@ai-matrx/sharing 0.0.0 → 0.1.0

package/dist/react.js

@@ -0,0 +1,4701 @@
+"use client";
+
+// src/react/sheet/host.tsx
+import { useCallback, useEffect, useMemo, useState, useSyncExternalStore } from "react";
+import { Button, Input } from "@ai-matrx/design-system";
+import { copyText } from "@ai-matrx/kit/clipboard";
+import { confirm as kitConfirm } from "@ai-matrx/kit/confirm-opener";
+import { readOrganizationMemberRows } from "@ai-matrx/sharing/core";
+import { shareClient as shareClientForIdentity } from "@ai-matrx/sharing/core";
+import { createSupabaseIdentity } from "@ai-matrx/vault";
+import { passThroughDispatch } from "@ai-matrx/sharing/core";
+import { passThroughDispatch as passThroughDispatchRef } from "@ai-matrx/sharing/core";
+import { jsx, jsxs } from "react/jsx-runtime";
+function DefaultCopyButtons(props) {
+  const [done, setDone] = useState(false);
+  const text = () => {
+    const h = props.human ?? props.text;
+    const v = typeof h === "function" ? h() : h;
+    return Array.isArray(v) ? v.join("\n") : String(v ?? "");
+  };
+  return /* @__PURE__ */ jsx(
+    Button,
+    {
+      type: "button",
+      variant: "ghost",
+      size: "sm",
+      className: props.className,
+      onClick: () => {
+        void copyText(text()).then(() => {
+          setDone(true);
+          setTimeout(() => setDone(false), 1500);
+        });
+      },
+      children: done ? "Copied" : props.label ? `Copy ${String(props.label).toLowerCase()}` : "Copy"
+    }
+  );
+}
+function DefaultErrorMenu(_props) {
+  return null;
+}
+function DefaultInfoHint(props) {
+  return /* @__PURE__ */ jsx("span", { title: String(props.text ?? ""), "aria-label": String(props.label ?? "More info"), className: "cursor-help text-muted-foreground", children: "\u24D8" });
+}
+function DefaultEntityRef(props) {
+  const href = typeof props.href === "string" ? props.href : null;
+  return href ? /* @__PURE__ */ jsx("a", { href, className: "underline-offset-2 hover:underline", children: String(props.name ?? "") }) : /* @__PURE__ */ jsx("span", { children: String(props.name ?? "") });
+}
+function DefaultUserAvatar(props) {
+  const u = props.user ?? {};
+  const name = u.displayName ?? u.display_name ?? u.email ?? "?";
+  return /* @__PURE__ */ jsx("span", { className: "inline-flex h-7 w-7 items-center justify-center rounded-full bg-muted text-xs font-medium", "aria-label": name, children: name.slice(0, 1).toUpperCase() });
+}
+function DefaultConnectionsNotice(props) {
+  if (!props.error && !(Array.isArray(props.partialFailures) && props.partialFailures.length)) return null;
+  return /* @__PURE__ */ jsxs("div", { className: "rounded-md border border-destructive/30 bg-destructive/10 p-2 text-xs text-destructive", children: [
+    props.error ? `Contacts could not be read: ${String(props.error)}` : `Some contacts could not be read.`,
+    " ",
+    props.onRetry ? (
+      // ui-exception: moved verbatim from the web share sheet; restyling onto design-system Button is its own UI change
+      /* @__PURE__ */ jsx("button", { type: "button", className: "underline", onClick: () => props.onRetry(), children: "Retry" })
+    ) : null
+  ] });
+}
+function DefaultUserSearchField(props) {
+  const { onValueChange, onUserSelect: _onUserSelect, value, ...rest } = props;
+  return /* @__PURE__ */ jsx(Input, { ...rest, value: value ?? "", onChange: (e) => onValueChange?.(e.target.value) });
+}
+var ORGS_EMPTY = [];
+var orgsCache = null;
+var orgListeners = /* @__PURE__ */ new Set();
+function useDefaultOrganizations() {
+  const snapshot = useSyncExternalStore(
+    (cb) => {
+      orgListeners.add(cb);
+      return () => orgListeners.delete(cb);
+    },
+    () => orgsCache ?? ORGS_EMPTY,
+    () => ORGS_EMPTY
+  );
+  useEffect(() => {
+    if (orgsCache) return;
+    orgsCache = ORGS_EMPTY;
+    void import("@ai-matrx/sharing/core").then(async ({ shareClient }) => {
+      const { data, error } = await shareClient().from("organizations").select("id, name");
+      if (error) console.error(`[share] Your organizations could not be read: ${error.message}`);
+      orgsCache = (Array.isArray(data) ? data : []).map((o) => ({ ...o, id: String(o.id), name: String(o.name ?? "") }));
+      orgListeners.forEach((l) => l());
+    }).catch((err) => console.error("[share] Your organizations could not be read:", err));
+  }, []);
+  return snapshot;
+}
+function useDefaultCurrentUserId() {
+  const [id, setId] = useState(null);
+  useEffect(() => {
+    void import("@ai-matrx/sharing/core").then(async ({ shareClient }) => {
+      const { getClaimsUser } = await import("@ai-matrx/sharing/core");
+      const { data } = await getClaimsUser(shareClient());
+      setId(data.user?.id ?? null);
+    });
+  }, []);
+  return id;
+}
+function useDefaultConnections({ organizationId }) {
+  const [state2, setState] = useState({ rows: [], loading: Boolean(organizationId), error: null });
+  const load = useCallback(
+    async (fresh = false) => {
+      if (!organizationId) return;
+      setState((s) => ({ ...s, loading: true }));
+      try {
+        const rows = await readOrganizationMemberRows(organizationId, { fresh });
+        setState({
+          rows: rows.map((r) => ({
+            user_id: r.user_id,
+            email: r.user_email ?? null,
+            display_name: r.user_display_name ?? null,
+            avatar_url: r.user_avatar_url ?? null,
+            source: "organization"
+          })),
+          loading: false,
+          error: null
+        });
+      } catch (err) {
+        setState({ rows: [], loading: false, error: err instanceof Error ? err.message : String(err) });
+      }
+    },
+    [organizationId]
+  );
+  useEffect(() => {
+    void load();
+  }, [load]);
+  return useMemo(
+    () => ({ connections: state2.rows, isLoading: state2.loading, error: state2.error, partialFailures: [], refresh: () => load(true) }),
+    [state2, load]
+  );
+}
+var DEFAULTS = {
+  toast: ({ title, description, variant }) => {
+    const text = [title, description].filter((x) => typeof x === "string").join(" \u2014 ");
+    if (variant === "destructive") {
+      console.error(`[share] ${text}`);
+      if (typeof window !== "undefined") window.alert(text);
+    } else console.info(`[share] ${text}`);
+  },
+  useCurrentUserId: useDefaultCurrentUserId,
+  useOrganizations: useDefaultOrganizations,
+  useUserConnections: useDefaultConnections,
+  confirm: (o) => kitConfirm(o),
+  CopyButtons: DefaultCopyButtons,
+  csvExportItem: () => null,
+  jsonExportItem: () => null,
+  usePageCapture: () => void 0,
+  dialogCapture: (input) => input,
+  PageCaptureButton: () => null,
+  ErrorAlchemyMenu: DefaultErrorMenu,
+  InfoHint: DefaultInfoHint,
+  EntityDoorControls: () => null,
+  EntityRef: DefaultEntityRef,
+  UserAvatarDisplay: DefaultUserAvatar,
+  ConnectionsReadNotice: DefaultConnectionsNotice,
+  UserSearchField: DefaultUserSearchField,
+  vaultIdentity: null,
+  humanLines: (...args) => args.flat().filter(Boolean).map(String).join("\n"),
+  usePortalContainer: () => void 0
+};
+var ui = DEFAULTS;
+function configureShareSheetUi(next) {
+  ui = { ...ui, ...next };
+}
+function shareSheetUi() {
+  return ui;
+}
+function useToast() {
+  return { toast: (o) => ui.toast(o) };
+}
+function copyNotify(message, kind) {
+  ui.toast({ title: message, ...kind === "error" ? { variant: "destructive" } : {} });
+}
+var confirm = (options) => ui.confirm(options);
+var useCurrentUserId = () => ui.useCurrentUserId();
+var useNavTree = () => ({ orgs: ui.useOrganizations() });
+var useOrganizationsToCreateIn = () => ({ orgs: ui.useOrganizations() });
+var useUserConnections = (options) => ui.useUserConnections(options);
+var usePageCapture = (build, options) => ui.usePageCapture(build, options);
+var dialogCapture = (input) => ui.dialogCapture(input);
+var csvExportItem = (...args) => ui.csvExportItem(...args);
+var jsonExportItem = (...args) => ui.jsonExportItem(...args);
+var CopyButtons = (p) => /* @__PURE__ */ jsx(ui.CopyButtons, { ...p });
+var PageCaptureButton = (p) => /* @__PURE__ */ jsx(ui.PageCaptureButton, { ...p });
+var ErrorAlchemyMenu = (p) => /* @__PURE__ */ jsx(ui.ErrorAlchemyMenu, { ...p });
+var InfoHint = (p) => /* @__PURE__ */ jsx(ui.InfoHint, { ...p });
+var EntityDoorControls = (p) => /* @__PURE__ */ jsx(ui.EntityDoorControls, { ...p });
+var EntityRef = (p) => /* @__PURE__ */ jsx(ui.EntityRef, { ...p });
+var UserAvatarDisplay = (p) => /* @__PURE__ */ jsx(ui.UserAvatarDisplay, { ...p });
+var ConnectionsReadNotice = (p) => /* @__PURE__ */ jsx(ui.ConnectionsReadNotice, { ...p });
+var UserSearchField = (p) => /* @__PURE__ */ jsx(ui.UserSearchField, { ...p });
+var defaultIdentity = null;
+var usePortalContainer = () => ui.usePortalContainer();
+var vaultIdentity = () => {
+  if (ui.vaultIdentity) return ui.vaultIdentity;
+  if (!defaultIdentity) {
+    defaultIdentity = createSupabaseIdentity(shareClientForIdentity().auth, {
+      redirectTo: () => window.location.href,
+      onDifferentPerson: async (message) => {
+        window.alert(message);
+      }
+    });
+  }
+  return defaultIdentity;
+};
+var state = { sharingStatus: { byKey: {}, authorityByKey: {} } };
+var listeners = /* @__PURE__ */ new Set();
+function reduce(s, a) {
+  const { key } = a.payload;
+  const byKey = { ...s.byKey };
+  const authorityByKey = { ...s.authorityByKey };
+  switch (a.type) {
+    case "requested":
+      byKey[key] = { visibility: byKey[key]?.visibility ?? null, loading: true, error: null };
+      break;
+    case "loaded":
+      byKey[key] = { visibility: a.payload.visibility, loading: false, error: null };
+      break;
+    case "failed":
+      byKey[key] = { visibility: byKey[key]?.visibility ?? null, loading: false, error: a.payload.error };
+      break;
+    case "authorityRequested":
+      authorityByKey[key] = { isOwner: authorityByKey[key]?.isOwner ?? false, loading: true, error: authorityByKey[key]?.error ?? null };
+      break;
+    case "authorityResolved":
+      authorityByKey[key] = { isOwner: a.payload.isOwner, loading: false, error: a.payload.error };
+      break;
+  }
+  return { byKey, authorityByKey };
+}
+var store = {
+  getState: () => state,
+  dispatch: (a) => {
+    state = { sharingStatus: reduce(state.sharingStatus, a) };
+    listeners.forEach((l) => l());
+    return a;
+  }
+};
+var useAppStore = () => store;
+function useAppSelector(select) {
+  return useSyncExternalStore(
+    (cb) => {
+      listeners.add(cb);
+      return () => listeners.delete(cb);
+    },
+    () => select(state),
+    () => select(state)
+  );
+}
+var sharingStatusKey = (resourceType, resourceId) => `${resourceType}:${resourceId}`;
+var sharingStatusRequested = (payload) => ({ type: "requested", payload });
+var sharingStatusLoaded = (payload) => ({ type: "loaded", payload });
+var sharingStatusFailed = (payload) => ({ type: "failed", payload });
+var sharingAuthorityRequested = (payload) => ({ type: "authorityRequested", payload });
+var sharingAuthorityResolved = (payload) => ({ type: "authorityResolved", payload });
+var selectSharingStatus = (s, key) => s.sharingStatus.byKey[key];
+var selectSharingAuthority = (s, key) => s.sharingStatus.authorityByKey[key];
+function resetShareSheetCache() {
+  state = { sharingStatus: { byKey: {}, authorityByKey: {} } };
+  listeners.forEach((l) => l());
+}
+var storeReads = /* @__PURE__ */ new Map();
+function useStoreRead(key, read, options = {}) {
+  const activeKey = options.enabled === false ? null : key;
+  const kept = activeKey ? storeReads.get(activeKey) : void 0;
+  const [s, setS] = useState({
+    data: kept?.data,
+    loading: Boolean(activeKey) && !kept,
+    error: null
+  });
+  const refresh = useCallback(async () => {
+    if (!activeKey) return;
+    setS((p) => ({ ...p, loading: true }));
+    try {
+      const data = await read();
+      storeReads.set(activeKey, { data, at: Date.now() });
+      setS({ data, loading: false, error: null });
+    } catch (err) {
+      setS((p) => ({ data: p.data, loading: false, error: err instanceof Error ? err.message : String(err) }));
+    }
+  }, [activeKey]);
+  useEffect(() => {
+    if (!activeKey) return;
+    const k = storeReads.get(activeKey);
+    const stale = !k || options.staleAfterMs !== void 0 && Date.now() - k.at > options.staleAfterMs;
+    if (stale) void refresh();
+    else setS({ data: k.data, loading: false, error: null });
+  }, [activeKey, refresh]);
+  return { data: s.data, isLoading: s.loading, isError: s.error !== null, error: s.error, refresh };
+}
+function useRefreshWhenChanged(token, refresh) {
+  const [first, setFirst] = useState(true);
+  useEffect(() => {
+    if (first) {
+      setFirst(false);
+      return;
+    }
+    void refresh();
+  }, [token]);
+}
+var useAppDispatch = () => passThroughDispatchRef;
+
+// src/react/sheet/ShareModal.tsx
+import { appUrl, getActiveOrgId, sendShareNotice } from "@ai-matrx/sharing/core";
+import { useState as useState16 } from "react";
+
+// src/react/sheet/ui/dialog.tsx
+import {
+  Dialog,
+  DialogClose,
+  DialogContent,
+  DialogContentPrimitive,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogOverlay,
+  DialogPortal,
+  DialogTitle,
+  DialogTrigger,
+  useDialogContainer
+} from "@ai-matrx/design-system";
+
+// src/react/sheet/ShareModal.tsx
+import { Tabs, TabsContent } from "@ai-matrx/design-system";
+import { TabsList } from "@ai-matrx/design-system/controls";
+
+// src/react/sheet/ui/share-tabs-trigger.tsx
+import * as React from "react";
+import { TabsTrigger } from "@ai-matrx/design-system/controls";
+import { jsx as jsx2 } from "react/jsx-runtime";
+function focusOnClick(onClick) {
+  return (event) => {
+    onClick?.(event);
+    if (event.defaultPrevented) return;
+    const trigger = event.currentTarget;
+    if (trigger.disabled) return;
+    if (document.activeElement !== trigger) trigger.focus();
+  };
+}
+var ShareTabsTrigger = React.forwardRef(
+  ({ onClick, ...props }, ref) => /* @__PURE__ */ jsx2(TabsTrigger, { ...props, ref, onClick: focusOnClick(onClick) })
+);
+ShareTabsTrigger.displayName = "ShareTabsTrigger";
+
+// src/react/sheet/ShareModal.tsx
+import { Button as Button10 } from "@ai-matrx/design-system";
+import {
+  Users as Users5,
+  Globe as Globe5,
+  Mail as Mail4,
+  Loader2 as Loader211,
+  CheckCircle as CheckCircle3,
+  KeyRound,
+  ShieldCheck as ShieldCheck2
+} from "lucide-react";
+
+// src/react/permissionHooks.ts
+import { useState as useState2, useEffect as useEffect2, useCallback as useCallback2 } from "react";
+import { extractErrorMessage } from "@ai-matrx/sharing/core";
+import {
+  listPermissions,
+  getResourcePermissions,
+  checkPermission,
+  resolveSharingAuthority,
+  shareWithUser,
+  makePublic,
+  revokeAccess,
+  revokeOrgAccess,
+  updatePermissionLevel,
+  getSharedWithMe,
+  getResourceVisibility,
+  setResourceShownTo,
+  setStoreLane
+} from "@ai-matrx/sharing/core";
+function usePermissions(resourceType, resourceId, enabled = true) {
+  const [permissions, setPermissions] = useState2([]);
+  const [loading, setLoading] = useState2(false);
+  const [error, setError] = useState2(null);
+  const fetchPermissions = useCallback2(async () => {
+    if (!resourceType || !resourceId || !enabled) return;
+    setLoading(true);
+    setError(null);
+    try {
+      const data = await listPermissions(resourceType, resourceId);
+      setPermissions(data);
+    } catch (err) {
+      console.error("Error fetching permissions:", err);
+      setError(extractErrorMessage(err) || "Failed to fetch permissions");
+    } finally {
+      setLoading(false);
+    }
+  }, [resourceType, resourceId, enabled]);
+  useEffect2(() => {
+    if (enabled) {
+      fetchPermissions();
+    }
+  }, [fetchPermissions, enabled]);
+  return {
+    permissions,
+    loading,
+    error,
+    refresh: fetchPermissions
+  };
+}
+function useResourcePermissions(resourceType, resourceId) {
+  const [permissions, setPermissions] = useState2([]);
+  const [loading, setLoading] = useState2(true);
+  const [error, setError] = useState2(null);
+  const fetchPermissions = useCallback2(async () => {
+    if (!resourceType || !resourceId) return;
+    setLoading(true);
+    setError(null);
+    try {
+      const data = await getResourcePermissions(resourceType, resourceId);
+      setPermissions(data);
+    } catch (err) {
+      console.error("Error fetching resource permissions:", err);
+      setError(
+        extractErrorMessage(err) || "Failed to fetch resource permissions"
+      );
+    } finally {
+      setLoading(false);
+    }
+  }, [resourceType, resourceId]);
+  useEffect2(() => {
+    fetchPermissions();
+  }, [fetchPermissions]);
+  return {
+    permissions,
+    loading,
+    error,
+    refresh: fetchPermissions
+  };
+}
+function usePermissionCheck(options) {
+  const [result, setResult] = useState2({
+    hasAccess: false,
+    isOwner: false
+  });
+  const [loading, setLoading] = useState2(true);
+  useEffect2(() => {
+    const check = async () => {
+      setLoading(true);
+      const checkResult = await checkPermission(options);
+      setResult(checkResult);
+      setLoading(false);
+    };
+    if (options.resourceType && options.resourceId) {
+      check();
+    }
+  }, [options.resourceType, options.resourceId, options.requiredLevel]);
+  return {
+    ...result,
+    loading
+  };
+}
+function useCanEdit(resourceType, resourceId) {
+  const { hasAccess, loading } = usePermissionCheck({
+    resourceType,
+    resourceId,
+    requiredLevel: "editor"
+  });
+  return {
+    canEdit: hasAccess,
+    loading
+  };
+}
+function useCanAdmin(resourceType, resourceId) {
+  const { hasAccess, loading } = usePermissionCheck({
+    resourceType,
+    resourceId,
+    requiredLevel: "admin"
+  });
+  return {
+    canAdmin: hasAccess,
+    loading
+  };
+}
+function useIsOwner(resourceType, resourceId) {
+  const store2 = useAppStore();
+  const key = sharingStatusKey(resourceType, resourceId);
+  const entry = useAppSelector((state2) => selectSharingAuthority(state2, key));
+  const asked = Boolean(resourceType && resourceId);
+  const known = entry !== void 0;
+  useEffect2(() => {
+    if (known || !asked) return;
+    if (selectSharingAuthority(store2.getState(), key)) return;
+    store2.dispatch(sharingAuthorityRequested({ key }));
+    void resolveSharingAuthority(resourceType, resourceId).then((result) => {
+      store2.dispatch(sharingAuthorityResolved({ key, isOwner: result.isOwner, error: result.error }));
+    });
+  }, [known, asked, key]);
+  if (!asked) return { isOwner: false, loading: false, error: null };
+  return {
+    isOwner: entry?.isOwner ?? false,
+    loading: entry ? entry.loading : true,
+    error: entry?.error ?? null
+  };
+}
+function useSharing(resourceType, resourceId, enabled = true, resourceName, organizationId) {
+  const [loading, setLoading] = useState2(false);
+  const [error, setError] = useState2(null);
+  const [rowState, setRowState] = useState2({
+    isPublic: false
+  });
+  const { permissions, refresh: refreshPermissions } = usePermissions(
+    resourceType,
+    resourceId,
+    enabled
+  );
+  const refreshRowState = useCallback2(async () => {
+    if (!resourceType || !resourceId || !enabled) return;
+    try {
+      const v = await getResourceVisibility(resourceType, resourceId);
+      setRowState(v);
+    } catch (err) {
+      console.error("Error fetching the record's row controls:", err);
+      setError(extractErrorMessage(err));
+    }
+  }, [resourceType, resourceId, enabled]);
+  const refresh = useCallback2(async () => {
+    await Promise.all([refreshPermissions(), refreshRowState()]);
+  }, [refreshPermissions, refreshRowState]);
+  useEffect2(() => {
+    if (enabled) {
+      void refreshRowState();
+    }
+  }, [enabled, refreshRowState]);
+  const handleShareWithUser = useCallback2(
+    async (userId, permissionLevel) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await shareWithUser({
+          resourceType,
+          resourceId,
+          userId,
+          permissionLevel,
+          resourceName,
+          organizationId: organizationId ?? null
+        });
+        if (!result.success) {
+          setError(result.error || "Failed to share");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = extractErrorMessage(err) || "Failed to share with user";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, resourceName, organizationId, refresh]
+  );
+  const handleMakePublic = useCallback2(
+    async (permissionLevel = "viewer") => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await makePublic({
+          resourceType,
+          resourceId,
+          permissionLevel
+        });
+        if (!result.success) {
+          setError(result.error || "Failed to make public");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = extractErrorMessage(err) || "Failed to make public";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const handleRevokeAccess = useCallback2(
+    async (options) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await revokeAccess({
+          resourceType,
+          resourceId,
+          ...options
+        });
+        if (!result.success) {
+          setError(result.error || "Failed to revoke access");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = extractErrorMessage(err) || "Failed to revoke access";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const handleRevokeOrgAccess = useCallback2(
+    async (organizationId2) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await revokeOrgAccess(
+          resourceType,
+          resourceId,
+          organizationId2
+        );
+        if (!result.success) {
+          setError(result.error || "Failed to revoke org access");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = extractErrorMessage(err) || "Failed to revoke org access";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const handleUpdateLevel = useCallback2(
+    async (options, newLevel) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await updatePermissionLevel({
+          resourceType,
+          resourceId,
+          ...options,
+          newLevel
+        });
+        if (!result.success) {
+          setError(result.error || "Failed to update permission");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = extractErrorMessage(err) || "Failed to update permission";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const handleSetShownTo = useCallback2(
+    async (next) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await setResourceShownTo(resourceType, resourceId, next);
+        if (!result.success) {
+          setError(result.error || 'Could not change "Shown to"');
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = extractErrorMessage(err) || 'Could not change "Shown to"';
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const whoCanSee = rowState.whoCanSee ? {
+    ...rowState.whoCanSee,
+    organizationId: rowState.whoCanSee.organizationId ?? organizationId ?? null
+  } : null;
+  const handleSetWhoCanSee = useCallback2(
+    async (choice) => {
+      if (!whoCanSee) {
+        return { success: false, error: "This item has no lane to choose." };
+      }
+      if (!whoCanSee.organizationId) {
+        return {
+          success: false,
+          error: "This item's organization could not be read, so its lane cannot be changed."
+        };
+      }
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await setStoreLane(whoCanSee.organizationId, resourceId, choice);
+        if (!result.success) {
+          setError(result.error || "Failed to change who can see this");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = extractErrorMessage(err) || "Failed to change who can see this";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [whoCanSee, resourceId, refresh]
+  );
+  return {
+    permissions,
+    /** Published to the web (or the card's own publish). */
+    isPublic: rowState.isPublic,
+    /**
+     * "Shown to" — undefined when the type does not carry it (Private, Confidential, child, or a
+     * table without the column); null when the type's default applies.
