@burdenoff/fe-libs 2026.1030.1 → 2026.1030.2

package/dist/connections/sharingApi.js

@@ -0,0 +1,215 @@
+import { unwrap as e } from "./api.js";
+import { gql as t } from "@apollo/client";
+//#region src/connections/sharingApi.ts
+var n = "\n  id\n  name\n  ownerId\n  visibility\n  myAccess\n  shares {\n    principalType\n    principalId\n    role\n  }\n", r = t`
+  query ConnectionSharing($id: ID!) {
+    getConnection(id: $id) {
+      ${n}
+    }
+  }
+`, i = t`
+  mutation ShareConnection($input: ShareConnectionInput!) {
+    shareConnection(input: $input) {
+      ${n}
+    }
+  }
+`, a = t`
+  query ConnectionShareMembers($workspaceId: ID!, $pagination: PaginationInput) {
+    workspaceMembers(workspaceId: $workspaceId, pagination: $pagination) {
+      items {
+        userId
+        status
+      }
+      hasMore
+    }
+  }
+`, o = t`
+  query ConnectionShareMemberIdentities($userIds: [ID!]!, $workspaceId: ID) {
+    workspaceMemberIdentities(userIds: $userIds, workspaceId: $workspaceId) {
+      userId
+      displayName
+      email
+    }
+  }
+`, s = t`
+  query ConnectionShareGroups($first: Int, $after: String) {
+    groups(first: $first, after: $after) {
+      edges {
+        node {
+          id
+          name
+          status
+        }
+      }
+      pageInfo {
+        hasNextPage
+        endCursor
+      }
+    }
+  }
+`, c = t`
+  query ConnectionShareProjects($pagination: PaginationInput) {
+    projects(pagination: $pagination) {
+      items {
+        id
+        name
+        status
+      }
+      hasMore
+    }
+  }
+`, l = 100, u = 1e3, d = ["WORKSPACE", "RESTRICTED"], f = [
+	"OWNER",
+	"EDITOR",
+	"USE",
+	"WORKSPACE",
+	"ADMINISTRATOR"
+], p = [
+	"USER",
+	"GROUP",
+	"PROJECT"
+], m = ["USE", "EDITOR"], h = (e) => typeof e == "object" && !!e && !Array.isArray(e), g = (e) => typeof e == "string" && e.trim().length > 0 ? e : null;
+function _(e, t) {
+	return typeof e == "string" && t.includes(e) ? e : null;
+}
+function v(e) {
+	if (!h(e)) return null;
+	let t = g(e.id), n = g(e.ownerId), r = _(e.visibility, d);
+	if (!t || !n || !r) return null;
+	let i = [];
+	for (let t of Array.isArray(e.shares) ? e.shares : []) {
+		if (!h(t)) continue;
+		let e = _(t.principalType, p), n = g(t.principalId), r = _(t.role, m);
+		e && n && r && i.push({
+			principalType: e,
+			principalId: n,
+			role: r
+		});
+	}
+	return {
+		id: t,
+		name: g(e.name) ?? t,
+		ownerId: n,
+		visibility: r,
+		myAccess: _(e.myAccess, f),
+		shares: i
+	};
+}
+function y(e) {
+	return e === "OWNER" || e === "EDITOR" || e === "ADMINISTRATOR";
+}
+function b(e) {
+	let t = v(e);
+	if (!t) throw Error("Connection not found");
+	return t;
+}
+async function x(e) {
+	try {
+		return await e();
+	} catch {
+		return [];
+	}
+}
+var S = (e) => e == null || String(e).toUpperCase() === "ACTIVE";
+function C(t) {
+	let n = async (n, r) => e(await t.query({
+		query: n,
+		variables: r,
+		fetchPolicy: "network-only"
+	})), d = async (n, r) => e(await t.mutate({
+		mutation: n,
+		variables: r
+	})), f = async (e) => {
+		let t = [];
+		for (let n = 0; n < u; n += l) {
+			let r = await e({
+				limit: l,
+				offset: n
+			});
+			if (t.push(...r.items), !r.hasMore || r.items.length === 0) break;
+		}
+		return t;
+	}, p = async (e) => {
+		let t = (await f(async (t) => {
+			let r = await n(a, {
+				workspaceId: e,
+				pagination: t
+			});
+			return {
+				items: r?.workspaceMembers?.items ?? [],
+				hasMore: r?.workspaceMembers?.hasMore === !0
+			};
+		})).filter(h).filter((e) => S(e.status)).map((e) => g(e.userId)).filter((e) => e !== null), r = /* @__PURE__ */ new Map();
+		for (let i = 0; i < t.length; i += l) {
+			let a = await n(o, {
+				userIds: t.slice(i, i + l),
+				workspaceId: e
+			}).catch(() => null);
+			for (let e of (a?.workspaceMemberIdentities ?? []).filter(h)) r.set(String(e.userId), e);
+		}
+		return t.map((e) => {
+			let t = r.get(e), n = g(t?.email) ?? void 0;
+			return {
+				principalType: "USER",
+				principalId: e,
+				label: g(t?.displayName) ?? n ?? e,
+				...n ? { detail: n } : {}
+			};
+		});
+	}, m = async () => {
+		let e = [], t = null;
+		for (; e.length < u;) {
+			let r = await n(s, {
+				first: l,
+				after: t
+			});
+			for (let t of r?.groups?.edges ?? []) h(t) && h(t.node) && e.push(t.node);
+			let i = r?.groups?.pageInfo, a = g(i?.endCursor);
+			if (!i?.hasNextPage || !a || a === t) break;
+			t = a;
+		}
+		return e.filter((e) => S(e.status)).flatMap((e) => {
+			let t = g(e.id);
+			return t ? [{
+				principalType: "GROUP",
+				principalId: t,
+				label: g(e.name) ?? t
+			}] : [];
+		});
+	}, _ = async () => (await f(async (e) => {
+		let t = await n(c, { pagination: e });
+		return {
+			items: t?.projects?.items ?? [],
+			hasMore: t?.projects?.hasMore === !0
+		};
+	})).filter(h).filter((e) => S(e.status)).flatMap((e) => {
+		let t = g(e.id);
+		return t ? [{
+			principalType: "PROJECT",
+			principalId: t,
+			label: g(e.name) ?? t
+		}] : [];
+	});
+	return {
+		async getSharing(e) {
+			return b((await n(r, { id: e }))?.getConnection);
+		},
+		async listPrincipals(e) {
+			let [t, n, r] = await Promise.all([
+				x(() => p(e)),
+				x(m),
+				x(_)
+			]);
+			return [
+				...t,
+				...n,
+				...r
+			];
+		},
+		async share(e) {
+			return b((await d(i, { input: e }))?.shareConnection);
+		}
+	};
+}
+//#endregion
+export { u as SHARE_PICKER_LIMIT, y as canManageSharing, C as createConnectionSharingApi, v as mapConnectionSharing };

