@burdenoff/microfe-vibecontrols 2026.709.2 → 2026.710.1

package/dist/components/vibedeck/VibeDeckPublicLinkPanel.js

@@ -3,13 +3,15 @@ import { LoadingState as r } from "../shared/LoadingState.js";
 import { ErrorState as i } from "../shared/ErrorState.js";
 import { VibeDeckSharePermission as a } from "../../generated/wspace-types.js";
 import "../shared/index.js";
-import { notify as o } from "../../lib/toast.js";
-import { useState as s } from "react";
-import { useI18n as c } from "@burdenoff/fe-libs/shared/providers/shell/I18nProvider";
-import { Check as l, Copy as u, Eye as d, Link2 as f, Lock as p, Play as m, Plus as h, Trash2 as g, X as _ } from "lucide-react";
-import { Fragment as v, jsx as y, jsxs as b } from "react/jsx-runtime";
+import { VIBE_PERMISSIONS as o } from "../../constants/permissions.js";
+import { notify as s } from "../../lib/toast.js";
+import { useState as c } from "react";
+import { useI18n as l } from "@burdenoff/fe-libs/shared/providers/shell/I18nProvider";
+import { Check as u, Copy as d, Eye as f, Link2 as p, Lock as m, Play as h, Plus as g, Trash2 as _, X as v } from "lucide-react";
+import { usePermissions as y } from "@burdenoff/fe-libs/shared/providers/shell";
+import { Fragment as b, jsx as x, jsxs as S } from "react/jsx-runtime";
 //#region src/components/vibedeck/VibeDeckPublicLinkPanel.tsx
-var x = [
+var C = [
 	{
 		label: "4 hours",
 		hours: 4
@@ -26,195 +28,195 @@ var x = [
 		label: "No expiry",
 		hours: 0
 	}
-], S = ({ vibeDeckId: S, vibeDeckName: w, onClose: T }) => {
-	let { t: E } = c(), D = (e, t) => {
-		let n = E(e);
+], w = ({ vibeDeckId: w, vibeDeckName: E, onClose: D }) => {
+	let { t: O } = l(), k = (e, t) => {
+		let n = O(e);
 		return n === e ? t : n;
-	}, { data: O, loading: k, error: A, refetch: j } = t({
-		variables: { vibeDeckId: S },
+	}, { hasPermission: A } = y(), j = A(o.VIBEDECK_UPDATE), { data: M, loading: N, error: P, refetch: F } = t({
+		variables: { vibeDeckId: w },
 		fetchPolicy: "cache-and-network"
-	}), [M, { loading: N }] = e(), [P] = n(), [F, I] = s(!0), [L, R] = s(4), [z, B] = s(""), [V, H] = s(""), [U, W] = s(null), G = O?.vibeDeckShareLinks ?? [], K = G.filter((e) => e.status === "ACTIVE"), q = async (e, t) => {
+	}), [I, { loading: L }] = e(), [R] = n(), [z, B] = c(!0), [V, H] = c(4), [U, W] = c(""), [G, K] = c(""), [q, J] = c(null), Y = M?.vibeDeckShareLinks ?? [], X = Y.filter((e) => e.status === "ACTIVE"), Z = async (e, t) => {
 		try {
-			await navigator.clipboard.writeText(e), W(t), o.success(D("deckLink.copied", "Link copied")), window.setTimeout(() => W(null), 1500);
+			await navigator.clipboard.writeText(e), J(t), s.success(k("deckLink.copied", "Link copied")), window.setTimeout(() => J(null), 1500);
 		} catch {
-			o.error(D("deckLink.copyFailed", "Could not copy — copy it manually"), e);
+			s.error(k("deckLink.copyFailed", "Could not copy — copy it manually"), e);
 		}
-	}, J = async (e) => {
+	}, Q = async (e) => {
 		e.preventDefault();
-		let t = V.trim() ? Number.parseInt(V.trim(), 10) : null;
+		let t = G.trim() ? Number.parseInt(G.trim(), 10) : null;
 		if (t !== null && (!Number.isFinite(t) || t < 1)) {
-			o.error(D("deckLink.badMax", "Max uses must be a positive number"));
+			s.error(k("deckLink.badMax", "Max uses must be a positive number"));
 			return;
 		}
 		try {
-			let e = await M({ variables: { input: {
-				vibeDeckId: S,
-				permission: F ? a.Execute : a.View,
-				expiresInHours: L > 0 ? L : null,
-				password: z.trim() ? z.trim() : null,
+			let e = await I({ variables: { input: {
+				vibeDeckId: w,
+				permission: z ? a.Execute : a.View,
+				expiresInHours: V > 0 ? V : null,
+				password: U.trim() ? U.trim() : null,
 				maxUses: t
 			} } });
-			await j();
+			await F();
 			let n = e.data?.createVibeDeckShareLink.shareUrl;
-			n && await q(n, e.data?.createVibeDeckShareLink.id ?? "new"), o.success(D("deckLink.created", "Public link created"), F ? D("deckLink.createdExec", "Anyone with the link can run the deck tiles") : D("deckLink.createdView", "Anyone with the link can view the deck")), B(""), H("");
+			n && await Z(n, e.data?.createVibeDeckShareLink.id ?? "new"), s.success(k("deckLink.created", "Public link created"), z ? k("deckLink.createdExec", "Anyone with the link can run the deck tiles") : k("deckLink.createdView", "Anyone with the link can view the deck")), W(""), K("");
 		} catch (e) {
-			o.error(D("deckLink.createFailed", "Could not create link"), e.message);
+			s.error(k("deckLink.createFailed", "Could not create link"), e.message);
 		}
-	}, Y = async (e) => {
+	}, $ = async (e) => {
 		try {
-			await P({ variables: { id: e } }), await j(), o.success(D("deckLink.revoked", "Link revoked — it no longer works"));
+			await R({ variables: { id: e } }), await F(), s.success(k("deckLink.revoked", "Link revoked — it no longer works"));
 		} catch (e) {
-			o.error(D("deckLink.revokeFailed", "Could not revoke"), e.message);
+			s.error(k("deckLink.revokeFailed", "Could not revoke"), e.message);
 		}
 	};
-	return /* @__PURE__ */ y("div", {
+	return /* @__PURE__ */ x("div", {
 		className: "fixed inset-0 z-50 flex items-center justify-center bg-bg-overlay p-4",
-		onClick: T,
-		children: /* @__PURE__ */ b("div", {
+		onClick: D,
+		children: /* @__PURE__ */ S("div", {
 			className: "w-full max-w-lg rounded-card border border-border-subtle bg-bg-elevated p-6 shadow-[var(--shadow-elevation-4)]",
 			onClick: (e) => e.stopPropagation(),
 			children: [
-				/* @__PURE__ */ b("div", {
+				/* @__PURE__ */ S("div", {
 					className: "mb-4 flex items-start justify-between",
-					children: [/* @__PURE__ */ b("div", { children: [/* @__PURE__ */ b("h3", {
+					children: [/* @__PURE__ */ S("div", { children: [/* @__PURE__ */ S("h3", {
 						className: "flex items-center gap-2 text-lg font-semibold text-text-primary",
-						children: [/* @__PURE__ */ y(f, { className: "size-5" }), D("deckLink.title", "Public links")]
-					}), /* @__PURE__ */ y("p", {
+						children: [/* @__PURE__ */ x(p, { className: "size-5" }), k("deckLink.title", "Public links")]
+					}), /* @__PURE__ */ x("p", {
 						className: "mt-0.5 text-sm text-text-secondary",
-						children: w
-					})] }), /* @__PURE__ */ y("button", {
+						children: E
+					})] }), /* @__PURE__ */ x("button", {
 						type: "button",
-						onClick: T,
+						onClick: D,
 						className: "p-1 text-text-tertiary hover:text-text-primary",
-						"aria-label": D("common.close", "Close"),
-						children: /* @__PURE__ */ y(_, { className: "size-5" })
+						"aria-label": k("common.close", "Close"),
+						children: /* @__PURE__ */ x(v, { className: "size-5" })
 					})]
 				}),
-				/* @__PURE__ */ y("div", {
+				/* @__PURE__ */ x("div", {
 					className: "mb-4 space-y-2",
-					children: k && G.length === 0 ? /* @__PURE__ */ y(r, {}) : A ? /* @__PURE__ */ y(i, {
-						message: A.message,
-						onRetry: () => void j()
-					}) : K.length === 0 ? /* @__PURE__ */ y("p", {
+					children: N && Y.length === 0 ? /* @__PURE__ */ x(r, {}) : P ? /* @__PURE__ */ x(i, {
+						message: P.message,
+						onRetry: () => void F()
+					}) : X.length === 0 ? /* @__PURE__ */ x("p", {
 						className: "text-sm text-text-secondary",
-						children: D("deckLink.none", "No public links yet. Create one below.")
-					}) : /* @__PURE__ */ y("ul", {
+						children: k("deckLink.none", "No public links yet. Create one below.")
