@eifi1/ui-kit 0.33.0 → 0.34.0

package/dist/admin/role-select.d.ts

@@ -1,100 +1,136 @@
-import 'react';
-import '../components/account-chips.js';
-export { cO as DEFAULT_ROLE_SELECT_LABELS, eR as RoleLock, eS as RoleLockCode, eT as RoleSelect, eU as RoleSelectLabels, eV as RoleSelectProps, eW as RolesEditor, eX as RolesEditorProps } from '../delete-account-setting-DiPX4Vue.js';
-import '../components/write-lock.js';
-import 'lucide-react';
-import '../lib/format.js';
-import '../components/chip.js';
-import '../components/field-parts.js';
-import '../components/tooltip.js';
-import '../hooks/use-anchored-rect.js';
-import '../lib/clipping.js';
-import '../data-table-labels-BJ5JE_X2.js';
-import '../components/data-table-sort.js';
-import '../components/swipeable-row.js';
-import '../components/status-dot.js';
-import '../components/progress-bar.js';
-import '../components/signed-amount.js';
-import '../components/stat-tile.js';
-import '../components/mini-calendar.js';
-import '../components/calendar-heatmap.js';
-import '../components/popover.js';
-import '../hooks/use-breakpoint.js';
-import '../components/field-sync.js';
-import '../wizard/types.js';
-import '../tour/tour.js';
-import '../search/command-palette.js';
-import '../search/global-search.js';
-import '../search/search-index.js';
-import '../components/month-picker.js';
-import '../components/page-contents.js';
-import '../components/series-chart-labels.js';
-import '../components/pie-chart-labels.js';
-import '../components/sparkline.js';
-import '../components/signature-pad.js';
-import '../components/password-strength.js';
-import '../components/swatch-picker.js';
-import '../components/tile-radio.js';
-import '../components/icon-picker.js';
-import '../components/dialog-frame.js';
-import '../components/modal.js';
-import '../hooks/use-search-param-state.js';
-import '../components/measured-grid.js';
-import '../components/user-avatar.js';
-import '../lib/person-name.js';
-import '../shell/topbar-action-menu.js';
-import '../components/menu-item.js';
-import '../components/floating-panel.js';
-import '../hooks/use-authed-src.js';
-import '../components/account-settings-labels.js';
-import '../components/bulk-action-bar.js';
-import '../components/list.js';
-import '../components/breadcrumbs.js';
-import '../components/toast.js';
-import '../components/description-list.js';
-import '../components/line-items.js';
-import '../components/error-boundary.js';
-import '../components/authed-image.js';
-import '../components/image-grid.js';
-import '../components/lightbox.js';
-import '../auth/sign-in-form.js';
-import '../landing/access.js';
-import '../landing/landing-labels.js';
-import '../shell/topbar-controls.js';
-import '../theme/palette-presets.js';
-import '../theme/chart-palette.js';
-import '../theme/theme-store.js';
-import 'zustand/middleware';
-import 'zustand';
-import '../auth/complete-name-dialog.js';
-import '../auth/forgot-password-form.js';
-import '../auth/status-parts.js';
-import '../auth/reset-password-form.js';
-import '../auth/verify-email.js';
-import '../auth/not-found-page.js';
-import '../auth/accept-invitation.js';
-import '../shell/company-switcher.js';
-import '../account/email-change-setting.js';
-import '../account/sessions-setting.js';
-import '../account/data-export-setting.js';
-import './admin-parts.js';
-import './admin-action-log.js';
-import '../settings/settings-labels.js';
-import '../demo/demo-labels.js';
-import '../components/appearance-labels.js';
-import '../theme/contrast.js';
-import '../theme/text-size.js';
-import '../components/reauth-dialog.js';
-import '../components/server-wake.js';
-import '../lib/server-wake.js';
-import '../components/translation-review-labels.js';
-import '../lib/translation-review.js';
-import '../components/country-select.js';
-import '../components/inline-edit-field.js';
-import '../lib/iban.js';
-import '../lib/phone.js';
-import '../components/sign-chip.js';
-import '../components/column-mapper.js';
-import '../lib/column-mapping.js';
-import '../lib/table-text.js';
-import '../components/focus-ring.js';
+import type { ReactNode } from "react";
+import { type LabelOverride } from "../i18n/kit-labels.js";
+import type { RoleVocabulary } from "../components/account-chips.js";
+import type { SelectProps } from "../components/select.js";
+import type { CommitScope } from "../components/write-lock.js";
+import { DEFAULT_ROLE_SELECT_LABELS } from "./role-select-labels.js";
+/**
+ * The role of an account, chosen by an admin (docs/user-admin-harmonization.md §3.3,
+ * §4.1, §7): {@link RoleSelect} for the apps where an account has ONE role (keksdose,
+ * Kurvenschmiede) and {@link RolesEditor} for kastlan, where an account has several per
+ * company.
+ *
+ * Both take the app's {@link RoleVocabulary} — the one `RoleChip` reads — so a role is
+ * called the same in the chip, the select and the editor. Neither sends a request: a role
+ * change is an `acknowledge` action (§4.2), so the app opens `AdminActionConfirm` from
+ * `onChange` and the value stays where the server has it until the server says otherwise.
+ *
+ * WHY THE REASONS. The server refuses the last active admin's demotion (`last_admin`),
+ * your own admin role (`self`), Kurvenschmiede's CUSTOMER for an account that owns work,
+ * kastlan's TENANT until a tenant portal exists (§4.1, §9.6). A choice the server will
+ * refuse is shown as unavailable, with why, rather than offered and answered with an
+ * error after a confirmation dialog — the 0.18 write-lock rule: a control that cannot
+ * act says so where it is. `"last_admin"` and `"self"` are the kit's words in every
+ * language; anything else is the app's own sentence.
+ */
+/** A reason the kit words itself. `self_action` is the server's code for `self` (the
+ *  account error codes), so a refusal's code can be handed on as it came. */
+export type RoleLockCode = "last_admin" | "self" | "self_action";
+/**
+ * Why a role (or the whole control) cannot be changed: one of the kit's
+ * {@link RoleLockCode}s, or the app's own words.
+ */
+export type RoleLock = RoleLockCode | (string & {}) | ReactNode;
+/** The `roleSelect` namespace — RoleSelect's and RolesEditor's words. */
+export interface RoleSelectLabels {
+    /** The select's name where no `label` is drawn, and RolesEditor's legend. "Role". */
+    label: string;
+    /** RolesEditor's legend. "Roles". */
+    rolesLegend: string;
+    /** The select's accessible name in a roster row — "Role of Ada Example". */
+    roleOf: (name: string) => string;
+    /** The whole control is locked: the account is the last active administrator. */
+    lockedLastAdmin: string;
+    /** The whole control is locked: it is the admin's own account. */
+    lockedSelf: string;
+    /** One option is unavailable for the last active administrator — said after the
+     *  role's name, inside the option. */
+    notForLastAdmin: string;
+    /** One option is unavailable on the admin's own account. */
+    notForSelf: string;
+    /** An unavailable option's text: the role's name and why. */
+    unavailable: (role: string, reason: string) => string;
+}
+export { DEFAULT_ROLE_SELECT_LABELS };
+export interface RoleSelectProps<R extends string = string> extends Omit<SelectProps, "value" | "defaultValue" | "onChange" | "children" | "multiple" | "disabledReason"> {
+    /** The role the server has. Controlled: a pick does not move the select until the
+     *  app's request lands and the row comes back with the new role. */
+    value: R | null | undefined;
+    /** The app's roles — what `RoleChip` reads. Their order is the list's. */
+    roles: RoleVocabulary<R>;
+    /** A role other than `value` was picked. The app asks `AdminActionConfirm` (an
+     *  `acknowledge` action, §4.2) and sends the change. */
+    onChange: (role: R) => void;
+    /**
+     * The roles that may be CHOSEN here, in the vocabulary's order whatever order this is
+     * in. Default: all of them. A role the account holds that is not offered (Kurvenschmiede's
+     * REVIEWER, given only through the reviewer scope, §9.6) is still shown, unavailable:
+     * a select that dropped it would show the account as something it is not.
