@eifi1/ui-kit 0.54.0 → 0.55.0

package/dist/components/country-select.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/country-select.tsx"],"sourcesContent":["import { useCallback, useId, useMemo } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode, Ref } from \"react\";\nimport { X } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { COUNTRY_CODES, countryName, normalizeCountryCode } from \"../lib/countries\";\nimport { searchRanked } from \"../lib/text-match\";\nimport { FieldChevron, FIELD_FLOATING_PAD, FIELD_INVALID, FIELD_TRIGGER, FloatingField } from \"./field-base\";\nimport {\n  assignRef,\n  EndHintRow,\n  LockedReason,\n  mergeDescribedBy,\n  useFieldMessages,\n  useLockReason,\n  type DisabledReasonDisplay,\n  type FieldHelpProps,\n} from \"./field-parts\";\nimport { CurrencyFlag } from \"./currency-select\";\nimport { ComboboxPanel, useComboboxCore, type ComboOption } from \"./combobox-core\";\nimport type { CommitScope } from \"./write-lock\";\nimport {\n  DEFAULT_COMBOBOX_LABELS,\n  DEFAULT_COMMON_LABELS,\n  useKitLabels,\n  useKitLocale,\n  type LabelOverride,\n} from \"../i18n/kit-labels\";\nimport { DEFAULT_COUNTRY_SELECT_LABELS } from \"./country-select-labels\";\n\n// ── Labels ────────────────────────────────────────────────────────────────────\n\n/** The words {@link CountrySelect} renders on its own behalf. The list's \"no results\",\n *  \"loading\" and result-count announcements are the shared `combobox` namespace's,\n *  as on every other searchable picker. */\nexport interface CountrySelectLabels {\n  /** What the field is, when the caller gives no `label`: the first half of the\n   *  trigger's accessible name, the phone sheet's title, and the empty trigger's\n   *  text. */\n  country: string;\n  /** The search box in the open list. */\n  search: string;\n  /** The heading between the `preferred` countries and all the others. Shown only\n   *  when `preferred` puts something above it. */\n  others: string;\n}\n\n// Defined in ./country-select-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_COUNTRY_SELECT_LABELS };\n\n// ── Props ─────────────────────────────────────────────────────────────────────\n\n/**\n * `onChange` is the kit's — \"a country was picked\", carrying its code — rather than\n * the div's form event. `id` and the `aria-*` wiring below go to the TRIGGER, which is\n * the control a reader meets; everything else in `rest` dresses the wrapper.\n *\n * `Clearable` follows `clearable`, the way {@link EntityCombobox}'s `C` follows its\n * `clearValue`: it is inferred from the prop, so `onChange` is `(code: string) => void`\n * for the field as it always was (`onChange={setCountry}` over a `string` state still\n * type-checks), and `(code: string | null) => void` once `clearable` is set — the\n * `null` of a clear cannot reach a handler that was never told about it.\n */\nexport interface CountrySelectProps<Clearable extends boolean = false>\n  extends Omit<ComponentPropsWithoutRef<\"div\">, \"onChange\" | \"defaultValue\">, FieldHelpProps {\n  /** The chosen country as an ISO 3166-1 alpha-2 code (\"CH\"), in either case;\n   *  `null`, `undefined` or `\"\"` when none is. A code outside the list still shows\n   *  its name — the list restricts what can be PICKED, not what can be shown. */\n  value: string | null | undefined;\n  /** A country was picked: its alpha-2 code, always upper-case. With `clearable`,\n   *  also `null`: the \"×\" (or Delete on the trigger) emptied the field. */\n  onChange: (code: Clearable extends true ? string | null : string) => void;\n  /**\n   * Offer a clear \"×\" in place of the chevron while a country is chosen; it hands\n   * `onChange` `null` (the kit's later list: an optional country — a contact's\n   * nationality, a bank filter's \"any country\" — could be set but never unset again).