@burdenoff/microfe-planmagnet 2026.1001.5 → 2026.1001.7

package/dist/planmagnet/people/People.js

@@ -1,48 +1,62 @@
 import { createContext as e, useCallback as t, useContext as n, useEffect as r, useMemo as i, useState as a } from "react";
 import { jsx as o } from "react/jsx-runtime";
 import { buildActorFallback as s, useActorProfiles as c } from "@burdenoff/fe-libs/shared";
+import { Badge as l } from "@burdenoff/fe-libs/ui";
 //#region src/planmagnet/people/People.tsx
-var l = {
+var u = {
 	"automation:engine": "Automation",
 	"automation:scheduler": "Automation"
-}, u = e(null);
-function d({ workspaceId: e, children: n }) {
+}, d = "anonymous";
+function f(e) {
+	return e === d;
+}
+function p({ className: e }) {
+	return /* @__PURE__ */ o(l, {
+		variant: "secondary",
+		className: e ?? "text-xs",
+		"data-testid": "anonymous-badge",
+		children: "Anonymous"
+	});
+}
+var m = e(null);
+function h({ workspaceId: e, children: n }) {
 	let [r, s] = a([]), l = t((e) => {
 		s((t) => t.includes(e) ? t : [...t, e]);
-	}, []), d = c(i(() => r.map((e) => ({
+	}, []), u = c(i(() => r.map((e) => ({
 		actorId: e,
 		actorType: "user"
-	})), [r]), { workspaceId: e }), f = i(() => ({
+	})), [r]), { workspaceId: e }), d = i(() => ({
 		request: l,
-		profiles: d
-	}), [l, d]);
-	return /* @__PURE__ */ o(u.Provider, {
-		value: f,
+		profiles: u
+	}), [l, u]);
+	return /* @__PURE__ */ o(m.Provider, {
+		value: d,
 		children: n
 	});
 }
-function f(e) {
-	let t = n(u), i = t?.request, a = e ? l[e] : void 0;
+function g(e) {
+	let t = n(m), i = t?.request, a = e ? u[e] : void 0, o = f(e);
 	return r(() => {
-		e && i && !a && i(e);
+		e && i && !a && !o && i(e);
 	}, [
 		e,
 		i,
-		a
+		a,
+		o
 	]), e ? a ? {
 		actorId: e,
 		actorType: "service",
 		displayName: a,
 		secondaryLabel: "Automation",
 		resolved: !0
-	} : t?.profiles[e] ?? s({
+	} : o ? null : t?.profiles[e] ?? s({
 		actorId: e,
 		actorType: "user"
 	}) : null;
 }
-function p({ id: e, className: t }) {
-	let n = f(e);
-	return n ? /* @__PURE__ */ o("span", {
+function _({ id: e, className: t }) {
+	let n = g(e);
+	return f(e) ? /* @__PURE__ */ o(p, { className: t }) : n ? /* @__PURE__ */ o("span", {
 		className: t,
 		title: n.email ?? void 0,
 		children: n.displayName
@@ -51,19 +65,19 @@ function p({ id: e, className: t }) {
 		children: "—"
 	});
 }
-function m(e) {
+function v(e) {
 	return e.trim().split(/\s+/).filter(Boolean).slice(0, 2).map((e) => e[0].toUpperCase()).join("");
 }
-function h({ id: e, className: t }) {
-	let n = f(e), r = n ? n.email ? `${n.displayName} (${n.email})` : n.displayName : void 0;
+function y({ id: e, className: t }) {
+	let n = g(e), r = n ? n.email ? `${n.displayName} (${n.email})` : n.displayName : void 0;
 	return /* @__PURE__ */ o("span", {
 		className: t,
 		title: r,
 		"aria-label": r,
-		children: (n?.resolved ? m(n.displayName) : "") || "?"
+		children: (n?.resolved ? v(n.displayName) : "") || "?"
 	});
 }
 //#endregion
-export { d as PeopleProvider, h as PersonAvatar, p as PersonName, m as initialsOf, f as usePersonProfile };
+export { h as PeopleProvider, y as PersonAvatar, _ as PersonName, v as initialsOf, g as usePersonProfile };
 