+					}) : /* @__PURE__ */ x("ul", {
 						className: "space-y-2",
-						children: K.map((e) => /* @__PURE__ */ b("li", {
+						children: X.map((e) => /* @__PURE__ */ S("li", {
 							className: "flex items-center gap-2 rounded-md border border-border-default px-3 py-2",
 							children: [
-								/* @__PURE__ */ y(C, { children: e.permission === a.Execute ? /* @__PURE__ */ b(v, { children: [
-									/* @__PURE__ */ y(m, { className: "size-3" }),
+								/* @__PURE__ */ x(T, { children: e.permission === a.Execute ? /* @__PURE__ */ S(b, { children: [
+									/* @__PURE__ */ x(h, { className: "size-3" }),
 									" ",
-									D("deckLink.execute", "Execute")
-								] }) : /* @__PURE__ */ b(v, { children: [
-									/* @__PURE__ */ y(d, { className: "size-3" }),
+									k("deckLink.execute", "Execute")
+								] }) : /* @__PURE__ */ S(b, { children: [
+									/* @__PURE__ */ x(f, { className: "size-3" }),
 									" ",
-									D("deckLink.view", "View")
+									k("deckLink.view", "View")
 								] }) }),
-								e.hasPassword && /* @__PURE__ */ y(p, {
+								e.hasPassword && /* @__PURE__ */ x(m, {
 									className: "size-3.5 text-text-tertiary",
 									"aria-label": "password"
 								}),
-								/* @__PURE__ */ y("span", {
+								/* @__PURE__ */ x("span", {
 									className: "flex-1 truncate font-mono text-xs text-text-secondary",
 									children: e.shareUrl
 								}),
-								/* @__PURE__ */ b("span", {
+								/* @__PURE__ */ S("span", {
 									className: "shrink-0 text-xs text-text-tertiary",
 									children: [
 										e.useCount,
 										e.maxUses ? `/${e.maxUses}` : "",
 										" ",
-										D("deckLink.uses", "uses")
+										k("deckLink.uses", "uses")
 									]
 								}),
-								/* @__PURE__ */ y("button", {
+								/* @__PURE__ */ x("button", {
 									type: "button",
-									onClick: () => void q(e.shareUrl, e.id),
+									onClick: () => void Z(e.shareUrl, e.id),
 									className: "p-1 text-text-secondary hover:text-text-primary",
-									"aria-label": D("common.copy", "Copy"),
-									children: U === e.id ? /* @__PURE__ */ y(l, { className: "size-4 text-status-success-text" }) : /* @__PURE__ */ y(u, { className: "size-4" })
+									"aria-label": k("common.copy", "Copy"),
+									children: q === e.id ? /* @__PURE__ */ x(u, { className: "size-4 text-status-success-text" }) : /* @__PURE__ */ x(d, { className: "size-4" })
 								}),
-								/* @__PURE__ */ y("button", {
+								j && /* @__PURE__ */ x("button", {
 									type: "button",
-									onClick: () => void Y(e.id),
+									onClick: () => void $(e.id),
 									className: "p-1 text-text-secondary hover:text-action-danger-text",
-									"aria-label": D("common.revoke", "Revoke"),
-									children: /* @__PURE__ */ y(g, { className: "size-4" })
+									"aria-label": k("common.revoke", "Revoke"),
+									children: /* @__PURE__ */ x(_, { className: "size-4" })
 								})
 							]
 						}, e.id))
 					})
 				}),
-				/* @__PURE__ */ b("form", {
-					onSubmit: (e) => void J(e),
+				j && /* @__PURE__ */ S("form", {
+					onSubmit: (e) => void Q(e),
 					className: "space-y-3 border-t border-border-default pt-4",
 					children: [
-						/* @__PURE__ */ b("label", {
+						/* @__PURE__ */ S("label", {
 							className: "flex cursor-pointer items-center gap-2 text-sm text-text-primary",
 							children: [
-								/* @__PURE__ */ y("input", {
+								/* @__PURE__ */ x("input", {
 									type: "checkbox",
-									checked: F,
-									onChange: (e) => I(e.target.checked),
+									checked: z,
+									onChange: (e) => B(e.target.checked),
 									className: "rounded border-border-default"
 								}),
-								/* @__PURE__ */ y(m, { className: "size-3.5" }),
-								D("deckLink.allowExecution", "Allow execution (anyone with the link can run tiles)")
+								/* @__PURE__ */ x(h, { className: "size-3.5" }),
+								k("deckLink.allowExecution", "Allow execution (anyone with the link can run tiles)")
 							]
 						}),
-						/* @__PURE__ */ b("div", {
+						/* @__PURE__ */ S("div", {
 							className: "flex flex-col gap-3 sm:flex-row",
-							children: [/* @__PURE__ */ b("label", {
+							children: [/* @__PURE__ */ S("label", {
 								className: "flex-1",
-								children: [/* @__PURE__ */ y("span", {
+								children: [/* @__PURE__ */ x("span", {
 									className: "text-sm text-text-secondary",
-									children: D("deckLink.expiry", "Expires")
-								}), /* @__PURE__ */ y("select", {
-									value: L,
-									onChange: (e) => R(Number(e.target.value)),
+									children: k("deckLink.expiry", "Expires")
+								}), /* @__PURE__ */ x("select", {
+									value: V,
+									onChange: (e) => H(Number(e.target.value)),
 									className: "mt-1 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm text-text-primary",
-									children: x.map((e) => /* @__PURE__ */ y("option", {
+									children: C.map((e) => /* @__PURE__ */ x("option", {
 										value: e.hours,
 										children: e.label
 									}, e.label))
 								})]
-							}), /* @__PURE__ */ b("label", {
+							}), /* @__PURE__ */ S("label", {
 								className: "flex-1",
-								children: [/* @__PURE__ */ y("span", {
+								children: [/* @__PURE__ */ x("span", {
 									className: "text-sm text-text-secondary",
-									children: D("deckLink.maxUses", "Max uses (optional)")
-								}), /* @__PURE__ */ y("input", {
-									value: V,
-									onChange: (e) => H(e.target.value),
+									children: k("deckLink.maxUses", "Max uses (optional)")
+								}), /* @__PURE__ */ x("input", {
+									value: G,
+									onChange: (e) => K(e.target.value),
 									inputMode: "numeric",
-									placeholder: D("deckLink.unlimited", "unlimited"),
+									placeholder: k("deckLink.unlimited", "unlimited"),
 									className: "mt-1 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm text-text-primary"
 								})]
 							})]
 						}),
-						/* @__PURE__ */ b("label", {
+						/* @__PURE__ */ S("label", {
 							className: "block",
-							children: [/* @__PURE__ */ y("span", {
+							children: [/* @__PURE__ */ x("span", {
 								className: "text-sm text-text-secondary",
-								children: D("deckLink.password", "Password (optional)")
-							}), /* @__PURE__ */ y("input", {
-								value: z,
-								onChange: (e) => B(e.target.value),
+								children: k("deckLink.password", "Password (optional)")
+							}), /* @__PURE__ */ x("input", {
+								value: U,
+								onChange: (e) => W(e.target.value),
 								type: "password",
 								autoComplete: "new-password",
-								placeholder: D("deckLink.noPassword", "no password"),
+								placeholder: k("deckLink.noPassword", "no password"),
 								className: "mt-1 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm text-text-primary"
 							})]
 						}),
-						/* @__PURE__ */ y("div", {
+						/* @__PURE__ */ x("div", {
 							className: "flex justify-end",
-							children: /* @__PURE__ */ b("button", {
+							children: /* @__PURE__ */ S("button", {
 								type: "submit",
-								disabled: N,
+								disabled: L,
 								className: "flex items-center gap-1.5 rounded-md bg-action-primary-bg px-3 py-2 text-sm text-action-primary-text hover:opacity-90 disabled:opacity-50",
-								children: [/* @__PURE__ */ y(h, { className: "size-4" }), D("deckLink.create", "Create public link")]
+								children: [/* @__PURE__ */ x(g, { className: "size-4" }), k("deckLink.create", "Create public link")]
 							})
 						})
 					]
@@ -222,11 +224,11 @@ var x = [
 			]
 		})
 	});
-}, C = ({ children: e }) => /* @__PURE__ */ y("span", {
+}, T = ({ children: e }) => /* @__PURE__ */ x("span", {
 	className: "inline-flex shrink-0 items-center gap-1 rounded-full bg-bg-sunken px-2 py-0.5 text-xs font-medium text-text-primary",
 	children: e
 });
 //#endregion
-export { S as VibeDeckPublicLinkPanel };
+export { w as VibeDeckPublicLinkPanel };
 
 //# sourceMappingURL=VibeDeckPublicLinkPanel.js.map

package/dist/components/vibedeck/VibeDeckPublicLinkPanel.js.map

@@ -1 +1 @@
