powr-sdk-web 5.9.0 → 5.10.0

package/dist/admin/index.js

@@ -66,7 +66,11 @@ var AdminDashboard = function AdminDashboard(_ref2) {
     _ref2$theme = _ref2.theme,
     theme = _ref2$theme === void 0 ? 'default' : _ref2$theme,
     _ref2$sectionLoaders = _ref2.sectionLoaders,
-    sectionLoaders = _ref2$sectionLoaders === void 0 ? {} : _ref2$sectionLoaders;
+    sectionLoaders = _ref2$sectionLoaders === void 0 ? {} : _ref2$sectionLoaders,
+    _ref2$roleOptions = _ref2.roleOptions,
+    roleOptions = _ref2$roleOptions === void 0 ? null : _ref2$roleOptions,
+    _ref2$usersProps = _ref2.usersProps,
+    usersProps = _ref2$usersProps === void 0 ? null : _ref2$usersProps;
   var _useState = (0, _react.useState)(null),
     _useState2 = _slicedToArray(_useState, 2),
     currentSection = _useState2[0],
@@ -275,9 +279,11 @@ var AdminDashboard = function AdminDashboard(_ref2) {
       formPublicBaseUrl: formPublicBaseUrl,
       theme: theme === 'dark' ? 'dark' : 'blue'
     };
-    var extraProps = currentSection === 'users' ? {
+    var extraProps = currentSection === 'users' ? _objectSpread(_objectSpread({
       showActions: true
-    } : currentSection === 'tasks' ? {
+    }, roleOptions ? {
+      roleOptions: roleOptions
+    } : {}), usersProps || {}) : currentSection === 'tasks' ? {
       onError: function onError(message) {
         return alert(message);
       }
@@ -342,6 +348,11 @@ AdminDashboard.propTypes = {
   sections: _propTypes["default"].arrayOf(_propTypes["default"].string),
   formPublicBaseUrl: _propTypes["default"].string,
   theme: _propTypes["default"].oneOf(['default', 'dark']),
-  sectionLoaders: _propTypes["default"].objectOf(_propTypes["default"].func)
+  sectionLoaders: _propTypes["default"].objectOf(_propTypes["default"].func),
+  roleOptions: _propTypes["default"].arrayOf(_propTypes["default"].shape({
+    value: _propTypes["default"].number.isRequired,
+    label: _propTypes["default"].string.isRequired
+  })),
+  usersProps: _propTypes["default"].object
 };
 var _default2 = exports["default"] = AdminDashboard;

package/dist/index.js

@@ -1,5 +1,6 @@
 "use strict";
 
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
@@ -21,6 +22,12 @@ Object.defineProperty(exports, "DEFAULT_COUNTRY_CODE", {
     return _phone.DEFAULT_COUNTRY_CODE;
   }
 });
+Object.defineProperty(exports, "DEFAULT_POWR_TARGETS", {
+  enumerable: true,
+  get: function get() {
+    return _sso.DEFAULT_POWR_TARGETS;
+  }
+});
 Object.defineProperty(exports, "OnboardingShell", {
   enumerable: true,
   get: function get() {
@@ -105,6 +112,12 @@ Object.defineProperty(exports, "PowrBaseReviews", {
     return _reviews["default"];
   }
 });
+Object.defineProperty(exports, "PowrBaseSso", {
+  enumerable: true,
+  get: function get() {
+    return _sso["default"];
+  }
+});
 Object.defineProperty(exports, "PowrBaseSwiper", {
   enumerable: true,
   get: function get() {
@@ -183,6 +196,12 @@ Object.defineProperty(exports, "buildPhoneFromParts", {
     return _phone.buildPhoneFromParts;
   }
 });
+Object.defineProperty(exports, "buildPowrSsoUrl", {
+  enumerable: true,
+  get: function get() {
+    return _sso.buildPowrSsoUrl;
+  }
+});
 Object.defineProperty(exports, "coercePhoneForStorage", {
   enumerable: true,
   get: function get() {
@@ -267,6 +286,24 @@ Object.defineProperty(exports, "isValidPhone", {
     return _phone.isValidPhone;
   }
 });
+Object.defineProperty(exports, "issueLoginCode", {
+  enumerable: true,
+  get: function get() {
