@aceshooting/lyra-ui 1.2.0 → 2.1.0

package/dist/components/toast/toast-item.styles.js

@@ -2,44 +2,44 @@ import { css } from 'lit';
 export const styles = css `
   :host {
     display: block;
-    --accent-width: 4px;
-    --show-duration: var(--lyra-transition-base, 180ms ease-out);
-    --hide-duration: var(--lyra-transition-base, 180ms ease-out);
-    --padding: var(--lyra-space-m);
-    --font-size: 1rem;
-    --accent-color: var(--lyra-color-border);
+    --lyra-toast-accent-width: 4px;
+    --lyra-toast-show-duration: var(--lyra-transition-base, 180ms ease-out);
+    --lyra-toast-hide-duration: var(--lyra-transition-base, 180ms ease-out);
+    --lyra-toast-padding: var(--lyra-space-m);
+    --lyra-toast-font-size: 1rem;
+    --lyra-toast-accent-color: var(--lyra-color-border);
   }
   :host([variant='brand']) {
-    --accent-color: var(--lyra-color-brand);
+    --lyra-toast-accent-color: var(--lyra-color-brand);
   }
   :host([variant='success']) {
-    --accent-color: var(--lyra-color-success);
+    --lyra-toast-accent-color: var(--lyra-color-success);
   }
   :host([variant='warning']) {
-    --accent-color: var(--lyra-color-warning);
+    --lyra-toast-accent-color: var(--lyra-color-warning);
   }
   :host([variant='danger']) {
-    --accent-color: var(--lyra-color-danger);
+    --lyra-toast-accent-color: var(--lyra-color-danger);
   }
   :host([size='xs']) {
-    --padding: var(--lyra-space-xs);
-    --font-size: 0.75rem;
+    --lyra-toast-padding: var(--lyra-space-xs);
+    --lyra-toast-font-size: 0.75rem;
   }
   :host([size='s']) {
-    --padding: var(--lyra-space-s);
-    --font-size: 0.875rem;
+    --lyra-toast-padding: var(--lyra-space-s);
+    --lyra-toast-font-size: 0.875rem;
   }
   :host([size='m']) {
-    --padding: var(--lyra-space-m);
-    --font-size: 1rem;
+    --lyra-toast-padding: var(--lyra-space-m);
+    --lyra-toast-font-size: 1rem;
   }
   :host([size='l']) {
-    --padding: var(--lyra-space-l);
-    --font-size: 1.125rem;
+    --lyra-toast-padding: var(--lyra-space-l);
+    --lyra-toast-font-size: 1.125rem;
   }
   :host([size='xl']) {
-    --padding: calc(var(--lyra-space-l) * 1.5);
-    --font-size: 1.25rem;
+    --lyra-toast-padding: calc(var(--lyra-space-l) * 1.5);
+    --lyra-toast-font-size: 1.25rem;
   }
 
   [part='toast-item'] {
@@ -48,9 +48,9 @@ export const styles = css `
     align-items: start;
     gap: var(--lyra-space-s);
     inline-size: 100%;
-    padding: var(--padding);
-    padding-inline-start: calc(var(--padding) + var(--accent-width));
-    font-size: var(--font-size);
+    padding: var(--lyra-toast-padding);
+    padding-inline-start: calc(var(--lyra-toast-padding) + var(--lyra-toast-accent-width));
+    font-size: var(--lyra-toast-font-size);
     background: var(--lyra-color-surface);
     color: var(--lyra-color-text);
     border: 1px solid var(--lyra-color-border);
@@ -59,8 +59,13 @@ export const styles = css `
     opacity: 0;
     transform: translateY(-8px);
     transition:
-      opacity var(--show-duration),
-      transform var(--show-duration);
+      opacity var(--lyra-toast-show-duration),
+      transform var(--lyra-toast-show-duration);
+  }
+  :host([data-hiding]) [part='toast-item'] {
+    transition:
+      opacity var(--lyra-toast-hide-duration),
+      transform var(--lyra-toast-hide-duration);
   }
   :host([data-visible]) [part='toast-item'] {
     opacity: 1;
@@ -76,20 +81,46 @@ export const styles = css `
     position: absolute;
     inset-block: 0;
     inset-inline-start: 0;
-    inline-size: var(--accent-width);
-    background: var(--accent-color);
+    inline-size: var(--lyra-toast-accent-width);
+    background: var(--lyra-toast-accent-color);
