@cellarnode/ui 0.193.0 → 0.195.0

package/dist/profile/api-keys/index.d.ts

@@ -0,0 +1,19 @@
+export { ApiKeysCard } from "./api-keys-card.js";
+export type { ApiKeysCardLabels, ApiKeysCardProps } from "./api-keys-card.js";
+export { CreateApiKeyDialog } from "./create-api-key-dialog.js";
+export type { CreateApiKeyDialogLabels, CreateApiKeyDialogProps } from "./create-api-key-dialog.js";
+export { ApiKeySecretReveal } from "./api-key-secret-reveal.js";
+export type { ApiKeySecretRevealLabels, ApiKeySecretRevealProps } from "./api-key-secret-reveal.js";
+export { RevokeApiKeyConfirm, RevokeConnectedAppConfirm } from "./revoke-confirm.js";
+export type { RevokeConfirmLabels } from "./revoke-confirm.js";
+export { ConnectedAppsCard } from "./connected-apps-card.js";
+export type { ConnectedAppsCardLabels, ConnectedAppsCardProps } from "./connected-apps-card.js";
+export { ProfileKeysSection } from "./profile-keys-section.js";
+export type { ProfileKeysSectionLabels, ProfileKeysSectionProps } from "./profile-keys-section.js";
+export { buildClientSnippets } from "./client-snippets.js";
+export type { ClientSnippet, ClientSnippetId } from "./client-snippets.js";
+export { createMockProfileKeysClient, sampleGrants, sampleKeys } from "./mock-client.js";
+export type { MockClientOptions } from "./mock-client.js";
+export { API_KEY_LIMITS, API_KEY_SURFACES, MCP_BASE_URL, SURFACE_CATALOG, mcpUrl, scopeLabel, summarizeScopes, } from "./types.js";
+export type { ApiKeyRow, ApiKeyStatus, ApiKeySurface, CreateApiKeyInput, CreatedApiKey, OAuthGrantRow, ProfileKeysClient, ScopeInfo, SurfaceInfo, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/profile/api-keys/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/profile/api-keys/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAClF,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACtF,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,MAAM,EACN,UAAU,EACV,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,SAAS,EACT,WAAW,GACZ,MAAM,SAAS,CAAC"}

package/dist/profile/api-keys/index.js

@@ -0,0 +1,10 @@
+export { ApiKeysCard } from "./api-keys-card.js";
+export { CreateApiKeyDialog } from "./create-api-key-dialog.js";
+export { ApiKeySecretReveal } from "./api-key-secret-reveal.js";
+export { RevokeApiKeyConfirm, RevokeConnectedAppConfirm } from "./revoke-confirm.js";
+export { ConnectedAppsCard } from "./connected-apps-card.js";
+export { ProfileKeysSection } from "./profile-keys-section.js";
+export { buildClientSnippets } from "./client-snippets.js";
+export { createMockProfileKeysClient, sampleGrants, sampleKeys } from "./mock-client.js";
+export { API_KEY_LIMITS, API_KEY_SURFACES, MCP_BASE_URL, SURFACE_CATALOG, mcpUrl, scopeLabel, summarizeScopes, } from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/profile/api-keys/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/profile/api-keys/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAElF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,2BAA2B,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEtF,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,MAAM,EACN,UAAU,EACV,eAAe,GAChB,MAAM,SAAS,CAAC"}

package/dist/profile/api-keys/mock-client.d.ts

@@ -0,0 +1,23 @@
+import { type ApiKeyRow, type OAuthGrantRow, type ProfileKeysClient } from "./types.js";
+export interface MockClientOptions {
+    keys?: ApiKeyRow[];
+    grants?: OAuthGrantRow[];
+    /** Artificial latency, ms. Default 0. */
+    delayMs?: number;
+    /** Make a method reject, for error-state stories. */
+    failOn?: Partial<Record<keyof ProfileKeysClient, string>>;
+    now?: number;
+}
+/**
+ * In-memory {@link ProfileKeysClient} for Storybook, tests and dashboard demos (the real
+ * backend routes, T11, are not built yet). The generated key has the real shape
+ * (`cnp_` + 43 chars + `_` + 6) but is random and works nowhere.
+ */
+export declare function createMockProfileKeysClient(options?: MockClientOptions): ProfileKeysClient & {
+    /** Every raw key this mock ever issued, so tests can assert the secret never reappears. */
+    readonly issued: string[];
+};
+/** Realistic sample rows, relative to `now`, for stories. */
+export declare function sampleKeys(now: number): ApiKeyRow[];
+export declare function sampleGrants(now: number): OAuthGrantRow[];
+//# sourceMappingURL=mock-client.d.ts.map

package/dist/profile/api-keys/mock-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-client.d.ts","sourceRoot":"","sources":["../../../src/profile/api-keys/mock-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,SAAS,EAGd,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,SAAS,CAAC;AAIjB,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAMD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,iBAAsB,GAAG,iBAAiB,GAAG;IAChG,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CAC3B,CAuDA;AAED,6DAA6D;AAC7D,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,CAoEnD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,EAAE,CAgCzD"}