+     */
+    offered?: readonly R[];
+    /**
+     * Why the whole choice is locked for this account: `"last_admin"`, `"self"`, or the
+     * app's own words. The select stays focusable and says so (Select's `disabledReason`).
+     */
+    disabledReason?: RoleLock;
+    /**
+     * Why ONE role cannot be chosen for this account: `"last_admin"`, `"self"`, or the
+     * app's own words (Kurvenschmiede: "owns work", for CUSTOMER) — a STRING, because a
+     * native option holds text only. The option is disabled and reads "Member (not for the
+     * last administrator)". `undefined` for an available role.
+     */
+    optionDisabledReason?: (role: R) => string | undefined;
+    /** The account's name, for the select's accessible name in a roster row ("Role of
+     *  Ada Example") where no `label` is drawn. */
+    name?: string;
+    labels?: LabelOverride<RoleSelectLabels>;
+}
+/**
+ * One role, picked from the app's vocabulary — Kurvenschmiede's roster `Select`
+ * (users-panel.tsx), with the reasons it left to the server's toast drawn in place.
+ *
+ * Unlabelled by default, for a table cell: named "Role of Ada Example" (`name`) or
+ * "Role". Pass `label` for a form field. Every {@link Select} prop passes through
+ * (`size`, `commit`, `hint`, `error`, `data-*`).
+ */
+export declare function RoleSelect<R extends string = string>({ value, roles, onChange, offered, disabledReason, optionDisabledReason, name, labels: labelsProp, label, ...rest }: RoleSelectProps<R>): import("react").JSX.Element;
+export interface RolesEditorProps<R extends string = string> {
+    /** The roles ticked — the draft the app holds while its dialog is open. */
+    value: readonly R[];
+    roles: RoleVocabulary<R>;
+    /** The new set, in the vocabulary's order (a role the editor does not offer, but the
+     *  account holds, is kept after the rest — CheckboxGroup's rule). */
+    onChange: (roles: R[]) => void;
+    /** The roles that may be ticked or unticked here. Default: all. kastlan leaves TENANT
+     *  out until a tenant portal exists (§4.1). */
+    offered?: readonly R[];
+    /** Why nothing can be changed: `"last_admin"`, `"self"` or the app's words. */
+    disabledReason?: RoleLock;
+    /** Why one role cannot be changed — shown under it, and the box keeps its state:
+     *  `"last_admin"` on the last administrator's ADMIN, say. */
+    optionDisabledReason?: (role: R) => RoleLock | undefined;
+    /** Default `roleSelect.rolesLegend` — "Roles". kastlan names the company: "Roles in
+     *  Example Ltd". */
+    legend?: ReactNode;
+    legendVisibility?: "visible" | "sr-only";
+    /** At least one role (kastlan's dialog saves none). Draws the required star. */
+    required?: boolean;
+    hint?: ReactNode;
+    error?: ReactNode;
+    columns?: 1 | 2 | 3 | 4;
+    /** The editor SAVES on change — the write lock's opt-in (CheckboxGroup's `commit`). */
+    commit?: CommitScope;
+    className?: string;
+    labels?: LabelOverride<RoleSelectLabels>;
+}
+/**
+ * Several roles at once — kastlan's manage-roles dialog (`ChoiceCardGroup multiple`),
+ * which holds an account's roles in the CURRENT company (§4.1: `PUT /admin/users/{id}/roles`).
+ * A kit {@link CheckboxGroup} of the vocabulary, with the reasons of {@link RoleSelect}:
+ * a role that cannot change keeps its box as it is and says why under it.
+ *
+ * A field, not a form: the app's dialog holds the draft, and its Save goes through
+ * `AdminActionConfirm` (`acknowledge`, §4.2) — which can draw this editor as its
+ * `children`, so the roles and the tick are one dialog.
+ */
+export declare function RolesEditor<R extends string = string>({ value, roles, onChange, offered, disabledReason, optionDisabledReason, legend, legendVisibility, required, hint, error, columns, commit, className, labels: labelsProp, }: RolesEditorProps<R>): import("react").JSX.Element;

package/dist/admin/role-select.js

@@ -1,18 +1,10 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useKitLabels } from "../i18n/kit-labels.js";
+import { hasContent } from "../lib/presence.js";
 import { CheckboxGroup } from "../components/checkbox-group.js";
-import { Select } from "../components/ui.js";
-const DEFAULT_ROLE_SELECT_LABELS = {
-  label: "Role",
-  rolesLegend: "Roles",
-  roleOf: (name) => `Role of ${name}`,
-  lockedLastAdmin: "The last active administrator keeps this role.",
-  lockedSelf: "You can\u2019t change your own role.",
-  notForLastAdmin: "not for the last administrator",
-  notForSelf: "not for your own account",
-  unavailable: (role, reason) => `${role} (${reason})`
-};
+import { Select } from "../components/select.js";
+import { DEFAULT_ROLE_SELECT_LABELS } from "./role-select-labels.js";
 function lockText(reason, labels) {
   if (reason === "last_admin") return labels.lockedLastAdmin;
   if (reason === "self" || reason === "self_action") return labels.lockedSelf;
@@ -23,9 +15,6 @@ function optionReasonText(reason, labels) {
   if (reason === "self" || reason === "self_action") return labels.notForSelf;
   return reason;
 }
-function present(node) {
-  return node !== void 0 && node !== null && node !== false && node !== "";
-}
 function keysOf(roles) {
   return Object.keys(roles);
 }
@@ -53,7 +42,7 @@ function RoleSelect({
       label,
       "aria-label": ariaLabel,
       value: held ?? "",
-      disabledReason: present(disabledReason) ? lockText(disabledReason, labels) : void 0,
+      disabledReason: hasContent(disabledReason) ? lockText(disabledReason, labels) : void 0,
       onChange: (event) => {
         const next = event.target.value;
         if (next && next !== held) onChange(next);
@@ -63,7 +52,7 @@ function RoleSelect({
         all.filter((role) => choosable.has(role) || role === held).map((role) => {
           const word = roles[role].label;
           const reason = role === held ? void 0 : optionDisabledReason?.(role);
-          const unavailable = !choosable.has(role) || present(reason);
+          const unavailable = !choosable.has(role) || hasContent(reason);
           return /* @__PURE__ */ jsx("option", { value: role, disabled: unavailable && role !== held, children: reason ? labels.unavailable(word, optionReasonText(reason, labels)) : word }, role);
         }),
         held !== null && !all.includes(held) && /* @__PURE__ */ jsx("option", { value: held, disabled: true, children: held })
@@ -94,7 +83,7 @@ function RolesEditor({
   const held = new Set(value);
   const options = all.filter((role) => choosable.has(role) || held.has(role)).map((role) => {
     const reason = optionDisabledReason?.(role);
-    const locked = present(reason);
+    const locked = hasContent(reason);
     return {
       value: role,
       label: roles[role].label,