     border-start-start-radius: var(--lyra-radius);
     border-end-start-radius: var(--lyra-radius);
   }
   [part='icon'] {
     display: inline-flex;
     flex: 0 0 auto;
-    color: var(--accent-color);
+    color: var(--lyra-toast-accent-color);
   }
   [part='content'] {
     flex: 1 1 auto;
     min-inline-size: 0;
   }
+  /* toaster.ts's action option (and the WithIcon/Triggers stories) append a
+     plain light-DOM button as a sibling of the message text -- without
+     this, it renders with the browser's unstyled default button chrome,
+     clashing with the rest of the token-driven design. Styled as an inline
+     text action (matching the toast's own accent color) rather than a
+     boxed button, since it sits directly after the message inside the
+     content part rather than in its own layout slot. */
+  ::slotted(button) {
+    display: inline-block;
+    margin-inline-start: var(--lyra-space-s);
+    padding: 0;
+    border: none;
+    background: none;
+    font: inherit;
+    font-weight: bold;
+    color: var(--lyra-toast-accent-color);
+    text-decoration: underline;
+    cursor: pointer;
+  }
+  ::slotted(button:hover) {
+    color: var(--lyra-color-text);
+  }
+  ::slotted(button:focus-visible) {
+    outline: var(--lyra-focus-ring-width) solid var(--lyra-focus-ring-color);
+    outline-offset: var(--lyra-focus-ring-offset);
+  }
   [part='close-button'] {
     flex: 0 0 auto;
     margin-inline-start: auto;

package/dist/components/toast/toast.js

@@ -29,17 +29,29 @@ export class LyraToast extends LyraElement {
     /** Create and append a toast item programmatically; resolves to the item. */
     async create(message, options = {}) {
         const item = document.createElement('lyra-toast-item');
-        item.variant = options.variant ?? 'neutral';
-        item.duration = options.duration ?? 5000;
-        item.size = options.size ?? 'm';
-        item.withIcon = options.withIcon ?? false;
+        // Only assign what the caller actually specified -- a freshly-created
+        // <lyra-toast-item> already carries its own property defaults, so
+        // falling back to a literal here (e.g. `?? 5000`) would duplicate those
+        // defaults in a second place that has no way of staying in sync if the
+        // property declaration in toast-item.ts ever changes.
+        if (options.variant !== undefined)
+            item.variant = options.variant;
+        if (options.duration !== undefined)
+            item.duration = options.duration;
+        if (options.size !== undefined)
+            item.size = options.size;
+        if (options.withIcon !== undefined)
+            item.withIcon = options.withIcon;
         item.textContent = message;
         this.appendChild(item);
         await item.updateComplete;
         return item;
     }
     render() {
-        return html `<div part="stack" role="status" aria-live="polite"><slot></slot></div>`;
+        // Each toast item owns its own status/alert role. Keeping a live region on
+        // the stack as well would nest assertive alerts inside a polite region and
+        // can cause duplicate or out-of-order announcements.
+        return html `<div part="stack"><slot></slot></div>`;
     }
 }
 __decorate([

package/dist/components/toast/toaster.js

@@ -27,8 +27,17 @@ function getRegion(placement = DEFAULT_PLACEMENT) {
  */
 export function toast(input) {
     const opts = typeof input === 'string' ? { message: input } : input;
+    // An action must remain available until the user can reach it. Callers can
+    // still opt into a finite duration explicitly; the convenience API makes
+    // only the omitted-duration/action combination persistent.
