npm - @wildo-ai/saas-frontend-lib - Versions diffs - 1.1.4 → 1.1.5 - Mend

@wildo-ai/saas-frontend-lib 1.1.4 → 1.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2512) hide show

package/dist/esm/components/auth/admin-config/AppPage_SecuritySettings.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_SecuritySettings.js","sourceRoot":"","sources":["../../../../../src/components/auth/admin-config/AppPage_SecuritySettings.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC/G,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AACjF,OAAO,EAAE,KAAK,EAA8B,MAAM,mDAAmD,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,+DAA+D,CAAC;AAChH,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,mDAAmD,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAChH,OAAO,EACL,UAAU,EACV,mBAAmB,GAIpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAA2B,MAAM,qEAAqE,CAAC;AACzI,OAAO,EAAE,+BAA+B,EAAE,MAAM,2EAA2E,CAAC;AAC5H,OAAO,EAAE,oBAAoB,EAAE,MAAM,qEAAqE,CAAC;AAC3G,OAAO,EAAE,qBAAqB,EAAE,MAAM,sEAAsE,CAAC;AAC7G,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG5D,OAAO,EACL,uCAAuC,EACvC,mCAAmC,GACpC,MAAM,4FAA4F,CAAC;AAuBpG;;;;;;GAMG;AACH,IAAK,mBAIJ;AAJD,WAAK,mBAAmB;IACtB,wCAAiB,CAAA;IACjB,4CAAqB,CAAA;IACrB,kDAA2B,CAAA;AAC7B,CAAC,EAJI,mBAAmB,KAAnB,mBAAmB,QAIvB;AAED,MAAM,0BAA0B,GAAuD;IACrF,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,SAAS;IACvC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,SAAS;IACzC,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,WAAW;CAC/C,CAAC;AA+BF;;;;;;;;;GASG;AACH,MAAM,kBAAkB,GAAsC,CAAC,EAC7D,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GACrE,EAAE,EAAE;IACH,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,KAAK,mBAAmB,CAAC,MAAM,CAAC;IAEtD,OAAO,CACL,KAAC,IAAI,cACH,MAAC,WAAW,IAAC,SAAS,EAAC,+BAA+B,aACpD,eAAK,SAAS,EAAC,oCAAoC,aAGjD,6BACc,MAAM,EAClB,SAAS,EAAE,EAAE,CACX,6DAA6D,EAC7D,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,gCAAgC,CAC3E,YAEA,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,GACpC,EAEN,eAAK,SAAS,EAAC,6CAA6C,aAC1D,eAAK,SAAS,EAAC,4CAA4C,aACzD,KAAC,IAAI,IAAC,SAAS,EAAC,0BAA0B,YAAE,KAAK,GAAQ,EACzD,KAAC,KAAK,IAAC,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,YAAG,WAAW,GAAS,IACpE,EACN,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,WAAW,GAAQ,EACnE,IAAI,IACD,EAEL,MAAM,IAAI,cAAK,SAAS,EAAC,2CAA2C,YAAE,MAAM,GAAO,IAChF,EAKL,QAAQ,IAAI,CACX,cAAK,SAAS,EAAC,mEAAmE,YAAE,QAAQ,GAAO,CACpG,IACW,GACT,CACR,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAa,GAAG,EAAE;IACrD,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;IAC5D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAE7C,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAmB,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAgB,EAAE,CAAC,CAAC;IAC5D,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAiB,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAClE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,yBAAyB,GAAG,OAAO,CACvC,GAAG,EAAE,CAAC,uCAAuC,CAC3C,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACzB,wBAAwB,EAAE,gBAAgB,CACxC,IAAI,CAAC,WAAqC,CAC3C,EAAE,QAAQ,CAAC,mBAAmB,CAChC,CACF,EACD,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAC1C,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAC5D,SAAS,EAAE;YACT,qBAAqB,CAAC,6BAA6B;YACnD,qBAAqB,CAAC,4BAA4B;YAClD,qBAAqB,CAAC,kCAAkC;SACzD;QACD,IAAI,EAAE,yBAAyB;KAChC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,WAAW,CACnB,CAAC,GAAW,EAAE,MAAwC,EAAE,EAAE,CACxD,UAAU,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,GAAG,EAAE,MAAM,CAAC,EAC9E,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,EACpF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,EAAE,aAAa,CAAC;IAC1C,MAAM,gBAAgB,GAAG,YAAY,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACrE,MAAM,cAAc,GAAG,YAAY,CAAC,cAAc,CAAC;IACnD,MAAM,WAAW,GAAG,aAAa,EAAE,kBAAkB,IAAI,EAAE,CAAC;IAC5D,MAAM,aAAa,GAAG,gBAAgB,EAAE,6BAA6B,IAAI,KAAK,CAAC;IAC/E,MAAM,YAAY,GAAG,gBAAgB,EAAE,sBAAsB,IAAI,IAAI,CAAC;IAEtE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC5D,MAAM,CAAC,YAAY,EAAE;gBACrB,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACvD,MAAM,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;aACvD,CAAC,CAAC;YACH,UAAU,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACrC,WAAW,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAC3C,gBAAgB,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,EAAE,CAAC;IACZ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,MAAM,oBAAoB,GAAG,OAAO;SACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;SACvH,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,2BAA2B,CAC/D,SAAS,CAAC,cAAc,EAAE,WAAW,IAAI,KAAK,EAC9C,SAAS,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EACzE,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAE,SAAS,CAAC,2BAA4C,EAChH,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE,oBAAoB,IAAI,EAAE,CACjE,CAAC;IAEF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,SAAS,EAAE,QAAQ,IAAI,KAAK,CAAC;IACnD,MAAM,WAAW,GAAG,SAAS,EAAE,OAAO,EAAE,WAAiC,CAAC;IAC1E,MAAM,qBAAqB,GAAG,OAAO,CACnC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,wBAAwB,EAAE,gBAAgB,CACzD,IAAI,CAAC,WAAqC,CAC3C,CAAC;QAEF,OAAO;YACL,GAAG,IAAI;YACP,aAAa,EAAE,mCAAmC,CAAC;gBACjD,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,WAAW;uBACpE,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBACnC,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,CAAC,mBAAmB;gBAC3D,SAAS,EAAE,iBAAiB;aAC7B,CAAC;SACH,CAAC;IACJ,CAAC,CAAC,EACF,CAAC,IAAI,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAC1F,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC9C,IAAI,QAAQ,CAAC,MAAM,IAAI,WAAW;YAAE,OAAO;QAC3C,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAAE,OAAO;QACzE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAsD,CAAC;YAC7G,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YACrE,MAAM,MAAM,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7D,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;YACxI,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAE/C,MAAM,mBAAmB,GAAG,WAAW,CACrC,KAAK,EAAE,YAAoB,EAAE,EAAE;QAC7B,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC7D,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,EACD,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAC3B,CAAC;IAEF,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC/C,MAAM,SAAS,GAAG,KAAK,EAAE,WAAoB,EAAE,EAAE;YAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,MAAM,wBAAwB,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACtD,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,IAAI,aAAa,EAAE,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,SAAS,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAC;gBACpC,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhC,MAAM,mBAAmB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACjD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE;YAAE,OAAO;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;YAC3H,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACtB,MAAM,wBAAwB,EAAE,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAChG,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjC,MAAM,oBAAoB,GAAG,WAAW,CACtC,KAAK,EAAE,MAAc,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC5D,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,EACD,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAC3B,CAAC;IAEF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,iBAAiB,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IACxF,MAAM,YAAY,GAAG,CAAC,iBAAiB;QACrC,CAAC,CAAC,mBAAmB,CAAC,WAAW;QACjC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;IAEpF,MAAM,cAAc,GAAG,CAAC,KAA0B,EAAU,EAAE;QAC5D,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;YAC/E,KAAK,mBAAmB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;YACzF,KAAK,mBAAmB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CACrB,MAAC,kBAAkB,IACjB,IAAI,EAAE,qBAAqB,CAAC,WAAW,EACvC,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,EAChD,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,EAC1D,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,cAAc,CAAC,YAAY,CAAC,EACzC,IAAI,EAAE,iBAAiB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC5C,CAAC,CAAC,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAQ;YACvG,CAAC,CAAC,SAAS,EACb,MAAM,EAAE,iBAAiB,IAAI,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAC3D,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,kBAAkB,YACrG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,CAAC,GAC7F,CACV,CAAC,CAAC,CAAC,SAAS,aAEZ,CAAC,iBAAiB,IAAI,CACrB,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,GAAoB,GAC7E,CACT,EACA,iBAAiB,IAAI,CACpB,8BACG,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CACxB,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAQ,CAChG,EACA,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CACtB,aAAI,SAAS,EAAC,2BAA2B,YACtC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CACpB,cAA0B,SAAS,EAAC,wEAAwE,aAC1G,eAAK,SAAS,EAAC,uBAAuB,aACpC,KAAC,IAAI,IAAC,SAAS,EAAC,sBAAsB,YAAE,EAAE,CAAC,IAAI,GAAQ,EACtD,EAAE,CAAC,SAAS,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAC5C,CAAC,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,GACzF,CACR,IACG,EACL,YAAY,IAAI,CACf,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,YAAY,CAAC,YACtH,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,GACjC,CACV,KAbM,EAAE,CAAC,YAAY,CAcnB,CACN,CAAC,GACC,CACN,IACA,CACJ,IACkB,CACtB,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;IACtF,MAAM,WAAW,GAAG,CAClB,KAAC,kBAAkB,IACjB,IAAI,EAAE,qBAAqB,CAAC,UAAU,EACtC,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAC5C,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,EACtD,KAAK,EAAE,SAAS,EAChB,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,EACtC,IAAI,EAAE,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,GAAQ,EAClI,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAChB,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,YACxE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAC/B,CACV,CAAC,CAAC,CAAC,SAAS,CAAC;YACd,wEAAwE;YACxE,2DAA2D;YAC3D,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAC9B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,YACpF,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,GAC7B,CACV,CAAC,YAEH,OAAO,CAAC,CAAC,CAAC,CACT,4BACG,YAAY,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CACtG,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,GAAoB,GAC/E,CACT,GACA,CACJ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CACnB,KAAC,oBAAoB,IACnB,UAAU,EAAE,GAAG,EAAE;gBACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC,EACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC/B,SAAS,EAAE,KAAK,EAChB,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,CAAC,CAAC,GACjF,CACH,CAAC,CAAC,CAAC,IAAI,GACW,CACtB,CAAC;IAEF,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;IAC7F,MAAM,YAAY,GAAG,CACnB,KAAC,kBAAkB,IACjB,IAAI,EAAE,qBAAqB,CAAC,IAAI,EAChC,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAC7C,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,EACvD,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,cAAc,CAAC,UAAU,CAAC,EACvC,IAAI,EACF,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YACtB,aAAa;gBACZ,CAAC,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,KAAK,WAAW,IAAI,KAAK,EAAE;gBACvE,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,GAC1C,EAET,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CACtB,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,YACrF,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAC/B,CACV,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CACjC,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,YACrF,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAC/B,CACV,CAAC,YAED,aAAa,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAC5D,KAAC,qBAAqB,IACpB,UAAU,EAAE,GAAG,EAAE;gBACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC1B,OAAO,EAAE,CAAC;YACZ,CAAC,EACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC/B,SAAS,EAAE,KAAK,EAChB,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,CAAC,CAAC,GACjF,CACH,CAAC,CAAC,CAAC,IAAI,GACW,CACtB,CAAC;IAEF,8EAA8E;IAC9E,8DAA8D;IAC9D,6EAA6E;IAC7E,+EAA+E;IAC/E,yEAAyE;IACzE,gEAAgE;IAChE,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,gEAAgE;IAChE,4EAA4E;IAC5E,wEAAwE;IACxE,2DAA2D;IAE3D,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aAGxC,eAAK,SAAS,EAAC,2BAA2B,aACxC,aAAI,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,GAAM,EACjG,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,GAAQ,IAC9F,EAEL,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EACA,UAAU,IAAI,CACb,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,UAAU,GAAoB,GAC3C,CACT,EAEA,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,IAAI,IAAC,SAAS,EAAC,uBAAuB,YAAE,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAQ,CAClF,CAAC,CAAC,CAAC,CACF,eAAK,SAAS,EAAC,wBAAwB,aACpC,cAAc,EACd,WAAW,EACX,YAAY,EACb,KAAC,eAAe,IACd,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,IAAI,EAAE,KAAK,EACtB,CAAC,EAAE,CAAC,EACJ,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,GAAG,EAAE;4BACd,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;4BAChD,OAAO,EAAE,CAAC;wBACZ,CAAC,EACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAC/B,EACF,KAAC,oBAAoB,IACnB,KAAK,EAAE,qBAAqB,EAC5B,YAAY,EAAE,YAAY,EAC1B,CAAC,EAAE,CAAC,EACJ,QAAQ,EAAE,oBAAoB,GAC9B,IACE,CACP,EAED,KAAC,yBAAyB,IACxB,IAAI,EAAE,UAAU,EAChB,YAAY,EAAE,aAAa,EAC3B,cAAc,EAAE,GAAG,EAAE;oBACnB,aAAa,CAAC,KAAK,CAAC,CAAC;oBACrB,iBAAiB,CAAC,EAAE,CAAC,CAAC;gBACxB,CAAC,EACD,kBAAkB,EAAE,mBAAmB,EACvC,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,YAE5C,eAAK,SAAS,EAAC,gBAAgB,aAC7B,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,GAAQ,EAC9E,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,eAAe,CAAC,GAAc,EACnE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,kBAAkB,EAC/B,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAClD,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,GACjE,IACI,IACJ,GACoB,IACxB,CACP,CAAC;AACJ,CAAC,CAAC;AAkBF,MAAM,eAAe,GAAmC,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;IACrI,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,0EAA0E;IAC1E,oBAAoB;IACpB,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAA4E;QACpG,aAAa,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;KAC7E,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAmD;QACxE,aAAa,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;KACxD,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,IAA+E,EAAE,EAAE;QACxF,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACxF,SAAS,EAAE,CAAC;YACZ,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EACD,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CACpC,CAAC;IAEF,MAAM,SAAS,GAAG,WAAW,CAC3B,KAAK,EAAE,IAAsD,EAAE,EAAE;QAC/D,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/D,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CACjC,CAAC;IAEF,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;IAEtF,OAAO,CACL,KAAC,kBAAkB,IACjB,IAAI,EAAE,qBAAqB,CAAC,GAAG,EAC/B,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,EAChD,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,EAC1D,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,EAC/G,IAAI,EAAE,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,GAAQ,EACnJ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAChB,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,GAAG,EAAE;gBACZ,UAAU,CAAC,KAAK,CAAC,CAAC;gBAClB,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,CAAC,YAEA,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,GACzB,CACV,CAAC,CAAC,CAAC,CACF,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAC7E,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GACrF,CACV,YAEA,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAC7B,KAAC,YAAY,OAAK,UAAU,YAC1B,gBAAM,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,SAAS,EAAC,WAAW,aAQ1E,KAAC,+BAA+B,IAAC,KAAK,EAAE,SAAS,GAAI,EACrD,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,GAAc,EACpE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,kBAAkB,KAC3B,UAAU,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAC9D,IACI,EACR,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAc,EAChE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,KACvB,UAAU,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAC1D,EACF,KAAC,yBAAyB,IAAC,SAAS,EAAC,aAAa,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,GAAI,IACnF,EACR,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,GAAc,EACpE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,KACvB,UAAU,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAC9D,IACI,EACR,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,UAAU,YACvC,CAAC,CAAC,qBAAqB,CAAC,eAAe,CAAC,GAClC,IACJ,GACM,CAChB,CAAC,CAAC,CAAC,CACF,KAAC,YAAY,OAAK,OAAO,YACvB,gBAAM,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,SAAS,EAAC,WAAW,aAEpE,KAAC,+BAA+B,IAAC,KAAK,EAAE,SAAS,GAAI,EACrD,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAc,EAChE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,KACvB,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GACvD,EACF,KAAC,yBAAyB,IAAC,SAAS,EAAC,aAAa,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,GAAI,IACnF,EACR,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,GAAc,EACpE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,KACvB,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAC3D,IACI,EACR,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,UAAU,YACvC,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAC/B,IACJ,GACM,CAChB,GACgB,CACtB,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,oBAAoB,GAAwC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAC1G,KAAC,kBAAkB,IACjB,IAAI,EAAE,qBAAqB,CAAC,IAAI,EAChC,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,EACtD,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,0BAA0B,CAAC,EAChE,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EACnF,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,EACpH,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,GAAQ;QAC3G,CAAC,CAAC,SAAS,YAEZ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACpB,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,GAAQ,CACvG,CAAC,CAAC,CAAC,CACF,aAAI,SAAS,EAAC,2BAA2B,YACtC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACnB,cAAmB,SAAS,EAAC,wEAAwE,aACnG,eAAK,SAAS,EAAC,uBAAuB,aACpC,KAAC,IAAI,IAAC,SAAS,EAAC,sBAAsB,YAAE,IAAI,CAAC,aAAa,GAAQ,EAClE,KAAC,IAAI,IAAC,SAAS,EAAC,wCAAwC,YAAE,IAAI,CAAC,aAAa,GAAQ,IAChF,EACL,YAAY,IAAI,CACf,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,YACpG,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,GACxC,CACV,KATM,IAAI,CAAC,GAAG,CAUZ,CACN,CAAC,GACC,CACN,GACkB,CACtB,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useState } from 'react';\nimport { ButtonSize, FrontendComponentType, SecuritySettingsLabel } from '@wildo-ai/presets-components-models';\nimport { Card, CardContent } from '~wildo-frontend-lib/components/sections/card';\nimport { Badge, type BadgeVariants_Variant } from '~wildo-frontend-lib/components/data-display/badge';\nimport { useIconRegistry } from '~wildo-frontend-lib/core/icons/useIconRegistry';\nimport { StandardIconReference, IconSize } from '~wildo-frontend-lib/core/icons/icon-registry.frontend.schemas';\nimport { cn } from '~wildo-frontend-lib/core/ui/cn';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { InputRoot } from '~wildo-frontend-lib/components/form/controls/input';\nimport { Field, FieldLabel } from '~wildo-frontend-lib/components/form/chromes/field';\nimport { OperationsConfirmCritical } from '~wildo-frontend-lib/components/feedback/operations-confirm-critical';\nimport {\n AuthMethod,\n isWildoBackendError,\n type ExternalIdentitySource,\n type PasswordPolicyRules,\n type SsoConnectionType,\n} from '@wildo-ai/saas-models';\nimport { FormProvider, useForm } from 'react-hook-form';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { AuthSessionUtils } from '~wildo-frontend-lib/core/security/auth-session.utils';\nimport { PasswordStrengthIndicator, DEFAULT_PASSWORD_POLICY } from '~wildo-frontend-lib/components/auth/utils/PasswordStrengthIndicator';\nimport { CredentialUsernameAutofillField } from '~wildo-frontend-lib/components/auth/utils/CredentialUsernameAutofillField';\nimport { TotpEnrollmentMethod } from '~wildo-frontend-lib/components/auth/enrollment/TotpEnrollmentMethod';\nimport { PhoneEnrollmentMethod } from '~wildo-frontend-lib/components/auth/enrollment/PhoneEnrollmentMethod';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport type { FrontendAppProviderRef } from '@wildo-ai/external-connectors-public/app';\nimport {\n collectFrontendProviderDisplayLabelKeys,\n resolveFrontendProviderDisplayLabel,\n} from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\n\n// Inlined as string literals (not `Object.values(SecuritySettingsLabel)`)\n// so the dev companion's static `.tsx` extractor can resolve the array\n// without having to evaluate enum references. Keep this list in lock-\n// step with the `SecuritySettingsLabel` enum in\n// `@wildo-ai/presets-components-models/labelling.shared.schemas.ts` —\n// new enum members must also be appended here, otherwise they won't\n// reach the labellize/translate pipeline.