+    return _sso.issueLoginCode;
+  }
+});
+Object.defineProperty(exports, "loginWithCode", {
+  enumerable: true,
+  get: function get() {
+    return _sso.loginWithCode;
+  }
+});
+Object.defineProperty(exports, "matchPowrTarget", {
+  enumerable: true,
+  get: function get() {
+    return _sso.matchPowrTarget;
+  }
+});
 Object.defineProperty(exports, "mergePowrSteps", {
   enumerable: true,
   get: function get() {
@@ -291,6 +328,12 @@ Object.defineProperty(exports, "normalizePhone", {
     return _phone.normalizePhone;
   }
 });
+Object.defineProperty(exports, "openPowrLogin", {
+  enumerable: true,
+  get: function get() {
+    return _sso.openPowrLogin;
+  }
+});
 Object.defineProperty(exports, "parsePhone", {
   enumerable: true,
   get: function get() {
@@ -309,6 +352,12 @@ Object.defineProperty(exports, "resolveCountry", {
     return _phone.resolveCountry;
   }
 });
+Object.defineProperty(exports, "safeNextPath", {
+  enumerable: true,
+  get: function get() {
+    return _sso.safeNextPath;
+  }
+});
 var _table = _interopRequireDefault(require("./table"));
 var _swiper = _interopRequireDefault(require("./swiper"));
 var _reviews = _interopRequireDefault(require("./reviews"));
@@ -321,6 +370,7 @@ var _calendar = _interopRequireDefault(require("./calendar"));
 var _blogs = _interopRequireDefault(require("./blogs"));
 var _likes = _interopRequireDefault(require("./likes"));
 var _auth = _interopRequireDefault(require("./auth"));
+var _sso = _interopRequireWildcard(require("./sso"));
 var _forms = _interopRequireDefault(require("./forms"));
 var _chat = _interopRequireDefault(require("./chat"));
 var _feeds = _interopRequireDefault(require("./feeds"));
@@ -334,4 +384,5 @@ var _onboarding = require("./onboarding");
 var _phone = require("./utils/phone");
 var _jwt = require("./utils/jwt");
 var _sessionMessages = require("./utils/sessionMessages");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t in e) "default" !== _t && {}.hasOwnProperty.call(e, _t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t)) && (i.get || i.set) ? o(f, _t, i) : f[_t] = e[_t]); return f; })(e, t); }
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }

package/dist/sso/api.js

@@ -0,0 +1,139 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.issueLoginCode = issueLoginCode;
+exports.loginWithCode = loginWithCode;
+exports.readHandoffParams = readHandoffParams;
+exports.safeNextPath = safeNextPath;
+exports.stripHandoffParams = stripHandoffParams;
+function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
+function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
+function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
+function joinApi(apiUrl, path) {
+  var base = String(apiUrl || "").replace(/\/+$/, "");
+  var p = String(path || "").replace(/^\/+/, "");
+  return "".concat(base, "/").concat(p);
+}
+
+/** Safe in-app path from `?next=` (relative only). */
+function safeNextPath(next) {
+  var fallback = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : "/";
+  if (next && String(next).startsWith("/") && !String(next).startsWith("//")) {
+    return String(next);
+  }
+  return fallback;
+}
+
+/**
+ * Issue a one-time login code (caller must already be authenticated).
+ * @param {string} apiUrl - Powr API base (…/powr)
+ * @param {string} bearerToken
+ */
+function issueLoginCode(_x, _x2) {
+  return _issueLoginCode.apply(this, arguments);
+}
+/**
+ * Exchange loginId for session (same shape as /login).
