@tinyrack/issuary-server 0.27.0 → 0.29.0

package/public/assets/profile-PjXEnzA-.js

@@ -1,2 +0,0 @@
-import{K as e,X as t,Z as n,et as r,i,n as a,r as o,s,t as c}from"./createLucideIcon-D-yizrWN.js";import{Ar as l,In as u,i as d,n as f,r as p,t as m}from"./config-C18-l7z7.js";import{t as h}from"./mutationOptions-Cv_vJkJn.js";import{t as g}from"./useMutation-DqIIIiBW.js";import{Dt as _,n as v,o as y,q as b,t as x}from"./shell-header-bar-CdOEWmCT.js";import{t as S}from"./useQuery-CLr9TaKA.js";import{a as C,i as w,n as T,r as E,t as D}from"./use-totp-setup-KOVNS2DC.js";import{t as O}from"./auth-field-BpJ4AHtU.js";import{t as k}from"./fingerprint-pattern-BwUoN1_w.js";import{t as A}from"./key-round-BxWppK6h.js";import{n as j,t as M}from"./provider-mark-CeYazOfu.js";import{n as N,r as ee,t as te}from"./logout-Dphj1d_0.js";import{t as P}from"./shield-check-DpYF8yeI.js";import{t as F}from"./trash-2-B3NVE8pR.js";import{t as I}from"./triangle-alert-DATO9o3k.js";import{t as L}from"./zod-Dszyrytb.js";import{D as ne,E as R,G as z,H as B,O as re,T as ie,U as ae,k as oe}from"./index-lTEyHSus.js";import{t as V}from"./badge-B8D0Q2qq.js";import{t as se}from"./auth-page-header-ChaCNNrn.js";import{t as H}from"./alert-D3aaK-_3.js";import{t as ce}from"./initial-avatar-WMjxW3Zz.js";import{t as U}from"./form-sJw-V9wb.js";import{n as W,t as G}from"./modal-JuaLVSyx.js";import{t as K}from"./promise-OpBtq8tG.js";import{a as le,i as ue,n as de,r as fe}from"./passkey-CWTjw19S.js";import{r as q,t as J}from"./standard-schema-C50nwAaQ.js";import{n as pe,r as me}from"./totp-BhElob6P.js";var he=c(`cloud`,[[`path`,{d:`M17.5 19H9a7 7 0 1 1 6.71-9h1.79a4.5 4.5 0 1 1 0 9Z`,key:`p7xjir`}]]),ge=c(`link-2-off`,[[`path`,{d:`M9 17H7A5 5 0 0 1 7 7`,key:`10o201`}],[`path`,{d:`M15 7h2a5 5 0 0 1 4 8`,key:`1d3206`}],[`line`,{x1:`8`,x2:`12`,y1:`12`,y2:`12`,key:`rvw6j4`}],[`line`,{x1:`2`,x2:`22`,y1:`2`,y2:`22`,key:`a6p6uj`}]]),_e=c(`pencil`,[[`path`,{d:`M21.174 6.812a1 1 0 0 0-3.986-3.987L3.842 16.174a2 2 0 0 0-.5.83l-1.321 4.352a.5.5 0 0 0 .623.622l4.353-1.32a2 2 0 0 0 .83-.497z`,key:`1a8usu`}],[`path`,{d:`m15 5 4 4`,key:`1mk7zo`}]]),ve=c(`smartphone`,[[`rect`,{width:`14`,height:`20`,x:`5`,y:`2`,rx:`2`,ry:`2`,key:`1yt0o3`}],[`path`,{d:`M12 18h.01`,key:`mhygvu`}]]),Y=r(n(),1),X=t();function ye({isConfigManaged:e,isDeletionEnabled:t,onDeleteClick:n}){let{t:r}=i();return t?(0,X.jsxs)(z.Root,{className:`border-tinyrack-danger-border bg-tinyrack-danger-surface`,variant:`outlined`,children:[(0,X.jsxs)(z.Header,{className:`border-tinyrack-danger-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md`,children:[(0,X.jsxs)(`div`,{className:`flex items-center gap-tinyrack-sm`,children:[(0,X.jsx)(I,{"aria-hidden":!0,className:`size-tinyrack-lg text-tinyrack-danger-foreground`}),(0,X.jsx)(z.Title,{className:`text-tinyrack-danger-foreground`,children:r(`profile.dangerZone.title`)})]}),(0,X.jsx)(z.Description,{children:r(`profile.dangerZone.description`)})]}),(0,X.jsx)(z.Content,{className:`px-tinyrack-lg py-tinyrack-md`,children:(0,X.jsxs)(`div`,{className:`flex items-center justify-between gap-tinyrack-lg`,children:[(0,X.jsxs)(`div`,{className:`flex min-w-0 flex-1 flex-col gap-tinyrack-3xs`,children:[(0,X.jsx)(a,{as:`p`,variant:`bodySm`,weight:`medium`,children:r(`profile.deleteAccount.title`)}),(0,X.jsx)(a,{as:`p`,color:`muted`,variant:`caption`,children:r(e?`profile.deleteAccount.configManaged`:`profile.deleteAccount.description`)})]}),(0,X.jsxs)(s,{appearance:`outline`,"data-testid":`profile-delete-account`,disabled:e,intent:`danger`,onClick:n,type:`button`,uiSize:`sm`,children:[(0,X.jsx)(F,{"aria-hidden":!0,className:`size-tinyrack-lg`}),r(`profile.deleteAccount.button`)]})]})})]}):null}function be({providerId:e,iconUrl:t,className:n=`size-tinyrack-xl`}){return e===`google`||e===`github`||e===`apple`?(0,X.jsx)(M,{"aria-hidden":!0,className:n,provider:e}):t?(0,X.jsx)(`img`,{alt:``,className:n,src:t}):(0,X.jsx)(j,{"aria-hidden":!0,className:n})}function Z({icon:e,active:t,title:n,status:r,note:i,actions:o}){let s;return s=(0,Y.isValidElement)(e)?e:(0,X.jsx)(e,{"aria-hidden":!0,className:`size-tinyrack-lg ${t?`text-tinyrack-success-foreground`:`text-tinyrack-text-muted`}`}),(0,X.jsxs)(`div`,{className:`flex items-center justify-between gap-tinyrack-lg p-tinyrack-lg`,children:[(0,X.jsxs)(`div`,{className:`flex min-w-0 flex-1 items-center gap-tinyrack-md`,children:[(0,X.jsx)(`div`,{className:`flex size-9 shrink-0 items-center justify-center rounded-tinyrack-md ${t?`bg-tinyrack-success-surface`:`bg-tinyrack-surface-muted`}`,children:s}),(0,X.jsxs)(`div`,{className:`flex min-w-0 flex-1 flex-col gap-tinyrack-3xs`,children:[(0,X.jsx)(a,{as:`div`,variant:`bodySm`,weight:`medium`,children:n}),(0,X.jsx)(a,{as:`div`,color:`muted`,variant:`caption`,children:r}),i]})]}),o&&(0,X.jsx)(`div`,{className:`flex shrink-0 flex-wrap justify-end gap-tinyrack-xs`,children:o})]})}function xe({providers:e,unlinkingProvider:t,getAuthorizeUrl:n,onUnlinkRequest:r}){let{t:a}=i();return e.length===0?null:(0,X.jsxs)(z.Root,{variant:`outlined`,children:[(0,X.jsxs)(z.Header,{className:`border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md`,children:[(0,X.jsx)(z.Title,{children:a(`profile.linkedAccounts.title`)}),(0,X.jsx)(z.Description,{children:a(`profile.linkedAccounts.description`)})]}),(0,X.jsx)(z.Content,{className:`divide-y divide-tinyrack-border p-0`,children:e.map(e=>(0,X.jsx)(Z,{actions:e.linked?(0,X.jsx)(s,{appearance:`ghost`,intent:`danger`,loading:t===e.id,loadingLabel:a(`profile.linkedAccounts.unlinking`),onClick:()=>r(e),type:`button`,uiSize:`sm`,children:t===e.id?void 0:a(`profile.linkedAccounts.unlink`)}):(0,X.jsx)(ae,{appearance:`outline`,intent:`neutral`,render:(0,X.jsx)(`a`,{href:n(e.id,`link`,`/profile`)}),uiSize:`sm`,children:a(`profile.linkedAccounts.link`)}),active:e.linked,icon:(0,X.jsx)(be,{className:`size-tinyrack-lg`,iconUrl:e.icon_url,providerId:e.id}),status:e.linked?a(`profile.linkedAccounts.connected`):a(`profile.linkedAccounts.notConnected`),title:e.display_name},e.id))})]})}function Se({passkeyCount:e,onOpenModal:t}){let{t:n}=i(),r=e>0;return(0,X.jsx)(Z,{actions:(0,X.jsx)(s,{appearance:`ghost`,intent:`primary`,onClick:()=>t(r?`manage`:`setup`),type:`button`,uiSize:`sm`,children:n(r?`profile.passkey.manage`:`profile.passkey.add`)}),active:r,icon:k,status:r?n(`profile.passkey.status.enabled`,{count:e}):n(`profile.passkey.status.disabled`),title:n(`profile.passkey.title`)})}function Ce({hasPassword:e,hasLinkedOAuth:t,isConfigManaged:n,hasSecondFactorOnly:r,onOpenModal:o}){let{t:c}=i();return(0,X.jsx)(Z,{actions:n?void 0:e?(0,X.jsxs)(X.Fragment,{children:[(0,X.jsx)(s,{appearance:`ghost`,"data-testid":`profile-password-change`,intent:`primary`,onClick:()=>o(`change`),type:`button`,uiSize:`sm`,children:c(`profile.password.change`)}),t?(0,X.jsx)(s,{appearance:`ghost`,"data-testid":`profile-password-remove`,intent:`danger`,onClick:()=>o(`remove`),type:`button`,uiSize:`sm`,children:c(`profile.password.remove`)}):null,!t&&r&&(0,X.jsxs)(v.Root,{children:[(0,X.jsx)(v.Trigger,{render:(0,X.jsx)(s,{appearance:`ghost`,disabled:!0,type:`button`,uiSize:`sm`,children:c(`profile.password.remove`)})}),(0,X.jsx)(v.Portal,{children:(0,X.jsx)(v.Positioner,{children:(0,X.jsx)(v.Popup,{className:`max-w-tinyrack-measure-lg rounded-tinyrack-md border border-tinyrack-border bg-tinyrack-surface p-tinyrack-md text-tinyrack-text text-tinyrack-xs shadow-tinyrack-overlay`,children:(0,X.jsxs)(`div`,{className:`flex items-start gap-tinyrack-sm`,children:[(0,X.jsx)(C,{"aria-hidden":!0,className:`size-tinyrack-lg shrink-0 text-tinyrack-warning-foreground`}),(0,X.jsx)(a,{as:`div`,variant:`caption`,children:c(`profile.password.removeDisabledReason`)})]})})})})]})]}):(0,X.jsx)(s,{appearance:`ghost`,"data-testid":`profile-password-set`,intent:`primary`,onClick:()=>o(`set`),type:`button`,uiSize:`sm`,children:c(`profile.password.set`)}),active:e,icon:A,note:n?(0,X.jsxs)(a,{as:`div`,className:`flex items-center gap-tinyrack-xs`,color:`muted`,variant:`caption`,children:[(0,X.jsx)(N,{"aria-hidden":!0,className:`size-tinyrack-md shrink-0`}),(0,X.jsx)(a,{as:`span`,color:`muted`,variant:`caption`,children:c(`profile.password.configManaged`)})]}):void 0,status:c(e?`profile.password.status.set`:`profile.password.status.notSet`),title:c(`profile.password.title`)})}function we({totpEnabled:e,recoveryCodesMissing:t,onOpenModal:n}){let{t:r}=i();return(0,X.jsx)(Z,{actions:e?(0,X.jsxs)(X.Fragment,{children:[(0,X.jsx)(s,{appearance:`ghost`,"data-testid":`profile-totp-regenerate`,intent:`primary`,onClick:()=>n(`regenerate`),type:`button`,uiSize:`sm`,children:r(`profile.totp.regenerate`)}),(0,X.jsx)(s,{appearance:`ghost`,"data-testid":`profile-totp-disable`,intent:`danger`,onClick:()=>n(`disable`),type:`button`,uiSize:`sm`,children:r(`profile.totp.disable`)})]}):(0,X.jsx)(s,{appearance:`ghost`,"data-testid":`profile-totp-enable`,intent:`primary`,onClick:()=>n(`setup`),type:`button`,uiSize:`sm`,children:r(`profile.totp.enable`)}),active:e,icon:P,status:r(e?t?`profile.totp.status.recoveryCodesMissing`:`profile.totp.status.enabled`:`profile.totp.status.disabled`),title:r(`profile.totp.title`)})}var Te={error:B,warning:I,info:C};function Q({variant:e,children:t}){return(0,X.jsx)(H,{"data-testid":`alert-banner-${e}`,icon:Te[e],type:e,children:t})}function Ee({isOpen:e,onClose:t,providerName:n,isPending:r,onConfirm:a}){let{t:o}=i(),[c,l]=(0,Y.useState)(null),u=()=>{r||(l(null),t())};return(0,X.jsx)(G,{description:o(`profile.linkedAccounts.unlinkModal.description`,{provider:n}),icon:ge,isOpen:e,onClose:u,preventClose:r,title:o(`profile.linkedAccounts.unlinkModal.title`),variant:`destructive`,children:(0,X.jsxs)(`div`,{className:`mt-tinyrack-lg flex flex-col gap-tinyrack-md`,children:[(0,X.jsx)(Q,{variant:`warning`,children:o(`profile.linkedAccounts.unlinkModal.warning`,{provider:n})}),c&&(0,X.jsx)(Q,{variant:`error`,children:c}),(0,X.jsxs)(W,{children:[(0,X.jsx)(s,{appearance:`outline`,"data-testid":`unlink-oauth-cancel`,disabled:r,intent:`neutral`,onClick:u,type:`button`,uiSize:`sm`,children:o(`profile.linkedAccounts.unlinkModal.cancel`)}),(0,X.jsx)(s,{"data-testid":`unlink-oauth-unlink`,disabled:r,intent:`danger`,loading:r,loadingLabel:o(`profile.linkedAccounts.unlinking`),onClick:async()=>{l(null);try{await a(),u()}catch{l(o(`profile.linkedAccounts.unlinkError`))}},type:`button`,uiSize:`sm`,children:o(`profile.linkedAccounts.unlink`)})]})]})})}function $({label:e,value:t}){return(0,X.jsxs)(`div`,{className:`flex items-center justify-between gap-tinyrack-lg px-tinyrack-lg py-tinyrack-md`,children:[(0,X.jsx)(a,{className:`shrink-0`,color:`muted`,variant:`caption`,children:e}),(0,X.jsx)(a,{truncate:!0,variant:`bodySm`,weight:`medium`,children:t})]})}function De({user:e}){let{t}=i();return(0,X.jsxs)(z.Root,{variant:`outlined`,children:[(0,X.jsxs)(z.Header,{className:`border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md`,children:[(0,X.jsx)(z.Title,{children:t(`profile.account.title`)}),(0,X.jsx)(z.Description,{children:t(`profile.account.description`)})]}),(0,X.jsxs)(z.Content,{className:`divide-y divide-tinyrack-border p-0`,children:[(0,X.jsx)($,{label:t(`profile.id.label`),value:e.sub}),(0,X.jsx)($,{label:t(`profile.email.label`),value:e.email})]})]})}function Oe({children:e,headerActions:t}){return(0,X.jsxs)(`div`,{className:`flex min-h-dvh flex-col bg-tinyrack-surface`,children:[(0,X.jsx)(b,{}),(0,X.jsx)(x,{actions:t,brand:!0}),(0,X.jsx)(`main`,{className:`flex flex-1 justify-center px-tinyrack-lg py-tinyrack-xl`,children:(0,X.jsx)(`div`,{className:`auth-enter flex w-full max-w-tinyrack-overlay-width-md flex-col gap-tinyrack-xl`,children:e})}),(0,X.jsx)(y,{})]})}var ke=h({mutationFn:async e=>d(await p.api.user.password.$post({json:e}))}),Ae=h({mutationFn:async e=>d(await p.api.user.password.$put({json:e}))}),je=h({mutationFn:async e=>d(await p.api.user.password.$delete({json:e}))});function Me({isOpen:e,onClose:t}){let{t:n}=i(),r=l(),{data:a}=_(m),c=a.auth.password.policy,u=q({resolver:J((0,Y.useMemo)(()=>L.object({currentPassword:L.string().min(1,n(`validation.password.required`)),newPassword:L.string().min(c.min_length,n(`validation.password.min`,{count:c.min_length})).max(c.max_length,n(`validation.password.max`,{count:c.max_length})),confirmPassword:L.string()}).refine(e=>e.newPassword===e.confirmPassword,{message:n(`validation.confirmPassword.mismatch`),path:[`confirmPassword`]}),[c.max_length,c.min_length,n])),defaultValues:{currentPassword:``,newPassword:``,confirmPassword:``}}),d=g({...Ae,onSuccess:()=>{r.invalidateQueries({queryKey:R.queryKey}),f()}}),f=()=>{u.reset(),t()},p=u.handleSubmit(async e=>{try{await d.mutateAsync({current_password:e.currentPassword,new_password:e.newPassword})}catch(e){e instanceof o&&e.code===`INVALID_CURRENT_PASSWORD`?u.setError(`currentPassword`,{message:n(`profile.password.changeModal.invalidCurrent`)}):u.setError(`root`,{message:n(`profile.password.changeModal.error`)})}});return(0,X.jsx)(G,{description:n(`profile.password.changeModal.description`),icon:A,isOpen:e,onClose:f,title:n(`profile.password.changeModal.title`),children:(0,X.jsxs)(U,{className:`mt-tinyrack-lg flex flex-col gap-tinyrack-md`,onSubmit:p,children:[(0,X.jsx)(O,{error:u.formState.errors.currentPassword,errorTestId:`change-password-error-currentPassword`,id:`current-password`,label:n(`profile.password.changeModal.currentPassword`),placeholder:n(`profile.password.changeModal.currentPasswordPlaceholder`),...u.register(`currentPassword`),type:`password`}),(0,X.jsx)(O,{error:u.formState.errors.newPassword,errorTestId:`change-password-error-newPassword`,id:`new-password-change`,label:n(`profile.password.changeModal.newPassword`),placeholder:n(`profile.password.changeModal.newPasswordPlaceholder`),...u.register(`newPassword`),type:`password`}),(0,X.jsx)(O,{error:u.formState.errors.confirmPassword,errorTestId:`change-password-error-confirmPassword`,id:`confirm-password-change`,label:n(`profile.password.changeModal.confirmPassword`),placeholder:n(`profile.password.changeModal.confirmPasswordPlaceholder`),...u.register(`confirmPassword`),type:`password`}),u.formState.errors.root&&(0,X.jsx)(Q,{variant:`error`,children:u.formState.errors.root.message}),(0,X.jsxs)(W,{children:[(0,X.jsx)(s,{appearance:`outline`,"data-testid":`change-password-cancel`,disabled:d.isPending,intent:`neutral`,onClick:f,type:`button`,uiSize:`sm`,children:n(`profile.password.changeModal.cancel`)}),(0,X.jsx)(s,{"data-testid":`change-password-submit`,disabled:d.isPending,intent:`primary`,loading:d.isPending,loadingLabel:n(`profile.password.changeModal.submitting`),type:`submit`,uiSize:`sm`,children:d.isPending?void 0:n(`profile.password.changeModal.submit`)})]})]})})}var Ne=h({mutationFn:async()=>d(await p.api.user.$delete())});function Pe({isOpen:e,onClose:t,retentionDays:n}){let{t:r}=i(),o=u(),c=l(),d=q({resolver:J((0,Y.useMemo)(()=>L.object({confirmation:L.string().refine(e=>e.toLowerCase()===r(`profile.deleteAccount.modal.confirmPlaceholder`).toLowerCase(),{message:r(`validation.confirmText.mismatch`)})}),[r])),defaultValues:{confirmation:``}}),f=g({...Ne,onSuccess:async()=>{c.setQueryData(R.queryKey,{user:null}),await K(),o.navigate({to:`/login`})}}),p=()=>{f.isPending||(d.reset(),t())},m=d.handleSubmit(async()=>{try{await f.mutateAsync()}catch{d.setError(`root`,{message:r(`profile.deleteAccount.error`)})}});return(0,X.jsx)(G,{icon:F,isOpen:e,onClose:p,preventClose:f.isPending,title:r(`profile.deleteAccount.modal.title`),variant:`destructive`,children:(0,X.jsxs)(U,{className:`mt-tinyrack-lg flex flex-col gap-tinyrack-md`,onSubmit:m,children:[(0,X.jsxs)(Q,{variant:`error`,children:[(0,X.jsx)(a,{as:`span`,variant:`bodySm`,children:r(`profile.deleteAccount.modal.description`,{days:n})}),(0,X.jsx)(`br`,{}),(0,X.jsx)(a,{as:`span`,className:`opacity-tinyrack-hover`,variant:`caption`,children:r(`profile.deleteAccount.modal.warning`)})]}),(0,X.jsx)(O,{autoComplete:`off`,error:d.formState.errors.confirmation,errorTestId:`delete-account-error`,id:`delete-confirmation`,label:r(`profile.deleteAccount.modal.confirmLabel`),placeholder:r(`profile.deleteAccount.modal.confirmPlaceholder`),...d.register(`confirmation`),type:`text`}),d.formState.errors.root&&(0,X.jsx)(Q,{variant:`error`,children:d.formState.errors.root.message}),(0,X.jsxs)(W,{children:[(0,X.jsx)(s,{appearance:`outline`,"data-testid":`delete-account-cancel`,disabled:f.isPending,intent:`neutral`,onClick:p,type:`button`,uiSize:`sm`,children:r(`profile.deleteAccount.modal.cancel`)}),(0,X.jsx)(s,{"data-testid":`delete-account-submit`,disabled:f.isPending,intent:`danger`,loading:f.isPending,loadingLabel:r(`profile.deleteAccount.modal.confirming`),type:`submit`,uiSize:`sm`,children:f.isPending?void 0:r(`profile.deleteAccount.modal.confirm`)})]})]})})}function Fe({isOpen:e,onClose:t}){let{t:n}=i(),r=l(),a=q({resolver:J((0,Y.useMemo)(()=>L.object({code:L.string().length(6,n(`validation.totp.length`)).regex(/^\d{6}$/,n(`validation.totp.digits`))}),[n])),defaultValues:{code:``}}),c=g({...pe,onSuccess:()=>{r.invalidateQueries({queryKey:R.queryKey}),u()}}),u=()=>{a.reset(),t()},d=a.handleSubmit(async e=>{try{await c.mutateAsync({code:e.code})}catch(e){if(e instanceof o&&e.code===`CANNOT_REMOVE_LAST_SECOND_FACTOR`){a.setError(`code`,{message:n(`profile.totp.disableModal.cannotRemoveLastSecondFactor`)});return}a.setError(`code`,{message:n(`profile.totp.disableModal.error`)})}});return(0,X.jsx)(G,{description:n(`profile.totp.disableModal.description`),icon:P,isOpen:e,onClose:u,title:n(`profile.totp.disableModal.title`),variant:`destructive`,children:(0,X.jsxs)(U,{className:`mt-tinyrack-lg flex flex-col gap-tinyrack-md`,onSubmit:d,children:[(0,X.jsx)(Q,{variant:`warning`,children:n(`profile.totp.disableModal.warning`)}),(0,X.jsx)(O,{autoComplete:`one-time-code`,error:a.formState.errors.code,errorTestId:`disable-totp-error`,id:`disable-totp-code`,inputMode:`numeric`,label:n(`profile.totp.disableModal.codeLabel`),maxLength:6,pattern:`[0-9]*`,placeholder:`000000`,...a.register(`code`),type:`text`}),(0,X.jsxs)(W,{children:[(0,X.jsx)(s,{appearance:`outline`,"data-testid":`disable-totp-cancel`,disabled:c.isPending,intent:`neutral`,onClick:u,type:`button`,uiSize:`sm`,children:n(`profile.totp.disableModal.cancel`)}),(0,X.jsx)(s,{"data-testid":`disable-totp-submit`,disabled:c.isPending,intent:`danger`,loading:c.isPending,loadingLabel:n(`profile.totp.disableModal.disabling`),type:`submit`,uiSize:`sm`,children:c.isPending?void 0:n(`profile.totp.disableModal.disable`)})]})]})})}function Ie({isOpen:t,onClose:n,onAddNew:r}){let{t:c}=i(),u=l(),[d,p]=(0,Y.useState)(null),[m,h]=(0,Y.useState)(null),[_,v]=(0,Y.useState)(null),[y,b]=(0,Y.useState)(null),{data:x,isLoading:C}=S({...fe,enabled:t}),w=g({...de,onSuccess:()=>{u.invalidateQueries({queryKey:f.passkeys()}),u.invalidateQueries({queryKey:R.queryKey})},onSettled:()=>{h(null)}}),T=(0,Y.useCallback)(()=>{p(null),h(null),v(null),b(null),n()},[n]),E=e=>{v(e.id),b(null)},D=()=>{v(null),b(null)},O=async e=>{h(e.id),v(null);try{await w.mutateAsync({id:e.id})}catch(e){if(e instanceof o&&e.code===`CANNOT_REMOVE_LAST_SECOND_FACTOR`){b(c(`profile.passkey.manageModal.cannotRemoveLastSecondFactor`));return}b(c(`profile.passkey.manageModal.deleteError`))}},A=e=>new Date(e).toLocaleDateString(void 0,{year:`numeric`,month:`short`,day:`numeric`}),j=x?.passkeys||[];return(0,X.jsxs)(G,{icon:k,isOpen:t,onClose:T,size:`lg`,title:c(`profile.passkey.manageModal.title`),children:[(0,X.jsxs)(`div`,{className:`mt-tinyrack-lg flex flex-col gap-tinyrack-sm`,children:[y&&(0,X.jsx)(Q,{variant:`error`,children:y}),C&&(0,X.jsx)(`div`,{className:`flex justify-center py-tinyrack-xl`,children:(0,X.jsx)(e,{uiSize:`md`})}),!C&&j.length===0&&(0,X.jsx)(a,{align:`center`,className:`py-tinyrack-xl`,color:`muted`,"data-testid":`passkeys-empty`,variant:`bodySm`,children:c(`profile.passkey.manageModal.noPasskeys`)}),!C&&j.length>0&&(0,X.jsx)(`div`,{className:`flex flex-col gap-tinyrack-sm`,children:j.map(e=>(0,X.jsx)(Le,{formatDate:A,isConfirmingDelete:_===e.id,isDeleting:m===e.id,isEditing:d?.id===e.id,onCancelDelete:D,onCancelEdit:()=>p(null),onConfirmDelete:()=>O(e),onEdit:()=>p(e),onRequestDelete:()=>E(e),passkey:e},e.id))})]}),(0,X.jsxs)(W,{children:[(0,X.jsx)(s,{appearance:`outline`,"data-testid":`manage-passkeys-close`,intent:`neutral`,onClick:T,type:`button`,uiSize:`sm`,children:c(`profile.passkey.manageModal.close`)}),(0,X.jsx)(s,{"data-testid":`manage-passkeys-add-new`,intent:`primary`,onClick:()=>{T(),r()},type:`button`,uiSize:`sm`,children:c(`profile.passkey.manageModal.addNew`)})]})]})}function Le({passkey:e,isDeleting:t,isEditing:n,isConfirmingDelete:r,onEdit:o,onCancelEdit:c,onRequestDelete:u,onConfirmDelete:d,onCancelDelete:p,formatDate:m}){let{t:h}=i(),_=l(),v=q({resolver:J((0,Y.useMemo)(()=>L.object({name:L.string().min(1,h(`validation.passkey.name.required`)).max(100,h(`validation.passkey.name.max`))}),[h])),defaultValues:{name:e.name||``}}),y=g({...le,onSuccess:()=>{_.invalidateQueries({queryKey:f.passkeys()}),c()}}),b=v.handleSubmit(async t=>{try{await y.mutateAsync({id:e.id,name:t.name})}catch{v.setError(`name`,{message:h(`profile.passkey.manageModal.renameError`)})}});return n?(0,X.jsxs)(U,{className:`flex flex-col gap-tinyrack-xs rounded-tinyrack-md bg-tinyrack-surface-muted p-tinyrack-sm`,onSubmit:b,children:[(0,X.jsx)(O,{"data-testid":`passkey-rename-input`,error:v.formState.errors.name,errorTestId:`passkey-rename-error`,hideLabel:!0,label:h(`profile.passkey.manageModal.nameLabel`),placeholder:h(`profile.passkey.manageModal.namePlaceholder`),...v.register(`name`),type:`text`}),(0,X.jsxs)(`div`,{className:`flex justify-end gap-tinyrack-xs`,children:[(0,X.jsx)(s,{appearance:`ghost`,disabled:y.isPending,onClick:()=>{v.reset(),c()},type:`button`,uiSize:`sm`,children:h(`profile.passkey.manageModal.cancelEdit`)}),(0,X.jsx)(s,{disabled:y.isPending,intent:`primary`,type:`submit`,uiSize:`sm`,children:y.isPending?h(`profile.passkey.manageModal.saving`):h(`profile.passkey.manageModal.save`)})]})]}):r?(0,X.jsxs)(`div`,{className:`flex items-center justify-between rounded-tinyrack-md border border-tinyrack-danger-border bg-tinyrack-danger-surface p-tinyrack-sm text-tinyrack-danger-foreground`,children:[(0,X.jsxs)(`div`,{className:`flex items-center gap-tinyrack-sm`,children:[(0,X.jsx)(F,{className:`size-tinyrack-lg`}),(0,X.jsx)(a,{color:`danger`,variant:`caption`,children:h(`profile.passkey.manageModal.deleteConfirmInline`)})]}),(0,X.jsxs)(`div`,{className:`flex gap-tinyrack-xs`,children:[(0,X.jsx)(s,{appearance:`ghost`,onClick:p,type:`button`,uiSize:`sm`,children:h(`profile.passkey.manageModal.cancelEdit`)}),(0,X.jsx)(s,{intent:`danger`,onClick:d,type:`button`,uiSize:`sm`,children:h(`profile.passkey.manageModal.delete`)})]})]}):(0,X.jsxs)(`div`,{className:`flex items-center justify-between rounded-tinyrack-md bg-tinyrack-surface-muted p-tinyrack-sm`,"data-testid":`passkey-item`,children:[(0,X.jsxs)(`div`,{className:`flex items-center gap-tinyrack-sm`,children:[e.device_type===`multiDevice`?(0,X.jsx)(he,{className:`size-tinyrack-lg text-tinyrack-primary-foreground`}):(0,X.jsx)(ve,{className:`size-tinyrack-lg text-tinyrack-primary-foreground`}),(0,X.jsxs)(`div`,{children:[(0,X.jsx)(a,{as:`div`,variant:`caption`,weight:`medium`,children:e.name||h(`profile.passkey.manageModal.unnamedPasskey`)}),(0,X.jsxs)(`div`,{className:`flex items-center gap-tinyrack-xs`,children:[(0,X.jsx)(a,{color:`muted`,variant:`caption`,children:h(`profile.passkey.manageModal.createdAt`,{date:m(e.created_at)})}),e.backed_up&&(0,X.jsx)(V,{uiSize:`md`,variant:`success`,children:h(`profile.passkey.manageModal.backedUp`)})]})]})]}),(0,X.jsxs)(`div`,{className:`flex gap-tinyrack-xs`,children:[(0,X.jsx)(s,{appearance:`ghost`,"aria-label":h(`profile.passkey.manageModal.rename`),onClick:o,type:`button`,uiSize:`sm`,children:(0,X.jsx)(_e,{className:`size-tinyrack-lg`})}),(0,X.jsx)(s,{appearance:`ghost`,"aria-label":h(`profile.passkey.manageModal.delete`),disabled:t,intent:`danger`,loading:t,onClick:u,type:`button`,uiSize:`sm`,children:t?void 0:(0,X.jsx)(F,{className:`size-tinyrack-lg`})})]})]})}function Re({isOpen:e,onClose:t}){let{t:n}=i(),r=u(),a=l(),{data:s}=_(m),[c,d]=(0,Y.useState)(`verify`),[f,p]=(0,Y.useState)(null),[h,v]=(0,Y.useState)(null),y=g({...me,onSuccess:async e=>{p(e),d(`recovery`),await a.invalidateQueries({queryKey:R.queryKey})}}),b=(0,Y.useCallback)(()=>{d(`verify`),p(null),v(null),y.reset()},[y]),x=(0,Y.useCallback)(()=>{b(),t()},[t,b]),S=(0,Y.useCallback)(async e=>{v(null);try{await y.mutateAsync({code:e})}catch(e){if(e instanceof o){if(e.code===`INVALID_TOTP_CODE`)throw e;if(e.code===`UNAUTHORIZED`){a.setQueryData(R.queryKey,{user:null}),await K(),r.navigate({to:`/login`});return}if(e.code===`TOTP_NOT_ENABLED`||e.code===`VALIDATION_ERROR`){await a.invalidateQueries({queryKey:R.queryKey}),x();return}}v(n(`profile.totp.regenerateModal.unexpectedError`))}},[x,y,a,r,n]);return s.auth.password.totp.enabled?(0,X.jsx)(G,{description:n(c===`verify`?`profile.totp.regenerateModal.description`:`profile.totp.regenerateModal.recoveryDescription`),icon:P,isOpen:e,onClose:x,preventClose:c===`recovery`,size:`sm`,title:n(c===`verify`?`profile.totp.regenerateModal.title`:`profile.totp.regenerateModal.recoveryTitle`),children:c===`verify`?