+    const createOptions = {
+        variant: opts.variant,
+        duration: opts.duration ?? (opts.action ? 0 : undefined),
+        size: opts.size,
+        withIcon: opts.withIcon,
+    };
     const item = getRegion(opts.placement)
-        .create(opts.message, opts)
+        .create(opts.message, createOptions)
         .then((el) => {
         if (opts.action) {
             const btn = document.createElement('button');

package/dist/components/tool-approval-dialog/tool-approval-dialog.d.ts

@@ -0,0 +1,131 @@
+import { type TemplateResult, type PropertyValues } from 'lit';
+import { LyraElement } from '../../internal/lyra-element.js';
+import '../json-viewer/json-viewer.js';
+/**
+ * Reason the dialog was dismissed, forwarded as the `lyra-close` event detail
+ * -- mirrors `<lyra-dialog>`'s own `DialogCloseReason` shape. `'escape'`/
+ * `'backdrop'` come from the dialog's own built-in dismiss triggers,
+ * `'approve'`/`'deny'` from the built-in action buttons (fired in addition
+ * to, and immediately after, their own dedicated `lyra-approve`/`lyra-deny`
+ * event -- see the class doc), and any other string is whatever a caller
+ * passes to `close()` directly.
+ */
+export type ToolApprovalDialogCloseReason = 'escape' | 'backdrop' | 'approve' | 'deny' | 'api' | string;
+/**
+ * `<lyra-tool-approval-dialog>` — a human-in-the-loop gate: presents one
+ * proposed tool/function call (`toolName` + `args`) and blocks an agent from
+ * executing it until a person explicitly approves or denies it, with an
+ * optional inline "edit the arguments before approving" step.
+ *
+ * This renders its own dialog panel rather than nesting a `<lyra-dialog>` in
+ * its shadow template. Shared overlay infrastructure coordinates stacking,
+ * focus trapping, Escape/backdrop dismissal, and focus return with every
+ * other overlay in the same document.
+ *
+ * Approve/Deny/Edit are built-in chrome (not a `footer` slot a consumer must
+ * assemble) — this component's interaction shape is fixed enough (there is
+ * exactly one correct set of actions for "approve this call") that requiring
+ * every consumer to re-build it would just be boilerplate. A `footer` slot is
+ * still offered for *supplementary* content a consumer wants alongside those
+ * buttons (e.g. a "remember this choice for this tool" checkbox) — its
+ * content renders to the start of the action row, before Deny/Edit/Approve.
+ *
+ * Editing: while `editable`, an Edit button swaps the read-only
+ * `<lyra-json-viewer>` for a plain `<textarea>` pre-filled with
+ * `JSON.stringify(args, null, 2)`. Every keystroke is re-validated with
+ * `JSON.parse` — the Approve button is `disabled` for as long as the current
+ * textarea content fails to parse, so a malformed edit can never be silently
+ * approved as either the broken text or a stale copy of the original args.
+ * The same button relabels to "Cancel" while editing; clicking it discards
+ * the draft entirely and returns to the read-only view of the *original*
+ * `args` — there is no separate "save" step independent of Approve itself.
+ * Both `editing` and any in-progress draft reset back to the read-only view
+ * every time the dialog transitions from closed to open, so a reused
+ * instance never leaks one proposal's half-finished edit into the next.
+ * `editable` flipping to `false` mid-edit does the same (see `willUpdate()`)
+ * and, if the textarea it unmounts still held focus, `updated()` refocuses
+ * Deny so the focus trap keeps engaging instead of silently letting focus
+ * fall through to the document.
