@danxbot/ui 20.3.3 → 20.4.1

package/dist/types/components/rbac/AccessRequestPanel.d.ts

@@ -1,6 +1,7 @@
+import { type AccessRequestState } from "./approvalPanelParts";
 import type { Permission, Role } from "./types";
 export type AccessRequestKind = "session" | "worker";
-export type AccessRequestState = "pending" | "approved" | "denied" | "expired" | "claimed";
+export type { AccessRequestState };
 export interface AccessRequest {
     kind: AccessRequestKind;
     /** The session title or the worker id: what the requester calls itself. */

package/dist/types/components/rbac/AgentKeysList.d.ts

@@ -4,11 +4,13 @@ export interface AgentKeysListProps {
     /** The keys agents hold, already scoped to the person. */
     keys: ApiKey[];
     onRevoke: (id: number) => Promise<void>;
-    /** The id of a key currently mid-revoke or mid-role-change. Disables just that row's controls. */
+    /** The id of a key currently mid-revoke, mid-role-change or mid-grant-removal. Disables just that row's controls. */
     busyId?: number | null;
     /** Makes each key's role editable in place. Omit for a read-only role badge. */
     roleEditor?: KeyRoleEditor;
+    /** Makes each key's grant chips removable (DX-4433). Omit and keys that carry grants show them read-only. */
+    onRevokeGrant?: (keyId: number, grantId: number) => Promise<void>;
     emptyState?: ReactNode;
     className?: string;
 }
-export declare function AgentKeysList({ keys, onRevoke, busyId, roleEditor, emptyState, className }: AgentKeysListProps): string | number | bigint | boolean | import("react").JSX.Element | Iterable<ReactNode> | Promise<string | number | bigint | boolean | import("react").ReactPortal | import("react").ReactElement<unknown, string | import("react").JSXElementConstructor<any>> | Iterable<ReactNode> | null | undefined>;
+export declare function AgentKeysList({ keys, onRevoke, busyId, roleEditor, onRevokeGrant, emptyState, className }: AgentKeysListProps): string | number | bigint | boolean | import("react").JSX.Element | Iterable<ReactNode> | Promise<string | number | bigint | boolean | import("react").ReactPortal | import("react").ReactElement<unknown, string | import("react").JSXElementConstructor<any>> | Iterable<ReactNode> | null | undefined>;

package/dist/types/components/rbac/ApiKeysTable.d.ts

@@ -13,6 +13,20 @@ export interface ApiKey {
     lastUsedAt?: string | null;
     /** ISO instant, or `null`/omitted for a key with no expiry. */
     expiresAt?: string | null;
+    /** Permissions added to this key on top of its role (DX-4433). Omit, or leave empty, for a key that holds only its role. */
+    grants?: KeyGrant[];
+}
+/** One permission an approved request added to a key, on top of its role. */
+export interface KeyGrant {
+    id: number;
+    /** The permission key granted. Compared for equality only. */
+    permissionKey: string;
+    /** The permission's label, as shown on the chip and in the confirm. */
+    label: string;
+    /** ISO instant. */
+    grantedAt: string;
+    /** The reason the agent gave when it asked. Plain text. */
+    reason?: string;
 }
 /** Makes a key's role editable in place. `roles` are the roles the owner may pick from: one list for every key, or a function
  *  of the key when the keys do not share one (DX-4431: an agent session takes agent roles, a worker a human role that can manage workers). */
@@ -28,10 +42,12 @@ export interface KeyRoleEditor {
 export interface ApiKeysTableProps {
     keys: ApiKey[];
     onRevoke: (id: number) => Promise<void>;
-    /** The id of a key currently mid-revoke or mid-role-change. Disables just that row's controls. */
+    /** The id of a key currently mid-revoke, mid-role-change or mid-grant-removal. Disables just that row's controls. */
     busyId?: number | null;
     /** Makes each key's role editable in place (DX-4427). Omit for a read-only role badge. */
     roleEditor?: KeyRoleEditor;
+    /** Makes each grant's chip removable (DX-4433). Fired only after the confirm dialog. Omit for read-only grant chips. */
+    onRevokeGrant?: (keyId: number, grantId: number) => Promise<void>;
     className?: string;
 }
-export declare function ApiKeysTable({ keys, onRevoke, busyId, roleEditor, className }: ApiKeysTableProps): import("react").JSX.Element;
+export declare function ApiKeysTable({ keys, onRevoke, busyId, roleEditor, onRevokeGrant, className }: ApiKeysTableProps): import("react").JSX.Element;

