@strapi/admin 5.57.0 → 5.59.0

package/dist/admin/admin/src/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","sources":["../../../../admin/src/constants.ts"],"sourcesContent":["import { PermissionMap } from './types/permissions';\n\nimport type { StrapiAppSettingLink } from './core/apis/router';\n\nexport const ADMIN_PERMISSIONS_CE = {\n  contentManager: {\n    main: [],\n    collectionTypesConfigurations: [\n      {\n        action: 'plugin::content-manager.collection-types.configure-view',\n        subject: null,\n      },\n    ],\n    componentsConfigurations: [\n      {\n        action: 'plugin::content-manager.components.configure-layout',\n        subject: null,\n      },\n    ],\n    singleTypesConfigurations: [\n      {\n        action: 'plugin::content-manager.single-types.configure-view',\n        subject: null,\n      },\n    ],\n  },\n  marketplace: {\n    main: [{ action: 'admin::marketplace.read', subject: null }],\n    read: [{ action: 'admin::marketplace.read', subject: null }],\n  },\n  settings: {\n    roles: {\n      main: [\n        { action: 'admin::roles.create', subject: null },\n        { action: 'admin::roles.update', subject: null },\n        { action: 'admin::roles.read', subject: null },\n        { action: 'admin::roles.delete', subject: null },\n      ],\n      create: [{ action: 'admin::roles.create', subject: null }],\n      delete: [{ action: 'admin::roles.delete', subject: null }],\n      read: [{ action: 'admin::roles.read', subject: null }],\n      update: [{ action: 'admin::roles.update', subject: null }],\n    },\n    users: {\n      main: [\n        { action: 'admin::users.create', subject: null },\n        { action: 'admin::users.read', subject: null },\n        { action: 'admin::users.update', subject: null },\n        { action: 'admin::users.delete', subject: null },\n      ],\n      create: [{ action: 'admin::users.create', subject: null }],\n      delete: [{ action: 'admin::users.delete', subject: null }],\n      read: [{ action: 'admin::users.read', subject: null }],\n      update: [{ action: 'admin::users.update', subject: null }],\n    },\n    webhooks: {\n      main: [\n        { action: 'admin::webhooks.create', subject: null },\n        { action: 'admin::webhooks.read', subject: null },\n        { action: 'admin::webhooks.update', subject: null },\n        { action: 'admin::webhooks.delete', subject: null },\n      ],\n      create: [{ action: 'admin::webhooks.create', subject: null }],\n      delete: [{ action: 'admin::webhooks.delete', subject: null }],\n      read: [\n        { action: 'admin::webhooks.read', subject: null },\n        // NOTE: We need to check with the API\n        { action: 'admin::webhooks.update', subject: null },\n        { action: 'admin::webhooks.delete', subject: null },\n      ],\n      update: [{ action: 'admin::webhooks.update', subject: null }],\n    },\n    'admin-tokens': {\n      main: [{ action: 'admin::admin-tokens.access', subject: null }],\n      create: [{ action: 'admin::admin-tokens.create', subject: null }],\n      delete: [{ action: 'admin::admin-tokens.delete', subject: null }],\n      read: [{ action: 'admin::admin-tokens.read', subject: null }],\n      update: [{ action: 'admin::admin-tokens.update', subject: null }],\n      regenerate: [{ action: 'admin::admin-tokens.regenerate', subject: null }],\n    },\n    'api-tokens': {\n      main: [{ action: 'admin::api-tokens.access', subject: null }],\n      create: [{ action: 'admin::api-tokens.create', subject: null }],\n      delete: [{ action: 'admin::api-tokens.delete', subject: null }],\n      read: [{ action: 'admin::api-tokens.read', subject: null }],\n      update: [{ action: 'admin::api-tokens.update', subject: null }],\n      regenerate: [{ action: 'admin::api-tokens.regenerate', subject: null }],\n    },\n    'transfer-tokens': {\n      main: [{ action: 'admin::transfer.tokens.access', subject: null }],\n      create: [{ action: 'admin::transfer.tokens.create', subject: null }],\n      delete: [{ action: 'admin::transfer.tokens.delete', subject: null }],\n      read: [{ action: 'admin::transfer.tokens.read', subject: null }],\n      update: [{ action: 'admin::transfer.tokens.update', subject: null }],\n      regenerate: [{ action: 'admin::transfer.tokens.regenerate', subject: null }],\n    },\n    'project-settings': {\n      read: [{ action: 'admin::project-settings.read', subject: null }],\n      update: [{ action: 'admin::project-settings.update', subject: null }],\n    },\n    plugins: {\n      main: [{ action: 'admin::marketplace.read', subject: null }],\n      read: [{ action: 'admin::marketplace.read', subject: null }],\n    },\n  },\n} satisfies Partial<PermissionMap>;\n\nexport const HOOKS = {\n  /**\n   * Hook that allows to mutate the displayed headers of the list view table\n   * @constant\n   * @type {string}\n   */\n  INJECT_COLUMN_IN_TABLE: 'Admin/CM/pages/ListView/inject-column-in-table',\n\n  /**\n   * Hook that allows to mutate the displayed filters of the list view\n   * @constant\n   * @type {string}\n   */\n  INJECT_LIST_VIEW_FILTERS: 'Admin/CM/pages/ListView/inject-in-filters',\n\n  /**\n   * Hook that allows to mutate the CM's collection types links pre-set filters\n   * @constant\n   * @type {string}\n   */\n  MUTATE_COLLECTION_TYPES_LINKS: 'Admin/CM/pages/App/mutate-collection-types-links',\n\n  /**\n   * Hook that allows to mutate the CM's edit view layout\n   * @constant\n   * @type {string}\n   */\n  MUTATE_EDIT_VIEW_LAYOUT: 'Admin/CM/pages/EditView/mutate-edit-view-layout',\n\n  /**\n   * Hook that allows to mutate the CM's single types links pre-set filters\n   * @constant\n   * @type {string}\n   */\n  MUTATE_SINGLE_TYPES_LINKS: 'Admin/CM/pages/App/mutate-single-types-links',\n};\n\nexport interface SettingsMenuLink\n  extends Omit<StrapiAppSettingLink, 'Component' | 'permissions' | 'licenseOnly'> {\n  licenseOnly?: boolean;\n}\n\nexport type SettingsMenu = {\n  admin: SettingsMenuLink[];\n  global: SettingsMenuLink[];\n};\n\nexport const SETTINGS_LINKS_CE = (): SettingsMenu => ({\n  global: [\n    {\n      intlLabel: { id: 'Settings.application.title', defaultMessage: 'Overview' },\n      to: '/settings/application-infos',\n      id: '000-application-infos',\n    },\n    {\n      intlLabel: { id: 'Settings.webhooks.title', defaultMessage: 'Webhooks' },\n      to: '/settings/webhooks',\n      id: 'webhooks',\n    },\n    {\n      intlLabel: { id: 'Settings.apiTokens.title', defaultMessage: 'API Tokens' },\n      to: '/settings/api-tokens?sort=name:ASC',\n      id: 'api-tokens',\n    },\n    {\n      intlLabel: { id: 'Settings.transferTokens.title', defaultMessage: 'Transfer Tokens' },\n      to: '/settings/transfer-tokens?sort=name:ASC',\n      id: 'transfer-tokens',\n    },\n    {\n      intlLabel: {\n        id: 'global.plugins',\n        defaultMessage: 'Plugins',\n      },\n      to: '/settings/list-plugins',\n      id: 'plugins',\n    },\n    // If the Enterprise/Cloud feature is not enabled and if the config doesn't disable it, we promote the Enterprise/Cloud feature by displaying them in the settings menu.\n    // Disable this by adding \"promoteEE: false\" to your `./config/admin.js` file\n    ...(!window.strapi.features.isEnabled(window.strapi.features.SSO) &&\n    window.strapi?.flags?.promoteEE\n      ? [\n          {\n            intlLabel: { id: 'Settings.sso.title', defaultMessage: 'Single Sign-On' },\n            to: '/settings/purchase-single-sign-on',\n            id: 'sso-purchase-page',\n            licenseOnly: true,\n          },\n        ]\n      : []),\n    ...(!window.strapi.features.isEnabled('cms-content-history') && window.strapi?.flags?.promoteEE\n      ? [\n          {\n            intlLabel: { id: 'Settings.content-history.title', defaultMessage: 'Content History' },\n            to: '/settings/purchase-content-history',\n            id: 'content-history-purchase-page',\n            licenseOnly: true,\n          },\n        ]\n      : []),\n  ],\n\n  admin: [\n    {\n      intlLabel: { id: 'global.roles', defaultMessage: 'Roles' },\n      to: '/settings/roles',\n      id: 'roles',\n    },\n    {\n      intlLabel: { id: 'global.users', defaultMessage: 'Users' },\n      // Init the search params directly\n      to: '/settings/users?pageSize=10&page=1&sort=firstname',\n      id: 'users',\n    },\n    {\n      intlLabel: { id: 'Settings.adminTokens.title', defaultMessage: 'Admin Tokens' },\n      to: '/settings/admin-tokens',\n      id: 'admin-tokens',\n    },\n    ...(!window.strapi.features.isEnabled(window.strapi.features.AUDIT_LOGS) &&\n    window.strapi?.flags?.promoteEE\n      ? [\n          {\n            intlLabel: { id: 'global.auditLogs', defaultMessage: 'Audit Logs' },\n            to: '/settings/purchase-audit-logs',\n            id: 'auditLogs-purchase-page',\n            licenseOnly: true,\n          },\n        ]\n      : []),\n  ],\n});\n"],"names":["ADMIN_PERMISSIONS_CE","contentManager","main","collectionTypesConfigurations","action","subject","componentsConfigurations","singleTypesConfigurations","marketplace","read","settings","roles","create","delete","update","users","webhooks","regenerate","plugins","HOOKS","INJECT_COLUMN_IN_TABLE","INJECT_LIST_VIEW_FILTERS","MUTATE_COLLECTION_TYPES_LINKS","MUTATE_EDIT_VIEW_LAYOUT","MUTATE_SINGLE_TYPES_LINKS","SETTINGS_LINKS_CE","global","intlLabel","id","defaultMessage","to","window","strapi","features","isEnabled","SSO","flags","promoteEE","licenseOnly","admin","AUDIT_LOGS"],"mappings":"MAIaA,oBAAAA,GAAuB;IAClCC,cAAAA,EAAgB;AACdC,QAAAA,IAAAA,EAAM,EAAE;QACRC,6BAAAA,EAA+B;AAC7B,YAAA;gBACEC,MAAAA,EAAQ,yDAAA;gBACRC,OAAAA,EAAS;AACX;AACD,SAAA;QACDC,wBAAAA,EAA0B;AACxB,YAAA;gBACEF,MAAAA,EAAQ,qDAAA;gBACRC,OAAAA,EAAS;AACX;AACD,SAAA;QACDE,yBAAAA,EAA2B;AACzB,YAAA;gBACEH,MAAAA,EAAQ,qDAAA;gBACRC,OAAAA,EAAS;AACX;AACD;AACH,KAAA;IACAG,WAAAA,EAAa;QACXN,IAAAA,EAAM;AAAC,YAAA;gBAAEE,MAAAA,EAAQ,yBAAA;gBAA2BC,OAAAA,EAAS;AAAK;AAAE,SAAA;QAC5DI,IAAAA,EAAM;AAAC,YAAA;gBAAEL,MAAAA,EAAQ,yBAAA;gBAA2BC,OAAAA,EAAS;AAAK;AAAE;AAC9D,KAAA;IACAK,QAAAA,EAAU;QACRC,KAAAA,EAAO;YACLT,IAAAA,EAAM;AACJ,gBAAA;oBAAEE,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK,iBAAA;AAC/C,gBAAA;oBAAED,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK,iBAAA;AAC/C,gBAAA;oBAAED,MAAAA,EAAQ,mBAAA;oBAAqBC,OAAAA,EAAS;AAAK,iBAAA;AAC7C,gBAAA;oBAAED,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAChD,aAAA;YACDO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC1DQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC1DI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,mBAAA;oBAAqBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACtDS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE;AAC5D,SAAA;QACAU,KAAAA,EAAO;YACLb,IAAAA,EAAM;AACJ,gBAAA;oBAAEE,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK,iBAAA;AAC/C,gBAAA;oBAAED,MAAAA,EAAQ,mBAAA;oBAAqBC,OAAAA,EAAS;AAAK,iBAAA;AAC7C,gBAAA;oBAAED,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK,iBAAA;AAC/C,gBAAA;oBAAED,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAChD,aAAA;YACDO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC1DQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC1DI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,mBAAA;oBAAqBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACtDS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE;AAC5D,SAAA;QACAW,QAAAA,EAAU;YACRd,IAAAA,EAAM;AACJ,gBAAA;oBAAEE,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK,iBAAA;AAClD,gBAAA;oBAAED,MAAAA,EAAQ,sBAAA;oBAAwBC,OAAAA,EAAS;AAAK,iBAAA;AAChD,gBAAA;oBAAED,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK,iBAAA;AAClD,gBAAA;oBAAED,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AACnD,aAAA;YACDO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC7DQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC7DI,IAAAA,EAAM;AACJ,gBAAA;oBAAEL,MAAAA,EAAQ,sBAAA;oBAAwBC,OAAAA,EAAS;AAAK,iBAAA;;AAEhD,gBAAA;oBAAED,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK,iBAAA;AAClD,gBAAA;oBAAED,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AACnD,aAAA;YACDS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE;AAC/D,SAAA;QACA,cAAA,EAAgB;YACdH,IAAAA,EAAM;AAAC,gBAAA;oBAAEE,MAAAA,EAAQ,4BAAA;oBAA8BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC/DO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,4BAAA;oBAA8BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACjEQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,4BAAA;oBAA8BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACjEI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC7DS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,4BAAA;oBAA8BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACjEY,UAAAA,EAAY;AAAC,gBAAA;oBAAEb,MAAAA,EAAQ,gCAAA;oBAAkCC,OAAAA,EAAS;AAAK;AAAE;AAC3E,SAAA;QACA,YAAA,EAAc;YACZH,IAAAA,EAAM;AAAC,gBAAA;oBAAEE,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC7DO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC/DQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC/DI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC3DS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC/DY,UAAAA,EAAY;AAAC,gBAAA;oBAAEb,MAAAA,EAAQ,8BAAA;oBAAgCC,OAAAA,EAAS;AAAK;AAAE;AACzE,SAAA;QACA,iBAAA,EAAmB;YACjBH,IAAAA,EAAM;AAAC,gBAAA;oBAAEE,MAAAA,EAAQ,+BAAA;oBAAiCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAClEO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,+BAAA;oBAAiCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACpEQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,+BAAA;oBAAiCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACpEI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,6BAAA;oBAA+BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAChES,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,+BAAA;oBAAiCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACpEY,UAAAA,EAAY;AAAC,gBAAA;oBAAEb,MAAAA,EAAQ,mCAAA;oBAAqCC,OAAAA,EAAS;AAAK;AAAE;AAC9E,SAAA;QACA,kBAAA,EAAoB;YAClBI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,8BAAA;oBAAgCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACjES,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,gCAAA;oBAAkCC,OAAAA,EAAS;AAAK;AAAE;AACvE,SAAA;QACAa,OAAAA,EAAS;YACPhB,IAAAA,EAAM;AAAC,gBAAA;oBAAEE,MAAAA,EAAQ,yBAAA;oBAA2BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC5DI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,yBAAA;oBAA2BC,OAAAA,EAAS;AAAK;AAAE;AAC9D;AACF;AACF;MAEac,KAAAA,GAAQ;AACnB;;;;AAIC,MACDC,sBAAAA,EAAwB,gDAAA;AAExB;;;;AAIC,MACDC,wBAAAA,EAA0B,2CAAA;AAE1B;;;;AAIC,MACDC,6BAAAA,EAA+B,kDAAA;AAE/B;;;;AAIC,MACDC,uBAAAA,EAAyB,iDAAA;AAEzB;;;;AAIC,MACDC,yBAAAA,EAA2B;AAC7B;AAYO,MAAMC,iBAAAA,GAAoB,KAAqB;QACpDC,MAAAA,EAAQ;AACN,YAAA;gBACEC,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,4BAAA;oBAA8BC,cAAAA,EAAgB;AAAW,iBAAA;gBAC1EC,EAAAA,EAAI,6BAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,yBAAA;oBAA2BC,cAAAA,EAAgB;AAAW,iBAAA;gBACvEC,EAAAA,EAAI,oBAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,0BAAA;oBAA4BC,cAAAA,EAAgB;AAAa,iBAAA;gBAC1EC,EAAAA,EAAI,oCAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,+BAAA;oBAAiCC,cAAAA,EAAgB;AAAkB,iBAAA;gBACpFC,EAAAA,EAAI,yCAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBACTC,EAAAA,EAAI,gBAAA;oBACJC,cAAAA,EAAgB;AAClB,iBAAA;gBACAC,EAAAA,EAAI,wBAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;;;AAGI,YAAA,GAAA,CAACG,OAAOC,MAAM,CAACC,QAAQ,CAACC,SAAS,CAACH,MAAAA,CAAOC,MAAM,CAACC,QAAQ,CAACE,GAAG,CAAA,IAChEJ,OAAOC,MAAM,EAAEI,OAAOC,SAAAA,GAClB;AACE,gBAAA;oBACEV,SAAAA,EAAW;wBAAEC,EAAAA,EAAI,oBAAA;wBAAsBC,cAAAA,EAAgB;AAAiB,qBAAA;oBACxEC,EAAAA,EAAI,mCAAA;oBACJF,EAAAA,EAAI,mBAAA;oBACJU,WAAAA,EAAa;AACf;AACD,aAAA,GACD,EAAE;AACF,YAAA,GAAA,CAACP,MAAAA,CAAOC,MAAM,CAACC,QAAQ,CAACC,SAAS,CAAC,qBAAA,CAAA,IAA0BH,MAAAA,CAAOC,MAAM,EAAEI,KAAAA,EAAOC,SAAAA,GAClF;AACE,gBAAA;oBACEV,SAAAA,EAAW;wBAAEC,EAAAA,EAAI,gCAAA;wBAAkCC,cAAAA,EAAgB;AAAkB,qBAAA;oBACrFC,EAAAA,EAAI,oCAAA;oBACJF,EAAAA,EAAI,+BAAA;oBACJU,WAAAA,EAAa;AACf;AACD,aAAA,GACD;AACL,SAAA;QAEDC,KAAAA,EAAO;AACL,YAAA;gBACEZ,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,cAAA;oBAAgBC,cAAAA,EAAgB;AAAQ,iBAAA;gBACzDC,EAAAA,EAAI,iBAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,cAAA;oBAAgBC,cAAAA,EAAgB;AAAQ,iBAAA;;gBAEzDC,EAAAA,EAAI,mDAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,4BAAA;oBAA8BC,cAAAA,EAAgB;AAAe,iBAAA;gBAC9EC,EAAAA,EAAI,wBAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACI,YAAA,GAAA,CAACG,OAAOC,MAAM,CAACC,QAAQ,CAACC,SAAS,CAACH,MAAAA,CAAOC,MAAM,CAACC,QAAQ,CAACO,UAAU,CAAA,IACvET,OAAOC,MAAM,EAAEI,OAAOC,SAAAA,GAClB;AACE,gBAAA;oBACEV,SAAAA,EAAW;wBAAEC,EAAAA,EAAI,kBAAA;wBAAoBC,cAAAA,EAAgB;AAAa,qBAAA;oBAClEC,EAAAA,EAAI,+BAAA;oBACJF,EAAAA,EAAI,yBAAA;oBACJU,WAAAA,EAAa;AACf;AACD,aAAA,GACD;AACL;AACH,KAAA;;;;"}
+{"version":3,"file":"constants.mjs","sources":["../../../../admin/src/constants.ts"],"sourcesContent":["import { PermissionMap } from './types/permissions';\n\nimport type { StrapiAppSettingLink } from './core/apis/router';\n\nexport const ADMIN_PERMISSIONS_CE = {\n  contentManager: {\n    main: [],\n    collectionTypesConfigurations: [\n      {\n        action: 'plugin::content-manager.collection-types.configure-view',\n        subject: null,\n      },\n    ],\n    componentsConfigurations: [\n      {\n        action: 'plugin::content-manager.components.configure-layout',\n        subject: null,\n      },\n    ],\n    singleTypesConfigurations: [\n      {\n        action: 'plugin::content-manager.single-types.configure-view',\n        subject: null,\n      },\n    ],\n  },\n  marketplace: {\n    main: [{ action: 'admin::marketplace.read', subject: null }],\n    read: [{ action: 'admin::marketplace.read', subject: null }],\n  },\n  settings: {\n    roles: {\n      main: [\n        { action: 'admin::roles.create', subject: null },\n        { action: 'admin::roles.update', subject: null },\n        { action: 'admin::roles.read', subject: null },\n        { action: 'admin::roles.delete', subject: null },\n      ],\n      create: [{ action: 'admin::roles.create', subject: null }],\n      delete: [{ action: 'admin::roles.delete', subject: null }],\n      read: [{ action: 'admin::roles.read', subject: null }],\n      update: [{ action: 'admin::roles.update', subject: null }],\n    },\n    users: {\n      main: [\n        { action: 'admin::users.create', subject: null },\n        { action: 'admin::users.read', subject: null },\n        { action: 'admin::users.update', subject: null },\n        { action: 'admin::users.delete', subject: null },\n      ],\n      create: [{ action: 'admin::users.create', subject: null }],\n      delete: [{ action: 'admin::users.delete', subject: null }],\n      read: [{ action: 'admin::users.read', subject: null }],\n      update: [{ action: 'admin::users.update', subject: null }],\n    },\n    webhooks: {\n      main: [\n        { action: 'admin::webhooks.create', subject: null },\n        { action: 'admin::webhooks.read', subject: null },\n        { action: 'admin::webhooks.update', subject: null },\n        { action: 'admin::webhooks.delete', subject: null },\n      ],\n      create: [{ action: 'admin::webhooks.create', subject: null }],\n      delete: [{ action: 'admin::webhooks.delete', subject: null }],\n      read: [\n        { action: 'admin::webhooks.read', subject: null },\n        // NOTE: We need to check with the API\n        { action: 'admin::webhooks.update', subject: null },\n        { action: 'admin::webhooks.delete', subject: null },\n      ],\n      update: [{ action: 'admin::webhooks.update', subject: null }],\n    },\n    'admin-tokens': {\n      main: [{ action: 'admin::admin-tokens.access', subject: null }],\n      create: [{ action: 'admin::admin-tokens.create', subject: null }],\n      delete: [{ action: 'admin::admin-tokens.delete', subject: null }],\n      read: [{ action: 'admin::admin-tokens.read', subject: null }],\n      update: [{ action: 'admin::admin-tokens.update', subject: null }],\n      regenerate: [{ action: 'admin::admin-tokens.regenerate', subject: null }],\n    },\n    'api-tokens': {\n      main: [{ action: 'admin::api-tokens.access', subject: null }],\n      create: [{ action: 'admin::api-tokens.create', subject: null }],\n      delete: [{ action: 'admin::api-tokens.delete', subject: null }],\n      read: [{ action: 'admin::api-tokens.read', subject: null }],\n      update: [{ action: 'admin::api-tokens.update', subject: null }],\n      regenerate: [{ action: 'admin::api-tokens.regenerate', subject: null }],\n    },\n    'transfer-tokens': {\n      main: [{ action: 'admin::transfer.tokens.access', subject: null }],\n      create: [{ action: 'admin::transfer.tokens.create', subject: null }],\n      delete: [{ action: 'admin::transfer.tokens.delete', subject: null }],\n      read: [{ action: 'admin::transfer.tokens.read', subject: null }],\n      update: [{ action: 'admin::transfer.tokens.update', subject: null }],\n      regenerate: [{ action: 'admin::transfer.tokens.regenerate', subject: null }],\n    },\n    'project-settings': {\n      read: [{ action: 'admin::project-settings.read', subject: null }],\n      update: [{ action: 'admin::project-settings.update', subject: null }],\n    },\n    'debug-dump': {\n      main: [{ action: 'admin::debug-dump.read', subject: null }],\n      read: [{ action: 'admin::debug-dump.read', subject: null }],\n    },\n    plugins: {\n      main: [{ action: 'admin::marketplace.read', subject: null }],\n      read: [{ action: 'admin::marketplace.read', subject: null }],\n    },\n  },\n} satisfies Partial<PermissionMap>;\n\nexport const HOOKS = {\n  /**\n   * Hook that allows to mutate the displayed headers of the list view table\n   * @constant\n   * @type {string}\n   */\n  INJECT_COLUMN_IN_TABLE: 'Admin/CM/pages/ListView/inject-column-in-table',\n\n  /**\n   * Hook that allows to mutate the displayed filters of the list view\n   * @constant\n   * @type {string}\n   */\n  INJECT_LIST_VIEW_FILTERS: 'Admin/CM/pages/ListView/inject-in-filters',\n\n  /**\n   * Hook that allows to mutate the CM's collection types links pre-set filters\n   * @constant\n   * @type {string}\n   */\n  MUTATE_COLLECTION_TYPES_LINKS: 'Admin/CM/pages/App/mutate-collection-types-links',\n\n  /**\n   * Hook that allows to mutate the CM's edit view layout\n   * @constant\n   * @type {string}\n   */\n  MUTATE_EDIT_VIEW_LAYOUT: 'Admin/CM/pages/EditView/mutate-edit-view-layout',\n\n  /**\n   * Hook that allows to mutate the CM's single types links pre-set filters\n   * @constant\n   * @type {string}\n   */\n  MUTATE_SINGLE_TYPES_LINKS: 'Admin/CM/pages/App/mutate-single-types-links',\n};\n\nexport interface SettingsMenuLink extends Omit<\n  StrapiAppSettingLink,\n  'Component' | 'permissions' | 'licenseOnly'\n> {\n  licenseOnly?: boolean;\n}\n\nexport type SettingsMenu = {\n  admin: SettingsMenuLink[];\n  global: SettingsMenuLink[];\n};\n\nexport const SETTINGS_LINKS_CE = (): SettingsMenu => ({\n  global: [\n    {\n      intlLabel: { id: 'Settings.application.title', defaultMessage: 'Overview' },\n      to: '/settings/application-infos',\n      id: '000-application-infos',\n    },\n    {\n      intlLabel: { id: 'Settings.webhooks.title', defaultMessage: 'Webhooks' },\n      to: '/settings/webhooks',\n      id: 'webhooks',\n    },\n    {\n      intlLabel: { id: 'Settings.apiTokens.title', defaultMessage: 'API Tokens' },\n      to: '/settings/api-tokens?sort=name:ASC',\n      id: 'api-tokens',\n    },\n    {\n      intlLabel: { id: 'Settings.transferTokens.title', defaultMessage: 'Transfer Tokens' },\n      to: '/settings/transfer-tokens?sort=name:ASC',\n      id: 'transfer-tokens',\n    },\n    {\n      intlLabel: {\n        id: 'global.plugins',\n        defaultMessage: 'Plugins',\n      },\n      to: '/settings/list-plugins',\n      id: 'plugins',\n    },\n    // If the Enterprise/Cloud feature is not enabled and if the config doesn't disable it, we promote the Enterprise/Cloud feature by displaying them in the settings menu.\n    // Disable this by adding \"promoteEE: false\" to your `./config/admin.js` file\n    ...(!window.strapi.features.isEnabled(window.strapi.features.SSO) &&\n    window.strapi?.flags?.promoteEE\n      ? [\n          {\n            intlLabel: { id: 'Settings.sso.title', defaultMessage: 'Single Sign-On' },\n            to: '/settings/purchase-single-sign-on',\n            id: 'sso-purchase-page',\n            licenseOnly: true,\n          },\n        ]\n      : []),\n    ...(!window.strapi.features.isEnabled('cms-content-history') && window.strapi?.flags?.promoteEE\n      ? [\n          {\n            intlLabel: { id: 'Settings.content-history.title', defaultMessage: 'Content History' },\n            to: '/settings/purchase-content-history',\n            id: 'content-history-purchase-page',\n            licenseOnly: true,\n          },\n        ]\n      : []),\n  ],\n\n  admin: [\n    {\n      intlLabel: { id: 'global.roles', defaultMessage: 'Roles' },\n      to: '/settings/roles',\n      id: 'roles',\n    },\n    {\n      intlLabel: { id: 'global.users', defaultMessage: 'Users' },\n      // Init the search params directly\n      to: '/settings/users?pageSize=10&page=1&sort=firstname',\n      id: 'users',\n    },\n    {\n      intlLabel: { id: 'Settings.adminTokens.title', defaultMessage: 'Admin Tokens' },\n      to: '/settings/admin-tokens',\n      id: 'admin-tokens',\n    },\n    ...(!window.strapi.features.isEnabled(window.strapi.features.AUDIT_LOGS) &&\n    window.strapi?.flags?.promoteEE\n      ? [\n          {\n            intlLabel: { id: 'global.auditLogs', defaultMessage: 'Audit Logs' },\n            to: '/settings/purchase-audit-logs',\n            id: 'auditLogs-purchase-page',\n            licenseOnly: true,\n          },\n        ]\n      : []),\n  ],\n});\n"],"names":["ADMIN_PERMISSIONS_CE","contentManager","main","collectionTypesConfigurations","action","subject","componentsConfigurations","singleTypesConfigurations","marketplace","read","settings","roles","create","delete","update","users","webhooks","regenerate","plugins","HOOKS","INJECT_COLUMN_IN_TABLE","INJECT_LIST_VIEW_FILTERS","MUTATE_COLLECTION_TYPES_LINKS","MUTATE_EDIT_VIEW_LAYOUT","MUTATE_SINGLE_TYPES_LINKS","SETTINGS_LINKS_CE","global","intlLabel","id","defaultMessage","to","window","strapi","features","isEnabled","SSO","flags","promoteEE","licenseOnly","admin","AUDIT_LOGS"],"mappings":"MAIaA,oBAAAA,GAAuB;IAClCC,cAAAA,EAAgB;AACdC,QAAAA,IAAAA,EAAM,EAAE;QACRC,6BAAAA,EAA+B;AAC7B,YAAA;gBACEC,MAAAA,EAAQ,yDAAA;gBACRC,OAAAA,EAAS;AACX;AACD,SAAA;QACDC,wBAAAA,EAA0B;AACxB,YAAA;gBACEF,MAAAA,EAAQ,qDAAA;gBACRC,OAAAA,EAAS;AACX;AACD,SAAA;QACDE,yBAAAA,EAA2B;AACzB,YAAA;gBACEH,MAAAA,EAAQ,qDAAA;gBACRC,OAAAA,EAAS;AACX;AACD;AACH,KAAA;IACAG,WAAAA,EAAa;QACXN,IAAAA,EAAM;AAAC,YAAA;gBAAEE,MAAAA,EAAQ,yBAAA;gBAA2BC,OAAAA,EAAS;AAAK;AAAE,SAAA;QAC5DI,IAAAA,EAAM;AAAC,YAAA;gBAAEL,MAAAA,EAAQ,yBAAA;gBAA2BC,OAAAA,EAAS;AAAK;AAAE;AAC9D,KAAA;IACAK,QAAAA,EAAU;QACRC,KAAAA,EAAO;YACLT,IAAAA,EAAM;AACJ,gBAAA;oBAAEE,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK,iBAAA;AAC/C,gBAAA;oBAAED,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK,iBAAA;AAC/C,gBAAA;oBAAED,MAAAA,EAAQ,mBAAA;oBAAqBC,OAAAA,EAAS;AAAK,iBAAA;AAC7C,gBAAA;oBAAED,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAChD,aAAA;YACDO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC1DQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC1DI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,mBAAA;oBAAqBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACtDS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE;AAC5D,SAAA;QACAU,KAAAA,EAAO;YACLb,IAAAA,EAAM;AACJ,gBAAA;oBAAEE,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK,iBAAA;AAC/C,gBAAA;oBAAED,MAAAA,EAAQ,mBAAA;oBAAqBC,OAAAA,EAAS;AAAK,iBAAA;AAC7C,gBAAA;oBAAED,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK,iBAAA;AAC/C,gBAAA;oBAAED,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAChD,aAAA;YACDO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC1DQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC1DI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,mBAAA;oBAAqBC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACtDS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,qBAAA;oBAAuBC,OAAAA,EAAS;AAAK;AAAE;AAC5D,SAAA;QACAW,QAAAA,EAAU;YACRd,IAAAA,EAAM;AACJ,gBAAA;oBAAEE,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK,iBAAA;AAClD,gBAAA;oBAAED,MAAAA,EAAQ,sBAAA;oBAAwBC,OAAAA,EAAS;AAAK,iBAAA;AAChD,gBAAA;oBAAED,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK,iBAAA;AAClD,gBAAA;oBAAED,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AACnD,aAAA;YACDO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC7DQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC7DI,IAAAA,EAAM;AACJ,gBAAA;oBAAEL,MAAAA,EAAQ,sBAAA;oBAAwBC,OAAAA,EAAS;AAAK,iBAAA;;AAEhD,gBAAA;oBAAED,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK,iBAAA;AAClD,gBAAA;oBAAED,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AACnD,aAAA;YACDS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE;AAC/D,SAAA;QACA,cAAA,EAAgB;YACdH,IAAAA,EAAM;AAAC,gBAAA;oBAAEE,MAAAA,EAAQ,4BAAA;oBAA8BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC/DO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,4BAAA;oBAA8BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACjEQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,4BAAA;oBAA8BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACjEI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC7DS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,4BAAA;oBAA8BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACjEY,UAAAA,EAAY;AAAC,gBAAA;oBAAEb,MAAAA,EAAQ,gCAAA;oBAAkCC,OAAAA,EAAS;AAAK;AAAE;AAC3E,SAAA;QACA,YAAA,EAAc;YACZH,IAAAA,EAAM;AAAC,gBAAA;oBAAEE,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC7DO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC/DQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC/DI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC3DS,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,0BAAA;oBAA4BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC/DY,UAAAA,EAAY;AAAC,gBAAA;oBAAEb,MAAAA,EAAQ,8BAAA;oBAAgCC,OAAAA,EAAS;AAAK;AAAE;AACzE,SAAA;QACA,iBAAA,EAAmB;YACjBH,IAAAA,EAAM;AAAC,gBAAA;oBAAEE,MAAAA,EAAQ,+BAAA;oBAAiCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAClEO,MAAAA,EAAQ;AAAC,gBAAA;oBAAER,MAAAA,EAAQ,+BAAA;oBAAiCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACpEQ,MAAAA,EAAQ;AAAC,gBAAA;oBAAET,MAAAA,EAAQ,+BAAA;oBAAiCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACpEI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,6BAAA;oBAA+BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAChES,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,+BAAA;oBAAiCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACpEY,UAAAA,EAAY;AAAC,gBAAA;oBAAEb,MAAAA,EAAQ,mCAAA;oBAAqCC,OAAAA,EAAS;AAAK;AAAE;AAC9E,SAAA;QACA,kBAAA,EAAoB;YAClBI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,8BAAA;oBAAgCC,OAAAA,EAAS;AAAK;AAAE,aAAA;YACjES,MAAAA,EAAQ;AAAC,gBAAA;oBAAEV,MAAAA,EAAQ,gCAAA;oBAAkCC,OAAAA,EAAS;AAAK;AAAE;AACvE,SAAA;QACA,YAAA,EAAc;YACZH,IAAAA,EAAM;AAAC,gBAAA;oBAAEE,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC3DI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,wBAAA;oBAA0BC,OAAAA,EAAS;AAAK;AAAE;AAC7D,SAAA;QACAa,OAAAA,EAAS;YACPhB,IAAAA,EAAM;AAAC,gBAAA;oBAAEE,MAAAA,EAAQ,yBAAA;oBAA2BC,OAAAA,EAAS;AAAK;AAAE,aAAA;YAC5DI,IAAAA,EAAM;AAAC,gBAAA;oBAAEL,MAAAA,EAAQ,yBAAA;oBAA2BC,OAAAA,EAAS;AAAK;AAAE;AAC9D;AACF;AACF;MAEac,KAAAA,GAAQ;AACnB;;;;AAIC,MACDC,sBAAAA,EAAwB,gDAAA;AAExB;;;;AAIC,MACDC,wBAAAA,EAA0B,2CAAA;AAE1B;;;;AAIC,MACDC,6BAAAA,EAA+B,kDAAA;AAE/B;;;;AAIC,MACDC,uBAAAA,EAAyB,iDAAA;AAEzB;;;;AAIC,MACDC,yBAAAA,EAA2B;AAC7B;AAcO,MAAMC,iBAAAA,GAAoB,KAAqB;QACpDC,MAAAA,EAAQ;AACN,YAAA;gBACEC,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,4BAAA;oBAA8BC,cAAAA,EAAgB;AAAW,iBAAA;gBAC1EC,EAAAA,EAAI,6BAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,yBAAA;oBAA2BC,cAAAA,EAAgB;AAAW,iBAAA;gBACvEC,EAAAA,EAAI,oBAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,0BAAA;oBAA4BC,cAAAA,EAAgB;AAAa,iBAAA;gBAC1EC,EAAAA,EAAI,oCAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,+BAAA;oBAAiCC,cAAAA,EAAgB;AAAkB,iBAAA;gBACpFC,EAAAA,EAAI,yCAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBACTC,EAAAA,EAAI,gBAAA;oBACJC,cAAAA,EAAgB;AAClB,iBAAA;gBACAC,EAAAA,EAAI,wBAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;;;AAGI,YAAA,GAAA,CAACG,OAAOC,MAAM,CAACC,QAAQ,CAACC,SAAS,CAACH,MAAAA,CAAOC,MAAM,CAACC,QAAQ,CAACE,GAAG,CAAA,IAChEJ,OAAOC,MAAM,EAAEI,OAAOC,SAAAA,GAClB;AACE,gBAAA;oBACEV,SAAAA,EAAW;wBAAEC,EAAAA,EAAI,oBAAA;wBAAsBC,cAAAA,EAAgB;AAAiB,qBAAA;oBACxEC,EAAAA,EAAI,mCAAA;oBACJF,EAAAA,EAAI,mBAAA;oBACJU,WAAAA,EAAa;AACf;AACD,aAAA,GACD,EAAE;AACF,YAAA,GAAA,CAACP,MAAAA,CAAOC,MAAM,CAACC,QAAQ,CAACC,SAAS,CAAC,qBAAA,CAAA,IAA0BH,MAAAA,CAAOC,MAAM,EAAEI,KAAAA,EAAOC,SAAAA,GAClF;AACE,gBAAA;oBACEV,SAAAA,EAAW;wBAAEC,EAAAA,EAAI,gCAAA;wBAAkCC,cAAAA,EAAgB;AAAkB,qBAAA;oBACrFC,EAAAA,EAAI,oCAAA;oBACJF,EAAAA,EAAI,+BAAA;oBACJU,WAAAA,EAAa;AACf;AACD,aAAA,GACD;AACL,SAAA;QAEDC,KAAAA,EAAO;AACL,YAAA;gBACEZ,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,cAAA;oBAAgBC,cAAAA,EAAgB;AAAQ,iBAAA;gBACzDC,EAAAA,EAAI,iBAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,cAAA;oBAAgBC,cAAAA,EAAgB;AAAQ,iBAAA;;gBAEzDC,EAAAA,EAAI,mDAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACA,YAAA;gBACED,SAAAA,EAAW;oBAAEC,EAAAA,EAAI,4BAAA;oBAA8BC,cAAAA,EAAgB;AAAe,iBAAA;gBAC9EC,EAAAA,EAAI,wBAAA;gBACJF,EAAAA,EAAI;AACN,aAAA;AACI,YAAA,GAAA,CAACG,OAAOC,MAAM,CAACC,QAAQ,CAACC,SAAS,CAACH,MAAAA,CAAOC,MAAM,CAACC,QAAQ,CAACO,UAAU,CAAA,IACvET,OAAOC,MAAM,EAAEI,OAAOC,SAAAA,GAClB;AACE,gBAAA;oBACEV,SAAAA,EAAW;wBAAEC,EAAAA,EAAI,kBAAA;wBAAoBC,cAAAA,EAAgB;AAAa,qBAAA;oBAClEC,EAAAA,EAAI,+BAAA;oBACJF,EAAAA,EAAI,yBAAA;oBACJU,WAAAA,EAAa;AACf;AACD,aAAA,GACD;AACL;AACH,KAAA;;;;"}