package/dist/profile/api-keys/mock-client.js

@@ -0,0 +1,167 @@
+import { API_KEY_LIMITS, } from "./types.js";
+const DAY = 86_400_000;
+const BASE62 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+const randomPart = (n) => Array.from({ length: n }, () => BASE62[Math.floor(Math.random() * BASE62.length)]).join("");
+/**
+ * In-memory {@link ProfileKeysClient} for Storybook, tests and dashboard demos (the real
+ * backend routes, T11, are not built yet). The generated key has the real shape
+ * (`cnp_` + 43 chars + `_` + 6) but is random and works nowhere.
+ */
+export function createMockProfileKeysClient(options = {}) {
+    const now = options.now ?? Date.now();
+    let keys = [...(options.keys ?? [])];
+    let grants = [...(options.grants ?? [])];
+    const issued = [];
+    const wait = () => new Promise((resolve) => setTimeout(resolve, options.delayMs ?? 0));
+    const guard = async (method) => {
+        await wait();
+        const failure = options.failOn?.[method];
+        if (failure !== undefined)
+            throw new Error(failure);
+    };
+    return {
+        issued,
+        async listKeys() {
+            await guard("listKeys");
+            return keys.map((k) => ({ ...k }));
+        },
+        async createKey(input) {
+            await guard("createKey");
+            const key = `cnp_${randomPart(43)}_${randomPart(6)}`;
+            issued.push(key);
+            const expiresAt = input.expiresAt !== undefined
+                ? input.expiresAt
+                : new Date(now + (input.expiresInDays ?? API_KEY_LIMITS.defaultExpiryDays) * DAY).toISOString();
+            const row = {
+                id: `key-${keys.length + 1}-${randomPart(4)}`,
+                name: input.name,
+                surface: input.surface,
+                scopes: input.scopes,
+                prefix: key.slice(0, 12),
+                hint: key.slice(-4),
+                createdAt: new Date(now).toISOString(),
+                expiresAt,
+                lastUsedAt: null,
+                status: "active",
+            };
+            keys = [row, ...keys];
+            return { ...row, key };
+        },
+        async revokeKey(id) {
+            await guard("revokeKey");
+            keys = keys.map((k) => (k.id === id ? { ...k, status: "revoked" } : k));
+        },
+        async listGrants() {
+            await guard("listGrants");
+            return grants.map((g) => ({ ...g }));
+        },
+        async revokeGrant(id) {
+            await guard("revokeGrant");
+            grants = grants.filter((g) => g.id !== id);
+        },
+    };
+}
+/** Realistic sample rows, relative to `now`, for stories. */
+export function sampleKeys(now) {
+    const iso = (offsetDays) => new Date(now + offsetDays * DAY).toISOString();
+    return [
+        {
+            id: "k1",
+            name: "Claude Code on my laptop",
+            surface: "producer",
+            scopes: [
+                "portfolios:read",
+                "beverages:read",
+                "variants:read",
+                "offers:read",
+                "tenders:read",
+                "matching:read",
+                "extraction:read",
+            ],
+            prefix: "cnp_Zk3p9Qx2",
+            hint: "f8Ke",
+            createdAt: iso(-40),
+            expiresAt: iso(50),
+            lastUsedAt: iso(-0.01),
+            status: "active",
+        },
+        {
+            id: "k2",
+            name: "xAI research agent",
+            surface: "readonly",
+            scopes: [
+                "portfolios:read",
+                "beverages:read",
+                "variants:read",
+                "offers:read",
+                "tenders:read",
+                "matching:read",
+                "extraction:read",
+            ],
+            prefix: "cnp_Mn84LpA1",
+            hint: "q9Tz",
+            createdAt: iso(-12),
+            expiresAt: iso(78),
+            lastUsedAt: iso(-3),
+            status: "active",
+        },
+        {
+            id: "k3",
+            name: "Old CI experiment",
+            surface: "producer",
+            scopes: ["offers:read", "offers:write"],
+            prefix: "cnp_Hd02VbC7",
+            hint: "a1Xc",
+            createdAt: iso(-200),
+            expiresAt: iso(-20),
+            lastUsedAt: iso(-45),
+            status: "expired",
+        },
+        {
+            id: "k4",
+            name: "Cursor (leaked, rotated)",
+            surface: "producer",
+            scopes: ["beverages:read"],
+            prefix: "cnp_Rt55NwE3",
+            hint: "b7Lm",
+            createdAt: iso(-90),
+            expiresAt: iso(0.5),
+            lastUsedAt: null,
+            status: "revoked",
+        },
+    ];
+}
+export function sampleGrants(now) {
+    const iso = (offsetDays) => new Date(now + offsetDays * DAY).toISOString();
+    return [
+        {
+            id: "g1",
+            clientName: "ChatGPT",
+            clientHost: "chatgpt.com",
+            unverified: false,
+            surface: "producer",
+            scopes: ["portfolios:read", "beverages:read", "variants:read", "offers:read", "offers:write"],
+            createdAt: iso(-30),
+            lastUsedAt: iso(-1),
+        },
+        {
+            id: "g2",
+            clientName: "my-weekend-agent",
+            clientHost: "localhost",
+            unverified: true,
+            surface: "readonly",
+            scopes: [
+                "portfolios:read",
+                "beverages:read",
+                "variants:read",
+                "offers:read",
+                "tenders:read",
+                "matching:read",
+                "extraction:read",
+            ],
+            createdAt: iso(-3),
+            lastUsedAt: null,
+        },
+    ];
+}
+//# sourceMappingURL=mock-client.js.map

