@eifi1/ui-kit 0.53.0 → 0.55.0

package/dist/admin/plan-change.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/admin/plan-change.tsx"],"sourcesContent":["import { isValidElement, useCallback, useMemo, useState } from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { pluralForm } from \"../i18n/plurals\";\nimport type { PluralForms } from \"../i18n/plurals\";\nimport { formatNumber, EMPTY_FORMATTED_VALUE } from \"../lib/format\";\nimport { toLocalIso } from \"../lib/dates\";\nimport type { DataTableColumn } from \"../components/data-table\";\nimport { DatePicker } from \"../components/date-picker\";\nimport { Tooltip } from \"../components/tooltip\";\nimport { Select } from \"../components/select\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { useBillingLabels } from \"../billing/billing-labels\";\nimport type { SubscriptionStatus } from \"../billing/billing-labels\";\nimport { SubscriptionStatusChip } from \"../billing/subscription-status-chip\";\nimport { AdminActionConfirm } from \"./admin-action-confirm\";\nimport type { AdminActionConfirmValues } from \"./admin-action-confirm\";\nimport { personLabel, useDayText } from \"./admin-parts\";\nimport type { AdminPerson, MaybePromise } from \"./admin-parts\";\nimport { DEFAULT_PLAN_CHANGE_LABELS } from \"../billing/plan-change-labels\";\nimport type { PlanChangeLabels } from \"../billing/plan-change-labels\";\n\n/**\n * The operator's plan parts (docs/billing-harmonization.md §14.12, decision 27):\n * {@link planColumn} for the roster or the companies list, {@link PlanChangeConfirm}\n * for the grant, and {@link usePlanChangeResult} for what the answer says.\n *\n * All three apps have the route (`POST /admin/users/{id}/plan`, kastlan's\n * `POST /platform/companies/{id}/plan`) and server-kit's `PlanChangeRequest` /\n * `PlanChangeResponse`; only keksdose had a UI (`users-panel.tsx`, `PlanConfirm` in\n * `user-admin-confirm.tsx`), and these are its parts, lifted. The plan names are the\n * app's (§3.1): every part takes `planName` or the plans with their names. The plan\n * codes come from `GET /admin/plans` (kastlan `GET /platform/plans`), which answers\n * whatever the billing switch says.\n */\n\n// The words and their type live in billing/plan-change-labels, which holds no component\n// code (0.34, KS U8): PlanSwitchConfirm reads them too, and billing importing admin while\n// this module imports billing made the two folders import each other (refactor audit\n// 2026-10-30, MOD-6).\nexport type { PlanChangeLabels };\nexport { DEFAULT_PLAN_CHANGE_LABELS };\n\n/** A plan code as the parts compare it: lowercase (§12.16 — an older row's \"FREE\" is\n *  the same plan as \"free\"), and no code at all as null. */\nfunction codeOf(raw: string | null | undefined): string | null {\n  const code = (raw ?? \"\").trim().toLowerCase();\n  return code === \"\" ? null : code;\n}\n\n/* ── The column ────────────────────────────────────────────────────────────── */\n\n/** What a row's usage is, for the line under its plan: \"1/5\" — and since 0.34 what\n *  {@link PlanChangeConfirm}'s `usage` takes, for the same sentence in the dialog. */\nexport interface PlanColumnUsage {\n  used: number;\n  /** The plan's limit for it; `null` (unlimited, or none known): no line. */\n  limit: number | null;\n  /**\n   * The app's word for what is counted, as it reads after a number: \"budgets\" in \"1 of 5\n   * budgets\" — the word in a sentence, not a heading's \"Budgets\".\n   *\n   * Its plural forms (0.33.1, keksdose): `{ one: \"budget\", other: \"budgets\" }` — your\n   * catalogue's `_one` / `_other` pair, any CLDR category allowed, `other` for the rest\n   * ({@link PluralForms}). The column picks the form for the limit in the provider's\n   * locale, so a plan of one reads \"1 of 1 budget\". A plain string is used as it is,\n   * whatever the count.\n   */\n  label: string | PluralForms;\n}\n\nexport interface PlanColumnOptions<T> {\n  /** The column's key. Default `\"plan\"`. */\n  key?: string;\n  /** The row's plan code, read without case (§12.16); null for none. */\n  plan: (row: T) => string | null;\n  /** The plan's display name, the app's (§3.1). Gets the lowercase code. */\n  planName: (code: string) => string;\n  /** The row's standing, as a `SubscriptionStatusChip` beside the name. Left out, or\n   *  undefined for a row: no chip — billing off, where a status says nothing. */\n  status?: (row: T) => SubscriptionStatus | undefined;\n  /** The row's usage of its plan's limit: \"1/5\" under the name, \"1 of 5 budgets\" in\n   *  the tooltip (`planChange.usageOf`, with the label's form for the limit). Undefined\n   *  for a row, or a `null` limit: no line. */\n  usage?: (row: T) => PlanColumnUsage | undefined;\n  /** A select filter over these codes, each named by `planName`. Left out: none. */\n  filterPlans?: readonly string[];\n  /**\n   * The sort. Default: by the plan code (keksdose's, `users-panel.tsx:739`). A function:\n   * by its value — the catalogue's `sort` for rank order. `false`: not sortable.\n   *\n   * Client-side only, as every column's `sortBy`: a `DataTable` with `serverPagination`\n   * holds one page, so it sorts nothing itself — with `onSortsChange` it reports the\n   * column's `key` (default `\"plan\"`), and your server orders the rows by it.\n   */\n  sortBy?: false | ((row: T) => string | number | null | undefined);\n  /** The header's text. Default `planChange.column`. */\n  headerText?: string;\n  /** The words, already resolved. Default English; {@link usePlanColumn} reads the\n   *  provider's `planChange` namespace. */\n  labels?: LabelOverride<PlanChangeLabels>;\n}\n\n/**\n * A usage spelled out — `planChange.usageOf` with the figures in `locale` and the word in\n * the form the limit takes: \"1 of 1 budget\", \"Budgets: 1 von 5\". The column's tooltip\n * and the grant dialog's line both read it, so the rule lives once (round 0.34 C15).\n */\nfunction usageSentence(\n  usage: PlanColumnUsage & { limit: number },\n  usageOf: PlanChangeLabels[\"usageOf\"],\n  locale: string | undefined,\n): string {\n  const figure = (value: number) => formatNumber(value, { locale });\n  const word = typeof usage.label === \"string\" ? usage.label : pluralForm(usage.limit, usage.label, locale);\n  return usageOf(figure(usage.used), figure(usage.limit), word);\n}\n\n/** The cell: a component, so the figures follow the provider's locale. */\nfunction PlanCell({\n  code,\n  name,\n  status,\n  usage,\n  usageOf,\n}: {\n  code: string | null;\n  name: string;\n  status: SubscriptionStatus | undefined;\n  usage: PlanColumnUsage | undefined;\n  usageOf: PlanChangeLabels[\"usageOf\"];\n}) {\n  const locale = useKitLocale();\n  const figure = (value: number) => formatNumber(value, { locale });\n  return (\n    <div className=\"whitespace-nowrap\" data-plan={code ?? undefined}>\n      <div className=\"flex items-center gap-1.5\">\n        <span className={code ? \"font-medium\" : \"text-muted\"}>{name}</span>\n        {/* The standing at a glance (§6): the kit's word and tone, never colour alone. */}\n        {status !== undefined && <SubscriptionStatusChip status={status} size=\"xs\" />}\n      </div>\n      {usage && usage.limit !== null && (\n        // \"1/5\" under the plan, \"1 of 5 budgets\" in the tooltip: the sentence spelled out\n        // inline was the widest thing in keksdose's table.\n        <Tooltip label={usageSentence({ ...usage, limit: usage.limit }, usageOf, locale)}>\n          <span className=\"block text-xs tabular-nums text-muted\">\n            {figure(usage.used)}/{figure(usage.limit)}\n          </span>\n        </Tooltip>\n      )}\n    </div>\n  );\n}\n\n/**\n * The roster's (or the companies list's) plan column: the plan's display name, the\n * standing chip beside it while billing is on, and the usage under it — keksdose's\n * column, `users-panel.tsx:706-745`. Pass it in `userRosterColumns`' `extra`, or in\n * any `DataTable`'s columns:\n *\n *     extra: [planColumn<AdminUserRow>({\n *       plan: (u) => u.plan,\n *       planName,\n *       status: billingOn ? (u) => u.subscription?.status : undefined,\n *       usage: (u) => ({\n *         used: u.budgets_owned,\n *         limit: u.limits.budgets,\n *         label: { one: t(\"planUsage.budget_one\"), other: t(\"planUsage.budget_other\") },\n *       }),\n *       filterPlans: plans.map((p) => p.code),\n *     })]\n *\n * Pure: hand it resolved words, or use {@link usePlanColumn}.\n */\nexport function planColumn<T>(options: PlanColumnOptions<T>): DataTableColumn<T> {\n  const { key = \"plan\", plan, planName, status, usage, filterPlans, sortBy, headerText, labels: labelsProp } = options;\n  const labels: PlanChangeLabels = { ...DEFAULT_PLAN_CHANGE_LABELS, ...labelsProp };\n  const header = headerText ?? labels.column;\n  const nameOf = (code: string | null) => (code ? planName(code) : EMPTY_FORMATTED_VALUE);\n  return {\n    key,\n    header,\n    headerText: header,\n    cell: (row) => {\n      const code = codeOf(plan(row));\n      return (\n        <PlanCell\n          code={code}\n          name={nameOf(code)}\n          status={status?.(row)}\n          usage={usage?.(row)}\n          usageOf={labels.usageOf}\n        />\n      );\n    },\n    sortBy: sortBy === false ? undefined : (sortBy ?? ((row) => codeOf(plan(row)) ?? \"\")),\n    filter: filterPlans\n      ? {\n          type: \"select\",\n          getValue: (row) => codeOf(plan(row)) ?? \"\",\n          options: [...new Set(filterPlans.map((code) => codeOf(code)).filter((code) => code !== null))].map(\n            (code) => ({ value: code, label: planName(code) }),\n          ),\n        }\n      : undefined,\n  };\n}\n\n/**\n * {@link planColumn} with the `planChange` words from the provider, memoised on the\n * options — pass stable callbacks (`useCallback`), or the column is rebuilt on every\n * render.\n */\nexport function usePlanColumn<T>(options: PlanColumnOptions<T>): DataTableColumn<T> {\n  const { key, plan, planName, status, usage, filterPlans, sortBy, headerText, labels: labelsProp } = options;\n  const labels = useKitLabels(\"planChange\", DEFAULT_PLAN_CHANGE_LABELS, labelsProp);\n  return useMemo(\n    () => planColumn<T>({ key, plan, planName, status, usage, filterPlans, sortBy, headerText, labels }),\n    [key, plan, planName, status, usage, filterPlans, sortBy, headerText, labels],\n  );\n}\n\n/* ── The grant ─────────────────────────────────────────────────────────────── */\n\n/** What {@link PlanChangeConfirmProps.onConfirm} sends: server-kit's\n *  `PlanChangeRequest` without its `acknowledged`, which comes in `values`. */\nexport interface PlanChange {\n  /** The picked plan's code. */\n  plan: string;\n  /** The end of the free grant, as ISO UTC — only when one was picked. */\n  comped_until?: string;\n}\n\nexport interface PlanChangeConfirmProps {\n  /**\n   * Whom it is about — a user (`AdminActionTarget`), or kastlan's company, which has no\n   * address: its name is said instead (the level is `acknowledge`, so nothing is typed).\n   */\n  target: AdminPerson & { email?: string | null };\n  /** The plans to offer, in the catalogue's order, by their display names (§3.1) — from\n   *  `GET /admin/plans`. */\n  plans: readonly { code: string; name: string }[];\n  /** The account's plan now; null for none. The select opens on it. */\n  current: string | null;\n  /**\n   * What the account uses. The column's shape (0.34, keksdose N1) — `{ used, limit, label }`,\n   * the label a word or its plural forms — is spelled out as the column's tooltip is\n   * (`planChange.usageOf`, the word in the limit's form: \"1 of 1 budget\"); a `null` limit\n   * gives no line. Or the app's own sentence, as it is: \"3 of 5 budgets\".\n   */\n  usage?: PlanColumnUsage | ReactNode;\n  /** Offer \"Free until\" — only meaningful while billing is on, where a grant's end\n   *  means something to the payer. */\n  grantEnd?: boolean;\n  /**\n   * Sends it: `{plan}`, and `comped_until` only when an end was picked — the END of the\n   * picked day in the operator's time zone, as ISO UTC (a grant \"until 31 January\" lasts\n   * through it). No end: a grant without one, or on a running beta only the plan moves\n   * and the beta keeps its own end (§12.34). `values.acknowledged` is the body's\n   * `acknowledged`. A promise is handled as `AdminActionConfirm`'s.\n   */\n  onConfirm: (change: PlanChange, values: AdminActionConfirmValues) => MaybePromise;\n  onClose: (done: boolean) => void;\n  /** The app's words for a failure the kit has no code for. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: LabelOverride<PlanChangeLabels>;\n}\n\n/** The column's usage shape, told from a node: a plain object with the three fields. */\nfunction isPlanUsage(value: PlanChangeConfirmProps[\"usage\"]): value is PlanColumnUsage {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    !isValidElement(value) &&\n    \"used\" in value &&\n    \"limit\" in value &&\n    \"label\" in value\n  );\n}\n\n/** The end of the day `date` (YYYY-MM-DD) names, in this device's time zone, as ISO\n *  UTC — keksdose's `endOfDay` (`user-admin-confirm.tsx:44-46`). */\nfunction endOfDay(date: string): string {\n  return new Date(`${date}T23:59:59`).toISOString();\n}\n\n/**\n * An operator's plan change (§14.12): `AdminActionConfirm` at `acknowledge`, the line\n * with the current plan and the app's usage sentence, a plan select, and — with\n * `grantEnd` — the end of a free grant. The confirm is held while nothing would change.\n *\n * Exempt from a BILLING lock, built in (`COMMIT_EXCEPT_BILLING`, §12.36): a plan change\n * is an admin route (§12.13), and the operator's own account or company may be lapsed —\n * kastlan's review. A demo lock still holds it.\n */\nexport function PlanChangeConfirm({\n  target,\n  plans,\n  current: currentProp,\n  usage,\n  grantEnd = false,\n  onConfirm,\n  onClose,\n  describeError,\n  labels: labelsProp,\n}: PlanChangeConfirmProps) {\n  const labels = useKitLabels(\"planChange\", DEFAULT_PLAN_CHANGE_LABELS, labelsProp);\n  const locale = useKitLocale();\n  // Seeded from the account, so the picker opens on the truth and confirming without\n  // touching it is held rather than a silent free → free in the audit.\n  const current = codeOf(currentProp);\n  const [plan, setPlan] = useState(current ?? \"\");\n  const [until, setUntil] = useState(\"\");\n  // A grant ends today at the earliest; read once, not on every render.\n  const [today] = useState(() => toLocalIso(new Date()));\n  const options = plans.map((p) => ({ code: codeOf(p.code) ?? p.code, name: p.name }));\n  const nameOf = (code: string) => options.find((p) => p.code === code)?.name ?? code;\n  // An account on a plan the catalogue no longer lists still opens on it.\n  if (current && !options.some((p) => p.code === current)) options.unshift({ code: current, name: current });\n  const unchanged = plan === \"\" || (plan === current && !until);\n  // A company has no address: the dialog says its name in the address's place.\n  const who = { ...target, email: target.email || personLabel(target, locale) };\n  // The column's shape in the column's sentence; the app's own sentence as it is.\n  const usageLine: ReactNode | undefined = isPlanUsage(usage)\n    ? usage.limit === null\n      ? undefined\n      : usageSentence({ ...usage, limit: usage.limit }, labels.usageOf, locale)\n    : usage;\n\n  return (\n    <AdminActionConfirm\n      level=\"acknowledge\"\n      tone=\"warning\"\n      target={who}\n      title={labels.title}\n      confirmLabel={labels.confirm}\n      confirmDisabledReason={unchanged ? labels.needsChange : undefined}\n      describeError={describeError}\n      commit={COMMIT_EXCEPT_BILLING}\n      onConfirm={(values) => onConfirm({ plan, ...(until ? { comped_until: endOfDay(until) } : {}) }, values)}\n      onClose={onClose}\n    >\n      {(current !== null || usageLine !== undefined) && (\n        <div className=\"space-y-0.5 text-xs text-muted\" data-plan-current={current ?? undefined}>\n          {current !== null && <p>{labels.current(nameOf(current))}</p>}\n          {usageLine !== undefined && <p>{usageLine}</p>}\n        </div>\n      )}\n      <Select label={labels.plan} hint={labels.keepsItems} value={plan} onChange={(e) => setPlan(e.target.value)}>\n        {plan === \"\" && (\n          <option value=\"\" disabled>\n            {EMPTY_FORMATTED_VALUE}\n          </option>\n        )}\n        {options.map((option) => (\n          <option key={option.code} value={option.code}>\n            {option.name}\n          </option>\n        ))}\n      </Select>\n      {grantEnd && (\n        <DatePicker\n          label={labels.until}\n          hint={labels.untilHint}\n          value={until}\n          onChange={setUntil}\n          min={today}\n          clearable\n        />\n      )}\n    </AdminActionConfirm>\n  );\n}\n\n/* ── The answer ────────────────────────────────────────────────────────────── */\n\n/**\n * A `PlanChangeResponse` as the page reads it — server-kit 0.7's (§14.12), which gained\n * `previous_plan` nullable, `usage`, `kept_beta` and `comped_until`.\n */\nexport interface PlanChangeOutcome {\n  /** null: the account had no subscription. */\n  previous_plan: string | null;\n  plan: string;\n  over_limit: boolean;\n  /** The new plan's limits; null for unlimited. */\n  limits: Readonly<Record<string, number | null>>;\n  /** What the payer has, per dimension — the figures for the over-limit lines:\n   *  `{ budgets: 7 }`. */\n  usage: Readonly<Record<string, number>>;\n  /** A running beta kept its own end (§12.34). */\n  kept_beta?: boolean;\n  /** The grant's end as the change wrote it; null: no end, or no grant. */\n  comped_until?: string | null;\n}\n\n/** A line's tone: the app's toast kind. */\nexport type PlanChangeTone = \"success\" | \"info\" | \"warning\";\n\nexport interface PlanChangeLine {\n  tone: PlanChangeTone;\n  text: string;\n}\n\nexport interface PlanChangeResultOptions {\n  /** The app's word per dimension, for the over-limit figures: `{ budgets: \"Budgets\" }`.\n   *  A dimension without one is named by its key. */\n  dimensionLabels?: Readonly<Record<string, string>>;\n  /** How a figure is written. Default: a number in the kit's locale. */\n  formatValue?: (dimension: string, value: number) => string;\n}\n\n/**\n * The lines for a plan change's answer, each with its tone, for the app's toasts —\n * echoing the SERVER's before and after, not what was picked: a toast that reported the\n * request would say \"done\" to a write that landed differently (keksdose's rule).\n *\n *     const lines = usePlanChangeResult();\n *     for (const line of lines(res, planName)) toast[line.tone](line.text);\n *\n * - `changed(from, to)`, or `set(to)` with no previous plan (or the same one): success;\n * - a running beta that kept its end: `keptBeta`, info; else a grant's end:\n *   `untilDone(date)`, success;\n * - over the new limit: `overLimit`, then one figure line per dimension over it (\"Budgets:\n *   7 of 5\", `billing.limitUsageLine`), from `usage` and `limits`: warning. A `null`\n *   limit gives no figure line.\n */\nexport function usePlanChangeResult(): (\n  res: PlanChangeOutcome,\n  planName: (code: string) => string,\n  options?: PlanChangeResultOptions,\n) => PlanChangeLine[] {\n  const labels = useKitLabels(\"planChange\", DEFAULT_PLAN_CHANGE_LABELS);\n  const billing = useBillingLabels();\n  const locale = useKitLocale();\n  const dayText = useDayText();\n  return useCallback(\n    (res, planName, options = {}) => {\n      const { dimensionLabels, formatValue } = options;\n      const name = (raw: string) => planName(codeOf(raw) ?? raw);\n      const to = name(res.plan);\n      const from = codeOf(res.previous_plan);\n      const lines: PlanChangeLine[] = [\n        {\n          tone: \"success\",\n          text: from !== null && from !== codeOf(res.plan) ? labels.changed(name(from), to) : labels.set(to),\n        },\n      ];\n      if (res.kept_beta) lines.push({ tone: \"info\", text: labels.keptBeta });\n      else if (res.comped_until) lines.push({ tone: \"success\", text: labels.untilDone(dayText(res.comped_until)) });\n      if (res.over_limit) {\n        lines.push({ tone: \"warning\", text: labels.overLimit });\n        const figure = (dimension: string, value: number) =>\n          formatValue ? formatValue(dimension, value) : formatNumber(value, { locale });\n        // Read defensively: an app's server from before 0.7 sent neither.\n        for (const [dimension, limit] of Object.entries(res.limits ?? {})) {\n          const used = res.usage?.[dimension];\n          if (limit === null || used === undefined || used <= limit) continue;\n          lines.push({\n            tone: \"warning\",\n            text: billing.limitUsageLine(\n              dimensionLabels?.[dimension] ?? dimension,\n              figure(dimension, used),\n              figure(dimension, limit),\n            ),\n          });\n        }\n      }\n      return lines;\n    },\n    [labels, billing, locale, dayText],\n  );\n}\n"],"mappings":";AAyIM,SACE,KADF;AAzIN,SAAS,gBAAgB,aAAa,SAAS,gBAAgB;AAG/D,SAAS,cAAc,oBAAwC;AAC/D,SAAS,kBAAkB;AAE3B,SAAS,cAAc,6BAA6B;AACpD,SAAS,kBAAkB;AAE3B,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AAEjC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AAEnC,SAAS,aAAa,kBAAkB;AAExC,SAAS,kCAAkC;AA0B3C,SAAS,OAAO,KAA+C;AAC7D,QAAM,QAAQ,OAAO,IAAI,KAAK,EAAE,YAAY;AAC5C,SAAO,SAAS,KAAK,OAAO;AAC9B;AA4DA,SAAS,cACP,OACA,SACA,QACQ;AACR,QAAM,SAAS,CAAC,UAAkB,aAAa,OAAO,EAAE,OAAO,CAAC;AAChE,QAAM,OAAO,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ,WAAW,MAAM,OAAO,MAAM,OAAO,MAAM;AACxG,SAAO,QAAQ,OAAO,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,GAAG,IAAI;AAC9D;AAGA,SAAS,SAAS;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMG;AACD,QAAM,SAAS,aAAa;AAC5B,QAAM,SAAS,CAAC,UAAkB,aAAa,OAAO,EAAE,OAAO,CAAC;AAChE,SACE,qBAAC,SAAI,WAAU,qBAAoB,aAAW,QAAQ,QACpD;AAAA,yBAAC,SAAI,WAAU,6BACb;AAAA,0BAAC,UAAK,WAAW,OAAO,gBAAgB,cAAe,gBAAK;AAAA,MAE3D,WAAW,UAAa,oBAAC,0BAAuB,QAAgB,MAAK,MAAK;AAAA,OAC7E;AAAA,IACC,SAAS,MAAM,UAAU;AAAA;AAAA,IAGxB,oBAAC,WAAQ,OAAO,cAAc,EAAE,GAAG,OAAO,OAAO,MAAM,MAAM,GAAG,SAAS,MAAM,GAC7E,+BAAC,UAAK,WAAU,yCACb;AAAA,aAAO,MAAM,IAAI;AAAA,MAAE;AAAA,MAAE,OAAO,MAAM,KAAK;AAAA,OAC1C,GACF;AAAA,KAEJ;AAEJ;AAsBO,SAAS,WAAc,SAAmD;AAC/E,QAAM,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,aAAa,QAAQ,YAAY,QAAQ,WAAW,IAAI;AAC7G,QAAM,SAA2B,EAAE,GAAG,4BAA4B,GAAG,WAAW;AAChF,QAAM,SAAS,cAAc,OAAO;AACpC,QAAM,SAAS,CAAC,SAAyB,OAAO,SAAS,IAAI,IAAI;AACjE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,MAAM,CAAC,QAAQ;AACb,YAAM,OAAO,OAAO,KAAK,GAAG,CAAC;AAC7B,aACE;AAAA,QAAC;AAAA;AAAA,UACC;AAAA,UACA,MAAM,OAAO,IAAI;AAAA,UACjB,QAAQ,SAAS,GAAG;AAAA,UACpB,OAAO,QAAQ,GAAG;AAAA,UAClB,SAAS,OAAO;AAAA;AAAA,MAClB;AAAA,IAEJ;AAAA,IACA,QAAQ,WAAW,QAAQ,SAAa,WAAW,CAAC,QAAQ,OAAO,KAAK,GAAG,CAAC,KAAK;AAAA,IACjF,QAAQ,cACJ;AAAA,MACE,MAAM;AAAA,MACN,UAAU,CAAC,QAAQ,OAAO,KAAK,GAAG,CAAC,KAAK;AAAA,MACxC,SAAS,CAAC,GAAG,IAAI,IAAI,YAAY,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,SAAS,IAAI,CAAC,CAAC,EAAE;AAAA,QAC7F,CAAC,UAAU,EAAE,OAAO,MAAM,OAAO,SAAS,IAAI,EAAE;AAAA,MAClD;AAAA,IACF,IACA;AAAA,EACN;AACF;AAOO,SAAS,cAAiB,SAAmD;AAClF,QAAM,EAAE,KAAK,MAAM,UAAU,QAAQ,OAAO,aAAa,QAAQ,YAAY,QAAQ,WAAW,IAAI;AACpG,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,SAAO;AAAA,IACL,MAAM,WAAc,EAAE,KAAK,MAAM,UAAU,QAAQ,OAAO,aAAa,QAAQ,YAAY,OAAO,CAAC;AAAA,IACnG,CAAC,KAAK,MAAM,UAAU,QAAQ,OAAO,aAAa,QAAQ,YAAY,MAAM;AAAA,EAC9E;AACF;AAiDA,SAAS,YAAY,OAAkE;AACrF,SACE,OAAO,UAAU,YACjB,UAAU,QACV,CAAC,eAAe,KAAK,KACrB,UAAU,SACV,WAAW,SACX,WAAW;AAEf;AAIA,SAAS,SAAS,MAAsB;AACtC,UAAO,oBAAI,KAAK,GAAG,IAAI,WAAW,GAAE,YAAY;AAClD;AAWO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAA2B;AACzB,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,QAAM,SAAS,aAAa;AAG5B,QAAM,UAAU,OAAO,WAAW;AAClC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,WAAW,EAAE;AAC9C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AAErC,QAAM,CAAC,KAAK,IAAI,SAAS,MAAM,WAAW,oBAAI,KAAK,CAAC,CAAC;AACrD,QAAM,UAAU,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,OAAO,EAAE,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,KAAK,EAAE;AACnF,QAAM,SAAS,CAAC,SAAiB,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,GAAG,QAAQ;AAE/E,MAAI,WAAW,CAAC,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,OAAO,EAAG,SAAQ,QAAQ,EAAE,MAAM,SAAS,MAAM,QAAQ,CAAC;AACzG,QAAM,YAAY,SAAS,MAAO,SAAS,WAAW,CAAC;AAEvD,QAAM,MAAM,EAAE,GAAG,QAAQ,OAAO,OAAO,SAAS,YAAY,QAAQ,MAAM,EAAE;AAE5E,QAAM,YAAmC,YAAY,KAAK,IACtD,MAAM,UAAU,OACd,SACA,cAAc,EAAE,GAAG,OAAO,OAAO,MAAM,MAAM,GAAG,OAAO,SAAS,MAAM,IACxE;AAEJ,SACE;AAAA,IAAC;AAAA;AAAA,MACC,OAAM;AAAA,MACN,MAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,OAAO;AAAA,MACd,cAAc,OAAO;AAAA,MACrB,uBAAuB,YAAY,OAAO,cAAc;AAAA,MACxD;AAAA,MACA,QAAQ;AAAA,MACR,WAAW,CAAC,WAAW,UAAU,EAAE,MAAM,GAAI,QAAQ,EAAE,cAAc,SAAS,KAAK,EAAE,IAAI,CAAC,EAAG,GAAG,MAAM;AAAA,MACtG;AAAA,MAEE;AAAA,qBAAY,QAAQ,cAAc,WAClC,qBAAC,SAAI,WAAU,kCAAiC,qBAAmB,WAAW,QAC3E;AAAA,sBAAY,QAAQ,oBAAC,OAAG,iBAAO,QAAQ,OAAO,OAAO,CAAC,GAAE;AAAA,UACxD,cAAc,UAAa,oBAAC,OAAG,qBAAU;AAAA,WAC5C;AAAA,QAEF,qBAAC,UAAO,OAAO,OAAO,MAAM,MAAM,OAAO,YAAY,OAAO,MAAM,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK,GACtG;AAAA,mBAAS,MACR,oBAAC,YAAO,OAAM,IAAG,UAAQ,MACtB,iCACH;AAAA,UAED,QAAQ,IAAI,CAAC,WACZ,oBAAC,YAAyB,OAAO,OAAO,MACrC,iBAAO,QADG,OAAO,IAEpB,CACD;AAAA,WACH;AAAA,QACC,YACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,MAAM,OAAO;AAAA,YACb,OAAO;AAAA,YACP,UAAU;AAAA,YACV,KAAK;AAAA,YACL,WAAS;AAAA;AAAA,QACX;AAAA;AAAA;AAAA,EAEJ;AAEJ;AAuDO,SAAS,sBAIM;AACpB,QAAM,SAAS,aAAa,cAAc,0BAA0B;AACpE,QAAM,UAAU,iBAAiB;AACjC,QAAM,SAAS,aAAa;AAC5B,QAAM,UAAU,WAAW;AAC3B,SAAO;AAAA,IACL,CAAC,KAAK,UAAU,UAAU,CAAC,MAAM;AAC/B,YAAM,EAAE,iBAAiB,YAAY,IAAI;AACzC,YAAM,OAAO,CAAC,QAAgB,SAAS,OAAO,GAAG,KAAK,GAAG;AACzD,YAAM,KAAK,KAAK,IAAI,IAAI;AACxB,YAAM,OAAO,OAAO,IAAI,aAAa;AACrC,YAAM,QAA0B;AAAA,QAC9B;AAAA,UACE,MAAM;AAAA,UACN,MAAM,SAAS,QAAQ,SAAS,OAAO,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,IAAI,GAAG,EAAE,IAAI,OAAO,IAAI,EAAE;AAAA,QACnG;AAAA,MACF;AACA,UAAI,IAAI,UAAW,OAAM,KAAK,EAAE,MAAM,QAAQ,MAAM,OAAO,SAAS,CAAC;AAAA,eAC5D,IAAI,aAAc,OAAM,KAAK,EAAE,MAAM,WAAW,MAAM,OAAO,UAAU,QAAQ,IAAI,YAAY,CAAC,EAAE,CAAC;AAC5G,UAAI,IAAI,YAAY;AAClB,cAAM,KAAK,EAAE,MAAM,WAAW,MAAM,OAAO,UAAU,CAAC;AACtD,cAAM,SAAS,CAAC,WAAmB,UACjC,cAAc,YAAY,WAAW,KAAK,IAAI,aAAa,OAAO,EAAE,OAAO,CAAC;AAE9E,mBAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,IAAI,UAAU,CAAC,CAAC,GAAG;AACjE,gBAAM,OAAO,IAAI,QAAQ,SAAS;AAClC,cAAI,UAAU,QAAQ,SAAS,UAAa,QAAQ,MAAO;AAC3D,gBAAM,KAAK;AAAA,YACT,MAAM;AAAA,YACN,MAAM,QAAQ;AAAA,cACZ,kBAAkB,SAAS,KAAK;AAAA,cAChC,OAAO,WAAW,IAAI;AAAA,cACtB,OAAO,WAAW,KAAK;AAAA,YACzB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,CAAC,QAAQ,SAAS,QAAQ,OAAO;AAAA,EACnC;AACF;","names":[]}