@@ -115,7 +104,7 @@ function RolesEditor({
       error,
       columns,
       commit,
-      disabledReason: present(disabledReason) ? lockText(disabledReason, labels) : void 0,
+      disabledReason: hasContent(disabledReason) ? lockText(disabledReason, labels) : void 0,
       className
     }
   );

package/dist/admin/role-select.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/admin/role-select.tsx"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport type { RoleVocabulary } from \"../components/account-chips\";\nimport { CheckboxGroup } from \"../components/checkbox-group\";\nimport type { CheckboxGroupOption } from \"../components/checkbox-group\";\nimport { Select } from \"../components/ui\";\nimport type { SelectProps } from \"../components/ui\";\nimport type { CommitScope } from \"../components/write-lock\";\n\n/**\n * The role of an account, chosen by an admin (docs/user-admin-harmonization.md §3.3,\n * §4.1, §7): {@link RoleSelect} for the apps where an account has ONE role (keksdose,\n * Kurvenschmiede) and {@link RolesEditor} for kastlan, where an account has several per\n * company.\n *\n * Both take the app's {@link RoleVocabulary} — the one `RoleChip` reads — so a role is\n * called the same in the chip, the select and the editor. Neither sends a request: a role\n * change is an `acknowledge` action (§4.2), so the app opens `AdminActionConfirm` from\n * `onChange` and the value stays where the server has it until the server says otherwise.\n *\n * WHY THE REASONS. The server refuses the last active admin's demotion (`last_admin`),\n * your own admin role (`self`), Kurvenschmiede's CUSTOMER for an account that owns work,\n * kastlan's TENANT until a tenant portal exists (§4.1, §9.6). A choice the server will\n * refuse is shown as unavailable, with why, rather than offered and answered with an\n * error after a confirmation dialog — the 0.18 write-lock rule: a control that cannot\n * act says so where it is. `\"last_admin\"` and `\"self\"` are the kit's words in every\n * language; anything else is the app's own sentence.\n */\n\n/** A reason the kit words itself. `self_action` is the server's code for `self` (the\n *  account error codes), so a refusal's code can be handed on as it came. */\nexport type RoleLockCode = \"last_admin\" | \"self\" | \"self_action\";\n\n/**\n * Why a role (or the whole control) cannot be changed: one of the kit's\n * {@link RoleLockCode}s, or the app's own words.\n */\nexport type RoleLock = RoleLockCode | (string & {}) | ReactNode;\n\n/** The `roleSelect` namespace — RoleSelect's and RolesEditor's words. */\nexport interface RoleSelectLabels {\n  /** The select's name where no `label` is drawn, and RolesEditor's legend. \"Role\". */\n  label: string;\n  /** RolesEditor's legend. \"Roles\". */\n  rolesLegend: string;\n  /** The select's accessible name in a roster row — \"Role of Ada Example\". */\n  roleOf: (name: string) => string;\n  /** The whole control is locked: the account is the last active administrator. */\n  lockedLastAdmin: string;\n  /** The whole control is locked: it is the admin's own account. */\n  lockedSelf: string;\n  /** One option is unavailable for the last active administrator — said after the\n   *  role's name, inside the option. */\n  notForLastAdmin: string;\n  /** One option is unavailable on the admin's own account. */\n  notForSelf: string;\n  /** An unavailable option's text: the role's name and why. */\n  unavailable: (role: string, reason: string) => string;\n}\n\nexport const DEFAULT_ROLE_SELECT_LABELS: RoleSelectLabels = {\n  label: \"Role\",\n  rolesLegend: \"Roles\",\n  roleOf: (name) => `Role of ${name}`,\n  lockedLastAdmin: \"The last active administrator keeps this role.\",\n  lockedSelf: \"You can’t change your own role.\",\n  notForLastAdmin: \"not for the last administrator\",\n  notForSelf: \"not for your own account\",\n  unavailable: (role, reason) => `${role} (${reason})`,\n};\n\n/** The whole-control reason, the kit's codes in the kit's words. */\nfunction lockText(reason: RoleLock, labels: RoleSelectLabels): ReactNode {\n  if (reason === \"last_admin\") return labels.lockedLastAdmin;\n  if (reason === \"self\" || reason === \"self_action\") return labels.lockedSelf;\n  return reason;\n}\n\n/** An option's reason as the text a native `<option>` can hold. */\nfunction optionReasonText(reason: string, labels: RoleSelectLabels): string {\n  if (reason === \"last_admin\") return labels.notForLastAdmin;\n  if (reason === \"self\" || reason === \"self_action\") return labels.notForSelf;\n  return reason;\n}\n\nfunction present(node: ReactNode): boolean {\n  return node !== undefined && node !== null && node !== false && node !== \"\";\n}\n\n/** The vocabulary's keys, in its own order. */\nfunction keysOf<R extends string>(roles: RoleVocabulary<R>): R[] {\n  return Object.keys(roles) as R[];\n}\n\n/* ── RoleSelect ─────────────────────────────────────────────────────────────── */\n\nexport interface RoleSelectProps<R extends string = string>\n  extends Omit<SelectProps, \"value\" | \"defaultValue\" | \"onChange\" | \"children\" | \"multiple\" | \"disabledReason\"> {\n  /** The role the server has. Controlled: a pick does not move the select until the\n   *  app's request lands and the row comes back with the new role. */\n  value: R | null | undefined;\n  /** The app's roles — what `RoleChip` reads. Their order is the list's. */\n  roles: RoleVocabulary<R>;\n  /** A role other than `value` was picked. The app asks `AdminActionConfirm` (an\n   *  `acknowledge` action, §4.2) and sends the change. */\n  onChange: (role: R) => void;\n  /**\n   * The roles that may be CHOSEN here, in the vocabulary's order whatever order this is\n   * in. Default: all of them. A role the account holds that is not offered (Kurvenschmiede's\n   * REVIEWER, given only through the reviewer scope, §9.6) is still shown, unavailable:\n   * a select that dropped it would show the account as something it is not.\n   */\n  offered?: readonly R[];\n  /**\n   * Why the whole choice is locked for this account: `\"last_admin\"`, `\"self\"`, or the\n   * app's own words. The select stays focusable and says so (Select's `disabledReason`).\n   */\n  disabledReason?: RoleLock;\n  /**\n   * Why ONE role cannot be chosen for this account: `\"last_admin\"`, `\"self\"`, or the\n   * app's own words (Kurvenschmiede: \"owns work\", for CUSTOMER) — a STRING, because a\n   * native option holds text only. The option is disabled and reads \"Member (not for the\n   * last administrator)\". `undefined` for an available role.