package/dist/profile/api-keys/mock-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-client.js","sourceRoot":"","sources":["../../../src/profile/api-keys/mock-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,GAMf,MAAM,SAAS,CAAC;AAEjB,MAAM,GAAG,GAAG,UAAU,CAAC;AAYvB,MAAM,MAAM,GAAG,gEAAgE,CAAC;AAChF,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE9F;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAA6B,EAAE;IAIzE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QACtD,MAAM,IAAI,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,OAAO;QACL,MAAM;QACN,KAAK,CAAC,QAAQ;YACZ,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAwB;YACtC,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;YACzB,MAAM,GAAG,GAAG,OAAO,UAAU,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM,SAAS,GACb,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC3B,CAAC,CAAC,KAAK,CAAC,SAAS;gBACjB,CAAC,CAAC,IAAI,IAAI,CACN,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,cAAc,CAAC,iBAAiB,CAAC,GAAG,GAAG,CACtE,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,GAAG,GAAc;gBACrB,EAAE,EAAE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE;gBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACxB,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;gBACtC,SAAS;gBACT,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,QAAQ;aACjB,CAAC;YACF,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YACtB,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,EAAE;YAChB,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;YACzB,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,KAAK,CAAC,UAAU;YACd,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,EAAE;YAClB,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;YAC3B,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,GAAG,GAAG,CAAC,UAAkB,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACnF,OAAO;QACL;YACE,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE;gBACN,iBAAiB;gBACjB,gBAAgB;gBAChB,eAAe;gBACf,aAAa;gBACb,cAAc;gBACd,eAAe;gBACf,iBAAiB;aAClB;YACD,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACnB,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;YAClB,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;YACtB,MAAM,EAAE,QAAQ;SACjB;QACD;YACE,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE;gBACN,iBAAiB;gBACjB,gBAAgB;gBAChB,eAAe;gBACf,aAAa;gBACb,cAAc;gBACd,eAAe;gBACf,iBAAiB;aAClB;YACD,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACnB,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;YAClB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,EAAE,QAAQ;SACjB;QACD;YACE,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;YACvC,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;YACpB,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACnB,UAAU,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACpB,MAAM,EAAE,SAAS;SAClB;QACD;YACE,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,CAAC,gBAAgB,CAAC;YAC1B,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACnB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC;YACnB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,SAAS;SAClB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,GAAG,GAAG,CAAC,UAAkB,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACnF,OAAO;QACL;YACE,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,aAAa;YACzB,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,CAAC;YAC7F,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACnB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;SACpB;QACD;YACE,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,kBAAkB;YAC9B,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE;gBACN,iBAAiB;gBACjB,gBAAgB;gBAChB,eAAe;gBACf,aAAa;gBACb,cAAc;gBACd,eAAe;gBACf,iBAAiB;aAClB;YACD,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,UAAU,EAAE,IAAI;SACjB;KACF,CAAC;AACJ,CAAC"}

package/dist/profile/api-keys/profile-keys-section.d.ts

@@ -0,0 +1,36 @@
+import { type ApiKeySecretRevealLabels } from "./api-key-secret-reveal.js";
+import { type ApiKeysCardLabels } from "./api-keys-card.js";
+import { type ConnectedAppsCardLabels } from "./connected-apps-card.js";
+import { type CreateApiKeyDialogLabels } from "./create-api-key-dialog.js";
+import { type RevokeConfirmLabels } from "./revoke-confirm.js";
+import type { ApiKeySurface, ProfileKeysClient } from "./types.js";
+export interface ProfileKeysSectionLabels {
+    keys?: ApiKeysCardLabels;
+    grants?: ConnectedAppsCardLabels;
+    create?: CreateApiKeyDialogLabels;
+    secret?: ApiKeySecretRevealLabels;
+    revokeKey?: RevokeConfirmLabels;
+    revokeApp?: RevokeConfirmLabels;
+    /** Shown when a revoke fails. */
+    actionFailed?: string;
+    /** Announced after a key is revoked. "{name}" placeholder. */
+    keyRevoked?: string;
+    /** Announced after an app is disconnected. "{name}" placeholder. */
+    appDisconnected?: string;
+}
+export interface ProfileKeysSectionProps {
+    client: ProfileKeysClient;
+    /** Surfaces this org may offer when creating a key (never `admin`). */
+    surfaces?: readonly ApiKeySurface[] | undefined;
+    locale?: string | undefined;
+    now?: number | undefined;
+    mcpBaseUrl?: string | undefined;
+    labels?: ProfileKeysSectionLabels | undefined;
+    className?: string | undefined;
+}
+/**
+ * Both cards plus every dialog, wired to an injected {@link ProfileKeysClient}. Dashboards render
+ * this once (between the subscription and account-actions cards) and pass their own client.
+ */
+export declare function ProfileKeysSection({ client, surfaces, locale, now, mcpBaseUrl, labels, className, }: ProfileKeysSectionProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=profile-keys-section.d.ts.map

