@dxos/plugin-client 0.12.0-next-73daef452f1464b62efdbca75fb0067c1066f264 → 0.13.0

package/dist/lib/capabilities.workerd.mjs

@@ -9,11 +9,31 @@ import { ClientCapabilities, ClientEvents } from "#types";
 var AccountCache = Capability.lazyModule("AccountCache", { provides: [ClientCapabilities.AccountCache] }, () => import("./chunk-account-cache.mjs"));
 var AppGraphBuilder = AppCapability.appGraphBuilder(() => import("./chunk-app-graph-builder.mjs"), { activatesOn: ClientEvents.Initialized });
 var Commands = AppCapability.commands(() => import("#commands"));
+var ClientServices = Capability.lazyModule("ClientServices", {
+	requires: [ClientCapabilities.Client],
+	provides: [
+		ClientCapabilities.Config,
+		ClientCapabilities.EdgeHttpClient,
+		ClientCapabilities.Hypergraph
+	],
+	activatesOn: ClientEvents.Initialized
+}, () => import("./chunk-client-services.mjs"));
 var HubHttpClient = Capability.lazyModule("HubHttpClient", {
 	requires: [ClientCapabilities.Client],
 	provides: [ClientCapabilities.HubHttpClient],
 	activatesOn: ClientEvents.Initialized
 }, () => import("./chunk-hub-http-client.mjs"));
+var IdentityLifecycle = Capability.lazyModule("IdentityLifecycle", {
+	requires: [
+		ClientCapabilities.Client,
+		ClientCapabilities.AccountCache,
+		Capabilities.AtomRegistry,
+		Capabilities.OperationInvoker,
+		Capabilities.PluginManager
+	],
+	provides: [],
+	activatesOn: ClientEvents.Initialized
+}, () => import("./chunk-identity-lifecycle.mjs"));
 var LayerSpecs = AppCapability.layerSpec(() => import("./chunk-layer-specs.mjs"), { name: "LayerSpecs" });
 var NavigationTargetLoader = Capability.lazyModule("NavigationTargetLoader", {
 	requires: [ClientCapabilities.Client],
@@ -27,16 +47,16 @@ var RemoteTraceMonitor = Capability.lazyModule("RemoteTraceMonitor", {
 var SpaceReplicationProgress = Capability.lazyModule("SpaceReplicationProgress", {
 	requires: [ClientCapabilities.Client, Capabilities.ProcessManagerRuntime],
 	provides: [],
-	activatesOn: ClientEvents.SpacesReady
+	activatesOn: ClientEvents.SpacesAvailable
 }, () => import("./chunk-space-replication-progress.mjs"));
 var TraceProgress = Capability.lazyModule("TraceProgress", {
 	requires: [
-		Capabilities.ProcessMonitor,
+		Capabilities.ProcessManager,
 		Capabilities.ProcessManagerRuntime,
 		Capabilities.ServiceResolver
 	],
 	provides: [],
-	activatesOn: ClientEvents.SpacesReady
+	activatesOn: ClientEvents.SpacesAvailable
 }, () => import("./chunk-trace-progress.mjs"));
 var Translations = AppCapability.translations(translations);
 var Client = void 0;
@@ -46,6 +66,6 @@ var ReactContext = void 0;
 var ReactSurface = void 0;
 var SchemaDefs = void 0;
 //#endregion
-export { AccountCache, AppGraphBuilder, Client, Commands, HubHttpClient, LayerSpecs, Migrations, NavigationHandler, NavigationTargetLoader, OperationHandler, ReactContext, ReactSurface, RemoteTraceMonitor, SchemaDefs, SpaceReplicationProgress, TraceProgress, Translations };
+export { AccountCache, AppGraphBuilder, Client, ClientServices, Commands, HubHttpClient, IdentityLifecycle, LayerSpecs, Migrations, NavigationHandler, NavigationTargetLoader, OperationHandler, ReactContext, ReactSurface, RemoteTraceMonitor, SchemaDefs, SpaceReplicationProgress, TraceProgress, Translations };
 
 //# sourceMappingURL=capabilities.workerd.mjs.map

package/dist/lib/capabilities.workerd.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.workerd.mjs","names":[],"sources":["../../src/capabilities/gen/workerd.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\n// GENERATED by dx-plugin — do not edit. Sliced from ../index.ts for the 'workerd' condition.\n\nimport * as ActivationEvents from '@dxos/app-framework/ActivationEvents';\nimport * as Capabilities from '@dxos/app-framework/Capabilities';\nimport * as Capability from '@dxos/app-framework/Capability';\nimport * as AppCapabilities from '@dxos/app-toolkit/AppCapabilities';\nimport * as AppCapability from '@dxos/app-toolkit/AppCapability';\n\nimport { translations } from '#translations';\nimport { ClientCapabilities, ClientEvents, ClientOptions } from '#types';\n\nexport const AccountCache = Capability.lazyModule(\n  'AccountCache',\n  { provides: [ClientCapabilities.AccountCache] },\n  () => import('../account-cache'),\n);\n\n// Its connectors read `client.halo`/`client.mesh` inside atom computations (initialized-only,\n// and a pre-init throw is not re-evaluated when initialization lands).\nexport const AppGraphBuilder = AppCapability.appGraphBuilder(() => import('../app-graph-builder'), {\n  activatesOn: ClientEvents.Initialized,\n});\n\n// `#commands` resolves per condition: a node host has the OAuth callback server and filesystem the\n// browser command set omits (`account`, `profile`).\nexport const Commands = AppCapability.commands(() => import('#commands'));\n\nexport const HubHttpClient = Capability.lazyModule(\n  'HubHttpClient',\n  {\n    requires: [ClientCapabilities.Client],\n    provides: [ClientCapabilities.HubHttpClient],\n    // Reads `client.config` (initialized-only) for the hub URL.\n    activatesOn: ClientEvents.Initialized,\n  },\n  () => import('../hub-http-client'),\n);\n\nexport const LayerSpecs = AppCapability.layerSpec(() => import('../layer-specs'), {\n  name: 'LayerSpecs',\n});\n\nexport const NavigationTargetLoader = Capability.lazyModule(\n  'NavigationTargetLoader',\n  { requires: [ClientCapabilities.Client], provides: [AppCapabilities.NavigationTargetLoader] },\n  () => import('../navigation-target-loader'),\n);\n\nexport const OperationHandler = AppCapability.operationHandler(() => import('../operation-handler'));\n\nexport const RemoteTraceMonitor = Capability.lazyModule(\n  'RemoteTraceMonitor',\n  // Startup: the process-manager runtime snapshots this capability once, in the Startup pass, and\n  // bakes a no-op remote source if it has not been contributed yet — demand activation always loses\n  // that race, silencing remote traces for every ProcessMonitor consumer.\n  { provides: [Capabilities.RemoteTraceMonitor], activatesOn: ActivationEvents.Startup },\n  () => import('../remote-trace-monitor'),\n);\n\nexport const SpaceReplicationProgress = Capability.lazyModule(\n  'SpaceReplicationProgress',\n  {\n    // ProgressRegistry is read optionally in the body, not required: a host that omits\n    // plugin-progress should lose the meter, not fail to activate ClientPlugin.\n    requires: [ClientCapabilities.Client, Capabilities.ProcessManagerRuntime],\n    provides: [],\n    // Runtime event: spaces become ready when the client observes them, not at startup.\n    activatesOn: ClientEvents.SpacesReady,\n  },\n  () => import('../space-replication-progress'),\n);\n\nexport const TraceProgress = Capability.lazyModule(\n  'TraceProgress',\n  {\n    // ProgressRegistry is resolved lazily per message (a host without it degrades to a no-op sink).\n    requires: [Capabilities.ProcessMonitor, Capabilities.ProcessManagerRuntime, Capabilities.ServiceResolver],\n    provides: [],\n    // Same activation as SpaceReplicationProgress: process-manager runtime, monitor, and\n    // registry are all available by the time spaces are observed.\n    activatesOn: ClientEvents.SpacesReady,\n  },\n  () => import('../trace-progress'),\n);\n\nexport const Translations = AppCapability.translations(translations);\n\nexport const Client = undefined;\nexport const Migrations = undefined;\nexport const NavigationHandler = undefined;\nexport const ReactContext = undefined;\nexport const ReactSurface = undefined;\nexport const SchemaDefs = undefined;\n"],"mappings":";;;;;;;;AAeA,IAAa,eAAe,WAAW,WACrC,gBACA,EAAE,UAAU,CAAC,mBAAmB,YAAY,EAAE,SACxC,OAAO,4BACf;AAIA,IAAa,kBAAkB,cAAc,sBAAsB,OAAO,kCAAyB,EACjG,aAAa,aAAa,YAC5B,CAAC;AAID,IAAa,WAAW,cAAc,eAAe,OAAO,YAAY;AAExE,IAAa,gBAAgB,WAAW,WACtC,iBACA;CACE,UAAU,CAAC,mBAAmB,MAAM;CACpC,UAAU,CAAC,mBAAmB,aAAa;CAE3C,aAAa,aAAa;AAC5B,SACM,OAAO,8BACf;AAEA,IAAa,aAAa,cAAc,gBAAgB,OAAO,4BAAmB,EAChF,MAAM,aACR,CAAC;AAED,IAAa,yBAAyB,WAAW,WAC/C,0BACA;CAAE,UAAU,CAAC,mBAAmB,MAAM;CAAG,UAAU,CAAC,gBAAgB,sBAAsB;AAAE,SACtF,OAAO,uCACf;AAEA,IAAa,mBAAmB,cAAc,uBAAuB,OAAO,gCAAuB;AAEnG,IAAa,qBAAqB,WAAW,WAC3C,sBAIA;CAAE,UAAU,CAAC,aAAa,kBAAkB;CAAG,aAAa,iBAAiB;AAAQ,SAC/E,OAAO,mCACf;AAEA,IAAa,2BAA2B,WAAW,WACjD,4BACA;CAGE,UAAU,CAAC,mBAAmB,QAAQ,aAAa,qBAAqB;CACxE,UAAU,CAAC;CAEX,aAAa,aAAa;AAC5B,SACM,OAAO,yCACf;AAEA,IAAa,gBAAgB,WAAW,WACtC,iBACA;CAEE,UAAU;EAAC,aAAa;EAAgB,aAAa;EAAuB,aAAa;CAAe;CACxG,UAAU,CAAC;CAGX,aAAa,aAAa;AAC5B,SACM,OAAO,6BACf;AAEA,IAAa,eAAe,cAAc,aAAa,YAAY;AAEnE,IAAa,SAAS,KAAA;AACtB,IAAa,aAAa,KAAA;AAC1B,IAAa,oBAAoB,KAAA;AACjC,IAAa,eAAe,KAAA;AAC5B,IAAa,eAAe,KAAA;AAC5B,IAAa,aAAa,KAAA"}