+{"version":3,"sources":["../../src/admin/plan-change.tsx"],"sourcesContent":["import { isValidElement, useCallback, useMemo, useState } from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { pluralForm } from \"../i18n/plurals\";\nimport type { PluralForms } from \"../i18n/plurals\";\nimport { formatNumber, EMPTY_FORMATTED_VALUE } from \"../lib/format\";\nimport { todayIso } from \"../lib/dates\";\nimport type { DataTableColumn } from \"../components/data-table\";\nimport { DatePicker } from \"../components/date-picker\";\nimport { Tooltip } from \"../components/tooltip\";\nimport { Select } from \"../components/select\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { useBillingLabels } from \"../billing/billing-labels\";\nimport type { SubscriptionStatus } from \"../billing/billing-labels\";\nimport { SubscriptionStatusChip } from \"../billing/subscription-status-chip\";\nimport { AdminActionConfirm } from \"./admin-action-confirm\";\nimport type { AdminActionConfirmValues } from \"./admin-action-confirm\";\nimport { personLabel, useDayText } from \"./admin-parts\";\nimport type { AdminPerson, MaybePromise } from \"./admin-parts\";\nimport { DEFAULT_PLAN_CHANGE_LABELS } from \"../billing/plan-change-labels\";\nimport type { PlanChangeLabels } from \"../billing/plan-change-labels\";\n\n/**\n * The operator's plan parts (docs/billing-harmonization.md §14.12, decision 27):\n * {@link planColumn} for the roster or the companies list, {@link PlanChangeConfirm}\n * for the grant, and {@link usePlanChangeResult} for what the answer says.\n *\n * All three apps have the route (`POST /admin/users/{id}/plan`, kastlan's\n * `POST /platform/companies/{id}/plan`) and server-kit's `PlanChangeRequest` /\n * `PlanChangeResponse`; only keksdose had a UI (`users-panel.tsx`, `PlanConfirm` in\n * `user-admin-confirm.tsx`), and these are its parts, lifted. The plan names are the\n * app's (§3.1): every part takes `planName` or the plans with their names. The plan\n * codes come from `GET /admin/plans` (kastlan `GET /platform/plans`), which answers\n * whatever the billing switch says.\n */\n\n// The words and their type live in billing/plan-change-labels, which holds no component\n// code (0.34, KS U8): PlanSwitchConfirm reads them too, and billing importing admin while\n// this module imports billing made the two folders import each other (refactor audit\n// 2026-10-30, MOD-6).\nexport type { PlanChangeLabels };\nexport { DEFAULT_PLAN_CHANGE_LABELS };\n\n/** A plan code as the parts compare it: lowercase (§12.16 — an older row's \"FREE\" is\n *  the same plan as \"free\"), and no code at all as null. */\nfunction codeOf(raw: string | null | undefined): string | null {\n  const code = (raw ?? \"\").trim().toLowerCase();\n  return code === \"\" ? null : code;\n}\n\n/* ── The column ────────────────────────────────────────────────────────────── */\n\n/** What a row's usage is, for the line under its plan: \"1/5\" — and since 0.34 what\n *  {@link PlanChangeConfirm}'s `usage` takes, for the same sentence in the dialog. */\nexport interface PlanColumnUsage {\n  used: number;\n  /** The plan's limit for it; `null` (unlimited, or none known): no line. */\n  limit: number | null;\n  /**\n   * The app's word for what is counted, as it reads after a number: \"budgets\" in \"1 of 5\n   * budgets\" — the word in a sentence, not a heading's \"Budgets\".\n   *\n   * Its plural forms (0.33.1, keksdose): `{ one: \"budget\", other: \"budgets\" }` — your\n   * catalogue's `_one` / `_other` pair, any CLDR category allowed, `other` for the rest\n   * ({@link PluralForms}). The column picks the form for the limit in the provider's\n   * locale, so a plan of one reads \"1 of 1 budget\". A plain string is used as it is,\n   * whatever the count.\n   */\n  label: string | PluralForms;\n}\n\nexport interface PlanColumnOptions<T> {\n  /** The column's key. Default `\"plan\"`. */\n  key?: string;\n  /** The row's plan code, read without case (§12.16); null for none. */\n  plan: (row: T) => string | null;\n  /** The plan's display name, the app's (§3.1). Gets the lowercase code. */\n  planName: (code: string) => string;\n  /** The row's standing, as a `SubscriptionStatusChip` beside the name. Left out, or\n   *  undefined for a row: no chip — billing off, where a status says nothing. */\n  status?: (row: T) => SubscriptionStatus | undefined;\n  /** The row's usage of its plan's limit: \"1/5\" under the name, \"1 of 5 budgets\" in\n   *  the tooltip (`planChange.usageOf`, with the label's form for the limit). Undefined\n   *  for a row, or a `null` limit: no line. */\n  usage?: (row: T) => PlanColumnUsage | undefined;\n  /** A select filter over these codes, each named by `planName`. Left out: none. */\n  filterPlans?: readonly string[];\n  /**\n   * The sort. Default: by the plan code (keksdose's, `users-panel.tsx:739`). A function:\n   * by its value — the catalogue's `sort` for rank order. `false`: not sortable.\n   *\n   * Client-side only, as every column's `sortBy`: a `DataTable` with `serverPagination`\n   * holds one page, so it sorts nothing itself — with `onSortsChange` it reports the\n   * column's `key` (default `\"plan\"`), and your server orders the rows by it.\n   */\n  sortBy?: false | ((row: T) => string | number | null | undefined);\n  /** The header's text. Default `planChange.column`. */\n  headerText?: string;\n  /** The words, already resolved. Default English; {@link usePlanColumn} reads the\n   *  provider's `planChange` namespace. */\n  labels?: LabelOverride<PlanChangeLabels>;\n}\n\n/**\n * A usage spelled out — `planChange.usageOf` with the figures in `locale` and the word in\n * the form the limit takes: \"1 of 1 budget\", \"Budgets: 1 von 5\". The column's tooltip\n * and the grant dialog's line both read it, so the rule lives once (round 0.34 C15).\n */\nfunction usageSentence(\n  usage: PlanColumnUsage & { limit: number },\n  usageOf: PlanChangeLabels[\"usageOf\"],\n  locale: string | undefined,\n): string {\n  const figure = (value: number) => formatNumber(value, { locale });\n  const word = typeof usage.label === \"string\" ? usage.label : pluralForm(usage.limit, usage.label, locale);\n  return usageOf(figure(usage.used), figure(usage.limit), word);\n}\n\n/** The cell: a component, so the figures follow the provider's locale. */\nfunction PlanCell({\n  code,\n  name,\n  status,\n  usage,\n  usageOf,\n}: {\n  code: string | null;\n  name: string;\n  status: SubscriptionStatus | undefined;\n  usage: PlanColumnUsage | undefined;\n  usageOf: PlanChangeLabels[\"usageOf\"];\n}) {\n  const locale = useKitLocale();\n  const figure = (value: number) => formatNumber(value, { locale });\n  return (\n    <div className=\"whitespace-nowrap\" data-plan={code ?? undefined}>\n      <div className=\"flex items-center gap-1.5\">\n        <span className={code ? \"font-medium\" : \"text-muted\"}>{name}</span>\n        {/* The standing at a glance (§6): the kit's word and tone, never colour alone. */}\n        {status !== undefined && <SubscriptionStatusChip status={status} size=\"xs\" />}\n      </div>\n      {usage && usage.limit !== null && (\n        // \"1/5\" under the plan, \"1 of 5 budgets\" in the tooltip: the sentence spelled out\n        // inline was the widest thing in keksdose's table.\n        <Tooltip label={usageSentence({ ...usage, limit: usage.limit }, usageOf, locale)}>\n          <span className=\"block text-xs tabular-nums text-muted\">\n            {figure(usage.used)}/{figure(usage.limit)}\n          </span>\n        </Tooltip>\n      )}\n    </div>\n  );\n}\n\n/**\n * The roster's (or the companies list's) plan column: the plan's display name, the\n * standing chip beside it while billing is on, and the usage under it — keksdose's\n * column, `users-panel.tsx:706-745`. Pass it in `userRosterColumns`' `extra`, or in\n * any `DataTable`'s columns:\n *\n *     extra: [planColumn<AdminUserRow>({\n *       plan: (u) => u.plan,\n *       planName,\n *       status: billingOn ? (u) => u.subscription?.status : undefined,\n *       usage: (u) => ({\n *         used: u.budgets_owned,\n *         limit: u.limits.budgets,\n *         label: { one: t(\"planUsage.budget_one\"), other: t(\"planUsage.budget_other\") },\n *       }),\n *       filterPlans: plans.map((p) => p.code),\n *     })]\n *\n * Pure: hand it resolved words, or use {@link usePlanColumn}.\n */\nexport function planColumn<T>(options: PlanColumnOptions<T>): DataTableColumn<T> {\n  const { key = \"plan\", plan, planName, status, usage, filterPlans, sortBy, headerText, labels: labelsProp } = options;\n  const labels: PlanChangeLabels = { ...DEFAULT_PLAN_CHANGE_LABELS, ...labelsProp };\n  const header = headerText ?? labels.column;\n  const nameOf = (code: string | null) => (code ? planName(code) : EMPTY_FORMATTED_VALUE);\n  return {\n    key,\n    header,\n    headerText: header,\n    cell: (row) => {\n      const code = codeOf(plan(row));\n      return (\n        <PlanCell\n          code={code}\n          name={nameOf(code)}\n          status={status?.(row)}\n          usage={usage?.(row)}\n          usageOf={labels.usageOf}\n        />\n      );\n    },\n    sortBy: sortBy === false ? undefined : (sortBy ?? ((row) => codeOf(plan(row)) ?? \"\")),\n    filter: filterPlans\n      ? {\n          type: \"select\",\n          getValue: (row) => codeOf(plan(row)) ?? \"\",\n          options: [...new Set(filterPlans.map((code) => codeOf(code)).filter((code) => code !== null))].map(\n            (code) => ({ value: code, label: planName(code) }),\n          ),\n        }\n      : undefined,\n  };\n}\n\n/**\n * {@link planColumn} with the `planChange` words from the provider, memoised on the\n * options — pass stable callbacks (`useCallback`), or the column is rebuilt on every\n * render.\n */\nexport function usePlanColumn<T>(options: PlanColumnOptions<T>): DataTableColumn<T> {\n  const { key, plan, planName, status, usage, filterPlans, sortBy, headerText, labels: labelsProp } = options;\n  const labels = useKitLabels(\"planChange\", DEFAULT_PLAN_CHANGE_LABELS, labelsProp);\n  return useMemo(\n    () => planColumn<T>({ key, plan, planName, status, usage, filterPlans, sortBy, headerText, labels }),\n    [key, plan, planName, status, usage, filterPlans, sortBy, headerText, labels],\n  );\n}\n\n/* ── The grant ─────────────────────────────────────────────────────────────── */\n\n/** What {@link PlanChangeConfirmProps.onConfirm} sends: server-kit's\n *  `PlanChangeRequest` without its `acknowledged`, which comes in `values`. */\nexport interface PlanChange {\n  /** The picked plan's code. */\n  plan: string;\n  /** The end of the free grant, as ISO UTC — only when one was picked. */\n  comped_until?: string;\n}\n\nexport interface PlanChangeConfirmProps {\n  /**\n   * Whom it is about — a user (`AdminActionTarget`), or kastlan's company, which has no\n   * address: its name is said instead (the level is `acknowledge`, so nothing is typed).\n   */\n  target: AdminPerson & { email?: string | null };\n  /** The plans to offer, in the catalogue's order, by their display names (§3.1) — from\n   *  `GET /admin/plans`. */\n  plans: readonly { code: string; name: string }[];\n  /** The account's plan now; null for none. The select opens on it. */\n  current: string | null;\n  /**\n   * What the account uses. The column's shape (0.34, keksdose N1) — `{ used, limit, label }`,\n   * the label a word or its plural forms — is spelled out as the column's tooltip is\n   * (`planChange.usageOf`, the word in the limit's form: \"1 of 1 budget\"); a `null` limit\n   * gives no line. Or the app's own sentence, as it is: \"3 of 5 budgets\".\n   */\n  usage?: PlanColumnUsage | ReactNode;\n  /** Offer \"Free until\" — only meaningful while billing is on, where a grant's end\n   *  means something to the payer. */\n  grantEnd?: boolean;\n  /**\n   * Sends it: `{plan}`, and `comped_until` only when an end was picked — the END of the\n   * picked day in the operator's time zone, as ISO UTC (a grant \"until 31 January\" lasts\n   * through it). No end: a grant without one, or on a running beta only the plan moves\n   * and the beta keeps its own end (§12.34). `values.acknowledged` is the body's\n   * `acknowledged`. A promise is handled as `AdminActionConfirm`'s.\n   */\n  onConfirm: (change: PlanChange, values: AdminActionConfirmValues) => MaybePromise;\n  onClose: (done: boolean) => void;\n  /** The app's words for a failure the kit has no code for. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: LabelOverride<PlanChangeLabels>;\n}\n\n/** The column's usage shape, told from a node: a plain object with the three fields. */\nfunction isPlanUsage(value: PlanChangeConfirmProps[\"usage\"]): value is PlanColumnUsage {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    !isValidElement(value) &&\n    \"used\" in value &&\n    \"limit\" in value &&\n    \"label\" in value\n  );\n}\n\n/** The end of the day `date` (YYYY-MM-DD) names, in this device's time zone, as ISO\n *  UTC — keksdose's `endOfDay` (`user-admin-confirm.tsx:44-46`). */\nfunction endOfDay(date: string): string {\n  return new Date(`${date}T23:59:59`).toISOString();\n}\n\n/**\n * An operator's plan change (§14.12): `AdminActionConfirm` at `acknowledge`, the line\n * with the current plan and the app's usage sentence, a plan select, and — with\n * `grantEnd` — the end of a free grant. The confirm is held while nothing would change.\n *\n * Exempt from a BILLING lock, built in (`COMMIT_EXCEPT_BILLING`, §12.36): a plan change\n * is an admin route (§12.13), and the operator's own account or company may be lapsed —\n * kastlan's review. A demo lock still holds it.\n */\nexport function PlanChangeConfirm({\n  target,\n  plans,\n  current: currentProp,\n  usage,\n  grantEnd = false,\n  onConfirm,\n  onClose,\n  describeError,\n  labels: labelsProp,\n}: PlanChangeConfirmProps) {\n  const labels = useKitLabels(\"planChange\", DEFAULT_PLAN_CHANGE_LABELS, labelsProp);\n  const locale = useKitLocale();\n  // Seeded from the account, so the picker opens on the truth and confirming without\n  // touching it is held rather than a silent free → free in the audit.\n  const current = codeOf(currentProp);\n  const [plan, setPlan] = useState(current ?? \"\");\n  const [until, setUntil] = useState(\"\");\n  // A grant ends today at the earliest; read once, not on every render. The kit's today,\n  // so it agrees with a server whose dev clock moved it (0.55).\n  const [today] = useState(todayIso);\n  const options = plans.map((p) => ({ code: codeOf(p.code) ?? p.code, name: p.name }));\n  const nameOf = (code: string) => options.find((p) => p.code === code)?.name ?? code;\n  // An account on a plan the catalogue no longer lists still opens on it.\n  if (current && !options.some((p) => p.code === current)) options.unshift({ code: current, name: current });\n  const unchanged = plan === \"\" || (plan === current && !until);\n  // A company has no address: the dialog says its name in the address's place.\n  const who = { ...target, email: target.email || personLabel(target, locale) };\n  // The column's shape in the column's sentence; the app's own sentence as it is.\n  const usageLine: ReactNode | undefined = isPlanUsage(usage)\n    ? usage.limit === null\n      ? undefined\n      : usageSentence({ ...usage, limit: usage.limit }, labels.usageOf, locale)\n    : usage;\n\n  return (\n    <AdminActionConfirm\n      level=\"acknowledge\"\n      tone=\"warning\"\n      target={who}\n      title={labels.title}\n      confirmLabel={labels.confirm}\n      confirmDisabledReason={unchanged ? labels.needsChange : undefined}\n      describeError={describeError}\n      commit={COMMIT_EXCEPT_BILLING}\n      onConfirm={(values) => onConfirm({ plan, ...(until ? { comped_until: endOfDay(until) } : {}) }, values)}\n      onClose={onClose}\n    >\n      {(current !== null || usageLine !== undefined) && (\n        <div className=\"space-y-0.5 text-xs text-muted\" data-plan-current={current ?? undefined}>\n          {current !== null && <p>{labels.current(nameOf(current))}</p>}\n          {usageLine !== undefined && <p>{usageLine}</p>}\n        </div>\n      )}\n      <Select label={labels.plan} hint={labels.keepsItems} value={plan} onChange={(e) => setPlan(e.target.value)}>\n        {plan === \"\" && (\n          <option value=\"\" disabled>\n            {EMPTY_FORMATTED_VALUE}\n          </option>\n        )}\n        {options.map((option) => (\n          <option key={option.code} value={option.code}>\n            {option.name}\n          </option>\n        ))}\n      </Select>\n      {grantEnd && (\n        <DatePicker\n          label={labels.until}\n          hint={labels.untilHint}\n          value={until}\n          onChange={setUntil}\n          min={today}\n          clearable\n        />\n      )}\n    </AdminActionConfirm>\n  );\n}\n\n/* ── The answer ────────────────────────────────────────────────────────────── */\n\n/**\n * A `PlanChangeResponse` as the page reads it — server-kit 0.7's (§14.12), which gained\n * `previous_plan` nullable, `usage`, `kept_beta` and `comped_until`.\n */\nexport interface PlanChangeOutcome {\n  /** null: the account had no subscription. */\n  previous_plan: string | null;\n  plan: string;\n  over_limit: boolean;\n  /** The new plan's limits; null for unlimited. */\n  limits: Readonly<Record<string, number | null>>;\n  /** What the payer has, per dimension — the figures for the over-limit lines:\n   *  `{ budgets: 7 }`. */\n  usage: Readonly<Record<string, number>>;\n  /** A running beta kept its own end (§12.34). */\n  kept_beta?: boolean;\n  /** The grant's end as the change wrote it; null: no end, or no grant. */\n  comped_until?: string | null;\n}\n\n/** A line's tone: the app's toast kind. */\nexport type PlanChangeTone = \"success\" | \"info\" | \"warning\";\n\nexport interface PlanChangeLine {\n  tone: PlanChangeTone;\n  text: string;\n}\n\nexport interface PlanChangeResultOptions {\n  /** The app's word per dimension, for the over-limit figures: `{ budgets: \"Budgets\" }`.\n   *  A dimension without one is named by its key. */\n  dimensionLabels?: Readonly<Record<string, string>>;\n  /** How a figure is written. Default: a number in the kit's locale. */\n  formatValue?: (dimension: string, value: number) => string;\n}\n\n/**\n * The lines for a plan change's answer, each with its tone, for the app's toasts —\n * echoing the SERVER's before and after, not what was picked: a toast that reported the\n * request would say \"done\" to a write that landed differently (keksdose's rule).\n *\n *     const lines = usePlanChangeResult();\n *     for (const line of lines(res, planName)) toast[line.tone](line.text);\n *\n * - `changed(from, to)`, or `set(to)` with no previous plan (or the same one): success;\n * - a running beta that kept its end: `keptBeta`, info; else a grant's end:\n *   `untilDone(date)`, success;\n * - over the new limit: `overLimit`, then one figure line per dimension over it (\"Budgets:\n *   7 of 5\", `billing.limitUsageLine`), from `usage` and `limits`: warning. A `null`\n *   limit gives no figure line.\n */\nexport function usePlanChangeResult(): (\n  res: PlanChangeOutcome,\n  planName: (code: string) => string,\n  options?: PlanChangeResultOptions,\n) => PlanChangeLine[] {\n  const labels = useKitLabels(\"planChange\", DEFAULT_PLAN_CHANGE_LABELS);\n  const billing = useBillingLabels();\n  const locale = useKitLocale();\n  const dayText = useDayText();\n  return useCallback(\n    (res, planName, options = {}) => {\n      const { dimensionLabels, formatValue } = options;\n      const name = (raw: string) => planName(codeOf(raw) ?? raw);\n      const to = name(res.plan);\n      const from = codeOf(res.previous_plan);\n      const lines: PlanChangeLine[] = [\n        {\n          tone: \"success\",\n          text: from !== null && from !== codeOf(res.plan) ? labels.changed(name(from), to) : labels.set(to),\n        },\n      ];\n      if (res.kept_beta) lines.push({ tone: \"info\", text: labels.keptBeta });\n      else if (res.comped_until) lines.push({ tone: \"success\", text: labels.untilDone(dayText(res.comped_until)) });\n      if (res.over_limit) {\n        lines.push({ tone: \"warning\", text: labels.overLimit });\n        const figure = (dimension: string, value: number) =>\n          formatValue ? formatValue(dimension, value) : formatNumber(value, { locale });\n        // Read defensively: an app's server from before 0.7 sent neither.\n        for (const [dimension, limit] of Object.entries(res.limits ?? {})) {\n          const used = res.usage?.[dimension];\n          if (limit === null || used === undefined || used <= limit) continue;\n          lines.push({\n            tone: \"warning\",\n            text: billing.limitUsageLine(\n              dimensionLabels?.[dimension] ?? dimension,\n              figure(dimension, used),\n              figure(dimension, limit),\n            ),\n          });\n        }\n      }\n      return lines;\n    },\n    [labels, billing, locale, dayText],\n  );\n}\n"],"mappings":";AAyIM,SACE,KADF;AAzIN,SAAS,gBAAgB,aAAa,SAAS,gBAAgB;AAG/D,SAAS,cAAc,oBAAwC;AAC/D,SAAS,kBAAkB;AAE3B,SAAS,cAAc,6BAA6B;AACpD,SAAS,gBAAgB;AAEzB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,cAAc;AACvB,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AAEjC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AAEnC,SAAS,aAAa,kBAAkB;AAExC,SAAS,kCAAkC;AA0B3C,SAAS,OAAO,KAA+C;AAC7D,QAAM,QAAQ,OAAO,IAAI,KAAK,EAAE,YAAY;AAC5C,SAAO,SAAS,KAAK,OAAO;AAC9B;AA4DA,SAAS,cACP,OACA,SACA,QACQ;AACR,QAAM,SAAS,CAAC,UAAkB,aAAa,OAAO,EAAE,OAAO,CAAC;AAChE,QAAM,OAAO,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ,WAAW,MAAM,OAAO,MAAM,OAAO,MAAM;AACxG,SAAO,QAAQ,OAAO,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,GAAG,IAAI;AAC9D;AAGA,SAAS,SAAS;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMG;AACD,QAAM,SAAS,aAAa;AAC5B,QAAM,SAAS,CAAC,UAAkB,aAAa,OAAO,EAAE,OAAO,CAAC;AAChE,SACE,qBAAC,SAAI,WAAU,qBAAoB,aAAW,QAAQ,QACpD;AAAA,yBAAC,SAAI,WAAU,6BACb;AAAA,0BAAC,UAAK,WAAW,OAAO,gBAAgB,cAAe,gBAAK;AAAA,MAE3D,WAAW,UAAa,oBAAC,0BAAuB,QAAgB,MAAK,MAAK;AAAA,OAC7E;AAAA,IACC,SAAS,MAAM,UAAU;AAAA;AAAA,IAGxB,oBAAC,WAAQ,OAAO,cAAc,EAAE,GAAG,OAAO,OAAO,MAAM,MAAM,GAAG,SAAS,MAAM,GAC7E,+BAAC,UAAK,WAAU,yCACb;AAAA,aAAO,MAAM,IAAI;AAAA,MAAE;AAAA,MAAE,OAAO,MAAM,KAAK;AAAA,OAC1C,GACF;AAAA,KAEJ;AAEJ;AAsBO,SAAS,WAAc,SAAmD;AAC/E,QAAM,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,aAAa,QAAQ,YAAY,QAAQ,WAAW,IAAI;AAC7G,QAAM,SAA2B,EAAE,GAAG,4BAA4B,GAAG,WAAW;AAChF,QAAM,SAAS,cAAc,OAAO;AACpC,QAAM,SAAS,CAAC,SAAyB,OAAO,SAAS,IAAI,IAAI;AACjE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,MAAM,CAAC,QAAQ;AACb,YAAM,OAAO,OAAO,KAAK,GAAG,CAAC;AAC7B,aACE;AAAA,QAAC;AAAA;AAAA,UACC;AAAA,UACA,MAAM,OAAO,IAAI;AAAA,UACjB,QAAQ,SAAS,GAAG;AAAA,UACpB,OAAO,QAAQ,GAAG;AAAA,UAClB,SAAS,OAAO;AAAA;AAAA,MAClB;AAAA,IAEJ;AAAA,IACA,QAAQ,WAAW,QAAQ,SAAa,WAAW,CAAC,QAAQ,OAAO,KAAK,GAAG,CAAC,KAAK;AAAA,IACjF,QAAQ,cACJ;AAAA,MACE,MAAM;AAAA,MACN,UAAU,CAAC,QAAQ,OAAO,KAAK,GAAG,CAAC,KAAK;AAAA,MACxC,SAAS,CAAC,GAAG,IAAI,IAAI,YAAY,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,SAAS,IAAI,CAAC,CAAC,EAAE;AAAA,QAC7F,CAAC,UAAU,EAAE,OAAO,MAAM,OAAO,SAAS,IAAI,EAAE;AAAA,MAClD;AAAA,IACF,IACA;AAAA,EACN;AACF;AAOO,SAAS,cAAiB,SAAmD;AAClF,QAAM,EAAE,KAAK,MAAM,UAAU,QAAQ,OAAO,aAAa,QAAQ,YAAY,QAAQ,WAAW,IAAI;AACpG,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,SAAO;AAAA,IACL,MAAM,WAAc,EAAE,KAAK,MAAM,UAAU,QAAQ,OAAO,aAAa,QAAQ,YAAY,OAAO,CAAC;AAAA,IACnG,CAAC,KAAK,MAAM,UAAU,QAAQ,OAAO,aAAa,QAAQ,YAAY,MAAM;AAAA,EAC9E;AACF;AAiDA,SAAS,YAAY,OAAkE;AACrF,SACE,OAAO,UAAU,YACjB,UAAU,QACV,CAAC,eAAe,KAAK,KACrB,UAAU,SACV,WAAW,SACX,WAAW;AAEf;AAIA,SAAS,SAAS,MAAsB;AACtC,UAAO,oBAAI,KAAK,GAAG,IAAI,WAAW,GAAE,YAAY;AAClD;AAWO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAA2B;AACzB,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,QAAM,SAAS,aAAa;AAG5B,QAAM,UAAU,OAAO,WAAW;AAClC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,WAAW,EAAE;AAC9C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AAGrC,QAAM,CAAC,KAAK,IAAI,SAAS,QAAQ;AACjC,QAAM,UAAU,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,OAAO,EAAE,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,KAAK,EAAE;AACnF,QAAM,SAAS,CAAC,SAAiB,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,GAAG,QAAQ;AAE/E,MAAI,WAAW,CAAC,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,OAAO,EAAG,SAAQ,QAAQ,EAAE,MAAM,SAAS,MAAM,QAAQ,CAAC;AACzG,QAAM,YAAY,SAAS,MAAO,SAAS,WAAW,CAAC;AAEvD,QAAM,MAAM,EAAE,GAAG,QAAQ,OAAO,OAAO,SAAS,YAAY,QAAQ,MAAM,EAAE;AAE5E,QAAM,YAAmC,YAAY,KAAK,IACtD,MAAM,UAAU,OACd,SACA,cAAc,EAAE,GAAG,OAAO,OAAO,MAAM,MAAM,GAAG,OAAO,SAAS,MAAM,IACxE;AAEJ,SACE;AAAA,IAAC;AAAA;AAAA,MACC,OAAM;AAAA,MACN,MAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,OAAO;AAAA,MACd,cAAc,OAAO;AAAA,MACrB,uBAAuB,YAAY,OAAO,cAAc;AAAA,MACxD;AAAA,MACA,QAAQ;AAAA,MACR,WAAW,CAAC,WAAW,UAAU,EAAE,MAAM,GAAI,QAAQ,EAAE,cAAc,SAAS,KAAK,EAAE,IAAI,CAAC,EAAG,GAAG,MAAM;AAAA,MACtG;AAAA,MAEE;AAAA,qBAAY,QAAQ,cAAc,WAClC,qBAAC,SAAI,WAAU,kCAAiC,qBAAmB,WAAW,QAC3E;AAAA,sBAAY,QAAQ,oBAAC,OAAG,iBAAO,QAAQ,OAAO,OAAO,CAAC,GAAE;AAAA,UACxD,cAAc,UAAa,oBAAC,OAAG,qBAAU;AAAA,WAC5C;AAAA,QAEF,qBAAC,UAAO,OAAO,OAAO,MAAM,MAAM,OAAO,YAAY,OAAO,MAAM,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK,GACtG;AAAA,mBAAS,MACR,oBAAC,YAAO,OAAM,IAAG,UAAQ,MACtB,iCACH;AAAA,UAED,QAAQ,IAAI,CAAC,WACZ,oBAAC,YAAyB,OAAO,OAAO,MACrC,iBAAO,QADG,OAAO,IAEpB,CACD;AAAA,WACH;AAAA,QACC,YACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,MAAM,OAAO;AAAA,YACb,OAAO;AAAA,YACP,UAAU;AAAA,YACV,KAAK;AAAA,YACL,WAAS;AAAA;AAAA,QACX;AAAA;AAAA;AAAA,EAEJ;AAEJ;AAuDO,SAAS,sBAIM;AACpB,QAAM,SAAS,aAAa,cAAc,0BAA0B;AACpE,QAAM,UAAU,iBAAiB;AACjC,QAAM,SAAS,aAAa;AAC5B,QAAM,UAAU,WAAW;AAC3B,SAAO;AAAA,IACL,CAAC,KAAK,UAAU,UAAU,CAAC,MAAM;AAC/B,YAAM,EAAE,iBAAiB,YAAY,IAAI;AACzC,YAAM,OAAO,CAAC,QAAgB,SAAS,OAAO,GAAG,KAAK,GAAG;AACzD,YAAM,KAAK,KAAK,IAAI,IAAI;AACxB,YAAM,OAAO,OAAO,IAAI,aAAa;AACrC,YAAM,QAA0B;AAAA,QAC9B;AAAA,UACE,MAAM;AAAA,UACN,MAAM,SAAS,QAAQ,SAAS,OAAO,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,IAAI,GAAG,EAAE,IAAI,OAAO,IAAI,EAAE;AAAA,QACnG;AAAA,MACF;AACA,UAAI,IAAI,UAAW,OAAM,KAAK,EAAE,MAAM,QAAQ,MAAM,OAAO,SAAS,CAAC;AAAA,eAC5D,IAAI,aAAc,OAAM,KAAK,EAAE,MAAM,WAAW,MAAM,OAAO,UAAU,QAAQ,IAAI,YAAY,CAAC,EAAE,CAAC;AAC5G,UAAI,IAAI,YAAY;AAClB,cAAM,KAAK,EAAE,MAAM,WAAW,MAAM,OAAO,UAAU,CAAC;AACtD,cAAM,SAAS,CAAC,WAAmB,UACjC,cAAc,YAAY,WAAW,KAAK,IAAI,aAAa,OAAO,EAAE,OAAO,CAAC;AAE9E,mBAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,IAAI,UAAU,CAAC,CAAC,GAAG;AACjE,gBAAM,OAAO,IAAI,QAAQ,SAAS;AAClC,cAAI,UAAU,QAAQ,SAAS,UAAa,QAAQ,MAAO;AAC3D,gBAAM,KAAK;AAAA,YACT,MAAM;AAAA,YACN,MAAM,QAAQ;AAAA,cACZ,kBAAkB,SAAS,KAAK;AAAA,cAChC,OAAO,WAAW,IAAI;AAAA,cACtB,OAAO,WAAW,KAAK;AAAA,YACzB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,CAAC,QAAQ,SAAS,QAAQ,OAAO;AAAA,EACnC;AACF;","names":[]}

