@burdenoff/microfe-cosmicintersection 2026.525.1 → 2026.704.2

package/dist/cosmicintersection/lib/toast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toast.js","names":[],"sources":["../../../src/cosmicintersection/lib/toast.ts"],"sourcesContent":["import { toast } from 'sonner';\n\n/**\n * Module-wide toast API. sonner is a global singleton; the matching <Toaster>\n * is owned by the HOST app shell (mounted once via AppShellProvider). Every\n * page/component surfaces feedback through these helpers instead of hand-rolling\n * fixed-position toast markup, so success/error notifications stay consistent\n * with the rest of the platform.\n *\n * Durations follow the notification spec: success/info auto-dismiss, errors stay\n * until the user dismisses them (sonner renders a close button and announces via\n * aria-live).\n */\nexport const notify = {\n  success(message: string, description?: string): void {\n    toast.success(message, { description, duration: 4000 });\n  },\n  info(message: string, description?: string): void {\n    toast.info(message, { description, duration: 4000 });\n  },\n  warning(message: string, description?: string): void {\n    toast.warning(message, { description, duration: 8000 });\n  },\n  error(message: string, description?: string): void {\n    toast.error(message, { description, duration: Infinity, closeButton: true });\n  },\n  dismiss(id?: string | number): void {\n    toast.dismiss(id);\n  },\n};\n\nexport { toast };\n"],"mappings":";;AAaA,IAAa,IAAS;CACpB,QAAQ,GAAiB,GAA4B;AACnD,IAAM,QAAQ,GAAS;GAAE;GAAa,UAAU;GAAM,CAAC;;CAEzD,KAAK,GAAiB,GAA4B;AAChD,IAAM,KAAK,GAAS;GAAE;GAAa,UAAU;GAAM,CAAC;;CAEtD,QAAQ,GAAiB,GAA4B;AACnD,IAAM,QAAQ,GAAS;GAAE;GAAa,UAAU;GAAM,CAAC;;CAEzD,MAAM,GAAiB,GAA4B;AACjD,IAAM,MAAM,GAAS;GAAE;GAAa,UAAU;GAAU,aAAa;GAAM,CAAC;;CAE9E,QAAQ,GAA4B;AAClC,IAAM,QAAQ,EAAG;;CAEpB"}

package/dist/cosmicintersection/pages/access/AccessPage.js

@@ -0,0 +1,347 @@
+import { notify as e } from "../../lib/toast.js";
+import { useCosAccessGrantsQuery as t, useCosDatasetsQuery as n, useCosGrantAccessMutation as r, useCosRevokeAccessMutation as ee } from "../../api/cosmicApi.js";
+import te from "../../components/ActionMenu.js";
+import i from "../../components/EmptyState.js";
+import ne from "../../components/ErrorState.js";
+import re from "../../components/LoadingState.js";
+import ie from "../../components/EntityTagsField.js";
+import ae from "../../components/PageLayout.js";
+import a, { formatEnumLabel as o } from "../../components/StatusBadge.js";
+import "../../components/index.js";
+import { useMemo as s, useState as c } from "react";
+import { jsx as l, jsxs as u } from "react/jsx-runtime";
+import { KeyRound as d, ShieldCheck as oe } from "lucide-react";
+import { Badge as f, Button as p, Dialog as m, DialogContent as h, DialogDescription as g, DialogFooter as se, DialogHeader as _, DialogTitle as v, Input as y, Label as b, Select as x, SelectContent as S, SelectItem as C, SelectTrigger as w, SelectValue as T, Table as ce, TableBody as le, TableCell as E, TableHead as D, TableHeader as O, TableRow as k, Textarea as A } from "@burdenoff/fe-libs/ui";
+//#region src/cosmicintersection/pages/access/AccessPage.tsx
+var j = "ALL", M = [
+	"PENDING",
+	"ACTIVE",
+	"EXPIRED",
+	"REVOKED"
+];
+function N(e) {
+	return e === "ACTIVE" || e === "PENDING";
+}
+function P(e) {
+	if (!e) return "—";
+	let t = new Date(e);
+	return Number.isNaN(t.getTime()) ? "—" : t.toLocaleDateString(void 0, {
+		year: "numeric",
+		month: "short",
+		day: "numeric"
+	});
+}
+var F = {
+	datasetId: "",
+	granteeId: "",
+	scopes: [],
+	reason: "",
+	expiresAt: ""
+};
+function I() {
+	let [I, L] = c(j), [R, z] = c(j), B = n({ pagination: {
+		limit: 50,
+		offset: 0
+	} }), V = s(() => B.data?.cosListDatasets.items ?? [], [B.data]), H = s(() => {
+		let e = /* @__PURE__ */ new Map();
+		for (let t of V) e.set(t.id, t.name);
+		return e;
+	}, [V]), { data: U, loading: ue, error: W, refetch: G } = t({
+		datasetId: I === j ? void 0 : I,
+		status: R === j ? void 0 : R
+	}), K = s(() => U?.cosListAccessGrants ?? [], [U]), [de, { loading: q }] = r(), [fe] = ee(), [pe, J] = c(!1), [Y, X] = c(F), me = () => {
+		X({
+			...F,
+			datasetId: I === j ? "" : I
+		}), J(!0);
+	}, Z = (e, t) => {
+		X((n) => ({
+			...n,
+			[e]: t
+		}));
+	}, he = async () => {
+		if (!Y.datasetId) {
+			e.error("Dataset is required", "Choose which dataset this grant applies to.");
+			return;
+		}
+		if (!Y.granteeId.trim()) {
+			e.error("Grantee is required", "Enter the workspace User ID to grant access to.");
+			return;
+		}
+		let t;
+		if (Y.expiresAt) {
+			let n = new Date(Y.expiresAt);
+			if (Number.isNaN(n.getTime())) {
