@stigmer/react 0.0.71 → 0.0.73

package/identity-provider/IdentityProviderDetailPanel.js

@@ -0,0 +1,156 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from "react";
+import { cn } from "@stigmer/theme";
+import { getUserMessage } from "@stigmer/sdk";
+import { timestampDate } from "@bufbuild/protobuf/wkt";
+import { useUpdateIdentityProvider } from "./useUpdateIdentityProvider";
+/**
+ * View and edit panel for an existing identity provider.
+ *
+ * In **view mode**, displays all OIDC configuration fields in a
+ * structured label/value layout with an "Edit" button.
+ *
+ * In **edit mode**, fields become editable inputs. The SSO toggle and
+ * OIDC client ID are editable. "Save" submits the update via
+ * {@link useUpdateIdentityProvider}; "Cancel" discards changes and
+ * returns to view mode.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <IdentityProviderDetailPanel
+ *   identityProvider={idp}
+ *   onUpdated={(updated) => refetch()}
+ *   onBack={() => setFlow({ phase: "idle" })}
+ * />
+ * ```
+ */
+export function IdentityProviderDetailPanel({ identityProvider, onUpdated, onBack, ssoLoginUrl, className, }) {
+    const spec = identityProvider.spec;
+    const meta = identityProvider.metadata;
+    const { update, isUpdating, error, clearError } = useUpdateIdentityProvider();
+    const [mode, setMode] = useState("view");
+    // Edit form state — initialized from current resource
+    const [displayName, setDisplayName] = useState(spec?.displayName ?? "");
+    const [jwksUri, setJwksUri] = useState(spec?.jwksUri ?? "");
+    const [issuers, setIssuers] = useState(spec?.allowedIssuers.join(", ") ?? "");
+    const [audience, setAudience] = useState(spec?.expectedAudience ?? "");
+    const [userinfoEndpoint, setUserinfoEndpoint] = useState(spec?.userinfoEndpoint ?? "");
+    const [isSso, setIsSso] = useState(spec?.isSsoProvider ?? false);
+    const [oidcClientId, setOidcClientId] = useState(spec?.oidcClientId ?? "");
+    const enterEdit = useCallback(() => {
+        setDisplayName(spec?.displayName ?? "");
+        setJwksUri(spec?.jwksUri ?? "");
+        setIssuers(spec?.allowedIssuers.join(", ") ?? "");
+        setAudience(spec?.expectedAudience ?? "");
+        setUserinfoEndpoint(spec?.userinfoEndpoint ?? "");
+        setIsSso(spec?.isSsoProvider ?? false);
+        setOidcClientId(spec?.oidcClientId ?? "");
+        clearError();
+        setMode("edit");
+    }, [spec, clearError]);
+    const cancelEdit = useCallback(() => {
+        clearError();
+        setMode("view");
+    }, [clearError]);
+    const handleSave = useCallback(async (e) => {
+        e.preventDefault();
+        clearError();
+        try {
+            const updated = await update({
+                name: meta?.name ?? "",
+                slug: meta?.slug,
+                org: meta?.org ?? "",
+                displayName: displayName.trim(),
+                jwksUri: jwksUri.trim(),
+                allowedIssuers: issuers
+                    .split(",")
+                    .map((s) => s.trim())
+                    .filter(Boolean),
+                expectedAudience: audience.trim(),
+                userinfoEndpoint: userinfoEndpoint.trim() || undefined,
+                isSsoProvider: isSso,
+                oidcClientId: isSso ? oidcClientId.trim() : undefined,
+            });
+            setMode("view");
+            onUpdated?.(updated);
+        }
+        catch {
+            // error state is managed by useUpdateIdentityProvider
+        }
+    }, [
+        meta, displayName, jwksUri, issuers, audience,
+        userinfoEndpoint, isSso, oidcClientId, update, clearError, onUpdated,
+    ]);
+    const canSave = displayName.trim() !== "" &&
+        jwksUri.trim() !== "" &&
+        issuers.trim() !== "" &&
+        audience.trim() !== "" &&
+        (!isSso || oidcClientId.trim() !== "") &&
+        !isUpdating;
+    const createdAt = identityProvider.status?.audit?.specAudit?.createdAt;
+    const updatedAt = identityProvider.status?.audit?.specAudit?.updatedAt;
+    return (_jsxs("div", { className: cn("space-y-4", className), children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "min-w-0", children: [onBack && (_jsxs("button", { type: "button", onClick: onBack, className: "text-muted-foreground hover:text-foreground mb-1 flex items-center gap-1 text-xs transition-colors", children: [_jsx(ArrowLeftIcon, {}), "Back to list"] })), _jsx("h3", { className: "text-foreground truncate text-sm font-semibold", children: spec?.displayName || meta?.name || "Identity Provider" }), _jsxs("div", { className: "flex items-center gap-2", children: [meta?.slug && (_jsx("span", { className: "text-muted-foreground font-mono text-xs", children: meta.slug })), spec?.isSsoProvider && (_jsx("span", { className: "inline-flex items-center rounded-full border border-primary/30 bg-primary-subtle px-2 py-0.5 text-[0.65rem] font-medium text-primary", children: "SSO" }))] })] }), mode === "view" && (_jsx("button", { type: "button", onClick: enterEdit, className: cn("shrink-0 rounded-md px-2.5 py-1.5 text-xs font-medium", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "transition-colors"), children: "Edit" }))] }), mode === "view" ? (_jsx(ViewMode, { spec: spec, ssoLoginUrl: ssoLoginUrl, createdAt: createdAt, updatedAt: updatedAt })) : (_jsxs("form", { onSubmit: handleSave, className: "space-y-3", children: [_jsx(FieldInput, { id: "stgm-idp-edit-name", label: "Display name", value: displayName, onChange: setDisplayName, placeholder: "e.g., Acme Corp SSO", disabled: isUpdating, required: true }), _jsx(FieldInput, { id: "stgm-idp-edit-jwks", label: "JWKS URI", value: jwksUri, onChange: setJwksUri, placeholder: "https://example.com/.well-known/jwks.json", disabled: isUpdating, required: true }), _jsx(FieldInput, { id: "stgm-idp-edit-issuers", label: "Allowed issuers", value: issuers, onChange: setIssuers, placeholder: "https://issuer.example.com/", hint: "Comma-separated list of trusted JWT issuer values", disabled: isUpdating, required: true }), _jsx(FieldInput, { id: "stgm-idp-edit-audience", label: "Expected audience", value: audience, onChange: setAudience, placeholder: "stigmer-api", disabled: isUpdating, required: true }), _jsx(FieldInput, { id: "stgm-idp-edit-userinfo", label: "Userinfo endpoint", value: userinfoEndpoint, onChange: setUserinfoEndpoint, placeholder: "https://example.com/userinfo", hint: "Optional \u2014 used to fetch user profile data", disabled: isUpdating }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx("button", { type: "button", role: "switch", "aria-checked": isSso, onClick: () => setIsSso((v) => !v), disabled: isUpdating, className: cn("relative inline-flex h-5 w-9 shrink-0 cursor-pointer rounded-full border-2 border-transparent transition-colors", isSso ? "bg-primary" : "bg-muted", "disabled:pointer-events-none disabled:opacity-50"), children: _jsx("span", { className: cn("pointer-events-none inline-block h-4 w-4 rounded-full bg-background shadow-sm ring-0 transition-transform", isSso ? "translate-x-4" : "translate-x-0") }) }), _jsx("span", { className: "text-xs font-medium text-foreground", children: "SSO provider" })] }), isSso && (_jsx(FieldInput, { id: "stgm-idp-edit-client-id", label: "OIDC client ID", value: oidcClientId, onChange: setOidcClientId, placeholder: "public-client-id", hint: "Client ID for the PKCE-based Authorization Code flow", disabled: isUpdating, required: true })), error && (_jsx("p", { className: "text-destructive text-[0.65rem]", role: "alert", children: getUserMessage(error) })), _jsxs("div", { className: "flex items-center gap-2 pt-1", children: [_jsxs("button", { type: "submit", disabled: !canSave, className: cn("inline-flex items-center gap-1.5 rounded-md px-3 py-1.5 text-xs font-medium", "bg-primary text-primary-foreground hover:bg-primary/90", "disabled:pointer-events-none disabled:opacity-40"), children: [isUpdating && _jsx(SpinnerIcon, {}), "Save changes"] }), _jsx("button", { type: "button", onClick: cancelEdit, disabled: isUpdating, className: cn("rounded-md px-2.5 py-1.5 text-xs", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "disabled:pointer-events-none disabled:opacity-50"), children: "Cancel" })] })] }))] }));
+}
+// ---------------------------------------------------------------------------
+// View mode
+// ---------------------------------------------------------------------------
+function ViewMode({ spec, ssoLoginUrl, createdAt, updatedAt, }) {
+    return (_jsxs("dl", { className: "space-y-2.5", children: [_jsx(Field, { label: "JWKS URI", value: spec?.jwksUri, mono: true }), _jsx(Field, { label: "Allowed issuers", value: spec?.allowedIssuers.join(", "), mono: true }), _jsx(Field, { label: "Expected audience", value: spec?.expectedAudience, mono: true }), spec?.userinfoEndpoint && (_jsx(Field, { label: "Userinfo endpoint", value: spec.userinfoEndpoint, mono: true })), spec?.isSsoProvider && (_jsx(Field, { label: "OIDC client ID", value: spec.oidcClientId, mono: true })), spec?.isSsoProvider && ssoLoginUrl && (_jsx(CopyableField, { label: "SSO login URL", value: ssoLoginUrl, hint: "Share this URL with your team members to sign in via SSO" })), (spec?.rateLimitBudget ?? 0) > 0 && (_jsx(Field, { label: "Rate limit", value: `${spec.rateLimitBudget} req/min` })), _jsxs("div", { className: "flex gap-6", children: [createdAt && (_jsx(Field, { label: "Created", value: formatDate(timestampDate(createdAt)) })), updatedAt && (_jsx(Field, { label: "Updated", value: formatDate(timestampDate(updatedAt)) }))] })] }));
+}
+function Field({ label, value, mono, }) {
+    if (!value)
+        return null;
+    return (_jsxs("div", { children: [_jsx("dt", { className: "text-muted-foreground text-[0.65rem] font-medium", children: label }), _jsx("dd", { className: cn("text-foreground mt-0.5 break-all text-xs", mono && "font-mono"), children: value })] }));
+}
+// ---------------------------------------------------------------------------
+// View mode — copyable field
+// ---------------------------------------------------------------------------
+const COPIED_FEEDBACK_MS = 2000;
+function CopyableField({ label, value, hint, }) {
+    const [copied, setCopied] = useState(false);
+    const valueId = "stgm-idp-sso-login-url";
+    const handleCopy = useCallback(async () => {
+        try {
+            await navigator.clipboard.writeText(value);
+            setCopied(true);
+            setTimeout(() => setCopied(false), COPIED_FEEDBACK_MS);
+        }
+        catch {
+            const el = document.getElementById(valueId);
+            if (el) {
+                const selection = window.getSelection();
+                const range = document.createRange();
+                range.selectNodeContents(el);
+                selection?.removeAllRanges();
+                selection?.addRange(range);
+            }
+        }
+    }, [value]);
+    return (_jsxs("div", { children: [_jsx("dt", { className: "text-muted-foreground text-[0.65rem] font-medium", children: label }), _jsxs("dd", { className: "mt-0.5", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx("span", { id: valueId, className: "text-foreground break-all font-mono text-xs select-all", children: value }), _jsx("button", { type: "button", onClick: handleCopy, className: cn("shrink-0 rounded px-1.5 py-0.5 text-[0.6rem]", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "transition-colors"), "aria-label": `Copy ${label}`, children: copied ? "Copied" : "Copy" })] }), hint && (_jsx("p", { className: "text-muted-foreground mt-0.5 text-[0.65rem]", children: hint })), _jsx("div", { role: "status", "aria-live": "polite", "aria-atomic": "true", className: "sr-only", children: copied && "SSO login URL copied to clipboard" })] })] }));
+}
+// ---------------------------------------------------------------------------
+// Shared primitives
+// ---------------------------------------------------------------------------
+function FieldInput({ id, label, value, onChange, placeholder, hint, disabled, required, }) {
+    return (_jsxs("div", { className: "space-y-1", children: [_jsx("label", { htmlFor: id, className: "text-xs font-medium text-foreground", children: label }), _jsx("input", { id: id, type: "text", value: value, onChange: (e) => onChange(e.target.value), placeholder: placeholder, disabled: disabled, required: required, className: cn("w-full rounded-md border border-input bg-background px-2.5 py-1.5 text-xs text-foreground", "placeholder:text-muted-foreground", "focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring", "disabled:pointer-events-none disabled:opacity-50") }), hint && (_jsx("p", { className: "text-[0.65rem] text-muted-foreground", children: hint }))] }));
+}
+function formatDate(date) {
+    return date.toLocaleDateString(undefined, {
+        month: "short",
+        day: "numeric",
+        year: "numeric",
+    });
+}
+// ---------------------------------------------------------------------------
+// Icons
+// ---------------------------------------------------------------------------
+function ArrowLeftIcon() {
