@stigmer/react 0.0.71 → 0.0.73

package/iam-policy/useRevokeOrgAccess.d.ts

@@ -0,0 +1,36 @@
+/** Return value of {@link useRevokeOrgAccess}. */
+export interface UseRevokeOrgAccessReturn {
+    /**
+     * Remove all of a user's access to an organization.
+     *
+     * Deletes every IAM policy granting the identity account access
+     * to the organization and its child resources (agents, environments,
+     * etc.) in a single operation.
+     */
+    readonly revoke: (accountId: string, orgId: string) => Promise<void>;
+    /** `true` while the revoke request is in flight. */
+    readonly isRevoking: boolean;
+    /** Error from the last failed revoke, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Reset `error` to `null`. */
+    readonly clearError: () => void;
+}
+/**
+ * Behavior hook that wraps `iamPolicy.revokeOrgAccess()` with
+ * loading/error state.
+ *
+ * Removes all IAM policy bindings for a specific identity account
+ * within an organization — including bindings on child resources
+ * (agents, environments, etc.). This is the "remove member from org"
+ * operation.
+ *
+ * @example
+ * ```tsx
+ * const { revoke, isRevoking, error } = useRevokeOrgAccess();
+ *
+ * await revoke("ia-alice-123", "org-demo-456");
+ * refetchMembers();
+ * ```
+ */
+export declare function useRevokeOrgAccess(): UseRevokeOrgAccessReturn;
+//# sourceMappingURL=useRevokeOrgAccess.d.ts.map

package/iam-policy/useRevokeOrgAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRevokeOrgAccess.d.ts","sourceRoot":"","sources":["../../src/iam-policy/useRevokeOrgAccess.ts"],"names":[],"mappings":"AAQA,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,IAAI,wBAAwB,CA8B7D"}

package/iam-policy/useRevokeOrgAccess.js

@@ -0,0 +1,48 @@
+"use client";
+import { useCallback, useState } from "react";
+import { create } from "@bufbuild/protobuf";
+import { RevokeOrgAccessInputSchema } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/io_pb";
+import { useStigmer } from "../hooks";
+import { toError } from "../internal/toError";
+/**
+ * Behavior hook that wraps `iamPolicy.revokeOrgAccess()` with
+ * loading/error state.
+ *
+ * Removes all IAM policy bindings for a specific identity account
+ * within an organization — including bindings on child resources
+ * (agents, environments, etc.). This is the "remove member from org"
+ * operation.
+ *
+ * @example
+ * ```tsx
+ * const { revoke, isRevoking, error } = useRevokeOrgAccess();
+ *
+ * await revoke("ia-alice-123", "org-demo-456");
+ * refetchMembers();
+ * ```
+ */
+export function useRevokeOrgAccess() {
+    const stigmer = useStigmer();
+    const [isRevoking, setIsRevoking] = useState(false);
+    const [error, setError] = useState(null);
+    const clearError = useCallback(() => setError(null), []);
+    const revoke = useCallback(async (accountId, orgId) => {
+        setIsRevoking(true);
+        setError(null);
+        try {
+            await stigmer.iamPolicy.revokeOrgAccess(create(RevokeOrgAccessInputSchema, {
+                identityAccountId: accountId,
+                organizationId: orgId,
+            }));
+        }
+        catch (err) {
+            setError(toError(err));
+            throw err;
+        }
+        finally {
+            setIsRevoking(false);
+        }
+    }, [stigmer]);
+    return { revoke, isRevoking, error, clearError };
+}
+//# sourceMappingURL=useRevokeOrgAccess.js.map

package/iam-policy/useRevokeOrgAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRevokeOrgAccess.js","sourceRoot":"","sources":["../../src/iam-policy/useRevokeOrgAccess.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAoB9C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,SAAiB,EAAE,KAAa,EAAiB,EAAE;QACxD,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC,eAAe,CACrC,MAAM,CAAC,0BAA0B,EAAE;gBACjC,iBAAiB,EAAE,SAAS;gBAC5B,cAAc,EAAE,KAAK;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,CAAC,CACV,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC"}