+ *
+ * Initial focus deliberately does *not* land on Approve:
+ * approving a tool call is a consequential, potentially irreversible action,
+ * so a user who opens this dialog and reflexively presses Enter/Space before
+ * reading anything should deny, not approve. Deny gets the initial focus
+ * instead — the same "focus the safe action" convention a native destructive-
+ * confirmation dialog (delete, discard, etc.) typically follows for its own
+ * Cancel button — rather than the inert dialog panel, which would need an
+ * extra Tab press before *any* action is reachable at all.
+ *
+ * @customElement lyra-tool-approval-dialog
+ * @slot footer - Optional supplementary content (e.g. a "remember this
+ * choice" checkbox), rendered before the built-in Deny/Edit/Approve buttons.
+ * @event lyra-approve - The call was approved. `detail: { args }` — the
+ * current, already-parsed arguments object: the original `args` prop, or (if
+ * an edit was in progress) the user's edited-and-validated version. Always
+ * followed by `lyra-close` with reason `'approve'`.
+ * @event lyra-deny - The call was denied (no detail). Always followed by
+ * `lyra-close` with reason `'deny'`.
+ * @event lyra-close - `detail: ToolApprovalDialogCloseReason`. Fired exactly
+ * once per dismissal — via Escape, a backdrop click, the Approve/Deny
+ * buttons, or a `close()` call — so there is one consistent "this dialog is
+ * now closed" signal regardless of which path triggered it.
+ * @csspart backdrop - The full-viewport scrim behind the panel.
+ * @csspart panel - The dialog panel itself (`role="dialog"` while open).
+ * @csspart header - The wrapper around the heading.
+ * @csspart tool-name - The `toolName` text within the heading.
+ * @csspart body - The wrapper around the args view/editor.
+ * @csspart args-view - The read-only `<lyra-json-viewer>` shown while not editing.
+ * @csspart args-editor - The raw-JSON `<textarea>` shown while editing.
+ * @csspart error - The inline "invalid JSON" message, shown only while editing with unparseable content.
+ * @csspart footer - The action row wrapping the `footer` slot and the built-in buttons.
+ * @csspart deny-button - The built-in Deny button.
+ * @csspart edit-button - The built-in Edit/Cancel toggle button (only rendered while `editable`).
+ * @csspart approve-button - The built-in Approve button — `disabled` while an in-progress edit is invalid JSON.
+ */
+export declare class LyraToolApprovalDialog extends LyraElement {
+    static styles: import("lit").CSSResultGroup[];
+    /** Whether the dialog is open. Set this (or call `close()`) — there is no separate `show()`/`hide()` pair. */
+    open: boolean;
+    /** The proposed tool/function's name, e.g. `web_search`. Drives the heading and the dialog's accessible name. */
+    toolName: string;
+    /** The proposed call's arguments — any JSON-serializable value, rendered via `<lyra-json-viewer>` (or, while editing, stringified into the textarea). */
+    args: unknown;
+    /** Whether an "Edit" affordance is offered at all. When `false`, `args` is always shown read-only and can never be changed before approval. */
+    editable: boolean;
+    private editing;
+    /** The textarea's current raw text while editing — deliberately independent of `args` until Approve is pressed, so a malformed in-progress edit never overwrites it. */
+    private draftText;
+    /** `JSON.parse` failure message for `draftText`, or `''` while it parses cleanly. Empty string (not `undefined`) so it can drive `?hidden` directly. */
+    private draftError;
+    private releaseScrollLock?;
+    private overlay?;
+    private readonly titleId;
+    private readonly errorId;
+    protected willUpdate(changed: PropertyValues): void;
+    protected updated(changed: PropertyValues): void;
+    connectedCallback(): void;
+    disconnectedCallback(): void;
+    private activateOverlay;
+    /**
+     * Close the dialog and return focus to whatever had it before the dialog
+     * opened. `reason` is forwarded as the `lyra-close` detail — built-in
+     * triggers pass `'escape'`/`'backdrop'`/`'approve'`/`'deny'`; a consumer's
+     * own close affordance (e.g. a footer-slotted button) should call this
+     * directly with its own reason string, so every dismissal path funnels
+     * through the same event instead of the consumer having to also toggle
+     * `open` itself.