(0,X.jsxs)(`div`,{className:`mt-tinyrack-lg`,children:[h&&(0,X.jsx)(`div`,{className:`mb-tinyrack-md`,children:(0,X.jsx)(Q,{variant:`error`,children:h})}),(0,X.jsx)(E,{invalidMessage:n(`profile.totp.regenerateModal.error`),isPending:y.isPending,onSubmit:S,pendingText:n(`profile.totp.regenerateModal.submitting`),submitLabel:n(`profile.totp.regenerateModal.submit`)})]}):(0,X.jsx)(`div`,{className:`mt-tinyrack-lg`,children:(0,X.jsx)(w,{onConfirm:x,recoveryCodes:f?.recovery_codes??[]})})}):null}function ze({isOpen:e,onClose:t}){let{t:n}=i(),r=l(),a=q({resolver:J((0,Y.useMemo)(()=>L.object({currentPassword:L.string().min(1,n(`validation.password.required`))}),[n])),defaultValues:{currentPassword:``}}),c=g({...je,onSuccess:()=>{r.invalidateQueries({queryKey:R.queryKey}),u()}}),u=()=>{a.reset(),t()},d=a.handleSubmit(async e=>{try{await c.mutateAsync({current_password:e.currentPassword})}catch(e){if(e instanceof o){if(e.code===`INVALID_CURRENT_PASSWORD`){a.setError(`currentPassword`,{message:n(`profile.password.removeModal.invalidCurrent`)});return}if(e.code===`CANNOT_REMOVE_LAST_AUTH_METHOD`){a.setError(`root`,{message:n(`profile.password.removeModal.noOAuth`)});return}if(e.code===`CANNOT_REMOVE_PASSWORD_WITH_SECOND_FACTOR_ONLY`){a.setError(`root`,{message:n(`profile.password.removeModal.noOAuthWith2FA`)});return}}a.setError(`root`,{message:n(`profile.password.removeModal.error`)})}});return(0,X.jsx)(G,{description:n(`profile.password.removeModal.description`),icon:A,isOpen:e,onClose:u,title:n(`profile.password.removeModal.title`),variant:`destructive`,children:(0,X.jsxs)(U,{className:`mt-tinyrack-lg flex flex-col gap-tinyrack-md`,onSubmit:d,children:[(0,X.jsx)(O,{error:a.formState.errors.currentPassword,errorTestId:`remove-password-error`,id:`current-password-remove`,label:n(`profile.password.removeModal.currentPassword`),placeholder:n(`profile.password.removeModal.currentPasswordPlaceholder`),...a.register(`currentPassword`),type:`password`}),a.formState.errors.root&&(0,X.jsx)(Q,{variant:`error`,children:a.formState.errors.root.message}),(0,X.jsxs)(W,{children:[(0,X.jsx)(s,{appearance:`outline`,"data-testid":`remove-password-cancel`,disabled:c.isPending,intent:`neutral`,onClick:u,type:`button`,uiSize:`sm`,children:n(`profile.password.removeModal.cancel`)}),(0,X.jsx)(s,{"data-testid":`remove-password-submit`,disabled:c.isPending,intent:`danger`,loading:c.isPending,loadingLabel:n(`profile.password.removeModal.submitting`),type:`submit`,uiSize:`sm`,children:c.isPending?void 0:n(`profile.password.removeModal.submit`)})]})]})})}function Be({isOpen:e,onClose:t}){let{t:n}=i(),r=l(),{data:a}=_(m),o=a.auth.password.policy,c=q({resolver:J((0,Y.useMemo)(()=>L.object({password:L.string().min(o.min_length,n(`validation.password.min`,{count:o.min_length})).max(o.max_length,n(`validation.password.max`,{count:o.max_length})),confirmPassword:L.string()}).refine(e=>e.password===e.confirmPassword,{message:n(`validation.confirmPassword.mismatch`),path:[`confirmPassword`]}),[o.max_length,o.min_length,n])),defaultValues:{password:``,confirmPassword:``}}),u=g({...ke,onSuccess:()=>{r.invalidateQueries({queryKey:R.queryKey}),d()}}),d=()=>{c.reset(),t()},f=c.handleSubmit(async e=>{try{await u.mutateAsync({password:e.password})}catch{c.setError(`root`,{message:n(`profile.password.setModal.error`)})}});return(0,X.jsx)(G,{description:n(`profile.password.setModal.description`),icon:A,isOpen:e,onClose:d,title:n(`profile.password.setModal.title`),children:(0,X.jsxs)(U,{className:`mt-tinyrack-lg flex flex-col gap-tinyrack-md`,onSubmit:f,children:[(0,X.jsx)(O,{error:c.formState.errors.password,errorTestId:`set-password-error-password`,id:`new-password`,label:n(`profile.password.setModal.newPassword`),placeholder:n(`profile.password.setModal.newPasswordPlaceholder`),...c.register(`password`),type:`password`}),(0,X.jsx)(O,{error:c.formState.errors.confirmPassword,errorTestId:`set-password-error-confirmPassword`,id:`confirm-password`,label:n(`profile.password.setModal.confirmPassword`),placeholder:n(`profile.password.setModal.confirmPasswordPlaceholder`),...c.register(`confirmPassword`),type:`password`}),c.formState.errors.root&&(0,X.jsx)(Q,{variant:`error`,children:c.formState.errors.root.message}),(0,X.jsxs)(W,{children:[(0,X.jsx)(s,{appearance:`outline`,"data-testid":`set-password-cancel`,disabled:u.isPending,intent:`neutral`,onClick:d,type:`button`,uiSize:`sm`,children:n(`profile.password.setModal.cancel`)}),(0,X.jsx)(s,{"data-testid":`set-password-submit`,disabled:u.isPending,intent:`primary`,loading:u.isPending,loadingLabel:n(`profile.password.setModal.submitting`),type:`submit`,uiSize:`sm`,children:u.isPending?void 0:n(`profile.password.setModal.submit`)})]})]})})}function Ve({isOpen:t,onClose:n,isRequired:r=!1,canSwitchToTotp:o=!1,onSwitchToTotp:c}){let{t:u}=i(),d=l(),[p,m]=(0,Y.useState)(`name`),[h,_]=(0,Y.useState)(null),v=q({resolver:J((0,Y.useMemo)(()=>L.object({name:L.string().max(100,u(`validation.passkey.name.max`)).optional().transform(e=>e?.trim()||void 0)}),[u])),defaultValues:{name:``}}),y=g({...ue,onSuccess:()=>{d.invalidateQueries({queryKey:f.passkeys()}),d.invalidateQueries({queryKey:R.queryKey}),b()},onError:e=>{m(`name`),e.name===`NotAllowedError`?_(u(`profile.passkey.setupModal.cancelled`)):_(u(`profile.passkey.setupModal.error`))}}),b=(0,Y.useCallback)(()=>{v.reset(),m(`name`),_(null),n()},[v,n]),x=v.handleSubmit(async e=>{m(`register`),_(null);try{await y.mutateAsync({name:e.name})}catch{}}),S=y.isPending;return(0,X.jsxs)(G,{description:r?u(`profile.passkey.setupModal.requiredDescription`):void 0,icon:k,isOpen:t,onClose:b,preventClose:r,size:`sm`,title:u(`profile.passkey.setupModal.title`),children:[p===`name`&&(0,X.jsxs)(U,{className:`mt-tinyrack-lg flex flex-col gap-tinyrack-md`,onSubmit:x,children:[(0,X.jsx)(a,{as:`p`,color:`muted`,variant:`caption`,children:u(`profile.passkey.setupModal.description`)}),h&&(0,X.jsx)(Q,{variant:`error`,children:h}),(0,X.jsx)(O,{error:v.formState.errors.name,errorTestId:`setup-passkey-error`,hint:u(`profile.passkey.setupModal.nameHint`),id:`passkey-name`,label:u(`profile.passkey.setupModal.nameLabel`),placeholder:u(`profile.passkey.setupModal.namePlaceholder`),...v.register(`name`),type:`text`}),(0,X.jsxs)(W,{children:[(0,X.jsx)(s,{appearance:`outline`,"data-testid":`setup-passkey-cancel`,intent:`neutral`,onClick:b,type:`button`,uiSize:`sm`,children:u(`profile.passkey.setupModal.cancel`)}),(0,X.jsx)(s,{"data-testid":`setup-passkey-continue`,intent:`primary`,type:`submit`,uiSize:`sm`,children:u(`profile.passkey.setupModal.continue`)})]}),o&&c&&(0,X.jsx)(a,{align:`center`,as:`p`,className:`mt-tinyrack-sm`,variant:`caption`,children:(0,X.jsx)(s,{appearance:`ghost`,intent:`primary`,onClick:c,type:`button`,uiSize:`sm`,children:u(`profile.passkey.setupModal.switchToTotp`)})})]}),p===`register`&&(0,X.jsxs)(`div`,{className:`mt-tinyrack-lg`,children:[(0,X.jsxs)(`div`,{className:`flex flex-col items-center gap-tinyrack-md py-tinyrack-xl`,"data-testid":`setup-passkey-loading`,children:[(0,X.jsx)(e,{uiSize:`md`}),(0,X.jsx)(a,{align:`center`,as:`p`,color:`muted`,variant:`caption`,children:u(`profile.passkey.setupModal.waitingForDevice`)})]}),(0,X.jsx)(W,{children:(0,X.jsx)(s,{appearance:`outline`,"data-testid":`setup-passkey-cancel`,disabled:S,intent:`neutral`,onClick:b,type:`button`,uiSize:`sm`,children:u(`profile.passkey.setupModal.cancel`)})})]})]})}function He({isOpen:t,onClose:n,isRequired:r=!1,canSwitchToPasskey:o=!1,onSwitchToPasskey:c}){let{t:l}=i(),{step:u,setupData:d,recoveryCodes:f,isSetupPending:p,isVerifyPending:m,isConfirmPending:h,startSetup:g,verify:_,goToVerify:v,goToQr:y,confirmRecoveryCodes:b,reset:x}=D({autoStart:!1,onConfirmSuccess:()=>{x(),n()}}),S=(0,Y.useCallback)(()=>{x(),n()},[n,x]),C=(0,Y.useCallback)(()=>{!d&&!p&&g()},[d,p,g]);t&&!d&&!p&&u!==`error`&&C();let O=(0,Y.useCallback)(async e=>{await _(e)},[_]),k=l(u===`recovery`?`setupTotp.recoveryCodes.title`:`profile.totp.setupModal.title`);return(0,X.jsxs)(G,{description:r?l(`profile.totp.setupModal.requiredDescription`):void 0,icon:P,isOpen:t,onClose:S,preventClose:r||u===`recovery`,size:`sm`,title:k,children:[p&&(0,X.jsx)(`div`,{className:`flex justify-center py-tinyrack-xl`,"data-testid":`setup-totp-loading`,children:(0,X.jsx)(e,{uiSize:`md`})}),u===`error`&&(0,X.jsxs)(`div`,{className:`mt-tinyrack-lg flex flex-col gap-tinyrack-md`,children:[(0,X.jsx)(Q,{variant:`error`,children:l(`profile.totp.setupModal.setupError`)}),(0,X.jsxs)(W,{children:[(0,X.jsx)(s,{appearance:`outline`,intent:`neutral`,onClick:S,type:`button`,uiSize:`sm`,children:l(`profile.totp.setupModal.cancel`)}),(0,X.jsx)(s,{intent:`primary`,onClick:g,type:`button`,uiSize:`sm`,children:l(`profile.totp.setupModal.retry`)})]})]}),d&&u===`qr`&&(0,X.jsx)(`div`,{className:`mt-tinyrack-lg`,children:(0,X.jsx)(T,{additionalActions:(0,X.jsxs)(X.Fragment,{children:[(0,X.jsx)(W,{children:(0,X.jsx)(s,{appearance:`outline`,intent:`neutral`,onClick:S,type:`button`,uiSize:`sm`,children:l(`profile.totp.setupModal.cancel`)})}),o&&c&&(0,X.jsx)(a,{align:`center`,as:`p`,className:`mt-tinyrack-sm`,variant:`caption`,children:(0,X.jsx)(s,{appearance:`ghost`,intent:`primary`,onClick:c,type:`button`,uiSize:`sm`,children:l(`profile.totp.setupModal.switchToPasskey`)})})]}),onNext:v,setupData:d})}),d&&u===`verify`&&(0,X.jsx)(`div`,{className:`mt-tinyrack-lg`,children:(0,X.jsx)(E,{isPending:m,onBack:y,onSubmit:O})}),u===`recovery`&&f.length>0&&(0,X.jsx)(`div`,{className:`mt-tinyrack-lg`,children:(0,X.jsx)(w,{isLoading:h,onConfirm:b,recoveryCodes:f})})]})}var Ue={access_denied:`oauth.error.accessDenied`,temporarily_unavailable:`oauth.error.temporarilyUnavailable`,server_error:`oauth.error.serverError`};function We(){let{t:e}=i(),t=u(),n=l(),r=ie.useSearch().oauth_error,o=r?e(Ue[r]??`oauth.error.failed`):void 0,[c,d]=(0,Y.useState)(null),[f,p]=(0,Y.useState)(null),[h,v]=(0,Y.useState)(null),[y,b]=(0,Y.useState)(null),[x,S]=(0,Y.useState)(null),[C,w]=(0,Y.useState)(!1),{data:T}=_(R),{data:E}=_(re),{data:D}=_(m),O=g({...te,onSuccess:async()=>{n.setQueryData(R.queryKey,{user:null}),await K(),t.navigate({to:`/login`})},onSettled:()=>{n.invalidateQueries({queryKey:R.queryKey})}}),k=g({...oe,onSuccess:()=>{n.invalidateQueries({queryKey:re.queryKey})},onSettled:()=>{d(null)}}),A=async()=>{f&&(d(f.id),await k.mutateAsync(f.id))};if(!T.user)return null;let j=T.user,M=E.available_providers,N=M.some(e=>e.linked),P=j.managed_by===`config`,F=D.auth.password,I=D.auth.passkey,L=F.totp.enabled,ae=I.enabled,V=D.account_deletion.enabled,U=D.account_deletion.retention,W=(()=>{let e=U.match(/^(\d+)([dmy])$/);if(!e)return 30;let t=parseInt(e[1],10);switch(e[2]){case`d`:return t;case`m`:return t*30;case`y`:return t*365;default:return 30}})(),G=!P&&L,le=!P&&ae,ue=M.length>0;return(0,X.jsxs)(Oe,{headerActions:(0,X.jsx)(s,{appearance:`ghost`,"aria-label":e(`profile.logout`),"data-testid":`profile-logout`,disabled:O.isPending,loading:O.isPending,onClick:()=>O.mutate(),type:`button`,uiSize:`sm`,children:O.isPending?void 0:(0,X.jsxs)(X.Fragment,{children:[(0,X.jsx)(ee,{"aria-hidden":!0,className:`size-tinyrack-lg`}),(0,X.jsx)(a,{as:`span`,className:`hidden sm:inline`,variant:`bodySm`,children:e(`profile.logout`)})]})}),children:[(0,X.jsxs)(`div`,{className:`flex items-center gap-tinyrack-lg`,children:[(0,X.jsx)(ce,{email:j.email,size:`lg`}),(0,X.jsxs)(`div`,{className:`flex min-w-0 flex-col gap-tinyrack-3xs`,children:[(0,X.jsx)(se,{title:e(`profile.title`)}),(0,X.jsx)(a,{as:`p`,color:`muted`,"data-testid":`profile-user-email`,truncate:!0,variant:`bodySm`,children:j.email})]})]}),o&&(0,X.jsx)(H,{icon:B,type:`error`,children:o}),j&&(0,X.jsx)(De,{user:j}),(0,X.jsxs)(z.Root,{variant:`outlined`,children:[(0,X.jsxs)(z.Header,{className:`border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md`,children:[(0,X.jsx)(z.Title,{children:e(`profile.security.title`)}),(0,X.jsx)(z.Description,{children:e(`profile.security.description`)})]}),G&&j.totp_recovery_codes_missing&&(0,X.jsx)(`div`,{className:`border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md`,"data-testid":`profile-totp-recovery-warning`,children:(0,X.jsx)(H,{icon:B,type:`warning`,children:e(`profile.totp.recoveryCodesMissing`)})}),(0,X.jsxs)(z.Content,{className:`divide-y divide-tinyrack-border p-0`,children:[(0,X.jsx)(Ce,{hasLinkedOAuth:N,hasPassword:j.has_password,hasSecondFactorOnly:j.has_password&&!N&&(j.totp_registered||j.passkey_count>0),isConfigManaged:P,onOpenModal:v}),G&&(0,X.jsx)(we,{onOpenModal:b,recoveryCodesMissing:j.totp_recovery_codes_missing,totpEnabled:j.totp_registered}),le&&(0,X.jsx)(Se,{onOpenModal:S,passkeyCount:j.passkey_count})]})]}),ue&&(0,X.jsx)(xe,{getAuthorizeUrl:ne,onUnlinkRequest:e=>p({id:e.id,name:e.display_name}),providers:M,unlinkingProvider:c}),(0,X.jsx)(ye,{isConfigManaged:P,isDeletionEnabled:V,onDeleteClick:()=>w(!0)}),(0,X.jsx)(Be,{isOpen:h===`set`,onClose:()=>v(null)}),(0,X.jsx)(Me,{isOpen:h===`change`,onClose:()=>v(null)}),(0,X.jsx)(ze,{isOpen:h===`remove`,onClose:()=>v(null)}),(0,X.jsx)(He,{isOpen:y===`setup`,onClose:()=>b(null)}),(0,X.jsx)(Fe,{isOpen:y===`disable`,onClose:()=>b(null)}),(0,X.jsx)(Re,{isOpen:y===`regenerate`,onClose:()=>b(null)}),(0,X.jsx)(Ve,{isOpen:x===`setup`,onClose:()=>S(null)}),(0,X.jsx)(Ie,{isOpen:x===`manage`,onAddNew:()=>S(`setup`),onClose:()=>S(null)}),(0,X.jsx)(Ee,{isOpen:f!==null,isPending:k.isPending,onClose:()=>p(null),onConfirm:A,providerName:f?.name??``}),(0,X.jsx)(Pe,{isOpen:C,onClose:()=>w(!1),retentionDays:W})]})}export{We as component};
-//# sourceMappingURL=profile-PjXEnzA-.js.map

package/public/assets/profile-PjXEnzA-.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile-PjXEnzA-.js","names":["__iconNode","__iconNode","__iconNode","useMutation","useQueryClient","useSuspenseQuery","useRouter","TRButton","TRCard","TRText","CircleAlertIcon","LogOutIcon","useState","useTranslation","AuthPageHeader","DangerZoneSection","LinkedAccountsSection","PasskeySection","PasswordSection","TotpSection","UnlinkOAuthModal","UserInfoSection","Alert","InitialAvatar","AppLayout","ChangePasswordModal","DeleteAccountModal","DisableTotpModal","ManagePasskeysModal","RegenerateTotpRecoveryCodesModal","RemovePasswordModal","SetPasswordModal","SetupPasskeyModal","SetupTotpModal","tick","appConfigQueryOptions","logoutMutationOptions","getOAuthAuthorizeUrl","oauthAccountsQueryOptions","unlinkOAuthMutationOptions","getSessionQueryOptions","PasswordModalType","TotpModalType","PasskeyModalType","OAUTH_ERROR_I18N_MAP","Record","access_denied","temporarily_unavailable","server_error","Route","Profile","t","router","queryClient","search","useSearch","oauthError","oauth_error","oauthErrorMessage","undefined","unlinkingProvider","setUnlinkingProvider","unlinkModal","setUnlinkModal","id","name","passwordModal","setPasswordModal","totpModal","setTotpModal","passkeyModal","setPasskeyModal","showDeleteModal","setShowDeleteModal","data","session","oauthAccountsData","appConfig","logoutMutation","onSuccess","setQueryData","queryKey","user","navigate","to","onSettled","invalidateQueries","unlinkMutation","handleUnlinkConfirm","mutateAsync","availableProviders","available_providers","hasLinkedOAuth","some","p","linked","isConfigManaged","managed_by","passwordAuthMethod","auth","password","passkeyAuthMethod","passkey","totpEnabled","totp","enabled","passkeyEnabled","accountDeletionEnabled","account_deletion","retentionPeriod","retention","retentionDays","match","value","parseInt","unit","showPasswordSection","showTotpSection","showPasskeySection","showLinkedAccounts","length","hasSecurityOptions","isPending","mutate","email","totp_recovery_codes_missing","has_password","totp_registered","passkey_count","provider","display_name","component"],"sources":["../../../../node_modules/.pnpm/lucide-react@1.25.0_react@19.2.7/node_modules/lucide-react/dist/esm/icons/cloud.mjs","../../../../node_modules/.pnpm/lucide-react@1.25.0_react@19.2.7/node_modules/lucide-react/dist/esm/icons/link-2-off.mjs","../../../../node_modules/.pnpm/lucide-react@1.25.0_react@19.2.7/node_modules/lucide-react/dist/esm/icons/pencil.mjs","../../../../node_modules/.pnpm/lucide-react@1.25.0_react@19.2.7/node_modules/lucide-react/dist/esm/icons/smartphone.mjs","../../../frontend/src/components/profile/danger-zone-section.tsx","../../../frontend/src/components/auth/provider-logos.tsx","../../../frontend/src/components/profile/security-row.tsx","../../../frontend/src/components/profile/linked-accounts-section.tsx","../../../frontend/src/components/profile/passkey-section.tsx","../../../frontend/src/components/profile/password-section.tsx","../../../frontend/src/components/profile/totp-section.tsx","../../../frontend/src/components/ui/alert-banner.tsx","../../../frontend/src/components/profile/unlink-oauth-modal.tsx","../../../frontend/src/components/profile/user-info-section.tsx","../../../frontend/src/features/layout/app-layout.tsx","../../../frontend/src/queries/password.ts","../../../frontend/src/features/profile/change-password-modal.tsx","../../../frontend/src/queries/account.ts","../../../frontend/src/features/profile/delete-account-modal.tsx","../../../frontend/src/features/profile/disable-totp-modal.tsx","../../../frontend/src/features/profile/manage-passkeys-modal.tsx","../../../frontend/src/features/profile/regenerate-totp-recovery-codes-modal.tsx","../../../frontend/src/features/profile/remove-password-modal.tsx","../../../frontend/src/features/profile/set-password-modal.tsx","../../../frontend/src/features/profile/setup-passkey-modal.tsx","../../../frontend/src/features/profile/setup-totp-modal.tsx","../../../frontend/src/routes/profile/index.tsx?tsr-split=component"],"sourcesContent":["/**\n * @license lucide-react v1.25.0 - ISC\n *\n * This source code is licensed under the ISC license.\n * See the LICENSE file in the root directory of this source tree.\n */\n\nimport createLucideIcon from '../createLucideIcon.mjs';\n\nconst __iconNode = [\n  [\"path\", { d: \"M17.5 19H9a7 7 0 1 1 6.71-9h1.79a4.5 4.5 0 1 1 0 9Z\", key: \"p7xjir\" }]\n];\nconst Cloud = createLucideIcon(\"cloud\", __iconNode);\n\nexport { __iconNode, Cloud as default };\n//# sourceMappingURL=cloud.mjs.map\n","/**\n * @license lucide-react v1.25.0 - ISC\n *\n * This source code is licensed under the ISC license.\n * See the LICENSE file in the root directory of this source tree.\n */\n\nimport createLucideIcon from '../createLucideIcon.mjs';\n\nconst __iconNode = [\n  [\"path\", { d: \"M9 17H7A5 5 0 0 1 7 7\", key: \"10o201\" }],\n  [\"path\", { d: \"M15 7h2a5 5 0 0 1 4 8\", key: \"1d3206\" }],\n  [\"line\", { x1: \"8\", x2: \"12\", y1: \"12\", y2: \"12\", key: \"rvw6j4\" }],\n  [\"line\", { x1: \"2\", x2: \"22\", y1: \"2\", y2: \"22\", key: \"a6p6uj\" }]\n];\nconst Link2Off = createLucideIcon(\"link-2-off\", __iconNode);\n\nexport { __iconNode, Link2Off as default };\n//# sourceMappingURL=link-2-off.mjs.map\n","/**\n * @license lucide-react v1.25.0 - ISC\n *\n * This source code is licensed under the ISC license.\n * See the LICENSE file in the root directory of this source tree.\n */\n\nimport createLucideIcon from '../createLucideIcon.mjs';\n\nconst __iconNode = [\n  [\n    \"path\",\n    {\n      d: \"M21.174 6.812a1 1 0 0 0-3.986-3.987L3.842 16.174a2 2 0 0 0-.5.83l-1.321 4.352a.5.5 0 0 0 .623.622l4.353-1.32a2 2 0 0 0 .83-.497z\",\n      key: \"1a8usu\"\n    }\n  ],\n  [\"path\", { d: \"m15 5 4 4\", key: \"1mk7zo\" }]\n];\nconst Pencil = createLucideIcon(\"pencil\", __iconNode);\n\nexport { __iconNode, Pencil as default };\n//# sourceMappingURL=pencil.mjs.map\n","/**\n * @license lucide-react v1.25.0 - ISC\n *\n * This source code is licensed under the ISC license.\n * See the LICENSE file in the root directory of this source tree.\n */\n\nimport createLucideIcon from '../createLucideIcon.mjs';\n\nconst __iconNode = [\n  [\"rect\", { width: \"14\", height: \"20\", x: \"5\", y: \"2\", rx: \"2\", ry: \"2\", key: \"1yt0o3\" }],\n  [\"path\", { d: \"M12 18h.01\", key: \"mhygvu\" }]\n];\nconst Smartphone = createLucideIcon(\"smartphone\", __iconNode);\n\nexport { __iconNode, Smartphone as default };\n//# sourceMappingURL=smartphone.mjs.map\n","import { TRButton } from '@tinyrack/ui/components/button';\nimport { TRCard } from '@tinyrack/ui/components/card';\nimport { TRText } from '@tinyrack/ui/components/text';\nimport { Trash2Icon, TriangleAlertIcon } from 'lucide-react';\nimport { useTranslation } from 'react-i18next';\n\ninterface DangerZoneSectionProps {\n  isConfigManaged: boolean;\n  isDeletionEnabled: boolean;\n  onDeleteClick: () => void;\n}\n\nexport function DangerZoneSection({\n  isConfigManaged,\n  isDeletionEnabled,\n  onDeleteClick,\n}: DangerZoneSectionProps) {\n  const { t } = useTranslation();\n\n  if (!isDeletionEnabled) {\n    return null;\n  }\n\n  return (\n    <TRCard.Root\n      className=\"border-tinyrack-danger-border bg-tinyrack-danger-surface\"\n      variant=\"outlined\"\n    >\n      <TRCard.Header className=\"border-tinyrack-danger-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md\">\n        <div className=\"flex items-center gap-tinyrack-sm\">\n          <TriangleAlertIcon\n            aria-hidden\n            className=\"size-tinyrack-lg text-tinyrack-danger-foreground\"\n          />\n          <TRCard.Title className=\"text-tinyrack-danger-foreground\">\n            {t('profile.dangerZone.title')}\n          </TRCard.Title>\n        </div>\n        <TRCard.Description>\n          {t('profile.dangerZone.description')}\n        </TRCard.Description>\n      </TRCard.Header>\n      <TRCard.Content className=\"px-tinyrack-lg py-tinyrack-md\">\n        <div className=\"flex items-center justify-between gap-tinyrack-lg\">\n          <div className=\"flex min-w-0 flex-1 flex-col gap-tinyrack-3xs\">\n            <TRText as=\"p\" variant=\"bodySm\" weight=\"medium\">\n              {t('profile.deleteAccount.title')}\n            </TRText>\n            <TRText as=\"p\" color=\"muted\" variant=\"caption\">\n              {isConfigManaged\n                ? t('profile.deleteAccount.configManaged')\n                : t('profile.deleteAccount.description')}\n            </TRText>\n          </div>\n          <TRButton\n            appearance=\"outline\"\n            data-testid=\"profile-delete-account\"\n            disabled={isConfigManaged}\n            intent=\"danger\"\n            onClick={onDeleteClick}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            <Trash2Icon aria-hidden className=\"size-tinyrack-lg\" />\n            {t('profile.deleteAccount.button')}\n          </TRButton>\n        </div>\n      </TRCard.Content>\n    </TRCard.Root>\n  );\n}\n","import { TRProviderMark } from '@tinyrack/ui/components/provider-mark';\nimport { LinkIcon } from 'lucide-react';\n\n/**\n * Brand marks for the built-in identity providers.\n *\n * Built-in provider marks come from the design system so their official brand\n * geometry and colors stay encapsulated upstream. Custom deployments can\n * still supply their own provider image.\n *\n * Each renders at the caller's `className` size and is decorative: the\n * accessible name comes from the surrounding button label.\n */\n\ntype ProviderMarkProps = {\n  /** Configured provider id. Built-in providers use their own name. */\n  providerId: string;\n  /** Deployment-supplied icon, used for providers with no built-in mark. */\n  iconUrl?: string;\n  className?: string;\n};\n\n/**\n * The mark for a configured provider, however it is identified.\n *\n * Profile's provider list carries an id and an optional icon URL but no\n * provider type, so this resolves by id first — which is what the built-in\n * providers are named — then the deployment's own icon, then a generic link\n * glyph for an unrecognised custom provider.\n */\nexport function ProviderMark({\n  providerId,\n  iconUrl,\n  className = 'size-tinyrack-xl',\n}: ProviderMarkProps) {\n  if (\n    providerId === 'google' ||\n    providerId === 'github' ||\n    providerId === 'apple'\n  ) {\n    return (\n      <TRProviderMark aria-hidden className={className} provider={providerId} />\n    );\n  }\n  if (iconUrl) {\n    return <img alt=\"\" className={className} src={iconUrl} />;\n  }\n  return <LinkIcon aria-hidden className={className} />;\n}\n","import { TRText } from '@tinyrack/ui/components/text';\nimport type { LucideIcon } from 'lucide-react';\nimport { isValidElement, type ReactNode } from 'react';\n\ntype SecurityRowProps = {\n  /**\n   * A lucide glyph, which gets tinted with the row's state, or a ready-made\n   * node for marks that carry their own colour — a provider's brand logo.\n   */\n  icon: LucideIcon | ReactNode;\n  /** Tints the icon tile. \"Configured\" rather than \"enabled\" — a linked OAuth\n   * account and a set password are both active states. */\n  active: boolean;\n  title: string;\n  status: string;\n  /** Secondary line under the status, e.g. a config-managed caveat. */\n  note?: ReactNode;\n  /** Trailing controls. */\n  actions?: ReactNode;\n};\n\n/**\n * One credential the account has, or does not.\n *\n * Password, TOTP, passkeys, and each linked provider were four copies of the\n * same row — a tinted icon tile, a title, a status line, a trailing action\n * cluster — which is how they drifted into three different paddings.\n */\nexport function SecurityRow({\n  icon,\n  active,\n  title,\n  status,\n  note,\n  actions,\n}: SecurityRowProps) {\n  /*\n    Discriminated by `isValidElement`, not `typeof … === 'function'`: lucide\n    icons are `forwardRef` objects, so a typeof check reads them as data and\n    React then throws on rendering `{$$typeof, render}` as a child. An\n    already-rendered mark is an element; a component is not.