package/dist/profile/api-keys/profile-keys-section.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-keys-section.d.ts","sourceRoot":"","sources":["../../../src/profile/api-keys/profile-keys-section.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAsB,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAqB,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAsB,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAEV,aAAa,EAIb,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAiCjB,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,MAAM,CAAC,EAAE,uBAAuB,CAAC;IACjC,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,iCAAiC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,MAAM,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC9C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,MAAM,EACN,QAAQ,EACR,MAAM,EACN,GAAG,EACH,UAAU,EACV,MAAM,EACN,SAAS,GACV,EAAE,uBAAuB,2CAsJzB"}

package/dist/profile/api-keys/profile-keys-section.js

@@ -0,0 +1,97 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import * as React from "react";
+import { fmt } from "./format.js";
+import { ApiKeySecretReveal } from "./api-key-secret-reveal.js";
+import { ApiKeysCard } from "./api-keys-card.js";
+import { ConnectedAppsCard } from "./connected-apps-card.js";
+import { CreateApiKeyDialog } from "./create-api-key-dialog.js";
+import { RevokeApiKeyConfirm, RevokeConnectedAppConfirm, } from "./revoke-confirm.js";
+function useLoader(client, method) {
+    const [state, setState] = React.useState({
+        data: undefined,
+        isLoading: true,
+        isError: false,
+    });
+    const [tick, setTick] = React.useState(0);
+    React.useEffect(() => {
+        let live = true;
+        // eslint-disable-next-line @eslint-react/set-state-in-effect -- a reload returns to the loading state; the result arrives async
+        setState((s) => ({ ...s, isLoading: s.data === undefined, isError: false }));
+        client[method]().then((data) => live && setState({ data, isLoading: false, isError: false }), () => live && setState((s) => ({ ...s, isLoading: false, isError: true })));
+        return () => {
+            live = false;
+        };
+    }, [client, method, tick]);
+    return { ...state, reload: () => setTick((n) => n + 1) };
+}
+/**
+ * Both cards plus every dialog, wired to an injected {@link ProfileKeysClient}. Dashboards render
+ * this once (between the subscription and account-actions cards) and pass their own client.
+ */
+export function ProfileKeysSection({ client, surfaces, locale, now, mcpBaseUrl, labels, className, }) {
+    const keys = useLoader(client, "listKeys");
+    const grants = useLoader(client, "listGrants");
+    const [creating, setCreating] = React.useState(false);
+    const [revealed, setRevealed] = React.useState(null);
+    const [revokingKey, setRevokingKey] = React.useState(null);
+    const [revokingApp, setRevokingApp] = React.useState(null);
+    const [actionError, setActionError] = React.useState(false);
+    const [notice, setNotice] = React.useState("");
+    React.useEffect(() => {
+        if (!notice)
+            return;
+        const t = setTimeout(() => setNotice(""), 8000);
+        return () => clearTimeout(t);
+    }, [notice]);
+    const ids = React.useId();
+    const keysHeadingId = `${ids}-keys`;
+    const appsHeadingId = `${ids}-apps`;
+    // After a revoke the row that opened the dialog is gone. The dialog reports when it has left the
+    // DOM (`onClosed`), and only then do we move focus to the card heading.
+    const pendingFocus = React.useRef(null);
+    const afterDialogClosed = () => {
+        const id = pendingFocus.current;
+        pendingFocus.current = null;
+        if (id)
+            requestAnimationFrame(() => document.getElementById(id)?.focus());
+    };
+    const create = async (input) => {
+        const created = await client.createKey(input);
+        setCreating(false);
+        setRevealed({ key: created.key, name: created.name, surface: created.surface });
+        keys.reload();
+    };
+    const guarded = async (run, done, headingId) => {
+        setActionError(false);
+        setNotice("");
+        try {
+            setNotice(await run());
+        }
+        catch {
+            setActionError(true);
+        }
+        finally {
+            done();
+            // The row that held focus is gone: send focus to the card heading.
+            pendingFocus.current = headingId;
+        }
+    };
+    return (_jsxs("div", { className: className ? `flex flex-col gap-6 ${className}` : "flex flex-col gap-6", children: [_jsx("div", { role: "status", className: notice
+                    ? "rounded-lg bg-(--tone-success-soft) px-3 py-2 text-sm/6 text-(--tone-success-fg)"
+                    : "sr-only", children: notice }), actionError ? (_jsx("p", { role: "alert", className: "rounded-lg bg-(--tone-danger-soft) px-3 py-2 text-sm/6 text-(--tone-danger-fg)", children: labels?.actionFailed ?? "That did not work. Try again." })) : null, _jsx(ApiKeysCard, { keys: keys.data, isLoading: keys.isLoading, isError: keys.isError, onRetry: keys.reload, onCreate: () => setCreating(true), onRevoke: setRevokingKey, headingId: keysHeadingId, locale: locale, now: now, labels: labels?.keys }), _jsx(ConnectedAppsCard, { grants: grants.data, isLoading: grants.isLoading, isError: grants.isError, onRetry: grants.reload, onRevoke: setRevokingApp, headingId: appsHeadingId, locale: locale, now: now, labels: labels?.grants }), _jsx(CreateApiKeyDialog, { open: creating, onClose: () => setCreating(false), onSubmit: create, surfaces: surfaces, now: now, labels: labels?.create }), _jsx(ApiKeySecretReveal, { secret: revealed?.key ?? null, keyName: revealed?.name ?? "", surface: revealed?.surface ?? "readonly", mcpBaseUrl: mcpBaseUrl, labels: labels?.secret, onClose: () => setRevealed(null) }), _jsx(RevokeApiKeyConfirm, { apiKey: revokingKey, labels: labels?.revokeKey, onClosed: afterDialogClosed, onClose: () => setRevokingKey(null), onConfirm: () => guarded(async () => {
+                    if (!revokingKey)
+                        return "";
+                    await client.revokeKey(revokingKey.id);
+                    keys.reload();
+                    return fmt(labels?.keyRevoked ?? "Key {name} revoked.", { name: revokingKey.name });
+                }, () => setRevokingKey(null), keysHeadingId) }), _jsx(RevokeConnectedAppConfirm, { grant: revokingApp, labels: labels?.revokeApp, onClosed: afterDialogClosed, onClose: () => setRevokingApp(null), onConfirm: () => guarded(async () => {
+                    if (!revokingApp)
+                        return "";
+                    await client.revokeGrant(revokingApp.id);
+                    grants.reload();
+                    return fmt(labels?.appDisconnected ?? "{name} disconnected.", {
+                        name: revokingApp.clientName,
+                    });
+                }, () => setRevokingApp(null), appsHeadingId) })] }));
+}
+//# sourceMappingURL=profile-keys-section.js.map

