@eifi1/ui-kit 0.41.0 → 0.42.0

package/src/admin/admin-forbidden.tsx

@@ -0,0 +1,75 @@
+import type { ComponentPropsWithRef } from "react";
+import { ShieldAlert } from "lucide-react";
+import { cn } from "../lib/cn";
+import { Button } from "../components/button";
+import { EmptyState } from "../components/empty-state";
+import type { LabelOverride } from "../i18n/kit-labels";
+import { useAdminAreaLabels } from "./admin-area-labels";
+import type { AdminAreaLabels } from "./admin-area-labels";
+
+export interface AdminForbiddenProps extends Omit<ComponentPropsWithRef<"div">, "children" | "title"> {
+  /** The app's name, in the sentence: "This is where administrators run Kastlan." */
+  appName: string;
+  /** The button's target: the app's start page (keksdose `/budget`, kastlan `/dashboard`). */
+  homeHref: string;
+  /** The button's words, where the app names its start ("Back to the budget"). Default
+   *  `adminArea.forbiddenHome`, "Go to the start page". */
+  homeLabel?: string;
+  /** Pass it to a translation reviewer: a second button, "Review translations", to the
+   *  tool their role does have (§2.2 decision 8). */
+  reviewerHref?: string;
+  /** The heading's level. Default `h1`: the page stands alone inside the app shell. */
+  headingAs?: "h1" | "h2" | "h3";
+  /** Prop > `<UiKitProvider labels={{ adminArea }}>` > English. */
+  labels?: LabelOverride<AdminAreaLabels>;
+}
+
+/**
+ * The admin area's 403 page (0.42.0, docs/admin-harmonization.md §2.2 decision 8, §6.7),
+ * keksdose's `AdminForbidden`: "Only for administrators" / "This is where administrators
+ * run {app}. Your account cannot open this page.", and a button back to the app's start.
+ *
+ * It RENDERS, it does not redirect: the app's client gate shows it in place of the admin
+ * page, on the same admin check the account menu uses, inside the lazy route — so a
+ * bookmark keeps its address, and signing in as an admin opens the page that was asked
+ * for. The server's gate stays the rule. kastlan shows it on its admin tools (`/admin`,
+ * `/import`, `/feedback`); its work pages keep their generic 403.
+ *
+ * The words say only that this area is closed to this account, never that the person
+ * administers nothing anywhere: a kastlan superuser who isn't ADMIN in the acting company
+ * gets this page too.
+ */
+export function AdminForbidden({
+  appName,
+  homeHref,
+  homeLabel,
+  reviewerHref,
+  headingAs = "h1",
+  labels: labelsProp,
+  className,
+  ...rest
+}: AdminForbiddenProps) {
+  const labels = useAdminAreaLabels(labelsProp);
+  return (
+    <div {...rest} data-slot="admin-forbidden" className={cn("mx-auto w-full max-w-xl p-4 md:p-6", className)}>
+      <EmptyState
+        icon={<ShieldAlert />}
+        headingAs={headingAs}
+        title={labels.forbiddenTitle}
+        hint={labels.forbiddenBody(appName)}
+        action={
+          <>
+            <Button href={homeHref} variant="secondary">
+              {homeLabel ?? labels.forbiddenHome}
+            </Button>
+            {reviewerHref !== undefined && (
+              <Button href={reviewerHref} variant="secondary">
+                {labels.forbiddenReviewer}
+              </Button>
+            )}
+          </>
+        }
+      />
+    </div>
+  );
+}