\n  */\n  let mark: ReactNode;\n  if (isValidElement(icon)) {\n    mark = icon;\n  } else {\n    const Icon = icon as LucideIcon;\n    mark = (\n      <Icon\n        aria-hidden\n        className={`size-tinyrack-lg ${\n          active\n            ? 'text-tinyrack-success-foreground'\n            : 'text-tinyrack-text-muted'\n        }`}\n      />\n    );\n  }\n\n  return (\n    /* tinyrack-check-ignore-next-line components/no-native-text -- Structural credential row; all visible copy uses TRText. */\n    <div className=\"flex items-center justify-between gap-tinyrack-lg p-tinyrack-lg\">\n      {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural leading-content group. */}\n      <div className=\"flex min-w-0 flex-1 items-center gap-tinyrack-md\">\n        {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural icon host. */}\n        <div\n          className={`flex size-9 shrink-0 items-center justify-center rounded-tinyrack-md ${\n            active ? 'bg-tinyrack-success-surface' : 'bg-tinyrack-surface-muted'\n          }`}\n        >\n          {mark}\n        </div>\n        {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural TRText stack with an optional DS note. */}\n        <div className=\"flex min-w-0 flex-1 flex-col gap-tinyrack-3xs\">\n          <TRText as=\"div\" variant=\"bodySm\" weight=\"medium\">\n            {title}\n          </TRText>\n          <TRText as=\"div\" color=\"muted\" variant=\"caption\">\n            {status}\n          </TRText>\n          {note}\n        </div>\n      </div>\n      {actions && (\n        /* tinyrack-check-ignore-next-line components/no-native-text -- Structural action slot. */\n        <div className=\"flex shrink-0 flex-wrap justify-end gap-tinyrack-xs\">\n          {actions}\n        </div>\n      )}\n    </div>\n  );\n}\n","import { TRButton } from '@tinyrack/ui/components/button';\nimport { TRCard } from '@tinyrack/ui/components/card';\nimport { TRLinkButton } from '@tinyrack/ui/components/link-button';\nimport { useTranslation } from 'react-i18next';\nimport { ProviderMark } from '#frontend/components/auth/provider-logos.tsx';\nimport { SecurityRow } from '#frontend/components/profile/security-row.tsx';\n\ninterface OAuthProvider {\n  id: string;\n  display_name: string;\n  icon_url?: string;\n  linked: boolean;\n}\n\ninterface LinkedAccountsSectionProps {\n  providers: OAuthProvider[];\n  unlinkingProvider: string | null;\n  getAuthorizeUrl: (\n    providerId: string,\n    mode?: 'login' | 'register' | 'link',\n    returnUrl?: string,\n  ) => string;\n  onUnlinkRequest: (provider: OAuthProvider) => void;\n}\n\nexport function LinkedAccountsSection({\n  providers,\n  unlinkingProvider,\n  getAuthorizeUrl,\n  onUnlinkRequest,\n}: LinkedAccountsSectionProps) {\n  const { t } = useTranslation();\n\n  if (providers.length === 0) {\n    return null;\n  }\n\n  return (\n    <TRCard.Root variant=\"outlined\">\n      <TRCard.Header className=\"border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md\">\n        <TRCard.Title>{t('profile.linkedAccounts.title')}</TRCard.Title>\n        <TRCard.Description>\n          {t('profile.linkedAccounts.description')}\n        </TRCard.Description>\n      </TRCard.Header>\n      <TRCard.Content className=\"divide-y divide-tinyrack-border p-0\">\n        {providers.map((provider) => (\n          <SecurityRow\n            actions={\n              provider.linked ? (\n                <TRButton\n                  appearance=\"ghost\"\n                  intent=\"danger\"\n                  loading={unlinkingProvider === provider.id}\n                  loadingLabel={t('profile.linkedAccounts.unlinking')}\n                  onClick={() => onUnlinkRequest(provider)}\n                  type=\"button\"\n                  uiSize=\"sm\"\n                >\n                  {unlinkingProvider !== provider.id\n                    ? t('profile.linkedAccounts.unlink')\n                    : undefined}\n                </TRButton>\n              ) : (\n                <TRLinkButton\n                  appearance=\"outline\"\n                  intent=\"neutral\"\n                  render={\n                    <a\n                      href={getAuthorizeUrl(provider.id, 'link', '/profile')}\n                    />\n                  }\n                  uiSize=\"sm\"\n                >\n                  {t('profile.linkedAccounts.link')}\n                </TRLinkButton>\n              )\n            }\n            active={provider.linked}\n            /*\n              The real brand mark, not a generic link glyph. The sign-in screen\n              shows the Google logo; showing a chain link for the same provider\n              on a screen the user reaches minutes later reads as a different\n              product.\n            */\n            icon={\n              <ProviderMark\n                className=\"size-tinyrack-lg\"\n                iconUrl={provider.icon_url}\n                providerId={provider.id}\n              />\n            }\n            key={provider.id}\n            status={\n              provider.linked\n                ? t('profile.linkedAccounts.connected')\n                : t('profile.linkedAccounts.notConnected')\n            }\n            title={provider.display_name}\n          />\n        ))}\n      </TRCard.Content>\n    </TRCard.Root>\n  );\n}\n","import { TRButton } from '@tinyrack/ui/components/button';\nimport { FingerprintIcon } from 'lucide-react';\nimport { useTranslation } from 'react-i18next';\nimport { SecurityRow } from '#frontend/components/profile/security-row.tsx';\n\ntype PasskeyModalType = 'setup' | 'manage' | null;\n\ninterface PasskeySectionProps {\n  passkeyCount: number;\n  onOpenModal: (type: PasskeyModalType) => void;\n}\n\nexport function PasskeySection({\n  passkeyCount,\n  onOpenModal,\n}: PasskeySectionProps) {\n  const { t } = useTranslation();\n  const hasPasskeys = passkeyCount > 0;\n\n  return (\n    <SecurityRow\n      actions={\n        <TRButton\n          appearance=\"ghost\"\n          intent=\"primary\"\n          onClick={() => onOpenModal(hasPasskeys ? 'manage' : 'setup')}\n          type=\"button\"\n          uiSize=\"sm\"\n        >\n          {hasPasskeys ? t('profile.passkey.manage') : t('profile.passkey.add')}\n        </TRButton>\n      }\n      active={hasPasskeys}\n      icon={FingerprintIcon}\n      status={\n        hasPasskeys\n          ? t('profile.passkey.status.enabled', { count: passkeyCount })\n          : t('profile.passkey.status.disabled')\n      }\n      title={t('profile.passkey.title')}\n    />\n  );\n}\n","import { TRButton } from '@tinyrack/ui/components/button';\nimport { TRText } from '@tinyrack/ui/components/text';\nimport { TRTooltip } from '@tinyrack/ui/components/tooltip';\nimport { InfoIcon, KeyRoundIcon, SettingsIcon } from 'lucide-react';\nimport { useTranslation } from 'react-i18next';\nimport { SecurityRow } from '#frontend/components/profile/security-row.tsx';\n\ntype PasswordModalType = 'set' | 'change' | 'remove' | null;\n\ninterface PasswordSectionProps {\n  hasPassword: boolean;\n  hasLinkedOAuth: boolean;\n  isConfigManaged: boolean;\n  hasSecondFactorOnly: boolean;\n  onOpenModal: (type: PasswordModalType) => void;\n}\n\nexport function PasswordSection({\n  hasPassword,\n  hasLinkedOAuth,\n  isConfigManaged,\n  hasSecondFactorOnly,\n  onOpenModal,\n}: PasswordSectionProps) {\n  const { t } = useTranslation();\n\n  return (\n    <SecurityRow\n      actions={\n        isConfigManaged ? undefined : hasPassword ? (\n          <>\n            <TRButton\n              appearance=\"ghost\"\n              data-testid=\"profile-password-change\"\n              intent=\"primary\"\n              onClick={() => onOpenModal('change')}\n              type=\"button\"\n              uiSize=\"sm\"\n            >\n              {t('profile.password.change')}\n            </TRButton>\n            {hasLinkedOAuth ? (\n              <TRButton\n                appearance=\"ghost\"\n                data-testid=\"profile-password-remove\"\n                intent=\"danger\"\n                onClick={() => onOpenModal('remove')}\n                type=\"button\"\n                uiSize=\"sm\"\n              >\n                {t('profile.password.remove')}\n              </TRButton>\n            ) : null}\n            {!hasLinkedOAuth && hasSecondFactorOnly && (\n              <TRTooltip.Root>\n                <TRTooltip.Trigger\n                  render={\n                    <TRButton\n                      appearance=\"ghost\"\n                      disabled\n                      type=\"button\"\n                      uiSize=\"sm\"\n                    >\n                      {t('profile.password.remove')}\n                    </TRButton>\n                  }\n                />\n                <TRTooltip.Portal>\n                  <TRTooltip.Positioner>\n                    <TRTooltip.Popup className=\"max-w-tinyrack-measure-lg rounded-tinyrack-md border border-tinyrack-border bg-tinyrack-surface p-tinyrack-md text-tinyrack-text text-tinyrack-xs shadow-tinyrack-overlay\">\n                      <div className=\"flex items-start gap-tinyrack-sm\">\n                        <InfoIcon\n                          aria-hidden\n                          className=\"size-tinyrack-lg shrink-0 text-tinyrack-warning-foreground\"\n                        />\n                        <TRText as=\"div\" variant=\"caption\">\n                          {t('profile.password.removeDisabledReason')}\n                        </TRText>\n                      </div>\n                    </TRTooltip.Popup>\n                  </TRTooltip.Positioner>\n                </TRTooltip.Portal>\n              </TRTooltip.Root>\n            )}\n          </>\n        ) : (\n          <TRButton\n            appearance=\"ghost\"\n            data-testid=\"profile-password-set\"\n            intent=\"primary\"\n            onClick={() => onOpenModal('set')}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.password.set')}\n          </TRButton>\n        )\n      }\n      active={hasPassword}\n      icon={KeyRoundIcon}\n      note={\n        isConfigManaged ? (\n          <TRText\n            as=\"div\"\n            className=\"flex items-center gap-tinyrack-xs\"\n            color=\"muted\"\n            variant=\"caption\"\n          >\n            <SettingsIcon aria-hidden className=\"size-tinyrack-md shrink-0\" />\n            <TRText as=\"span\" color=\"muted\" variant=\"caption\">\n              {t('profile.password.configManaged')}\n            </TRText>\n          </TRText>\n        ) : undefined\n      }\n      status={\n        hasPassword\n          ? t('profile.password.status.set')\n          : t('profile.password.status.notSet')\n      }\n      title={t('profile.password.title')}\n    />\n  );\n}\n","import { TRButton } from '@tinyrack/ui/components/button';\nimport { ShieldCheckIcon } from 'lucide-react';\nimport { useTranslation } from 'react-i18next';\nimport { SecurityRow } from '#frontend/components/profile/security-row.tsx';\n\ntype TotpModalType = 'setup' | 'disable' | 'regenerate' | null;\n\ninterface TotpSectionProps {\n  totpEnabled: boolean;\n  recoveryCodesMissing: boolean;\n  onOpenModal: (type: TotpModalType) => void;\n}\n\nexport function TotpSection({\n  totpEnabled,\n  recoveryCodesMissing,\n  onOpenModal,\n}: TotpSectionProps) {\n  const { t } = useTranslation();\n\n  return (\n    <SecurityRow\n      actions={\n        totpEnabled ? (\n          <>\n            <TRButton\n              appearance=\"ghost\"\n              data-testid=\"profile-totp-regenerate\"\n              intent=\"primary\"\n              onClick={() => onOpenModal('regenerate')}\n              type=\"button\"\n              uiSize=\"sm\"\n            >\n              {t('profile.totp.regenerate')}\n            </TRButton>\n            <TRButton\n              appearance=\"ghost\"\n              data-testid=\"profile-totp-disable\"\n              intent=\"danger\"\n              onClick={() => onOpenModal('disable')}\n              type=\"button\"\n              uiSize=\"sm\"\n            >\n              {t('profile.totp.disable')}\n            </TRButton>\n          </>\n        ) : (\n          <TRButton\n            appearance=\"ghost\"\n            data-testid=\"profile-totp-enable\"\n            intent=\"primary\"\n            onClick={() => onOpenModal('setup')}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.totp.enable')}\n          </TRButton>\n        )\n      }\n      active={totpEnabled}\n      icon={ShieldCheckIcon}\n      status={\n        totpEnabled\n          ? recoveryCodesMissing\n            ? t('profile.totp.status.recoveryCodesMissing')\n            : t('profile.totp.status.enabled')\n          : t('profile.totp.status.disabled')\n      }\n      title={t('profile.totp.title')}\n    />\n  );\n}\n","import { CircleAlertIcon, InfoIcon, TriangleAlertIcon } from 'lucide-react';\nimport type { ReactNode } from 'react';\nimport { Alert } from '#frontend/components/ui/alert.tsx';\n\ntype AlertBannerVariant = 'error' | 'warning' | 'info';\n\ninterface AlertBannerProps {\n  variant: AlertBannerVariant;\n  children: ReactNode;\n}\n\nconst variantIcons: Record<AlertBannerVariant, typeof TriangleAlertIcon> = {\n  error: CircleAlertIcon,\n  warning: TriangleAlertIcon,\n  info: InfoIcon,\n};\n\n/**\n * Status banner built on the design system's {@link Alert} (which wraps\n * `TRAlert`). Kept as a thin alias so existing call sites and the\n * `alert-banner-*` test ids stay stable while the visuals come from\n * `@tinyrack/ui`.\n */\nexport function AlertBanner({ variant, children }: AlertBannerProps) {\n  return (\n    <Alert\n      data-testid={`alert-banner-${variant}`}\n      icon={variantIcons[variant]}\n      type={variant}\n    >\n      {children}\n    </Alert>\n  );\n}\n","import { TRButton } from '@tinyrack/ui/components/button';\nimport { Link2OffIcon } from 'lucide-react';\nimport { useState } from 'react';\nimport { useTranslation } from 'react-i18next';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal, ModalActions } from '#frontend/components/ui/modal.tsx';\n\ninterface UnlinkOAuthModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n  providerName: string;\n  isPending: boolean;\n  onConfirm: () => Promise<void>;\n}\n\nexport function UnlinkOAuthModal({\n  isOpen,\n  onClose,\n  providerName,\n  isPending,\n  onConfirm,\n}: UnlinkOAuthModalProps) {\n  const { t } = useTranslation();\n  const [error, setError] = useState<string | null>(null);\n\n  const handleClose = () => {\n    if (isPending) return;\n    setError(null);\n    onClose();\n  };\n\n  const handleConfirm = async () => {\n    setError(null);\n    try {\n      await onConfirm();\n      handleClose();\n    } catch {\n      setError(t('profile.linkedAccounts.unlinkError'));\n    }\n  };\n\n  return (\n    <Modal\n      description={t('profile.linkedAccounts.unlinkModal.description', {\n        provider: providerName,\n      })}\n      icon={Link2OffIcon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      preventClose={isPending}\n      title={t('profile.linkedAccounts.unlinkModal.title')}\n      variant=\"destructive\"\n    >\n      {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural modal stack containing DS alerts and actions. */}\n      <div className=\"mt-tinyrack-lg flex flex-col gap-tinyrack-md\">\n        <AlertBanner variant=\"warning\">\n          {t('profile.linkedAccounts.unlinkModal.warning', {\n            provider: providerName,\n          })}\n        </AlertBanner>\n\n        {error && <AlertBanner variant=\"error\">{error}</AlertBanner>}\n\n        <ModalActions>\n          <TRButton\n            appearance=\"outline\"\n            data-testid=\"unlink-oauth-cancel\"\n            disabled={isPending}\n            intent=\"neutral\"\n            onClick={handleClose}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.linkedAccounts.unlinkModal.cancel')}\n          </TRButton>\n          <TRButton\n            data-testid=\"unlink-oauth-unlink\"\n            disabled={isPending}\n            intent=\"danger\"\n            loading={isPending}\n            loadingLabel={t('profile.linkedAccounts.unlinking')}\n            onClick={handleConfirm}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.linkedAccounts.unlink')}\n          </TRButton>\n        </ModalActions>\n      </div>\n    </Modal>\n  );\n}\n","import { TRCard } from '@tinyrack/ui/components/card';\nimport { TRText } from '@tinyrack/ui/components/text';\nimport { useTranslation } from 'react-i18next';\n\nfunction InfoRow({ label, value }: { label: string; value: string }) {\n  return (\n    <div className=\"flex items-center justify-between gap-tinyrack-lg px-tinyrack-lg py-tinyrack-md\">\n      <TRText className=\"shrink-0\" color=\"muted\" variant=\"caption\">\n        {label}\n      </TRText>\n      <TRText truncate variant=\"bodySm\" weight=\"medium\">\n        {value}\n      </TRText>\n    </div>\n  );\n}\n\ninterface UserInfoSectionProps {\n  user: {\n    sub: string;\n    email: string;\n  };\n}\n\nexport function UserInfoSection({ user }: UserInfoSectionProps) {\n  const { t } = useTranslation();\n\n  return (\n    <TRCard.Root variant=\"outlined\">\n      <TRCard.Header className=\"border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md\">\n        <TRCard.Title>{t('profile.account.title')}</TRCard.Title>\n        <TRCard.Description>\n          {t('profile.account.description')}\n        </TRCard.Description>\n      </TRCard.Header>\n      <TRCard.Content className=\"divide-y divide-tinyrack-border p-0\">\n        <InfoRow label={t('profile.id.label')} value={user.sub} />\n        <InfoRow label={t('profile.email.label')} value={user.email} />\n      </TRCard.Content>\n    </TRCard.Root>\n  );\n}\n","import { Toaster } from '#frontend/components/ui/toaster.tsx';\nimport { ShellFooter } from '#frontend/features/layout/shell-footer.tsx';\nimport { ShellHeaderBar } from '#frontend/features/layout/shell-header-bar.tsx';\n\ntype AppLayoutProps = {\n  children: React.ReactNode;\n  /** Trailing header action — the profile's sign-out. */\n  headerActions?: React.ReactNode;\n};\n\n/**\n * The shell for signed-in screens that are not the admin console.\n *\n * Shares the auth surface's vocabulary — the canvas, the header bar, the\n * entrance, the token-owned rhythm — but drops the brand panel and runs full\n * width. A settings page is a list of cards to work through, not a single task\n * to focus on, so surrendering the leading columns to a permanent brand column\n * would be paying prime space for decoration.\n *\n * Deliberately not extracted into a wrapper shared with `AuthLayout`: that one\n * is a twelve-column grid because it has a panel to place, and its content\n * stack carries a mobile-only card that would be a box inside a box here.\n * The genuinely shared piece is `ShellHeaderBar`.\n */\nexport function AppLayout({ children, headerActions }: AppLayoutProps) {\n  return (\n    // tinyrack-check-ignore-next-line components/no-native-text -- Structural application shell; page content owns descendant typography.\n    <div className=\"flex min-h-dvh flex-col bg-tinyrack-surface\">\n      {/*\n        Profile hosts the TOTP recovery-codes step, which confirms a copy with\n        a toast. Without a viewport here that confirmation would go nowhere on\n        the one screen where losing the codes is unrecoverable.\n      */}\n      <Toaster />\n      <ShellHeaderBar actions={headerActions} brand />\n      <main className=\"flex flex-1 justify-center px-tinyrack-lg py-tinyrack-xl\">\n        {/*\n          The stack owns vertical rhythm so screens compose as a flat list of\n          blocks instead of each one hand-rolling margins that drift apart.\n        */}\n        {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural content stack; page content owns descendant typography. */}\n        <div className=\"auth-enter flex w-full max-w-tinyrack-overlay-width-md flex-col gap-tinyrack-xl\">\n          {children}\n        </div>\n      </main>\n      <ShellFooter />\n    </div>\n  );\n}\n","import { mutationOptions } from '@tanstack/react-query';\nimport type { InferRequestType } from 'hono/client';\nimport { client, jsonOk } from '#frontend/libs/api.ts';\n\n/**\n * Set password for OAuth-only users\n */\nexport type SetPasswordParams = InferRequestType<\n  (typeof client.api.user.password)['$post']\n>['json'];\n\nexport const setPasswordMutationOptions = mutationOptions({\n  mutationFn: async (values: SetPasswordParams) => {\n    const res = await client.api.user.password.$post({\n      json: values,\n    });\n    return jsonOk(res);\n  },\n});\n\n/**\n * Change password for users who already have a password\n */\nexport type ChangePasswordParams = InferRequestType<\n  (typeof client.api.user.password)['$put']\n>['json'];\n\nexport const changePasswordMutationOptions = mutationOptions({\n  mutationFn: async (values: ChangePasswordParams) => {\n    const res = await client.api.user.password.$put({\n      json: values,\n    });\n    return jsonOk(res);\n  },\n});\n\n/**\n * Remove password (only if user has at least one\n * OAuth account linked)\n */\nexport type RemovePasswordParams = InferRequestType<\n  (typeof client.api.user.password)['$delete']\n>['json'];\n\nexport const removePasswordMutationOptions = mutationOptions({\n  mutationFn: async (values: RemovePasswordParams) => {\n    const res = await client.api.user.password.$delete({\n      json: values,\n    });\n    return jsonOk(res);\n  },\n});\n","import { standardSchemaResolver } from '@hookform/resolvers/standard-schema';\nimport {\n  useMutation,\n  useQueryClient,\n  useSuspenseQuery,\n} from '@tanstack/react-query';\nimport { TRButton } from '@tinyrack/ui/components/button';\nimport { TRForm } from '@tinyrack/ui/components/form';\nimport { KeyRoundIcon } from 'lucide-react';\nimport { useMemo } from 'react';\nimport { useForm } from 'react-hook-form';\nimport { useTranslation } from 'react-i18next';\nimport z from 'zod';\nimport { AuthField } from '#frontend/components/auth/auth-field.tsx';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal, ModalActions } from '#frontend/components/ui/modal.tsx';\nimport { IssuaryError } from '#frontend/libs/error.ts';\nimport { appConfigQueryOptions } from '#frontend/queries/config.ts';\nimport { changePasswordMutationOptions } from '#frontend/queries/password.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\n\ninterface ChangePasswordModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n}\n\nexport function ChangePasswordModal({\n  isOpen,\n  onClose,\n}: ChangePasswordModalProps) {\n  const { t } = useTranslation();\n  const queryClient = useQueryClient();\n  const { data: configData } = useSuspenseQuery(appConfigQueryOptions);\n  const passwordPolicy = configData.auth.password.policy;\n\n  const schema = useMemo(\n    () =>\n      z\n        .object({\n          currentPassword: z.string().min(1, t('validation.password.required')),\n          newPassword: z\n            .string()\n            .min(\n              passwordPolicy.min_length,\n              t('validation.password.min', {\n                count: passwordPolicy.min_length,\n              }),\n            )\n            .max(\n              passwordPolicy.max_length,\n              t('validation.password.max', {\n                count: passwordPolicy.max_length,\n              }),\n            ),\n          confirmPassword: z.string(),\n        })\n        .refine((data) => data.newPassword === data.confirmPassword, {\n          message: t('validation.confirmPassword.mismatch'),\n          path: ['confirmPassword'],\n        }),\n    [passwordPolicy.max_length, passwordPolicy.min_length, t],\n  );\n\n  const form = useForm({\n    resolver: standardSchemaResolver(schema),\n    defaultValues: {\n      currentPassword: '',\n      newPassword: '',\n      confirmPassword: '',\n    },\n  });\n\n  const mutation = useMutation({\n    ...changePasswordMutationOptions,\n    onSuccess: () => {\n      queryClient.invalidateQueries({\n        queryKey: getSessionQueryOptions.queryKey,\n      });\n      handleClose();\n    },\n  });\n\n  const handleClose = () => {\n    form.reset();\n    onClose();\n  };\n\n  const handleSubmit = form.handleSubmit(async (data) => {\n    try {\n      await mutation.mutateAsync({\n        current_password: data.currentPassword,\n        new_password: data.newPassword,\n      });\n    } catch (err) {\n      if (\n        err instanceof IssuaryError &&\n        err.code === 'INVALID_CURRENT_PASSWORD'\n      ) {\n        form.setError('currentPassword', {\n          message: t('profile.password.changeModal.invalidCurrent'),\n        });\n      } else {\n        form.setError('root', {\n          message: t('profile.password.changeModal.error'),\n        });\n      }\n    }\n  });\n\n  return (\n    <Modal\n      description={t('profile.password.changeModal.description')}\n      icon={KeyRoundIcon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      title={t('profile.password.changeModal.title')}\n    >\n      <TRForm\n        className=\"mt-tinyrack-lg flex flex-col gap-tinyrack-md\"\n        onSubmit={handleSubmit}\n      >\n        <AuthField\n          error={form.formState.errors.currentPassword}\n          errorTestId=\"change-password-error-currentPassword\"\n          id=\"current-password\"\n          label={t('profile.password.changeModal.currentPassword')}\n          placeholder={t(\n            'profile.password.changeModal.currentPasswordPlaceholder',\n          )}\n          {...form.register('currentPassword')}\n          type=\"password\"\n        />\n        <AuthField\n          error={form.formState.errors.newPassword}\n          errorTestId=\"change-password-error-newPassword\"\n          id=\"new-password-change\"\n          label={t('profile.password.changeModal.newPassword')}\n          placeholder={t('profile.password.changeModal.newPasswordPlaceholder')}\n          {...form.register('newPassword')}\n          type=\"password\"\n        />\n        <AuthField\n          error={form.formState.errors.confirmPassword}\n          errorTestId=\"change-password-error-confirmPassword\"\n          id=\"confirm-password-change\"\n          label={t('profile.password.changeModal.confirmPassword')}\n          placeholder={t(\n            'profile.password.changeModal.confirmPasswordPlaceholder',\n          )}\n          {...form.register('confirmPassword')}\n          type=\"password\"\n        />\n        {form.formState.errors.root && (\n          <AlertBanner variant=\"error\">\n            {form.formState.errors.root.message}\n          </AlertBanner>\n        )}\n        <ModalActions>\n          <TRButton\n            appearance=\"outline\"\n            data-testid=\"change-password-cancel\"\n            disabled={mutation.isPending}\n            intent=\"neutral\"\n            onClick={handleClose}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.password.changeModal.cancel')}\n          </TRButton>\n          <TRButton\n            data-testid=\"change-password-submit\"\n            disabled={mutation.isPending}\n            intent=\"primary\"\n            loading={mutation.isPending}\n            loadingLabel={t('profile.password.changeModal.submitting')}\n            type=\"submit\"\n            uiSize=\"sm\"\n          >\n            {mutation.isPending\n              ? undefined\n              : t('profile.password.changeModal.submit')}\n          </TRButton>\n        </ModalActions>\n      </TRForm>\n    </Modal>\n  );\n}\n","import { mutationOptions } from '@tanstack/react-query';\nimport type { InferResponseType } from 'hono/client';\nimport { client, jsonOk } from '#frontend/libs/api.ts';\n\nexport type AccountDeletionResponse = InferResponseType<\n  (typeof client.api.user)['$delete'],\n  200\n>;\n\nexport const deleteAccountMutationOptions = mutationOptions({\n  mutationFn: async () => {\n    const res = await client.api.user.