@eifi1/ui-kit 0.29.0 → 0.31.0

package/dist/admin/admin-action-confirm.js

@@ -0,0 +1,276 @@
+"use client";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { Children, useContext, useEffect, useId, useRef, useState } from "react";
+import { useKitLabels } from "../i18n/kit-labels.js";
+import { AlertBanner } from "../components/alert-banner.js";
+import { Checkbox } from "../components/checkbox.js";
+import { DEFAULT_DANGER_CONFIRM_LABELS, TypedConfirmField, typedMatches } from "../components/danger-confirm.js";
+import { DialogFrame } from "../components/dialog-frame.js";
+import { ModalCloseContext } from "../components/modal.js";
+import { Button } from "../components/ui.js";
+import { authErrorCode } from "../auth/auth-errors.js";
+import { hasMessage, usePersonLabel } from "./admin-parts.js";
+const DEFAULT_ADMIN_ACTION_LABELS = {
+  confirm: "Confirm",
+  cancel: "Cancel",
+  close: "Close",
+  lastAdmin: "This is the last active administrator. Make someone else an administrator first.",
+  self: "You can\u2019t do this to your own account.",
+  confirmationMismatch: "The address doesn\u2019t match this account. Check which account you are on.",
+  otherCompanies: "This account also belongs to other companies, so only the platform operator can do this. You can remove it from this company instead.",
+  removeFromCompany: "Remove from company",
+  failed: "That didn\u2019t work. Please try again."
+};
+function isThenable(value) {
+  return typeof value === "object" && value !== null && typeof value.then === "function";
+}
+function refusalOf(error, present, describeError, labels) {
+  if (!present) return null;
+  const code = authErrorCode(error);
+  const own = describeError?.(error);
+  if (hasMessage(own)) return { text: own, code };
+  const text = code === "last_admin" ? labels.lastAdmin : code === "self_action" ? labels.self : code === "confirmation_mismatch" ? labels.confirmationMismatch : code === "other_companies" ? labels.otherCompanies : labels.failed;
+  return { text, code };
+}
+const FIELD = 'input:not([type="hidden"]):not(:disabled), select:not(:disabled), textarea:not(:disabled), [role="combobox"]';
+function AdminActionConfirm({
+  level,
+  target,
+  confirmLabel,
+  title,
+  consequence,
+  acknowledgeLabel,
+  tone: toneProp,
+  onConfirm,
+  onClose,
+  onRemoveFromCompany,
+  describeError,
+  error: errorProp,
+  busy: busyProp,
+  children,
+  confirmDisabledReason,
+  open,
+  commit,
+  labels: labelsProp
+}) {
+  const labels = useKitLabels("adminAction", DEFAULT_ADMIN_ACTION_LABELS, labelsProp);
+  const guardLabels = useKitLabels("dangerConfirm", DEFAULT_DANGER_CONFIRM_LABELS);
+  const nameOf = usePersonLabel();
+  const isOpen = open ?? true;
+  const [typed, setTyped] = useState("");
+  const [ticked, setTicked] = useState(false);
+  const [pending, setPending] = useState(false);
+  const [failure, setFailure] = useState(null);
+  const [done, setDone] = useState(false);
+  const confirmed = useRef(false);
+  const mounted = useRef(true);
+  const started = useRef(false);
+  const formId = useId();
+  const slotRef = useRef(null);
+  const guardRef = useRef(null);
+  useEffect(() => {
+    mounted.current = true;
+    return () => {
+      mounted.current = false;
+    };
+  }, []);
+  const [wasOpen, setWasOpen] = useState(isOpen);
+  if (wasOpen !== isOpen) {
+    setWasOpen(isOpen);
+    if (!isOpen) {
+      setTyped("");
+      setTicked(false);
+      setFailure(null);
+      setDone(false);
+    }
+  }
+  const busy = Boolean(busyProp) || pending;
+  const perform = (call) => {
+    let result;
+    try {
+      result = call();
+    } catch (caught) {
+      setFailure({ error: caught });
+      return;
+    }
+    if (!isThenable(result)) return;
+    setFailure(null);
+    setPending(true);
+    result.then(
+      () => {
+        if (!mounted.current) return;
+        setPending(false);
+        confirmed.current = true;
+        setDone(true);
+      },
+      (caught) => {
+        if (!mounted.current) return;
+        setPending(false);
+        setFailure({ error: caught });
+      }
+    );
+  };
+  useEffect(() => {
+    if (level !== "none") return;
+    if (!isOpen) {
+      started.current = false;
+      return;
+    }
+    if (started.current) return;
+    started.current = true;
+    confirmed.current = false;
+    let result;
+    try {
+      result = onConfirm({});
+    } catch (caught) {
+      result = Promise.reject(caught);
+    }
+    if (!isThenable(result)) return;
+    result.then(
+      () => {
+        if (mounted.current) onClose(true);
+      },
+      (caught) => {
+        if (mounted.current) setFailure({ error: caught });
+      }
+    );
+  }, [level, isOpen, onConfirm, onClose]);
+  useEffect(() => {
+    if (!isOpen || level === "none") return;
+    const field = slotRef.current?.querySelector(FIELD) ?? guardRef.current;
+    field?.focus();
+  }, [isOpen, level]);
+  const hasRefusal = failure !== null || errorProp !== void 0;
+  const refusal = refusalOf(failure ? failure.error : errorProp, hasRefusal, describeError, labels);
+  const offerRemoval = refusal?.code === "other_companies" && onRemoveFromCompany !== void 0;
+  const name = nameOf(target);
+  const identity = /* @__PURE__ */ jsx("span", { "data-private": true, children: name && name !== target.email ? `${name} \xB7 ${target.email}` : target.email });
+  const heading = title ?? confirmLabel ?? labels.confirm;
+  const refusalBanner = refusal && /* @__PURE__ */ jsx(
+    AlertBanner,
+    {
+      tone: "danger",
+      size: "sm",
+      action: offerRemoval ? /* @__PURE__ */ jsx(
+        Button,
+        {
+          type: "button",
+          size: "sm",
+          variant: "secondary",
+          disabled: busy,
+          onClick: () => perform(() => onRemoveFromCompany()),
+          children: labels.removeFromCompany
+        }
+      ) : void 0,
+      children: refusal.text
+    }
+  );
+  if (level === "none") {
+    if (!isOpen || !refusal) return null;
+    return /* @__PURE__ */ jsx(
+      DialogFrame,
+      {
+        role: "alertdialog",
+        title: heading,
+        description: identity,
+        onClose: () => onClose(confirmed.current),
+        actions: (close) => /* @__PURE__ */ jsx(CloseOnDone, { done, children: /* @__PURE__ */ jsx(Button, { type: "button", variant: "secondary", disabled: busy, onClick: close, children: labels.close }) }),
+        children: refusalBanner
+      }
+    );
+  }
+  const tone = toneProp ?? (level === "type_email" ? "danger" : "warning");
+  const askTyped = level === "type_email";
+  const typedOk = !askTyped || typedMatches(typed, target.email, "caseless");
+  const tickOk = askTyped || ticked;
+  const guardReason = hasMessage(confirmDisabledReason) ? confirmDisabledReason : !tickOk ? guardLabels.needsAcknowledge : !typedOk ? typeof guardLabels.needsPhrase === "function" ? guardLabels.needsPhrase(target.email) : guardLabels.needsPhrase : void 0;
+  const submit = () => {
+    if (busy || guardReason !== void 0) return;
+    perform(
+      () => onConfirm(askTyped ? { confirmEmail: typed.trim(), acknowledged: true } : { acknowledged: true })
+    );
+  };
+  const lines = Array.isArray(consequence) ? consequence.map(
+    (item, index) => typeof item === "string" ? { key: item, text: item, severe: false } : { key: item.key ?? String(index), text: item.text, severe: Boolean(item.severe) }
+  ) : null;
+  return /* @__PURE__ */ jsx(
+    DialogFrame,
+    {
+      open,
+      role: "alertdialog",
+      title: heading,
