@eifi1/ui-kit 0.51.7 → 0.53.0

package/dist/account/account-parts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/account-parts.ts"],"sourcesContent":["import { useEffect, useRef } from \"react\";\n\n/**\n * What the account's own settings parts share (docs/user-admin-harmonization.md §6):\n * the companies a refusal names, a mounted guard, and the card's type.\n *\n * @internal Not part of the barrel; the parts are.\n */\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** `companies` on a parsed body, or under FastAPI's nested `detail`: a list of names. */\nfunction companiesOfBody(body: unknown): string[] | undefined {\n  if (!isBag(body)) return undefined;\n  const pick = (value: unknown) =>\n    Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === \"string\")\n      ? (value as string[])\n      : undefined;\n  return pick(body.companies) ?? (isBag(body.detail) ? pick(body.detail.companies) : undefined);\n}\n\n/**\n * The companies a `last_admin` refusal names — kastlan checks the last admin per company\n * and answers `409 {detail, code: \"last_admin\", companies: [\"Example AG\"]}` (§6.4,\n * server-kit's `AccountError(…, extra={\"companies\": …})`). Read where `authErrorCode`\n * reads the code: axios' `response.data`, ofetch's `data`, a generated client's `body`,\n * a body thrown as it came. `undefined` when there is no such list.\n */\nexport function refusalCompanies(err: unknown): string[] | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? companiesOfBody(response.data) : undefined) ??\n    companiesOfBody(err.data) ??\n    companiesOfBody(err.body) ??\n    companiesOfBody(err)\n  );\n}\n\n/** Whether the component is still mounted — a late answer after the app navigated away\n *  (the deletion signs out) must not set state. */\nexport function useMounted(): { readonly current: boolean } {\n  const mounted = useRef(true);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n  return mounted;\n}\n\n/** Call `call` and hand back a promise, a throw included — a callback may return\n *  nothing (done at once), a promise, or throw before it returns one. */\nexport function settle(call: () => unknown): Promise<unknown> {\n  try {\n    return Promise.resolve(call());\n  } catch (error) {\n    return Promise.reject(error);\n  }\n}\n\n/** The settings cards' type scale, PasskeysSetting's: a small title and a muted line.\n *  Defined with the card look in settings/ since 0.34 (MOD-8, refactor audit 2026-10). */\nexport { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS } from \"../settings/settings-card-classes\";\n"],"mappings":";AAAA,SAAS,WAAW,cAAc;AAWlC,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,gBAAgB,MAAqC;AAC5D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,QAAM,OAAO,CAAC,UACZ,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ,IACrF,QACD;AACN,SAAO,KAAK,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,SAAS,IAAI;AACrF;AASO,SAAS,iBAAiB,KAAoC;AACnE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,gBAAgB,SAAS,IAAI,IAAI,WACpD,gBAAgB,IAAI,IAAI,KACxB,gBAAgB,IAAI,IAAI,KACxB,gBAAgB,GAAG;AAEvB;AAIO,SAAS,aAA4C;AAC1D,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AACL,SAAO;AACT;AAIO,SAAS,OAAO,MAAuC;AAC5D,MAAI;AACF,WAAO,QAAQ,QAAQ,KAAK,CAAC;AAAA,EAC/B,SAAS,OAAO;AACd,WAAO,QAAQ,OAAO,KAAK;AAAA,EAC7B;AACF;AAIA,SAAS,wBAAwB,wBAAwB;","names":[]}
+{"version":3,"sources":["../../src/account/account-parts.ts"],"sourcesContent":["/**\n * What the account's own settings parts share (docs/user-admin-harmonization.md §6):\n * the companies a refusal names and the card's type (the mounted guard re-exported).\n *\n * @internal Not part of the barrel; the parts are.\n */\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** `companies` on a parsed body, or under FastAPI's nested `detail`: a list of names. */\nfunction companiesOfBody(body: unknown): string[] | undefined {\n  if (!isBag(body)) return undefined;\n  const pick = (value: unknown) =>\n    Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === \"string\")\n      ? (value as string[])\n      : undefined;\n  return pick(body.companies) ?? (isBag(body.detail) ? pick(body.detail.companies) : undefined);\n}\n\n/**\n * The companies a `last_admin` refusal names — kastlan checks the last admin per company\n * and answers `409 {detail, code: \"last_admin\", companies: [\"Example AG\"]}` (§6.4,\n * server-kit's `AccountError(…, extra={\"companies\": …})`). Read where `authErrorCode`\n * reads the code: axios' `response.data`, ofetch's `data`, a generated client's `body`,\n * a body thrown as it came. `undefined` when there is no such list.\n */\nexport function refusalCompanies(err: unknown): string[] | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? companiesOfBody(response.data) : undefined) ??\n    companiesOfBody(err.data) ??\n    companiesOfBody(err.body) ??\n    companiesOfBody(err)\n  );\n}\n\n/** The mounted guard and the callback-to-promise bridge, in `hooks/use-mounted.ts` since\n *  0.52: seven notifications modules imported them from here (refactor audit\n *  2026-10-30, MOD-6). Re-exported for the account parts that still do. */\nexport { settle, useMounted } from \"../hooks/use-mounted\";\n\n/** The settings cards' type scale, PasskeysSetting's: a small title and a muted line.\n *  Defined with the card look in settings/ since 0.34 (MOD-8, refactor audit 2026-10). */\nexport { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS } from \"../settings/settings-card-classes\";\n"],"mappings":";AASA,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,gBAAgB,MAAqC;AAC5D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,QAAM,OAAO,CAAC,UACZ,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ,IACrF,QACD;AACN,SAAO,KAAK,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,SAAS,IAAI;AACrF;AASO,SAAS,iBAAiB,KAAoC;AACnE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,gBAAgB,SAAS,IAAI,IAAI,WACpD,gBAAgB,IAAI,IAAI,KACxB,gBAAgB,IAAI,IAAI,KACxB,gBAAgB,GAAG;AAEvB;AAKA,SAAS,QAAQ,kBAAkB;AAInC,SAAS,wBAAwB,wBAAwB;","names":[]}

package/dist/account/data-export-setting-labels.js

@@ -1,5 +1,5 @@
 "use client";
-import { englishWait } from "../auth/auth-errors.js";
+import { englishWait } from "../auth/auth-errors-labels.js";
 const DEFAULT_DATA_EXPORT_LABELS = {
   title: "Export your data",
   description: "Download a copy of your account\u2019s data as a JSON file.",

package/dist/account/data-export-setting-labels.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/data-export-setting-labels.ts"],"sourcesContent":["// The English words of ./data-export-setting, in a module with no component code: the\n// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`\n// loads as one chunk like the other languages (0.34, KS U8). ./data-export-setting\n// re-exports them.\n\nimport { englishWait } from \"../auth/auth-errors\";\nimport type { DataExportLabels } from \"./data-export-setting\";\n\nexport const DEFAULT_DATA_EXPORT_LABELS: DataExportLabels = {\n  title: \"Export your data\",\n  description: \"Download a copy of your account’s data as a JSON file.\",\n  download: \"Download my data\",\n  started: \"Your download has started.\",\n  saveAgain: \"Didn’t start? Save the file\",\n  rateLimited: (seconds) =>\n    seconds && seconds > 0\n      ? `You exported your data a moment ago. Try again in ${englishWait(seconds)}.`\n      : \"You exported your data a moment ago. Please try again in a minute.\",\n  failed: \"The export failed. Please try again.\",\n};\n"],"mappings":";AAKA,SAAS,mBAAmB;AAGrB,MAAM,6BAA+C;AAAA,EAC1D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,UAAU;AAAA,EACV,SAAS;AAAA,EACT,WAAW;AAAA,EACX,aAAa,CAAC,YACZ,WAAW,UAAU,IACjB,qDAAqD,YAAY,OAAO,CAAC,MACzE;AAAA,EACN,QAAQ;AACV;","names":[]}
+{"version":3,"sources":["../../src/account/data-export-setting-labels.ts"],"sourcesContent":["// The English words of ./data-export-setting, in a module with no component code: the\n// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`\n// loads as one chunk like the other languages (0.34, KS U8). ./data-export-setting\n// re-exports them.\n\nimport { englishWait } from \"../auth/auth-errors-labels\";\nimport type { DataExportLabels } from \"./data-export-setting\";\n\nexport const DEFAULT_DATA_EXPORT_LABELS: DataExportLabels = {\n  title: \"Export your data\",\n  description: \"Download a copy of your account’s data as a JSON file.\",\n  download: \"Download my data\",\n  started: \"Your download has started.\",\n  saveAgain: \"Didn’t start? Save the file\",\n  rateLimited: (seconds) =>\n    seconds && seconds > 0\n      ? `You exported your data a moment ago. Try again in ${englishWait(seconds)}.`\n      : \"You exported your data a moment ago. Please try again in a minute.\",\n  failed: \"The export failed. Please try again.\",\n};\n"],"mappings":";AAKA,SAAS,mBAAmB;AAGrB,MAAM,6BAA+C;AAAA,EAC1D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,UAAU;AAAA,EACV,SAAS;AAAA,EACT,WAAW;AAAA,EACX,aAAa,CAAC,YACZ,WAAW,UAAU,IACjB,qDAAqD,YAAY,OAAO,CAAC,MACzE;AAAA,EACN,QAAQ;AACV;","names":[]}

package/dist/account/delete-account-setting-labels.js

@@ -1,5 +1,5 @@
 "use client";
-import { englishRateLimited } from "../auth/auth-errors.js";
+import { englishRateLimited } from "../auth/auth-errors-labels.js";
 const DEFAULT_DELETE_ACCOUNT_LABELS = {
   title: "Delete account",
   afterDays: (days) => days === 1 ? "Your account is deactivated at once and erased for good 1 day later." : `Your account is deactivated at once and erased for good ${days} days later.`,

package/dist/account/delete-account-setting-labels.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/delete-account-setting-labels.ts"],"sourcesContent":["// The English words of ./delete-account-setting, in a module with no component code: the\n// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`\n// loads as one chunk like the other languages (0.34, KS U8). ./delete-account-setting\n// re-exports them.\n\nimport { englishRateLimited } from \"../auth/auth-errors\";\nimport type { DeleteAccountLabels } from \"./delete-account-setting\";\n\nexport const DEFAULT_DELETE_ACCOUNT_LABELS: DeleteAccountLabels = {\n  title: \"Delete account\",\n  afterDays: (days) =>\n    days === 1\n      ? \"Your account is deactivated at once and erased for good 1 day later.\"\n      : `Your account is deactivated at once and erased for good ${days} days later.`,\n  operator: \"Your account is deactivated at once, and an operator will erase it for good.\",\n  arm: \"Delete account…\",\n  prompt: \"You will be signed out on every device, and your account can no longer be used.\",\n  handOver: (count) =>\n    count === 1\n      ? \"1 item others can see will pass to an administrator.\"\n      : `${count} items others can see will pass to an administrator.`,\n  confirm: \"Delete my account\",\n  done: \"Your account is deactivated. You are being signed out.\",\n  wrongPassword: \"The password is incorrect.\",\n  confirmationMismatch: \"This is not your account’s address.\",\n  lastAdmin: \"You are the last administrator. Make someone else an administrator first.\",\n  lastAdminOf: (companies) =>\n    `You are the last administrator of ${companies}. Make someone else an administrator there first.`,\n  householdHasMembers:\n    \"Your household has other members, so the account can’t be deleted here. Please write to the operator.\",\n  rateLimited: englishRateLimited,\n  failed: \"Your account could not be deleted. Please try again.\",\n};\n"],"mappings":";AAKA,SAAS,0BAA0B;AAG5B,MAAM,gCAAqD;AAAA,EAChE,OAAO;AAAA,EACP,WAAW,CAAC,SACV,SAAS,IACL,yEACA,2DAA2D,IAAI;AAAA,EACrE,UAAU;AAAA,EACV,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,UAAU,CAAC,UACT,UAAU,IACN,yDACA,GAAG,KAAK;AAAA,EACd,SAAS;AAAA,EACT,MAAM;AAAA,EACN,eAAe;AAAA,EACf,sBAAsB;AAAA,EACtB,WAAW;AAAA,EACX,aAAa,CAAC,cACZ,qCAAqC,SAAS;AAAA,EAChD,qBACE;AAAA,EACF,aAAa;AAAA,EACb,QAAQ;AACV;","names":[]}
+{"version":3,"sources":["../../src/account/delete-account-setting-labels.ts"],"sourcesContent":["// The English words of ./delete-account-setting, in a module with no component code: the\n// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`\n// loads as one chunk like the other languages (0.34, KS U8). ./delete-account-setting\n// re-exports them.\n\nimport { englishRateLimited } from \"../auth/auth-errors-labels\";\nimport type { DeleteAccountLabels } from \"./delete-account-setting\";\n\nexport const DEFAULT_DELETE_ACCOUNT_LABELS: DeleteAccountLabels = {\n  title: \"Delete account\",\n  afterDays: (days) =>\n    days === 1\n      ? \"Your account is deactivated at once and erased for good 1 day later.\"\n      : `Your account is deactivated at once and erased for good ${days} days later.`,\n  operator: \"Your account is deactivated at once, and an operator will erase it for good.\",\n  arm: \"Delete account…\",\n  prompt: \"You will be signed out on every device, and your account can no longer be used.\",\n  handOver: (count) =>\n    count === 1\n      ? \"1 item others can see will pass to an administrator.\"\n      : `${count} items others can see will pass to an administrator.`,\n  confirm: \"Delete my account\",\n  done: \"Your account is deactivated. You are being signed out.\",\n  wrongPassword: \"The password is incorrect.\",\n  confirmationMismatch: \"This is not your account’s address.\",\n  lastAdmin: \"You are the last administrator. Make someone else an administrator first.\",\n  lastAdminOf: (companies) =>\n    `You are the last administrator of ${companies}. Make someone else an administrator there first.`,\n  householdHasMembers:\n    \"Your household has other members, so the account can’t be deleted here. Please write to the operator.\",\n  rateLimited: englishRateLimited,\n  failed: \"Your account could not be deleted. Please try again.\",\n};\n"],"mappings":";AAKA,SAAS,0BAA0B;AAG5B,MAAM,gCAAqD;AAAA,EAChE,OAAO;AAAA,EACP,WAAW,CAAC,SACV,SAAS,IACL,yEACA,2DAA2D,IAAI;AAAA,EACrE,UAAU;AAAA,EACV,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,UAAU,CAAC,UACT,UAAU,IACN,yDACA,GAAG,KAAK;AAAA,EACd,SAAS;AAAA,EACT,MAAM;AAAA,EACN,eAAe;AAAA,EACf,sBAAsB;AAAA,EACtB,WAAW;AAAA,EACX,aAAa,CAAC,cACZ,qCAAqC,SAAS;AAAA,EAChD,qBACE;AAAA,EACF,aAAa;AAAA,EACb,QAAQ;AACV;","names":[]}