$delete();\n    return jsonOk(res);\n  },\n});\n","import { standardSchemaResolver } from '@hookform/resolvers/standard-schema';\nimport { useMutation, useQueryClient } from '@tanstack/react-query';\nimport { useRouter } from '@tanstack/react-router';\nimport { TRButton } from '@tinyrack/ui/components/button';\nimport { TRForm } from '@tinyrack/ui/components/form';\nimport { TRText } from '@tinyrack/ui/components/text';\nimport { Trash2Icon } from 'lucide-react';\nimport { useMemo } from 'react';\nimport { useForm } from 'react-hook-form';\nimport { useTranslation } from 'react-i18next';\nimport z from 'zod';\nimport { AuthField } from '#frontend/components/auth/auth-field.tsx';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal, ModalActions } from '#frontend/components/ui/modal.tsx';\nimport { tick } from '#frontend/libs/promise.ts';\nimport { deleteAccountMutationOptions } from '#frontend/queries/account.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\n\ninterface DeleteAccountModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n  retentionDays: number;\n}\n\nexport function DeleteAccountModal({\n  isOpen,\n  onClose,\n  retentionDays,\n}: DeleteAccountModalProps) {\n  const { t } = useTranslation();\n  const router = useRouter();\n  const queryClient = useQueryClient();\n\n  const schema = useMemo(\n    () =>\n      z.object({\n        confirmation: z\n          .string()\n          .refine(\n            (val) =>\n              val.toLowerCase() ===\n              t('profile.deleteAccount.modal.confirmPlaceholder').toLowerCase(),\n            { message: t('validation.confirmText.mismatch') },\n          ),\n      }),\n    [t],\n  );\n\n  const form = useForm({\n    resolver: standardSchemaResolver(schema),\n    defaultValues: { confirmation: '' },\n  });\n\n  const mutation = useMutation({\n    ...deleteAccountMutationOptions,\n    onSuccess: async () => {\n      queryClient.setQueryData(getSessionQueryOptions.queryKey, {\n        user: null,\n      });\n      await tick();\n      router.navigate({ to: '/login' });\n    },\n  });\n\n  const handleClose = () => {\n    if (mutation.isPending) return;\n    form.reset();\n    onClose();\n  };\n\n  const handleSubmit = form.handleSubmit(async () => {\n    try {\n      await mutation.mutateAsync();\n    } catch {\n      form.setError('root', {\n        message: t('profile.deleteAccount.error'),\n      });\n    }\n  });\n\n  return (\n    <Modal\n      icon={Trash2Icon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      preventClose={mutation.isPending}\n      title={t('profile.deleteAccount.modal.title')}\n      variant=\"destructive\"\n    >\n      <TRForm\n        className=\"mt-tinyrack-lg flex flex-col gap-tinyrack-md\"\n        onSubmit={handleSubmit}\n      >\n        <AlertBanner variant=\"error\">\n          <TRText as=\"span\" variant=\"bodySm\">\n            {t('profile.deleteAccount.modal.description', {\n              days: retentionDays,\n            })}\n          </TRText>\n          <br />\n          <TRText\n            as=\"span\"\n            className=\"opacity-tinyrack-hover\"\n            variant=\"caption\"\n          >\n            {t('profile.deleteAccount.modal.warning')}\n          </TRText>\n        </AlertBanner>\n\n        <AuthField\n          autoComplete=\"off\"\n          error={form.formState.errors.confirmation}\n          errorTestId=\"delete-account-error\"\n          id=\"delete-confirmation\"\n          label={t('profile.deleteAccount.modal.confirmLabel')}\n          placeholder={t('profile.deleteAccount.modal.confirmPlaceholder')}\n          {...form.register('confirmation')}\n          type=\"text\"\n        />\n\n        {form.formState.errors.root && (\n          <AlertBanner variant=\"error\">\n            {form.formState.errors.root.message}\n          </AlertBanner>\n        )}\n\n        <ModalActions>\n          <TRButton\n            appearance=\"outline\"\n            data-testid=\"delete-account-cancel\"\n            disabled={mutation.isPending}\n            intent=\"neutral\"\n            onClick={handleClose}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.deleteAccount.modal.cancel')}\n          </TRButton>\n          <TRButton\n            data-testid=\"delete-account-submit\"\n            disabled={mutation.isPending}\n            intent=\"danger\"\n            loading={mutation.isPending}\n            loadingLabel={t('profile.deleteAccount.modal.confirming')}\n            type=\"submit\"\n            uiSize=\"sm\"\n          >\n            {mutation.isPending\n              ? undefined\n              : t('profile.deleteAccount.modal.confirm')}\n          </TRButton>\n        </ModalActions>\n      </TRForm>\n    </Modal>\n  );\n}\n","import { standardSchemaResolver } from '@hookform/resolvers/standard-schema';\nimport { useMutation, useQueryClient } from '@tanstack/react-query';\nimport { TRButton } from '@tinyrack/ui/components/button';\nimport { TRForm } from '@tinyrack/ui/components/form';\nimport { ShieldCheckIcon } from 'lucide-react';\nimport { useMemo } from 'react';\nimport { useForm } from 'react-hook-form';\nimport { useTranslation } from 'react-i18next';\nimport z from 'zod';\nimport { AuthField } from '#frontend/components/auth/auth-field.tsx';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal, ModalActions } from '#frontend/components/ui/modal.tsx';\nimport { IssuaryError } from '#frontend/libs/error.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\nimport { disableTotpMutationOptions } from '#frontend/queries/totp.ts';\n\ninterface DisableTotpModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n}\n\nexport function DisableTotpModal({ isOpen, onClose }: DisableTotpModalProps) {\n  const { t } = useTranslation();\n  const queryClient = useQueryClient();\n\n  const schema = useMemo(\n    () =>\n      z.object({\n        code: z\n          .string()\n          .length(6, t('validation.totp.length'))\n          .regex(/^\\d{6}$/, t('validation.totp.digits')),\n      }),\n    [t],\n  );\n\n  const form = useForm({\n    resolver: standardSchemaResolver(schema),\n    defaultValues: { code: '' },\n  });\n\n  const mutation = useMutation({\n    ...disableTotpMutationOptions,\n    onSuccess: () => {\n      queryClient.invalidateQueries({\n        queryKey: getSessionQueryOptions.queryKey,\n      });\n      handleClose();\n    },\n  });\n\n  const handleClose = () => {\n    form.reset();\n    onClose();\n  };\n\n  const handleSubmit = form.handleSubmit(async (data) => {\n    try {\n      await mutation.mutateAsync({ code: data.code });\n    } catch (error) {\n      if (error instanceof IssuaryError) {\n        if (error.code === 'CANNOT_REMOVE_LAST_SECOND_FACTOR') {\n          form.setError('code', {\n            message: t(\n              'profile.totp.disableModal.cannotRemoveLastSecondFactor',\n            ),\n          });\n          return;\n        }\n      }\n      form.setError('code', {\n        message: t('profile.totp.disableModal.error'),\n      });\n    }\n  });\n\n  return (\n    <Modal\n      description={t('profile.totp.disableModal.description')}\n      icon={ShieldCheckIcon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      title={t('profile.totp.disableModal.title')}\n      variant=\"destructive\"\n    >\n      <TRForm\n        className=\"mt-tinyrack-lg flex flex-col gap-tinyrack-md\"\n        onSubmit={handleSubmit}\n      >\n        <AlertBanner variant=\"warning\">\n          {t('profile.totp.disableModal.warning')}\n        </AlertBanner>\n\n        <AuthField\n          autoComplete=\"one-time-code\"\n          error={form.formState.errors.code}\n          errorTestId=\"disable-totp-error\"\n          id=\"disable-totp-code\"\n          inputMode=\"numeric\"\n          label={t('profile.totp.disableModal.codeLabel')}\n          maxLength={6}\n          pattern=\"[0-9]*\"\n          placeholder=\"000000\"\n          {...form.register('code')}\n          type=\"text\"\n        />\n\n        <ModalActions>\n          <TRButton\n            appearance=\"outline\"\n            data-testid=\"disable-totp-cancel\"\n            disabled={mutation.isPending}\n            intent=\"neutral\"\n            onClick={handleClose}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.totp.disableModal.cancel')}\n          </TRButton>\n          <TRButton\n            data-testid=\"disable-totp-submit\"\n            disabled={mutation.isPending}\n            intent=\"danger\"\n            loading={mutation.isPending}\n            loadingLabel={t('profile.totp.disableModal.disabling')}\n            type=\"submit\"\n            uiSize=\"sm\"\n          >\n            {mutation.isPending\n              ? undefined\n              : t('profile.totp.disableModal.disable')}\n          </TRButton>\n        </ModalActions>\n      </TRForm>\n    </Modal>\n  );\n}\n","import { standardSchemaResolver } from '@hookform/resolvers/standard-schema';\nimport { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';\nimport { TRBadge } from '@tinyrack/ui/components/badge';\nimport { TRButton } from '@tinyrack/ui/components/button';\nimport { TRForm } from '@tinyrack/ui/components/form';\nimport { TRSpinner } from '@tinyrack/ui/components/spinner';\nimport { TRText } from '@tinyrack/ui/components/text';\nimport {\n  CloudIcon,\n  FingerprintIcon,\n  PencilIcon,\n  SmartphoneIcon,\n  Trash2Icon,\n} from 'lucide-react';\nimport { useCallback, useMemo, useState } from 'react';\nimport { useForm } from 'react-hook-form';\nimport { useTranslation } from 'react-i18next';\nimport z from 'zod';\nimport { AuthField } from '#frontend/components/auth/auth-field.tsx';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal, ModalActions } from '#frontend/components/ui/modal.tsx';\nimport { IssuaryError } from '#frontend/libs/error.ts';\nimport { queryKeys } from '#frontend/queries/keys.ts';\nimport {\n  deletePasskeyMutationOptions,\n  getPasskeysQueryOptions,\n  type PasskeyInfo,\n  renamePasskeyMutationOptions,\n} from '#frontend/queries/passkey.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\n\ninterface ManagePasskeysModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n  onAddNew: () => void;\n}\n\nexport function ManagePasskeysModal({\n  isOpen,\n  onClose,\n  onAddNew,\n}: ManagePasskeysModalProps) {\n  const { t } = useTranslation();\n  const queryClient = useQueryClient();\n  const [editingPasskey, setEditingPasskey] = useState<PasskeyInfo | null>(\n    null,\n  );\n  const [deletingId, setDeletingId] = useState<string | null>(null);\n  const [confirmingDeleteId, setConfirmingDeleteId] = useState<string | null>(\n    null,\n  );\n  const [deleteError, setDeleteError] = useState<string | null>(null);\n\n  const { data: passkeysData, isLoading } = useQuery({\n    ...getPasskeysQueryOptions,\n    enabled: isOpen,\n  });\n\n  const deleteMutation = useMutation({\n    ...deletePasskeyMutationOptions,\n    onSuccess: () => {\n      queryClient.invalidateQueries({ queryKey: queryKeys.passkeys() });\n      queryClient.invalidateQueries({\n        queryKey: getSessionQueryOptions.queryKey,\n      });\n    },\n    onSettled: () => {\n      setDeletingId(null);\n    },\n  });\n\n  const handleClose = useCallback(() => {\n    setEditingPasskey(null);\n    setDeletingId(null);\n    setConfirmingDeleteId(null);\n    setDeleteError(null);\n    onClose();\n  }, [onClose]);\n\n  const handleRequestDelete = (passkey: PasskeyInfo) => {\n    setConfirmingDeleteId(passkey.id);\n    setDeleteError(null);\n  };\n\n  const handleCancelDelete = () => {\n    setConfirmingDeleteId(null);\n    setDeleteError(null);\n  };\n\n  const handleConfirmDelete = async (passkey: PasskeyInfo) => {\n    setDeletingId(passkey.id);\n    setConfirmingDeleteId(null);\n    try {\n      await deleteMutation.mutateAsync({ id: passkey.id });\n    } catch (error) {\n      if (error instanceof IssuaryError) {\n        if (error.code === 'CANNOT_REMOVE_LAST_SECOND_FACTOR') {\n          setDeleteError(\n            t('profile.passkey.manageModal.cannotRemoveLastSecondFactor'),\n          );\n          return;\n        }\n      }\n      setDeleteError(t('profile.passkey.manageModal.deleteError'));\n    }\n  };\n\n  const formatDate = (dateString: string) => {\n    return new Date(dateString).toLocaleDateString(undefined, {\n      year: 'numeric',\n      month: 'short',\n      day: 'numeric',\n    });\n  };\n\n  const passkeys = passkeysData?.passkeys || [];\n\n  return (\n    <Modal\n      icon={FingerprintIcon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      size=\"lg\"\n      title={t('profile.passkey.manageModal.title')}\n    >\n      {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural modal body containing DS feedback and passkey rows. */}\n      <div className=\"mt-tinyrack-lg flex flex-col gap-tinyrack-sm\">\n        {deleteError && (\n          <AlertBanner variant=\"error\">{deleteError}</AlertBanner>\n        )}\n\n        {isLoading && (\n          <div className=\"flex justify-center py-tinyrack-xl\">\n            <TRSpinner uiSize=\"md\" />\n          </div>\n        )}\n\n        {!isLoading && passkeys.length === 0 && (\n          <TRText\n            align=\"center\"\n            className=\"py-tinyrack-xl\"\n            color=\"muted\"\n            data-testid=\"passkeys-empty\"\n            variant=\"bodySm\"\n          >\n            {t('profile.passkey.manageModal.noPasskeys')}\n          </TRText>\n        )}\n\n        {!isLoading && passkeys.length > 0 && (\n          /* tinyrack-check-ignore-next-line components/no-native-text -- Structural list containing PasskeyItem components. */\n          <div className=\"flex flex-col gap-tinyrack-sm\">\n            {passkeys.map((passkey) => (\n              <PasskeyItem\n                formatDate={formatDate}\n                isConfirmingDelete={confirmingDeleteId === passkey.id}\n                isDeleting={deletingId === passkey.id}\n                isEditing={editingPasskey?.id === passkey.id}\n                key={passkey.id}\n                onCancelDelete={handleCancelDelete}\n                onCancelEdit={() => setEditingPasskey(null)}\n                onConfirmDelete={() => handleConfirmDelete(passkey)}\n                onEdit={() => setEditingPasskey(passkey)}\n                onRequestDelete={() => handleRequestDelete(passkey)}\n                passkey={passkey}\n              />\n            ))}\n          </div>\n        )}\n      </div>\n\n      <ModalActions>\n        <TRButton\n          appearance=\"outline\"\n          data-testid=\"manage-passkeys-close\"\n          intent=\"neutral\"\n          onClick={handleClose}\n          type=\"button\"\n          uiSize=\"sm\"\n        >\n          {t('profile.passkey.manageModal.close')}\n        </TRButton>\n        <TRButton\n          data-testid=\"manage-passkeys-add-new\"\n          intent=\"primary\"\n          onClick={() => {\n            handleClose();\n            onAddNew();\n          }}\n          type=\"button\"\n          uiSize=\"sm\"\n        >\n          {t('profile.passkey.manageModal.addNew')}\n        </TRButton>\n      </ModalActions>\n    </Modal>\n  );\n}\n\ninterface PasskeyItemProps {\n  passkey: PasskeyInfo;\n  isDeleting: boolean;\n  isEditing: boolean;\n  isConfirmingDelete: boolean;\n  onEdit: () => void;\n  onCancelEdit: () => void;\n  onRequestDelete: () => void;\n  onConfirmDelete: () => void;\n  onCancelDelete: () => void;\n  formatDate: (dateString: string) => string;\n}\n\nfunction PasskeyItem({\n  passkey,\n  isDeleting,\n  isEditing,\n  isConfirmingDelete,\n  onEdit,\n  onCancelEdit,\n  onRequestDelete,\n  onConfirmDelete,\n  onCancelDelete,\n  formatDate,\n}: PasskeyItemProps) {\n  const { t } = useTranslation();\n  const queryClient = useQueryClient();\n\n  const schema = useMemo(\n    () =>\n      z.object({\n        name: z\n          .string()\n          .min(1, t('validation.passkey.name.required'))\n          .max(100, t('validation.passkey.name.max')),\n      }),\n    [t],\n  );\n\n  const form = useForm({\n    resolver: standardSchemaResolver(schema),\n    defaultValues: { name: passkey.name || '' },\n  });\n\n  const renameMutation = useMutation({\n    ...renamePasskeyMutationOptions,\n    onSuccess: () => {\n      queryClient.invalidateQueries({ queryKey: queryKeys.passkeys() });\n      onCancelEdit();\n    },\n  });\n\n  const handleRename = form.handleSubmit(async (data) => {\n    try {\n      await renameMutation.mutateAsync({ id: passkey.id, name: data.name });\n    } catch {\n      form.setError('name', {\n        message: t('profile.passkey.manageModal.renameError'),\n      });\n    }\n  });\n\n  if (isEditing) {\n    return (\n      <TRForm\n        className=\"flex flex-col gap-tinyrack-xs rounded-tinyrack-md bg-tinyrack-surface-muted p-tinyrack-sm\"\n        onSubmit={handleRename}\n      >\n        <AuthField\n          data-testid=\"passkey-rename-input\"\n          error={form.formState.errors.name}\n          errorTestId=\"passkey-rename-error\"\n          hideLabel\n          label={t('profile.passkey.manageModal.nameLabel')}\n          placeholder={t('profile.passkey.manageModal.namePlaceholder')}\n          {...form.register('name')}\n          type=\"text\"\n        />\n        <div className=\"flex justify-end gap-tinyrack-xs\">\n          <TRButton\n            appearance=\"ghost\"\n            disabled={renameMutation.isPending}\n            onClick={() => {\n              form.reset();\n              onCancelEdit();\n            }}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.passkey.manageModal.cancelEdit')}\n          </TRButton>\n          <TRButton\n            disabled={renameMutation.isPending}\n            intent=\"primary\"\n            type=\"submit\"\n            uiSize=\"sm\"\n          >\n            {renameMutation.isPending\n              ? t('profile.passkey.manageModal.saving')\n              : t('profile.passkey.manageModal.save')}\n          </TRButton>\n        </div>\n      </TRForm>\n    );\n  }\n\n  if (isConfirmingDelete) {\n    return (\n      /* tinyrack-check-ignore-next-line components/no-native-text -- Structural inline confirmation row; copy uses TRText and actions are DS controls. */\n      <div className=\"flex items-center justify-between rounded-tinyrack-md border border-tinyrack-danger-border bg-tinyrack-danger-surface p-tinyrack-sm text-tinyrack-danger-foreground\">\n        <div className=\"flex items-center gap-tinyrack-sm\">\n          <Trash2Icon className=\"size-tinyrack-lg\" />\n          <TRText color=\"danger\" variant=\"caption\">\n            {t('profile.passkey.manageModal.deleteConfirmInline')}\n          </TRText>\n        </div>\n        <div className=\"flex gap-tinyrack-xs\">\n          <TRButton\n            appearance=\"ghost\"\n            onClick={onCancelDelete}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.passkey.manageModal.cancelEdit')}\n          </TRButton>\n          <TRButton\n            intent=\"danger\"\n            onClick={onConfirmDelete}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.passkey.manageModal.delete')}\n          </TRButton>\n        </div>\n      </div>\n    );\n  }\n\n  return (\n    /* tinyrack-check-ignore-next-line components/no-native-text -- Structural passkey row; visible copy uses TRText. */\n    <div\n      className=\"flex items-center justify-between rounded-tinyrack-md bg-tinyrack-surface-muted p-tinyrack-sm\"\n      data-testid=\"passkey-item\"\n    >\n      {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural passkey identity group. */}\n      <div className=\"flex items-center gap-tinyrack-sm\">\n        {passkey.device_type === 'multiDevice' ? (\n          <CloudIcon className=\"size-tinyrack-lg text-tinyrack-primary-foreground\" />\n        ) : (\n          <SmartphoneIcon className=\"size-tinyrack-lg text-tinyrack-primary-foreground\" />\n        )}\n        {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural identity stack containing TRText parts. */}\n        <div>\n          <TRText as=\"div\" variant=\"caption\" weight=\"medium\">\n            {passkey.name || t('profile.passkey.manageModal.unnamedPasskey')}\n          </TRText>\n          {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural metadata row containing TRText and an optional badge. */}\n          <div className=\"flex items-center gap-tinyrack-xs\">\n            <TRText color=\"muted\" variant=\"caption\">\n              {t('profile.passkey.manageModal.createdAt', {\n                date: formatDate(passkey.created_at),\n              })}\n            </TRText>\n            {passkey.backed_up && (\n              <TRBadge uiSize=\"md\" variant=\"success\">\n                {t('profile.passkey.manageModal.backedUp')}\n              </TRBadge>\n            )}\n          </div>\n        </div>\n      </div>\n      <div className=\"flex gap-tinyrack-xs\">\n        <TRButton\n          appearance=\"ghost\"\n          aria-label={t('profile.passkey.manageModal.rename')}\n          onClick={onEdit}\n          type=\"button\"\n          uiSize=\"sm\"\n        >\n          <PencilIcon className=\"size-tinyrack-lg\" />\n        </TRButton>\n        <TRButton\n          appearance=\"ghost\"\n          aria-label={t('profile.passkey.manageModal.delete')}\n          disabled={isDeleting}\n          intent=\"danger\"\n          loading={isDeleting}\n          onClick={onRequestDelete}\n          type=\"button\"\n          uiSize=\"sm\"\n        >\n          {isDeleting ? undefined : <Trash2Icon className=\"size-tinyrack-lg\" />}\n        </TRButton>\n      </div>\n    </div>\n  );\n}\n","import {\n  useMutation,\n  useQueryClient,\n  useSuspenseQuery,\n} from '@tanstack/react-query';\nimport { useRouter } from '@tanstack/react-router';\nimport { ShieldCheckIcon } from 'lucide-react';\nimport { useCallback, useState } from 'react';\nimport { useTranslation } from 'react-i18next';\nimport { RecoveryCodesStep } from '#frontend/components/totp/recovery-codes-step.tsx';\nimport { VerifyStep } from '#frontend/components/totp/verify-step.tsx';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal } from '#frontend/components/ui/modal.tsx';\nimport { IssuaryError } from '#frontend/libs/error.ts';\nimport { tick } from '#frontend/libs/promise.ts';\nimport { appConfigQueryOptions } from '#frontend/queries/config.