@wildo-ai/saas-frontend-lib 1.1.10 → 1.1.11

package/dist/esm/components/auth/admin-config/AppPage_SecuritySettings.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AppPage_SecuritySettings.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/admin-config/AppPage_SecuritySettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM1I,eAAO,MAAM,gCAAgC,EAAE,mBAAmB,EAiFjE,CAAC"}
+{"version":3,"file":"AppPage_SecuritySettings.labels.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/AppPage_SecuritySettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM1I,eAAO,MAAM,gCAAgC,EAAE,mBAAmB,EAqGjE,CAAC"}

package/dist/esm/components/auth/admin-config/AppPage_SecuritySettings.labels.js

@@ -22,6 +22,26 @@ export const AppLayoutsSecuritySettingsLabels = [
     { ref: 'passwordNew', kind: LabelKind.LABEL, purpose: 'Field label for the new-password input' },
     { ref: 'passwordConfirm', kind: LabelKind.LABEL, purpose: 'Field label for the confirm-new-password input' },
     { ref: 'identityLinksUnlink', kind: LabelKind.BUTTON, purpose: 'Button that unlinks a connected social identity' },
+    // Sessions (#2317).
+    { ref: 'sectionSessions', kind: LabelKind.HEADING, purpose: 'Title of the row about the sessions the account is signed in with, on every device and browser' },
+    { ref: 'signOutEverywhere', kind: LabelKind.BUTTON, purpose: 'Button that signs the account out of every session on every device, including the one in use; also the confirm button of its dialog' },
+    { ref: 'signOutEverywhereDescription', kind: LabelKind.DESCRIPTION, purpose: 'One sentence under the sessions title: signing out everywhere ends every session of the account on every device and browser, this one included' },
+    { ref: 'signOutEverywhereConfirmTitle', kind: LabelKind.HEADING, purpose: 'Title of the dialog asking the person to confirm signing out of every session' },
+    { ref: 'signOutEverywhereConfirmDescription', kind: LabelKind.DESCRIPTION, purpose: 'Body of that dialog: every device and browser, this one included, will be signed out and will have to sign in again' },
+    {
+        ref: 'sessionDevice', kind: LabelKind.LABEL, purpose: 'Name of one signed-in session in the list: the browser and the operating system it signed in from, e.g. "Chrome on macOS"',
+        params: [{ key: 'browser', meaning: 'browser family word, e.g. Chrome' }, { key: 'operatingSystem', meaning: 'operating-system family word, e.g. macOS' }],
+    },
+    {
+        ref: 'sessionDetails', kind: LabelKind.MESSAGE, purpose: 'Second line of a session row: the address it signed in from and when it was last active',
+        params: [{ key: 'address', meaning: 'IP address the session signed in from' }, { key: 'lastActive', meaning: 'date and time of its last activity' }],
+    },
+    {
+        ref: 'sessionLastActive', kind: LabelKind.MESSAGE, purpose: 'Second line of a session row whose address is unknown: when it was last active',
+        params: [{ key: 'lastActive', meaning: 'date and time of its last activity' }],
+    },
+    { ref: 'sessionThisDevice', kind: LabelKind.LABEL, purpose: 'Short badge on the session in the list that the person is using right now' },
+    { ref: 'sessionSignOut', kind: LabelKind.BUTTON, purpose: 'Button on one session row that signs that session out, on its device' },
     { ref: 'reauthTitle', kind: LabelKind.HEADING, purpose: 'Title of the re-authentication confirmation dialog' },
     { ref: 'reauthDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that the person must confirm it is really them before this sensitive change goes through. Must not name a method: they may confirm with a password, a passkey or an authenticator code' },
     { ref: 'reauthPassword', kind: LabelKind.LABEL, purpose: 'Field label for the re-authentication password input' },
@@ -40,7 +60,7 @@ export const AppLayoutsSecuritySettingsLabels = [
     { ref: 'reauthTotpCode', kind: LabelKind.LABEL, purpose: 'Field label for the authenticator-app code input in the re-authentication dialog' },
     { ref: 'reauthTotpCodePlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the authenticator-app code input, which takes the current one-time code' },
     { ref: 'reauthNoAcceptedMethod', kind: LabelKind.MESSAGE, purpose: 'Shown in the re-authentication dialog when none of the account\'s sign-in methods is accepted for this confirmation, because the account\'s security policy requires a method it has not added yet. Tells the person to add that method (for example a passkey) in their security settings first' },
-    { ref: 'reauthClientOrganizationDescription', kind: LabelKind.DESCRIPTION, purpose: 'Shown in the re-authentication dialog to an expert from a service firm who has just opened a client organization\'s workspace: that organization asks people working in it on behalf of a service firm to confirm with a second factor (an authenticator code or a passkey) before continuing, and this confirmation counts for that organization only. Must not name a specific organization' },
+    { ref: 'reauthGrantingOrganizationDescription', kind: LabelKind.DESCRIPTION, purpose: 'Shown in the re-authentication dialog to a person who has just opened the workspace of an organization they work in on behalf of another organization (for example a service firm\'s staff opening a client\'s workspace): that organization asks people working in it on behalf of another organization to confirm with a second factor (an authenticator code or a passkey) before continuing, and this confirmation counts for that organization only. Must not name a specific organization' },
     {
         ref: 'reauthWithProvider',
         kind: LabelKind.BUTTON,