+{"version":3,"file":"capabilities.workerd.mjs","names":[],"sources":["../../src/capabilities/gen/workerd.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\n// GENERATED by dx-plugin — do not edit. Sliced from ../index.ts for the 'workerd' condition.\n\nimport * as ActivationEvents from '@dxos/app-framework/ActivationEvents';\nimport * as Capabilities from '@dxos/app-framework/Capabilities';\nimport * as Capability from '@dxos/app-framework/Capability';\nimport * as AppCapabilities from '@dxos/app-toolkit/AppCapabilities';\nimport * as AppCapability from '@dxos/app-toolkit/AppCapability';\n\nimport { translations } from '#translations';\nimport { ClientCapabilities, ClientEvents, ClientOptions } from '#types';\n\nexport const AccountCache = Capability.lazyModule(\n  'AccountCache',\n  { provides: [ClientCapabilities.AccountCache] },\n  () => import('../account-cache.ts'),\n);\n\n// Its connectors read `client.halo`/`client.mesh` inside atom computations (initialized-only,\n// and a pre-init throw is not re-evaluated when initialization lands).\nexport const AppGraphBuilder = AppCapability.appGraphBuilder(() => import('../app-graph-builder.ts'), {\n  activatesOn: ClientEvents.Initialized,\n});\n\n// `#commands` resolves per condition: a node host has the OAuth callback server and filesystem the\n// browser command set omits (`account`, `profile`).\nexport const Commands = AppCapability.commands(() => import('#commands'));\n\nexport const ClientServices = Capability.lazyModule(\n  'ClientServices',\n  {\n    requires: [ClientCapabilities.Client],\n    provides: [ClientCapabilities.Config, ClientCapabilities.EdgeHttpClient, ClientCapabilities.Hypergraph],\n    // `client.config` and `client.edge` are initialized-only.\n    activatesOn: ClientEvents.Initialized,\n  },\n  () => import('../client-services.ts'),\n);\n\nexport const HubHttpClient = Capability.lazyModule(\n  'HubHttpClient',\n  {\n    requires: [ClientCapabilities.Client],\n    provides: [ClientCapabilities.HubHttpClient],\n    // Reads `client.config` (initialized-only) for the hub URL.\n    activatesOn: ClientEvents.Initialized,\n  },\n  () => import('../hub-http-client.ts'),\n);\n\nexport const IdentityLifecycle = Capability.lazyModule(\n  'IdentityLifecycle',\n  {\n    requires: [\n      ClientCapabilities.Client,\n      ClientCapabilities.AccountCache,\n      Capabilities.AtomRegistry,\n      Capabilities.OperationInvoker,\n      Capabilities.PluginManager,\n    ],\n    provides: [],\n    // Subscribes to `client.halo` (initialized-only).\n    activatesOn: ClientEvents.Initialized,\n  },\n  () => import('../identity-lifecycle.ts'),\n);\n\nexport const LayerSpecs = AppCapability.layerSpec(() => import('../layer-specs.ts'), {\n  name: 'LayerSpecs',\n});\n\nexport const NavigationTargetLoader = Capability.lazyModule(\n  'NavigationTargetLoader',\n  { requires: [ClientCapabilities.Client], provides: [AppCapabilities.NavigationTargetLoader] },\n  () => import('../navigation-target-loader.ts'),\n);\n\nexport const OperationHandler = AppCapability.operationHandler(() => import('../operation-handler.ts'));\n\nexport const RemoteTraceMonitor = Capability.lazyModule(\n  'RemoteTraceMonitor',\n  // Startup: the process-manager runtime snapshots this capability once, in the Startup pass, and\n  // bakes a no-op remote source if it has not been contributed yet — demand activation always loses\n  // that race, silencing remote traces for every Process.Manager consumer.\n  { provides: [Capabilities.RemoteTraceMonitor], activatesOn: ActivationEvents.Startup },\n  () => import('../remote-trace-monitor.ts'),\n);\n\nexport const SpaceReplicationProgress = Capability.lazyModule(\n  'SpaceReplicationProgress',\n  {\n    // ProgressRegistry is read optionally in the body, not required: a host that omits\n    // plugin-progress should lose the meter, not fail to activate ClientPlugin.\n    requires: [ClientCapabilities.Client, Capabilities.ProcessManagerRuntime],\n    provides: [],\n    // Runtime event: spaces become ready when the client observes them, not at startup.\n    activatesOn: ClientEvents.SpacesAvailable,\n  },\n  () => import('../space-replication-progress.ts'),\n);\n\nexport const TraceProgress = Capability.lazyModule(\n  'TraceProgress',\n  {\n    // ProgressRegistry is resolved lazily per message (a host without it degrades to a no-op sink).\n    requires: [Capabilities.ProcessManager, Capabilities.ProcessManagerRuntime, Capabilities.ServiceResolver],\n    provides: [],\n    // Same activation as SpaceReplicationProgress: process-manager runtime, monitor, and\n    // registry are all available by the time spaces are observed.\n    activatesOn: ClientEvents.SpacesAvailable,\n  },\n  () => import('../trace-progress.ts'),\n);\n\nexport const Translations = AppCapability.translations(translations);\n\nexport const Client = undefined;\nexport const Migrations = undefined;\nexport const NavigationHandler = undefined;\nexport const ReactContext = undefined;\nexport const ReactSurface = undefined;\nexport const SchemaDefs = undefined;\n"],"mappings":";;;;;;;;AAeA,IAAa,eAAe,WAAW,WACrC,gBACA,EAAE,UAAU,CAAC,mBAAmB,YAAY,EAAE,SACxC,OAAO,4BACf;AAIA,IAAa,kBAAkB,cAAc,sBAAsB,OAAO,kCAA4B,EACpG,aAAa,aAAa,YAC5B,CAAC;AAID,IAAa,WAAW,cAAc,eAAe,OAAO,YAAY;AAExE,IAAa,iBAAiB,WAAW,WACvC,kBACA;CACE,UAAU,CAAC,mBAAmB,MAAM;CACpC,UAAU;EAAC,mBAAmB;EAAQ,mBAAmB;EAAgB,mBAAmB;CAAU;CAEtG,aAAa,aAAa;AAC5B,SACM,OAAO,8BACf;AAEA,IAAa,gBAAgB,WAAW,WACtC,iBACA;CACE,UAAU,CAAC,mBAAmB,MAAM;CACpC,UAAU,CAAC,mBAAmB,aAAa;CAE3C,aAAa,aAAa;AAC5B,SACM,OAAO,8BACf;AAEA,IAAa,oBAAoB,WAAW,WAC1C,qBACA;CACE,UAAU;EACR,mBAAmB;EACnB,mBAAmB;EACnB,aAAa;EACb,aAAa;EACb,aAAa;CACf;CACA,UAAU,CAAC;CAEX,aAAa,aAAa;AAC5B,SACM,OAAO,iCACf;AAEA,IAAa,aAAa,cAAc,gBAAgB,OAAO,4BAAsB,EACnF,MAAM,aACR,CAAC;AAED,IAAa,yBAAyB,WAAW,WAC/C,0BACA;CAAE,UAAU,CAAC,mBAAmB,MAAM;CAAG,UAAU,CAAC,gBAAgB,sBAAsB;AAAE,SACtF,OAAO,uCACf;AAEA,IAAa,mBAAmB,cAAc,uBAAuB,OAAO,gCAA0B;AAEtG,IAAa,qBAAqB,WAAW,WAC3C,sBAIA;CAAE,UAAU,CAAC,aAAa,kBAAkB;CAAG,aAAa,iBAAiB;AAAQ,SAC/E,OAAO,mCACf;AAEA,IAAa,2BAA2B,WAAW,WACjD,4BACA;CAGE,UAAU,CAAC,mBAAmB,QAAQ,aAAa,qBAAqB;CACxE,UAAU,CAAC;CAEX,aAAa,aAAa;AAC5B,SACM,OAAO,yCACf;AAEA,IAAa,gBAAgB,WAAW,WACtC,iBACA;CAEE,UAAU;EAAC,aAAa;EAAgB,aAAa;EAAuB,aAAa;CAAe;CACxG,UAAU,CAAC;CAGX,aAAa,aAAa;AAC5B,SACM,OAAO,6BACf;AAEA,IAAa,eAAe,cAAc,aAAa,YAAY;AAEnE,IAAa,SAAS,KAAA;AACtB,IAAa,aAAa,KAAA;AAC1B,IAAa,oBAAoB,KAAA;AACjC,IAAa,eAAe,KAAA;AAC5B,IAAa,eAAe,KAAA;AAC5B,IAAa,aAAa,KAAA"}

package/dist/lib/chunk-AccountContainer.mjs

@@ -1,23 +1,30 @@
-import { i as RESET_DIALOG } from "./chunk-constants.mjs";
-import { n as useAccountUrl, t as useHubHttpClient } from "./chunk-hooks.mjs";
+import { a as RESET_DIALOG } from "./chunk-constants.mjs";
+import { t as useAccountUrl } from "./chunk-useAccountUrl.mjs";
+import { t as useHubHttpClient } from "./chunk-useHubClient.mjs";
 import { ClientCapabilities } from "#types";
 import { Context } from "@dxos/context";
 import { meta } from "#meta";
 import { useCallback, useState } from "react";
+import { Form } from "@dxos/react-ui-form";
+import * as Button from "@dxos/react-ui/Button";
+import * as UiHooks from "@dxos/react-ui/Hooks";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import * as LayoutOperation from "@dxos/app-toolkit/LayoutOperation";
-import { useCapability, useOperationInvoker } from "@dxos/app-framework/ui";
+import * as Hooks from "@dxos/app-framework/Hooks";
 import { useIdentity } from "@dxos/halo-react";
-import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { useAtom, useAtomSet } from "@effect/atom-react/Hooks";
-import { Banner, Button, Flex, Icon, IconButton, Input, useAsyncEffect, useTranslation } from "@dxos/react-ui";
-import { Form } from "@dxos/react-ui-form";
+import * as Banner from "@dxos/react-ui/Banner";
+import * as Field from "@dxos/react-ui/Field";
+import * as Icon from "@dxos/react-ui/Icon";
+import * as Input from "@dxos/react-ui/Input";
+import * as Layout from "@dxos/react-ui/Layout";
 //#region src/containers/AccountContainer/AccountContainer.tsx
 var __dxlog_file = "/__w/dxos/dxos/packages/plugins/plugin-client/src/containers/AccountContainer/AccountContainer.tsx";
 var AccountContainer = () => {
-	const { t } = useTranslation(meta.profile.key);
