@ai-matrx/sharing 0.0.0 → 0.1.1

package/dist/react.cjs

@@ -0,0 +1,4574 @@
+"use client";
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/react/index.ts
+var react_exports = {};
+__export(react_exports, {
+  AccessSummaryPanel: () => AccessSummaryPanel,
+  AddEveryoneInOrg: () => AddEveryoneInOrg,
+  GuestBadge: () => GuestBadge,
+  LANE_CLOSED_SAY: () => LANE_CLOSED_SAY,
+  OrgAvailabilityNote: () => OrgAvailabilityNote,
+  OutsideSharePanel: () => OutsideSharePanel,
+  PermissionBadge: () => PermissionBadge,
+  PermissionLevelDescription: () => PermissionLevelDescription,
+  PermissionsList: () => PermissionsList,
+  PublicAccessTab: () => PublicAccessTab,
+  PublicBadge: () => PublicBadge,
+  RowControls: () => RowControls,
+  SearchEngineIndexedSwitch: () => SearchEngineIndexedSwitch,
+  SecureLinkPanel: () => SecureLinkPanel,
+  ShareLinkPanel: () => ShareLinkPanel,
+  ShareModal: () => ShareModal,
+  ShareWithUserTab: () => ShareWithUserTab,
+  WhoCanSeeThis: () => WhoCanSeeThis,
+  WhoCouldSeeOn: () => WhoCouldSeeOn,
+  anyoneReachWords: () => anyoneReachWords,
+  configureShareSheetUi: () => configureShareSheetUi,
+  resetShareSheetCache: () => resetShareSheetCache,
+  shareSheetUi: () => shareSheetUi,
+  useAccessSummary: () => useAccessSummary,
+  useCanAdmin: () => useCanAdmin,
+  useCanEdit: () => useCanEdit,
+  useGrantableLevels: () => useGrantableLevels,
+  useIsOwner: () => useIsOwner,
+  usePermissionCheck: () => usePermissionCheck,
+  usePermissions: () => usePermissions,
+  useResourcePermissions: () => useResourcePermissions,
+  useShare: () => useShare,
+  useSharedWithMe: () => useSharedWithMe,
+  useSharing: () => useSharing,
+  useSharingStatus: () => useSharingStatus
+});
+module.exports = __toCommonJS(react_exports);
+
+// src/react/sheet/host.tsx
+var import_react = require("react");
+var import_design_system = require("@ai-matrx/design-system");
+var import_clipboard = require("@ai-matrx/kit/clipboard");
+var import_confirm_opener = require("@ai-matrx/kit/confirm-opener");
+var import_core = require("@ai-matrx/sharing/core");
+var import_core2 = require("@ai-matrx/sharing/core");
+var import_vault = require("@ai-matrx/vault");
+var import_core3 = require("@ai-matrx/sharing/core");
+var import_core4 = require("@ai-matrx/sharing/core");
+var import_jsx_runtime = require("react/jsx-runtime");
+function DefaultCopyButtons(props) {
+  const [done, setDone] = (0, import_react.useState)(false);
+  const text = () => {
+    const h = props.human ?? props.text;
+    const v = typeof h === "function" ? h() : h;
+    return Array.isArray(v) ? v.join("\n") : String(v ?? "");
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+    import_design_system.Button,
+    {
+      type: "button",
+      variant: "ghost",
+      size: "sm",
+      className: props.className,
+      onClick: () => {
+        void (0, import_clipboard.copyText)(text()).then(() => {
+          setDone(true);
+          setTimeout(() => setDone(false), 1500);
+        });
+      },
+      children: done ? "Copied" : props.label ? `Copy ${String(props.label).toLowerCase()}` : "Copy"
+    }
+  );
+}
+function DefaultErrorMenu(_props) {
+  return null;
+}
+function DefaultInfoHint(props) {
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { title: String(props.text ?? ""), "aria-label": String(props.label ?? "More info"), className: "cursor-help text-muted-foreground", children: "\u24D8" });
+}
+function DefaultEntityRef(props) {
+  const href = typeof props.href === "string" ? props.href : null;
+  return href ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("a", { href, className: "underline-offset-2 hover:underline", children: String(props.name ?? "") }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: String(props.name ?? "") });
+}
+function DefaultUserAvatar(props) {
+  const u = props.user ?? {};
+  const name = u.displayName ?? u.display_name ?? u.email ?? "?";
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "inline-flex h-7 w-7 items-center justify-center rounded-full bg-muted text-xs font-medium", "aria-label": name, children: name.slice(0, 1).toUpperCase() });
+}
+function DefaultConnectionsNotice(props) {
+  if (!props.error && !(Array.isArray(props.partialFailures) && props.partialFailures.length)) return null;
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "rounded-md border border-destructive/30 bg-destructive/10 p-2 text-xs text-destructive", children: [
+    props.error ? `Contacts could not be read: ${String(props.error)}` : `Some contacts could not be read.`,
+    " ",
+    props.onRetry ? (
+      // ui-exception: moved verbatim from the web share sheet; restyling onto design-system Button is its own UI change
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", className: "underline", onClick: () => props.onRetry(), children: "Retry" })
+    ) : null
+  ] });
+}
+function DefaultUserSearchField(props) {
+  const { onValueChange, onUserSelect: _onUserSelect, value, ...rest } = props;
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_design_system.Input, { ...rest, value: value ?? "", onChange: (e) => onValueChange?.(e.target.value) });
+}
+var ORGS_EMPTY = [];
+var orgsCache = null;
+var orgListeners = /* @__PURE__ */ new Set();
+function useDefaultOrganizations() {
+  const snapshot = (0, import_react.useSyncExternalStore)(
+    (cb) => {
+      orgListeners.add(cb);
+      return () => orgListeners.delete(cb);
+    },
+    () => orgsCache ?? ORGS_EMPTY,
+    () => ORGS_EMPTY
+  );
+  (0, import_react.useEffect)(() => {
+    if (orgsCache) return;
+    orgsCache = ORGS_EMPTY;
+    void import("@ai-matrx/sharing/core").then(async ({ shareClient }) => {
+      const { data, error } = await shareClient().from("organizations").select("id, name");
+      if (error) console.error(`[share] Your organizations could not be read: ${error.message}`);
+      orgsCache = (Array.isArray(data) ? data : []).map((o) => ({ ...o, id: String(o.id), name: String(o.name ?? "") }));
+      orgListeners.forEach((l) => l());
+    }).catch((err) => console.error("[share] Your organizations could not be read:", err));
+  }, []);
+  return snapshot;
+}
+function useDefaultCurrentUserId() {
+  const [id, setId] = (0, import_react.useState)(null);
+  (0, import_react.useEffect)(() => {
+    void import("@ai-matrx/sharing/core").then(async ({ shareClient }) => {
+      const { getClaimsUser } = await import("@ai-matrx/sharing/core");
+      const { data } = await getClaimsUser(shareClient());
+      setId(data.user?.id ?? null);
+    });
+  }, []);
+  return id;
+}
+function useDefaultConnections({ organizationId }) {
+  const [state2, setState] = (0, import_react.useState)({ rows: [], loading: Boolean(organizationId), error: null });
+  const load = (0, import_react.useCallback)(
+    async (fresh = false) => {
+      if (!organizationId) return;
+      setState((s) => ({ ...s, loading: true }));
+      try {
+        const rows = await (0, import_core.readOrganizationMemberRows)(organizationId, { fresh });
+        setState({
+          rows: rows.map((r) => ({
+            user_id: r.user_id,
+            email: r.user_email ?? null,
+            display_name: r.user_display_name ?? null,
+            avatar_url: r.user_avatar_url ?? null,
+            source: "organization"
+          })),
+          loading: false,
+          error: null
+        });
+      } catch (err) {
+        setState({ rows: [], loading: false, error: err instanceof Error ? err.message : String(err) });
+      }
+    },
+    [organizationId]
+  );
+  (0, import_react.useEffect)(() => {
+    void load();
+  }, [load]);
+  return (0, import_react.useMemo)(
+    () => ({ connections: state2.rows, isLoading: state2.loading, error: state2.error, partialFailures: [], refresh: () => load(true) }),
+    [state2, load]
+  );
+}
+var DEFAULTS = {
+  toast: ({ title, description, variant }) => {
+    const text = [title, description].filter((x) => typeof x === "string").join(" \u2014 ");
+    if (variant === "destructive") {
+      console.error(`[share] ${text}`);
+      if (typeof window !== "undefined") window.alert(text);
+    } else console.info(`[share] ${text}`);
+  },
+  useCurrentUserId: useDefaultCurrentUserId,
+  useOrganizations: useDefaultOrganizations,
+  useUserConnections: useDefaultConnections,
+  confirm: (o) => (0, import_confirm_opener.confirm)(o),
+  CopyButtons: DefaultCopyButtons,
+  csvExportItem: () => null,
+  jsonExportItem: () => null,
+  usePageCapture: () => void 0,
+  dialogCapture: (input) => input,
+  PageCaptureButton: () => null,
+  ErrorAlchemyMenu: DefaultErrorMenu,
+  InfoHint: DefaultInfoHint,
+  EntityDoorControls: () => null,
+  EntityRef: DefaultEntityRef,
+  UserAvatarDisplay: DefaultUserAvatar,
+  ConnectionsReadNotice: DefaultConnectionsNotice,
+  UserSearchField: DefaultUserSearchField,
+  vaultIdentity: null,
+  humanLines: (...args) => args.flat().filter(Boolean).map(String).join("\n"),
+  usePortalContainer: () => void 0
+};
+var ui = DEFAULTS;
+function configureShareSheetUi(next) {
+  ui = { ...ui, ...next };
+}
+function shareSheetUi() {
+  return ui;
+}
+function useToast() {
+  return { toast: (o) => ui.toast(o) };
+}
+function copyNotify(message, kind) {
+  ui.toast({ title: message, ...kind === "error" ? { variant: "destructive" } : {} });
+}
+var confirm = (options) => ui.confirm(options);
+var useCurrentUserId = () => ui.useCurrentUserId();
+var useNavTree = () => ({ orgs: ui.useOrganizations() });
+var useOrganizationsToCreateIn = () => ({ orgs: ui.useOrganizations() });
+var useUserConnections = (options) => ui.useUserConnections(options);
+var usePageCapture = (build, options) => ui.usePageCapture(build, options);
+var dialogCapture = (input) => ui.dialogCapture(input);
+var csvExportItem = (...args) => ui.csvExportItem(...args);
+var jsonExportItem = (...args) => ui.jsonExportItem(...args);
+var CopyButtons = (p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ui.CopyButtons, { ...p });
+var PageCaptureButton = (p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ui.PageCaptureButton, { ...p });
+var ErrorAlchemyMenu = (p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ui.ErrorAlchemyMenu, { ...p });
+var InfoHint = (p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ui.InfoHint, { ...p });
+var EntityDoorControls = (p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ui.EntityDoorControls, { ...p });
+var EntityRef = (p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ui.EntityRef, { ...p });
+var UserAvatarDisplay = (p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ui.UserAvatarDisplay, { ...p });
+var ConnectionsReadNotice = (p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ui.ConnectionsReadNotice, { ...p });
+var UserSearchField = (p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ui.UserSearchField, { ...p });
+var defaultIdentity = null;
+var usePortalContainer = () => ui.usePortalContainer();
+var vaultIdentity = () => {
+  if (ui.vaultIdentity) return ui.vaultIdentity;
+  if (!defaultIdentity) {
+    defaultIdentity = (0, import_vault.createSupabaseIdentity)((0, import_core2.shareClient)().auth, {
+      redirectTo: () => window.location.href,
+      onDifferentPerson: async (message) => {
+        window.alert(message);
+      }
+    });
+  }
+  return defaultIdentity;
+};
+var state = { sharingStatus: { byKey: {}, authorityByKey: {} } };
+var listeners = /* @__PURE__ */ new Set();
+function reduce(s, a) {
+  const { key } = a.payload;
+  const byKey = { ...s.byKey };
+  const authorityByKey = { ...s.authorityByKey };
+  switch (a.type) {
+    case "requested":
+      byKey[key] = { visibility: byKey[key]?.visibility ?? null, loading: true, error: null };
+      break;
+    case "loaded":
+      byKey[key] = { visibility: a.payload.visibility, loading: false, error: null };
+      break;
+    case "failed":
+      byKey[key] = { visibility: byKey[key]?.visibility ?? null, loading: false, error: a.payload.error };
+      break;
+    case "authorityRequested":
+      authorityByKey[key] = { isOwner: authorityByKey[key]?.isOwner ?? false, loading: true, error: authorityByKey[key]?.error ?? null };
+      break;
+    case "authorityResolved":
+      authorityByKey[key] = { isOwner: a.payload.isOwner, loading: false, error: a.payload.error };
+      break;
+  }
+  return { byKey, authorityByKey };
+}
+var store = {
+  getState: () => state,
+  dispatch: (a) => {
+    state = { sharingStatus: reduce(state.sharingStatus, a) };
+    listeners.forEach((l) => l());
+    return a;
+  }
+};
+var useAppStore = () => store;
+function useAppSelector(select) {
+  return (0, import_react.useSyncExternalStore)(
+    (cb) => {
+      listeners.add(cb);
+      return () => listeners.delete(cb);
+    },
+    () => select(state),
+    () => select(state)
+  );
+}
+var sharingStatusKey = (resourceType, resourceId) => `${resourceType}:${resourceId}`;
+var sharingStatusRequested = (payload) => ({ type: "requested", payload });
+var sharingStatusLoaded = (payload) => ({ type: "loaded", payload });
+var sharingStatusFailed = (payload) => ({ type: "failed", payload });
+var sharingAuthorityRequested = (payload) => ({ type: "authorityRequested", payload });
+var sharingAuthorityResolved = (payload) => ({ type: "authorityResolved", payload });
+var selectSharingStatus = (s, key) => s.sharingStatus.byKey[key];
+var selectSharingAuthority = (s, key) => s.sharingStatus.authorityByKey[key];
+function resetShareSheetCache() {
+  state = { sharingStatus: { byKey: {}, authorityByKey: {} } };
+  listeners.forEach((l) => l());
+}
+var storeReads = /* @__PURE__ */ new Map();
+function useStoreRead(key, read, options = {}) {
+  const activeKey = options.enabled === false ? null : key;
+  const kept = activeKey ? storeReads.get(activeKey) : void 0;
+  const [s, setS] = (0, import_react.useState)({
+    data: kept?.data,
+    loading: Boolean(activeKey) && !kept,
+    error: null
+  });
+  const refresh = (0, import_react.useCallback)(async () => {
+    if (!activeKey) return;
+    setS((p) => ({ ...p, loading: true }));
+    try {
+      const data = await read();
+      storeReads.set(activeKey, { data, at: Date.now() });
+      setS({ data, loading: false, error: null });
+    } catch (err) {
+      setS((p) => ({ data: p.data, loading: false, error: err instanceof Error ? err.message : String(err) }));
+    }
+  }, [activeKey]);
+  (0, import_react.useEffect)(() => {
+    if (!activeKey) return;
+    const k = storeReads.get(activeKey);
+    const stale = !k || options.staleAfterMs !== void 0 && Date.now() - k.at > options.staleAfterMs;
+    if (stale) void refresh();
+    else setS({ data: k.data, loading: false, error: null });
+  }, [activeKey, refresh]);
+  return { data: s.data, isLoading: s.loading, isError: s.error !== null, error: s.error, refresh };
+}
+function useRefreshWhenChanged(token, refresh) {
+  const [first, setFirst] = (0, import_react.useState)(true);
+  (0, import_react.useEffect)(() => {
+    if (first) {
+      setFirst(false);
+      return;
+    }
+    void refresh();
+  }, [token]);
+}
+var useAppDispatch = () => import_core4.passThroughDispatch;
+
+// src/react/sheet/ShareModal.tsx
+var import_core34 = require("@ai-matrx/sharing/core");
+var import_react17 = require("react");
+
+// src/react/sheet/ui/dialog.tsx
+var import_design_system2 = require("@ai-matrx/design-system");
+
+// src/react/sheet/ShareModal.tsx
+var import_design_system33 = require("@ai-matrx/design-system");
+var import_controls11 = require("@ai-matrx/design-system/controls");
+
+// src/react/sheet/ui/share-tabs-trigger.tsx
+var React = __toESM(require("react"), 1);
+var import_controls = require("@ai-matrx/design-system/controls");
+var import_jsx_runtime2 = require("react/jsx-runtime");
+function focusOnClick(onClick) {
+  return (event) => {
+    onClick?.(event);
+    if (event.defaultPrevented) return;
+    const trigger = event.currentTarget;
+    if (trigger.disabled) return;
+    if (document.activeElement !== trigger) trigger.focus();
+  };
+}
+var ShareTabsTrigger = React.forwardRef(
+  ({ onClick, ...props }, ref) => /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_controls.TabsTrigger, { ...props, ref, onClick: focusOnClick(onClick) })
+);
+ShareTabsTrigger.displayName = "ShareTabsTrigger";
+
+// src/react/sheet/ShareModal.tsx
+var import_design_system34 = require("@ai-matrx/design-system");
+var import_lucide_react14 = require("lucide-react");
+
+// src/react/permissionHooks.ts
+var import_react2 = require("react");
+var import_core5 = require("@ai-matrx/sharing/core");
+var import_core6 = require("@ai-matrx/sharing/core");
+function usePermissions(resourceType, resourceId, enabled = true) {
+  const [permissions, setPermissions] = (0, import_react2.useState)([]);
+  const [loading, setLoading] = (0, import_react2.useState)(false);
+  const [error, setError] = (0, import_react2.useState)(null);
+  const fetchPermissions = (0, import_react2.useCallback)(async () => {
+    if (!resourceType || !resourceId || !enabled) return;
+    setLoading(true);
+    setError(null);
+    try {
+      const data = await (0, import_core6.listPermissions)(resourceType, resourceId);
+      setPermissions(data);
+    } catch (err) {
+      console.error("Error fetching permissions:", err);
+      setError((0, import_core5.extractErrorMessage)(err) || "Failed to fetch permissions");
+    } finally {
+      setLoading(false);
+    }
+  }, [resourceType, resourceId, enabled]);
+  (0, import_react2.useEffect)(() => {
+    if (enabled) {
+      fetchPermissions();
+    }
+  }, [fetchPermissions, enabled]);
+  return {
+    permissions,
+    loading,
+    error,
+    refresh: fetchPermissions
+  };
+}
+function useResourcePermissions(resourceType, resourceId) {
+  const [permissions, setPermissions] = (0, import_react2.useState)([]);
+  const [loading, setLoading] = (0, import_react2.useState)(true);
+  const [error, setError] = (0, import_react2.useState)(null);
+  const fetchPermissions = (0, import_react2.useCallback)(async () => {
+    if (!resourceType || !resourceId) return;
+    setLoading(true);
+    setError(null);
+    try {
+      const data = await (0, import_core6.getResourcePermissions)(resourceType, resourceId);
+      setPermissions(data);
+    } catch (err) {
+      console.error("Error fetching resource permissions:", err);
+      setError(
+        (0, import_core5.extractErrorMessage)(err) || "Failed to fetch resource permissions"
+      );
+    } finally {
+      setLoading(false);
+    }
+  }, [resourceType, resourceId]);
+  (0, import_react2.useEffect)(() => {
+    fetchPermissions();
+  }, [fetchPermissions]);
+  return {
+    permissions,
+    loading,
+    error,
+    refresh: fetchPermissions
+  };
+}
+function usePermissionCheck(options) {
+  const [result, setResult] = (0, import_react2.useState)({
+    hasAccess: false,
+    isOwner: false
+  });
+  const [loading, setLoading] = (0, import_react2.useState)(true);
+  (0, import_react2.useEffect)(() => {
+    const check = async () => {
+      setLoading(true);
+      const checkResult = await (0, import_core6.checkPermission)(options);
+      setResult(checkResult);
+      setLoading(false);
+    };
+    if (options.resourceType && options.resourceId) {
+      check();
+    }
+  }, [options.resourceType, options.resourceId, options.requiredLevel]);
+  return {
+    ...result,
+    loading
+  };
+}
+function useCanEdit(resourceType, resourceId) {
+  const { hasAccess, loading } = usePermissionCheck({
+    resourceType,
+    resourceId,
+    requiredLevel: "editor"
+  });
+  return {
+    canEdit: hasAccess,
+    loading
+  };
+}
+function useCanAdmin(resourceType, resourceId) {
+  const { hasAccess, loading } = usePermissionCheck({
+    resourceType,
+    resourceId,
+    requiredLevel: "admin"
+  });
+  return {
+    canAdmin: hasAccess,
+    loading
+  };
+}
+function useIsOwner(resourceType, resourceId) {
+  const store2 = useAppStore();
+  const key = sharingStatusKey(resourceType, resourceId);
+  const entry = useAppSelector((state2) => selectSharingAuthority(state2, key));
+  const asked = Boolean(resourceType && resourceId);
+  const known = entry !== void 0;
+  (0, import_react2.useEffect)(() => {
+    if (known || !asked) return;
+    if (selectSharingAuthority(store2.getState(), key)) return;
+    store2.dispatch(sharingAuthorityRequested({ key }));
+    void (0, import_core6.resolveSharingAuthority)(resourceType, resourceId).then((result) => {
+      store2.dispatch(sharingAuthorityResolved({ key, isOwner: result.isOwner, error: result.error }));
+    });
+  }, [known, asked, key]);
+  if (!asked) return { isOwner: false, loading: false, error: null };
+  return {
+    isOwner: entry?.isOwner ?? false,
+    loading: entry ? entry.loading : true,
+    error: entry?.error ?? null
+  };
+}
+function useSharing(resourceType, resourceId, enabled = true, resourceName, organizationId) {
+  const [loading, setLoading] = (0, import_react2.useState)(false);
+  const [error, setError] = (0, import_react2.useState)(null);
+  const [rowState, setRowState] = (0, import_react2.useState)({
+    isPublic: false
+  });
+  const { permissions, refresh: refreshPermissions } = usePermissions(
+    resourceType,
+    resourceId,
+    enabled
+  );
+  const refreshRowState = (0, import_react2.useCallback)(async () => {
+    if (!resourceType || !resourceId || !enabled) return;
+    try {
+      const v = await (0, import_core6.getResourceVisibility)(resourceType, resourceId);
+      setRowState(v);
+    } catch (err) {
+      console.error("Error fetching the record's row controls:", err);
+      setError((0, import_core5.extractErrorMessage)(err));
+    }
+  }, [resourceType, resourceId, enabled]);
+  const refresh = (0, import_react2.useCallback)(async () => {
+    await Promise.all([refreshPermissions(), refreshRowState()]);
+  }, [refreshPermissions, refreshRowState]);
+  (0, import_react2.useEffect)(() => {
+    if (enabled) {
+      void refreshRowState();
+    }
+  }, [enabled, refreshRowState]);
+  const handleShareWithUser = (0, import_react2.useCallback)(
+    async (userId, permissionLevel) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await (0, import_core6.shareWithUser)({
+          resourceType,
+          resourceId,
+          userId,
+          permissionLevel,
+          resourceName,
+          organizationId: organizationId ?? null
+        });
+        if (!result.success) {
+          setError(result.error || "Failed to share");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = (0, import_core5.extractErrorMessage)(err) || "Failed to share with user";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, resourceName, organizationId, refresh]
+  );
+  const handleMakePublic = (0, import_react2.useCallback)(
+    async (permissionLevel = "viewer") => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await (0, import_core6.makePublic)({
+          resourceType,
+          resourceId,
+          permissionLevel
+        });
+        if (!result.success) {
+          setError(result.error || "Failed to make public");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = (0, import_core5.extractErrorMessage)(err) || "Failed to make public";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const handleRevokeAccess = (0, import_react2.useCallback)(
+    async (options) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await (0, import_core6.revokeAccess)({
+          resourceType,
+          resourceId,
+          ...options
+        });
+        if (!result.success) {
+          setError(result.error || "Failed to revoke access");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = (0, import_core5.extractErrorMessage)(err) || "Failed to revoke access";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const handleRevokeOrgAccess = (0, import_react2.useCallback)(
+    async (organizationId2) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await (0, import_core6.revokeOrgAccess)(
+          resourceType,
+          resourceId,
+          organizationId2
+        );
+        if (!result.success) {
+          setError(result.error || "Failed to revoke org access");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = (0, import_core5.extractErrorMessage)(err) || "Failed to revoke org access";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const handleUpdateLevel = (0, import_react2.useCallback)(
+    async (options, newLevel) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await (0, import_core6.updatePermissionLevel)({
+          resourceType,
+          resourceId,
+          ...options,
+          newLevel
+        });
+        if (!result.success) {
+          setError(result.error || "Failed to update permission");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = (0, import_core5.extractErrorMessage)(err) || "Failed to update permission";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const handleSetShownTo = (0, import_react2.useCallback)(
+    async (next) => {
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await (0, import_core6.setResourceShownTo)(resourceType, resourceId, next);
+        if (!result.success) {
+          setError(result.error || 'Could not change "Shown to"');
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = (0, import_core5.extractErrorMessage)(err) || 'Could not change "Shown to"';
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [resourceType, resourceId, refresh]
+  );
+  const whoCanSee = rowState.whoCanSee ? {
+    ...rowState.whoCanSee,
+    organizationId: rowState.whoCanSee.organizationId ?? organizationId ?? null
+  } : null;
+  const handleSetWhoCanSee = (0, import_react2.useCallback)(
+    async (choice) => {
+      if (!whoCanSee) {
+        return { success: false, error: "This item has no lane to choose." };
+      }
+      if (!whoCanSee.organizationId) {
+        return {
+          success: false,
+          error: "This item's organization could not be read, so its lane cannot be changed."