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\nimport {\n  type RegenerateTotpRecoveryCodesResponse,\n  regenerateTotpRecoveryCodesMutationOptions,\n} from '#frontend/queries/totp.ts';\n\ninterface RegenerateTotpRecoveryCodesModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n}\n\ntype RegenerateStep = 'verify' | 'recovery';\n\nexport function RegenerateTotpRecoveryCodesModal({\n  isOpen,\n  onClose,\n}: RegenerateTotpRecoveryCodesModalProps) {\n  const { t } = useTranslation();\n  const router = useRouter();\n  const queryClient = useQueryClient();\n  const { data: appConfig } = useSuspenseQuery(appConfigQueryOptions);\n  const [step, setStep] = useState<RegenerateStep>('verify');\n  const [response, setResponse] =\n    useState<RegenerateTotpRecoveryCodesResponse | null>(null);\n  const [errorMessage, setErrorMessage] = useState<string | null>(null);\n\n  const mutation = useMutation({\n    ...regenerateTotpRecoveryCodesMutationOptions,\n    onSuccess: async (data) => {\n      setResponse(data);\n      setStep('recovery');\n      await queryClient.invalidateQueries({\n        queryKey: getSessionQueryOptions.queryKey,\n      });\n    },\n  });\n\n  const reset = useCallback(() => {\n    setStep('verify');\n    setResponse(null);\n    setErrorMessage(null);\n    mutation.reset();\n  }, [mutation]);\n\n  const handleClose = useCallback(() => {\n    reset();\n    onClose();\n  }, [onClose, reset]);\n\n  const handleVerify = useCallback(\n    async (code: string) => {\n      setErrorMessage(null);\n\n      try {\n        await mutation.mutateAsync({ code });\n      } catch (error) {\n        if (error instanceof IssuaryError) {\n          if (error.code === 'INVALID_TOTP_CODE') {\n            throw error;\n          }\n\n          if (error.code === 'UNAUTHORIZED') {\n            queryClient.setQueryData(getSessionQueryOptions.queryKey, {\n              user: null,\n            });\n            await tick();\n            router.navigate({ to: '/login' });\n            return;\n          }\n\n          if (\n            error.code === 'TOTP_NOT_ENABLED' ||\n            error.code === 'VALIDATION_ERROR'\n          ) {\n            await queryClient.invalidateQueries({\n              queryKey: getSessionQueryOptions.queryKey,\n            });\n            handleClose();\n            return;\n          }\n        }\n\n        setErrorMessage(t('profile.totp.regenerateModal.unexpectedError'));\n      }\n    },\n    [handleClose, mutation, queryClient, router, t],\n  );\n\n  if (!appConfig.auth.password.totp.enabled) {\n    return null;\n  }\n\n  return (\n    <Modal\n      description={\n        step === 'verify'\n          ? t('profile.totp.regenerateModal.description')\n          : t('profile.totp.regenerateModal.recoveryDescription')\n      }\n      icon={ShieldCheckIcon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      preventClose={step === 'recovery'}\n      size=\"sm\"\n      title={\n        step === 'verify'\n          ? t('profile.totp.regenerateModal.title')\n          : t('profile.totp.regenerateModal.recoveryTitle')\n      }\n    >\n      {step === 'verify' ? (\n        /* tinyrack-check-ignore-next-line components/no-native-text -- Structural verification-step host containing DS alert and form components. */\n        <div className=\"mt-tinyrack-lg\">\n          {errorMessage && (\n            <div className=\"mb-tinyrack-md\">\n              <AlertBanner variant=\"error\">{errorMessage}</AlertBanner>\n            </div>\n          )}\n          <VerifyStep\n            invalidMessage={t('profile.totp.regenerateModal.error')}\n            isPending={mutation.isPending}\n            onSubmit={handleVerify}\n            pendingText={t('profile.totp.regenerateModal.submitting')}\n            submitLabel={t('profile.totp.regenerateModal.submit')}\n          />\n        </div>\n      ) : (\n        <div className=\"mt-tinyrack-lg\">\n          <RecoveryCodesStep\n            onConfirm={handleClose}\n            recoveryCodes={response?.recovery_codes ?? []}\n          />\n        </div>\n      )}\n    </Modal>\n  );\n}\n","import { standardSchemaResolver } from '@hookform/resolvers/standard-schema';\nimport { useMutation, useQueryClient } from '@tanstack/react-query';\nimport { TRButton } from '@tinyrack/ui/components/button';\nimport { TRForm } from '@tinyrack/ui/components/form';\nimport { KeyRoundIcon } from 'lucide-react';\nimport { useMemo } from 'react';\nimport { useForm } from 'react-hook-form';\nimport { useTranslation } from 'react-i18next';\nimport z from 'zod';\nimport { AuthField } from '#frontend/components/auth/auth-field.tsx';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal, ModalActions } from '#frontend/components/ui/modal.tsx';\nimport { IssuaryError } from '#frontend/libs/error.ts';\nimport { removePasswordMutationOptions } from '#frontend/queries/password.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\n\ninterface RemovePasswordModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n}\n\nexport function RemovePasswordModal({\n  isOpen,\n  onClose,\n}: RemovePasswordModalProps) {\n  const { t } = useTranslation();\n  const queryClient = useQueryClient();\n\n  const schema = useMemo(\n    () =>\n      z.object({\n        currentPassword: z.string().min(1, t('validation.password.required')),\n      }),\n    [t],\n  );\n\n  const form = useForm({\n    resolver: standardSchemaResolver(schema),\n    defaultValues: { currentPassword: '' },\n  });\n\n  const mutation = useMutation({\n    ...removePasswordMutationOptions,\n    onSuccess: () => {\n      queryClient.invalidateQueries({\n        queryKey: getSessionQueryOptions.queryKey,\n      });\n      handleClose();\n    },\n  });\n\n  const handleClose = () => {\n    form.reset();\n    onClose();\n  };\n\n  const handleSubmit = form.handleSubmit(async (data) => {\n    try {\n      await mutation.mutateAsync({\n        current_password: data.currentPassword,\n      });\n    } catch (err) {\n      if (err instanceof IssuaryError) {\n        if (err.code === 'INVALID_CURRENT_PASSWORD') {\n          form.setError('currentPassword', {\n            message: t('profile.password.removeModal.invalidCurrent'),\n          });\n          return;\n        }\n        if (err.code === 'CANNOT_REMOVE_LAST_AUTH_METHOD') {\n          form.setError('root', {\n            message: t('profile.password.removeModal.noOAuth'),\n          });\n          return;\n        }\n        if (err.code === 'CANNOT_REMOVE_PASSWORD_WITH_SECOND_FACTOR_ONLY') {\n          form.setError('root', {\n            message: t('profile.password.removeModal.noOAuthWith2FA'),\n          });\n          return;\n        }\n      }\n      form.setError('root', {\n        message: t('profile.password.removeModal.error'),\n      });\n    }\n  });\n\n  return (\n    <Modal\n      description={t('profile.password.removeModal.description')}\n      icon={KeyRoundIcon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      title={t('profile.password.removeModal.title')}\n      variant=\"destructive\"\n    >\n      <TRForm\n        className=\"mt-tinyrack-lg flex flex-col gap-tinyrack-md\"\n        onSubmit={handleSubmit}\n      >\n        <AuthField\n          error={form.formState.errors.currentPassword}\n          errorTestId=\"remove-password-error\"\n          id=\"current-password-remove\"\n          label={t('profile.password.removeModal.currentPassword')}\n          placeholder={t(\n            'profile.password.removeModal.currentPasswordPlaceholder',\n          )}\n          {...form.register('currentPassword')}\n          type=\"password\"\n        />\n        {form.formState.errors.root && (\n          <AlertBanner variant=\"error\">\n            {form.formState.errors.root.message}\n          </AlertBanner>\n        )}\n        <ModalActions>\n          <TRButton\n            appearance=\"outline\"\n            data-testid=\"remove-password-cancel\"\n            disabled={mutation.isPending}\n            intent=\"neutral\"\n            onClick={handleClose}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.password.removeModal.cancel')}\n          </TRButton>\n          <TRButton\n            data-testid=\"remove-password-submit\"\n            disabled={mutation.isPending}\n            intent=\"danger\"\n            loading={mutation.isPending}\n            loadingLabel={t('profile.password.removeModal.submitting')}\n            type=\"submit\"\n            uiSize=\"sm\"\n          >\n            {mutation.isPending\n              ? undefined\n              : t('profile.password.removeModal.submit')}\n          </TRButton>\n        </ModalActions>\n      </TRForm>\n    </Modal>\n  );\n}\n","import { standardSchemaResolver } from '@hookform/resolvers/standard-schema';\nimport {\n  useMutation,\n  useQueryClient,\n  useSuspenseQuery,\n} from '@tanstack/react-query';\nimport { TRButton } from '@tinyrack/ui/components/button';\nimport { TRForm } from '@tinyrack/ui/components/form';\nimport { KeyRoundIcon } from 'lucide-react';\nimport { useMemo } from 'react';\nimport { useForm } from 'react-hook-form';\nimport { useTranslation } from 'react-i18next';\nimport z from 'zod';\nimport { AuthField } from '#frontend/components/auth/auth-field.tsx';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal, ModalActions } from '#frontend/components/ui/modal.tsx';\nimport { appConfigQueryOptions } from '#frontend/queries/config.ts';\nimport { setPasswordMutationOptions } from '#frontend/queries/password.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\n\ninterface SetPasswordModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n}\n\nexport function SetPasswordModal({ isOpen, onClose }: SetPasswordModalProps) {\n  const { t } = useTranslation();\n  const queryClient = useQueryClient();\n  const { data: configData } = useSuspenseQuery(appConfigQueryOptions);\n  const passwordPolicy = configData.auth.password.policy;\n\n  const schema = useMemo(\n    () =>\n      z\n        .object({\n          password: z\n            .string()\n            .min(\n              passwordPolicy.min_length,\n              t('validation.password.min', {\n                count: passwordPolicy.min_length,\n              }),\n            )\n            .max(\n              passwordPolicy.max_length,\n              t('validation.password.max', {\n                count: passwordPolicy.max_length,\n              }),\n            ),\n          confirmPassword: z.string(),\n        })\n        .refine((data) => data.password === data.confirmPassword, {\n          message: t('validation.confirmPassword.mismatch'),\n          path: ['confirmPassword'],\n        }),\n    [passwordPolicy.max_length, passwordPolicy.min_length, t],\n  );\n\n  const form = useForm({\n    resolver: standardSchemaResolver(schema),\n    defaultValues: { password: '', confirmPassword: '' },\n  });\n\n  const mutation = useMutation({\n    ...setPasswordMutationOptions,\n    onSuccess: () => {\n      queryClient.invalidateQueries({\n        queryKey: getSessionQueryOptions.queryKey,\n      });\n      handleClose();\n    },\n  });\n\n  const handleClose = () => {\n    form.reset();\n    onClose();\n  };\n\n  const handleSubmit = form.handleSubmit(async (data) => {\n    try {\n      await mutation.mutateAsync({ password: data.password });\n    } catch (error) {\n      void error;\n      form.setError('root', {\n        message: t('profile.password.setModal.error'),\n      });\n    }\n  });\n\n  return (\n    <Modal\n      description={t('profile.password.setModal.description')}\n      icon={KeyRoundIcon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      title={t('profile.password.setModal.title')}\n    >\n      <TRForm\n        className=\"mt-tinyrack-lg flex flex-col gap-tinyrack-md\"\n        onSubmit={handleSubmit}\n      >\n        <AuthField\n          error={form.formState.errors.password}\n          errorTestId=\"set-password-error-password\"\n          id=\"new-password\"\n          label={t('profile.password.setModal.newPassword')}\n          placeholder={t('profile.password.setModal.newPasswordPlaceholder')}\n          {...form.register('password')}\n          type=\"password\"\n        />\n        <AuthField\n          error={form.formState.errors.confirmPassword}\n          errorTestId=\"set-password-error-confirmPassword\"\n          id=\"confirm-password\"\n          label={t('profile.password.setModal.confirmPassword')}\n          placeholder={t(\n            'profile.password.setModal.confirmPasswordPlaceholder',\n          )}\n          {...form.register('confirmPassword')}\n          type=\"password\"\n        />\n        {form.formState.errors.root && (\n          <AlertBanner variant=\"error\">\n            {form.formState.errors.root.message}\n          </AlertBanner>\n        )}\n        <ModalActions>\n          <TRButton\n            appearance=\"outline\"\n            data-testid=\"set-password-cancel\"\n            disabled={mutation.isPending}\n            intent=\"neutral\"\n            onClick={handleClose}\n            type=\"button\"\n            uiSize=\"sm\"\n          >\n            {t('profile.password.setModal.cancel')}\n          </TRButton>\n          <TRButton\n            data-testid=\"set-password-submit\"\n            disabled={mutation.isPending}\n            intent=\"primary\"\n            loading={mutation.isPending}\n            loadingLabel={t('profile.password.setModal.submitting')}\n            type=\"submit\"\n            uiSize=\"sm\"\n          >\n            {mutation.isPending\n              ? undefined\n              : t('profile.password.setModal.submit')}\n          </TRButton>\n        </ModalActions>\n      </TRForm>\n    </Modal>\n  );\n}\n","import { standardSchemaResolver } from '@hookform/resolvers/standard-schema';\nimport { useMutation, useQueryClient } from '@tanstack/react-query';\nimport { TRButton } from '@tinyrack/ui/components/button';\nimport { TRForm } from '@tinyrack/ui/components/form';\nimport { TRSpinner } from '@tinyrack/ui/components/spinner';\nimport { TRText } from '@tinyrack/ui/components/text';\nimport { FingerprintIcon } from 'lucide-react';\nimport { useCallback, useMemo, useState } from 'react';\nimport { useForm } from 'react-hook-form';\nimport { useTranslation } from 'react-i18next';\nimport z from 'zod';\nimport { AuthField } from '#frontend/components/auth/auth-field.tsx';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal, ModalActions } from '#frontend/components/ui/modal.tsx';\nimport { queryKeys } from '#frontend/queries/keys.ts';\nimport { registerPasskeyMutationOptions } from '#frontend/queries/passkey.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\n\ninterface SetupPasskeyModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n  isRequired?: boolean;\n  canSwitchToTotp?: boolean;\n  onSwitchToTotp?: () => void;\n}\n\ntype SetupStep = 'name' | 'register';\n\nexport function SetupPasskeyModal({\n  isOpen,\n  onClose,\n  isRequired = false,\n  canSwitchToTotp = false,\n  onSwitchToTotp,\n}: SetupPasskeyModalProps) {\n  const { t } = useTranslation();\n  const queryClient = useQueryClient();\n  const [step, setStep] = useState<SetupStep>('name');\n  const [errorMessage, setErrorMessage] = useState<string | null>(null);\n\n  const schema = useMemo(\n    () =>\n      z.object({\n        name: z\n          .string()\n          .max(100, t('validation.passkey.name.max'))\n          .optional()\n          .transform((val) => val?.trim() || undefined),\n      }),\n    [t],\n  );\n\n  const form = useForm({\n    resolver: standardSchemaResolver(schema),\n    defaultValues: { name: '' },\n  });\n\n  const registerMutation = useMutation({\n    ...registerPasskeyMutationOptions,\n    onSuccess: () => {\n      queryClient.invalidateQueries({ queryKey: queryKeys.passkeys() });\n      queryClient.invalidateQueries({\n        queryKey: getSessionQueryOptions.queryKey,\n      });\n      handleClose();\n    },\n    onError: (error) => {\n      setStep('name');\n      if (error.name === 'NotAllowedError') {\n        setErrorMessage(t('profile.passkey.setupModal.cancelled'));\n      } else {\n        setErrorMessage(t('profile.passkey.setupModal.error'));\n      }\n    },\n  });\n\n  const handleClose = useCallback(() => {\n    form.reset();\n    setStep('name');\n    setErrorMessage(null);\n    onClose();\n  }, [form, onClose]);\n\n  const handleRegister = form.handleSubmit(async (data) => {\n    setStep('register');\n    setErrorMessage(null);\n    try {\n      await registerMutation.mutateAsync({ name: data.name });\n    } catch {\n      // Error handling is done via mutation callbacks\n    }\n  });\n\n  const isPending = registerMutation.isPending;\n\n  return (\n    <Modal\n      description={\n        isRequired\n          ? t('profile.passkey.setupModal.requiredDescription')\n          : undefined\n      }\n      icon={FingerprintIcon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      preventClose={isRequired}\n      size=\"sm\"\n      title={t('profile.passkey.setupModal.title')}\n    >\n      {step === 'name' && (\n        <TRForm\n          className=\"mt-tinyrack-lg flex flex-col gap-tinyrack-md\"\n          onSubmit={handleRegister}\n        >\n          <TRText as=\"p\" color=\"muted\" variant=\"caption\">\n            {t('profile.passkey.setupModal.description')}\n          </TRText>\n\n          {errorMessage && (\n            <AlertBanner variant=\"error\">{errorMessage}</AlertBanner>\n          )}\n\n          <AuthField\n            error={form.formState.errors.name}\n            errorTestId=\"setup-passkey-error\"\n            hint={t('profile.passkey.setupModal.nameHint')}\n            id=\"passkey-name\"\n            label={t('profile.passkey.setupModal.nameLabel')}\n            placeholder={t('profile.passkey.setupModal.namePlaceholder')}\n            {...form.register('name')}\n            type=\"text\"\n          />\n\n          <ModalActions>\n            <TRButton\n              appearance=\"outline\"\n              data-testid=\"setup-passkey-cancel\"\n              intent=\"neutral\"\n              onClick={handleClose}\n              type=\"button\"\n              uiSize=\"sm\"\n            >\n              {t('profile.passkey.setupModal.cancel')}\n            </TRButton>\n            <TRButton\n              data-testid=\"setup-passkey-continue\"\n              intent=\"primary\"\n              type=\"submit\"\n              uiSize=\"sm\"\n            >\n              {t('profile.passkey.setupModal.continue')}\n            </TRButton>\n          </ModalActions>\n          {canSwitchToTotp && onSwitchToTotp && (\n            <TRText\n              align=\"center\"\n              as=\"p\"\n              className=\"mt-tinyrack-sm\"\n              variant=\"caption\"\n            >\n              <TRButton\n                appearance=\"ghost\"\n                intent=\"primary\"\n                onClick={onSwitchToTotp}\n                type=\"button\"\n                uiSize=\"sm\"\n              >\n                {t('profile.passkey.setupModal.switchToTotp')}\n              </TRButton>\n            </TRText>\n          )}\n        </TRForm>\n      )}\n\n      {step === 'register' && (\n        <div className=\"mt-tinyrack-lg\">\n          <div\n            className=\"flex flex-col items-center gap-tinyrack-md py-tinyrack-xl\"\n            data-testid=\"setup-passkey-loading\"\n          >\n            <TRSpinner uiSize=\"md\" />\n            <TRText align=\"center\" as=\"p\" color=\"muted\" variant=\"caption\">\n              {t('profile.passkey.setupModal.waitingForDevice')}\n            </TRText>\n          </div>\n\n          <ModalActions>\n            <TRButton\n              appearance=\"outline\"\n              data-testid=\"setup-passkey-cancel\"\n              disabled={isPending}\n              intent=\"neutral\"\n              onClick={handleClose}\n              type=\"button\"\n              uiSize=\"sm\"\n            >\n              {t('profile.passkey.setupModal.cancel')}\n            </TRButton>\n          </ModalActions>\n        </div>\n      )}\n    </Modal>\n  );\n}\n","import { TRButton } from '@tinyrack/ui/components/button';\nimport { TRSpinner } from '@tinyrack/ui/components/spinner';\nimport { TRText } from '@tinyrack/ui/components/text';\nimport { ShieldCheckIcon } from 'lucide-react';\nimport { useCallback } from 'react';\nimport { useTranslation } from 'react-i18next';\nimport { QrStep } from '#frontend/components/totp/qr-step.tsx';\nimport { RecoveryCodesStep } from '#frontend/components/totp/recovery-codes-step.tsx';\nimport { VerifyStep } from '#frontend/components/totp/verify-step.tsx';\nimport { AlertBanner } from '#frontend/components/ui/alert-banner.tsx';\nimport { Modal, ModalActions } from '#frontend/components/ui/modal.tsx';\nimport { useTotpSetup } from '#frontend/features/totp/use-totp-setup.ts';\n\ninterface SetupTotpModalProps {\n  isOpen: boolean;\n  onClose: () => void;\n  isRequired?: boolean;\n  canSwitchToPasskey?: boolean;\n  onSwitchToPasskey?: () => void;\n}\n\nexport function SetupTotpModal({\n  isOpen,\n  onClose,\n  isRequired = false,\n  canSwitchToPasskey = false,\n  onSwitchToPasskey,\n}: SetupTotpModalProps) {\n  const { t } = useTranslation();\n\n  const {\n    step,\n    setupData,\n    recoveryCodes,\n    isSetupPending,\n    isVerifyPending,\n    isConfirmPending,\n    startSetup,\n    verify,\n    goToVerify,\n    goToQr,\n    confirmRecoveryCodes,\n    reset,\n  } = useTotpSetup({\n    autoStart: false,\n    onConfirmSuccess: () => {\n      reset();\n      onClose();\n    },\n  });\n\n  const handleClose = useCallback(() => {\n    reset();\n    onClose();\n  }, [onClose, reset]);\n\n  const handleModalOpen = useCallback(() => {\n    if (!setupData && !isSetupPending) {\n      startSetup();\n    }\n  }, [setupData, isSetupPending, startSetup]);\n\n  if (isOpen && !setupData && !isSetupPending && step !== 'error') {\n    handleModalOpen();\n  }\n\n  const handleVerify = useCallback(\n    async (code: string) => {\n      await verify(code);\n    },\n    [verify],\n  );\n\n  const modalTitle =\n    step === 'recovery'\n      ? t('setupTotp.recoveryCodes.title')\n      : t('profile.totp.setupModal.title');\n\n  return (\n    <Modal\n      description={\n        isRequired\n          ? t('profile.totp.setupModal.requiredDescription')\n          : undefined\n      }\n      icon={ShieldCheckIcon}\n      isOpen={isOpen}\n      onClose={handleClose}\n      preventClose={isRequired || step === 'recovery'}\n      size=\"sm\"\n      title={modalTitle}\n    >\n      {isSetupPending && (\n        <div\n          className=\"flex justify-center py-tinyrack-xl\"\n          data-testid=\"setup-totp-loading\"\n        >\n          <TRSpinner uiSize=\"md\" />\n        </div>\n      )}\n\n      {step === 'error' && (\n        <div className=\"mt-tinyrack-lg flex flex-col gap-tinyrack-md\">\n          <AlertBanner variant=\"error\">\n            {t('profile.totp.setupModal.setupError')}\n          </AlertBanner>\n          <ModalActions>\n            <TRButton\n              appearance=\"outline\"\n              intent=\"neutral\"\n              onClick={handleClose}\n              type=\"button\"\n              uiSize=\"sm\"\n            >\n              {t('profile.totp.setupModal.cancel')}\n            </TRButton>\n            <TRButton\n              intent=\"primary\"\n              onClick={startSetup}\n              type=\"button\"\n              uiSize=\"sm\"\n            >\n              {t('profile.totp.setupModal.retry')}\n            </TRButton>\n          </ModalActions>\n        </div>\n      )}\n\n      {setupData && step === 'qr' && (\n        <div className=\"mt-tinyrack-lg\">\n          <QrStep\n            additionalActions={\n              <>\n                <ModalActions>\n                  <TRButton\n                    appearance=\"outline\"\n                    intent=\"neutral\"\n                    onClick={handleClose}\n                    type=\"button\"\n                    uiSize=\"sm\"\n                  >\n                    {t('profile.totp.setupModal.cancel')}\n                  </TRButton>\n                </ModalActions>\n                {canSwitchToPasskey && onSwitchToPasskey && (\n                  <TRText\n                    align=\"center\"\n                    as=\"p\"\n                    className=\"mt-tinyrack-sm\"\n                    variant=\"caption\"\n                  >\n                    <TRButton\n                      appearance=\"ghost\"\n                      intent=\"primary\"\n                      onClick={onSwitchToPasskey}\n                      type=\"button\"\n                      uiSize=\"sm\"\n                    >\n                      {t('profile.totp.setupModal.switchToPasskey')}\n                    </TRButton>\n                  </TRText>\n                )}\n              </>\n            }\n            onNext={goToVerify}\n            setupData={setupData}\n          />\n        </div>\n      )}\n\n      {setupData && step === 'verify' && (\n        <div className=\"mt-tinyrack-lg\">\n          <VerifyStep\n            isPending={isVerifyPending}\n            onBack={goToQr}\n            onSubmit={handleVerify}\n          />\n        </div>\n      )}\n\n      {step === 'recovery' && recoveryCodes.length > 0 && (\n        <div className=\"mt-tinyrack-lg\">\n          <RecoveryCodesStep\n            isLoading={isConfirmPending}\n            onConfirm={confirmRecoveryCodes}\n            recoveryCodes={recoveryCodes}\n          />\n        </div>\n      )}\n    </Modal>\n  );\n}\n","import {\n  useMutation,\n  useQueryClient,\n  useSuspenseQuery,\n} from '@tanstack/react-query';\nimport {\n  createFileRoute,\n  type ErrorComponentProps,\n  redirect,\n  useRouter,\n} from '@tanstack/react-router';\nimport { TRButton } from '@tinyrack/ui/components/button';\nimport { TRCard } from '@tinyrack/ui/components/card';\nimport { TRText } from '@tinyrack/ui/components/text';\nimport { CircleAlertIcon, LogOutIcon } from 'lucide-react';\nimport { useState } from 'react';\nimport { useTranslation } from 'react-i18next';\nimport { z } from 'zod';\nimport { AuthPageHeader } from '#frontend/components/auth/auth-page-header.tsx';\nimport { DangerZoneSection } from '#frontend/components/profile/danger-zone-section.tsx';\nimport { LinkedAccountsSection } from '#frontend/components/profile/linked-accounts-section.tsx';\nimport { PasskeySection } from '#frontend/components/profile/passkey-section.tsx';\nimport { PasswordSection } from '#frontend/components/profile/password-section.tsx';\nimport { TotpSection } from '#frontend/components/profile/totp-section.tsx';\nimport { UnlinkOAuthModal } from '#frontend/components/profile/unlink-oauth-modal.tsx';\nimport { UserInfoSection } from '#frontend/components/profile/user-info-section.tsx';\nimport { Alert } from '#frontend/components/ui/alert.tsx';\nimport { InitialAvatar } from '#frontend/components/ui/initial-avatar.tsx';\nimport { RouteErrorFallback } from '#frontend/components/ui/route-error-fallback.tsx';\nimport { AppLayout } from '#frontend/features/layout/app-layout.tsx';\nimport { ChangePasswordModal } from '#frontend/features/profile/change-password-modal.tsx';\nimport { DeleteAccountModal } from '#frontend/features/profile/delete-account-modal.tsx';\nimport { DisableTotpModal } from '#frontend/features/profile/disable-totp-modal.tsx';\nimport { ManagePasskeysModal } from '#frontend/features/profile/manage-passkeys-modal.tsx';\nimport { RegenerateTotpRecoveryCodesModal } from '#frontend/features/profile/regenerate-totp-recovery-codes-modal.tsx';\nimport { RemovePasswordModal } from '#frontend/features/profile/remove-password-modal.tsx';\nimport { SetPasswordModal } from '#frontend/features/profile/set-password-modal.tsx';\nimport { SetupPasskeyModal } from '#frontend/features/profile/setup-passkey-modal.tsx';\nimport { SetupTotpModal } from '#frontend/features/profile/setup-totp-modal.tsx';\nimport { tick } from '#frontend/libs/promise.ts';\nimport { appConfigQueryOptions } from '#frontend/queries/config.ts';\nimport { logoutMutationOptions } from '#frontend/queries/logout.ts';\nimport {\n  getOAuthAuthorizeUrl,\n  oauthAccountsQueryOptions,\n  unlinkOAuthMutationOptions,\n} from '#frontend/queries/oauth.