\n   *\n   * The combobox family's clear, as {@link EntityCombobox} draws it: a pointer\n   * shortcut inside the trigger, out of the tab order so it is not a second stop\n   * between this field and the next, named by `clearLabel` (default: the\n   * `combobox.clear` label every picker in the family shares). The keyboard way is\n   * Delete or Backspace on the closed trigger. Not offered while `disabled` or locked\n   * (`commit` / `disabledReason`): a clear is a change like any other.\n   */\n  clearable?: Clearable;\n  /** The clear \"×\"'s accessible name. Wins over `combobox.clear` from the\n   *  {@link UiKitProvider}, as {@link EntityCombobox}'s `clearLabel` does. */\n  clearLabel?: string;\n  /**\n   * The TRIGGER — the focusable `<button>` a reader meets — as a React 19 ref prop,\n   * the way {@link MoneyField} takes its input's (kastlan: react-hook-form's\n   * focus-on-error calls `focus()` on whatever `field.ref` was handed, and without a\n   * ref the first field in error on an address form was never focused). See\n   * `RhfCountrySelect`, which passes it.\n   */\n  ref?: Ref<HTMLButtonElement>;\n  /**\n   * Offer only these codes (any case; duplicates and malformed entries dropped).\n   * Default: every ISO 3166-1 country, {@link COUNTRY_CODES}. Sorted by name either\n   * way — the order given is not kept, because the reader looks a country up by its\n   * name in their own language, and any other order is one they cannot predict.\n   *\n   * keksdose's bank picker passes the countries its configured bank-connection provider\n   * serves, read at runtime: its connections are provider-neutral since 2026-10-29, so\n   * the list is no longer a fixed fifteen. A code that is not in ISO's list is allowed\n   * here on purpose: `XK` (Kosovo) is the app's decision, not the kit's.\n   */\n  countries?: readonly string[];\n  /**\n   * A short group shown FIRST, in the order given, above the alphabetical rest —\n   * kastlan's CH, LI, DE, AT, FR, IT, the six countries most of its customers live\n   * in, out of a list of 249. Each code appears once: a preferred country is not\n   * repeated in the rest. The rest gets a heading (`labels.others`) so the boundary\n   * is visible. Search keeps the split: matching preferred countries stay on top.\n   * Codes not in `countries` are ignored — `countries` decides what can be picked.\n   */\n  preferred?: readonly string[];\n  /**\n   * Draw each country's flag as a flag-icons span (`fi fi-ch`), in the rows and on\n   * the trigger. Default `false`, because the kit ships no flag stylesheet — the same\n   * convention as `LanguageMenu`'s `country` and `CurrencySelect`: the host imports\n   * `flag-icons/css/flag-icons.min.css`, and without it a flag is an empty box.\n   */\n  flags?: boolean;\n  /** The floating label, as on every field. A string also names the trigger\n   *  (\"Country: Switzerland\"). */\n  label?: ReactNode;\n  /** As {@link Select}'s `hint`: plain TEXT is a caption under the field, attached\n   *  through `aria-describedby`; a {@link FieldHint} rides the label line (or the\n   *  field's end, when there is no label). */\n  hint?: ReactNode;\n  /** As {@link Input}'s `error`: rendered under the field, on the trigger's\n   *  `aria-describedby`, and implies `invalid`. */\n  error?: ReactNode;\n  /** Required and unanswered — {@link FIELD_INVALID}, as on every field. */\n  invalid?: boolean;\n  /** The empty trigger's text. Default: nothing when the field has a `label` or an\n   *  `aria-labelledby` (the label already says what goes here), else `labels.country`. */\n  placeholder?: string;\n  /** As on the other pickers: no focus, no list, the settled look. */\n  disabled?: boolean;\n  /**\n   * Why the country cannot be changed — {@link Button}'s `disabledReason`, for a field\n   * that saves itself. The trigger stays focusable and `aria-disabled`, the list does\n   * not open and `onChange` never fires; the reason is a line under the field at Large\n   * and on a touch screen, else in the kit {@link Tooltip} (`disabledReasonDisplay`), and\n   * on the trigger's `aria-describedby`. Wins over `disabled`.