+        };
+      }
+      setLoading(true);
+      setError(null);
+      try {
+        const result = await (0, import_core6.setStoreLane)(whoCanSee.organizationId, resourceId, choice);
+        if (!result.success) {
+          setError(result.error || "Failed to change who can see this");
+          return result;
+        }
+        await refresh();
+        return result;
+      } catch (err) {
+        const errorMessage = (0, import_core5.extractErrorMessage)(err) || "Failed to change who can see this";
+        setError(errorMessage);
+        return { success: false, error: errorMessage };
+      } finally {
+        setLoading(false);
+      }
+    },
+    [whoCanSee, resourceId, refresh]
+  );
+  return {
+    permissions,
+    /** Published to the web (or the card's own publish). */
+    isPublic: rowState.isPublic,
+    /**
+     * "Shown to" — undefined when the type does not carry it (Private, Confidential, child, or a
+     * table without the column); null when the type's default applies.
+     */
+    shownTo: rowState.shownTo,
+    /** A child record (a file attached to a chat): no row control of its own. */
+    childRecord: rowState.childRecord === true,
+    /** Membership alone reaches it — said under Current Access. The record store's door names it. */
+    organizationDefault: rowState.organizationDefault ?? null,
+    whoCanSee,
+    /** The thing's own organization, read off its row; null when unknown. */
+    homeOrganizationId: rowState.homeOrganizationId ?? null,
+    setWhoCanSee: handleSetWhoCanSee,
+    loading,
+    error,
+    shareWithUser: handleShareWithUser,
+    makePublic: handleMakePublic,
+    setShownTo: handleSetShownTo,
+    revokeAccess: handleRevokeAccess,
+    revokeOrgAccess: handleRevokeOrgAccess,
+    updateLevel: handleUpdateLevel,
+    refresh,
+    refreshRowState
+  };
+}
+function useSharedWithMe(resourceType) {
+  const [permissions, setPermissions] = (0, import_react2.useState)([]);
+  const [loading, setLoading] = (0, import_react2.useState)(true);
+  const [error, setError] = (0, import_react2.useState)(null);
+  const fetchShared = (0, import_react2.useCallback)(async () => {
+    setLoading(true);
+    setError(null);
+    try {
+      const data = await (0, import_core6.getSharedWithMe)(resourceType);
+      setPermissions(data);
+    } catch (err) {
+      console.error("Error fetching shared resources:", err);
+      setError((0, import_core5.extractErrorMessage)(err) || "Failed to fetch shared resources");
+    } finally {
+      setLoading(false);
+    }
+  }, [resourceType]);
+  (0, import_react2.useEffect)(() => {
+    fetchShared();
+  }, [fetchShared]);
+  return {
+    permissions,
+    loading,
+    error,
+    refresh: fetchShared
+  };
+}
+function useSharingStatus(resourceType, resourceId, enabled = true) {
+  const store2 = useAppStore();
+  const key = sharingStatusKey(resourceType, resourceId);
+  const entry = useAppSelector((state2) => selectSharingStatus(state2, key));
+  const refresh = async () => {
+    if (!resourceType || !resourceId || !enabled) return;
+    store2.dispatch(sharingStatusRequested({ key }));
+    try {
+      const v = await (0, import_core6.getResourceVisibility)(resourceType, resourceId);
+      store2.dispatch(sharingStatusLoaded({ key, visibility: v }));
+    } catch (err) {
+      console.error("Error fetching sharing status:", err);
+      store2.dispatch(sharingStatusFailed({ key, error: (0, import_core5.extractErrorMessage)(err) }));
+    }
+  };
+  const known = entry !== void 0;
+  (0, import_react2.useEffect)(() => {
+    if (known || !resourceType || !resourceId || !enabled) return;
+    if (selectSharingStatus(store2.getState(), key)) return;
+    void refresh();
+  }, [known, key, enabled]);
+  return {
+    isPublic: entry?.visibility?.isPublic ?? false,
+    loading: entry ? entry.loading : enabled,
+    error: entry?.error ?? null,
+    refresh
+  };
+}
+
+// src/react/sheet/useGrantableLevels.ts
+var import_react3 = require("react");
+var import_core7 = require("@ai-matrx/sharing/core");
+var NOTHING = { loading: true, error: null, levels: {}, outside: null, maySharePeople: false };
+function useGrantableLevels(resourceType, resourceId, enabled, refreshKey) {
+  const [state2, setState] = (0, import_react3.useState)(NOTHING);
+  (0, import_react3.useEffect)(() => {
+    if (!enabled || !resourceType || !resourceId) return;
+    let cancelled = false;
+    const supabase = (0, import_core7.createClient)();
+    const iam = supabase.schema("iam");
+    void iam.rpc("my_grantable_levels", { p_resource_type: resourceType, p_resource_id: resourceId }).then(({ data, error }) => {
+      if (cancelled) return;
+      if (error) {
+        setState({ ...NOTHING, loading: false, error: error.message });
+        return;
+      }
+      const a = data ?? {};
+      const levels = a.levels ?? {};
+      setState({
+        loading: false,
+        error: null,
+        levels,
+        outside: a.outside ?? null,
+        maySharePeople: Object.values(levels).some((why) => why === null)
+      });
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [enabled, resourceType, resourceId, refreshKey]);
+  return state2;
+}
+
+// src/react/sheet/ShareModal.tsx
+var import_core35 = require("@ai-matrx/sharing/core");
+var import_design_system35 = require("@ai-matrx/design-system");
+var import_lucide_react15 = require("lucide-react");
+
+// src/react/sheet/PermissionsList.tsx
+var import_react4 = require("react");
+var import_design_system5 = require("@ai-matrx/design-system");
+var import_design_system6 = require("@ai-matrx/design-system");
+var import_cn = require("@ai-matrx/design-system/cn");
+var import_design_system7 = require("@ai-matrx/design-system");
+var import_controls2 = require("@ai-matrx/design-system/controls");
+var import_lucide_react2 = require("lucide-react");
+
+// src/react/sheet/PermissionBadge.tsx
+var import_design_system3 = require("@ai-matrx/design-system");
+var import_lucide_react = require("lucide-react");
+var import_jsx_runtime3 = require("react/jsx-runtime");
+function PermissionBadge({
+  level,
+  variant = "default",
+  showIcon = false
+}) {
+  const config = {
+    owner: {
+      label: "Owner",
+      className: "bg-yellow-100 text-yellow-800 dark:bg-yellow-900 dark:text-yellow-200 border-yellow-300",
+      icon: import_lucide_react.Crown
+    },
+    admin: {
+      label: "Full access",
+      className: "bg-red-100 text-red-800 dark:bg-red-900 dark:text-red-200 border-red-300",
+      icon: import_lucide_react.Shield
+    },
+    commenter: {
+      label: "Comment",
+      className: "bg-purple-100 text-purple-800 dark:bg-purple-900 dark:text-purple-200 border-purple-300",
+      icon: import_lucide_react.MessageSquare
+    },
+    editor: {
+      label: "Edit",
+      className: "bg-orange-100 text-orange-800 dark:bg-orange-900 dark:text-orange-200 border-orange-300",
+      icon: import_lucide_react.Users
+    },
+    viewer: {
+      label: "View",
+      className: "bg-blue-100 text-blue-800 dark:bg-blue-900 dark:text-blue-200 border-blue-300",
+      icon: import_lucide_react.Eye
+    }
+  };
+  const shown = level === "edit_content" ? "editor" : level;
+  const { label, className, icon: Icon } = config[shown];
+  if (variant === "compact") {
+    return /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_design_system3.Badge, { className: `${className} text-xs px-2 py-0.5`, children: [
+      showIcon && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Icon, { className: "w-3 h-3 mr-1" }),
+      label
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_design_system3.Badge, { className: `${className} px-3 py-1`, children: [
+    showIcon && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Icon, { className: "w-3.5 h-3.5 mr-1.5" }),
+    label
+  ] });
+}
+function PublicBadge({
+  variant = "default"
+}) {
+  const className = "bg-green-100 text-green-800 dark:bg-green-900 dark:text-green-200 border-green-300";
+  if (variant === "compact") {
+    return /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_design_system3.Badge, { className: `${className} text-xs px-2 py-0.5`, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_lucide_react.Globe, { className: "w-3 h-3 mr-1" }),
+      "Public"
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_design_system3.Badge, { className: `${className} px-3 py-1`, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_lucide_react.Globe, { className: "w-3.5 h-3.5 mr-1.5" }),
+    "Public"
+  ] });
+}
+function PermissionLevelDescription({
+  level
+}) {
+  const descriptions = {
+    viewer: "Can view",
+    commenter: "Can view and comment",
+    editor: "Can view and edit values and content",
+    admin: "Full access: also structure and sharing"
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("span", { className: "text-xs text-muted-foreground", children: descriptions[level] });
+}
+function GuestBadge() {
+  return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_design_system3.Badge, { variant: "outline", className: "shrink-0 px-1.5 py-0 text-[10px] leading-4 text-muted-foreground", "data-guest-marker": "", children: "Guest" });
+}
+
+// src/react/sheet/PermissionsList.tsx
+var import_core8 = require("@ai-matrx/sharing/core");
+var import_core9 = require("@ai-matrx/sharing/core");
+
+// src/react/sheet/ui/alert-dialog.tsx
+var import_design_system4 = require("@ai-matrx/design-system");
+
+// src/react/sheet/PermissionsList.tsx
+var import_jsx_runtime4 = (
+  // ui-exception: moved verbatim from the web share sheet; restyling onto design-system Button is its own UI change
+  require("react/jsx-runtime")
+);
+var GRANT_PREVIEW = 12;
+var EMPTY_STATE_MIN_HEIGHT = "min-h-[11rem]";
+function pendingSentence({
+  count,
+  one,
+  many
+}) {
+  return count === 1 ? `One ${one} is invited below and has not joined yet \u2014 they get access the moment they follow their link.` : `${count} ${many} are invited below and have not joined yet \u2014 each gets access the moment they follow their link.`;
+}
+function ShowAllToggle({
+  total,
+  preview,
+  showingAll,
+  onToggle
+}) {
+  if (total <= preview) return null;
+  return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+    "button",
+    {
+      type: "button",
+      className: "text-[11px] text-muted-foreground underline-offset-2 hover:text-foreground ",
+      onClick: onToggle,
+      children: showingAll ? `top ${preview}` : `all ${total.toLocaleString()}`
+    }
+  );
+}
+function PermissionsList({
+  permissions,
+  isOwner,
+  onUpdateLevel,
+  onRevoke,
+  loading = false,
+  copy,
+  listLabel = "Current access",
+  alsoPending
+}) {
+  const [updatingId, setUpdatingId] = (0, import_react4.useState)(null);
+  const [revokingId, setRevokingId] = (0, import_react4.useState)(null);
+  const [showAll, setShowAll] = (0, import_react4.useState)(false);
+  const [confirmRevoke, setConfirmRevoke] = (0, import_react4.useState)({ open: false, permission: null });
+  const context = copy ?? {
+    resourceType: permissions[0]?.resourceType ?? "unknown",
+    resourceId: permissions[0]?.resourceId ?? "unknown",
+    surface: listLabel,
+    kpis: (0, import_core8.accessKpis)({
+      permissions,
+      isPublic: permissions.some((p) => p.isPublic),
+      // What the list actually renders — owner controls are on screen or not.
+      viewerIsOwner: isOwner
+    })
+  };
+  const location = (0, import_core8.sharingLocation)(context.surface);
+  const resourceAttributes = {
+    resource_type: context.resourceType,
+    resource_id: context.resourceId,
+    resource_name: context.resourceName ?? null
+  };
+  if (loading && permissions.length === 0) {
+    return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+      "div",
+      {
+        className: `flex items-center justify-center ${EMPTY_STATE_MIN_HEIGHT}`,
+        "aria-busy": "true",
+        "data-grants-reserved": "",
+        children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_lucide_react2.Loader2, { className: "w-6 h-6 animate-spin text-muted-foreground" })
+      }
+    );
+  }
+  if (permissions.length === 0) {
+    return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(
+      "div",
+      {
+        className: `group flex flex-col items-center justify-center text-center py-6 text-muted-foreground ${EMPTY_STATE_MIN_HEIGHT}`,
+        "data-grants-empty": "",
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_lucide_react2.Lock, { className: "w-10 h-10 mb-1.5 opacity-20" }),
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("p", { className: "text-sm", children: alsoPending && alsoPending.count > 0 ? import_core8.NO_GRANTS_YET_HEADLINE : import_core8.NO_GRANTS_HEADLINE }),
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("p", { className: "text-xs mt-0.5", children: import_core8.NO_GRANTS_DETAIL }),
+          alsoPending && alsoPending.count > 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("p", { className: "text-xs mt-0.5", "data-testid": "grants-also-pending", children: pendingSentence(alsoPending) }) : null,
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { className: "mt-1.5 flex justify-center opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+            CopyButtons,
+            {
+              size: "xs",
+              label: `${listLabel} (no grants)`,
+              human: () => (0, import_core8.humanGrantList)([], { surface: context.surface }),
+              agent: () => ({
+                kind: "access-grants",
+                location,
+                description: `The "${listLabel}" grant list, which is empty: ${import_core8.NO_GRANTS_HEADLINE} \u2014 ${import_core8.NO_GRANTS_DETAIL}.`,
+                data: {
+                  list: listLabel,
+                  rendered_empty_state: {
+                    headline: import_core8.NO_GRANTS_HEADLINE,
+                    detail: import_core8.NO_GRANTS_DETAIL
+                  },
+                  grants: [],
+                  scope_note: import_core8.GRANT_LIST_SCOPE_NOTE,
+                  kpis: context.kpis
+                },
+                summary: (0, import_core8.humanGrantList)([], { surface: context.surface }),
+                attributes: {
+                  ...context.kpis,
+                  ...resourceAttributes,
+                  list: listLabel,
+                  count: 0
+                }
+              })
+            }
+          ) })
+        ]
+      }
+    );
+  }
+  const handleUpdateLevel = async (permission, newLevel) => {
+    if (newLevel === permission.permissionLevel) return;
+    setUpdatingId(permission.id);
+    try {
+      await onUpdateLevel(
+        {
+          userId: permission.grantedToUserId || void 0,
+          organizationId: permission.grantedToOrganizationId || void 0,
+          isPublic: permission.isPublic || void 0
+        },
+        newLevel
+      );
+    } finally {
+      setUpdatingId(null);
+    }
+  };
+  const handleRevoke = async (permission) => {
+    setRevokingId(permission.id);
+    try {
+      await onRevoke({
+        userId: permission.grantedToUserId || void 0,
+        organizationId: permission.grantedToOrganizationId || void 0,
+        isPublic: permission.isPublic || void 0
+      });
+    } finally {
+      setRevokingId(null);
+      setConfirmRevoke({ open: false, permission: null });
+    }
+  };
+  const getPermissionLabel = import_core8.granteeLabel;
+  const getPermissionSecondaryLabel = import_core8.granteeSecondaryLabel;
+  const getPermissionIcon = (permission) => {
+    if (permission.isPublic) return import_lucide_react2.Globe;
+    if (permission.grantedToOrganization) return import_lucide_react2.Building2;
+    return import_lucide_react2.Mail;
+  };
+  const visiblePermissions = showAll ? permissions : permissions.slice(0, GRANT_PREVIEW);
+  const listHuman = () => (0, import_core8.humanGrantList)(permissions, {
+    surface: context.surface,
+    shown: visiblePermissions.length
+  });
+  return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(
+    "div",
+    {
+      className: (0, import_cn.cn)("space-y-1 transition-opacity", loading && "opacity-60"),
+      "aria-busy": loading,
+      "data-grants-busy": loading ? "true" : "false",
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "flex items-center justify-end gap-1", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+            ShowAllToggle,
+            {
+              total: permissions.length,
+              preview: GRANT_PREVIEW,
+              showingAll: showAll,
+              onToggle: () => setShowAll((current) => !current)
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+            CopyButtons,
+            {
+              size: "xs",
+              label: `${listLabel} (${permissions.length} grant${permissions.length === 1 ? "" : "s"})`,
+              human: listHuman,
+              json: () => permissions,
+              agent: () => ({
+                kind: "access-grants",
+                location,
+                description: `All ${permissions.length} direct grant(s) in the "${listLabel}" list. ${import_core8.GRANT_LIST_SCOPE_NOTE}`,
+                data: {
+                  list: listLabel,
+                  grants: permissions.map((permission) => ({
+                    grantee: (0, import_core8.granteeLabel)(permission),
+                    grantee_email: (0, import_core8.granteeSecondaryLabel)(permission),
+                    grantee_type: (0, import_core8.granteeKind)(permission),
+                    level_shown: (0, import_core8.grantLevelLabel)(permission),
+                    can_manage_here: isOwner,
+                    raw: permission
+                  })),
+                  scope_note: import_core8.GRANT_LIST_SCOPE_NOTE,
+                  kpis: context.kpis,
+                  rows_on_screen: visiblePermissions.length,
+                  rows_total: permissions.length
+                },
+                summary: listHuman(),
+                attributes: {
+                  ...context.kpis,
+                  ...resourceAttributes,
+                  list: listLabel,
+                  count: permissions.length,
+                  shown: visiblePermissions.length
+                }
+              }),
+              export: {
+                items: [
+                  jsonExportItem(() => permissions, "JSON (all grants)"),
+                  csvExportItem(
+                    () => (0, import_core8.grantCsvRows)(permissions),
+                    "CSV (all grants)"
+                  )
+                ]
+              }
+            }
+          )
+        ] }),
+        visiblePermissions.map((permission) => {
+          const Icon = getPermissionIcon(permission);
+          const isUpdating = updatingId === permission.id;
+          const isRevoking = revokingId === permission.id;
+          const secondaryLabel = getPermissionSecondaryLabel(permission);
+          return (
+            // `group` is what reveals the door controls below on hover — without
+            // it EntityDoorControls renders at opacity-0 and the door is
+            // invisible, which is the failure this campaign has hit four times.