package/dist/account/email-change-setting-labels.js

@@ -1,5 +1,5 @@
 "use client";
-import { englishRateLimited } from "../auth/auth-errors.js";
+import { englishRateLimited } from "../auth/auth-errors-labels.js";
 const DEFAULT_EMAIL_CHANGE_LABELS = {
   title: "Email address",
   current: "Current address",

package/dist/account/email-change-setting-labels.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/email-change-setting-labels.ts"],"sourcesContent":["// The English words of ./email-change-setting, in a module with no component code: the\n// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`\n// loads as one chunk like the other languages (0.34, KS U8). ./email-change-setting\n// re-exports them.\n\nimport { englishRateLimited } from \"../auth/auth-errors\";\nimport type { EmailChangeLabels } from \"./email-change-setting\";\n\nexport const DEFAULT_EMAIL_CHANGE_LABELS: EmailChangeLabels = {\n  title: \"Email address\",\n  current: \"Current address\",\n  newEmail: \"New email address\",\n  password: \"Current password\",\n  passwordHint: \"Your address is how you sign in, so changing it takes your password.\",\n  emailTagUse: (address) => `Use ${address}`,\n  emailTagHint:\n    \"Many providers deliver name+tag@… to the same inbox, so mail from this app is easy to filter and trace. Check yours does before you rely on it: you would sign in with the tagged address.\",\n  submit: \"Change email address\",\n  sameAsCurrent: \"This is already your address.\",\n  emailTaken: \"An account with this email address already exists.\",\n  wrongPassword: \"The password is incorrect.\",\n  pending: (newEmail) => `Confirm the link we sent to ${newEmail}.`,\n  pendingHint: (currentEmail) => `Until you do, you keep signing in with ${currentEmail}. Check your spam folder too.`,\n  resend: \"Send the link again\",\n  resent: \"We sent the link again.\",\n  cancel: \"Cancel the change\",\n  confirmed: (email) => `Your email address is now ${email}.`,\n  passkeyNote: \"Your passkeys keep working. Your device may still list them under your old address.\",\n  rateLimited: englishRateLimited,\n  failed: \"That didn’t work. Please try again.\",\n};\n"],"mappings":";AAKA,SAAS,0BAA0B;AAG5B,MAAM,8BAAiD;AAAA,EAC5D,OAAO;AAAA,EACP,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,cAAc;AAAA,EACd,aAAa,CAAC,YAAY,OAAO,OAAO;AAAA,EACxC,cACE;AAAA,EACF,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,SAAS,CAAC,aAAa,+BAA+B,QAAQ;AAAA,EAC9D,aAAa,CAAC,iBAAiB,0CAA0C,YAAY;AAAA,EACrF,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW,CAAC,UAAU,6BAA6B,KAAK;AAAA,EACxD,aAAa;AAAA,EACb,aAAa;AAAA,EACb,QAAQ;AACV;","names":[]}
+{"version":3,"sources":["../../src/account/email-change-setting-labels.ts"],"sourcesContent":["// The English words of ./email-change-setting, in a module with no component code: the\n// English catalogue (src/i18n/defaults.ts) imports them without the component, so `en`\n// loads as one chunk like the other languages (0.34, KS U8). ./email-change-setting\n// re-exports them.\n\nimport { englishRateLimited } from \"../auth/auth-errors-labels\";\nimport type { EmailChangeLabels } from \"./email-change-setting\";\n\nexport const DEFAULT_EMAIL_CHANGE_LABELS: EmailChangeLabels = {\n  title: \"Email address\",\n  current: \"Current address\",\n  newEmail: \"New email address\",\n  password: \"Current password\",\n  passwordHint: \"Your address is how you sign in, so changing it takes your password.\",\n  emailTagUse: (address) => `Use ${address}`,\n  emailTagHint:\n    \"Many providers deliver name+tag@… to the same inbox, so mail from this app is easy to filter and trace. Check yours does before you rely on it: you would sign in with the tagged address.\",\n  submit: \"Change email address\",\n  sameAsCurrent: \"This is already your address.\",\n  emailTaken: \"An account with this email address already exists.\",\n  wrongPassword: \"The password is incorrect.\",\n  pending: (newEmail) => `Confirm the link we sent to ${newEmail}.`,\n  pendingHint: (currentEmail) => `Until you do, you keep signing in with ${currentEmail}. Check your spam folder too.`,\n  resend: \"Send the link again\",\n  resent: \"We sent the link again.\",\n  cancel: \"Cancel the change\",\n  confirmed: (email) => `Your email address is now ${email}.`,\n  passkeyNote: \"Your passkeys keep working. Your device may still list them under your old address.\",\n  rateLimited: englishRateLimited,\n  failed: \"That didn’t work. Please try again.\",\n};\n"],"mappings":";AAKA,SAAS,0BAA0B;AAG5B,MAAM,8BAAiD;AAAA,EAC5D,OAAO;AAAA,EACP,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,cAAc;AAAA,EACd,aAAa,CAAC,YAAY,OAAO,OAAO;AAAA,EACxC,cACE;AAAA,EACF,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,SAAS,CAAC,aAAa,+BAA+B,QAAQ;AAAA,EAC9D,aAAa,CAAC,iBAAiB,0CAA0C,YAAY;AAAA,EACrF,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW,CAAC,UAAU,6BAA6B,KAAK;AAAA,EACxD,aAAa;AAAA,EACb,aAAa;AAAA,EACb,QAAQ;AACV;","names":[]}

package/dist/account/passkeys-setting.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import { type LabelOverride } from "../i18n/kit-labels.js";
+import type { LabelOverride } from "../i18n/kit-labels.js";
 import type { PasskeysSettingLabels } from "./account-settings-labels.js";
 /** What a passkey's `id` may be: the app's own key type, string or numeric. */
 export type PasskeyId = string | number;
@@ -76,7 +76,9 @@ export interface PasskeysSettingProps<Id extends PasskeyId = PasskeyId> extends
      * app knows which of those it detected.
      */
     unavailable?: ReactNode;
-    /** A date for the "Added …" / "Last used …" lines. Default: the locale's medium date. */
+    /** A date for the "Added …" / "Last used …" lines. Default: the provider's `formatDate`
+     *  (the app's date preference), else a medium date in the provider's locale and
+     *  `timeZone`. */
     formatDate?: (date: Date) => string;
     /** Overrides the provider's locale for the default date format. */
     locale?: string;
@@ -106,5 +108,10 @@ export interface PasskeysSettingProps<Id extends PasskeyId = PasskeyId> extends
  * must work in an app without a `ConfirmProvider`, and the question belongs next to
  * the passkey it names. Focus moves to Cancel, as in every destructive confirm in the
  * kit, so the Enter that pressed Delete cannot also answer it.
+ *
+ * **Under a write lock** (0.52) Add, Rename, Delete and the confirm are `commit` controls
+ * exempt from billing — a lapsed plan still lets the account manage how it signs in, the
+ * demo does not. Until 0.52 the passkeys' confirm was the one inline confirm without it,
+ * so the demo could delete, rename and add (refactor audit 2026-10-30, DUP-10).
  */
 export declare function PasskeysSetting<Id extends PasskeyId = PasskeyId>({ passkeys, loading, onAdd, beforeAdd, mode, adding, onRename, onDelete, busyId, nameField, unavailable, formatDate, locale: localeProp, labels: labelsProp, className, rowProps, ...rest }: PasskeysSettingProps<Id>): import("react").JSX.Element;

package/dist/account/passkeys-setting.js

@@ -1,14 +1,17 @@
 "use client";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-import { useEffect, useRef, useState } from "react";
+import { useEffect, useMemo, useRef, useState } from "react";
 import { KeyRound } from "lucide-react";
 import { cn } from "../lib/cn.js";
-import { useKitLocale } from "../i18n/kit-labels.js";
+import { useDayFormatter } from "../lib/day-format.js";
+import { toDate } from "../lib/format.js";
 import { Button } from "../components/button.js";
 import { Card } from "../components/card.js";
 import { EmptyState } from "../components/empty-state.js";
+import { InlineConfirm } from "../components/inline-confirm.js";
 import { Input } from "../components/input.js";
 import { Skeleton } from "../components/skeleton.js";
+import { COMMIT_EXCEPT_BILLING, useWriteLock } from "../components/write-lock.js";
 import { useAccountSettingsLabels } from "./account-settings-labels.js";
 import { SettingsCardTitle } from "../settings/settings-heading.js";
 function PasskeysSetting({
@@ -31,18 +34,23 @@ function PasskeysSetting({
   ...rest
 }) {
   const labels = useAccountSettingsLabels("passkeys", labelsProp);
-  const locale = useKitLocale(localeProp);
+  const own = useMemo(
+    () => formatDate && ((value) => {
+      const date2 = toDate(value);
+      return date2 ? formatDate(date2) : "";
+    }),
+    [formatDate]
+  );
+  const day = useDayFormatter(own, localeProp);
+  const lock = useWriteLock(COMMIT_EXCEPT_BILLING);
   const [name, setName] = useState("");
   const [checking, setChecking] = useState(false);
   const checkingRef = useRef(false);
   const date = (value) => {
-    if (value === null || value === void 0 || value === "") return null;
-    const d = value instanceof Date ? value : new Date(value);
-    if (Number.isNaN(d.getTime())) return null;
-    return formatDate ? formatDate(d) : new Intl.DateTimeFormat(locale, { dateStyle: "medium" }).format(d);
+    return toDate(value) ? day(value) : null;
   };
   const add = () => {
-    if (adding || checkingRef.current) return;
+    if (adding || checkingRef.current || lock.locked) return;
     const typed = name;
     const value = typed.trim();
     const send = () => Promise.resolve(onAdd(value)).then(() => setName((current) => current === typed ? "" : current));
@@ -84,6 +92,7 @@ function PasskeysSetting({
           lastUsed: date(item.lastUsedAt),
           attributes: rowProps?.(item),
           busy: busyId !== void 0 && busyId !== null && busyId === item.id,
+          locked: lock.locked,
           onRename,
           onDelete,
           labels
@@ -107,7 +116,7 @@ function PasskeysSetting({
             }
           }
         ),
-        /* @__PURE__ */ jsxs(Button, { onClick: add, disabled: busy, "aria-busy": busy || void 0, children: [
+        /* @__PURE__ */ jsxs(Button, { onClick: add, commit: COMMIT_EXCEPT_BILLING, disabled: busy, "aria-busy": busy || void 0, children: [
           /* @__PURE__ */ jsx(KeyRound, { className: "size-4", "aria-hidden": true }),
           adding ? labels.adding : labels.add
         ] })
@@ -131,6 +140,7 @@ function PasskeyRow({
   lastUsed,
   attributes,
   busy,
+  locked,
   onRename,
   onDelete,
   labels
@@ -138,14 +148,12 @@ function PasskeyRow({
   const [mode, setMode] = useState("view");
   const [draft, setDraft] = useState(item.name);
   const [returnTo, setReturnTo] = useState(null);
-  const cancelDeleteRef = useRef(null);
   const renameRef = useRef(null);
   const renameButtonRef = useRef(null);
   const deleteButtonRef = useRef(null);
   useEffect(() => {
-    if (mode === "delete") cancelDeleteRef.current?.focus();
-    else if (mode === "rename") renameRef.current?.select();
-    else if (returnTo) (returnTo === "rename" ? renameButtonRef : deleteButtonRef).current?.focus();
+    if (mode === "rename") renameRef.current?.select();
+    else if (mode === "view" && returnTo) (returnTo === "rename" ? renameButtonRef : deleteButtonRef).current?.focus();
   }, [mode, returnTo]);
   const open = (next) => {
     setReturnTo(next);
@@ -153,16 +161,9 @@ function PasskeyRow({
     setMode(next);
   };
   const leave = () => setMode("view");
-  const escapeLeaves = (e) => {
-    if (e.key === "Escape") {
-      e.preventDefault();
-      e.stopPropagation();
-      leave();
-    }
-  };
   const saveRename = () => {
     const next = draft.trim();
-    if (!onRename || !next || busy) return;
+    if (!onRename || !next || busy || locked) return;
     if (next === item.name) {
       leave();
       return;
@@ -200,18 +201,27 @@ function PasskeyRow({
           }
         }
       ),
-      /* @__PURE__ */ jsx(Button, { size: "sm", onClick: saveRename, disabled: busy || !draft.trim(), children: labels.save }),
+      /* @__PURE__ */ jsx(Button, { size: "sm", onClick: saveRename, commit: COMMIT_EXCEPT_BILLING, disabled: busy || !draft.trim(), children: labels.save }),
       /* @__PURE__ */ jsx(Button, { size: "sm", variant: "ghost", onClick: leave, children: labels.cancel })
     ] });
   }
   if (mode === "delete") {
-    return /* @__PURE__ */ jsxs("li", { ...li, className: "space-y-2 py-2", children: [
-      /* @__PURE__ */ jsx("p", { role: "alert", className: "text-sm", children: labels.deleteConfirm(item.name) }),
-      /* @__PURE__ */ jsxs("div", { className: "flex flex-wrap gap-2", children: [
-        /* @__PURE__ */ jsx(Button, { size: "sm", variant: "danger", onClick: confirmDelete, onKeyDown: escapeLeaves, disabled: busy, children: labels.confirmDelete }),
-        /* @__PURE__ */ jsx(Button, { ref: cancelDeleteRef, size: "sm", variant: "ghost", onClick: leave, onKeyDown: escapeLeaves, children: labels.cancel })
-      ] })
-    ] });
+    return /* @__PURE__ */ jsx(
+      InlineConfirm,
+      {
+        as: "li",
+        ...li,
+        className: "py-2",
+        prompt: labels.deleteConfirm(item.name),
+        confirmLabel: labels.confirmDelete,
+        cancelLabel: labels.cancel,
+        onConfirm: confirmDelete,
+        onLeave: leave,
+        busy,
+        commit: COMMIT_EXCEPT_BILLING,
+        returnFocusRef: deleteButtonRef
+      }
+    );
   }
   return /* @__PURE__ */ jsxs("li", { ...li, className: "flex items-center gap-3 py-2", children: [
     /* @__PURE__ */ jsx(KeyRound, { className: "size-4 shrink-0 text-muted", "aria-hidden": true }),
@@ -225,6 +235,7 @@ function PasskeyRow({
         ref: renameButtonRef,
         size: "sm",
         variant: "ghost",
+        commit: COMMIT_EXCEPT_BILLING,
         disabled: busy,
         onClick: () => open("rename"),
         "aria-label": labels.renameItem(item.name),
@@ -238,6 +249,7 @@ function PasskeyRow({
         size: "sm",
         variant: "ghost",
         tone: "danger",
+        commit: COMMIT_EXCEPT_BILLING,
         disabled: busy,
         onClick: () => open("delete"),
         "aria-label": labels.deleteItem(item.name),