\n\ntype EnrolledMethod = { method: string; enrolled: boolean; enrolledAt?: string; details?: Record<string, unknown> };\ntype PasskeyCred = { credentialId: string; name: string; createdAt: string };\ntype IdentityLink = {\n _id: string;\n connectionType: SsoConnectionType;\n source: ExternalIdentitySource;\n providerRef: string;\n providerEmail: string;\n linkedAt: string;\n lastUsedAt: string;\n};\ntype ResolvedIdentityLink = IdentityLink & { providerLabel: string };\n\n/*\n Presentational state of one authentication factor.\n \n `UNAVAILABLE` is NOT \"off\" — it means the current device/browser cannot offer\n * the factor at all (no WebAuthn support), which is a different instruction to\n * the user than \"you have not set this up yet\" and therefore a distinct badge.\n /\nenum SecurityFactorState {\n ACTIVE = 'active',\n INACTIVE = 'inactive',\n UNAVAILABLE = 'unavailable',\n}\n\nconst FACTOR_STATE_BADGE_VARIANT: Record<SecurityFactorState, BadgeVariants_Variant> = {\n [SecurityFactorState.ACTIVE]: 'success',\n [SecurityFactorState.INACTIVE]: 'outline',\n [SecurityFactorState.UNAVAILABLE]: 'secondary',\n};\n\ninterface SecurityFactorCardProps {\n /* Glyph identifying the method — resolved through the icon registry so apps can re-skin it. /\n icon: StandardIconReference;\n title: string;\n /* Plain-language \"what this is / why it matters\" line. Always rendered. /\n description: string;\n state: SecurityFactorState;\n statusLabel: string;\n /* Live detail under the description (count, masked number, enrolment date). /\n meta?: React.ReactNode;\n /\n The factor's primary control, pinned to the inline-end of the header row.\n * Every row's action lands on the same axis, so the column reads as a list of\n * choices rather than as five stacked mini-pages — the account-security idiom\n * used by mainstream providers. Anything that must expand (an enrolment flow,\n * a credential list, a form) goes to `children` instead.\n \n Row actions are OUTLINE, without exception. They are peers: the panel offers\n * five alternative ways to protect an account and recommends none of them, so\n * filling any one of them would assert a priority the page does not hold —\n * and five filled buttons stacked down a column assert five priorities, which\n * is the same as none while costing all the emphasis. The filled variant is\n * reserved for the commit action INSIDE an opened disclosure, where there\n * genuinely is one thing to do next.\n /\n action?: React.ReactNode;\n children?: React.ReactNode;\n}\n\n/\n One authentication factor, presented as a scannable row: glyph · name · what\n * it is · live status, with its primary control pinned to the row's end.\n \n This replaced a stack of visually identical title-only cards, which forced the\n * user to READ every card to learn which factors were active and offered no\n * explanation of what any factor was. The status badge and the icon carry that\n * information pre-attentively; the description makes the choice informed. The\n * shape follows the account-security idiom used by mainstream providers.\n /\nconst SecurityFactorCard: React.FC<SecurityFactorCardProps> = ({\n icon, title, description, state, statusLabel, meta, action, children,\n}) => {\n const { renderIcon } = useIconRegistry();\n const isActive = state === SecurityFactorState.ACTIVE;\n\n return (\n <Card>\n <CardContent className=\"flex flex-col gap-item p-card\">\n <div className=\"flex flex-row items-start gap-item\">\n {/ Tinted glyph tile — tinted only when the factor is live, so the eye\n lands on what is protecting the account before any text is read. /}\n <div\n aria-hidden=\"true\"\n className={cn(\n 'flex size-9 shrink-0 items-center justify-center rounded-md',\n isActive ? 'bg-success/10 text-success' : 'bg-muted text-muted-foreground',\n )}\n >\n {renderIcon(icon, { size: IconSize.SM })}\n </div>\n\n <div className=\"flex min-w-0 flex-1 flex-col gap-element-xs\">\n <div className=\"flex flex-wrap items-center gap-element-xs\">\n <Text className=\"font-medium leading-snug\">{title}</Text>\n <Badge variant={FACTOR_STATE_BADGE_VARIANT[state]}>{statusLabel}</Badge>\n </div>\n <Text className=\"text-sm text-muted-foreground\">{description}</Text>\n {meta}\n </div>\n\n {action && <div className=\"flex shrink-0 items-center gap-element-xs\">{action}</div>}\n </div>\n\n {/ Expanded content aligns with the TEXT column, not the glyph: the\n indent is the glyph tile (`size-9`) plus the row gap, so a form or a\n credential list continues the sentence it belongs to. /}\n {children && (\n <div className=\"flex flex-col gap-item ps-[calc(var(--spacing)9+var(--sp-item))]\">{children}</div>\n )}\n </CardContent>\n </Card>\n );\n};\n\nexport const AppPage_SecuritySettings: React.FC = () => {\n const { auth, frontendProviderRegistry } = useApplication();\n const { auth: authState } = useAuthSession();\n const { user } = useUserOrgs();\n const resolvedAuth = useResolvedAuthConfig();\n\n const [methods, setMethods] = useState<EnrolledMethod[]>([]);\n const [passkeys, setPasskeys] = useState<PasskeyCred[]>([]);\n const [identityLinks, setIdentityLinks] = useState<IdentityLink[]>([]);\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState<string \| null>(null);\n const [successMsg, setSuccessMsg] = useState<string \| null>(null);\n const [showTotpEnroll, setShowTotpEnroll] = useState(false);\n const [showPhoneEnroll, setShowPhoneEnroll] = useState(false);\n const [passkeyRegistering, setPasskeyRegistering] = useState(false);\n const [reauthOpen, setReauthOpen] = useState(false);\n const [reauthPassword, setReauthPassword] = useState('');\n const identityProviderLabelKeys = useMemo(\n () => collectFrontendProviderDisplayLabelKeys(\n identityLinks.map((link) =>\n frontendProviderRegistry?.getProviderByRef(\n link.providerRef as FrontendAppProviderRef,\n )?.metadata.displayNameLabelKey,\n ),\n ),\n [frontendProviderRegistry, identityLinks],\n );\n const { tComponent, t: translateProvider, isReady } = useI18n({\n component: [\n FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS,\n FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER,\n FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED,\n ],\n keys: identityProviderLabelKeys,\n });\n const t = useCallback(\n (key: string, params?: Record<string, string \| number>) =>\n tComponent(FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS, key, params),\n [tComponent],\n );\n const tPolicy = useCallback(\n (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key),\n [tComponent],\n );\n\n const passkeyConfig = auth?.passkeyConfig;\n const methodManagement = resolvedAuth.userTypeAuth?.methodManagement;\n const passwordPolicy = resolvedAuth.passwordPolicy;\n const maxPasskeys = passkeyConfig?.maxPasskeysPerUser ?? 10;\n const requireReauth = methodManagement?.requireReauthForMethodChanges ?? false;\n const allowRemoval = methodManagement?.allowUserMethodRemoval ?? true;\n\n const refresh = useCallback(async () => {\n setLoading(true);\n setError(null);\n try {\n const client = getManualCallsHttpClient();\n const [methodsRes, passkeysRes, linksRes] = await Promise.all([\n client.getMyMethods(),\n client.passkeyList().catch(() => ({ credentials: [] })),\n client.getIdentityLinks().catch(() => ({ links: [] })),\n ]);\n setMethods(methodsRes.methods ?? []);\n setPasskeys(passkeysRes.credentials ?? []);\n setIdentityLinks(linksRes.links ?? []);\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n setError(e?.message ?? t(SecuritySettingsLabel.ERROR));\n } finally {\n setLoading(false);\n }\n }, [t]);\n\n useEffect(() => {\n refresh();\n }, [refresh]);\n\n useEffect(() => {\n if (!successMsg) return;\n const timer = setTimeout(() => setSuccessMsg(null), 5000);\n return () => clearTimeout(timer);\n }, [successMsg]);\n\n const enrolledSecondFactor = methods\n .filter((m) => m.enrolled && [AuthMethod.TOTP, AuthMethod.PASSKEY, AuthMethod.SMS_OTP].includes(m.method as AuthMethod))\n .map((m) => m.method as AuthMethod);\n const completeness = AuthSessionUtils.evaluateAccountCompleteness(\n authState.identification?.requiresMFA ?? false,\n authState.identification?.secondFactorMethods?.map((m) => m.method) ?? [],\n enrolledSecondFactor.length > 0 ? enrolledSecondFactor : (authState.enrolledSecondFactorMethods as AuthMethod[]),\n resolvedAuth.userTypeAuth?.mfaPolicy?.acceptableMFAMethods ?? [],\n );\n\n const hasPassword = methods.some((m) => m.method === AuthMethod.PASSWORD && m.enrolled);\n const hasTotp = methods.some((m) => m.method === AuthMethod.TOTP && m.enrolled);\n const smsMethod = methods.find((m) => m.method === AuthMethod.SMS_OTP);\n const phoneVerified = smsMethod?.enrolled ?? false;\n const phoneMasked = smsMethod?.details?.phoneNumber as string \| undefined;\n const resolvedIdentityLinks = useMemo(\n () => identityLinks.map((link) => {\n const provider = frontendProviderRegistry?.getProviderByRef(\n link.providerRef as FrontendAppProviderRef,\n );\n\n return {\n ...link,\n providerLabel: resolveFrontendProviderDisplayLabel({\n providerRef: link.providerRef,\n displayName: auth?.socialOAuth2Providers?.[link.providerRef]?.displayName\n ?? provider?.metadata.displayName,\n displayNameLabelKey: provider?.metadata.displayNameLabelKey,\n translate: translateProvider,\n }),\n };\n }),\n [auth?.socialOAuth2Providers, frontendProviderRegistry, identityLinks, translateProvider],\n );\n\n const handlePasskeyAdd = useCallback(async () => {\n if (passkeys.length >= maxPasskeys) return;\n if (typeof window === 'undefined' \|\| !window.PublicKeyCredential) return;\n setPasskeyRegistering(true);\n setError(null);\n try {\n const client = getManualCallsHttpClient();\n const options = (await client.passkeyRegisterOptions()) as unknown as PublicKeyCredentialCreationOptionsJSON;\n const credential = await startRegistration({ optionsJSON: options });\n await client.passkeyRegisterVerify({ response: credential });\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n refresh();\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n const msg = e?.name === 'NotAllowedError' ? t(SecuritySettingsLabel.PASSKEY_CANCELLED) : (e?.message ?? t(SecuritySettingsLabel.ERROR));\n setError(msg);\n } finally {\n setPasskeyRegistering(false);\n }\n }, [maxPasskeys, passkeys.length, refresh, t]);\n\n const handlePasskeyRemove = useCallback(\n async (credentialId: string) => {\n if (!allowRemoval) return;\n try {\n await getManualCallsHttpClient().passkeyRemove(credentialId);\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n refresh();\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n setError(e?.message ?? t(SecuritySettingsLabel.ERROR));\n }\n },\n [allowRemoval, refresh, t],\n );\n\n const handleTotpDisable = useCallback(async () => {\n const doDisable = async (reauthToken?: string) => {\n const opts = reauthToken ? { headers: { 'X-Reauth-Token': reauthToken } } : undefined;\n await getManualCallsHttpClient().mfaTOTPDisable(opts);\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n setShowTotpEnroll(false);\n refresh();\n };\n if (requireReauth) {\n setReauthOpen(true);\n } else {\n try {\n await doDisable();\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n setError(e?.message ?? t(SecuritySettingsLabel.ERROR));\n }\n }\n }, [requireReauth, refresh, t]);\n\n const handleReauthConfirm = useCallback(async () => {\n if (!reauthPassword.trim()) return;\n try {\n const { reAuthToken } = await getManualCallsHttpClient().reAuthenticate(AuthMethod.PASSWORD, { password: reauthPassword });\n setReauthOpen(false);\n setReauthPassword('');\n await getManualCallsHttpClient().mfaTOTPDisable({ headers: { 'X-Reauth-Token': reAuthToken } });\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n setShowTotpEnroll(false);\n refresh();\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n setError(e?.message ?? t(SecuritySettingsLabel.ERROR));\n }\n }, [reauthPassword, refresh, t]);\n\n const handleUnlinkIdentity = useCallback(\n async (linkId: string) => {\n if (!allowRemoval) return;\n try {\n await getManualCallsHttpClient().unlinkIdentityLink(linkId);\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n refresh();\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n setError(e?.message ?? t(SecuritySettingsLabel.ERROR));\n }\n },\n [allowRemoval, refresh, t],\n );\n\n if (!isReady) return null;\n\n // Passkeys are only offerable where WebAuthn exists; an unsupported browser is\n // a distinct state from \"not set up yet\" and gets its own badge + no CTA.\n const passkeysSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n const passkeyState = !passkeysSupported\n ? SecurityFactorState.UNAVAILABLE\n : passkeys.length > 0 ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE;\n\n const statusLabelFor = (state: SecurityFactorState): string => {\n switch (state) {\n case SecurityFactorState.ACTIVE: return t(SecuritySettingsLabel.STATUS_ACTIVE);\n case SecurityFactorState.UNAVAILABLE: return t(SecuritySettingsLabel.STATUS_UNAVAILABLE);\n case SecurityFactorState.INACTIVE: return t(SecuritySettingsLabel.STATUS_NOT_CONFIGURED);\n }\n };\n\n const PasskeySection = (\n <SecurityFactorCard\n icon={StandardIconReference.FINGERPRINT}\n title={t(SecuritySettingsLabel.SECTION_PASSKEYS)}\n description={t(SecuritySettingsLabel.PASSKEYS_DESCRIPTION)}\n state={passkeyState}\n statusLabel={statusLabelFor(passkeyState)}\n meta={passkeysSupported && passkeys.length > 0\n ? <Text className=\"text-sm\">{t(SecuritySettingsLabel.PASSKEY_COUNT, { count: passkeys.length })}</Text>\n : undefined}\n action={passkeysSupported && passkeys.length < maxPasskeys ? (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={handlePasskeyAdd} disabled={passkeyRegistering}>\n {passkeyRegistering ? t(SecuritySettingsLabel.PASSKEY_ADDING) : t(SecuritySettingsLabel.PASSKEY_ADD)}\n </Button>\n ) : undefined}\n >\n {!passkeysSupported && (\n <Alert>\n <AlertDescription>{t(SecuritySettingsLabel.PASSKEY_UNSUPPORTED)}</AlertDescription>\n </Alert>\n )}\n {passkeysSupported && (\n <>\n {passkeys.length === 0 && (\n <Text className=\"text-sm text-muted-foreground\">{t(SecuritySettingsLabel.PASSKEY_EMPTY)}</Text>\n )}\n {passkeys.length > 0 && (\n <ul className=\"flex flex-col gap-element\">\n {passkeys.map((pk) => (\n <li key={pk.credentialId} className=\"flex items-center justify-between gap-item rounded-md border p-card-sm\">\n <div className=\"flex min-w-0 flex-col\">\n <Text className=\"truncate font-medium\">{pk.name}</Text>\n {pk.createdAt && (\n <Text className=\"text-xs text-muted-foreground\">\n {t(SecuritySettingsLabel.PASSKEY_ADDED, { date: new Date(pk.createdAt).toLocaleDateString() })}\n </Text>\n )}\n </div>\n {allowRemoval && (\n <Button variant={ButtonVariants_Variant.OUTLINE} size={ButtonSize.SM} onClick={() => handlePasskeyRemove(pk.credentialId)}>\n {t(SecuritySettingsLabel.PASSKEY_REMOVE)}\n </Button>\n )}\n </li>\n ))}\n </ul>\n )}\n </>\n )}\n </SecurityFactorCard>\n );\n\n const totpState = hasTotp ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE;\n const TotpSection = (\n <SecurityFactorCard\n icon={StandardIconReference.SMARTPHONE}\n title={t(SecuritySettingsLabel.SECTION_TOTP)}\n description={t(SecuritySettingsLabel.TOTP_DESCRIPTION)}\n state={totpState}\n statusLabel={statusLabelFor(totpState)}\n meta={<Text className=\"text-sm\">{hasTotp ? t(SecuritySettingsLabel.TOTP_ENABLED) : t(SecuritySettingsLabel.TOTP_NOT_SETUP)}</Text>}\n action={hasTotp\n ? (allowRemoval ? (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={handleTotpDisable}>\n {t(SecuritySettingsLabel.TOTP_DISABLE)}\n </Button>\n ) : undefined)\n // While the enrolment flow is open its own controls own the row, so the\n // opener is withdrawn rather than left as a second way in.\n : (showTotpEnroll ? undefined : (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={() => setShowTotpEnroll(true)}>\n {t(SecuritySettingsLabel.TOTP_SETUP)}\n </Button>\n ))}\n >\n {hasTotp ? (\n <>\n {completeness.enrolledMethods.length === 1 && completeness.enrolledMethods.includes(AuthMethod.TOTP) && (\n <Alert>\n <AlertDescription>{t(SecuritySettingsLabel.TOTP_ONLY_MFA_WARNING)}</AlertDescription>\n </Alert>\n )}\n </>\n ) : showTotpEnroll ? (\n <TotpEnrollmentMethod\n onComplete={() => {\n setShowTotpEnroll(false);\n refresh();\n }}\n onError={(msg) => setError(msg)}\n isLoading={false}\n t={(k) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, k)}\n />\n ) : null}\n </SecurityFactorCard>\n );\n\n const phoneState = phoneVerified ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE;\n const PhoneSection = (\n <SecurityFactorCard\n icon={StandardIconReference.MAIL}\n title={t(SecuritySettingsLabel.SECTION_PHONE)}\n description={t(SecuritySettingsLabel.PHONE_DESCRIPTION)}\n state={phoneState}\n statusLabel={statusLabelFor(phoneState)}\n meta={\n <Text className=\"text-sm\">\n {phoneVerified\n ? `${t(SecuritySettingsLabel.PHONE_VERIFIED)}: ${phoneMasked ?? '**'}`\n : t(SecuritySettingsLabel.PHONE_NOT_VERIFIED)}\n </Text>\n }\n action={phoneVerified ? (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={() => setShowPhoneEnroll(true)}>\n {t(SecuritySettingsLabel.PHONE_CHANGE)}\n </Button>\n ) : (showPhoneEnroll ? undefined : (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={() => setShowPhoneEnroll(true)}>\n {t(SecuritySettingsLabel.PHONE_VERIFY)}\n </Button>\n ))}\n >\n {phoneVerified && !showPhoneEnroll ? null : showPhoneEnroll ? (\n <PhoneEnrollmentMethod\n onComplete={() => {\n setShowPhoneEnroll(false);\n refresh();\n }}\n onError={(msg) => setError(msg)}\n isLoading={false}\n t={(k) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, k)}\n />\n ) : null}\n </SecurityFactorCard>\n );\n\n // ── No posture summary, deliberately ───────────────────────────────────────\n // Two rejected designs, for whoever is tempted to re-add one:\n // 1. \"Your account is fully secured\" keyed off `completeness.isComplete` —\n // that flag answers \"does this satisfy the app's auth POLICY?\", and it is\n // `true` whenever MFA is not required. It therefore claimed a fully\n // secured account for an account with zero second factors.\n // 2. An \"n of 4 sign-in methods active\" ratio with a progress meter — a\n // score with no referent. The denominator is not a target: nobody needs\n // SMS and* TOTP and a passkey, the factors are alternatives, and the\n // remedy differs per factor. A meter that fills toward a number the user\n // should not reach measures nothing and invites gaming it.