+      description: identity,
+      onClose: () => onClose(confirmed.current),
+      onKeyDown: (event) => {
+        if (busy && event.key === "Escape") event.preventDefault();
+      },
+      "aria-busy": busy || void 0,
+      actions: (close) => /* @__PURE__ */ jsxs(CloseOnDone, { done, children: [
+        /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", disabled: busy, onClick: close, children: labels.cancel }),
+        /* @__PURE__ */ jsx(
+          Button,
+          {
+            type: "submit",
+            form: formId,
+            variant: tone === "danger" ? "danger" : "primary",
+            pending: busy,
+            commit,
+            disabledReason: busy ? void 0 : guardReason,
+            children: confirmLabel ?? labels.confirm
+          }
+        )
+      ] }),
+      children: /* @__PURE__ */ jsxs(
+        "form",
+        {
+          id: formId,
+          noValidate: true,
+          className: "space-y-3",
+          onSubmit: (event) => {
+            event.preventDefault();
+            submit();
+          },
+          children: [
+            lines ? /* @__PURE__ */ jsx("ul", { className: "list-disc space-y-1 ps-5 text-sm text-[var(--text-secondary)]", children: lines.map((line) => /* @__PURE__ */ jsx("li", { className: line.severe ? "text-[var(--danger)]" : void 0, children: line.text }, line.key)) }) : hasMessage(consequence) && /* @__PURE__ */ jsx("p", { className: "text-sm text-[var(--text-secondary)]", children: consequence }),
+            Children.toArray(children).some(hasMessage) && /* @__PURE__ */ jsx("div", { ref: slotRef, className: "space-y-3", children }),
+            askTyped ? /* @__PURE__ */ jsx(
+              TypedConfirmField,
+              {
+                ref: guardRef,
+                target: target.email,
+                match: "caseless",
+                value: typed,
+                onValueChange: setTyped,
+                busy,
+                "data-private": true
+              }
+            ) : /* @__PURE__ */ jsx(
+              Checkbox,
+              {
+                ref: guardRef,
+                label: acknowledgeLabel ?? guardLabels.acknowledge,
+                checked: ticked,
+                onCheckedChange: (next) => {
+                  if (!busy) setTicked(next);
+                }
+              }
+            ),
+            refusalBanner
+          ]
+        }
+      )
+    }
+  );
+}
+function CloseOnDone({ done, children }) {
+  const close = useContext(ModalCloseContext);
+  useEffect(() => {
+    if (done) close?.();
+  }, [done, close]);
+  return /* @__PURE__ */ jsx(Fragment, { children });
+}
+export {
+  AdminActionConfirm,
+  DEFAULT_ADMIN_ACTION_LABELS
+};
+//# sourceMappingURL=admin-action-confirm.js.map

package/dist/admin/admin-action-confirm.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/admin/admin-action-confirm.tsx"],"sourcesContent":["import { Children, useContext, useEffect, useId, useRef, useState } from \"react\";\nimport type { KeyboardEvent, ReactNode } from \"react\";\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Checkbox } from \"../components/checkbox\";\nimport { DEFAULT_DANGER_CONFIRM_LABELS, TypedConfirmField, typedMatches } from \"../components/danger-confirm\";\nimport type { DangerConsequence } from \"../components/danger-confirm\";\nimport { DialogFrame } from \"../components/dialog-frame\";\nimport { ModalCloseContext } from \"../components/modal\";\nimport { Button } from \"../components/ui\";\nimport { authErrorCode } from \"../auth/auth-errors\";\nimport type { KitErrorCode } from \"../auth/auth-errors\";\nimport { hasMessage, usePersonLabel } from \"./admin-parts\";\nimport type { AdminPerson, MaybePromise } from \"./admin-parts\";\n\n/**\n * The confirmation in front of an admin action, at the level the SERVER states\n * (docs/user-admin-harmonization.md §4.2):\n *\n * | level | what it asks | actions |\n * |---|---|---|\n * | `none` | nothing: it confirms at once and renders nothing | resend a mail, reactivate, the reviewer scope… |\n * | `acknowledge` | a tick under the consequence | force a password change, change a role |\n * | `type_email` | the target's address, typed | deactivate, erase now, transfer |\n *\n * keksdose decides the level per action and per account on the server\n * (`admin_user_actions_service`) and Kurvenschmiede asks for the typed address on its\n * two hard-to-undo actions; both drew the dialog by hand beside the kit's `DangerConfirm`\n * and `useConfirm`. The level is a PROP, never derived here: the server enforces it and\n * a hand-written request never sees this dialog, so a page that guessed its own level\n * could only disagree with the server. The comparison (caseless), the field and the tick\n * are `DangerConfirm`'s (`TypedConfirmField`, the `dangerConfirm` words), so the three\n * confirmations in the kit cannot disagree about what counts as the address.\n *\n * WHY TYPE THE TARGET'S ADDRESS and not the admin's password: the admin proved who they\n * are at the admin gate. What is unproven is which ROW they are on (keksdose's\n * `TYPE_EMAIL` rule, Kurvenschmiede's `TypedConfirm`).\n *\n * THE REFUSALS (§4.1, §9.6) are read by code — `authErrorCode`, which knows the account\n * codes beside the sign-in ones — and stay in the dialog, which stays open so the admin\n * can read them: `last_admin`, `self_action`, `confirmation_mismatch`, and kastlan's\n * `other_companies` — with \"Remove from company\" offered in its place when the app passes\n * `onRemoveFromCompany`. Anything else is `describeError`'s words, else \"That didn't work\".\n * At level `none` nothing is drawn while the action runs; a refusal opens a dialog of its\n * own to say it.\n *\n * It never sends a request: `onConfirm` does, with what the guards were answered with.\n */\n\n/** How much confirmation an action needs — the server's `confirmation_level(action)`. */\nexport type AdminConfirmLevel = \"none\" | \"acknowledge\" | \"type_email\";\n\n/** What {@link AdminActionConfirmProps.onConfirm} receives — the guards' answers, for\n *  the request body (the server re-checks both). */\nexport interface AdminActionConfirmValues {\n  /** `type_email`: the address as typed — trimmed, its case the admin's; the body's\n   *  `confirm_email`, which the server compares with the account's (server-kit's\n   *  `confirm_email_matches`). */\n  confirmEmail?: string;\n  /** `acknowledge` and `type_email`: the action was confirmed past a guard — the body's\n   *  `acknowledged`, which every admin action carries (server-kit 0.4). */\n  acknowledged?: true;\n}\n\n/** The account the action is about. */\nexport type AdminActionTarget = AdminPerson & { email: string };\n\n/** The `adminAction` namespace. The tick, the typed field and their held-button reasons\n *  are the `dangerConfirm` namespace's, shared with `DangerConfirm`. */\nexport interface AdminActionLabels {\n  /** The confirm button when the action names none. */\n  confirm: string;\n  cancel: string;\n  /** The refusal dialog's only button (level `none`). */\n  close: string;\n  /** `409 last_admin`. */\n  lastAdmin: string;\n  /** `409 self_action`: the admin's own account. */\n  self: string;\n  /** `confirmation_mismatch`: the typed address is not this account's — the page and\n   *  the server disagree about which row this is. */\n  confirmationMismatch: string;\n  /** kastlan's `409 other_companies` (§9.6). */\n  otherCompanies: string;\n  /** The alternative offered with it. */\n  removeFromCompany: string;\n  /** Any other failure, unless `describeError` says better. */\n  failed: string;\n}\n\nexport const DEFAULT_ADMIN_ACTION_LABELS: AdminActionLabels = {\n  confirm: \"Confirm\",\n  cancel: \"Cancel\",\n  close: \"Close\",\n  lastAdmin: \"This is the last active administrator. Make someone else an administrator first.