+            /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_design_system6.Card, { size: "sm", className: "group px-2 py-2", children: /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "flex items-center gap-2", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "flex items-center gap-2 flex-1 min-w-0", children: [
+                permission.grantedToUser && !permission.isPublic ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+                  UserAvatarDisplay,
+                  {
+                    user: permission.grantedToUser,
+                    size: "xs",
+                    className: "flex-shrink-0"
+                  }
+                ) : /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { className: "flex items-center justify-center w-6 h-6 rounded-full bg-primary/10 flex-shrink-0", children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Icon, { className: "w-3 h-3 text-primary" }) }),
+                /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "flex-1 min-w-0 flex items-center gap-1.5", children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("p", { className: "text-sm font-semibold truncate leading-none", children: getPermissionLabel(permission) }),
+                  permission.grantedToUser?.isGuest && !permission.isPublic ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(GuestBadge, {}) : null,
+                  permission.grantedToOrganization && /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+                    EntityDoorControls,
+                    {
+                      token: "organization",
+                      id: permission.grantedToOrganization.id,
+                      name: permission.grantedToOrganization.name,
+                      className: "shrink-0"
+                    }
+                  ),
+                  secondaryLabel && /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("p", { className: "text-[11px] text-muted-foreground truncate leading-none", children: secondaryLabel })
+                ] })
+              ] }),
+              /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "flex items-center gap-1 flex-shrink-0", children: [
+                /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+                  CopyButtons,
+                  {
+                    size: "xs",
+                    label: `Grant \u2014 ${(0, import_core8.granteeLabel)(permission)}`,
+                    human: () => (0, import_core8.humanGrantRow)(permission),
+                    json: () => permission,
+                    agent: () => ({
+                      kind: "access-grant",
+                      location,
+                      description: `One direct access grant on this resource: ${(0, import_core8.granteeLabel)(
+                        permission
+                      )} \xB7 ${(0, import_core8.grantLevelLabel)(permission)}.`,
+                      data: {
+                        grantee: (0, import_core8.granteeLabel)(permission),
+                        grantee_email: (0, import_core8.granteeSecondaryLabel)(permission),
+                        grantee_type: (0, import_core8.granteeKind)(permission),
+                        level_shown: (0, import_core8.grantLevelLabel)(permission),
+                        can_manage_here: isOwner,
+                        raw: permission,
+                        scope_note: import_core8.GRANT_LIST_SCOPE_NOTE,
+                        kpis: context.kpis
+                      },
+                      summary: (0, import_core8.humanGrantRow)(permission),
+                      attributes: {
+                        ...context.kpis,
+                        ...resourceAttributes,
+                        list: listLabel,
+                        grant_id: permission.id,
+                        grantee_type: (0, import_core8.granteeKind)(permission),
+                        level: permission.permissionLevel
+                      }
+                    })
+                  }
+                ) }),
+                isOwner ? /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(
+                    import_design_system7.Select,
+                    {
+                      value: permission.permissionLevel,
+                      onValueChange: (value) => handleUpdateLevel(permission, value),
+                      disabled: isUpdating || isRevoking,
+                      children: [
+                        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_controls2.SelectTrigger, { className: "w-[140px]", children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_design_system7.SelectValue, {}) }),
+                        /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_design_system7.SelectContent, { children: [
+                          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_design_system7.SelectItem, { value: "viewer", title: import_core9.PERMISSION_LEVEL_HINTS.viewer, children: import_core9.PERMISSION_LEVEL_SHORT_LABELS.viewer }),
+                          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_design_system7.SelectItem, { value: "commenter", title: import_core9.PERMISSION_LEVEL_HINTS.commenter, children: import_core9.PERMISSION_LEVEL_SHORT_LABELS.commenter }),
+                          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_design_system7.SelectItem, { value: "editor", title: import_core9.PERMISSION_LEVEL_HINTS.editor, children: import_core9.PERMISSION_LEVEL_SHORT_LABELS.editor }),
+                          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_design_system7.SelectItem, { value: "admin", title: import_core9.PERMISSION_LEVEL_HINTS.admin, children: import_core9.PERMISSION_LEVEL_SHORT_LABELS.admin })
+                        ] })
+                      ]
+                    }
+                  ),
+                  /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+                    import_design_system5.Button,
+                    {
+                      variant: "ghost",
+                      size: "icon",
+                      className: "h-7 w-7",
+                      "aria-label": `Revoke access for ${getPermissionLabel(permission)}`,
+                      title: `Revoke access for ${getPermissionLabel(permission)}`,
+                      onClick: () => setConfirmRevoke({ open: true, permission }),
+                      disabled: isUpdating || isRevoking,
+                      children: isRevoking ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_lucide_react2.Loader2, { className: "w-3 h-3 animate-spin" }) : /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_lucide_react2.X, { className: "w-3 h-3" })
+                    }
+                  )
+                ] }) : /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_jsx_runtime4.Fragment, { children: permission.isPublic ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(PublicBadge, { variant: "compact" }) : /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+                  PermissionBadge,
+                  {
+                    level: permission.permissionLevel,
+                    variant: "compact"
+                  }
+                ) })
+              ] })
+            ] }) }, permission.id)
+          );
+        }),
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+          import_design_system4.AlertDialog,
+          {
+            open: confirmRevoke.open,
+            onOpenChange: (open) => setConfirmRevoke({ open, permission: confirmRevoke.permission }),
+            children: /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_design_system4.AlertDialogContent, { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_design_system4.AlertDialogHeader, { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_design_system4.AlertDialogTitle, { children: "Revoke Access?" }),
+                /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_design_system4.AlertDialogDescription, { children: [
+                  "Are you sure you want to revoke access for",
+                  " ",
+                  /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("strong", { children: confirmRevoke.permission ? getPermissionLabel(confirmRevoke.permission) : "" }),
+                  "? They will no longer be able to access this resource."
+                ] })
+              ] }),
+              /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_design_system4.AlertDialogFooter, { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_design_system4.AlertDialogCancel, { children: "Cancel" }),
+                /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+                  import_design_system4.AlertDialogAction,
+                  {
+                    onClick: () => {
+                      if (confirmRevoke.permission) {
+                        handleRevoke(confirmRevoke.permission);
+                      }
+                    },
+                    className: "bg-destructive text-destructive-foreground hover:bg-destructive/90",
+                    children: "Revoke Access"
+                  }
+                )
+              ] })
+            ] })
+          }
+        )
+      ]
+    }
+  );
+}
+
+// src/react/sheet/AccessSummaryPanel.tsx
+var import_react5 = require("react");
+var import_lucide_react3 = require("lucide-react");
+
+// src/react/sheet/useAccessSummary.ts
+var import_core10 = require("@ai-matrx/sharing/core");
+function useAccessSummary({
+  entityType,
+  entityId,
+  enabled = true,
+  refreshToken
+}) {
+  const read = useStoreRead(
+    entityId ? `sharing.access-summary:${entityType}:${entityId}` : null,
+    () => (0, import_core10.fetchAccessSummary)(entityType, entityId),
+    { enabled: enabled && Boolean(entityId), staleAfterMs: 6e4 }
+  );
+  useRefreshWhenChanged(refreshToken, read.refresh);
+  const active = enabled && Boolean(entityId);
+  const reload = () => {
+    void read.refresh();
+  };
+  return {
+    summary: active ? read.data ?? null : null,
+    loading: active && read.isLoading,
+    error: active && read.isError ? read.error ?? "Could not load access" : null,
+    reload
+  };
+}
+
+// src/react/sheet/AccessSummaryPanel.tsx
+var import_core11 = require("@ai-matrx/sharing/core");
+var import_cn2 = require("@ai-matrx/design-system/cn");
+var import_jsx_runtime5 = require("react/jsx-runtime");
+function AccessSummaryPanel({
+  entityType,
+  entityId,
+  enabled = true,
+  refreshToken,
+  className,
+  copy,
+  onSummaryChange
+}) {
+  const { summary, loading, error, reload } = useAccessSummary({
+    entityType,
+    entityId,
+    enabled,
+    refreshToken
+  });
+  const notifyRef = (0, import_react5.useRef)(onSummaryChange);
+  (0, import_react5.useEffect)(() => {
+    notifyRef.current = onSummaryChange;
+  }, [onSummaryChange]);
+  (0, import_react5.useEffect)(() => {
+    notifyRef.current?.({ summary, error, loading });
+  }, [summary, error, loading]);
+  const context = copy ?? {
+    resourceType: entityType,
+    resourceId: entityId ?? "unknown",
+    surface: "Access summary",
+    kpis: (0, import_core11.accessKpis)({
+      permissions: [],
+      isPublic: summary?.isPublic ?? false,
+      viewerIsOwner: summary ? summary.viewerIsOwner : null,
+      summary,
+      entityType
+    })
+  };
+  const location = (0, import_core11.sharingLocation)(context.surface);
+  const resourceAttributes = {
+    resource_type: context.resourceType,
+    resource_id: context.resourceId,
+    resource_name: context.resourceName ?? null
+  };
+  if (loading && !summary) {
+    return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(
+      "div",
+      {
+        className: (0, import_cn2.cn)(
+          "flex items-center gap-2 px-3 py-2 text-[13px] text-muted-foreground",
+          className
+        ),
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_lucide_react3.Loader2, { className: "h-3.5 w-3.5 animate-spin" }),
+          "Working out who can see this\u2026"
+        ]
+      }
+    );
+  }
+  if (error) {
+    const errorHuman = () => [
+      `${import_core11.ACCESS_SUMMARY_ERROR_HEADLINE}`,
+      error,
+      `Entity: ${entityType}:${entityId ?? "(none)"}`,
+      `The panel offers a Retry; the reachability answer is UNKNOWN, not "private".`
+    ].join("\n");
+    return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(
+      "div",
+      {
+        className: (0, import_cn2.cn)(
+          "group rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-[12px] text-destructive-ink",
+          className
+        ),
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("p", { className: "flex items-center gap-1.5 font-medium", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_lucide_react3.AlertTriangle, { className: "h-3.5 w-3.5" }),
+            import_core11.ACCESS_SUMMARY_ERROR_HEADLINE,
+            /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("span", { className: "ml-auto opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+              CopyButtons,
+              {
+                size: "xs",
+                label: "Access summary error",
+                human: errorHuman,
+                json: () => ({
+                  error,
+                  entity_type: entityType,
+                  entity_id: entityId
+                }),
+                agent: () => ({
+                  kind: "access-summary-error",
+                  location,
+                  description: "The reachability summary failed to load. This is the error the user is looking at, verbatim \u2014 the access answer is UNKNOWN, not private.",
+                  data: {
+                    rendered_headline: import_core11.ACCESS_SUMMARY_ERROR_HEADLINE,
+                    rendered_error: error,
+                    entity_type: entityType,
+                    entity_id: entityId,
+                    retry_offered: true,
+                    kpis: context.kpis
+                  },
+                  summary: errorHuman(),
+                  attributes: {
+                    ...context.kpis,
+                    ...resourceAttributes,
+                    state: "error"
+                  }
+                })
+              }
+            ) })
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("p", { className: "opacity-80", children: error }),
+          /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+            "button",
+            {
+              type: "button",
+              onClick: reload,
+              className: "mt-1 underline hover:no-underline",
+              children: "Retry"
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ErrorAlchemyMenu, { error })
+        ]
+      }
+    );
+  }
+  if (!summary) return null;
+  const Icon = summary.isPublic ? import_lucide_react3.Globe : (0, import_core11.isPrivateSummary)(summary) ? import_lucide_react3.Lock : import_lucide_react3.Users;
+  const reasons = (0, import_core11.accessReasonRows)(summary, entityType);
+  const view = () => (0, import_core11.accessSummaryView)(summary, entityType);
+  const panelHuman = () => (0, import_core11.humanAccessSummary)(summary, entityType);
+  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { className: (0, import_cn2.cn)("group space-y-2 px-3 py-2", className), children: [
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { className: "flex items-center gap-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("p", { className: "text-[12px] text-muted-foreground", children: [
+        "Who can open it:",
+        " ",
+        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("span", { className: "text-foreground", children: (0, import_core11.summaryReachLabel)(summary) })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("span", { className: "ml-auto flex items-center gap-1 opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+        CopyButtons,
+        {
+          size: "xs",
+          label: "Who can see this",
+          human: panelHuman,
+          json: view,
+          agent: () => ({
+            kind: "access-summary",
+            location,
+            description: 'Every reason this entity is reachable, exactly as rendered: who can open it, the one-line headline, and each reason row. This is the complete answer to "who can see this, and why" \u2014 direct grants are only one of the reasons listed.',
+            data: { ...view(), kpis: context.kpis },
+            summary: panelHuman(),
+            attributes: {
+              ...context.kpis,
+              ...resourceAttributes,
+              reasons: reasons.length,
+              is_public: summary.isPublic,
+              viewer_is_owner: summary.viewerIsOwner,
+              can_manage: summary.canManage
+            }
+          }),
+          export: {
+            items: [
+              jsonExportItem(view, "JSON (rendered summary)"),
+              csvExportItem(
+                () => (0, import_core11.reasonCsvRows)(reasons),
+                "CSV (all access reasons)"
+              )
+            ]
+          }
+        }
+      ) })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("p", { className: "flex items-start gap-2 text-[13px] text-foreground", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Icon, { className: "mt-0.5 h-3.5 w-3.5 shrink-0 text-muted-foreground" }),
+      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("span", { children: view().headline })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("ul", { className: "space-y-1 text-[12px] text-muted-foreground", children: reasons.map((reason) => /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+      ReasonRow,
+      {
+        reason,
+        location,
+        attributes: { ...context.kpis, ...resourceAttributes }
+      },
+      reason.id
+    )) }),
+    (0, import_core11.isPrivateSummary)(summary) ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("p", { className: "text-[12px] text-muted-foreground", children: import_core11.NOTHING_ELSE_GRANTS }) : null
+  ] });
+}
+var REASON_ICON = {
+  organization: import_lucide_react3.Users,
+  "direct-grants": import_lucide_react3.Users,
+  container: import_lucide_react3.Boxes
+};
+function ReasonRow({
+  reason,
+  location,
+  attributes
+}) {
+  const Icon = REASON_ICON[reason.kind];
+  const human = () => `${reason.title}${reason.detail ? ` \u2014 ${reason.detail}` : ""}`;
+  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("li", { className: "group/reason flex items-start gap-2", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Icon, { className: "mt-0.5 h-3.5 w-3.5 shrink-0" }),
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("span", { className: "min-w-0", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("span", { className: "text-foreground", children: reason.title }),
+      reason.detail ? /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("span", { className: "opacity-80", children: [
+        " \u2014 ",
+        reason.detail
+      ] }) : null
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("span", { className: "ml-auto shrink-0 opacity-0 transition-opacity focus-within:opacity-100 group-hover/reason:opacity-100", children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+      CopyButtons,
+      {
+        size: "xs",
+        label: `Access reason \u2014 ${reason.title}`,
+        human,
+        json: () => reason,
+        agent: () => ({
+          kind: "access-reason",
+          location,
+          description: "One reason this entity is reachable, as rendered in the access summary. Removing this reason is one of the levers for changing who can see it.",
+          data: reason,
+          summary: human(),
+          attributes: {
+            ...attributes,
+            reason_kind: reason.kind,
+            container_type: reason.containerType ?? null,
+            container_id: reason.containerId ?? null
+          }
+        })
+      }
+    ) })
+  ] });
+}
+
+// src/react/sheet/ShareWithUserTab.tsx
+var import_react7 = require("react");
+var import_design_system14 = require("@ai-matrx/design-system");
+var import_design_system15 = require("@ai-matrx/design-system");
+var import_design_system16 = require("@ai-matrx/design-system");
+var import_controls4 = require("@ai-matrx/design-system/controls");
+
+// src/react/sheet/ui/scroll-area.tsx
+var import_design_system8 = require("@ai-matrx/design-system");
+
+// src/react/sheet/ui/avatar.tsx
+var import_design_system9 = require("@ai-matrx/design-system");
+
+// src/react/sheet/ShareWithUserTab.tsx
+var import_lucide_react5 = require("lucide-react");
+var import_core16 = require("@ai-matrx/sharing/core");
+var import_core17 = require("@ai-matrx/sharing/core");
+var import_core18 = require("@ai-matrx/sharing/core");
+var import_format = require("@ai-matrx/kit/format");
+
+// src/react/sheet/AddEveryoneInOrg.tsx
+var import_core12 = require("@ai-matrx/sharing/core");
+var import_core13 = require("@ai-matrx/sharing/core");
+var import_react6 = require("react");
+var import_lucide_react4 = require("lucide-react");
+var import_design_system10 = require("@ai-matrx/design-system");
+var import_design_system11 = require("@ai-matrx/design-system");
+var import_design_system12 = require("@ai-matrx/design-system");
+var import_design_system13 = require("@ai-matrx/design-system");
+var import_controls3 = require("@ai-matrx/design-system/controls");
+var import_core14 = require("@ai-matrx/sharing/core");
+var import_core15 = require("@ai-matrx/sharing/core");
+var import_jsx_runtime6 = require("react/jsx-runtime");
+var EVERYONE = "__everyone__";
+async function readTeamMembers(teamId) {
+  const rows = await (0, import_core13.listTeamMembers)(teamId);
+  return rows.map((row) => ({
+    userId: row.userId,
+    email: row.email ?? "",
+    name: row.displayName || row.email || "Unnamed person"
+  }));
+}
+async function readMembers(orgId) {
+  const data = await (0, import_core12.readOrganizationMemberRows)(orgId);
+  return data.map((row) => ({
+    userId: row.user_id,
+    email: row.user_email ?? "",
+    name: row.user_display_name || row.user_email || "Unnamed person"
+  }));
+}
+function AddEveryoneInOrg({
+  grantPerson,
+  level: sectionLevel,
+  whyNotLevel,
+  alreadySharedUserIds = [],
+  onDone,
+  defaultOrgId
+}) {
+  const { orgs } = useOrganizationsToCreateIn();
+  const detail = (0, import_core14.organizationDisambiguators)(orgs);
+  const me = useCurrentUserId();
+  const [open, setOpen] = (0, import_react6.useState)(false);
+  const [orgId, setOrgId] = (0, import_react6.useState)("");
+  const [members, setMembers] = (0, import_react6.useState)(null);
+  const [loadError, setLoadError] = (0, import_react6.useState)(null);
+  const [ticked, setTicked] = (0, import_react6.useState)(/* @__PURE__ */ new Set());
+  const [running, setRunning] = (0, import_react6.useState)(false);
+  const [outcomes, setOutcomes] = (0, import_react6.useState)({});
+  const [teams, setTeams] = (0, import_react6.useState)([]);
+  const [teamsError, setTeamsError] = (0, import_react6.useState)(null);
+  const [group, setGroup] = (0, import_react6.useState)(EVERYONE);
+  const [ownLevel, setOwnLevel] = (0, import_react6.useState)(null);
+  const level = ownLevel ?? sectionLevel;
+  const orgLabel = orgs.find((o) => o.id === orgId)?.name ?? "this organization";
+  const team = group === EVERYONE ? void 0 : teams.find((t) => t.id === group);
+  const orgName = team ? team.name : orgLabel;
+  (0, import_react6.useEffect)(() => {
+    if (!open || !orgId) return;
+    let cancelled = false;
+    setTeams([]);
+    setTeamsError(null);
+    setGroup(EVERYONE);
+    (0, import_core13.listTeams)(orgId).then((rows) => {
+      if (!cancelled) setTeams(rows.filter((t) => t.archivedAt === null && t.memberCount > 0));
+    }).catch((err) => {
+      if (!cancelled) setTeamsError(err instanceof Error ? err.message : "The teams could not be listed.");
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [open, orgId]);
+  const already = new Set(alreadySharedUserIds);
+  (0, import_react6.useEffect)(() => {
+    if (!open || !orgId) return;
+    let cancelled = false;
+    setMembers(null);
+    setLoadError(null);
+    setOutcomes({});
+    (group === EVERYONE ? readMembers(orgId) : readTeamMembers(group)).then((rows) => {
+      if (cancelled) return;
+      const others = rows.filter((m) => m.userId !== me);
+      setMembers(others);
+      setTicked(
+        new Set(others.filter((m) => !already.has(m.userId)).map((m) => m.userId))
+      );
+    }).catch((err) => {
+      if (!cancelled)
+        setLoadError(
+          err instanceof Error ? err.message : "The member list could not be read."