+	const { t } = UiHooks.useTranslation(meta.profile.key);
 	const identity = useIdentity();
-	const { invokePromise } = useOperationInvoker();
-	const accountCacheAtom = useCapability(ClientCapabilities.AccountCache);
+	const { invokePromise } = Hooks.useOperationInvoker();
+	const accountCacheAtom = Hooks.useCapability(ClientCapabilities.AccountCache);
 	const [cache] = useAtom(accountCacheAtom);
 	const setCache = useAtomSet(accountCacheAtom);
 	const [resendStatus, setResendStatus] = useState(null);
@@ -26,13 +33,13 @@ var AccountContainer = () => {
 	const [requestSubmitted, setRequestSubmitted] = useState(false);
 	const hubHttp = useHubHttpClient();
 	const { openAccountPage } = useAccountUrl();
-	useAsyncEffect(async () => {
+	UiHooks.useAsyncEffect(async () => {
 		if (!hubHttp) return;
 		try {
 			const account = await hubHttp.getAccount(new Context(void 0, {
 				"~LogMeta": "~LogMeta",
 				F: __dxlog_file,
-				L: 45
+				L: 51
 			}));
 			setCache((prev) => ({
 				...prev,
@@ -57,7 +64,7 @@ var AccountContainer = () => {
 			const result = await hubHttp.resendVerificationEmail(new Context(void 0, {
 				"~LogMeta": "~LogMeta",
 				F: __dxlog_file,
-				L: 63
+				L: 69
 			}));
 			if (result.sent) setResendStatus(t("verification-sent.message"));
 			else if (result.cooldownSecondsRemaining) setResendStatus(t("verification-cooldown.message", { seconds: result.cooldownSecondsRemaining }));
@@ -75,7 +82,7 @@ var AccountContainer = () => {
 			await hubHttp.requestAccess(new Context(void 0, {
 				"~LogMeta": "~LogMeta",
 				F: __dxlog_file,
-				L: 85
+				L: 91
 			}), {
 				email,
 				identityDid
@@ -98,7 +105,7 @@ var AccountContainer = () => {
 					await hubHttp.deleteAccount(new Context(void 0, {
 						"~LogMeta": "~LogMeta",
 						F: __dxlog_file,
-						L: 107
+						L: 113
 					}));
 					setCache(() => ({}));
 				}
@@ -114,80 +121,85 @@ var AccountContainer = () => {
 		variant: "settings",
 		children: /* @__PURE__ */ jsx(Form.Viewport, {
 			scroll: true,
-			children: /* @__PURE__ */ jsxs(Form.Content, { children: [/* @__PURE__ */ jsx(Form.Section, {
-				title: t("account-section.title"),
+			children: /* @__PURE__ */ jsxs(Form.Content, { children: [/* @__PURE__ */ jsx(Form.FieldSet, {
+				label: t("account-section.title"),
 				description: t("account-section.description"),
-				children: accountState === "loading" ? null : accountState === "missing" ? /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx(Banner.Root, {
+				children: accountState === "loading" ? null : accountState === "missing" ? /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsxs(Banner.Root, {
 					valence: "warning",
-					children: /* @__PURE__ */ jsxs(Banner.Content, { children: [/* @__PURE__ */ jsx(Banner.Title, {
+					children: [/* @__PURE__ */ jsx(Banner.Title, {
 						icon: "ph--warning--duotone",
 						children: t("no-edge-access.title")
-					}), /* @__PURE__ */ jsx(Banner.Body, { children: t("no-edge-access.description") })] })
-				}), /* @__PURE__ */ jsx(Form.Row, {
+					}), /* @__PURE__ */ jsx(Banner.Body, { children: t("no-edge-access.description") })]
+				}), /* @__PURE__ */ jsx(Form.Field, {
+					standalone: true,
 					label: t("request-access.label"),
 					description: t("request-access.description"),
 					children: requestSubmitted ? /* @__PURE__ */ jsx("span", {
-						className: "text-sm text-description",
+						className: "text-sm text-fg-muted",
 						children: t("access-request-submitted.message")
 					}) : /* @__PURE__ */ jsxs("form", {
 						onSubmit: handleRequestAccess,
 						className: "flex gap-2 items-center justify-end",
-						children: [/* @__PURE__ */ jsx(Input.Root, { children: /* @__PURE__ */ jsx(Input.TextInput, {
+						children: [/* @__PURE__ */ jsx(Field.Root, { children: /* @__PURE__ */ jsx(Input.Root, {
 							type: "email",
 							required: true,
 							placeholder: t("access-request-email.placeholder"),
 							value: requestEmail,
 							onChange: (event) => setRequestEmail(event.target.value),
 							classNames: "w-64 max-w-full min-w-0"
-						}) }), /* @__PURE__ */ jsx(Button, {
+						}) }), /* @__PURE__ */ jsx(Button.Root, {
 							type: "submit",
-							density: "sm",
+							size: "sm",
 							children: t("request-access.label")
 						})]
 					})
-				})] }) : accountState === "error" && !account ? /* @__PURE__ */ jsx(Banner.Root, {
+				})] }) : accountState === "error" && !account ? /* @__PURE__ */ jsxs(Banner.Root, {
 					valence: "error",
-					children: /* @__PURE__ */ jsxs(Banner.Content, { children: [/* @__PURE__ */ jsx(Banner.Title, {
+					children: [/* @__PURE__ */ jsx(Banner.Title, {
 						icon: "ph--cloud-x--duotone",
 						children: t("account-offline.title")
-					}), /* @__PURE__ */ jsx(Banner.Body, { children: t("account-offline.description") })] })
-				}) : account ? /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx(Form.Row, {
+					}), /* @__PURE__ */ jsx(Banner.Body, { children: t("account-offline.description") })]
+				}) : account ? /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx(Form.Field, {
+					standalone: true,
 					label: t("email.label"),
 					description: account.email,
-					children: account.emailVerified ? /* @__PURE__ */ jsx(Icon, {
+					children: account.emailVerified ? /* @__PURE__ */ jsx(Icon.Icon, {
 						icon: "ph--check-circle--duotone",
-						size: 5,
-						classNames: "text-success-text justify-self-end"
-					}) : /* @__PURE__ */ jsxs(Flex, {
+						size: "lg",
+						classNames: "justify-self-end",
+						valence: "success"
+					}) : /* @__PURE__ */ jsxs(Layout.Flex, {
 						column: true,
 						gap: "xs",
 						align: "end",
-						children: [/* @__PURE__ */ jsx(IconButton, {
+						children: [/* @__PURE__ */ jsx(Button.Root, {
 							icon: "ph--paper-plane-tilt--regular",
 							label: t("resend-verification.label"),
 							onClick: handleResend,
-							density: "sm"
+							size: "sm"
 						}), resendStatus ? /* @__PURE__ */ jsx("span", {
-							className: "text-xs text-description",
+							className: "text-xs text-fg-muted",
 							children: resendStatus
 						}) : null]
 					})
-				}), /* @__PURE__ */ jsx(Form.Row, {
+				}), /* @__PURE__ */ jsx(Form.Field, {
+					standalone: true,
 					label: t("delete-account.label"),
 					description: t("delete-account.description"),
-					children: /* @__PURE__ */ jsx(Button, {
+					children: /* @__PURE__ */ jsx(Button.Root, {
 						variant: "destructive",
 						onClick: handleDeleteAccount,
 						children: t("delete-account.label")
 					})
 				})] }) : null
-			}), account ? /* @__PURE__ */ jsx(Form.Section, {
-				title: t("account-page-section.title"),
+			}), account ? /* @__PURE__ */ jsx(Form.FieldSet, {
+				label: t("account-page-section.title"),
 				description: t("account-page-section.description"),
-				children: /* @__PURE__ */ jsx(Form.Row, {
+				children: /* @__PURE__ */ jsx(Form.Field, {
+					standalone: true,
 					label: t("open-account-page.label"),
 					description: t("open-account-page.description"),
-					children: /* @__PURE__ */ jsx(IconButton, {
+					children: /* @__PURE__ */ jsx(Button.Root, {
 						icon: "ph--arrow-square-out--regular",
 						label: t("open-account-page.label"),
 						variant: "default",