package/dist/admin/user-roster.d.ts

@@ -85,6 +85,12 @@ export declare function adminUserStates(row: AdminUserStateFields): RosterState[
 /** The server's sort keys, which are the preset's column keys (§3.1). */
 export declare const USER_ROSTER_SORT_KEYS: readonly ["name", "email", "role", "created", "last_login"];
 export type UserRosterSortKey = (typeof USER_ROSTER_SORT_KEYS)[number];
+/** server-kit's `user_admin.DEFAULT_PAGE_SIZE`: the rows `GET /admin/users` answers when the
+ *  query names no `page_size` (keksdose audit F-63, which copied it into its users panel). */
+export declare const USER_ROSTER_PAGE_SIZE = 25;
+/** server-kit's `user_admin.MAX_PAGE_SIZE`: the most rows one page may ask for, which a
+ *  pager's "All" resolves to; a larger `page_size` is refused. */
+export declare const USER_ROSTER_MAX_PAGE_SIZE = 200;
 /**
  * The table's sort state as the `sort` query parameter of `GET /admin/users` (§3.1), in
  * the DataTable's own encoding ({@link encodeSorts}: `"last_login.desc"`), which

package/dist/admin/user-roster.js

@@ -23,6 +23,8 @@ function adminUserStates(row) {
   return out;
 }
 const USER_ROSTER_SORT_KEYS = ["name", "email", "role", "created", "last_login"];
+const USER_ROSTER_PAGE_SIZE = 25;
+const USER_ROSTER_MAX_PAGE_SIZE = 200;
 function userRosterSort(sorts) {
   const first = sorts.find((s) => USER_ROSTER_SORT_KEYS.includes(s.key));
   return first ? encodeSorts([first]) ?? void 0 : void 0;
@@ -255,6 +257,8 @@ function useUserRosterColumns({
 }
 export {
   DEFAULT_USER_ROSTER_LABELS,
+  USER_ROSTER_MAX_PAGE_SIZE,
+  USER_ROSTER_PAGE_SIZE,
   USER_ROSTER_SORT_KEYS,
   UserIdentityCell,
   UserRowActions,