package/dist/connections/types.d.ts

@@ -81,3 +81,34 @@ export type ConnectionDialogEvent = {
     providerKey: string;
     error: string;
 };
+/** Who can reach a connection beyond its owner (BOFF-9726). */
+export type ConnectionVisibility = 'WORKSPACE' | 'RESTRICTED';
+/** What a connection share is granted to. */
+export type ConnectionSharePrincipalType = 'USER' | 'GROUP' | 'PROJECT';
+/** USE: see it and run workflows with it. EDITOR: also change it and its sharing. */
+export type ConnectionShareRole = 'USE' | 'EDITOR';
+/** How the signed-in person reaches a connection. */
+export type ConnectionAccess = 'OWNER' | 'EDITOR' | 'USE' | 'WORKSPACE' | 'ADMINISTRATOR';
+export interface ConnectionShareGrant {
+    principalType: ConnectionSharePrincipalType;
+    principalId: string;
+    role: ConnectionShareRole;
+}
+/** A connection's sharing, as the Share dialog shows and edits it. */
+export interface ConnectionSharing {
+    id: string;
+    name: string;
+    ownerId: string;
+    visibility: ConnectionVisibility;
+    /** Null for platform callers. */
+    myAccess: ConnectionAccess | null;
+    shares: ConnectionShareGrant[];
+}
+/** Someone or something a connection can be shared with. */
+export interface SharePrincipal {
+    principalType: ConnectionSharePrincipalType;
+    principalId: string;
+    label: string;
+    /** An email for people, nothing for groups and projects. */
+    detail?: string;
+}