package/dist/lib/chunk-AccountContainer.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"chunk-AccountContainer.mjs","names":[],"sources":["../../src/containers/AccountContainer/AccountContainer.tsx"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport { useAtom, useAtomSet } from '@effect/atom-react/Hooks';\nimport React, { type FormEvent, useCallback, useState } from 'react';\n\nimport { useCapability, useOperationInvoker } from '@dxos/app-framework/ui';\nimport * as LayoutOperation from '@dxos/app-toolkit/LayoutOperation';\nimport { Context } from '@dxos/context';\nimport { useIdentity } from '@dxos/halo-react';\nimport { Banner, Button, Flex, Icon, IconButton, Input, useAsyncEffect, useTranslation } from '@dxos/react-ui';\nimport { Form } from '@dxos/react-ui-form';\n\nimport { meta } from '#meta';\nimport { ClientCapabilities } from '#types';\n\nimport { RESET_DIALOG } from '../../constants';\nimport { useAccountUrl, useHubHttpClient } from '../../hooks';\n\ntype AccountState = 'loading' | 'present' | 'missing' | 'error';\n\nexport const AccountContainer = () => {\n  const { t } = useTranslation(meta.profile.key);\n  const identity = useIdentity();\n  const { invokePromise } = useOperationInvoker();\n  const accountCacheAtom = useCapability(ClientCapabilities.AccountCache);\n  const [cache] = useAtom(accountCacheAtom);\n  const setCache = useAtomSet(accountCacheAtom);\n  const [resendStatus, setResendStatus] = useState<string | null>(null);\n  const [accountState, setAccountState] = useState<AccountState>(cache.account ? 'present' : 'loading');\n  const [requestEmail, setRequestEmail] = useState('');\n  const [requestSubmitted, setRequestSubmitted] = useState(false);\n\n  // Single shared instance keeps the VP-auth handshake (request → 401 → signed\n  // retry) at one round-trip per session instead of one per panel.\n  const hubHttp = useHubHttpClient();\n  const { openAccountPage } = useAccountUrl();\n\n  useAsyncEffect(async () => {\n    if (!hubHttp) {\n      return;\n    }\n    try {\n      const account = await hubHttp.getAccount(new Context());\n      setCache((prev) => ({ ...prev, account, fetchedAt: Date.now() }));\n      setAccountState('present');\n    } catch (err: any) {\n      if (err?.data?.type === 'no_account') {\n        setCache((prev) => ({ ...prev, account: undefined, fetchedAt: Date.now() }));\n        setAccountState('missing');\n      } else {\n        setAccountState((prev) => (prev === 'present' ? 'present' : 'error'));\n      }\n    }\n  }, [hubHttp, setCache]);\n\n  const handleResend = useCallback(async () => {\n    if (!hubHttp) {\n      return;\n    }\n    try {\n      const result = await hubHttp.resendVerificationEmail(new Context());\n      if (result.sent) {\n        setResendStatus(t('verification-sent.message'));\n      } else if (result.cooldownSecondsRemaining) {\n        setResendStatus(t('verification-cooldown.message', { seconds: result.cooldownSecondsRemaining }));\n      } else {\n        setResendStatus(t('verification-failed.message'));\n      }\n    } catch {\n      setResendStatus(t('verification-failed.message'));\n    }\n  }, [hubHttp, t]);\n\n  const handleRequestAccess = useCallback(\n    async (event: FormEvent<HTMLFormElement>) => {\n      event.preventDefault();\n      const email = requestEmail.trim();\n      if (!email || !hubHttp) {\n        return;\n      }\n      try {\n        const identityDid = identity?.did;\n        await hubHttp.requestAccess(new Context(), { email, identityDid });\n      } catch {\n        // Surface a generic confirmation; failure details would leak signal.\n      }\n      setRequestSubmitted(true);\n    },\n    [hubHttp, identity, requestEmail],\n  );\n\n  // Opens the standard reset confirmation dialog. The `onBeforeReset` hook\n  // deletes the hub account first; if that fails the reset is aborted so the\n  // local identity is not wiped while the server record remains.\n  const handleDeleteAccount = useCallback(() => {\n    if (!hubHttp) {\n      return;\n    }\n    void invokePromise(LayoutOperation.UpdateDialog, {\n      subject: RESET_DIALOG,\n      blockAlign: 'start',\n      props: {\n        mode: 'reset-storage',\n        onBeforeReset: async () => {\n          await hubHttp.deleteAccount(new Context());\n          setCache(() => ({}));\n        },\n      },\n    });\n  }, [hubHttp, invokePromise, setCache]);\n\n  const account = cache.account;\n\n  return (\n    <Form.Root variant='settings'>\n      <Form.Viewport scroll>\n        <Form.Content>\n          <Form.Section title={t('account-section.title')} description={t('account-section.description')}>\n            {accountState === 'loading' ? null : accountState === 'missing' ? (\n              <>\n                <Banner.Root valence='warning'>\n                  <Banner.Content>\n                    <Banner.Title icon='ph--warning--duotone'>{t('no-edge-access.title')}</Banner.Title>\n                    <Banner.Body>{t('no-edge-access.description')}</Banner.Body>\n                  </Banner.Content>\n                </Banner.Root>\n                <Form.Row label={t('request-access.label')} description={t('request-access.description')}>\n                  {requestSubmitted ? (\n                    <span className='text-sm text-description'>{t('access-request-submitted.message')}</span>\n                  ) : (\n                    <form onSubmit={handleRequestAccess} className='flex gap-2 items-center justify-end'>\n                      <Input.Root>\n                        <Input.TextInput\n                          type='email'\n                          required\n                          placeholder={t('access-request-email.placeholder')}\n                          value={requestEmail}\n                          onChange={(event) => setRequestEmail(event.target.value)}\n                          classNames='w-64 max-w-full min-w-0'\n                        />\n                      </Input.Root>\n                      <Button type='submit' density='sm'>\n                        {t('request-access.label')}\n                      </Button>\n                    </form>\n                  )}\n                </Form.Row>\n              </>\n            ) : accountState === 'error' && !account ? (\n              <Banner.Root valence='error'>\n                <Banner.Content>\n                  <Banner.Title icon='ph--cloud-x--duotone'>{t('account-offline.title')}</Banner.Title>\n                  <Banner.Body>{t('account-offline.description')}</Banner.Body>\n                </Banner.Content>\n              </Banner.Root>\n            ) : account ? (\n              <>\n                <Form.Row label={t('email.label')} description={account.email}>\n                  {account.emailVerified ? (\n                    <Icon icon='ph--check-circle--duotone' size={5} classNames='text-success-text justify-self-end' />\n                  ) : (\n                    <Flex column gap='xs' align='end'>\n                      <IconButton\n                        icon='ph--paper-plane-tilt--regular'\n                        label={t('resend-verification.label')}\n                        onClick={handleResend}\n                        density='sm'\n                      />\n                      {resendStatus ? <span className='text-xs text-description'>{resendStatus}</span> : null}\n                    </Flex>\n                  )}\n                </Form.Row>\n                <Form.Row label={t('delete-account.label')} description={t('delete-account.description')}>\n                  <Button variant='destructive' onClick={handleDeleteAccount}>\n                    {t('delete-account.label')}\n                  </Button>\n                </Form.Row>\n              </>\n            ) : null}\n          </Form.Section>\n          {account ? (\n            <Form.Section title={t('account-page-section.title')} description={t('account-page-section.description')}>\n              <Form.Row label={t('open-account-page.label')} description={t('open-account-page.description')}>\n                <IconButton\n                  icon='ph--arrow-square-out--regular'\n                  label={t('open-account-page.label')}\n                  variant='default'\n                  onClick={openAccountPage}\n                />\n              </Form.Row>\n            </Form.Section>\n          ) : null}\n        </Form.Content>\n      </Form.Viewport>\n    </Form.Root>\n  );\n};\n\nAccountContainer.displayName = 