package/dist/esm/components/auth/admin-config/AppPage_SecuritySettings.labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"AppPage_SecuritySettings.labels.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/AppPage_SecuritySettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE1I,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,gCAAgC,GAA0B;IACrE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAC/G,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC9G,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gEAAgE,EAAE;IAC1H,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mDAAmD,EAAE;IAC9G,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC9G,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAChI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC7F,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACpI,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACtG,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACnG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACrG,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IACxI,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE;IACxG,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC9G,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAC1H,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACxG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IAChG,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC5G,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAClH,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC9G,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,iMAAiM,EAAE;IACrQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE;IACjH,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAChI,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACrH,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACzG,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACxH,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IACpH,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACpH,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACrI,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACrI,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,yFAAyF,EAAE;IACzJ,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oFAAoF,EAAE;IACnJ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,gGAAgG,EAAE;IAC5J,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qFAAqF,EAAE;IACvJ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,kFAAkF,EAAE;IAC7I,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4FAA4F,EAAE;IACxK,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kSAAkS,EAAE;IACvW,EAAE,GAAG,EAAE,qCAAqC,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,+XAA+X,EAAE;IACrd;QACE,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,SAAS,CAAC,MAAM;QACtB,OAAO,EAAE,uJAAuJ;QAChK,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;KACvF;IACD;QACE,GAAG,EAAE,sBAAsB;QAC3B,IAAI,EAAE,SAAS,CAAC,OAAO;QACvB,OAAO,EAAE,8JAA8J;QACvK,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;KACvF;IACD,EAAE,GAAG,EAAE,4BAA4B,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8JAA8J,EAAE;IACvO,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2NAA2N,EAAE;IAChS,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8JAA8J,EAAE;IACjO,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,8CAA8C,EAAE;IAEvG,6EAA6E;IAC7E,0EAA0E;IAC1E,qEAAqE;IACrE,4EAA4E;IAC5E,uCAAuC;IACvC,EAAE;IACF,+EAA+E;IAC/E,4EAA4E;IAC5E,gEAAgE;IAChE,8EAA8E;IAC9E,4DAA4D;IAC5D,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,+EAA+E;IAC/E,0FAA0F;IAC1F,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAClH,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACjI,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAC5I,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4FAA4F,EAAE;IAClK,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mFAAmF,EAAE;IACrJ,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6EAA6E,EAAE;IAChJ,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAClJ,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6EAA6E,EAAE;IACxJ,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;CACzI,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const AppLayoutsSecuritySettingsLabels: LabellingUnitaryDef[] = [\n  { ref: 'pageTitle', kind: LabelKind.HEADING, purpose: 'Page heading for the account security-settings screen' },\n  { ref: 'sectionPasskeys', kind: LabelKind.HEADING, purpose: 'Section title for the passkeys management card' },\n  { ref: 'sectionTotp', kind: LabelKind.HEADING, purpose: 'Section title for the authenticator-app (TOTP) management card' },\n  { ref: 'sectionPhone', kind: LabelKind.HEADING, purpose: 'Section title for the phone / SMS management card' },\n  { ref: 'sectionPassword', kind: LabelKind.HEADING, purpose: 'Section title for the password management card' },\n  { ref: 'sectionIdentityLinks', kind: LabelKind.HEADING, purpose: 'Section title for the linked social-identity providers card' },\n  { ref: 'passkeyAdd', kind: LabelKind.BUTTON, purpose: 'Button that registers a new passkey' },\n  { ref: 'passkeyUnsupported', kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n  { ref: 'passkeyRemove', kind: LabelKind.BUTTON, purpose: 'Button that removes an individual passkey' },\n  { ref: 'totpSetup', kind: LabelKind.BUTTON, purpose: 'Button that starts authenticator-app setup' },\n  { ref: 'totpDisable', kind: LabelKind.BUTTON, purpose: 'Button that disables the authenticator app' },\n  { ref: 'totpOnlyMfaWarning', kind: LabelKind.MESSAGE, purpose: 'Warning that the authenticator app is the only enrolled second factor' },\n  { ref: 'phoneChange', kind: LabelKind.BUTTON, purpose: 'Button that changes the verified phone number' },\n  { ref: 'passwordChange', kind: LabelKind.BUTTON, purpose: 'Submit button that changes the existing password' },\n  { ref: 'passwordSet', kind: LabelKind.BUTTON, purpose: 'Submit button that sets a password for an account that has none' },\n  { ref: 'passwordCurrent', kind: LabelKind.LABEL, purpose: 'Field label for the current-password input' },\n  { ref: 'passwordNew', kind: LabelKind.LABEL, purpose: 'Field label for the new-password input' },\n  { ref: 'passwordConfirm', kind: LabelKind.LABEL, purpose: 'Field label for the confirm-new-password input' },\n  { ref: 'identityLinksUnlink', kind: LabelKind.BUTTON, purpose: 'Button that unlinks a connected social identity' },\n  { ref: 'reauthTitle', kind: LabelKind.HEADING, purpose: 'Title of the re-authentication confirmation dialog' },\n  { ref: 'reauthDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that the person must confirm it is really them before this sensitive change goes through. Must not name a method: they may confirm with a password, a passkey or an authenticator code' },\n  { ref: 'reauthPassword', kind: LabelKind.LABEL, purpose: 'Field label for the re-authentication password input' },\n  { ref: 'cancel', kind: LabelKind.BUTTON, purpose: 'Button that closes the password change or set-password form without saving' },\n  { ref: 'success', kind: LabelKind.MESSAGE, purpose: 'Generic confirmation shown after a successful security change' },\n  { ref: 'error', kind: LabelKind.MESSAGE, purpose: 'Generic error shown when a security operation fails' },\n  { ref: 'passkeyCancelled', kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels passkey registration' },\n  { ref: 'passkeyAdding', kind: LabelKind.MESSAGE, purpose: 'In-progress status while a passkey is being registered' },\n  { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Loading status while the security settings are being fetched' },\n  { ref: 'passwordMismatch', kind: LabelKind.MESSAGE, purpose: 'Validation error when the new password and confirmation do not match' },\n  { ref: 'reauthPasswordPlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the re-authentication password input' },\n  { ref: 'reauthWithPassword', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity by typing the account password' },\n  { ref: 'reauthWithPasskey', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity with a registered passkey' },\n  { ref: 'reauthWithTotp', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity with a code from an authenticator app' },\n  { ref: 'reauthPasskeyPrompt', kind: LabelKind.MESSAGE, purpose: 'Explains that confirming will ask the browser or device to use a registered passkey' },\n  { ref: 'reauthTotpCode', kind: LabelKind.LABEL, purpose: 'Field label for the authenticator-app code input in the re-authentication dialog' },\n  { ref: 'reauthTotpCodePlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the authenticator-app code input, which takes the current one-time code' },\n  { ref: 'reauthNoAcceptedMethod', kind: LabelKind.MESSAGE, purpose: 'Shown in the re-authentication dialog when none of the account\\'s sign-in methods is accepted for this confirmation, because the account\\'s security policy requires a method it has not added yet. Tells the person to add that method (for example a passkey) in their security settings first' },\n  { ref: 'reauthClientOrganizationDescription', kind: LabelKind.DESCRIPTION, purpose: 'Shown in the re-authentication dialog to an expert from a service firm who has just opened a client organization\\'s workspace: that organization asks people working in it on behalf of a service firm to confirm with a second factor (an authenticator code or a passkey) before continuing, and this confirmation counts for that organization only. Must not name a specific organization' },\n  {\n    ref: 'reauthWithProvider',\n    kind: LabelKind.BUTTON,\n    purpose: 'Choice in the re-authentication dialog: confirm it is you by signing in again at a linked identity provider, such as Google or the company\\'s sign-in',\n    params: [{ key: 'provider', meaning: 'display name of the linked identity provider' }],\n  },\n  {\n    ref: 'reauthProviderPrompt',\n    kind: LabelKind.MESSAGE,\n    purpose: 'Shown in the re-authentication dialog when a linked identity provider is chosen: confirming opens a window at that provider, where the person signs in again',\n    params: [{ key: 'provider', meaning: 'display name of the linked identity provider' }],\n  },\n  { ref: 'reauthProviderPopupBlocked', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when the browser blocked the sign-in window from opening; asks the person to allow pop-ups for this site and try again' },\n  { ref: 'reauthProviderTimedOut', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when signing in again at the identity provider was not finished in time (the sign-in window was left open or closed without finishing); they can try again or choose another method' },\n  { ref: 'reauthProviderFailed', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when signing in again at the identity provider did not confirm the person; they can try again or choose another method' },\n  { ref: 'phoneVerify', kind: LabelKind.BUTTON, purpose: 'Button that starts phone-number verification' },\n\n  // Per-factor descriptive copy. The panel presents each authentication factor\n  // as a scannable row (icon · name · status badge), so every state owns an\n  // explicit status word, and every factor owns a short plain-language\n  // description that is shown only while the factor is NOT active — it is the\n  // prompt for a decision not yet taken.\n  //\n  // Removed with the text they rendered, because each restated something else on\n  // the same row: the panel sub-heading (`pageDescription`), the status lines\n  // under a badge saying the same (`totpEnabled`, `totpNotSetup`,\n  // `phoneNotVerified`, `passwordSetStatus`, `passwordNotSetStatus`), the empty\n  // sentences under a \"Not configured\" badge (`passkeyEmpty`,\n  // `identityLinksEmpty`), the counts above the lists they count (`passkeyCount`,\n  // `identityLinksCount`) and the \"Verified:\" in front of the masked phone number\n  // (`phoneVerified`). Their `SecuritySettingsLabel` members went with them, as did\n  // `accountComplete` / `accountIncomplete`, `passkeyRename` and a `confirm` the\n  // re-authentication dialog never read (its confirm button is the critical-confirm's own).\n  { ref: 'statusActive', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor the user has configured' },\n  { ref: 'statusNotConfigured', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor the user has not configured yet' },\n  { ref: 'statusUnavailable', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor unavailable on the current device or browser' },\n  { ref: 'passkeysDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of what a passkey is and why it is the strongest sign-in method' },\n  { ref: 'totpDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of authenticator-app one-time codes as a second factor' },\n  { ref: 'phoneDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of SMS one-time codes to a verified phone number' },\n  { ref: 'passwordDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of the account password as a sign-in credential' },\n  { ref: 'identityLinksDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of external identity accounts linked for sign-in' },\n  { ref: 'passkeyAdded', kind: LabelKind.MESSAGE, purpose: 'Registration date shown under an individual passkey entry', params: ['date'] },\n];\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS, AppLayoutsSecuritySettingsLabels);\n"]}
+{"version":3,"file":"AppPage_SecuritySettings.labels.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/AppPage_SecuritySettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE1I,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,gCAAgC,GAA0B;IACrE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAC/G,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC9G,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gEAAgE,EAAE;IAC1H,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mDAAmD,EAAE;IAC9G,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC9G,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAChI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC7F,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACpI,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACtG,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACnG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACrG,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IACxI,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE;IACxG,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC9G,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAC1H,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACxG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IAChG,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC5G,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAClH,oBAAoB;IACpB,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gGAAgG,EAAE;IAC9J,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qIAAqI,EAAE;IACpM,EAAE,GAAG,EAAE,8BAA8B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,gJAAgJ,EAAE;IAC/N,EAAE,GAAG,EAAE,+BAA+B,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+EAA+E,EAAE;IAC3J,EAAE,GAAG,EAAE,qCAAqC,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qHAAqH,EAAE;IAC3M;QACE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,2HAA2H;QACjL,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;KAC3J;IACD;QACE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yFAAyF;QAClJ,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;KACrJ;IACD;QACE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gFAAgF;QAC5I,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;KAC/E;IACD,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,2EAA2E,EAAE;IACzI,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,sEAAsE,EAAE;IAClI,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC9G,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,iMAAiM,EAAE;IACrQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE;IACjH,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAChI,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACrH,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACzG,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACxH,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IACpH,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACpH,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACrI,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACrI,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,yFAAyF,EAAE;IACzJ,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oFAAoF,EAAE;IACnJ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,gGAAgG,EAAE;IAC5J,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qFAAqF,EAAE;IACvJ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,kFAAkF,EAAE;IAC7I,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4FAA4F,EAAE;IACxK,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kSAAkS,EAAE;IACvW,EAAE,GAAG,EAAE,uCAAuC,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,ieAAie,EAAE;IACzjB;QACE,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,SAAS,CAAC,MAAM;QACtB,OAAO,EAAE,uJAAuJ;QAChK,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;KACvF;IACD;QACE,GAAG,EAAE,sBAAsB;QAC3B,IAAI,EAAE,SAAS,CAAC,OAAO;QACvB,OAAO,EAAE,8JAA8J;QACvK,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;KACvF;IACD,EAAE,GAAG,EAAE,4BAA4B,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8JAA8J,EAAE;IACvO,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2NAA2N,EAAE;IAChS,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8JAA8J,EAAE;IACjO,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,8CAA8C,EAAE;IAEvG,6EAA6E;IAC7E,0EAA0E;IAC1E,qEAAqE;IACrE,4EAA4E;IAC5E,uCAAuC;IACvC,EAAE;IACF,+EAA+E;IAC/E,4EAA4E;IAC5E,gEAAgE;IAChE,8EAA8E;IAC9E,4DAA4D;IAC5D,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,+EAA+E;IAC/E,0FAA0F;IAC1F,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAClH,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACjI,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAC5I,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4FAA4F,EAAE;IAClK,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mFAAmF,EAAE;IACrJ,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6EAA6E,EAAE;IAChJ,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAClJ,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6EAA6E,EAAE;IACxJ,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;CACzI,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const AppLayoutsSecuritySettingsLabels: LabellingUnitaryDef[] = [\n  { ref: 'pageTitle', kind: LabelKind.HEADING, purpose: 'Page heading for the account security-settings screen' },\n  { ref: 'sectionPasskeys', kind: LabelKind.HEADING, purpose: 'Section title for the passkeys management card' },\n  { ref: 'sectionTotp', kind: LabelKind.HEADING, purpose: 'Section title for the authenticator-app (TOTP) management card' },\n  { ref: 'sectionPhone', kind: LabelKind.HEADING, purpose: 'Section title for the phone / SMS management card' },\n  { ref: 'sectionPassword', kind: LabelKind.HEADING, purpose: 'Section title for the password management card' },\n  { ref: 'sectionIdentityLinks', kind: LabelKind.HEADING, purpose: 'Section title for the linked social-identity providers card' },\n  { ref: 'passkeyAdd', kind: LabelKind.BUTTON, purpose: 'Button that registers a new passkey' },\n  { ref: 'passkeyUnsupported', kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n  { ref: 'passkeyRemove', kind: LabelKind.BUTTON, purpose: 'Button that removes an individual passkey' },\n  { ref: 'totpSetup', kind: LabelKind.BUTTON, purpose: 'Button that starts authenticator-app setup' },\n  { ref: 'totpDisable', kind: LabelKind.BUTTON, purpose: 'Button that disables the authenticator app' },\n  { ref: 'totpOnlyMfaWarning', kind: LabelKind.MESSAGE, purpose: 'Warning that the authenticator app is the only enrolled second factor' },\n  { ref: 'phoneChange', kind: LabelKind.BUTTON, purpose: 'Button that changes the verified phone number' },\n  { ref: 'passwordChange', kind: LabelKind.BUTTON, purpose: 'Submit button that changes the existing password' },\n  { ref: 'passwordSet', kind: LabelKind.BUTTON, purpose: 'Submit button that sets a password for an account that has none' },\n  { ref: 'passwordCurrent', kind: LabelKind.LABEL, purpose: 'Field label for the current-password input' },\n  { ref: 'passwordNew', kind: LabelKind.LABEL, purpose: 'Field label for the new-password input' },\n  { ref: 'passwordConfirm', kind: LabelKind.LABEL, purpose: 'Field label for the confirm-new-password input' },\n  { ref: 'identityLinksUnlink', kind: LabelKind.BUTTON, purpose: 'Button that unlinks a connected social identity' },\n  // Sessions (#2317).\n  { ref: 'sectionSessions', kind: LabelKind.HEADING, purpose: 'Title of the row about the sessions the account is signed in with, on every device and browser' },\n  { ref: 'signOutEverywhere', kind: LabelKind.BUTTON, purpose: 'Button that signs the account out of every session on every device, including the one in use; also the confirm button of its dialog' },\n  { ref: 'signOutEverywhereDescription', kind: LabelKind.DESCRIPTION, purpose: 'One sentence under the sessions title: signing out everywhere ends every session of the account on every device and browser, this one included' },\n  { ref: 'signOutEverywhereConfirmTitle', kind: LabelKind.HEADING, purpose: 'Title of the dialog asking the person to confirm signing out of every session' },\n  { ref: 'signOutEverywhereConfirmDescription', kind: LabelKind.DESCRIPTION, purpose: 'Body of that dialog: every device and browser, this one included, will be signed out and will have to sign in again' },\n  {\n    ref: 'sessionDevice', kind: LabelKind.LABEL, purpose: 'Name of one signed-in session in the list: the browser and the operating system it signed in from, e.g. \"Chrome on macOS\"',\n    params: [{ key: 'browser', meaning: 'browser family word, e.g. Chrome' }, { key: 'operatingSystem', meaning: 'operating-system family word, e.g. macOS' }],\n  },\n  {\n    ref: 'sessionDetails', kind: LabelKind.MESSAGE, purpose: 'Second line of a session row: the address it signed in from and when it was last active',\n    params: [{ key: 'address', meaning: 'IP address the session signed in from' }, { key: 'lastActive', meaning: 'date and time of its last activity' }],\n  },\n  {\n    ref: 'sessionLastActive', kind: LabelKind.MESSAGE, purpose: 'Second line of a session row whose address is unknown: when it was last active',\n    params: [{ key: 'lastActive', meaning: 'date and time of its last activity' }],\n  },\n  { ref: 'sessionThisDevice', kind: LabelKind.LABEL, purpose: 'Short badge on the session in the list that the person is using right now' },\n  { ref: 'sessionSignOut', kind: LabelKind.BUTTON, purpose: 'Button on one session row that signs that session out, on its device' },\n  { ref: 'reauthTitle', kind: LabelKind.HEADING, purpose: 'Title of the re-authentication confirmation dialog' },\n  { ref: 'reauthDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that the person must confirm it is really them before this sensitive change goes through. Must not name a method: they may confirm with a password, a passkey or an authenticator code' },\n  { ref: 'reauthPassword', kind: LabelKind.LABEL, purpose: 'Field label for the re-authentication password input' },\n  { ref: 'cancel', kind: LabelKind.BUTTON, purpose: 'Button that closes the password change or set-password form without saving' },\n  { ref: 'success', kind: LabelKind.MESSAGE, purpose: 'Generic confirmation shown after a successful security change' },\n  { ref: 'error', kind: LabelKind.MESSAGE, purpose: 'Generic error shown when a security operation fails' },\n  { ref: 'passkeyCancelled', kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels passkey registration' },\n  { ref: 'passkeyAdding', kind: LabelKind.MESSAGE, purpose: 'In-progress status while a passkey is being registered' },\n  { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Loading status while the security settings are being fetched' },\n  { ref: 'passwordMismatch', kind: LabelKind.MESSAGE, purpose: 'Validation error when the new password and confirmation do not match' },\n  { ref: 'reauthPasswordPlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the re-authentication password input' },\n  { ref: 'reauthWithPassword', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity by typing the account password' },\n  { ref: 'reauthWithPasskey', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity with a registered passkey' },\n  { ref: 'reauthWithTotp', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity with a code from an authenticator app' },\n  { ref: 'reauthPasskeyPrompt', kind: LabelKind.MESSAGE, purpose: 'Explains that confirming will ask the browser or device to use a registered passkey' },\n  { ref: 'reauthTotpCode', kind: LabelKind.LABEL, purpose: 'Field label for the authenticator-app code input in the re-authentication dialog' },\n  { ref: 'reauthTotpCodePlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the authenticator-app code input, which takes the current one-time code' },\n  { ref: 'reauthNoAcceptedMethod', kind: LabelKind.MESSAGE, purpose: 'Shown in the re-authentication dialog when none of the account\\'s sign-in methods is accepted for this confirmation, because the account\\'s security policy requires a method it has not added yet. Tells the person to add that method (for example a passkey) in their security settings first' },\n  { ref: 'reauthGrantingOrganizationDescription', kind: LabelKind.DESCRIPTION, purpose: 'Shown in the re-authentication dialog to a person who has just opened the workspace of an organization they work in on behalf of another organization (for example a service firm\\'s staff opening a client\\'s workspace): that organization asks people working in it on behalf of another organization to confirm with a second factor (an authenticator code or a passkey) before continuing, and this confirmation counts for that organization only. Must not name a specific organization' },\n  {\n    ref: 'reauthWithProvider',\n    kind: LabelKind.BUTTON,\n    purpose: 'Choice in the re-authentication dialog: confirm it is you by signing in again at a linked identity provider, such as Google or the company\\'s sign-in',\n    params: [{ key: 'provider', meaning: 'display name of the linked identity provider' }],\n  },\n  {\n    ref: 'reauthProviderPrompt',\n    kind: LabelKind.MESSAGE,\n    purpose: 'Shown in the re-authentication dialog when a linked identity provider is chosen: confirming opens a window at that provider, where the person signs in again',\n    params: [{ key: 'provider', meaning: 'display name of the linked identity provider' }],\n  },\n  { ref: 'reauthProviderPopupBlocked', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when the browser blocked the sign-in window from opening; asks the person to allow pop-ups for this site and try again' },\n  { ref: 'reauthProviderTimedOut', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when signing in again at the identity provider was not finished in time (the sign-in window was left open or closed without finishing); they can try again or choose another method' },\n  { ref: 'reauthProviderFailed', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when signing in again at the identity provider did not confirm the person; they can try again or choose another method' },\n  { ref: 'phoneVerify', kind: LabelKind.BUTTON, purpose: 'Button that starts phone-number verification' },\n\n  // Per-factor descriptive copy. The panel presents each authentication factor\n  // as a scannable row (icon · name · status badge), so every state owns an\n  // explicit status word, and every factor owns a short plain-language\n  // description that is shown only while the factor is NOT active — it is the\n  // prompt for a decision not yet taken.\n  //\n  // Removed with the text they rendered, because each restated something else on\n  // the same row: the panel sub-heading (`pageDescription`), the status lines\n  // under a badge saying the same (`totpEnabled`, `totpNotSetup`,\n  // `phoneNotVerified`, `passwordSetStatus`, `passwordNotSetStatus`), the empty\n  // sentences under a \"Not configured\" badge (`passkeyEmpty`,\n  // `identityLinksEmpty`), the counts above the lists they count (`passkeyCount`,\n  // `identityLinksCount`) and the \"Verified:\" in front of the masked phone number\n  // (`phoneVerified`). Their `SecuritySettingsLabel` members went with them, as did\n  // `accountComplete` / `accountIncomplete`, `passkeyRename` and a `confirm` the\n  // re-authentication dialog never read (its confirm button is the critical-confirm's own).\n  { ref: 'statusActive', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor the user has configured' },\n  { ref: 'statusNotConfigured', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor the user has not configured yet' },\n  { ref: 'statusUnavailable', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor unavailable on the current device or browser' },\n  { ref: 'passkeysDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of what a passkey is and why it is the strongest sign-in method' },\n  { ref: 'totpDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of authenticator-app one-time codes as a second factor' },\n  { ref: 'phoneDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of SMS one-time codes to a verified phone number' },\n  { ref: 'passwordDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of the account password as a sign-in credential' },\n  { ref: 'identityLinksDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of external identity accounts linked for sign-in' },\n  { ref: 'passkeyAdded', kind: LabelKind.MESSAGE, purpose: 'Registration date shown under an individual passkey entry', params: ['date'] },\n];\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS, AppLayoutsSecuritySettingsLabels);\n"]}