+     */
+    shownTo: rowState.shownTo,
+    /** A child record (a file attached to a chat): no row control of its own. */
+    childRecord: rowState.childRecord === true,
+    /** Membership alone reaches it — said under Current Access. The record store's door names it. */
+    organizationDefault: rowState.organizationDefault ?? null,
+    whoCanSee,
+    /** The thing's own organization, read off its row; null when unknown. */
+    homeOrganizationId: rowState.homeOrganizationId ?? null,
+    setWhoCanSee: handleSetWhoCanSee,
+    loading,
+    error,
+    shareWithUser: handleShareWithUser,
+    makePublic: handleMakePublic,
+    setShownTo: handleSetShownTo,
+    revokeAccess: handleRevokeAccess,
+    revokeOrgAccess: handleRevokeOrgAccess,
+    updateLevel: handleUpdateLevel,
+    refresh,
+    refreshRowState
+  };
+}
+function useSharedWithMe(resourceType) {
+  const [permissions, setPermissions] = useState2([]);
+  const [loading, setLoading] = useState2(true);
+  const [error, setError] = useState2(null);
+  const fetchShared = useCallback2(async () => {
+    setLoading(true);
+    setError(null);
+    try {
+      const data = await getSharedWithMe(resourceType);
+      setPermissions(data);
+    } catch (err) {
+      console.error("Error fetching shared resources:", err);
+      setError(extractErrorMessage(err) || "Failed to fetch shared resources");
+    } finally {
+      setLoading(false);
+    }
+  }, [resourceType]);
+  useEffect2(() => {
+    fetchShared();
+  }, [fetchShared]);
+  return {
+    permissions,
+    loading,
+    error,
+    refresh: fetchShared
+  };
+}
+function useSharingStatus(resourceType, resourceId, enabled = true) {
+  const store2 = useAppStore();
+  const key = sharingStatusKey(resourceType, resourceId);
+  const entry = useAppSelector((state2) => selectSharingStatus(state2, key));
+  const refresh = async () => {
+    if (!resourceType || !resourceId || !enabled) return;
+    store2.dispatch(sharingStatusRequested({ key }));
+    try {
+      const v = await getResourceVisibility(resourceType, resourceId);
+      store2.dispatch(sharingStatusLoaded({ key, visibility: v }));
+    } catch (err) {
+      console.error("Error fetching sharing status:", err);
+      store2.dispatch(sharingStatusFailed({ key, error: extractErrorMessage(err) }));
+    }
+  };
+  const known = entry !== void 0;
+  useEffect2(() => {
+    if (known || !resourceType || !resourceId || !enabled) return;
+    if (selectSharingStatus(store2.getState(), key)) return;
+    void refresh();
+  }, [known, key, enabled]);
+  return {
+    isPublic: entry?.visibility?.isPublic ?? false,
+    loading: entry ? entry.loading : enabled,
+    error: entry?.error ?? null,
+    refresh
+  };
+}
+
+// src/react/sheet/useGrantableLevels.ts
+import { useEffect as useEffect3, useState as useState3 } from "react";
+import { createClient } from "@ai-matrx/sharing/core";
+var NOTHING = { loading: true, error: null, levels: {}, outside: null, maySharePeople: false };
+function useGrantableLevels(resourceType, resourceId, enabled, refreshKey) {
+  const [state2, setState] = useState3(NOTHING);
+  useEffect3(() => {
+    if (!enabled || !resourceType || !resourceId) return;
+    let cancelled = false;
+    const supabase = createClient();
+    const iam = supabase.schema("iam");
+    void iam.rpc("my_grantable_levels", { p_resource_type: resourceType, p_resource_id: resourceId }).then(({ data, error }) => {
+      if (cancelled) return;
+      if (error) {
+        setState({ ...NOTHING, loading: false, error: error.message });
+        return;
+      }
+      const a = data ?? {};
+      const levels = a.levels ?? {};
+      setState({
+        loading: false,
+        error: null,
+        levels,
+        outside: a.outside ?? null,
+        maySharePeople: Object.values(levels).some((why) => why === null)
+      });
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [enabled, resourceType, resourceId, refreshKey]);
+  return state2;
+}
+
+// src/react/sheet/ShareModal.tsx
+import {
+  getShareableResource as getShareableResource2,
+  getResourceTypeLabel,
+  getResourceSharePath
+} from "@ai-matrx/sharing/core";
+import { Skeleton as Skeleton2 } from "@ai-matrx/design-system";
+import { AlertTriangle as AlertTriangle4, Lock as Lock3 } from "lucide-react";
+
+// src/react/sheet/PermissionsList.tsx
+import { useState as useState4 } from "react";
+import { Button as Button2 } from "@ai-matrx/design-system";
+import { Card } from "@ai-matrx/design-system";
+import { cn } from "@ai-matrx/design-system/cn";
+import { Select, SelectContent, SelectItem, SelectValue } from "@ai-matrx/design-system";
+import { SelectTrigger } from "@ai-matrx/design-system/controls";
+import { X, Mail, Building2, Globe as Globe2, Loader2, Lock } from "lucide-react";
+
+// src/react/sheet/PermissionBadge.tsx
+import { Badge } from "@ai-matrx/design-system";
+import { Crown, Shield, Eye, MessageSquare, Users, Globe } from "lucide-react";
+import { jsx as jsx3, jsxs as jsxs2 } from "react/jsx-runtime";
+function PermissionBadge({
+  level,
+  variant = "default",
+  showIcon = false
+}) {
+  const config = {
+    owner: {
+      label: "Owner",
+      className: "bg-yellow-100 text-yellow-800 dark:bg-yellow-900 dark:text-yellow-200 border-yellow-300",
+      icon: Crown
+    },
+    admin: {
+      label: "Full access",
+      className: "bg-red-100 text-red-800 dark:bg-red-900 dark:text-red-200 border-red-300",
+      icon: Shield
+    },
+    commenter: {
+      label: "Comment",
+      className: "bg-purple-100 text-purple-800 dark:bg-purple-900 dark:text-purple-200 border-purple-300",
+      icon: MessageSquare
+    },
+    editor: {
+      label: "Edit",
+      className: "bg-orange-100 text-orange-800 dark:bg-orange-900 dark:text-orange-200 border-orange-300",
+      icon: Users
+    },
+    viewer: {
+      label: "View",
+      className: "bg-blue-100 text-blue-800 dark:bg-blue-900 dark:text-blue-200 border-blue-300",
+      icon: Eye
+    }
+  };
+  const shown = level === "edit_content" ? "editor" : level;
+  const { label, className, icon: Icon } = config[shown];
+  if (variant === "compact") {
+    return /* @__PURE__ */ jsxs2(Badge, { className: `${className} text-xs px-2 py-0.5`, children: [
+      showIcon && /* @__PURE__ */ jsx3(Icon, { className: "w-3 h-3 mr-1" }),
+      label
+    ] });
+  }
+  return /* @__PURE__ */ jsxs2(Badge, { className: `${className} px-3 py-1`, children: [
+    showIcon && /* @__PURE__ */ jsx3(Icon, { className: "w-3.5 h-3.5 mr-1.5" }),
+    label
+  ] });
+}
+function PublicBadge({
+  variant = "default"
+}) {
+  const className = "bg-green-100 text-green-800 dark:bg-green-900 dark:text-green-200 border-green-300";
+  if (variant === "compact") {
+    return /* @__PURE__ */ jsxs2(Badge, { className: `${className} text-xs px-2 py-0.5`, children: [
+      /* @__PURE__ */ jsx3(Globe, { className: "w-3 h-3 mr-1" }),
+      "Public"
+    ] });
+  }
+  return /* @__PURE__ */ jsxs2(Badge, { className: `${className} px-3 py-1`, children: [
+    /* @__PURE__ */ jsx3(Globe, { className: "w-3.5 h-3.5 mr-1.5" }),
+    "Public"
+  ] });
+}
+function PermissionLevelDescription({
+  level
+}) {
+  const descriptions = {
+    viewer: "Can view",
+    commenter: "Can view and comment",
+    editor: "Can view and edit values and content",
+    admin: "Full access: also structure and sharing"
+  };
+  return /* @__PURE__ */ jsx3("span", { className: "text-xs text-muted-foreground", children: descriptions[level] });
+}
+function GuestBadge() {
+  return /* @__PURE__ */ jsx3(Badge, { variant: "outline", className: "shrink-0 px-1.5 py-0 text-[10px] leading-4 text-muted-foreground", "data-guest-marker": "", children: "Guest" });
+}
+
+// src/react/sheet/PermissionsList.tsx
+import {
+  accessKpis,
+  granteeKind,
+  granteeLabel,
+  granteeSecondaryLabel,
+  grantCsvRows,
+  grantLevelLabel,
+  humanGrantList,
+  humanGrantRow,
+  sharingLocation,
+  GRANT_LIST_SCOPE_NOTE,
+  NO_GRANTS_DETAIL,
+  NO_GRANTS_HEADLINE,
+  NO_GRANTS_YET_HEADLINE
+} from "@ai-matrx/sharing/core";
+import {
+  PERMISSION_LEVEL_HINTS,
+  PERMISSION_LEVEL_SHORT_LABELS
+} from "@ai-matrx/sharing/core";
+
+// src/react/sheet/ui/alert-dialog.tsx
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogContentPrimitive,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogOverlay,
+  AlertDialogPortal,
+  AlertDialogTitle,
+  AlertDialogTrigger
+} from "@ai-matrx/design-system";
+
+// src/react/sheet/PermissionsList.tsx
+import { Fragment, jsx as jsx4, jsxs as jsxs3 } from "react/jsx-runtime";
+var GRANT_PREVIEW = 12;
+var EMPTY_STATE_MIN_HEIGHT = "min-h-[11rem]";
+function pendingSentence({
+  count,
+  one,
+  many
+}) {
+  return count === 1 ? `One ${one} is invited below and has not joined yet \u2014 they get access the moment they follow their link.` : `${count} ${many} are invited below and have not joined yet \u2014 each gets access the moment they follow their link.`;
+}
+function ShowAllToggle({
+  total,
+  preview,
+  showingAll,
+  onToggle
+}) {
+  if (total <= preview) return null;
+  return (
+    // ui-exception: moved verbatim from the web share sheet; restyling onto design-system Button is its own UI change
+    /* @__PURE__ */ jsx4(
+      "button",
+      {
+        type: "button",
+        className: "text-[11px] text-muted-foreground underline-offset-2 hover:text-foreground ",
+        onClick: onToggle,
+        children: showingAll ? `top ${preview}` : `all ${total.toLocaleString()}`
+      }
+    )
+  );
+}
+function PermissionsList({
+  permissions,
+  isOwner,
+  onUpdateLevel,
+  onRevoke,
+  loading = false,
+  copy,
+  listLabel = "Current access",
+  alsoPending
+}) {
+  const [updatingId, setUpdatingId] = useState4(null);
+  const [revokingId, setRevokingId] = useState4(null);
+  const [showAll, setShowAll] = useState4(false);
+  const [confirmRevoke, setConfirmRevoke] = useState4({ open: false, permission: null });
+  const context = copy ?? {
+    resourceType: permissions[0]?.resourceType ?? "unknown",
+    resourceId: permissions[0]?.resourceId ?? "unknown",
+    surface: listLabel,
+    kpis: accessKpis({
+      permissions,
+      isPublic: permissions.some((p) => p.isPublic),
+      // What the list actually renders — owner controls are on screen or not.
+      viewerIsOwner: isOwner
+    })
+  };
+  const location = sharingLocation(context.surface);
+  const resourceAttributes = {
+    resource_type: context.resourceType,
+    resource_id: context.resourceId,
+    resource_name: context.resourceName ?? null
+  };
+  if (loading && permissions.length === 0) {
+    return /* @__PURE__ */ jsx4(
+      "div",
+      {
+        className: `flex items-center justify-center ${EMPTY_STATE_MIN_HEIGHT}`,
+        "aria-busy": "true",
+        "data-grants-reserved": "",
+        children: /* @__PURE__ */ jsx4(Loader2, { className: "w-6 h-6 animate-spin text-muted-foreground" })
+      }
+    );
+  }
+  if (permissions.length === 0) {
+    return /* @__PURE__ */ jsxs3(
+      "div",
+      {
+        className: `group flex flex-col items-center justify-center text-center py-6 text-muted-foreground ${EMPTY_STATE_MIN_HEIGHT}`,
+        "data-grants-empty": "",
+        children: [
+          /* @__PURE__ */ jsx4(Lock, { className: "w-10 h-10 mb-1.5 opacity-20" }),
+          /* @__PURE__ */ jsx4("p", { className: "text-sm", children: alsoPending && alsoPending.count > 0 ? NO_GRANTS_YET_HEADLINE : NO_GRANTS_HEADLINE }),
+          /* @__PURE__ */ jsx4("p", { className: "text-xs mt-0.5", children: NO_GRANTS_DETAIL }),
+          alsoPending && alsoPending.count > 0 ? /* @__PURE__ */ jsx4("p", { className: "text-xs mt-0.5", "data-testid": "grants-also-pending", children: pendingSentence(alsoPending) }) : null,
+          /* @__PURE__ */ jsx4("div", { className: "mt-1.5 flex justify-center opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ jsx4(
+            CopyButtons,
+            {
+              size: "xs",
+              label: `${listLabel} (no grants)`,
+              human: () => humanGrantList([], { surface: context.surface }),
+              agent: () => ({
+                kind: "access-grants",
+                location,
+                description: `The "${listLabel}" grant list, which is empty: ${NO_GRANTS_HEADLINE} \u2014 ${NO_GRANTS_DETAIL}.`,
+                data: {
+                  list: listLabel,
+                  rendered_empty_state: {
+                    headline: NO_GRANTS_HEADLINE,
+                    detail: NO_GRANTS_DETAIL
+                  },
+                  grants: [],
+                  scope_note: GRANT_LIST_SCOPE_NOTE,
+                  kpis: context.kpis
+                },
+                summary: humanGrantList([], { surface: context.surface }),
+                attributes: {
+                  ...context.kpis,
+                  ...resourceAttributes,
+                  list: listLabel,
+                  count: 0
+                }
+              })
+            }
+          ) })
+        ]
+      }
+    );
+  }
+  const handleUpdateLevel = async (permission, newLevel) => {
+    if (newLevel === permission.permissionLevel) return;
+    setUpdatingId(permission.id);
+    try {
+      await onUpdateLevel(
+        {
+          userId: permission.grantedToUserId || void 0,
+          organizationId: permission.grantedToOrganizationId || void 0,
+          isPublic: permission.isPublic || void 0
+        },
+        newLevel
+      );
+    } finally {
+      setUpdatingId(null);
+    }
+  };
+  const handleRevoke = async (permission) => {
+    setRevokingId(permission.id);
+    try {
+      await onRevoke({
+        userId: permission.grantedToUserId || void 0,
+        organizationId: permission.grantedToOrganizationId || void 0,
+        isPublic: permission.isPublic || void 0
+      });
+    } finally {
+      setRevokingId(null);
+      setConfirmRevoke({ open: false, permission: null });
+    }
+  };
+  const getPermissionLabel = granteeLabel;
+  const getPermissionSecondaryLabel = granteeSecondaryLabel;
+  const getPermissionIcon = (permission) => {
+    if (permission.isPublic) return Globe2;
+    if (permission.grantedToOrganization) return Building2;
+    return Mail;
+  };
+  const visiblePermissions = showAll ? permissions : permissions.slice(0, GRANT_PREVIEW);
+  const listHuman = () => humanGrantList(permissions, {
+    surface: context.surface,
+    shown: visiblePermissions.length
+  });
+  return /* @__PURE__ */ jsxs3(
+    "div",
+    {
+      className: cn("space-y-1 transition-opacity", loading && "opacity-60"),
+      "aria-busy": loading,
+      "data-grants-busy": loading ? "true" : "false",
+      children: [
+        /* @__PURE__ */ jsxs3("div", { className: "flex items-center justify-end gap-1", children: [
+          /* @__PURE__ */ jsx4(
+            ShowAllToggle,
+            {
+              total: permissions.length,
+              preview: GRANT_PREVIEW,
+              showingAll: showAll,
+              onToggle: () => setShowAll((current) => !current)
+            }
+          ),
+          /* @__PURE__ */ jsx4(
+            CopyButtons,
+            {
+              size: "xs",
+              label: `${listLabel} (${permissions.length} grant${permissions.length === 1 ? "" : "s"})`,
+              human: listHuman,
+              json: () => permissions,
+              agent: () => ({
+                kind: "access-grants",
+                location,
+                description: `All ${permissions.length} direct grant(s) in the "${listLabel}" list. ${GRANT_LIST_SCOPE_NOTE}`,
+                data: {
+                  list: listLabel,
+                  grants: permissions.map((permission) => ({
+                    grantee: granteeLabel(permission),
+                    grantee_email: granteeSecondaryLabel(permission),
+                    grantee_type: granteeKind(permission),
+                    level_shown: grantLevelLabel(permission),
+                    can_manage_here: isOwner,
+                    raw: permission
+                  })),
+                  scope_note: GRANT_LIST_SCOPE_NOTE,
+                  kpis: context.kpis,
+                  rows_on_screen: visiblePermissions.length,
+                  rows_total: permissions.length
+                },
+                summary: listHuman(),
+                attributes: {
+                  ...context.kpis,
+                  ...resourceAttributes,
+                  list: listLabel,
+                  count: permissions.length,
+                  shown: visiblePermissions.length
+                }
+              }),
+              export: {
+                items: [
+                  jsonExportItem(() => permissions, "JSON (all grants)"),
+                  csvExportItem(
+                    () => grantCsvRows(permissions),
+                    "CSV (all grants)"
+                  )
+                ]
+              }
+            }
+          )
+        ] }),
+        visiblePermissions.map((permission) => {
+          const Icon = getPermissionIcon(permission);
+          const isUpdating = updatingId === permission.id;
+          const isRevoking = revokingId === permission.id;
+          const secondaryLabel = getPermissionSecondaryLabel(permission);
+          return (
+            // `group` is what reveals the door controls below on hover — without
+            // it EntityDoorControls renders at opacity-0 and the door is
+            // invisible, which is the failure this campaign has hit four times.
+            /* @__PURE__ */ jsx4(Card, { size: "sm", className: "group px-2 py-2", children: /* @__PURE__ */ jsxs3("div", { className: "flex items-center gap-2", children: [
+              /* @__PURE__ */ jsxs3("div", { className: "flex items-center gap-2 flex-1 min-w-0", children: [
+                permission.grantedToUser && !permission.isPublic ? /* @__PURE__ */ jsx4(
+                  UserAvatarDisplay,
+                  {
+                    user: permission.grantedToUser,
+                    size: "xs",
+                    className: "flex-shrink-0"
+                  }
+                ) : /* @__PURE__ */ jsx4("div", { className: "flex items-center justify-center w-6 h-6 rounded-full bg-primary/10 flex-shrink-0", children: /* @__PURE__ */ jsx4(Icon, { className: "w-3 h-3 text-primary" }) }),
+                /* @__PURE__ */ jsxs3("div", { className: "flex-1 min-w-0 flex items-center gap-1.5", children: [
+                  /* @__PURE__ */ jsx4("p", { className: "text-sm font-semibold truncate leading-none", children: getPermissionLabel(permission) }),
+                  permission.grantedToUser?.isGuest && !permission.isPublic ? /* @__PURE__ */ jsx4(GuestBadge, {}) : null,
+                  permission.grantedToOrganization && /* @__PURE__ */ jsx4(
+                    EntityDoorControls,
+                    {
+                      token: "organization",
+                      id: permission.grantedToOrganization.id,
+                      name: permission.grantedToOrganization.name,
+                      className: "shrink-0"
+                    }
+                  ),
+                  secondaryLabel && /* @__PURE__ */ jsx4("p", { className: "text-[11px] text-muted-foreground truncate leading-none", children: secondaryLabel })
+                ] })
+              ] }),
+              /* @__PURE__ */ jsxs3("div", { className: "flex items-center gap-1 flex-shrink-0", children: [
+                /* @__PURE__ */ jsx4("span", { className: "opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ jsx4(
+                  CopyButtons,
+                  {
+                    size: "xs",
+                    label: `Grant \u2014 ${granteeLabel(permission)}`,
+                    human: () => humanGrantRow(permission),
+                    json: () => permission,
+                    agent: () => ({
+                      kind: "access-grant",
+                      location,
+                      description: `One direct access grant on this resource: ${granteeLabel(
+                        permission
+                      )} \xB7 ${grantLevelLabel(permission)}.`,
+                      data: {
+                        grantee: granteeLabel(permission),
+                        grantee_email: granteeSecondaryLabel(permission),
+                        grantee_type: granteeKind(permission),
+                        level_shown: grantLevelLabel(permission),
+                        can_manage_here: isOwner,
+                        raw: permission,
+                        scope_note: GRANT_LIST_SCOPE_NOTE,
+                        kpis: context.kpis
+                      },
+                      summary: humanGrantRow(permission),
+                      attributes: {
+                        ...context.kpis,
+                        ...resourceAttributes,
+                        list: listLabel,
+                        grant_id: permission.id,
+                        grantee_type: granteeKind(permission),
+                        level: permission.permissionLevel
+                      }
+                    })
+                  }
+                ) }),
+                isOwner ? /* @__PURE__ */ jsxs3(Fragment, { children: [
+                  /* @__PURE__ */ jsxs3(
+                    Select,
+                    {
+                      value: permission.permissionLevel,
+                      onValueChange: (value) => handleUpdateLevel(permission, value),
+                      disabled: isUpdating || isRevoking,
+                      children: [
+                        /* @__PURE__ */ jsx4(SelectTrigger, { className: "w-[140px]", children: /* @__PURE__ */ jsx4(SelectValue, {}) }),
+                        /* @__PURE__ */ jsxs3(SelectContent, { children: [
+                          /* @__PURE__ */ jsx4(SelectItem, { value: "viewer", title: PERMISSION_LEVEL_HINTS.viewer, children: PERMISSION_LEVEL_SHORT_LABELS.viewer }),
+                          /* @__PURE__ */ jsx4(SelectItem, { value: "commenter", title: PERMISSION_LEVEL_HINTS.commenter, children: PERMISSION_LEVEL_SHORT_LABELS.commenter }),
+                          /* @__PURE__ */ jsx4(SelectItem, { value: "editor", title: PERMISSION_LEVEL_HINTS.editor, children: PERMISSION_LEVEL_SHORT_LABELS.editor }),
+                          /* @__PURE__ */ jsx4(SelectItem, { value: "admin", title: PERMISSION_LEVEL_HINTS.admin, children: PERMISSION_LEVEL_SHORT_LABELS.admin })
+                        ] })
+                      ]
+                    }
+                  ),
+                  /* @__PURE__ */ jsx4(
+                    Button2,
+                    {
+                      variant: "ghost",
+                      size: "icon",
+                      className: "h-7 w-7",
+                      "aria-label": `Revoke access for ${getPermissionLabel(permission)}`,
+                      title: `Revoke access for ${getPermissionLabel(permission)}`,
+                      onClick: () => setConfirmRevoke({ open: true, permission }),
+                      disabled: isUpdating || isRevoking,
+                      children: isRevoking ? /* @__PURE__ */ jsx4(Loader2, { className: "w-3 h-3 animate-spin" }) : /* @__PURE__ */ jsx4(X, { className: "w-3 h-3" })
+                    }
+                  )
+                ] }) : /* @__PURE__ */ jsx4(Fragment, { children: permission.isPublic ? /* @__PURE__ */ jsx4(PublicBadge, { variant: "compact" }) : /* @__PURE__ */ jsx4(
+                  PermissionBadge,
+                  {
+                    level: permission.permissionLevel,
+                    variant: "compact"
+                  }
+                ) })
+              ] })
+            ] }) }, permission.id)
+          );
+        }),
+        /* @__PURE__ */ jsx4(
+          AlertDialog,
+          {
+            open: confirmRevoke.open,
+            onOpenChange: (open) => setConfirmRevoke({ open, permission: confirmRevoke.permission }),
+            children: /* @__PURE__ */ jsxs3(AlertDialogContent, { children: [
+              /* @__PURE__ */ jsxs3(AlertDialogHeader, { children: [
+                /* @__PURE__ */ jsx4(AlertDialogTitle, { children: "Revoke Access?" }),
+                /* @__PURE__ */ jsxs3(AlertDialogDescription, { children: [
+                  "Are you sure you want to revoke access for",
+                  " ",
+                  /* @__PURE__ */ jsx4("strong", { children: confirmRevoke.permission ? getPermissionLabel(confirmRevoke.permission) : "" }),
+                  "? They will no longer be able to access this resource."