+    return (_jsx("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: _jsx("path", { d: "M10 3L5 8l5 5" }) }));
+}
+function SpinnerIcon() {
+    return (_jsx("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", className: "animate-spin", "aria-hidden": "true", children: _jsx("path", { d: "M8 2a6 6 0 1 0 6 6" }) }));
+}
+//# sourceMappingURL=IdentityProviderDetailPanel.js.map

package/identity-provider/IdentityProviderDetailPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityProviderDetailPanel.js","sourceRoot":"","sources":["../../src/identity-provider/IdentityProviderDetailPanel.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAkB,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAoBxE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,2BAA2B,CAAC,EAC1C,gBAAgB,EAChB,SAAS,EACT,MAAM,EACN,WAAW,EACX,SAAS,GACwB;IACjC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC;IAEvC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAC7C,yBAAyB,EAAE,CAAC;IAC9B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAkB,MAAM,CAAC,CAAC;IAE1D,sDAAsD;IACtD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IACxE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CACpC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CACtC,CAAC;IACF,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CACtD,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAC7B,CAAC;IACF,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC,CAAC;IACjE,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAC9C,IAAI,EAAE,YAAY,IAAI,EAAE,CACzB,CAAC;IAEF,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,cAAc,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QACxC,UAAU,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAChC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,WAAW,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAC1C,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAClD,QAAQ,CAAC,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC,CAAC;QACvC,eAAe,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QAC1C,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAEvB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,MAAM,UAAU,GAAG,WAAW,CAC5B,KAAK,EAAE,CAAY,EAAE,EAAE;QACrB,CAAC,CAAC,cAAc,EAAE,CAAC;QACnB,UAAU,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC;gBAC3B,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE;gBACtB,IAAI,EAAE,IAAI,EAAE,IAAI;gBAChB,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE;gBACpB,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE;gBAC/B,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBACvB,cAAc,EAAE,OAAO;qBACpB,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,OAAO,CAAC;gBAClB,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE;gBACjC,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,EAAE,IAAI,SAAS;gBACtD,aAAa,EAAE,KAAK;gBACpB,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;aACtD,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC,EACD;QACE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ;QAC7C,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS;KACrE,CACF,CAAC;IAEF,MAAM,OAAO,GACX,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;QACzB,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QACrB,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QACrB,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QACtB,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC,UAAU,CAAC;IAEd,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;IACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;IAEvE,OAAO,CACL,eAAK,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,aAExC,eAAK,SAAS,EAAC,wCAAwC,aACrD,eAAK,SAAS,EAAC,SAAS,aACrB,MAAM,IAAI,CACT,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,MAAM,EACf,SAAS,EAAC,oGAAoG,aAE9G,KAAC,aAAa,KAAG,oBAEV,CACV,EACD,aAAI,SAAS,EAAC,gDAAgD,YAC3D,IAAI,EAAE,WAAW,IAAI,IAAI,EAAE,IAAI,IAAI,mBAAmB,GACpD,EACL,eAAK,SAAS,EAAC,yBAAyB,aACrC,IAAI,EAAE,IAAI,IAAI,CACb,eAAM,SAAS,EAAC,yCAAyC,YACtD,IAAI,CAAC,IAAI,GACL,CACR,EACA,IAAI,EAAE,aAAa,IAAI,CACtB,eAAM,SAAS,EAAC,sIAAsI,oBAE/I,CACR,IACG,IACF,EAEL,IAAI,KAAK,MAAM,IAAI,CAClB,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,SAAS,EAClB,SAAS,EAAE,EAAE,CACX,uDAAuD,EACvD,gEAAgE,EAChE,mBAAmB,CACpB,qBAGM,CACV,IACG,EAGL,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CACjB,KAAC,QAAQ,IACP,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,WAAW,EACxB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS,GACpB,CACH,CAAC,CAAC,CAAC,CACF,gBAAM,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAC,WAAW,aAC/C,KAAC,UAAU,IACT,EAAE,EAAC,oBAAoB,EACvB,KAAK,EAAC,cAAc,EACpB,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAC,qBAAqB,EACjC,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,EACF,KAAC,UAAU,IACT,EAAE,EAAC,oBAAoB,EACvB,KAAK,EAAC,UAAU,EAChB,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAC,2CAA2C,EACvD,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,EACF,KAAC,UAAU,IACT,EAAE,EAAC,uBAAuB,EAC1B,KAAK,EAAC,iBAAiB,EACvB,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAC,6BAA6B,EACzC,IAAI,EAAC,mDAAmD,EACxD,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,EACF,KAAC,UAAU,IACT,EAAE,EAAC,wBAAwB,EAC3B,KAAK,EAAC,mBAAmB,EACzB,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,WAAW,EACrB,WAAW,EAAC,aAAa,EACzB,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,EACF,KAAC,UAAU,IACT,EAAE,EAAC,wBAAwB,EAC3B,KAAK,EAAC,mBAAmB,EACzB,KAAK,EAAE,gBAAgB,EACvB,QAAQ,EAAE,mBAAmB,EAC7B,WAAW,EAAC,8BAA8B,EAC1C,IAAI,EAAC,iDAA4C,EACjD,QAAQ,EAAE,UAAU,GACpB,EAGF,eAAK,SAAS,EAAC,yBAAyB,aACtC,iBACE,IAAI,EAAC,QAAQ,EACb,IAAI,EAAC,QAAQ,kBACC,KAAK,EACnB,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAClC,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,iHAAiH,EACjH,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EACjC,kDAAkD,CACnD,YAED,eACE,SAAS,EAAE,EAAE,CACX,2GAA2G,EAC3G,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAC1C,GACD,GACK,EACT,eAAM,SAAS,EAAC,qCAAqC,6BAE9C,IACH,EAEL,KAAK,IAAI,CACR,KAAC,UAAU,IACT,EAAE,EAAC,yBAAyB,EAC5B,KAAK,EAAC,gBAAgB,EACtB,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAC,kBAAkB,EAC9B,IAAI,EAAC,sDAAsD,EAC3D,QAAQ,EAAE,UAAU,EACpB,QAAQ,SACR,CACH,EAEA,KAAK,IAAI,CACR,YAAG,SAAS,EAAC,iCAAiC,EAAC,IAAI,EAAC,OAAO,YACxD,cAAc,CAAC,KAAK,CAAC,GACpB,CACL,EAED,eAAK,SAAS,EAAC,8BAA8B,aAC3C,kBACE,IAAI,EAAC,QAAQ,EACb,QAAQ,EAAE,CAAC,OAAO,EAClB,SAAS,EAAE,EAAE,CACX,6EAA6E,EAC7E,wDAAwD,EACxD,kDAAkD,CACnD,aAEA,UAAU,IAAI,KAAC,WAAW,KAAG,oBAEvB,EACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,kCAAkC,EAClC,gEAAgE,EAChE,kDAAkD,CACnD,uBAGM,IACL,IACD,CACR,IACG,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