package/dist/account/passkeys-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/passkeys-setting.tsx"],"sourcesContent":["import { useEffect, useRef, useState } from \"react\";\nimport type { KeyboardEvent, ReactNode } from \"react\";\nimport { KeyRound } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { Input } from \"../components/input\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { useAccountSettingsLabels } from \"./account-settings-labels\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport type { PasskeysSettingLabels } from \"./account-settings-labels\";\n\n/** What a passkey's `id` may be: the app's own key type, string or numeric. */\nexport type PasskeyId = string | number;\n\n/**\n * One registered passkey, as the app's API lists it.\n *\n * Generic in its `id` (0.16.0): `PasskeysSetting` infers `Id` from `passkeys`, so an\n * app whose ids are numbers gets numbers back in `onRename` / `onDelete` — keksdose\n * cast `id as number` in both. Left unparameterised it is the old `string | number`.\n */\nexport interface PasskeyItem<Id extends PasskeyId = PasskeyId> {\n  id: Id;\n  name: string;\n  /** A `Date`, an ISO string or epoch ms. */\n  createdAt?: Date | string | number | null;\n  /** Null (or left out) reads as \"Never used\". */\n  lastUsedAt?: Date | string | number | null;\n}\n\n/** `data-*` attributes, passed through to the element they are given for. */\nexport type PasskeyDataAttributes = { [key: `data-${string}`]: string | number | boolean | undefined };\n\nexport interface PasskeysSettingProps<Id extends PasskeyId = PasskeyId> extends PasskeyDataAttributes {\n  /** `undefined` while the first load is in flight (or pass `loading`). */\n  passkeys: readonly PasskeyItem<Id>[] | undefined;\n  loading?: boolean;\n  /**\n   * Run the WebAuthn ceremony and register the passkey — app-side, since the options\n   * and the attestation are the app's server's business. Called with the trimmed name\n   * field, which may be EMPTY: pick your own default (\"Passkey\", the device name).\n   * Return the promise and the field clears when it resolves; a rejection (including\n   * the user cancelling the OS prompt) keeps what was typed.\n   */\n  onAdd: (name: string) => void | Promise<unknown>;\n  /**\n   * A step the app runs BEFORE `onAdd` (0.18.0) — re-asking for the current password,\n   * a policy notice, anything that may stop the add. Called with the same trimmed name;\n   * resolve `true` to go on to `onAdd`, `false` to stop quietly (nothing is said, the\n   * typed name stays). A rejection, or a throw, stops the same way: the app reports\n   * its own errors. While it runs the add button is disabled and busy, so a second\n   * click cannot start a second check.\n   *\n   * Kurvenschmiede asked for the password in its own dialog by handing `onAdd` a\n   * promise it kept open across that dialog (passkeys-card.tsx) — which still works.\n   * This is the documented place for it: open the dialog here, resolve with whether it\n   * was confirmed, and keep what it produced (the server's registration options) for\n   * `onAdd` in a ref. The ceremony then starts from the dialog's click rather than the\n   * card's, which is the user activation `navigator.credentials.create` wants.\n   *\n   * Left out, `onAdd` is called synchronously in the click, exactly as before.\n   */\n  beforeAdd?: (name: string) => boolean | Promise<boolean>;\n  /**\n   * What a passkey does to the password, which picks the line under the title (0.18.0).\n   * `\"instead\"` (default): it replaces it — `labels.description`, kastlan's promise.\n   * `\"alongside\"`: the password stays and the passkey is a second way in —\n   * `labels.descriptionAlongside`. Kurvenschmiede overrode `description` for exactly\n   * this; an app that sets `mode` needs no override.\n   */\n  mode?: \"instead\" | \"alongside\";\n  /** The ceremony is running. The add button says so and does not start a second one. */\n  adding?: boolean;\n  /** Offer \"Rename\" on each row. Return a promise to leave edit mode only on success. */\n  onRename?: (id: Id, name: string) => void | Promise<unknown>;\n  /** Offer \"Delete\" on each row — always behind an inline confirmation. */\n  onDelete?: (id: Id) => void | Promise<unknown>;\n  /** A row whose rename or delete is in flight; its buttons are disabled. */\n  busyId?: Id | null;\n  /** Show the name field above the add button. Default true. */\n  nameField?: boolean;\n  /**\n   * Shown INSTEAD of the list and the add button — passkeys are not supported by this\n   * browser, or the page is not a secure context. Its wording is the app's: only the\n   * app knows which of those it detected.\n   */\n  unavailable?: ReactNode;\n  /** A date for the \"Added …\" / \"Last used …\" lines. Default: the locale's medium date. */\n  formatDate?: (date: Date) => string;\n  /** Overrides the provider's locale for the default date format. */\n  locale?: string;\n  /** Prop > `<UiKitProvider labels={{ accountSettings: { passkeys } }}>` > English. */\n  labels?: LabelOverride<PasskeysSettingLabels>;\n  className?: string;\n  /** On the card (0.16.0), for an in-page link (`#passkeys`) or a test hook. `data-*`\n   *  attributes go there too. */\n  id?: string;\n  /** Extra attributes for one row's `<li>` (0.16.0) — an `id` to scroll a just-added\n   *  key into view, `data-*` for a test. Every row also carries `data-passkey-id`. */\n  rowProps?: (item: PasskeyItem<Id>) => ({ id?: string } & PasskeyDataAttributes) | undefined;\n}\n\n/**\n * The passkeys section of an account page: what is registered, when it was last used,\n * rename and delete, and \"Add passkey\" — the fourth card beside `ProfileSetting`,\n * `PasswordSetting` and `TwoFactorSetting`, and built the same way (a self-contained\n * `<Card>` owning its transient form state; the app owns the data and the API).\n *\n * Lifted from kastlan's passkeys-card. **The WebAuthn ceremony stays app-side**:\n * `navigator.credentials.create` needs options minted by the app's server and hands\n * back an attestation only that server can verify, so the kit calls `onAdd` and waits.\n *\n * **Delete confirms inline**, in the row, rather than through `useConfirm`: this card\n * must work in an app without a `ConfirmProvider`, and the question belongs next to\n * the passkey it names. Focus moves to Cancel, as in every destructive confirm in the\n * kit, so the Enter that pressed Delete cannot also answer it.\n */\nexport function PasskeysSetting<Id extends PasskeyId = PasskeyId>({\n  passkeys,\n  loading,\n  onAdd,\n  beforeAdd,\n  mode = \"instead\",\n  adding = false,\n  onRename,\n  onDelete,\n  busyId,\n  nameField = true,\n  unavailable,\n  formatDate,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  rowProps,\n  ...rest\n}: PasskeysSettingProps<Id>) {\n  const labels = useAccountSettingsLabels(\"passkeys\", labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [name, setName] = useState(\"\");\n  // `beforeAdd` is running. State for the button, and a ref for the guard: two clicks\n  // in one frame both read the state from before either set it.\n  const [checking, setChecking] = useState(false);\n  const checkingRef = useRef(false);\n\n  const date = (value: PasskeyItem[\"createdAt\"]): string | null => {\n    if (value === null || value === undefined || value === \"\") return null;\n    const d = value instanceof Date ? value : new Date(value);\n    if (Number.isNaN(d.getTime())) return null;\n    return formatDate ? formatDate(d) : new Intl.DateTimeFormat(locale, { dateStyle: \"medium\" }).format(d);\n  };\n\n  const add = () => {\n    if (adding || checkingRef.current) return;\n    const typed = name;\n    const value = typed.trim();\n    const send = () =>\n      Promise.resolve(onAdd(value))\n        // Clear only what was sent: the field stays editable while the OS prompt is up.\n        .then(() => setName((current) => (current === typed ? \"\" : current)));\n    if (!beforeAdd) {\n      send().catch(() => {});\n      return;\n    }\n    const done = () => {\n      checkingRef.current = false;\n      setChecking(false);\n    };\n    checkingRef.current = true;\n    setChecking(true);\n    let gate: Promise<boolean>;\n    // Called in the click, not a microtask later, so a step that itself needs the\n    // user's activation (a popup, the clipboard) still has it; a throw is a \"no\".\n    try {\n      gate = Promise.resolve(beforeAdd(value));\n    } catch (error) {\n      gate = Promise.reject(error);\n    }\n    gate\n      .then((go) => {\n        done();\n        // Strictly `true`: an app whose step resolves `undefined` meant nothing.\n        if (go === true) return send();\n      })\n      .catch(done);\n  };\n  const busy = adding || checking;\n\n  const isLoading = loading || passkeys === undefined;\n  const items = passkeys ?? [];\n\n  const body = (() => {\n    if (unavailable != null && unavailable !== false) {\n      return <EmptyState variant=\"inline\" size=\"sm\" icon={<KeyRound />} title={unavailable} />;\n    }\n    return (\n      <>\n        {isLoading ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : items.length === 0 ? (\n          <EmptyState variant=\"inline\" size=\"sm\" icon={<KeyRound />} title={labels.empty} />\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-subtle\">\n            {items.map((item) => (\n              <PasskeyRow\n                key={item.id}\n                item={item}\n                created={date(item.createdAt)}\n                lastUsed={date(item.lastUsedAt)}\n                attributes={rowProps?.(item)}\n                busy={busyId !== undefined && busyId !== null && busyId === item.id}\n                onRename={onRename}\n                onDelete={onDelete}\n                labels={labels}\n              />\n            ))}\n          </ul>\n        )}\n        <div className=\"space-y-2 pt-1\">\n          {nameField && (\n            <Input\n              label={labels.nameLabel}\n              placeholder={labels.namePlaceholder}\n              value={name}\n              maxLength={120}\n              onChange={(e) => setName(e.target.value)}\n              onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n                if (e.key === \"Enter\") {\n                  e.preventDefault();\n                  add();\n                }\n              }}\n            />\n          )}\n          <Button onClick={add} disabled={busy} aria-busy={busy || undefined}>\n            <KeyRound className=\"size-4\" aria-hidden />\n            {adding ? labels.adding : labels.add}\n          </Button>\n        </div>\n      </>\n    );\n  })();\n\n  return (\n    // `rest` is only `id` and `data-*`: everything else the props name is destructured.\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className=\"text-xs text-muted\">\n          {mode === \"alongside\" ? labels.descriptionAlongside : labels.description}\n        </div>\n      </div>\n      {body}\n    </Card>\n  );\n}\n\ntype RowMode = \"view\" | \"rename\" | \"delete\";\n\nfunction PasskeyRow<Id extends PasskeyId>({\n  item,\n  created,\n  lastUsed,\n  attributes,\n  busy,\n  onRename,\n  onDelete,\n  labels,\n}: {\n  item: PasskeyItem<Id>;\n  created: string | null;\n  lastUsed: string | null;\n  attributes?: { id?: string } & PasskeyDataAttributes;\n  busy: boolean;\n  onRename?: PasskeysSettingProps<Id>[\"onRename\"];\n  onDelete?: PasskeysSettingProps<Id>[\"onDelete\"];\n  labels: PasskeysSettingLabels;\n}) {\n  const [mode, setMode] = useState<RowMode>(\"view\");\n  const [draft, setDraft] = useState(item.name);\n  // Which button opened the sub-mode, so leaving it puts focus back there — the\n  // confirm or the field unmounts under the focus, which otherwise falls to <body>.\n  const [returnTo, setReturnTo] = useState<\"rename\" | \"delete\" | null>(null);\n  const cancelDeleteRef = useRef<HTMLButtonElement>(null);\n  const renameRef = useRef<HTMLInputElement>(null);\n  const renameButtonRef = useRef<HTMLButtonElement>(null);\n  const deleteButtonRef = useRef<HTMLButtonElement>(null);\n\n  useEffect(() => {\n    if (mode === \"delete\") cancelDeleteRef.current?.focus();\n    else if (mode === \"rename\") renameRef.current?.select();\n    else if (returnTo) (returnTo === \"rename\" ? renameButtonRef : deleteButtonRef).current?.focus();\n  }, [mode, returnTo]);\n\n  const open = (next: \"rename\" | \"delete\") => {\n    setReturnTo(next);\n    setDraft(item.name);\n    setMode(next);\n  };\n  const leave = () => setMode(\"view\");\n  const escapeLeaves = (e: KeyboardEvent<HTMLButtonElement>) => {\n    if (e.key === \"Escape\") {\n      e.preventDefault();\n      e.stopPropagation();\n      leave();\n    }\n  };\n\n  const saveRename = () => {\n    const next = draft.trim();\n    if (!onRename || !next || busy) return;\n    if (next === item.name) {\n      leave();\n      return;\n    }\n    Promise.resolve(onRename(item.id, next))\n      .then(leave)\n      .catch(() => {});\n  };\n\n  const confirmDelete = () => {\n    if (!onDelete || busy) return;\n    // The row unmounts once the list refreshes; on a failure it stays, confirm open.\n    Promise.resolve(onDelete(item.id))\n      .then(() => setMode(\"view\"))\n      .catch(() => {});\n  };\n\n  // On every mode's <li>, so an id the app scrolls to survives a rename or a confirm.