package/dist/admin/admin/src/core/apis/Plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"Plugin.js","sources":["../../../../../../admin/src/core/apis/Plugin.ts"],"sourcesContent":["/* eslint-disable check-file/filename-naming-convention */\nimport * as React from 'react';\n\nimport { immerable } from 'immer';\n\nexport interface PluginConfig\n  extends Partial<Pick<Plugin, 'apis' | 'initializer' | 'injectionZones' | 'isReady'>> {\n  name: string;\n  id: string;\n}\n\nexport class Plugin {\n  [immerable] = true;\n\n  apis: Record<string, unknown>;\n  initializer: React.ComponentType<{ setPlugin(_pluginId: string): void }> | null;\n  injectionZones: Record<\n    string,\n    Record<string, Array<{ name: string; Component: React.ComponentType }>>\n  >;\n  isReady: boolean;\n  name: string;\n  pluginId: PluginConfig['id'];\n\n  constructor(pluginConf: PluginConfig) {\n    this.apis = pluginConf.apis || {};\n    this.initializer = pluginConf.initializer || null;\n    this.injectionZones = pluginConf.injectionZones || {};\n    this.isReady = pluginConf.isReady !== undefined ? pluginConf.isReady : true;\n    this.name = pluginConf.name;\n    this.pluginId = pluginConf.id;\n  }\n\n  getInjectedComponents(containerName: string, blockName: string) {\n    try {\n      return this.injectionZones[containerName][blockName] || [];\n    } catch (err) {\n      console.error('Cannot get injected component', err);\n\n      return [];\n    }\n  }\n\n  injectComponent(\n    containerName: string,\n    blockName: string,\n    component: { name: string; Component: React.ComponentType }\n  ) {\n    try {\n      this.injectionZones[containerName][blockName].push(component);\n    } catch (err) {\n      console.error('Cannot inject component', err);\n    }\n  }\n}\n"],"names":["Plugin","getInjectedComponents","containerName","blockName","injectionZones","err","console","error","injectComponent","component","push","pluginConf","immerable","apis","initializer","isReady","undefined","name","pluginId","id"],"mappings":";;;;AAWO,MAAMA,MAAAA,CAAAA;IAsBXC,qBAAAA,CAAsBC,aAAqB,EAAEC,SAAiB,EAAE;QAC9D,IAAI;YACF,OAAO,IAAI,CAACC,cAAc,CAACF,cAAc,CAACC,SAAAA,CAAU,IAAI,EAAE;AAC5D,QAAA,CAAA,CAAE,OAAOE,GAAAA,EAAK;YACZC,OAAAA,CAAQC,KAAK,CAAC,+BAAA,EAAiCF,GAAAA,CAAAA;AAE/C,YAAA,OAAO,EAAE;AACX,QAAA;AACF,IAAA;AAEAG,IAAAA,eAAAA,CACEN,aAAqB,EACrBC,SAAiB,EACjBM,SAA2D,EAC3D;QACA,IAAI;YACF,IAAI,CAACL,cAAc,CAACF,aAAAA,CAAc,CAACC,SAAAA,CAAU,CAACO,IAAI,CAACD,SAAAA,CAAAA;AACrD,QAAA,CAAA,CAAE,OAAOJ,GAAAA,EAAK;YACZC,OAAAA,CAAQC,KAAK,CAAC,yBAAA,EAA2BF,GAAAA,CAAAA;AAC3C,QAAA;AACF,IAAA;AA7BA,IAAA,WAAA,CAAYM,UAAwB,CAAE;AAZtC,QAAA,IAAA,CAACC,gBAAU,GAAG,IAAA;AAaZ,QAAA,IAAI,CAACC,IAAI,GAAGF,UAAAA,CAAWE,IAAI,IAAI,EAAC;AAChC,QAAA,IAAI,CAACC,WAAW,GAAGH,UAAAA,CAAWG,WAAW,IAAI,IAAA;AAC7C,QAAA,IAAI,CAACV,cAAc,GAAGO,UAAAA,CAAWP,cAAc,IAAI,EAAC;QACpD,IAAI,CAACW,OAAO,GAAGJ,UAAAA,CAAWI,OAAO,KAAKC,SAAAA,GAAYL,UAAAA,CAAWI,OAAO,GAAG,IAAA;AACvE,QAAA,IAAI,CAACE,IAAI,GAAGN,UAAAA,CAAWM,IAAI;AAC3B,QAAA,IAAI,CAACC,QAAQ,GAAGP,UAAAA,CAAWQ,EAAE;AAC/B,IAAA;AAuBF;;;;"}
+{"version":3,"file":"Plugin.js","sources":["../../../../../../admin/src/core/apis/Plugin.ts"],"sourcesContent":["/* eslint-disable check-file/filename-naming-convention */\nimport * as React from 'react';\n\nimport { immerable } from 'immer';\n\nexport interface PluginConfig extends Partial<\n  Pick<Plugin, 'apis' | 'initializer' | 'injectionZones' | 'isReady'>\n> {\n  name: string;\n  id: string;\n}\n\nexport class Plugin {\n  [immerable] = true;\n\n  apis: Record<string, unknown>;\n  initializer: React.ComponentType<{ setPlugin(_pluginId: string): void }> | null;\n  injectionZones: Record<\n    string,\n    Record<string, Array<{ name: string; Component: React.ComponentType }>>\n  >;\n  isReady: boolean;\n  name: string;\n  pluginId: PluginConfig['id'];\n\n  constructor(pluginConf: PluginConfig) {\n    this.apis = pluginConf.apis || {};\n    this.initializer = pluginConf.initializer || null;\n    this.injectionZones = pluginConf.injectionZones || {};\n    this.isReady = pluginConf.isReady !== undefined ? pluginConf.isReady : true;\n    this.name = pluginConf.name;\n    this.pluginId = pluginConf.id;\n  }\n\n  getInjectedComponents(containerName: string, blockName: string) {\n    try {\n      return this.injectionZones[containerName][blockName] || [];\n    } catch (err) {\n      console.error('Cannot get injected component', err);\n\n      return [];\n    }\n  }\n\n  injectComponent(\n    containerName: string,\n    blockName: string,\n    component: { name: string; Component: React.ComponentType }\n  ) {\n    try {\n      this.injectionZones[containerName][blockName].push(component);\n    } catch (err) {\n      console.error('Cannot inject component', err);\n    }\n  }\n}\n"],"names":["Plugin","getInjectedComponents","containerName","blockName","injectionZones","err","console","error","injectComponent","component","push","pluginConf","immerable","apis","initializer","isReady","undefined","name","pluginId","id"],"mappings":";;;;AAYO,MAAMA,MAAAA,CAAAA;IAsBXC,qBAAAA,CAAsBC,aAAqB,EAAEC,SAAiB,EAAE;QAC9D,IAAI;YACF,OAAO,IAAI,CAACC,cAAc,CAACF,cAAc,CAACC,SAAAA,CAAU,IAAI,EAAE;AAC5D,QAAA,CAAA,CAAE,OAAOE,GAAAA,EAAK;YACZC,OAAAA,CAAQC,KAAK,CAAC,+BAAA,EAAiCF,GAAAA,CAAAA;AAE/C,YAAA,OAAO,EAAE;AACX,QAAA;AACF,IAAA;AAEAG,IAAAA,eAAAA,CACEN,aAAqB,EACrBC,SAAiB,EACjBM,SAA2D,EAC3D;QACA,IAAI;YACF,IAAI,CAACL,cAAc,CAACF,aAAAA,CAAc,CAACC,SAAAA,CAAU,CAACO,IAAI,CAACD,SAAAA,CAAAA;AACrD,QAAA,CAAA,CAAE,OAAOJ,GAAAA,EAAK;YACZC,OAAAA,CAAQC,KAAK,CAAC,yBAAA,EAA2BF,GAAAA,CAAAA;AAC3C,QAAA;AACF,IAAA;AA7BA,IAAA,WAAA,CAAYM,UAAwB,CAAE;AAZtC,QAAA,IAAA,CAACC,gBAAU,GAAG,IAAA;AAaZ,QAAA,IAAI,CAACC,IAAI,GAAGF,UAAAA,CAAWE,IAAI,IAAI,EAAC;AAChC,QAAA,IAAI,CAACC,WAAW,GAAGH,UAAAA,CAAWG,WAAW,IAAI,IAAA;AAC7C,QAAA,IAAI,CAACV,cAAc,GAAGO,UAAAA,CAAWP,cAAc,IAAI,EAAC;QACpD,IAAI,CAACW,OAAO,GAAGJ,UAAAA,CAAWI,OAAO,KAAKC,SAAAA,GAAYL,UAAAA,CAAWI,OAAO,GAAG,IAAA;AACvE,QAAA,IAAI,CAACE,IAAI,GAAGN,UAAAA,CAAWM,IAAI;AAC3B,QAAA,IAAI,CAACC,QAAQ,GAAGP,UAAAA,CAAWQ,EAAE;AAC/B,IAAA;AAuBF;;;;"}

package/dist/admin/admin/src/core/apis/Plugin.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"Plugin.mjs","sources":["../../../../../../admin/src/core/apis/Plugin.ts"],"sourcesContent":["/* eslint-disable check-file/filename-naming-convention */\nimport * as React from 'react';\n\nimport { immerable } from 'immer';\n\nexport interface PluginConfig\n  extends Partial<Pick<Plugin, 'apis' | 'initializer' | 'injectionZones' | 'isReady'>> {\n  name: string;\n  id: string;\n}\n\nexport class Plugin {\n  [immerable] = true;\n\n  apis: Record<string, unknown>;\n  initializer: React.ComponentType<{ setPlugin(_pluginId: string): void }> | null;\n  injectionZones: Record<\n    string,\n    Record<string, Array<{ name: string; Component: React.ComponentType }>>\n  >;\n  isReady: boolean;\n  name: string;\n  pluginId: PluginConfig['id'];\n\n  constructor(pluginConf: PluginConfig) {\n    this.apis = pluginConf.apis || {};\n    this.initializer = pluginConf.initializer || null;\n    this.injectionZones = pluginConf.injectionZones || {};\n    this.isReady = pluginConf.isReady !== undefined ? pluginConf.isReady : true;\n    this.name = pluginConf.name;\n    this.pluginId = pluginConf.id;\n  }\n\n  getInjectedComponents(containerName: string, blockName: string) {\n    try {\n      return this.injectionZones[containerName][blockName] || [];\n    } catch (err) {\n      console.error('Cannot get injected component', err);\n\n      return [];\n    }\n  }\n\n  injectComponent(\n    containerName: string,\n    blockName: string,\n    component: { name: string; Component: React.ComponentType }\n  ) {\n    try {\n      this.injectionZones[containerName][blockName].push(component);\n    } catch (err) {\n      console.error('Cannot inject component', err);\n    }\n  }\n}\n"],"names":["Plugin","getInjectedComponents","containerName","blockName","injectionZones","err","console","error","injectComponent","component","push","pluginConf","immerable","apis","initializer","isReady","undefined","name","pluginId","id"],"mappings":";;AAWO,MAAMA,MAAAA,CAAAA;IAsBXC,qBAAAA,CAAsBC,aAAqB,EAAEC,SAAiB,EAAE;QAC9D,IAAI;YACF,OAAO,IAAI,CAACC,cAAc,CAACF,cAAc,CAACC,SAAAA,CAAU,IAAI,EAAE;AAC5D,QAAA,CAAA,CAAE,OAAOE,GAAAA,EAAK;YACZC,OAAAA,CAAQC,KAAK,CAAC,+BAAA,EAAiCF,GAAAA,CAAAA;AAE/C,YAAA,OAAO,EAAE;AACX,QAAA;AACF,IAAA;AAEAG,IAAAA,eAAAA,CACEN,aAAqB,EACrBC,SAAiB,EACjBM,SAA2D,EAC3D;QACA,IAAI;YACF,IAAI,CAACL,cAAc,CAACF,aAAAA,CAAc,CAACC,SAAAA,CAAU,CAACO,IAAI,CAACD,SAAAA,CAAAA;AACrD,QAAA,CAAA,CAAE,OAAOJ,GAAAA,EAAK;YACZC,OAAAA,CAAQC,KAAK,CAAC,yBAAA,EAA2BF,GAAAA,CAAAA;AAC3C,QAAA;AACF,IAAA;AA7BA,IAAA,WAAA,CAAYM,UAAwB,CAAE;AAZtC,QAAA,IAAA,CAACC,UAAU,GAAG,IAAA;AAaZ,QAAA,IAAI,CAACC,IAAI,GAAGF,UAAAA,CAAWE,IAAI,IAAI,EAAC;AAChC,QAAA,IAAI,CAACC,WAAW,GAAGH,UAAAA,CAAWG,WAAW,IAAI,IAAA;AAC7C,QAAA,IAAI,CAACV,cAAc,GAAGO,UAAAA,CAAWP,cAAc,IAAI,EAAC;QACpD,IAAI,CAACW,OAAO,GAAGJ,UAAAA,CAAWI,OAAO,KAAKC,SAAAA,GAAYL,UAAAA,CAAWI,OAAO,GAAG,IAAA;AACvE,QAAA,IAAI,CAACE,IAAI,GAAGN,UAAAA,CAAWM,IAAI;AAC3B,QAAA,IAAI,CAACC,QAAQ,GAAGP,UAAAA,CAAWQ,EAAE;AAC/B,IAAA;AAuBF;;;;"}
+{"version":3,"file":"Plugin.mjs","sources":["../../../../../../admin/src/core/apis/Plugin.ts"],"sourcesContent":["/* eslint-disable check-file/filename-naming-convention */\nimport * as React from 'react';\n\nimport { immerable } from 'immer';\n\nexport interface PluginConfig extends Partial<\n  Pick<Plugin, 'apis' | 'initializer' | 'injectionZones' | 'isReady'>\n> {\n  name: string;\n  id: string;\n}\n\nexport class Plugin {\n  [immerable] = true;\n\n  apis: Record<string, unknown>;\n  initializer: React.ComponentType<{ setPlugin(_pluginId: string): void }> | null;\n  injectionZones: Record<\n    string,\n    Record<string, Array<{ name: string; Component: React.ComponentType }>>\n  >;\n  isReady: boolean;\n  name: string;\n  pluginId: PluginConfig['id'];\n\n  constructor(pluginConf: PluginConfig) {\n    this.apis = pluginConf.apis || {};\n    this.initializer = pluginConf.initializer || null;\n    this.injectionZones = pluginConf.injectionZones || {};\n    this.isReady = pluginConf.isReady !== undefined ? pluginConf.isReady : true;\n    this.name = pluginConf.name;\n    this.pluginId = pluginConf.id;\n  }\n\n  getInjectedComponents(containerName: string, blockName: string) {\n    try {\n      return this.injectionZones[containerName][blockName] || [];\n    } catch (err) {\n      console.error('Cannot get injected component', err);\n\n      return [];\n    }\n  }\n\n  injectComponent(\n    containerName: string,\n    blockName: string,\n    component: { name: string; Component: React.ComponentType }\n  ) {\n    try {\n      this.injectionZones[containerName][blockName].push(component);\n    } catch (err) {\n      console.error('Cannot inject component', err);\n    }\n  }\n}\n"],"names":["Plugin","getInjectedComponents","containerName","blockName","injectionZones","err","console","error","injectComponent","component","push","pluginConf","immerable","apis","initializer","isReady","undefined","name","pluginId","id"],"mappings":";;AAYO,MAAMA,MAAAA,CAAAA;IAsBXC,qBAAAA,CAAsBC,aAAqB,EAAEC,SAAiB,EAAE;QAC9D,IAAI;YACF,OAAO,IAAI,CAACC,cAAc,CAACF,cAAc,CAACC,SAAAA,CAAU,IAAI,EAAE;AAC5D,QAAA,CAAA,CAAE,OAAOE,GAAAA,EAAK;YACZC,OAAAA,CAAQC,KAAK,CAAC,+BAAA,EAAiCF,GAAAA,CAAAA;AAE/C,YAAA,OAAO,EAAE;AACX,QAAA;AACF,IAAA;AAEAG,IAAAA,eAAAA,CACEN,aAAqB,EACrBC,SAAiB,EACjBM,SAA2D,EAC3D;QACA,IAAI;YACF,IAAI,CAACL,cAAc,CAACF,aAAAA,CAAc,CAACC,SAAAA,CAAU,CAACO,IAAI,CAACD,SAAAA,CAAAA;AACrD,QAAA,CAAA,CAAE,OAAOJ,GAAAA,EAAK;YACZC,OAAAA,CAAQC,KAAK,CAAC,yBAAA,EAA2BF,GAAAA,CAAAA;AAC3C,QAAA;AACF,IAAA;AA7BA,IAAA,WAAA,CAAYM,UAAwB,CAAE;AAZtC,QAAA,IAAA,CAACC,UAAU,GAAG,IAAA;AAaZ,QAAA,IAAI,CAACC,IAAI,GAAGF,UAAAA,CAAWE,IAAI,IAAI,EAAC;AAChC,QAAA,IAAI,CAACC,WAAW,GAAGH,UAAAA,CAAWG,WAAW,IAAI,IAAA;AAC7C,QAAA,IAAI,CAACV,cAAc,GAAGO,UAAAA,CAAWP,cAAc,IAAI,EAAC;QACpD,IAAI,CAACW,OAAO,GAAGJ,UAAAA,CAAWI,OAAO,KAAKC,SAAAA,GAAYL,UAAAA,CAAWI,OAAO,GAAG,IAAA;AACvE,QAAA,IAAI,CAACE,IAAI,GAAGN,UAAAA,CAAWM,IAAI;AAC3B,QAAA,IAAI,CAACC,QAAQ,GAAGP,UAAAA,CAAWQ,EAAE;AAC/B,IAAA;AAuBF;;;;"}

package/dist/admin/admin/src/features/Auth.js

@@ -39,6 +39,7 @@ function _interopNamespace(e) {
 
 var React__namespace = /*#__PURE__*/_interopNamespace(React);
 
