@eifi1/ui-kit 0.51.3 → 0.51.5

package/dist/account/email-change-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/email-change-setting.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\nimport { MailCheck } from \"lucide-react\";\n\nimport { DEFAULT_COMMON_LABELS, useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasContent } from \"../lib/presence\";\nimport { CurrentPasswordInput } from \"../components/danger-confirm\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { Input } from \"../components/input\";\nimport { authErrorCode, isRateLimited, retryAfterSeconds } from \"../auth/auth-errors\";\nimport { emailParts, taggedEmail } from \"../auth/email-tag\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { DEFAULT_EMAIL_CHANGE_LABELS } from \"./email-change-setting-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link EmailChangeSetting} renders — the `emailChange` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. */\nexport interface EmailChangeLabels {\n  /** The card's title. */\n  title: string;\n  /** Names the address the account has now: \"Current address: ada@example.com\". */\n  current: string;\n  /** The new address's field. */\n  newEmail: string;\n  /** The password field. */\n  password: string;\n  /** Under the password field: why it is asked again. */\n  passwordHint: string;\n  /** The address-tag button (auth §4.5), given the exact address it would use. */\n  emailTagUse: (address: string) => string;\n  /** The line after the address-tag button. */\n  emailTagHint: string;\n  /** The submit button. */\n  submit: string;\n  /** Under the new address while it is the current one. */\n  sameAsCurrent: string;\n  /** `email_taken`, under the new address. */\n  emailTaken: string;\n  /** `password_incorrect`, under the password. */\n  wrongPassword: string;\n  /** The pending state, given the new address the link went to. */\n  pending: (newEmail: string) => string;\n  /** Under it, given the current address — which still signs in until the link is\n   *  confirmed. */\n  pendingHint: (currentEmail: string) => string;\n  /** Mails the link again. */\n  resend: string;\n  /** Said once it went. */\n  resent: string;\n  /** Drops the change; the current address stays. */\n  cancel: string;\n  /** The done state (`confirmed`), given the address the account has now. */\n  confirmed: (email: string) => string;\n  /** Under it (`passkeyNote`): a passkey's label in the authenticator keeps the old\n   *  address (§6.2). */\n  passkeyNote: string;\n  /** A request was throttled — HTTP 429 — given its `Retry-After` wait in seconds, or\n   *  `undefined` without one. */\n  rateLimited: (seconds?: number) => string;\n  /** Any other failure, of any of the three requests. */\n  failed: string;\n}\n\n// Defined in ./email-change-setting-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_EMAIL_CHANGE_LABELS };\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What {@link EmailChangeSettingProps.onRequest} gets: the `POST /auth/me/email` body. */\nexport interface EmailChangeValues {\n  /** Trimmed. A `+tag` stays (auth §4.5); lower-casing is the server's. */\n  newEmail: string;\n  /** As typed. */\n  password: string;\n}\n\n/** Which request failed — {@link EmailChangeSettingProps.describeError}'s second\n *  argument. */\nexport type EmailChangeAction = \"request\" | \"resend\" | \"cancel\";\n\nexport interface EmailChangeSettingProps extends Omit<ComponentPropsWithRef<\"div\">, \"children\" | \"onSubmit\"> {\n  /** The account's address now. */\n  currentEmail: string;\n  /**\n   * The address a change waits on, from the app's server state — so a reload, or\n   * another tab, shows the pending state. `null`: none, whatever the card did. Left out\n   * (`undefined`), the card keeps its own: pending from a resolved `onRequest` until a\n   * resolved `onCancel`.\n   */\n  pendingEmail?: string | null;\n  /**\n   * The form was submitted: send `POST /auth/me/email {new_email, password}` (§6.2).\n   * Resolve once the link is mailed — refresh `pendingEmail` first if the app passes\n   * it — and the card shows \"Confirm the link we sent to …\". Reject with the client's\n   * error: `email_taken` shows under the new address, `password_incorrect` (server-kit's\n   * `400` for a wrong current password; an older `invalid_credentials` too) under the\n   * password, a 429 as `rateLimited`, anything else as `failed` unless `describeError`\n   * has the app's words.\n   */\n  onRequest: (values: EmailChangeValues) => Promise<unknown> | void;\n  /** Mail the link again. Left out, no button. */\n  onResend?: () => Promise<unknown> | void;\n  /** Drop the pending change. Left out, no button. */\n  onCancel?: () => Promise<unknown> | void;\n  /**\n   * The change was just confirmed — the app's confirm route (`POST /auth/me/email/confirm`)\n   * came back here. Says \"Your email address is now …\" over the form, with\n   * `passkeyNote`.\n   */\n  confirmed?: boolean;\n  /** With `confirmed`: say that a passkey's label keeps the old address (§6.2). Default\n   *  `true`; `false` for an account without passkeys. */\n  passkeyNote?: boolean;\n  /**\n   * The app's address tag (`\"kastlan\"`, auth §4.5): once the new address is plausible a\n   * button under it offers the tagged form — the rule of `RegisterForm`, since this is\n   * the person's own address. Never applied on its own. Left out, no offer.\n   */\n  emailTag?: string;\n  /** The app's own words for a failure, or `undefined` for the kit's. Asked first, for\n   *  every failure (a demo account's 403, the device offline). */\n  describeError?: (error: unknown, action: EmailChangeAction) => ReactNode | undefined;\n  labels?: LabelOverride<EmailChangeLabels>;\n}\n\ninterface Failure {\n  action: EmailChangeAction;\n  message: ReactNode;\n}\n\n/**\n * Changing the account's email address (docs/user-admin-harmonization.md §6.2, §2.5):\n * the current address, the new one, the password — then a pending state until the new\n * address confirms its link.\n *\n * **The new address must confirm before it takes effect.** The server mails a one-time\n * link to the NEW address (and a notice to the old one); until it is opened, the account\n * keeps the old address and signs in with it. So the card's answer to a request is not\n * \"changed\" but \"Confirm the link we sent to …\", with \"Send the link again\" and \"Cancel\n * the change\". The state is the server's: pass `pendingEmail` and a reload shows it too.\n *\n * **The password is asked again** because the address is the identity: whoever holds the\n * session must not move the account to a mailbox of their own. It is a\n * {@link CurrentPasswordInput}, so a password manager fills it and offers no new one.\n *\n * **The `+tag` offer** (`emailTag`) is RegisterForm's: the address is the person's own,\n * so `you+kastlan@…` is offered under the field, applied only on a click.\n *\n * **It never sends a request** (auth §8): `onRequest`, `onResend` and `onCancel` are the\n * app's, and their refusals are read by code — `email_taken` and `password_incorrect`\n * under their fields, which take the focus; a 429 as \"Too many attempts\". A wrong\n * password is a `400 password_incorrect`, never a 401: an app's client reads a 401 on a\n * signed-in route as an ended session, and would sign the person out for a typo.\n *\n * **Done** (`confirmed`): \"Your email address is now …\" and, unless `passkeyNote` is\n * off, that a passkey keeps its old label in the device's list — the authenticator\n * stored the name it was given, and only a new passkey carries the new one.\n *\n * **Under a write lock** the request, \"Send the link again\" and \"Cancel the change\" are\n * `commit` controls exempt from billing (`COMMIT_EXCEPT_BILLING`, 0.33): the address is\n * the account's own settings, which a lapsed plan never locks\n * (docs/billing-harmonization.md §3.3, §12.36); a demo's lock still does.\n */\nexport function EmailChangeSetting({\n  currentEmail,\n  pendingEmail,\n  onRequest,\n  onResend,\n  onCancel,\n  confirmed,\n  passkeyNote = true,\n  emailTag,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: EmailChangeSettingProps) {\n  const labels = useKitLabels(\"emailChange\", DEFAULT_EMAIL_CHANGE_LABELS, labelsProp);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  const [newEmail, setNewEmail] = useState(\"\");\n  const [password, setPassword] = useState(\"\");\n  const [ownPending, setOwnPending] = useState<string | null>(null);\n  const [busy, setBusy] = useState<EmailChangeAction | null>(null);\n  const [failure, setFailure] = useState<Failure | null>(null);\n  // `email_taken` belongs to the address it was answered for; another one clears it.\n  const [taken, setTaken] = useState<string | null>(null);\n  const [wrongPassword, setWrongPassword] = useState(false);\n  const [resent, setResent] = useState(false);\n  const mounted = useMounted();\n  const titleId = useId();\n  const tagHintId = useId();\n  const emailRef = useRef<HTMLInputElement>(null);\n  const passwordRef = useRef<HTMLInputElement>(null);\n  const pendingRef = useRef<HTMLDivElement>(null);\n\n  const pending = pendingEmail !== undefined ? pendingEmail : ownPending;\n  const isPending = pending !== null && pending !== \"\";\n\n  // The state swapped under the button that was pressed (the form for the pending\n  // message, or back): the focus goes to what came in, never down to <body>. Only after\n  // the person's own request — a pending state that arrives with the page takes nothing.\n  const focusNext = useRef<\"pending\" | \"form\" | null>(null);\n  useEffect(() => {\n    const target = focusNext.current;\n    if (target === \"pending\" && isPending) {\n      focusNext.current = null;\n      pendingRef.current?.focus();\n    } else if (target === \"form\" && !isPending) {\n      focusNext.current = null;\n      emailRef.current?.focus();\n    }\n  }, [isPending]);\n\n  const messageFor = (error: unknown, action: EmailChangeAction): ReactNode => {\n    const own = describeError?.(error, action);\n    if (hasContent(own)) return own;\n    return isRateLimited(error) ? labels.rateLimited(retryAfterSeconds(error)) : labels.failed;\n  };\n\n  /* ── The pending state ── */\n  if (isPending) {\n    const run = (action: \"resend\" | \"cancel\", call: () => unknown) => {\n      if (busy) return;\n      setBusy(action);\n      setFailure(null);\n      setResent(false);\n      settle(call).then(\n        () => {\n          if (!mounted.current) return;\n          setBusy(null);\n          if (action === \"resend\") {\n            setResent(true);\n            return;\n          }\n          focusNext.current = \"form\";\n          setOwnPending(null);\n        },\n        (error: unknown) => {\n          if (!mounted.current) return;\n          setBusy(null);\n          setFailure({ action, message: messageFor(error, action) });\n        },\n      );\n    };\n    return (\n      <Card {...rest} data-state=\"pending\" className={cn(\"p-4 space-y-3\", className)}>\n        <div>\n          <SettingsCardTitle id={titleId}>{labels.title}</SettingsCardTitle>\n          <div className={cn(CARD_DESCRIPTION_CLASS, \"break-all\")}>{common.fieldValue(labels.current, currentEmail)}</div>\n        </div>\n        {/* Focusable, not a control: the request's answer is read out when it takes the\n            focus from the submit that went with the form. */}\n        <div ref={pendingRef} tabIndex={-1} className=\"flex gap-2 outline-none\">\n          <MailCheck aria-hidden className=\"mt-0.5 size-4 shrink-0 text-success\" />\n          <div className=\"min-w-0 space-y-1\">\n            <p className=\"break-words text-sm\">{labels.pending(pending)}</p>\n            <p className={CARD_DESCRIPTION_CLASS}>{labels.pendingHint(currentEmail)}</p>\n          </div>\n        </div>\n        {(onResend || onCancel) && (\n          <div className=\"flex flex-wrap items-center gap-2\">\n            {onResend && (\n              <Button\n                type=\"button\"\n                variant=\"secondary\"\n                size=\"sm\"\n                commit={COMMIT_EXCEPT_BILLING}\n                pending={busy === \"resend\"}\n                disabled={busy === \"cancel\"}\n                onClick={() => run(\"resend\", onResend)}\n              >\n                {labels.resend}\n              </Button>\n            )}\n            {onCancel && (\n              <Button\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                commit={COMMIT_EXCEPT_BILLING}\n                pending={busy === \"cancel\"}\n                disabled={busy === \"resend\"}\n                onClick={() => run(\"cancel\", onCancel)}\n              >\n                {labels.cancel}\n              </Button>\n            )}\n            {/* Always in the tree, so the \"sent again\" that appears in it is announced\n                (VerifyEmailStatus's resend line). */}\n            <span role=\"status\" className=\"text-xs text-success\">\n              {resent ? labels.resent : null}\n            </span>\n          </div>\n        )}\n        {failure && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure.message}\n          </AlertBanner>\n        )}\n      </Card>\n    );\n  }\n\n  /* ── The form ── */\n  const typed = newEmail.trim();\n  const same = typed !== \"\" && typed.toLowerCase() === currentEmail.trim().toLowerCase();\n  const working = busy !== null;\n  const canSubmit = emailParts(newEmail) !== null && !same && password !== \"\";\n  const suggestion = emailTag ? taggedEmail(newEmail, emailTag) : null;\n  const emailError = same ? labels.sameAsCurrent : taken !== null && taken === typed ? labels.emailTaken : undefined;\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (!canSubmit || working) return;\n    const values: EmailChangeValues = { newEmail: typed, password };\n    setBusy(\"request\");\n    setFailure(null);\n    setTaken(null);\n    setWrongPassword(false);\n    settle(() => onRequest(values)).then(\n      () => {\n        if (!mounted.current) return;\n        setBusy(null);\n        // The password has done its work; nothing of the form stays in state.\n        setNewEmail(\"\");\n        setPassword(\"\");\n        setResent(false);\n        focusNext.current = \"pending\";\n        setOwnPending(values.newEmail);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusy(null);\n        const own = describeError?.(error, \"request\");\n        if (hasContent(own)) {\n          setFailure({ action: \"request\", message: own });\n          return;\n        }\n        if (isRateLimited(error)) {\n          setFailure({ action: \"request\", message: labels.rateLimited(retryAfterSeconds(error)) });\n          return;\n        }\n        const code = authErrorCode(error);\n        if (code === \"email_taken\") {\n          setTaken(values.newEmail);\n          emailRef.current?.focus();\n          return;\n        }\n        // `invalid_credentials` too, for a server that answered a wrong password so\n        // before server-kit 0.4.0 named `password_incorrect`.\n        if (code === \"password_incorrect\" || code === \"invalid_credentials\") {\n          setWrongPassword(true);\n          passwordRef.current?.focus();\n          return;\n        }\n        setFailure({ action: \"request\", message: labels.failed });\n      },\n    );\n  };\n\n  return (\n    <Card {...rest} data-state={confirmed ? \"confirmed\" : \"form\"} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle id={titleId}>{labels.title}</SettingsCardTitle>\n        <div className={cn(CARD_DESCRIPTION_CLASS, \"break-all\")}>{common.fieldValue(labels.current, currentEmail)}</div>\n      </div>\n      {confirmed && (\n        <AlertBanner tone=\"success\" size=\"sm\">\n          <span className=\"block\">{labels.confirmed(currentEmail)}</span>\n          {passkeyNote && <span className=\"mt-1 block\">{labels.passkeyNote}</span>}\n        </AlertBanner>\n      )}\n      <form className=\"space-y-3\" aria-labelledby={titleId} onSubmit={submit} noValidate>\n        <div>\n          <Input\n            ref={emailRef}\n            type=\"email\"\n            name=\"email\"\n            autoComplete=\"email\"\n            label={labels.newEmail}\n            value={newEmail}\n            onChange={(e) => {\n              setNewEmail(e.target.value);\n              if (failure) setFailure(null);\n            }}\n            readOnly={working}\n            error={emailError}\n            required\n          />\n          {/* RegisterForm's offer (auth §4.5): one click, the exact address on the\n              button, reversible by typing. */}\n          {suggestion && (\n            <p className=\"mt-1 text-xs text-muted\">\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                aria-describedby={tagHintId}\n                onClick={() => setNewEmail(suggestion)}\n              >\n                {labels.emailTagUse(suggestion)}\n              </Button>{\" \"}\n              <span id={tagHintId}>{labels.emailTagHint}</span>\n            </p>\n          )}\n        </div>\n        <CurrentPasswordInput\n          ref={passwordRef}\n          name=\"password\"\n          label={labels.password}\n          value={password}\n          onValueChange={(next) => {\n            setPassword(next);\n            setWrongPassword(false);\n            if (failure) setFailure(null);\n          }}\n          hint={labels.passwordHint}\n          error={wrongPassword ? labels.wrongPassword : undefined}\n          busy={working}\n          required\n        />\n        {failure && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure.message}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" commit={COMMIT_EXCEPT_BILLING} disabled={!working && !canSubmit} pending={working}>\n          {labels.submit}\n        </Button>\n      </form>\n    </Card>\n  );\n}\n"],"mappings":";AA4PQ,SACE,KADF;AA5PR,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAEnD,SAAS,iBAAiB;AAE1B,SAAS,uBAAuB,oBAAwC;AACxE,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,aAAa;AACtB,SAAS,eAAe,eAAe,yBAAyB;AAChE,SAAS,YAAY,mBAAmB;AACxC,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,mCAAmC;AAwJrC,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAC3D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,YAAY,aAAa,IAAI,SAAwB,IAAI;AAChE,QAAM,CAAC,MAAM,OAAO,IAAI,SAAmC,IAAI;AAC/D,QAAM,CAAC,SAAS,UAAU,IAAI,SAAyB,IAAI;AAE3D,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,KAAK;AACxD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,UAAU,WAAW;AAC3B,QAAM,UAAU,MAAM;AACtB,QAAM,YAAY,MAAM;AACxB,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,cAAc,OAAyB,IAAI;AACjD,QAAM,aAAa,OAAuB,IAAI;AAE9C,QAAM,UAAU,iBAAiB,SAAY,eAAe;AAC5D,QAAM,YAAY,YAAY,QAAQ,YAAY;AAKlD,QAAM,YAAY,OAAkC,IAAI;AACxD,YAAU,MAAM;AACd,UAAM,SAAS,UAAU;AACzB,QAAI,WAAW,aAAa,WAAW;AACrC,gBAAU,UAAU;AACpB,iBAAW,SAAS,MAAM;AAAA,IAC5B,WAAW,WAAW,UAAU,CAAC,WAAW;AAC1C,gBAAU,UAAU;AACpB,eAAS,SAAS,MAAM;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,SAAS,CAAC;AAEd,QAAM,aAAa,CAAC,OAAgB,WAAyC;AAC3E,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,QAAI,WAAW,GAAG,EAAG,QAAO;AAC5B,WAAO,cAAc,KAAK,IAAI,OAAO,YAAY,kBAAkB,KAAK,CAAC,IAAI,OAAO;AAAA,EACtF;AAGA,MAAI,WAAW;AACb,UAAM,MAAM,CAAC,QAA6B,SAAwB;AAChE,UAAI,KAAM;AACV,cAAQ,MAAM;AACd,iBAAW,IAAI;AACf,gBAAU,KAAK;AACf,aAAO,IAAI,EAAE;AAAA,QACX,MAAM;AACJ,cAAI,CAAC,QAAQ,QAAS;AACtB,kBAAQ,IAAI;AACZ,cAAI,WAAW,UAAU;AACvB,sBAAU,IAAI;AACd;AAAA,UACF;AACA,oBAAU,UAAU;AACpB,wBAAc,IAAI;AAAA,QACpB;AAAA,QACA,CAAC,UAAmB;AAClB,cAAI,CAAC,QAAQ,QAAS;AACtB,kBAAQ,IAAI;AACZ,qBAAW,EAAE,QAAQ,SAAS,WAAW,OAAO,MAAM,EAAE,CAAC;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AACA,WACE,qBAAC,QAAM,GAAG,MAAM,cAAW,WAAU,WAAW,GAAG,iBAAiB,SAAS,GAC3E;AAAA,2BAAC,SACC;AAAA,4BAAC,qBAAkB,IAAI,SAAU,iBAAO,OAAM;AAAA,QAC9C,oBAAC,SAAI,WAAW,GAAG,wBAAwB,WAAW,GAAI,iBAAO,WAAW,OAAO,SAAS,YAAY,GAAE;AAAA,SAC5G;AAAA,MAGA,qBAAC,SAAI,KAAK,YAAY,UAAU,IAAI,WAAU,2BAC5C;AAAA,4BAAC,aAAU,eAAW,MAAC,WAAU,uCAAsC;AAAA,QACvE,qBAAC,SAAI,WAAU,qBACb;AAAA,8BAAC,OAAE,WAAU,uBAAuB,iBAAO,QAAQ,OAAO,GAAE;AAAA,UAC5D,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,YAAY,YAAY,GAAE;AAAA,WAC1E;AAAA,SACF;AAAA,OACE,YAAY,aACZ,qBAAC,SAAI,WAAU,qCACZ;AAAA,oBACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,SAAS;AAAA,YAClB,UAAU,SAAS;AAAA,YACnB,SAAS,MAAM,IAAI,UAAU,QAAQ;AAAA,YAEpC,iBAAO;AAAA;AAAA,QACV;AAAA,QAED,YACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,SAAS;AAAA,YAClB,UAAU,SAAS;AAAA,YACnB,SAAS,MAAM,IAAI,UAAU,QAAQ;AAAA,YAEpC,iBAAO;AAAA;AAAA,QACV;AAAA,QAIF,oBAAC,UAAK,MAAK,UAAS,WAAU,wBAC3B,mBAAS,OAAO,SAAS,MAC5B;AAAA,SACF;AAAA,MAED,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,kBAAQ,SACX;AAAA,OAEJ;AAAA,EAEJ;AAGA,QAAM,QAAQ,SAAS,KAAK;AAC5B,QAAM,OAAO,UAAU,MAAM,MAAM,YAAY,MAAM,aAAa,KAAK,EAAE,YAAY;AACrF,QAAM,UAAU,SAAS;AACzB,QAAM,YAAY,WAAW,QAAQ,MAAM,QAAQ,CAAC,QAAQ,aAAa;AACzE,QAAM,aAAa,WAAW,YAAY,UAAU,QAAQ,IAAI;AAChE,QAAM,aAAa,OAAO,OAAO,gBAAgB,UAAU,QAAQ,UAAU,QAAQ,OAAO,aAAa;AAEzG,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,CAAC,aAAa,QAAS;AAC3B,UAAM,SAA4B,EAAE,UAAU,OAAO,SAAS;AAC9D,YAAQ,SAAS;AACjB,eAAW,IAAI;AACf,aAAS,IAAI;AACb,qBAAiB,KAAK;AACtB,WAAO,MAAM,UAAU,MAAM,CAAC,EAAE;AAAA,MAC9B,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AAEZ,oBAAY,EAAE;AACd,oBAAY,EAAE;AACd,kBAAU,KAAK;AACf,kBAAU,UAAU;AACpB,sBAAc,OAAO,QAAQ;AAAA,MAC/B;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AACZ,cAAM,MAAM,gBAAgB,OAAO,SAAS;AAC5C,YAAI,WAAW,GAAG,GAAG;AACnB,qBAAW,EAAE,QAAQ,WAAW,SAAS,IAAI,CAAC;AAC9C;AAAA,QACF;AACA,YAAI,cAAc,KAAK,GAAG;AACxB,qBAAW,EAAE,QAAQ,WAAW,SAAS,OAAO,YAAY,kBAAkB,KAAK,CAAC,EAAE,CAAC;AACvF;AAAA,QACF;AACA,cAAM,OAAO,cAAc,KAAK;AAChC,YAAI,SAAS,eAAe;AAC1B,mBAAS,OAAO,QAAQ;AACxB,mBAAS,SAAS,MAAM;AACxB;AAAA,QACF;AAGA,YAAI,SAAS,wBAAwB,SAAS,uBAAuB;AACnE,2BAAiB,IAAI;AACrB,sBAAY,SAAS,MAAM;AAC3B;AAAA,QACF;AACA,mBAAW,EAAE,QAAQ,WAAW,SAAS,OAAO,OAAO,CAAC;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,QAAM,GAAG,MAAM,cAAY,YAAY,cAAc,QAAQ,WAAW,GAAG,iBAAiB,SAAS,GACpG;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAkB,IAAI,SAAU,iBAAO,OAAM;AAAA,MAC9C,oBAAC,SAAI,WAAW,GAAG,wBAAwB,WAAW,GAAI,iBAAO,WAAW,OAAO,SAAS,YAAY,GAAE;AAAA,OAC5G;AAAA,IACC,aACC,qBAAC,eAAY,MAAK,WAAU,MAAK,MAC/B;AAAA,0BAAC,UAAK,WAAU,SAAS,iBAAO,UAAU,YAAY,GAAE;AAAA,MACvD,eAAe,oBAAC,UAAK,WAAU,cAAc,iBAAO,aAAY;AAAA,OACnE;AAAA,IAEF,qBAAC,UAAK,WAAU,aAAY,mBAAiB,SAAS,UAAU,QAAQ,YAAU,MAChF;AAAA,2BAAC,SACC;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,KAAK;AAAA,YACL,MAAK;AAAA,YACL,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM;AACf,0BAAY,EAAE,OAAO,KAAK;AAC1B,kBAAI,QAAS,YAAW,IAAI;AAAA,YAC9B;AAAA,YACA,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAQ;AAAA;AAAA,QACV;AAAA,QAGC,cACC,qBAAC,OAAE,WAAU,2BACX;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,oBAAkB;AAAA,cAClB,SAAS,MAAM,YAAY,UAAU;AAAA,cAEpC,iBAAO,YAAY,UAAU;AAAA;AAAA,UAChC;AAAA,UAAU;AAAA,UACV,oBAAC,UAAK,IAAI,WAAY,iBAAO,cAAa;AAAA,WAC5C;AAAA,SAEJ;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,MAAK;AAAA,UACL,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,eAAe,CAAC,SAAS;AACvB,wBAAY,IAAI;AAChB,6BAAiB,KAAK;AACtB,gBAAI,QAAS,YAAW,IAAI;AAAA,UAC9B;AAAA,UACA,MAAM,OAAO;AAAA,UACb,OAAO,gBAAgB,OAAO,gBAAgB;AAAA,UAC9C,MAAM;AAAA,UACN,UAAQ;AAAA;AAAA,MACV;AAAA,MACC,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,kBAAQ,SACX;AAAA,MAEF,oBAAC,UAAO,MAAK,UAAS,QAAQ,uBAAuB,UAAU,CAAC,WAAW,CAAC,WAAW,SAAS,SAC7F,iBAAO,QACV;AAAA,OACF;AAAA,KACF;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/email-change-setting.