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAE9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4FAA4F,CAAC;AAqBtI,eAAO,MAAM,sCAAsC,GAAI,sBAEpD,wBAAwB,KAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAiMjD,CAAC"}
+{"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAE9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4FAA4F,CAAC;AAuBtI,eAAO,MAAM,sCAAsC,GAAI,sBAEpD,wBAAwB,KAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAuMjD,CAAC"}

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.js

@@ -10,6 +10,7 @@ import { z } from 'zod';
 import { ResourceAutomatedForm } from '../../../components/form/automated/ResourceAutomatedForm.js';
 import { ResourceLayout_Header } from '../../../components/resources/ResourceLayout_Header.js';
 import { useResourceRegistry } from '../../../core/resources/useResourceRegistry.js';
+import { frontendResourceUtils } from '../../../core/resources/frontend-resource.utils.js';
 import { useNavigationController } from '../../../core/navigation/useNavigationController.js';
 import { NavigationZone } from '../../../core/navigation/navigation.schemas.js';
 import { useResourceOperationViewContext } from '../../../core/resources/ResourceOperationViewContext.js';
@@ -19,6 +20,7 @@ import { SsoConnection_Operations } from '@wildo-ai/saas-models';
 import { FrontendComponentType } from '@wildo-ai/presets-components-models';
 import { Button, ButtonVariants_Variant } from '../../../components/actions/button.js';
 import { ContentSection, ContentSectionLegend } from '../../../components/sections/content-section.js';
+import { SectionLegendVoiceHost } from '../../../components/sections/section-legend-voice.js';
 import { useUserFacingErrorMessage } from '../../../core/errors/useUserFacingErrorMessage.js';
 import { Input } from '../../../components/form/controls/input.js';
 import { resolveQuickCreateCreatedResourceId } from '../../../core/resources/relationship-quick-create.frontend.utils.js';
@@ -104,10 +106,8 @@ export const ResourceLayoutPreset_Create_SamlWizard = ({ resourceContext, }) =>
         });
         if (createdResourceId) {
             const navigated = navigateToPreferredRead({
-                contextResourceIdentifiers: {
-                    ...currentResourceContext.contextResourceIdentifiers,
-                    [resourceType]: createdResourceId,
-                },
+                // The created record's identifiers, built the way every create reveal builds them.
+                contextResourceIdentifiers: frontendResourceUtils.buildRecordIdentifiersFromCollection(currentResourceContext.contextResourceIdentifiers, resourceType, createdResourceId),
                 fallbackToGoBack: false,
             });
             if (!navigated) {
@@ -123,14 +123,17 @@ export const ResourceLayoutPreset_Create_SamlWizard = ({ resourceContext, }) =>
     if (!isReady)
         return null;
     const importButtonLabel = tSaml('saml.import');
-    return (_jsxs("div", { className: "space-y-section", children: [_jsx(ResourceLayout_Header, { resourceContext: currentResourceContext, navigationZone: navigationZone, navigationInitiator: navigationInitiator }), _jsxs(ContentSection, { className: "max-w-2xl", children: [_jsx(ContentSectionLegend, { children: tSaml('saml.metadataImport') }), _jsx("p", { className: "text-sm text-muted-foreground mb-field", children: tSaml('saml.metadataImportHelp') }), _jsxs("div", { className: "flex gap-field", onKeyDown: (e) => e.key === 'Enter' && handleDiscover(), children: [_jsx(Input, { name: "saml-metadata-url", schema: z.string(), type: "url", 
-                                // I-6: placeholder is localizable — translators may want to use a
-                                // region-appropriate IdP example domain. RFC 2606 reserves
-                                // `idp.example.com`; the default English copy ships with that.
-                                placeholder: tSaml('saml.metadataUrlPlaceholder'), value: metadataUrl, onChange: (value) => setMetadataUrl(String(value)), className: "flex-1" }), _jsx(Button, { type: "button", variant: ButtonVariants_Variant.OUTLINE, onClick: handleDiscover, disabled: isImporting, children: isImporting ? (tSaml('saml.importing')) : importButtonLabel })] }), importError && (_jsx("p", { className: "text-sm text-destructive mt-item-xs", role: "alert", children: importError })), discoveredData && (_jsx("p", { className: "text-sm text-success mt-item-xs", role: "status", children: tSaml('saml.importSuccess') }))] }), _jsx(ResourceAutomatedForm, { resourceContext: currentResourceContext, navigationZone: navigationZone, onSuccess: handleSuccess, onError: handleError, 
-                // Audit D5 — overlay-hosted create forms carry a Cancel that closes the
-                // modal through the same path as the top-right X (parity with the
-                // default create layout).
-                onCancel: navigationZone === NavigationZone.OVERLAY ? () => closeOverlay() : undefined, showErrorSummary: true, className: "max-w-2xl", defaultValuesOverride: discoveredData })] }));
+    return (
+    // A create page is a FORM surface wherever it renders — including a pane opened from a record's related
+    // records, inside a read subtree whose EYEBROW voice would otherwise reach this section's heading.
+    _jsx(SectionLegendVoiceHost, { voice: undefined, children: _jsxs("div", { className: "space-y-section", children: [_jsx(ResourceLayout_Header, { resourceContext: currentResourceContext, navigationZone: navigationZone, navigationInitiator: navigationInitiator }), _jsxs(ContentSection, { className: "max-w-2xl", children: [_jsx(ContentSectionLegend, { children: tSaml('saml.metadataImport') }), _jsx("p", { className: "text-sm text-muted-foreground mb-field", children: tSaml('saml.metadataImportHelp') }), _jsxs("div", { className: "flex gap-field", onKeyDown: (e) => e.key === 'Enter' && handleDiscover(), children: [_jsx(Input, { name: "saml-metadata-url", schema: z.string(), type: "url", 
+                                    // I-6: placeholder is localizable — translators may want to use a
+                                    // region-appropriate IdP example domain. RFC 2606 reserves
+                                    // `idp.example.com`; the default English copy ships with that.
+                                    placeholder: tSaml('saml.metadataUrlPlaceholder'), value: metadataUrl, onChange: (value) => setMetadataUrl(String(value)), className: "flex-1" }), _jsx(Button, { type: "button", variant: ButtonVariants_Variant.OUTLINE, onClick: handleDiscover, disabled: isImporting, children: isImporting ? (tSaml('saml.importing')) : importButtonLabel })] }), importError && (_jsx("p", { className: "text-sm text-destructive mt-item-xs", role: "alert", children: importError })), discoveredData && (_jsx("p", { className: "text-sm text-success-subtle-foreground mt-item-xs", role: "status", children: tSaml('saml.importSuccess') }))] }), _jsx(ResourceAutomatedForm, { resourceContext: currentResourceContext, navigationZone: navigationZone, onSuccess: handleSuccess, onError: handleError, 
+                    // Audit D5 — overlay-hosted create forms carry a Cancel that closes the
+                    // modal through the same path as the top-right X (parity with the
+                    // default create layout).
+                    onCancel: navigationZone === NavigationZone.OVERLAY ? () => closeOverlay() : undefined, showErrorSummary: true, className: "max-w-2xl", defaultValuesOverride: discoveredData })] }) }));
 };
 //# sourceMappingURL=ResourceLayoutPreset_Create_SamlWizard.js.map

