@zitadel/components 0.1.0-alpha.13 → 0.1.0-alpha.15

package/dist/{orchestrator-SBANwyzM.mjs → orchestrator-Ty4uM5n_.mjs}

@@ -1,6 +1,6 @@
 import { C as baseHostStyles, S as focusVisibleStyles, T as emit, w as t, x as __decorate } from "./atoms-BSwVl736.mjs";
 import { r as tokensCss } from "./tokens-C0j4iCrs.mjs";
-import { t as default_default } from "./default-W5MwYLBc.mjs";
+import { t as default_default } from "./default-BmX2ZEbg.mjs";
 import { manifestRegistry } from "./manifests.mjs";
 import { LitElement, css, html, nothing } from "lit";
 import { customElement, property, state } from "lit/decorators.js";
@@ -127,6 +127,21 @@ async function getCurrentStep(api, id) {
 async function exchangeSession(api, body, params) {
 	return api.exchangeHandoff(body, params, apiRequestInit);
 }
+/**
+* Reads the current session (`GET /sessions/me`) with credentials so the
+* `__nextgen_session` cookie authenticates the request. Used by the
+* orchestrator's signed-in surfaces to render the user's identity.
+*/
+async function getSession$1(api) {
+	return await api.getMySession(apiRequestInit);
+}
+/**
+* Revokes the current session (`DELETE /sessions/me`) with credentials. The
+* server deletes the session and clears the cookie via `Set-Cookie: Max-Age=0`.
+*/
+async function revokeSession$1(api) {
+	await api.revokeMySession(apiRequestInit);
+}
 //#endregion
 //#region ../api/dist/runtime/base-url.mjs
 let proxyPath = "";
@@ -215,6 +230,7 @@ var zitadelNextGen_exports = /* @__PURE__ */ __exportAll({
 	getIssueChallengeUrl: () => getIssueChallengeUrl,
 	getKeys: () => getKeys,
 	getListFlowDefinitionsUrl: () => getListFlowDefinitionsUrl,
+	getListSchemasUrl: () => getListSchemasUrl,
 	getListSessionsUrl: () => getListSessionsUrl,
 	getListUsersUrl: () => getListUsersUrl,
 	getLive: () => getLive,
@@ -240,6 +256,7 @@ var zitadelNextGen_exports = /* @__PURE__ */ __exportAll({
 	introspect: () => introspect,
 	issueChallenge: () => issueChallenge,
 	listFlowDefinitions: () => listFlowDefinitions,
+	listSchemas: () => listSchemas,
 	listSessions: () => listSessions,
 	listUsers: () => listUsers,
 	revokeMySession: () => revokeMySession,
@@ -997,6 +1014,26 @@ const createSchema = async (createSchemaBody, params, options) => {
 		body: JSON.stringify(createSchemaBody)
 	});
 };
+const getListSchemasUrl = (params) => {
+	const normalizedParams = new URLSearchParams();
+	Object.entries(params || {}).forEach(([key, value]) => {
+		if (value !== void 0) normalizedParams.append(key, value === null ? "null" : value.toString());
+	});
+	const stringifiedParams = normalizedParams.toString();
+	return stringifiedParams.length > 0 ? `${getProxyPath()}/schemas?${stringifiedParams}` : `${getProxyPath()}/schemas`;
+};
+/**
+* Retrieve a list of all schemas available in the system. This endpoint
+supports pagination and filtering based on schema attributes.