 //# sourceMappingURL=People.js.map

package/dist/planmagnet/people/People.js.map

@@ -1 +1 @@
-{"version":3,"file":"People.js","names":[],"sources":["../../../src/planmagnet/people/People.tsx"],"sourcesContent":["import {\n  buildActorFallback,\n  useActorProfiles,\n  type ActorInput,\n  type ActorProfile,\n  type ActorProfileMap,\n} from '@burdenoff/fe-libs/shared';\nimport {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useMemo,\n  useState,\n  type ReactNode,\n} from 'react';\n\n/**\n * Show people by name, not by UUID.\n *\n * Until 2026-09-24, 21 places in this MFE rendered a raw user id where a\n * person belonged — project owners, roadmap owners, assignees, the team lead.\n * fe-libs already resolves ids to workspace-member identities\n * (`useActorProfiles`, with a 5-minute cache), but it batches per CALL and\n * does not dedupe across calls, so calling it from every row would fire a\n * burst of lookups on the first render of each list.\n *\n * So there is exactly one call, here. Every `<PersonName id>` on screen\n * registers its id with the provider; ids registered during the same render\n * land in one state update, and the provider resolves them together. A\n * growing list costs one request for the NEW ids only — already-resolved ids\n * come from the fe-libs cache.\n *\n * An id that cannot be resolved (not a member of this workspace, lookup\n * failed) renders fe-libs' short fallback, \"User 1a2b3c\", rather than the full\n * UUID: still identifiable, never a wall of hex.\n */\n\ninterface PeopleContextValue {\n  request: (id: string) => void;\n  profiles: ActorProfileMap;\n}\n\n/**\n * The automation engine's own actor identities (BOFF-8047 follow-up) — never a real workspace member's id, so\n * they are mapped explicitly rather than sent through `useActorProfiles` (which would only ever resolve them to\n * its generic \"not a member\" fallback). Sourced directly from wspace-planmagnet-svc, not guessed:\n *  - `automation-engine.ts`'s `AUTOMATION_COMMENT_AUTHOR_ID` (`'automation:engine'`) — the fixed author of every\n *    comment a POST_COMMENT action posts, regardless of which trigger or actor caused the run.\n *  - `automation-scheduler.ts`'s `AUTOMATION_SCHEDULER_ACTOR_ID` (`'automation:scheduler'`) — the actor behind a\n *    SCHEDULE-triggered run (threaded through as `updatedBy` on that run's other actions).\n * No real actor id can ever collide with the `automation:` prefix (workspace-member ids are uuids) — see that\n * constant's own doc comment in the engine.\n */\nconst AUTOMATION_ACTOR_NAMES: Record<string, string> = {\n  'automation:engine': 'Automation',\n  'automation:scheduler': 'Automation',\n};\n\nconst PeopleContext = createContext<PeopleContextValue | null>(null);\n\nexport function PeopleProvider({\n  workspaceId,\n  children,\n}: {\n  workspaceId?: string;\n  children: ReactNode;\n}) {\n  const [ids, setIds] = useState<readonly string[]>([]);\n\n  const request = useCallback((id: string) => {\n    setIds((previous) => (previous.includes(id) ? previous : [...previous, id]));\n  }, []);\n\n  const actors = useMemo<ActorInput[]>(\n    () => ids.map((actorId) => ({ actorId, actorType: 'user' })),\n    [ids]\n  );\n\n  // No apiGatewayUrl on purpose: this MFE is handed the WORKSPACE gateway, and\n  // the hook resolves the right gateways from the hostname itself.\n  const profiles = useActorProfiles(actors, { workspaceId });\n\n  const value = useMemo(() => ({ request, profiles }), [request, profiles]);\n  return <PeopleContext.Provider value={value}>{children}</PeopleContext.Provider>;\n}\n\nexport interface PersonNameProps {\n  /** A user id. Empty or missing renders an em dash. */\n  id: string | null | undefined;\n  className?: string;\n}\n\n/**\n * Inline text on purpose. fe-libs' `ActorIdentity` is a block (avatar plus two\n * stacked paragraphs); every place this replaces is an inline label —\n * \"Owner: …\", a table cell, a <span> inside a <p> — where a block would break\n * the layout and nest a <div> inside a <p>. The email, when known, is the\n * hover title, so two people with the same name stay distinguishable.\n */\n/**\n * Register an id with the provider and return its profile: the resolved identity, or fe-libs' short fallback\n * (\"User 1a2b3c\", `resolved: false`) until and unless it resolves. `null` for an empty id.\n */\nexport function usePersonProfile(id: string | null | undefined): ActorProfile | null {\n  const context = useContext(PeopleContext);\n  const request = context?.request;\n  const automationName = id ? AUTOMATION_ACTOR_NAMES[id] : undefined;\n\n  useEffect(() => {\n    // An automation identity is never a real workspace member — registering it with the provider would only\n    // ever come back as the generic \"not a member\" fallback, and would cost a wasted slot in every batch lookup.\n    if (id && request && !automationName) request(id);\n  }, [id, request, automationName]);\n\n  if (!id) return null;\n  if (automationName) {\n    return {\n      actorId: id,\n      actorType: 'service',\n      displayName: automationName,\n      secondaryLabel: 'Automation',\n      resolved: true,\n    };\n  }\n  return context?.profiles[id] ?? buildActorFallback({ actorId: id, actorType: 'user' });\n}\n\nexport function PersonName({ id, className }: PersonNameProps) {\n  const profile = usePersonProfile(id);\n  if (!profile) return <span className={className ?? 'text-muted-foreground'}>—</span>;\n  return (\n    <span className={className} title={profile.email ?? undefined}>\n      {profile.displayName}\n    </span>\n  );\n}\n\n/** Up to two initials from a display name (\"Ada Lovelace\" → \"AL\", \"ada\" → \"A\"). */\nexport function initialsOf(name: string): string {\n  return name\n    .trim()\n    .split(/\\s+/)\n    .filter(Boolean)\n    .slice(0, 2)\n    .map((word) => word[0]!.toUpperCase())\n    .join('');\n}\n\nexport interface PersonAvatarProps {\n  id: string | null | undefined;\n  className?: string;\n}\n\n/**\n * An initials bubble for a user id. Initials come from the RESOLVED name; until the id resolves (or when it never\n * does) the bubble shows a neutral \"?