@eifi1/ui-kit 0.30.0 → 0.31.0

package/dist/admin/admin-action-confirm.d.ts

@@ -1,5 +1,5 @@
 import 'react';
-export { bt as AdminActionConfirm, bu as AdminActionConfirmProps, bv as AdminActionConfirmValues, bw as AdminActionLabels, bx as AdminActionTarget, by as AdminConfirmLevel, cf as DEFAULT_ADMIN_ACTION_LABELS } from '../delete-account-setting-CGVMckMw.js';
+export { bt as AdminActionConfirm, bu as AdminActionConfirmProps, bv as AdminActionConfirmValues, bw as AdminActionLabels, bx as AdminActionTarget, by as AdminConfirmLevel, cf as DEFAULT_ADMIN_ACTION_LABELS } from '../delete-account-setting-DCFS5Vof.js';
 import './admin-parts.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
@@ -55,6 +55,8 @@ import '../components/image-grid.js';
 import '../components/lightbox.js';
 import '../components/write-lock.js';
 import '../auth/sign-in-form.js';
+import '../landing/access.js';
+import '../landing/landing-labels.js';
 import '../shell/topbar-controls.js';
 import '../theme/palette-presets.js';
 import '../theme/chart-palette.js';
@@ -75,6 +77,8 @@ import '../lib/format.js';
 import '../account/data-export-setting.js';
 import '../components/account-chips.js';
 import './admin-action-log.js';
+import '../settings/settings-labels.js';
+import '../demo/demo-labels.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';

package/dist/admin/invitations-panel.d.ts

@@ -1,6 +1,6 @@
 import 'react';
 import '../lib/format.js';
-export { cv as DEFAULT_INVITATIONS_LABELS, dE as InvitationDraft, dF as InvitationRow, dG as InvitationScope, dH as InvitationSentAnswer, dI as InvitationStatus, dJ as InvitationsLabels, dK as InvitationsPanel, dL as InvitationsPanelProps } from '../delete-account-setting-CGVMckMw.js';
+export { cv as DEFAULT_INVITATIONS_LABELS, dE as InvitationDraft, dF as InvitationRow, dG as InvitationScope, dH as InvitationSentAnswer, dI as InvitationStatus, dJ as InvitationsLabels, dK as InvitationsPanel, dL as InvitationsPanelProps } from '../delete-account-setting-DCFS5Vof.js';
 import '../components/account-chips.js';
 import './admin-parts.js';
 import '../components/tooltip.js';
@@ -57,6 +57,8 @@ import '../components/image-grid.js';
 import '../components/lightbox.js';
 import '../components/write-lock.js';
 import '../auth/sign-in-form.js';
+import '../landing/access.js';
+import '../landing/landing-labels.js';
 import '../shell/topbar-controls.js';
 import '../theme/palette-presets.js';
 import '../theme/chart-palette.js';
@@ -75,6 +77,8 @@ import '../account/email-change-setting.js';
 import '../account/sessions-setting.js';
 import '../account/data-export-setting.js';
 import './admin-action-log.js';
+import '../settings/settings-labels.js';
+import '../demo/demo-labels.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';

package/dist/admin/invitations-panel.js

@@ -64,6 +64,7 @@ function InvitationsPanel({
   loading = false,
   describeError,
   intro,
+  listTitle,
   className,
   labels: labelsProp
 }) {
@@ -216,13 +217,13 @@ function InvitationsPanel({
       /* @__PURE__ */ jsx(CopyButton, { size: "xs", text: looseLink.link, label: labels.copyLink })
     ] }) }),
     /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
-      /* @__PURE__ */ jsx(SectionLabel, { as: "h4", children: labels.listTitle }),
+      listTitle !== null && /* @__PURE__ */ jsx(SectionLabel, { as: "h4", children: listTitle ?? labels.listTitle }),
       loading && invitations.length === 0 ? /* @__PURE__ */ jsx("div", { className: "flex justify-center py-3", children: /* @__PURE__ */ jsx(Spinner, { label: labels.loading }) }) : invitations.length === 0 ? /* @__PURE__ */ jsx(Caption, { children: labels.empty }) : /* @__PURE__ */ jsx("ul", { "aria-label": labels.listTitle, className: "divide-y divide-[var(--border)]", children: invitations.map((invitation) => {
         const key = String(invitation.id);
         const link = invitation.link ?? links[key];
         const open = invitation.status === "open";
         const resendable = onResend && (open || invitation.status === "expired");
-        const revocable = onRevoke && open;
+        const revocable = onRevoke && (open || invitation.status === "expired");
         const scopeText = scopeLabel(invitation.scope);
         const by = typeof invitation.invited_by === "string" ? invitation.invited_by : nameOf(invitation.invited_by);
         const facts = [