-{"version":3,"file":"VibeDeckPublicLinkPanel.js","names":[],"sources":["../../../src/components/vibedeck/VibeDeckPublicLinkPanel.tsx"],"sourcesContent":["import type { FC, FormEvent, ReactNode } from 'react';\nimport { useState } from 'react';\nimport { Link2, Play, Eye, Lock, Copy, Trash2, Plus, X, Check } from 'lucide-react';\n\nimport { LoadingState, ErrorState } from '@/components/shared';\nimport { notify } from '@/lib/toast';\nimport { useI18n } from '@burdenoff/fe-libs/shared/providers/shell/I18nProvider';\nimport {\n  useListVibeDeckShareLinksQuery,\n  useCreateVibeDeckShareLinkMutation,\n  useRevokeVibeDeckShareLinkMutation,\n  type VibeDeckShareLinkFieldsFragment,\n} from '@/generated/wspace-operations';\nimport { VibeDeckSharePermission } from '@/generated/wspace-types';\n\ninterface VibeDeckPublicLinkPanelProps {\n  vibeDeckId: string;\n  vibeDeckName: string;\n  onClose: () => void;\n}\n\nconst EXPIRY_OPTIONS = [\n  { label: '4 hours', hours: 4 },\n  { label: '24 hours', hours: 24 },\n  { label: '7 days', hours: 168 },\n  { label: 'No expiry', hours: 0 },\n];\n\n/**\n * VibeDeckPublicLinkPanel — create and manage public links to a VibeDeck with explicit\n * **execution** control. Unlike the generic member-share dialog, this exposes the deck story's\n * promised controls: \"Public access + Allow execution + optional password + expiry + usage limit\".\n * Links carry a `VibeDeckSharePermission` (VIEW or EXECUTE); the URL points at the live\n * `deck/:token` page (not an auth'd accept page). Backed by the existing `createVibeDeckShareLink`\n * mutation — no backend change.\n */\nexport const VibeDeckPublicLinkPanel: FC<VibeDeckPublicLinkPanelProps> = ({\n  vibeDeckId,\n  vibeDeckName,\n  onClose,\n}) => {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const v = t(key);\n    return v === key ? fallback : v;\n  };\n\n  const { data, loading, error, refetch } = useListVibeDeckShareLinksQuery({\n    variables: { vibeDeckId },\n    fetchPolicy: 'cache-and-network',\n  });\n  const [createLink, { loading: creating }] = useCreateVibeDeckShareLinkMutation();\n  const [revokeLink] = useRevokeVibeDeckShareLinkMutation();\n\n  const [allowExecution, setAllowExecution] = useState(true);\n  const [expiryHours, setExpiryHours] = useState(4);\n  const [password, setPassword] = useState('');\n  const [maxUses, setMaxUses] = useState('');\n  const [copiedId, setCopiedId] = useState<string | null>(null);\n\n  const links: VibeDeckShareLinkFieldsFragment[] = data?.vibeDeckShareLinks ?? [];\n  const activeLinks = links.filter((l) => l.status === 'ACTIVE');\n\n  const copy = async (url: string, id: string): Promise<void> => {\n    try {\n      await navigator.clipboard.writeText(url);\n      setCopiedId(id);\n      notify.success(tr('deckLink.copied', 'Link copied'));\n      window.setTimeout(() => setCopiedId(null), 1500);\n    } catch {\n      notify.error(tr('deckLink.copyFailed', 'Could not copy — copy it manually'), url);\n    }\n  };\n\n  const handleCreate = async (e: FormEvent): Promise<void> => {\n    e.preventDefault();\n    const parsedMax = maxUses.trim() ? Number.parseInt(maxUses.trim(), 10) : null;\n    if (parsedMax !== null && (!Number.isFinite(parsedMax) || parsedMax < 1)) {\n      notify.error(tr('deckLink.badMax', 'Max uses must be a positive number'));\n      return;\n    }\n    try {\n      const res = await createLink({\n        variables: {\n          input: {\n            vibeDeckId,\n            permission: allowExecution\n              ? VibeDeckSharePermission.Execute\n              : VibeDeckSharePermission.View,\n            expiresInHours: expiryHours > 0 ? expiryHours : null,\n            password: password.trim() ? password.trim() : null,\n            maxUses: parsedMax,\n          },\n        },\n      });\n      await refetch();\n      const url = res.data?.createVibeDeckShareLink.shareUrl;\n      if (url) await copy(url, res.data?.createVibeDeckShareLink.id ?? 'new');\n      notify.success(\n        tr('deckLink.created', 'Public link created'),\n        allowExecution\n          ? tr('deckLink.createdExec', 'Anyone with the link can run the deck tiles')\n          : tr('deckLink.createdView', 'Anyone with the link can view the deck')\n      );\n      setPassword('');\n      setMaxUses('');\n    } catch (err) {\n      notify.error(tr('deckLink.createFailed', 'Could not create link'), (err as Error).message);\n    }\n  };\n\n  const handleRevoke = async (id: string): Promise<void> => {\n    try {\n      await revokeLink({ variables: { id } });\n      await refetch();\n      notify.success(tr('deckLink.revoked', 'Link revoked — it no longer works'));\n    } catch (err) {\n      notify.error(tr('deckLink.revokeFailed', 'Could not revoke'), (err as Error).message);\n    }\n  };\n\n  return (\n    <div\n      className=\"fixed inset-0 z-50 flex items-center justify-center bg-bg-overlay p-4\"\n      onClick={onClose}\n    >\n      <div\n        className=\"w-full max-w-lg rounded-card border border-border-subtle bg-bg-elevated p-6 shadow-[var(--shadow-elevation-4)]\"\n        onClick={(e) => e.stopPropagation()}\n      >\n        <div className=\"mb-4 flex items-start justify-between\">\n          <div>\n            <h3 className=\"flex items-center gap-2 text-lg font-semibold text-text-primary\">\n              <Link2 className=\"size-5\" />\n              {tr('deckLink.title', 'Public links')}\n            </h3>\n            <p className=\"mt-0.5 text-sm text-text-secondary\">{vibeDeckName}</p>\n          </div>\n          <button\n            type=\"button\"\n            onClick={onClose}\n            className=\"p-1 text-text-tertiary hover:text-text-primary\"\n            aria-label={tr('common.close', 'Close')}\n          >\n            <X className=\"size-5\" />\n          </button>\n        </div>\n\n        {/* Existing links */}\n        <div className=\"mb-4 space-y-2\">\n          {loading && links.length === 0 ? (\n            <LoadingState />\n          ) : error ? (\n            <ErrorState message={error.message} onRetry={() => void refetch()} />\n          ) : activeLinks.length === 0 ? (\n            <p className=\"text-sm text-text-secondary\">\n              {tr('deckLink.none', 'No public links yet. Create one below.')}\n            </p>\n          ) : (\n            <ul className=\"space-y-2\">\n              {activeLinks.map((l) => (\n                <li\n                  key={l.id}\n                  className=\"flex items-center gap-2 rounded-md border border-border-default px-3 py-2\"\n                >\n                  <Badge>\n                    {l.permission === VibeDeckSharePermission.Execute ? (\n                      <>\n                        <Play className=\"size-3\" /> {tr('deckLink.execute', 'Execute')}\n                      </>\n                    ) : (\n                      <>\n                        <Eye className=\"size-3\" /> {tr('deckLink.view', 'View')}\n                      </>\n                    )}\n                  </Badge>\n                  {l.hasPassword && (\n                    <Lock className=\"size-3.5 text-text-tertiary\" aria-label=\"password\" />\n                  )}\n                  <span className=\"flex-1 truncate font-mono text-xs text-text-secondary\">\n                    {l.shareUrl}\n                  </span>\n                  <span className=\"shrink-0 text-xs text-text-tertiary\">\n                    {l.useCount}\n                    {l.maxUses ? `/${l.maxUses}` : ''} {tr('deckLink.uses', 'uses')}\n                  </span>\n                  <button\n                    type=\"button\"\n                    onClick={() => void copy(l.shareUrl, l.id)}\n                    className=\"p-1 text-text-secondary hover:text-text-primary\"\n                    aria-label={tr('common.copy', 'Copy')}\n                  >\n                    {copiedId === l.id ? (\n                      <Check className=\"size-4 text-status-success-text\" />\n                    ) : (\n                      <Copy className=\"size-4\" />\n                    )}\n                  </button>\n                  <button\n                    type=\"button\"\n                    onClick={() => void handleRevoke(l.id)}\n                    className=\"p-1 text-text-secondary hover:text-action-danger-text\"\n                    aria-label={tr('common.revoke', 'Revoke')}\n                  >\n                    <Trash2 className=\"size-4\" />\n                  </button>\n                </li>\n              ))}\n            </ul>\n          )}\n        </div>\n\n        {/* Create form */}\n        <form\n          onSubmit={(e) => void handleCreate(e)}\n          className=\"space-y-3 border-t border-border-default pt-4\"\n        >\n          <label className=\"flex cursor-pointer items-center gap-2 text-sm text-text-primary\">\n            <input\n              type=\"checkbox\"\n              checked={allowExecution}\n              onChange={(e) => setAllowExecution(e.target.checked)}\n              className=\"rounded border-border-default\"\n            />\n            <Play className=\"size-3.5\" />\n            {tr('deckLink.allowExecution', 'Allow execution (anyone with the link can run tiles)')}\n          </label>\n          <div className=\"flex flex-col gap-3 sm:flex-row\">\n            <label className=\"flex-1\">\n              <span className=\"text-sm text-text-secondary\">\n                {tr('deckLink.expiry', 'Expires')}\n              </span>\n              <select\n                value={expiryHours}\n                onChange={(e) => setExpiryHours(Number(e.target.value))}\n                className=\"mt-1 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm text-text-primary\"\n              >\n                {EXPIRY_OPTIONS.map((o) => (\n                  <option key={o.label} value={o.hours}>\n                    {o.label}\n                  </option>\n                ))}\n              </select>\n            </label>\n            <label className=\"flex-1\">\n              <span className=\"text-sm text-text-secondary\">\n                {tr('deckLink.maxUses', 'Max uses (optional)')}\n              </span>\n              <input\n                value={maxUses}\n                onChange={(e) => setMaxUses(e.target.value)}\n                inputMode=\"numeric\"\n                placeholder={tr('deckLink.unlimited', 'unlimited')}\n                className=\"mt-1 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm text-text-primary\"\n              />\n            </label>\n          </div>\n          <label className=\"block\">\n            <span