+                ] })
+              ] }),
+              /* @__PURE__ */ jsxs3(AlertDialogFooter, { children: [
+                /* @__PURE__ */ jsx4(AlertDialogCancel, { children: "Cancel" }),
+                /* @__PURE__ */ jsx4(
+                  AlertDialogAction,
+                  {
+                    onClick: () => {
+                      if (confirmRevoke.permission) {
+                        handleRevoke(confirmRevoke.permission);
+                      }
+                    },
+                    className: "bg-destructive text-destructive-foreground hover:bg-destructive/90",
+                    children: "Revoke Access"
+                  }
+                )
+              ] })
+            ] })
+          }
+        )
+      ]
+    }
+  );
+}
+
+// src/react/sheet/AccessSummaryPanel.tsx
+import { useEffect as useEffect4, useRef } from "react";
+import {
+  Globe as Globe3,
+  Lock as Lock2,
+  Loader2 as Loader22,
+  Users as Users2,
+  Boxes,
+  AlertTriangle
+} from "lucide-react";
+
+// src/react/sheet/useAccessSummary.ts
+import {
+  fetchAccessSummary
+} from "@ai-matrx/sharing/core";
+function useAccessSummary({
+  entityType,
+  entityId,
+  enabled = true,
+  refreshToken
+}) {
+  const read = useStoreRead(
+    entityId ? `sharing.access-summary:${entityType}:${entityId}` : null,
+    () => fetchAccessSummary(entityType, entityId),
+    { enabled: enabled && Boolean(entityId), staleAfterMs: 6e4 }
+  );
+  useRefreshWhenChanged(refreshToken, read.refresh);
+  const active = enabled && Boolean(entityId);
+  const reload = () => {
+    void read.refresh();
+  };
+  return {
+    summary: active ? read.data ?? null : null,
+    loading: active && read.isLoading,
+    error: active && read.isError ? read.error ?? "Could not load access" : null,
+    reload
+  };
+}
+
+// src/react/sheet/AccessSummaryPanel.tsx
+import {
+  accessKpis as accessKpis2,
+  accessReasonRows,
+  accessSummaryView,
+  humanAccessSummary,
+  isPrivateSummary,
+  reasonCsvRows,
+  sharingLocation as sharingLocation2,
+  summaryReachLabel,
+  ACCESS_SUMMARY_ERROR_HEADLINE,
+  NOTHING_ELSE_GRANTS
+} from "@ai-matrx/sharing/core";
+import { cn as cn2 } from "@ai-matrx/design-system/cn";
+import { jsx as jsx5, jsxs as jsxs4 } from "react/jsx-runtime";
+function AccessSummaryPanel({
+  entityType,
+  entityId,
+  enabled = true,
+  refreshToken,
+  className,
+  copy,
+  onSummaryChange
+}) {
+  const { summary, loading, error, reload } = useAccessSummary({
+    entityType,
+    entityId,
+    enabled,
+    refreshToken
+  });
+  const notifyRef = useRef(onSummaryChange);
+  useEffect4(() => {
+    notifyRef.current = onSummaryChange;
+  }, [onSummaryChange]);
+  useEffect4(() => {
+    notifyRef.current?.({ summary, error, loading });
+  }, [summary, error, loading]);
+  const context = copy ?? {
+    resourceType: entityType,
+    resourceId: entityId ?? "unknown",
+    surface: "Access summary",
+    kpis: accessKpis2({
+      permissions: [],
+      isPublic: summary?.isPublic ?? false,
+      viewerIsOwner: summary ? summary.viewerIsOwner : null,
+      summary,
+      entityType
+    })
+  };
+  const location = sharingLocation2(context.surface);
+  const resourceAttributes = {
+    resource_type: context.resourceType,
+    resource_id: context.resourceId,
+    resource_name: context.resourceName ?? null
+  };
+  if (loading && !summary) {
+    return /* @__PURE__ */ jsxs4(
+      "div",
+      {
+        className: cn2(
+          "flex items-center gap-2 px-3 py-2 text-[13px] text-muted-foreground",
+          className
+        ),
+        children: [
+          /* @__PURE__ */ jsx5(Loader22, { className: "h-3.5 w-3.5 animate-spin" }),
+          "Working out who can see this\u2026"
+        ]
+      }
+    );
+  }
+  if (error) {
+    const errorHuman = () => [
+      `${ACCESS_SUMMARY_ERROR_HEADLINE}`,
+      error,
+      `Entity: ${entityType}:${entityId ?? "(none)"}`,
+      `The panel offers a Retry; the reachability answer is UNKNOWN, not "private".`
+    ].join("\n");
+    return /* @__PURE__ */ jsxs4(
+      "div",
+      {
+        className: cn2(
+          "group rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-[12px] text-destructive-ink",
+          className
+        ),
+        children: [
+          /* @__PURE__ */ jsxs4("p", { className: "flex items-center gap-1.5 font-medium", children: [
+            /* @__PURE__ */ jsx5(AlertTriangle, { className: "h-3.5 w-3.5" }),
+            ACCESS_SUMMARY_ERROR_HEADLINE,
+            /* @__PURE__ */ jsx5("span", { className: "ml-auto opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ jsx5(
+              CopyButtons,
+              {
+                size: "xs",
+                label: "Access summary error",
+                human: errorHuman,
+                json: () => ({
+                  error,
+                  entity_type: entityType,
+                  entity_id: entityId
+                }),
+                agent: () => ({
+                  kind: "access-summary-error",
+                  location,
+                  description: "The reachability summary failed to load. This is the error the user is looking at, verbatim \u2014 the access answer is UNKNOWN, not private.",
+                  data: {
+                    rendered_headline: ACCESS_SUMMARY_ERROR_HEADLINE,
+                    rendered_error: error,
+                    entity_type: entityType,
+                    entity_id: entityId,
+                    retry_offered: true,
+                    kpis: context.kpis
+                  },
+                  summary: errorHuman(),
+                  attributes: {
+                    ...context.kpis,
+                    ...resourceAttributes,
+                    state: "error"
+                  }
+                })
+              }
+            ) })
+          ] }),
+          /* @__PURE__ */ jsx5("p", { className: "opacity-80", children: error }),
+          /* @__PURE__ */ jsx5(
+            "button",
+            {
+              type: "button",
+              onClick: reload,
+              className: "mt-1 underline hover:no-underline",
+              children: "Retry"
+            }
+          ),
+          /* @__PURE__ */ jsx5(ErrorAlchemyMenu, { error })
+        ]
+      }
+    );
+  }
+  if (!summary) return null;
+  const Icon = summary.isPublic ? Globe3 : isPrivateSummary(summary) ? Lock2 : Users2;
+  const reasons = accessReasonRows(summary, entityType);
+  const view = () => accessSummaryView(summary, entityType);
+  const panelHuman = () => humanAccessSummary(summary, entityType);
+  return /* @__PURE__ */ jsxs4("div", { className: cn2("group space-y-2 px-3 py-2", className), children: [
+    /* @__PURE__ */ jsxs4("div", { className: "flex items-center gap-2", children: [
+      /* @__PURE__ */ jsxs4("p", { className: "text-[12px] text-muted-foreground", children: [
+        "Who can open it:",
+        " ",
+        /* @__PURE__ */ jsx5("span", { className: "text-foreground", children: summaryReachLabel(summary) })
+      ] }),
+      /* @__PURE__ */ jsx5("span", { className: "ml-auto flex items-center gap-1 opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ jsx5(
+        CopyButtons,
+        {
+          size: "xs",
+          label: "Who can see this",
+          human: panelHuman,
+          json: view,
+          agent: () => ({
+            kind: "access-summary",
+            location,
+            description: 'Every reason this entity is reachable, exactly as rendered: who can open it, the one-line headline, and each reason row. This is the complete answer to "who can see this, and why" \u2014 direct grants are only one of the reasons listed.',
+            data: { ...view(), kpis: context.kpis },
+            summary: panelHuman(),
+            attributes: {
+              ...context.kpis,
+              ...resourceAttributes,
+              reasons: reasons.length,
+              is_public: summary.isPublic,
+              viewer_is_owner: summary.viewerIsOwner,
+              can_manage: summary.canManage
+            }
+          }),
+          export: {
+            items: [
+              jsonExportItem(view, "JSON (rendered summary)"),
+              csvExportItem(
+                () => reasonCsvRows(reasons),
+                "CSV (all access reasons)"
+              )
+            ]
+          }
+        }
+      ) })
+    ] }),
+    /* @__PURE__ */ jsxs4("p", { className: "flex items-start gap-2 text-[13px] text-foreground", children: [
+      /* @__PURE__ */ jsx5(Icon, { className: "mt-0.5 h-3.5 w-3.5 shrink-0 text-muted-foreground" }),
+      /* @__PURE__ */ jsx5("span", { children: view().headline })
+    ] }),
+    /* @__PURE__ */ jsx5("ul", { className: "space-y-1 text-[12px] text-muted-foreground", children: reasons.map((reason) => /* @__PURE__ */ jsx5(
+      ReasonRow,
+      {
+        reason,
+        location,
+        attributes: { ...context.kpis, ...resourceAttributes }
+      },
+      reason.id
+    )) }),
+    isPrivateSummary(summary) ? /* @__PURE__ */ jsx5("p", { className: "text-[12px] text-muted-foreground", children: NOTHING_ELSE_GRANTS }) : null
+  ] });
+}
+var REASON_ICON = {
+  organization: Users2,
+  "direct-grants": Users2,
+  container: Boxes
+};
+function ReasonRow({
+  reason,
+  location,
+  attributes
+}) {
+  const Icon = REASON_ICON[reason.kind];
+  const human = () => `${reason.title}${reason.detail ? ` \u2014 ${reason.detail}` : ""}`;
+  return /* @__PURE__ */ jsxs4("li", { className: "group/reason flex items-start gap-2", children: [
+    /* @__PURE__ */ jsx5(Icon, { className: "mt-0.5 h-3.5 w-3.5 shrink-0" }),
+    /* @__PURE__ */ jsxs4("span", { className: "min-w-0", children: [
+      /* @__PURE__ */ jsx5("span", { className: "text-foreground", children: reason.title }),
+      reason.detail ? /* @__PURE__ */ jsxs4("span", { className: "opacity-80", children: [
+        " \u2014 ",
+        reason.detail
+      ] }) : null
+    ] }),
+    /* @__PURE__ */ jsx5("span", { className: "ml-auto shrink-0 opacity-0 transition-opacity focus-within:opacity-100 group-hover/reason:opacity-100", children: /* @__PURE__ */ jsx5(
+      CopyButtons,
+      {
+        size: "xs",
+        label: `Access reason \u2014 ${reason.title}`,
+        human,
+        json: () => reason,
+        agent: () => ({
+          kind: "access-reason",
+          location,
+          description: "One reason this entity is reachable, as rendered in the access summary. Removing this reason is one of the levers for changing who can see it.",
+          data: reason,
+          summary: human(),
+          attributes: {
+            ...attributes,
+            reason_kind: reason.kind,
+            container_type: reason.containerType ?? null,
+            container_id: reason.containerId ?? null
+          }
+        })
+      }
+    ) })
+  ] });
+}
+
+// src/react/sheet/ShareWithUserTab.tsx
+import { useState as useState6, useMemo as useMemo2, useEffect as useEffect6 } from "react";
+import { Button as Button4 } from "@ai-matrx/design-system";
+import { Label as Label2 } from "@ai-matrx/design-system";
+import { Select as Select3, SelectContent as SelectContent3, SelectItem as SelectItem3, SelectValue as SelectValue3 } from "@ai-matrx/design-system";
+import { SelectTrigger as SelectTrigger3 } from "@ai-matrx/design-system/controls";
+
+// src/react/sheet/ui/scroll-area.tsx
+import { ScrollArea, ScrollBar } from "@ai-matrx/design-system";
+
+// src/react/sheet/ui/avatar.tsx
+import { Avatar, AvatarFallback, AvatarImage } from "@ai-matrx/design-system";
+
+// src/react/sheet/ShareWithUserTab.tsx
+import {
+  Loader2 as Loader24,
+  UserPlus,
+  CheckCircle as CheckCircle2,
+  XCircle as XCircle2,
+  Users as Users4,
+  MessageSquare as MessageSquare2,
+  Building2 as Building23,
+  Mail as Mail2
+} from "lucide-react";
+import {
+  PERMISSION_LEVEL_HINTS as PERMISSION_LEVEL_HINTS2,
+  PERMISSION_LEVEL_LABELS,
+  PERMISSION_LEVEL_SHORT_LABELS as PERMISSION_LEVEL_SHORT_LABELS3,
+  PERMISSION_LEVELS as PERMISSION_LEVELS2
+} from "@ai-matrx/sharing/core";
+import { createClient as createClient2 } from "@ai-matrx/sharing/core";
+import {
+  sharingLocation as sharingLocation3
+} from "@ai-matrx/sharing/core";
+import { getInitials } from "@ai-matrx/kit/format";
+
+// src/react/sheet/AddEveryoneInOrg.tsx
+import { readOrganizationMemberRows as readOrganizationMemberRows2 } from "@ai-matrx/sharing/core";
+import { listTeamMembers, listTeams } from "@ai-matrx/sharing/core";
+import { useEffect as useEffect5, useState as useState5 } from "react";
+import { Building2 as Building22, CheckCircle, Loader2 as Loader23, Users as Users3, XCircle } from "lucide-react";
+import { Button as Button3 } from "@ai-matrx/design-system";
+import { Checkbox } from "@ai-matrx/design-system";
+import { Label } from "@ai-matrx/design-system";
+import { Select as Select2, SelectContent as SelectContent2, SelectItem as SelectItem2, SelectValue as SelectValue2 } from "@ai-matrx/design-system";
+import { SelectTrigger as SelectTrigger2 } from "@ai-matrx/design-system/controls";
+import { organizationDisambiguators } from "@ai-matrx/sharing/core";
+import { PERMISSION_LEVELS, PERMISSION_LEVEL_SHORT_LABELS as PERMISSION_LEVEL_SHORT_LABELS2 } from "@ai-matrx/sharing/core";
+import { Fragment as Fragment2, jsx as jsx6, jsxs as jsxs5 } from "react/jsx-runtime";
+var EVERYONE = "__everyone__";
+async function readTeamMembers(teamId) {
+  const rows = await listTeamMembers(teamId);
+  return rows.map((row) => ({
+    userId: row.userId,
+    email: row.email ?? "",
+    name: row.displayName || row.email || "Unnamed person"
+  }));
+}
+async function readMembers(orgId) {
+  const data = await readOrganizationMemberRows2(orgId);
+  return data.map((row) => ({
+    userId: row.user_id,
+    email: row.user_email ?? "",
+    name: row.user_display_name || row.user_email || "Unnamed person"
+  }));
+}
+function AddEveryoneInOrg({
+  grantPerson,
+  level: sectionLevel,
+  whyNotLevel,
+  alreadySharedUserIds = [],
+  onDone,
+  defaultOrgId
+}) {
+  const { orgs } = useOrganizationsToCreateIn();
+  const detail = organizationDisambiguators(orgs);
+  const me = useCurrentUserId();
+  const [open, setOpen] = useState5(false);
+  const [orgId, setOrgId] = useState5("");
+  const [members, setMembers] = useState5(null);
+  const [loadError, setLoadError] = useState5(null);
+  const [ticked, setTicked] = useState5(/* @__PURE__ */ new Set());
+  const [running, setRunning] = useState5(false);
+  const [outcomes, setOutcomes] = useState5({});
+  const [teams, setTeams] = useState5([]);
+  const [teamsError, setTeamsError] = useState5(null);
+  const [group, setGroup] = useState5(EVERYONE);
+  const [ownLevel, setOwnLevel] = useState5(null);
+  const level = ownLevel ?? sectionLevel;
+  const orgLabel = orgs.find((o) => o.id === orgId)?.name ?? "this organization";
+  const team = group === EVERYONE ? void 0 : teams.find((t) => t.id === group);
+  const orgName = team ? team.name : orgLabel;
+  useEffect5(() => {
+    if (!open || !orgId) return;
+    let cancelled = false;
+    setTeams([]);
+    setTeamsError(null);
+    setGroup(EVERYONE);
+    listTeams(orgId).then((rows) => {
+      if (!cancelled) setTeams(rows.filter((t) => t.archivedAt === null && t.memberCount > 0));
+    }).catch((err) => {
+      if (!cancelled) setTeamsError(err instanceof Error ? err.message : "The teams could not be listed.");
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [open, orgId]);
+  const already = new Set(alreadySharedUserIds);
+  useEffect5(() => {
+    if (!open || !orgId) return;
+    let cancelled = false;
+    setMembers(null);
+    setLoadError(null);
+    setOutcomes({});
+    (group === EVERYONE ? readMembers(orgId) : readTeamMembers(group)).then((rows) => {
+      if (cancelled) return;
+      const others = rows.filter((m) => m.userId !== me);
+      setMembers(others);
+      setTicked(
+        new Set(others.filter((m) => !already.has(m.userId)).map((m) => m.userId))
+      );
+    }).catch((err) => {
+      if (!cancelled)
+        setLoadError(
+          err instanceof Error ? err.message : "The member list could not be read."
+        );
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [open, orgId, group, me]);
+  const toggle = (userId, on) => setTicked((prev) => {
+    const next = new Set(prev);
+    if (on) next.add(userId);
+    else next.delete(userId);
+    return next;
+  });
+  const chosen = (members ?? []).filter((m) => ticked.has(m.userId));
+  const run = async () => {
+    setRunning(true);
+    const next = {};
+    let granted = 0;
+    for (const person of chosen) {
+      try {
+        const result = await grantPerson(person, level);
+        next[person.userId] = result.success ? { ok: true, say: "Shared" } : { ok: false, say: result.error || "Not shared" };
+        if (result.success) granted += 1;
+      } catch (err) {
+        next[person.userId] = {
+          ok: false,
+          say: err instanceof Error ? err.message : "Not shared"
+        };
+      }
+      setOutcomes({ ...next });
+    }
+    setRunning(false);
+    setTicked(/* @__PURE__ */ new Set());
+    if (granted > 0) onDone?.();
+  };
+  if (orgs.length === 0) return null;
+  if (!open) {
+    return /* @__PURE__ */ jsxs5(
+      Button3,
+      {
+        type: "button",
+        variant: "outline",
+        className: "w-full h-9",
+        onClick: () => {
+          if (!orgId && defaultOrgId && orgs.some((o) => o.id === defaultOrgId))
+            setOrgId(defaultOrgId);
+          setOpen(true);
+        },
+        children: [
+          /* @__PURE__ */ jsx6(Users3, { className: "w-4 h-4 mr-2" }),
+          "Add everyone in an organization or team"
+        ]
+      }
+    );
+  }
+  return /* @__PURE__ */ jsxs5(
+    "div",
+    {
+      className: "space-y-2.5 p-3 bg-muted/30 rounded-lg border",
+      "data-add-everyone-in-org": true,
+      children: [
+        /* @__PURE__ */ jsxs5("div", { children: [
+          /* @__PURE__ */ jsxs5("h3", { className: "type-title mb-1", children: [
+            "Add everyone in ",
+            orgId ? orgName : "an organization"
+          ] }),
+          /* @__PURE__ */ jsx6("p", { className: "type-secondary text-muted-foreground", children: "Each person below is given access by name. People who join later are not added." })
+        ] }),
+        /* @__PURE__ */ jsxs5("div", { className: "space-y-1.5", children: [
+          /* @__PURE__ */ jsx6(Label, { htmlFor: "add-everyone-org", className: "text-xs", children: "Organization" }),
+          /* @__PURE__ */ jsxs5(Select2, { value: orgId, onValueChange: setOrgId, disabled: running, children: [
+            /* @__PURE__ */ jsx6(SelectTrigger2, { id: "add-everyone-org", children: /* @__PURE__ */ jsx6(SelectValue2, { placeholder: "Choose one of your organizations" }) }),
+            /* @__PURE__ */ jsx6(SelectContent2, { children: orgs.map((org) => /* @__PURE__ */ jsx6(SelectItem2, { value: org.id, children: /* @__PURE__ */ jsxs5("div", { className: "flex items-center gap-2", children: [
+              /* @__PURE__ */ jsx6(Building22, { className: "w-3 h-3" }),
+              /* @__PURE__ */ jsx6("span", { children: org.name }),
+              detail.get(org.id) && /* @__PURE__ */ jsx6("span", { className: "type-meta text-muted-foreground", children: detail.get(org.id) })
+            ] }) }, org.id)) })
+          ] })
+        ] }),
+        orgId && teams.length > 0 ? /* @__PURE__ */ jsxs5("div", { className: "space-y-1.5", children: [
+          /* @__PURE__ */ jsx6(Label, { htmlFor: "add-everyone-group", className: "text-xs", children: "Who" }),
+          /* @__PURE__ */ jsxs5(Select2, { value: group, onValueChange: setGroup, disabled: running, children: [
+            /* @__PURE__ */ jsx6(SelectTrigger2, { id: "add-everyone-group", children: /* @__PURE__ */ jsx6(SelectValue2, {}) }),
+            /* @__PURE__ */ jsxs5(SelectContent2, { children: [
+              /* @__PURE__ */ jsxs5(SelectItem2, { value: EVERYONE, children: [
+                "Everyone in ",
+                orgLabel
+              ] }),
+              teams.map((t) => /* @__PURE__ */ jsxs5(SelectItem2, { value: t.id, children: [
+                t.name,
+                /* @__PURE__ */ jsxs5("span", { className: "type-meta text-muted-foreground", children: [
+                  " \xB7 ",
+                  t.memberCount
+                ] })
+              ] }, t.id))
+            ] })
+          ] })
+        ] }) : null,
+        orgId ? /* @__PURE__ */ jsxs5("div", { className: "space-y-1.5", children: [
+          /* @__PURE__ */ jsx6(Label, { htmlFor: "add-everyone-level", className: "text-xs", children: "They get" }),
+          /* @__PURE__ */ jsxs5(
+            Select2,
+            {
+              value: level,
+              onValueChange: (v) => setOwnLevel(v),
+              disabled: running,
+              children: [
+                /* @__PURE__ */ jsx6(SelectTrigger2, { id: "add-everyone-level", "data-add-everyone-level": level, children: /* @__PURE__ */ jsx6(SelectValue2, {}) }),
+                /* @__PURE__ */ jsx6(SelectContent2, { children: PERMISSION_LEVELS.map((l) => /* @__PURE__ */ jsx6(SelectItem2, { value: l, disabled: (whyNotLevel?.(l) ?? null) !== null, title: whyNotLevel?.(l) ?? void 0, children: PERMISSION_LEVEL_SHORT_LABELS2[l] }, l)) })
+              ]
+            }
+          )
+        ] }) : null,
+        orgId && teamsError ? /* @__PURE__ */ jsxs5("p", { className: "type-secondary text-destructive", children: [
+          "The teams in ",
+          orgLabel,
+          " could not be listed: ",
+          teamsError,
+          /* @__PURE__ */ jsx6(ErrorAlchemyMenu, { error: teamsError })
+        ] }) : null,
+        orgId && loadError ? /* @__PURE__ */ jsxs5("p", { className: "type-secondary text-destructive", children: [
+          "The people in ",
+          orgName,
+          " could not be listed: ",
+          loadError,
+          /* @__PURE__ */ jsx6(ErrorAlchemyMenu, { error: loadError })
+        ] }) : null,
+        orgId && !loadError && members === null ? /* @__PURE__ */ jsxs5("div", { className: "flex items-center gap-2 type-secondary text-muted-foreground", children: [
+          /* @__PURE__ */ jsx6(Loader23, { className: "w-3 h-3 animate-spin" }),
+          " Listing the people in",
+          " ",
+          orgName,
+          "\u2026"
+        ] }) : null,
+        members && members.length === 0 ? /* @__PURE__ */ jsxs5("p", { className: "type-secondary text-muted-foreground", children: [
+          "Nobody else is in ",
+          orgName,
+          "."