+				e.error("Invalid expiry", "Enter a valid expiry date or leave it blank.");
+				return;
+			}
+			t = n.toISOString();
+		}
+		(await de({ variables: { input: {
+			datasetId: Y.datasetId,
+			granteeId: Y.granteeId.trim(),
+			scopes: Y.scopes.length ? Y.scopes : void 0,
+			reason: Y.reason.trim() || void 0,
+			expiresAt: t
+		} } })).data?.cosGrantAccess?.id && (e.success("Access granted"), J(!1), X(F), await G());
+	}, ge = async (t) => {
+		let n = await fe({ variables: { id: t.id } });
+		if (n.error) throw Error(n.error.message);
+		if (!n.data?.cosRevokeAccess?.id) throw e.error("Could not revoke grant", "The server did not confirm the change."), Error("Revoke not confirmed");
+		e.success("Access revoked"), await G();
+	}, Q = /* @__PURE__ */ u(p, {
+		type: "button",
+		onClick: me,
+		children: [/* @__PURE__ */ l(d, { className: "size-4" }), "Grant access"]
+	}), $ = I === j;
+	return /* @__PURE__ */ u(ae, {
+		title: "Data access",
+		description: "Govern who can reach restricted and embargoed datasets, with scoped, expiring grants.",
+		actions: Q,
+		children: [/* @__PURE__ */ u("div", {
+			className: "space-y-4",
+			children: [/* @__PURE__ */ u("div", {
+				className: "flex flex-wrap items-center gap-3",
+				children: [/* @__PURE__ */ l("div", {
+					className: "w-full max-w-[18rem]",
+					children: /* @__PURE__ */ u(x, {
+						value: I,
+						onValueChange: L,
+						children: [/* @__PURE__ */ l(w, {
+							"aria-label": "Filter by dataset",
+							children: /* @__PURE__ */ l(T, { placeholder: "All datasets" })
+						}), /* @__PURE__ */ u(S, { children: [/* @__PURE__ */ l(C, {
+							value: j,
+							children: "All datasets"
+						}), V.map((e) => /* @__PURE__ */ l(C, {
+							value: e.id,
+							children: e.name
+						}, e.id))] })]
+					})
+				}), /* @__PURE__ */ l("div", {
+					className: "w-full max-w-[14rem]",
+					children: /* @__PURE__ */ u(x, {
+						value: R,
+						onValueChange: z,
+						children: [/* @__PURE__ */ l(w, {
+							"aria-label": "Filter by status",
+							children: /* @__PURE__ */ l(T, { placeholder: "All statuses" })
+						}), /* @__PURE__ */ u(S, { children: [/* @__PURE__ */ l(C, {
+							value: j,
+							children: "All statuses"
+						}), M.map((e) => /* @__PURE__ */ l(C, {
+							value: e,
+							children: o(e)
+						}, e))] })]
+					})
+				})]
+			}), (() => {
+				if (ue) return /* @__PURE__ */ l(re, {
+					variant: "rows",
+					rows: 6,
+					label: "Loading access grants…"
+				});
+				if (W) return /* @__PURE__ */ l(ne, {
+					message: W.message,
+					onRetry: () => void G()
+				});
+				if (K.length === 0) {
+					let e = I !== j || R !== j;
+					return /* @__PURE__ */ l(i, {
+						icon: oe,
+						title: e ? "No grants match these filters" : "No access grants yet",
+						description: e ? "Try clearing the dataset or status filter to see more grants." : "Grant a workspace member scoped access to a restricted or embargoed dataset.",
+						action: e ? void 0 : Q
+					});
+				}
+				return /* @__PURE__ */ l("div", {
+					className: "overflow-x-auto rounded-card border border-border-default bg-bg-elevated",
+					children: /* @__PURE__ */ u(ce, { children: [/* @__PURE__ */ l(O, { children: /* @__PURE__ */ u(k, { children: [
+						$ ? /* @__PURE__ */ l(D, { children: "Dataset" }) : null,
+						/* @__PURE__ */ l(D, { children: "Grantee" }),
+						/* @__PURE__ */ l(D, { children: "Status" }),
+						/* @__PURE__ */ l(D, { children: "Scopes" }),
+						/* @__PURE__ */ l(D, { children: "Reason" }),
+						/* @__PURE__ */ l(D, { children: "Granted" }),
+						/* @__PURE__ */ l(D, { children: "Expires" }),
+						/* @__PURE__ */ l(D, { children: "Revoked" }),
+						/* @__PURE__ */ l(D, {
+							className: "text-right",
+							children: "Actions"
+						})
+					] }) }), /* @__PURE__ */ l(le, { children: K.map((e) => /* @__PURE__ */ u(k, { children: [
+						$ ? /* @__PURE__ */ l(E, {
+							className: "max-w-[12rem]",
+							children: /* @__PURE__ */ l("span", {
+								className: "line-clamp-1 text-sm text-text-primary",
+								children: H.get(e.datasetId) ?? /* @__PURE__ */ l("span", {
+									className: "font-mono text-xs text-text-secondary",
+									children: e.datasetId
+								})
+							})
+						}) : null,
+						/* @__PURE__ */ l(E, {
+							className: "max-w-[12rem]",
+							children: /* @__PURE__ */ l("span", {
+								className: "block truncate font-mono text-xs text-text-primary",
+								children: e.granteeId
+							})
+						}),
+						/* @__PURE__ */ l(E, { children: /* @__PURE__ */ l(a, { status: e.status }) }),
+						/* @__PURE__ */ l(E, { children: /* @__PURE__ */ l("div", {
