npm - @wildo-ai/saas-frontend-lib - Versions diffs - 1.1.9 → 1.1.11 - Mend

@wildo-ai/saas-frontend-lib 1.1.9 → 1.1.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1566) hide show

package/dist/esm/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":";AAAA;;;;;GAKG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gEAAgE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAC3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,6EAA6E,CAAC;AAElI,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,EACrD,eAAe,GACU,EAA4B,EAAE;IACvD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EACJ,eAAe,EAAE,sBAAsB,EACvC,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,uBAAuB,EACvB,gBAAgB,GACjB,GAAG,+BAA+B,EAAE,CAAC;IACtC,MAAM,EAAE,YAAY,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACnD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAC5G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,0FAA0F;IAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;IAC9E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,iBAAiB,GAAG,OAAO,CAC/B,sBAAsB,CAAC,iBAAiB,EAAE,kBAAkB;WACzD,eAAe,CAAC,iBAAiB,EAAE,kBAAkB,CACzD,CAAC;IAEF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAsC,SAAS,CAAC,CAAC;IAErG,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAE9G,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBAChF,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,kBAAkB;gBAChE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,eAAe,EAAE;gBACjD,oBAAoB;gBACpB,2BAA2B,EAAE,sBAAsB,CAAC,2BAA2B;gBAC/E,WAAW,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;aAClC,CAAC,CAMD,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;YAC5C,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5C,iBAAiB,CAAC;gBAChB,QAAQ,EAAE,WAAW,CAAC,IAAI;gBAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,iBAAiB;gBACnE,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,kBAAkB;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,cAAc,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,2BAA2B,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC,CAAC;IAExJ,MAAM,aAAa,GAAG,WAAW,CAC/B,CAAC,MAA+B,EAAE,EAAE;QAClC,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,cAAc,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC9C,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;YAC5D,MAAM;YACN,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,uBAAuB,CAAC;gBACxC,0BAA0B,EAAE;oBAC5B,GAAG,sBAAsB,CAAC,0BAA0B;oBACpD,CAAC,YAAY,CAAC,EAAE,iBAAiB;iBAChC;gBACD,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QACD,gBAAgB,EAAE,CAAC;IACrB,CAAC,EACD,CAAC,YAAY,EAAE,sBAAsB,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CACxK,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,WAAW,CAAC,KAAK,EAAE,wBAAwB,EAAE,wCAAwC,CAAC,CAAC;IACzF,CAAC,EACD,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAE/C,OAAO,CACL,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,GACxC,EAEF,MAAC,cAAc,IAAC,SAAS,EAAC,WAAW,aACnC,KAAC,oBAAoB,cAClB,KAAK,CAAC,qBAAqB,CAAC,GACR,EACvB,YAAG,SAAS,EAAC,wCAAwC,YAClD,KAAK,CAAC,yBAAyB,CAAC,GAC/B,EACJ,eAAK,SAAS,EAAC,gBAAgB,EAAC,SAAS,EAAE,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,cAAc,EAAE,aAC1G,KAAC,KAAK,IACJ,IAAI,EAAC,mBAAmB,EACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAClB,IAAI,EAAC,KAAK;gCACV,kEAAkE;gCAClE,2DAA2D;gCAC3D,+DAA+D;gCAC/D,WAAW,EAAE,KAAK,CAAC,6BAA6B,CAAC,EACjD,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAClD,SAAS,EAAC,QAAQ,GAClB,EACF,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,YAC1G,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,GACrD,IACL,EACL,WAAW,IAAI,CACd,YAAG,SAAS,EAAC,qCAAqC,EAAC,IAAI,EAAC,OAAO,YAC5D,WAAW,GACV,CACL,EACA,cAAc,IAAI,CACjB,YAAG,SAAS,EAAC,iCAAiC,EAAC,IAAI,EAAC,QAAQ,YACzD,KAAK,CAAC,oBAAoB,CAAC,GAC1B,CACL,IACc,EAEjB,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW;gBACpB,wEAAwE;gBACxE,kEAAkE;gBAClE,0BAA0B;gBAC1B,QAAQ,EAAE,cAAc,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,EACtF,gBAAgB,QAChB,SAAS,EAAC,WAAW,EACrB,qBAAqB,EAAE,cAAc,GACrC,IACE,CACP,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/*\n SAML SSO Connection Create Wizard\n \n Adds metadata URL import and SAML-specific UX to the standard Create form.\n * Used for organizationSsoConnections and applicationSsoConnections.\n /\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { z } from 'zod';\nimport { BaseResourcesLayoutProps } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\nimport { ResourceAutomatedForm } from '~wildo-frontend-lib/components/form/automated/ResourceAutomatedForm';\nimport { ResourceLayout_Header } from '~wildo-frontend-lib/components/resources/ResourceLayout_Header';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useNavigationController } from '~wildo-frontend-lib/core/navigation/useNavigationController';\nimport { NavigationZone } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\nimport { useResourceOperationViewContext } from '~wildo-frontend-lib/core/resources/ResourceOperationViewContext';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n ResourcesConfig_OperationPathUtils,\n ResourceOperationVariantType,\n SsoProtocol,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { Input } from '~wildo-frontend-lib/components/form/controls/input';\nimport { resolveQuickCreateCreatedResourceId } from '~wildo-frontend-lib/core/resources/relationship-quick-create.frontend.utils';\n\nexport const ResourceLayoutPreset_Create_SamlWizard = ({\n resourceContext,\n}: BaseResourcesLayoutProps): React.JSX.Element \| null => {\n const { registry, doOperation } = useResourceRegistry();\n const {\n resourceContext: currentResourceContext,\n navigationZone,\n navigationInitiator,\n resourceType,\n contextualParameters,\n reportError,\n navigateToPreferredRead,\n goBackWithinZone,\n } = useResourceOperationViewContext();\n const { closeOverlay } = useNavigationController();\n const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_CREATE });\n // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n // string) and are gone rather than revived — every key here IS declared in the\n // layout's `.labels.ts`, so a component-local literal would be a second source of\n // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n // considered and rejected: for a label with no fallback it converts an ugly but\n // diagnosable `components.RESOURCES_LAYOUTS_CREATE.saml.import` into an INVISIBLE button.\n const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_CREATE);\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n const isQuickCreateFlow = Boolean(\n currentResourceContext.additionalContext?.quickCreateRequest\n ?? resourceContext.additionalContext?.quickCreateRequest,\n );\n\n const [metadataUrl, setMetadataUrl] = useState('');\n const [isImporting, setIsImporting] = useState(false);\n const [importError, setImportError] = useState<string \| null>(null);\n const [discoveredData, setDiscoveredData] = useState<Record<string, unknown> \| undefined>(undefined);\n\n const resourceConfig = useMemo(() => registry.resourceConfigurations[resourceType], [registry, resourceType]);\n\n const handleDiscover = useCallback(async () => {\n const url = metadataUrl.trim();\n if (!url) {\n setImportError(tSaml('saml.metadataUrlRequired'));\n return;\n }\n setIsImporting(true);\n setImportError(null);\n try {\n const discoverPathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n resourceIdentifier: resourceType,\n operationIdentifier: SsoConnection_Operations.DISCOVER_ENDPOINTS,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n isBulkOperation: false,\n });\n\n const result = (await doOperation(discoverPathKey, {\n contextualParameters,\n parentResourcesRequirements: currentResourceContext.parentResourcesRequirements,\n requestData: { metadataUrl: url },\n })) as {\n entityId?: string;\n ssoUrl?: string;\n sloUrl?: string;\n x509Certificates?: string[];\n nameIdFormat?: string;\n };\n\n const certs = result.x509Certificates ?? [];\n const x509CertificatePem = certs.join('\\n');\n\n setDiscoveredData({\n protocol: SsoProtocol.SAML,\n displayName: result.entityId?.split('/').pop() ?? 'SAML Connection',\n saml: {\n entityId: result.entityId,\n ssoUrl: result.ssoUrl,\n sloUrl: result.sloUrl,\n nameIdFormat: result.nameIdFormat,\n x509CertificatePem,\n },\n });\n } catch (err) {\n // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n setImportError(toUserFacingErrorMessage(err));\n } finally {\n setIsImporting(false);\n }\n }, [contextualParameters, currentResourceContext.parentResourcesRequirements, doOperation, metadataUrl, resourceType, toUserFacingErrorMessage, tSaml]);\n\n const handleSuccess = useCallback(\n (result: Record<string, unknown>) => {\n if (isQuickCreateFlow) {\n if (navigationZone === NavigationZone.OVERLAY) {\n closeOverlay();\n } else {\n goBackWithinZone();\n }\n return;\n }\n\n const createdResourceId = resolveQuickCreateCreatedResourceId({\n result,\n resourceType,\n registry,\n });\n\n if (createdResourceId) {\n const navigated = navigateToPreferredRead({\n contextResourceIdentifiers: {\n ...currentResourceContext.contextResourceIdentifiers,\n [resourceType]: createdResourceId,\n },\n fallbackToGoBack: false,\n });\n if (!navigated) {\n goBackWithinZone();\n }\n return;\n }\n goBackWithinZone();\n },\n [closeOverlay, currentResourceContext.contextResourceIdentifiers, goBackWithinZone, isQuickCreateFlow, navigateToPreferredRead, navigationZone, registry, resourceType]\n );\n\n const handleError = useCallback(\n (error: Error) => {\n reportError(error, 'Form submission failed', 'ResourceLayoutPreset_Create_SamlWizard');\n },\n [reportError]\n );\n\n if (!isReady) return null;\n\n const importButtonLabel = tSaml('saml.import');\n\n return (\n <div className=\"space-y-section\">\n <ResourceLayout_Header\n resourceContext={currentResourceContext}\n navigationZone={navigationZone}\n navigationInitiator={navigationInitiator}\n />\n\n <ContentSection className=\"max-w-2xl\">\n <ContentSectionLegend>\n {tSaml('saml.metadataImport')}\n </ContentSectionLegend>\n <p className=\"text-sm text-muted-foreground mb-field\">\n {tSaml('saml.metadataImportHelp')}\n </p>\n <div className=\"flex gap-field\" onKeyDown={(e: React.KeyboardEvent) => e.key === 'Enter' && handleDiscover()}>\n <Input\n name=\"saml-metadata-url\"\n schema={z.string()}\n type=\"url\"\n // I-6: placeholder is localizable — translators may want to use a\n // region-appropriate IdP example domain. RFC 2606 reserves\n // `idp.example.com`; the default English copy ships with that.\n placeholder={tSaml('saml.metadataUrlPlaceholder')}\n value={metadataUrl}\n onChange={(value) => setMetadataUrl(String(value))}\n className=\"flex-1\"\n />\n <Button type=\"button\" variant={ButtonVariants_Variant.OUTLINE} onClick={handleDiscover} disabled={isImporting}>\n {isImporting ? (tSaml('saml.importing')) : importButtonLabel}\n </Button>\n </div>\n {importError && (\n <p className=\"text-sm text-destructive mt-item-xs\" role=\"alert\">\n {importError}\n </p>\n )}\n {discoveredData && (\n <p className=\"text-sm text-success mt-item-xs\" role=\"status\">\n {tSaml('saml.importSuccess')}\n </p>\n )}\n </ContentSection>\n\n <ResourceAutomatedForm\n resourceContext={currentResourceContext}\n navigationZone={navigationZone}\n onSuccess={handleSuccess}\n onError={handleError}\n // Audit D5 — overlay-hosted create forms carry a Cancel that closes the\n // modal through the same path as the top-right X (parity with the\n // default create layout).\n onCancel={navigationZone === NavigationZone.OVERLAY ? () => closeOverlay() : undefined}\n showErrorSummary\n className=\"max-w-2xl\"\n defaultValuesOverride={discoveredData}\n />\n </div>\n );\n};\n"]}
1	+ {"version":3,"file":"ResourceLayoutPreset_Create_SamlWizard.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/ResourceLayoutPreset_Create_SamlWizard.tsx"],"names":[],"mappings":";AAAA;;;;;GAKG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gEAAgE,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,sBAAsB,EAAE,MAAM,8DAA8D,CAAC;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAC3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,6EAA6E,CAAC;AAElI,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,EACrD,eAAe,GACU,EAA4B,EAAE;IACvD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EACJ,eAAe,EAAE,sBAAsB,EACvC,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,uBAAuB,EACvB,gBAAgB,GACjB,GAAG,+BAA+B,EAAE,CAAC;IACtC,MAAM,EAAE,YAAY,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACnD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAC5G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,0FAA0F;IAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;IAC9E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,iBAAiB,GAAG,OAAO,CAC/B,sBAAsB,CAAC,iBAAiB,EAAE,kBAAkB;WACzD,eAAe,CAAC,iBAAiB,EAAE,kBAAkB,CACzD,CAAC;IAEF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAsC,SAAS,CAAC,CAAC;IAErG,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAE9G,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBAChF,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,kBAAkB;gBAChE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,eAAe,EAAE;gBACjD,oBAAoB;gBACpB,2BAA2B,EAAE,sBAAsB,CAAC,2BAA2B;gBAC/E,WAAW,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;aAClC,CAAC,CAMD,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;YAC5C,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5C,iBAAiB,CAAC;gBAChB,QAAQ,EAAE,WAAW,CAAC,IAAI;gBAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,iBAAiB;gBACnE,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,kBAAkB;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,cAAc,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,2BAA2B,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC,CAAC;IAExJ,MAAM,aAAa,GAAG,WAAW,CAC/B,CAAC,MAA+B,EAAE,EAAE;QAClC,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,cAAc,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC9C,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;YAC5D,MAAM;YACN,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,uBAAuB,CAAC;gBACxC,mFAAmF;gBACnF,0BAA0B,EAAE,qBAAqB,CAAC,oCAAoC,CACpF,sBAAsB,CAAC,0BAA0B,EACjD,YAAY,EACZ,iBAAiB,CAClB;gBACD,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;YACrB,CAAC;YACD,OAAO;QACT,CAAC;QACD,gBAAgB,EAAE,CAAC;IACrB,CAAC,EACD,CAAC,YAAY,EAAE,sBAAsB,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,CACxK,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,WAAW,CAAC,KAAK,EAAE,wBAAwB,EAAE,wCAAwC,CAAC,CAAC;IACzF,CAAC,EACD,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAE/C,OAAO;IACL,wGAAwG;IACxG,mGAAmG;IACnG,KAAC,sBAAsB,IAAC,KAAK,EAAE,SAAS,YACxC,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,GACxC,EAEF,MAAC,cAAc,IAAC,SAAS,EAAC,WAAW,aACnC,KAAC,oBAAoB,cAClB,KAAK,CAAC,qBAAqB,CAAC,GACR,EACvB,YAAG,SAAS,EAAC,wCAAwC,YAClD,KAAK,CAAC,yBAAyB,CAAC,GAC/B,EACJ,eAAK,SAAS,EAAC,gBAAgB,EAAC,SAAS,EAAE,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,cAAc,EAAE,aAC1G,KAAC,KAAK,IACJ,IAAI,EAAC,mBAAmB,EACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAClB,IAAI,EAAC,KAAK;oCACV,kEAAkE;oCAClE,2DAA2D;oCAC3D,+DAA+D;oCAC/D,WAAW,EAAE,KAAK,CAAC,6BAA6B,CAAC,EACjD,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAClD,SAAS,EAAC,QAAQ,GAClB,EACF,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,YAC1G,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,GACrD,IACL,EACL,WAAW,IAAI,CACd,YAAG,SAAS,EAAC,qCAAqC,EAAC,IAAI,EAAC,OAAO,YAC5D,WAAW,GACV,CACL,EACA,cAAc,IAAI,CACjB,YAAG,SAAS,EAAC,mDAAmD,EAAC,IAAI,EAAC,QAAQ,YAC3E,KAAK,CAAC,oBAAoB,CAAC,GAC1B,CACL,IACc,EAEjB,KAAC,qBAAqB,IACpB,eAAe,EAAE,sBAAsB,EACvC,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,WAAW;oBACpB,wEAAwE;oBACxE,kEAAkE;oBAClE,0BAA0B;oBAC1B,QAAQ,EAAE,cAAc,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,EACtF,gBAAgB,QAChB,SAAS,EAAC,WAAW,EACrB,qBAAqB,EAAE,cAAc,GACrC,IACE,GACmB,CAC1B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/*\n SAML SSO Connection Create Wizard\n \n Adds metadata URL import and SAML-specific UX to the standard Create form.\n * Used for organizationSsoConnections and applicationSsoConnections.\n /\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { z } from 'zod';\nimport { BaseResourcesLayoutProps } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\nimport { ResourceAutomatedForm } from '~wildo-frontend-lib/components/form/automated/ResourceAutomatedForm';\nimport { ResourceLayout_Header } from '~wildo-frontend-lib/components/resources/ResourceLayout_Header';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { frontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { useNavigationController } from '~wildo-frontend-lib/core/navigation/useNavigationController';\nimport { NavigationZone } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\nimport { useResourceOperationViewContext } from '~wildo-frontend-lib/core/resources/ResourceOperationViewContext';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n ResourcesConfig_OperationPathUtils,\n ResourceOperationVariantType,\n SsoProtocol,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { SectionLegendVoiceHost } from '~wildo-frontend-lib/components/sections/section-legend-voice';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { Input } from '~wildo-frontend-lib/components/form/controls/input';\nimport { resolveQuickCreateCreatedResourceId } from '~wildo-frontend-lib/core/resources/relationship-quick-create.frontend.utils';\n\nexport const ResourceLayoutPreset_Create_SamlWizard = ({\n resourceContext,\n}: BaseResourcesLayoutProps): React.JSX.Element \| null => {\n const { registry, doOperation } = useResourceRegistry();\n const {\n resourceContext: currentResourceContext,\n navigationZone,\n navigationInitiator,\n resourceType,\n contextualParameters,\n reportError,\n navigateToPreferredRead,\n goBackWithinZone,\n } = useResourceOperationViewContext();\n const { closeOverlay } = useNavigationController();\n const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_CREATE });\n // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n // string) and are gone rather than revived — every key here IS declared in the\n // layout's `.labels.ts`, so a component-local literal would be a second source of\n // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n // considered and rejected: for a label with no fallback it converts an ugly but\n // diagnosable `components.RESOURCES_LAYOUTS_CREATE.saml.import` into an INVISIBLE button.\n const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_CREATE);\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n const isQuickCreateFlow = Boolean(\n currentResourceContext.additionalContext?.quickCreateRequest\n ?? resourceContext.additionalContext?.quickCreateRequest,\n );\n\n const [metadataUrl, setMetadataUrl] = useState('');\n const [isImporting, setIsImporting] = useState(false);\n const [importError, setImportError] = useState<string \| null>(null);\n const [discoveredData, setDiscoveredData] = useState<Record<string, unknown> \| undefined>(undefined);\n\n const resourceConfig = useMemo(() => registry.resourceConfigurations[resourceType], [registry, resourceType]);\n\n const handleDiscover = useCallback(async () => {\n const url = metadataUrl.trim();\n if (!url) {\n setImportError(tSaml('saml.metadataUrlRequired'));\n return;\n }\n setIsImporting(true);\n setImportError(null);\n try {\n const discoverPathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n resourceIdentifier: resourceType,\n operationIdentifier: SsoConnection_Operations.DISCOVER_ENDPOINTS,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n isBulkOperation: false,\n });\n\n const result = (await doOperation(discoverPathKey, {\n contextualParameters,\n parentResourcesRequirements: currentResourceContext.parentResourcesRequirements,\n requestData: { metadataUrl: url },\n })) as {\n entityId?: string;\n ssoUrl?: string;\n sloUrl?: string;\n x509Certificates?: string[];\n nameIdFormat?: string;\n };\n\n const certs = result.x509Certificates ?? [];\n const x509CertificatePem = certs.join('\\n');\n\n setDiscoveredData({\n protocol: SsoProtocol.SAML,\n displayName: result.entityId?.split('/').pop() ?? 'SAML Connection',\n saml: {\n entityId: result.entityId,\n ssoUrl: result.ssoUrl,\n sloUrl: result.sloUrl,\n nameIdFormat: result.nameIdFormat,\n x509CertificatePem,\n },\n });\n } catch (err) {\n // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n setImportError(toUserFacingErrorMessage(err));\n } finally {\n setIsImporting(false);\n }\n }, [contextualParameters, currentResourceContext.parentResourcesRequirements, doOperation, metadataUrl, resourceType, toUserFacingErrorMessage, tSaml]);\n\n const handleSuccess = useCallback(\n (result: Record<string, unknown>) => {\n if (isQuickCreateFlow) {\n if (navigationZone === NavigationZone.OVERLAY) {\n closeOverlay();\n } else {\n goBackWithinZone();\n }\n return;\n }\n\n const createdResourceId = resolveQuickCreateCreatedResourceId({\n result,\n resourceType,\n registry,\n });\n\n if (createdResourceId) {\n const navigated = navigateToPreferredRead({\n // The created record's identifiers, built the way every create reveal builds them.\n contextResourceIdentifiers: frontendResourceUtils.buildRecordIdentifiersFromCollection(\n currentResourceContext.contextResourceIdentifiers,\n resourceType,\n createdResourceId,\n ),\n fallbackToGoBack: false,\n });\n if (!navigated) {\n goBackWithinZone();\n }\n return;\n }\n goBackWithinZone();\n },\n [closeOverlay, currentResourceContext.contextResourceIdentifiers, goBackWithinZone, isQuickCreateFlow, navigateToPreferredRead, navigationZone, registry, resourceType]\n );\n\n const handleError = useCallback(\n (error: Error) => {\n reportError(error, 'Form submission failed', 'ResourceLayoutPreset_Create_SamlWizard');\n },\n [reportError]\n );\n\n if (!isReady) return null;\n\n const importButtonLabel = tSaml('saml.import');\n\n return (\n // A create page is a FORM surface wherever it renders — including a pane opened from a record's related\n // records, inside a read subtree whose EYEBROW voice would otherwise reach this section's heading.\n <SectionLegendVoiceHost voice={undefined}>\n <div className=\"space-y-section\">\n <ResourceLayout_Header\n resourceContext={currentResourceContext}\n navigationZone={navigationZone}\n navigationInitiator={navigationInitiator}\n />\n\n <ContentSection className=\"max-w-2xl\">\n <ContentSectionLegend>\n {tSaml('saml.metadataImport')}\n </ContentSectionLegend>\n <p className=\"text-sm text-muted-foreground mb-field\">\n {tSaml('saml.metadataImportHelp')}\n </p>\n <div className=\"flex gap-field\" onKeyDown={(e: React.KeyboardEvent) => e.key === 'Enter' && handleDiscover()}>\n <Input\n name=\"saml-metadata-url\"\n schema={z.string()}\n type=\"url\"\n // I-6: placeholder is localizable — translators may want to use a\n // region-appropriate IdP example domain. RFC 2606 reserves\n // `idp.example.com`; the default English copy ships with that.\n placeholder={tSaml('saml.metadataUrlPlaceholder')}\n value={metadataUrl}\n onChange={(value) => setMetadataUrl(String(value))}\n className=\"flex-1\"\n />\n <Button type=\"button\" variant={ButtonVariants_Variant.OUTLINE} onClick={handleDiscover} disabled={isImporting}>\n {isImporting ? (tSaml('saml.importing')) : importButtonLabel}\n </Button>\n </div>\n {importError && (\n <p className=\"text-sm text-destructive mt-item-xs\" role=\"alert\">\n {importError}\n </p>\n )}\n {discoveredData && (\n <p className=\"text-sm text-success-subtle-foreground mt-item-xs\" role=\"status\">\n {tSaml('saml.importSuccess')}\n </p>\n )}\n </ContentSection>\n\n <ResourceAutomatedForm\n resourceContext={currentResourceContext}\n navigationZone={navigationZone}\n onSuccess={handleSuccess}\n onError={handleError}\n // Audit D5 — overlay-hosted create forms carry a Cancel that closes the\n // modal through the same path as the top-right X (parity with the\n // default create layout).\n onCancel={navigationZone === NavigationZone.OVERLAY ? () => closeOverlay() : undefined}\n showErrorSummary\n className=\"max-w-2xl\"\n defaultValuesOverride={discoveredData}\n />\n </div>\n </SectionLegendVoiceHost>\n );\n};\n"]}