'AccountContainer';\n"],"mappings":";;;;;;;;;;;;;;;AAsBA,IAAa,yBAAyB;CACpC,MAAM,EAAE,MAAM,eAAe,KAAK,QAAQ,GAAG;CAC7C,MAAM,WAAW,YAAY;CAC7B,MAAM,EAAE,kBAAkB,oBAAoB;CAC9C,MAAM,mBAAmB,cAAc,mBAAmB,YAAY;CACtE,MAAM,CAAC,SAAS,QAAQ,gBAAgB;CACxC,MAAM,WAAW,WAAW,gBAAgB;CAC5C,MAAM,CAAC,cAAc,mBAAmB,SAAwB,IAAI;CACpE,MAAM,CAAC,cAAc,mBAAmB,SAAuB,MAAM,UAAU,YAAY,SAAS;CACpG,MAAM,CAAC,cAAc,mBAAmB,SAAS,EAAE;CACnD,MAAM,CAAC,kBAAkB,uBAAuB,SAAS,KAAK;CAI9D,MAAM,UAAU,iBAAiB;CACjC,MAAM,EAAE,oBAAoB,cAAc;CAE1C,eAAe,YAAY;EACzB,IAAI,CAAC,SACH;EAEF,IAAI;GACF,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,QAAO,KAAA,GAAA;IAAA,YAAA;IAAA,GAAA;IAAA,GAAA;GAAA,CAAC,CAAC;GACtD,UAAU,UAAU;IAAE,GAAG;IAAM;IAAS,WAAW,KAAK,IAAI;GAAE,EAAE;GAChE,gBAAgB,SAAS;EAC3B,SAAS,KAAU;GACjB,IAAI,KAAK,MAAM,SAAS,cAAc;IACpC,UAAU,UAAU;KAAE,GAAG;KAAM,SAAS,KAAA;KAAW,WAAW,KAAK,IAAI;IAAE,EAAE;IAC3E,gBAAgB,SAAS;GAC3B,OACE,iBAAiB,SAAU,SAAS,YAAY,YAAY,OAAQ;EAExE;CACF,GAAG,CAAC,SAAS,QAAQ,CAAC;CAEtB,MAAM,eAAe,YAAY,YAAY;EAC3C,IAAI,CAAC,SACH;EAEF,IAAI;GACF,MAAM,SAAS,MAAM,QAAQ,wBAAwB,IAAI,QAAO,KAAA,GAAA;IAAA,YAAA;IAAA,GAAA;IAAA,GAAA;GAAA,CAAC,CAAC;GAClE,IAAI,OAAO,MACT,gBAAgB,EAAE,2BAA2B,CAAC;QACzC,IAAI,OAAO,0BAChB,gBAAgB,EAAE,iCAAiC,EAAE,SAAS,OAAO,yBAAyB,CAAC,CAAC;QAEhG,gBAAgB,EAAE,6BAA6B,CAAC;EAEpD,QAAQ;GACN,gBAAgB,EAAE,6BAA6B,CAAC;EAClD;CACF,GAAG,CAAC,SAAS,CAAC,CAAC;CAEf,MAAM,sBAAsB,YAC1B,OAAO,UAAsC;EAC3C,MAAM,eAAe;EACrB,MAAM,QAAQ,aAAa,KAAK;EAChC,IAAI,CAAC,SAAS,CAAC,SACb;EAEF,IAAI;GACF,MAAM,cAAc,UAAU;GAC9B,MAAM,QAAQ,cAAc,IAAI,QAAO,KAAA,GAAA;IAAA,YAAA;IAAA,GAAA;IAAA,GAAA;GAAA,CAAC,GAAG;IAAE;IAAO;GAAY,CAAC;EACnE,QAAQ,CAER;EACA,oBAAoB,IAAI;CAC1B,GACA;EAAC;EAAS;EAAU;CAAY,CAClC;CAKA,MAAM,sBAAsB,kBAAkB;EAC5C,IAAI,CAAC,SACH;EAEF,cAAmB,gBAAgB,cAAc;GAC/C,SAAS;GACT,YAAY;GACZ,OAAO;IACL,MAAM;IACN,eAAe,YAAY;KACzB,MAAM,QAAQ,cAAc,IAAI,QAAO,KAAA,GAAA;MAAA,YAAA;MAAA,GAAA;MAAA,GAAA;KAAA,CAAC,CAAC;KACzC,gBAAgB,CAAC,EAAE;IACrB;GACF;EACF,CAAC;CACH,GAAG;EAAC;EAAS;EAAe;CAAQ,CAAC;CAErC,MAAM,UAAU,MAAM;CAEtB,OACE,oBAAC,KAAK,MAAN;EAAW,SAAQ;EACjB,UAAA,oBAAC,KAAK,UAAN;GAAe,QAAA;GACb,UAAA,qBAAC,KAAK,SAAN,EAAA,UAAA,CACE,oBAAC,KAAK,SAAN;IAAc,OAAO,EAAE,uBAAuB;IAAG,aAAa,EAAE,6BAA6B;IAC1F,UAAA,iBAAiB,YAAY,OAAO,iBAAiB,YACpD,qBAAA,UAAA,EAAA,UAAA,CACE,oBAAC,OAAO,MAAR;KAAa,SAAQ;KACnB,UAAA,qBAAC,OAAO,SAAR,EAAA,UAAA,CACE,oBAAC,OAAO,OAAR;MAAc,MAAK;MAAwB,UAAA,EAAE,sBAAsB;KAAgB,CAAA,GACnF,oBAAC,OAAO,MAAR,EAAA,UAAc,EAAE,4BAA4B,EAAe,CAAA,CAC7C,EAAA,CAAA;IACL,CAAA,GACb,oBAAC,KAAK,KAAN;KAAU,OAAO,EAAE,sBAAsB;KAAG,aAAa,EAAE,4BAA4B;KACpF,UAAA,mBACC,oBAAC,QAAD;MAAM,WAAU;MAA4B,UAAA,EAAE,kCAAkC;KAAQ,CAAA,IAExF,qBAAC,QAAD;MAAM,UAAU;MAAqB,WAAU;MAA/C,UAAA,CACE,oBAAC,MAAM,MAAP,EAAA,UACE,oBAAC,MAAM,WAAP;OACE,MAAK;OACL,UAAA;OACA,aAAa,EAAE,kCAAkC;OACjD,OAAO;OACP,WAAW,UAAU,gBAAgB,MAAM,OAAO,KAAK;OACvD,YAAW;MACZ,CAAA,EACS,CAAA,GACZ,oBAAC,QAAD;OAAQ,MAAK;OAAS,SAAQ;OAC3B,UAAA,EAAE,sBAAsB;MACnB,CAAA,CACJ;;IAEA,CAAA,CACV,EAAA,CAAA,IACA,iBAAiB,WAAW,CAAC,UAC/B,oBAAC,OAAO,MAAR;KAAa,SAAQ;KACnB,UAAA,qBAAC,OAAO,SAAR,EAAA,UAAA,CACE,oBAAC,OAAO,OAAR;MAAc,MAAK;MAAwB,UAAA,EAAE,uBAAuB;KAAgB,CAAA,GACpF,oBAAC,OAAO,MAAR,EAAA,UAAc,EAAE,6BAA6B,EAAe,CAAA,CAC9C,EAAA,CAAA;IACL,CAAA,IACX,UACF,qBAAA,UAAA,EAAA,UAAA,CACE,oBAAC,KAAK,KAAN;KAAU,OAAO,EAAE,aAAa;KAAG,aAAa,QAAQ;KACrD,UAAA,QAAQ,gBACP,oBAAC,MAAD;MAAM,MAAK;MAA4B,MAAM;MAAG,YAAW;KAAsC,CAAA,IAEjG,qBAAC,MAAD;MAAM,QAAA;MAAO,KAAI;MAAK,OAAM;MAA5B,UAAA,CACE,oBAAC,YAAD;OACE,MAAK;OACL,OAAO,EAAE,2BAA2B;OACpC,SAAS;OACT,SAAQ;MACT,CAAA,GACA,eAAe,oBAAC,QAAD;OAAM,WAAU;OAA4B,UAAA;MAAmB,CAAA,IAAI,IAC/E;;IAEA,CAAA,GACV,oBAAC,KAAK,KAAN;KAAU,OAAO,EAAE,sBAAsB;KAAG,aAAa,EAAE,4BAA4B;KACrF,UAAA,oBAAC,QAAD;MAAQ,SAAQ;MAAc,SAAS;MACpC,UAAA,EAAE,sBAAsB;KACnB,CAAA;IACA,CAAA,CACV,EAAA,CAAA,IACA;GACQ,CAAA,GACb,UACC,oBAAC,KAAK,SAAN;IAAc,OAAO,EAAE,4BAA4B;IAAG,aAAa,EAAE,kCAAkC;IACrG,UAAA,oBAAC,KAAK,KAAN;KAAU,OAAO,EAAE,yBAAyB;KAAG,aAAa,EAAE,+BAA+B;KAC3F,UAAA,oBAAC,YAAD;MACE,MAAK;MACL,OAAO,EAAE,yBAAyB;MAClC,SAAQ;MACR,SAAS;KACV,CAAA;IACO,CAAA;GACE,CAAA,IACZ,IACQ,EAAA,CAAA;EACD,CAAA;CACN,CAAA;AAEf;AAEA,iBAAiB,cAAc"}
+{"version":3,"file":"chunk-AccountContainer.mjs","names":[],"sources":["../../src/containers/AccountContainer/AccountContainer.tsx"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport { useAtom, useAtomSet } from '@effect/atom-react/Hooks';\nimport React, { type FormEvent, useCallback, useState } from 'react';\n\nimport * as Hooks from '@dxos/app-framework/Hooks';\nimport * as LayoutOperation from '@dxos/app-toolkit/LayoutOperation';\nimport { Context } from '@dxos/context';\nimport { useIdentity } from '@dxos/halo-react';\nimport { Form } from '@dxos/react-ui-form';\nimport * as Banner from '@dxos/react-ui/Banner';\nimport * as Button from '@dxos/react-ui/Button';\nimport * as Field from '@dxos/react-ui/Field';\nimport * as UiHooks from '@dxos/react-ui/Hooks';\nimport * as Icon from '@dxos/react-ui/Icon';\nimport * as Input from '@dxos/react-ui/Input';\nimport * as Layout from '@dxos/react-ui/Layout';\n\nimport { meta } from '#meta';\nimport { ClientCapabilities } from '#types';\n\nimport { RESET_DIALOG } from '../../constants.ts';\nimport { useAccountUrl, useHubHttpClient } from '../../hooks/index.ts';\n\ntype AccountState = 'loading' | 'present' | 'missing' | 'error';\n\nexport const AccountContainer = () => {\n  const { t } = UiHooks.useTranslation(meta.profile.key);\n  const identity = useIdentity();\n  const { invokePromise } = Hooks.useOperationInvoker();\n  const accountCacheAtom = Hooks.useCapability(ClientCapabilities.AccountCache);\n  const [cache] = useAtom(accountCacheAtom);\n  const setCache = useAtomSet(accountCacheAtom);\n  const [resendStatus, setResendStatus] = useState<string | null>(null);\n  const [accountState, setAccountState] = useState<AccountState>(cache.account ? 'present' : 'loading');\n  const [requestEmail, setRequestEmail] = useState('');\n  const [requestSubmitted, setRequestSubmitted] = useState(false);\n\n  // Single shared instance keeps the VP-auth handshake (request → 401 → signed\n  // retry) at one round-trip per session instead of one per panel.\n  const hubHttp = useHubHttpClient();\n  const { openAccountPage } = useAccountUrl();\n\n  UiHooks.useAsyncEffect(async () => {\n    if (!hubHttp) {\n      return;\n    }\n    try {\n      const account = await hubHttp.getAccount(new Context());\n      setCache((prev) => ({ ...prev, account, fetchedAt: Date.now() }));\n      setAccountState('present');\n    } catch (err: any) {\n      if (err?.data?.type === 'no_account') {\n        setCache((prev) => ({ ...prev, account: undefined, fetchedAt: Date.now() }));\n        setAccountState('missing');\n      } else {\n        setAccountState((prev) => (prev === 'present' ? 'present' : 'error'));\n      }\n    }\n  }, [hubHttp, setCache]);\n\n  const handleResend = useCallback(async () => {\n    if (!hubHttp) {\n      return;\n    }\n    try {\n      const result = await hubHttp.resendVerificationEmail(new Context());\n      if (result.sent) {\n        setResendStatus(t('verification-sent.message'));\n      } else if (result.cooldownSecondsRemaining) {\n        setResendStatus(t('verification-cooldown.message', { seconds: result.cooldownSecondsRemaining }));\n      } else {\n        setResendStatus(t('verification-failed.message'));\n      }\n    } catch {\n      setResendStatus(t('verification-failed.message'));\n    }\n  }, [hubHttp, t]);\n\n  const handleRequestAccess = useCallback(\n    async (event: FormEvent<HTMLFormElement>) => {\n      event.preventDefault();\n      const email = requestEmail.trim();\n      if (!email || !hubHttp) {\n        return;\n      }\n      try {\n        const identityDid = identity?.did;\n        await hubHttp.requestAccess(new Context(), { email, identityDid });\n      } catch {\n        // Surface a generic confirmation; failure details would leak signal.\n      }\n      setRequestSubmitted(true);\n    },\n    [hubHttp, identity, requestEmail],\n  );\n\n  // Opens the standard reset confirmation dialog. The `onBeforeReset` hook\n  // deletes the hub account first; if that fails the reset is aborted so the\n  // local identity is not wiped while the server record remains.\n  const handleDeleteAccount = useCallback(() => {\n    if (!hubHttp) {\n      return;\n    }\n    void invokePromise(LayoutOperation.UpdateDialog, {\n      subject: RESET_DIALOG,\n      blockAlign: 'start',\n      props: {\n        mode: 'reset-storage',\n        onBeforeReset: async () => {\n          await hubHttp.deleteAccount(new Context());\n          setCache(() => ({}));\n        },\n      },\n    });\n  }, [hubHttp, invokePromise, setCache]);\n\n  const account = cache.account;\n\n  return (\n    <Form.Root variant='settings'>\n      <Form.Viewport scroll>\n        <Form.Content>\n          <Form.FieldSet label={t('account-section.title')} description={t('account-section.description')}>\n            {accountState === 'loading' ? null : accountState === 'missing' ? (\n              <>\n                <Banner.Root valence='warning'>\n                  <Banner.Title icon='ph--warning--duotone'>{t('no-edge-access.title')}</Banner.Title>\n                  <Banner.Body>{t('no-edge-access.description')}</Banner.Body>\n                </Banner.Root>\n                <Form.Field standalone label={t('request-access.label')} description={t('request-access.description')}>\n                  {requestSubmitted ? (\n                    <span className='text-sm text-fg-muted'>{t('access-request-submitted.message')}</span>\n                  ) : (\n                    <form onSubmit={handleRequestAccess} className='flex gap-2 items-center