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\n\ntype PasswordModalType = 'set' | 'change' | 'remove' | null;\ntype TotpModalType = 'setup' | 'disable' | 'regenerate' | null;\ntype PasskeyModalType = 'setup' | 'manage' | null;\n\nconst SearchSchema = z.object({\n  oauth_error: z.string().optional(),\n  oauth_error_description: z.string().optional(),\n});\n\nconst OAUTH_ERROR_I18N_MAP: Record<string, string> = {\n  access_denied: 'oauth.error.accessDenied',\n  temporarily_unavailable: 'oauth.error.temporarilyUnavailable',\n  server_error: 'oauth.error.serverError',\n};\n\nfunction ProfileError(props: ErrorComponentProps) {\n  return (\n    <RouteErrorFallback\n      {...props}\n      onUnauthorized={() => {\n        window.location.href = '/login';\n      }}\n    />\n  );\n}\n\nexport const Route = createFileRoute('/profile/')({\n  component: Profile,\n  errorComponent: ProfileError,\n  validateSearch: SearchSchema,\n  beforeLoad: async ({ context }) => {\n    if (!context.user) {\n      throw redirect({\n        to: '/login',\n      });\n    }\n  },\n  loader: async ({ context }) => {\n    await Promise.all([\n      context.queryClient.ensureQueryData(getSessionQueryOptions),\n      context.queryClient.ensureQueryData(oauthAccountsQueryOptions),\n      context.queryClient.ensureQueryData(appConfigQueryOptions),\n    ]);\n  },\n});\n\nfunction Profile() {\n  const { t } = useTranslation();\n  const router = useRouter();\n  const queryClient = useQueryClient();\n  const search = Route.useSearch();\n\n  const oauthError = search.oauth_error;\n  const oauthErrorMessage = oauthError\n    ? t(OAUTH_ERROR_I18N_MAP[oauthError] ?? 'oauth.error.failed')\n    : undefined;\n  const [unlinkingProvider, setUnlinkingProvider] = useState<string | null>(\n    null,\n  );\n  const [unlinkModal, setUnlinkModal] = useState<{\n    id: string;\n    name: string;\n  } | null>(null);\n  const [passwordModal, setPasswordModal] = useState<PasswordModalType>(null);\n  const [totpModal, setTotpModal] = useState<TotpModalType>(null);\n  const [passkeyModal, setPasskeyModal] = useState<PasskeyModalType>(null);\n  const [showDeleteModal, setShowDeleteModal] = useState(false);\n\n  const { data: session } = useSuspenseQuery(getSessionQueryOptions);\n  const { data: oauthAccountsData } = useSuspenseQuery(\n    oauthAccountsQueryOptions,\n  );\n  const { data: appConfig } = useSuspenseQuery(appConfigQueryOptions);\n\n  const logoutMutation = useMutation({\n    ...logoutMutationOptions,\n    onSuccess: async () => {\n      queryClient.setQueryData(getSessionQueryOptions.queryKey, {\n        user: null,\n      });\n      await tick();\n      router.navigate({\n        to: '/login',\n      });\n    },\n    onSettled: () => {\n      queryClient.invalidateQueries({\n        queryKey: getSessionQueryOptions.queryKey,\n      });\n    },\n  });\n\n  const unlinkMutation = useMutation({\n    ...unlinkOAuthMutationOptions,\n    onSuccess: () => {\n      queryClient.invalidateQueries({\n        queryKey: oauthAccountsQueryOptions.queryKey,\n      });\n    },\n    onSettled: () => {\n      setUnlinkingProvider(null);\n    },\n  });\n\n  const handleUnlinkConfirm = async () => {\n    if (!unlinkModal) return;\n    setUnlinkingProvider(unlinkModal.id);\n    await unlinkMutation.mutateAsync(unlinkModal.id);\n  };\n\n  if (!session.user) {\n    return null;\n  }\n\n  const user = session.user;\n  const availableProviders = oauthAccountsData.available_providers;\n  const hasLinkedOAuth = availableProviders.some((p) => p.linked);\n  const isConfigManaged = user.managed_by === 'config';\n\n  const passwordAuthMethod = appConfig.auth.password;\n  const passkeyAuthMethod = appConfig.auth.passkey;\n  const totpEnabled = passwordAuthMethod.totp.enabled;\n  const passkeyEnabled = passkeyAuthMethod.enabled;\n\n  const accountDeletionEnabled = appConfig.account_deletion.enabled;\n  const retentionPeriod = appConfig.account_deletion.retention;\n\n  const retentionDays = (() => {\n    const match = retentionPeriod.match(/^(\\d+)([dmy])$/);\n    if (!match) return 30;\n    const value = parseInt(match[1], 10);\n    const unit = match[2];\n    switch (unit) {\n      case 'd':\n        return value;\n      case 'm':\n        return value * 30;\n      case 'y':\n        return value * 365;\n      default:\n        return 30;\n    }\n  })();\n\n  const showPasswordSection = true;\n  const showTotpSection = !isConfigManaged && totpEnabled;\n  const showPasskeySection = !isConfigManaged && passkeyEnabled;\n  const showLinkedAccounts = availableProviders.length > 0;\n  const hasSecurityOptions =\n    showPasswordSection || showTotpSection || showPasskeySection;\n\n  return (\n    <AppLayout\n      headerActions={\n        <TRButton\n          appearance=\"ghost\"\n          /*\n            The visible label collapses below `sm:`, which would leave the\n            control unnamed on a phone. `profile.logout` is the same string\n            the label renders, so this does not shadow it.\n          */\n          aria-label={t('profile.logout')}\n          data-testid=\"profile-logout\"\n          disabled={logoutMutation.isPending}\n          loading={logoutMutation.isPending}\n          onClick={() => logoutMutation.mutate()}\n          type=\"button\"\n          uiSize=\"sm\"\n        >\n          {logoutMutation.isPending ? undefined : (\n            <>\n              <LogOutIcon aria-hidden className=\"size-tinyrack-lg\" />\n              <TRText as=\"span\" className=\"hidden sm:inline\" variant=\"bodySm\">\n                {t('profile.logout')}\n              </TRText>\n            </>\n          )}\n        </TRButton>\n      }\n    >\n      {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural profile identity row; descendants own visible typography. */}\n      <div className=\"flex items-center gap-tinyrack-lg\">\n        <InitialAvatar email={user.email} size=\"lg\" />\n        {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural profile heading group; descendants own visible typography. */}\n        <div className=\"flex min-w-0 flex-col gap-tinyrack-3xs\">\n          <AuthPageHeader title={t('profile.title')} />\n          {/*\n            Rendered here rather than as the header's `subtitle`: this node\n            carries a testid and needs to truncate, neither of which the\n            shared header does, and growing its API for one non-auth caller\n            would be the wrong trade.\n          */}\n          <TRText\n            as=\"p\"\n            color=\"muted\"\n            data-testid=\"profile-user-email\"\n            truncate\n            variant=\"bodySm\"\n          >\n            {user.email}\n          </TRText>\n        </div>\n      </div>\n\n      {oauthErrorMessage && (\n        <Alert icon={CircleAlertIcon} type=\"error\">\n          {oauthErrorMessage}\n        </Alert>\n      )}\n\n      {user && <UserInfoSection user={user} />}\n\n      {hasSecurityOptions && (\n        <TRCard.Root variant=\"outlined\">\n          <TRCard.Header className=\"border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md\">\n            <TRCard.Title>{t('profile.security.title')}</TRCard.Title>\n            <TRCard.Description>\n              {t('profile.security.description')}\n            </TRCard.Description>\n          </TRCard.Header>\n          {showTotpSection && user.totp_recovery_codes_missing && (\n            <div\n              className=\"border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md\"\n              data-testid=\"profile-totp-recovery-warning\"\n            >\n              <Alert icon={CircleAlertIcon} type=\"warning\">\n                {t('profile.totp.recoveryCodesMissing')}\n              </Alert>\n            </div>\n          )}\n          <TRCard.Content className=\"divide-y divide-tinyrack-border p-0\">\n            {showPasswordSection && (\n              <PasswordSection\n                hasLinkedOAuth={hasLinkedOAuth}\n                hasPassword={user.has_password}\n                hasSecondFactorOnly={\n                  user.has_password &&\n                  !hasLinkedOAuth &&\n                  (user.totp_registered || user.passkey_count > 0)\n                }\n                isConfigManaged={isConfigManaged}\n                onOpenModal={setPasswordModal}\n              />\n            )}\n            {showTotpSection && (\n              <TotpSection\n                onOpenModal={setTotpModal}\n                recoveryCodesMissing={user.totp_recovery_codes_missing}\n                totpEnabled={user.totp_registered}\n              />\n            )}\n            {showPasskeySection && (\n              <PasskeySection\n                onOpenModal={setPasskeyModal}\n                passkeyCount={user.passkey_count}\n              />\n            )}\n          </TRCard.Content>\n        </TRCard.Root>\n      )}\n\n      {showLinkedAccounts && (\n        <LinkedAccountsSection\n          getAuthorizeUrl={getOAuthAuthorizeUrl}\n          onUnlinkRequest={(provider) =>\n            setUnlinkModal({\n              id: provider.id,\n              name: provider.display_name,\n            })\n          }\n          providers={availableProviders}\n          unlinkingProvider={unlinkingProvider}\n        />\n      )}\n\n      <DangerZoneSection\n        isConfigManaged={isConfigManaged}\n        isDeletionEnabled={accountDeletionEnabled}\n        onDeleteClick={() => setShowDeleteModal(true)}\n      />\n\n      <SetPasswordModal\n        isOpen={passwordModal === 'set'}\n        onClose={() => setPasswordModal(null)}\n      />\n      <ChangePasswordModal\n        isOpen={passwordModal === 'change'}\n        onClose={() => setPasswordModal(null)}\n      />\n      <RemovePasswordModal\n        isOpen={passwordModal === 'remove'}\n        onClose={() => setPasswordModal(null)}\n      />\n\n      <SetupTotpModal\n        isOpen={totpModal === 'setup'}\n        onClose={() => setTotpModal(null)}\n      />\n      <DisableTotpModal\n        isOpen={totpModal === 'disable'}\n        onClose={() => setTotpModal(null)}\n      />\n      <RegenerateTotpRecoveryCodesModal\n        isOpen={totpModal === 'regenerate'}\n        onClose={() => setTotpModal(null)}\n      />\n\n      <SetupPasskeyModal\n        isOpen={passkeyModal === 'setup'}\n        onClose={() => setPasskeyModal(null)}\n      />\n      <ManagePasskeysModal\n        isOpen={passkeyModal === 'manage'}\n        onAddNew={() => setPasskeyModal('setup')}\n        onClose={() => setPasskeyModal(null)}\n      />\n\n      <UnlinkOAuthModal\n        isOpen={unlinkModal !== null}\n        isPending={unlinkMutation.isPending}\n        onClose={() => setUnlinkModal(null)}\n        onConfirm={handleUnlinkConfirm}\n        providerName={unlinkModal?.name ?? ''}\n      />\n\n      <DeleteAccountModal\n        isOpen={showDeleteModal}\n        onClose={() => setShowDeleteModal(false)}\n        retentionDays={retentionDays}\n      />\n    </AppLayout>\n  );\n}\n"],"x_google_ignoreList":[0,1,2,3],"mappings":"u8CAYA,IAAM,GAAQ,EAAiB,QAASA,CAFtC,CAAC,OAAQ,CAAE,EAAG,sDAAuD,IAAK,QAAS,CAAC,CAE9CA,CAAU,ECG5C,GAAW,EAAiB,aAAcC,CAL9C,CAAC,OAAQ,CAAE,EAAG,wBAAyB,IAAK,QAAS,CAAC,EACtD,CAAC,OAAQ,CAAE,EAAG,wBAAyB,IAAK,QAAS,CAAC,EACtD,CAAC,OAAQ,CAAE,GAAI,IAAK,GAAI,KAAM,GAAI,KAAM,GAAI,KAAM,IAAK,QAAS,CAAC,EACjE,CAAC,OAAQ,CAAE,GAAI,IAAK,GAAI,KAAM,GAAI,IAAK,GAAI,KAAM,IAAK,QAAS,CAAC,CAElBA,CAAU,ECIpD,GAAS,EAAiB,SAAUC,CATxC,CACE,OACA,CACE,EAAG,mIACH,IAAK,QACP,CACF,EACA,CAAC,OAAQ,CAAE,EAAG,YAAa,IAAK,QAAS,CAAC,CAEFA,CAAU,ECN9C,GAAa,EAAiB,aAAc,CAHhD,CAAC,OAAQ,CAAE,MAAO,KAAM,OAAQ,KAAM,EAAG,IAAK,EAAG,IAAK,GAAI,IAAK,GAAI,IAAK,IAAK,QAAS,CAAC,EACvF,CAAC,OAAQ,CAAE,EAAG,aAAc,IAAK,QAAS,CAAC,CAEK,CAAU,mBCD5D,SAAA,GAAA,CAAA,kBAAA,oBAAA,iBAAA,q1CA0DA,CCxCA,SAAgB,GAAa,CAC3B,aACA,UACA,YAAY,oBACQ,CAapB,OAXE,IAAe,UACf,IAAe,UACf,IAAe,SAGb,EAAA,EAAA,IAAA,CAAC,EAAD,CAAgB,cAAA,GAAuB,YAAW,SAAU,CAAa,CAAA,EAGzE,GACK,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,IAAI,GAAc,YAAW,IAAK,CAAU,CAAA,GAEnD,EAAA,EAAA,IAAA,CAAC,EAAD,CAAU,cAAA,GAAuB,WAAY,CAAA,CACtD,CCpBA,SAAgB,EAAY,CAC1B,OACA,SACA,QACA,SACA,OACA,WACmB,CAOnB,IAAI,EAiBJ,MAhBA,CAIE,GAJF,EAAA,EAAA,eAAA,CAAmB,CAAI,EACd,GAIL,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAA,GACA,UAAW,oBACT,EACI,mCACA,4BAEP,CAAA,GAMH,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,2EAAf,EAEE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,4DAAf,EAEE,EAAA,EAAA,IAAA,CAAC,MAAD,CACE,UAAW,wEACT,EAAS,8BAAgC,uCAG1C,CACE,CAAA,GAEL,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,yDAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,GAAG,MAAM,QAAQ,SAAS,OAAO,kBACtC,CACK,CAAA,GACR,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,GAAG,MAAM,MAAM,QAAQ,QAAQ,mBACpC,CACK,CAAA,EACP,CACE,GACF,IACJ,IAEC,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAU,+DACZ,CACE,CAAA,CAEJ,GAET,CClEA,SAAgB,GAAsB,CACpC,YACA,oBACA,kBACA,mBAC6B,CAC7B,GAAM,CAAE,KAAM,EAAe,EAM7B,OAJI,EAAU,SAAW,EAChB,MAIP,EAAA,EAAA,KAAA,CAAC,EAAO,KAAR,CAAa,QAAQ,oBAArB,EACE,EAAA,EAAA,KAAA,CAAC,EAAO,OAAR,CAAe,UAAU,0FAAzB,EACE,EAAA,EAAA,IAAA,CAAC,EAAO,MAAR,CAAA,SAAe,EAAE,8BAA8B,CAAgB,CAAA,GAC/D,EAAA,EAAA,IAAA,CAAC,EAAO,YAAR,CAAA,SACG,EAAE,oCAAoC,CACrB,CAAA,CACP,KACf,EAAA,EAAA,IAAA,CAAC,EAAO,QAAR,CAAgB,UAAU,+CACvB,EAAU,IAAK,IACd,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,QACE,EAAS,QACP,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,OAAO,SACP,QAAS,IAAsB,EAAS,GACxC,aAAc,EAAE,kCAAkC,EAClD,YAAe,EAAgB,CAAQ,EACvC,KAAK,SACL,OAAO,cAEN,IAAsB,EAAS,GAE5B,IAAA,GADA,EAAE,+BAA+B,CAE7B,CAAA,GAEV,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,WAAW,UACX,OAAO,UACP,QACE,EAAA,EAAA,IAAA,CAAC,IAAD,CACE,KAAM,EAAgB,EAAS,GAAI,OAAQ,UAAU,CACtD,CAAA,EAEH,OAAO,cAEN,EAAE,6BAA6B,CACpB,CAAA,EAGlB,OAAQ,EAAS,OAOjB,MACE,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,UAAU,mBACV,QAAS,EAAS,SAClB,WAAY,EAAS,EACtB,CAAA,EAGH,OACE,EAAS,OACL,EAAE,kCAAkC,EACpC,EAAE,qCAAqC,EAE7C,MAAO,EAAS,YACjB,EAPM,EAAS,EAOf,CACF,CACa,CAAA,CACL,GAEjB,CC5FA,SAAgB,GAAe,CAC7B,eACA,eACsB,CACtB,GAAM,CAAE,KAAM,EAAe,EACvB,EAAc,EAAe,EAEnC,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,SACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,OAAO,UACP,YAAe,EAAY,EAAc,SAAW,OAAO,EAC3D,KAAK,SACL,OAAO,cAEQ,EAAd,EAAgB,yBAA8B,qBAAqB,CAC5D,CAAA,EAEZ,OAAQ,EACR,KAAM,EACN,OACE,EACI,EAAE,iCAAkC,CAAE,MAAO,CAAa,CAAC,EAC3D,EAAE,iCAAiC,EAEzC,MAAO,EAAE,uBAAuB,CACjC,CAAA,CAEL,CCzBA,SAAgB,GAAgB,CAC9B,cACA,iBACA,kBACA,sBACA,eACuB,CACvB,GAAM,CAAE,KAAM,EAAe,EAE7B,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,QACE,EAAkB,IAAA,GAAY,GAC5B,EAAA,EAAA,KAAA,CAAA,EAAA,SAAA,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,cAAY,0BACZ,OAAO,UACP,YAAe,EAAY,QAAQ,EACnC,KAAK,SACL,OAAO,cAEN,EAAE,yBAAyB,CACpB,CAAA,EACT,GACC,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,cAAY,0BACZ,OAAO,SACP,YAAe,EAAY,QAAQ,EACnC,KAAK,SACL,OAAO,cAEN,EAAE,yBAAyB,CACpB,CAAA,EACR,KACH,CAAC,GAAkB,IAClB,EAAA,EAAA,KAAA,CAAC,EAAU,KAAX,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAU,QAAX,CACE,QACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,SAAA,GACA,KAAK,SACL,OAAO,cAEN,EAAE,yBAAyB,CACpB,CAAA,CAEb,CAAA,GACD,EAAA,EAAA,IAAA,CAAC,EAAU,OAAX,CAAA,UACE,EAAA,EAAA,IAAA,CAAC,EAAU,WAAX,CAAA,UACE,EAAA,EAAA,IAAA,CAAC,EAAU,MAAX,CAAiB,UAAU,sLACzB,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,4CAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAA,GACA,UAAU,4DACX,CAAA,GACD,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,GAAG,MAAM,QAAQ,mBACtB,EAAE,uCAAuC,CACpC,CAAA,CACL,GACU,CAAA,CACG,CAAA,CACN,CAAA,CACJ,CAAA,CAAA,CAElB,CAAA,CAAA,GAEF,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,cAAY,uBACZ,OAAO,UACP,YAAe,EAAY,KAAK,EAChC,KAAK,SACL,OAAO,cAEN,EAAE,sBAAsB,CACjB,CAAA,EAGd,OAAQ,EACR,KAAM,EACN,KACE,GACE,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,GAAG,MACH,UAAU,oCACV,MAAM,QACN,QAAQ,mBAJV,EAME,EAAA,EAAA,IAAA,CAAC,EAAD,CAAc,cAAA,GAAY,UAAU,2BAA6B,CAAA,GACjE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,GAAG,OAAO,MAAM,QAAQ,QAAQ,mBACrC,EAAE,gCAAgC,CAC7B,CAAA,CACF,IACN,IAAA,GAEN,OAEM,EADJ,EACM,8BACA,gCAAgC,EAExC,MAAO,EAAE,wBAAwB,CAClC,CAAA,CAEL,CC9GA,SAAgB,GAAY,CAC1B,cACA,uBACA,eACmB,CACnB,GAAM,CAAE,KAAM,EAAe,EAE7B,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,QACE,GACE,EAAA,EAAA,KAAA,CAAA,EAAA,SAAA,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,cAAY,0BACZ,OAAO,UACP,YAAe,EAAY,YAAY,EACvC,KAAK,SACL,OAAO,cAEN,EAAE,yBAAyB,CACpB,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,cAAY,uBACZ,OAAO,SACP,YAAe,EAAY,SAAS,EACpC,KAAK,SACL,OAAO,cAEN,EAAE,sBAAsB,CACjB,CAAA,CACV,CAAA,CAAA,GAEF,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,cAAY,sBACZ,OAAO,UACP,YAAe,EAAY,OAAO,EAClC,KAAK,SACL,OAAO,cAEN,EAAE,qBAAqB,CAChB,CAAA,EAGd,OAAQ,EACR,KAAM,EACN,OAGQ,EAFN,EACI,EACI,2CACA,8BACF,8BAA8B,EAEtC,MAAO,EAAE,oBAAoB,CAC9B,CAAA,CAEL,CC5DA,IAAM,GAAqE,CACzE,MAAO,EACP,QAAS,EACT,KAAM,CACR,EAQA,SAAgB,EAAY,CAAE,UAAS,YAA8B,CACnE,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAa,gBAAgB,IAC7B,KAAM,GAAa,GACnB,KAAM,EAEL,UACI,CAAA,CAEX,CClBA,SAAgB,GAAiB,CAC/B,SACA,UACA,eACA,YACA,aACwB,CACxB,GAAM,CAAE,KAAM,EAAe,EACvB,CAAC,EAAO,IAAA,EAAA,EAAA,SAAA,CAAoC,IAAI,EAEhD,MAAoB,CACpB,IACJ,EAAS,IAAI,EACb,EAAQ,EACV,EAYA,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,YAAa,EAAE,iDAAkD,CAC/D,SAAU,CACZ,CAAC,EACD,KAAM,GACE,SACR,QAAS,EACT,aAAc,EACd,MAAO,EAAE,0CAA0C,EACnD,QAAQ,wBAGR,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,wDAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,mBAClB,EAAE,6CAA8C,CAC/C,SAAU,CACZ,CAAC,CACU,CAAA,EAEZ,IAAS,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,iBAAS,CAAmB,CAAA,GAE3D,EAAA,EAAA,KAAA,CAAC,EAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,cAAY,sBACZ,SAAU,EACV,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,2CAA2C,CACtC,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAY,sBACZ,SAAU,EACV,OAAO,SACP,QAAS,EACT,aAAc,EAAE,kCAAkC,EAClD,QAAS,SAlDe,CAChC,EAAS,IAAI,EACb,GAAI,CACF,MAAM,EAAU,EAChB,EAAY,CACd,MAAQ,CACN,EAAS,EAAE,oCAAoC,CAAC,CAClD,CACF,EA2CU,KAAK,SACL,OAAO,cAEN,EAAE,+BAA+B,CAC1B,CAAA,CACE,CAAA,CAAA,CACX,GACA,CAAA,CAEX,CCvFA,SAAS,EAAQ,CAAE,QAAO,SAA2C,CACnE,OACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,2FAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,UAAU,WAAW,MAAM,QAAQ,QAAQ,mBAChD,CACK,CAAA,GACR,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,SAAA,GAAS,QAAQ,SAAS,OAAO,kBACtC,CACK,CAAA,CACL,GAET,CASA,SAAgB,GAAgB,CAAE,QAA8B,CAC9D,GAAM,CAAE,GAAM,EAAe,EAE7B,OACE,EAAA,EAAA,KAAA,CAAC,EAAO,KAAR,CAAa,QAAQ,oBAArB,EACE,EAAA,EAAA,KAAA,CAAC,EAAO,OAAR,CAAe,UAAU,0FAAzB,EACE,EAAA,EAAA,IAAA,CAAC,EAAO,MAAR,CAAA,SAAe,EAAE,uBAAuB,CAAgB,CAAA,GACxD,EAAA,EAAA,IAAA,CAAC,EAAO,YAAR,CAAA,SACG,EAAE,6BAA6B,CACd,CAAA,CACP,KACf,EAAA,EAAA,KAAA,CAAC,EAAO,QAAR,CAAgB,UAAU,+CAA1B,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAS,MAAO,EAAE,kBAAkB,EAAG,MAAO,EAAK,GAAM,CAAA,GACzD,EAAA,EAAA,IAAA,CAAC,EAAD,CAAS,MAAO,EAAE,qBAAqB,EAAG,MAAO,EAAK,KAAQ,CAAA,CAChD,GACL,GAEjB,CCjBA,SAAgB,GAAU,CAAE,WAAU,iBAAiC,CACrE,OAEE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,uDAAf,EAME,EAAA,EAAA,IAAA,CAAC,EAAD,CAAU,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CAAgB,QAAS,EAAe,MAAA,EAAO,CAAA,GAC/C,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAU,qEAMd,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAU,kFACZ,UACE,CAAA,CACD,CAAA,GACN,EAAA,EAAA,IAAA,CAAC,EAAD,CAAc,CAAA,CACX,GAET,CCrCA,IAAa,GAA6B,EAAgB,CACxD,WAAY,KAAO,IAIV,EAAO,MAHI,EAAO,IAAI,KAAK,SAAS,MAAM,CAC/C,KAAM,CACR,CAAC,CACgB,CAErB,CAAC,EASY,GAAgC,EAAgB,CAC3D,WAAY,KAAO,IAIV,EAAO,MAHI,EAAO,IAAI,KAAK,SAAS,KAAK,CAC9C,KAAM,CACR,CAAC,CACgB,CAErB,CAAC,EAUY,GAAgC,EAAgB,CAC3D,WAAY,KAAO,IAIV,EAAO,MAHI,EAAO,IAAI,KAAK,SAAS,QAAQ,CACjD,KAAM,CACR,CAAC,CACgB,CAErB,CAAC,ECzBD,SAAgB,GAAoB,CAClC,SACA,WAC2B,CAC3B,GAAM,CAAE,KAAM,EAAe,EACvB,EAAc,EAAe,EAC7B,CAAE,KAAM,GAAe,EAAiB,CAAqB,EAC7D,EAAiB,EAAW,KAAK,SAAS,OA8B1C,EAAO,EAAQ,CACnB,SAAU,GAAA,EAAA,EAAA,QAAA,KA3BR,EACG,OAAO,CACN,gBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,EAAG,EAAE,8BAA8B,CAAC,EACpE,YAAa,EACV,OAAO,CAAC,CACR,IACC,EAAe,WACf,EAAE,0BAA2B,CAC3B,MAAO,EAAe,UACxB,CAAC,CACH,CAAC,CACA,IACC,EAAe,WACf,EAAE,0BAA2B,CAC3B,MAAO,EAAe,UACxB,CAAC,CACH,EACF,gBAAiB,EAAE,OAAO,CAC5B,CAAC,CAAC,CACD,OAAQ,GAAS,EAAK,cAAgB,EAAK,gBAAiB,CAC3D,QAAS,EAAE,qCAAqC,EAChD,KAAM,CAAC,iBAAiB,CAC1B,CAAC,EACL,CAAC,EAAe,WAAY,EAAe,WAAY,CAAC,CAIvB,CAAM,EACvC,cAAe,CACb,gBAAiB,GACjB,YAAa,GACb,gBAAiB,EACnB,CACF,CAAC,EAEK,EAAW,EAAY,CAC3B,GAAG,GACH,cAAiB,CACf,EAAY,kBAAkB,CAC5B,SAAU,EAAuB,QACnC,CAAC,EACD,EAAY,CACd,CACF,CAAC,EAEK,MAAoB,CACxB,EAAK,MAAM,EACX,EAAQ,CACV,EAEM,EAAe,EAAK,aAAa,KAAO,IAAS,CACrD,GAAI,CACF,MAAM,EAAS,YAAY,CACzB,iBAAkB,EAAK,gBACvB,aAAc,EAAK,WACrB,CAAC,CACH,OAAS,EAAK,CAEV,aAAe,GACf,EAAI,OAAS,2BAEb,EAAK,SAAS,kBAAmB,CAC/B,QAAS,EAAE,6CAA6C,CAC1D,CAAC,EAED,EAAK,SAAS,OAAQ,CACpB,QAAS,EAAE,oCAAoC,CACjD,CAAC,CAEL,CACF,CAAC,EAED,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,YAAa,EAAE,0CAA0C,EACzD,KAAM,EACE,SACR,QAAS,EACT,MAAO,EAAE,oCAAoC,YAE7C,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,UAAU,+CACV,SAAU,WAFZ,EAIE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAO,EAAK,UAAU,OAAO,gBAC7B,YAAY,wCACZ,GAAG,mBACH,MAAO,EAAE,8CAA8C,EACvD,YAAa,EACX,yDACF,EACA,GAAI,EAAK,SAAS,iBAAiB,EACnC,KAAK,UACN,CAAA,GACD,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAO,EAAK,UAAU,OAAO,YAC7B,YAAY,oCACZ,GAAG,sBACH,MAAO,EAAE,0CAA0C,EACnD,YAAa,EAAE,qDAAqD,EACpE,GAAI,EAAK,SAAS,aAAa,EAC/B,KAAK,UACN,CAAA,GACD,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAO,EAAK,UAAU,OAAO,gBAC7B,YAAY,wCACZ,GAAG,0BACH,MAAO,EAAE,8CAA8C,EACvD,YAAa,EACX,yDACF,EACA,GAAI,EAAK,SAAS,iBAAiB,EACnC,KAAK,UACN,CAAA,EACA,EAAK,UAAU,OAAO,OACrB,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,iBAClB,EAAK,UAAU,OAAO,KAAK,OACjB,CAAA,GAEf,EAAA,EAAA,KAAA,CAAC,EAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,cAAY,yBACZ,SAAU,EAAS,UACnB,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,qCAAqC,CAChC,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAY,yBACZ,SAAU,EAAS,UACnB,OAAO,UACP,QAAS,EAAS,UAClB,aAAc,EAAE,yCAAyC,EACzD,KAAK,SACL,OAAO,cAEN,EAAS,UACN,IAAA,GACA,EAAE,qCAAqC,CACnC,CAAA,CACE,CAAA,CAAA,CACR,GACH,CAAA,CAEX,CCjLA,IAAa,GAA+B,EAAgB,CAC1D,WAAY,SAEH,EAAO,MADI,EAAO,IAAI,KAAK,QAAQ,CACzB,CAErB,CAAC,ECUD,SAAgB,GAAmB,CACjC,SACA,UACA,iBAC0B,CAC1B,GAAM,CAAE,KAAM,EAAe,EACvB,EAAS,EAAU,EACnB,EAAc,EAAe,EAiB7B,EAAO,EAAQ,CACnB,SAAU,GAAA,EAAA,EAAA,QAAA,KAdR,EAAE,OAAO,CACP,aAAc,EACX,OAAO,CAAC,CACR,OACE,GACC,EAAI,YAAY,IAChB,EAAE,gDAAgD,CAAC,CAAC,YAAY,EAClE,CAAE,QAAS,EAAE,iCAAiC,CAAE,CAClD,CACJ,CAAC,EACH,CAAC,CAAC,CAI+B,CAAM,EACvC,cAAe,CAAE,aAAc,EAAG,CACpC,CAAC,EAEK,EAAW,EAAY,CAC3B,GAAG,GACH,UAAW,SAAY,CACrB,EAAY,aAAa,EAAuB,SAAU,CACxD,KAAM,IACR,CAAC,EACD,MAAM,EAAK,EACX,EAAO,SAAS,CAAE,GAAI,QAAS,CAAC,CAClC,CACF,CAAC,EAEK,MAAoB,CACpB,EAAS,YACb,EAAK,MAAM,EACX,EAAQ,EACV,EAEM,EAAe,EAAK,aAAa,SAAY,CACjD,GAAI,CACF,MAAM,EAAS,YAAY,CAC7B,MAAQ,CACN,EAAK,SAAS,OAAQ,CACpB,QAAS,EAAE,6BAA6B,CAC1C,CAAC,CACH,CACF,CAAC,EAED,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,KAAM,EACE,SACR,QAAS,EACT,aAAc,EAAS,UACvB,MAAO,EAAE,mCAAmC,EAC5C,QAAQ,wBAER,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,UAAU,+CACV,SAAU,WAFZ,EAIE,EAAA,EAAA,KAAA,CAAC,EAAD,CAAa,QAAQ,iBAArB,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,GAAG,OAAO,QAAQ,kBACvB,EAAE,0CAA2C,CAC5C,KAAM,CACR,CAAC,CACK,CAAA,GACR,EAAA,EAAA,IAAA,CAAC,KAAD,CAAK,CAAA,GACL,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,GAAG,OACH,UAAU,yBACV,QAAQ,mBAEP,EAAE,qCAAqC,CAClC,CAAA,CACG,KAEb,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,aAAa,MACb,MAAO,EAAK,UAAU,OAAO,aAC7B,YAAY,uBACZ,GAAG,sBACH,MAAO,EAAE,0CAA0C,EACnD,YAAa,EAAE,gDAAgD,EAC/D,GAAI,EAAK,SAAS,cAAc,EAChC,KAAK,MACN,CAAA,EAEA,EAAK,UAAU,OAAO,OACrB,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,iBAClB,EAAK,UAAU,OAAO,KAAK,OACjB,CAAA,GAGf,EAAA,EAAA,KAAA,CAAC,EAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,cAAY,wBACZ,SAAU,EAAS,UACnB,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,oCAAoC,CAC/B,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAY,wBACZ,SAAU,EAAS,UACnB,OAAO,SACP,QAAS,EAAS,UAClB,aAAc,EAAE,wCAAwC,EACxD,KAAK,SACL,OAAO,cAEN,EAAS,UACN,IAAA,GACA,EAAE,qCAAqC,CACnC,CAAA,CACE,CAAA,CAAA,CACR,GACH,CAAA,CAEX,CCtIA,SAAgB,GAAiB,CAAE,SAAQ,WAAkC,CAC3E,GAAM,CAAE,KAAM,EAAe,EACvB,EAAc,EAAe,EAa7B,EAAO,EAAQ,CACnB,SAAU,GAAA,EAAA,EAAA,QAAA,KAVR,EAAE,OAAO,CACP,KAAM,EACH,OAAO,CAAC,CACR,OAAO,EAAG,EAAE,wBAAwB,CAAC,CAAC,CACtC,MAAM,UAAW,EAAE,wBAAwB,CAAC,CACjD,CAAC,EACH,CAAC,CAAC,CAI+B,CAAM,EACvC,cAAe,CAAE,KAAM,EAAG,CAC5B,CAAC,EAEK,EAAW,EAAY,CAC3B,GAAG,GACH,cAAiB,CACf,EAAY,kBAAkB,CAC5B,SAAU,EAAuB,QACnC,CAAC,EACD,EAAY,CACd,CACF,CAAC,EAEK,MAAoB,CACxB,EAAK,MAAM,EACX,EAAQ,CACV,EAEM,EAAe,EAAK,aAAa,KAAO,IAAS,CACrD,GAAI,CACF,MAAM,EAAS,YAAY,CAAE,KAAM,EAAK,IAAK,CAAC,CAChD,OAAS,EAAO,CACd,GAAI,aAAiB,GACf,EAAM,OAAS,mCAAoC,CACrD,EAAK,SAAS,OAAQ,CACpB,QAAS,EACP,wDACF,CACF,CAAC,EACD,MACF,CAEF,EAAK,SAAS,OAAQ,CACpB,QAAS,EAAE,iCAAiC,CAC9C,CAAC,CACH,CACF,CAAC,EAED,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,YAAa,EAAE,uCAAuC,EACtD,KAAM,EACE,SACR,QAAS,EACT,MAAO,EAAE,iCAAiC,EAC1C,QAAQ,wBAER,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,UAAU,+CACV,SAAU,WAFZ,EAIE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,mBAClB,EAAE,mCAAmC,CAC3B,CAAA,GAEb,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,aAAa,gBACb,MAAO,EAAK,UAAU,OAAO,KAC7B,YAAY,qBACZ,GAAG,oBACH,UAAU,UACV,MAAO,EAAE,qCAAqC,EAC9C,UAAW,EACX,QAAQ,SACR,YAAY,SACZ,GAAI,EAAK,SAAS,MAAM,EACxB,KAAK,MACN,CAAA,GAED,EAAA,EAAA,KAAA,CAAC,EAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,cAAY,sBACZ,SAAU,EAAS,UACnB,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,kCAAkC,CAC7B,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAY,sBACZ,SAAU,EAAS,UACnB,OAAO,SACP,QAAS,EAAS,UAClB,aAAc,EAAE,qCAAqC,EACrD,KAAK,SACL,OAAO,cAEN,EAAS,UACN,IAAA,GACA,EAAE,mCAAmC,CACjC,CAAA,CACE,CAAA,CAAA,CACR,GACH,CAAA,CAEX,CCnGA,SAAgB,GAAoB,CAClC,SACA,UACA,YAC2B,CAC3B,GAAM,CAAE,KAAM,EAAe,EACvB,EAAc,EAAe,EAC7B,CAAC,EAAgB,IAAA,EAAA,EAAA,SAAA,CACrB,IACF,EACM,CAAC,EAAY,IAAA,EAAA,EAAA,SAAA,CAAyC,IAAI,EAC1D,CAAC,EAAoB,IAAA,EAAA,EAAA,SAAA,CACzB,IACF,EACM,CAAC,EAAa,IAAA,EAAA,EAAA,SAAA,CAA0C,IAAI,EAE5D,CAAE,KAAM,EAAc,aAAc,EAAS,CACjD,GAAG,GACH,QAAS,CACX,CAAC,EAEK,EAAiB,EAAY,CACjC,GAAG,GACH,cAAiB,CACf,EAAY,kBAAkB,CAAE,SAAU,EAAU,SAAS,CAAE,CAAC,EAChE,EAAY,kBAAkB,CAC5B,SAAU,EAAuB,QACnC,CAAC,CACH,EACA,cAAiB,CACf,EAAc,IAAI,CACpB,CACF,CAAC,EAEK,GAAA,EAAA,EAAA,YAAA,KAAgC,CACpC,EAAkB,IAAI,EACtB,EAAc,IAAI,EAClB,EAAsB,IAAI,EAC1B,EAAe,IAAI,EACnB,EAAQ,CACV,EAAG,CAAC,CAAO,CAAC,EAEN,EAAuB,GAAyB,CACpD,EAAsB,EAAQ,EAAE,EAChC,EAAe,IAAI,CACrB,EAEM,MAA2B,CAC/B,EAAsB,IAAI,EAC1B,EAAe,IAAI,CACrB,EAEM,EAAsB,KAAO,IAAyB,CAC1D,EAAc,EAAQ,EAAE,EACxB,EAAsB,IAAI,EAC1B,GAAI,CACF,MAAM,EAAe,YAAY,CAAE,GAAI,EAAQ,EAAG,CAAC,CACrD,OAAS,EAAO,CACd,GAAI,aAAiB,GACf,EAAM,OAAS,mCAAoC,CACrD,EACE,EAAE,0DAA0D,CAC9D,EACA,MACF,CAEF,EAAe,EAAE,yCAAyC,CAAC,CAC7D,CACF,EAEM,EAAc,GACX,IAAI,KAAK,CAAU,CAAC,CAAC,mBAAmB,IAAA,GAAW,CACxD,KAAM,UACN,MAAO,QACP,IAAK,SACP,CAAC,EAGG,EAAW,GAAc,UAAY,CAAC,EAE5C,OACE,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,KAAM,EACE,SACR,QAAS,EACT,KAAK,KACL,MAAO,EAAE,mCAAmC,WAL9C,EAQE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,wDAAf,CACG,IACC,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,iBAAS,CAAyB,CAAA,EAGxD,IACC,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAU,+CACb,EAAA,EAAA,IAAA,CAAC,EAAD,CAAW,OAAO,IAAM,CAAA,CACrB,CAAA,EAGN,CAAC,GAAa,EAAS,SAAW,IACjC,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAM,SACN,UAAU,iBACV,MAAM,QACN,cAAY,iBACZ,QAAQ,kBAEP,EAAE,wCAAwC,CACrC,CAAA,EAGT,CAAC,GAAa,EAAS,OAAS,IAE/B,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAU,yCACZ,EAAS,IAAK,IACb,EAAA,EAAA,IAAA,CAAC,GAAD,CACc,aACZ,mBAAoB,IAAuB,EAAQ,GACnD,WAAY,IAAe,EAAQ,GACnC,UAAW,GAAgB,KAAO,EAAQ,GAE1C,eAAgB,EAChB,iBAAoB,EAAkB,IAAI,EAC1C,oBAAuB,EAAoB,CAAO,EAClD,WAAc,EAAkB,CAAO,EACvC,oBAAuB,EAAoB,CAAO,EACzC,SACV,EAPM,EAAQ,EAOd,CACF,CACE,CAAA,CAEJ,KAEL,EAAA,EAAA,KAAA,CAAC,EAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,cAAY,wBACZ,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,mCAAmC,CAC9B,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAY,0BACZ,OAAO,UACP,YAAe,CACb,EAAY,EACZ,EAAS,CACX,EACA,KAAK,SACL,OAAO,cAEN,EAAE,oCAAoC,CAC/B,CAAA,CACE,CAAA,CAAA,CACT,GAEX,CAeA,SAAS,GAAY,CACnB,UACA,aACA,YACA,qBACA,SACA,eACA,kBACA,kBACA,iBACA,cACmB,CACnB,GAAM,CAAE,KAAM,EAAe,EACvB,EAAc,EAAe,EAa7B,EAAO,EAAQ,CACnB,SAAU,GAAA,EAAA,EAAA,QAAA,KAVR,EAAE,OAAO,CACP,KAAM,EACH,OAAO,CAAC,CACR,IAAI,EAAG,EAAE,kCAAkC,CAAC,CAAC,CAC7C,IAAI,IAAK,EAAE,6BAA6B,CAAC,CAC9C,CAAC,EACH,CAAC,CAAC,CAI+B,CAAM,EACvC,cAAe,CAAE,KAAM,EAAQ,MAAQ,EAAG,CAC5C,CAAC,EAEK,EAAiB,EAAY,CACjC,GAAG,GACH,cAAiB,CACf,EAAY,kBAAkB,CAAE,SAAU,EAAU,SAAS,CAAE,CAAC,EAChE,EAAa,CACf,CACF,CAAC,EAEK,EAAe,EAAK,aAAa,KAAO,IAAS,CACrD,GAAI,CACF,MAAM,EAAe,YAAY,CAAE,GAAI,EAAQ,GAAI,KAAM,EAAK,IAAK,CAAC,CACtE,MAAQ,CACN,EAAK,SAAS,OAAQ,CACpB,QAAS,EAAE,yCAAyC,CACtD,CAAC,CACH,CACF,CAAC,EA8ED,OA5EI,GAEA,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,UAAU,4FACV,SAAU,WAFZ,EAIE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAY,uBACZ,MAAO,EAAK,UAAU,OAAO,KAC7B,YAAY,uBACZ,UAAA,GACA,MAAO,EAAE,uCAAuC,EAChD,YAAa,EAAE,6CAA6C,EAC5D,GAAI,EAAK,SAAS,MAAM,EACxB,KAAK,MACN,CAAA,GACD,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,4CAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,SAAU,EAAe,UACzB,YAAe,CACb,EAAK,MAAM,EACX,EAAa,CACf,EACA,KAAK,SACL,OAAO,cAEN,EAAE,wCAAwC,CACnC,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,SAAU,EAAe,UACzB,OAAO,UACP,KAAK,SACL,OAAO,cAEN,EAAe,UACZ,EAAE,oCAAoC,EACtC,EAAE,kCAAkC,CAChC,CAAA,CACP,GACC,IAIR,GAGA,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,+KAAf,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,6CAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAY,UAAU,kBAAoB,CAAA,GAC1C,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,MAAM,SAAS,QAAQ,mBAC5B,EAAE,iDAAiD,CAC9C,CAAA,CACL,KACL,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,gCAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,wCAAwC,CACnC,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,OAAO,SACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,oCAAoC,CAC/B,CAAA,CACP,GACF,KAMP,EAAA,EAAA,KAAA,CAAC,MAAD,CACE,UAAU,gGACV,cAAY,wBAFd,EAKE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,6CAAf,CACG,EAAQ,cAAgB,eACvB,EAAA,EAAA,IAAA,CAAC,GAAD,CAAW,UAAU,mDAAqD,CAAA,GAE1E,EAAA,EAAA,IAAA,CAAC,GAAD,CAAgB,UAAU,mDAAqD,CAAA,GAGjF,EAAA,EAAA,KAAA,CAAC,MAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,GAAG,MAAM,QAAQ,UAAU,OAAO,kBACvC,EAAQ,MAAQ,EAAE,4CAA4C,CACzD,CAAA,GAER,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,6CAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,MAAM,QAAQ,QAAQ,mBAC3B,EAAE,wCAAyC,CAC1C,KAAM,EAAW,EAAQ,UAAU,CACrC,CAAC,CACK,CAAA,EACP,EAAQ,YACP,EAAA,EAAA,IAAA,CAAC,EAAD,CAAS,OAAO,KAAK,QAAQ,mBAC1B,EAAE,sCAAsC,CAClC,CAAA,CAER,GACF,CAAA,CAAA,CACF,KACL,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,gCAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,aAAY,EAAE,oCAAoC,EAClD,QAAS,EACT,KAAK,SACL,OAAO,eAEP,EAAA,EAAA,IAAA,CAAC,GAAD,CAAY,UAAU,kBAAoB,CAAA,CAClC,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,aAAY,EAAE,oCAAoC,EAClD,SAAU,EACV,OAAO,SACP,QAAS,EACT,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAa,IAAA,IAAY,EAAA,EAAA,IAAA,CAAC,EAAD,CAAY,UAAU,kBAAoB,CAAA,CAC5D,CAAA,CACP,GACF,GAET,CC9WA,SAAgB,GAAiC,CAC/C,SACA,WACwC,CACxC,GAAM,CAAE,KAAM,EAAe,EACvB,EAAS,EAAU,EACnB,EAAc,EAAe,EAC7B,CAAE,KAAM,GAAc,EAAiB,CAAqB,EAC5D,CAAC,EAAM,IAAA,EAAA,EAAA,SAAA,CAAoC,QAAQ,EACnD,CAAC,EAAU,IAAA,EAAA,EAAA,SAAA,CACsC,IAAI,EACrD,CAAC,EAAc,IAAA,EAAA,EAAA,SAAA,CAA2C,IAAI,EAE9D,EAAW,EAAY,CAC3B,GAAG,GACH,UAAW,KAAO,IAAS,CACzB,EAAY,CAAI,EAChB,EAAQ,UAAU,EAClB,MAAM,EAAY,kBAAkB,CAClC,SAAU,EAAuB,QACnC,CAAC,CACH,CACF,CAAC,EAEK,GAAA,EAAA,EAAA,YAAA,KAA0B,CAC9B,EAAQ,QAAQ,EAChB,EAAY,IAAI,EAChB,EAAgB,IAAI,EACpB,EAAS,MAAM,CACjB,EAAG,CAAC,CAAQ,CAAC,EAEP,GAAA,EAAA,EAAA,YAAA,KAAgC,CACpC,EAAM,EACN,EAAQ,CACV,EAAG,CAAC,EAAS,CAAK,CAAC,EAEb,GAAA,EAAA,EAAA,YAAA,CACJ,KAAO,IAAiB,CACtB,EAAgB,IAAI,EAEpB,GAAI,CACF,MAAM,EAAS,YAAY,CAAE,MAAK,CAAC,CACrC,OAAS,EAAO,CACd,GAAI,aAAiB,EAAc,CACjC,GAAI,EAAM,OAAS,oBACjB,MAAM,EAGR,GAAI,EAAM,OAAS,eAAgB,CACjC,EAAY,aAAa,EAAuB,SAAU,CACxD,KAAM,IACR,CAAC,EACD,MAAM,EAAK,EACX,EAAO,SAAS,CAAE,GAAI,QAAS,CAAC,EAChC,MACF,CAEA,GACE,EAAM,OAAS,oBACf,EAAM,OAAS,mBACf,CACA,MAAM,EAAY,kBAAkB,CAClC,SAAU,EAAuB,QACnC,CAAC,EACD,EAAY,EACZ,MACF,CACF,CAEA,EAAgB,EAAE,8CAA8C,CAAC,CACnE,CACF,EACA,CAAC,EAAa,EAAU,EAAa,EAAQ,CAAC,CAChD,EAMA,OAJK,EAAU,KAAK,SAAS,KAAK,SAKhC,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,YAEM,EADJ,IAAS,SACH,2CACA,kDAAkD,EAE1D,KAAM,EACE,SACR,QAAS,EACT,aAAc,IAAS,WACvB,KAAK,KACL,MAEM,EADJ,IAAS,SACH,qCACA,4CAA4C,WAGnD,IAAS,UAER,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,0BAAf,CACG,IACC,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAU,2BACb,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,iBAAS,CAA0B,CAAA,CACrD,CAAA,GAEP,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,eAAgB,EAAE,oCAAoC,EACtD,UAAW,EAAS,UACpB,SAAU,EACV,YAAa,EAAE,yCAAyC,EACxD,YAAa,EAAE,qCAAqC,CACrD,CAAA,CACE,KAEL,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAU,2BACb,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,UAAW,EACX,cAAe,GAAU,gBAAkB,CAAC,CAC7C,CAAA,CACE,CAAA,CAEF,CAAA,EA7CA,IA+CX,CCnIA,SAAgB,GAAoB,CAClC,SACA,WAC2B,CAC3B,GAAM,CAAE,KAAM,EAAe,EACvB,EAAc,EAAe,EAU7B,EAAO,EAAQ,CACnB,SAAU,GAAA,EAAA,EAAA,QAAA,KAPR,EAAE,OAAO,CACP,gBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,EAAG,EAAE,8BAA8B,CAAC,CACtE,CAAC,EACH,CAAC,CAAC,CAI+B,CAAM,EACvC,cAAe,CAAE,gBAAiB,EAAG,CACvC,CAAC,EAEK,EAAW,EAAY,CAC3B,GAAG,GACH,cAAiB,CACf,EAAY,kBAAkB,CAC5B,SAAU,EAAuB,QACnC,CAAC,EACD,EAAY,CACd,CACF,CAAC,EAEK,MAAoB,CACxB,EAAK,MAAM,EACX,EAAQ,CACV,EAEM,EAAe,EAAK,aAAa,KAAO,IAAS,CACrD,GAAI,CACF,MAAM,EAAS,YAAY,CACzB,iBAAkB,EAAK,eACzB,CAAC,CACH,OAAS,EAAK,CACZ,GAAI,aAAe,EAAc,CAC/B,GAAI,EAAI,OAAS,2BAA4B,CAC3C,EAAK,SAAS,kBAAmB,CAC/B,QAAS,EAAE,6CAA6C,CAC1D,CAAC,EACD,MACF,CACA,GAAI,EAAI,OAAS,iCAAkC,CACjD,EAAK,SAAS,OAAQ,CACpB,QAAS,EAAE,sCAAsC,CACnD,CAAC,EACD,MACF,CACA,GAAI,EAAI,OAAS,iDAAkD,CACjE,EAAK,SAAS,OAAQ,CACpB,QAAS,EAAE,6CAA6C,CAC1D,CAAC,EACD,MACF,CACF,CACA,EAAK,SAAS,OAAQ,CACpB,QAAS,EAAE,oCAAoC,CACjD,CAAC,CACH,CACF,CAAC,EAED,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,YAAa,EAAE,0CAA0C,EACzD,KAAM,EACE,SACR,QAAS,EACT,MAAO,EAAE,oCAAoC,EAC7C,QAAQ,wBAER,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,UAAU,+CACV,SAAU,WAFZ,EAIE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAO,EAAK,UAAU,OAAO,gBAC7B,YAAY,wBACZ,GAAG,0BACH,MAAO,EAAE,8CAA8C,EACvD,YAAa,EACX,yDACF,EACA,GAAI,EAAK,SAAS,iBAAiB,EACnC,KAAK,UACN,CAAA,EACA,EAAK,UAAU,OAAO,OACrB,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,iBAClB,EAAK,UAAU,OAAO,KAAK,OACjB,CAAA,GAEf,EAAA,EAAA,KAAA,CAAC,EAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,cAAY,yBACZ,SAAU,EAAS,UACnB,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,qCAAqC,CAChC,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAY,yBACZ,SAAU,EAAS,UACnB,OAAO,SACP,QAAS,EAAS,UAClB,aAAc,EAAE,yCAAyC,EACzD,KAAK,SACL,OAAO,cAEN,EAAS,UACN,IAAA,GACA,EAAE,qCAAqC,CACnC,CAAA,CACE,CAAA,CAAA,CACR,GACH,CAAA,CAEX,CCzHA,SAAgB,GAAiB,CAAE,SAAQ,WAAkC,CAC3E,GAAM,CAAE,KAAM,EAAe,EACvB,EAAc,EAAe,EAC7B,CAAE,KAAM,GAAe,EAAiB,CAAqB,EAC7D,EAAiB,EAAW,KAAK,SAAS,OA6B1C,EAAO,EAAQ,CACnB,SAAU,GAAA,EAAA,EAAA,QAAA,KA1BR,EACG,OAAO,CACN,SAAU,EACP,OAAO,CAAC,CACR,IACC,EAAe,WACf,EAAE,0BAA2B,CAC3B,MAAO,EAAe,UACxB,CAAC,CACH,CAAC,CACA,IACC,EAAe,WACf,EAAE,0BAA2B,CAC3B,MAAO,EAAe,UACxB,CAAC,CACH,EACF,gBAAiB,EAAE,OAAO,CAC5B,CAAC,CAAC,CACD,OAAQ,GAAS,EAAK,WAAa,EAAK,gBAAiB,CACxD,QAAS,EAAE,qCAAqC,EAChD,KAAM,CAAC,iBAAiB,CAC1B,CAAC,EACL,CAAC,EAAe,WAAY,EAAe,WAAY,CAAC,CAIvB,CAAM,EACvC,cAAe,CAAE,SAAU,GAAI,gBAAiB,EAAG,CACrD,CAAC,EAEK,EAAW,EAAY,CAC3B,GAAG,GACH,cAAiB,CACf,EAAY,kBAAkB,CAC5B,SAAU,EAAuB,QACnC,CAAC,EACD,EAAY,CACd,CACF,CAAC,EAEK,MAAoB,CACxB,EAAK,MAAM,EACX,EAAQ,CACV,EAEM,EAAe,EAAK,aAAa,KAAO,IAAS,CACrD,GAAI,CACF,MAAM,EAAS,YAAY,CAAE,SAAU,EAAK,QAAS,CAAC,CACxD,MAAgB,CAEd,EAAK,SAAS,OAAQ,CACpB,QAAS,EAAE,iCAAiC,CAC9C,CAAC,CACH,CACF,CAAC,EAED,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,YAAa,EAAE,uCAAuC,EACtD,KAAM,EACE,SACR,QAAS,EACT,MAAO,EAAE,iCAAiC,YAE1C,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,UAAU,+CACV,SAAU,WAFZ,EAIE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAO,EAAK,UAAU,OAAO,SAC7B,YAAY,8BACZ,GAAG,eACH,MAAO,EAAE,uCAAuC,EAChD,YAAa,EAAE,kDAAkD,EACjE,GAAI,EAAK,SAAS,UAAU,EAC5B,KAAK,UACN,CAAA,GACD,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAO,EAAK,UAAU,OAAO,gBAC7B,YAAY,qCACZ,GAAG,mBACH,MAAO,EAAE,2CAA2C,EACpD,YAAa,EACX,sDACF,EACA,GAAI,EAAK,SAAS,iBAAiB,EACnC,KAAK,UACN,CAAA,EACA,EAAK,UAAU,OAAO,OACrB,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,iBAClB,EAAK,UAAU,OAAO,KAAK,OACjB,CAAA,GAEf,EAAA,EAAA,KAAA,CAAC,EAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,cAAY,sBACZ,SAAU,EAAS,UACnB,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,kCAAkC,CAC7B,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAY,sBACZ,SAAU,EAAS,UACnB,OAAO,UACP,QAAS,EAAS,UAClB,aAAc,EAAE,sCAAsC,EACtD,KAAK,SACL,OAAO,cAEN,EAAS,UACN,IAAA,GACA,EAAE,kCAAkC,CAChC,CAAA,CACE,CAAA,CAAA,CACR,GACH,CAAA,CAEX,CC/HA,SAAgB,GAAkB,CAChC,SACA,UACA,aAAa,GACb,kBAAkB,GAClB,kBACyB,CACzB,GAAM,CAAE,KAAM,EAAe,EACvB,EAAc,EAAe,EAC7B,CAAC,EAAM,IAAA,EAAA,EAAA,SAAA,CAA+B,MAAM,EAC5C,CAAC,EAAc,IAAA,EAAA,EAAA,SAAA,CAA2C,IAAI,EAc9D,EAAO,EAAQ,CACnB,SAAU,GAAA,EAAA,EAAA,QAAA,KAXR,EAAE,OAAO,CACP,KAAM,EACH,OAAO,CAAC,CACR,IAAI,IAAK,EAAE,6BAA6B,CAAC,CAAC,CAC1C,SAAS,CAAC,CACV,UAAW,GAAQ,GAAK,KAAK,GAAK,IAAA,EAAS,CAChD,CAAC,EACH,CAAC,CAAC,CAI+B,CAAM,EACvC,cAAe,CAAE,KAAM,EAAG,CAC5B,CAAC,EAEK,EAAmB,EAAY,CACnC,GAAG,GACH,cAAiB,CACf,EAAY,kBAAkB,CAAE,SAAU,EAAU,SAAS,CAAE,CAAC,EAChE,EAAY,kBAAkB,CAC5B,SAAU,EAAuB,QACnC,CAAC,EACD,EAAY,CACd,EACA,QAAU,GAAU,CAClB,EAAQ,MAAM,EACV,EAAM,OAAS,kBACjB,EAAgB,EAAE,sCAAsC,CAAC,EAEzD,EAAgB,EAAE,kCAAkC,CAAC,CAEzD,CACF,CAAC,EAEK,GAAA,EAAA,EAAA,YAAA,KAAgC,CACpC,EAAK,MAAM,EACX,EAAQ,MAAM,EACd,EAAgB,IAAI,EACpB,EAAQ,CACV,EAAG,CAAC,EAAM,CAAO,CAAC,EAEZ,EAAiB,EAAK,aAAa,KAAO,IAAS,CACvD,EAAQ,UAAU,EAClB,EAAgB,IAAI,EACpB,GAAI,CACF,MAAM,EAAiB,YAAY,CAAE,KAAM,EAAK,IAAK,CAAC,CACxD,MAAQ,CAER,CACF,CAAC,EAEK,EAAY,EAAiB,UAEnC,OACE,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,YACE,EACI,EAAE,gDAAgD,EAClD,IAAA,GAEN,KAAM,EACE,SACR,QAAS,EACT,aAAc,EACd,KAAK,KACL,MAAO,EAAE,kCAAkC,WAX7C,CAaG,IAAS,SACR,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,UAAU,+CACV,SAAU,WAFZ,EAIE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,GAAG,IAAI,MAAM,QAAQ,QAAQ,mBAClC,EAAE,wCAAwC,CACrC,CAAA,EAEP,IACC,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,iBAAS,CAA0B,CAAA,GAG1D,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAO,EAAK,UAAU,OAAO,KAC7B,YAAY,sBACZ,KAAM,EAAE,qCAAqC,EAC7C,GAAG,eACH,MAAO,EAAE,sCAAsC,EAC/C,YAAa,EAAE,4CAA4C,EAC3D,GAAI,EAAK,SAAS,MAAM,EACxB,KAAK,MACN,CAAA,GAED,EAAA,EAAA,KAAA,CAAC,EAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,cAAY,uBACZ,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,mCAAmC,CAC9B,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,cAAY,yBACZ,OAAO,UACP,KAAK,SACL,OAAO,cAEN,EAAE,qCAAqC,CAChC,CAAA,CACE,CAAA,CAAA,EACb,GAAmB,IAClB,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAM,SACN,GAAG,IACH,UAAU,iBACV,QAAQ,oBAER,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,yCAAyC,CACpC,CAAA,CACJ,CAAA,CAEJ,IAGT,IAAS,aACR,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,0BAAf,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CACE,UAAU,4DACV,cAAY,iCAFd,EAIE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAW,OAAO,IAAM,CAAA,GACxB,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,MAAM,SAAS,GAAG,IAAI,MAAM,QAAQ,QAAQ,mBACjD,EAAE,6CAA6C,CAC1C,CAAA,CACL,KAEL,EAAA,EAAA,IAAA,CAAC,EAAD,CAAA,UACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,cAAY,uBACZ,SAAU,EACV,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,mCAAmC,CAC9B,CAAA,CACE,CAAA,CACX,GAEF,GAEX,CCtLA,SAAgB,GAAe,CAC7B,SACA,UACA,aAAa,GACb,qBAAqB,GACrB,qBACsB,CACtB,GAAM,CAAE,KAAM,EAAe,EAEvB,CACJ,OACA,YACA,gBACA,iBACA,kBACA,mBACA,aACA,SACA,aACA,SACA,uBACA,SACE,EAAa,CACf,UAAW,GACX,qBAAwB,CACtB,EAAM,EACN,EAAQ,CACV,CACF,CAAC,EAEK,GAAA,EAAA,EAAA,YAAA,KAAgC,CACpC,EAAM,EACN,EAAQ,CACV,EAAG,CAAC,EAAS,CAAK,CAAC,EAEb,GAAA,EAAA,EAAA,YAAA,KAAoC,CACpC,CAAC,GAAa,CAAC,GACjB,EAAW,CAEf,EAAG,CAAC,EAAW,EAAgB,CAAU,CAAC,EAEtC,GAAU,CAAC,GAAa,CAAC,GAAkB,IAAS,SACtD,EAAgB,EAGlB,IAAM,GAAA,EAAA,EAAA,YAAA,CACJ,KAAO,IAAiB,CACtB,MAAM,EAAO,CAAI,CACnB,EACA,CAAC,CAAM,CACT,EAEM,EAEA,EADJ,IAAS,WACH,gCACA,+BAA+B,EAEvC,OACE,EAAA,EAAA,KAAA,CAAC,EAAD,CACE,YACE,EACI,EAAE,6CAA6C,EAC/C,IAAA,GAEN,KAAM,EACE,SACR,QAAS,EACT,aAAc,GAAc,IAAS,WACrC,KAAK,KACL,MAAO,WAXT,CAaG,IACC,EAAA,EAAA,IAAA,CAAC,MAAD,CACE,UAAU,qCACV,cAAY,+BAEZ,EAAA,EAAA,IAAA,CAAC,EAAD,CAAW,OAAO,IAAM,CAAA,CACrB,CAAA,EAGN,IAAS,UACR,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,wDAAf,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,QAAQ,iBAClB,EAAE,oCAAoC,CAC5B,CAAA,GACb,EAAA,EAAA,KAAA,CAAC,EAAD,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,gCAAgC,CAC3B,CAAA,GACV,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,+BAA+B,CAC1B,CAAA,CACE,CAAA,CAAA,CACX,IAGN,GAAa,IAAS,OACrB,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAU,2BACb,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,mBACE,EAAA,EAAA,KAAA,CAAA,EAAA,SAAA,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,EAAD,CAAA,UACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,UACX,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,gCAAgC,CAC3B,CAAA,CACE,CAAA,EACb,GAAsB,IACrB,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,MAAM,SACN,GAAG,IACH,UAAU,iBACV,QAAQ,oBAER,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QACX,OAAO,UACP,QAAS,EACT,KAAK,SACL,OAAO,cAEN,EAAE,yCAAyC,CACpC,CAAA,CACJ,CAAA,CAEV,CAAA,CAAA,EAEJ,OAAQ,EACG,WACZ,CAAA,CACE,CAAA,EAGN,GAAa,IAAS,WACrB,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAU,2BACb,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,UAAW,EACX,OAAQ,EACR,SAAU,CACX,CAAA,CACE,CAAA,EAGN,IAAS,YAAc,EAAc,OAAS,IAC7C,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAU,2BACb,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,UAAW,EACX,UAAW,EACI,eAChB,CAAA,CACE,CAAA,CAEF,GAEX,CCrIA,IAAM0C,GAA+C,CACnDE,cAAe,2BACfC,wBAAyB,qCACzBC,aAAc,yBAChB,EAiCA,SAASE,IAAU,CACjB,GAAM,CAAEC,KAAMtC,EAAe,EACvBuC,EAAS9C,EAAU,EACnB+C,EAAcjD,EAAe,EAG7BoD,EAFSP,GAAMM,UAEFD,CAAAA,CAAOG,YACpBC,EAAoBF,EACtBL,EAAEP,GAAqBY,IAAe,oBAAoB,EAC1DG,IAAAA,GACE,CAACC,EAAmBC,IAAAA,EAAAA,EAAAA,SAAAA,CACxB,IACF,EACM,CAACC,EAAaC,IAAAA,EAAAA,EAAAA,SAAAA,CAGV,IAAI,EACR,CAACG,EAAeC,IAAAA,EAAAA,EAAAA,SAAAA,CAAgD,IAAI,EACpE,CAACC,EAAWC,IAAAA,EAAAA,EAAAA,SAAAA,CAAwC,IAAI,EACxD,CAACC,EAAcC,IAAAA,EAAAA,EAAAA,SAAAA,CAA8C,IAAI,EACjE,CAACC,EAAiBC,IAAAA,EAAAA,EAAAA,SAAAA,CAA+B,EAAK,EAEtD,CAAEC,KAAMC,GAAYtE,EAAiBmC,CAAsB,EAC3D,CAAEkC,KAAME,GAAsBvE,EAClCiC,EACF,EACM,CAAEoC,KAAMG,GAAcxE,EAAiB8B,CAAqB,EAE5D2C,EAAiB3E,EAAY,CACjC,GAAGiC,GACH2C,UAAW,SAAY,CACrB1B,EAAY2B,aAAaxC,EAAuByC,SAAU,CACxDC,KAAM,IACR,CAAC,EACD,MAAMhD,EAAK,EACXkB,EAAO+B,SAAS,CACdC,GAAI,QACN,CAAC,CACH,EACAC,cAAiB,CACfhC,EAAYiC,kBAAkB,CAC5BL,SAAUzC,EAAuByC,QACnC,CAAC,CACH,CACF,CAAC,EAEKM,EAAiBpF,EAAY,CACjC,GAAGoC,GACHwC,cAAiB,CACf1B,EAAYiC,kBAAkB,CAC5BL,SAAU3C,GAA0B2C,QACtC,CAAC,CACH,EACAI,cAAiB,CACfxB,EAAqB,IAAI,CAC3B,CACF,CAAC,EAEK2B,EAAsB,SAAY,CACjC1B,IACLD,EAAqBC,EAAYE,EAAE,EACnC,MAAMuB,EAAeE,YAAY3B,EAAYE,EAAE,EACjD,EAEA,GAAI,CAACW,EAAQO,KACX,OAAO,KAGT,IAAMA,EAAOP,EAAQO,KACfQ,EAAqBd,EAAkBe,oBACvCC,EAAiBF,EAAmBG,KAAMC,GAAMA,EAAEC,MAAM,EACxDC,EAAkBd,EAAKe,aAAe,SAEtCC,EAAqBrB,EAAUsB,KAAKC,SACpCC,EAAoBxB,EAAUsB,KAAKG,QACnCC,EAAcL,EAAmBM,KAAKC,QACtCC,GAAiBL,EAAkBI,QAEnCE,EAAyB9B,EAAU+B,iBAAiBH,QACpDI,EAAkBhC,EAAU+B,iBAAiBE,UAE7CC,OAAuB,CAC3B,IAAMC,EAAQH,EAAgBG,MAAM,gBAAgB,EACpD,GAAI,CAACA,EAAO,MAAO,IACnB,IAAMC,EAAQC,SAASF,EAAM,GAAI,EAAE,EAEnC,OADaA,EAAM,GACnB,CACE,IAAK,IACH,OAAOC,EACT,IAAK,IACH,OAAOA,EAAQ,GACjB,IAAK,IACH,OAAOA,EAAQ,IACjB,QACE,MAAO,GACX,CACF,EAAA,CAAG,EAGGI,EAAkB,CAACrB,GAAmBO,EACtCe,GAAqB,CAACtB,GAAmBU,GACzCa,GAAqB7B,EAAmB8B,OAAS,EAIvD,OACE,EAAA,EAAA,KAAA,CAAC,GAAD,CACE,eACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,WAAW,QAMX,aAAYrE,EAAE,gBAAgB,EAC9B,cAAY,iBACZ,SAAU2B,EAAe4C,UACzB,QAAS5C,EAAe4C,UACxB,YAAe5C,EAAe6C,OAAO,EACrC,KAAK,SACL,OAAO,cAEN7C,EAAe4C,UAAY/D,IAAAA,IAC1B,EAAA,EAAA,KAAA,CAAA,EAAA,SAAA,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,GAAD,CAAY,cAAA,GAAY,UAAU,kBAAkB,CAAA,GACpD,EAAA,EAAA,IAAA,CAAC,EAAD,CAAQ,GAAG,OAAO,UAAU,mBAAmB,QAAQ,kBACpDR,EAAE,gBAAgB,CACb,CAAA,CACV,CAAA,CAAA,CAEM,CAAA,WAzBd,EA6BE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,6CAAf,EACE,EAAA,EAAA,IAAA,CAAC,GAAD,CAAe,MAAO+B,EAAK0C,MAAO,KAAK,IAAI,CAAA,GAE3C,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAU,kDAAf,EACE,EAAA,EAAA,IAAA,CAAC,GAAD,CAAgB,MAAOzE,EAAE,eAAe,CAAE,CAAA,GAO1C,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,GAAG,IACH,MAAM,QACN,cAAY,qBACZ,SAAA,GACA,QAAQ,kBAEP+B,EAAK0C,KACA,CAAA,CACL,GACF,IAEJlE,IACC,EAAA,EAAA,IAAA,CAAC,EAAD,CAAO,KAAMhD,EAAiB,KAAK,iBAChCgD,CACI,CAAA,EAGRwB,IAAQ,EAAA,EAAA,IAAA,CAAC,GAAD,CAAuBA,MAAK,CAAA,GAGnC,EAAA,EAAA,KAAA,CAAC,EAAO,KAAR,CAAa,QAAQ,oBAArB,EACE,EAAA,EAAA,KAAA,CAAC,EAAO,OAAR,CAAe,UAAU,0FAAzB,EACE,EAAA,EAAA,IAAA,CAAC,EAAO,MAAR,CAAA,SAAe/B,EAAE,wBAAwB,CAAgB,CAAA,GACzD,EAAA,EAAA,IAAA,CAAC,EAAO,YAAR,CAAA,SACGA,EAAE,8BAA8B,CACf,CAAA,CACP,IACdkE,GAAmBnC,EAAK2C,8BACvB,EAAA,EAAA,IAAA,CAAC,MAAD,CACE,UAAU,iFACV,cAAY,0CAEZ,EAAA,EAAA,IAAA,CAAC,EAAD,CAAO,KAAMnH,EAAiB,KAAK,mBAChCyC,EAAE,mCAAmC,CACjC,CAAA,CACJ,CAAA,GAEP,EAAA,EAAA,KAAA,CAAC,EAAO,QAAR,CAAgB,UAAU,+CAA1B,EAEI,EAAA,EAAA,IAAA,CAAC,GAAD,CACkByC,iBAChB,YAAaV,EAAK4C,aAClB,oBACE5C,EAAK4C,cACL,CAAClC,IACAV,EAAK6C,iBAAmB7C,EAAK8C,cAAgB,GAE/BhC,kBACjB,YAAa7B,CAAiB,CAAA,EAGjCkD,IACC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,YAAahD,EACb,qBAAsBa,EAAK2C,4BAC3B,YAAa3C,EAAK6C,eAAgB,CAAA,EAGrCT,KACC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,YAAa/C,EACb,aAAcW,EAAK8C,aAAc,CAAA,CAGvB,GACL,IAGdT,KACC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,gBAAiBlF,GACjB,gBAAkB4F,GAChBlE,EAAe,CACbC,GAAIiE,EAASjE,GACbC,KAAMgE,EAASC,YACjB,CAAC,EAEH,UAAWxC,EACQ9B,mBAAkB,CAAA,GAIzC,EAAA,EAAA,IAAA,CAAC,GAAD,CACmBoC,kBACjB,kBAAmBW,EACnB,kBAAqBlC,EAAmB,EAAI,CAAE,CAAA,GAGhD,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQP,IAAkB,MAC1B,YAAeC,EAAiB,IAAI,CAAE,CAAA,GAExC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQD,IAAkB,SAC1B,YAAeC,EAAiB,IAAI,CAAE,CAAA,GAExC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQD,IAAkB,SAC1B,YAAeC,EAAiB,IAAI,CAAE,CAAA,GAGxC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQC,IAAc,QACtB,YAAeC,EAAa,IAAI,CAAE,CAAA,GAEpC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQD,IAAc,UACtB,YAAeC,EAAa,IAAI,CAAE,CAAA,GAEpC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQD,IAAc,aACtB,YAAeC,EAAa,IAAI,CAAE,CAAA,GAGpC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQC,IAAiB,QACzB,YAAeC,EAAgB,IAAI,CAAE,CAAA,GAEvC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQD,IAAiB,SACzB,aAAgBC,EAAgB,OAAO,EACvC,YAAeA,EAAgB,IAAI,CAAE,CAAA,GAGvC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQT,IAAgB,KACxB,UAAWyB,EAAemC,UAC1B,YAAe3D,EAAe,IAAI,EAClC,UAAWyB,EACX,aAAc1B,GAAaG,MAAQ,EAAG,CAAA,GAGxC,EAAA,EAAA,IAAA,CAAC,GAAD,CACE,OAAQO,EACR,YAAeC,EAAmB,EAAK,EACxBsC,eAAc,CAAA,CAEtB,GAEf"}

package/public/assets/profile-k66ruDWl.js

@@ -1,2 +0,0 @@
-import{X as e}from"./createLucideIcon-D-yizrWN.js";import{B as t}from"./index-lTEyHSus.js";var n=e();function r(e){return(0,n.jsx)(t,{...e,onUnauthorized:()=>{window.location.href=`/login`}})}export{r as errorComponent};
-//# sourceMappingURL=profile-k66ruDWl.js.map