package/dist/esm/components/auth/admin-config/SsoConnectionSamlReadSection.js CHANGED Viewed

@@ -95,12 +95,12 @@ export function SsoConnectionSamlReadSection({ resourceContext, }) {
                                 const certStatusClass = !cert.valid || daysRemaining < 0 || daysRemaining < 7
                                     ? 'text-destructive'
                                     : daysRemaining < 30
-                                        ? 'text-warning'
+                                        ? 'text-warning-subtle-foreground'
                                         : '';
                                 const fingerprintAbbr = cert.fingerprint
                                     ? cert.fingerprint.slice(0, 12) + (cert.fingerprint.length > 12 ? '…' : '')
                                     : null;
-                                return (_jsxs("div", { className: `pl-item-sm ${certStatusClass}`, children: [_jsxs("p", { children: [cert.valid ? '✓' : '✗', " Certificate ", i + 1, ":", ' ', cert.valid ? 'Valid' : 'Invalid', " \u2014 expires", ' ', cert.expiresAt?.slice(0, 10) ?? 'N/A', " (", cert.daysRemaining, " days)", fingerprintAbbr != null && (_jsxs("span", { className: "text-muted-foreground text-xs ml-1", children: ["(", fingerprintAbbr, ")"] }))] }), cert.warnings?.length > 0 && (_jsx("p", { className: "text-warning text-xs", children: cert.warnings.join('; ') }))] }, i));
-                            }), testResult.errors?.map((e, i) => (_jsx("p", { className: "text-destructive", children: e }, i))), testResult.warnings?.map((w, i) => (_jsx("p", { className: "text-warning", children: w }, i))), _jsxs("p", { className: "font-medium mt-item-sm", children: ["Overall: ", testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'] })] })] }))] }));
+                                return (_jsxs("div", { className: `pl-item-sm ${certStatusClass}`, children: [_jsxs("p", { children: [cert.valid ? '✓' : '✗', " Certificate ", i + 1, ":", ' ', cert.valid ? 'Valid' : 'Invalid', " \u2014 expires", ' ', cert.expiresAt?.slice(0, 10) ?? 'N/A', " (", cert.daysRemaining, " days)", fingerprintAbbr != null && (_jsxs("span", { className: "text-muted-foreground text-xs ml-1", children: ["(", fingerprintAbbr, ")"] }))] }), cert.warnings?.length > 0 && (_jsx("p", { className: "text-warning-subtle-foreground text-xs", children: cert.warnings.join('; ') }))] }, i));
+                            }), testResult.errors?.map((e, i) => (_jsx("p", { className: "text-destructive", children: e }, i))), testResult.warnings?.map((w, i) => (_jsx("p", { className: "text-warning-subtle-foreground", children: w }, i))), _jsxs("p", { className: "font-medium mt-item-sm", children: ["Overall: ", testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'] })] })] }))] }));
 }
 //# sourceMappingURL=SsoConnectionSamlReadSection.js.map

