@eifi1/ui-kit 0.33.1 → 0.35.0

package/dist/account/sessions-setting-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/account/sessions-setting-labels.ts"],"sourcesContent":["// The English words of ./sessions-setting, in a module with no component code: the English\n// catalogue (src/i18n/defaults.ts) imports them without the component, so `en` loads as one\n// chunk like the other languages (0.34, KS U8). ./sessions-setting re-exports them.\n\nimport type { SessionsLabels } from \"./sessions-setting\";\n\nexport const DEFAULT_SESSIONS_LABELS: SessionsLabels = {\n  title: \"Sessions\",\n  description: \"Signed in on a device you no longer use, or don’t trust? Sign out everywhere.\",\n  signOutEverywhere: \"Sign out everywhere…\",\n  signOutEverywherePrompt:\n    \"This ends every session, including this one: you will be signed out on this device too, and sign in again from here.\",\n  confirmSignOutEverywhere: \"Sign out everywhere\",\n  list: \"Where you’re signed in\",\n  loading: \"Loading sessions…\",\n  empty: \"No sessions to show.\",\n  current: \"This device\",\n  unknownDevice: \"Unknown device\",\n  lastActive: (when) => `Last active ${when}`,\n  ip: (address) => `IP ${address}`,\n  revoke: \"Sign out\",\n  revokeItem: (device) => `Sign out ${device}`,\n  failed: \"That didn’t work. Please try again.\",\n};\n"],"mappings":";AAMO,MAAM,0BAA0C;AAAA,EACrD,OAAO;AAAA,EACP,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,yBACE;AAAA,EACF,0BAA0B;AAAA,EAC1B,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,eAAe;AAAA,EACf,YAAY,CAAC,SAAS,eAAe,IAAI;AAAA,EACzC,IAAI,CAAC,YAAY,MAAM,OAAO;AAAA,EAC9B,QAAQ;AAAA,EACR,YAAY,CAAC,WAAW,YAAY,MAAM;AAAA,EAC1C,QAAQ;AACV;","names":[]}

package/dist/account/sessions-setting.d.ts

@@ -1,11 +1,11 @@
-import * as react from 'react';
-import { ComponentPropsWithoutRef, ReactNode } from 'react';
-import { DateInput } from '../lib/format.js';
-
+import type { ComponentPropsWithRef, ReactNode } from "react";
+import { type LabelOverride } from "../i18n/kit-labels.js";
+import type { DateInput } from "../lib/format.js";
+import { DEFAULT_SESSIONS_LABELS } from "./sessions-setting-labels.js";
 /** Every string {@link SessionsSetting} renders — the `sessions` namespace of
  *  `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's
  *  Cancel is `dangerConfirm.cancel`. */
-interface SessionsLabels {
+export interface SessionsLabels {
     /** The card's title. */
     title: string;
     /** The line under it: what "sign out everywhere" is for. */
@@ -38,11 +38,11 @@ interface SessionsLabels {
     /** A request failed. */
     failed: string;
 }
-declare const DEFAULT_SESSIONS_LABELS: SessionsLabels;
+export { DEFAULT_SESSIONS_LABELS };
 /** What a session's `id` may be: the app's own key type. */
-type SessionId = string | number;
+export type SessionId = string | number;
 /** One stored session (kastlan's `GET /auth/sessions`). */
-interface SessionItem<Id extends SessionId = SessionId> {
+export interface SessionItem<Id extends SessionId = SessionId> {
     id: Id;
     /** The browser and system, as the server reads them ("Firefox on Windows"). Blank
      *  reads as `labels.unknownDevice`. */
@@ -56,8 +56,8 @@ interface SessionItem<Id extends SessionId = SessionId> {
     current?: boolean;
 }
 /** Which request failed — {@link SessionsSettingProps.describeError}'s second argument. */
-type SessionsAction = "sign-out-everywhere" | "revoke";
-interface SessionsSettingProps<Id extends SessionId = SessionId> extends Omit<ComponentPropsWithoutRef<"div">, "children"> {
+export type SessionsAction = "sign-out-everywhere" | "revoke";
+export interface SessionsSettingProps<Id extends SessionId = SessionId> extends Omit<ComponentPropsWithRef<"div">, "children"> {
     /**
      * End every session (`POST /auth/logout`, auth §6.3) — this one included. Asked
      * first; resolve once the server answered, then sign this page out: the card says
@@ -83,7 +83,7 @@ interface SessionsSettingProps<Id extends SessionId = SessionId> extends Omit<Co
     formatLastActive?: (date: Date) => string;
     /** Overrides the provider's locale for the default format. */
     locale?: string;
-    labels?: Partial<SessionsLabels>;
+    labels?: LabelOverride<SessionsLabels>;
 }
 /**
  * Where the account is signed in, and the way out of all of it
@@ -109,6 +109,4 @@ interface SessionsSettingProps<Id extends SessionId = SessionId> extends Omit<Co
  * (`COMMIT_EXCEPT_BILLING`, 0.33): a lapsed plan never keeps a person from ending their
  * own sessions (docs/billing-harmonization.md §12.13, §12.36); a demo's lock still does.
  */
-declare function SessionsSetting<Id extends SessionId = SessionId>({ onSignOutEverywhere, sessions, loading, onRevoke, describeError, formatLastActive, locale: localeProp, labels: labelsProp, className, ...rest }: SessionsSettingProps<Id>): react.JSX.Element;
-
-export { DEFAULT_SESSIONS_LABELS, type SessionId, type SessionItem, type SessionsAction, type SessionsLabels, SessionsSetting, type SessionsSettingProps };
+export declare function SessionsSetting<Id extends SessionId = SessionId>({ onSignOutEverywhere, sessions, loading, onRevoke, describeError, formatLastActive, locale: localeProp, labels: labelsProp, className, ...rest }: SessionsSettingProps<Id>): import("react").JSX.Element;

