@eifi1/ui-kit 0.33.0 → 0.34.0

package/dist/admin/admin-action-log.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/admin/admin-action-log.tsx"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport { cn } from \"../lib/cn\";\nimport type { DateInput } from \"../lib/format\";\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { DateMark } from \"../components/account-chips\";\nimport { Chip } from \"../components/chip\";\nimport { Pagination } from \"../components/data-table-pagination\";\nimport { Caption } from \"../components/text\";\nimport { Button, Spinner } from \"../components/ui\";\nimport { usePersonLabel } from \"./admin-parts\";\nimport type { AdminPerson } from \"./admin-parts\";\n\n/**\n * The admin actions, as the audit table records them (docs/user-admin-harmonization.md\n * §2.3, §4.3): `GET /admin/actions?limit=&offset=&target=`, newest first, on the admin\n * page and filtered to one account from its row.\n *\n * Every app writes the same small `admin_actions` row in the transaction of the action\n * (keksdose and Kurvenschmiede had log lines; kastlan has an HTTP log with no named\n * action), so the vocabulary is shared — {@link AdminActionKind} — and an app's own\n * actions join it through `labels.actions`.\n *\n * What a row says, and what it never does: who, what, to whom, when, and a summary of the\n * `detail` the APP writes (ids, roles, counts — never content, §4.3). Three kinds of\n * actor: an admin; **the user themselves** (`deletion_request`: the actor is the target);\n * and **nobody** (the scheduled erasure, the hand-over at erasure, §2.7), said as\n * \"automatically\". After an erasure the target's name and address are scrubbed and the\n * row stays: it reads \"an erased account\".\n *\n * It never fetches: the page of rows and the paging are the app's.\n */\n\n/** The shared vocabulary of `admin_actions.action` (§4.3). */\nexport type AdminActionKind =\n  | \"deactivate\"\n  | \"reactivate\"\n  | \"role\"\n  | \"membership_remove\"\n  | \"password_change_require\"\n  | \"password_change_withdraw\"\n  | \"mail_verification\"\n  | \"mail_reset\"\n  | \"reviewer\"\n  | \"invite\"\n  | \"invite_resend\"\n  | \"invite_revoke\"\n  | \"transfer\"\n  | \"deletion_request\"\n  | \"deletion_cancel\"\n  | \"erase\"\n  // 0.32.1 (keksdose's 0.32 report): server-kit 0.6's `AdminAction.PLAN`, an operator's\n  // plan change or grant (docs/billing-harmonization.md §6).\n  | \"plan\";\n\n/** Every {@link AdminActionKind}, in the contract's order. */\nexport const ADMIN_ACTION_KINDS: readonly AdminActionKind[] = [\n  \"deactivate\",\n  \"reactivate\",\n  \"role\",\n  \"membership_remove\",\n  \"password_change_require\",\n  \"password_change_withdraw\",\n  \"mail_verification\",\n  \"mail_reset\",\n  \"reviewer\",\n  \"invite\",\n  \"invite_resend\",\n  \"invite_revoke\",\n  \"transfer\",\n  \"deletion_request\",\n  \"deletion_cancel\",\n  \"erase\",\n  \"plan\",\n];\n\n/** One logged action — the app's `admin_actions` row with the people joined in. */\nexport interface AdminActionLogEntry {\n  id: string | number;\n  /** When, as the row's `at`. */\n  at: DateInput;\n  /**\n   * Who did it: a person; `\"self\"` — the user themselves (a deletion request); or `null`\n   * — nobody, the scheduled job. A person whose `id` (or address) is the target's is\n   * read as `\"self\"` too.\n   */\n  actor: AdminPerson | \"self\" | null;\n  /** A {@link AdminActionKind}, or one of the app's own (named in `labels.actions`). */\n  action: AdminActionKind | (string & {});\n  /** Whom it was done to. `null`, or a person with nothing left in it: an erased\n   *  account. An invitation's target is its address (`target_email`). */\n  target?: AdminPerson | null;\n  /** The `detail` in the app's words — \"Member → Admin\", \"12 items to Ben Example\". */\n  detail?: ReactNode;\n}\n\n/** The `adminActionLog` namespace. */\nexport interface AdminActionLogLabels {\n  /** The list's accessible name. */\n  title: string;\n  empty: string;\n  loading: string;\n  /** \"by Ada Example\". */\n  by: (actor: string) => string;\n  /** The user acted on their own account. */\n  bySelf: string;\n  /** No actor: a scheduled job. */\n  automatic: string;\n  /** A target scrubbed by an erasure. */\n  erased: string;\n  /** The filter chip: only one account's actions are shown. */\n  filteredTo: (target: string) => string;\n  /** The chip's ×. */\n  showAll: string;\n  /** A target name as a filter button — \"Show only the actions on Ada Example\". */\n  filterBy: (target: string) => string;\n  /** What each action is called, past tense, keyed by the vocabulary. An app adds its\n   *  own here (`labels={{ actions: { plan: \"Plan changed\" } }}`). */\n  actions: { [K in AdminActionKind]?: string } & { [action: string]: string | undefined };\n}\n\nexport const DEFAULT_ADMIN_ACTION_LOG_LABELS: AdminActionLogLabels = {\n  title: \"Admin actions\",\n  empty: \"No admin actions yet.\",\n  loading: \"Loading…\",\n  by: (actor) => `by ${actor}`,\n  bySelf: \"by the user themselves\",\n  automatic: \"automatically\",\n  erased: \"an erased account\",\n  filteredTo: (target) => `Only ${target}`,\n  showAll: \"Show all actions\",\n  filterBy: (target) => `Show only the actions on ${target}`,\n  actions: {\n    deactivate: \"Deactivated\",\n    reactivate: \"Reactivated\",\n    role: \"Role changed\",\n    membership_remove: \"Removed from the company\",\n    password_change_require: \"New password required\",\n    password_change_withdraw: \"Password requirement withdrawn\",\n    mail_verification: \"Verification mail sent\",\n    mail_reset: \"Password reset mail sent\",\n    reviewer: \"Reviewer scope changed\",\n    invite: \"Invited\",\n    invite_resend: \"Invitation resent\",\n    invite_revoke: \"Invitation revoked\",\n    transfer: \"Work transferred\",\n    deletion_request: \"Deletion requested\",\n    deletion_cancel: \"Deletion cancelled\",\n    erase: \"Account erased\",\n    plan: \"Plan changed\",\n  },\n};\n\n/** The paging of `GET /admin/actions` — DataTable's `ServerPagination`, which the\n *  footer is. */\nexport interface AdminActionLogPaging {\n  /** 0-based. */\n  page: number;\n  pageSize: number;\n  total: number;\n  onPageChange: (page: number) => void;\n  onPageSizeChange?: (pageSize: number) => void;\n}\n\nexport interface AdminActionLogProps {\n  /** One page, newest first, as the server sends it. */\n  entries: readonly AdminActionLogEntry[];\n  /** Left out: no footer (a short list on a row). */\n  paging?: AdminActionLogPaging;\n  /** The page is being fetched. */\n  loading?: boolean;\n  /** The filter in force: only this account's actions are shown (`?target=`). With\n   *  `onTargetFilter`, a chip says so and its × clears it. */\n  target?: AdminPerson | null;\n  /** Filter by an account — or clear it with `null`. Given, every target's name is a\n   *  button that narrows the list to it. Left out, the list is not filterable here. */\n  onTargetFilter?: (target: AdminPerson | null) => void;\n  className?: string;\n  labels?: Partial<AdminActionLogLabels>;\n}\n\n/** Whether a person has nothing left that names them — an erased target. */\nfunction scrubbed(person: AdminPerson | null | undefined): boolean {\n  return !person || ![person.first, person.last, person.name, person.email].some((part) => (part ?? \"\").trim());\n}\n\nfunction samePerson(a: AdminPerson, b: AdminPerson | null | undefined): boolean {\n  if (!b) return false;\n  if (a.id !== undefined && a.id !== null && b.id !== undefined && b.id !== null) return a.id === b.id;\n  const ea = (a.email ?? \"\").trim().toLowerCase();\n  return ea !== \"\" && ea === (b.email ?? \"\").trim().toLowerCase();\n}\n\nexport function AdminActionLog({\n  entries,\n  paging,\n  loading = false,\n  target,\n  onTargetFilter,\n  className,\n  labels: labelsProp,\n}: AdminActionLogProps) {\n  const labels = useKitLabels(\"adminActionLog\", DEFAULT_ADMIN_ACTION_LOG_LABELS, labelsProp);\n  const nameOf = usePersonLabel();\n  const filtered = target !== undefined && target !== null && !scrubbed(target);\n\n  const actorText = (entry: AdminActionLogEntry): string => {\n    const { actor } = entry;\n    if (actor === null) return labels.automatic;\n    if (actor === \"self\" || samePerson(actor, entry.target)) return labels.bySelf;\n    return labels.by(nameOf(actor) || labels.erased);\n  };\n\n  const targetNode = (entry: AdminActionLogEntry): ReactNode => {\n    if (scrubbed(entry.target)) return <span className=\"italic text-[var(--text-muted)]\">{labels.erased}</span>;\n    const person = entry.target!;\n    const name = nameOf(person);\n    const address = (person.email ?? \"\").trim();\n    const text = (\n      <>\n        <span data-private className=\"font-medium text-[var(--text-primary)]\">\n          {name}\n        </span>\n        {address && address !