package/src/admin/admin-overview.tsx

@@ -0,0 +1,166 @@
+import type { ReactNode } from "react";
+import { StatTile, StatTileGrid } from "../components/stat-tile";
+import type { StatTileProps } from "../components/stat-tile";
+import type { LabelOverride } from "../i18n/kit-labels";
+import { useAdminAreaLabels } from "./admin-area-labels";
+import type { AdminAreaLabels } from "./admin-area-labels";
+
+/**
+ * The admin's start page (0.42.0, docs/admin-harmonization.md §2.4, §6.1–§6.5): a grid
+ * of tiles, each a count of what is waiting and a link to where the work is, fed by one
+ * server answer.
+ */
+
+/**
+ * `GET /admin/attention` (§2.4 decision 14, §6.4) — server-kit's `AdminAttention`
+ * (`eifi1_server_kit.user_admin.attention`), as the API sends it.
+ *
+ * Each count is `null` where the app has no such thing or this viewer cannot act on it,
+ * and every count is `null` in a demo session. Demo accounts never count. `extra` holds
+ * the app's own counts, keyed as its overview names them (keksdose `support_waiting`,
+ * Kurvenschmiede `released_for_work`).
+ */
+export interface AdminAttention {
+  /** "To triage": OPEN reports, crash reports included (§6.1). */
+  feedback_waiting: number | null;
+  /** Accounts that asked to be deleted — only where this viewer acts on them (§6.2). */
+  deletion_requests: number | null;
+  invitations_pending: number | null;
+  users_total: number | null;
+  /** Accounts made in the last seven days. */
+  users_new_7d: number | null;
+  extra: Record<string, number | null>;
+}
+
+/** The shared counts that are a tile of their own (`users_new_7d` is the users tile's line). */
+export type AdminAttentionTile = "feedback_waiting" | "deletion_requests" | "invitations_pending" | "users_total";
+
+/** Where each shared tile links when the app names nothing else (§2.4 decision 13). */
+export const DEFAULT_ADMIN_ATTENTION_HREFS: Readonly<Record<AdminAttentionTile, string>> = Object.freeze({
+  feedback_waiting: "/feedback",
+  deletion_requests: "/admin/users?state=deletion_requested",
+  invitations_pending: "/admin/invitations",
+  users_total: "/admin/users",
+});
+
+/**
+ * The account menu's badge (§2.4 decision 15, §6.3): the sum of the counts that are work
+ * waiting on THIS admin — each app names its own (keksdose `["feedback_waiting",
+ * "support_waiting", "awaiting_verdict"]`, kastlan `["feedback_waiting"]`, Kurvenschmiede
+ * `["feedback_waiting", "deletion_requests"]`). A name is a shared count or an `extra`
+ * key; a `null` or missing count adds nothing. Invitations and users never belong in it.
+ * `null` while there is no answer yet, so the badge shows nothing rather than a 0.
+ */
+export function adminWaitingCount(
+  attention: AdminAttention | null | undefined,
+  counts: readonly (AdminAttentionTile | (string & {}))[],
+): number | null {
+  if (!attention) return null;
+  let sum = 0;
+  for (const key of counts) {
+    const shared = (attention as unknown as Record<string, unknown>)[key];
+    const value = typeof shared === "number" ? shared : attention.extra?.[key];
+    if (typeof value === "number" && value > 0) sum += value;
+  }
+  return sum;
+}
+
+export interface AttentionTileProps extends Omit<StatTileProps, "href" | "onClick" | "value"> {
+  /** The count. `null` shows the tile's dash; {@link AdminOverview} leaves such a tile out. */
+  count: number | null | undefined;
+  /** Where the work is — the tile is a link to it. */
+  href: string;
+}
+
+/**
+ * One tile of the overview: a {@link StatTile} that is a LINK to where the work is, its
+ * count the headline. The whole tile is the link, named by its label; route it through