package/iam-policy/useRoleSelector.d.ts

@@ -0,0 +1,52 @@
+import type { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
+/** A single role option with display metadata. */
+export interface RoleOption {
+    /** The IamRole enum value. */
+    readonly role: IamRole;
+    /** Human-readable display name (e.g. "Admin"). */
+    readonly label: string;
+    /** Short description suitable for tooltips (e.g. "Edit access and member management"). */
+    readonly description: string;
+    /** The FGA relation string (e.g. "admin"). */
+    readonly value: string;
+}
+/** Return value of {@link useRoleSelector}. */
+export interface UseRoleSelectorReturn {
+    /** Available role options for the given resource kind. */
+    readonly options: readonly RoleOption[];
+    /** Currently selected role, or `null` if nothing is selected. */
+    readonly selected: IamRole | null;
+    /** FGA relation string for the selected role, or `""` if nothing is selected. */
+    readonly selectedValue: string;
+    /** Select a role. */
+    readonly select: (role: IamRole) => void;
+    /** Clear the selection. */
+    readonly clear: () => void;
+    /** Whether at least one role option exists. */
+    readonly hasOptions: boolean;
+}
+/**
+ * Headless hook for selecting an IAM role for a given resource kind.
+ *
+ * Provides role options with display metadata (label, description,
+ * FGA relation string) and selection state. Use this directly if you
+ * need a custom role picker UI; for the styled version, use
+ * {@link RoleSelector}.
+ *
+ * @param kind - The resource kind to show grantable roles for, or `null`.
+ * @param defaultRole - Optional initial selection.
+ *
+ * @example
+ * ```tsx
+ * const { options, selected, select } = useRoleSelector(ApiResourceKind.organization);
+ *
+ * options.map(opt => (
+ *   <button key={opt.value} onClick={() => select(opt.role)}>
+ *     {opt.label} — {opt.description}
+ *   </button>
+ * ));
+ * ```
+ */
+export declare function useRoleSelector(kind: ApiResourceKind | null, defaultRole?: IamRole): UseRoleSelectorReturn;
+//# sourceMappingURL=useRoleSelector.d.ts.map

package/iam-policy/useRoleSelector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRoleSelector.d.ts","sourceRoot":"","sources":["../../src/iam-policy/useRoleSelector.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAC3H,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAQpE,kDAAkD;AAClD,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,+CAA+C;AAC/C,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,iFAAiF;IACjF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,qBAAqB;IACrB,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,2BAA2B;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B,+CAA+C;IAC/C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,eAAe,GAAG,IAAI,EAC5B,WAAW,CAAC,EAAE,OAAO,GACpB,qBAAqB,CA+BvB"}

package/iam-policy/useRoleSelector.js

@@ -0,0 +1,50 @@
+"use client";
+import { useCallback, useMemo, useState } from "react";
+import { getGrantableRoles, iamRoleDisplayName, iamRoleDescription, iamRoleToString, } from "@stigmer/sdk";
+/**
+ * Headless hook for selecting an IAM role for a given resource kind.
+ *
+ * Provides role options with display metadata (label, description,
+ * FGA relation string) and selection state. Use this directly if you
+ * need a custom role picker UI; for the styled version, use
+ * {@link RoleSelector}.
+ *
+ * @param kind - The resource kind to show grantable roles for, or `null`.
+ * @param defaultRole - Optional initial selection.
+ *
+ * @example
+ * ```tsx
+ * const { options, selected, select } = useRoleSelector(ApiResourceKind.organization);
+ *
+ * options.map(opt => (
+ *   <button key={opt.value} onClick={() => select(opt.role)}>
+ *     {opt.label} — {opt.description}
+ *   </button>
+ * ));
+ * ```
+ */
+export function useRoleSelector(kind, defaultRole) {
+    const [selected, setSelected] = useState(defaultRole ?? null);
+    const options = useMemo(() => {
+        if (kind === null)
+            return [];
+        return getGrantableRoles(kind).map((role) => ({
+            role,
+            label: iamRoleDisplayName(role),
+            description: iamRoleDescription(role),
+            value: iamRoleToString(role),
+        }));
+    }, [kind]);
+    const selectedValue = useMemo(() => (selected !== null ? iamRoleToString(selected) : ""), [selected]);
+    const select = useCallback((role) => setSelected(role), []);
+    const clear = useCallback(() => setSelected(null), []);
+    return {
+        options,
+        selected,
+        selectedValue,
+        select,
+        clear,
+        hasOptions: options.length > 0,
+    };
+}
+//# sourceMappingURL=useRoleSelector.js.map