== name && (\n          <span data-private className=\"ms-1 text-xs text-[var(--text-muted)]\">\n            {address}\n          </span>\n        )}\n      </>\n    );\n    if (!onTargetFilter || (filtered && samePerson(person, target))) return text;\n    return (\n      <Button\n        type=\"button\"\n        variant=\"link\"\n        size=\"sm\"\n        className=\"h-auto min-h-0 p-0 text-start\"\n        aria-label={labels.filterBy(name)}\n        onClick={() => onTargetFilter(person)}\n      >\n        {text}\n      </Button>\n    );\n  };\n\n  return (\n    <div className={cn(\"space-y-3\", className)}>\n      {filtered && onTargetFilter && (\n        <Chip size=\"sm\" tone=\"brand\" onRemove={() => onTargetFilter(null)} removeLabel={labels.showAll}>\n          <span data-private>{labels.filteredTo(nameOf(target))}</span>\n        </Chip>\n      )}\n      {loading && entries.length === 0 ? (\n        <div className=\"flex justify-center py-4\">\n          <Spinner label={labels.loading} />\n        </div>\n      ) : entries.length === 0 ? (\n        <Caption>{labels.empty}</Caption>\n      ) : (\n        <ol\n          aria-label={labels.title}\n          aria-busy={loading || undefined}\n          className={cn(\"divide-y divide-[var(--border)]\", loading && \"opacity-60\")}\n        >\n          {entries.map((entry) => (\n            <li key={entry.id} data-action={entry.action} className=\"space-y-0.5 py-2 first:pt-0 last:pb-0\">\n              <div className=\"flex flex-wrap items-baseline justify-between gap-x-3 gap-y-0.5\">\n                <div className=\"flex min-w-0 flex-wrap items-baseline gap-x-2 gap-y-0.5 text-sm\">\n                  <span className=\"font-medium text-[var(--text-primary)]\">\n                    {labels.actions[entry.action] ?? entry.action}\n                  </span>\n                  <span className=\"min-w-0 break-words\">{targetNode(entry)}</span>\n                </div>\n                <DateMark value={entry.at} display=\"relative\" className=\"text-xs text-[var(--text-muted)]\" />\n              </div>\n              <div className=\"text-xs text-[var(--text-muted)]\">\n                <span data-private={entry.actor !== null && entry.actor !== \"self\" ? true : undefined}>\n                  {actorText(entry)}\n                </span>\n                {entry.detail !== undefined && entry.detail !== null && entry.detail !== \"\" && (\n                  <>\n                    {\" · \"}\n                    <span className=\"text-[var(--text-secondary)]\">{entry.detail}</span>\n                  </>\n                )}\n              </div>\n            </li>\n          ))}\n        </ol>\n      )}\n      {paging && paging.total > 0 && (\n        <Pagination\n          page={paging.page}\n          pageSize={paging.pageSize}\n          total={paging.total}\n          totalPages={Math.max(1, Math.ceil(paging.total / Math.max(1, paging.pageSize)))}\n          onPage={paging.onPageChange}\n          onPageSize={paging.onPageSizeChange}\n        />\n      )}\n    </div>\n  );\n}\n"],"mappings":";AAqNuC,SAKjC,UALiC,KAKjC,YALiC;AApNvC,SAAS,UAAU;AAEnB,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,QAAQ,eAAe;AAChC,SAAS,sBAAsB;AA8CxB,MAAM,qBAAiD;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA+CO,MAAM,kCAAwD;AAAA,EACnE,OAAO;AAAA,EACP,OAAO;AAAA,EACP,SAAS;AAAA,EACT,IAAI,CAAC,UAAU,MAAM,KAAK;AAAA,EAC1B,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,YAAY,CAAC,WAAW,QAAQ,MAAM;AAAA,EACtC,SAAS;AAAA,EACT,UAAU,CAAC,WAAW,4BAA4B,MAAM;AAAA,EACxD,SAAS;AAAA,IACP,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,yBAAyB;AAAA,IACzB,0BAA0B;AAAA,IAC1B,mBAAmB;AAAA,IACnB,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,eAAe;AAAA,IACf,UAAU;AAAA,IACV,kBAAkB;AAAA,IAClB,iBAAiB;AAAA,IACjB,OAAO;AAAA,IACP,MAAM;AAAA,EACR;AACF;AA+BA,SAAS,SAAS,QAAiD;AACjE,SAAO,CAAC,UAAU,CAAC,CAAC,OAAO,OAAO,OAAO,MAAM,OAAO,MAAM,OAAO,KAAK,EAAE,KAAK,CAAC,UAAU,QAAQ,IAAI,KAAK,CAAC;AAC9G;AAEA,SAAS,WAAW,GAAgB,GAA4C;AAC9E,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,EAAE,OAAO,UAAa,EAAE,OAAO,QAAQ,EAAE,OAAO,UAAa,EAAE,OAAO,KAAM,QAAO,EAAE,OAAO,EAAE;AAClG,QAAM,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,YAAY;AAC9C,SAAO,OAAO,MAAM,QAAQ,EAAE,SAAS,IAAI,KAAK,EAAE,YAAY;AAChE;AAEO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAAwB;AACtB,QAAM,SAAS,aAAa,kBAAkB,iCAAiC,UAAU;AACzF,QAAM,SAAS,eAAe;AAC9B,QAAM,WAAW,WAAW,UAAa,WAAW,QAAQ,CAAC,SAAS,MAAM;AAE5E,QAAM,YAAY,CAAC,UAAuC;AACxD,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,UAAU,KAAM,QAAO,OAAO;AAClC,QAAI,UAAU,UAAU,WAAW,OAAO,MAAM,MAAM,EAAG,QAAO,OAAO;AACvE,WAAO,OAAO,GAAG,OAAO,KAAK,KAAK,OAAO,MAAM;AAAA,EACjD;AAEA,QAAM,aAAa,CAAC,UAA0C;AAC5D,QAAI,SAAS,MAAM,MAAM,EAAG,QAAO,oBAAC,UAAK,WAAU,mCAAmC,iBAAO,QAAO;AACpG,UAAM,SAAS,MAAM;AACrB,UAAM,OAAO,OAAO,MAAM;AAC1B,UAAM,WAAW,OAAO,SAAS,IAAI,KAAK;AAC1C,UAAM,OACJ,iCACE;AAAA,0BAAC,UAAK,gBAAY,MAAC,WAAU,0CAC1B,gBACH;AAAA,MACC,WAAW,YAAY,QACtB,oBAAC,UAAK,gBAAY,MAAC,WAAU,yCAC1B,mBACH;AAAA,OAEJ;AAEF,QAAI,CAAC,kBAAmB,YAAY,WAAW,QAAQ,MAAM,EAAI,QAAO;AACxE,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,MAAK;AAAA,QACL,WAAU;AAAA,QACV,cAAY,OAAO,SAAS,IAAI;AAAA,QAChC,SAAS,MAAM,eAAe,MAAM;AAAA,QAEnC;AAAA;AAAA,IACH;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAI,WAAW,GAAG,aAAa,SAAS,GACtC;AAAA,gBAAY,kBACX,oBAAC,QAAK,MAAK,MAAK,MAAK,SAAQ,UAAU,MAAM,eAAe,IAAI,GAAG,aAAa,OAAO,SACrF,8BAAC,UAAK,gBAAY,MAAE,iBAAO,WAAW,OAAO,MAAM,CAAC,GAAE,GACxD;AAAA,IAED,WAAW,QAAQ,WAAW,IAC7B,oBAAC,SAAI,WAAU,4BACb,8BAAC,WAAQ,OAAO,OAAO,SAAS,GAClC,IACE,QAAQ,WAAW,IACrB,oBAAC,WAAS,iBAAO,OAAM,IAEvB;AAAA,MAAC;AAAA;AAAA,QACC,cAAY,OAAO;AAAA,QACnB,aAAW,WAAW;AAAA,QACtB,WAAW,GAAG,mCAAmC,WAAW,YAAY;AAAA,QAEvE,kBAAQ,IAAI,CAAC,UACZ,qBAAC,QAAkB,eAAa,MAAM,QAAQ,WAAU,yCACtD;AAAA,+BAAC,SAAI,WAAU,mEACb;AAAA,iCAAC,SAAI,WAAU,mEACb;AAAA,kCAAC,UAAK,WAAU,0CACb,iBAAO,QAAQ,MAAM,MAAM,KAAK,MAAM,QACzC;AAAA,cACA,oBAAC,UAAK,WAAU,uBAAuB,qBAAW,KAAK,GAAE;AAAA,eAC3D;AAAA,YACA,oBAAC,YAAS,OAAO,MAAM,IAAI,SAAQ,YAAW,WAAU,oCAAmC;AAAA,aAC7F;AAAA,UACA,qBAAC,SAAI,WAAU,oCACb;AAAA,gCAAC,UAAK,gBAAc,MAAM,UAAU,QAAQ,MAAM,UAAU,SAAS,OAAO,QACzE,oBAAU,KAAK,GAClB;AAAA,YACC,MAAM,WAAW,UAAa,MAAM,WAAW,QAAQ,MAAM,WAAW,MACvE,iCACG;AAAA;AAAA,cACD,oBAAC,UAAK,WAAU,gCAAgC,gBAAM,QAAO;AAAA,eAC/D;AAAA,aAEJ;AAAA,aApBO,MAAM,EAqBf,CACD;AAAA;AAAA,IACH;AAAA,IAED,UAAU,OAAO,QAAQ,KACxB;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,OAAO;AAAA,QACb,UAAU,OAAO;AAAA,QACjB,OAAO,OAAO;AAAA,QACd,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG,OAAO,QAAQ,CAAC,CAAC;AAAA,QAC9E,QAAQ,OAAO;AAAA,QACf,YAAY,OAAO;AAAA;AAAA,IACrB;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/admin/admin-action-log.tsx"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport { cn } from \"../lib/cn\";\nimport type { DateInput } from \"../lib/format\";\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport type { LabelOverride } from \"../i18n/kit-labels\";\nimport { DateMark } from \"../components/account-chips\";\nimport { Chip } from \"../components/chip\";\nimport { Pagination } from \"../components/data-table-pagination\";\nimport { Caption } from \"../components/text\";\nimport { Button } from \"../components/button\";\nimport { Spinner } from \"../components/spinner\";\nimport { usePersonLabel } from \"./admin-parts\";\nimport type { AdminPerson } from \"./admin-parts\";\nimport { DEFAULT_ADMIN_ACTION_LOG_LABELS } from \"./admin-action-log-labels\";\n\n/**\n * The admin actions, as the audit table records them (docs/user-admin-harmonization.md\n * §2.3, §4.3): `GET /admin/actions?limit=&offset=&target=`, newest first, on the admin\n * page and filtered to one account from its row.\n *\n * Every app writes the same small `admin_actions` row in the transaction of the action\n * (keksdose and Kurvenschmiede had log lines; kastlan has an HTTP log with no named\n * action), so the vocabulary is shared — {@link AdminActionKind} — and an app's own\n * actions join it through `labels.actions`.\n *\n * What a row says, and what it never does: who, what, to whom, when, and a summary of the\n * `detail` the APP writes (ids, roles, counts — never content, §4.3). Three kinds of\n * actor: an admin; **the user themselves** (`deletion_request`: the actor is the target);\n * and **nobody** (the scheduled erasure, the hand-over at erasure, §2.7), said as\n * \"automatically\". After an erasure the target's name and address are scrubbed and the\n * row stays: it reads \"an erased account\".\n *\n * GROUPS (round 0.34, §11): Kurvenschmiede's teams, kastlan's companies and keksdose's\n * budgets are groups of accounts, and the vocabulary has words for what is done to one\n * (`group_create`, `group_rename`, `group_delete`) and to who is in it (`membership_add`,\n * `membership_role`, `membership_remove`). A row about the group itself has the group as\n * its `target`; a row about a person in it has the person as its target and the group as\n * its `group`, drawn after the person by its name alone, muted — no preposition, so no\n * language has to inflect the name. The kinds and codes say \"group\"; the labels say the\n * app's own noun, picked with `groupNoun` — whole phrases per noun, since a noun dropped\n * into one phrase breaks the participle's agreement in fr and it and the suffix in hu\n * (decision 4). A group with no name left reads as the noun's \"a deleted team\"; only a\n * missing PERSON is \"an erased account\".\n *\n * It never fetches: the page of rows and the paging are the app's.\n */\n\n/** The shared vocabulary of `admin_actions.action` (§4.3). */\nexport type AdminActionKind =\n  | \"deactivate\"\n  | \"reactivate\"\n  | \"role\"\n  | \"membership_remove\"\n  | \"password_change_require\"\n  | \"password_change_withdraw\"\n  | \"mail_verification\"\n  | \"mail_reset\"\n  | \"reviewer\"\n  | \"invite\"\n  | \"invite_resend\"\n  | \"invite_revoke\"\n  | \"transfer\"\n  | \"deletion_request\"\n  | \"deletion_cancel\"\n  | \"erase\"\n  // 0.32.1 (keksdose's 0.32 report): server-kit 0.6's `AdminAction.PLAN`, an operator's\n  // plan change or grant (docs/billing-harmonization.md §6).