+ * `renderLink` or the provider's link component, as any StatTile.
+ */
+export function AttentionTile({ count, href, ...tile }: AttentionTileProps) {
+  return <StatTile data-slot="attention-tile" {...tile} value={count ?? null} href={href} />;
+}
+
+/** One of the app's own tiles (§2.4 decision 13: keksdose's "Support waiting"). */
+export interface AdminExtraTile {
+  /** Unique among the tiles; usually the `extra` key it shows. */
+  key: string;
+  label: ReactNode;
+  /** `null` or `undefined` leaves the tile out, as for a shared one. */
+  count: number | null | undefined;
+  href: string;
+  /** A line under the count. */
+  description?: ReactNode;
+}
+
+export interface AdminOverviewProps {
+  /** The server's answer; `undefined` while it loads (the grid shows its skeletons). */
+  attention: AdminAttention | null | undefined;
+  /**
+   * Where the shared tiles link, over {@link DEFAULT_ADMIN_ATTENTION_HREFS} — the
+   * inbox's address filtered to OPEN (§6.1) is the app's own:
+   * `{ feedback_waiting: "/feedback?status=OPEN" }`.
+   */
+  hrefs?: Partial<Record<AdminAttentionTile, string>>;
+  /** The app's own tiles, after the shared ones, in this order. */
+  extraTiles?: readonly AdminExtraTile[];
+  /** Passed to every tile — `renderLink` for the router, `size`, `variant`. */
+  tileProps?: Pick<StatTileProps, "renderLink" | "size" | "variant" | "locale">;
+  /** Prop > `<UiKitProvider labels={{ adminArea }}>` > English. */
+  labels?: LabelOverride<AdminAreaLabels>;
+  className?: string;
+}
+
+/**
+ * The overview section (§2.4): the shared tiles in their order — To triage, Deletion
+ * requests, Pending invitations, Users (with the new accounts of the last 7 days under
+ * the total) — then the app's `extraTiles`. A tile whose count is `null` is left out,
+ * so each app shows only what it has; a `0` is a quiet tile, "nothing waiting".
+ *
+ * Put it in the `overview` section's `SettingsSection` (titled by the sidebar, so
+ * `titleVisible={false}`). keksdose links its metrics from here with at most two tiles
+ * (§6.5).
+ */
+export function AdminOverview({
+  attention,
+  hrefs,
+  extraTiles = [],
+  tileProps,
+  labels: labelsProp,
+  className,
+}: AdminOverviewProps) {
+  const labels = useAdminAreaLabels(labelsProp);
+  const href = { ...DEFAULT_ADMIN_ATTENTION_HREFS, ...hrefs };
+  const loading = attention === undefined;
+  const shared: { key: AdminAttentionTile; label: string; description?: ReactNode }[] = [
+    { key: "feedback_waiting", label: labels.tiles.feedbackWaiting },
+    { key: "deletion_requests", label: labels.tiles.deletionRequests },
+    { key: "invitations_pending", label: labels.tiles.invitationsPending },
+    {
+      key: "users_total",
+      label: labels.tiles.users,
+      description:
+        attention && typeof attention.users_new_7d === "number" ? labels.tiles.usersNew(attention.users_new_7d) : undefined,
+    },
+  ];
+  const tiles = [
+    ...shared.map((t) => ({ ...t, count: attention ? attention[t.key] : undefined, href: href[t.key] })),
+    ...extraTiles,
+  ].filter((t) => loading || (t.count !== null && t.count !== undefined));
+  if (!loading && tiles.length === 0) return null;
+  return (
+    <StatTileGrid data-slot="admin-overview" loading={loading} className={className}>
+      {tiles.map((t) => (
+        <AttentionTile
+          key={t.key}
+          {...tileProps}
+          data-attention={t.key}
+          label={t.label}
+          count={t.count}
+          href={t.href}
+          description={t.description}
+        />
+      ))}
+    </StatTileGrid>
+  );
+}