\",\n  self: \"You can’t do this to your own account.\",\n  confirmationMismatch: \"The address doesn’t match this account. Check which account you are on.\",\n  otherCompanies:\n    \"This account also belongs to other companies, so only the platform operator can do this. You can remove it from this company instead.\",\n  removeFromCompany: \"Remove from company\",\n  failed: \"That didn’t work. Please try again.\",\n};\n\nexport interface AdminActionConfirmProps {\n  /** The level the server states for this action on this account (§4.2). */\n  level: AdminConfirmLevel;\n  /** Whom it is about: the address (typed at `type_email`) and the name parts. */\n  target: AdminActionTarget;\n  /** The confirm button — \"Deactivate\". Also the title when no `title` is given. */\n  confirmLabel?: ReactNode;\n  /** The dialog's heading — \"Deactivate Ada Example?\". Default `confirmLabel`. */\n  title?: ReactNode;\n  /**\n   * What the action does to THIS account, said before it happens: a sentence, or lines\n   * (`DangerConsequence`, a `severe` one in the danger colour). Derive them from the\n   * row's facts rather than reciting the worst case (keksdose dev#488).\n   */\n  consequence?: ReactNode | readonly (string | DangerConsequence)[];\n  /** The tick's words at `acknowledge`. Default `dangerConfirm.acknowledge` — \"I have\n   *  read what this does and want to continue.\" */\n  acknowledgeLabel?: ReactNode;\n  /** `danger` (default at `type_email`): a red confirm. `warning` (default at\n   *  `acknowledge`) and `neutral`: the primary confirm. */\n  tone?: \"danger\" | \"warning\" | \"neutral\";\n  /**\n   * Runs the action. Return a promise and the dialog manages itself: busy until it\n   * settles, closed (`onClose(true)`) when it resolves, open with the refusal when it\n   * rejects. Return nothing and the app owns the rest — `busy`, `error`, closing it.\n   */\n  onConfirm: (values: AdminActionConfirmValues) => MaybePromise;\n  /** The dialog has closed: `true` after the action (or the alternative) went through,\n   *  `false` for Cancel, Escape, the backdrop or Back. */\n  onClose: (done: boolean) => void;\n  /** kastlan: offered with an `other_companies` refusal — `DELETE …/membership`,\n   *  logged as `membership_remove` (§4.1). Promise handling as `onConfirm`. */\n  onRemoveFromCompany?: () => MaybePromise;\n  /** The app's words for a failure the kit has no code for. Asked first. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** A refusal the app caught itself, when `onConfirm` returns nothing. */\n  error?: unknown;\n  /** The action is running, for an app that tracks it itself. */\n  busy?: boolean;\n  /**\n   * Fields of the action's own, above the guard — the transfer's recipient, kastlan's\n   * roles (`RolesEditor`). Their values are the app's; hold the confirm with\n   * `confirmDisabledReason` until they are complete.\n   */\n  children?: ReactNode;\n  /** Why the confirm is held for a reason of the app's (\"Choose who receives it\").\n   *  Named before the guard's own, since the fields are above it. */\n  confirmDisabledReason?: ReactNode;\n  /** Kept-mounted mode, as on `DialogFrame`; left out, open while mounted. */\n  open?: boolean;\n  /** The confirm COMMITS: under a locked `WriteLockProvider` it is held with the lock's\n   *  reason. Off by default — an admin action is not a write to the open record. */\n  commit?: boolean;\n  labels?: Partial<AdminActionLabels>;\n}\n\n/** Whether a callback answered a promise. */\nfunction isThenable(value: unknown): value is PromiseLike<unknown> {\n  return typeof value === \"object\" && value !== null && typeof (value as PromiseLike<unknown>).then === \"function\";\n}\n\n/** The refusal's words and code. */\nfunction refusalOf(\n  error: unknown,\n  present: boolean,\n  describeError: AdminActionConfirmProps[\"describeError\"],\n  labels: AdminActionLabels,\n): { text: ReactNode; code: KitErrorCode | undefined } | null {\n  if (!present) return null;\n  const code = authErrorCode(error);\n  const own = describeError?.(error);\n  if (hasMessage(own)) return { text: own, code };\n  const text =\n    code === \"last_admin\"\n      ? labels.lastAdmin\n      : code === \"self_action\"\n        ? labels.self\n        : code === \"confirmation_mismatch\"\n          ? labels.confirmationMismatch\n          : code === \"other_companies\"\n            ? labels.otherCompanies\n            : labels.failed;\n  return { text, code };\n}\n\n/** The selector for the first field among the caller's `children` — what opening focuses. */\nconst FIELD = 'input:not([type=\"hidden\"]):not(:disabled), select:not(:disabled), textarea:not(:disabled), [role=\"combobox\"]';\n\nexport function AdminActionConfirm({\n  level,\n  target,\n  confirmLabel,\n  title,\n  consequence,\n  acknowledgeLabel,\n  tone: toneProp,\n  onConfirm,\n  onClose,\n  onRemoveFromCompany,\n  describeError,\n  error: errorProp,\n  busy: busyProp,\n  children,\n  confirmDisabledReason,\n  open,\n  commit,\n  labels: labelsProp,\n}: AdminActionConfirmProps) {\n  const labels = useKitLabels(\"adminAction\", DEFAULT_ADMIN_ACTION_LABELS, labelsProp);\n  const guardLabels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS);\n  const nameOf = usePersonLabel();\n  const isOpen = open ?? true;\n  const [typed, setTyped] = useState(\"\");\n  const [ticked, setTicked] = useState(false);\n  const [pending, setPending] = useState(false);\n  // The last rejection, boxed so a rejection with `undefined` still counts as one.\n  const [failure, setFailure] = useState<{ error: unknown } | null>(null);\n  // Resolved: the actions row lowers the panel, and `onClose` answers true.\n  const [done, setDone] = useState(false);\n  const confirmed = useRef(false);\n  const mounted = useRef(true);\n  const started = useRef(false);\n  const formId = useId();\n  const slotRef = useRef<HTMLDivElement>(null);\n  const guardRef = useRef<HTMLInputElement>(null);\n\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n\n  // A close (kept-mounted) wipes the guards and the refusal: a reopened dialog starts\n  // over. During render, like ReauthDialog's, so no frame shows the old answers.\n  const [wasOpen, setWasOpen] = useState(isOpen);\n  if (wasOpen !== isOpen) {\n    setWasOpen(isOpen);\n    if (!isOpen) {\n      setTyped(\"\");\n      setTicked(false);\n      setFailure(null);\n      setDone(false);\n    }\n  }\n\n  const busy = Boolean(busyProp) || pending;\n\n  /** Runs `call`, managing busy, the refusal and the close — or not, when it answers\n   *  no promise (the app owns it then). */\n  const perform = (call: () => MaybePromise) => {\n    let result: MaybePromise;\n    try {\n      result = call();\n    } catch (caught) {\n      setFailure({ error: caught });\n      return;\n    }\n    if (!isThenable(result)) return;\n    setFailure(null);\n    setPending(true);\n    result.then(\n      () => {\n        if (!mounted.current) return;\n        setPending(false);\n        confirmed.current = true;\n        setDone(true);\n      },\n      (caught: unknown) => {\n        if (!mounted.current) return;\n        setPending(false);\n        setFailure({ error: caught });\n      },\n    );\n  };\n\n  // Level `none`: confirmed the moment it opens, once per opening. Nothing is drawn\n  // while it runs; the promise's answer comes back asynchronously.