\n  | \"plan\"\n  // 0.34 (§11.3): what is done to a group of accounts, and to who is in it — beside\n  // `membership_remove`. server-kit 0.8's `AdminAction` has the same five.\n  | \"group_create\"\n  | \"group_rename\"\n  | \"group_delete\"\n  | \"membership_add\"\n  | \"membership_role\";\n\n/** Every {@link AdminActionKind}, in the contract's order. */\nexport const ADMIN_ACTION_KINDS: readonly AdminActionKind[] = [\n  \"deactivate\",\n  \"reactivate\",\n  \"role\",\n  \"membership_remove\",\n  \"password_change_require\",\n  \"password_change_withdraw\",\n  \"mail_verification\",\n  \"mail_reset\",\n  \"reviewer\",\n  \"invite\",\n  \"invite_resend\",\n  \"invite_revoke\",\n  \"transfer\",\n  \"deletion_request\",\n  \"deletion_cancel\",\n  \"erase\",\n  \"plan\",\n  \"group_create\",\n  \"group_rename\",\n  \"group_delete\",\n  \"membership_add\",\n  \"membership_role\",\n];\n\n/** The app's word for its groups (§11.5): Kurvenschmiede's teams, kastlan's companies,\n *  keksdose's budgets; `group` is the neutral word. Picks the set of phrases the group\n *  actions are said in. */\nexport type AdminGroupNoun = \"group\" | \"team\" | \"company\" | \"budget\";\n\n/** The kinds said in the noun's words: the five of 0.34, and `membership_remove`. */\ntype AdminGroupActionKind =\n  | \"group_create\"\n  | \"group_rename\"\n  | \"group_delete\"\n  | \"membership_add\"\n  | \"membership_role\"\n  | \"membership_remove\";\n\nconst GROUP_ACTION_KINDS: ReadonlySet<string> = new Set<AdminGroupActionKind>([\n  \"group_create\",\n  \"group_rename\",\n  \"group_delete\",\n  \"membership_add\",\n  \"membership_role\",\n  \"membership_remove\",\n]);\n\n/**\n * A group as a log target (§11.4): a row about the group itself (`group_*`, kastlan's\n * `plan`), or the `group` a person was added to, moved in or taken out of. The app joins\n * its `name` when the log is read — from the live group, else from its `group_delete`\n * row's stamp (`target_group_name`, decision 6) — as it joins a person's. With no name\n * left it reads as the noun's \"a deleted team\".\n */\nexport interface AdminGroupTarget {\n  kind: \"group\";\n  id?: string | number | null;\n  name?: string | null;\n}\n\n/** A target that is neither a person nor a group (§11.4): an app's own action on a demo\n *  dataset or a setting, said by its `label`. */\nexport interface AdminOtherTarget {\n  kind: \"other\";\n  /** What it was done to, in the app's words, as it is drawn. */\n  label: string;\n  /** The app's id for it, when it has one. Beyond §11.4's shape so that code reading\n   *  `entry.target.id` on any target — keksdose's filter, the showcase's — still\n   *  type-checks against the wider union. */\n  id?: string | number | null;\n}\n\n/** Whether a target is a group. A person has no `kind`; an object whose `kind` is\n *  anything else is read as a person too. */\nexport function isGroupTarget(target: unknown): target is AdminGroupTarget {\n  return typeof target === \"object\" && target !== null && (target as { kind?: unknown }).kind === \"group\";\n}\n\nfunction isOtherTarget(target: unknown): target is AdminOtherTarget {\n  return typeof target === \"object\" && target !== null && (target as { kind?: unknown }).kind === \"other\";\n}\n\n/** One logged action — the app's `admin_actions` row with the people joined in. */\nexport interface AdminActionLogEntry {\n  id: string | number;\n  /** When, as the row's `at`. */\n  at: DateInput;\n  /**\n   * Who did it: a person; `\"self\"` — the user themselves (a deletion request); or `null`\n   * — nobody, the scheduled job. A person whose `id` (or address) is the target's is\n   * read as `\"self\"` too.\n   */\n  actor: AdminPerson | \"self\" | null;\n  /** A {@link AdminActionKind}, or one of the app's own (named in `labels.actions`). */\n  action: AdminActionKind | (string & {});\n  /**\n   * What it was done to (§11.4): a person (no `kind`) — `null`, or a person with nothing\n   * left in it, is \"an erased account\", and an invitation's person is its address\n   * (`target_email`); a group (`kind: \"group\"`), for a row about the group itself; or\n   * something else (`kind: \"other\"`), said by its label. Left out: nothing is drawn\n   * (until 0.34 it read as erased).\n   */\n  target?: AdminPerson | AdminGroupTarget | AdminOtherTarget | null;\n  /** The group a `membership_*` or invitation row happened in, drawn after the person\n   *  by its name (§11.4). */\n  group?: AdminGroupTarget | null;\n  /** The `detail` in the app's words — \"Member → Admin\", \"12 items to Ben Example\". */\n  detail?: ReactNode;\n}\n\n/** The `adminActionLog` namespace. */\nexport interface AdminActionLogLabels {\n  /** The list's accessible name. */\n  title: string;\n  empty: string;\n  loading: string;\n  /** \"by Ada Example\". */\n  by: (actor: string) => string;\n  /** The user acted on their own account. */\n  bySelf: string;\n  /** No actor: a scheduled job. */\n  automatic: string;\n  /** A target scrubbed by an erasure. */\n  erased: string;\n  /** The filter chip: only one account's actions are shown. */\n  filteredTo: (target: string) => string;\n  /** The chip's ×. */\n  showAll: string;\n  /** A target name as a filter button — \"Show only the actions on Ada Example\". */\n  filterBy: (target: string) => string;\n  /** What each action is called, past tense, keyed by the vocabulary. An app adds its\n   *  own here (`labels={{ actions: { plan: \"Plan changed\" } }}`). A word given here\n   *  outranks the noun's in `groupActions` — so no catalogue holds the group kinds\n   *  here, `membership_remove` included (0.34). */\n  actions: { [K in AdminActionKind]?: string } & { [action: string]: string | undefined };\n  /** The group actions in each noun's words (§11.5), picked with `groupNoun`. */\n  groupActions: Record<AdminGroupNoun, AdminGroupActionLabels>;\n}\n\n/** One noun's phrases (§11.5): whole phrases, never a noun dropped into one. */\ninterface AdminGroupActionLabels {\n  /** \"Team created\". */\n  group_create: string;\n  /** \"Team renamed\". */\n  group_rename: string;\n  /** \"Team deleted\". */\n  group_delete: string;\n  /** \"Added to the team\" — said of the person, so it agrees with the account where a\n   *  language agrees (es \"Añadida\", fr \"Ajouté\"). */\n  membership_add: string;\n  /** \"Role in the team changed\" — the role in the group, not the account's (`role`). */\n  membership_role: string;\n  /** \"Removed from the team\". The `company` set's is the string `actions` held until\n   *  0.34, in every language. */\n  membership_remove: string;\n  /** A group target with no name left: \"a deleted team\". */\n  deleted: string;\n}\n\n// Defined in ./admin-action-log-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_ADMIN_ACTION_LOG_LABELS };\n\n/** The paging of `GET /admin/actions` — DataTable's `ServerPagination`, which the\n *  footer is. */\nexport interface AdminActionLogPaging {\n  /** 0-based. */\n  page: number;\n  pageSize: number;\n  total: number;\n  onPageChange: (page: number) => void;\n  onPageSizeChange?: (pageSize: number) => void;\n}\n\nexport interface AdminActionLogProps {\n  /** One page, newest first, as the server sends it. */\n  entries: readonly AdminActionLogEntry[];\n  /** Left out: no footer (a short list on a row). */\n  paging?: AdminActionLogPaging;\n  /** The page is being fetched. */\n  loading?: boolean;\n  /** The filter in force: only this account's actions are shown (`?target=`). With\n   *  `onTargetFilter`, a chip says so and its × clears it. */\n  target?: AdminPerson | null;\n  /** Filter by an account — or clear it with `null`. Given, every person target's name\n   *  is a button that narrows the list to it; a group or other target never is (0.34:\n   *  `?target=` stays a person's). Left out, the list is not filterable here. */\n  onTargetFilter?: (target: AdminPerson | null) => void;\n  /** The app's word for its groups (§11.5): picks the phrases the group actions and \"a\n   *  deleted …\" are said in. Default `group`; `labels.actions[kind]` still wins. */\n  groupNoun?: AdminGroupNoun;\n  className?: string;\n  /** Any part, at any depth: `{ groupActions: { team: { group_create: \"…\" } } }`. */\n  labels?: LabelOverride<AdminActionLogLabels>;\n}\n\n/** Whether a person has nothing left that names them — an erased target. */\nfunction scrubbed(person: AdminPerson | null | undefined): boolean {\n  return !person || ![person.first, person.last, person.name, person.email].some((part) => (part ?? \"\").trim());\n}\n\n/** Whether two people are the same account. A group or other target is never a person\n *  (§11.4), so it never reads \"by the user themselves\". */\nfunction samePerson(a: AdminPerson, b: AdminActionLogEntry[\"target\"]): boolean {\n  if (!b || isGroupTarget(b) || isOtherTarget(b)) return false;\n  if (a.id !== undefined && a.id !== null && b.id !== undefined && b.id !== null) return a.id === b.id;\n  const ea = (a.email ?? \"\").trim().toLowerCase();\n  return ea !