+        );
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [open, orgId, group, me]);
+  const toggle = (userId, on) => setTicked((prev) => {
+    const next = new Set(prev);
+    if (on) next.add(userId);
+    else next.delete(userId);
+    return next;
+  });
+  const chosen = (members ?? []).filter((m) => ticked.has(m.userId));
+  const run = async () => {
+    setRunning(true);
+    const next = {};
+    let granted = 0;
+    for (const person of chosen) {
+      try {
+        const result = await grantPerson(person, level);
+        next[person.userId] = result.success ? { ok: true, say: "Shared" } : { ok: false, say: result.error || "Not shared" };
+        if (result.success) granted += 1;
+      } catch (err) {
+        next[person.userId] = {
+          ok: false,
+          say: err instanceof Error ? err.message : "Not shared"
+        };
+      }
+      setOutcomes({ ...next });
+    }
+    setRunning(false);
+    setTicked(/* @__PURE__ */ new Set());
+    if (granted > 0) onDone?.();
+  };
+  if (orgs.length === 0) return null;
+  if (!open) {
+    return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+      import_design_system10.Button,
+      {
+        type: "button",
+        variant: "outline",
+        className: "w-full h-9",
+        onClick: () => {
+          if (!orgId && defaultOrgId && orgs.some((o) => o.id === defaultOrgId))
+            setOrgId(defaultOrgId);
+          setOpen(true);
+        },
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_lucide_react4.Users, { className: "w-4 h-4 mr-2" }),
+          "Add everyone in an organization or team"
+        ]
+      }
+    );
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+    "div",
+    {
+      className: "space-y-2.5 p-3 bg-muted/30 rounded-lg border",
+      "data-add-everyone-in-org": true,
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("h3", { className: "type-title mb-1", children: [
+            "Add everyone in ",
+            orgId ? orgName : "an organization"
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("p", { className: "type-secondary text-muted-foreground", children: "Each person below is given access by name. People who join later are not added." })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "space-y-1.5", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system12.Label, { htmlFor: "add-everyone-org", className: "text-xs", children: "Organization" }),
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_design_system13.Select, { value: orgId, onValueChange: setOrgId, disabled: running, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_controls3.SelectTrigger, { id: "add-everyone-org", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system13.SelectValue, { placeholder: "Choose one of your organizations" }) }),
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system13.SelectContent, { children: orgs.map((org) => /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system13.SelectItem, { value: org.id, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "flex items-center gap-2", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_lucide_react4.Building2, { className: "w-3 h-3" }),
+              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { children: org.name }),
+              detail.get(org.id) && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { className: "type-meta text-muted-foreground", children: detail.get(org.id) })
+            ] }) }, org.id)) })
+          ] })
+        ] }),
+        orgId && teams.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "space-y-1.5", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system12.Label, { htmlFor: "add-everyone-group", className: "text-xs", children: "Who" }),
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_design_system13.Select, { value: group, onValueChange: setGroup, disabled: running, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_controls3.SelectTrigger, { id: "add-everyone-group", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system13.SelectValue, {}) }),
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_design_system13.SelectContent, { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_design_system13.SelectItem, { value: EVERYONE, children: [
+                "Everyone in ",
+                orgLabel
+              ] }),
+              teams.map((t) => /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_design_system13.SelectItem, { value: t.id, children: [
+                t.name,
+                /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("span", { className: "type-meta text-muted-foreground", children: [
+                  " \xB7 ",
+                  t.memberCount
+                ] })
+              ] }, t.id))
+            ] })
+          ] })
+        ] }) : null,
+        orgId ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "space-y-1.5", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system12.Label, { htmlFor: "add-everyone-level", className: "text-xs", children: "They get" }),
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+            import_design_system13.Select,
+            {
+              value: level,
+              onValueChange: (v) => setOwnLevel(v),
+              disabled: running,
+              children: [
+                /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_controls3.SelectTrigger, { id: "add-everyone-level", "data-add-everyone-level": level, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system13.SelectValue, {}) }),
+                /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system13.SelectContent, { children: import_core15.PERMISSION_LEVELS.map((l) => /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system13.SelectItem, { value: l, disabled: (whyNotLevel?.(l) ?? null) !== null, title: whyNotLevel?.(l) ?? void 0, children: import_core15.PERMISSION_LEVEL_SHORT_LABELS[l] }, l)) })
+              ]
+            }
+          )
+        ] }) : null,
+        orgId && teamsError ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("p", { className: "type-secondary text-destructive", children: [
+          "The teams in ",
+          orgLabel,
+          " could not be listed: ",
+          teamsError,
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ErrorAlchemyMenu, { error: teamsError })
+        ] }) : null,
+        orgId && loadError ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("p", { className: "type-secondary text-destructive", children: [
+          "The people in ",
+          orgName,
+          " could not be listed: ",
+          loadError,
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ErrorAlchemyMenu, { error: loadError })
+        ] }) : null,
+        orgId && !loadError && members === null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "flex items-center gap-2 type-secondary text-muted-foreground", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_lucide_react4.Loader2, { className: "w-3 h-3 animate-spin" }),
+          " Listing the people in",
+          " ",
+          orgName,
+          "\u2026"
+        ] }) : null,
+        members && members.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("p", { className: "type-secondary text-muted-foreground", children: [
+          "Nobody else is in ",
+          orgName,
+          "."
+        ] }) : null,
+        members && members.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("ul", { className: "space-y-1 max-h-56 overflow-y-auto", "aria-label": `People in ${orgName}`, children: members.map((m) => {
+          const has = already.has(m.userId);
+          const outcome = outcomes[m.userId];
+          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+            "li",
+            {
+              className: "flex items-center gap-2 type-body",
+              "data-member": m.email,
+              children: [
+                /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+                  import_design_system11.Checkbox,
+                  {
+                    size: "sm",
+                    id: `add-everyone-${m.userId}`,
+                    checked: ticked.has(m.userId),
+                    disabled: running || has || !!outcome?.ok,
+                    onCheckedChange: (v) => toggle(m.userId, v === true)
+                  }
+                ),
+                /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+                  "label",
+                  {
+                    htmlFor: `add-everyone-${m.userId}`,
+                    className: "flex-1 min-w-0",
+                    children: [
+                      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { className: "block truncate", children: m.name }),
+                      m.email && m.email !== m.name ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { className: "block truncate type-secondary text-muted-foreground", children: m.email }) : null
+                    ]
+                  }
+                ),
+                has && !outcome ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { className: "type-secondary text-muted-foreground", children: "Already has access" }) : null,
+                outcome ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+                  "span",
+                  {
+                    className: `flex items-center gap-1 text-xs ${outcome.ok ? "text-green-700 dark:text-green-400" : "text-destructive"}`,
+                    children: [
+                      outcome.ok ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_lucide_react4.CheckCircle, { className: "w-3 h-3" }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_lucide_react4.XCircle, { className: "w-3 h-3" }),
+                      outcome.say
+                    ]
+                  }
+                ) : null
+              ]
+            },
+            m.userId
+          );
+        }) }) : null,
+        members && members.length > 0 && chosen.length === 0 && !running ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("p", { className: "type-secondary text-muted-foreground", children: Object.values(outcomes).some((o) => o.ok) || members.every((m) => already.has(m.userId)) ? `Everyone listed in ${orgName} has access now.` : "Tick the people to add." }) : null,
+        members && members.length > 0 && (chosen.length > 0 || running) ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+          import_design_system10.Button,
+          {
+            type: "button",
+            onClick: run,
+            disabled: running || chosen.length === 0,
+            className: "w-full h-9",
+            children: running ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_lucide_react4.Loader2, { className: "w-4 h-4 mr-2 animate-spin" }),
+              "Sharing\u2026"
+            ] }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_lucide_react4.Users, { className: "w-4 h-4 mr-2" }),
+              "Share with ",
+              chosen.length,
+              " ",
+              chosen.length === 1 ? "person" : "people"
+            ] })
+          }
+        ) : null
+      ]
+    }
+  );
+}
+
+// src/react/sheet/ShareWithUserTab.tsx
+var import_jsx_runtime7 = require("react/jsx-runtime");
+var SOURCE_ICONS = {
+  conversation: import_lucide_react5.MessageSquare,
+  organization: import_lucide_react5.Building2,
+  invitation: import_lucide_react5.Mail
+};
+var SOURCE_LABELS = {
+  conversation: "Contact",
+  organization: "Organization",
+  invitation: "Invited"
+};
+var EMAIL_SHAPE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+async function lookupConnectionByEmail(typed) {
+  const { data } = await (0, import_core17.createClient)().rpc("lookup_user_by_email", { lookup_email: typed });
+  const row = data?.[0];
+  return row ? {
+    user_id: row.user_id,
+    email: row.user_email,
+    display_name: row.user_email.split("@", 1)[0] ?? null,
+    avatar_url: null,
+    source: "invitation",
+    sourceDetails: "Found by email"
+  } : null;
+}
+function candidateOf(connection, foundByEmail) {
+  return {
+    id: connection.user_id,
+    email: connection.email,
+    displayName: connection.display_name,
+    avatarUrl: connection.avatar_url,
+    phone: null,
+    adminLevel: null,
+    organizations: connection.source === "organization" && connection.sourceDetails ? [connection.sourceDetails] : [],
+    source: foundByEmail ? "Found by email" : SOURCE_LABELS[connection.source],
+    createdAt: null,
+    lastSignInAt: null
+  };
+}
+function ShareWithUserTab({
+  levelWording = "roles",
+  grantable,
+  onShare,
+  onSuccess,
+  resourceType,
+  resourceId,
+  organizationId,
+  copy,
+  grantEveryonePerson,
+  alreadySharedUserIds
+}) {
+  const [email, setEmail] = (0, import_react7.useState)("");
+  const [searchQuery, setSearchQuery] = (0, import_react7.useState)("");
+  const [permissionLevel, setPermissionLevel] = (0, import_react7.useState)("viewer");
+  const whyNotLevel = (level) => {
+    const why = grantable?.levels[level];
+    return typeof why === "string" ? why : null;
+  };
+  const chosenWhy = whyNotLevel(permissionLevel);
+  const [status, setStatus] = (0, import_react7.useState)({ type: "idle", message: "" });
+  const [selectedContact, setSelectedContact] = (0, import_react7.useState)(
+    null
+  );
+  const {
+    connections,
+    isLoading: connectionsLoading,
+    error: connectionsError,
+    partialFailures: connectionsPartial,
+    refresh: refreshConnections
+  } = useUserConnections(organizationId ? { organizationId } : {});
+  const filteredConnections = (0, import_react7.useMemo)(() => {
+    if (!searchQuery.trim()) return connections;
+    const q = searchQuery.toLowerCase();
+    return connections.filter(
+      (c) => c.display_name && c.display_name.toLowerCase().includes(q) || c.email && c.email.toLowerCase().includes(q)
+    );
+  }, [connections, searchQuery]);
+  const [looked, setLooked] = (0, import_react7.useState)(null);
+  const resolveTypedEmail = async (query) => {
+    const typed = query.trim().toLowerCase();
+    if (!EMAIL_SHAPE.test(typed)) return [];
+    const found = connections.find((c) => c.email?.toLowerCase() === typed) ?? await lookupConnectionByEmail(typed);
+    return found ? [candidateOf(found, true)] : [];
+  };
+  (0, import_react7.useEffect)(() => {
+    const typed = email.trim().toLowerCase();
+    if (!EMAIL_SHAPE.test(typed)) {
+      setLooked(null);
+      return;
+    }
+    if (connections.some((c) => c.email?.toLowerCase() === typed)) {
+      setLooked(null);
+      return;
+    }
+    let stale = false;
+    const handle = setTimeout(async () => {
+      const found = await lookupConnectionByEmail(typed);
+      if (stale) return;
+      setLooked(found);
+    }, 300);
+    return () => {
+      stale = true;
+      clearTimeout(handle);
+    };
+  }, [email, connections]);
+  const searchableConnections = (0, import_react7.useMemo)(
+    () => looked ? [...connections, looked] : connections,
+    [connections, looked]
+  );
+  const userSearchCandidates = searchableConnections.map(
+    (connection) => candidateOf(connection, connection === looked)
+  );
+  const resetStatus = () => {
+    setStatus({ type: "idle", message: "" });
+  };
+  const selectContact = (contact) => {
+    setSelectedContact(contact);
+    setEmail(contact.email || "");
+    setSearchQuery("");
+    if (status.type === "error") resetStatus();
+  };
+  const clearContact = () => {
+    setSelectedContact(null);
+    setEmail("");
+  };
+  const handleShare = async () => {
+    const trimmedEmail = email.trim();
+    if (!trimmedEmail || !trimmedEmail.includes("@")) {
+      setStatus({
+        type: "error",
+        message: "Please enter a valid email address"
+      });
+      return;
+    }
+    setStatus({ type: "loading", message: "Looking up user..." });
+    try {
+      let targetUserId = null;
+      if (selectedContact && selectedContact.email === trimmedEmail) {
+        targetUserId = selectedContact.user_id;
+      } else {
+        const client = (0, import_core17.createClient)();
+        const { data: lookupData, error: lookupError } = await client.rpc(
+          "lookup_user_by_email",
+          { lookup_email: trimmedEmail }
+        );
+        if (lookupError) {
+          setStatus({
+            type: "error",
+            message: `Lookup failed: ${lookupError.message}`
+          });
+          return;
+        }
+        const userData = Array.isArray(lookupData) ? lookupData[0] : lookupData;
+        if ((!userData || !userData.user_id) && !grantEveryonePerson) {
+          setStatus({
+            type: "error",
+            message: `No user found with email "${trimmedEmail}". They may need to create an account first.`
+          });
+          return;
+        }
+        targetUserId = userData?.user_id ?? null;
+      }
+      setStatus({ type: "loading", message: "Sharing with user..." });
+      const result = grantEveryonePerson ? await grantEveryonePerson(
+        { userId: targetUserId ?? "", email: trimmedEmail, name: trimmedEmail.split("@", 1)[0] ?? trimmedEmail },
+        permissionLevel
+      ) : await onShare(targetUserId, permissionLevel);
+      const errorMsg = result?.error;
+      if (!errorMsg) {
+        setStatus({
+          type: "success",
+          // THE CONFIRMATION LIVES HERE, IN THE DIALOG THAT DID IT (law 4: a sentence with an
+          // inline home is not also toasted). It used to ride a legacy Radix toast, and on a
+          // table page the organization gate's pick closed this dialog before anyone read it
+          // (VERIFIER-18 H4) — the dialog now stays open, saying it worked.
+          message: `Shared with ${trimmedEmail}. They can open it now.`
+        });
+        setEmail("");
+        setSelectedContact(null);
+        setPermissionLevel("viewer");
+        setTimeout(() => {
+          onSuccess();
+        }, 1500);
+      } else {
+        setStatus({ type: "error", message: errorMsg });
+      }
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "Something went wrong";
+      setStatus({ type: "error", message: `Unexpected error: ${message}` });
+    }
+  };
+  const isLoading = status.type === "loading";
+  return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className: "space-y-2.5 p-3 bg-muted/30 rounded-lg border", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("h3", { className: "text-sm font-medium mb-1", children: "Share with User" }),
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-xs text-muted-foreground", children: "Select a contact or enter an email address" })
+    ] }),
+    status.type !== "idle" && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(
+      "div",
+      {
+        className: `p-2 rounded-md flex items-start gap-2 text-xs ${status.type === "loading" ? "bg-blue-500/10 text-blue-700 dark:text-blue-300 border border-blue-500/20" : status.type === "success" ? "bg-green-500/10 text-green-700 dark:text-green-300 border border-green-500/20" : "bg-red-500/10 text-red-700 dark:text-red-300 border border-red-500/20"}`,
+        children: [
+          status.type === "loading" && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_lucide_react5.Loader2, { className: "w-3.5 h-3.5 animate-spin flex-shrink-0 mt-0.5" }),
+          status.type === "success" && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_lucide_react5.CheckCircle, { className: "w-3.5 h-3.5 flex-shrink-0 mt-0.5" }),
+          status.type === "error" && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_lucide_react5.XCircle, { className: "w-3.5 h-3.5 flex-shrink-0 mt-0.5" }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { className: "flex-1", children: status.message }),
+          status.type === "error" && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+              CopyButtons,
+              {
+                size: "xs",
+                label: "Share failure",
+                human: () => [
+                  "Sharing with a user failed.",
+                  `Error shown: ${status.message}`,
+                  `Email entered: ${email.trim() || "(empty)"}`,
+                  `Contact selected: ${selectedContact ? `${selectedContact.display_name ?? selectedContact.email} (${selectedContact.source})` : "none"}`,
+                  `Permission level chosen: ${permissionLevel}`,
+                  `Resource: ${resourceType}:${resourceId}`
+                ].join("\n"),
+                json: () => ({
+                  error: status.message,
+                  email: email.trim(),
+                  selected_contact: selectedContact,
+                  permission_level: permissionLevel,
+                  resource_type: resourceType,
+                  resource_id: resourceId
+                }),
+                agent: () => ({
+                  kind: "share-with-user-failure",
+                  location: (0, import_core18.sharingLocation)(copy?.surface ?? "Share with user"),
+                  description: "A share-with-user attempt that failed, with the error sentence on screen and the live form state that produced it.",
+                  data: {
+                    rendered_error: status.message,
+                    form_state: {
+                      email_entered: email.trim(),
+                      selected_contact: selectedContact,
+                      permission_level: permissionLevel,
+                      contacts_available: connections.length
+                    },
+                    resource: {
+                      type: resourceType,
+                      id: resourceId,
+                      name: copy?.resourceName ?? null
+                    },
+                    kpis: copy?.kpis ?? null
+                  },
+                  attributes: {
+                    ...copy?.kpis ?? {},
+                    resource_type: resourceType,
+                    resource_id: resourceId,
+                    state: "error",
+                    permission_level: permissionLevel
+                  }
+                })
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+              "button",
+              {
+                onClick: resetStatus,
+                className: "text-xs underline hover:no-underline flex-shrink-0",
+                children: "Dismiss"
+              }
+            )
+          ] })
+        ]
+      }
+    ),
+    /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className: "space-y-2.5", children: [
+      !selectedContact && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className: "space-y-1.5", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_design_system15.Label, { className: "text-xs flex items-center gap-1.5", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_lucide_react5.Users, { className: "w-3 h-3" }),
+          "Your Contacts"
+        ] }),
+        connectionsLoading ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className: "flex items-center justify-center py-4 text-xs text-muted-foreground", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_lucide_react5.Loader2, { className: "w-3.5 h-3.5 animate-spin mr-2" }),
+          "Loading contacts..."
+        ] }) : connectionsError && connections.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+          ConnectionsReadNotice,
+          {
+            error: connectionsError,
+            partialFailures: connectionsPartial,
+            hasRows: false,
+            onRetry: () => void refreshConnections()
+          }
+        ) : connections.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-xs text-muted-foreground py-2 text-center", children: "No contacts found. Enter an email below." }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+            ConnectionsReadNotice,
+            {
+              error: connectionsError,
+              partialFailures: connectionsPartial,
+              hasRows: true,
+              onRetry: () => void refreshConnections()
+            }
+          ),
+          connections.length > 5 && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+            UserSearchField,
+            {
+              placeholder: "Search contacts...",
+              value: searchQuery,
+              onValueChange: setSearchQuery,
+              onUserSelect: (user) => {
+                const contact = searchableConnections.find(
+                  (candidate) => candidate.user_id === user.id
+                );
+                if (contact) selectContact(contact);
+              },
+              candidates: userSearchCandidates,
+              title: "Search your contacts",
+              disabled: isLoading,
+              className: "w-full",
+              inputClassName: "h-8 text-xs"
+            }
+          ) }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system8.ScrollArea, { className: "max-h-36 rounded-md border bg-background", children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { className: "p-1", children: filteredConnections.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-xs text-muted-foreground py-2 text-center", children: "No matching contacts" }) : filteredConnections.map((contact) => {
+            const SourceIcon = SOURCE_ICONS[contact.source];
+            return (
+              // ui-exception: moved verbatim from the web share sheet; restyling onto design-system Button is its own UI change
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(
+                "button",
+                {
+                  onClick: () => selectContact(contact),
+                  disabled: isLoading,
+                  className: "w-full flex items-center gap-2 p-1.5 rounded-md hover:bg-accent/50 transition-colors text-left disabled:opacity-50",
+                  children: [
+                    /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_design_system9.Avatar, { className: "w-6 h-6 flex-shrink-0", children: [
+                      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+                        import_design_system9.AvatarImage,
+                        {
+                          src: contact.avatar_url || void 0
+                        }
+                      ),
+                      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system9.AvatarFallback, { className: "text-[10px] bg-primary/10 text-primary-ink", children: (0, import_format.getInitials)(contact.display_name ?? contact.email) })
+                    ] }),
+                    /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className: "flex-1 min-w-0", children: [
+                      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-xs font-medium truncate", children: contact.display_name || contact.email || "Unknown" }),
+                      contact.display_name && contact.email && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-[10px] text-muted-foreground truncate", children: contact.email })
+                    ] }),
+                    /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("span", { className: "flex items-center gap-1 text-[10px] text-muted-foreground flex-shrink-0", children: [
+                      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(SourceIcon, { className: "w-3 h-3" }),
+                      SOURCE_LABELS[contact.source]
+                    ] })
+                  ]
+                },
+                contact.user_id
+              )
+            );
+          }) }) })
+        ] })
+      ] }),
+      selectedContact && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className: "flex items-center gap-2 p-2 rounded-md bg-primary/5 border border-primary/20", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_design_system9.Avatar, { className: "w-6 h-6 flex-shrink-0", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system9.AvatarImage, { src: selectedContact.avatar_url || void 0 }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system9.AvatarFallback, { className: "text-[10px] bg-primary/10 text-primary-ink", children: (0, import_format.getInitials)(
+            selectedContact.display_name ?? selectedContact.email
+          ) })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className: "flex-1 min-w-0", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-xs font-medium truncate", children: selectedContact.display_name || selectedContact.email }),
+          selectedContact.display_name && selectedContact.email && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-[10px] text-muted-foreground truncate", children: selectedContact.email })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+          "button",
+          {
+            onClick: clearContact,
+            disabled: isLoading,
+            className: "text-muted-foreground hover:text-foreground transition-colors disabled:opacity-50",
+            children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_lucide_react5.XCircle, { className: "w-4 h-4" })
+          }
+        )
+      ] }),
+      !selectedContact && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className: "space-y-1.5", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system15.Label, { htmlFor: "user-email", className: "text-xs", children: "Or enter email manually" }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+          UserSearchField,
+          {
+            id: "user-email",
+            placeholder: "user@example.com",
+            value: email,
+            onValueChange: (value) => {
+              setEmail(value);
+              if (status.type === "error") resetStatus();
+            },
+            onUserSelect: (user) => {
+              const contact = searchableConnections.find(
+                (candidate) => candidate.user_id === user.id
+              );
+              if (contact) selectContact(contact);
+            },
+            candidates: userSearchCandidates,
+            resolveCandidates: resolveTypedEmail,
+            title: "Choose a user to share with",
+            inputType: "email",
+            disabled: isLoading,
+            inputClassName: "h-9"
+          }
+        )
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className: "space-y-1.5", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system15.Label, { htmlFor: "user-permission", className: "text-xs", children: "Permission Level" }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(
+          import_design_system16.Select,
+          {
+            value: permissionLevel,
+            onValueChange: (value) => setPermissionLevel(value),
+            disabled: isLoading,
+            children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_controls4.SelectTrigger, { id: "user-permission", children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system16.SelectValue, {}) }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system16.SelectContent, { children: levelWording === "notion" ? [...import_core16.PERMISSION_LEVELS].reverse().map((level) => /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system16.SelectItem, { value: level, disabled: whyNotLevel(level) !== null, title: whyNotLevel(level) ?? import_core16.PERMISSION_LEVEL_HINTS[level], children: import_core16.PERMISSION_LEVEL_LABELS[level] }, level)) : /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system16.SelectItem, { value: "viewer", disabled: whyNotLevel("viewer") !== null, title: whyNotLevel("viewer") ?? import_core16.PERMISSION_LEVEL_HINTS.viewer, children: import_core16.PERMISSION_LEVEL_SHORT_LABELS.viewer }),
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system16.SelectItem, { value: "commenter", disabled: whyNotLevel("commenter") !== null, title: whyNotLevel("commenter") ?? import_core16.PERMISSION_LEVEL_HINTS.commenter, children: import_core16.PERMISSION_LEVEL_SHORT_LABELS.commenter }),
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system16.SelectItem, { value: "editor", disabled: whyNotLevel("editor") !== null, title: whyNotLevel("editor") ?? import_core16.PERMISSION_LEVEL_HINTS.editor, children: import_core16.PERMISSION_LEVEL_SHORT_LABELS.editor }),
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_design_system16.SelectItem, { value: "admin", disabled: whyNotLevel("admin") !== null, title: whyNotLevel("admin") ?? import_core16.PERMISSION_LEVEL_HINTS.admin, children: import_core16.PERMISSION_LEVEL_SHORT_LABELS.admin })
+              ] }) })
+            ]
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(PermissionLevelDescription, { level: permissionLevel }),
+        chosenWhy ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-xs text-muted-foreground", children: chosenWhy }) : null,
+        !chosenWhy && whyNotLevel("admin") ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-xs text-muted-foreground", "data-share-level-reason": "", children: whyNotLevel("admin") }) : null,
+        grantable?.outside ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { className: "text-xs text-muted-foreground", "data-share-outside-reason": "", children: grantable.outside }) : null
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+        import_design_system14.Button,
+        {
+          onClick: handleShare,
+          disabled: isLoading || !email.trim() || chosenWhy !== null,
+          className: "w-full h-9",
+          children: isLoading ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_lucide_react5.Loader2, { className: "w-4 h-4 mr-2 animate-spin" }),
+            status.message || "Processing..."