+							className: "flex max-w-[12rem] flex-wrap gap-1",
+							children: e.scopes.length === 0 ? /* @__PURE__ */ l("span", {
+								className: "text-xs text-text-secondary",
+								children: "—"
+							}) : e.scopes.map((e) => /* @__PURE__ */ l(f, {
+								variant: "outline",
+								className: "text-xs",
+								children: e
+							}, e))
+						}) }),
+						/* @__PURE__ */ l(E, {
+							className: "max-w-[14rem]",
+							children: e.reason ? /* @__PURE__ */ l("span", {
+								className: "line-clamp-1 text-sm text-text-secondary",
+								children: e.reason
+							}) : /* @__PURE__ */ l("span", {
+								className: "text-sm text-text-secondary",
+								children: "—"
+							})
+						}),
+						/* @__PURE__ */ l(E, {
+							className: "whitespace-nowrap text-sm text-text-secondary",
+							children: P(e.grantedAt)
+						}),
+						/* @__PURE__ */ l(E, {
+							className: "whitespace-nowrap text-sm text-text-secondary",
+							children: P(e.expiresAt)
+						}),
+						/* @__PURE__ */ l(E, {
+							className: "whitespace-nowrap text-sm text-text-secondary",
+							children: P(e.revokedAt)
+						}),
+						/* @__PURE__ */ l(E, {
+							className: "text-right",
+							children: N(e.status) ? /* @__PURE__ */ l(te, {
+								ariaLabel: `Actions for grant to ${e.granteeId}`,
+								entityName: e.granteeId,
+								onDelete: () => ge(e),
+								deleteLabel: "Revoke grant"
+							}) : /* @__PURE__ */ l("span", {
+								className: "text-xs text-text-secondary",
+								children: "—"
+							})
+						})
+					] }, e.id)) })] })
+				});
+			})()]
+		}), /* @__PURE__ */ l(m, {
+			open: pe,
+			onOpenChange: (e) => J(e || q ? e : !1),
+			children: /* @__PURE__ */ u(h, {
+				className: "max-h-[85vh] max-w-md overflow-y-auto",
+				children: [
+					/* @__PURE__ */ u(_, { children: [/* @__PURE__ */ l(v, { children: "Grant data access" }), /* @__PURE__ */ l(g, { children: "Give a workspace member scoped access to a dataset. Access is identified by the member's User ID." })] }),
+					/* @__PURE__ */ u("div", {
+						className: "space-y-4",
+						children: [
+							/* @__PURE__ */ u("div", {
+								className: "space-y-1.5",
+								children: [/* @__PURE__ */ l(b, {
+									htmlFor: "grant-dataset",
+									children: "Dataset"
+								}), /* @__PURE__ */ u(x, {
+									value: Y.datasetId || void 0,
+									onValueChange: (e) => Z("datasetId", e),
+									children: [/* @__PURE__ */ l(w, {
+										id: "grant-dataset",
+										"aria-label": "Dataset",
+										children: /* @__PURE__ */ l(T, { placeholder: "Select a dataset" })
+									}), /* @__PURE__ */ l(S, { children: V.map((e) => /* @__PURE__ */ l(C, {
+										value: e.id,
+										children: e.name
+									}, e.id)) })]
+								})]
+							}),
+							/* @__PURE__ */ u("div", {
+								className: "space-y-1.5",
+								children: [
+									/* @__PURE__ */ l(b, {
+										htmlFor: "grant-grantee",
+										children: "Grantee (User ID)"
+									}),
+									/* @__PURE__ */ l(y, {
+										id: "grant-grantee",
+										value: Y.granteeId,
+										onChange: (e) => Z("granteeId", e.target.value),
+										placeholder: "e.g. 4fe35990-…",
+										className: "font-mono"
+									}),
+									/* @__PURE__ */ l("p", {
+										className: "text-xs text-text-secondary",
+										children: "Paste the workspace member's User ID. You can copy it from the member's profile (“Get ID”) or the workspace member directory."
+									})
+								]
+							}),
+							/* @__PURE__ */ l(ie, {
+								value: Y.scopes,
+								onChange: (e) => Z("scopes", e),
+								label: "Scopes",
+								placeholder: "e.g. read, download"
+							}),
+							/* @__PURE__ */ u("div", {
+								className: "space-y-1.5",
+								children: [/* @__PURE__ */ l(b, {
+									htmlFor: "grant-reason",
+									children: "Reason"
+								}), /* @__PURE__ */ l(A, {
+									id: "grant-reason",
+									value: Y.reason,
+									onChange: (e) => Z("reason", e.target.value),
+									rows: 2,
+									placeholder: "Why this member needs access."
+								})]
+							}),
+							/* @__PURE__ */ u("div", {
+								className: "space-y-1.5",
+								children: [
+									/* @__PURE__ */ l(b, {
+										htmlFor: "grant-expires",
+										children: "Expires (optional)"
+									}),
+									/* @__PURE__ */ l(y, {
+										id: "grant-expires",
+										type: "datetime-local",
+										value: Y.expiresAt,
+										onChange: (e) => Z("expiresAt", e.target.value)
+									}),
+									/* @__PURE__ */ l("p", {
+										className: "text-xs text-text-secondary",
+										children: "Leave blank for an open-ended grant."