package/public/assets/profile-k66ruDWl.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile-k66ruDWl.js","names":["RouteErrorFallback","PasswordModalType","TotpModalType","PasskeyModalType","ProfileError","props","ErrorComponentProps","window","location","href","errorComponent"],"sources":["../../../frontend/src/routes/profile/index.tsx?tsr-split=errorComponent"],"sourcesContent":["import {\n  useMutation,\n  useQueryClient,\n  useSuspenseQuery,\n} from '@tanstack/react-query';\nimport {\n  createFileRoute,\n  type ErrorComponentProps,\n  redirect,\n  useRouter,\n} from '@tanstack/react-router';\nimport { TRButton } from '@tinyrack/ui/components/button';\nimport { TRCard } from '@tinyrack/ui/components/card';\nimport { TRText } from '@tinyrack/ui/components/text';\nimport { CircleAlertIcon, LogOutIcon } from 'lucide-react';\nimport { useState } from 'react';\nimport { useTranslation } from 'react-i18next';\nimport { z } from 'zod';\nimport { AuthPageHeader } from '#frontend/components/auth/auth-page-header.tsx';\nimport { DangerZoneSection } from '#frontend/components/profile/danger-zone-section.tsx';\nimport { LinkedAccountsSection } from '#frontend/components/profile/linked-accounts-section.tsx';\nimport { PasskeySection } from '#frontend/components/profile/passkey-section.tsx';\nimport { PasswordSection } from '#frontend/components/profile/password-section.tsx';\nimport { TotpSection } from '#frontend/components/profile/totp-section.tsx';\nimport { UnlinkOAuthModal } from '#frontend/components/profile/unlink-oauth-modal.tsx';\nimport { UserInfoSection } from '#frontend/components/profile/user-info-section.tsx';\nimport { Alert } from '#frontend/components/ui/alert.tsx';\nimport { InitialAvatar } from '#frontend/components/ui/initial-avatar.tsx';\nimport { RouteErrorFallback } from '#frontend/components/ui/route-error-fallback.tsx';\nimport { AppLayout } from '#frontend/features/layout/app-layout.tsx';\nimport { ChangePasswordModal } from '#frontend/features/profile/change-password-modal.tsx';\nimport { DeleteAccountModal } from '#frontend/features/profile/delete-account-modal.tsx';\nimport { DisableTotpModal } from '#frontend/features/profile/disable-totp-modal.tsx';\nimport { ManagePasskeysModal } from '#frontend/features/profile/manage-passkeys-modal.tsx';\nimport { RegenerateTotpRecoveryCodesModal } from '#frontend/features/profile/regenerate-totp-recovery-codes-modal.tsx';\nimport { RemovePasswordModal } from '#frontend/features/profile/remove-password-modal.tsx';\nimport { SetPasswordModal } from '#frontend/features/profile/set-password-modal.tsx';\nimport { SetupPasskeyModal } from '#frontend/features/profile/setup-passkey-modal.tsx';\nimport { SetupTotpModal } from '#frontend/features/profile/setup-totp-modal.tsx';\nimport { tick } from '#frontend/libs/promise.ts';\nimport { appConfigQueryOptions } from '#frontend/queries/config.ts';\nimport { logoutMutationOptions } from '#frontend/queries/logout.ts';\nimport {\n  getOAuthAuthorizeUrl,\n  oauthAccountsQueryOptions,\n  unlinkOAuthMutationOptions,\n} from '#frontend/queries/oauth.ts';\nimport { getSessionQueryOptions } from '#frontend/queries/session.ts';\n\ntype PasswordModalType = 'set' | 'change' | 'remove' | null;\ntype TotpModalType = 'setup' | 'disable' | 'regenerate' | null;\ntype PasskeyModalType = 'setup' | 'manage' | null;\n\nconst SearchSchema = z.object({\n  oauth_error: z.string().optional(),\n  oauth_error_description: z.string().optional(),\n});\n\nconst OAUTH_ERROR_I18N_MAP: Record<string, string> = {\n  access_denied: 'oauth.error.accessDenied',\n  temporarily_unavailable: 'oauth.error.temporarilyUnavailable',\n  server_error: 'oauth.error.serverError',\n};\n\nfunction ProfileError(props: ErrorComponentProps) {\n  return (\n    <RouteErrorFallback\n      {...props}\n      onUnauthorized={() => {\n        window.location.href = '/login';\n      }}\n    />\n  );\n}\n\nexport const Route = createFileRoute('/profile/')({\n  component: Profile,\n  errorComponent: ProfileError,\n  validateSearch: SearchSchema,\n  beforeLoad: async ({ context }) => {\n    if (!context.user) {\n      throw redirect({\n        to: '/login',\n      });\n    }\n  },\n  loader: async ({ context }) => {\n    await Promise.all([\n      context.queryClient.ensureQueryData(getSessionQueryOptions),\n      context.queryClient.ensureQueryData(oauthAccountsQueryOptions),\n      context.queryClient.ensureQueryData(appConfigQueryOptions),\n    ]);\n  },\n});\n\nfunction Profile() {\n  const { t } = useTranslation();\n  const router = useRouter();\n  const queryClient = useQueryClient();\n  const search = Route.useSearch();\n\n  const oauthError = search.oauth_error;\n  const oauthErrorMessage = oauthError\n    ? t(OAUTH_ERROR_I18N_MAP[oauthError] ?? 'oauth.error.failed')\n    : undefined;\n  const [unlinkingProvider, setUnlinkingProvider] = useState<string | null>(\n    null,\n  );\n  const [unlinkModal, setUnlinkModal] = useState<{\n    id: string;\n    name: string;\n  } | null>(null);\n  const [passwordModal, setPasswordModal] = useState<PasswordModalType>(null);\n  const [totpModal, setTotpModal] = useState<TotpModalType>(null);\n  const [passkeyModal, setPasskeyModal] = useState<PasskeyModalType>(null);\n  const [showDeleteModal, setShowDeleteModal] = useState(false);\n\n  const { data: session } = useSuspenseQuery(getSessionQueryOptions);\n  const { data: oauthAccountsData } = useSuspenseQuery(\n    oauthAccountsQueryOptions,\n  );\n  const { data: appConfig } = useSuspenseQuery(appConfigQueryOptions);\n\n  const logoutMutation = useMutation({\n    ...logoutMutationOptions,\n    onSuccess: async () => {\n      queryClient.setQueryData(getSessionQueryOptions.queryKey, {\n        user: null,\n      });\n      await tick();\n      router.navigate({\n        to: '/login',\n      });\n    },\n    onSettled: () => {\n      queryClient.invalidateQueries({\n        queryKey: getSessionQueryOptions.queryKey,\n      });\n    },\n  });\n\n  const unlinkMutation = useMutation({\n    ...unlinkOAuthMutationOptions,\n    onSuccess: () => {\n      queryClient.invalidateQueries({\n        queryKey: oauthAccountsQueryOptions.queryKey,\n      });\n    },\n    onSettled: () => {\n      setUnlinkingProvider(null);\n    },\n  });\n\n  const handleUnlinkConfirm = async () => {\n    if (!unlinkModal) return;\n    setUnlinkingProvider(unlinkModal.id);\n    await unlinkMutation.mutateAsync(unlinkModal.id);\n  };\n\n  if (!session.user) {\n    return null;\n  }\n\n  const user = session.user;\n  const availableProviders = oauthAccountsData.available_providers;\n  const hasLinkedOAuth = availableProviders.some((p) => p.linked);\n  const isConfigManaged = user.managed_by === 'config';\n\n  const passwordAuthMethod = appConfig.auth.password;\n  const passkeyAuthMethod = appConfig.auth.passkey;\n  const totpEnabled = passwordAuthMethod.totp.enabled;\n  const passkeyEnabled = passkeyAuthMethod.enabled;\n\n  const accountDeletionEnabled = appConfig.account_deletion.enabled;\n  const retentionPeriod = appConfig.account_deletion.retention;\n\n  const retentionDays = (() => {\n    const match = retentionPeriod.match(/^(\\d+)([dmy])$/);\n    if (!match) return 30;\n    const value = parseInt(match[1], 10);\n    const unit = match[2];\n    switch (unit) {\n      case 'd':\n        return value;\n      case 'm':\n        return value * 30;\n      case 'y':\n        return value * 365;\n      default:\n        return 30;\n    }\n  })();\n\n  const showPasswordSection = true;\n  const showTotpSection = !isConfigManaged && totpEnabled;\n  const showPasskeySection = !isConfigManaged && passkeyEnabled;\n  const showLinkedAccounts = availableProviders.length > 0;\n  const hasSecurityOptions =\n    showPasswordSection || showTotpSection || showPasskeySection;\n\n  return (\n    <AppLayout\n      headerActions={\n        <TRButton\n          appearance=\"ghost\"\n          /*\n            The visible label collapses below `sm:`, which would leave the\n            control unnamed on a phone. `profile.logout` is the same string\n            the label renders, so this does not shadow it.\n          */\n          aria-label={t('profile.logout')}\n          data-testid=\"profile-logout\"\n          disabled={logoutMutation.isPending}\n          loading={logoutMutation.isPending}\n          onClick={() => logoutMutation.mutate()}\n          type=\"button\"\n          uiSize=\"sm\"\n        >\n          {logoutMutation.isPending ? undefined : (\n            <>\n              <LogOutIcon aria-hidden className=\"size-tinyrack-lg\" />\n              <TRText as=\"span\" className=\"hidden sm:inline\" variant=\"bodySm\">\n                {t('profile.logout')}\n              </TRText>\n            </>\n          )}\n        </TRButton>\n      }\n    >\n      {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural profile identity row; descendants own visible typography. */}\n      <div className=\"flex items-center gap-tinyrack-lg\">\n        <InitialAvatar email={user.email} size=\"lg\" />\n        {/* tinyrack-check-ignore-next-line components/no-native-text -- Structural profile heading group; descendants own visible typography. */}\n        <div className=\"flex min-w-0 flex-col gap-tinyrack-3xs\">\n          <AuthPageHeader title={t('profile.title')} />\n          {/*\n            Rendered here rather than as the header's `subtitle`: this node\n            carries a testid and needs to truncate, neither of which the\n            shared header does, and growing its API for one non-auth caller\n            would be the wrong trade.\n          */}\n          <TRText\n            as=\"p\"\n            color=\"muted\"\n            data-testid=\"profile-user-email\"\n            truncate\n            variant=\"bodySm\"\n          >\n            {user.email}\n          </TRText>\n        </div>\n      </div>\n\n      {oauthErrorMessage && (\n        <Alert icon={CircleAlertIcon} type=\"error\">\n          {oauthErrorMessage}\n        </Alert>\n      )}\n\n      {user && <UserInfoSection user={user} />}\n\n      {hasSecurityOptions && (\n        <TRCard.Root variant=\"outlined\">\n          <TRCard.Header className=\"border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md\">\n            <TRCard.Title>{t('profile.security.title')}</TRCard.Title>\n            <TRCard.Description>\n              {t('profile.security.description')}\n            </TRCard.Description>\n          </TRCard.Header>\n          {showTotpSection && user.totp_recovery_codes_missing && (\n            <div\n              className=\"border-tinyrack-border border-b-tinyrack-default px-tinyrack-lg py-tinyrack-md\"\n              data-testid=\"profile-totp-recovery-warning\"\n            >\n              <Alert icon={CircleAlertIcon} type=\"warning\">\n                {t('profile.totp.recoveryCodesMissing')}\n              </Alert>\n            </div>\n          )}\n          <TRCard.Content className=\"divide-y divide-tinyrack-border p-0\">\n            {showPasswordSection && (\n              <PasswordSection\n                hasLinkedOAuth={hasLinkedOAuth}\n                hasPassword={user.has_password}\n                hasSecondFactorOnly={\n                  user.has_password &&\n                  !hasLinkedOAuth &&\n                  (user.totp_registered || user.passkey_count > 0)\n                }\n                isConfigManaged={isConfigManaged}\n                onOpenModal={setPasswordModal}\n              />\n            )}\n            {showTotpSection && (\n              <TotpSection\n                onOpenModal={setTotpModal}\n                recoveryCodesMissing={user.totp_recovery_codes_missing}\n                totpEnabled={user.totp_registered}\n              />\n            )}\n            {showPasskeySection && (\n              <PasskeySection\n                onOpenModal={setPasskeyModal}\n                passkeyCount={user.passkey_count}\n              />\n            )}\n          </TRCard.Content>\n        </TRCard.Root>\n      )}\n\n      {showLinkedAccounts && (\n        <LinkedAccountsSection\n          getAuthorizeUrl={getOAuthAuthorizeUrl}\n          onUnlinkRequest={(provider) =>\n            setUnlinkModal({\n              id: provider.id,\n              name: provider.display_name,\n            })\n          }\n          providers={availableProviders}\n          unlinkingProvider={unlinkingProvider}\n        />\n      )}\n\n      <DangerZoneSection\n        isConfigManaged={isConfigManaged}\n        isDeletionEnabled={accountDeletionEnabled}\n        onDeleteClick={() => setShowDeleteModal(true)}\n      />\n\n      <SetPasswordModal\n        isOpen={passwordModal === 'set'}\n        onClose={() => setPasswordModal(null)}\n      />\n      <ChangePasswordModal\n        isOpen={passwordModal === 'change'}\n        onClose={() => setPasswordModal(null)}\n      />\n      <RemovePasswordModal\n        isOpen={passwordModal === 'remove'}\n        onClose={() => setPasswordModal(null)}\n      />\n\n      <SetupTotpModal\n        isOpen={totpModal === 'setup'}\n        onClose={() => setTotpModal(null)}\n      />\n      <DisableTotpModal\n        isOpen={totpModal === 'disable'}\n        onClose={() => setTotpModal(null)}\n      />\n      <RegenerateTotpRecoveryCodesModal\n        isOpen={totpModal === 'regenerate'}\n        onClose={() => setTotpModal(null)}\n      />\n\n      <SetupPasskeyModal\n        isOpen={passkeyModal === 'setup'}\n        onClose={() => setPasskeyModal(null)}\n      />\n      <ManagePasskeysModal\n        isOpen={passkeyModal === 'manage'}\n        onAddNew={() => setPasskeyModal('setup')}\n        onClose={() => setPasskeyModal(null)}\n      />\n\n      <UnlinkOAuthModal\n        isOpen={unlinkModal !== null}\n        isPending={unlinkMutation.isPending}\n        onClose={() => setUnlinkModal(null)}\n        onConfirm={handleUnlinkConfirm}\n        providerName={unlinkModal?.name ?? ''}\n      />\n\n      <DeleteAccountModal\n        isOpen={showDeleteModal}\n        onClose={() => setShowDeleteModal(false)}\n        retentionDays={retentionDays}\n      />\n    </AppLayout>\n  );\n}\n"],"mappings":"qGAgEA,SAASI,EAAaC,EAA4B,CAChD,OACE,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,GAAIA,EACJ,mBAAsB,CACpBE,OAAOC,SAASC,KAAO,QACzB,CAAE,CAAA,CAGR"}

package/public/assets/promise-OpBtq8tG.js

@@ -1,2 +0,0 @@
-var e=()=>new Promise(e=>setTimeout(e,0));export{e as t};
-//# sourceMappingURL=promise-OpBtq8tG.js.map

package/public/assets/promise-OpBtq8tG.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"promise-OpBtq8tG.js","names":[],"sources":["../../../frontend/src/libs/promise.ts"],"sourcesContent":["export const tick = () => new Promise((resolve) => setTimeout(resolve, 0));\n"],"mappings":"AAAA,IAAa,MAAa,IAAI,QAAS,GAAY,WAAW,EAAS,CAAC,CAAC"}

package/public/assets/provider-mark-CeYazOfu.js

@@ -1,2 +0,0 @@
-import{X as e,q as t,t as n}from"./createLucideIcon-D-yizrWN.js";var r=n(`link`,[[`path`,{d:`M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71`,key:`1cjeqo`}],[`path`,{d:`M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71`,key:`19qd67`}]]),i=e();function a({"aria-label":e,className:n,provider:r,...a}){return(0,i.jsxs)(`svg`,{...a,"aria-hidden":e===void 0?`true`:void 0,"aria-label":e,className:t(`tr-provider-mark`,n),"data-provider":r,role:e===void 0?void 0:`img`,viewBox:`0 0 24 24`,children:[r===`google`?(0,i.jsx)(o,{}):null,r===`github`?(0,i.jsx)(s,{}):null,r===`apple`?(0,i.jsx)(c,{}):null]})}function o(){return(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(`path`,{d:`M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1Z`,fill:`#4285F4`}),(0,i.jsx)(`path`,{d:`M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84A11 11 0 0 0 12 23Z`,fill:`#34A853`}),(0,i.jsx)(`path`,{d:`M5.84 14.1a6.6 6.6 0 0 1 0-4.2V7.06H2.18a11 11 0 0 0 0 9.88l3.66-2.84Z`,fill:`#FBBC05`}),(0,i.jsx)(`path`,{d:`M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1a11 11 0 0 0-9.82 6.06l3.66 2.84c.87-2.6 3.3-4.52 6.16-4.52Z`,fill:`#EA4335`})]})}function s(){return(0,i.jsx)(`path`,{d:`M12 .5A11.5 11.5 0 0 0 .5 12a11.5 11.5 0 0 0 7.86 10.92c.58.1.79-.25.79-.56v-2.17c-3.2.7-3.88-1.36-3.88-1.36-.53-1.34-1.29-1.7-1.29-1.7-1.05-.71.08-.7.08-.7 1.16.08 1.77 1.2 1.77 1.2 1.03 1.77 2.7 1.26 3.36.96.1-.75.4-1.26.73-1.55-2.56-.29-5.25-1.28-5.25-5.7 0-1.26.45-2.29 1.19-3.1-.12-.29-.52-1.46.11-3.05 0 0 .97-.31 3.18 1.18a11 11 0 0 1 5.79 0c2.2-1.5 3.17-1.18 3.17-1.18.63 1.59.24 2.76.12 3.05.74.81 1.19 1.84 1.19 3.1 0 4.43-2.7 5.4-5.27 5.69.42.36.79 1.07.79 2.15v3.19c0 .31.2.67.8.55A11.5 11.5 0 0 0 23.5 12 11.5 11.5 0 0 0 12 .5Z`})}function c(){return(0,i.jsx)(`path`,{d:`M17.05 12.74c-.03-2.7 2.2-4 2.3-4.06-1.25-1.83-3.2-2.08-3.9-2.11-1.66-.17-3.24.98-4.08.98-.84 0-2.14-.96-3.52-.93-1.81.03-3.48 1.05-4.41 2.67-1.88 3.27-.48 8.1 1.35 10.75.9 1.3 1.96 2.75 3.36 2.7 1.35-.06 1.86-.87 3.49-.87 1.63 0 2.09.87 3.51.84 1.45-.02 2.37-1.32 3.26-2.63 1.03-1.5 1.45-2.96 1.47-3.04-.03-.01-2.82-1.08-2.85-4.3ZM14.4 4.8c.74-.9 1.24-2.15 1.1-3.4-1.07.05-2.36.72-3.13 1.61-.68.79-1.28 2.06-1.12 3.28 1.19.09 2.41-.61 3.15-1.5Z`})}export{r as n,a as t};
-//# sourceMappingURL=provider-mark-CeYazOfu.js.map

package/public/assets/provider-mark-CeYazOfu.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider-mark-CeYazOfu.js","names":["Fragment"],"sources":["../../../../node_modules/.pnpm/lucide-react@1.25.0_react@19.2.7/node_modules/lucide-react/dist/esm/icons/link.mjs","../../../../node_modules/.pnpm/@tinyrack+ui@0.31.0_@types+react@19.2.17_react-dom@19.2.7_react@19.2.7__react@19.2.7_shiki@4.4.2_tailwindcss@4.3.2/node_modules/@tinyrack/ui/dist/components/provider-mark/provider-mark.js"],"sourcesContent":["/**\n * @license lucide-react v1.25.0 - ISC\n *\n * This source code is licensed under the ISC license.\n * See the LICENSE file in the root directory of this source tree.\n */\n\nimport createLucideIcon from '../createLucideIcon.mjs';\n\nconst __iconNode = [\n  [\"path\", { d: \"M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71\", key: \"1cjeqo\" }],\n  [\"path\", { d: \"M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71\", key: \"19qd67\" }]\n];\nconst Link = createLucideIcon(\"link\", __iconNode);\n\nexport { __iconNode, Link as default };\n//# sourceMappingURL=link.mjs.map\n","import { mergeClassNames } from \"../../internal/component-class-name.js\";\nimport { Fragment, jsx, jsxs } from \"react/jsx-runtime\";\n//#region src/components/provider-mark/provider-mark.tsx\nfunction TRProviderMark({ \"aria-label\": ariaLabel, className, provider, ...props }) {\n\treturn /* @__PURE__ */ jsxs(\"svg\", {\n\t\t...props,\n\t\t\"aria-hidden\": ariaLabel === void 0 ? \"true\" : void 0,\n\t\t\"aria-label\": ariaLabel,\n\t\tclassName: mergeClassNames(\"tr-provider-mark\", className),\n\t\t\"data-provider\": provider,\n\t\trole: ariaLabel === void 0 ? void 0 : \"img\",\n\t\tviewBox: \"0 0 24 24\",\n\t\tchildren: [\n\t\t\tprovider === \"google\" ? /* @__PURE__ */ jsx(GooglePaths, {}) : null,\n\t\t\tprovider === \"github\" ? /* @__PURE__ */ jsx(GithubPath, {}) : null,\n\t\t\tprovider === \"apple\" ? /* @__PURE__ */ jsx(ApplePath, {}) : null\n\t\t]\n\t});\n}\nfunction GooglePaths() {\n\treturn /* @__PURE__ */ jsxs(Fragment, { children: [\n\t\t/* @__PURE__ */ jsx(\"path\", {\n\t\t\td: \"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1Z\",\n\t\t\tfill: \"#4285F4\"\n\t\t}),\n\t\t/* @__PURE__ */ jsx(\"path\", {\n\t\t\td: \"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84A11 11 0 0 0 12 23Z\",\n\t\t\tfill: \"#34A853\"\n\t\t}),\n\t\t/* @__PURE__ */ jsx(\"path\", {\n\t\t\td: \"M5.84 14.1a6.6 6.6 0 0 1 0-4.2V7.06H2.18a11 11 0 0 0 0 9.88l3.66-2.84Z\",\n\t\t\tfill: \"#FBBC05\"\n\t\t}),\n\t\t/* @__PURE__ */ jsx(\"path\", {\n\t\t\td: \"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1a11 11 0 0 0-9.82 6.06l3.66 2.84c.87-2.6 3.3-4.52 6.16-4.52Z\",\n\t\t\tfill: \"#EA4335\"\n\t\t})\n\t] });\n}\nfunction GithubPath() {\n\treturn /* @__PURE__ */ jsx(\"path\", { d: \"M12 .5A11.5 11.5 0 0 0 .5 12a11.5 11.5 0 0 0 7.86 10.92c.58.1.79-.25.79-.56v-2.17c-3.2.7-3.88-1.36-3.88-1.36-.53-1.34-1.29-1.7-1.29-1.7-1.05-.71.08-.7.08-.7 1.16.08 1.77 1.2 1.77 1.2 1.03 1.77 2.7 1.26 3.36.96.1-.75.4-1.26.73-1.55-2.56-.29-5.25-1.28-5.25-5.7 0-1.26.45-2.29 1.19-3.1-.12-.29-.52-1.46.11-3.05 0 0 .97-.31 3.18 1.18a11 11 0 0 1 5.79 0c2.2-1.5 3.17-1.18 3.17-1.18.63 1.59.24 2.76.12 3.05.74.81 1.19 1.84 1.19 3.1 0 4.43-2.7 5.4-5.27 5.69.42.36.79 1.07.79 2.15v3.19c0 .31.2.67.8.55A11.5 11.5 0 0 0 23.5 12 11.5 11.5 0 0 0 12 .5Z\" });\n}\nfunction ApplePath() {\n\treturn /* @__PURE__ */ jsx(\"path\", { d: \"M17.05 12.74c-.03-2.7 2.2-4 2.3-4.06-1.25-1.83-3.2-2.08-3.9-2.11-1.66-.17-3.24.98-4.08.98-.84 0-2.14-.96-3.52-.93-1.81.03-3.48 1.05-4.41 2.67-1.88 3.27-.48 8.1 1.35 10.75.9 1.3 1.96 2.75 3.36 2.7 1.35-.06 1.86-.87 3.49-.87 1.63 0 2.09.87 3.51.84 1.45-.02 2.37-1.32 3.26-2.63 1.03-1.5 1.45-2.96 1.47-3.04-.03-.01-2.82-1.08-2.85-4.3ZM14.4 4.8c.74-.9 1.24-2.15 1.1-3.4-1.07.05-2.36.72-3.13 1.61-.68.79-1.28 2.06-1.12 3.28 1.19.09 2.41-.61 3.15-1.5Z\" });\n}\n//#endregion\nexport { TRProviderMark };\n\n//# sourceMappingURL=provider-mark.js.map"],"x_google_ignoreList":[0,1],"mappings":"iEAaA,IAAM,EAAO,EAAiB,OAAQ,CAHpC,CAAC,OAAQ,CAAE,EAAG,8DAA+D,IAAK,QAAS,CAAC,EAC5F,CAAC,OAAQ,CAAE,EAAG,+DAAgE,IAAK,QAAS,CAAC,CAEzD,CAAU,QCVhD,SAAS,EAAe,CAAE,aAAc,EAAW,YAAW,WAAU,GAAG,GAAS,CACnF,OAAuB,EAAA,EAAA,KAAA,CAAK,MAAO,CAClC,GAAG,EACH,cAAe,IAAc,IAAK,GAAI,OAAS,IAAK,GACpD,aAAc,EACd,UAAW,EAAgB,mBAAoB,CAAS,EACxD,gBAAiB,EACjB,KAAM,IAAc,IAAK,GAAI,IAAK,GAAI,MACtC,QAAS,YACT,SAAU,CACT,IAAa,UAA2B,EAAA,EAAA,IAAA,CAAI,EAAa,CAAC,CAAC,EAAI,KAC/D,IAAa,UAA2B,EAAA,EAAA,IAAA,CAAI,EAAY,CAAC,CAAC,EAAI,KAC9D,IAAa,SAA0B,EAAA,EAAA,IAAA,CAAI,EAAW,CAAC,CAAC,EAAI,IAC7D,CACD,CAAC,CACF,CACA,SAAS,GAAc,CACtB,OAAuB,EAAA,EAAA,KAAA,CAAKA,EAAAA,SAAU,CAAE,SAAU,EACjC,EAAA,EAAA,IAAA,CAAI,OAAQ,CAC3B,EAAG,oHACH,KAAM,SACP,CAAC,GACe,EAAA,EAAA,IAAA,CAAI,OAAQ,CAC3B,EAAG,kIACH,KAAM,SACP,CAAC,GACe,EAAA,EAAA,IAAA,CAAI,OAAQ,CAC3B,EAAG,yEACH,KAAM,SACP,CAAC,GACe,EAAA,EAAA,IAAA,CAAI,OAAQ,CAC3B,EAAG,kIACH,KAAM,SACP,CAAC,CACF,CAAE,CAAC,CACJ,CACA,SAAS,GAAa,CACrB,OAAuB,EAAA,EAAA,IAAA,CAAI,OAAQ,CAAE,EAAG,8hBAA+hB,CAAC,CACzkB,CACA,SAAS,GAAY,CACpB,OAAuB,EAAA,EAAA,IAAA,CAAI,OAAQ,CAAE,EAAG,+bAAgc,CAAC,CAC1e"}

package/public/assets/recovery-hdRyezmb.js

@@ -1,2 +0,0 @@
-import{X as e,Z as t,et as n,i as r,n as i,r as a,s as o}from"./createLucideIcon-D-yizrWN.js";import{An as s,Ar as c,In as l}from"./config-C18-l7z7.js";import{t as u}from"./useMutation-DqIIIiBW.js";import{c as d,o as f}from"./zod-Dszyrytb.js";import{E as p,F as m,H as h,L as g,t as _,z as v}from"./index-lTEyHSus.js";import{t as y}from"./auth-page-header-ChaCNNrn.js";import{t as b}from"./alert-D3aaK-_3.js";import{t as x}from"./auth-layout-BdRRr0vT.js";import{t as S}from"./form-sJw-V9wb.js";import{t as C}from"./field-CsrUbl__.js";import{t as w}from"./input-QvBxPgy5.js";import{t as T}from"./promise-OpBtq8tG.js";import{n as E,t as D}from"./auth-footer-Du6S-oDG.js";import{r as O,t as k}from"./standard-schema-C50nwAaQ.js";import{a as A}from"./totp-BhElob6P.js";import{t as j}from"./labeled-separator-DdkyYDWH.js";var M=n(t()),N=e(),P={SECOND_FACTOR_SESSION_EXPIRED:`SECOND_FACTOR_SESSION_EXPIRED`,INVALID_RECOVERY_CODE:`INVALID_RECOVERY_CODE`,NO_RECOVERY_CODES_AVAILABLE:`NO_RECOVERY_CODES_AVAILABLE`,TOTP_NOT_ENABLED:`TOTP_NOT_ENABLED`},F=5;function I(){let{t:e}=r(),t=l(),n=c(),I=_.useSearch(),L=(0,M.useRef)(null),[R,z]=(0,M.useState)(!1),[B,V]=(0,M.useState)(F),H=(0,M.useMemo)(()=>f({code:d().transform(e=>e.toUpperCase()).pipe(d().regex(/^[A-HJ-NP-TV-Z2-9]{4}(?:-[A-HJ-NP-TV-Z2-9]{4}){3}$/,e(`verifyRecovery.error.invalid`)))}),[e]),U=u({...A,onSuccess:async e=>{n.setQueryData(p.queryKey,{user:e.user}),await T(),v(I)?window.location.href=m(I):t.navigate({to:`/profile`})},onSettled:()=>{n.invalidateQueries({queryKey:p.queryKey})}}),{register:W,setError:G,handleSubmit:K,setValue:q,formState:{errors:J}}=O({defaultValues:{code:``},resolver:k(H)}),Y=(0,M.useCallback)(()=>{t.navigate({to:`/login`,search:g(I)})},[t,I]);(0,M.useEffect)(()=>{if(!R)return;let e=setInterval(()=>{V(t=>t<=1?(clearInterval(e),Y(),0):t-1)},1e3);return()=>clearInterval(e)},[R,Y]);let X=async t=>{try{await U.mutateAsync(t)}catch(t){if(t instanceof a)switch(t.code){case P.SECOND_FACTOR_SESSION_EXPIRED:z(!0),V(F);return;case P.TOTP_NOT_ENABLED:Y();return;case P.NO_RECOVERY_CODES_AVAILABLE:G(`code`,{type:`manual`,message:e(`verifyRecovery.error.noCodesAvailable`)}),q(`code`,``),L.current?.focus();return;case P.INVALID_RECOVERY_CODE:G(`code`,{type:`manual`,message:e(`verifyRecovery.error.invalid`)}),q(`code`,``),L.current?.focus();return}G(`code`,{type:`manual`,message:e(`verifyRecovery.error.invalid`)}),q(`code`,``),L.current?.focus()}},{ref:Z,...Q}=W(`code`);return(0,N.jsxs)(x,{children:[(0,N.jsx)(y,{subtitle:e(`verifyRecovery.subtitle`),title:e(`verifyRecovery.title`)}),R&&(0,N.jsx)(b,{"data-testid":`recovery-session-expired`,icon:h,type:`warning`,children:(0,N.jsxs)(`div`,{className:`flex flex-col items-start gap-tinyrack-3xs`,children:[(0,N.jsx)(i,{as:`span`,variant:`bodySm`,children:e(`verifyRecovery.error.expired`)}),(0,N.jsx)(i,{as:`span`,color:`muted`,variant:`caption`,children:e(`verifyRecovery.redirecting`,{seconds:B})}),(0,N.jsx)(o,{appearance:`ghost`,intent:`neutral`,onClick:Y,type:`button`,uiSize:`sm`,children:e(`verifyRecovery.redirectNow`)})]})}),(0,N.jsxs)(S,{className:`flex flex-col gap-tinyrack-lg`,onSubmit:K(X),children:[(0,N.jsxs)(C.Root,{children:[(0,N.jsx)(w,{...Q,autoComplete:`off`,className:`w-full text-center font-tinyrack-mono`,"data-testid":`recovery-code-input`,disabled:R,placeholder:e(`verifyRecovery.placeholder`),ref:e=>{Z(e),L.current=e},type:`text`,uiSize:`lg`}),(0,N.jsx)(C.Error,{"data-testid":`recovery-error`,match:!!J.code,children:J.code?.message})]}),R?(0,N.jsx)(o,{className:`w-full`,disabled:!0,intent:`primary`,type:`button`,uiSize:`lg`,children:e(`verifyRecovery.submit`)}):(0,N.jsx)(o,{className:`w-full`,intent:`primary`,loading:U.isPending,loadingLabel:e(`verifyRecovery.submitting`),type:`submit`,uiSize:`lg`,children:e(`verifyRecovery.submit`)})]}),(0,N.jsxs)(`div`,{className:`flex flex-col gap-tinyrack-md`,children:[(0,N.jsx)(j,{label:e(`common.or`)}),(0,N.jsx)(o,{appearance:`ghost`,className:`w-full`,"data-testid":`recovery-back-to-totp`,intent:`neutral`,onClick:()=>t.navigate({to:`/verify/totp`,search:g(I)}),type:`button`,uiSize:`lg`,children:e(`verifyRecovery.backToTotp`)})]}),(0,N.jsx)(D,{children:(0,N.jsx)(E,{link:(0,N.jsx)(s,{search:g(I),to:`/login`,children:e(`verifyRecovery.backToLogin`)})})})]})}export{I as component};
-//# sourceMappingURL=recovery-hdRyezmb.js.map