className=\"text-sm text-text-secondary\">\n              {tr('deckLink.password', 'Password (optional)')}\n            </span>\n            <input\n              value={password}\n              onChange={(e) => setPassword(e.target.value)}\n              type=\"password\"\n              autoComplete=\"new-password\"\n              placeholder={tr('deckLink.noPassword', 'no password')}\n              className=\"mt-1 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm text-text-primary\"\n            />\n          </label>\n          <div className=\"flex justify-end\">\n            <button\n              type=\"submit\"\n              disabled={creating}\n              className=\"flex items-center gap-1.5 rounded-md bg-action-primary-bg px-3 py-2 text-sm text-action-primary-text hover:opacity-90 disabled:opacity-50\"\n            >\n              <Plus className=\"size-4\" />\n              {tr('deckLink.create', 'Create public link')}\n            </button>\n          </div>\n        </form>\n      </div>\n    </div>\n  );\n};\n\nconst Badge: FC<{ children: ReactNode }> = ({ children }) => (\n  <span className=\"inline-flex shrink-0 items-center gap-1 rounded-full bg-bg-sunken px-2 py-0.5 text-xs font-medium text-text-primary\">\n    {children}\n  </span>\n);\n"],"mappings":";;;;;;;;;;;AAqBA,IAAM,IAAiB;CACrB;EAAE,OAAO;EAAW,OAAO;EAAG;CAC9B;EAAE,OAAO;EAAY,OAAO;EAAI;CAChC;EAAE,OAAO;EAAU,OAAO;EAAK;CAC/B;EAAE,OAAO;EAAa,OAAO;EAAG;CACjC,EAUY,KAA6D,EACxE,eACA,iBACA,iBACI;CACJ,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAI,EAAE,EAAI;AAChB,SAAO,MAAM,IAAM,IAAW;IAG1B,EAAE,SAAM,YAAS,UAAO,eAAY,EAA+B;EACvE,WAAW,EAAE,eAAY;EACzB,aAAa;EACd,CAAC,EACI,CAAC,GAAY,EAAE,SAAS,OAAc,GAAoC,EAC1E,CAAC,KAAc,GAAoC,EAEnD,CAAC,GAAgB,KAAqB,EAAS,GAAK,EACpD,CAAC,GAAa,KAAkB,EAAS,EAAE,EAC3C,CAAC,GAAU,KAAe,EAAS,GAAG,EACtC,CAAC,GAAS,KAAc,EAAS,GAAG,EACpC,CAAC,GAAU,KAAe,EAAwB,KAAK,EAEvD,IAA2C,GAAM,sBAAsB,EAAE,EACzE,IAAc,EAAM,QAAQ,MAAM,EAAE,WAAW,SAAS,EAExD,IAAO,OAAO,GAAa,MAA8B;AAC7D,MAAI;AAIF,GAHA,MAAM,UAAU,UAAU,UAAU,EAAI,EACxC,EAAY,EAAG,EACf,EAAO,QAAQ,EAAG,mBAAmB,cAAc,CAAC,EACpD,OAAO,iBAAiB,EAAY,KAAK,EAAE,KAAK;UAC1C;AACN,KAAO,MAAM,EAAG,uBAAuB,oCAAoC,EAAE,EAAI;;IAI/E,IAAe,OAAO,MAAgC;AAC1D,IAAE,gBAAgB;EAClB,IAAM,IAAY,EAAQ,MAAM,GAAG,OAAO,SAAS,EAAQ,MAAM,EAAE,GAAG,GAAG;AACzE,MAAI,MAAc,SAAS,CAAC,OAAO,SAAS,EAAU,IAAI,IAAY,IAAI;AACxE,KAAO,MAAM,EAAG,mBAAmB,qCAAqC,CAAC;AACzE;;AAEF,MAAI;GACF,IAAM,IAAM,MAAM,EAAW,EAC3B,WAAW,EACT,OAAO;IACL;IACA,YAAY,IACR,EAAwB,UACxB,EAAwB;IAC5B,gBAAgB,IAAc,IAAI,IAAc;IAChD,UAAU,EAAS,MAAM,GAAG,EAAS,MAAM,GAAG;IAC9C,SAAS;IACV,EACF,EACF,CAAC;AACF,SAAM,GAAS;GACf,IAAM,IAAM,EAAI,MAAM,wBAAwB;AAS9C,GARI,KAAK,MAAM,EAAK,GAAK,EAAI,MAAM,wBAAwB,MAAM,MAAM,EACvE,EAAO,QACL,EAAG,oBAAoB,sBAAsB,EAC7C,IACI,EAAG,wBAAwB,8CAA8C,GACzE,EAAG,wBAAwB,yCAAyC,CACzE,EACD,EAAY,GAAG,EACf,EAAW,GAAG;WACP,GAAK;AACZ,KAAO,MAAM,EAAG,yBAAyB,wBAAwB,EAAG,EAAc,QAAQ;;IAIxF,IAAe,OAAO,MAA8B;AACxD,MAAI;AAGF,GAFA,MAAM,EAAW,EAAE,WAAW,EAAE,OAAI,EAAE,CAAC,EACvC,MAAM,GAAS,EACf,EAAO,QAAQ,EAAG,oBAAoB,oCAAoC,CAAC;WACpE,GAAK;AACZ,KAAO,MAAM,EAAG,yBAAyB,mBAAmB,EAAG,EAAc,QAAQ;;;AAIzF,QACE,kBAAC,OAAD;EACE,WAAU;EACV,SAAS;YAET,kBAAC,OAAD;GACE,WAAU;GACV,UAAU,MAAM,EAAE,iBAAiB;aAFrC;IAIE,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,MAAD;MAAI,WAAU;gBAAd,CACE,kBAAC,GAAD,EAAO,WAAU,UAAW,CAAA,EAC3B,EAAG,kBAAkB,eAAe,CAClC;SACL,kBAAC,KAAD;MAAG,WAAU;gBAAsC;MAAiB,CAAA,CAChE,EAAA,CAAA,EACN,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,WAAU;MACV,cAAY,EAAG,gBAAgB,QAAQ;gBAEvC,kBAAC,GAAD,EAAG,WAAU,UAAW,CAAA;MACjB,CAAA,CACL;;IAGN,kBAAC,OAAD;KAAK,WAAU;eACZ,KAAW,EAAM,WAAW,IAC3B,kBAAC,GAAD,EAAgB,CAAA,GACd,IACF,kBAAC,GAAD;MAAY,SAAS,EAAM;MAAS,eAAe,KAAK,GAAS;MAAI,CAAA,GACnE,EAAY,WAAW,IACzB,kBAAC,KAAD;MAAG,WAAU;gBACV,EAAG,iBAAiB,yCAAyC;MAC5D,CAAA,GAEJ,kBAAC,MAAD;MAAI,WAAU;gBACX,EAAY,KAAK,MAChB,kBAAC,MAAD;OAEE,WAAU;iBAFZ;QAIE,kBAAC,GAAD,EAAA,UACG,EAAE,eAAe,EAAwB,UACxC,kBAAA,GAAA,EAAA,UAAA;SACE,kBAAC,GAAD,EAAM,WAAU,UAAW,CAAA;;SAAE,EAAG,oBAAoB,UAAU;SAC7D,EAAA,CAAA,GAEH,kBAAA,GAAA,EAAA,UAAA;SACE,kBAAC,GAAD,EAAK,WAAU,UAAW,CAAA;;SAAE,EAAG,iBAAiB,OAAO;SACtD,EAAA,CAAA,EAEC,CAAA;QACP,EAAE,eACD,kBAAC,GAAD;SAAM,WAAU;SAA8B,cAAW;SAAa,CAAA;QAExE,kBAAC,QAAD;SAAM,WAAU;mBACb,EAAE;SACE,CAAA;QACP,kBAAC,QAAD;SAAM,WAAU;mBAAhB;UACG,EAAE;UACF,EAAE,UAAU,IAAI,EAAE,YAAY;UAAG;UAAE,EAAG,iBAAiB,OAAO;UAC1D;;QACP,kBAAC,UAAD;SACE,MAAK;SACL,eAAe,KAAK,EAAK,EAAE,UAAU,EAAE,GAAG;SAC1C,WAAU;SACV,cAAY,EAAG,eAAe,OAAO;mBAEpC,MAAa,EAAE,KACd,kBAAC,GAAD,EAAO,WAAU,mCAAoC,CAAA,GAErD,kBAAC,GAAD,EAAM,WAAU,UAAW,CAAA;SAEtB,CAAA;QACT,kBAAC,UAAD;SACE,MAAK;SACL,eAAe,KAAK,EAAa,EAAE,GAAG;SACtC,WAAU;SACV,cAAY,EAAG,iBAAiB,SAAS;mBAEzC,kBAAC,GAAD,EAAQ,WAAU,UAAW,CAAA;SACtB,CAAA;QACN;SA5CE,EAAE,GA4CJ,CACL;MACC,CAAA;KAEH,CAAA;IAGN,kBAAC,QAAD;KACE,WAAW,MAAM,KAAK,EAAa,EAAE;KACrC,WAAU;eAFZ;MAIE,kBAAC,SAAD;OAAO,WAAU;iBAAjB;QACE,kBAAC,SAAD;SACE,MAAK;SACL,SAAS;SACT,WAAW,MAAM,EAAkB,EAAE,OAAO,QAAQ;SACpD,WAAU;SACV,CAAA;QACF,kBAAC,GAAD,EAAM,WAAU,YAAa,CAAA;QAC5B,EAAG,2BAA2B,uDAAuD;QAChF;;MACR,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QAAO,WAAU;kBAAjB,CACE,kBAAC,QAAD;SAAM,WAAU;mBACb,EAAG,mBAAmB,UAAU;SAC5B,CAAA,EACP,kBAAC,UAAD;SACE,OAAO;SACP,WAAW,MAAM,EAAe,OAAO,EAAE,OAAO,MAAM,CAAC;SACvD,WAAU;mBAET,EAAe,KAAK,MACnB,kBAAC,UAAD;UAAsB,OAAO,EAAE;oBAC5B,EAAE;UACI,EAFI,EAAE,MAEN,CACT;SACK,CAAA,CACH;WACR,kBAAC,SAAD;QAAO,WAAU;kBAAjB,CACE,kBAAC,QAAD;SAAM,WAAU;mBACb,EAAG,oBAAoB,sBAAsB;SACzC,CAAA,EACP,kBAAC,SAAD;SACE,OAAO;SACP,WAAW,MAAM,EAAW,EAAE,OAAO,MAAM;SAC3C,WAAU;SACV,aAAa,EAAG,sBAAsB,YAAY;SAClD,WAAU;SACV,CAAA,CACI;UACJ;;MACN,kBAAC,SAAD;OAAO,WAAU;iBAAjB,CACE,kBAAC,QAAD;QAAM,WAAU;kBACb,EAAG,qBAAqB,sBAAsB;QAC1C,CAAA,EACP,kBAAC,SAAD;QACE,OAAO;QACP,WAAW,MAAM,EAAY,EAAE,OAAO,MAAM;QAC5C,MAAK;QACL,cAAa;QACb,aAAa,EAAG,uBAAuB,cAAc;QACrD,WAAU;QACV,CAAA,CACI;;MACR,kBAAC,OAAD;OAAK,WAAU;iBACb,kBAAC,UAAD;QACE,MAAK;QACL,UAAU;QACV,WAAU;kBAHZ,CAKE,kBAAC,GAAD,EAAM,WAAU,UAAW,CAAA,EAC1B,EAAG,mBAAmB,qBAAqB,CACrC;;OACL,CAAA;MACD;;IACH;;EACF,CAAA;GAIJ,KAAsC,EAAE,kBAC5C,kBAAC,QAAD;CAAM,WAAU;CACb;CACI,CAAA"}
+{"version":3,"file":"VibeDeckPublicLinkPanel.js","names":[],"sources":["../../../src/components/vibedeck/VibeDeckPublicLinkPanel.tsx"],"sourcesContent":["import type { FC, FormEvent, ReactNode } from 'react';\nimport { useState } from 'react';\nimport { Link2, Play, Eye, Lock, Copy, Trash2, Plus, X, Check } from 'lucide-react';\n\nimport { LoadingState, ErrorState } from '@/components/shared';\nimport { VIBE_PERMISSIONS } from '@/constants/permissions';\nimport { notify } from '@/lib/toast';\nimport { usePermissions } from '@burdenoff/fe-libs/shared/providers/shell';\nimport { useI18n } from '@burdenoff/fe-libs/shared/providers/shell/I18nProvider';\nimport {\n  useListVibeDeckShareLinksQuery,\n  useCreateVibeDeckShareLinkMutation,\n  useRevokeVibeDeckShareLinkMutation,\n  type VibeDeckShareLinkFieldsFragment,\n} from '@/generated/wspace-operations';\nimport { VibeDeckSharePermission } from '@/generated/wspace-types';\n\ninterface VibeDeckPublicLinkPanelProps {\n  vibeDeckId: string;\n  vibeDeckName: string;\n  onClose: () => void;\n}\n\nconst EXPIRY_OPTIONS = [\n  { label: '4 hours', hours: 4 },\n  { label: '24 hours', hours: 24 },\n  { label: '7 days', hours: 168 },\n  { label: 'No expiry', hours: 0 },\n];\n\n/**\n * VibeDeckPublicLinkPanel — create and manage public links to a VibeDeck with explicit\n * **execution** control. Unlike the generic member-share dialog, this exposes the deck story's\n * promised controls: \"Public access + Allow execution + optional password + expiry + usage limit\".\n * Links carry a `VibeDeckSharePermission` (VIEW or EXECUTE); the URL points at the live\n * `deck/:token` page (not an auth'd accept page). Backed by the existing `createVibeDeckShareLink`\n * mutation — no backend change.\n */\nexport const VibeDeckPublicLinkPanel: FC<VibeDeckPublicLinkPanelProps> = ({\n  vibeDeckId,\n  vibeDeckName,\n  onClose,\n}) => {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const v = t(key);\n    return v === key ? fallback : v;\n  };\n  const { hasPermission } = usePermissions();\n  const canManageLinks = hasPermission(VIBE_PERMISSIONS.VIBEDECK_UPDATE);\n\n  const { data, loading, error, refetch } = useListVibeDeckShareLinksQuery({\n    variables: { vibeDeckId },\n    fetchPolicy: 'cache-and-network',\n  });\n  const [createLink, { loading: creating }] = useCreateVibeDeckShareLinkMutation();\n  const [revokeLink] = useRevokeVibeDeckShareLinkMutation();\n\n  const [allowExecution, setAllowExecution] = useState(true);\n  const [expiryHours, setExpiryHours] = useState(4);\n  const [password, setPassword] = useState('');\n  const [maxUses, setMaxUses] = useState('');\n  const [copiedId, setCopiedId] = useState<string | null>(null);\n\n  const links: VibeDeckShareLinkFieldsFragment[] = data?.vibeDeckShareLinks ?? [];\n  const activeLinks = links.filter((l) => l.status === 'ACTIVE');\n\n  const copy = async (url: string, id: string): Promise<void> => {\n    try {\n      await navigator.clipboard.writeText(url);\n      setCopiedId(id);\n      notify.success(tr('deckLink.copied', 'Link copied'));\n      window.setTimeout(() => setCopiedId(null), 1500);\n    } catch {\n      notify.error(tr('deckLink.copyFailed', 'Could not copy — copy it manually'), url);\n    }\n  };\n\n  const handleCreate = async (e: FormEvent): Promise<void> => {\n    e.preventDefault();\n    const parsedMax = maxUses.trim() ? Number.parseInt(maxUses.trim(), 10) : null;\n    if (parsedMax !