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_lucide_react5.UserPlus, { className: "w-4 h-4 mr-2" }),
+            "Share with User"
+          ] })
+        }
+      ),
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+        AddEveryoneInOrg,
+        {
+          level: permissionLevel,
+          whyNotLevel,
+          grantPerson: grantEveryonePerson ?? ((person, level) => onShare(person.userId, level)),
+          alreadySharedUserIds: alreadySharedUserIds ?? [],
+          onDone: onSuccess,
+          ...organizationId ? { defaultOrgId: organizationId } : {}
+        }
+      )
+    ] })
+  ] });
+}
+
+// src/react/sheet/OutsideSharePanel.tsx
+var import_react8 = require("react");
+var import_lucide_react6 = require("lucide-react");
+var import_design_system17 = require("@ai-matrx/design-system");
+var import_controls5 = require("@ai-matrx/design-system/controls");
+var import_design_system18 = require("@ai-matrx/design-system");
+var import_design_system19 = require("@ai-matrx/design-system");
+var import_controls6 = require("@ai-matrx/design-system/controls");
+var import_clipboard2 = require("@ai-matrx/kit/clipboard");
+var import_core19 = require("@ai-matrx/sharing/core");
+var import_jsx_runtime8 = require("react/jsx-runtime");
+var LANE_CLOSED_SAY = "This organization's administrator has turned off sharing with people outside it.";
+function OutsideSharePanel({
+  organizationId,
+  tableId,
+  tableName,
+  onPendingChange,
+  onGranted
+}) {
+  const { toast } = useToast();
+  const [state2, setState] = (0, import_react8.useState)(null);
+  const [loadError, setLoadError] = (0, import_react8.useState)(null);
+  const [busy, setBusy] = (0, import_react8.useState)(null);
+  const [email, setEmail] = (0, import_react8.useState)("");
+  const [level, setLevel] = (0, import_react8.useState)("viewer");
+  const [copied, setCopied] = (0, import_react8.useState)(null);
+  const refresh = (0, import_react8.useCallback)(async () => {
+    setLoadError(null);
+    try {
+      const answer = await (0, import_core19.readOutsideShare)(organizationId, tableId);
+      setState(answer);
+      setLevel(
+        (current) => answer.levels.some((l) => l.level === current) ? current : answer.levels[0]?.level ?? "viewer"
+      );
+    } catch (error) {
+      setState(null);
+      setLoadError(error instanceof Error ? error.message : String(error));
+    }
+  }, [organizationId, tableId]);
+  (0, import_react8.useEffect)(() => {
+    void refresh();
+  }, [refresh]);
+  (0, import_react8.useEffect)(() => {
+    onPendingChange?.((state2?.invitations ?? []).filter((row) => !row.joined).length);
+  }, [state2, onPendingChange]);
+  const copyLink = (0, import_react8.useCallback)(
+    async (invitationId, acceptPath, who) => {
+      const url = (0, import_core19.absoluteInviteUrl)(acceptPath);
+      const ok = await (0, import_clipboard2.copyText)(url).then((r) => r !== false, () => false);
+      if (!ok) return;
+      setCopied(invitationId);
+      toast({ title: `Link copied. Send it to ${who} however you like.` });
+      window.setTimeout(
+        () => setCopied((c) => c === invitationId ? null : c),
+        2e3
+      );
+    },
+    [toast]
+  );
+  const run = async (key, work) => {
+    setBusy(key);
+    try {
+      const answer = await work();
+      toast({ title: answer.say, description: answer.delivery?.say });
+      await refresh();
+    } catch (error) {
+      toast({
+        title: "That did not happen",
+        description: error instanceof Error ? error.message : String(error),
+        variant: "destructive"
+      });
+    } finally {
+      setBusy(null);
+    }
+  };
+  if (loadError) {
+    return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "rounded-lg border border-destructive/20 bg-destructive/10 p-3", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "flex items-start gap-2", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.AlertTriangle, { className: "mt-0.5 h-4 w-4 flex-shrink-0 text-destructive" }),
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "min-w-0", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("p", { className: "text-sm font-medium text-destructive", children: [
+            "We could not check who outside this organization can see ",
+            tableName,
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(ErrorAlchemyMenu, {})
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("p", { className: "mt-0.5 text-xs text-destructive/80", children: "Nobody was added or removed. This does not mean sharing outside is switched off \u2014 we simply could not look." }),
+          /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("p", { className: "mt-1 break-words text-xs text-muted-foreground", children: loadError })
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_design_system17.Button, { size: "sm", variant: "outline", className: "mt-2", onClick: () => void refresh(), children: "Try again" })
+    ] });
+  }
+  if (!state2) {
+    return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "flex items-center gap-2 text-sm text-muted-foreground", "aria-busy": "true", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.Loader2, { className: "h-4 w-4 animate-spin" }),
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("span", { children: [
+        "Checking who outside this organization can see ",
+        tableName,
+        "\u2026"
+      ] })
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "space-y-3 rounded-lg border p-3", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "flex items-start gap-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.Globe2, { className: "mt-0.5 h-4 w-4 flex-shrink-0 text-muted-foreground" }),
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "min-w-0", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("h3", { className: "text-sm font-medium", children: "People outside this organization" }),
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("p", { className: "mt-0.5 text-xs text-muted-foreground", children: state2.lane_open ? state2.say : LANE_CLOSED_SAY })
+      ] })
+    ] }),
+    state2.lane_open && state2.may_invite && state2.email_delivery?.answer !== "yes" ? /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "flex items-start gap-2 rounded-md border border-amber-500/30 bg-amber-500/10 p-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.MailWarning, { className: "mt-0.5 h-4 w-4 flex-shrink-0 text-amber-600 dark:text-amber-400" }),
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("p", { className: "text-xs text-muted-foreground", children: state2.email_say })
+    ] }) : null,
+    state2.lane_open && state2.may_invite ? /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "flex flex-col gap-2 sm:flex-row sm:items-end", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "min-w-0 flex-1", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_design_system18.Label, { htmlFor: "outside-email", className: "text-xs", children: "Their email address" }),
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+          import_controls5.Input,
+          {
+            id: "outside-email",
+            type: "email",
+            placeholder: "name@theircompany.com",
+            value: email,
+            onChange: (e) => setEmail(e.target.value)
+          }
+        )
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "sm:w-44", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_design_system18.Label, { htmlFor: "outside-level", className: "text-xs", children: "They can" }),
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(import_design_system19.Select, { value: level, onValueChange: setLevel, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_controls6.SelectTrigger, { id: "outside-level", children: /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_design_system19.SelectValue, {}) }),
+          /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_design_system19.SelectContent, { children: state2.levels.map((l) => /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_design_system19.SelectItem, { value: l.level, children: l.means }, l.level)) })
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(
+        import_design_system17.Button,
+        {
+          size: "sm",
+          disabled: !email.trim() || busy === "invite",
+          onClick: () => void run("invite", async () => {
+            const answer = await (0, import_core19.shareWithOutsidePerson)(organizationId, tableId, email.trim(), level);
+            setEmail("");
+            if (answer.granted) onGranted?.();
+            return answer;
+          }),
+          children: [
+            busy === "invite" ? /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.Loader2, { className: "mr-1.5 h-4 w-4 animate-spin" }) : /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.Send, { className: "mr-1.5 h-4 w-4" }),
+            "Share"
+          ]
+        }
+      )
+    ] }) : null,
+    state2.invitations.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("ul", { className: "divide-y rounded-md border", children: state2.invitations.map((row) => /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("li", { className: "flex items-start gap-2 p-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "min-w-0 flex-1", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "flex flex-wrap items-baseline gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("span", { className: "truncate text-sm font-medium", children: row.email }),
+          /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+            "span",
+            {
+              className: row.joined ? "rounded-full bg-primary/10 px-1.5 py-0.5 text-xs" : "rounded-full bg-muted px-1.5 py-0.5 text-xs text-muted-foreground",
+              children: row.joined ? row.level_label : "Invited, not yet joined"
+            }
+          )
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("p", { className: "mt-0.5 text-xs text-muted-foreground", children: row.say })
+      ] }),
+      state2.may_invite ? /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("div", { className: "flex flex-shrink-0 gap-1", children: [
+        row.accept_path ? /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(
+          import_design_system17.Button,
+          {
+            size: "sm",
+            variant: "ghost",
+            title: "Copy invitation link",
+            onClick: () => void copyLink(
+              row.invitation_id,
+              row.accept_path,
+              row.email
+            ),
+            children: [
+              copied === row.invitation_id ? /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.Check, { className: "mr-1.5 h-4 w-4" }) : /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.Link2, { className: "mr-1.5 h-4 w-4" }),
+              /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("span", { className: "text-xs", children: copied === row.invitation_id ? "Copied" : "Copy link" })
+            ]
+          }
+        ) : null,
+        !row.joined ? /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+          import_design_system17.Button,
+          {
+            size: "sm",
+            variant: "ghost",
+            title: "Send a fresh link",
+            disabled: busy === `resend:${row.invitation_id}`,
+            onClick: () => void run(
+              `resend:${row.invitation_id}`,
+              () => (0, import_core19.resendOutside)(organizationId, row.invitation_id)
+            ),
+            children: busy === `resend:${row.invitation_id}` ? /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.Loader2, { className: "h-4 w-4 animate-spin" }) : /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.RotateCw, { className: "h-4 w-4" })
+          }
+        ) : null,
+        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+          import_design_system17.Button,
+          {
+            size: "sm",
+            variant: "ghost",
+            title: row.joined ? "Take their access away" : "Withdraw the invitation",
+            disabled: busy === `revoke:${row.invitation_id}`,
+            onClick: () => void (async () => {
+              const ok = await confirm({
+                title: row.joined ? `Take ${row.email}'s access to ${tableName} away?` : `Withdraw ${row.email}'s invitation?`,
+                description: row.joined ? `They lose ${tableName} immediately \u2014 anything they have open refuses the next time it asks \u2014 and, because this table is the only reason they can reach this organization at all, they lose that too. You can invite them again afterwards.` : "Their link stops working. They never had access, so there is nothing to take away.",
+                confirmLabel: row.joined ? "Take it away" : "Withdraw",
+                variant: "destructive"
+              });
+              if (!ok) return;
+              await run(
+                `revoke:${row.invitation_id}`,
+                () => (0, import_core19.revokeOutside)(organizationId, row.invitation_id)
+              );
+            })(),
+            children: busy === `revoke:${row.invitation_id}` ? /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.Loader2, { className: "h-4 w-4 animate-spin" }) : /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_lucide_react6.Trash2, { className: "h-4 w-4" })
+          }
+        )
+      ] }) : null
+    ] }, row.invitation_id)) }) : null
+  ] });
+}
+
+// src/react/sheet/ShareModal.tsx
+var import_core36 = require("@ai-matrx/sharing/core");
+
+// src/react/sheet/WhoCouldSeeOn.tsx
+var import_react9 = require("react");
+var import_lucide_react7 = require("lucide-react");
+var import_design_system20 = require("@ai-matrx/design-system");
+var import_controls7 = require("@ai-matrx/design-system/controls");
+var import_core20 = require("@ai-matrx/sharing/core");
+var import_jsx_runtime9 = require("react/jsx-runtime");
+function custom() {
+  return (0, import_core20.createClient)().schema("custom");
+}
+function WhoCouldSeeOn({ recordId }) {
+  const [at, setAt] = (0, import_react9.useState)("");
+  const [busy, setBusy] = (0, import_react9.useState)(false);
+  const [people, setPeople] = (0, import_react9.useState)(null);
+  const [error, setError] = (0, import_react9.useState)(null);
+  async function ask() {
+    setBusy(true);
+    setError(null);
+    const { data, error: failed } = await custom().rpc("who_could_see_on", { p_record_id: recordId, p_at: new Date(at).toISOString() });
+    setBusy(false);
+    const answer = data;
+    if (failed || !answer?.success) {
+      setPeople(null);
+      setError(failed?.message ?? answer?.error ?? "That moment could not be replayed.");
+      return;
+    }
+    setPeople(answer.people ?? []);
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("section", { className: "mt-3 flex flex-col gap-1.5 border-t border-border pt-3", "data-who-could-see-on": recordId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("span", { className: "flex items-center gap-1 text-xs font-medium", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(import_lucide_react7.History, { className: "h-3.5 w-3.5" }),
+      "Who could see this on\u2026"
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("div", { className: "flex items-center gap-1", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+        import_controls7.DateTimeField,
+        {
+          "aria-label": "Moment to ask about",
+          value: at,
+          onValueChange: (v) => setAt(v ?? ""),
+          className: "min-w-0 flex-1"
+        }
+      ),
+      /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(import_design_system20.Button, { size: "sm", variant: "outline", className: "h-7 px-2 text-xs", disabled: busy || at === "", onClick: () => void ask(), "data-who-could-see-ask": "", children: [
+        busy ? /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(import_lucide_react7.Loader2, { className: "mr-1 h-3.5 w-3.5 animate-spin" }) : null,
+        "Ask"
+      ] })
+    ] }),
+    people ? people.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("p", { className: "text-xs text-muted-foreground", children: "Nobody could see it then." }) : /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("ul", { className: "flex flex-col gap-0.5", "data-who-could-see-list": "", children: people.map((p) => /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("li", { className: "flex items-center justify-between gap-2 text-xs", "data-who-could-see-person": p.id ?? "", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("span", { className: "min-w-0 truncate", children: [
+        p.name ?? p.email ?? "Someone",
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("span", { className: "text-muted-foreground", children: [
+          " \xB7 ",
+          p.via
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("span", { className: "flex shrink-0 items-center gap-1 text-muted-foreground", children: [
+        p.level ? import_core20.PERMISSION_LEVEL_SHORT_LABELS[p.level] ?? p.level : null,
+        p.has_access_now === false ? /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("span", { className: "rounded border border-border px-1", "data-who-could-see-lost": "", children: "No access now" }) : null
+      ] })
+    ] }, `${p.kind}:${p.id ?? "public"}`)) }) : null,
+    error ? /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("p", { role: "alert", className: "text-xs text-destructive", "data-who-could-see-error": "", children: error }) : null
+  ] });
+}
+
+// src/react/sheet/OrgAvailabilityNote.tsx
+var import_lucide_react8 = require("lucide-react");
+var import_jsx_runtime10 = require("react/jsx-runtime");
+var DEFAULT_VERB = {
+  viewer: "view",
+  commenter: "comment on",
+  editor: "edit",
+  admin: "manage"
+};
+function OrgAvailabilityNote({
+  permissions,
+  organizationDefault
+}) {
+  const orgs = permissions.filter(
+    (p) => p.grantedToOrganizationId && !(organizationDefault?.organizationId && p.grantedToOrganizationId === organizationDefault.organizationId)
+  );
+  const defaultLine = organizationDefault ? /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(
+    "p",
+    {
+      className: "mt-2 flex items-start gap-1.5 text-xs text-muted-foreground",
+      "data-organization-default": true,
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_lucide_react8.Building2, { className: "w-3 h-3 mt-0.5 flex-shrink-0" }),
+        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { children: [
+          "Everyone in ",
+          organizationDefault.organizationName,
+          " can",
+          " ",
+          DEFAULT_VERB[organizationDefault.level] ?? "open",
+          " this by default."
+        ] })
+      ]
+    }
+  ) : null;
+  if (orgs.length === 0) return defaultLine;
+  const names = orgs.map(
+    (p) => p.grantedToOrganization?.name ?? "an organization"
+  );
+  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
+    defaultLine,
+    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(
+      "p",
+      {
+        className: "mt-2 flex items-start gap-1.5 text-xs text-muted-foreground",
+        "data-org-availability": true,
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_lucide_react8.Building2, { className: "w-3 h-3 mt-0.5 flex-shrink-0" }),
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { children: [
+            "Also open to everyone in ",
+            names.join(", "),
+            " by its settings."
+          ] })
+        ]
+      }
+    )
+  ] });
+}
+
+// src/react/sheet/WhoCanSeeThis.tsx
+var import_react15 = require("react");
+var import_lucide_react12 = require("lucide-react");
+var import_cn5 = require("@ai-matrx/design-system/cn");
+var import_core32 = require("@ai-matrx/sharing/core");
+
+// src/react/sheet/RowControls.tsx
+var import_clipboard4 = require("@ai-matrx/kit/clipboard");
+var import_react14 = require("react");
+var import_lucide_react11 = require("lucide-react");
+
+// src/react/sheet/ui/switch.tsx
+var import_design_system21 = require("@ai-matrx/design-system");
+var React6 = __toESM(require("react"), 1);
+var import_controls8 = require("@ai-matrx/design-system/controls");
+var import_jsx_runtime11 = require("react/jsx-runtime");
+var SwitchLegacy = React6.forwardRef(({ size = "sm", ...props }, ref) => /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_design_system21.Switch, { ref, size, ...props }));
+SwitchLegacy.displayName = "SwitchLegacy";
+
+// src/react/sheet/RowControls.tsx
+var import_design_system28 = require("@ai-matrx/design-system");
+
+// src/react/sheet/ui/toggle-group.tsx
+var import_design_system22 = require("@ai-matrx/design-system");
+
+// src/react/sheet/RowControls.tsx
+var import_cn4 = require("@ai-matrx/design-system/cn");
+var import_core27 = require("@ai-matrx/sharing/core");
+var import_core28 = require("@ai-matrx/sharing/core");
+var import_core29 = require("@ai-matrx/sharing/core");
+var import_core30 = require("@ai-matrx/sharing/core");
+
+// src/react/sheet/PublicAccessTab.tsx
+var import_react12 = require("react");
+
+// src/react/sheet/ui/alert.tsx
+var import_design_system23 = require("@ai-matrx/design-system");
+
+// src/react/sheet/PublicAccessTab.tsx
+var import_lucide_react10 = require("lucide-react");
+
+// src/react/sheet/ShareLinkPanel.tsx
+var import_react11 = require("react");
+var import_design_system26 = require("@ai-matrx/design-system");
+var import_controls9 = require("@ai-matrx/design-system/controls");
+var import_lucide_react9 = require("lucide-react");
+var import_core21 = require("@ai-matrx/sharing/core");
+
+// src/react/sheet/ui/confirm-dialog.tsx
+var import_design_system24 = require("@ai-matrx/design-system");
+var import_jsx_runtime12 = require("react/jsx-runtime");
+function PortalConfirmDialog(props) {
+  const container = usePortalContainer();
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_design_system24.ConfirmDialog, { ...container ? { portalContainer: container } : {}, ...props });
+}
+
+// src/react/sheet/useShare.tsx
+var import_clipboard3 = require("@ai-matrx/kit/clipboard");
+var import_react10 = require("react");
+var import_design_system25 = require("@ai-matrx/design-system");
+var import_jsx_runtime13 = require("react/jsx-runtime");
+function useShare() {
+  const { copyText: copyTextKit } = (0, import_clipboard3.useClipboard)({
+    notify: copyNotify
+  });
+  const [copied, setCopied] = (0, import_react10.useState)(false);
+  const [fallbackUrl, setFallbackUrl] = (0, import_react10.useState)(null);
+  const [fallbackTitle, setFallbackTitle] = (0, import_react10.useState)("Copy link");
+  const [fallbackDescription, setFallbackDescription] = (0, import_react10.useState)(
+    "Press Cmd/Ctrl+C to copy, or use the Copy button below."
+  );
+  const copy = (0, import_react10.useCallback)(
+    async (text, fallback) => {
+      const showManualFallback = () => {
+        setFallbackTitle(fallback?.title ?? "Copy link");
+        setFallbackDescription(
+          fallback?.description ?? "Press Cmd/Ctrl+C to copy, or use the Copy button below."