package/dist/esm/components/auth/admin-config/SsoConnectionSamlReadSection.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"SsoConnectionSamlReadSection.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":";AAAA;;;GAGG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EACL,aAAa,EACb,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAC1H,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AA4BtG,MAAM,UAAU,4BAA4B,CAAC,EAC3C,eAAe,GACmB;IAClC,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,GAAG,eAAe,CAAC;IACrE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC1G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,wFAAwF;IACxF,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;IAC5E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,0BAAyF,CAAC;IACtG,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,MAAM,SAAS,GAAG,KAAK,IAAI,IAAI;QAC7B,CAAC,CAAC,aAAa,CAAC,YAAY;QAC5B,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,GAAG,IAAI,uBAAuB,SAAS,IAAI,OAAO,EAAE,CAAC;IAC9D,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzB,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAClD,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBACxE,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,eAAe;gBAC7D,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,yBAAyB,CAC1E,0BAA0B,EAC1B,QAAQ,CACT,CAAC;YAEF,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;gBACpC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE;gBACzC,oBAAoB;gBACpB,2BAA2B,EAAE,eAAe,CAAC,2BAA2B;gBACxE,WAAW,EAAE,EAAE,YAAY,EAAE;aAC9B,CAAC,CAAe,CAAC;YAElB,aAAa,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,aAAa,CAAC;gBACZ,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC,2BAA2B,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElJ,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAEzD,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,MAAC,cAAc,eACb,KAAC,oBAAoB,cAClB,KAAK,CAAC,gBAAgB,CAAC,GACH,EACvB,eAAK,SAAS,EAAC,0BAA0B,aACtC,WAAW,IAAI,CACd,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,kBACtD,YAAG,IAAI,EAAE,WAAW,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,YAC5D,eAAe,GACd,GACG,CACV,EACD,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,SAAS,YAElB,SAAS;oCACR,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oCACzB,CAAC,CAAC,SAAS,GACN,IACL,IACS,EAEhB,UAAU,IAAI,CACb,MAAC,cAAc,IACb,SAAS,EACP,UAAU,CAAC,aAAa,KAAK,MAAM;oBACjC,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;wBACtC,CAAC,CAAC,gCAAgC;wBAClC,CAAC,CAAC,wCAAwC,aAGhD,KAAC,oBAAoB,cAClB,KAAK,CAAC,kBAAkB,CAAC,GACL,EACvB,eAAK,SAAS,EAAC,yBAAyB,aACrC,UAAU,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAC9C,wBACG,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,qBAAiB,GAAG,EAC7D,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,IAC9D,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAgB,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IACrG,CACL,EACA,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gCACxC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;gCAC9C,MAAM,eAAe,GACnB,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC;oCACnD,CAAC,CAAC,kBAAkB;oCACpB,CAAC,CAAC,aAAa,GAAG,EAAE;wCAClB,CAAC,CAAC,cAAc;wCAChB,CAAC,CAAC,EAAE,CAAC;gCACX,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW;oCACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oCAC3E,CAAC,CAAC,IAAI,CAAC;gCACT,OAAO,CACL,eAAa,SAAS,EAAE,cAAc,eAAe,EAAE,aACrD,wBACG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,mBAAe,CAAC,GAAG,CAAC,OAAG,GAAG,EAChD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,qBAAY,GAAG,EAC/C,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAI,IAAI,CAAC,aAAa,YAC3D,eAAe,IAAI,IAAI,IAAI,CAC1B,gBAAM,SAAS,EAAC,oCAAoC,kBAChD,eAAe,SACZ,CACR,IACC,EACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,IAAI,CAC5B,YAAG,SAAS,EAAC,sBAAsB,YAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GACvB,CACL,KAfO,CAAC,CAgBL,CACP,CAAC;4BACJ,CAAC,CAAC,EACD,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAChC,YAAW,SAAS,EAAC,kBAAkB,YACpC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACD,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAClC,YAAW,SAAS,EAAC,cAAc,YAChC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACF,aAAG,SAAS,EAAC,wBAAwB,0BACzB,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,IACxH,IACA,IACS,CAClB,IACG,CACP,CAAC;AACJ,CAAC","sourcesContent":["/*\n SAML-specific section for SSO Connection Read view.\n * Shows SP metadata download, certificate expiry, and Test Connection results.\n /\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport {\n AuthScopeType,\n ResourcesConfig_OperationPathUtils,\n ResourceOperationVariantType,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { frontendResourceUtils, FrontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport type { FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\n\ninterface SsoConnectionSamlReadSectionProps {\n resourceContext: FrontendResourceOperationContext;\n}\n\ninterface CertificateResult {\n index: number;\n valid: boolean;\n expiresAt: string;\n daysRemaining: number;\n fingerprint: string;\n warnings: string[];\n}\n\ninterface TestResult {\n overallStatus: 'pass' \| 'warning' \| 'fail';\n entityIdConfigured?: boolean;\n ssoUrlReachable?: boolean;\n ssoUrlStatus?: number;\n sloUrlReachable?: boolean;\n sloUrlStatus?: number;\n spMetadataValid?: boolean;\n certificates?: CertificateResult[];\n errors?: string[];\n warnings?: string[];\n}\n\nexport function SsoConnectionSamlReadSection({\n resourceContext,\n}: SsoConnectionSamlReadSectionProps): React.JSX.Element \| null {\n const { resourceType, contextResourceIdentifiers } = resourceContext;\n const { registry, doOperation } = useResourceRegistry();\n const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_READ });\n // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n // string) and are gone rather than revived — every key here IS declared in the\n // layout's `.labels.ts`, so a component-local literal would be a second source of\n // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n // considered and rejected: for a label with no fallback it converts an ugly but\n // diagnosable `components.RESOURCES_LAYOUTS_READ.saml.import` into an INVISIBLE button.\n const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_READ);\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n const [testResult, setTestResult] = useState<TestResult \| null>(null);\n const [isTesting, setIsTesting] = useState(false);\n\n const ctx = contextResourceIdentifiers as Record<string, string \| { resourceId: string } \| undefined>;\n const orgId = ctx.organizations ? frontendResourceUtils.getResourceId(ctx.organizations) : undefined;\n const appId = ctx.applications ? frontendResourceUtils.getResourceId(ctx.applications) : undefined;\n const scopeType = orgId != null\n ? AuthScopeType.ORGANIZATION\n : AuthScopeType.APPLICATION;\n const scopeId = String(orgId ?? appId ?? '');\n\n const metadataUrl = useMemo(() => {\n if (!scopeId) return null;\n const base = envLoader.getApiUrl();\n return `${base}/auth/saml/metadata/${scopeType}/${scopeId}`;\n }, [scopeType, scopeId]);\n\n const handleTestConnection = useCallback(async () => {\n setIsTesting(true);\n setTestResult(null);\n try {\n const pathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n resourceIdentifier: resourceType,\n operationIdentifier: SsoConnection_Operations.TEST_CONNECTION,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n isBulkOperation: false,\n });\n\n const contextualParameters = FrontendResourceUtils.buildContextualParameters(\n contextResourceIdentifiers,\n registry\n );\n\n const connectionId = ctx[resourceType]\n ? frontendResourceUtils.getResourceId(ctx[resourceType]!)\n : '';\n const result = (await doOperation(pathKey, {\n contextualParameters,\n parentResourcesRequirements: resourceContext.parentResourcesRequirements,\n requestData: { connectionId },\n })) as TestResult;\n\n setTestResult(result);\n } catch (err) {\n // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n setTestResult({\n overallStatus: 'fail',\n errors: [toUserFacingErrorMessage(err)],\n });\n } finally {\n setIsTesting(false);\n }\n }, [resourceType, resourceContext.parentResourcesRequirements, contextResourceIdentifiers, registry, doOperation, ctx, toUserFacingErrorMessage]);\n\n if (!isReady) return null;\n\n const testLabel = tSaml('saml.testConnection');\n const spMetadataLabel = tSaml('saml.downloadSpMetadata');\n\n return (\n <div className=\"space-y-section max-w-4xl\">\n <ContentSection>\n <ContentSectionLegend>\n {tSaml('saml.samlTools')}\n </ContentSectionLegend>\n <div className=\"flex flex-wrap gap-field\">\n {metadataUrl && (\n <Button variant={ButtonVariants_Variant.OUTLINE} asChild>\n <a href={metadataUrl} target=\"_blank\" rel=\"noopener noreferrer\">\n {spMetadataLabel}\n </a>\n </Button>\n )}\n <Button\n type=\"button\"\n variant={ButtonVariants_Variant.OUTLINE}\n onClick={handleTestConnection}\n disabled={isTesting}\n >\n {isTesting\n ? (tSaml('saml.testing'))\n : testLabel}\n </Button>\n </div>\n </ContentSection>\n\n {testResult && (\n <ContentSection\n className={\n testResult.overallStatus === 'pass'\n ? 'border-success/50 bg-success/5'\n : testResult.overallStatus === 'warning'\n ? 'border-warning/50 bg-warning/5'\n : 'border-destructive/50 bg-destructive/5'\n }\n >\n <ContentSectionLegend>\n {tSaml('saml.testResults')}\n </ContentSectionLegend>\n <div className=\"space-y-item-sm text-sm\">\n {testResult.entityIdConfigured !== undefined && (\n <p>\n {testResult.entityIdConfigured ? '✓' : '✗'} IdP Entity ID:{' '}\n {testResult.entityIdConfigured ? 'Configured' : 'Not configured'}\n </p>\n )}\n {testResult.ssoUrlReachable !== undefined && (\n <p>\n {testResult.ssoUrlReachable ? '✓' : '✗'} SSO URL:{' '}\n {testResult.ssoUrlReachable\n ? `Reachable (${testResult.ssoUrlStatus ?? 'OK'})`\n : 'Not reachable'}\n </p>\n )}\n {testResult.sloUrlReachable !== undefined && (\n <p>\n {testResult.sloUrlReachable ? '✓' : '✗'} SLO URL:{' '}\n {testResult.sloUrlReachable\n ? `Reachable (${testResult.sloUrlStatus ?? 'OK'})`\n : 'Not reachable'}\n </p>\n )}\n {testResult.spMetadataValid !== undefined && (\n <p>\n {testResult.spMetadataValid ? '✓' : '✗'} SP Metadata: {testResult.spMetadataValid ? 'Valid' : 'Invalid'}\n </p>\n )}\n {testResult.certificates?.map((cert, i) => {\n const daysRemaining = cert.daysRemaining ?? 0;\n const certStatusClass =\n !cert.valid \|\| daysRemaining < 0 \|\| daysRemaining < 7\n ? 'text-destructive'\n : daysRemaining < 30\n ? 'text-warning'\n : '';\n const fingerprintAbbr = cert.fingerprint\n ? cert.fingerprint.slice(0, 12) + (cert.fingerprint.length > 12 ? '…' : '')\n : null;\n return (\n <div key={i} className={`pl-item-sm ${certStatusClass}`}>\n <p>\n {cert.valid ? '✓' : '✗'} Certificate {i + 1}:{' '}\n {cert.valid ? 'Valid' : 'Invalid'} — expires{' '}\n {cert.expiresAt?.slice(0, 10) ?? 'N/A'} ({cert.daysRemaining} days)\n {fingerprintAbbr != null && (\n <span className=\"text-muted-foreground text-xs ml-1\">\n ({fingerprintAbbr})\n </span>\n )}\n </p>\n {cert.warnings?.length > 0 && (\n <p className=\"text-warning text-xs\">\n {cert.warnings.join('; ')}\n </p>\n )}\n </div>\n );\n })}\n {testResult.errors?.map((e, i) => (\n <p key={i} className=\"text-destructive\">\n {e}\n </p>\n ))}\n {testResult.warnings?.map((w, i) => (\n <p key={i} className=\"text-warning\">\n {w}\n </p>\n ))}\n <p className=\"font-medium mt-item-sm\">\n Overall: {testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'}\n </p>\n </div>\n </ContentSection>\n )}\n </div>\n );\n}\n"]}