== null && (!Number.isFinite(parsedMax) || parsedMax < 1)) {\n      notify.error(tr('deckLink.badMax', 'Max uses must be a positive number'));\n      return;\n    }\n    try {\n      const res = await createLink({\n        variables: {\n          input: {\n            vibeDeckId,\n            permission: allowExecution\n              ? VibeDeckSharePermission.Execute\n              : VibeDeckSharePermission.View,\n            expiresInHours: expiryHours > 0 ? expiryHours : null,\n            password: password.trim() ? password.trim() : null,\n            maxUses: parsedMax,\n          },\n        },\n      });\n      await refetch();\n      const url = res.data?.createVibeDeckShareLink.shareUrl;\n      if (url) await copy(url, res.data?.createVibeDeckShareLink.id ?? 'new');\n      notify.success(\n        tr('deckLink.created', 'Public link created'),\n        allowExecution\n          ? tr('deckLink.createdExec', 'Anyone with the link can run the deck tiles')\n          : tr('deckLink.createdView', 'Anyone with the link can view the deck')\n      );\n      setPassword('');\n      setMaxUses('');\n    } catch (err) {\n      notify.error(tr('deckLink.createFailed', 'Could not create link'), (err as Error).message);\n    }\n  };\n\n  const handleRevoke = async (id: string): Promise<void> => {\n    try {\n      await revokeLink({ variables: { id } });\n      await refetch();\n      notify.success(tr('deckLink.revoked', 'Link revoked — it no longer works'));\n    } catch (err) {\n      notify.error(tr('deckLink.revokeFailed', 'Could not revoke'), (err as Error).message);\n    }\n  };\n\n  return (\n    <div\n      className=\"fixed inset-0 z-50 flex items-center justify-center bg-bg-overlay p-4\"\n      onClick={onClose}\n    >\n      <div\n        className=\"w-full max-w-lg rounded-card border border-border-subtle bg-bg-elevated p-6 shadow-[var(--shadow-elevation-4)]\"\n        onClick={(e) => e.stopPropagation()}\n      >\n        <div className=\"mb-4 flex items-start justify-between\">\n          <div>\n            <h3 className=\"flex items-center gap-2 text-lg font-semibold text-text-primary\">\n              <Link2 className=\"size-5\" />\n              {tr('deckLink.title', 'Public links')}\n            </h3>\n            <p className=\"mt-0.5 text-sm text-text-secondary\">{vibeDeckName}</p>\n          </div>\n          <button\n            type=\"button\"\n            onClick={onClose}\n            className=\"p-1 text-text-tertiary hover:text-text-primary\"\n            aria-label={tr('common.close', 'Close')}\n          >\n            <X className=\"size-5\" />\n          </button>\n        </div>\n\n        {/* Existing links */}\n        <div className=\"mb-4 space-y-2\">\n          {loading && links.length === 0 ? (\n            <LoadingState />\n          ) : error ? (\n            <ErrorState message={error.message} onRetry={() => void refetch()} />\n          ) : activeLinks.length === 0 ? (\n            <p className=\"text-sm text-text-secondary\">\n              {tr('deckLink.none', 'No public links yet. Create one below.')}\n            </p>\n          ) : (\n            <ul className=\"space-y-2\">\n              {activeLinks.map((l) => (\n                <li\n                  key={l.id}\n                  className=\"flex items-center gap-2 rounded-md border border-border-default px-3 py-2\"\n                >\n                  <Badge>\n                    {l.permission === VibeDeckSharePermission.Execute ? (\n                      <>\n                        <Play className=\"size-3\" /> {tr('deckLink.execute', 'Execute')}\n                      </>\n                    ) : (\n                      <>\n                        <Eye className=\"size-3\" /> {tr('deckLink.view', 'View')}\n                      </>\n                    )}\n                  </Badge>\n                  {l.hasPassword && (\n                    <Lock className=\"size-3.5 text-text-tertiary\" aria-label=\"password\" />\n                  )}\n                  <span className=\"flex-1 truncate font-mono text-xs text-text-secondary\">\n                    {l.shareUrl}\n                  </span>\n                  <span className=\"shrink-0 text-xs text-text-tertiary\">\n                    {l.useCount}\n                    {l.maxUses ? `/${l.maxUses}` : ''} {tr('deckLink.uses', 'uses')}\n                  </span>\n                  <button\n                    type=\"button\"\n                    onClick={() => void copy(l.shareUrl, l.id)}\n                    className=\"p-1 text-text-secondary hover:text-text-primary\"\n                    aria-label={tr('common.copy', 'Copy')}\n                  >\n                    {copiedId === l.id ? (\n                      <Check className=\"size-4 text-status-success-text\" />\n                    ) : (\n                      <Copy className=\"size-4\" />\n                    )}\n                  </button>\n                  {canManageLinks && (\n                    <button\n                      type=\"button\"\n                      onClick={() => void handleRevoke(l.id)}\n                      className=\"p-1 text-text-secondary hover:text-action-danger-text\"\n                      aria-label={tr('common.revoke', 'Revoke')}\n                    >\n                      <Trash2 className=\"size-4\" />\n                    </button>\n                  )}\n                </li>\n              ))}\n            </ul>\n          )}\n        </div>\n\n        {/* Create form */}\n        {canManageLinks && (\n          <form\n            onSubmit={(e) => void handleCreate(e)}\n            className=\"space-y-3 border-t border-border-default pt-4\"\n          >\n            <label className=\"flex cursor-pointer items-center gap-2 text-sm text-text-primary\">\n              <input\n                type=\"checkbox\"\n                checked={allowExecution}\n                onChange={(e) => setAllowExecution(e.target.checked)}\n                className=\"rounded border-border-default\"\n              />\n              <Play className=\"size-3.5\" />\n              {tr(\n                'deckLink.allowExecution',\n                'Allow execution (anyone with the link can run tiles)'\n              )}\n            </label>\n            <div className=\"flex flex-col gap-3 sm:flex-row\">\n              <label className=\"flex-1\">\n                <span className=\"text-sm text-text-secondary\">\n                  {tr('deckLink.expiry', 'Expires')}\n                </span>\n                <select\n                  value={expiryHours}\n                  onChange={(e) => setExpiryHours(Number(e.target.value))}\n                  className=\"mt-1 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm text-text-primary\"\n                >\n                  {EXPIRY_OPTIONS.map((o) => (\n                    <option key={o.label} value={o.hours}>\n                      {o.label}\n                    </option>\n                  ))}\n                </select>\n              </label>\n              <label className=\"flex-1\">\n                <span className=\"text-sm text-text-secondary\">\n                  {tr('deckLink.maxUses', 'Max uses (optional)')}\n                </span>\n                <input\n                  value={maxUses}\n                  onChange={(e) => setMaxUses(e.target.value)}\n                  inputMode=\"numeric\"\n                  placeholder={tr('deckLink.unlimited', 'unlimited')}\n                  className=\"mt-1 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm text-text-primary\"\n                />\n              </label>\n            </div>\n            <label className=\"block\">\n              <span className=\"text-sm text-text-secondary\">\n                {tr('deckLink.password', 'Password (optional)')}\n              </span>\n              <input\n                value={password}\n                onChange={(e) => setPassword(e.target.value)}\n                type=\"password\"\n                autoComplete=\"new-password\"\n                placeholder={tr('deckLink.noPassword', 'no password')}\n                className=\"mt-1 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm text-text-primary\"\n              />\n            </label>\n            <div className=\"flex justify-end\">\n              <button\n                type=\"submit\"\n                disabled={creating}\n                className=\"flex items-center gap-1.5 rounded-md bg-action-primary-bg px-3 py-2 text-sm text-action-primary-text hover:opacity-90 disabled:opacity-50\"\n              >\n                <Plus className=\"size-4\" />\n                {tr('deckLink.create', 'Create public link')}\n              </button>\n            </div>\n          </form>\n        )}\n      </div>\n    </div>\n  );\n};\n\nconst Badge: FC<{ children: ReactNode }> = ({ children }) => (\n  <span className=\"inline-flex shrink-0 items-center gap-1 rounded-full bg-bg-sunken px-2 py-0.5 text-xs font-medium text-text-primary\">\n    {children}\n  </span>\n);\n"],"mappings":";;;;;;;;;;;;;AAuBA,IAAM,IAAiB;CACrB;EAAE,OAAO;EAAW,OAAO;EAAG;CAC9B;EAAE,OAAO;EAAY,OAAO;EAAI;CAChC;EAAE,OAAO;EAAU,OAAO;EAAK;CAC/B;EAAE,OAAO;EAAa,OAAO;EAAG;CACjC,EAUY,KAA6D,EACxE,eACA,iBACA,iBACI;CACJ,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAI,EAAE,EAAI;AAChB,SAAO,MAAM,IAAM,IAAW;IAE1B,EAAE,qBAAkB,GAAgB,EACpC,IAAiB,EAAc,EAAiB,gBAAgB,EAEhE,EAAE,SAAM,YAAS,UAAO,eAAY,EAA+B;EACvE,WAAW,EAAE,eAAY;EACzB,aAAa;EACd,CAAC,EACI,CAAC,GAAY,EAAE,SAAS,OAAc,GAAoC,EAC1E,CAAC,KAAc,GAAoC,EAEnD,CAAC,GAAgB,KAAqB,EAAS,GAAK,EACpD,CAAC,GAAa,KAAkB,EAAS,EAAE,EAC3C,CAAC,GAAU,KAAe,EAAS,GAAG,EACtC,CAAC,GAAS,KAAc,EAAS,GAAG,EACpC,CAAC,GAAU,KAAe,EAAwB,KAAK,EAEvD,IAA2C,GAAM,sBAAsB,EAAE,EACzE,IAAc,EAAM,QAAQ,MAAM,EAAE,WAAW,SAAS,EAExD,IAAO,OAAO,GAAa,MAA8B;AAC7D,MAAI;AAIF,GAHA,MAAM,UAAU,UAAU,UAAU,EAAI,EACxC,EAAY,EAAG,EACf,EAAO,QAAQ,EAAG,mBAAmB,cAAc,CAAC,EACpD,OAAO,iBAAiB,EAAY,KAAK,EAAE,KAAK;UAC1C;AACN,KAAO,MAAM,EAAG,uBAAuB,oCAAoC,EAAE,EAAI;;IAI/E,IAAe,OAAO,MAAgC;AAC1D,IAAE,gBAAgB;EAClB,IAAM,IAAY,EAAQ,MAAM,GAAG,OAAO,SAAS,EAAQ,MAAM,EAAE,GAAG,GAAG;AACzE,MAAI,MAAc,SAAS,CAAC,OAAO,SAAS,EAAU,IAAI,IAAY,IAAI;AACxE,KAAO,MAAM,EAAG,mBAAmB,qCAAqC,CAAC;AACzE;;AAEF,MAAI;GACF,IAAM,IAAM,MAAM,EAAW,EAC3B,WAAW,EACT,OAAO;IACL;IACA,YAAY,IACR,EAAwB,UACxB,EAAwB;IAC5B,gBAAgB,IAAc,IAAI,IAAc;IAChD,UAAU,EAAS,MAAM,GAAG,EAAS,MAAM,GAAG;IAC9C,SAAS;IACV,EACF,EACF,CAAC;AACF,SAAM,GAAS;GACf,IAAM,IAAM,EAAI,MAAM,wBAAwB;AAS9C,GARI,KAAK,MAAM,EAAK,GAAK,EAAI,MAAM,wBAAwB,MAAM,MAAM,EACvE,EAAO,QACL,EAAG,oBAAoB,sBAAsB,EAC7C,IACI,EAAG,wBAAwB,8CAA8C,GACzE,EAAG,wBAAwB,yCAAyC,CACzE,EACD,EAAY,GAAG,EACf,EAAW,GAAG;WACP,GAAK;AACZ,KAAO,MAAM,EAAG,yBAAyB,wBAAwB,EAAG,EAAc,QAAQ;;IAIxF,IAAe,OAAO,MAA8B;AACxD,MAAI;AAGF,GAFA,MAAM,EAAW,EAAE,WAAW,EAAE,OAAI,EAAE,CAAC,EACvC,MAAM,GAAS,EACf,EAAO,QAAQ,EAAG,oBAAoB,oCAAoC,CAAC;WACpE,GAAK;AACZ,KAAO,MAAM,EAAG,yBAAyB,mBAAmB,EAAG,EAAc,QAAQ;;;AAIzF,QACE,kBAAC,OAAD;EACE,WAAU;EACV,SAAS;YAET,kBAAC,OAAD;GACE,WAAU;GACV,UAAU,MAAM,EAAE,iBAAiB;aAFrC;IAIE,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,MAAD;MAAI,WAAU;gBAAd,CACE,kBAAC,GAAD,EAAO,WAAU,UAAW,CAAA,EAC3B,EAAG,kBAAkB,eAAe,CAClC;SACL,kBAAC,KAAD;MAAG,WAAU;gBAAsC;MAAiB,CAAA,CAChE,EAAA,CAAA,EACN,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,WAAU;MACV,cAAY,EAAG,gBAAgB,QAAQ;gBAEvC,kBAAC,GAAD,EAAG,WAAU,UAAW,CAAA;MACjB,CAAA,CACL;;IAGN,kBAAC,OAAD;KAAK,WAAU;eACZ,KAAW,EAAM,WAAW,IAC3B,kBAAC,GAAD,EAAgB,CAAA,GACd,IACF,kBAAC,GAAD;MAAY,SAAS,EAAM;MAAS,eAAe,KAAK,GAAS;MAAI,CAAA,GACnE,EAAY,WAAW,IACzB,kBAAC,KAAD;MAAG,WAAU;gBACV,EAAG,iBAAiB,yCAAyC;MAC5D,CAAA,GAEJ,kBAAC,MAAD;MAAI,WAAU;gBACX,EAAY,KAAK,MAChB,kBAAC,MAAD;OAEE,WAAU;iBAFZ;QAIE,kBAAC,GAAD,EAAA,UACG,EAAE,eAAe,EAAwB,UACxC,kBAAA,GAAA,EAAA,UAAA;SACE,kBAAC,GAAD,EAAM,WAAU,UAAW,CAAA;;SAAE,EAAG,oBAAoB,UAAU;SAC7D,EAAA,CAAA,GAEH,kBAAA,GAAA,EAAA,UAAA;SACE,kBAAC,GAAD,EAAK,WAAU,UAAW,CAAA;;SAAE,EAAG,iBAAiB,OAAO;SACtD,EAAA,CAAA,EAEC,CAAA;QACP,EAAE,eACD,kBAAC,GAAD;SAAM,WAAU;SAA8B,cAAW;SAAa,CAAA;QAExE,kBAAC,QAAD;SAAM,WAAU;mBACb,EAAE;SACE,CAAA;QACP,kBAAC,QAAD;SAAM,WAAU;mBAAhB;UACG,EAAE;UACF,EAAE,UAAU,IAAI,EAAE,YAAY;UAAG;UAAE,EAAG,iBAAiB,OAAO;UAC1D;;QACP,kBAAC,UAAD;SACE,MAAK;SACL,eAAe,KAAK,EAAK,EAAE,UAAU,EAAE,GAAG;SAC1C,WAAU;SACV,cAAY,EAAG,eAAe,OAAO;mBAEpC,MAAa,EAAE,KACd,kBAAC,GAAD,EAAO,WAAU,mCAAoC,CAAA,GAErD,kBAAC,GAAD,EAAM,WAAU,UAAW,CAAA;SAEtB,CAAA;QACR,KACC,kBAAC,UAAD;SACE,MAAK;SACL,eAAe,KAAK,EAAa,EAAE,GAAG;SACtC,WAAU;SACV,cAAY,EAAG,iBAAiB,SAAS;mBAEzC,kBAAC,GAAD,EAAQ,WAAU,UAAW,CAAA;SACtB,CAAA;QAER;SA9CE,EAAE,GA8CJ,CACL;MACC,CAAA;KAEH,CAAA;IAGL,KACC,kBAAC,QAAD;KACE,WAAW,MAAM,KAAK,EAAa,EAAE;KACrC,WAAU;eAFZ;MAIE,kBAAC,SAAD;OAAO,WAAU;iBAAjB;QACE,kBAAC,SAAD;SACE,MAAK;SACL,SAAS;SACT,WAAW,MAAM,EAAkB,EAAE,OAAO,QAAQ;SACpD,WAAU;SACV,CAAA;QACF,kBAAC,GAAD,EAAM,WAAU,YAAa,CAAA;QAC5B,EACC,2BACA,uDACD;QACK;;MACR,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QAAO,WAAU;kBAAjB,CACE,kBAAC,QAAD;SAAM,WAAU;mBACb,EAAG,mBAAmB,UAAU;SAC5B,CAAA,EACP,kBAAC,UAAD;SACE,OAAO;SACP,WAAW,MAAM,EAAe,OAAO,EAAE,OAAO,MAAM,CAAC;SACvD,WAAU;mBAET,EAAe,KAAK,MACnB,kBAAC,UAAD;UAAsB,OAAO,EAAE;oBAC5B,EAAE;UACI,EAFI,EAAE,MAEN,CACT;SACK,CAAA,CACH;WACR,kBAAC,SAAD;QAAO,WAAU;kBAAjB,CACE,kBAAC,QAAD;SAAM,WAAU;mBACb,EAAG,oBAAoB,sBAAsB;SACzC,CAAA,EACP,kBAAC,SAAD;SACE,OAAO;SACP,WAAW,MAAM,EAAW,EAAE,OAAO,MAAM;SAC3C,WAAU;SACV,aAAa,EAAG,sBAAsB,YAAY;SAClD,WAAU;SACV,CAAA,CACI;UACJ;;MACN,kBAAC,SAAD;OAAO,WAAU;iBAAjB,CACE,kBAAC,QAAD;QAAM,WAAU;kBACb,EAAG,qBAAqB,sBAAsB;QAC1C,CAAA,EACP,kBAAC,SAAD;QACE,OAAO;QACP,WAAW,MAAM,EAAY,EAAE,OAAO,MAAM;QAC5C,MAAK;QACL,cAAa;QACb,aAAa,EAAG,uBAAuB,cAAc;QACrD,WAAU;QACV,CAAA,CACI;;MACR,kBAAC,OAAD;OAAK,WAAU;iBACb,kBAAC,UAAD;QACE,MAAK;QACL,UAAU;QACV,WAAU;kBAHZ,CAKE,kBAAC,GAAD,EAAM,WAAU,UAAW,CAAA,EAC1B,EAAG,mBAAmB,qBAAqB,CACrC;;OACL,CAAA;MACD;;IAEL;;EACF,CAAA;GAIJ,KAAsC,EAAE,kBAC5C,kBAAC,QAAD;CAAM,WAAU;CACb;CACI,CAAA"}

package/dist/constants/permissions.js

@@ -37,6 +37,7 @@ var e = {
 	WEBHOOK_CREATE: "webhook:create",
 	WEBHOOK_UPDATE: "webhook:update",
 	WEBHOOK_DELETE: "webhook:delete",
+	WEBHOOK_EXECUTE: "webhook:execute",
 	VIBEDECK_LIST: "vibedeck:list",
 	VIBEDECK_READ: "vibedeck:read",
 	VIBEDECK_CREATE: "vibedeck:create",
@@ -44,6 +45,12 @@ var e = {
 	VIBEDECK_DELETE: "vibedeck:delete",
 	VIBEDECK_EXECUTE: "vibedeck:execute",
 	VIBEDECK_SHARE: "vibedeck:share",
+	VIBEDECK_BUTTON_LIST: "vibedeck-button:list",
+	VIBEDECK_BUTTON_READ: "vibedeck-button:read",
+	VIBEDECK_BUTTON_CREATE: "vibedeck-button:create",
+	VIBEDECK_BUTTON_UPDATE: "vibedeck-button:update",
+	VIBEDECK_BUTTON_DELETE: "vibedeck-button:delete",
+	VIBEDECK_BUTTON_EXECUTE: "vibedeck-button:execute",
 	CALENDAR_AGENT_TASK_LIST: "calendar-agent-task:list",
 	CALENDAR_AGENT_TASK_READ: "calendar-agent-task:read",
 	CALENDAR_AGENT_TASK_CREATE: "calendar-agent-task:create",

package/dist/constants/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","names":[],"sources":["../../src/constants/permissions.ts"],"sourcesContent":["/**\n * VibeControls Permission Constants\n *\n * All permission strings for VibeControls resources.\n * Use with fe-libs usePermissions hook: hasPermission(VIBE_PERMISSIONS.VIBE_CREATE)\n *\n * IMPORTANT — only strings present in the wspace-rbac-svc seed\n * (`prisma/seed-unified-rbac.ts` ACTION_DEFINITIONS) are ever returned by\n * `myPermissions`/`hasPermission`. Gating on a string the seed does NOT\n * define makes `hasPermission` return false for EVERYONE → a full lockout.\n *\n * Read/CRUD for catalog, component, template, ai-context, ai-prompt,\n * instruction-file and docs_site were seeded in the BOFF-2034 follow-up, so\n * their pages now gate on their own resource (no more `vibe:list` proxy).\n * The new resourceTypes added in that pass (scorecard, aitoolevent,\n * docs_page, docs_revision, docs_build_image) only reach ALREADY-EXISTING\n * workspaces after their cloned roles are re-synced — do NOT hard-gate a\n * page on those until the backfill has run, or pre-existing workspaces lock\n * out.\n *\n * Resource types:\n * - vibe: list, read, create, update, delete, scan, manage\n * - agent: list, read, create, update, delete, admin, mutate, invoke\n * - session: list, read, create, update, delete, execute\n * - note: list, read, create, update, delete\n * - webhook: list, read, create, update, delete\n * - action: list, read, create, update, delete, execute\n * - calendar-agent-task: list, read, create, update, delete, execute\n * - configuration: list, read, create, update, delete\n * - docs_site: list, read, create, update, delete, execute\n * - docs_page: list, read, create, update, delete\n * - target: list, read, create, update, delete\n * - tunnel: list, read, create, delete\n * - analytics: list, read\n * - log: list, read\n */\n\nexport const VIBE_PERMISSIONS = {\n  // Vibe resources\n  VIBE_LIST: 'vibe:list',\n  VIBE_READ: 'vibe:read',\n  VIBE_CREATE: 'vibe:create',\n  VIBE_UPDATE: 'vibe:update',\n  VIBE_DELETE: 'vibe:delete',\n  VIBE_SCAN: 'vibe:scan',\n  VIBE_MANAGE: 'vibe:manage',\n\n  // Agent resources\n  AGENT_LIST: 'agent:list',\n  AGENT_READ: 'agent:read',\n  AGENT_CREATE: 'agent:create',\n  AGENT_UPDATE: 'agent:update',\n  AGENT_DELETE: 'agent:delete',\n  // Elevated agent control-plane actions (gateway enforces these on\n  // remote-exec / credential / code-server control mutations).\n  AGENT_ADMIN: 'agent:admin', // set/rotate API key, nuke, dry-run\n  AGENT_MUTATE: 'agent:mutate', // code-server start/stop, plugin install\n  AGENT_INVOKE: 'agent:invoke', // execute scheduled prompt, mint agent capabilities\n\n  // Agent message bookmark resources\n  AGENT_MESSAGE_BOOKMARK_READ: 'agent-message-bookmark:read',\n  AGENT_MESSAGE_BOOKMARK_CREATE: 'agent-message-bookmark:create',\n  AGENT_MESSAGE_BOOKMARK_UPDATE: 'agent-message-bookmark:update',\n  AGENT_MESSAGE_BOOKMARK_DELETE: 'agent-message-bookmark:delete',\n\n  // Integration connection resources\n  INTEGRATION_CONNECTION_READ: 'integration-connection:read',\n\n  // Session resources\n  SESSION_LIST: 'session:list',\n  SESSION_READ: 'session:read',\n  SESSION_CREATE: 'session:create',\n  SESSION_UPDATE: 'session:update',\n  SESSION_DELETE: 'session:delete',\n  SESSION_EXECUTE: 'session:execute',\n  SESSION_SHARE: 'session:share',\n\n  // Note resources\n  NOTE_LIST: 'note:list',\n  NOTE_READ: 'note:read',\n  NOTE_CREATE: 'note:create',\n  NOTE_UPDATE: 'note:update',\n  NOTE_DELETE: 'note:delete',\n\n  // Webhook resources\n  WEBHOOK_LIST: 'webhook:list',\n  WEBHOOK_READ: 'webhook:read',\n  WEBHOOK_CREATE: 'webhook:create',\n  WEBHOOK_UPDATE: 'webhook:update',\n  WEBHOOK_DELETE: 'webhook:delete',\n\n  // VibeDeck resources\n  VIBEDECK_LIST: 'vibedeck:list',\n  VIBEDECK_READ: 'vibedeck:read',\n  VIBEDECK_CREATE: 'vibedeck:create',\n  VIBEDECK_UPDATE: 'vibedeck:update',\n  VIBEDECK_DELETE: 'vibedeck:delete',\n  VIBEDECK_EXECUTE: 'vibedeck:execute',\n  VIBEDECK_SHARE: 'vibedeck:share',\n\n  // Calendar Agent Task resources\n  CALENDAR_AGENT_TASK_LIST: 'calendar-agent-task:list',\n  CALENDAR_AGENT_TASK_READ: 'calendar-agent-task:read',\n  CALENDAR_AGENT_TASK_CREATE: 'calendar-agent-task:create',\n  CALENDAR_AGENT_TASK_UPDATE: 'calendar-agent-task:update',\n  CALENDAR_AGENT_TASK_DELETE: 'calendar-agent-task:delete',\n  CALENDAR_AGENT_TASK_EXECUTE: 'calendar-agent-task:execute',\n\n  // Schedule resources (wspace-scheduler-svc — the unified-source\n  // ScheduledJobs surfaced on the Calendar agenda live here).