+const EMPTY_DEFAULT_PERMISSIONS = [];
 /**
  * ensure the Auth context never exposes a non-function for checkUserHasPermissions.
  * When this is undefined (e.g. context timing in production builds), consumers would throw
@@ -82,7 +83,7 @@ const isForcedLogout = (reason)=>reason === 'session-dead';
         }
     }
 };
-const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken = false })=>{
+const AuthProvider = ({ children, _defaultPermissions = EMPTY_DEFAULT_PERMISSIONS, _disableRenewToken = false })=>{
     const { formatMessage } = reactIntl.useIntl();
     const dispatch = hooks.useTypedDispatch();
     const runRbacMiddleware = StrapiApp.useStrapiApp('AuthProvider', (state)=>state.rbac.run);

package/dist/admin/admin/src/features/Auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.js","sources":["../../../../../admin/src/features/Auth.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { Dialog } from '@strapi/design-system';\nimport { useIntl, type MessageDescriptor } from 'react-intl';\nimport { useLocation, useNavigate } from 'react-router-dom';\n\nimport { Login } from '../../../shared/contracts/authentication';\nimport { ConfirmDialog } from '../components/ConfirmDialog';\nimport { createContext } from '../components/Context';\nimport { useTypedDispatch, useTypedSelector } from '../core/store/hooks';\nimport { useStrapiApp } from '../features/StrapiApp';\nimport { useQueryParams } from '../hooks/useQueryParams';\nimport { useSessionKeepalive } from '../hooks/useSessionKeepalive';\nimport {\n  getStoredToken,\n  login as loginAction,\n  logout as logoutAction,\n  setLocale,\n  setToken,\n} from '../reducer';\nimport { adminApi } from '../services/api';\nimport {\n  useGetMeQuery,\n  useGetMyPermissionsQuery,\n  useLazyCheckPermissionsQuery,\n  useLoginMutation,\n  useLogoutMutation,\n} from '../services/auth';\nimport { normalizeAdminLocale } from '../translations/normalizeAdminLocale';\nimport { getOrCreateDeviceId } from '../utils/deviceId';\nimport {\n  attemptTokenRefresh,\n  getFetchClient,\n  resetSessionExpiredNotification,\n  setOnSessionExpired,\n  setOnTokenUpdate,\n} from '../utils/getFetchClient';\nimport { hasUnsavedChanges } from '../utils/unsavedChangesRegistry';\n\nimport type {\n  Permission as PermissionContract,\n  SanitizedAdminUser,\n} from '../../../shared/contracts/shared';\n\ninterface Permission\n  extends Pick<PermissionContract, 'action' | 'subject'>,\n    Partial<Omit<PermissionContract, 'action' | 'subject'>> {}\n\ninterface User\n  extends Pick<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>,\n    Partial<Omit<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>> {}\n\ninterface AuthContextValue {\n  login: (\n    body: Login.Request['body'] & { rememberMe: boolean }\n  ) => Promise<Awaited<ReturnType<ReturnType<typeof useLoginMutation>[0]>>>;\n  logout: () => Promise<void>;\n  /**\n   * @alpha\n   * @description given a list of permissions, this function checks\n   * those against the current user's permissions or those passed as\n   * the second argument, if the user has those permissions the complete\n   * permission object form the API is returned. Therefore, if the list is\n   * empty, the user does not have any of those permissions.\n   */\n  checkUserHasPermissions: (\n    permissions?: Array<Pick<Permission, 'action'> & Partial<Omit<Permission, 'action'>>>,\n    passedPermissions?: Permission[],\n    rawQueryContext?: string\n  ) => Promise<Permission[]>;\n  isLoading: boolean;\n  permissions: Permission[];\n  refetchPermissions: () => Promise<void>;\n  token: string | null;\n  user?: User;\n}\n\n/**\n * ensure the Auth context never exposes a non-function for checkUserHasPermissions.\n * When this is undefined (e.g. context timing in production builds), consumers would throw\n * \"p is not a function\" / \"checkUserHasPermissions is not a function\". By always passing\n * a function here, all current and future consumers are protected without per-call-site guards.\n *\n * When would the fallback run? Only if the real checkUserHasPermissions were ever undefined\n * when we pass to the Provider (e.g. a rare timing/build edge case). In normal runs it is\n * always defined (useCallback), so the real function is passed and behavior is unchanged.\n *\n * If the fallback ever did run: it returns [] so consumers (which use .length > 0) treat it\n * as \"no permission\" for that render—under-permissive. On the next AuthProvider re-render we\n * pass the real function again, so the context updates and the view corrects quickly.\n * @see https://github.com/strapi/strapi/issues/24384\n */\nconst NOOP_CHECK_USER_HAS_PERMISSIONS: AuthContextValue['checkUserHasPermissions'] = async () => [];\n\nconst [Provider, useAuth] = createContext<AuthContextValue>('Auth');\n\ninterface AuthProviderProps {\n  children: React.ReactNode;\n  /**\n   * @internal could be removed at any time.\n   */\n  _defaultPermissions?: Permission[];\n\n  // NOTE: this is used for testing purposed only\n  _disableRenewToken?: boolean;\n}\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  STATUS: 'isLoggedIn',\n};\n\n/**\n * Why the session is ending.\n * - `voluntary`: explicit user logout — cancelable when there are unsaved edits.\n * - `session-dead`: server rejected the refresh (idle/max session window elapsed)\n *   — forced; Cancel / dismiss still clears client state.\n *\n * Short-lived access-token expiry is NOT a logout reason: idle tabs leave the\n * stale token in place and the next request refreshes (or hits session-dead).\n */\ntype LogoutReason = 'voluntary' | 'session-dead';\n\nconst isForcedLogout = (reason: LogoutReason) => reason === 'session-dead';\n\n/**\n * Copy for the unsaved-changes prompt. A server-confirmed dead session needs to\n * say *why* the dialog appeared, otherwise it reads as the usual navigation\n * blocker and users confirm straight through it.\n */\nconst LOGOUT_PROMPTS = {\n  voluntary: {\n    title: undefined,\n    body: {\n      id: 'global.prompt.unsaved',\n      defaultMessage: 'You have unsaved changes, are you sure you want to leave?',\n    },\n  },\n  'session-dead': {\n    title: {\n      id: 'app.session.ended.title',\n      defaultMessage: 'Session ended',\n    },\n    body: {\n      id: 'app.session.ended.unsaved',\n      defaultMessage:\n        \"Your session has ended and can't be resumed. Your unsaved changes will be lost when you log out.\",\n    },\n  },\n} satisfies Record<LogoutReason, { title?: MessageDescriptor; body: MessageDescriptor }>;\n\nconst AuthProvider = ({\n  children,\n  _defaultPermissions = [],\n  _disableRenewToken = false,\n}: AuthProviderProps) => {\n  const { formatMessage } = useIntl();\n  const dispatch = useTypedDispatch();\n  const runRbacMiddleware = useStrapiApp('AuthProvider', (state) => state.rbac.run);\n  const location = useLocation();\n  const [{ rawQuery }] = useQueryParams();\n\n  const locationRef = React.useRef(location);\n\n  // Update ref without causing re-render\n  React.useEffect(() => {\n    locationRef.current = location;\n  }, [location]);\n\n  const token = useTypedSelector((state) => state.admin_app.token ?? null);\n\n  const { data: user, isLoading: isLoadingUser } = useGetMeQuery(undefined, {\n    /**\n     * If there's no token, we don't try to fetch\n     * the user data because it will fail.\n     */\n    skip: !token,\n  });\n\n  const {\n    data: userPermissions = _defaultPermissions,\n    refetch,\n    isUninitialized,\n    isLoading: isLoadingPermissions,\n  } = useGetMyPermissionsQuery(undefined, {\n    skip: !token,\n  });\n\n  const navigate = useNavigate();\n\n  const [loginMutation] = useLoginMutation();\n  const [logoutMutation] = useLogoutMutation();\n\n  const pendingLogoutRef = React.useRef<(() => void) | null>(null);\n  const logoutGuardOpenRef = React.useRef(false);\n  const logoutGuardReasonRef = React.useRef<LogoutReason>('voluntary');\n  const [isSessionLogoutDialogOpen, setIsSessionLogoutDialogOpen] = React.useState(false);\n  const [sessionLogoutReason, setSessionLogoutReason] = React.useState<LogoutReason>('voluntary');\n\n  /**\n   * Prompt before discarding unsaved edits, then run `logoutFn`.\n   *\n   * - `voluntary`: Cancel leaves the user logged in (server session intact).\n   * - `session-dead`: the session is already unusable — Cancel (or dismiss)\n   *   still runs `logoutFn` so the client cannot keep a stale token. While the\n   *   dialog is open, a later `session-dead` request upgrades the pending action.\n   */\n  const runLogoutWithGuard = React.useCallback(\n    (logoutFn: () => void, reason: LogoutReason = 'voluntary') => {\n      if (logoutGuardOpenRef.current) {\n        pendingLogoutRef.current = logoutFn;\n        if (isForcedLogout(reason)) {\n          logoutGuardReasonRef.current = reason;\n          setSessionLogoutReason(reason);\n        }\n        return;\n      }\n\n      if (!hasUnsavedChanges()) {\n        logoutFn();\n        return;\n      }\n\n      logoutGuardOpenRef.current = true;\n      logoutGuardReasonRef.current = reason;\n      pendingLogoutRef.current = logoutFn;\n      setSessionLogoutReason(reason);\n      setIsSessionLogoutDialogOpen(true);\n    },\n    []\n  );\n\n  const performGlobalLogout = React.useCallback(() => {\n    void (async () => {\n      try {\n        const { post } = getFetchClient();\n        await post('/admin/logout');\n      } catch {\n        // The session may already be invalid.\n      }\n    })();\n\n    dispatch(adminApi.util.resetApiState());\n    dispatch(logoutAction());\n    navigate('/auth/login');\n  }, [dispatch, navigate]);\n\n  const clearStateAndLogout = React.useCallback(() => {\n    runLogoutWithGuard(performGlobalLogout, 'session-dead');\n  }, [performGlobalLogout, runLogoutWithGuard]);\n\n  const handleConfirmSessionLogout = React.useCallback(() => {\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    const logoutFn = pendingLogoutRef.current;\n    pendingLogoutRef.current = null;\n    logoutFn?.();\n  }, []);\n\n  const handleCancelSessionLogout = React.useCallback(() => {\n    const forced = isForcedLogout(logoutGuardReasonRef.current);\n    const logoutFn = pendingLogoutRef.current;\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    pendingLogoutRef.current = null;\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    // Forced paths: session is already dead — dismiss must still clear client state.\n    if (forced) {\n      logoutFn?.();\n    }\n  }, []);\n\n  const handleSessionLogoutDialogOpenChange = React.useCallback(\n    (open: boolean) => {\n      if (!open) {\n        handleCancelSessionLogout();\n      }\n    },\n    [handleCancelSessionLogout]\n  );\n\n  const resyncToken = React.useCallback(\n    (newToken: string) => {\n      dispatch(setToken(newToken));\n    },\n    [dispatch]\n  );\n\n  /**\n   * Track the timestamp of the user's last interaction. This is the activity\n   * signal `useSessionKeepalive` uses to tell an active user (silently renew\n   * their session) apart from a genuinely idle one (leave the stale access\n   * token alone until the next request). Successful API calls don't refresh\n   * the short-lived access token on their own, so without this an\n   * actively-working user would hit a 401 the moment the token expires.\n   */\n  const lastActivityRef = React.useRef(Date.now());\n  React.useEffect(() => {\n    const markActivity = () => {\n      lastActivityRef.current = Date.now();\n    };\n    const events = ['pointerdown', 'keydown', 'click', 'scroll', 'touchstart'];\n    events.forEach((event) =>\n      window.addEventListener(event, markActivity, { passive: true, capture: true })\n    );\n\n    return () => {\n      events.forEach((event) => window.removeEventListener(event, markActivity, { capture: true }));\n    };\n  }, []);\n  const getLastActivityAt = React.useCallback(() => lastActivityRef.current, []);\n\n  /**\n   * Silently rotate the refresh token and mint a new access token. Returns\n   * `true` on success (the resulting `setToken` re-arms the renew timer) and\n   * `false` when the server rejects it (session genuinely over).\n   */\n  const renewSession = React.useCallback(async () => {\n    try {\n      await attemptTokenRefresh();\n      return true;\n    } catch {\n      return false;\n    }\n  }, []);\n\n  React.useEffect(() => {\n    if (user) {\n      if (user.preferedLanguage) {\n        dispatch(setLocale(normalizeAdminLocale(user.preferedLanguage)));\n      }\n    }\n  }, [dispatch, user]);\n\n  /**\n   * Register a callback to update Redux state when the token is refreshed.\n   * This ensures the app state stays in sync with the token stored in localStorage/cookies.\n   */\n  React.useEffect(() => {\n    setOnTokenUpdate((newToken) => {\n      dispatch(setToken(newToken));\n    });\n\n    return () => {\n      setOnTokenUpdate(null);\n    };\n  }, [dispatch]);\n\n  /**\n   * Register the session-expired handler that the fetch layer / RTK baseQuery\n   * call when the server rejects the refresh token. This is what redirects\n   * the active tab to /auth/login on a 401, instead of leaving the user on\n   * a stale page until they click something.\n   */\n  React.useEffect(() => {\n    setOnSessionExpired(() => {\n      clearStateAndLogout();\n    });\n\n    return () => {\n      setOnSessionExpired(null);\n    };\n  }, [clearStateAndLogout]);\n\n  /**\n   * Session keepalive around access-token expiry. The timer fires per-tab; the\n   * hook then either (1) re-syncs from a token another tab refreshed, (2)\n   * silently renews when the user has been active, or (3) does nothing when\n   * idle — leaving the stale access token in place so unsaved form state\n   * survives until the next request refreshes it. A server-confirmed dead\n   * session (renewal rejected) broadcasts globally via `onSessionDead`. See\n   * `useSessionKeepalive` for the full rationale.\n   */\n  useSessionKeepalive({\n    token,\n    onSessionDead: clearStateAndLogout,\n    getStoredToken,\n    onResync: resyncToken,\n    getLastActivityAt,\n    renewSession,\n    disabled: _disableRenewToken,\n  });\n\n  React.useEffect(() => {\n    /**\n     * This will log a user out of all tabs if they log out in one tab.\n     */\n    const handleUserStorageChange = (event: StorageEvent) => {\n      if (event.key === STORAGE_KEYS.STATUS && event.newValue === null) {\n        clearStateAndLogout();\n      }\n    };\n\n    window.addEventListener('storage', handleUserStorageChange);\n\n    return () => {\n      window.removeEventListener('storage', handleUserStorageChange);\n    };\n  });\n\n  const login = React.useCallback<AuthContextValue['login']>(\n    async ({ rememberMe, ...body }) => {\n      const res = await loginMutation({ ...body, deviceId: getOrCreateDeviceId(), rememberMe });\n\n      /**\n       * There will always be a `data` key in the response\n       * because if something fails, it will throw an error.\n       */\n      if ('data' in res) {\n        const { token } = res.data;\n\n        resetSessionExpiredNotification();\n        dispatch(\n          loginAction({\n            token,\n            persist: rememberMe,\n          })\n        );\n      }\n\n      return res;\n    },\n    [dispatch, loginMutation]\n  );\n\n  /**\n   * Explicit user logout. Confirm unsaved changes *before* `logoutMutation` so\n   * Cancel leaves the server session and client token intact.\n   */\n  const logout = React.useCallback(async () => {\n    runLogoutWithGuard(() => {\n      void (async () => {\n        try {\n          await logoutMutation({ deviceId: getOrCreateDeviceId() });\n        } catch {\n          // The session may already be invalid.\n        }\n        performGlobalLogout();\n      })();\n    });\n  }, [logoutMutation, performGlobalLogout, runLogoutWithGuard]);\n\n  const refetchPermissions = React.useCallback(async () => {\n    if (!isUninitialized) {\n      await refetch();\n    }\n  }, [isUninitialized, refetch]);\n\n  const [checkPermissions] = useLazyCheckPermissionsQuery();\n  const checkUserHasPermissions: AuthContextValue['checkUserHasPermissions'] = React.useCallback(\n    async (\n      permissions,\n      passedPermissions,\n      // TODO:\n      // Here we have parameterised checkUserHasPermissions in order to pass\n      // query context from elsewhere in the application.\n      // See packages/core/content-manager/admin/src/features/DocumentRBAC.tsx\n\n      // This is in order to calculate permissions on accurate query params.\n      // We should be able to rely on the query params in this provider\n      // If we need to pass additional context to the RBAC middleware\n      // we should define a better context type.\n      rawQueryContext\n    ) => {\n      /**\n       * If there's no permissions to check, then we allow it to\n       * pass to preserve existing behaviours.\n       *\n       * TODO: should we review this? it feels more dangerous than useful.\n       */\n      if (!permissions || permissions.length === 0) {\n        return [{ action: '', subject: '' }];\n      }\n\n      /**\n       * Given the provided permissions, return the permissions from either passedPermissions\n       * or userPermissions as this is expected to be the full permission entity.\n       */\n      const actualUserPermissions = passedPermissions ?? userPermissions;\n\n      const matchingPermissions = actualUserPermissions.filter(\n        (permission) =>\n          permissions.findIndex(\n            (perm) =>\n              perm.action === permission.action &&\n              // Only check the subject if it's provided\n              (perm.subject == undefined || perm.subject === permission.subject)\n          ) >= 0\n      );\n\n      const middlewaredPermissions = await runRbacMiddleware(\n        {\n          user,\n          permissions: userPermissions,\n          pathname: locationRef.current.pathname,\n          search: (rawQueryContext || rawQuery).split('?')[1] ?? '',\n        },\n        matchingPermissions\n      );\n\n      const shouldCheckConditions = middlewaredPermissions.some(\n        (perm) => Array.isArray(perm.conditions) && perm.conditions.length > 0\n      );\n\n      if (!shouldCheckConditions) {\n        return middlewaredPermissions;\n      }\n\n      const { data, error } = await checkPermissions({\n        permissions: middlewaredPermissions.map((perm) => ({\n          action: perm.action,\n          subject: perm.subject,\n        })),\n      });\n\n      if (error) {\n        throw error;\n      } else {\n        return middlewaredPermissions.filter((_, index) => data?.data[index] === true);\n      }\n    },\n    [checkPermissions, rawQuery, runRbacMiddleware, user, userPermissions]\n  );\n\n  const isLoading = isLoadingUser || isLoadingPermissions;\n\n  return (\n    <>\n      <Provider\n        token={token}\n        user={user}\n        login={login}\n        logout={logout}\n        permissions={userPermissions}\n        checkUserHasPermissions={checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS}\n        refetchPermissions={refetchPermissions}\n        isLoading={isLoading}\n      >\n        {children}\n      </Provider>\n      <Dialog.Root\n        open={isSessionLogoutDialogOpen}\n        onOpenChange={handleSessionLogoutDialogOpenChange}\n      >\n        <ConfirmDialog\n          onConfirm={handleConfirmSessionLogout}\n          onCancel={handleCancelSessionLogout}\n          title={\n            LOGOUT_PROMPTS[sessionLogoutReason].title\n              ? formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].title)\n              : undefined\n          }\n          // Forced session-dead: no Cancel that pretends the session is still valid.\n          startAction={isForcedLogout(sessionLogoutReason) ? <></> : undefined}\n        >\n          {formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].body)}\n        </ConfirmDialog>\n      </Dialog.Root>\n    </>\n  );\n};\n\nexport { AuthProvider, useAuth, STORAGE_KEYS };\nexport type { AuthContextValue, Permission, User };\n"],"names":["NOOP_CHECK_USER_HAS_PERMISSIONS","Provider","useAuth","createContext","STORAGE_KEYS","STATUS","isForcedLogout","reason","LOGOUT_PROMPTS","voluntary","title","undefined","body","id","defaultMessage","AuthProvider","children","_defaultPermissions","_disableRenewToken","formatMessage","useIntl","dispatch","useTypedDispatch","runRbacMiddleware","useStrapiApp","state","rbac","run","location","useLocation","rawQuery","useQueryParams","locationRef","React","useRef","useEffect","current","token","useTypedSelector","admin_app","data","user","isLoading","isLoadingUser","useGetMeQuery","skip","userPermissions","refetch","isUninitialized","isLoadingPermissions","useGetMyPermissionsQuery","navigate","useNavigate","loginMutation","useLoginMutation","logoutMutation","useLogoutMutation","pendingLogoutRef","logoutGuardOpenRef","logoutGuardReasonRef","isSessionLogoutDialogOpen","setIsSessionLogoutDialogOpen","useState","sessionLogoutReason","setSessionLogoutReason","runLogoutWithGuard","useCallback","logoutFn","hasUnsavedChanges","performGlobalLogout","post","getFetchClient","adminApi","util","resetApiState","logoutAction","clearStateAndLogout","handleConfirmSessionLogout","handleCancelSessionLogout","forced","handleSessionLogoutDialogOpenChange","open","resyncToken","newToken","setToken","lastActivityRef","Date","now","markActivity","events","forEach","event","window","addEventListener","passive","capture","removeEventListener","getLastActivityAt","renewSession","attemptTokenRefresh","preferedLanguage","setLocale","normalizeAdminLocale","setOnTokenUpdate","setOnSessionExpired","useSessionKeepalive","onSessionDead","getStoredToken","onResync","disabled","handleUserStorageChange","key","newValue","login","rememberMe","res","deviceId","getOrCreateDeviceId","resetSessionExpiredNotification","loginAction","persist","logout","refetchPermissions","checkPermissions","useLazyCheckPermissionsQuery","checkUserHasPermissions","permissions","passedPermissions","rawQueryContext","length","action","subject","actualUserPermissions","matchingPermissions","filter","permission","findIndex","perm","middlewaredPermissions","pathname","search","split","shouldCheckConditions","some","Array","isArray","conditions","error","map","_","index","_jsxs","_Fragment","_jsx","Dialog","Root","onOpenChange","ConfirmDialog","onConfirm","onCancel","startAction"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6EA;;;;;;;;;;;;;;IAeA,MAAMA,+BAAAA,GAA+E,UAAY,EAAE;AAEnG,MAAM,CAACC,QAAAA,EAAUC,OAAAA,CAAQ,GAAGC,qBAAAA,CAAgC,MAAA;AAa5D,MAAMC,YAAAA,GAAe;IAEnBC,MAAAA,EAAQ;AACV;AAaA,MAAMC,cAAAA,GAAiB,CAACC,MAAAA,GAAyBA,MAAAA,KAAW,cAAA;AAE5D;;;;AAIC,IACD,MAAMC,cAAAA,GAAiB;IACrBC,SAAAA,EAAW;QACTC,KAAAA,EAAOC,SAAAA;QACPC,IAAAA,EAAM;YACJC,EAAAA,EAAI,uBAAA;YACJC,cAAAA,EAAgB;AAClB;AACF,KAAA;IACA,cAAA,EAAgB;QACdJ,KAAAA,EAAO;YACLG,EAAAA,EAAI,yBAAA;YACJC,cAAAA,EAAgB;AAClB,SAAA;QACAF,IAAAA,EAAM;YACJC,EAAAA,EAAI,2BAAA;YACJC,cAAAA,EACE;AACJ;AACF;AACF,CAAA;AAEA,MAAMC,YAAAA,GAAe,CAAC,EACpBC,QAAQ,EACRC,sBAAsB,EAAE,EACxBC,kBAAAA,GAAqB,KAAK,EACR,GAAA;IAClB,MAAM,EAAEC,aAAa,EAAE,GAAGC,iBAAAA,EAAAA;AAC1B,IAAA,MAAMC,QAAAA,GAAWC,sBAAAA,EAAAA;IACjB,MAAMC,iBAAAA,GAAoBC,uBAAa,cAAA,EAAgB,CAACC,QAAUA,KAAAA,CAAMC,IAAI,CAACC,GAAG,CAAA;AAChF,IAAA,MAAMC,QAAAA,GAAWC,0BAAAA,EAAAA;AACjB,IAAA,MAAM,CAAC,EAAEC,QAAQ,EAAE,CAAC,GAAGC,6BAAAA,EAAAA;IAEvB,MAAMC,WAAAA,GAAcC,gBAAAA,CAAMC,MAAM,CAACN,QAAAA,CAAAA;;AAGjCK,IAAAA,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACdH,QAAAA,WAAAA,CAAYI,OAAO,GAAGR,QAAAA;IACxB,CAAA,EAAG;AAACA,QAAAA;AAAS,KAAA,CAAA;IAEb,MAAMS,KAAAA,GAAQC,uBAAiB,CAACb,KAAAA,GAAUA,MAAMc,SAAS,CAACF,KAAK,IAAI,IAAA,CAAA;IAEnE,MAAM,EAAEG,MAAMC,IAAI,EAAEC,WAAWC,aAAa,EAAE,GAAGC,kBAAAA,CAAcjC,SAAAA,EAAW;AACxE;;;AAGC,QACDkC,MAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAM,EACJG,IAAAA,EAAMM,eAAAA,GAAkB7B,mBAAmB,EAC3C8B,OAAO,EACPC,eAAe,EACfN,SAAAA,EAAWO,oBAAoB,EAChC,GAAGC,8BAAyBvC,SAAAA,EAAW;AACtCkC,QAAAA,IAAAA,EAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAMc,QAAAA,GAAWC,0BAAAA,EAAAA;IAEjB,MAAM,CAACC,cAAc,GAAGC,qBAAAA,EAAAA;IACxB,MAAM,CAACC,eAAe,GAAGC,sBAAAA,EAAAA;IAEzB,MAAMC,gBAAAA,GAAmBxB,gBAAAA,CAAMC,MAAM,CAAsB,IAAA,CAAA;IAC3D,MAAMwB,kBAAAA,GAAqBzB,gBAAAA,CAAMC,MAAM,CAAC,KAAA,CAAA;IACxC,MAAMyB,oBAAAA,GAAuB1B,gBAAAA,CAAMC,MAAM,CAAe,WAAA,CAAA;AACxD,IAAA,MAAM,CAAC0B,yBAAAA,EAA2BC,4BAAAA,CAA6B,GAAG5B,gBAAAA,CAAM6B,QAAQ,CAAC,KAAA,CAAA;AACjF,IAAA,MAAM,CAACC,mBAAAA,EAAqBC,sBAAAA,CAAuB,GAAG/B,gBAAAA,CAAM6B,QAAQ,CAAe,WAAA,CAAA;AAEnF;;;;;;;MAQA,MAAMG,qBAAqBhC,gBAAAA,CAAMiC,WAAW,CAC1C,CAACC,QAAAA,EAAsB5D,SAAuB,WAAW,GAAA;QACvD,IAAImD,kBAAAA,CAAmBtB,OAAO,EAAE;AAC9BqB,YAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;AAC3B,YAAA,IAAI7D,eAAeC,MAAAA,CAAAA,EAAS;AAC1BoD,gBAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;gBAC/ByD,sBAAAA,CAAuBzD,MAAAA,CAAAA;AACzB,YAAA;AACA,YAAA;AACF,QAAA;AAEA,QAAA,IAAI,CAAC6D,wCAAAA,EAAAA,EAAqB;AACxBD,YAAAA,QAAAA,EAAAA;AACA,YAAA;AACF,QAAA;AAEAT,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,IAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;AAC/BkD,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;QAC3BH,sBAAAA,CAAuBzD,MAAAA,CAAAA;QACvBsD,4BAAAA,CAA6B,IAAA,CAAA;AAC/B,IAAA,CAAA,EACA,EAAE,CAAA;IAGJ,MAAMQ,mBAAAA,GAAsBpC,gBAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5C,QAAA,KAAK,CAAC,UAAA;YACJ,IAAI;gBACF,MAAM,EAAEI,IAAI,EAAE,GAAGC,6BAAAA,EAAAA;AACjB,gBAAA,MAAMD,IAAAA,CAAK,eAAA,CAAA;AACb,YAAA,CAAA,CAAE,OAAM;;AAER,YAAA;QACF,CAAA,GAAA;QAEAjD,QAAAA,CAASmD,YAAAA,CAASC,IAAI,CAACC,aAAa,EAAA,CAAA;QACpCrD,QAAAA,CAASsD,cAAAA,EAAAA,CAAAA;QACTxB,QAAAA,CAAS,aAAA,CAAA;IACX,CAAA,EAAG;AAAC9B,QAAAA,QAAAA;AAAU8B,QAAAA;AAAS,KAAA,CAAA;IAEvB,MAAMyB,mBAAAA,GAAsB3C,gBAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5CD,QAAAA,kBAAAA,CAAmBI,mBAAAA,EAAqB,cAAA,CAAA;IAC1C,CAAA,EAAG;AAACA,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5C,MAAMY,0BAAAA,GAA6B5C,gBAAAA,CAAMiC,WAAW,CAAC,IAAA;AACnDR,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;QAC/ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;QACvB,MAAMG,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;AAC3B+B,QAAAA,QAAAA,IAAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IAEL,MAAMW,yBAAAA,GAA4B7C,gBAAAA,CAAMiC,WAAW,CAAC,IAAA;QAClD,MAAMa,MAAAA,GAASzE,cAAAA,CAAeqD,oBAAAA,CAAqBvB,OAAO,CAAA;QAC1D,MAAM+B,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCsB,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;AAC/BqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;QAC3ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;;AAEvB,QAAA,IAAIe,MAAAA,EAAQ;AACVZ,YAAAA,QAAAA,IAAAA;AACF,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAEL,IAAA,MAAMa,mCAAAA,GAAsC/C,gBAAAA,CAAMiC,WAAW,CAC3D,CAACe,IAAAA,GAAAA;AACC,QAAA,IAAI,CAACA,IAAAA,EAAM;AACTH,YAAAA,yBAAAA,EAAAA;AACF,QAAA;IACF,CAAA,EACA;AAACA,QAAAA;AAA0B,KAAA,CAAA;AAG7B,IAAA,MAAMI,WAAAA,GAAcjD,gBAAAA,CAAMiC,WAAW,CACnC,CAACiB,QAAAA,GAAAA;AACC9D,QAAAA,QAAAA,CAAS+D,gBAAAA,CAASD,QAAAA,CAAAA,CAAAA;IACpB,CAAA,EACA;AAAC9D,QAAAA;AAAS,KAAA,CAAA;AAGZ;;;;;;;AAOC,MACD,MAAMgE,eAAAA,GAAkBpD,gBAAAA,CAAMC,MAAM,CAACoD,KAAKC,GAAG,EAAA,CAAA;AAC7CtD,IAAAA,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,MAAMqD,YAAAA,GAAe,IAAA;YACnBH,eAAAA,CAAgBjD,OAAO,GAAGkD,IAAAA,CAAKC,GAAG,EAAA;AACpC,QAAA,CAAA;AACA,QAAA,MAAME,MAAAA,GAAS;AAAC,YAAA,aAAA;AAAe,YAAA,SAAA;AAAW,YAAA,OAAA;AAAS,YAAA,QAAA;AAAU,YAAA;AAAa,SAAA;QAC1EA,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GACdC,OAAOC,gBAAgB,CAACF,OAAOH,YAAAA,EAAc;gBAAEM,OAAAA,EAAS,IAAA;gBAAMC,OAAAA,EAAS;AAAK,aAAA,CAAA,CAAA;QAG9E,OAAO,IAAA;YACLN,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GAAUC,OAAOI,mBAAmB,CAACL,OAAOH,YAAAA,EAAc;oBAAEO,OAAAA,EAAS;AAAK,iBAAA,CAAA,CAAA;AAC5F,QAAA,CAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IACL,MAAME,iBAAAA,GAAoBhE,iBAAMiC,WAAW,CAAC,IAAMmB,eAAAA,CAAgBjD,OAAO,EAAE,EAAE,CAAA;AAE7E;;;;AAIC,MACD,MAAM8D,YAAAA,GAAejE,gBAAAA,CAAMiC,WAAW,CAAC,UAAA;QACrC,IAAI;YACF,MAAMiC,kCAAAA,EAAAA;YACN,OAAO,IAAA;AACT,QAAA,CAAA,CAAE,OAAM;YACN,OAAO,KAAA;AACT,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAELlE,IAAAA,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,IAAIM,IAAAA,EAAM;YACR,IAAIA,IAAAA,CAAK2D,gBAAgB,EAAE;gBACzB/E,QAAAA,CAASgF,iBAAAA,CAAUC,yCAAAA,CAAqB7D,IAAAA,CAAK2D,gBAAgB,CAAA,CAAA,CAAA;AAC/D,YAAA;AACF,QAAA;IACF,CAAA,EAAG;AAAC/E,QAAAA,QAAAA;AAAUoB,QAAAA;AAAK,KAAA,CAAA;AAEnB;;;MAIAR,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACdoE,QAAAA,+BAAAA,CAAiB,CAACpB,QAAAA,GAAAA;AAChB9D,YAAAA,QAAAA,CAAS+D,gBAAAA,CAASD,QAAAA,CAAAA,CAAAA;AACpB,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACLoB,+BAAAA,CAAiB,IAAA,CAAA;AACnB,QAAA,CAAA;IACF,CAAA,EAAG;AAAClF,QAAAA;AAAS,KAAA,CAAA;AAEb;;;;;MAMAY,gBAAAA,CAAME,SAAS,CAAC,IAAA;QACdqE,kCAAAA,CAAoB,IAAA;AAClB5B,YAAAA,mBAAAA,EAAAA;AACF,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACL4B,kCAAAA,CAAoB,IAAA,CAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AAAC5B,QAAAA;AAAoB,KAAA,CAAA;AAExB;;;;;;;;AAQC,MACD6B,uCAAAA,CAAoB;AAClBpE,QAAAA,KAAAA;QACAqE,aAAAA,EAAe9B,mBAAAA;AACf+B,wBAAAA,sBAAAA;QACAC,QAAAA,EAAU1B,WAAAA;AACVe,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;QACAW,QAAAA,EAAU3F;AACZ,KAAA,CAAA;AAEAe,IAAAA,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACd;;QAGA,MAAM2E,0BAA0B,CAACnB,KAAAA,GAAAA;YAC/B,IAAIA,KAAAA,CAAMoB,GAAG,KAAK3G,YAAAA,CAAaC,MAAM,IAAIsF,KAAAA,CAAMqB,QAAQ,KAAK,IAAA,EAAM;AAChEpC,gBAAAA,mBAAAA,EAAAA;AACF,YAAA;AACF,QAAA,CAAA;QAEAgB,MAAAA,CAAOC,gBAAgB,CAAC,SAAA,EAAWiB,uBAAAA,CAAAA;QAEnC,OAAO,IAAA;YACLlB,MAAAA,CAAOI,mBAAmB,CAAC,SAAA,EAAWc,uBAAAA,CAAAA;AACxC,QAAA,CAAA;AACF,IAAA,CAAA,CAAA;IAEA,MAAMG,KAAAA,GAAQhF,iBAAMiC,WAAW,CAC7B,OAAO,EAAEgD,UAAU,EAAE,GAAGtG,IAAAA,EAAM,GAAA;QAC5B,MAAMuG,GAAAA,GAAM,MAAM9D,aAAAA,CAAc;AAAE,YAAA,GAAGzC,IAAI;YAAEwG,QAAAA,EAAUC,4BAAAA,EAAAA;AAAuBH,YAAAA;AAAW,SAAA,CAAA;AAEvF;;;UAIA,IAAI,UAAUC,GAAAA,EAAK;AACjB,YAAA,MAAM,EAAE9E,KAAK,EAAE,GAAG8E,IAAI3E,IAAI;AAE1B8E,YAAAA,8CAAAA,EAAAA;AACAjG,YAAAA,QAAAA,CACEkG,aAAAA,CAAY;AACVlF,gBAAAA,KAAAA;gBACAmF,OAAAA,EAASN;AACX,aAAA,CAAA,CAAA;AAEJ,QAAA;QAEA,OAAOC,GAAAA;IACT,CAAA,EACA;AAAC9F,QAAAA,QAAAA;AAAUgC,QAAAA;AAAc,KAAA,CAAA;AAG3B;;;AAGC,MACD,MAAMoE,MAAAA,GAASxF,gBAAAA,CAAMiC,WAAW,CAAC,UAAA;QAC/BD,kBAAAA,CAAmB,IAAA;AACjB,YAAA,KAAK,CAAC,UAAA;gBACJ,IAAI;AACF,oBAAA,MAAMV,cAAAA,CAAe;wBAAE6D,QAAAA,EAAUC,4BAAAA;AAAsB,qBAAA,CAAA;AACzD,gBAAA,CAAA,CAAE,OAAM;;AAER,gBAAA;AACAhD,gBAAAA,mBAAAA,EAAAA;YACF,CAAA,GAAA;AACF,QAAA,CAAA,CAAA;IACF,CAAA,EAAG;AAACd,QAAAA,cAAAA;AAAgBc,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5D,MAAMyD,kBAAAA,GAAqBzF,gBAAAA,CAAMiC,WAAW,CAAC,UAAA;AAC3C,QAAA,IAAI,CAAClB,eAAAA,EAAiB;YACpB,MAAMD,OAAAA,EAAAA;AACR,QAAA;IACF,CAAA,EAAG;AAACC,QAAAA,eAAAA;AAAiBD,QAAAA;AAAQ,KAAA,CAAA;IAE7B,MAAM,CAAC4E,iBAAiB,GAAGC,iCAAAA,EAAAA;AAC3B,IAAA,MAAMC,0BAAuE5F,gBAAAA,CAAMiC,WAAW,CAC5F,OACE4D,WAAAA,EACAC;;;;;;;;AAUAC,IAAAA,eAAAA,GAAAA;AAEA;;;;;AAKC,UACD,IAAI,CAACF,WAAAA,IAAeA,WAAAA,CAAYG,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO;AAAC,gBAAA;oBAAEC,MAAAA,EAAQ,EAAA;oBAAIC,OAAAA,EAAS;AAAG;AAAE,aAAA;AACtC,QAAA;AAEA;;;UAIA,MAAMC,wBAAwBL,iBAAAA,IAAqBjF,eAAAA;AAEnD,QAAA,MAAMuF,sBAAsBD,qBAAAA,CAAsBE,MAAM,CACtD,CAACC,aACCT,WAAAA,CAAYU,SAAS,CACnB,CAACC,OACCA,IAAAA,CAAKP,MAAM,KAAKK,UAAAA,CAAWL,MAAM;iBAEhCO,IAAAA,CAAKN,OAAO,IAAIxH,SAAAA,IAAa8H,IAAAA,CAAKN,OAAO,KAAKI,UAAAA,CAAWJ,OAAM,CAAA,CAAA,IAC/D,CAAA,CAAA;QAGT,MAAMO,sBAAAA,GAAyB,MAAMnH,iBAAAA,CACnC;AACEkB,YAAAA,IAAAA;YACAqF,WAAAA,EAAahF,eAAAA;YACb6F,QAAAA,EAAU3G,WAAAA,CAAYI,OAAO,CAACuG,QAAQ;YACtCC,MAAAA,EAASZ,CAAAA,eAAAA,IAAmBlG,QAAO,EAAG+G,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI;SACzD,EACAR,mBAAAA,CAAAA;AAGF,QAAA,MAAMS,wBAAwBJ,sBAAAA,CAAuBK,IAAI,CACvD,CAACN,OAASO,KAAAA,CAAMC,OAAO,CAACR,IAAAA,CAAKS,UAAU,CAAA,IAAKT,IAAAA,CAAKS,UAAU,CAACjB,MAAM,GAAG,CAAA,CAAA;AAGvE,QAAA,IAAI,CAACa,qBAAAA,EAAuB;YAC1B,OAAOJ,sBAAAA;AACT,QAAA;AAEA,QAAA,MAAM,EAAElG,IAAI,EAAE2G,KAAK,EAAE,GAAG,MAAMxB,gBAAAA,CAAiB;AAC7CG,YAAAA,WAAAA,EAAaY,sBAAAA,CAAuBU,GAAG,CAAC,CAACX,QAAU;AACjDP,oBAAAA,MAAAA,EAAQO,KAAKP,MAAM;AACnBC,oBAAAA,OAAAA,EAASM,KAAKN;iBAChB,CAAA;AACF,SAAA,CAAA;AAEA,QAAA,IAAIgB,KAAAA,EAAO;YACT,MAAMA,KAAAA;QACR,CAAA,MAAO;YACL,OAAOT,sBAAAA,CAAuBJ,MAAM,CAAC,CAACe,CAAAA,EAAGC,QAAU9G,IAAAA,EAAMA,IAAI,CAAC8G,KAAAA,CAAM,KAAK,IAAA,CAAA;AAC3E,QAAA;IACF,CAAA,EACA;AAAC3B,QAAAA,gBAAAA;AAAkB7F,QAAAA,QAAAA;AAAUP,QAAAA,iBAAAA;AAAmBkB,QAAAA,IAAAA;AAAMK,QAAAA;AAAgB,KAAA,CAAA;AAGxE,IAAA,MAAMJ,YAAYC,aAAAA,IAAiBM,oBAAAA;IAEnC,qBACEsG,eAAA,CAAAC,mBAAA,EAAA;;0BACEC,cAAA,CAACxJ,QAAAA,EAAAA;gBACCoC,KAAAA,EAAOA,KAAAA;gBACPI,IAAAA,EAAMA,IAAAA;gBACNwE,KAAAA,EAAOA,KAAAA;gBACPQ,MAAAA,EAAQA,MAAAA;gBACRK,WAAAA,EAAahF,eAAAA;AACb+E,gBAAAA,uBAAAA,EAAyBA,uBAAAA,IAA2B7H,+BAAAA;gBACpD0H,kBAAAA,EAAoBA,kBAAAA;gBACpBhF,SAAAA,EAAWA,SAAAA;AAEV1B,gBAAAA,QAAAA,EAAAA;;AAEH,0BAAAyI,cAAA,CAACC,oBAAOC,IAAI,EAAA;gBACV1E,IAAAA,EAAMrB,yBAAAA;gBACNgG,YAAAA,EAAc5E,mCAAAA;AAEd,gBAAA,QAAA,gBAAAyE,cAAA,CAACI,2BAAAA,EAAAA;oBACCC,SAAAA,EAAWjF,0BAAAA;oBACXkF,QAAAA,EAAUjF,yBAAAA;AACVpE,oBAAAA,KAAAA,EACEF,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,GACrCS,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,CAAA,GACvDC,SAAAA;;oBAGNqJ,WAAAA,EAAa1J,cAAAA,CAAeyD,qCAAuB0F,cAAA,CAAAD,mBAAA,EAAA,EAAA,CAAA,GAAQ7I,SAAAA;AAE1DQ,oBAAAA,QAAAA,EAAAA,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACnD,IAAI;;;;;AAKjE;;;;;;"}