\n  const li = { ...attributes, \"data-passkey-id\": String(item.id) };\n\n  const meta = [created && labels.created(created), lastUsed ? labels.lastUsed(lastUsed) : labels.neverUsed]\n    .filter(Boolean)\n    .join(\" · \");\n\n  if (mode === \"rename\") {\n    return (\n      <li {...li} className=\"flex flex-wrap items-center gap-2 py-2\">\n        <Input\n          ref={renameRef}\n          aria-label={labels.renameField(item.name)}\n          className=\"min-w-0 flex-1\"\n          value={draft}\n          maxLength={120}\n          onChange={(e) => setDraft(e.target.value)}\n          onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n            if (e.key === \"Enter\") {\n              e.preventDefault();\n              saveRename();\n            } else if (e.key === \"Escape\") {\n              e.preventDefault();\n              e.stopPropagation();\n              leave();\n            }\n          }}\n        />\n        <Button size=\"sm\" onClick={saveRename} disabled={busy || !draft.trim()}>\n          {labels.save}\n        </Button>\n        <Button size=\"sm\" variant=\"ghost\" onClick={leave}>\n          {labels.cancel}\n        </Button>\n      </li>\n    );\n  }\n\n  if (mode === \"delete\") {\n    return (\n      <li {...li} className=\"space-y-2 py-2\">\n        <p role=\"alert\" className=\"text-sm\">\n          {labels.deleteConfirm(item.name)}\n        </p>\n        <div className=\"flex flex-wrap gap-2\">\n          <Button size=\"sm\" variant=\"danger\" onClick={confirmDelete} onKeyDown={escapeLeaves} disabled={busy}>\n            {labels.confirmDelete}\n          </Button>\n          <Button ref={cancelDeleteRef} size=\"sm\" variant=\"ghost\" onClick={leave} onKeyDown={escapeLeaves}>\n            {labels.cancel}\n          </Button>\n        </div>\n      </li>\n    );\n  }\n\n  return (\n    <li {...li} className=\"flex items-center gap-3 py-2\">\n      <KeyRound className=\"size-4 shrink-0 text-muted\" aria-hidden />\n      <div className=\"min-w-0 flex-1\">\n        {/* The passkey's own name, which its owner typed: cut at Normal, wrapped from\n            Large up (text size §10.17; round 0.34 T1: the sweep read \"MacBook To…\"). */}\n        <div className=\"truncate-until-large text-sm font-medium\">{item.name}</div>\n        <div className=\"text-xs text-muted\">{meta}</div>\n      </div>\n      {onRename && (\n        <Button\n          ref={renameButtonRef}\n          size=\"sm\"\n          variant=\"ghost\"\n          disabled={busy}\n          onClick={() => open(\"rename\")}\n          aria-label={labels.renameItem(item.name)}\n        >\n          {labels.rename}\n        </Button>\n      )}\n      {onDelete && (\n        <Button\n          ref={deleteButtonRef}\n          size=\"sm\"\n          variant=\"ghost\"\n          tone=\"danger\"\n          disabled={busy}\n          onClick={() => open(\"delete\")}\n          aria-label={labels.deleteItem(item.name)}\n        >\n          {labels.delete}\n        </Button>\n      )}\n    </li>\n  );\n}\n"],"mappings":";AAmM0D,SAGpD,UAHoD,KAyChD,YAzCgD;AAnM1D,SAAS,WAAW,QAAQ,gBAAgB;AAE5C,SAAS,gBAAgB;AACzB,SAAS,UAAU;AACnB,SAAS,oBAAwC;AACjD,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,aAAa;AACtB,SAAS,gBAAgB;AACzB,SAAS,gCAAgC;AACzC,SAAS,yBAAyB;AA6G3B,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,yBAAyB,YAAY,UAAU;AAC9D,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AAGnC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,QAAM,cAAc,OAAO,KAAK;AAEhC,QAAM,OAAO,CAAC,UAAmD;AAC/D,QAAI,UAAU,QAAQ,UAAU,UAAa,UAAU,GAAI,QAAO;AAClE,UAAM,IAAI,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AACxD,QAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO;AACtC,WAAO,aAAa,WAAW,CAAC,IAAI,IAAI,KAAK,eAAe,QAAQ,EAAE,WAAW,SAAS,CAAC,EAAE,OAAO,CAAC;AAAA,EACvG;AAEA,QAAM,MAAM,MAAM;AAChB,QAAI,UAAU,YAAY,QAAS;AACnC,UAAM,QAAQ;AACd,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,OAAO,MACX,QAAQ,QAAQ,MAAM,KAAK,CAAC,EAEzB,KAAK,MAAM,QAAQ,CAAC,YAAa,YAAY,QAAQ,KAAK,OAAQ,CAAC;AACxE,QAAI,CAAC,WAAW;AACd,WAAK,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACrB;AAAA,IACF;AACA,UAAM,OAAO,MAAM;AACjB,kBAAY,UAAU;AACtB,kBAAY,KAAK;AAAA,IACnB;AACA,gBAAY,UAAU;AACtB,gBAAY,IAAI;AAChB,QAAI;AAGJ,QAAI;AACF,aAAO,QAAQ,QAAQ,UAAU,KAAK,CAAC;AAAA,IACzC,SAAS,OAAO;AACd,aAAO,QAAQ,OAAO,KAAK;AAAA,IAC7B;AACA,SACG,KAAK,CAAC,OAAO;AACZ,WAAK;AAEL,UAAI,OAAO,KAAM,QAAO,KAAK;AAAA,IAC/B,CAAC,EACA,MAAM,IAAI;AAAA,EACf;AACA,QAAM,OAAO,UAAU;AAEvB,QAAM,YAAY,WAAW,aAAa;AAC1C,QAAM,QAAQ,YAAY,CAAC;AAE3B,QAAM,QAAQ,MAAM;AAClB,QAAI,eAAe,QAAQ,gBAAgB,OAAO;AAChD,aAAO,oBAAC,cAAW,SAAQ,UAAS,MAAK,MAAK,MAAM,oBAAC,YAAS,GAAI,OAAO,aAAa;AAAA,IACxF;AACA,WACE,iCACG;AAAA,kBACC,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,MAAM,WAAW,IACnB,oBAAC,cAAW,SAAQ,UAAS,MAAK,MAAK,MAAM,oBAAC,YAAS,GAAI,OAAO,OAAO,OAAO,IAEhF,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,0BACpC,gBAAM,IAAI,CAAC,SACV;AAAA,QAAC;AAAA;AAAA,UAEC;AAAA,UACA,SAAS,KAAK,KAAK,SAAS;AAAA,UAC5B,UAAU,KAAK,KAAK,UAAU;AAAA,UAC9B,YAAY,WAAW,IAAI;AAAA,UAC3B,MAAM,WAAW,UAAa,WAAW,QAAQ,WAAW,KAAK;AAAA,UACjE;AAAA,UACA;AAAA,UACA;AAAA;AAAA,QARK,KAAK;AAAA,MASZ,CACD,GACH;AAAA,MAEF,qBAAC,SAAI,WAAU,kBACZ;AAAA,qBACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,aAAa,OAAO;AAAA,YACpB,OAAO;AAAA,YACP,WAAW;AAAA,YACX,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK;AAAA,YACvC,WAAW,CAAC,MAAuC;AACjD,kBAAI,EAAE,QAAQ,SAAS;AACrB,kBAAE,eAAe;AACjB,oBAAI;AAAA,cACN;AAAA,YACF;AAAA;AAAA,QACF;AAAA,QAEF,qBAAC,UAAO,SAAS,KAAK,UAAU,MAAM,aAAW,QAAQ,QACvD;AAAA,8BAAC,YAAS,WAAU,UAAS,eAAW,MAAC;AAAA,UACxC,SAAS,OAAO,SAAS,OAAO;AAAA,WACnC;AAAA,SACF;AAAA,OACF;AAAA,EAEJ,GAAG;AAEH;AAAA;AAAA,IAEE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,2BAAC,SACC;AAAA,4BAAC,qBAAmB,iBAAO,OAAM;AAAA,QACjC,oBAAC,SAAI,WAAU,sBACZ,mBAAS,cAAc,OAAO,uBAAuB,OAAO,aAC/D;AAAA,SACF;AAAA,MACC;AAAA,OACH;AAAA;AAEJ;AAIA,SAAS,WAAiC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GASG;AACD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAkB,MAAM;AAChD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK,IAAI;AAG5C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAqC,IAAI;AACzE,QAAM,kBAAkB,OAA0B,IAAI;AACtD,QAAM,YAAY,OAAyB,IAAI;AAC/C,QAAM,kBAAkB,OAA0B,IAAI;AACtD,QAAM,kBAAkB,OAA0B,IAAI;AAEtD,YAAU,MAAM;AACd,QAAI,SAAS,SAAU,iBAAgB,SAAS,MAAM;AAAA,aAC7C,SAAS,SAAU,WAAU,SAAS,OAAO;AAAA,aAC7C,SAAU,EAAC,aAAa,WAAW,kBAAkB,iBAAiB,SAAS,MAAM;AAAA,EAChG,GAAG,CAAC,MAAM,QAAQ,CAAC;AAEnB,QAAM,OAAO,CAAC,SAA8B;AAC1C,gBAAY,IAAI;AAChB,aAAS,KAAK,IAAI;AAClB,YAAQ,IAAI;AAAA,EACd;AACA,QAAM,QAAQ,MAAM,QAAQ,MAAM;AAClC,QAAM,eAAe,CAAC,MAAwC;AAC5D,QAAI,EAAE,QAAQ,UAAU;AACtB,QAAE,eAAe;AACjB,QAAE,gBAAgB;AAClB,YAAM;AAAA,IACR;AAAA,EACF;AAEA,QAAM,aAAa,MAAM;AACvB,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,CAAC,YAAY,CAAC,QAAQ,KAAM;AAChC,QAAI,SAAS,KAAK,MAAM;AACtB,YAAM;AACN;AAAA,IACF;AACA,YAAQ,QAAQ,SAAS,KAAK,IAAI,IAAI,CAAC,EACpC,KAAK,KAAK,EACV,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AAEA,QAAM,gBAAgB,MAAM;AAC1B,QAAI,CAAC,YAAY,KAAM;AAEvB,YAAQ,QAAQ,SAAS,KAAK,EAAE,CAAC,EAC9B,KAAK,MAAM,QAAQ,MAAM,CAAC,EAC1B,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AAGA,QAAM,KAAK,EAAE,GAAG,YAAY,mBAAmB,OAAO,KAAK,EAAE,EAAE;AAE/D,QAAM,OAAO,CAAC,WAAW,OAAO,QAAQ,OAAO,GAAG,WAAW,OAAO,SAAS,QAAQ,IAAI,OAAO,SAAS,EACtG,OAAO,OAAO,EACd,KAAK,QAAK;AAEb,MAAI,SAAS,UAAU;AACrB,WACE,qBAAC,QAAI,GAAG,IAAI,WAAU,0CACpB;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,cAAY,OAAO,YAAY,KAAK,IAAI;AAAA,UACxC,WAAU;AAAA,UACV,OAAO;AAAA,UACP,WAAW;AAAA,UACX,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,UACxC,WAAW,CAAC,MAAuC;AACjD,gBAAI,EAAE,QAAQ,SAAS;AACrB,gBAAE,eAAe;AACjB,yBAAW;AAAA,YACb,WAAW,EAAE,QAAQ,UAAU;AAC7B,gBAAE,eAAe;AACjB,gBAAE,gBAAgB;AAClB,oBAAM;AAAA,YACR;AAAA,UACF;AAAA;AAAA,MACF;AAAA,MACA,oBAAC,UAAO,MAAK,MAAK,SAAS,YAAY,UAAU,QAAQ,CAAC,MAAM,KAAK,GAClE,iBAAO,MACV;AAAA,MACA,oBAAC,UAAO,MAAK,MAAK,SAAQ,SAAQ,SAAS,OACxC,iBAAO,QACV;AAAA,OACF;AAAA,EAEJ;AAEA,MAAI,SAAS,UAAU;AACrB,WACE,qBAAC,QAAI,GAAG,IAAI,WAAU,kBACpB;AAAA,0BAAC,OAAE,MAAK,SAAQ,WAAU,WACvB,iBAAO,cAAc,KAAK,IAAI,GACjC;AAAA,MACA,qBAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAO,MAAK,MAAK,SAAQ,UAAS,SAAS,eAAe,WAAW,cAAc,UAAU,MAC3F,iBAAO,eACV;AAAA,QACA,oBAAC,UAAO,KAAK,iBAAiB,MAAK,MAAK,SAAQ,SAAQ,SAAS,OAAO,WAAW,cAChF,iBAAO,QACV;AAAA,SACF;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,qBAAC,QAAI,GAAG,IAAI,WAAU,gCACpB;AAAA,wBAAC,YAAS,WAAU,8BAA6B,eAAW,MAAC;AAAA,IAC7D,qBAAC,SAAI,WAAU,kBAGb;AAAA,0BAAC,SAAI,WAAU,4CAA4C,eAAK,MAAK;AAAA,MACrE,oBAAC,SAAI,WAAU,sBAAsB,gBAAK;AAAA,OAC5C;AAAA,IACC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,UAAU;AAAA,QACV,SAAS,MAAM,KAAK,QAAQ;AAAA,QAC5B,cAAY,OAAO,WAAW,KAAK,IAAI;AAAA,QAEtC,iBAAO;AAAA;AAAA,IACV;AAAA,IAED,YACC;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,MAAK;AAAA,QACL,UAAU;AAAA,QACV,SAAS,MAAM,KAAK,QAAQ;AAAA,QAC5B,cAAY,OAAO,WAAW,KAAK,IAAI;AAAA,QAEtC,iBAAO;AAAA;AAAA,IACV;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/passkeys-setting.tsx"],"sourcesContent":["import { useEffect, useMemo, useRef, useState } from \"react\";\nimport type { KeyboardEvent, ReactNode } from \"react\";\nimport { KeyRound } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useDayFormatter } from \"../lib/day-format\";\nimport { toDate } from \"../lib/format\";\nimport type { LabelOverride } from \"../i18n/kit-labels\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { InlineConfirm } from \"../components/inline-confirm\";\nimport { Input } from \"../components/input\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { COMMIT_EXCEPT_BILLING, useWriteLock } from \"../components/write-lock\";\nimport { useAccountSettingsLabels } from \"./account-settings-labels\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport type { PasskeysSettingLabels } from \"./account-settings-labels\";\n\n/** What a passkey's `id` may be: the app's own key type, string or numeric. */\nexport type PasskeyId = string | number;\n\n/**\n * One registered passkey, as the app's API lists it.\n *\n * Generic in its `id` (0.16.0): `PasskeysSetting` infers `Id` from `passkeys`, so an\n * app whose ids are numbers gets numbers back in `onRename` / `onDelete` — keksdose\n * cast `id as number` in both. Left unparameterised it is the old `string | number`.\n */\nexport interface PasskeyItem<Id extends PasskeyId = PasskeyId> {\n  id: Id;\n  name: string;\n  /** A `Date`, an ISO string or epoch ms. */\n  createdAt?: Date | string | number | null;\n  /** Null (or left out) reads as \"Never used\". */\n  lastUsedAt?: Date | string | number | null;\n}\n\n/** `data-*` attributes, passed through to the element they are given for. */\nexport type PasskeyDataAttributes = { [key: `data-${string}`]: string | number | boolean | undefined };\n\nexport interface PasskeysSettingProps<Id extends PasskeyId = PasskeyId> extends PasskeyDataAttributes {\n  /** `undefined` while the first load is in flight (or pass `loading`). */\n  passkeys: readonly PasskeyItem<Id>[] | undefined;\n  loading?: boolean;\n  /**\n   * Run the WebAuthn ceremony and register the passkey — app-side, since the options\n   * and the attestation are the app's server's business. Called with the trimmed name\n   * field, which may be EMPTY: pick your own default (\"Passkey\", the device name).\n   * Return the promise and the field clears when it resolves; a rejection (including\n   * the user cancelling the OS prompt) keeps what was typed.\n   */\n  onAdd: (name: string) => void | Promise<unknown>;\n  /**\n   * A step the app runs BEFORE `onAdd` (0.18.0) — re-asking for the current password,\n   * a policy notice, anything that may stop the add. Called with the same trimmed name;\n   * resolve `true` to go on to `onAdd`, `false` to stop quietly (nothing is said, the\n   * typed name stays). A rejection, or a throw, stops the same way: the app reports\n   * its own errors. While it runs the add button is disabled and busy, so a second\n   * click cannot start a second check.\n   *\n   * Kurvenschmiede asked for the password in its own dialog by handing `onAdd` a\n   * promise it kept open across that dialog (passkeys-card.tsx) — which still works.\n   * This is the documented place for it: open the dialog here, resolve with whether it\n   * was confirmed, and keep what it produced (the server's registration options) for\n   * `onAdd` in a ref. The ceremony then starts from the dialog's click rather than the\n   * card's, which is the user activation `navigator.credentials.create` wants.\n   *\n   * Left out, `onAdd` is called synchronously in the click, exactly as before.\n   */\n  beforeAdd?: (name: string) => boolean | Promise<boolean>;\n  /**\n   * What a passkey does to the password, which picks the line under the title (0.18.0).\n   * `\"instead\"` (default): it replaces it — `labels.description`, kastlan's promise.\n   * `\"alongside\"`: the password stays and the passkey is a second way in —\n   * `labels.descriptionAlongside`. Kurvenschmiede overrode `description` for exactly\n   * this; an app that sets `mode` needs no override.\n   */\n  mode?: \"instead\" | \"alongside\";\n  /** The ceremony is running. The add button says so and does not start a second one. */\n  adding?: boolean;\n  /** Offer \"Rename\" on each row. Return a promise to leave edit mode only on success. */\n  onRename?: (id: Id, name: string) => void | Promise<unknown>;\n  /** Offer \"Delete\" on each row — always behind an inline confirmation. */\n  onDelete?: (id: Id) => void | Promise<unknown>;\n  /** A row whose rename or delete is in flight; its buttons are disabled. */\n  busyId?: Id | null;\n  /** Show the name field above the add button. Default true. */\n  nameField?: boolean;\n  /**\n   * Shown INSTEAD of the list and the add button — passkeys are not supported by this\n   * browser, or the page is not a secure context. Its wording is the app's: only the\n   * app knows which of those it detected.\n   */\n  unavailable?: ReactNode;\n  /** A date for the \"Added …\" / \"Last used …\" lines. Default: the provider's `formatDate`\n   *  (the app's date preference), else a medium date in the provider's locale and\n   *  `timeZone`. */\n  formatDate?: (date: Date) => string;\n  /** Overrides the provider's locale for the default date format. */\n  locale?: string;\n  /** Prop > `<UiKitProvider labels={{ accountSettings: { passkeys } }}>` > English. */\n  labels?: LabelOverride<PasskeysSettingLabels>;\n  className?: string;\n  /** On the card (0.16.0), for an in-page link (`#passkeys`) or a test hook. `data-*`\n   *  attributes go there too. */\n  id?: string;\n  /** Extra attributes for one row's `<li>` (0.16.0) — an `id` to scroll a just-added\n   *  key into view, `data-*` for a test. Every row also carries `data-passkey-id`. */\n  rowProps?: (item: PasskeyItem<Id>) => ({ id?: string } & PasskeyDataAttributes) | undefined;\n}\n\n/**\n * The passkeys section of an account page: what is registered, when it was last used,\n * rename and delete, and \"Add passkey\" — the fourth card beside `ProfileSetting`,\n * `PasswordSetting` and `TwoFactorSetting`, and built the same way (a self-contained\n * `<Card>` owning its transient form state; the app owns the data and the API).\n *\n * Lifted from kastlan's passkeys-card. **The WebAuthn ceremony stays app-side**:\n * `navigator.credentials.create` needs options minted by the app's server and hands\n * back an attestation only that server can verify, so the kit calls `onAdd` and waits.\n *\n * **Delete confirms inline**, in the row, rather than through `useConfirm`: this card\n * must work in an app without a `ConfirmProvider`, and the question belongs next to\n * the passkey it names. Focus moves to Cancel, as in every destructive confirm in the\n * kit, so the Enter that pressed Delete cannot also answer it.\n *\n * **Under a write lock** (0.52) Add, Rename, Delete and the confirm are `commit` controls\n * exempt from billing — a lapsed plan still lets the account manage how it signs in, the\n * demo does not. Until 0.52 the passkeys' confirm was the one inline confirm without it,\n * so the demo could delete, rename and add (refactor audit 2026-10-30, DUP-10).\n */\nexport function PasskeysSetting<Id extends PasskeyId = PasskeyId>({\n  passkeys,\n  loading,\n  onAdd,\n  beforeAdd,\n  mode = \"instead\",\n  adding = false,\n  onRename,\n  onDelete,\n  busyId,\n  nameField = true,\n  unavailable,\n  formatDate,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  rowProps,\n  ...rest\n}: PasskeysSettingProps<Id>) {\n  const labels = useAccountSettingsLabels(\"passkeys\", labelsProp);\n  // The prop, else the provider's `formatDate`, else the kit's in the provider's locale and\n  // `timeZone`; a bare \"YYYY-MM-DD\" is read on its calendar (refactor audit 2026-10-30,\n  // DUP-2: this card parsed with `new Date` and built its own `Intl` formatter).\n  // The raw value goes in, so a bare day keeps its calendar; the prop still gets a Date.