+
+* @summary List all schemas
+*/
+const listSchemas = async (params, options) => {
+	return customFetch(getListSchemasUrl(params), {
+		...options,
+		method: "GET"
+	});
+};
 const getGetSchemaByIdUrl = (id, params) => {
 	const normalizedParams = new URLSearchParams();
 	Object.entries(params || {}).forEach(([key, value]) => {
@@ -1944,6 +1981,7 @@ const en = {
 	"register-password.description": "Choose a secure password for your account",
 	"register-password.field.password": "Password",
 	"register-password.action.submit": "Sign up",
+	"register-password.action.back": "Back",
 	"passkey-upsell.title": "Sign in faster next time",
 	"passkey-upsell.description": "No password needed ever again.",
 	"passkey-upsell.description.line1": "No password needed ever again.",
@@ -1966,6 +2004,7 @@ const en = {
 	"password.field.password": "Password",
 	"password.action.signin": "Sign in",
 	"password.action.passkey": "Sign in with a passkey",
+	"password.action.back": "Back",
 	"password.action.register.lead": "Don't have an account? ",
 	"password.action.register.link": "Sign up",
 	"register.title": "Create your account",
@@ -1982,11 +2021,12 @@ const en = {
 	"register.action.password": "Continue with password",
 	"register.action.passkey": "Continue with a passkey",
 	"register.action.submit": "Sign up",
+	"register.action.back": "Back",
 	"register.action.sign_in.lead": "Already have an account? ",
 	"register.action.sign_in.link": "Sign in",
 	"complete.title": "You're signed in as",
 	"signed-in.continue": "Continue",
-	"signed-in.logout": "Logout",
+	"signed-in.logout": "Sign out",
 	"passkey-login.title": "Sign in with your passkey",
 	"recover.title": "Check your email",
 	"recover.description": "We sent a password reset link to your email address.",
@@ -2043,6 +2083,7 @@ const de = {
 	"register-password.description": "Wähle ein sicheres Passwort für dein Konto",
 	"register-password.field.password": "Passwort",
 	"register-password.action.submit": "Registrieren",
+	"register-password.action.back": "Zurück",
 	"passkey-upsell.title": "Nächstes Mal schneller anmelden",
 	"passkey-upsell.description": "Kein Passwort mehr nötig.",
 	"passkey-upsell.description.line1": "Kein Passwort mehr nötig.",
@@ -2065,6 +2106,7 @@ const de = {
 	"password.field.password": "Passwort",
 	"password.action.signin": "Anmelden",
 	"password.action.passkey": "Mit Passkey anmelden",
+	"password.action.back": "Zurück",
 	"password.action.register.lead": "Noch kein Konto? ",
 	"password.action.register.link": "Registrieren",
 	"register.title": "Konto erstellen",
@@ -2081,6 +2123,7 @@ const de = {
 	"register.action.password": "Mit Passwort fortfahren",
 	"register.action.passkey": "Weiter mit Passkey",
 	"register.action.submit": "Registrieren",
+	"register.action.back": "Zurück",
 	"register.action.sign_in.lead": "Bereits ein Konto? ",
 	"register.action.sign_in.link": "Anmelden",
 	"complete.title": "Du bist angemeldet als",
@@ -2141,6 +2184,7 @@ const it = {
 	"register-password.description": "Scegli una password sicura per il tuo account",
 	"register-password.field.password": "Password",
 	"register-password.action.submit": "Registrati",
+	"register-password.action.back": "Indietro",
 	"passkey-upsell.title": "Accedi più velocemente la prossima volta",
 	"passkey-upsell.description": "Nessuna password necessaria.",
 	"passkey-upsell.description.line1": "Nessuna password necessaria.",
@@ -2163,6 +2207,7 @@ const it = {
 	"password.field.password": "Password",
 	"password.action.signin": "Accedi",
 	"password.action.passkey": "Accedi con passkey",
+	"password.action.back": "Indietro",
 	"password.action.register.lead": "Non hai un account? ",
 	"password.action.register.link": "Registrati",
 	"register.title": "Crea il tuo account",
@@ -2179,6 +2224,7 @@ const it = {
 	"register.action.password": "Continua con password",
 	"register.action.passkey": "Continua con passkey",
 	"register.action.submit": "Registrati",
+	"register.action.back": "Indietro",
 	"register.action.sign_in.lead": "Hai già un account? ",
 	"register.action.sign_in.link": "Accedi",
 	"complete.title": "Sei connesso come",
@@ -3008,7 +3054,6 @@ function collectInitialValues(step) {