package/dist/account/sessions-setting.js

@@ -7,30 +7,15 @@ import { cn } from "../lib/cn.js";
 import { formatRelativeTime, toDate } from "../lib/format.js";
 import { AlertBanner } from "../components/alert-banner.js";
 import { Chip } from "../components/chip.js";
-import { hasMessage } from "../components/choice-parts.js";
+import { hasContent } from "../lib/presence.js";
 import { DangerConfirm } from "../components/danger-confirm.js";
 import { Skeleton } from "../components/skeleton.js";
-import { Button, Card } from "../components/ui.js";
+import { Button } from "../components/button.js";
+import { Card } from "../components/card.js";
 import { CARD_DESCRIPTION_CLASS, settle, useMounted } from "./account-parts.js";
 import { SettingsCardTitle } from "../settings/settings-heading.js";
 import { COMMIT_EXCEPT_BILLING } from "../components/write-lock.js";
-const DEFAULT_SESSIONS_LABELS = {
-  title: "Sessions",
-  description: "Signed in on a device you no longer use, or don\u2019t trust? Sign out everywhere.",
-  signOutEverywhere: "Sign out everywhere\u2026",
-  signOutEverywherePrompt: "This ends every session, including this one: you will be signed out on this device too, and sign in again from here.",
-  confirmSignOutEverywhere: "Sign out everywhere",
-  list: "Where you\u2019re signed in",
-  loading: "Loading sessions\u2026",
-  empty: "No sessions to show.",
-  current: "This device",
-  unknownDevice: "Unknown device",
-  lastActive: (when) => `Last active ${when}`,
-  ip: (address) => `IP ${address}`,
-  revoke: "Sign out",
-  revokeItem: (device) => `Sign out ${device}`,
-  failed: "That didn\u2019t work. Please try again."
-};
+import { DEFAULT_SESSIONS_LABELS } from "./sessions-setting-labels.js";
 function SessionsSetting({
   onSignOutEverywhere,
   sessions,
@@ -50,7 +35,7 @@ function SessionsSetting({
   const mounted = useMounted();
   const describe = (error, action) => {
     const own = describeError?.(error, action);
-    return hasMessage(own) ? own : labels.failed;
+    return hasContent(own) ? own : labels.failed;
   };
   const lastActive = (value) => {
     const date = toDate(value);
@@ -85,7 +70,7 @@ function SessionsSetting({
       /* @__PURE__ */ jsx(SettingsCardTitle, { children: labels.title }),
       /* @__PURE__ */ jsx("div", { className: CARD_DESCRIPTION_CLASS, children: labels.description })
     ] }),
-    showList && (loading || sessions === void 0 ? /* @__PURE__ */ jsx(Skeleton, { lines: 2, label: labels.loading }) : sessions.length === 0 ? /* @__PURE__ */ jsx("p", { className: CARD_DESCRIPTION_CLASS, children: labels.empty }) : /* @__PURE__ */ jsx("ul", { "aria-label": labels.list, className: "divide-y divide-[var(--border)]", children: sessions.map((session) => {
+    showList && (loading || sessions === void 0 ? /* @__PURE__ */ jsx(Skeleton, { lines: 2, label: labels.loading }) : sessions.length === 0 ? /* @__PURE__ */ jsx("p", { className: CARD_DESCRIPTION_CLASS, children: labels.empty }) : /* @__PURE__ */ jsx("ul", { "aria-label": labels.list, className: "divide-y divide-subtle", children: sessions.map((session) => {
       const device = session.device?.trim() || labels.unknownDevice;
       const when = lastActive(session.lastActiveAt);
       const ip = session.ip?.trim();
@@ -96,7 +81,7 @@ function SessionsSetting({
           "data-current": session.current || void 0,
           className: "flex items-center gap-3 py-2",
           children: [
-            /* @__PURE__ */ jsx(MonitorSmartphone, { "aria-hidden": true, className: "size-4 shrink-0 text-[var(--text-muted)]" }),
+            /* @__PURE__ */ jsx(MonitorSmartphone, { "aria-hidden": true, className: "size-4 shrink-0 text-muted" }),
             /* @__PURE__ */ jsxs("div", { className: "min-w-0 flex-1", children: [
               /* @__PURE__ */ jsxs("div", { className: "flex flex-wrap items-center gap-x-2 gap-y-1", children: [
                 /* @__PURE__ */ jsx("span", { className: "min-w-0 break-words text-sm font-medium", children: device }),
@@ -138,7 +123,7 @@ function SessionsSetting({
         onConfirm: signOutEverywhere
       }
     ),
-    hasMessage(failure) && /* @__PURE__ */ jsx(AlertBanner, { tone: "danger", size: "sm", role: "alert", children: failure })
+    hasContent(failure) && /* @__PURE__ */ jsx(AlertBanner, { tone: "danger", size: "sm", role: "alert", children: failure })
   ] });
 }
 export {