+{"version":3,"file":"Auth.js","sources":["../../../../../admin/src/features/Auth.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { Dialog } from '@strapi/design-system';\nimport { useIntl, type MessageDescriptor } from 'react-intl';\nimport { useLocation, useNavigate } from 'react-router-dom';\n\nimport { Login } from '../../../shared/contracts/authentication';\nimport { ConfirmDialog } from '../components/ConfirmDialog';\nimport { createContext } from '../components/Context';\nimport { useTypedDispatch, useTypedSelector } from '../core/store/hooks';\nimport { useStrapiApp } from '../features/StrapiApp';\nimport { useQueryParams } from '../hooks/useQueryParams';\nimport { useSessionKeepalive } from '../hooks/useSessionKeepalive';\nimport {\n  getStoredToken,\n  login as loginAction,\n  logout as logoutAction,\n  setLocale,\n  setToken,\n} from '../reducer';\nimport { adminApi } from '../services/api';\nimport {\n  useGetMeQuery,\n  useGetMyPermissionsQuery,\n  useLazyCheckPermissionsQuery,\n  useLoginMutation,\n  useLogoutMutation,\n} from '../services/auth';\nimport { normalizeAdminLocale } from '../translations/normalizeAdminLocale';\nimport { getOrCreateDeviceId } from '../utils/deviceId';\nimport {\n  attemptTokenRefresh,\n  getFetchClient,\n  resetSessionExpiredNotification,\n  setOnSessionExpired,\n  setOnTokenUpdate,\n} from '../utils/getFetchClient';\nimport { hasUnsavedChanges } from '../utils/unsavedChangesRegistry';\n\nimport type {\n  Permission as PermissionContract,\n  SanitizedAdminUser,\n} from '../../../shared/contracts/shared';\n\nconst EMPTY_DEFAULT_PERMISSIONS: NonNullable<AuthProviderProps['_defaultPermissions']> = [];\n\ninterface Permission\n  extends\n    Pick<PermissionContract, 'action' | 'subject'>,\n    Partial<Omit<PermissionContract, 'action' | 'subject'>> {}\n\ninterface User\n  extends\n    Pick<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>,\n    Partial<Omit<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>> {}\n\ninterface AuthContextValue {\n  login: (\n    body: Login.Request['body'] & { rememberMe: boolean }\n  ) => Promise<Awaited<ReturnType<ReturnType<typeof useLoginMutation>[0]>>>;\n  logout: () => Promise<void>;\n  /**\n   * @alpha\n   * @description given a list of permissions, this function checks\n   * those against the current user's permissions or those passed as\n   * the second argument, if the user has those permissions the complete\n   * permission object form the API is returned. Therefore, if the list is\n   * empty, the user does not have any of those permissions.\n   */\n  checkUserHasPermissions: (\n    permissions?: Array<Pick<Permission, 'action'> & Partial<Omit<Permission, 'action'>>>,\n    passedPermissions?: Permission[],\n    rawQueryContext?: string\n  ) => Promise<Permission[]>;\n  isLoading: boolean;\n  permissions: Permission[];\n  refetchPermissions: () => Promise<void>;\n  token: string | null;\n  user?: User;\n}\n\n/**\n * ensure the Auth context never exposes a non-function for checkUserHasPermissions.\n * When this is undefined (e.g. context timing in production builds), consumers would throw\n * \"p is not a function\" / \"checkUserHasPermissions is not a function\". By always passing\n * a function here, all current and future consumers are protected without per-call-site guards.\n *\n * When would the fallback run? Only if the real checkUserHasPermissions were ever undefined\n * when we pass to the Provider (e.g. a rare timing/build edge case). In normal runs it is\n * always defined (useCallback), so the real function is passed and behavior is unchanged.\n *\n * If the fallback ever did run: it returns [] so consumers (which use .length > 0) treat it\n * as \"no permission\" for that render—under-permissive. On the next AuthProvider re-render we\n * pass the real function again, so the context updates and the view corrects quickly.\n * @see https://github.com/strapi/strapi/issues/24384\n */\nconst NOOP_CHECK_USER_HAS_PERMISSIONS: AuthContextValue['checkUserHasPermissions'] = async () => [];\n\nconst [Provider, useAuth] = createContext<AuthContextValue>('Auth');\n\ninterface AuthProviderProps {\n  children: React.ReactNode;\n  /**\n   * @internal could be removed at any time.\n   */\n  _defaultPermissions?: Permission[];\n\n  // NOTE: this is used for testing purposed only\n  _disableRenewToken?: boolean;\n}\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  STATUS: 'isLoggedIn',\n};\n\n/**\n * Why the session is ending.\n * - `voluntary`: explicit user logout — cancelable when there are unsaved edits.\n * - `session-dead`: server rejected the refresh (idle/max session window elapsed)\n *   — forced; Cancel / dismiss still clears client state.\n *\n * Short-lived access-token expiry is NOT a logout reason: idle tabs leave the\n * stale token in place and the next request refreshes (or hits session-dead).\n */\ntype LogoutReason = 'voluntary' | 'session-dead';\n\nconst isForcedLogout = (reason: LogoutReason) => reason === 'session-dead';\n\n/**\n * Copy for the unsaved-changes prompt. A server-confirmed dead session needs to\n * say *why* the dialog appeared, otherwise it reads as the usual navigation\n * blocker and users confirm straight through it.\n */\nconst LOGOUT_PROMPTS = {\n  voluntary: {\n    title: undefined,\n    body: {\n      id: 'global.prompt.unsaved',\n      defaultMessage: 'You have unsaved changes, are you sure you want to leave?',\n    },\n  },\n  'session-dead': {\n    title: {\n      id: 'app.session.ended.title',\n      defaultMessage: 'Session ended',\n    },\n    body: {\n      id: 'app.session.ended.unsaved',\n      defaultMessage:\n        \"Your session has ended and can't be resumed. Your unsaved changes will be lost when you log out.\",\n    },\n  },\n} satisfies Record<LogoutReason, { title?: MessageDescriptor; body: MessageDescriptor }>;\n\nconst AuthProvider = ({\n  children,\n  _defaultPermissions = EMPTY_DEFAULT_PERMISSIONS,\n  _disableRenewToken = false,\n}: AuthProviderProps) => {\n  const { formatMessage } = useIntl();\n  const dispatch = useTypedDispatch();\n  const runRbacMiddleware = useStrapiApp('AuthProvider', (state) => state.rbac.run);\n  const location = useLocation();\n  const [{ rawQuery }] = useQueryParams();\n\n  const locationRef = React.useRef(location);\n\n  // Update ref without causing re-render\n  React.useEffect(() => {\n    locationRef.current = location;\n  }, [location]);\n\n  const token = useTypedSelector((state) => state.admin_app.token ?? null);\n\n  const { data: user, isLoading: isLoadingUser } = useGetMeQuery(undefined, {\n    /**\n     * If there's no token, we don't try to fetch\n     * the user data because it will fail.\n     */\n    skip: !token,\n  });\n\n  const {\n    data: userPermissions = _defaultPermissions,\n    refetch,\n    isUninitialized,\n    isLoading: isLoadingPermissions,\n  } = useGetMyPermissionsQuery(undefined, {\n    skip: !token,\n  });\n\n  const navigate = useNavigate();\n\n  const [loginMutation] = useLoginMutation();\n  const [logoutMutation] = useLogoutMutation();\n\n  const pendingLogoutRef = React.useRef<(() => void) | null>(null);\n  const logoutGuardOpenRef = React.useRef(false);\n  const logoutGuardReasonRef = React.useRef<LogoutReason>('voluntary');\n  const [isSessionLogoutDialogOpen, setIsSessionLogoutDialogOpen] = React.useState(false);\n  const [sessionLogoutReason, setSessionLogoutReason] = React.useState<LogoutReason>('voluntary');\n\n  /**\n   * Prompt before discarding unsaved edits, then run `logoutFn`.\n   *\n   * - `voluntary`: Cancel leaves the user logged in (server session intact).\n   * - `session-dead`: the session is already unusable — Cancel (or dismiss)\n   *   still runs `logoutFn` so the client cannot keep a stale token. While the\n   *   dialog is open, a later `session-dead` request upgrades the pending action.\n   */\n  const runLogoutWithGuard = React.useCallback(\n    (logoutFn: () => void, reason: LogoutReason = 'voluntary') => {\n      if (logoutGuardOpenRef.current) {\n        pendingLogoutRef.current = logoutFn;\n        if (isForcedLogout(reason)) {\n          logoutGuardReasonRef.current = reason;\n          setSessionLogoutReason(reason);\n        }\n        return;\n      }\n\n      if (!hasUnsavedChanges()) {\n        logoutFn();\n        return;\n      }\n\n      logoutGuardOpenRef.current = true;\n      logoutGuardReasonRef.current = reason;\n      pendingLogoutRef.current = logoutFn;\n      setSessionLogoutReason(reason);\n      setIsSessionLogoutDialogOpen(true);\n    },\n    []\n  );\n\n  const performGlobalLogout = React.useCallback(() => {\n    void (async () => {\n      try {\n        const { post } = getFetchClient();\n        await post('/admin/logout');\n      } catch {\n        // The session may already be invalid.\n      }\n    })();\n\n    dispatch(adminApi.util.resetApiState());\n    dispatch(logoutAction());\n    navigate('/auth/login');\n  }, [dispatch, navigate]);\n\n  const clearStateAndLogout = React.useCallback(() => {\n    runLogoutWithGuard(performGlobalLogout, 'session-dead');\n  }, [performGlobalLogout, runLogoutWithGuard]);\n\n  const handleConfirmSessionLogout = React.useCallback(() => {\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    const logoutFn = pendingLogoutRef.current;\n    pendingLogoutRef.current = null;\n    logoutFn?.();\n  }, []);\n\n  const handleCancelSessionLogout = React.useCallback(() => {\n    const forced = isForcedLogout(logoutGuardReasonRef.current);\n    const logoutFn = pendingLogoutRef.current;\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    pendingLogoutRef.current = null;\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    // Forced paths: session is already dead — dismiss must still clear client state.\n    if (forced) {\n      logoutFn?.();\n    }\n  }, []);\n\n  const handleSessionLogoutDialogOpenChange = React.useCallback(\n    (open: boolean) => {\n      if (!open) {\n        handleCancelSessionLogout();\n      }\n    },\n    [handleCancelSessionLogout]\n  );\n\n  const resyncToken = React.useCallback(\n    (newToken: string) => {\n      dispatch(setToken(newToken));\n    },\n    [dispatch]\n  );\n\n  /**\n   * Track the timestamp of the user's last interaction. This is the activity\n   * signal `useSessionKeepalive` uses to tell an active user (silently renew\n   * their session) apart from a genuinely idle one (leave the stale access\n   * token alone until the next request). Successful API calls don't refresh\n   * the short-lived access token on their own, so without this an\n   * actively-working user would hit a 401 the moment the token expires.\n   */\n  const lastActivityRef = React.useRef(Date.now());\n  React.useEffect(() => {\n    const markActivity = () => {\n      lastActivityRef.current = Date.now();\n    };\n    const events = ['pointerdown', 'keydown', 'click', 'scroll', 'touchstart'];\n    events.forEach((event) =>\n      window.addEventListener(event, markActivity, { passive: true, capture: true })\n    );\n\n    return () => {\n      events.forEach((event) => window.removeEventListener(event, markActivity, { capture: true }));\n    };\n  }, []);\n  const getLastActivityAt = React.useCallback(() => lastActivityRef.current, []);\n\n  /**\n   * Silently rotate the refresh token and mint a new access token. Returns\n   * `true` on success (the resulting `setToken` re-arms the renew timer) and\n   * `false` when the server rejects it (session genuinely over).\n   */\n  const renewSession = React.useCallback(async () => {\n    try {\n      await attemptTokenRefresh();\n      return true;\n    } catch {\n      return false;\n    }\n  }, []);\n\n  React.useEffect(() => {\n    if (user) {\n      if (user.preferedLanguage) {\n        dispatch(setLocale(normalizeAdminLocale(user.preferedLanguage)));\n      }\n    }\n  }, [dispatch, user]);\n\n  /**\n   * Register a callback to update Redux state when the token is refreshed.\n   * This ensures the app state stays in sync with the token stored in localStorage/cookies.\n   */\n  React.useEffect(() => {\n    setOnTokenUpdate((newToken) => {\n      dispatch(setToken(newToken));\n    });\n\n    return () => {\n      setOnTokenUpdate(null);\n    };\n  }, [dispatch]);\n\n  /**\n   * Register the session-expired handler that the fetch layer / RTK baseQuery\n   * call when the server rejects the refresh token. This is what redirects\n   * the active tab to /auth/login on a 401, instead of leaving the user on\n   * a stale page until they click something.\n   */\n  React.useEffect(() => {\n    setOnSessionExpired(() => {\n      clearStateAndLogout();\n    });\n\n    return () => {\n      setOnSessionExpired(null);\n    };\n  }, [clearStateAndLogout]);\n\n  /**\n   * Session keepalive around access-token expiry. The timer fires per-tab; the\n   * hook then either (1) re-syncs from a token another tab refreshed, (2)\n   * silently renews when the user has been active, or (3) does nothing when\n   * idle — leaving the stale access token in place so unsaved form state\n   * survives until the next request refreshes it. A server-confirmed dead\n   * session (renewal rejected) broadcasts globally via `onSessionDead`. See\n   * `useSessionKeepalive` for the full rationale.\n   */\n  useSessionKeepalive({\n    token,\n    onSessionDead: clearStateAndLogout,\n    getStoredToken,\n    onResync: resyncToken,\n    getLastActivityAt,\n    renewSession,\n    disabled: _disableRenewToken,\n  });\n\n  React.useEffect(() => {\n    /**\n     * This will log a user out of all tabs if they log out in one tab.\n     */\n    const handleUserStorageChange = (event: StorageEvent) => {\n      if (event.key === STORAGE_KEYS.STATUS && event.newValue === null) {\n        clearStateAndLogout();\n      }\n    };\n\n    window.addEventListener('storage', handleUserStorageChange);\n\n    return () => {\n      window.removeEventListener('storage', handleUserStorageChange);\n    };\n  });\n\n  const login = React.useCallback<AuthContextValue['login']>(\n    async ({ rememberMe, ...body }) => {\n      const res = await loginMutation({ ...body, deviceId: getOrCreateDeviceId(), rememberMe });\n\n      /**\n       * There will always be a `data` key in the response\n       * because if something fails, it will throw an error.\n       */\n      if ('data' in res) {\n        const { token } = res.data;\n\n        resetSessionExpiredNotification();\n        dispatch(\n          loginAction({\n            token,\n            persist: rememberMe,\n          })\n        );\n      }\n\n      return res;\n    },\n    [dispatch, loginMutation]\n  );\n\n  /**\n   * Explicit user logout. Confirm unsaved changes *before* `logoutMutation` so\n   * Cancel leaves the server session and client token intact.\n   */\n  const logout = React.useCallback(async () => {\n    runLogoutWithGuard(() => {\n      void (async () => {\n        try {\n          await logoutMutation({ deviceId: getOrCreateDeviceId() });\n        } catch {\n          // The session may already be invalid.\n        }\n        performGlobalLogout();\n      })();\n    });\n  }, [logoutMutation, performGlobalLogout, runLogoutWithGuard]);\n\n  const refetchPermissions = React.useCallback(async () => {\n    if (!isUninitialized) {\n      await refetch();\n    }\n  }, [isUninitialized, refetch]);\n\n  const [checkPermissions] = useLazyCheckPermissionsQuery();\n  const checkUserHasPermissions: AuthContextValue['checkUserHasPermissions'] = React.useCallback(\n    async (\n      permissions,\n      passedPermissions,\n      // TODO:\n      // Here we have parameterised checkUserHasPermissions in order to pass\n      // query context from elsewhere in the application.\n      // See packages/core/content-manager/admin/src/features/DocumentRBAC.tsx\n\n      // This is in order to calculate permissions on accurate query params.\n      // We should be able to rely on the query params in this provider\n      // If we need to pass additional context to the RBAC middleware\n      // we should define a better context type.\n      rawQueryContext\n    ) => {\n      /**\n       * If there's no permissions to check, then we allow it to\n       * pass to preserve existing behaviours.\n       *\n       * TODO: should we review this? it feels more dangerous than useful.\n       */\n      if (!permissions || permissions.length === 0) {\n        return [{ action: '', subject: '' }];\n      }\n\n      /**\n       * Given the provided permissions, return the permissions from either passedPermissions\n       * or userPermissions as this is expected to be the full permission entity.\n       */\n      const actualUserPermissions = passedPermissions ?? userPermissions;\n\n      const matchingPermissions = actualUserPermissions.filter(\n        (permission) =>\n          permissions.findIndex(\n            (perm) =>\n              perm.action === permission.action &&\n              // Only check the subject if it's provided\n              (perm.subject == undefined || perm.subject === permission.subject)\n          ) >= 0\n      );\n\n      const middlewaredPermissions = await runRbacMiddleware(\n        {\n          user,\n          permissions: userPermissions,\n          pathname: locationRef.current.pathname,\n          search: (rawQueryContext || rawQuery).split('?')[1] ?? '',\n        },\n        matchingPermissions\n      );\n\n      const shouldCheckConditions = middlewaredPermissions.some(\n        (perm) => Array.isArray(perm.conditions) && perm.conditions.length > 0\n      );\n\n      if (!shouldCheckConditions) {\n        return middlewaredPermissions;\n      }\n\n      const { data, error } = await checkPermissions({\n        permissions: middlewaredPermissions.map((perm) => ({\n          action: perm.action,\n          subject: perm.subject,\n        })),\n      });\n\n      if (error) {\n        throw error;\n      } else {\n        return middlewaredPermissions.filter((_, index) => data?.data[index] === true);\n      }\n    },\n    [checkPermissions, rawQuery, runRbacMiddleware, user, userPermissions]\n  );\n\n  const isLoading = isLoadingUser || isLoadingPermissions;\n\n  return (\n    <>\n      <Provider\n        token={token}\n        user={user}\n        login={login}\n        logout={logout}\n        permissions={userPermissions}\n        checkUserHasPermissions={checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS}\n        refetchPermissions={refetchPermissions}\n        isLoading={isLoading}\n      >\n        {children}\n      </Provider>\n      <Dialog.Root\n        open={isSessionLogoutDialogOpen}\n        onOpenChange={handleSessionLogoutDialogOpenChange}\n      >\n        <ConfirmDialog\n          onConfirm={handleConfirmSessionLogout}\n          onCancel={handleCancelSessionLogout}\n          title={\n            LOGOUT_PROMPTS[sessionLogoutReason].title\n              ? formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].title)\n              : undefined\n          }\n          // Forced session-dead: no Cancel that pretends the session is still valid.\n          startAction={isForcedLogout(sessionLogoutReason) ? <></> : undefined}\n        >\n          {formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].body)}\n        </ConfirmDialog>\n      </Dialog.Root>\n    </>\n  );\n};\n\nexport { AuthProvider, useAuth, STORAGE_KEYS };\nexport type { AuthContextValue, Permission, User };\n"],"names":["EMPTY_DEFAULT_PERMISSIONS","NOOP_CHECK_USER_HAS_PERMISSIONS","Provider","useAuth","createContext","STORAGE_KEYS","STATUS","isForcedLogout","reason","LOGOUT_PROMPTS","voluntary","title","undefined","body","id","defaultMessage","AuthProvider","children","_defaultPermissions","_disableRenewToken","formatMessage","useIntl","dispatch","useTypedDispatch","runRbacMiddleware","useStrapiApp","state","rbac","run","location","useLocation","rawQuery","useQueryParams","locationRef","React","useRef","useEffect","current","token","useTypedSelector","admin_app","data","user","isLoading","isLoadingUser","useGetMeQuery","skip","userPermissions","refetch","isUninitialized","isLoadingPermissions","useGetMyPermissionsQuery","navigate","useNavigate","loginMutation","useLoginMutation","logoutMutation","useLogoutMutation","pendingLogoutRef","logoutGuardOpenRef","logoutGuardReasonRef","isSessionLogoutDialogOpen","setIsSessionLogoutDialogOpen","useState","sessionLogoutReason","setSessionLogoutReason","runLogoutWithGuard","useCallback","logoutFn","hasUnsavedChanges","performGlobalLogout","post","getFetchClient","adminApi","util","resetApiState","logoutAction","clearStateAndLogout","handleConfirmSessionLogout","handleCancelSessionLogout","forced","handleSessionLogoutDialogOpenChange","open","resyncToken","newToken","setToken","lastActivityRef","Date","now","markActivity","events","forEach","event","window","addEventListener","passive","capture","removeEventListener","getLastActivityAt","renewSession","attemptTokenRefresh","preferedLanguage","setLocale","normalizeAdminLocale","setOnTokenUpdate","setOnSessionExpired","useSessionKeepalive","onSessionDead","getStoredToken","onResync","disabled","handleUserStorageChange","key","newValue","login","rememberMe","res","deviceId","getOrCreateDeviceId","resetSessionExpiredNotification","loginAction","persist","logout","refetchPermissions","checkPermissions","useLazyCheckPermissionsQuery","checkUserHasPermissions","permissions","passedPermissions","rawQueryContext","length","action","subject","actualUserPermissions","matchingPermissions","filter","permission","findIndex","perm","middlewaredPermissions","pathname","search","split","shouldCheckConditions","some","Array","isArray","conditions","error","map","_","index","_jsxs","_Fragment","_jsx","Dialog","Root","onOpenChange","ConfirmDialog","onConfirm","onCancel","startAction"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,MAAMA,4BAAmF,EAAE;AAqC3F;;;;;;;;;;;;;;IAeA,MAAMC,+BAAAA,GAA+E,UAAY,EAAE;AAEnG,MAAM,CAACC,QAAAA,EAAUC,OAAAA,CAAQ,GAAGC,qBAAAA,CAAgC,MAAA;AAa5D,MAAMC,YAAAA,GAAe;IAEnBC,MAAAA,EAAQ;AACV;AAaA,MAAMC,cAAAA,GAAiB,CAACC,MAAAA,GAAyBA,MAAAA,KAAW,cAAA;AAE5D;;;;AAIC,IACD,MAAMC,cAAAA,GAAiB;IACrBC,SAAAA,EAAW;QACTC,KAAAA,EAAOC,SAAAA;QACPC,IAAAA,EAAM;YACJC,EAAAA,EAAI,uBAAA;YACJC,cAAAA,EAAgB;AAClB;AACF,KAAA;IACA,cAAA,EAAgB;QACdJ,KAAAA,EAAO;YACLG,EAAAA,EAAI,yBAAA;YACJC,cAAAA,EAAgB;AAClB,SAAA;QACAF,IAAAA,EAAM;YACJC,EAAAA,EAAI,2BAAA;YACJC,cAAAA,EACE;AACJ;AACF;AACF,CAAA;AAEA,MAAMC,YAAAA,GAAe,CAAC,EACpBC,QAAQ,EACRC,sBAAsBlB,yBAAyB,EAC/CmB,kBAAAA,GAAqB,KAAK,EACR,GAAA;IAClB,MAAM,EAAEC,aAAa,EAAE,GAAGC,iBAAAA,EAAAA;AAC1B,IAAA,MAAMC,QAAAA,GAAWC,sBAAAA,EAAAA;IACjB,MAAMC,iBAAAA,GAAoBC,uBAAa,cAAA,EAAgB,CAACC,QAAUA,KAAAA,CAAMC,IAAI,CAACC,GAAG,CAAA;AAChF,IAAA,MAAMC,QAAAA,GAAWC,0BAAAA,EAAAA;AACjB,IAAA,MAAM,CAAC,EAAEC,QAAQ,EAAE,CAAC,GAAGC,6BAAAA,EAAAA;IAEvB,MAAMC,WAAAA,GAAcC,gBAAAA,CAAMC,MAAM,CAACN,QAAAA,CAAAA;;AAGjCK,IAAAA,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACdH,QAAAA,WAAAA,CAAYI,OAAO,GAAGR,QAAAA;IACxB,CAAA,EAAG;AAACA,QAAAA;AAAS,KAAA,CAAA;IAEb,MAAMS,KAAAA,GAAQC,uBAAiB,CAACb,KAAAA,GAAUA,MAAMc,SAAS,CAACF,KAAK,IAAI,IAAA,CAAA;IAEnE,MAAM,EAAEG,MAAMC,IAAI,EAAEC,WAAWC,aAAa,EAAE,GAAGC,kBAAAA,CAAcjC,SAAAA,EAAW;AACxE;;;AAGC,QACDkC,MAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAM,EACJG,IAAAA,EAAMM,eAAAA,GAAkB7B,mBAAmB,EAC3C8B,OAAO,EACPC,eAAe,EACfN,SAAAA,EAAWO,oBAAoB,EAChC,GAAGC,8BAAyBvC,SAAAA,EAAW;AACtCkC,QAAAA,IAAAA,EAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAMc,QAAAA,GAAWC,0BAAAA,EAAAA;IAEjB,MAAM,CAACC,cAAc,GAAGC,qBAAAA,EAAAA;IACxB,MAAM,CAACC,eAAe,GAAGC,sBAAAA,EAAAA;IAEzB,MAAMC,gBAAAA,GAAmBxB,gBAAAA,CAAMC,MAAM,CAAsB,IAAA,CAAA;IAC3D,MAAMwB,kBAAAA,GAAqBzB,gBAAAA,CAAMC,MAAM,CAAC,KAAA,CAAA;IACxC,MAAMyB,oBAAAA,GAAuB1B,gBAAAA,CAAMC,MAAM,CAAe,WAAA,CAAA;AACxD,IAAA,MAAM,CAAC0B,yBAAAA,EAA2BC,4BAAAA,CAA6B,GAAG5B,gBAAAA,CAAM6B,QAAQ,CAAC,KAAA,CAAA;AACjF,IAAA,MAAM,CAACC,mBAAAA,EAAqBC,sBAAAA,CAAuB,GAAG/B,gBAAAA,CAAM6B,QAAQ,CAAe,WAAA,CAAA;AAEnF;;;;;;;MAQA,MAAMG,qBAAqBhC,gBAAAA,CAAMiC,WAAW,CAC1C,CAACC,QAAAA,EAAsB5D,SAAuB,WAAW,GAAA;QACvD,IAAImD,kBAAAA,CAAmBtB,OAAO,EAAE;AAC9BqB,YAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;AAC3B,YAAA,IAAI7D,eAAeC,MAAAA,CAAAA,EAAS;AAC1BoD,gBAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;gBAC/ByD,sBAAAA,CAAuBzD,MAAAA,CAAAA;AACzB,YAAA;AACA,YAAA;AACF,QAAA;AAEA,QAAA,IAAI,CAAC6D,wCAAAA,EAAAA,EAAqB;AACxBD,YAAAA,QAAAA,EAAAA;AACA,YAAA;AACF,QAAA;AAEAT,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,IAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;AAC/BkD,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;QAC3BH,sBAAAA,CAAuBzD,MAAAA,CAAAA;QACvBsD,4BAAAA,CAA6B,IAAA,CAAA;AAC/B,IAAA,CAAA,EACA,EAAE,CAAA;IAGJ,MAAMQ,mBAAAA,GAAsBpC,gBAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5C,QAAA,KAAK,CAAC,UAAA;YACJ,IAAI;gBACF,MAAM,EAAEI,IAAI,EAAE,GAAGC,6BAAAA,EAAAA;AACjB,gBAAA,MAAMD,IAAAA,CAAK,eAAA,CAAA;AACb,YAAA,CAAA,CAAE,OAAM;;AAER,YAAA;QACF,CAAA,GAAA;QAEAjD,QAAAA,CAASmD,YAAAA,CAASC,IAAI,CAACC,aAAa,EAAA,CAAA;QACpCrD,QAAAA,CAASsD,cAAAA,EAAAA,CAAAA;QACTxB,QAAAA,CAAS,aAAA,CAAA;IACX,CAAA,EAAG;AAAC9B,QAAAA,QAAAA;AAAU8B,QAAAA;AAAS,KAAA,CAAA;IAEvB,MAAMyB,mBAAAA,GAAsB3C,gBAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5CD,QAAAA,kBAAAA,CAAmBI,mBAAAA,EAAqB,cAAA,CAAA;IAC1C,CAAA,EAAG;AAACA,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5C,MAAMY,0BAAAA,GAA6B5C,gBAAAA,CAAMiC,WAAW,CAAC,IAAA;AACnDR,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;QAC/ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;QACvB,MAAMG,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;AAC3B+B,QAAAA,QAAAA,IAAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IAEL,MAAMW,yBAAAA,GAA4B7C,gBAAAA,CAAMiC,WAAW,CAAC,IAAA;QAClD,MAAMa,MAAAA,GAASzE,cAAAA,CAAeqD,oBAAAA,CAAqBvB,OAAO,CAAA;QAC1D,MAAM+B,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCsB,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;AAC/BqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;QAC3ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;;AAEvB,QAAA,IAAIe,MAAAA,EAAQ;AACVZ,YAAAA,QAAAA,IAAAA;AACF,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAEL,IAAA,MAAMa,mCAAAA,GAAsC/C,gBAAAA,CAAMiC,WAAW,CAC3D,CAACe,IAAAA,GAAAA;AACC,QAAA,IAAI,CAACA,IAAAA,EAAM;AACTH,YAAAA,yBAAAA,EAAAA;AACF,QAAA;IACF,CAAA,EACA;AAACA,QAAAA;AAA0B,KAAA,CAAA;AAG7B,IAAA,MAAMI,WAAAA,GAAcjD,gBAAAA,CAAMiC,WAAW,CACnC,CAACiB,QAAAA,GAAAA;AACC9D,QAAAA,QAAAA,CAAS+D,gBAAAA,CAASD,QAAAA,CAAAA,CAAAA;IACpB,CAAA,EACA;AAAC9D,QAAAA;AAAS,KAAA,CAAA;AAGZ;;;;;;;AAOC,MACD,MAAMgE,eAAAA,GAAkBpD,gBAAAA,CAAMC,MAAM,CAACoD,KAAKC,GAAG,EAAA,CAAA;AAC7CtD,IAAAA,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,MAAMqD,YAAAA,GAAe,IAAA;YACnBH,eAAAA,CAAgBjD,OAAO,GAAGkD,IAAAA,CAAKC,GAAG,EAAA;AACpC,QAAA,CAAA;AACA,QAAA,MAAME,MAAAA,GAAS;AAAC,YAAA,aAAA;AAAe,YAAA,SAAA;AAAW,YAAA,OAAA;AAAS,YAAA,QAAA;AAAU,YAAA;AAAa,SAAA;QAC1EA,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GACdC,OAAOC,gBAAgB,CAACF,OAAOH,YAAAA,EAAc;gBAAEM,OAAAA,EAAS,IAAA;gBAAMC,OAAAA,EAAS;AAAK,aAAA,CAAA,CAAA;QAG9E,OAAO,IAAA;YACLN,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GAAUC,OAAOI,mBAAmB,CAACL,OAAOH,YAAAA,EAAc;oBAAEO,OAAAA,EAAS;AAAK,iBAAA,CAAA,CAAA;AAC5F,QAAA,CAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IACL,MAAME,iBAAAA,GAAoBhE,iBAAMiC,WAAW,CAAC,IAAMmB,eAAAA,CAAgBjD,OAAO,EAAE,EAAE,CAAA;AAE7E;;;;AAIC,MACD,MAAM8D,YAAAA,GAAejE,gBAAAA,CAAMiC,WAAW,CAAC,UAAA;QACrC,IAAI;YACF,MAAMiC,kCAAAA,EAAAA;YACN,OAAO,IAAA;AACT,QAAA,CAAA,CAAE,OAAM;YACN,OAAO,KAAA;AACT,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAELlE,IAAAA,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,IAAIM,IAAAA,EAAM;YACR,IAAIA,IAAAA,CAAK2D,gBAAgB,EAAE;gBACzB/E,QAAAA,CAASgF,iBAAAA,CAAUC,yCAAAA,CAAqB7D,IAAAA,CAAK2D,gBAAgB,CAAA,CAAA,CAAA;AAC/D,YAAA;AACF,QAAA;IACF,CAAA,EAAG;AAAC/E,QAAAA,QAAAA;AAAUoB,QAAAA;AAAK,KAAA,CAAA;AAEnB;;;MAIAR,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACdoE,QAAAA,+BAAAA,CAAiB,CAACpB,QAAAA,GAAAA;AAChB9D,YAAAA,QAAAA,CAAS+D,gBAAAA,CAASD,QAAAA,CAAAA,CAAAA;AACpB,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACLoB,+BAAAA,CAAiB,IAAA,CAAA;AACnB,QAAA,CAAA;IACF,CAAA,EAAG;AAAClF,QAAAA;AAAS,KAAA,CAAA;AAEb;;;;;MAMAY,gBAAAA,CAAME,SAAS,CAAC,IAAA;QACdqE,kCAAAA,CAAoB,IAAA;AAClB5B,YAAAA,mBAAAA,EAAAA;AACF,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACL4B,kCAAAA,CAAoB,IAAA,CAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AAAC5B,QAAAA;AAAoB,KAAA,CAAA;AAExB;;;;;;;;AAQC,MACD6B,uCAAAA,CAAoB;AAClBpE,QAAAA,KAAAA;QACAqE,aAAAA,EAAe9B,mBAAAA;AACf+B,wBAAAA,sBAAAA;QACAC,QAAAA,EAAU1B,WAAAA;AACVe,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;QACAW,QAAAA,EAAU3F;AACZ,KAAA,CAAA;AAEAe,IAAAA,gBAAAA,CAAME,SAAS,CAAC,IAAA;AACd;;QAGA,MAAM2E,0BAA0B,CAACnB,KAAAA,GAAAA;YAC/B,IAAIA,KAAAA,CAAMoB,GAAG,KAAK3G,YAAAA,CAAaC,MAAM,IAAIsF,KAAAA,CAAMqB,QAAQ,KAAK,IAAA,EAAM;AAChEpC,gBAAAA,mBAAAA,EAAAA;AACF,YAAA;AACF,QAAA,CAAA;QAEAgB,MAAAA,CAAOC,gBAAgB,CAAC,SAAA,EAAWiB,uBAAAA,CAAAA;QAEnC,OAAO,IAAA;YACLlB,MAAAA,CAAOI,mBAAmB,CAAC,SAAA,EAAWc,uBAAAA,CAAAA;AACxC,QAAA,CAAA;AACF,IAAA,CAAA,CAAA;IAEA,MAAMG,KAAAA,GAAQhF,iBAAMiC,WAAW,CAC7B,OAAO,EAAEgD,UAAU,EAAE,GAAGtG,IAAAA,EAAM,GAAA;QAC5B,MAAMuG,GAAAA,GAAM,MAAM9D,aAAAA,CAAc;AAAE,YAAA,GAAGzC,IAAI;YAAEwG,QAAAA,EAAUC,4BAAAA,EAAAA;AAAuBH,YAAAA;AAAW,SAAA,CAAA;AAEvF;;;UAIA,IAAI,UAAUC,GAAAA,EAAK;AACjB,YAAA,MAAM,EAAE9E,KAAK,EAAE,GAAG8E,IAAI3E,IAAI;AAE1B8E,YAAAA,8CAAAA,EAAAA;AACAjG,YAAAA,QAAAA,CACEkG,aAAAA,CAAY;AACVlF,gBAAAA,KAAAA;gBACAmF,OAAAA,EAASN;AACX,aAAA,CAAA,CAAA;AAEJ,QAAA;QAEA,OAAOC,GAAAA;IACT,CAAA,EACA;AAAC9F,QAAAA,QAAAA;AAAUgC,QAAAA;AAAc,KAAA,CAAA;AAG3B;;;AAGC,MACD,MAAMoE,MAAAA,GAASxF,gBAAAA,CAAMiC,WAAW,CAAC,UAAA;QAC/BD,kBAAAA,CAAmB,IAAA;AACjB,YAAA,KAAK,CAAC,UAAA;gBACJ,IAAI;AACF,oBAAA,MAAMV,cAAAA,CAAe;wBAAE6D,QAAAA,EAAUC,4BAAAA;AAAsB,qBAAA,CAAA;AACzD,gBAAA,CAAA,CAAE,OAAM;;AAER,gBAAA;AACAhD,gBAAAA,mBAAAA,EAAAA;YACF,CAAA,GAAA;AACF,QAAA,CAAA,CAAA;IACF,CAAA,EAAG;AAACd,QAAAA,cAAAA;AAAgBc,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5D,MAAMyD,kBAAAA,GAAqBzF,gBAAAA,CAAMiC,WAAW,CAAC,UAAA;AAC3C,QAAA,IAAI,CAAClB,eAAAA,EAAiB;YACpB,MAAMD,OAAAA,EAAAA;AACR,QAAA;IACF,CAAA,EAAG;AAACC,QAAAA,eAAAA;AAAiBD,QAAAA;AAAQ,KAAA,CAAA;IAE7B,MAAM,CAAC4E,iBAAiB,GAAGC,iCAAAA,EAAAA;AAC3B,IAAA,MAAMC,0BAAuE5F,gBAAAA,CAAMiC,WAAW,CAC5F,OACE4D,WAAAA,EACAC;;;;;;;;AAUAC,IAAAA,eAAAA,GAAAA;AAEA;;;;;AAKC,UACD,IAAI,CAACF,WAAAA,IAAeA,WAAAA,CAAYG,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO;AAAC,gBAAA;oBAAEC,MAAAA,EAAQ,EAAA;oBAAIC,OAAAA,EAAS;AAAG;AAAE,aAAA;AACtC,QAAA;AAEA;;;UAIA,MAAMC,wBAAwBL,iBAAAA,IAAqBjF,eAAAA;AAEnD,QAAA,MAAMuF,sBAAsBD,qBAAAA,CAAsBE,MAAM,CACtD,CAACC,aACCT,WAAAA,CAAYU,SAAS,CACnB,CAACC,OACCA,IAAAA,CAAKP,MAAM,KAAKK,UAAAA,CAAWL,MAAM;iBAEhCO,IAAAA,CAAKN,OAAO,IAAIxH,SAAAA,IAAa8H,IAAAA,CAAKN,OAAO,KAAKI,UAAAA,CAAWJ,OAAM,CAAA,CAAA,IAC/D,CAAA,CAAA;QAGT,MAAMO,sBAAAA,GAAyB,MAAMnH,iBAAAA,CACnC;AACEkB,YAAAA,IAAAA;YACAqF,WAAAA,EAAahF,eAAAA;YACb6F,QAAAA,EAAU3G,WAAAA,CAAYI,OAAO,CAACuG,QAAQ;YACtCC,MAAAA,EAASZ,CAAAA,eAAAA,IAAmBlG,QAAO,EAAG+G,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI;SACzD,EACAR,mBAAAA,CAAAA;AAGF,QAAA,MAAMS,wBAAwBJ,sBAAAA,CAAuBK,IAAI,CACvD,CAACN,OAASO,KAAAA,CAAMC,OAAO,CAACR,IAAAA,CAAKS,UAAU,CAAA,IAAKT,IAAAA,CAAKS,UAAU,CAACjB,MAAM,GAAG,CAAA,CAAA;AAGvE,QAAA,IAAI,CAACa,qBAAAA,EAAuB;YAC1B,OAAOJ,sBAAAA;AACT,QAAA;AAEA,QAAA,MAAM,EAAElG,IAAI,EAAE2G,KAAK,EAAE,GAAG,MAAMxB,gBAAAA,CAAiB;AAC7CG,YAAAA,WAAAA,EAAaY,sBAAAA,CAAuBU,GAAG,CAAC,CAACX,QAAU;AACjDP,oBAAAA,MAAAA,EAAQO,KAAKP,MAAM;AACnBC,oBAAAA,OAAAA,EAASM,KAAKN;iBAChB,CAAA;AACF,SAAA,CAAA;AAEA,QAAA,IAAIgB,KAAAA,EAAO;YACT,MAAMA,KAAAA;QACR,CAAA,MAAO;YACL,OAAOT,sBAAAA,CAAuBJ,MAAM,CAAC,CAACe,CAAAA,EAAGC,QAAU9G,IAAAA,EAAMA,IAAI,CAAC8G,KAAAA,CAAM,KAAK,IAAA,CAAA;AAC3E,QAAA;IACF,CAAA,EACA;AAAC3B,QAAAA,gBAAAA;AAAkB7F,QAAAA,QAAAA;AAAUP,QAAAA,iBAAAA;AAAmBkB,QAAAA,IAAAA;AAAMK,QAAAA;AAAgB,KAAA,CAAA;AAGxE,IAAA,MAAMJ,YAAYC,aAAAA,IAAiBM,oBAAAA;IAEnC,qBACEsG,eAAA,CAAAC,mBAAA,EAAA;;0BACEC,cAAA,CAACxJ,QAAAA,EAAAA;gBACCoC,KAAAA,EAAOA,KAAAA;gBACPI,IAAAA,EAAMA,IAAAA;gBACNwE,KAAAA,EAAOA,KAAAA;gBACPQ,MAAAA,EAAQA,MAAAA;gBACRK,WAAAA,EAAahF,eAAAA;AACb+E,gBAAAA,uBAAAA,EAAyBA,uBAAAA,IAA2B7H,+BAAAA;gBACpD0H,kBAAAA,EAAoBA,kBAAAA;gBACpBhF,SAAAA,EAAWA,SAAAA;AAEV1B,gBAAAA,QAAAA,EAAAA;;AAEH,0BAAAyI,cAAA,CAACC,oBAAOC,IAAI,EAAA;gBACV1E,IAAAA,EAAMrB,yBAAAA;gBACNgG,YAAAA,EAAc5E,mCAAAA;AAEd,gBAAA,QAAA,gBAAAyE,cAAA,CAACI,2BAAAA,EAAAA;oBACCC,SAAAA,EAAWjF,0BAAAA;oBACXkF,QAAAA,EAAUjF,yBAAAA;AACVpE,oBAAAA,KAAAA,EACEF,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,GACrCS,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,CAAA,GACvDC,SAAAA;;oBAGNqJ,WAAAA,EAAa1J,cAAAA,CAAeyD,qCAAuB0F,cAAA,CAAAD,mBAAA,EAAA,EAAA,CAAA,GAAQ7I,SAAAA;AAE1DQ,oBAAAA,QAAAA,EAAAA,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACnD,IAAI;;;;;AAKjE;;;;;;"}