package/dist/admin/invitations-panel.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/admin/invitations-panel.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { FormEvent, ReactNode } from \"react\";\nimport { RefreshCw, Trash2, UserPlus } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport type { DateInput } from \"../lib/format\";\nimport { useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\nimport { KIT_LANGUAGES, resolveLanguage } from \"../i18n/languages\";\nimport type { KitLanguageCode } from \"../i18n/languages\";\nimport { RoleChip } from \"../components/account-chips\";\nimport type { RoleVocabulary } from \"../components/account-chips\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport type { ChipTone } from \"../components/chip\";\nimport { CopyButton } from \"../components/copy-button\";\nimport { LanguageSelect } from \"../components/language-select\";\nimport { SectionLabel, Caption } from \"../components/text\";\nimport { Button, IconButton, Input, Select, Spinner } from \"../components/ui\";\nimport { useWriteLock } from \"../components/write-lock\";\nimport { hasMessage, settle, useDayText, usePersonLabel } from \"./admin-parts\";\nimport type { AdminPerson, MaybePromise } from \"./admin-parts\";\nimport { RoleSelect } from \"./role-select\";\n\n/**\n * Who is invited, and the form that invites (docs/user-admin-harmonization.md §5; auth\n * §4.4: a hashed one-time token, 14 days, an address with a role and a scope).\n *\n * Kurvenschmiede's `invitations-panel.tsx` with its parts made props: a form (the address,\n * a role from the app's vocabulary, an optional scope — a team, a company — the language\n * the invitation is written in, a note), then one row per invitation with its status, when\n * it was sent and until when it works, and resend / copy link / revoke.\n *\n * - **It assumes nothing about who invites.** Admins do, team managers into their team,\n *   kastlan's company admins into their company — and in keksdose ANY budget owner, from\n *   the budget's sharing (Marcel, 2026-10-07). So no word here says \"admin\"; the roles,\n *   the scopes and the callbacks are the app's, and so is the frame around it.\n * - **The address is someone else's.** No `+app` tag is offered (auth §4.5): a tag is\n *   the owner's own choice, made when they sign up.\n * - **The link is shown once.** The token is stored hashed, so the server can show a link\n *   only in the answer that minted it — on creation and on resend, and only while mail\n *   goes to the console (dev, a deploy without mail). The panel keeps such a link for as\n *   long as it is mounted and offers to copy it on its row; reloading the page loses it,\n *   and \"resend\" mints a new one. With the console backend the panel says so up front.\n * - **Revoked is optional.** An app that deletes the row instead (kastlan) never sends\n *   `revoked`; the status chip simply never says it (§5).\n *\n * It never sends a request: `onInvite`, `onResend` and `onRevoke` do.\n */\n\nexport type InvitationStatus = \"open\" | \"accepted\" | \"expired\" | \"revoked\";\n\n/** One row of `GET /admin/invitations` (§5), in the wire's own field names. */\nexport interface InvitationRow<R extends string = string> {\n  id: string | number;\n  email: string;\n  role?: R | null;\n  /** The scope's value — a team's or a company's id, matched against `scopes`. */\n  scope?: string | number | null;\n  note?: string | null;\n  /** The language it was written in. */\n  locale?: string | null;\n  /** Who sent it: a name, or the person. */\n  invited_by?: string | AdminPerson | null;\n  created_at: DateInput;\n  expires_at?: DateInput;\n  status: InvitationStatus;\n  /** The one-time link, while mail goes to the console — in the answer that minted it. */\n  link?: string | null;\n}\n\n/** What the form sends — `POST /admin/invitations {email, role, scope?, note?, locale}`. */\nexport interface InvitationDraft<R extends string = string> {\n  email: string;\n  /** Absent when the app offers no role choice (`roles` left out). */\n  role?: R;\n  scope?: string;\n  note?: string;\n  locale: KitLanguageCode;\n}\n\n/** What `onInvite` / `onResend` may answer, so the panel can keep a shown-once link. */\nexport interface InvitationSentAnswer {\n  /** The invitation the answer is about — `onInvite` needs it for the link to find its\n   *  row; `onResend` knows it already. */\n  id?: string | number;\n  /** The one-time link, while mail goes to the console. */\n  link?: string | null;\n  /** `false`: the invitation exists but the mail failed — say so, resend it. */\n  sent?: boolean;\n}\n\n/** A scope an invitation can carry. */\nexport interface InvitationScope {\n  value: string;\n  label: string;\n}\n\n/** The `invitations` namespace. */\nexport interface InvitationsLabels {\n  /** The form's address field. */\n  email: string;\n  /** Under it while what was typed is not an address. */\n  invalidEmail: string;\n  role: string;\n  /** The scope select's label — the app's word (\"Team\", \"Company\") goes over it. */\n  scope: string;\n  /** The scope select's empty choice. */\n  scopeNone: string;\n  /** The language select's label. */\n  language: string;\n  note: string;\n  /** The form's button. */\n  invite: string;\n  /** Heading over the rows. */\n  listTitle: string;\n  empty: string;\n  loading: string;\n  /** The status chip, per status. */\n  status: Record<InvitationStatus, string>;\n  /** \"Sent 6 Oct 2026\". */\n  sent: (date: string) => string;\n  /** \"Expires 20 Oct 2026\" — on an open invitation. */\n  expires: (date: string) => string;\n  /** \"by Ada Example\". */\n  invitedBy: (name: string) => string;\n  /** The resend button — \"Send ben@example.com a new link\". */\n  resend: (email: string) => string;\n  /** The copy button. */\n  copyLink: string;\n  /** The revoke button — \"Revoke the invitation for ben@example.com\". */\n  revoke: (email: string) => string;\n  /** Over everything while mail goes to the console. */\n  consoleHint: string;\n  /** Beside a link the answer carried with no row to put it on. */\n  linkReady: (email: string) => string;\n  /** The answer said the mail was not sent. */\n  notSent: (email: string) => string;\n  /** A rejected callback, unless `describeError` says better. */\n  failed: string;\n}\n\nexport const DEFAULT_INVITATIONS_LABELS: InvitationsLabels = {\n  email: \"Email address\",\n  invalidEmail: \"Enter a complete email address.\",\n  role: \"Role\",\n  scope: \"Scope\",\n  scopeNone: \"None\",\n  language: \"Language of the invitation\",\n  note: \"Note\",\n  invite: \"Invite\",\n  listTitle: \"Invitations\",\n  empty: \"Nobody has been invited yet.\",\n  loading: \"Loading…\",\n  status: { open: \"Open\", accepted: \"Accepted\", expired: \"Expired\", revoked: \"Revoked\" },\n  sent: (date) => `Sent ${date}`,\n  expires: (date) => `Expires ${date}`,\n  invitedBy: (name) => `by ${name}`,\n  resend: (email) => `Send ${email} a new link`,\n  copyLink: \"Copy invitation link\",\n  revoke: (email) => `Revoke the invitation for ${email}`,\n  consoleHint:\n    \"Mail isn’t sent on this server — it is written to the server log. Copy each invitation link from here and pass it on yourself: it is shown only once.\",\n  linkReady: (email) => `The invitation link for ${email}, shown only this once:`,\n  notSent: (email) => `${email} is invited, but the mail couldn’t be sent. Resend it.`,\n  failed: \"That didn’t work. Please try again.\",\n};\n\n/** The tone of each status. */\nconst STATUS_TONES: Readonly<Record<InvitationStatus, ChipTone>> = {\n  open: \"info\",\n  accepted: \"success\",\n  expired: \"warning\",\n  revoked: \"neutral\",\n};\n\nexport interface InvitationsPanelProps<R extends string = string> {\n  invitations: readonly InvitationRow<R>[];\n  /** The app's roles. Left out: no role choice, and no role chip on a row. */\n  roles?: RoleVocabulary<R>;\n  /** The roles an invitation may carry — Kurvenschmiede's member or customer. Default:\n   *  the whole vocabulary. One role: no choice is drawn, and it is sent. */\n  invitableRoles?: readonly R[];\n  /** The role the form starts with. Default: the first invitable one. */\n  defaultRole?: R;\n  /** The scopes an invitation may carry — teams, companies. Left out: no scope field. */\n  scopes?: readonly InvitationScope[];\n  /** A scope must be chosen (no \"None\"). */\n  scopeRequired?: boolean;\n  /** The languages offered. Default: all seven of the kit's. */\n  languages?: readonly KitLanguageCode[];\n  /** The language the form starts with. Default: the page's, resolved to `languages`. */\n  defaultLocale?: string;\n  /** The server's `mail_backend`. `\"console\"` draws the hint. */\n  mailBackend?: string | null;\n  /** Creates one (resolve to clear the form; reject to keep it and say why). Left out:\n   *  no form — a list someone may look at but not add to. */\n  onInvite?: (draft: InvitationDraft<R>) => MaybePromise<InvitationSentAnswer | void>;\n  /** Mints a new link and mails it. Left out: no resend button. */\n  onResend?: (invitation: InvitationRow<R>) => MaybePromise<InvitationSentAnswer | void>;\n  /** Revokes an open invitation (level `none`, §4.2: re-inviting undoes it). Left out:\n   *  no revoke button. */\n  onRevoke?: (invitation: InvitationRow<R>) => MaybePromise;\n  /** The list is being fetched. */\n  loading?: boolean;\n  /** The app's words for a rejected callback. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** Over the form: who can be invited and what happens, in the app's words. */\n  intro?: ReactNode;\n  className?: string;\n  labels?: Partial<InvitationsLabels>;\n}\n\n// Shape only — whether the address may be invited is the server's question.\nconst EMAIL_SHAPE = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n\nconst ALL_CODES: readonly KitLanguageCode[] = KIT_LANGUAGES.map((language) => language.code);\n\n/** A failed run, told apart from an answer of `undefined`. */\nconst FAILED = Symbol(\"failed\");\n\nexport function InvitationsPanel<R extends string = string>({\n  invitations,\n  roles,\n  invitableRoles,\n  defaultRole,\n  scopes,\n  scopeRequired = false,\n  languages = ALL_CODES,\n  defaultLocale,\n  mailBackend,\n  onInvite,\n  onResend,\n  onRevoke,\n  loading = false,\n  describeError,\n  intro,\n  className,\n  labels: labelsProp,\n}: InvitationsPanelProps<R>) {\n  const labels = useKitLabels(\"invitations\", DEFAULT_INVITATIONS_LABELS, labelsProp);\n  const kitLocale = useKitLocale();\n  const dayText = useDayText();\n  const nameOf = usePersonLabel();\n  const lock = useWriteLock();\n  const offered: readonly R[] = invitableRoles ?? (roles ? (Object.keys(roles) as R[]) : []);\n  const [email, setEmail] = useState(\"\");\n  const [invalid, setInvalid] = useState(false);\n  const [role, setRole] = useState<R | undefined>(defaultRole ?? offered[0]);\n  const [scope, setScope] = useState(\"\");\n  const [locale, setLocale] = useState<KitLanguageCode>(() =>\n    resolveLanguage([defaultLocale, kitLocale], languages),\n  );\n  const [note, setNote] = useState(\"\");\n  // One request at a time, for the whole panel; the key says which control spins.\n  const [busy, setBusy] = useState<string | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const [notice, setNotice] = useState<ReactNode>(null);\n  // Links the answers carried, by invitation — shown once, kept while mounted.\n  const [links, setLinks] = useState<Record<string, string>>({});\n  // A link whose answer named no invitation: shown above the list instead.\n  const [looseLink, setLooseLink] = useState<{ email: string; link: string } | null>(null);\n\n  const run = async <T,>(key: string, call: () => MaybePromise<T>): Promise<T | void | typeof FAILED> => {\n    setBusy(key);\n    setFailure(null);\n    setNotice(null);\n    try {\n      return await settle(call);\n    } catch (error) {\n      const own = describeError?.(error);\n      setFailure(hasMessage(own) ? own : labels.failed);\n      return FAILED;\n    } finally {\n      setBusy(null);\n    }\n  };\n\n  /** Keep what an answer carried: its link, and whether the mail went. */\n  const took = (answer: InvitationSentAnswer | void, address: string, id?: string | number) => {\n    if (!answer) return;\n    const key = answer.id ?? id;\n    if (answer.link) {\n      if (key !== undefined) setLinks((known) => ({ ...known, [String(key)]: answer.link as string }));\n      else setLooseLink({ email: address, link: answer.link });\n    }\n    if (answer.sent === false) setNotice(labels.notSent(address));\n  };\n\n  const address = email.trim();\n  const choosesRole = roles !== undefined && offered.length > 1;\n  const canInvite = onInvite !== undefined;\n\n  const submit = async (event: FormEvent) => {\n    event.preventDefault();\n    // Enter in a field is a commit too — the button's lock does not see it.\n    if (!onInvite || busy || lock.locked || address === \"\") return;\n    if (!EMAIL_SHAPE.test(address)) {\n      setInvalid(true);\n      return;\n    }\n    if (scopes && scopeRequired && scope === \"\") return;\n    const draft: InvitationDraft<R> = {\n      email: address,\n      locale,\n      ...(role !== undefined && roles !== undefined ? { role } : {}),\n      ...(scope !== \"\" ? { scope } : {}),\n      ...(note.trim() !== \"\" ? { note: note.trim() } : {}),\n    };\n    const answer = await run(\"invite\", () => onInvite(draft));\n    if (answer === FAILED) return;\n    took(answer, address);\n    setEmail(\"\");\n    setNote(\"\");\n  };\n\n  const scopeLabel = (value: InvitationRow[\"scope\"]) =>\n    value === null || value === undefined || value === \"\"\n      ? null\n      : (scopes?.find((s) => s.value === String(value))?.label ?? String(value));\n\n  return (\n    <div className={cn(\"space-y-3\", className)}>\n      {intro && <div className=\"text-sm text-[var(--text-secondary)]\">{intro}</div>}\n      {mailBackend === \"console\" && (\n        <AlertBanner tone=\"info\" size=\"sm\">\n          {labels.consoleHint}\n        </AlertBanner>\n      )}\n\n      {canInvite && (\n        <form noValidate onSubmit={submit} className=\"@container space-y-2\">\n          <div className=\"grid grid-cols-1 gap-2 @md:grid-cols-2\">\n            <Input\n              label={labels.email}\n              type=\"email\"\n              inputMode=\"email\"\n              autoComplete=\"off\"\n              autoCapitalize=\"none\"\n              spellCheck={false}\n              required\n              value={email}\n              error={invalid ? labels.invalidEmail : undefined}\n              data-private\n              onChange={(event) => {\n                setInvalid(false);\n                setEmail(event.target.value);\n              }}\n            />\n            {choosesRole && (\n              <RoleSelect<R>\n                label={labels.role}\n                value={role}\n                roles={roles}\n                offered={offered}\n                onChange={setRole}\n              />\n            )}\n            {scopes && scopes.length > 0 && (\n              <Select\n                label={labels.scope}\n                value={scope}\n                required={scopeRequired}\n                onChange={(event) => setScope(event.target.value)}\n              >\n                <option value=\"\" disabled={scopeRequired}>\n                  {labels.scopeNone}\n                </option>\n                {scopes.map((s) => (\n                  <option key={s.value} value={s.value}>\n                    {s.label}\n                  </option>\n                ))}\n              </Select>\n            )}\n            {languages.length > 1 && (\n              <LanguageSelect label={labels.language} codes={languages} value={locale} onChange={setLocale} />\n            )}\n            <Input\n              label={labels.note}\n              value={note}\n              maxLength={255}\n              onChange={(event) => setNote(event.target.value)}\n              className=\"@md:col-span-2\"\n            />\n          </div>\n          <div className=\"flex justify-end\">\n            <Button\n              type=\"submit\"\n              variant=\"brand\"\n              commit\n              pending={busy === \"invite\"}\n              disabled={busy !== null || address === \"\" || (scopeRequired && scopes !== undefined && scope === \"\")}\n            >\n              <UserPlus className=\"size-4\" aria-hidden />\n              {labels.invite}\n            </Button>\n          </div>\n        </form>\n      )}\n\n      {failure && (\n        <AlertBanner tone=\"danger\" size=\"sm\">\n          {failure}\n        </AlertBanner>\n      )}\n      {notice && (\n        <AlertBanner tone=\"warning\" size=\"sm\" onDismiss={() => setNotice(null)}>\n          {notice}\n        </AlertBanner>\n      )}\n      {looseLink && (\n        <AlertBanner tone=\"info\" size=\"sm\" onDismiss={() => setLooseLink(null)}>\n          <div className=\"flex min-w-0 flex-wrap items-center gap-2\">\n            <span data-private>{labels.linkReady(looseLink.email)}</span>\n            <code className=\"min-w-0 break-all text-xs\">{looseLink.link}</code>\n            <CopyButton size=\"xs\" text={looseLink.link} label={labels.copyLink} />\n          </div>\n        </AlertBanner>\n      )}\n\n      <div className=\"space-y-2\">\n        <SectionLabel as=\"h4\">{labels.listTitle}</SectionLabel>\n        {loading && invitations.length === 0 ? (\n          <div className=\"flex justify-center py-3\">\n            <Spinner label={labels.loading} />\n          </div>\n        ) : invitations.length === 0 ? (\n          <Caption>{labels.empty}</Caption>\n        ) : (\n          <ul aria-label={labels.listTitle} className=\"divide-y divide-[var(--border)]\">\n            {invitations.map((invitation) => {\n              const key = String(invitation.id);\n              const link = invitation.link ?? links[key];\n              const open = invitation.status === \"open\";\n              const resendable = onResend && (open || invitation.status === \"expired\");\n              const revocable = onRevoke && open;\n              const scopeText = scopeLabel(invitation.scope);\n              const by =\n                typeof invitation.invited_by === \"string\" ? invitation.invited_by : nameOf(invitation.invited_by);\n              const facts = [\n                dayText(invitation.created_at) && labels.sent(dayText(invitation.created_at)),\n                open && dayText(invitation.expires_at ?? null) && labels.expires(dayText(invitation.expires_at ?? null)),\n                by && labels.invitedBy(by),\n              ].filter(Boolean);\n              return (\n                <li key={key} data-status={invitation.status} className=\"py-2 first:pt-0 last:pb-0\">\n                  <div className=\"flex flex-wrap items-center justify-between gap-x-3 gap-y-1.5\">\n                    <div className=\"min-w-0 flex-1 basis-48 space-y-1\">\n                      <div data-private className=\"truncate text-sm font-medium text-[var(--text-primary)]\">\n                        {invitation.email}\n                      </div>\n                      <div className=\"flex flex-wrap items-center gap-1\">\n                        <Chip size=\"xs\" shape=\"square\" caps tone={STATUS_TONES[invitation.status]}>\n                          {labels.status[invitation.status]}\n                        </Chip>\n                        {roles && invitation.role && <RoleChip<R> value={invitation.role} roles={roles} size=\"xs\" />}\n                        {scopeText && (\n                          <Chip size=\"xs\" shape=\"square\">\n                            {scopeText}\n                          </Chip>\n                        )}\n                      </div>\n                      {(facts.length > 0 || invitation.note) && (\n                        <div className=\"text-xs text-[var(--text-muted)]\">\n                          {facts.join(\" · \")}\n                          {invitation.note && (\n                            <>\n                              {facts.length > 0 && \" · \"}\n                              <span data-private>{invitation.note}</span>\n                            </>\n                          )}\n                        </div>\n                      )}\n                    </div>\n                    {(link || resendable || revocable) && (\n                      <div className=\"ms-auto flex shrink-0 items-center gap-1\">\n                        {link && open && <CopyButton size=\"xs\" tone=\"muted\" text={link} label={labels.copyLink} />}\n                        {resendable && (\n                          <IconButton\n                            size=\"xs\"\n                            commit\n                            label={labels.resend(invitation.email)}\n                            pending={busy === `resend:${key}`}\n                            disabled={busy !