\n // The rows below already carry the state (per-factor badge) and the meaning\n // (per-factor description). A summary that restates them as a number is\n // strictly less information, presented as if it were more.\n\n return (\n <div className=\"flex flex-col gap-section\">\n {/* `h3`, not `h2`: the Settings Hub header owns the `h2` for this dialog,\n so a panel heading is one level below it. /}\n <div className=\"flex flex-col gap-item-xs\">\n <h3 className=\"text-base font-semibold tracking-tight\">{t(SecuritySettingsLabel.PAGE_TITLE)}</h3>\n <Text className=\"text-sm text-muted-foreground\">{t(SecuritySettingsLabel.PAGE_DESCRIPTION)}</Text>\n </div>\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n {successMsg && (\n <Alert>\n <AlertDescription>{successMsg}</AlertDescription>\n </Alert>\n )}\n\n {loading ? (\n <Text className=\"text-muted-foreground\">{t(SecuritySettingsLabel.LOADING)}</Text>\n ) : (\n <div className=\"flex flex-col gap-item\">\n {PasskeySection}\n {TotpSection}\n {PhoneSection}\n <PasswordSection\n hasPassword={hasPassword}\n passwordPolicy={passwordPolicy}\n userEmail={user?.email}\n t={t}\n tPolicy={tPolicy}\n onSuccess={() => {\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n refresh();\n }}\n onError={(msg) => setError(msg)}\n />\n <IdentityLinksSection\n links={resolvedIdentityLinks}\n allowRemoval={allowRemoval}\n t={t}\n onUnlink={handleUnlinkIdentity}\n />\n </div>\n )}\n\n <OperationsConfirmCritical\n open={reauthOpen}\n onOpenChange={setReauthOpen}\n cancelCallback={() => {\n setReauthOpen(false);\n setReauthPassword('');\n }}\n validationCallback={handleReauthConfirm}\n label={t(SecuritySettingsLabel.REAUTH_TITLE)}\n >\n <div className=\"space-y-4 py-4\">\n <Text className=\"text-sm\">{t(SecuritySettingsLabel.REAUTH_DESCRIPTION)}</Text>\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.REAUTH_PASSWORD)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"current-password\"\n value={reauthPassword}\n onChange={(e) => setReauthPassword(e.target.value)}\n placeholder={t(SecuritySettingsLabel.REAUTH_PASSWORD_PLACEHOLDER)}\n />\n </Field>\n </div>\n </OperationsConfirmCritical>\n </div>\n );\n};\n\ninterface PasswordSectionProps {\n hasPassword: boolean;\n passwordPolicy: PasswordPolicyRules;\n /\n Signed-in user's email. Rendered as a visually-hidden\n * `autocomplete=\"username\"` field inside each password form so password\n * managers associate the saved/updated credential with the correct account\n * (Chromium also warns when a password form has no username field).\n /\n userEmail?: string;\n t: (k: string, params?: Record<string, string \| number>) => string;\n tPolicy: (k: string) => string;\n onSuccess: () => void;\n onError: (msg: string) => void;\n}\n\nconst PasswordSection: React.FC<PasswordSectionProps> = ({ hasPassword, passwordPolicy, userEmail, t, tPolicy, onSuccess, onError }) => {\n const [submitting, setSubmitting] = useState(false);\n // The credential form is a DISCLOSURE, not the row's resting state. Rendered\n // eagerly it was four inputs plus a strength meter permanently open beneath a\n // one-line row, which made this factor read as the page's subject and the\n // other four as its footnotes. Every row now rests at the same height and\n // opens on request.\n const [editing, setEditing] = useState(false);\n const changeForm = useForm<{ currentPassword: string; newPassword: string; confirmPassword: string }>({\n defaultValues: { currentPassword: '', newPassword: '', confirmPassword: '' },\n });\n const setForm = useForm<{ newPassword: string; confirmPassword: string }>({\n defaultValues: { newPassword: '', confirmPassword: '' },\n });\n\n const handleChange = useCallback(\n async (data: { currentPassword: string; newPassword: string; confirmPassword: string }) => {\n if (data.newPassword !== data.confirmPassword) {\n onError(t(SecuritySettingsLabel.PASSWORD_MISMATCH));\n return;\n }\n setSubmitting(true);\n try {\n await getManualCallsHttpClient().passwordChange(data.currentPassword, data.newPassword);\n onSuccess();\n changeForm.reset();\n setEditing(false);\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n onError(e?.message ?? t(SecuritySettingsLabel.ERROR));\n } finally {\n setSubmitting(false);\n }\n },\n [changeForm, onError, onSuccess, t],\n );\n\n const handleSet = useCallback(\n async (data: { newPassword: string; confirmPassword: string }) => {\n if (data.newPassword !== data.confirmPassword) {\n onError(t(SecuritySettingsLabel.PASSWORD_MISMATCH));\n return;\n }\n setSubmitting(true);\n try {\n await getManualCallsHttpClient().passwordSet(data.newPassword);\n onSuccess();\n setForm.reset();\n setEditing(false);\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n onError(e?.message ?? t(SecuritySettingsLabel.ERROR));\n } finally {\n setSubmitting(false);\n }\n },\n [onError, onSuccess, setForm, t],\n );\n\n const state = hasPassword ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE;\n\n return (\n <SecurityFactorCard\n icon={StandardIconReference.KEY}\n title={t(SecuritySettingsLabel.SECTION_PASSWORD)}\n description={t(SecuritySettingsLabel.PASSWORD_DESCRIPTION)}\n state={state}\n statusLabel={t(hasPassword ? SecuritySettingsLabel.STATUS_ACTIVE : SecuritySettingsLabel.STATUS_NOT_CONFIGURED)}\n meta={<Text className=\"text-sm\">{t(hasPassword ? SecuritySettingsLabel.PASSWORD_SET_STATUS : SecuritySettingsLabel.PASSWORD_NOT_SET_STATUS)}</Text>}\n action={editing ? (\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n onClick={() => {\n setEditing(false);\n changeForm.reset();\n setForm.reset();\n }}\n >\n {t(SecuritySettingsLabel.CANCEL)}\n </Button>\n ) : (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={() => setEditing(true)}>\n {t(hasPassword ? SecuritySettingsLabel.PASSWORD_CHANGE : SecuritySettingsLabel.PASSWORD_SET)}\n </Button>\n )}\n >\n {!editing ? null : hasPassword ? (\n <FormProvider {...changeForm}>\n <form onSubmit={changeForm.handleSubmit(handleChange)} className=\"space-y-4\">\n {/\n Hidden username field. Gives password managers the account\n context they need to associate the updated credential, and\n resolves Chromium's \"password forms should have an (optionally\n hidden) username field\" warning. Must precede the password\n inputs so managers pair the username with them.\n /}\n <CredentialUsernameAutofillField email={userEmail} />\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_CURRENT)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"current-password\"\n {...changeForm.register('currentPassword', { required: true })}\n />\n </Field>\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_NEW)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"new-password\"\n {...changeForm.register('newPassword', { required: true })}\n />\n <PasswordStrengthIndicator fieldName=\"newPassword\" policy={passwordPolicy} t={tPolicy} />\n </Field>\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_CONFIRM)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"new-password\"\n {...changeForm.register('confirmPassword', { required: true })}\n />\n </Field>\n <Button type=\"submit\" disabled={submitting}>\n {t(SecuritySettingsLabel.PASSWORD_CHANGE)}\n </Button>\n </form>\n </FormProvider>\n ) : (\n <FormProvider {...setForm}>\n <form onSubmit={setForm.handleSubmit(handleSet)} className=\"space-y-4\">\n {/ Hidden username field — see the note in the change-password form above. */}\n <CredentialUsernameAutofillField email={userEmail} />\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_NEW)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"new-password\"\n {...setForm.register('newPassword', { required: true })}\n />\n <PasswordStrengthIndicator fieldName=\"newPassword\" policy={passwordPolicy} t={tPolicy} />\n </Field>\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_CONFIRM)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"new-password\"\n {...setForm.register('confirmPassword', { required: true })}\n />\n </Field>\n <Button type=\"submit\" disabled={submitting}>\n {t(SecuritySettingsLabel.PASSWORD_SET)}\n </Button>\n </form>\n </FormProvider>\n )}\n </SecurityFactorCard>\n );\n};\n\ninterface IdentityLinksSectionProps {\n links: ResolvedIdentityLink[];\n allowRemoval: boolean;\n t: (k: string, params?: Record<string, string \| number>) => string;\n onUnlink: (linkId: string) => void;\n}\n\nconst IdentityLinksSection: React.FC<IdentityLinksSectionProps> = ({ links, allowRemoval, t, onUnlink }) => (\n <SecurityFactorCard\n icon={StandardIconReference.LINK}\n title={t(SecuritySettingsLabel.SECTION_IDENTITY_LINKS)}\n description={t(SecuritySettingsLabel.IDENTITY_LINKS_DESCRIPTION)}\n state={links.length > 0 ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE}\n statusLabel={t(links.length > 0 ? SecuritySettingsLabel.STATUS_ACTIVE : SecuritySettingsLabel.STATUS_NOT_CONFIGURED)}\n meta={links.length > 0\n ? <Text className=\"text-sm\">{t(SecuritySettingsLabel.IDENTITY_LINKS_COUNT, { count: links.length })}</Text>\n : undefined}\n >\n {links.length === 0 ? (\n <Text className=\"text-sm text-muted-foreground\">{t(SecuritySettingsLabel.IDENTITY_LINKS_EMPTY)}</Text>\n ) : (\n <ul className=\"flex flex-col gap-element\">\n {links.map((link) => (\n <li key={link._id} className=\"flex items-center justify-between gap-item rounded-md border p-card-sm\">\n <div className=\"flex min-w-0 flex-col\">\n <Text className=\"truncate font-medium\">{link.providerLabel}</Text>\n <Text className=\"truncate text-xs text-muted-foreground\">{link.providerEmail}</Text>\n </div>\n {allowRemoval && (\n <Button variant={ButtonVariants_Variant.OUTLINE} size={ButtonSize.SM} onClick={() => onUnlink(link._id)}>\n {t(SecuritySettingsLabel.IDENTITY_LINKS_UNLINK)}\n </Button>\n )}\n </li>\n ))}\n </ul>\n )}\n </SecurityFactorCard>\n);\n"]}
1	+ {"version":3,"file":"AppPage_SecuritySettings.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/AppPage_SecuritySettings.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC/G,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AACjF,OAAO,EAAE,KAAK,EAA8B,MAAM,mDAAmD,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACjF,OAAO,EAAyB,QAAQ,EAAE,MAAM,+DAA+D,CAAC;AAChH,OAAO,EAAE,2BAA2B,EAAE,MAAM,sEAAsE,CAAC;AACnH,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,mDAAmD,CAAC;AACtF,OAAO,EACL,UAAU,EACV,SAAS,EACT,mBAAmB,GAIpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAA2B,MAAM,qEAAqE,CAAC;AACzI,OAAO,EAAE,+BAA+B,EAAE,MAAM,2EAA2E,CAAC;AAC5H,OAAO,EAAE,oBAAoB,EAAE,MAAM,qEAAqE,CAAC;AAC3G,OAAO,EAAE,qBAAqB,EAAE,MAAM,sEAAsE,CAAC;AAC7G,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG5D,OAAO,EACL,uCAAuC,EACvC,mCAAmC,GACpC,MAAM,4FAA4F,CAAC;AAsBpG;;;;;;GAMG;AACH,IAAK,mBAIJ;AAJD,WAAK,mBAAmB;IACtB,wCAAiB,CAAA;IACjB,4CAAqB,CAAA;IACrB,kDAA2B,CAAA;AAC7B,CAAC,EAJI,mBAAmB,KAAnB,mBAAmB,QAIvB;AAED,MAAM,0BAA0B,GAAuD;IACrF,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,SAAS;IACvC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,SAAS;IACzC,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,WAAW;CAC/C,CAAC;AA+BF;;;;;;;;;GASG;AACH,MAAM,kBAAkB,GAAsC,CAAC,EAC7D,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GACrE,EAAE,EAAE;IACH,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,KAAK,mBAAmB,CAAC,MAAM,CAAC;IAEtD,OAAO,CACL,KAAC,IAAI,cACH,MAAC,WAAW,IAAC,SAAS,EAAC,+BAA+B,aACpD,eAAK,SAAS,EAAC,oCAAoC,aAGjD,6BACc,MAAM,EAClB,SAAS,EAAE,EAAE,CACX,6DAA6D,EAC7D,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,gCAAgC,CAC3E,YAEA,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,GACpC,EAEN,eAAK,SAAS,EAAC,6CAA6C,aAC1D,eAAK,SAAS,EAAC,4CAA4C,aACzD,KAAC,IAAI,IAAC,SAAS,EAAC,0BAA0B,YAAE,KAAK,GAAQ,EACzD,KAAC,KAAK,IAAC,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,YAAG,WAAW,GAAS,IACpE,EACN,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,WAAW,GAAQ,EACnE,IAAI,IACD,EAEL,MAAM,IAAI,cAAK,SAAS,EAAC,2CAA2C,YAAE,MAAM,GAAO,IAChF,EAKL,QAAQ,IAAI,CACX,cAAK,SAAS,EAAC,mEAAmE,YAAE,QAAQ,GAAO,CACpG,IACW,GACT,CACR,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAa,GAAG,EAAE;IACrD,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;IAC5D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAmB,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAgB,EAAE,CAAC,CAAC;IAC5D,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAiB,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAClE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,yBAAyB,GAAG,OAAO,CACvC,GAAG,EAAE,CAAC,uCAAuC,CAC3C,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACzB,wBAAwB,EAAE,gBAAgB,CACxC,IAAI,CAAC,WAAqC,CAC3C,EAAE,QAAQ,CAAC,mBAAmB,CAChC,CACF,EACD,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAC1C,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAC5D,SAAS,EAAE;YACT,qBAAqB,CAAC,6BAA6B;YACnD,qBAAqB,CAAC,4BAA4B;YAClD,qBAAqB,CAAC,kCAAkC;SACzD;QACD,IAAI,EAAE,yBAAyB;KAChC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,WAAW,CACnB,CAAC,GAAW,EAAE,MAAwC,EAAE,EAAE,CACxD,UAAU,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,GAAG,EAAE,MAAM,CAAC,EAC9E,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,EACpF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,EAAE,aAAa,CAAC;IAC1C,MAAM,gBAAgB,GAAG,YAAY,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACrE,MAAM,cAAc,GAAG,YAAY,CAAC,cAAc,CAAC;IACnD,MAAM,WAAW,GAAG,aAAa,EAAE,kBAAkB,IAAI,EAAE,CAAC;IAC5D,MAAM,YAAY,GAAG,gBAAgB,EAAE,sBAAsB,IAAI,IAAI,CAAC;IAEtE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC5D,MAAM,CAAC,YAAY,EAAE;gBACrB,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACvD,MAAM,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;aACvD,CAAC,CAAC;YACH,UAAU,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACrC,WAAW,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAC3C,gBAAgB,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElC,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,EAAE,CAAC;IACZ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,sFAAsF;IACtF,iGAAiG;IACjG,iGAAiG;IACjG,4CAA4C;IAC5C,MAAM,6BAA6B,GAAG,SAAS,CAAC,gCAAgC,EAAE,CAAC;IACnF,MAAM,oBAAoB,GAAG,OAAO;SACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;SAC3F,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,2BAA2B,CAC/D,SAAS,CAAC,cAAc,EAAE,WAAW,IAAI,KAAK,EAC9C,SAAS,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EACzE,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAE,SAAS,CAAC,2BAA4C,EAChH,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE,oBAAoB,IAAI,EAAE,CACjE,CAAC;IAEF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,SAAS,EAAE,QAAQ,IAAI,KAAK,CAAC;IACnD,MAAM,WAAW,GAAG,SAAS,EAAE,OAAO,EAAE,WAAiC,CAAC;IAC1E,MAAM,qBAAqB,GAAG,OAAO,CACnC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,wBAAwB,EAAE,gBAAgB,CACzD,IAAI,CAAC,WAAqC,CAC3C,CAAC;QAEF,OAAO;YACL,GAAG,IAAI;YACP,aAAa,EAAE,mCAAmC,CAAC;gBACjD,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,WAAW;uBACpE,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBACnC,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,CAAC,mBAAmB;gBAC3D,SAAS,EAAE,iBAAiB;aAC7B,CAAC;SACH,CAAC;IACJ,CAAC,CAAC,EACF,CAAC,IAAI,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAC1F,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC9C,IAAI,QAAQ,CAAC,MAAM,IAAI,WAAW;YAAE,OAAO;QAC3C,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAAE,OAAO;QACzE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAsD,CAAC;YAC7G,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YACrE,MAAM,MAAM,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7D,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;YACrJ,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEzE,MAAM,mBAAmB,GAAG,WAAW,CACrC,KAAK,EAAE,YAAoB,EAAE,EAAE;QAC7B,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC7D,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,EACD,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CACrD,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC/C,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,cAAc,EAAE,CAAC;YAClD,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE3C,MAAM,oBAAoB,GAAG,WAAW,CACtC,KAAK,EAAE,MAAc,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC5D,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,EACD,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CACrD,CAAC;IAEF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,iBAAiB,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IACxF,MAAM,YAAY,GAAG,CAAC,iBAAiB;QACrC,CAAC,CAAC,mBAAmB,CAAC,WAAW;QACjC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;IAEpF,MAAM,cAAc,GAAG,CAAC,KAA0B,EAAU,EAAE;QAC5D,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;YAC/E,KAAK,mBAAmB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;YACzF,KAAK,mBAAmB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CACrB,MAAC,kBAAkB,IACjB,IAAI,EAAE,2BAA2B,CAAC,UAAU,CAAC,OAAO,CAAC,EACrD,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,EAChD,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,EAC1D,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,cAAc,CAAC,YAAY,CAAC,EACzC,IAAI,EAAE,iBAAiB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC5C,CAAC,CAAC,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAQ;YACvG,CAAC,CAAC,SAAS,EACb,MAAM,EAAE,iBAAiB,IAAI,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAC3D,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,kBAAkB,YACrG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,CAAC,GAC7F,CACV,CAAC,CAAC,CAAC,SAAS,aAEZ,CAAC,iBAAiB,IAAI,CACrB,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,GAAoB,GAC7E,CACT,EACA,iBAAiB,IAAI,CACpB,8BACG,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CACxB,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAQ,CAChG,EACA,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CACtB,aAAI,SAAS,EAAC,2BAA2B,YACtC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CACpB,cAA0B,SAAS,EAAC,wEAAwE,aAC1G,eAAK,SAAS,EAAC,uBAAuB,aACpC,KAAC,IAAI,IAAC,SAAS,EAAC,sBAAsB,YAAE,EAAE,CAAC,IAAI,GAAQ,EACtD,EAAE,CAAC,SAAS,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAC5C,CAAC,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,GACzF,CACR,IACG,EACL,YAAY,IAAI,CACf,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,YAAY,CAAC,YACtH,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,GACjC,CACV,KAbM,EAAE,CAAC,YAAY,CAcnB,CACN,CAAC,GACC,CACN,IACA,CACJ,IACkB,CACtB,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;IACtF,MAAM,WAAW,GAAG,CAClB,KAAC,kBAAkB,IACjB,IAAI,EAAE,2BAA2B,CAAC,UAAU,CAAC,IAAI,CAAC,EAClD,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAC5C,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,EACtD,KAAK,EAAE,SAAS,EAChB,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,EACtC,IAAI,EAAE,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,GAAQ,EAClI,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAChB,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,YACxE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAC/B,CACV,CAAC,CAAC,CAAC,SAAS,CAAC;YACd,wEAAwE;YACxE,2DAA2D;YAC3D,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAC9B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,YACpF,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,GAC7B,CACV,CAAC,YAEH,OAAO,CAAC,CAAC,CAAC,CACT,4BACG,YAAY,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CACtG,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,GAAoB,GAC/E,CACT,GACA,CACJ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CACnB,KAAC,oBAAoB,IACnB,UAAU,EAAE,GAAG,EAAE;gBACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC,EACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC/B,SAAS,EAAE,KAAK,EAChB,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,CAAC,CAAC,GACjF,CACH,CAAC,CAAC,CAAC,IAAI,GACW,CACtB,CAAC;IAEF,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;IAC7F,MAAM,YAAY,GAAG,CACnB,KAAC,kBAAkB,IACjB,IAAI,EAAE,2BAA2B,CAAC,UAAU,CAAC,OAAO,CAAC,EACrD,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAC7C,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