+									})
+								]
+							})
+						]
+					}),
+					/* @__PURE__ */ u(se, { children: [/* @__PURE__ */ l(p, {
+						type: "button",
+						variant: "outline",
+						onClick: () => J(!1),
+						disabled: q,
+						children: "Cancel"
+					}), /* @__PURE__ */ u(p, {
+						type: "button",
+						onClick: () => void he(),
+						disabled: q,
+						children: [/* @__PURE__ */ l(d, { className: "size-4" }), q ? "Granting…" : "Grant access"]
+					})] })
+				]
+			})
+		})]
+	});
+}
+//#endregion
+export { I as default };
+
+//# sourceMappingURL=AccessPage.js.map

package/dist/cosmicintersection/pages/access/AccessPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessPage.js","names":[],"sources":["../../../../src/cosmicintersection/pages/access/AccessPage.tsx"],"sourcesContent":["import { useMemo, useState } from 'react';\nimport { KeyRound, ShieldCheck } from 'lucide-react';\nimport {\n  Badge,\n  Button,\n  Dialog,\n  DialogContent,\n  DialogDescription,\n  DialogFooter,\n  DialogHeader,\n  DialogTitle,\n  Input,\n  Label,\n  Select,\n  SelectContent,\n  SelectItem,\n  SelectTrigger,\n  SelectValue,\n  Table,\n  TableBody,\n  TableCell,\n  TableHead,\n  TableHeader,\n  TableRow,\n  Textarea,\n} from '@burdenoff/fe-libs/ui';\n\nimport {\n  useCosAccessGrantsQuery,\n  useCosDatasetsQuery,\n  useCosGrantAccessMutation,\n  useCosRevokeAccessMutation,\n  type CosDataAccessGrant,\n  type CosGrantAccessInput,\n  type CosGrantStatus,\n} from '../../api/cosmicApi';\nimport {\n  EmptyState,\n  ErrorState,\n  LoadingState,\n  PageLayout,\n  StatusBadge,\n  formatEnumLabel,\n} from '../../components';\nimport { ActionMenu } from '../../components/ActionMenu';\nimport { EntityTagsField } from '../../components/EntityTagsField';\nimport { notify } from '../../lib/toast';\n\nconst ALL = 'ALL';\nconst GRANT_STATUSES: CosGrantStatus[] = ['PENDING', 'ACTIVE', 'EXPIRED', 'REVOKED'];\n\n/** Only live grants can be revoked. */\nfunction canRevoke(status: CosGrantStatus): boolean {\n  return status === 'ACTIVE' || status === 'PENDING';\n}\n\nfunction formatDate(value?: string | null): string {\n  if (!value) {\n    return '—';\n  }\n  const parsed = new Date(value);\n  if (Number.isNaN(parsed.getTime())) {\n    return '—';\n  }\n  return parsed.toLocaleDateString(undefined, { year: 'numeric', month: 'short', day: 'numeric' });\n}\n\ninterface GrantFormState {\n  datasetId: string;\n  granteeId: string;\n  scopes: string[];\n  reason: string;\n  expiresAt: string;\n}\n\nconst EMPTY_FORM: GrantFormState = {\n  datasetId: '',\n  granteeId: '',\n  scopes: [],\n  reason: '',\n  expiresAt: '',\n};\n\nexport default function AccessPage() {\n  const [datasetFilter, setDatasetFilter] = useState<string>(ALL);\n  const [statusFilter, setStatusFilter] = useState<string>(ALL);\n\n  const datasetsQuery = useCosDatasetsQuery({ pagination: { limit: 50, offset: 0 } });\n  const datasets = useMemo(\n    () => datasetsQuery.data?.cosListDatasets.items ?? [],\n    [datasetsQuery.data]\n  );\n  const datasetName = useMemo(() => {\n    const map = new Map<string, string>();\n    for (const dataset of datasets) {\n      map.set(dataset.id, dataset.name);\n    }\n    return map;\n  }, [datasets]);\n\n  const { data, loading, error, refetch } = useCosAccessGrantsQuery({\n    datasetId: datasetFilter === ALL ? undefined : datasetFilter,\n    status: statusFilter === ALL ? undefined : (statusFilter as CosGrantStatus),\n  });\n  const grants = useMemo(() => data?.cosListAccessGrants ?? [], [data]);\n\n  const [grantAccess, { loading: granting }] = useCosGrantAccessMutation();\n  const [revokeAccess] = useCosRevokeAccessMutation();\n\n  const [dialogOpen, setDialogOpen] = useState(false);\n  const [form, setForm] = useState<GrantFormState>(EMPTY_FORM);\n\n  const openGrantDialog = () => {\n    setForm({\n      ...EMPTY_FORM,\n      datasetId: datasetFilter === ALL ? '' : datasetFilter,\n    });\n    setDialogOpen(true);\n  };\n\n  const setField = <K extends keyof GrantFormState>(field: K, value: GrantFormState[K]) => {\n    setForm((prev) => ({ ...prev, [field]: value }));\n  };\n\n  const submitGrant = async () => {\n    if (!form.datasetId) {\n      notify.error('Dataset is required', 'Choose which dataset this grant applies to.');\n      return;\n    }\n    if (!form.granteeId.trim()) {\n      notify.error('Grantee is required', 'Enter the workspace User ID to grant access to.');\n      return;\n    }\n\n    let expiresAt: string | undefined;\n    if (form.expiresAt) {\n      const parsed = new