justify-end'>\n                      <Field.Root>\n                        <Input.Root\n                          type='email'\n                          required\n                          placeholder={t('access-request-email.placeholder')}\n                          value={requestEmail}\n                          onChange={(event) => setRequestEmail(event.target.value)}\n                          classNames='w-64 max-w-full min-w-0'\n                        />\n                      </Field.Root>\n                      <Button.Root type='submit' size='sm'>\n                        {t('request-access.label')}\n                      </Button.Root>\n                    </form>\n                  )}\n                </Form.Field>\n              </>\n            ) : accountState === 'error' && !account ? (\n              <Banner.Root valence='error'>\n                <Banner.Title icon='ph--cloud-x--duotone'>{t('account-offline.title')}</Banner.Title>\n                <Banner.Body>{t('account-offline.description')}</Banner.Body>\n              </Banner.Root>\n            ) : account ? (\n              <>\n                <Form.Field standalone label={t('email.label')} description={account.email}>\n                  {account.emailVerified ? (\n                    <Icon.Icon\n                      icon='ph--check-circle--duotone'\n                      size='lg'\n                      classNames='justify-self-end'\n                      valence='success'\n                    />\n                  ) : (\n                    <Layout.Flex column gap='xs' align='end'>\n                      <Button.Root\n                        icon='ph--paper-plane-tilt--regular'\n                        label={t('resend-verification.label')}\n                        onClick={handleResend}\n                        size='sm'\n                      />\n                      {resendStatus ? <span className='text-xs text-fg-muted'>{resendStatus}</span> : null}\n                    </Layout.Flex>\n                  )}\n                </Form.Field>\n                <Form.Field standalone label={t('delete-account.label')} description={t('delete-account.description')}>\n                  <Button.Root variant='destructive' onClick={handleDeleteAccount}>\n                    {t('delete-account.label')}\n                  </Button.Root>\n                </Form.Field>\n              </>\n            ) : null}\n          </Form.FieldSet>\n          {account ? (\n            <Form.FieldSet label={t('account-page-section.title')} description={t('account-page-section.description')}>\n              <Form.Field\n                standalone\n                label={t('open-account-page.label')}\n                description={t('open-account-page.description')}\n              >\n                <Button.Root\n                  icon='ph--arrow-square-out--regular'\n                  label={t('open-account-page.label')}\n                  variant='default'\n                  onClick={openAccountPage}\n                />\n              </Form.Field>\n            </Form.FieldSet>\n          ) : null}\n        </Form.Content>\n      </Form.Viewport>\n    </Form.Root>\n  );\n};\n\nAccountContainer.displayName = 'AccountContainer';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA4BA,IAAa,yBAAyB;CACpC,MAAM,EAAE,MAAM,QAAQ,eAAe,KAAK,QAAQ,GAAG;CACrD,MAAM,WAAW,YAAY;CAC7B,MAAM,EAAE,kBAAkB,MAAM,oBAAoB;CACpD,MAAM,mBAAmB,MAAM,cAAc,mBAAmB,YAAY;CAC5E,MAAM,CAAC,SAAS,QAAQ,gBAAgB;CACxC,MAAM,WAAW,WAAW,gBAAgB;CAC5C,MAAM,CAAC,cAAc,mBAAmB,SAAwB,IAAI;CACpE,MAAM,CAAC,cAAc,mBAAmB,SAAuB,MAAM,UAAU,YAAY,SAAS;CACpG,MAAM,CAAC,cAAc,mBAAmB,SAAS,EAAE;CACnD,MAAM,CAAC,kBAAkB,uBAAuB,SAAS,KAAK;CAI9D,MAAM,UAAU,iBAAiB;CACjC,MAAM,EAAE,oBAAoB,cAAc;CAE1C,QAAQ,eAAe,YAAY;EACjC,IAAI,CAAC,SACH;EAEF,IAAI;GACF,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,QAAO,KAAA,GAAA;IAAA,YAAA;IAAA,GAAA;IAAA,GAAA;GAAA,CAAC,CAAC;GACtD,UAAU,UAAU;IAAE,GAAG;IAAM;IAAS,WAAW,KAAK,IAAI;GAAE,EAAE;GAChE,gBAAgB,SAAS;EAC3B,SAAS,KAAU;GACjB,IAAI,KAAK,MAAM,SAAS,cAAc;IACpC,UAAU,UAAU;KAAE,GAAG;KAAM,SAAS,KAAA;KAAW,WAAW,KAAK,IAAI;IAAE,EAAE;IAC3E,gBAAgB,SAAS;GAC3B,OACE,iBAAiB,SAAU,SAAS,YAAY,YAAY,OAAQ;EAExE;CACF,GAAG,CAAC,SAAS,QAAQ,CAAC;CAEtB,MAAM,eAAe,YAAY,YAAY;EAC3C,IAAI,CAAC,SACH;EAEF,IAAI;GACF,MAAM,SAAS,MAAM,QAAQ,wBAAwB,IAAI,QAAO,KAAA,GAAA;IAAA,YAAA;IAAA,GAAA;IAAA,GAAA;GAAA,CAAC,CAAC;GAClE,IAAI,OAAO,MACT,gBAAgB,EAAE,2BAA2B,CAAC;QACzC,IAAI,OAAO,0BAChB,gBAAgB,EAAE,iCAAiC,EAAE,SAAS,OAAO,yBAAyB,CAAC,CAAC;QAEhG,gBAAgB,EAAE,6BAA6B,CAAC;EAEpD,QAAQ;GACN,gBAAgB,EAAE,6BAA6B,CAAC;EAClD;CACF,GAAG,CAAC,SAAS,CAAC,CAAC;CAEf,MAAM,sBAAsB,YAC1B,OAAO,UAAsC;EAC3C,MAAM,eAAe;EACrB,MAAM,QAAQ,aAAa,KAAK;EAChC,IAAI,CAAC,SAAS,CAAC,SACb;EAEF,IAAI;GACF,MAAM,cAAc,UAAU;GAC9B,MAAM,QAAQ,cAAc,IAAI,QAAO,KAAA,GAAA;IAAA,YAAA;IAAA,GAAA;IAAA,GAAA;GAAA,CAAC,GAAG;IAAE;IAAO;GAAY,CAAC;EACnE,QAAQ,CAER;EACA,oBAAoB,IAAI;CAC1B,GACA;EAAC;EAAS;EAAU;CAAY,CAClC;CAKA,MAAM,sBAAsB,kBAAkB;EAC5C,IAAI,CAAC,SACH;EAEF,cAAmB,gBAAgB,cAAc;GAC/C,SAAS;GACT,YAAY;GACZ,OAAO;IACL,MAAM;IACN,eAAe,YAAY;KACzB,MAAM,QAAQ,cAAc,IAAI,QAAO,KAAA,GAAA;MAAA,YAAA;MAAA,GAAA;MAAA,GAAA;KAAA,CAAC,CAAC;KACzC,gBAAgB,CAAC,EAAE;IACrB;GACF;EACF,CAAC;CACH,GAAG;EAAC;EAAS;EAAe;CAAQ,CAAC;CAErC,MAAM,UAAU,MAAM;CAEtB,OACE,oBAAC,KAAK,MAAN;EAAW,SAAQ;EACjB,UAAA,oBAAC,KAAK,UAAN;GAAe,QAAA;GACb,UAAA,qBAAC,KAAK,SAAN,EAAA,UAAA,CACE,oBAAC,KAAK,UAAN;IAAe,OAAO,EAAE,uBAAuB;IAAG,aAAa,EAAE,6BAA6B;IAC3F,UAAA,iBAAiB,YAAY,OAAO,iBAAiB,YACpD,qBAAA,UAAA,EAAA,UAAA,CACE,qBAAC,OAAO,MAAR;KAAa,SAAQ;KAArB,UAAA,CACE,oBAAC,OAAO,OAAR;MAAc,MAAK;MAAwB,UAAA,EAAE,sBAAsB;KAAgB,CAAA,GACnF,oBAAC,OAAO,MAAR,EAAA,UAAc,EAAE,4BAA4B,EAAe,CAAA,CAChD;IACb,CAAA,GAAA,oBAAC,KAAK,OAAN;KAAY,YAAA;KAAW,OAAO,EAAE,sBAAsB;KAAG,aAAa,EAAE,4BAA4B;KACjG,UAAA,mBACC,oBAAC,QAAD;MAAM,WAAU;MAAyB,UAAA,EAAE,kCAAkC;KAAQ,CAAA,IAErF,qBAAC,QAAD;MAAM,UAAU;MAAqB,WAAU;MAA/C,UAAA,CACE,oBAAC,MAAM,MAAP,EAAA,UACE,oBAAC,MAAM,MAAP;OACE,MAAK;OACL,UAAA;OACA,aAAa,EAAE,kCAAkC;OACjD,OAAO;OACP,WAAW,UAAU,gBAAgB,MAAM,OAAO,KAAK;OACvD,YAAW;MACZ,CAAA,EACS,CAAA,GACZ,oBAAC,OAAO,MAAR;OAAa,MAAK;OAAS,MAAK;OAC7B,UAAA,EAAE,sBAAsB;MACd,CAAA,CACT;;IAEE,CAAA,CACZ,EAAA,CAAA,IACA,iBAAiB,WAAW,CAAC,UAC/B,qBAAC,OAAO,MAAR;KAAa,SAAQ;KAArB,UAAA,CACE,oBAAC,OAAO,OAAR;MAAc,MAAK;MAAwB,UAAA,EAAE,uBAAuB;KAAgB,CAAA,GACpF,oBAAC,OAAO,MAAR,EAAA,UAAc,EAAE,6BAA6B,EAAe,CAAA,CACjD;IACX,CAAA,IAAA,UACF,qBAAA,UAAA,EAAA,UAAA,CACE,oBAAC,KAAK,OAAN;KAAY,YAAA;KAAW,OAAO,EAAE,aAAa;KAAG,aAAa,QAAQ;KAClE,UAAA,QAAQ,gBACP,oBAAC,KAAK,MAAN;MACE,MAAK;MACL,MAAK;MACL,YAAW;MACX,SAAQ;KACT,CAAA,IAED,qBAAC,OAAO,MAAR;MAAa,QAAA;MAAO,KAAI;MAAK,OAAM;MAAnC,UAAA,CACE,oBAAC,OAAO,MAAR;OACE,MAAK;OACL,OAAO,EAAE,2BAA2B;OACpC,SAAS;OACT,MAAK;MACN,CAAA,GACA,eAAe,oBAAC,QAAD;OAAM,WAAU;OAAyB,UAAA;MAAmB,CAAA,IAAI,IACrE;;IAEL,CAAA,GACZ,oBAAC,KAAK,OAAN;KAAY,YAAA;KAAW,OAAO,EAAE,sBAAsB;KAAG,aAAa,EAAE,4BAA4B;KAClG,UAAA,oBAAC,OAAO,MAAR;MAAa,SAAQ;MAAc,SAAS;MACzC,UAAA,EAAE,sBAAsB;KACd,CAAA;IACH,CAAA,CACZ,EAAA,CAAA,IACA;GACS,CAAA,GACd,UACC,oBAAC,KAAK,UAAN;IAAe,OAAO,EAAE,4BAA4B;IAAG,aAAa,EAAE,kCAAkC;IACtG,UAAA,oBAAC,KAAK,OAAN;KACE,YAAA;KACA,OAAO,EAAE,yBAAyB;KAClC,aAAa,EAAE,+BAA+B;KAE9C,UAAA,oBAAC,OAAO,MAAR;MACE,MAAK;MACL,OAAO,EAAE,yBAAyB;MAClC,SAAQ;MACR,SAAS;KACV,CAAA;IACS,CAAA;GACC,CAAA,IACb,IACQ,EAAA,CAAA;EACD,CAAA;CACN,CAAA;AAEf;AAEA,iBAAiB,cAAc"}

package/dist/lib/chunk-CliLoginDialog.mjs

@@ -0,0 +1,146 @@
+import { CliLogin, ClientCapabilities } from "#types";
+import { log } from "@dxos/log";
+import { meta } from "#meta";
+import { useCallback, useEffect, useRef, useState } from "react";
+import * as Button from "@dxos/react-ui/Button";
+import * as UiHooks from "@dxos/react-ui/Hooks";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import * as EffectEx from "@dxos/effect/EffectEx";
+import * as LayoutOperation from "@dxos/app-toolkit/LayoutOperation";
+import * as Hooks from "@dxos/app-framework/Hooks";
+import { useIdentity, useInvitationFlow } from "@dxos/halo-react";
+import * as AlertDialog from "@dxos/react-ui/AlertDialog";
+//#region src/containers/CliLoginDialog/CliLoginDialog.tsx
+var __dxlog_file = "/__w/dxos/dxos/packages/plugins/plugin-client/src/containers/CliLoginDialog/CliLoginDialog.tsx";
+/**
+* Approves a `dx` CLI on this machine as a new device of the current identity.
+*
+* The invitation authenticates with a known public key, whose keypair travels inside the code, so
+* the CLI joins without an auth-code round trip. That makes the code a bearer credential, which is
+* why it is only created on an explicit click and only sent to a loopback callback.