package/dist/profile/api-keys/profile-keys-section.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-keys-section.js","sourceRoot":"","sources":["../../../src/profile/api-keys/profile-keys-section.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAiC,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,WAAW,EAA0B,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAgC,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAiC,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAE1B,MAAM,kBAAkB,CAAC;AAgB1B,SAAS,SAAS,CAChB,MAAyB,EACzB,MAAiC;IAEjC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAY;QAClD,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1C,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,gIAAgI;QAChI,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,EAAiB,CAAC,IAAI,CACnC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EACtE,GAAG,EAAE,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAC3E,CAAC;QACF,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,KAAK,CAAC;QACf,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AA4BD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,MAAM,EACN,QAAQ,EACR,MAAM,EACN,GAAG,EACH,UAAU,EACV,MAAM,EACN,SAAS,GACe;IACxB,MAAM,IAAI,GAAG,SAAS,CAAc,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,SAAS,CAAkB,MAAM,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC,QAAQ,CAIpC,IAAI,CAAC,CAAC;IAChB,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAmB,IAAI,CAAC,CAAC;IAC7E,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAuB,IAAI,CAAC,CAAC;IACjF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IAC1B,MAAM,aAAa,GAAG,GAAG,GAAG,OAAO,CAAC;IACpC,MAAM,aAAa,GAAG,GAAG,GAAG,OAAO,CAAC;IACpC,iGAAiG;IACjG,wEAAwE;IACxE,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAgB,IAAI,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,GAAG,EAAE;QAC7B,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC;QAChC,YAAY,CAAC,OAAO,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE;YAAE,qBAAqB,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,KAAwB,EAAE,EAAE;QAChD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9C,WAAW,CAAC,KAAK,CAAC,CAAC;QACnB,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EAAE,GAA0B,EAAE,IAAgB,EAAE,SAAiB,EAAE,EAAE;QACxF,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC;YACH,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAC;YACP,mEAAmE;YACnE,YAAY,CAAC,OAAO,GAAG,SAAS,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,eAAK,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC,CAAC,qBAAqB,aACpF,cACE,IAAI,EAAC,QAAQ,EACb,SAAS,EACP,MAAM;oBACJ,CAAC,CAAC,kFAAkF;oBACpF,CAAC,CAAC,SAAS,YAGd,MAAM,GACH,EACL,WAAW,CAAC,CAAC,CAAC,CACb,YACE,IAAI,EAAC,OAAO,EACZ,SAAS,EAAC,gFAAgF,YAEzF,MAAM,EAAE,YAAY,IAAI,+BAA+B,GACtD,CACL,CAAC,CAAC,CAAC,IAAI,EACR,KAAC,WAAW,IACV,IAAI,EAAE,IAAI,CAAC,IAAI,EACf,SAAS,EAAE,IAAI,CAAC,SAAS,EACzB,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,OAAO,EAAE,IAAI,CAAC,MAAM,EACpB,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EACjC,QAAQ,EAAE,cAAc,EACxB,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,MAAM,EAAE,IAAI,GACpB,EACF,KAAC,iBAAiB,IAChB,MAAM,EAAE,MAAM,CAAC,IAAI,EACnB,SAAS,EAAE,MAAM,CAAC,SAAS,EAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,EACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EACtB,QAAQ,EAAE,cAAc,EACxB,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,MAAM,EAAE,MAAM,GACtB,EACF,KAAC,kBAAkB,IACjB,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,MAAM,EAAE,MAAM,GACtB,EACF,KAAC,kBAAkB,IACjB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,EAC7B,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,EAC7B,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,UAAU,EACxC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,EAAE,MAAM,EACtB,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAChC,EACF,KAAC,mBAAmB,IAClB,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,MAAM,EAAE,SAAS,EACzB,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EACnC,SAAS,EAAE,GAAG,EAAE,CACd,OAAO,CACL,KAAK,IAAI,EAAE;oBACT,IAAI,CAAC,WAAW;wBAAE,OAAO,EAAE,CAAC;oBAC5B,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;oBACvC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACd,OAAO,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,qBAAqB,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtF,CAAC,EACD,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAC1B,aAAa,CACd,GAEH,EACF,KAAC,yBAAyB,IACxB,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,MAAM,EAAE,SAAS,EACzB,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EACnC,SAAS,EAAE,GAAG,EAAE,CACd,OAAO,CACL,KAAK,IAAI,EAAE;oBACT,IAAI,CAAC,WAAW;wBAAE,OAAO,EAAE,CAAC;oBAC5B,MAAM,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;oBACzC,MAAM,CAAC,MAAM,EAAE,CAAC;oBAChB,OAAO,GAAG,CAAC,MAAM,EAAE,eAAe,IAAI,sBAAsB,EAAE;wBAC5D,IAAI,EAAE,WAAW,CAAC,UAAU;qBAC7B,CAAC,CAAC;gBACL,CAAC,EACD,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAC1B,aAAa,CACd,GAEH,IACE,CACP,CAAC;AACJ,CAAC"}