\" rather than letters cut from the UUID, which matched nobody (BOFF-7977,\n * BOFF-8000). The tooltip is the name, plus the email when known.\n */\nexport function PersonAvatar({ id, className }: PersonAvatarProps) {\n  const profile = usePersonProfile(id);\n  const label = profile\n    ? profile.email\n      ? `${profile.displayName} (${profile.email})`\n      : profile.displayName\n    : undefined;\n  const initials = profile?.resolved ? initialsOf(profile.displayName) : '';\n  return (\n    <span className={className} title={label} aria-label={label}>\n      {initials || '?'}\n    </span>\n  );\n}\n"],"mappings":";;;;AAsDA,IAAM,IAAiD;CACrD,qBAAqB;CACrB,wBAAwB;CACzB,EAEK,IAAgB,EAAyC,KAAK;AAEpE,SAAgB,EAAe,EAC7B,gBACA,eAIC;CACD,IAAM,CAAC,GAAK,KAAU,EAA4B,EAAE,CAAC,EAE/C,IAAU,GAAa,MAAe;AAC1C,KAAQ,MAAc,EAAS,SAAS,EAAG,GAAG,IAAW,CAAC,GAAG,GAAU,EAAG,CAAE;IAC3E,EAAE,CAAC,EASA,IAAW,EAPF,QACP,EAAI,KAAK,OAAa;EAAE;EAAS,WAAW;EAAQ,EAAE,EAC5D,CAAC,EAAI,CACN,EAIyC,EAAE,gBAAa,CAAC,EAEpD,IAAQ,SAAe;EAAE;EAAS;EAAU,GAAG,CAAC,GAAS,EAAS,CAAC;AACzE,QAAO,kBAAC,EAAc,UAAf;EAA+B;EAAQ;EAAkC,CAAA;;AAoBlF,SAAgB,EAAiB,GAAoD;CACnF,IAAM,IAAU,EAAW,EAAc,EACnC,IAAU,GAAS,SACnB,IAAiB,IAAK,EAAuB,KAAM,KAAA;AAkBzD,QAhBA,QAAgB;AAGd,EAAI,KAAM,KAAW,CAAC,KAAgB,EAAQ,EAAG;IAChD;EAAC;EAAI;EAAS;EAAe,CAAC,EAE5B,IACD,IACK;EACL,SAAS;EACT,WAAW;EACX,aAAa;EACb,gBAAgB;EAChB,UAAU;EACX,GAEI,GAAS,SAAS,MAAO,EAAmB;EAAE,SAAS;EAAI,WAAW;EAAQ,CAAC,GAVtE;;AAalB,SAAgB,EAAW,EAAE,OAAI,gBAA8B;CAC7D,IAAM,IAAU,EAAiB,EAAG;AAEpC,QADK,IAEH,kBAAC,QAAD;EAAiB;EAAW,OAAO,EAAQ,SAAS,KAAA;YACjD,EAAQ;EACJ,CAAA,GAJY,kBAAC,QAAD;EAAM,WAAW,KAAa;YAAyB;EAAQ,CAAA;;AAStF,SAAgB,EAAW,GAAsB;AAC/C,QAAO,EACJ,MAAM,CACN,MAAM,MAAM,CACZ,OAAO,QAAQ,CACf,MAAM,GAAG,EAAE,CACX,KAAK,MAAS,EAAK,GAAI,aAAa,CAAC,CACrC,KAAK,GAAG;;AAab,SAAgB,EAAa,EAAE,OAAI,gBAAgC;CACjE,IAAM,IAAU,EAAiB,EAAG,EAC9B,IAAQ,IACV,EAAQ,QACN,GAAG,EAAQ,YAAY,IAAI,EAAQ,MAAM,KACzC,EAAQ,cACV,KAAA;AAEJ,QACE,kBAAC,QAAD;EAAiB;EAAW,OAAO;EAAO,cAAY;aAFvC,GAAS,WAAW,EAAW,EAAQ,YAAY,GAAG,OAGtD;EACR,CAAA"}
+{"version":3,"file":"People.js","names":[],"sources":["../../../src/planmagnet/people/People.tsx"],"sourcesContent":["import {\n  buildActorFallback,\n  useActorProfiles,\n  type ActorInput,\n  type ActorProfile,\n  type ActorProfileMap,\n} from '@burdenoff/fe-libs/shared';\nimport { Badge } from '@burdenoff/fe-libs/ui';\nimport {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useMemo,\n  useState,\n  type ReactNode,\n} from 'react';\n\n/**\n * Show people by name, not by UUID.\n *\n * Until 2026-09-24, 21 places in this MFE rendered a raw user id where a\n * person belonged — project owners, roadmap owners, assignees, the team lead.\n * fe-libs already resolves ids to workspace-member identities\n * (`useActorProfiles`, with a 5-minute cache), but it batches per CALL and\n * does not dedupe across calls, so calling it from every row would fire a\n * burst of lookups on the first render of each list.\n *\n * So there is exactly one call, here. Every `<PersonName id>` on screen\n * registers its id with the provider; ids registered during the same render\n * land in one state update, and the provider resolves them together. A\n * growing list costs one request for the NEW ids only — already-resolved ids\n * come from the fe-libs cache.\n *\n * An id that cannot be resolved (not a member of this workspace, lookup\n * failed) renders fe-libs' short fallback, \"User 1a2b3c\", rather than the full\n * UUID: still identifiable, never a wall of hex.\n */\n\ninterface PeopleContextValue {\n  request: (id: string) => void;\n  profiles: ActorProfileMap;\n}\n\n/**\n * The automation engine's own actor identities (BOFF-8047 follow-up) — never a real workspace member's id, so\n * they are mapped explicitly rather than sent through `useActorProfiles` (which would only ever resolve them to\n * its generic \"not a member\" fallback). Sourced directly from wspace-planmagnet-svc, not guessed:\n *  - `automation-engine.ts`'s `AUTOMATION_COMMENT_AUTHOR_ID` (`'automation:engine'`) — the fixed author of every\n *    comment a POST_COMMENT action posts, regardless of which trigger or actor caused the run.\n *  - `automation-scheduler.ts`'s `AUTOMATION_SCHEDULER_ACTOR_ID` (`'automation:scheduler'`) — the actor behind a\n *    SCHEDULE-triggered run (threaded through as `updatedBy` on that run's other actions).\n * No real actor id can ever collide with the `automation:` prefix (workspace-member ids are uuids) — see that\n * constant's own doc comment in the engine.\n */\nconst AUTOMATION_ACTOR_NAMES: Record<string, string> = {\n  'automation:engine': 'Automation',\n  'automation:scheduler': 'Automation',\n};\n\n/**\n * CWF-15's redaction sentinel: `FeatureRequest.submittedBy`/`createdBy`/`updatedBy` and `FeatureVote.voterId`\n * read back this literal string, instead of the real actor id, for a non-moderator caller when the record (or,\n * for a vote, that vote) is flagged `isAnonymous`. Never a real actor id — those are workspace-member uuids —\n * so, like the `automation:` actor ids above, it must never be sent through `useActorProfiles`: that would only\n * ever resolve to the generic \"not a member\" fallback, and would burn a wasted slot in every batch lookup.\n */\nexport const ANONYMOUS_ACTOR_ID = 'anonymous';\n\nexport function isAnonymousActorId(id: string | null | undefined): boolean {\n  return id === ANONYMOUS_ACTOR_ID;\n}\n\n/** The literal \"Anonymous\" badge CWF-15 asks for everywhere a redacted actor id would otherwise show — see\n *  `PersonName` below, which is the one place `submittedBy`/`createdBy`/`updatedBy`/`voterId` ever render. */\nexport function AnonymousBadge({ className }: { className?: string }) {\n  return (\n    <Badge variant=\"secondary\" className={className ?? 