\n  const own = useMemo(\n    () =>\n      formatDate &&\n      ((value: PasskeyItem[\"createdAt\"]) => {\n        const date = toDate(value);\n        return date ? formatDate(date) : \"\";\n      }),\n    [formatDate],\n  );\n  const day = useDayFormatter(own, localeProp);\n  const lock = useWriteLock(COMMIT_EXCEPT_BILLING);\n  const [name, setName] = useState(\"\");\n  // `beforeAdd` is running. State for the button, and a ref for the guard: two clicks\n  // in one frame both read the state from before either set it.\n  const [checking, setChecking] = useState(false);\n  const checkingRef = useRef(false);\n\n  const date = (value: PasskeyItem[\"createdAt\"]): string | null => {\n    return toDate(value) ? day(value) : null;\n  };\n\n  const add = () => {\n    // The name field's Enter reaches here too, past the locked button.\n    if (adding || checkingRef.current || lock.locked) return;\n    const typed = name;\n    const value = typed.trim();\n    const send = () =>\n      Promise.resolve(onAdd(value))\n        // Clear only what was sent: the field stays editable while the OS prompt is up.\n        .then(() => setName((current) => (current === typed ? \"\" : current)));\n    if (!beforeAdd) {\n      send().catch(() => {});\n      return;\n    }\n    const done = () => {\n      checkingRef.current = false;\n      setChecking(false);\n    };\n    checkingRef.current = true;\n    setChecking(true);\n    let gate: Promise<boolean>;\n    // Called in the click, not a microtask later, so a step that itself needs the\n    // user's activation (a popup, the clipboard) still has it; a throw is a \"no\".\n    try {\n      gate = Promise.resolve(beforeAdd(value));\n    } catch (error) {\n      gate = Promise.reject(error);\n    }\n    gate\n      .then((go) => {\n        done();\n        // Strictly `true`: an app whose step resolves `undefined` meant nothing.\n        if (go === true) return send();\n      })\n      .catch(done);\n  };\n  const busy = adding || checking;\n\n  const isLoading = loading || passkeys === undefined;\n  const items = passkeys ?? [];\n\n  const body = (() => {\n    if (unavailable != null && unavailable !== false) {\n      return <EmptyState variant=\"inline\" size=\"sm\" icon={<KeyRound />} title={unavailable} />;\n    }\n    return (\n      <>\n        {isLoading ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : items.length === 0 ? (\n          <EmptyState variant=\"inline\" size=\"sm\" icon={<KeyRound />} title={labels.empty} />\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-subtle\">\n            {items.map((item) => (\n              <PasskeyRow\n                key={item.id}\n                item={item}\n                created={date(item.createdAt)}\n                lastUsed={date(item.lastUsedAt)}\n                attributes={rowProps?.(item)}\n                busy={busyId !== undefined && busyId !== null && busyId === item.id}\n                locked={lock.locked}\n                onRename={onRename}\n                onDelete={onDelete}\n                labels={labels}\n              />\n            ))}\n          </ul>\n        )}\n        <div className=\"space-y-2 pt-1\">\n          {nameField && (\n            <Input\n              label={labels.nameLabel}\n              placeholder={labels.namePlaceholder}\n              value={name}\n              maxLength={120}\n              onChange={(e) => setName(e.target.value)}\n              onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n                if (e.key === \"Enter\") {\n                  e.preventDefault();\n                  add();\n                }\n              }}\n            />\n          )}\n          <Button onClick={add} commit={COMMIT_EXCEPT_BILLING} disabled={busy} aria-busy={busy || undefined}>\n            <KeyRound className=\"size-4\" aria-hidden />\n            {adding ? labels.adding : labels.add}\n          </Button>\n        </div>\n      </>\n    );\n  })();\n\n  return (\n    // `rest` is only `id` and `data-*`: everything else the props name is destructured.\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className=\"text-xs text-muted\">\n          {mode === \"alongside\" ? labels.descriptionAlongside : labels.description}\n        </div>\n      </div>\n      {body}\n    </Card>\n  );\n}\n\ntype RowMode = \"view\" | \"rename\" | \"delete\";\n\nfunction PasskeyRow<Id extends PasskeyId>({\n  item,\n  created,\n  lastUsed,\n  attributes,\n  busy,\n  locked,\n  onRename,\n  onDelete,\n  labels,\n}: {\n  item: PasskeyItem<Id>;\n  created: string | null;\n  lastUsed: string | null;\n  attributes?: { id?: string } & PasskeyDataAttributes;\n  busy: boolean;\n  /** A write lock holds: the rename field's Enter saves nothing. */\n  locked: boolean;\n  onRename?: PasskeysSettingProps<Id>[\"onRename\"];\n  onDelete?: PasskeysSettingProps<Id>[\"onDelete\"];\n  labels: PasskeysSettingLabels;\n}) {\n  const [mode, setMode] = useState<RowMode>(\"view\");\n  const [draft, setDraft] = useState(item.name);\n  // Which button opened the sub-mode, so leaving it puts focus back there — the field or\n  // the confirm unmounts under the focus, which otherwise falls to <body>. InlineConfirm\n  // returns it on Cancel and Escape; this also covers a delete that succeeded while the\n  // row stayed (the list not refreshed yet) and a rename.\n  const [returnTo, setReturnTo] = useState<\"rename\" | \"delete\" | null>(null);\n  const renameRef = useRef<HTMLInputElement>(null);\n  const renameButtonRef = useRef<HTMLButtonElement>(null);\n  const deleteButtonRef = useRef<HTMLButtonElement>(null);\n\n  useEffect(() => {\n    if (mode === \"rename\") renameRef.current?.select();\n    else if (mode === \"view\" && returnTo) (returnTo === \"rename\" ? renameButtonRef : deleteButtonRef).current?.focus();\n  }, [mode, returnTo]);\n\n  const open = (next: \"rename\" | \"delete\") => {\n    setReturnTo(next);\n    setDraft(item.name);\n    setMode(next);\n  };\n  const leave = () => setMode(\"view\");\n\n  const saveRename = () => {\n    const next = draft.trim();\n    if (!onRename || !next || busy || locked) return;\n    if (next === item.name) {\n      leave();\n      return;\n    }\n    Promise.resolve(onRename(item.id, next))\n      .then(leave)\n      .catch(() => {});\n  };\n\n  const confirmDelete = () => {\n    if (!onDelete || busy) return;\n    // The row unmounts once the list refreshes; on a failure it stays, confirm open.\n    Promise.resolve(onDelete(item.id))\n      .then(() => setMode(\"view\"))\n      .catch(() => {});\n  };\n\n  // On every mode's <li>, so an id the app scrolls to survives a rename or a confirm.\n  const li = { ...attributes, \"data-passkey-id\": String(item.id) };\n\n  const meta = [created && labels.created(created), lastUsed ? labels.lastUsed(lastUsed) : labels.neverUsed]\n    .filter(Boolean)\n    .join(\" · \");\n\n  if (mode === \"rename\") {\n    return (\n      <li {...li} className=\"flex flex-wrap items-center gap-2 py-2\">\n        <Input\n          ref={renameRef}\n          aria-label={labels.renameField(item.name)}\n          className=\"min-w-0 flex-1\"\n          value={draft}\n          maxLength={120}\n          onChange={(e) => setDraft(e.target.value)}\n          onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n            if (e.key === \"Enter\") {\n              e.preventDefault();\n              saveRename();\n            } else if (e.key === \"Escape\") {\n              e.preventDefault();\n              e.stopPropagation();\n              leave();\n            }\n          }}\n        />\n        <Button size=\"sm\" onClick={saveRename} commit={COMMIT_EXCEPT_BILLING} disabled={busy || !draft.trim()}>\n          {labels.save}\n        </Button>\n        <Button size=\"sm\" variant=\"ghost\" onClick={leave}>\n          {labels.cancel}\n        </Button>\n      </li>\n    );\n  }\n\n  if (mode === \"delete\") {\n    return (\n      <InlineConfirm\n        as=\"li\"\n        {...li}\n        className=\"py-2\"\n        prompt={labels.deleteConfirm(item.name)}\n        confirmLabel={labels.confirmDelete}\n        cancelLabel={labels.cancel}\n        onConfirm={confirmDelete}\n        onLeave={leave}\n        busy={busy}\n        commit={COMMIT_EXCEPT_BILLING}\n        returnFocusRef={deleteButtonRef}\n      />\n    );\n  }\n\n  return (\n    <li {...li} className=\"flex items-center gap-3 py-2\">\n      <KeyRound className=\"size-4 shrink-0 text-muted\" aria-hidden />\n      <div className=\"min-w-0 flex-1\">\n        {/* The passkey's own name, which its owner typed: cut at Normal, wrapped from\n            Large up (text size §10.17; round 0.34 T1: the sweep read \"MacBook To…\"). */}\n        <div className=\"truncate-until-large text-sm font-medium\">{item.name}</div>\n        <div className=\"text-xs text-muted\">{meta}</div>\n      </div>\n      {onRename && (\n        <Button\n          ref={renameButtonRef}\n          size=\"sm\"\n          variant=\"ghost\"\n          commit={COMMIT_EXCEPT_BILLING}\n          disabled={busy}\n          onClick={() => open(\"rename\")}\n          aria-label={labels.renameItem(item.name)}\n        >\n          {labels.rename}\n        </Button>\n      )}\n      {onDelete && (\n        <Button\n          ref={deleteButtonRef}\n          size=\"sm\"\n          variant=\"ghost\"\n          tone=\"danger\"\n          commit={COMMIT_EXCEPT_BILLING}\n          disabled={busy}\n          onClick={() => open(\"delete\")}\n          aria-label={labels.deleteItem(item.name)}\n        >\n          {labels.delete}\n        </Button>\n      )}\n    </li>\n  );\n}\n"],"mappings":";AA0N0D,SAGpD,UAHoD,KA0ChD,YA1CgD;AA1N1D,SAAS,WAAW,SAAS,QAAQ,gBAAgB;AAErD,SAAS,gBAAgB;AACzB,SAAS,UAAU;AACnB,SAAS,uBAAuB;AAChC,SAAS,cAAc;AAEvB,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,aAAa;AACtB,SAAS,gBAAgB;AACzB,SAAS,uBAAuB,oBAAoB;AACpD,SAAS,gCAAgC;AACzC,SAAS,yBAAyB;AAoH3B,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,yBAAyB,YAAY,UAAU;AAK9D,QAAM,MAAM;AAAA,IACV,MACE,eACC,CAAC,UAAoC;AACpC,YAAMA,QAAO,OAAO,KAAK;AACzB,aAAOA,QAAO,WAAWA,KAAI,IAAI;AAAA,IACnC;AAAA,IACF,CAAC,UAAU;AAAA,EACb;AACA,QAAM,MAAM,gBAAgB,KAAK,UAAU;AAC3C,QAAM,OAAO,aAAa,qBAAqB;AAC/C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AAGnC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,QAAM,cAAc,OAAO,KAAK;AAEhC,QAAM,OAAO,CAAC,UAAmD;AAC/D,WAAO,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI;AAAA,EACtC;AAEA,QAAM,MAAM,MAAM;AAEhB,QAAI,UAAU,YAAY,WAAW,KAAK,OAAQ;AAClD,UAAM,QAAQ;AACd,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,OAAO,MACX,QAAQ,QAAQ,MAAM,KAAK,CAAC,EAEzB,KAAK,MAAM,QAAQ,CAAC,YAAa,YAAY,QAAQ,KAAK,OAAQ,CAAC;AACxE,QAAI,CAAC,WAAW;AACd,WAAK,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACrB;AAAA,IACF;AACA,UAAM,OAAO,MAAM;AACjB,kBAAY,UAAU;AACtB,kBAAY,KAAK;AAAA,IACnB;AACA,gBAAY,UAAU;AACtB,gBAAY,IAAI;AAChB,QAAI;AAGJ,QAAI;AACF,aAAO,QAAQ,QAAQ,UAAU,KAAK,CAAC;AAAA,IACzC,SAAS,OAAO;AACd,aAAO,QAAQ,OAAO,KAAK;AAAA,IAC7B;AACA,SACG,KAAK,CAAC,OAAO;AACZ,WAAK;AAEL,UAAI,OAAO,KAAM,QAAO,KAAK;AAAA,IAC/B,CAAC,EACA,MAAM,IAAI;AAAA,EACf;AACA,QAAM,OAAO,UAAU;AAEvB,QAAM,YAAY,WAAW,aAAa;AAC1C,QAAM,QAAQ,YAAY,CAAC;AAE3B,QAAM,QAAQ,MAAM;AAClB,QAAI,eAAe,QAAQ,gBAAgB,OAAO;AAChD,aAAO,oBAAC,cAAW,SAAQ,UAAS,MAAK,MAAK,MAAM,oBAAC,YAAS,GAAI,OAAO,aAAa;AAAA,IACxF;AACA,WACE,iCACG;AAAA,kBACC,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,MAAM,WAAW,IACnB,oBAAC,cAAW,SAAQ,UAAS,MAAK,MAAK,MAAM,oBAAC,YAAS,GAAI,OAAO,OAAO,OAAO,IAEhF,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,0BACpC,gBAAM,IAAI,CAAC,SACV;AAAA,QAAC;AAAA;AAAA,UAEC;AAAA,UACA,SAAS,KAAK,KAAK,SAAS;AAAA,UAC5B,UAAU,KAAK,KAAK,UAAU;AAAA,UAC9B,YAAY,WAAW,IAAI;AAAA,UAC3B,MAAM,WAAW,UAAa,WAAW,QAAQ,WAAW,KAAK;AAAA,UACjE,QAAQ,KAAK;AAAA,UACb;AAAA,UACA;AAAA,UACA;AAAA;AAAA,QATK,KAAK;AAAA,MAUZ,CACD,GACH;AAAA,MAEF,qBAAC,SAAI,WAAU,kBACZ;AAAA,qBACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,aAAa,OAAO;AAAA,YACpB,OAAO;AAAA,YACP,WAAW;AAAA,YACX,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK;AAAA,YACvC,WAAW,CAAC,MAAuC;AACjD,kBAAI,EAAE,QAAQ,SAAS;AACrB,kBAAE,eAAe;AACjB,oBAAI;AAAA,cACN;AAAA,YACF;AAAA;AAAA,QACF;AAAA,QAEF,qBAAC,UAAO,SAAS,KAAK,QAAQ,uBAAuB,UAAU,MAAM,aAAW,QAAQ,QACtF;AAAA,8BAAC,YAAS,WAAU,UAAS,eAAW,MAAC;AAAA,UACxC,SAAS,OAAO,SAAS,OAAO;AAAA,WACnC;AAAA,SACF;AAAA,OACF;AAAA,EAEJ,GAAG;AAEH;AAAA;AAAA,IAEE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,2BAAC,SACC;AAAA,4BAAC,qBAAmB,iBAAO,OAAM;AAAA,QACjC,oBAAC,SAAI,WAAU,sBACZ,mBAAS,cAAc,OAAO,uBAAuB,OAAO,aAC/D;AAAA,SACF;AAAA,MACC;AAAA,OACH;AAAA;AAEJ;AAIA,SAAS,WAAiC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAWG;AACD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAkB,MAAM;AAChD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK,IAAI;AAK5C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAqC,IAAI;AACzE,QAAM,YAAY,OAAyB,IAAI;AAC/C,QAAM,kBAAkB,OAA0B,IAAI;AACtD,QAAM,kBAAkB,OAA0B,IAAI;AAEtD,YAAU,MAAM;AACd,QAAI,SAAS,SAAU,WAAU,SAAS,OAAO;AAAA,aACxC,SAAS,UAAU,SAAU,EAAC,aAAa,WAAW,kBAAkB,iBAAiB,SAAS,MAAM;AAAA,EACnH,GAAG,CAAC,MAAM,QAAQ,CAAC;AAEnB,QAAM,OAAO,CAAC,SAA8B;AAC1C,gBAAY,IAAI;AAChB,aAAS,KAAK,IAAI;AAClB,YAAQ,IAAI;AAAA,EACd;AACA,QAAM,QAAQ,MAAM,QAAQ,MAAM;AAElC,QAAM,aAAa,MAAM;AACvB,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,CAAC,YAAY,CAAC,QAAQ,QAAQ,OAAQ;AAC1C,QAAI,SAAS,KAAK,MAAM;AACtB,YAAM;AACN;AAAA,IACF;AACA,YAAQ,QAAQ,SAAS,KAAK,IAAI,IAAI,CAAC,EACpC,KAAK,KAAK,EACV,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AAEA,QAAM,gBAAgB,MAAM;AAC1B,QAAI,CAAC,YAAY,KAAM;AAEvB,YAAQ,QAAQ,SAAS,KAAK,EAAE,CAAC,EAC9B,KAAK,MAAM,QAAQ,MAAM,CAAC,EAC1B,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AAGA,QAAM,KAAK,EAAE,GAAG,YAAY,mBAAmB,OAAO,KAAK,EAAE,EAAE;AAE/D,QAAM,OAAO,CAAC,WAAW,OAAO,QAAQ,OAAO,GAAG,WAAW,OAAO,SAAS,QAAQ,IAAI,OAAO,SAAS,EACtG,OAAO,OAAO,EACd,KAAK,QAAK;AAEb,MAAI,SAAS,UAAU;AACrB,WACE,qBAAC,QAAI,GAAG,IAAI,WAAU,0CACpB;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,cAAY,OAAO,YAAY,KAAK,IAAI;AAAA,UACxC,WAAU;AAAA,UACV,OAAO;AAAA,UACP,WAAW;AAAA,UACX,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,UACxC,WAAW,CAAC,MAAuC;AACjD,gBAAI,EAAE,QAAQ,SAAS;AACrB,gBAAE,eAAe;AACjB,yBAAW;AAAA,YACb,WAAW,EAAE,QAAQ,UAAU;AAC7B,gBAAE,eAAe;AACjB,gBAAE,gBAAgB;AAClB,oBAAM;AAAA,YACR;AAAA,UACF;AAAA;AAAA,MACF;AAAA,MACA,oBAAC,UAAO,MAAK,MAAK,SAAS,YAAY,QAAQ,uBAAuB,UAAU,QAAQ,CAAC,MAAM,KAAK,GACjG,iBAAO,MACV;AAAA,MACA,oBAAC,UAAO,MAAK,MAAK,SAAQ,SAAQ,SAAS,OACxC,iBAAO,QACV;AAAA,OACF;AAAA,EAEJ;AAEA,MAAI,SAAS,UAAU;AACrB,WACE;AAAA,MAAC;AAAA;AAAA,QACC,IAAG;AAAA,QACF,GAAG;AAAA,QACJ,WAAU;AAAA,QACV,QAAQ,OAAO,cAAc,KAAK,IAAI;AAAA,QACtC,cAAc,OAAO;AAAA,QACrB,aAAa,OAAO;AAAA,QACpB,WAAW;AAAA,QACX,SAAS;AAAA,QACT;AAAA,QACA,QAAQ;AAAA,QACR,gBAAgB;AAAA;AAAA,IAClB;AAAA,EAEJ;AAEA,SACE,qBAAC,QAAI,GAAG,IAAI,WAAU,gCACpB;AAAA,wBAAC,YAAS,WAAU,8BAA6B,eAAW,MAAC;AAAA,IAC7D,qBAAC,SAAI,WAAU,kBAGb;AAAA,0BAAC,SAAI,WAAU,4CAA4C,eAAK,MAAK;AAAA,MACrE,oBAAC,SAAI,WAAU,sBAAsB,gBAAK;AAAA,OAC5C;AAAA,IACC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,SAAS,MAAM,KAAK,QAAQ;AAAA,QAC5B,cAAY,OAAO,WAAW,KAAK,IAAI;AAAA,QAEtC,iBAAO;AAAA;AAAA,IACV;AAAA,IAED,YACC;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,MAAK;AAAA,QACL,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,SAAS,MAAM,KAAK,QAAQ;AAAA,QAC5B,cAAY,OAAO,WAAW,KAAK,IAAI;AAAA,QAEtC,iBAAO;AAAA;AAAA,IACV;AAAA,KAEJ;AAEJ;","names":["date"]}