package/dist/profile/api-keys/revoke-confirm.d.ts

@@ -0,0 +1,26 @@
+import type { ApiKeyRow, OAuthGrantRow } from "./types.js";
+export interface RevokeConfirmLabels {
+    /** "{name}" placeholder. */
+    title?: string;
+    description?: string;
+    warning?: string;
+    confirm?: string;
+    cancel?: string;
+}
+interface BaseProps {
+    onClose: () => void;
+    /** Resolve to close; the button shows a loading state meanwhile. */
+    onConfirm: () => void | Promise<void>;
+    isPending?: boolean;
+    /** Called after the dialog left the DOM (to move focus somewhere that still exists). */
+    onClosed?: (() => void) | undefined;
+    labels?: RevokeConfirmLabels | undefined;
+}
+export declare function RevokeApiKeyConfirm({ apiKey, onClose, onConfirm, isPending, onClosed, labels, }: BaseProps & {
+    apiKey: ApiKeyRow | null;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function RevokeConnectedAppConfirm({ grant, onClose, onConfirm, isPending, onClosed, labels, }: BaseProps & {
+    grant: OAuthGrantRow | null;
+}): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=revoke-confirm.d.ts.map

package/dist/profile/api-keys/revoke-confirm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke-confirm.d.ts","sourceRoot":"","sources":["../../../src/profile/api-keys/revoke-confirm.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExD,MAAM,WAAW,mBAAmB;IAClC,4BAA4B;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoBD,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,oEAAoE;IACpE,SAAS,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACpC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC1C;AAED,wBAAgB,mBAAmB,CAAC,EAClC,MAAM,EACN,OAAO,EACP,SAAS,EACT,SAAS,EACT,QAAQ,EACR,MAAM,GACP,EAAE,SAAS,GAAG;IAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAAA;CAAE,2CAiB1C;AAED,wBAAgB,yBAAyB,CAAC,EACxC,KAAK,EACL,OAAO,EACP,SAAS,EACT,SAAS,EACT,QAAQ,EACR,MAAM,GACP,EAAE,SAAS,GAAG;IAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAAA;CAAE,2CAiB7C"}