\n   */\n  disabledReason?: ReactNode;\n  /** Where the reason shows — {@link Button}'s `disabledReasonDisplay`: a line under the\n   *  field at Large and on a touch screen by default, the tooltip otherwise (DUP-3). */\n  disabledReasonDisplay?: DisabledReasonDisplay;\n  /**\n   * This select SAVES on change (a settings row with no Save button). Under a locked\n   * {@link WriteLockProvider} it is locked the `disabledReason` way, with the lock's\n   * reason. A country field inside a form that has its own Save stays editable under\n   * the lock — leave this off there, and put `commit` on the Save.\n   */\n  commit?: CommitScope;\n  /** The language the names are in. Default: the `<UiKitProvider locale>`, else\n   *  English (see {@link countryName}). */\n  locale?: string;\n  /** Per-instance overrides of {@link CountrySelectLabels}, over the provider's\n   *  `countrySelect` namespace, over English. */\n  labels?: LabelOverride<CountrySelectLabels>;\n  /**\n   * Name the trigger by an element of the caller's — a form's own label above the\n   * field, which is how `RhfCountrySelect` names it. The trigger is then named by\n   * that element AND the chosen country (two references, as {@link DatePicker}'s\n   * trigger is named, so \"Country Switzerland\" needs no punctuation to translate),\n   * instead of the composed \"label: country\". An `aria-label` still wins. Before\n   * 0.23 this landed on the wrapper `<div>`, which has no role to be named.\n   */\n  \"aria-labelledby\"?: string;\n}\n\ninterface Entry {\n  code: string;\n  name: string;\n}\n\n/** Every word of the query in the name, or the whole code (0.51.4's rule: \"kinshasa\n *  congo\" finds Congo - Kinshasa; refactor audit 2026-10-30, DUP-4), best rank first; a\n *  stable sort, so equal ranks keep the collated (or preferred) order they came in. The\n *  rank is the kit's one, for the WHOLE query (`rankMatch`, DUP-5 — written here first):\n *  the code itself (a two-letter query \"ch\" means Switzerland before it means Chad), then\n *  the start of the name, then anywhere in it, then the words apart (`searchRanked`, each\n *  name and code folded once), with accents and case folded — \"osterreich\" finds\n *  Österreich, \"cote\" Côte d'Ivoire.\n *\n *  A word is the code or it is not: searched INSIDE the code, as one more text, \"w\"\n *  listed Aruba (AW) and Samoa (WS) and \"d\" Germany (DE), names with nothing of the\n *  query in them (0.52 code review, country-select.tsx). */\nfunction search(entries: Entry[], q: string, locale: string): Entry[] {\n  return searchRanked(entries, q, (e) => [e.name], { code: (e) => e.code, locale })\n    .sort((a, b) => a.rank - b.rank)\n    .map((x) => x.row);\n}\n\nfunction toOption(e: Entry, flags: boolean, group?: string): ComboOption<string> {\n  return {\n    value: e.code,\n    label: e.name,\n    icon: flags ? <CurrencyFlag country={e.code.toLowerCase()} /> : undefined,\n    group,\n  };\n}\n\nfunction collator(locale: string): Intl.Collator {\n  try {\n    return new Intl.Collator(locale);\n  } catch {\n    return new Intl.Collator();\n  }\n}\n\n/**\n * A country picker: the value is the ISO 3166-1 alpha-2 code (\"CH\"), the names are the\n * runtime's own (`Intl.DisplayNames`) in the provider's locale, sorted by that\n * locale's collation. Requested by kastlan (customer and handover addresses, with its\n * six neighbours on top) and keksdose (its bank picker's countries) — both\n * apps carried a hand-written list of names in two languages.