,EAChB,IAAI,EACJ,WAAW,EACX,SAAS,EACT,SAAS,GAMV;IACC,OAAO,CACL,cAAI,SAAS,EAAC,aAAa,aACzB,KAAC,KAAK,IAAC,KAAK,EAAC,UAAU,EAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,SAAG,EACrD,KAAC,KAAK,IACJ,KAAK,EAAC,iBAAiB,EACvB,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EACtC,IAAI,SACJ,EACF,KAAC,KAAK,IAAC,KAAK,EAAC,mBAAmB,EAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,SAAG,EACtE,IAAI,EAAE,gBAAgB,IAAI,CACzB,KAAC,KAAK,IAAC,KAAK,EAAC,mBAAmB,EAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,SAAG,CACvE,EACA,IAAI,EAAE,aAAa,IAAI,CACtB,KAAC,KAAK,IAAC,KAAK,EAAC,gBAAgB,EAAC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,SAAG,CAChE,EACA,IAAI,EAAE,aAAa,IAAI,WAAW,IAAI,CACrC,KAAC,aAAa,IACZ,KAAK,EAAC,eAAe,EACrB,KAAK,EAAE,WAAW,EAClB,IAAI,EAAC,0DAA0D,GAC/D,CACH,EACA,CAAC,IAAI,EAAE,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CACnC,KAAC,KAAK,IACJ,KAAK,EAAC,YAAY,EAClB,KAAK,EAAE,GAAG,IAAK,CAAC,eAAe,UAAU,GACzC,CACH,EACD,eAAK,SAAS,EAAC,YAAY,aACxB,SAAS,IAAI,CACZ,KAAC,KAAK,IACJ,KAAK,EAAC,SAAS,EACf,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,GAC3C,CACH,EACA,SAAS,IAAI,CACZ,KAAC,KAAK,IACJ,KAAK,EAAC,SAAS,EACf,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,GAC3C,CACH,IACG,IACH,CACN,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EACb,KAAK,EACL,KAAK,EACL,IAAI,GAKL;IACC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,CACL,0BACE,aAAI,SAAS,EAAC,kDAAkD,YAC7D,KAAK,GACH,EACL,aACE,SAAS,EAAE,EAAE,CACX,0CAA0C,EAC1C,IAAI,IAAI,WAAW,CACpB,YAEA,KAAK,GACH,IACD,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,SAAS,aAAa,CAAC,EACrB,KAAK,EACL,KAAK,EACL,IAAI,GAKL;IACC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,wBAAwB,CAAC;IAEzC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3C,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACrC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAC7B,SAAS,EAAE,eAAe,EAAE,CAAC;gBAC7B,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEZ,OAAO,CACL,0BACE,aAAI,SAAS,EAAC,kDAAkD,YAC7D,KAAK,GACH,EACL,cAAI,SAAS,EAAC,QAAQ,aACpB,eAAK,SAAS,EAAC,yBAAyB,aACtC,eACE,EAAE,EAAE,OAAO,EACX,SAAS,EAAC,wDAAwD,YAEjE,KAAK,GACD,EACP,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,EAAE,CACX,8CAA8C,EAC9C,gEAAgE,EAChE,mBAAmB,CACpB,gBACW,QAAQ,KAAK,EAAE,YAE1B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,GACpB,IACL,EACL,IAAI,IAAI,CACP,YAAG,SAAS,EAAC,6CAA6C,YACvD,IAAI,GACH,CACL,EACD,cACE,IAAI,EAAC,QAAQ,eACH,QAAQ,iBACN,MAAM,EAClB,SAAS,EAAC,SAAS,YAElB,MAAM,IAAI,mCAAmC,GAC1C,IACH,IACD,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,UAAU,CAAC,EAClB,EAAE,EACF,KAAK,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,QAAQ,GAUT;IACC,OAAO,CACL,eAAK,SAAS,EAAC,WAAW,aACxB,gBAAO,OAAO,EAAE,EAAE,EAAE,SAAS,EAAC,qCAAqC,YAChE,KAAK,GACA,EACR,gBACE,EAAE,EAAE,EAAE,EACN,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACzC,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,EAAE,CACX,2FAA2F,EAC3F,mCAAmC,EACnC,yEAAyE,EACzE,kDAAkD,CACnD,GACD,EACD,IAAI,IAAI,CACP,YAAG,SAAS,EAAC,sCAAsC,YAAE,IAAI,GAAK,CAC/D,IACG,CACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAU;IAC5B,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE;QACxC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,SAAS,aAAa;IACpB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,KAAK,EACjB,aAAa,EAAC,OAAO,EACrB,cAAc,EAAC,OAAO,iBACV,MAAM,YAElB,eAAM,CAAC,EAAC,eAAe,GAAG,GACtB,CACP,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,GAAG,EACf,aAAa,EAAC,OAAO,EACrB,SAAS,EAAC,cAAc,iBACZ,MAAM,YAElB,eAAM,CAAC,EAAC,oBAAoB,GAAG,GAC3B,CACP,CAAC;AACJ,CAAC"}

package/identity-provider/IdentityProviderListPanel.d.ts

@@ -0,0 +1,41 @@
+import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
+/** Props for {@link IdentityProviderListPanel}. */
+export interface IdentityProviderListPanelProps {
+    /** Organization slug whose identity providers should be listed. */
+    readonly org: string;
+    /** Fired when the user wants to edit an identity provider. */
+    readonly onEdit?: (idp: IdentityProvider) => void;
+    /** Expose the refetch function so parents can trigger a list refresh. */
+    readonly onRefetchRef?: (refetch: () => void) => void;
+    /** Additional CSS class names for the root container. */
+    readonly className?: string;
+}
+/**
+ * Displays a list of {@link IdentityProvider} resources for an
+ * organization with inline delete confirmation.
+ *
+ * Each provider is rendered as a row showing name, slug, SSO badge
+ * (when `is_sso_provider` is true), and creation date. A delete
+ * button triggers an inline confirmation flow.
+ *
+ * Identity providers are admin-level resources with small cardinality
+ * (typically 1–3 per org), so the list is rendered without pagination.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <IdentityProviderListPanel org="acme" />
+ * ```
+ *
+ * @example
+ * ```tsx
+ * <IdentityProviderListPanel
+ *   org="acme"
+ *   onEdit={(idp) => navigate(`/settings/idp/${idp.metadata?.id}`)}
+ *   onRefetchRef={(refetch) => { listRefetchRef.current = refetch; }}
+ * />
+ * ```
+ */
+export declare function IdentityProviderListPanel({ org, onEdit, onRefetchRef, className, }: IdentityProviderListPanelProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=IdentityProviderListPanel.d.ts.map

package/identity-provider/IdentityProviderListPanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityProviderListPanel.d.ts","sourceRoot":"","sources":["../../src/identity-provider/IdentityProviderListPanel.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2DAA2D,CAAC;AAIlG,mDAAmD;AACnD,MAAM,WAAW,8BAA8B;IAC7C,mEAAmE;IACnE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAClD,yEAAyE;IACzE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IACtD,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,GAAG,EACH,MAAM,EACN,YAAY,EACZ,SAAS,GACV,EAAE,8BAA8B,2CAwEhC"}

package/identity-provider/IdentityProviderListPanel.js

@@ -0,0 +1,110 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from "react";
+import { cn } from "@stigmer/theme";
+import { getUserMessage } from "@stigmer/sdk";
+import { timestampDate } from "@bufbuild/protobuf/wkt";
+import { useIdentityProviderList } from "./useIdentityProviderList";
+import { useDeleteIdentityProvider } from "./useDeleteIdentityProvider";
+/**
+ * Displays a list of {@link IdentityProvider} resources for an
+ * organization with inline delete confirmation.
+ *
+ * Each provider is rendered as a row showing name, slug, SSO badge
+ * (when `is_sso_provider` is true), and creation date. A delete
+ * button triggers an inline confirmation flow.