package/dist/types/components/rbac/PermissionRequestPanel.d.ts

@@ -0,0 +1,31 @@
+import { type AccessRequestState } from "./approvalPanelParts";
+import type { Permission } from "./types";
+export interface PermissionRequest {
+    /** The name of the key that is asking: what the agent's key is called. */
+    keyName: string;
+    /** The agent's stated reason, plain text. */
+    reason: string;
+    /** The permission keys requested, in the order the agent listed them. */
+    permissionKeys: string[];
+    /** ISO instant. */
+    requestedAt: string;
+    /** ISO instant. Shown while the request is pending. */
+    expiresAt?: string;
+    /** The short code the agent also displays. Compared by eye, never entered. */
+    confirmCode: string;
+    /** What was actually granted (a subset of `permissionKeys`). Shown once the request is approved or claimed. */
+    grantedKeys?: string[];
+}
+export interface PermissionRequestPanelProps {
+    request: PermissionRequest;
+    state: AccessRequestState;
+    /** The permission catalog: labels, categories and descriptions for the requested keys. */
+    permissions: Permission[];
+    /** What the approver holds. A requested permission outside this set is shown disabled and can never be granted. */
+    ownPermissionKeys: string[];
+    /** Receives exactly the permission keys left checked. */
+    onApprove: (permissionKeys: string[]) => Promise<void>;
+    onDeny: () => Promise<void>;
+    className?: string;
+}
+export declare function PermissionRequestPanel({ request, state, permissions, ownPermissionKeys, onApprove, onDeny, className, }: PermissionRequestPanelProps): import("react").JSX.Element;

package/dist/types/components/rbac/approvalPanelParts.d.ts

@@ -0,0 +1,43 @@
+import { type ReactNode } from "react";
+export type AccessRequestState = "pending" | "approved" | "denied" | "expired" | "claimed";
+export declare function ApprovalHeader({ title, state }: {
+    title: string;
+    state: AccessRequestState;
+}): import("react").JSX.Element;
+/** The code is for comparing, never copying: plain large text, no copy control (see `AccessRequestPanel`). */
+export declare function ConfirmCodeCallout({ code }: {
+    code: string;
+}): import("react").JSX.Element;
+/** The readout for a settled request: the tone and title are shared, the sentence says what it meant for this requester. */
+export declare function TerminalCallout({ state, children }: {
+    state: Exclude<AccessRequestState, "pending">;
+    children: ReactNode;
+}): import("react").JSX.Element;
+type ApprovalAction = "approve" | "deny";
+/**
+ * Busy / error state around the two decisions. A rejected promise shows its message and re-enables the buttons; a
+ * resolved one leaves the panel as it was, because `state` is the consumer's server's answer, never assumed here.
+ */
+export declare function useApprovalActions(): {
+    busy: ApprovalAction | null;
+    error: {
+        action: ApprovalAction;
+        message: string;
+    } | null;
+    run: (action: ApprovalAction, call: () => Promise<void>) => Promise<void>;
+};
+export declare function ApprovalError({ error }: {
+    error: {
+        action: ApprovalAction;
+        message: string;
+    } | null;
+}): import("react").JSX.Element | null;
+export declare function ApprovalButtons({ busy, run, onApprove, onDeny, approveDisabled, }: {
+    busy: ApprovalAction | null;
+    run: (action: ApprovalAction, call: () => Promise<void>) => Promise<void>;
+    onApprove: () => Promise<void>;
+    onDeny: () => Promise<void>;
+    /** True when there is nothing valid to approve. Deny is never disabled by this. */
+    approveDisabled: boolean;
+}): import("react").JSX.Element;
+export {};