'text-xs'} data-testid=\"anonymous-badge\">\n      Anonymous\n    </Badge>\n  );\n}\n\nconst PeopleContext = createContext<PeopleContextValue | null>(null);\n\nexport function PeopleProvider({\n  workspaceId,\n  children,\n}: {\n  workspaceId?: string;\n  children: ReactNode;\n}) {\n  const [ids, setIds] = useState<readonly string[]>([]);\n\n  const request = useCallback((id: string) => {\n    setIds((previous) => (previous.includes(id) ? previous : [...previous, id]));\n  }, []);\n\n  const actors = useMemo<ActorInput[]>(\n    () => ids.map((actorId) => ({ actorId, actorType: 'user' })),\n    [ids]\n  );\n\n  // No apiGatewayUrl on purpose: this MFE is handed the WORKSPACE gateway, and\n  // the hook resolves the right gateways from the hostname itself.\n  const profiles = useActorProfiles(actors, { workspaceId });\n\n  const value = useMemo(() => ({ request, profiles }), [request, profiles]);\n  return <PeopleContext.Provider value={value}>{children}</PeopleContext.Provider>;\n}\n\nexport interface PersonNameProps {\n  /** A user id. Empty or missing renders an em dash. */\n  id: string | null | undefined;\n  className?: string;\n}\n\n/**\n * Inline text on purpose. fe-libs' `ActorIdentity` is a block (avatar plus two\n * stacked paragraphs); every place this replaces is an inline label —\n * \"Owner: …\", a table cell, a <span> inside a <p> — where a block would break\n * the layout and nest a <div> inside a <p>. The email, when known, is the\n * hover title, so two people with the same name stay distinguishable.\n */\n/**\n * Register an id with the provider and return its profile: the resolved identity, or fe-libs' short fallback\n * (\"User 1a2b3c\", `resolved: false`) until and unless it resolves. `null` for an empty id.\n */\nexport function usePersonProfile(id: string | null | undefined): ActorProfile | null {\n  const context = useContext(PeopleContext);\n  const request = context?.request;\n  const automationName = id ? AUTOMATION_ACTOR_NAMES[id] : undefined;\n  const anonymous = isAnonymousActorId(id);\n\n  useEffect(() => {\n    // An automation identity is never a real workspace member, and the CWF-15 \"anonymous\" sentinel is never an\n    // actor id at all — registering either with the provider would only ever come back as the generic \"not a\n    // member\" fallback, and would cost a wasted slot in every batch lookup.\n    if (id && request && !automationName && !anonymous) request(id);\n  }, [id, request, automationName, anonymous]);\n\n  if (!id) return null;\n  if (automationName) {\n    return {\n      actorId: id,\n      actorType: 'service',\n      displayName: automationName,\n      secondaryLabel: 'Automation',\n      resolved: true,\n    };\n  }\n  // CWF-15: \"anonymous\" is a redaction sentinel, never a real actor id — PersonName/PersonAvatar below render it\n  // specially rather than resolving it (which would only ever land on the generic \"not a member\" fallback).\n  if (anonymous) return null;\n  return context?.profiles[id] ?? buildActorFallback({ actorId: id, actorType: 'user' });\n}\n\nexport function PersonName({ id, className }: PersonNameProps) {\n  const profile = usePersonProfile(id);\n  // CWF-15: the literal \"anonymous\" sentinel renders as the Anonymous badge everywhere a person's name would\n  // otherwise show — never resolved as, or displayed like, a real user id.\n  if (isAnonymousActorId(id)) return <AnonymousBadge className={className} />;\n  if (!profile) return <span className={className ?? 'text-muted-foreground'}>—</span>;\n  return (\n    <span className={className} title={profile.email ?? undefined}>\n      {profile.displayName}\n    </span>\n  );\n}\n\n/** Up to two initials from a display name (\"Ada Lovelace\" → \"AL\", \"ada\" → \"A\"). */\nexport function initialsOf(name: string): string {\n  return name\n    .trim()\n    .split(/\\s+/)\n    .filter(Boolean)\n    .slice(0, 2)\n    .map((word) => word[0]!.toUpperCase())\n    .join('');\n}\n\nexport interface PersonAvatarProps {\n  id: string | null | undefined;\n  className?: string;\n}\n\n/**\n * An initials bubble for a user id. Initials come from the RESOLVED name; until the id resolves (or when it never\n * does) the bubble shows a neutral \"?\" rather than letters cut from the UUID, which matched nobody (BOFF-7977,\n * BOFF-8000). The tooltip is the name, plus the email when known.\n */\nexport function PersonAvatar({ id, className }: PersonAvatarProps) {\n  const profile = usePersonProfile(id);\n  const label = profile\n    ? profile.email\n      ? `${profile.displayName} (${profile.email})`\n      : profile.displayName\n    : undefined;\n  const initials = profile?.resolved ? initialsOf(profile.displayName) : '';\n  return (\n    <span className={className} title={label} aria-label={label}>\n      {initials || '?'}\n    </span>\n  );\n}\n"],"mappings":";;;;;AAuDA,IAAM,IAAiD;CACrD,qBAAqB;CACrB,wBAAwB;CACzB,EASY,IAAqB;AAElC,SAAgB,EAAmB,GAAwC;AACzE,QAAO,MAAO;;AAKhB,SAAgB,EAAe,EAAE,gBAAqC;AACpE,QACE,kBAAC,GAAD;EAAO,SAAQ;EAAY,WAAW,KAAa;EAAW,eAAY;YAAkB;EAEpF,CAAA;;AAIZ,IAAM,IAAgB,EAAyC,KAAK;AAEpE,SAAgB,EAAe,EAC7B,gBACA,eAIC;CACD,IAAM,CAAC,GAAK,KAAU,EAA4B,EAAE,CAAC,EAE/C,IAAU,GAAa,MAAe;AAC1C,KAAQ,MAAc,EAAS,SAAS,EAAG,GAAG,IAAW,CAAC,GAAG,GAAU,EAAG,CAAE;IAC3E,EAAE,CAAC,EASA,IAAW,EAPF,QACP,EAAI,KAAK,OAAa;EAAE;EAAS,WAAW;EAAQ,EAAE,EAC5D,CAAC,EAAI,CACN,EAIyC,EAAE,gBAAa,CAAC,EAEpD,IAAQ,SAAe;EAAE;EAAS;EAAU,GAAG,CAAC,GAAS,EAAS,CAAC;AACzE,QAAO,kBAAC,EAAc,UAAf;EAA+B;EAAQ;EAAkC,CAAA;;AAoBlF,SAAgB,EAAiB,GAAoD;CACnF,IAAM,IAAU,EAAW,EAAc,EACnC,IAAU,GAAS,SACnB,IAAiB,IAAK,EAAuB,KAAM,KAAA,GACnD,IAAY,EAAmB,EAAG;AAsBxC,QApBA,QAAgB;AAId,EAAI,KAAM,KAAW,CAAC,KAAkB,CAAC,KAAW,EAAQ,EAAG;IAC9D;EAAC;EAAI;EAAS;EAAgB;EAAU,CAAC,EAEvC,IACD,IACK;EACL,SAAS;EACT,WAAW;EACX,aAAa;EACb,gBAAgB;EAChB,UAAU;EACX,GAIC,IAAkB,OACf,GAAS,SAAS,MAAO,EAAmB;EAAE,SAAS;EAAI,WAAW;EAAQ,CAAC,GAbtE;;AAgBlB,SAAgB,EAAW,EAAE,OAAI,gBAA8B;CAC7D,IAAM,IAAU,EAAiB,EAAG;AAKpC,QAFI,EAAmB,EAAG,GAAS,kBAAC,GAAD,EAA2B,cAAa,CAAA,GACtE,IAEH,kBAAC,QAAD;EAAiB;EAAW,OAAO,EAAQ,SAAS,KAAA;YACjD,EAAQ;EACJ,CAAA,GAJY,kBAAC,QAAD;EAAM,WAAW,KAAa;YAAyB;EAAQ,CAAA;;AAStF,SAAgB,EAAW,GAAsB;AAC/C,QAAO,EACJ,MAAM,CACN,MAAM,MAAM,CACZ,OAAO,QAAQ,CACf,MAAM,GAAG,EAAE,CACX,KAAK,MAAS,EAAK,GAAI,aAAa,CAAC,CACrC,KAAK,GAAG;;AAab,SAAgB,EAAa,EAAE,OAAI,gBAAgC;CACjE,IAAM,IAAU,EAAiB,EAAG,EAC9B,IAAQ,IACV,EAAQ,QACN,GAAG,EAAQ,YAAY,IAAI,EAAQ,MAAM,KACzC,EAAQ,cACV,KAAA;AAEJ,QACE,kBAAC,QAAD;EAAiB;EAAW,OAAO;EAAO,cAAY;aAFvC,GAAS,WAAW,EAAW,EAAQ,YAAY,GAAG,OAGtD;EACR,CAAA"}