 }
 //#endregion
 //#region src/orchestrator/zitadel-logout.ts
-const DISPLAY_COOKIE_NAME = "__nextgen_display";
 let ZitadelLogout = class ZitadelLogout extends LitElement {
 	static styles = [baseHostStyles, css`
       :host {
@@ -3203,6 +3248,13 @@ let ZitadelLogout = class ZitadelLogout extends LitElement {
 	set displayEmail(value) {
 		this.#_displayEmail_accessor_storage = value;
 	}
+	#_displayUserId_accessor_storage = "";
+	get displayUserId() {
+		return this.#_displayUserId_accessor_storage;
+	}
+	set displayUserId(value) {
+		this.#_displayUserId_accessor_storage = value;
+	}
 	#_open_accessor_storage = false;
 	get open() {
 		return this.#_open_accessor_storage;
@@ -3225,17 +3277,21 @@ let ZitadelLogout = class ZitadelLogout extends LitElement {
 		this.#_errorMessage_accessor_storage = value;
 	}
 	templateMode = false;
+	pendingTemplate = null;
+	projectedContainer = null;
+	identityRequested = false;
 	connectedCallback() {
 		super.connectedCallback();
 		this.dataset.theme = "dark";
-		this.readDisplayCookie();
 		const tmpl = this.querySelector("template");
 		if (tmpl instanceof HTMLTemplateElement) {
 			this.templateMode = true;
-			this.renderTemplate(tmpl);
+			this.pendingTemplate = tmpl;
+			this.projectTemplate();
 		}
 		document.addEventListener("click", this.handleDocumentClick);
 		document.addEventListener("keydown", this.handleDocumentKeydown);
+		this.maybeLoadIdentity();
 	}
 	disconnectedCallback() {
 		super.disconnectedCallback();
@@ -3245,38 +3301,67 @@ let ZitadelLogout = class ZitadelLogout extends LitElement {
 	updated() {
 		const root = this.shadowRoot;
 		if (root && !this.templateMode) applyBaseTokens(root);
+		this.maybeLoadIdentity();
+	}
+	/** Declarative config read from this element's attributes. */
+	get projectAttrs() {
+		return {
+			projectId: this.projectId,
+			proxyPath: this.proxyPath,
+			url: this.url
+		};
 	}
 	/**
-	* Decodes the `__nextgen_display` cookie (base64-encoded JSON, set by the
-	* auth backend on sign-in) and populates `displayName` / `displayEmail`.
-	* A missing or malformed cookie is intentionally non-fatal — the dropdown
-	* still renders, just with empty values.
+	* Fetches the signed-in identity from `GET /sessions/me` once a project is
+	* resolvable. No-ops until then (and on repeat calls) so framework property
+	* timing doesn't matter and we never fire the request twice. A pending
+	* `<template>` is already projected in `connectedCallback`, so when no config
+	* is available yet the logout control still renders; it is re-projected with
+	* the real identity once a later request succeeds.
 	*/
-	readDisplayCookie() {
-		if (typeof document === "undefined") return;
-		const match = document.cookie.match(new RegExp(`(?:^|;\\s*)${DISPLAY_COOKIE_NAME}=([^;]+)`));
-		if (!match || !match[1]) return;
+	maybeLoadIdentity() {
+		if (this.identityRequested) return;
+		let api;
 		try {
-			const data = JSON.parse(atob(match[1]));
-			this.displayName = typeof data.name === "string" ? data.name : "";
-			this.displayEmail = typeof data.email === "string" ? data.email : "";
-		} catch {}
+			({api} = resolveApi(this.project, this.projectAttrs, "<zitadel-logout>"));
+		} catch {
+			return;
+		}
+		this.identityRequested = true;
+		this.loadIdentity(api);
+	}
+	async loadIdentity(api) {
+		try {
+			const session = await getSession$1(api);
+			this.displayName = session.name ?? "";
+			this.displayEmail = session.email ?? "";
+			this.displayUserId = session.user_id ?? "";
+		} catch {} finally {
+			this.projectTemplate();
+		}
 	}
 	get initial() {
-		const source = this.displayName || this.displayEmail;
+		const source = this.displayName || this.displayEmail || this.displayUserId;
 		return source ? source.charAt(0).toUpperCase() : "?";
 	}
 	/**
-	* Clones a consumer-supplied `<template>` into the light DOM, fills the
+	* Clones the consumer-supplied `<template>` into the light DOM, fills the
 	* `{{name}}`, `{{email}}`, and `{{initial}}` tokens via a TreeWalker, and
 	* wires every element with `data-action="logout"` to trigger sign-out.
 	* Light-DOM mounting is deliberate so the consumer's existing CSS applies.