== null}\n                            onClick={async () => {\n                              const answer = await run(`resend:${key}`, () => onResend(invitation));\n                              if (answer !== FAILED) took(answer, invitation.email, invitation.id);\n                            }}\n                          >\n                            <RefreshCw />\n                          </IconButton>\n                        )}\n                        {revocable && (\n                          <IconButton\n                            size=\"xs\"\n                            tone=\"danger\"\n                            commit\n                            label={labels.revoke(invitation.email)}\n                            pending={busy === `revoke:${key}`}\n                            disabled={busy !== null}\n                            onClick={() => void run(`revoke:${key}`, () => onRevoke(invitation))}\n                          >\n                            <Trash2 />\n                          </IconButton>\n                        )}\n                      </div>\n                    )}\n                  </div>\n                </li>\n              );\n            })}\n          </ul>\n        )}\n      </div>\n    </div>\n  );\n}\n"],"mappings":";AAiUgB,SAgJY,UAhJZ,KAoCF,YApCE;AAjUhB,SAAS,gBAAgB;AAEzB,SAAS,WAAW,QAAQ,gBAAgB;AAC5C,SAAS,UAAU;AAEnB,SAAS,cAAc,oBAAoB;AAC3C,SAAS,eAAe,uBAAuB;AAE/C,SAAS,gBAAgB;AAEzB,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AAErB,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAAS,cAAc,eAAe;AACtC,SAAS,QAAQ,YAAY,OAAO,QAAQ,eAAe;AAC3D,SAAS,oBAAoB;AAC7B,SAAS,YAAY,QAAQ,YAAY,sBAAsB;AAE/D,SAAS,kBAAkB;AAwHpB,MAAM,6BAAgD;AAAA,EAC3D,OAAO;AAAA,EACP,cAAc;AAAA,EACd,MAAM;AAAA,EACN,OAAO;AAAA,EACP,WAAW;AAAA,EACX,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ,EAAE,MAAM,QAAQ,UAAU,YAAY,SAAS,WAAW,SAAS,UAAU;AAAA,EACrF,MAAM,CAAC,SAAS,QAAQ,IAAI;AAAA,EAC5B,SAAS,CAAC,SAAS,WAAW,IAAI;AAAA,EAClC,WAAW,CAAC,SAAS,MAAM,IAAI;AAAA,EAC/B,QAAQ,CAAC,UAAU,QAAQ,KAAK;AAAA,EAChC,UAAU;AAAA,EACV,QAAQ,CAAC,UAAU,6BAA6B,KAAK;AAAA,EACrD,aACE;AAAA,EACF,WAAW,CAAC,UAAU,2BAA2B,KAAK;AAAA,EACtD,SAAS,CAAC,UAAU,GAAG,KAAK;AAAA,EAC5B,QAAQ;AACV;AAGA,MAAM,eAA6D;AAAA,EACjE,MAAM;AAAA,EACN,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AACX;AAwCA,MAAM,cAAc;AAEpB,MAAM,YAAwC,cAAc,IAAI,CAAC,aAAa,SAAS,IAAI;AAG3F,MAAM,SAAS,uBAAO,QAAQ;AAEvB,SAAS,iBAA4C;AAAA,EAC1D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAA6B;AAC3B,QAAM,SAAS,aAAa,eAAe,4BAA4B,UAAU;AACjF,QAAM,YAAY,aAAa;AAC/B,QAAM,UAAU,WAAW;AAC3B,QAAM,SAAS,eAAe;AAC9B,QAAM,OAAO,aAAa;AAC1B,QAAM,UAAwB,mBAAmB,QAAS,OAAO,KAAK,KAAK,IAAY,CAAC;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAwB,eAAe,QAAQ,CAAC,CAAC;AACzE,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,QAAQ,SAAS,IAAI;AAAA,IAA0B,MACpD,gBAAgB,CAAC,eAAe,SAAS,GAAG,SAAS;AAAA,EACvD;AACA,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AAEnC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAwB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AAEpD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAiC,CAAC,CAAC;AAE7D,QAAM,CAAC,WAAW,YAAY,IAAI,SAAiD,IAAI;AAEvF,QAAM,MAAM,OAAW,KAAa,SAAmE;AACrG,YAAQ,GAAG;AACX,eAAW,IAAI;AACf,cAAU,IAAI;AACd,QAAI;AACF,aAAO,MAAM,OAAO,IAAI;AAAA,IAC1B,SAAS,OAAO;AACd,YAAM,MAAM,gBAAgB,KAAK;AACjC,iBAAW,WAAW,GAAG,IAAI,MAAM,OAAO,MAAM;AAChD,aAAO;AAAA,IACT,UAAE;AACA,cAAQ,IAAI;AAAA,IACd;AAAA,EACF;AAGA,QAAM,OAAO,CAAC,QAAqCA,UAAiB,OAAyB;AAC3F,QAAI,CAAC,OAAQ;AACb,UAAM,MAAM,OAAO,MAAM;AACzB,QAAI,OAAO,MAAM;AACf,UAAI,QAAQ,OAAW,UAAS,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,KAAe,EAAE;AAAA,UAC1F,cAAa,EAAE,OAAOA,UAAS,MAAM,OAAO,KAAK,CAAC;AAAA,IACzD;AACA,QAAI,OAAO,SAAS,MAAO,WAAU,OAAO,QAAQA,QAAO,CAAC;AAAA,EAC9D;AAEA,QAAM,UAAU,MAAM,KAAK;AAC3B,QAAM,cAAc,UAAU,UAAa,QAAQ,SAAS;AAC5D,QAAM,YAAY,aAAa;AAE/B,QAAM,SAAS,OAAO,UAAqB;AACzC,UAAM,eAAe;AAErB,QAAI,CAAC,YAAY,QAAQ,KAAK,UAAU,YAAY,GAAI;AACxD,QAAI,CAAC,YAAY,KAAK,OAAO,GAAG;AAC9B,iBAAW,IAAI;AACf;AAAA,IACF;AACA,QAAI,UAAU,iBAAiB,UAAU,GAAI;AAC7C,UAAM,QAA4B;AAAA,MAChC,OAAO;AAAA,MACP;AAAA,MACA,GAAI,SAAS,UAAa,UAAU,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,MAC5D,GAAI,UAAU,KAAK,EAAE,MAAM,IAAI,CAAC;AAAA,MAChC,GAAI,KAAK,KAAK,MAAM,KAAK,EAAE,MAAM,KAAK,KAAK,EAAE,IAAI,CAAC;AAAA,IACpD;AACA,UAAM,SAAS,MAAM,IAAI,UAAU,MAAM,SAAS,KAAK,CAAC;AACxD,QAAI,WAAW,OAAQ;AACvB,SAAK,QAAQ,OAAO;AACpB,aAAS,EAAE;AACX,YAAQ,EAAE;AAAA,EACZ;AAEA,QAAM,aAAa,CAAC,UAClB,UAAU,QAAQ,UAAU,UAAa,UAAU,KAC/C,OACC,QAAQ,KAAK,CAAC,MAAM,EAAE,UAAU,OAAO,KAAK,CAAC,GAAG,SAAS,OAAO,KAAK;AAE5E,SACE,qBAAC,SAAI,WAAW,GAAG,aAAa,SAAS,GACtC;AAAA,aAAS,oBAAC,SAAI,WAAU,wCAAwC,iBAAM;AAAA,IACtE,gBAAgB,aACf,oBAAC,eAAY,MAAK,QAAO,MAAK,MAC3B,iBAAO,aACV;AAAA,IAGD,aACC,qBAAC,UAAK,YAAU,MAAC,UAAU,QAAQ,WAAU,wBAC3C;AAAA,2BAAC,SAAI,WAAU,0CACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,MAAK;AAAA,YACL,WAAU;AAAA,YACV,cAAa;AAAA,YACb,gBAAe;AAAA,YACf,YAAY;AAAA,YACZ,UAAQ;AAAA,YACR,OAAO;AAAA,YACP,OAAO,UAAU,OAAO,eAAe;AAAA,YACvC,gBAAY;AAAA,YACZ,UAAU,CAAC,UAAU;AACnB,yBAAW,KAAK;AAChB,uBAAS,MAAM,OAAO,KAAK;AAAA,YAC7B;AAAA;AAAA,QACF;AAAA,QACC,eACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA,UAAU;AAAA;AAAA,QACZ;AAAA,QAED,UAAU,OAAO,SAAS,KACzB;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU;AAAA,YACV,UAAU,CAAC,UAAU,SAAS,MAAM,OAAO,KAAK;AAAA,YAEhD;AAAA,kCAAC,YAAO,OAAM,IAAG,UAAU,eACxB,iBAAO,WACV;AAAA,cACC,OAAO,IAAI,CAAC,MACX,oBAAC,YAAqB,OAAO,EAAE,OAC5B,YAAE,SADQ,EAAE,KAEf,CACD;AAAA;AAAA;AAAA,QACH;AAAA,QAED,UAAU,SAAS,KAClB,oBAAC,kBAAe,OAAO,OAAO,UAAU,OAAO,WAAW,OAAO,QAAQ,UAAU,WAAW;AAAA,QAEhG;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,WAAW;AAAA,YACX,UAAU,CAAC,UAAU,QAAQ,MAAM,OAAO,KAAK;AAAA,YAC/C,WAAU;AAAA;AAAA,QACZ;AAAA,SACF;AAAA,MACA,oBAAC,SAAI,WAAU,oBACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAQ;AAAA,UACR,QAAM;AAAA,UACN,SAAS,SAAS;AAAA,UAClB,UAAU,SAAS,QAAQ,YAAY,MAAO,iBAAiB,WAAW,UAAa,UAAU;AAAA,UAEjG;AAAA,gCAAC,YAAS,WAAU,UAAS,eAAW,MAAC;AAAA,YACxC,OAAO;AAAA;AAAA;AAAA,MACV,GACF;AAAA,OACF;AAAA,IAGD,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAC7B,mBACH;AAAA,IAED,UACC,oBAAC,eAAY,MAAK,WAAU,MAAK,MAAK,WAAW,MAAM,UAAU,IAAI,GAClE,kBACH;AAAA,IAED,aACC,oBAAC,eAAY,MAAK,QAAO,MAAK,MAAK,WAAW,MAAM,aAAa,IAAI,GACnE,+BAAC,SAAI,WAAU,6CACb;AAAA,0BAAC,UAAK,gBAAY,MAAE,iBAAO,UAAU,UAAU,KAAK,GAAE;AAAA,MACtD,oBAAC,UAAK,WAAU,6BAA6B,oBAAU,MAAK;AAAA,MAC5D,oBAAC,cAAW,MAAK,MAAK,MAAM,UAAU,MAAM,OAAO,OAAO,UAAU;AAAA,OACtE,GACF;AAAA,IAGF,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,gBAAa,IAAG,MAAM,iBAAO,WAAU;AAAA,MACvC,WAAW,YAAY,WAAW,IACjC,oBAAC,SAAI,WAAU,4BACb,8BAAC,WAAQ,OAAO,OAAO,SAAS,GAClC,IACE,YAAY,WAAW,IACzB,oBAAC,WAAS,iBAAO,OAAM,IAEvB,oBAAC,QAAG,cAAY,OAAO,WAAW,WAAU,mCACzC,sBAAY,IAAI,CAAC,eAAe;AAC/B,cAAM,MAAM,OAAO,WAAW,EAAE;AAChC,cAAM,OAAO,WAAW,QAAQ,MAAM,GAAG;AACzC,cAAM,OAAO,WAAW,WAAW;AACnC,cAAM,aAAa,aAAa,QAAQ,WAAW,WAAW;AAC9D,cAAM,YAAY,YAAY;AAC9B,cAAM,YAAY,WAAW,WAAW,KAAK;AAC7C,cAAM,KACJ,OAAO,WAAW,eAAe,WAAW,WAAW,aAAa,OAAO,WAAW,UAAU;AAClG,cAAM,QAAQ;AAAA,UACZ,QAAQ,WAAW,UAAU,KAAK,OAAO,KAAK,QAAQ,WAAW,UAAU,CAAC;AAAA,UAC5E,QAAQ,QAAQ,WAAW,cAAc,IAAI,KAAK,OAAO,QAAQ,QAAQ,WAAW,cAAc,IAAI,CAAC;AAAA,UACvG,MAAM,OAAO,UAAU,EAAE;AAAA,QAC3B,EAAE,OAAO,OAAO;AAChB,eACE,oBAAC,QAAa,eAAa,WAAW,QAAQ,WAAU,6BACtD,+BAAC,SAAI,WAAU,iEACb;AAAA,+BAAC,SAAI,WAAU,qCACb;AAAA,gCAAC,SAAI,gBAAY,MAAC,WAAU,2DACzB,qBAAW,OACd;AAAA,YACA,qBAAC,SAAI,WAAU,qCACb;AAAA,kCAAC,QAAK,MAAK,MAAK,OAAM,UAAS,MAAI,MAAC,MAAM,aAAa,WAAW,MAAM,GACrE,iBAAO,OAAO,WAAW,MAAM,GAClC;AAAA,cACC,SAAS,WAAW,QAAQ,oBAAC,YAAY,OAAO,WAAW,MAAM,OAAc,MAAK,MAAK;AAAA,cACzF,aACC,oBAAC,QAAK,MAAK,MAAK,OAAM,UACnB,qBACH;AAAA,eAEJ;AAAA,aACE,MAAM,SAAS,KAAK,WAAW,SAC/B,qBAAC,SAAI,WAAU,oCACZ;AAAA,oBAAM,KAAK,QAAK;AAAA,cAChB,WAAW,QACV,iCACG;AAAA,sBAAM,SAAS,KAAK;AAAA,gBACrB,oBAAC,UAAK,gBAAY,MAAE,qBAAW,MAAK;AAAA,iBACtC;AAAA,eAEJ;AAAA,aAEJ;AAAA,WACE,QAAQ,cAAc,cACtB,qBAAC,SAAI,WAAU,4CACZ;AAAA,oBAAQ,QAAQ,oBAAC,cAAW,MAAK,MAAK,MAAK,SAAQ,MAAM,MAAM,OAAO,OAAO,UAAU;AAAA,YACvF,cACC;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,QAAM;AAAA,gBACN,OAAO,OAAO,OAAO,WAAW,KAAK;AAAA,gBACrC,SAAS,SAAS,UAAU,GAAG;AAAA,gBAC/B,UAAU,SAAS;AAAA,gBACnB,SAAS,YAAY;AACnB,wBAAM,SAAS,MAAM,IAAI,UAAU,GAAG,IAAI,MAAM,SAAS,UAAU,CAAC;AACpE,sBAAI,WAAW,OAAQ,MAAK,QAAQ,WAAW,OAAO,WAAW,EAAE;AAAA,gBACrE;AAAA,gBAEA,8BAAC,aAAU;AAAA;AAAA,YACb;AAAA,YAED,aACC;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,QAAM;AAAA,gBACN,OAAO,OAAO,OAAO,WAAW,KAAK;AAAA,gBACrC,SAAS,SAAS,UAAU,GAAG;AAAA,gBAC/B,UAAU,SAAS;AAAA,gBACnB,SAAS,MAAM,KAAK,IAAI,UAAU,GAAG,IAAI,MAAM,SAAS,UAAU,CAAC;AAAA,gBAEnE,8BAAC,UAAO;AAAA;AAAA,YACV;AAAA,aAEJ;AAAA,WAEJ,KA9DO,GA+DT;AAAA,MAEJ,CAAC,GACH;AAAA,OAEJ;AAAA,KACF;AAEJ;","names":["address"]}
+{"version":3,"sources":["../../src/admin/invitations-panel.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { FormEvent, ReactNode } from \"react\";\nimport { RefreshCw, Trash2, UserPlus } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport type { DateInput } from \"../lib/format\";\nimport { useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\nimport { KIT_LANGUAGES, resolveLanguage } from \"../i18n/languages\";\nimport type { KitLanguageCode } from \"../i18n/languages\";\nimport { RoleChip } from \"../components/account-chips\";\nimport type { RoleVocabulary } from \"../components/account-chips\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport type { ChipTone } from \"../components/chip\";\nimport { CopyButton } from \"../components/copy-button\";\nimport { LanguageSelect } from \"../components/language-select\";\nimport { SectionLabel, Caption } from \"../components/text\";\nimport { Button, IconButton, Input, Select, Spinner } from \"../components/ui\";\nimport { useWriteLock } from \"../components/write-lock\";\nimport { hasMessage, settle, useDayText, usePersonLabel } from \"./admin-parts\";\nimport type { AdminPerson, MaybePromise } from \"./admin-parts\";\nimport { RoleSelect } from \"./role-select\";\n\n/**\n * Who is invited, and the form that invites (docs/user-admin-harmonization.md §5; auth\n * §4.4: a hashed one-time token, 14 days, an address with a role and a scope).\n *\n * Kurvenschmiede's `invitations-panel.tsx` with its parts made props: a form (the address,\n * a role from the app's vocabulary, an optional scope — a team, a company — the language\n * the invitation is written in, a note), then one row per invitation with its status, when\n * it was sent and until when it works, and resend / copy link / revoke.\n *\n * - **It assumes nothing about who invites.** Admins do, team managers into their team,\n *   kastlan's company admins into their company — and in keksdose ANY budget owner, from\n *   the budget's sharing (Marcel, 2026-10-07). So no word here says \"admin\"; the roles,\n *   the scopes and the callbacks are the app's, and so is the frame around it.\n * - **The address is someone else's.** No `+app` tag is offered (auth §4.5): a tag is\n *   the owner's own choice, made when they sign up.\n * - **The link is shown once.** The token is stored hashed, so the server can show a link\n *   only in the answer that minted it — on creation and on resend, and only while mail\n *   goes to the console (dev, a deploy without mail). The panel keeps such a link for as\n *   long as it is mounted and offers to copy it on its row; reloading the page loses it,\n *   and \"resend\" mints a new one. With the console backend the panel says so up front.\n * - **Revoked is optional.** An app that deletes the row instead (kastlan) never sends\n *   `revoked`; the status chip simply never says it (§5).\n *\n * It never sends a request: `onInvite`, `onResend` and `onRevoke` do.\n */\n\nexport type InvitationStatus = \"open\" | \"accepted\" | \"expired\" | \"revoked\";\n\n/** One row of `GET /admin/invitations` (§5), in the wire's own field names. */\nexport interface InvitationRow<R extends string = string> {\n  id: string | number;\n  email: string;\n  role?: R | null;\n  /** The scope's value — a team's or a company's id, matched against `scopes`. */\n  scope?: string | number | null;\n  note?: string | null;\n  /** The language it was written in. */\n  locale?: string | null;\n  /** Who sent it: a name, or the person. */\n  invited_by?: string | AdminPerson | null;\n  created_at: DateInput;\n  expires_at?: DateInput;\n  status: InvitationStatus;\n  /** The one-time link, while mail goes to the console — in the answer that minted it. */\n  link?: string | null;\n}\n\n/** What the form sends — `POST /admin/invitations {email, role, scope?, note?, locale}`. */\nexport interface InvitationDraft<R extends string = string> {\n  email: string;\n  /** Absent when the app offers no role choice (`roles` left out). */\n  role?: R;\n  scope?: string;\n  note?: string;\n  locale: KitLanguageCode;\n}\n\n/** What `onInvite` / `onResend` may answer, so the panel can keep a shown-once link. */\nexport interface InvitationSentAnswer {\n  /** The invitation the answer is about — `onInvite` needs it for the link to find its\n   *  row; `onResend` knows it already. */\n  id?: string | number;\n  /** The one-time link, while mail goes to the console. */\n  link?: string | null;\n  /** `false`: the invitation exists but the mail failed — say so, resend it. */\n  sent?: boolean;\n}\n\n/** A scope an invitation can carry. */\nexport interface InvitationScope {\n  value: string;\n  label: string;\n}\n\n/** The `invitations` namespace. */\nexport interface InvitationsLabels {\n  /** The form's address field. */\n  email: string;\n  /** Under it while what was typed is not an address. */\n  invalidEmail: string;\n  role: string;\n  /** The scope select's label — the app's word (\"Team\", \"Company\") goes over it. */\n  scope: string;\n  /** The scope select's empty choice. */\n  scopeNone: string;\n  /** The language select's label. */\n  language: string;\n  note: string;\n  /** The form's button. */\n  invite: string;\n  /** Heading over the rows. */\n  listTitle: string;\n  empty: string;\n  loading: string;\n  /** The status chip, per status. */\n  status: Record<InvitationStatus, string>;\n  /** \"Sent 6 Oct 2026\". */\n  sent: (date: string) => string;\n  /** \"Expires 20 Oct 2026\" — on an open invitation. */\n  expires: (date: string) => string;\n  /** \"by Ada Example\". */\n  invitedBy: (name: string) => string;\n  /** The resend button — \"Send ben@example.com a new link\". */\n  resend: (email: string) => string;\n  /** The copy button. */\n  copyLink: string;\n  /** The revoke button — \"Revoke the invitation for ben@example.com\". */\n  revoke: (email: string) => string;\n  /** Over everything while mail goes to the console. */\n  consoleHint: string;\n  /** Beside a link the answer carried with no row to put it on. */\n  linkReady: (email: string) => string;\n  /** The answer said the mail was not sent. */\n  notSent: (email: string) => string;\n  /** A rejected callback, unless `describeError` says better. */\n  failed: string;\n}\n\nexport const DEFAULT_INVITATIONS_LABELS: InvitationsLabels = {\n  email: \"Email address\",\n  invalidEmail: \"Enter a complete email address.\",\n  role: \"Role\",\n  scope: \"Scope\",\n  scopeNone: \"None\",\n  language: \"Language of the invitation\",\n  note: \"Note\",\n  invite: \"Invite\",\n  listTitle: \"Invitations\",\n  empty: \"Nobody has been invited yet.\",\n  loading: \"Loading…\",\n  status: { open: \"Open\", accepted: \"Accepted\", expired: \"Expired\", revoked: \"Revoked\" },\n  sent: (date) => `Sent ${date}`,\n  expires: (date) => `Expires ${date}`,\n  invitedBy: (name) => `by ${name}`,\n  resend: (email) => `Send ${email} a new link`,\n  copyLink: \"Copy invitation link\",\n  revoke: (email) => `Revoke the invitation for ${email}`,\n  consoleHint:\n    \"Mail isn’t sent on this server — it is written to the server log. Copy each invitation link from here and pass it on yourself: it is shown only once.\",\n  linkReady: (email) => `The invitation link for ${email}, shown only this once:`,\n  notSent: (email) => `${email} is invited, but the mail couldn’t be sent. Resend it.`,\n  failed: \"That didn’t work. Please try again.\",\n};\n\n/** The tone of each status. */\nconst STATUS_TONES: Readonly<Record<InvitationStatus, ChipTone>> = {\n  open: \"info\",\n  accepted: \"success\",\n  expired: \"warning\",\n  revoked: \"neutral\",\n};\n\nexport interface InvitationsPanelProps<R extends string = string> {\n  invitations: readonly InvitationRow<R>[];\n  /** The app's roles. Left out: no role choice, and no role chip on a row. */\n  roles?: RoleVocabulary<R>;\n  /** The roles an invitation may carry — Kurvenschmiede's member or customer. Default:\n   *  the whole vocabulary. One role: no choice is drawn, and it is sent. */\n  invitableRoles?: readonly R[];\n  /** The role the form starts with. Default: the first invitable one. */\n  defaultRole?: R;\n  /** The scopes an invitation may carry — teams, companies. Left out: no scope field. */\n  scopes?: readonly InvitationScope[];\n  /** A scope must be chosen (no \"None\"). */\n  scopeRequired?: boolean;\n  /** The languages offered. Default: all seven of the kit's. */\n  languages?: readonly KitLanguageCode[];\n  /** The language the form starts with. Default: the page's, resolved to `languages`. */\n  defaultLocale?: string;\n  /** The server's `mail_backend`. `\"console\"` draws the hint. */\n  mailBackend?: string | null;\n  /** Creates one (resolve to clear the form; reject to keep it and say why). Left out:\n   *  no form — a list someone may look at but not add to. */\n  onInvite?: (draft: InvitationDraft<R>) => MaybePromise<InvitationSentAnswer | void>;\n  /** Mints a new link and mails it. Left out: no resend button. */\n  onResend?: (invitation: InvitationRow<R>) => MaybePromise<InvitationSentAnswer | void>;\n  /** Revokes an open or an expired invitation (level `none`, §4.2: re-inviting undoes\n   *  it). An expired row can be resent, and since 0.31 also removed: in an app that\n   *  keeps the rows it would otherwise stay listed for good (Kurvenschmiede's 0.30\n   *  adoption). Left out: no revoke button. */\n  onRevoke?: (invitation: InvitationRow<R>) => MaybePromise;\n  /** The list is being fetched. */\n  loading?: boolean;\n  /** The app's words for a rejected callback. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** Over the form: who can be invited and what happens, in the app's words. */\n  intro?: ReactNode;\n  /** The list's visible heading. Default: the `listTitle` label. `null` leaves it out,\n   *  for a page whose card is already headed \"Invitations\" (Kurvenschmiede's 0.30\n   *  adoption); the list keeps the label as its accessible name either way. */\n  listTitle?: ReactNode | null;\n  className?: string;\n  labels?: Partial<InvitationsLabels>;\n}\n\n// Shape only — whether the address may be invited is the server's question.