package/dist/account/sessions-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/sessions-setting.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode } from \"react\";\nimport { MonitorSmartphone } from \"lucide-react\";\n\nimport { useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { formatRelativeTime, toDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport { DangerConfirm } from \"../components/danger-confirm\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { Button, Card } from \"../components/ui\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link SessionsSetting} renders — the `sessions` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n *  Cancel is `dangerConfirm.cancel`. */\nexport interface SessionsLabels {\n  /** The card's title. */\n  title: string;\n  /** The line under it: what \"sign out everywhere\" is for. */\n  description: string;\n  /** The button that asks first. */\n  signOutEverywhere: string;\n  /** The question it asks: every session ends, this one too. */\n  signOutEverywherePrompt: string;\n  /** The button that answers it. */\n  confirmSignOutEverywhere: string;\n  /** The device list's accessible name. */\n  list: string;\n  /** While the list loads. */\n  loading: string;\n  /** A list with no rows. */\n  empty: string;\n  /** The chip on the session this page runs in. */\n  current: string;\n  /** A session whose device the server could not name. */\n  unknownDevice: string;\n  /** Given the last activity, formatted (\"3 hours ago\", \"5 Oct 2026\"). */\n  lastActive: (when: string) => string;\n  /** Given the address the session was last seen from. */\n  ip: (address: string) => string;\n  /** A row's button, visible text. */\n  revoke: string;\n  /** The same button's accessible name, given the device — it starts with `revoke`,\n   *  the visible text, so voice control finds it by what it says. */\n  revokeItem: (device: string) => string;\n  /** A request failed. */\n  failed: string;\n}\n\nexport const DEFAULT_SESSIONS_LABELS: SessionsLabels = {\n  title: \"Sessions\",\n  description: \"Signed in on a device you no longer use, or don’t trust? Sign out everywhere.\",\n  signOutEverywhere: \"Sign out everywhere…\",\n  signOutEverywherePrompt:\n    \"This ends every session, including this one: you will be signed out on this device too, and sign in again from here.\",\n  confirmSignOutEverywhere: \"Sign out everywhere\",\n  list: \"Where you’re signed in\",\n  loading: \"Loading sessions…\",\n  empty: \"No sessions to show.\",\n  current: \"This device\",\n  unknownDevice: \"Unknown device\",\n  lastActive: (when) => `Last active ${when}`,\n  ip: (address) => `IP ${address}`,\n  revoke: \"Sign out\",\n  revokeItem: (device) => `Sign out ${device}`,\n  failed: \"That didn’t work. Please try again.\",\n};\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What a session's `id` may be: the app's own key type. */\nexport type SessionId = string | number;\n\n/** One stored session (kastlan's `GET /auth/sessions`). */\nexport interface SessionItem<Id extends SessionId = SessionId> {\n  id: Id;\n  /** The browser and system, as the server reads them (\"Firefox on Windows\"). Blank\n   *  reads as `labels.unknownDevice`. */\n  device?: string | null;\n  /** The address it was last seen from. */\n  ip?: string | null;\n  /** A `Date`, an ISO string or epoch ms. */\n  lastActiveAt?: DateInput;\n  /** The session this page runs in: marked, and offered no \"Sign out\" of its own — the\n   *  app's sign-out does that, and \"Sign out everywhere\" below. */\n  current?: boolean;\n}\n\n/** Which request failed — {@link SessionsSettingProps.describeError}'s second argument. */\nexport type SessionsAction = \"sign-out-everywhere\" | \"revoke\";\n\nexport interface SessionsSettingProps<Id extends SessionId = SessionId>\n  extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\"> {\n  /**\n   * End every session (`POST /auth/logout`, auth §6.3) — this one included. Asked\n   * first; resolve once the server answered, then sign this page out: the card says\n   * that the device signs out too, and its own session is gone.\n   */\n  onSignOutEverywhere: () => Promise<unknown> | void;\n  /**\n   * The stored sessions, where the app keeps them (kastlan's `user_sessions`, §6.3).\n   * Left out, the card is \"Sign out everywhere\" alone — keksdose and Kurvenschmiede keep\n   * a cut-off (`sessions_invalid_before`), not rows. `undefined` with `loading` while the\n   * first load runs.\n   */\n  sessions?: readonly SessionItem<Id>[];\n  /** The list is loading. */\n  loading?: boolean;\n  /** End one other session (`DELETE /auth/sessions/{id}`). Left out, no row buttons.\n   *  The row is busy until it settles; refresh `sessions` then. */\n  onRevoke?: (id: Id) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;\n  /** The \"Last active\" text. Default: how long ago, in the provider's locale, and the\n   *  date once it is more than a week back. */\n  formatLastActive?: (date: Date) => string;\n  /** Overrides the provider's locale for the default format. */\n  locale?: string;\n  labels?: Partial<SessionsLabels>;\n}\n\n/**\n * Where the account is signed in, and the way out of all of it\n * (docs/user-admin-harmonization.md §6.3, §2.6).\n *\n * **\"Sign out everywhere\", in every app.** It ends every session, THIS one included —\n * the server stamps a cut-off (`sessions_invalid_before`) that the page's own token is\n * older than — so the confirm says so before it is pressed, and the app signs out once it\n * resolves. A {@link DangerConfirm} in the warning tone: nothing is lost, but the person\n * has to sign in again on every device. keksdose kept its ordinary sign-out device-only\n * (its offline mirror is wiped on an explicit sign-out), which is why this is an action\n * of its own, not a mode of that one.\n *\n * **The device list, where sessions are stored** (kastlan): device, address, last\n * active, and \"This device\" on the current one, with \"Sign out\" on each other row — no\n * confirm, since a session ended is a sign-in away from coming back, not data lost.\n * Without `sessions` there is no list: the other apps keep a cut-off, not rows.\n *\n * Both requests are the app's; a failure is said under the card's action, in the app's\n * words if `describeError` has them.\n *\n * **Under a write lock** both are `commit` controls exempt from billing\n * (`COMMIT_EXCEPT_BILLING`, 0.33): a lapsed plan never keeps a person from ending their\n * own sessions (docs/billing-harmonization.md §12.13, §12.36); a demo's lock still does.\n */\nexport function SessionsSetting<Id extends SessionId = SessionId>({\n  onSignOutEverywhere,\n  sessions,\n  loading,\n  onRevoke,\n  describeError,\n  formatLastActive,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  ...rest\n}: SessionsSettingProps<Id>) {\n  const labels = useKitLabels(\"sessions\", DEFAULT_SESSIONS_LABELS, labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [busyId, setBusyId] = useState<Id | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  const describe = (error: unknown, action: SessionsAction): ReactNode => {\n    const own = describeError?.(error, action);\n    return hasMessage(own) ? own : labels.failed;\n  };\n\n  const lastActive = (value: DateInput): string | null => {\n    const date = toDate(value);\n    if (!date) return null;\n    return formatLastActive\n      ? formatLastActive(date)\n      : formatRelativeTime(date, { locale, absoluteAfterDays: 7, absoluteStyle: \"medium\" });\n  };\n\n  const signOutEverywhere = () => {\n    setFailure(null);\n    // Rejected again after it is said, so the tile stays armed for a retry.\n    return settle(onSignOutEverywhere).catch((error: unknown) => {\n      if (mounted.current) setFailure(describe(error, \"sign-out-everywhere\"));\n      throw error;\n    });\n  };\n\n  const revoke = (id: Id) => {\n    if (!onRevoke || busyId !== null) return;\n    setBusyId(id);\n    setFailure(null);\n    settle(() => onRevoke(id)).then(\n      () => {\n        if (mounted.current) setBusyId(null);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusyId(null);\n        setFailure(describe(error, \"revoke\"));\n      },\n    );\n  };\n\n  const showList = sessions !