package/dist/connections/useConnectionSharingDraft.d.ts

@@ -0,0 +1,40 @@
+import { ConnectionSharingApi, ShareConnectionInput } from './sharingApi';
+import { ConnectionShareGrant, ConnectionShareRole, ConnectionSharePrincipalType, ConnectionSharing, ConnectionVisibility, SharePrincipal } from './types';
+export declare const principalKey: (principalType: ConnectionSharePrincipalType, principalId: string) => string;
+/**
+ * The one shareConnection change a save sends. Only an admin can hand the
+ * connection over, and a new owner rides in the same change, so the owner and
+ * the sharing apply together or not at all. The owner never needs a grant.
+ */
+export declare function shareInput(sharing: Pick<ConnectionSharing, 'ownerId' | 'myAccess'>, connectionId: string, visibility: ConnectionVisibility, grants: readonly ConnectionShareGrant[], ownerId: string): ShareConnectionInput;
+/**
+ * What the dialog may show from state loaded earlier: only while it is open on
+ * the connection it was loaded for. Closed, or reopened on no connection or
+ * another one, nothing from before shows.
+ */
+export declare function loadedFor<T extends {
+    connectionId: string;
+}>(open: boolean, connectionId: string | null, value: T | null): T | null;
+export interface ConnectionSharingDraft {
+    sharing: ConnectionSharing | null;
+    principals: SharePrincipal[];
+    loadError: string | null;
+    /** True for the owner, editors and workspace admins. */
+    editable: boolean;
+    /** True for a workspace admin, who can also change the owner. */
+    administrator: boolean;
+    visibility: ConnectionVisibility;
+    setVisibility: (value: ConnectionVisibility) => void;
+    grants: ConnectionShareGrant[];
+    addGrant: (principal: SharePrincipal) => void;
+    setRole: (index: number, role: ConnectionShareRole) => void;
+    removeGrant: (index: number) => void;
+    ownerId: string;
+    setOwnerId: (value: string) => void;
+    labelOf: (principalType: ConnectionSharePrincipalType, principalId: string) => string;
+    saving: boolean;
+    saveError: string | null;
+    /** Saves and resolves with the saved sharing, or null when it failed (see saveError). */
+    save: () => Promise<ConnectionSharing | null>;
+}
+export declare function useConnectionSharingDraft(api: ConnectionSharingApi, open: boolean, connectionId: string | null, workspaceId: string): ConnectionSharingDraft;

package/dist/connections/useConnectionSharingDraft.js

@@ -0,0 +1,93 @@
+import { canManageSharing as e } from "./sharingApi.js";
+import { useEffect as t, useMemo as n, useRef as r, useState as i } from "react";
+//#region src/connections/useConnectionSharingDraft.ts
+var a = (e, t) => `${e}:${t}`;
+function o(e, t, n, r, i) {
+	let a = e.myAccess === "ADMINISTRATOR" && i !== "" && i !== e.ownerId, o = a ? i : e.ownerId;
+	return {
+		connectionId: t,
+		visibility: n,
+		shares: r.filter((e) => !(e.principalType === "USER" && e.principalId === o)),
+		...a ? { ownerId: i } : {}
+	};
+}
+function s(e, t, n) {
+	return e && n !== null && n.connectionId === t ? n : null;
+}
+function c(c, l, u, d) {
+	let [f, p] = i(null), [m, h] = i(null), [g, _] = i("RESTRICTED"), [v, y] = i([]), [b, x] = i(""), [S, C] = i(null), [w, T] = i(null), E = r(0);
+	t(() => {
+		E.current += 1;
+	}, [l, u]), t(() => {
+		if (!l || !u) return;
+		let e = !0;
+		return p(null), h(null), T(null), C(null), Promise.all([c.getSharing(u), c.listPrincipals(d)]).then(([t, n]) => {
+			e && (p({
+				connectionId: u,
+				sharing: t,
+				principals: n
+			}), _(t.visibility), y(t.shares), x(t.ownerId));
+		}).catch((t) => {
+			e && h({
+				connectionId: u,
+				message: t instanceof Error ? t.message : String(t)
+			});
+		}), () => {
+			e = !1;
+		};
+	}, [
+		c,
+		u,
+		l,
+		d
+	]);
+	let D = s(l, u, f), O = s(l, u, m), k = n(() => new Map((D?.principals ?? []).map((e) => [a(e.principalType, e.principalId), e])), [D]), A = D?.sharing ?? null;
+	return {
+		sharing: A,
+		principals: D?.principals ?? [],
+		loadError: O?.message ?? null,
+		editable: A !== null && e(A.myAccess),
+		administrator: A?.myAccess === "ADMINISTRATOR",
+		visibility: g,
+		setVisibility: _,
+		grants: v,
+		addGrant: (e) => y((t) => [...t, {
+			principalType: e.principalType,
+			principalId: e.principalId,
+			role: "USE"
+		}]),
+		setRole: (e, t) => y((n) => n.map((n, r) => r === e ? {
+			...n,
+			role: t
+		} : n)),
+		removeGrant: (e) => y((t) => t.filter((t, n) => n !== e)),
+		ownerId: b,
+		setOwnerId: x,
+		labelOf: (e, t) => k.get(a(e, t))?.label ?? t,
+		saving: l && S !== null && S.connectionId === u,
+		saveError: s(l, u, w)?.message ?? null,
+		save: async () => {
+			if (!A || !u) return null;
+			let e = u;
+			E.current += 1;
+			let t = E.current, n = () => E.current === t;
+			C({
+				connectionId: e,
+				save: t
+			}), T(null);
+			try {
+				let t = await c.share(o(A, e, g, v, b));
+				return n() ? t : null;
+			} catch (t) {
+				return n() && T({
+					connectionId: e,
+					message: t instanceof Error ? t.message : String(t)
+				}), null;
+			} finally {
+				C((e) => e?.save === t ? null : e);
+			}
+		}
+	};
+}
+//#endregion
+export { a as principalKey, c as useConnectionSharingDraft };