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":";AAAA;;;;;GAKG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gEAAgE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAC3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,6EAA6E,CAAC;AAElI,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,EACrD,eAAe,GACU,EAA4B,EAAE;IACvD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EACJ,eAAe,EAAE,sBAAsB,EACvC,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,uBAAuB,EACvB,gBAAgB,GACjB,GAAG,+BAA+B,EAAE,CAAC;IACtC,MAAM,EAAE,YAAY,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACnD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAC5G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,0FAA0F;IAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;IAC9E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,iBAAiB,GAAG,OAAO,CAC/B,sBAAsB,CAAC,iBAAiB,EAAE,kBAAkB;WACzD,eAAe,CAAC,iBAAiB,EAAE,kBAAkB,CACzD,CAAC;IAEF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAsC,SAAS,CAAC,CAAC;IAErG,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAE9G,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBAChF,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,kBAAkB;gBAChE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,eAAe,EAAE;gBACjD,oBAAoB;gBACpB,2BAA2B,EAAE,sBAAsB,CAAC,2BAA2B;gBAC/E,WAAW,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;aAClC,CAAC,CAMD,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;YAC5C,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5C,iBAAiB,CAAC;gBAChB,QAAQ,EAAE,WAAW,CAAC,IAAI;gBAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,iBAAiB;gBACnE,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,kBAAkB;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,cAAc,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,2BAA2B,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC,CAAC;IAExJ,MAAM,aAAa,GAAG,WAAW,CAC/B,CAAC,MAA+B,EAAE,EAAE;QAClC,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,cAAc,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC9C,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;YAC5D,MAAM;YACN,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,uBAAuB,CAAC;gBACxC,0BAA0B,EAAE;oBAC5B,GAAG,sBAAsB,CAAC,0BAA0B;oBACpD,CAAC,YAAY,CAAC,EAAE,iBAAiB;iBAChC;gBACD,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QACD,gBAAgB,EAAE,CAAC;IACrB,CAAC,EACD,CAAC,YAAY,EAAE,sBAAsB,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CACxK,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,WAAW,CAAC,KAAK,EAAE,wBAAwB,EAAE,wCAAwC,CAAC,CAAC;IACzF,CAAC,EACD,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAE/C,OAAO,CACL,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,GACxC,EAEF,MAAC,cAAc,IAAC,SAAS,EAAC,WAAW,aACnC,KAAC,oBAAoB,cAClB,KAAK,CAAC,qBAAqB,CAAC,GACR,EACvB,YAAG,SAAS,EAAC,wCAAwC,YAClD,KAAK,CAAC,yBAAyB,CAAC,GAC/B,EACJ,eAAK,SAAS,EAAC,gBAAgB,EAAC,SAAS,EAAE,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,cAAc,EAAE,aAC1G,KAAC,KAAK,IACJ,IAAI,EAAC,mBAAmB,EACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAClB,IAAI,EAAC,KAAK;gCACV,kEAAkE;gCAClE,2DAA2D;gCAC3D,+DAA+D;gCAC/D,WAAW,EAAE,KAAK,CAAC,6BAA6B,CAAC,EACjD,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAClD,SAAS,EAAC,QAAQ,GAClB,EACF,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,YAC1G,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,GACrD,IACL,EACL,WAAW,IAAI,CACd,YAAG,SAAS,EAAC,qCAAqC,EAAC,IAAI,EAAC,OAAO,YAC5D,WAAW,GACV,CACL,EACA,cAAc,IAAI,CACjB,YAAG,SAAS,EAAC,iCAAiC,EAAC,IAAI,EAAC,QAAQ,YACzD,KAAK,CAAC,oBAAoB,CAAC,GAC1B,CACL,IACc,EAEjB,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW;gBACpB,wEAAwE;gBACxE,kEAAkE;gBAClE,0BAA0B;gBAC1B,QAAQ,EAAE,cAAc,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,EACtF,gBAAgB,QAChB,SAAS,EAAC,WAAW,EACrB,qBAAqB,EAAE,cAAc,GACrC,IACE,CACP,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * SAML SSO Connection Create Wizard\n *\n * Adds metadata URL import and SAML-specific UX to the standard Create form.\n * Used for organizationSsoConnections and applicationSsoConnections.\n */\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { z } from 'zod';\nimport { BaseResourcesLayoutProps } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\nimport { ResourceAutomatedForm } from '~wildo-frontend-lib/components/form/automated/ResourceAutomatedForm';\nimport { ResourceLayout_Header } from '~wildo-frontend-lib/components/resources/ResourceLayout_Header';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useNavigationController } from '~wildo-frontend-lib/core/navigation/useNavigationController';\nimport { NavigationZone } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\nimport { useResourceOperationViewContext } from '~wildo-frontend-lib/core/resources/ResourceOperationViewContext';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n  SsoProtocol,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { Input } from '~wildo-frontend-lib/components/form/controls/input';\nimport { resolveQuickCreateCreatedResourceId } from '~wildo-frontend-lib/core/resources/relationship-quick-create.frontend.utils';\n\nexport const ResourceLayoutPreset_Create_SamlWizard = ({\n  resourceContext,\n}: BaseResourcesLayoutProps): React.JSX.Element | null => {\n  const { registry, doOperation } = useResourceRegistry();\n  const {\n    resourceContext: currentResourceContext,\n    navigationZone,\n    navigationInitiator,\n    resourceType,\n    contextualParameters,\n    reportError,\n    navigateToPreferredRead,\n    goBackWithinZone,\n  } = useResourceOperationViewContext();\n  const { closeOverlay } = useNavigationController();\n  const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_CREATE });\n  // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n  // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n  // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n  // string) and are gone rather than revived — every key here IS declared in the\n  // layout's `*.labels.ts`, so a component-local literal would be a second source of\n  // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n  // considered and rejected: for a label with no fallback it converts an ugly but\n  // diagnosable `components.RESOURCES_LAYOUTS_CREATE.saml.import` into an INVISIBLE button.\n  const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_CREATE);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const isQuickCreateFlow = Boolean(\n    currentResourceContext.additionalContext?.quickCreateRequest\n    ?? resourceContext.additionalContext?.quickCreateRequest,\n  );\n\n  const [metadataUrl, setMetadataUrl] = useState('');\n  const [isImporting, setIsImporting] = useState(false);\n  const [importError, setImportError] = useState<string | null>(null);\n  const [discoveredData, setDiscoveredData] = useState<Record<string, unknown> | undefined>(undefined);\n\n  const resourceConfig = useMemo(() => registry.resourceConfigurations[resourceType], [registry, resourceType]);\n\n  const handleDiscover = useCallback(async () => {\n    const url = metadataUrl.trim();\n    if (!url) {\n      setImportError(tSaml('saml.metadataUrlRequired'));\n      return;\n    }\n    setIsImporting(true);\n    setImportError(null);\n    try {\n      const discoverPathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n        resourceIdentifier: resourceType,\n        operationIdentifier: SsoConnection_Operations.DISCOVER_ENDPOINTS,\n        variantType: ResourceOperationVariantType.API_CALL,\n        isOperationDefault: true,\n        isBulkOperation: false,\n      });\n\n      const result = (await doOperation(discoverPathKey, {\n        contextualParameters,\n        parentResourcesRequirements: currentResourceContext.parentResourcesRequirements,\n        requestData: { metadataUrl: url },\n      })) as {\n        entityId?: string;\n        ssoUrl?: string;\n        sloUrl?: string;\n        x509Certificates?: string[];\n        nameIdFormat?: string;\n      };\n\n      const certs = result.x509Certificates ?? [];\n      const x509CertificatePem = certs.join('\\n');\n\n      setDiscoveredData({\n        protocol: SsoProtocol.SAML,\n        displayName: result.entityId?.split('/').pop() ?? 'SAML Connection',\n        saml: {\n          entityId: result.entityId,\n          ssoUrl: result.ssoUrl,\n          sloUrl: result.sloUrl,\n          nameIdFormat: result.nameIdFormat,\n          x509CertificatePem,\n        },\n      });\n    } catch (err) {\n      // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n      setImportError(toUserFacingErrorMessage(err));\n    } finally {\n      setIsImporting(false);\n    }\n  }, [contextualParameters, currentResourceContext.parentResourcesRequirements, doOperation, metadataUrl, resourceType, toUserFacingErrorMessage, tSaml]);\n\n  const handleSuccess = useCallback(\n    (result: Record<string, unknown>) => {\n      if (isQuickCreateFlow) {\n        if (navigationZone === NavigationZone.OVERLAY) {\n          closeOverlay();\n        } else {\n          goBackWithinZone();\n        }\n        return;\n      }\n\n      const createdResourceId = resolveQuickCreateCreatedResourceId({\n        result,\n        resourceType,\n        registry,\n      });\n\n      if (createdResourceId) {\n        const navigated = navigateToPreferredRead({\n          contextResourceIdentifiers: {\n          ...currentResourceContext.contextResourceIdentifiers,\n          [resourceType]: createdResourceId,\n          },\n          fallbackToGoBack: false,\n        });\n        if (!navigated) {\n          goBackWithinZone();\n        }\n        return;\n      }\n      goBackWithinZone();\n    },\n    [closeOverlay, currentResourceContext.contextResourceIdentifiers, goBackWithinZone, isQuickCreateFlow, navigateToPreferredRead, navigationZone, registry, resourceType]\n  );\n\n  const handleError = useCallback(\n    (error: Error) => {\n      reportError(error, 'Form submission failed', 'ResourceLayoutPreset_Create_SamlWizard');\n    },\n    [reportError]\n  );\n\n  if (!isReady) return null;\n\n  const importButtonLabel = tSaml('saml.import');\n\n  return (\n    <div className=\"space-y-section\">\n      <ResourceLayout_Header\n        resourceContext={currentResourceContext}\n        navigationZone={navigationZone}\n        navigationInitiator={navigationInitiator}\n      />\n\n      <ContentSection className=\"max-w-2xl\">\n        <ContentSectionLegend>\n          {tSaml('saml.metadataImport')}\n        </ContentSectionLegend>\n        <p className=\"text-sm text-muted-foreground mb-field\">\n          {tSaml('saml.metadataImportHelp')}\n        </p>\n        <div className=\"flex gap-field\" onKeyDown={(e: React.KeyboardEvent) => e.key === 'Enter' && handleDiscover()}>\n          <Input\n            name=\"saml-metadata-url\"\n            schema={z.string()}\n            type=\"url\"\n            // I-6: placeholder is localizable — translators may want to use a\n            // region-appropriate IdP example domain. RFC 2606 reserves\n            // `idp.example.com`; the default English copy ships with that.\n            placeholder={tSaml('saml.metadataUrlPlaceholder')}\n            value={metadataUrl}\n            onChange={(value) => setMetadataUrl(String(value))}\n            className=\"flex-1\"\n          />\n          <Button type=\"button\" variant={ButtonVariants_Variant.OUTLINE} onClick={handleDiscover} disabled={isImporting}>\n            {isImporting ? (tSaml('saml.importing')) : importButtonLabel}\n          </Button>\n        </div>\n        {importError && (\n          <p className=\"text-sm text-destructive mt-item-xs\" role=\"alert\">\n            {importError}\n          </p>\n        )}\n        {discoveredData && (\n          <p className=\"text-sm text-success mt-item-xs\" role=\"status\">\n            {tSaml('saml.importSuccess')}\n          </p>\n        )}\n      </ContentSection>\n\n      <ResourceAutomatedForm\n        resourceContext={currentResourceContext}\n        navigationZone={navigationZone}\n        onSuccess={handleSuccess}\n        onError={handleError}\n        // Audit D5 — overlay-hosted create forms carry a Cancel that closes the\n        // modal through the same path as the top-right X (parity with the\n        // default create layout).\n        onCancel={navigationZone === NavigationZone.OVERLAY ? () => closeOverlay() : undefined}\n        showErrorSummary\n        className=\"max-w-2xl\"\n        defaultValuesOverride={discoveredData}\n      />\n    </div>\n  );\n};\n"]}
+{"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":";AAAA;;;;;GAKG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gEAAgE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,sBAAsB,EAAE,MAAM,8DAA8D,CAAC;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAC3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,6EAA6E,CAAC;AAElI,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,EACrD,eAAe,GACU,EAA4B,EAAE;IACvD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EACJ,eAAe,EAAE,sBAAsB,EACvC,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,uBAAuB,EACvB,gBAAgB,GACjB,GAAG,+BAA+B,EAAE,CAAC;IACtC,MAAM,EAAE,YAAY,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACnD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAC5G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,0FAA0F;IAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;IAC9E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,iBAAiB,GAAG,OAAO,CAC/B,sBAAsB,CAAC,iBAAiB,EAAE,kBAAkB;WACzD,eAAe,CAAC,iBAAiB,EAAE,kBAAkB,CACzD,CAAC;IAEF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAsC,SAAS,CAAC,CAAC;IAErG,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAE9G,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBAChF,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,kBAAkB;gBAChE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,eAAe,EAAE;gBACjD,oBAAoB;gBACpB,2BAA2B,EAAE,sBAAsB,CAAC,2BAA2B;gBAC/E,WAAW,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;aAClC,CAAC,CAMD,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;YAC5C,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5C,iBAAiB,CAAC;gBAChB,QAAQ,EAAE,WAAW,CAAC,IAAI;gBAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,iBAAiB;gBACnE,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,kBAAkB;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,cAAc,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,2BAA2B,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC,CAAC;IAExJ,MAAM,aAAa,GAAG,WAAW,CAC/B,CAAC,MAA+B,EAAE,EAAE;QAClC,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,cAAc,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC9C,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;YAC5D,MAAM;YACN,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,uBAAuB,CAAC;gBACxC,mFAAmF;gBACnF,0BAA0B,EAAE,qBAAqB,CAAC,oCAAoC,CACpF,sBAAsB,CAAC,0BAA0B,EACjD,YAAY,EACZ,iBAAiB,CAClB;gBACD,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QACD,gBAAgB,EAAE,CAAC;IACrB,CAAC,EACD,CAAC,YAAY,EAAE,sBAAsB,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CACxK,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,WAAW,CAAC,KAAK,EAAE,wBAAwB,EAAE,wCAAwC,CAAC,CAAC;IACzF,CAAC,EACD,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAE/C,OAAO;IACL,wGAAwG;IACxG,mGAAmG;IACnG,KAAC,sBAAsB,IAAC,KAAK,EAAE,SAAS,YACxC,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,GACxC,EAEF,MAAC,cAAc,IAAC,SAAS,EAAC,WAAW,aACnC,KAAC,oBAAoB,cAClB,KAAK,CAAC,qBAAqB,CAAC,GACR,EACvB,YAAG,SAAS,EAAC,wCAAwC,YAClD,KAAK,CAAC,yBAAyB,CAAC,GAC/B,EACJ,eAAK,SAAS,EAAC,gBAAgB,EAAC,SAAS,EAAE,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,cAAc,EAAE,aAC1G,KAAC,KAAK,IACJ,IAAI,EAAC,mBAAmB,EACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAClB,IAAI,EAAC,KAAK;oCACV,kEAAkE;oCAClE,2DAA2D;oCAC3D,+DAA+D;oCAC/D,WAAW,EAAE,KAAK,CAAC,6BAA6B,CAAC,EACjD,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAClD,SAAS,EAAC,QAAQ,GAClB,EACF,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,YAC1G,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,GACrD,IACL,EACL,WAAW,IAAI,CACd,YAAG,SAAS,EAAC,qCAAqC,EAAC,IAAI,EAAC,OAAO,YAC5D,WAAW,GACV,CACL,EACA,cAAc,IAAI,CACjB,YAAG,SAAS,EAAC,mDAAmD,EAAC,IAAI,EAAC,QAAQ,YAC3E,KAAK,CAAC,oBAAoB,CAAC,GAC1B,CACL,IACc,EAEjB,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW;oBACpB,wEAAwE;oBACxE,kEAAkE;oBAClE,0BAA0B;oBAC1B,QAAQ,EAAE,cAAc,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,EACtF,gBAAgB,QAChB,SAAS,EAAC,WAAW,EACrB,qBAAqB,EAAE,cAAc,GACrC,IACE,GACmB,CAC1B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * SAML SSO Connection Create Wizard\n *\n * Adds metadata URL import and SAML-specific UX to the standard Create form.\n * Used for organizationSsoConnections and applicationSsoConnections.\n */\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { z } from 'zod';\nimport { BaseResourcesLayoutProps } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\nimport { ResourceAutomatedForm } from '~wildo-frontend-lib/components/form/automated/ResourceAutomatedForm';\nimport { ResourceLayout_Header } from '~wildo-frontend-lib/components/resources/ResourceLayout_Header';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { frontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { useNavigationController } from '~wildo-frontend-lib/core/navigation/useNavigationController';\nimport { NavigationZone } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\nimport { useResourceOperationViewContext } from '~wildo-frontend-lib/core/resources/ResourceOperationViewContext';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n  SsoProtocol,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { SectionLegendVoiceHost } from '~wildo-frontend-lib/components/sections/section-legend-voice';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { Input } from '~wildo-frontend-lib/components/form/controls/input';\nimport { resolveQuickCreateCreatedResourceId } from '~wildo-frontend-lib/core/resources/relationship-quick-create.frontend.utils';\n\nexport const ResourceLayoutPreset_Create_SamlWizard = ({\n  resourceContext,\n}: BaseResourcesLayoutProps): React.JSX.Element | null => {\n  const { registry, doOperation } = useResourceRegistry();\n  const {\n    resourceContext: currentResourceContext,\n    navigationZone,\n    navigationInitiator,\n    resourceType,\n    contextualParameters,\n    reportError,\n    navigateToPreferredRead,\n    goBackWithinZone,\n  } = useResourceOperationViewContext();\n  const { closeOverlay } = useNavigationController();\n  const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_CREATE });\n  // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n  // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n  // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n  // string) and are gone rather than revived — every key here IS declared in the\n  // layout's `*.labels.ts`, so a component-local literal would be a second source of\n  // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n  // considered and rejected: for a label with no fallback it converts an ugly but\n  // diagnosable `components.RESOURCES_LAYOUTS_CREATE.saml.import` into an INVISIBLE button.\n  const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_CREATE);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const isQuickCreateFlow = Boolean(\n    currentResourceContext.additionalContext?.quickCreateRequest\n    ?? resourceContext.additionalContext?.quickCreateRequest,\n  );\n\n  const [metadataUrl, setMetadataUrl] = useState('');\n  const [isImporting, setIsImporting] = useState(false);\n  const [importError, setImportError] = useState<string | null>(null);\n  const [discoveredData, setDiscoveredData] = useState<Record<string, unknown> | undefined>(undefined);\n\n  const resourceConfig = useMemo(() => registry.resourceConfigurations[resourceType], [registry, resourceType]);\n\n  const handleDiscover = useCallback(async () => {\n    const url = metadataUrl.trim();\n    if (!url) {\n      setImportError(tSaml('saml.metadataUrlRequired'));\n      return;\n    }\n    setIsImporting(true);\n    setImportError(null);\n    try {\n      const discoverPathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n        resourceIdentifier: resourceType,\n        operationIdentifier: SsoConnection_Operations.DISCOVER_ENDPOINTS,\n        variantType: ResourceOperationVariantType.API_CALL,\n        isOperationDefault: true,\n        isBulkOperation: false,\n      });\n\n      const result = (await doOperation(discoverPathKey, {\n        contextualParameters,\n        parentResourcesRequirements: currentResourceContext.parentResourcesRequirements,\n        requestData: { metadataUrl: url },\n      })) as {\n        entityId?: string;\n        ssoUrl?: string;\n        sloUrl?: string;\n        x509Certificates?: string[];\n        nameIdFormat?: string;\n      };\n\n      const certs = result.x509Certificates ?? [];\n      const x509CertificatePem = certs.join('\\n');\n\n      setDiscoveredData({\n        protocol: SsoProtocol.SAML,\n        displayName: result.entityId?.split('/').pop() ?? 'SAML Connection',\n        saml: {\n          entityId: result.entityId,\n          ssoUrl: result.ssoUrl,\n          sloUrl: result.sloUrl,\n          nameIdFormat: result.nameIdFormat,\n          x509CertificatePem,\n        },\n      });\n    } catch (err) {\n      // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n      setImportError(toUserFacingErrorMessage(err));\n    } finally {\n      setIsImporting(false);\n    }\n  }, [contextualParameters, currentResourceContext.parentResourcesRequirements, doOperation, metadataUrl, resourceType, toUserFacingErrorMessage, tSaml]);\n\n  const handleSuccess = useCallback(\n    (result: Record<string, unknown>) => {\n      if (isQuickCreateFlow) {\n        if (navigationZone === NavigationZone.OVERLAY) {\n          closeOverlay();\n        } else {\n          goBackWithinZone();\n        }\n        return;\n      }\n\n      const createdResourceId = resolveQuickCreateCreatedResourceId({\n        result,\n        resourceType,\n        registry,\n      });\n\n      if (createdResourceId) {\n        const navigated = navigateToPreferredRead({\n          // The created record's identifiers, built the way every create reveal builds them.\n          contextResourceIdentifiers: frontendResourceUtils.buildRecordIdentifiersFromCollection(\n            currentResourceContext.contextResourceIdentifiers,\n            resourceType,\n            createdResourceId,\n          ),\n          fallbackToGoBack: false,\n        });\n        if (!navigated) {\n          goBackWithinZone();\n        }\n        return;\n      }\n      goBackWithinZone();\n    },\n    [closeOverlay, currentResourceContext.contextResourceIdentifiers, goBackWithinZone, isQuickCreateFlow, navigateToPreferredRead, navigationZone, registry, resourceType]\n  );\n\n  const handleError = useCallback(\n    (error: Error) => {\n      reportError(error, 'Form submission failed', 'ResourceLayoutPreset_Create_SamlWizard');\n    },\n    [reportError]\n  );\n\n  if (!isReady) return null;\n\n  const importButtonLabel = tSaml('saml.import');\n\n  return (\n    // A create page is a FORM surface wherever it renders — including a pane opened from a record's related\n    // records, inside a read subtree whose EYEBROW voice would otherwise reach this section's heading.\n    <SectionLegendVoiceHost voice={undefined}>\n    <div className=\"space-y-section\">\n      <ResourceLayout_Header\n        resourceContext={currentResourceContext}\n        navigationZone={navigationZone}\n        navigationInitiator={navigationInitiator}\n      />\n\n      <ContentSection className=\"max-w-2xl\">\n        <ContentSectionLegend>\n          {tSaml('saml.metadataImport')}\n        </ContentSectionLegend>\n        <p className=\"text-sm text-muted-foreground mb-field\">\n          {tSaml('saml.metadataImportHelp')}\n        </p>\n        <div className=\"flex gap-field\" onKeyDown={(e: React.KeyboardEvent) => e.key === 'Enter' && handleDiscover()}>\n          <Input\n            name=\"saml-metadata-url\"\n            schema={z.string()}\n            type=\"url\"\n            // I-6: placeholder is localizable — translators may want to use a\n            // region-appropriate IdP example domain. RFC 2606 reserves\n            // `idp.example.com`; the default English copy ships with that.\n            placeholder={tSaml('saml.metadataUrlPlaceholder')}\n            value={metadataUrl}\n            onChange={(value) => setMetadataUrl(String(value))}\n            className=\"flex-1\"\n          />\n          <Button type=\"button\" variant={ButtonVariants_Variant.OUTLINE} onClick={handleDiscover} disabled={isImporting}>\n            {isImporting ? (tSaml('saml.importing')) : importButtonLabel}\n          </Button>\n        </div>\n        {importError && (\n          <p className=\"text-sm text-destructive mt-item-xs\" role=\"alert\">\n            {importError}\n          </p>\n        )}\n        {discoveredData && (\n          <p className=\"text-sm text-success-subtle-foreground mt-item-xs\" role=\"status\">\n            {tSaml('saml.importSuccess')}\n          </p>\n        )}\n      </ContentSection>\n\n      <ResourceAutomatedForm\n        resourceContext={currentResourceContext}\n        navigationZone={navigationZone}\n        onSuccess={handleSuccess}\n        onError={handleError}\n        // Audit D5 — overlay-hosted create forms carry a Cancel that closes the\n        // modal through the same path as the top-right X (parity with the\n        // default create layout).\n        onCancel={navigationZone === NavigationZone.OVERLAY ? () => closeOverlay() : undefined}\n        showErrorSummary\n        className=\"max-w-2xl\"\n        defaultValuesOverride={discoveredData}\n      />\n    </div>\n    </SectionLegendVoiceHost>\n  );\n};\n"]}