+ *
+ * Identity providers are admin-level resources with small cardinality
+ * (typically 1–3 per org), so the list is rendered without pagination.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <IdentityProviderListPanel org="acme" />
+ * ```
+ *
+ * @example
+ * ```tsx
+ * <IdentityProviderListPanel
+ *   org="acme"
+ *   onEdit={(idp) => navigate(`/settings/idp/${idp.metadata?.id}`)}
+ *   onRefetchRef={(refetch) => { listRefetchRef.current = refetch; }}
+ * />
+ * ```
+ */
+export function IdentityProviderListPanel({ org, onEdit, onRefetchRef, className, }) {
+    const { identityProviders, isLoading, error, refetch } = useIdentityProviderList(org);
+    const [confirmingId, setConfirmingId] = useState(null);
+    if (onRefetchRef) {
+        onRefetchRef(refetch);
+    }
+    if (isLoading) {
+        return (_jsx("div", { className: cn("space-y-2", className), "aria-busy": "true", "aria-label": "Loading identity providers", children: Array.from({ length: 2 }, (_, i) => (_jsx("div", { className: "bg-muted/40 h-14 animate-pulse rounded-lg" }, i))) }));
+    }
+    if (error) {
+        return (_jsx("p", { className: cn("text-destructive text-xs", className), role: "alert", children: getUserMessage(error) }));
+    }
+    if (identityProviders.length === 0) {
+        return (_jsx("p", { className: cn("text-muted-foreground py-4 text-center text-xs", className), children: "No identity providers configured." }));
+    }
+    return (_jsx("div", { className: cn("space-y-2", className), role: "list", "aria-label": "Identity providers", children: identityProviders.map((idp) => {
+            const id = idp.metadata?.id ?? "";
+            return (_jsx(IdpRow, { identityProvider: idp, isConfirming: confirmingId === id, onEdit: onEdit ? () => onEdit(idp) : undefined, onConfirmDelete: () => setConfirmingId(id), onCancelDelete: () => setConfirmingId(null), onDeleted: () => {
+                    setConfirmingId(null);
+                    refetch();
+                } }, id));
+        }) }));
+}
+// ---------------------------------------------------------------------------
+// IdpRow (internal)
+// ---------------------------------------------------------------------------
+function IdpRow({ identityProvider, isConfirming, onEdit, onConfirmDelete, onCancelDelete, onDeleted, }) {
+    const { deleteProvider, isDeleting, error } = useDeleteIdentityProvider();
+    const id = identityProvider.metadata?.id ?? "";
+    const name = identityProvider.spec?.displayName ||
+        identityProvider.metadata?.name ||
+        "Unnamed provider";
+    const slug = identityProvider.metadata?.slug;
+    const isSso = identityProvider.spec?.isSsoProvider;
+    const createdAt = identityProvider.status?.audit?.specAudit?.createdAt;
+    const handleDelete = useCallback(async () => {
+        try {
+            await deleteProvider({ resourceId: id });
+            onDeleted();
+        }
+        catch {
+            // error state is surfaced via the hook
+        }
+    }, [id, deleteProvider, onDeleted]);
+    if (isConfirming) {
+        return (_jsxs("div", { role: "listitem", className: "flex items-center justify-between rounded-lg border border-destructive/30 bg-destructive/5 px-3 py-2.5", children: [_jsxs("div", { className: "min-w-0 flex-1", children: [_jsxs("p", { className: "text-xs text-foreground", children: ["Delete ", _jsx("span", { className: "font-medium", children: name }), "?"] }), error && (_jsx("p", { className: "mt-0.5 text-[0.65rem] text-destructive", children: getUserMessage(error) }))] }), _jsxs("div", { className: "flex shrink-0 items-center gap-1.5", children: [_jsxs("button", { type: "button", onClick: handleDelete, disabled: isDeleting, className: cn("inline-flex items-center gap-1 rounded-md px-2.5 py-1 text-xs font-medium", "bg-destructive text-destructive-foreground hover:bg-destructive/90", "disabled:pointer-events-none disabled:opacity-50"), children: [isDeleting && _jsx(SpinnerIcon, {}), "Delete"] }), _jsx("button", { type: "button", onClick: onCancelDelete, disabled: isDeleting, className: cn("rounded-md px-2.5 py-1 text-xs", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "disabled:pointer-events-none disabled:opacity-50"), children: "Cancel" })] })] }));
+    }
+    return (_jsxs("div", { role: "listitem", className: "flex items-center gap-3 rounded-lg border border-border/60 px-3 py-2.5 hover:border-border transition-colors", children: [_jsx(ShieldIcon, {}), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "block truncate text-sm font-medium text-foreground", children: name }), slug && (_jsx("span", { className: "block text-xs text-muted-foreground font-mono", children: slug }))] }), _jsxs("div", { className: "hidden sm:flex shrink-0 items-center gap-3 text-xs text-muted-foreground", children: [isSso && (_jsx("span", { className: "inline-flex items-center rounded-full border border-primary/30 bg-primary-subtle px-2 py-0.5 text-[0.65rem] font-medium text-primary", children: "SSO" })), createdAt && (_jsx("span", { title: `Created ${timestampDate(createdAt).toISOString()}`, children: formatShortDate(timestampDate(createdAt)) }))] }), _jsxs("div", { className: "flex shrink-0 items-center gap-1", children: [onEdit && (_jsx("button", { type: "button", onClick: onEdit, "aria-label": `Edit ${name}`, className: cn("shrink-0 rounded p-1", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "transition-colors"), children: _jsx(PencilIcon, {}) })), _jsx("button", { type: "button", onClick: onConfirmDelete, "aria-label": `Delete ${name}`, className: cn("shrink-0 rounded p-1", "text-muted-foreground hover:text-destructive hover:bg-destructive/10", "transition-colors"), children: _jsx(TrashIcon, {}) })] })] }));
+}
+// ---------------------------------------------------------------------------
+// Formatting helpers
+// ---------------------------------------------------------------------------
+function formatShortDate(date) {
+    return date.toLocaleDateString(undefined, {
+        month: "short",
+        day: "numeric",
+        year: "numeric",
+    });
+}
+// ---------------------------------------------------------------------------
+// Icons
+// ---------------------------------------------------------------------------
+function ShieldIcon() {
+    return (_jsx("svg", { width: "14", height: "14", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", className: "shrink-0 text-muted-foreground", children: _jsx("path", { d: "M8 1.5L2 4v4c0 3.5 2.5 5.5 6 7 3.5-1.5 6-3.5 6-7V4L8 1.5z" }) }));
+}
+function PencilIcon() {
+    return (_jsx("svg", { width: "14", height: "14", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: _jsx("path", { d: "M11 2.5l2.5 2.5L5 13.5H2.5V11L11 2.5z" }) }));
+}
+function TrashIcon() {
+    return (_jsxs("svg", { width: "14", height: "14", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("path", { d: "M2.5 4h11M5.5 4V2.5a1 1 0 0 1 1-1h3a1 1 0 0 1 1 1V4" }), _jsx("path", { d: "M12.5 4v9a1 1 0 0 1-1 1h-7a1 1 0 0 1-1-1V4" }), _jsx("line", { x1: "6.5", y1: "7", x2: "6.5", y2: "11" }), _jsx("line", { x1: "9.5", y1: "7", x2: "9.5", y2: "11" })] }));
+}
+function SpinnerIcon() {
+    return (_jsx("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", className: "animate-spin", "aria-hidden": "true", children: _jsx("path", { d: "M8 2a6 6 0 1 0 6 6" }) }));
+}
+//# sourceMappingURL=IdentityProviderListPanel.js.map