package/dist/planmagnet/team/UnmatchedCrewIdentities.d.ts

@@ -0,0 +1,2 @@
+export declare function UnmatchedCrewIdentitiesPanel(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=UnmatchedCrewIdentities.d.ts.map

package/dist/planmagnet/team/UnmatchedCrewIdentities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnmatchedCrewIdentities.d.ts","sourceRoot":"","sources":["../../../src/planmagnet/team/UnmatchedCrewIdentities.tsx"],"names":[],"mappings":"AAyKA,wBAAgB,4BAA4B,4CAqD3C"}

package/dist/planmagnet/team/UnmatchedCrewIdentities.js

@@ -0,0 +1,155 @@
+import { usePlanMagnet as e } from "../providers/PlanMagnetProvider.js";
+import { mutationErrorMessage as t } from "../utils/graphqlErrors.js";
+import { LEAVES_PAGE_CONTEXT as n, throwOnError as r } from "../utils/mutationResult.js";
+import { ErrorLine as i } from "../controls/ConfirmButton.js";
+import { CrewEmployeeSelect as a } from "../controls/Pickers.js";
+import { useState as o } from "react";
+import { AlertTriangle as s } from "lucide-react";
+import { gql as c } from "@apollo/client";
+import { useMutation as l, useQuery as u } from "@apollo/client/react";
+import { jsx as d, jsxs as f } from "react/jsx-runtime";
+import { Badge as p, Button as m, Card as h, CardContent as g, CardHeader as _, CardTitle as v } from "@burdenoff/fe-libs/ui";
+//#region src/planmagnet/team/UnmatchedCrewIdentities.tsx
+var y = c`
+  query GetUnmatchedCrewIdentities($workspaceId: ID!) {
+    planmagnetUnmatchedCrewIdentities(workspaceId: $workspaceId) {
+      platformUserId
+      displayName
+      email
+    }
+  }
+`, b = c`
+  mutation SetMemberIdentityOverride(
+    $workspaceId: ID!
+    $platformUserId: String!
+    $crewEmployeeId: String!
+  ) {
+    planmagnetSetMemberIdentityOverride(
+      workspaceId: $workspaceId
+      platformUserId: $platformUserId
+      crewEmployeeId: $crewEmployeeId
+    ) {
+      id
+      crewEmployeeId
+    }
+  }
+`, x = c`
+  mutation ClearMemberIdentityOverride($workspaceId: ID!, $platformUserId: String!) {
+    planmagnetClearMemberIdentityOverride(
+      workspaceId: $workspaceId
+      platformUserId: $platformUserId
+    )
+  }
+`;
+function S({ identity: e, workspaceId: s }) {
+	let [c, u] = o(""), [h, g] = o(!1), [_, v] = o(null), [y, S] = l(b, { context: n }), [C, w] = l(x, { context: n }), T = async () => {
+		if (c) {
+			v(null);
+			try {
+				await r(y({ variables: {
+					workspaceId: s,
+					platformUserId: e.platformUserId,
+					crewEmployeeId: c
+				} })), g(!0);
+			} catch (e) {
+				v(t(e, "The override could not be saved."));
+			}
+		}
+	}, E = async () => {
+		v(null);
+		try {
+			await r(C({ variables: {
+				workspaceId: s,
+				platformUserId: e.platformUserId
+			} })), g(!1), u("");
+		} catch (e) {
+			v(t(e, "The override could not be cleared."));
+		}
+	};
+	return /* @__PURE__ */ f("li", {
+		className: "flex flex-col gap-2 border rounded-md p-3 sm:flex-row sm:items-center sm:justify-between",
+		"data-testid": "unmatched-identity-row",
+		children: [/* @__PURE__ */ f("div", {
+			className: "min-w-0",
+			children: [/* @__PURE__ */ d("p", {
+				className: "text-sm font-medium truncate",
+				children: e.displayName ?? e.platformUserId
+			}), /* @__PURE__ */ d("p", {
+				className: "text-xs text-muted-foreground truncate",
+				children: e.email ?? "No workspace e-mail on file"
+			})]
+		}), /* @__PURE__ */ f("div", {
+			className: "flex flex-col items-start gap-2 sm:items-end",
+			children: [h ? /* @__PURE__ */ f("div", {
+				className: "flex items-center gap-2",
+				children: [/* @__PURE__ */ d(p, {
+					variant: "outline",
+					className: "text-xs",
+					"data-testid": "unmatched-identity-overridden",
+					children: "Override set"
+				}), /* @__PURE__ */ d(m, {
+					size: "sm",
+					variant: "ghost",
+					disabled: w.loading,
+					"data-testid": "unmatched-identity-clear",
+					onClick: () => void E(),
+					children: w.loading ? "…" : "Clear override"
+				})]
+			}) : /* @__PURE__ */ f("div", {
+				className: "flex items-center gap-2",
+				children: [/* @__PURE__ */ d("div", {
+					className: "w-64",
+					children: /* @__PURE__ */ d(a, {
+						id: `unmatched-${e.platformUserId}`,
+						value: c,
+						onChange: u,
+						noneLabel: "Choose a CrewFoundry employee"
+					})
+				}), /* @__PURE__ */ d(m, {
+					size: "sm",
+					disabled: !c || S.loading,
+					"data-testid": "unmatched-identity-set",
+					onClick: () => void T(),
+					children: S.loading ? "Saving…" : "Set override"
+				})]
+			}), _ && /* @__PURE__ */ d(i, { message: _ })]
+		})]
+	});
+}
+function C() {
+	let { workspaceId: t } = e(), { data: n, loading: r, error: i } = u(y, {
+		variables: { workspaceId: t ?? "" },
+		skip: !t
+	}), a = n?.planmagnetUnmatchedCrewIdentities ?? [];
+	return /* @__PURE__ */ f(h, {
+		id: "unmatched-crew-identities",
+		"data-testid": "unmatched-crew-identities-panel",
+		children: [/* @__PURE__ */ f(_, { children: [/* @__PURE__ */ f(v, {
+			className: "flex items-center gap-2",
+			children: [/* @__PURE__ */ d(s, { className: "h-4 w-4 text-status-warning-text" }), "Unmatched CrewFoundry identities"]
+		}), /* @__PURE__ */ d("p", {
+			className: "text-xs text-muted-foreground",
+			children: "An override pins one workspace member directly to one CrewFoundry employee record, for when the default best-effort e-mail match can't find — or finds the wrong — employee for them."
+		})] }), /* @__PURE__ */ d(g, { children: r && !n ? /* @__PURE__ */ d("p", {
+			className: "text-sm text-muted-foreground",
+			children: "Loading…"
+		}) : i ? /* @__PURE__ */ f("p", {
+			className: "text-sm text-status-error-text",
+			children: ["Unmatched identities could not be loaded: ", i.message]
+		}) : a.length === 0 ? /* @__PURE__ */ d("p", {
+			className: "text-sm text-muted-foreground py-2",
+			"data-testid": "unmatched-identities-empty",
+			children: "Every assigned member currently matches a CrewFoundry employee — nothing to fix."
+		}) : /* @__PURE__ */ d("ul", {
+			className: "space-y-2",
+			children: a.map((e) => /* @__PURE__ */ d(S, {
+				identity: e,
+				workspaceId: t ?? ""
+			}, e.platformUserId))
+		}) })]
+	});
+}
+//#endregion
+export { C as UnmatchedCrewIdentitiesPanel };
+
+//# sourceMappingURL=UnmatchedCrewIdentities.js.map