package/iam-policy/useRoleSelector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRoleSelector.js","sourceRoot":"","sources":["../../src/iam-policy/useRoleSelector.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAGvD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,GAChB,MAAM,cAAc,CAAC;AA8BtB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,eAAe,CAC7B,IAA4B,EAC5B,WAAqB;IAErB,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CACtC,WAAW,IAAI,IAAI,CACpB,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,CAAwB,GAAG,EAAE;QAClD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7B,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI;YACJ,KAAK,EAAE,kBAAkB,CAAC,IAAI,CAAC;YAC/B,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC;YACrC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAC1D,CAAC,QAAQ,CAAC,CACX,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEvD,OAAO;QACL,OAAO;QACP,QAAQ;QACR,aAAa;QACb,MAAM;QACN,KAAK;QACL,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;KAC/B,CAAC;AACJ,CAAC"}

package/iam-policy/useWhoAmI.d.ts

@@ -0,0 +1,30 @@
+import type { IdentityAccount } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/api_pb";
+/** Return value of {@link useWhoAmI}. */
+export interface UseWhoAmIReturn {
+    /** The authenticated user's identity account, or `null` while loading / on error. */
+    readonly account: IdentityAccount | null;
+    /** `true` while the initial fetch is in flight. */
+    readonly isLoading: boolean;
+    /** Error from the failed request, or `null` when healthy. */
+    readonly error: Error | null;
+}
+/**
+ * Data hook that fetches the current authenticated user's
+ * {@link IdentityAccount} via `identityAccount.whoAmI()`.
+ *
+ * The result is cached for the lifetime of the `Stigmer` client
+ * instance — subsequent mounts and re-renders reuse the cached
+ * value without additional network calls.
+ *
+ * Useful for self-protection in access management UIs (disabling
+ * "remove" or "change role" on the current user) and displaying
+ * a "You" indicator.
+ *
+ * @example
+ * ```tsx
+ * const { account } = useWhoAmI();
+ * const myId = account?.metadata?.id;
+ * ```
+ */
+export declare function useWhoAmI(): UseWhoAmIReturn;
+//# sourceMappingURL=useWhoAmI.d.ts.map

package/iam-policy/useWhoAmI.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWhoAmI.d.ts","sourceRoot":"","sources":["../../src/iam-policy/useWhoAmI.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAIhG,yCAAyC;AACzC,MAAM,WAAW,eAAe;IAC9B,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,SAAS,IAAI,eAAe,CA0C3C"}

package/iam-policy/useWhoAmI.js

@@ -0,0 +1,56 @@
+"use client";
+import { useEffect, useRef, useState } from "react";
+import { useStigmer } from "../hooks";
+import { toError } from "../internal/toError";
+/**
+ * Data hook that fetches the current authenticated user's
+ * {@link IdentityAccount} via `identityAccount.whoAmI()`.
+ *
+ * The result is cached for the lifetime of the `Stigmer` client
+ * instance — subsequent mounts and re-renders reuse the cached
+ * value without additional network calls.
+ *
+ * Useful for self-protection in access management UIs (disabling
+ * "remove" or "change role" on the current user) and displaying
+ * a "You" indicator.
+ *
+ * @example
+ * ```tsx
+ * const { account } = useWhoAmI();
+ * const myId = account?.metadata?.id;
+ * ```
+ */
+export function useWhoAmI() {
+    const stigmer = useStigmer();
+    const [account, setAccount] = useState(null);
+    const [isLoading, setIsLoading] = useState(true);
+    const [error, setError] = useState(null);
+    const cacheRef = useRef(null);
+    useEffect(() => {
+        if (cacheRef.current?.client === stigmer && cacheRef.current.account) {
+            setAccount(cacheRef.current.account);
+            setIsLoading(false);
+            return;
+        }
+        const cancelled = { current: false };
+        stigmer.identityAccount
+            .whoAmI()
+            .then((result) => {
+            if (cancelled.current)
+                return;
+            cacheRef.current = { client: stigmer, account: result };
+            setAccount(result);
+            setIsLoading(false);
+        }, (err) => {
+            if (cancelled.current)
+                return;
+            setError(toError(err));
+            setIsLoading(false);
+        });
+        return () => {
+            cancelled.current = true;
+        };
+    }, [stigmer]);
+    return { account, isLoading, error };
+}
+//# sourceMappingURL=useWhoAmI.js.map