\n *\n * ## Built on the kit's searchable combobox\n *\n * 249 countries is not a menu, it is a lookup, and the list has to work on a phone. So\n * this is the entity pickers' machinery — `useComboboxCore` and `ComboboxPanel`, which\n * {@link EntityCombobox} is also made of — not a native `<select>`: the anchored panel\n * with a search box on a pointer device, the full-screen sheet with its own search box\n * on a phone (live #200), the same keyboard (APG listbox), the same announcements, the\n * same group headings. Only the trigger is this component's own, because the trigger\n * is where the write lock lives: `EntityCombobox`'s is a native `disabled` button,\n * and a locked field has to stay focusable to say why.\n *\n * The ranking is this component's own too: it folds accents and case (\"osterreich\"\n * finds Österreich), matches the code (\"ch\" ranks Switzerland first), and ranks\n * name-starts above name-contains — the kit's `rankMatch`, which began here. The panel\n * is handed those rows in place of the core's filter, which does not rank.\n *\n * Field anatomy as on every field: floating `label`, `hint`, `error`, `invalid`; the\n * trigger is named \"label: value\" as the other trigger pickers are.\n *\n * Since 0.23 it takes a `ref` to the trigger (react-hook-form's focus-on-error, kastlan)\n * and `clearable`, which hands `onChange` `null`.\n */\nexport function CountrySelect<Clearable extends boolean = false>({\n  value,\n  onChange,\n  countries,\n  preferred,\n  flags = false,\n  label,\n  hint,\n  help,\n  error,\n  invalid,\n  placeholder,\n  disabled,\n  disabledReason: ownReason,\n  disabledReasonDisplay,\n  commit,\n  clearable,\n  clearLabel,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  id,\n  ref,\n  \"aria-label\": ariaLabel,\n  \"aria-labelledby\": ariaLabelledBy,\n  \"aria-describedby\": ariaDescribedBy,\n  \"aria-invalid\": ariaInvalid,\n  \"aria-required\": ariaRequired,\n  ...rest\n}: CountrySelectProps<Clearable>) {\n  const text = useKitLabels(\"countrySelect\", DEFAULT_COUNTRY_SELECT_LABELS, labelsProp);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  // The clear's name is the family's (`combobox.clear`), as on EntityCombobox; a prop\n  // left `undefined` falls through to the provider rather than masking it.\n  const comboText = useKitLabels(\"combobox\", DEFAULT_COMBOBOX_LABELS, { clear: clearLabel });\n  // English without a locale — see `countryName`.\n  const locale = useKitLocale(localeProp) ?? \"en\";\n\n  // ── The list ──────────────────────────────────────────────────────────────\n  // Keyed on the arrays' CONTENTS: `countries={[\"DE\", \"AT\"]}` written inline is a new\n  // array every render, and resorting 249 names on every keystroke elsewhere in the\n  // form is work for nothing.\n  const countriesKey = countries?.join(\",\");\n  const preferredKey = preferred?.join(\",\");\n  const { top, rest: others } = useMemo(() => {\n    const seen = new Set<string>();\n    const pool: string[] = [];\n    for (const raw of countriesKey !== undefined ? countriesKey.split(\",\") : COUNTRY_CODES) {\n      const code = normalizeCountryCode(raw);\n      if (code && !seen.has(code)) {\n        seen.add(code);\n        pool.push(code);\n      }\n    }\n    const entry = (code: string): Entry => ({ code, name: countryName(code, locale) });\n    const firsts: Entry[] = [];\n    const picked = new Set<string>();\n    for (const raw of preferredKey ? preferredKey.split(\",\") : []) {\n      const code = normalizeCountryCode(raw);\n      if (code && seen.has(code) && !picked.has(code)) {\n        picked.add(code);\n        firsts.push(entry(code));\n      }\n    }\n    const compare = collator(locale).compare;\n    const sorted = pool\n      .filter((c) => !picked.has(c))\n      .map(entry)\n      .sort((a, b) => compare(a.name, b.name));\n    return { top: firsts, rest: sorted };\n  }, [countriesKey, preferredKey, locale]);\n\n  // `filter: false` — the panel is handed the rows `search` ranks below instead of\n  // the core's substring filter; the core still owns open, query, the highlighted row,\n  // anchoring and dismissal.