\n   */\n  optionDisabledReason?: (role: R) => string | undefined;\n  /** The account's name, for the select's accessible name in a roster row (\"Role of\n   *  Ada Example\") where no `label` is drawn. */\n  name?: string;\n  labels?: Partial<RoleSelectLabels>;\n}\n\n/**\n * One role, picked from the app's vocabulary — Kurvenschmiede's roster `Select`\n * (users-panel.tsx), with the reasons it left to the server's toast drawn in place.\n *\n * Unlabelled by default, for a table cell: named \"Role of Ada Example\" (`name`) or\n * \"Role\". Pass `label` for a form field. Every {@link Select} prop passes through\n * (`size`, `commit`, `hint`, `error`, `data-*`).\n */\nexport function RoleSelect<R extends string = string>({\n  value,\n  roles,\n  onChange,\n  offered,\n  disabledReason,\n  optionDisabledReason,\n  name,\n  labels: labelsProp,\n  label,\n  ...rest\n}: RoleSelectProps<R>) {\n  const labels = useKitLabels(\"roleSelect\", DEFAULT_ROLE_SELECT_LABELS, labelsProp);\n  const all = keysOf(roles);\n  const choosable = new Set<R>(offered ?? all);\n  const held = value ?? null;\n  // A cell has no room for a visible label: the select is named for the account it\n  // belongs to, so fifty of them in a roster are not fifty \"Role\"s.\n  const ariaLabel =\n    label === undefined ? (rest[\"aria-label\"] ?? (name ? labels.roleOf(name) : labels.label)) : rest[\"aria-label\"];\n  return (\n    <Select\n      {...rest}\n      label={label}\n      aria-label={ariaLabel}\n      value={held ?? \"\"}\n      disabledReason={present(disabledReason) ? lockText(disabledReason, labels) : undefined}\n      onChange={(event) => {\n        const next = event.target.value as R;\n        if (next && next !== held) onChange(next);\n      }}\n    >\n      {held === null && <option value=\"\" disabled />}\n      {all\n        .filter((role) => choosable.has(role) || role === held)\n        .map((role) => {\n          const word = roles[role].label;\n          const reason = role === held ? undefined : optionDisabledReason?.(role);\n          const unavailable = !choosable.has(role) || present(reason);\n          return (\n            <option key={role} value={role} disabled={unavailable && role !== held}>\n              {reason ? labels.unavailable(word, optionReasonText(reason, labels)) : word}\n            </option>\n          );\n        })}\n      {/* A role the vocabulary does not know (an older client against a newer API) is\n          still the account's role: shown as its key, as RoleChip shows it. */}\n      {held !== null && !all.includes(held) && (\n        <option value={held} disabled>\n          {held}\n        </option>\n      )}\n    </Select>\n  );\n}\n\n/* ── RolesEditor ────────────────────────────────────────────────────────────── */\n\nexport interface RolesEditorProps<R extends string = string> {\n  /** The roles ticked — the draft the app holds while its dialog is open. */\n  value: readonly R[];\n  roles: RoleVocabulary<R>;\n  /** The new set, in the vocabulary's order (a role the editor does not offer, but the\n   *  account holds, is kept after the rest — CheckboxGroup's rule). */\n  onChange: (roles: R[]) => void;\n  /** The roles that may be ticked or unticked here. Default: all. kastlan leaves TENANT\n   *  out until a tenant portal exists (§4.1). */\n  offered?: readonly R[];\n  /** Why nothing can be changed: `\"last_admin\"`, `\"self\"` or the app's words. */\n  disabledReason?: RoleLock;\n  /** Why one role cannot be changed — shown under it, and the box keeps its state:\n   *  `\"last_admin\"` on the last administrator's ADMIN, say. */\n  optionDisabledReason?: (role: R) => RoleLock | undefined;\n  /** Default `roleSelect.rolesLegend` — \"Roles\". kastlan names the company: \"Roles in\n   *  Example Ltd\". */\n  legend?: ReactNode;\n  legendVisibility?: \"visible\" | \"sr-only\";\n  /** At least one role (kastlan's dialog saves none). Draws the required star. */\n  required?: boolean;\n  hint?: ReactNode;\n  error?: ReactNode;\n  columns?: 1 | 2 | 3 | 4;\n  /** The editor SAVES on change — the write lock's opt-in (CheckboxGroup's `commit`). */\n  commit?: CommitScope;\n  className?: string;\n  labels?: Partial<RoleSelectLabels>;\n}\n\n/**\n * Several roles at once — kastlan's manage-roles dialog (`ChoiceCardGroup multiple`),\n * which holds an account's roles in the CURRENT company (§4.1: `PUT /admin/users/{id}/roles`).\n * A kit {@link CheckboxGroup} of the vocabulary, with the reasons of {@link RoleSelect}:\n * a role that cannot change keeps its box as it is and says why under it.\n *\n * A field, not a form: the app's dialog holds the draft, and its Save goes through\n * `AdminActionConfirm` (`acknowledge`, §4.2) — which can draw this editor as its\n * `children`, so the roles and the tick are one dialog.\n */\nexport function RolesEditor<R extends string = string>({\n  value,\n  roles,\n  onChange,\n  offered,\n  disabledReason,\n  optionDisabledReason,\n  legend,\n  legendVisibility,\n  required,\n  hint,\n  error,\n  columns,\n  commit,\n  className,\n  labels: labelsProp,\n}: RolesEditorProps<R>) {\n  const labels = useKitLabels(\"roleSelect\", DEFAULT_ROLE_SELECT_LABELS, labelsProp);\n  const all = keysOf(roles);\n  const choosable = new Set<R>(offered ?? all);\n  const held = new Set<R>(value);\n  const options: CheckboxGroupOption<R>[] = all\n    .filter((role) => choosable.has(role) || held.has(role))\n    .map((role) => {\n      const reason = optionDisabledReason?.(role);\n      const locked = present(reason);\n      return {\n        value: role,\n        label: roles[role].label,\n        hint: locked ? lockText(reason, labels) : undefined,\n        disabled: locked || !choosable.has(role),\n      };\n    });\n  return (\n    <CheckboxGroup<R>\n      legend={legend ?? labels.rolesLegend}\n      legendVisibility={legendVisibility}\n      options={options}\n      value={[...value]}\n      onChange={onChange}\n      required={required}\n      hint={hint}\n      error={error}\n      columns={columns}\n      commit={commit}\n      disabledReason={present(disabledReason) ? lockText(disabledReason, labels) : undefined}\n      className={className}\n    />\n  );\n}\n"],"mappings":";AAgKI,SAWoB,KAXpB;AA/JJ,SAAS,oBAAoB;AAE7B,SAAS,qBAAqB;AAE9B,SAAS,cAAc;AAuDhB,MAAM,6BAA+C;AAAA,EAC1D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,QAAQ,CAAC,SAAS,WAAW,IAAI;AAAA,EACjC,iBAAiB;AAAA,EACjB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,YAAY;AAAA,EACZ,aAAa,CAAC,MAAM,WAAW,GAAG,IAAI,KAAK,MAAM;AACnD;AAGA,SAAS,SAAS,QAAkB,QAAqC;AACvE,MAAI,WAAW,aAAc,QAAO,OAAO;AAC3C,MAAI,WAAW,UAAU,WAAW,cAAe,QAAO,OAAO;AACjE,SAAO;AACT;AAGA,SAAS,iBAAiB,QAAgB,QAAkC;AAC1E,MAAI,WAAW,aAAc,QAAO,OAAO;AAC3C,MAAI,WAAW,UAAU,WAAW,cAAe,QAAO,OAAO;AACjE,SAAO;AACT;AAEA,SAAS,QAAQ,MAA0B;AACzC,SAAO,SAAS,UAAa,SAAS,QAAQ,SAAS,SAAS,SAAS;AAC3E;AAGA,SAAS,OAAyB,OAA+B;AAC/D,SAAO,OAAO,KAAK,KAAK;AAC1B;AA+CO,SAAS,WAAsC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAAuB;AACrB,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,QAAM,MAAM,OAAO,KAAK;AACxB,QAAM,YAAY,IAAI,IAAO,WAAW,GAAG;AAC3C,QAAM,OAAO,SAAS;AAGtB,QAAM,YACJ,UAAU,SAAa,KAAK,YAAY,MAAM,OAAO,OAAO,OAAO,IAAI,IAAI,OAAO,SAAU,KAAK,YAAY;AAC/G,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ;AAAA,MACA,cAAY;AAAA,MACZ,OAAO,QAAQ;AAAA,MACf,gBAAgB,QAAQ,cAAc,IAAI,SAAS,gBAAgB,MAAM,IAAI;AAAA,MAC7E,UAAU,CAAC,UAAU;AACnB,cAAM,OAAO,MAAM,OAAO;AAC1B,YAAI,QAAQ,SAAS,KAAM,UAAS,IAAI;AAAA,MAC1C;AAAA,MAEC;AAAA,iBAAS,QAAQ,oBAAC,YAAO,OAAM,IAAG,UAAQ,MAAC;AAAA,QAC3C,IACE,OAAO,CAAC,SAAS,UAAU,IAAI,IAAI,KAAK,SAAS,IAAI,EACrD,IAAI,CAAC,SAAS;AACb,gBAAM,OAAO,MAAM,IAAI,EAAE;AACzB,gBAAM,SAAS,SAAS,OAAO,SAAY,uBAAuB,IAAI;AACtE,gBAAM,cAAc,CAAC,UAAU,IAAI,IAAI,KAAK,QAAQ,MAAM;AAC1D,iBACE,oBAAC,YAAkB,OAAO,MAAM,UAAU,eAAe,SAAS,MAC/D,mBAAS,OAAO,YAAY,MAAM,iBAAiB,QAAQ,MAAM,CAAC,IAAI,QAD5D,IAEb;AAAA,QAEJ,CAAC;AAAA,QAGF,SAAS,QAAQ,CAAC,IAAI,SAAS,IAAI,KAClC,oBAAC,YAAO,OAAO,MAAM,UAAQ,MAC1B,gBACH;AAAA;AAAA;AAAA,EAEJ;AAEJ;AA4CO,SAAS,YAAuC;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAAwB;AACtB,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,QAAM,MAAM,OAAO,KAAK;AACxB,QAAM,YAAY,IAAI,IAAO,WAAW,GAAG;AAC3C,QAAM,OAAO,IAAI,IAAO,KAAK;AAC7B,QAAM,UAAoC,IACvC,OAAO,CAAC,SAAS,UAAU,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,EACtD,IAAI,CAAC,SAAS;AACb,UAAM,SAAS,uBAAuB,IAAI;AAC1C,UAAM,SAAS,QAAQ,MAAM;AAC7B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO,MAAM,IAAI,EAAE;AAAA,MACnB,MAAM,SAAS,SAAS,QAAQ,MAAM,IAAI;AAAA,MAC1C,UAAU,UAAU,CAAC,UAAU,IAAI,IAAI;AAAA,IACzC;AAAA,EACF,CAAC;AACH,SACE;AAAA,IAAC;AAAA;AAAA,MACC,QAAQ,UAAU,OAAO;AAAA,MACzB;AAAA,MACA;AAAA,MACA,OAAO,CAAC,GAAG,KAAK;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,QAAQ,cAAc,IAAI,SAAS,gBAAgB,MAAM,IAAI;AAAA,MAC7E;AAAA;AAAA,EACF;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/admin/role-select.tsx"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { hasContent } from \"../lib/presence\";\nimport type { RoleVocabulary } from \"../components/account-chips\";\nimport { CheckboxGroup } from \"../components/checkbox-group\";\nimport type { CheckboxGroupOption } from \"../components/checkbox-group\";\nimport { Select } from \"../components/select\";\nimport type { SelectProps } from \"../components/select\";\nimport type { CommitScope } from \"../components/write-lock\";\nimport { DEFAULT_ROLE_SELECT_LABELS } from \"./role-select-labels\";\n\n/**\n * The role of an account, chosen by an admin (docs/user-admin-harmonization.md §3.3,\n * §4.1, §7): {@link RoleSelect} for the apps where an account has ONE role (keksdose,\n * Kurvenschmiede) and {@link RolesEditor} for kastlan, where an account has several per\n * company.\n *\n * Both take the app's {@link RoleVocabulary} — the one `RoleChip` reads — so a role is\n * called the same in the chip, the select and the editor. Neither sends a request: a role\n * change is an `acknowledge` action (§4.2), so the app opens `AdminActionConfirm` from\n * `onChange` and the value stays where the server has it until the server says otherwise.\n *\n * WHY THE REASONS. The server refuses the last active admin's demotion (`last_admin`),\n * your own admin role (`self`), Kurvenschmiede's CUSTOMER for an account that owns work,\n * kastlan's TENANT until a tenant portal exists (§4.1, §9.6). A choice the server will\n * refuse is shown as unavailable, with why, rather than offered and answered with an\n * error after a confirmation dialog — the 0.18 write-lock rule: a control that cannot\n * act says so where it is. `\"last_admin\"` and `\"self\"` are the kit's words in every\n * language; anything else is the app's own sentence.\n */\n\n/** A reason the kit words itself. `self_action` is the server's code for `self` (the\n *  account error codes), so a refusal's code can be handed on as it came. */\nexport type RoleLockCode = \"last_admin\" | \"self\" | \"self_action\";\n\n/**\n * Why a role (or the whole control) cannot be changed: one of the kit's\n * {@link RoleLockCode}s, or the app's own words.\n */\nexport type RoleLock = RoleLockCode | (string & {}) | ReactNode;\n\n/** The `roleSelect` namespace — RoleSelect's and RolesEditor's words. */\nexport interface RoleSelectLabels {\n  /** The select's name where no `label` is drawn, and RolesEditor's legend. \"Role\". */\n  label: string;\n  /** RolesEditor's legend. \"Roles\". */\n  rolesLegend: string;\n  /** The select's accessible name in a roster row — \"Role of Ada Example\". */\n  roleOf: (name: string) => string;\n  /** The whole control is locked: the account is the last active administrator. */\n  lockedLastAdmin: string;\n  /** The whole control is locked: it is the admin's own account. */\n  lockedSelf: string;\n  /** One option is unavailable for the last active administrator — said after the\n   *  role's name, inside the option. */\n  notForLastAdmin: string;\n  /** One option is unavailable on the admin's own account. */\n  notForSelf: string;\n  /** An unavailable option's text: the role's name and why. */\n  unavailable: (role: string, reason: string) => string;\n}\n\n// Defined in ./role-select-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_ROLE_SELECT_LABELS };\n\n/** The whole-control reason, the kit's codes in the kit's words. */\nfunction lockText(reason: RoleLock, labels: RoleSelectLabels): ReactNode {\n  if (reason === \"last_admin\") return labels.lockedLastAdmin;\n  if (reason === \"self\" || reason === \"self_action\") return labels.lockedSelf;\n  return reason;\n}\n\n/** An option's reason as the text a native `<option>` can hold. */\nfunction optionReasonText(reason: string, labels: RoleSelectLabels): string {\n  if (reason === \"last_admin\") return labels.notForLastAdmin;\n  if (reason === \"self\" || reason === \"self_action\") return labels.notForSelf;\n  return reason;\n}\n\n/** The vocabulary's keys, in its own order. */\nfunction keysOf<R extends string>(roles: RoleVocabulary<R>): R[] {\n  return Object.keys(roles) as R[];\n}\n\n/* ── RoleSelect ─────────────────────────────────────────────────────────────── */\n\nexport interface RoleSelectProps<R extends string = string>\n  extends Omit<SelectProps, \"value\" | \"defaultValue\" | \"onChange\" | \"children\" | \"multiple\" | \"disabledReason\"> {\n  /** The role the server has. Controlled: a pick does not move the select until the\n   *  app's request lands and the row comes back with the new role. */\n  value: R | null | undefined;\n  /** The app's roles — what `RoleChip` reads. Their order is the list's. */\n  roles: RoleVocabulary<R>;\n  /** A role other than `value` was picked. The app asks `AdminActionConfirm` (an\n   *  `acknowledge` action, §4.2) and sends the change. */\n  onChange: (role: R) => void;\n  /**\n   * The roles that may be CHOSEN here, in the vocabulary's order whatever order this is\n   * in. Default: all of them. A role the account holds that is not offered (Kurvenschmiede's\n   * REVIEWER, given only through the reviewer scope, §9.6) is still shown, unavailable:\n   * a select that dropped it would show the account as something it is not.