+ * @param {string} apiUrl
+ * @param {string} loginId
+ */
+function _issueLoginCode() {
+  _issueLoginCode = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(apiUrl, bearerToken) {
+    var res, data;
+    return _regenerator().w(function (_context) {
+      while (1) switch (_context.n) {
+        case 0:
+          _context.n = 1;
+          return fetch(joinApi(apiUrl, "auth/issue-login-code"), {
+            method: "POST",
+            headers: {
+              Authorization: "Bearer ".concat(bearerToken),
+              "Content-Type": "application/json"
+            }
+          });
+        case 1:
+          res = _context.v;
+          _context.n = 2;
+          return res.json()["catch"](function () {
+            return {};
+          });
+        case 2:
+          data = _context.v;
+          if (!(!res.ok || !data.success || !data.loginId)) {
+            _context.n = 3;
+            break;
+          }
+          throw new Error(data.message || "Could not start sign-in");
+        case 3:
+          return _context.a(2, data);
+      }
+    }, _callee);
+  }));
+  return _issueLoginCode.apply(this, arguments);
+}
+function loginWithCode(_x3, _x4) {
+  return _loginWithCode.apply(this, arguments);
+}
+function _loginWithCode() {
+  _loginWithCode = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(apiUrl, loginId) {
+    var res, data, err;
+    return _regenerator().w(function (_context2) {
+      while (1) switch (_context2.n) {
+        case 0:
+          _context2.n = 1;
+          return fetch(joinApi(apiUrl, "auth/login-with-code"), {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json"
+            },
+            body: JSON.stringify({
+              loginId: loginId
+            })
+          });
+        case 1:
+          res = _context2.v;
+          _context2.n = 2;
+          return res.json()["catch"](function () {
+            return {};
+          });
+        case 2:
+          data = _context2.v;
+          if (!(!res.ok || !data.success || !data.token || !data.user)) {
+            _context2.n = 3;
+            break;
+          }
+          err = new Error(data.message || "This login link expired");
+          err.status = res.status;
+          err.data = data;
+          throw err;
+        case 3:
+          return _context2.a(2, data);
+      }
+    }, _callee2);
+  }));
+  return _loginWithCode.apply(this, arguments);
+}
+function readHandoffParams() {
+  if (typeof window === "undefined") {
+    return {
+      loginId: null,
+      next: ""
+    };
+  }
+  var params = new URLSearchParams(window.location.search);
+  return {
+    loginId: params.get("loginId"),
+    next: params.get("next") || ""
+  };
+}
+function stripHandoffParams() {
+  if (typeof window === "undefined") return;
+  var params = new URLSearchParams(window.location.search);
+  params["delete"]("loginId");
+  params["delete"]("next");
+  var rest = params.toString();
+  window.history.replaceState({}, "", "".concat(window.location.pathname).concat(rest ? "?".concat(rest) : "").concat(window.location.hash));
+}

package/dist/sso/index.js

@@ -0,0 +1,244 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "DEFAULT_POWR_TARGETS", {
+  enumerable: true,
+  get: function get() {
+    return _openPowrLogin.DEFAULT_POWR_TARGETS;
+  }
+});
+Object.defineProperty(exports, "buildPowrSsoUrl", {
+  enumerable: true,
+  get: function get() {
+    return _openPowrLogin.buildPowrSsoUrl;
+  }
+});
+exports["default"] = PowrBaseSso;
+Object.defineProperty(exports, "issueLoginCode", {
+  enumerable: true,
+  get: function get() {
+    return _api.issueLoginCode;
+  }
+});
+Object.defineProperty(exports, "loginWithCode", {
+  enumerable: true,
+  get: function get() {
+    return _api.loginWithCode;
+  }
+});
+Object.defineProperty(exports, "matchPowrTarget", {
+  enumerable: true,
+  get: function get() {
+    return _openPowrLogin.matchPowrTarget;
+  }
+});
+Object.defineProperty(exports, "openPowrLogin", {
+  enumerable: true,
+  get: function get() {
+    return _openPowrLogin.openPowrLogin;
+  }
+});
+Object.defineProperty(exports, "readHandoffParams", {
+  enumerable: true,
+  get: function get() {
+    return _api.readHandoffParams;
+  }
+});
+Object.defineProperty(exports, "safeNextPath", {
+  enumerable: true,
+  get: function get() {
+    return _api.safeNextPath;
+  }
+});
+Object.defineProperty(exports, "stripHandoffParams", {
+  enumerable: true,
+  get: function get() {