,EACvD,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,cAAc,CAAC,UAAU,CAAC,EACvC,IAAI,EACF,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YACtB,aAAa;gBACZ,CAAC,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,KAAK,WAAW,IAAI,KAAK,EAAE;gBACvE,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,GAC1C,EAET,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CACtB,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,YACrF,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAC/B,CACV,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CACjC,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,YACrF,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAC/B,CACV,CAAC,YAED,aAAa,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAC5D,KAAC,qBAAqB,IACpB,UAAU,EAAE,GAAG,EAAE;gBACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC1B,OAAO,EAAE,CAAC;YACZ,CAAC,EACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC/B,SAAS,EAAE,KAAK,EAChB,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,CAAC,CAAC,GACjF,CACH,CAAC,CAAC,CAAC,IAAI,GACW,CACtB,CAAC;IAEF,8EAA8E;IAC9E,8DAA8D;IAC9D,6EAA6E;IAC7E,+EAA+E;IAC/E,yEAAyE;IACzE,gEAAgE;IAChE,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,gEAAgE;IAChE,4EAA4E;IAC5E,wEAAwE;IACxE,2DAA2D;IAE3D,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aAGxC,eAAK,SAAS,EAAC,2BAA2B,aACxC,aAAI,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,GAAM,EACjG,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,GAAQ,IAC9F,EAEL,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EACA,UAAU,IAAI,CACb,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,UAAU,GAAoB,GAC3C,CACT,EAEA,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,IAAI,IAAC,SAAS,EAAC,uBAAuB,YAAE,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAQ,CAClF,CAAC,CAAC,CAAC,CACF,eAAK,SAAS,EAAC,wBAAwB,aACpC,cAAc,EACd,WAAW,EACX,YAAY,EACb,KAAC,eAAe,IACd,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,IAAI,EAAE,KAAK,EACtB,CAAC,EAAE,CAAC,EACJ,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,GAAG,EAAE;4BACd,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;4BAChD,OAAO,EAAE,CAAC;wBACZ,CAAC,EACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAC/B,EACF,KAAC,oBAAoB,IACnB,KAAK,EAAE,qBAAqB,EAC5B,YAAY,EAAE,YAAY,EAC1B,CAAC,EAAE,CAAC,EACJ,QAAQ,EAAE,oBAAoB,GAC9B,IACE,CACP,IACG,CACP,CAAC;AACJ,CAAC,CAAC;AAkBF,MAAM,eAAe,GAAmC,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;IACrI,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAC7D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,0EAA0E;IAC1E,oBAAoB;IACpB,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAA4E;QACpG,aAAa,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;KAC7E,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAmD;QACxE,aAAa,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;KACxD,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,IAA+E,EAAE,EAAE;QACxF,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACxF,SAAS,EAAE,CAAC;YACZ,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,OAAO,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EACD,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAC9D,CAAC;IAEF,MAAM,SAAS,GAAG,WAAW,CAC3B,KAAK,EAAE,IAAsD,EAAE,EAAE;QAC/D,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/D,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,OAAO,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAC3D,CAAC;IAEF,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;IAEtF,OAAO,CACL,KAAC,kBAAkB,IACjB,IAAI,EAAE,2BAA2B,CAAC,UAAU,CAAC,QAAQ,CAAC,EACtD,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,EAChD,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,EAC1D,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,EAC/G,IAAI,EAAE,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,GAAQ,EACnJ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAChB,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,GAAG,EAAE;gBACZ,UAAU,CAAC,KAAK,CAAC,CAAC;gBAClB,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,CAAC,YAEA,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,GACzB,CACV,CAAC,CAAC,CAAC,CACF,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAC7E,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GACrF,CACV,YAEA,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAC7B,KAAC,YAAY,OAAK,UAAU,YAC1B,gBAAM,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,SAAS,EAAC,WAAW,aAQ1E,KAAC,+BAA+B,IAAC,KAAK,EAAE,SAAS,GAAI,EACrD,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,GAAc,EACpE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,kBAAkB,KAC3B,UAAU,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAC9D,IACI,EACR,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAc,EAChE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,KACvB,UAAU,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAC1D,EACF,KAAC,yBAAyB,IAAC,SAAS,EAAC,aAAa,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,GAAI,IACnF,EACR,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,GAAc,EACpE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,KACvB,UAAU,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAC9D,IACI,EACR,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,UAAU,YACvC,CAAC,CAAC,qBAAqB,CAAC,eAAe,CAAC,GAClC,IACJ,GACM,CAChB,CAAC,CAAC,CAAC,CACF,KAAC,YAAY,OAAK,OAAO,YACvB,gBAAM,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,SAAS,EAAC,WAAW,aAEpE,KAAC,+BAA+B,IAAC,KAAK,EAAE,SAAS,GAAI,EACrD,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAc,EAChE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,KACvB,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GACvD,EACF,KAAC,yBAAyB,IAAC,SAAS,EAAC,aAAa,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,GAAI,IACnF,EACR,MAAC,KAAK,eACJ,KAAC,UAAU,cAAE,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,GAAc,EACpE,KAAC,SAAS,IACR,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,KACvB,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAC3D,IACI,EACR,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,UAAU,YACvC,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAC/B,IACJ,GACM,CAChB,GACgB,CACtB,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,oBAAoB,GAAwC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAC1G,KAAC,kBAAkB,IACjB,IAAI,EAAE,2BAA2B,CAAC,UAAU,CAAC,eAAe,CAAC,EAC7D,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,EACtD,WAAW,EAAE,CAAC,CAAC,qBAAqB,CAAC,0BAA0B,CAAC,EAChE,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EACnF,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,EACpH,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,GAAQ;QAC3G,CAAC,CAAC,SAAS,YAEZ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACpB,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,GAAQ,CACvG,CAAC,CAAC,CAAC,CACF,aAAI,SAAS,EAAC,2BAA2B,YACtC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACnB,cAAmB,SAAS,EAAC,wEAAwE,aACnG,eAAK,SAAS,EAAC,uBAAuB,aACpC,KAAC,IAAI,IAAC,SAAS,EAAC,sBAAsB,YAAE,IAAI,CAAC,aAAa,GAAQ,EAClE,KAAC,IAAI,IAAC,SAAS,EAAC,wCAAwC,YAAE,IAAI,CAAC,aAAa,GAAQ,IAChF,EACL,YAAY,IAAI,CACf,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,YACpG,CAAC,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,GACxC,CACV,KATM,IAAI,CAAC,GAAG,CAUZ,CACN,CAAC,GACC,CACN,GACkB,CACtB,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useState } from 'react';\nimport { ButtonSize, FrontendComponentType, SecuritySettingsLabel } from '@wildo-ai/presets-components-models';\nimport { Card, CardContent } from '~wildo-frontend-lib/components/sections/card';\nimport { Badge, type BadgeVariants_Variant } from '~wildo-frontend-lib/components/data-display/badge';\nimport { useIconRegistry } from '~wildo-frontend-lib/core/icons/useIconRegistry';\nimport { StandardIconReference, IconSize } from '~wildo-frontend-lib/core/icons/icon-registry.frontend.schemas';\nimport { AUTH_METHOD_ICON_REFERENCES } from '~wildo-frontend-lib/components/auth/methods/auth-method-presentation';\nimport { cn } from '~wildo-frontend-lib/core/ui/cn';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { InputRoot } from '~wildo-frontend-lib/components/form/controls/input';\nimport { Field, FieldLabel } from '~wildo-frontend-lib/components/form/chromes/field';\nimport {\n AuthMethod,\n AuthUtils,\n isWildoBackendError,\n type ExternalIdentitySource,\n type PasswordPolicyRules,\n type SsoConnectionType,\n} from '@wildo-ai/saas-models';\nimport { FormProvider, useForm } from 'react-hook-form';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { AuthSessionUtils } from '~wildo-frontend-lib/core/security/auth-session.utils';\nimport { PasswordStrengthIndicator, DEFAULT_PASSWORD_POLICY } from '~wildo-frontend-lib/components/auth/utils/PasswordStrengthIndicator';\nimport { CredentialUsernameAutofillField } from '~wildo-frontend-lib/components/auth/utils/CredentialUsernameAutofillField';\nimport { TotpEnrollmentMethod } from '~wildo-frontend-lib/components/auth/enrollment/TotpEnrollmentMethod';\nimport { PhoneEnrollmentMethod } from '~wildo-frontend-lib/components/auth/enrollment/PhoneEnrollmentMethod';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport type { FrontendAppProviderRef } from '@wildo-ai/external-connectors-public/app';\nimport {\n collectFrontendProviderDisplayLabelKeys,\n resolveFrontendProviderDisplayLabel,\n} from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\n\n// A new `SecuritySettingsLabel` member (`@wildo-ai/presets-components-models`)\n// must ALSO be declared in `AppPage_SecuritySettings.labels.ts`, beside this\n// file: that list — key, kind, purpose — is what the dev companion scans\n// statically to plan and translate the words, and an enum member missing\n// from it never reaches the labelling pipeline. The shared step-up dialog\n// (`StepUpAuthDialog`) reads the same component's keys.\n\ntype EnrolledMethod = { method: string; enrolled: boolean; enrolledAt?: string; details?: Record<string, unknown> };\ntype PasskeyCred = { credentialId: string; name: string; createdAt: string };\ntype IdentityLink = {\n _id: string;\n connectionType: SsoConnectionType;\n source: ExternalIdentitySource;\n providerRef: string;\n providerEmail: string;\n linkedAt: string;\n lastUsedAt: string;\n};\ntype ResolvedIdentityLink = IdentityLink & { providerLabel: string };\n\n/*\n Presentational state of one authentication factor.\n \n `UNAVAILABLE` is NOT \"off\" — it means the current device/browser cannot offer\n * the factor at all (no WebAuthn support), which is a different instruction to\n * the user than \"you have not set this up yet\" and therefore a distinct badge.\n /\nenum SecurityFactorState {\n ACTIVE = 'active',\n INACTIVE = 'inactive',\n UNAVAILABLE = 'unavailable',\n}\n\nconst FACTOR_STATE_BADGE_VARIANT: Record<SecurityFactorState, BadgeVariants_Variant> = {\n [SecurityFactorState.ACTIVE]: 'success',\n [SecurityFactorState.INACTIVE]: 'outline',\n [SecurityFactorState.UNAVAILABLE]: 'secondary',\n};\n\ninterface SecurityFactorCardProps {\n /* Glyph identifying the method — resolved through the icon registry so apps can re-skin it. /\n icon: StandardIconReference;\n title: string;\n /* Plain-language \"what this is / why it matters\" line. Always rendered. /\n description: string;\n state: SecurityFactorState;\n statusLabel: string;\n /* Live detail under the description (count, masked number, enrolment date). /\n meta?: React.ReactNode;\n /\n The factor's primary control, pinned to the inline-end of the header row.\n * Every row's action lands on the same axis, so the column reads as a list of\n * choices rather than as five stacked mini-pages — the account-security idiom\n * used by mainstream providers. Anything that must expand (an enrolment flow,\n * a credential list, a form) goes to `children` instead.\n \n Row actions are OUTLINE, without exception. They are peers: the panel offers\n * five alternative ways to protect an account and recommends none of them, so\n * filling any one of them would assert a priority the page does not hold —\n * and five filled buttons stacked down a column assert five priorities, which\n * is the same as none while costing all the emphasis. The filled variant is\n * reserved for the commit action INSIDE an opened disclosure, where there\n * genuinely is one thing to do next.\n /\n action?: React.ReactNode;\n children?: React.ReactNode;\n}\n\n/\n One authentication factor, presented as a scannable row: glyph · name · what\n * it is · live status, with its primary control pinned to the row's end.\n \n This replaced a stack of visually identical title-only cards, which forced the\n * user to READ every card to learn which factors were active and offered no\n * explanation of what any factor was. The status badge and the icon carry that\n * information pre-attentively; the description makes the choice informed. The\n * shape follows the account-security idiom used by mainstream providers.\n /\nconst SecurityFactorCard: React.FC<SecurityFactorCardProps> = ({\n icon, title, description, state, statusLabel, meta, action, children,\n}) => {\n const { renderIcon } = useIconRegistry();\n const isActive = state === SecurityFactorState.ACTIVE;\n\n return (\n <Card>\n <CardContent className=\"flex flex-col gap-item p-card\">\n <div className=\"flex flex-row items-start gap-item\">\n {/ Tinted glyph tile — tinted only when the factor is live, so the eye\n lands on what is protecting the account before any text is read. /}\n <div\n aria-hidden=\"true\"\n className={cn(\n 'flex size-9 shrink-0 items-center justify-center rounded-md',\n isActive ? 'bg-success/10 text-success' : 'bg-muted text-muted-foreground',\n )}\n >\n {renderIcon(icon, { size: IconSize.SM })}\n </div>\n\n <div className=\"flex min-w-0 flex-1 flex-col gap-element-xs\">\n <div className=\"flex flex-wrap items-center gap-element-xs\">\n <Text className=\"font-medium leading-snug\">{title}</Text>\n <Badge variant={FACTOR_STATE_BADGE_VARIANT[state]}>{statusLabel}</Badge>\n </div>\n <Text className=\"text-sm text-muted-foreground\">{description}</Text>\n {meta}\n </div>\n\n {action && <div className=\"flex shrink-0 items-center gap-element-xs\">{action}</div>}\n </div>\n\n {/ Expanded content aligns with the TEXT column, not the glyph: the\n indent is the glyph tile (`size-9`) plus the row gap, so a form or a\n credential list continues the sentence it belongs to. /}\n {children && (\n <div className=\"flex flex-col gap-item ps-[calc(var(--spacing)9+var(--sp-item))]\">{children}</div>\n )}\n </CardContent>\n </Card>\n );\n};\n\nexport const AppPage_SecuritySettings: React.FC = () => {\n const { auth, frontendProviderRegistry } = useApplication();\n const { auth: authState } = useAuthSession();\n const { user } = useUserOrgs();\n const resolvedAuth = useResolvedAuthConfig();\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n const [methods, setMethods] = useState<EnrolledMethod[]>([]);\n const [passkeys, setPasskeys] = useState<PasskeyCred[]>([]);\n const [identityLinks, setIdentityLinks] = useState<IdentityLink[]>([]);\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState<string \| null>(null);\n const [successMsg, setSuccessMsg] = useState<string \| null>(null);\n const [showTotpEnroll, setShowTotpEnroll] = useState(false);\n const [showPhoneEnroll, setShowPhoneEnroll] = useState(false);\n const [passkeyRegistering, setPasskeyRegistering] = useState(false);\n const identityProviderLabelKeys = useMemo(\n () => collectFrontendProviderDisplayLabelKeys(\n identityLinks.map((link) =>\n frontendProviderRegistry?.getProviderByRef(\n link.providerRef as FrontendAppProviderRef,\n )?.metadata.displayNameLabelKey,\n ),\n ),\n [frontendProviderRegistry, identityLinks],\n );\n const { tComponent, t: translateProvider, isReady } = useI18n({\n component: [\n FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS,\n FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER,\n FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED,\n ],\n keys: identityProviderLabelKeys,\n });\n const t = useCallback(\n (key: string, params?: Record<string, string \| number>) =>\n tComponent(FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS, key, params),\n [tComponent],\n );\n const tPolicy = useCallback(\n (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key),\n [tComponent],\n );\n\n const passkeyConfig = auth?.passkeyConfig;\n const methodManagement = resolvedAuth.userTypeAuth?.methodManagement;\n const passwordPolicy = resolvedAuth.passwordPolicy;\n const maxPasskeys = passkeyConfig?.maxPasskeysPerUser ?? 10;\n const allowRemoval = methodManagement?.allowUserMethodRemoval ?? true;\n\n const refresh = useCallback(async () => {\n setLoading(true);\n setError(null);\n try {\n const client = getManualCallsHttpClient();\n const [methodsRes, passkeysRes, linksRes] = await Promise.all([\n client.getMyMethods(),\n client.passkeyList().catch(() => ({ credentials: [] })),\n client.getIdentityLinks().catch(() => ({ links: [] })),\n ]);\n setMethods(methodsRes.methods ?? []);\n setPasskeys(passkeysRes.credentials ?? []);\n setIdentityLinks(linksRes.links ?? []);\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n setError(toUserFacingErrorMessage(e, t(SecuritySettingsLabel.ERROR)));\n } finally {\n setLoading(false);\n }\n }, [t, toUserFacingErrorMessage]);\n\n useEffect(() => {\n refresh();\n }, [refresh]);\n\n useEffect(() => {\n if (!successMsg) return;\n const timer = setTimeout(() => setSuccessMsg(null), 5000);\n return () => clearTimeout(timer);\n }, [successMsg]);\n\n // Derived, not listed. The literal `[TOTP, PASSKEY, SMS_OTP]` that stood here was the\n // second-factor vocabulary minus the factors that need no enrollment — correct on the day it was\n // written and silently short the day a fifth second factor is added, since a method missing from\n // the list simply never counts as enrolled.\n const enrollableSecondFactorMethods = AuthUtils.getEnrollableSecondFactorMethods();\n const enrolledSecondFactor = methods\n .filter((m) => m.enrolled && enrollableSecondFactorMethods.includes(m.method as AuthMethod))\n .map((m) => m.method as AuthMethod);\n const completeness = AuthSessionUtils.evaluateAccountCompleteness(\n authState.identification?.requiresMFA ?? false,\n authState.identification?.secondFactorMethods?.map((m) => m.method) ?? [],\n enrolledSecondFactor.length > 0 ? enrolledSecondFactor : (authState.enrolledSecondFactorMethods as AuthMethod[]),\n resolvedAuth.userTypeAuth?.mfaPolicy?.acceptableMFAMethods ?? [],\n );\n\n const hasPassword = methods.some((m) => m.method === AuthMethod.PASSWORD && m.enrolled);\n const hasTotp = methods.some((m) => m.method === AuthMethod.TOTP && m.enrolled);\n const smsMethod = methods.find((m) => m.method === AuthMethod.SMS_OTP);\n const phoneVerified = smsMethod?.enrolled ?? false;\n const phoneMasked = smsMethod?.details?.phoneNumber as string \| undefined;\n const resolvedIdentityLinks = useMemo(\n () => identityLinks.map((link) => {\n const provider = frontendProviderRegistry?.getProviderByRef(\n link.providerRef as FrontendAppProviderRef,\n );\n\n return {\n ...link,\n providerLabel: resolveFrontendProviderDisplayLabel({\n providerRef: link.providerRef,\n displayName: auth?.socialOAuth2Providers?.