package/dist/admin/user-roster.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/admin/user-roster.tsx"],"sourcesContent":["import { useMemo } from \"react\";\nimport type { ReactNode } from \"react\";\nimport { cn } from \"../lib/cn\";\nimport type { DateInput } from \"../lib/format\";\nimport type { PersonName } from \"../lib/person-name\";\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { AccountStateChip, RoleChip, dateColumn } from \"../components/account-chips\";\nimport type { AccountState, RoleVocabulary } from \"../components/account-chips\";\nimport type { ChipTone } from \"../components/chip\";\nimport type { DataTableColumn } from \"../components/data-table\";\nimport { SelectWidthFloor } from \"../components/field-base\";\nimport { encodeSorts } from \"../components/data-table-sort\";\nimport type { SortState } from \"../components/data-table-sort\";\nimport { RowActions } from \"../components/row-actions\";\nimport type { RowAction, RowActionList } from \"../components/row-actions\";\nimport { UserAvatar } from \"../components/user-avatar\";\nimport { personLabel } from \"./admin-parts\";\nimport { RoleSelect } from \"./role-select\";\nimport type { RoleLock } from \"./role-select\";\nimport { DEFAULT_USER_ROSTER_LABELS } from \"./user-roster-labels\";\n\n/**\n * The admin's user list (docs/user-admin-harmonization.md §3): a column preset for the\n * kit's `DataTable`, not a table of its own.\n *\n * keksdose built its roster by hand (1150 lines, its own Badge), Kurvenschmiede on the\n * kit `DataTable` with the 0.18 chips, kastlan as a settings page. What the three share\n * is the row — name over address, a role, the account's states, created, last login, the\n * app's own columns, and a handful of actions — so that is what the kit draws, and the\n * table, its paging, its sort and its filters stay the app's `DataTable` wiring:\n *\n * ```tsx\n * const columns = useUserRosterColumns<AdminUserRow, Role>({ roles: ROLES, actions, extra });\n * <DataTable rows={page.users} columns={columns} rowKey={(r) => r.id}\n *   serverPagination={{ page, pageSize, total: page.total, onPageChange }}\n *   sorts={sorts} onSortsChange={setSorts} />\n * // GET /admin/users?sort=${userRosterSort(sorts)}&…\n * ```\n *\n * The column keys ARE the server's sort keys (§3.1): `name`, `email`, `role`, `created`,\n * `last_login` — so {@link userRosterSort} turns the table's sort state into the query\n * as it is. Phone cards come from the same columns: the identity is the card's headline\n * with the account's states as chips beside it, the role, last login and the actions are\n * its three fields, created is left off.\n */\n\n/* ── Rows and states ────────────────────────────────────────────────────────── */\n\n/**\n * The fields of the contract's `AdminUserRow` the preset reads (§3.2, the auth\n * contract's `UserResponse` core). An app's row has more — its `extra` — and the\n * preset passes the whole row to every callback.\n */\nexport interface UserRosterRow extends AdminUserStateFields {\n  id: string | number;\n  email: string;\n  first_name?: string | null;\n  last_name?: string | null;\n  /** The derived whole name — only the fallback when both parts are blank. */\n  display_name?: string | null;\n  /** keksdose, Kurvenschmiede: one role. */\n  role?: string | null;\n  /** kastlan: the account's roles in the current company. Wins over `role`. */\n  roles?: readonly string[] | null;\n  created_at?: DateInput;\n  /** Account-wide; kastlan's comes from its session rows (§3.2). */\n  last_login_at?: DateInput;\n}\n\n/** The state fields of the contract's row that {@link adminUserStates} maps (§3.2). */\nexport interface AdminUserStateFields {\n  is_active?: boolean;\n  email_verified?: boolean;\n  password_change_required_at?: string | null;\n  /** `after_days` mode: the day the account is erased (§6.4). */\n  deletion_scheduled_at?: string | null;\n  /** When the user asked. The only deletion field in kastlan's `operator` mode, where\n   *  nothing is scheduled. */\n  deletion_requested_at?: string | null;\n}\n\n/** One state chip of a row: an {@link AccountState}, or one with its `date` (the\n *  `deletion` day), a `tone` or the app's own words. */\nexport type RosterState = AccountState | { state: AccountState; date?: DateInput; tone?: ChipTone; label?: ReactNode };\n\n/**\n * The contract's row as state chips (§3.2: \"map 1:1 to the kit's AccountStateChip\"):\n *\n * - marked for deletion → `deletion` with the scheduled day (none in `operator` mode),\n *   IN PLACE of `inactive` — such an account is always deactivated (§2.1);\n * - else `active` / `inactive` from `is_active`;\n * - `unverified` when `email_verified` is `false` (not when it is missing);\n * - `passwordChange` while `password_change_required_at` is set.\n */\nexport function adminUserStates(row: AdminUserStateFields): RosterState[] {\n  const out: RosterState[] = [];\n  if (row.deletion_scheduled_at || row.deletion_requested_at) {\n    out.push({ state: \"deletion\", date: row.deletion_scheduled_at ?? null });\n  } else if (row.is_active !== undefined) {\n    out.push(row.is_active ? \"active\" : \"inactive\");\n  }\n  if (row.email_verified === false) out.push(\"unverified\");\n  if (row.password_change_required_at) out.push(\"passwordChange\");\n  return out;\n}\n\n/** The server's sort keys, which are the preset's column keys (§3.1). */\nexport const USER_ROSTER_SORT_KEYS = [\"name\", \"email\", \"role\", \"created\", \"last_login\"] as const;\nexport type UserRosterSortKey = (typeof USER_ROSTER_SORT_KEYS)[number];\n\n/**\n * The table's sort state as the `sort` query parameter of `GET /admin/users` (§3.1), in\n * the DataTable's own encoding ({@link encodeSorts}: `\"last_login.desc\"`), which\n * server-kit 0.4 reads beside the `-key` form. Only the first criterion on one of the\n * server's keys: an app's own column (`owned`) is the client's to sort, and the query\n * takes one key — a shift-clicked second criterion is not sent. `undefined` when nothing\n * the server knows is sorted, so its default order applies.\n */\nexport function userRosterSort(sorts: readonly SortState[]): string | undefined {\n  const first = sorts.find((s) => (USER_ROSTER_SORT_KEYS as readonly string[]).includes(s.key));\n  return first ? (encodeSorts([first]) ?? undefined) : undefined;\n}\n\n/* ── Labels ─────────────────────────────────────────────────────────────────── */\n\n/** The `userRoster` namespace: the preset's headers and the action menu's words. */\nexport interface UserRosterLabels {\n  /** The identity column — the name with the address under it. */\n  name: string;\n  /** The separate address column (`emailColumn`). */\n  email: string;\n  role: string;\n  state: string;\n  created: string;\n  lastLogin: string;\n  /** A last login that never happened. */\n  never: string;\n  /** The actions column's (hidden) header. */\n  actions: string;\n  /** The action menu's button and panel — \"Actions for Ada Example\". */\n  actionsFor: (name: string) => string;\n}\n\n// Defined in ./user-roster-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_USER_ROSTER_LABELS };\n\n/* ── UserIdentityCell ───────────────────────────────────────────────────────── */\n\nexport interface UserIdentityCellProps {\n  /** First and last name (auth §3.2), shown in the READER's order. */\n  person?: PersonName | null;\n  /** A whole name, for an API that still sends `display_name` only. */\n  name?: string | null;\n  email?: string | null;\n  /** The initials avatar before the name. Default true. */\n  avatar?: boolean;\n  /** After the name, on its line — a \"You\" chip, a demo mark. */\n  badge?: ReactNode;\n  /** Over the provider's locale. */\n  locale?: string;\n  className?: string;\n}\n\n/**\n * Who an account is, in one cell (§3.3): the initials avatar, the name in the reader's\n * order ({@link formatPersonName} — \"Example Ada\" in Hungarian) and the address under it\n * — the cell both rosters drew by hand. An account with no name yet (a migrated row\n * before `CompleteNameDialog`, an invitee) shows its address once, as the name.\n *\n * Both lines carry `data-private`, so keksdose's demo blur reaches them, and both end\n * in \"…\" at Normal only: from Large up they wrap (`truncate-until-large`, 0.33,\n * docs/text-size-harmonization.md §10.17), since a cut name or address is a finding there.\n */\nexport function UserIdentityCell({\n  person,\n  name,\n  email,\n  avatar = true,\n  badge,\n  locale: localeProp,\n  className,\n}: UserIdentityCellProps) {\n  const locale = useKitLocale(localeProp);\n  const named = personLabel({ first: person?.first, last: person?.last, name }, locale);\n  const address = (email ?? \"\").trim();\n  return (\n    <div className={cn(\"flex min-w-0 items-center gap-2.5\", className)}>\n      {avatar && <UserAvatar person={person} name={name} email={email} size=\"sm\" />}\n      <div className=\"min-w-0\">\n        <div className=\"flex min-w-0 items-center gap-1.5\">\n          <span data-private className=\"truncate-until-large font-medium text-primary\">\n            {named || address}\n          </span>\n          {badge}\n        </div>\n        {named && address && (\n          <div data-private className=\"truncate-until-large text-xs text-muted\">\n            {address}\n          </div>\n        )}\n      </div>\n    </div>\n  );\n}\n\n/* ── The row's actions ──────────────────────────────────────────────────────── */\n\n/** One entry of a row's action menu (§4) — the kit's {@link RowAction} since 0.32,\n *  which generalised it for every dense row (docs/text-size-harmonization.md §10.8). */\nexport type UserRowAction = RowAction;\n\n/** What `actions(row)` may return: entries, and `false` / `null` for the ones a\n *  condition left out (`row.is_active && {…}`). */\nexport type UserRowActionList = RowActionList;\n\nexport interface UserRowActionsProps {\n  actions: UserRowActionList;\n  /** The account's name, for the menu's name — \"Actions for Ada Example\". */\n  name: string;\n  labels?: LabelOverride<UserRosterLabels>;\n}\n\n/**\n * A row's actions as one \"…\" button and a menu of them: keksdose had a strip of icon\n * buttons in the expanded row, Kurvenschmiede five text buttons in a cell — neither fits\n * a phone card, and both grow with every action §2.4 adds. The menu is portalled, so a\n * table's scroller cannot clip it; Escape and an outside press close it, and focus goes\n * back to the button, which is where a confirmation dialog then returns it.\n *\n * Since 0.32 this is {@link RowActions} with `collapse=\"menu\"` — the menu at every size —\n * named by the roster's own `actionsFor`.\n */\nexport function UserRowActions({ actions, name, labels: labelsProp }: UserRowActionsProps) {\n  const labels = useKitLabels(\"userRoster\", DEFAULT_USER_ROSTER_LABELS, labelsProp);\n  return <RowActions actions={actions} name={name} collapse=\"menu\" labels={{ actionsFor: labels.actionsFor }} />;\n}\n\n/* ── The preset ─────────────────────────────────────────────────────────────── */\n\n/** How a row's role may be changed inline: `true`, or with reasons. */\nexport interface RoleEditing<R extends string> {\n  /** Why the whole select is locked for this row — `\"self\"`, `\"last_admin\"`, or words. */\n  disabledReason?: RoleLock;\n  /** Why one role cannot be chosen for this row (a string: it goes inside an option). */\n  optionDisabledReason?: (role: R) => string | undefined;\n  /** The roles that may be chosen. Default: the whole vocabulary. */\n  offered?: readonly R[];\n}\n\nexport interface UserRosterColumnsOptions<T extends UserRosterRow, R extends string = string> {\n  /** The app's roles, as `RoleChip` reads them. */\n  roles: RoleVocabulary<R>;\n  /** The row's state chips. Default {@link adminUserStates}, which reads the contract's\n   *  fields (`is_active`, `email_verified`, `password_change_required_at`,\n   *  `deletion_scheduled_at`, `deletion_requested_at`). */\n  stateOf?: (row: T) => readonly RosterState[];\n  /** The app's own columns — keksdose's plan and key custody, Kurvenschmiede's owned\n   *  counts — after the dates, before the actions. */\n  extra?: readonly DataTableColumn<T>[];\n  /** The row's action menu (§4). Left out: no actions column. */\n  actions?: (row: T) => UserRowActionList;\n  /** The actions column's heading (0.46.1, keksdose dev#598 rework — a VISIBLE \"Actions\"\n   *  on every table with an actions column). Default: `labels.actions`, shown. A node\n   *  replaces it; `false` keeps the pre-0.46.1 heading, a screen reader's name only. */\n  actionsHeader?: ReactNode | false;\n  /**\n   * Whether this row's role is a select rather than a chip, and with which reasons.\n   * Left out, or `false`: a chip. kastlan's several roles are never a select here — they\n   * are a \"Manage roles\" action that opens `RolesEditor`.\n   */\n  editableRole?: (row: T) => boolean | RoleEditing<R>;\n  /** A role was picked in a row's select. The app confirms (`acknowledge`) and sends it. */\n  onRoleChange?: (row: T, role: R) => void;\n  /** The row's role(s). Default `row.roles ?? row.role`. */\n  roleOf?: (row: T) => R | readonly R[] | null | undefined;\n  /** A separate, sortable \"Email\" column (the server's `email` sort key) beside the\n   *  identity. Default false: the address is under the name already. */\n  emailColumn?: boolean;\n  /** The words, already resolved. Default English; {@link useUserRosterColumns} reads\n   *  the provider's `userRoster` namespace. */\n  labels?: LabelOverride<UserRosterLabels>;\n}\n\nfunction rolesOf<T extends UserRosterRow, R extends string>(\n  row: T,\n  roleOf: UserRosterColumnsOptions<T, R>[\"roleOf\"],\n): R[] {\n  const raw = roleOf ? roleOf(row) : ((row.roles ?? row.role) as R | readonly R[] | null | undefined);\n  if (raw === null || raw === undefined || raw === \"\") return [];\n  return typeof raw === \"string\" ? [raw as R] : [...(raw as readonly R[])];\n}\n\n/** What a row's role select can show as its value: every role's word, and a held key\n *  the vocabulary does not know (RoleSelect shows it as the key). */\nfunction roleWordsOf<R extends string>(roles: RoleVocabulary<R>, held: R | undefined): string[] {\n  const words = (Object.keys(roles) as R[]).map((role) => roles[role].label);\n  return held !== undefined && !(held in roles) ? [...words, held] : words;\n}\n\n/** The row's name in the reader's order — a component, because the order is the\n *  READER's and the locale comes from the provider. */\nfunction RowName<T extends UserRosterRow>({ row, children }: { row: T; children: (name: string) => ReactNode }) {\n  const locale = useKitLocale();\n  const name = personLabel(\n    { first: row.first_name, last: row.last_name, name: row.display_name, email: row.email },\n    locale,\n  );\n  return <>{children(name)}</>;\n}\n\nfunction StateChips({ states }: { states: readonly RosterState[] }) {\n  if (states.length === 0) return null;\n  return (\n    <div className=\"flex flex-wrap gap-1\">\n      {states.map((entry) => {\n        const spec = typeof entry === \"string\" ? { state: entry } : entry;\n        return (\n          <AccountStateChip key={spec.state} state={spec.state} date={spec.date} tone={spec.tone} size=\"xs\">\n            {spec.label}\n          </AccountStateChip>\n        );\n      })}\n    </div>\n  );\n}\n\n/**\n * The roster's columns, in the contract's order (§3.3):\n *\n * | key | cell | sort | phone | fit (0.50) |\n * |---|---|---|---|---|\n * | `name` | {@link UserIdentityCell} | last, first | the card's headline | `grow` |\n * | `email` | the address (`emailColumn` only) | address | hidden | — |\n * | `role` | `RoleChip`(s), or {@link RoleSelect} where `editableRole` | role | field | — |\n * | `state` | `AccountStateChip`s from `stateOf` | — | chips beside the headline | — |\n * | `created` | `dateColumn` | instant | hidden | `fitPriority: 1` |\n * | `last_login` | `dateColumn`, relative, \"Never\" | instant | field | `fitPriority: 2` |\n * | …`extra` | the app's | the app's | off the card unless marked `mobile: \"secondary\"` | the app's |\n * | `actions` | {@link UserRowActions} | — | the card's actions row (`role: \"actions\"`) | — |\n *\n * The fit (0.50, kastlan K2): Name takes the rest of the row, and a table narrower than\n * its columns leaves out Created, then Last login (DataTable's `grow` / `fitPriority`).\n * The role and state chips still wrap in their cells (0.48), and the other cells keep one\n * line at Normal. `{ ...col, grow: undefined, fitPriority: undefined }` restores the 0.49\n * layout; an `extra` column takes a `fitPriority` of its own to leave too.\n *\n * The card holds three fields — `role`, `last_login` and one more: an `extra` column marked\n * `mobile: \"secondary\"` takes that place. The actions are `role: \"actions\"` (0.49), drawn\n * after the fields and never one of the three. Drop them from the card with\n * `mobile: \"hidden\"`, or draw a `mobileCard`.\n *\n * Pure: hand it resolved words, or use {@link useUserRosterColumns}. The keys are stable,\n * so an app may drop or move a column (`columns.filter((c) => c.key !== \"created\")`).\n * Under `serverPagination` the `sortBy`s only make the headers clickable; the app sends\n * the sort ({@link userRosterSort}).\n */\nexport function userRosterColumns<T extends UserRosterRow, R extends string = string>({\n  roles,\n  stateOf = adminUserStates,\n  extra = [],\n  actions,\n  actionsHeader,\n  editableRole,\n  onRoleChange,\n  roleOf,\n  emailColumn = false,\n  labels: labelsProp,\n}: UserRosterColumnsOptions<T, R>): DataTableColumn<T>[] {\n  const labels: UserRosterLabels = { ...DEFAULT_USER_ROSTER_LABELS, ...labelsProp };\n  const roleWords = (row: T) =>\n    rolesOf(row, roleOf)\n      .map((role) => roles[role]?.label ?? role)\n      .join(\", \");\n  const columns: DataTableColumn<T>[] = [\n    {\n      key: \"name\",\n      header: labels.name,\n      cell: (row) => (\n        <UserIdentityCell\n          person={{ first: row.first_name, last: row.last_name }}\n          name={row.display_name}\n          email={row.email}\n        />\n      ),\n      // By last name, then first (auth §3.2), as the server sorts `name`.\n      sortBy: (row) => `${row.last_name ?? \"\"} ${row.first_name ?? \"\"}`.trim().toLocaleLowerCase() || row.email,\n      // Either part, in either order, or the address (auth §10.6).\n      filterBy: (row) =>\n        [row.first_name, row.last_name, row.last_name, row.first_name, row.display_name, row.email]\n          .filter(Boolean)\n          .join(\" \"),\n      mobilePrimary: true,\n      // Takes the rest of the row and ellipsises (0.50, kastlan K2): the roster fits its\n      // pane — a settings column, an admin page — instead of scrolling sideways.\n      grow: true,\n    },\n  ];\n  if (emailColumn) {\n    columns.push({\n      key: \"email\",\n      header: labels.email,\n      className: \"whitespace-nowrap\",\n      cell: (row) => (\n        <span data-private className=\"text-secondary\">\n          {row.email}\n        </span>\n      ),\n      sortBy: (row) => row.email.toLowerCase(),\n      filterBy: (row) => row.email,\n      mobileHidden: true,\n    });\n  }\n  columns.push(\n    {\n      key: \"role\",\n      header: labels.role,\n      cell: (row) => {\n        const held = rolesOf(row, roleOf);\n        const editing = held.length <= 1 ? editableRole?.(row) : false;\n        if (editing && onRoleChange) {\n          const rules: RoleEditing<R> = editing === true ? {} : editing;\n          return (\n            <RowName row={row}>\n              {(name) => (\n                // The column keeps room for the select's longest ROLE word in the app's\n                // language (0.51, Kurvenschmiede N5): beside the `grow` Name every other\n                // column is squeezed to its min-content, which a `w-full` select does not\n                // have, so the role select was the header's ~92px and read \"Meml…\",\n                // \"Admi…\". Every word of the vocabulary, not only the row's offered\n                // ones: the column is as wide as its widest row, so the rows line up, and\n                // a role held but not offered (KS's Reviewer) is still a selected value.\n                // Not the options' reasons (\"Customer (owns work)\"): they are never the\n                // selected value, and the open list is as wide as it needs anyway.\n                <div>\n                  <RoleSelect<R>\n                    size=\"sm\"\n                    name={name}\n                    value={held[0] ?? null}\n                    roles={roles}\n                    offered={rules.offered}\n                    disabledReason={rules.disabledReason}\n                    optionDisabledReason={rules.optionDisabledReason}\n                    onChange={(role) => onRoleChange(row, role)}\n                  />\n                  <SelectWidthFloor size=\"sm\" values={roleWordsOf(roles, held[0])} />\n                </div>\n              )}\n            </RowName>\n          );\n        }\n        if (held.length === 0) return null;\n        return (\n          <div className=\"flex flex-wrap gap-1\">\n            {held.map((role) => (\n              <RoleChip<R> key={role} value={role} roles={roles} size=\"xs\" />\n            ))}\n          </div>\n        );\n      },\n      sortBy: roleWords,\n      filter: {\n        type: \"select\",\n        getValue: (row) => rolesOf(row, roleOf)[0] ?? \"\",\n        options: (Object.keys(roles) as R[]).map((value) => ({ value, label: roles[value].label })),\n      },\n      mobile: \"secondary\",\n    },\n    {\n      key: \"state\",\n      header: labels.state,\n      // No states, no cell: the phone card then shows no chip beside the name.\n      cell: (row) => {\n        const states = stateOf(row);\n        return states.length === 0 ? null : <StateChips states={states} />;\n      },\n      // Beside the name on the phone card, so the role, last login and the actions keep\n      // the card's three fields.\n      role: \"status\",\n    },\n    dateColumn<T>({\n      key: \"created\",\n      header: labels.created,\n      value: (row) => row.created_at ?? null,\n      // The first to leave a narrow table (0.50, kastlan K2), then last login.\n      column: { mobileHidden: true, fitPriority: 1 },\n    }),\n    // How long ago rather than a date — the question is \"recently?\" — with the exact\n    // time beside it (keksdose's last-seen column, Kurvenschmiede's; 0.32 §4: never only\n    // in a tooltip).\n    dateColumn<T>({\n      key: \"last_login\",\n      header: labels.lastLogin,\n      value: (row) => row.last_login_at ?? null,\n      display: \"relative\",\n      empty: labels.never,\n      column: { mobile: \"secondary\", fitPriority: 2 },\n    }),\n    ...extra,\n  );\n  if (actions) {\n    columns.push({\n      key: \"actions\",\n      // On screen, as every actions column's heading is (0.46.1, keksdose dev#598 rework).\n      header:\n        actionsHeader === false ? <span className=\"sr-only\">{labels.actions}</span> : (actionsHeader ?? labels.actions),\n      headerText: labels.actions,\n      // The caller's own words only: the menu reads the provider's itself, and the\n      // English defaults merged in above must not shadow them.\n      cell: (row) => (\n        <RowName row={row}>\n          {(name) => <UserRowActions actions={actions(row)} name={name} labels={labelsProp} />}\n        </RowName>\n      ),\n      className: \"w-px whitespace-nowrap text-end\",\n      headClassName: \"w-px text-end\",\n      // The menu button keeps its own click: a row link must not wrap it.\n      noRowLink: true,\n      // Always on the phone card, after the fields and never one of the three (0.49).\n      role: \"actions\",\n    });\n  }\n  return columns;\n}\n\n/**\n * {@link userRosterColumns} with the `userRoster` words from the provider, memoised on\n * the options — pass stable callbacks (`useCallback`) and a module-level vocabulary, or\n * the columns are rebuilt on every render.\n */\nexport function useUserRosterColumns<T extends UserRosterRow, R extends string = string>({\n  roles,\n  stateOf,\n  extra,\n  actions,\n  actionsHeader,\n  editableRole,\n  onRoleChange,\n  roleOf,\n  emailColumn,\n  labels: labelsProp,\n}: UserRosterColumnsOptions<T, R>): DataTableColumn<T>[] {\n  const labels = useKitLabels(\"userRoster\", DEFAULT_USER_ROSTER_LABELS, labelsProp);\n  return useMemo(\n    () =>\n      userRosterColumns<T, R>({\n        roles,\n        stateOf,\n        extra,\n        actions,\n        actionsHeader,\n        editableRole,\n        onRoleChange,\n        roleOf,\n        emailColumn,\n        labels,\n      }),\n    [roles, stateOf, extra, actions, actionsHeader, editableRole, onRoleChange, roleOf, emailColumn, labels],\n  );\n}\n"],"mappings":";AA2LiB,SAwHR,UAxHQ,KAET,YAFS;AA3LjB,SAAS,eAAe;AAExB,SAAS,UAAU;AAGnB,SAAS,cAAc,oBAAwC;AAC/D,SAAS,kBAAkB,UAAU,kBAAkB;AAIvD,SAAS,wBAAwB;AACjC,SAAS,mBAAmB;AAE5B,SAAS,kBAAkB;AAE3B,SAAS,kBAAkB;AAC3B,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAE3B,SAAS,kCAAkC;AA2EpC,SAAS,gBAAgB,KAA0C;AACxE,QAAM,MAAqB,CAAC;AAC5B,MAAI,IAAI,yBAAyB,IAAI,uBAAuB;AAC1D,QAAI,KAAK,EAAE,OAAO,YAAY,MAAM,IAAI,yBAAyB,KAAK,CAAC;AAAA,EACzE,WAAW,IAAI,cAAc,QAAW;AACtC,QAAI,KAAK,IAAI,YAAY,WAAW,UAAU;AAAA,EAChD;AACA,MAAI,IAAI,mBAAmB,MAAO,KAAI,KAAK,YAAY;AACvD,MAAI,IAAI,4BAA6B,KAAI,KAAK,gBAAgB;AAC9D,SAAO;AACT;AAGO,MAAM,wBAAwB,CAAC,QAAQ,SAAS,QAAQ,WAAW,YAAY;AAW/E,SAAS,eAAe,OAAiD;AAC9E,QAAM,QAAQ,MAAM,KAAK,CAAC,MAAO,sBAA4C,SAAS,EAAE,GAAG,CAAC;AAC5F,SAAO,QAAS,YAAY,CAAC,KAAK,CAAC,KAAK,SAAa;AACvD;AAoDO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACA,QAAQ;AAAA,EACR;AACF,GAA0B;AACxB,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,QAAQ,YAAY,EAAE,OAAO,QAAQ,OAAO,MAAM,QAAQ,MAAM,KAAK,GAAG,MAAM;AACpF,QAAM,WAAW,SAAS,IAAI,KAAK;AACnC,SACE,qBAAC,SAAI,WAAW,GAAG,qCAAqC,SAAS,GAC9D;AAAA,cAAU,oBAAC,cAAW,QAAgB,MAAY,OAAc,MAAK,MAAK;AAAA,IAC3E,qBAAC,SAAI,WAAU,WACb;AAAA,2BAAC,SAAI,WAAU,qCACb;AAAA,4BAAC,UAAK,gBAAY,MAAC,WAAU,iDAC1B,mBAAS,SACZ;AAAA,QACC;AAAA,SACH;AAAA,MACC,SAAS,WACR,oBAAC,SAAI,gBAAY,MAAC,WAAU,2CACzB,mBACH;AAAA,OAEJ;AAAA,KACF;AAEJ;AA6BO,SAAS,eAAe,EAAE,SAAS,MAAM,QAAQ,WAAW,GAAwB;AACzF,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,SAAO,oBAAC,cAAW,SAAkB,MAAY,UAAS,QAAO,QAAQ,EAAE,YAAY,OAAO,WAAW,GAAG;AAC9G;AAgDA,SAAS,QACP,KACA,QACK;AACL,QAAM,MAAM,SAAS,OAAO,GAAG,IAAM,IAAI,SAAS,IAAI;AACtD,MAAI,QAAQ,QAAQ,QAAQ,UAAa,QAAQ,GAAI,QAAO,CAAC;AAC7D,SAAO,OAAO,QAAQ,WAAW,CAAC,GAAQ,IAAI,CAAC,GAAI,GAAoB;AACzE;AAIA,SAAS,YAA8B,OAA0B,MAA+B;AAC9F,QAAM,QAAS,OAAO,KAAK,KAAK,EAAU,IAAI,CAAC,SAAS,MAAM,IAAI,EAAE,KAAK;AACzE,SAAO,SAAS,UAAa,EAAE,QAAQ,SAAS,CAAC,GAAG,OAAO,IAAI,IAAI;AACrE;AAIA,SAAS,QAAiC,EAAE,KAAK,SAAS,GAAsD;AAC9G,QAAM,SAAS,aAAa;AAC5B,QAAM,OAAO;AAAA,IACX,EAAE,OAAO,IAAI,YAAY,MAAM,IAAI,WAAW,MAAM,IAAI,cAAc,OAAO,IAAI,MAAM;AAAA,IACvF;AAAA,EACF;AACA,SAAO,gCAAG,mBAAS,IAAI,GAAE;AAC3B;AAEA,SAAS,WAAW,EAAE,OAAO,GAAuC;AAClE,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,SACE,oBAAC,SAAI,WAAU,wBACZ,iBAAO,IAAI,CAAC,UAAU;AACrB,UAAM,OAAO,OAAO,UAAU,WAAW,EAAE,OAAO,MAAM,IAAI;AAC5D,WACE,oBAAC,oBAAkC,OAAO,KAAK,OAAO,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,MAAK,MAC1F,eAAK,SADe,KAAK,KAE5B;AAAA,EAEJ,CAAC,GACH;AAEJ;AAgCO,SAAS,kBAAsE;AAAA,EACpF;AAAA,EACA,UAAU;AAAA,EACV,QAAQ,CAAC;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,QAAQ;AACV,GAAyD;AACvD,QAAM,SAA2B,EAAE,GAAG,4BAA4B,GAAG,WAAW;AAChF,QAAM,YAAY,CAAC,QACjB,QAAQ,KAAK,MAAM,EAChB,IAAI,CAAC,SAAS,MAAM,IAAI,GAAG,SAAS,IAAI,EACxC,KAAK,IAAI;AACd,QAAM,UAAgC;AAAA,IACpC;AAAA,MACE,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,MAAM,CAAC,QACL;AAAA,QAAC;AAAA;AAAA,UACC,QAAQ,EAAE,OAAO,IAAI,YAAY,MAAM,IAAI,UAAU;AAAA,UACrD,MAAM,IAAI;AAAA,UACV,OAAO,IAAI;AAAA;AAAA,MACb;AAAA;AAAA,MAGF,QAAQ,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,IAAI,IAAI,cAAc,EAAE,GAAG,KAAK,EAAE,kBAAkB,KAAK,IAAI;AAAA;AAAA,MAEpG,UAAU,CAAC,QACT,CAAC,IAAI,YAAY,IAAI,WAAW,IAAI,WAAW,IAAI,YAAY,IAAI,cAAc,IAAI,KAAK,EACvF,OAAO,OAAO,EACd,KAAK,GAAG;AAAA,MACb,eAAe;AAAA;AAAA;AAAA,MAGf,MAAM;AAAA,IACR;AAAA,EACF;AACA,MAAI,aAAa;AACf,YAAQ,KAAK;AAAA,MACX,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,WAAW;AAAA,MACX,MAAM,CAAC,QACL,oBAAC,UAAK,gBAAY,MAAC,WAAU,kBAC1B,cAAI,OACP;AAAA,MAEF,QAAQ,CAAC,QAAQ,IAAI,MAAM,YAAY;AAAA,MACvC,UAAU,CAAC,QAAQ,IAAI;AAAA,MACvB,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AACA,UAAQ;AAAA,IACN;AAAA,MACE,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,MAAM,CAAC,QAAQ;AACb,cAAM,OAAO,QAAQ,KAAK,MAAM;AAChC,cAAM,UAAU,KAAK,UAAU,IAAI,eAAe,GAAG,IAAI;AACzD,YAAI,WAAW,cAAc;AAC3B,gBAAM,QAAwB,YAAY,OAAO,CAAC,IAAI;AACtD,iBACE,oBAAC,WAAQ,KACN,WAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAUA,qBAAC,SACC;AAAA;AAAA,gBAAC;AAAA;AAAA,kBACC,MAAK;AAAA,kBACL;AAAA,kBACA,OAAO,KAAK,CAAC,KAAK;AAAA,kBAClB;AAAA,kBACA,SAAS,MAAM;AAAA,kBACf,gBAAgB,MAAM;AAAA,kBACtB,sBAAsB,MAAM;AAAA,kBAC5B,UAAU,CAAC,SAAS,aAAa,KAAK,IAAI;AAAA;AAAA,cAC5C;AAAA,cACA,oBAAC,oBAAiB,MAAK,MAAK,QAAQ,YAAY,OAAO,KAAK,CAAC,CAAC,GAAG;AAAA,eACnE;AAAA,aAEJ;AAAA,QAEJ;AACA,YAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,eACE,oBAAC,SAAI,WAAU,wBACZ,eAAK,IAAI,CAAC,SACT,oBAAC,YAAuB,OAAO,MAAM,OAAc,MAAK,QAAtC,IAA2C,CAC9D,GACH;AAAA,MAEJ;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,UAAU,CAAC,QAAQ,QAAQ,KAAK,MAAM,EAAE,CAAC,KAAK;AAAA,QAC9C,SAAU,OAAO,KAAK,KAAK,EAAU,IAAI,CAAC,WAAW,EAAE,OAAO,OAAO,MAAM,KAAK,EAAE,MAAM,EAAE;AAAA,MAC5F;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA;AAAA,MAEf,MAAM,CAAC,QAAQ;AACb,cAAM,SAAS,QAAQ,GAAG;AAC1B,eAAO,OAAO,WAAW,IAAI,OAAO,oBAAC,cAAW,QAAgB;AAAA,MAClE;AAAA;AAAA;AAAA,MAGA,MAAM;AAAA,IACR;AAAA,IACA,WAAc;AAAA,MACZ,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,OAAO,CAAC,QAAQ,IAAI,cAAc;AAAA;AAAA,MAElC,QAAQ,EAAE,cAAc,MAAM,aAAa,EAAE;AAAA,IAC/C,CAAC;AAAA;AAAA;AAAA;AAAA,IAID,WAAc;AAAA,MACZ,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,OAAO,CAAC,QAAQ,IAAI,iBAAiB;AAAA,MACrC,SAAS;AAAA,MACT,OAAO,OAAO;AAAA,MACd,QAAQ,EAAE,QAAQ,aAAa,aAAa,EAAE;AAAA,IAChD,CAAC;AAAA,IACD,GAAG;AAAA,EACL;AACA,MAAI,SAAS;AACX,YAAQ,KAAK;AAAA,MACX,KAAK;AAAA;AAAA,MAEL,QACE,kBAAkB,QAAQ,oBAAC,UAAK,WAAU,WAAW,iBAAO,SAAQ,IAAW,iBAAiB,OAAO;AAAA,MACzG,YAAY,OAAO;AAAA;AAAA;AAAA,MAGnB,MAAM,CAAC,QACL,oBAAC,WAAQ,KACN,WAAC,SAAS,oBAAC,kBAAe,SAAS,QAAQ,GAAG,GAAG,MAAY,QAAQ,YAAY,GACpF;AAAA,MAEF,WAAW;AAAA,MACX,eAAe;AAAA;AAAA,MAEf,WAAW;AAAA;AAAA,MAEX,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAOO,SAAS,qBAAyE;AAAA,EACvF;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAAyD;AACvD,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,SAAO;AAAA,IACL,MACE,kBAAwB;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACH,CAAC,OAAO,SAAS,OAAO,SAAS,eAAe,cAAc,cAAc,QAAQ,aAAa,MAAM;AAAA,EACzG;AACF;","names":[]}