1	+ {"version":3,"file":"SsoConnectionSamlReadSection.js","sourceRoot":"","sources":["../../../../../../src/components/auth/admin-config/SsoConnectionSamlReadSection.tsx"],"names":[],"mappings":";AAAA;;;GAGG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EACL,aAAa,EACb,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAC1H,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/G,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AA4BtG,MAAM,UAAU,4BAA4B,CAAC,EAC3C,eAAe,GACmB;IAClC,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,GAAG,eAAe,CAAC;IACrE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC1G,+EAA+E;IAC/E,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,gFAAgF;IAChF,wFAAwF;IACxF,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;IAC5E,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,0BAAyF,CAAC;IACtG,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,MAAM,SAAS,GAAG,KAAK,IAAI,IAAI;QAC7B,CAAC,CAAC,aAAa,CAAC,YAAY;QAC5B,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,GAAG,IAAI,uBAAuB,SAAS,IAAI,OAAO,EAAE,CAAC;IAC9D,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzB,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAClD,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kCAAkC,CAAC,sBAAsB,CAAC;gBACxE,kBAAkB,EAAE,YAAY;gBAChC,mBAAmB,EAAE,wBAAwB,CAAC,eAAe;gBAC7D,WAAW,EAAE,4BAA4B,CAAC,QAAQ;gBAClD,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,yBAAyB,CAC1E,0BAA0B,EAC1B,QAAQ,CACT,CAAC;YAEF,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;gBACpC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE;gBACzC,oBAAoB;gBACpB,2BAA2B,EAAE,eAAe,CAAC,2BAA2B;gBACxE,WAAW,EAAE,EAAE,YAAY,EAAE;aAC9B,CAAC,CAAe,CAAC;YAElB,aAAa,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gGAAgG;YAChG,aAAa,CAAC;gBACZ,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC,2BAA2B,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElJ,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAEzD,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,MAAC,cAAc,eACb,KAAC,oBAAoB,cAClB,KAAK,CAAC,gBAAgB,CAAC,GACH,EACvB,eAAK,SAAS,EAAC,0BAA0B,aACtC,WAAW,IAAI,CACd,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,kBACtD,YAAG,IAAI,EAAE,WAAW,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,YAC5D,eAAe,GACd,GACG,CACV,EACD,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,SAAS,YAElB,SAAS;oCACR,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oCACzB,CAAC,CAAC,SAAS,GACN,IACL,IACS,EAEhB,UAAU,IAAI,CACb,MAAC,cAAc,IACb,SAAS,EACP,UAAU,CAAC,aAAa,KAAK,MAAM;oBACjC,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;wBACtC,CAAC,CAAC,gCAAgC;wBAClC,CAAC,CAAC,wCAAwC,aAGhD,KAAC,oBAAoB,cAClB,KAAK,CAAC,kBAAkB,CAAC,GACL,EACvB,eAAK,SAAS,EAAC,yBAAyB,aACrC,UAAU,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAC9C,wBACG,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,qBAAiB,GAAG,EAC7D,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,IAC9D,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAW,GAAG,EACpD,UAAU,CAAC,eAAe;wCACzB,CAAC,CAAC,cAAc,UAAU,CAAC,YAAY,IAAI,IAAI,GAAG;wCAClD,CAAC,CAAC,eAAe,IACjB,CACL,EACA,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAC3C,wBACG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAgB,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IACrG,CACL,EACA,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gCACxC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;gCAC9C,MAAM,eAAe,GACnB,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC;oCACnD,CAAC,CAAC,kBAAkB;oCACpB,CAAC,CAAC,aAAa,GAAG,EAAE;wCAClB,CAAC,CAAC,gCAAgC;wCAClC,CAAC,CAAC,EAAE,CAAC;gCACX,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW;oCACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oCAC3E,CAAC,CAAC,IAAI,CAAC;gCACT,OAAO,CACL,eAAa,SAAS,EAAE,cAAc,eAAe,EAAE,aACrD,wBACG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,mBAAe,CAAC,GAAG,CAAC,OAAG,GAAG,EAChD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,qBAAY,GAAG,EAC/C,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAI,IAAI,CAAC,aAAa,YAC3D,eAAe,IAAI,IAAI,IAAI,CAC1B,gBAAM,SAAS,EAAC,oCAAoC,kBAChD,eAAe,SACZ,CACR,IACC,EACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,IAAI,CAC5B,YAAG,SAAS,EAAC,wCAAwC,YAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GACvB,CACL,KAfO,CAAC,CAgBL,CACP,CAAC;4BACJ,CAAC,CAAC,EACD,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAChC,YAAW,SAAS,EAAC,kBAAkB,YACpC,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACD,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAClC,YAAW,SAAS,EAAC,gCAAgC,YAClD,CAAC,IADI,CAAC,CAEL,CACL,CAAC,EACF,aAAG,SAAS,EAAC,wBAAwB,0BACzB,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,IACxH,IACA,IACS,CAClB,IACG,CACP,CAAC;AACJ,CAAC","sourcesContent":["/*\n SAML-specific section for SSO Connection Read view.\n * Shows SP metadata download, certificate expiry, and Test Connection results.\n /\n\nimport React, { useCallback, useMemo, useState } from 'react';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport {\n AuthScopeType,\n ResourcesConfig_OperationPathUtils,\n ResourceOperationVariantType,\n} from '@wildo-ai/saas-models';\nimport { SsoConnection_Operations } from '@wildo-ai/saas-models';\nimport { frontendResourceUtils, FrontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ContentSection, ContentSectionLegend } from '~wildo-frontend-lib/components/sections/content-section';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport type { FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\n\ninterface SsoConnectionSamlReadSectionProps {\n resourceContext: FrontendResourceOperationContext;\n}\n\ninterface CertificateResult {\n index: number;\n valid: boolean;\n expiresAt: string;\n daysRemaining: number;\n fingerprint: string;\n warnings: string[];\n}\n\ninterface TestResult {\n overallStatus: 'pass' \| 'warning' \| 'fail';\n entityIdConfigured?: boolean;\n ssoUrlReachable?: boolean;\n ssoUrlStatus?: number;\n sloUrlReachable?: boolean;\n sloUrlStatus?: number;\n spMetadataValid?: boolean;\n certificates?: CertificateResult[];\n errors?: string[];\n warnings?: string[];\n}\n\nexport function SsoConnectionSamlReadSection({\n resourceContext,\n}: SsoConnectionSamlReadSectionProps): React.JSX.Element \| null {\n const { resourceType, contextResourceIdentifiers } = resourceContext;\n const { registry, doOperation } = useResourceRegistry();\n const { makeTrComponent, isReady } = useI18n({ component: FrontendComponentType.RESOURCES_LAYOUTS_READ });\n // These labels are rendered DIRECTLY, with no fallback, so this resolver keeps\n // `makeTrComponent`'s key-path-on-miss behaviour ON PURPOSE. The call sites used to\n // carry `?? 'Import'`-style literals; those were DEAD (a key path is a non-empty\n // string) and are gone rather than revived — every key here IS declared in the\n // layout's `.labels.ts`, so a component-local literal would be a second source of\n // copy the labelling pipeline cannot translate. Normalizing to `''` instead was\n // considered and rejected: for a label with no fallback it converts an ugly but\n // diagnosable `components.RESOURCES_LAYOUTS_READ.saml.import` into an INVISIBLE button.\n const tSaml = makeTrComponent(FrontendComponentType.RESOURCES_LAYOUTS_READ);\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n const [testResult, setTestResult] = useState<TestResult \| null>(null);\n const [isTesting, setIsTesting] = useState(false);\n\n const ctx = contextResourceIdentifiers as Record<string, string \| { resourceId: string } \| undefined>;\n const orgId = ctx.organizations ? frontendResourceUtils.getResourceId(ctx.organizations) : undefined;\n const appId = ctx.applications ? frontendResourceUtils.getResourceId(ctx.applications) : undefined;\n const scopeType = orgId != null\n ? AuthScopeType.ORGANIZATION\n : AuthScopeType.APPLICATION;\n const scopeId = String(orgId ?? appId ?? '');\n\n const metadataUrl = useMemo(() => {\n if (!scopeId) return null;\n const base = envLoader.getApiUrl();\n return `${base}/auth/saml/metadata/${scopeType}/${scopeId}`;\n }, [scopeType, scopeId]);\n\n const handleTestConnection = useCallback(async () => {\n setIsTesting(true);\n setTestResult(null);\n try {\n const pathKey = ResourcesConfig_OperationPathUtils.createOperationPathKey({\n resourceIdentifier: resourceType,\n operationIdentifier: SsoConnection_Operations.TEST_CONNECTION,\n variantType: ResourceOperationVariantType.API_CALL,\n isOperationDefault: true,\n isBulkOperation: false,\n });\n\n const contextualParameters = FrontendResourceUtils.buildContextualParameters(\n contextResourceIdentifiers,\n registry\n );\n\n const connectionId = ctx[resourceType]\n ? frontendResourceUtils.getResourceId(ctx[resourceType]!)\n : '';\n const result = (await doOperation(pathKey, {\n contextualParameters,\n parentResourcesRequirements: resourceContext.parentResourcesRequirements,\n requestData: { connectionId },\n })) as TestResult;\n\n setTestResult(result);\n } catch (err) {\n // `extractErrorInfo(err).message` is the backend's i18n REFERENCE, not a sentence — resolve it.\n setTestResult({\n overallStatus: 'fail',\n errors: [toUserFacingErrorMessage(err)],\n });\n } finally {\n setIsTesting(false);\n }\n }, [resourceType, resourceContext.parentResourcesRequirements, contextResourceIdentifiers, registry, doOperation, ctx, toUserFacingErrorMessage]);\n\n if (!isReady) return null;\n\n const testLabel = tSaml('saml.testConnection');\n const spMetadataLabel = tSaml('saml.downloadSpMetadata');\n\n return (\n <div className=\"space-y-section max-w-4xl\">\n <ContentSection>\n <ContentSectionLegend>\n {tSaml('saml.samlTools')}\n </ContentSectionLegend>\n <div className=\"flex flex-wrap gap-field\">\n {metadataUrl && (\n <Button variant={ButtonVariants_Variant.OUTLINE} asChild>\n <a href={metadataUrl} target=\"_blank\" rel=\"noopener noreferrer\">\n {spMetadataLabel}\n </a>\n </Button>\n )}\n <Button\n type=\"button\"\n variant={ButtonVariants_Variant.OUTLINE}\n onClick={handleTestConnection}\n disabled={isTesting}\n >\n {isTesting\n ? (tSaml('saml.testing'))\n : testLabel}\n </Button>\n </div>\n </ContentSection>\n\n {testResult && (\n <ContentSection\n className={\n testResult.overallStatus === 'pass'\n ? 'border-success/50 bg-success/5'\n : testResult.overallStatus === 'warning'\n ? 'border-warning/50 bg-warning/5'\n : 'border-destructive/50 bg-destructive/5'\n }\n >\n <ContentSectionLegend>\n {tSaml('saml.testResults')}\n </ContentSectionLegend>\n <div className=\"space-y-item-sm text-sm\">\n {testResult.entityIdConfigured !== undefined && (\n <p>\n {testResult.entityIdConfigured ? '✓' : '✗'} IdP Entity ID:{' '}\n {testResult.entityIdConfigured ? 'Configured' : 'Not configured'}\n </p>\n )}\n {testResult.ssoUrlReachable !== undefined && (\n <p>\n {testResult.ssoUrlReachable ? '✓' : '✗'} SSO URL:{' '}\n {testResult.ssoUrlReachable\n ? `Reachable (${testResult.ssoUrlStatus ?? 'OK'})`\n : 'Not reachable'}\n </p>\n )}\n {testResult.sloUrlReachable !== undefined && (\n <p>\n {testResult.sloUrlReachable ? '✓' : '✗'} SLO URL:{' '}\n {testResult.sloUrlReachable\n ? `Reachable (${testResult.sloUrlStatus ?? 'OK'})`\n : 'Not reachable'}\n </p>\n )}\n {testResult.spMetadataValid !== undefined && (\n <p>\n {testResult.spMetadataValid ? '✓' : '✗'} SP Metadata: {testResult.spMetadataValid ? 'Valid' : 'Invalid'}\n </p>\n )}\n {testResult.certificates?.map((cert, i) => {\n const daysRemaining = cert.daysRemaining ?? 0;\n const certStatusClass =\n !cert.valid \|\| daysRemaining < 0 \|\| daysRemaining < 7\n ? 'text-destructive'\n : daysRemaining < 30\n ? 'text-warning-subtle-foreground'\n : '';\n const fingerprintAbbr = cert.fingerprint\n ? cert.fingerprint.slice(0, 12) + (cert.fingerprint.length > 12 ? '…' : '')\n : null;\n return (\n <div key={i} className={`pl-item-sm ${certStatusClass}`}>\n <p>\n {cert.valid ? '✓' : '✗'} Certificate {i + 1}:{' '}\n {cert.valid ? 'Valid' : 'Invalid'} — expires{' '}\n {cert.expiresAt?.slice(0, 10) ?? 'N/A'} ({cert.daysRemaining} days)\n {fingerprintAbbr != null && (\n <span className=\"text-muted-foreground text-xs ml-1\">\n ({fingerprintAbbr})\n </span>\n )}\n </p>\n {cert.warnings?.length > 0 && (\n <p className=\"text-warning-subtle-foreground text-xs\">\n {cert.warnings.join('; ')}\n </p>\n )}\n </div>\n );\n })}\n {testResult.errors?.map((e, i) => (\n <p key={i} className=\"text-destructive\">\n {e}\n </p>\n ))}\n {testResult.warnings?.map((w, i) => (\n <p key={i} className=\"text-warning-subtle-foreground\">\n {w}\n </p>\n ))}\n <p className=\"font-medium mt-item-sm\">\n Overall: {testResult.overallStatus === 'pass' ? '✓ Pass' : testResult.overallStatus === 'warning' ? '⚠ Warning' : '✗ Fail'}\n </p>\n </div>\n </ContentSection>\n )}\n </div>\n );\n}\n"]}

package/dist/esm/components/auth/enrollment/PasskeyEnrollmentMethod.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"PasskeyEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAUrD,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAMrK,QAAA,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,~~CAmErE~~,CAAC;AAGF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}
1	+ {"version":3,"file":"PasskeyEnrollmentMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAUrD,OAAO,EAAqC,KAAK,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAMrK,QAAA,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAkErE,CAAC;AAGF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/esm/components/auth/enrollment/PasskeyEnrollmentMethod.js CHANGED Viewed