package/dist/admin/admin/src/features/Auth.mjs

@@ -17,6 +17,7 @@ import { getOrCreateDeviceId } from '../utils/deviceId.mjs';
 import { getFetchClient, attemptTokenRefresh, setOnSessionExpired, resetSessionExpiredNotification, setOnTokenUpdate } from '../utils/getFetchClient.mjs';
 import { hasUnsavedChanges } from '../utils/unsavedChangesRegistry.mjs';
 
+const EMPTY_DEFAULT_PERMISSIONS = [];
 /**
  * ensure the Auth context never exposes a non-function for checkUserHasPermissions.
  * When this is undefined (e.g. context timing in production builds), consumers would throw
@@ -60,7 +61,7 @@ const isForcedLogout = (reason)=>reason === 'session-dead';
         }
     }
 };
-const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken = false })=>{
+const AuthProvider = ({ children, _defaultPermissions = EMPTY_DEFAULT_PERMISSIONS, _disableRenewToken = false })=>{
     const { formatMessage } = useIntl();
     const dispatch = useTypedDispatch();
     const runRbacMiddleware = useStrapiApp('AuthProvider', (state)=>state.rbac.run);

package/dist/admin/admin/src/features/Auth.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.mjs","sources":["../../../../../admin/src/features/Auth.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { Dialog } from '@strapi/design-system';\nimport { useIntl, type MessageDescriptor } from 'react-intl';\nimport { useLocation, useNavigate } from 'react-router-dom';\n\nimport { Login } from '../../../shared/contracts/authentication';\nimport { ConfirmDialog } from '../components/ConfirmDialog';\nimport { createContext } from '../components/Context';\nimport { useTypedDispatch, useTypedSelector } from '../core/store/hooks';\nimport { useStrapiApp } from '../features/StrapiApp';\nimport { useQueryParams } from '../hooks/useQueryParams';\nimport { useSessionKeepalive } from '../hooks/useSessionKeepalive';\nimport {\n  getStoredToken,\n  login as loginAction,\n  logout as logoutAction,\n  setLocale,\n  setToken,\n} from '../reducer';\nimport { adminApi } from '../services/api';\nimport {\n  useGetMeQuery,\n  useGetMyPermissionsQuery,\n  useLazyCheckPermissionsQuery,\n  useLoginMutation,\n  useLogoutMutation,\n} from '../services/auth';\nimport { normalizeAdminLocale } from '../translations/normalizeAdminLocale';\nimport { getOrCreateDeviceId } from '../utils/deviceId';\nimport {\n  attemptTokenRefresh,\n  getFetchClient,\n  resetSessionExpiredNotification,\n  setOnSessionExpired,\n  setOnTokenUpdate,\n} from '../utils/getFetchClient';\nimport { hasUnsavedChanges } from '../utils/unsavedChangesRegistry';\n\nimport type {\n  Permission as PermissionContract,\n  SanitizedAdminUser,\n} from '../../../shared/contracts/shared';\n\ninterface Permission\n  extends Pick<PermissionContract, 'action' | 'subject'>,\n    Partial<Omit<PermissionContract, 'action' | 'subject'>> {}\n\ninterface User\n  extends Pick<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>,\n    Partial<Omit<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>> {}\n\ninterface AuthContextValue {\n  login: (\n    body: Login.Request['body'] & { rememberMe: boolean }\n  ) => Promise<Awaited<ReturnType<ReturnType<typeof useLoginMutation>[0]>>>;\n  logout: () => Promise<void>;\n  /**\n   * @alpha\n   * @description given a list of permissions, this function checks\n   * those against the current user's permissions or those passed as\n   * the second argument, if the user has those permissions the complete\n   * permission object form the API is returned. Therefore, if the list is\n   * empty, the user does not have any of those permissions.\n   */\n  checkUserHasPermissions: (\n    permissions?: Array<Pick<Permission, 'action'> & Partial<Omit<Permission, 'action'>>>,\n    passedPermissions?: Permission[],\n    rawQueryContext?: string\n  ) => Promise<Permission[]>;\n  isLoading: boolean;\n  permissions: Permission[];\n  refetchPermissions: () => Promise<void>;\n  token: string | null;\n  user?: User;\n}\n\n/**\n * ensure the Auth context never exposes a non-function for checkUserHasPermissions.\n * When this is undefined (e.g. context timing in production builds), consumers would throw\n * \"p is not a function\" / \"checkUserHasPermissions is not a function\". By always passing\n * a function here, all current and future consumers are protected without per-call-site guards.\n *\n * When would the fallback run? Only if the real checkUserHasPermissions were ever undefined\n * when we pass to the Provider (e.g. a rare timing/build edge case). In normal runs it is\n * always defined (useCallback), so the real function is passed and behavior is unchanged.\n *\n * If the fallback ever did run: it returns [] so consumers (which use .length > 0) treat it\n * as \"no permission\" for that render—under-permissive. On the next AuthProvider re-render we\n * pass the real function again, so the context updates and the view corrects quickly.\n * @see https://github.com/strapi/strapi/issues/24384\n */\nconst NOOP_CHECK_USER_HAS_PERMISSIONS: AuthContextValue['checkUserHasPermissions'] = async () => [];\n\nconst [Provider, useAuth] = createContext<AuthContextValue>('Auth');\n\ninterface AuthProviderProps {\n  children: React.ReactNode;\n  /**\n   * @internal could be removed at any time.\n   */\n  _defaultPermissions?: Permission[];\n\n  // NOTE: this is used for testing purposed only\n  _disableRenewToken?: boolean;\n}\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  STATUS: 'isLoggedIn',\n};\n\n/**\n * Why the session is ending.\n * - `voluntary`: explicit user logout — cancelable when there are unsaved edits.\n * - `session-dead`: server rejected the refresh (idle/max session window elapsed)\n *   — forced; Cancel / dismiss still clears client state.\n *\n * Short-lived access-token expiry is NOT a logout reason: idle tabs leave the\n * stale token in place and the next request refreshes (or hits session-dead).\n */\ntype LogoutReason = 'voluntary' | 'session-dead';\n\nconst isForcedLogout = (reason: LogoutReason) => reason === 'session-dead';\n\n/**\n * Copy for the unsaved-changes prompt. A server-confirmed dead session needs to\n * say *why* the dialog appeared, otherwise it reads as the usual navigation\n * blocker and users confirm straight through it.\n */\nconst LOGOUT_PROMPTS = {\n  voluntary: {\n    title: undefined,\n    body: {\n      id: 'global.prompt.unsaved',\n      defaultMessage: 'You have unsaved changes, are you sure you want to leave?',\n    },\n  },\n  'session-dead': {\n    title: {\n      id: 'app.session.ended.title',\n      defaultMessage: 'Session ended',\n    },\n    body: {\n      id: 'app.session.ended.unsaved',\n      defaultMessage:\n        \"Your session has ended and can't be resumed. Your unsaved changes will be lost when you log out.\",\n    },\n  },\n} satisfies Record<LogoutReason, { title?: MessageDescriptor; body: MessageDescriptor }>;\n\nconst AuthProvider = ({\n  children,\n  _defaultPermissions = [],\n  _disableRenewToken = false,\n}: AuthProviderProps) => {\n  const { formatMessage } = useIntl();\n  const dispatch = useTypedDispatch();\n  const runRbacMiddleware = useStrapiApp('AuthProvider', (state) => state.rbac.run);\n  const location = useLocation();\n  const [{ rawQuery }] = useQueryParams();\n\n  const locationRef = React.useRef(location);\n\n  // Update ref without causing re-render\n  React.useEffect(() => {\n    locationRef.current = location;\n  }, [location]);\n\n  const token = useTypedSelector((state) => state.admin_app.token ?? null);\n\n  const { data: user, isLoading: isLoadingUser } = useGetMeQuery(undefined, {\n    /**\n     * If there's no token, we don't try to fetch\n     * the user data because it will fail.\n     */\n    skip: !token,\n  });\n\n  const {\n    data: userPermissions = _defaultPermissions,\n    refetch,\n    isUninitialized,\n    isLoading: isLoadingPermissions,\n  } = useGetMyPermissionsQuery(undefined, {\n    skip: !token,\n  });\n\n  const navigate = useNavigate();\n\n  const [loginMutation] = useLoginMutation();\n  const [logoutMutation] = useLogoutMutation();\n\n  const pendingLogoutRef = React.useRef<(() => void) | null>(null);\n  const logoutGuardOpenRef = React.useRef(false);\n  const logoutGuardReasonRef = React.useRef<LogoutReason>('voluntary');\n  const [isSessionLogoutDialogOpen, setIsSessionLogoutDialogOpen] = React.useState(false);\n  const [sessionLogoutReason, setSessionLogoutReason] = React.useState<LogoutReason>('voluntary');\n\n  /**\n   * Prompt before discarding unsaved edits, then run `logoutFn`.\n   *\n   * - `voluntary`: Cancel leaves the user logged in (server session intact).\n   * - `session-dead`: the session is already unusable — Cancel (or dismiss)\n   *   still runs `logoutFn` so the client cannot keep a stale token. While the\n   *   dialog is open, a later `session-dead` request upgrades the pending action.\n   */\n  const runLogoutWithGuard = React.useCallback(\n    (logoutFn: () => void, reason: LogoutReason = 'voluntary') => {\n      if (logoutGuardOpenRef.current) {\n        pendingLogoutRef.current = logoutFn;\n        if (isForcedLogout(reason)) {\n          logoutGuardReasonRef.current = reason;\n          setSessionLogoutReason(reason);\n        }\n        return;\n      }\n\n      if (!hasUnsavedChanges()) {\n        logoutFn();\n        return;\n      }\n\n      logoutGuardOpenRef.current = true;\n      logoutGuardReasonRef.current = reason;\n      pendingLogoutRef.current = logoutFn;\n      setSessionLogoutReason(reason);\n      setIsSessionLogoutDialogOpen(true);\n    },\n    []\n  );\n\n  const performGlobalLogout = React.useCallback(() => {\n    void (async () => {\n      try {\n        const { post } = getFetchClient();\n        await post('/admin/logout');\n      } catch {\n        // The session may already be invalid.\n      }\n    })();\n\n    dispatch(adminApi.util.resetApiState());\n    dispatch(logoutAction());\n    navigate('/auth/login');\n  }, [dispatch, navigate]);\n\n  const clearStateAndLogout = React.useCallback(() => {\n    runLogoutWithGuard(performGlobalLogout, 'session-dead');\n  }, [performGlobalLogout, runLogoutWithGuard]);\n\n  const handleConfirmSessionLogout = React.useCallback(() => {\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    const logoutFn = pendingLogoutRef.current;\n    pendingLogoutRef.current = null;\n    logoutFn?.();\n  }, []);\n\n  const handleCancelSessionLogout = React.useCallback(() => {\n    const forced = isForcedLogout(logoutGuardReasonRef.current);\n    const logoutFn = pendingLogoutRef.current;\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    pendingLogoutRef.current = null;\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    // Forced paths: session is already dead — dismiss must still clear client state.\n    if (forced) {\n      logoutFn?.();\n    }\n  }, []);\n\n  const handleSessionLogoutDialogOpenChange = React.useCallback(\n    (open: boolean) => {\n      if (!open) {\n        handleCancelSessionLogout();\n      }\n    },\n    [handleCancelSessionLogout]\n  );\n\n  const resyncToken = React.useCallback(\n    (newToken: string) => {\n      dispatch(setToken(newToken));\n    },\n    [dispatch]\n  );\n\n  /**\n   * Track the timestamp of the user's last interaction. This is the activity\n   * signal `useSessionKeepalive` uses to tell an active user (silently renew\n   * their session) apart from a genuinely idle one (leave the stale access\n   * token alone until the next request). Successful API calls don't refresh\n   * the short-lived access token on their own, so without this an\n   * actively-working user would hit a 401 the moment the token expires.\n   */\n  const lastActivityRef = React.useRef(Date.now());\n  React.useEffect(() => {\n    const markActivity = () => {\n      lastActivityRef.current = Date.now();\n    };\n    const events = ['pointerdown', 'keydown', 'click', 'scroll', 'touchstart'];\n    events.forEach((event) =>\n      window.addEventListener(event, markActivity, { passive: true, capture: true })\n    );\n\n    return () => {\n      events.forEach((event) => window.removeEventListener(event, markActivity, { capture: true }));\n    };\n  }, []);\n  const getLastActivityAt = React.useCallback(() => lastActivityRef.current, []);\n\n  /**\n   * Silently rotate the refresh token and mint a new access token. Returns\n   * `true` on success (the resulting `setToken` re-arms the renew timer) and\n   * `false` when the server rejects it (session genuinely over).\n   */\n  const renewSession = React.useCallback(async () => {\n    try {\n      await attemptTokenRefresh();\n      return true;\n    } catch {\n      return false;\n    }\n  }, []);\n\n  React.useEffect(() => {\n    if (user) {\n      if (user.preferedLanguage) {\n        dispatch(setLocale(normalizeAdminLocale(user.preferedLanguage)));\n      }\n    }\n  }, [dispatch, user]);\n\n  /**\n   * Register a callback to update Redux state when the token is refreshed.\n   * This ensures the app state stays in sync with the token stored in localStorage/cookies.\n   */\n  React.useEffect(() => {\n    setOnTokenUpdate((newToken) => {\n      dispatch(setToken(newToken));\n    });\n\n    return () => {\n      setOnTokenUpdate(null);\n    };\n  }, [dispatch]);\n\n  /**\n   * Register the session-expired handler that the fetch layer / RTK baseQuery\n   * call when the server rejects the refresh token. This is what redirects\n   * the active tab to /auth/login on a 401, instead of leaving the user on\n   * a stale page until they click something.\n   */\n  React.useEffect(() => {\n    setOnSessionExpired(() => {\n      clearStateAndLogout();\n    });\n\n    return () => {\n      setOnSessionExpired(null);\n    };\n  }, [clearStateAndLogout]);\n\n  /**\n   * Session keepalive around access-token expiry. The timer fires per-tab; the\n   * hook then either (1) re-syncs from a token another tab refreshed, (2)\n   * silently renews when the user has been active, or (3) does nothing when\n   * idle — leaving the stale access token in place so unsaved form state\n   * survives until the next request refreshes it. A server-confirmed dead\n   * session (renewal rejected) broadcasts globally via `onSessionDead`. See\n   * `useSessionKeepalive` for the full rationale.\n   */\n  useSessionKeepalive({\n    token,\n    onSessionDead: clearStateAndLogout,\n    getStoredToken,\n    onResync: resyncToken,\n    getLastActivityAt,\n    renewSession,\n    disabled: _disableRenewToken,\n  });\n\n  React.useEffect(() => {\n    /**\n     * This will log a user out of all tabs if they log out in one tab.\n     */\n    const handleUserStorageChange = (event: StorageEvent) => {\n      if (event.key === STORAGE_KEYS.STATUS && event.newValue === null) {\n        clearStateAndLogout();\n      }\n    };\n\n    window.addEventListener('storage', handleUserStorageChange);\n\n    return () => {\n      window.removeEventListener('storage', handleUserStorageChange);\n    };\n  });\n\n  const login = React.useCallback<AuthContextValue['login']>(\n    async ({ rememberMe, ...body }) => {\n      const res = await loginMutation({ ...body, deviceId: getOrCreateDeviceId(), rememberMe });\n\n      /**\n       * There will always be a `data` key in the response\n       * because if something fails, it will throw an error.\n       */\n      if ('data' in res) {\n        const { token } = res.data;\n\n        resetSessionExpiredNotification();\n        dispatch(\n          loginAction({\n            token,\n            persist: rememberMe,\n          })\n        );\n      }\n\n      return res;\n    },\n    [dispatch, loginMutation]\n  );\n\n  /**\n   * Explicit user logout. Confirm unsaved changes *before* `logoutMutation` so\n   * Cancel leaves the server session and client token intact.\n   */\n  const logout = React.useCallback(async () => {\n    runLogoutWithGuard(() => {\n      void (async () => {\n        try {\n          await logoutMutation({ deviceId: getOrCreateDeviceId() });\n        } catch {\n          // The session may already be invalid.\n        }\n        performGlobalLogout();\n      })();\n    });\n  }, [logoutMutation, performGlobalLogout, runLogoutWithGuard]);\n\n  const refetchPermissions = React.useCallback(async () => {\n    if (!isUninitialized) {\n      await refetch();\n    }\n  }, [isUninitialized, refetch]);\n\n  const [checkPermissions] = useLazyCheckPermissionsQuery();\n  const checkUserHasPermissions: AuthContextValue['checkUserHasPermissions'] = React.useCallback(\n    async (\n      permissions,\n      passedPermissions,\n      // TODO:\n      // Here we have parameterised checkUserHasPermissions in order to pass\n      // query context from elsewhere in the application.\n      // See packages/core/content-manager/admin/src/features/DocumentRBAC.tsx\n\n      // This is in order to calculate permissions on accurate query params.\n      // We should be able to rely on the query params in this provider\n      // If we need to pass additional context to the RBAC middleware\n      // we should define a better context type.\n      rawQueryContext\n    ) => {\n      /**\n       * If there's no permissions to check, then we allow it to\n       * pass to preserve existing behaviours.\n       *\n       * TODO: should we review this? it feels more dangerous than useful.\n       */\n      if (!permissions || permissions.length === 0) {\n        return [{ action: '', subject: '' }];\n      }\n\n      /**\n       * Given the provided permissions, return the permissions from either passedPermissions\n       * or userPermissions as this is expected to be the full permission entity.\n       */\n      const actualUserPermissions = passedPermissions ?? userPermissions;\n\n      const matchingPermissions = actualUserPermissions.filter(\n        (permission) =>\n          permissions.findIndex(\n            (perm) =>\n              perm.action === permission.action &&\n              // Only check the subject if it's provided\n              (perm.subject == undefined || perm.subject === permission.subject)\n          ) >= 0\n      );\n\n      const middlewaredPermissions = await runRbacMiddleware(\n        {\n          user,\n          permissions: userPermissions,\n          pathname: locationRef.current.pathname,\n          search: (rawQueryContext || rawQuery).split('?')[1] ?? '',\n        },\n        matchingPermissions\n      );\n\n      const shouldCheckConditions = middlewaredPermissions.some(\n        (perm) => Array.isArray(perm.conditions) && perm.conditions.length > 0\n      );\n\n      if (!shouldCheckConditions) {\n        return middlewaredPermissions;\n      }\n\n      const { data, error } = await checkPermissions({\n        permissions: middlewaredPermissions.map((perm) => ({\n          action: perm.action,\n          subject: perm.subject,\n        })),\n      });\n\n      if (error) {\n        throw error;\n      } else {\n        return middlewaredPermissions.filter((_, index) => data?.data[index] === true);\n      }\n    },\n    [checkPermissions, rawQuery, runRbacMiddleware, user, userPermissions]\n  );\n\n  const isLoading = isLoadingUser || isLoadingPermissions;\n\n  return (\n    <>\n      <Provider\n        token={token}\n        user={user}\n        login={login}\n        logout={logout}\n        permissions={userPermissions}\n        checkUserHasPermissions={checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS}\n        refetchPermissions={refetchPermissions}\n        isLoading={isLoading}\n      >\n        {children}\n      </Provider>\n      <Dialog.Root\n        open={isSessionLogoutDialogOpen}\n        onOpenChange={handleSessionLogoutDialogOpenChange}\n      >\n        <ConfirmDialog\n          onConfirm={handleConfirmSessionLogout}\n          onCancel={handleCancelSessionLogout}\n          title={\n            LOGOUT_PROMPTS[sessionLogoutReason].title\n              ? formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].title)\n              : undefined\n          }\n          // Forced session-dead: no Cancel that pretends the session is still valid.