package/identity-provider/IdentityProviderListPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityProviderListPanel.js","sourceRoot":"","sources":["../../src/identity-provider/IdentityProviderListPanel.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAcxE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,GAAG,EACH,MAAM,EACN,YAAY,EACZ,SAAS,GACsB;IAC/B,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GACpD,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAEtE,IAAI,YAAY,EAAE,CAAC;QACjB,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CACL,cACE,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,eAC3B,MAAM,gBACL,4BAA4B,YAEtC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CACnC,cAEE,SAAS,EAAC,2CAA2C,IADhD,CAAC,CAEN,CACH,CAAC,GACE,CACP,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CACL,YAAG,SAAS,EAAE,EAAE,CAAC,0BAA0B,EAAE,SAAS,CAAC,EAAE,IAAI,EAAC,OAAO,YAClE,cAAc,CAAC,KAAK,CAAC,GACpB,CACL,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CACL,YACE,SAAS,EAAE,EAAE,CACX,gDAAgD,EAChD,SAAS,CACV,kDAGC,CACL,CAAC;IACJ,CAAC;IAED,OAAO,CACL,cACE,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EACrC,IAAI,EAAC,MAAM,gBACA,oBAAoB,YAE9B,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7B,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;YAClC,OAAO,CACL,KAAC,MAAM,IAEL,gBAAgB,EAAE,GAAG,EACrB,YAAY,EAAE,YAAY,KAAK,EAAE,EACjC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAC9C,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,EAC1C,cAAc,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAC3C,SAAS,EAAE,GAAG,EAAE;oBACd,eAAe,CAAC,IAAI,CAAC,CAAC;oBACtB,OAAO,EAAE,CAAC;gBACZ,CAAC,IATI,EAAE,CAUP,CACH,CAAC;QACJ,CAAC,CAAC,GACE,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,MAAM,CAAC,EACd,gBAAgB,EAChB,YAAY,EACZ,MAAM,EACN,eAAe,EACf,cAAc,EACd,SAAS,GAQV;IACC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,yBAAyB,EAAE,CAAC;IAE1E,MAAM,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,IAAI,GACR,gBAAgB,CAAC,IAAI,EAAE,WAAW;QAClC,gBAAgB,CAAC,QAAQ,EAAE,IAAI;QAC/B,kBAAkB,CAAC;IACrB,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC;IACnD,MAAM,SAAS,GACb,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;IAEvD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC1C,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;YACzC,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IAEpC,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CACL,eACE,IAAI,EAAC,UAAU,EACf,SAAS,EAAC,wGAAwG,aAElH,eAAK,SAAS,EAAC,gBAAgB,aAC7B,aAAG,SAAS,EAAC,yBAAyB,wBAC7B,eAAM,SAAS,EAAC,aAAa,YAAE,IAAI,GAAQ,SAChD,EACH,KAAK,IAAI,CACR,YAAG,SAAS,EAAC,wCAAwC,YAClD,cAAc,CAAC,KAAK,CAAC,GACpB,CACL,IACG,EAEN,eAAK,SAAS,EAAC,oCAAoC,aACjD,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,2EAA2E,EAC3E,oEAAoE,EACpE,kDAAkD,CACnD,aAEA,UAAU,IAAI,KAAC,WAAW,KAAG,cAEvB,EACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,gCAAgC,EAChC,gEAAgE,EAChE,kDAAkD,CACnD,uBAGM,IACL,IACF,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eACE,IAAI,EAAC,UAAU,EACf,SAAS,EAAC,8GAA8G,aAExH,KAAC,UAAU,KAAG,EAEd,eAAK,SAAS,EAAC,gBAAgB,aAC7B,eAAM,SAAS,EAAC,oDAAoD,YACjE,IAAI,GACA,EACN,IAAI,IAAI,CACP,eAAM,SAAS,EAAC,+CAA+C,YAC5D,IAAI,GACA,CACR,IACG,EAEN,eAAK,SAAS,EAAC,0EAA0E,aACtF,KAAK,IAAI,CACR,eAAM,SAAS,EAAC,sIAAsI,oBAE/I,CACR,EACA,SAAS,IAAI,CACZ,eAAM,KAAK,EAAE,WAAW,aAAa,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,YAC7D,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,GACrC,CACR,IACG,EAEN,eAAK,SAAS,EAAC,kCAAkC,aAC9C,MAAM,IAAI,CACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,MAAM,gBACH,QAAQ,IAAI,EAAE,EAC1B,SAAS,EAAE,EAAE,CACX,sBAAsB,EACtB,gEAAgE,EAChE,mBAAmB,CACpB,YAED,KAAC,UAAU,KAAG,GACP,CACV,EACD,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,eAAe,gBACZ,UAAU,IAAI,EAAE,EAC5B,SAAS,EAAE,EAAE,CACX,sBAAsB,EACtB,sEAAsE,EACtE,mBAAmB,CACpB,YAED,KAAC,SAAS,KAAG,GACN,IACL,IACF,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,eAAe,CAAC,IAAU;IACjC,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE;QACxC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,SAAS,UAAU;IACjB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,KAAK,EACjB,aAAa,EAAC,OAAO,EACrB,cAAc,EAAC,OAAO,iBACV,MAAM,EAClB,SAAS,EAAC,gCAAgC,YAE1C,eAAM,CAAC,EAAC,2DAA2D,GAAG,GAClE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,KAAK,EACjB,aAAa,EAAC,OAAO,EACrB,cAAc,EAAC,OAAO,iBACV,MAAM,YAElB,eAAM,CAAC,EAAC,uCAAuC,GAAG,GAC9C,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CACL,eACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,KAAK,EACjB,aAAa,EAAC,OAAO,EACrB,cAAc,EAAC,OAAO,iBACV,MAAM,aAElB,eAAM,CAAC,EAAC,qDAAqD,GAAG,EAChE,eAAM,CAAC,EAAC,4CAA4C,GAAG,EACvD,eAAM,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,IAAI,GAAG,EACzC,eAAM,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,IAAI,GAAG,IACrC,CACP,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,GAAG,EACf,aAAa,EAAC,OAAO,EACrB,SAAS,EAAC,cAAc,iBACZ,MAAM,YAElB,eAAM,CAAC,EAAC,oBAAoB,GAAG,GAC3B,CACP,CAAC;AACJ,CAAC"}

package/identity-provider/IdentityProviderWizard.d.ts

@@ -0,0 +1,40 @@
+import type { IdentityProvider } from "@stigmer/protos/ai/stigmer/iam/identityprovider/v1/api_pb";
+/** Props for {@link IdentityProviderWizard}. */
+export interface IdentityProviderWizardProps {
+    /** Organization slug — the IdP will be created in this org. */
+    readonly org: string;
+    /** Fired with the newly created identity provider on success. */
+    readonly onCreated?: (idp: IdentityProvider) => void;
+    /** Fired when the user cancels the wizard. */
+    readonly onCancel?: () => void;
+    /** Additional CSS class names for the root container. */
+    readonly className?: string;
+}
+/**
+ * Multi-step wizard for creating a new identity provider.
+ *
+ * Guides the user through three steps:
+ *
+ * 1. **Pick** — select a well-known provider preset or "Custom OIDC"
+ * 2. **Configure** — fill in provider-specific variables (e.g., Auth0
+ *    tenant name) plus the IdP display name and expected audience
+ * 3. **Review** — verify auto-populated OIDC configuration, optionally
+ *    enable SSO, and submit
+ *
+ * For known presets, URLs are constructed from deterministic templates
+ * (no network call). For "Custom OIDC", the wizard attempts OIDC
+ * Discovery and falls back to manual entry if the fetch fails.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <IdentityProviderWizard
+ *   org="acme"
+ *   onCreated={(idp) => { refetch(); setShowWizard(false); }}
+ *   onCancel={() => setShowWizard(false)}
+ * />
+ * ```
+ */
+export declare function IdentityProviderWizard({ org, onCreated, onCancel, className, }: IdentityProviderWizardProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=IdentityProviderWizard.d.ts.map

package/identity-provider/IdentityProviderWizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityProviderWizard.d.ts","sourceRoot":"","sources":["../../src/identity-provider/IdentityProviderWizard.tsx"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2DAA2D,CAAC;AAMlG,gDAAgD;AAChD,MAAM,WAAW,2BAA2B;IAC1C,+DAA+D;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACrD,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IAC/B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAID;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,QAAQ,EACR,SAAS,GACV,EAAE,2BAA2B,2CAuK7B"}

package/identity-provider/IdentityProviderWizard.js

@@ -0,0 +1,180 @@
+"use client";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState, } from "react";
+import { cn } from "@stigmer/theme";
+import { getUserMessage } from "@stigmer/sdk";
+import { ProviderPicker } from "./ProviderPicker";
+import { useCreateIdentityProvider } from "./useCreateIdentityProvider";
+import { useOidcDiscovery } from "./useOidcDiscovery";
+/**
+ * Multi-step wizard for creating a new identity provider.