+    return _api.stripHandoffParams;
+  }
+});
+var _react = _interopRequireWildcard(require("react"));
+var _api = require("./api");
+var _openPowrLogin = require("./openPowrLogin");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t in e) "default" !== _t && {}.hasOwnProperty.call(e, _t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t)) && (i.get || i.set) ? o(f, _t, i) : f[_t] = e[_t]); return f; })(e, t); }
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
+function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
+function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
+function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
+function _slicedToArray(r, e) { return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest(); }
+function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
+function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
+function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _iterableToArrayLimit(r, l) { var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (null != t) { var e, n, i, u, a = [], f = !0, o = !1; try { if (i = (t = t.call(r)).next, 0 === l) { if (Object(t) !== t) return; f = !1; } else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = !0); } catch (r) { o = !0, n = r; } finally { try { if (!f && null != t["return"] && (u = t["return"](), Object(u) !== u)) return; } finally { if (o) throw n; } } return a; } }
+function _arrayWithHoles(r) { if (Array.isArray(r)) return r; }
+function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
+function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
+function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
+function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+var shellStyle = {
+  display: "flex",
+  minHeight: "100vh",
+  flexDirection: "column",
+  alignItems: "center",
+  justifyContent: "center",
+  padding: "0 1.5rem",
+  textAlign: "center",
+  background: "var(--background, #fafafa)",
+  color: "var(--foreground, #111)",
+  fontFamily: "system-ui, -apple-system, Segoe UI, Roboto, sans-serif"
+};
+var mutedStyle = {
+  fontSize: "0.875rem",
+  fontWeight: 500,
+  color: "var(--muted-foreground, #737373)",
+  margin: 0
+};
+var titleStyle = {
+  marginTop: "1.5rem",
+  fontSize: "1.25rem",
+  fontWeight: 600,
+  letterSpacing: "-0.025em",
+  marginBottom: 0
+};
+var bodyStyle = {
+  marginTop: "0.5rem",
+  maxWidth: "24rem",
+  fontSize: "0.875rem",
+  color: "var(--muted-foreground, #737373)",
+  marginBottom: 0
+};
+var errorTextStyle = _objectSpread(_objectSpread({}, bodyStyle), {}, {
+  color: "var(--destructive, #dc2626)"
+});
+var spinnerStyle = {
+  marginTop: "1.5rem",
+  width: "2.5rem",
+  height: "2.5rem",
+  borderRadius: "9999px",
+  border: "2px solid var(--primary, #2563eb)",
+  borderTopColor: "transparent",
+  animation: "powr-sso-spin 0.7s linear infinite"
+};
+var btnStyle = {
+  marginTop: "1.5rem",
+  display: "inline-flex",
+  alignItems: "center",
+  justifyContent: "center",
+  borderRadius: "0.5rem",
+  background: "var(--primary, #2563eb)",
+  color: "var(--primary-foreground, #fff)",
+  padding: "0.5rem 1rem",
+  fontSize: "0.875rem",
+  fontWeight: 500,
+  textDecoration: "none",
+  border: "none",
+  cursor: "pointer"
+};
+
+/**
+ * Cross-app SSO handoff UI (UrbanStall → Powr apps).
+ * Apps keep a thin `/sso` page that renders this with `apiUrl` + `onSuccess`.
+ *
+ * @param {object} props
+ * @param {string} props.apiUrl - Powr API base ending in /powr (or /powr/)
+ * @param {string} [props.appName]
+ * @param {boolean} [props.ready=true] - Wait (e.g. auth hydrate) before exchanging code
+ * @param {string} [props.loginHref="/login"]
+ * @param {string} [props.loginId] - Defaults to ?loginId=
+ * @param {string} [props.next] - Defaults to ?next=
+ * @param {(data: object, ctx: { next: string, safeNext: string }) => void | Promise<void>} props.onSuccess
+ * @param {string} [props.signingInTitle]
+ * @param {string} [props.signingInMessage]
+ * @param {string} [props.errorTitle]
+ */
+function PowrBaseSso(_ref) {
+  var apiUrl = _ref.apiUrl,
+    _ref$appName = _ref.appName,
+    appName = _ref$appName === void 0 ? "App" : _ref$appName,
+    _ref$ready = _ref.ready,
+    ready = _ref$ready === void 0 ? true : _ref$ready,
+    _ref$loginHref = _ref.loginHref,
+    loginHref = _ref$loginHref === void 0 ? "/login" : _ref$loginHref,
+    loginIdProp = _ref.loginId,
+    nextProp = _ref.next,
+    onSuccess = _ref.onSuccess,