\n  useEffect(() => {\n    if (level !== \"none\") return;\n    if (!isOpen) {\n      started.current = false;\n      return;\n    }\n    if (started.current) return;\n    started.current = true;\n    confirmed.current = false;\n    let result: unknown;\n    try {\n      result = onConfirm({});\n    } catch (caught) {\n      result = Promise.reject(caught);\n    }\n    // No promise: the app owns the rest (it closes the part, or passes `error`).\n    if (!isThenable(result)) return;\n    result.then(\n      () => {\n        if (mounted.current) onClose(true);\n      },\n      (caught: unknown) => {\n        if (mounted.current) setFailure({ error: caught });\n      },\n    );\n  }, [level, isOpen, onConfirm, onClose]);\n\n  // Focus the first thing the dialog waits for, after Modal's own effect has recorded\n  // the trigger to return to (a parent's effects run after its children's).\n  useEffect(() => {\n    if (!isOpen || level === \"none\") return;\n    const field = slotRef.current?.querySelector<HTMLElement>(FIELD) ?? guardRef.current;\n    field?.focus();\n  }, [isOpen, level]);\n\n  const hasRefusal = failure !== null || errorProp !== undefined;\n  const refusal = refusalOf(failure ? failure.error : errorProp, hasRefusal, describeError, labels);\n  const offerRemoval = refusal?.code === \"other_companies\" && onRemoveFromCompany !== undefined;\n\n  const name = nameOf(target);\n  const identity = (\n    <span data-private>{name && name !== target.email ? `${name} · ${target.email}` : target.email}</span>\n  );\n  const heading = title ?? confirmLabel ?? labels.confirm;\n\n  const refusalBanner = refusal && (\n    <AlertBanner\n      tone=\"danger\"\n      size=\"sm\"\n      action={\n        offerRemoval ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            variant=\"secondary\"\n            disabled={busy}\n            onClick={() => perform(() => onRemoveFromCompany!())}\n          >\n            {labels.removeFromCompany}\n          </Button>\n        ) : undefined\n      }\n    >\n      {refusal.text}\n    </AlertBanner>\n  );\n\n  if (level === \"none\") {\n    // Nothing to ask: only a refusal is worth a dialog.\n    if (!isOpen || !refusal) return null;\n    return (\n      <DialogFrame\n        role=\"alertdialog\"\n        title={heading}\n        description={identity}\n        onClose={() => onClose(confirmed.current)}\n        actions={(close) => (\n          <CloseOnDone done={done}>\n            <Button type=\"button\" variant=\"secondary\" disabled={busy} onClick={close}>\n              {labels.close}\n            </Button>\n          </CloseOnDone>\n        )}\n      >\n        {refusalBanner}\n      </DialogFrame>\n    );\n  }\n\n  const tone = toneProp ?? (level === \"type_email\" ? \"danger\" : \"warning\");\n  const askTyped = level === \"type_email\";\n  const typedOk = !askTyped || typedMatches(typed, target.email, \"caseless\");\n  const tickOk = askTyped || ticked;\n  const guardReason: ReactNode = hasMessage(confirmDisabledReason)\n    ? confirmDisabledReason\n    : !tickOk\n      ? guardLabels.needsAcknowledge\n      : !typedOk\n        ? typeof guardLabels.needsPhrase === \"function\"\n          ? guardLabels.needsPhrase(target.email)\n          : guardLabels.needsPhrase\n        : undefined;\n\n  const submit = () => {\n    if (busy || guardReason !== undefined) return;\n    perform(() =>\n      onConfirm(askTyped ? { confirmEmail: typed.trim(), acknowledged: true } : { acknowledged: true }),\n    );\n  };\n\n  const lines = Array.isArray(consequence)\n    ? (consequence as readonly (string | DangerConsequence)[]).map((item, index) =>\n        typeof item === \"string\"\n          ? { key: item, text: item as ReactNode, severe: false }\n          : { key: item.key ?? String(index), text: item.text, severe: Boolean(item.severe) },\n      )\n    : null;\n\n  return (\n    <DialogFrame\n      open={open}\n      role=\"alertdialog\"\n      title={heading}\n      description={identity}\n      onClose={() => onClose(confirmed.current)}\n      // A request that has left cannot be called back by closing the dialog.\n      onKeyDown={(event: KeyboardEvent<HTMLDivElement>) => {\n        if (busy && event.key === \"Escape\") event.preventDefault();\n      }}\n      aria-busy={busy || undefined}\n      actions={(close) => (\n        <CloseOnDone done={done}>\n          <Button type=\"button\" variant=\"ghost\" disabled={busy} onClick={close}>\n            {labels.cancel}\n          </Button>\n          <Button\n            type=\"submit\"\n            form={formId}\n            variant={tone === \"danger\" ? \"danger\" : \"primary\"}\n            pending={busy}\n            commit={commit}\n            disabledReason={busy ? undefined : guardReason}\n          >\n            {confirmLabel ?? labels.confirm}\n          </Button>\n        </CloseOnDone>\n      )}\n    >\n      <form\n        id={formId}\n        noValidate\n        className=\"space-y-3\"\n        onSubmit={(event) => {\n          event.preventDefault();\n          submit();\n        }}\n      >\n        {lines ? (\n          <ul className=\"list-disc space-y-1 ps-5 text-sm text-[var(--text-secondary)]\">\n            {lines.map((line) => (\n              <li key={line.key} className={line.severe ? \"text-[var(--danger)]\" : undefined}>\n                {line.text}\n              </li>\n            ))}\n          </ul>\n        ) : (\n          hasMessage(consequence as ReactNode) && (\n            <p className=\"text-sm text-[var(--text-secondary)]\">{consequence as ReactNode}</p>\n          )\n        )}\n        {Children.toArray(children).some(hasMessage) && (\n          <div ref={slotRef} className=\"space-y-3\">\n            {children}\n          </div>\n        )}\n        {askTyped ? (\n          <TypedConfirmField\n            ref={guardRef}\n            target={target.email}\n            match=\"caseless\"\n            value={typed}\n            onValueChange={setTyped}\n            busy={busy}\n            data-private\n          />\n        ) : (\n          <Checkbox\n            ref={guardRef}\n            label={acknowledgeLabel ?? guardLabels.acknowledge}\n            checked={ticked}\n            // Not `disabled` while busy: the box may hold the focus.\n            onCheckedChange={(next) => {\n              if (!busy) setTicked(next);\n            }}\n          />\n        )}\n        {refusalBanner}\n      </form>\n    </DialogFrame>\n  );\n}\n\n/**\n * The actions row's wrapper: it renders INSIDE the Modal, where the panel's animated\n * close is in context, so a resolved action lowers the panel the way Cancel does and\n * Modal then calls `onClose` (ReauthDialog's pattern).\n */\nfunction CloseOnDone({ done, children }: { done: boolean; children: ReactNode }) {\n  const close = useContext(ModalCloseContext);\n  useEffect(() => {\n    if (done) close?.