@@ -22,7 +22,7 @@ const PasskeyEnrollmentMethod = ({ sessionId, onComplete, onError, isLoading, t
         setError(null);
         try {
             const headers = buildSessionHeaders(sessionId);
-            const options = await getManualCallsHttpClient().passkeyRegisterOptions(undefined, headers ? { headers } : undefined);
+            const options = await getManualCallsHttpClient().passkeyRegisterOptions(headers ? { headers } : undefined);
             const credential = await startRegistration({ optionsJSON: options });
             const result = await getManualCallsHttpClient().passkeyRegisterVerify({ response: credential }, headers ? { headers } : undefined);
             onComplete(result.enrollmentSession);

package/dist/esm/components/auth/enrollment/PasskeyEnrollmentMethod.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"PasskeyEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,+CAA+C,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AAErK,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,uBAAuB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7H,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAElF,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE,CAAC,sBAAsB,CACrE,~~SAAS,EACT,~~OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CACmB,CAAC;YAEvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CACnE,EAAE,QAAQ,EAAE,UAAU,EAAE,EACxB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YAEF,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,iBAAiB;gBACvC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC;gBAC9C,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,cAAK,SAAS,EAAC,cAAc,YAC3B,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAAoB,GAC/E,GACJ,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAC1C,EAEN,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,MAAM,IACL,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,WAAW,IAAI,SAAS,YAEjC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,GAC3G,IACL,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { Button } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> \| undefined {\n return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\nconst PasskeyEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n const [registering, setRegistering] = useState(false);\n const [error, setError] = useState<string \| null>(null);\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n\n const handleRegister = useCallback(async () => {\n setRegistering(true);\n setError(null);\n try {\n const headers = buildSessionHeaders(sessionId);\n const options = await getManualCallsHttpClient().passkeyRegisterOptions(\n ~~undefined,\n~~ headers ? { headers } : undefined,\n ) as unknown as PublicKeyCredentialCreationOptionsJSON;\n\n const credential = await startRegistration({ optionsJSON: options });\n\n const result = await getManualCallsHttpClient().passkeyRegisterVerify(\n { response: credential },\n headers ? { headers } : undefined,\n );\n\n onComplete(result.enrollmentSession);\n } catch (e: any) {\n const msg = e?.name === 'NotAllowedError'\n ? t(EnrollmentRequiredLabel.PASSKEY_CANCELLED)\n : toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));\n setError(msg);\n onError(msg);\n } finally {\n setRegistering(false);\n }\n }, [sessionId, onComplete, onError, t, toUserFacingErrorMessage]);\n\n if (!isSupported) {\n return (\n <div className=\"space-y-item\">\n <Alert>\n <AlertDescription>{t(EnrollmentRequiredLabel.PASSKEY_UNSUPPORTED)}</AlertDescription>\n </Alert>\n </div>\n );\n }\n\n return (\n <div className=\"space-y-item\">\n <Text className=\"text-sm text-muted-foreground text-center\">\n {t(EnrollmentRequiredLabel.PASSKEY_DESCRIPTION)}\n </Text>\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n\n <Button\n className=\"w-full\"\n onClick={handleRegister}\n disabled={registering \|\| isLoading}\n >\n {registering ? t(EnrollmentRequiredLabel.PASSKEY_REGISTERING) : t(EnrollmentRequiredLabel.PASSKEY_REGISTER_BUTTON)}\n </Button>\n </div>\n );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.PASSKEY, PasskeyEnrollmentMethod);\nexport { PasskeyEnrollmentMethod };\n"]}
1	+ {"version":3,"file":"PasskeyEnrollmentMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/enrollment/PasskeyEnrollmentMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,+CAA+C,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,iCAAiC,EAAuC,MAAM,6EAA6E,CAAC;AAErK,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,uBAAuB,GAA6C,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;IAC7H,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAElF,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE,CAAC,sBAAsB,CACrE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CACmB,CAAC;YAEvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CACnE,EAAE,QAAQ,EAAE,UAAU,EAAE,EACxB,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAClC,CAAC;YAEF,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,iBAAiB;gBACvC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC;gBAC9C,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,cAAK,SAAS,EAAC,cAAc,YAC3B,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAAoB,GAC/E,GACJ,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAC1C,EAEN,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,MAAM,IACL,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,WAAW,IAAI,SAAS,YAEjC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,GAC3G,IACL,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,iCAAiC,CAAC,UAAU,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useState } from 'react';\nimport { EnrollmentRequiredLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { Button } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { registerEnrollmentMethodComponent, type EnrollmentMethodComponentProps } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\n\nfunction buildSessionHeaders(sessionId?: string): Record<string, string> \| undefined {\n return sessionId ? { 'X-Auth-Session-Id': sessionId } : undefined;\n}\n\nconst PasskeyEnrollmentMethod: React.FC<EnrollmentMethodComponentProps> = ({ sessionId, onComplete, onError, isLoading, t }) => {\n const [registering, setRegistering] = useState(false);\n const [error, setError] = useState<string \| null>(null);\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n\n const handleRegister = useCallback(async () => {\n setRegistering(true);\n setError(null);\n try {\n const headers = buildSessionHeaders(sessionId);\n const options = await getManualCallsHttpClient().passkeyRegisterOptions(\n headers ? { headers } : undefined,\n ) as unknown as PublicKeyCredentialCreationOptionsJSON;\n\n const credential = await startRegistration({ optionsJSON: options });\n\n const result = await getManualCallsHttpClient().passkeyRegisterVerify(\n { response: credential },\n headers ? { headers } : undefined,\n );\n\n onComplete(result.enrollmentSession);\n } catch (e: any) {\n const msg = e?.name === 'NotAllowedError'\n ? t(EnrollmentRequiredLabel.PASSKEY_CANCELLED)\n : toUserFacingErrorMessage(e, t(EnrollmentRequiredLabel.ENROLL_ERROR));\n setError(msg);\n onError(msg);\n } finally {\n setRegistering(false);\n }\n }, [sessionId, onComplete, onError, t, toUserFacingErrorMessage]);\n\n if (!isSupported) {\n return (\n <div className=\"space-y-item\">\n <Alert>\n <AlertDescription>{t(EnrollmentRequiredLabel.PASSKEY_UNSUPPORTED)}</AlertDescription>\n </Alert>\n </div>\n );\n }\n\n return (\n <div className=\"space-y-item\">\n <Text className=\"text-sm text-muted-foreground text-center\">\n {t(EnrollmentRequiredLabel.PASSKEY_DESCRIPTION)}\n </Text>\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n\n <Button\n className=\"w-full\"\n onClick={handleRegister}\n disabled={registering \|\| isLoading}\n >\n {registering ? t(EnrollmentRequiredLabel.PASSKEY_REGISTERING) : t(EnrollmentRequiredLabel.PASSKEY_REGISTER_BUTTON)}\n </Button>\n </div>\n );\n};\n\nregisterEnrollmentMethodComponent(AuthMethod.PASSKEY, PasskeyEnrollmentMethod);\nexport { PasskeyEnrollmentMethod };\n"]}

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.d.ts CHANGED Viewed

@@ -4,7 +4,7 @@ import { type AuthMethodComponentProps } from '../../../components/auth/methods/
  * OrgSamlAuthMethod — renders a "Sign in with {orgName}" button
  * that redirects to the SAML SP-initiated login URL.
  *
- * Constructs the redirect URL from MANUAL_CONTROLLER_ROUTES_URLS
+ * Constructs the redirect URL from the route's contract path (`buildManualControllerRoutePath`)
  * using the connectionId from config, ensuring URL consistency
  * with the rest of the engine.
  *

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"OrgSamlAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/OrgSamlAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAQrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAKnH;;;;;;;;;;GAUG;AACH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,~~CAmDzD~~,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}
1	+ {"version":3,"file":"OrgSamlAuthMethod.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/OrgSamlAuthMethod.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAQrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAKnH;;;;;;;;;;GAUG;AACH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAkDzD,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.js CHANGED Viewed

@@ -2,7 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useCallback, useState } from 'react';
 import { useLocation } from 'react-router-dom';
 import { UserAuthLabel } from '@wildo-ai/presets-components-models';
-import { AuthMethod, MAIN_API_BASE_PATH, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey } from '@wildo-ai/saas-models';
+import { AuthMethod, MAIN_API_BASE_PATH, ManualControllerRouteKey, buildManualControllerRoutePath } from '@wildo-ai/saas-models';
 import { Button, ButtonLabelOverflow, ButtonVariants_Variant } from '../../../components/actions/button.js';
 import { Alert, AlertDescription } from '../../../components/overlays/containers/alert.js';
 import { buildAuthRedirectTarget } from '../../../core/security/auth-redirect.frontend.utils.js';
@@ -13,7 +13,7 @@ const API_PREFIX = MAIN_API_BASE_PATH;
  * OrgSamlAuthMethod — renders a "Sign in with {orgName}" button
  * that redirects to the SAML SP-initiated login URL.
  *
- * Constructs the redirect URL from MANUAL_CONTROLLER_ROUTES_URLS
+ * Constructs the redirect URL from the route's contract path (`buildManualControllerRoutePath`)
  * using the connectionId from config, ensuring URL consistency
  * with the rest of the engine.
  *
@@ -33,8 +33,7 @@ const OrgSamlAuthMethod = ({ methodConfig, isLoading, t, factorLevel }) => {
             return;
         }
         setRedirecting(true);
-        const loginPath = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.AUTH_SAML_LOGIN]
-            .replace(':connectionId', connectionId);
+        const loginPath = buildManualControllerRoutePath(ManualControllerRouteKey.AUTH_SAML_LOGIN, { connectionId });
         // SAML SP-initiated login is a FULL-PAGE navigation to a backend 302 (unlike OIDC's
         // `getEnterpriseSSOAuthorizationUrl`, an XHR that returns an absolute URL to navigate to). It must
         // therefore target the ABSOLUTE backend origin: on a split-origin deployment (dev Vite at :4242 → backend