[link.providerRef]?.displayName\n ?? provider?.metadata.displayName,\n displayNameLabelKey: provider?.metadata.displayNameLabelKey,\n translate: translateProvider,\n }),\n };\n }),\n [auth?.socialOAuth2Providers, frontendProviderRegistry, identityLinks, translateProvider],\n );\n\n const handlePasskeyAdd = useCallback(async () => {\n if (passkeys.length >= maxPasskeys) return;\n if (typeof window === 'undefined' \|\| !window.PublicKeyCredential) return;\n setPasskeyRegistering(true);\n setError(null);\n try {\n const client = getManualCallsHttpClient();\n const options = (await client.passkeyRegisterOptions()) as unknown as PublicKeyCredentialCreationOptionsJSON;\n const credential = await startRegistration({ optionsJSON: options });\n await client.passkeyRegisterVerify({ response: credential });\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n refresh();\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n const msg = e?.name === 'NotAllowedError' ? t(SecuritySettingsLabel.PASSKEY_CANCELLED) : toUserFacingErrorMessage(e, t(SecuritySettingsLabel.ERROR));\n setError(msg);\n } finally {\n setPasskeyRegistering(false);\n }\n }, [maxPasskeys, passkeys.length, refresh, t, toUserFacingErrorMessage]);\n\n const handlePasskeyRemove = useCallback(\n async (credentialId: string) => {\n if (!allowRemoval) return;\n try {\n await getManualCallsHttpClient().passkeyRemove(credentialId);\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n refresh();\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n setError(toUserFacingErrorMessage(e, t(SecuritySettingsLabel.ERROR)));\n }\n },\n [allowRemoval, refresh, t, toUserFacingErrorMessage],\n );\n\n /\n No re-authentication handling here, deliberately. Where the user type asks for it, the server\n * answers `STEP_UP_REQUIRED` and the HTTP client answers that by itself — the shared step-up dialog\n * (`StepUpAuthProvider`), then a replay carrying `X-Reauth-Token`. The same is true of adding a\n * passkey, confirming TOTP and confirming a phone below. This page used to carry its own password-only\n * copy of that dialog for this one action, and nothing for the binding actions at all.\n /\n const handleTotpDisable = useCallback(async () => {\n try {\n await getManualCallsHttpClient().mfaTOTPDisable();\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n setShowTotpEnroll(false);\n refresh();\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n setError(toUserFacingErrorMessage(e, t(SecuritySettingsLabel.ERROR)));\n }\n }, [refresh, t, toUserFacingErrorMessage]);\n\n const handleUnlinkIdentity = useCallback(\n async (linkId: string) => {\n if (!allowRemoval) return;\n try {\n await getManualCallsHttpClient().unlinkIdentityLink(linkId);\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n refresh();\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n setError(toUserFacingErrorMessage(e, t(SecuritySettingsLabel.ERROR)));\n }\n },\n [allowRemoval, refresh, t, toUserFacingErrorMessage],\n );\n\n if (!isReady) return null;\n\n // Passkeys are only offerable where WebAuthn exists; an unsupported browser is\n // a distinct state from \"not set up yet\" and gets its own badge + no CTA.\n const passkeysSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n const passkeyState = !passkeysSupported\n ? SecurityFactorState.UNAVAILABLE\n : passkeys.length > 0 ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE;\n\n const statusLabelFor = (state: SecurityFactorState): string => {\n switch (state) {\n case SecurityFactorState.ACTIVE: return t(SecuritySettingsLabel.STATUS_ACTIVE);\n case SecurityFactorState.UNAVAILABLE: return t(SecuritySettingsLabel.STATUS_UNAVAILABLE);\n case SecurityFactorState.INACTIVE: return t(SecuritySettingsLabel.STATUS_NOT_CONFIGURED);\n }\n };\n\n const PasskeySection = (\n <SecurityFactorCard\n icon={AUTH_METHOD_ICON_REFERENCES[AuthMethod.PASSKEY]}\n title={t(SecuritySettingsLabel.SECTION_PASSKEYS)}\n description={t(SecuritySettingsLabel.PASSKEYS_DESCRIPTION)}\n state={passkeyState}\n statusLabel={statusLabelFor(passkeyState)}\n meta={passkeysSupported && passkeys.length > 0\n ? <Text className=\"text-sm\">{t(SecuritySettingsLabel.PASSKEY_COUNT, { count: passkeys.length })}</Text>\n : undefined}\n action={passkeysSupported && passkeys.length < maxPasskeys ? (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={handlePasskeyAdd} disabled={passkeyRegistering}>\n {passkeyRegistering ? t(SecuritySettingsLabel.PASSKEY_ADDING) : t(SecuritySettingsLabel.PASSKEY_ADD)}\n </Button>\n ) : undefined}\n >\n {!passkeysSupported && (\n <Alert>\n <AlertDescription>{t(SecuritySettingsLabel.PASSKEY_UNSUPPORTED)}</AlertDescription>\n </Alert>\n )}\n {passkeysSupported && (\n <>\n {passkeys.length === 0 && (\n <Text className=\"text-sm text-muted-foreground\">{t(SecuritySettingsLabel.PASSKEY_EMPTY)}</Text>\n )}\n {passkeys.length > 0 && (\n <ul className=\"flex flex-col gap-element\">\n {passkeys.map((pk) => (\n <li key={pk.credentialId} className=\"flex items-center justify-between gap-item rounded-md border p-card-sm\">\n <div className=\"flex min-w-0 flex-col\">\n <Text className=\"truncate font-medium\">{pk.name}</Text>\n {pk.createdAt && (\n <Text className=\"text-xs text-muted-foreground\">\n {t(SecuritySettingsLabel.PASSKEY_ADDED, { date: new Date(pk.createdAt).toLocaleDateString() })}\n </Text>\n )}\n </div>\n {allowRemoval && (\n <Button variant={ButtonVariants_Variant.OUTLINE} size={ButtonSize.SM} onClick={() => handlePasskeyRemove(pk.credentialId)}>\n {t(SecuritySettingsLabel.PASSKEY_REMOVE)}\n </Button>\n )}\n </li>\n ))}\n </ul>\n )}\n </>\n )}\n </SecurityFactorCard>\n );\n\n const totpState = hasTotp ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE;\n const TotpSection = (\n <SecurityFactorCard\n icon={AUTH_METHOD_ICON_REFERENCES[AuthMethod.TOTP]}\n title={t(SecuritySettingsLabel.SECTION_TOTP)}\n description={t(SecuritySettingsLabel.TOTP_DESCRIPTION)}\n state={totpState}\n statusLabel={statusLabelFor(totpState)}\n meta={<Text className=\"text-sm\">{hasTotp ? t(SecuritySettingsLabel.TOTP_ENABLED) : t(SecuritySettingsLabel.TOTP_NOT_SETUP)}</Text>}\n action={hasTotp\n ? (allowRemoval ? (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={handleTotpDisable}>\n {t(SecuritySettingsLabel.TOTP_DISABLE)}\n </Button>\n ) : undefined)\n // While the enrolment flow is open its own controls own the row, so the\n // opener is withdrawn rather than left as a second way in.\n : (showTotpEnroll ? undefined : (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={() => setShowTotpEnroll(true)}>\n {t(SecuritySettingsLabel.TOTP_SETUP)}\n </Button>\n ))}\n >\n {hasTotp ? (\n <>\n {completeness.enrolledMethods.length === 1 && completeness.enrolledMethods.includes(AuthMethod.TOTP) && (\n <Alert>\n <AlertDescription>{t(SecuritySettingsLabel.TOTP_ONLY_MFA_WARNING)}</AlertDescription>\n </Alert>\n )}\n </>\n ) : showTotpEnroll ? (\n <TotpEnrollmentMethod\n onComplete={() => {\n setShowTotpEnroll(false);\n refresh();\n }}\n onError={(msg) => setError(msg)}\n isLoading={false}\n t={(k) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, k)}\n />\n ) : null}\n </SecurityFactorCard>\n );\n\n const phoneState = phoneVerified ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE;\n const PhoneSection = (\n <SecurityFactorCard\n icon={AUTH_METHOD_ICON_REFERENCES[AuthMethod.SMS_OTP]}\n title={t(SecuritySettingsLabel.SECTION_PHONE)}\n description={t(SecuritySettingsLabel.PHONE_DESCRIPTION)}\n state={phoneState}\n statusLabel={statusLabelFor(phoneState)}\n meta={\n <Text className=\"text-sm\">\n {phoneVerified\n ? `${t(SecuritySettingsLabel.PHONE_VERIFIED)}: ${phoneMasked ?? '*'}`\n : t(SecuritySettingsLabel.PHONE_NOT_VERIFIED)}\n </Text>\n }\n action={phoneVerified ? (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={() => setShowPhoneEnroll(true)}>\n {t(SecuritySettingsLabel.PHONE_CHANGE)}\n </Button>\n ) : (showPhoneEnroll ? undefined : (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={() => setShowPhoneEnroll(true)}>\n {t(SecuritySettingsLabel.PHONE_VERIFY)}\n </Button>\n ))}\n >\n {phoneVerified && !showPhoneEnroll ? null : showPhoneEnroll ? (\n <PhoneEnrollmentMethod\n onComplete={() => {\n setShowPhoneEnroll(false);\n refresh();\n }}\n onError={(msg) => setError(msg)}\n isLoading={false}\n t={(k) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, k)}\n />\n ) : null}\n </SecurityFactorCard>\n );\n\n // ── No posture summary, deliberately ───────────────────────────────────────\n // Two rejected designs, for whoever is tempted to re-add one:\n // 1. \"Your account is fully secured\" keyed off `completeness.isComplete` —\n // that flag answers \"does this satisfy the app's auth POLICY?\", and it is\n // `true` whenever MFA is not required. It therefore claimed a fully\n // secured account for an account with zero second factors.\n // 2. An \"n of 4 sign-in methods active\" ratio with a progress meter — a\n // score with no referent. The denominator is not a target: nobody needs\n // SMS and* TOTP and a passkey, the factors are alternatives, and the\n // remedy differs per factor. A meter that fills toward a number the user\n // should not reach measures nothing and invites gaming it.\n // The rows below already carry the state (per-factor badge) and the meaning\n // (per-factor description). A summary that restates them as a number is\n // strictly less information, presented as if it were more.\n\n return (\n <div className=\"flex flex-col gap-section\">\n {/* `h3`, not `h2`: the Settings Hub header owns the `h2` for this dialog,\n so a panel heading is one level below it. /}\n <div className=\"flex flex-col gap-item-xs\">\n <h3 className=\"text-base font-semibold tracking-tight\">{t(SecuritySettingsLabel.PAGE_TITLE)}</h3>\n <Text className=\"text-sm text-muted-foreground\">{t(SecuritySettingsLabel.PAGE_DESCRIPTION)}</Text>\n </div>\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n {successMsg && (\n <Alert>\n <AlertDescription>{successMsg}</AlertDescription>\n </Alert>\n )}\n\n {loading ? (\n <Text className=\"text-muted-foreground\">{t(SecuritySettingsLabel.LOADING)}</Text>\n ) : (\n <div className=\"flex flex-col gap-item\">\n {PasskeySection}\n {TotpSection}\n {PhoneSection}\n <PasswordSection\n hasPassword={hasPassword}\n passwordPolicy={passwordPolicy}\n userEmail={user?.email}\n t={t}\n tPolicy={tPolicy}\n onSuccess={() => {\n setSuccessMsg(t(SecuritySettingsLabel.SUCCESS));\n refresh();\n }}\n onError={(msg) => setError(msg)}\n />\n <IdentityLinksSection\n links={resolvedIdentityLinks}\n allowRemoval={allowRemoval}\n t={t}\n onUnlink={handleUnlinkIdentity}\n />\n </div>\n )}\n </div>\n );\n};\n\ninterface PasswordSectionProps {\n hasPassword: boolean;\n passwordPolicy: PasswordPolicyRules;\n /\n Signed-in user's email. Rendered as a visually-hidden\n * `autocomplete=\"username\"` field inside each password form so password\n * managers associate the saved/updated credential with the correct account\n * (Chromium also warns when a password form has no username field).\n /\n userEmail?: string;\n t: (k: string, params?: Record<string, string \| number>) => string;\n tPolicy: (k: string) => string;\n onSuccess: () => void;\n onError: (msg: string) => void;\n}\n\nconst PasswordSection: React.FC<PasswordSectionProps> = ({ hasPassword, passwordPolicy, userEmail, t, tPolicy, onSuccess, onError }) => {\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n const [submitting, setSubmitting] = useState(false);\n // The credential form is a DISCLOSURE, not the row's resting state. Rendered\n // eagerly it was four inputs plus a strength meter permanently open beneath a\n // one-line row, which made this factor read as the page's subject and the\n // other four as its footnotes. Every row now rests at the same height and\n // opens on request.\n const [editing, setEditing] = useState(false);\n const changeForm = useForm<{ currentPassword: string; newPassword: string; confirmPassword: string }>({\n defaultValues: { currentPassword: '', newPassword: '', confirmPassword: '' },\n });\n const setForm = useForm<{ newPassword: string; confirmPassword: string }>({\n defaultValues: { newPassword: '', confirmPassword: '' },\n });\n\n const handleChange = useCallback(\n async (data: { currentPassword: string; newPassword: string; confirmPassword: string }) => {\n if (data.newPassword !== data.confirmPassword) {\n onError(t(SecuritySettingsLabel.PASSWORD_MISMATCH));\n return;\n }\n setSubmitting(true);\n try {\n await getManualCallsHttpClient().passwordChange(data.currentPassword, data.newPassword);\n onSuccess();\n changeForm.reset();\n setEditing(false);\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n onError(toUserFacingErrorMessage(e, t(SecuritySettingsLabel.ERROR)));\n } finally {\n setSubmitting(false);\n }\n },\n [changeForm, onError, onSuccess, t, toUserFacingErrorMessage],\n );\n\n const handleSet = useCallback(\n async (data: { newPassword: string; confirmPassword: string }) => {\n if (data.newPassword !== data.confirmPassword) {\n onError(t(SecuritySettingsLabel.PASSWORD_MISMATCH));\n return;\n }\n setSubmitting(true);\n try {\n await getManualCallsHttpClient().passwordSet(data.newPassword);\n onSuccess();\n setForm.reset();\n setEditing(false);\n } catch (e: any) {\n if (isWildoBackendError(e)) throw e;\n onError(toUserFacingErrorMessage(e, t(SecuritySettingsLabel.ERROR)));\n } finally {\n setSubmitting(false);\n }\n },\n [onError, onSuccess, setForm, t, toUserFacingErrorMessage],\n );\n\n const state = hasPassword ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE;\n\n return (\n <SecurityFactorCard\n icon={AUTH_METHOD_ICON_REFERENCES[AuthMethod.PASSWORD]}\n title={t(SecuritySettingsLabel.SECTION_PASSWORD)}\n description={t(SecuritySettingsLabel.PASSWORD_DESCRIPTION)}\n state={state}\n statusLabel={t(hasPassword ? SecuritySettingsLabel.STATUS_ACTIVE : SecuritySettingsLabel.STATUS_NOT_CONFIGURED)}\n meta={<Text className=\"text-sm\">{t(hasPassword ? SecuritySettingsLabel.PASSWORD_SET_STATUS : SecuritySettingsLabel.PASSWORD_NOT_SET_STATUS)}</Text>}\n action={editing ? (\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n onClick={() => {\n setEditing(false);\n changeForm.reset();\n setForm.reset();\n }}\n >\n {t(SecuritySettingsLabel.CANCEL)}\n </Button>\n ) : (\n <Button variant={ButtonVariants_Variant.OUTLINE} onClick={() => setEditing(true)}>\n {t(hasPassword ? SecuritySettingsLabel.PASSWORD_CHANGE : SecuritySettingsLabel.PASSWORD_SET)}\n </Button>\n )}\n >\n {!editing ? null : hasPassword ? (\n <FormProvider {...changeForm}>\n <form onSubmit={changeForm.handleSubmit(handleChange)} className=\"space-y-4\">\n {/\n Hidden username field. Gives password managers the account\n context they need to associate the updated credential, and\n resolves Chromium's \"password forms should have an (optionally\n hidden) username field\" warning. Must precede the password\n inputs so managers pair the username with them.\n /}\n <CredentialUsernameAutofillField email={userEmail} />\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_CURRENT)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"current-password\"\n {...changeForm.register('currentPassword', { required: true })}\n />\n </Field>\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_NEW)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"new-password\"\n {...changeForm.register('newPassword', { required: true })}\n />\n <PasswordStrengthIndicator fieldName=\"newPassword\" policy={passwordPolicy} t={tPolicy} />\n </Field>\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_CONFIRM)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"new-password\"\n {...changeForm.register('confirmPassword', { required: true })}\n />\n </Field>\n <Button type=\"submit\" disabled={submitting}>\n {t(SecuritySettingsLabel.PASSWORD_CHANGE)}\n </Button>\n </form>\n </FormProvider>\n ) : (\n <FormProvider {...setForm}>\n <form onSubmit={setForm.handleSubmit(handleSet)} className=\"space-y-4\">\n {/ Hidden username field — see the note in the change-password form above. */}\n <CredentialUsernameAutofillField email={userEmail} />\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_NEW)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"new-password\"\n {...setForm.register('newPassword', { required: true })}\n />\n <PasswordStrengthIndicator fieldName=\"newPassword\" policy={passwordPolicy} t={tPolicy} />\n </Field>\n <Field>\n <FieldLabel>{t(SecuritySettingsLabel.PASSWORD_CONFIRM)}</FieldLabel>\n <InputRoot\n type=\"password\"\n autoComplete=\"new-password\"\n {...setForm.register('confirmPassword', { required: true })}\n />\n </Field>\n <Button type=\"submit\" disabled={submitting}>\n {t(SecuritySettingsLabel.PASSWORD_SET)}\n </Button>\n </form>\n </FormProvider>\n )}\n </SecurityFactorCard>\n );\n};\n\ninterface IdentityLinksSectionProps {\n links: ResolvedIdentityLink[];\n allowRemoval: boolean;\n t: (k: string, params?: Record<string, string \| number>) => string;\n onUnlink: (linkId: string) => void;\n}\n\nconst IdentityLinksSection: React.FC<IdentityLinksSectionProps> = ({ links, allowRemoval, t, onUnlink }) => (\n <SecurityFactorCard\n icon={AUTH_METHOD_ICON_REFERENCES[AuthMethod.EXTERNAL_OAUTH2]}\n title={t(SecuritySettingsLabel.SECTION_IDENTITY_LINKS)}\n description={t(SecuritySettingsLabel.IDENTITY_LINKS_DESCRIPTION)}\n state={links.length > 0 ? SecurityFactorState.ACTIVE : SecurityFactorState.INACTIVE}\n statusLabel={t(links.length > 0 ? SecuritySettingsLabel.STATUS_ACTIVE : SecuritySettingsLabel.STATUS_NOT_CONFIGURED)}\n meta={links.length > 0\n ? <Text className=\"text-sm\">{t(SecuritySettingsLabel.IDENTITY_LINKS_COUNT, { count: links.length })}</Text>\n : undefined}\n >\n {links.length === 0 ? (\n <Text className=\"text-sm text-muted-foreground\">{t(SecuritySettingsLabel.IDENTITY_LINKS_EMPTY)}</Text>\n ) : (\n <ul className=\"flex flex-col gap-element\">\n {links.map((link) => (\n <li key={link._id} className=\"flex items-center justify-between gap-item rounded-md border p-card-sm\">\n <div className=\"flex min-w-0 flex-col\">\n <Text className=\"truncate font-medium\">{link.providerLabel}</Text>\n <Text className=\"truncate text-xs text-muted-foreground\">{link.providerEmail}</Text>\n </div>\n {allowRemoval && (\n <Button variant={ButtonVariants_Variant.OUTLINE} size={ButtonSize.SM} onClick={() => onUnlink(link._id)}>\n {t(SecuritySettingsLabel.IDENTITY_LINKS_UNLINK)}\n </Button>\n )}\n </li>\n ))}\n </ul>\n )}\n </SecurityFactorCard>\n);\n"]}

package/dist/esm/components/auth/admin-config/AppPage_SecuritySettings.labels.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_SecuritySettings.labels.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/components/auth/admin-config/AppPage_SecuritySettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM1I,eAAO,MAAM,gCAAgC,EAAE,mBAAmB,~~EA6DjE~~,CAAC"}
1	+ {"version":3,"file":"AppPage_SecuritySettings.labels.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/AppPage_SecuritySettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM1I,eAAO,MAAM,gCAAgC,EAAE,mBAAmB,EAmFjE,CAAC"}

package/dist/esm/components/auth/admin-config/AppPage_SecuritySettings.labels.js CHANGED Viewed

@@ -32,7 +32,7 @@ export const AppLayoutsSecuritySettingsLabels = [
     { ref: 'identityLinksEmpty', kind: LabelKind.EMPTY_STATE, purpose: 'Empty state shown when no social identities are linked' },
     { ref: 'identityLinksUnlink', kind: LabelKind.BUTTON, purpose: 'Button that unlinks a connected social identity' },
     { ref: 'reauthTitle', kind: LabelKind.HEADING, purpose: 'Title of the re-authentication confirmation dialog' },
-    { ref: 'reauthDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains why the user must re-enter their password to continue' },
+    { ref: 'reauthDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that the person must confirm it is really them before this sensitive change goes through. Must not name a method: they may confirm with a password, a passkey or an authenticator code' },
     { ref: 'reauthPassword', kind: LabelKind.LABEL, purpose: 'Field label for the re-authentication password input' },
     { ref: 'confirm', kind: LabelKind.BUTTON, purpose: 'Confirm button for the re-authentication dialog' },
     { ref: 'cancel', kind: LabelKind.BUTTON, purpose: 'Cancel button for the re-authentication dialog' },
@@ -43,6 +43,28 @@ export const AppLayoutsSecuritySettingsLabels = [
     { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Loading status while the security settings are being fetched' },
     { ref: 'passwordMismatch', kind: LabelKind.MESSAGE, purpose: 'Validation error when the new password and confirmation do not match' },
     { ref: 'reauthPasswordPlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the re-authentication password input' },
+    { ref: 'reauthWithPassword', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity by typing the account password' },
+    { ref: 'reauthWithPasskey', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity with a registered passkey' },
+    { ref: 'reauthWithTotp', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity with a code from an authenticator app' },
+    { ref: 'reauthPasskeyPrompt', kind: LabelKind.MESSAGE, purpose: 'Explains that confirming will ask the browser or device to use a registered passkey' },
+    { ref: 'reauthTotpCode', kind: LabelKind.LABEL, purpose: 'Field label for the authenticator-app code input in the re-authentication dialog' },
+    { ref: 'reauthTotpCodePlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the authenticator-app code input, which takes the current one-time code' },
+    { ref: 'reauthNoAcceptedMethod', kind: LabelKind.MESSAGE, purpose: 'Shown in the re-authentication dialog when none of the account\'s sign-in methods is accepted for this confirmation, because the account\'s security policy requires a method it has not added yet. Tells the person to add that method (for example a passkey) in their security settings first' },
+    {
+        ref: 'reauthWithProvider',
+        kind: LabelKind.BUTTON,
+        purpose: 'Choice in the re-authentication dialog: confirm it is you by signing in again at a linked identity provider, such as Google or the company\'s sign-in',
+        params: [{ key: 'provider', meaning: 'display name of the linked identity provider' }],
+    },
+    {
+        ref: 'reauthProviderPrompt',
+        kind: LabelKind.MESSAGE,
+        purpose: 'Shown in the re-authentication dialog when a linked identity provider is chosen: confirming opens a window at that provider, where the person signs in again',
+        params: [{ key: 'provider', meaning: 'display name of the linked identity provider' }],
+    },
+    { ref: 'reauthProviderPopupBlocked', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when the browser blocked the sign-in window from opening; asks the person to allow pop-ups for this site and try again' },
+    { ref: 'reauthProviderTimedOut', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when signing in again at the identity provider was not finished in time (the sign-in window was left open or closed without finishing); they can try again or choose another method' },
+    { ref: 'reauthProviderFailed', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when signing in again at the identity provider did not confirm the person; they can try again or choose another method' },
     { ref: 'phoneVerify', kind: LabelKind.BUTTON, purpose: 'Button that starts phone-number verification' },
     // Posture summary + per-factor descriptive copy. The panel presents each
     // authentication factor as a scannable row (icon · name · what it is · live

package/dist/esm/components/auth/admin-config/AppPage_SecuritySettings.labels.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_SecuritySettings.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/admin-config/AppPage_SecuritySettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE1I,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,gCAAgC,GAA0B;IACrE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAC/G,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wEAAwE,EAAE;IACtI,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;IAC1I,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC9G,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gEAAgE,EAAE;IAC1H,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mDAAmD,EAAE;IAC9G,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC9G,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAChI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC7F,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4DAA4D,EAAE;IAC3H,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACpI,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACtG,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACtG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACzH,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE;IACtH,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACnG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACrG,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IACxI,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4EAA4E,EAAE;IACxI,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oDAAoD,EAAE;IACnH,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE;IACxG,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC9G,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAC1H,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACxG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IAChG,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC5G,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,wDAAwD,EAAE;IAC7H,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAClH,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC9G,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,gEAAgE,EAAE;IACpI,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE;IACjH,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACtG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACpG,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACrH,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACzG,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACxH,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IACpH,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACpH,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACrI,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACrI,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,8CAA8C,EAAE;IAEvG,yEAAyE;IACzE,4EAA4E;IAC5E,6EAA6E;IAC7E,sCAAsC;IACtC,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,kGAAkG,EAAE;IACpK,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAClH,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACjI,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAC5I,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4FAA4F,EAAE;IAClK,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mFAAmF,EAAE;IACrJ,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6EAA6E,EAAE;IAChJ,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAClJ,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6EAA6E,EAAE;IACxJ,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;IACtI,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;IACxI,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACvH,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IAC3H,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;CACpJ,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const AppLayoutsSecuritySettingsLabels: LabellingUnitaryDef[] = [\n { ref: 'pageTitle', kind: LabelKind.HEADING, purpose: 'Page heading for the account security-settings screen' },\n { ref: 'accountComplete', kind: LabelKind.MESSAGE, purpose: 'Status line shown when the account meets all required security factors' },\n { ref: 'accountIncomplete', kind: LabelKind.MESSAGE, purpose: 'Status line shown when the account is missing a required security factor' },\n { ref: 'sectionPasskeys', kind: LabelKind.HEADING, purpose: 'Section title for the passkeys management card' },\n { ref: 'sectionTotp', kind: LabelKind.HEADING, purpose: 'Section title for the authenticator-app (TOTP) management card' },\n { ref: 'sectionPhone', kind: LabelKind.HEADING, purpose: 'Section title for the phone / SMS management card' },\n { ref: 'sectionPassword', kind: LabelKind.HEADING, purpose: 'Section title for the password management card' },\n { ref: 'sectionIdentityLinks', kind: LabelKind.HEADING, purpose: 'Section title for the linked social-identity providers card' },\n { ref: 'passkeyAdd', kind: LabelKind.BUTTON, purpose: 'Button that registers a new passkey' },\n { ref: 'passkeyEmpty', kind: LabelKind.EMPTY_STATE, purpose: 'Empty state shown when the user has no passkeys registered' },\n { ref: 'passkeyUnsupported', kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n { ref: 'passkeyRemove', kind: LabelKind.BUTTON, purpose: 'Button that removes an individual passkey' },\n { ref: 'passkeyRename', kind: LabelKind.BUTTON, purpose: 'Button that renames an individual passkey' },\n { ref: 'totpEnabled', kind: LabelKind.MESSAGE, purpose: 'Status line shown when an authenticator app is already set up' },\n { ref: 'totpNotSetup', kind: LabelKind.MESSAGE, purpose: 'Status line shown when no authenticator app is configured' },\n { ref: 'totpSetup', kind: LabelKind.BUTTON, purpose: 'Button that starts authenticator-app setup' },\n { ref: 'totpDisable', kind: LabelKind.BUTTON, purpose: 'Button that disables the authenticator app' },\n { ref: 'totpOnlyMfaWarning', kind: LabelKind.MESSAGE, purpose: 'Warning that the authenticator app is the only enrolled second factor' },\n { ref: 'phoneVerified', kind: LabelKind.MESSAGE, purpose: 'Status line shown when a phone number is verified (masked number appended)' },\n { ref: 'phoneNotVerified', kind: LabelKind.MESSAGE, purpose: 'Status line shown when no phone number is verified' },\n { ref: 'phoneChange', kind: LabelKind.BUTTON, purpose: 'Button that changes the verified phone number' },\n { ref: 'passwordChange', kind: LabelKind.BUTTON, purpose: 'Submit button that changes the existing password' },\n { ref: 'passwordSet', kind: LabelKind.BUTTON, purpose: 'Submit button that sets a password for an account that has none' },\n { ref: 'passwordCurrent', kind: LabelKind.LABEL, purpose: 'Field label for the current-password input' },\n { ref: 'passwordNew', kind: LabelKind.LABEL, purpose: 'Field label for the new-password input' },\n { ref: 'passwordConfirm', kind: LabelKind.LABEL, purpose: 'Field label for the confirm-new-password input' },\n { ref: 'identityLinksEmpty', kind: LabelKind.EMPTY_STATE, purpose: 'Empty state shown when no social identities are linked' },\n { ref: 'identityLinksUnlink', kind: LabelKind.BUTTON, purpose: 'Button that unlinks a connected social identity' },\n { ref: 'reauthTitle', kind: LabelKind.HEADING, purpose: 'Title of the re-authentication confirmation dialog' },\n { ref: 'reauthDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains why the user must re-enter their password to continue' },\n { ref: 'reauthPassword', kind: LabelKind.LABEL, purpose: 'Field label for the re-authentication password input' },\n { ref: 'confirm', kind: LabelKind.BUTTON, purpose: 'Confirm button for the re-authentication dialog' },\n { ref: 'cancel', kind: LabelKind.BUTTON, purpose: 'Cancel button for the re-authentication dialog' },\n { ref: 'success', kind: LabelKind.MESSAGE, purpose: 'Generic confirmation shown after a successful security change' },\n { ref: 'error', kind: LabelKind.MESSAGE, purpose: 'Generic error shown when a security operation fails' },\n { ref: 'passkeyCancelled', kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels passkey registration' },\n { ref: 'passkeyAdding', kind: LabelKind.MESSAGE, purpose: 'In-progress status while a passkey is being registered' },\n { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Loading status while the security settings are being fetched' },\n { ref: 'passwordMismatch', kind: LabelKind.MESSAGE, purpose: 'Validation error when the new password and confirmation do not match' },\n { ref: 'reauthPasswordPlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the re-authentication password input' },\n { ref: 'phoneVerify', kind: LabelKind.BUTTON, purpose: 'Button that starts phone-number verification' },\n\n // Posture summary + per-factor descriptive copy. The panel presents each\n // authentication factor as a scannable row (icon · name · what it is · live\n // status), so every factor owns a short plain-language description and every\n // state owns an explicit status word.\n { ref: 'pageDescription', kind: LabelKind.DESCRIPTION, purpose: 'Sub-heading explaining that this screen manages how the user signs in and protects their account' },\n { ref: 'statusActive', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor the user has configured' },\n { ref: 'statusNotConfigured', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor the user has not configured yet' },\n { ref: 'statusUnavailable', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor unavailable on the current device or browser' },\n { ref: 'passkeysDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of what a passkey is and why it is the strongest sign-in method' },\n { ref: 'totpDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of authenticator-app one-time codes as a second factor' },\n { ref: 'phoneDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of SMS one-time codes to a verified phone number' },\n { ref: 'passwordDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of the account password as a sign-in credential' },\n { ref: 'identityLinksDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of external identity accounts linked for sign-in' },\n { ref: 'passkeyCount', kind: LabelKind.MESSAGE, purpose: 'Number of passkeys currently registered on the account', params: ['count'] },\n { ref: 'passkeyAdded', kind: LabelKind.MESSAGE, purpose: 'Registration date shown under an individual passkey entry', params: ['date'] },\n { ref: 'passwordSetStatus', kind: LabelKind.MESSAGE, purpose: 'Status line shown when the account has a password set' },\n { ref: 'passwordNotSetStatus', kind: LabelKind.MESSAGE, purpose: 'Status line shown when the account has no password set' },\n { ref: 'identityLinksCount', kind: LabelKind.MESSAGE, purpose: 'Number of external identities currently linked to the account', params: ['count'] },\n];\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS, AppLayoutsSecuritySettingsLabels);\n"]}
1	+ {"version":3,"file":"AppPage_SecuritySettings.labels.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/AppPage_SecuritySettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE1I,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,gCAAgC,GAA0B;IACrE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAC/G,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wEAAwE,EAAE;IACtI,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;IAC1I,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC9G,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gEAAgE,EAAE;IAC1H,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mDAAmD,EAAE;IAC9G,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC9G,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAChI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC7F,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4DAA4D,EAAE;IAC3H,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACpI,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACtG,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACtG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACzH,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE;IACtH,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACnG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACrG,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IACxI,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4EAA4E,EAAE;IACxI,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oDAAoD,EAAE;IACnH,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE;IACxG,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC9G,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAC1H,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACxG,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IAChG,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC5G,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,wDAAwD,EAAE;IAC7H,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAClH,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC9G,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,iMAAiM,EAAE;IACrQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE;IACjH,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACtG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACpG,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACrH,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACzG,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACxH,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IACpH,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACpH,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACrI,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACrI,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,yFAAyF,EAAE;IACzJ,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oFAAoF,EAAE;IACnJ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,gGAAgG,EAAE;IAC5J,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qFAAqF,EAAE;IACvJ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,kFAAkF,EAAE;IAC7I,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4FAA4F,EAAE;IACxK,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kSAAkS,EAAE;IACvW;QACE,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,SAAS,CAAC,MAAM;QACtB,OAAO,EAAE,uJAAuJ;QAChK,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;KACvF;IACD;QACE,GAAG,EAAE,sBAAsB;QAC3B,IAAI,EAAE,SAAS,CAAC,OAAO;QACvB,OAAO,EAAE,8JAA8J;QACvK,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;KACvF;IACD,EAAE,GAAG,EAAE,4BAA4B,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8JAA8J,EAAE;IACvO,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2NAA2N,EAAE;IAChS,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8JAA8J,EAAE;IACjO,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,8CAA8C,EAAE;IAEvG,yEAAyE;IACzE,4EAA4E;IAC5E,6EAA6E;IAC7E,sCAAsC;IACtC,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,kGAAkG,EAAE;IACpK,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAClH,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACjI,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAC5I,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4FAA4F,EAAE;IAClK,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mFAAmF,EAAE;IACrJ,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6EAA6E,EAAE;IAChJ,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,4EAA4E,EAAE;IAClJ,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6EAA6E,EAAE;IACxJ,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;IACtI,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;IACxI,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACvH,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IAC3H,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;CACpJ,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const AppLayoutsSecuritySettingsLabels: LabellingUnitaryDef[] = [\n { ref: 'pageTitle', kind: LabelKind.HEADING, purpose: 'Page heading for the account security-settings screen' },\n { ref: 'accountComplete', kind: LabelKind.MESSAGE, purpose: 'Status line shown when the account meets all required security factors' },\n { ref: 'accountIncomplete', kind: LabelKind.MESSAGE, purpose: 'Status line shown when the account is missing a required security factor' },\n { ref: 'sectionPasskeys', kind: LabelKind.HEADING, purpose: 'Section title for the passkeys management card' },\n { ref: 'sectionTotp', kind: LabelKind.HEADING, purpose: 'Section title for the authenticator-app (TOTP) management card' },\n { ref: 'sectionPhone', kind: LabelKind.HEADING, purpose: 'Section title for the phone / SMS