();\n  }, [done, close]);\n  return <>{children}</>;\n}\n"],"mappings":";AAkUI,SA2KK,UA3KL,KA0FI,YA1FJ;AAlUJ,SAAS,UAAU,YAAY,WAAW,OAAO,QAAQ,gBAAgB;AAEzE,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAS,+BAA+B,mBAAmB,oBAAoB;AAE/E,SAAS,mBAAmB;AAC5B,SAAS,yBAAyB;AAClC,SAAS,cAAc;AACvB,SAAS,qBAAqB;AAE9B,SAAS,YAAY,sBAAsB;AA8EpC,MAAM,8BAAiD;AAAA,EAC5D,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,WAAW;AAAA,EACX,MAAM;AAAA,EACN,sBAAsB;AAAA,EACtB,gBACE;AAAA,EACF,mBAAmB;AAAA,EACnB,QAAQ;AACV;AA2DA,SAAS,WAAW,OAA+C;AACjE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAQ,MAA+B,SAAS;AACxG;AAGA,SAAS,UACP,OACA,SACA,eACA,QAC4D;AAC5D,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,OAAO,cAAc,KAAK;AAChC,QAAM,MAAM,gBAAgB,KAAK;AACjC,MAAI,WAAW,GAAG,EAAG,QAAO,EAAE,MAAM,KAAK,KAAK;AAC9C,QAAM,OACJ,SAAS,eACL,OAAO,YACP,SAAS,gBACP,OAAO,OACP,SAAS,0BACP,OAAO,uBACP,SAAS,oBACP,OAAO,iBACP,OAAO;AACnB,SAAO,EAAE,MAAM,KAAK;AACtB;AAGA,MAAM,QAAQ;AAEP,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAA4B;AAC1B,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,cAAc,aAAa,iBAAiB,6BAA6B;AAC/E,QAAM,SAAS,eAAe;AAC9B,QAAM,SAAS,QAAQ;AACvB,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAE5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoC,IAAI;AAEtE,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,YAAY,OAAO,KAAK;AAC9B,QAAM,UAAU,OAAO,IAAI;AAC3B,QAAM,UAAU,OAAO,KAAK;AAC5B,QAAM,SAAS,MAAM;AACrB,QAAM,UAAU,OAAuB,IAAI;AAC3C,QAAM,WAAW,OAAyB,IAAI;AAE9C,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AAIL,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,MAAM;AAC7C,MAAI,YAAY,QAAQ;AACtB,eAAW,MAAM;AACjB,QAAI,CAAC,QAAQ;AACX,eAAS,EAAE;AACX,gBAAU,KAAK;AACf,iBAAW,IAAI;AACf,cAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,QAAQ,KAAK;AAIlC,QAAM,UAAU,CAAC,SAA6B;AAC5C,QAAI;AACJ,QAAI;AACF,eAAS,KAAK;AAAA,IAChB,SAAS,QAAQ;AACf,iBAAW,EAAE,OAAO,OAAO,CAAC;AAC5B;AAAA,IACF;AACA,QAAI,CAAC,WAAW,MAAM,EAAG;AACzB,eAAW,IAAI;AACf,eAAW,IAAI;AACf,WAAO;AAAA,MACL,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,mBAAW,KAAK;AAChB,kBAAU,UAAU;AACpB,gBAAQ,IAAI;AAAA,MACd;AAAA,MACA,CAAC,WAAoB;AACnB,YAAI,CAAC,QAAQ,QAAS;AACtB,mBAAW,KAAK;AAChB,mBAAW,EAAE,OAAO,OAAO,CAAC;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAIA,YAAU,MAAM;AACd,QAAI,UAAU,OAAQ;AACtB,QAAI,CAAC,QAAQ;AACX,cAAQ,UAAU;AAClB;AAAA,IACF;AACA,QAAI,QAAQ,QAAS;AACrB,YAAQ,UAAU;AAClB,cAAU,UAAU;AACpB,QAAI;AACJ,QAAI;AACF,eAAS,UAAU,CAAC,CAAC;AAAA,IACvB,SAAS,QAAQ;AACf,eAAS,QAAQ,OAAO,MAAM;AAAA,IAChC;AAEA,QAAI,CAAC,WAAW,MAAM,EAAG;AACzB,WAAO;AAAA,MACL,MAAM;AACJ,YAAI,QAAQ,QAAS,SAAQ,IAAI;AAAA,MACnC;AAAA,MACA,CAAC,WAAoB;AACnB,YAAI,QAAQ,QAAS,YAAW,EAAE,OAAO,OAAO,CAAC;AAAA,MACnD;AAAA,IACF;AAAA,EACF,GAAG,CAAC,OAAO,QAAQ,WAAW,OAAO,CAAC;AAItC,YAAU,MAAM;AACd,QAAI,CAAC,UAAU,UAAU,OAAQ;AACjC,UAAM,QAAQ,QAAQ,SAAS,cAA2B,KAAK,KAAK,SAAS;AAC7E,WAAO,MAAM;AAAA,EACf,GAAG,CAAC,QAAQ,KAAK,CAAC;AAElB,QAAM,aAAa,YAAY,QAAQ,cAAc;AACrD,QAAM,UAAU,UAAU,UAAU,QAAQ,QAAQ,WAAW,YAAY,eAAe,MAAM;AAChG,QAAM,eAAe,SAAS,SAAS,qBAAqB,wBAAwB;AAEpF,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,WACJ,oBAAC,UAAK,gBAAY,MAAE,kBAAQ,SAAS,OAAO,QAAQ,GAAG,IAAI,SAAM,OAAO,KAAK,KAAK,OAAO,OAAM;AAEjG,QAAM,UAAU,SAAS,gBAAgB,OAAO;AAEhD,QAAM,gBAAgB,WACpB;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,MAAK;AAAA,MACL,QACE,eACE;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAQ;AAAA,UACR,UAAU;AAAA,UACV,SAAS,MAAM,QAAQ,MAAM,oBAAqB,CAAC;AAAA,UAElD,iBAAO;AAAA;AAAA,MACV,IACE;AAAA,MAGL,kBAAQ;AAAA;AAAA,EACX;AAGF,MAAI,UAAU,QAAQ;AAEpB,QAAI,CAAC,UAAU,CAAC,QAAS,QAAO;AAChC,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,SAAS,MAAM,QAAQ,UAAU,OAAO;AAAA,QACxC,SAAS,CAAC,UACR,oBAAC,eAAY,MACX,8BAAC,UAAO,MAAK,UAAS,SAAQ,aAAY,UAAU,MAAM,SAAS,OAChE,iBAAO,OACV,GACF;AAAA,QAGD;AAAA;AAAA,IACH;AAAA,EAEJ;AAEA,QAAM,OAAO,aAAa,UAAU,eAAe,WAAW;AAC9D,QAAM,WAAW,UAAU;AAC3B,QAAM,UAAU,CAAC,YAAY,aAAa,OAAO,OAAO,OAAO,UAAU;AACzE,QAAM,SAAS,YAAY;AAC3B,QAAM,cAAyB,WAAW,qBAAqB,IAC3D,wBACA,CAAC,SACC,YAAY,mBACZ,CAAC,UACC,OAAO,YAAY,gBAAgB,aACjC,YAAY,YAAY,OAAO,KAAK,IACpC,YAAY,cACd;AAER,QAAM,SAAS,MAAM;AACnB,QAAI,QAAQ,gBAAgB,OAAW;AACvC;AAAA,MAAQ,MACN,UAAU,WAAW,EAAE,cAAc,MAAM,KAAK,GAAG,cAAc,KAAK,IAAI,EAAE,cAAc,KAAK,CAAC;AAAA,IAClG;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,QAAQ,WAAW,IAClC,YAAwD;AAAA,IAAI,CAAC,MAAM,UAClE,OAAO,SAAS,WACZ,EAAE,KAAK,MAAM,MAAM,MAAmB,QAAQ,MAAM,IACpD,EAAE,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG,MAAM,KAAK,MAAM,QAAQ,QAAQ,KAAK,MAAM,EAAE;AAAA,EACtF,IACA;AAEJ,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA,MAAK;AAAA,MACL,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS,MAAM,QAAQ,UAAU,OAAO;AAAA,MAExC,WAAW,CAAC,UAAyC;AACnD,YAAI,QAAQ,MAAM,QAAQ,SAAU,OAAM,eAAe;AAAA,MAC3D;AAAA,MACA,aAAW,QAAQ;AAAA,MACnB,SAAS,CAAC,UACR,qBAAC,eAAY,MACX;AAAA,4BAAC,UAAO,MAAK,UAAS,SAAQ,SAAQ,UAAU,MAAM,SAAS,OAC5D,iBAAO,QACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,MAAM;AAAA,YACN,SAAS,SAAS,WAAW,WAAW;AAAA,YACxC,SAAS;AAAA,YACT;AAAA,YACA,gBAAgB,OAAO,SAAY;AAAA,YAElC,0BAAgB,OAAO;AAAA;AAAA,QAC1B;AAAA,SACF;AAAA,MAGF;AAAA,QAAC;AAAA;AAAA,UACC,IAAI;AAAA,UACJ,YAAU;AAAA,UACV,WAAU;AAAA,UACV,UAAU,CAAC,UAAU;AACnB,kBAAM,eAAe;AACrB,mBAAO;AAAA,UACT;AAAA,UAEC;AAAA,oBACC,oBAAC,QAAG,WAAU,iEACX,gBAAM,IAAI,CAAC,SACV,oBAAC,QAAkB,WAAW,KAAK,SAAS,yBAAyB,QAClE,eAAK,QADC,KAAK,GAEd,CACD,GACH,IAEA,WAAW,WAAwB,KACjC,oBAAC,OAAE,WAAU,wCAAwC,uBAAyB;AAAA,YAGjF,SAAS,QAAQ,QAAQ,EAAE,KAAK,UAAU,KACzC,oBAAC,SAAI,KAAK,SAAS,WAAU,aAC1B,UACH;AAAA,YAED,WACC;AAAA,cAAC;AAAA;AAAA,gBACC,KAAK;AAAA,gBACL,QAAQ,OAAO;AAAA,gBACf,OAAM;AAAA,gBACN,OAAO;AAAA,gBACP,eAAe;AAAA,gBACf;AAAA,gBACA,gBAAY;AAAA;AAAA,YACd,IAEA;AAAA,cAAC;AAAA;AAAA,gBACC,KAAK;AAAA,gBACL,OAAO,oBAAoB,YAAY;AAAA,gBACvC,SAAS;AAAA,gBAET,iBAAiB,CAAC,SAAS;AACzB,sBAAI,CAAC,KAAM,WAAU,IAAI;AAAA,gBAC3B;AAAA;AAAA,YACF;AAAA,YAED;AAAA;AAAA;AAAA,MACH;AAAA;AAAA,EACF;AAEJ;AAOA,SAAS,YAAY,EAAE,MAAM,SAAS,GAA2C;AAC/E,QAAM,QAAQ,WAAW,iBAAiB;AAC1C,YAAU,MAAM;AACd,QAAI,KAAM,SAAQ;AAAA,EACpB,GAAG,CAAC,MAAM,KAAK,CAAC;AAChB,SAAO,gCAAG,UAAS;AACrB;","names":[]}

package/dist/admin/admin-action-log.d.ts

@@ -0,0 +1,105 @@
+import * as react from 'react';
+import { ReactNode } from 'react';
+import { DateInput } from '../lib/format.js';
+import { AdminPerson } from './admin-parts.js';
+
+/**
+ * The admin actions, as the audit table records them (docs/user-admin-harmonization.md
+ * §2.3, §4.3): `GET /admin/actions?limit=&offset=&target=`, newest first, on the admin
+ * page and filtered to one account from its row.
+ *
+ * Every app writes the same small `admin_actions` row in the transaction of the action
+ * (keksdose and Kurvenschmiede had log lines; kastlan has an HTTP log with no named
+ * action), so the vocabulary is shared — {@link AdminActionKind} — and an app's own
+ * actions join it through `labels.actions`.
+ *
+ * What a row says, and what it never does: who, what, to whom, when, and a summary of the
+ * `detail` the APP writes (ids, roles, counts — never content, §4.3). Three kinds of
+ * actor: an admin; **the user themselves** (`deletion_request`: the actor is the target);
+ * and **nobody** (the scheduled erasure, the hand-over at erasure, §2.7), said as
+ * "automatically". After an erasure the target's name and address are scrubbed and the
+ * row stays: it reads "an erased account".
+ *
+ * It never fetches: the page of rows and the paging are the app's.
+ */
+/** The shared vocabulary of `admin_actions.action` (§4.3). */
+type AdminActionKind = "deactivate" | "reactivate" | "role" | "membership_remove" | "password_change_require" | "password_change_withdraw" | "mail_verification" | "mail_reset" | "reviewer" | "invite" | "invite_resend" | "invite_revoke" | "transfer" | "deletion_request" | "deletion_cancel" | "erase";
+/** Every {@link AdminActionKind}, in the contract's order. */
+declare const ADMIN_ACTION_KINDS: readonly AdminActionKind[];
+/** One logged action — the app's `admin_actions` row with the people joined in. */
+interface AdminActionLogEntry {
+    id: string | number;
+    /** When, as the row's `at`. */
+    at: DateInput;
+    /**
+     * Who did it: a person; `"self"` — the user themselves (a deletion request); or `null`
+     * — nobody, the scheduled job. A person whose `id` (or address) is the target's is
+     * read as `"self"` too.