package/iam-policy/useWhoAmI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWhoAmI.js","sourceRoot":"","sources":["../../src/iam-policy/useWhoAmI.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAY9C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAyB,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,CAGb,IAAI,CAAC,CAAC;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,QAAQ,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAErC,OAAO,CAAC,eAAe;aACpB,MAAM,EAAE;aACR,IAAI,CACH,CAAC,MAAM,EAAE,EAAE;YACT,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO;YAC9B,QAAQ,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACxD,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO;YAC9B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CACF,CAAC;QAEJ,OAAO,GAAG,EAAE;YACV,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC;QAC3B,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC"}

package/identity-provider/CreateIdentityProviderForm.d.ts

@@ -0,0 +1,39 @@
+import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
+/** Props for {@link CreateIdentityProviderForm}. */
+export interface CreateIdentityProviderFormProps {
+    /** Organization slug — the IdP will be created in this org. */
+    readonly org: string;
+    /** Fired with the newly created identity provider on success. */
+    readonly onCreated?: (idp: IdentityProvider) => void;
+    /** Fired when the user cancels creation. */
+    readonly onCancel?: () => void;
+    /** Additional CSS class names for the root container. */
+    readonly className?: string;
+}
+/**
+ * Form for creating a new identity provider within an organization.
+ *
+ * Collects the required OIDC trust configuration: **name** (display
+ * name), **JWKS URI**, **allowed issuers**, and **expected audience**.
+ * Optionally enables SSO by toggling the SSO switch and providing an
+ * **OIDC client ID**.
+ *
+ * On success it fires `onCreated` with the full {@link IdentityProvider}
+ * response.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <CreateIdentityProviderForm
+ *   org="acme"
+ *   onCreated={(idp) => {
+ *     refetch();
+ *     setShowForm(false);
+ *   }}
+ *   onCancel={() => setShowForm(false)}
+ * />
+ * ```
+ */
+export declare function CreateIdentityProviderForm({ org, onCreated, onCancel, className, }: CreateIdentityProviderFormProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=CreateIdentityProviderForm.d.ts.map

package/identity-provider/CreateIdentityProviderForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateIdentityProviderForm.d.ts","sourceRoot":"","sources":["../../src/identity-provider/CreateIdentityProviderForm.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2DAA2D,CAAC;AAGlG,oDAAoD;AACpD,MAAM,WAAW,+BAA+B;IAC9C,+DAA+D;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACrD,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IAC/B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,SAAS,EACT,QAAQ,EACR,SAAS,GACV,EAAE,+BAA+B,2CAyLjC"}