package/dist/planmagnet/team/UnmatchedCrewIdentities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnmatchedCrewIdentities.js","names":[],"sources":["../../../src/planmagnet/team/UnmatchedCrewIdentities.tsx"],"sourcesContent":["import { useState } from 'react';\nimport { gql } from '@apollo/client';\nimport { useMutation, useQuery } from '@apollo/client/react';\nimport { Badge, Button, Card, CardContent, CardHeader, CardTitle } from '@burdenoff/fe-libs/ui';\nimport { AlertTriangle } from 'lucide-react';\nimport { usePlanMagnet } from '../providers/PlanMagnetProvider';\nimport { throwOnError, LEAVES_PAGE_CONTEXT } from '../utils/mutationResult';\nimport { mutationErrorMessage } from '../utils/graphqlErrors';\nimport { ErrorLine } from '../controls/ConfirmButton';\nimport { CrewEmployeeSelect } from '../controls/Pickers';\n\n/**\n * CWF-30 admin remediation panel, on the workspace Members page (`/team/team-page`):\n * `planmagnetUnmatchedCrewIdentities` lists workspace members with a live work-item assignment whose identity\n * could not be resolved to a CrewFoundry employee by the default best-effort e-mail match (see\n * `planmagnetSprintCapacity`). Setting an override here pins one member directly to one CrewFoundry employee\n * record so sprint capacity can find them; clearing it returns that member to the e-mail match.\n *\n * Setting/clearing an override is deliberately published with `LEAVES_PAGE_CONTEXT` (skips fe-libs' global\n * post-mutation auto-refresh): the row that was just fixed would otherwise vanish from this list on its own\n * next refetch mid-interaction, taking the \"Clear override\" affordance with it before the admin could use it.\n * The row's own local state (not a refetch) is what shows the result of the write it just made; the row drops\n * off this list for real only the next time the page itself reloads and finds the member matched.\n */\n\nconst GET_UNMATCHED = gql`\n  query GetUnmatchedCrewIdentities($workspaceId: ID!) {\n    planmagnetUnmatchedCrewIdentities(workspaceId: $workspaceId) {\n      platformUserId\n      displayName\n      email\n    }\n  }\n`;\n\nconst SET_OVERRIDE = gql`\n  mutation SetMemberIdentityOverride(\n    $workspaceId: ID!\n    $platformUserId: String!\n    $crewEmployeeId: String!\n  ) {\n    planmagnetSetMemberIdentityOverride(\n      workspaceId: $workspaceId\n      platformUserId: $platformUserId\n      crewEmployeeId: $crewEmployeeId\n    ) {\n      id\n      crewEmployeeId\n    }\n  }\n`;\n\nconst CLEAR_OVERRIDE = gql`\n  mutation ClearMemberIdentityOverride($workspaceId: ID!, $platformUserId: String!) {\n    planmagnetClearMemberIdentityOverride(\n      workspaceId: $workspaceId\n      platformUserId: $platformUserId\n    )\n  }\n`;\n\ninterface UnmatchedIdentity {\n  platformUserId: string;\n  displayName: string | null;\n  email: string | null;\n}\n\nfunction UnmatchedIdentityRow({\n  identity,\n  workspaceId,\n}: {\n  identity: UnmatchedIdentity;\n  workspaceId: string;\n}) {\n  const [crewEmployeeId, setCrewEmployeeId] = useState('');\n  const [overridden, setOverridden] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [setOverride, setState] = useMutation(SET_OVERRIDE, { context: LEAVES_PAGE_CONTEXT });\n  const [clearOverride, clearState] = useMutation(CLEAR_OVERRIDE, {\n    context: LEAVES_PAGE_CONTEXT,\n  });\n\n  const onSet = async () => {\n    if (!crewEmployeeId) return;\n    setError(null);\n    try {\n      await throwOnError(\n        setOverride({\n          variables: { workspaceId, platformUserId: identity.platformUserId, crewEmployeeId },\n        })\n      );\n      setOverridden(true);\n    } catch (e) {\n      setError(mutationErrorMessage(e, 'The override could not be saved.'));\n    }\n  };\n\n  const onClear = async () => {\n    setError(null);\n    try {\n      await throwOnError(\n        clearOverride({ variables: { workspaceId, platformUserId: identity.platformUserId } })\n      );\n      setOverridden(false);\n      setCrewEmployeeId('');\n    } catch (e) {\n      setError(mutationErrorMessage(e, 'The override could not be cleared.'));\n    }\n  };\n\n  return (\n    <li\n      className=\"flex flex-col gap-2 border rounded-md p-3 sm:flex-row sm:items-center sm:justify-between\"\n      data-testid=\"unmatched-identity-row\"\n    >\n      <div className=\"min-w-0\">\n        <p className=\"text-sm font-medium truncate\">\n          {identity.displayName ?? identity.platformUserId}\n        </p>\n        <p className=\"text-xs text-muted-foreground truncate\">\n          {identity.email ?? 'No workspace e-mail on file'}\n        </p>\n      </div>\n      <div className=\"flex flex-col items-start gap-2 sm:items-end\">\n        {overridden ? (\n          <div className=\"flex items-center gap-2\">\n            <Badge\n              variant=\"outline\"\n              className=\"text-xs\"\n              data-testid=\"unmatched-identity-overridden\"\n            >\n              Override set\n            </Badge>\n            <Button\n              size=\"sm\"\n              variant=\"ghost\"\n              disabled={clearState.loading}\n              data-testid=\"unmatched-identity-clear\"\n              onClick={() => void onClear()}\n            >\n              {clearState.loading ? '…' : 'Clear override'}\n            </Button>\n          </div>\n        ) : (\n          <div className=\"flex items-center gap-2\">\n            <div className=\"w-64\">\n              <CrewEmployeeSelect\n                id={`unmatched-${identity.platformUserId}`}\n                value={crewEmployeeId}\n                onChange={setCrewEmployeeId}\n                noneLabel=\"Choose a CrewFoundry employee\"\n              />\n            </div>\n            <Button\n              size=\"sm\"\n              disabled={!crewEmployeeId || setState.loading}\n              data-testid=\"unmatched-identity-set\"\n              onClick={() => void onSet()}\n            >\n              {setState.loading ? 'Saving…' : 'Set override'}\n            </Button>\n          </div>\n        )}\n        {error && <ErrorLine message={error} />}\n      </div>\n    </li>\n  );\n}\n\nexport function UnmatchedCrewIdentitiesPanel() {\n  const { workspaceId } = usePlanMagnet();\n  const { data, loading, error } = useQuery<{\n    planmagnetUnmatchedCrewIdentities: UnmatchedIdentity[];\n  }>(GET_UNMATCHED, {\n    variables: { workspaceId: workspaceId ?? '' },\n    skip: !workspaceId,\n  });\n  const identities = data?.planmagnetUnmatchedCrewIdentities ?? [];\n\n  return (\n    <Card id=\"unmatched-crew-identities\" data-testid=\"unmatched-crew-identities-panel\">\n      <CardHeader>\n        <CardTitle className=\"flex items-center gap-2\">\n          <AlertTriangle className=\"h-4 w-4 text-status-warning-text\" />\n          Unmatched CrewFoundry identities\n        </CardTitle>\n        <p className=\"text-xs text-muted-foreground\">\n          An override pins one workspace member directly to one CrewFoundry employee record, for\n          when the default best-effort e-mail match can&apos;t find — or finds the wrong — employee\n          for them.\n        </p>\n      </CardHeader>\n      <CardContent>\n        {/* Only before the first load: a refetch must not blank the panel (it would unmount every\n            row's own in-progress edit/local override state). */}\n        {loading && !data ? (\n          <p className=\"text-sm text-muted-foreground\">Loading…</p>\n        ) : error ? (\n          <p className=\"text-sm text-status-error-text\">\n            Unmatched identities could not be loaded: {error.message}\n          </p>\n        ) : identities.length === 0 ? (\n          <p\n            className=\"text-sm text-muted-foreground py-2\"\n            data-testid=\"unmatched-identities-empty\"\n          >\n            Every assigned member currently matches a CrewFoundry employee — nothing to fix.\n          </p>\n        ) : (\n          <ul className=\"space-y-2\">\n            {identities.map((identity) => (\n              <UnmatchedIdentityRow\n                key={identity.platformUserId}\n                identity={identity}\n                workspaceId={workspaceId ?? ''}\n              />\n            ))}\n          </ul>\n        )}\n      </CardContent>\n    </Card>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAyBA,IAAM,IAAgB,CAAG;;;;;;;;GAUnB,IAAe,CAAG;;;;;;;;;;;;;;;GAiBlB,IAAiB,CAAG;;;;;;;;AAe1B,SAAS,EAAqB,EAC5B,aACA,kBAIC;CACD,IAAM,CAAC,GAAgB,KAAqB,EAAS,GAAG,EAClD,CAAC,GAAY,KAAiB,EAAS,GAAM,EAC7C,CAAC,GAAO,KAAY,EAAwB,KAAK,EACjD,CAAC,GAAa,KAAY,EAAY,GAAc,EAAE,SAAS,GAAqB,CAAC,EACrF,CAAC,GAAe,KAAc,EAAY,GAAgB,EAC9D,SAAS,GACV,CAAC,EAEI,IAAQ,YAAY;AACnB,SACL;KAAS,KAAK;AACd,OAAI;AAMF,IALA,MAAM,EACJ,EAAY,EACV,WAAW;KAAE;KAAa,gBAAgB,EAAS;KAAgB;KAAgB,EACpF,CAAC,CACH,EACD,EAAc,GAAK;YACZ,GAAG;AACV,MAAS,EAAqB,GAAG,mCAAmC,CAAC;;;IAInE,IAAU,YAAY;AAC1B,IAAS,KAAK;AACd,MAAI;AAKF,GAJA,MAAM,EACJ,EAAc,EAAE,WAAW;IAAE;IAAa,gBAAgB,EAAS;IAAgB,EAAE,CAAC,CACvF,EACD,EAAc,GAAM,EACpB,EAAkB,GAAG;WACd,GAAG;AACV,KAAS,EAAqB,GAAG,qCAAqC,CAAC;;;AAI3E,QACE,kBAAC,MAAD;EACE,WAAU;EACV,eAAY;YAFd,CAIE,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,KAAD;IAAG,WAAU;cACV,EAAS,eAAe,EAAS;IAChC,CAAA,EACJ,kBAAC,KAAD;IAAG,WAAU;cACV,EAAS,SAAS;IACjB,CAAA,CACA;MACN,kBAAC,OAAD;GAAK,WAAU;aAAf,CACG,IACC,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,GAAD;KACE,SAAQ;KACR,WAAU;KACV,eAAY;eACb;KAEO,CAAA,EACR,kBAAC,GAAD;KACE,MAAK;KACL,SAAQ;KACR,UAAU,EAAW;KACrB,eAAY;KACZ,eAAe,KAAK,GAAS;eAE5B,EAAW,UAAU,MAAM;KACrB,CAAA,CACL;QAEN,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD;MACE,IAAI,aAAa,EAAS;MAC1B,OAAO;MACP,UAAU;MACV,WAAU;MACV,CAAA;KACE,CAAA,EACN,kBAAC,GAAD;KACE,MAAK;KACL,UAAU,CAAC,KAAkB,EAAS;KACtC,eAAY;KACZ,eAAe,KAAK,GAAO;eAE1B,EAAS,UAAU,YAAY;KACzB,CAAA,CACL;OAEP,KAAS,kBAAC,GAAD,EAAW,SAAS,GAAS,CAAA,CACnC;KACH;;;AAIT,SAAgB,IAA+B;CAC7C,IAAM,EAAE,mBAAgB,GAAe,EACjC,EAAE,SAAM,YAAS,aAAU,EAE9B,GAAe;EAChB,WAAW,EAAE,aAAa,KAAe,IAAI;EAC7C,MAAM,CAAC;EACR,CAAC,EACI,IAAa,GAAM,qCAAqC,EAAE;AAEhE,QACE,kBAAC,GAAD;EAAM,IAAG;EAA4B,eAAY;YAAjD,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;GAAW,WAAU;aAArB,CACE,kBAAC,GAAD,EAAe,WAAU,oCAAqC,CAAA,EAAA,mCAEpD;MACZ,kBAAC,KAAD;GAAG,WAAU;aAAgC;GAIzC,CAAA,CACO,EAAA,CAAA,EACb,kBAAC,GAAD,EAAA,UAGG,KAAW,CAAC,IACX,kBAAC,KAAD;GAAG,WAAU;aAAgC;GAAY,CAAA,GACvD,IACF,kBAAC,KAAD;GAAG,WAAU;aAAb,CAA8C,8CACD,EAAM,QAC/C;OACF,EAAW,WAAW,IACxB,kBAAC,KAAD;GACE,WAAU;GACV,eAAY;aACb;GAEG,CAAA,GAEJ,kBAAC,MAAD;GAAI,WAAU;aACX,EAAW,KAAK,MACf,kBAAC,GAAD;IAEY;IACV,aAAa,KAAe;IAC5B,EAHK,EAAS,eAGd,CACF;GACC,CAAA,EAEK,CAAA,CACT"}