+     */
+    actor: AdminPerson | "self" | null;
+    /** A {@link AdminActionKind}, or one of the app's own (named in `labels.actions`). */
+    action: AdminActionKind | (string & {});
+    /** Whom it was done to. `null`, or a person with nothing left in it: an erased
+     *  account. An invitation's target is its address (`target_email`). */
+    target?: AdminPerson | null;
+    /** The `detail` in the app's words — "Member → Admin", "12 items to Ben Example". */
+    detail?: ReactNode;
+}
+/** The `adminActionLog` namespace. */
+interface AdminActionLogLabels {
+    /** The list's accessible name. */
+    title: string;
+    empty: string;
+    loading: string;
+    /** "by Ada Example". */
+    by: (actor: string) => string;
+    /** The user acted on their own account. */
+    bySelf: string;
+    /** No actor: a scheduled job. */
+    automatic: string;
+    /** A target scrubbed by an erasure. */
+    erased: string;
+    /** The filter chip: only one account's actions are shown. */
+    filteredTo: (target: string) => string;
+    /** The chip's ×. */
+    showAll: string;
+    /** A target name as a filter button — "Show only the actions on Ada Example". */
+    filterBy: (target: string) => string;
+    /** What each action is called, past tense, keyed by the vocabulary. An app adds its
+     *  own here (`labels={{ actions: { plan: "Plan changed" } }}`). */
+    actions: {
+        [K in AdminActionKind]?: string;
+    } & {
+        [action: string]: string | undefined;
+    };
+}
+declare const DEFAULT_ADMIN_ACTION_LOG_LABELS: AdminActionLogLabels;
+/** The paging of `GET /admin/actions` — DataTable's `ServerPagination`, which the
+ *  footer is. */
+interface AdminActionLogPaging {
+    /** 0-based. */
+    page: number;
+    pageSize: number;
+    total: number;
+    onPageChange: (page: number) => void;
+    onPageSizeChange?: (pageSize: number) => void;
+}
+interface AdminActionLogProps {
+    /** One page, newest first, as the server sends it. */
+    entries: readonly AdminActionLogEntry[];
+    /** Left out: no footer (a short list on a row). */
+    paging?: AdminActionLogPaging;
+    /** The page is being fetched. */
+    loading?: boolean;
+    /** The filter in force: only this account's actions are shown (`?target=`). With
+     *  `onTargetFilter`, a chip says so and its × clears it. */
+    target?: AdminPerson | null;
+    /** Filter by an account — or clear it with `null`. Given, every target's name is a
+     *  button that narrows the list to it. Left out, the list is not filterable here. */
+    onTargetFilter?: (target: AdminPerson | null) => void;
+    className?: string;
+    labels?: Partial<AdminActionLogLabels>;
+}
+declare function AdminActionLog({ entries, paging, loading, target, onTargetFilter, className, labels: labelsProp, }: AdminActionLogProps): react.JSX.Element;
+
+export { ADMIN_ACTION_KINDS, type AdminActionKind, AdminActionLog, type AdminActionLogEntry, type AdminActionLogLabels, type AdminActionLogPaging, type AdminActionLogProps, DEFAULT_ADMIN_ACTION_LOG_LABELS };

package/dist/admin/admin-action-log.js

@@ -0,0 +1,153 @@
+"use client";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { cn } from "../lib/cn.js";
+import { useKitLabels } from "../i18n/kit-labels.js";
+import { DateMark } from "../components/account-chips.js";
+import { Chip } from "../components/chip.js";
+import { Pagination } from "../components/data-table-pagination.js";
+import { Caption } from "../components/text.js";
+import { Button, Spinner } from "../components/ui.js";
+import { usePersonLabel } from "./admin-parts.js";
+const ADMIN_ACTION_KINDS = [
+  "deactivate",
+  "reactivate",
+  "role",
+  "membership_remove",
+  "password_change_require",
+  "password_change_withdraw",
+  "mail_verification",
+  "mail_reset",
+  "reviewer",
+  "invite",
+  "invite_resend",
+  "invite_revoke",
+  "transfer",
+  "deletion_request",
+  "deletion_cancel",
+  "erase"
+];
+const DEFAULT_ADMIN_ACTION_LOG_LABELS = {
+  title: "Admin actions",
+  empty: "No admin actions yet.",
+  loading: "Loading\u2026",
+  by: (actor) => `by ${actor}`,
+  bySelf: "by the user themselves",
+  automatic: "automatically",
+  erased: "an erased account",
+  filteredTo: (target) => `Only ${target}`,
+  showAll: "Show all actions",
+  filterBy: (target) => `Show only the actions on ${target}`,
+  actions: {
+    deactivate: "Deactivated",
+    reactivate: "Reactivated",
+    role: "Role changed",
+    membership_remove: "Removed from the company",
+    password_change_require: "New password required",
+    password_change_withdraw: "Password requirement withdrawn",
+    mail_verification: "Verification mail sent",
+    mail_reset: "Password reset mail sent",
+    reviewer: "Reviewer scope changed",
+    invite: "Invited",
+    invite_resend: "Invitation resent",
+    invite_revoke: "Invitation revoked",
+    transfer: "Work transferred",
+    deletion_request: "Deletion requested",
+    deletion_cancel: "Deletion cancelled",
+    erase: "Account erased"
+  }
+};
+function scrubbed(person) {
+  return !person || ![person.first, person.last, person.name, person.email].some((part) => (part ?? "").trim());
+}
+function samePerson(a, b) {
+  if (!b) return false;
+  if (a.id !== void 0 && a.id !== null && b.id !== void 0 && b.id !== null) return a.id === b.id;
+  const ea = (a.email ?? "").trim().toLowerCase();
+  return ea !== "" && ea === (b.email ?? "").trim().toLowerCase();
+}
+function AdminActionLog({
+  entries,
+  paging,
+  loading = false,
+  target,
+  onTargetFilter,
+  className,
+  labels: labelsProp
+}) {
+  const labels = useKitLabels("adminActionLog", DEFAULT_ADMIN_ACTION_LOG_LABELS, labelsProp);
+  const nameOf = usePersonLabel();
+  const filtered = target !== void 0 && target !== null && !scrubbed(target);
+  const actorText = (entry) => {
+    const { actor } = entry;
+    if (actor === null) return labels.automatic;
+    if (actor === "self" || samePerson(actor, entry.target)) return labels.bySelf;
+    return labels.by(nameOf(actor) || labels.erased);
+  };
+  const targetNode = (entry) => {
+    if (scrubbed(entry.target)) return /* @__PURE__ */ jsx("span", { className: "italic text-[var(--text-muted)]", children: labels.erased });
+    const person = entry.target;
+    const name = nameOf(person);
+    const address = (person.email ?? "").trim();
+    const text = /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsx("span", { "data-private": true, className: "font-medium text-[var(--text-primary)]", children: name }),
+      address && address !== name && /* @__PURE__ */ jsx("span", { "data-private": true, className: "ms-1 text-xs text-[var(--text-muted)]", children: address })
+    ] });
+    if (!onTargetFilter || filtered && samePerson(person, target)) return text;
+    return /* @__PURE__ */ jsx(
+      Button,
+      {
+        type: "button",
+        variant: "link",
+        size: "sm",
+        className: "h-auto min-h-0 p-0 text-start",
+        "aria-label": labels.filterBy(name),
+        onClick: () => onTargetFilter(person),
+        children: text
+      }
+    );
+  };
+  return /* @__PURE__ */ jsxs("div", { className: cn("space-y-3", className), children: [
+    filtered && onTargetFilter && /* @__PURE__ */ jsx(Chip, { size: "sm", tone: "brand", onRemove: () => onTargetFilter(null), removeLabel: labels.showAll, children: /* @__PURE__ */ jsx("span", { "data-private": true, children: labels.filteredTo(nameOf(target)) }) }),
+    loading && entries.length === 0 ? /* @__PURE__ */ jsx("div", { className: "flex justify-center py-4", children: /* @__PURE__ */ jsx(Spinner, { label: labels.loading }) }) : entries.length === 0 ? /* @__PURE__ */ jsx(Caption, { children: labels.empty }) : /* @__PURE__ */ jsx(
+      "ol",
+      {
+        "aria-label": labels.title,
+        "aria-busy": loading || void 0,
+        className: cn("divide-y divide-[var(--border)]", loading && "opacity-60"),
+        children: entries.map((entry) => /* @__PURE__ */ jsxs("li", { "data-action": entry.action, className: "space-y-0.5 py-2 first:pt-0 last:pb-0", children: [
+          /* @__PURE__ */ jsxs("div", { className: "flex flex-wrap items-baseline justify-between gap-x-3 gap-y-0.5", children: [
+            /* @__PURE__ */ jsxs("div", { className: "flex min-w-0 flex-wrap items-baseline gap-x-2 gap-y-0.5 text-sm", children: [