== undefined || loading;\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n      </div>\n      {showList &&\n        (loading || sessions === undefined ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : sessions.length === 0 ? (\n          <p className={CARD_DESCRIPTION_CLASS}>{labels.empty}</p>\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-[var(--border)]\">\n            {sessions.map((session) => {\n              const device = session.device?.trim() || labels.unknownDevice;\n              const when = lastActive(session.lastActiveAt);\n              const ip = session.ip?.trim();\n              return (\n                <li\n                  key={session.id}\n                  data-session-id={String(session.id)}\n                  data-current={session.current || undefined}\n                  className=\"flex items-center gap-3 py-2\"\n                >\n                  <MonitorSmartphone aria-hidden className=\"size-4 shrink-0 text-[var(--text-muted)]\" />\n                  <div className=\"min-w-0 flex-1\">\n                    <div className=\"flex flex-wrap items-center gap-x-2 gap-y-1\">\n                      <span className=\"min-w-0 break-words text-sm font-medium\">{device}</span>\n                      {session.current && (\n                        <Chip size=\"sm\" tone=\"brand\">\n                          {labels.current}\n                        </Chip>\n                      )}\n                    </div>\n                    {(when || ip) && (\n                      <div className={CARD_DESCRIPTION_CLASS}>\n                        {when && labels.lastActive(when)}\n                        {when && ip && \" · \"}\n                        {/* An address reads left to right in any page direction. */}\n                        {ip && <span dir=\"ltr\">{labels.ip(ip)}</span>}\n                      </div>\n                    )}\n                  </div>\n                  {onRevoke && !session.current && (\n                    <Button\n                      type=\"button\"\n                      size=\"sm\"\n                      variant=\"ghost\"\n                      commit={COMMIT_EXCEPT_BILLING}\n                      pending={busyId === session.id}\n                      disabled={busyId !== null && busyId !== session.id}\n                      aria-label={labels.revokeItem(device)}\n                      onClick={() => revoke(session.id)}\n                    >\n                      {labels.revoke}\n                    </Button>\n                  )}\n                </li>\n              );\n            })}\n          </ul>\n        ))}\n      <DangerConfirm\n        tone=\"warning\"\n        commit={COMMIT_EXCEPT_BILLING}\n        armLabel={labels.signOutEverywhere}\n        prompt={labels.signOutEverywherePrompt}\n        confirmLabel={labels.confirmSignOutEverywhere}\n        onConfirm={signOutEverywhere}\n      />\n      {hasMessage(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AAqNM,SACE,KADF;AArNN,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,SAAS,cAAc,oBAAoB;AAC3C,SAAS,UAAU;AACnB,SAAS,oBAAoB,cAAc;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB,SAAS,QAAQ,YAAY;AAC7B,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AAyC/B,MAAM,0BAA0C;AAAA,EACrD,OAAO;AAAA,EACP,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,yBACE;AAAA,EACF,0BAA0B;AAAA,EAC1B,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,eAAe;AAAA,EACf,YAAY,CAAC,SAAS,eAAe,IAAI;AAAA,EACzC,IAAI,CAAC,YAAY,MAAM,OAAO;AAAA,EAC9B,QAAQ;AAAA,EACR,YAAY,CAAC,WAAW,YAAY,MAAM;AAAA,EAC1C,QAAQ;AACV;AA+EO,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAE3B,QAAM,WAAW,CAAC,OAAgB,WAAsC;AACtE,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,WAAO,WAAW,GAAG,IAAI,MAAM,OAAO;AAAA,EACxC;AAEA,QAAM,aAAa,CAAC,UAAoC;AACtD,UAAM,OAAO,OAAO,KAAK;AACzB,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,mBACH,iBAAiB,IAAI,IACrB,mBAAmB,MAAM,EAAE,QAAQ,mBAAmB,GAAG,eAAe,SAAS,CAAC;AAAA,EACxF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,eAAW,IAAI;AAEf,WAAO,OAAO,mBAAmB,EAAE,MAAM,CAAC,UAAmB;AAC3D,UAAI,QAAQ,QAAS,YAAW,SAAS,OAAO,qBAAqB,CAAC;AACtE,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,CAAC,OAAW;AACzB,QAAI,CAAC,YAAY,WAAW,KAAM;AAClC,cAAU,EAAE;AACZ,eAAW,IAAI;AACf,WAAO,MAAM,SAAS,EAAE,CAAC,EAAE;AAAA,MACzB,MAAM;AACJ,YAAI,QAAQ,QAAS,WAAU,IAAI;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,kBAAU,IAAI;AACd,mBAAW,SAAS,OAAO,QAAQ,CAAC;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,aAAa,UAAa;AAE3C,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAmB,iBAAO,OAAM;AAAA,MACjC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,OAC9D;AAAA,IACC,aACE,WAAW,aAAa,SACvB,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,SAAS,WAAW,IACtB,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,OAAM,IAEpD,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,mCACpC,mBAAS,IAAI,CAAC,YAAY;AACzB,YAAM,SAAS,QAAQ,QAAQ,KAAK,KAAK,OAAO;AAChD,YAAM,OAAO,WAAW,QAAQ,YAAY;AAC5C,YAAM,KAAK,QAAQ,IAAI,KAAK;AAC5B,aACE;AAAA,QAAC;AAAA;AAAA,UAEC,mBAAiB,OAAO,QAAQ,EAAE;AAAA,UAClC,gBAAc,QAAQ,WAAW;AAAA,UACjC,WAAU;AAAA,UAEV;AAAA,gCAAC,qBAAkB,eAAW,MAAC,WAAU,4CAA2C;AAAA,YACpF,qBAAC,SAAI,WAAU,kBACb;AAAA,mCAAC,SAAI,WAAU,+CACb;AAAA,oCAAC,UAAK,WAAU,2CAA2C,kBAAO;AAAA,gBACjE,QAAQ,WACP,oBAAC,QAAK,MAAK,MAAK,MAAK,SAClB,iBAAO,SACV;AAAA,iBAEJ;AAAA,eACE,QAAQ,OACR,qBAAC,SAAI,WAAW,wBACb;AAAA,wBAAQ,OAAO,WAAW,IAAI;AAAA,gBAC9B,QAAQ,MAAM;AAAA,gBAEd,MAAM,oBAAC,UAAK,KAAI,OAAO,iBAAO,GAAG,EAAE,GAAE;AAAA,iBACxC;AAAA,eAEJ;AAAA,YACC,YAAY,CAAC,QAAQ,WACpB;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,QAAQ;AAAA,gBACR,SAAS,WAAW,QAAQ;AAAA,gBAC5B,UAAU,WAAW,QAAQ,WAAW,QAAQ;AAAA,gBAChD,cAAY,OAAO,WAAW,MAAM;AAAA,gBACpC,SAAS,MAAM,OAAO,QAAQ,EAAE;AAAA,gBAE/B,iBAAO;AAAA;AAAA,YACV;AAAA;AAAA;AAAA,QApCG,QAAQ;AAAA,MAsCf;AAAA,IAEJ,CAAC,GACH;AAAA,IAEJ;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,QAAQ;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO;AAAA,QACrB,WAAW;AAAA;AAAA,IACb;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/sessions-setting.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\nimport { MonitorSmartphone } from \"lucide-react\";\n\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { formatRelativeTime, toDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport { hasContent } from \"../lib/presence\";\nimport { DangerConfirm } from \"../components/danger-confirm\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { DEFAULT_SESSIONS_LABELS } from \"./sessions-setting-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link SessionsSetting} renders — the `sessions` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n *  Cancel is `dangerConfirm.cancel`. */\nexport interface SessionsLabels {\n  /** The card's title. */\n  title: string;\n  /** The line under it: what \"sign out everywhere\" is for. */\n  description: string;\n  /** The button that asks first. */\n  signOutEverywhere: string;\n  /** The question it asks: every session ends, this one too. */\n  signOutEverywherePrompt: string;\n  /** The button that answers it. */\n  confirmSignOutEverywhere: string;\n  /** The device list's accessible name. */\n  list: string;\n  /** While the list loads. */\n  loading: string;\n  /** A list with no rows. */\n  empty: string;\n  /** The chip on the session this page runs in. */\n  current: string;\n  /** A session whose device the server could not name. */\n  unknownDevice: string;\n  /** Given the last activity, formatted (\"3 hours ago\", \"5 Oct 2026\"). */\n  lastActive: (when: string) => string;\n  /** Given the address the session was last seen from. */\n  ip: (address: string) => string;\n  /** A row's button, visible text. */\n  revoke: string;\n  /** The same button's accessible name, given the device — it starts with `revoke`,\n   *  the visible text, so voice control finds it by what it says. */\n  revokeItem: (device: string) => string;\n  /** A request failed. */\n  failed: string;\n}\n\n// Defined in ./sessions-setting-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_SESSIONS_LABELS };\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What a session's `id` may be: the app's own key type. */\nexport type SessionId = string | number;\n\n/** One stored session (kastlan's `GET /auth/sessions`). */\nexport interface SessionItem<Id extends SessionId = SessionId> {\n  id: Id;\n  /** The browser and system, as the server reads them (\"Firefox on Windows\"). Blank\n   *  reads as `labels.unknownDevice`. */\n  device?: string | null;\n  /** The address it was last seen from. */\n  ip?: string | null;\n  /** A `Date`, an ISO string or epoch ms. */\n  lastActiveAt?: DateInput;\n  /** The session this page runs in: marked, and offered no \"Sign out\" of its own — the\n   *  app's sign-out does that, and \"Sign out everywhere\" below. */\n  current?: boolean;\n}\n\n/** Which request failed — {@link SessionsSettingProps.describeError}'s second argument. */\nexport type SessionsAction = \"sign-out-everywhere\" | \"revoke\";\n\nexport interface SessionsSettingProps<Id extends SessionId = SessionId>\n  extends Omit<ComponentPropsWithRef<\"div\">, \"children\"> {\n  /**\n   * End every session (`POST /auth/logout`, auth §6.3) — this one included. Asked\n   * first; resolve once the server answered, then sign this page out: the card says\n   * that the device signs out too, and its own session is gone.\n   */\n  onSignOutEverywhere: () => Promise<unknown> | void;\n  /**\n   * The stored sessions, where the app keeps them (kastlan's `user_sessions`, §6.3).\n   * Left out, the card is \"Sign out everywhere\" alone — keksdose and Kurvenschmiede keep\n   * a cut-off (`sessions_invalid_before`), not rows. `undefined` with `loading` while the\n   * first load runs.\n   */\n  sessions?: readonly SessionItem<Id>[];\n  /** The list is loading. */\n  loading?: boolean;\n  /** End one other session (`DELETE /auth/sessions/{id}`). Left out, no row buttons.