package/src/admin/admin-sections.tsx

@@ -0,0 +1,137 @@
+import { createElement } from "react";
+import type { ReactNode } from "react";
+import { History, LayoutDashboard, Mail, Receipt, Users } from "lucide-react";
+import type { LucideIcon } from "lucide-react";
+import type { SettingsGroup } from "../settings/settings-catalogue";
+import { DEFAULT_ADMIN_AREA_LABELS } from "./admin-area-labels";
+import type { AdminAreaLabels, AdminSharedSection } from "./admin-area-labels";
+
+/**
+ * The admin area's sections (0.42.0, docs/admin-harmonization.md §2.3, §6.8): the five
+ * every app shares, in the template's order, and the helper that builds an app's
+ * `SettingsLayout` catalogue groups from them and the app's own.
+ */
+
+/** One shared section: its path segment and its icon. The words are `adminArea.sections`. */
+export interface AdminSectionDefinition {
+  id: AdminSharedSection;
+  icon: LucideIcon;
+}
+
+/**
+ * The shared sections in the template's order (§2.3 decision 10, §6.13): Overview, Users,
+ * Invitations, Billing, Activity. An app's own sections go between them
+ * ({@link adminSections}).
+ */
+export const ADMIN_SECTIONS: readonly AdminSectionDefinition[] = Object.freeze([
+  { id: "overview", icon: LayoutDashboard },
+  { id: "users", icon: Users },
+  { id: "invitations", icon: Mail },
+  { id: "billing", icon: Receipt },
+  { id: "activity", icon: History },
+]);
+
+/**
+ * One of the app's own sections: a catalogue group with its words, plus where it goes.
+ * `after` names the section it follows — a shared one or another of the app's own. Left
+ * out, it goes where the template puts an app's sections, after Invitations and before
+ * Billing, in the order given.
+ */
+export interface AdminOwnSection<G extends string = string> extends SettingsGroup<G> {
+  after?: AdminSharedSection | G;
+}
+
+export interface AdminSectionsOptions {
+  /**
+   * Shared sections this app does not have — keksdose and Kurvenschmiede have no billing
+   * view (`["billing"]`). Left out, every shared section is in the catalogue.
+   */
+  leaveOut?: readonly AdminSharedSection[];
+  /**
+   * A shared section that is in the catalogue but hidden for now, as
+   * {@link SettingsGroup.visible}: kastlan's `{ billing: billingEnabled }` (settings §5),
+   * whose path then acts as an unknown one.
+   */
+  visible?: Partial<Record<AdminSharedSection, boolean>>;
+}
+
+/** The shared section after which the app's sections go when they name no place. */
+const OWN_DEFAULT_AFTER: AdminSharedSection = "invitations";
+
+/**
+ * An app's admin catalogue groups, in the template's order (§2.3 decision 10, §6.8): the
+ * shared sections with the kit's icons and words, and the app's own at the places they
+ * name. The result is `SettingsLayout`'s `groups`; the entries stay the app's (a group
+ * with no visible entry is hidden, as on any settings page).
+ *
+ *     const groups = adminSections(useAdminAreaLabels(), [
+ *       { id: "metrics", icon: <BarChart3 />, title: t("…"), help: t("…"), after: "overview" },
+ *       { id: "messaging", icon: <MessageSquare />, title: t("…"), help: t("…") },