\nconst EMAIL_SHAPE = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n\nconst ALL_CODES: readonly KitLanguageCode[] = KIT_LANGUAGES.map((language) => language.code);\n\n/** A failed run, told apart from an answer of `undefined`. */\nconst FAILED = Symbol(\"failed\");\n\nexport function InvitationsPanel<R extends string = string>({\n  invitations,\n  roles,\n  invitableRoles,\n  defaultRole,\n  scopes,\n  scopeRequired = false,\n  languages = ALL_CODES,\n  defaultLocale,\n  mailBackend,\n  onInvite,\n  onResend,\n  onRevoke,\n  loading = false,\n  describeError,\n  intro,\n  listTitle,\n  className,\n  labels: labelsProp,\n}: InvitationsPanelProps<R>) {\n  const labels = useKitLabels(\"invitations\", DEFAULT_INVITATIONS_LABELS, labelsProp);\n  const kitLocale = useKitLocale();\n  const dayText = useDayText();\n  const nameOf = usePersonLabel();\n  const lock = useWriteLock();\n  const offered: readonly R[] = invitableRoles ?? (roles ? (Object.keys(roles) as R[]) : []);\n  const [email, setEmail] = useState(\"\");\n  const [invalid, setInvalid] = useState(false);\n  const [role, setRole] = useState<R | undefined>(defaultRole ?? offered[0]);\n  const [scope, setScope] = useState(\"\");\n  const [locale, setLocale] = useState<KitLanguageCode>(() =>\n    resolveLanguage([defaultLocale, kitLocale], languages),\n  );\n  const [note, setNote] = useState(\"\");\n  // One request at a time, for the whole panel; the key says which control spins.\n  const [busy, setBusy] = useState<string | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const [notice, setNotice] = useState<ReactNode>(null);\n  // Links the answers carried, by invitation — shown once, kept while mounted.\n  const [links, setLinks] = useState<Record<string, string>>({});\n  // A link whose answer named no invitation: shown above the list instead.\n  const [looseLink, setLooseLink] = useState<{ email: string; link: string } | null>(null);\n\n  const run = async <T,>(key: string, call: () => MaybePromise<T>): Promise<T | void | typeof FAILED> => {\n    setBusy(key);\n    setFailure(null);\n    setNotice(null);\n    try {\n      return await settle(call);\n    } catch (error) {\n      const own = describeError?.(error);\n      setFailure(hasMessage(own) ? own : labels.failed);\n      return FAILED;\n    } finally {\n      setBusy(null);\n    }\n  };\n\n  /** Keep what an answer carried: its link, and whether the mail went. */\n  const took = (answer: InvitationSentAnswer | void, address: string, id?: string | number) => {\n    if (!answer) return;\n    const key = answer.id ?? id;\n    if (answer.link) {\n      if (key !== undefined) setLinks((known) => ({ ...known, [String(key)]: answer.link as string }));\n      else setLooseLink({ email: address, link: answer.link });\n    }\n    if (answer.sent === false) setNotice(labels.notSent(address));\n  };\n\n  const address = email.trim();\n  const choosesRole = roles !== undefined && offered.length > 1;\n  const canInvite = onInvite !== undefined;\n\n  const submit = async (event: FormEvent) => {\n    event.preventDefault();\n    // Enter in a field is a commit too — the button's lock does not see it.\n    if (!onInvite || busy || lock.locked || address === \"\") return;\n    if (!EMAIL_SHAPE.test(address)) {\n      setInvalid(true);\n      return;\n    }\n    if (scopes && scopeRequired && scope === \"\") return;\n    const draft: InvitationDraft<R> = {\n      email: address,\n      locale,\n      ...(role !== undefined && roles !== undefined ? { role } : {}),\n      ...(scope !== \"\" ? { scope } : {}),\n      ...(note.trim() !== \"\" ? { note: note.trim() } : {}),\n    };\n    const answer = await run(\"invite\", () => onInvite(draft));\n    if (answer === FAILED) return;\n    took(answer, address);\n    setEmail(\"\");\n    setNote(\"\");\n  };\n\n  const scopeLabel = (value: InvitationRow[\"scope\"]) =>\n    value === null || value === undefined || value === \"\"\n      ? null\n      : (scopes?.find((s) => s.value === String(value))?.label ?? String(value));\n\n  return (\n    <div className={cn(\"space-y-3\", className)}>\n      {intro && <div className=\"text-sm text-[var(--text-secondary)]\">{intro}</div>}\n      {mailBackend === \"console\" && (\n        <AlertBanner tone=\"info\" size=\"sm\">\n          {labels.consoleHint}\n        </AlertBanner>\n      )}\n\n      {canInvite && (\n        <form noValidate onSubmit={submit} className=\"@container space-y-2\">\n          <div className=\"grid grid-cols-1 gap-2 @md:grid-cols-2\">\n            <Input\n              label={labels.email}\n              type=\"email\"\n              inputMode=\"email\"\n              autoComplete=\"off\"\n              autoCapitalize=\"none\"\n              spellCheck={false}\n              required\n              value={email}\n              error={invalid ? labels.invalidEmail : undefined}\n              data-private\n              onChange={(event) => {\n                setInvalid(false);\n                setEmail(event.target.value);\n              }}\n            />\n            {choosesRole && (\n              <RoleSelect<R>\n                label={labels.role}\n                value={role}\n                roles={roles}\n                offered={offered}\n                onChange={setRole}\n              />\n            )}\n            {scopes && scopes.length > 0 && (\n              <Select\n                label={labels.scope}\n                value={scope}\n                required={scopeRequired}\n                onChange={(event) => setScope(event.target.value)}\n              >\n                <option value=\"\" disabled={scopeRequired}>\n                  {labels.scopeNone}\n                </option>\n                {scopes.map((s) => (\n                  <option key={s.value} value={s.value}>\n                    {s.label}\n                  </option>\n                ))}\n              </Select>\n            )}\n            {languages.length > 1 && (\n              <LanguageSelect label={labels.language} codes={languages} value={locale} onChange={setLocale} />\n            )}\n            <Input\n              label={labels.note}\n              value={note}\n              maxLength={255}\n              onChange={(event) => setNote(event.target.value)}\n              className=\"@md:col-span-2\"\n            />\n          </div>\n          <div className=\"flex justify-end\">\n            <Button\n              type=\"submit\"\n              variant=\"brand\"\n              commit\n              pending={busy === \"invite\"}\n              disabled={busy !== null || address === \"\" || (scopeRequired && scopes !== undefined && scope === \"\")}\n            >\n              <UserPlus className=\"size-4\" aria-hidden />\n              {labels.invite}\n            </Button>\n          </div>\n        </form>\n      )}\n\n      {failure && (\n        <AlertBanner tone=\"danger\" size=\"sm\">\n          {failure}\n        </AlertBanner>\n      )}\n      {notice && (\n        <AlertBanner tone=\"warning\" size=\"sm\" onDismiss={() => setNotice(null)}>\n          {notice}\n        </AlertBanner>\n      )}\n      {looseLink && (\n        <AlertBanner tone=\"info\" size=\"sm\" onDismiss={() => setLooseLink(null)}>\n          <div className=\"flex min-w-0 flex-wrap items-center gap-2\">\n            <span data-private>{labels.linkReady(looseLink.email)}</span>\n            <code className=\"min-w-0 break-all text-xs\">{looseLink.link}</code>\n            <CopyButton size=\"xs\" text={looseLink.link} label={labels.copyLink} />\n          </div>\n        </AlertBanner>\n      )}\n\n      <div className=\"space-y-2\">\n        {listTitle !== null && <SectionLabel as=\"h4\">{listTitle ?? labels.listTitle}</SectionLabel>}\n        {loading && invitations.length === 0 ? (\n          <div className=\"flex justify-center py-3\">\n            <Spinner label={labels.loading} />\n          </div>\n        ) : invitations.length === 0 ? (\n          <Caption>{labels.empty}</Caption>\n        ) : (\n          <ul aria-label={labels.listTitle} className=\"divide-y divide-[var(--border)]\">\n            {invitations.map((invitation) => {\n              const key = String(invitation.id);\n              const link = invitation.link ?? links[key];\n              const open = invitation.status === \"open\";\n              const resendable = onResend && (open || invitation.status === \"expired\");\n              const revocable = onRevoke && (open || invitation.status === \"expired\");\n              const scopeText = scopeLabel(invitation.scope);\n              const by =\n                typeof invitation.invited_by === \"string\" ? invitation.invited_by : nameOf(invitation.invited_by);\n              const facts = [\n                dayText(invitation.created_at) && labels.sent(dayText(invitation.created_at)),\n                open && dayText(invitation.expires_at ?? null) && labels.expires(dayText(invitation.expires_at ?? null)),\n                by && labels.invitedBy(by),\n              ].filter(Boolean);\n              return (\n                <li key={key} data-status={invitation.status} className=\"py-2 first:pt-0 last:pb-0\">\n                  <div className=\"flex flex-wrap items-center justify-between gap-x-3 gap-y-1.5\">\n                    <div className=\"min-w-0 flex-1 basis-48 space-y-1\">\n                      <div data-private className=\"truncate text-sm font-medium text-[var(--text-primary)]\">\n                        {invitation.email}\n                      </div>\n                      <div className=\"flex flex-wrap items-center gap-1\">\n                        <Chip size=\"xs\" shape=\"square\" caps tone={STATUS_TONES[invitation.status]}>\n                          {labels.status[invitation.status]}\n                        </Chip>\n                        {roles && invitation.role && <RoleChip<R> value={invitation.role} roles={roles} size=\"xs\" />}\n                        {scopeText && (\n                          <Chip size=\"xs\" shape=\"square\">\n                            {scopeText}\n                          </Chip>\n                        )}\n                      </div>\n                      {(facts.length > 0 || invitation.note) && (\n                        <div className=\"text-xs text-[var(--text-muted)]\">\n                          {facts.join(\" · \")}\n                          {invitation.note && (\n                            <>\n                              {facts.length > 0 && \" · \"}\n                              <span data-private>{invitation.note}</span>\n                            </>\n                          )}\n                        </div>\n                      )}\n                    </div>\n                    {(link || resendable || revocable) && (\n                      <div className=\"ms-auto flex shrink-0 items-center gap-1\">\n                        {link && open && <CopyButton size=\"xs\" tone=\"muted\" text={link} label={labels.copyLink} />}\n                        {resendable && (\n                          <IconButton\n                            size=\"xs\"\n                            commit\n                            label={labels.resend(invitation.email)}\n                            pending={busy === `resend:${key}`}\n                            disabled={busy !== null}\n                            onClick={async () => {\n                              const answer = await run(`resend:${key}`, () => onResend(invitation));\n                              if (answer !== FAILED) took(answer, invitation.email, invitation.id);\n                            }}\n                          >\n                            <RefreshCw />\n                          </IconButton>\n                        )}\n                        {revocable && (\n                          <IconButton\n                            size=\"xs\"\n                            tone=\"danger\"\n                            commit\n                            label={labels.revoke(invitation.email)}\n                            pending={busy === `revoke:${key}`}\n                            disabled={busy !== null}\n                            onClick={() => void run(`revoke:${key}`, () => onRevoke(invitation))}\n                          >\n                            <Trash2 />\n                          </IconButton>\n                        )}\n                      </div>\n                    )}\n                  </div>\n                </li>\n              );\n            })}\n          </ul>\n        )}\n      </div>\n    </div>\n  );\n}\n"],"mappings":";AAwUgB,SAgJY,UAhJZ,KAoCF,YApCE;AAxUhB,SAAS,gBAAgB;AAEzB,SAAS,WAAW,QAAQ,gBAAgB;AAC5C,SAAS,UAAU;AAEnB,SAAS,cAAc,oBAAoB;AAC3C,SAAS,eAAe,uBAAuB;AAE/C,SAAS,gBAAgB;AAEzB,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AAErB,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAAS,cAAc,eAAe;AACtC,SAAS,QAAQ,YAAY,OAAO,QAAQ,eAAe;AAC3D,SAAS,oBAAoB;AAC7B,SAAS,YAAY,QAAQ,YAAY,sBAAsB;AAE/D,SAAS,kBAAkB;AAwHpB,MAAM,6BAAgD;AAAA,EAC3D,OAAO;AAAA,EACP,cAAc;AAAA,EACd,MAAM;AAAA,EACN,OAAO;AAAA,EACP,WAAW;AAAA,EACX,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ,EAAE,MAAM,QAAQ,UAAU,YAAY,SAAS,WAAW,SAAS,UAAU;AAAA,EACrF,MAAM,CAAC,SAAS,QAAQ,IAAI;AAAA,EAC5B,SAAS,CAAC,SAAS,WAAW,IAAI;AAAA,EAClC,WAAW,CAAC,SAAS,MAAM,IAAI;AAAA,EAC/B,QAAQ,CAAC,UAAU,QAAQ,KAAK;AAAA,EAChC,UAAU;AAAA,EACV,QAAQ,CAAC,UAAU,6BAA6B,KAAK;AAAA,EACrD,aACE;AAAA,EACF,WAAW,CAAC,UAAU,2BAA2B,KAAK;AAAA,EACtD,SAAS,CAAC,UAAU,GAAG,KAAK;AAAA,EAC5B,QAAQ;AACV;AAGA,MAAM,eAA6D;AAAA,EACjE,MAAM;AAAA,EACN,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AACX;AA8CA,MAAM,cAAc;AAEpB,MAAM,YAAwC,cAAc,IAAI,CAAC,aAAa,SAAS,IAAI;AAG3F,MAAM,SAAS,uBAAO,QAAQ;AAEvB,SAAS,iBAA4C;AAAA,EAC1D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAA6B;AAC3B,QAAM,SAAS,aAAa,eAAe,4BAA4B,UAAU;AACjF,QAAM,YAAY,aAAa;AAC/B,QAAM,UAAU,WAAW;AAC3B,QAAM,SAAS,eAAe;AAC9B,QAAM,OAAO,aAAa;AAC1B,QAAM,UAAwB,mBAAmB,QAAS,OAAO,KAAK,KAAK,IAAY,CAAC;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAwB,eAAe,QAAQ,CAAC,CAAC;AACzE,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,QAAQ,SAAS,IAAI;AAAA,IAA0B,MACpD,gBAAgB,CAAC,eAAe,SAAS,GAAG,SAAS;AAAA,EACvD;AACA,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AAEnC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAwB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AAEpD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAiC,CAAC,CAAC;AAE7D,QAAM,CAAC,WAAW,YAAY,IAAI,SAAiD,IAAI;AAEvF,QAAM,MAAM,OAAW,KAAa,SAAmE;AACrG,YAAQ,GAAG;AACX,eAAW,IAAI;AACf,cAAU,IAAI;AACd,QAAI;AACF,aAAO,MAAM,OAAO,IAAI;AAAA,IAC1B,SAAS,OAAO;AACd,YAAM,MAAM,gBAAgB,KAAK;AACjC,iBAAW,WAAW,GAAG,IAAI,MAAM,OAAO,MAAM;AAChD,aAAO;AAAA,IACT,UAAE;AACA,cAAQ,IAAI;AAAA,IACd;AAAA,EACF;AAGA,QAAM,OAAO,CAAC,QAAqCA,UAAiB,OAAyB;AAC3F,QAAI,CAAC,OAAQ;AACb,UAAM,MAAM,OAAO,MAAM;AACzB,QAAI,OAAO,MAAM;AACf,UAAI,QAAQ,OAAW,UAAS,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,KAAe,EAAE;AAAA,UAC1F,cAAa,EAAE,OAAOA,UAAS,MAAM,OAAO,KAAK,CAAC;AAAA,IACzD;AACA,QAAI,OAAO,SAAS,MAAO,WAAU,OAAO,QAAQA,QAAO,CAAC;AAAA,EAC9D;AAEA,QAAM,UAAU,MAAM,KAAK;AAC3B,QAAM,cAAc,UAAU,UAAa,QAAQ,SAAS;AAC5D,QAAM,YAAY,aAAa;AAE/B,QAAM,SAAS,OAAO,UAAqB;AACzC,UAAM,eAAe;AAErB,QAAI,CAAC,YAAY,QAAQ,KAAK,UAAU,YAAY,GAAI;AACxD,QAAI,CAAC,YAAY,KAAK,OAAO,GAAG;AAC9B,iBAAW,IAAI;AACf;AAAA,IACF;AACA,QAAI,UAAU,iBAAiB,UAAU,GAAI;AAC7C,UAAM,QAA4B;AAAA,MAChC,OAAO;AAAA,MACP;AAAA,MACA,GAAI,SAAS,UAAa,UAAU,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,MAC5D,GAAI,UAAU,KAAK,EAAE,MAAM,IAAI,CAAC;AAAA,MAChC,GAAI,KAAK,KAAK,MAAM,KAAK,EAAE,MAAM,KAAK,KAAK,EAAE,IAAI,CAAC;AAAA,IACpD;AACA,UAAM,SAAS,MAAM,IAAI,UAAU,MAAM,SAAS,KAAK,CAAC;AACxD,QAAI,WAAW,OAAQ;AACvB,SAAK,QAAQ,OAAO;AACpB,aAAS,EAAE;AACX,YAAQ,EAAE;AAAA,EACZ;AAEA,QAAM,aAAa,CAAC,UAClB,UAAU,QAAQ,UAAU,UAAa,UAAU,KAC/C,OACC,QAAQ,KAAK,CAAC,MAAM,EAAE,UAAU,OAAO,KAAK,CAAC,GAAG,SAAS,OAAO,KAAK;AAE5E,SACE,qBAAC,SAAI,WAAW,GAAG,aAAa,SAAS,GACtC;AAAA,aAAS,oBAAC,SAAI,WAAU,wCAAwC,iBAAM;AAAA,IACtE,gBAAgB,aACf,oBAAC,eAAY,MAAK,QAAO,MAAK,MAC3B,iBAAO,aACV;AAAA,IAGD,aACC,qBAAC,UAAK,YAAU,MAAC,UAAU,QAAQ,WAAU,wBAC3C;AAAA,2BAAC,SAAI,WAAU,0CACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,MAAK;AAAA,YACL,WAAU;AAAA,YACV,cAAa;AAAA,YACb,gBAAe;AAAA,YACf,YAAY;AAAA,YACZ,UAAQ;AAAA,YACR,OAAO;AAAA,YACP,OAAO,UAAU,OAAO,eAAe;AAAA,YACvC,gBAAY;AAAA,YACZ,UAAU,CAAC,UAAU;AACnB,yBAAW,KAAK;AAChB,uBAAS,MAAM,OAAO,KAAK;AAAA,YAC7B;AAAA;AAAA,QACF;AAAA,QACC,eACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA,UAAU;AAAA;AAAA,QACZ;AAAA,QAED,UAAU,OAAO,SAAS,KACzB;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU;AAAA,YACV,UAAU,CAAC,UAAU,SAAS,MAAM,OAAO,KAAK;AAAA,YAEhD;AAAA,kCAAC,YAAO,OAAM,IAAG,UAAU,eACxB,iBAAO,WACV;AAAA,cACC,OAAO,IAAI,CAAC,MACX,oBAAC,YAAqB,OAAO,EAAE,OAC5B,YAAE,SADQ,EAAE,KAEf,CACD;AAAA;AAAA;AAAA,QACH;AAAA,QAED,UAAU,SAAS,KAClB,oBAAC,kBAAe,OAAO,OAAO,UAAU,OAAO,WAAW,OAAO,QAAQ,UAAU,WAAW;AAAA,QAEhG;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,WAAW;AAAA,YACX,UAAU,CAAC,UAAU,QAAQ,MAAM,OAAO,KAAK;AAAA,YAC/C,WAAU;AAAA;AAAA,QACZ;AAAA,SACF;AAAA,MACA,oBAAC,SAAI,WAAU,oBACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAQ;AAAA,UACR,QAAM;AAAA,UACN,SAAS,SAAS;AAAA,UAClB,UAAU,SAAS,QAAQ,YAAY,MAAO,iBAAiB,WAAW,UAAa,UAAU;AAAA,UAEjG;AAAA,gCAAC,YAAS,WAAU,UAAS,eAAW,MAAC;AAAA,YACxC,OAAO;AAAA;AAAA;AAAA,MACV,GACF;AAAA,OACF;AAAA,IAGD,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAC7B,mBACH;AAAA,IAED,UACC,oBAAC,eAAY,MAAK,WAAU,MAAK,MAAK,WAAW,MAAM,UAAU,IAAI,GAClE,kBACH;AAAA,IAED,aACC,oBAAC,eAAY,MAAK,QAAO,MAAK,MAAK,WAAW,MAAM,aAAa,IAAI,GACnE,+BAAC,SAAI,WAAU,6CACb;AAAA,0BAAC,UAAK,gBAAY,MAAE,iBAAO,UAAU,UAAU,KAAK,GAAE;AAAA,MACtD,oBAAC,UAAK,WAAU,6BAA6B,oBAAU,MAAK;AAAA,MAC5D,oBAAC,cAAW,MAAK,MAAK,MAAM,UAAU,MAAM,OAAO,OAAO,UAAU;AAAA,OACtE,GACF;AAAA,IAGF,qBAAC,SAAI,WAAU,aACZ;AAAA,oBAAc,QAAQ,oBAAC,gBAAa,IAAG,MAAM,uBAAa,OAAO,WAAU;AAAA,MAC3E,WAAW,YAAY,WAAW,IACjC,oBAAC,SAAI,WAAU,4BACb,8BAAC,WAAQ,OAAO,OAAO,SAAS,GAClC,IACE,YAAY,WAAW,IACzB,oBAAC,WAAS,iBAAO,OAAM,IAEvB,oBAAC,QAAG,cAAY,OAAO,WAAW,WAAU,mCACzC,sBAAY,IAAI,CAAC,eAAe;AAC/B,cAAM,MAAM,OAAO,WAAW,EAAE;AAChC,cAAM,OAAO,WAAW,QAAQ,MAAM,GAAG;AACzC,cAAM,OAAO,WAAW,WAAW;AACnC,cAAM,aAAa,aAAa,QAAQ,WAAW,WAAW;AAC9D,cAAM,YAAY,aAAa,QAAQ,WAAW,WAAW;AAC7D,cAAM,YAAY,WAAW,WAAW,KAAK;AAC7C,cAAM,KACJ,OAAO,WAAW,eAAe,WAAW,WAAW,aAAa,OAAO,WAAW,UAAU;AAClG,cAAM,QAAQ;AAAA,UACZ,QAAQ,WAAW,UAAU,KAAK,OAAO,KAAK,QAAQ,WAAW,UAAU,CAAC;AAAA,UAC5E,QAAQ,QAAQ,WAAW,cAAc,IAAI,KAAK,OAAO,QAAQ,QAAQ,WAAW,cAAc,IAAI,CAAC;AAAA,UACvG,MAAM,OAAO,UAAU,EAAE;AAAA,QAC3B,EAAE,OAAO,OAAO;AAChB,eACE,oBAAC,QAAa,eAAa,WAAW,QAAQ,WAAU,6BACtD,+BAAC,SAAI,WAAU,iEACb;AAAA,+BAAC,SAAI,WAAU,qCACb;AAAA,gCAAC,SAAI,gBAAY,MAAC,WAAU,2DACzB,qBAAW,OACd;AAAA,YACA,qBAAC,SAAI,WAAU,qCACb;AAAA,kCAAC,QAAK,MAAK,MAAK,OAAM,UAAS,MAAI,MAAC,MAAM,aAAa,WAAW,MAAM,GACrE,iBAAO,OAAO,WAAW,MAAM,GAClC;AAAA,cACC,SAAS,WAAW,QAAQ,oBAAC,YAAY,OAAO,WAAW,MAAM,OAAc,MAAK,MAAK;AAAA,cACzF,aACC,oBAAC,QAAK,MAAK,MAAK,OAAM,UACnB,qBACH;AAAA,eAEJ;AAAA,aACE,MAAM,SAAS,KAAK,WAAW,SAC/B,qBAAC,SAAI,WAAU,oCACZ;AAAA,oBAAM,KAAK,QAAK;AAAA,cAChB,WAAW,QACV,iCACG;AAAA,sBAAM,SAAS,KAAK;AAAA,gBACrB,oBAAC,UAAK,gBAAY,MAAE,qBAAW,MAAK;AAAA,iBACtC;AAAA,eAEJ;AAAA,aAEJ;AAAA,WACE,QAAQ,cAAc,cACtB,qBAAC,SAAI,WAAU,4CACZ;AAAA,oBAAQ,QAAQ,oBAAC,cAAW,MAAK,MAAK,MAAK,SAAQ,MAAM,MAAM,OAAO,OAAO,UAAU;AAAA,YACvF,cACC;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,QAAM;AAAA,gBACN,OAAO,OAAO,OAAO,WAAW,KAAK;AAAA,gBACrC,SAAS,SAAS,UAAU,GAAG;AAAA,gBAC/B,UAAU,SAAS;AAAA,gBACnB,SAAS,YAAY;AACnB,wBAAM,SAAS,MAAM,IAAI,UAAU,GAAG,IAAI,MAAM,SAAS,UAAU,CAAC;AACpE,sBAAI,WAAW,OAAQ,MAAK,QAAQ,WAAW,OAAO,WAAW,EAAE;AAAA,gBACrE;AAAA,gBAEA,8BAAC,aAAU;AAAA;AAAA,YACb;AAAA,YAED,aACC;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,QAAM;AAAA,gBACN,OAAO,OAAO,OAAO,WAAW,KAAK;AAAA,gBACrC,SAAS,SAAS,UAAU,GAAG;AAAA,gBAC/B,UAAU,SAAS;AAAA,gBACnB,SAAS,MAAM,KAAK,IAAI,UAAU,GAAG,IAAI,MAAM,SAAS,UAAU,CAAC;AAAA,gBAEnE,8BAAC,UAAO;AAAA;AAAA,YACV;AAAA,aAEJ;AAAA,WAEJ,KA9DO,GA+DT;AAAA,MAEJ,CAAC,GACH;AAAA,OAEJ;AAAA,KACF;AAEJ;","names":["address"]}