\n   *  The row is busy until it settles; refresh `sessions` then. */\n  onRevoke?: (id: Id) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;\n  /** The \"Last active\" text. Default: how long ago, in the provider's locale, and the\n   *  date once it is more than a week back. */\n  formatLastActive?: (date: Date) => string;\n  /** Overrides the provider's locale for the default format. */\n  locale?: string;\n  labels?: LabelOverride<SessionsLabels>;\n}\n\n/**\n * Where the account is signed in, and the way out of all of it\n * (docs/user-admin-harmonization.md §6.3, §2.6).\n *\n * **\"Sign out everywhere\", in every app.** It ends every session, THIS one included —\n * the server stamps a cut-off (`sessions_invalid_before`) that the page's own token is\n * older than — so the confirm says so before it is pressed, and the app signs out once it\n * resolves. A {@link DangerConfirm} in the warning tone: nothing is lost, but the person\n * has to sign in again on every device. keksdose kept its ordinary sign-out device-only\n * (its offline mirror is wiped on an explicit sign-out), which is why this is an action\n * of its own, not a mode of that one.\n *\n * **The device list, where sessions are stored** (kastlan): device, address, last\n * active, and \"This device\" on the current one, with \"Sign out\" on each other row — no\n * confirm, since a session ended is a sign-in away from coming back, not data lost.\n * Without `sessions` there is no list: the other apps keep a cut-off, not rows.\n *\n * Both requests are the app's; a failure is said under the card's action, in the app's\n * words if `describeError` has them.\n *\n * **Under a write lock** both are `commit` controls exempt from billing\n * (`COMMIT_EXCEPT_BILLING`, 0.33): a lapsed plan never keeps a person from ending their\n * own sessions (docs/billing-harmonization.md §12.13, §12.36); a demo's lock still does.\n */\nexport function SessionsSetting<Id extends SessionId = SessionId>({\n  onSignOutEverywhere,\n  sessions,\n  loading,\n  onRevoke,\n  describeError,\n  formatLastActive,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  ...rest\n}: SessionsSettingProps<Id>) {\n  const labels = useKitLabels(\"sessions\", DEFAULT_SESSIONS_LABELS, labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [busyId, setBusyId] = useState<Id | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  const describe = (error: unknown, action: SessionsAction): ReactNode => {\n    const own = describeError?.(error, action);\n    return hasContent(own) ? own : labels.failed;\n  };\n\n  const lastActive = (value: DateInput): string | null => {\n    const date = toDate(value);\n    if (!date) return null;\n    return formatLastActive\n      ? formatLastActive(date)\n      : formatRelativeTime(date, { locale, absoluteAfterDays: 7, absoluteStyle: \"medium\" });\n  };\n\n  const signOutEverywhere = () => {\n    setFailure(null);\n    // Rejected again after it is said, so the tile stays armed for a retry.\n    return settle(onSignOutEverywhere).catch((error: unknown) => {\n      if (mounted.current) setFailure(describe(error, \"sign-out-everywhere\"));\n      throw error;\n    });\n  };\n\n  const revoke = (id: Id) => {\n    if (!onRevoke || busyId !== null) return;\n    setBusyId(id);\n    setFailure(null);\n    settle(() => onRevoke(id)).then(\n      () => {\n        if (mounted.current) setBusyId(null);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusyId(null);\n        setFailure(describe(error, \"revoke\"));\n      },\n    );\n  };\n\n  const showList = sessions !== undefined || loading;\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n      </div>\n      {showList &&\n        (loading || sessions === undefined ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : sessions.length === 0 ? (\n          <p className={CARD_DESCRIPTION_CLASS}>{labels.empty}</p>\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-subtle\">\n            {sessions.map((session) => {\n              const device = session.device?.trim() || labels.unknownDevice;\n              const when = lastActive(session.lastActiveAt);\n              const ip = session.ip?.trim();\n              return (\n                <li\n                  key={session.id}\n                  data-session-id={String(session.id)}\n                  data-current={session.current || undefined}\n                  className=\"flex items-center gap-3 py-2\"\n                >\n                  <MonitorSmartphone aria-hidden className=\"size-4 shrink-0 text-muted\" />\n                  <div className=\"min-w-0 flex-1\">\n                    <div className=\"flex flex-wrap items-center gap-x-2 gap-y-1\">\n                      <span className=\"min-w-0 break-words text-sm font-medium\">{device}</span>\n                      {session.current && (\n                        <Chip size=\"sm\" tone=\"brand\">\n                          {labels.current}\n                        </Chip>\n                      )}\n                    </div>\n                    {(when || ip) && (\n                      <div className={CARD_DESCRIPTION_CLASS}>\n                        {when && labels.lastActive(when)}\n                        {when && ip && \" · \"}\n                        {/* An address reads left to right in any page direction. */}\n                        {ip && <span dir=\"ltr\">{labels.ip(ip)}</span>}\n                      </div>\n                    )}\n                  </div>\n                  {onRevoke && !session.current && (\n                    <Button\n                      type=\"button\"\n                      size=\"sm\"\n                      variant=\"ghost\"\n                      commit={COMMIT_EXCEPT_BILLING}\n                      pending={busyId === session.id}\n                      disabled={busyId !== null && busyId !== session.id}\n                      aria-label={labels.revokeItem(device)}\n                      onClick={() => revoke(session.id)}\n                    >\n                      {labels.revoke}\n                    </Button>\n                  )}\n                </li>\n              );\n            })}\n          </ul>\n        ))}\n      <DangerConfirm\n        tone=\"warning\"\n        commit={COMMIT_EXCEPT_BILLING}\n        armLabel={labels.signOutEverywhere}\n        prompt={labels.signOutEverywherePrompt}\n        confirmLabel={labels.confirmSignOutEverywhere}\n        onConfirm={signOutEverywhere}\n      />\n      {hasContent(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AAuMM,SACE,KADF;AAvMN,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,SAAS,cAAc,oBAAwC;AAC/D,SAAS,UAAU;AACnB,SAAS,oBAAoB,cAAc;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AAyHjC,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAE3B,QAAM,WAAW,CAAC,OAAgB,WAAsC;AACtE,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,WAAO,WAAW,GAAG,IAAI,MAAM,OAAO;AAAA,EACxC;AAEA,QAAM,aAAa,CAAC,UAAoC;AACtD,UAAM,OAAO,OAAO,KAAK;AACzB,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,mBACH,iBAAiB,IAAI,IACrB,mBAAmB,MAAM,EAAE,QAAQ,mBAAmB,GAAG,eAAe,SAAS,CAAC;AAAA,EACxF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,eAAW,IAAI;AAEf,WAAO,OAAO,mBAAmB,EAAE,MAAM,CAAC,UAAmB;AAC3D,UAAI,QAAQ,QAAS,YAAW,SAAS,OAAO,qBAAqB,CAAC;AACtE,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,CAAC,OAAW;AACzB,QAAI,CAAC,YAAY,WAAW,KAAM;AAClC,cAAU,EAAE;AACZ,eAAW,IAAI;AACf,WAAO,MAAM,SAAS,EAAE,CAAC,EAAE;AAAA,MACzB,MAAM;AACJ,YAAI,QAAQ,QAAS,WAAU,IAAI;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,kBAAU,IAAI;AACd,mBAAW,SAAS,OAAO,QAAQ,CAAC;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,aAAa,UAAa;AAE3C,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAmB,iBAAO,OAAM;AAAA,MACjC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,OAC9D;AAAA,IACC,aACE,WAAW,aAAa,SACvB,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,SAAS,WAAW,IACtB,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,OAAM,IAEpD,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,0BACpC,mBAAS,IAAI,CAAC,YAAY;AACzB,YAAM,SAAS,QAAQ,QAAQ,KAAK,KAAK,OAAO;AAChD,YAAM,OAAO,WAAW,QAAQ,YAAY;AAC5C,YAAM,KAAK,QAAQ,IAAI,KAAK;AAC5B,aACE;AAAA,QAAC;AAAA;AAAA,UAEC,mBAAiB,OAAO,QAAQ,EAAE;AAAA,UAClC,gBAAc,QAAQ,WAAW;AAAA,UACjC,WAAU;AAAA,UAEV;AAAA,gCAAC,qBAAkB,eAAW,MAAC,WAAU,8BAA6B;AAAA,YACtE,qBAAC,SAAI,WAAU,kBACb;AAAA,mCAAC,SAAI,WAAU,+CACb;AAAA,oCAAC,UAAK,WAAU,2CAA2C,kBAAO;AAAA,gBACjE,QAAQ,WACP,oBAAC,QAAK,MAAK,MAAK,MAAK,SAClB,iBAAO,SACV;AAAA,iBAEJ;AAAA,eACE,QAAQ,OACR,qBAAC,SAAI,WAAW,wBACb;AAAA,wBAAQ,OAAO,WAAW,IAAI;AAAA,gBAC9B,QAAQ,MAAM;AAAA,gBAEd,MAAM,oBAAC,UAAK,KAAI,OAAO,iBAAO,GAAG,EAAE,GAAE;AAAA,iBACxC;AAAA,eAEJ;AAAA,YACC,YAAY,CAAC,QAAQ,WACpB;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,QAAQ;AAAA,gBACR,SAAS,WAAW,QAAQ;AAAA,gBAC5B,UAAU,WAAW,QAAQ,WAAW,QAAQ;AAAA,gBAChD,cAAY,OAAO,WAAW,MAAM;AAAA,gBACpC,SAAS,MAAM,OAAO,QAAQ,EAAE;AAAA,gBAE/B,iBAAO;AAAA;AAAA,YACV;AAAA;AAAA;AAAA,QApCG,QAAQ;AAAA,MAsCf;AAAA,IAEJ,CAAC,GACH;AAAA,IAEJ;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,QAAQ;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO;AAAA,QACrB,WAAW;AAAA;AAAA,IACb;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}