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Read_SsoSaml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceLayoutPreset_Read_SsoSaml.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Read_SsoSaml.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,wBAAwB,EAAE,MAAM,4FAA4F,CAAC;AAKtI,eAAO,MAAM,iCAAiC,GAAI,OAAO,wBAAwB,KAAG,KAAK,CAAC,GAAG,CAAC,OAO7F,CAAC"}
+{"version":3,"file":"ResourceLayoutPreset_Read_SsoSaml.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Read_SsoSaml.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,wBAAwB,EAAE,MAAM,4FAA4F,CAAC;AAKtI,eAAO,MAAM,iCAAiC,GAAI,OAAO,wBAAwB,KAAG,KAAK,CAAC,GAAG,CAAC,OAO7F,CAAC"}

package/dist/esm/components/auth/admin-config/SsoConnectionSamlReadSection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SsoConnectionSamlReadSection.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAc9D,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,+DAA+D,CAAC;AAGtH,UAAU,iCAAiC;IACzC,eAAe,EAAE,gCAAgC,CAAC;CACnD;AAwBD,wBAAgB,4BAA4B,CAAC,EAC3C,eAAe,GAChB,EAAE,iCAAiC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAgM9D"}
+{"version":3,"file":"SsoConnectionSamlReadSection.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAc9D,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,+DAA+D,CAAC;AAGtH,UAAU,iCAAiC;IACzC,eAAe,EAAE,gCAAgC,CAAC;CACnD;AAwBD,wBAAgB,4BAA4B,CAAC,EAC3C,eAAe,GAChB,EAAE,iCAAiC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAgM9D"}

package/dist/esm/components/auth/admin-config/SsoConnectionSamlReadSection.js

@@ -95,12 +95,12 @@ export function SsoConnectionSamlReadSection({ resourceContext, }) {
                                 const certStatusClass = !cert.valid || daysRemaining < 0 || daysRemaining < 7
                                     ? 'text-destructive'
                                     : daysRemaining < 30
-                                        ? 'text-warning'
+                                        ? 'text-warning-subtle-foreground'
                                         : '';
                                 const fingerprintAbbr = cert.fingerprint
                                     ? cert.fingerprint.slice(0, 12) + (cert.fingerprint.length > 12 ? '…' : '')
                                     : null;
-                                return (_jsxs("div", { className: `pl-item-sm ${certStatusClass}`, children: [_jsxs("p", { children: [cert.valid ? '✓' : '✗', " Certificate ", i + 1, ":", ' ', cert.valid ? 'Valid' : 'Invalid', " \u2014 expires", ' ', cert.expiresAt?.slice(0, 10) ?? 'N/A', " (", cert.daysRemaining, " days)", fingerprintAbbr != null && (_jsxs("span", { className: "text-muted-foreground text-xs ml-1", children: ["(", fingerprintAbbr, ")"] }))] }), cert.warnings?.length > 0 && (_jsx("p", { className: "text-warning text-xs", children: cert.warnings.join('; ') }))] }, i));
-                            }), testResult.errors?.map((e, i) => (_jsx("p", { className: "text-destructive", children: e }, i))), testResult.warnings?.map((w, i) => (_jsx("p", { className: "text-warning", children: w }, i))), _jsxs("p", { className: "font-medium mt-item-sm", children: ["Overall: ", testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'] })] })] }))] }));
+                                return (_jsxs("div", { className: `pl-item-sm ${certStatusClass}`, children: [_jsxs("p", { children: [cert.valid ? '✓' : '✗', " Certificate ", i + 1, ":", ' ', cert.valid ? 'Valid' : 'Invalid', " \u2014 expires", ' ', cert.expiresAt?.slice(0, 10) ?? 'N/A', " (", cert.daysRemaining, " days)", fingerprintAbbr != null && (_jsxs("span", { className: "text-muted-foreground text-xs ml-1", children: ["(", fingerprintAbbr, ")"] }))] }), cert.warnings?.length > 0 && (_jsx("p", { className: "text-warning-subtle-foreground text-xs", children: cert.warnings.join('; ') }))] }, i));
+                            }), testResult.errors?.map((e, i) => (_jsx("p", { className: "text-destructive", children: e }, i))), testResult.warnings?.map((w, i) => (_jsx("p", { className: "text-warning-subtle-foreground", children: w }, i))), _jsxs("p", { className: "font-medium mt-item-sm", children: ["Overall: ", testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'] })] })] }))] }));
 }
 //# sourceMappingURL=SsoConnectionSamlReadSection.js.map

package/dist/esm/components/auth/admin-config/SsoConnectionSamlReadSection.js.map