+    _ref$signingInTitle = _ref.signingInTitle,
+    signingInTitle = _ref$signingInTitle === void 0 ? "Signing you in…" : _ref$signingInTitle,
+    _ref$signingInMessage = _ref.signingInMessage,
+    signingInMessage = _ref$signingInMessage === void 0 ? "Finishing your UrbanStall handoff. This only takes a moment." : _ref$signingInMessage,
+    _ref$errorTitle = _ref.errorTitle,
+    errorTitle = _ref$errorTitle === void 0 ? "Sign-in link expired" : _ref$errorTitle;
+  var fromUrl = (0, _react.useState)(function () {
+    return (0, _api.readHandoffParams)();
+  })[0];
+  var loginId = loginIdProp !== undefined ? loginIdProp : fromUrl.loginId;
+  var next = nextProp !== undefined ? nextProp : fromUrl.next;
+  var _useState = (0, _react.useState)(loginId ? null : "Missing login link"),
+    _useState2 = _slicedToArray(_useState, 2),
+    error = _useState2[0],
+    setError = _useState2[1];
+  var _useState3 = (0, _react.useState)(Boolean(loginId)),
+    _useState4 = _slicedToArray(_useState3, 2),
+    busy = _useState4[0],
+    setBusy = _useState4[1];
+  var started = (0, _react.useRef)(false);
+  var onSuccessRef = (0, _react.useRef)(onSuccess);
+  onSuccessRef.current = onSuccess;
+  (0, _react.useEffect)(function () {
+    if (!loginId || !ready || !apiUrl || started.current) return;
+    started.current = true;
+    setBusy(true);
+    (0, _api.loginWithCode)(apiUrl, loginId).then(/*#__PURE__*/function () {
+      var _ref2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(data) {
+        var cb;
+        return _regenerator().w(function (_context) {
+          while (1) switch (_context.n) {
+            case 0:
+              (0, _api.stripHandoffParams)();
+              cb = onSuccessRef.current;
+              if (!(typeof cb === "function")) {
+                _context.n = 1;
+                break;
+              }
+              _context.n = 1;
+              return cb(data, {
+                next: next,
+                safeNext: (0, _api.safeNextPath)(next, "/")
+              });
+            case 1:
+              return _context.a(2);
+          }
+        }, _callee);
+      }));
+      return function (_x) {
+        return _ref2.apply(this, arguments);
+      };
+    }())["catch"](function (err) {
+      (0, _api.stripHandoffParams)();
+      setError((err === null || err === void 0 ? void 0 : err.message) || "Could not finish sign-in");
+      setBusy(false);
+    });
+  }, [loginId, next, ready, apiUrl]);
+  return /*#__PURE__*/_react["default"].createElement("div", {
+    style: shellStyle
+  }, /*#__PURE__*/_react["default"].createElement("style", null, "@keyframes powr-sso-spin{to{transform:rotate(360deg)}}"), /*#__PURE__*/_react["default"].createElement("p", {
+    style: mutedStyle
+  }, appName), busy && !error ? /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, /*#__PURE__*/_react["default"].createElement("div", {
+    style: spinnerStyle,
+    "aria-hidden": true
+  }), /*#__PURE__*/_react["default"].createElement("h1", {
+    style: titleStyle
+  }, signingInTitle), /*#__PURE__*/_react["default"].createElement("p", {
+    style: bodyStyle
+  }, signingInMessage)) : null, error ? /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, /*#__PURE__*/_react["default"].createElement("h1", {
+    style: titleStyle
+  }, errorTitle), /*#__PURE__*/_react["default"].createElement("p", {
+    style: errorTextStyle
+  }, error), /*#__PURE__*/_react["default"].createElement("a", {
+    href: loginHref,
+    style: btnStyle
+  }, "Continue to login")) : null);
+}

package/dist/sso/openPowrLogin.js

@@ -0,0 +1,165 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.DEFAULT_POWR_TARGETS = void 0;
+exports.buildPowrSsoUrl = buildPowrSsoUrl;
+exports.matchPowrTarget = matchPowrTarget;
+exports.openPowrLogin = openPowrLogin;
+var _api = require("./api");
+function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
+function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
+function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
+function _createForOfIteratorHelper(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
+function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function normalizeOrigin(value) {
+  return String(value || "").replace(/\/$/, "").toLowerCase();
+}
+
+/**
+ * Default Lawazia Powr app origin → /powr API map (prod + common local Quiz).
+ * Host apps can pass `targets` to override (e.g. from NEXT_PUBLIC_* env).