package/identity-provider/CreateIdentityProviderForm.js

@@ -0,0 +1,102 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from "react";
+import { cn } from "@stigmer/theme";
+import { getUserMessage } from "@stigmer/sdk";
+import { useCreateIdentityProvider } from "./useCreateIdentityProvider";
+/**
+ * Form for creating a new identity provider within an organization.
+ *
+ * Collects the required OIDC trust configuration: **name** (display
+ * name), **JWKS URI**, **allowed issuers**, and **expected audience**.
+ * Optionally enables SSO by toggling the SSO switch and providing an
+ * **OIDC client ID**.
+ *
+ * On success it fires `onCreated` with the full {@link IdentityProvider}
+ * response.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <CreateIdentityProviderForm
+ *   org="acme"
+ *   onCreated={(idp) => {
+ *     refetch();
+ *     setShowForm(false);
+ *   }}
+ *   onCancel={() => setShowForm(false)}
+ * />
+ * ```
+ */
+export function CreateIdentityProviderForm({ org, onCreated, onCancel, className, }) {
+    const { create, isCreating, error, clearError } = useCreateIdentityProvider();
+    const [name, setName] = useState("");
+    const [jwksUri, setJwksUri] = useState("");
+    const [issuers, setIssuers] = useState("");
+    const [audience, setAudience] = useState("");
+    const [isSso, setIsSso] = useState(false);
+    const [oidcClientId, setOidcClientId] = useState("");
+    const trimmedName = name.trim();
+    const trimmedJwksUri = jwksUri.trim();
+    const trimmedIssuers = issuers.trim();
+    const trimmedAudience = audience.trim();
+    const canSubmit = trimmedName !== "" &&
+        trimmedJwksUri !== "" &&
+        trimmedIssuers !== "" &&
+        trimmedAudience !== "" &&
+        (!isSso || oidcClientId.trim() !== "") &&
+        !isCreating;
+    const handleSubmit = useCallback(async (e) => {
+        e.preventDefault();
+        if (!canSubmit)
+            return;
+        clearError();
+        try {
+            const idp = await create({
+                name: trimmedName,
+                org,
+                jwksUri: trimmedJwksUri,
+                allowedIssuers: trimmedIssuers
+                    .split(",")
+                    .map((s) => s.trim())
+                    .filter(Boolean),
+                expectedAudience: trimmedAudience,
+                ...(isSso && {
+                    isSsoProvider: true,
+                    oidcClientId: oidcClientId.trim(),
+                }),
+            });
+            onCreated?.(idp);
+        }
+        catch {
+            // error state is managed by useCreateIdentityProvider
+        }
+    }, [
+        canSubmit,
+        trimmedName,
+        org,
+        trimmedJwksUri,
+        trimmedIssuers,
+        trimmedAudience,
+        isSso,
+        oidcClientId,
+        create,
+        clearError,
+        onCreated,
+    ]);
+    return (_jsxs("form", { onSubmit: handleSubmit, className: cn("space-y-3", className), children: [_jsxs("div", { className: "space-y-3", children: [_jsx(FormField, { id: "stgm-idp-name", label: "Name", value: name, onChange: setName, placeholder: "e.g. Acme Corp SSO", disabled: isCreating, required: true }), _jsx(FormField, { id: "stgm-idp-jwks", label: "JWKS URI", value: jwksUri, onChange: setJwksUri, placeholder: "https://example.com/.well-known/jwks.json", disabled: isCreating, required: true }), _jsx(FormField, { id: "stgm-idp-issuers", label: "Allowed issuers", value: issuers, onChange: setIssuers, placeholder: "issuer-1, issuer-2", hint: "Comma-separated list of trusted JWT issuer values", disabled: isCreating, required: true }), _jsx(FormField, { id: "stgm-idp-audience", label: "Expected audience", value: audience, onChange: setAudience, placeholder: "stigmer-api", disabled: isCreating, required: true }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx("button", { type: "button", role: "switch", "aria-checked": isSso, onClick: () => setIsSso((v) => !v), disabled: isCreating, className: cn("relative inline-flex h-5 w-9 shrink-0 cursor-pointer rounded-full border-2 border-transparent transition-colors", isSso ? "bg-primary" : "bg-muted", "disabled:pointer-events-none disabled:opacity-50"), children: _jsx("span", { className: cn("pointer-events-none inline-block h-4 w-4 rounded-full bg-background shadow-sm ring-0 transition-transform", isSso ? "translate-x-4" : "translate-x-0") }) }), _jsx("span", { className: "text-xs font-medium text-foreground", children: "SSO provider" })] }), isSso && (_jsx(FormField, { id: "stgm-idp-client-id", label: "OIDC client ID", value: oidcClientId, onChange: setOidcClientId, placeholder: "public-client-id", hint: "Client ID for the PKCE-based Authorization Code flow", disabled: isCreating, required: true }))] }), error && (_jsx("p", { className: "text-destructive text-[0.65rem]", role: "alert", children: getUserMessage(error) })), _jsxs("div", { className: "flex items-center gap-2", children: [_jsxs("button", { type: "submit", disabled: !canSubmit, className: cn("inline-flex items-center gap-1.5 rounded-md px-3 py-1.5 text-xs font-medium", "bg-primary text-primary-foreground hover:bg-primary/90", "disabled:pointer-events-none disabled:opacity-40"), children: [isCreating && _jsx(SpinnerIcon, {}), "Create identity provider"] }), onCancel && (_jsx("button", { type: "button", onClick: onCancel, disabled: isCreating, className: cn("rounded-md px-3 py-1.5 text-xs", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "disabled:pointer-events-none disabled:opacity-50"), children: "Cancel" }))] })] }));
+}
+// ---------------------------------------------------------------------------
+// FormField (internal)
+// ---------------------------------------------------------------------------
+function FormField({ id, label, value, onChange, placeholder, hint, disabled, required, }) {
+    return (_jsxs("div", { className: "space-y-1", children: [_jsx("label", { htmlFor: id, className: "text-xs font-medium text-foreground", children: label }), _jsx("input", { id: id, type: "text", value: value, onChange: (e) => onChange(e.target.value), placeholder: placeholder, disabled: disabled, required: required, className: cn("w-full rounded-md border border-input bg-background px-2.5 py-1.5 text-xs text-foreground", "placeholder:text-muted-foreground", "focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring", "disabled:pointer-events-none disabled:opacity-50") }), hint && (_jsx("p", { className: "text-[0.65rem] text-muted-foreground", children: hint }))] }));
+}
+// ---------------------------------------------------------------------------
+// Icons
+// ---------------------------------------------------------------------------
+function SpinnerIcon() {
+    return (_jsx("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", className: "animate-spin", "aria-hidden": "true", children: _jsx("path", { d: "M8 2a6 6 0 1 0 6 6" }) }));
+}
+//# sourceMappingURL=CreateIdentityProviderForm.js.map