+{"version":3,"sources":["../../src/admin/user-roster.tsx"],"sourcesContent":["import { useMemo } from \"react\";\nimport type { ReactNode } from \"react\";\nimport { cn } from \"../lib/cn\";\nimport type { DateInput } from \"../lib/format\";\nimport type { PersonName } from \"../lib/person-name\";\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { AccountStateChip, RoleChip, dateColumn } from \"../components/account-chips\";\nimport type { AccountState, RoleVocabulary } from \"../components/account-chips\";\nimport type { ChipTone } from \"../components/chip\";\nimport type { DataTableColumn } from \"../components/data-table\";\nimport { SelectWidthFloor } from \"../components/field-base\";\nimport { encodeSorts } from \"../components/data-table-sort\";\nimport type { SortState } from \"../components/data-table-sort\";\nimport { RowActions } from \"../components/row-actions\";\nimport type { RowAction, RowActionList } from \"../components/row-actions\";\nimport { UserAvatar } from \"../components/user-avatar\";\nimport { personLabel } from \"./admin-parts\";\nimport { RoleSelect } from \"./role-select\";\nimport type { RoleLock } from \"./role-select\";\nimport { DEFAULT_USER_ROSTER_LABELS } from \"./user-roster-labels\";\n\n/**\n * The admin's user list (docs/user-admin-harmonization.md §3): a column preset for the\n * kit's `DataTable`, not a table of its own.\n *\n * keksdose built its roster by hand (1150 lines, its own Badge), Kurvenschmiede on the\n * kit `DataTable` with the 0.18 chips, kastlan as a settings page. What the three share\n * is the row — name over address, a role, the account's states, created, last login, the\n * app's own columns, and a handful of actions — so that is what the kit draws, and the\n * table, its paging, its sort and its filters stay the app's `DataTable` wiring:\n *\n * ```tsx\n * const columns = useUserRosterColumns<AdminUserRow, Role>({ roles: ROLES, actions, extra });\n * <DataTable rows={page.users} columns={columns} rowKey={(r) => r.id}\n *   serverPagination={{ page, pageSize, total: page.total, onPageChange }}\n *   sorts={sorts} onSortsChange={setSorts} />\n * // GET /admin/users?sort=${userRosterSort(sorts)}&…\n * ```\n *\n * The column keys ARE the server's sort keys (§3.1): `name`, `email`, `role`, `created`,\n * `last_login` — so {@link userRosterSort} turns the table's sort state into the query\n * as it is. Phone cards come from the same columns: the identity is the card's headline\n * with the account's states as chips beside it, the role, last login and the actions are\n * its three fields, created is left off.\n */\n\n/* ── Rows and states ────────────────────────────────────────────────────────── */\n\n/**\n * The fields of the contract's `AdminUserRow` the preset reads (§3.2, the auth\n * contract's `UserResponse` core). An app's row has more — its `extra` — and the\n * preset passes the whole row to every callback.\n */\nexport interface UserRosterRow extends AdminUserStateFields {\n  id: string | number;\n  email: string;\n  first_name?: string | null;\n  last_name?: string | null;\n  /** The derived whole name — only the fallback when both parts are blank. */\n  display_name?: string | null;\n  /** keksdose, Kurvenschmiede: one role. */\n  role?: string | null;\n  /** kastlan: the account's roles in the current company. Wins over `role`. */\n  roles?: readonly string[] | null;\n  created_at?: DateInput;\n  /** Account-wide; kastlan's comes from its session rows (§3.2). */\n  last_login_at?: DateInput;\n}\n\n/** The state fields of the contract's row that {@link adminUserStates} maps (§3.2). */\nexport interface AdminUserStateFields {\n  is_active?: boolean;\n  email_verified?: boolean;\n  password_change_required_at?: string | null;\n  /** `after_days` mode: the day the account is erased (§6.4). */\n  deletion_scheduled_at?: string | null;\n  /** When the user asked. The only deletion field in kastlan's `operator` mode, where\n   *  nothing is scheduled. */\n  deletion_requested_at?: string | null;\n}\n\n/** One state chip of a row: an {@link AccountState}, or one with its `date` (the\n *  `deletion` day), a `tone` or the app's own words. */\nexport type RosterState = AccountState | { state: AccountState; date?: DateInput; tone?: ChipTone; label?: ReactNode };\n\n/**\n * The contract's row as state chips (§3.2: \"map 1:1 to the kit's AccountStateChip\"):\n *\n * - marked for deletion → `deletion` with the scheduled day (none in `operator` mode),\n *   IN PLACE of `inactive` — such an account is always deactivated (§2.1);\n * - else `active` / `inactive` from `is_active`;\n * - `unverified` when `email_verified` is `false` (not when it is missing);\n * - `passwordChange` while `password_change_required_at` is set.\n */\nexport function adminUserStates(row: AdminUserStateFields): RosterState[] {\n  const out: RosterState[] = [];\n  if (row.deletion_scheduled_at || row.deletion_requested_at) {\n    out.push({ state: \"deletion\", date: row.deletion_scheduled_at ?? null });\n  } else if (row.is_active !== undefined) {\n    out.push(row.is_active ? \"active\" : \"inactive\");\n  }\n  if (row.email_verified === false) out.push(\"unverified\");\n  if (row.password_change_required_at) out.push(\"passwordChange\");\n  return out;\n}\n\n/** The server's sort keys, which are the preset's column keys (§3.1). */\nexport const USER_ROSTER_SORT_KEYS = [\"name\", \"email\", \"role\", \"created\", \"last_login\"] as const;\nexport type UserRosterSortKey = (typeof USER_ROSTER_SORT_KEYS)[number];\n\n/** server-kit's `user_admin.DEFAULT_PAGE_SIZE`: the rows `GET /admin/users` answers when the\n *  query names no `page_size` (keksdose audit F-63, which copied it into its users panel). */\nexport const USER_ROSTER_PAGE_SIZE = 25;\n/** server-kit's `user_admin.MAX_PAGE_SIZE`: the most rows one page may ask for, which a\n *  pager's \"All\" resolves to; a larger `page_size` is refused. */\nexport const USER_ROSTER_MAX_PAGE_SIZE = 200;\n\n/**\n * The table's sort state as the `sort` query parameter of `GET /admin/users` (§3.1), in\n * the DataTable's own encoding ({@link encodeSorts}: `\"last_login.desc\"`), which\n * server-kit 0.4 reads beside the `-key` form. Only the first criterion on one of the\n * server's keys: an app's own column (`owned`) is the client's to sort, and the query\n * takes one key — a shift-clicked second criterion is not sent. `undefined` when nothing\n * the server knows is sorted, so its default order applies.\n */\nexport function userRosterSort(sorts: readonly SortState[]): string | undefined {\n  const first = sorts.find((s) => (USER_ROSTER_SORT_KEYS as readonly string[]).includes(s.key));\n  return first ? (encodeSorts([first]) ?? undefined) : undefined;\n}\n\n/* ── Labels ─────────────────────────────────────────────────────────────────── */\n\n/** The `userRoster` namespace: the preset's headers and the action menu's words. */\nexport interface UserRosterLabels {\n  /** The identity column — the name with the address under it. */\n  name: string;\n  /** The separate address column (`emailColumn`). */\n  email: string;\n  role: string;\n  state: string;\n  created: string;\n  lastLogin: string;\n  /** A last login that never happened. */\n  never: string;\n  /** The actions column's (hidden) header. */\n  actions: string;\n  /** The action menu's button and panel — \"Actions for Ada Example\". */\n  actionsFor: (name: string) => string;\n}\n\n// Defined in ./user-roster-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_USER_ROSTER_LABELS };\n\n/* ── UserIdentityCell ───────────────────────────────────────────────────────── */\n\nexport interface UserIdentityCellProps {\n  /** First and last name (auth §3.2), shown in the READER's order. */\n  person?: PersonName | null;\n  /** A whole name, for an API that still sends `display_name` only. */\n  name?: string | null;\n  email?: string | null;\n  /** The initials avatar before the name. Default true. */\n  avatar?: boolean;\n  /** After the name, on its line — a \"You\" chip, a demo mark. */\n  badge?: ReactNode;\n  /** Over the provider's locale. */\n  locale?: string;\n  className?: string;\n}\n\n/**\n * Who an account is, in one cell (§3.3): the initials avatar, the name in the reader's\n * order ({@link formatPersonName} — \"Example Ada\" in Hungarian) and the address under it\n * — the cell both rosters drew by hand. An account with no name yet (a migrated row\n * before `CompleteNameDialog`, an invitee) shows its address once, as the name.\n *\n * Both lines carry `data-private`, so keksdose's demo blur reaches them, and both end\n * in \"…\" at Normal only: from Large up they wrap (`truncate-until-large`, 0.33,\n * docs/text-size-harmonization.md §10.17), since a cut name or address is a finding there.\n */\nexport function UserIdentityCell({\n  person,\n  name,\n  email,\n  avatar = true,\n  badge,\n  locale: localeProp,\n  className,\n}: UserIdentityCellProps) {\n  const locale = useKitLocale(localeProp);\n  const named = personLabel({ first: person?.first, last: person?.last, name }, locale);\n  const address = (email ?? \"\").trim();\n  return (\n    <div className={cn(\"flex min-w-0 items-center gap-2.5\", className)}>\n      {avatar && <UserAvatar person={person} name={name} email={email} size=\"sm\" />}\n      <div className=\"min-w-0\">\n        <div className=\"flex min-w-0 items-center gap-1.5\">\n          <span data-private className=\"truncate-until-large font-medium text-primary\">\n            {named || address}\n          </span>\n          {badge}\n        </div>\n        {named && address && (\n          <div data-private className=\"truncate-until-large text-xs text-muted\">\n            {address}\n          </div>\n        )}\n      </div>\n    </div>\n  );\n}\n\n/* ── The row's actions ──────────────────────────────────────────────────────── */\n\n/** One entry of a row's action menu (§4) — the kit's {@link RowAction} since 0.32,\n *  which generalised it for every dense row (docs/text-size-harmonization.md §10.8). */\nexport type UserRowAction = RowAction;\n\n/** What `actions(row)` may return: entries, and `false` / `null` for the ones a\n *  condition left out (`row.is_active && {…}`). */\nexport type UserRowActionList = RowActionList;\n\nexport interface UserRowActionsProps {\n  actions: UserRowActionList;\n  /** The account's name, for the menu's name — \"Actions for Ada Example\". */\n  name: string;\n  labels?: LabelOverride<UserRosterLabels>;\n}\n\n/**\n * A row's actions as one \"…\" button and a menu of them: keksdose had a strip of icon\n * buttons in the expanded row, Kurvenschmiede five text buttons in a cell — neither fits\n * a phone card, and both grow with every action §2.4 adds. The menu is portalled, so a\n * table's scroller cannot clip it; Escape and an outside press close it, and focus goes\n * back to the button, which is where a confirmation dialog then returns it.\n *\n * Since 0.32 this is {@link RowActions} with `collapse=\"menu\"` — the menu at every size —\n * named by the roster's own `actionsFor`.\n */\nexport function UserRowActions({ actions, name, labels: labelsProp }: UserRowActionsProps) {\n  const labels = useKitLabels(\"userRoster\", DEFAULT_USER_ROSTER_LABELS, labelsProp);\n  return <RowActions actions={actions} name={name} collapse=\"menu\" labels={{ actionsFor: labels.actionsFor }} />;\n}\n\n/* ── The preset ─────────────────────────────────────────────────────────────── */\n\n/** How a row's role may be changed inline: `true`, or with reasons. */\nexport interface RoleEditing<R extends string> {\n  /** Why the whole select is locked for this row — `\"self\"`, `\"last_admin\"`, or words. */\n  disabledReason?: RoleLock;\n  /** Why one role cannot be chosen for this row (a string: it goes inside an option). */\n  optionDisabledReason?: (role: R) => string | undefined;\n  /** The roles that may be chosen. Default: the whole vocabulary. */\n  offered?: readonly R[];\n}\n\nexport interface UserRosterColumnsOptions<T extends UserRosterRow, R extends string = string> {\n  /** The app's roles, as `RoleChip` reads them. */\n  roles: RoleVocabulary<R>;\n  /** The row's state chips. Default {@link adminUserStates}, which reads the contract's\n   *  fields (`is_active`, `email_verified`, `password_change_required_at`,\n   *  `deletion_scheduled_at`, `deletion_requested_at`). */\n  stateOf?: (row: T) => readonly RosterState[];\n  /** The app's own columns — keksdose's plan and key custody, Kurvenschmiede's owned\n   *  counts — after the dates, before the actions. */\n  extra?: readonly DataTableColumn<T>[];\n  /** The row's action menu (§4). Left out: no actions column. */\n  actions?: (row: T) => UserRowActionList;\n  /** The actions column's heading (0.46.1, keksdose dev#598 rework — a VISIBLE \"Actions\"\n   *  on every table with an actions column). Default: `labels.actions`, shown. A node\n   *  replaces it; `false` keeps the pre-0.46.1 heading, a screen reader's name only. */\n  actionsHeader?: ReactNode | false;\n  /**\n   * Whether this row's role is a select rather than a chip, and with which reasons.\n   * Left out, or `false`: a chip. kastlan's several roles are never a select here — they\n   * are a \"Manage roles\" action that opens `RolesEditor`.\n   */\n  editableRole?: (row: T) => boolean | RoleEditing<R>;\n  /** A role was picked in a row's select. The app confirms (`acknowledge`) and sends it. */\n  onRoleChange?: (row: T, role: R) => void;\n  /** The row's role(s). Default `row.roles ?? row.role`. */\n  roleOf?: (row: T) => R | readonly R[] | null | undefined;\n  /** A separate, sortable \"Email\" column (the server's `email` sort key) beside the\n   *  identity. Default false: the address is under the name already. */\n  emailColumn?: boolean;\n  /** The words, already resolved. Default English; {@link useUserRosterColumns} reads\n   *  the provider's `userRoster` namespace. */\n  labels?: LabelOverride<UserRosterLabels>;\n}\n\nfunction rolesOf<T extends UserRosterRow, R extends string>(\n  row: T,\n  roleOf: UserRosterColumnsOptions<T, R>[\"roleOf\"],\n): R[] {\n  const raw = roleOf ? roleOf(row) : ((row.roles ?? row.role) as R | readonly R[] | null | undefined);\n  if (raw === null || raw === undefined || raw === \"\") return [];\n  return typeof raw === \"string\" ? [raw as R] : [...(raw as readonly R[])];\n}\n\n/** What a row's role select can show as its value: every role's word, and a held key\n *  the vocabulary does not know (RoleSelect shows it as the key). */\nfunction roleWordsOf<R extends string>(roles: RoleVocabulary<R>, held: R | undefined): string[] {\n  const words = (Object.keys(roles) as R[]).map((role) => roles[role].label);\n  return held !== undefined && !(held in roles) ? [...words, held] : words;\n}\n\n/** The row's name in the reader's order — a component, because the order is the\n *  READER's and the locale comes from the provider. */\nfunction RowName<T extends UserRosterRow>({ row, children }: { row: T; children: (name: string) => ReactNode }) {\n  const locale = useKitLocale();\n  const name = personLabel(\n    { first: row.first_name, last: row.last_name, name: row.display_name, email: row.email },\n    locale,\n  );\n  return <>{children(name)}</>;\n}\n\nfunction StateChips({ states }: { states: readonly RosterState[] }) {\n  if (states.length === 0) return null;\n  return (\n    <div className=\"flex flex-wrap gap-1\">\n      {states.map((entry) => {\n        const spec = typeof entry === \"string\" ? { state: entry } : entry;\n        return (\n          <AccountStateChip key={spec.state} state={spec.state} date={spec.date} tone={spec.tone} size=\"xs\">\n            {spec.label}\n          </AccountStateChip>\n        );\n      })}\n    </div>\n  );\n}\n\n/**\n * The roster's columns, in the contract's order (§3.3):\n *\n * | key | cell | sort | phone | fit (0.50) |\n * |---|---|---|---|---|\n * | `name` | {@link UserIdentityCell} | last, first | the card's headline | `grow` |\n * | `email` | the address (`emailColumn` only) | address | hidden | — |\n * | `role` | `RoleChip`(s), or {@link RoleSelect} where `editableRole` | role | field | — |\n * | `state` | `AccountStateChip`s from `stateOf` | — | chips beside the headline | — |\n * | `created` | `dateColumn` | instant | hidden | `fitPriority: 1` |\n * | `last_login` | `dateColumn`, relative, \"Never\" | instant | field | `fitPriority: 2` |\n * | …`extra` | the app's | the app's | off the card unless marked `mobile: \"secondary\"` | the app's |\n * | `actions` | {@link UserRowActions} | — | the card's actions row (`role: \"actions\"`) | — |\n *\n * The fit (0.50, kastlan K2): Name takes the rest of the row, and a table narrower than\n * its columns leaves out Created, then Last login (DataTable's `grow` / `fitPriority`).\n * The role and state chips still wrap in their cells (0.48), and the other cells keep one\n * line at Normal. `{ ...col, grow: undefined, fitPriority: undefined }` restores the 0.49\n * layout; an `extra` column takes a `fitPriority` of its own to leave too.\n *\n * The card holds three fields — `role`, `last_login` and one more: an `extra` column marked\n * `mobile: \"secondary\"` takes that place. The actions are `role: \"actions\"` (0.49), drawn\n * after the fields and never one of the three. Drop them from the card with\n * `mobile: \"hidden\"`, or draw a `mobileCard`.\n *\n * Pure: hand it resolved words, or use {@link useUserRosterColumns}. The keys are stable,\n * so an app may drop or move a column (`columns.filter((c) => c.key !== \"created\")`).\n * Under `serverPagination` the `sortBy`s only make the headers clickable; the app sends\n * the sort ({@link userRosterSort}).\n */\nexport function userRosterColumns<T extends UserRosterRow, R extends string = string>({\n  roles,\n  stateOf = adminUserStates,\n  extra = [],\n  actions,\n  actionsHeader,\n  editableRole,\n  onRoleChange,\n  roleOf,\n  emailColumn = false,\n  labels: labelsProp,\n}: UserRosterColumnsOptions<T, R>): DataTableColumn<T>[] {\n  const labels: UserRosterLabels = { ...DEFAULT_USER_ROSTER_LABELS, ...labelsProp };\n  const roleWords = (row: T) =>\n    rolesOf(row, roleOf)\n      .map((role) => roles[role]?.label ?? role)\n      .join(\", \");\n  const columns: DataTableColumn<T>[] = [\n    {\n      key: \"name\",\n      header: labels.name,\n      cell: (row) => (\n        <UserIdentityCell\n          person={{ first: row.first_name, last: row.last_name }}\n          name={row.display_name}\n          email={row.email}\n        />\n      ),\n      // By last name, then first (auth §3.2), as the server sorts `name`.\n      sortBy: (row) => `${row.last_name ?? \"\"} ${row.first_name ?? \"\"}`.trim().toLocaleLowerCase() || row.email,\n      // Either part, in either order, or the address (auth §10.6).\n      filterBy: (row) =>\n        [row.first_name, row.last_name, row.last_name, row.first_name, row.display_name, row.email]\n          .filter(Boolean)\n          .join(\" \"),\n      mobilePrimary: true,\n      // Takes the rest of the row and ellipsises (0.50, kastlan K2): the roster fits its\n      // pane — a settings column, an admin page — instead of scrolling sideways.\n      grow: true,\n    },\n  ];\n  if (emailColumn) {\n    columns.push({\n      key: \"email\",\n      header: labels.email,\n      className: \"whitespace-nowrap\",\n      cell: (row) => (\n        <span data-private className=\"text-secondary\">\n          {row.email}\n        </span>\n      ),\n      sortBy: (row) => row.email.toLowerCase(),\n      filterBy: (row) => row.email,\n      mobileHidden: true,\n    });\n  }\n  columns.push(\n    {\n      key: \"role\",\n      header: labels.role,\n      cell: (row) => {\n        const held = rolesOf(row, roleOf);\n        const editing = held.length <= 1 ? editableRole?.(row) : false;\n        if (editing && onRoleChange) {\n          const rules: RoleEditing<R> = editing === true ? {} : editing;\n          return (\n            <RowName row={row}>\n              {(name) => (\n                // The column keeps room for the select's longest ROLE word in the app's\n                // language (0.51, Kurvenschmiede N5): beside the `grow` Name every other\n                // column is squeezed to its min-content, which a `w-full` select does not\n                // have, so the role select was the header's ~92px and read \"Meml…\",\n                // \"Admi…\". Every word of the vocabulary, not only the row's offered\n                // ones: the column is as wide as its widest row, so the rows line up, and\n                // a role held but not offered (KS's Reviewer) is still a selected value.\n                // Not the options' reasons (\"Customer (owns work)\"): they are never the\n                // selected value, and the open list is as wide as it needs anyway.\n                <div>\n                  <RoleSelect<R>\n                    size=\"sm\"\n                    name={name}\n                    value={held[0] ?? null}\n                    roles={roles}\n                    offered={rules.offered}\n                    disabledReason={rules.disabledReason}\n                    optionDisabledReason={rules.optionDisabledReason}\n                    onChange={(role) => onRoleChange(row, role)}\n                  />\n                  <SelectWidthFloor size=\"sm\" values={roleWordsOf(roles, held[0])} />\n                </div>\n              )}\n            </RowName>\n          );\n        }\n        if (held.length === 0) return null;\n        return (\n          <div className=\"flex flex-wrap gap-1\">\n            {held.map((role) => (\n              <RoleChip<R> key={role} value={role} roles={roles} size=\"xs\" />\n            ))}\n          </div>\n        );\n      },\n      sortBy: roleWords,\n      filter: {\n        type: \"select\",\n        getValue: (row) => rolesOf(row, roleOf)[0] ?? \"\",\n        options: (Object.keys(roles) as R[]).map((value) => ({ value, label: roles[value].label })),\n      },\n      mobile: \"secondary\",\n    },\n    {\n      key: \"state\",\n      header: labels.state,\n      // No states, no cell: the phone card then shows no chip beside the name.\n      cell: (row) => {\n        const states = stateOf(row);\n        return states.length === 0 ? null : <StateChips states={states} />;\n      },\n      // Beside the name on the phone card, so the role, last login and the actions keep\n      // the card's three fields.\n      role: \"status\",\n    },\n    dateColumn<T>({\n      key: \"created\",\n      header: labels.created,\n      value: (row) => row.created_at ?? null,\n      // The first to leave a narrow table (0.50, kastlan K2), then last login.\n      column: { mobileHidden: true, fitPriority: 1 },\n    }),\n    // How long ago rather than a date — the question is \"recently?\" — with the exact\n    // time beside it (keksdose's last-seen column, Kurvenschmiede's; 0.32 §4: never only\n    // in a tooltip).\n    dateColumn<T>({\n      key: \"last_login\",\n      header: labels.lastLogin,\n      value: (row) => row.last_login_at ?? null,\n      display: \"relative\",\n      empty: labels.never,\n      column: { mobile: \"secondary\", fitPriority: 2 },\n    }),\n    ...extra,\n  );\n  if (actions) {\n    columns.push({\n      key: \"actions\",\n      // On screen, as every actions column's heading is (0.46.1, keksdose dev#598 rework).\n      header:\n        actionsHeader === false ? <span className=\"sr-only\">{labels.actions}</span> : (actionsHeader ?? labels.actions),\n      headerText: labels.actions,\n      // The caller's own words only: the menu reads the provider's itself, and the\n      // English defaults merged in above must not shadow them.\n      cell: (row) => (\n        <RowName row={row}>\n          {(name) => <UserRowActions actions={actions(row)} name={name} labels={labelsProp} />}\n        </RowName>\n      ),\n      className: \"w-px whitespace-nowrap text-end\",\n      headClassName: \"w-px text-end\",\n      // The menu button keeps its own click: a row link must not wrap it.\n      noRowLink: true,\n      // Always on the phone card, after the fields and never one of the three (0.49).\n      role: \"actions\",\n    });\n  }\n  return columns;\n}\n\n/**\n * {@link userRosterColumns} with the `userRoster` words from the provider, memoised on\n * the options — pass stable callbacks (`useCallback`) and a module-level vocabulary, or\n * the columns are rebuilt on every render.\n */\nexport function useUserRosterColumns<T extends UserRosterRow, R extends string = string>({\n  roles,\n  stateOf,\n  extra,\n  actions,\n  actionsHeader,\n  editableRole,\n  onRoleChange,\n  roleOf,\n  emailColumn,\n  labels: labelsProp,\n}: UserRosterColumnsOptions<T, R>): DataTableColumn<T>[] {\n  const labels = useKitLabels(\"userRoster\", DEFAULT_USER_ROSTER_LABELS, labelsProp);\n  return useMemo(\n    () =>\n      userRosterColumns<T, R>({\n        roles,\n        stateOf,\n        extra,\n        actions,\n        actionsHeader,\n        editableRole,\n        onRoleChange,\n        roleOf,\n        emailColumn,\n        labels,\n      }),\n    [roles, stateOf, extra, actions, actionsHeader, editableRole, onRoleChange, roleOf, emailColumn, labels],\n  );\n}\n"],"mappings":";AAkMiB,SAwHR,UAxHQ,KAET,YAFS;AAlMjB,SAAS,eAAe;AAExB,SAAS,UAAU;AAGnB,SAAS,cAAc,oBAAwC;AAC/D,SAAS,kBAAkB,UAAU,kBAAkB;AAIvD,SAAS,wBAAwB;AACjC,SAAS,mBAAmB;AAE5B,SAAS,kBAAkB;AAE3B,SAAS,kBAAkB;AAC3B,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAE3B,SAAS,kCAAkC;AA2EpC,SAAS,gBAAgB,KAA0C;AACxE,QAAM,MAAqB,CAAC;AAC5B,MAAI,IAAI,yBAAyB,IAAI,uBAAuB;AAC1D,QAAI,KAAK,EAAE,OAAO,YAAY,MAAM,IAAI,yBAAyB,KAAK,CAAC;AAAA,EACzE,WAAW,IAAI,cAAc,QAAW;AACtC,QAAI,KAAK,IAAI,YAAY,WAAW,UAAU;AAAA,EAChD;AACA,MAAI,IAAI,mBAAmB,MAAO,KAAI,KAAK,YAAY;AACvD,MAAI,IAAI,4BAA6B,KAAI,KAAK,gBAAgB;AAC9D,SAAO;AACT;AAGO,MAAM,wBAAwB,CAAC,QAAQ,SAAS,QAAQ,WAAW,YAAY;AAK/E,MAAM,wBAAwB;AAG9B,MAAM,4BAA4B;AAUlC,SAAS,eAAe,OAAiD;AAC9E,QAAM,QAAQ,MAAM,KAAK,CAAC,MAAO,sBAA4C,SAAS,EAAE,GAAG,CAAC;AAC5F,SAAO,QAAS,YAAY,CAAC,KAAK,CAAC,KAAK,SAAa;AACvD;AAoDO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACA,QAAQ;AAAA,EACR;AACF,GAA0B;AACxB,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,QAAQ,YAAY,EAAE,OAAO,QAAQ,OAAO,MAAM,QAAQ,MAAM,KAAK,GAAG,MAAM;AACpF,QAAM,WAAW,SAAS,IAAI,KAAK;AACnC,SACE,qBAAC,SAAI,WAAW,GAAG,qCAAqC,SAAS,GAC9D;AAAA,cAAU,oBAAC,cAAW,QAAgB,MAAY,OAAc,MAAK,MAAK;AAAA,IAC3E,qBAAC,SAAI,WAAU,WACb;AAAA,2BAAC,SAAI,WAAU,qCACb;AAAA,4BAAC,UAAK,gBAAY,MAAC,WAAU,iDAC1B,mBAAS,SACZ;AAAA,QACC;AAAA,SACH;AAAA,MACC,SAAS,WACR,oBAAC,SAAI,gBAAY,MAAC,WAAU,2CACzB,mBACH;AAAA,OAEJ;AAAA,KACF;AAEJ;AA6BO,SAAS,eAAe,EAAE,SAAS,MAAM,QAAQ,WAAW,GAAwB;AACzF,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,SAAO,oBAAC,cAAW,SAAkB,MAAY,UAAS,QAAO,QAAQ,EAAE,YAAY,OAAO,WAAW,GAAG;AAC9G;AAgDA,SAAS,QACP,KACA,QACK;AACL,QAAM,MAAM,SAAS,OAAO,GAAG,IAAM,IAAI,SAAS,IAAI;AACtD,MAAI,QAAQ,QAAQ,QAAQ,UAAa,QAAQ,GAAI,QAAO,CAAC;AAC7D,SAAO,OAAO,QAAQ,WAAW,CAAC,GAAQ,IAAI,CAAC,GAAI,GAAoB;AACzE;AAIA,SAAS,YAA8B,OAA0B,MAA+B;AAC9F,QAAM,QAAS,OAAO,KAAK,KAAK,EAAU,IAAI,CAAC,SAAS,MAAM,IAAI,EAAE,KAAK;AACzE,SAAO,SAAS,UAAa,EAAE,QAAQ,SAAS,CAAC,GAAG,OAAO,IAAI,IAAI;AACrE;AAIA,SAAS,QAAiC,EAAE,KAAK,SAAS,GAAsD;AAC9G,QAAM,SAAS,aAAa;AAC5B,QAAM,OAAO;AAAA,IACX,EAAE,OAAO,IAAI,YAAY,MAAM,IAAI,WAAW,MAAM,IAAI,cAAc,OAAO,IAAI,MAAM;AAAA,IACvF;AAAA,EACF;AACA,SAAO,gCAAG,mBAAS,IAAI,GAAE;AAC3B;AAEA,SAAS,WAAW,EAAE,OAAO,GAAuC;AAClE,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,SACE,oBAAC,SAAI,WAAU,wBACZ,iBAAO,IAAI,CAAC,UAAU;AACrB,UAAM,OAAO,OAAO,UAAU,WAAW,EAAE,OAAO,MAAM,IAAI;AAC5D,WACE,oBAAC,oBAAkC,OAAO,KAAK,OAAO,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,MAAK,MAC1F,eAAK,SADe,KAAK,KAE5B;AAAA,EAEJ,CAAC,GACH;AAEJ;AAgCO,SAAS,kBAAsE;AAAA,EACpF;AAAA,EACA,UAAU;AAAA,EACV,QAAQ,CAAC;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,QAAQ;AACV,GAAyD;AACvD,QAAM,SAA2B,EAAE,GAAG,4BAA4B,GAAG,WAAW;AAChF,QAAM,YAAY,CAAC,QACjB,QAAQ,KAAK,MAAM,EAChB,IAAI,CAAC,SAAS,MAAM,IAAI,GAAG,SAAS,IAAI,EACxC,KAAK,IAAI;AACd,QAAM,UAAgC;AAAA,IACpC;AAAA,MACE,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,MAAM,CAAC,QACL;AAAA,QAAC;AAAA;AAAA,UACC,QAAQ,EAAE,OAAO,IAAI,YAAY,MAAM,IAAI,UAAU;AAAA,UACrD,MAAM,IAAI;AAAA,UACV,OAAO,IAAI;AAAA;AAAA,MACb;AAAA;AAAA,MAGF,QAAQ,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,IAAI,IAAI,cAAc,EAAE,GAAG,KAAK,EAAE,kBAAkB,KAAK,IAAI;AAAA;AAAA,MAEpG,UAAU,CAAC,QACT,CAAC,IAAI,YAAY,IAAI,WAAW,IAAI,WAAW,IAAI,YAAY,IAAI,cAAc,IAAI,KAAK,EACvF,OAAO,OAAO,EACd,KAAK,GAAG;AAAA,MACb,eAAe;AAAA;AAAA;AAAA,MAGf,MAAM;AAAA,IACR;AAAA,EACF;AACA,MAAI,aAAa;AACf,YAAQ,KAAK;AAAA,MACX,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,WAAW;AAAA,MACX,MAAM,CAAC,QACL,oBAAC,UAAK,gBAAY,MAAC,WAAU,kBAC1B,cAAI,OACP;AAAA,MAEF,QAAQ,CAAC,QAAQ,IAAI,MAAM,YAAY;AAAA,MACvC,UAAU,CAAC,QAAQ,IAAI;AAAA,MACvB,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AACA,UAAQ;AAAA,IACN;AAAA,MACE,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,MAAM,CAAC,QAAQ;AACb,cAAM,OAAO,QAAQ,KAAK,MAAM;AAChC,cAAM,UAAU,KAAK,UAAU,IAAI,eAAe,GAAG,IAAI;AACzD,YAAI,WAAW,cAAc;AAC3B,gBAAM,QAAwB,YAAY,OAAO,CAAC,IAAI;AACtD,iBACE,oBAAC,WAAQ,KACN,WAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAUA,qBAAC,SACC;AAAA;AAAA,gBAAC;AAAA;AAAA,kBACC,MAAK;AAAA,kBACL;AAAA,kBACA,OAAO,KAAK,CAAC,KAAK;AAAA,kBAClB;AAAA,kBACA,SAAS,MAAM;AAAA,kBACf,gBAAgB,MAAM;AAAA,kBACtB,sBAAsB,MAAM;AAAA,kBAC5B,UAAU,CAAC,SAAS,aAAa,KAAK,IAAI;AAAA;AAAA,cAC5C;AAAA,cACA,oBAAC,oBAAiB,MAAK,MAAK,QAAQ,YAAY,OAAO,KAAK,CAAC,CAAC,GAAG;AAAA,eACnE;AAAA,aAEJ;AAAA,QAEJ;AACA,YAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,eACE,oBAAC,SAAI,WAAU,wBACZ,eAAK,IAAI,CAAC,SACT,oBAAC,YAAuB,OAAO,MAAM,OAAc,MAAK,QAAtC,IAA2C,CAC9D,GACH;AAAA,MAEJ;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,UAAU,CAAC,QAAQ,QAAQ,KAAK,MAAM,EAAE,CAAC,KAAK;AAAA,QAC9C,SAAU,OAAO,KAAK,KAAK,EAAU,IAAI,CAAC,WAAW,EAAE,OAAO,OAAO,MAAM,KAAK,EAAE,MAAM,EAAE;AAAA,MAC5F;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA;AAAA,MAEf,MAAM,CAAC,QAAQ;AACb,cAAM,SAAS,QAAQ,GAAG;AAC1B,eAAO,OAAO,WAAW,IAAI,OAAO,oBAAC,cAAW,QAAgB;AAAA,MAClE;AAAA;AAAA;AAAA,MAGA,MAAM;AAAA,IACR;AAAA,IACA,WAAc;AAAA,MACZ,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,OAAO,CAAC,QAAQ,IAAI,cAAc;AAAA;AAAA,MAElC,QAAQ,EAAE,cAAc,MAAM,aAAa,EAAE;AAAA,IAC/C,CAAC;AAAA;AAAA;AAAA;AAAA,IAID,WAAc;AAAA,MACZ,KAAK;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,OAAO,CAAC,QAAQ,IAAI,iBAAiB;AAAA,MACrC,SAAS;AAAA,MACT,OAAO,OAAO;AAAA,MACd,QAAQ,EAAE,QAAQ,aAAa,aAAa,EAAE;AAAA,IAChD,CAAC;AAAA,IACD,GAAG;AAAA,EACL;AACA,MAAI,SAAS;AACX,YAAQ,KAAK;AAAA,MACX,KAAK;AAAA;AAAA,MAEL,QACE,kBAAkB,QAAQ,oBAAC,UAAK,WAAU,WAAW,iBAAO,SAAQ,IAAW,iBAAiB,OAAO;AAAA,MACzG,YAAY,OAAO;AAAA;AAAA;AAAA,MAGnB,MAAM,CAAC,QACL,oBAAC,WAAQ,KACN,WAAC,SAAS,oBAAC,kBAAe,SAAS,QAAQ,GAAG,GAAG,MAAY,QAAQ,YAAY,GACpF;AAAA,MAEF,WAAW;AAAA,MACX,eAAe;AAAA;AAAA,MAEf,WAAW;AAAA;AAAA,MAEX,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAOO,SAAS,qBAAyE;AAAA,EACvF;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAAyD;AACvD,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,SAAO;AAAA,IACL,MACE,kBAAwB;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACH,CAAC,OAAO,SAAS,OAAO,SAAS,eAAe,cAAc,cAAc,QAAQ,aAAa,MAAM;AAAA,EACzG;AACF;","names":[]}