+        ] }) : null,
+        members && members.length > 0 ? /* @__PURE__ */ jsx6("ul", { className: "space-y-1 max-h-56 overflow-y-auto", "aria-label": `People in ${orgName}`, children: members.map((m) => {
+          const has = already.has(m.userId);
+          const outcome = outcomes[m.userId];
+          return /* @__PURE__ */ jsxs5(
+            "li",
+            {
+              className: "flex items-center gap-2 type-body",
+              "data-member": m.email,
+              children: [
+                /* @__PURE__ */ jsx6(
+                  Checkbox,
+                  {
+                    size: "sm",
+                    id: `add-everyone-${m.userId}`,
+                    checked: ticked.has(m.userId),
+                    disabled: running || has || !!outcome?.ok,
+                    onCheckedChange: (v) => toggle(m.userId, v === true)
+                  }
+                ),
+                /* @__PURE__ */ jsxs5(
+                  "label",
+                  {
+                    htmlFor: `add-everyone-${m.userId}`,
+                    className: "flex-1 min-w-0",
+                    children: [
+                      /* @__PURE__ */ jsx6("span", { className: "block truncate", children: m.name }),
+                      m.email && m.email !== m.name ? /* @__PURE__ */ jsx6("span", { className: "block truncate type-secondary text-muted-foreground", children: m.email }) : null
+                    ]
+                  }
+                ),
+                has && !outcome ? /* @__PURE__ */ jsx6("span", { className: "type-secondary text-muted-foreground", children: "Already has access" }) : null,
+                outcome ? /* @__PURE__ */ jsxs5(
+                  "span",
+                  {
+                    className: `flex items-center gap-1 text-xs ${outcome.ok ? "text-green-700 dark:text-green-400" : "text-destructive"}`,
+                    children: [
+                      outcome.ok ? /* @__PURE__ */ jsx6(CheckCircle, { className: "w-3 h-3" }) : /* @__PURE__ */ jsx6(XCircle, { className: "w-3 h-3" }),
+                      outcome.say
+                    ]
+                  }
+                ) : null
+              ]
+            },
+            m.userId
+          );
+        }) }) : null,
+        members && members.length > 0 && chosen.length === 0 && !running ? /* @__PURE__ */ jsx6("p", { className: "type-secondary text-muted-foreground", children: Object.values(outcomes).some((o) => o.ok) || members.every((m) => already.has(m.userId)) ? `Everyone listed in ${orgName} has access now.` : "Tick the people to add." }) : null,
+        members && members.length > 0 && (chosen.length > 0 || running) ? /* @__PURE__ */ jsx6(
+          Button3,
+          {
+            type: "button",
+            onClick: run,
+            disabled: running || chosen.length === 0,
+            className: "w-full h-9",
+            children: running ? /* @__PURE__ */ jsxs5(Fragment2, { children: [
+              /* @__PURE__ */ jsx6(Loader23, { className: "w-4 h-4 mr-2 animate-spin" }),
+              "Sharing\u2026"
+            ] }) : /* @__PURE__ */ jsxs5(Fragment2, { children: [
+              /* @__PURE__ */ jsx6(Users3, { className: "w-4 h-4 mr-2" }),
+              "Share with ",
+              chosen.length,
+              " ",
+              chosen.length === 1 ? "person" : "people"
+            ] })
+          }
+        ) : null
+      ]
+    }
+  );
+}
+
+// src/react/sheet/ShareWithUserTab.tsx
+import { Fragment as Fragment3, jsx as jsx7, jsxs as jsxs6 } from "react/jsx-runtime";
+var SOURCE_ICONS = {
+  conversation: MessageSquare2,
+  organization: Building23,
+  invitation: Mail2
+};
+var SOURCE_LABELS = {
+  conversation: "Contact",
+  organization: "Organization",
+  invitation: "Invited"
+};
+var EMAIL_SHAPE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+async function lookupConnectionByEmail(typed) {
+  const { data } = await createClient2().rpc("lookup_user_by_email", { lookup_email: typed });
+  const row = data?.[0];
+  return row ? {
+    user_id: row.user_id,
+    email: row.user_email,
+    display_name: row.user_email.split("@", 1)[0] ?? null,
+    avatar_url: null,
+    source: "invitation",
+    sourceDetails: "Found by email"
+  } : null;
+}
+function candidateOf(connection, foundByEmail) {
+  return {
+    id: connection.user_id,
+    email: connection.email,
+    displayName: connection.display_name,
+    avatarUrl: connection.avatar_url,
+    phone: null,
+    adminLevel: null,
+    organizations: connection.source === "organization" && connection.sourceDetails ? [connection.sourceDetails] : [],
+    source: foundByEmail ? "Found by email" : SOURCE_LABELS[connection.source],
+    createdAt: null,
+    lastSignInAt: null
+  };
+}
+function ShareWithUserTab({
+  levelWording = "roles",
+  grantable,
+  onShare,
+  onSuccess,
+  resourceType,
+  resourceId,
+  organizationId,
+  copy,
+  grantEveryonePerson,
+  alreadySharedUserIds
+}) {
+  const [email, setEmail] = useState6("");
+  const [searchQuery, setSearchQuery] = useState6("");
+  const [permissionLevel, setPermissionLevel] = useState6("viewer");
+  const whyNotLevel = (level) => {
+    const why = grantable?.levels[level];
+    return typeof why === "string" ? why : null;
+  };
+  const chosenWhy = whyNotLevel(permissionLevel);
+  const [status, setStatus] = useState6({ type: "idle", message: "" });
+  const [selectedContact, setSelectedContact] = useState6(
+    null
+  );
+  const {
+    connections,
+    isLoading: connectionsLoading,
+    error: connectionsError,
+    partialFailures: connectionsPartial,
+    refresh: refreshConnections
+  } = useUserConnections(organizationId ? { organizationId } : {});
+  const filteredConnections = useMemo2(() => {
+    if (!searchQuery.trim()) return connections;
+    const q = searchQuery.toLowerCase();
+    return connections.filter(
+      (c) => c.display_name && c.display_name.toLowerCase().includes(q) || c.email && c.email.toLowerCase().includes(q)
+    );
+  }, [connections, searchQuery]);
+  const [looked, setLooked] = useState6(null);
+  const resolveTypedEmail = async (query) => {
+    const typed = query.trim().toLowerCase();
+    if (!EMAIL_SHAPE.test(typed)) return [];
+    const found = connections.find((c) => c.email?.toLowerCase() === typed) ?? await lookupConnectionByEmail(typed);
+    return found ? [candidateOf(found, true)] : [];
+  };
+  useEffect6(() => {
+    const typed = email.trim().toLowerCase();
+    if (!EMAIL_SHAPE.test(typed)) {
+      setLooked(null);
+      return;
+    }
+    if (connections.some((c) => c.email?.toLowerCase() === typed)) {
+      setLooked(null);
+      return;
+    }
+    let stale = false;
+    const handle = setTimeout(async () => {
+      const found = await lookupConnectionByEmail(typed);
+      if (stale) return;
+      setLooked(found);
+    }, 300);
+    return () => {
+      stale = true;
+      clearTimeout(handle);
+    };
+  }, [email, connections]);
+  const searchableConnections = useMemo2(
+    () => looked ? [...connections, looked] : connections,
+    [connections, looked]
+  );
+  const userSearchCandidates = searchableConnections.map(
+    (connection) => candidateOf(connection, connection === looked)
+  );
+  const resetStatus = () => {
+    setStatus({ type: "idle", message: "" });
+  };
+  const selectContact = (contact) => {
+    setSelectedContact(contact);
+    setEmail(contact.email || "");
+    setSearchQuery("");
+    if (status.type === "error") resetStatus();
+  };
+  const clearContact = () => {
+    setSelectedContact(null);
+    setEmail("");
+  };
+  const handleShare = async () => {
+    const trimmedEmail = email.trim();
+    if (!trimmedEmail || !trimmedEmail.includes("@")) {
+      setStatus({
+        type: "error",
+        message: "Please enter a valid email address"
+      });
+      return;
+    }
+    setStatus({ type: "loading", message: "Looking up user..." });
+    try {
+      let targetUserId = null;
+      if (selectedContact && selectedContact.email === trimmedEmail) {
+        targetUserId = selectedContact.user_id;
+      } else {
+        const client = createClient2();
+        const { data: lookupData, error: lookupError } = await client.rpc(
+          "lookup_user_by_email",
+          { lookup_email: trimmedEmail }
+        );
+        if (lookupError) {
+          setStatus({
+            type: "error",
+            message: `Lookup failed: ${lookupError.message}`
+          });
+          return;
+        }
+        const userData = Array.isArray(lookupData) ? lookupData[0] : lookupData;
+        if ((!userData || !userData.user_id) && !grantEveryonePerson) {
+          setStatus({
+            type: "error",
+            message: `No user found with email "${trimmedEmail}". They may need to create an account first.`
+          });
+          return;
+        }
+        targetUserId = userData?.user_id ?? null;
+      }
+      setStatus({ type: "loading", message: "Sharing with user..." });
+      const result = grantEveryonePerson ? await grantEveryonePerson(
+        { userId: targetUserId ?? "", email: trimmedEmail, name: trimmedEmail.split("@", 1)[0] ?? trimmedEmail },
+        permissionLevel
+      ) : await onShare(targetUserId, permissionLevel);
+      const errorMsg = result?.error;
+      if (!errorMsg) {
+        setStatus({
+          type: "success",
+          // THE CONFIRMATION LIVES HERE, IN THE DIALOG THAT DID IT (law 4: a sentence with an
+          // inline home is not also toasted). It used to ride a legacy Radix toast, and on a
+          // table page the organization gate's pick closed this dialog before anyone read it
+          // (VERIFIER-18 H4) — the dialog now stays open, saying it worked.
+          message: `Shared with ${trimmedEmail}. They can open it now.`
+        });
+        setEmail("");
+        setSelectedContact(null);
+        setPermissionLevel("viewer");
+        setTimeout(() => {
+          onSuccess();
+        }, 1500);
+      } else {
+        setStatus({ type: "error", message: errorMsg });
+      }
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "Something went wrong";
+      setStatus({ type: "error", message: `Unexpected error: ${message}` });
+    }
+  };
+  const isLoading = status.type === "loading";
+  return /* @__PURE__ */ jsxs6("div", { className: "space-y-2.5 p-3 bg-muted/30 rounded-lg border", children: [
+    /* @__PURE__ */ jsxs6("div", { children: [
+      /* @__PURE__ */ jsx7("h3", { className: "text-sm font-medium mb-1", children: "Share with User" }),
+      /* @__PURE__ */ jsx7("p", { className: "text-xs text-muted-foreground", children: "Select a contact or enter an email address" })
+    ] }),
+    status.type !== "idle" && /* @__PURE__ */ jsxs6(
+      "div",
+      {
+        className: `p-2 rounded-md flex items-start gap-2 text-xs ${status.type === "loading" ? "bg-blue-500/10 text-blue-700 dark:text-blue-300 border border-blue-500/20" : status.type === "success" ? "bg-green-500/10 text-green-700 dark:text-green-300 border border-green-500/20" : "bg-red-500/10 text-red-700 dark:text-red-300 border border-red-500/20"}`,
+        children: [
+          status.type === "loading" && /* @__PURE__ */ jsx7(Loader24, { className: "w-3.5 h-3.5 animate-spin flex-shrink-0 mt-0.5" }),
+          status.type === "success" && /* @__PURE__ */ jsx7(CheckCircle2, { className: "w-3.5 h-3.5 flex-shrink-0 mt-0.5" }),
+          status.type === "error" && /* @__PURE__ */ jsx7(XCircle2, { className: "w-3.5 h-3.5 flex-shrink-0 mt-0.5" }),
+          /* @__PURE__ */ jsx7("span", { className: "flex-1", children: status.message }),
+          status.type === "error" && /* @__PURE__ */ jsxs6(Fragment3, { children: [
+            /* @__PURE__ */ jsx7(
+              CopyButtons,
+              {
+                size: "xs",
+                label: "Share failure",
+                human: () => [
+                  "Sharing with a user failed.",
+                  `Error shown: ${status.message}`,
+                  `Email entered: ${email.trim() || "(empty)"}`,
+                  `Contact selected: ${selectedContact ? `${selectedContact.display_name ?? selectedContact.email} (${selectedContact.source})` : "none"}`,
+                  `Permission level chosen: ${permissionLevel}`,
+                  `Resource: ${resourceType}:${resourceId}`
+                ].join("\n"),
+                json: () => ({
+                  error: status.message,
+                  email: email.trim(),
+                  selected_contact: selectedContact,
+                  permission_level: permissionLevel,
+                  resource_type: resourceType,
+                  resource_id: resourceId
+                }),
+                agent: () => ({
+                  kind: "share-with-user-failure",
+                  location: sharingLocation3(copy?.surface ?? "Share with user"),
+                  description: "A share-with-user attempt that failed, with the error sentence on screen and the live form state that produced it.",
+                  data: {
+                    rendered_error: status.message,
+                    form_state: {
+                      email_entered: email.trim(),
+                      selected_contact: selectedContact,
+                      permission_level: permissionLevel,
+                      contacts_available: connections.length
+                    },
+                    resource: {
+                      type: resourceType,
+                      id: resourceId,
+                      name: copy?.resourceName ?? null
+                    },
+                    kpis: copy?.kpis ?? null
+                  },
+                  attributes: {
+                    ...copy?.kpis ?? {},
+                    resource_type: resourceType,
+                    resource_id: resourceId,
+                    state: "error",
+                    permission_level: permissionLevel
+                  }
+                })
+              }
+            ),
+            /* @__PURE__ */ jsx7(
+              "button",
+              {
+                onClick: resetStatus,
+                className: "text-xs underline hover:no-underline flex-shrink-0",
+                children: "Dismiss"
+              }
+            )
+          ] })
+        ]
+      }
+    ),
+    /* @__PURE__ */ jsxs6("div", { className: "space-y-2.5", children: [
+      !selectedContact && /* @__PURE__ */ jsxs6("div", { className: "space-y-1.5", children: [
+        /* @__PURE__ */ jsxs6(Label2, { className: "text-xs flex items-center gap-1.5", children: [
+          /* @__PURE__ */ jsx7(Users4, { className: "w-3 h-3" }),
+          "Your Contacts"
+        ] }),
+        connectionsLoading ? /* @__PURE__ */ jsxs6("div", { className: "flex items-center justify-center py-4 text-xs text-muted-foreground", children: [
+          /* @__PURE__ */ jsx7(Loader24, { className: "w-3.5 h-3.5 animate-spin mr-2" }),
+          "Loading contacts..."
+        ] }) : connectionsError && connections.length === 0 ? /* @__PURE__ */ jsx7(
+          ConnectionsReadNotice,
+          {
+            error: connectionsError,
+            partialFailures: connectionsPartial,
+            hasRows: false,
+            onRetry: () => void refreshConnections()
+          }
+        ) : connections.length === 0 ? /* @__PURE__ */ jsx7("p", { className: "text-xs text-muted-foreground py-2 text-center", children: "No contacts found. Enter an email below." }) : /* @__PURE__ */ jsxs6(Fragment3, { children: [
+          /* @__PURE__ */ jsx7(
+            ConnectionsReadNotice,
+            {
+              error: connectionsError,
+              partialFailures: connectionsPartial,
+              hasRows: true,
+              onRetry: () => void refreshConnections()
+            }
+          ),
+          connections.length > 5 && /* @__PURE__ */ jsx7("div", { children: /* @__PURE__ */ jsx7(
+            UserSearchField,
+            {
+              placeholder: "Search contacts...",
+              value: searchQuery,
+              onValueChange: setSearchQuery,
+              onUserSelect: (user) => {
+                const contact = searchableConnections.find(
+                  (candidate) => candidate.user_id === user.id
+                );
+                if (contact) selectContact(contact);
+              },
+              candidates: userSearchCandidates,
+              title: "Search your contacts",
+              disabled: isLoading,
+              className: "w-full",
+              inputClassName: "h-8 text-xs"
+            }
+          ) }),
+          /* @__PURE__ */ jsx7(ScrollArea, { className: "max-h-36 rounded-md border bg-background", children: /* @__PURE__ */ jsx7("div", { className: "p-1", children: filteredConnections.length === 0 ? /* @__PURE__ */ jsx7("p", { className: "text-xs text-muted-foreground py-2 text-center", children: "No matching contacts" }) : filteredConnections.map((contact) => {
+            const SourceIcon = SOURCE_ICONS[contact.source];
+            return (
+              // ui-exception: moved verbatim from the web share sheet; restyling onto design-system Button is its own UI change
+              /* @__PURE__ */ jsxs6(
+                "button",
+                {
+                  onClick: () => selectContact(contact),
+                  disabled: isLoading,
+                  className: "w-full flex items-center gap-2 p-1.5 rounded-md hover:bg-accent/50 transition-colors text-left disabled:opacity-50",
+                  children: [
+                    /* @__PURE__ */ jsxs6(Avatar, { className: "w-6 h-6 flex-shrink-0", children: [
+                      /* @__PURE__ */ jsx7(
+                        AvatarImage,
+                        {
+                          src: contact.avatar_url || void 0
+                        }
+                      ),
+                      /* @__PURE__ */ jsx7(AvatarFallback, { className: "text-[10px] bg-primary/10 text-primary-ink", children: getInitials(contact.display_name ?? contact.email) })
+                    ] }),
+                    /* @__PURE__ */ jsxs6("div", { className: "flex-1 min-w-0", children: [
+                      /* @__PURE__ */ jsx7("p", { className: "text-xs font-medium truncate", children: contact.display_name || contact.email || "Unknown" }),
+                      contact.display_name && contact.email && /* @__PURE__ */ jsx7("p", { className: "text-[10px] text-muted-foreground truncate", children: contact.email })
+                    ] }),
+                    /* @__PURE__ */ jsxs6("span", { className: "flex items-center gap-1 text-[10px] text-muted-foreground flex-shrink-0", children: [
+                      /* @__PURE__ */ jsx7(SourceIcon, { className: "w-3 h-3" }),
+                      SOURCE_LABELS[contact.source]
+                    ] })
+                  ]
+                },
+                contact.user_id
+              )
+            );
+          }) }) })
+        ] })
+      ] }),
+      selectedContact && /* @__PURE__ */ jsxs6("div", { className: "flex items-center gap-2 p-2 rounded-md bg-primary/5 border border-primary/20", children: [
+        /* @__PURE__ */ jsxs6(Avatar, { className: "w-6 h-6 flex-shrink-0", children: [
+          /* @__PURE__ */ jsx7(AvatarImage, { src: selectedContact.avatar_url || void 0 }),
+          /* @__PURE__ */ jsx7(AvatarFallback, { className: "text-[10px] bg-primary/10 text-primary-ink", children: getInitials(
+            selectedContact.display_name ?? selectedContact.email
+          ) })
+        ] }),
+        /* @__PURE__ */ jsxs6("div", { className: "flex-1 min-w-0", children: [
+          /* @__PURE__ */ jsx7("p", { className: "text-xs font-medium truncate", children: selectedContact.display_name || selectedContact.email }),
+          selectedContact.display_name && selectedContact.email && /* @__PURE__ */ jsx7("p", { className: "text-[10px] text-muted-foreground truncate", children: selectedContact.email })
+        ] }),
+        /* @__PURE__ */ jsx7(
+          "button",
+          {
+            onClick: clearContact,
+            disabled: isLoading,
+            className: "text-muted-foreground hover:text-foreground transition-colors disabled:opacity-50",
+            children: /* @__PURE__ */ jsx7(XCircle2, { className: "w-4 h-4" })
+          }
+        )
+      ] }),
+      !selectedContact && /* @__PURE__ */ jsxs6("div", { className: "space-y-1.5", children: [
+        /* @__PURE__ */ jsx7(Label2, { htmlFor: "user-email", className: "text-xs", children: "Or enter email manually" }),
+        /* @__PURE__ */ jsx7(
+          UserSearchField,
+          {
+            id: "user-email",
+            placeholder: "user@example.com",
+            value: email,
+            onValueChange: (value) => {
+              setEmail(value);
+              if (status.type === "error") resetStatus();
+            },
+            onUserSelect: (user) => {
+              const contact = searchableConnections.find(
+                (candidate) => candidate.user_id === user.id
+              );
+              if (contact) selectContact(contact);
+            },
+            candidates: userSearchCandidates,
+            resolveCandidates: resolveTypedEmail,
+            title: "Choose a user to share with",
+            inputType: "email",
+            disabled: isLoading,
+            inputClassName: "h-9"
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxs6("div", { className: "space-y-1.5", children: [
+        /* @__PURE__ */ jsx7(Label2, { htmlFor: "user-permission", className: "text-xs", children: "Permission Level" }),
+        /* @__PURE__ */ jsxs6(
+          Select3,
+          {
+            value: permissionLevel,
+            onValueChange: (value) => setPermissionLevel(value),
+            disabled: isLoading,
+            children: [
+              /* @__PURE__ */ jsx7(SelectTrigger3, { id: "user-permission", children: /* @__PURE__ */ jsx7(SelectValue3, {}) }),
+              /* @__PURE__ */ jsx7(SelectContent3, { children: levelWording === "notion" ? [...PERMISSION_LEVELS2].reverse().map((level) => /* @__PURE__ */ jsx7(SelectItem3, { value: level, disabled: whyNotLevel(level) !== null, title: whyNotLevel(level) ?? PERMISSION_LEVEL_HINTS2[level], children: PERMISSION_LEVEL_LABELS[level] }, level)) : /* @__PURE__ */ jsxs6(Fragment3, { children: [
+                /* @__PURE__ */ jsx7(SelectItem3, { value: "viewer", disabled: whyNotLevel("viewer") !== null, title: whyNotLevel("viewer") ?? PERMISSION_LEVEL_HINTS2.viewer, children: PERMISSION_LEVEL_SHORT_LABELS3.viewer }),
+                /* @__PURE__ */ jsx7(SelectItem3, { value: "commenter", disabled: whyNotLevel("commenter") !== null, title: whyNotLevel("commenter") ?? PERMISSION_LEVEL_HINTS2.commenter, children: PERMISSION_LEVEL_SHORT_LABELS3.commenter }),
+                /* @__PURE__ */ jsx7(SelectItem3, { value: "editor", disabled: whyNotLevel("editor") !== null, title: whyNotLevel("editor") ?? PERMISSION_LEVEL_HINTS2.editor, children: PERMISSION_LEVEL_SHORT_LABELS3.editor }),
+                /* @__PURE__ */ jsx7(SelectItem3, { value: "admin", disabled: whyNotLevel("admin") !== null, title: whyNotLevel("admin") ?? PERMISSION_LEVEL_HINTS2.admin, children: PERMISSION_LEVEL_SHORT_LABELS3.admin })
+              ] }) })
+            ]
+          }
+        ),
+        /* @__PURE__ */ jsx7(PermissionLevelDescription, { level: permissionLevel }),
+        chosenWhy ? /* @__PURE__ */ jsx7("p", { className: "text-xs text-muted-foreground", children: chosenWhy }) : null,
+        !chosenWhy && whyNotLevel("admin") ? /* @__PURE__ */ jsx7("p", { className: "text-xs text-muted-foreground", "data-share-level-reason": "", children: whyNotLevel("admin") }) : null,
+        grantable?.outside ? /* @__PURE__ */ jsx7("p", { className: "text-xs text-muted-foreground", "data-share-outside-reason": "", children: grantable.outside }) : null
+      ] }),
+      /* @__PURE__ */ jsx7(
+        Button4,
+        {
+          onClick: handleShare,
+          disabled: isLoading || !email.trim() || chosenWhy !== null,
+          className: "w-full h-9",
+          children: isLoading ? /* @__PURE__ */ jsxs6(Fragment3, { children: [
+            /* @__PURE__ */ jsx7(Loader24, { className: "w-4 h-4 mr-2 animate-spin" }),
+            status.message || "Processing..."