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\nimport { MailCheck } from \"lucide-react\";\n\nimport { DEFAULT_COMMON_LABELS, useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasContent } from \"../lib/presence\";\nimport { CurrentPasswordInput } from \"../components/danger-confirm\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { Input } from \"../components/input\";\nimport { authErrorCode, isRateLimited, retryAfterSeconds } from \"../auth/auth-errors\";\nimport { emailParts, taggedEmail } from \"../auth/email-tag\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { DEFAULT_EMAIL_CHANGE_LABELS } from \"./email-change-setting-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link EmailChangeSetting} renders — the `emailChange` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. */\nexport interface EmailChangeLabels {\n  /** The card's title. */\n  title: string;\n  /** Names the address the account has now: \"Current address: ada@example.com\". */\n  current: string;\n  /** The new address's field. */\n  newEmail: string;\n  /** The password field. */\n  password: string;\n  /** Under the password field: why it is asked again. */\n  passwordHint: string;\n  /** The address-tag button (auth §4.5), given the exact address it would use. */\n  emailTagUse: (address: string) => string;\n  /** The line after the address-tag button. */\n  emailTagHint: string;\n  /** The submit button. */\n  submit: string;\n  /** Under the new address while it is the current one. */\n  sameAsCurrent: string;\n  /** `email_taken`, under the new address. */\n  emailTaken: string;\n  /** `password_incorrect`, under the password. */\n  wrongPassword: string;\n  /** The pending state, given the new address the link went to. */\n  pending: (newEmail: string) => string;\n  /** Under it, given the current address — which still signs in until the link is\n   *  confirmed. */\n  pendingHint: (currentEmail: string) => string;\n  /** Mails the link again. */\n  resend: string;\n  /** Said once it went. */\n  resent: string;\n  /** Drops the change; the current address stays. */\n  cancel: string;\n  /** The done state (`confirmed`), given the address the account has now. */\n  confirmed: (email: string) => string;\n  /** Under it (`passkeyNote`): a passkey's label in the authenticator keeps the old\n   *  address (§6.2). */\n  passkeyNote: string;\n  /** A request was throttled — HTTP 429 — given its `Retry-After` wait in seconds, or\n   *  `undefined` without one. */\n  rateLimited: (seconds?: number) => string;\n  /** Any other failure, of any of the three requests. */\n  failed: string;\n}\n\n// Defined in ./email-change-setting-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_EMAIL_CHANGE_LABELS };\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What {@link EmailChangeSettingProps.onRequest} gets: the `POST /auth/me/email` body. */\nexport interface EmailChangeValues {\n  /** Trimmed. A `+tag` stays (auth §4.5); lower-casing is the server's. */\n  newEmail: string;\n  /** As typed. */\n  password: string;\n}\n\n/** Which request failed — {@link EmailChangeSettingProps.describeError}'s second\n *  argument. */\nexport type EmailChangeAction = \"request\" | \"resend\" | \"cancel\";\n\nexport interface EmailChangeSettingProps extends Omit<ComponentPropsWithRef<\"div\">, \"children\" | \"onSubmit\"> {\n  /** The account's address now. */\n  currentEmail: string;\n  /**\n   * The address a change waits on, from the app's server state — so a reload, or\n   * another tab, shows the pending state. `null`: none, whatever the card did. Left out\n   * (`undefined`), the card keeps its own: pending from a resolved `onRequest` until a\n   * resolved `onCancel`.\n   */\n  pendingEmail?: string | null;\n  /**\n   * The form was submitted: send `POST /auth/me/email {new_email, password}` (§6.2).\n   * Resolve once the link is mailed — refresh `pendingEmail` first if the app passes\n   * it — and the card shows \"Confirm the link we sent to …\". Reject with the client's\n   * error: `email_taken` shows under the new address, `password_incorrect` (server-kit's\n   * `400` for a wrong current password; an older `invalid_credentials` too) under the\n   * password, a 429 as `rateLimited`, anything else as `failed` unless `describeError`\n   * has the app's words.\n   */\n  onRequest: (values: EmailChangeValues) => Promise<unknown> | void;\n  /** Mail the link again. Left out, no button. */\n  onResend?: () => Promise<unknown> | void;\n  /** Drop the pending change. Left out, no button. */\n  onCancel?: () => Promise<unknown> | void;\n  /**\n   * The change was just confirmed — the app's confirm route (`POST /auth/me/email/confirm`)\n   * came back here. Says \"Your email address is now …\" over the form, with\n   * `passkeyNote`.\n   */\n  confirmed?: boolean;\n  /** With `confirmed`: say that a passkey's label keeps the old address (§6.2). Default\n   *  `true`; `false` for an account without passkeys. */\n  passkeyNote?: boolean;\n  /**\n   * The app's address tag (`\"kastlan\"`, auth §4.5): once the new address is plausible a\n   * button under it offers the tagged form — the rule of `RegisterForm`, since this is\n   * the person's own address. Never applied on its own. Left out, no offer.\n   */\n  emailTag?: string;\n  /** The app's own words for a failure, or `undefined` for the kit's. Asked first, for\n   *  every failure (a demo account's 403, the device offline). */\n  describeError?: (error: unknown, action: EmailChangeAction) => ReactNode | undefined;\n  labels?: LabelOverride<EmailChangeLabels>;\n}\n\ninterface Failure {\n  action: EmailChangeAction;\n  message: ReactNode;\n}\n\n/**\n * Changing the account's email address (docs/user-admin-harmonization.md §6.2, §2.5):\n * the current address, the new one, the password — then a pending state until the new\n * address confirms its link.\n *\n * **The new address must confirm before it takes effect.** The server mails a one-time\n * link to the NEW address (and a notice to the old one); until it is opened, the account\n * keeps the old address and signs in with it. So the card's answer to a request is not\n * \"changed\" but \"Confirm the link we sent to …\", with \"Send the link again\" and \"Cancel\n * the change\". The state is the server's: pass `pendingEmail` and a reload shows it too.\n *\n * **The password is asked again** because the address is the identity: whoever holds the\n * session must not move the account to a mailbox of their own. It is a\n * {@link CurrentPasswordInput}, so a password manager fills it and offers no new one.\n *\n * **The `+tag` offer** (`emailTag`) is RegisterForm's: the address is the person's own,\n * so `you+kastlan@…` is offered under the field, applied only on a click.\n *\n * **It never sends a request** (auth §8): `onRequest`, `onResend` and `onCancel` are the\n * app's, and their refusals are read by code — `email_taken` and `password_incorrect`\n * under their fields, which take the focus; a 429 as \"Too many attempts\". A wrong\n * password is a `400 password_incorrect`, never a 401: an app's client reads a 401 on a\n * signed-in route as an ended session, and would sign the person out for a typo.\n *\n * **Done** (`confirmed`): \"Your email address is now …\" and, unless `passkeyNote` is\n * off, that a passkey keeps its old label in the device's list — the authenticator\n * stored the name it was given, and only a new passkey carries the new one.\n *\n * **Under a write lock** the request, \"Send the link again\" and \"Cancel the change\" are\n * `commit` controls exempt from billing (`COMMIT_EXCEPT_BILLING`, 0.33): the address is\n * the account's own settings, which a lapsed plan never locks\n * (docs/billing-harmonization.md §3.3, §12.36); a demo's lock still does.\n */\nexport function EmailChangeSetting({\n  currentEmail,\n  pendingEmail,\n  onRequest,\n  onResend,\n  onCancel,\n  confirmed,\n  passkeyNote = true,\n  emailTag,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: EmailChangeSettingProps) {\n  const labels = useKitLabels(\"emailChange\", DEFAULT_EMAIL_CHANGE_LABELS, labelsProp);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  const [newEmail, setNewEmail] = useState(\"\");\n  const [password, setPassword] = useState(\"\");\n  const [ownPending, setOwnPending] = useState<string | null>(null);\n  const [busy, setBusy] = useState<EmailChangeAction | null>(null);\n  const [failure, setFailure] = useState<Failure | null>(null);\n  // `email_taken` belongs to the address it was answered for; another one clears it.\n  const [taken, setTaken] = useState<string | null>(null);\n  const [wrongPassword, setWrongPassword] = useState(false);\n  const [resent, setResent] = useState(false);\n  const mounted = useMounted();\n  const titleId = useId();\n  const tagHintId = useId();\n  const emailRef = useRef<HTMLInputElement>(null);\n  const passwordRef = useRef<HTMLInputElement>(null);\n  const pendingRef = useRef<HTMLDivElement>(null);\n\n  const pending = pendingEmail !== undefined ? pendingEmail : ownPending;\n  const isPending = pending !== null && pending !== \"\";\n\n  // The state swapped under the button that was pressed (the form for the pending\n  // message, or back): the focus goes to what came in, never down to <body>. Only after\n  // the person's own request — a pending state that arrives with the page takes nothing.\n  const focusNext = useRef<\"pending\" | \"form\" | null>(null);\n  useEffect(() => {\n    const target = focusNext.current;\n    if (target === \"pending\" && isPending) {\n      focusNext.current = null;\n      pendingRef.current?.focus();\n    } else if (target === \"form\" && !isPending) {\n      focusNext.current = null;\n      emailRef.current?.focus();\n    }\n  }, [isPending]);\n\n  const messageFor = (error: unknown, action: EmailChangeAction): ReactNode => {\n    const own = describeError?.(error, action);\n    if (hasContent(own)) return own;\n    return isRateLimited(error) ? labels.rateLimited(retryAfterSeconds(error)) : labels.failed;\n  };\n\n  /* ── The pending state ── */\n  if (isPending) {\n    const run = (action: \"resend\" | \"cancel\", call: () => unknown) => {\n      if (busy) return;\n      setBusy(action);\n      setFailure(null);\n      setResent(false);\n      settle(call).then(\n        () => {\n          if (!mounted.current) return;\n          setBusy(null);\n          if (action === \"resend\") {\n            setResent(true);\n            return;\n          }\n          focusNext.current = \"form\";\n          setOwnPending(null);\n        },\n        (error: unknown) => {\n          if (!mounted.current) return;\n          setBusy(null);\n          setFailure({ action, message: messageFor(error, action) });\n        },\n      );\n    };\n    return (\n      <Card {...rest} data-state=\"pending\" className={cn(\"p-4 space-y-3\", className)}>\n        <div>\n          <SettingsCardTitle id={titleId}>{labels.title}</SettingsCardTitle>\n          <div className={cn(CARD_DESCRIPTION_CLASS, \"break-all\")}>\n            {common.fieldValue(labels.current, currentEmail)}\n          </div>\n        </div>\n        {/* Focusable, not a control: the request's answer is read out when it takes the\n            focus from the submit that went with the form. */}\n        <div ref={pendingRef} tabIndex={-1} className=\"flex gap-2 outline-none\">\n          <MailCheck aria-hidden className=\"mt-0.5 size-4 shrink-0 text-success\" />\n          <div className=\"min-w-0 space-y-1\">\n            <p className=\"break-words text-sm\">{labels.pending(pending)}</p>\n            <p className={CARD_DESCRIPTION_CLASS}>{labels.pendingHint(currentEmail)}</p>\n          </div>\n        </div>\n        {(onResend || onCancel) && (\n          <div className=\"flex flex-wrap items-center gap-2\">\n            {onResend && (\n              <Button\n                type=\"button\"\n                variant=\"secondary\"\n                size=\"sm\"\n                commit={COMMIT_EXCEPT_BILLING}\n                pending={busy === \"resend\"}\n                disabled={busy === \"cancel\"}\n                onClick={() => run(\"resend\", onResend)}\n              >\n                {labels.resend}\n              </Button>\n            )}\n            {onCancel && (\n              <Button\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                commit={COMMIT_EXCEPT_BILLING}\n                pending={busy === \"cancel\"}\n                disabled={busy === \"resend\"}\n                onClick={() => run(\"cancel\", onCancel)}\n              >\n                {labels.cancel}\n              </Button>\n            )}\n            {/* Always in the tree, so the \"sent again\" that appears in it is announced\n                (VerifyEmailStatus's resend line). */}\n            <span role=\"status\" className=\"text-xs text-success\">\n              {resent ? labels.resent : null}\n            </span>\n          </div>\n        )}\n        {failure && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure.message}\n          </AlertBanner>\n        )}\n      </Card>\n    );\n  }\n\n  /* ── The form ── */\n  const typed = newEmail.trim();\n  const same = typed !== \"\" && typed.toLowerCase() === currentEmail.trim().toLowerCase();\n  const working = busy !== null;\n  const canSubmit = emailParts(newEmail) !== null && !same && password !== \"\";\n  const suggestion = emailTag ? taggedEmail(newEmail, emailTag) : null;\n  const emailError = same ? labels.sameAsCurrent : taken !== null && taken === typed ? labels.emailTaken : undefined;\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (!canSubmit || working) return;\n    const values: EmailChangeValues = { newEmail: typed, password };\n    setBusy(\"request\");\n    setFailure(null);\n    setTaken(null);\n    setWrongPassword(false);\n    settle(() => onRequest(values)).then(\n      () => {\n        if (!mounted.current) return;\n        setBusy(null);\n        // The password has done its work; nothing of the form stays in state.\n        setNewEmail(\"\");\n        setPassword(\"\");\n        setResent(false);\n        focusNext.current = \"pending\";\n        setOwnPending(values.newEmail);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusy(null);\n        const own = describeError?.(error, \"request\");\n        if (hasContent(own)) {\n          setFailure({ action: \"request\", message: own });\n          return;\n        }\n        if (isRateLimited(error)) {\n          setFailure({ action: \"request\", message: labels.rateLimited(retryAfterSeconds(error)) });\n          return;\n        }\n        const code = authErrorCode(error);\n        if (code === \"email_taken\") {\n          setTaken(values.newEmail);\n          emailRef.current?.focus();\n          return;\n        }\n        // `invalid_credentials` too, for a server that answered a wrong password so\n        // before server-kit 0.4.0 named `password_incorrect`.\n        if (code === \"password_incorrect\" || code === \"invalid_credentials\") {\n          setWrongPassword(true);\n          passwordRef.current?.focus();\n          return;\n        }\n        setFailure({ action: \"request\", message: labels.failed });\n      },\n    );\n  };\n\n  return (\n    <Card {...rest} data-state={confirmed ? \"confirmed\" : \"form\"} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle id={titleId}>{labels.title}</SettingsCardTitle>\n        <div className={cn(CARD_DESCRIPTION_CLASS, \"break-all\")}>{common.fieldValue(labels.current, currentEmail)}</div>\n      </div>\n      {confirmed && (\n        <AlertBanner tone=\"success\" size=\"sm\">\n          <span className=\"block\">{labels.confirmed(currentEmail)}</span>\n          {passkeyNote && <span className=\"mt-1 block\">{labels.passkeyNote}</span>}\n        </AlertBanner>\n      )}\n      <form className=\"space-y-3\" aria-labelledby={titleId} onSubmit={submit} noValidate>\n        <div>\n          <Input\n            ref={emailRef}\n            type=\"email\"\n            name=\"email\"\n            autoComplete=\"email\"\n            label={labels.newEmail}\n            value={newEmail}\n            onChange={(e) => {\n              setNewEmail(e.target.value);\n              if (failure) setFailure(null);\n            }}\n            readOnly={working}\n            error={emailError}\n            required\n          />\n          {/* RegisterForm's offer (auth §4.5): one click, the exact address on the\n              button, reversible by typing. */}\n          {suggestion && (\n            <p className=\"mt-1 text-xs text-muted\">\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                aria-describedby={tagHintId}\n                onClick={() => setNewEmail(suggestion)}\n              >\n                {labels.emailTagUse(suggestion)}\n              </Button>{\" \"}\n              <span id={tagHintId}>{labels.emailTagHint}</span>\n            </p>\n          )}\n        </div>\n        <CurrentPasswordInput\n          ref={passwordRef}\n          name=\"password\"\n          label={labels.password}\n          value={password}\n          onValueChange={(next) => {\n            setPassword(next);\n            setWrongPassword(false);\n            if (failure) setFailure(null);\n          }}\n          hint={labels.passwordHint}\n          error={wrongPassword ? labels.wrongPassword : undefined}\n          busy={working}\n          required\n        />\n        {failure && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure.message}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" commit={COMMIT_EXCEPT_BILLING} disabled={!working && !canSubmit} pending={working}>\n          {labels.submit}\n        </Button>\n      </form>\n    </Card>\n  );\n}\n"],"mappings":";AA4PQ,SACE,KADF;AA5PR,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAEnD,SAAS,iBAAiB;AAE1B,SAAS,uBAAuB,oBAAwC;AACxE,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,aAAa;AACtB,SAAS,eAAe,eAAe,yBAAyB;AAChE,SAAS,YAAY,mBAAmB;AACxC,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,mCAAmC;AAwJrC,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAC3D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,YAAY,aAAa,IAAI,SAAwB,IAAI;AAChE,QAAM,CAAC,MAAM,OAAO,IAAI,SAAmC,IAAI;AAC/D,QAAM,CAAC,SAAS,UAAU,IAAI,SAAyB,IAAI;AAE3D,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,KAAK;AACxD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,UAAU,WAAW;AAC3B,QAAM,UAAU,MAAM;AACtB,QAAM,YAAY,MAAM;AACxB,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,cAAc,OAAyB,IAAI;AACjD,QAAM,aAAa,OAAuB,IAAI;AAE9C,QAAM,UAAU,iBAAiB,SAAY,eAAe;AAC5D,QAAM,YAAY,YAAY,QAAQ,YAAY;AAKlD,QAAM,YAAY,OAAkC,IAAI;AACxD,YAAU,MAAM;AACd,UAAM,SAAS,UAAU;AACzB,QAAI,WAAW,aAAa,WAAW;AACrC,gBAAU,UAAU;AACpB,iBAAW,SAAS,MAAM;AAAA,IAC5B,WAAW,WAAW,UAAU,CAAC,WAAW;AAC1C,gBAAU,UAAU;AACpB,eAAS,SAAS,MAAM;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,SAAS,CAAC;AAEd,QAAM,aAAa,CAAC,OAAgB,WAAyC;AAC3E,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,QAAI,WAAW,GAAG,EAAG,QAAO;AAC5B,WAAO,cAAc,KAAK,IAAI,OAAO,YAAY,kBAAkB,KAAK,CAAC,IAAI,OAAO;AAAA,EACtF;AAGA,MAAI,WAAW;AACb,UAAM,MAAM,CAAC,QAA6B,SAAwB;AAChE,UAAI,KAAM;AACV,cAAQ,MAAM;AACd,iBAAW,IAAI;AACf,gBAAU,KAAK;AACf,aAAO,IAAI,EAAE;AAAA,QACX,MAAM;AACJ,cAAI,CAAC,QAAQ,QAAS;AACtB,kBAAQ,IAAI;AACZ,cAAI,WAAW,UAAU;AACvB,sBAAU,IAAI;AACd;AAAA,UACF;AACA,oBAAU,UAAU;AACpB,wBAAc,IAAI;AAAA,QACpB;AAAA,QACA,CAAC,UAAmB;AAClB,cAAI,CAAC,QAAQ,QAAS;AACtB,kBAAQ,IAAI;AACZ,qBAAW,EAAE,QAAQ,SAAS,WAAW,OAAO,MAAM,EAAE,CAAC;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AACA,WACE,qBAAC,QAAM,GAAG,MAAM,cAAW,WAAU,WAAW,GAAG,iBAAiB,SAAS,GAC3E;AAAA,2BAAC,SACC;AAAA,4BAAC,qBAAkB,IAAI,SAAU,iBAAO,OAAM;AAAA,QAC9C,oBAAC,SAAI,WAAW,GAAG,wBAAwB,WAAW,GACnD,iBAAO,WAAW,OAAO,SAAS,YAAY,GACjD;AAAA,SACF;AAAA,MAGA,qBAAC,SAAI,KAAK,YAAY,UAAU,IAAI,WAAU,2BAC5C;AAAA,4BAAC,aAAU,eAAW,MAAC,WAAU,uCAAsC;AAAA,QACvE,qBAAC,SAAI,WAAU,qBACb;AAAA,8BAAC,OAAE,WAAU,uBAAuB,iBAAO,QAAQ,OAAO,GAAE;AAAA,UAC5D,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,YAAY,YAAY,GAAE;AAAA,WAC1E;AAAA,SACF;AAAA,OACE,YAAY,aACZ,qBAAC,SAAI,WAAU,qCACZ;AAAA,oBACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,SAAS;AAAA,YAClB,UAAU,SAAS;AAAA,YACnB,SAAS,MAAM,IAAI,UAAU,QAAQ;AAAA,YAEpC,iBAAO;AAAA;AAAA,QACV;AAAA,QAED,YACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,SAAS;AAAA,YAClB,UAAU,SAAS;AAAA,YACnB,SAAS,MAAM,IAAI,UAAU,QAAQ;AAAA,YAEpC,iBAAO;AAAA;AAAA,QACV;AAAA,QAIF,oBAAC,UAAK,MAAK,UAAS,WAAU,wBAC3B,mBAAS,OAAO,SAAS,MAC5B;AAAA,SACF;AAAA,MAED,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,kBAAQ,SACX;AAAA,OAEJ;AAAA,EAEJ;AAGA,QAAM,QAAQ,SAAS,KAAK;AAC5B,QAAM,OAAO,UAAU,MAAM,MAAM,YAAY,MAAM,aAAa,KAAK,EAAE,YAAY;AACrF,QAAM,UAAU,SAAS;AACzB,QAAM,YAAY,WAAW,QAAQ,MAAM,QAAQ,CAAC,QAAQ,aAAa;AACzE,QAAM,aAAa,WAAW,YAAY,UAAU,QAAQ,IAAI;AAChE,QAAM,aAAa,OAAO,OAAO,gBAAgB,UAAU,QAAQ,UAAU,QAAQ,OAAO,aAAa;AAEzG,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,CAAC,aAAa,QAAS;AAC3B,UAAM,SAA4B,EAAE,UAAU,OAAO,SAAS;AAC9D,YAAQ,SAAS;AACjB,eAAW,IAAI;AACf,aAAS,IAAI;AACb,qBAAiB,KAAK;AACtB,WAAO,MAAM,UAAU,MAAM,CAAC,EAAE;AAAA,MAC9B,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AAEZ,oBAAY,EAAE;AACd,oBAAY,EAAE;AACd,kBAAU,KAAK;AACf,kBAAU,UAAU;AACpB,sBAAc,OAAO,QAAQ;AAAA,MAC/B;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AACZ,cAAM,MAAM,gBAAgB,OAAO,SAAS;AAC5C,YAAI,WAAW,GAAG,GAAG;AACnB,qBAAW,EAAE,QAAQ,WAAW,SAAS,IAAI,CAAC;AAC9C;AAAA,QACF;AACA,YAAI,cAAc,KAAK,GAAG;AACxB,qBAAW,EAAE,QAAQ,WAAW,SAAS,OAAO,YAAY,kBAAkB,KAAK,CAAC,EAAE,CAAC;AACvF;AAAA,QACF;AACA,cAAM,OAAO,cAAc,KAAK;AAChC,YAAI,SAAS,eAAe;AAC1B,mBAAS,OAAO,QAAQ;AACxB,mBAAS,SAAS,MAAM;AACxB;AAAA,QACF;AAGA,YAAI,SAAS,wBAAwB,SAAS,uBAAuB;AACnE,2BAAiB,IAAI;AACrB,sBAAY,SAAS,MAAM;AAC3B;AAAA,QACF;AACA,mBAAW,EAAE,QAAQ,WAAW,SAAS,OAAO,OAAO,CAAC;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,QAAM,GAAG,MAAM,cAAY,YAAY,cAAc,QAAQ,WAAW,GAAG,iBAAiB,SAAS,GACpG;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAkB,IAAI,SAAU,iBAAO,OAAM;AAAA,MAC9C,oBAAC,SAAI,WAAW,GAAG,wBAAwB,WAAW,GAAI,iBAAO,WAAW,OAAO,SAAS,YAAY,GAAE;AAAA,OAC5G;AAAA,IACC,aACC,qBAAC,eAAY,MAAK,WAAU,MAAK,MAC/B;AAAA,0BAAC,UAAK,WAAU,SAAS,iBAAO,UAAU,YAAY,GAAE;AAAA,MACvD,eAAe,oBAAC,UAAK,WAAU,cAAc,iBAAO,aAAY;AAAA,OACnE;AAAA,IAEF,qBAAC,UAAK,WAAU,aAAY,mBAAiB,SAAS,UAAU,QAAQ,YAAU,MAChF;AAAA,2BAAC,SACC;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,KAAK;AAAA,YACL,MAAK;AAAA,YACL,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM;AACf,0BAAY,EAAE,OAAO,KAAK;AAC1B,kBAAI,QAAS,YAAW,IAAI;AAAA,YAC9B;AAAA,YACA,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAQ;AAAA;AAAA,QACV;AAAA,QAGC,cACC,qBAAC,OAAE,WAAU,2BACX;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,oBAAkB;AAAA,cAClB,SAAS,MAAM,YAAY,UAAU;AAAA,cAEpC,iBAAO,YAAY,UAAU;AAAA;AAAA,UAChC;AAAA,UAAU;AAAA,UACV,oBAAC,UAAK,IAAI,WAAY,iBAAO,cAAa;AAAA,WAC5C;AAAA,SAEJ;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,MAAK;AAAA,UACL,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,eAAe,CAAC,SAAS;AACvB,wBAAY,IAAI;AAChB,6BAAiB,KAAK;AACtB,gBAAI,QAAS,YAAW,IAAI;AAAA,UAC9B;AAAA,UACA,MAAM,OAAO;AAAA,UACb,OAAO,gBAAgB,OAAO,gBAAgB;AAAA,UAC9C,MAAM;AAAA,UACN,UAAQ;AAAA;AAAA,MACV;AAAA,MACC,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,kBAAQ,SACX;AAAA,MAEF,oBAAC,UAAO,MAAK,UAAS,QAAQ,uBAAuB,UAAU,CAAC,WAAW,CAAC,WAAW,SAAS,SAC7F,iBAAO,QACV;AAAA,OACF;AAAA,KACF;AAEJ;","names":[]}

package/dist/account/passkeys-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/passkeys-setting.tsx"],"sourcesContent":["import { useEffect, useRef, useState } from \"react\";\nimport type { KeyboardEvent, ReactNode } from \"react\";\nimport { KeyRound } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { Input } from \"../components/input\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { useAccountSettingsLabels } from \"./account-settings-labels\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport type { PasskeysSettingLabels } from \"./account-settings-labels\";\n\n/** What a passkey's `id` may be: the app's own key type, string or numeric. */\nexport type PasskeyId = string | number;\n\n/**\n * One registered passkey, as the app's API lists it.\n *\n * Generic in its `id` (0.16.0): `PasskeysSetting` infers `Id` from `passkeys`, so an\n * app whose ids are numbers gets numbers back in `onRename` / `onDelete` — keksdose\n * cast `id as number` in both. Left unparameterised it is the old `string | number`.\n */\nexport interface PasskeyItem<Id extends PasskeyId = PasskeyId> {\n  id: Id;\n  name: string;\n  /** A `Date`, an ISO string or epoch ms. */\n  createdAt?: Date | string | number | null;\n  /** Null (or left out) reads as \"Never used\". */\n  lastUsedAt?: Date | string | number | null;\n}\n\n/** `data-*` attributes, passed through to the element they are given for. */\nexport type PasskeyDataAttributes = { [key: `data-${string}`]: string | number | boolean | undefined };\n\nexport interface PasskeysSettingProps<Id extends PasskeyId = PasskeyId> extends PasskeyDataAttributes {\n  /** `undefined` while the first load is in flight (or pass `loading`). */\n  passkeys: readonly PasskeyItem<Id>[] | undefined;\n  loading?: boolean;\n  /**\n   * Run the WebAuthn ceremony and register the passkey — app-side, since the options\n   * and the attestation are the app's server's business. Called with the trimmed name\n   * field, which may be EMPTY: pick your own default (\"Passkey\", the device name).\n   * Return the promise and the field clears when it resolves; a rejection (including\n   * the user cancelling the OS prompt) keeps what was typed.\n   */\n  onAdd: (name: string) => void | Promise<unknown>;\n  /**\n   * A step the app runs BEFORE `onAdd` (0.18.0) — re-asking for the current password,\n   * a policy notice, anything that may stop the add. Called with the same trimmed name;\n   * resolve `true` to go on to `onAdd`, `false` to stop quietly (nothing is said, the\n   * typed name stays). A rejection, or a throw, stops the same way: the app reports\n   * its own errors. While it runs the add button is disabled and busy, so a second\n   * click cannot start a second check.\n   *\n   * Kurvenschmiede asked for the password in its own dialog by handing `onAdd` a\n   * promise it kept open across that dialog (passkeys-card.tsx) — which still works.\n   * This is the documented place for it: open the dialog here, resolve with whether it\n   * was confirmed, and keep what it produced (the server's registration options) for\n   * `onAdd` in a ref. The ceremony then starts from the dialog's click rather than the\n   * card's, which is the user activation `navigator.credentials.create` wants.\n   *\n   * Left out, `onAdd` is called synchronously in the click, exactly as before.\n   */\n  beforeAdd?: (name: string) => boolean | Promise<boolean>;\n  /**\n   * What a passkey does to the password, which picks the line under the title (0.18.0).\n   * `\"instead\"` (default): it replaces it — `labels.description`, kastlan's promise.\n   * `\"alongside\"`: the password stays and the passkey is a second way in —\n   * `labels.descriptionAlongside`. Kurvenschmiede overrode `description` for exactly\n   * this; an app that sets `mode` needs no override.\n   */\n  mode?: \"instead\" | \"alongside\";\n  /** The ceremony is running. The add button says so and does not start a second one. */\n  adding?: boolean;\n  /** Offer \"Rename\" on each row. Return a promise to leave edit mode only on success. */\n  onRename?: (id: Id, name: string) => void | Promise<unknown>;\n  /** Offer \"Delete\" on each row — always behind an inline confirmation. */\n  onDelete?: (id: Id) => void | Promise<unknown>;\n  /** A row whose rename or delete is in flight; its buttons are disabled. */\n  busyId?: Id | null;\n  /** Show the name field above the add button. Default true. */\n  nameField?: boolean;\n  /**\n   * Shown INSTEAD of the list and the add button — passkeys are not supported by this\n   * browser, or the page is not a secure context. Its wording is the app's: only the\n   * app knows which of those it detected.\n   */\n  unavailable?: ReactNode;\n  /** A date for the \"Added …\" / \"Last used …\" lines. Default: the locale's medium date. */\n  formatDate?: (date: Date) => string;\n  /** Overrides the provider's locale for the default date format. */\n  locale?: string;\n  /** Prop > `<UiKitProvider labels={{ accountSettings: { passkeys } }}>` > English. */\n  labels?: LabelOverride<PasskeysSettingLabels>;\n  className?: string;\n  /** On the card (0.16.0), for an in-page link (`#passkeys`) or a test hook. `data-*`\n   *  attributes go there too. */\n  id?: string;\n  /** Extra attributes for one row's `<li>` (0.16.0) — an `id` to scroll a just-added\n   *  key into view, `data-*` for a test. Every row also carries `data-passkey-id`. */\n  rowProps?: (item: PasskeyItem<Id>) => ({ id?: string } & PasskeyDataAttributes) | undefined;\n}\n\n/**\n * The passkeys section of an account page: what is registered, when it was last used,\n * rename and delete, and \"Add passkey\" — the fourth card beside `ProfileSetting`,\n * `PasswordSetting` and `TwoFactorSetting`, and built the same way (a self-contained\n * `<Card>` owning its transient form state; the app owns the data and the API).\n *\n * Lifted from kastlan's passkeys-card. **The WebAuthn ceremony stays app-side**:\n * `navigator.credentials.create` needs options minted by the app's server and hands\n * back an attestation only that server can verify, so the kit calls `onAdd` and waits.\n *\n * **Delete confirms inline**, in the row, rather than through `useConfirm`: this card\n * must work in an app without a `ConfirmProvider`, and the question belongs next to\n * the passkey it names. Focus moves to Cancel, as in every destructive confirm in the\n * kit, so the Enter that pressed Delete cannot also answer it.\n */\nexport function PasskeysSetting<Id extends PasskeyId = PasskeyId>({\n  passkeys,\n  loading,\n  onAdd,\n  beforeAdd,\n  mode = \"instead\",\n  adding = false,\n  onRename,\n  onDelete,\n  busyId,\n  nameField = true,\n  unavailable,\n  formatDate,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  rowProps,\n  ...rest\n}: PasskeysSettingProps<Id>) {\n  const labels = useAccountSettingsLabels(\"passkeys\", labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [name, setName] = useState(\"\");\n  // `beforeAdd` is running. State for the button, and a ref for the guard: two clicks\n  // in one frame both read the state from before either set it.\n  const [checking, setChecking] = useState(false);\n  const checkingRef = useRef(false);\n\n  const date = (value: PasskeyItem[\"createdAt\"]): string | null => {\n    if (value === null || value === undefined || value === \"\") return null;\n    const d = value instanceof Date ? value : new Date(value);\n    if (Number.isNaN(d.getTime())) return null;\n    return formatDate ? formatDate(d) : new Intl.DateTimeFormat(locale, { dateStyle: \"medium\" }).format(d);\n  };\n\n  const add = () => {\n    if (adding || checkingRef.current) return;\n    const typed = name;\n    const value = typed.trim();\n    const send = () =>\n      Promise.resolve(onAdd(value))\n        // Clear only what was sent: the field stays editable while the OS prompt is up.\n        .then(() => setName((current) => (current === typed ? \"\" : current)));\n    if (!beforeAdd) {\n      send().catch(() => {});\n      return;\n    }\n    const done = () => {\n      checkingRef.current = false;\n      setChecking(false);\n    };\n    checkingRef.current = true;\n    setChecking(true);\n    let gate: Promise<boolean>;\n    // Called in the click, not a microtask later, so a step that itself needs the\n    // user's activation (a popup, the clipboard) still has it; a throw is a \"no\".\n    try {\n      gate = Promise.resolve(beforeAdd(value));\n    } catch (error) {\n      gate = Promise.reject(error);\n    }\n    gate\n      .then((go) => {\n        done();\n        // Strictly `true`: an app whose step resolves `undefined` meant nothing.\n        if (go === true) return send();\n      })\n      .catch(done);\n  };\n  const busy = adding || checking;\n\n  const isLoading = loading || passkeys === undefined;\n  const items = passkeys ?? [];\n\n  const body = (() => {\n    if (unavailable != null && unavailable !== false) {\n      return <EmptyState variant=\"inline\" size=\"sm\" icon={<KeyRound />} title={unavailable} />;\n    }\n    return (\n      <>\n        {isLoading ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : items.length === 0 ? (\n          <EmptyState variant=\"inline\" size=\"sm\" icon={<KeyRound />} title={labels.empty} />\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-subtle\">\n            {items.map((item) => (\n              <PasskeyRow\n                key={item.id}\n                item={item}\n                created={date(item.createdAt)}\n                lastUsed={date(item.lastUsedAt)}\n                attributes={rowProps?.(item)}\n                busy={busyId !== undefined && busyId !== null && busyId === item.id}\n                onRename={onRename}\n                onDelete={onDelete}\n                labels={labels}\n              />\n            ))}\n          </ul>\n        )}\n        <div className=\"space-y-2 pt-1\">\n          {nameField && (\n            <Input\n              label={labels.nameLabel}\n              placeholder={labels.namePlaceholder}\n              value={name}\n              maxLength={120}\n              onChange={(e) => setName(e.target.value)}\n              onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n                if (e.key === \"Enter\") {\n                  e.preventDefault();\n                  add();\n                }\n              }}\n            />\n          )}\n          <Button onClick={add} disabled={busy} aria-busy={busy || undefined}>\n            <KeyRound className=\"size-4\" aria-hidden />\n            {adding ? labels.adding : labels.add}\n          </Button>\n        </div>\n      </>\n    );\n  })();\n\n  return (\n    // `rest` is only `id` and `data-*`: everything else the props name is destructured.\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className=\"text-xs text-muted\">\n          {mode === \"alongside\"\n            ? labels.descriptionAlongside\n            : labels.description}\n        </div>\n      </div>\n      {body}\n    </Card>\n  );\n}\n\ntype RowMode = \"view\" | \"rename\" | \"delete\";\n\nfunction PasskeyRow<Id extends PasskeyId>({\n  item,\n  created,\n  lastUsed,\n  attributes,\n  busy,\n  onRename,\n  onDelete,\n  labels,\n}: {\n  item: PasskeyItem<Id>;\n  created: string | null;\n  lastUsed: string | null;\n  attributes?: { id?: string } & PasskeyDataAttributes;\n  busy: boolean;\n  onRename?: PasskeysSettingProps<Id>[\"onRename\"];\n  onDelete?: PasskeysSettingProps<Id>[\"onDelete\"];\n  labels: PasskeysSettingLabels;\n}) {\n  const [mode, setMode] = useState<RowMode>(\"view\");\n  const [draft, setDraft] = useState(item.name);\n  // Which button opened the sub-mode, so leaving it puts focus back there — the\n  // confirm or the field unmounts under the focus, which otherwise falls to <body>.\n  const [returnTo, setReturnTo] = useState<\"rename\" | \"delete\" | null>(null);\n  const cancelDeleteRef = useRef<HTMLButtonElement>(null);\n  const renameRef = useRef<HTMLInputElement>(null);\n  const renameButtonRef = useRef<HTMLButtonElement>(null);\n  const deleteButtonRef = useRef<HTMLButtonElement>(null);\n\n  useEffect(() => {\n    if (mode === \"delete\") cancelDeleteRef.current?.focus();\n    else if (mode === \"rename\") renameRef.current?.select();\n    else if (returnTo) (returnTo === \"rename\" ? renameButtonRef : deleteButtonRef).current?.focus();\n  }, [mode, returnTo]);\n\n  const open = (next: \"rename\" | \"delete\") => {\n    setReturnTo(next);\n    setDraft(item.name);\n    setMode(next);\n  };\n  const leave = () => setMode(\"view\");\n  const escapeLeaves = (e: KeyboardEvent<HTMLButtonElement>) => {\n    if (e.key === \"Escape\") {\n      e.preventDefault();\n      e.stopPropagation();\n      leave();\n    }\n  };\n\n  const saveRename = () => {\n    const next = draft.trim();\n    if (!onRename || !next || busy) return;\n    if (next === item.name) {\n      leave();\n      return;\n    }\n    Promise.resolve(onRename(item.id, next))\n      .then(leave)\n      .catch(() => {});\n  };\n\n  const confirmDelete = () => {\n    if (!onDelete || busy) return;\n    // The row unmounts once the list refreshes; on a failure it stays, confirm open.\n    Promise.resolve(onDelete(item.id))\n      .then(() => setMode(\"view\"))\n      .catch(() => {});\n  };\n\n  // On every mode's <li>, so an id the app scrolls to survives a rename or a confirm.\n  const li = { ...attributes, \"data-passkey-id\": String(item.id) };\n\n  const meta = [created && labels.created(created), lastUsed ? labels.lastUsed(lastUsed) : labels.neverUsed]\n    .filter(Boolean)\n    .join(\" · \");\n\n  if (mode === \"rename\") {\n    return (\n      <li {...li} className=\"flex flex-wrap items-center gap-2 py-2\">\n        <Input\n          ref={renameRef}\n          aria-label={labels.renameField(item.name)}\n          className=\"min-w-0 flex-1\"\n          value={draft}\n          maxLength={120}\n          onChange={(e) => setDraft(e.target.value)}\n          onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n            if (e.key === \"Enter\") {\n              e.preventDefault();\n              saveRename();\n            } else if (e.key === \"Escape\") {\n              e.preventDefault();\n              e.stopPropagation();\n              leave();\n            }\n          }}\n        />\n        <Button size=\"sm\" onClick={saveRename} disabled={busy || !draft.trim()}>\n          {labels.save}\n        </Button>\n        <Button size=\"sm\" variant=\"ghost\" onClick={leave}>\n          {labels.cancel}\n        </Button>\n      </li>\n    );\n  }\n\n  if (mode === \"delete\") {\n    return (\n      <li {...li} className=\"space-y-2 py-2\">\n        <p role=\"alert\" className=\"text-sm\">\n          {labels.deleteConfirm(item.name)}\n        </p>\n        <div className=\"flex flex-wrap gap-2\">\n          <Button size=\"sm\" variant=\"danger\" onClick={confirmDelete} onKeyDown={escapeLeaves} disabled={busy}>\n            {labels.confirmDelete}\n          </Button>\n          <Button ref={cancelDeleteRef} size=\"sm\" variant=\"ghost\" onClick={leave} onKeyDown={escapeLeaves}>\n            {labels.cancel}\n          </Button>\n        </div>\n      </li>\n    );\n  }\n\n  return (\n    <li {...li} className=\"flex items-center gap-3 py-2\">\n      <KeyRound className=\"size-4 shrink-0 text-muted\" aria-hidden />\n      <div className=\"min-w-0 flex-1\">\n        {/* The passkey's own name, which its owner typed: cut at Normal, wrapped from\n            Large up (text size §10.17; round 0.34 T1: the sweep read \"MacBook To…\"). */}\n        <div className=\"truncate-until-large text-sm font-medium\">{item.name}</div>\n        <div className=\"text-xs text-muted\">{meta}</div>\n      </div>\n      {onRename && (\n        <Button\n          ref={renameButtonRef}\n          size=\"sm\"\n          variant=\"ghost\"\n          disabled={busy}\n          onClick={() => open(\"rename\")}\n          aria-label={labels.renameItem(item.name)}\n        >\n          {labels.rename}\n        </Button>\n      )}\n      {onDelete && (\n        <Button\n          ref={deleteButtonRef}\n          size=\"sm\"\n          variant=\"ghost\"\n          tone=\"danger\"\n          disabled={busy}\n          onClick={() => open(\"delete\")}\n          aria-label={labels.deleteItem(item.name)}\n        >\n          {labels.delete}\n        </Button>\n      )}\n    </li>\n  );\n}\n"],"mappings":";AAmM0D,SAGpD,UAHoD,KAyChD,YAzCgD;AAnM1D,SAAS,WAAW,QAAQ,gBAAgB;AAE5C,SAAS,gBAAgB;AACzB,SAAS,UAAU;AACnB,SAAS,oBAAwC;AACjD,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,aAAa;AACtB,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AACzC,SAAS,yBAAyB;AA6G3B,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,yBAAyB,YAAY,UAAU;AAC9D,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AAGnC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,QAAM,cAAc,OAAO,KAAK;AAEhC,QAAM,OAAO,CAAC,UAAmD;AAC/D,QAAI,UAAU,QAAQ,UAAU,UAAa,UAAU,GAAI,QAAO;AAClE,UAAM,IAAI,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AACxD,QAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO;AACtC,WAAO,aAAa,WAAW,CAAC,IAAI,IAAI,KAAK,eAAe,QAAQ,EAAE,WAAW,SAAS,CAAC,EAAE,OAAO,CAAC;AAAA,EACvG;AAEA,QAAM,MAAM,MAAM;AAChB,QAAI,UAAU,YAAY,QAAS;AACnC,UAAM,QAAQ;AACd,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,OAAO,MACX,QAAQ,QAAQ,MAAM,KAAK,CAAC,EAEzB,KAAK,MAAM,QAAQ,CAAC,YAAa,YAAY,QAAQ,KAAK,OAAQ,CAAC;AACxE,QAAI,CAAC,WAAW;AACd,WAAK,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACrB;AAAA,IACF;AACA,UAAM,OAAO,MAAM;AACjB,kBAAY,UAAU;AACtB,kBAAY,KAAK;AAAA,IACnB;AACA,gBAAY,UAAU;AACtB,gBAAY,IAAI;AAChB,QAAI;AAGJ,QAAI;AACF,aAAO,QAAQ,QAAQ,UAAU,KAAK,CAAC;AAAA,IACzC,SAAS,OAAO;AACd,aAAO,QAAQ,OAAO,KAAK;AAAA,IAC7B;AACA,SACG,KAAK,CAAC,OAAO;AACZ,WAAK;AAEL,UAAI,OAAO,KAAM,QAAO,KAAK;AAAA,IAC/B,CAAC,EACA,MAAM,IAAI;AAAA,EACf;AACA,QAAM,OAAO,UAAU;AAEvB,QAAM,YAAY,WAAW,aAAa;AAC1C,QAAM,QAAQ,YAAY,CAAC;AAE3B,QAAM,QAAQ,MAAM;AAClB,QAAI,eAAe,QAAQ,gBAAgB,OAAO;AAChD,aAAO,oBAAC,cAAW,SAAQ,UAAS,MAAK,MAAK,MAAM,oBAAC,YAAS,GAAI,OAAO,aAAa;AAAA,IACxF;AACA,WACE,iCACG;AAAA,kBACC,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,MAAM,WAAW,IACnB,oBAAC,cAAW,SAAQ,UAAS,MAAK,MAAK,MAAM,oBAAC,YAAS,GAAI,OAAO,OAAO,OAAO,IAEhF,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,0BACpC,gBAAM,IAAI,CAAC,SACV;AAAA,QAAC;AAAA;AAAA,UAEC;AAAA,UACA,SAAS,KAAK,KAAK,SAAS;AAAA,UAC5B,UAAU,KAAK,KAAK,UAAU;AAAA,UAC9B,YAAY,WAAW,IAAI;AAAA,UAC3B,MAAM,WAAW,UAAa,WAAW,QAAQ,WAAW,KAAK;AAAA,UACjE;AAAA,UACA;AAAA,UACA;AAAA;AAAA,QARK,KAAK;AAAA,MASZ,CACD,GACH;AAAA,MAEF,qBAAC,SAAI,WAAU,kBACZ;AAAA,qBACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,aAAa,OAAO;AAAA,YACpB,OAAO;AAAA,YACP,WAAW;AAAA,YACX,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK;AAAA,YACvC,WAAW,CAAC,MAAuC;AACjD,kBAAI,EAAE,QAAQ,SAAS;AACrB,kBAAE,eAAe;AACjB,oBAAI;AAAA,cACN;AAAA,YACF;AAAA;AAAA,QACF;AAAA,QAEF,qBAAC,UAAO,SAAS,KAAK,UAAU,MAAM,aAAW,QAAQ,QACvD;AAAA,8BAAC,YAAS,WAAU,UAAS,eAAW,MAAC;AAAA,UACxC,SAAS,OAAO,SAAS,OAAO;AAAA,WACnC;AAAA,SACF;AAAA,OACF;AAAA,EAEJ,GAAG;AAEH;AAAA;AAAA,IAEE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,2BAAC,SACC;AAAA,4BAAC,qBAAmB,iBAAO,OAAM;AAAA,QACjC,oBAAC,SAAI,WAAU,sBACZ,mBAAS,cACN,OAAO,uBACP,OAAO,aACb;AAAA,SACF;AAAA,MACC;AAAA,OACH;AAAA;AAEJ;AAIA,SAAS,WAAiC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GASG;AACD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAkB,MAAM;AAChD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK,IAAI;AAG5C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAqC,IAAI;AACzE,QAAM,kBAAkB,OAA0B,IAAI;AACtD,QAAM,YAAY,OAAyB,IAAI;AAC/C,QAAM,kBAAkB,OAA0B,IAAI;AACtD,QAAM,kBAAkB,OAA0B,IAAI;AAEtD,YAAU,MAAM;AACd,QAAI,SAAS,SAAU,iBAAgB,SAAS,MAAM;AAAA,aAC7C,SAAS,SAAU,WAAU,SAAS,OAAO;AAAA,aAC7C,SAAU,EAAC,aAAa,WAAW,kBAAkB,iBAAiB,SAAS,MAAM;AAAA,EAChG,GAAG,CAAC,MAAM,QAAQ,CAAC;AAEnB,QAAM,OAAO,CAAC,SAA8B;AAC1C,gBAAY,IAAI;AAChB,aAAS,KAAK,IAAI;AAClB,YAAQ,IAAI;AAAA,EACd;AACA,QAAM,QAAQ,MAAM,QAAQ,MAAM;AAClC,QAAM,eAAe,CAAC,MAAwC;AAC5D,QAAI,EAAE,QAAQ,UAAU;AACtB,QAAE,eAAe;AACjB,QAAE,gBAAgB;AAClB,YAAM;AAAA,IACR;AAAA,EACF;AAEA,QAAM,aAAa,MAAM;AACvB,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,CAAC,YAAY,CAAC,QAAQ,KAAM;AAChC,QAAI,SAAS,KAAK,MAAM;AACtB,YAAM;AACN;AAAA,IACF;AACA,YAAQ,QAAQ,SAAS,KAAK,IAAI,IAAI,CAAC,EACpC,KAAK,KAAK,EACV,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AAEA,QAAM,gBAAgB,MAAM;AAC1B,QAAI,CAAC,YAAY,KAAM;AAEvB,YAAQ,QAAQ,SAAS,KAAK,EAAE,CAAC,EAC9B,KAAK,MAAM,QAAQ,MAAM,CAAC,EAC1B,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AAGA,QAAM,KAAK,EAAE,GAAG,YAAY,mBAAmB,OAAO,KAAK,EAAE,EAAE;AAE/D,QAAM,OAAO,CAAC,WAAW,OAAO,QAAQ,OAAO,GAAG,WAAW,OAAO,SAAS,QAAQ,IAAI,OAAO,SAAS,EACtG,OAAO,OAAO,EACd,KAAK,QAAK;AAEb,MAAI,SAAS,UAAU;AACrB,WACE,qBAAC,QAAI,GAAG,IAAI,WAAU,0CACpB;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,cAAY,OAAO,YAAY,KAAK,IAAI;AAAA,UACxC,WAAU;AAAA,UACV,OAAO;AAAA,UACP,WAAW;AAAA,UACX,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,UACxC,WAAW,CAAC,MAAuC;AACjD,gBAAI,EAAE,QAAQ,SAAS;AACrB,gBAAE,eAAe;AACjB,yBAAW;AAAA,YACb,WAAW,EAAE,QAAQ,UAAU;AAC7B,gBAAE,eAAe;AACjB,gBAAE,gBAAgB;AAClB,oBAAM;AAAA,YACR;AAAA,UACF;AAAA;AAAA,MACF;AAAA,MACA,oBAAC,UAAO,MAAK,MAAK,SAAS,YAAY,UAAU,QAAQ,CAAC,MAAM,KAAK,GAClE,iBAAO,MACV;AAAA,MACA,oBAAC,UAAO,MAAK,MAAK,SAAQ,SAAQ,SAAS,OACxC,iBAAO,QACV;AAAA,OACF;AAAA,EAEJ;AAEA,MAAI,SAAS,UAAU;AACrB,WACE,qBAAC,QAAI,GAAG,IAAI,WAAU,kBACpB;AAAA,0BAAC,OAAE,MAAK,SAAQ,WAAU,WACvB,iBAAO,cAAc,KAAK,IAAI,GACjC;AAAA,MACA,qBAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAO,MAAK,MAAK,SAAQ,UAAS,SAAS,eAAe,WAAW,cAAc,UAAU,MAC3F,iBAAO,eACV;AAAA,QACA,oBAAC,UAAO,KAAK,iBAAiB,MAAK,MAAK,SAAQ,SAAQ,SAAS,OAAO,WAAW,cAChF,iBAAO,QACV;AAAA,SACF;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,qBAAC,QAAI,GAAG,IAAI,WAAU,gCACpB;AAAA,wBAAC,YAAS,WAAU,8BAA6B,eAAW,MAAC;AAAA,IAC7D,qBAAC,SAAI,WAAU,kBAGb;AAAA,0BAAC,SAAI,WAAU,4CAA4C,eAAK,MAAK;AAAA,MACrE,oBAAC,SAAI,WAAU,sBAAsB,gBAAK;AAAA,OAC5C;AAAA,IACC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,UAAU;AAAA,QACV,SAAS,MAAM,KAAK,QAAQ;AAAA,QAC5B,cAAY,OAAO,WAAW,KAAK,IAAI;AAAA,QAEtC,iBAAO;AAAA;AAAA,IACV;AAAA,IAED,YACC;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,MAAK;AAAA,QACL,UAAU;AAAA,QACV,SAAS,MAAM,KAAK,QAAQ;AAAA,QAC5B,cAAY,OAAO,WAAW,KAAK,IAAI;AAAA,QAEtC,iBAAO;AAAA;AAAA,IACV;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/passkeys-setting.tsx"],"sourcesContent":["import { useEffect, useRef, useState } from \"react\";\nimport type { KeyboardEvent, ReactNode } from \"react\";\nimport { KeyRound } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { Input } from \"../components/input\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { useAccountSettingsLabels } from \"./account-settings-labels\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport type { PasskeysSettingLabels } from \"./account-settings-labels\";\n\n/** What a passkey's `id` may be: the app's own key type, string or numeric. */\nexport type PasskeyId = string | number;\n\n/**\n * One registered passkey, as the app's API lists it.\n *\n * Generic in its `id` (0.16.0): `PasskeysSetting` infers `Id` from `passkeys`, so an\n * app whose ids are numbers gets numbers back in `onRename` / `onDelete` — keksdose\n * cast `id as number` in both. Left unparameterised it is the old `string | number`.\n */\nexport interface PasskeyItem<Id extends PasskeyId = PasskeyId> {\n  id: Id;\n  name: string;\n  /** A `Date`, an ISO string or epoch ms. */\n  createdAt?: Date | string | number | null;\n  /** Null (or left out) reads as \"Never used\". */\n  lastUsedAt?: Date | string | number | null;\n}\n\n/** `data-*` attributes, passed through to the element they are given for. */\nexport type PasskeyDataAttributes = { [key: `data-${string}`]: string | number | boolean | undefined };\n\nexport interface PasskeysSettingProps<Id extends PasskeyId = PasskeyId> extends PasskeyDataAttributes {\n  /** `undefined` while the first load is in flight (or pass `loading`). */\n  passkeys: readonly PasskeyItem<Id>[] | undefined;\n  loading?: boolean;\n  /**\n   * Run the WebAuthn ceremony and register the passkey — app-side, since the options\n   * and the attestation are the app's server's business. Called with the trimmed name\n   * field, which may be EMPTY: pick your own default (\"Passkey\", the device name).\n   * Return the promise and the field clears when it resolves; a rejection (including\n   * the user cancelling the OS prompt) keeps what was typed.\n   */\n  onAdd: (name: string) => void | Promise<unknown>;\n  /**\n   * A step the app runs BEFORE `onAdd` (0.18.0) — re-asking for the current password,\n   * a policy notice, anything that may stop the add. Called with the same trimmed name;\n   * resolve `true` to go on to `onAdd`, `false` to stop quietly (nothing is said, the\n   * typed name stays). A rejection, or a throw, stops the same way: the app reports\n   * its own errors. While it runs the add button is disabled and busy, so a second\n   * click cannot start a second check.\n   *\n   * Kurvenschmiede asked for the password in its own dialog by handing `onAdd` a\n   * promise it kept open across that dialog (passkeys-card.tsx) — which still works.\n   * This is the documented place for it: open the dialog here, resolve with whether it\n   * was confirmed, and keep what it produced (the server's registration options) for\n   * `onAdd` in a ref. The ceremony then starts from the dialog's click rather than the\n   * card's, which is the user activation `navigator.credentials.create` wants.\n   *\n   * Left out, `onAdd` is called synchronously in the click, exactly as before.\n   */\n  beforeAdd?: (name: string) => boolean | Promise<boolean>;\n  /**\n   * What a passkey does to the password, which picks the line under the title (0.18.0).\n   * `\"instead\"` (default): it replaces it — `labels.description`, kastlan's promise.\n   * `\"alongside\"`: the password stays and the passkey is a second way in —\n   * `labels.descriptionAlongside`. Kurvenschmiede overrode `description` for exactly\n   * this; an app that sets `mode` needs no override.\n   */\n  mode?: \"instead\" | \"alongside\";\n  /** The ceremony is running. The add button says so and does not start a second one. */\n  adding?: boolean;\n  /** Offer \"Rename\" on each row. Return a promise to leave edit mode only on success. */\n  onRename?: (id: Id, name: string) => void | Promise<unknown>;\n  /** Offer \"Delete\" on each row — always behind an inline confirmation. */\n  onDelete?: (id: Id) => void | Promise<unknown>;\n  /** A row whose rename or delete is in flight; its buttons are disabled. */\n  busyId?: Id | null;\n  /** Show the name field above the add button. Default true. */\n  nameField?: boolean;\n  /**\n   * Shown INSTEAD of the list and the add button — passkeys are not supported by this\n   * browser, or the page is not a secure context. Its wording is the app's: only the\n   * app knows which of those it detected.\n   */\n  unavailable?: ReactNode;\n  /** A date for the \"Added …\" / \"Last used …\" lines. Default: the locale's medium date. */\n  formatDate?: (date: Date) => string;\n  /** Overrides the provider's locale for the default date format. */\n  locale?: string;\n  /** Prop > `<UiKitProvider labels={{ accountSettings: { passkeys } }}>` > English. */\n  labels?: LabelOverride<PasskeysSettingLabels>;\n  className?: string;\n  /** On the card (0.16.0), for an in-page link (`#passkeys`) or a test hook. `data-*`\n   *  attributes go there too. */\n  id?: string;\n  /** Extra attributes for one row's `<li>` (0.16.0) — an `id` to scroll a just-added\n   *  key into view, `data-*` for a test. Every row also carries `data-passkey-id`. */\n  rowProps?: (item: PasskeyItem<Id>) => ({ id?: string } & PasskeyDataAttributes) | undefined;\n}\n\n/**\n * The passkeys section of an account page: what is registered, when it was last used,\n * rename and delete, and \"Add passkey\" — the fourth card beside `ProfileSetting`,\n * `PasswordSetting` and `TwoFactorSetting`, and built the same way (a self-contained\n * `<Card>` owning its transient form state; the app owns the data and the API).\n *\n * Lifted from kastlan's passkeys-card. **The WebAuthn ceremony stays app-side**:\n * `navigator.credentials.create` needs options minted by the app's server and hands\n * back an attestation only that server can verify, so the kit calls `onAdd` and waits.\n *\n * **Delete confirms inline**, in the row, rather than through `useConfirm`: this card\n * must work in an app without a `ConfirmProvider`, and the question belongs next to\n * the passkey it names. Focus moves to Cancel, as in every destructive confirm in the\n * kit, so the Enter that pressed Delete cannot also answer it.\n */\nexport function PasskeysSetting<Id extends PasskeyId = PasskeyId>({\n  passkeys,\n  loading,\n  onAdd,\n  beforeAdd,\n  mode = \"instead\",\n  adding = false,\n  onRename,\n  onDelete,\n  busyId,\n  nameField = true,\n  unavailable,\n  formatDate,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  rowProps,\n  ...rest\n}: PasskeysSettingProps<Id>) {\n  const labels = useAccountSettingsLabels(\"passkeys\", labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [name, setName] = useState(\"\");\n  // `beforeAdd` is running. State for the button, and a ref for the guard: two clicks\n  // in one frame both read the state from before either set it.\n  const [checking, setChecking] = useState(false);\n  const checkingRef = useRef(false);\n\n  const date = (value: PasskeyItem[\"createdAt\"]): string | null => {\n    if (value === null || value === undefined || value === \"\") return null;\n    const d = value instanceof Date ? value : new Date(value);\n    if (Number.isNaN(d.getTime())) return null;\n    return formatDate ? formatDate(d) : new Intl.DateTimeFormat(locale, { dateStyle: \"medium\" }).format(d);\n  };\n\n  const add = () => {\n    if (adding || checkingRef.current) return;\n    const typed = name;\n    const value = typed.trim();\n    const send = () =>\n      Promise.resolve(onAdd(value))\n        // Clear only what was sent: the field stays editable while the OS prompt is up.\n        .then(() => setName((current) => (current === typed ? \"\" : current)));\n    if (!beforeAdd) {\n      send().catch(() => {});\n      return;\n    }\n    const done = () => {\n      checkingRef.current = false;\n      setChecking(false);\n    };\n    checkingRef.current = true;\n    setChecking(true);\n    let gate: Promise<boolean>;\n    // Called in the click, not a microtask later, so a step that itself needs the\n    // user's activation (a popup, the clipboard) still has it; a throw is a \"no\".\n    try {\n      gate = Promise.resolve(beforeAdd(value));\n    } catch (error) {\n      gate = Promise.reject(error);\n    }\n    gate\n      .then((go) => {\n        done();\n        // Strictly `true`: an app whose step resolves `undefined` meant nothing.\n        if (go === true) return send();\n      })\n      .catch(done);\n  };\n  const busy = adding || checking;\n\n  const isLoading = loading || passkeys === undefined;\n  const items = passkeys ?? [];\n\n  const body = (() => {\n    if (unavailable != null && unavailable !== false) {\n      return <EmptyState variant=\"inline\" size=\"sm\" icon={<KeyRound />} title={unavailable} />;\n    }\n    return (\n      <>\n        {isLoading ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : items.length === 0 ? (\n          <EmptyState variant=\"inline\" size=\"sm\" icon={<KeyRound />} title={labels.empty} />\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-subtle\">\n            {items.map((item) => (\n              <PasskeyRow\n                key={item.id}\n                item={item}\n                created={date(item.createdAt)}\n                lastUsed={date(item.lastUsedAt)}\n                attributes={rowProps?.(item)}\n                busy={busyId !== undefined && busyId !== null && busyId === item.id}\n                onRename={onRename}\n                onDelete={onDelete}\n                labels={labels}\n              />\n            ))}\n          </ul>\n        )}\n        <div className=\"space-y-2 pt-1\">\n          {nameField && (\n            <Input\n              label={labels.nameLabel}\n              placeholder={labels.namePlaceholder}\n              value={name}\n              maxLength={120}\n              onChange={(e) => setName(e.target.value)}\n              onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n                if (e.key === \"Enter\") {\n                  e.preventDefault();\n                  add();\n                }\n              }}\n            />\n          )}\n          <Button onClick={add} disabled={busy} aria-busy={busy || undefined}>\n            <KeyRound className=\"size-4\" aria-hidden />\n            {adding ? labels.adding : labels.add}\n          </Button>\n        </div>\n      </>\n    );\n  })();\n\n  return (\n    // `rest` is only `id` and `data-*`: everything else the props name is destructured.\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className=\"text-xs text-muted\">\n          {mode === \"alongside\" ? labels.descriptionAlongside : labels.description}\n        </div>\n      </div>\n      {body}\n    </Card>\n  );\n}\n\ntype RowMode = \"view\" | \"rename\" | \"delete\";\n\nfunction PasskeyRow<Id extends PasskeyId>({\n  item,\n  created,\n  lastUsed,\n  attributes,\n  busy,\n  onRename,\n  onDelete,\n  labels,\n}: {\n  item: PasskeyItem<Id>;\n  created: string | null;\n  lastUsed: string | null;\n  attributes?: { id?: string } & PasskeyDataAttributes;\n  busy: boolean;\n  onRename?: PasskeysSettingProps<Id>[\"onRename\"];\n  onDelete?: PasskeysSettingProps<Id>[\"onDelete\"];\n  labels: PasskeysSettingLabels;\n}) {\n  const [mode, setMode] = useState<RowMode>(\"view\");\n  const [draft, setDraft] = useState(item.name);\n  // Which button opened the sub-mode, so leaving it puts focus back there — the\n  // confirm or the field unmounts under the focus, which otherwise falls to <body>.\n  const [returnTo, setReturnTo] = useState<\"rename\" | \"delete\" | null>(null);\n  const cancelDeleteRef = useRef<HTMLButtonElement>(null);\n  const renameRef = useRef<HTMLInputElement>(null);\n  const renameButtonRef = useRef<HTMLButtonElement>(null);\n  const deleteButtonRef = useRef<HTMLButtonElement>(null);\n\n  useEffect(() => {\n    if (mode === \"delete\") cancelDeleteRef.current?.focus();\n    else if (mode === \"rename\") renameRef.current?.select();\n    else if (returnTo) (returnTo === \"rename\" ? renameButtonRef : deleteButtonRef).current?.focus();\n  }, [mode, returnTo]);\n\n  const open = (next: \"rename\" | \"delete\") => {\n    setReturnTo(next);\n    setDraft(item.name);\n    setMode(next);\n  };\n  const leave = () => setMode(\"view\");\n  const escapeLeaves = (e: KeyboardEvent<HTMLButtonElement>) => {\n    if (e.key === \"Escape\") {\n      e.preventDefault();\n      e.stopPropagation();\n      leave();\n    }\n  };\n\n  const saveRename = () => {\n    const next = draft.trim();\n    if (!onRename || !next || busy) return;\n    if (next === item.name) {\n      leave();\n      return;\n    }\n    Promise.resolve(onRename(item.id, next))\n      .then(leave)\n      .catch(() => {});\n  };\n\n  const confirmDelete = () => {\n    if (!onDelete || busy) return;\n    // The row unmounts once the list refreshes; on a failure it stays, confirm open.\n    Promise.resolve(onDelete(item.id))\n      .then(() => setMode(\"view\"))\n      .catch(() => {});\n  };\n\n  // On every mode's <li>, so an id the app scrolls to survives a rename or a confirm.\n  const li = { ...attributes, \"data-passkey-id\": String(item.id) };\n\n  const meta = [created && labels.created(created), lastUsed ? labels.lastUsed(lastUsed) : labels.neverUsed]\n    .filter(Boolean)\n    .join(\" · \");\n\n  if (mode === \"rename\") {\n    return (\n      <li {...li} className=\"flex flex-wrap items-center gap-2 py-2\">\n        <Input\n          ref={renameRef}\n          aria-label={labels.renameField(item.name)}\n          className=\"min-w-0 flex-1\"\n          value={draft}\n          maxLength={120}\n          onChange={(e) => setDraft(e.target.value)}\n          onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n            if (e.key === \"Enter\") {\n              e.preventDefault();\n              saveRename();\n            } else if (e.key === \"Escape\") {\n              e.preventDefault();\n              e.stopPropagation();\n              leave();\n            }\n          }}\n        />\n        <Button size=\"sm\" onClick={saveRename} disabled={busy || !draft.trim()}>\n          {labels.save}\n        </Button>\n        <Button size=\"sm\" variant=\"ghost\" onClick={leave}>\n          {labels.cancel}\n        </Button>\n      </li>\n    );\n  }\n\n  if (mode === \"delete\") {\n    return (\n      <li {...li} className=\"space-y-2 py-2\">\n        <p role=\"alert\" className=\"text-sm\">\n          {labels.deleteConfirm(item.name)}\n        </p>\n        <div className=\"flex flex-wrap gap-2\">\n          <Button size=\"sm\" variant=\"danger\" onClick={confirmDelete} onKeyDown={escapeLeaves} disabled={busy}>\n            {labels.confirmDelete}\n          </Button>\n          <Button ref={cancelDeleteRef} size=\"sm\" variant=\"ghost\" onClick={leave} onKeyDown={escapeLeaves}>\n            {labels.cancel}\n          </Button>\n        </div>\n      </li>\n    );\n  }\n\n  return (\n    <li {...li} className=\"flex items-center gap-3 py-2\">\n      <KeyRound className=\"size-4 shrink-0 text-muted\" aria-hidden />\n      <div className=\"min-w-0 flex-1\">\n        {/* The passkey's own name, which its owner typed: cut at Normal, wrapped from\n            Large up (text size §10.17; round 0.34 T1: the sweep read \"MacBook To…\"). */}\n        <div className=\"truncate-until-large text-sm font-medium\">{item.name}</div>\n        <div className=\"text-xs text-muted\">{meta}</div>\n      </div>\n      {onRename && (\n        <Button\n          ref={renameButtonRef}\n          size=\"sm\"\n          variant=\"ghost\"\n          disabled={busy}\n          onClick={() => open(\"rename\")}\n          aria-label={labels.renameItem(item.name)}\n        >\n          {labels.rename}\n        </Button>\n      )}\n      {onDelete && (\n        <Button\n          ref={deleteButtonRef}\n          size=\"sm\"\n          variant=\"ghost\"\n          tone=\"danger\"\n          disabled={busy}\n          onClick={() => open(\"delete\")}\n          aria-label={labels.deleteItem(item.name)}\n        >\n          {labels.delete}\n        </Button>\n      )}\n    </li>\n  );\n}\n"],"mappings":";AAmM0D,SAGpD,UAHoD,KAyChD,YAzCgD;AAnM1D,SAAS,WAAW,QAAQ,gBAAgB;AAE5C,SAAS,gBAAgB;AACzB,SAAS,UAAU;AACnB,SAAS,oBAAwC;AACjD,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,aAAa;AACtB,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AACzC,SAAS,yBAAyB;AA6G3B,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,yBAAyB,YAAY,UAAU;AAC9D,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AAGnC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,QAAM,cAAc,OAAO,KAAK;AAEhC,QAAM,OAAO,CAAC,UAAmD;AAC/D,QAAI,UAAU,QAAQ,UAAU,UAAa,UAAU,GAAI,QAAO;AAClE,UAAM,IAAI,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AACxD,QAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO;AACtC,WAAO,aAAa,WAAW,CAAC,IAAI,IAAI,KAAK,eAAe,QAAQ,EAAE,WAAW,SAAS,CAAC,EAAE,OAAO,CAAC;AAAA,EACvG;AAEA,QAAM,MAAM,MAAM;AAChB,QAAI,UAAU,YAAY,QAAS;AACnC,UAAM,QAAQ;AACd,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,OAAO,MACX,QAAQ,QAAQ,MAAM,KAAK,CAAC,EAEzB,KAAK,MAAM,QAAQ,CAAC,YAAa,YAAY,QAAQ,KAAK,OAAQ,CAAC;AACxE,QAAI,CAAC,WAAW;AACd,WAAK,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACrB;AAAA,IACF;AACA,UAAM,OAAO,MAAM;AACjB,kBAAY,UAAU;AACtB,kBAAY,KAAK;AAAA,IACnB;AACA,gBAAY,UAAU;AACtB,gBAAY,IAAI;AAChB,QAAI;AAGJ,QAAI;AACF,aAAO,QAAQ,QAAQ,UAAU,KAAK,CAAC;AAAA,IACzC,SAAS,OAAO;AACd,aAAO,QAAQ,OAAO,KAAK;AAAA,IAC7B;AACA,SACG,KAAK,CAAC,OAAO;AACZ,WAAK;AAEL,UAAI,OAAO,KAAM,QAAO,KAAK;AAAA,IAC/B,CAAC,EACA,MAAM,IAAI;AAAA,EACf;AACA,QAAM,OAAO,UAAU;AAEvB,QAAM,YAAY,WAAW,aAAa;AAC1C,QAAM,QAAQ,YAAY,CAAC;AAE3B,QAAM,QAAQ,MAAM;AAClB,QAAI,eAAe,QAAQ,gBAAgB,OAAO;AAChD,aAAO,oBAAC,cAAW,SAAQ,UAAS,MAAK,MAAK,MAAM,oBAAC,YAAS,GAAI,OAAO,aAAa;AAAA,IACxF;AACA,WACE,iCACG;AAAA,kBACC,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,MAAM,WAAW,IACnB,oBAAC,cAAW,SAAQ,UAAS,MAAK,MAAK,MAAM,oBAAC,YAAS,GAAI,OAAO,OAAO,OAAO,IAEhF,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,0BACpC,gBAAM,IAAI,CAAC,SACV;AAAA,QAAC;AAAA;AAAA,UAEC;AAAA,UACA,SAAS,KAAK,KAAK,SAAS;AAAA,UAC5B,UAAU,KAAK,KAAK,UAAU;AAAA,UAC9B,YAAY,WAAW,IAAI;AAAA,UAC3B,MAAM,WAAW,UAAa,WAAW,QAAQ,WAAW,KAAK;AAAA,UACjE;AAAA,UACA;AAAA,UACA;AAAA;AAAA,QARK,KAAK;AAAA,MASZ,CACD,GACH;AAAA,MAEF,qBAAC,SAAI,WAAU,kBACZ;AAAA,qBACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,aAAa,OAAO;AAAA,YACpB,OAAO;AAAA,YACP,WAAW;AAAA,YACX,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK;AAAA,YACvC,WAAW,CAAC,MAAuC;AACjD,kBAAI,EAAE,QAAQ,SAAS;AACrB,kBAAE,eAAe;AACjB,oBAAI;AAAA,cACN;AAAA,YACF;AAAA;AAAA,QACF;AAAA,QAEF,qBAAC,UAAO,SAAS,KAAK,UAAU,MAAM,aAAW,QAAQ,QACvD;AAAA,8BAAC,YAAS,WAAU,UAAS,eAAW,MAAC;AAAA,UACxC,SAAS,OAAO,SAAS,OAAO;AAAA,WACnC;AAAA,SACF;AAAA,OACF;AAAA,EAEJ,GAAG;AAEH;AAAA;AAAA,IAEE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,2BAAC,SACC;AAAA,4BAAC,qBAAmB,iBAAO,OAAM;AAAA,QACjC,oBAAC,SAAI,WAAU,sBACZ,mBAAS,cAAc,OAAO,uBAAuB,OAAO,aAC/D;AAAA,SACF;AAAA,MACC;AAAA,OACH;AAAA;AAEJ;AAIA,SAAS,WAAiC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GASG;AACD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAkB,MAAM;AAChD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK,IAAI;AAG5C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAqC,IAAI;AACzE,QAAM,kBAAkB,OAA0B,IAAI;AACtD,QAAM,YAAY,OAAyB,IAAI;AAC/C,QAAM,kBAAkB,OAA0B,IAAI;AACtD,QAAM,kBAAkB,OAA0B,IAAI;AAEtD,YAAU,MAAM;AACd,QAAI,SAAS,SAAU,iBAAgB,SAAS,MAAM;AAAA,aAC7C,SAAS,SAAU,WAAU,SAAS,OAAO;AAAA,aAC7C,SAAU,EAAC,aAAa,WAAW,kBAAkB,iBAAiB,SAAS,MAAM;AAAA,EAChG,GAAG,CAAC,MAAM,QAAQ,CAAC;AAEnB,QAAM,OAAO,CAAC,SAA8B;AAC1C,gBAAY,IAAI;AAChB,aAAS,KAAK,IAAI;AAClB,YAAQ,IAAI;AAAA,EACd;AACA,QAAM,QAAQ,MAAM,QAAQ,MAAM;AAClC,QAAM,eAAe,CAAC,MAAwC;AAC5D,QAAI,EAAE,QAAQ,UAAU;AACtB,QAAE,eAAe;AACjB,QAAE,gBAAgB;AAClB,YAAM;AAAA,IACR;AAAA,EACF;AAEA,QAAM,aAAa,MAAM;AACvB,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,CAAC,YAAY,CAAC,QAAQ,KAAM;AAChC,QAAI,SAAS,KAAK,MAAM;AACtB,YAAM;AACN;AAAA,IACF;AACA,YAAQ,QAAQ,SAAS,KAAK,IAAI,IAAI,CAAC,EACpC,KAAK,KAAK,EACV,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AAEA,QAAM,gBAAgB,MAAM;AAC1B,QAAI,CAAC,YAAY,KAAM;AAEvB,YAAQ,QAAQ,SAAS,KAAK,EAAE,CAAC,EAC9B,KAAK,MAAM,QAAQ,MAAM,CAAC,EAC1B,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AAGA,QAAM,KAAK,EAAE,GAAG,YAAY,mBAAmB,OAAO,KAAK,EAAE,EAAE;AAE/D,QAAM,OAAO,CAAC,WAAW,OAAO,QAAQ,OAAO,GAAG,WAAW,OAAO,SAAS,QAAQ,IAAI,OAAO,SAAS,EACtG,OAAO,OAAO,EACd,KAAK,QAAK;AAEb,MAAI,SAAS,UAAU;AACrB,WACE,qBAAC,QAAI,GAAG,IAAI,WAAU,0CACpB;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,cAAY,OAAO,YAAY,KAAK,IAAI;AAAA,UACxC,WAAU;AAAA,UACV,OAAO;AAAA,UACP,WAAW;AAAA,UACX,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,UACxC,WAAW,CAAC,MAAuC;AACjD,gBAAI,EAAE,QAAQ,SAAS;AACrB,gBAAE,eAAe;AACjB,yBAAW;AAAA,YACb,WAAW,EAAE,QAAQ,UAAU;AAC7B,gBAAE,eAAe;AACjB,gBAAE,gBAAgB;AAClB,oBAAM;AAAA,YACR;AAAA,UACF;AAAA;AAAA,MACF;AAAA,MACA,oBAAC,UAAO,MAAK,MAAK,SAAS,YAAY,UAAU,QAAQ,CAAC,MAAM,KAAK,GAClE,iBAAO,MACV;AAAA,MACA,oBAAC,UAAO,MAAK,MAAK,SAAQ,SAAQ,SAAS,OACxC,iBAAO,QACV;AAAA,OACF;AAAA,EAEJ;AAEA,MAAI,SAAS,UAAU;AACrB,WACE,qBAAC,QAAI,GAAG,IAAI,WAAU,kBACpB;AAAA,0BAAC,OAAE,MAAK,SAAQ,WAAU,WACvB,iBAAO,cAAc,KAAK,IAAI,GACjC;AAAA,MACA,qBAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAO,MAAK,MAAK,SAAQ,UAAS,SAAS,eAAe,WAAW,cAAc,UAAU,MAC3F,iBAAO,eACV;AAAA,QACA,oBAAC,UAAO,KAAK,iBAAiB,MAAK,MAAK,SAAQ,SAAQ,SAAS,OAAO,WAAW,cAChF,iBAAO,QACV;AAAA,SACF;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,qBAAC,QAAI,GAAG,IAAI,WAAU,gCACpB;AAAA,wBAAC,YAAS,WAAU,8BAA6B,eAAW,MAAC;AAAA,IAC7D,qBAAC,SAAI,WAAU,kBAGb;AAAA,0BAAC,SAAI,WAAU,4CAA4C,eAAK,MAAK;AAAA,MACrE,oBAAC,SAAI,WAAU,sBAAsB,gBAAK;AAAA,OAC5C;AAAA,IACC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,UAAU;AAAA,QACV,SAAS,MAAM,KAAK,QAAQ;AAAA,QAC5B,cAAY,OAAO,WAAW,KAAK,IAAI;AAAA,QAEtC,iBAAO;AAAA;AAAA,IACV;AAAA,IAED,YACC;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,MAAK;AAAA,QACL,UAAU;AAAA,QACV,SAAS,MAAM,KAAK,QAAQ;AAAA,QAC5B,cAAY,OAAO,WAAW,KAAK,IAAI;AAAA,QAEtC,iBAAO;AAAA;AAAA,IACV;AAAA,KAEJ;AAEJ;","names":[]}

package/dist/account/sessions-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/sessions-setting.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\nimport { MonitorSmartphone } from \"lucide-react\";\n\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { formatRelativeTime, toDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport { hasContent } from \"../lib/presence\";\nimport { DangerConfirm } from \"../components/danger-confirm\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { DEFAULT_SESSIONS_LABELS } from \"./sessions-setting-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link SessionsSetting} renders — the `sessions` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n *  Cancel is `dangerConfirm.cancel`. */\nexport interface SessionsLabels {\n  /** The card's title. */\n  title: string;\n  /** The line under it: what \"sign out everywhere\" is for. */\n  description: string;\n  /** The button that asks first. */\n  signOutEverywhere: string;\n  /** The question it asks: every session ends, this one too. */\n  signOutEverywherePrompt: string;\n  /** The button that answers it. */\n  confirmSignOutEverywhere: string;\n  /** The device list's accessible name. */\n  list: string;\n  /** While the list loads. */\n  loading: string;\n  /** A list with no rows. */\n  empty: string;\n  /** The chip on the session this page runs in. */\n  current: string;\n  /** A session whose device the server could not name. */\n  unknownDevice: string;\n  /** Given the last activity, formatted (\"3 hours ago\", \"5 Oct 2026\"). */\n  lastActive: (when: string) => string;\n  /** Given the address the session was last seen from. */\n  ip: (address: string) => string;\n  /** A row's button, visible text. */\n  revoke: string;\n  /** The same button's accessible name, given the device — it starts with `revoke`,\n   *  the visible text, so voice control finds it by what it says. */\n  revokeItem: (device: string) => string;\n  /** A request failed. */\n  failed: string;\n}\n\n// Defined in ./sessions-setting-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_SESSIONS_LABELS };\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What a session's `id` may be: the app's own key type. */\nexport type SessionId = string | number;\n\n/** One stored session (kastlan's `GET /auth/sessions`). */\nexport interface SessionItem<Id extends SessionId = SessionId> {\n  id: Id;\n  /** The browser and system, as the server reads them (\"Firefox on Windows\"). Blank\n   *  reads as `labels.unknownDevice`. */\n  device?: string | null;\n  /** The address it was last seen from. */\n  ip?: string | null;\n  /** A `Date`, an ISO string or epoch ms. */\n  lastActiveAt?: DateInput;\n  /** The session this page runs in: marked, and offered no \"Sign out\" of its own — the\n   *  app's sign-out does that, and \"Sign out everywhere\" below. */\n  current?: boolean;\n}\n\n/** Which request failed — {@link SessionsSettingProps.describeError}'s second argument. */\nexport type SessionsAction = \"sign-out-everywhere\" | \"revoke\";\n\nexport interface SessionsSettingProps<Id extends SessionId = SessionId>\n  extends Omit<ComponentPropsWithRef<\"div\">, \"children\"> {\n  /**\n   * End every session (`POST /auth/logout`, auth §6.3) — this one included. Asked\n   * first; resolve once the server answered, then sign this page out: the card says\n   * that the device signs out too, and its own session is gone.\n   */\n  onSignOutEverywhere: () => Promise<unknown> | void;\n  /**\n   * The stored sessions, where the app keeps them (kastlan's `user_sessions`, §6.3).\n   * Left out, the card is \"Sign out everywhere\" alone — keksdose and Kurvenschmiede keep\n   * a cut-off (`sessions_invalid_before`), not rows. `undefined` with `loading` while the\n   * first load runs.\n   */\n  sessions?: readonly SessionItem<Id>[];\n  /** The list is loading. */\n  loading?: boolean;\n  /** End one other session (`DELETE /auth/sessions/{id}`). Left out, no row buttons.\n   *  The row is busy until it settles; refresh `sessions` then. */\n  onRevoke?: (id: Id) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;\n  /** The \"Last active\" text. Default: how long ago, in the provider's locale, and the\n   *  date once it is more than a week back. */\n  formatLastActive?: (date: Date) => string;\n  /** Overrides the provider's locale for the default format. */\n  locale?: string;\n  labels?: LabelOverride<SessionsLabels>;\n}\n\n/**\n * Where the account is signed in, and the way out of all of it\n * (docs/user-admin-harmonization.md §6.3, §2.6).\n *\n * **\"Sign out everywhere\", in every app.** It ends every session, THIS one included —\n * the server stamps a cut-off (`sessions_invalid_before`) that the page's own token is\n * older than — so the confirm says so before it is pressed, and the app signs out once it\n * resolves. A {@link DangerConfirm} in the warning tone: nothing is lost, but the person\n * has to sign in again on every device. keksdose kept its ordinary sign-out device-only\n * (its offline mirror is wiped on an explicit sign-out), which is why this is an action\n * of its own, not a mode of that one.\n *\n * **The device list, where sessions are stored** (kastlan): device, address, last\n * active, and \"This device\" on the current one, with \"Sign out\" on each other row — no\n * confirm, since a session ended is a sign-in away from coming back, not data lost.\n * Without `sessions` there is no list: the other apps keep a cut-off, not rows.\n *\n * Both requests are the app's; a failure is said under the card's action, in the app's\n * words if `describeError` has them.\n *\n * **Under a write lock** both are `commit` controls exempt from billing\n * (`COMMIT_EXCEPT_BILLING`, 0.33): a lapsed plan never keeps a person from ending their\n * own sessions (docs/billing-harmonization.md §12.13, §12.36); a demo's lock still does.\n */\nexport function SessionsSetting<Id extends SessionId = SessionId>({\n  onSignOutEverywhere,\n  sessions,\n  loading,\n  onRevoke,\n  describeError,\n  formatLastActive,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  ...rest\n}: SessionsSettingProps<Id>) {\n  const labels = useKitLabels(\"sessions\", DEFAULT_SESSIONS_LABELS, labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [busyId, setBusyId] = useState<Id | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  const describe = (error: unknown, action: SessionsAction): ReactNode => {\n    const own = describeError?.(error, action);\n    return hasContent(own) ? own : labels.failed;\n  };\n\n  const lastActive = (value: DateInput): string | null => {\n    const date = toDate(value);\n    if (!date) return null;\n    return formatLastActive\n      ? formatLastActive(date)\n      : formatRelativeTime(date, { locale, absoluteAfterDays: 7, absoluteStyle: \"medium\" });\n  };\n\n  const signOutEverywhere = () => {\n    setFailure(null);\n    // Rejected again after it is said, so the tile stays armed for a retry.\n    return settle(onSignOutEverywhere).catch((error: unknown) => {\n      if (mounted.current) setFailure(describe(error, \"sign-out-everywhere\"));\n      throw error;\n    });\n  };\n\n  const revoke = (id: Id) => {\n    if (!onRevoke || busyId !== null) return;\n    setBusyId(id);\n    setFailure(null);\n    settle(() => onRevoke(id)).then(\n      () => {\n        if (mounted.current) setBusyId(null);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusyId(null);\n        setFailure(describe(error, \"revoke\"));\n      },\n    );\n  };\n\n  const showList = sessions !== undefined || loading;\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n      </div>\n      {showList &&\n        (loading || sessions === undefined ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : sessions.length === 0 ? (\n          <p className={CARD_DESCRIPTION_CLASS}>{labels.empty}</p>\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-subtle\">\n            {sessions.map((session) => {\n              const device = session.device?.trim() || labels.unknownDevice;\n              const when = lastActive(session.lastActiveAt);\n              const ip = session.ip?.trim();\n              return (\n                <li\n                  key={session.id}\n                  data-session-id={String(session.id)}\n                  data-current={session.current || undefined}\n                  className=\"flex items-center gap-3 py-2\"\n                >\n                  <MonitorSmartphone aria-hidden className=\"size-4 shrink-0 text-muted\" />\n                  <div className=\"min-w-0 flex-1\">\n                    <div className=\"flex flex-wrap items-center gap-x-2 gap-y-1\">\n                      <span className=\"min-w-0 break-words text-sm font-medium\">{device}</span>\n                      {session.current && (\n                        <Chip size=\"sm\" tone=\"brand\">\n                          {labels.current}\n                        </Chip>\n                      )}\n                    </div>\n                    {(when || ip) && (\n                      <div className={CARD_DESCRIPTION_CLASS}>\n                        {when && labels.lastActive(when)}\n                        {when && ip && \" · \"}\n                        {/* An address reads left to right in any page direction. */}\n                        {ip && <span dir=\"ltr\">{labels.ip(ip)}</span>}\n                      </div>\n                    )}\n                  </div>\n                  {onRevoke && !session.current && (\n                    <Button\n                      type=\"button\"\n                      size=\"sm\"\n                      variant=\"ghost\"\n                      commit={COMMIT_EXCEPT_BILLING}\n                      pending={busyId === session.id}\n                      disabled={busyId !== null && busyId !== session.id}\n                      aria-label={labels.revokeItem(device)}\n                      onClick={() => revoke(session.id)}\n                    >\n                      {labels.revoke}\n                    </Button>\n                  )}\n                </li>\n              );\n            })}\n          </ul>\n        ))}\n      <DangerConfirm\n        tone=\"warning\"\n        commit={COMMIT_EXCEPT_BILLING}\n        armLabel={labels.signOutEverywhere}\n        prompt={labels.signOutEverywherePrompt}\n        confirmLabel={labels.confirmSignOutEverywhere}\n        onConfirm={signOutEverywhere}\n      />\n      {hasContent(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AAuMM,SACE,KADF;AAvMN,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,SAAS,cAAc,oBAAwC;AAC/D,SAAS,UAAU;AACnB,SAAS,oBAAoB,cAAc;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AAyHjC,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAE3B,QAAM,WAAW,CAAC,OAAgB,WAAsC;AACtE,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,WAAO,WAAW,GAAG,IAAI,MAAM,OAAO;AAAA,EACxC;AAEA,QAAM,aAAa,CAAC,UAAoC;AACtD,UAAM,OAAO,OAAO,KAAK;AACzB,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,mBACH,iBAAiB,IAAI,IACrB,mBAAmB,MAAM,EAAE,QAAQ,mBAAmB,GAAG,eAAe,SAAS,CAAC;AAAA,EACxF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,eAAW,IAAI;AAEf,WAAO,OAAO,mBAAmB,EAAE,MAAM,CAAC,UAAmB;AAC3D,UAAI,QAAQ,QAAS,YAAW,SAAS,OAAO,qBAAqB,CAAC;AACtE,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,CAAC,OAAW;AACzB,QAAI,CAAC,YAAY,WAAW,KAAM;AAClC,cAAU,EAAE;AACZ,eAAW,IAAI;AACf,WAAO,MAAM,SAAS,EAAE,CAAC,EAAE;AAAA,MACzB,MAAM;AACJ,YAAI,QAAQ,QAAS,WAAU,IAAI;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,kBAAU,IAAI;AACd,mBAAW,SAAS,OAAO,QAAQ,CAAC;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,aAAa,UAAa;AAE3C,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAmB,iBAAO,OAAM;AAAA,MACjC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,OAC9D;AAAA,IACC,aACE,WAAW,aAAa,SACvB,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,SAAS,WAAW,IACtB,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,OAAM,IAEpD,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,0BACpC,mBAAS,IAAI,CAAC,YAAY;AACzB,YAAM,SAAS,QAAQ,QAAQ,KAAK,KAAK,OAAO;AAChD,YAAM,OAAO,WAAW,QAAQ,YAAY;AAC5C,YAAM,KAAK,QAAQ,IAAI,KAAK;AAC5B,aACE;AAAA,QAAC;AAAA;AAAA,UAEC,mBAAiB,OAAO,QAAQ,EAAE;AAAA,UAClC,gBAAc,QAAQ,WAAW;AAAA,UACjC,WAAU;AAAA,UAEV;AAAA,gCAAC,qBAAkB,eAAW,MAAC,WAAU,8BAA6B;AAAA,YACtE,qBAAC,SAAI,WAAU,kBACb;AAAA,mCAAC,SAAI,WAAU,+CACb;AAAA,oCAAC,UAAK,WAAU,2CAA2C,kBAAO;AAAA,gBACjE,QAAQ,WACP,oBAAC,QAAK,MAAK,MAAK,MAAK,SAClB,iBAAO,SACV;AAAA,iBAEJ;AAAA,eACE,QAAQ,OACR,qBAAC,SAAI,WAAW,wBACb;AAAA,wBAAQ,OAAO,WAAW,IAAI;AAAA,gBAC9B,QAAQ,MAAM;AAAA,gBAEd,MAAM,oBAAC,UAAK,KAAI,OAAO,iBAAO,GAAG,EAAE,GAAE;AAAA,iBACxC;AAAA,eAEJ;AAAA,YACC,YAAY,CAAC,QAAQ,WACpB;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,QAAQ;AAAA,gBACR,SAAS,WAAW,QAAQ;AAAA,gBAC5B,UAAU,WAAW,QAAQ,WAAW,QAAQ;AAAA,gBAChD,cAAY,OAAO,WAAW,MAAM;AAAA,gBACpC,SAAS,MAAM,OAAO,QAAQ,EAAE;AAAA,gBAE/B,iBAAO;AAAA;AAAA,YACV;AAAA;AAAA;AAAA,QApCG,QAAQ;AAAA,MAsCf;AAAA,IAEJ,CAAC,GACH;AAAA,IAEJ;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,QAAQ;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO;AAAA,QACrB,WAAW;AAAA;AAAA,IACb;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/sessions-setting.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\nimport { MonitorSmartphone } from \"lucide-react\";\n\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { formatRelativeTime, toDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport { hasContent } from \"../lib/presence\";\nimport { DangerConfirm } from \"../components/danger-confirm\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { DEFAULT_SESSIONS_LABELS } from \"./sessions-setting-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link SessionsSetting} renders — the `sessions` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n *  Cancel is `dangerConfirm.cancel`. */\nexport interface SessionsLabels {\n  /** The card's title. */\n  title: string;\n  /** The line under it: what \"sign out everywhere\" is for. */\n  description: string;\n  /** The button that asks first. */\n  signOutEverywhere: string;\n  /** The question it asks: every session ends, this one too. */\n  signOutEverywherePrompt: string;\n  /** The button that answers it. */\n  confirmSignOutEverywhere: string;\n  /** The device list's accessible name. */\n  list: string;\n  /** While the list loads. */\n  loading: string;\n  /** A list with no rows. */\n  empty: string;\n  /** The chip on the session this page runs in. */\n  current: string;\n  /** A session whose device the server could not name. */\n  unknownDevice: string;\n  /** Given the last activity, formatted (\"3 hours ago\", \"5 Oct 2026\"). */\n  lastActive: (when: string) => string;\n  /** Given the address the session was last seen from. */\n  ip: (address: string) => string;\n  /** A row's button, visible text. */\n  revoke: string;\n  /** The same button's accessible name, given the device — it starts with `revoke`,\n   *  the visible text, so voice control finds it by what it says. */\n  revokeItem: (device: string) => string;\n  /** A request failed. */\n  failed: string;\n}\n\n// Defined in ./sessions-setting-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_SESSIONS_LABELS };\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What a session's `id` may be: the app's own key type. */\nexport type SessionId = string | number;\n\n/** One stored session (kastlan's `GET /auth/sessions`). */\nexport interface SessionItem<Id extends SessionId = SessionId> {\n  id: Id;\n  /** The browser and system, as the server reads them (\"Firefox on Windows\"). Blank\n   *  reads as `labels.unknownDevice`. */\n  device?: string | null;\n  /** The address it was last seen from. */\n  ip?: string | null;\n  /** A `Date`, an ISO string or epoch ms. */\n  lastActiveAt?: DateInput;\n  /** The session this page runs in: marked, and offered no \"Sign out\" of its own — the\n   *  app's sign-out does that, and \"Sign out everywhere\" below. */\n  current?: boolean;\n}\n\n/** Which request failed — {@link SessionsSettingProps.describeError}'s second argument. */\nexport type SessionsAction = \"sign-out-everywhere\" | \"revoke\";\n\nexport interface SessionsSettingProps<Id extends SessionId = SessionId> extends Omit<\n  ComponentPropsWithRef<\"div\">,\n  \"children\"\n> {\n  /**\n   * End every session (`POST /auth/logout`, auth §6.3) — this one included. Asked\n   * first; resolve once the server answered, then sign this page out: the card says\n   * that the device signs out too, and its own session is gone.