+*/
+var CliLoginDialog = ({ callback, state }) => {
+	const { t } = UiHooks.useTranslation(meta.profile.key);
+	const { invokePromise } = Hooks.useOperationInvoker();
+	const identity = useIdentity();
+	const [identityService] = Hooks.useCapabilities(ClientCapabilities.IdentityService);
+	const [flow, setFlow] = useState();
+	const [status, setStatus] = useState("confirm");
+	const [error, setError] = useState();
+	const { event } = useInvitationFlow(flow);
+	const flowRef = useRef(void 0);
+	const closedRef = useRef(false);
+	const close = useCallback(() => invokePromise(LayoutOperation.UpdateDialog, { state: false }), [invokePromise]);
+	useEffect(() => {
+		closedRef.current = false;
+		return () => {
+			closedRef.current = true;
+			if (flowRef.current) EffectEx.runPromise(flowRef.current.cancel()).catch((err) => log.catch(err, void 0, {
+				"~LogMeta": "~LogMeta",
+				F: __dxlog_file,
+				L: 59,
+				S: void 0
+			}));
+		};
+	}, []);
+	useEffect(() => {
+		switch (event?._tag) {
+			case "success":
+				flowRef.current = void 0;
+				setStatus("success");
+				break;
+			case "cancelled":
+			case "error":
+				flowRef.current = void 0;
+				setError(event._tag === "error" ? event.message : t("cli-login-cancelled.message"));
+				setStatus("error");
+		}
+	}, [event?._tag, t]);
+	const handleAuthorize = useCallback(async () => {
+		const target = CliLogin.parseCallback(callback);
+		if (!identityService || !target) return;
+		setStatus("sending");
+		try {
+			const created = await EffectEx.runPromise(identityService.share({ authMethod: "known-public-key" }));
+			if (closedRef.current) {
+				await EffectEx.runPromise(created.cancel());
+				return;
+			}
+			flowRef.current = created;
+			setFlow(created);
+			const code = await EffectEx.runPromise(created.code);
+			if (closedRef.current) return;
+			await fetch(CliLogin.createCallbackUrl(target, code, state), { mode: "no-cors" });
+			setStatus("waiting");
+		} catch (err) {
+			log.catch(err, void 0, {
+				"~LogMeta": "~LogMeta",
+				F: __dxlog_file,
+				L: 102,
+				S: void 0
+			});
+			setError(err instanceof Error ? err.message : String(err));
+			setStatus("error");
+		}
+	}, [
+		identityService,
+		callback,
+		state
+	]);
+	return /* @__PURE__ */ jsxs(AlertDialog.Content, {
+		size: "md",
+		children: [/* @__PURE__ */ jsxs(AlertDialog.Body, { children: [
+			/* @__PURE__ */ jsx(AlertDialog.Title, { children: t("cli-login-dialog.title") }),
+			/* @__PURE__ */ jsx(AlertDialog.Description, {
+				classNames: "py-2",
+				children: identity ? t("cli-login-dialog.description") : t("cli-login-no-identity.message")
+			}),
+			identity && /* @__PURE__ */ jsxs("div", {
+				className: "py-2",
+				children: [/* @__PURE__ */ jsx("p", {
+					className: "text-sm text-fg-subtle",
+					children: t("cli-login-code.label")
+				}), /* @__PURE__ */ jsx("p", {
+					className: "py-2 font-mono text-2xl tracking-widest text-center",
+					"data-testid": "cliLogin.state",
+					children: state
+				})]
+			}),
+			/* @__PURE__ */ jsxs("p", {
+				className: "py-2 text-sm",
+				"data-testid": "cliLogin.status",
+				"data-status": status,
+				children: [
+					status === "sending" && t("cli-login-sending.message"),
+					status === "waiting" && t("cli-login-waiting.message"),
+					status === "success" && t("cli-login-success.message"),
+					status === "error" && t("cli-login-error.message", { error })
+				]
+			})
+		] }), /* @__PURE__ */ jsx(AlertDialog.Footer, { children: status === "confirm" || status === "sending" ? /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx(AlertDialog.Cancel, {
+			"data-testid": "cliLogin.deny",
+			disabled: status === "sending",
+			onClick: close,
+			children: t("cli-login-deny.label")
+		}), /* @__PURE__ */ jsx(Button.Root, {
+			"data-testid": "cliLogin.authorize",
+			variant: "primary",
+			disabled: !identity || status === "sending",
+			onClick: handleAuthorize,
+			children: t("cli-login-authorize.label")
+		})] }) : /* @__PURE__ */ jsx(AlertDialog.Action, {
+			"data-testid": "cliLogin.done",
+			variant: status === "success" ? "primary" : "default",
+			onClick: close,
+			children: t(status === "waiting" ? "cli-login-cancel.label" : "cli-login-done.label")
+		}) })]
+	});
+};
+CliLoginDialog.displayName = "CliLoginDialog";
+//#endregion
+//#region src/containers/CliLoginDialog/index.ts
+var CliLoginDialog_default = CliLoginDialog;
+//#endregion
+export { CliLoginDialog, CliLoginDialog_default as default };
+
+//# sourceMappingURL=chunk-CliLoginDialog.mjs.map

package/dist/lib/chunk-CliLoginDialog.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-CliLoginDialog.mjs","names":[],"sources":["../../src/containers/CliLoginDialog/CliLoginDialog.tsx","../../src/containers/CliLoginDialog/index.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport React, { useCallback, useEffect, useRef, useState } from 'react';\n\nimport * as Hooks from '@dxos/app-framework/Hooks';\nimport * as LayoutOperation from '@dxos/app-toolkit/LayoutOperation';\nimport * as EffectEx from '@dxos/effect/EffectEx';\nimport { type Invitation } from '@dxos/halo';\nimport { useIdentity, useInvitationFlow } from '@dxos/halo-react';\nimport { log } from '@dxos/log';\nimport * as AlertDialog from '@dxos/react-ui/AlertDialog';\nimport * as Button from '@dxos/react-ui/Button';\nimport * as UiHooks from '@dxos/react-ui/Hooks';\n\nimport { meta } from '#meta';\nimport { ClientCapabilities, CliLogin } from '#types';\n\nexport type CliLoginDialogProps = {\n  /** The CLI's loopback callback, already checked by {@link CliLogin.parseCallback}. */\n  callback: string;\n  /** The CLI's state, which the terminal prints too so the user can match the two. */\n  state: string;\n};\n\ntype Status = 'confirm' | 'sending' | 'waiting' | 'success' | 'error';\n\n/**\n * Approves a `dx` CLI on this machine as a new device of the current identity.\n *\n * The invitation authenticates with a known public key, whose keypair travels inside the code, so\n * the CLI joins without an auth-code round trip. That makes the code a bearer credential, which is\n * why it is only created on an explicit click and only sent to a loopback callback.\n */\nexport const CliLoginDialog = ({ callback, state }: CliLoginDialogProps) => {\n  const { t } = UiHooks.useTranslation(meta.profile.key);\n  const { invokePromise } = Hooks.useOperationInvoker();\n  const identity = useIdentity();\n  const [identityService] = Hooks.useCapabilities(ClientCapabilities.IdentityService);\n  const [flow, setFlow] = useState<Invitation.Flow>();\n  const [status, setStatus] = useState<Status>('confirm');\n  const [error, setError] = useState<string>();\n  const { event } = useInvitationFlow(flow);\n  // The flow still to cancel on close: set once created, cleared on any terminal event.\n  const flowRef = useRef<Invitation.Flow | undefined>(undefined);\n  // Set on unmount, so an authorization still in flight stops before it sends the code.\n  const closedRef = useRef(false);\n\n  const close = useCallback(() => invokePromise(LayoutOperation.UpdateDialog, { state: false }), [invokePromise]);\n\n  // Closing mid-flow must stop the host listening, or the invitation outlives the dialog.\n  useEffect(() => {\n    // Reset on (re)mount: StrictMode runs this cleanup once before the real mount.\n    closedRef.current = false;\n    return () => {\n      closedRef.current = true;\n      if (flowRef.current) {\n        void EffectEx.runPromise(flowRef.current.cancel()).catch((err) => log.catch(err));\n      }\n    };\n  }, []);\n\n  useEffect(() => {\n    switch (event?._tag) {\n      case 'success':\n        flowRef.current = undefined;\n        setStatus('success');\n        break;\n      case 'cancelled':\n      case 'error':\n        flowRef.current = undefined;\n        setError(event._tag === 'error' ? event.message : t('cli-login-cancelled.message'));\n        setStatus('error');\n        break;\n    }\n  }, [event?._tag, t]);\n\n  const handleAuthorize = useCallback(async () => {\n    const target = CliLogin.parseCallback(callback);\n    if (!identityService || !target) {\n      return;\n    }\n    setStatus('sending');\n    try {\n      const created = await EffectEx.runPromise(identityService.share({ authMethod: 'known-public-key' }));\n      if (closedRef.current) {\n        await EffectEx.runPromise(created.cancel());\n        return;\n      }\n      flowRef.current = created;\n      setFlow(created);\n      const code = await EffectEx.runPromise(created.code);\n      if (closedRef.current) {\n        return;\n      }\n      // `no-cors`: the loopback server sends no CORS headers and the response carries nothing needed\n      // here; the flow's own events report whether the CLI joined.