package/dist/admin/admin-action-confirm-labels.d.ts

@@ -0,0 +1,2 @@
+import type { AdminActionLabels } from "./admin-action-confirm.js";
+export declare const DEFAULT_ADMIN_ACTION_LABELS: AdminActionLabels;

package/dist/admin/admin-action-confirm-labels.js

@@ -0,0 +1,16 @@
+"use client";
+const DEFAULT_ADMIN_ACTION_LABELS = {
+  confirm: "Confirm",
+  cancel: "Cancel",
+  close: "Close",
+  lastAdmin: "This is the last active administrator. Make someone else an administrator first.",
+  self: "You can\u2019t do this to your own account.",
+  confirmationMismatch: "The address doesn\u2019t match this account. Check which account you are on.",
+  otherCompanies: "This account also belongs to other companies, so only the platform operator can do this. You can remove it from this company instead.",
+  removeFromCompany: "Remove from company",
+  failed: "That didn\u2019t work. Please try again."
+};
+export {
+  DEFAULT_ADMIN_ACTION_LABELS
+};
+//# sourceMappingURL=admin-action-confirm-labels.js.map

package/dist/admin/admin-action-confirm-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/admin/admin-action-confirm-labels.ts"],"sourcesContent":["// The English words of ./admin-action-confirm, in a module with no component code: the\n// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`\n// loads as one chunk like the other languages (0.34, KS U8). ./admin-action-confirm\n// re-exports them.\n\nimport type { AdminActionLabels } from \"./admin-action-confirm\";\n\nexport const DEFAULT_ADMIN_ACTION_LABELS: AdminActionLabels = {\n  confirm: \"Confirm\",\n  cancel: \"Cancel\",\n  close: \"Close\",\n  lastAdmin: \"This is the last active administrator. Make someone else an administrator first.\",\n  self: \"You can’t do this to your own account.\",\n  confirmationMismatch: \"The address doesn’t match this account. Check which account you are on.\",\n  otherCompanies:\n    \"This account also belongs to other companies, so only the platform operator can do this. You can remove it from this company instead.\",\n  removeFromCompany: \"Remove from company\",\n  failed: \"That didn’t work. Please try again.\",\n};\n"],"mappings":";AAOO,MAAM,8BAAiD;AAAA,EAC5D,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,WAAW;AAAA,EACX,MAAM;AAAA,EACN,sBAAsB;AAAA,EACtB,gBACE;AAAA,EACF,mBAAmB;AAAA,EACnB,QAAQ;AACV;","names":[]}