+ */
+var DEFAULT_POWR_TARGETS = exports.DEFAULT_POWR_TARGETS = [{
+  origins: ["https://rasoi.lawazia.tech"],
+  powrApiUrl: "https://rasoiapp-api-690167968218.europe-west1.run.app/powr"
+}, {
+  origins: ["https://win.urbanstall.app"],
+  powrApiUrl: "https://quizapp-api-new-762437065717.asia-south1.run.app/powr"
+}, {
+  origins: ["http://localhost:3001", "http://127.0.0.1:3001", "http://localhost:3010", "http://127.0.0.1:3010"],
+  powrApiUrl: "http://localhost:3000/powr"
+}, {
+  origins: ["https://earn.urbanstall.app"],
+  powrApiUrl: "https://ads-app-api-429552207832.asia-east1.run.app/powr"
+}];
+
+/**
+ * @param {string} url
+ * @param {Array<{ origins: string[], powrApiUrl: string }>} [targets]
+ * @returns {{ origin: string, powrApiUrl: string, pathname: string, search: string, hash: string } | null}
+ */
+function matchPowrTarget(url) {
+  var targets = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_POWR_TARGETS;
+  var parsed;
+  try {
+    parsed = new URL(url);
+  } catch (_unused) {
+    return null;
+  }
+  var origin = normalizeOrigin(parsed.origin);
+  var _iterator = _createForOfIteratorHelper(targets),
+    _step;
+  try {
+    for (_iterator.s(); !(_step = _iterator.n()).done;) {
+      var target = _step.value;
+      if ((target.origins || []).some(function (o) {
+        return normalizeOrigin(o) === origin;
+      })) {
+        return {
+          origin: parsed.origin.replace(/\/$/, ""),
+          powrApiUrl: String(target.powrApiUrl).replace(/\/$/, ""),
+          pathname: parsed.pathname || "/",
+          search: parsed.search || "",
+          hash: parsed.hash || ""
+        };
+      }
+    }
+  } catch (err) {
+    _iterator.e(err);
+  } finally {
+    _iterator.f();
+  }
+  return null;
+}
+
+/**
+ * Build destination `/sso?loginId=` (+ optional `next`) on the sibling app.
+ */
+function buildPowrSsoUrl(target, loginId) {
+  var _ref = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {},
+    _ref$ssoPath = _ref.ssoPath,
+    ssoPath = _ref$ssoPath === void 0 ? "/sso" : _ref$ssoPath;
+  var params = new URLSearchParams();
+  params.set("loginId", loginId);
+  var path = target.pathname || "/";
+  if (path && path !== "/" && path !== "/login" && path !== ssoPath) {
+    params.set("next", "".concat(path).concat(target.search || ""));
+  }
+  var basePath = ssoPath.startsWith("/") ? ssoPath : "/".concat(ssoPath);
+  return "".concat(target.origin).concat(basePath, "?").concat(params.toString());
+}
+function openPlain(url) {
+  if (typeof window === "undefined") return;
+  window.open(url, "_blank", "noopener,noreferrer");
+}
+
+/**
+ * Issue a login code on the target Powr API and navigate to `/sso?loginId=`.
+ * Falls back to opening the original URL when there is no token, no match, or issue fails.
+ *
+ * @param {string} url - Destination app URL (banner link, etc.)
+ * @param {string|null|undefined} token - Caller auth JWT (UrbanStall or Powr)
+ * @param {object} [options]
+ * @param {Array<{ origins: string[], powrApiUrl: string }>} [options.targets]
+ * @param {string} [options.ssoPath="/sso"]
+ * @param {(url: string) => void} [options.onFallback] - default window.open
+ * @param {(ssoUrl: string) => void} [options.navigate] - default location.assign
+ */
+function openPowrLogin(_x, _x2) {
+  return _openPowrLogin.apply(this, arguments);
+}
+function _openPowrLogin() {
+  _openPowrLogin = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(url, token) {
+    var options,
+      _options$targets,
+      targets,
+      _options$ssoPath,
+      ssoPath,
+      _options$onFallback,
+      onFallback,
+      _options$navigate,
+      navigate,
+      target,
+      data,
+      _args = arguments,
+      _t;
+    return _regenerator().w(function (_context) {
+      while (1) switch (_context.p = _context.n) {
+        case 0:
+          options = _args.length > 2 && _args[2] !== undefined ? _args[2] : {};
+          _options$targets = options.targets, targets = _options$targets === void 0 ? DEFAULT_POWR_TARGETS : _options$targets, _options$ssoPath = options.ssoPath, ssoPath = _options$ssoPath === void 0 ? "/sso" : _options$ssoPath, _options$onFallback = options.onFallback, onFallback = _options$onFallback === void 0 ? openPlain : _options$onFallback, _options$navigate = options.navigate, navigate = _options$navigate === void 0 ? function (ssoUrl) {