package/dist/esm/components/auth/methods/OrgSamlAuthMethod.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"OrgSamlAuthMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/OrgSamlAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,~~6BAA6B~~,EAAE,~~wBAAwB~~,EAAE,MAAM,uBAAuB,CAAC;~~AAChI~~,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACpH,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAE7H,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAE1F,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;;;;;;;;;;GAUG;AACH,MAAM,iBAAiB,GAAuC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;IAC5G,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,EAAE,WAAW,IAAI,KAAK,CAAC;IAC9D,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC;IACvD,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QACnC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,~~6BAA6B~~,CAAC,wBAAwB,CAAC,eAAe,~~CAAC;aACtF~~,~~OAAO~~,~~CAAC~~,~~eAAe,~~EAAE,~~YAAY,~~CAAC,CAAC;~~QAC1C~~,oFAAoF;QACpF,mGAAmG;QACnG,0GAA0G;QAC1G,wGAAwG;QACxG,0GAA0G;QAC1G,uFAAuF;QACvF,qFAAqF;QACrF,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC,UAAU,EAAE,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IAC5G,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjC,MAAM,KAAK,GAAG,WAAW,KAAK,OAAO;QACnC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;QACnE,CAAC,CAAC,WAAW,CAAC;IAEhB,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,MAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,aAAa,EAAE,mBAAmB,CAAC,IAAI,EACvC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,SAAS,IAAI,WAAW,aAElC,KAAC,cAAc,IAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,GAAI,EAC9C,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IACnB,EACR,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,IACG,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useState } from 'react';\nimport { useLocation } from 'react-router-dom';\nimport { UserAuthLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod, MAIN_API_BASE_PATH, ~~MANUAL_CONTROLLER_ROUTES_URLS~~, ~~ManualControllerRouteKey~~ } from '@wildo-ai/saas-models';\nimport { Button, ButtonLabelOverflow, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { buildAuthRedirectTarget } from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\nimport { AuthMethodIcon } from '~wildo-frontend-lib/components/auth/utils/AuthMethodIcon';\n\nconst API_PREFIX = MAIN_API_BASE_PATH;\n\n/*\n OrgSamlAuthMethod — renders a \"Sign in with {orgName}\" button\n * that redirects to the SAML SP-initiated login URL.\n \n Constructs the redirect URL from ~~MANUAL_CONTROLLER_ROUTES_URLS~~\n * using the connectionId from config, ensuring URL consistency\n * with the rest of the engine.\n \n Browser-only flow. The framework targets web stacks exclusively, so\n * there is no native variant of this method.\n */\nconst OrgSamlAuthMethod: React.FC<AuthMethodComponentProps> = ({ methodConfig, isLoading, t, factorLevel }) => {\n const [redirecting, setRedirecting] = useState(false);\n const [error, setError] = useState<string \| null>(null);\n const location = useLocation();\n\n const displayName = methodConfig.config?.displayName \|\| 'SSO';\n const connectionId = methodConfig.config?.connectionId;\n const returnUrl = buildAuthRedirectTarget(location);\n\n const handleClick = useCallback(() => {\n if (!connectionId) {\n setError(t(UserAuthLabel.SSO_CONFIGURATION_ERROR));\n return;\n }\n setRedirecting(true);\n const loginPath = ~~MANUAL_CONTROLLER_ROUTES_URLS[~~ManualControllerRouteKey.AUTH_SAML_LOGIN~~]\n .replace(':connectionId'~~, connectionId);\n // SAML SP-initiated login is a FULL-PAGE navigation to a backend 302 (unlike OIDC's\n // `getEnterpriseSSOAuthorizationUrl`, an XHR that returns an absolute URL to navigate to). It must\n // therefore target the ABSOLUTE backend origin: on a split-origin deployment (dev Vite at :4242 → backend\n // :4241, or any separately-hosted frontend) a relative `/api/v1/...` navigation hits the frontend's SPA\n // fallback and 404s instead of reaching the backend. `getBaseURL()` returns the configured API origin, or\n // '' for a same-origin deployment (where the relative path already works). Mirrors the\n // `${apiBaseUrl}${MAIN_API_BASE_PATH}${path}` construction used for file-serve URLs.\n const apiOrigin = getManualCallsHttpClient().getBaseURL();\n window.location.href = `${apiOrigin}${API_PREFIX}${loginPath}?returnUrl=${encodeURIComponent(returnUrl)}`;\n }, [connectionId, returnUrl, t]);\n\n const label = factorLevel === 'first'\n ? t(UserAuthLabel.CONTINUE_WITH).replace('{provider}', displayName)\n : displayName;\n\n return (\n <div className=\"space-y-item\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n className=\"w-full\"\n labelOverflow={ButtonLabelOverflow.WRAP}\n onClick={handleClick}\n disabled={isLoading \|\| redirecting}\n >\n <AuthMethodIcon method={AuthMethod.ORG_SAML} />\n {redirecting ? '…' : label}\n </Button>\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n </div>\n );\n};\n\nexport { OrgSamlAuthMethod };\n"]}
1	+ {"version":3,"file":"OrgSamlAuthMethod.js","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/OrgSamlAuthMethod.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACjI,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACpH,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAE7H,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAE1F,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;;;;;;;;;;GAUG;AACH,MAAM,iBAAiB,GAAuC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;IAC5G,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,EAAE,WAAW,IAAI,KAAK,CAAC;IAC9D,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC;IACvD,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QACnC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,8BAA8B,CAAC,wBAAwB,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7G,oFAAoF;QACpF,mGAAmG;QACnG,0GAA0G;QAC1G,wGAAwG;QACxG,0GAA0G;QAC1G,uFAAuF;QACvF,qFAAqF;QACrF,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC,UAAU,EAAE,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IAC5G,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjC,MAAM,KAAK,GAAG,WAAW,KAAK,OAAO;QACnC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;QACnE,CAAC,CAAC,WAAW,CAAC;IAEhB,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC3B,MAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,aAAa,EAAE,mBAAmB,CAAC,IAAI,EACvC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,SAAS,IAAI,WAAW,aAElC,KAAC,cAAc,IAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,GAAI,EAC9C,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IACnB,EACR,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,IACG,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC","sourcesContent":["import React, { useCallback, useState } from 'react';\nimport { useLocation } from 'react-router-dom';\nimport { UserAuthLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod, MAIN_API_BASE_PATH, ManualControllerRouteKey, buildManualControllerRoutePath } from '@wildo-ai/saas-models';\nimport { Button, ButtonLabelOverflow, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { buildAuthRedirectTarget } from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\nimport { AuthMethodIcon } from '~wildo-frontend-lib/components/auth/utils/AuthMethodIcon';\n\nconst API_PREFIX = MAIN_API_BASE_PATH;\n\n/*\n OrgSamlAuthMethod — renders a \"Sign in with {orgName}\" button\n * that redirects to the SAML SP-initiated login URL.\n \n Constructs the redirect URL from the route's contract path (`buildManualControllerRoutePath`)\n * using the connectionId from config, ensuring URL consistency\n * with the rest of the engine.\n \n Browser-only flow. The framework targets web stacks exclusively, so\n * there is no native variant of this method.\n */\nconst OrgSamlAuthMethod: React.FC<AuthMethodComponentProps> = ({ methodConfig, isLoading, t, factorLevel }) => {\n const [redirecting, setRedirecting] = useState(false);\n const [error, setError] = useState<string \| null>(null);\n const location = useLocation();\n\n const displayName = methodConfig.config?.displayName \|\| 'SSO';\n const connectionId = methodConfig.config?.connectionId;\n const returnUrl = buildAuthRedirectTarget(location);\n\n const handleClick = useCallback(() => {\n if (!connectionId) {\n setError(t(UserAuthLabel.SSO_CONFIGURATION_ERROR));\n return;\n }\n setRedirecting(true);\n const loginPath = buildManualControllerRoutePath(ManualControllerRouteKey.AUTH_SAML_LOGIN, { connectionId });\n // SAML SP-initiated login is a FULL-PAGE navigation to a backend 302 (unlike OIDC's\n // `getEnterpriseSSOAuthorizationUrl`, an XHR that returns an absolute URL to navigate to). It must\n // therefore target the ABSOLUTE backend origin: on a split-origin deployment (dev Vite at :4242 → backend\n // :4241, or any separately-hosted frontend) a relative `/api/v1/...` navigation hits the frontend's SPA\n // fallback and 404s instead of reaching the backend. `getBaseURL()` returns the configured API origin, or\n // '' for a same-origin deployment (where the relative path already works). Mirrors the\n // `${apiBaseUrl}${MAIN_API_BASE_PATH}${path}` construction used for file-serve URLs.\n const apiOrigin = getManualCallsHttpClient().getBaseURL();\n window.location.href = `${apiOrigin}${API_PREFIX}${loginPath}?returnUrl=${encodeURIComponent(returnUrl)}`;\n }, [connectionId, returnUrl, t]);\n\n const label = factorLevel === 'first'\n ? t(UserAuthLabel.CONTINUE_WITH).replace('{provider}', displayName)\n : displayName;\n\n return (\n <div className=\"space-y-item\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n className=\"w-full\"\n labelOverflow={ButtonLabelOverflow.WRAP}\n onClick={handleClick}\n disabled={isLoading \|\| redirecting}\n >\n <AuthMethodIcon method={AuthMethod.ORG_SAML} />\n {redirecting ? '…' : label}\n </Button>\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n </div>\n );\n};\n\nexport { OrgSamlAuthMethod };\n"]}

package/dist/esm/components/auth/pages/AuthPage_ChatIdentityLink.d.ts ADDED Viewed

@@ -0,0 +1,11 @@
+import React from 'react';
+/**
+ * `/chat-link` — the routed wrapper for the chat-link page (#2660). A public route: the body sends a visitor who is
+ * not signed in to sign in, returning here with the link intact, then shows which chat account the link names and
+ * links it on the member's explicit confirmation ({@link Auth_ChatIdentityLink}).
+ *
+ * `referrer: no-referrer` (like the other token pages) keeps the one-time token out of the `Referer` header of any
+ * outbound navigation in the moment before the page takes it out of the address bar.
+ */
+export declare const AuthPage_ChatIdentityLink: React.FC;
+//# sourceMappingURL=AuthPage_ChatIdentityLink.d.ts.map

package/dist/esm/components/auth/pages/AuthPage_ChatIdentityLink.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"AuthPage_ChatIdentityLink.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_ChatIdentityLink.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,EAgB7C,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_ChatIdentityLink.js ADDED Viewed

@@ -0,0 +1,25 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import React from 'react';
+import { PublicLayout_MainContainer } from '../../../components/app/PublicLayout_MainContainer.js';
+import { Auth_ChatIdentityLink } from '../../../components/auth/Auth_ChatIdentityLink.js';
+/**
+ * `/chat-link` — the routed wrapper for the chat-link page (#2660). A public route: the body sends a visitor who is
+ * not signed in to sign in, returning here with the link intact, then shows which chat account the link names and
+ * links it on the member's explicit confirmation ({@link Auth_ChatIdentityLink}).
+ *
+ * `referrer: no-referrer` (like the other token pages) keeps the one-time token out of the `Referer` header of any
+ * outbound navigation in the moment before the page takes it out of the address bar.
+ */
+export const AuthPage_ChatIdentityLink = () => {
+    React.useEffect(() => {
+        const meta = document.createElement('meta');
+        meta.name = 'referrer';
+        meta.content = 'no-referrer';
+        document.head.appendChild(meta);
+        return () => {
+            document.head.removeChild(meta);
+        };
+    }, []);
+    return (_jsx(PublicLayout_MainContainer, { useCardLayout: true, children: _jsx(Auth_ChatIdentityLink, {}) }));
+};
+//# sourceMappingURL=AuthPage_ChatIdentityLink.js.map

package/dist/esm/components/auth/pages/AuthPage_ChatIdentityLink.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"AuthPage_ChatIdentityLink.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_ChatIdentityLink.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,qBAAqB,EAAE,MAAM,2DAA2D,CAAC;AAElG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAa,GAAG,EAAE;IACtD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE;YACV,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,qBAAqB,KAAG,GACE,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_ChatIdentityLink } from '~wildo-frontend-lib/components/auth/Auth_ChatIdentityLink';\n\n/**\n * `/chat-link` — the routed wrapper for the chat-link page (#2660). A public route: the body sends a visitor who is\n * not signed in to sign in, returning here with the link intact, then shows which chat account the link names and\n * links it on the member's explicit confirmation ({@link Auth_ChatIdentityLink}).\n *\n * `referrer: no-referrer` (like the other token pages) keeps the one-time token out of the `Referer` header of any\n * outbound navigation in the moment before the page takes it out of the address bar.\n */\nexport const AuthPage_ChatIdentityLink: React.FC = () => {\n React.useEffect(() => {\n const meta = document.createElement('meta');\n meta.name = 'referrer';\n meta.content = 'no-referrer';\n document.head.appendChild(meta);\n return () => {\n document.head.removeChild(meta);\n };\n }, []);\n\n return (\n <PublicLayout_MainContainer useCardLayout={true}>\n <Auth_ChatIdentityLink />\n </PublicLayout_MainContainer>\n );\n};\n"]}

package/dist/esm/components/auth/utils/AuthPrivacyNoticeLink.d.ts ADDED Viewed

@@ -0,0 +1,39 @@
+import React from 'react';
+export interface AuthPrivacyNoticeLinkProps {
+    /** The link's words, resolved by the calling screen from its own label namespace (`UserAuthLabel.PRIVACY_NOTICE_LINK`). */
+    label: string;
+}
+/**
+ * The link from a public auth screen to the application's own privacy notice, or nothing while it serves none (#2976).
+ *
+ * ## Why the screens before sign-in carry it
+ *
+ * GDPR Art. 13(1) owes the privacy information when personal data is obtained from the person, and Art. 14(3)(a)-(b),
+ * for data obtained elsewhere (here, the identity provider that provisions an account), within a reasonable period and
+ * at the latest at the first communication with the person. For an internal tool whose staff are provisioned by the
+ * company's identity provider, the first screen the application shows them is sign-in, or the invitation page when
+ * they were invited: they never see the registration form, and the consent panel renders only after sign-in. So both
+ * screens link the notice, on every application whatever its line. A customer of a B2B application signing in is owed
+ * the same reachable notice, and drawing it everywhere keeps line knowledge out of the frontend.
+ *
+ * spec-cite: GDPR (EU) 2016/679 Art. 13(1) and Art. 14(3)(a)-(b), https://gdpr-info.eu/art-14-gdpr/
+ *
+ * ## Why it is drawn only while the notice is served
+ *
+ * `resolveServedPublicGovernedDocumentPath` returns the notice page's path exactly when that page would render the
+ * notice (a release in force, or the draft of a never-released notice, under the application's approval gate), and
+ * nothing otherwise. The route is mounted for every application, so the link could never 404, but it would land on
+ * "unavailable", which informs nobody and stops the reader looking. The consent panel reads the same function, so the
+ * surfaces agree on when the notice is offered.
+ *
+ * ## What it does not cover
+ *
+ * A sign-in the IDENTITY PROVIDER starts (an SSO connection with `saml.allowIdpInitiated`) never renders these
+ * screens, and the consent panel draws its own link only while it asks for a decision. Those staff reach the notice
+ * from the signed-in application's account menu, which draws the same link (#2983).
+ *
+ * It opens in a new tab (`external`), as the consent panel's does, so reading the notice does not throw away a form
+ * the person has started.
+ */
+export declare const AuthPrivacyNoticeLink: ({ label }: AuthPrivacyNoticeLinkProps) => React.JSX.Element | null;
+//# sourceMappingURL=AuthPrivacyNoticeLink.d.ts.map