management card' },\n { ref: 'sectionPassword', kind: LabelKind.HEADING, purpose: 'Section title for the password management card' },\n { ref: 'sectionIdentityLinks', kind: LabelKind.HEADING, purpose: 'Section title for the linked social-identity providers card' },\n { ref: 'passkeyAdd', kind: LabelKind.BUTTON, purpose: 'Button that registers a new passkey' },\n { ref: 'passkeyEmpty', kind: LabelKind.EMPTY_STATE, purpose: 'Empty state shown when the user has no passkeys registered' },\n { ref: 'passkeyUnsupported', kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n { ref: 'passkeyRemove', kind: LabelKind.BUTTON, purpose: 'Button that removes an individual passkey' },\n { ref: 'passkeyRename', kind: LabelKind.BUTTON, purpose: 'Button that renames an individual passkey' },\n { ref: 'totpEnabled', kind: LabelKind.MESSAGE, purpose: 'Status line shown when an authenticator app is already set up' },\n { ref: 'totpNotSetup', kind: LabelKind.MESSAGE, purpose: 'Status line shown when no authenticator app is configured' },\n { ref: 'totpSetup', kind: LabelKind.BUTTON, purpose: 'Button that starts authenticator-app setup' },\n { ref: 'totpDisable', kind: LabelKind.BUTTON, purpose: 'Button that disables the authenticator app' },\n { ref: 'totpOnlyMfaWarning', kind: LabelKind.MESSAGE, purpose: 'Warning that the authenticator app is the only enrolled second factor' },\n { ref: 'phoneVerified', kind: LabelKind.MESSAGE, purpose: 'Status line shown when a phone number is verified (masked number appended)' },\n { ref: 'phoneNotVerified', kind: LabelKind.MESSAGE, purpose: 'Status line shown when no phone number is verified' },\n { ref: 'phoneChange', kind: LabelKind.BUTTON, purpose: 'Button that changes the verified phone number' },\n { ref: 'passwordChange', kind: LabelKind.BUTTON, purpose: 'Submit button that changes the existing password' },\n { ref: 'passwordSet', kind: LabelKind.BUTTON, purpose: 'Submit button that sets a password for an account that has none' },\n { ref: 'passwordCurrent', kind: LabelKind.LABEL, purpose: 'Field label for the current-password input' },\n { ref: 'passwordNew', kind: LabelKind.LABEL, purpose: 'Field label for the new-password input' },\n { ref: 'passwordConfirm', kind: LabelKind.LABEL, purpose: 'Field label for the confirm-new-password input' },\n { ref: 'identityLinksEmpty', kind: LabelKind.EMPTY_STATE, purpose: 'Empty state shown when no social identities are linked' },\n { ref: 'identityLinksUnlink', kind: LabelKind.BUTTON, purpose: 'Button that unlinks a connected social identity' },\n { ref: 'reauthTitle', kind: LabelKind.HEADING, purpose: 'Title of the re-authentication confirmation dialog' },\n { ref: 'reauthDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that the person must confirm it is really them before this sensitive change goes through. Must not name a method: they may confirm with a password, a passkey or an authenticator code' },\n { ref: 'reauthPassword', kind: LabelKind.LABEL, purpose: 'Field label for the re-authentication password input' },\n { ref: 'confirm', kind: LabelKind.BUTTON, purpose: 'Confirm button for the re-authentication dialog' },\n { ref: 'cancel', kind: LabelKind.BUTTON, purpose: 'Cancel button for the re-authentication dialog' },\n { ref: 'success', kind: LabelKind.MESSAGE, purpose: 'Generic confirmation shown after a successful security change' },\n { ref: 'error', kind: LabelKind.MESSAGE, purpose: 'Generic error shown when a security operation fails' },\n { ref: 'passkeyCancelled', kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels passkey registration' },\n { ref: 'passkeyAdding', kind: LabelKind.MESSAGE, purpose: 'In-progress status while a passkey is being registered' },\n { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Loading status while the security settings are being fetched' },\n { ref: 'passwordMismatch', kind: LabelKind.MESSAGE, purpose: 'Validation error when the new password and confirmation do not match' },\n { ref: 'reauthPasswordPlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the re-authentication password input' },\n { ref: 'reauthWithPassword', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity by typing the account password' },\n { ref: 'reauthWithPasskey', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity with a registered passkey' },\n { ref: 'reauthWithTotp', kind: LabelKind.BUTTON, purpose: 'Choice in the re-authentication dialog: confirm identity with a code from an authenticator app' },\n { ref: 'reauthPasskeyPrompt', kind: LabelKind.MESSAGE, purpose: 'Explains that confirming will ask the browser or device to use a registered passkey' },\n { ref: 'reauthTotpCode', kind: LabelKind.LABEL, purpose: 'Field label for the authenticator-app code input in the re-authentication dialog' },\n { ref: 'reauthTotpCodePlaceholder', kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the authenticator-app code input, which takes the current one-time code' },\n { ref: 'reauthNoAcceptedMethod', kind: LabelKind.MESSAGE, purpose: 'Shown in the re-authentication dialog when none of the account\\'s sign-in methods is accepted for this confirmation, because the account\\'s security policy requires a method it has not added yet. Tells the person to add that method (for example a passkey) in their security settings first' },\n {\n ref: 'reauthWithProvider',\n kind: LabelKind.BUTTON,\n purpose: 'Choice in the re-authentication dialog: confirm it is you by signing in again at a linked identity provider, such as Google or the company\\'s sign-in',\n params: [{ key: 'provider', meaning: 'display name of the linked identity provider' }],\n },\n {\n ref: 'reauthProviderPrompt',\n kind: LabelKind.MESSAGE,\n purpose: 'Shown in the re-authentication dialog when a linked identity provider is chosen: confirming opens a window at that provider, where the person signs in again',\n params: [{ key: 'provider', meaning: 'display name of the linked identity provider' }],\n },\n { ref: 'reauthProviderPopupBlocked', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when the browser blocked the sign-in window from opening; asks the person to allow pop-ups for this site and try again' },\n { ref: 'reauthProviderTimedOut', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when signing in again at the identity provider was not finished in time (the sign-in window was left open or closed without finishing); they can try again or choose another method' },\n { ref: 'reauthProviderFailed', kind: LabelKind.MESSAGE, purpose: 'Error in the re-authentication dialog when signing in again at the identity provider did not confirm the person; they can try again or choose another method' },\n { ref: 'phoneVerify', kind: LabelKind.BUTTON, purpose: 'Button that starts phone-number verification' },\n\n // Posture summary + per-factor descriptive copy. The panel presents each\n // authentication factor as a scannable row (icon · name · what it is · live\n // status), so every factor owns a short plain-language description and every\n // state owns an explicit status word.\n { ref: 'pageDescription', kind: LabelKind.DESCRIPTION, purpose: 'Sub-heading explaining that this screen manages how the user signs in and protects their account' },\n { ref: 'statusActive', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor the user has configured' },\n { ref: 'statusNotConfigured', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor the user has not configured yet' },\n { ref: 'statusUnavailable', kind: LabelKind.MESSAGE, purpose: 'Short status word on a factor unavailable on the current device or browser' },\n { ref: 'passkeysDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of what a passkey is and why it is the strongest sign-in method' },\n { ref: 'totpDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of authenticator-app one-time codes as a second factor' },\n { ref: 'phoneDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of SMS one-time codes to a verified phone number' },\n { ref: 'passwordDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of the account password as a sign-in credential' },\n { ref: 'identityLinksDescription', kind: LabelKind.DESCRIPTION, purpose: 'Plain-language explanation of external identity accounts linked for sign-in' },\n { ref: 'passkeyCount', kind: LabelKind.MESSAGE, purpose: 'Number of passkeys currently registered on the account', params: ['count'] },\n { ref: 'passkeyAdded', kind: LabelKind.MESSAGE, purpose: 'Registration date shown under an individual passkey entry', params: ['date'] },\n { ref: 'passwordSetStatus', kind: LabelKind.MESSAGE, purpose: 'Status line shown when the account has a password set' },\n { ref: 'passwordNotSetStatus', kind: LabelKind.MESSAGE, purpose: 'Status line shown when the account has no password set' },\n { ref: 'identityLinksCount', kind: LabelKind.MESSAGE, purpose: 'Number of external identities currently linked to the account', params: ['count'] },\n];\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS, AppLayoutsSecuritySettingsLabels);\n"]}

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAE9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4FAA4F,CAAC;AAqBtI,eAAO,MAAM,sCAAsC,GAAI,sBAEpD,wBAAwB,KAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,~~IAgMjD~~,CAAC"}
1	+ {"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAE9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4FAA4F,CAAC;AAqBtI,eAAO,MAAM,sCAAsC,GAAI,sBAEpD,wBAAwB,KAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAiMjD,CAAC"}

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.js CHANGED Viewed

@@ -19,7 +19,7 @@ import { SsoConnection_Operations } from '@wildo-ai/saas-models';
 import { FrontendComponentType } from '@wildo-ai/presets-components-models';
 import { Button, ButtonVariants_Variant } from '../../../components/actions/button.js';
 import { ContentSection, ContentSectionLegend } from '../../../components/sections/content-section.js';
-import { extractErrorInfo } from '../../../core/errors/errors.frontend.schemas.js';
+import { useUserFacingErrorMessage } from '../../../core/errors/useUserFacingErrorMessage.js';
 import { Input } from '../../../components/form/controls/input.js';
 import { resolveQuickCreateCreatedResourceId } from '../../../core/resources/relationship-quick-create.frontend.utils.js';
 export const ResourceLayoutPreset_Create_SamlWizard = ({ resourceContext, }) => {
@@ -36,6 +36,7 @@ export const ResourceLayoutPreset_Create_SamlWizard = ({ resourceContext, }) =>
     // considered and rejected: for a label with no fallback it converts an ugly but
     // diagnosable `components.RESOURCES_LAYOUTS_CREATE.saml.import` into an INVISIBLE button.
     const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_CREATE);
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const isQuickCreateFlow = Boolean(currentResourceContext.additionalContext?.quickCreateRequest
         ?? resourceContext.additionalContext?.quickCreateRequest);
     const [metadataUrl, setMetadataUrl] = useState('');
@@ -46,7 +47,7 @@ export const ResourceLayoutPreset_Create_SamlWizard = ({ resourceContext, }) =>
     const handleDiscover = useCallback(async () => {
         const url = metadataUrl.trim();
         if (!url) {
-            setImportError('Please enter a metadata URL');
+            setImportError(tSaml('saml.metadataUrlRequired'));
             return;
         }
         setIsImporting(true);
@@ -79,13 +80,13 @@ export const ResourceLayoutPreset_Create_SamlWizard = ({ resourceContext, }) =>
             });
         }
         catch (err) {
-            // E-5: prefer structured WildoError_Backend message via extractErrorInfo
-            setImportError(extractErrorInfo(err).message);
+            // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.
+            setImportError(toUserFacingErrorMessage(err));
         }
         finally {
             setIsImporting(false);
         }
-    }, [contextualParameters, currentResourceContext.parentResourcesRequirements, doOperation, metadataUrl, resourceType]);
+    }, [contextualParameters, currentResourceContext.parentResourcesRequirements, doOperation, metadataUrl, resourceType, toUserFacingErrorMessage, tSaml]);
     const handleSuccess = useCallback((result) => {
         if (isQuickCreateFlow) {
             if (navigationZone === NavigationZone.OVERLAY) {

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.js","sourceRoot":"","sources":["../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":";AAAA;;;;;GAKG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gEAAgE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAC3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,6EAA6E,CAAC;AAElI,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,EACrD,eAAe,GACU,EAA4B,EAAE;IACvD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EACJ,eAAe,EAAE,sBAAsB,EACvC,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,uBAAuB,EACvB,gBAAgB,GACjB,GAAG,+BAA+B,EAAE,CAAC;IACtC,MAAM,EAAE,YAAY,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACnD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAC5G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,0FAA0F;IAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;IAE9E,MAAM,iBAAiB,GAAG,OAAO,CAC/B,sBAAsB,CAAC,iBAAiB,EAAE,kBAAkB;WACzD,eAAe,CAAC,iBAAiB,EAAE,kBAAkB,CACzD,CAAC;IAEF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAsC,SAAS,CAAC,CAAC;IAErG,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAE9G,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,cAAc,CAAC,6BAA6B,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBAChF,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,kBAAkB;gBAChE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,eAAe,EAAE;gBACjD,oBAAoB;gBACpB,2BAA2B,EAAE,sBAAsB,CAAC,2BAA2B;gBAC/E,WAAW,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;aAClC,CAAC,CAMD,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;YAC5C,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5C,iBAAiB,CAAC;gBAChB,QAAQ,EAAE,WAAW,CAAC,IAAI;gBAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,iBAAiB;gBACnE,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,kBAAkB;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,2BAA2B,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAEvH,MAAM,aAAa,GAAG,WAAW,CAC/B,CAAC,MAA+B,EAAE,EAAE;QAClC,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,cAAc,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC9C,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;YAC5D,MAAM;YACN,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,uBAAuB,CAAC;gBACxC,0BAA0B,EAAE;oBAC5B,GAAG,sBAAsB,CAAC,0BAA0B;oBACpD,CAAC,YAAY,CAAC,EAAE,iBAAiB;iBAChC;gBACD,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QACD,gBAAgB,EAAE,CAAC;IACrB,CAAC,EACD,CAAC,YAAY,EAAE,sBAAsB,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CACxK,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,WAAW,CAAC,KAAK,EAAE,wBAAwB,EAAE,wCAAwC,CAAC,CAAC;IACzF,CAAC,EACD,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAE/C,OAAO,CACL,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,GACxC,EAEF,MAAC,cAAc,IAAC,SAAS,EAAC,WAAW,aACnC,KAAC,oBAAoB,cAClB,KAAK,CAAC,qBAAqB,CAAC,GACR,EACvB,YAAG,SAAS,EAAC,wCAAwC,YAClD,KAAK,CAAC,yBAAyB,CAAC,GAC/B,EACJ,eAAK,SAAS,EAAC,gBAAgB,EAAC,SAAS,EAAE,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,cAAc,EAAE,aAC1G,KAAC,KAAK,IACJ,IAAI,EAAC,mBAAmB,EACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAClB,IAAI,EAAC,KAAK;gCACV,kEAAkE;gCAClE,2DAA2D;gCAC3D,+DAA+D;gCAC/D,WAAW,EAAE,KAAK,CAAC,6BAA6B,CAAC,EACjD,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAClD,SAAS,EAAC,QAAQ,GAClB,EACF,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,YAC1G,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,GACrD,IACL,EACL,WAAW,IAAI,CACd,YAAG,SAAS,EAAC,qCAAqC,EAAC,IAAI,EAAC,OAAO,YAC5D,WAAW,GACV,CACL,EACA,cAAc,IAAI,CACjB,YAAG,SAAS,EAAC,iCAAiC,EAAC,IAAI,EAAC,QAAQ,YACzD,KAAK,CAAC,oBAAoB,CAAC,GAC1B,CACL,IACc,EAEjB,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW;gBACpB,wEAAwE;gBACxE,kEAAkE;gBAClE,0BAA0B;gBAC1B,QAAQ,EAAE,cAAc,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,EACtF,gBAAgB,QAChB,SAAS,EAAC,WAAW,EACrB,qBAAqB,EAAE,cAAc,GACrC,IACE,CACP,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/*\n SAML SSO Connection Create Wizard\n \n Adds metadata URL import and SAML-specific UX to the standard Create form.\n * Used for organizationSsoConnections and applicationSsoConnections.\n /\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { z } from 'zod';\nimport { BaseResourcesLayoutProps } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\nimport { ResourceAutomatedForm } from '~wildo-frontend-lib/components/form/automated/ResourceAutomatedForm';\nimport { ResourceLayout_Header } from '~wildo-frontend-lib/components/resources/ResourceLayout_Header';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useNavigationController } from '~wildo-frontend-lib/core/navigation/useNavigationController';\nimport { NavigationZone } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\nimport { useResourceOperationViewContext } from '~wildo-frontend-lib/core/resources/ResourceOperationViewContext';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n ResourcesConfig_OperationPathUtils,\n ResourceOperationVariantType,\n SsoProtocol,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { extractErrorInfo } from '~wildo-frontend-lib/core/errors/errors.frontend.schemas';\nimport { Input } from '~wildo-frontend-lib/components/form/controls/input';\nimport { resolveQuickCreateCreatedResourceId } from '~wildo-frontend-lib/core/resources/relationship-quick-create.frontend.utils';\n\nexport const ResourceLayoutPreset_Create_SamlWizard = ({\n resourceContext,\n}: BaseResourcesLayoutProps): React.JSX.Element \| null => {\n const { registry, doOperation } = useResourceRegistry();\n const {\n resourceContext: currentResourceContext,\n navigationZone,\n navigationInitiator,\n resourceType,\n contextualParameters,\n reportError,\n navigateToPreferredRead,\n goBackWithinZone,\n } = useResourceOperationViewContext();\n const { closeOverlay } = useNavigationController();\n const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_CREATE });\n // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n // string) and are gone rather than revived — every key here IS declared in the\n // layout's `.labels.ts`, so a component-local literal would be a second source of\n // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n // considered and rejected: for a label with no fallback it converts an ugly but\n // diagnosable `components.RESOURCES_LAYOUTS_CREATE.saml.import` into an INVISIBLE button.\n const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_CREATE);\n\n const isQuickCreateFlow = Boolean(\n currentResourceContext.additionalContext?.quickCreateRequest\n ?? resourceContext.additionalContext?.quickCreateRequest,\n );\n\n const [metadataUrl, setMetadataUrl] = useState('');\n const [isImporting, setIsImporting] = useState(false);\n const [importError, setImportError] = useState<string \| null>(null);\n const [discoveredData, setDiscoveredData] = useState<Record<string, unknown> \| undefined>(undefined);\n\n const resourceConfig = useMemo(() => registry.resourceConfigurations[resourceType], [registry, resourceType]);\n\n const handleDiscover = useCallback(async () => {\n const url = metadataUrl.trim();\n if (!url) {\n setImportError('Please enter a metadata URL');\n return;\n }\n setIsImporting(true);\n setImportError(null);\n try {\n const discoverPathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n resourceIdentifier: resourceType,\n operationIdentifier: SsoConnection_Operations.DISCOVER_ENDPOINTS,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n isBulkOperation: false,\n });\n\n const result = (await doOperation(discoverPathKey, {\n contextualParameters,\n parentResourcesRequirements: currentResourceContext.parentResourcesRequirements,\n requestData: { metadataUrl: url },\n })) as {\n entityId?: string;\n ssoUrl?: string;\n sloUrl?: string;\n x509Certificates?: string[];\n nameIdFormat?: string;\n };\n\n const certs = result.x509Certificates ?? [];\n const x509CertificatePem = certs.join('\\n');\n\n setDiscoveredData({\n protocol: SsoProtocol.SAML,\n displayName: result.entityId?.split('/').pop() ?? 