+ *
+ * Guides the user through three steps:
+ *
+ * 1. **Pick** — select a well-known provider preset or "Custom OIDC"
+ * 2. **Configure** — fill in provider-specific variables (e.g., Auth0
+ *    tenant name) plus the IdP display name and expected audience
+ * 3. **Review** — verify auto-populated OIDC configuration, optionally
+ *    enable SSO, and submit
+ *
+ * For known presets, URLs are constructed from deterministic templates
+ * (no network call). For "Custom OIDC", the wizard attempts OIDC
+ * Discovery and falls back to manual entry if the fetch fails.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <IdentityProviderWizard
+ *   org="acme"
+ *   onCreated={(idp) => { refetch(); setShowWizard(false); }}
+ *   onCancel={() => setShowWizard(false)}
+ * />
+ * ```
+ */
+export function IdentityProviderWizard({ org, onCreated, onCancel, className, }) {
+    const { create, isCreating, error: createError, clearError } = useCreateIdentityProvider();
+    const { discover, isDiscovering, error: discoveryError } = useOidcDiscovery();
+    // Step state
+    const [step, setStep] = useState("pick");
+    const [preset, setPreset] = useState(null);
+    // Configure step
+    const [vars, setVars] = useState({});
+    const [name, setName] = useState("");
+    const [audience, setAudience] = useState("");
+    // Review step
+    const [jwksUri, setJwksUri] = useState("");
+    const [issuers, setIssuers] = useState("");
+    const [userinfoEndpoint, setUserinfoEndpoint] = useState("");
+    const [isSso, setIsSso] = useState(false);
+    const [oidcClientId, setOidcClientId] = useState("");
+    const [discoveryFailed, setDiscoveryFailed] = useState(false);
+    // -- Step transitions ------------------------------------------------
+    const handlePickProvider = useCallback((selected) => {
+        setPreset(selected);
+        setVars(Object.fromEntries(selected.variables.map((v) => [v.key, v.options?.[0]?.value ?? ""])));
+        setName("");
+        setAudience("");
+        setStep("configure");
+    }, []);
+    const handleBackToPick = useCallback(() => {
+        setStep("pick");
+        setPreset(null);
+    }, []);
+    const populateReview = useCallback((config) => {
+        setJwksUri(config?.jwksUri ?? "");
+        setIssuers(config?.allowedIssuers.join(", ") ?? "");
+        setUserinfoEndpoint(config?.userinfoEndpoint ?? "");
+        setIsSso(false);
+        setOidcClientId("");
+        setDiscoveryFailed(!config);
+    }, []);
+    const handleContinueToReview = useCallback(async () => {
+        if (!preset)
+            return;
+        if (preset.id === "custom") {
+            const result = await discover(vars.issuerUrl ?? "");
+            populateReview(result
+                ? { ...result, allowedIssuers: [result.issuer] }
+                : null);
+        }
+        else {
+            populateReview(preset.buildConfig(vars));
+        }
+        setStep("review");
+    }, [preset, vars, discover, populateReview]);
+    const handleBackToConfigure = useCallback(() => {
+        setStep("configure");
+        clearError();
+    }, [clearError]);
+    // -- Submit ----------------------------------------------------------
+    const handleSubmit = useCallback(async (e) => {
+        e.preventDefault();
+        clearError();
+        try {
+            const idp = await create({
+                name: name.trim(),
+                org,
+                displayName: name.trim(),
+                jwksUri: jwksUri.trim(),
+                allowedIssuers: issuers
+                    .split(",")
+                    .map((s) => s.trim())
+                    .filter(Boolean),
+                expectedAudience: audience.trim(),
+                userinfoEndpoint: userinfoEndpoint.trim() || undefined,
+                ...(isSso && {
+                    isSsoProvider: true,
+                    oidcClientId: oidcClientId.trim(),
+                }),
+            });
+            onCreated?.(idp);
+        }
+        catch {
+            // error state is managed by useCreateIdentityProvider
+        }
+    }, [
+        name, org, jwksUri, issuers, audience, userinfoEndpoint,
+        isSso, oidcClientId, create, clearError, onCreated,
+    ]);
+    // -- Render ----------------------------------------------------------
+    return (_jsxs("div", { className: cn("space-y-4", className), children: [_jsx(StepIndicator, { current: step }), step === "pick" && (_jsxs(_Fragment, { children: [_jsx("p", { className: "text-muted-foreground text-xs", children: "Choose your identity provider to get started. Known providers will have their OIDC configuration auto-populated." }), _jsx(ProviderPicker, { onSelect: handlePickProvider }), onCancel && (_jsx("div", { className: "pt-1", children: _jsx(CancelButton, { onClick: onCancel }) }))] })), step === "configure" && preset && (_jsx(ConfigureStep, { preset: preset, vars: vars, onVarChange: (key, value) => setVars((prev) => ({ ...prev, [key]: value })), name: name, onNameChange: setName, audience: audience, onAudienceChange: setAudience, isLoading: isDiscovering, discoveryError: discoveryError, onBack: handleBackToPick, onContinue: handleContinueToReview, onCancel: onCancel })), step === "review" && (_jsx(ReviewStep, { discoveryFailed: discoveryFailed, jwksUri: jwksUri, onJwksUriChange: setJwksUri, issuers: issuers, onIssuersChange: setIssuers, userinfoEndpoint: userinfoEndpoint, onUserinfoEndpointChange: setUserinfoEndpoint, isSso: isSso, onIsSsoChange: setIsSso, oidcClientId: oidcClientId, onOidcClientIdChange: setOidcClientId, isCreating: isCreating, createError: createError, onBack: handleBackToConfigure, onSubmit: handleSubmit, onCancel: onCancel }))] }));
+}
+// ---------------------------------------------------------------------------
+// Step indicator
+// ---------------------------------------------------------------------------
+const STEPS = [
+    { key: "pick", label: "Provider" },
+    { key: "configure", label: "Configure" },
+    { key: "review", label: "Review" },
+];
+function StepIndicator({ current }) {
+    const currentIdx = STEPS.findIndex((s) => s.key === current);
+    return (_jsx("nav", { "aria-label": "Wizard progress", className: "flex items-center gap-1.5", children: STEPS.map((s, i) => {
+            const state = i < currentIdx ? "done" : i === currentIdx ? "active" : "upcoming";
+            return (_jsxs("span", { className: "flex items-center gap-1.5", children: [i > 0 && (_jsx("span", { className: cn("h-px w-4", state === "upcoming" ? "bg-border" : "bg-primary/40") })), _jsx("span", { className: cn("text-[0.65rem] font-medium", state === "active"
+                            ? "text-primary"
+                            : state === "done"
+                                ? "text-muted-foreground"
+                                : "text-muted-foreground/50"), children: s.label })] }, s.key));
+        }) }));
+}
+// ---------------------------------------------------------------------------
+// Configure step (step 2)
+// ---------------------------------------------------------------------------
+function ConfigureStep({ preset, vars, onVarChange, name, onNameChange, audience, onAudienceChange, isLoading, discoveryError, onBack, onContinue, onCancel, }) {
+    const allVarsFilled = preset.variables.every((v) => (vars[v.key] ?? "").trim() !== "");
+    const canContinue = allVarsFilled &&
+        name.trim() !== "" &&
+        audience.trim() !== "" &&
+        !isLoading;