package/dist/admin/reviewer-scope-editor.d.ts

@@ -1,5 +1,5 @@
 import 'react';
-export { cC as DEFAULT_REVIEWER_SCOPE_LABELS, en as ReviewerScope, eo as ReviewerScopeArea, ep as ReviewerScopeEditor, eq as ReviewerScopeEditorProps, er as ReviewerScopeLabels, es as ReviewerScopeLanguage } from '../delete-account-setting-CGVMckMw.js';
+export { cC as DEFAULT_REVIEWER_SCOPE_LABELS, en as ReviewerScope, eo as ReviewerScopeArea, ep as ReviewerScopeEditor, eq as ReviewerScopeEditorProps, er as ReviewerScopeLabels, es as ReviewerScopeLanguage } from '../delete-account-setting-DCFS5Vof.js';
 import './admin-parts.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
@@ -55,6 +55,8 @@ import '../components/image-grid.js';
 import '../components/lightbox.js';
 import '../components/write-lock.js';
 import '../auth/sign-in-form.js';
+import '../landing/access.js';
+import '../landing/landing-labels.js';
 import '../shell/topbar-controls.js';
 import '../theme/palette-presets.js';
 import '../theme/chart-palette.js';
@@ -75,6 +77,8 @@ import '../lib/format.js';
 import '../account/data-export-setting.js';
 import '../components/account-chips.js';
 import './admin-action-log.js';
+import '../settings/settings-labels.js';
+import '../demo/demo-labels.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';

package/dist/admin/role-select.d.ts

@@ -1,6 +1,6 @@
 import 'react';
 import '../components/account-chips.js';
-export { cD as DEFAULT_ROLE_SELECT_LABELS, eu as RoleLock, ev as RoleLockCode, ew as RoleSelect, ex as RoleSelectLabels, ey as RoleSelectProps, ez as RolesEditor, eA as RolesEditorProps } from '../delete-account-setting-CGVMckMw.js';
+export { cD as DEFAULT_ROLE_SELECT_LABELS, eu as RoleLock, ev as RoleLockCode, ew as RoleSelect, ex as RoleSelectLabels, ey as RoleSelectProps, ez as RolesEditor, eA as RolesEditorProps } from '../delete-account-setting-DCFS5Vof.js';
 import 'lucide-react';
 import '../lib/format.js';
 import '../components/chip.js';
@@ -56,6 +56,8 @@ import '../components/image-grid.js';
 import '../components/lightbox.js';
 import '../components/write-lock.js';
 import '../auth/sign-in-form.js';
+import '../landing/access.js';
+import '../landing/landing-labels.js';
 import '../shell/topbar-controls.js';
 import '../theme/palette-presets.js';
 import '../theme/chart-palette.js';
@@ -75,6 +77,8 @@ import '../account/sessions-setting.js';
 import '../account/data-export-setting.js';
 import './admin-parts.js';
 import './admin-action-log.js';
+import '../settings/settings-labels.js';
+import '../demo/demo-labels.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';

package/dist/admin/transfer-ownership-dialog.d.ts

@@ -1,5 +1,5 @@
 import 'react';
-export { cI as DEFAULT_TRANSFER_OWNERSHIP_LABELS, e_ as TransferCandidate, e$ as TransferOwnershipDialog, f0 as TransferOwnershipDialogProps, f1 as TransferOwnershipLabels, f2 as TransferUnavailable, f3 as TransferValues } from '../delete-account-setting-CGVMckMw.js';
+export { cI as DEFAULT_TRANSFER_OWNERSHIP_LABELS, e_ as TransferCandidate, e$ as TransferOwnershipDialog, f0 as TransferOwnershipDialogProps, f1 as TransferOwnershipLabels, f2 as TransferUnavailable, f3 as TransferValues } from '../delete-account-setting-DCFS5Vof.js';
 import './admin-parts.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
@@ -55,6 +55,8 @@ import '../components/image-grid.js';
 import '../components/lightbox.js';
 import '../components/write-lock.js';
 import '../auth/sign-in-form.js';
+import '../landing/access.js';
+import '../landing/landing-labels.js';
 import '../shell/topbar-controls.js';
 import '../theme/palette-presets.js';
 import '../theme/chart-palette.js';
@@ -75,6 +77,8 @@ import '../lib/format.js';
 import '../account/data-export-setting.js';
 import '../components/account-chips.js';
 import './admin-action-log.js';
+import '../settings/settings-labels.js';
+import '../demo/demo-labels.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';