\n  // `scheduledJob`/`scheduledJobs` enforce `schedule:read`;\n  // `executeJobNow` enforces `schedule:execute`. Distinct from\n  // `calendar-agent-task:*` so RBAC denials don't cross-bleed\n  // between the two services.\n  SCHEDULE_LIST: 'schedule:list',\n  SCHEDULE_READ: 'schedule:read',\n  SCHEDULE_EXECUTE: 'schedule:execute',\n\n  // Configuration resources\n  CONFIG_LIST: 'configuration:list',\n  CONFIG_READ: 'configuration:read',\n  CONFIG_CREATE: 'configuration:create',\n  CONFIG_UPDATE: 'configuration:update',\n  CONFIG_DELETE: 'configuration:delete',\n\n  // Docs Site resources\n  DOCS_SITE_LIST: 'docs_site:list',\n  DOCS_SITE_READ: 'docs_site:read',\n  DOCS_SITE_CREATE: 'docs_site:create',\n  DOCS_SITE_UPDATE: 'docs_site:update',\n  DOCS_SITE_DELETE: 'docs_site:delete',\n  DOCS_COMPILE: 'docs_site:execute',\n\n  // Docs Page resources\n  DOCS_PAGE_LIST: 'docs_page:list',\n  DOCS_PAGE_READ: 'docs_page:read',\n  DOCS_PAGE_CREATE: 'docs_page:create',\n  DOCS_PAGE_UPDATE: 'docs_page:update',\n  DOCS_PAGE_DELETE: 'docs_page:delete',\n  // Docs Site generic-sharing surface (backend `shareDocs`, @rbac resource `docs_site`)\n  DOCS_SITE_SHARE: 'docs_site:share',\n\n  // Action resources\n  ACTION_LIST: 'action:list',\n  ACTION_READ: 'action:read',\n  ACTION_CREATE: 'action:create',\n  ACTION_UPDATE: 'action:update',\n  ACTION_DELETE: 'action:delete',\n  ACTION_EXECUTE: 'action:execute',\n  ACTION_SHARE: 'action:share',\n\n  // AI Prompt resources (read/CRUD seeded in BOFF-2034 follow-up)\n  AIPROMPT_READ: 'ai-prompt:read',\n  AIPROMPT_CREATE: 'ai-prompt:create',\n  AIPROMPT_UPDATE: 'ai-prompt:update',\n  AIPROMPT_DELETE: 'ai-prompt:delete',\n  AIPROMPT_SHARE: 'ai-prompt:share',\n\n  // AI Context resources (read/CRUD seeded in BOFF-2034 follow-up)\n  AICONTEXT_READ: 'ai-context:read',\n  AICONTEXT_CREATE: 'ai-context:create',\n  AICONTEXT_UPDATE: 'ai-context:update',\n  AICONTEXT_DELETE: 'ai-context:delete',\n  AICONTEXT_SHARE: 'ai-context:share',\n\n  // Agent Instruction File resources (read/CRUD seeded in BOFF-2034 follow-up)\n  INSTRUCTION_FILE_READ: 'instruction-file:read',\n  INSTRUCTION_FILE_CREATE: 'instruction-file:create',\n  INSTRUCTION_FILE_UPDATE: 'instruction-file:update',\n  INSTRUCTION_FILE_DELETE: 'instruction-file:delete',\n  INSTRUCTION_FILE_SHARE: 'instruction-file:share',\n\n  // Audit resources\n  AUDIT_LIST: 'audit:list',\n  AUDIT_READ: 'audit:read',\n  AUDIT_DELETE: 'audit:delete',\n  AUDIT_EXPORT: 'audit:export',\n\n  // Target resources — guards wired in BOFF-2034 (Remaining Pages Audit)\n  TARGET_LIST: 'target:list',\n  TARGET_READ: 'target:read',\n  TARGET_CREATE: 'target:create',\n  TARGET_UPDATE: 'target:update',\n  TARGET_DELETE: 'target:delete',\n  // Target generic-sharing surface (backend `shareTarget`, @rbac resource `target`)\n  TARGET_SHARE: 'target:share',\n\n  // Catalog resources (read/CRUD seeded in BOFF-2034 follow-up)\n  CATALOG_READ: 'catalog:read',\n  CATALOG_CREATE: 'catalog:create',\n  CATALOG_UPDATE: 'catalog:update',\n  CATALOG_DELETE: 'catalog:delete',\n  CATALOG_SHARE: 'catalog:share',\n\n  // Component resources (read/CRUD seeded in BOFF-2034 follow-up)\n  COMPONENT_READ: 'component:read',\n  COMPONENT_CREATE: 'component:create',\n  COMPONENT_UPDATE: 'component:update',\n  COMPONENT_DELETE: 'component:delete',\n  COMPONENT_SHARE: 'component:share',\n\n  // Template resources (read/CRUD seeded in BOFF-2034 follow-up)\n  TEMPLATE_READ: 'template:read',\n  TEMPLATE_CREATE: 'template:create',\n  TEMPLATE_UPDATE: 'template:update',\n  TEMPLATE_DELETE: 'template:delete',\n  TEMPLATE_SHARE: 'template:share',\n\n  // Scorecard resources. NOTE: `scorecard` is a NEW resourceType — pre-existing\n  // workspaces only grant these after their cloned roles are re-synced, so do\n  // not hard-gate a page on scorecard:* until that backfill has run.\n  SCORECARD_READ: 'scorecard:read',\n  SCORECARD_CREATE: 'scorecard:create',\n  SCORECARD_UPDATE: 'scorecard:update',\n  SCORECARD_DELETE: 'scorecard:delete',\n  SCORECARD_SHARE: 'scorecard:share',\n\n  // Tunnel resources. The svc enforces `tunnel:read` on list/detail queries\n  // (there is no seeded `tunnel:list`), `tunnel:execute` on start/stop/session\n  // control, and `tunnel:update` on edits.\n  TUNNEL_READ: 'tunnel:read',\n  TUNNEL_CREATE: 'tunnel:create',\n  TUNNEL_UPDATE: 'tunnel:update',\n  TUNNEL_DELETE: 'tunnel:delete',\n  TUNNEL_EXECUTE: 'tunnel:execute',\n  TUNNEL_SHARE: 'tunnel:share',\n\n  // Analytics resources\n  ANALYTICS_LIST: 'analytics:list',\n  ANALYTICS_READ: 'analytics:read',\n\n  // Log resources\n  LOG_LIST: 'log:list',\n  LOG_READ: 'log:read',\n} as const;\n\nexport type VibePermission = (typeof VIBE_PERMISSIONS)[keyof typeof VIBE_PERMISSIONS];\n"],"mappings":";AAqCA,IAAa,IAAmB;CAE9B,WAAW;CACX,WAAW;CACX,aAAa;CACb,aAAa;CACb,aAAa;CACb,WAAW;CACX,aAAa;CAGb,YAAY;CACZ,YAAY;CACZ,cAAc;CACd,cAAc;CACd,cAAc;CAGd,aAAa;CACb,cAAc;CACd,cAAc;CAGd,6BAA6B;CAC7B,+BAA+B;CAC/B,+BAA+B;CAC/B,+BAA+B;CAG/B,6BAA6B;CAG7B,cAAc;CACd,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,iBAAiB;CACjB,eAAe;CAGf,WAAW;CACX,WAAW;CACX,aAAa;CACb,aAAa;CACb,aAAa;CAGb,cAAc;CACd,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAGhB,eAAe;CACf,eAAe;CACf,iBAAiB;CACjB,iBAAiB;CACjB,iBAAiB;CACjB,kBAAkB;CAClB,gBAAgB;CAGhB,0BAA0B;CAC1B,0BAA0B;CAC1B,4BAA4B;CAC5B,4BAA4B;CAC5B,4BAA4B;CAC5B,6BAA6B;CAQ7B,eAAe;CACf,eAAe;CACf,kBAAkB;CAGlB,aAAa;CACb,aAAa;CACb,eAAe;CACf,eAAe;CACf,eAAe;CAGf,gBAAgB;CAChB,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAClB,cAAc;CAGd,gBAAgB;CAChB,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAElB,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,eAAe;CACf,eAAe;CACf,eAAe;CACf,gBAAgB;CAChB,cAAc;CAGd,eAAe;CACf,iBAAiB;CACjB,iBAAiB;CACjB,iBAAiB;CACjB,gBAAgB;CAGhB,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAClB,iBAAiB;CAGjB,uBAAuB;CACvB,yBAAyB;CACzB,yBAAyB;CACzB,yBAAyB;CACzB,wBAAwB;CAGxB,YAAY;CACZ,YAAY;CACZ,cAAc;CACd,cAAc;CAGd,aAAa;CACb,aAAa;CACb,eAAe;CACf,eAAe;CACf,eAAe;CAEf,cAAc;CAGd,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,eAAe;CAGf,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAClB,iBAAiB;CAGjB,eAAe;CACf,iBAAiB;CACjB,iBAAiB;CACjB,iBAAiB;CACjB,gBAAgB;CAKhB,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAClB,iBAAiB;CAKjB,aAAa;CACb,eAAe;CACf,eAAe;CACf,eAAe;CACf,gBAAgB;CAChB,cAAc;CAGd,gBAAgB;CAChB,gBAAgB;CAGhB,UAAU;CACV,UAAU;CACX"}
+{"version":3,"file":"permissions.js","names":[],"sources":["../../src/constants/permissions.ts"],"sourcesContent":["/**\n * VibeControls Permission Constants\n *\n * All permission strings for VibeControls resources.\n * Use with fe-libs usePermissions hook: hasPermission(VIBE_PERMISSIONS.VIBE_CREATE)\n *\n * IMPORTANT — only strings present in the wspace-rbac-svc seed\n * (`prisma/seed-unified-rbac.ts` ACTION_DEFINITIONS) are ever returned by\n * `myPermissions`/`hasPermission`. Gating on a string the seed does NOT\n * define makes `hasPermission` return false for EVERYONE → a full lockout.\n *\n * Read/CRUD for catalog, component, template, ai-context, ai-prompt,\n * instruction-file and docs_site were seeded in the BOFF-2034 follow-up, so\n * their pages now gate on their own resource (no more `vibe:list` proxy).\n * The new resourceTypes added in that pass (scorecard, aitoolevent,\n * docs_page, docs_revision, docs_build_image) only reach ALREADY-EXISTING\n * workspaces after their cloned roles are re-synced — do NOT hard-gate a\n * page on those until the backfill has run, or pre-existing workspaces lock\n * out.\n *\n * Resource types:\n * - vibe: list, read, create, update, delete, scan, manage\n * - agent: list, read, create, update, delete, admin, mutate, invoke\n * - session: list, read, create, update, delete, execute\n * - note: list, read, create, update, delete\n * - webhook: list, read, create, update, delete\n * - action: list, read, create, update, delete, execute\n * - calendar-agent-task: list, read, create, update, delete, execute\n * - configuration: list, read, create, update, delete\n * - docs_site: list, read, create, update, delete, execute\n * - docs_page: list, read, create, update, delete\n * - target: list, read, create, update, delete\n * - tunnel: list, read, create, delete\n * - analytics: list, read\n * - log: list, read\n */\n\nexport const VIBE_PERMISSIONS = {\n  // Vibe resources\n  VIBE_LIST: 'vibe:list',\n  VIBE_READ: 'vibe:read',\n  VIBE_CREATE: 'vibe:create',\n  VIBE_UPDATE: 'vibe:update',\n  VIBE_DELETE: 'vibe:delete',\n  VIBE_SCAN: 'vibe:scan',\n  VIBE_MANAGE: 'vibe:manage',\n\n  // Agent resources\n  AGENT_LIST: 'agent:list',\n  AGENT_READ: 'agent:read',\n  AGENT_CREATE: 'agent:create',\n  AGENT_UPDATE: 'agent:update',\n  AGENT_DELETE: 'agent:delete',\n  // Elevated agent control-plane actions (gateway enforces these on\n  // remote-exec / credential / code-server control mutations).