package/dist/account/sessions-setting.d.ts

@@ -78,8 +78,9 @@ export interface SessionsSettingProps<Id extends SessionId = SessionId> extends
     onRevoke?: (id: Id) => Promise<unknown> | void;
     /** The app's own words for a failure, or `undefined` for the kit's `failed`. */
     describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;
-    /** The "Last active" text. Default: how long ago, in the provider's locale, and the
-     *  date once it is more than a week back. */
+    /** The "Last active" text. Default: how long ago, in the provider's locale and
+     *  `timeZone`, and the date once it is more than a week back — through the provider's
+     *  `formatDate` (the app's date preference) when it has one. */
     formatLastActive?: (date: Date) => string;
     /** Overrides the provider's locale for the default format. */
     locale?: string;

package/dist/account/sessions-setting.js

@@ -2,9 +2,11 @@
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useState } from "react";
 import { MonitorSmartphone } from "lucide-react";
-import { useKitLabels, useKitLocale } from "../i18n/kit-labels.js";
+import { useKitLabels } from "../i18n/kit-labels.js";
 import { cn } from "../lib/cn.js";
-import { formatRelativeTime, toDate } from "../lib/format.js";
+import { useDayFormatter } from "../lib/day-format.js";
+import { describeFailure } from "../lib/describe-failure.js";
+import { toDate, useKitFormat } from "../lib/format.js";
 import { AlertBanner } from "../components/alert-banner.js";
 import { Chip } from "../components/chip.js";
 import { hasContent } from "../lib/presence.js";
@@ -29,18 +31,18 @@ function SessionsSetting({
   ...rest
 }) {
   const labels = useKitLabels("sessions", DEFAULT_SESSIONS_LABELS, labelsProp);
-  const locale = useKitLocale(localeProp);
+  const { formatDate, formatRelativeTime } = useKitFormat(localeProp);
+  const day = useDayFormatter(null, localeProp);
   const [busyId, setBusyId] = useState(null);
   const [failure, setFailure] = useState(null);
   const mounted = useMounted();
-  const describe = (error, action) => {
-    const own = describeError?.(error, action);
-    return hasContent(own) ? own : labels.failed;
-  };
+  const describe = (error, action) => describeFailure(describeError?.(error, action), labels.failed);
   const lastActive = (value) => {
     const date = toDate(value);
     if (!date) return null;
-    return formatLastActive ? formatLastActive(date) : formatRelativeTime(date, { locale, absoluteAfterDays: 7, absoluteStyle: "medium" });
+    if (formatLastActive) return formatLastActive(date);
+    const words = formatRelativeTime(date, { absoluteAfterDays: 7, absoluteStyle: "medium" });
+    return words === formatDate(date, "medium") ? day(date) : words;
   };
   const signOutEverywhere = () => {
     setFailure(null);