\n      await fetch(CliLogin.createCallbackUrl(target, code, state), { mode: 'no-cors' });\n      setStatus('waiting');\n    } catch (err) {\n      log.catch(err);\n      setError(err instanceof Error ? err.message : String(err));\n      setStatus('error');\n    }\n  }, [identityService, callback, state]);\n\n  return (\n    <AlertDialog.Content size='md'>\n      <AlertDialog.Body>\n        <AlertDialog.Title>{t('cli-login-dialog.title')}</AlertDialog.Title>\n        <AlertDialog.Description classNames='py-2'>\n          {identity ? t('cli-login-dialog.description') : t('cli-login-no-identity.message')}\n        </AlertDialog.Description>\n        {identity && (\n          <div className='py-2'>\n            <p className='text-sm text-fg-subtle'>{t('cli-login-code.label')}</p>\n            <p className='py-2 font-mono text-2xl tracking-widest text-center' data-testid='cliLogin.state'>\n              {state}\n            </p>\n          </div>\n        )}\n        <p className='py-2 text-sm' data-testid='cliLogin.status' data-status={status}>\n          {status === 'sending' && t('cli-login-sending.message')}\n          {status === 'waiting' && t('cli-login-waiting.message')}\n          {status === 'success' && t('cli-login-success.message')}\n          {status === 'error' && t('cli-login-error.message', { error })}\n        </p>\n      </AlertDialog.Body>\n      <AlertDialog.Footer>\n        {status === 'confirm' || status === 'sending' ? (\n          <>\n            <AlertDialog.Cancel data-testid='cliLogin.deny' disabled={status === 'sending'} onClick={close}>\n              {t('cli-login-deny.label')}\n            </AlertDialog.Cancel>\n            <Button.Root\n              data-testid='cliLogin.authorize'\n              variant='primary'\n              disabled={!identity || status === 'sending'}\n              onClick={handleAuthorize}\n            >\n              {t('cli-login-authorize.label')}\n            </Button.Root>\n          </>\n        ) : (\n          <AlertDialog.Action\n            data-testid='cliLogin.done'\n            variant={status === 'success' ? 'primary' : 'default'}\n            onClick={close}\n          >\n            {t(status === 'waiting' ? 'cli-login-cancel.label' : 'cli-login-done.label')}\n          </AlertDialog.Action>\n        )}\n      </AlertDialog.Footer>\n    </AlertDialog.Content>\n  );\n};\n\nCliLoginDialog.displayName = 'CliLoginDialog';\n","//\n// Copyright 2026 DXOS.org\n//\n\nimport { CliLoginDialog } from './CliLoginDialog.tsx';\n\nexport * from './CliLoginDialog.tsx';\nexport default CliLoginDialog;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmCA,IAAa,kBAAkB,EAAE,UAAU,YAAiC;CAC1E,MAAM,EAAE,MAAM,QAAQ,eAAe,KAAK,QAAQ,GAAG;CACrD,MAAM,EAAE,kBAAkB,MAAM,oBAAoB;CACpD,MAAM,WAAW,YAAY;CAC7B,MAAM,CAAC,mBAAmB,MAAM,gBAAgB,mBAAmB,eAAe;CAClF,MAAM,CAAC,MAAM,WAAW,SAA0B;CAClD,MAAM,CAAC,QAAQ,aAAa,SAAiB,SAAS;CACtD,MAAM,CAAC,OAAO,YAAY,SAAiB;CAC3C,MAAM,EAAE,UAAU,kBAAkB,IAAI;CAExC,MAAM,UAAU,OAAoC,KAAA,CAAS;CAE7D,MAAM,YAAY,OAAO,KAAK;CAE9B,MAAM,QAAQ,kBAAkB,cAAc,gBAAgB,cAAc,EAAE,OAAO,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;CAG9G,gBAAgB;EAEd,UAAU,UAAU;EACpB,aAAa;GACX,UAAU,UAAU;GACpB,IAAI,QAAQ,SACV,SAAc,WAAW,QAAQ,QAAQ,OAAO,CAAC,CAAC,CAAC,OAAO,QAAQ,IAAI,MAAM,KAAE,KAAA,GAAA;IAAA,YAAA;IAAA,GAAA;IAAA,GAAA;IAAA,GAAA,KAAA;GAAA,CAAC,CAAC;EAEpF;CACF,GAAG,CAAC,CAAC;CAEL,gBAAgB;EACd,QAAQ,OAAO,MAAf;GACE,KAAK;IACH,QAAQ,UAAU,KAAA;IAClB,UAAU,SAAS;IACnB;GACF,KAAK;GACL,KAAK;IACH,QAAQ,UAAU,KAAA;IAClB,SAAS,MAAM,SAAS,UAAU,MAAM,UAAU,EAAE,6BAA6B,CAAC;IAClF,UAAU,OAAO;EAErB;CACF,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC;CAEnB,MAAM,kBAAkB,YAAY,YAAY;EAC9C,MAAM,SAAS,SAAS,cAAc,QAAQ;EAC9C,IAAI,CAAC,mBAAmB,CAAC,QACvB;EAEF,UAAU,SAAS;EACnB,IAAI;GACF,MAAM,UAAU,MAAM,SAAS,WAAW,gBAAgB,MAAM,EAAE,YAAY,mBAAmB,CAAC,CAAC;GACnG,IAAI,UAAU,SAAS;IACrB,MAAM,SAAS,WAAW,QAAQ,OAAO,CAAC;IAC1C;GACF;GACA,QAAQ,UAAU;GAClB,QAAQ,OAAO;GACf,MAAM,OAAO,MAAM,SAAS,WAAW,QAAQ,IAAI;GACnD,IAAI,UAAU,SACZ;GAIF,MAAM,MAAM,SAAS,kBAAkB,QAAQ,MAAM,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC;GAChF,UAAU,SAAS;EACrB,SAAS,KAAK;GACZ,IAAI,MAAM,KAAE,KAAA,GAAA;IAAA,YAAA;IAAA,GAAA;IAAA,GAAA;IAAA,GAAA,KAAA;GAAA,CAAC;GACb,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;GACzD,UAAU,OAAO;EACnB;CACF,GAAG;EAAC;EAAiB;EAAU;CAAK,CAAC;CAErC,OACE,qBAAC,YAAY,SAAb;EAAqB,MAAK;EAA1B,UAAA,CACE,qBAAC,YAAY,MAAb,EAAA,UAAA;GACE,oBAAC,YAAY,OAAb,EAAA,UAAoB,EAAE,wBAAwB,EAAqB,CAAA;GACnE,oBAAC,YAAY,aAAb;IAAyB,YAAW;IACjC,UAAA,WAAW,EAAE,8BAA8B,IAAI,EAAE,+BAA+B;GAC1D,CAAA;GACxB,YACC,qBAAC,OAAD;IAAK,WAAU;IAAf,UAAA,CACE,oBAAC,KAAD;KAAG,WAAU;KAA0B,UAAA,EAAE,sBAAsB;IAAK,CAAA,GACpE,oBAAC,KAAD;KAAG,WAAU;KAAsD,eAAY;KAC5E,UAAA;IACA,CAAA,CACA;;GAEP,qBAAC,KAAD;IAAG,WAAU;IAAe,eAAY;IAAkB,eAAa;IAAvE,UAAA;KACG,WAAW,aAAa,EAAE,2BAA2B;KACrD,WAAW,aAAa,EAAE,2BAA2B;KACrD,WAAW,aAAa,EAAE,2BAA2B;KACrD,WAAW,WAAW,EAAE,2BAA2B,EAAE,MAAM,CAAC;IAC5D;;EACa,EAAA,CAAA,GAClB,oBAAC,YAAY,QAAb,EAAA,UACG,WAAW,aAAa,WAAW,YAClC,qBAAA,UAAA,EAAA,UAAA,CACE,oBAAC,YAAY,QAAb;GAAoB,eAAY;GAAgB,UAAU,WAAW;GAAW,SAAS;GACtF,UAAA,EAAE,sBAAsB;EACP,CAAA,GACpB,oBAAC,OAAO,MAAR;GACE,eAAY;GACZ,SAAQ;GACR,UAAU,CAAC,YAAY,WAAW;GAClC,SAAS;GAER,UAAA,EAAE,2BAA2B;EACnB,CAAA,CACb,EAAA,CAAA,IAEF,oBAAC,YAAY,QAAb;GACE,eAAY;GACZ,SAAS,WAAW,YAAY,YAAY;GAC5C,SAAS;GAER,UAAA,EAAE,WAAW,YAAY,2BAA2B,sBAAsB;EACzD,CAAA,EAEJ,CAAA,CACD;;AAEzB;AAEA,eAAe,cAAc;;;ACvJ7B,IAAA,yBAAe"}

package/dist/lib/chunk-ContactPickerContainer.mjs

@@ -0,0 +1,120 @@
+import { toPublicKey } from "@dxos/protocols/buf";
+import { log } from "@dxos/log";
+import { meta } from "#meta";
+import { useMemo, useState } from "react";
+import * as Hooks from "@dxos/react-ui/Hooks";
+import { ContactPicker } from "@dxos/shell/react";
+import { jsx, jsxs } from "react/jsx-runtime";
+import * as Field from "@dxos/react-ui/Field";
+import * as Input from "@dxos/react-ui/Input";
+import * as Layout from "@dxos/react-ui/Layout";
+import { SpaceMember_Role, useMembers } from "@dxos/react-client/echo";
+import { useContacts, useIdentity } from "@dxos/react-client/halo";
+import * as Select from "@dxos/react-ui/Select";
+import * as SystemButton from "@dxos/react-ui/SystemButton";
+//#region src/containers/ContactPickerContainer/ContactPickerContainer.tsx
+var __dxlog_file = "/__w/dxos/dxos/packages/plugins/plugin-client/src/containers/ContactPickerContainer/ContactPickerContainer.tsx";
+var ROLES = [
+	SpaceMember_Role.READER,
+	SpaceMember_Role.EDITOR,
+	SpaceMember_Role.ADMIN
+];
+var roleLabel = {
+	[SpaceMember_Role.EDITOR]: "role-editor.label",
+	[SpaceMember_Role.READER]: "role-viewer.label",
+	[SpaceMember_Role.ADMIN]: "role-admin.label"
+};
+var ContactPickerContainer = ({ space, onAdd }) => {
+	const { t } = Hooks.useTranslation(meta.profile.key);
+	const contacts = useContacts();
+	const members = useMembers(space.key);
+	const identity = useIdentity();
+	const [selected, setSelected] = useState();
+	const [role, setRole] = useState(SpaceMember_Role.EDITOR);
+	const [joinUrl, setJoinUrl] = useState();
+	const [pending, setPending] = useState(false);
+	const memberKeys = useMemo(() => members.map((member) => toPublicKey(member.identity?.identityKey)?.toHex()).filter((key) => key !== void 0), [members]);
+	const selfKey = toPublicKey(identity?.identityKey);
+	const selfRole = members.find((member) => selfKey && toPublicKey(member.identity?.identityKey)?.equals(selfKey))?.role;
+	const canAdmit = selfRole === SpaceMember_Role.OWNER || selfRole === SpaceMember_Role.ADMIN;
+	const handleAdd = async () => {
+		if (!selected) return;
+		setPending(true);
+		try {
+			const result = await onAdd([selected], role);
+			setJoinUrl(result.joinUrl);
+			setSelected(result.failed[0]?.key);
+		} catch (err) {
+			log.catch(err, void 0, {
+				"~LogMeta": "~LogMeta",
+				F: __dxlog_file,
+				L: 69,
+				S: void 0
+			});
+		} finally {
+			setPending(false);
+		}
+	};
+	if (contacts.length === 0) return /* @__PURE__ */ jsx("p", {
+		className: "text-fg-muted",
+		children: t("contact-picker-empty.message")
+	});
+	return /* @__PURE__ */ jsxs(Layout.Container, {
+		gap: "md",
+		role: "group",
+		gutter: "none",
+		children: [/* @__PURE__ */ jsxs(Layout.Flex, {
+			align: "center",
+			gap: "sm",
+			children: [
+				/* @__PURE__ */ jsx(ContactPicker, {
+					contacts,
+					excludeKeys: memberKeys,
+					value: selected,
+					onChange: (key) => {
+						setSelected(key);
+						setJoinUrl(void 0);
+					},
+					disabled: !canAdmit
+				}),
+				/* @__PURE__ */ jsxs(Select.Root, {
+					value: [String(role)],
+					onValueChange: ({ value: [value] }) => setRole(ROLES.find((candidate) => String(candidate) === value) ?? SpaceMember_Role.EDITOR),
+					items: ROLES.map((value) => ({
+						value: String(value),
+						label: t(roleLabel[value])
+					})),
+					children: [/* @__PURE__ */ jsx(Select.Trigger, {
+						classNames: "min-w-[6rem]",
+						disabled: !canAdmit
+					}), /* @__PURE__ */ jsx(Select.Content, { children: ROLES.map((value) => /* @__PURE__ */ jsx(Select.Item, { item: {
+						value: String(value),
+						label: t(roleLabel[value])
+					} }, value)) })]
+				}),
+				/* @__PURE__ */ jsx(SystemButton.Add, {
+					iconOnly: true,
+					label: t("contact-picker-add.label"),
+					disabled: !canAdmit || pending || !selected,
+					onClick: handleAdd,
+					"data-testid": "contactPicker.add"
+				})
+			]
+		}), joinUrl && /* @__PURE__ */ jsxs(Layout.Flex, {
+			gap: "sm",
+			children: [/* @__PURE__ */ jsx(Field.Root, {
+				readOnly: true,
+				children: /* @__PURE__ */ jsx(Input.Root, {
+					readOnly: true,
+					value: joinUrl,
+					"data-testid": "contactPicker.joinUrl"
+				})
+			}), /* @__PURE__ */ jsx(SystemButton.Clipboard, { value: joinUrl })]
+		})]
+	});
+};
+ContactPickerContainer.displayName = "ContactPickerContainer";
+//#endregion
+export { ContactPickerContainer as default };
+
+//# sourceMappingURL=chunk-ContactPickerContainer.mjs.map