@@ -1 +1 @@
-{"version":3,"file":"SsoConnectionSamlReadSection.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":";AAAA;;;GAGG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EACL,aAAa,EACb,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAC1H,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AA4BtG,MAAM,UAAU,4BAA4B,CAAC,EAC3C,eAAe,GACmB;IAClC,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,GAAG,eAAe,CAAC;IACrE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC1G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,wFAAwF;IACxF,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;IAC5E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,0BAAyF,CAAC;IACtG,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,MAAM,SAAS,GAAG,KAAK,IAAI,IAAI;QAC7B,CAAC,CAAC,aAAa,CAAC,YAAY;QAC5B,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,GAAG,IAAI,uBAAuB,SAAS,IAAI,OAAO,EAAE,CAAC;IAC9D,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzB,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAClD,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBACxE,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,eAAe;gBAC7D,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,yBAAyB,CAC1E,0BAA0B,EAC1B,QAAQ,CACT,CAAC;YAEF,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;gBACpC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE;gBACzC,oBAAoB;gBACpB,2BAA2B,EAAE,eAAe,CAAC,2BAA2B;gBACxE,WAAW,EAAE,EAAE,YAAY,EAAE;aAC9B,CAAC,CAAe,CAAC;YAElB,aAAa,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,aAAa,CAAC;gBACZ,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC,2BAA2B,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElJ,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAEzD,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,MAAC,cAAc,eACb,KAAC,oBAAoB,cAClB,KAAK,CAAC,gBAAgB,CAAC,GACH,EACvB,eAAK,SAAS,EAAC,0BAA0B,aACtC,WAAW,IAAI,CACd,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,kBACtD,YAAG,IAAI,EAAE,WAAW,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,YAC5D,eAAe,GACd,GACG,CACV,EACD,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,SAAS,YAElB,SAAS;oCACR,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oCACzB,CAAC,CAAC,SAAS,GACN,IACL,IACS,EAEhB,UAAU,IAAI,CACb,MAAC,cAAc,IACb,SAAS,EACP,UAAU,CAAC,aAAa,KAAK,MAAM;oBACjC,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;wBACtC,CAAC,CAAC,gCAAgC;wBAClC,CAAC,CAAC,wCAAwC,aAGhD,KAAC,oBAAoB,cAClB,KAAK,CAAC,kBAAkB,CAAC,GACL,EACvB,eAAK,SAAS,EAAC,yBAAyB,aACrC,UAAU,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAC9C,wBACG,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,qBAAiB,GAAG,EAC7D,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,IAC9D,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAgB,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IACrG,CACL,EACA,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gCACxC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;gCAC9C,MAAM,eAAe,GACnB,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC;oCACnD,CAAC,CAAC,kBAAkB;oCACpB,CAAC,CAAC,aAAa,GAAG,EAAE;wCAClB,CAAC,CAAC,cAAc;wCAChB,CAAC,CAAC,EAAE,CAAC;gCACX,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW;oCACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oCAC3E,CAAC,CAAC,IAAI,CAAC;gCACT,OAAO,CACL,eAAa,SAAS,EAAE,cAAc,eAAe,EAAE,aACrD,wBACG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,mBAAe,CAAC,GAAG,CAAC,OAAG,GAAG,EAChD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,qBAAY,GAAG,EAC/C,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAI,IAAI,CAAC,aAAa,YAC3D,eAAe,IAAI,IAAI,IAAI,CAC1B,gBAAM,SAAS,EAAC,oCAAoC,kBAChD,eAAe,SACZ,CACR,IACC,EACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,IAAI,CAC5B,YAAG,SAAS,EAAC,sBAAsB,YAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GACvB,CACL,KAfO,CAAC,CAgBL,CACP,CAAC;4BACJ,CAAC,CAAC,EACD,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAChC,YAAW,SAAS,EAAC,kBAAkB,YACpC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACD,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAClC,YAAW,SAAS,EAAC,cAAc,YAChC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACF,aAAG,SAAS,EAAC,wBAAwB,0BACzB,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,IACxH,IACA,IACS,CAClB,IACG,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * SAML-specific section for SSO Connection Read view.\n * Shows SP metadata download, certificate expiry, and Test Connection results.\n */\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport {\n  AuthScopeType,\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { frontendResourceUtils, FrontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport type { FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\n\ninterface SsoConnectionSamlReadSectionProps {\n  resourceContext: FrontendResourceOperationContext;\n}\n\ninterface CertificateResult {\n  index: number;\n  valid: boolean;\n  expiresAt: string;\n  daysRemaining: number;\n  fingerprint: string;\n  warnings: string[];\n}\n\ninterface TestResult {\n  overallStatus: 'pass' | 'warning' | 'fail';\n  entityIdConfigured?: boolean;\n  ssoUrlReachable?: boolean;\n  ssoUrlStatus?: number;\n  sloUrlReachable?: boolean;\n  sloUrlStatus?: number;\n  spMetadataValid?: boolean;\n  certificates?: CertificateResult[];\n  errors?: string[];\n  warnings?: string[];\n}\n\nexport function SsoConnectionSamlReadSection({\n  resourceContext,\n}: SsoConnectionSamlReadSectionProps): React.JSX.Element | null {\n  const { resourceType, contextResourceIdentifiers } = resourceContext;\n  const { registry, doOperation } = useResourceRegistry();\n  const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_READ });\n  // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n  // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n  // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n  // string) and are gone rather than revived — every key here IS declared in the\n  // layout's `*.labels.ts`, so a component-local literal would be a second source of\n  // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n  // considered and rejected: for a label with no fallback it converts an ugly but\n  // diagnosable `components.RESOURCES_LAYOUTS_READ.saml.import` into an INVISIBLE button.\n  const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_READ);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const [testResult, setTestResult] = useState<TestResult | null>(null);\n  const [isTesting, setIsTesting] = useState(false);\n\n  const ctx = contextResourceIdentifiers as Record<string, string | { resourceId: string } | undefined>;\n  const orgId = ctx.organizations ? frontendResourceUtils.getResourceId(ctx.organizations) : undefined;\n  const appId = ctx.applications ? frontendResourceUtils.getResourceId(ctx.applications) : undefined;\n  const scopeType = orgId != null\n    ? AuthScopeType.ORGANIZATION\n    : AuthScopeType.APPLICATION;\n  const scopeId = String(orgId ?? appId ?? '');\n\n  const metadataUrl = useMemo(() => {\n    if (!scopeId) return null;\n    const base = envLoader.getApiUrl();\n    return `${base}/auth/saml/metadata/${scopeType}/${scopeId}`;\n  }, [scopeType, scopeId]);\n\n  const handleTestConnection = useCallback(async () => {\n    setIsTesting(true);\n    setTestResult(null);\n    try {\n      const pathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n        resourceIdentifier: resourceType,\n        operationIdentifier: SsoConnection_Operations.TEST_CONNECTION,\n        variantType: ResourceOperationVariantType.API_CALL,\n        isOperationDefault: true,\n        isBulkOperation: false,\n      });\n\n      const contextualParameters = FrontendResourceUtils.buildContextualParameters(\n        contextResourceIdentifiers,\n        registry\n      );\n\n      const connectionId = ctx[resourceType]\n        ? frontendResourceUtils.getResourceId(ctx[resourceType]!)\n        : '';\n      const result = (await doOperation(pathKey, {\n        contextualParameters,\n        parentResourcesRequirements: resourceContext.parentResourcesRequirements,\n        requestData: { connectionId },\n      })) as TestResult;\n\n      setTestResult(result);\n    } catch (err) {\n      // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n      setTestResult({\n        overallStatus: 'fail',\n        errors: [toUserFacingErrorMessage(err)],\n      });\n    } finally {\n      setIsTesting(false);\n    }\n  }, [resourceType, resourceContext.parentResourcesRequirements, contextResourceIdentifiers, registry, doOperation, ctx, toUserFacingErrorMessage]);\n\n  if (!isReady) return null;\n\n  const testLabel = tSaml('saml.testConnection');\n  const spMetadataLabel = tSaml('saml.downloadSpMetadata');\n\n  return (\n    <div className=\"space-y-section max-w-4xl\">\n      <ContentSection>\n        <ContentSectionLegend>\n          {tSaml('saml.samlTools')}\n        </ContentSectionLegend>\n        <div className=\"flex flex-wrap gap-field\">\n          {metadataUrl && (\n            <Button variant={ButtonVariants_Variant.OUTLINE} asChild>\n              <a href={metadataUrl} target=\"_blank\" rel=\"noopener noreferrer\">\n                {spMetadataLabel}\n              </a>\n            </Button>\n          )}\n          <Button\n            type=\"button\"\n            variant={ButtonVariants_Variant.OUTLINE}\n            onClick={handleTestConnection}\n            disabled={isTesting}\n          >\n            {isTesting\n              ? (tSaml('saml.testing'))\n              : testLabel}\n          </Button>\n        </div>\n      </ContentSection>\n\n      {testResult && (\n        <ContentSection\n          className={\n            testResult.overallStatus === 'pass'\n              ? 'border-success/50 bg-success/5'\n              : testResult.overallStatus === 'warning'\n                ? 'border-warning/50 bg-warning/5'\n                : 'border-destructive/50 bg-destructive/5'\n          }\n        >\n          <ContentSectionLegend>\n            {tSaml('saml.testResults')}\n          </ContentSectionLegend>\n          <div className=\"space-y-item-sm text-sm\">\n            {testResult.entityIdConfigured !== undefined && (\n              <p>\n                {testResult.entityIdConfigured ? '✓' : '✗'} IdP Entity ID:{' '}\n                {testResult.entityIdConfigured ? 'Configured' : 'Not configured'}\n              </p>\n            )}\n            {testResult.ssoUrlReachable !== undefined && (\n              <p>\n                {testResult.ssoUrlReachable ? '✓' : '✗'} SSO URL:{' '}\n                {testResult.ssoUrlReachable\n                  ? `Reachable (${testResult.ssoUrlStatus ?? 'OK'})`\n                  : 'Not reachable'}\n              </p>\n            )}\n            {testResult.sloUrlReachable !== undefined && (\n              <p>\n                {testResult.sloUrlReachable ? '✓' : '✗'} SLO URL:{' '}\n                {testResult.sloUrlReachable\n                  ? `Reachable (${testResult.sloUrlStatus ?? 'OK'})`\n                  : 'Not reachable'}\n              </p>\n            )}\n            {testResult.spMetadataValid !== undefined && (\n              <p>\n                {testResult.spMetadataValid ? '✓' : '✗'} SP Metadata: {testResult.spMetadataValid ? 'Valid' : 'Invalid'}\n              </p>\n            )}\n            {testResult.certificates?.map((cert, i) => {\n              const daysRemaining = cert.daysRemaining ?? 0;\n              const certStatusClass =\n                !cert.valid || daysRemaining < 0 || daysRemaining < 7\n                  ? 'text-destructive'\n                  : daysRemaining < 30\n                    ? 'text-warning'\n                    : '';\n              const fingerprintAbbr = cert.fingerprint\n                ? cert.fingerprint.slice(0, 12) + (cert.fingerprint.length > 12 ? '…' : '')\n                : null;\n              return (\n                <div key={i} className={`pl-item-sm ${certStatusClass}`}>\n                  <p>\n                    {cert.valid ? '✓' : '✗'} Certificate {i + 1}:{' '}\n                    {cert.valid ? 'Valid' : 'Invalid'} — expires{' '}\n                    {cert.expiresAt?.slice(0, 10) ?? 'N/A'} ({cert.daysRemaining} days)\n                    {fingerprintAbbr != null && (\n                      <span className=\"text-muted-foreground text-xs ml-1\">\n                        ({fingerprintAbbr})\n                      </span>\n                    )}\n                  </p>\n                  {cert.warnings?.length > 0 && (\n                    <p className=\"text-warning text-xs\">\n                      {cert.warnings.join('; ')}\n                    </p>\n                  )}\n                </div>\n              );\n            })}\n            {testResult.errors?.map((e, i) => (\n              <p key={i} className=\"text-destructive\">\n                {e}\n              </p>\n            ))}\n            {testResult.warnings?.map((w, i) => (\n              <p key={i} className=\"text-warning\">\n                {w}\n              </p>\n            ))}\n            <p className=\"font-medium mt-item-sm\">\n              Overall: {testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'}\n            </p>\n          </div>\n        </ContentSection>\n      )}\n    </div>\n  );\n}\n"]}