== \"\" && ea === (b.email ?? \"\").trim().toLowerCase();\n}\n\nexport function AdminActionLog({\n  entries,\n  paging,\n  loading = false,\n  target,\n  onTargetFilter,\n  groupNoun = \"group\",\n  className,\n  labels: labelsProp,\n}: AdminActionLogProps) {\n  // Merged key by key at every depth, so a deep override is what `useKitLabels` takes.\n  const labels = useKitLabels(\"adminActionLog\", DEFAULT_ADMIN_ACTION_LOG_LABELS, labelsProp);\n  const nameOf = usePersonLabel();\n  const filtered = target !== undefined && target !== null && !scrubbed(target);\n  // A noun the type doesn't know (an app in plain JS) says the neutral word.\n  const groupWords = labels.groupActions[groupNoun] ?? labels.groupActions.group;\n\n  /** An app's own word first, then the noun's phrase for a group kind, else the key. */\n  const actionText = (action: string): string =>\n    labels.actions[action] ??\n    (GROUP_ACTION_KINDS.has(action) ? groupWords[action as AdminGroupActionKind] : undefined) ??\n    action;\n\n  /** A group by its name, or — muted, as an erased person is — the noun's \"a deleted\n   *  team\" when none is left. */\n  const groupText = (group: AdminGroupTarget, className?: string): ReactNode => {\n    const name = (group.name ?? \"\").trim();\n    return name ? (\n      <span data-private className={className}>\n        {name}\n      </span>\n    ) : (\n      <span className=\"italic text-muted\">{groupWords.deleted}</span>\n    );\n  };\n\n  const actorText = (entry: AdminActionLogEntry): string => {\n    const { actor } = entry;\n    if (actor === null) return labels.automatic;\n    if (actor === \"self\" || samePerson(actor, entry.target)) return labels.bySelf;\n    return labels.by(nameOf(actor) || labels.erased);\n  };\n\n  const targetNode = (entry: AdminActionLogEntry): ReactNode => {\n    const subject = entry.target;\n    // Left out: nothing (§11.4). `null` is a person the erasure took.\n    if (subject === undefined) return null;\n    if (isGroupTarget(subject)) return groupText(subject, \"font-medium text-primary\");\n    if (isOtherTarget(subject)) return <span className=\"font-medium text-primary\">{subject.label}</span>;\n    if (scrubbed(subject)) return <span className=\"italic text-muted\">{labels.erased}</span>;\n    const person = subject!;\n    const name = nameOf(person);\n    const address = (person.email ?? \"\").trim();\n    const text = (\n      <>\n        <span data-private className=\"font-medium text-primary\">\n          {name}\n        </span>\n        {address && address !== name && (\n          <span data-private className=\"ms-1 text-xs text-muted\">\n            {address}\n          </span>\n        )}\n      </>\n    );\n    if (!onTargetFilter || (filtered && samePerson(person, target))) return text;\n    return (\n      <Button\n        type=\"button\"\n        variant=\"link\"\n        size=\"sm\"\n        className=\"h-auto min-h-0 p-0 text-start\"\n        aria-label={labels.filterBy(name)}\n        onClick={() => onTargetFilter(person)}\n      >\n        {text}\n      </Button>\n    );\n  };\n\n  return (\n    <div className={cn(\"space-y-3\", className)}>\n      {filtered && onTargetFilter && (\n        <Chip size=\"sm\" tone=\"brand\" onRemove={() => onTargetFilter(null)} removeLabel={labels.showAll}>\n          <span data-private>{labels.filteredTo(nameOf(target))}</span>\n        </Chip>\n      )}\n      {loading && entries.length === 0 ? (\n        <div className=\"flex justify-center py-4\">\n          <Spinner label={labels.loading} />\n        </div>\n      ) : entries.length === 0 ? (\n        <Caption>{labels.empty}</Caption>\n      ) : (\n        <ol\n          aria-label={labels.title}\n          aria-busy={loading || undefined}\n          className={cn(\"divide-y divide-subtle\", loading && \"opacity-60\")}\n        >\n          {entries.map((entry) => (\n            <li key={entry.id} data-action={entry.action} className=\"space-y-0.5 py-2 first:pt-0 last:pb-0\">\n              <div className=\"flex flex-wrap items-baseline justify-between gap-x-3 gap-y-0.5\">\n                <div className=\"flex min-w-0 flex-wrap items-baseline gap-x-2 gap-y-0.5 text-sm\">\n                  <span className=\"font-medium text-primary\">{actionText(entry.action)}</span>\n                  {entry.target !== undefined && <span className=\"min-w-0 break-words\">{targetNode(entry)}</span>}\n                  {entry.group && (\n                    <span data-group className=\"min-w-0 break-words text-xs text-muted\">\n                      {groupText(entry.group)}\n                    </span>\n                  )}\n                </div>\n                <DateMark value={entry.at} display=\"relative\" className=\"text-xs text-muted\" />\n              </div>\n              <div className=\"text-xs text-muted\">\n                <span data-private={entry.actor !== null && entry.actor !== \"self\" ? true : undefined}>\n                  {actorText(entry)}\n                </span>\n                {entry.detail !== undefined && entry.detail !== null && entry.detail !== \"\" && (\n                  <>\n                    {\" · \"}\n                    <span className=\"text-secondary\">{entry.detail}</span>\n                  </>\n                )}\n              </div>\n            </li>\n          ))}\n        </ol>\n      )}\n      {paging && paging.total > 0 && (\n        <Pagination\n          page={paging.page}\n          pageSize={paging.pageSize}\n          total={paging.total}\n          totalPages={Math.max(1, Math.ceil(paging.total / Math.max(1, paging.pageSize)))}\n          onPage={paging.onPageChange}\n          onPageSize={paging.onPageSizeChange}\n        />\n      )}\n    </div>\n  );\n}\n"],"mappings":";AA2TM,SA0BA,UA1BA,KA0BA,YA1BA;AA1TN,SAAS,UAAU;AAEnB,SAAS,oBAAoB;AAE7B,SAAS,gBAAgB;AACzB,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,sBAAsB;AAE/B,SAAS,uCAAuC;AAgEzC,MAAM,qBAAiD;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAgBA,MAAM,qBAA0C,oBAAI,IAA0B;AAAA,EAC5E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AA6BM,SAAS,cAAc,QAA6C;AACzE,SAAO,OAAO,WAAW,YAAY,WAAW,QAAS,OAA8B,SAAS;AAClG;AAEA,SAAS,cAAc,QAA6C;AAClE,SAAO,OAAO,WAAW,YAAY,WAAW,QAAS,OAA8B,SAAS;AAClG;AAoHA,SAAS,SAAS,QAAiD;AACjE,SAAO,CAAC,UAAU,CAAC,CAAC,OAAO,OAAO,OAAO,MAAM,OAAO,MAAM,OAAO,KAAK,EAAE,KAAK,CAAC,UAAU,QAAQ,IAAI,KAAK,CAAC;AAC9G;AAIA,SAAS,WAAW,GAAgB,GAA2C;AAC7E,MAAI,CAAC,KAAK,cAAc,CAAC,KAAK,cAAc,CAAC,EAAG,QAAO;AACvD,MAAI,EAAE,OAAO,UAAa,EAAE,OAAO,QAAQ,EAAE,OAAO,UAAa,EAAE,OAAO,KAAM,QAAO,EAAE,OAAO,EAAE;AAClG,QAAM,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,YAAY;AAC9C,SAAO,OAAO,MAAM,QAAQ,EAAE,SAAS,IAAI,KAAK,EAAE,YAAY;AAChE;AAEO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA,QAAQ;AACV,GAAwB;AAEtB,QAAM,SAAS,aAAa,kBAAkB,iCAAiC,UAAU;AACzF,QAAM,SAAS,eAAe;AAC9B,QAAM,WAAW,WAAW,UAAa,WAAW,QAAQ,CAAC,SAAS,MAAM;AAE5E,QAAM,aAAa,OAAO,aAAa,SAAS,KAAK,OAAO,aAAa;AAGzE,QAAM,aAAa,CAAC,WAClB,OAAO,QAAQ,MAAM,MACpB,mBAAmB,IAAI,MAAM,IAAI,WAAW,MAA8B,IAAI,WAC/E;AAIF,QAAM,YAAY,CAAC,OAAyBA,eAAkC;AAC5E,UAAM,QAAQ,MAAM,QAAQ,IAAI,KAAK;AACrC,WAAO,OACL,oBAAC,UAAK,gBAAY,MAAC,WAAWA,YAC3B,gBACH,IAEA,oBAAC,UAAK,WAAU,qBAAqB,qBAAW,SAAQ;AAAA,EAE5D;AAEA,QAAM,YAAY,CAAC,UAAuC;AACxD,UAAM,EAAE,MAAM,IAAI;AAClB,QAAI,UAAU,KAAM,QAAO,OAAO;AAClC,QAAI,UAAU,UAAU,WAAW,OAAO,MAAM,MAAM,EAAG,QAAO,OAAO;AACvE,WAAO,OAAO,GAAG,OAAO,KAAK,KAAK,OAAO,MAAM;AAAA,EACjD;AAEA,QAAM,aAAa,CAAC,UAA0C;AAC5D,UAAM,UAAU,MAAM;AAEtB,QAAI,YAAY,OAAW,QAAO;AAClC,QAAI,cAAc,OAAO,EAAG,QAAO,UAAU,SAAS,0BAA0B;AAChF,QAAI,cAAc,OAAO,EAAG,QAAO,oBAAC,UAAK,WAAU,4BAA4B,kBAAQ,OAAM;AAC7F,QAAI,SAAS,OAAO,EAAG,QAAO,oBAAC,UAAK,WAAU,qBAAqB,iBAAO,QAAO;AACjF,UAAM,SAAS;AACf,UAAM,OAAO,OAAO,MAAM;AAC1B,UAAM,WAAW,OAAO,SAAS,IAAI,KAAK;AAC1C,UAAM,OACJ,iCACE;AAAA,0BAAC,UAAK,gBAAY,MAAC,WAAU,4BAC1B,gBACH;AAAA,MACC,WAAW,YAAY,QACtB,oBAAC,UAAK,gBAAY,MAAC,WAAU,2BAC1B,mBACH;AAAA,OAEJ;AAEF,QAAI,CAAC,kBAAmB,YAAY,WAAW,QAAQ,MAAM,EAAI,QAAO;AACxE,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,MAAK;AAAA,QACL,WAAU;AAAA,QACV,cAAY,OAAO,SAAS,IAAI;AAAA,QAChC,SAAS,MAAM,eAAe,MAAM;AAAA,QAEnC;AAAA;AAAA,IACH;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAI,WAAW,GAAG,aAAa,SAAS,GACtC;AAAA,gBAAY,kBACX,oBAAC,QAAK,MAAK,MAAK,MAAK,SAAQ,UAAU,MAAM,eAAe,IAAI,GAAG,aAAa,OAAO,SACrF,8BAAC,UAAK,gBAAY,MAAE,iBAAO,WAAW,OAAO,MAAM,CAAC,GAAE,GACxD;AAAA,IAED,WAAW,QAAQ,WAAW,IAC7B,oBAAC,SAAI,WAAU,4BACb,8BAAC,WAAQ,OAAO,OAAO,SAAS,GAClC,IACE,QAAQ,WAAW,IACrB,oBAAC,WAAS,iBAAO,OAAM,IAEvB;AAAA,MAAC;AAAA;AAAA,QACC,cAAY,OAAO;AAAA,QACnB,aAAW,WAAW;AAAA,QACtB,WAAW,GAAG,0BAA0B,WAAW,YAAY;AAAA,QAE9D,kBAAQ,IAAI,CAAC,UACZ,qBAAC,QAAkB,eAAa,MAAM,QAAQ,WAAU,yCACtD;AAAA,+BAAC,SAAI,WAAU,mEACb;AAAA,iCAAC,SAAI,WAAU,mEACb;AAAA,kCAAC,UAAK,WAAU,4BAA4B,qBAAW,MAAM,MAAM,GAAE;AAAA,cACpE,MAAM,WAAW,UAAa,oBAAC,UAAK,WAAU,uBAAuB,qBAAW,KAAK,GAAE;AAAA,cACvF,MAAM,SACL,oBAAC,UAAK,cAAU,MAAC,WAAU,0CACxB,oBAAU,MAAM,KAAK,GACxB;AAAA,eAEJ;AAAA,YACA,oBAAC,YAAS,OAAO,MAAM,IAAI,SAAQ,YAAW,WAAU,sBAAqB;AAAA,aAC/E;AAAA,UACA,qBAAC,SAAI,WAAU,sBACb;AAAA,gCAAC,UAAK,gBAAc,MAAM,UAAU,QAAQ,MAAM,UAAU,SAAS,OAAO,QACzE,oBAAU,KAAK,GAClB;AAAA,YACC,MAAM,WAAW,UAAa,MAAM,WAAW,QAAQ,MAAM,WAAW,MACvE,iCACG;AAAA;AAAA,cACD,oBAAC,UAAK,WAAU,kBAAkB,gBAAM,QAAO;AAAA,eACjD;AAAA,aAEJ;AAAA,aAvBO,MAAM,EAwBf,CACD;AAAA;AAAA,IACH;AAAA,IAED,UAAU,OAAO,QAAQ,KACxB;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,OAAO;AAAA,QACb,UAAU,OAAO;AAAA,QACjB,OAAO,OAAO;AAAA,QACd,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG,OAAO,QAAQ,CAAC,CAAC;AAAA,QAC9E,QAAQ,OAAO;AAAA,QACf,YAAY,OAAO;AAAA;AAAA,IACrB;AAAA,KAEJ;AAEJ;","names":["className"]}