package/dist/account/sessions-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/sessions-setting.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\nimport { MonitorSmartphone } from \"lucide-react\";\n\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { formatRelativeTime, toDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport { hasContent } from \"../lib/presence\";\nimport { DangerConfirm } from \"../components/danger-confirm\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { DEFAULT_SESSIONS_LABELS } from \"./sessions-setting-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link SessionsSetting} renders — the `sessions` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n *  Cancel is `dangerConfirm.cancel`. */\nexport interface SessionsLabels {\n  /** The card's title. */\n  title: string;\n  /** The line under it: what \"sign out everywhere\" is for. */\n  description: string;\n  /** The button that asks first. */\n  signOutEverywhere: string;\n  /** The question it asks: every session ends, this one too. */\n  signOutEverywherePrompt: string;\n  /** The button that answers it. */\n  confirmSignOutEverywhere: string;\n  /** The device list's accessible name. */\n  list: string;\n  /** While the list loads. */\n  loading: string;\n  /** A list with no rows. */\n  empty: string;\n  /** The chip on the session this page runs in. */\n  current: string;\n  /** A session whose device the server could not name. */\n  unknownDevice: string;\n  /** Given the last activity, formatted (\"3 hours ago\", \"5 Oct 2026\"). */\n  lastActive: (when: string) => string;\n  /** Given the address the session was last seen from. */\n  ip: (address: string) => string;\n  /** A row's button, visible text. */\n  revoke: string;\n  /** The same button's accessible name, given the device — it starts with `revoke`,\n   *  the visible text, so voice control finds it by what it says. */\n  revokeItem: (device: string) => string;\n  /** A request failed. */\n  failed: string;\n}\n\n// Defined in ./sessions-setting-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_SESSIONS_LABELS };\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What a session's `id` may be: the app's own key type. */\nexport type SessionId = string | number;\n\n/** One stored session (kastlan's `GET /auth/sessions`). */\nexport interface SessionItem<Id extends SessionId = SessionId> {\n  id: Id;\n  /** The browser and system, as the server reads them (\"Firefox on Windows\"). Blank\n   *  reads as `labels.unknownDevice`. */\n  device?: string | null;\n  /** The address it was last seen from. */\n  ip?: string | null;\n  /** A `Date`, an ISO string or epoch ms. */\n  lastActiveAt?: DateInput;\n  /** The session this page runs in: marked, and offered no \"Sign out\" of its own — the\n   *  app's sign-out does that, and \"Sign out everywhere\" below. */\n  current?: boolean;\n}\n\n/** Which request failed — {@link SessionsSettingProps.describeError}'s second argument. */\nexport type SessionsAction = \"sign-out-everywhere\" | \"revoke\";\n\nexport interface SessionsSettingProps<Id extends SessionId = SessionId> extends Omit<\n  ComponentPropsWithRef<\"div\">,\n  \"children\"\n> {\n  /**\n   * End every session (`POST /auth/logout`, auth §6.3) — this one included. Asked\n   * first; resolve once the server answered, then sign this page out: the card says\n   * that the device signs out too, and its own session is gone.\n   */\n  onSignOutEverywhere: () => Promise<unknown> | void;\n  /**\n   * The stored sessions, where the app keeps them (kastlan's `user_sessions`, §6.3).\n   * Left out, the card is \"Sign out everywhere\" alone — keksdose and Kurvenschmiede keep\n   * a cut-off (`sessions_invalid_before`), not rows. `undefined` with `loading` while the\n   * first load runs.\n   */\n  sessions?: readonly SessionItem<Id>[];\n  /** The list is loading. */\n  loading?: boolean;\n  /** End one other session (`DELETE /auth/sessions/{id}`). Left out, no row buttons.\n   *  The row is busy until it settles; refresh `sessions` then. */\n  onRevoke?: (id: Id) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;\n  /** The \"Last active\" text. Default: how long ago, in the provider's locale, and the\n   *  date once it is more than a week back. */\n  formatLastActive?: (date: Date) => string;\n  /** Overrides the provider's locale for the default format. */\n  locale?: string;\n  labels?: LabelOverride<SessionsLabels>;\n}\n\n/**\n * Where the account is signed in, and the way out of all of it\n * (docs/user-admin-harmonization.md §6.3, §2.6).\n *\n * **\"Sign out everywhere\", in every app.** It ends every session, THIS one included —\n * the server stamps a cut-off (`sessions_invalid_before`) that the page's own token is\n * older than — so the confirm says so before it is pressed, and the app signs out once it\n * resolves. A {@link DangerConfirm} in the warning tone: nothing is lost, but the person\n * has to sign in again on every device. keksdose kept its ordinary sign-out device-only\n * (its offline mirror is wiped on an explicit sign-out), which is why this is an action\n * of its own, not a mode of that one.\n *\n * **The device list, where sessions are stored** (kastlan): device, address, last\n * active, and \"This device\" on the current one, with \"Sign out\" on each other row — no\n * confirm, since a session ended is a sign-in away from coming back, not data lost.\n * Without `sessions` there is no list: the other apps keep a cut-off, not rows.\n *\n * Both requests are the app's; a failure is said under the card's action, in the app's\n * words if `describeError` has them.\n *\n * **Under a write lock** both are `commit` controls exempt from billing\n * (`COMMIT_EXCEPT_BILLING`, 0.33): a lapsed plan never keeps a person from ending their\n * own sessions (docs/billing-harmonization.md §12.13, §12.36); a demo's lock still does.\n */\nexport function SessionsSetting<Id extends SessionId = SessionId>({\n  onSignOutEverywhere,\n  sessions,\n  loading,\n  onRevoke,\n  describeError,\n  formatLastActive,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  ...rest\n}: SessionsSettingProps<Id>) {\n  const labels = useKitLabels(\"sessions\", DEFAULT_SESSIONS_LABELS, labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [busyId, setBusyId] = useState<Id | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  const describe = (error: unknown, action: SessionsAction): ReactNode => {\n    const own = describeError?.(error, action);\n    return hasContent(own) ? own : labels.failed;\n  };\n\n  const lastActive = (value: DateInput): string | null => {\n    const date = toDate(value);\n    if (!date) return null;\n    return formatLastActive\n      ? formatLastActive(date)\n      : formatRelativeTime(date, { locale, absoluteAfterDays: 7, absoluteStyle: \"medium\" });\n  };\n\n  const signOutEverywhere = () => {\n    setFailure(null);\n    // Rejected again after it is said, so the tile stays armed for a retry.\n    return settle(onSignOutEverywhere).catch((error: unknown) => {\n      if (mounted.current) setFailure(describe(error, \"sign-out-everywhere\"));\n      throw error;\n    });\n  };\n\n  const revoke = (id: Id) => {\n    if (!onRevoke || busyId !== null) return;\n    setBusyId(id);\n    setFailure(null);\n    settle(() => onRevoke(id)).then(\n      () => {\n        if (mounted.current) setBusyId(null);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusyId(null);\n        setFailure(describe(error, \"revoke\"));\n      },\n    );\n  };\n\n  const showList = sessions !== undefined || loading;\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n      </div>\n      {showList &&\n        (loading || sessions === undefined ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : sessions.length === 0 ? (\n          <p className={CARD_DESCRIPTION_CLASS}>{labels.empty}</p>\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-subtle\">\n            {sessions.map((session) => {\n              const device = session.device?.trim() || labels.unknownDevice;\n              const when = lastActive(session.lastActiveAt);\n              const ip = session.ip?.trim();\n              return (\n                <li\n                  key={session.id}\n                  data-session-id={String(session.id)}\n                  data-current={session.current || undefined}\n                  className=\"flex items-center gap-3 py-2\"\n                >\n                  <MonitorSmartphone aria-hidden className=\"size-4 shrink-0 text-muted\" />\n                  <div className=\"min-w-0 flex-1\">\n                    <div className=\"flex flex-wrap items-center gap-x-2 gap-y-1\">\n                      <span className=\"min-w-0 break-words text-sm font-medium\">{device}</span>\n                      {session.current && (\n                        <Chip size=\"sm\" tone=\"brand\">\n                          {labels.current}\n                        </Chip>\n                      )}\n                    </div>\n                    {(when || ip) && (\n                      <div className={CARD_DESCRIPTION_CLASS}>\n                        {when && labels.lastActive(when)}\n                        {when && ip && \" · \"}\n                        {/* An address reads left to right in any page direction. */}\n                        {ip && <span dir=\"ltr\">{labels.ip(ip)}</span>}\n                      </div>\n                    )}\n                  </div>\n                  {onRevoke && !session.current && (\n                    <Button\n                      type=\"button\"\n                      size=\"sm\"\n                      variant=\"ghost\"\n                      commit={COMMIT_EXCEPT_BILLING}\n                      pending={busyId === session.id}\n                      disabled={busyId !== null && busyId !== session.id}\n                      aria-label={labels.revokeItem(device)}\n                      onClick={() => revoke(session.id)}\n                    >\n                      {labels.revoke}\n                    </Button>\n                  )}\n                </li>\n              );\n            })}\n          </ul>\n        ))}\n      <DangerConfirm\n        tone=\"warning\"\n        commit={COMMIT_EXCEPT_BILLING}\n        armLabel={labels.signOutEverywhere}\n        prompt={labels.signOutEverywherePrompt}\n        confirmLabel={labels.confirmSignOutEverywhere}\n        onConfirm={signOutEverywhere}\n      />\n      {hasContent(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AAyMM,SACE,KADF;AAzMN,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,SAAS,cAAc,oBAAwC;AAC/D,SAAS,UAAU;AACnB,SAAS,oBAAoB,cAAc;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AA2HjC,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAE3B,QAAM,WAAW,CAAC,OAAgB,WAAsC;AACtE,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,WAAO,WAAW,GAAG,IAAI,MAAM,OAAO;AAAA,EACxC;AAEA,QAAM,aAAa,CAAC,UAAoC;AACtD,UAAM,OAAO,OAAO,KAAK;AACzB,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,mBACH,iBAAiB,IAAI,IACrB,mBAAmB,MAAM,EAAE,QAAQ,mBAAmB,GAAG,eAAe,SAAS,CAAC;AAAA,EACxF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,eAAW,IAAI;AAEf,WAAO,OAAO,mBAAmB,EAAE,MAAM,CAAC,UAAmB;AAC3D,UAAI,QAAQ,QAAS,YAAW,SAAS,OAAO,qBAAqB,CAAC;AACtE,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,CAAC,OAAW;AACzB,QAAI,CAAC,YAAY,WAAW,KAAM;AAClC,cAAU,EAAE;AACZ,eAAW,IAAI;AACf,WAAO,MAAM,SAAS,EAAE,CAAC,EAAE;AAAA,MACzB,MAAM;AACJ,YAAI,QAAQ,QAAS,WAAU,IAAI;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,kBAAU,IAAI;AACd,mBAAW,SAAS,OAAO,QAAQ,CAAC;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,aAAa,UAAa;AAE3C,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAmB,iBAAO,OAAM;AAAA,MACjC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,OAC9D;AAAA,IACC,aACE,WAAW,aAAa,SACvB,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,SAAS,WAAW,IACtB,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,OAAM,IAEpD,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,0BACpC,mBAAS,IAAI,CAAC,YAAY;AACzB,YAAM,SAAS,QAAQ,QAAQ,KAAK,KAAK,OAAO;AAChD,YAAM,OAAO,WAAW,QAAQ,YAAY;AAC5C,YAAM,KAAK,QAAQ,IAAI,KAAK;AAC5B,aACE;AAAA,QAAC;AAAA;AAAA,UAEC,mBAAiB,OAAO,QAAQ,EAAE;AAAA,UAClC,gBAAc,QAAQ,WAAW;AAAA,UACjC,WAAU;AAAA,UAEV;AAAA,gCAAC,qBAAkB,eAAW,MAAC,WAAU,8BAA6B;AAAA,YACtE,qBAAC,SAAI,WAAU,kBACb;AAAA,mCAAC,SAAI,WAAU,+CACb;AAAA,oCAAC,UAAK,WAAU,2CAA2C,kBAAO;AAAA,gBACjE,QAAQ,WACP,oBAAC,QAAK,MAAK,MAAK,MAAK,SAClB,iBAAO,SACV;AAAA,iBAEJ;AAAA,eACE,QAAQ,OACR,qBAAC,SAAI,WAAW,wBACb;AAAA,wBAAQ,OAAO,WAAW,IAAI;AAAA,gBAC9B,QAAQ,MAAM;AAAA,gBAEd,MAAM,oBAAC,UAAK,KAAI,OAAO,iBAAO,GAAG,EAAE,GAAE;AAAA,iBACxC;AAAA,eAEJ;AAAA,YACC,YAAY,CAAC,QAAQ,WACpB;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,QAAQ;AAAA,gBACR,SAAS,WAAW,QAAQ;AAAA,gBAC5B,UAAU,WAAW,QAAQ,WAAW,QAAQ;AAAA,gBAChD,cAAY,OAAO,WAAW,MAAM;AAAA,gBACpC,SAAS,MAAM,OAAO,QAAQ,EAAE;AAAA,gBAE/B,iBAAO;AAAA;AAAA,YACV;AAAA;AAAA;AAAA,QApCG,QAAQ;AAAA,MAsCf;AAAA,IAEJ,CAAC,GACH;AAAA,IAEJ;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,QAAQ;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO;AAAA,QACrB,WAAW;AAAA;AAAA,IACb;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/sessions-setting.