package/dist/types/components/rbac/index.d.ts

@@ -13,10 +13,11 @@ export * from "./MembersPanel";
 export * from "./ChangePasswordForm";
 export * from "./SessionsList";
 export * from "./RoleKeyPicker";
-export type { ApiKey, KeyRoleEditor } from "./ApiKeysTable";
+export type { ApiKey, KeyGrant, KeyRoleEditor } from "./ApiKeysTable";
 export * from "./ApiKeysPanel";
 export * from "./AgentKeysList";
 export * from "./AccessRequestPanel";
+export * from "./PermissionRequestPanel";
 export * from "./InvitationsList";
 export * from "./InviteMembersDialog";
 export * from "./Brand";

package/dist/types/components/rbac/permissionSections.d.ts

@@ -0,0 +1,17 @@
+import type { Permission } from "./types";
+export interface PermissionSection {
+    /** `undefined` when nothing in this matrix carries a `category` — see below. */
+    label: string | undefined;
+    items: Permission[];
+}
+/**
+ * Buckets permissions by `category`, preserving first-seen order.
+ *
+ * Grouping is opt-in as a WHOLE, not per-row: if not a single permission in
+ * the set carries a `category`, this returns one ungrouped section rather
+ * than inventing an "Uncategorised" heading nobody asked to see. A consumer
+ * who supplies categories for some permissions and not others gets an
+ * explicit "Other" bucket for the rest, because at that point the absence of
+ * a category on a handful of rows is itself information worth a heading.
+ */
+export declare function groupByCategory(permissions: Permission[]): PermissionSection[];