+              /* @__PURE__ */ jsx("span", { className: "font-medium text-[var(--text-primary)]", children: labels.actions[entry.action] ?? entry.action }),
+              /* @__PURE__ */ jsx("span", { className: "min-w-0 break-words", children: targetNode(entry) })
+            ] }),
+            /* @__PURE__ */ jsx(DateMark, { value: entry.at, display: "relative", className: "text-xs text-[var(--text-muted)]" })
+          ] }),
+          /* @__PURE__ */ jsxs("div", { className: "text-xs text-[var(--text-muted)]", children: [
+            /* @__PURE__ */ jsx("span", { "data-private": entry.actor !== null && entry.actor !== "self" ? true : void 0, children: actorText(entry) }),
+            entry.detail !== void 0 && entry.detail !== null && entry.detail !== "" && /* @__PURE__ */ jsxs(Fragment, { children: [
+              " \xB7 ",
+              /* @__PURE__ */ jsx("span", { className: "text-[var(--text-secondary)]", children: entry.detail })
+            ] })
+          ] })
+        ] }, entry.id))
+      }
+    ),
+    paging && paging.total > 0 && /* @__PURE__ */ jsx(
+      Pagination,
+      {
+        page: paging.page,
+        pageSize: paging.pageSize,
+        total: paging.total,
+        totalPages: Math.max(1, Math.ceil(paging.total / Math.max(1, paging.pageSize))),
+        onPage: paging.onPageChange,
+        onPageSize: paging.onPageSizeChange
+      }
+    )
+  ] });
+}
+export {
+  ADMIN_ACTION_KINDS,
+  AdminActionLog,
+  DEFAULT_ADMIN_ACTION_LOG_LABELS
+};
+//# sourceMappingURL=admin-action-log.js.map

package/dist/admin/admin-action-log.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/admin/admin-action-log.tsx"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport { cn } from \"../lib/cn\";\nimport type { DateInput } from \"../lib/format\";\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { DateMark } from \"../components/account-chips\";\nimport { Chip } from \"../components/chip\";\nimport { Pagination } from \"../components/data-table-pagination\";\nimport { Caption } from \"../components/text\";\nimport { Button, Spinner } from \"../components/ui\";\nimport { usePersonLabel } from \"./admin-parts\";\nimport type { AdminPerson } from \"./admin-parts\";\n\n/**\n * The admin actions, as the audit table records them (docs/user-admin-harmonization.md\n * §2.3, §4.3): `GET /admin/actions?limit=&offset=&target=`, newest first, on the admin\n * page and filtered to one account from its row.\n *\n * Every app writes the same small `admin_actions` row in the transaction of the action\n * (keksdose and Kurvenschmiede had log lines; kastlan has an HTTP log with no named\n * action), so the vocabulary is shared — {@link AdminActionKind} — and an app's own\n * actions join it through `labels.actions`.\n *\n * What a row says, and what it never does: who, what, to whom, when, and a summary of the\n * `detail` the APP writes (ids, roles, counts — never content, §4.3). Three kinds of\n * actor: an admin; **the user themselves** (`deletion_request`: the actor is the target);\n * and **nobody** (the scheduled erasure, the hand-over at erasure, §2.7), said as\n * \"automatically\". After an erasure the target's name and address are scrubbed and the\n * row stays: it reads \"an erased account\".\n *\n * It never fetches: the page of rows and the paging are the app's.\n */\n\n/** The shared vocabulary of `admin_actions.action` (§4.3). */\nexport type AdminActionKind =\n  | \"deactivate\"\n  | \"reactivate\"\n  | \"role\"\n  | \"membership_remove\"\n  | \"password_change_require\"\n  | \"password_change_withdraw\"\n  | \"mail_verification\"\n  | \"mail_reset\"\n  | \"reviewer\"\n  | \"invite\"\n  | \"invite_resend\"\n  | \"invite_revoke\"\n  | \"transfer\"\n  | \"deletion_request\"\n  | \"deletion_cancel\"\n  | \"erase\";\n\n/** Every {@link AdminActionKind}, in the contract's order. */\nexport const ADMIN_ACTION_KINDS: readonly AdminActionKind[] = [\n  \"deactivate\",\n  \"reactivate\",\n  \"role\",\n  \"membership_remove\",\n  \"password_change_require\",\n  \"password_change_withdraw\",\n  \"mail_verification\",\n  \"mail_reset\",\n  \"reviewer\",\n  \"invite\",\n  \"invite_resend\",\n  \"invite_revoke\",\n  \"transfer\",\n  \"deletion_request\",\n  \"deletion_cancel\",\n  \"erase\",\n];\n\n/** One logged action — the app's `admin_actions` row with the people joined in. */\nexport interface AdminActionLogEntry {\n  id: string | number;\n  /** When, as the row's `at`. */\n  at: DateInput;\n  /**\n   * Who did it: a person; `\"self\"` — the user themselves (a deletion request); or `null`\n   * — nobody, the scheduled job. A person whose `id` (or address) is the target's is\n   * read as `\"self\"` too.\n   */\n  actor: AdminPerson | \"self\" | null;\n  /** A {@link AdminActionKind}, or one of the app's own (named in `labels.actions`). */\n  action: AdminActionKind | (string & {});\n  /** Whom it was done to. `null`, or a person with nothing left in it: an erased\n   *  account. An invitation's target is its address (`target_email`). */\n  target?: AdminPerson | null;\n  /** The `detail` in the app's words — \"Member → Admin\", \"12 items to Ben Example\". */\n  detail?: ReactNode;\n}\n\n/** The `adminActionLog` namespace. */\nexport interface AdminActionLogLabels {\n  /** The list's accessible name. */\n  title: string;\n  empty: string;\n  loading: string;\n  /** \"by Ada Example\". */\n  by: (actor: string) => string;\n  /** The user acted on their own account. */\n  bySelf: string;\n  /** No actor: a scheduled job. */\n  automatic: string;\n  /** A target scrubbed by an erasure. */\n  erased: string;\n  /** The filter chip: only one account's actions are shown. */\n  filteredTo: (target: string) => string;\n  /** The chip's ×. */\n  showAll: string;\n  /** A target name as a filter button — \"Show only the actions on Ada Example\". */\n  filterBy: (target: string) => string;\n  /** What each action is called, past tense, keyed by the vocabulary. An app adds its\n   *  own here (`labels={{ actions: { plan: \"Plan changed\" } }}`). */\n  actions: { [K in AdminActionKind]?: string } & { [action: string]: string | undefined };\n}\n\nexport const DEFAULT_ADMIN_ACTION_LOG_LABELS: AdminActionLogLabels = {\n  title: \"Admin actions\",\n  empty: \"No admin actions yet.\",\n  loading: \"Loading…\",\n  by: (actor) => `by ${actor}`,\n  bySelf: \"by the user themselves\",\n  automatic: \"automatically\",\n  erased: \"an erased account\",\n  filteredTo: (target) => `Only ${target}`,\n  showAll: \"Show all actions\",\n  filterBy: (target) => `Show only the actions on ${target}`,\n  actions: {\n    deactivate: \"Deactivated\",\n    reactivate: \"Reactivated\",\n    role: \"Role changed\",\n    membership_remove: \"Removed from the company\",\n    password_change_require: \"New password required\",\n    password_change_withdraw: \"Password requirement withdrawn\",\n    mail_verification: \"Verification mail sent\",\n    mail_reset: \"Password reset mail sent\",\n    reviewer: \"Reviewer scope changed\",\n    invite: \"Invited\",\n    invite_resend: \"Invitation resent\",\n    invite_revoke: \"Invitation revoked\",\n    transfer: \"Work transferred\",\n    deletion_request: \"Deletion requested\",\n    deletion_cancel: \"Deletion cancelled\",\n    erase: \"Account erased\",\n  },\n};\n\n/** The paging of `GET /admin/actions` — DataTable's `ServerPagination`, which the\n *  footer is. */\nexport interface AdminActionLogPaging {\n  /** 0-based. */\n  page: number;\n  pageSize: number;\n  total: number;\n  onPageChange: (page: number) => void;\n  onPageSizeChange?: (pageSize: number) => void;\n}\n\nexport interface AdminActionLogProps {\n  /** One page, newest first, as the server sends it. */\n  entries: readonly AdminActionLogEntry[];\n  /** Left out: no footer (a short list on a row). */\n  paging?: AdminActionLogPaging;\n  /** The page is being fetched. */\n  loading?: boolean;\n  /** The filter in force: only this account's actions are shown (`?target=`). With\n   *  `onTargetFilter`, a chip says so and its × clears it. */\n  target?: AdminPerson | null;\n  /** Filter by an account — or clear it with `null`. Given, every target's name is a\n   *  button that narrows the list to it. Left out, the list is not filterable here. */\n  onTargetFilter?: (target: AdminPerson | null) => void;\n  className?: string;\n  labels?: Partial<AdminActionLogLabels>;\n}\n\n/** Whether a person has nothing left that names them — an erased target. */\nfunction scrubbed(person: AdminPerson | null | undefined): boolean {\n  return !person || ![person.first, person.last, person.name, person.email].some((part) => (part ?? \"\").trim());\n}\n\nfunction samePerson(a: AdminPerson, b: AdminPerson | null | undefined): boolean {\n  if (!b) return false;\n  if (a.id !