package/dist/profile/api-keys/revoke-confirm.js

@@ -0,0 +1,26 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { ConfirmationDialog } from "../../components/confirmation-dialog.js";
+import { fmt } from "./format.js";
+const KEY_DEFAULTS = {
+    title: "Revoke {name}?",
+    description: "Any tool using this key stops working right away. You can create a new key at any time.",
+    warning: "",
+    confirm: "Revoke key",
+    cancel: "Keep key",
+};
+const APP_DEFAULTS = {
+    title: "Disconnect {name}?",
+    description: "The app loses access to your CellarNode data right away. You can connect it again later.",
+    warning: "",
+    confirm: "Disconnect",
+    cancel: "Keep connected",
+};
+export function RevokeApiKeyConfirm({ apiKey, onClose, onConfirm, isPending, onClosed, labels, }) {
+    const l = { ...KEY_DEFAULTS, ...labels };
+    return (_jsx(ConfirmationDialog, { open: apiKey !== null, onClose: onClose, onConfirm: onConfirm, tone: "danger", title: fmt(l.title, { name: apiKey?.name ?? "" }), description: l.description, ...(l.warning ? { warning: l.warning } : {}), confirmLabel: l.confirm, cancelLabel: l.cancel, ...(isPending !== undefined ? { isPending } : {}), ...(onClosed !== undefined ? { onClosed } : {}) }));
+}
+export function RevokeConnectedAppConfirm({ grant, onClose, onConfirm, isPending, onClosed, labels, }) {
+    const l = { ...APP_DEFAULTS, ...labels };
+    return (_jsx(ConfirmationDialog, { open: grant !== null, onClose: onClose, onConfirm: onConfirm, tone: "danger", title: fmt(l.title, { name: grant?.clientName ?? "" }), description: l.description, ...(l.warning ? { warning: l.warning } : {}), confirmLabel: l.confirm, cancelLabel: l.cancel, ...(isPending !== undefined ? { isPending } : {}), ...(onClosed !== undefined ? { onClosed } : {}) }));
+}
+//# sourceMappingURL=revoke-confirm.js.map

package/dist/profile/api-keys/revoke-confirm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke-confirm.js","sourceRoot":"","sources":["../../../src/profile/api-keys/revoke-confirm.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAY/B,MAAM,YAAY,GAAG;IACnB,KAAK,EAAE,gBAAgB;IACvB,WAAW,EACT,yFAAyF;IAC3F,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,YAAY,GAAG;IACnB,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,0FAA0F;IAC5F,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,gBAAgB;CACzB,CAAC;AAYF,MAAM,UAAU,mBAAmB,CAAC,EAClC,MAAM,EACN,OAAO,EACP,SAAS,EACT,SAAS,EACT,QAAQ,EACR,MAAM,GACmC;IACzC,MAAM,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,EAAE,CAAC;IACzC,OAAO,CACL,KAAC,kBAAkB,IACjB,IAAI,EAAE,MAAM,KAAK,IAAI,EACrB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,EACpB,IAAI,EAAC,QAAQ,EACb,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,EACjD,WAAW,EAAE,CAAC,CAAC,WAAW,KACtB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7C,YAAY,EAAE,CAAC,CAAC,OAAO,EACvB,WAAW,EAAE,CAAC,CAAC,MAAM,KACjB,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAC9C,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAChD,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,EACxC,KAAK,EACL,OAAO,EACP,SAAS,EACT,SAAS,EACT,QAAQ,EACR,MAAM,GACsC;IAC5C,MAAM,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,EAAE,CAAC;IACzC,OAAO,CACL,KAAC,kBAAkB,IACjB,IAAI,EAAE,KAAK,KAAK,IAAI,EACpB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,EACpB,IAAI,EAAC,QAAQ,EACb,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC,EACtD,WAAW,EAAE,CAAC,CAAC,WAAW,KACtB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7C,YAAY,EAAE,CAAC,CAAC,OAAO,EACvB,WAAW,EAAE,CAAC,CAAC,MAAM,KACjB,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAC9C,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAChD,CACH,CAAC;AACJ,CAAC"}

package/dist/profile/api-keys/scope-list.d.ts

@@ -0,0 +1,36 @@
+import * as React from "react";
+import { type SurfaceId } from "./types.js";
+export interface ScopeListLabels {
+    readOnly?: string;
+    readAndChange?: string;
+    custom?: string;
+    /** "{count}" placeholder. */
+    viewPermissions?: string;
+    /** Singular form, used when exactly one scope. "{count}" placeholder. */
+    viewPermissionsOne?: string;
+    /** Used when the disclosure also holds extra detail (e.g. the created date). */
+    viewPermissionsAndDetails?: string;
+    /** Names a surface in the surface badge, e.g. map producer -> "Producer". Falls back to the catalog label. */
+    surfaces?: Partial<Record<string, string>>;
+}
+export declare const DEFAULT_SCOPE_LABELS: {
+    readOnly: string;
+    readAndChange: string;
+    custom: string;
+    viewPermissions: string;
+    viewPermissionsOne: string;
+    viewPermissionsAndDetails: string;
+};
+/** One line summarising a grant ("Read only"), with the plain-language permission list on demand. */
+export declare function ScopeList({ surface, scopes, labels, children, }: {
+    surface: SurfaceId;
+    scopes: readonly string[];
+    labels?: ScopeListLabels | undefined;
+    /** Extra detail shown inside the disclosure (e.g. the created date). */
+    children?: React.ReactNode;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function SurfaceBadge({ surface, labels, }: {
+    surface: SurfaceId;
+    labels?: ScopeListLabels | undefined;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=scope-list.d.ts.map