\n  const allOptions = useMemo(() => [...top, ...others].map((e) => toOption(e, flags)), [top, others, flags]);\n  const core = useComboboxCore<string>({ options: allOptions, filter: false });\n  const { open, setOpen, query, triggerRef, closeToTrigger } = core;\n  // The core anchors the panel to the trigger and hands focus back to it; the caller's\n  // `ref` wants the same element. One callback feeds both.\n  const setTrigger = useCallback(\n    (el: HTMLButtonElement | null) => {\n      triggerRef.current = el;\n      assignRef(ref, el);\n    },\n    [ref, triggerRef],\n  );\n\n  const q = query.trim();\n  const results = useMemo(() => {\n    const firsts = q ? search(top, q, locale) : top;\n    const below = q ? search(others, q, locale) : others;\n    // The heading only where it separates something: with no preferred country in\n    // view it would head the whole list and divide nothing.\n    const heading = firsts.length > 0 ? text.others : undefined;\n    return [...firsts.map((e) => toOption(e, flags)), ...below.map((e) => toOption(e, flags, heading))];\n  }, [top, others, q, text.others, flags, locale]);\n\n  // ── The lock ──────────────────────────────────────────────────────────────\n  const lock = useLockReason(commit, ownReason);\n  const locked = lock.locked;\n  const inert = locked || Boolean(disabled);\n  // A lock (or `disabled`) arriving while the list is up closes it — adjusted while\n  // rendering, as the core adjusts its own query, so no frame shows a list that can\n  // no longer be used.\n  if (inert && open) setOpen(false);\n\n  // ── The field ─────────────────────────────────────────────────────────────\n  const generated = useId();\n  const triggerId = id ?? generated;\n  const listboxId = `${generated}-listbox`;\n  // Text is a caption under the field; a FieldHint rides the label line, and is that\n  // caption at Large and on touch (§4). The caller's ids, the caption, a lock's reason,\n  // the error — Select's order. Through useFieldMessages since 0.34 (DUP-2, DUP-8).\n  const field = useFieldMessages({\n    hint,\n    help,\n    name: label ?? ariaLabel,\n    error,\n    invalid,\n    describedBy: ariaDescribedBy,\n    ariaInvalid,\n    reasonId: locked && lock.reasonId,\n  });\n\n  const code = normalizeCountryCode(value);\n  const selectedName = code ? countryName(code, locale) : undefined;\n  // A field named by a label of the caller's (`aria-labelledby`) is a labelled field too:\n  // the label already says what goes here.\n  const emptyText = placeholder ?? (label === undefined && !ariaLabelledBy ? text.country : \"\");\n  const fieldName = typeof label === \"string\" ? label : text.country;\n  const valueId = `${generated}-value`;\n  // Named by the caller's element (a form's label) — then the shown text is the second\n  // reference, as the composed name below has the value second; but only when it IS a\n  // value or the caller's placeholder, never the `country` fallback word.\n  const labelledBy =\n    ariaLabel === undefined && ariaLabelledBy\n      ? mergeDescribedBy(ariaLabelledBy, (selectedName !== undefined || Boolean(placeholder)) && valueId)\n      : undefined;\n  const name =\n    labelledBy !== undefined\n      ? undefined\n      : (ariaLabel ??\n        (selectedName !== undefined\n          ? common.fieldValue(fieldName, selectedName)\n          : placeholder\n            ? common.fieldValue(fieldName, placeholder)\n            : fieldName));\n\n  const showClear = Boolean(clearable && code && !inert);\n  // `onChange` widened to take the clear's `null` — its type says so once `clearable`\n  // is set, and the clear is only ever offered then.