+            if (typeof window !== "undefined") window.location.assign(ssoUrl);
+          } : _options$navigate;
+          target = matchPowrTarget(url, targets);
+          if (!(!target || !token)) {
+            _context.n = 1;
+            break;
+          }
+          onFallback(url);
+          return _context.a(2);
+        case 1:
+          _context.p = 1;
+          _context.n = 2;
+          return (0, _api.issueLoginCode)(target.powrApiUrl, token);
+        case 2:
+          data = _context.v;
+          navigate(buildPowrSsoUrl(target, data.loginId, {
+            ssoPath: ssoPath
+          }));
+          _context.n = 4;
+          break;
+        case 3:
+          _context.p = 3;
+          _t = _context.v;
+          onFallback(url);
+        case 4:
+          return _context.a(2);
+      }
+    }, _callee, null, [[1, 3]]);
+  }));
+  return _openPowrLogin.apply(this, arguments);
+}

package/dist/users/admin.js

@@ -13,6 +13,10 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
 function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+function _toConsumableArray(r) { return _arrayWithoutHoles(r) || _iterableToArray(r) || _unsupportedIterableToArray(r) || _nonIterableSpread(); }
+function _nonIterableSpread() { throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
+function _iterableToArray(r) { if ("undefined" != typeof Symbol && null != r[Symbol.iterator] || null != r["@@iterator"]) return Array.from(r); }
+function _arrayWithoutHoles(r) { if (Array.isArray(r)) return _arrayLikeToArray(r); }
 function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
 function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
 function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
@@ -23,23 +27,14 @@ function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r)
 function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 function _iterableToArrayLimit(r, l) { var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (null != t) { var e, n, i, u, a = [], f = !0, o = !1; try { if (i = (t = t.call(r)).next, 0 === l) { if (Object(t) !== t) return; f = !1; } else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = !0); } catch (r) { o = !0, n = r; } finally { try { if (!f && null != t["return"] && (u = t["return"](), Object(u) !== u)) return; } finally { if (o) throw n; } } return a; } }
 function _arrayWithHoles(r) { if (Array.isArray(r)) return r; }
-var ROLE_OPTIONS = [{
+/** Generic Powr defaults — apps pass `roleOptions` for product-specific roles. */
+var DEFAULT_ROLE_OPTIONS = [{
   value: 1,
-  label: 'Student'
-}, {
-  value: 300,
-  label: 'College admin'
-}, {
-  value: 900,
-  label: 'Client'
+  label: 'User'
 }, {
   value: 100,
   label: 'Admin'
 }];
-var normalizeAccess = function normalizeAccess(access) {
-  if (access === 100 || access === 300 || access === 900) return access;
-  return 1;
-};
 var PowrBaseUsersAdmin = function PowrBaseUsersAdmin(_ref) {
   var apiUrl = _ref.apiUrl,
     projectId = _ref.projectId,
@@ -52,7 +47,9 @@ var PowrBaseUsersAdmin = function PowrBaseUsersAdmin(_ref) {
     _ref$onAddUser = _ref.onAddUser,
     onAddUser = _ref$onAddUser === void 0 ? null : _ref$onAddUser,
     _ref$onRoleChange = _ref.onRoleChange,
-    onRoleChange = _ref$onRoleChange === void 0 ? null : _ref$onRoleChange;
+    onRoleChange = _ref$onRoleChange === void 0 ? null : _ref$onRoleChange,
+    _ref$roleOptions = _ref.roleOptions,
+    roleOptions = _ref$roleOptions === void 0 ? null : _ref$roleOptions;
   var _useState = (0, _react.useState)([]),
     _useState2 = _slicedToArray(_useState, 2),
     users = _useState2[0],
@@ -73,6 +70,15 @@ var PowrBaseUsersAdmin = function PowrBaseUsersAdmin(_ref) {
     _useState0 = _slicedToArray(_useState9, 2),
     updatingUserId = _useState0[0],
     setUpdatingUserId = _useState0[1];
+  var resolvedRoleOptions = (0, _react.useMemo)(function () {
+    if (Array.isArray(roleOptions) && roleOptions.length > 0) return roleOptions;
+    return DEFAULT_ROLE_OPTIONS;
+  }, [roleOptions]);