package/dist/admin/admin-action-confirm.d.ts

@@ -1,101 +1,156 @@
-import 'react';
-export { bt as AdminActionConfirm, bu as AdminActionConfirmProps, bv as AdminActionConfirmValues, bw as AdminActionLabels, bx as AdminActionTarget, by as AdminConfirmLevel, cm as DEFAULT_ADMIN_ACTION_LABELS } from '../delete-account-setting-DAgGBrbn.js';
-import './admin-parts.js';
-import '../components/write-lock.js';
-import '../components/tooltip.js';
-import '../hooks/use-anchored-rect.js';
-import '../lib/clipping.js';
-import '../data-table-labels-BJ5JE_X2.js';
-import '../components/data-table-sort.js';
-import '../components/swipeable-row.js';
-import '../components/status-dot.js';
-import '../components/progress-bar.js';
-import '../components/signed-amount.js';
-import '../components/stat-tile.js';
-import '../components/chip.js';
-import 'lucide-react';
-import '../components/field-parts.js';
-import '../components/mini-calendar.js';
-import '../components/calendar-heatmap.js';
-import '../components/popover.js';
-import '../hooks/use-breakpoint.js';
-import '../components/field-sync.js';
-import '../wizard/types.js';
-import '../tour/tour.js';
-import '../search/command-palette.js';
-import '../search/global-search.js';
-import '../search/search-index.js';
-import '../components/month-picker.js';
-import '../components/page-contents.js';
-import '../components/series-chart-labels.js';
-import '../components/pie-chart-labels.js';
-import '../components/sparkline.js';
-import '../components/signature-pad.js';
-import '../components/password-strength.js';
-import '../components/swatch-picker.js';
-import '../components/tile-radio.js';
-import '../components/icon-picker.js';
-import '../components/dialog-frame.js';
-import '../components/modal.js';
-import '../hooks/use-search-param-state.js';
-import '../components/measured-grid.js';
-import '../components/user-avatar.js';
-import '../lib/person-name.js';
-import '../shell/topbar-action-menu.js';
-import '../components/menu-item.js';
-import '../components/floating-panel.js';
-import '../hooks/use-authed-src.js';
-import '../components/account-settings-labels.js';
-import '../components/bulk-action-bar.js';
-import '../components/list.js';
-import '../components/breadcrumbs.js';
-import '../components/toast.js';
-import '../components/description-list.js';
-import '../components/line-items.js';
-import '../components/error-boundary.js';
-import '../components/authed-image.js';
-import '../components/image-grid.js';
-import '../components/lightbox.js';
-import '../auth/sign-in-form.js';
-import '../landing/access.js';
-import '../landing/landing-labels.js';
-import '../shell/topbar-controls.js';
-import '../theme/palette-presets.js';
-import '../theme/chart-palette.js';
-import '../theme/theme-store.js';
-import 'zustand/middleware';
-import 'zustand';
-import '../auth/complete-name-dialog.js';
-import '../auth/forgot-password-form.js';
-import '../auth/status-parts.js';
-import '../auth/reset-password-form.js';
-import '../auth/verify-email.js';
-import '../auth/not-found-page.js';
-import '../auth/accept-invitation.js';
-import '../shell/company-switcher.js';
-import '../account/email-change-setting.js';
-import '../account/sessions-setting.js';
-import '../lib/format.js';
-import '../account/data-export-setting.js';
-import '../components/account-chips.js';
-import './admin-action-log.js';
-import '../settings/settings-labels.js';
-import '../demo/demo-labels.js';
-import '../i18n/plurals.js';
-import '../components/appearance-labels.js';
-import '../theme/contrast.js';
-import '../theme/text-size.js';
-import '../components/reauth-dialog.js';
-import '../components/server-wake.js';
-import '../lib/server-wake.js';
-import '../components/translation-review-labels.js';
-import '../lib/translation-review.js';
-import '../components/country-select.js';
-import '../components/inline-edit-field.js';
-import '../lib/iban.js';
-import '../lib/phone.js';
-import '../components/sign-chip.js';
-import '../components/column-mapper.js';
-import '../lib/column-mapping.js';
-import '../lib/table-text.js';
-import '../components/focus-ring.js';
+import type { ReactNode } from "react";
+import { type LabelOverride } from "../i18n/kit-labels.js";
+import type { DangerConsequence } from "../components/danger-confirm.js";
+import type { AdminPerson, MaybePromise } from "./admin-parts.js";
+import type { AdminGroupTarget } from "./admin-action-log.js";
+import type { CommitScope } from "../components/write-lock.js";
+import { DEFAULT_ADMIN_ACTION_LABELS } from "./admin-action-confirm-labels.js";
+/**
+ * The confirmation in front of an admin action, at the level the SERVER states
+ * (docs/user-admin-harmonization.md §4.2):
+ *
+ * | level | what it asks | actions |
+ * |---|---|---|
+ * | `none` | nothing: it confirms at once and renders nothing | resend a mail, reactivate, the reviewer scope… |
+ * | `acknowledge` | a tick under the consequence | force a password change, change a role, delete a group |
+ * | `type_email` | the target's address, typed | deactivate, erase now, transfer |
+ *
+ * A GROUP (round 0.34, §11.8) is a target at `none` and `acknowledge` only, said by its
+ * name: it has no address to type, and no level table gives a group's action
+ * `type_email` (server-kit's `require_confirmation` raises for one). The props' types
+ * say so. Deleting one (`group_delete`) is `acknowledge` — a tick under the app's own
+ * sentence of what goes with it, Kurvenschmiede's "3 members, 2 grants and 1 invitation
+ * go with it" (decision 5): the cascade is what nobody can see afterwards.
+ *
+ * keksdose decides the level per action and per account on the server
+ * (`admin_user_actions_service`) and Kurvenschmiede asks for the typed address on its
+ * two hard-to-undo actions; both drew the dialog by hand beside the kit's `DangerConfirm`
+ * and `useConfirm`. The level is a PROP, never derived here: the server enforces it and
+ * a hand-written request never sees this dialog, so a page that guessed its own level
+ * could only disagree with the server. The comparison (caseless), the field and the tick
+ * are `DangerConfirm`'s (`TypedConfirmField`, the `dangerConfirm` words), so the three
+ * confirmations in the kit cannot disagree about what counts as the address.
+ *
+ * WHY TYPE THE TARGET'S ADDRESS and not the admin's password: the admin proved who they
+ * are at the admin gate. What is unproven is which ROW they are on (keksdose's
+ * `TYPE_EMAIL` rule, Kurvenschmiede's `TypedConfirm`).
+ *
+ * THE REFUSALS (§4.1, §9.6) are read by code — `authErrorCode`, which knows the account
+ * codes beside the sign-in ones — and stay in the dialog, which stays open so the admin
+ * can read them: `last_admin`, `self_action`, `confirmation_mismatch`, and kastlan's
+ * `other_companies` — with "Remove from company" offered in its place when the app passes
+ * `onRemoveFromCompany`. Anything else is `describeError`'s words, else "That didn't work".
+ * At level `none` nothing is drawn while the action runs; a refusal opens a dialog of its
+ * own to say it.
+ *
+ * It never sends a request: `onConfirm` does, with what the guards were answered with.
+ */
+/** How much confirmation an action needs — the server's `confirmation_level(action)`. */
+export type AdminConfirmLevel = "none" | "acknowledge" | "type_email";
+/** What {@link AdminActionConfirmProps.onConfirm} receives — the guards' answers, for
+ *  the request body (the server re-checks both). */
+export interface AdminActionConfirmValues {
+    /** `type_email`: the address as typed — trimmed, its case the admin's; the body's
+     *  `confirm_email`, which the server compares with the account's (server-kit's
+     *  `confirm_email_matches`). */
+    confirmEmail?: string;
+    /** `acknowledge` and `type_email`: the action was confirmed past a guard — the body's
+     *  `acknowledged`, which every admin action carries (server-kit 0.4). */
+    acknowledged?: true;
+}
+/** The account the action is about. A group is an {@link AdminGroupTarget}. */
+export type AdminActionTarget = AdminPerson & {
+    email: string;
+};
+/** The `adminAction` namespace. The tick, the typed field and their held-button reasons
+ *  are the `dangerConfirm` namespace's, shared with `DangerConfirm`. */
+export interface AdminActionLabels {
+    /** The confirm button when the action names none. */
+    confirm: string;
+    cancel: string;
+    /** The refusal dialog's only button (level `none`). */
+    close: string;
+    /** `409 last_admin`. */
+    lastAdmin: string;
+    /** `409 self_action`: the admin's own account. */
+    self: string;
+    /** `confirmation_mismatch`: the typed address is not this account's — the page and
+     *  the server disagree about which row this is. */
+    confirmationMismatch: string;
+    /** kastlan's `409 other_companies` (§9.6). */
+    otherCompanies: string;
+    /** The alternative offered with it. */
+    removeFromCompany: string;
+    /** Any other failure, unless `describeError` says better. */
+    failed: string;
+}
+export { DEFAULT_ADMIN_ACTION_LABELS };
+/** What the action is about, and the level the server states for it. A union, so a group
+ *  can't be given `type_email` (§11.8). */
+type AdminActionConfirmTarget = {
+    /** The level the server states for this action on this account (§4.2). */
+    level: AdminConfirmLevel;
+    /** Whom it is about: the address (typed at `type_email`) and the name parts. */
+    target: AdminActionTarget;
+} | {
+    /** A group's action: `none`, or `acknowledge` for `group_delete` (decision 5). */
+    level: Exclude<AdminConfirmLevel, "type_email">;
+    /** The group it is about, said by its name (0.34, §11.8). */
+    target: AdminGroupTarget;
+};
+/** The props whatever the target. */
+interface AdminActionConfirmCommonProps {
+    /** The confirm button — "Deactivate". Also the title when no `title` is given. */
+    confirmLabel?: ReactNode;
+    /** The dialog's heading — "Deactivate Ada Example?". Default `confirmLabel`. */
+    title?: ReactNode;
+    /**
+     * What the action does to THIS account, said before it happens: a sentence, or lines
+     * (`DangerConsequence`, a `severe` one in the danger colour). Derive them from the
+     * row's facts rather than reciting the worst case (keksdose dev#488).
+     */
+    consequence?: ReactNode | readonly (string | DangerConsequence)[];
+    /** The tick's words at `acknowledge`. Default `dangerConfirm.acknowledge` — "I have
+     *  read what this does and want to continue." */
+    acknowledgeLabel?: ReactNode;
+    /** `danger` (default at `type_email`): a red confirm. `warning` (default at
+     *  `acknowledge`) and `neutral`: the primary confirm. */
+    tone?: "danger" | "warning" | "neutral";
+    /**
+     * Runs the action. Return a promise and the dialog manages itself: busy until it
+     * settles, closed (`onClose(true)`) when it resolves, open with the refusal when it
+     * rejects. Return nothing and the app owns the rest — `busy`, `error`, closing it.
+     */
+    onConfirm: (values: AdminActionConfirmValues) => MaybePromise;
+    /** The dialog has closed: `true` after the action (or the alternative) went through,
+     *  `false` for Cancel, Escape, the backdrop or Back. */
+    onClose: (done: boolean) => void;
+    /** kastlan: offered with an `other_companies` refusal — `DELETE …/membership`,
+     *  logged as `membership_remove` (§4.1). Promise handling as `onConfirm`. */
+    onRemoveFromCompany?: () => MaybePromise;
+    /** The app's words for a failure the kit has no code for. Asked first. */
+    describeError?: (error: unknown) => ReactNode | undefined;
+    /** A refusal the app caught itself, when `onConfirm` returns nothing. */
+    error?: unknown;
+    /** The action is running, for an app that tracks it itself. */
+    busy?: boolean;
+    /**
+     * Fields of the action's own, above the guard — the transfer's recipient, kastlan's
+     * roles (`RolesEditor`). Their values are the app's; hold the confirm with
+     * `confirmDisabledReason` until they are complete.
+     */
+    children?: ReactNode;
+    /** Why the confirm is held for a reason of the app's ("Choose who receives it").
+     *  Named before the guard's own, since the fields are above it. */
+    confirmDisabledReason?: ReactNode;
+    /** Kept-mounted mode, as on `DialogFrame`; left out, open while mounted. */
+    open?: boolean;
+    /** The confirm COMMITS: under a locked `WriteLockProvider` it is held with the lock's
+     *  reason. Off by default — an admin action is not a write to the open record. */
+    commit?: CommitScope;
+    labels?: LabelOverride<AdminActionLabels>;
+}
+/** A type since 0.34 (an interface before): a person at any level, or a group at `none`
+ *  and `acknowledge`. */
+export type AdminActionConfirmProps = AdminActionConfirmCommonProps & AdminActionConfirmTarget;
+export declare function AdminActionConfirm({ level, target, confirmLabel, title, consequence, acknowledgeLabel, tone: toneProp, onConfirm, onClose, onRemoveFromCompany, describeError, error: errorProp, busy: busyProp, children, confirmDisabledReason, open, commit, labels: labelsProp, }: AdminActionConfirmProps): import("react").JSX.Element | null;