package/dist/auth/auth-errors.d.ts

@@ -1,3 +1,4 @@
+import type { BillingLabels } from "../billing/billing-labels.js";
 import { httpStatusOf } from "../lib/http-status.js";
 /**
  * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every
@@ -149,6 +150,41 @@ export declare function isAuthError(err: unknown, code?: KitErrorCode): boolean;
  * handler asks before it decides between the write lock, a `PlanLimitNotice` and a toast.
  */
 export declare function isBillingError(err: unknown, code?: BillingErrorCode): boolean;
+/** Who reads a `billing_read_only` refusal — {@link billingRefusalText}'s third argument,
+ *  `useBillingLockReason`'s two options. */
+export interface BillingRefusalTextOptions {
+    /** The reader is a GUEST in someone else's item (§12.6): the words never say why. */
+    guest?: boolean;
+    /** A guest's item, by its own name ("Household 2026"). Ignored for the payer. */
+    item?: string;
+}
+/**
+ * The words for a billing refusal, in `labels` (an app's `useBillingLabels()`, or its
+ * `billing` catalogue outside React), or `null` when `err` is not one — for the toast or
+ * the dialog after a billing call failed, with the app's own words for anything else
+ * (kastlan reuse audit 2026-11-02, proposal 4).
+ *
+ * All three apps mapped the codes to the labels by hand: kastlan's
+ * `billing-refusal-dialog.tsx`, keksdose's `subscription-cards.tsx` and Kurvenschmiede's
+ * `api/client.ts`, the same eight codes each. This follows the most complete of them:
+ * every {@link BillingErrorCode}, so it is `null` only for an error that is not billing's.
+ *
+ * - `billing_read_only` — the write lock's sentence, as `useBillingLockReason` says it:
+ *   the payer's `lockReason`, or with `{ guest: true, item }` a guest's `guestReadOnly`,
+ *   which never says why (§12.6) — kastlan's dialog, which passes `guest: !isAdmin`.
+ * - `plan_limit` — `limitReached`, "Plan limit reached". Where the figure fits, read
+ *   `isPlanLimit` first and show `PlanLimitNotice` or `usePlanLimitToast`, as kastlan does.
+ * - the eight others — their labels: `disabled`, `notConfigured`, `providerUnavailable`,
+ *   `notAtProvider`, `alreadySubscribed`, `planNotSold`, `notSubscribed`, `planUnchanged`.
+ *
+ * Reads the code wherever {@link authErrorCode} does (axios, ofetch, a generated client,
+ * FastAPI's nested `detail`).
+ *
+ *     catch (err) {
+ *       toast.error(billingRefusalText(err, labels) ?? describeError(err));
+ *     }
+ */
+export declare function billingRefusalText(err: unknown, labels: BillingLabels, options?: BillingRefusalTextOptions): string | null;
 /**
  * The parsed body that carries a code, wherever {@link authErrorCode} would find it (in
  * the same order) — the object with the `code`, so FastAPI's nested `detail` when the code

package/dist/auth/auth-errors.js

@@ -58,6 +58,25 @@ function isBillingError(err, code) {
   const found = authErrorCode(err);
   return found !== void 0 && BILLING_CODES.has(found) && (code === void 0 || found === code);
 }
+const BILLING_REFUSAL_WORDS = {
+  billing_disabled: (labels) => labels.disabled,
+  // The lock's own sentence (`useBillingLockReason`): a guest's never says why (§12.6).
+  billing_read_only: (labels, options) => options.guest ? labels.guestReadOnly(options.item) : labels.lockReason,
+  // The notice's first line. The figure and the way to more are `isPlanLimit`'s, for
+  // `PlanLimitNotice` or `usePlanLimitToast`.
+  plan_limit: (labels) => labels.limitReached,
+  billing_not_configured: (labels) => labels.notConfigured,
+  billing_provider_unavailable: (labels) => labels.providerUnavailable,
+  billing_not_at_provider: (labels) => labels.notAtProvider,
+  billing_already_subscribed: (labels) => labels.alreadySubscribed,
+  billing_plan_not_sold: (labels) => labels.planNotSold,
+  billing_not_subscribed: (labels) => labels.notSubscribed,
+  billing_plan_unchanged: (labels) => labels.planUnchanged
+};
+function billingRefusalText(err, labels, options = {}) {
+  const found = authErrorCode(err);
+  return found !== void 0 && BILLING_CODES.has(found) ? BILLING_REFUSAL_WORDS[found](labels, options) : null;
+}
 function errorBodyWithCode(err, accept = (code) => known(code) !== void 0) {
   if (!isBag(err)) return void 0;
   const response = err.response;
@@ -106,6 +125,7 @@ function retryAfterSeconds(err, now = Date.now()) {
 import { englishRateLimited, englishWait } from "./auth-errors-labels.js";
 export {
   authErrorCode,
+  billingRefusalText,
   englishRateLimited,
   englishWait,
   errorBodyWithCode,