\n  const emit = onChange as (code: string | null) => void;\n  const clear = () => {\n    if (!showClear) return;\n    emit(null);\n  };\n\n  const choose = (o: ComboOption<string>) => {\n    if (inert) return;\n    emit(o.value);\n    // Back to the trigger: the panel holding focus is about to unmount, and a keyboard\n    // user who has answered this field should stand on it, ready to Tab on.\n    closeToTrigger();\n  };\n\n  const trigger = (\n    <button\n      ref={setTrigger}\n      id={triggerId}\n      type=\"button\"\n      // A closed choice that expands into the list below — the role every trigger\n      // picker in the kit wears (see EntityCombobox), and the one that supports\n      // `aria-invalid`.\n      role=\"combobox\"\n      aria-haspopup=\"listbox\"\n      aria-controls={listboxId}\n      aria-expanded={open}\n      aria-label={name}\n      aria-labelledby={labelledBy}\n      aria-invalid={field.isInvalid || undefined}\n      aria-required={ariaRequired}\n      aria-describedby={field.describedBy}\n      // The focusable kind of disabled while locked (Button's rule): native `disabled`\n      // would take the field out of the tab order, and the reason with it.\n      disabled={locked ? undefined : disabled}\n      aria-disabled={locked || undefined}\n      onClick={(e) => {\n        if (inert) {\n          e.preventDefault();\n          return;\n        }\n        setOpen((o) => !o);\n      }}\n      // Down/Up opens the list from the closed trigger, per the APG; Enter and Space\n      // already do through the button's own click.\n      onKeyDown={(e) => {\n        if (inert) return;\n        if (e.key === \"ArrowDown\" || e.key === \"ArrowUp\") {\n          e.preventDefault();\n          setOpen(true);\n        } else if (showClear && !open && (e.key === \"Delete\" || e.key === \"Backspace\")) {\n          // The keyboard's clear: the \"×\" is out of the tab order (see `clearable`).\n          e.preventDefault();\n          clear();\n        }\n      }}\n      className={cn(\n        FIELD_TRIGGER,\n        // `peer` dims the floating label with a natively disabled trigger, as Select's.\n        \"peer pe-9\",\n        label !== undefined && FIELD_FLOATING_PAD,\n        inert && \"cursor-not-allowed opacity-50\",\n        field.isInvalid && FIELD_INVALID,\n      )}\n    >\n      <span className=\"flex min-w-0 items-center gap-2\">\n        {flags && code && <CurrencyFlag country={code.toLowerCase()} />}\n        {/* A long name (\"Saint Vincent and the Grenadines\") truncates rather than\n            widening the field: the kit is checked at 390px. From Large up it wraps and\n            the trigger grows instead (text size §10.17, round 0.34 T1). */}\n        <span id={valueId} className={cn(\"truncate-until-large\", selectedName === undefined && \"text-placeholder\")}>\n          {selectedName ?? emptyText}\n        </span>\n      </span>\n      {showClear ? (\n        /* eslint-disable-next-line jsx-a11y/click-events-have-key-events -- tabIndex -1 inside\n            the trigger <button>, so it never holds focus and a key handler here could never\n            fire; the keys go to the trigger, where Delete and Backspace clear. A pointer\n            shortcut, as on EntityCombobox. */\n        <span\n          role=\"button\"\n          tabIndex={-1}\n          aria-label={comboText.clear}\n          onClick={(e) => {\n            e.stopPropagation();\n            clear();\n          }}\n          className=\"absolute end-2 top-1/2 -translate-y-1/2 rounded p-0.5 text-placeholder hover:text-secondary\"\n        >\n          <X aria-hidden className=\"size-4\" />\n        </span>\n      ) : (\n        <FieldChevron />\n      )}\n    </button>\n  );\n\n  const control = locked ? (\n    // Button's frame: the line under the trigger, or the Tooltip with a hidden copy for\n    // `aria-describedby`. `items-stretch`: in the line's column the trigger keeps the\n    // field's full width.