+        );
+        setFallbackUrl(text);
+        return "manual";
+      };
+      if (!await copyTextKit(text)) return showManualFallback();
+      setCopied(true);
+      window.setTimeout(() => setCopied(false), 2e3);
+      return "copied";
+    },
+    []
+  );
+  const share = (0, import_react10.useCallback)(
+    async (options) => {
+      const url = options.url === null ? "" : options.url ?? (typeof window !== "undefined" ? window.location.href : "");
+      const payload = {
+        title: options.title,
+        ...options.text ? { text: options.text } : {},
+        ...url ? { url } : {}
+      };
+      if (typeof navigator !== "undefined" && navigator.share) {
+        try {
+          await navigator.share(payload);
+          return "shared";
+        } catch (error) {
+          if (typeof error === "object" && error !== null && "name" in error && error.name === "AbortError") {
+            return "cancelled";
+          }
+        }
+      }
+      const copyText3 = options.copyText ?? url;
+      return copy(copyText3, {
+        title: options.fallbackTitle,
+        description: options.fallbackDescription
+      });
+    },
+    [copy]
+  );
+  return {
+    share,
+    copy,
+    copied,
+    fallbackDialog: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+      import_design_system25.ClipboardFallbackDialog,
+      {
+        open: fallbackUrl !== null,
+        onOpenChange: (open) => !open && setFallbackUrl(null),
+        url: fallbackUrl ?? "",
+        title: fallbackTitle,
+        description: fallbackDescription
+      }
+    )
+  };
+}
+
+// src/react/sheet/ShareLinkPanel.tsx
+var import_core22 = require("@ai-matrx/sharing/core");
+var import_jsx_runtime14 = require("react/jsx-runtime");
+function linkListErrorMessage(error) {
+  return error instanceof Error ? error.message : "We couldn't load this item's share links.";
+}
+function ShareLinkPanel({
+  resourceType,
+  resourceId,
+  isOwner,
+  enabled = true
+}) {
+  const { toast } = useToast();
+  const [links, setLinks] = (0, import_react11.useState)([]);
+  const [loading, setLoading] = (0, import_react11.useState)(true);
+  const [loadedResourceKey, setLoadedResourceKey] = (0, import_react11.useState)(
+    null
+  );
+  const [creating, setCreating] = (0, import_react11.useState)(false);
+  const [copiedId, setCopiedId] = (0, import_react11.useState)(null);
+  const [revokeTarget, setRevokeTarget] = (0, import_react11.useState)(null);
+  const [shareTarget, setShareTarget] = (0, import_react11.useState)(null);
+  const [shareError, setShareError] = (0, import_react11.useState)(null);
+  const [refreshing, setRefreshing] = (0, import_react11.useState)(false);
+  const [handoffBusy, setHandoffBusy] = (0, import_react11.useState)(false);
+  const { share, copy: copyMessage, fallbackDialog } = useShare();
+  const resourceKey = `${resourceType}\0${resourceId}`;
+  const fetchLinks = (0, import_react11.useCallback)(
+    () => (0, import_core21.listShareLinks)(resourceType, resourceId),
+    [resourceType, resourceId]
+  );
+  const refresh = (0, import_react11.useCallback)(async () => {
+    setLoading(true);
+    setShareError(null);
+    try {
+      const freshLinks = await fetchLinks();
+      setLinks(freshLinks);
+      setLoadedResourceKey(resourceKey);
+      return freshLinks;
+    } catch (error) {
+      if (loadedResourceKey !== resourceKey) setLinks([]);
+      setLoadedResourceKey(resourceKey);
+      setShareError(linkListErrorMessage(error));
+      return null;
+    } finally {
+      setLoading(false);
+    }
+  }, [fetchLinks, loadedResourceKey, resourceKey]);
+  (0, import_react11.useEffect)(() => {
+    if (!isOwner) return;
+    let current = true;
+    void fetchLinks().then((freshLinks) => {
+      if (current) {
+        setLinks(freshLinks);
+        setLoadedResourceKey(resourceKey);
+      }
+    }).catch((error) => {
+      if (current) {
+        setLinks([]);
+        setLoadedResourceKey(resourceKey);
+        setShareError(linkListErrorMessage(error));
+      }
+    }).finally(() => {
+      if (current) setLoading(false);
+    });
+    return () => {
+      current = false;
+    };
+  }, [isOwner, fetchLinks, resourceKey]);
+  const activeLinks = links.filter((l) => l.isActive);
+  const isLoading = loading || loadedResourceKey !== resourceKey;
+  const hasLink = !isLoading && activeLinks.length > 0;
+  const copyLink = (0, import_react11.useCallback)(
+    async (sourceLink, alreadyRefreshed) => {
+      const refreshedLinks = alreadyRefreshed ?? await refresh();
+      if (!refreshedLinks) {
+        toast({
+          title: "Couldn't check this link",
+          description: "The link list couldn't be refreshed. Try again before copying.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const currentLink = refreshedLinks.find(
+        (link) => link.id === sourceLink.id
+      );
+      if (!currentLink) {
+        toast({
+          title: "This link is no longer available",
+          description: "Refresh the list and choose an active share link.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const unavailableReason = (0, import_core22.shareLinkUnavailableReason)(currentLink);
+      if (unavailableReason) {
+        toast({
+          title: "This link can't be copied",
+          description: unavailableReason,
+          variant: "destructive"
+        });
+        return;
+      }
+      const outcome = await copyMessage((0, import_core21.shareUrlForLink)(currentLink), {
+        title: "Copy link",
+        description: "Copy this link and send it to the person you want to share with."
+      });
+      if (outcome === "copied") {
+        setCopiedId(currentLink.id);
+        setTimeout(() => setCopiedId(null), 2e3);
+        toast({
+          title: "Link copied",
+          description: "Anyone with it can view \u2014 no sign-in needed."
+        });
+      }
+    },
+    [copyMessage, refresh, toast]
+  );
+  const createLinkOnce = (0, import_react11.useCallback)(async () => {
+    const result = await (0, import_core21.createShareLink)({ resourceType, resourceId });
+    if (result.success && result.url) {
+      const freshLinks = await refresh();
+      const createdLink = result.token && freshLinks ? freshLinks.find((link) => link.token === result.token) : void 0;
+      if (!createdLink || !freshLinks) {
+        toast({
+          title: "Link created but not copied",
+          description: "The current link state couldn't be confirmed. Refresh the list before sharing it.",
+          variant: "destructive"
+        });
+        return;
+      }
+      await copyLink(createdLink, freshLinks);
+    } else {
+      toast({
+        title: "Couldn't create link",
+        description: result.error ?? "Please try again",
+        variant: "destructive"
+      });
+    }
+  }, [resourceType, resourceId, refresh, copyLink, toast]);
+  const creatingRef = (0, import_react11.useRef)(false);
+  const handleCreate = (0, import_react11.useCallback)(async () => {
+    if (creatingRef.current) return;
+    creatingRef.current = true;
+    setCreating(true);
+    try {
+      await createLinkOnce();
+    } finally {
+      creatingRef.current = false;
+      setCreating(false);
+    }
+  }, [createLinkOnce]);
+  const handleRevoke = (0, import_react11.useCallback)(async () => {
+    if (!revokeTarget) return;
+    const result = await (0, import_core21.revokeShareLink)(revokeTarget.id);
+    setRevokeTarget(null);
+    if (result.success) {
+      await refresh();
+      toast({
+        title: "Link turned off",
+        description: "It can no longer be opened."
+      });
+    } else {
+      toast({
+        title: "Couldn't revoke",
+        description: result.error,
+        variant: "destructive"
+      });
+    }
+  }, [revokeTarget, refresh, toast]);
+  const prepareTextShare = (0, import_react11.useCallback)(
+    async (linkId) => {
+      setRefreshing(true);
+      const freshLinks = await refresh();
+      setRefreshing(false);
+      if (!freshLinks) {
+        toast({
+          title: "Couldn't check this link",
+          description: "The link list couldn't be refreshed. Try again before sharing.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const freshLink = freshLinks.find((link) => link.id === linkId);
+      if (!freshLink) {
+        toast({
+          title: "This link is no longer available",
+          description: "Refresh the list and choose an active share link.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const unavailableReason = (0, import_core22.shareLinkUnavailableReason)(freshLink);
+      if (unavailableReason) {
+        toast({
+          title: "This link can't be shared",
+          description: unavailableReason,
+          variant: "destructive"
+        });
+        return;
+      }
+      setShareTarget(freshLink);
+    },
+    [refresh, toast]
+  );
+  const closeShareReview = (0, import_react11.useCallback)(() => {
+    if (!handoffBusy) setShareTarget(null);
+  }, [handoffBusy]);
+  const handleNativeHandoff = (0, import_react11.useCallback)(async () => {
+    if (!shareTarget) return;
+    setHandoffBusy(true);
+    try {
+      const freshLinks = await refresh();
+      if (!freshLinks) {
+        toast({
+          title: "Couldn't check this link",
+          description: "The link list couldn't be refreshed. Try again before sharing.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const currentLink = freshLinks.find((link) => link.id === shareTarget.id);
+      if (!currentLink) {
+        setShareTarget(null);
+        toast({
+          title: "This link is no longer available",
+          description: "It may have been turned off. Choose an active link to continue.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const handoffReview = (0, import_core22.evaluateShareLinkHandoff)(shareTarget, currentLink);
+      if (handoffReview.status === "unavailable") {
+        setShareTarget(null);
+        toast({
+          title: "This link can't be shared",
+          description: handoffReview.reason,
+          variant: "destructive"
+        });
+        return;
+      }
+      if (handoffReview.status === "changed") {
+        setShareTarget(currentLink);
+        toast({
+          title: "Link access changed",
+          description: "Review the updated access, expiry, and view count before sharing.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const message = (0, import_core22.createSafeShareMessage)((0, import_core21.shareUrlForLink)(currentLink));
+      const outcome = await share({
+        title: "AI Matrx share",
+        text: message,
+        url: null,
+        copyText: message,
+        fallbackTitle: "Copy message",
+        fallbackDescription: "Copy the reviewed message below and paste it into your messaging app."
+      });
+      if (outcome === "cancelled") return;
+      setShareTarget(null);
+      if (outcome === "shared") {
+        toast({
+          title: "Share options opened",
+          description: "AI Matrx didn't send the message. Complete it in your share app."
+        });
+      } else if (outcome === "copied") {
+        toast({
+          title: "Message copied",
+          description: "Paste it into a message. AI Matrx didn't send it."
+        });
+      }
+    } finally {
+      setHandoffBusy(false);
+    }
+  }, [shareTarget, refresh, share, toast]);
+  const handleCopyReviewedMessage = (0, import_react11.useCallback)(async () => {
+    if (!shareTarget) return;
+    setHandoffBusy(true);
+    try {
+      const freshLinks = await refresh();
+      if (!freshLinks) {
+        toast({
+          title: "Couldn't check this link",
+          description: "The link list couldn't be refreshed. Try again before copying.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const currentLink = freshLinks.find((link) => link.id === shareTarget.id);
+      if (!currentLink) {
+        setShareTarget(null);
+        toast({
+          title: "This link is no longer available",
+          description: "It may have been turned off. Choose an active link to continue.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const handoffReview = (0, import_core22.evaluateShareLinkHandoff)(shareTarget, currentLink);
+      if (handoffReview.status === "unavailable") {
+        setShareTarget(null);
+        toast({
+          title: "This link can't be shared",
+          description: handoffReview.reason,
+          variant: "destructive"
+        });
+        return;
+      }
+      if (handoffReview.status === "changed") {
+        setShareTarget(currentLink);
+        toast({
+          title: "Link access changed",
+          description: "Review the updated access, expiry, and view count before copying.",
+          variant: "destructive"
+        });
+        return;
+      }
+      const message = (0, import_core22.createSafeShareMessage)((0, import_core21.shareUrlForLink)(currentLink));
+      const outcome = await copyMessage(message, {
+        title: "Copy message",
+        description: "Copy the reviewed message below and paste it into your messaging app."
+      });
+      setShareTarget(null);
+      if (outcome === "copied") {
+        toast({
+          title: "Message copied",
+          description: "Paste it into a message. AI Matrx didn't send it."
+        });
+      }
+    } finally {
+      setHandoffBusy(false);
+    }
+  }, [shareTarget, refresh, copyMessage, toast]);
+  if (!isOwner) return null;
+  if (!enabled) {
+    return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "flex items-start gap-2 p-3 bg-muted/30 rounded-lg border", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Link2, { className: "w-4 h-4 text-muted-foreground flex-shrink-0 mt-0.5" }),
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "min-w-0", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("h3", { className: "text-sm font-medium", children: "No-login links aren\u2019t on for this item type" }),
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("p", { className: "text-xs text-muted-foreground", children: "Share it with specific people or an organization instead \u2014 they open it signed in." })
+      ] })
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "space-y-2.5 p-3 bg-muted/30 rounded-lg border", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "flex items-center justify-between gap-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "flex items-center gap-2 min-w-0", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Link2, { className: "w-4 h-4 text-primary flex-shrink-0" }),
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "min-w-0", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("h3", { className: "text-sm font-medium", children: "Anyone with the link" }),
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("p", { className: "text-xs text-muted-foreground", children: hasLink ? `Link is on \xB7 ${activeLinks.length} active` : "Create a link that opens with no sign-in required" })
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(
+        import_design_system26.Button,
+        {
+          size: "sm",
+          onClick: handleCreate,
+          disabled: creating,
+          className: "flex-shrink-0",
+          children: [
+            creating ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Loader2, { className: "w-4 h-4 animate-spin" }) : /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Plus, { className: "w-4 h-4" }),
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("span", { className: "ml-1 hidden sm:inline", children: hasLink ? "New link" : "Create link" })
+          ]
+        }
+      )
+    ] }),
+    isLoading ? /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "flex items-center justify-center py-3 text-xs text-muted-foreground", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Loader2, { className: "w-3.5 h-3.5 animate-spin mr-2" }),
+      "Loading links\u2026"
+    ] }) : activeLinks.length === 0 && !shareError ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("p", { className: "text-xs text-muted-foreground py-1", children: "No share links yet. Create one to share this with anyone." }) : /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("div", { className: "space-y-1.5", children: activeLinks.map((link) => {
+      const unavailableReason = (0, import_core22.shareLinkUnavailableReason)(link);
+      return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(
+        "div",
+        {
+          className: "flex items-center gap-1.5 rounded-md border bg-background p-1.5",
+          children: [
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+              import_controls9.Input,
+              {
+                mono: true,
+                readOnly: true,
+                value: (0, import_core21.shareUrlForLink)(link),
+                className: "min-w-0 flex-1",
+                onFocus: (e) => e.currentTarget.select()
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(
+              "span",
+              {
+                className: "flex items-center gap-1 text-[10px] text-muted-foreground px-1",
+                title: `${link.useCount} view${link.useCount === 1 ? "" : "s"}`,
+                children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Eye, { className: "w-3 h-3" }),
+                  link.useCount
+                ]
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+              import_design_system26.Button,
+              {
+                variant: "ghost",
+                size: "icon",
+                className: "h-11 w-11 flex-shrink-0 sm:h-8 sm:w-8",
+                onClick: () => copyLink(link),
+                disabled: !!unavailableReason,
+                title: unavailableReason ?? "Copy link",
+                "aria-label": "Copy share link",
+                children: copiedId === link.id ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Check, { className: "w-4 h-4 text-green-500" }) : /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Copy, { className: "w-4 h-4" })
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+              import_design_system26.Button,
+              {
+                variant: "ghost",
+                size: "icon",
+                className: "h-11 w-11 flex-shrink-0 sm:h-8 sm:w-8",
+                onClick: () => prepareTextShare(link.id),
+                disabled: !!unavailableReason || refreshing,
+                title: unavailableReason ?? "Review before sharing by text",
+                "aria-label": "Share by text",
+                children: refreshing ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Loader2, { className: "w-4 h-4 animate-spin" }) : /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.MessageSquareText, { className: "w-4 h-4" })
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+              import_design_system26.Button,
+              {
+                variant: "ghost",
+                size: "icon",
+                className: "h-11 w-11 flex-shrink-0 text-destructive sm:h-8 sm:w-8",
+                onClick: () => setRevokeTarget(link),
+                title: "Turn off link",
+                "aria-label": "Turn off share link",
+                children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Trash2, { className: "w-4 h-4" })
+              }
+            )
+          ]
+        },
+        link.id
+      );
+    }) }),
+    shareError ? /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(
+      "div",
+      {
+        role: "alert",
+        className: "flex items-center justify-between gap-2 text-xs text-destructive",
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("span", { children: shareError }),
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(
+            import_design_system26.Button,
+            {
+              type: "button",
+              variant: "outline",
+              size: "sm",
+              disabled: isLoading,
+              onClick: () => refresh(),
+              children: [
+                /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.RefreshCw, { className: "mr-1 h-3.5 w-3.5" }),
+                "Refresh"
+              ]
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(ErrorAlchemyMenu, { className: "ml-auto" })
+        ]
+      }
+    ) : null,
+    refreshing && !loading ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("span", { className: "sr-only", role: "status", children: "Checking current link access" }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+      PortalConfirmDialog,
+      {
+        open: shareTarget !== null,
+        onOpenChange: (open) => !open && closeShareReview(),
+        title: "Review message before sharing",
+        description: "Anyone with this link can open it without signing in. AI Matrx will prepare the message; it won't send it.",
+        content: shareTarget ? /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "space-y-3 text-sm", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("dl", { className: "space-y-1.5 text-xs", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "flex justify-between gap-3", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("dt", { className: "text-muted-foreground", children: "Access" }),
+              /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("dd", { className: "text-right", children: (0, import_core22.describeShareLinkAccess)(shareTarget.permissionLevel) })
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "flex justify-between gap-3", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("dt", { className: "text-muted-foreground", children: "Expiry" }),
+              /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("dd", { className: "text-right", children: (0, import_core22.describeShareLinkExpiry)(shareTarget.expiresAt) })
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "flex justify-between gap-3", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("dt", { className: "text-muted-foreground", children: "Views" }),
+              /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("dd", { className: "text-right", children: shareTarget.maxUses === null ? `${shareTarget.useCount} used \xB7 no limit` : `${shareTarget.useCount} of ${shareTarget.maxUses} used` })
+            ] })
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "space-y-1", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("p", { className: "text-xs font-medium", children: "Message preview" }),
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("p", { className: "rounded-md border bg-muted/30 p-3 break-words", children: (0, import_core22.createSafeShareMessage)((0, import_core21.shareUrlForLink)(shareTarget)) })
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(
+            import_design_system26.Button,
+            {
+              type: "button",
+              variant: "outline",
+              className: "min-h-11 w-full sm:min-h-0",
+              disabled: handoffBusy,
+              onClick: handleCopyReviewedMessage,
+              children: [
+                /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_lucide_react9.Copy, { className: "mr-2 h-4 w-4" }),
+                "Copy message"
+              ]
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("p", { className: "text-xs text-muted-foreground", children: "You can turn this link off from the share panel at any time." })
+        ] }) : null,
+        confirmLabel: typeof navigator !== "undefined" && typeof navigator.share === "function" ? "Open share options" : "Copy message",
+        cancelLabel: "Not now",
+        contentClassName: "w-[calc(100%-2rem)] sm:!max-w-[34rem]",
+        busy: handoffBusy,
+        onConfirm: handleNativeHandoff
+      }
+    ),
+    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+      PortalConfirmDialog,
+      {
+        open: !!revokeTarget,
+        onOpenChange: (o) => !o && setRevokeTarget(null),
+        title: "Turn off this link?",
+        description: "Anyone currently using it will lose access. This can't be undone.",
+        confirmLabel: "Turn off link",
+        variant: "destructive",
+        onConfirm: handleRevoke
+      }
+    ),
+    fallbackDialog
+  ] });
+}
+
+// src/react/sheet/PublicAccessTab.tsx
+var import_design_system27 = require("@ai-matrx/design-system");
+var import_core23 = require("@ai-matrx/sharing/core");
+var import_core24 = require("@ai-matrx/sharing/core");
+var import_core25 = require("@ai-matrx/sharing/core");
+var import_jsx_runtime15 = require("react/jsx-runtime");
+function anyoneReachWords(typeLabel, reach) {
+  if (reach.publicPage) return `Anyone, signed in or not, opens this ${typeLabel} at its address as a viewer.`;
+  return `Everyone signed in to AI Matrx can find and view this ${typeLabel}.` + (reach.noLoginLink ? " People without an account need a no-login link." : " People without an account cannot open it.");
+}
+function PublicAccessTab({
+  isOwner,
+  resourceType,
+  resourceId,
+  resourceName,
+  copy
+}) {
+  const [linkShareable, setLinkShareable] = (0, import_react12.useState)(false);
+  const [loading, setLoading] = (0, import_react12.useState)(true);
+  const [capabilitiesError, setCapabilitiesError] = (0, import_react12.useState)(null);
+  (0, import_react12.useEffect)(() => {
+    let active = true;
+    setLoading(true);
+    setCapabilitiesError(null);
+    (0, import_core24.getShareCapabilities)(resourceType).then((c) => {
+      if (active) setLinkShareable(c.isLinkShareable);
+    }).catch((error) => {
+      if (active) setCapabilitiesError((0, import_core23.extractErrorMessage)(error));
+    }).finally(() => {
+      if (active) setLoading(false);
+    });
+    return () => {
+      active = false;
+    };
+  }, [resourceType]);
+  const location = (0, import_core25.sharingLocation)(copy?.surface ?? "Anyone link");
+  if (loading) return /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_design_system27.Skeleton, { className: "h-20 w-full" });
+  if (capabilitiesError) {
+    return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)(import_design_system23.Alert, { variant: "destructive", className: "group", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_lucide_react10.AlertTriangle, { className: "h-4 w-4" }),
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)(import_design_system23.AlertDescription, { className: "flex items-start gap-2", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("span", { className: "flex-1", children: capabilitiesError }),
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("span", { className: "shrink-0 opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100", children: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(
+          CopyButtons,
+          {
+            size: "xs",
+            label: "Anyone link error",
+            human: () => [
+              "The Anyone link controls could not load.",
+              capabilitiesError,
+              `Resource: ${resourceType}:${resourceId} (${resourceName})`
+            ].join("\n"),
+            json: () => ({
+              error: capabilitiesError,
+              resource_type: resourceType,
+              resource_id: resourceId
+            }),
+            agent: () => ({
+              kind: "public-access-error",
+              location,
+              description: "The share-capabilities lookup failed, so the Anyone link tab renders no controls. This is the error on screen, verbatim.",
+              data: {
+                rendered_error: capabilitiesError,
+                resource_type: resourceType,
+                resource_id: resourceId,
+                resource_name: resourceName,
+                kpis: copy?.kpis ?? null
+              },
+              attributes: { resource_type: resourceType, resource_id: resourceId, state: "error" }
+            })
+          }
+        ) })
+      ] })
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { className: "space-y-3", children: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(
+    ShareLinkPanel,
+    {
+      resourceType,
+      resourceId,
+      isOwner,
+      enabled: linkShareable
+    }
+  ) });
+}
+
+// src/react/sheet/RowControls.tsx
+var import_core31 = require("@ai-matrx/sharing/core");
+
+// src/react/sheet/SearchEngineIndexedSwitch.tsx
+var import_react13 = require("react");
+var import_cn3 = require("@ai-matrx/design-system/cn");
+var import_core26 = require("@ai-matrx/sharing/core");
+var import_jsx_runtime16 = require("react/jsx-runtime");
+function SearchEngineIndexedSwitch({
+  resourceType,
+  resourceId,
+  publishedHint,
+  className
+}) {
+  const [state2, setState] = (0, import_react13.useState)(null);
+  const [busy, setBusy] = (0, import_react13.useState)(false);
+  const { toast } = useToast();
+  const load = (0, import_react13.useCallback)(async () => {
+    const res = await (0, import_core26.getSearchEngineIndexedState)(resourceType, resourceId);
+    if (res.error) {
+      console.warn(`[search-engine-indexed] state for ${resourceType}/${resourceId}: ${res.error}`);
+      setState(null);
+      return;
+    }
+    setState(res.state);
+  }, [resourceType, resourceId]);
+  (0, import_react13.useEffect)(() => {
+    void load();
+  }, [load, publishedHint]);
+  if (!state2 || !state2.enrolled || !state2.published_to_web) return null;
+  const onChange = async (next) => {
+    setBusy(true);
+    const res = await (0, import_core26.setSearchEngineIndexed)(resourceType, resourceId, next);
+    setBusy(false);
+    if (res.error || !res.state) {
+      toast({
+        title: "Couldn't change search engine indexing",
+        description: res.error ?? "Please try again",
+        variant: "destructive"
+      });
+      return;
+    }
+    setState(res.state);
+    toast({
+      title: next ? "Search engines may list this page" : "Search engines are told not to list this page",
+      description: "Anyone with the address can still open it."