+ *       { id: "health", icon: <HeartPulse />, title: t("…"), help: t("…"), after: "billing" },
+ *     ], { leaveOut: ["billing"] });
+ *
+ * gives keksdose's overview, metrics, users, invitations, messaging, health, activity.
+ * An `after` that names a left-out section takes that section's place. Kurvenschmiede's
+ * Teams needs no `after`: between Invitations and Activity is the default.
+ *
+ * `labels` is the `adminArea` namespace, resolved — {@link useAdminAreaLabels} inside a
+ * component, or the app's catalogue for the language; `undefined` is English. Throws for
+ * an own section whose id is a shared one, an id given twice, or an `after` that names no
+ * section: the catalogue is built once, and a section quietly missing from it is worse.
+ */
+export function adminSections<G extends string = never>(
+  labels: AdminAreaLabels | undefined,
+  own: readonly AdminOwnSection<G>[] = [],
+  options: AdminSectionsOptions = {},
+): SettingsGroup<AdminSharedSection | G>[] {
+  const words = labels ?? DEFAULT_ADMIN_AREA_LABELS;
+  const leaveOut = new Set<string>(options.leaveOut ?? []);
+  const shared = new Set<string>(ADMIN_SECTIONS.map((s) => s.id));
+  const ownIds = new Set<string>();
+  for (const section of own) {
+    if (shared.has(section.id)) throw new Error(`adminSections: "${section.id}" is a shared section's id`);
+    if (ownIds.has(section.id)) throw new Error(`adminSections: "${section.id}" is given twice`);
+    ownIds.add(section.id);
+  }
+  for (const section of own) {
+    const after = section.after;
+    if (after !== undefined && !shared.has(after) && !ownIds.has(after)) {
+      throw new Error(`adminSections: "${section.id}" goes after "${after}", which is no section`);
+    }
+  }
+
+  // Each section's followers, in the order given: the shared ones, then the own ones
+  // under their `after`, recursively, so an own section may follow another own one.
+  const followers = new Map<string, AdminOwnSection<G>[]>();
+  for (const section of own) {
+    const after = section.after ?? OWN_DEFAULT_AFTER;
+    followers.set(after, [...(followers.get(after) ?? []), section]);
+  }
+
+  const out: SettingsGroup<AdminSharedSection | G>[] = [];
+  const placeAfter = (id: string) => {
+    for (const section of followers.get(id) ?? []) {
+      const { after: _after, ...group } = section;
+      out.push(group);
+      placeAfter(section.id);
+    }
+  };
+  for (const { id, icon } of ADMIN_SECTIONS) {
+    if (!leaveOut.has(id)) {
+      const visible = options.visible?.[id];
+      out.push({
+        id,
+        icon: createElement(icon, { "aria-hidden": true }) as ReactNode,
+        title: words.sections[id].title,
+        help: words.sections[id].help,
+        ...(visible === undefined ? null : { visible }),
+      });
+    }
+    // A left-out section's followers keep its place.
+    placeAfter(id);
+  }
+  const placed = new Set<string>(out.map((g) => g.id));
+  const stuck = own.filter((s) => !placed.has(s.id)).map((s) => s.id);
+  if (stuck.length) throw new Error(`adminSections: ${stuck.join(", ")} follow each other in a circle`);
+  return out;
+}