package/dist/profile/api-keys/scope-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list.d.ts","sourceRoot":"","sources":["../../../src/profile/api-keys/scope-list.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAEnF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,8GAA8G;IAC9G,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC5C;AAED,eAAO,MAAM,oBAAoB;;;;;;;CAOhC,CAAC;AAEF,qGAAqG;AACrG,wBAAgB,SAAS,CAAC,EACxB,OAAO,EACP,MAAM,EACN,MAAM,EACN,QAAQ,GACT,EAAE;IACD,OAAO,EAAE,SAAS,CAAC;IACnB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACrC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;CAC5B,2CA+BA;AAED,wBAAgB,YAAY,CAAC,EAC3B,OAAO,EACP,MAAM,GACP,EAAE;IACD,OAAO,EAAE,SAAS,CAAC;IACnB,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACtC,2CAMA"}

package/dist/profile/api-keys/scope-list.js

@@ -0,0 +1,29 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Badge } from "../../components/badge.js";
+import { fmt } from "./format.js";
+import { scopeLabel, summarizeScopes, surfaceInfo } from "./types.js";
+export const DEFAULT_SCOPE_LABELS = {
+    readOnly: "Read only",
+    readAndChange: "Read and change",
+    custom: "Custom access",
+    viewPermissions: "{count} permissions",
+    viewPermissionsOne: "{count} permission",
+    viewPermissionsAndDetails: "{count} permissions and details",
+};
+/** One line summarising a grant ("Read only"), with the plain-language permission list on demand. */
+export function ScopeList({ surface, scopes, labels, children, }) {
+    const l = { ...DEFAULT_SCOPE_LABELS, ...labels };
+    const kind = summarizeScopes(surface, scopes);
+    const summary = kind === "read" ? l.readOnly : kind === "write" ? l.readAndChange : l.custom;
+    return (_jsxs("div", { className: "text-sm/6 text-foreground", children: [_jsx("span", { className: "font-medium", children: summary }), _jsxs("details", { className: "mt-1 text-muted-foreground", children: [_jsx("summary", { className: "inline-flex min-h-11 cursor-pointer items-center rounded-sm text-sm/6 underline-offset-2 hover:underline focus-visible:outline-2 focus-visible:outline-ring sm:min-h-6", children: fmt(children
+                            ? l.viewPermissionsAndDetails
+                            : scopes.length === 1
+                                ? l.viewPermissionsOne
+                                : l.viewPermissions, {
+                            count: scopes.length,
+                        }) }), _jsx("ul", { className: "mt-1 flex flex-col gap-0.5 pl-4", children: scopes.map((id) => (_jsx("li", { className: "list-disc", children: scopeLabel(surface, id) }, id))) }), children ? _jsx("div", { className: "mt-2", children: children }) : null] })] }));
+}
+export function SurfaceBadge({ surface, labels, }) {
+    return (_jsx(Badge, { color: "info", className: "shrink-0 whitespace-nowrap", children: labels?.surfaces?.[surface] ?? surfaceInfo(surface).label }));
+}
+//# sourceMappingURL=scope-list.js.map

package/dist/profile/api-keys/scope-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-list.js","sourceRoot":"","sources":["../../../src/profile/api-keys/scope-list.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAkB,MAAM,SAAS,CAAC;AAgBnF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,QAAQ,EAAE,WAAW;IACrB,aAAa,EAAE,iBAAiB;IAChC,MAAM,EAAE,eAAe;IACvB,eAAe,EAAE,qBAAqB;IACtC,kBAAkB,EAAE,oBAAoB;IACxC,yBAAyB,EAAE,iCAAiC;CAC7D,CAAC;AAEF,qGAAqG;AACrG,MAAM,UAAU,SAAS,CAAC,EACxB,OAAO,EACP,MAAM,EACN,MAAM,EACN,QAAQ,GAOT;IACC,MAAM,CAAC,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7F,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,eAAM,SAAS,EAAC,aAAa,YAAE,OAAO,GAAQ,EAC9C,mBAAS,SAAS,EAAC,4BAA4B,aAC7C,kBAAS,SAAS,EAAC,wKAAwK,YACxL,GAAG,CACF,QAAQ;4BACN,CAAC,CAAC,CAAC,CAAC,yBAAyB;4BAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gCACnB,CAAC,CAAC,CAAC,CAAC,kBAAkB;gCACtB,CAAC,CAAC,CAAC,CAAC,eAAe,EACvB;4BACE,KAAK,EAAE,MAAM,CAAC,MAAM;yBACrB,CACF,GACO,EACV,aAAI,SAAS,EAAC,iCAAiC,YAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAClB,aAAa,SAAS,EAAC,WAAW,YAC/B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,IADjB,EAAE,CAEN,CACN,CAAC,GACC,EACJ,QAAQ,CAAC,CAAC,CAAC,cAAK,SAAS,EAAC,MAAM,YAAE,QAAQ,GAAO,CAAC,CAAC,CAAC,IAAI,IACjD,IACN,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAC3B,OAAO,EACP,MAAM,GAIP;IACC,OAAO,CACL,KAAC,KAAK,IAAC,KAAK,EAAC,MAAM,EAAC,SAAS,EAAC,4BAA4B,YACvD,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,GACpD,CACT,CAAC;AACJ,CAAC"}