package/dist/auth/auth-errors.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/auth-errors.ts"],"sourcesContent":["import { httpStatusOf } from \"../lib/http-status\";\n\n/**\n * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every\n * refusal the auth routes answer carries a machine-readable `code`, and the pages\n * recognise the CODE, never the server's sentence.\n *\n * Today each app's pages print the server's `detail` string (keksdose's\n * `extractApiErrorMessage`), which is English on every locale and, on a credential\n * check, would be an account-enumeration oracle if it ever said more than one thing.\n * keksdose already keys one refusal on a code (`features/budgets/plan-limit.ts`,\n * `402 {detail, code: \"plan_budget_limit\"}`); §5.2 makes that the rule for auth. Each\n * app switches its server and its pages together (§9).\n *\n * - `invalid_credentials` — unknown address, wrong password AND deactivated account:\n *   one answer, in the same time (§2.10). `401`.\n * - `registration_closed` — the sign-up gate refused the address. `403`.\n * - `email_taken` — an account with this address exists. `409`.\n * - `invitation_invalid`, `invitation_expired` — the `invite` token of a sign-up or an\n *   accept (§4.4).\n * - `token_invalid` — a one-time token (reset, verification, a sign-in challenge) is\n *   unknown, spent or expired.\n * - `account_inactive` — **no server answers it.** §2.10 decided that a deactivated\n *   account gets `invalid_credentials`, because a separate answer after a correct\n *   password would confirm a leaked one. It stays in the union only for a future server\n *   step that is past the password (an admin view, a signed-in refresh) and may say so.\n * - `session_ended` — 0.34.0 (§11.2, decision 7; server-kit 0.8): every definitive\n *   refusal of `POST /auth/refresh`, a `401`. No form shows it, so it has no label: the\n *   kit's `attachSessionRefresh` decides by the STATUS, so an app whose server has not\n *   switched yet keeps working.\n */\nexport type AuthErrorCode =\n  | \"invalid_credentials\"\n  | \"registration_closed\"\n  | \"email_taken\"\n  | \"invitation_invalid\"\n  | \"invitation_expired\"\n  | \"token_invalid\"\n  /** 0.30.0: a link that WAS valid and ran out (verification, reset) — keksdose's step-3\n   *  refusals tell it from `token_invalid`, so a page can say \"expired, ask for a new one\". */\n  | \"token_expired\"\n  | \"account_inactive\"\n  | \"session_ended\";\n\n/**\n * 0.30.0: the coded refusals of user administration and the account's own settings\n * (docs/user-admin-harmonization.md §4, §6) — server-kit 0.4.0's `AccountErrorCode`,\n * value for value. The same family of answer as the sign-in codes (`{detail, code}`,\n * plus `companies` on kastlan's `last_admin`), read by the same {@link authErrorCode}.\n *\n * - `last_admin` — the action would leave no active admin: deactivating, demoting or\n *   deleting the last one (in kastlan, of a company; the answer names the `companies`).\n * - `self_action` — an admin acting on their own account where that is never allowed.\n * - `other_companies` — kastlan: the account belongs to other companies too, so a\n *   company admin may not deactivate it; \"Remove from company\" instead (§9.6).\n * - `household_has_members` — keksdose's guard on a deletion request (§6.4).\n * - `confirmation_required`, `confirmation_mismatch` — the action's confirmation level\n *   asked for a typed address (or a tick), and the request carried none, or another\n *   address (§4.2).\n * - `password_incorrect` — the CURRENT password is wrong on a signed-in route (the email\n *   change, the deletion request). `400`, not `401`: an app's client reads a 401 as an\n *   ended session and signs the user out, the wrong answer to a typo. Every other one\n *   is a `409`.\n */\nexport type AccountErrorCode =\n  | \"last_admin\"\n  | \"self_action\"\n  | \"other_companies\"\n  | \"household_has_members\"\n  | \"confirmation_required\"\n  | \"confirmation_mismatch\"\n  | \"password_incorrect\";\n\n/**\n * 0.31.0: the demo's coded refusals (docs/landing-demo-harmonization.md §6.2) —\n * server-kit 0.5's `DemoErrorCode`, value for value, answered as `{detail, code}` like\n * the others and read by the same {@link authErrorCode}.\n *\n * - `demo_disabled` — `404`: the demo switch is off (it is \"not there\", not forbidden).\n * - `demo_rate_limited` — `429` with `Retry-After`: the per-IP window of demo starts.\n * - `demo_capacity` — `429`, no `Retry-After`: the cap of live demo users.\n * - `demo_not_ready` — `503`: the demo data has not been seeded yet.\n * - `demo_read_only` — `403`, model R: any write by a demo user. The app's write lock\n *   already explains it, so it shows no toast (§5.4).\n * - `demo_refused` — `403`, both models: an action a demo never may — a way in or out,\n *   mail, uploads, the account export (§6.4).\n */\nexport type DemoErrorCode =\n  \"demo_disabled\" | \"demo_rate_limited\" | \"demo_capacity\" | \"demo_not_ready\" | \"demo_read_only\" | \"demo_refused\";\n\n/**\n * 0.32.0: billing's coded refusals (docs/billing-harmonization.md §3.3, §3.4, §4, §12.3) —\n * server-kit 0.6's `BillingError` and `PlanLimitError`, value for value, answered as\n * `{detail, code}` like the others and read by the same {@link authErrorCode}.\n *\n * - `billing_disabled` — `404`: the billing switch is off (§2.9), so every billing route\n *   but `GET /billing/status` is \"not there\", as a switched-off demo is.\n * - `billing_read_only` — `402`: a write by (or into the data of) a payer out of good\n *   standing (§3.3, §12.1). Inside a sync reply it marks the changes that were refused\n *   and not applied (§12.5). The app's write lock and banner already say why, so — like\n *   `demo_read_only` — it needs no toast of its own.\n * - `plan_limit` — `402`: a create past the plan's limit (§3.4), with the extra fields\n *   `dimension`, `plan`, `limit` and `used` — read them with `isPlanLimit`. A lapsed payer\n *   creating gets `billing_read_only` instead, never this (§12.3).\n * - `billing_not_configured` — billing is switched on but the provider's settings are\n *   missing (the secrets, a price id): the operator's mistake, not the payer's.\n *\n * 0.33.0 (server-kit 0.7, §14.2): the provider's refusals, with the `billing_` prefix of\n * the others (decision 22).\n * - `billing_provider_unavailable` — `502`: Paddle didn't answer, or refused the request.\n *   Try again.\n * - `billing_not_at_provider` — `409`: a portal request before the payer reached the\n *   provider (§14.5) — a stale page; the overview's `at_provider` says it first.\n * - `billing_already_subscribed` — `409`: a checkout while a provider subscription runs\n *   (§14.6). Since 0.39 plan changes go through the plan switch (§15.2.10).\n * - `billing_plan_not_sold` — `422`: a checkout for a plan, currency or interval the\n *   catalogue doesn't sell — or (0.39) a switch to one.\n *\n * 0.39.0 (server-kit 0.12, §15.2.10): the plan switch's refusals.\n * - `billing_not_subscribed` — `409`: a switch with no running provider subscription;\n *   the page offers the checkout instead.\n * - `billing_plan_unchanged` — `409`: a switch to the price the payer pays now.\n */\nexport type BillingErrorCode =\n  | \"billing_disabled\"\n  | \"billing_read_only\"\n  | \"plan_limit\"\n  | \"billing_not_configured\"\n  | \"billing_provider_unavailable\"\n  | \"billing_not_at_provider\"\n  | \"billing_already_subscribed\"\n  | \"billing_plan_not_sold\"\n  | \"billing_not_subscribed\"\n  | \"billing_plan_unchanged\";\n\n/** Every code the kit reads: the sign-in refusals, the account ones (0.30.0), the demo's\n *  (0.31.0) and billing's (0.32.0). */\nexport type KitErrorCode = AuthErrorCode | AccountErrorCode | DemoErrorCode | BillingErrorCode;\n\nconst BILLING_CODES: ReadonlySet<BillingErrorCode> = new Set<BillingErrorCode>([\n  \"billing_disabled\",\n  \"billing_read_only\",\n  \"plan_limit\",\n  \"billing_not_configured\",\n  \"billing_provider_unavailable\",\n  \"billing_not_at_provider\",\n  \"billing_already_subscribed\",\n  \"billing_plan_not_sold\",\n  \"billing_not_subscribed\",\n  \"billing_plan_unchanged\",\n]);\n\nconst CODES: ReadonlySet<string> = new Set<KitErrorCode>([\n  \"invalid_credentials\",\n  \"registration_closed\",\n  \"email_taken\",\n  \"invitation_invalid\",\n  \"invitation_expired\",\n  \"token_invalid\",\n  \"token_expired\",\n  \"account_inactive\",\n  \"session_ended\",\n  \"last_admin\",\n  \"self_action\",\n  \"other_companies\",\n  \"household_has_members\",\n  \"confirmation_required\",\n  \"confirmation_mismatch\",\n  \"password_incorrect\",\n  \"demo_disabled\",\n  \"demo_rate_limited\",\n  \"demo_capacity\",\n  \"demo_not_ready\",\n  \"demo_read_only\",\n  \"demo_refused\",\n  ...BILLING_CODES,\n]);\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** A known code, or undefined. */\nfunction known(value: unknown): KitErrorCode | undefined {\n  return typeof value === \"string\" && CODES.has(value) ? (value as KitErrorCode) : undefined;\n}\n\n/** `{code}` on a parsed body, or FastAPI's `{detail: {code}}` — what an\n *  `HTTPException(detail={\"code\": …})` serialises to. */\nfunction codeOfBody(body: unknown): KitErrorCode | undefined {\n  if (!isBag(body)) return undefined;\n  return known(body.code) ?? (isBag(body.detail) ? known(body.detail.code) : undefined);\n}\n\n/**\n * The code an error carries — an {@link AuthErrorCode}, since 0.30.0 an\n * {@link AccountErrorCode}, since 0.31.0 a {@link DemoErrorCode}, since 0.32.0 a\n * {@link BillingErrorCode} — or `undefined` when it carries none.\n *\n * Reads the parsed response body wherever the apps' HTTP clients put it, without\n * depending on any of them:\n *\n *  1. `err.response.data` — axios (keksdose's, kastlan's and Kurvenschmiede's clients;\n *     keksdose's `isPlanBudgetLimitRefusal` reads the same path);\n *  2. `err.data` — ofetch's `FetchError`, and most `fetch` wrappers that parse the body;\n *  3. `err.body` — the generated OpenAPI clients' `ApiError`;\n *  4. `err` itself — a body thrown as it came (`throw await res.json()`).\n *\n * In each, `code` or FastAPI's nested `detail.code`. Last, `err.code` — but only when\n * it is one of the codes above: axios writes its OWN codes there (`ERR_NETWORK`,\n * `ECONNABORTED`, `ERR_BAD_REQUEST`), and so does Node, so an unknown value is never\n * read as a refusal. The HTTP status is not checked: the code is the contract, and the\n * status differs per refusal (401, 402, 403, 404, 409, 410).\n */\nexport function authErrorCode(err: unknown): KitErrorCode | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? codeOfBody(response.data) : undefined) ??\n    codeOfBody(err.data) ??\n    codeOfBody(err.body) ??\n    codeOfBody(err)\n  );\n}\n\n/**\n * Whether `err` is a coded auth refusal — any of them, or the one named:\n *\n * ```ts\n * try { await api.register(values) }\n * catch (err) { if (isAuthError(err, \"email_taken\")) … }\n * ```\n *\n * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject\n * with, so an app's `onSubmit` can simply let its client's error through. See\n * {@link authErrorCode} for the shapes it reads. Since 0.30.0 it knows the account codes\n * too: `isAuthError(err, \"last_admin\")`; since 0.31.0 the demo's:\n * `isAuthError(err, \"demo_read_only\")`; since 0.32.0 billing's:\n * `isAuthError(err, \"billing_read_only\")` (or {@link isBillingError}).\n */\nexport function isAuthError(err: unknown, code?: KitErrorCode): boolean {\n  const found = authErrorCode(err);\n  return found !== undefined && (code === undefined || found === code);\n}\n\n/**\n * Whether `err` is one of billing's coded refusals (0.32.0, docs/billing-harmonization.md\n * §10, §14.2) — any of them, or the one named. {@link isAuthError} answers the same for a\n * named code; this one also answers \"is it billing's at all\", which an app's error\n * handler asks before it decides between the write lock, a `PlanLimitNotice` and a toast.\n */\nexport function isBillingError(err: unknown, code?: BillingErrorCode): boolean {\n  const found = authErrorCode(err);\n  return found !== undefined && BILLING_CODES.has(found as BillingErrorCode) && (code === undefined || found === code);\n}\n\n/**\n * The parsed body that carries a code, wherever {@link authErrorCode} would find it (in\n * the same order) — the object with the `code`, so FastAPI's nested `detail` when the code\n * is there. For a reader of a refusal's EXTRA fields (`isPlanLimit`: `dimension`, `limit`,\n * `used` sit beside the code). `accept` decides which codes count; default, the known ones.\n *\n * @internal Not part of the barrel.\n */\nexport function errorBodyWithCode(\n  err: unknown,\n  accept: (code: unknown) => boolean = (code) => known(code) !== undefined,\n): Record<string, unknown> | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  for (const body of [isBag(response) ? response.data : undefined, err.data, err.body, err]) {\n    if (!isBag(body)) continue;\n    if (accept(body.code)) return body;\n    if (isBag(body.detail) && accept(body.detail.code)) return body.detail;\n  }\n  return undefined;\n}\n\n/**\n * The HTTP status a thrown error carries ({@link httpStatusOf}): axios'\n * `response.status`, then `status`, then `statusCode`. Lives in `lib/http-status.ts`\n * since 0.52 (refactor audit 2026-10-30, MOD-6); re-exported here for the modules that\n * import it from auth. Package-private — not re-exported from the barrel.\n */\nexport { httpStatusOf };\n\n/**\n * Whether `err` is a throttled request — HTTP `429 Too Many Requests` (0.30.0, from the\n * apps' 0.29 adoption: every app answered a throttled sign-in, sign-up or reset through\n * its own `describeError`, with three wordings of one sentence).\n *\n * A throttle carries no `code` in the contract — the STATUS is the answer, set by the\n * apps' limiters (server-kit's `AuthLimiters`, keksdose's per-IP limit) — so this reads\n * the status, wherever the apps' HTTP clients put it ({@link httpStatusOf}).\n *\n * There is no `rate_limited` code: keksdose answers its 429s uncoded, with a\n * `Retry-After` header, and the status is the one signal every limiter gives.\n *\n * The kit's `SignInForm`, `RegisterForm`, `ForgotPasswordForm` and `ResetPasswordForm`\n * call it AFTER the app's `describeError` — an app with words of its own keeps them —\n * and before their generic failure, so \"Too many attempts. Try again in 30 s.\" (with\n * {@link retryAfterSeconds}) or \"… Wait a moment and try again.\" needs no app code.\n */\nexport function isRateLimited(err: unknown): boolean {\n  return httpStatusOf(err) === 429;\n}\n\n/** A header's value from a `Headers` (fetch, ofetch's `response`), axios' `AxiosHeaders`\n *  or a plain record — whose keys may come in any case. */\nfunction headerOf(headers: unknown, name: string): unknown {\n  if (!isBag(headers)) return undefined;\n  if (typeof headers.get === \"function\") {\n    try {\n      const value: unknown = (headers.get as (key: string) => unknown).call(headers, name);\n      if (value !== undefined && value !== null) return value;\n    } catch {\n      // A `get` that is not a header lookup; the record below is.\n    }\n  }\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === name) return value;\n  }\n  return undefined;\n}\n\n/** `Retry-After` as seconds from `now`: delta-seconds (\"30\"), or an HTTP date\n *  (\"Wed, 07 Oct 2026 10:00:00 GMT\") counted from now, never below 0 (RFC 9110 §10.2.3). */\nfunction parseRetryAfter(value: unknown, now: number): number | undefined {\n  const raw = Array.isArray(value) ? (value as unknown[])[0] : value;\n  if (typeof raw === \"number\") return Number.isFinite(raw) && raw >= 0 ? Math.ceil(raw) : undefined;\n  if (typeof raw !== \"string\") return undefined;\n  const text = raw.trim();\n  if (/^\\d+$/.test(text)) return Number(text);\n  // An HTTP date names its day and month (\"Wed, 07 Oct 2026 …\"). Without a letter it is\n  // a malformed number (\"-5\", \"1.5\"), which `Date.parse` would happily read as a year.\n  if (!/[a-z]/i.test(text)) return undefined;\n  const at = Date.parse(text);\n  if (Number.isNaN(at)) return undefined;\n  return Math.max(0, Math.ceil((at - now) / 1000));\n}\n\n/**\n * How long a throttled request asks to wait, in whole seconds — its `Retry-After`\n * header (0.30.0, keksdose: its 429s carry no code, only the header) — or `undefined`\n * when there is none, or none that parses.\n *\n * Read where the apps' clients keep the response headers, without depending on any of\n * them: `err.response.headers` (axios' `AxiosHeaders` or a plain record; ofetch's\n * `FetchError.response`, a fetch `Headers`), then `err.headers` (a `Response` thrown as\n * it came). The value is delta-seconds, or an HTTP date turned into seconds from `now`\n * (default: the present moment) — never below 0.\n *\n * The forms hand it to their `rateLimited` label when {@link isRateLimited} is true:\n * \"Too many attempts. Try again in 30 s.\" — and, without one, \"… Wait a moment and try\n * again.\" A browser only exposes `Retry-After` to a cross-origin page when the server\n * lists it in `Access-Control-Expose-Headers`.\n */\nexport function retryAfterSeconds(err: unknown, now: number | Date = Date.now()): number | undefined {\n  if (!isBag(err)) return undefined;\n  const at = typeof now === \"number\" ? now : now.getTime();\n  const response = err.response;\n  const value =\n    (isBag(response) ? headerOf(response.headers, \"retry-after\") : undefined) ?? headerOf(err.headers, \"retry-after\");\n  return value === undefined ? undefined : parseRetryAfter(value, at);\n}\n\n// The English of the `rateLimited` labels, in auth-errors-labels since 0.52: the English\n// catalogue reached this module for them, and with it `lib/http-status` (refactor audit\n// 2026-10-30, MOD-6). Re-exported for the modules that import them from here.\nexport { englishRateLimited, englishWait } from \"./auth-errors-labels\";\n"],"mappings":";AAAA,SAAS,oBAAoB;AA2I7B,MAAM,gBAA+C,oBAAI,IAAsB;AAAA,EAC7E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,QAA6B,oBAAI,IAAkB;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,GAAG;AACL,CAAC;AAID,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,MAAM,OAA0C;AACvD,SAAO,OAAO,UAAU,YAAY,MAAM,IAAI,KAAK,IAAK,QAAyB;AACnF;AAIA,SAAS,WAAW,MAAyC;AAC3D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,SAAO,MAAM,KAAK,IAAI,MAAM,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI;AAC7E;AAsBO,SAAS,cAAc,KAAwC;AACpE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,WAAW,SAAS,IAAI,IAAI,WAC/C,WAAW,IAAI,IAAI,KACnB,WAAW,IAAI,IAAI,KACnB,WAAW,GAAG;AAElB;AAiBO,SAAS,YAAY,KAAc,MAA8B;AACtE,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,WAAc,SAAS,UAAa,UAAU;AACjE;AAQO,SAAS,eAAe,KAAc,MAAkC;AAC7E,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,UAAa,cAAc,IAAI,KAAyB,MAAM,SAAS,UAAa,UAAU;AACjH;AAUO,SAAS,kBACd,KACA,SAAqC,CAAC,SAAS,MAAM,IAAI,MAAM,QAC1B;AACrC,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,aAAW,QAAQ,CAAC,MAAM,QAAQ,IAAI,SAAS,OAAO,QAAW,IAAI,MAAM,IAAI,MAAM,GAAG,GAAG;AACzF,QAAI,CAAC,MAAM,IAAI,EAAG;AAClB,QAAI,OAAO,KAAK,IAAI,EAAG,QAAO;AAC9B,QAAI,MAAM,KAAK,MAAM,KAAK,OAAO,KAAK,OAAO,IAAI,EAAG,QAAO,KAAK;AAAA,EAClE;AACA,SAAO;AACT;AA2BO,SAAS,cAAc,KAAuB;AACnD,SAAO,aAAa,GAAG,MAAM;AAC/B;AAIA,SAAS,SAAS,SAAkB,MAAuB;AACzD,MAAI,CAAC,MAAM,OAAO,EAAG,QAAO;AAC5B,MAAI,OAAO,QAAQ,QAAQ,YAAY;AACrC,QAAI;AACF,YAAM,QAAkB,QAAQ,IAAiC,KAAK,SAAS,IAAI;AACnF,UAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAAA,IACpD,QAAQ;AAAA,IAER;AAAA,EACF;AACA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,KAAM,QAAO;AAAA,EACzC;AACA,SAAO;AACT;AAIA,SAAS,gBAAgB,OAAgB,KAAiC;AACxE,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAK,MAAoB,CAAC,IAAI;AAC7D,MAAI,OAAO,QAAQ,SAAU,QAAO,OAAO,SAAS,GAAG,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI;AACxF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,OAAO,IAAI,KAAK;AACtB,MAAI,QAAQ,KAAK,IAAI,EAAG,QAAO,OAAO,IAAI;AAG1C,MAAI,CAAC,SAAS,KAAK,IAAI,EAAG,QAAO;AACjC,QAAM,KAAK,KAAK,MAAM,IAAI;AAC1B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,OAAO,GAAI,CAAC;AACjD;AAkBO,SAAS,kBAAkB,KAAc,MAAqB,KAAK,IAAI,GAAuB;AACnG,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,KAAK,OAAO,QAAQ,WAAW,MAAM,IAAI,QAAQ;AACvD,QAAM,WAAW,IAAI;AACrB,QAAM,SACH,MAAM,QAAQ,IAAI,SAAS,SAAS,SAAS,aAAa,IAAI,WAAc,SAAS,IAAI,SAAS,aAAa;AAClH,SAAO,UAAU,SAAY,SAAY,gBAAgB,OAAO,EAAE;AACpE;AAKA,SAAS,oBAAoB,mBAAmB;","names":[]}
+{"version":3,"sources":["../../src/auth/auth-errors.ts"],"sourcesContent":["import type { BillingLabels } from \"../billing/billing-labels\";\nimport { httpStatusOf } from \"../lib/http-status\";\n\n/**\n * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every\n * refusal the auth routes answer carries a machine-readable `code`, and the pages\n * recognise the CODE, never the server's sentence.\n *\n * Today each app's pages print the server's `detail` string (keksdose's\n * `extractApiErrorMessage`), which is English on every locale and, on a credential\n * check, would be an account-enumeration oracle if it ever said more than one thing.\n * keksdose already keys one refusal on a code (`features/budgets/plan-limit.ts`,\n * `402 {detail, code: \"plan_budget_limit\"}`); §5.2 makes that the rule for auth. Each\n * app switches its server and its pages together (§9).\n *\n * - `invalid_credentials` — unknown address, wrong password AND deactivated account:\n *   one answer, in the same time (§2.10). `401`.\n * - `registration_closed` — the sign-up gate refused the address. `403`.\n * - `email_taken` — an account with this address exists. `409`.\n * - `invitation_invalid`, `invitation_expired` — the `invite` token of a sign-up or an\n *   accept (§4.4).\n * - `token_invalid` — a one-time token (reset, verification, a sign-in challenge) is\n *   unknown, spent or expired.\n * - `account_inactive` — **no server answers it.** §2.10 decided that a deactivated\n *   account gets `invalid_credentials`, because a separate answer after a correct\n *   password would confirm a leaked one. It stays in the union only for a future server\n *   step that is past the password (an admin view, a signed-in refresh) and may say so.\n * - `session_ended` — 0.34.0 (§11.2, decision 7; server-kit 0.8): every definitive\n *   refusal of `POST /auth/refresh`, a `401`. No form shows it, so it has no label: the\n *   kit's `attachSessionRefresh` decides by the STATUS, so an app whose server has not\n *   switched yet keeps working.\n */\nexport type AuthErrorCode =\n  | \"invalid_credentials\"\n  | \"registration_closed\"\n  | \"email_taken\"\n  | \"invitation_invalid\"\n  | \"invitation_expired\"\n  | \"token_invalid\"\n  /** 0.30.0: a link that WAS valid and ran out (verification, reset) — keksdose's step-3\n   *  refusals tell it from `token_invalid`, so a page can say \"expired, ask for a new one\". */\n  | \"token_expired\"\n  | \"account_inactive\"\n  | \"session_ended\";\n\n/**\n * 0.30.0: the coded refusals of user administration and the account's own settings\n * (docs/user-admin-harmonization.md §4, §6) — server-kit 0.4.0's `AccountErrorCode`,\n * value for value. The same family of answer as the sign-in codes (`{detail, code}`,\n * plus `companies` on kastlan's `last_admin`), read by the same {@link authErrorCode}.\n *\n * - `last_admin` — the action would leave no active admin: deactivating, demoting or\n *   deleting the last one (in kastlan, of a company; the answer names the `companies`).\n * - `self_action` — an admin acting on their own account where that is never allowed.\n * - `other_companies` — kastlan: the account belongs to other companies too, so a\n *   company admin may not deactivate it; \"Remove from company\" instead (§9.6).\n * - `household_has_members` — keksdose's guard on a deletion request (§6.4).\n * - `confirmation_required`, `confirmation_mismatch` — the action's confirmation level\n *   asked for a typed address (or a tick), and the request carried none, or another\n *   address (§4.2).\n * - `password_incorrect` — the CURRENT password is wrong on a signed-in route (the email\n *   change, the deletion request). `400`, not `401`: an app's client reads a 401 as an\n *   ended session and signs the user out, the wrong answer to a typo. Every other one\n *   is a `409`.\n */\nexport type AccountErrorCode =\n  | \"last_admin\"\n  | \"self_action\"\n  | \"other_companies\"\n  | \"household_has_members\"\n  | \"confirmation_required\"\n  | \"confirmation_mismatch\"\n  | \"password_incorrect\";\n\n/**\n * 0.31.0: the demo's coded refusals (docs/landing-demo-harmonization.md §6.2) —\n * server-kit 0.5's `DemoErrorCode`, value for value, answered as `{detail, code}` like\n * the others and read by the same {@link authErrorCode}.\n *\n * - `demo_disabled` — `404`: the demo switch is off (it is \"not there\", not forbidden).\n * - `demo_rate_limited` — `429` with `Retry-After`: the per-IP window of demo starts.\n * - `demo_capacity` — `429`, no `Retry-After`: the cap of live demo users.\n * - `demo_not_ready` — `503`: the demo data has not been seeded yet.\n * - `demo_read_only` — `403`, model R: any write by a demo user. The app's write lock\n *   already explains it, so it shows no toast (§5.4).\n * - `demo_refused` — `403`, both models: an action a demo never may — a way in or out,\n *   mail, uploads, the account export (§6.4).\n */\nexport type DemoErrorCode =\n  \"demo_disabled\" | \"demo_rate_limited\" | \"demo_capacity\" | \"demo_not_ready\" | \"demo_read_only\" | \"demo_refused\";\n\n/**\n * 0.32.0: billing's coded refusals (docs/billing-harmonization.md §3.3, §3.4, §4, §12.3) —\n * server-kit 0.6's `BillingError` and `PlanLimitError`, value for value, answered as\n * `{detail, code}` like the others and read by the same {@link authErrorCode}.\n *\n * - `billing_disabled` — `404`: the billing switch is off (§2.9), so every billing route\n *   but `GET /billing/status` is \"not there\", as a switched-off demo is.\n * - `billing_read_only` — `402`: a write by (or into the data of) a payer out of good\n *   standing (§3.3, §12.1). Inside a sync reply it marks the changes that were refused\n *   and not applied (§12.5). The app's write lock and banner already say why, so — like\n *   `demo_read_only` — it needs no toast of its own.\n * - `plan_limit` — `402`: a create past the plan's limit (§3.4), with the extra fields\n *   `dimension`, `plan`, `limit` and `used` — read them with `isPlanLimit`. A lapsed payer\n *   creating gets `billing_read_only` instead, never this (§12.3).\n * - `billing_not_configured` — billing is switched on but the provider's settings are\n *   missing (the secrets, a price id): the operator's mistake, not the payer's.\n *\n * 0.33.0 (server-kit 0.7, §14.2): the provider's refusals, with the `billing_` prefix of\n * the others (decision 22).\n * - `billing_provider_unavailable` — `502`: Paddle didn't answer, or refused the request.\n *   Try again.\n * - `billing_not_at_provider` — `409`: a portal request before the payer reached the\n *   provider (§14.5) — a stale page; the overview's `at_provider` says it first.\n * - `billing_already_subscribed` — `409`: a checkout while a provider subscription runs\n *   (§14.6). Since 0.39 plan changes go through the plan switch (§15.2.10).\n * - `billing_plan_not_sold` — `422`: a checkout for a plan, currency or interval the\n *   catalogue doesn't sell — or (0.39) a switch to one.\n *\n * 0.39.0 (server-kit 0.12, §15.2.10): the plan switch's refusals.\n * - `billing_not_subscribed` — `409`: a switch with no running provider subscription;\n *   the page offers the checkout instead.\n * - `billing_plan_unchanged` — `409`: a switch to the price the payer pays now.\n */\nexport type BillingErrorCode =\n  | \"billing_disabled\"\n  | \"billing_read_only\"\n  | \"plan_limit\"\n  | \"billing_not_configured\"\n  | \"billing_provider_unavailable\"\n  | \"billing_not_at_provider\"\n  | \"billing_already_subscribed\"\n  | \"billing_plan_not_sold\"\n  | \"billing_not_subscribed\"\n  | \"billing_plan_unchanged\";\n\n/** Every code the kit reads: the sign-in refusals, the account ones (0.30.0), the demo's\n *  (0.31.0) and billing's (0.32.0). */\nexport type KitErrorCode = AuthErrorCode | AccountErrorCode | DemoErrorCode | BillingErrorCode;\n\nconst BILLING_CODES: ReadonlySet<BillingErrorCode> = new Set<BillingErrorCode>([\n  \"billing_disabled\",\n  \"billing_read_only\",\n  \"plan_limit\",\n  \"billing_not_configured\",\n  \"billing_provider_unavailable\",\n  \"billing_not_at_provider\",\n  \"billing_already_subscribed\",\n  \"billing_plan_not_sold\",\n  \"billing_not_subscribed\",\n  \"billing_plan_unchanged\",\n]);\n\nconst CODES: ReadonlySet<string> = new Set<KitErrorCode>([\n  \"invalid_credentials\",\n  \"registration_closed\",\n  \"email_taken\",\n  \"invitation_invalid\",\n  \"invitation_expired\",\n  \"token_invalid\",\n  \"token_expired\",\n  \"account_inactive\",\n  \"session_ended\",\n  \"last_admin\",\n  \"self_action\",\n  \"other_companies\",\n  \"household_has_members\",\n  \"confirmation_required\",\n  \"confirmation_mismatch\",\n  \"password_incorrect\",\n  \"demo_disabled\",\n  \"demo_rate_limited\",\n  \"demo_capacity\",\n  \"demo_not_ready\",\n  \"demo_read_only\",\n  \"demo_refused\",\n  ...BILLING_CODES,\n]);\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** A known code, or undefined. */\nfunction known(value: unknown): KitErrorCode | undefined {\n  return typeof value === \"string\" && CODES.has(value) ? (value as KitErrorCode) : undefined;\n}\n\n/** `{code}` on a parsed body, or FastAPI's `{detail: {code}}` — what an\n *  `HTTPException(detail={\"code\": …})` serialises to. */\nfunction codeOfBody(body: unknown): KitErrorCode | undefined {\n  if (!isBag(body)) return undefined;\n  return known(body.code) ?? (isBag(body.detail) ? known(body.detail.code) : undefined);\n}\n\n/**\n * The code an error carries — an {@link AuthErrorCode}, since 0.30.0 an\n * {@link AccountErrorCode}, since 0.31.0 a {@link DemoErrorCode}, since 0.32.0 a\n * {@link BillingErrorCode} — or `undefined` when it carries none.\n *\n * Reads the parsed response body wherever the apps' HTTP clients put it, without\n * depending on any of them:\n *\n *  1. `err.response.data` — axios (keksdose's, kastlan's and Kurvenschmiede's clients;\n *     keksdose's `isPlanBudgetLimitRefusal` reads the same path);\n *  2. `err.data` — ofetch's `FetchError`, and most `fetch` wrappers that parse the body;\n *  3. `err.body` — the generated OpenAPI clients' `ApiError`;\n *  4. `err` itself — a body thrown as it came (`throw await res.json()`).\n *\n * In each, `code` or FastAPI's nested `detail.code`. Last, `err.code` — but only when\n * it is one of the codes above: axios writes its OWN codes there (`ERR_NETWORK`,\n * `ECONNABORTED`, `ERR_BAD_REQUEST`), and so does Node, so an unknown value is never\n * read as a refusal. The HTTP status is not checked: the code is the contract, and the\n * status differs per refusal (401, 402, 403, 404, 409, 410).\n */\nexport function authErrorCode(err: unknown): KitErrorCode | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? codeOfBody(response.data) : undefined) ??\n    codeOfBody(err.data) ??\n    codeOfBody(err.body) ??\n    codeOfBody(err)\n  );\n}\n\n/**\n * Whether `err` is a coded auth refusal — any of them, or the one named:\n *\n * ```ts\n * try { await api.register(values) }\n * catch (err) { if (isAuthError(err, \"email_taken\")) … }\n * ```\n *\n * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject\n * with, so an app's `onSubmit` can simply let its client's error through. See\n * {@link authErrorCode} for the shapes it reads. Since 0.30.0 it knows the account codes\n * too: `isAuthError(err, \"last_admin\")`; since 0.31.0 the demo's:\n * `isAuthError(err, \"demo_read_only\")`; since 0.32.0 billing's:\n * `isAuthError(err, \"billing_read_only\")` (or {@link isBillingError}).\n */\nexport function isAuthError(err: unknown, code?: KitErrorCode): boolean {\n  const found = authErrorCode(err);\n  return found !== undefined && (code === undefined || found === code);\n}\n\n/**\n * Whether `err` is one of billing's coded refusals (0.32.0, docs/billing-harmonization.md\n * §10, §14.2) — any of them, or the one named. {@link isAuthError} answers the same for a\n * named code; this one also answers \"is it billing's at all\", which an app's error\n * handler asks before it decides between the write lock, a `PlanLimitNotice` and a toast.\n */\nexport function isBillingError(err: unknown, code?: BillingErrorCode): boolean {\n  const found = authErrorCode(err);\n  return found !== undefined && BILLING_CODES.has(found as BillingErrorCode) && (code === undefined || found === code);\n}\n\n/** Who reads a `billing_read_only` refusal — {@link billingRefusalText}'s third argument,\n *  `useBillingLockReason`'s two options. */\nexport interface BillingRefusalTextOptions {\n  /** The reader is a GUEST in someone else's item (§12.6): the words never say why. */\n  guest?: boolean;\n  /** A guest's item, by its own name (\"Household 2026\"). Ignored for the payer. */\n  item?: string;\n}\n\ntype RefusalWords = (labels: BillingLabels, options: BillingRefusalTextOptions) => string;\n\n/**\n * Each billing refusal's words in the `billing` labels. A `Record` over the whole union, so\n * a code server-kit adds is a type error here until it has words.\n */\nconst BILLING_REFUSAL_WORDS: Record<BillingErrorCode, RefusalWords> = {\n  billing_disabled: (labels) => labels.disabled,\n  // The lock's own sentence (`useBillingLockReason`): a guest's never says why (§12.6).\n  billing_read_only: (labels, options) => (options.guest ? labels.guestReadOnly(options.item) : labels.lockReason),\n  // The notice's first line. The figure and the way to more are `isPlanLimit`'s, for\n  // `PlanLimitNotice` or `usePlanLimitToast`.\n  plan_limit: (labels) => labels.limitReached,\n  billing_not_configured: (labels) => labels.notConfigured,\n  billing_provider_unavailable: (labels) => labels.providerUnavailable,\n  billing_not_at_provider: (labels) => labels.notAtProvider,\n  billing_already_subscribed: (labels) => labels.alreadySubscribed,\n  billing_plan_not_sold: (labels) => labels.planNotSold,\n  billing_not_subscribed: (labels) => labels.notSubscribed,\n  billing_plan_unchanged: (labels) => labels.planUnchanged,\n};\n\n/**\n * The words for a billing refusal, in `labels` (an app's `useBillingLabels()`, or its\n * `billing` catalogue outside React), or `null` when `err` is not one — for the toast or\n * the dialog after a billing call failed, with the app's own words for anything else\n * (kastlan reuse audit 2026-11-02, proposal 4).\n *\n * All three apps mapped the codes to the labels by hand: kastlan's\n * `billing-refusal-dialog.tsx`, keksdose's `subscription-cards.tsx` and Kurvenschmiede's\n * `api/client.ts`, the same eight codes each. This follows the most complete of them:\n * every {@link BillingErrorCode}, so it is `null` only for an error that is not billing's.\n *\n * - `billing_read_only` — the write lock's sentence, as `useBillingLockReason` says it:\n *   the payer's `lockReason`, or with `{ guest: true, item }` a guest's `guestReadOnly`,\n *   which never says why (§12.6) — kastlan's dialog, which passes `guest: !isAdmin`.\n * - `plan_limit` — `limitReached`, \"Plan limit reached\". Where the figure fits, read\n *   `isPlanLimit` first and show `PlanLimitNotice` or `usePlanLimitToast`, as kastlan does.\n * - the eight others — their labels: `disabled`, `notConfigured`, `providerUnavailable`,\n *   `notAtProvider`, `alreadySubscribed`, `planNotSold`, `notSubscribed`, `planUnchanged`.\n *\n * Reads the code wherever {@link authErrorCode} does (axios, ofetch, a generated client,\n * FastAPI's nested `detail`).\n *\n *     catch (err) {\n *       toast.error(billingRefusalText(err, labels) ?? describeError(err));\n *     }\n */\nexport function billingRefusalText(\n  err: unknown,\n  labels: BillingLabels,\n  options: BillingRefusalTextOptions = {},\n): string | null {\n  const found = authErrorCode(err);\n  return found !== undefined && BILLING_CODES.has(found as BillingErrorCode)\n    ? BILLING_REFUSAL_WORDS[found as BillingErrorCode](labels, options)\n    : null;\n}\n\n/**\n * The parsed body that carries a code, wherever {@link authErrorCode} would find it (in\n * the same order) — the object with the `code`, so FastAPI's nested `detail` when the code\n * is there. For a reader of a refusal's EXTRA fields (`isPlanLimit`: `dimension`, `limit`,\n * `used` sit beside the code). `accept` decides which codes count; default, the known ones.\n *\n * @internal Not part of the barrel.\n */\nexport function errorBodyWithCode(\n  err: unknown,\n  accept: (code: unknown) => boolean = (code) => known(code) !== undefined,\n): Record<string, unknown> | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  for (const body of [isBag(response) ? response.data : undefined, err.data, err.body, err]) {\n    if (!isBag(body)) continue;\n    if (accept(body.code)) return body;\n    if (isBag(body.detail) && accept(body.detail.code)) return body.detail;\n  }\n  return undefined;\n}\n\n/**\n * The HTTP status a thrown error carries ({@link httpStatusOf}): axios'\n * `response.status`, then `status`, then `statusCode`. Lives in `lib/http-status.ts`\n * since 0.52 (refactor audit 2026-10-30, MOD-6); re-exported here for the modules that\n * import it from auth. Package-private — not re-exported from the barrel.\n */\nexport { httpStatusOf };\n\n/**\n * Whether `err` is a throttled request — HTTP `429 Too Many Requests` (0.30.0, from the\n * apps' 0.29 adoption: every app answered a throttled sign-in, sign-up or reset through\n * its own `describeError`, with three wordings of one sentence).\n *\n * A throttle carries no `code` in the contract — the STATUS is the answer, set by the\n * apps' limiters (server-kit's `AuthLimiters`, keksdose's per-IP limit) — so this reads\n * the status, wherever the apps' HTTP clients put it ({@link httpStatusOf}).\n *\n * There is no `rate_limited` code: keksdose answers its 429s uncoded, with a\n * `Retry-After` header, and the status is the one signal every limiter gives.\n *\n * The kit's `SignInForm`, `RegisterForm`, `ForgotPasswordForm` and `ResetPasswordForm`\n * call it AFTER the app's `describeError` — an app with words of its own keeps them —\n * and before their generic failure, so \"Too many attempts. Try again in 30 s.\" (with\n * {@link retryAfterSeconds}) or \"… Wait a moment and try again.\" needs no app code.\n */\nexport function isRateLimited(err: unknown): boolean {\n  return httpStatusOf(err) === 429;\n}\n\n/** A header's value from a `Headers` (fetch, ofetch's `response`), axios' `AxiosHeaders`\n *  or a plain record — whose keys may come in any case. */\nfunction headerOf(headers: unknown, name: string): unknown {\n  if (!isBag(headers)) return undefined;\n  if (typeof headers.get === \"function\") {\n    try {\n      const value: unknown = (headers.get as (key: string) => unknown).call(headers, name);\n      if (value !== undefined && value !== null) return value;\n    } catch {\n      // A `get` that is not a header lookup; the record below is.\n    }\n  }\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === name) return value;\n  }\n  return undefined;\n}\n\n/** `Retry-After` as seconds from `now`: delta-seconds (\"30\"), or an HTTP date\n *  (\"Wed, 07 Oct 2026 10:00:00 GMT\") counted from now, never below 0 (RFC 9110 §10.2.3). */\nfunction parseRetryAfter(value: unknown, now: number): number | undefined {\n  const raw = Array.isArray(value) ? (value as unknown[])[0] : value;\n  if (typeof raw === \"number\") return Number.isFinite(raw) && raw >= 0 ? Math.ceil(raw) : undefined;\n  if (typeof raw !== \"string\") return undefined;\n  const text = raw.trim();\n  if (/^\\d+$/.test(text)) return Number(text);\n  // An HTTP date names its day and month (\"Wed, 07 Oct 2026 …\"). Without a letter it is\n  // a malformed number (\"-5\", \"1.5\"), which `Date.parse` would happily read as a year.\n  if (!/[a-z]/i.test(text)) return undefined;\n  const at = Date.parse(text);\n  if (Number.isNaN(at)) return undefined;\n  return Math.max(0, Math.ceil((at - now) / 1000));\n}\n\n/**\n * How long a throttled request asks to wait, in whole seconds — its `Retry-After`\n * header (0.30.0, keksdose: its 429s carry no code, only the header) — or `undefined`\n * when there is none, or none that parses.\n *\n * Read where the apps' clients keep the response headers, without depending on any of\n * them: `err.response.headers` (axios' `AxiosHeaders` or a plain record; ofetch's\n * `FetchError.response`, a fetch `Headers`), then `err.headers` (a `Response` thrown as\n * it came). The value is delta-seconds, or an HTTP date turned into seconds from `now`\n * (default: the present moment) — never below 0.\n *\n * The forms hand it to their `rateLimited` label when {@link isRateLimited} is true:\n * \"Too many attempts. Try again in 30 s.\" — and, without one, \"… Wait a moment and try\n * again.\" A browser only exposes `Retry-After` to a cross-origin page when the server\n * lists it in `Access-Control-Expose-Headers`.\n */\nexport function retryAfterSeconds(err: unknown, now: number | Date = Date.now()): number | undefined {\n  if (!isBag(err)) return undefined;\n  const at = typeof now === \"number\" ? now : now.getTime();\n  const response = err.response;\n  const value =\n    (isBag(response) ? headerOf(response.headers, \"retry-after\") : undefined) ?? headerOf(err.headers, \"retry-after\");\n  return value === undefined ? undefined : parseRetryAfter(value, at);\n}\n\n// The English of the `rateLimited` labels, in auth-errors-labels since 0.52: the English\n// catalogue reached this module for them, and with it `lib/http-status` (refactor audit\n// 2026-10-30, MOD-6). Re-exported for the modules that import them from here.\nexport { englishRateLimited, englishWait } from \"./auth-errors-labels\";\n"],"mappings":";AACA,SAAS,oBAAoB;AA2I7B,MAAM,gBAA+C,oBAAI,IAAsB;AAAA,EAC7E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,QAA6B,oBAAI,IAAkB;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,GAAG;AACL,CAAC;AAID,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,MAAM,OAA0C;AACvD,SAAO,OAAO,UAAU,YAAY,MAAM,IAAI,KAAK,IAAK,QAAyB;AACnF;AAIA,SAAS,WAAW,MAAyC;AAC3D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,SAAO,MAAM,KAAK,IAAI,MAAM,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI;AAC7E;AAsBO,SAAS,cAAc,KAAwC;AACpE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,WAAW,SAAS,IAAI,IAAI,WAC/C,WAAW,IAAI,IAAI,KACnB,WAAW,IAAI,IAAI,KACnB,WAAW,GAAG;AAElB;AAiBO,SAAS,YAAY,KAAc,MAA8B;AACtE,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,WAAc,SAAS,UAAa,UAAU;AACjE;AAQO,SAAS,eAAe,KAAc,MAAkC;AAC7E,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,UAAa,cAAc,IAAI,KAAyB,MAAM,SAAS,UAAa,UAAU;AACjH;AAiBA,MAAM,wBAAgE;AAAA,EACpE,kBAAkB,CAAC,WAAW,OAAO;AAAA;AAAA,EAErC,mBAAmB,CAAC,QAAQ,YAAa,QAAQ,QAAQ,OAAO,cAAc,QAAQ,IAAI,IAAI,OAAO;AAAA;AAAA;AAAA,EAGrG,YAAY,CAAC,WAAW,OAAO;AAAA,EAC/B,wBAAwB,CAAC,WAAW,OAAO;AAAA,EAC3C,8BAA8B,CAAC,WAAW,OAAO;AAAA,EACjD,yBAAyB,CAAC,WAAW,OAAO;AAAA,EAC5C,4BAA4B,CAAC,WAAW,OAAO;AAAA,EAC/C,uBAAuB,CAAC,WAAW,OAAO;AAAA,EAC1C,wBAAwB,CAAC,WAAW,OAAO;AAAA,EAC3C,wBAAwB,CAAC,WAAW,OAAO;AAC7C;AA4BO,SAAS,mBACd,KACA,QACA,UAAqC,CAAC,GACvB;AACf,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,UAAa,cAAc,IAAI,KAAyB,IACrE,sBAAsB,KAAyB,EAAE,QAAQ,OAAO,IAChE;AACN;AAUO,SAAS,kBACd,KACA,SAAqC,CAAC,SAAS,MAAM,IAAI,MAAM,QAC1B;AACrC,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,aAAW,QAAQ,CAAC,MAAM,QAAQ,IAAI,SAAS,OAAO,QAAW,IAAI,MAAM,IAAI,MAAM,GAAG,GAAG;AACzF,QAAI,CAAC,MAAM,IAAI,EAAG;AAClB,QAAI,OAAO,KAAK,IAAI,EAAG,QAAO;AAC9B,QAAI,MAAM,KAAK,MAAM,KAAK,OAAO,KAAK,OAAO,IAAI,EAAG,QAAO,KAAK;AAAA,EAClE;AACA,SAAO;AACT;AA2BO,SAAS,cAAc,KAAuB;AACnD,SAAO,aAAa,GAAG,MAAM;AAC/B;AAIA,SAAS,SAAS,SAAkB,MAAuB;AACzD,MAAI,CAAC,MAAM,OAAO,EAAG,QAAO;AAC5B,MAAI,OAAO,QAAQ,QAAQ,YAAY;AACrC,QAAI;AACF,YAAM,QAAkB,QAAQ,IAAiC,KAAK,SAAS,IAAI;AACnF,UAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAAA,IACpD,QAAQ;AAAA,IAER;AAAA,EACF;AACA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,KAAM,QAAO;AAAA,EACzC;AACA,SAAO;AACT;AAIA,SAAS,gBAAgB,OAAgB,KAAiC;AACxE,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAK,MAAoB,CAAC,IAAI;AAC7D,MAAI,OAAO,QAAQ,SAAU,QAAO,OAAO,SAAS,GAAG,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI;AACxF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,OAAO,IAAI,KAAK;AACtB,MAAI,QAAQ,KAAK,IAAI,EAAG,QAAO,OAAO,IAAI;AAG1C,MAAI,CAAC,SAAS,KAAK,IAAI,EAAG,QAAO;AACjC,QAAM,KAAK,KAAK,MAAM,IAAI;AAC1B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,OAAO,GAAI,CAAC;AACjD;AAkBO,SAAS,kBAAkB,KAAc,MAAqB,KAAK,IAAI,GAAuB;AACnG,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,KAAK,OAAO,QAAQ,WAAW,MAAM,IAAI,QAAQ;AACvD,QAAM,WAAW,IAAI;AACrB,QAAM,SACH,MAAM,QAAQ,IAAI,SAAS,SAAS,SAAS,aAAa,IAAI,WAAc,SAAS,IAAI,SAAS,aAAa;AAClH,SAAO,UAAU,SAAY,SAAY,gBAAgB,OAAO,EAAE;AACpE;AAKA,SAAS,oBAAoB,mBAAmB;","names":[]}