\n   */\n  offered?: readonly R[];\n  /**\n   * Why the whole choice is locked for this account: `\"last_admin\"`, `\"self\"`, or the\n   * app's own words. The select stays focusable and says so (Select's `disabledReason`).\n   */\n  disabledReason?: RoleLock;\n  /**\n   * Why ONE role cannot be chosen for this account: `\"last_admin\"`, `\"self\"`, or the\n   * app's own words (Kurvenschmiede: \"owns work\", for CUSTOMER) — a STRING, because a\n   * native option holds text only. The option is disabled and reads \"Member (not for the\n   * last administrator)\". `undefined` for an available role.\n   */\n  optionDisabledReason?: (role: R) => string | undefined;\n  /** The account's name, for the select's accessible name in a roster row (\"Role of\n   *  Ada Example\") where no `label` is drawn. */\n  name?: string;\n  labels?: LabelOverride<RoleSelectLabels>;\n}\n\n/**\n * One role, picked from the app's vocabulary — Kurvenschmiede's roster `Select`\n * (users-panel.tsx), with the reasons it left to the server's toast drawn in place.\n *\n * Unlabelled by default, for a table cell: named \"Role of Ada Example\" (`name`) or\n * \"Role\". Pass `label` for a form field. Every {@link Select} prop passes through\n * (`size`, `commit`, `hint`, `error`, `data-*`).\n */\nexport function RoleSelect<R extends string = string>({\n  value,\n  roles,\n  onChange,\n  offered,\n  disabledReason,\n  optionDisabledReason,\n  name,\n  labels: labelsProp,\n  label,\n  ...rest\n}: RoleSelectProps<R>) {\n  const labels = useKitLabels(\"roleSelect\", DEFAULT_ROLE_SELECT_LABELS, labelsProp);\n  const all = keysOf(roles);\n  const choosable = new Set<R>(offered ?? all);\n  const held = value ?? null;\n  // A cell has no room for a visible label: the select is named for the account it\n  // belongs to, so fifty of them in a roster are not fifty \"Role\"s.\n  const ariaLabel =\n    label === undefined ? (rest[\"aria-label\"] ?? (name ? labels.roleOf(name) : labels.label)) : rest[\"aria-label\"];\n  return (\n    <Select\n      {...rest}\n      label={label}\n      aria-label={ariaLabel}\n      value={held ?? \"\"}\n      disabledReason={hasContent(disabledReason) ? lockText(disabledReason, labels) : undefined}\n      onChange={(event) => {\n        const next = event.target.value as R;\n        if (next && next !== held) onChange(next);\n      }}\n    >\n      {held === null && <option value=\"\" disabled />}\n      {all\n        .filter((role) => choosable.has(role) || role === held)\n        .map((role) => {\n          const word = roles[role].label;\n          const reason = role === held ? undefined : optionDisabledReason?.(role);\n          const unavailable = !choosable.has(role) || hasContent(reason);\n          return (\n            <option key={role} value={role} disabled={unavailable && role !== held}>\n              {reason ? labels.unavailable(word, optionReasonText(reason, labels)) : word}\n            </option>\n          );\n        })}\n      {/* A role the vocabulary does not know (an older client against a newer API) is\n          still the account's role: shown as its key, as RoleChip shows it. */}\n      {held !== null && !all.includes(held) && (\n        <option value={held} disabled>\n          {held}\n        </option>\n      )}\n    </Select>\n  );\n}\n\n/* ── RolesEditor ────────────────────────────────────────────────────────────── */\n\nexport interface RolesEditorProps<R extends string = string> {\n  /** The roles ticked — the draft the app holds while its dialog is open. */\n  value: readonly R[];\n  roles: RoleVocabulary<R>;\n  /** The new set, in the vocabulary's order (a role the editor does not offer, but the\n   *  account holds, is kept after the rest — CheckboxGroup's rule). */\n  onChange: (roles: R[]) => void;\n  /** The roles that may be ticked or unticked here. Default: all. kastlan leaves TENANT\n   *  out until a tenant portal exists (§4.1). */\n  offered?: readonly R[];\n  /** Why nothing can be changed: `\"last_admin\"`, `\"self\"` or the app's words. */\n  disabledReason?: RoleLock;\n  /** Why one role cannot be changed — shown under it, and the box keeps its state:\n   *  `\"last_admin\"` on the last administrator's ADMIN, say. */\n  optionDisabledReason?: (role: R) => RoleLock | undefined;\n  /** Default `roleSelect.rolesLegend` — \"Roles\". kastlan names the company: \"Roles in\n   *  Example Ltd\". */\n  legend?: ReactNode;\n  legendVisibility?: \"visible\" | \"sr-only\";\n  /** At least one role (kastlan's dialog saves none). Draws the required star. */\n  required?: boolean;\n  hint?: ReactNode;\n  error?: ReactNode;\n  columns?: 1 | 2 | 3 | 4;\n  /** The editor SAVES on change — the write lock's opt-in (CheckboxGroup's `commit`). */\n  commit?: CommitScope;\n  className?: string;\n  labels?: LabelOverride<RoleSelectLabels>;\n}\n\n/**\n * Several roles at once — kastlan's manage-roles dialog (`ChoiceCardGroup multiple`),\n * which holds an account's roles in the CURRENT company (§4.1: `PUT /admin/users/{id}/roles`).\n * A kit {@link CheckboxGroup} of the vocabulary, with the reasons of {@link RoleSelect}:\n * a role that cannot change keeps its box as it is and says why under it.\n *\n * A field, not a form: the app's dialog holds the draft, and its Save goes through\n * `AdminActionConfirm` (`acknowledge`, §4.2) — which can draw this editor as its\n * `children`, so the roles and the tick are one dialog.\n */\nexport function RolesEditor<R extends string = string>({\n  value,\n  roles,\n  onChange,\n  offered,\n  disabledReason,\n  optionDisabledReason,\n  legend,\n  legendVisibility,\n  required,\n  hint,\n  error,\n  columns,\n  commit,\n  className,\n  labels: labelsProp,\n}: RolesEditorProps<R>) {\n  const labels = useKitLabels(\"roleSelect\", DEFAULT_ROLE_SELECT_LABELS, labelsProp);\n  const all = keysOf(roles);\n  const choosable = new Set<R>(offered ?? all);\n  const held = new Set<R>(value);\n  const options: CheckboxGroupOption<R>[] = all\n    .filter((role) => choosable.has(role) || held.has(role))\n    .map((role) => {\n      const reason = optionDisabledReason?.