package/dist/admin/admin-action-confirm.js

@@ -7,20 +7,12 @@ import { Checkbox } from "../components/checkbox.js";
 import { DEFAULT_DANGER_CONFIRM_LABELS, TypedConfirmField, typedMatches } from "../components/danger-confirm.js";
 import { DialogFrame } from "../components/dialog-frame.js";
 import { ModalCloseContext } from "../components/modal.js";
-import { Button } from "../components/ui.js";
+import { Button } from "../components/button.js";
 import { authErrorCode } from "../auth/auth-errors.js";
-import { hasMessage, usePersonLabel } from "./admin-parts.js";
-const DEFAULT_ADMIN_ACTION_LABELS = {
-  confirm: "Confirm",
-  cancel: "Cancel",
-  close: "Close",
-  lastAdmin: "This is the last active administrator. Make someone else an administrator first.",
-  self: "You can\u2019t do this to your own account.",
-  confirmationMismatch: "The address doesn\u2019t match this account. Check which account you are on.",
-  otherCompanies: "This account also belongs to other companies, so only the platform operator can do this. You can remove it from this company instead.",
-  removeFromCompany: "Remove from company",
-  failed: "That didn\u2019t work. Please try again."
-};
+import { usePersonLabel } from "./admin-parts.js";
+import { hasContent } from "../lib/presence.js";
+import { isGroupTarget } from "./admin-action-log.js";
+import { DEFAULT_ADMIN_ACTION_LABELS } from "./admin-action-confirm-labels.js";
 function isThenable(value) {
   return typeof value === "object" && value !== null && typeof value.then === "function";
 }
@@ -28,7 +20,7 @@ function refusalOf(error, present, describeError, labels) {
   if (!present) return null;
   const code = authErrorCode(error);
   const own = describeError?.(error);
-  if (hasMessage(own)) return { text: own, code };
+  if (hasContent(own)) return { text: own, code };
   const text = code === "last_admin" ? labels.lastAdmin : code === "self_action" ? labels.self : code === "confirmation_mismatch" ? labels.confirmationMismatch : code === "other_companies" ? labels.otherCompanies : labels.failed;
   return { text, code };
 }
@@ -143,8 +135,11 @@ function AdminActionConfirm({
   const hasRefusal = failure !== null || errorProp !== void 0;
   const refusal = refusalOf(failure ? failure.error : errorProp, hasRefusal, describeError, labels);
   const offerRemoval = refusal?.code === "other_companies" && onRemoveFromCompany !== void 0;
-  const name = nameOf(target);
-  const identity = /* @__PURE__ */ jsx("span", { "data-private": true, children: name && name !== target.email ? `${name} \xB7 ${target.email}` : target.email });
+  const group = isGroupTarget(target);
+  const email = group ? "" : target.email;
+  const name = group ? (target.name ?? "").trim() : nameOf(target);
+  const said = !name || name === email ? email : email ? `${name} \xB7 ${email}` : name;
+  const identity = /* @__PURE__ */ jsx("span", { "data-private": true, children: said });
   const heading = title ?? confirmLabel ?? labels.confirm;
   const refusalBanner = refusal && /* @__PURE__ */ jsx(
     AlertBanner,
@@ -180,10 +175,10 @@ function AdminActionConfirm({
     );
   }
   const tone = toneProp ?? (level === "type_email" ? "danger" : "warning");
-  const askTyped = level === "type_email";
-  const typedOk = !askTyped || typedMatches(typed, target.email, "caseless");
+  const askTyped = level === "type_email" && !group;
+  const typedOk = !askTyped || typedMatches(typed, email, "caseless");
   const tickOk = askTyped || ticked;
-  const guardReason = hasMessage(confirmDisabledReason) ? confirmDisabledReason : !tickOk ? guardLabels.needsAcknowledge : !typedOk ? typeof guardLabels.needsPhrase === "function" ? guardLabels.needsPhrase(target.email) : guardLabels.needsPhrase : void 0;
+  const guardReason = hasContent(confirmDisabledReason) ? confirmDisabledReason : !tickOk ? guardLabels.needsAcknowledge : !typedOk ? typeof guardLabels.needsPhrase === "function" ? guardLabels.needsPhrase(email) : guardLabels.needsPhrase : void 0;
   const submit = () => {
     if (busy || guardReason !== void 0) return;
     perform(
@@ -231,13 +226,13 @@ function AdminActionConfirm({
             submit();
           },
           children: [
-            lines ? /* @__PURE__ */ jsx("ul", { className: "list-disc space-y-1 ps-5 text-sm text-[var(--text-secondary)]", children: lines.map((line) => /* @__PURE__ */ jsx("li", { className: line.severe ? "text-[var(--danger)]" : void 0, children: line.text }, line.key)) }) : hasMessage(consequence) && /* @__PURE__ */ jsx("p", { className: "text-sm text-[var(--text-secondary)]", children: consequence }),
-            Children.toArray(children).some(hasMessage) && /* @__PURE__ */ jsx("div", { ref: slotRef, className: "space-y-3", children }),
+            lines ? /* @__PURE__ */ jsx("ul", { className: "list-disc space-y-1 ps-5 text-sm text-secondary", children: lines.map((line) => /* @__PURE__ */ jsx("li", { className: line.severe ? "text-danger" : void 0, children: line.text }, line.key)) }) : hasContent(consequence) && /* @__PURE__ */ jsx("p", { className: "text-sm text-secondary", children: consequence }),
+            Children.toArray(children).some(hasContent) && /* @__PURE__ */ jsx("div", { ref: slotRef, className: "space-y-3", children }),
             askTyped ? /* @__PURE__ */ jsx(
               TypedConfirmField,
               {
                 ref: guardRef,
-                target: target.email,
+                target: email,
                 match: "caseless",
                 value: typed,
                 onValueChange: setTyped,