+     */
+    close(reason?: ToolApprovalDialogCloseReason): void;
+    private onBackdropClick;
+    private stringifyArgs;
+    private toggleEdit;
+    private onDraftInput;
+    private onApprove;
+    private onDeny;
+    render(): TemplateResult;
+}
+declare global {
+    interface HTMLElementTagNameMap {
+        'lyra-tool-approval-dialog': LyraToolApprovalDialog;
+    }
+}

package/dist/components/tool-approval-dialog/tool-approval-dialog.js

@@ -0,0 +1,329 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { html, nothing } from 'lit';
+import { property, state } from 'lit/decorators.js';
+import { LyraElement } from '../../internal/lyra-element.js';
+import { activateOverlay } from '../../internal/overlay-manager.js';
+import { defineElement } from '../../internal/prefix.js';
+import { lockScroll } from '../../internal/scroll-lock.js';
+import { nextId } from '../../internal/a11y.js';
+import { styles } from './tool-approval-dialog.styles.js';
+import '../json-viewer/json-viewer.js';
+/**
+ * `<lyra-tool-approval-dialog>` — a human-in-the-loop gate: presents one
+ * proposed tool/function call (`toolName` + `args`) and blocks an agent from
+ * executing it until a person explicitly approves or denies it, with an
+ * optional inline "edit the arguments before approving" step.
+ *
+ * This renders its own dialog panel rather than nesting a `<lyra-dialog>` in
+ * its shadow template. Shared overlay infrastructure coordinates stacking,
+ * focus trapping, Escape/backdrop dismissal, and focus return with every
+ * other overlay in the same document.
+ *
+ * Approve/Deny/Edit are built-in chrome (not a `footer` slot a consumer must
+ * assemble) — this component's interaction shape is fixed enough (there is
+ * exactly one correct set of actions for "approve this call") that requiring
+ * every consumer to re-build it would just be boilerplate. A `footer` slot is
+ * still offered for *supplementary* content a consumer wants alongside those
+ * buttons (e.g. a "remember this choice for this tool" checkbox) — its
+ * content renders to the start of the action row, before Deny/Edit/Approve.
+ *
+ * Editing: while `editable`, an Edit button swaps the read-only
+ * `<lyra-json-viewer>` for a plain `<textarea>` pre-filled with
+ * `JSON.stringify(args, null, 2)`. Every keystroke is re-validated with
+ * `JSON.parse` — the Approve button is `disabled` for as long as the current
+ * textarea content fails to parse, so a malformed edit can never be silently
+ * approved as either the broken text or a stale copy of the original args.
+ * The same button relabels to "Cancel" while editing; clicking it discards
+ * the draft entirely and returns to the read-only view of the *original*
+ * `args` — there is no separate "save" step independent of Approve itself.
+ * Both `editing` and any in-progress draft reset back to the read-only view
+ * every time the dialog transitions from closed to open, so a reused
+ * instance never leaks one proposal's half-finished edit into the next.
+ * `editable` flipping to `false` mid-edit does the same (see `willUpdate()`)
+ * and, if the textarea it unmounts still held focus, `updated()` refocuses
+ * Deny so the focus trap keeps engaging instead of silently letting focus
+ * fall through to the document.
+ *
+ * Initial focus deliberately does *not* land on Approve:
+ * approving a tool call is a consequential, potentially irreversible action,
+ * so a user who opens this dialog and reflexively presses Enter/Space before
+ * reading anything should deny, not approve. Deny gets the initial focus
+ * instead — the same "focus the safe action" convention a native destructive-
+ * confirmation dialog (delete, discard, etc.) typically follows for its own
+ * Cancel button — rather than the inert dialog panel, which would need an
+ * extra Tab press before *any* action is reachable at all.