+          ] }) : /* @__PURE__ */ jsxs6(Fragment3, { children: [
+            /* @__PURE__ */ jsx7(UserPlus, { className: "w-4 h-4 mr-2" }),
+            "Share with User"
+          ] })
+        }
+      ),
+      /* @__PURE__ */ jsx7(
+        AddEveryoneInOrg,
+        {
+          level: permissionLevel,
+          whyNotLevel,
+          grantPerson: grantEveryonePerson ?? ((person, level) => onShare(person.userId, level)),
+          alreadySharedUserIds: alreadySharedUserIds ?? [],
+          onDone: onSuccess,
+          ...organizationId ? { defaultOrgId: organizationId } : {}
+        }
+      )
+    ] })
+  ] });
+}
+
+// src/react/sheet/OutsideSharePanel.tsx
+import { useCallback as useCallback3, useEffect as useEffect7, useState as useState7 } from "react";
+import {
+  AlertTriangle as AlertTriangle2,
+  Check,
+  Globe2 as Globe22,
+  Link2,
+  Loader2 as Loader25,
+  MailWarning,
+  RotateCw,
+  Send,
+  Trash2
+} from "lucide-react";
+import { Button as Button5 } from "@ai-matrx/design-system";
+import { Input as Input2 } from "@ai-matrx/design-system/controls";
+import { Label as Label3 } from "@ai-matrx/design-system";
+import { Select as Select4, SelectContent as SelectContent4, SelectItem as SelectItem4, SelectValue as SelectValue4 } from "@ai-matrx/design-system";
+import { SelectTrigger as SelectTrigger4 } from "@ai-matrx/design-system/controls";
+import { copyText as copyText2 } from "@ai-matrx/kit/clipboard";
+import {
+  absoluteInviteUrl,
+  shareWithOutsidePerson,
+  readOutsideShare,
+  resendOutside,
+  revokeOutside
+} from "@ai-matrx/sharing/core";
+import { jsx as jsx8, jsxs as jsxs7 } from "react/jsx-runtime";
+var LANE_CLOSED_SAY = "This organization's administrator has turned off sharing with people outside it.";
+function OutsideSharePanel({
+  organizationId,
+  tableId,
+  tableName,
+  onPendingChange,
+  onGranted
+}) {
+  const { toast } = useToast();
+  const [state2, setState] = useState7(null);
+  const [loadError, setLoadError] = useState7(null);
+  const [busy, setBusy] = useState7(null);
+  const [email, setEmail] = useState7("");
+  const [level, setLevel] = useState7("viewer");
+  const [copied, setCopied] = useState7(null);
+  const refresh = useCallback3(async () => {
+    setLoadError(null);
+    try {
+      const answer = await readOutsideShare(organizationId, tableId);
+      setState(answer);
+      setLevel(
+        (current) => answer.levels.some((l) => l.level === current) ? current : answer.levels[0]?.level ?? "viewer"
+      );
+    } catch (error) {
+      setState(null);
+      setLoadError(error instanceof Error ? error.message : String(error));
+    }
+  }, [organizationId, tableId]);
+  useEffect7(() => {
+    void refresh();
+  }, [refresh]);
+  useEffect7(() => {
+    onPendingChange?.((state2?.invitations ?? []).filter((row) => !row.joined).length);
+  }, [state2, onPendingChange]);
+  const copyLink = useCallback3(
+    async (invitationId, acceptPath, who) => {
+      const url = absoluteInviteUrl(acceptPath);
+      const ok = await copyText2(url).then((r) => r !== false, () => false);
+      if (!ok) return;
+      setCopied(invitationId);
+      toast({ title: `Link copied. Send it to ${who} however you like.` });
+      window.setTimeout(
+        () => setCopied((c) => c === invitationId ? null : c),
+        2e3
+      );
+    },
+    [toast]
+  );
+  const run = async (key, work) => {
+    setBusy(key);
+    try {
+      const answer = await work();
+      toast({ title: answer.say, description: answer.delivery?.say });
+      await refresh();
+    } catch (error) {
+      toast({
+        title: "That did not happen",
+        description: error instanceof Error ? error.message : String(error),
+        variant: "destructive"
+      });
+    } finally {
+      setBusy(null);
+    }
+  };
+  if (loadError) {
+    return /* @__PURE__ */ jsxs7("div", { className: "rounded-lg border border-destructive/20 bg-destructive/10 p-3", children: [
+      /* @__PURE__ */ jsxs7("div", { className: "flex items-start gap-2", children: [
+        /* @__PURE__ */ jsx8(AlertTriangle2, { className: "mt-0.5 h-4 w-4 flex-shrink-0 text-destructive" }),
+        /* @__PURE__ */ jsxs7("div", { className: "min-w-0", children: [
+          /* @__PURE__ */ jsxs7("p", { className: "text-sm font-medium text-destructive", children: [
+            "We could not check who outside this organization can see ",
+            tableName,
+            /* @__PURE__ */ jsx8(ErrorAlchemyMenu, {})
+          ] }),
+          /* @__PURE__ */ jsx8("p", { className: "mt-0.5 text-xs text-destructive/80", children: "Nobody was added or removed. This does not mean sharing outside is switched off \u2014 we simply could not look." }),
+          /* @__PURE__ */ jsx8("p", { className: "mt-1 break-words text-xs text-muted-foreground", children: loadError })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsx8(Button5, { size: "sm", variant: "outline", className: "mt-2", onClick: () => void refresh(), children: "Try again" })
+    ] });
+  }
+  if (!state2) {
+    return /* @__PURE__ */ jsxs7("div", { className: "flex items-center gap-2 text-sm text-muted-foreground", "aria-busy": "true", children: [
+      /* @__PURE__ */ jsx8(Loader25, { className: "h-4 w-4 animate-spin" }),
+      /* @__PURE__ */ jsxs7("span", { children: [
+        "Checking who outside this organization can see ",
+        tableName,
+        "\u2026"
+      ] })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs7("div", { className: "space-y-3 rounded-lg border p-3", children: [
+    /* @__PURE__ */ jsxs7("div", { className: "flex items-start gap-2", children: [
+      /* @__PURE__ */ jsx8(Globe22, { className: "mt-0.5 h-4 w-4 flex-shrink-0 text-muted-foreground" }),
+      /* @__PURE__ */ jsxs7("div", { className: "min-w-0", children: [
+        /* @__PURE__ */ jsx8("h3", { className: "text-sm font-medium", children: "People outside this organization" }),
+        /* @__PURE__ */ jsx8("p", { className: "mt-0.5 text-xs text-muted-foreground", children: state2.lane_open ? state2.say : LANE_CLOSED_SAY })
+      ] })
+    ] }),
+    state2.lane_open && state2.may_invite && state2.email_delivery?.answer !== "yes" ? /* @__PURE__ */ jsxs7("div", { className: "flex items-start gap-2 rounded-md border border-amber-500/30 bg-amber-500/10 p-2", children: [
+      /* @__PURE__ */ jsx8(MailWarning, { className: "mt-0.5 h-4 w-4 flex-shrink-0 text-amber-600 dark:text-amber-400" }),
+      /* @__PURE__ */ jsx8("p", { className: "text-xs text-muted-foreground", children: state2.email_say })
+    ] }) : null,
+    state2.lane_open && state2.may_invite ? /* @__PURE__ */ jsxs7("div", { className: "flex flex-col gap-2 sm:flex-row sm:items-end", children: [
+      /* @__PURE__ */ jsxs7("div", { className: "min-w-0 flex-1", children: [
+        /* @__PURE__ */ jsx8(Label3, { htmlFor: "outside-email", className: "text-xs", children: "Their email address" }),
+        /* @__PURE__ */ jsx8(
+          Input2,
+          {
+            id: "outside-email",
+            type: "email",
+            placeholder: "name@theircompany.com",
+            value: email,
+            onChange: (e) => setEmail(e.target.value)
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxs7("div", { className: "sm:w-44", children: [
+        /* @__PURE__ */ jsx8(Label3, { htmlFor: "outside-level", className: "text-xs", children: "They can" }),
+        /* @__PURE__ */ jsxs7(Select4, { value: level, onValueChange: setLevel, children: [
+          /* @__PURE__ */ jsx8(SelectTrigger4, { id: "outside-level", children: /* @__PURE__ */ jsx8(SelectValue4, {}) }),
+          /* @__PURE__ */ jsx8(SelectContent4, { children: state2.levels.map((l) => /* @__PURE__ */ jsx8(SelectItem4, { value: l.level, children: l.means }, l.level)) })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs7(
+        Button5,
+        {
+          size: "sm",
+          disabled: !email.trim() || busy === "invite",
+          onClick: () => void run("invite", async () => {
+            const answer = await shareWithOutsidePerson(organizationId, tableId, email.trim(), level);
+            setEmail("");
+            if (answer.granted) onGranted?.();
+            return answer;
+          }),
+          children: [
+            busy === "invite" ? /* @__PURE__ */ jsx8(Loader25, { className: "mr-1.5 h-4 w-4 animate-spin" }) : /* @__PURE__ */ jsx8(Send, { className: "mr-1.5 h-4 w-4" }),
+            "Share"
+          ]
+        }
+      )
+    ] }) : null,
+    state2.invitations.length > 0 ? /* @__PURE__ */ jsx8("ul", { className: "divide-y rounded-md border", children: state2.invitations.map((row) => /* @__PURE__ */ jsxs7("li", { className: "flex items-start gap-2 p-2", children: [
+      /* @__PURE__ */ jsxs7("div", { className: "min-w-0 flex-1", children: [
+        /* @__PURE__ */ jsxs7("div", { className: "flex flex-wrap items-baseline gap-2", children: [
+          /* @__PURE__ */ jsx8("span", { className: "truncate text-sm font-medium", children: row.email }),
+          /* @__PURE__ */ jsx8(
+            "span",
+            {
+              className: row.joined ? "rounded-full bg-primary/10 px-1.5 py-0.5 text-xs" : "rounded-full bg-muted px-1.5 py-0.5 text-xs text-muted-foreground",
+              children: row.joined ? row.level_label : "Invited, not yet joined"
+            }
+          )
+        ] }),
+        /* @__PURE__ */ jsx8("p", { className: "mt-0.5 text-xs text-muted-foreground", children: row.say })
+      ] }),
+      state2.may_invite ? /* @__PURE__ */ jsxs7("div", { className: "flex flex-shrink-0 gap-1", children: [
+        row.accept_path ? /* @__PURE__ */ jsxs7(
+          Button5,
+          {
+            size: "sm",
+            variant: "ghost",
+            title: "Copy invitation link",
+            onClick: () => void copyLink(
+              row.invitation_id,
+              row.accept_path,
+              row.email
+            ),
+            children: [
+              copied === row.invitation_id ? /* @__PURE__ */ jsx8(Check, { className: "mr-1.5 h-4 w-4" }) : /* @__PURE__ */ jsx8(Link2, { className: "mr-1.5 h-4 w-4" }),
+              /* @__PURE__ */ jsx8("span", { className: "text-xs", children: copied === row.invitation_id ? "Copied" : "Copy link" })
+            ]
+          }
+        ) : null,
+        !row.joined ? /* @__PURE__ */ jsx8(
+          Button5,
+          {
+            size: "sm",
+            variant: "ghost",
+            title: "Send a fresh link",
+            disabled: busy === `resend:${row.invitation_id}`,
+            onClick: () => void run(
+              `resend:${row.invitation_id}`,
+              () => resendOutside(organizationId, row.invitation_id)
+            ),
+            children: busy === `resend:${row.invitation_id}` ? /* @__PURE__ */ jsx8(Loader25, { className: "h-4 w-4 animate-spin" }) : /* @__PURE__ */ jsx8(RotateCw, { className: "h-4 w-4" })
+          }
+        ) : null,
+        /* @__PURE__ */ jsx8(
+          Button5,
+          {
+            size: "sm",
+            variant: "ghost",
+            title: row.joined ? "Take their access away" : "Withdraw the invitation",
+            disabled: busy === `revoke:${row.invitation_id}`,
+            onClick: () => void (async () => {
+              const ok = await confirm({
+                title: row.joined ? `Take ${row.email}'s access to ${tableName} away?` : `Withdraw ${row.email}'s invitation?`,
+                description: row.joined ? `They lose ${tableName} immediately \u2014 anything they have open refuses the next time it asks \u2014 and, because this table is the only reason they can reach this organization at all, they lose that too. You can invite them again afterwards.` : "Their link stops working. They never had access, so there is nothing to take away.",
+                confirmLabel: row.joined ? "Take it away" : "Withdraw",
+                variant: "destructive"
+              });
+              if (!ok) return;
+              await run(
+                `revoke:${row.invitation_id}`,
+                () => revokeOutside(organizationId, row.invitation_id)
+              );
+            })(),
+            children: busy === `revoke:${row.invitation_id}` ? /* @__PURE__ */ jsx8(Loader25, { className: "h-4 w-4 animate-spin" }) : /* @__PURE__ */ jsx8(Trash2, { className: "h-4 w-4" })
+          }
+        )
+      ] }) : null
+    ] }, row.invitation_id)) }) : null
+  ] });
+}
+
+// src/react/sheet/ShareModal.tsx
+import { shareWithOutsidePerson as shareWithOutsidePerson2 } from "@ai-matrx/sharing/core";
+
+// src/react/sheet/WhoCouldSeeOn.tsx
+import { useState as useState8 } from "react";
+import { History, Loader2 as Loader26 } from "lucide-react";
+import { Button as Button6 } from "@ai-matrx/design-system";
+import { DateTimeField } from "@ai-matrx/design-system/controls";
+import { createClient as createClient3, PERMISSION_LEVEL_SHORT_LABELS as PERMISSION_LEVEL_SHORT_LABELS4 } from "@ai-matrx/sharing/core";
+import { jsx as jsx9, jsxs as jsxs8 } from "react/jsx-runtime";
+function custom() {
+  return createClient3().schema("custom");
+}
+function WhoCouldSeeOn({ recordId }) {
+  const [at, setAt] = useState8("");
+  const [busy, setBusy] = useState8(false);
+  const [people, setPeople] = useState8(null);
+  const [error, setError] = useState8(null);
+  async function ask() {
+    setBusy(true);
+    setError(null);
+    const { data, error: failed } = await custom().rpc("who_could_see_on", { p_record_id: recordId, p_at: new Date(at).toISOString() });
+    setBusy(false);
+    const answer = data;
+    if (failed || !answer?.success) {
+      setPeople(null);
+      setError(failed?.message ?? answer?.error ?? "That moment could not be replayed.");
+      return;
+    }
+    setPeople(answer.people ?? []);
+  }
+  return /* @__PURE__ */ jsxs8("section", { className: "mt-3 flex flex-col gap-1.5 border-t border-border pt-3", "data-who-could-see-on": recordId, children: [
+    /* @__PURE__ */ jsxs8("span", { className: "flex items-center gap-1 text-xs font-medium", children: [
+      /* @__PURE__ */ jsx9(History, { className: "h-3.5 w-3.5" }),
+      "Who could see this on\u2026"
+    ] }),
+    /* @__PURE__ */ jsxs8("div", { className: "flex items-center gap-1", children: [
+      /* @__PURE__ */ jsx9(
+        DateTimeField,
+        {
+          "aria-label": "Moment to ask about",
+          value: at,
+          onValueChange: (v) => setAt(v ?? ""),
+          className: "min-w-0 flex-1"
+        }
+      ),
+      /* @__PURE__ */ jsxs8(Button6, { size: "sm", variant: "outline", className: "h-7 px-2 text-xs", disabled: busy || at === "", onClick: () => void ask(), "data-who-could-see-ask": "", children: [
+        busy ? /* @__PURE__ */ jsx9(Loader26, { className: "mr-1 h-3.5 w-3.5 animate-spin" }) : null,
+        "Ask"
+      ] })
+    ] }),
+    people ? people.length === 0 ? /* @__PURE__ */ jsx9("p", { className: "text-xs text-muted-foreground", children: "Nobody could see it then." }) : /* @__PURE__ */ jsx9("ul", { className: "flex flex-col gap-0.5", "data-who-could-see-list": "", children: people.map((p) => /* @__PURE__ */ jsxs8("li", { className: "flex items-center justify-between gap-2 text-xs", "data-who-could-see-person": p.id ?? "", children: [
+      /* @__PURE__ */ jsxs8("span", { className: "min-w-0 truncate", children: [
+        p.name ?? p.email ?? "Someone",
+        /* @__PURE__ */ jsxs8("span", { className: "text-muted-foreground", children: [
+          " \xB7 ",
+          p.via
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs8("span", { className: "flex shrink-0 items-center gap-1 text-muted-foreground", children: [
+        p.level ? PERMISSION_LEVEL_SHORT_LABELS4[p.level] ?? p.level : null,
+        p.has_access_now === false ? /* @__PURE__ */ jsx9("span", { className: "rounded border border-border px-1", "data-who-could-see-lost": "", children: "No access now" }) : null
+      ] })
+    ] }, `${p.kind}:${p.id ?? "public"}`)) }) : null,
+    error ? /* @__PURE__ */ jsx9("p", { role: "alert", className: "text-xs text-destructive", "data-who-could-see-error": "", children: error }) : null
+  ] });
+}
+
+// src/react/sheet/OrgAvailabilityNote.tsx
+import { Building2 as Building24 } from "lucide-react";
+import { Fragment as Fragment4, jsx as jsx10, jsxs as jsxs9 } from "react/jsx-runtime";
+var DEFAULT_VERB = {
+  viewer: "view",
+  commenter: "comment on",
+  editor: "edit",
+  admin: "manage"
+};
+function OrgAvailabilityNote({
+  permissions,
+  organizationDefault
+}) {
+  const orgs = permissions.filter(
+    (p) => p.grantedToOrganizationId && !(organizationDefault?.organizationId && p.grantedToOrganizationId === organizationDefault.organizationId)
+  );
+  const defaultLine = organizationDefault ? /* @__PURE__ */ jsxs9(
+    "p",
+    {
+      className: "mt-2 flex items-start gap-1.5 text-xs text-muted-foreground",
+      "data-organization-default": true,
+      children: [
+        /* @__PURE__ */ jsx10(Building24, { className: "w-3 h-3 mt-0.5 flex-shrink-0" }),
+        /* @__PURE__ */ jsxs9("span", { children: [
+          "Everyone in ",
+          organizationDefault.organizationName,
+          " can",
+          " ",
+          DEFAULT_VERB[organizationDefault.level] ?? "open",
+          " this by default."
+        ] })
+      ]
+    }
+  ) : null;
+  if (orgs.length === 0) return defaultLine;
+  const names = orgs.map(
+    (p) => p.grantedToOrganization?.name ?? "an organization"
+  );
+  return /* @__PURE__ */ jsxs9(Fragment4, { children: [
+    defaultLine,
+    /* @__PURE__ */ jsxs9(
+      "p",
+      {
+        className: "mt-2 flex items-start gap-1.5 text-xs text-muted-foreground",
+        "data-org-availability": true,
+        children: [
+          /* @__PURE__ */ jsx10(Building24, { className: "w-3 h-3 mt-0.5 flex-shrink-0" }),
+          /* @__PURE__ */ jsxs9("span", { children: [
+            "Also open to everyone in ",
+            names.join(", "),
+            " by its settings."
+          ] })
+        ]
+      }
+    )
+  ] });
+}
+
+// src/react/sheet/WhoCanSeeThis.tsx
+import { useState as useState14 } from "react";
+import { Building2 as Building25, Check as Check4, EyeOff, Globe as Globe4, Loader2 as Loader29 } from "lucide-react";
+import { cn as cn5 } from "@ai-matrx/design-system/cn";
+import { SHOWN_TO_WORDS as SHOWN_TO_WORDS2 } from "@ai-matrx/sharing/core";
+
+// src/react/sheet/RowControls.tsx
+import { useClipboard as useClipboard2 } from "@ai-matrx/kit/clipboard";
+import { useCallback as useCallback7, useEffect as useEffect11, useState as useState13 } from "react";
+import { Check as Check3, Copy as Copy2, Loader2 as Loader28 } from "lucide-react";
+
+// src/react/sheet/ui/switch.tsx
+import { Switch as PackageSwitch } from "@ai-matrx/design-system";
+import * as React6 from "react";
+import { Switch } from "@ai-matrx/design-system/controls";
+import { jsx as jsx11 } from "react/jsx-runtime";
+var SwitchLegacy = React6.forwardRef(({ size = "sm", ...props }, ref) => /* @__PURE__ */ jsx11(PackageSwitch, { ref, size, ...props }));
+SwitchLegacy.displayName = "SwitchLegacy";
+
+// src/react/sheet/RowControls.tsx
+import { Button as Button8 } from "@ai-matrx/design-system";
+
+// src/react/sheet/ui/toggle-group.tsx
+import {
+  ToggleGroup,
+  ToggleGroupItem
+} from "@ai-matrx/design-system";
+
+// src/react/sheet/RowControls.tsx
+import { cn as cn4 } from "@ai-matrx/design-system/cn";
+import { extractErrorMessage as extractErrorMessage3 } from "@ai-matrx/sharing/core";
+import {
+  getShareCapabilities as getShareCapabilities2
+} from "@ai-matrx/sharing/core";
+import { publicResourceUrl } from "@ai-matrx/sharing/core";
+import { getShareableResource } from "@ai-matrx/sharing/core";
+
+// src/react/sheet/PublicAccessTab.tsx
+import { useEffect as useEffect9, useState as useState11 } from "react";
+
+// src/react/sheet/ui/alert.tsx
+import {
+  Alert,
+  AlertDescription,
+  AlertTitle,
+  alertVariants
+} from "@ai-matrx/design-system";
+
+// src/react/sheet/PublicAccessTab.tsx
+import { AlertTriangle as AlertTriangle3 } from "lucide-react";
+
+// src/react/sheet/ShareLinkPanel.tsx
+import { useCallback as useCallback5, useEffect as useEffect8, useRef as useRef2, useState as useState10 } from "react";
+import { Button as Button7 } from "@ai-matrx/design-system";
+import { Input as Input3 } from "@ai-matrx/design-system/controls";
+import {
+  Link2 as Link22,
+  Copy,
+  Check as Check2,
+  Trash2 as Trash22,
+  Loader2 as Loader27,
+  Plus,
+  Eye as Eye2,
+  MessageSquareText,
+  RefreshCw
+} from "lucide-react";
+import {
+  createShareLink,
+  listShareLinks,
+  revokeShareLink,
+  shareUrlForLink
+} from "@ai-matrx/sharing/core";
+
+// src/react/sheet/ui/confirm-dialog.tsx
+import { ConfirmDialog as PackageConfirmDialog } from "@ai-matrx/design-system";
+import { jsx as jsx12 } from "react/jsx-runtime";
+function PortalConfirmDialog(props) {
+  const container = usePortalContainer();
+  return /* @__PURE__ */ jsx12(PackageConfirmDialog, { ...container ? { portalContainer: container } : {}, ...props });
+}
+
+// src/react/sheet/useShare.tsx
+import { useClipboard } from "@ai-matrx/kit/clipboard";
+import { useCallback as useCallback4, useState as useState9 } from "react";
+import { ClipboardFallbackDialog } from "@ai-matrx/design-system";
+import { jsx as jsx13 } from "react/jsx-runtime";
+function useShare() {
+  const { copyText: copyTextKit } = useClipboard({
+    notify: copyNotify
+  });
+  const [copied, setCopied] = useState9(false);
+  const [fallbackUrl, setFallbackUrl] = useState9(null);
+  const [fallbackTitle, setFallbackTitle] = useState9("Copy link");
+  const [fallbackDescription, setFallbackDescription] = useState9(
+    "Press Cmd/Ctrl+C to copy, or use the Copy button below."
+  );
+  const copy = useCallback4(
+    async (text, fallback) => {
+      const showManualFallback = () => {
+        setFallbackTitle(fallback?.title ?? "Copy link");
+        setFallbackDescription(
+          fallback?.description ?? "Press Cmd/Ctrl+C to copy, or use the Copy button below."