+    });
+  };
+  const followsDefault = state2.value === null;
+  const id = `indexed-${resourceType}-${resourceId}`;
+  return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(
+    "span",
+    {
+      className: (0, import_cn3.cn)("inline-flex shrink-0 items-center gap-1.5", className),
+      title: followsDefault ? `Following the default for this type (${state2.type_default ? "indexed" : "not indexed"}).` : "Set for this item.",
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("label", { htmlFor: id, className: "cursor-pointer text-xs text-muted-foreground", children: "Indexed by search engines" }),
+        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+          import_controls8.Switch,
+          {
+            id,
+            checked: state2.effective,
+            onCheckedChange: onChange,
+            disabled: busy || !state2.can_change,
+            "aria-label": "Indexed by search engines"
+          }
+        )
+      ]
+    }
+  );
+}
+
+// src/react/sheet/RowControls.tsx
+var import_jsx_runtime17 = require("react/jsx-runtime");
+var SAYS_SLOT_KEYS = [...import_core31.SHOWN_TO_ORDER, "default"];
+function RowControls({
+  resourceType,
+  resourceId,
+  canChange,
+  shownTo,
+  isPublic,
+  childRecord = false,
+  publishable = true,
+  onSetShownTo,
+  onPublish,
+  onStopPublishing
+}) {
+  const { copyText: copyText3 } = (0, import_clipboard4.useClipboard)({
+    notify: copyNotify
+  });
+  const { toast } = useToast();
+  const [caps, setCaps] = (0, import_react14.useState)(null);
+  const [capsError, setCapsError] = (0, import_react14.useState)(null);
+  const [busy, setBusy] = (0, import_react14.useState)(null);
+  const [copied, setCopied] = (0, import_react14.useState)(false);
+  (0, import_react14.useEffect)(() => {
+    let live = true;
+    setCapsError(null);
+    (0, import_core28.getShareCapabilities)(resourceType).then((c) => live && setCaps(c)).catch((e) => live && setCapsError((0, import_core27.extractErrorMessage)(e)));
+    return () => {
+      live = false;
+    };
+  }, [resourceType]);
+  const publicUrl = (0, import_core29.publicResourceUrl)(resourceType, resourceId);
+  const copyAddress = (0, import_react14.useCallback)(async () => {
+    if (!publicUrl) return;
+    if (!await copyText3(publicUrl, void 0, "Couldn't copy the web address")) return;
+    setCopied(true);
+    setTimeout(() => setCopied(false), 2e3);
+  }, [publicUrl, toast]);
+  if (capsError) {
+    return /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)("p", { className: "rounded-lg border border-destructive/20 bg-destructive/10 p-3 text-xs text-destructive-ink", children: [
+      "Couldn't read this item's sharing options: ",
+      capsError,
+      /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(ErrorAlchemyMenu, { error: capsError })
+    ] });
+  }
+  if (childRecord) return null;
+  if (!caps) {
+    return /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("section", { "aria-hidden": "true", className: "invisible space-y-2 rounded-lg border p-3", "data-row-controls-reserved": "", children: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("div", { className: "flex h-8 items-center" }) });
+  }
+  const showShownTo = caps.shownToOffered && shownTo !== void 0;
+  const showPublish = publishable && caps.publishLane !== null;
+  if (!showShownTo && !showPublish) return null;
+  const shownChoices = import_core31.SHOWN_TO_ORDER.filter(
+    (v) => v !== "everyone_on_ai_matrx" || isPublic || shownTo === v
+  );
+  const publishSays = caps.publishLane === "card" ? "Only its card \u2014 the name, description and inputs \u2014 opens for anyone. What is inside stays in its organization." : (
+    // Never promise a signed-out read the type cannot deliver (no page of its own).
+    anyoneReachWords(
+      (0, import_core30.getShareableResource)(resourceType)?.displayLabel?.toLowerCase() ?? "item",
+      { publicPage: Boolean(publicUrl), noLoginLink: caps.isLinkShareable }
+    )
+  );
+  const chooseShownTo = async (next) => {
+    if (!canChange || next === shownTo || busy) return;
+    setBusy("shown");
+    try {
+      const result = await onSetShownTo(next);
+      if (result.success === false) {
+        toast({
+          title: `Couldn't change "Shown to"`,
+          description: result.error || "Please try again",
+          variant: "destructive"
+        });
+      }
+    } finally {
+      setBusy(null);
+    }
+  };
+  const togglePublish = async (on) => {
+    if (!canChange || busy) return;
+    setBusy("publish");
+    try {
+      const result = on ? await onPublish() : await onStopPublishing();
+      toast(
+        result.success === false ? {
+          title: on ? "Couldn't publish it to the web" : "Couldn't stop publishing it to the web",
+          description: result.error || "Please try again",
+          variant: "destructive"
+        } : {
+          title: on ? "Published to the web" : "No longer published to the web",
+          description: on ? publishSays : "People outside its organization can no longer open it, unless it is shared with them."
+        }
+      );
+    } finally {
+      setBusy(null);
+    }
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)(
+    "section",
+    {
+      className: "space-y-2 rounded-lg border bg-muted/30 p-3",
+      "data-row-controls": true,
+      "data-published": isPublic ? "true" : "false",
+      children: [
+        showShownTo && /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)("div", { className: "flex flex-wrap items-center justify-between gap-2", "data-shown-to": shownTo ?? "default", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("span", { className: "text-xs font-medium", children: "Shown to" }),
+          canChange ? /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(
+            import_design_system22.ToggleGroup,
+            {
+              type: "single",
+              size: "sm",
+              variant: "outline",
+              value: shownTo ?? "",
+              onValueChange: (v) => v && void chooseShownTo(v),
+              "aria-label": "Shown to",
+              className: "flex-wrap justify-end",
+              children: shownChoices.map((v) => /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(
+                import_design_system22.ToggleGroupItem,
+                {
+                  value: v,
+                  "aria-label": import_core31.SHOWN_TO_WORDS[v].label,
+                  title: import_core31.SHOWN_TO_WORDS[v].says,
+                  className: "h-7 px-2 text-xs data-[state=on]:border-primary data-[state=on]:bg-primary/10 data-[state=on]:text-primary-ink",
+                  children: import_core31.SHOWN_TO_WORDS[v].label
+                },
+                v
+              ))
+            }
+          ) : /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("span", { className: "text-xs text-muted-foreground", children: shownTo ? import_core31.SHOWN_TO_WORDS[shownTo].label : "The default for this type" })
+        ] }),
+        showShownTo && // ZERO LAYOUT SHIFT (Arman 2026-10-07): the sentence under "Shown to" changes with every
+        // choice and each one wraps to a different number of lines on a phone. The slot is a
+        // one-cell grid holding EVERY sentence, only the current one visible, so its height is the
+        // tallest one's at any width and nothing below it ever moves. The spinner's place is held
+        // too (invisible, never removed).
+        /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("div", { className: "grid text-xs text-muted-foreground", "data-shown-to-says-slot": "", children: SAYS_SLOT_KEYS.map((v) => {
+          const current = (shownTo ?? "default") === v;
+          return /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)(
+            "p",
+            {
+              className: (0, import_cn4.cn)("col-start-1 row-start-1", !current && "invisible"),
+              "aria-hidden": !current,
+              "data-shown-to-says": v,
+              children: [
+                v === "default" ? "Not set \u2014 the default for this type applies." : import_core31.SHOWN_TO_WORDS[v].says,
+                " ",
+                "A list setting, never who may open it.",
+                /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(
+                  import_lucide_react11.Loader2,
+                  {
+                    className: (0, import_cn4.cn)(
+                      "ml-1 inline h-3 w-3 animate-spin",
+                      !(current && busy === "shown") && "invisible"
+                    )
+                  }
+                )
+              ]
+            },
+            v
+          );
+        }) }),
+        showPublish && /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)("div", { className: (0, import_cn4.cn)("space-y-1.5", showShownTo && "border-t pt-2"), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)("div", { className: "flex items-center justify-between gap-2", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("span", { className: "text-xs font-medium", children: "Published to the web" }),
+            /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)("span", { className: "flex items-center gap-3", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(
+                SearchEngineIndexedSwitch,
+                {
+                  resourceType,
+                  resourceId,
+                  publishedHint: isPublic
+                }
+              ),
+              busy === "publish" && /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_lucide_react11.Loader2, { className: "h-3.5 w-3.5 animate-spin text-muted-foreground" }),
+              canChange ? /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(
+                import_controls8.Switch,
+                {
+                  checked: isPublic,
+                  onCheckedChange: (on) => void togglePublish(on),
+                  disabled: busy === "publish",
+                  "aria-label": "Published to the web"
+                }
+              ) : /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("span", { className: "text-xs text-muted-foreground", children: isPublic ? "On" : "Off" })
+            ] })
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("p", { className: "text-xs text-muted-foreground", children: isPublic ? publishSays : `When on: ${publishSays}` }),
+          isPublic && publicUrl && /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)("div", { className: "flex items-center gap-1.5 rounded-md border bg-background p-1.5", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("span", { className: "min-w-0 flex-1 truncate px-1 font-mono text-xs", children: publicUrl }),
+            /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(
+              import_design_system28.Button,
+              {
+                variant: "ghost",
+                size: "icon",
+                className: "h-7 w-7 flex-shrink-0",
+                onClick: () => void copyAddress(),
+                title: "Copy web address",
+                children: copied ? /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_lucide_react11.Check, { className: "h-3.5 w-3.5" }) : /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_lucide_react11.Copy, { className: "h-3.5 w-3.5" })
+              }
+            )
+          ] })
+        ] })
+      ]
+    }
+  );
+}
+
+// src/react/sheet/WhoCanSeeThis.tsx
+var import_jsx_runtime18 = require("react/jsx-runtime");
+var LEVEL_WORD = {
+  viewer: "Viewer",
+  commenter: "Commenter",
+  editor: "Editor",
+  admin: "Admin"
+};
+var ONLY_ME_HINT = "Hidden from members' lists. Members with the link can still open it.";
+function WhoCanSeeThis({
+  whoCanSee,
+  canChange,
+  onChoose,
+  row
+}) {
+  const { orgs } = useNavTree();
+  const [pending, setPending] = (0, import_react15.useState)(null);
+  const [said, setSaid] = (0, import_react15.useState)(null);
+  if (!whoCanSee) return row ? /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(RowControls, { ...row, canChange }) : null;
+  const orgName = whoCanSee.organizationName ?? (whoCanSee.organizationId ? orgs.find((o) => o.id === whoCanSee.organizationId)?.name : void 0) ?? "this organization";
+  const level = whoCanSee.memberDefaultLevel ? LEVEL_WORD[whoCanSee.memberDefaultLevel] ?? whoCanSee.memberDefaultLevel : null;
+  const options = [
+    {
+      choice: "mine",
+      label: import_core32.SHOWN_TO_WORDS.only_me.label,
+      says: import_core32.SHOWN_TO_WORDS.only_me.says,
+      hint: ONLY_ME_HINT,
+      icon: import_lucide_react12.EyeOff
+    },
+    {
+      choice: "organization",
+      label: `Everyone in ${orgName}`,
+      says: level ? `Every member, as ${level}. This is the organization's default.` : "Every member. This is the organization's default.",
+      icon: import_lucide_react12.Building2
+    }
+  ];
+  if (whoCanSee.worldOffered || whoCanSee.choice === "world") {
+    options.push({
+      choice: "world",
+      label: "Anyone with the link",
+      says: "Out in the world, findable by the link and nothing else.",
+      icon: import_lucide_react12.Globe
+    });
+  }
+  const current = options.find((o) => o.choice === whoCanSee.choice) ?? options[options.length - 1];
+  const apply = async (choice) => {
+    setPending(choice);
+    setSaid(null);
+    try {
+      const result = await onChoose(choice);
+      setSaid(
+        result.success ? { ok: true, text: result.message ?? "Saved." } : { ok: false, text: result.error ?? "That could not be changed." }
+      );
+    } finally {
+      setPending(null);
+    }
+  };
+  const pick = (choice) => {
+    if (choice === whoCanSee.choice || pending) return;
+    void apply(choice);
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)(
+    "section",
+    {
+      className: "space-y-1.5 p-3 bg-muted/30 rounded-lg border",
+      "data-who-can-see": true,
+      "data-lane": whoCanSee.choice,
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("p", { className: "text-xs font-medium", children: "Who can see this" }),
+        canChange ? /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(
+          "div",
+          {
+            role: "radiogroup",
+            "aria-label": "Who can see this",
+            className: "grid grid-cols-1 gap-1.5 sm:grid-flow-col sm:auto-cols-fr",
+            children: options.map((o) => {
+              const Icon = o.icon;
+              const selected = o.choice === whoCanSee.choice;
+              return /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)("div", { className: "relative min-w-0", children: [
+                /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)(
+                  "button",
+                  {
+                    type: "button",
+                    role: "radio",
+                    "aria-checked": selected,
+                    "data-lane-choice": o.choice,
+                    onClick: () => pick(o.choice),
+                    className: (0, import_cn5.cn)(
+                      "flex w-full min-w-0 items-start gap-2 rounded-md border p-2 text-left transition-colors",
+                      o.hint && "pr-7",
+                      selected ? "border-primary bg-background" : "border-transparent hover:bg-background/60"
+                    ),
+                    children: [
+                      pending === o.choice ? /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(import_lucide_react12.Loader2, { className: "mt-0.5 h-4 w-4 flex-shrink-0 animate-spin text-primary" }) : /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(
+                        Icon,
+                        {
+                          className: (0, import_cn5.cn)(
+                            "mt-0.5 h-4 w-4 flex-shrink-0",
+                            selected ? "text-primary" : "text-muted-foreground"
+                          )
+                        }
+                      ),
+                      /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)("span", { className: "min-w-0 flex-1", children: [
+                        /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)("span", { className: "flex items-center gap-1 text-sm font-medium", children: [
+                          /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("span", { className: "min-w-0 break-words", children: o.label }),
+                          selected && /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(import_lucide_react12.Check, { className: "h-3.5 w-3.5 flex-shrink-0 text-primary" })
+                        ] }),
+                        /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("span", { className: "block text-xs text-muted-foreground", children: o.says })
+                      ] })
+                    ]
+                  }
+                ),
+                o.hint && /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(
+                  InfoHint,
+                  {
+                    text: o.hint,
+                    label: `About ${o.label}`,
+                    className: "absolute right-2 top-2.5"
+                  }
+                )
+              ] }, o.choice);
+            })
+          }
+        ) : /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)("p", { className: "text-sm", "data-who-can-see-text": true, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)("span", { className: "font-medium", children: [
+            current.label,
+            "."
+          ] }),
+          " ",
+          /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("span", { className: "text-xs text-muted-foreground", children: current.says }),
+          current.hint && /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(InfoHint, { text: current.hint, label: `About ${current.label}` })
+        ] }),
+        said && /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(
+          "p",
+          {
+            className: (0, import_cn5.cn)(
+              "text-xs",
+              said.ok ? "text-green-700 dark:text-green-300" : "text-destructive"
+            ),
+            "data-lane-said": true,
+            children: said.text
+          }
+        )
+      ]
+    }
+  );
+}
+
+// src/react/sheet/SecureLinkPanel.tsx
+var import_react16 = require("react");
+var import_lucide_react13 = require("lucide-react");
+var import_design_system29 = require("@ai-matrx/design-system");
+var import_design_system30 = require("@ai-matrx/design-system");
+var import_controls10 = require("@ai-matrx/design-system/controls");
+var import_design_system31 = require("@ai-matrx/design-system");
+var import_design_system32 = require("@ai-matrx/design-system");
+var import_vault2 = require("@ai-matrx/vault");
+var import_core33 = require("@ai-matrx/sharing/core");
+var import_format2 = require("@ai-matrx/kit/format");
+var import_jsx_runtime19 = require("react/jsx-runtime");
+var STATUS_WORDS = {
+  pending: "Waiting to be opened",
+  viewed: "Opened",
+  revoked: "Turned off",
+  expired: "Expired unopened",
+  undeliverable: "Not delivered",
+  locked: "Closed after wrong codes"
+};
+function when(iso) {
+  if (!iso) return "";
+  const d = new Date(iso);
+  return Number.isNaN(d.getTime()) ? "" : d.toLocaleString(void 0, { dateStyle: "medium", timeStyle: "short" });
+}
+function SecureLinkPanel(props) {
+  return /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_vault2.IdentityGate, { identity: vaultIdentity(), children: /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(SecureLinkForm, { ...props }) });
+}
+function SecureLinkForm({ resourceType, resourceId, resourceName }) {
+  const dispatch = useAppDispatch();
+  const confirmed = (0, import_vault2.useConfirmed)();
+  const [options, setOptions] = (0, import_react16.useState)(null);
+  const [optionsError, setOptionsError] = (0, import_react16.useState)(null);
+  const [email, setEmail] = (0, import_react16.useState)("");
+  const [phone, setPhone] = (0, import_react16.useState)("");
+  const [linkChannel, setLinkChannel] = (0, import_react16.useState)("email");
+  const [fields, setFields] = (0, import_react16.useState)([]);
+  const [note, setNote] = (0, import_react16.useState)("");
+  const [sending, setSending] = (0, import_react16.useState)(false);
+  const [result, setResult] = (0, import_react16.useState)(null);
+  const [sent, setSent] = (0, import_react16.useState)(null);
+  const refreshSent = (0, import_react16.useCallback)(() => {
+    (0, import_core33.listSentSecureDeliveries)(resourceType, resourceId).then(setSent).catch(() => setSent([]));
+  }, [resourceType, resourceId]);
+  (0, import_react16.useEffect)(() => {
+    let live = true;
+    (0, import_core33.fetchSecureDeliveryOptions)(dispatch, resourceType, resourceId).then((o) => live && setOptions(o)).catch(
+      (err) => live && setOptionsError(
+        err instanceof import_core33.SecureDeliveryRefusal ? err.message : "Could not load what can be sent."