+ *
+ * @customElement lyra-tool-approval-dialog
+ * @slot footer - Optional supplementary content (e.g. a "remember this
+ * choice" checkbox), rendered before the built-in Deny/Edit/Approve buttons.
+ * @event lyra-approve - The call was approved. `detail: { args }` — the
+ * current, already-parsed arguments object: the original `args` prop, or (if
+ * an edit was in progress) the user's edited-and-validated version. Always
+ * followed by `lyra-close` with reason `'approve'`.
+ * @event lyra-deny - The call was denied (no detail). Always followed by
+ * `lyra-close` with reason `'deny'`.
+ * @event lyra-close - `detail: ToolApprovalDialogCloseReason`. Fired exactly
+ * once per dismissal — via Escape, a backdrop click, the Approve/Deny
+ * buttons, or a `close()` call — so there is one consistent "this dialog is
+ * now closed" signal regardless of which path triggered it.
+ * @csspart backdrop - The full-viewport scrim behind the panel.
+ * @csspart panel - The dialog panel itself (`role="dialog"` while open).
+ * @csspart header - The wrapper around the heading.
+ * @csspart tool-name - The `toolName` text within the heading.
+ * @csspart body - The wrapper around the args view/editor.
+ * @csspart args-view - The read-only `<lyra-json-viewer>` shown while not editing.
+ * @csspart args-editor - The raw-JSON `<textarea>` shown while editing.
+ * @csspart error - The inline "invalid JSON" message, shown only while editing with unparseable content.
+ * @csspart footer - The action row wrapping the `footer` slot and the built-in buttons.
+ * @csspart deny-button - The built-in Deny button.
+ * @csspart edit-button - The built-in Edit/Cancel toggle button (only rendered while `editable`).
+ * @csspart approve-button - The built-in Approve button — `disabled` while an in-progress edit is invalid JSON.
+ */
+export class LyraToolApprovalDialog extends LyraElement {
+    constructor() {
+        super(...arguments);
+        /** Whether the dialog is open. Set this (or call `close()`) — there is no separate `show()`/`hide()` pair. */
+        this.open = false;
+        /** The proposed tool/function's name, e.g. `web_search`. Drives the heading and the dialog's accessible name. */
+        this.toolName = '';
+        /** The proposed call's arguments — any JSON-serializable value, rendered via `<lyra-json-viewer>` (or, while editing, stringified into the textarea). */
+        this.args = {};
+        /** Whether an "Edit" affordance is offered at all. When `false`, `args` is always shown read-only and can never be changed before approval. */
+        this.editable = true;
+        this.editing = false;
+        /** The textarea's current raw text while editing — deliberately independent of `args` until Approve is pressed, so a malformed in-progress edit never overwrites it. */
+        this.draftText = '';
+        /** `JSON.parse` failure message for `draftText`, or `''` while it parses cleanly. Empty string (not `undefined`) so it can drive `?hidden` directly. */
+        this.draftError = '';
+        this.titleId = nextId('tool-approval-dialog-title');
+        this.errorId = nextId('tool-approval-dialog-error');
+        this.onBackdropClick = () => {
+            this.overlay?.dismissBackdrop();
+        };
+        this.toggleEdit = () => {
+            if (this.editing) {
+                this.editing = false;
+                this.draftText = '';
+                this.draftError = '';
+            }
+            else {
+                this.editing = true;
+                this.draftText = this.stringifyArgs();
+                this.draftError = '';
+            }
+        };
+        this.onDraftInput = (e) => {
+            const value = e.target.value;
+            this.draftText = value;
+            try {
+                JSON.parse(value);
+                this.draftError = '';
+            }
+            catch (err) {
+                this.draftError = err instanceof Error ? err.message : 'Invalid JSON.';
+            }
+        };
+        this.onApprove = () => {
+            let currentArgs = this.args;
+            if (this.editing) {
+                // The Approve button is disabled whenever draftError is non-empty, so
+                // this should always succeed -- the try/catch is defense-in-depth
+                // against a state desync rather than an expected path.