package/identity-provider/CreateIdentityProviderForm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateIdentityProviderForm.js","sourceRoot":"","sources":["../../src/identity-provider/CreateIdentityProviderForm.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAcxE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,SAAS,EACT,QAAQ,EACR,SAAS,GACuB;IAChC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAC7C,yBAAyB,EAAE,CAAC;IAE9B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAErD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,SAAS,GACb,WAAW,KAAK,EAAE;QAClB,cAAc,KAAK,EAAE;QACrB,cAAc,KAAK,EAAE;QACrB,eAAe,KAAK,EAAE;QACtB,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC,UAAU,CAAC;IAEd,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,CAAY,EAAE,EAAE;QACrB,CAAC,CAAC,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,UAAU,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC;gBACvB,IAAI,EAAE,WAAW;gBACjB,GAAG;gBACH,OAAO,EAAE,cAAc;gBACvB,cAAc,EAAE,cAAc;qBAC3B,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,OAAO,CAAC;gBAClB,gBAAgB,EAAE,eAAe;gBACjC,GAAG,CAAC,KAAK,IAAI;oBACX,aAAa,EAAE,IAAI;oBACnB,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE;iBAClC,CAAC;aACH,CAAC,CAAC;YACH,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC,EACD;QACE,SAAS;QACT,WAAW;QACX,GAAG;QACH,cAAc;QACd,cAAc;QACd,eAAe;QACf,KAAK;QACL,YAAY;QACZ,MAAM;QACN,UAAU;QACV,SAAS;KACV,CACF,CAAC;IAEF,OAAO,CACL,gBAAM,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,aACjE,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,SAAS,IACR,EAAE,EAAC,eAAe,EAClB,KAAK,EAAC,MAAM,EACZ,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,OAAO,EACjB,WAAW,EAAC,oBAAoB,EAChC,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,EAEF,KAAC,SAAS,IACR,EAAE,EAAC,eAAe,EAClB,KAAK,EAAC,UAAU,EAChB,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAC,2CAA2C,EACvD,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,EAEF,KAAC,SAAS,IACR,EAAE,EAAC,kBAAkB,EACrB,KAAK,EAAC,iBAAiB,EACvB,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAC,oBAAoB,EAChC,IAAI,EAAC,mDAAmD,EACxD,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,EAEF,KAAC,SAAS,IACR,EAAE,EAAC,mBAAmB,EACtB,KAAK,EAAC,mBAAmB,EACzB,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,WAAW,EACrB,WAAW,EAAC,aAAa,EACzB,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,EAGF,eAAK,SAAS,EAAC,yBAAyB,aACtC,iBACE,IAAI,EAAC,QAAQ,EACb,IAAI,EAAC,QAAQ,kBACC,KAAK,EACnB,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAClC,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,iHAAiH,EACjH,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EACjC,kDAAkD,CACnD,YAED,eACE,SAAS,EAAE,EAAE,CACX,2GAA2G,EAC3G,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAC1C,GACD,GACK,EACT,eAAM,SAAS,EAAC,qCAAqC,6BAE9C,IACH,EAEL,KAAK,IAAI,CACR,KAAC,SAAS,IACR,EAAE,EAAC,oBAAoB,EACvB,KAAK,EAAC,gBAAgB,EACtB,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAC,kBAAkB,EAC9B,IAAI,EAAC,sDAAsD,EAC3D,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,CACH,IACG,EAEL,KAAK,IAAI,CACR,YAAG,SAAS,EAAC,iCAAiC,EAAC,IAAI,EAAC,OAAO,YACxD,cAAc,CAAC,KAAK,CAAC,GACpB,CACL,EAED,eAAK,SAAS,EAAC,yBAAyB,aACtC,kBACE,IAAI,EAAC,QAAQ,EACb,QAAQ,EAAE,CAAC,SAAS,EACpB,SAAS,EAAE,EAAE,CACX,6EAA6E,EAC7E,wDAAwD,EACxD,kDAAkD,CACnD,aAEA,UAAU,IAAI,KAAC,WAAW,KAAG,gCAEvB,EAER,QAAQ,IAAI,CACX,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,QAAQ,EACjB,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,gCAAgC,EAChC,gEAAgE,EAChE,kDAAkD,CACnD,uBAGM,CACV,IACG,IACD,CACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,SAAS,SAAS,CAAC,EACjB,EAAE,EACF,KAAK,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,QAAQ,GAUT;IACC,OAAO,CACL,eAAK,SAAS,EAAC,WAAW,aACxB,gBAAO,OAAO,EAAE,EAAE,EAAE,SAAS,EAAC,qCAAqC,YAChE,KAAK,GACA,EACR,gBACE,EAAE,EAAE,EAAE,EACN,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACzC,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,EAAE,CACX,2FAA2F,EAC3F,mCAAmC,EACnC,yEAAyE,EACzE,kDAAkD,CACnD,GACD,EACD,IAAI,IAAI,CACP,YAAG,SAAS,EAAC,sCAAsC,YAAE,IAAI,GAAK,CAC/D,IACG,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,SAAS,WAAW;IAClB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,GAAG,EACf,aAAa,EAAC,OAAO,EACrB,SAAS,EAAC,cAAc,iBACZ,MAAM,YAElB,eAAM,CAAC,EAAC,oBAAoB,GAAG,GAC3B,CACP,CAAC;AACJ,CAAC"}