package/dist/admin/user-roster.d.ts

@@ -6,7 +6,7 @@ import '../components/account-chips.js';
 import '../components/chip.js';
 import '../data-table-labels-DUELeXpa.js';
 import '../components/data-table-sort.js';
-export { bz as AdminUserStateFields, cJ as DEFAULT_USER_ROSTER_LABELS, et as RoleEditing, eB as RosterState, f8 as USER_ROSTER_SORT_KEYS, ff as UserIdentityCell, fg as UserIdentityCellProps, fh as UserRosterColumnsOptions, fi as UserRosterLabels, fj as UserRosterRow, fk as UserRosterSortKey, fl as UserRowAction, fm as UserRowActionList, fn as UserRowActions, fo as UserRowActionsProps, fp as adminUserStates, fO as useUserRosterColumns, fP as userRosterColumns, fQ as userRosterSort } from '../delete-account-setting-CGVMckMw.js';
+export { bz as AdminUserStateFields, cJ as DEFAULT_USER_ROSTER_LABELS, et as RoleEditing, eB as RosterState, f8 as USER_ROSTER_SORT_KEYS, ff as UserIdentityCell, fg as UserIdentityCellProps, fh as UserRosterColumnsOptions, fi as UserRosterLabels, fj as UserRosterRow, fk as UserRosterSortKey, fl as UserRowAction, fm as UserRowActionList, fn as UserRowActions, fo as UserRowActionsProps, fp as adminUserStates, fO as useUserRosterColumns, fP as userRosterColumns, fQ as userRosterSort } from '../delete-account-setting-DCFS5Vof.js';
 import '../components/swipeable-row.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
@@ -56,6 +56,8 @@ import '../components/image-grid.js';
 import '../components/lightbox.js';
 import '../components/write-lock.js';
 import '../auth/sign-in-form.js';
+import '../landing/access.js';
+import '../landing/landing-labels.js';
 import '../shell/topbar-controls.js';
 import '../theme/palette-presets.js';
 import '../theme/chart-palette.js';
@@ -75,6 +77,8 @@ import '../account/sessions-setting.js';
 import '../account/data-export-setting.js';
 import './admin-parts.js';
 import './admin-action-log.js';
+import '../settings/settings-labels.js';
+import '../demo/demo-labels.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';

package/dist/auth/auth-errors.d.ts

@@ -48,11 +48,28 @@ type AuthErrorCode = "invalid_credentials" | "registration_closed" | "email_take
  *   is a `409`.
  */
 type AccountErrorCode = "last_admin" | "self_action" | "other_companies" | "household_has_members" | "confirmation_required" | "confirmation_mismatch" | "password_incorrect";
-/** Every code the kit reads: the sign-in refusals and the account ones (0.30.0). */
-type KitErrorCode = AuthErrorCode | AccountErrorCode;
 /**
- * The code an error carries — an {@link AuthErrorCode}, or since 0.30.0 an
- * {@link AccountErrorCode} — or `undefined` when it carries none.
+ * 0.31.0: the demo's coded refusals (docs/landing-demo-harmonization.md §6.2) —
+ * server-kit 0.5's `DemoErrorCode`, value for value, answered as `{detail, code}` like
+ * the others and read by the same {@link authErrorCode}.
+ *
+ * - `demo_disabled` — `404`: the demo switch is off (it is "not there", not forbidden).
+ * - `demo_rate_limited` — `429` with `Retry-After`: the per-IP window of demo starts.
+ * - `demo_capacity` — `429`, no `Retry-After`: the cap of live demo users.
+ * - `demo_not_ready` — `503`: the demo data has not been seeded yet.
+ * - `demo_read_only` — `403`, model R: any write by a demo user. The app's write lock
+ *   already explains it, so it shows no toast (§5.4).
+ * - `demo_refused` — `403`, both models: an action a demo never may — a way in or out,
+ *   mail, uploads, the account export (§6.4).
+ */
+type DemoErrorCode = "demo_disabled" | "demo_rate_limited" | "demo_capacity" | "demo_not_ready" | "demo_read_only" | "demo_refused";
+/** Every code the kit reads: the sign-in refusals, the account ones (0.30.0) and the
+ *  demo's (0.31.0). */
+type KitErrorCode = AuthErrorCode | AccountErrorCode | DemoErrorCode;
+/**
+ * The code an error carries — an {@link AuthErrorCode}, since 0.30.0 an
+ * {@link AccountErrorCode}, since 0.31.0 a {@link DemoErrorCode} — or `undefined` when it
+ * carries none.
  *
  * Reads the parsed response body wherever the apps' HTTP clients put it, without
  * depending on any of them:
@@ -81,7 +98,8 @@ declare function authErrorCode(err: unknown): KitErrorCode | undefined;
  * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject
  * with, so an app's `onSubmit` can simply let its client's error through. See
  * {@link authErrorCode} for the shapes it reads. Since 0.30.0 it knows the account codes
- * too: `isAuthError(err, "last_admin")`.
+ * too: `isAuthError(err, "last_admin")`; since 0.31.0 the demo's:
+ * `isAuthError(err, "demo_read_only")`.
  */
 declare function isAuthError(err: unknown, code?: KitErrorCode): boolean;
 /**
@@ -136,4 +154,4 @@ declare function englishRateLimited(seconds?: number): string;
 /** "30 s", "2 min" — a wait in English, rounded up. @internal */
 declare function englishWait(seconds: number): string;
 
-export { type AccountErrorCode, type AuthErrorCode, type KitErrorCode, authErrorCode, englishRateLimited, englishWait, isAuthError, isRateLimited, retryAfterSeconds };
+export { type AccountErrorCode, type AuthErrorCode, type DemoErrorCode, type KitErrorCode, authErrorCode, englishRateLimited, englishWait, isAuthError, isRateLimited, retryAfterSeconds };

package/dist/auth/auth-errors.js

@@ -14,7 +14,13 @@ const CODES = /* @__PURE__ */ new Set([
   "household_has_members",
   "confirmation_required",
   "confirmation_mismatch",
-  "password_incorrect"
+  "password_incorrect",
+  "demo_disabled",
+  "demo_rate_limited",
+  "demo_capacity",
+  "demo_not_ready",
+  "demo_read_only",
+  "demo_refused"
 ]);
 const isBag = (value) => typeof value === "object" && value !== null;
 function known(value) {