package/dist/planmagnet/webhooks/webhookTypes.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Outbound webhook subscriptions (AUT-33) — shared shapes and constants. GraphQL Hive doc comments
+ * (`graphql/wspace.graphql`, `PlanmagnetWebhookSubscription*`) are the source of truth for all of this, not
+ * guesswork:
+ *
+ * - `events` is a list of `PlanmagnetAutomationTriggerType` values (the SAME enum the automation rule builder's
+ *   trigger select uses — see `automation/automationRuleTypes.ts`). Every value delivers a real webhook today
+ *   EXCEPT `WEBHOOK` itself, which is accepted and saveable (so a subscription can be prepared ahead of time)
+ *   but not yet live — gated on the public-gateway route for inbound GitHub deliveries (Platform ticket
+ *   BOFF-8238). `SCHEDULE` and `MILESTONE_DUE` deliver from `automation-scheduler.ts`'s periodic job rather than
+ *   a synchronous write, same as they do for automation rules.
+ * - The signing secret (`PlanmagnetWebhookSubscriptionWithSecret.secret`) is returned in PLAINTEXT exactly once,
+ *   on create and again on rotate — it cannot be read back from the API afterwards. See
+ *   `controls/WebhookSubscriptionControls.tsx` for the "shown once, every close path resets it" discipline this
+ *   demands (the same one `reports/ShareDialog.tsx` was fixed to use, #45).
+ * - `consecutiveFailures` resets to 0 on the next successful delivery, or whenever an update moves `status` back
+ *   to ACTIVE; reaching the engine's own failure threshold moves `status` to DISABLED automatically.
+ */
+export declare const WEBHOOK_SUBSCRIPTION_STATUSES: readonly ["ACTIVE", "PAUSED", "DISABLED"];
+export type WebhookSubscriptionStatus = (typeof WEBHOOK_SUBSCRIPTION_STATUSES)[number];
+export declare const WEBHOOK_DELIVERY_STATUSES: readonly ["SUCCESS", "FAILED"];
+export type WebhookDeliveryStatus = (typeof WEBHOOK_DELIVERY_STATUSES)[number];
+export interface WebhookSubscriptionRow {
+    id: string;
+    url: string;
+    events: string[];
+    status: WebhookSubscriptionStatus;
+    consecutiveFailures: number;
+    lastDeliveryAt: string | null;
+    lastDeliveryStatus: WebhookDeliveryStatus | null;
+    createdAt: string;
+    createdBy: string;
+    updatedAt: string;
+    updatedBy: string | null;
+    disabledAt: string | null;
+}
+export interface WebhookSubscriptionDeliveryRow {
+    id: string;
+    event: string;
+    status: WebhookDeliveryStatus;
+    /** Null for a connection-level failure (DNS/SSRF refusal, timeout, connection reset) that never got far
+     *  enough to receive one. */
+    responseStatus: number | null;
+    attempts: number;
+    error: string | null;
+    deliveredAt: string;
+}
+/** `PlanmagnetCreateWebhookSubscriptionInput.url` must be an absolute `https://` URL — the server's own SSRF
+ *  guard (private/loopback/link-local/metadata ranges) is the real gate and runs again at every delivery; this
+ *  is only the client-side sanity check that catches an obviously wrong URL before a round trip. */
+export declare function isPlausibleWebhookUrl(value: string): boolean;
+/** The event-select option suffix — `WEBHOOK` is accepted and saveable but not yet live (BOFF-8238). */
+export declare function webhookEventOptionSuffix(trigger: string): string;
+//# sourceMappingURL=webhookTypes.d.ts.map