+        );
+        setFallbackUrl(text);
+        return "manual";
+      };
+      if (!await copyTextKit(text)) return showManualFallback();
+      setCopied(true);
+      window.setTimeout(() => setCopied(false), 2e3);
+      return "copied";
+    },
+    []
+  );
+  const share = useCallback4(
+    async (options) => {
+      const url = options.url === null ? "" : options.url ?? (typeof window !== "undefined" ? window.location.href : "");
+      const payload = {
+        title: options.title,
+        ...options.text ? { text: options.text } : {},
+        ...url ? { url } : {}
+      };
+      if (typeof navigator !== "undefined" && navigator.share) {
+        try {
+          await navigator.share(payload);
+          return "shared";
+        } catch (error) {
+          if (typeof error === "object" && error !== null && "name" in error && error.name === "AbortError") {
+            return "cancelled";
+          }
+        }
+      }
+      const copyText3 = options.copyText ?? url;
+      return copy(copyText3, {
+        title: options.fallbackTitle,
+        description: options.fallbackDescription
+      });
+    },
+    [copy]
+  );
+  return {
+    share,
+    copy,
+    copied,
+    fallbackDialog: /* @__PURE__ */ jsx13(
+      ClipboardFallbackDialog,
+      {
+        open: fallbackUrl !== null,
+        onOpenChange: (open) => !open && setFallbackUrl(null),
+        url: fallbackUrl ?? "",
+        title: fallbackTitle,
+        description: fallbackDescription
+      }
+    )
+  };
+}
+
+// src/react/sheet/ShareLinkPanel.tsx
+import {
+  createSafeShareMessage,
+  describeShareLinkAccess,
+  describeShareLinkExpiry,
+  evaluateShareLinkHandoff,
+  shareLinkUnavailableReason
+} from "@ai-matrx/sharing/core";
+import { jsx as jsx14, jsxs as jsxs10 } from "react/jsx-runtime";
+function linkListErrorMessage(error) {
+  return error instanceof Error ? error.message : "We couldn't load this item's share links.";
+}
+function ShareLinkPanel({
+  resourceType,
+  resourceId,
+  isOwner,
+  enabled = true
+}) {
+  const { toast } = useToast();
+  const [links, setLinks] = useState10([]);
+  const [loading, setLoading] = useState10(true);
+  const [loadedResourceKey, setLoadedResourceKey] = useState10(
+    null
+  );
+  const [creating, setCreating] = useState10(false);
+  const [copiedId, setCopiedId] = useState10(null);
+  const [revokeTarget, setRevokeTarget] = useState10(null);
+  const [shareTarget, setShareTarget] = useState10(null);
+  const [shareError, setShareError] = useState10(null);
+  const [refreshing, setRefreshing] = useState10(false);
+  const [handoffBusy, setHandoffBusy] = useState10(false);
+  const { share, copy: copyMessage, fallbackDialog } = useShare();
+  const resourceKey = `${resourceType}\0${resourceId}`;
+  const fetchLinks = useCallback5(
+    () => listShareLinks(resourceType, resourceId),
+    [resourceType, resourceId]
+  );
+  const refresh = useCallback5(async () => {
+    setLoading(true);
+    setShareError(null);
+    try {
+      const freshLinks = await fetchLinks();
+      setLinks(freshLinks);
+      setLoadedResourceKey(resourceKey);
+      return freshLinks;
+    } catch (error) {
+      if (loadedResourceKey !== resourceKey) setLinks([]);
+      setLoadedResourceKey(resourceKey);
+      setShareError(linkListErrorMessage(error));
+      return null;
+    } finally {
+      setLoading(false);
+    }
+  }, [fetchLinks, loadedResourceKey, resourceKey]);
+  useEffect8(() => {
+    if (!isOwner) return;
+    let current = true;
+    void fetchLinks().then((freshLinks) => {
+      if (current) {
+        setLinks(freshLinks);
+        setLoadedResourceKey(resourceKey);
+      }
+    }).catch((error) => {
+      if (current) {
+        setLinks([]);
+        setLoadedResourceKey(resourceKey);
+        setShareError(linkListErrorMessage(error));
+      }
+    }).finally(() => {
+      if (current) setLoading(false);
+    });
+    return () => {
+      current = false;
+    };
+  }, [isOwner, fetchLinks, resourceKey]);
+  const activeLinks = links.filter((l) => l.isActive);
+  const isLoading = loading || loadedResourceKey !== resourceKey;
+  const hasLink = !isLoading && activeLinks.length > 0;
+  const copyLink = useCallback5(
+    async (sourceLink, alreadyRefreshed) => {
+      const refreshedLinks = alreadyRefreshed ?? await refresh();
+      if (!refreshedLinks) {
+        toast({
+          title: "Couldn't check this link",
+          description: "The link list couldn't be refreshed. Try again before copying.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const currentLink = refreshedLinks.find(
+        (link) => link.id === sourceLink.id
+      );
+      if (!currentLink) {
+        toast({
+          title: "This link is no longer available",
+          description: "Refresh the list and choose an active share link.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const unavailableReason = shareLinkUnavailableReason(currentLink);
+      if (unavailableReason) {
+        toast({
+          title: "This link can't be copied",
+          description: unavailableReason,
+          variant: "destructive"
+        });
+        return;
+      }
+      const outcome = await copyMessage(shareUrlForLink(currentLink), {
+        title: "Copy link",
+        description: "Copy this link and send it to the person you want to share with."
+      });
+      if (outcome === "copied") {
+        setCopiedId(currentLink.id);
+        setTimeout(() => setCopiedId(null), 2e3);
+        toast({
+          title: "Link copied",
+          description: "Anyone with it can view \u2014 no sign-in needed."
+        });
+      }
+    },
+    [copyMessage, refresh, toast]
+  );
+  const createLinkOnce = useCallback5(async () => {
+    const result = await createShareLink({ resourceType, resourceId });
+    if (result.success && result.url) {
+      const freshLinks = await refresh();
+      const createdLink = result.token && freshLinks ? freshLinks.find((link) => link.token === result.token) : void 0;
+      if (!createdLink || !freshLinks) {
+        toast({
+          title: "Link created but not copied",
+          description: "The current link state couldn't be confirmed. Refresh the list before sharing it.",
+          variant: "destructive"
+        });
+        return;
+      }
+      await copyLink(createdLink, freshLinks);
+    } else {
+      toast({
+        title: "Couldn't create link",
+        description: result.error ?? "Please try again",
+        variant: "destructive"
+      });
+    }
+  }, [resourceType, resourceId, refresh, copyLink, toast]);
+  const creatingRef = useRef2(false);
+  const handleCreate = useCallback5(async () => {
+    if (creatingRef.current) return;
+    creatingRef.current = true;
+    setCreating(true);
+    try {
+      await createLinkOnce();
+    } finally {
+      creatingRef.current = false;
+      setCreating(false);
+    }
+  }, [createLinkOnce]);
+  const handleRevoke = useCallback5(async () => {
+    if (!revokeTarget) return;
+    const result = await revokeShareLink(revokeTarget.id);
+    setRevokeTarget(null);
+    if (result.success) {
+      await refresh();
+      toast({
+        title: "Link turned off",
+        description: "It can no longer be opened."
+      });
+    } else {
+      toast({
+        title: "Couldn't revoke",
+        description: result.error,
+        variant: "destructive"
+      });
+    }
+  }, [revokeTarget, refresh, toast]);
+  const prepareTextShare = useCallback5(
+    async (linkId) => {
+      setRefreshing(true);
+      const freshLinks = await refresh();
+      setRefreshing(false);
+      if (!freshLinks) {
+        toast({
+          title: "Couldn't check this link",
+          description: "The link list couldn't be refreshed. Try again before sharing.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const freshLink = freshLinks.find((link) => link.id === linkId);
+      if (!freshLink) {
+        toast({
+          title: "This link is no longer available",
+          description: "Refresh the list and choose an active share link.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const unavailableReason = shareLinkUnavailableReason(freshLink);
+      if (unavailableReason) {
+        toast({
+          title: "This link can't be shared",
+          description: unavailableReason,
+          variant: "destructive"
+        });
+        return;
+      }
+      setShareTarget(freshLink);
+    },
+    [refresh, toast]
+  );
+  const closeShareReview = useCallback5(() => {
+    if (!handoffBusy) setShareTarget(null);
+  }, [handoffBusy]);
+  const handleNativeHandoff = useCallback5(async () => {
+    if (!shareTarget) return;
+    setHandoffBusy(true);
+    try {
+      const freshLinks = await refresh();
+      if (!freshLinks) {
+        toast({
+          title: "Couldn't check this link",
+          description: "The link list couldn't be refreshed. Try again before sharing.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const currentLink = freshLinks.find((link) => link.id === shareTarget.id);
+      if (!currentLink) {
+        setShareTarget(null);
+        toast({
+          title: "This link is no longer available",
+          description: "It may have been turned off. Choose an active link to continue.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const handoffReview = evaluateShareLinkHandoff(shareTarget, currentLink);
+      if (handoffReview.status === "unavailable") {
+        setShareTarget(null);
+        toast({
+          title: "This link can't be shared",
+          description: handoffReview.reason,
+          variant: "destructive"
+        });
+        return;
+      }
+      if (handoffReview.status === "changed") {
+        setShareTarget(currentLink);
+        toast({
+          title: "Link access changed",
+          description: "Review the updated access, expiry, and view count before sharing.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const message = createSafeShareMessage(shareUrlForLink(currentLink));
+      const outcome = await share({
+        title: "AI Matrx share",
+        text: message,
+        url: null,
+        copyText: message,
+        fallbackTitle: "Copy message",
+        fallbackDescription: "Copy the reviewed message below and paste it into your messaging app."
+      });
+      if (outcome === "cancelled") return;
+      setShareTarget(null);
+      if (outcome === "shared") {
+        toast({
+          title: "Share options opened",
+          description: "AI Matrx didn't send the message. Complete it in your share app."
+        });
+      } else if (outcome === "copied") {
+        toast({
+          title: "Message copied",
+          description: "Paste it into a message. AI Matrx didn't send it."
+        });
+      }
+    } finally {
+      setHandoffBusy(false);
+    }
+  }, [shareTarget, refresh, share, toast]);
+  const handleCopyReviewedMessage = useCallback5(async () => {
+    if (!shareTarget) return;
+    setHandoffBusy(true);
+    try {
+      const freshLinks = await refresh();
+      if (!freshLinks) {
+        toast({
+          title: "Couldn't check this link",
+          description: "The link list couldn't be refreshed. Try again before copying.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const currentLink = freshLinks.find((link) => link.id === shareTarget.id);
+      if (!currentLink) {
+        setShareTarget(null);
+        toast({
+          title: "This link is no longer available",
+          description: "It may have been turned off. Choose an active link to continue.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const handoffReview = evaluateShareLinkHandoff(shareTarget, currentLink);
+      if (handoffReview.status === "unavailable") {
+        setShareTarget(null);
+        toast({
+          title: "This link can't be shared",
+          description: handoffReview.reason,
+          variant: "destructive"
+        });
+        return;
+      }
+      if (handoffReview.status === "changed") {
+        setShareTarget(currentLink);
+        toast({
+          title: "Link access changed",
+          description: "Review the updated access, expiry, and view count before copying.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const message = createSafeShareMessage(shareUrlForLink(currentLink));
+      const outcome = await copyMessage(message, {
+        title: "Copy message",
+        description: "Copy the reviewed message below and paste it into your messaging app."
+      });
+      setShareTarget(null);
+      if (outcome === "copied") {
+        toast({
+          title: "Message copied",
+          description: "Paste it into a message. AI Matrx didn't send it."
+        });
+      }
+    } finally {
+      setHandoffBusy(false);
+    }
+  }, [shareTarget, refresh, copyMessage, toast]);
+  if (!isOwner) return null;
+  if (!enabled) {
+    return /* @__PURE__ */ jsxs10("div", { className: "flex items-start gap-2 p-3 bg-muted/30 rounded-lg border", children: [
+      /* @__PURE__ */ jsx14(Link22, { className: "w-4 h-4 text-muted-foreground flex-shrink-0 mt-0.5" }),
+      /* @__PURE__ */ jsxs10("div", { className: "min-w-0", children: [
+        /* @__PURE__ */ jsx14("h3", { className: "text-sm font-medium", children: "No-login links aren\u2019t on for this item type" }),
+        /* @__PURE__ */ jsx14("p", { className: "text-xs text-muted-foreground", children: "Share it with specific people or an organization instead \u2014 they open it signed in." })
+      ] })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs10("div", { className: "space-y-2.5 p-3 bg-muted/30 rounded-lg border", children: [
+    /* @__PURE__ */ jsxs10("div", { className: "flex items-center justify-between gap-2", children: [
+      /* @__PURE__ */ jsxs10("div", { className: "flex items-center gap-2 min-w-0", children: [
+        /* @__PURE__ */ jsx14(Link22, { className: "w-4 h-4 text-primary flex-shrink-0" }),
+        /* @__PURE__ */ jsxs10("div", { className: "min-w-0", children: [
+          /* @__PURE__ */ jsx14("h3", { className: "text-sm font-medium", children: "Anyone with the link" }),
+          /* @__PURE__ */ jsx14("p", { className: "text-xs text-muted-foreground", children: hasLink ? `Link is on \xB7 ${activeLinks.length} active` : "Create a link that opens with no sign-in required" })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs10(
+        Button7,
+        {
+          size: "sm",
+          onClick: handleCreate,
+          disabled: creating,
+          className: "flex-shrink-0",
+          children: [
+            creating ? /* @__PURE__ */ jsx14(Loader27, { className: "w-4 h-4 animate-spin" }) : /* @__PURE__ */ jsx14(Plus, { className: "w-4 h-4" }),
+            /* @__PURE__ */ jsx14("span", { className: "ml-1 hidden sm:inline", children: hasLink ? "New link" : "Create link" })
+          ]
+        }
+      )
+    ] }),
+    isLoading ? /* @__PURE__ */ jsxs10("div", { className: "flex items-center justify-center py-3 text-xs text-muted-foreground", children: [
+      /* @__PURE__ */ jsx14(Loader27, { className: "w-3.5 h-3.5 animate-spin mr-2" }),
+      "Loading links\u2026"
+    ] }) : activeLinks.length === 0 && !shareError ? /* @__PURE__ */ jsx14("p", { className: "text-xs text-muted-foreground py-1", children: "No share links yet. Create one to share this with anyone." }) : /* @__PURE__ */ jsx14("div", { className: "space-y-1.5", children: activeLinks.map((link) => {
+      const unavailableReason = shareLinkUnavailableReason(link);
+      return /* @__PURE__ */ jsxs10(
+        "div",
+        {
+          className: "flex items-center gap-1.5 rounded-md border bg-background p-1.5",
+          children: [
+            /* @__PURE__ */ jsx14(
+              Input3,
+              {
+                mono: true,
+                readOnly: true,
+                value: shareUrlForLink(link),
+                className: "min-w-0 flex-1",
+                onFocus: (e) => e.currentTarget.select()
+              }
+            ),
+            /* @__PURE__ */ jsxs10(
+              "span",
+              {
+                className: "flex items-center gap-1 text-[10px] text-muted-foreground px-1",
+                title: `${link.useCount} view${link.useCount === 1 ? "" : "s"}`,
+                children: [
+                  /* @__PURE__ */ jsx14(Eye2, { className: "w-3 h-3" }),
+                  link.useCount
+                ]
+              }
+            ),
+            /* @__PURE__ */ jsx14(
+              Button7,
+              {
+                variant: "ghost",
+                size: "icon",
+                className: "h-11 w-11 flex-shrink-0 sm:h-8 sm:w-8",
+                onClick: () => copyLink(link),
+                disabled: !!unavailableReason,
+                title: unavailableReason ?? "Copy link",
+                "aria-label": "Copy share link",
+                children: copiedId === link.id ? /* @__PURE__ */ jsx14(Check2, { className: "w-4 h-4 text-green-500" }) : /* @__PURE__ */ jsx14(Copy, { className: "w-4 h-4" })
+              }
+            ),
+            /* @__PURE__ */ jsx14(
+              Button7,
+              {
+                variant: "ghost",
+                size: "icon",
+                className: "h-11 w-11 flex-shrink-0 sm:h-8 sm:w-8",
+                onClick: () => prepareTextShare(link.id),
+                disabled: !!unavailableReason || refreshing,
+                title: unavailableReason ?? "Review before sharing by text",
+                "aria-label": "Share by text",
+                children: refreshing ? /* @__PURE__ */ jsx14(Loader27, { className: "w-4 h-4 animate-spin" }) : /* @__PURE__ */ jsx14(MessageSquareText, { className: "w-4 h-4" })
+              }
+            ),
+            /* @__PURE__ */ jsx14(
+              Button7,
+              {
+                variant: "ghost",
+                size: "icon",
+                className: "h-11 w-11 flex-shrink-0 text-destructive sm:h-8 sm:w-8",
+                onClick: () => setRevokeTarget(link),
+                title: "Turn off link",
+                "aria-label": "Turn off share link",
+                children: /* @__PURE__ */ jsx14(Trash22, { className: "w-4 h-4" })
+              }
+            )
+          ]
+        },
+        link.id
+      );
+    }) }),
+    shareError ? /* @__PURE__ */ jsxs10(
+      "div",
+      {
+        role: "alert",
+        className: "flex items-center justify-between gap-2 text-xs text-destructive",
+        children: [
+          /* @__PURE__ */ jsx14("span", { children: shareError }),
+          /* @__PURE__ */ jsxs10(
+            Button7,
+            {
+              type: "button",
+              variant: "outline",
+              size: "sm",
+              disabled: isLoading,
+              onClick: () => refresh(),
+              children: [
+                /* @__PURE__ */ jsx14(RefreshCw, { className: "mr-1 h-3.5 w-3.5" }),
+                "Refresh"
+              ]
+            }
+          ),
+          /* @__PURE__ */ jsx14(ErrorAlchemyMenu, { className: "ml-auto" })
+        ]
+      }
+    ) : null,
+    refreshing && !loading ? /* @__PURE__ */ jsx14("span", { className: "sr-only", role: "status", children: "Checking current link access" }) : null,
+    /* @__PURE__ */ jsx14(
+      PortalConfirmDialog,
+      {
+        open: shareTarget !== null,
+        onOpenChange: (open) => !open && closeShareReview(),
+        title: "Review message before sharing",
+        description: "Anyone with this link can open it without signing in. AI Matrx will prepare the message; it won't send it.",
+        content: shareTarget ? /* @__PURE__ */ jsxs10("div", { className: "space-y-3 text-sm", children: [
+          /* @__PURE__ */ jsxs10("dl", { className: "space-y-1.5 text-xs", children: [
+            /* @__PURE__ */ jsxs10("div", { className: "flex justify-between gap-3", children: [
+              /* @__PURE__ */ jsx14("dt", { className: "text-muted-foreground", children: "Access" }),
+              /* @__PURE__ */ jsx14("dd", { className: "text-right", children: describeShareLinkAccess(shareTarget.permissionLevel) })
+            ] }),
+            /* @__PURE__ */ jsxs10("div", { className: "flex justify-between gap-3", children: [
+              /* @__PURE__ */ jsx14("dt", { className: "text-muted-foreground", children: "Expiry" }),
+              /* @__PURE__ */ jsx14("dd", { className: "text-right", children: describeShareLinkExpiry(shareTarget.expiresAt) })
+            ] }),
+            /* @__PURE__ */ jsxs10("div", { className: "flex justify-between gap-3", children: [
+              /* @__PURE__ */ jsx14("dt", { className: "text-muted-foreground", children: "Views" }),
+              /* @__PURE__ */ jsx14("dd", { className: "text-right", children: shareTarget.maxUses === null ? `${shareTarget.useCount} used \xB7 no limit` : `${shareTarget.useCount} of ${shareTarget.maxUses} used` })
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxs10("div", { className: "space-y-1", children: [
+            /* @__PURE__ */ jsx14("p", { className: "text-xs font-medium", children: "Message preview" }),
+            /* @__PURE__ */ jsx14("p", { className: "rounded-md border bg-muted/30 p-3 break-words", children: createSafeShareMessage(shareUrlForLink(shareTarget)) })
+          ] }),
+          /* @__PURE__ */ jsxs10(
+            Button7,
+            {
+              type: "button",
+              variant: "outline",
+              className: "min-h-11 w-full sm:min-h-0",
+              disabled: handoffBusy,
+              onClick: handleCopyReviewedMessage,
+              children: [
+                /* @__PURE__ */ jsx14(Copy, { className: "mr-2 h-4 w-4" }),
+                "Copy message"
+              ]
+            }
+          ),
+          /* @__PURE__ */ jsx14("p", { className: "text-xs text-muted-foreground", children: "You can turn this link off from the share panel at any time." })
+        ] }) : null,
+        confirmLabel: typeof navigator !== "undefined" && typeof navigator.share === "function" ? "Open share options" : "Copy message",
+        cancelLabel: "Not now",
+        contentClassName: "w-[calc(100%-2rem)] sm:!max-w-[34rem]",
+        busy: handoffBusy,
+        onConfirm: handleNativeHandoff
+      }
+    ),
+    /* @__PURE__ */ jsx14(
+      PortalConfirmDialog,
+      {
+        open: !!revokeTarget,
+        onOpenChange: (o) => !o && setRevokeTarget(null),
+        title: "Turn off this link?",
+        description: "Anyone currently using it will lose access. This can't be undone.",
+        confirmLabel: "Turn off link",
+        variant: "destructive",
+        onConfirm: handleRevoke
+      }
+    ),
+    fallbackDialog
+  ] });
+}
+
+// src/react/sheet/PublicAccessTab.tsx
+import { Skeleton } from "@ai-matrx/design-system";
+import { extractErrorMessage as extractErrorMessage2 } from "@ai-matrx/sharing/core";
+import { getShareCapabilities } from "@ai-matrx/sharing/core";
+import { sharingLocation as sharingLocation4 } from "@ai-matrx/sharing/core";
+import { jsx as jsx15, jsxs as jsxs11 } from "react/jsx-runtime";
+function anyoneReachWords(typeLabel, reach) {
+  if (reach.publicPage) return `Anyone, signed in or not, opens this ${typeLabel} at its address as a viewer.`;
+  return `Everyone signed in to AI Matrx can find and view this ${typeLabel}.` + (reach.noLoginLink ? " People without an account need a no-login link." : " People without an account cannot open it.");
+}
+function PublicAccessTab({
+  isOwner,
+  resourceType,
+  resourceId,
+  resourceName,
+  copy
+}) {
+  const [linkShareable, setLinkShareable] = useState11(false);
+  const [loading, setLoading] = useState11(true);
+  const [capabilitiesError, setCapabilitiesError] = useState11(null);
+  useEffect9(() => {
+    let active = true;
+    setLoading(true);
+    setCapabilitiesError(null);
+    getShareCapabilities(resourceType).then((c) => {
+      if (active) setLinkShareable(c.isLinkShareable);
+    }).catch((error) => {
+      if (active) setCapabilitiesError(extractErrorMessage2(error));
+    }).finally(() => {
+      if (active) setLoading(false);
+    });
+    return () => {
+      active = false;
+    };
+  }, [resourceType]);
+  const location = sharingLocation4(copy?.surface ?? "Anyone link");
+  if (loading) return /* @__PURE__ */ jsx15(Skeleton, { className: "h-20 w-full" });
+  if (capabilitiesError) {
+    return /* @__PURE__ */ jsxs11(Alert, { variant: "destructive", className: "group", children: [
+      /* @__PURE__ */ jsx15(AlertTriangle3, { className: "h-4 w-4" }),
+      /* @__PURE__ */ jsxs11(AlertDescription, { className: "flex items-start gap-2", children: [
+        /* @__PURE__ */ jsx15("span", { className: "flex-1", children: capabilitiesError }),
+        /* @__PURE__ */ jsx15("span", { className: "shrink-0 opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ jsx15(
+          CopyButtons,
+          {
+            size: "xs",
+            label: "Anyone link error",
+            human: () => [
+              "The Anyone link controls could not load.",
+              capabilitiesError,
+              `Resource: ${resourceType}:${resourceId} (${resourceName})`
+            ].join("\n"),
+            json: () => ({
+              error: capabilitiesError,
+              resource_type: resourceType,
+              resource_id: resourceId
+            }),
+            agent: () => ({
+              kind: "public-access-error",
+              location,
+              description: "The share-capabilities lookup failed, so the Anyone link tab renders no controls. This is the error on screen, verbatim.",
+              data: {
+                rendered_error: capabilitiesError,
+                resource_type: resourceType,
+                resource_id: resourceId,
+                resource_name: resourceName,
+                kpis: copy?.kpis ?? null
+              },
+              attributes: { resource_type: resourceType, resource_id: resourceId, state: "error" }
+            })
+          }
+        ) })
+      ] })
+    ] });
+  }
+  return /* @__PURE__ */ jsx15("div", { className: "space-y-3", children: /* @__PURE__ */ jsx15(
+    ShareLinkPanel,
+    {
+      resourceType,
+      resourceId,
+      isOwner,
+      enabled: linkShareable
+    }
+  ) });
+}
+
+// src/react/sheet/RowControls.tsx
+import { SHOWN_TO_ORDER, SHOWN_TO_WORDS } from "@ai-matrx/sharing/core";
+
+// src/react/sheet/SearchEngineIndexedSwitch.tsx
+import { useCallback as useCallback6, useEffect as useEffect10, useState as useState12 } from "react";
+import { cn as cn3 } from "@ai-matrx/design-system/cn";
+import { getSearchEngineIndexedState, setSearchEngineIndexed } from "@ai-matrx/sharing/core";
+import { jsx as jsx16, jsxs as jsxs12 } from "react/jsx-runtime";
+function SearchEngineIndexedSwitch({
+  resourceType,
+  resourceId,
+  publishedHint,
+  className
+}) {
+  const [state2, setState] = useState12(null);
+  const [busy, setBusy] = useState12(false);
+  const { toast } = useToast();
+  const load = useCallback6(async () => {
+    const res = await getSearchEngineIndexedState(resourceType, resourceId);
+    if (res.error) {
+      console.warn(`[search-engine-indexed] state for ${resourceType}/${resourceId}: ${res.error}`);
+      setState(null);
+      return;
+    }
+    setState(res.state);
+  }, [resourceType, resourceId]);
+  useEffect10(() => {
+    void load();
+  }, [load, publishedHint]);
+  if (!state2 || !state2.enrolled || !state2.published_to_web) return null;
+  const onChange = async (next) => {
+    setBusy(true);
+    const res = await setSearchEngineIndexed(resourceType, resourceId, next);
+    setBusy(false);
+    if (res.error || !res.state) {
+      toast({
+        title: "Couldn't change search engine indexing",
+        description: res.error ?? "Please try again",
+        variant: "destructive"
+      });
+      return;
+    }
+    setState(res.state);
+    toast({
+      title: next ? "Search engines may list this page" : "Search engines are told not to list this page",
+      description: "Anyone with the address can still open it."
