' && state.tier ? TIER_CONFIGS[state.tier] : null;
+    const tierLabel = state.infrastructureMode === 'existing'
+        ? 'Inferred from cluster'
+        : state.tier
+            ? `${state.tier.charAt(0).toUpperCase()}${state.tier.slice(1)}`
+            : 'Not selected';
     const externalDnsEnabled = state.dnsAutoManage && isSupportedDnsProvider(state.dnsProvider);
     if (editingName) {
         return (_jsx(BorderBox, { title: "Deployment Name", children: _jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { children: "Enter a name for this deployment:" }), _jsx(Text, { color: "gray", dimColor: true, children: "Lowercase letters, numbers, and hyphens only" }), _jsx(Box, { marginTop: 1, children: _jsx(TextInput, { value: name, onChange: setName, onSubmit: handleNameSubmit, placeholder: "my-deployment" }) }), error && (_jsx(Box, { marginTop: 1, children: _jsxs(Text, { color: "red", children: ["\u2717 ", error] }) }))] }) }));
@@ -52,5 +57,5 @@ export function ReviewStep({ onComplete, onBack }) {
     const ConfigRow = ({ label, value, valueColor }) => (_jsxs(Box, { children: [_jsx(Box, { width: 16, children: _jsx(Text, { color: colors.muted, children: label }) }), _jsx(Text, { color: valueColor || colors.accent, children: value })] }));
     // Helper to render a section header
     const SectionHeader = ({ title }) => (_jsx(Box, { marginTop: 1, children: _jsxs(Text, { bold: true, color: colors.accent, children: ["\u2500\u2500 ", title, " \u2500\u2500"] }) }));
-    return (_jsxs(BorderBox, { title: "Review Configuration", children: [_jsxs(Box, { flexDirection: "column", children: [_jsx(SectionHeader, { title: "Deployment" }), _jsx(ConfigRow, { label: "Name", value: state.name }), state.appVersion && (_jsx(ConfigRow, { label: "App Version", value: state.appVersion })), _jsx(SectionHeader, { title: "Infrastructure" }), _jsx(ConfigRow, { label: "Mode", value: state.infrastructureMode === 'provision' ? 'Provision new cluster' : 'Use existing cluster' }), state.provider && (_jsx(ConfigRow, { label: "Provider", value: state.provider.toUpperCase() })), state.region && (_jsx(ConfigRow, { label: "Region", value: state.region })), _jsx(SectionHeader, { title: "Domain & DNS" }), _jsx(ConfigRow, { label: "Domain", value: state.domain }), _jsx(ConfigRow, { label: "Admin Email", value: state.adminEmail }), _jsx(ConfigRow, { label: "TLS Email", value: state.tlsEmail }), _jsxs(Box, { children: [_jsx(Box, { width: 16, children: _jsx(Text, { color: colors.muted, children: "DNS" }) }), _jsx(Text, { color: colors.accent, children: DNS_PROVIDER_NAMES[state.dnsProvider] }), externalDnsEnabled && _jsx(Text, { color: colors.success, children: " (auto)" })] }), _jsx(SectionHeader, { title: "SMTP" }), _jsx(ConfigRow, { label: "Host", value: `${state.smtpHost}:${state.smtpPort}` }), _jsx(ConfigRow, { label: "From", value: `${state.smtpFromName} <${state.smtpFrom}>` }), _jsx(SectionHeader, { title: "Database" }), _jsx(ConfigRow, { label: "Type", value: state.databaseType === 'supabase-cloud' ? 'Supabase Cloud' : 'Self-hosted' }), _jsx(SectionHeader, { title: "Performance" }), _jsxs(Box, { children: [_jsx(Box, { width: 16, children: _jsx(Text, { color: colors.muted, children: "Tier" }) }), _jsxs(Text, { color: colors.accent, bold: true, children: [state.tier?.charAt(0).toUpperCase(), state.tier?.slice(1)] }), tierConfig && _jsxs(Text, { color: colors.muted, children: [" (", tierConfig.throughput, ")"] })] }), _jsx(SectionHeader, { title: "Features" }), _jsxs(Box, { children: [_jsxs(Text, { color: state.aiEnabled ? colors.success : colors.muted, children: [state.aiEnabled ? '✓' : '○', " AI"] }), _jsx(Text, { children: "  " }), _jsxs(Text, { color: state.ssoEnabled ? colors.success : colors.muted, children: [state.ssoEnabled ? '✓' : '○', " SSO"] }), _jsx(Text, { children: "  " }), _jsxs(Text, { color: state.monitoringEnabled ? colors.success : colors.muted, children: [state.monitoringEnabled ? '✓' : '○', " Monitoring"] }), _jsx(Text, { children: "  " }), _jsxs(Text, { color: state.loggingSink !