\n          startAction={isForcedLogout(sessionLogoutReason) ? <></> : undefined}\n        >\n          {formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].body)}\n        </ConfirmDialog>\n      </Dialog.Root>\n    </>\n  );\n};\n\nexport { AuthProvider, useAuth, STORAGE_KEYS };\nexport type { AuthContextValue, Permission, User };\n"],"names":["NOOP_CHECK_USER_HAS_PERMISSIONS","Provider","useAuth","createContext","STORAGE_KEYS","STATUS","isForcedLogout","reason","LOGOUT_PROMPTS","voluntary","title","undefined","body","id","defaultMessage","AuthProvider","children","_defaultPermissions","_disableRenewToken","formatMessage","useIntl","dispatch","useTypedDispatch","runRbacMiddleware","useStrapiApp","state","rbac","run","location","useLocation","rawQuery","useQueryParams","locationRef","React","useRef","useEffect","current","token","useTypedSelector","admin_app","data","user","isLoading","isLoadingUser","useGetMeQuery","skip","userPermissions","refetch","isUninitialized","isLoadingPermissions","useGetMyPermissionsQuery","navigate","useNavigate","loginMutation","useLoginMutation","logoutMutation","useLogoutMutation","pendingLogoutRef","logoutGuardOpenRef","logoutGuardReasonRef","isSessionLogoutDialogOpen","setIsSessionLogoutDialogOpen","useState","sessionLogoutReason","setSessionLogoutReason","runLogoutWithGuard","useCallback","logoutFn","hasUnsavedChanges","performGlobalLogout","post","getFetchClient","adminApi","util","resetApiState","logoutAction","clearStateAndLogout","handleConfirmSessionLogout","handleCancelSessionLogout","forced","handleSessionLogoutDialogOpenChange","open","resyncToken","newToken","setToken","lastActivityRef","Date","now","markActivity","events","forEach","event","window","addEventListener","passive","capture","removeEventListener","getLastActivityAt","renewSession","attemptTokenRefresh","preferedLanguage","setLocale","normalizeAdminLocale","setOnTokenUpdate","setOnSessionExpired","useSessionKeepalive","onSessionDead","getStoredToken","onResync","disabled","handleUserStorageChange","key","newValue","login","rememberMe","res","deviceId","getOrCreateDeviceId","resetSessionExpiredNotification","loginAction","persist","logout","refetchPermissions","checkPermissions","useLazyCheckPermissionsQuery","checkUserHasPermissions","permissions","passedPermissions","rawQueryContext","length","action","subject","actualUserPermissions","matchingPermissions","filter","permission","findIndex","perm","middlewaredPermissions","pathname","search","split","shouldCheckConditions","some","Array","isArray","conditions","error","map","_","index","_jsxs","_Fragment","_jsx","Dialog","Root","onOpenChange","ConfirmDialog","onConfirm","onCancel","startAction"],"mappings":";;;;;;;;;;;;;;;;;;;AA6EA;;;;;;;;;;;;;;IAeA,MAAMA,+BAAAA,GAA+E,UAAY,EAAE;AAEnG,MAAM,CAACC,QAAAA,EAAUC,OAAAA,CAAQ,GAAGC,aAAAA,CAAgC,MAAA;AAa5D,MAAMC,YAAAA,GAAe;IAEnBC,MAAAA,EAAQ;AACV;AAaA,MAAMC,cAAAA,GAAiB,CAACC,MAAAA,GAAyBA,MAAAA,KAAW,cAAA;AAE5D;;;;AAIC,IACD,MAAMC,cAAAA,GAAiB;IACrBC,SAAAA,EAAW;QACTC,KAAAA,EAAOC,SAAAA;QACPC,IAAAA,EAAM;YACJC,EAAAA,EAAI,uBAAA;YACJC,cAAAA,EAAgB;AAClB;AACF,KAAA;IACA,cAAA,EAAgB;QACdJ,KAAAA,EAAO;YACLG,EAAAA,EAAI,yBAAA;YACJC,cAAAA,EAAgB;AAClB,SAAA;QACAF,IAAAA,EAAM;YACJC,EAAAA,EAAI,2BAAA;YACJC,cAAAA,EACE;AACJ;AACF;AACF,CAAA;AAEA,MAAMC,YAAAA,GAAe,CAAC,EACpBC,QAAQ,EACRC,sBAAsB,EAAE,EACxBC,kBAAAA,GAAqB,KAAK,EACR,GAAA;IAClB,MAAM,EAAEC,aAAa,EAAE,GAAGC,OAAAA,EAAAA;AAC1B,IAAA,MAAMC,QAAAA,GAAWC,gBAAAA,EAAAA;IACjB,MAAMC,iBAAAA,GAAoBC,aAAa,cAAA,EAAgB,CAACC,QAAUA,KAAAA,CAAMC,IAAI,CAACC,GAAG,CAAA;AAChF,IAAA,MAAMC,QAAAA,GAAWC,WAAAA,EAAAA;AACjB,IAAA,MAAM,CAAC,EAAEC,QAAQ,EAAE,CAAC,GAAGC,cAAAA,EAAAA;IAEvB,MAAMC,WAAAA,GAAcC,KAAAA,CAAMC,MAAM,CAACN,QAAAA,CAAAA;;AAGjCK,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdH,QAAAA,WAAAA,CAAYI,OAAO,GAAGR,QAAAA;IACxB,CAAA,EAAG;AAACA,QAAAA;AAAS,KAAA,CAAA;IAEb,MAAMS,KAAAA,GAAQC,iBAAiB,CAACb,KAAAA,GAAUA,MAAMc,SAAS,CAACF,KAAK,IAAI,IAAA,CAAA;IAEnE,MAAM,EAAEG,MAAMC,IAAI,EAAEC,WAAWC,aAAa,EAAE,GAAGC,aAAAA,CAAcjC,SAAAA,EAAW;AACxE;;;AAGC,QACDkC,MAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAM,EACJG,IAAAA,EAAMM,eAAAA,GAAkB7B,mBAAmB,EAC3C8B,OAAO,EACPC,eAAe,EACfN,SAAAA,EAAWO,oBAAoB,EAChC,GAAGC,yBAAyBvC,SAAAA,EAAW;AACtCkC,QAAAA,IAAAA,EAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAMc,QAAAA,GAAWC,WAAAA,EAAAA;IAEjB,MAAM,CAACC,cAAc,GAAGC,gBAAAA,EAAAA;IACxB,MAAM,CAACC,eAAe,GAAGC,iBAAAA,EAAAA;IAEzB,MAAMC,gBAAAA,GAAmBxB,KAAAA,CAAMC,MAAM,CAAsB,IAAA,CAAA;IAC3D,MAAMwB,kBAAAA,GAAqBzB,KAAAA,CAAMC,MAAM,CAAC,KAAA,CAAA;IACxC,MAAMyB,oBAAAA,GAAuB1B,KAAAA,CAAMC,MAAM,CAAe,WAAA,CAAA;AACxD,IAAA,MAAM,CAAC0B,yBAAAA,EAA2BC,4BAAAA,CAA6B,GAAG5B,KAAAA,CAAM6B,QAAQ,CAAC,KAAA,CAAA;AACjF,IAAA,MAAM,CAACC,mBAAAA,EAAqBC,sBAAAA,CAAuB,GAAG/B,KAAAA,CAAM6B,QAAQ,CAAe,WAAA,CAAA;AAEnF;;;;;;;MAQA,MAAMG,qBAAqBhC,KAAAA,CAAMiC,WAAW,CAC1C,CAACC,QAAAA,EAAsB5D,SAAuB,WAAW,GAAA;QACvD,IAAImD,kBAAAA,CAAmBtB,OAAO,EAAE;AAC9BqB,YAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;AAC3B,YAAA,IAAI7D,eAAeC,MAAAA,CAAAA,EAAS;AAC1BoD,gBAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;gBAC/ByD,sBAAAA,CAAuBzD,MAAAA,CAAAA;AACzB,YAAA;AACA,YAAA;AACF,QAAA;AAEA,QAAA,IAAI,CAAC6D,iBAAAA,EAAAA,EAAqB;AACxBD,YAAAA,QAAAA,EAAAA;AACA,YAAA;AACF,QAAA;AAEAT,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,IAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;AAC/BkD,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;QAC3BH,sBAAAA,CAAuBzD,MAAAA,CAAAA;QACvBsD,4BAAAA,CAA6B,IAAA,CAAA;AAC/B,IAAA,CAAA,EACA,EAAE,CAAA;IAGJ,MAAMQ,mBAAAA,GAAsBpC,KAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5C,QAAA,KAAK,CAAC,UAAA;YACJ,IAAI;gBACF,MAAM,EAAEI,IAAI,EAAE,GAAGC,cAAAA,EAAAA;AACjB,gBAAA,MAAMD,IAAAA,CAAK,eAAA,CAAA;AACb,YAAA,CAAA,CAAE,OAAM;;AAER,YAAA;QACF,CAAA,GAAA;QAEAjD,QAAAA,CAASmD,QAAAA,CAASC,IAAI,CAACC,aAAa,EAAA,CAAA;QACpCrD,QAAAA,CAASsD,MAAAA,EAAAA,CAAAA;QACTxB,QAAAA,CAAS,aAAA,CAAA;IACX,CAAA,EAAG;AAAC9B,QAAAA,QAAAA;AAAU8B,QAAAA;AAAS,KAAA,CAAA;IAEvB,MAAMyB,mBAAAA,GAAsB3C,KAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5CD,QAAAA,kBAAAA,CAAmBI,mBAAAA,EAAqB,cAAA,CAAA;IAC1C,CAAA,EAAG;AAACA,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5C,MAAMY,0BAAAA,GAA6B5C,KAAAA,CAAMiC,WAAW,CAAC,IAAA;AACnDR,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;QAC/ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;QACvB,MAAMG,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;AAC3B+B,QAAAA,QAAAA,IAAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IAEL,MAAMW,yBAAAA,GAA4B7C,KAAAA,CAAMiC,WAAW,CAAC,IAAA;QAClD,MAAMa,MAAAA,GAASzE,cAAAA,CAAeqD,oBAAAA,CAAqBvB,OAAO,CAAA;QAC1D,MAAM+B,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCsB,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;AAC/BqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;QAC3ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;;AAEvB,QAAA,IAAIe,MAAAA,EAAQ;AACVZ,YAAAA,QAAAA,IAAAA;AACF,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAEL,IAAA,MAAMa,mCAAAA,GAAsC/C,KAAAA,CAAMiC,WAAW,CAC3D,CAACe,IAAAA,GAAAA;AACC,QAAA,IAAI,CAACA,IAAAA,EAAM;AACTH,YAAAA,yBAAAA,EAAAA;AACF,QAAA;IACF,CAAA,EACA;AAACA,QAAAA;AAA0B,KAAA,CAAA;AAG7B,IAAA,MAAMI,WAAAA,GAAcjD,KAAAA,CAAMiC,WAAW,CACnC,CAACiB,QAAAA,GAAAA;AACC9D,QAAAA,QAAAA,CAAS+D,QAAAA,CAASD,QAAAA,CAAAA,CAAAA;IACpB,CAAA,EACA;AAAC9D,QAAAA;AAAS,KAAA,CAAA;AAGZ;;;;;;;AAOC,MACD,MAAMgE,eAAAA,GAAkBpD,KAAAA,CAAMC,MAAM,CAACoD,KAAKC,GAAG,EAAA,CAAA;AAC7CtD,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,MAAMqD,YAAAA,GAAe,IAAA;YACnBH,eAAAA,CAAgBjD,OAAO,GAAGkD,IAAAA,CAAKC,GAAG,EAAA;AACpC,QAAA,CAAA;AACA,QAAA,MAAME,MAAAA,GAAS;AAAC,YAAA,aAAA;AAAe,YAAA,SAAA;AAAW,YAAA,OAAA;AAAS,YAAA,QAAA;AAAU,YAAA;AAAa,SAAA;QAC1EA,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GACdC,OAAOC,gBAAgB,CAACF,OAAOH,YAAAA,EAAc;gBAAEM,OAAAA,EAAS,IAAA;gBAAMC,OAAAA,EAAS;AAAK,aAAA,CAAA,CAAA;QAG9E,OAAO,IAAA;YACLN,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GAAUC,OAAOI,mBAAmB,CAACL,OAAOH,YAAAA,EAAc;oBAAEO,OAAAA,EAAS;AAAK,iBAAA,CAAA,CAAA;AAC5F,QAAA,CAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IACL,MAAME,iBAAAA,GAAoBhE,MAAMiC,WAAW,CAAC,IAAMmB,eAAAA,CAAgBjD,OAAO,EAAE,EAAE,CAAA;AAE7E;;;;AAIC,MACD,MAAM8D,YAAAA,GAAejE,KAAAA,CAAMiC,WAAW,CAAC,UAAA;QACrC,IAAI;YACF,MAAMiC,mBAAAA,EAAAA;YACN,OAAO,IAAA;AACT,QAAA,CAAA,CAAE,OAAM;YACN,OAAO,KAAA;AACT,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAELlE,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,IAAIM,IAAAA,EAAM;YACR,IAAIA,IAAAA,CAAK2D,gBAAgB,EAAE;gBACzB/E,QAAAA,CAASgF,SAAAA,CAAUC,oBAAAA,CAAqB7D,IAAAA,CAAK2D,gBAAgB,CAAA,CAAA,CAAA;AAC/D,YAAA;AACF,QAAA;IACF,CAAA,EAAG;AAAC/E,QAAAA,QAAAA;AAAUoB,QAAAA;AAAK,KAAA,CAAA;AAEnB;;;MAIAR,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdoE,QAAAA,gBAAAA,CAAiB,CAACpB,QAAAA,GAAAA;AAChB9D,YAAAA,QAAAA,CAAS+D,QAAAA,CAASD,QAAAA,CAAAA,CAAAA;AACpB,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACLoB,gBAAAA,CAAiB,IAAA,CAAA;AACnB,QAAA,CAAA;IACF,CAAA,EAAG;AAAClF,QAAAA;AAAS,KAAA,CAAA;AAEb;;;;;MAMAY,KAAAA,CAAME,SAAS,CAAC,IAAA;QACdqE,mBAAAA,CAAoB,IAAA;AAClB5B,YAAAA,mBAAAA,EAAAA;AACF,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACL4B,mBAAAA,CAAoB,IAAA,CAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AAAC5B,QAAAA;AAAoB,KAAA,CAAA;AAExB;;;;;;;;AAQC,MACD6B,mBAAAA,CAAoB;AAClBpE,QAAAA,KAAAA;QACAqE,aAAAA,EAAe9B,mBAAAA;AACf+B,QAAAA,cAAAA;QACAC,QAAAA,EAAU1B,WAAAA;AACVe,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;QACAW,QAAAA,EAAU3F;AACZ,KAAA,CAAA;AAEAe,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd;;QAGA,MAAM2E,0BAA0B,CAACnB,KAAAA,GAAAA;YAC/B,IAAIA,KAAAA,CAAMoB,GAAG,KAAK3G,YAAAA,CAAaC,MAAM,IAAIsF,KAAAA,CAAMqB,QAAQ,KAAK,IAAA,EAAM;AAChEpC,gBAAAA,mBAAAA,EAAAA;AACF,YAAA;AACF,QAAA,CAAA;QAEAgB,MAAAA,CAAOC,gBAAgB,CAAC,SAAA,EAAWiB,uBAAAA,CAAAA;QAEnC,OAAO,IAAA;YACLlB,MAAAA,CAAOI,mBAAmB,CAAC,SAAA,EAAWc,uBAAAA,CAAAA;AACxC,QAAA,CAAA;AACF,IAAA,CAAA,CAAA;IAEA,MAAMG,OAAAA,GAAQhF,MAAMiC,WAAW,CAC7B,OAAO,EAAEgD,UAAU,EAAE,GAAGtG,IAAAA,EAAM,GAAA;QAC5B,MAAMuG,GAAAA,GAAM,MAAM9D,aAAAA,CAAc;AAAE,YAAA,GAAGzC,IAAI;YAAEwG,QAAAA,EAAUC,mBAAAA,EAAAA;AAAuBH,YAAAA;AAAW,SAAA,CAAA;AAEvF;;;UAIA,IAAI,UAAUC,GAAAA,EAAK;AACjB,YAAA,MAAM,EAAE9E,KAAK,EAAE,GAAG8E,IAAI3E,IAAI;AAE1B8E,YAAAA,+BAAAA,EAAAA;AACAjG,YAAAA,QAAAA,CACEkG,KAAAA,CAAY;AACVlF,gBAAAA,KAAAA;gBACAmF,OAAAA,EAASN;AACX,aAAA,CAAA,CAAA;AAEJ,QAAA;QAEA,OAAOC,GAAAA;IACT,CAAA,EACA;AAAC9F,QAAAA,QAAAA;AAAUgC,QAAAA;AAAc,KAAA,CAAA;AAG3B;;;AAGC,MACD,MAAMoE,QAAAA,GAASxF,KAAAA,CAAMiC,WAAW,CAAC,UAAA;QAC/BD,kBAAAA,CAAmB,IAAA;AACjB,YAAA,KAAK,CAAC,UAAA;gBACJ,IAAI;AACF,oBAAA,MAAMV,cAAAA,CAAe;wBAAE6D,QAAAA,EAAUC,mBAAAA;AAAsB,qBAAA,CAAA;AACzD,gBAAA,CAAA,CAAE,OAAM;;AAER,gBAAA;AACAhD,gBAAAA,mBAAAA,EAAAA;YACF,CAAA,GAAA;AACF,QAAA,CAAA,CAAA;IACF,CAAA,EAAG;AAACd,QAAAA,cAAAA;AAAgBc,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5D,MAAMyD,kBAAAA,GAAqBzF,KAAAA,CAAMiC,WAAW,CAAC,UAAA;AAC3C,QAAA,IAAI,CAAClB,eAAAA,EAAiB;YACpB,MAAMD,OAAAA,EAAAA;AACR,QAAA;IACF,CAAA,EAAG;AAACC,QAAAA,eAAAA;AAAiBD,QAAAA;AAAQ,KAAA,CAAA;IAE7B,MAAM,CAAC4E,iBAAiB,GAAGC,4BAAAA,EAAAA;AAC3B,IAAA,MAAMC,0BAAuE5F,KAAAA,CAAMiC,WAAW,CAC5F,OACE4D,WAAAA,EACAC;;;;;;;;AAUAC,IAAAA,eAAAA,GAAAA;AAEA;;;;;AAKC,UACD,IAAI,CAACF,WAAAA,IAAeA,WAAAA,CAAYG,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO;AAAC,gBAAA;oBAAEC,MAAAA,EAAQ,EAAA;oBAAIC,OAAAA,EAAS;AAAG;AAAE,aAAA;AACtC,QAAA;AAEA;;;UAIA,MAAMC,wBAAwBL,iBAAAA,IAAqBjF,eAAAA;AAEnD,QAAA,MAAMuF,sBAAsBD,qBAAAA,CAAsBE,MAAM,CACtD,CAACC,aACCT,WAAAA,CAAYU,SAAS,CACnB,CAACC,OACCA,IAAAA,CAAKP,MAAM,KAAKK,UAAAA,CAAWL,MAAM;iBAEhCO,IAAAA,CAAKN,OAAO,IAAIxH,SAAAA,IAAa8H,IAAAA,CAAKN,OAAO,KAAKI,UAAAA,CAAWJ,OAAM,CAAA,CAAA,IAC/D,CAAA,CAAA;QAGT,MAAMO,sBAAAA,GAAyB,MAAMnH,iBAAAA,CACnC;AACEkB,YAAAA,IAAAA;YACAqF,WAAAA,EAAahF,eAAAA;YACb6F,QAAAA,EAAU3G,WAAAA,CAAYI,OAAO,CAACuG,QAAQ;YACtCC,MAAAA,EAASZ,CAAAA,eAAAA,IAAmBlG,QAAO,EAAG+G,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI;SACzD,EACAR,mBAAAA,CAAAA;AAGF,QAAA,MAAMS,wBAAwBJ,sBAAAA,CAAuBK,IAAI,CACvD,CAACN,OAASO,KAAAA,CAAMC,OAAO,CAACR,IAAAA,CAAKS,UAAU,CAAA,IAAKT,IAAAA,CAAKS,UAAU,CAACjB,MAAM,GAAG,CAAA,CAAA;AAGvE,QAAA,IAAI,CAACa,qBAAAA,EAAuB;YAC1B,OAAOJ,sBAAAA;AACT,QAAA;AAEA,QAAA,MAAM,EAAElG,IAAI,EAAE2G,KAAK,EAAE,GAAG,MAAMxB,gBAAAA,CAAiB;AAC7CG,YAAAA,WAAAA,EAAaY,sBAAAA,CAAuBU,GAAG,CAAC,CAACX,QAAU;AACjDP,oBAAAA,MAAAA,EAAQO,KAAKP,MAAM;AACnBC,oBAAAA,OAAAA,EAASM,KAAKN;iBAChB,CAAA;AACF,SAAA,CAAA;AAEA,QAAA,IAAIgB,KAAAA,EAAO;YACT,MAAMA,KAAAA;QACR,CAAA,MAAO;YACL,OAAOT,sBAAAA,CAAuBJ,MAAM,CAAC,CAACe,CAAAA,EAAGC,QAAU9G,IAAAA,EAAMA,IAAI,CAAC8G,KAAAA,CAAM,KAAK,IAAA,CAAA;AAC3E,QAAA;IACF,CAAA,EACA;AAAC3B,QAAAA,gBAAAA;AAAkB7F,QAAAA,QAAAA;AAAUP,QAAAA,iBAAAA;AAAmBkB,QAAAA,IAAAA;AAAMK,QAAAA;AAAgB,KAAA,CAAA;AAGxE,IAAA,MAAMJ,YAAYC,aAAAA,IAAiBM,oBAAAA;IAEnC,qBACEsG,IAAA,CAAAC,QAAA,EAAA;;0BACEC,GAAA,CAACxJ,QAAAA,EAAAA;gBACCoC,KAAAA,EAAOA,KAAAA;gBACPI,IAAAA,EAAMA,IAAAA;gBACNwE,KAAAA,EAAOA,OAAAA;gBACPQ,MAAAA,EAAQA,QAAAA;gBACRK,WAAAA,EAAahF,eAAAA;AACb+E,gBAAAA,uBAAAA,EAAyBA,uBAAAA,IAA2B7H,+BAAAA;gBACpD0H,kBAAAA,EAAoBA,kBAAAA;gBACpBhF,SAAAA,EAAWA,SAAAA;AAEV1B,gBAAAA,QAAAA,EAAAA;;AAEH,0BAAAyI,GAAA,CAACC,OAAOC,IAAI,EAAA;gBACV1E,IAAAA,EAAMrB,yBAAAA;gBACNgG,YAAAA,EAAc5E,mCAAAA;AAEd,gBAAA,QAAA,gBAAAyE,GAAA,CAACI,aAAAA,EAAAA;oBACCC,SAAAA,EAAWjF,0BAAAA;oBACXkF,QAAAA,EAAUjF,yBAAAA;AACVpE,oBAAAA,KAAAA,EACEF,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,GACrCS,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,CAAA,GACvDC,SAAAA;;oBAGNqJ,WAAAA,EAAa1J,cAAAA,CAAeyD,qCAAuB0F,GAAA,CAAAD,QAAA,EAAA,EAAA,CAAA,GAAQ7I,SAAAA;AAE1DQ,oBAAAA,QAAAA,EAAAA,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACnD,IAAI;;;;;AAKjE;;;;"}
+{"version":3,"file":"Auth.mjs","sources":["../../../../../admin/src/features/Auth.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { Dialog } from '@strapi/design-system';\nimport { useIntl, type MessageDescriptor } from 'react-intl';\nimport { useLocation, useNavigate } from 'react-router-dom';\n\nimport { Login } from '../../../shared/contracts/authentication';\nimport { ConfirmDialog } from '../components/ConfirmDialog';\nimport { createContext } from '../components/Context';\nimport { useTypedDispatch, useTypedSelector } from '../core/store/hooks';\nimport { useStrapiApp } from '../features/StrapiApp';\nimport { useQueryParams } from '../hooks/useQueryParams';\nimport { useSessionKeepalive } from '../hooks/useSessionKeepalive';\nimport {\n  getStoredToken,\n  login as loginAction,\n  logout as logoutAction,\n  setLocale,\n  setToken,\n} from '../reducer';\nimport { adminApi } from '../services/api';\nimport {\n  useGetMeQuery,\n  useGetMyPermissionsQuery,\n  useLazyCheckPermissionsQuery,\n  useLoginMutation,\n  useLogoutMutation,\n} from '../services/auth';\nimport { normalizeAdminLocale } from '../translations/normalizeAdminLocale';\nimport { getOrCreateDeviceId } from '../utils/deviceId';\nimport {\n  attemptTokenRefresh,\n  getFetchClient,\n  resetSessionExpiredNotification,\n  setOnSessionExpired,\n  setOnTokenUpdate,\n} from '../utils/getFetchClient';\nimport { hasUnsavedChanges } from '../utils/unsavedChangesRegistry';\n\nimport type {\n  Permission as PermissionContract,\n  SanitizedAdminUser,\n} from '../../../shared/contracts/shared';\n\nconst EMPTY_DEFAULT_PERMISSIONS: NonNullable<AuthProviderProps['_defaultPermissions']> = [];\n\ninterface Permission\n  extends\n    Pick<PermissionContract, 'action' | 'subject'>,\n    Partial<Omit<PermissionContract, 'action' | 'subject'>> {}\n\ninterface User\n  extends\n    Pick<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>,\n    Partial<Omit<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>> {}\n\ninterface AuthContextValue {\n  login: (\n    body: Login.Request['body'] & { rememberMe: boolean }\n  ) => Promise<Awaited<ReturnType<ReturnType<typeof useLoginMutation>[0]>>>;\n  logout: () => Promise<void>;\n  /**\n   * @alpha\n   * @description given a list of permissions, this function checks\n   * those against the current user's permissions or those passed as\n   * the second argument, if the user has those permissions the complete\n   * permission object form the API is returned. Therefore, if the list is\n   * empty, the user does not have any of those permissions.\n   */\n  checkUserHasPermissions: (\n    permissions?: Array<Pick<Permission, 'action'> & Partial<Omit<Permission, 'action'>>>,\n    passedPermissions?: Permission[],\n    rawQueryContext?: string\n  ) => Promise<Permission[]>;\n  isLoading: boolean;\n  permissions: Permission[];\n  refetchPermissions: () => Promise<void>;\n  token: string | null;\n  user?: User;\n}\n\n/**\n * ensure the Auth context never exposes a non-function for checkUserHasPermissions.\n * When this is undefined (e.g. context timing in production builds), consumers would throw\n * \"p is not a function\" / \"checkUserHasPermissions is not a function\". By always passing\n * a function here, all current and future consumers are protected without per-call-site guards.\n *\n * When would the fallback run? Only if the real checkUserHasPermissions were ever undefined\n * when we pass to the Provider (e.g. a rare timing/build edge case). In normal runs it is\n * always defined (useCallback), so the real function is passed and behavior is unchanged.\n *\n * If the fallback ever did run: it returns [] so consumers (which use .length > 0) treat it\n * as \"no permission\" for that render—under-permissive. On the next AuthProvider re-render we\n * pass the real function again, so the context updates and the view corrects quickly.\n * @see https://github.com/strapi/strapi/issues/24384\n */\nconst NOOP_CHECK_USER_HAS_PERMISSIONS: AuthContextValue['checkUserHasPermissions'] = async () => [];\n\nconst [Provider, useAuth] = createContext<AuthContextValue>('Auth');\n\ninterface AuthProviderProps {\n  children: React.ReactNode;\n  /**\n   * @internal could be removed at any time.\n   */\n  _defaultPermissions?: Permission[];\n\n  // NOTE: this is used for testing purposed only\n  _disableRenewToken?: boolean;\n}\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  STATUS: 'isLoggedIn',\n};\n\n/**\n * Why the session is ending.\n * - `voluntary`: explicit user logout — cancelable when there are unsaved edits.\n * - `session-dead`: server rejected the refresh (idle/max session window elapsed)\n *   — forced; Cancel / dismiss still clears client state.\n *\n * Short-lived access-token expiry is NOT a logout reason: idle tabs leave the\n * stale token in place and the next request refreshes (or hits session-dead).\n */\ntype LogoutReason = 'voluntary' | 'session-dead';\n\nconst isForcedLogout = (reason: LogoutReason) => reason === 'session-dead';\n\n/**\n * Copy for the unsaved-changes prompt. A server-confirmed dead session needs to\n * say *why* the dialog appeared, otherwise it reads as the usual navigation\n * blocker and users confirm straight through it.\n */\nconst LOGOUT_PROMPTS = {\n  voluntary: {\n    title: undefined,\n    body: {\n      id: 'global.prompt.unsaved',\n      defaultMessage: 'You have unsaved changes, are you sure you want to leave?',\n    },\n  },\n  'session-dead': {\n    title: {\n      id: 'app.session.ended.title',\n      defaultMessage: 'Session ended',\n    },\n    body: {\n      id: 'app.session.ended.unsaved',\n      defaultMessage:\n        \"Your session has ended and can't be resumed. Your unsaved changes will be lost when you log out.\",\n    },\n  },\n} satisfies Record<LogoutReason, { title?: MessageDescriptor; body: MessageDescriptor }>;\n\nconst AuthProvider = ({\n  children,\n  _defaultPermissions = EMPTY_DEFAULT_PERMISSIONS,\n  _disableRenewToken = false,\n}: AuthProviderProps) => {\n  const { formatMessage } = useIntl();\n  const dispatch = useTypedDispatch();\n  const runRbacMiddleware = useStrapiApp('AuthProvider', (state) => state.rbac.run);\n  const location = useLocation();\n  const [{ rawQuery }] = useQueryParams();\n\n  const locationRef = React.useRef(location);\n\n  // Update ref without causing re-render\n  React.useEffect(() => {\n    locationRef.current = location;\n  }, [location]);\n\n  const token = useTypedSelector((state) => state.admin_app.token ?? null);\n\n  const { data: user, isLoading: isLoadingUser } = useGetMeQuery(undefined, {\n    /**\n     * If there's no token, we don't try to fetch\n     * the user data because it will fail.\n     */\n    skip: !token,\n  });\n\n  const {\n    data: userPermissions = _defaultPermissions,\n    refetch,\n    isUninitialized,\n    isLoading: isLoadingPermissions,\n  } = useGetMyPermissionsQuery(undefined, {\n    skip: !token,\n  });\n\n  const navigate = useNavigate();\n\n  const [loginMutation] = useLoginMutation();\n  const [logoutMutation] = useLogoutMutation();\n\n  const pendingLogoutRef = React.useRef<(() => void) | null>(null);\n  const logoutGuardOpenRef = React.useRef(false);\n  const logoutGuardReasonRef = React.useRef<LogoutReason>('voluntary');\n  const [isSessionLogoutDialogOpen, setIsSessionLogoutDialogOpen] = React.useState(false);\n  const [sessionLogoutReason, setSessionLogoutReason] = React.useState<LogoutReason>('voluntary');\n\n  /**\n   * Prompt before discarding unsaved edits, then run `logoutFn`.\n   *\n   * - `voluntary`: Cancel leaves the user logged in (server session intact).\n   * - `session-dead`: the session is already unusable — Cancel (or dismiss)\n   *   still runs `logoutFn` so the client cannot keep a stale token. While the\n   *   dialog is open, a later `session-dead` request upgrades the pending action.\n   */\n  const runLogoutWithGuard = React.useCallback(\n    (logoutFn: () => void, reason: LogoutReason = 'voluntary') => {\n      if (logoutGuardOpenRef.current) {\n        pendingLogoutRef.current = logoutFn;\n        if (isForcedLogout(reason)) {\n          logoutGuardReasonRef.current = reason;\n          setSessionLogoutReason(reason);\n        }\n        return;\n      }\n\n      if (!hasUnsavedChanges()) {\n        logoutFn();\n        return;\n      }\n\n      logoutGuardOpenRef.current = true;\n      logoutGuardReasonRef.current = reason;\n      pendingLogoutRef.current = logoutFn;\n      setSessionLogoutReason(reason);\n      setIsSessionLogoutDialogOpen(true);\n    },\n    []\n  );\n\n  const performGlobalLogout = React.useCallback(() => {\n    void (async () => {\n      try {\n        const { post } = getFetchClient();\n        await post('/admin/logout');\n      } catch {\n        // The session may already be invalid.\n      }\n    })();\n\n    dispatch(adminApi.util.resetApiState());\n    dispatch(logoutAction());\n    navigate('/auth/login');\n  }, [dispatch, navigate]);\n\n  const clearStateAndLogout = React.useCallback(() => {\n    runLogoutWithGuard(performGlobalLogout, 'session-dead');\n  }, [performGlobalLogout, runLogoutWithGuard]);\n\n  const handleConfirmSessionLogout = React.useCallback(() => {\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    const logoutFn = pendingLogoutRef.current;\n    pendingLogoutRef.current = null;\n    logoutFn?.();\n  }, []);\n\n  const handleCancelSessionLogout = React.useCallback(() => {\n    const forced = isForcedLogout(logoutGuardReasonRef.current);\n    const logoutFn = pendingLogoutRef.current;\n    logoutGuardOpenRef.current = false;\n    logoutGuardReasonRef.current = 'voluntary';\n    pendingLogoutRef.current = null;\n    setIsSessionLogoutDialogOpen(false);\n    setSessionLogoutReason('voluntary');\n    // Forced paths: session is already dead — dismiss must still clear client state.\n    if (forced) {\n      logoutFn?.();\n    }\n  }, []);\n\n  const handleSessionLogoutDialogOpenChange = React.useCallback(\n    (open: boolean) => {\n      if (!open) {\n        handleCancelSessionLogout();\n      }\n    },\n    [handleCancelSessionLogout]\n  );\n\n  const resyncToken = React.useCallback(\n    (newToken: string) => {\n      dispatch(setToken(newToken));\n    },\n    [dispatch]\n  );\n\n  /**\n   * Track the timestamp of the user's last interaction. This is the activity\n   * signal `useSessionKeepalive` uses to tell an active user (silently renew\n   * their session) apart from a genuinely idle one (leave the stale access\n   * token alone until the next request). Successful API calls don't refresh\n   * the short-lived access token on their own, so without this an\n   * actively-working user would hit a 401 the moment the token expires.