\n   */\n  onSignOutEverywhere: () => Promise<unknown> | void;\n  /**\n   * The stored sessions, where the app keeps them (kastlan's `user_sessions`, §6.3).\n   * Left out, the card is \"Sign out everywhere\" alone — keksdose and Kurvenschmiede keep\n   * a cut-off (`sessions_invalid_before`), not rows. `undefined` with `loading` while the\n   * first load runs.\n   */\n  sessions?: readonly SessionItem<Id>[];\n  /** The list is loading. */\n  loading?: boolean;\n  /** End one other session (`DELETE /auth/sessions/{id}`). Left out, no row buttons.\n   *  The row is busy until it settles; refresh `sessions` then. */\n  onRevoke?: (id: Id) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;\n  /** The \"Last active\" text. Default: how long ago, in the provider's locale, and the\n   *  date once it is more than a week back. */\n  formatLastActive?: (date: Date) => string;\n  /** Overrides the provider's locale for the default format. */\n  locale?: string;\n  labels?: LabelOverride<SessionsLabels>;\n}\n\n/**\n * Where the account is signed in, and the way out of all of it\n * (docs/user-admin-harmonization.md §6.3, §2.6).\n *\n * **\"Sign out everywhere\", in every app.** It ends every session, THIS one included —\n * the server stamps a cut-off (`sessions_invalid_before`) that the page's own token is\n * older than — so the confirm says so before it is pressed, and the app signs out once it\n * resolves. A {@link DangerConfirm} in the warning tone: nothing is lost, but the person\n * has to sign in again on every device. keksdose kept its ordinary sign-out device-only\n * (its offline mirror is wiped on an explicit sign-out), which is why this is an action\n * of its own, not a mode of that one.\n *\n * **The device list, where sessions are stored** (kastlan): device, address, last\n * active, and \"This device\" on the current one, with \"Sign out\" on each other row — no\n * confirm, since a session ended is a sign-in away from coming back, not data lost.\n * Without `sessions` there is no list: the other apps keep a cut-off, not rows.\n *\n * Both requests are the app's; a failure is said under the card's action, in the app's\n * words if `describeError` has them.\n *\n * **Under a write lock** both are `commit` controls exempt from billing\n * (`COMMIT_EXCEPT_BILLING`, 0.33): a lapsed plan never keeps a person from ending their\n * own sessions (docs/billing-harmonization.md §12.13, §12.36); a demo's lock still does.\n */\nexport function SessionsSetting<Id extends SessionId = SessionId>({\n  onSignOutEverywhere,\n  sessions,\n  loading,\n  onRevoke,\n  describeError,\n  formatLastActive,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  ...rest\n}: SessionsSettingProps<Id>) {\n  const labels = useKitLabels(\"sessions\", DEFAULT_SESSIONS_LABELS, labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [busyId, setBusyId] = useState<Id | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  const describe = (error: unknown, action: SessionsAction): ReactNode => {\n    const own = describeError?.(error, action);\n    return hasContent(own) ? own : labels.failed;\n  };\n\n  const lastActive = (value: DateInput): string | null => {\n    const date = toDate(value);\n    if (!date) return null;\n    return formatLastActive\n      ? formatLastActive(date)\n      : formatRelativeTime(date, { locale, absoluteAfterDays: 7, absoluteStyle: \"medium\" });\n  };\n\n  const signOutEverywhere = () => {\n    setFailure(null);\n    // Rejected again after it is said, so the tile stays armed for a retry.\n    return settle(onSignOutEverywhere).catch((error: unknown) => {\n      if (mounted.current) setFailure(describe(error, \"sign-out-everywhere\"));\n      throw error;\n    });\n  };\n\n  const revoke = (id: Id) => {\n    if (!onRevoke || busyId !== null) return;\n    setBusyId(id);\n    setFailure(null);\n    settle(() => onRevoke(id)).then(\n      () => {\n        if (mounted.current) setBusyId(null);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusyId(null);\n        setFailure(describe(error, \"revoke\"));\n      },\n    );\n  };\n\n  const showList = sessions !== undefined || loading;\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n      </div>\n      {showList &&\n        (loading || sessions === undefined ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : sessions.length === 0 ? (\n          <p className={CARD_DESCRIPTION_CLASS}>{labels.empty}</p>\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-subtle\">\n            {sessions.map((session) => {\n              const device = session.device?.trim() || labels.unknownDevice;\n              const when = lastActive(session.lastActiveAt);\n              const ip = session.ip?.trim();\n              return (\n                <li\n                  key={session.id}\n                  data-session-id={String(session.id)}\n                  data-current={session.current || undefined}\n                  className=\"flex items-center gap-3 py-2\"\n                >\n                  <MonitorSmartphone aria-hidden className=\"size-4 shrink-0 text-muted\" />\n                  <div className=\"min-w-0 flex-1\">\n                    <div className=\"flex flex-wrap items-center gap-x-2 gap-y-1\">\n                      <span className=\"min-w-0 break-words text-sm font-medium\">{device}</span>\n                      {session.current && (\n                        <Chip size=\"sm\" tone=\"brand\">\n                          {labels.current}\n                        </Chip>\n                      )}\n                    </div>\n                    {(when || ip) && (\n                      <div className={CARD_DESCRIPTION_CLASS}>\n                        {when && labels.lastActive(when)}\n                        {when && ip && \" · \"}\n                        {/* An address reads left to right in any page direction. */}\n                        {ip && <span dir=\"ltr\">{labels.ip(ip)}</span>}\n                      </div>\n                    )}\n                  </div>\n                  {onRevoke && !session.current && (\n                    <Button\n                      type=\"button\"\n                      size=\"sm\"\n                      variant=\"ghost\"\n                      commit={COMMIT_EXCEPT_BILLING}\n                      pending={busyId === session.id}\n                      disabled={busyId !== null && busyId !== session.id}\n                      aria-label={labels.revokeItem(device)}\n                      onClick={() => revoke(session.id)}\n                    >\n                      {labels.revoke}\n                    </Button>\n                  )}\n                </li>\n              );\n            })}\n          </ul>\n        ))}\n      <DangerConfirm\n        tone=\"warning\"\n        commit={COMMIT_EXCEPT_BILLING}\n        armLabel={labels.signOutEverywhere}\n        prompt={labels.signOutEverywherePrompt}\n        confirmLabel={labels.confirmSignOutEverywhere}\n        onConfirm={signOutEverywhere}\n      />\n      {hasContent(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AAyMM,SACE,KADF;AAzMN,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,SAAS,cAAc,oBAAwC;AAC/D,SAAS,UAAU;AACnB,SAAS,oBAAoB,cAAc;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AA2HjC,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAE3B,QAAM,WAAW,CAAC,OAAgB,WAAsC;AACtE,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,WAAO,WAAW,GAAG,IAAI,MAAM,OAAO;AAAA,EACxC;AAEA,QAAM,aAAa,CAAC,UAAoC;AACtD,UAAM,OAAO,OAAO,KAAK;AACzB,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,mBACH,iBAAiB,IAAI,IACrB,mBAAmB,MAAM,EAAE,QAAQ,mBAAmB,GAAG,eAAe,SAAS,CAAC;AAAA,EACxF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,eAAW,IAAI;AAEf,WAAO,OAAO,mBAAmB,EAAE,MAAM,CAAC,UAAmB;AAC3D,UAAI,QAAQ,QAAS,YAAW,SAAS,OAAO,qBAAqB,CAAC;AACtE,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,CAAC,OAAW;AACzB,QAAI,CAAC,YAAY,WAAW,KAAM;AAClC,cAAU,EAAE;AACZ,eAAW,IAAI;AACf,WAAO,MAAM,SAAS,EAAE,CAAC,EAAE;AAAA,MACzB,MAAM;AACJ,YAAI,QAAQ,QAAS,WAAU,IAAI;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,kBAAU,IAAI;AACd,mBAAW,SAAS,OAAO,QAAQ,CAAC;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,aAAa,UAAa;AAE3C,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAmB,iBAAO,OAAM;AAAA,MACjC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,OAC9D;AAAA,IACC,aACE,WAAW,aAAa,SACvB,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,SAAS,WAAW,IACtB,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,OAAM,IAEpD,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,0BACpC,mBAAS,IAAI,CAAC,YAAY;AACzB,YAAM,SAAS,QAAQ,QAAQ,KAAK,KAAK,OAAO;AAChD,YAAM,OAAO,WAAW,QAAQ,YAAY;AAC5C,YAAM,KAAK,QAAQ,IAAI,KAAK;AAC5B,aACE;AAAA,QAAC;AAAA;AAAA,UAEC,mBAAiB,OAAO,QAAQ,EAAE;AAAA,UAClC,gBAAc,QAAQ,WAAW;AAAA,UACjC,WAAU;AAAA,UAEV;AAAA,gCAAC,qBAAkB,eAAW,MAAC,WAAU,8BAA6B;AAAA,YACtE,qBAAC,SAAI,WAAU,kBACb;AAAA,mCAAC,SAAI,WAAU,+CACb;AAAA,oCAAC,UAAK,WAAU,2CAA2C,kBAAO;AAAA,gBACjE,QAAQ,WACP,oBAAC,QAAK,MAAK,MAAK,MAAK,SAClB,iBAAO,SACV;AAAA,iBAEJ;AAAA,eACE,QAAQ,OACR,qBAAC,SAAI,WAAW,wBACb;AAAA,wBAAQ,OAAO,WAAW,IAAI;AAAA,gBAC9B,QAAQ,MAAM;AAAA,gBAEd,MAAM,oBAAC,UAAK,KAAI,OAAO,iBAAO,GAAG,EAAE,GAAE;AAAA,iBACxC;AAAA,eAEJ;AAAA,YACC,YAAY,CAAC,QAAQ,WACpB;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,QAAQ;AAAA,gBACR,SAAS,WAAW,QAAQ;AAAA,gBAC5B,UAAU,WAAW,QAAQ,WAAW,QAAQ;AAAA,gBAChD,cAAY,OAAO,WAAW,MAAM;AAAA,gBACpC,SAAS,MAAM,OAAO,QAAQ,EAAE;AAAA,gBAE/B,iBAAO;AAAA;AAAA,YACV;AAAA;AAAA;AAAA,QApCG,QAAQ;AAAA,MAsCf;AAAA,IAEJ,CAAC,GACH;AAAA,IAEJ;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,QAAQ;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO;AAAA,QACrB,WAAW;AAAA;AAAA,IACb;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}

package/dist/admin/admin-action-confirm.js

@@ -181,9 +181,7 @@ function AdminActionConfirm({
   const guardReason = hasContent(confirmDisabledReason) ? confirmDisabledReason : !tickOk ? guardLabels.needsAcknowledge : !typedOk ? typeof guardLabels.needsPhrase === "function" ? guardLabels.needsPhrase(email) : guardLabels.needsPhrase : void 0;
   const submit = () => {
     if (busy || guardReason !== void 0) return;
-    perform(
-      () => onConfirm(askTyped ? { confirmEmail: typed.trim(), acknowledged: true } : { acknowledged: true })
-    );
+    perform(() => onConfirm(askTyped ? { confirmEmail: typed.trim(), acknowledged: true } : { acknowledged: true }));
   };
   const lines = Array.isArray(consequence) ? consequence.map(
     (item, index) => typeof item === "string" ? { key: item, text: item, severe: false } : { key: item.key ?? String(index), text: item.text, severe: Boolean(item.severe) }

package/dist/admin/admin-action-confirm.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/admin/admin-action-confirm.tsx"],"sourcesContent":["import { Children, useContext, useEffect, useId, useRef, useState } from \"react\";\nimport type { KeyboardEvent, ReactNode } from \"react\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Checkbox } from \"../components/checkbox\";\nimport { DEFAULT_DANGER_CONFIRM_LABELS, TypedConfirmField, typedMatches } from \"../components/danger-confirm\";\nimport type { DangerConsequence } from \"../components/danger-confirm\";\nimport { DialogFrame } from \"../components/dialog-frame\";\nimport { ModalCloseContext } from \"../components/modal\";\nimport { Button } from \"../components/button\";\nimport { authErrorCode } from \"../auth/auth-errors\";\nimport type { KitErrorCode } from \"../auth/auth-errors\";\nimport { usePersonLabel } from \"./admin-parts\";\nimport { hasContent } from \"../lib/presence\";\nimport type { AdminPerson, MaybePromise } from \"./admin-parts\";\nimport { isGroupTarget } from \"./admin-action-log\";\nimport type { AdminGroupTarget } from \"./admin-action-log\";\nimport type { CommitScope } from \"../components/write-lock\";\nimport { DEFAULT_ADMIN_ACTION_LABELS } from \"./admin-action-confirm-labels\";\n\n/**\n * The confirmation in front of an admin action, at the level the SERVER states\n * (docs/user-admin-harmonization.md §4.2):\n *\n * | level | what it asks | actions |\n * |---|---|---|\n * | `none` | nothing: it confirms at once and renders nothing | resend a mail, reactivate, the reviewer scope… |\n * | `acknowledge` | a tick under the consequence | force a password change, change a role, delete a group |\n * | `type_email` | the target's address, typed | deactivate, erase now, transfer |\n *\n * A GROUP (round 0.34, §11.8) is a target at `none` and `acknowledge` only, said by its\n * name: it has no address to type, and no level table gives a group's action\n * `type_email` (server-kit's `require_confirmation` raises for one). The props' types\n * say so. Deleting one (`group_delete`) is `acknowledge` — a tick under the app's own\n * sentence of what goes with it, Kurvenschmiede's \"3 members, 2 grants and 1 invitation\n * go with it\" (decision 5): the cascade is what nobody can see afterwards.\n *\n * keksdose decides the level per action and per account on the server\n * (`admin_user_actions_service`) and Kurvenschmiede asks for the typed address on its\n * two hard-to-undo actions; both drew the dialog by hand beside the kit's `DangerConfirm`\n * and `useConfirm`. The level is a PROP, never derived here: the server enforces it and\n * a hand-written request never sees this dialog, so a page that guessed its own level\n * could only disagree with the server. The comparison (caseless), the field and the tick\n * are `DangerConfirm`'s (`TypedConfirmField`, the `dangerConfirm` words), so the three\n * confirmations in the kit cannot disagree about what counts as the address.\n *\n * WHY TYPE THE TARGET'S ADDRESS and not the admin's password: the admin proved who they\n * are at the admin gate. What is unproven is which ROW they are on (keksdose's\n * `TYPE_EMAIL` rule, Kurvenschmiede's `TypedConfirm`).\n *\n * THE REFUSALS (§4.1, §9.6) are read by code — `authErrorCode`, which knows the account\n * codes beside the sign-in ones — and stay in the dialog, which stays open so the admin\n * can read them: `last_admin`, `self_action`, `confirmation_mismatch`, and kastlan's\n * `other_companies` — with \"Remove from company\" offered in its place when the app passes\n * `onRemoveFromCompany`. Anything else is `describeError`'s words, else \"That didn't work\".\n * At level `none` nothing is drawn while the action runs; a refusal opens a dialog of its\n * own to say it.\n *\n * It never sends a request: `onConfirm` does, with what the guards were answered with.\n */\n\n/** How much confirmation an action needs — the server's `confirmation_level(action)`. */\nexport type AdminConfirmLevel = \"none\" | \"acknowledge\" | \"type_email\";\n\n/** What {@link AdminActionConfirmProps.onConfirm} receives — the guards' answers, for\n *  the request body (the server re-checks both). */\nexport interface AdminActionConfirmValues {\n  /** `type_email`: the address as typed — trimmed, its case the admin's; the body's\n   *  `confirm_email`, which the server compares with the account's (server-kit's\n   *  `confirm_email_matches`). */\n  confirmEmail?: string;\n  /** `acknowledge` and `type_email`: the action was confirmed past a guard — the body's\n   *  `acknowledged`, which every admin action carries (server-kit 0.4). */\n  acknowledged?: true;\n}\n\n/** The account the action is about. A group is an {@link AdminGroupTarget}. */\nexport type AdminActionTarget = AdminPerson & { email: string };\n\n/** The `adminAction` namespace. The tick, the typed field and their held-button reasons\n *  are the `dangerConfirm` namespace's, shared with `DangerConfirm`. */\nexport interface AdminActionLabels {\n  /** The confirm button when the action names none. */\n  confirm: string;\n  cancel: string;\n  /** The refusal dialog's only button (level `none`). */\n  close: string;\n  /** `409 last_admin`. */\n  lastAdmin: string;\n  /** `409 self_action`: the admin's own account. */\n  self: string;\n  /** `confirmation_mismatch`: the typed address is not this account's — the page and\n   *  the server disagree about which row this is. */\n  confirmationMismatch: string;\n  /** kastlan's `409 other_companies` (§9.6). */\n  otherCompanies: string;\n  /** The alternative offered with it. */\n  removeFromCompany: string;\n  /** Any other failure, unless `describeError` says better. */\n  failed: string;\n}\n\n// Defined in ./admin-action-confirm-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_ADMIN_ACTION_LABELS };\n\n/** What the action is about, and the level the server states for it. A union, so a group\n *  can't be given `type_email` (§11.8). */\ntype AdminActionConfirmTarget =\n  | {\n      /** The level the server states for this action on this account (§4.2). */\n      level: AdminConfirmLevel;\n      /** Whom it is about: the address (typed at `type_email`) and the name parts. */\n      target: AdminActionTarget;\n    }\n  | {\n      /** A group's action: `none`, or `acknowledge` for `group_delete` (decision 5). */\n      level: Exclude<AdminConfirmLevel, \"type_email\">;\n      /** The group it is about, said by its name (0.34, §11.8). */\n      target: AdminGroupTarget;\n    };\n\n/** The props whatever the target. */\ninterface AdminActionConfirmCommonProps {\n  /** The confirm button — \"Deactivate\". Also the title when no `title` is given. */\n  confirmLabel?: ReactNode;\n  /** The dialog's heading — \"Deactivate Ada Example?\". Default `confirmLabel`. */\n  title?: ReactNode;\n  /**\n   * What the action does to THIS account, said before it happens: a sentence, or lines\n   * (`DangerConsequence`, a `severe` one in the danger colour). Derive them from the\n   * row's facts rather than reciting the worst case (keksdose dev#488).\n   */\n  consequence?: ReactNode | readonly (string | DangerConsequence)[];\n  /** The tick's words at `acknowledge`. Default `dangerConfirm.acknowledge` — \"I have\n   *  read what this does and want to continue.\" */\n  acknowledgeLabel?: ReactNode;\n  /** `danger` (default at `type_email`): a red confirm. `warning` (default at\n   *  `acknowledge`) and `neutral`: the primary confirm. */\n  tone?: \"danger\" | \"warning\" | \"neutral\";\n  /**\n   * Runs the action. Return a promise and the dialog manages itself: busy until it\n   * settles, closed (`onClose(true)`) when it resolves, open with the refusal when it\n   * rejects. Return nothing and the app owns the rest — `busy`, `error`, closing it.\n   */\n  onConfirm: (values: AdminActionConfirmValues) => MaybePromise;\n  /** The dialog has closed: `true` after the action (or the alternative) went through,\n   *  `false` for Cancel, Escape, the backdrop or Back. */\n  onClose: (done: boolean) => void;\n  /** kastlan: offered with an `other_companies` refusal — `DELETE …/membership`,\n   *  logged as `membership_remove` (§4.1). Promise handling as `onConfirm`. */\n  onRemoveFromCompany?: () => MaybePromise;\n  /** The app's words for a failure the kit has no code for. Asked first. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** A refusal the app caught itself, when `onConfirm` returns nothing. */\n  error?: unknown;\n  /** The action is running, for an app that tracks it itself. */\n  busy?: boolean;\n  /**\n   * Fields of the action's own, above the guard — the transfer's recipient, kastlan's\n   * roles (`RolesEditor`). Their values are the app's; hold the confirm with\n   * `confirmDisabledReason` until they are complete.\n   */\n  children?: ReactNode;\n  /** Why the confirm is held for a reason of the app's (\"Choose who receives it\").\n   *  Named before the guard's own, since the fields are above it. */\n  confirmDisabledReason?: ReactNode;\n  /** Kept-mounted mode, as on `DialogFrame`; left out, open while mounted. */\n  open?: boolean;\n  /** The confirm COMMITS: under a locked `WriteLockProvider` it is held with the lock's\n   *  reason. Off by default — an admin action is not a write to the open record. */\n  commit?: CommitScope;\n  labels?: LabelOverride<AdminActionLabels>;\n}\n\n/** A type since 0.34 (an interface before): a person at any level, or a group at `none`\n *  and `acknowledge`. */\nexport type AdminActionConfirmProps = AdminActionConfirmCommonProps & AdminActionConfirmTarget;\n\n/** Whether a callback answered a promise. */\nfunction isThenable(value: unknown): value is PromiseLike<unknown> {\n  return typeof value === \"object\" && value !== null && typeof (value as PromiseLike<unknown>).then === \"function\";\n}\n\n/** The refusal's words and code. */\nfunction refusalOf(\n  error: unknown,\n  present: boolean,\n  describeError: AdminActionConfirmProps[\"describeError\"],\n  labels: AdminActionLabels,\n): { text: ReactNode; code: KitErrorCode | undefined } | null {\n  if (!present) return null;\n  const code = authErrorCode(error);\n  const own = describeError?.