== undefined && a.id !== null && b.id !== undefined && b.id !== null) return a.id === b.id;\n  const ea = (a.email ?? \"\").trim().toLowerCase();\n  return ea !== \"\" && ea === (b.email ?? \"\").trim().toLowerCase();\n}\n\nexport function AdminActionLog({\n  entries,\n  paging,\n  loading = false,\n  target,\n  onTargetFilter,\n  className,\n  labels: labelsProp,\n}: AdminActionLogProps) {\n  const labels = useKitLabels(\"adminActionLog\", DEFAULT_ADMIN_ACTION_LOG_LABELS, labelsProp);\n  const nameOf = usePersonLabel();\n  const filtered = target !== undefined && target !== null && !scrubbed(target);\n\n  const actorText = (entry: AdminActionLogEntry): string => {\n    const { actor } = entry;\n    if (actor === null) return labels.automatic;\n    if (actor === \"self\" || samePerson(actor, entry.target)) return labels.bySelf;\n    return labels.by(nameOf(actor) || labels.erased);\n  };\n\n  const targetNode = (entry: AdminActionLogEntry): ReactNode => {\n    if (scrubbed(entry.target)) return <span className=\"italic text-[var(--text-muted)]\">{labels.erased}</span>;\n    const person = entry.target!;\n    const name = nameOf(person);\n    const address = (person.email ?? \"\").trim();\n    const text = (\n      <>\n        <span data-private className=\"font-medium text-[var(--text-primary)]\">\n          {name}\n        </span>\n        {address && address !== name && (\n          <span data-private className=\"ms-1 text-xs text-[var(--text-muted)]\">\n            {address}\n          </span>\n        )}\n      </>\n    );\n    if (!onTargetFilter || (filtered && samePerson(person, target))) return text;\n    return (\n      <Button\n        type=\"button\"\n        variant=\"link\"\n        size=\"sm\"\n        className=\"h-auto min-h-0 p-0 text-start\"\n        aria-label={labels.filterBy(name)}\n        onClick={() => onTargetFilter(person)}\n      >\n        {text}\n      </Button>\n    );\n  };\n\n  return (\n    <div className={cn(\"space-y-3\", className)}>\n      {filtered && onTargetFilter && (\n        <Chip size=\"sm\" tone=\"brand\" onRemove={() => onTargetFilter(null)} removeLabel={labels.showAll}>\n          <span data-private>{labels.filteredTo(nameOf(target))}</span>\n        </Chip>\n      )}\n      {loading && entries.length === 0 ? (\n        <div className=\"flex justify-center py-4\">\n          <Spinner label={labels.loading} />\n        </div>\n      ) : entries.length === 0 ? (\n        <Caption>{labels.empty}</Caption>\n      ) : (\n        <ol\n          aria-label={labels.title}\n          aria-busy={loading || undefined}\n          className={cn(\"divide-y divide-[var(--border)]\", loading && \"opacity-60\")}\n        >\n          {entries.map((entry) => (\n            <li key={entry.id} data-action={entry.action} className=\"space-y-0.5 py-2 first:pt-0 last:pb-0\">\n              <div className=\"flex flex-wrap items-baseline justify-between gap-x-3 gap-y-0.5\">\n                <div className=\"flex min-w-0 flex-wrap items-baseline gap-x-2 gap-y-0.5 text-sm\">\n                  <span className=\"font-medium text-[var(--text-primary)]\">\n                    {labels.actions[entry.action] ?? entry.action}\n                  </span>\n                  <span className=\"min-w-0 break-words\">{targetNode(entry)}</span>\n                </div>\n                <DateMark value={entry.at} display=\"relative\" className=\"text-xs text-[var(--text-muted)]\" />\n              </div>\n              <div className=\"text-xs text-[var(--text-muted)]\">\n                <span data-private={entry.actor !== null && entry.actor !== \"self\" ? true : undefined}>\n                  {actorText(entry)}\n                </span>\n                {entry.detail !== undefined && entry.detail !== null && entry.detail !== \"\" && (\n                  <>\n                    {\" · \"}\n                    <span className=\"text-[var(--text-secondary)]\">{entry.detail}</span>\n                  </>\n                )}\n              </div>\n            </li>\n          ))}\n        </ol>\n      )}\n      {paging && paging.total > 0 && (\n        <Pagination\n          page={paging.page}\n          pageSize={paging.pageSize}\n          total={paging.total}\n          totalPages={Math.max(1, Math.ceil(paging.total / Math.max(1, paging.pageSize)))}\n          onPage={paging.onPageChange}\n          onPageSize={paging.onPageSizeChange}\n        />\n      )}\n    </div>\n  );\n}\n"],"mappings":";AAgNuC,SAKjC,UALiC,KAKjC,YALiC;AA/MvC,SAAS,UAAU;AAEnB,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,QAAQ,eAAe;AAChC,SAAS,sBAAsB;AA2CxB,MAAM,qBAAiD;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA+CO,MAAM,kCAAwD;AAAA,EACnE,OAAO;AAAA,EACP,OAAO;AAAA,EACP,SAAS;AAAA,EACT,IAAI,CAAC,UAAU,MAAM,KAAK;AAAA,EAC1B,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,YAAY,CAAC,WAAW,QAAQ,MAAM;AAAA,EACtC,SAAS;AAAA,EACT,UAAU,CAAC,WAAW,4BAA4B,MAAM;AAAA,EACxD,SAAS;AAAA,IACP,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,yBAAyB;AAAA,IACzB,0BAA0B;AAAA,IAC1B,mBAAmB;AAAA,IACnB,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,eAAe;AAAA,IACf,UAAU;AAAA,IACV,kBAAkB;AAAA,IAClB,iBAAiB;AAAA,IACjB,OAAO;AAAA,EACT;AACF;AA+BA,SAAS,SAAS,QAAiD;AACjE,SAAO,CAAC,UAAU,CAAC,CAAC,OAAO,OAAO,OAAO,MAAM,OAAO,MAAM,OAAO,KAAK,EAAE,KAAK,CAAC,UAAU,QAAQ,IAAI,KAAK,CAAC;AAC9G;AAEA,SAAS,WAAW,GAAgB,GAA4C;AAC9E,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,EAAE,OAAO,UAAa,EAAE,OAAO,QAAQ,EAAE,OAAO,UAAa,EAAE,OAAO,KAAM,QAAO,EAAE,OAAO,EAAE;AAClG,QAAM,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,YAAY;AAC9C,SAAO,OAAO,MAAM,QAAQ,EAAE,SAAS,IAAI,KAAK,EAAE,YAAY;AAChE;AAEO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAAwB;AACtB,QAAM,SAAS,aAAa,kBAAkB,iCAAiC,UAAU;AACzF,QAAM,SAAS,eAAe;AAC9B,QAAM,WAAW,WAAW,UAAa,WAAW,QAAQ,CAAC,SAAS,MAAM;AAE5E,QAAM,YAAY,CAAC,UAAuC;AACxD,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,UAAU,KAAM,QAAO,OAAO;AAClC,QAAI,UAAU,UAAU,WAAW,OAAO,MAAM,MAAM,EAAG,QAAO,OAAO;AACvE,WAAO,OAAO,GAAG,OAAO,KAAK,KAAK,OAAO,MAAM;AAAA,EACjD;AAEA,QAAM,aAAa,CAAC,UAA0C;AAC5D,QAAI,SAAS,MAAM,MAAM,EAAG,QAAO,oBAAC,UAAK,WAAU,mCAAmC,iBAAO,QAAO;AACpG,UAAM,SAAS,MAAM;AACrB,UAAM,OAAO,OAAO,MAAM;AAC1B,UAAM,WAAW,OAAO,SAAS,IAAI,KAAK;AAC1C,UAAM,OACJ,iCACE;AAAA,0BAAC,UAAK,gBAAY,MAAC,WAAU,0CAC1B,gBACH;AAAA,MACC,WAAW,YAAY,QACtB,oBAAC,UAAK,gBAAY,MAAC,WAAU,yCAC1B,mBACH;AAAA,OAEJ;AAEF,QAAI,CAAC,kBAAmB,YAAY,WAAW,QAAQ,MAAM,EAAI,QAAO;AACxE,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,MAAK;AAAA,QACL,WAAU;AAAA,QACV,cAAY,OAAO,SAAS,IAAI;AAAA,QAChC,SAAS,MAAM,eAAe,MAAM;AAAA,QAEnC;AAAA;AAAA,IACH;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAI,WAAW,GAAG,aAAa,SAAS,GACtC;AAAA,gBAAY,kBACX,oBAAC,QAAK,MAAK,MAAK,MAAK,SAAQ,UAAU,MAAM,eAAe,IAAI,GAAG,aAAa,OAAO,SACrF,8BAAC,UAAK,gBAAY,MAAE,iBAAO,WAAW,OAAO,MAAM,CAAC,GAAE,GACxD;AAAA,IAED,WAAW,QAAQ,WAAW,IAC7B,oBAAC,SAAI,WAAU,4BACb,8BAAC,WAAQ,OAAO,OAAO,SAAS,GAClC,IACE,QAAQ,WAAW,IACrB,oBAAC,WAAS,iBAAO,OAAM,IAEvB;AAAA,MAAC;AAAA;AAAA,QACC,cAAY,OAAO;AAAA,QACnB,aAAW,WAAW;AAAA,QACtB,WAAW,GAAG,mCAAmC,WAAW,YAAY;AAAA,QAEvE,kBAAQ,IAAI,CAAC,UACZ,qBAAC,QAAkB,eAAa,MAAM,QAAQ,WAAU,yCACtD;AAAA,+BAAC,SAAI,WAAU,mEACb;AAAA,iCAAC,SAAI,WAAU,mEACb;AAAA,kCAAC,UAAK,WAAU,0CACb,iBAAO,QAAQ,MAAM,MAAM,KAAK,MAAM,QACzC;AAAA,cACA,oBAAC,UAAK,WAAU,uBAAuB,qBAAW,KAAK,GAAE;AAAA,eAC3D;AAAA,YACA,oBAAC,YAAS,OAAO,MAAM,IAAI,SAAQ,YAAW,WAAU,oCAAmC;AAAA,aAC7F;AAAA,UACA,qBAAC,SAAI,WAAU,oCACb;AAAA,gCAAC,UAAK,gBAAc,MAAM,UAAU,QAAQ,MAAM,UAAU,SAAS,OAAO,QACzE,oBAAU,KAAK,GAClB;AAAA,YACC,MAAM,WAAW,UAAa,MAAM,WAAW,QAAQ,MAAM,WAAW,MACvE,iCACG;AAAA;AAAA,cACD,oBAAC,UAAK,WAAU,gCAAgC,gBAAM,QAAO;AAAA,eAC/D;AAAA,aAEJ;AAAA,aApBO,MAAM,EAqBf,CACD;AAAA;AAAA,IACH;AAAA,IAED,UAAU,OAAO,QAAQ,KACxB;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,OAAO;AAAA,QACb,UAAU,OAAO;AAAA,QACjB,OAAO,OAAO;AAAA,QACd,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG,OAAO,QAAQ,CAAC,CAAC;AAAA,QAC9E,QAAQ,OAAO;AAAA,QACf,YAAY,OAAO;AAAA;AAAA,IACrB;AAAA,KAEJ;AAEJ;","names":[]}