package/src/admin/admin-tool-links.tsx

@@ -0,0 +1,84 @@
+import { useId } from "react";
+import type { ReactElement, ReactNode } from "react";
+import { cn } from "../lib/cn";
+import { List, ListItem } from "../components/list";
+import type { ListItemLinkProps } from "../components/list";
+import type { LabelOverride } from "../i18n/kit-labels";
+import { useAdminAreaLabels } from "./admin-area-labels";
+import type { AdminAreaLabels } from "./admin-area-labels";
+
+/** One link of the Tools list. */
+export interface AdminToolLink {
+  /** Unique in the list. */
+  key: string;
+  label: string;
+  href: string;
+  /** A lucide element, sized by the row. */
+  icon?: ReactNode;
+  /** `false` leaves the link out — Translations for an admin who doesn't review
+   *  (§6.11, ka F7). Default: shown. */
+  visible?: boolean;
+}
+
+export interface AdminToolLinksProps {
+  links: readonly AdminToolLink[];
+  /**
+   * `sidebar` (default): a `<nav>` named and headed "Tools", for `SettingsLayout`'s
+   * `sidebarFooter` under the section list on a desktop. `list`: the bare rows, for
+   * `SettingsLayout`'s `phoneFooter`, which puts them in a list of their own.
+   */
+  variant?: "sidebar" | "list";
+  /** Your router's link. Default: the `<UiKitProvider linkComponent>`, then `<a>`. */
+  renderLink?: (props: ListItemLinkProps) => ReactElement;
+  /** Prop > `<UiKitProvider labels={{ adminArea }}>` > English. */
+  labels?: LabelOverride<AdminAreaLabels>;
+  className?: string;
+}
+
+/**
+ * The admin area's links to the admin tools that are pages of their own (0.42.0,
+ * docs/admin-harmonization.md §2.5 decision 16, §6.11): Translations, and the app's task
+ * pages (kastlan's Data import). The feedback inbox is not one of them: the top bar's
+ * feedback menu reaches it, and the overview's tiles link to it.
+ *
+ * Draw it twice from one list — at the foot of the section sidebar and in the phone
+ * footer:
+ *
+ *     <SettingsLayout
+ *       sidebarFooter={<AdminToolLinks links={TOOLS} />}
+ *       phoneFooter={<AdminToolLinks links={TOOLS} variant="list" />}
+ *       …
+ *     />
+ *
+ * With no visible link it renders nothing.
+ */
+export function AdminToolLinks({ links, variant = "sidebar", renderLink, labels: labelsProp, className }: AdminToolLinksProps) {
+  const labels = useAdminAreaLabels(labelsProp);
+  const headingId = useId();
+  const shown = links.filter((l) => l.visible !== false);
+  if (shown.length === 0) return null;
+  const rows = shown.map((l) => (
+    <ListItem
+      key={l.key}
+      href={l.href}
+      renderLink={renderLink}
+      title={l.label}
+      leading={
+        l.icon === undefined ? undefined : (
+          <span aria-hidden className="flex shrink-0 text-muted [&_svg]:size-4">
+            {l.icon}
+          </span>
+        )
+      }
+    />
+  ));
+  if (variant === "list") return <>{rows}</>;
+  return (
+    <nav data-slot="admin-tool-links" aria-labelledby={headingId} className={cn("space-y-1", className)}>
+      <div id={headingId} className="px-3 text-caption font-semibold uppercase tracking-wide text-muted">
+        {labels.tools}
+      </div>
+      <List density="compact">{rows}</List>
+    </nav>
+  );
+}

package/src/billing/billing-banner.tsx

@@ -8,6 +8,7 @@ import { Button } from "../components/button";
 import { Spinner } from "../components/spinner";
 import { useBillingLabels } from "./billing-labels";
 import type { BillingLabels } from "./billing-labels";
+import type { BillingPortalAccess } from "./billing-overview";
 
 /**
  * The billing banners (docs/billing-harmonization.md §3.3, §7, §12.6, §12.21):
@@ -16,7 +17,8 @@ import type { BillingLabels } from "./billing-labels";
  * - `grant-ending` — from 7 days before `comped_until`: a beta user's 12 months, an
  *   operator's grant;
  * - `payment-failed` — from the first failed payment (`past_due`), while the provider
- *   retries;
+ *   retries; since 0.42, for an admin who isn't the buyer (`portal="buyer_only"`), it
+ *   names who can update the payment method, with no button;
  * - `plan-ended` — out of good standing: read-only, never locked (§2.3);
  * - `guest` — a guest in someone else's read-only item (§12.6);
  * - `processing` — back from checkout before the webhook landed (§12.21).
@@ -78,6 +80,8 @@ export type BillingBannerProps = BillingBannerBaseProps &
         /** Calendar days left — `billingDaysLeft(trial_ends_at)`. 0 is today. */
         daysLeft: number;
         item?: never;
+        portal?: never;
+        buyerName?: never;
       }
     | {
         kind: "guest";
@@ -85,12 +89,32 @@ export type BillingBannerProps = BillingBannerBaseProps &
          *  the banner says "for now" and nothing more (§12.6). */
         item?: string;
         daysLeft?: never;
+        portal?: never;
+        buyerName?: never;
       }
     | {
-        kind: "payment-failed" | "plan-ended" | "processing";
+        kind: "payment-failed";
+        /**
+         * 0.42 (§16.7 A, §16.8): `GET /billing/status`'s `portal` (`BillingStanding`).
+         * `"buyer_only"` — the viewer isn't the buyer, so the portal's page for the card
+         * would answer 403: the banner says who can update the payment method
+         * (`paymentFailedAskBuyer`) and shows NO button, whatever `actionHref` or
+         * `onAction` say. `"open"` (default): as before.
+         */
+        portal?: BillingPortalAccess;
+        /** 0.42: the status's `buyer_name`, under `"buyer_only"`. Empty: "…the admin who
+         *  bought the subscription". */
+        buyerName?: string | null;
         daysLeft?: never;
         item?: never;
       }
+    | {
+        kind: "plan-ended" | "processing";
+        daysLeft?: never;
+        item?: never;
+        portal?: never;
+        buyerName?: never;
+      }
   );
 