(error);\n  if (hasContent(own)) return { text: own, code };\n  const text =\n    code === \"last_admin\"\n      ? labels.lastAdmin\n      : code === \"self_action\"\n        ? labels.self\n        : code === \"confirmation_mismatch\"\n          ? labels.confirmationMismatch\n          : code === \"other_companies\"\n            ? labels.otherCompanies\n            : labels.failed;\n  return { text, code };\n}\n\n/** The selector for the first field among the caller's `children` — what opening focuses. */\nconst FIELD = 'input:not([type=\"hidden\"]):not(:disabled), select:not(:disabled), textarea:not(:disabled), [role=\"combobox\"]';\n\nexport function AdminActionConfirm({\n  level,\n  target,\n  confirmLabel,\n  title,\n  consequence,\n  acknowledgeLabel,\n  tone: toneProp,\n  onConfirm,\n  onClose,\n  onRemoveFromCompany,\n  describeError,\n  error: errorProp,\n  busy: busyProp,\n  children,\n  confirmDisabledReason,\n  open,\n  commit,\n  labels: labelsProp,\n}: AdminActionConfirmProps) {\n  const labels = useKitLabels(\"adminAction\", DEFAULT_ADMIN_ACTION_LABELS, labelsProp);\n  const guardLabels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS);\n  const nameOf = usePersonLabel();\n  const isOpen = open ?? true;\n  const [typed, setTyped] = useState(\"\");\n  const [ticked, setTicked] = useState(false);\n  const [pending, setPending] = useState(false);\n  // The last rejection, boxed so a rejection with `undefined` still counts as one.\n  const [failure, setFailure] = useState<{ error: unknown } | null>(null);\n  // Resolved: the actions row lowers the panel, and `onClose` answers true.\n  const [done, setDone] = useState(false);\n  const confirmed = useRef(false);\n  const mounted = useRef(true);\n  const started = useRef(false);\n  const formId = useId();\n  const slotRef = useRef<HTMLDivElement>(null);\n  const guardRef = useRef<HTMLInputElement>(null);\n\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n\n  // A close (kept-mounted) wipes the guards and the refusal: a reopened dialog starts\n  // over. During render, like ReauthDialog's, so no frame shows the old answers.\n  const [wasOpen, setWasOpen] = useState(isOpen);\n  if (wasOpen !== isOpen) {\n    setWasOpen(isOpen);\n    if (!isOpen) {\n      setTyped(\"\");\n      setTicked(false);\n      setFailure(null);\n      setDone(false);\n    }\n  }\n\n  const busy = Boolean(busyProp) || pending;\n\n  /** Runs `call`, managing busy, the refusal and the close — or not, when it answers\n   *  no promise (the app owns it then). */\n  const perform = (call: () => MaybePromise) => {\n    let result: MaybePromise;\n    try {\n      result = call();\n    } catch (caught) {\n      setFailure({ error: caught });\n      return;\n    }\n    if (!isThenable(result)) return;\n    setFailure(null);\n    setPending(true);\n    result.then(\n      () => {\n        if (!mounted.current) return;\n        setPending(false);\n        confirmed.current = true;\n        setDone(true);\n      },\n      (caught: unknown) => {\n        if (!mounted.current) return;\n        setPending(false);\n        setFailure({ error: caught });\n      },\n    );\n  };\n\n  // Level `none`: confirmed the moment it opens, once per opening. Nothing is drawn\n  // while it runs; the promise's answer comes back asynchronously.\n  useEffect(() => {\n    if (level !== \"none\") return;\n    if (!isOpen) {\n      started.current = false;\n      return;\n    }\n    if (started.current) return;\n    started.current = true;\n    confirmed.current = false;\n    let result: unknown;\n    try {\n      result = onConfirm({});\n    } catch (caught) {\n      result = Promise.reject(caught);\n    }\n    // No promise: the app owns the rest (it closes the part, or passes `error`).\n    if (!isThenable(result)) return;\n    result.then(\n      () => {\n        if (mounted.current) onClose(true);\n      },\n      (caught: unknown) => {\n        if (mounted.current) setFailure({ error: caught });\n      },\n    );\n  }, [level, isOpen, onConfirm, onClose]);\n\n  // Focus the first thing the dialog waits for, after Modal's own effect has recorded\n  // the trigger to return to (a parent's effects run after its children's).\n  useEffect(() => {\n    if (!isOpen || level === \"none\") return;\n    const field = slotRef.current?.querySelector<HTMLElement>(FIELD) ?? guardRef.current;\n    field?.focus();\n  }, [isOpen, level]);\n\n  const hasRefusal = failure !== null || errorProp !== undefined;\n  const refusal = refusalOf(failure ? failure.error : errorProp, hasRefusal, describeError, labels);\n  const offerRemoval = refusal?.code === \"other_companies\" && onRemoveFromCompany !== undefined;\n\n  // A group has no address: it is said by its name, and nothing is typed for it — not\n  // even when a caller outside the types passes `type_email` (the server refuses that).\n  const group = isGroupTarget(target);\n  const email = group ? \"\" : target.email;\n  const name = group ? (target.name ?? \"\").trim() : nameOf(target);\n  const said = !name || name === email ? email : email ? `${name} · ${email}` : name;\n  const identity = <span data-private>{said}</span>;\n  const heading = title ?? confirmLabel ?? labels.confirm;\n\n  const refusalBanner = refusal && (\n    <AlertBanner\n      tone=\"danger\"\n      size=\"sm\"\n      action={\n        offerRemoval ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            variant=\"secondary\"\n            disabled={busy}\n            onClick={() => perform(() => onRemoveFromCompany!())}\n          >\n            {labels.removeFromCompany}\n          </Button>\n        ) : undefined\n      }\n    >\n      {refusal.text}\n    </AlertBanner>\n  );\n\n  if (level === \"none\") {\n    // Nothing to ask: only a refusal is worth a dialog.\n    if (!isOpen || !refusal) return null;\n    return (\n      <DialogFrame\n        role=\"alertdialog\"\n        title={heading}\n        description={identity}\n        onClose={() => onClose(confirmed.current)}\n        actions={(close) => (\n          <CloseOnDone done={done}>\n            <Button type=\"button\" variant=\"secondary\" disabled={busy} onClick={close}>\n              {labels.close}\n            </Button>\n          </CloseOnDone>\n        )}\n      >\n        {refusalBanner}\n      </DialogFrame>\n    );\n  }\n\n  const tone = toneProp ?? (level === \"type_email\" ? \"danger\" : \"warning\");\n  const askTyped = level === \"type_email\" && !group;\n  const typedOk = !askTyped || typedMatches(typed, email, \"caseless\");\n  const tickOk = askTyped || ticked;\n  const guardReason: ReactNode = hasContent(confirmDisabledReason)\n    ? confirmDisabledReason\n    : !tickOk\n      ? guardLabels.needsAcknowledge\n      : !typedOk\n        ? typeof guardLabels.needsPhrase === \"function\"\n          ? guardLabels.needsPhrase(email)\n          : guardLabels.needsPhrase\n        : undefined;\n\n  const submit = () => {\n    if (busy || guardReason !== undefined) return;\n    perform(() =>\n      onConfirm(askTyped ? { confirmEmail: typed.trim(), acknowledged: true } : { acknowledged: true }),\n    );\n  };\n\n  const lines = Array.isArray(consequence)\n    ? (consequence as readonly (string | DangerConsequence)[]).map((item, index) =>\n        typeof item === \"string\"\n          ? { key: item, text: item as ReactNode, severe: false }\n          : { key: item.key ?? String(index), text: item.text, severe: Boolean(item.severe) },\n      )\n    : null;\n\n  return (\n    <DialogFrame\n      open={open}\n      role=\"alertdialog\"\n      title={heading}\n      description={identity}\n      onClose={() => onClose(confirmed.current)}\n      // A request that has left cannot be called back by closing the dialog.\n      onKeyDown={(event: KeyboardEvent<HTMLDivElement>) => {\n        if (busy && event.key === \"Escape\") event.preventDefault();\n      }}\n      aria-busy={busy || undefined}\n      actions={(close) => (\n        <CloseOnDone done={done}>\n          <Button type=\"button\" variant=\"ghost\" disabled={busy} onClick={close}>\n            {labels.cancel}\n          </Button>\n          <Button\n            type=\"submit\"\n            form={formId}\n            variant={tone === \"danger\" ? \"danger\" : \"default\"}\n            pending={busy}\n            commit={commit}\n            disabledReason={busy ? undefined : guardReason}\n          >\n            {confirmLabel ?? labels.confirm}\n          </Button>\n        </CloseOnDone>\n      )}\n    >\n      <form\n        id={formId}\n        noValidate\n        className=\"space-y-3\"\n        onSubmit={(event) => {\n          event.preventDefault();\n          submit();\n        }}\n      >\n        {lines ? (\n          <ul className=\"list-disc space-y-1 ps-5 text-sm text-secondary\">\n            {lines.map((line) => (\n              <li key={line.key} className={line.severe ? \"text-danger\" : undefined}>\n                {line.text}\n              </li>\n            ))}\n          </ul>\n        ) : (\n          hasContent(consequence as ReactNode) && (\n            <p className=\"text-sm text-secondary\">{consequence as ReactNode}</p>\n          )\n        )}\n        {Children.toArray(children).some(hasContent) && (\n          <div ref={slotRef} className=\"space-y-3\">\n            {children}\n          </div>\n        )}\n        {askTyped ? (\n          <TypedConfirmField\n            ref={guardRef}\n            target={email}\n            match=\"caseless\"\n            value={typed}\n            onValueChange={setTyped}\n            busy={busy}\n            data-private\n          />\n        ) : (\n          <Checkbox\n            ref={guardRef}\n            label={acknowledgeLabel ?? guardLabels.acknowledge}\n            checked={ticked}\n            // Not `disabled` while busy: the box may hold the focus.\n            onCheckedChange={(next) => {\n              if (!busy) setTicked(next);\n            }}\n          />\n        )}\n        {refusalBanner}\n      </form>\n    </DialogFrame>\n  );\n}\n\n/**\n * The actions row's wrapper: it renders INSIDE the Modal, where the panel's animated\n * close is in context, so a resolved action lowers the panel the way Cancel does and\n * Modal then calls `onClose` (ReauthDialog's pattern).\n */\nfunction CloseOnDone({ done, children }: { done: boolean; children: ReactNode }) {\n  const close = useContext(ModalCloseContext);\n  useEffect(() => {\n    if (done) close?.();\n  }, [done, close]);\n  return <>{children}</>;\n}\n"],"mappings":";AAyVmB,SA0KV,UA1KU,KAyFX,YAzFW;AAzVnB,SAAS,UAAU,YAAY,WAAW,OAAO,QAAQ,gBAAgB;AAEzE,SAAS,oBAAwC;AACjD,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAS,+BAA+B,mBAAmB,oBAAoB;AAE/E,SAAS,mBAAmB;AAC5B,SAAS,yBAAyB;AAClC,SAAS,cAAc;AACvB,SAAS,qBAAqB;AAE9B,SAAS,sBAAsB;AAC/B,SAAS,kBAAkB;AAE3B,SAAS,qBAAqB;AAG9B,SAAS,mCAAmC;AAiK5C,SAAS,WAAW,OAA+C;AACjE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAQ,MAA+B,SAAS;AACxG;AAGA,SAAS,UACP,OACA,SACA,eACA,QAC4D;AAC5D,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,OAAO,cAAc,KAAK;AAChC,QAAM,MAAM,gBAAgB,KAAK;AACjC,MAAI,WAAW,GAAG,EAAG,QAAO,EAAE,MAAM,KAAK,KAAK;AAC9C,QAAM,OACJ,SAAS,eACL,OAAO,YACP,SAAS,gBACP,OAAO,OACP,SAAS,0BACP,OAAO,uBACP,SAAS,oBACP,OAAO,iBACP,OAAO;AACnB,SAAO,EAAE,MAAM,KAAK;AACtB;AAGA,MAAM,QAAQ;AAEP,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAA4B;AAC1B,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,cAAc,aAAa,iBAAiB,6BAA6B;AAC/E,QAAM,SAAS,eAAe;AAC9B,QAAM,SAAS,QAAQ;AACvB,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAE5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoC,IAAI;AAEtE,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,YAAY,OAAO,KAAK;AAC9B,QAAM,UAAU,OAAO,IAAI;AAC3B,QAAM,UAAU,OAAO,KAAK;AAC5B,QAAM,SAAS,MAAM;AACrB,QAAM,UAAU,OAAuB,IAAI;AAC3C,QAAM,WAAW,OAAyB,IAAI;AAE9C,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AAIL,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,MAAM;AAC7C,MAAI,YAAY,QAAQ;AACtB,eAAW,MAAM;AACjB,QAAI,CAAC,QAAQ;AACX,eAAS,EAAE;AACX,gBAAU,KAAK;AACf,iBAAW,IAAI;AACf,cAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,QAAQ,KAAK;AAIlC,QAAM,UAAU,CAAC,SAA6B;AAC5C,QAAI;AACJ,QAAI;AACF,eAAS,KAAK;AAAA,IAChB,SAAS,QAAQ;AACf,iBAAW,EAAE,OAAO,OAAO,CAAC;AAC5B;AAAA,IACF;AACA,QAAI,CAAC,WAAW,MAAM,EAAG;AACzB,eAAW,IAAI;AACf,eAAW,IAAI;AACf,WAAO;AAAA,MACL,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,mBAAW,KAAK;AAChB,kBAAU,UAAU;AACpB,gBAAQ,IAAI;AAAA,MACd;AAAA,MACA,CAAC,WAAoB;AACnB,YAAI,CAAC,QAAQ,QAAS;AACtB,mBAAW,KAAK;AAChB,mBAAW,EAAE,OAAO,OAAO,CAAC;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAIA,YAAU,MAAM;AACd,QAAI,UAAU,OAAQ;AACtB,QAAI,CAAC,QAAQ;AACX,cAAQ,UAAU;AAClB;AAAA,IACF;AACA,QAAI,QAAQ,QAAS;AACrB,YAAQ,UAAU;AAClB,cAAU,UAAU;AACpB,QAAI;AACJ,QAAI;AACF,eAAS,UAAU,CAAC,CAAC;AAAA,IACvB,SAAS,QAAQ;AACf,eAAS,QAAQ,OAAO,MAAM;AAAA,IAChC;AAEA,QAAI,CAAC,WAAW,MAAM,EAAG;AACzB,WAAO;AAAA,MACL,MAAM;AACJ,YAAI,QAAQ,QAAS,SAAQ,IAAI;AAAA,MACnC;AAAA,MACA,CAAC,WAAoB;AACnB,YAAI,QAAQ,QAAS,YAAW,EAAE,OAAO,OAAO,CAAC;AAAA,MACnD;AAAA,IACF;AAAA,EACF,GAAG,CAAC,OAAO,QAAQ,WAAW,OAAO,CAAC;AAItC,YAAU,MAAM;AACd,QAAI,CAAC,UAAU,UAAU,OAAQ;AACjC,UAAM,QAAQ,QAAQ,SAAS,cAA2B,KAAK,KAAK,SAAS;AAC7E,WAAO,MAAM;AAAA,EACf,GAAG,CAAC,QAAQ,KAAK,CAAC;AAElB,QAAM,aAAa,YAAY,QAAQ,cAAc;AACrD,QAAM,UAAU,UAAU,UAAU,QAAQ,QAAQ,WAAW,YAAY,eAAe,MAAM;AAChG,QAAM,eAAe,SAAS,SAAS,qBAAqB,wBAAwB;AAIpF,QAAM,QAAQ,cAAc,MAAM;AAClC,QAAM,QAAQ,QAAQ,KAAK,OAAO;AAClC,QAAM,OAAO,SAAS,OAAO,QAAQ,IAAI,KAAK,IAAI,OAAO,MAAM;AAC/D,QAAM,OAAO,CAAC,QAAQ,SAAS,QAAQ,QAAQ,QAAQ,GAAG,IAAI,SAAM,KAAK,KAAK;AAC9E,QAAM,WAAW,oBAAC,UAAK,gBAAY,MAAE,gBAAK;AAC1C,QAAM,UAAU,SAAS,gBAAgB,OAAO;AAEhD,QAAM,gBAAgB,WACpB;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,MAAK;AAAA,MACL,QACE,eACE;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAQ;AAAA,UACR,UAAU;AAAA,UACV,SAAS,MAAM,QAAQ,MAAM,oBAAqB,CAAC;AAAA,UAElD,iBAAO;AAAA;AAAA,MACV,IACE;AAAA,MAGL,kBAAQ;AAAA;AAAA,EACX;AAGF,MAAI,UAAU,QAAQ;AAEpB,QAAI,CAAC,UAAU,CAAC,QAAS,QAAO;AAChC,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,SAAS,MAAM,QAAQ,UAAU,OAAO;AAAA,QACxC,SAAS,CAAC,UACR,oBAAC,eAAY,MACX,8BAAC,UAAO,MAAK,UAAS,SAAQ,aAAY,UAAU,MAAM,SAAS,OAChE,iBAAO,OACV,GACF;AAAA,QAGD;AAAA;AAAA,IACH;AAAA,EAEJ;AAEA,QAAM,OAAO,aAAa,UAAU,eAAe,WAAW;AAC9D,QAAM,WAAW,UAAU,gBAAgB,CAAC;AAC5C,QAAM,UAAU,CAAC,YAAY,aAAa,OAAO,OAAO,UAAU;AAClE,QAAM,SAAS,YAAY;AAC3B,QAAM,cAAyB,WAAW,qBAAqB,IAC3D,wBACA,CAAC,SACC,YAAY,mBACZ,CAAC,UACC,OAAO,YAAY,gBAAgB,aACjC,YAAY,YAAY,KAAK,IAC7B,YAAY,cACd;AAER,QAAM,SAAS,MAAM;AACnB,QAAI,QAAQ,gBAAgB,OAAW;AACvC;AAAA,MAAQ,MACN,UAAU,WAAW,EAAE,cAAc,MAAM,KAAK,GAAG,cAAc,KAAK,IAAI,EAAE,cAAc,KAAK,CAAC;AAAA,IAClG;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,QAAQ,WAAW,IAClC,YAAwD;AAAA,IAAI,CAAC,MAAM,UAClE,OAAO,SAAS,WACZ,EAAE,KAAK,MAAM,MAAM,MAAmB,QAAQ,MAAM,IACpD,EAAE,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG,MAAM,KAAK,MAAM,QAAQ,QAAQ,KAAK,MAAM,EAAE;AAAA,EACtF,IACA;AAEJ,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA,MAAK;AAAA,MACL,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS,MAAM,QAAQ,UAAU,OAAO;AAAA,MAExC,WAAW,CAAC,UAAyC;AACnD,YAAI,QAAQ,MAAM,QAAQ,SAAU,OAAM,eAAe;AAAA,MAC3D;AAAA,MACA,aAAW,QAAQ;AAAA,MACnB,SAAS,CAAC,UACR,qBAAC,eAAY,MACX;AAAA,4BAAC,UAAO,MAAK,UAAS,SAAQ,SAAQ,UAAU,MAAM,SAAS,OAC5D,iBAAO,QACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,MAAM;AAAA,YACN,SAAS,SAAS,WAAW,WAAW;AAAA,YACxC,SAAS;AAAA,YACT;AAAA,YACA,gBAAgB,OAAO,SAAY;AAAA,YAElC,0BAAgB,OAAO;AAAA;AAAA,QAC1B;AAAA,SACF;AAAA,MAGF;AAAA,QAAC;AAAA;AAAA,UACC,IAAI;AAAA,UACJ,YAAU;AAAA,UACV,WAAU;AAAA,UACV,UAAU,CAAC,UAAU;AACnB,kBAAM,eAAe;AACrB,mBAAO;AAAA,UACT;AAAA,UAEC;AAAA,oBACC,oBAAC,QAAG,WAAU,mDACX,gBAAM,IAAI,CAAC,SACV,oBAAC,QAAkB,WAAW,KAAK,SAAS,gBAAgB,QACzD,eAAK,QADC,KAAK,GAEd,CACD,GACH,IAEA,WAAW,WAAwB,KACjC,oBAAC,OAAE,WAAU,0BAA0B,uBAAyB;AAAA,YAGnE,SAAS,QAAQ,QAAQ,EAAE,KAAK,UAAU,KACzC,oBAAC,SAAI,KAAK,SAAS,WAAU,aAC1B,UACH;AAAA,YAED,WACC;AAAA,cAAC;AAAA;AAAA,gBACC,KAAK;AAAA,gBACL,QAAQ;AAAA,gBACR,OAAM;AAAA,gBACN,OAAO;AAAA,gBACP,eAAe;AAAA,gBACf;AAAA,gBACA,gBAAY;AAAA;AAAA,YACd,IAEA;AAAA,cAAC;AAAA;AAAA,gBACC,KAAK;AAAA,gBACL,OAAO,oBAAoB,YAAY;AAAA,gBACvC,SAAS;AAAA,gBAET,iBAAiB,CAAC,SAAS;AACzB,sBAAI,CAAC,KAAM,WAAU,IAAI;AAAA,gBAC3B;AAAA;AAAA,YACF;AAAA,YAED;AAAA;AAAA;AAAA,MACH;AAAA;AAAA,EACF;AAEJ;AAOA,SAAS,YAAY,EAAE,MAAM,SAAS,GAA2C;AAC/E,QAAM,QAAQ,WAAW,iBAAiB;AAC1C,YAAU,MAAM;AACd,QAAI,KAAM,SAAQ;AAAA,EACpB,GAAG,CAAC,MAAM,KAAK,CAAC;AAChB,SAAO,gCAAG,UAAS;AACrB;","names":[]}
+{"version":3,"sources":["../../src/admin/admin-action-confirm.tsx"],"sourcesContent":["import { Children, useContext, useEffect, useId, useRef, useState } from \"react\";\nimport type { KeyboardEvent, ReactNode } from \"react\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Checkbox } from \"../components/checkbox\";\nimport { DEFAULT_DANGER_CONFIRM_LABELS, TypedConfirmField, typedMatches } from \"../components/danger-confirm\";\nimport type { DangerConsequence } from \"../components/danger-confirm\";\nimport { DialogFrame } from \"../components/dialog-frame\";\nimport { ModalCloseContext } from \"../components/modal\";\nimport { Button } from \"../components/button\";\nimport { authErrorCode } from \"../auth/auth-errors\";\nimport type { KitErrorCode } from \"../auth/auth-errors\";\nimport { usePersonLabel } from \"./admin-parts\";\nimport { hasContent } from \"../lib/presence\";\nimport type { AdminPerson, MaybePromise } from \"./admin-parts\";\nimport { isGroupTarget } from \"./admin-action-log\";\nimport type { AdminGroupTarget } from \"./admin-action-log\";\nimport type { CommitScope } from \"../components/write-lock\";\nimport { DEFAULT_ADMIN_ACTION_LABELS } from \"./admin-action-confirm-labels\";\n\n/**\n * The confirmation in front of an admin action, at the level the SERVER states\n * (docs/user-admin-harmonization.md §4.2):\n *\n * | level | what it asks | actions |\n * |---|---|---|\n * | `none` | nothing: it confirms at once and renders nothing | resend a mail, reactivate, the reviewer scope… |\n * | `acknowledge` | a tick under the consequence | force a password change, change a role, delete a group |\n * | `type_email` | the target's address, typed | deactivate, erase now, transfer |\n *\n * A GROUP (round 0.34, §11.8) is a target at `none` and `acknowledge` only, said by its\n * name: it has no address to type, and no level table gives a group's action\n * `type_email` (server-kit's `require_confirmation` raises for one). The props' types\n * say so. Deleting one (`group_delete`) is `acknowledge` — a tick under the app's own\n * sentence of what goes with it, Kurvenschmiede's \"3 members, 2 grants and 1 invitation\n * go with it\" (decision 5): the cascade is what nobody can see afterwards.\n *\n * keksdose decides the level per action and per account on the server\n * (`admin_user_actions_service`) and Kurvenschmiede asks for the typed address on its\n * two hard-to-undo actions; both drew the dialog by hand beside the kit's `DangerConfirm`\n * and `useConfirm`. The level is a PROP, never derived here: the server enforces it and\n * a hand-written request never sees this dialog, so a page that guessed its own level\n * could only disagree with the server. The comparison (caseless), the field and the tick\n * are `DangerConfirm`'s (`TypedConfirmField`, the `dangerConfirm` words), so the three\n * confirmations in the kit cannot disagree about what counts as the address.\n *\n * WHY TYPE THE TARGET'S ADDRESS and not the admin's password: the admin proved who they\n * are at the admin gate. What is unproven is which ROW they are on (keksdose's\n * `TYPE_EMAIL` rule, Kurvenschmiede's `TypedConfirm`).\n *\n * THE REFUSALS (§4.1, §9.6) are read by code — `authErrorCode`, which knows the account\n * codes beside the sign-in ones — and stay in the dialog, which stays open so the admin\n * can read them: `last_admin`, `self_action`, `confirmation_mismatch`, and kastlan's\n * `other_companies` — with \"Remove from company\" offered in its place when the app passes\n * `onRemoveFromCompany`. Anything else is `describeError`'s words, else \"That didn't work\".\n * At level `none` nothing is drawn while the action runs; a refusal opens a dialog of its\n * own to say it.\n *\n * It never sends a request: `onConfirm` does, with what the guards were answered with.