package/dist/planmagnet/webhooks/webhookTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookTypes.d.ts","sourceRoot":"","sources":["../../../src/planmagnet/webhooks/webhookTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,eAAO,MAAM,6BAA6B,2CAA4C,CAAC;AACvF,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvF,eAAO,MAAM,yBAAyB,gCAAiC,CAAC;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,yBAAyB,CAAC;IAClC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,kBAAkB,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,qBAAqB,CAAC;IAC9B;iCAC6B;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;oGAEoG;AACpG,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAQ5D;AAED,wGAAwG;AACxG,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhE"}

package/dist/planmagnet/webhooks/webhookTypes.js

@@ -0,0 +1,17 @@
+//#region src/planmagnet/webhooks/webhookTypes.ts
+function e(e) {
+	if (!/^https:\/\//i.test(e.trim())) return !1;
+	try {
+		let t = new URL(e.trim());
+		return t.protocol === "https:" && t.hostname.length > 0;
+	} catch {
+		return !1;
+	}
+}
+function t(e) {
+	return e === "WEBHOOK" ? " (not live yet)" : "";
+}
+//#endregion
+export { e as isPlausibleWebhookUrl, t as webhookEventOptionSuffix };
+
+//# sourceMappingURL=webhookTypes.js.map

package/dist/planmagnet/webhooks/webhookTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookTypes.js","names":[],"sources":["../../../src/planmagnet/webhooks/webhookTypes.ts"],"sourcesContent":["/**\n * Outbound webhook subscriptions (AUT-33) — shared shapes and constants. GraphQL Hive doc comments\n * (`graphql/wspace.graphql`, `PlanmagnetWebhookSubscription*`) are the source of truth for all of this, not\n * guesswork:\n *\n * - `events` is a list of `PlanmagnetAutomationTriggerType` values (the SAME enum the automation rule builder's\n *   trigger select uses — see `automation/automationRuleTypes.ts`). Every value delivers a real webhook today\n *   EXCEPT `WEBHOOK` itself, which is accepted and saveable (so a subscription can be prepared ahead of time)\n *   but not yet live — gated on the public-gateway route for inbound GitHub deliveries (Platform ticket\n *   BOFF-8238). `SCHEDULE` and `MILESTONE_DUE` deliver from `automation-scheduler.ts`'s periodic job rather than\n *   a synchronous write, same as they do for automation rules.\n * - The signing secret (`PlanmagnetWebhookSubscriptionWithSecret.secret`) is returned in PLAINTEXT exactly once,\n *   on create and again on rotate — it cannot be read back from the API afterwards. See\n *   `controls/WebhookSubscriptionControls.tsx` for the \"shown once, every close path resets it\" discipline this\n *   demands (the same one `reports/ShareDialog.tsx` was fixed to use, #45).\n * - `consecutiveFailures` resets to 0 on the next successful delivery, or whenever an update moves `status` back\n *   to ACTIVE; reaching the engine's own failure threshold moves `status` to DISABLED automatically.\n */\n\nexport const WEBHOOK_SUBSCRIPTION_STATUSES = ['ACTIVE', 'PAUSED', 'DISABLED'] as const;\nexport type WebhookSubscriptionStatus = (typeof WEBHOOK_SUBSCRIPTION_STATUSES)[number];\n\nexport const WEBHOOK_DELIVERY_STATUSES = ['SUCCESS', 'FAILED'] as const;\nexport type WebhookDeliveryStatus = (typeof WEBHOOK_DELIVERY_STATUSES)[number];\n\nexport interface WebhookSubscriptionRow {\n  id: string;\n  url: string;\n  events: string[];\n  status: WebhookSubscriptionStatus;\n  consecutiveFailures: number;\n  lastDeliveryAt: string | null;\n  lastDeliveryStatus: WebhookDeliveryStatus | null;\n  createdAt: string;\n  createdBy: string;\n  updatedAt: string;\n  updatedBy: string | null;\n  disabledAt: string | null;\n}\n\nexport interface WebhookSubscriptionDeliveryRow {\n  id: string;\n  event: string;\n  status: WebhookDeliveryStatus;\n  /** Null for a connection-level failure (DNS/SSRF refusal, timeout, connection reset) that never got far\n   *  enough to receive one. */\n  responseStatus: number | null;\n  attempts: number;\n  error: string | null;\n  deliveredAt: string;\n}\n\n/** `PlanmagnetCreateWebhookSubscriptionInput.url` must be an absolute `https://` URL — the server's own SSRF\n *  guard (private/loopback/link-local/metadata ranges) is the real gate and runs again at every delivery; this\n *  is only the client-side sanity check that catches an obviously wrong URL before a round trip. */\nexport function isPlausibleWebhookUrl(value: string): boolean {\n  if (!/^https:\\/\\//i.test(value.trim())) return false;\n  try {\n    const url = new URL(value.trim());\n    return url.protocol === 'https:' && url.hostname.length > 0;\n  } catch {\n    return false;\n  }\n}\n\n/** The event-select option suffix — `WEBHOOK` is accepted and saveable but not yet live (BOFF-8238). */\nexport function webhookEventOptionSuffix(trigger: string): string {\n  return trigger === 'WEBHOOK' ? ' (not live yet)' : '';\n}\n"],"mappings":";AAuDA,SAAgB,EAAsB,GAAwB;AAC5D,KAAI,CAAC,eAAe,KAAK,EAAM,MAAM,CAAC,CAAE,QAAO;AAC/C,KAAI;EACF,IAAM,IAAM,IAAI,IAAI,EAAM,MAAM,CAAC;AACjC,SAAO,EAAI,aAAa,YAAY,EAAI,SAAS,SAAS;SACpD;AACN,SAAO;;;AAKX,SAAgB,EAAyB,GAAyB;AAChE,QAAO,MAAY,YAAY,oBAAoB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/microfe-planmagnet",
-  "version": "2026.1001.5",
+  "version": "2026.1001.7",
   "description": "Burdenoff PlanMagnet Microfrontend",
   "type": "module",
   "files": [