\n  AGENT_ADMIN: 'agent:admin', // set/rotate API key, nuke, dry-run\n  AGENT_MUTATE: 'agent:mutate', // code-server start/stop, plugin install\n  AGENT_INVOKE: 'agent:invoke', // execute scheduled prompt, mint agent capabilities\n\n  // Agent message bookmark resources\n  AGENT_MESSAGE_BOOKMARK_READ: 'agent-message-bookmark:read',\n  AGENT_MESSAGE_BOOKMARK_CREATE: 'agent-message-bookmark:create',\n  AGENT_MESSAGE_BOOKMARK_UPDATE: 'agent-message-bookmark:update',\n  AGENT_MESSAGE_BOOKMARK_DELETE: 'agent-message-bookmark:delete',\n\n  // Integration connection resources\n  INTEGRATION_CONNECTION_READ: 'integration-connection:read',\n\n  // Session resources\n  SESSION_LIST: 'session:list',\n  SESSION_READ: 'session:read',\n  SESSION_CREATE: 'session:create',\n  SESSION_UPDATE: 'session:update',\n  SESSION_DELETE: 'session:delete',\n  SESSION_EXECUTE: 'session:execute',\n  SESSION_SHARE: 'session:share',\n\n  // Note resources\n  NOTE_LIST: 'note:list',\n  NOTE_READ: 'note:read',\n  NOTE_CREATE: 'note:create',\n  NOTE_UPDATE: 'note:update',\n  NOTE_DELETE: 'note:delete',\n\n  // Webhook resources\n  WEBHOOK_LIST: 'webhook:list',\n  WEBHOOK_READ: 'webhook:read',\n  WEBHOOK_CREATE: 'webhook:create',\n  WEBHOOK_UPDATE: 'webhook:update',\n  WEBHOOK_DELETE: 'webhook:delete',\n  // `testWebhook` / `triggerWebhook` enforce `webhook:execute` (seeded).\n  WEBHOOK_EXECUTE: 'webhook:execute',\n\n  // VibeDeck resources\n  VIBEDECK_LIST: 'vibedeck:list',\n  VIBEDECK_READ: 'vibedeck:read',\n  VIBEDECK_CREATE: 'vibedeck:create',\n  VIBEDECK_UPDATE: 'vibedeck:update',\n  VIBEDECK_DELETE: 'vibedeck:delete',\n  VIBEDECK_EXECUTE: 'vibedeck:execute',\n  VIBEDECK_SHARE: 'vibedeck:share',\n\n  // VibeDeck button resources — sub-resource of vibedeck. The svc enforces\n  // `vibedeck-button:*` on the button CRUD/execute mutations in vibedeck.gql\n  // (seeded in BOFF-2659, defaults mirror vibedeck). Since it is a newer\n  // resourceType, gate with the fail-open \"registered\" guard (fall back to the\n  // parent `vibedeck:*` grant when the button perms aren't in the actor's set)\n  // so pre-backfill workspaces don't lock out.\n  VIBEDECK_BUTTON_LIST: 'vibedeck-button:list',\n  VIBEDECK_BUTTON_READ: 'vibedeck-button:read',\n  VIBEDECK_BUTTON_CREATE: 'vibedeck-button:create',\n  VIBEDECK_BUTTON_UPDATE: 'vibedeck-button:update',\n  VIBEDECK_BUTTON_DELETE: 'vibedeck-button:delete',\n  VIBEDECK_BUTTON_EXECUTE: 'vibedeck-button:execute',\n\n  // Calendar Agent Task resources\n  CALENDAR_AGENT_TASK_LIST: 'calendar-agent-task:list',\n  CALENDAR_AGENT_TASK_READ: 'calendar-agent-task:read',\n  CALENDAR_AGENT_TASK_CREATE: 'calendar-agent-task:create',\n  CALENDAR_AGENT_TASK_UPDATE: 'calendar-agent-task:update',\n  CALENDAR_AGENT_TASK_DELETE: 'calendar-agent-task:delete',\n  CALENDAR_AGENT_TASK_EXECUTE: 'calendar-agent-task:execute',\n\n  // Schedule resources (wspace-scheduler-svc — the unified-source\n  // ScheduledJobs surfaced on the Calendar agenda live here).\n  // `scheduledJob`/`scheduledJobs` enforce `schedule:read`;\n  // `executeJobNow` enforces `schedule:execute`. Distinct from\n  // `calendar-agent-task:*` so RBAC denials don't cross-bleed\n  // between the two services.\n  SCHEDULE_LIST: 'schedule:list',\n  SCHEDULE_READ: 'schedule:read',\n  SCHEDULE_EXECUTE: 'schedule:execute',\n\n  // Configuration resources\n  CONFIG_LIST: 'configuration:list',\n  CONFIG_READ: 'configuration:read',\n  CONFIG_CREATE: 'configuration:create',\n  CONFIG_UPDATE: 'configuration:update',\n  CONFIG_DELETE: 'configuration:delete',\n\n  // Docs Site resources\n  DOCS_SITE_LIST: 'docs_site:list',\n  DOCS_SITE_READ: 'docs_site:read',\n  DOCS_SITE_CREATE: 'docs_site:create',\n  DOCS_SITE_UPDATE: 'docs_site:update',\n  DOCS_SITE_DELETE: 'docs_site:delete',\n  DOCS_COMPILE: 'docs_site:execute',\n\n  // Docs Page resources\n  DOCS_PAGE_LIST: 'docs_page:list',\n  DOCS_PAGE_READ: 'docs_page:read',\n  DOCS_PAGE_CREATE: 'docs_page:create',\n  DOCS_PAGE_UPDATE: 'docs_page:update',\n  DOCS_PAGE_DELETE: 'docs_page:delete',\n  // Docs Site generic-sharing surface (backend `shareDocs`, @rbac resource `docs_site`)\n  DOCS_SITE_SHARE: 'docs_site:share',\n\n  // Action resources\n  ACTION_LIST: 'action:list',\n  ACTION_READ: 'action:read',\n  ACTION_CREATE: 'action:create',\n  ACTION_UPDATE: 'action:update',\n  ACTION_DELETE: 'action:delete',\n  ACTION_EXECUTE: 'action:execute',\n  ACTION_SHARE: 'action:share',\n\n  // AI Prompt resources (read/CRUD seeded in BOFF-2034 follow-up)\n  AIPROMPT_READ: 'ai-prompt:read',\n  AIPROMPT_CREATE: 'ai-prompt:create',\n  AIPROMPT_UPDATE: 'ai-prompt:update',\n  AIPROMPT_DELETE: 'ai-prompt:delete',\n  AIPROMPT_SHARE: 'ai-prompt:share',\n\n  // AI Context resources (read/CRUD seeded in BOFF-2034 follow-up)\n  AICONTEXT_READ: 'ai-context:read',\n  AICONTEXT_CREATE: 'ai-context:create',\n  AICONTEXT_UPDATE: 'ai-context:update',\n  AICONTEXT_DELETE: 'ai-context:delete',\n  AICONTEXT_SHARE: 'ai-context:share',\n\n  // Agent Instruction File resources (read/CRUD seeded in BOFF-2034 follow-up)\n  INSTRUCTION_FILE_READ: 'instruction-file:read',\n  INSTRUCTION_FILE_CREATE: 'instruction-file:create',\n  INSTRUCTION_FILE_UPDATE: 'instruction-file:update',\n  INSTRUCTION_FILE_DELETE: 'instruction-file:delete',\n  INSTRUCTION_FILE_SHARE: 'instruction-file:share',\n\n  // Audit resources\n  AUDIT_LIST: 'audit:list',\n  AUDIT_READ: 'audit:read',\n  AUDIT_DELETE: 'audit:delete',\n  AUDIT_EXPORT: 'audit:export',\n\n  // Target resources — guards wired in BOFF-2034 (Remaining Pages Audit)\n  TARGET_LIST: 'target:list',\n  TARGET_READ: 'target:read',\n  TARGET_CREATE: 'target:create',\n  TARGET_UPDATE: 'target:update',\n  TARGET_DELETE: 'target:delete',\n  // Target generic-sharing surface (backend `shareTarget`, @rbac resource `target`)\n  TARGET_SHARE: 'target:share',\n\n  // Catalog resources (read/CRUD seeded in BOFF-2034 follow-up)\n  CATALOG_READ: 'catalog:read',\n  CATALOG_CREATE: 'catalog:create',\n  CATALOG_UPDATE: 'catalog:update',\n  CATALOG_DELETE: 'catalog:delete',\n  CATALOG_SHARE: 'catalog:share',\n\n  // Component resources (read/CRUD seeded in BOFF-2034 follow-up)\n  COMPONENT_READ: 'component:read',\n  COMPONENT_CREATE: 'component:create',\n  COMPONENT_UPDATE: 'component:update',\n  COMPONENT_DELETE: 'component:delete',\n  COMPONENT_SHARE: 'component:share',\n\n  // Template resources (read/CRUD seeded in BOFF-2034 follow-up)\n  TEMPLATE_READ: 'template:read',\n  TEMPLATE_CREATE: 'template:create',\n  TEMPLATE_UPDATE: 'template:update',\n  TEMPLATE_DELETE: 'template:delete',\n  TEMPLATE_SHARE: 'template:share',\n\n  // Scorecard resources. NOTE: `scorecard` is a NEW resourceType — pre-existing\n  // workspaces only grant these after their cloned roles are re-synced, so do\n  // not hard-gate a page on scorecard:* until that backfill has run.\n  SCORECARD_READ: 'scorecard:read',\n  SCORECARD_CREATE: 'scorecard:create',\n  SCORECARD_UPDATE: 'scorecard:update',\n  SCORECARD_DELETE: 'scorecard:delete',\n  SCORECARD_SHARE: 'scorecard:share',\n\n  // Tunnel resources. The svc enforces `tunnel:read` on list/detail queries\n  // (there is no seeded `tunnel:list`), `tunnel:execute` on start/stop/session\n  // control, and `tunnel:update` on edits.\n  TUNNEL_READ: 'tunnel:read',\n  TUNNEL_CREATE: 'tunnel:create',\n  TUNNEL_UPDATE: 'tunnel:update',\n  TUNNEL_DELETE: 'tunnel:delete',\n  TUNNEL_EXECUTE: 'tunnel:execute',\n  TUNNEL_SHARE: 'tunnel:share',\n\n  // Analytics resources\n  ANALYTICS_LIST: 'analytics:list',\n  ANALYTICS_READ: 'analytics:read',\n\n  // Log resources\n  LOG_LIST: 'log:list',\n  LOG_READ: 'log:read',\n} as const;\n\nexport type VibePermission = (typeof VIBE_PERMISSIONS)[keyof typeof VIBE_PERMISSIONS];\n"],"mappings":";AAqCA,IAAa,IAAmB;CAE9B,WAAW;CACX,WAAW;CACX,aAAa;CACb,aAAa;CACb,aAAa;CACb,WAAW;CACX,aAAa;CAGb,YAAY;CACZ,YAAY;CACZ,cAAc;CACd,cAAc;CACd,cAAc;CAGd,aAAa;CACb,cAAc;CACd,cAAc;CAGd,6BAA6B;CAC7B,+BAA+B;CAC/B,+BAA+B;CAC/B,+BAA+B;CAG/B,6BAA6B;CAG7B,cAAc;CACd,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,iBAAiB;CACjB,eAAe;CAGf,WAAW;CACX,WAAW;CACX,aAAa;CACb,aAAa;CACb,aAAa;CAGb,cAAc;CACd,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAEhB,iBAAiB;CAGjB,eAAe;CACf,eAAe;CACf,iBAAiB;CACjB,iBAAiB;CACjB,iBAAiB;CACjB,kBAAkB;CAClB,gBAAgB;CAQhB,sBAAsB;CACtB,sBAAsB;CACtB,wBAAwB;CACxB,wBAAwB;CACxB,wBAAwB;CACxB,yBAAyB;CAGzB,0BAA0B;CAC1B,0BAA0B;CAC1B,4BAA4B;CAC5B,4BAA4B;CAC5B,4BAA4B;CAC5B,6BAA6B;CAQ7B,eAAe;CACf,eAAe;CACf,kBAAkB;CAGlB,aAAa;CACb,aAAa;CACb,eAAe;CACf,eAAe;CACf,eAAe;CAGf,gBAAgB;CAChB,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAClB,cAAc;CAGd,gBAAgB;CAChB,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAElB,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,eAAe;CACf,eAAe;CACf,eAAe;CACf,gBAAgB;CAChB,cAAc;CAGd,eAAe;CACf,iBAAiB;CACjB,iBAAiB;CACjB,iBAAiB;CACjB,gBAAgB;CAGhB,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAClB,iBAAiB;CAGjB,uBAAuB;CACvB,yBAAyB;CACzB,yBAAyB;CACzB,yBAAyB;CACzB,wBAAwB;CAGxB,YAAY;CACZ,YAAY;CACZ,cAAc;CACd,cAAc;CAGd,aAAa;CACb,aAAa;CACb,eAAe;CACf,eAAe;CACf,eAAe;CAEf,cAAc;CAGd,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,eAAe;CAGf,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAClB,iBAAiB;CAGjB,eAAe;CACf,iBAAiB;CACjB,iBAAiB;CACjB,iBAAiB;CACjB,gBAAgB;CAKhB,gBAAgB;CAChB,kBAAkB;CAClB,kBAAkB;CAClB,kBAAkB;CAClB,iBAAiB;CAKjB,aAAa;CACb,eAAe;CACf,eAAe;CACf,eAAe;CACf,gBAAgB;CAChB,cAAc;CAGd,gBAAgB;CAChB,gBAAgB;CAGhB,UAAU;CACV,UAAU;CACX"}