\n */\n\n/** How much confirmation an action needs — the server's `confirmation_level(action)`. */\nexport type AdminConfirmLevel = \"none\" | \"acknowledge\" | \"type_email\";\n\n/** What {@link AdminActionConfirmProps.onConfirm} receives — the guards' answers, for\n *  the request body (the server re-checks both). */\nexport interface AdminActionConfirmValues {\n  /** `type_email`: the address as typed — trimmed, its case the admin's; the body's\n   *  `confirm_email`, which the server compares with the account's (server-kit's\n   *  `confirm_email_matches`). */\n  confirmEmail?: string;\n  /** `acknowledge` and `type_email`: the action was confirmed past a guard — the body's\n   *  `acknowledged`, which every admin action carries (server-kit 0.4). */\n  acknowledged?: true;\n}\n\n/** The account the action is about. A group is an {@link AdminGroupTarget}. */\nexport type AdminActionTarget = AdminPerson & { email: string };\n\n/** The `adminAction` namespace. The tick, the typed field and their held-button reasons\n *  are the `dangerConfirm` namespace's, shared with `DangerConfirm`. */\nexport interface AdminActionLabels {\n  /** The confirm button when the action names none. */\n  confirm: string;\n  cancel: string;\n  /** The refusal dialog's only button (level `none`). */\n  close: string;\n  /** `409 last_admin`. */\n  lastAdmin: string;\n  /** `409 self_action`: the admin's own account. */\n  self: string;\n  /** `confirmation_mismatch`: the typed address is not this account's — the page and\n   *  the server disagree about which row this is. */\n  confirmationMismatch: string;\n  /** kastlan's `409 other_companies` (§9.6). */\n  otherCompanies: string;\n  /** The alternative offered with it. */\n  removeFromCompany: string;\n  /** Any other failure, unless `describeError` says better. */\n  failed: string;\n}\n\n// Defined in ./admin-action-confirm-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_ADMIN_ACTION_LABELS };\n\n/** What the action is about, and the level the server states for it. A union, so a group\n *  can't be given `type_email` (§11.8). */\ntype AdminActionConfirmTarget =\n  | {\n      /** The level the server states for this action on this account (§4.2). */\n      level: AdminConfirmLevel;\n      /** Whom it is about: the address (typed at `type_email`) and the name parts. */\n      target: AdminActionTarget;\n    }\n  | {\n      /** A group's action: `none`, or `acknowledge` for `group_delete` (decision 5). */\n      level: Exclude<AdminConfirmLevel, \"type_email\">;\n      /** The group it is about, said by its name (0.34, §11.8). */\n      target: AdminGroupTarget;\n    };\n\n/** The props whatever the target. */\ninterface AdminActionConfirmCommonProps {\n  /** The confirm button — \"Deactivate\". Also the title when no `title` is given. */\n  confirmLabel?: ReactNode;\n  /** The dialog's heading — \"Deactivate Ada Example?\". Default `confirmLabel`. */\n  title?: ReactNode;\n  /**\n   * What the action does to THIS account, said before it happens: a sentence, or lines\n   * (`DangerConsequence`, a `severe` one in the danger colour). Derive them from the\n   * row's facts rather than reciting the worst case (keksdose dev#488).\n   */\n  consequence?: ReactNode | readonly (string | DangerConsequence)[];\n  /** The tick's words at `acknowledge`. Default `dangerConfirm.acknowledge` — \"I have\n   *  read what this does and want to continue.\" */\n  acknowledgeLabel?: ReactNode;\n  /** `danger` (default at `type_email`): a red confirm. `warning` (default at\n   *  `acknowledge`) and `neutral`: the primary confirm. */\n  tone?: \"danger\" | \"warning\" | \"neutral\";\n  /**\n   * Runs the action. Return a promise and the dialog manages itself: busy until it\n   * settles, closed (`onClose(true)`) when it resolves, open with the refusal when it\n   * rejects. Return nothing and the app owns the rest — `busy`, `error`, closing it.\n   */\n  onConfirm: (values: AdminActionConfirmValues) => MaybePromise;\n  /** The dialog has closed: `true` after the action (or the alternative) went through,\n   *  `false` for Cancel, Escape, the backdrop or Back. */\n  onClose: (done: boolean) => void;\n  /** kastlan: offered with an `other_companies` refusal — `DELETE …/membership`,\n   *  logged as `membership_remove` (§4.1). Promise handling as `onConfirm`. */\n  onRemoveFromCompany?: () => MaybePromise;\n  /** The app's words for a failure the kit has no code for. Asked first. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** A refusal the app caught itself, when `onConfirm` returns nothing. */\n  error?: unknown;\n  /** The action is running, for an app that tracks it itself. */\n  busy?: boolean;\n  /**\n   * Fields of the action's own, above the guard — the transfer's recipient, kastlan's\n   * roles (`RolesEditor`). Their values are the app's; hold the confirm with\n   * `confirmDisabledReason` until they are complete.\n   */\n  children?: ReactNode;\n  /** Why the confirm is held for a reason of the app's (\"Choose who receives it\").\n   *  Named before the guard's own, since the fields are above it. */\n  confirmDisabledReason?: ReactNode;\n  /** Kept-mounted mode, as on `DialogFrame`; left out, open while mounted. */\n  open?: boolean;\n  /** The confirm COMMITS: under a locked `WriteLockProvider` it is held with the lock's\n   *  reason. Off by default — an admin action is not a write to the open record. */\n  commit?: CommitScope;\n  labels?: LabelOverride<AdminActionLabels>;\n}\n\n/** A type since 0.34 (an interface before): a person at any level, or a group at `none`\n *  and `acknowledge`. */\nexport type AdminActionConfirmProps = AdminActionConfirmCommonProps & AdminActionConfirmTarget;\n\n/** Whether a callback answered a promise. */\nfunction isThenable(value: unknown): value is PromiseLike<unknown> {\n  return typeof value === \"object\" && value !== null && typeof (value as PromiseLike<unknown>).then === \"function\";\n}\n\n/** The refusal's words and code. */\nfunction refusalOf(\n  error: unknown,\n  present: boolean,\n  describeError: AdminActionConfirmProps[\"describeError\"],\n  labels: AdminActionLabels,\n): { text: ReactNode; code: KitErrorCode | undefined } | null {\n  if (!present) return null;\n  const code = authErrorCode(error);\n  const own = describeError?.(error);\n  if (hasContent(own)) return { text: own, code };\n  const text =\n    code === \"last_admin\"\n      ? labels.lastAdmin\n      : code === \"self_action\"\n        ? labels.self\n        : code === \"confirmation_mismatch\"\n          ? labels.confirmationMismatch\n          : code === \"other_companies\"\n            ? labels.otherCompanies\n            : labels.failed;\n  return { text, code };\n}\n\n/** The selector for the first field among the caller's `children` — what opening focuses. */\nconst FIELD =\n  'input:not([type=\"hidden\"]):not(:disabled), select:not(:disabled), textarea:not(:disabled), [role=\"combobox\"]';\n\nexport function AdminActionConfirm({\n  level,\n  target,\n  confirmLabel,\n  title,\n  consequence,\n  acknowledgeLabel,\n  tone: toneProp,\n  onConfirm,\n  onClose,\n  onRemoveFromCompany,\n  describeError,\n  error: errorProp,\n  busy: busyProp,\n  children,\n  confirmDisabledReason,\n  open,\n  commit,\n  labels: labelsProp,\n}: AdminActionConfirmProps) {\n  const labels = useKitLabels(\"adminAction\", DEFAULT_ADMIN_ACTION_LABELS, labelsProp);\n  const guardLabels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS);\n  const nameOf = usePersonLabel();\n  const isOpen = open ?? true;\n  const [typed, setTyped] = useState(\"\");\n  const [ticked, setTicked] = useState(false);\n  const [pending, setPending] = useState(false);\n  // The last rejection, boxed so a rejection with `undefined` still counts as one.\n  const [failure, setFailure] = useState<{ error: unknown } | null>(null);\n  // Resolved: the actions row lowers the panel, and `onClose` answers true.\n  const [done, setDone] = useState(false);\n  const confirmed = useRef(false);\n  const mounted = useRef(true);\n  const started = useRef(false);\n  const formId = useId();\n  const slotRef = useRef<HTMLDivElement>(null);\n  const guardRef = useRef<HTMLInputElement>(null);\n\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n\n  // A close (kept-mounted) wipes the guards and the refusal: a reopened dialog starts\n  // over. During render, like ReauthDialog's, so no frame shows the old answers.\n  const [wasOpen, setWasOpen] = useState(isOpen);\n  if (wasOpen !== isOpen) {\n    setWasOpen(isOpen);\n    if (!isOpen) {\n      setTyped(\"\");\n      setTicked(false);\n      setFailure(null);\n      setDone(false);\n    }\n  }\n\n  const busy = Boolean(busyProp) || pending;\n\n  /** Runs `call`, managing busy, the refusal and the close — or not, when it answers\n   *  no promise (the app owns it then). */\n  const perform = (call: () => MaybePromise) => {\n    let result: MaybePromise;\n    try {\n      result = call();\n    } catch (caught) {\n      setFailure({ error: caught });\n      return;\n    }\n    if (!isThenable(result)) return;\n    setFailure(null);\n    setPending(true);\n    result.then(\n      () => {\n        if (!mounted.current) return;\n        setPending(false);\n        confirmed.current = true;\n        setDone(true);\n      },\n      (caught: unknown) => {\n        if (!mounted.current) return;\n        setPending(false);\n        setFailure({ error: caught });\n      },\n    );\n  };\n\n  // Level `none`: confirmed the moment it opens, once per opening. Nothing is drawn\n  // while it runs; the promise's answer comes back asynchronously.\n  useEffect(() => {\n    if (level !== \"none\") return;\n    if (!isOpen) {\n      started.current = false;\n      return;\n    }\n    if (started.current) return;\n    started.current = true;\n    confirmed.current = false;\n    let result: unknown;\n    try {\n      result = onConfirm({});\n    } catch (caught) {\n      result = Promise.reject(caught);\n    }\n    // No promise: the app owns the rest (it closes the part, or passes `error`).\n    if (!isThenable(result)) return;\n    result.then(\n      () => {\n        if (mounted.current) onClose(true);\n      },\n      (caught: unknown) => {\n        if (mounted.current) setFailure({ error: caught });\n      },\n    );\n  }, [level, isOpen, onConfirm, onClose]);\n\n  // Focus the first thing the dialog waits for, after Modal's own effect has recorded\n  // the trigger to return to (a parent's effects run after its children's).\n  useEffect(() => {\n    if (!isOpen || level === \"none\") return;\n    const field = slotRef.current?.querySelector<HTMLElement>(FIELD) ?? guardRef.current;\n    field?.focus();\n  }, [isOpen, level]);\n\n  const hasRefusal = failure !== null || errorProp !== undefined;\n  const refusal = refusalOf(failure ? failure.error : errorProp, hasRefusal, describeError, labels);\n  const offerRemoval = refusal?.code === \"other_companies\" && onRemoveFromCompany !== undefined;\n\n  // A group has no address: it is said by its name, and nothing is typed for it — not\n  // even when a caller outside the types passes `type_email` (the server refuses that).\n  const group = isGroupTarget(target);\n  const email = group ? \"\" : target.email;\n  const name = group ? (target.name ?? \"\").trim() : nameOf(target);\n  const said = !name || name === email ? email : email ? `${name} · ${email}` : name;\n  const identity = <span data-private>{said}</span>;\n  const heading = title ?? confirmLabel ?? labels.confirm;\n\n  const refusalBanner = refusal && (\n    <AlertBanner\n      tone=\"danger\"\n      size=\"sm\"\n      action={\n        offerRemoval ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            variant=\"secondary\"\n            disabled={busy}\n            onClick={() => perform(() => onRemoveFromCompany!())}\n          >\n            {labels.removeFromCompany}\n          </Button>\n        ) : undefined\n      }\n    >\n      {refusal.text}\n    </AlertBanner>\n  );\n\n  if (level === \"none\") {\n    // Nothing to ask: only a refusal is worth a dialog.\n    if (!isOpen || !refusal) return null;\n    return (\n      <DialogFrame\n        role=\"alertdialog\"\n        title={heading}\n        description={identity}\n        onClose={() => onClose(confirmed.current)}\n        actions={(close) => (\n          <CloseOnDone done={done}>\n            <Button type=\"button\" variant=\"secondary\" disabled={busy} onClick={close}>\n              {labels.close}\n            </Button>\n          </CloseOnDone>\n        )}\n      >\n        {refusalBanner}\n      </DialogFrame>\n    );\n  }\n\n  const tone = toneProp ?? (level === \"type_email\" ? \"danger\" : \"warning\");\n  const askTyped = level === \"type_email\" && !group;\n  const typedOk = !askTyped || typedMatches(typed, email, \"caseless\");\n  const tickOk = askTyped || ticked;\n  const guardReason: ReactNode = hasContent(confirmDisabledReason)\n    ? confirmDisabledReason\n    : !tickOk\n      ? guardLabels.needsAcknowledge\n      : !typedOk\n        ? typeof guardLabels.needsPhrase === \"function\"\n          ? guardLabels.needsPhrase(email)\n          : guardLabels.needsPhrase\n        : undefined;\n\n  const submit = () => {\n    if (busy || guardReason !== undefined) return;\n    perform(() => onConfirm(askTyped ? { confirmEmail: typed.trim(), acknowledged: true } : { acknowledged: true }));\n  };\n\n  const lines = Array.isArray(consequence)\n    ? (consequence as readonly (string | DangerConsequence)[]).map((item, index) =>\n        typeof item === \"string\"\n          ? { key: item, text: item as ReactNode, severe: false }\n          : { key: item.key ?? String(index), text: item.text, severe: Boolean(item.severe) },\n      )\n    : null;\n\n  return (\n    <DialogFrame\n      open={open}\n      role=\"alertdialog\"\n      title={heading}\n      description={identity}\n      onClose={() => onClose(confirmed.current)}\n      // A request that has left cannot be called back by closing the dialog.\n      onKeyDown={(event: KeyboardEvent<HTMLDivElement>) => {\n        if (busy && event.key === \"Escape\") event.preventDefault();\n      }}\n      aria-busy={busy || undefined}\n      actions={(close) => (\n        <CloseOnDone done={done}>\n          <Button type=\"button\" variant=\"ghost\" disabled={busy} onClick={close}>\n            {labels.cancel}\n          </Button>\n          <Button\n            type=\"submit\"\n            form={formId}\n            variant={tone === \"danger\" ? \"danger\" : \"default\"}\n            pending={busy}\n            commit={commit}\n            disabledReason={busy ? undefined : guardReason}\n          >\n            {confirmLabel ?? labels.confirm}\n          </Button>\n        </CloseOnDone>\n      )}\n    >\n      <form\n        id={formId}\n        noValidate\n        className=\"space-y-3\"\n        onSubmit={(event) => {\n          event.preventDefault();\n          submit();\n        }}\n      >\n        {lines ? (\n          <ul className=\"list-disc space-y-1 ps-5 text-sm text-secondary\">\n            {lines.map((line) => (\n              <li key={line.key} className={line.severe ? \"text-danger\" : undefined}>\n                {line.text}\n              </li>\n            ))}\n          </ul>\n        ) : (\n          hasContent(consequence as ReactNode) && <p className=\"text-sm text-secondary\">{consequence as ReactNode}</p>\n        )}\n        {Children.toArray(children).some(hasContent) && (\n          <div ref={slotRef} className=\"space-y-3\">\n            {children}\n          </div>\n        )}\n        {askTyped ? (\n          <TypedConfirmField\n            ref={guardRef}\n            target={email}\n            match=\"caseless\"\n            value={typed}\n            onValueChange={setTyped}\n            busy={busy}\n            data-private\n          />\n        ) : (\n          <Checkbox\n            ref={guardRef}\n            label={acknowledgeLabel ?? guardLabels.acknowledge}\n            checked={ticked}\n            // Not `disabled` while busy: the box may hold the focus.\n            onCheckedChange={(next) => {\n              if (!busy) setTicked(next);\n            }}\n          />\n        )}\n        {refusalBanner}\n      </form>\n    </DialogFrame>\n  );\n}\n\n/**\n * The actions row's wrapper: it renders INSIDE the Modal, where the panel's animated\n * close is in context, so a resolved action lowers the panel the way Cancel does and\n * Modal then calls `onClose` (ReauthDialog's pattern).\n */\nfunction CloseOnDone({ done, children }: { done: boolean; children: ReactNode }) {\n  const close = useContext(ModalCloseContext);\n  useEffect(() => {\n    if (done) close?.();\n  }, [done, close]);\n  return <>{children}</>;\n}\n"],"mappings":";AA0VmB,SAsKV,UAtKU,KAuFX,YAvFW;AA1VnB,SAAS,UAAU,YAAY,WAAW,OAAO,QAAQ,gBAAgB;AAEzE,SAAS,oBAAwC;AACjD,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAS,+BAA+B,mBAAmB,oBAAoB;AAE/E,SAAS,mBAAmB;AAC5B,SAAS,yBAAyB;AAClC,SAAS,cAAc;AACvB,SAAS,qBAAqB;AAE9B,SAAS,sBAAsB;AAC/B,SAAS,kBAAkB;AAE3B,SAAS,qBAAqB;AAG9B,SAAS,mCAAmC;AAiK5C,SAAS,WAAW,OAA+C;AACjE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAQ,MAA+B,SAAS;AACxG;AAGA,SAAS,UACP,OACA,SACA,eACA,QAC4D;AAC5D,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,OAAO,cAAc,KAAK;AAChC,QAAM,MAAM,gBAAgB,KAAK;AACjC,MAAI,WAAW,GAAG,EAAG,QAAO,EAAE,MAAM,KAAK,KAAK;AAC9C,QAAM,OACJ,SAAS,eACL,OAAO,YACP,SAAS,gBACP,OAAO,OACP,SAAS,0BACP,OAAO,uBACP,SAAS,oBACP,OAAO,iBACP,OAAO;AACnB,SAAO,EAAE,MAAM,KAAK;AACtB;AAGA,MAAM,QACJ;AAEK,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAA4B;AAC1B,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,cAAc,aAAa,iBAAiB,6BAA6B;AAC/E,QAAM,SAAS,eAAe;AAC9B,QAAM,SAAS,QAAQ;AACvB,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAE5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoC,IAAI;AAEtE,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,YAAY,OAAO,KAAK;AAC9B,QAAM,UAAU,OAAO,IAAI;AAC3B,QAAM,UAAU,OAAO,KAAK;AAC5B,QAAM,SAAS,MAAM;AACrB,QAAM,UAAU,OAAuB,IAAI;AAC3C,QAAM,WAAW,OAAyB,IAAI;AAE9C,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AAIL,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,MAAM;AAC7C,MAAI,YAAY,QAAQ;AACtB,eAAW,MAAM;AACjB,QAAI,CAAC,QAAQ;AACX,eAAS,EAAE;AACX,gBAAU,KAAK;AACf,iBAAW,IAAI;AACf,cAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,QAAQ,KAAK;AAIlC,QAAM,UAAU,CAAC,SAA6B;AAC5C,QAAI;AACJ,QAAI;AACF,eAAS,KAAK;AAAA,IAChB,SAAS,QAAQ;AACf,iBAAW,EAAE,OAAO,OAAO,CAAC;AAC5B;AAAA,IACF;AACA,QAAI,CAAC,WAAW,MAAM,EAAG;AACzB,eAAW,IAAI;AACf,eAAW,IAAI;AACf,WAAO;AAAA,MACL,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,mBAAW,KAAK;AAChB,kBAAU,UAAU;AACpB,gBAAQ,IAAI;AAAA,MACd;AAAA,MACA,CAAC,WAAoB;AACnB,YAAI,CAAC,QAAQ,QAAS;AACtB,mBAAW,KAAK;AAChB,mBAAW,EAAE,OAAO,OAAO,CAAC;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAIA,YAAU,MAAM;AACd,QAAI,UAAU,OAAQ;AACtB,QAAI,CAAC,QAAQ;AACX,cAAQ,UAAU;AAClB;AAAA,IACF;AACA,QAAI,QAAQ,QAAS;AACrB,YAAQ,UAAU;AAClB,cAAU,UAAU;AACpB,QAAI;AACJ,QAAI;AACF,eAAS,UAAU,CAAC,CAAC;AAAA,IACvB,SAAS,QAAQ;AACf,eAAS,QAAQ,OAAO,MAAM;AAAA,IAChC;AAEA,QAAI,CAAC,WAAW,MAAM,EAAG;AACzB,WAAO;AAAA,MACL,MAAM;AACJ,YAAI,QAAQ,QAAS,SAAQ,IAAI;AAAA,MACnC;AAAA,MACA,CAAC,WAAoB;AACnB,YAAI,QAAQ,QAAS,YAAW,EAAE,OAAO,OAAO,CAAC;AAAA,MACnD;AAAA,IACF;AAAA,EACF,GAAG,CAAC,OAAO,QAAQ,WAAW,OAAO,CAAC;AAItC,YAAU,MAAM;AACd,QAAI,CAAC,UAAU,UAAU,OAAQ;AACjC,UAAM,QAAQ,QAAQ,SAAS,cAA2B,KAAK,KAAK,SAAS;AAC7E,WAAO,MAAM;AAAA,EACf,GAAG,CAAC,QAAQ,KAAK,CAAC;AAElB,QAAM,aAAa,YAAY,QAAQ,cAAc;AACrD,QAAM,UAAU,UAAU,UAAU,QAAQ,QAAQ,WAAW,YAAY,eAAe,MAAM;AAChG,QAAM,eAAe,SAAS,SAAS,qBAAqB,wBAAwB;AAIpF,QAAM,QAAQ,cAAc,MAAM;AAClC,QAAM,QAAQ,QAAQ,KAAK,OAAO;AAClC,QAAM,OAAO,SAAS,OAAO,QAAQ,IAAI,KAAK,IAAI,OAAO,MAAM;AAC/D,QAAM,OAAO,CAAC,QAAQ,SAAS,QAAQ,QAAQ,QAAQ,GAAG,IAAI,SAAM,KAAK,KAAK;AAC9E,QAAM,WAAW,oBAAC,UAAK,gBAAY,MAAE,gBAAK;AAC1C,QAAM,UAAU,SAAS,gBAAgB,OAAO;AAEhD,QAAM,gBAAgB,WACpB;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,MAAK;AAAA,MACL,QACE,eACE;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAQ;AAAA,UACR,UAAU;AAAA,UACV,SAAS,MAAM,QAAQ,MAAM,oBAAqB,CAAC;AAAA,UAElD,iBAAO;AAAA;AAAA,MACV,IACE;AAAA,MAGL,kBAAQ;AAAA;AAAA,EACX;AAGF,MAAI,UAAU,QAAQ;AAEpB,QAAI,CAAC,UAAU,CAAC,QAAS,QAAO;AAChC,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,SAAS,MAAM,QAAQ,UAAU,OAAO;AAAA,QACxC,SAAS,CAAC,UACR,oBAAC,eAAY,MACX,8BAAC,UAAO,MAAK,UAAS,SAAQ,aAAY,UAAU,MAAM,SAAS,OAChE,iBAAO,OACV,GACF;AAAA,QAGD;AAAA;AAAA,IACH;AAAA,EAEJ;AAEA,QAAM,OAAO,aAAa,UAAU,eAAe,WAAW;AAC9D,QAAM,WAAW,UAAU,gBAAgB,CAAC;AAC5C,QAAM,UAAU,CAAC,YAAY,aAAa,OAAO,OAAO,UAAU;AAClE,QAAM,SAAS,YAAY;AAC3B,QAAM,cAAyB,WAAW,qBAAqB,IAC3D,wBACA,CAAC,SACC,YAAY,mBACZ,CAAC,UACC,OAAO,YAAY,gBAAgB,aACjC,YAAY,YAAY,KAAK,IAC7B,YAAY,cACd;AAER,QAAM,SAAS,MAAM;AACnB,QAAI,QAAQ,gBAAgB,OAAW;AACvC,YAAQ,MAAM,UAAU,WAAW,EAAE,cAAc,MAAM,KAAK,GAAG,cAAc,KAAK,IAAI,EAAE,cAAc,KAAK,CAAC,CAAC;AAAA,EACjH;AAEA,QAAM,QAAQ,MAAM,QAAQ,WAAW,IAClC,YAAwD;AAAA,IAAI,CAAC,MAAM,UAClE,OAAO,SAAS,WACZ,EAAE,KAAK,MAAM,MAAM,MAAmB,QAAQ,MAAM,IACpD,EAAE,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG,MAAM,KAAK,MAAM,QAAQ,QAAQ,KAAK,MAAM,EAAE;AAAA,EACtF,IACA;AAEJ,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA,MAAK;AAAA,MACL,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS,MAAM,QAAQ,UAAU,OAAO;AAAA,MAExC,WAAW,CAAC,UAAyC;AACnD,YAAI,QAAQ,MAAM,QAAQ,SAAU,OAAM,eAAe;AAAA,MAC3D;AAAA,MACA,aAAW,QAAQ;AAAA,MACnB,SAAS,CAAC,UACR,qBAAC,eAAY,MACX;AAAA,4BAAC,UAAO,MAAK,UAAS,SAAQ,SAAQ,UAAU,MAAM,SAAS,OAC5D,iBAAO,QACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,MAAM;AAAA,YACN,SAAS,SAAS,WAAW,WAAW;AAAA,YACxC,SAAS;AAAA,YACT;AAAA,YACA,gBAAgB,OAAO,SAAY;AAAA,YAElC,0BAAgB,OAAO;AAAA;AAAA,QAC1B;AAAA,SACF;AAAA,MAGF;AAAA,QAAC;AAAA;AAAA,UACC,IAAI;AAAA,UACJ,YAAU;AAAA,UACV,WAAU;AAAA,UACV,UAAU,CAAC,UAAU;AACnB,kBAAM,eAAe;AACrB,mBAAO;AAAA,UACT;AAAA,UAEC;AAAA,oBACC,oBAAC,QAAG,WAAU,mDACX,gBAAM,IAAI,CAAC,SACV,oBAAC,QAAkB,WAAW,KAAK,SAAS,gBAAgB,QACzD,eAAK,QADC,KAAK,GAEd,CACD,GACH,IAEA,WAAW,WAAwB,KAAK,oBAAC,OAAE,WAAU,0BAA0B,uBAAyB;AAAA,YAEzG,SAAS,QAAQ,QAAQ,EAAE,KAAK,UAAU,KACzC,oBAAC,SAAI,KAAK,SAAS,WAAU,aAC1B,UACH;AAAA,YAED,WACC;AAAA,cAAC;AAAA;AAAA,gBACC,KAAK;AAAA,gBACL,QAAQ;AAAA,gBACR,OAAM;AAAA,gBACN,OAAO;AAAA,gBACP,eAAe;AAAA,gBACf;AAAA,gBACA,gBAAY;AAAA;AAAA,YACd,IAEA;AAAA,cAAC;AAAA;AAAA,gBACC,KAAK;AAAA,gBACL,OAAO,oBAAoB,YAAY;AAAA,gBACvC,SAAS;AAAA,gBAET,iBAAiB,CAAC,SAAS;AACzB,sBAAI,CAAC,KAAM,WAAU,IAAI;AAAA,gBAC3B;AAAA;AAAA,YACF;AAAA,YAED;AAAA;AAAA;AAAA,MACH;AAAA;AAAA,EACF;AAEJ;AAOA,SAAS,YAAY,EAAE,MAAM,SAAS,GAA2C;AAC/E,QAAM,QAAQ,WAAW,iBAAiB;AAC1C,YAAU,MAAM;AACd,QAAI,KAAM,SAAQ;AAAA,EACpB,GAAG,CAAC,MAAM,KAAK,CAAC;AAChB,SAAO,gCAAG,UAAS;AACrB;","names":[]}