+  var knownAccessValues = (0, _react.useMemo)(function () {
+    return new Set(resolvedRoleOptions.map(function (role) {
+      return Number(role.value);
+    }));
+  }, [resolvedRoleOptions]);
   (0, _react.useEffect)(function () {
     fetchUsers();
   }, [projectId]);
@@ -127,17 +133,38 @@ var PowrBaseUsersAdmin = function PowrBaseUsersAdmin(_ref) {
       return _ref2.apply(this, arguments);
     };
   }();
+  var normalizeAccess = function normalizeAccess(access) {
+    var _resolvedRoleOptions$;
+    var n = Number(access);
+    if (knownAccessValues.has(n)) return n;
+    return Number((_resolvedRoleOptions$ = resolvedRoleOptions[0]) === null || _resolvedRoleOptions$ === void 0 ? void 0 : _resolvedRoleOptions$.value) || 1;
+  };
+  var optionsForUser = function optionsForUser(access) {
+    var n = Number(access);
+    if (Number.isFinite(n) && !knownAccessValues.has(n)) {
+      return [].concat(_toConsumableArray(resolvedRoleOptions), [{
+        value: n,
+        label: "Access ".concat(n)
+      }]);
+    }
+    return resolvedRoleOptions;
+  };
   var getBadgeVariant = function getBadgeVariant(access) {
-    if (access === 100) return 'bg-red-100 text-red-800';
-    if (access === 300) return 'bg-purple-100 text-purple-800';
-    if (access === 900) return 'bg-blue-100 text-blue-800';
+    var n = Number(access);
+    if (n === 100) return 'bg-red-100 text-red-800';
+    if (n === 300) return 'bg-purple-100 text-purple-800';
+    if (n === 500) return 'bg-teal-100 text-teal-800';
+    if (n === 900) return 'bg-blue-100 text-blue-800';
     return 'bg-gray-100 text-gray-800';
   };
   var getBadgeText = function getBadgeText(access) {
-    var option = ROLE_OPTIONS.find(function (role) {
-      return role.value === normalizeAccess(access);
+    var n = Number(access);
+    var option = resolvedRoleOptions.find(function (role) {
+      return Number(role.value) === n;
     });
-    return (option === null || option === void 0 ? void 0 : option.label) || 'Student';
+    if (option) return option.label;
+    if (Number.isFinite(n)) return "Access ".concat(n);
+    return 'User';
   };
   var updateUserRole = /*#__PURE__*/function () {
     var _ref3 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(user, newAccess) {
@@ -153,7 +180,7 @@ var PowrBaseUsersAdmin = function PowrBaseUsersAdmin(_ref) {
             setFeedback('Could not resolve user id');
             return _context2.a(2);
           case 1:
-            if (!(normalizeAccess(user.access) === newAccess)) {
+            if (!(Number(user.access) === newAccess)) {
               _context2.n = 2;
               break;
             }
@@ -266,6 +293,8 @@ var PowrBaseUsersAdmin = function PowrBaseUsersAdmin(_ref) {
     var _user$fullName;
     var userId = getUserId(user);
     var isUpdating = updatingUserId === userId;
+    var selectOptions = optionsForUser(user.access);
+    var selectValue = Number.isFinite(Number(user.access)) ? Number(user.access) : normalizeAccess(user.access);
     return /*#__PURE__*/_react["default"].createElement("tr", {
       key: userId || user._id,
       className: onUserClick ? 'cursor-pointer hover:bg-gray-50' : '',
@@ -296,13 +325,13 @@ var PowrBaseUsersAdmin = function PowrBaseUsersAdmin(_ref) {
     }, showActions ? /*#__PURE__*/_react["default"].createElement("div", {
       className: "flex items-center gap-2"
     }, /*#__PURE__*/_react["default"].createElement("select", {
-      value: normalizeAccess(user.access),
+      value: selectValue,
       disabled: isUpdating,
       onChange: function onChange(e) {
         return updateUserRole(user, Number(e.target.value));
       },
       className: "text-sm border border-gray-300 rounded-md px-2 py-1.5 bg-white focus:outline-none focus:ring-2 focus:ring-blue-500 disabled:opacity-50"
-    }, ROLE_OPTIONS.map(function (role) {
+    }, selectOptions.map(function (role) {
       return /*#__PURE__*/_react["default"].createElement("option", {
         key: role.value,
         value: role.value

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "powr-sdk-web",
-    "version": "5.9.0",
+    "version": "5.10.0",
     "main": "dist/index.js",
     "scripts": {
         "build": "babel src -d dist --copy-files",