package/dist/auth/auth-errors.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/auth-errors.ts"],"sourcesContent":["/**\n * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every\n * refusal the auth routes answer carries a machine-readable `code`, and the pages\n * recognise the CODE, never the server's sentence.\n *\n * Today each app's pages print the server's `detail` string (keksdose's\n * `extractApiErrorMessage`), which is English on every locale and, on a credential\n * check, would be an account-enumeration oracle if it ever said more than one thing.\n * keksdose already keys one refusal on a code (`features/budgets/plan-limit.ts`,\n * `402 {detail, code: \"plan_budget_limit\"}`); §5.2 makes that the rule for auth. Each\n * app switches its server and its pages together (§9).\n *\n * - `invalid_credentials` — unknown address, wrong password AND deactivated account:\n *   one answer, in the same time (§2.10). `401`.\n * - `registration_closed` — the sign-up gate refused the address. `403`.\n * - `email_taken` — an account with this address exists. `409`.\n * - `invitation_invalid`, `invitation_expired` — the `invite` token of a sign-up or an\n *   accept (§4.4).\n * - `token_invalid` — a one-time token (reset, verification, a sign-in challenge) is\n *   unknown, spent or expired.\n * - `account_inactive` — **no server answers it.** §2.10 decided that a deactivated\n *   account gets `invalid_credentials`, because a separate answer after a correct\n *   password would confirm a leaked one. It stays in the union only for a future server\n *   step that is past the password (an admin view, a signed-in refresh) and may say so.\n */\nexport type AuthErrorCode =\n  | \"invalid_credentials\"\n  | \"registration_closed\"\n  | \"email_taken\"\n  | \"invitation_invalid\"\n  | \"invitation_expired\"\n  | \"token_invalid\"\n  /** 0.29.1: a link that WAS valid and ran out (verification, reset) — keksdose's step-3\n   *  refusals tell it from `token_invalid`, so a page can say \"expired, ask for a new one\". */\n  | \"token_expired\"\n  | \"account_inactive\";\n\n/**\n * 0.30.0: the coded refusals of user administration and the account's own settings\n * (docs/user-admin-harmonization.md §4, §6) — server-kit 0.4.0's `AccountErrorCode`,\n * value for value. The same family of answer as the sign-in codes (`{detail, code}`,\n * plus `companies` on kastlan's `last_admin`), read by the same {@link authErrorCode}.\n *\n * - `last_admin` — the action would leave no active admin: deactivating, demoting or\n *   deleting the last one (in kastlan, of a company; the answer names the `companies`).\n * - `self_action` — an admin acting on their own account where that is never allowed.\n * - `other_companies` — kastlan: the account belongs to other companies too, so a\n *   company admin may not deactivate it; \"Remove from company\" instead (§9.6).\n * - `household_has_members` — keksdose's guard on a deletion request (§6.4).\n * - `confirmation_required`, `confirmation_mismatch` — the action's confirmation level\n *   asked for a typed address (or a tick), and the request carried none, or another\n *   address (§4.2).\n * - `password_incorrect` — the CURRENT password is wrong on a signed-in route (the email\n *   change, the deletion request). `400`, not `401`: an app's client reads a 401 as an\n *   ended session and signs the user out, the wrong answer to a typo. Every other one\n *   is a `409`.\n */\nexport type AccountErrorCode =\n  | \"last_admin\"\n  | \"self_action\"\n  | \"other_companies\"\n  | \"household_has_members\"\n  | \"confirmation_required\"\n  | \"confirmation_mismatch\"\n  | \"password_incorrect\";\n\n/** Every code the kit reads: the sign-in refusals and the account ones (0.30.0). */\nexport type KitErrorCode = AuthErrorCode | AccountErrorCode;\n\nconst CODES: ReadonlySet<string> = new Set<KitErrorCode>([\n  \"invalid_credentials\",\n  \"registration_closed\",\n  \"email_taken\",\n  \"invitation_invalid\",\n  \"invitation_expired\",\n  \"token_invalid\",\n  \"token_expired\",\n  \"account_inactive\",\n  \"last_admin\",\n  \"self_action\",\n  \"other_companies\",\n  \"household_has_members\",\n  \"confirmation_required\",\n  \"confirmation_mismatch\",\n  \"password_incorrect\",\n]);\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** A known code, or undefined. */\nfunction known(value: unknown): KitErrorCode | undefined {\n  return typeof value === \"string\" && CODES.has(value) ? (value as KitErrorCode) : undefined;\n}\n\n/** `{code}` on a parsed body, or FastAPI's `{detail: {code}}` — what an\n *  `HTTPException(detail={\"code\": …})` serialises to. */\nfunction codeOfBody(body: unknown): KitErrorCode | undefined {\n  if (!isBag(body)) return undefined;\n  return known(body.code) ?? (isBag(body.detail) ? known(body.detail.code) : undefined);\n}\n\n/**\n * The code an error carries — an {@link AuthErrorCode}, or since 0.30.0 an\n * {@link AccountErrorCode} — or `undefined` when it carries none.\n *\n * Reads the parsed response body wherever the apps' HTTP clients put it, without\n * depending on any of them:\n *\n *  1. `err.response.data` — axios (keksdose's, kastlan's and Kurvenschmiede's clients;\n *     keksdose's `isPlanBudgetLimitRefusal` reads the same path);\n *  2. `err.data` — ofetch's `FetchError`, and most `fetch` wrappers that parse the body;\n *  3. `err.body` — the generated OpenAPI clients' `ApiError`;\n *  4. `err` itself — a body thrown as it came (`throw await res.json()`).\n *\n * In each, `code` or FastAPI's nested `detail.code`. Last, `err.code` — but only when\n * it is one of the codes above: axios writes its OWN codes there (`ERR_NETWORK`,\n * `ECONNABORTED`, `ERR_BAD_REQUEST`), and so does Node, so an unknown value is never\n * read as a refusal. The HTTP status is not checked: the code is the contract, and the\n * status differs per refusal (401, 403, 409, 410).\n */\nexport function authErrorCode(err: unknown): KitErrorCode | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? codeOfBody(response.data) : undefined) ??\n    codeOfBody(err.data) ??\n    codeOfBody(err.body) ??\n    codeOfBody(err)\n  );\n}\n\n/**\n * Whether `err` is a coded auth refusal — any of them, or the one named:\n *\n * ```ts\n * try { await api.register(values) }\n * catch (err) { if (isAuthError(err, \"email_taken\")) … }\n * ```\n *\n * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject\n * with, so an app's `onSubmit` can simply let its client's error through. See\n * {@link authErrorCode} for the shapes it reads. Since 0.30.0 it knows the account codes\n * too: `isAuthError(err, \"last_admin\")`.\n */\nexport function isAuthError(err: unknown, code?: KitErrorCode): boolean {\n  const found = authErrorCode(err);\n  return found !== undefined && (code === undefined || found === code);\n}\n\n/** An HTTP status as a number, or undefined. */\nfunction statusOf(value: unknown): number | undefined {\n  return typeof value === \"number\" && Number.isInteger(value) ? value : undefined;\n}\n\n/**\n * Whether `err` is a throttled request — HTTP `429 Too Many Requests` (0.30.0, from the\n * apps' 0.29 adoption: every app answered a throttled sign-in, sign-up or reset through\n * its own `describeError`, with three wordings of one sentence).\n *\n * A throttle carries no `code` in the contract — the STATUS is the answer, set by the\n * apps' limiters (server-kit's `AuthLimiters`, keksdose's per-IP limit) — so this reads\n * the status, wherever the apps' HTTP clients put it, without depending on any of them:\n *\n *  1. `err.response.status` — axios (all three apps' clients);\n *  2. `err.status` — ofetch's `FetchError`, the generated OpenAPI clients' `ApiError`, and\n *     a `Response` thrown as it came;\n *  3. `err.statusCode` — ofetch's alias, and Node-style errors.\n *\n * There is no `rate_limited` code: keksdose answers its 429s uncoded, with a\n * `Retry-After` header, and the status is the one signal every limiter gives.\n *\n * The kit's `SignInForm`, `RegisterForm`, `ForgotPasswordForm` and `ResetPasswordForm`\n * call it AFTER the app's `describeError` — an app with words of its own keeps them —\n * and before their generic failure, so \"Too many attempts. Try again in 30 s.\" (with\n * {@link retryAfterSeconds}) or \"… Wait a moment and try again.\" needs no app code.\n */\nexport function isRateLimited(err: unknown): boolean {\n  if (!isBag(err)) return false;\n  const response = err.response;\n  const status =\n    (isBag(response) ? statusOf(response.status) : undefined) ?? statusOf(err.status) ?? statusOf(err.statusCode);\n  return status === 429;\n}\n\n/** A header's value from a `Headers` (fetch, ofetch's `response`), axios' `AxiosHeaders`\n *  or a plain record — whose keys may come in any case. */\nfunction headerOf(headers: unknown, name: string): unknown {\n  if (!isBag(headers)) return undefined;\n  if (typeof headers.get === \"function\") {\n    try {\n      const value: unknown = (headers.get as (key: string) => unknown).call(headers, name);\n      if (value !== undefined && value !== null) return value;\n    } catch {\n      // A `get` that is not a header lookup; the record below is.\n    }\n  }\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === name) return value;\n  }\n  return undefined;\n}\n\n/** `Retry-After` as seconds from `now`: delta-seconds (\"30\"), or an HTTP date\n *  (\"Wed, 07 Oct 2026 10:00:00 GMT\") counted from now, never below 0 (RFC 9110 §10.2.3). */\nfunction parseRetryAfter(value: unknown, now: number): number | undefined {\n  const raw = Array.isArray(value) ? (value as unknown[])[0] : value;\n  if (typeof raw === \"number\") return Number.isFinite(raw) && raw >= 0 ? Math.ceil(raw) : undefined;\n  if (typeof raw !== \"string\") return undefined;\n  const text = raw.trim();\n  if (/^\\d+$/.test(text)) return Number(text);\n  // An HTTP date names its day and month (\"Wed, 07 Oct 2026 …\"). Without a letter it is\n  // a malformed number (\"-5\", \"1.5\"), which `Date.parse` would happily read as a year.\n  if (!/[a-z]/i.test(text)) return undefined;\n  const at = Date.parse(text);\n  if (Number.isNaN(at)) return undefined;\n  return Math.max(0, Math.ceil((at - now) / 1000));\n}\n\n/**\n * How long a throttled request asks to wait, in whole seconds — its `Retry-After`\n * header (0.30.0, keksdose: its 429s carry no code, only the header) — or `undefined`\n * when there is none, or none that parses.\n *\n * Read where the apps' clients keep the response headers, without depending on any of\n * them: `err.response.headers` (axios' `AxiosHeaders` or a plain record; ofetch's\n * `FetchError.response`, a fetch `Headers`), then `err.headers` (a `Response` thrown as\n * it came). The value is delta-seconds, or an HTTP date turned into seconds from `now`\n * (default: the present moment) — never below 0.\n *\n * The forms hand it to their `rateLimited` label when {@link isRateLimited} is true:\n * \"Too many attempts. Try again in 30 s.\" — and, without one, \"… Wait a moment and try\n * again.\" A browser only exposes `Retry-After` to a cross-origin page when the server\n * lists it in `Access-Control-Expose-Headers`.\n */\nexport function retryAfterSeconds(err: unknown, now: number | Date = Date.now()): number | undefined {\n  if (!isBag(err)) return undefined;\n  const at = typeof now === \"number\" ? now : now.getTime();\n  const response = err.response;\n  const value =\n    (isBag(response) ? headerOf(response.headers, \"retry-after\") : undefined) ?? headerOf(err.headers, \"retry-after\");\n  return value === undefined ? undefined : parseRetryAfter(value, at);\n}\n\n/**\n * The English of every `rateLimited` label (0.30.0): \"Too many attempts. Try again in\n * 30 s.\" with a wait under a minute, in whole minutes from one minute up (keksdose's\n * reset throttle answers in hours, and \"3600 s\" is a number nobody reads), and \"Wait a\n * moment and try again.\" without one — or with a `0`.\n *\n * @internal The namespaces' English; not part of the barrel.\n */\nexport function englishRateLimited(seconds?: number): string {\n  if (!seconds || seconds <= 0) return \"Too many attempts. Wait a moment and try again.\";\n  return `Too many attempts. Try again in ${englishWait(seconds)}.`;\n}\n\n/** \"30 s\", \"2 min\" — a wait in English, rounded up. @internal */\nexport function englishWait(seconds: number): string {\n  return seconds < 60 ? `${Math.ceil(seconds)} s` : `${Math.ceil(seconds / 60)} min`;\n}\n"],"mappings":";AAqEA,MAAM,QAA6B,oBAAI,IAAkB;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAID,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,MAAM,OAA0C;AACvD,SAAO,OAAO,UAAU,YAAY,MAAM,IAAI,KAAK,IAAK,QAAyB;AACnF;AAIA,SAAS,WAAW,MAAyC;AAC3D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,SAAO,MAAM,KAAK,IAAI,MAAM,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI;AAC7E;AAqBO,SAAS,cAAc,KAAwC;AACpE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,WAAW,SAAS,IAAI,IAAI,WAC/C,WAAW,IAAI,IAAI,KACnB,WAAW,IAAI,IAAI,KACnB,WAAW,GAAG;AAElB;AAeO,SAAS,YAAY,KAAc,MAA8B;AACtE,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,WAAc,SAAS,UAAa,UAAU;AACjE;AAGA,SAAS,SAAS,OAAoC;AACpD,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,IAAI,QAAQ;AACxE;AAwBO,SAAS,cAAc,KAAuB;AACnD,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,QAAM,UACH,MAAM,QAAQ,IAAI,SAAS,SAAS,MAAM,IAAI,WAAc,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU;AAC9G,SAAO,WAAW;AACpB;AAIA,SAAS,SAAS,SAAkB,MAAuB;AACzD,MAAI,CAAC,MAAM,OAAO,EAAG,QAAO;AAC5B,MAAI,OAAO,QAAQ,QAAQ,YAAY;AACrC,QAAI;AACF,YAAM,QAAkB,QAAQ,IAAiC,KAAK,SAAS,IAAI;AACnF,UAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAAA,IACpD,QAAQ;AAAA,IAER;AAAA,EACF;AACA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,KAAM,QAAO;AAAA,EACzC;AACA,SAAO;AACT;AAIA,SAAS,gBAAgB,OAAgB,KAAiC;AACxE,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAK,MAAoB,CAAC,IAAI;AAC7D,MAAI,OAAO,QAAQ,SAAU,QAAO,OAAO,SAAS,GAAG,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI;AACxF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,OAAO,IAAI,KAAK;AACtB,MAAI,QAAQ,KAAK,IAAI,EAAG,QAAO,OAAO,IAAI;AAG1C,MAAI,CAAC,SAAS,KAAK,IAAI,EAAG,QAAO;AACjC,QAAM,KAAK,KAAK,MAAM,IAAI;AAC1B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,OAAO,GAAI,CAAC;AACjD;AAkBO,SAAS,kBAAkB,KAAc,MAAqB,KAAK,IAAI,GAAuB;AACnG,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,KAAK,OAAO,QAAQ,WAAW,MAAM,IAAI,QAAQ;AACvD,QAAM,WAAW,IAAI;AACrB,QAAM,SACH,MAAM,QAAQ,IAAI,SAAS,SAAS,SAAS,aAAa,IAAI,WAAc,SAAS,IAAI,SAAS,aAAa;AAClH,SAAO,UAAU,SAAY,SAAY,gBAAgB,OAAO,EAAE;AACpE;AAUO,SAAS,mBAAmB,SAA0B;AAC3D,MAAI,CAAC,WAAW,WAAW,EAAG,QAAO;AACrC,SAAO,mCAAmC,YAAY,OAAO,CAAC;AAChE;AAGO,SAAS,YAAY,SAAyB;AACnD,SAAO,UAAU,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,OAAO,GAAG,KAAK,KAAK,UAAU,EAAE,CAAC;AAC9E;","names":[]}
+{"version":3,"sources":["../../src/auth/auth-errors.ts"],"sourcesContent":["/**\n * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every\n * refusal the auth routes answer carries a machine-readable `code`, and the pages\n * recognise the CODE, never the server's sentence.\n *\n * Today each app's pages print the server's `detail` string (keksdose's\n * `extractApiErrorMessage`), which is English on every locale and, on a credential\n * check, would be an account-enumeration oracle if it ever said more than one thing.\n * keksdose already keys one refusal on a code (`features/budgets/plan-limit.ts`,\n * `402 {detail, code: \"plan_budget_limit\"}`); §5.2 makes that the rule for auth. Each\n * app switches its server and its pages together (§9).\n *\n * - `invalid_credentials` — unknown address, wrong password AND deactivated account:\n *   one answer, in the same time (§2.10). `401`.\n * - `registration_closed` — the sign-up gate refused the address. `403`.\n * - `email_taken` — an account with this address exists. `409`.\n * - `invitation_invalid`, `invitation_expired` — the `invite` token of a sign-up or an\n *   accept (§4.4).\n * - `token_invalid` — a one-time token (reset, verification, a sign-in challenge) is\n *   unknown, spent or expired.\n * - `account_inactive` — **no server answers it.** §2.10 decided that a deactivated\n *   account gets `invalid_credentials`, because a separate answer after a correct\n *   password would confirm a leaked one. It stays in the union only for a future server\n *   step that is past the password (an admin view, a signed-in refresh) and may say so.\n */\nexport type AuthErrorCode =\n  | \"invalid_credentials\"\n  | \"registration_closed\"\n  | \"email_taken\"\n  | \"invitation_invalid\"\n  | \"invitation_expired\"\n  | \"token_invalid\"\n  /** 0.29.1: a link that WAS valid and ran out (verification, reset) — keksdose's step-3\n   *  refusals tell it from `token_invalid`, so a page can say \"expired, ask for a new one\". */\n  | \"token_expired\"\n  | \"account_inactive\";\n\n/**\n * 0.30.0: the coded refusals of user administration and the account's own settings\n * (docs/user-admin-harmonization.md §4, §6) — server-kit 0.4.0's `AccountErrorCode`,\n * value for value. The same family of answer as the sign-in codes (`{detail, code}`,\n * plus `companies` on kastlan's `last_admin`), read by the same {@link authErrorCode}.\n *\n * - `last_admin` — the action would leave no active admin: deactivating, demoting or\n *   deleting the last one (in kastlan, of a company; the answer names the `companies`).\n * - `self_action` — an admin acting on their own account where that is never allowed.\n * - `other_companies` — kastlan: the account belongs to other companies too, so a\n *   company admin may not deactivate it; \"Remove from company\" instead (§9.6).\n * - `household_has_members` — keksdose's guard on a deletion request (§6.4).\n * - `confirmation_required`, `confirmation_mismatch` — the action's confirmation level\n *   asked for a typed address (or a tick), and the request carried none, or another\n *   address (§4.2).\n * - `password_incorrect` — the CURRENT password is wrong on a signed-in route (the email\n *   change, the deletion request). `400`, not `401`: an app's client reads a 401 as an\n *   ended session and signs the user out, the wrong answer to a typo. Every other one\n *   is a `409`.\n */\nexport type AccountErrorCode =\n  | \"last_admin\"\n  | \"self_action\"\n  | \"other_companies\"\n  | \"household_has_members\"\n  | \"confirmation_required\"\n  | \"confirmation_mismatch\"\n  | \"password_incorrect\";\n\n/**\n * 0.31.0: the demo's coded refusals (docs/landing-demo-harmonization.md §6.2) —\n * server-kit 0.5's `DemoErrorCode`, value for value, answered as `{detail, code}` like\n * the others and read by the same {@link authErrorCode}.\n *\n * - `demo_disabled` — `404`: the demo switch is off (it is \"not there\", not forbidden).\n * - `demo_rate_limited` — `429` with `Retry-After`: the per-IP window of demo starts.\n * - `demo_capacity` — `429`, no `Retry-After`: the cap of live demo users.\n * - `demo_not_ready` — `503`: the demo data has not been seeded yet.\n * - `demo_read_only` — `403`, model R: any write by a demo user. The app's write lock\n *   already explains it, so it shows no toast (§5.4).\n * - `demo_refused` — `403`, both models: an action a demo never may — a way in or out,\n *   mail, uploads, the account export (§6.4).\n */\nexport type DemoErrorCode =\n  | \"demo_disabled\"\n  | \"demo_rate_limited\"\n  | \"demo_capacity\"\n  | \"demo_not_ready\"\n  | \"demo_read_only\"\n  | \"demo_refused\";\n\n/** Every code the kit reads: the sign-in refusals, the account ones (0.30.0) and the\n *  demo's (0.31.0). */\nexport type KitErrorCode = AuthErrorCode | AccountErrorCode | DemoErrorCode;\n\nconst CODES: ReadonlySet<string> = new Set<KitErrorCode>([\n  \"invalid_credentials\",\n  \"registration_closed\",\n  \"email_taken\",\n  \"invitation_invalid\",\n  \"invitation_expired\",\n  \"token_invalid\",\n  \"token_expired\",\n  \"account_inactive\",\n  \"last_admin\",\n  \"self_action\",\n  \"other_companies\",\n  \"household_has_members\",\n  \"confirmation_required\",\n  \"confirmation_mismatch\",\n  \"password_incorrect\",\n  \"demo_disabled\",\n  \"demo_rate_limited\",\n  \"demo_capacity\",\n  \"demo_not_ready\",\n  \"demo_read_only\",\n  \"demo_refused\",\n]);\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** A known code, or undefined. */\nfunction known(value: unknown): KitErrorCode | undefined {\n  return typeof value === \"string\" && CODES.has(value) ? (value as KitErrorCode) : undefined;\n}\n\n/** `{code}` on a parsed body, or FastAPI's `{detail: {code}}` — what an\n *  `HTTPException(detail={\"code\": …})` serialises to. */\nfunction codeOfBody(body: unknown): KitErrorCode | undefined {\n  if (!isBag(body)) return undefined;\n  return known(body.code) ?? (isBag(body.detail) ? known(body.detail.code) : undefined);\n}\n\n/**\n * The code an error carries — an {@link AuthErrorCode}, since 0.30.0 an\n * {@link AccountErrorCode}, since 0.31.0 a {@link DemoErrorCode} — or `undefined` when it\n * carries none.\n *\n * Reads the parsed response body wherever the apps' HTTP clients put it, without\n * depending on any of them:\n *\n *  1. `err.response.data` — axios (keksdose's, kastlan's and Kurvenschmiede's clients;\n *     keksdose's `isPlanBudgetLimitRefusal` reads the same path);\n *  2. `err.data` — ofetch's `FetchError`, and most `fetch` wrappers that parse the body;\n *  3. `err.body` — the generated OpenAPI clients' `ApiError`;\n *  4. `err` itself — a body thrown as it came (`throw await res.json()`).\n *\n * In each, `code` or FastAPI's nested `detail.code`. Last, `err.code` — but only when\n * it is one of the codes above: axios writes its OWN codes there (`ERR_NETWORK`,\n * `ECONNABORTED`, `ERR_BAD_REQUEST`), and so does Node, so an unknown value is never\n * read as a refusal. The HTTP status is not checked: the code is the contract, and the\n * status differs per refusal (401, 403, 409, 410).\n */\nexport function authErrorCode(err: unknown): KitErrorCode | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? codeOfBody(response.data) : undefined) ??\n    codeOfBody(err.data) ??\n    codeOfBody(err.body) ??\n    codeOfBody(err)\n  );\n}\n\n/**\n * Whether `err` is a coded auth refusal — any of them, or the one named:\n *\n * ```ts\n * try { await api.register(values) }\n * catch (err) { if (isAuthError(err, \"email_taken\")) … }\n * ```\n *\n * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject\n * with, so an app's `onSubmit` can simply let its client's error through. See\n * {@link authErrorCode} for the shapes it reads. Since 0.30.0 it knows the account codes\n * too: `isAuthError(err, \"last_admin\")`; since 0.31.0 the demo's:\n * `isAuthError(err, \"demo_read_only\")`.\n */\nexport function isAuthError(err: unknown, code?: KitErrorCode): boolean {\n  const found = authErrorCode(err);\n  return found !== undefined && (code === undefined || found === code);\n}\n\n/** An HTTP status as a number, or undefined. */\nfunction statusOf(value: unknown): number | undefined {\n  return typeof value === \"number\" && Number.isInteger(value) ? value : undefined;\n}\n\n/**\n * Whether `err` is a throttled request — HTTP `429 Too Many Requests` (0.30.0, from the\n * apps' 0.29 adoption: every app answered a throttled sign-in, sign-up or reset through\n * its own `describeError`, with three wordings of one sentence).\n *\n * A throttle carries no `code` in the contract — the STATUS is the answer, set by the\n * apps' limiters (server-kit's `AuthLimiters`, keksdose's per-IP limit) — so this reads\n * the status, wherever the apps' HTTP clients put it, without depending on any of them:\n *\n *  1. `err.response.status` — axios (all three apps' clients);\n *  2. `err.status` — ofetch's `FetchError`, the generated OpenAPI clients' `ApiError`, and\n *     a `Response` thrown as it came;\n *  3. `err.statusCode` — ofetch's alias, and Node-style errors.\n *\n * There is no `rate_limited` code: keksdose answers its 429s uncoded, with a\n * `Retry-After` header, and the status is the one signal every limiter gives.\n *\n * The kit's `SignInForm`, `RegisterForm`, `ForgotPasswordForm` and `ResetPasswordForm`\n * call it AFTER the app's `describeError` — an app with words of its own keeps them —\n * and before their generic failure, so \"Too many attempts. Try again in 30 s.\" (with\n * {@link retryAfterSeconds}) or \"… Wait a moment and try again.\" needs no app code.\n */\nexport function isRateLimited(err: unknown): boolean {\n  if (!isBag(err)) return false;\n  const response = err.response;\n  const status =\n    (isBag(response) ? statusOf(response.status) : undefined) ?? statusOf(err.status) ?? statusOf(err.statusCode);\n  return status === 429;\n}\n\n/** A header's value from a `Headers` (fetch, ofetch's `response`), axios' `AxiosHeaders`\n *  or a plain record — whose keys may come in any case. */\nfunction headerOf(headers: unknown, name: string): unknown {\n  if (!isBag(headers)) return undefined;\n  if (typeof headers.get === \"function\") {\n    try {\n      const value: unknown = (headers.get as (key: string) => unknown).call(headers, name);\n      if (value !== undefined && value !== null) return value;\n    } catch {\n      // A `get` that is not a header lookup; the record below is.\n    }\n  }\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === name) return value;\n  }\n  return undefined;\n}\n\n/** `Retry-After` as seconds from `now`: delta-seconds (\"30\"), or an HTTP date\n *  (\"Wed, 07 Oct 2026 10:00:00 GMT\") counted from now, never below 0 (RFC 9110 §10.2.3). */\nfunction parseRetryAfter(value: unknown, now: number): number | undefined {\n  const raw = Array.isArray(value) ? (value as unknown[])[0] : value;\n  if (typeof raw === \"number\") return Number.isFinite(raw) && raw >= 0 ? Math.ceil(raw) : undefined;\n  if (typeof raw !== \"string\") return undefined;\n  const text = raw.trim();\n  if (/^\\d+$/.test(text)) return Number(text);\n  // An HTTP date names its day and month (\"Wed, 07 Oct 2026 …\"). Without a letter it is\n  // a malformed number (\"-5\", \"1.5\"), which `Date.parse` would happily read as a year.\n  if (!/[a-z]/i.test(text)) return undefined;\n  const at = Date.parse(text);\n  if (Number.isNaN(at)) return undefined;\n  return Math.max(0, Math.ceil((at - now) / 1000));\n}\n\n/**\n * How long a throttled request asks to wait, in whole seconds — its `Retry-After`\n * header (0.30.0, keksdose: its 429s carry no code, only the header) — or `undefined`\n * when there is none, or none that parses.\n *\n * Read where the apps' clients keep the response headers, without depending on any of\n * them: `err.response.headers` (axios' `AxiosHeaders` or a plain record; ofetch's\n * `FetchError.response`, a fetch `Headers`), then `err.headers` (a `Response` thrown as\n * it came). The value is delta-seconds, or an HTTP date turned into seconds from `now`\n * (default: the present moment) — never below 0.\n *\n * The forms hand it to their `rateLimited` label when {@link isRateLimited} is true:\n * \"Too many attempts. Try again in 30 s.\" — and, without one, \"… Wait a moment and try\n * again.\" A browser only exposes `Retry-After` to a cross-origin page when the server\n * lists it in `Access-Control-Expose-Headers`.\n */\nexport function retryAfterSeconds(err: unknown, now: number | Date = Date.now()): number | undefined {\n  if (!isBag(err)) return undefined;\n  const at = typeof now === \"number\" ? now : now.getTime();\n  const response = err.response;\n  const value =\n    (isBag(response) ? headerOf(response.headers, \"retry-after\") : undefined) ?? headerOf(err.headers, \"retry-after\");\n  return value === undefined ? undefined : parseRetryAfter(value, at);\n}\n\n/**\n * The English of every `rateLimited` label (0.30.0): \"Too many attempts. Try again in\n * 30 s.\" with a wait under a minute, in whole minutes from one minute up (keksdose's\n * reset throttle answers in hours, and \"3600 s\" is a number nobody reads), and \"Wait a\n * moment and try again.\" without one — or with a `0`.\n *\n * @internal The namespaces' English; not part of the barrel.\n */\nexport function englishRateLimited(seconds?: number): string {\n  if (!seconds || seconds <= 0) return \"Too many attempts. Wait a moment and try again.\";\n  return `Too many attempts. Try again in ${englishWait(seconds)}.`;\n}\n\n/** \"30 s\", \"2 min\" — a wait in English, rounded up. @internal */\nexport function englishWait(seconds: number): string {\n  return seconds < 60 ? `${Math.ceil(seconds)} s` : `${Math.ceil(seconds / 60)} min`;\n}\n"],"mappings":";AA4FA,MAAM,QAA6B,oBAAI,IAAkB;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAID,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,MAAM,OAA0C;AACvD,SAAO,OAAO,UAAU,YAAY,MAAM,IAAI,KAAK,IAAK,QAAyB;AACnF;AAIA,SAAS,WAAW,MAAyC;AAC3D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,SAAO,MAAM,KAAK,IAAI,MAAM,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI;AAC7E;AAsBO,SAAS,cAAc,KAAwC;AACpE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,WAAW,SAAS,IAAI,IAAI,WAC/C,WAAW,IAAI,IAAI,KACnB,WAAW,IAAI,IAAI,KACnB,WAAW,GAAG;AAElB;AAgBO,SAAS,YAAY,KAAc,MAA8B;AACtE,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,WAAc,SAAS,UAAa,UAAU;AACjE;AAGA,SAAS,SAAS,OAAoC;AACpD,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,IAAI,QAAQ;AACxE;AAwBO,SAAS,cAAc,KAAuB;AACnD,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,QAAM,UACH,MAAM,QAAQ,IAAI,SAAS,SAAS,MAAM,IAAI,WAAc,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU;AAC9G,SAAO,WAAW;AACpB;AAIA,SAAS,SAAS,SAAkB,MAAuB;AACzD,MAAI,CAAC,MAAM,OAAO,EAAG,QAAO;AAC5B,MAAI,OAAO,QAAQ,QAAQ,YAAY;AACrC,QAAI;AACF,YAAM,QAAkB,QAAQ,IAAiC,KAAK,SAAS,IAAI;AACnF,UAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAAA,IACpD,QAAQ;AAAA,IAER;AAAA,EACF;AACA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,KAAM,QAAO;AAAA,EACzC;AACA,SAAO;AACT;AAIA,SAAS,gBAAgB,OAAgB,KAAiC;AACxE,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAK,MAAoB,CAAC,IAAI;AAC7D,MAAI,OAAO,QAAQ,SAAU,QAAO,OAAO,SAAS,GAAG,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI;AACxF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,OAAO,IAAI,KAAK;AACtB,MAAI,QAAQ,KAAK,IAAI,EAAG,QAAO,OAAO,IAAI;AAG1C,MAAI,CAAC,SAAS,KAAK,IAAI,EAAG,QAAO;AACjC,QAAM,KAAK,KAAK,MAAM,IAAI;AAC1B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,OAAO,GAAI,CAAC;AACjD;AAkBO,SAAS,kBAAkB,KAAc,MAAqB,KAAK,IAAI,GAAuB;AACnG,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,KAAK,OAAO,QAAQ,WAAW,MAAM,IAAI,QAAQ;AACvD,QAAM,WAAW,IAAI;AACrB,QAAM,SACH,MAAM,QAAQ,IAAI,SAAS,SAAS,SAAS,aAAa,IAAI,WAAc,SAAS,IAAI,SAAS,aAAa;AAClH,SAAO,UAAU,SAAY,SAAY,gBAAgB,OAAO,EAAE;AACpE;AAUO,SAAS,mBAAmB,SAA0B;AAC3D,MAAI,CAAC,WAAW,WAAW,EAAG,QAAO;AACrC,SAAO,mCAAmC,YAAY,OAAO,CAAC;AAChE;AAGO,SAAS,YAAY,SAAyB;AACnD,SAAO,UAAU,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,OAAO,GAAG,KAAK,KAAK,UAAU,EAAE,CAAC;AAC9E;","names":[]}