== 'console' ? colors.success : colors.muted, children: [state.loggingSink !== 'console' ? '✓' : '○', " Logging"] })] }), _jsx(SectionHeader, { title: "License" }), _jsx(ConfigRow, { label: "Key", value: `${state.licenseKey?.substring(0, 12)}...` })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: colors.success, bold: true, children: "Press Enter to save this configuration" }), _jsx(Text, { color: colors.muted, dimColor: true, children: "e to edit name \u2022 Esc to go back" })] })] }));
+    return (_jsxs(BorderBox, { title: "Review Configuration", children: [_jsxs(Box, { flexDirection: "column", children: [_jsx(SectionHeader, { title: "Deployment" }), _jsx(ConfigRow, { label: "Name", value: state.name }), state.appVersion && (_jsx(ConfigRow, { label: "App Version", value: state.appVersion })), _jsx(SectionHeader, { title: "Infrastructure" }), _jsx(ConfigRow, { label: "Mode", value: state.infrastructureMode === 'provision' ? 'Provision new cluster' : 'Use existing cluster' }), state.provider && (_jsx(ConfigRow, { label: "Provider", value: state.provider.toUpperCase() })), state.region && (_jsx(ConfigRow, { label: "Region", value: state.region })), _jsx(SectionHeader, { title: "Domain & DNS" }), _jsx(ConfigRow, { label: "Domain", value: state.domain }), _jsx(ConfigRow, { label: "Admin Email", value: state.adminEmail }), _jsx(ConfigRow, { label: "TLS Email", value: state.tlsEmail }), _jsxs(Box, { children: [_jsx(Box, { width: 16, children: _jsx(Text, { color: colors.muted, children: "DNS" }) }), _jsx(Text, { color: colors.accent, children: DNS_PROVIDER_NAMES[state.dnsProvider] }), externalDnsEnabled && _jsx(Text, { color: colors.success, children: " (auto)" })] }), _jsx(SectionHeader, { title: "SMTP" }), _jsx(ConfigRow, { label: "Host", value: `${state.smtpHost}:${state.smtpPort}` }), _jsx(ConfigRow, { label: "From", value: `${state.smtpFromName} <${state.smtpFrom}>` }), _jsx(SectionHeader, { title: "Database" }), _jsx(ConfigRow, { label: "Type", value: state.databaseType === 'supabase-cloud' ? 'Supabase Cloud' : 'Self-hosted' }), _jsx(SectionHeader, { title: "Performance" }), _jsxs(Box, { children: [_jsx(Box, { width: 16, children: _jsx(Text, { color: colors.muted, children: "Tier" }) }), _jsx(Text, { color: colors.accent, bold: true, children: tierLabel }), tierConfig && _jsxs(Text, { color: colors.muted, children: [" (", tierConfig.throughput, ")"] }), state.infrastructureMode === 'existing' && (_jsx(Text, { color: colors.muted, children: " (used for app sizing)" }))] }), _jsx(SectionHeader, { title: "Features" }), _jsxs(Box, { children: [_jsxs(Text, { color: state.aiEnabled ? colors.success : colors.muted, children: [state.aiEnabled ? '✓' : '○', " AI"] }), _jsx(Text, { children: "  " }), _jsxs(Text, { color: state.ssoEnabled ? colors.success : colors.muted, children: [state.ssoEnabled ? '✓' : '○', " SSO"] }), _jsx(Text, { children: "  " }), _jsxs(Text, { color: state.monitoringEnabled ? colors.success : colors.muted, children: [state.monitoringEnabled ? '✓' : '○', " Monitoring"] }), _jsx(Text, { children: "  " }), _jsxs(Text, { color: state.loggingSink !== 'console' ? colors.success : colors.muted, children: [state.loggingSink !== 'console' ? '✓' : '○', " Logging"] })] }), _jsx(SectionHeader, { title: "License" }), _jsx(ConfigRow, { label: "Key", value: `${state.licenseKey?.substring(0, 12)}...` })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: colors.success, bold: true, children: "Press Enter to save this configuration" }), _jsx(Text, { color: colors.muted, dimColor: true, children: "e to edit name \u2022 Esc to go back" })] })] }));
 }