Date(form.expiresAt);\n      if (Number.isNaN(parsed.getTime())) {\n        notify.error('Invalid expiry', 'Enter a valid expiry date or leave it blank.');\n        return;\n      }\n      expiresAt = parsed.toISOString();\n    }\n\n    const input: CosGrantAccessInput = {\n      datasetId: form.datasetId,\n      granteeId: form.granteeId.trim(),\n      scopes: form.scopes.length ? form.scopes : undefined,\n      reason: form.reason.trim() || undefined,\n      expiresAt,\n    };\n\n    const response = await grantAccess({ variables: { input } });\n    if (response.data?.cosGrantAccess?.id) {\n      notify.success('Access granted');\n      setDialogOpen(false);\n      setForm(EMPTY_FORM);\n      await refetch();\n    }\n  };\n\n  const handleRevoke = async (grant: CosDataAccessGrant) => {\n    const response = await revokeAccess({ variables: { id: grant.id } });\n    if (response.error) {\n      throw new Error(response.error.message);\n    }\n    if (!response.data?.cosRevokeAccess?.id) {\n      notify.error('Could not revoke grant', 'The server did not confirm the change.');\n      throw new Error('Revoke not confirmed');\n    }\n    notify.success('Access revoked');\n    await refetch();\n  };\n\n  const grantButton = (\n    <Button type=\"button\" onClick={openGrantDialog}>\n      <KeyRound className=\"size-4\" />\n      Grant access\n    </Button>\n  );\n\n  const showDatasetColumn = datasetFilter === ALL;\n\n  const renderBody = () => {\n    if (loading) {\n      return <LoadingState variant=\"rows\" rows={6} label=\"Loading access grants…\" />;\n    }\n    if (error) {\n      return <ErrorState message={error.message} onRetry={() => void refetch()} />;\n    }\n    if (grants.length === 0) {\n      const filtered = datasetFilter !== ALL || statusFilter !== ALL;\n      return (\n        <EmptyState\n          icon={ShieldCheck}\n          title={filtered ? 'No grants match these filters' : 'No access grants yet'}\n          description={\n            filtered\n              ? 'Try clearing the dataset or status filter to see more grants.'\n              : 'Grant a workspace member scoped access to a restricted or embargoed dataset.'\n          }\n          action={filtered ? undefined : grantButton}\n        />\n      );\n    }\n\n    return (\n      <div className=\"overflow-x-auto rounded-card border border-border-default bg-bg-elevated\">\n        <Table>\n          <TableHeader>\n            <TableRow>\n              {showDatasetColumn ? <TableHead>Dataset</TableHead> : null}\n              <TableHead>Grantee</TableHead>\n              <TableHead>Status</TableHead>\n              <TableHead>Scopes</TableHead>\n              <TableHead>Reason</TableHead>\n              <TableHead>Granted</TableHead>\n              <TableHead>Expires</TableHead>\n              <TableHead>Revoked</TableHead>\n              <TableHead className=\"text-right\">Actions</TableHead>\n            </TableRow>\n          </TableHeader>\n          <TableBody>\n            {grants.map((grant) => (\n              <TableRow key={grant.id}>\n                {showDatasetColumn ? (\n                  <TableCell className=\"max-w-[12rem]\">\n                    <span className=\"line-clamp-1 text-sm text-text-primary\">\n                      {datasetName.get(grant.datasetId) ?? (\n                        <span className=\"font-mono text-xs text-text-secondary\">\n                          {grant.datasetId}\n                        </span>\n                      )}\n                    </span>\n                  </TableCell>\n                ) : null}\n                <TableCell className=\"max-w-[12rem]\">\n                  <span className=\"block truncate font-mono text-xs text-text-primary\">\n                    {grant.granteeId}\n                  </span>\n                </TableCell>\n                <TableCell>\n                  <StatusBadge status={grant.status} />\n                </TableCell>\n                <TableCell>\n                  <div className=\"flex max-w-[12rem] flex-wrap gap-1\">\n                    {grant.scopes.length === 0 ? (\n                      <span className=\"text-xs text-text-secondary\">—</span>\n                    ) : (\n                      grant.scopes.map((scope) => (\n                        <Badge key={scope} variant=\"outline\" className=\"text-xs\">\n                          {scope}\n                        </Badge>\n                      ))\n                    )}\n                  </div>\n                </TableCell>\n                <TableCell