+{"version":3,"file":"SsoConnectionSamlReadSection.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":";AAAA;;;GAGG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EACL,aAAa,EACb,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAC1H,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AA4BtG,MAAM,UAAU,4BAA4B,CAAC,EAC3C,eAAe,GACmB;IAClC,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,GAAG,eAAe,CAAC;IACrE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC1G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,wFAAwF;IACxF,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;IAC5E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,0BAAyF,CAAC;IACtG,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,MAAM,SAAS,GAAG,KAAK,IAAI,IAAI;QAC7B,CAAC,CAAC,aAAa,CAAC,YAAY;QAC5B,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,GAAG,IAAI,uBAAuB,SAAS,IAAI,OAAO,EAAE,CAAC;IAC9D,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzB,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAClD,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBACxE,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,eAAe;gBAC7D,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,yBAAyB,CAC1E,0BAA0B,EAC1B,QAAQ,CACT,CAAC;YAEF,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;gBACpC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE;gBACzC,oBAAoB;gBACpB,2BAA2B,EAAE,eAAe,CAAC,2BAA2B;gBACxE,WAAW,EAAE,EAAE,YAAY,EAAE;aAC9B,CAAC,CAAe,CAAC;YAElB,aAAa,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,aAAa,CAAC;gBACZ,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC,2BAA2B,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElJ,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAEzD,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,MAAC,cAAc,eACb,KAAC,oBAAoB,cAClB,KAAK,CAAC,gBAAgB,CAAC,GACH,EACvB,eAAK,SAAS,EAAC,0BAA0B,aACtC,WAAW,IAAI,CACd,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,kBACtD,YAAG,IAAI,EAAE,WAAW,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,YAC5D,eAAe,GACd,GACG,CACV,EACD,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,SAAS,YAElB,SAAS;oCACR,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oCACzB,CAAC,CAAC,SAAS,GACN,IACL,IACS,EAEhB,UAAU,IAAI,CACb,MAAC,cAAc,IACb,SAAS,EACP,UAAU,CAAC,aAAa,KAAK,MAAM;oBACjC,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;wBACtC,CAAC,CAAC,gCAAgC;wBAClC,CAAC,CAAC,wCAAwC,aAGhD,KAAC,oBAAoB,cAClB,KAAK,CAAC,kBAAkB,CAAC,GACL,EACvB,eAAK,SAAS,EAAC,yBAAyB,aACrC,UAAU,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAC9C,wBACG,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,qBAAiB,GAAG,EAC7D,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,IAC9D,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAgB,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IACrG,CACL,EACA,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gCACxC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;gCAC9C,MAAM,eAAe,GACnB,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC;oCACnD,CAAC,CAAC,kBAAkB;oCACpB,CAAC,CAAC,aAAa,GAAG,EAAE;wCAClB,CAAC,CAAC,gCAAgC;wCAClC,CAAC,CAAC,EAAE,CAAC;gCACX,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW;oCACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oCAC3E,CAAC,CAAC,IAAI,CAAC;gCACT,OAAO,CACL,eAAa,SAAS,EAAE,cAAc,eAAe,EAAE,aACrD,wBACG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,mBAAe,CAAC,GAAG,CAAC,OAAG,GAAG,EAChD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,qBAAY,GAAG,EAC/C,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAI,IAAI,CAAC,aAAa,YAC3D,eAAe,IAAI,IAAI,IAAI,CAC1B,gBAAM,SAAS,EAAC,oCAAoC,kBAChD,eAAe,SACZ,CACR,IACC,EACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,IAAI,CAC5B,YAAG,SAAS,EAAC,wCAAwC,YAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GACvB,CACL,KAfO,CAAC,CAgBL,CACP,CAAC;4BACJ,CAAC,CAAC,EACD,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAChC,YAAW,SAAS,EAAC,kBAAkB,YACpC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACD,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAClC,YAAW,SAAS,EAAC,gCAAgC,YAClD,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACF,aAAG,SAAS,EAAC,wBAAwB,0BACzB,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,IACxH,IACA,IACS,CAClB,IACG,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * SAML-specific section for SSO Connection Read view.\n * Shows SP metadata download, certificate expiry, and Test Connection results.\n */\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport {\n  AuthScopeType,\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { frontendResourceUtils, FrontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport type { FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\n\ninterface SsoConnectionSamlReadSectionProps {\n  resourceContext: FrontendResourceOperationContext;\n}\n\ninterface CertificateResult {\n  index: number;\n  valid: boolean;\n  expiresAt: string;\n  daysRemaining: number;\n  fingerprint: string;\n  warnings: string[];\n}\n\ninterface TestResult {\n  overallStatus: 'pass' | 'warning' | 'fail';\n  entityIdConfigured?: boolean;\n  ssoUrlReachable?: boolean;\n  ssoUrlStatus?: number;\n  sloUrlReachable?: boolean;\n  sloUrlStatus?: number;\n  spMetadataValid?: boolean;\n  certificates?: CertificateResult[];\n  errors?: string[];\n  warnings?: string[];\n}\n\nexport function SsoConnectionSamlReadSection({\n  resourceContext,\n}: SsoConnectionSamlReadSectionProps): React.JSX.Element | null {\n  const { resourceType, contextResourceIdentifiers } = resourceContext;\n  const { registry, doOperation } = useResourceRegistry();\n  const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_READ });\n  // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n  // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n  // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n  // string) and are gone rather than revived — every key here IS declared in the\n  // layout's `*.labels.ts`, so a component-local literal would be a second source of\n  // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n  // considered and rejected: for a label with no fallback it converts an ugly but\n  // diagnosable `components.RESOURCES_LAYOUTS_READ.saml.import` into an INVISIBLE button.\n  const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_READ);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const [testResult, setTestResult] = useState<TestResult | null>(null);\n  const [isTesting, setIsTesting] = useState(false);\n\n  const ctx = contextResourceIdentifiers as Record<string, string | { resourceId: string } | undefined>;\n  const orgId = ctx.organizations ? frontendResourceUtils.getResourceId(ctx.organizations) : undefined;\n  const appId = ctx.applications ? frontendResourceUtils.getResourceId(ctx.applications) : undefined;\n  const scopeType = orgId != null\n    ? AuthScopeType.ORGANIZATION\n    : AuthScopeType.APPLICATION;\n  const scopeId = String(orgId ?? appId ?? '');\n\n  const metadataUrl = useMemo(() => {\n    if (!scopeId) return null;\n    const base = envLoader.getApiUrl();\n    return `${base}/auth/saml/metadata/${scopeType}/${scopeId}`;\n  }, [scopeType, scopeId]);\n\n  const handleTestConnection = useCallback(async () => {\n    setIsTesting(true);\n    setTestResult(null);\n    try {\n      const pathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n        resourceIdentifier: resourceType,\n        operationIdentifier: SsoConnection_Operations.TEST_CONNECTION,\n        variantType: ResourceOperationVariantType.API_CALL,\n        isOperationDefault: true,\n        isBulkOperation: false,\n      });\n\n      const contextualParameters = FrontendResourceUtils.buildContextualParameters(\n        contextResourceIdentifiers,\n        registry\n      );\n\n      const connectionId = ctx[resourceType]\n        ? frontendResourceUtils.getResourceId(ctx[resourceType]!)\n        : '';\n      const result = (await doOperation(pathKey, {\n        contextualParameters,\n        parentResourcesRequirements: resourceContext.parentResourcesRequirements,\n        requestData: { connectionId },\n      })) as TestResult;\n\n      setTestResult(result);\n    } catch (err) {\n      // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n      setTestResult({\n        overallStatus: 'fail',\n        errors: [toUserFacingErrorMessage(err)],\n      });\n    } finally {\n      setIsTesting(false);\n    }\n  }, [resourceType, resourceContext.parentResourcesRequirements, contextResourceIdentifiers, registry, doOperation, ctx, toUserFacingErrorMessage]);\n\n  if (!isReady) return null;\n\n  const testLabel = tSaml('saml.testConnection');\n  const spMetadataLabel = tSaml('saml.downloadSpMetadata');\n\n  return (\n    <div className=\"space-y-section max-w-4xl\">\n      <ContentSection>\n        <ContentSectionLegend>\n          {tSaml('saml.samlTools')}\n        </ContentSectionLegend>\n        <div className=\"flex flex-wrap gap-field\">\n          {metadataUrl && (\n            <Button variant={ButtonVariants_Variant.OUTLINE} asChild>\n              <a href={metadataUrl} target=\"_blank\" rel=\"noopener noreferrer\">\n                {spMetadataLabel}\n              </a>\n            </Button>\n          )}\n          <Button\n            type=\"button\"\n            variant={ButtonVariants_Variant.OUTLINE}\n            onClick={handleTestConnection}\n            disabled={isTesting}\n          >\n            {isTesting\n              ? (tSaml('saml.testing'))\n              : testLabel}\n          </Button>\n        </div>\n      </ContentSection>\n\n      {testResult && (\n        <ContentSection\n          className={\n            testResult.overallStatus === 'pass'\n              ? 'border-success/50 bg-success/5'\n              : testResult.overallStatus === 'warning'\n                ? 'border-warning/50 bg-warning/5'\n                : 'border-destructive/50 bg-destructive/5'\n          }\n        >\n          <ContentSectionLegend>\n            {tSaml('saml.testResults')}\n          </ContentSectionLegend>\n          <div className=\"space-y-item-sm text-sm\">\n            {testResult.entityIdConfigured !== undefined && (\n              <p>\n                {testResult.entityIdConfigured ? '✓' : '✗'} IdP Entity ID:{' '}\n                {testResult.entityIdConfigured ? 'Configured' : 'Not configured'}\n              </p>\n            )}\n            {testResult.ssoUrlReachable !== undefined && (\n              <p>\n                {testResult.ssoUrlReachable ? '✓' : '✗'} SSO URL:{' '}\n                {testResult.ssoUrlReachable\n                  ? `Reachable (${testResult.ssoUrlStatus ?? 'OK'})`\n                  : 'Not reachable'}\n              </p>\n            )}\n            {testResult.sloUrlReachable !== undefined && (\n              <p>\n                {testResult.sloUrlReachable ? '✓' : '✗'} SLO URL:{' '}\n                {testResult.sloUrlReachable\n                  ? `Reachable (${testResult.sloUrlStatus ?? 'OK'})`\n                  : 'Not reachable'}\n              </p>\n            )}\n            {testResult.spMetadataValid !== undefined && (\n              <p>\n                {testResult.spMetadataValid ? '✓' : '✗'} SP Metadata: {testResult.spMetadataValid ? 'Valid' : 'Invalid'}\n              </p>\n            )}\n            {testResult.certificates?.map((cert, i) => {\n              const daysRemaining = cert.daysRemaining ?? 0;\n              const certStatusClass =\n                !cert.valid || daysRemaining < 0 || daysRemaining < 7\n                  ? 'text-destructive'\n                  : daysRemaining < 30\n                    ? 'text-warning-subtle-foreground'\n                    : '';\n              const fingerprintAbbr = cert.fingerprint\n                ? cert.fingerprint.slice(0, 12) + (cert.fingerprint.length > 12 ? '…' : '')\n                : null;\n              return (\n                <div key={i} className={`pl-item-sm ${certStatusClass}`}>\n                  <p>\n                    {cert.valid ? '✓' : '✗'} Certificate {i + 1}:{' '}\n                    {cert.valid ? 'Valid' : 'Invalid'} — expires{' '}\n                    {cert.expiresAt?.slice(0, 10) ?? 'N/A'} ({cert.daysRemaining} days)\n                    {fingerprintAbbr != null && (\n                      <span className=\"text-muted-foreground text-xs ml-1\">\n                        ({fingerprintAbbr})\n                      </span>\n                    )}\n                  </p>\n                  {cert.warnings?.length > 0 && (\n                    <p className=\"text-warning-subtle-foreground text-xs\">\n                      {cert.warnings.join('; ')}\n                    </p>\n                  )}\n                </div>\n              );\n            })}\n            {testResult.errors?.map((e, i) => (\n              <p key={i} className=\"text-destructive\">\n                {e}\n              </p>\n            ))}\n            {testResult.warnings?.map((w, i) => (\n              <p key={i} className=\"text-warning-subtle-foreground\">\n                {w}\n              </p>\n            ))}\n            <p className=\"font-medium mt-item-sm\">\n              Overall: {testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'}\n            </p>\n          </div>\n        </ContentSection>\n      )}\n    </div>\n  );\n}\n"]}