+    });
+  };
+  const followsDefault = state2.value === null;
+  const id = `indexed-${resourceType}-${resourceId}`;
+  return /* @__PURE__ */ jsxs12(
+    "span",
+    {
+      className: cn3("inline-flex shrink-0 items-center gap-1.5", className),
+      title: followsDefault ? `Following the default for this type (${state2.type_default ? "indexed" : "not indexed"}).` : "Set for this item.",
+      children: [
+        /* @__PURE__ */ jsx16("label", { htmlFor: id, className: "cursor-pointer text-xs text-muted-foreground", children: "Indexed by search engines" }),
+        /* @__PURE__ */ jsx16(
+          Switch,
+          {
+            id,
+            checked: state2.effective,
+            onCheckedChange: onChange,
+            disabled: busy || !state2.can_change,
+            "aria-label": "Indexed by search engines"
+          }
+        )
+      ]
+    }
+  );
+}
+
+// src/react/sheet/RowControls.tsx
+import { jsx as jsx17, jsxs as jsxs13 } from "react/jsx-runtime";
+var SAYS_SLOT_KEYS = [...SHOWN_TO_ORDER, "default"];
+function RowControls({
+  resourceType,
+  resourceId,
+  canChange,
+  shownTo,
+  isPublic,
+  childRecord = false,
+  publishable = true,
+  onSetShownTo,
+  onPublish,
+  onStopPublishing
+}) {
+  const { copyText: copyText3 } = useClipboard2({
+    notify: copyNotify
+  });
+  const { toast } = useToast();
+  const [caps, setCaps] = useState13(null);
+  const [capsError, setCapsError] = useState13(null);
+  const [busy, setBusy] = useState13(null);
+  const [copied, setCopied] = useState13(false);
+  useEffect11(() => {
+    let live = true;
+    setCapsError(null);
+    getShareCapabilities2(resourceType).then((c) => live && setCaps(c)).catch((e) => live && setCapsError(extractErrorMessage3(e)));
+    return () => {
+      live = false;
+    };
+  }, [resourceType]);
+  const publicUrl = publicResourceUrl(resourceType, resourceId);
+  const copyAddress = useCallback7(async () => {
+    if (!publicUrl) return;
+    if (!await copyText3(publicUrl, void 0, "Couldn't copy the web address")) return;
+    setCopied(true);
+    setTimeout(() => setCopied(false), 2e3);
+  }, [publicUrl, toast]);
+  if (capsError) {
+    return /* @__PURE__ */ jsxs13("p", { className: "rounded-lg border border-destructive/20 bg-destructive/10 p-3 text-xs text-destructive-ink", children: [
+      "Couldn't read this item's sharing options: ",
+      capsError,
+      /* @__PURE__ */ jsx17(ErrorAlchemyMenu, { error: capsError })
+    ] });
+  }
+  if (childRecord) return null;
+  if (!caps) {
+    return /* @__PURE__ */ jsx17("section", { "aria-hidden": "true", className: "invisible space-y-2 rounded-lg border p-3", "data-row-controls-reserved": "", children: /* @__PURE__ */ jsx17("div", { className: "flex h-8 items-center" }) });
+  }
+  const showShownTo = caps.shownToOffered && shownTo !== void 0;
+  const showPublish = publishable && caps.publishLane !== null;
+  if (!showShownTo && !showPublish) return null;
+  const shownChoices = SHOWN_TO_ORDER.filter(
+    (v) => v !== "everyone_on_ai_matrx" || isPublic || shownTo === v
+  );
+  const publishSays = caps.publishLane === "card" ? "Only its card \u2014 the name, description and inputs \u2014 opens for anyone. What is inside stays in its organization." : (
+    // Never promise a signed-out read the type cannot deliver (no page of its own).
+    anyoneReachWords(
+      getShareableResource(resourceType)?.displayLabel?.toLowerCase() ?? "item",
+      { publicPage: Boolean(publicUrl), noLoginLink: caps.isLinkShareable }
+    )
+  );
+  const chooseShownTo = async (next) => {
+    if (!canChange || next === shownTo || busy) return;
+    setBusy("shown");
+    try {
+      const result = await onSetShownTo(next);
+      if (result.success === false) {
+        toast({
+          title: `Couldn't change "Shown to"`,
+          description: result.error || "Please try again",
+          variant: "destructive"
+        });
+      }
+    } finally {
+      setBusy(null);
+    }
+  };
+  const togglePublish = async (on) => {
+    if (!canChange || busy) return;
+    setBusy("publish");
+    try {
+      const result = on ? await onPublish() : await onStopPublishing();
+      toast(
+        result.success === false ? {
+          title: on ? "Couldn't publish it to the web" : "Couldn't stop publishing it to the web",
+          description: result.error || "Please try again",
+          variant: "destructive"
+        } : {
+          title: on ? "Published to the web" : "No longer published to the web",
+          description: on ? publishSays : "People outside its organization can no longer open it, unless it is shared with them."
+        }
+      );
+    } finally {
+      setBusy(null);
+    }
+  };
+  return /* @__PURE__ */ jsxs13(
+    "section",
+    {
+      className: "space-y-2 rounded-lg border bg-muted/30 p-3",
+      "data-row-controls": true,
+      "data-published": isPublic ? "true" : "false",
+      children: [
+        showShownTo && /* @__PURE__ */ jsxs13("div", { className: "flex flex-wrap items-center justify-between gap-2", "data-shown-to": shownTo ?? "default", children: [
+          /* @__PURE__ */ jsx17("span", { className: "text-xs font-medium", children: "Shown to" }),
+          canChange ? /* @__PURE__ */ jsx17(
+            ToggleGroup,
+            {
+              type: "single",
+              size: "sm",
+              variant: "outline",
+              value: shownTo ?? "",
+              onValueChange: (v) => v && void chooseShownTo(v),
+              "aria-label": "Shown to",
+              className: "flex-wrap justify-end",
+              children: shownChoices.map((v) => /* @__PURE__ */ jsx17(
+                ToggleGroupItem,
+                {
+                  value: v,
+                  "aria-label": SHOWN_TO_WORDS[v].label,
+                  title: SHOWN_TO_WORDS[v].says,
+                  className: "h-7 px-2 text-xs data-[state=on]:border-primary data-[state=on]:bg-primary/10 data-[state=on]:text-primary-ink",
+                  children: SHOWN_TO_WORDS[v].label
+                },
+                v
+              ))
+            }
+          ) : /* @__PURE__ */ jsx17("span", { className: "text-xs text-muted-foreground", children: shownTo ? SHOWN_TO_WORDS[shownTo].label : "The default for this type" })
+        ] }),
+        showShownTo && // ZERO LAYOUT SHIFT (Arman 2026-10-07): the sentence under "Shown to" changes with every
+        // choice and each one wraps to a different number of lines on a phone. The slot is a
+        // one-cell grid holding EVERY sentence, only the current one visible, so its height is the
+        // tallest one's at any width and nothing below it ever moves. The spinner's place is held
+        // too (invisible, never removed).
+        /* @__PURE__ */ jsx17("div", { className: "grid text-xs text-muted-foreground", "data-shown-to-says-slot": "", children: SAYS_SLOT_KEYS.map((v) => {
+          const current = (shownTo ?? "default") === v;
+          return /* @__PURE__ */ jsxs13(
+            "p",
+            {
+              className: cn4("col-start-1 row-start-1", !current && "invisible"),
+              "aria-hidden": !current,
+              "data-shown-to-says": v,
+              children: [
+                v === "default" ? "Not set \u2014 the default for this type applies." : SHOWN_TO_WORDS[v].says,
+                " ",
+                "A list setting, never who may open it.",
+                /* @__PURE__ */ jsx17(
+                  Loader28,
+                  {
+                    className: cn4(
+                      "ml-1 inline h-3 w-3 animate-spin",
+                      !(current && busy === "shown") && "invisible"
+                    )
+                  }
+                )
+              ]
+            },
+            v
+          );
+        }) }),
+        showPublish && /* @__PURE__ */ jsxs13("div", { className: cn4("space-y-1.5", showShownTo && "border-t pt-2"), children: [
+          /* @__PURE__ */ jsxs13("div", { className: "flex items-center justify-between gap-2", children: [
+            /* @__PURE__ */ jsx17("span", { className: "text-xs font-medium", children: "Published to the web" }),
+            /* @__PURE__ */ jsxs13("span", { className: "flex items-center gap-3", children: [
+              /* @__PURE__ */ jsx17(
+                SearchEngineIndexedSwitch,
+                {
+                  resourceType,
+                  resourceId,
+                  publishedHint: isPublic
+                }
+              ),
+              busy === "publish" && /* @__PURE__ */ jsx17(Loader28, { className: "h-3.5 w-3.5 animate-spin text-muted-foreground" }),
+              canChange ? /* @__PURE__ */ jsx17(
+                Switch,
+                {
+                  checked: isPublic,
+                  onCheckedChange: (on) => void togglePublish(on),
+                  disabled: busy === "publish",
+                  "aria-label": "Published to the web"
+                }
+              ) : /* @__PURE__ */ jsx17("span", { className: "text-xs text-muted-foreground", children: isPublic ? "On" : "Off" })
+            ] })
+          ] }),
+          /* @__PURE__ */ jsx17("p", { className: "text-xs text-muted-foreground", children: isPublic ? publishSays : `When on: ${publishSays}` }),
+          isPublic && publicUrl && /* @__PURE__ */ jsxs13("div", { className: "flex items-center gap-1.5 rounded-md border bg-background p-1.5", children: [
+            /* @__PURE__ */ jsx17("span", { className: "min-w-0 flex-1 truncate px-1 font-mono text-xs", children: publicUrl }),
+            /* @__PURE__ */ jsx17(
+              Button8,
+              {
+                variant: "ghost",
+                size: "icon",
+                className: "h-7 w-7 flex-shrink-0",
+                onClick: () => void copyAddress(),
+                title: "Copy web address",
+                children: copied ? /* @__PURE__ */ jsx17(Check3, { className: "h-3.5 w-3.5" }) : /* @__PURE__ */ jsx17(Copy2, { className: "h-3.5 w-3.5" })
+              }
+            )
+          ] })
+        ] })
+      ]
+    }
+  );
+}
+
+// src/react/sheet/WhoCanSeeThis.tsx
+import { jsx as jsx18, jsxs as jsxs14 } from "react/jsx-runtime";
+var LEVEL_WORD = {
+  viewer: "Viewer",
+  commenter: "Commenter",
+  editor: "Editor",
+  admin: "Admin"
+};
+var ONLY_ME_HINT = "Hidden from members' lists. Members with the link can still open it.";
+function WhoCanSeeThis({
+  whoCanSee,
+  canChange,
+  onChoose,
+  row
+}) {
+  const { orgs } = useNavTree();
+  const [pending, setPending] = useState14(null);
+  const [said, setSaid] = useState14(null);
+  if (!whoCanSee) return row ? /* @__PURE__ */ jsx18(RowControls, { ...row, canChange }) : null;
+  const orgName = whoCanSee.organizationName ?? (whoCanSee.organizationId ? orgs.find((o) => o.id === whoCanSee.organizationId)?.name : void 0) ?? "this organization";
+  const level = whoCanSee.memberDefaultLevel ? LEVEL_WORD[whoCanSee.memberDefaultLevel] ?? whoCanSee.memberDefaultLevel : null;
+  const options = [
+    {
+      choice: "mine",
+      label: SHOWN_TO_WORDS2.only_me.label,
+      says: SHOWN_TO_WORDS2.only_me.says,
+      hint: ONLY_ME_HINT,
+      icon: EyeOff
+    },
+    {
+      choice: "organization",
+      label: `Everyone in ${orgName}`,
+      says: level ? `Every member, as ${level}. This is the organization's default.` : "Every member. This is the organization's default.",
+      icon: Building25
+    }
+  ];
+  if (whoCanSee.worldOffered || whoCanSee.choice === "world") {
+    options.push({
+      choice: "world",
+      label: "Anyone with the link",
+      says: "Out in the world, findable by the link and nothing else.",
+      icon: Globe4
+    });
+  }
+  const current = options.find((o) => o.choice === whoCanSee.choice) ?? options[options.length - 1];
+  const apply = async (choice) => {
+    setPending(choice);
+    setSaid(null);
+    try {
+      const result = await onChoose(choice);
+      setSaid(
+        result.success ? { ok: true, text: result.message ?? "Saved." } : { ok: false, text: result.error ?? "That could not be changed." }
+      );
+    } finally {
+      setPending(null);
+    }
+  };
+  const pick = (choice) => {
+    if (choice === whoCanSee.choice || pending) return;
+    void apply(choice);
+  };
+  return /* @__PURE__ */ jsxs14(
+    "section",
+    {
+      className: "space-y-1.5 p-3 bg-muted/30 rounded-lg border",
+      "data-who-can-see": true,
+      "data-lane": whoCanSee.choice,
+      children: [
+        /* @__PURE__ */ jsx18("p", { className: "text-xs font-medium", children: "Who can see this" }),
+        canChange ? /* @__PURE__ */ jsx18(
+          "div",
+          {
+            role: "radiogroup",
+            "aria-label": "Who can see this",
+            className: "grid grid-cols-1 gap-1.5 sm:grid-flow-col sm:auto-cols-fr",
+            children: options.map((o) => {
+              const Icon = o.icon;
+              const selected = o.choice === whoCanSee.choice;
+              return /* @__PURE__ */ jsxs14("div", { className: "relative min-w-0", children: [
+                /* @__PURE__ */ jsxs14(
+                  "button",
+                  {
+                    type: "button",
+                    role: "radio",
+                    "aria-checked": selected,
+                    "data-lane-choice": o.choice,
+                    onClick: () => pick(o.choice),
+                    className: cn5(
+                      "flex w-full min-w-0 items-start gap-2 rounded-md border p-2 text-left transition-colors",
+                      o.hint && "pr-7",
+                      selected ? "border-primary bg-background" : "border-transparent hover:bg-background/60"
+                    ),
+                    children: [
+                      pending === o.choice ? /* @__PURE__ */ jsx18(Loader29, { className: "mt-0.5 h-4 w-4 flex-shrink-0 animate-spin text-primary" }) : /* @__PURE__ */ jsx18(
+                        Icon,
+                        {
+                          className: cn5(
+                            "mt-0.5 h-4 w-4 flex-shrink-0",
+                            selected ? "text-primary" : "text-muted-foreground"
+                          )
+                        }
+                      ),
+                      /* @__PURE__ */ jsxs14("span", { className: "min-w-0 flex-1", children: [
+                        /* @__PURE__ */ jsxs14("span", { className: "flex items-center gap-1 text-sm font-medium", children: [
+                          /* @__PURE__ */ jsx18("span", { className: "min-w-0 break-words", children: o.label }),
+                          selected && /* @__PURE__ */ jsx18(Check4, { className: "h-3.5 w-3.5 flex-shrink-0 text-primary" })
+                        ] }),
+                        /* @__PURE__ */ jsx18("span", { className: "block text-xs text-muted-foreground", children: o.says })
+                      ] })
+                    ]
+                  }
+                ),
+                o.hint && /* @__PURE__ */ jsx18(
+                  InfoHint,
+                  {
+                    text: o.hint,
+                    label: `About ${o.label}`,
+                    className: "absolute right-2 top-2.5"
+                  }
+                )
+              ] }, o.choice);
+            })
+          }
+        ) : /* @__PURE__ */ jsxs14("p", { className: "text-sm", "data-who-can-see-text": true, children: [
+          /* @__PURE__ */ jsxs14("span", { className: "font-medium", children: [
+            current.label,
+            "."
+          ] }),
+          " ",
+          /* @__PURE__ */ jsx18("span", { className: "text-xs text-muted-foreground", children: current.says }),
+          current.hint && /* @__PURE__ */ jsx18(InfoHint, { text: current.hint, label: `About ${current.label}` })
+        ] }),
+        said && /* @__PURE__ */ jsx18(
+          "p",
+          {
+            className: cn5(
+              "text-xs",
+              said.ok ? "text-green-700 dark:text-green-300" : "text-destructive"
+            ),
+            "data-lane-said": true,
+            children: said.text
+          }
+        )
+      ]
+    }
+  );
+}
+
+// src/react/sheet/SecureLinkPanel.tsx
+import { useCallback as useCallback8, useEffect as useEffect12, useRef as useRef3, useState as useState15 } from "react";
+import { Loader2 as Loader210, Mail as Mail3, MessageSquare as MessageSquare3, ShieldCheck } from "lucide-react";
+import { Button as Button9 } from "@ai-matrx/design-system";
+import { Checkbox as Checkbox2 } from "@ai-matrx/design-system";
+import { Input as Input4 } from "@ai-matrx/design-system/controls";
+import { Label as Label4 } from "@ai-matrx/design-system";
+import { Textarea } from "@ai-matrx/design-system";
+import { IdentityGate, useConfirmed, wasCancelled } from "@ai-matrx/vault";
+import {
+  fetchRecipientPhoneOnFile,
+  fetchSecureDeliveryOptions,
+  listSentSecureDeliveries,
+  revokeSecureDelivery,
+  SecureDeliveryRefusal,
+  sendSecureDelivery
+} from "@ai-matrx/sharing/core";
+import { formatDurationMinutes } from "@ai-matrx/kit/format";
+import { jsx as jsx19, jsxs as jsxs15 } from "react/jsx-runtime";
+var STATUS_WORDS = {
+  pending: "Waiting to be opened",
+  viewed: "Opened",
+  revoked: "Turned off",
+  expired: "Expired unopened",
+  undeliverable: "Not delivered",
+  locked: "Closed after wrong codes"
+};
+function when(iso) {
+  if (!iso) return "";
+  const d = new Date(iso);
+  return Number.isNaN(d.getTime()) ? "" : d.toLocaleString(void 0, { dateStyle: "medium", timeStyle: "short" });
+}
+function SecureLinkPanel(props) {
+  return /* @__PURE__ */ jsx19(IdentityGate, { identity: vaultIdentity(), children: /* @__PURE__ */ jsx19(SecureLinkForm, { ...props }) });
+}
+function SecureLinkForm({ resourceType, resourceId, resourceName }) {
+  const dispatch = useAppDispatch();
+  const confirmed = useConfirmed();
+  const [options, setOptions] = useState15(null);
+  const [optionsError, setOptionsError] = useState15(null);
+  const [email, setEmail] = useState15("");
+  const [phone, setPhone] = useState15("");
+  const [linkChannel, setLinkChannel] = useState15("email");
+  const [fields, setFields] = useState15([]);
+  const [note, setNote] = useState15("");
+  const [sending, setSending] = useState15(false);
+  const [result, setResult] = useState15(null);
+  const [sent, setSent] = useState15(null);
+  const refreshSent = useCallback8(() => {
+    listSentSecureDeliveries(resourceType, resourceId).then(setSent).catch(() => setSent([]));
+  }, [resourceType, resourceId]);
+  useEffect12(() => {
+    let live = true;
+    fetchSecureDeliveryOptions(dispatch, resourceType, resourceId).then((o) => live && setOptions(o)).catch(
+      (err) => live && setOptionsError(
+        err instanceof SecureDeliveryRefusal ? err.message : "Could not load what can be sent."
+      )
+    );
+    refreshSent();
+    return () => {
+      live = false;
+    };
+  }, [dispatch, resourceType, resourceId, refreshSent]);
+  const [phoneTyped, setPhoneTyped] = useState15(false);
+  const phonePrefilled = useRef3(false);
+  useEffect12(() => {
+    if (phoneTyped) return;
+    const address = email.trim();
+    const clearPrefill = () => {
+      if (phonePrefilled.current) {
+        setPhone("");
+        phonePrefilled.current = false;
+      }
+    };
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(address)) {
+      clearPrefill();
+      return;
+    }
+    let live = true;
+    const timer = setTimeout(() => {
+      fetchRecipientPhoneOnFile(address).then((onFile) => {
+        if (!live) return;
+        if (onFile) {
+          setPhone(onFile);
+          phonePrefilled.current = true;
+        } else {
+          clearPrefill();
+        }
+      }).catch(() => {
+        if (live) clearPrefill();
+      });
+    }, 400);
+    return () => {
+      live = false;
+      clearTimeout(timer);
+    };
+  }, [email, phoneTyped]);
+  const hasBoth = email.trim() !== "" && phone.trim() !== "";
+  const canSend = email.trim() !== "" && !sending;
+  async function send() {
+    setSending(true);
+    setResult(null);
+    try {
+      const receipt = await confirmed(() => sendSecureDelivery(dispatch, {
+        resource_type: resourceType,
+        resource_id: resourceId,
+        recipient_email: email.trim() || null,
+        recipient_phone: phone.trim() || null,
+        field_keys: fields,
+        link_channel: hasBoth ? linkChannel : null,
+        note: note.trim() || null
+      }));
+      setResult({ tone: receipt.same_channel ? "warn" : "ok", text: receipt.sentence });
+      setEmail("");
+      setPhone("");
+      setPhoneTyped(false);
+      phonePrefilled.current = false;
+      setNote("");
+      setFields([]);
+      refreshSent();
+    } catch (err) {
+      if (wasCancelled(err)) {
+        setResult({ tone: "warn", text: "Not sent: it was not confirmed." });
+      } else if (err instanceof SecureDeliveryRefusal) {
+        setResult({ tone: "error", text: err.message, remedy: err.remedy });
+      } else {
+        setResult({ tone: "error", text: "The secure link could not be sent. Try again." });
+      }
+    } finally {
+      setSending(false);
+    }
+  }
+  async function turnOff(row) {
+    const ok = await confirm({
+      title: "Turn off this secure link?",
+      description: `The link to ${row.recipient_email ?? row.recipient_phone ?? "this person"} stops working at once and what it carries is deleted. They will have to ask you for a new one.`,
+      confirmLabel: "Turn it off"
+    });
+    if (!ok) return;
+    try {
+      await revokeSecureDelivery(dispatch, row.id);
+    } finally {
+      refreshSent();
+    }
+  }
+  const protectedFields = options?.protected_fields ?? [];
+  return /* @__PURE__ */ jsxs15("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ jsxs15("div", { className: "flex items-start gap-2 rounded-lg border border-border bg-muted/30 p-3", children: [
+      /* @__PURE__ */ jsx19(ShieldCheck, { className: "mt-0.5 h-4 w-4 flex-shrink-0 text-primary" }),
+      /* @__PURE__ */ jsxs15("p", { className: "text-xs text-muted-foreground", children: [
+        "They get a link that opens once, and a code on a separate channel. No account needed.",
+        options ? ` The link works for ${formatDurationMinutes(options.link_ttl_minutes, { style: "long" })}.` : ""
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs15("div", { className: "grid gap-3 sm:grid-cols-2", children: [
+      /* @__PURE__ */ jsxs15("div", { className: "space-y-1", children: [
+        /* @__PURE__ */ jsx19(Label4, { htmlFor: "secure-email", className: "text-xs", children: "Their email" }),
+        /* @__PURE__ */ jsx19(
+          Input4,
+          {
+            id: "secure-email",
+            type: "email",
+            autoComplete: "off",
+            value: email,
+            onChange: (e) => setEmail(e.target.value),
+            placeholder: "name@example.com"
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxs15("div", { className: "space-y-1", children: [
+        /* @__PURE__ */ jsx19(Label4, { htmlFor: "secure-phone", className: "text-xs", children: "Their mobile, for the code" }),
+        /* @__PURE__ */ jsx19(
+          Input4,
+          {
+            id: "secure-phone",
+            type: "tel",
+            autoComplete: "off",
+            value: phone,
+            onChange: (e) => {
+              setPhone(e.target.value);
+              setPhoneTyped(true);
+              phonePrefilled.current = false;
+            },
+            placeholder: "+1 310 555 0123"
+          }
+        )
+      ] })
+    ] }),
+    hasBoth ? /* @__PURE__ */ jsxs15("div", { className: "flex flex-wrap items-center gap-2 text-xs text-muted-foreground", children: [
+      /* @__PURE__ */ jsx19("span", { children: "Send the link by" }),
+      /* @__PURE__ */ jsxs15(
+        ToggleGroup,
+        {
+          type: "single",
+          size: "sm",
+          variant: "outline",
+          value: linkChannel,
+          onValueChange: (v) => v && setLinkChannel(v),
+          children: [
+            /* @__PURE__ */ jsxs15(ToggleGroupItem, { value: "email", "aria-label": "Link by email", children: [
+              /* @__PURE__ */ jsx19(Mail3, { className: "mr-1 h-3.5 w-3.5" }),
+              " Email"
+            ] }),
+            /* @__PURE__ */ jsxs15(ToggleGroupItem, { value: "sms", "aria-label": "Link by text", children: [
+              /* @__PURE__ */ jsx19(MessageSquare3, { className: "mr-1 h-3.5 w-3.5" }),
+              " Text"
+            ] })
+          ]
+        }
+      ),
+      /* @__PURE__ */ jsxs15("span", { children: [
+        "and the code by ",
+        linkChannel === "email" ? "text" : "email",
+        "."