className=\"max-w-[14rem]\">\n                  {grant.reason ? (\n                    <span className=\"line-clamp-1 text-sm text-text-secondary\">{grant.reason}</span>\n                  ) : (\n                    <span className=\"text-sm text-text-secondary\">—</span>\n                  )}\n                </TableCell>\n                <TableCell className=\"whitespace-nowrap text-sm text-text-secondary\">\n                  {formatDate(grant.grantedAt)}\n                </TableCell>\n                <TableCell className=\"whitespace-nowrap text-sm text-text-secondary\">\n                  {formatDate(grant.expiresAt)}\n                </TableCell>\n                <TableCell className=\"whitespace-nowrap text-sm text-text-secondary\">\n                  {formatDate(grant.revokedAt)}\n                </TableCell>\n                <TableCell className=\"text-right\">\n                  {canRevoke(grant.status) ? (\n                    <ActionMenu\n                      ariaLabel={`Actions for grant to ${grant.granteeId}`}\n                      entityName={grant.granteeId}\n                      onDelete={() => handleRevoke(grant)}\n                      deleteLabel=\"Revoke grant\"\n                    />\n                  ) : (\n                    <span className=\"text-xs text-text-secondary\">—</span>\n                  )}\n                </TableCell>\n              </TableRow>\n            ))}\n          </TableBody>\n        </Table>\n      </div>\n    );\n  };\n\n  return (\n    <PageLayout\n      title=\"Data access\"\n      description=\"Govern who can reach restricted and embargoed datasets, with scoped, expiring grants.\"\n      actions={grantButton}\n    >\n      <div className=\"space-y-4\">\n        <div className=\"flex flex-wrap items-center gap-3\">\n          <div className=\"w-full max-w-[18rem]\">\n            <Select value={datasetFilter} onValueChange={setDatasetFilter}>\n              <SelectTrigger aria-label=\"Filter by dataset\">\n                <SelectValue placeholder=\"All datasets\" />\n              </SelectTrigger>\n              <SelectContent>\n                <SelectItem value={ALL}>All datasets</SelectItem>\n                {datasets.map((dataset) => (\n                  <SelectItem key={dataset.id} value={dataset.id}>\n                    {dataset.name}\n                  </SelectItem>\n                ))}\n              </SelectContent>\n            </Select>\n          </div>\n          <div className=\"w-full max-w-[14rem]\">\n            <Select value={statusFilter} onValueChange={setStatusFilter}>\n              <SelectTrigger aria-label=\"Filter by status\">\n                <SelectValue placeholder=\"All statuses\" />\n              </SelectTrigger>\n              <SelectContent>\n                <SelectItem value={ALL}>All statuses</SelectItem>\n                {GRANT_STATUSES.map((status) => (\n                  <SelectItem key={status} value={status}>\n                    {formatEnumLabel(status)}\n                  </SelectItem>\n                ))}\n              </SelectContent>\n            </Select>\n          </div>\n        </div>\n\n        {renderBody()}\n      </div>\n\n      {/* Grant access dialog */}\n      <Dialog\n        open={dialogOpen}\n        onOpenChange={(open) => (open || granting ? setDialogOpen(open) : setDialogOpen(false))}\n      >\n        <DialogContent className=\"max-h-[85vh] max-w-md overflow-y-auto\">\n          <DialogHeader>\n            <DialogTitle>Grant data access</DialogTitle>\n            <DialogDescription>\n              Give a workspace member scoped access to a dataset. Access is identified by the\n              member&apos;s User ID.\n            </DialogDescription>\n          </DialogHeader>\n\n          <div className=\"space-y-4\">\n            <div className=\"space-y-1.5\">\n              <Label htmlFor=\"grant-dataset\">Dataset</Label>\n              <Select\n                value={form.datasetId || undefined}\n                onValueChange={(value) => setField('datasetId', value)}\n              >\n                <SelectTrigger id=\"grant-dataset\" aria-label=\"Dataset\">\n                  <SelectValue placeholder=\"Select a dataset\" />\n                </SelectTrigger>\n                <SelectContent>\n                  {datasets.map((dataset) => (\n                    <SelectItem key={dataset.id} value={dataset.id}>\n                      {dataset.name}\n                    </SelectItem>\n                  ))}\n                </SelectContent>\n              </Select>\n            </div>\n\n            <div className=\"space-y-1.5\">\n              <Label htmlFor=\"grant-grantee\">Grantee (User ID)</Label>\n              <Input\n                id=\"grant-grantee\"\n                value={form.granteeId}\n                onChange={(event) => setField('granteeId', event.target.value)}\n                placeholder=\"e.g. 4fe35990-…\"\n                className=\"font-mono\"\n              />\n              <p className=\"text-xs text-text-secondary\">\n                Paste the workspace member&apos;s User ID. You can copy it from the member&apos;s\n                profile (&ldquo;Get ID&rdquo;) or the workspace member directory.