package/dist/auth/register-form.d.ts

@@ -1,5 +1,5 @@
 import 'react';
-export { cB as DEFAULT_REGISTER_LABELS, ei as RegisterForm, ej as RegisterFormProps, ek as RegisterLabels, el as RegisterValues } from '../delete-account-setting-CGVMckMw.js';
+export { cB as DEFAULT_REGISTER_LABELS, ei as RegisterForm, ej as RegisterFormProps, ek as RegisterLabels, el as RegisterValues } from '../delete-account-setting-DCFS5Vof.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
 import '../lib/clipping.js';
@@ -54,6 +54,8 @@ import '../components/image-grid.js';
 import '../components/lightbox.js';
 import '../components/write-lock.js';
 import './sign-in-form.js';
+import '../landing/access.js';
+import '../landing/landing-labels.js';
 import '../shell/topbar-controls.js';
 import '../theme/palette-presets.js';
 import '../theme/chart-palette.js';
@@ -75,6 +77,8 @@ import '../account/data-export-setting.js';
 import '../components/account-chips.js';
 import '../admin/admin-parts.js';
 import '../admin/admin-action-log.js';
+import '../settings/settings-labels.js';
+import '../demo/demo-labels.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';

package/dist/auth/sign-in-form.d.ts

@@ -1,5 +1,7 @@
 import * as react from 'react';
 import { ComponentPropsWithoutRef, ReactNode } from 'react';
+import { AccessChoice } from '../landing/access.js';
+import '../landing/landing-labels.js';
 
 /**
  * What a sign-in call answers, in the kit's words — docs/auth-harmonization.md §5.1,
@@ -142,6 +144,9 @@ interface SignInLabels {
      *  wait its `Retry-After` asks for, in seconds ({@link retryAfterSeconds}), or
      *  `undefined` (or `0`) without one. */
     rateLimited?: (seconds?: number) => string;
+    /** 0.31.0: the link after `noAccount` for an invitation-only app (`access` of kind
+     *  `request`) — a mail to support, in place of `register`. */
+    requestAccess?: string;
 }
 /** `Required`: every key, the 0.30 ones included, has its English here. */
 declare const DEFAULT_SIGN_IN_LABELS: Required<SignInLabels>;
@@ -185,6 +190,15 @@ interface SignInFormProps extends Omit<ComponentPropsWithoutRef<"div">, "onSubmi
     forgotHref?: string;
     /** "No account yet? Create account" goes here — `/register`. Left out, no line. */
     registerHref?: string;
+    /**
+     * 0.31.0 (docs/landing-demo-harmonization.md §4.2): how a visitor gets an account —
+     * the same value the landing's `PublicHeader` and `Hero` take. `{kind: "request",
+     * email}` turns the line into "No account yet? Request access", a mail to support with
+     * the subject and body of `accessAction` (every app is invitation-only); `{kind:
+     * "register", href}` keeps "Create account", to `href`. Wins over `registerHref`; left
+     * out, `registerHref` works as before.
+     */
+    access?: AccessChoice;
     /** The email field's start value — the reset page ends on "Sign in" with the address
      *  filled in (§6.3). */
     defaultEmail?: string;
@@ -290,6 +304,6 @@ interface SignInFormProps extends Omit<ComponentPropsWithoutRef<"div">, "onSubmi
  * The password is dropped from state once the credentials are answered; "Back to sign in"
  * returns to an empty password field.
  */
-declare function SignInForm({ onSubmit, onCode, onSetPassword, onPasskey, passkeyAutofill, forgotHref, registerHref, defaultEmail, emailTag, deactivatedContact, codeLength, recoveryCode, credentialsContent, twoFactorContent, passwordChangeContent, describeError, onStepChange, headingAs: Heading, labels: labelsProp, className, ...rest }: SignInFormProps): react.JSX.Element;
+declare function SignInForm({ onSubmit, onCode, onSetPassword, onPasskey, passkeyAutofill, forgotHref, registerHref, access, defaultEmail, emailTag, deactivatedContact, codeLength, recoveryCode, credentialsContent, twoFactorContent, passwordChangeContent, describeError, onStepChange, headingAs: Heading, labels: labelsProp, className, ...rest }: SignInFormProps): react.JSX.Element;
 
 export { DEFAULT_SIGN_IN_LABELS, type SignInAction, type SignInAnswer, type SignInCodeValues, type SignInCredentials, SignInForm, type SignInFormProps, type SignInLabels, type SignInNewPasswordValues, type SignInStep };

package/dist/auth/sign-in-form.js

@@ -10,6 +10,8 @@ import { CurrentPasswordInput } from "../components/danger-confirm.js";
 import { OneTimeCodeInput } from "../components/one-time-code-input.js";
 import { TextLink } from "../components/text-link.js";
 import { Button, Input } from "../components/ui.js";
+import { accessAction } from "../landing/access.js";
+import { useLandingLabels } from "../landing/landing-labels.js";
 import { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from "./auth-errors.js";
 import { taggedEmail } from "./email-tag.js";
 import { newPasswordProblem } from "./form-rules.js";
@@ -47,7 +49,8 @@ const DEFAULT_SIGN_IN_LABELS = {
   recoveryIntro: "Enter one of the backup codes you saved when you turned on two-factor authentication.",
   recoveryCodeHint: (length) => `${length} letters and digits. Dashes and spaces don\u2019t matter.`,
   recoveryCodeInvalid: "This backup code is not valid, or it has been used already.",
-  rateLimited: englishRateLimited
+  rateLimited: englishRateLimited,
+  requestAccess: "Request access"
 };
 function withContact(template, contact) {
   const node = typeof contact === "string" && contact.includes("@") ? /* @__PURE__ */ jsx(TextLink, { href: `mailto:${contact}`, tone: "secondary", children: contact }, "contact") : /* @__PURE__ */ jsx("span", { children: contact }, "contact");
@@ -68,6 +71,7 @@ function SignInForm({
   passkeyAutofill,
   forgotHref,
   registerHref,
+  access,
   defaultEmail = "",
   emailTag,
   deactivatedContact,
@@ -84,6 +88,11 @@ function SignInForm({
   ...rest
 }) {
   const labels = useKitLabels("signIn", DEFAULT_SIGN_IN_LABELS, labelsProp);
+  const landing = useLandingLabels();
+  const accountLink = access === void 0 ? registerHref === void 0 ? null : { href: registerHref, label: labels.register } : access.kind === "register" ? { href: access.href, label: labels.register } : {
+    href: accessAction(access, landing).href,
+    label: labels.requestAccess ?? DEFAULT_SIGN_IN_LABELS.requestAccess
+  };
   const [step, setStep] = useState("credentials");
   const [email, setEmail] = useState(defaultEmail);
   const [password, setPassword] = useState("");
@@ -409,10 +418,10 @@ function SignInForm({
       )
     ] }),
     forgotHref !== void 0 && /* @__PURE__ */ jsx("p", { className: "text-center text-sm", children: /* @__PURE__ */ jsx(TextLink, { href: forgotHref, tone: "secondary", children: labels.forgotPassword }) }),
-    registerHref !== void 0 && /* @__PURE__ */ jsxs("p", { className: "text-center text-sm text-[var(--text-secondary)]", children: [
+    accountLink !== null && /* @__PURE__ */ jsxs("p", { className: "text-center text-sm text-[var(--text-secondary)]", children: [
       labels.noAccount,
       " ",
-      /* @__PURE__ */ jsx(TextLink, { href: registerHref, tone: "primary", children: labels.register })
+      /* @__PURE__ */ jsx(TextLink, { href: accountLink.href, tone: "primary", children: accountLink.label })
     ] })
   ] });
 }