+      )
+    );
+    refreshSent();
+    return () => {
+      live = false;
+    };
+  }, [dispatch, resourceType, resourceId, refreshSent]);
+  const [phoneTyped, setPhoneTyped] = (0, import_react16.useState)(false);
+  const phonePrefilled = (0, import_react16.useRef)(false);
+  (0, import_react16.useEffect)(() => {
+    if (phoneTyped) return;
+    const address = email.trim();
+    const clearPrefill = () => {
+      if (phonePrefilled.current) {
+        setPhone("");
+        phonePrefilled.current = false;
+      }
+    };
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(address)) {
+      clearPrefill();
+      return;
+    }
+    let live = true;
+    const timer = setTimeout(() => {
+      (0, import_core33.fetchRecipientPhoneOnFile)(address).then((onFile) => {
+        if (!live) return;
+        if (onFile) {
+          setPhone(onFile);
+          phonePrefilled.current = true;
+        } else {
+          clearPrefill();
+        }
+      }).catch(() => {
+        if (live) clearPrefill();
+      });
+    }, 400);
+    return () => {
+      live = false;
+      clearTimeout(timer);
+    };
+  }, [email, phoneTyped]);
+  const hasBoth = email.trim() !== "" && phone.trim() !== "";
+  const canSend = email.trim() !== "" && !sending;
+  async function send() {
+    setSending(true);
+    setResult(null);
+    try {
+      const receipt = await confirmed(() => (0, import_core33.sendSecureDelivery)(dispatch, {
+        resource_type: resourceType,
+        resource_id: resourceId,
+        recipient_email: email.trim() || null,
+        recipient_phone: phone.trim() || null,
+        field_keys: fields,
+        link_channel: hasBoth ? linkChannel : null,
+        note: note.trim() || null
+      }));
+      setResult({ tone: receipt.same_channel ? "warn" : "ok", text: receipt.sentence });
+      setEmail("");
+      setPhone("");
+      setPhoneTyped(false);
+      phonePrefilled.current = false;
+      setNote("");
+      setFields([]);
+      refreshSent();
+    } catch (err) {
+      if ((0, import_vault2.wasCancelled)(err)) {
+        setResult({ tone: "warn", text: "Not sent: it was not confirmed." });
+      } else if (err instanceof import_core33.SecureDeliveryRefusal) {
+        setResult({ tone: "error", text: err.message, remedy: err.remedy });
+      } else {
+        setResult({ tone: "error", text: "The secure link could not be sent. Try again." });
+      }
+    } finally {
+      setSending(false);
+    }
+  }
+  async function turnOff(row) {
+    const ok = await confirm({
+      title: "Turn off this secure link?",
+      description: `The link to ${row.recipient_email ?? row.recipient_phone ?? "this person"} stops working at once and what it carries is deleted. They will have to ask you for a new one.`,
+      confirmLabel: "Turn it off"
+    });
+    if (!ok) return;
+    try {
+      await (0, import_core33.revokeSecureDelivery)(dispatch, row.id);
+    } finally {
+      refreshSent();
+    }
+  }
+  const protectedFields = options?.protected_fields ?? [];
+  return /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "flex items-start gap-2 rounded-lg border border-border bg-muted/30 p-3", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_lucide_react13.ShieldCheck, { className: "mt-0.5 h-4 w-4 flex-shrink-0 text-primary" }),
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("p", { className: "text-xs text-muted-foreground", children: [
+        "They get a link that opens once, and a code on a separate channel. No account needed.",
+        options ? ` The link works for ${(0, import_format2.formatDurationMinutes)(options.link_ttl_minutes, { style: "long" })}.` : ""
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "grid gap-3 sm:grid-cols-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "space-y-1", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_design_system31.Label, { htmlFor: "secure-email", className: "text-xs", children: "Their email" }),
+        /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(
+          import_controls10.Input,
+          {
+            id: "secure-email",
+            type: "email",
+            autoComplete: "off",
+            value: email,
+            onChange: (e) => setEmail(e.target.value),
+            placeholder: "name@example.com"
+          }
+        )
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "space-y-1", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_design_system31.Label, { htmlFor: "secure-phone", className: "text-xs", children: "Their mobile, for the code" }),
+        /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(
+          import_controls10.Input,
+          {
+            id: "secure-phone",
+            type: "tel",
+            autoComplete: "off",
+            value: phone,
+            onChange: (e) => {
+              setPhone(e.target.value);
+              setPhoneTyped(true);
+              phonePrefilled.current = false;
+            },
+            placeholder: "+1 310 555 0123"
+          }
+        )
+      ] })
+    ] }),
+    hasBoth ? /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "flex flex-wrap items-center gap-2 text-xs text-muted-foreground", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { children: "Send the link by" }),
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(
+        import_design_system22.ToggleGroup,
+        {
+          type: "single",
+          size: "sm",
+          variant: "outline",
+          value: linkChannel,
+          onValueChange: (v) => v && setLinkChannel(v),
+          children: [
+            /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_design_system22.ToggleGroupItem, { value: "email", "aria-label": "Link by email", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_lucide_react13.Mail, { className: "mr-1 h-3.5 w-3.5" }),
+              " Email"
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_design_system22.ToggleGroupItem, { value: "sms", "aria-label": "Link by text", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_lucide_react13.MessageSquare, { className: "mr-1 h-3.5 w-3.5" }),
+              " Text"
+            ] })
+          ]
+        }
+      ),
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("span", { children: [
+        "and the code by ",
+        linkChannel === "email" ? "text" : "email",
+        "."
+      ] })
+    ] }) : email.trim() !== "" ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("p", { className: "text-xs text-amber-700 dark:text-amber-400", children: "Without a mobile number, the link and the code both go by email \u2014 anyone who can read that inbox could open it." }) : null,
+    optionsError ? /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("p", { className: "text-xs text-destructive", children: [
+      optionsError,
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(ErrorAlchemyMenu, { error: optionsError, operation: "Load the secure-link options" })
+    ] }) : null,
+    protectedFields.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("fieldset", { className: "space-y-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("legend", { className: "text-xs font-medium", children: [
+        "Include protected fields from ",
+        resourceName
+      ] }),
+      protectedFields.map((f) => /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "flex items-start gap-2", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(
+          import_design_system30.Checkbox,
+          {
+            size: "sm",
+            id: `secure-field-${f.key}`,
+            checked: fields.includes(f.key),
+            disabled: !f.available,
+            onCheckedChange: (checked) => setFields(
+              (cur) => checked ? [...cur, f.key] : cur.filter((k) => k !== f.key)
+            )
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_design_system31.Label, { htmlFor: `secure-field-${f.key}`, className: "text-sm", children: f.label }),
+          !f.available && f.reason ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("p", { className: "text-xs text-muted-foreground", children: f.reason }) : null
+        ] })
+      ] }, f.key))
+    ] }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "space-y-1", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_design_system31.Label, { htmlFor: "secure-note", className: "text-xs", children: "Message (optional, shown once with it)" }),
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(
+        import_design_system32.Textarea,
+        {
+          id: "secure-note",
+          rows: 2,
+          maxLength: 1e3,
+          value: note,
+          onChange: (e) => setNote(e.target.value)
+        }
+      )
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_design_system29.Button, { className: "w-full", onClick: send, disabled: !canSend, children: [
+      sending ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_lucide_react13.Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : null,
+      "Send secure link"
+    ] }),
+    result ? /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(
+      "div",
+      {
+        className: result.tone === "error" ? "rounded-md border border-destructive/30 bg-destructive/10 p-2.5 text-sm text-destructive-ink" : result.tone === "warn" ? "rounded-md border border-amber-500/30 bg-amber-500/10 p-2.5 text-sm" : "rounded-md border border-border bg-muted/40 p-2.5 text-sm",
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("p", { children: result.text }),
+          result.remedy ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("p", { className: "mt-1 text-xs opacity-80", children: result.remedy }) : null
+        ]
+      }
+    ) : null,
+    sent && sent.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("h3", { className: "mb-2 text-sm font-medium", children: "Sent securely" }),
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("ul", { className: "divide-y divide-border rounded-lg border border-border", children: sent.map((row) => /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("li", { className: "flex items-center justify-between gap-2 p-2.5 text-sm", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "min-w-0", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("p", { className: "truncate", children: row.recipient_email ?? row.recipient_phone }),
+          /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("p", { className: "text-xs text-muted-foreground", children: [
+            STATUS_WORDS[row.status] ?? row.status,
+            row.status === "viewed" && row.viewed_at ? ` ${when(row.viewed_at)}` : "",
+            row.status === "pending" ? ` \xB7 until ${when(row.expires_at)}` : "",
+            row.field_keys.length > 0 ? ` \xB7 with ${row.field_keys.join(", ")}` : ""
+          ] })
+        ] }),
+        row.status === "pending" ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(import_design_system29.Button, { size: "sm", variant: "outline", onClick: () => void turnOff(row), children: "Turn off" }) : null
+      ] }, row.id)) })
+    ] }) : null
+  ] });
+}
+
+// src/react/sheet/ShareModal.tsx
+var import_jsx_runtime20 = require("react/jsx-runtime");
+function ShareModal({
+  levelWording = "roles",
+  isOpen,
+  onClose,
+  resourceType,
+  resourceId,
+  resourceName,
+  organizationId,
+  resourceNoun,
+  isOwner: isOwnerOverride,
+  outsideShare
+}) {
+  const [activeTab, setActiveTab] = (0, import_react17.useState)("users");
+  const [outsidePending, setOutsidePending] = (0, import_react17.useState)(0);
+  const [emailingLink, setEmailingLink] = (0, import_react17.useState)(false);
+  const [emailSent, setEmailSent] = (0, import_react17.useState)(false);
+  const { toast } = useToast();
+  const getShareUrl = () => {
+    const path = (0, import_core35.getResourceSharePath)(resourceType, resourceId);
+    if (!path) return null;
+    const baseUrl = (0, import_core34.appUrl)();
+    return `${baseUrl}${path}`;
+  };
+  const handleEmailLink = async () => {
+    const shareUrl = getShareUrl();
+    if (!shareUrl) {
+      toast({
+        title: "No shareable link for this item yet",
+        description: `"${(0, import_core35.getResourceTypeLabel)(resourceType)}" has no page to open. Sharing access still works; only the emailed link is unavailable.`,
+        variant: "destructive"
+      });
+      return;
+    }
+    setEmailingLink(true);
+    try {
+      const data = await (0, import_core34.sendShareNotice)("/sharing/email-link", {
+        resourceType: (0, import_core35.getResourceTypeLabel)(resourceType),
+        resourceName,
+        shareUrl,
+        // object-org-exempt: the saved-link notice is filed with the shared object, else where the person works
+        organizationId: organizationId ?? (0, import_core34.getActiveOrgId)()
+        // org-filter: write-target for the person's own saved-link notice
+      });
+      if (data.success) {
+        setEmailSent(true);
+        toast({
+          title: "Email sent",
+          description: "Link has been emailed to you"
+        });
+        setTimeout(() => setEmailSent(false), 3e3);
+      } else {
+        toast({
+          title: "Failed to send email",
+          description: data.msg || "Please try again",
+          variant: "destructive"
+        });
+      }
+    } catch (error2) {
+      toast({
+        title: "Error",
+        description: "Failed to send email",
+        variant: "destructive"
+      });
+    } finally {
+      setEmailingLink(false);
+    }
+  };
+  const {
+    isOwner: resolvedIsOwner,
+    loading: ownerLoading,
+    error: ownerError
+  } = useIsOwner(resourceType, resourceId);
+  const hasOverride = typeof isOwnerOverride === "boolean";
+  const isOwner = hasOverride ? isOwnerOverride : resolvedIsOwner;
+  const resolvingOwner = !hasOverride && ownerLoading;
+  usePageCapture(
+    () => dialogCapture({
+      title: `Share ${resourceName ?? resourceType}`,
+      route: typeof window !== "undefined" ? window.location.pathname : "",
+      dialog: "Share",
+      subject: { id: resourceId, name: resourceName ?? null },
+      selection: {
+        "Resource type": resourceType,
+        Organization: { id: organizationId ?? null, name: null },
+        Tab: activeTab,
+        "Outside sharing offered": outsideShare ? "yes" : "no"
+      },
+      errors: [ownerError ? `Ownership could not be read: ${String(ownerError)}` : null],
+      sections: [
+        {
+          id: "share-state",
+          title: "Share dialog state",
+          role: "data",
+          value: {
+            is_owner: isOwner,
+            resolving_owner: resolvingOwner,
+            outside_pending_invitations: outsidePending,
+            share_link: (0, import_core35.getResourceSharePath)(resourceType, resourceId),
+            outside_share: outsideShare ?? null
+          }
+        }
+      ]
+    }),
+    { enabled: isOpen }
+  );
+  const grantable = useGrantableLevels(resourceType, resourceId, isOpen);
+  const canShare = isOwner || grantable.maySharePeople;
+  const ownerUnknown = !hasOverride && !ownerLoading && ownerError !== null;
+  const registryEntry = resourceType ? (0, import_core35.getShareableResource)(resourceType) : void 0;
+  const configError = !resourceId ? "No resource id was supplied to the share dialog." : !registryEntry ? `"${resourceType}" is not a registered shareable resource. Add it to shareable_resource_registry.` : null;
+  const {
+    permissions,
+    isPublic: resourceIsPublic,
+    shownTo,
+    childRecord,
+    setShownTo,
+    organizationDefault,
+    whoCanSee,
+    setWhoCanSee,
+    loading,
+    error,
+    shareWithUser: shareWithUser2,
+    makePublic: makePublic2,
+    revokeAccess: revokeAccess2,
+    updateLevel,
+    refresh,
+    homeOrganizationId
+  } = useSharing(
+    resourceType,
+    resourceId,
+    isOpen && !configError,
+    resourceName,
+    // The object's organization, as the page that opened this resolved it — the share's
+    // notification is filed there and never asks which workspace this is for.
+    organizationId ?? null
+  );
+  const contactsOrganizationId = organizationId ?? homeOrganizationId ?? void 0;
+  const userPermissions = permissions.filter((p) => p.grantedToUserId);
+  const publicPermission = permissions.find((p) => p.isPublic);
+  const resourceLabel = resourceNoun ?? (0, import_core35.getResourceTypeLabel)(resourceType);
+  const manageBlockedNotice = ownerUnknown ? /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "p-3 rounded-lg border border-destructive/20 bg-destructive/10 flex items-start gap-2", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react15.AlertTriangle, { className: "h-4 w-4 text-destructive flex-shrink-0 mt-0.5" }),
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("p", { className: "text-sm font-medium text-destructive", children: [
+        "Couldn't confirm whether you may change sharing on this",
+        " ",
+        resourceLabel.toLowerCase()
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("p", { className: "text-xs text-destructive/80 mt-0.5", children: [
+        ownerError,
+        " ",
+        /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(ErrorAlchemyMenu, { error: ownerError })
+      ] })
+    ] })
+  ] }) : /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "p-3 rounded-lg border bg-muted/30 flex items-start gap-2", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react15.Lock, { className: "h-4 w-4 text-muted-foreground flex-shrink-0 mt-0.5" }),
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("p", { className: "text-sm font-medium", children: [
+        "You need Full access on this ",
+        resourceLabel.toLowerCase(),
+        " to change who can see it"
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("p", { className: "text-xs text-muted-foreground mt-0.5", children: "Deciding who else may is what Full access means (View < Comment < Edit < Full access). Ask whoever has it, or an owner of the organization. The Access tab still shows you everyone who can reach this and why." })
+    ] })
+  ] });
+  const shareBlockedNotice = grantable.loading ? null : /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "p-3 rounded-lg border bg-muted/30 flex items-start gap-2", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react15.Lock, { className: "h-4 w-4 text-muted-foreground flex-shrink-0 mt-0.5" }),
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("p", { className: "text-sm", children: grantable.error ?? grantable.levels.viewer ?? "You need Edit or Full access on this to share it." })
+  ] });
+  return /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_design_system2.Dialog, { open: isOpen, onOpenChange: onClose, children: /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(import_design_system2.DialogContent, { className: "max-w-2xl max-h-[90dvh] flex flex-col", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_design_system2.DialogHeader, { className: "flex-shrink-0", children: /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "flex items-start justify-between gap-2 pr-10", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "flex-1 min-w-0", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(import_design_system2.DialogTitle, { className: "flex items-center gap-1.5", children: [
+          "Share ",
+          resourceLabel,
+          /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(PageCaptureButton, { size: "xs" })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_design_system2.DialogDescription, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("div", { className: "text-sm text-muted-foreground", children: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+          EntityRef,
+          {
+            token: resourceType,
+            id: resourceId,
+            name: resourceName,
+            href: (0, import_core35.getResourceSharePath)(resourceType, resourceId) ?? void 0,
+            showIcon: false
+          }
+        ) }) })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(
+        import_design_system34.Button,
+        {
+          variant: "outline",
+          size: "sm",
+          onClick: handleEmailLink,
+          disabled: emailingLink,
+          className: "flex-shrink-0",
+          children: [
+            emailingLink ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react14.Loader2, { className: "h-4 w-4 animate-spin" }) : emailSent ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react14.CheckCircle, { className: "h-4 w-4 text-green-500" }) : /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react14.Mail, { className: "h-4 w-4" }),
+            /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "ml-1.5 hidden sm:inline", children: emailSent ? "Sent!" : "Email link" })
+          ]
+        }
+      )
+    ] }) }),
+    configError && /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "flex-1 flex flex-col items-center justify-center gap-2 py-10 px-6 text-center", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react15.AlertTriangle, { className: "h-8 w-8 text-destructive" }),
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("p", { className: "text-sm font-medium", children: "Sharing is unavailable" }),
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("p", { className: "text-xs text-muted-foreground max-w-sm", children: [
+        configError,
+        /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(ErrorAlchemyMenu, { error: configError })
+      ] })
+    ] }),
+    !configError && resolvingOwner && /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "flex-1 space-y-3 py-4", "aria-busy": "true", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_design_system35.Skeleton, { className: "h-9 w-full" }),
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_design_system35.Skeleton, { className: "h-24 w-full" }),
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_design_system35.Skeleton, { className: "h-32 w-full" })
+    ] }),
+    !configError && !resolvingOwner && /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(
+      import_design_system33.Tabs,
+      {
+        value: activeTab,
+        onValueChange: (value) => setActiveTab(value),
+        className: "flex-1 flex flex-col min-h-0",
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(import_controls11.TabsList, { fill: true, className: "flex-shrink-0", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(ShareTabsTrigger, { value: "users", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react14.Users, { className: "w-4 h-4" }),
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "hidden sm:inline", children: "Users" }),
+              userPermissions.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "ml-1 px-1.5 py-0.5 text-xs bg-primary/10 rounded-full", children: userPermissions.length })
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(ShareTabsTrigger, { value: "public", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react14.Globe, { className: "w-4 h-4" }),
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "hidden sm:inline", children: "Anyone link" }),
+              publicPermission && /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "ml-1 px-1.5 py-0.5 text-xs bg-green-500/10 rounded-full", children: "\u2022" })
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(ShareTabsTrigger, { value: "secure", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react14.ShieldCheck, { className: "w-4 h-4" }),
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "hidden sm:inline", children: "Secure link" })
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(ShareTabsTrigger, { value: "access", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_lucide_react14.KeyRound, { className: "w-4 h-4" }),
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "hidden sm:inline", children: "Access" })
+            ] })
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "dialog-scroll-clear-floating flex-1 mt-3 min-h-0 overflow-y-auto", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(import_design_system33.TabsContent, { value: "users", className: "mt-0 space-y-3", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+                WhoCanSeeThis,
+                {
+                  whoCanSee,
+                  canChange: canShare,
+                  onChoose: setWhoCanSee,
+                  row: {
+                    resourceType,
+                    resourceId,
+                    shownTo,
+                    isPublic: resourceIsPublic,
+                    childRecord,
+                    // A whole Table is a `record` too and is never published to the web (no page
+                    // of its own; only its rows have one): no switch is drawn for it.
+                    ...resourceType === "record" && resourceNoun === "Table" ? { publishable: false } : {},
+                    onSetShownTo: setShownTo,
+                    onPublish: () => makePublic2(),
+                    onStopPublishing: () => revokeAccess2({ isPublic: true })
+                  }
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("h3", { className: "text-sm font-medium mb-2", children: "Current Access" }),
+                !isOwner && !loading && userPermissions.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("p", { className: "rounded-lg border bg-muted/30 p-3 text-xs text-muted-foreground", children: "The list of people with access is visible to the owner and Admins." }) : /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+                  PermissionsList,
+                  {
+                    permissions: userPermissions,
+                    isOwner,
+                    onUpdateLevel: updateLevel,
+                    onRevoke: revokeAccess2,
+                    loading,
+                    alsoPending: {
+                      count: outsidePending,
+                      one: "person outside this organization",
+                      many: "people outside this organization"
+                    }
+                  }
+                ),
+                /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+                  OrgAvailabilityNote,
+                  {
+                    permissions: permissions.filter(
+                      (p) => p.grantedToOrganizationId
+                    ),
+                    organizationDefault
+                  }
+                )
+              ] }),
+              canShare ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+                ShareWithUserTab,
+                {
+                  levelWording,
+                  grantable,
+                  onShare: shareWithUser2,
+                  onSuccess: refresh,
+                  resourceType,
+                  resourceId,
+                  ...contactsOrganizationId ? { organizationId: contactsOrganizationId } : {},
+                  alreadySharedUserIds: userPermissions.map((p) => p.grantedToUserId).filter((id) => !!id),
+                  ...outsideShare ? {
+                    grantEveryonePerson: async (person, level) => {
+                      try {
+                        const answer = await (0, import_core36.shareWithOutsidePerson)(
+                          outsideShare.organizationId,
+                          outsideShare.tableId,
+                          person.email,
+                          level
+                        );
+                        return answer.granted ? { success: true, message: answer.say } : {
+                          success: false,
+                          error: answer.say || "Invited, not yet given access"
+                        };
+                      } catch (err) {
+                        return {
+                          success: false,
+                          error: err instanceof Error ? err.message : "Not shared"
+                        };
+                      }
+                    }
+                  } : {}
+                }
+              ) : shareBlockedNotice,
+              outsideShare ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+                OutsideSharePanel,
+                {
+                  organizationId: outsideShare.organizationId,
+                  tableId: outsideShare.tableId,
+                  tableName: resourceName,
+                  onPendingChange: setOutsidePending,
+                  onGranted: refresh
+                }
+              ) : null
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(import_design_system33.TabsContent, { value: "access", className: "mt-0", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+                AccessSummaryPanel,
+                {
+                  entityType: resourceType,
+                  entityId: resourceId,
+                  enabled: activeTab === "access",
+                  refreshToken: permissions.map((p) => `${p.id}:${p.permissionLevel}`).join("|")
+                }
+              ),
+              resourceType === "record" && isOwner ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(WhoCouldSeeOn, { recordId: resourceId }) : null
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_design_system33.TabsContent, { value: "secure", className: "mt-0", children: isOwner ? /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+              SecureLinkPanel,
+              {
+                resourceType,
+                resourceId,
+                resourceName
+              }
+            ) : manageBlockedNotice }),
+            /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_design_system33.TabsContent, { value: "public", className: "mt-0", children: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+              PublicAccessTab,
+              {
+                publicPermission,
+                isOwner,
+                resourceType,
+                resourceId,
+                resourceName
+              }
+            ) })
+          ] })
+        ]
+      }
+    ),
+    error && /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "mt-3 p-2.5 bg-destructive/10 border border-destructive/20 rounded-md flex-shrink-0", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("p", { className: "text-sm text-destructive", children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(ErrorAlchemyMenu, { error })
+    ] })
+  ] }) });
+}
+//# sourceMappingURL=react.cjs.map