(role);\n      const locked = hasContent(reason);\n      return {\n        value: role,\n        label: roles[role].label,\n        hint: locked ? lockText(reason, labels) : undefined,\n        disabled: locked || !choosable.has(role),\n      };\n    });\n  return (\n    <CheckboxGroup<R>\n      legend={legend ?? labels.rolesLegend}\n      legendVisibility={legendVisibility}\n      options={options}\n      value={[...value]}\n      onChange={onChange}\n      required={required}\n      hint={hint}\n      error={error}\n      columns={columns}\n      commit={commit}\n      disabledReason={hasContent(disabledReason) ? lockText(disabledReason, labels) : undefined}\n      className={className}\n    />\n  );\n}\n"],"mappings":";AAsJI,SAWoB,KAXpB;AArJJ,SAAS,oBAAwC;AACjD,SAAS,kBAAkB;AAE3B,SAAS,qBAAqB;AAE9B,SAAS,cAAc;AAGvB,SAAS,kCAAkC;AAyD3C,SAAS,SAAS,QAAkB,QAAqC;AACvE,MAAI,WAAW,aAAc,QAAO,OAAO;AAC3C,MAAI,WAAW,UAAU,WAAW,cAAe,QAAO,OAAO;AACjE,SAAO;AACT;AAGA,SAAS,iBAAiB,QAAgB,QAAkC;AAC1E,MAAI,WAAW,aAAc,QAAO,OAAO;AAC3C,MAAI,WAAW,UAAU,WAAW,cAAe,QAAO,OAAO;AACjE,SAAO;AACT;AAGA,SAAS,OAAyB,OAA+B;AAC/D,SAAO,OAAO,KAAK,KAAK;AAC1B;AA+CO,SAAS,WAAsC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAAuB;AACrB,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,QAAM,MAAM,OAAO,KAAK;AACxB,QAAM,YAAY,IAAI,IAAO,WAAW,GAAG;AAC3C,QAAM,OAAO,SAAS;AAGtB,QAAM,YACJ,UAAU,SAAa,KAAK,YAAY,MAAM,OAAO,OAAO,OAAO,IAAI,IAAI,OAAO,SAAU,KAAK,YAAY;AAC/G,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ;AAAA,MACA,cAAY;AAAA,MACZ,OAAO,QAAQ;AAAA,MACf,gBAAgB,WAAW,cAAc,IAAI,SAAS,gBAAgB,MAAM,IAAI;AAAA,MAChF,UAAU,CAAC,UAAU;AACnB,cAAM,OAAO,MAAM,OAAO;AAC1B,YAAI,QAAQ,SAAS,KAAM,UAAS,IAAI;AAAA,MAC1C;AAAA,MAEC;AAAA,iBAAS,QAAQ,oBAAC,YAAO,OAAM,IAAG,UAAQ,MAAC;AAAA,QAC3C,IACE,OAAO,CAAC,SAAS,UAAU,IAAI,IAAI,KAAK,SAAS,IAAI,EACrD,IAAI,CAAC,SAAS;AACb,gBAAM,OAAO,MAAM,IAAI,EAAE;AACzB,gBAAM,SAAS,SAAS,OAAO,SAAY,uBAAuB,IAAI;AACtE,gBAAM,cAAc,CAAC,UAAU,IAAI,IAAI,KAAK,WAAW,MAAM;AAC7D,iBACE,oBAAC,YAAkB,OAAO,MAAM,UAAU,eAAe,SAAS,MAC/D,mBAAS,OAAO,YAAY,MAAM,iBAAiB,QAAQ,MAAM,CAAC,IAAI,QAD5D,IAEb;AAAA,QAEJ,CAAC;AAAA,QAGF,SAAS,QAAQ,CAAC,IAAI,SAAS,IAAI,KAClC,oBAAC,YAAO,OAAO,MAAM,UAAQ,MAC1B,gBACH;AAAA;AAAA;AAAA,EAEJ;AAEJ;AA4CO,SAAS,YAAuC;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAAwB;AACtB,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,QAAM,MAAM,OAAO,KAAK;AACxB,QAAM,YAAY,IAAI,IAAO,WAAW,GAAG;AAC3C,QAAM,OAAO,IAAI,IAAO,KAAK;AAC7B,QAAM,UAAoC,IACvC,OAAO,CAAC,SAAS,UAAU,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,EACtD,IAAI,CAAC,SAAS;AACb,UAAM,SAAS,uBAAuB,IAAI;AAC1C,UAAM,SAAS,WAAW,MAAM;AAChC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO,MAAM,IAAI,EAAE;AAAA,MACnB,MAAM,SAAS,SAAS,QAAQ,MAAM,IAAI;AAAA,MAC1C,UAAU,UAAU,CAAC,UAAU,IAAI,IAAI;AAAA,IACzC;AAAA,EACF,CAAC;AACH,SACE;AAAA,IAAC;AAAA;AAAA,MACC,QAAQ,UAAU,OAAO;AAAA,MACzB;AAAA,MACA;AAAA,MACA,OAAO,CAAC,GAAG,KAAK;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,WAAW,cAAc,IAAI,SAAS,gBAAgB,MAAM,IAAI;AAAA,MAChF;AAAA;AAAA,EACF;AAEJ;","names":[]}

package/dist/admin/transfer-ownership-dialog-labels.d.ts

@@ -0,0 +1,2 @@
+import type { TransferOwnershipLabels } from "./transfer-ownership-dialog.js";
+export declare const DEFAULT_TRANSFER_OWNERSHIP_LABELS: TransferOwnershipLabels;

package/dist/admin/transfer-ownership-dialog-labels.js

@@ -0,0 +1,18 @@
+"use client";
+const DEFAULT_TRANSFER_OWNERSHIP_LABELS = {
+  title: (name) => `Hand on ${name}\u2019s work`,
+  body: "Everything this account owns moves to the account you choose, in one step.",
+  recipient: "Hand it to",
+  choose: "Choose an account\u2026",
+  chooseFirst: "Choose who receives the work",
+  confirm: "Hand it on",
+  customer: "a customer",
+  deactivated: "deactivated",
+  self: "the same account",
+  unavailable: (account, reason) => `${account} (${reason})`,
+  noCandidates: "No other account can receive it."
+};
+export {
+  DEFAULT_TRANSFER_OWNERSHIP_LABELS
+};
+//# sourceMappingURL=transfer-ownership-dialog-labels.js.map

package/dist/admin/transfer-ownership-dialog-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/admin/transfer-ownership-dialog-labels.ts"],"sourcesContent":["// The English words of ./transfer-ownership-dialog, in a module with no component code: the\n// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`\n// loads as one chunk like the other languages (0.34, KS U8). ./transfer-ownership-dialog\n// re-exports them.\n\nimport type { TransferOwnershipLabels } from \"./transfer-ownership-dialog\";\n\nexport const DEFAULT_TRANSFER_OWNERSHIP_LABELS: TransferOwnershipLabels = {\n  title: (name) => `Hand on ${name}’s work`,\n  body: \"Everything this account owns moves to the account you choose, in one step.\",\n  recipient: \"Hand it to\",\n  choose: \"Choose an account…\",\n  chooseFirst: \"Choose who receives the work\",\n  confirm: \"Hand it on\",\n  customer: \"a customer\",\n  deactivated: \"deactivated\",\n  self: \"the same account\",\n  unavailable: (account, reason) => `${account} (${reason})`,\n  noCandidates: \"No other account can receive it.\",\n};\n"],"mappings":";AAOO,MAAM,oCAA6D;AAAA,EACxE,OAAO,CAAC,SAAS,WAAW,IAAI;AAAA,EAChC,MAAM;AAAA,EACN,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,SAAS;AAAA,EACT,UAAU;AAAA,EACV,aAAa;AAAA,EACb,MAAM;AAAA,EACN,aAAa,CAAC,SAAS,WAAW,GAAG,OAAO,KAAK,MAAM;AAAA,EACvD,cAAc;AAChB;","names":[]}

package/dist/admin/transfer-ownership-dialog.d.ts

@@ -1,100 +1,81 @@
-import 'react';
-export { cU as DEFAULT_TRANSFER_OWNERSHIP_LABELS, fx as TransferCandidate, fy as TransferOwnershipDialog, fz as TransferOwnershipDialogProps, fA as TransferOwnershipLabels, fB as TransferUnavailable, fC as TransferValues } from '../delete-account-setting-DiPX4Vue.js';
-import './admin-parts.js';
-import '../components/tooltip.js';
-import '../hooks/use-anchored-rect.js';
-import '../lib/clipping.js';
-import '../data-table-labels-BJ5JE_X2.js';
-import '../components/data-table-sort.js';
-import '../components/swipeable-row.js';
-import '../components/status-dot.js';
-import '../components/progress-bar.js';
-import '../components/signed-amount.js';
-import '../components/stat-tile.js';
-import '../components/chip.js';
-import 'lucide-react';
-import '../components/field-parts.js';
-import '../components/write-lock.js';
-import '../components/mini-calendar.js';
-import '../components/calendar-heatmap.js';
-import '../components/popover.js';
-import '../hooks/use-breakpoint.js';
-import '../components/field-sync.js';
-import '../wizard/types.js';
-import '../tour/tour.js';
-import '../search/command-palette.js';
-import '../search/global-search.js';
-import '../search/search-index.js';
-import '../components/month-picker.js';
-import '../components/page-contents.js';
-import '../components/series-chart-labels.js';
-import '../components/pie-chart-labels.js';
-import '../components/sparkline.js';
-import '../components/signature-pad.js';
-import '../components/password-strength.js';