package/dist/esm/components/auth/utils/AuthPrivacyNoticeLink.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"AuthPrivacyNoticeLink.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/AuthPrivacyNoticeLink.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAO1B,MAAM,WAAW,0BAA0B;IACzC,2HAA2H;IAC3H,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,qBAAqB,GAAI,WAAW,0BAA0B,KAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IASjG,CAAC"}

package/dist/esm/components/auth/utils/AuthPrivacyNoticeLink.js ADDED Viewed

@@ -0,0 +1,45 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { PUBLIC_GOVERNED_DOCUMENT_REFS, resolveServedPublicGovernedDocumentPath } from '@wildo-ai/saas-models';
+import { Text } from '../../../components/typography/text.js';
+import { Link } from '../../../components/typography/link.js';
+import { useApplication } from '../../../core/runtime/useApplication.js';
+/**
+ * The link from a public auth screen to the application's own privacy notice, or nothing while it serves none (#2976).
+ *
+ * ## Why the screens before sign-in carry it
+ *
+ * GDPR Art. 13(1) owes the privacy information when personal data is obtained from the person, and Art. 14(3)(a)-(b),
+ * for data obtained elsewhere (here, the identity provider that provisions an account), within a reasonable period and
+ * at the latest at the first communication with the person. For an internal tool whose staff are provisioned by the
+ * company's identity provider, the first screen the application shows them is sign-in, or the invitation page when
+ * they were invited: they never see the registration form, and the consent panel renders only after sign-in. So both
+ * screens link the notice, on every application whatever its line. A customer of a B2B application signing in is owed
+ * the same reachable notice, and drawing it everywhere keeps line knowledge out of the frontend.
+ *
+ * spec-cite: GDPR (EU) 2016/679 Art. 13(1) and Art. 14(3)(a)-(b), https://gdpr-info.eu/art-14-gdpr/
+ *
+ * ## Why it is drawn only while the notice is served
+ *
+ * `resolveServedPublicGovernedDocumentPath` returns the notice page's path exactly when that page would render the
+ * notice (a release in force, or the draft of a never-released notice, under the application's approval gate), and
+ * nothing otherwise. The route is mounted for every application, so the link could never 404, but it would land on
+ * "unavailable", which informs nobody and stops the reader looking. The consent panel reads the same function, so the
+ * surfaces agree on when the notice is offered.
+ *
+ * ## What it does not cover
+ *
+ * A sign-in the IDENTITY PROVIDER starts (an SSO connection with `saml.allowIdpInitiated`) never renders these
+ * screens, and the consent panel draws its own link only while it asks for a decision. Those staff reach the notice
+ * from the signed-in application's account menu, which draws the same link (#2983).
+ *
+ * It opens in a new tab (`external`), as the consent panel's does, so reading the notice does not throw away a form
+ * the person has started.
+ */
+export const AuthPrivacyNoticeLink = ({ label }) => {
+    const { appConfig } = useApplication();
+    const path = resolveServedPublicGovernedDocumentPath(appConfig.compliance, PUBLIC_GOVERNED_DOCUMENT_REFS.PRIVACY_NOTICE, new Date().toISOString());
+    if (path === undefined)
+        return null;
+    return (_jsx(Text, { children: _jsx(Link, { href: path, external: true, "data-privacy-notice-link": "", children: label }) }));
+};
+//# sourceMappingURL=AuthPrivacyNoticeLink.js.map

package/dist/esm/components/auth/utils/AuthPrivacyNoticeLink.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"AuthPrivacyNoticeLink.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/AuthPrivacyNoticeLink.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,6BAA6B,EAAE,uCAAuC,EAAE,MAAM,uBAAuB,CAAC;AAE/G,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAOjF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EAAE,KAAK,EAA8B,EAA4B,EAAE;IACvG,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,uCAAuC,CAAC,SAAS,CAAC,UAAU,EAAE,6BAA6B,CAAC,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnJ,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,CACL,KAAC,IAAI,cACH,KAAC,IAAI,IAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,oCAA0B,EAAE,YAAE,KAAK,GAAQ,GAChE,CACR,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PUBLIC_GOVERNED_DOCUMENT_REFS, resolveServedPublicGovernedDocumentPath } from '@wildo-ai/saas-models';\n\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Link } from '~wildo-frontend-lib/components/typography/link';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\n\nexport interface AuthPrivacyNoticeLinkProps {\n /** The link's words, resolved by the calling screen from its own label namespace (`UserAuthLabel.PRIVACY_NOTICE_LINK`). */\n label: string;\n}\n\n/**\n * The link from a public auth screen to the application's own privacy notice, or nothing while it serves none (#2976).\n *\n * ## Why the screens before sign-in carry it\n *\n * GDPR Art. 13(1) owes the privacy information when personal data is obtained from the person, and Art. 14(3)(a)-(b),\n * for data obtained elsewhere (here, the identity provider that provisions an account), within a reasonable period and\n * at the latest at the first communication with the person. For an internal tool whose staff are provisioned by the\n * company's identity provider, the first screen the application shows them is sign-in, or the invitation page when\n * they were invited: they never see the registration form, and the consent panel renders only after sign-in. So both\n * screens link the notice, on every application whatever its line. A customer of a B2B application signing in is owed\n * the same reachable notice, and drawing it everywhere keeps line knowledge out of the frontend.\n *\n * spec-cite: GDPR (EU) 2016/679 Art. 13(1) and Art. 14(3)(a)-(b), https://gdpr-info.eu/art-14-gdpr/\n *\n * ## Why it is drawn only while the notice is served\n *\n * `resolveServedPublicGovernedDocumentPath` returns the notice page's path exactly when that page would render the\n * notice (a release in force, or the draft of a never-released notice, under the application's approval gate), and\n * nothing otherwise. The route is mounted for every application, so the link could never 404, but it would land on\n * \"unavailable\", which informs nobody and stops the reader looking. The consent panel reads the same function, so the\n * surfaces agree on when the notice is offered.\n *\n * ## What it does not cover\n *\n * A sign-in the IDENTITY PROVIDER starts (an SSO connection with `saml.allowIdpInitiated`) never renders these\n * screens, and the consent panel draws its own link only while it asks for a decision. Those staff reach the notice\n * from the signed-in application's account menu, which draws the same link (#2983).\n *\n * It opens in a new tab (`external`), as the consent panel's does, so reading the notice does not throw away a form\n * the person has started.\n */\nexport const AuthPrivacyNoticeLink = ({ label }: AuthPrivacyNoticeLinkProps): React.JSX.Element | null => {\n const { appConfig } = useApplication();\n const path = resolveServedPublicGovernedDocumentPath(appConfig.compliance, PUBLIC_GOVERNED_DOCUMENT_REFS.PRIVACY_NOTICE, new Date().toISOString());\n if (path === undefined) return null;\n return (\n <Text>\n <Link href={path} external data-privacy-notice-link=\"\">{label}</Link>\n </Text>\n );\n};\n"]}

package/dist/esm/components/auth/utils/PasswordStrengthIndicator.js CHANGED Viewed

@@ -51,6 +51,6 @@ export const PasswordStrengthIndicator = ({ fieldName, policy, t, blocklistConte
     }, [password, policy, t, blocklistContext]);
     if (!password || checks.length === 0)
         return null;
-    return (_jsx("ul", { className: "space-y-1 text-xs mt-item-xs", children: checks.map((check, i) => (_jsxs("li", { className: `flex items-center gap-1.5 ${check.passed ? 'text-success' : 'text-muted-foreground'}`, children: [check.passed ? (_jsx("svg", { className: "w-3.5 h-3.5 shrink-0", viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": "true", children: _jsx("path", { fillRule: "evenodd", d: "M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z", clipRule: "evenodd" }) })) : (_jsx("svg", { className: "w-3.5 h-3.5 shrink-0", viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": "true", children: _jsx("circle", { cx: "10", cy: "10", r: "3" }) })), _jsx("span", { children: check.label })] }, i))) }));
+    return (_jsx("ul", { className: "space-y-1 text-xs mt-item-xs", children: checks.map((check, i) => (_jsxs("li", { className: `flex items-center gap-1.5 ${check.passed ? 'text-success-subtle-foreground' : 'text-muted-foreground'}`, children: [check.passed ? (_jsx("svg", { className: "w-3.5 h-3.5 shrink-0", viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": "true", children: _jsx("path", { fillRule: "evenodd", d: "M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z", clipRule: "evenodd" }) })) : (_jsx("svg", { className: "w-3.5 h-3.5 shrink-0", viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": "true", children: _jsx("circle", { cx: "10", cy: "10", r: "3" }) })), _jsx("span", { children: check.label })] }, i))) }));
 };
 //# sourceMappingURL=PasswordStrengthIndicator.js.map