package/dist/connections.js

@@ -3,12 +3,15 @@ import { createConnectionsApi as a, mapProvider as o, normalizeAuthType as s } f
 import { buildCreateInput as c, collectsOwnClientId as l, flowForAuthType as u, resolveFlow as d, resolveMethod as f, resolveSchema as p, submitConnection as m, submittedValues as h, validateDraft as g } from "./connections/connectionFlow.js";
 import { authTypeLabel as _, categoryLabel as v } from "./connections/labels.js";
 import { ProviderIcon as y } from "./connections/ProviderIcon.js";
-import { EMPTY_STORAGE as b, compatibleSecrets as x } from "./connections/storage.js";
-import { CredentialStorageSelector as S } from "./connections/CredentialStorageSelector.js";
-import { CONNECTION_DIALOG_FRAME_CLASSES as C } from "./connections/frame.js";
-import { isScopeChecked as w, parseScopeOptions as T, requestedScopes as E, toggleScope as D } from "./connections/scopes.js";
-import { ScopePicker as O } from "./connections/ScopePicker.js";
-import { groupByCategory as k, pickableProviders as A } from "./connections/picker.js";
-import { isOAuthCallbackMessage as j, waitForOAuthCompletion as M } from "./connections/oauthPopup.js";
-import { ConnectionDialog as N } from "./connections/ConnectionDialog.js";
-export { C as CONNECTION_DIALOG_FRAME_CLASSES, N as ConnectionDialog, S as CredentialStorageSelector, b as EMPTY_STORAGE, y as ProviderIcon, O as ScopePicker, _ as authTypeLabel, c as buildCreateInput, v as categoryLabel, l as collectsOwnClientId, x as compatibleSecrets, a as createConnectionsApi, u as flowForAuthType, e as getProviderAccent, t as getProviderIconName, n as getProviderImageSource, r as getProviderTextIcon, k as groupByCategory, j as isOAuthCallbackMessage, w as isScopeChecked, o as mapProvider, s as normalizeAuthType, i as normalizeProviderCategory, T as parseScopeOptions, A as pickableProviders, E as requestedScopes, d as resolveFlow, f as resolveMethod, p as resolveSchema, m as submitConnection, h as submittedValues, D as toggleScope, g as validateDraft, M as waitForOAuthCompletion };
+import { VisibilityChoice as b } from "./connections/VisibilityChoice.js";
+import { EMPTY_STORAGE as x, compatibleSecrets as S } from "./connections/storage.js";
+import { CredentialStorageSelector as C } from "./connections/CredentialStorageSelector.js";
+import { CONNECTION_DIALOG_FRAME_CLASSES as w } from "./connections/frame.js";
+import { isScopeChecked as T, parseScopeOptions as E, requestedScopes as D, toggleScope as O } from "./connections/scopes.js";
+import { ScopePicker as k } from "./connections/ScopePicker.js";
+import { groupByCategory as A, pickableProviders as j } from "./connections/picker.js";
+import { isOAuthCallbackMessage as M, waitForOAuthCompletion as N } from "./connections/oauthPopup.js";
+import { ConnectionDialog as P } from "./connections/ConnectionDialog.js";
+import { SHARE_PICKER_LIMIT as F, canManageSharing as I, createConnectionSharingApi as L, mapConnectionSharing as R } from "./connections/sharingApi.js";
+import { SHARE_TITLE_ID as z, ShareConnectionDialog as B } from "./connections/ShareConnectionDialog.js";
+export { w as CONNECTION_DIALOG_FRAME_CLASSES, P as ConnectionDialog, C as CredentialStorageSelector, x as EMPTY_STORAGE, y as ProviderIcon, F as SHARE_PICKER_LIMIT, z as SHARE_TITLE_ID, k as ScopePicker, B as ShareConnectionDialog, b as VisibilityChoice, _ as authTypeLabel, c as buildCreateInput, I as canManageSharing, v as categoryLabel, l as collectsOwnClientId, S as compatibleSecrets, L as createConnectionSharingApi, a as createConnectionsApi, u as flowForAuthType, e as getProviderAccent, t as getProviderIconName, n as getProviderImageSource, r as getProviderTextIcon, A as groupByCategory, M as isOAuthCallbackMessage, T as isScopeChecked, R as mapConnectionSharing, o as mapProvider, s as normalizeAuthType, i as normalizeProviderCategory, E as parseScopeOptions, j as pickableProviders, D as requestedScopes, d as resolveFlow, f as resolveMethod, p as resolveSchema, m as submitConnection, h as submittedValues, O as toggleScope, g as validateDraft, N as waitForOAuthCompletion };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.1030.1",
+  "version": "2026.1030.2",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "bin": {