package/dist/admin/admin-parts.d.ts

@@ -1,19 +1,17 @@
-import { ReactNode } from 'react';
-import { DateInput } from '../lib/format.js';
-
+import type { DateInput } from "../lib/format.js";
 /**
  * What the admin parts share and do not export (0.30.0). Internal to `src/admin`.
  *
  * @internal
  */
 /** A callback that may answer a promise: resolve = done, reject = stay and say why. */
-type MaybePromise<T = unknown> = void | Promise<T>;
+export type MaybePromise<T = unknown> = void | Promise<T>;
 /** A person as the admin parts show one: the two name parts of the auth contract
  *  (§3.2), an older whole `name` as the fallback, and the address. The name parts are
  *  read in either spelling — the kit's `first` / `last`, or server-kit's `PersonRef`
  *  as it serialises (`first_name` / `last_name`), so an app hands the server's object
  *  over as it came (keksdose's and kastlan's 0.30 adoptions mapped one to the other). */
-interface AdminPerson {
+export interface AdminPerson {
     id?: string | number | null;
     first?: string | null;
     last?: string | null;
@@ -25,23 +23,18 @@ interface AdminPerson {
     name?: string | null;
     email?: string | null;
 }
-/** A label that is really there — `null`, `false` and `""` are what `cond && text`
- *  evaluates to on the path where there is none. */
-declare function hasMessage(node: ReactNode): boolean;
 /**
  * The name to say for a person, in the READER's order (auth §3.2,
  * {@link formatPersonName}), else the whole `name`, else the address, else `""`.
  */
-declare function personLabel(person: AdminPerson | null | undefined, locale: string | undefined): string;
+export declare function personLabel(person: AdminPerson | null | undefined, locale: string | undefined): string;
 /** {@link personLabel} in the provider's locale. */
-declare function usePersonLabel(localeProp?: string): (person: AdminPerson | null | undefined) => string;
+export declare function usePersonLabel(localeProp?: string): (person: AdminPerson | null | undefined) => string;
 /**
  * A day as words in a sentence ("6 Nov 2026"): the provider's `formatDate` when the app
  * set one (keksdose K12), asked for no weekday — a date in a sentence carries none — else
  * `Intl`'s medium date. `""` for no date.
  */
-declare function useDayText(localeProp?: string): (value: DateInput) => string;
+export declare function useDayText(localeProp?: string): (value: DateInput) => string;
 /** Call a callback that may throw or answer a promise, as a promise. */
-declare function settle<T>(call: () => MaybePromise<T>): Promise<T | void>;
-
-export { type AdminPerson, type MaybePromise, hasMessage, personLabel, settle, useDayText, usePersonLabel };
+export declare function settle<T>(call: () => MaybePromise<T>): Promise<T | void>;

package/dist/admin/admin-parts.js

@@ -4,9 +4,6 @@ import { useKitDateFormatter, useKitLocale } from "../i18n/kit-labels.js";
 import { formatDate, toDate } from "../lib/format.js";
 import { toLocalIso } from "../lib/dates.js";
 import { formatPersonName } from "../lib/person-name.js";
-function hasMessage(node) {
-  return node !== void 0 && node !== null && node !== false && node !== "";
-}
 function personLabel(person, locale) {
   if (!person) return "";
   return formatPersonName({ first: person.first ?? person.first_name, last: person.last ?? person.last_name }, locale) || (person.name ?? "").trim() || (person.email ?? "").trim();
@@ -36,7 +33,6 @@ function settle(call) {
   }
 }
 export {
-  hasMessage,
   personLabel,
   settle,
   useDayText,