+                try {
+                    currentArgs = JSON.parse(this.draftText);
+                }
+                catch {
+                    return;
+                }
+            }
+            this.emit('lyra-approve', { args: currentArgs });
+            this.close('approve');
+        };
+        this.onDeny = () => {
+            this.emit('lyra-deny');
+            this.close('deny');
+        };
+    }
+    static { this.styles = [LyraElement.styles, styles]; }
+    willUpdate(changed) {
+        if (changed.has('open')) {
+            if (this.open) {
+                this.releaseScrollLock ??= lockScroll(this.ownerDocument);
+                this.activateOverlay();
+                // Every open starts fresh in the read-only view -- a reused instance
+                // must never carry a half-finished edit (or its error state) over
+                // from whatever the previous proposal was.
+                this.editing = false;
+                this.draftText = '';
+                this.draftError = '';
+            }
+            else {
+                this.releaseScrollLock?.();
+                this.releaseScrollLock = undefined;
+                this.overlay?.deactivate();
+                this.overlay = undefined;
+            }
+        }
+        // A consumer flipping editable off mid-edit (e.g. a policy change
+        // pushed while this dialog happens to be open) must not leave an
+        // unreachable edit UI on screen with no Edit/Cancel button left to
+        // dismiss it.
+        if (changed.has('editable') && !this.editable && this.editing) {
+            this.editing = false;
+            this.draftText = '';
+            this.draftError = '';
+        }
+    }
+    // Runs after render (not willUpdate) so [part="panel"]/[part="deny-button"]
+    // have already landed in the DOM before the focus calls below can rely on
+    // them -- mirrors lyra-dialog's identical ordering rationale.
+    updated(changed) {
+        if (changed.has('open') && this.open) {
+            this.overlay?.focusInitial();
+            return;
+        }
+        if (changed.has('editing')) {
+            if (this.editing) {
+                // Entering edit mode is a deliberate request to start typing --
+                // steering focus into the textarea beats leaving it on the Edit
+                // button the click already left it on.
+                this.shadowRoot?.querySelector('[part="args-editor"]')?.focus();
+            }
+            else if (this.open && !this.shadowRoot?.activeElement) {
+                // Reached when editing was turned off some way other than clicking
+                // Cancel (e.g. `editable` flipping to false while the textarea held
+                // focus, in willUpdate above) -- the textarea that held focus was
+                // just unmounted without anything else claiming it, which would
+                // otherwise drop focus to <body> and silently stop the Tab trap
+                // from engaging. Refocus a stable target inside the panel instead.
+                this.shadowRoot?.querySelector('[part="deny-button"]')?.focus();
+            }
+        }
+    }
+    connectedCallback() {
+        super.connectedCallback();
+        if (this.hasUpdated && this.open) {
+            this.releaseScrollLock ??= lockScroll(this.ownerDocument);
+            this.activateOverlay();
+            queueMicrotask(() => this.overlay?.focusInitial());
+        }
+    }
+    disconnectedCallback() {
+        super.disconnectedCallback();
+        this.releaseScrollLock?.();
+        this.releaseScrollLock = undefined;
+        this.overlay?.suspend();
+    }
+    activateOverlay() {
+        if (this.overlay?.isActive()) {
+            this.overlay.resume();
+            return;
+        }
+        this.overlay = activateOverlay({
+            host: this,
+            panel: () => this.shadowRoot?.querySelector('[part="panel"]') ?? null,
+            onEscape: () => this.close('escape'),
+            onBackdrop: () => this.close('backdrop'),
+            preferredInitialFocus: () => this.shadowRoot?.querySelector('[part="deny-button"]') ?? null,
+        });
+    }
+    /**
+     * Close the dialog and return focus to whatever had it before the dialog
+     * opened. `reason` is forwarded as the `lyra-close` detail — built-in
+     * triggers pass `'escape'`/`'backdrop'`/`'approve'`/`'deny'`; a consumer's
+     * own close affordance (e.g. a footer-slotted button) should call this
+     * directly with its own reason string, so every dismissal path funnels
+     * through the same event instead of the consumer having to also toggle
+     * `open` itself.