package/dist/billing/billing-labels.d.ts

@@ -69,6 +69,32 @@ export interface BillingLabels {
     pickFirst: string;
     /** One word per status. */
     status: Record<SubscriptionStatus, string>;
+    /**
+     * The subscription's standing in one line, under the plan's name: `SubscriptionStanding`
+     * and `subscriptionStanding` say the FIRST that applies, in this order. `date` arrives
+     * formatted. The words are keksdose's reviewed ones (`billing.trial_until`, …), which
+     * kastlan's page said in words of its own (kastlan reuse audit 2026-11-02, proposal 3).
+     */
+    standing: {
+        /** Out of good standing (§3.3): the first sentence of {@link BillingLabels.planEnded}
+         *  and {@link BillingLabels.lockReason}, which the plan-ended banner goes on with —
+         *  "Your plan has ended." */
+        ended: string;
+        /** `past_due` while the provider retries (§3.3): still in good standing, and NO date —
+         *  the payment-failed banner carries the action, and "renews on" would promise what
+         *  the retries may not keep. */
+        pastDue: string;
+        /** `trialing`, with its `trial_ends_at`: "Trial until 9 Nov 2026". */
+        trialUntil: (date: string) => string;
+        /** `comped`, with its `comped_until`: "Free until 9 Nov 2026". */
+        freeUntil: (date: string) => string;
+        /** `comped` without an end (§12.8): "Free, with no end date". */
+        free: string;
+        /** Set to cancel at the period's end (`cancel_at_period_end`): "Ends on 9 Nov 2026". */
+        endsOn: (date: string) => string;
+        /** `active`, at `current_period_end`: "Renews on 9 Nov 2026". */
+        renewsOn: (date: string) => string;
+    };
     /** A trial ends in `days` calendar days — 0 is today, 1 tomorrow. */
     trialEnding: (days: number) => string;
     /** A free grant (`comped_until`: a beta user's 12 months, an operator's grant) ends in

package/dist/billing/billing-labels.js

@@ -42,6 +42,15 @@ const DEFAULT_BILLING_LABELS = {
     expired: "Expired",
     comped: "Complimentary"
   },
+  standing: {
+    ended: "Your plan has ended.",
+    pastDue: "Payment failed \u2014 we\u2019re retrying. Your plan stays active meanwhile.",
+    trialUntil: (date) => `Trial until ${date}`,
+    freeUntil: (date) => `Free until ${date}`,
+    free: "Free, with no end date",
+    endsOn: (date) => `Ends on ${date}`,
+    renewsOn: (date) => `Renews on ${date}`
+  },
   trialEnding: (days) => `Your trial ends ${inDays(days)}. After that you can still view everything, but changes need a plan.`,
   grantEnding: (days) => `Your free access ends ${inDays(days)}. After that you can still view everything, but changes need a plan.`,
   paymentFailed: "Your last payment didn\u2019t go through. Update your payment method to keep your plan.",