+	*
+	* Re-runnable: each call replaces the previously projected clone, so a late
+	* identity fetch (or a `project` assigned post-mount) updates the rendered
+	* markup instead of leaving the placeholders stuck on their initial values.
 	*/
-	renderTemplate(tmpl) {
-		const clone = tmpl.content.cloneNode(true);
+	projectTemplate() {
+		if (!this.templateMode || !this.pendingTemplate) return;
+		const clone = this.pendingTemplate.content.cloneNode(true);
 		fillTemplateTokens(clone, this.displayName, this.displayEmail, this.initial);
 		const container = document.createElement("span");
 		container.appendChild(clone);
+		this.projectedContainer?.remove();
+		this.projectedContainer = container;
 		this.appendChild(container);
 		container.querySelectorAll("[data-action=\"logout\"]").forEach((el) => {
 			el.addEventListener("click", (event) => {
@@ -3306,20 +3391,12 @@ let ZitadelLogout = class ZitadelLogout extends LitElement {
 	* clears the cookie via `Set-Cookie: Max-Age=0`. On success this element fires
 	* `zitadel-signout` and optionally navigates to `postSignOutUrl`.
 	*/
-	/** Declarative config read from this element's attributes. */
-	get projectAttrs() {
-		return {
-			projectId: this.projectId,
-			proxyPath: this.proxyPath,
-			url: this.url
-		};
-	}
 	async doLogout() {
 		this.loading = true;
 		this.errorMessage = "";
 		try {
 			const { api } = resolveApi(this.project, this.projectAttrs, "<zitadel-logout>");
-			await api.revokeMySession({ credentials: "include" });
+			await revokeSession$1(api);
 		} catch (error) {
 			const message = error instanceof Error ? error.message : "";
 			this.errorMessage = message || "Sign-out failed. Please try again.";
@@ -3371,8 +3448,10 @@ let ZitadelLogout = class ZitadelLogout extends LitElement {
               <div class="preview">
                 <div class="preview-avatar" aria-hidden="true">${this.initial}</div>
                 <div class="preview-info">
-                  <div class="preview-name">${this.displayName || this.displayEmail}</div>
-                  ${this.displayName ? html`<div class="preview-email">${this.displayEmail}</div>` : nothing}
+                  <div class="preview-name">
+                    ${this.displayName || this.displayEmail || this.displayUserId}
+                  </div>
+                  ${this.displayName && this.displayEmail ? html`<div class="preview-email">${this.displayEmail}</div>` : nothing}
                 </div>
               </div>
 
@@ -3430,6 +3509,7 @@ __decorate([property({
 })], ZitadelLogout.prototype, "clientId", null);
 __decorate([state()], ZitadelLogout.prototype, "displayName", null);
 __decorate([state()], ZitadelLogout.prototype, "displayEmail", null);
+__decorate([state()], ZitadelLogout.prototype, "displayUserId", null);
 __decorate([state()], ZitadelLogout.prototype, "open", null);
 __decorate([state()], ZitadelLogout.prototype, "loading", null);
 __decorate([state()], ZitadelLogout.prototype, "errorMessage", null);
@@ -3448,6 +3528,250 @@ function fillTemplateTokens(fragment, name, email, initial) {
 	}
 }
 //#endregion
-export { buildBrandingStylesheet as _, createSanitiser as a, startFlow as b, de as c, MANDATORY_GATES_MARKER as d, mandatoryGatesMarkerComment as f, applyBrandingTokens as g, validateBranding as h, layout_chrome_default as i, en as l, applyFontUrl as m, ZitadelLogin as n, builtinLocales as o, patchMandatoryGates as p, ThemeController as r, it as s, ZitadelLogout as t, TEMPLATE_NAMES as u, resolveTheme as v, submitStep as x, getCurrentStep as y };
+//#region src/orchestrator/zitadel-session.ts
+let ZitadelSession = class ZitadelSession extends LitElement {
+	static styles = [baseHostStyles, css`
+      :host {
+        display: block;
+        min-height: 100vh;
+        background: ${t.color.surface.defaultBlack};