 /** The last days, in which an ending trial or grant turns from news into a warning. */
@@ -128,6 +152,8 @@ export function BillingBanner(props: BillingBannerProps) {
     kind,
     daysLeft,
     item,
+    portal,
+    buyerName,
     tone,
     variant = "strip",
     size,
@@ -147,6 +173,8 @@ export function BillingBanner(props: BillingBannerProps) {
   let text: string;
   let icon: ReactNode;
   let ownAction: string | undefined;
+  // 0.42 (§16.7 A): only the buyer can reach the portal's card page.
+  const askBuyer = kind === "payment-failed" && portal === "buyer_only";
   switch (kind) {
     case "trial-ending":
       text = labels.trialEnding(days);
@@ -159,7 +187,7 @@ export function BillingBanner(props: BillingBannerProps) {
       ownAction = labels.choosePlan;
       break;
     case "payment-failed":
-      text = labels.paymentFailed;
+      text = askBuyer ? labels.paymentFailedAskBuyer(buyerName || undefined) : labels.paymentFailed;
       icon = <CreditCard />;
       ownAction = labels.updatePayment;
       break;
@@ -182,7 +210,7 @@ export function BillingBanner(props: BillingBannerProps) {
 
   const words = actionLabel ?? ownAction;
   const action =
-    words === undefined || (actionHref === undefined && onAction === undefined) ? undefined : actionHref !== undefined ? (
+    askBuyer || words === undefined || (actionHref === undefined && onAction === undefined) ? undefined : actionHref !== undefined ? (
       <Button href={actionHref} variant="secondary" size="sm">
         {words}
       </Button>

package/src/billing/billing-labels.ts

@@ -108,6 +108,13 @@ export interface BillingLabels {
   choosePlan: string;
   /** The payment-failed banner's action, to the provider's portal: "Update payment method". */
   updatePayment: string;
+  /**
+   * 0.42 (§16.7 A, §16.8): the payment-failed banner for an admin who isn't the buyer
+   * (`portal: "buyer_only"`), with no button — only the buyer can change the card.
+   * `buyer` is their display name, or `undefined` when they are gone ("the admin who
+   * bought the subscription").
+   */
+  paymentFailedAskBuyer: (buyer?: string) => string;
   /** The processing banner's action, when the app gives one: "Check again". */
   checkAgain: string;
 
@@ -153,6 +160,26 @@ export interface BillingLabels {
    */
   notAtProvider: string;
 