+     */
+    close(reason = 'api') {
+        if (!this.open)
+            return;
+        this.open = false;
+        this.emit('lyra-close', reason);
+    }
+    stringifyArgs() {
+        try {
+            // JSON.stringify(undefined, ...) returns the *value* undefined, not a
+            // string -- the ?? covers that alongside the try/catch's circular-
+            // reference case, so the textarea always opens with real text.
+            return JSON.stringify(this.args, null, 2) ?? 'null';
+        }
+        catch {
+            return 'null';
+        }
+    }
+    render() {
+        const hasError = this.editing && this.draftError.length > 0;
+        return html `
+      <div part="backdrop" @click=${this.onBackdropClick}></div>
+      <div
+        part="panel"
+        role=${this.open ? 'dialog' : nothing}
+        aria-modal=${this.open ? 'true' : nothing}
+        aria-labelledby=${this.titleId}
+        tabindex="-1"
+      >
+        <div part="header">
+          <h2 id=${this.titleId}>Approve <span part="tool-name">${this.toolName || 'tool'}</span> call?</h2>
+        </div>
+        <div part="body">
+          ${this.editing
+            ? html `
+                <textarea
+                  part="args-editor"
+                  spellcheck="false"
+                  autocomplete="off"
+                  aria-label="Tool call arguments (JSON)"
+                  aria-invalid=${hasError ? 'true' : 'false'}
+                  aria-describedby=${hasError ? this.errorId : nothing}
+                  .value=${this.draftText}
+                  @input=${this.onDraftInput}
+                ></textarea>
+                <p part="error" id=${this.errorId} role="alert" ?hidden=${!hasError}>${this.draftError}</p>
+              `
+            : html `<lyra-json-viewer part="args-view" .data=${this.args}></lyra-json-viewer>`}
+        </div>
+        <div part="footer">
+          <slot name="footer"></slot>
+          <button part="deny-button" type="button" @click=${this.onDeny}>Deny</button>
+          ${this.editable
+            ? html `<button part="edit-button" type="button" @click=${this.toggleEdit}>
+                ${this.editing ? 'Cancel' : 'Edit'}
+              </button>`
+            : nothing}
+          <button part="approve-button" type="button" ?disabled=${hasError} @click=${this.onApprove}>
+            Approve
+          </button>
+        </div>
+      </div>
+    `;
+    }
+}
+__decorate([
+    property({ type: Boolean, reflect: true })
+], LyraToolApprovalDialog.prototype, "open", void 0);
+__decorate([
+    property({ attribute: 'tool-name' })
+], LyraToolApprovalDialog.prototype, "toolName", void 0);
+__decorate([
+    property({ attribute: false })
+], LyraToolApprovalDialog.prototype, "args", void 0);
+__decorate([
+    property({ type: Boolean, reflect: true })
+], LyraToolApprovalDialog.prototype, "editable", void 0);
+__decorate([
+    state()
+], LyraToolApprovalDialog.prototype, "editing", void 0);
+__decorate([
+    state()
+], LyraToolApprovalDialog.prototype, "draftText", void 0);
+__decorate([
+    state()
+], LyraToolApprovalDialog.prototype, "draftError", void 0);
+defineElement('tool-approval-dialog', LyraToolApprovalDialog);

package/dist/components/tool-approval-dialog/tool-approval-dialog.styles.d.ts

@@ -0,0 +1 @@
+export declare const styles: import("lit").CSSResult;