package/dist/types/index.d.ts

@@ -150,7 +150,7 @@ export { cellLabel, eventLabel, formatDateRange, longDate, monthTitle, timeOfDay
 export { initialFocusDay, isInMonth, nextDayForKey, useGridNavigation, type GridNavigation, type GridNavigationOptions, } from "./components/calendar/use-grid-navigation";
 export { AmbiguousTimeError, addDays, addDuration, addMonths, atMidnight, atTime, comparePlainDate, dayFraction, dayLengthMs, dayOfWeek, daysBetween, daysInMonth, endOfMonth, hoursInDay, instantAtFraction, instantToPlainDate, instantToPlainDateTime, isSameDate, isoDateString, isoDateTimeString, monthGridDays, nextDay, offsetAt, parsePlainDate, plainDateTimeToInstant, relativeAge, startOfDay, startOfMonth, startOfWeek, weekDays, type CalendarDuration, type Disambiguation, type Instant, type PlainDate, type PlainDateTime, type TimeZone, } from "./lib/time";
 export { allDayBandSegment, dayKey, daySlots, isAllDay, packBand, packLanes, snapFractionToInstant, timeSegments, timedBandSegment, type AllDayEvent, type BandInput, type BandOptions, type BandPlacement, type BandResult, type BandSegment, type CalendarEvent, type CalendarEventId, type CalendarView, type DaySlot, type DragKind, type EventDraft, type EventPalette, type LaneInput, type LaneOptions, type LanePlacement, type PaletteEntry, type TimeSegment, type TimedEvent, type VisibleRange, } from "./lib/calendar";
-export { RBACProvider, useRBAC, Can, useHasPermission, AccountMenu, AccountMenuSection, TeamSwitcher, DevToolsPopover, RolePermissionMatrix, RoleEditorDialog, ProfileForm, ProfilePage, RolesPermissionsPage, MembersPanel, ChangePasswordForm, SessionsList, ApiKeysPanel, AgentKeysList, AccessRequestPanel, RoleKeyPicker, isRoleSelectable, leastPrivilegeRoleId, InvitationsList, InviteMembersDialog, Brand, TeamSettingsForm, DangerZone, type RBACProviderProps, type RBACHookResult, type CanProps, type AccountMenuProps, type TeamSwitcherProps, type DevToolsPopoverProps, type RolePermissionMatrixProps, type RoleEditorDialogProps, type RoleEditorDialogSubmitInput, type ProfileFormProps, type ProfileFormAccount, type ProfileFormSaveInput, type ProfilePageProps, type RolesPermissionsPageProps, type MembersPanelProps, type MembersPanelMember, type ChangePasswordFormProps, type SessionsListProps, type Session, type ApiKeysPanelProps, type AgentKeysListProps, type ApiKey, type KeyRoleEditor, type AccessRequestPanelProps, type AccessRequest, type AccessRequestKind, type AccessRequestState, type RoleKeyPickerProps, type InvitationsListProps, type InvitationsListItem, type InvitationStatus, type InviteMembersDialogProps, type Permission, type Role, type User, type Team, type TeamMembership, type BrandProps, type TeamSettingsFormProps, type TeamSettingsFormTeam, type TeamSettingsFormSaveInput, type DangerZoneProps, } from "./components/rbac";
+export { RBACProvider, useRBAC, Can, useHasPermission, AccountMenu, AccountMenuSection, TeamSwitcher, DevToolsPopover, RolePermissionMatrix, RoleEditorDialog, ProfileForm, ProfilePage, RolesPermissionsPage, MembersPanel, ChangePasswordForm, SessionsList, ApiKeysPanel, AgentKeysList, AccessRequestPanel, PermissionRequestPanel, RoleKeyPicker, isRoleSelectable, leastPrivilegeRoleId, InvitationsList, InviteMembersDialog, Brand, TeamSettingsForm, DangerZone, type RBACProviderProps, type RBACHookResult, type CanProps, type AccountMenuProps, type TeamSwitcherProps, type DevToolsPopoverProps, type RolePermissionMatrixProps, type RoleEditorDialogProps, type RoleEditorDialogSubmitInput, type ProfileFormProps, type ProfileFormAccount, type ProfileFormSaveInput, type ProfilePageProps, type RolesPermissionsPageProps, type MembersPanelProps, type MembersPanelMember, type ChangePasswordFormProps, type SessionsListProps, type Session, type ApiKeysPanelProps, type AgentKeysListProps, type ApiKey, type KeyGrant, type KeyRoleEditor, type AccessRequestPanelProps, type AccessRequest, type AccessRequestKind, type AccessRequestState, type PermissionRequestPanelProps, type PermissionRequest, type RoleKeyPickerProps, type InvitationsListProps, type InvitationsListItem, type InvitationStatus, type InviteMembersDialogProps, type Permission, type Role, type User, type Team, type TeamMembership, type BrandProps, type TeamSettingsFormProps, type TeamSettingsFormTeam, type TeamSettingsFormSaveInput, type DangerZoneProps, } from "./components/rbac";
 export { AuthLayout, AcceptInvitationCard, SignupCard, TermsAcceptance, LoginForm, ForgotPasswordForm, ResetPasswordForm, type AuthLayoutProps, type AcceptInvitationCardProps, type SignupCardProps, type TermsAcceptanceProps, type LoginFormProps, type ForgotPasswordFormProps, type ResetPasswordFormProps, } from "./components/auth";
 export { UseCaseCard, RoadmapItemCard, RoadmapSwimlaneBoard, UseCaseLedgerPage, RoadmapPage, PhaseManager, TrackManager, deriveRoadmapItemStatus, isFullyBuilt, isUnbuilt, trackIds, trackProgress, toneForIndex, CATEGORY_TONES, type Domain, type Phase, type Track, type RoadmapItem, type RoadmapItemStatus, type UseCase, type UseCaseStatus, type UseCaseDecision, type UseCaseCardProps, type RoadmapItemCardProps, type RoadmapSwimlaneBoardProps, type UseCaseLedgerPageProps, type RoadmapPageProps, type PhaseManagerProps, type TrackManagerProps, } from "./components/roadmap";
 export { ProvenanceDisclosure, ProvenanceDetail, ProvenanceBadge, ConfidenceReadout, ConfidenceMeter, ConfidenceBar, provenanceStateLabel, confidenceBand, confidenceScore, scoredConfidence, ratedConfidence, type ProvenanceRecord, type ProvenanceState, type ProvenanceSource, type ProvenanceCheck, type ProvenanceCall, type ProvenanceSignoff, type ConfidenceBand, type ConfidenceScore, type ProvenanceConfidence, type ConfidenceReadoutProps, type ConfidenceBarProps, type ConfidenceBarSize, type ProvenanceDisclosureProps, type ProvenanceDetailProps, type ProvenanceDetailTitleAs, type ProvenanceTriggerBadge, type ProvenanceBadgeProps, type ProvenanceBadgeAppearance, type ConfidenceMeterProps, } from "./components/provenance";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danxbot/ui",
-  "version": "20.3.3",
+  "version": "20.4.1",
   "type": "module",
   "description": "Danxbot — a domain-agnostic React design system with motion as a first-class primitive.",
   "license": "MIT",