+  /* ── The portal for the buyer only, the in-app cancel (0.42, §16) ── */
+  /**
+   * In place of "Payment and invoices" for an admin who isn't the buyer (`portal:
+   * "buyer_only"`, §16.2 decision 3): the provider's portal opens only for the buyer.
+   * `buyer` is their display name — or `undefined` when they are gone or have left the
+   * company, and the words then say "the admin who bought the subscription".
+   */
+  buyerHolds: (buyer?: string) => string;
+  /** `CancelSubscriptionConfirm`'s title: "Cancel subscription". */
+  cancelConfirmTitle: string;
+  /** Its body; `date` is the period's end, formatted: "Your subscription ends on
+   *  9 Nov 2026. Until then everything works as before." */
+  cancelConfirmBody: (date: string) => string;
+  /** Its confirm button (§16.4): "Cancel subscription now". German: "Jetzt kündigen",
+   *  the confirmation button's words in §312k BGB. */
+  cancelConfirmAction: string;
+  /** In place of "Cancel subscription" while a cancel is scheduled (§16.7 C, `POST
+   *  /billing/resume`): "Keep subscription". */
+  keepSubscription: string;
+
   /* ── The pay page (§14.4) ── */
   /* Built into the static page `dist/pay/` at the kit's build: it has no React and no
      provider, so an app's override never reaches it. */
@@ -184,6 +211,15 @@ export interface BillingLabels {
   /** The confirm button: "Change plan". */
   switchConfirm: string;
 
+  /* ── The permanent-grant warning (0.42, §16.2 decision 5, §16.8 B) ── */
+  /** The warning's title, before a checkout (`PlanPicker`) or a switch
+   *  (`PlanSwitchConfirm`) under a grant without an end: "Your free access continues". */
+  grantWarningTitle: string;
+  /** What the purchase does under it: nothing to the plan while the grant runs. */
+  grantWarningBody: string;
+  /** `PlanPicker`'s button that goes on to the checkout: "Buy anyway". */
+  grantWarningAction: string;
+
   /* ── Offline (§12.5) ── */
   /** Changes refused as `billing_read_only` inside a sync reply, kept queued and sent
    *  after payment: "3 changes waiting for a plan". */
@@ -271,6 +307,10 @@ export const DEFAULT_BILLING_LABELS: BillingLabels = {
   processing: "Your payment is being processed. Your plan starts as soon as it’s confirmed; this page updates by itself.",
   choosePlan: "Choose a plan",
   updatePayment: "Update payment method",
+  paymentFailedAskBuyer: (buyer) =>
+    buyer
+      ? `The payment failed. ${buyer} can update the payment method.`
+      : "The payment failed. The admin who bought the subscription can update the payment method.",
   checkAgain: "Check again",
 
   lockReason: "Your plan has ended. Choose a plan to make changes again.",
@@ -286,6 +326,14 @@ export const DEFAULT_BILLING_LABELS: BillingLabels = {
   manage: "Payment and invoices",
   cancel: "Cancel subscription",
   notAtProvider: "Nothing to manage yet. Payments and invoices appear here once you have a paid plan.",
+  buyerHolds: (buyer) =>
+    buyer
+      ? `The payment method and the invoices are with ${buyer}, who bought the subscription.`
+      : "The payment method and the invoices are with the admin who bought the subscription.",
+  cancelConfirmTitle: "Cancel subscription",
+  cancelConfirmBody: (date) => `Your subscription ends on ${date}. Until then everything works as before.`,
+  cancelConfirmAction: "Cancel subscription now",
+  keepSubscription: "Keep subscription",
 
   payOpening: "Opening the secure checkout…",
   payNothing: "There’s no payment to make here. To choose a plan, go back to the app.",
@@ -300,6 +348,11 @@ export const DEFAULT_BILLING_LABELS: BillingLabels = {
   switchNextCharge: (date) => `Next charge on ${date}`,
   switchConfirm: "Change plan",
 
+  grantWarningTitle: "Your free access continues",
+  grantWarningBody:
+    "You have free access with no end date. A purchase won’t change your plan while the free access runs: you would pay for a plan that doesn’t apply.",
+  grantWarningAction: "Buy anyway",
+
   waitingChanges: (count) =>
     count === 1 ? "1 change waiting for a plan" : `${count} changes waiting for a plan`,
   discardWaiting: "Discard waiting changes",