'SAML Connection',\n saml: {\n entityId: result.entityId,\n ssoUrl: result.ssoUrl,\n sloUrl: result.sloUrl,\n nameIdFormat: result.nameIdFormat,\n x509CertificatePem,\n },\n });\n } catch (err) {\n // E-5: prefer structured WildoError_Backend message via extractErrorInfo\n setImportError(extractErrorInfo(err).message);\n } finally {\n setIsImporting(false);\n }\n }, [contextualParameters, currentResourceContext.parentResourcesRequirements, doOperation, metadataUrl, resourceType]);\n\n const handleSuccess = useCallback(\n (result: Record<string, unknown>) => {\n if (isQuickCreateFlow) {\n if (navigationZone === NavigationZone.OVERLAY) {\n closeOverlay();\n } else {\n goBackWithinZone();\n }\n return;\n }\n\n const createdResourceId = resolveQuickCreateCreatedResourceId({\n result,\n resourceType,\n registry,\n });\n\n if (createdResourceId) {\n const navigated = navigateToPreferredRead({\n contextResourceIdentifiers: {\n ...currentResourceContext.contextResourceIdentifiers,\n [resourceType]: createdResourceId,\n },\n fallbackToGoBack: false,\n });\n if (!navigated) {\n goBackWithinZone();\n }\n return;\n }\n goBackWithinZone();\n },\n [closeOverlay, currentResourceContext.contextResourceIdentifiers, goBackWithinZone, isQuickCreateFlow, navigateToPreferredRead, navigationZone, registry, resourceType]\n );\n\n const handleError = useCallback(\n (error: Error) => {\n reportError(error, 'Form submission failed', 'ResourceLayoutPreset_Create_SamlWizard');\n },\n [reportError]\n );\n\n if (!isReady) return null;\n\n const importButtonLabel = tSaml('saml.import');\n\n return (\n <div className=\"space-y-section\">\n <ResourceLayout_Header\n resourceContext={currentResourceContext}\n navigationZone={navigationZone}\n navigationInitiator={navigationInitiator}\n />\n\n <ContentSection className=\"max-w-2xl\">\n <ContentSectionLegend>\n {tSaml('saml.metadataImport')}\n </ContentSectionLegend>\n <p className=\"text-sm text-muted-foreground mb-field\">\n {tSaml('saml.metadataImportHelp')}\n </p>\n <div className=\"flex gap-field\" onKeyDown={(e: React.KeyboardEvent) => e.key === 'Enter' && handleDiscover()}>\n <Input\n name=\"saml-metadata-url\"\n schema={z.string()}\n type=\"url\"\n // I-6: placeholder is localizable — translators may want to use a\n // region-appropriate IdP example domain. RFC 2606 reserves\n // `idp.example.com`; the default English copy ships with that.\n placeholder={tSaml('saml.metadataUrlPlaceholder')}\n value={metadataUrl}\n onChange={(value) => setMetadataUrl(String(value))}\n className=\"flex-1\"\n />\n <Button type=\"button\" variant={ButtonVariants_Variant.OUTLINE} onClick={handleDiscover} disabled={isImporting}>\n {isImporting ? (tSaml('saml.importing')) : importButtonLabel}\n </Button>\n </div>\n {importError && (\n <p className=\"text-sm text-destructive mt-item-xs\" role=\"alert\">\n {importError}\n </p>\n )}\n {discoveredData && (\n <p className=\"text-sm text-success mt-item-xs\" role=\"status\">\n {tSaml('saml.importSuccess')}\n </p>\n )}\n </ContentSection>\n\n <ResourceAutomatedForm\n resourceContext={currentResourceContext}\n navigationZone={navigationZone}\n onSuccess={handleSuccess}\n onError={handleError}\n // Audit D5 — overlay-hosted create forms carry a Cancel that closes the\n // modal through the same path as the top-right X (parity with the\n // default create layout).\n onCancel={navigationZone === NavigationZone.OVERLAY ? () => closeOverlay() : undefined}\n showErrorSummary\n className=\"max-w-2xl\"\n defaultValuesOverride={discoveredData}\n />\n </div>\n );\n};\n"]}
1	+ {"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":";AAAA;;;;;GAKG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gEAAgE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAC3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,6EAA6E,CAAC;AAElI,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,EACrD,eAAe,GACU,EAA4B,EAAE;IACvD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EACJ,eAAe,EAAE,sBAAsB,EACvC,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,uBAAuB,EACvB,gBAAgB,GACjB,GAAG,+BAA+B,EAAE,CAAC;IACtC,MAAM,EAAE,YAAY,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACnD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAC5G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,0FAA0F;IAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;IAC9E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,iBAAiB,GAAG,OAAO,CAC/B,sBAAsB,CAAC,iBAAiB,EAAE,kBAAkB;WACzD,eAAe,CAAC,iBAAiB,EAAE,kBAAkB,CACzD,CAAC;IAEF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAsC,SAAS,CAAC,CAAC;IAErG,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAE9G,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBAChF,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,kBAAkB;gBAChE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,eAAe,EAAE;gBACjD,oBAAoB;gBACpB,2BAA2B,EAAE,sBAAsB,CAAC,2BAA2B;gBAC/E,WAAW,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;aAClC,CAAC,CAMD,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;YAC5C,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5C,iBAAiB,CAAC;gBAChB,QAAQ,EAAE,WAAW,CAAC,IAAI;gBAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,iBAAiB;gBACnE,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,kBAAkB;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,cAAc,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,2BAA2B,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC,CAAC;IAExJ,MAAM,aAAa,GAAG,WAAW,CAC/B,CAAC,MAA+B,EAAE,EAAE;QAClC,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,cAAc,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC9C,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;YAC5D,MAAM;YACN,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,uBAAuB,CAAC;gBACxC,0BAA0B,EAAE;oBAC5B,GAAG,sBAAsB,CAAC,0BAA0B;oBACpD,CAAC,YAAY,CAAC,EAAE,iBAAiB;iBAChC;gBACD,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QACD,gBAAgB,EAAE,CAAC;IACrB,CAAC,EACD,CAAC,YAAY,EAAE,sBAAsB,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CACxK,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,WAAW,CAAC,KAAK,EAAE,wBAAwB,EAAE,wCAAwC,CAAC,CAAC;IACzF,CAAC,EACD,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAE/C,OAAO,CACL,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,GACxC,EAEF,MAAC,cAAc,IAAC,SAAS,EAAC,WAAW,aACnC,KAAC,oBAAoB,cAClB,KAAK,CAAC,qBAAqB,CAAC,GACR,EACvB,YAAG,SAAS,EAAC,wCAAwC,YAClD,KAAK,CAAC,yBAAyB,CAAC,GAC/B,EACJ,eAAK,SAAS,EAAC,gBAAgB,EAAC,SAAS,EAAE,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,cAAc,EAAE,aAC1G,KAAC,KAAK,IACJ,IAAI,EAAC,mBAAmB,EACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAClB,IAAI,EAAC,KAAK;gCACV,kEAAkE;gCAClE,2DAA2D;gCAC3D,+DAA+D;gCAC/D,WAAW,EAAE,KAAK,CAAC,6BAA6B,CAAC,EACjD,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAClD,SAAS,EAAC,QAAQ,GAClB,EACF,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,YAC1G,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,GACrD,IACL,EACL,WAAW,IAAI,CACd,YAAG,SAAS,EAAC,qCAAqC,EAAC,IAAI,EAAC,OAAO,YAC5D,WAAW,GACV,CACL,EACA,cAAc,IAAI,CACjB,YAAG,SAAS,EAAC,iCAAiC,EAAC,IAAI,EAAC,QAAQ,YACzD,KAAK,CAAC,oBAAoB,CAAC,GAC1B,CACL,IACc,EAEjB,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW;gBACpB,wEAAwE;gBACxE,kEAAkE;gBAClE,0BAA0B;gBAC1B,QAAQ,EAAE,cAAc,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,EACtF,gBAAgB,QAChB,SAAS,EAAC,WAAW,EACrB,qBAAqB,EAAE,cAAc,GACrC,IACE,CACP,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/*\n SAML SSO Connection Create Wizard\n \n Adds metadata URL import and SAML-specific UX to the standard Create form.\n * Used for organizationSsoConnections and applicationSsoConnections.\n /\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { z } from 'zod';\nimport { BaseResourcesLayoutProps } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\nimport { ResourceAutomatedForm } from '~wildo-frontend-lib/components/form/automated/ResourceAutomatedForm';\nimport { ResourceLayout_Header } from '~wildo-frontend-lib/components/resources/ResourceLayout_Header';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useNavigationController } from '~wildo-frontend-lib/core/navigation/useNavigationController';\nimport { NavigationZone } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\nimport { useResourceOperationViewContext } from '~wildo-frontend-lib/core/resources/ResourceOperationViewContext';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n ResourcesConfig_OperationPathUtils,\n ResourceOperationVariantType,\n SsoProtocol,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { Input } from '~wildo-frontend-lib/components/form/controls/input';\nimport { resolveQuickCreateCreatedResourceId } from '~wildo-frontend-lib/core/resources/relationship-quick-create.frontend.utils';\n\nexport const ResourceLayoutPreset_Create_SamlWizard = ({\n resourceContext,\n}: BaseResourcesLayoutProps): React.JSX.Element \| null => {\n const { registry, doOperation } = useResourceRegistry();\n const {\n resourceContext: currentResourceContext,\n navigationZone,\n navigationInitiator,\n resourceType,\n contextualParameters,\n reportError,\n navigateToPreferredRead,\n goBackWithinZone,\n } = useResourceOperationViewContext();\n const { closeOverlay } = useNavigationController();\n const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_CREATE });\n // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n // string) and are gone rather than revived — every key here IS declared in the\n // layout's `.labels.ts`, so a component-local literal would be a second source of\n // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n // considered and rejected: for a label with no fallback it converts an ugly but\n // diagnosable `components.RESOURCES_LAYOUTS_CREATE.saml.import` into an INVISIBLE button.\n const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_CREATE);\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n const isQuickCreateFlow = Boolean(\n currentResourceContext.additionalContext?.quickCreateRequest\n ?? resourceContext.additionalContext?.quickCreateRequest,\n );\n\n const [metadataUrl, setMetadataUrl] = useState('');\n const [isImporting, setIsImporting] = useState(false);\n const [importError, setImportError] = useState<string \| null>(null);\n const [discoveredData, setDiscoveredData] = useState<Record<string, unknown> \| undefined>(undefined);\n\n const resourceConfig = useMemo(() => registry.resourceConfigurations[resourceType], [registry, resourceType]);\n\n const handleDiscover = useCallback(async () => {\n const url = metadataUrl.trim();\n if (!url) {\n setImportError(tSaml('saml.metadataUrlRequired'));\n return;\n }\n setIsImporting(true);\n setImportError(null);\n try {\n const discoverPathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n resourceIdentifier: resourceType,\n operationIdentifier: SsoConnection_Operations.DISCOVER_ENDPOINTS,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n isBulkOperation: false,\n });\n\n const result = (await doOperation(discoverPathKey, {\n contextualParameters,\n parentResourcesRequirements: currentResourceContext.parentResourcesRequirements,\n requestData: { metadataUrl: url },\n })) as {\n entityId?: string;\n ssoUrl?: string;\n sloUrl?: string;\n x509Certificates?: string[];\n nameIdFormat?: string;\n };\n\n const certs = result.x509Certificates ?? [];\n const x509CertificatePem = certs.join('\\n');\n\n setDiscoveredData({\n protocol: SsoProtocol.SAML,\n displayName: result.entityId?.split('/').pop() ?? 'SAML Connection',\n saml: {\n entityId: result.entityId,\n ssoUrl: result.ssoUrl,\n sloUrl: result.sloUrl,\n nameIdFormat: result.nameIdFormat,\n x509CertificatePem,\n },\n });\n } catch (err) {\n // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n setImportError(toUserFacingErrorMessage(err));\n } finally {\n setIsImporting(false);\n }\n }, [contextualParameters, currentResourceContext.parentResourcesRequirements, doOperation, metadataUrl, resourceType, toUserFacingErrorMessage, tSaml]);\n\n const handleSuccess = useCallback(\n (result: Record<string, unknown>) => {\n if (isQuickCreateFlow) {\n if (navigationZone === NavigationZone.OVERLAY) {\n closeOverlay();\n } else {\n goBackWithinZone();\n }\n return;\n }\n\n const createdResourceId = resolveQuickCreateCreatedResourceId({\n result,\n resourceType,\n registry,\n });\n\n if (createdResourceId) {\n const navigated = navigateToPreferredRead({\n contextResourceIdentifiers: {\n ...currentResourceContext.contextResourceIdentifiers,\n [resourceType]: createdResourceId,\n },\n fallbackToGoBack: false,\n });\n if (!navigated) {\n goBackWithinZone();\n }\n return;\n }\n goBackWithinZone();\n },\n [closeOverlay, currentResourceContext.contextResourceIdentifiers, goBackWithinZone, isQuickCreateFlow, navigateToPreferredRead, navigationZone, registry, resourceType]\n );\n\n const handleError = useCallback(\n (error: Error) => {\n reportError(error, 'Form submission failed', 'ResourceLayoutPreset_Create_SamlWizard');\n },\n [reportError]\n );\n\n if (!isReady) return null;\n\n const importButtonLabel = tSaml('saml.import');\n\n return (\n <div className=\"space-y-section\">\n <ResourceLayout_Header\n resourceContext={currentResourceContext}\n navigationZone={navigationZone}\n navigationInitiator={navigationInitiator}\n />\n\n <ContentSection className=\"max-w-2xl\">\n <ContentSectionLegend>\n {tSaml('saml.metadataImport')}\n </ContentSectionLegend>\n <p className=\"text-sm text-muted-foreground mb-field\">\n {tSaml('saml.metadataImportHelp')}\n </p>\n <div className=\"flex gap-field\" onKeyDown={(e: React.KeyboardEvent) => e.key === 'Enter' && handleDiscover()}>\n <Input\n name=\"saml-metadata-url\"\n schema={z.string()}\n type=\"url\"\n // I-6: placeholder is localizable — translators may want to use a\n // region-appropriate IdP example domain. RFC 2606 reserves\n // `idp.example.com`; the default English copy ships with that.\n placeholder={tSaml('saml.metadataUrlPlaceholder')}\n value={metadataUrl}\n onChange={(value) => setMetadataUrl(String(value))}\n className=\"flex-1\"\n />\n <Button type=\"button\" variant={ButtonVariants_Variant.OUTLINE} onClick={handleDiscover} disabled={isImporting}>\n {isImporting ? (tSaml('saml.importing')) : importButtonLabel}\n </Button>\n </div>\n {importError && (\n <p className=\"text-sm text-destructive mt-item-xs\" role=\"alert\">\n {importError}\n </p>\n )}\n {discoveredData && (\n <p className=\"text-sm text-success mt-item-xs\" role=\"status\">\n {tSaml('saml.importSuccess')}\n </p>\n )}\n </ContentSection>\n\n <ResourceAutomatedForm\n resourceContext={currentResourceContext}\n navigationZone={navigationZone}\n onSuccess={handleSuccess}\n onError={handleError}\n // Audit D5 — overlay-hosted create forms carry a Cancel that closes the\n // modal through the same path as the top-right X (parity with the\n // default create layout).\n onCancel={navigationZone === NavigationZone.OVERLAY ? () => closeOverlay() : undefined}\n showErrorSummary\n className=\"max-w-2xl\"\n defaultValuesOverride={discoveredData}\n />\n </div>\n );\n};\n"]}

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Read_SsoSaml.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ResourceLayoutPreset_Read_SsoSaml.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/components/auth/admin-config/ResourceLayoutPreset_Read_SsoSaml.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,wBAAwB,EAAE,MAAM,4FAA4F,CAAC;AAKtI,eAAO,MAAM,iCAAiC,GAAI,OAAO,wBAAwB,KAAG,KAAK,CAAC,GAAG,CAAC,OAO7F,CAAC"}
1	+ {"version":3,"file":"ResourceLayoutPreset_Read_SsoSaml.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Read_SsoSaml.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,wBAAwB,EAAE,MAAM,4FAA4F,CAAC;AAKtI,eAAO,MAAM,iCAAiC,GAAI,OAAO,wBAAwB,KAAG,KAAK,CAAC,GAAG,CAAC,OAO7F,CAAC"}

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Read_SsoSaml.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ResourceLayoutPreset_Read_SsoSaml.js","sourceRoot":"","sources":["~~../../../../../~~src/components/auth/admin-config/ResourceLayoutPreset_Read_SsoSaml.tsx"],"names":[],"mappings":";AASA,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,iCAAiC,EAAE,MAAM,8DAA8D,CAAC;AAEjH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,KAA+B,EAAqB,EAAE,CAAC,CACvG,KAAC,iCAAiC,OAC5B,KAAK,EACT,UAAU,EAAE,KAAK,YAEjB,KAAC,4BAA4B,IAAC,eAAe,EAAE,KAAK,CAAC,eAAe,GAAI,GACtC,CACrC,CAAC","sourcesContent":["/*\n SSO Connection Read layout preset.\n * Extends Default with SAML-specific section (metadata, test connection).\n * Authored directly from resource UIBehavior for SAML-like READ operations.\n */\n\nimport React from 'react';\nimport { BaseResourcesLayoutProps } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\n\nimport { SsoConnectionSamlReadSection } from './SsoConnectionSamlReadSection';\nimport { ResourceLayoutPreset_Read_Default } from '~wildo-frontend-lib/components/resources/ResourceLayout_Read';\n\nexport const ResourceLayoutPreset_Read_SsoSaml = (props: BaseResourcesLayoutProps): React.JSX.Element => (\n <ResourceLayoutPreset_Read_Default\n {...props}\n showCharts={false}\n >\n <SsoConnectionSamlReadSection resourceContext={props.resourceContext} />\n </ResourceLayoutPreset_Read_Default>\n);\n\n"]}
1	+ {"version":3,"file":"ResourceLayoutPreset_Read_SsoSaml.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Read_SsoSaml.tsx"],"names":[],"mappings":";AASA,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,iCAAiC,EAAE,MAAM,8DAA8D,CAAC;AAEjH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,KAA+B,EAAqB,EAAE,CAAC,CACvG,KAAC,iCAAiC,OAC5B,KAAK,EACT,UAAU,EAAE,KAAK,YAEjB,KAAC,4BAA4B,IAAC,eAAe,EAAE,KAAK,CAAC,eAAe,GAAI,GACtC,CACrC,CAAC","sourcesContent":["/*\n SSO Connection Read layout preset.\n * Extends Default with SAML-specific section (metadata, test connection).\n * Authored directly from resource UIBehavior for SAML-like READ operations.\n */\n\nimport React from 'react';\nimport { BaseResourcesLayoutProps } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\n\nimport { SsoConnectionSamlReadSection } from './SsoConnectionSamlReadSection';\nimport { ResourceLayoutPreset_Read_Default } from '~wildo-frontend-lib/components/resources/ResourceLayout_Read';\n\nexport const ResourceLayoutPreset_Read_SsoSaml = (props: BaseResourcesLayoutProps): React.JSX.Element => (\n <ResourceLayoutPreset_Read_Default\n {...props}\n showCharts={false}\n >\n <SsoConnectionSamlReadSection resourceContext={props.resourceContext} />\n </ResourceLayoutPreset_Read_Default>\n);\n\n"]}

package/dist/esm/components/auth/admin-config/SsoConnectionSamlReadSection.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"SsoConnectionSamlReadSection.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAc9D,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,+DAA+D,CAAC;AAGtH,UAAU,iCAAiC;IACzC,eAAe,EAAE,gCAAgC,CAAC;CACnD;AAwBD,wBAAgB,4BAA4B,CAAC,EAC3C,eAAe,GAChB,EAAE,iCAAiC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,~~CA+L9D~~"}
1	+ {"version":3,"file":"SsoConnectionSamlReadSection.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAc9D,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,+DAA+D,CAAC;AAGtH,UAAU,iCAAiC;IACzC,eAAe,EAAE,gCAAgC,CAAC;CACnD;AAwBD,wBAAgB,4BAA4B,CAAC,EAC3C,eAAe,GAChB,EAAE,iCAAiC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAgM9D"}