package/dist/admin/admin-parts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/admin/admin-parts.ts"],"sourcesContent":["import { useCallback } from \"react\";\nimport type { ReactNode } from \"react\";\nimport { useKitDateFormatter, useKitLocale } from \"../i18n/kit-labels\";\nimport { formatDate, toDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { toLocalIso } from \"../lib/dates\";\nimport { formatPersonName } from \"../lib/person-name\";\n\n/**\n * What the admin parts share and do not export (0.30.0). Internal to `src/admin`.\n *\n * @internal\n */\n\n/** A callback that may answer a promise: resolve = done, reject = stay and say why. */\nexport type MaybePromise<T = unknown> = void | Promise<T>;\n\n/** A person as the admin parts show one: the two name parts of the auth contract\n *  (§3.2), an older whole `name` as the fallback, and the address. The name parts are\n *  read in either spelling — the kit's `first` / `last`, or server-kit's `PersonRef`\n *  as it serialises (`first_name` / `last_name`), so an app hands the server's object\n *  over as it came (keksdose's and kastlan's 0.30 adoptions mapped one to the other). */\nexport interface AdminPerson {\n  id?: string | number | null;\n  first?: string | null;\n  last?: string | null;\n  /** server-kit `PersonRef.first_name`; `first` wins when both are given. */\n  first_name?: string | null;\n  /** server-kit `PersonRef.last_name`; `last` wins when both are given. */\n  last_name?: string | null;\n  /** A whole name, for an API that still sends `display_name` only. */\n  name?: string | null;\n  email?: string | null;\n}\n\n/** A label that is really there — `null`, `false` and `\"\"` are what `cond && text`\n *  evaluates to on the path where there is none. */\nexport function hasMessage(node: ReactNode): boolean {\n  return node !== undefined && node !== null && node !== false && node !== \"\";\n}\n\n/**\n * The name to say for a person, in the READER's order (auth §3.2,\n * {@link formatPersonName}), else the whole `name`, else the address, else `\"\"`.\n */\nexport function personLabel(person: AdminPerson | null | undefined, locale: string | undefined): string {\n  if (!person) return \"\";\n  return (\n    formatPersonName({ first: person.first ?? person.first_name, last: person.last ?? person.last_name }, locale) ||\n    (person.name ?? \"\").trim() ||\n    (person.email ?? \"\").trim()\n  );\n}\n\n/** {@link personLabel} in the provider's locale. */\nexport function usePersonLabel(localeProp?: string): (person: AdminPerson | null | undefined) => string {\n  const locale = useKitLocale(localeProp);\n  return useCallback((person) => personLabel(person, locale), [locale]);\n}\n\n/**\n * A day as words in a sentence (\"6 Nov 2026\"): the provider's `formatDate` when the app\n * set one (keksdose K12), asked for no weekday — a date in a sentence carries none — else\n * `Intl`'s medium date. `\"\"` for no date.\n */\nexport function useDayText(localeProp?: string): (value: DateInput) => string {\n  const locale = useKitLocale(localeProp);\n  const fromProvider = useKitDateFormatter();\n  return useCallback(\n    (value) => {\n      const date = toDate(value);\n      if (!date) return \"\";\n      const own = fromProvider\n        ? fromProvider(toLocalIso(date), { unit: \"day\", source: \"dateMark\", locale, weekday: false })\n        : \"\";\n      return own || formatDate(date, \"medium\", { locale });\n    },\n    [fromProvider, locale],\n  );\n}\n\n/** Call a callback that may throw or answer a promise, as a promise. */\nexport function settle<T>(call: () => MaybePromise<T>): Promise<T | void> {\n  try {\n    return Promise.resolve(call());\n  } catch (error) {\n    return Promise.reject(error);\n  }\n}\n"],"mappings":";AAAA,SAAS,mBAAmB;AAE5B,SAAS,qBAAqB,oBAAoB;AAClD,SAAS,YAAY,cAAc;AAEnC,SAAS,kBAAkB;AAC3B,SAAS,wBAAwB;AA+B1B,SAAS,WAAW,MAA0B;AACnD,SAAO,SAAS,UAAa,SAAS,QAAQ,SAAS,SAAS,SAAS;AAC3E;AAMO,SAAS,YAAY,QAAwC,QAAoC;AACtG,MAAI,CAAC,OAAQ,QAAO;AACpB,SACE,iBAAiB,EAAE,OAAO,OAAO,SAAS,OAAO,YAAY,MAAM,OAAO,QAAQ,OAAO,UAAU,GAAG,MAAM,MAC3G,OAAO,QAAQ,IAAI,KAAK,MACxB,OAAO,SAAS,IAAI,KAAK;AAE9B;AAGO,SAAS,eAAe,YAAyE;AACtG,QAAM,SAAS,aAAa,UAAU;AACtC,SAAO,YAAY,CAAC,WAAW,YAAY,QAAQ,MAAM,GAAG,CAAC,MAAM,CAAC;AACtE;AAOO,SAAS,WAAW,YAAmD;AAC5E,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,eAAe,oBAAoB;AACzC,SAAO;AAAA,IACL,CAAC,UAAU;AACT,YAAM,OAAO,OAAO,KAAK;AACzB,UAAI,CAAC,KAAM,QAAO;AAClB,YAAM,MAAM,eACR,aAAa,WAAW,IAAI,GAAG,EAAE,MAAM,OAAO,QAAQ,YAAY,QAAQ,SAAS,MAAM,CAAC,IAC1F;AACJ,aAAO,OAAO,WAAW,MAAM,UAAU,EAAE,OAAO,CAAC;AAAA,IACrD;AAAA,IACA,CAAC,cAAc,MAAM;AAAA,EACvB;AACF;AAGO,SAAS,OAAU,MAAgD;AACxE,MAAI;AACF,WAAO,QAAQ,QAAQ,KAAK,CAAC;AAAA,EAC/B,SAAS,OAAO;AACd,WAAO,QAAQ,OAAO,KAAK;AAAA,EAC7B;AACF;","names":[]}
+{"version":3,"sources":["../../src/admin/admin-parts.ts"],"sourcesContent":["import { useCallback } from \"react\";\nimport { useKitDateFormatter, useKitLocale } from \"../i18n/kit-labels\";\nimport { formatDate, toDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { toLocalIso } from \"../lib/dates\";\nimport { formatPersonName } from \"../lib/person-name\";\n\n/**\n * What the admin parts share and do not export (0.30.0). Internal to `src/admin`.\n *\n * @internal\n */\n\n/** A callback that may answer a promise: resolve = done, reject = stay and say why. */\nexport type MaybePromise<T = unknown> = void | Promise<T>;\n\n/** A person as the admin parts show one: the two name parts of the auth contract\n *  (§3.2), an older whole `name` as the fallback, and the address. The name parts are\n *  read in either spelling — the kit's `first` / `last`, or server-kit's `PersonRef`\n *  as it serialises (`first_name` / `last_name`), so an app hands the server's object\n *  over as it came (keksdose's and kastlan's 0.30 adoptions mapped one to the other). */\nexport interface AdminPerson {\n  id?: string | number | null;\n  first?: string | null;\n  last?: string | null;\n  /** server-kit `PersonRef.first_name`; `first` wins when both are given. */\n  first_name?: string | null;\n  /** server-kit `PersonRef.last_name`; `last` wins when both are given. */\n  last_name?: string | null;\n  /** A whole name, for an API that still sends `display_name` only. */\n  name?: string | null;\n  email?: string | null;\n}\n\n/**\n * The name to say for a person, in the READER's order (auth §3.2,\n * {@link formatPersonName}), else the whole `name`, else the address, else `\"\"`.\n */\nexport function personLabel(person: AdminPerson | null | undefined, locale: string | undefined): string {\n  if (!person) return \"\";\n  return (\n    formatPersonName({ first: person.first ?? person.first_name, last: person.last ?? person.last_name }, locale) ||\n    (person.name ?? \"\").trim() ||\n    (person.email ?? \"\").trim()\n  );\n}\n\n/** {@link personLabel} in the provider's locale. */\nexport function usePersonLabel(localeProp?: string): (person: AdminPerson | null | undefined) => string {\n  const locale = useKitLocale(localeProp);\n  return useCallback((person) => personLabel(person, locale), [locale]);\n}\n\n/**\n * A day as words in a sentence (\"6 Nov 2026\"): the provider's `formatDate` when the app\n * set one (keksdose K12), asked for no weekday — a date in a sentence carries none — else\n * `Intl`'s medium date. `\"\"` for no date.\n */\nexport function useDayText(localeProp?: string): (value: DateInput) => string {\n  const locale = useKitLocale(localeProp);\n  const fromProvider = useKitDateFormatter();\n  return useCallback(\n    (value) => {\n      const date = toDate(value);\n      if (!date) return \"\";\n      const own = fromProvider\n        ? fromProvider(toLocalIso(date), { unit: \"day\", source: \"dateMark\", locale, weekday: false })\n        : \"\";\n      return own || formatDate(date, \"medium\", { locale });\n    },\n    [fromProvider, locale],\n  );\n}\n\n/** Call a callback that may throw or answer a promise, as a promise. */\nexport function settle<T>(call: () => MaybePromise<T>): Promise<T | void> {\n  try {\n    return Promise.resolve(call());\n  } catch (error) {\n    return Promise.reject(error);\n  }\n}\n"],"mappings":";AAAA,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB,oBAAoB;AAClD,SAAS,YAAY,cAAc;AAEnC,SAAS,kBAAkB;AAC3B,SAAS,wBAAwB;AAiC1B,SAAS,YAAY,QAAwC,QAAoC;AACtG,MAAI,CAAC,OAAQ,QAAO;AACpB,SACE,iBAAiB,EAAE,OAAO,OAAO,SAAS,OAAO,YAAY,MAAM,OAAO,QAAQ,OAAO,UAAU,GAAG,MAAM,MAC3G,OAAO,QAAQ,IAAI,KAAK,MACxB,OAAO,SAAS,IAAI,KAAK;AAE9B;AAGO,SAAS,eAAe,YAAyE;AACtG,QAAM,SAAS,aAAa,UAAU;AACtC,SAAO,YAAY,CAAC,WAAW,YAAY,QAAQ,MAAM,GAAG,CAAC,MAAM,CAAC;AACtE;AAOO,SAAS,WAAW,YAAmD;AAC5E,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,eAAe,oBAAoB;AACzC,SAAO;AAAA,IACL,CAAC,UAAU;AACT,YAAM,OAAO,OAAO,KAAK;AACzB,UAAI,CAAC,KAAM,QAAO;AAClB,YAAM,MAAM,eACR,aAAa,WAAW,IAAI,GAAG,EAAE,MAAM,OAAO,QAAQ,YAAY,QAAQ,SAAS,MAAM,CAAC,IAC1F;AACJ,aAAO,OAAO,WAAW,MAAM,UAAU,EAAE,OAAO,CAAC;AAAA,IACrD;AAAA,IACA,CAAC,cAAc,MAAM;AAAA,EACvB;AACF;AAGO,SAAS,OAAU,MAAgD;AACxE,MAAI;AACF,WAAO,QAAQ,QAAQ,KAAK,CAAC;AAAA,EAC/B,SAAS,OAAO;AACd,WAAO,QAAQ,OAAO,KAAK;AAAA,EAC7B;AACF;","names":[]}

package/dist/admin/invitations-panel-labels.d.ts

@@ -0,0 +1,2 @@
+import type { InvitationsLabels } from "./invitations-panel.js";
+export declare const DEFAULT_INVITATIONS_LABELS: InvitationsLabels;

package/dist/admin/invitations-panel-labels.js

@@ -0,0 +1,29 @@
+"use client";
+const DEFAULT_INVITATIONS_LABELS = {
+  email: "Email address",
+  invalidEmail: "Enter a complete email address.",
+  role: "Role",
+  scope: "Scope",
+  scopeNone: "None",
+  language: "Language of the invitation",
+  note: "Note",
+  invite: "Invite",
+  listTitle: "Invitations",
+  empty: "Nobody has been invited yet.",
+  loading: "Loading\u2026",
+  status: { open: "Open", accepted: "Accepted", expired: "Expired", revoked: "Revoked" },
+  sent: (date) => `Sent ${date}`,
+  expires: (date) => `Expires ${date}`,
+  invitedBy: (name) => `by ${name}`,
+  resend: (email) => `Send ${email} a new link`,
+  copyLink: "Copy invitation link",
+  revoke: (email) => `Revoke the invitation for ${email}`,
+  consoleHint: "Mail isn\u2019t sent on this server \u2014 it is written to the server log. Copy each invitation link from here and pass it on yourself: it is shown only once.",
+  linkReady: (email) => `The invitation link for ${email}, shown only this once:`,
+  notSent: (email) => `${email} is invited, but the mail couldn\u2019t be sent. Resend it.`,
+  failed: "That didn\u2019t work. Please try again."
+};
+export {
+  DEFAULT_INVITATIONS_LABELS
+};
+//# sourceMappingURL=invitations-panel-labels.js.map