+      ] })
+    ] }) : email.trim() !== "" ? /* @__PURE__ */ jsx19("p", { className: "text-xs text-amber-700 dark:text-amber-400", children: "Without a mobile number, the link and the code both go by email \u2014 anyone who can read that inbox could open it." }) : null,
+    optionsError ? /* @__PURE__ */ jsxs15("p", { className: "text-xs text-destructive", children: [
+      optionsError,
+      /* @__PURE__ */ jsx19(ErrorAlchemyMenu, { error: optionsError, operation: "Load the secure-link options" })
+    ] }) : null,
+    protectedFields.length > 0 ? /* @__PURE__ */ jsxs15("fieldset", { className: "space-y-2", children: [
+      /* @__PURE__ */ jsxs15("legend", { className: "text-xs font-medium", children: [
+        "Include protected fields from ",
+        resourceName
+      ] }),
+      protectedFields.map((f) => /* @__PURE__ */ jsxs15("div", { className: "flex items-start gap-2", children: [
+        /* @__PURE__ */ jsx19(
+          Checkbox2,
+          {
+            size: "sm",
+            id: `secure-field-${f.key}`,
+            checked: fields.includes(f.key),
+            disabled: !f.available,
+            onCheckedChange: (checked) => setFields(
+              (cur) => checked ? [...cur, f.key] : cur.filter((k) => k !== f.key)
+            )
+          }
+        ),
+        /* @__PURE__ */ jsxs15("div", { children: [
+          /* @__PURE__ */ jsx19(Label4, { htmlFor: `secure-field-${f.key}`, className: "text-sm", children: f.label }),
+          !f.available && f.reason ? /* @__PURE__ */ jsx19("p", { className: "text-xs text-muted-foreground", children: f.reason }) : null
+        ] })
+      ] }, f.key))
+    ] }) : null,
+    /* @__PURE__ */ jsxs15("div", { className: "space-y-1", children: [
+      /* @__PURE__ */ jsx19(Label4, { htmlFor: "secure-note", className: "text-xs", children: "Message (optional, shown once with it)" }),
+      /* @__PURE__ */ jsx19(
+        Textarea,
+        {
+          id: "secure-note",
+          rows: 2,
+          maxLength: 1e3,
+          value: note,
+          onChange: (e) => setNote(e.target.value)
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsxs15(Button9, { className: "w-full", onClick: send, disabled: !canSend, children: [
+      sending ? /* @__PURE__ */ jsx19(Loader210, { className: "mr-2 h-4 w-4 animate-spin" }) : null,
+      "Send secure link"
+    ] }),
+    result ? /* @__PURE__ */ jsxs15(
+      "div",
+      {
+        className: result.tone === "error" ? "rounded-md border border-destructive/30 bg-destructive/10 p-2.5 text-sm text-destructive-ink" : result.tone === "warn" ? "rounded-md border border-amber-500/30 bg-amber-500/10 p-2.5 text-sm" : "rounded-md border border-border bg-muted/40 p-2.5 text-sm",
+        children: [
+          /* @__PURE__ */ jsx19("p", { children: result.text }),
+          result.remedy ? /* @__PURE__ */ jsx19("p", { className: "mt-1 text-xs opacity-80", children: result.remedy }) : null
+        ]
+      }
+    ) : null,
+    sent && sent.length > 0 ? /* @__PURE__ */ jsxs15("div", { children: [
+      /* @__PURE__ */ jsx19("h3", { className: "mb-2 text-sm font-medium", children: "Sent securely" }),
+      /* @__PURE__ */ jsx19("ul", { className: "divide-y divide-border rounded-lg border border-border", children: sent.map((row) => /* @__PURE__ */ jsxs15("li", { className: "flex items-center justify-between gap-2 p-2.5 text-sm", children: [
+        /* @__PURE__ */ jsxs15("div", { className: "min-w-0", children: [
+          /* @__PURE__ */ jsx19("p", { className: "truncate", children: row.recipient_email ?? row.recipient_phone }),
+          /* @__PURE__ */ jsxs15("p", { className: "text-xs text-muted-foreground", children: [
+            STATUS_WORDS[row.status] ?? row.status,
+            row.status === "viewed" && row.viewed_at ? ` ${when(row.viewed_at)}` : "",
+            row.status === "pending" ? ` \xB7 until ${when(row.expires_at)}` : "",
+            row.field_keys.length > 0 ? ` \xB7 with ${row.field_keys.join(", ")}` : ""
+          ] })
+        ] }),
+        row.status === "pending" ? /* @__PURE__ */ jsx19(Button9, { size: "sm", variant: "outline", onClick: () => void turnOff(row), children: "Turn off" }) : null
+      ] }, row.id)) })
+    ] }) : null
+  ] });
+}
+
+// src/react/sheet/ShareModal.tsx
+import { jsx as jsx20, jsxs as jsxs16 } from "react/jsx-runtime";
+function ShareModal({
+  levelWording = "roles",
+  isOpen,
+  onClose,
+  resourceType,
+  resourceId,
+  resourceName,
+  organizationId,
+  resourceNoun,
+  isOwner: isOwnerOverride,
+  outsideShare
+}) {
+  const [activeTab, setActiveTab] = useState16("users");
+  const [outsidePending, setOutsidePending] = useState16(0);
+  const [emailingLink, setEmailingLink] = useState16(false);
+  const [emailSent, setEmailSent] = useState16(false);
+  const { toast } = useToast();
+  const getShareUrl = () => {
+    const path = getResourceSharePath(resourceType, resourceId);
+    if (!path) return null;
+    const baseUrl = appUrl();
+    return `${baseUrl}${path}`;
+  };
+  const handleEmailLink = async () => {
+    const shareUrl = getShareUrl();
+    if (!shareUrl) {
+      toast({
+        title: "No shareable link for this item yet",
+        description: `"${getResourceTypeLabel(resourceType)}" has no page to open. Sharing access still works; only the emailed link is unavailable.`,
+        variant: "destructive"
+      });
+      return;
+    }
+    setEmailingLink(true);
+    try {
+      const data = await sendShareNotice("/sharing/email-link", {
+        resourceType: getResourceTypeLabel(resourceType),
+        resourceName,
+        shareUrl,
+        // object-org-exempt: the saved-link notice is filed with the shared object, else where the person works
+        organizationId: organizationId ?? getActiveOrgId()
+        // org-filter: write-target for the person's own saved-link notice
+      });
+      if (data.success) {
+        setEmailSent(true);
+        toast({
+          title: "Email sent",
+          description: "Link has been emailed to you"
+        });
+        setTimeout(() => setEmailSent(false), 3e3);
+      } else {
+        toast({
+          title: "Failed to send email",
+          description: data.msg || "Please try again",
+          variant: "destructive"
+        });
+      }
+    } catch (error2) {
+      toast({
+        title: "Error",
+        description: "Failed to send email",
+        variant: "destructive"
+      });
+    } finally {
+      setEmailingLink(false);
+    }
+  };
+  const {
+    isOwner: resolvedIsOwner,
+    loading: ownerLoading,
+    error: ownerError
+  } = useIsOwner(resourceType, resourceId);
+  const hasOverride = typeof isOwnerOverride === "boolean";
+  const isOwner = hasOverride ? isOwnerOverride : resolvedIsOwner;
+  const resolvingOwner = !hasOverride && ownerLoading;
+  usePageCapture(
+    () => dialogCapture({
+      title: `Share ${resourceName ?? resourceType}`,
+      route: typeof window !== "undefined" ? window.location.pathname : "",
+      dialog: "Share",
+      subject: { id: resourceId, name: resourceName ?? null },
+      selection: {
+        "Resource type": resourceType,
+        Organization: { id: organizationId ?? null, name: null },
+        Tab: activeTab,
+        "Outside sharing offered": outsideShare ? "yes" : "no"
+      },
+      errors: [ownerError ? `Ownership could not be read: ${String(ownerError)}` : null],
+      sections: [
+        {
+          id: "share-state",
+          title: "Share dialog state",
+          role: "data",
+          value: {
+            is_owner: isOwner,
+            resolving_owner: resolvingOwner,
+            outside_pending_invitations: outsidePending,
+            share_link: getResourceSharePath(resourceType, resourceId),
+            outside_share: outsideShare ?? null
+          }
+        }
+      ]
+    }),
+    { enabled: isOpen }
+  );
+  const grantable = useGrantableLevels(resourceType, resourceId, isOpen);
+  const canShare = isOwner || grantable.maySharePeople;
+  const ownerUnknown = !hasOverride && !ownerLoading && ownerError !== null;
+  const registryEntry = resourceType ? getShareableResource2(resourceType) : void 0;
+  const configError = !resourceId ? "No resource id was supplied to the share dialog." : !registryEntry ? `"${resourceType}" is not a registered shareable resource. Add it to shareable_resource_registry.` : null;
+  const {
+    permissions,
+    isPublic: resourceIsPublic,
+    shownTo,
+    childRecord,
+    setShownTo,
+    organizationDefault,
+    whoCanSee,
+    setWhoCanSee,
+    loading,
+    error,
+    shareWithUser: shareWithUser2,
+    makePublic: makePublic2,
+    revokeAccess: revokeAccess2,
+    updateLevel,
+    refresh,
+    homeOrganizationId
+  } = useSharing(
+    resourceType,
+    resourceId,
+    isOpen && !configError,
+    resourceName,
+    // The object's organization, as the page that opened this resolved it — the share's
+    // notification is filed there and never asks which workspace this is for.
+    organizationId ?? null
+  );
+  const contactsOrganizationId = organizationId ?? homeOrganizationId ?? void 0;
+  const userPermissions = permissions.filter((p) => p.grantedToUserId);
+  const publicPermission = permissions.find((p) => p.isPublic);
+  const resourceLabel = resourceNoun ?? getResourceTypeLabel(resourceType);
+  const manageBlockedNotice = ownerUnknown ? /* @__PURE__ */ jsxs16("div", { className: "p-3 rounded-lg border border-destructive/20 bg-destructive/10 flex items-start gap-2", children: [
+    /* @__PURE__ */ jsx20(AlertTriangle4, { className: "h-4 w-4 text-destructive flex-shrink-0 mt-0.5" }),
+    /* @__PURE__ */ jsxs16("div", { children: [
+      /* @__PURE__ */ jsxs16("p", { className: "text-sm font-medium text-destructive", children: [
+        "Couldn't confirm whether you may change sharing on this",
+        " ",
+        resourceLabel.toLowerCase()
+      ] }),
+      /* @__PURE__ */ jsxs16("p", { className: "text-xs text-destructive/80 mt-0.5", children: [
+        ownerError,
+        " ",
+        /* @__PURE__ */ jsx20(ErrorAlchemyMenu, { error: ownerError })
+      ] })
+    ] })
+  ] }) : /* @__PURE__ */ jsxs16("div", { className: "p-3 rounded-lg border bg-muted/30 flex items-start gap-2", children: [
+    /* @__PURE__ */ jsx20(Lock3, { className: "h-4 w-4 text-muted-foreground flex-shrink-0 mt-0.5" }),
+    /* @__PURE__ */ jsxs16("div", { children: [
+      /* @__PURE__ */ jsxs16("p", { className: "text-sm font-medium", children: [
+        "You need Full access on this ",
+        resourceLabel.toLowerCase(),
+        " to change who can see it"
+      ] }),
+      /* @__PURE__ */ jsx20("p", { className: "text-xs text-muted-foreground mt-0.5", children: "Deciding who else may is what Full access means (View < Comment < Edit < Full access). Ask whoever has it, or an owner of the organization. The Access tab still shows you everyone who can reach this and why." })
+    ] })
+  ] });
+  const shareBlockedNotice = grantable.loading ? null : /* @__PURE__ */ jsxs16("div", { className: "p-3 rounded-lg border bg-muted/30 flex items-start gap-2", children: [
+    /* @__PURE__ */ jsx20(Lock3, { className: "h-4 w-4 text-muted-foreground flex-shrink-0 mt-0.5" }),
+    /* @__PURE__ */ jsx20("p", { className: "text-sm", children: grantable.error ?? grantable.levels.viewer ?? "You need Edit or Full access on this to share it." })
+  ] });
+  return /* @__PURE__ */ jsx20(Dialog, { open: isOpen, onOpenChange: onClose, children: /* @__PURE__ */ jsxs16(DialogContent, { className: "max-w-2xl max-h-[90dvh] flex flex-col", children: [
+    /* @__PURE__ */ jsx20(DialogHeader, { className: "flex-shrink-0", children: /* @__PURE__ */ jsxs16("div", { className: "flex items-start justify-between gap-2 pr-10", children: [
+      /* @__PURE__ */ jsxs16("div", { className: "flex-1 min-w-0", children: [
+        /* @__PURE__ */ jsxs16(DialogTitle, { className: "flex items-center gap-1.5", children: [
+          "Share ",
+          resourceLabel,
+          /* @__PURE__ */ jsx20(PageCaptureButton, { size: "xs" })
+        ] }),
+        /* @__PURE__ */ jsx20(DialogDescription, { asChild: true, children: /* @__PURE__ */ jsx20("div", { className: "text-sm text-muted-foreground", children: /* @__PURE__ */ jsx20(
+          EntityRef,
+          {
+            token: resourceType,
+            id: resourceId,
+            name: resourceName,
+            href: getResourceSharePath(resourceType, resourceId) ?? void 0,
+            showIcon: false
+          }
+        ) }) })
+      ] }),
+      /* @__PURE__ */ jsxs16(
+        Button10,
+        {
+          variant: "outline",
+          size: "sm",
+          onClick: handleEmailLink,
+          disabled: emailingLink,
+          className: "flex-shrink-0",
+          children: [
+            emailingLink ? /* @__PURE__ */ jsx20(Loader211, { className: "h-4 w-4 animate-spin" }) : emailSent ? /* @__PURE__ */ jsx20(CheckCircle3, { className: "h-4 w-4 text-green-500" }) : /* @__PURE__ */ jsx20(Mail4, { className: "h-4 w-4" }),
+            /* @__PURE__ */ jsx20("span", { className: "ml-1.5 hidden sm:inline", children: emailSent ? "Sent!" : "Email link" })
+          ]
+        }
+      )
+    ] }) }),
+    configError && /* @__PURE__ */ jsxs16("div", { className: "flex-1 flex flex-col items-center justify-center gap-2 py-10 px-6 text-center", children: [
+      /* @__PURE__ */ jsx20(AlertTriangle4, { className: "h-8 w-8 text-destructive" }),
+      /* @__PURE__ */ jsx20("p", { className: "text-sm font-medium", children: "Sharing is unavailable" }),
+      /* @__PURE__ */ jsxs16("p", { className: "text-xs text-muted-foreground max-w-sm", children: [
+        configError,
+        /* @__PURE__ */ jsx20(ErrorAlchemyMenu, { error: configError })
+      ] })
+    ] }),
+    !configError && resolvingOwner && /* @__PURE__ */ jsxs16("div", { className: "flex-1 space-y-3 py-4", "aria-busy": "true", children: [
+      /* @__PURE__ */ jsx20(Skeleton2, { className: "h-9 w-full" }),
+      /* @__PURE__ */ jsx20(Skeleton2, { className: "h-24 w-full" }),
+      /* @__PURE__ */ jsx20(Skeleton2, { className: "h-32 w-full" })
+    ] }),
+    !configError && !resolvingOwner && /* @__PURE__ */ jsxs16(
+      Tabs,
+      {
+        value: activeTab,
+        onValueChange: (value) => setActiveTab(value),
+        className: "flex-1 flex flex-col min-h-0",
+        children: [
+          /* @__PURE__ */ jsxs16(TabsList, { fill: true, className: "flex-shrink-0", children: [
+            /* @__PURE__ */ jsxs16(ShareTabsTrigger, { value: "users", children: [
+              /* @__PURE__ */ jsx20(Users5, { className: "w-4 h-4" }),
+              /* @__PURE__ */ jsx20("span", { className: "hidden sm:inline", children: "Users" }),
+              userPermissions.length > 0 && /* @__PURE__ */ jsx20("span", { className: "ml-1 px-1.5 py-0.5 text-xs bg-primary/10 rounded-full", children: userPermissions.length })
+            ] }),
+            /* @__PURE__ */ jsxs16(ShareTabsTrigger, { value: "public", children: [
+              /* @__PURE__ */ jsx20(Globe5, { className: "w-4 h-4" }),
+              /* @__PURE__ */ jsx20("span", { className: "hidden sm:inline", children: "Anyone link" }),
+              publicPermission && /* @__PURE__ */ jsx20("span", { className: "ml-1 px-1.5 py-0.5 text-xs bg-green-500/10 rounded-full", children: "\u2022" })
+            ] }),
+            /* @__PURE__ */ jsxs16(ShareTabsTrigger, { value: "secure", children: [
+              /* @__PURE__ */ jsx20(ShieldCheck2, { className: "w-4 h-4" }),
+              /* @__PURE__ */ jsx20("span", { className: "hidden sm:inline", children: "Secure link" })
+            ] }),
+            /* @__PURE__ */ jsxs16(ShareTabsTrigger, { value: "access", children: [
+              /* @__PURE__ */ jsx20(KeyRound, { className: "w-4 h-4" }),
+              /* @__PURE__ */ jsx20("span", { className: "hidden sm:inline", children: "Access" })
+            ] })
+          ] }),
+          /* @__PURE__ */ jsxs16("div", { className: "dialog-scroll-clear-floating flex-1 mt-3 min-h-0 overflow-y-auto", children: [
+            /* @__PURE__ */ jsxs16(TabsContent, { value: "users", className: "mt-0 space-y-3", children: [
+              /* @__PURE__ */ jsx20(
+                WhoCanSeeThis,
+                {
+                  whoCanSee,
+                  canChange: canShare,
+                  onChoose: setWhoCanSee,
+                  row: {
+                    resourceType,
+                    resourceId,
+                    shownTo,
+                    isPublic: resourceIsPublic,
+                    childRecord,
+                    // A whole Table is a `record` too and is never published to the web (no page
+                    // of its own; only its rows have one): no switch is drawn for it.
+                    ...resourceType === "record" && resourceNoun === "Table" ? { publishable: false } : {},
+                    onSetShownTo: setShownTo,
+                    onPublish: () => makePublic2(),
+                    onStopPublishing: () => revokeAccess2({ isPublic: true })
+                  }
+                }
+              ),
+              /* @__PURE__ */ jsxs16("div", { children: [
+                /* @__PURE__ */ jsx20("h3", { className: "text-sm font-medium mb-2", children: "Current Access" }),
+                !isOwner && !loading && userPermissions.length === 0 ? /* @__PURE__ */ jsx20("p", { className: "rounded-lg border bg-muted/30 p-3 text-xs text-muted-foreground", children: "The list of people with access is visible to the owner and Admins." }) : /* @__PURE__ */ jsx20(
+                  PermissionsList,
+                  {
+                    permissions: userPermissions,
+                    isOwner,
+                    onUpdateLevel: updateLevel,
+                    onRevoke: revokeAccess2,
+                    loading,
+                    alsoPending: {
+                      count: outsidePending,
+                      one: "person outside this organization",
+                      many: "people outside this organization"
+                    }
+                  }
+                ),
+                /* @__PURE__ */ jsx20(
+                  OrgAvailabilityNote,
+                  {
+                    permissions: permissions.filter(
+                      (p) => p.grantedToOrganizationId
+                    ),
+                    organizationDefault
+                  }
+                )
+              ] }),
+              canShare ? /* @__PURE__ */ jsx20(
+                ShareWithUserTab,
+                {
+                  levelWording,
+                  grantable,
+                  onShare: shareWithUser2,
+                  onSuccess: refresh,
+                  resourceType,
+                  resourceId,
+                  ...contactsOrganizationId ? { organizationId: contactsOrganizationId } : {},
+                  alreadySharedUserIds: userPermissions.map((p) => p.grantedToUserId).filter((id) => !!id),
+                  ...outsideShare ? {
+                    grantEveryonePerson: async (person, level) => {
+                      try {
+                        const answer = await shareWithOutsidePerson2(
+                          outsideShare.organizationId,
+                          outsideShare.tableId,
+                          person.email,
+                          level
+                        );
+                        return answer.granted ? { success: true, message: answer.say } : {
+                          success: false,
+                          error: answer.say || "Invited, not yet given access"
+                        };
+                      } catch (err) {
+                        return {
+                          success: false,
+                          error: err instanceof Error ? err.message : "Not shared"
+                        };
+                      }
+                    }
+                  } : {}
+                }
+              ) : shareBlockedNotice,
+              outsideShare ? /* @__PURE__ */ jsx20(
+                OutsideSharePanel,
+                {
+                  organizationId: outsideShare.organizationId,
+                  tableId: outsideShare.tableId,
+                  tableName: resourceName,
+                  onPendingChange: setOutsidePending,
+                  onGranted: refresh
+                }
+              ) : null
+            ] }),
+            /* @__PURE__ */ jsxs16(TabsContent, { value: "access", className: "mt-0", children: [
+              /* @__PURE__ */ jsx20(
+                AccessSummaryPanel,
+                {
+                  entityType: resourceType,
+                  entityId: resourceId,
+                  enabled: activeTab === "access",
+                  refreshToken: permissions.map((p) => `${p.id}:${p.permissionLevel}`).join("|")
+                }
+              ),
+              resourceType === "record" && isOwner ? /* @__PURE__ */ jsx20(WhoCouldSeeOn, { recordId: resourceId }) : null
+            ] }),
+            /* @__PURE__ */ jsx20(TabsContent, { value: "secure", className: "mt-0", children: isOwner ? /* @__PURE__ */ jsx20(
+              SecureLinkPanel,
+              {
+                resourceType,
+                resourceId,
+                resourceName
+              }
+            ) : manageBlockedNotice }),
+            /* @__PURE__ */ jsx20(TabsContent, { value: "public", className: "mt-0", children: /* @__PURE__ */ jsx20(
+              PublicAccessTab,
+              {
+                publicPermission,
+                isOwner,
+                resourceType,
+                resourceId,
+                resourceName
+              }
+            ) })
+          ] })
+        ]
+      }
+    ),
+    error && /* @__PURE__ */ jsxs16("div", { className: "mt-3 p-2.5 bg-destructive/10 border border-destructive/20 rounded-md flex-shrink-0", children: [
+      /* @__PURE__ */ jsx20("p", { className: "text-sm text-destructive", children: error }),
+      /* @__PURE__ */ jsx20(ErrorAlchemyMenu, { error })
+    ] })
+  ] }) });
+}
+export {
+  AccessSummaryPanel,
+  AddEveryoneInOrg,
+  GuestBadge,
+  LANE_CLOSED_SAY,
+  OrgAvailabilityNote,
+  OutsideSharePanel,
+  PermissionBadge,
+  PermissionLevelDescription,
+  PermissionsList,
+  PublicAccessTab,
+  PublicBadge,
+  RowControls,
+  SearchEngineIndexedSwitch,
+  SecureLinkPanel,
+  ShareLinkPanel,
+  ShareModal,
+  ShareWithUserTab,
+  WhoCanSeeThis,
+  WhoCouldSeeOn,
+  anyoneReachWords,
+  configureShareSheetUi,
+  resetShareSheetCache,
+  shareSheetUi,
+  useAccessSummary,
+  useCanAdmin,
+  useCanEdit,
+  useGrantableLevels,
+  useIsOwner,
+  usePermissionCheck,
+  usePermissions,
+  useResourcePermissions,
+  useShare,
+  useSharedWithMe,
+  useSharing,
+  useSharingStatus
+};
+//# sourceMappingURL=react.js.map