package/dist/esm/components/auth/enrollment/PasskeyEnrollmentMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PasskeyEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAUrD,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAMrK,QAAA,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAmErE,CAAC;AAGF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}
+{"version":3,"file":"PasskeyEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAUrD,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAMrK,QAAA,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAkErE,CAAC;AAGF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/esm/components/auth/enrollment/PasskeyEnrollmentMethod.js

@@ -22,7 +22,7 @@ const PasskeyEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t
         setError(null);
         try {
             const headers = buildSessionHeaders(sessionId);
-            const options = await getManualCallsHttpClient().passkeyRegisterOptions(undefined, headers ? { headers } : undefined);
+            const options = await getManualCallsHttpClient().passkeyRegisterOptions(headers ? { headers } : undefined);
             const credential = await startRegistration({ optionsJSON: options });
             const result = await getManualCallsHttpClient().passkeyRegisterVerify({ response: credential }, headers ? { headers } : undefined);
             onComplete(result.enrollmentSession);

package/dist/esm/components/auth/enrollment/PasskeyEnrollmentMethod.js.map

@@ -1 +1 @@
-{"version":3,"file":"PasskeyEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,+CAA+C,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AAErK,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,uBAAuB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7H,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAElF,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE,CAAC,sBAAsB,CACrE,SAAS,EACT,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CACmB,CAAC;YAEvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CACnE,EAAE,QAAQ,EAAE,UAAU,EAAE,EACxB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YAEF,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,iBAAiB;gBACvC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC;gBAC9C,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,cAAK,SAAS,EAAC,cAAc,YAC3B,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAAoB,GAC/E,GACJ,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAC1C,EAEN,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,MAAM,IACL,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,WAAW,IAAI,SAAS,YAEjC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,GAC3G,IACL,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { Button } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> | undefined {\n  return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\nconst PasskeyEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n  const [registering, setRegistering] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n\n  const handleRegister = useCallback(async () => {\n    setRegistering(true);\n    setError(null);\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      const options = await getManualCallsHttpClient().passkeyRegisterOptions(\n        undefined,\n        headers ? { headers } : undefined,\n      ) as unknown as PublicKeyCredentialCreationOptionsJSON;\n\n      const credential = await startRegistration({ optionsJSON: options });\n\n      const result = await getManualCallsHttpClient().passkeyRegisterVerify(\n        { response: credential },\n        headers ? { headers } : undefined,\n      );\n\n      onComplete(result.enrollmentSession);\n    } catch (e: any) {\n      const msg = e?.name === 'NotAllowedError'\n        ? t(EnrollmentRequiredLabel.PASSKEY_CANCELLED)\n        : toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      setError(msg);\n      onError(msg);\n    } finally {\n      setRegistering(false);\n    }\n  }, [sessionId, onComplete, onError, t, toUserFacingErrorMessage]);\n\n  if (!isSupported) {\n    return (\n      <div className=\"space-y-item\">\n        <Alert>\n          <AlertDescription>{t(EnrollmentRequiredLabel.PASSKEY_UNSUPPORTED)}</AlertDescription>\n        </Alert>\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(EnrollmentRequiredLabel.PASSKEY_DESCRIPTION)}\n      </Text>\n\n      {error && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{error}</AlertDescription>\n        </Alert>\n      )}\n\n      <Button\n        className=\"w-full\"\n        onClick={handleRegister}\n        disabled={registering || isLoading}\n      >\n        {registering ? t(EnrollmentRequiredLabel.PASSKEY_REGISTERING) : t(EnrollmentRequiredLabel.PASSKEY_REGISTER_BUTTON)}\n      </Button>\n    </div>\n  );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.PASSKEY, PasskeyEnrollmentMethod);\nexport { PasskeyEnrollmentMethod };\n"]}
+{"version":3,"file":"PasskeyEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,+CAA+C,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AAErK,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,uBAAuB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7H,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAElF,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE,CAAC,sBAAsB,CACrE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CACmB,CAAC;YAEvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CACnE,EAAE,QAAQ,EAAE,UAAU,EAAE,EACxB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YAEF,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,iBAAiB;gBACvC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC;gBAC9C,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,cAAK,SAAS,EAAC,cAAc,YAC3B,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAAoB,GAC/E,GACJ,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAC1C,EAEN,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,MAAM,IACL,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,WAAW,IAAI,SAAS,YAEjC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,GAC3G,IACL,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { Button } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> | undefined {\n  return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\nconst PasskeyEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n  const [registering, setRegistering] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n\n  const handleRegister = useCallback(async () => {\n    setRegistering(true);\n    setError(null);\n    try {\n      const headers = buildSessionHeaders(sessionId);\n      const options = await getManualCallsHttpClient().passkeyRegisterOptions(\n        headers ? { headers } : undefined,\n      ) as unknown as PublicKeyCredentialCreationOptionsJSON;\n\n      const credential = await startRegistration({ optionsJSON: options });\n\n      const result = await getManualCallsHttpClient().passkeyRegisterVerify(\n        { response: credential },\n        headers ? { headers } : undefined,\n      );\n\n      onComplete(result.enrollmentSession);\n    } catch (e: any) {\n      const msg = e?.name === 'NotAllowedError'\n        ? t(EnrollmentRequiredLabel.PASSKEY_CANCELLED)\n        : toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));\n      setError(msg);\n      onError(msg);\n    } finally {\n      setRegistering(false);\n    }\n  }, [sessionId, onComplete, onError, t, toUserFacingErrorMessage]);\n\n  if (!isSupported) {\n    return (\n      <div className=\"space-y-item\">\n        <Alert>\n          <AlertDescription>{t(EnrollmentRequiredLabel.PASSKEY_UNSUPPORTED)}</AlertDescription>\n        </Alert>\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"space-y-item\">\n      <Text className=\"text-sm text-muted-foreground text-center\">\n        {t(EnrollmentRequiredLabel.PASSKEY_DESCRIPTION)}\n      </Text>\n\n      {error && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{error}</AlertDescription>\n        </Alert>\n      )}\n\n      <Button\n        className=\"w-full\"\n        onClick={handleRegister}\n        disabled={registering || isLoading}\n      >\n        {registering ? t(EnrollmentRequiredLabel.PASSKEY_REGISTERING) : t(EnrollmentRequiredLabel.PASSKEY_REGISTER_BUTTON)}\n      </Button>\n    </div>\n  );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.PASSKEY, PasskeyEnrollmentMethod);\nexport { PasskeyEnrollmentMethod };\n"]}

package/dist/esm/components/auth/enrollment/PhoneEnrollmentMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PhoneEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/PhoneEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAiBtE,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAOrK,QAAA,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAwMnE,CAAC;AAGF,OAAO,EAAE,qBAAqB,EAAE,CAAC"}
+{"version":3,"file":"PhoneEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PhoneEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAiBtE,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAOrK,QAAA,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAwMnE,CAAC;AAGF,OAAO,EAAE,qBAAqB,EAAE,CAAC"}

package/dist/esm/components/auth/enrollment/TotpEnrollmentMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TotpEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/TotpEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAmBjF,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAWrK,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CA+MlE,CAAC;AAGF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"TotpEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/TotpEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAmBjF,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAWrK,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CA+MlE,CAAC;AAGF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/esm/components/auth/enrollment/enrollment-method-components.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enrollment-method-components.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/enrollment/enrollment-method-components.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,mFAAmF,CAAC;AAE7I;;;;;;;;;GASG;AACH,MAAM,WAAW,8BAA8B;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,mCAAmC,KAAK,IAAI,CAAC;IACvE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,yBAAyB,GAAG,KAAK,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC;AAE5F,eAAO,MAAM,4BAA4B,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAM,CAAC;AAEvG,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,yBAAyB,GAAG,IAAI,CAEhH"}
+{"version":3,"file":"enrollment-method-components.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/enrollment-method-components.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,mFAAmF,CAAC;AAE7I;;;;;;;;;GASG;AACH,MAAM,WAAW,8BAA8B;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,mCAAmC,KAAK,IAAI,CAAC;IACvE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,yBAAyB,GAAG,KAAK,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC;AAE5F,eAAO,MAAM,4BAA4B,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAM,CAAC;AAEvG,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,yBAAyB,GAAG,IAAI,CAEhH"}

package/dist/esm/components/auth/methods/EmailOtpAuthMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EmailOtpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/EmailOtpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAkBtE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAInH,QAAA,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAyH1D,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"EmailOtpAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/EmailOtpAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAkBtE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAInH,QAAA,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAyH1D,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/ExternalOAuth2AuthMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExternalOAuth2AuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/ExternalOAuth2AuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAyC,MAAM,OAAO,CAAC;AAS9D,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAKnH;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAiEhE,CAAC;AAEF,OAAO,EAAE,wBAAwB,EAAE,CAAC"}
+{"version":3,"file":"ExternalOAuth2AuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/ExternalOAuth2AuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAyC,MAAM,OAAO,CAAC;AAS9D,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAKnH;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAiEhE,CAAC;AAEF,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/MagicLinkAuthMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MagicLinkAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/MagicLinkAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAQrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAGnH,QAAA,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CA8C3D,CAAC;AAEF,OAAO,EAAE,mBAAmB,EAAE,CAAC"}
+{"version":3,"file":"MagicLinkAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/MagicLinkAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAQrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAGnH,QAAA,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CA8C3D,CAAC;AAEF,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/OrgOidcAuthMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OrgOidcAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/OrgOidcAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AASrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAGnH;;;;;;;;;GASG;AACH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAiEzD,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"OrgOidcAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/OrgOidcAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AASrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAGnH;;;;;;;;;GASG;AACH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAiEzD,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.d.ts

@@ -4,7 +4,7 @@ import { type AuthMethodComponentProps } from '../../../components/auth/methods/
  * OrgSamlAuthMethod — renders a "Sign in with {orgName}" button
  * that redirects to the SAML SP-initiated login URL.
  *
- * Constructs the redirect URL from MANUAL_CONTROLLER_ROUTES_URLS
+ * Constructs the redirect URL from the route's contract path (`buildManualControllerRoutePath`)
  * using the connectionId from config, ensuring URL consistency
  * with the rest of the engine.
  *

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OrgSamlAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/methods/OrgSamlAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAQrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAKnH;;;;;;;;;;GAUG;AACH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAmDzD,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"OrgSamlAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/OrgSamlAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAQrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAKnH;;;;;;;;;;GAUG;AACH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAkDzD,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.js

@@ -2,7 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useCallback, useState } from 'react';
 import { useLocation } from 'react-router-dom';
 import { UserAuthLabel } from '@wildo-ai/presets-components-models';
-import { AuthMethod, MAIN_API_BASE_PATH, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey } from '@wildo-ai/saas-models';
+import { AuthMethod, MAIN_API_BASE_PATH, ManualControllerRouteKey, buildManualControllerRoutePath } from '@wildo-ai/saas-models';
 import { Button, ButtonLabelOverflow, ButtonVariants_Variant } from '../../../components/actions/button.js';
 import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
 import { buildAuthRedirectTarget } from '../../../core/security/auth-redirect.frontend.utils.js';
@@ -13,7 +13,7 @@ const API_PREFIX = MAIN_API_BASE_PATH;
  * OrgSamlAuthMethod — renders a "Sign in with {orgName}" button
  * that redirects to the SAML SP-initiated login URL.
  *
- * Constructs the redirect URL from MANUAL_CONTROLLER_ROUTES_URLS
+ * Constructs the redirect URL from the route's contract path (`buildManualControllerRoutePath`)
  * using the connectionId from config, ensuring URL consistency
  * with the rest of the engine.
  *
@@ -33,8 +33,7 @@ const OrgSamlAuthMethod = ({ methodConfig, isLoading, t, factorLevel }) => {
             return;
         }
         setRedirecting(true);
-        const loginPath = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_SAML_LOGIN]
-            .replace(':connectionId', connectionId);
+        const loginPath = buildManualControllerRoutePath(ManualControllerRouteKey.AUTH_SAML_LOGIN, { connectionId });
         // SAML SP-initiated login is a FULL-PAGE navigation to a backend 302 (unlike OIDC's
         // `getEnterpriseSSOAuthorizationUrl`, an XHR that returns an absolute URL to navigate to). It must
         // therefore target the ABSOLUTE backend origin: on a split-origin deployment (dev Vite at :4242 → backend