package/dist/admin/invitations-panel-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/admin/invitations-panel-labels.ts"],"sourcesContent":["// The English words of ./invitations-panel, in a module with no component code: the English\n// catalogue (src/i18n/defaults.ts) imports them without the component, so `en` loads as one\n// chunk like the other languages (0.34, KS U8). ./invitations-panel re-exports them.\n\nimport type { InvitationsLabels } from \"./invitations-panel\";\n\nexport const DEFAULT_INVITATIONS_LABELS: InvitationsLabels = {\n  email: \"Email address\",\n  invalidEmail: \"Enter a complete email address.\",\n  role: \"Role\",\n  scope: \"Scope\",\n  scopeNone: \"None\",\n  language: \"Language of the invitation\",\n  note: \"Note\",\n  invite: \"Invite\",\n  listTitle: \"Invitations\",\n  empty: \"Nobody has been invited yet.\",\n  loading: \"Loading…\",\n  status: { open: \"Open\", accepted: \"Accepted\", expired: \"Expired\", revoked: \"Revoked\" },\n  sent: (date) => `Sent ${date}`,\n  expires: (date) => `Expires ${date}`,\n  invitedBy: (name) => `by ${name}`,\n  resend: (email) => `Send ${email} a new link`,\n  copyLink: \"Copy invitation link\",\n  revoke: (email) => `Revoke the invitation for ${email}`,\n  consoleHint:\n    \"Mail isn’t sent on this server — it is written to the server log. Copy each invitation link from here and pass it on yourself: it is shown only once.\",\n  linkReady: (email) => `The invitation link for ${email}, shown only this once:`,\n  notSent: (email) => `${email} is invited, but the mail couldn’t be sent. Resend it.`,\n  failed: \"That didn’t work. Please try again.\",\n};\n"],"mappings":";AAMO,MAAM,6BAAgD;AAAA,EAC3D,OAAO;AAAA,EACP,cAAc;AAAA,EACd,MAAM;AAAA,EACN,OAAO;AAAA,EACP,WAAW;AAAA,EACX,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ,EAAE,MAAM,QAAQ,UAAU,YAAY,SAAS,WAAW,SAAS,UAAU;AAAA,EACrF,MAAM,CAAC,SAAS,QAAQ,IAAI;AAAA,EAC5B,SAAS,CAAC,SAAS,WAAW,IAAI;AAAA,EAClC,WAAW,CAAC,SAAS,MAAM,IAAI;AAAA,EAC/B,QAAQ,CAAC,UAAU,QAAQ,KAAK;AAAA,EAChC,UAAU;AAAA,EACV,QAAQ,CAAC,UAAU,6BAA6B,KAAK;AAAA,EACrD,aACE;AAAA,EACF,WAAW,CAAC,UAAU,2BAA2B,KAAK;AAAA,EACtD,SAAS,CAAC,UAAU,GAAG,KAAK;AAAA,EAC5B,QAAQ;AACV;","names":[]}

package/dist/admin/invitations-panel.d.ts

@@ -1,100 +1,167 @@
-import 'react';
-import '../lib/format.js';
-export { cE as DEFAULT_INVITATIONS_LABELS, dQ as InvitationDraft, dR as InvitationRow, dS as InvitationScope, dT as InvitationSentAnswer, dU as InvitationStatus, dV as InvitationsLabels, dW as InvitationsPanel, dX as InvitationsPanelProps } from '../delete-account-setting-DiPX4Vue.js';
-import '../components/account-chips.js';
-import './admin-parts.js';
-import '../components/tooltip.js';
-import '../hooks/use-anchored-rect.js';
-import '../lib/clipping.js';
-import '../data-table-labels-BJ5JE_X2.js';
-import '../components/data-table-sort.js';
-import '../components/swipeable-row.js';
-import '../components/status-dot.js';
-import '../components/progress-bar.js';
-import '../components/signed-amount.js';
-import '../components/stat-tile.js';
-import '../components/chip.js';
-import 'lucide-react';
-import '../components/field-parts.js';
-import '../components/write-lock.js';
-import '../components/mini-calendar.js';
-import '../components/calendar-heatmap.js';
-import '../components/popover.js';
-import '../hooks/use-breakpoint.js';
-import '../components/field-sync.js';
-import '../wizard/types.js';
-import '../tour/tour.js';
-import '../search/command-palette.js';
-import '../search/global-search.js';
-import '../search/search-index.js';
-import '../components/month-picker.js';
-import '../components/page-contents.js';
-import '../components/series-chart-labels.js';
-import '../components/pie-chart-labels.js';
-import '../components/sparkline.js';
-import '../components/signature-pad.js';
-import '../components/password-strength.js';
-import '../components/swatch-picker.js';
-import '../components/tile-radio.js';
-import '../components/icon-picker.js';
-import '../components/dialog-frame.js';
-import '../components/modal.js';
-import '../hooks/use-search-param-state.js';
-import '../components/measured-grid.js';
-import '../components/user-avatar.js';
-import '../lib/person-name.js';
-import '../shell/topbar-action-menu.js';
-import '../components/menu-item.js';
-import '../components/floating-panel.js';
-import '../hooks/use-authed-src.js';
-import '../components/account-settings-labels.js';
-import '../components/bulk-action-bar.js';
-import '../components/list.js';
-import '../components/breadcrumbs.js';
-import '../components/toast.js';
-import '../components/description-list.js';
-import '../components/line-items.js';
-import '../components/error-boundary.js';
-import '../components/authed-image.js';
-import '../components/image-grid.js';
-import '../components/lightbox.js';
-import '../auth/sign-in-form.js';
-import '../landing/access.js';
-import '../landing/landing-labels.js';
-import '../shell/topbar-controls.js';
-import '../theme/palette-presets.js';
-import '../theme/chart-palette.js';
-import '../theme/theme-store.js';
-import 'zustand/middleware';
-import 'zustand';
-import '../auth/complete-name-dialog.js';
-import '../auth/forgot-password-form.js';
-import '../auth/status-parts.js';
-import '../auth/reset-password-form.js';
-import '../auth/verify-email.js';
-import '../auth/not-found-page.js';
-import '../auth/accept-invitation.js';
-import '../shell/company-switcher.js';
-import '../account/email-change-setting.js';
-import '../account/sessions-setting.js';
-import '../account/data-export-setting.js';
-import './admin-action-log.js';
-import '../settings/settings-labels.js';
-import '../demo/demo-labels.js';
-import '../components/appearance-labels.js';
-import '../theme/contrast.js';
-import '../theme/text-size.js';
-import '../components/reauth-dialog.js';
-import '../components/server-wake.js';
-import '../lib/server-wake.js';
-import '../components/translation-review-labels.js';
-import '../lib/translation-review.js';
-import '../components/country-select.js';
-import '../components/inline-edit-field.js';
-import '../lib/iban.js';
-import '../lib/phone.js';
-import '../components/sign-chip.js';
-import '../components/column-mapper.js';
-import '../lib/column-mapping.js';
-import '../lib/table-text.js';
-import '../components/focus-ring.js';
+import type { ReactNode } from "react";
+import type { DateInput } from "../lib/format.js";
+import { type LabelOverride } from "../i18n/kit-labels.js";
+import type { KitLanguageCode } from "../i18n/languages.js";
+import type { RoleVocabulary } from "../components/account-chips.js";
+import type { AdminPerson, MaybePromise } from "./admin-parts.js";
+import { DEFAULT_INVITATIONS_LABELS } from "./invitations-panel-labels.js";
+/**
+ * Who is invited, and the form that invites (docs/user-admin-harmonization.md §5; auth
+ * §4.4: a hashed one-time token, 14 days, an address with a role and a scope).
+ *
+ * Kurvenschmiede's `invitations-panel.tsx` with its parts made props: a form (the address,
+ * a role from the app's vocabulary, an optional scope — a team, a company — the language
+ * the invitation is written in, a note), then one row per invitation with its status, when
+ * it was sent and until when it works, and resend / copy link / revoke.
+ *
+ * - **It assumes nothing about who invites.** Admins do, team managers into their team,
+ *   kastlan's company admins into their company — and in keksdose ANY budget owner, from
+ *   the budget's sharing (Marcel, 2026-10-07). So no word here says "admin"; the roles,
+ *   the scopes and the callbacks are the app's, and so is the frame around it.
+ * - **The address is someone else's.** No `+app` tag is offered (auth §4.5): a tag is
+ *   the owner's own choice, made when they sign up.
+ * - **The link is shown once.** The token is stored hashed, so the server can show a link
+ *   only in the answer that minted it — on creation and on resend, and only while mail
+ *   goes to the console (dev, a deploy without mail). The panel keeps such a link for as
+ *   long as it is mounted and offers to copy it on its row; reloading the page loses it,
+ *   and "resend" mints a new one. With the console backend the panel says so up front.
+ * - **Revoked is optional.** An app that deletes the row instead (kastlan) never sends
+ *   `revoked`; the status chip simply never says it (§5).
+ *
+ * It never sends a request: `onInvite`, `onResend` and `onRevoke` do.
+ *
+ * Under a write lock, inviting and resending are refused; a lapsed plan's lock (`kind:
+ * "billing"`) still lets an invitation be revoked, since removing access is what a
+ * lapsed plan allows (docs/billing-harmonization.md §12.13, §12.36). A demo lock refuses
+ * all three.
+ */
+export type InvitationStatus = "open" | "accepted" | "expired" | "revoked";
+/** One row of `GET /admin/invitations` (§5), in the wire's own field names. */
+export interface InvitationRow<R extends string = string> {
+    id: string | number;
+    email: string;
+    role?: R | null;
+    /** The scope's value — a team's or a company's id, matched against `scopes`. */
+    scope?: string | number | null;
+    note?: string | null;
+    /** The language it was written in. */
+    locale?: string | null;
+    /** Who sent it: a name, or the person. */
+    invited_by?: string | AdminPerson | null;
+    created_at: DateInput;
+    expires_at?: DateInput;
+    status: InvitationStatus;
+    /** The one-time link, while mail goes to the console — in the answer that minted it. */
+    link?: string | null;
+}
+/** What the form sends — `POST /admin/invitations {email, role, scope?, note?, locale}`. */
+export interface InvitationDraft<R extends string = string> {
+    email: string;
+    /** Absent when the app offers no role choice (`roles` left out). */
+    role?: R;
+    scope?: string;
+    note?: string;
+    locale: KitLanguageCode;
+}
+/** What `onInvite` / `onResend` may answer, so the panel can keep a shown-once link. */
+export interface InvitationSentAnswer {
+    /** The invitation the answer is about — `onInvite` needs it for the link to find its
+     *  row; `onResend` knows it already. */
+    id?: string | number;
+    /** The one-time link, while mail goes to the console. */
+    link?: string | null;
+    /** `false`: the invitation exists but the mail failed — say so, resend it. */
+    sent?: boolean;
+}
+/** A scope an invitation can carry. */
+export interface InvitationScope {
+    value: string;
+    label: string;
+}
+/** The `invitations` namespace. */
+export interface InvitationsLabels {
+    /** The form's address field. */
+    email: string;
+    /** Under it while what was typed is not an address. */
+    invalidEmail: string;
+    role: string;
+    /** The scope select's label — the app's word ("Team", "Company") goes over it. */
+    scope: string;
+    /** The scope select's empty choice. */
+    scopeNone: string;
+    /** The language select's label. */
+    language: string;
+    note: string;
+    /** The form's button. */
+    invite: string;
+    /** Heading over the rows. */
+    listTitle: string;
+    empty: string;
+    loading: string;
+    /** The status chip, per status. */
+    status: Record<InvitationStatus, string>;
+    /** "Sent 6 Oct 2026". */
+    sent: (date: string) => string;
+    /** "Expires 20 Oct 2026" — on an open invitation. */
+    expires: (date: string) => string;
+    /** "by Ada Example". */
+    invitedBy: (name: string) => string;
+    /** The resend button — "Send ben@example.com a new link". */
+    resend: (email: string) => string;
+    /** The copy button. */
+    copyLink: string;
+    /** The revoke button — "Revoke the invitation for ben@example.com". */
+    revoke: (email: string) => string;
+    /** Over everything while mail goes to the console. */
+    consoleHint: string;
+    /** Beside a link the answer carried with no row to put it on. */
+    linkReady: (email: string) => string;
+    /** The answer said the mail was not sent. */
+    notSent: (email: string) => string;
+    /** A rejected callback, unless `describeError` says better. */
+    failed: string;
+}
+export { DEFAULT_INVITATIONS_LABELS };
+export interface InvitationsPanelProps<R extends string = string> {
+    invitations: readonly InvitationRow<R>[];
+    /** The app's roles. Left out: no role choice, and no role chip on a row. */
+    roles?: RoleVocabulary<R>;
+    /** The roles an invitation may carry — Kurvenschmiede's member or customer. Default:
+     *  the whole vocabulary. One role: no choice is drawn, and it is sent. */
+    invitableRoles?: readonly R[];
+    /** The role the form starts with. Default: the first invitable one. */
+    defaultRole?: R;
+    /** The scopes an invitation may carry — teams, companies. Left out: no scope field. */
+    scopes?: readonly InvitationScope[];
+    /** A scope must be chosen (no "None"). */
+    scopeRequired?: boolean;
+    /** The languages offered. Default: all seven of the kit's. */
+    languages?: readonly KitLanguageCode[];
+    /** The language the form starts with. Default: the page's, resolved to `languages`. */
+    defaultLocale?: string;
+    /** The server's `mail_backend`. `"console"` draws the hint. */
+    mailBackend?: string | null;
+    /** Creates one (resolve to clear the form; reject to keep it and say why). Left out:
+     *  no form — a list someone may look at but not add to. */
+    onInvite?: (draft: InvitationDraft<R>) => MaybePromise<InvitationSentAnswer | void>;
+    /** Mints a new link and mails it. Left out: no resend button. */
+    onResend?: (invitation: InvitationRow<R>) => MaybePromise<InvitationSentAnswer | void>;
+    /** Revokes an open or an expired invitation (level `none`, §4.2: re-inviting undoes
+     *  it). An expired row can be resent, and since 0.31 also removed: in an app that
+     *  keeps the rows it would otherwise stay listed for good (Kurvenschmiede's 0.30
+     *  adoption). Left out: no revoke button. */
+    onRevoke?: (invitation: InvitationRow<R>) => MaybePromise;
+    /** The list is being fetched. */
+    loading?: boolean;
+    /** The app's words for a rejected callback. */
+    describeError?: (error: unknown) => ReactNode | undefined;
+    /** Over the form: who can be invited and what happens, in the app's words. */
+    intro?: ReactNode;
+    /** The list's visible heading. Default: the `listTitle` label. `null` leaves it out,
+     *  for a page whose card is already headed "Invitations" (Kurvenschmiede's 0.30
+     *  adoption); the list keeps the label as its accessible name either way. */
+    listTitle?: ReactNode | null;
+    className?: string;
+    labels?: LabelOverride<InvitationsLabels>;
+}
+export declare function InvitationsPanel<R extends string = string>({ invitations, roles, invitableRoles, defaultRole, scopes, scopeRequired, languages, defaultLocale, mailBackend, onInvite, onResend, onRevoke, loading, describeError, intro, listTitle, className, labels: labelsProp, }: InvitationsPanelProps<R>): import("react").JSX.Element;