\n              </p>\n            </div>\n\n            <EntityTagsField\n              value={form.scopes}\n              onChange={(scopes) => setField('scopes', scopes)}\n              label=\"Scopes\"\n              placeholder=\"e.g. read, download\"\n            />\n\n            <div className=\"space-y-1.5\">\n              <Label htmlFor=\"grant-reason\">Reason</Label>\n              <Textarea\n                id=\"grant-reason\"\n                value={form.reason}\n                onChange={(event) => setField('reason', event.target.value)}\n                rows={2}\n                placeholder=\"Why this member needs access.\"\n              />\n            </div>\n\n            <div className=\"space-y-1.5\">\n              <Label htmlFor=\"grant-expires\">Expires (optional)</Label>\n              <Input\n                id=\"grant-expires\"\n                type=\"datetime-local\"\n                value={form.expiresAt}\n                onChange={(event) => setField('expiresAt', event.target.value)}\n              />\n              <p className=\"text-xs text-text-secondary\">Leave blank for an open-ended grant.</p>\n            </div>\n          </div>\n\n          <DialogFooter>\n            <Button\n              type=\"button\"\n              variant=\"outline\"\n              onClick={() => setDialogOpen(false)}\n              disabled={granting}\n            >\n              Cancel\n            </Button>\n            <Button type=\"button\" onClick={() => void submitGrant()} disabled={granting}>\n              <KeyRound className=\"size-4\" />\n              {granting ? 'Granting…' : 'Grant access'}\n            </Button>\n          </DialogFooter>\n        </DialogContent>\n      </Dialog>\n    </PageLayout>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAgDA,IAAM,IAAM,OACN,IAAmC;CAAC;CAAW;CAAU;CAAW;CAAU;AAGpF,SAAS,EAAU,GAAiC;AAClD,QAAO,MAAW,YAAY,MAAW;;AAG3C,SAAS,EAAW,GAA+B;AACjD,KAAI,CAAC,EACH,QAAO;CAET,IAAM,IAAS,IAAI,KAAK,EAAM;AAI9B,QAHI,OAAO,MAAM,EAAO,SAAS,CAAC,GACzB,MAEF,EAAO,mBAAmB,KAAA,GAAW;EAAE,MAAM;EAAW,OAAO;EAAS,KAAK;EAAW,CAAC;;AAWlG,IAAM,IAA6B;CACjC,WAAW;CACX,WAAW;CACX,QAAQ,EAAE;CACV,QAAQ;CACR,WAAW;CACZ;AAED,SAAwB,IAAa;CACnC,IAAM,CAAC,GAAe,KAAoB,EAAiB,EAAI,EACzD,CAAC,GAAc,KAAmB,EAAiB,EAAI,EAEvD,IAAgB,EAAoB,EAAE,YAAY;EAAE,OAAO;EAAI,QAAQ;EAAG,EAAE,CAAC,EAC7E,IAAW,QACT,EAAc,MAAM,gBAAgB,SAAS,EAAE,EACrD,CAAC,EAAc,KAAK,CACrB,EACK,IAAc,QAAc;EAChC,IAAM,oBAAM,IAAI,KAAqB;AACrC,OAAK,IAAM,KAAW,EACpB,GAAI,IAAI,EAAQ,IAAI,EAAQ,KAAK;AAEnC,SAAO;IACN,CAAC,EAAS,CAAC,EAER,EAAE,SAAM,aAAS,UAAO,eAAY,EAAwB;EAChE,WAAW,MAAkB,IAAM,KAAA,IAAY;EAC/C,QAAQ,MAAiB,IAAM,KAAA,IAAa;EAC7C,CAAC,EACI,IAAS,QAAc,GAAM,uBAAuB,EAAE,EAAE,CAAC,EAAK,CAAC,EAE/D,CAAC,IAAa,EAAE,SAAS,OAAc,GAA2B,EAClE,CAAC,MAAgB,IAA4B,EAE7C,CAAC,IAAY,KAAiB,EAAS,GAAM,EAC7C,CAAC,GAAM,KAAW,EAAyB,EAAW,EAEtD,WAAwB;AAK5B,EAJA,EAAQ;GACN,GAAG;GACH,WAAW,MAAkB,IAAM,KAAK;GACzC,CAAC,EACF,EAAc,GAAK;IAGf,KAA4C,GAAU,MAA6B;AACvF,KAAS,OAAU;GAAE,GAAG;IAAO,IAAQ;GAAO,EAAE;IAG5C,KAAc,YAAY;AAC9B,MAAI,CAAC,EAAK,WAAW;AACnB,KAAO,MAAM,uBAAuB,8CAA8C;AAClF;;AAEF,MAAI,CAAC,EAAK,UAAU,MAAM,EAAE;AAC1B,KAAO,MAAM,uBAAuB,kDAAkD;AACtF;;EAGF,IAAI;AACJ,MAAI,EAAK,WAAW;GAClB,IAAM,IAAS,IAAI,KAAK,EAAK,UAAU;AACvC,OAAI,OAAO,MAAM,EAAO,SAAS,CAAC,EAAE;AAClC,MAAO,MAAM,kBAAkB,+CAA+C;AAC9E;;AAEF,OAAY,EAAO,aAAa;;AAYlC,GADiB,MAAM,GAAY,EAAE,WAAW,EAAE,OARf;GACjC,WAAW,EAAK;GAChB,WAAW,EAAK,UAAU,MAAM;GAChC,QAAQ,EAAK,OAAO,SAAS,EAAK,SAAS,KAAA;GAC3C,QAAQ,EAAK,OAAO,MAAM,IAAI,KAAA;GAC9B;GACD,EAEwD,EAAE,CAAC,EAC/C,MAAM,gBAAgB,OACjC,EAAO,QAAQ,iBAAiB,EAChC,EAAc,GAAM,EACpB,EAAQ,EAAW,EACnB,MAAM,GAAS;IAIb,KAAe,OAAO,MAA8B;EACxD,IAAM,IAAW,MAAM,GAAa,EAAE,WAAW,EAAE,IAAI,EAAM,IAAI,EAAE,CAAC;AACpE,MAAI,EAAS,MACX,OAAU,MAAM,EAAS,MAAM,QAAQ;AAEzC,MAAI,CAAC,EAAS,MAAM,iBAAiB,GAEnC,OADA,EAAO,MAAM,0BAA0B,yCAAyC,EACtE,MAAM,uBAAuB;AAGzC,EADA,EAAO,QAAQ,iBAAiB,EAChC,MAAM,GAAS;IAGX,IACJ,kBAAC,GAAD;EAAQ,MAAK;EAAS,SAAS;YAA/B,CACE,kBAAC,GAAD