+        color: ${t.color.text.primaryWhite};
+      }
+      .title {
+        margin: 0;
+        font-family: ${t.font.family.heading};
+        font-size: 2rem;
+        font-weight: 700;
+        line-height: 2.5rem;
+        letter-spacing: -0.02em;
+        color: ${t.color.text.primaryWhite};
+        text-align: left;
+      }
+      .identity {
+        margin: 0;
+        font-family: ${t.font.family.sans};
+        font-size: 0.875rem;
+        line-height: 1.25rem;
+        font-weight: 400;
+        color: ${t.color.text.secondaryGray};
+        text-align: left;
+        overflow-wrap: anywhere;
+      }
+      .error {
+        margin: 0;
+        font-size: 0.875rem;
+        line-height: 1.25rem;
+        color: ${t.color.text.error};
+      }
+    `];
+	#_project_accessor_storage;
+	get project() {
+		return this.#_project_accessor_storage;
+	}
+	set project(value) {
+		this.#_project_accessor_storage = value;
+	}
+	#_projectId_accessor_storage = "";
+	get projectId() {
+		return this.#_projectId_accessor_storage;
+	}
+	set projectId(value) {
+		this.#_projectId_accessor_storage = value;
+	}
+	#_proxyPath_accessor_storage = "";
+	get proxyPath() {
+		return this.#_proxyPath_accessor_storage;
+	}
+	set proxyPath(value) {
+		this.#_proxyPath_accessor_storage = value;
+	}
+	#_url_accessor_storage = "";
+	get url() {
+		return this.#_url_accessor_storage;
+	}
+	set url(value) {
+		this.#_url_accessor_storage = value;
+	}
+	#_postSignOutUrl_accessor_storage = "";
+	get postSignOutUrl() {
+		return this.#_postSignOutUrl_accessor_storage;
+	}
+	set postSignOutUrl(value) {
+		this.#_postSignOutUrl_accessor_storage = value;
+	}
+	#_heading_accessor_storage = "Signed in as";
+	get heading() {
+		return this.#_heading_accessor_storage;
+	}
+	set heading(value) {
+		this.#_heading_accessor_storage = value;
+	}
+	#_logoutLabel_accessor_storage = "Sign out";
+	get logoutLabel() {
+		return this.#_logoutLabel_accessor_storage;
+	}
+	set logoutLabel(value) {
+		this.#_logoutLabel_accessor_storage = value;
+	}
+	#_displayName_accessor_storage = "";
+	get displayName() {
+		return this.#_displayName_accessor_storage;
+	}
+	set displayName(value) {
+		this.#_displayName_accessor_storage = value;
+	}
+	#_displayEmail_accessor_storage = "";
+	get displayEmail() {
+		return this.#_displayEmail_accessor_storage;
+	}
+	set displayEmail(value) {
+		this.#_displayEmail_accessor_storage = value;
+	}
+	#_displayUserId_accessor_storage = "";
+	get displayUserId() {
+		return this.#_displayUserId_accessor_storage;
+	}
+	set displayUserId(value) {
+		this.#_displayUserId_accessor_storage = value;
+	}
+	#_loading_accessor_storage = false;
+	get loading() {
+		return this.#_loading_accessor_storage;
+	}
+	set loading(value) {
+		this.#_loading_accessor_storage = value;
+	}
+	#_errorMessage_accessor_storage = "";
+	get errorMessage() {
+		return this.#_errorMessage_accessor_storage;
+	}
+	set errorMessage(value) {
+		this.#_errorMessage_accessor_storage = value;
+	}
+	identityRequested = false;
+	connectedCallback() {
+		super.connectedCallback();
+		this.dataset.theme = "dark";
+		this.maybeLoadIdentity();
+	}
+	/** Single identity line: human-readable name, then email, then user_id. */
+	get identityLabel() {
+		return this.displayName || this.displayEmail || this.displayUserId;
+	}
+	updated() {
+		const root = this.shadowRoot;
+		if (root) applyBaseTokens(root);
+		this.maybeLoadIdentity();
+	}
+	/** Declarative config read from this element's attributes. */
+	get projectAttrs() {
+		return {
+			projectId: this.projectId,
+			proxyPath: this.proxyPath,
+			url: this.url
+		};
+	}
+	/**
+	* Fetches the signed-in identity from `GET /sessions/me` once a project is
+	* resolvable. No-ops until then (and on repeat calls) so framework property
+	* timing doesn't matter and we never fire the request twice.