package/dist/admin/invitations-panel.js

@@ -12,34 +12,15 @@ import { CopyButton } from "../components/copy-button.js";
 import { LanguageSelect } from "../components/language-select.js";
 import { SectionLabel, Caption } from "../components/text.js";
 import { RowActions } from "../components/row-actions.js";
-import { Button, Input, Select, Spinner } from "../components/ui.js";
+import { Button } from "../components/button.js";
+import { Input } from "../components/input.js";
+import { Select } from "../components/select.js";
+import { Spinner } from "../components/spinner.js";
 import { COMMIT_EXCEPT_BILLING, useWriteLock } from "../components/write-lock.js";
-import { hasMessage, settle, useDayText, usePersonLabel } from "./admin-parts.js";
+import { settle, useDayText, usePersonLabel } from "./admin-parts.js";
+import { hasContent } from "../lib/presence.js";
 import { RoleSelect } from "./role-select.js";
-const DEFAULT_INVITATIONS_LABELS = {
-  email: "Email address",
-  invalidEmail: "Enter a complete email address.",
-  role: "Role",
-  scope: "Scope",
-  scopeNone: "None",
-  language: "Language of the invitation",
-  note: "Note",
-  invite: "Invite",
-  listTitle: "Invitations",
-  empty: "Nobody has been invited yet.",
-  loading: "Loading\u2026",
-  status: { open: "Open", accepted: "Accepted", expired: "Expired", revoked: "Revoked" },
-  sent: (date) => `Sent ${date}`,
-  expires: (date) => `Expires ${date}`,
-  invitedBy: (name) => `by ${name}`,
-  resend: (email) => `Send ${email} a new link`,
-  copyLink: "Copy invitation link",
-  revoke: (email) => `Revoke the invitation for ${email}`,
-  consoleHint: "Mail isn\u2019t sent on this server \u2014 it is written to the server log. Copy each invitation link from here and pass it on yourself: it is shown only once.",
-  linkReady: (email) => `The invitation link for ${email}, shown only this once:`,
-  notSent: (email) => `${email} is invited, but the mail couldn\u2019t be sent. Resend it.`,
-  failed: "That didn\u2019t work. Please try again."
-};
+import { DEFAULT_INVITATIONS_LABELS } from "./invitations-panel-labels.js";
 const STATUS_TONES = {
   open: "info",
   accepted: "success",
@@ -96,7 +77,7 @@ function InvitationsPanel({
       return await settle(call);
     } catch (error) {
       const own = describeError?.(error);
-      setFailure(hasMessage(own) ? own : labels.failed);
+      setFailure(hasContent(own) ? own : labels.failed);
       return FAILED;
     } finally {
       setBusy(null);
@@ -137,7 +118,7 @@ function InvitationsPanel({
   };
   const scopeLabel = (value) => value === null || value === void 0 || value === "" ? null : scopes?.find((s) => s.value === String(value))?.label ?? String(value);
   return /* @__PURE__ */ jsxs("div", { className: cn("space-y-3", className), children: [
-    intro && /* @__PURE__ */ jsx("div", { className: "text-sm text-[var(--text-secondary)]", children: intro }),
+    intro && /* @__PURE__ */ jsx("div", { className: "text-sm text-secondary", children: intro }),
     mailBackend === "console" && /* @__PURE__ */ jsx(AlertBanner, { tone: "info", size: "sm", children: labels.consoleHint }),
     canInvite && /* @__PURE__ */ jsxs("form", { noValidate: true, onSubmit: submit, className: "@container space-y-2", children: [
       /* @__PURE__ */ jsxs("div", { className: "grid grid-cols-1 gap-2 @md:grid-cols-2", children: [
@@ -219,7 +200,7 @@ function InvitationsPanel({
     ] }) }),
     /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
       listTitle !== null && /* @__PURE__ */ jsx(SectionLabel, { as: "h4", children: listTitle ?? labels.listTitle }),
-      loading && invitations.length === 0 ? /* @__PURE__ */ jsx("div", { className: "flex justify-center py-3", children: /* @__PURE__ */ jsx(Spinner, { label: labels.loading }) }) : invitations.length === 0 ? /* @__PURE__ */ jsx(Caption, { children: labels.empty }) : /* @__PURE__ */ jsx("ul", { "aria-label": labels.listTitle, className: "divide-y divide-[var(--border)]", children: invitations.map((invitation) => {
+      loading && invitations.length === 0 ? /* @__PURE__ */ jsx("div", { className: "flex justify-center py-3", children: /* @__PURE__ */ jsx(Spinner, { label: labels.loading }) }) : invitations.length === 0 ? /* @__PURE__ */ jsx(Caption, { children: labels.empty }) : /* @__PURE__ */ jsx("ul", { "aria-label": labels.listTitle, className: "divide-y divide-subtle", children: invitations.map((invitation) => {
         const key = String(invitation.id);
         const link = invitation.link ?? links[key];
         const open = invitation.status === "open";
@@ -234,13 +215,13 @@ function InvitationsPanel({
         ].filter(Boolean);
         return /* @__PURE__ */ jsx("li", { "data-status": invitation.status, className: "py-2 first:pt-0 last:pb-0", children: /* @__PURE__ */ jsxs("div", { className: "flex flex-wrap items-center justify-between gap-x-3 gap-y-1.5", children: [
           /* @__PURE__ */ jsxs("div", { className: "min-w-0 flex-1 basis-48 space-y-1", children: [
-            /* @__PURE__ */ jsx("div", { "data-private": true, className: "truncate-until-large text-sm font-medium text-[var(--text-primary)]", children: invitation.email }),
+            /* @__PURE__ */ jsx("div", { "data-private": true, className: "truncate-until-large text-sm font-medium text-primary", children: invitation.email }),
             /* @__PURE__ */ jsxs("div", { className: "flex flex-wrap items-center gap-1", children: [
               /* @__PURE__ */ jsx(Chip, { size: "xs", shape: "square", caps: true, tone: STATUS_TONES[invitation.status], children: labels.status[invitation.status] }),
               roles && invitation.role && /* @__PURE__ */ jsx(RoleChip, { value: invitation.role, roles, size: "xs" }),
               scopeText && /* @__PURE__ */ jsx(Chip, { size: "xs", shape: "square", children: scopeText })
             ] }),
-            (facts.length > 0 || invitation.note) && /* @__PURE__ */ jsxs("div", { className: "text-xs text-[var(--text-muted)]", children: [
+            (facts.length > 0 || invitation.note) && /* @__PURE__ */ jsxs("div", { className: "text-xs text-muted", children: [
               facts.join(" \xB7 "),
               invitation.note && /* @__PURE__ */ jsxs(Fragment, { children: [
                 facts.length > 0 && " \xB7 ",