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\nimport { MonitorSmartphone } from \"lucide-react\";\n\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { useDayFormatter } from \"../lib/day-format\";\nimport { describeFailure } from \"../lib/describe-failure\";\nimport { toDate, useKitFormat } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport { hasContent } from \"../lib/presence\";\nimport { DangerConfirm } from \"../components/danger-confirm\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { DEFAULT_SESSIONS_LABELS } from \"./sessions-setting-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link SessionsSetting} renders — the `sessions` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n *  Cancel is `dangerConfirm.cancel`. */\nexport interface SessionsLabels {\n  /** The card's title. */\n  title: string;\n  /** The line under it: what \"sign out everywhere\" is for. */\n  description: string;\n  /** The button that asks first. */\n  signOutEverywhere: string;\n  /** The question it asks: every session ends, this one too. */\n  signOutEverywherePrompt: string;\n  /** The button that answers it. */\n  confirmSignOutEverywhere: string;\n  /** The device list's accessible name. */\n  list: string;\n  /** While the list loads. */\n  loading: string;\n  /** A list with no rows. */\n  empty: string;\n  /** The chip on the session this page runs in. */\n  current: string;\n  /** A session whose device the server could not name. */\n  unknownDevice: string;\n  /** Given the last activity, formatted (\"3 hours ago\", \"5 Oct 2026\"). */\n  lastActive: (when: string) => string;\n  /** Given the address the session was last seen from. */\n  ip: (address: string) => string;\n  /** A row's button, visible text. */\n  revoke: string;\n  /** The same button's accessible name, given the device — it starts with `revoke`,\n   *  the visible text, so voice control finds it by what it says. */\n  revokeItem: (device: string) => string;\n  /** A request failed. */\n  failed: string;\n}\n\n// Defined in ./sessions-setting-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_SESSIONS_LABELS };\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What a session's `id` may be: the app's own key type. */\nexport type SessionId = string | number;\n\n/** One stored session (kastlan's `GET /auth/sessions`). */\nexport interface SessionItem<Id extends SessionId = SessionId> {\n  id: Id;\n  /** The browser and system, as the server reads them (\"Firefox on Windows\"). Blank\n   *  reads as `labels.unknownDevice`. */\n  device?: string | null;\n  /** The address it was last seen from. */\n  ip?: string | null;\n  /** A `Date`, an ISO string or epoch ms. */\n  lastActiveAt?: DateInput;\n  /** The session this page runs in: marked, and offered no \"Sign out\" of its own — the\n   *  app's sign-out does that, and \"Sign out everywhere\" below. */\n  current?: boolean;\n}\n\n/** Which request failed — {@link SessionsSettingProps.describeError}'s second argument. */\nexport type SessionsAction = \"sign-out-everywhere\" | \"revoke\";\n\nexport interface SessionsSettingProps<Id extends SessionId = SessionId> extends Omit<\n  ComponentPropsWithRef<\"div\">,\n  \"children\"\n> {\n  /**\n   * End every session (`POST /auth/logout`, auth §6.3) — this one included. Asked\n   * first; resolve once the server answered, then sign this page out: the card says\n   * that the device signs out too, and its own session is gone.\n   */\n  onSignOutEverywhere: () => Promise<unknown> | void;\n  /**\n   * The stored sessions, where the app keeps them (kastlan's `user_sessions`, §6.3).\n   * Left out, the card is \"Sign out everywhere\" alone — keksdose and Kurvenschmiede keep\n   * a cut-off (`sessions_invalid_before`), not rows. `undefined` with `loading` while the\n   * first load runs.\n   */\n  sessions?: readonly SessionItem<Id>[];\n  /** The list is loading. */\n  loading?: boolean;\n  /** End one other session (`DELETE /auth/sessions/{id}`). Left out, no row buttons.\n   *  The row is busy until it settles; refresh `sessions` then. */\n  onRevoke?: (id: Id) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;\n  /** The \"Last active\" text. Default: how long ago, in the provider's locale and\n   *  `timeZone`, and the date once it is more than a week back — through the provider's\n   *  `formatDate` (the app's date preference) when it has one. */\n  formatLastActive?: (date: Date) => string;\n  /** Overrides the provider's locale for the default format. */\n  locale?: string;\n  labels?: LabelOverride<SessionsLabels>;\n}\n\n/**\n * Where the account is signed in, and the way out of all of it\n * (docs/user-admin-harmonization.md §6.3, §2.6).\n *\n * **\"Sign out everywhere\", in every app.** It ends every session, THIS one included —\n * the server stamps a cut-off (`sessions_invalid_before`) that the page's own token is\n * older than — so the confirm says so before it is pressed, and the app signs out once it\n * resolves. A {@link DangerConfirm} in the warning tone: nothing is lost, but the person\n * has to sign in again on every device. keksdose kept its ordinary sign-out device-only\n * (its offline mirror is wiped on an explicit sign-out), which is why this is an action\n * of its own, not a mode of that one.\n *\n * **The device list, where sessions are stored** (kastlan): device, address, last\n * active, and \"This device\" on the current one, with \"Sign out\" on each other row — no\n * confirm, since a session ended is a sign-in away from coming back, not data lost.\n * Without `sessions` there is no list: the other apps keep a cut-off, not rows.\n *\n * Both requests are the app's; a failure is said under the card's action, in the app's\n * words if `describeError` has them.\n *\n * **Under a write lock** both are `commit` controls exempt from billing\n * (`COMMIT_EXCEPT_BILLING`, 0.33): a lapsed plan never keeps a person from ending their\n * own sessions (docs/billing-harmonization.md §12.13, §12.36); a demo's lock still does.\n */\nexport function SessionsSetting<Id extends SessionId = SessionId>({\n  onSignOutEverywhere,\n  sessions,\n  loading,\n  onRevoke,\n  describeError,\n  formatLastActive,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  ...rest\n}: SessionsSettingProps<Id>) {\n  const labels = useKitLabels(\"sessions\", DEFAULT_SESSIONS_LABELS, labelsProp);\n  // The provider's locale and `timeZone`; past a week the words are a date, and a date\n  // that names a day follows the app's preference (refactor audit 2026-10-30, DUP-2).\n  const { formatDate, formatRelativeTime } = useKitFormat(localeProp);\n  const day = useDayFormatter(null, localeProp);\n  const [busyId, setBusyId] = useState<Id | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  const describe = (error: unknown, action: SessionsAction): ReactNode =>\n    describeFailure(describeError?.(error, action), labels.failed);\n\n  const lastActive = (value: DateInput): string | null => {\n    const date = toDate(value);\n    if (!date) return null;\n    if (formatLastActive) return formatLastActive(date);\n    const words = formatRelativeTime(date, { absoluteAfterDays: 7, absoluteStyle: \"medium\" });\n    // Past a week the words ARE the medium date (\"5 weeks ago\" makes a reader do sums);\n    // then the day as the app's preference writes it.\n    return words === formatDate(date, \"medium\") ? day(date) : words;\n  };\n\n  const signOutEverywhere = () => {\n    setFailure(null);\n    // Rejected again after it is said, so the tile stays armed for a retry.\n    return settle(onSignOutEverywhere).catch((error: unknown) => {\n      if (mounted.current) setFailure(describe(error, \"sign-out-everywhere\"));\n      throw error;\n    });\n  };\n\n  const revoke = (id: Id) => {\n    if (!onRevoke || busyId !== null) return;\n    setBusyId(id);\n    setFailure(null);\n    settle(() => onRevoke(id)).then(\n      () => {\n        if (mounted.current) setBusyId(null);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusyId(null);\n        setFailure(describe(error, \"revoke\"));\n      },\n    );\n  };\n\n  const showList = sessions !== undefined || loading;\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n      </div>\n      {showList &&\n        (loading || sessions === undefined ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : sessions.length === 0 ? (\n          <p className={CARD_DESCRIPTION_CLASS}>{labels.empty}</p>\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-subtle\">\n            {sessions.map((session) => {\n              const device = session.device?.trim() || labels.unknownDevice;\n              const when = lastActive(session.lastActiveAt);\n              const ip = session.ip?.trim();\n              return (\n                <li\n                  key={session.id}\n                  data-session-id={String(session.id)}\n                  data-current={session.current || undefined}\n                  className=\"flex items-center gap-3 py-2\"\n                >\n                  <MonitorSmartphone aria-hidden className=\"size-4 shrink-0 text-muted\" />\n                  <div className=\"min-w-0 flex-1\">\n                    <div className=\"flex flex-wrap items-center gap-x-2 gap-y-1\">\n                      <span className=\"min-w-0 break-words text-sm font-medium\">{device}</span>\n                      {session.current && (\n                        <Chip size=\"sm\" tone=\"brand\">\n                          {labels.current}\n                        </Chip>\n                      )}\n                    </div>\n                    {(when || ip) && (\n                      <div className={CARD_DESCRIPTION_CLASS}>\n                        {when && labels.lastActive(when)}\n                        {when && ip && \" · \"}\n                        {/* An address reads left to right in any page direction. */}\n                        {ip && <span dir=\"ltr\">{labels.ip(ip)}</span>}\n                      </div>\n                    )}\n                  </div>\n                  {onRevoke && !session.current && (\n                    <Button\n                      type=\"button\"\n                      size=\"sm\"\n                      variant=\"ghost\"\n                      commit={COMMIT_EXCEPT_BILLING}\n                      pending={busyId === session.id}\n                      disabled={busyId !== null && busyId !== session.id}\n                      aria-label={labels.revokeItem(device)}\n                      onClick={() => revoke(session.id)}\n                    >\n                      {labels.revoke}\n                    </Button>\n                  )}\n                </li>\n              );\n            })}\n          </ul>\n        ))}\n      <DangerConfirm\n        tone=\"warning\"\n        commit={COMMIT_EXCEPT_BILLING}\n        armLabel={labels.signOutEverywhere}\n        prompt={labels.signOutEverywherePrompt}\n        confirmLabel={labels.confirmSignOutEverywhere}\n        onConfirm={signOutEverywhere}\n      />\n      {hasContent(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AA+MM,SACE,KADF;AA/MN,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,SAAS,oBAAwC;AACjD,SAAS,UAAU;AACnB,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC,SAAS,QAAQ,oBAAoB;AAErC,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AA4HjC,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAG3E,QAAM,EAAE,YAAY,mBAAmB,IAAI,aAAa,UAAU;AAClE,QAAM,MAAM,gBAAgB,MAAM,UAAU;AAC5C,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAE3B,QAAM,WAAW,CAAC,OAAgB,WAChC,gBAAgB,gBAAgB,OAAO,MAAM,GAAG,OAAO,MAAM;AAE/D,QAAM,aAAa,CAAC,UAAoC;AACtD,UAAM,OAAO,OAAO,KAAK;AACzB,QAAI,CAAC,KAAM,QAAO;AAClB,QAAI,iBAAkB,QAAO,iBAAiB,IAAI;AAClD,UAAM,QAAQ,mBAAmB,MAAM,EAAE,mBAAmB,GAAG,eAAe,SAAS,CAAC;AAGxF,WAAO,UAAU,WAAW,MAAM,QAAQ,IAAI,IAAI,IAAI,IAAI;AAAA,EAC5D;AAEA,QAAM,oBAAoB,MAAM;AAC9B,eAAW,IAAI;AAEf,WAAO,OAAO,mBAAmB,EAAE,MAAM,CAAC,UAAmB;AAC3D,UAAI,QAAQ,QAAS,YAAW,SAAS,OAAO,qBAAqB,CAAC;AACtE,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,CAAC,OAAW;AACzB,QAAI,CAAC,YAAY,WAAW,KAAM;AAClC,cAAU,EAAE;AACZ,eAAW,IAAI;AACf,WAAO,MAAM,SAAS,EAAE,CAAC,EAAE;AAAA,MACzB,MAAM;AACJ,YAAI,QAAQ,QAAS,WAAU,IAAI;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,kBAAU,IAAI;AACd,mBAAW,SAAS,OAAO,QAAQ,CAAC;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,aAAa,UAAa;AAE3C,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAmB,iBAAO,OAAM;AAAA,MACjC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,OAC9D;AAAA,IACC,aACE,WAAW,aAAa,SACvB,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,SAAS,WAAW,IACtB,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,OAAM,IAEpD,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,0BACpC,mBAAS,IAAI,CAAC,YAAY;AACzB,YAAM,SAAS,QAAQ,QAAQ,KAAK,KAAK,OAAO;AAChD,YAAM,OAAO,WAAW,QAAQ,YAAY;AAC5C,YAAM,KAAK,QAAQ,IAAI,KAAK;AAC5B,aACE;AAAA,QAAC;AAAA;AAAA,UAEC,mBAAiB,OAAO,QAAQ,EAAE;AAAA,UAClC,gBAAc,QAAQ,WAAW;AAAA,UACjC,WAAU;AAAA,UAEV;AAAA,gCAAC,qBAAkB,eAAW,MAAC,WAAU,8BAA6B;AAAA,YACtE,qBAAC,SAAI,WAAU,kBACb;AAAA,mCAAC,SAAI,WAAU,+CACb;AAAA,oCAAC,UAAK,WAAU,2CAA2C,kBAAO;AAAA,gBACjE,QAAQ,WACP,oBAAC,QAAK,MAAK,MAAK,MAAK,SAClB,iBAAO,SACV;AAAA,iBAEJ;AAAA,eACE,QAAQ,OACR,qBAAC,SAAI,WAAW,wBACb;AAAA,wBAAQ,OAAO,WAAW,IAAI;AAAA,gBAC9B,QAAQ,MAAM;AAAA,gBAEd,MAAM,oBAAC,UAAK,KAAI,OAAO,iBAAO,GAAG,EAAE,GAAE;AAAA,iBACxC;AAAA,eAEJ;AAAA,YACC,YAAY,CAAC,QAAQ,WACpB;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,QAAQ;AAAA,gBACR,SAAS,WAAW,QAAQ;AAAA,gBAC5B,UAAU,WAAW,QAAQ,WAAW,QAAQ;AAAA,gBAChD,cAAY,OAAO,WAAW,MAAM;AAAA,gBACpC,SAAS,MAAM,OAAO,QAAQ,EAAE;AAAA,gBAE/B,iBAAO;AAAA;AAAA,YACV;AAAA;AAAA;AAAA,QApCG,QAAQ;AAAA,MAsCf;AAAA,IAEJ,CAAC,GACH;AAAA,IAEJ;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,QAAQ;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO;AAAA,QACrB,WAAW;AAAA;AAAA,IACb;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}

package/dist/admin/admin-action-confirm.js

@@ -11,11 +11,9 @@ import { Button } from "../components/button.js";
 import { authErrorCode } from "../auth/auth-errors.js";
 import { usePersonLabel } from "./admin-parts.js";
 import { hasContent } from "../lib/presence.js";
+import { isThenable } from "../lib/thenable.js";
 import { isGroupTarget } from "./admin-action-log.js";
 import { DEFAULT_ADMIN_ACTION_LABELS } from "./admin-action-confirm-labels.js";
-function isThenable(value) {
-  return typeof value === "object" && value !== null && typeof value.then === "function";
-}
 function refusalOf(error, present, describeError, labels) {
   if (!present) return null;
   const code = authErrorCode(error);