\n   */\n  const lastActivityRef = React.useRef(Date.now());\n  React.useEffect(() => {\n    const markActivity = () => {\n      lastActivityRef.current = Date.now();\n    };\n    const events = ['pointerdown', 'keydown', 'click', 'scroll', 'touchstart'];\n    events.forEach((event) =>\n      window.addEventListener(event, markActivity, { passive: true, capture: true })\n    );\n\n    return () => {\n      events.forEach((event) => window.removeEventListener(event, markActivity, { capture: true }));\n    };\n  }, []);\n  const getLastActivityAt = React.useCallback(() => lastActivityRef.current, []);\n\n  /**\n   * Silently rotate the refresh token and mint a new access token. Returns\n   * `true` on success (the resulting `setToken` re-arms the renew timer) and\n   * `false` when the server rejects it (session genuinely over).\n   */\n  const renewSession = React.useCallback(async () => {\n    try {\n      await attemptTokenRefresh();\n      return true;\n    } catch {\n      return false;\n    }\n  }, []);\n\n  React.useEffect(() => {\n    if (user) {\n      if (user.preferedLanguage) {\n        dispatch(setLocale(normalizeAdminLocale(user.preferedLanguage)));\n      }\n    }\n  }, [dispatch, user]);\n\n  /**\n   * Register a callback to update Redux state when the token is refreshed.\n   * This ensures the app state stays in sync with the token stored in localStorage/cookies.\n   */\n  React.useEffect(() => {\n    setOnTokenUpdate((newToken) => {\n      dispatch(setToken(newToken));\n    });\n\n    return () => {\n      setOnTokenUpdate(null);\n    };\n  }, [dispatch]);\n\n  /**\n   * Register the session-expired handler that the fetch layer / RTK baseQuery\n   * call when the server rejects the refresh token. This is what redirects\n   * the active tab to /auth/login on a 401, instead of leaving the user on\n   * a stale page until they click something.\n   */\n  React.useEffect(() => {\n    setOnSessionExpired(() => {\n      clearStateAndLogout();\n    });\n\n    return () => {\n      setOnSessionExpired(null);\n    };\n  }, [clearStateAndLogout]);\n\n  /**\n   * Session keepalive around access-token expiry. The timer fires per-tab; the\n   * hook then either (1) re-syncs from a token another tab refreshed, (2)\n   * silently renews when the user has been active, or (3) does nothing when\n   * idle — leaving the stale access token in place so unsaved form state\n   * survives until the next request refreshes it. A server-confirmed dead\n   * session (renewal rejected) broadcasts globally via `onSessionDead`. See\n   * `useSessionKeepalive` for the full rationale.\n   */\n  useSessionKeepalive({\n    token,\n    onSessionDead: clearStateAndLogout,\n    getStoredToken,\n    onResync: resyncToken,\n    getLastActivityAt,\n    renewSession,\n    disabled: _disableRenewToken,\n  });\n\n  React.useEffect(() => {\n    /**\n     * This will log a user out of all tabs if they log out in one tab.\n     */\n    const handleUserStorageChange = (event: StorageEvent) => {\n      if (event.key === STORAGE_KEYS.STATUS && event.newValue === null) {\n        clearStateAndLogout();\n      }\n    };\n\n    window.addEventListener('storage', handleUserStorageChange);\n\n    return () => {\n      window.removeEventListener('storage', handleUserStorageChange);\n    };\n  });\n\n  const login = React.useCallback<AuthContextValue['login']>(\n    async ({ rememberMe, ...body }) => {\n      const res = await loginMutation({ ...body, deviceId: getOrCreateDeviceId(), rememberMe });\n\n      /**\n       * There will always be a `data` key in the response\n       * because if something fails, it will throw an error.\n       */\n      if ('data' in res) {\n        const { token } = res.data;\n\n        resetSessionExpiredNotification();\n        dispatch(\n          loginAction({\n            token,\n            persist: rememberMe,\n          })\n        );\n      }\n\n      return res;\n    },\n    [dispatch, loginMutation]\n  );\n\n  /**\n   * Explicit user logout. Confirm unsaved changes *before* `logoutMutation` so\n   * Cancel leaves the server session and client token intact.\n   */\n  const logout = React.useCallback(async () => {\n    runLogoutWithGuard(() => {\n      void (async () => {\n        try {\n          await logoutMutation({ deviceId: getOrCreateDeviceId() });\n        } catch {\n          // The session may already be invalid.\n        }\n        performGlobalLogout();\n      })();\n    });\n  }, [logoutMutation, performGlobalLogout, runLogoutWithGuard]);\n\n  const refetchPermissions = React.useCallback(async () => {\n    if (!isUninitialized) {\n      await refetch();\n    }\n  }, [isUninitialized, refetch]);\n\n  const [checkPermissions] = useLazyCheckPermissionsQuery();\n  const checkUserHasPermissions: AuthContextValue['checkUserHasPermissions'] = React.useCallback(\n    async (\n      permissions,\n      passedPermissions,\n      // TODO:\n      // Here we have parameterised checkUserHasPermissions in order to pass\n      // query context from elsewhere in the application.\n      // See packages/core/content-manager/admin/src/features/DocumentRBAC.tsx\n\n      // This is in order to calculate permissions on accurate query params.\n      // We should be able to rely on the query params in this provider\n      // If we need to pass additional context to the RBAC middleware\n      // we should define a better context type.\n      rawQueryContext\n    ) => {\n      /**\n       * If there's no permissions to check, then we allow it to\n       * pass to preserve existing behaviours.\n       *\n       * TODO: should we review this? it feels more dangerous than useful.\n       */\n      if (!permissions || permissions.length === 0) {\n        return [{ action: '', subject: '' }];\n      }\n\n      /**\n       * Given the provided permissions, return the permissions from either passedPermissions\n       * or userPermissions as this is expected to be the full permission entity.\n       */\n      const actualUserPermissions = passedPermissions ?? userPermissions;\n\n      const matchingPermissions = actualUserPermissions.filter(\n        (permission) =>\n          permissions.findIndex(\n            (perm) =>\n              perm.action === permission.action &&\n              // Only check the subject if it's provided\n              (perm.subject == undefined || perm.subject === permission.subject)\n          ) >= 0\n      );\n\n      const middlewaredPermissions = await runRbacMiddleware(\n        {\n          user,\n          permissions: userPermissions,\n          pathname: locationRef.current.pathname,\n          search: (rawQueryContext || rawQuery).split('?')[1] ?? '',\n        },\n        matchingPermissions\n      );\n\n      const shouldCheckConditions = middlewaredPermissions.some(\n        (perm) => Array.isArray(perm.conditions) && perm.conditions.length > 0\n      );\n\n      if (!shouldCheckConditions) {\n        return middlewaredPermissions;\n      }\n\n      const { data, error } = await checkPermissions({\n        permissions: middlewaredPermissions.map((perm) => ({\n          action: perm.action,\n          subject: perm.subject,\n        })),\n      });\n\n      if (error) {\n        throw error;\n      } else {\n        return middlewaredPermissions.filter((_, index) => data?.data[index] === true);\n      }\n    },\n    [checkPermissions, rawQuery, runRbacMiddleware, user, userPermissions]\n  );\n\n  const isLoading = isLoadingUser || isLoadingPermissions;\n\n  return (\n    <>\n      <Provider\n        token={token}\n        user={user}\n        login={login}\n        logout={logout}\n        permissions={userPermissions}\n        checkUserHasPermissions={checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS}\n        refetchPermissions={refetchPermissions}\n        isLoading={isLoading}\n      >\n        {children}\n      </Provider>\n      <Dialog.Root\n        open={isSessionLogoutDialogOpen}\n        onOpenChange={handleSessionLogoutDialogOpenChange}\n      >\n        <ConfirmDialog\n          onConfirm={handleConfirmSessionLogout}\n          onCancel={handleCancelSessionLogout}\n          title={\n            LOGOUT_PROMPTS[sessionLogoutReason].title\n              ? formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].title)\n              : undefined\n          }\n          // Forced session-dead: no Cancel that pretends the session is still valid.\n          startAction={isForcedLogout(sessionLogoutReason) ? <></> : undefined}\n        >\n          {formatMessage(LOGOUT_PROMPTS[sessionLogoutReason].body)}\n        </ConfirmDialog>\n      </Dialog.Root>\n    </>\n  );\n};\n\nexport { AuthProvider, useAuth, STORAGE_KEYS };\nexport type { AuthContextValue, Permission, User };\n"],"names":["EMPTY_DEFAULT_PERMISSIONS","NOOP_CHECK_USER_HAS_PERMISSIONS","Provider","useAuth","createContext","STORAGE_KEYS","STATUS","isForcedLogout","reason","LOGOUT_PROMPTS","voluntary","title","undefined","body","id","defaultMessage","AuthProvider","children","_defaultPermissions","_disableRenewToken","formatMessage","useIntl","dispatch","useTypedDispatch","runRbacMiddleware","useStrapiApp","state","rbac","run","location","useLocation","rawQuery","useQueryParams","locationRef","React","useRef","useEffect","current","token","useTypedSelector","admin_app","data","user","isLoading","isLoadingUser","useGetMeQuery","skip","userPermissions","refetch","isUninitialized","isLoadingPermissions","useGetMyPermissionsQuery","navigate","useNavigate","loginMutation","useLoginMutation","logoutMutation","useLogoutMutation","pendingLogoutRef","logoutGuardOpenRef","logoutGuardReasonRef","isSessionLogoutDialogOpen","setIsSessionLogoutDialogOpen","useState","sessionLogoutReason","setSessionLogoutReason","runLogoutWithGuard","useCallback","logoutFn","hasUnsavedChanges","performGlobalLogout","post","getFetchClient","adminApi","util","resetApiState","logoutAction","clearStateAndLogout","handleConfirmSessionLogout","handleCancelSessionLogout","forced","handleSessionLogoutDialogOpenChange","open","resyncToken","newToken","setToken","lastActivityRef","Date","now","markActivity","events","forEach","event","window","addEventListener","passive","capture","removeEventListener","getLastActivityAt","renewSession","attemptTokenRefresh","preferedLanguage","setLocale","normalizeAdminLocale","setOnTokenUpdate","setOnSessionExpired","useSessionKeepalive","onSessionDead","getStoredToken","onResync","disabled","handleUserStorageChange","key","newValue","login","rememberMe","res","deviceId","getOrCreateDeviceId","resetSessionExpiredNotification","loginAction","persist","logout","refetchPermissions","checkPermissions","useLazyCheckPermissionsQuery","checkUserHasPermissions","permissions","passedPermissions","rawQueryContext","length","action","subject","actualUserPermissions","matchingPermissions","filter","permission","findIndex","perm","middlewaredPermissions","pathname","search","split","shouldCheckConditions","some","Array","isArray","conditions","error","map","_","index","_jsxs","_Fragment","_jsx","Dialog","Root","onOpenChange","ConfirmDialog","onConfirm","onCancel","startAction"],"mappings":";;;;;;;;;;;;;;;;;;;AA4CA,MAAMA,4BAAmF,EAAE;AAqC3F;;;;;;;;;;;;;;IAeA,MAAMC,+BAAAA,GAA+E,UAAY,EAAE;AAEnG,MAAM,CAACC,QAAAA,EAAUC,OAAAA,CAAQ,GAAGC,aAAAA,CAAgC,MAAA;AAa5D,MAAMC,YAAAA,GAAe;IAEnBC,MAAAA,EAAQ;AACV;AAaA,MAAMC,cAAAA,GAAiB,CAACC,MAAAA,GAAyBA,MAAAA,KAAW,cAAA;AAE5D;;;;AAIC,IACD,MAAMC,cAAAA,GAAiB;IACrBC,SAAAA,EAAW;QACTC,KAAAA,EAAOC,SAAAA;QACPC,IAAAA,EAAM;YACJC,EAAAA,EAAI,uBAAA;YACJC,cAAAA,EAAgB;AAClB;AACF,KAAA;IACA,cAAA,EAAgB;QACdJ,KAAAA,EAAO;YACLG,EAAAA,EAAI,yBAAA;YACJC,cAAAA,EAAgB;AAClB,SAAA;QACAF,IAAAA,EAAM;YACJC,EAAAA,EAAI,2BAAA;YACJC,cAAAA,EACE;AACJ;AACF;AACF,CAAA;AAEA,MAAMC,YAAAA,GAAe,CAAC,EACpBC,QAAQ,EACRC,sBAAsBlB,yBAAyB,EAC/CmB,kBAAAA,GAAqB,KAAK,EACR,GAAA;IAClB,MAAM,EAAEC,aAAa,EAAE,GAAGC,OAAAA,EAAAA;AAC1B,IAAA,MAAMC,QAAAA,GAAWC,gBAAAA,EAAAA;IACjB,MAAMC,iBAAAA,GAAoBC,aAAa,cAAA,EAAgB,CAACC,QAAUA,KAAAA,CAAMC,IAAI,CAACC,GAAG,CAAA;AAChF,IAAA,MAAMC,QAAAA,GAAWC,WAAAA,EAAAA;AACjB,IAAA,MAAM,CAAC,EAAEC,QAAQ,EAAE,CAAC,GAAGC,cAAAA,EAAAA;IAEvB,MAAMC,WAAAA,GAAcC,KAAAA,CAAMC,MAAM,CAACN,QAAAA,CAAAA;;AAGjCK,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdH,QAAAA,WAAAA,CAAYI,OAAO,GAAGR,QAAAA;IACxB,CAAA,EAAG;AAACA,QAAAA;AAAS,KAAA,CAAA;IAEb,MAAMS,KAAAA,GAAQC,iBAAiB,CAACb,KAAAA,GAAUA,MAAMc,SAAS,CAACF,KAAK,IAAI,IAAA,CAAA;IAEnE,MAAM,EAAEG,MAAMC,IAAI,EAAEC,WAAWC,aAAa,EAAE,GAAGC,aAAAA,CAAcjC,SAAAA,EAAW;AACxE;;;AAGC,QACDkC,MAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAM,EACJG,IAAAA,EAAMM,eAAAA,GAAkB7B,mBAAmB,EAC3C8B,OAAO,EACPC,eAAe,EACfN,SAAAA,EAAWO,oBAAoB,EAChC,GAAGC,yBAAyBvC,SAAAA,EAAW;AACtCkC,QAAAA,IAAAA,EAAM,CAACR;AACT,KAAA,CAAA;AAEA,IAAA,MAAMc,QAAAA,GAAWC,WAAAA,EAAAA;IAEjB,MAAM,CAACC,cAAc,GAAGC,gBAAAA,EAAAA;IACxB,MAAM,CAACC,eAAe,GAAGC,iBAAAA,EAAAA;IAEzB,MAAMC,gBAAAA,GAAmBxB,KAAAA,CAAMC,MAAM,CAAsB,IAAA,CAAA;IAC3D,MAAMwB,kBAAAA,GAAqBzB,KAAAA,CAAMC,MAAM,CAAC,KAAA,CAAA;IACxC,MAAMyB,oBAAAA,GAAuB1B,KAAAA,CAAMC,MAAM,CAAe,WAAA,CAAA;AACxD,IAAA,MAAM,CAAC0B,yBAAAA,EAA2BC,4BAAAA,CAA6B,GAAG5B,KAAAA,CAAM6B,QAAQ,CAAC,KAAA,CAAA;AACjF,IAAA,MAAM,CAACC,mBAAAA,EAAqBC,sBAAAA,CAAuB,GAAG/B,KAAAA,CAAM6B,QAAQ,CAAe,WAAA,CAAA;AAEnF;;;;;;;MAQA,MAAMG,qBAAqBhC,KAAAA,CAAMiC,WAAW,CAC1C,CAACC,QAAAA,EAAsB5D,SAAuB,WAAW,GAAA;QACvD,IAAImD,kBAAAA,CAAmBtB,OAAO,EAAE;AAC9BqB,YAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;AAC3B,YAAA,IAAI7D,eAAeC,MAAAA,CAAAA,EAAS;AAC1BoD,gBAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;gBAC/ByD,sBAAAA,CAAuBzD,MAAAA,CAAAA;AACzB,YAAA;AACA,YAAA;AACF,QAAA;AAEA,QAAA,IAAI,CAAC6D,iBAAAA,EAAAA,EAAqB;AACxBD,YAAAA,QAAAA,EAAAA;AACA,YAAA;AACF,QAAA;AAEAT,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,IAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG7B,MAAAA;AAC/BkD,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG+B,QAAAA;QAC3BH,sBAAAA,CAAuBzD,MAAAA,CAAAA;QACvBsD,4BAAAA,CAA6B,IAAA,CAAA;AAC/B,IAAA,CAAA,EACA,EAAE,CAAA;IAGJ,MAAMQ,mBAAAA,GAAsBpC,KAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5C,QAAA,KAAK,CAAC,UAAA;YACJ,IAAI;gBACF,MAAM,EAAEI,IAAI,EAAE,GAAGC,cAAAA,EAAAA;AACjB,gBAAA,MAAMD,IAAAA,CAAK,eAAA,CAAA;AACb,YAAA,CAAA,CAAE,OAAM;;AAER,YAAA;QACF,CAAA,GAAA;QAEAjD,QAAAA,CAASmD,QAAAA,CAASC,IAAI,CAACC,aAAa,EAAA,CAAA;QACpCrD,QAAAA,CAASsD,MAAAA,EAAAA,CAAAA;QACTxB,QAAAA,CAAS,aAAA,CAAA;IACX,CAAA,EAAG;AAAC9B,QAAAA,QAAAA;AAAU8B,QAAAA;AAAS,KAAA,CAAA;IAEvB,MAAMyB,mBAAAA,GAAsB3C,KAAAA,CAAMiC,WAAW,CAAC,IAAA;AAC5CD,QAAAA,kBAAAA,CAAmBI,mBAAAA,EAAqB,cAAA,CAAA;IAC1C,CAAA,EAAG;AAACA,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5C,MAAMY,0BAAAA,GAA6B5C,KAAAA,CAAMiC,WAAW,CAAC,IAAA;AACnDR,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;QAC/ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;QACvB,MAAMG,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;AAC3B+B,QAAAA,QAAAA,IAAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IAEL,MAAMW,yBAAAA,GAA4B7C,KAAAA,CAAMiC,WAAW,CAAC,IAAA;QAClD,MAAMa,MAAAA,GAASzE,cAAAA,CAAeqD,oBAAAA,CAAqBvB,OAAO,CAAA;QAC1D,MAAM+B,QAAAA,GAAWV,iBAAiBrB,OAAO;AACzCsB,QAAAA,kBAAAA,CAAmBtB,OAAO,GAAG,KAAA;AAC7BuB,QAAAA,oBAAAA,CAAqBvB,OAAO,GAAG,WAAA;AAC/BqB,QAAAA,gBAAAA,CAAiBrB,OAAO,GAAG,IAAA;QAC3ByB,4BAAAA,CAA6B,KAAA,CAAA;QAC7BG,sBAAAA,CAAuB,WAAA,CAAA;;AAEvB,QAAA,IAAIe,MAAAA,EAAQ;AACVZ,YAAAA,QAAAA,IAAAA;AACF,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAEL,IAAA,MAAMa,mCAAAA,GAAsC/C,KAAAA,CAAMiC,WAAW,CAC3D,CAACe,IAAAA,GAAAA;AACC,QAAA,IAAI,CAACA,IAAAA,EAAM;AACTH,YAAAA,yBAAAA,EAAAA;AACF,QAAA;IACF,CAAA,EACA;AAACA,QAAAA;AAA0B,KAAA,CAAA;AAG7B,IAAA,MAAMI,WAAAA,GAAcjD,KAAAA,CAAMiC,WAAW,CACnC,CAACiB,QAAAA,GAAAA;AACC9D,QAAAA,QAAAA,CAAS+D,QAAAA,CAASD,QAAAA,CAAAA,CAAAA;IACpB,CAAA,EACA;AAAC9D,QAAAA;AAAS,KAAA,CAAA;AAGZ;;;;;;;AAOC,MACD,MAAMgE,eAAAA,GAAkBpD,KAAAA,CAAMC,MAAM,CAACoD,KAAKC,GAAG,EAAA,CAAA;AAC7CtD,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,MAAMqD,YAAAA,GAAe,IAAA;YACnBH,eAAAA,CAAgBjD,OAAO,GAAGkD,IAAAA,CAAKC,GAAG,EAAA;AACpC,QAAA,CAAA;AACA,QAAA,MAAME,MAAAA,GAAS;AAAC,YAAA,aAAA;AAAe,YAAA,SAAA;AAAW,YAAA,OAAA;AAAS,YAAA,QAAA;AAAU,YAAA;AAAa,SAAA;QAC1EA,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GACdC,OAAOC,gBAAgB,CAACF,OAAOH,YAAAA,EAAc;gBAAEM,OAAAA,EAAS,IAAA;gBAAMC,OAAAA,EAAS;AAAK,aAAA,CAAA,CAAA;QAG9E,OAAO,IAAA;YACLN,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GAAUC,OAAOI,mBAAmB,CAACL,OAAOH,YAAAA,EAAc;oBAAEO,OAAAA,EAAS;AAAK,iBAAA,CAAA,CAAA;AAC5F,QAAA,CAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IACL,MAAME,iBAAAA,GAAoBhE,MAAMiC,WAAW,CAAC,IAAMmB,eAAAA,CAAgBjD,OAAO,EAAE,EAAE,CAAA;AAE7E;;;;AAIC,MACD,MAAM8D,YAAAA,GAAejE,KAAAA,CAAMiC,WAAW,CAAC,UAAA;QACrC,IAAI;YACF,MAAMiC,mBAAAA,EAAAA;YACN,OAAO,IAAA;AACT,QAAA,CAAA,CAAE,OAAM;YACN,OAAO,KAAA;AACT,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAELlE,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,IAAIM,IAAAA,EAAM;YACR,IAAIA,IAAAA,CAAK2D,gBAAgB,EAAE;gBACzB/E,QAAAA,CAASgF,SAAAA,CAAUC,oBAAAA,CAAqB7D,IAAAA,CAAK2D,gBAAgB,CAAA,CAAA,CAAA;AAC/D,YAAA;AACF,QAAA;IACF,CAAA,EAAG;AAAC/E,QAAAA,QAAAA;AAAUoB,QAAAA;AAAK,KAAA,CAAA;AAEnB;;;MAIAR,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdoE,QAAAA,gBAAAA,CAAiB,CAACpB,QAAAA,GAAAA;AAChB9D,YAAAA,QAAAA,CAAS+D,QAAAA,CAASD,QAAAA,CAAAA,CAAAA;AACpB,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACLoB,gBAAAA,CAAiB,IAAA,CAAA;AACnB,QAAA,CAAA;IACF,CAAA,EAAG;AAAClF,QAAAA;AAAS,KAAA,CAAA;AAEb;;;;;MAMAY,KAAAA,CAAME,SAAS,CAAC,IAAA;QACdqE,mBAAAA,CAAoB,IAAA;AAClB5B,YAAAA,mBAAAA,EAAAA;AACF,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACL4B,mBAAAA,CAAoB,IAAA,CAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AAAC5B,QAAAA;AAAoB,KAAA,CAAA;AAExB;;;;;;;;AAQC,MACD6B,mBAAAA,CAAoB;AAClBpE,QAAAA,KAAAA;QACAqE,aAAAA,EAAe9B,mBAAAA;AACf+B,QAAAA,cAAAA;QACAC,QAAAA,EAAU1B,WAAAA;AACVe,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;QACAW,QAAAA,EAAU3F;AACZ,KAAA,CAAA;AAEAe,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd;;QAGA,MAAM2E,0BAA0B,CAACnB,KAAAA,GAAAA;YAC/B,IAAIA,KAAAA,CAAMoB,GAAG,KAAK3G,YAAAA,CAAaC,MAAM,IAAIsF,KAAAA,CAAMqB,QAAQ,KAAK,IAAA,EAAM;AAChEpC,gBAAAA,mBAAAA,EAAAA;AACF,YAAA;AACF,QAAA,CAAA;QAEAgB,MAAAA,CAAOC,gBAAgB,CAAC,SAAA,EAAWiB,uBAAAA,CAAAA;QAEnC,OAAO,IAAA;YACLlB,MAAAA,CAAOI,mBAAmB,CAAC,SAAA,EAAWc,uBAAAA,CAAAA;AACxC,QAAA,CAAA;AACF,IAAA,CAAA,CAAA;IAEA,MAAMG,OAAAA,GAAQhF,MAAMiC,WAAW,CAC7B,OAAO,EAAEgD,UAAU,EAAE,GAAGtG,IAAAA,EAAM,GAAA;QAC5B,MAAMuG,GAAAA,GAAM,MAAM9D,aAAAA,CAAc;AAAE,YAAA,GAAGzC,IAAI;YAAEwG,QAAAA,EAAUC,mBAAAA,EAAAA;AAAuBH,YAAAA;AAAW,SAAA,CAAA;AAEvF;;;UAIA,IAAI,UAAUC,GAAAA,EAAK;AACjB,YAAA,MAAM,EAAE9E,KAAK,EAAE,GAAG8E,IAAI3E,IAAI;AAE1B8E,YAAAA,+BAAAA,EAAAA;AACAjG,YAAAA,QAAAA,CACEkG,KAAAA,CAAY;AACVlF,gBAAAA,KAAAA;gBACAmF,OAAAA,EAASN;AACX,aAAA,CAAA,CAAA;AAEJ,QAAA;QAEA,OAAOC,GAAAA;IACT,CAAA,EACA;AAAC9F,QAAAA,QAAAA;AAAUgC,QAAAA;AAAc,KAAA,CAAA;AAG3B;;;AAGC,MACD,MAAMoE,QAAAA,GAASxF,KAAAA,CAAMiC,WAAW,CAAC,UAAA;QAC/BD,kBAAAA,CAAmB,IAAA;AACjB,YAAA,KAAK,CAAC,UAAA;gBACJ,IAAI;AACF,oBAAA,MAAMV,cAAAA,CAAe;wBAAE6D,QAAAA,EAAUC,mBAAAA;AAAsB,qBAAA,CAAA;AACzD,gBAAA,CAAA,CAAE,OAAM;;AAER,gBAAA;AACAhD,gBAAAA,mBAAAA,EAAAA;YACF,CAAA,GAAA;AACF,QAAA,CAAA,CAAA;IACF,CAAA,EAAG;AAACd,QAAAA,cAAAA;AAAgBc,QAAAA,mBAAAA;AAAqBJ,QAAAA;AAAmB,KAAA,CAAA;IAE5D,MAAMyD,kBAAAA,GAAqBzF,KAAAA,CAAMiC,WAAW,CAAC,UAAA;AAC3C,QAAA,IAAI,CAAClB,eAAAA,EAAiB;YACpB,MAAMD,OAAAA,EAAAA;AACR,QAAA;IACF,CAAA,EAAG;AAACC,QAAAA,eAAAA;AAAiBD,QAAAA;AAAQ,KAAA,CAAA;IAE7B,MAAM,CAAC4E,iBAAiB,GAAGC,4BAAAA,EAAAA;AAC3B,IAAA,MAAMC,0BAAuE5F,KAAAA,CAAMiC,WAAW,CAC5F,OACE4D,WAAAA,EACAC;;;;;;;;AAUAC,IAAAA,eAAAA,GAAAA;AAEA;;;;;AAKC,UACD,IAAI,CAACF,WAAAA,IAAeA,WAAAA,CAAYG,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO;AAAC,gBAAA;oBAAEC,MAAAA,EAAQ,EAAA;oBAAIC,OAAAA,EAAS;AAAG;AAAE,aAAA;AACtC,QAAA;AAEA;;;UAIA,MAAMC,wBAAwBL,iBAAAA,IAAqBjF,eAAAA;AAEnD,QAAA,MAAMuF,sBAAsBD,qBAAAA,CAAsBE,MAAM,CACtD,CAACC,aACCT,WAAAA,CAAYU,SAAS,CACnB,CAACC,OACCA,IAAAA,CAAKP,MAAM,KAAKK,UAAAA,CAAWL,MAAM;iBAEhCO,IAAAA,CAAKN,OAAO,IAAIxH,SAAAA,IAAa8H,IAAAA,CAAKN,OAAO,KAAKI,UAAAA,CAAWJ,OAAM,CAAA,CAAA,IAC/D,CAAA,CAAA;QAGT,MAAMO,sBAAAA,GAAyB,MAAMnH,iBAAAA,CACnC;AACEkB,YAAAA,IAAAA;YACAqF,WAAAA,EAAahF,eAAAA;YACb6F,QAAAA,EAAU3G,WAAAA,CAAYI,OAAO,CAACuG,QAAQ;YACtCC,MAAAA,EAASZ,CAAAA,eAAAA,IAAmBlG,QAAO,EAAG+G,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI;SACzD,EACAR,mBAAAA,CAAAA;AAGF,QAAA,MAAMS,wBAAwBJ,sBAAAA,CAAuBK,IAAI,CACvD,CAACN,OAASO,KAAAA,CAAMC,OAAO,CAACR,IAAAA,CAAKS,UAAU,CAAA,IAAKT,IAAAA,CAAKS,UAAU,CAACjB,MAAM,GAAG,CAAA,CAAA;AAGvE,QAAA,IAAI,CAACa,qBAAAA,EAAuB;YAC1B,OAAOJ,sBAAAA;AACT,QAAA;AAEA,QAAA,MAAM,EAAElG,IAAI,EAAE2G,KAAK,EAAE,GAAG,MAAMxB,gBAAAA,CAAiB;AAC7CG,YAAAA,WAAAA,EAAaY,sBAAAA,CAAuBU,GAAG,CAAC,CAACX,QAAU;AACjDP,oBAAAA,MAAAA,EAAQO,KAAKP,MAAM;AACnBC,oBAAAA,OAAAA,EAASM,KAAKN;iBAChB,CAAA;AACF,SAAA,CAAA;AAEA,QAAA,IAAIgB,KAAAA,EAAO;YACT,MAAMA,KAAAA;QACR,CAAA,MAAO;YACL,OAAOT,sBAAAA,CAAuBJ,MAAM,CAAC,CAACe,CAAAA,EAAGC,QAAU9G,IAAAA,EAAMA,IAAI,CAAC8G,KAAAA,CAAM,KAAK,IAAA,CAAA;AAC3E,QAAA;IACF,CAAA,EACA;AAAC3B,QAAAA,gBAAAA;AAAkB7F,QAAAA,QAAAA;AAAUP,QAAAA,iBAAAA;AAAmBkB,QAAAA,IAAAA;AAAMK,QAAAA;AAAgB,KAAA,CAAA;AAGxE,IAAA,MAAMJ,YAAYC,aAAAA,IAAiBM,oBAAAA;IAEnC,qBACEsG,IAAA,CAAAC,QAAA,EAAA;;0BACEC,GAAA,CAACxJ,QAAAA,EAAAA;gBACCoC,KAAAA,EAAOA,KAAAA;gBACPI,IAAAA,EAAMA,IAAAA;gBACNwE,KAAAA,EAAOA,OAAAA;gBACPQ,MAAAA,EAAQA,QAAAA;gBACRK,WAAAA,EAAahF,eAAAA;AACb+E,gBAAAA,uBAAAA,EAAyBA,uBAAAA,IAA2B7H,+BAAAA;gBACpD0H,kBAAAA,EAAoBA,kBAAAA;gBACpBhF,SAAAA,EAAWA,SAAAA;AAEV1B,gBAAAA,QAAAA,EAAAA;;AAEH,0BAAAyI,GAAA,CAACC,OAAOC,IAAI,EAAA;gBACV1E,IAAAA,EAAMrB,yBAAAA;gBACNgG,YAAAA,EAAc5E,mCAAAA;AAEd,gBAAA,QAAA,gBAAAyE,GAAA,CAACI,aAAAA,EAAAA;oBACCC,SAAAA,EAAWjF,0BAAAA;oBACXkF,QAAAA,EAAUjF,yBAAAA;AACVpE,oBAAAA,KAAAA,EACEF,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,GACrCS,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACrD,KAAK,CAAA,GACvDC,SAAAA;;oBAGNqJ,WAAAA,EAAa1J,cAAAA,CAAeyD,qCAAuB0F,GAAA,CAAAD,QAAA,EAAA,EAAA,CAAA,GAAQ7I,SAAAA;AAE1DQ,oBAAAA,QAAAA,EAAAA,aAAAA,CAAcX,cAAc,CAACuD,mBAAAA,CAAoB,CAACnD,IAAI;;;;;AAKjE;;;;"}