+	*/
+	maybeLoadIdentity() {
+		if (this.identityRequested) return;
+		let api;
+		try {
+			({api} = resolveApi(this.project, this.projectAttrs, "<zitadel-session>"));
+		} catch {
+			return;
+		}
+		this.identityRequested = true;
+		this.fetchIdentity(api);
+	}
+	async fetchIdentity(api) {
+		try {
+			const session = await getSession$1(api);
+			this.displayName = session.name ?? "";
+			this.displayEmail = session.email ?? "";
+			this.displayUserId = session.user_id ?? "";
+		} catch {}
+	}
+	/**
+	* Calls `DELETE /sessions/me` (`revokeMySession`) with credentials. On
+	* success fires `zitadel-signout` and optionally navigates to
+	* `postSignOutUrl`; on failure surfaces an inline error and stays put.
+	*/
+	async doLogout() {
+		this.loading = true;
+		this.errorMessage = "";
+		try {
+			const { api } = resolveApi(this.project, this.projectAttrs, "<zitadel-session>");
+			await revokeSession$1(api);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "";
+			this.errorMessage = message || "Sign-out failed. Please try again.";
+			this.loading = false;
+			return;
+		}
+		this.loading = false;
+		emit(this, "zitadel-signout", {
+			name: this.displayName,
+			email: this.displayEmail
+		});
+		if (this.postSignOutUrl && typeof window !== "undefined") window.location.assign(this.postSignOutUrl);
+	}
+	handleLogout(event) {
+		event.preventDefault();
+		this.doLogout();
+	}
+	render() {
+		return html`
+      <zl-page-shell>
+        <zl-card>
+          <h1 slot="header" class="title">${this.heading}</h1>
+          ${this.identityLabel ? html`<p slot="header" class="identity">${this.identityLabel}</p>` : nothing}
+
+          <zl-button
+            hierarchy="primary"
+            size="medium"
+            block
+            ?loading=${this.loading}
+            data-testid="zitadel-session-logout"
+            label=${this.logoutLabel}
+            @zl-submit=${this.handleLogout}
+          ></zl-button>
+
+          ${this.errorMessage ? html`<p class="error" role="alert">${this.errorMessage}</p>` : nothing}
+        </zl-card>
+      </zl-page-shell>
+    `;
+	}
+};
+__decorate([property({ attribute: false })], ZitadelSession.prototype, "project", null);
+__decorate([property({
+	type: String,
+	attribute: "project-id"
+})], ZitadelSession.prototype, "projectId", null);
+__decorate([property({
+	type: String,
+	attribute: "proxy-path"
+})], ZitadelSession.prototype, "proxyPath", null);
+__decorate([property({ type: String })], ZitadelSession.prototype, "url", null);
+__decorate([property({
+	type: String,
+	attribute: "post-sign-out-url"
+})], ZitadelSession.prototype, "postSignOutUrl", null);
+__decorate([property({ type: String })], ZitadelSession.prototype, "heading", null);
+__decorate([property({
+	type: String,
+	attribute: "logout-label"
+})], ZitadelSession.prototype, "logoutLabel", null);
+__decorate([state()], ZitadelSession.prototype, "displayName", null);
+__decorate([state()], ZitadelSession.prototype, "displayEmail", null);
+__decorate([state()], ZitadelSession.prototype, "displayUserId", null);
+__decorate([state()], ZitadelSession.prototype, "loading", null);
+__decorate([state()], ZitadelSession.prototype, "errorMessage", null);
+ZitadelSession = __decorate([customElement("zitadel-session")], ZitadelSession);
+//#endregion
+export { submitStep as S, applyBrandingTokens as _, layout_chrome_default as a, getCurrentStep as b, it as c, TEMPLATE_NAMES as d, MANDATORY_GATES_MARKER as f, validateBranding as g, applyFontUrl as h, ThemeController as i, de as l, patchMandatoryGates as m, ZitadelLogout as n, createSanitiser as o, mandatoryGatesMarkerComment as p, ZitadelLogin as r, builtinLocales as s, ZitadelSession as t, en as u, buildBrandingStylesheet as v, startFlow as x, resolveTheme as y };
 
-//# sourceMappingURL=orchestrator-SBANwyzM.mjs.map
+//# sourceMappingURL=orchestrator-Ty4uM5n_.mjs.map