+    return (_jsxs("div", { className: "space-y-3", children: [_jsx("p", { className: "text-muted-foreground text-xs", children: preset.variables.length > 0
+                    ? `Enter your ${preset.label} details to auto-populate the OIDC configuration.`
+                    : `${preset.label} configuration is fully automatic — just provide a name and audience.` }), preset.variables.map((v) => (_jsx(FieldInput, { id: `stgm-idp-var-${v.key}`, label: v.label, value: vars[v.key] ?? "", onChange: (val) => onVarChange(v.key, val), placeholder: v.placeholder, hint: v.hint, disabled: isLoading, type: v.type, options: v.options }, v.key))), _jsx("hr", { className: "border-border/40" }), _jsx(FieldInput, { id: "stgm-idp-wiz-name", label: "Display name", value: name, onChange: onNameChange, placeholder: "e.g., Acme Corp SSO", hint: "Human-readable name shown in the UI", disabled: isLoading }), _jsx(FieldInput, { id: "stgm-idp-wiz-audience", label: "Expected audience", value: audience, onChange: onAudienceChange, placeholder: "stigmer-api", hint: "The aud claim value expected in JWTs from this provider", disabled: isLoading }), discoveryError && (_jsx("p", { className: "text-destructive text-[0.65rem]", role: "alert", children: getUserMessage(discoveryError) })), _jsxs("div", { className: "flex items-center gap-2 pt-1", children: [_jsxs("button", { type: "button", onClick: onContinue, disabled: !canContinue, className: cn("inline-flex items-center gap-1.5 rounded-md px-3 py-1.5 text-xs font-medium", "bg-primary text-primary-foreground hover:bg-primary/90", "disabled:pointer-events-none disabled:opacity-40"), children: [isLoading && _jsx(SpinnerIcon, {}), "Continue"] }), _jsx(TextButton, { onClick: onBack, disabled: isLoading, children: "Back" }), onCancel && (_jsx(CancelButton, { onClick: onCancel, disabled: isLoading }))] })] }));
+}
+// ---------------------------------------------------------------------------
+// Review step (step 3)
+// ---------------------------------------------------------------------------
+function ReviewStep({ discoveryFailed, jwksUri, onJwksUriChange, issuers, onIssuersChange, userinfoEndpoint, onUserinfoEndpointChange, isSso, onIsSsoChange, oidcClientId, onOidcClientIdChange, isCreating, createError, onBack, onSubmit, onCancel, }) {
+    const canSubmit = jwksUri.trim() !== "" &&
+        issuers.trim() !== "" &&
+        (!isSso || oidcClientId.trim() !== "") &&
+        !isCreating;
+    return (_jsxs("form", { onSubmit: onSubmit, className: "space-y-3", children: [discoveryFailed && (_jsx("div", { className: "rounded-md border border-warning/30 bg-warning/5 px-3 py-2 text-xs text-warning-foreground", role: "alert", children: "Auto-discovery could not reach the provider. Enter the configuration manually below." })), _jsx("p", { className: "text-muted-foreground text-xs", children: "Review the OIDC configuration. All fields are editable." }), _jsx(FieldInput, { id: "stgm-idp-wiz-jwks", label: "JWKS URI", value: jwksUri, onChange: onJwksUriChange, placeholder: "https://example.com/.well-known/jwks.json", disabled: isCreating, required: true }), _jsx(FieldInput, { id: "stgm-idp-wiz-issuers", label: "Allowed issuers", value: issuers, onChange: onIssuersChange, placeholder: "https://issuer.example.com/", hint: "Comma-separated list of trusted JWT issuer values", disabled: isCreating, required: true }), _jsx(FieldInput, { id: "stgm-idp-wiz-userinfo", label: "Userinfo endpoint", value: userinfoEndpoint, onChange: onUserinfoEndpointChange, placeholder: "https://example.com/userinfo", hint: "Optional \u2014 used to fetch user profile data during token exchange", disabled: isCreating }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx("button", { type: "button", role: "switch", "aria-checked": isSso, onClick: () => onIsSsoChange(!isSso), disabled: isCreating, className: cn("relative inline-flex h-5 w-9 shrink-0 cursor-pointer rounded-full border-2 border-transparent transition-colors", isSso ? "bg-primary" : "bg-muted", "disabled:pointer-events-none disabled:opacity-50"), children: _jsx("span", { className: cn("pointer-events-none inline-block h-4 w-4 rounded-full bg-background shadow-sm ring-0 transition-transform", isSso ? "translate-x-4" : "translate-x-0") }) }), _jsx("span", { className: "text-xs font-medium text-foreground", children: "SSO provider" })] }), isSso && (_jsx(FieldInput, { id: "stgm-idp-wiz-client-id", label: "OIDC client ID", value: oidcClientId, onChange: onOidcClientIdChange, placeholder: "public-client-id", hint: "Client ID for the PKCE-based Authorization Code flow", disabled: isCreating, required: true })), createError && (_jsx("p", { className: "text-destructive text-[0.65rem]", role: "alert", children: getUserMessage(createError) })), _jsxs("div", { className: "flex items-center gap-2 pt-1", children: [_jsxs("button", { type: "submit", disabled: !canSubmit, className: cn("inline-flex items-center gap-1.5 rounded-md px-3 py-1.5 text-xs font-medium", "bg-primary text-primary-foreground hover:bg-primary/90", "disabled:pointer-events-none disabled:opacity-40"), children: [isCreating && _jsx(SpinnerIcon, {}), "Create identity provider"] }), _jsx(TextButton, { onClick: onBack, disabled: isCreating, children: "Back" }), onCancel && (_jsx(CancelButton, { onClick: onCancel, disabled: isCreating }))] })] }));
+}
+// ---------------------------------------------------------------------------
+// Shared primitives
+// ---------------------------------------------------------------------------
+function FieldInput({ id, label, value, onChange, placeholder, hint, disabled, required, type = "text", options, }) {
+    return (_jsxs("div", { className: "space-y-1", children: [_jsx("label", { htmlFor: id, className: "text-xs font-medium text-foreground", children: label }), type === "select" && options ? (_jsx("select", { id: id, value: value, onChange: (e) => onChange(e.target.value), disabled: disabled, className: cn("w-full rounded-md border border-input bg-background px-2.5 py-1.5 text-xs text-foreground", "focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring", "disabled:pointer-events-none disabled:opacity-50"), children: options.map((opt) => (_jsx("option", { value: opt.value, children: opt.label }, opt.value))) })) : (_jsx("input", { id: id, type: "text", value: value, onChange: (e) => onChange(e.target.value), placeholder: placeholder, disabled: disabled, required: required, className: cn("w-full rounded-md border border-input bg-background px-2.5 py-1.5 text-xs text-foreground", "placeholder:text-muted-foreground", "focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring", "disabled:pointer-events-none disabled:opacity-50") })), hint && (_jsx("p", { className: "text-[0.65rem] text-muted-foreground", children: hint }))] }));
+}
+function TextButton({ onClick, disabled, children, }) {
+    return (_jsx("button", { type: "button", onClick: onClick, disabled: disabled, className: cn("rounded-md px-2.5 py-1.5 text-xs", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "disabled:pointer-events-none disabled:opacity-50"), children: children }));
+}
+function CancelButton({ onClick, disabled, }) {
+    return (_jsx(TextButton, { onClick: onClick, disabled: disabled, children: "Cancel" }));
+}
+function SpinnerIcon() {
+    return (_jsx("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", className: "animate-spin", "aria-hidden": "true", children: _jsx("path", { d: "M8 2a6 6 0 1 0 6 6" }) }));
+}
+//# sourceMappingURL=IdentityProviderWizard.js.map