package/dist/esm/components/auth/utils/PasswordStrengthIndicator.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"PasswordStrengthIndicator.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/PasswordStrengthIndicator.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,MAAM,CAAC,MAAM,uBAAuB,GAAwB;IAC1D,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,GAAG;IACd,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,mBAAmB,EAAE,KAAK;IAC1B,UAAU,EAAE,CAAC;CACd,CAAC;AAkBF,MAAM,CAAC,MAAM,yBAAyB,GAA6C,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE;IAChI,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAW,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE;QAC1B,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,MAAM,KAAK,GAAyC,EAAE,CAAC;QAEvD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;SAC5C,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;SAC5C,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,iGAAiG;QACjG,kGAAkG;QAClG,mGAAmG;QACnG,qGAAqG;QACrG,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC;YACzC,MAAM,EAAE,CAAC,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAE5C,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAElD,OAAO,CACL,aAAI,SAAS,EAAC,8BAA8B,YACzC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CACxB,cAAY,SAAS,EAAE,6BAA6B,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,~~cAAc~~,CAAC,CAAC,CAAC,uBAAuB,EAAE,~~aAC1G~~,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CACd,cAAK,SAAS,EAAC,sBAAsB,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAAC,eAAM,QAAQ,EAAC,SAAS,EAAC,CAAC,EAAC,oHAAoH,EAAC,QAAQ,EAAC,SAAS,GAAG,GAAM,CAC7Q,CAAC,CAAC,CAAC,CACF,cAAK,SAAS,EAAC,sBAAsB,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAAC,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,GAAG,GAAM,CACxI,EACD,yBAAO,KAAK,CAAC,KAAK,GAAQ,KANnB,CAAC,CAOL,CACN,CAAC,GACC,CACN,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React, { useMemo } from 'react';\nimport { useFormContext } from 'react-hook-form';\nimport type { PasswordPolicyRules, PasswordBlocklistContext } from '@wildo-ai/saas-models';\nimport { isPasswordBlocklisted } from '@wildo-ai/saas-models';\nimport { PasswordPolicyLabel } from '@wildo-ai/presets-components-models';\n\nexport const DEFAULT_PASSWORD_POLICY: PasswordPolicyRules = {\n minLength: 15,\n maxLength: 128,\n requireUppercase: false,\n requireLowercase: false,\n requireNumbers: false,\n requireSpecialChars: false,\n expiryDays: 0,\n};\n\ninterface PasswordStrengthIndicatorProps {\n /** The password field name to watch from the surrounding form context /\n fieldName: string;\n /* Password policy rules to check against /\n policy: PasswordPolicyRules;\n /* Translation function for policy check labels /\n t: (key: string) => string;\n /\n What an attacker would guess about THIS application and THIS person — the service's own name and\n * the user's own email address. Optional, because the bundled common-password list is the floor and\n * runs either way; a surface that KNOWS the address (registration, invitation, reset) should pass it,\n * since those two guesses come before anything in the list.\n */\n blocklistContext?: PasswordBlocklistContext;\n}\n\nexport const PasswordStrengthIndicator: React.FC<PasswordStrengthIndicatorProps> = ({ fieldName, policy, t, blocklistContext }) => {\n const { watch } = useFormContext();\n const password: string = watch(fieldName) \|\| '';\n\n const checks = useMemo(() => {\n if (!password) return [];\n\n const items: { label: string; passed: boolean }[] = [];\n\n items.push({\n label: t(PasswordPolicyLabel.MIN_LENGTH).replace('{minLength}', String(policy.minLength)),\n passed: password.length >= policy.minLength,\n });\n items.push({\n label: t(PasswordPolicyLabel.MAX_LENGTH).replace('{maxLength}', String(policy.maxLength)),\n passed: password.length <= policy.maxLength,\n });\n if (policy.requireUppercase) {\n items.push({ label: t(PasswordPolicyLabel.UPPERCASE), passed: /[A-Z]/.test(password) });\n }\n if (policy.requireLowercase) {\n items.push({ label: t(PasswordPolicyLabel.LOWERCASE), passed: /[a-z]/.test(password) });\n }\n if (policy.requireNumbers) {\n items.push({ label: t(PasswordPolicyLabel.NUMBER), passed: /\\d/.test(password) });\n }\n if (policy.requireSpecialChars) {\n items.push({ label: t(PasswordPolicyLabel.SPECIAL_CHAR), passed: /[^A-Za-z0-9]/.test(password) });\n }\n // Unconditional, matching AuthUtils.validatePasswordAgainstPolicy: the blocklist is the one rule\n // NIST SP 800-63B-4 §3.1.1.2 states with no configurable half, so an application cannot switch it\n // off and this item is never absent. It is also the only item here that a longer password does not\n // fix, which is why it is worth showing BEFORE the form is submitted rather than as a refusal after.\n items.push({\n label: t(PasswordPolicyLabel.BLOCKLISTED),\n passed: !isPasswordBlocklisted(password, blocklistContext),\n });\n\n return items;\n }, [password, policy, t, blocklistContext]);\n\n if (!password \|\| checks.length === 0) return null;\n\n return (\n <ul className=\"space-y-1 text-xs mt-item-xs\">\n {checks.map((check, i) => (\n <li key={i} className={`flex items-center gap-1.5 ${check.passed ? 'text-success' : 'text-muted-foreground'}`}>\n {check.passed ? (\n <svg className=\"w-3.5 h-3.5 shrink-0\" viewBox=\"0 0 20 20\" fill=\"currentColor\" aria-hidden=\"true\"><path fillRule=\"evenodd\" d=\"M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z\" clipRule=\"evenodd\" /></svg>\n ) : (\n <svg className=\"w-3.5 h-3.5 shrink-0\" viewBox=\"0 0 20 20\" fill=\"currentColor\" aria-hidden=\"true\"><circle cx=\"10\" cy=\"10\" r=\"3\" /></svg>\n )}\n <span>{check.label}</span>\n </li>\n ))}\n </ul>\n );\n};\n"]}
1	+ {"version":3,"file":"PasswordStrengthIndicator.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/PasswordStrengthIndicator.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,MAAM,CAAC,MAAM,uBAAuB,GAAwB;IAC1D,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,GAAG;IACd,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,mBAAmB,EAAE,KAAK;IAC1B,UAAU,EAAE,CAAC;CACd,CAAC;AAkBF,MAAM,CAAC,MAAM,yBAAyB,GAA6C,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE;IAChI,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAW,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE;QAC1B,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,MAAM,KAAK,GAAyC,EAAE,CAAC;QAEvD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;SAC5C,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;SAC5C,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,iGAAiG;QACjG,kGAAkG;QAClG,mGAAmG;QACnG,qGAAqG;QACrG,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC;YACzC,MAAM,EAAE,CAAC,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAE5C,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAElD,OAAO,CACL,aAAI,SAAS,EAAC,8BAA8B,YACzC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CACxB,cAAY,SAAS,EAAE,6BAA6B,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,uBAAuB,EAAE,aAC5H,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CACd,cAAK,SAAS,EAAC,sBAAsB,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAAC,eAAM,QAAQ,EAAC,SAAS,EAAC,CAAC,EAAC,oHAAoH,EAAC,QAAQ,EAAC,SAAS,GAAG,GAAM,CAC7Q,CAAC,CAAC,CAAC,CACF,cAAK,SAAS,EAAC,sBAAsB,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAAC,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,GAAG,GAAM,CACxI,EACD,yBAAO,KAAK,CAAC,KAAK,GAAQ,KANnB,CAAC,CAOL,CACN,CAAC,GACC,CACN,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React, { useMemo } from 'react';\nimport { useFormContext } from 'react-hook-form';\nimport type { PasswordPolicyRules, PasswordBlocklistContext } from '@wildo-ai/saas-models';\nimport { isPasswordBlocklisted } from '@wildo-ai/saas-models';\nimport { PasswordPolicyLabel } from '@wildo-ai/presets-components-models';\n\nexport const DEFAULT_PASSWORD_POLICY: PasswordPolicyRules = {\n minLength: 15,\n maxLength: 128,\n requireUppercase: false,\n requireLowercase: false,\n requireNumbers: false,\n requireSpecialChars: false,\n expiryDays: 0,\n};\n\ninterface PasswordStrengthIndicatorProps {\n /** The password field name to watch from the surrounding form context /\n fieldName: string;\n /* Password policy rules to check against /\n policy: PasswordPolicyRules;\n /* Translation function for policy check labels /\n t: (key: string) => string;\n /\n What an attacker would guess about THIS application and THIS person — the service's own name and\n * the user's own email address. Optional, because the bundled common-password list is the floor and\n * runs either way; a surface that KNOWS the address (registration, invitation, reset) should pass it,\n * since those two guesses come before anything in the list.\n */\n blocklistContext?: PasswordBlocklistContext;\n}\n\nexport const PasswordStrengthIndicator: React.FC<PasswordStrengthIndicatorProps> = ({ fieldName, policy, t, blocklistContext }) => {\n const { watch } = useFormContext();\n const password: string = watch(fieldName) \|\| '';\n\n const checks = useMemo(() => {\n if (!password) return [];\n\n const items: { label: string; passed: boolean }[] = [];\n\n items.push({\n label: t(PasswordPolicyLabel.MIN_LENGTH).replace('{minLength}', String(policy.minLength)),\n passed: password.length >= policy.minLength,\n });\n items.push({\n label: t(PasswordPolicyLabel.MAX_LENGTH).replace('{maxLength}', String(policy.maxLength)),\n passed: password.length <= policy.maxLength,\n });\n if (policy.requireUppercase) {\n items.push({ label: t(PasswordPolicyLabel.UPPERCASE), passed: /[A-Z]/.test(password) });\n }\n if (policy.requireLowercase) {\n items.push({ label: t(PasswordPolicyLabel.LOWERCASE), passed: /[a-z]/.test(password) });\n }\n if (policy.requireNumbers) {\n items.push({ label: t(PasswordPolicyLabel.NUMBER), passed: /\\d/.test(password) });\n }\n if (policy.requireSpecialChars) {\n items.push({ label: t(PasswordPolicyLabel.SPECIAL_CHAR), passed: /[^A-Za-z0-9]/.test(password) });\n }\n // Unconditional, matching AuthUtils.validatePasswordAgainstPolicy: the blocklist is the one rule\n // NIST SP 800-63B-4 §3.1.1.2 states with no configurable half, so an application cannot switch it\n // off and this item is never absent. It is also the only item here that a longer password does not\n // fix, which is why it is worth showing BEFORE the form is submitted rather than as a refusal after.\n items.push({\n label: t(PasswordPolicyLabel.BLOCKLISTED),\n passed: !isPasswordBlocklisted(password, blocklistContext),\n });\n\n return items;\n }, [password, policy, t, blocklistContext]);\n\n if (!password \|\| checks.length === 0) return null;\n\n return (\n <ul className=\"space-y-1 text-xs mt-item-xs\">\n {checks.map((check, i) => (\n <li key={i} className={`flex items-center gap-1.5 ${check.passed ? 'text-success-subtle-foreground' : 'text-muted-foreground'}`}>\n {check.passed ? (\n <svg className=\"w-3.5 h-3.5 shrink-0\" viewBox=\"0 0 20 20\" fill=\"currentColor\" aria-hidden=\"true\"><path fillRule=\"evenodd\" d=\"M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z\" clipRule=\"evenodd\" /></svg>\n ) : (\n <svg className=\"w-3.5 h-3.5 shrink-0\" viewBox=\"0 0 20 20\" fill=\"currentColor\" aria-hidden=\"true\"><circle cx=\"10\" cy=\"10\" r=\"3\" /></svg>\n )}\n <span>{check.label}</span>\n </li>\n ))}\n </ul>\n );\n};\n"]}

package/dist/esm/components/compliance/GovernedDocumentAcceptanceControl.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"GovernedDocumentAcceptanceControl.d.ts","sourceRoot":"","sources":["../../../../../src/components/compliance/GovernedDocumentAcceptanceControl.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAgD,MAAM,OAAO,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAqB,MAAM,qCAAqC,CAAC;AAC/F,OAAO,EACL,8BAA8B,EAM9B,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,EACpC,MAAM,uBAAuB,CAAC;~~AAM~~/B;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,UAAU,8BAA8B,EAAE,OAAO,MAAM,KAAG,MAC5C,CAAC;AAE/C,gGAAgG;AAChG,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,GAAG,SAAS,CAAC;CAC/D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAA+B;IAC9C,iFAAiF;IACjF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,kCAAkC,EAAE,CAAC;IACzE,iCAAiC;IACjC,QAAQ,CAAC,cAAc,EAAE,8BAA8B,CAAC;IACxD,8GAA8G;IAC9G,QAAQ,CAAC,iBAAiB,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACpE,2FAA2F;IAC3F,QAAQ,CAAC,eAAe,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACpE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IAClD,qGAAqG;IACrG,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtD;AAmHD;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,KAAK,CAAC,EAAE,CAAC;IACvD,kHAAkH;IAClH,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAChD,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,4FAA4F;IAC5F,QAAQ,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,CAAC;CAC1H,CAiMA,CAAC"}
1	+ {"version":3,"file":"GovernedDocumentAcceptanceControl.d.ts","sourceRoot":"","sources":["../../../../../src/components/compliance/GovernedDocumentAcceptanceControl.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAgD,MAAM,OAAO,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAqB,MAAM,qCAAqC,CAAC;AAC/F,OAAO,EACL,8BAA8B,EAM9B,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,EACpC,MAAM,uBAAuB,CAAC;AAO/B;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,UAAU,8BAA8B,EAAE,OAAO,MAAM,KAAG,MAC5C,CAAC;AAE/C,gGAAgG;AAChG,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,GAAG,SAAS,CAAC;CAC/D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAA+B;IAC9C,iFAAiF;IACjF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,kCAAkC,EAAE,CAAC;IACzE,iCAAiC;IACjC,QAAQ,CAAC,cAAc,EAAE,8BAA8B,CAAC;IACxD,8GAA8G;IAC9G,QAAQ,CAAC,iBAAiB,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACpE,2FAA2F;IAC3F,QAAQ,CAAC,eAAe,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACpE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IAClD,qGAAqG;IACrG,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtD;AAmHD;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,KAAK,CAAC,EAAE,CAAC;IACvD,kHAAkH;IAClH,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAChD,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,4FAA4F;IAC5F,QAAQ,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,CAAC;CAC1H,CAiMA,CAAC"}

package/dist/esm/components/compliance/GovernedDocumentAcceptanceControl.js CHANGED Viewed

@@ -27,6 +27,7 @@ import { CheckboxRoot } from '../../components/form/controls/boolean/checkbox.js
 import { Link } from '../../components/typography/link.js';
 import { Text } from '../../components/typography/text.js';
 import { cn } from '../../core/ui/cn.js';
+import { focusIndicatorClasses, FocusIndicatorShape } from '../../core/ui/themes/focus-indicator.js';
 /**
  * A pane's identity in the read set.
  *
@@ -83,7 +84,7 @@ const GovernedDocumentReadingPane = ({ document, t, paneKey, onReachedEnd }) =>
          * `tabIndex` because a scrollable region that cannot be focused cannot be scrolled from the
          * keyboard, which would make the gate unpassable without a mouse.
          */
-        lang: document.content.locale, role: "region", "aria-label": document.content.title, className: "focus-ring-offset max-h-64 overflow-y-auto rounded-md border border-border bg-muted/30 p-element text-sm", children: [_jsx("h2", { className: "font-medium", children: document.content.title }), document.kind === GovernedDocumentPublicDocumentKind.UNRELEASED_DRAFT && (_jsx(Text, { role: "note", className: "mt-element-sm text-xs font-medium", children: t(UserRegisterLabel.TERMS_DRAFT_NOTICE) })), document.content.sections.map((section) => (_jsxs("div", { className: "mt-element flex flex-col gap-element-sm", children: [_jsx("h3", { className: "font-medium", children: section.title }), section.clauses.map((clause) => (_jsxs("div", { className: "flex flex-col gap-element-sm", children: [_jsx(Text, { className: "whitespace-pre-line text-muted-foreground", children: clause.bodyMarkdown }), clause.standing === GovernedDocumentPublicClauseStanding.NOT_YET_ESTABLISHED && (_jsx(Text, { role: "note", className: "text-xs", children: `${t(UserRegisterLabel.TERMS_CLAUSE_NOT_ESTABLISHED)} ${clause.missingInformation ?? ''}`.trim() }))] }, clause.clauseRef)))] }, section.sectionRef)))] }));
+        lang: document.content.locale, role: "region", "aria-label": document.content.title, className: cn("max-h-64 overflow-y-auto rounded-md border border-border bg-muted/30 p-element text-sm", focusIndicatorClasses(FocusIndicatorShape.FIELD)), children: [_jsx("h2", { className: "font-medium", children: document.content.title }), document.kind === GovernedDocumentPublicDocumentKind.UNRELEASED_DRAFT && (_jsx(Text, { role: "note", className: "mt-element-sm text-xs font-medium", children: t(UserRegisterLabel.TERMS_DRAFT_NOTICE) })), document.content.sections.map((section) => (_jsxs("div", { className: "mt-element flex flex-col gap-element-sm", children: [_jsx("h3", { className: "font-medium", children: section.title }), section.clauses.map((clause) => (_jsxs("div", { className: "flex flex-col gap-element-sm", children: [_jsx(Text, { className: "whitespace-pre-line text-muted-foreground", children: clause.bodyMarkdown }), clause.standing === GovernedDocumentPublicClauseStanding.NOT_YET_ESTABLISHED && (_jsx(Text, { role: "note", className: "text-xs", children: `${t(UserRegisterLabel.TERMS_CLAUSE_NOT_ESTABLISHED)} ${clause.missingInformation ?? ''}`.trim() }))] }, clause.clauseRef)))] }, section.sectionRef)))] }));
 };
 /**
  * How this application asks the registrant to accept its governed documents — the three declared