,EAAU,WAAU,UAAW,CAAA,EAAA,eAExB;KAGL,IAAoB,MAAkB;AAgH5C,QACE,kBAAC,IAAD;EACE,OAAM;EACN,aAAY;EACZ,SAAS;YAHX,CAKE,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD;MAAQ,OAAO;MAAe,eAAe;gBAA7C,CACE,kBAAC,GAAD;OAAe,cAAW;iBACxB,kBAAC,GAAD,EAAa,aAAY,gBAAiB,CAAA;OAC5B,CAAA,EAChB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;OAAY,OAAO;iBAAK;OAAyB,CAAA,EAChD,EAAS,KAAK,MACb,kBAAC,GAAD;OAA6B,OAAO,EAAQ;iBACzC,EAAQ;OACE,EAFI,EAAQ,GAEZ,CACb,CACY,EAAA,CAAA,CACT;;KACL,CAAA,EACN,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD;MAAQ,OAAO;MAAc,eAAe;gBAA5C,CACE,kBAAC,GAAD;OAAe,cAAW;iBACxB,kBAAC,GAAD,EAAa,aAAY,gBAAiB,CAAA;OAC5B,CAAA,EAChB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;OAAY,OAAO;iBAAK;OAAyB,CAAA,EAChD,EAAe,KAAK,MACnB,kBAAC,GAAD;OAAyB,OAAO;iBAC7B,EAAgB,EAAO;OACb,EAFI,EAEJ,CACb,CACY,EAAA,CAAA,CACT;;KACL,CAAA,CACF;cApJa;AACvB,QAAI,GACF,QAAO,kBAAC,IAAD;KAAc,SAAQ;KAAO,MAAM;KAAG,OAAM;KAA2B,CAAA;AAEhF,QAAI,EACF,QAAO,kBAAC,IAAD;KAAY,SAAS,EAAM;KAAS,eAAe,KAAK,GAAS;KAAI,CAAA;AAE9E,QAAI,EAAO,WAAW,GAAG;KACvB,IAAM,IAAW,MAAkB,KAAO,MAAiB;AAC3D,YACE,kBAAC,GAAD;MACE,MAAM;MACN,OAAO,IAAW,kCAAkC;MACpD,aACE,IACI,kEACA;MAEN,QAAQ,IAAW,KAAA,IAAY;MAC/B,CAAA;;AAIN,WACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,IAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD,EAAA,UAAA;MACG,IAAoB,kBAAC,GAAD,EAAA,UAAW,WAAmB,CAAA,GAAG;MACtD,kBAAC,GAAD,EAAA,UAAW,WAAmB,CAAA;MAC9B,kBAAC,GAAD,EAAA,UAAW,UAAkB,CAAA;MAC7B,kBAAC,GAAD,EAAA,UAAW,UAAkB,CAAA;MAC7B,kBAAC,GAAD,EAAA,UAAW,UAAkB,CAAA;MAC7B,kBAAC,GAAD,EAAA,UAAW,WAAmB,CAAA;MAC9B,kBAAC,GAAD,EAAA,UAAW,WAAmB,CAAA;MAC9B,kBAAC,GAAD,EAAA,UAAW,WAAmB,CAAA;MAC9B,kBAAC,GAAD;OAAW,WAAU;iBAAa;OAAmB,CAAA;MAC5C,EAAA,CAAA,EACC,CAAA,EACd,kBAAC,IAAD,EAAA,UACG,EAAO,KAAK,MACX,kBAAC,GAAD,EAAA,UAAA;MACG,IACC,kBAAC,GAAD;OAAW,WAAU;iBACnB,kBAAC,QAAD;QAAM,WAAU;kBACb,EAAY,IAAI,EAAM,UAAU,IAC/B,kBAAC,QAAD;SAAM,WAAU;mBACb,EAAM;SACF,CAAA;QAEJ,CAAA;OACG,CAAA,GACV;MACJ,kBAAC,GAAD;OAAW,WAAU;iBACnB,kBAAC,QAAD;QAAM,WAAU;kBACb,EAAM;QACF,CAAA;OACG,CAAA;MACZ,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD,EAAa,QAAQ,EAAM,QAAU,CAAA,EAC3B,CAAA;MACZ,kBAAC,GAAD,EAAA,UACE,kBAAC,OAAD;OAAK,WAAU;iBACZ,EAAM,OAAO,WAAW,IACvB,kBAAC,QAAD;QAAM,WAAU;kBAA8B;QAAQ,CAAA,GAEtD,EAAM,OAAO,KAAK,MAChB,kBAAC,GAAD;QAAmB,SAAQ;QAAU,WAAU;kBAC5C;QACK,EAFI,EAEJ,CACR;OAEA,CAAA,EACI,CAAA;MACZ,kBAAC,GAAD;OAAW,WAAU;iBAClB,EAAM,SACL,kBAAC,QAAD;QAAM,WAAU;kBAA4C,EAAM;QAAc,CAAA,GAEhF,kBAAC,QAAD;QAAM,WAAU;kBAA8B;QAAQ,CAAA;OAE9C,CAAA;MACZ,kBAAC,GAAD;OAAW,WAAU;iBAClB,EAAW,EAAM,UAAU;OAClB,CAAA;MACZ,kBAAC,GAAD;OAAW,WAAU;iBAClB,EAAW,EAAM,UAAU;OAClB,CAAA;MACZ,kBAAC,GAAD;OAAW,WAAU;iBAClB,EAAW,EAAM,UAAU;OAClB,CAAA;MACZ,kBAAC,GAAD;OAAW,WAAU;iBAClB,EAAU,EAAM,OAAO,GACtB,kBAAC,IAAD;QACE,WAAW,wBAAwB,EAAM;QACzC,YAAY,EAAM;QAClB,gBAAgB,GAAa,EAAM;QACnC,aAAY;QACZ,CAAA,GAEF,kBAAC,QAAD;QAAM,WAAU;kBAA8B;QAAQ,CAAA;OAE9C,CAAA;MACH,EAAA,EA7DI,EAAM,GA6DV,CACX,EACQ,CAAA,CACN,EAAA,CAAA;KACJ,CAAA;OA4CS,CACT;MAGN,kBAAC,GAAD;GACE,MAAM;GACN,eAAe,MAA6B,EAAnB,KAAQ,IAAyB,IAAsB,GAAM;aAEtF,kBAAC,GAAD;IAAe,WAAU;cAAzB;KACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAa,qBAA+B,CAAA,EAC5C,kBAAC,GAAD,EAAA,UAAmB,qGAGC,CAAA,CACP,EAAA,CAAA;KAEf,kBAAC,OAAD;MAAK,WAAU;gBAAf;OACE,kBAAC,OAAD;QAAK,WAAU;kBAAf,CACE,kBAAC,GAAD;SAAO,SAAQ;mBAAgB;SAAe,CAAA,EAC9C,kBAAC,GAAD;SACE,OAAO,EAAK,aAAa,KAAA;SACzB,gBAAgB,MAAU,EAAS,aAAa,EAAM;mBAFxD,CAIE,kBAAC,GAAD;UAAe,IAAG;UAAgB,cAAW;oBAC3C,kBAAC,GAAD,EAAa,aAAY,oBAAqB,CAAA;UAChC,CAAA,EAChB,kBAAC,GAAD,EAAA,UACG,EAAS,KAAK,MACb,kBAAC,GAAD;UAA6B,OAAO,EAAQ;oBACzC,EAAQ;UACE,EAFI,EAAQ,GAEZ,CACb,EACY,CAAA,CACT;WACL;;OAEN,kBAAC,OAAD;QAAK,WAAU;kBAAf;SACE,kBAAC,GAAD;UAAO,SAAQ;oBAAgB;UAAyB,CAAA;SACxD,kBAAC,GAAD;UACE,IAAG;UACH,OAAO,EAAK;UACZ,WAAW,MAAU,EAAS,aAAa,EAAM,OAAO,MAAM;UAC9D,aAAY;UACZ,WAAU;UACV,CAAA;SACF,kBAAC,KAAD;UAAG,WAAU;oBAA8B;UAGvC,CAAA;SACA;;OAEN,kBAAC,IAAD;QACE,OAAO,EAAK;QACZ,WAAW,MAAW,EAAS,UAAU,EAAO;QAChD,OAAM;QACN,aAAY;QACZ,CAAA;OAEF,kBAAC,OAAD;QAAK,WAAU;kBAAf,CACE,kBAAC,GAAD;SAAO,SAAQ;mBAAe;SAAc,CAAA,EAC5C,kBAAC,GAAD;SACE,IAAG;SACH,OAAO,EAAK;SACZ,WAAW,MAAU,EAAS,UAAU,EAAM,OAAO,MAAM;SAC3D,MAAM;SACN,aAAY;SACZ,CAAA,CACE;;OAEN,kBAAC,OAAD;QAAK,WAAU;kBAAf;SACE,kBAAC,GAAD;UAAO,SAAQ;oBAAgB;UAA0B,CAAA;SACzD,kBAAC,GAAD;UACE,IAAG;UACH,MAAK;UACL,OAAO,EAAK;UACZ,WAAW,MAAU,EAAS,aAAa,EAAM,OAAO,MAAM;UAC9D,CAAA;SACF,kBAAC,KAAD;UAAG,WAAU;oBAA8B;UAAwC,CAAA;SAC/E;;OACF;;KAEN,kBAAC,IAAD,EAAA,UAAA,CACE,kBAAC,GAAD;MACE,MAAK;MACL,SAAQ;MACR,eAAe,EAAc,GAAM;MACnC,UAAU;gBACX;MAEQ,CAAA,EACT,kBAAC,GAAD;MAAQ,MAAK;MAAS,eAAe,KAAK,IAAa;MAAE,UAAU;gBAAnE,CACE,kBAAC,GAAD,EAAU,WAAU,UAAW,CAAA,EAC9B,IAAW,cAAc,eACnB;QACI,EAAA,CAAA;KACD;;GACT,CAAA,CACE"}