package/identity-provider/IdentityProviderDetailPanel.d.ts

@@ -0,0 +1,42 @@
+import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
+/** Props for {@link IdentityProviderDetailPanel}. */
+export interface IdentityProviderDetailPanelProps {
+    /** The identity provider resource to display and edit. */
+    readonly identityProvider: IdentityProvider;
+    /** Fired with the updated resource after a successful save. */
+    readonly onUpdated?: (idp: IdentityProvider) => void;
+    /** Fired when the user clicks the back button. */
+    readonly onBack?: () => void;
+    /**
+     * Pre-computed SSO login URL to display when the IdP is an SSO provider.
+     * Omit to hide the field. The consumer is responsible for constructing
+     * the URL (e.g., `${window.location.origin}/login?org=${orgSlug}`).
+     */
+    readonly ssoLoginUrl?: string;
+    /** Additional CSS class names for the root container. */
+    readonly className?: string;
+}
+/**
+ * View and edit panel for an existing identity provider.
+ *
+ * In **view mode**, displays all OIDC configuration fields in a
+ * structured label/value layout with an "Edit" button.
+ *
+ * In **edit mode**, fields become editable inputs. The SSO toggle and
+ * OIDC client ID are editable. "Save" submits the update via
+ * {@link useUpdateIdentityProvider}; "Cancel" discards changes and
+ * returns to view mode.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <IdentityProviderDetailPanel
+ *   identityProvider={idp}
+ *   onUpdated={(updated) => refetch()}
+ *   onBack={() => setFlow({ phase: "idle" })}
+ * />
+ * ```
+ */
+export declare function IdentityProviderDetailPanel({ identityProvider, onUpdated, onBack, ssoLoginUrl, className, }: IdentityProviderDetailPanelProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=IdentityProviderDetailPanel.d.ts.map

package/identity-provider/IdentityProviderDetailPanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityProviderDetailPanel.d.ts","sourceRoot":"","sources":["../../src/identity-provider/IdentityProviderDetailPanel.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2DAA2D,CAAC;AAIlG,qDAAqD;AACrD,MAAM,WAAW,gCAAgC;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACrD,kDAAkD;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,gBAAgB,EAChB,SAAS,EACT,MAAM,EACN,WAAW,EACX,SAAS,GACV,EAAE,gCAAgC,2CAsQlC"}