package/dist/admin/admin/src/features/StrapiApp.js.map

@@ -1 +1 @@
-{"version":3,"file":"StrapiApp.js","sources":["../../../../../admin/src/features/StrapiApp.tsx"],"sourcesContent":["import { createContext } from '../components/Context';\nimport { RBAC } from '../core/apis/rbac';\nimport { Router } from '../core/apis/router';\n\nimport type { StrapiApp } from '../StrapiApp';\n\n/* -------------------------------------------------------------------------------------------------\n * StrapiApp\n * -----------------------------------------------------------------------------------------------*/\ninterface StrapiAppContextValue\n  extends Pick<\n      StrapiApp,\n      | 'customFields'\n      | 'getPlugin'\n      | 'getAdminInjectedComponents'\n      | 'plugins'\n      | 'runHookParallel'\n      | 'runHookSeries'\n      | 'widgets'\n    >,\n    Pick<Router, 'menu' | 'settings'> {\n  components: StrapiApp['library']['components'];\n  fields: StrapiApp['library']['fields'];\n  rbac: RBAC;\n  runHookWaterfall: <TData>(\n    name: Parameters<StrapiApp['runHookWaterfall']>[0],\n    initialValue: TData\n  ) => TData;\n}\n\nconst [StrapiAppProvider, useStrapiApp] = createContext<StrapiAppContextValue>('StrapiApp');\n\nexport { StrapiAppProvider, useStrapiApp };\nexport type { StrapiAppContextValue };\n"],"names":["StrapiAppProvider","useStrapiApp","createContext"],"mappings":";;;;AA8BA,MAAM,CAACA,iBAAAA,EAAmBC,YAAAA,CAAa,GAAGC,qBAAAA,CAAqC,WAAA;;;;;"}
+{"version":3,"file":"StrapiApp.js","sources":["../../../../../admin/src/features/StrapiApp.tsx"],"sourcesContent":["import { createContext } from '../components/Context';\nimport { RBAC } from '../core/apis/rbac';\nimport { Router } from '../core/apis/router';\n\nimport type { StrapiApp } from '../StrapiApp';\n\n/* -------------------------------------------------------------------------------------------------\n * StrapiApp\n * -----------------------------------------------------------------------------------------------*/\ninterface StrapiAppContextValue\n  extends\n    Pick<\n      StrapiApp,\n      | 'customFields'\n      | 'getPlugin'\n      | 'getAdminInjectedComponents'\n      | 'plugins'\n      | 'runHookParallel'\n      | 'runHookSeries'\n      | 'widgets'\n    >,\n    Pick<Router, 'menu' | 'settings'> {\n  components: StrapiApp['library']['components'];\n  fields: StrapiApp['library']['fields'];\n  rbac: RBAC;\n  runHookWaterfall: <TData>(\n    name: Parameters<StrapiApp['runHookWaterfall']>[0],\n    initialValue: TData\n  ) => TData;\n}\n\nconst [StrapiAppProvider, useStrapiApp] = createContext<StrapiAppContextValue>('StrapiApp');\n\nexport { StrapiAppProvider, useStrapiApp };\nexport type { StrapiAppContextValue };\n"],"names":["StrapiAppProvider","useStrapiApp","createContext"],"mappings":";;;;AA+BA,MAAM,CAACA,iBAAAA,EAAmBC,YAAAA,CAAa,GAAGC,qBAAAA,CAAqC,WAAA;;;;;"}

package/dist/admin/admin/src/features/StrapiApp.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"StrapiApp.mjs","sources":["../../../../../admin/src/features/StrapiApp.tsx"],"sourcesContent":["import { createContext } from '../components/Context';\nimport { RBAC } from '../core/apis/rbac';\nimport { Router } from '../core/apis/router';\n\nimport type { StrapiApp } from '../StrapiApp';\n\n/* -------------------------------------------------------------------------------------------------\n * StrapiApp\n * -----------------------------------------------------------------------------------------------*/\ninterface StrapiAppContextValue\n  extends Pick<\n      StrapiApp,\n      | 'customFields'\n      | 'getPlugin'\n      | 'getAdminInjectedComponents'\n      | 'plugins'\n      | 'runHookParallel'\n      | 'runHookSeries'\n      | 'widgets'\n    >,\n    Pick<Router, 'menu' | 'settings'> {\n  components: StrapiApp['library']['components'];\n  fields: StrapiApp['library']['fields'];\n  rbac: RBAC;\n  runHookWaterfall: <TData>(\n    name: Parameters<StrapiApp['runHookWaterfall']>[0],\n    initialValue: TData\n  ) => TData;\n}\n\nconst [StrapiAppProvider, useStrapiApp] = createContext<StrapiAppContextValue>('StrapiApp');\n\nexport { StrapiAppProvider, useStrapiApp };\nexport type { StrapiAppContextValue };\n"],"names":["StrapiAppProvider","useStrapiApp","createContext"],"mappings":";;AA8BA,MAAM,CAACA,iBAAAA,EAAmBC,YAAAA,CAAa,GAAGC,aAAAA,CAAqC,WAAA;;;;"}
+{"version":3,"file":"StrapiApp.mjs","sources":["../../../../../admin/src/features/StrapiApp.tsx"],"sourcesContent":["import { createContext } from '../components/Context';\nimport { RBAC } from '../core/apis/rbac';\nimport { Router } from '../core/apis/router';\n\nimport type { StrapiApp } from '../StrapiApp';\n\n/* -------------------------------------------------------------------------------------------------\n * StrapiApp\n * -----------------------------------------------------------------------------------------------*/\ninterface StrapiAppContextValue\n  extends\n    Pick<\n      StrapiApp,\n      | 'customFields'\n      | 'getPlugin'\n      | 'getAdminInjectedComponents'\n      | 'plugins'\n      | 'runHookParallel'\n      | 'runHookSeries'\n      | 'widgets'\n    >,\n    Pick<Router, 'menu' | 'settings'> {\n  components: StrapiApp['library']['components'];\n  fields: StrapiApp['library']['fields'];\n  rbac: RBAC;\n  runHookWaterfall: <TData>(\n    name: Parameters<StrapiApp['runHookWaterfall']>[0],\n    initialValue: TData\n  ) => TData;\n}\n\nconst [StrapiAppProvider, useStrapiApp] = createContext<StrapiAppContextValue>('StrapiApp');\n\nexport { StrapiAppProvider, useStrapiApp };\nexport type { StrapiAppContextValue };\n"],"names":["StrapiAppProvider","useStrapiApp","createContext"],"mappings":";;AA+BA,MAAM,CAACA,iBAAAA,EAAmBC,YAAAA,CAAa,GAAGC,aAAAA,CAAqC,WAAA;;;;"}