-import '../components/swatch-picker.js';
-import '../components/tile-radio.js';
-import '../components/icon-picker.js';
-import '../components/dialog-frame.js';
-import '../components/modal.js';
-import '../hooks/use-search-param-state.js';
-import '../components/measured-grid.js';
-import '../components/user-avatar.js';
-import '../lib/person-name.js';
-import '../shell/topbar-action-menu.js';
-import '../components/menu-item.js';
-import '../components/floating-panel.js';
-import '../hooks/use-authed-src.js';
-import '../components/account-settings-labels.js';
-import '../components/bulk-action-bar.js';
-import '../components/list.js';
-import '../components/breadcrumbs.js';
-import '../components/toast.js';
-import '../components/description-list.js';
-import '../components/line-items.js';
-import '../components/error-boundary.js';
-import '../components/authed-image.js';
-import '../components/image-grid.js';
-import '../components/lightbox.js';
-import '../auth/sign-in-form.js';
-import '../landing/access.js';
-import '../landing/landing-labels.js';
-import '../shell/topbar-controls.js';
-import '../theme/palette-presets.js';
-import '../theme/chart-palette.js';
-import '../theme/theme-store.js';
-import 'zustand/middleware';
-import 'zustand';
-import '../auth/complete-name-dialog.js';
-import '../auth/forgot-password-form.js';
-import '../auth/status-parts.js';
-import '../auth/reset-password-form.js';
-import '../auth/verify-email.js';
-import '../auth/not-found-page.js';
-import '../auth/accept-invitation.js';
-import '../shell/company-switcher.js';
-import '../account/email-change-setting.js';
-import '../account/sessions-setting.js';
-import '../lib/format.js';
-import '../account/data-export-setting.js';
-import '../components/account-chips.js';
-import './admin-action-log.js';
-import '../settings/settings-labels.js';
-import '../demo/demo-labels.js';
-import '../components/appearance-labels.js';
-import '../theme/contrast.js';
-import '../theme/text-size.js';
-import '../components/reauth-dialog.js';
-import '../components/server-wake.js';
-import '../lib/server-wake.js';
-import '../components/translation-review-labels.js';
-import '../lib/translation-review.js';
-import '../components/country-select.js';
-import '../components/inline-edit-field.js';
-import '../lib/iban.js';
-import '../lib/phone.js';
-import '../components/sign-chip.js';
-import '../components/column-mapper.js';
-import '../lib/column-mapping.js';
-import '../lib/table-text.js';
-import '../components/focus-ring.js';
+import type { ReactNode } from "react";
+import { type LabelOverride } from "../i18n/kit-labels.js";
+import type { AdminActionTarget, AdminConfirmLevel } from "./admin-action-confirm.js";
+import type { AdminPerson, MaybePromise } from "./admin-parts.js";
+import { DEFAULT_TRANSFER_OWNERSHIP_LABELS } from "./transfer-ownership-dialog-labels.js";
+/**
+ * Hand an account's owned work to another account — Kurvenschmiede's `TypedConfirm`
+ * with its recipient select (features/admin/typed-confirm.tsx, users-panel.tsx;
+ * docs/user-admin-harmonization.md §4.1 `POST /admin/users/{id}/transfer {to,
+ * confirm_email}`, §4.2: `type_email`).
+ *
+ * It is {@link AdminActionConfirm} with the recipient as the action's own field: the
+ * typed address is the SOURCE account's — the one whose work moves, which is the row the
+ * admin must prove they are on — and the confirm waits for a recipient too.
+ *
+ * WHO MAY RECEIVE IT (§9.6): never a customer, never a deactivated account, never the
+ * account itself. The APP decides — it knows its roles and states — and marks each
+ * candidate with why it cannot (`unavailable`); the kit shows those accounts, unavailable,
+ * with the reason, rather than leaving the admin to wonder where somebody went. The
+ * source account is marked `self` here whether or not the app did.
+ */
+/** Why a candidate cannot receive the work: the kit's three, or the app's own words. */
+export type TransferUnavailable = "customer" | "deactivated" | "self";
+/** An account that might receive the work. */
+export interface TransferCandidate extends AdminPerson {
+    id: string | number;
+    email: string;
+    /** Why it cannot: `"customer"`, `"deactivated"`, `"self"`, or the app's own words. */
+    unavailable?: TransferUnavailable | (string & {});
+}
+/** What {@link TransferOwnershipDialogProps.onTransfer} receives — the request body. */
+export interface TransferValues {
+    toUserId: string | number;
+    /** The source account's address as typed (at `type_email`). */
+    confirmEmail?: string;
+}
+/** The `transferOwnership` namespace. The guard and the refusals are `adminAction`'s
+ *  and `dangerConfirm`'s. */
+export interface TransferOwnershipLabels {
+    /** The heading — "Hand on Ada Example’s work". */
+    title: (name: string) => string;
+    /** What happens. */
+    body: string;
+    /** The recipient select's label. */
+    recipient: string;
+    /** Its empty first option. */
+    choose: string;
+    /** Why the confirm is held while nobody is chosen. */
+    chooseFirst: string;
+    /** The confirm button. */
+    confirm: string;
+    /** Reasons, said after the account's name inside its option. */
+    customer: string;
+    deactivated: string;
+    self: string;
+    /** An unavailable option's text: the account and why. */
+    unavailable: (account: string, reason: string) => string;
+    /** No account can receive it. */
+    noCandidates: string;
+}
+export { DEFAULT_TRANSFER_OWNERSHIP_LABELS };
+export interface TransferOwnershipDialogProps {
+    /** The account whose work moves — its address is what the admin types. */
+    from: AdminActionTarget;
+    /** Who might receive it, each marked with why not where it cannot. */
+    candidates: readonly TransferCandidate[];
+    /** What moves, in the app's words — "3 sessions · 1 gear · 2 projects" (counts, never
+     *  content). Under the sentence. */
+    summary?: ReactNode;
+    /** Sends it. Promise handling as {@link AdminActionConfirm}'s `onConfirm`. */
+    onTransfer: (values: TransferValues) => MaybePromise;
+    onClose: (done: boolean) => void;
+    /** The server's level for `transfer` — `type_email` (§4.2), the default. A transfer
+     *  always has a recipient to choose, so `none` asks as `acknowledge` does. */
+    level?: AdminConfirmLevel;
+    describeError?: (error: unknown) => ReactNode | undefined;
+    /** Kept-mounted mode. */
+    open?: boolean;
+    labels?: LabelOverride<TransferOwnershipLabels>;
+}
+export declare function TransferOwnershipDialog({ from, candidates, summary, onTransfer, onClose, level, describeError, open, labels: labelsProp, }: TransferOwnershipDialogProps): import("react").JSX.Element;