\n    <LockedReason lock={lock} display={disabledReasonDisplay} className=\"flex w-full items-stretch\">\n      {trigger}\n    </LockedReason>\n  ) : (\n    trigger\n  );\n\n  const box =\n    label !== undefined ? (\n      <FloatingField htmlFor={triggerId} label={label} staticLabel hint={field.labelHint}>\n        {control}\n      </FloatingField>\n    ) : (\n      // No label line to ride: a \"?\" goes at the field's end, outside the box, as on an\n      // unlabelled Select.\n      <EndHintRow hint={field.labelHint}>\n        <div className=\"relative\">{control}</div>\n      </EndHintRow>\n    );\n\n  return (\n    // `rest` dresses the wrapper — a `data-tour` anchor, a test id. The name, the\n    // description and the invalid state are on the trigger above.\n    <div {...rest} className={className}>\n      {box}\n      {field.below}\n      <ComboboxPanel\n        // The core with the rows ranked above in place of its own filter's.\n        core={{ ...core, results }}\n        listboxId={listboxId}\n        // On a phone the list is a full-screen sheet, which needs the field's own\n        // name to say what it is asking for (live #200).\n        sheetTitle={label ?? text.country}\n        searchPlaceholder={text.search}\n        isSelected={(v) => v === code}\n        onChoose={choose}\n        showCreate={false}\n        onCreate={() => {}}\n        createContent={null}\n      />\n    </div>\n  );\n}\n"],"mappings":";AA0MkB,cAkQZ,YAlQY;AA1MlB,SAAS,aAAa,OAAO,eAAe;AAE5C,SAAS,SAAS;AAClB,SAAS,UAAU;AACnB,SAAS,eAAe,aAAa,4BAA4B;AACjE,SAAS,oBAAoB;AAC7B,SAAS,cAAc,oBAAoB,eAAe,eAAe,qBAAqB;AAC9F;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,oBAAoB;AAC7B,SAAS,eAAe,uBAAyC;AAEjE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,qCAAqC;AAqK9C,SAAS,OAAO,SAAkB,GAAW,QAAyB;AACpE,SAAO,aAAa,SAAS,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,EAC7E,KAAK,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,EAC9B,IAAI,CAAC,MAAM,EAAE,GAAG;AACrB;AAEA,SAAS,SAAS,GAAU,OAAgB,OAAqC;AAC/E,SAAO;AAAA,IACL,OAAO,EAAE;AAAA,IACT,OAAO,EAAE;AAAA,IACT,MAAM,QAAQ,oBAAC,gBAAa,SAAS,EAAE,KAAK,YAAY,GAAG,IAAK;AAAA,IAChE;AAAA,EACF;AACF;AAEA,SAAS,SAAS,QAA+B;AAC/C,MAAI;AACF,WAAO,IAAI,KAAK,SAAS,MAAM;AAAA,EACjC,QAAQ;AACN,WAAO,IAAI,KAAK,SAAS;AAAA,EAC3B;AACF;AA+BO,SAAS,cAAiD;AAAA,EAC/D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,mBAAmB;AAAA,EACnB,oBAAoB;AAAA,EACpB,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,GAAG;AACL,GAAkC;AAChC,QAAM,OAAO,aAAa,iBAAiB,+BAA+B,UAAU;AACpF,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAG3D,QAAM,YAAY,aAAa,YAAY,yBAAyB,EAAE,OAAO,WAAW,CAAC;AAEzF,QAAM,SAAS,aAAa,UAAU,KAAK;AAM3C,QAAM,eAAe,WAAW,KAAK,GAAG;AACxC,QAAM,eAAe,WAAW,KAAK,GAAG;AACxC,QAAM,EAAE,KAAK,MAAM,OAAO,IAAI,QAAQ,MAAM;AAC1C,UAAM,OAAO,oBAAI,IAAY;AAC7B,UAAM,OAAiB,CAAC;AACxB,eAAW,OAAO,iBAAiB,SAAY,aAAa,MAAM,GAAG,IAAI,eAAe;AACtF,YAAMA,QAAO,qBAAqB,GAAG;AACrC,UAAIA,SAAQ,CAAC,KAAK,IAAIA,KAAI,GAAG;AAC3B,aAAK,IAAIA,KAAI;AACb,aAAK,KAAKA,KAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,QAAQ,CAACA,WAAyB,EAAE,MAAAA,OAAM,MAAM,YAAYA,OAAM,MAAM,EAAE;AAChF,UAAM,SAAkB,CAAC;AACzB,UAAM,SAAS,oBAAI,IAAY;AAC/B,eAAW,OAAO,eAAe,aAAa,MAAM,GAAG,IAAI,CAAC,GAAG;AAC7D,YAAMA,QAAO,qBAAqB,GAAG;AACrC,UAAIA,SAAQ,KAAK,IAAIA,KAAI,KAAK,CAAC,OAAO,IAAIA,KAAI,GAAG;AAC/C,eAAO,IAAIA,KAAI;AACf,eAAO,KAAK,MAAMA,KAAI,CAAC;AAAA,MACzB;AAAA,IACF;AACA,UAAM,UAAU,SAAS,MAAM,EAAE;AACjC,UAAM,SAAS,KACZ,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAC5B,IAAI,KAAK,EACT,KAAK,CAAC,GAAG,MAAM,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;AACzC,WAAO,EAAE,KAAK,QAAQ,MAAM,OAAO;AAAA,EACrC,GAAG,CAAC,cAAc,cAAc,MAAM,CAAC;AAKvC,QAAM,aAAa,QAAQ,MAAM,CAAC,GAAG,KAAK,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,KAAK,CAAC;AACzG,QAAM,OAAO,gBAAwB,EAAE,SAAS,YAAY,QAAQ,MAAM,CAAC;AAC3E,QAAM,EAAE,MAAM,SAAS,OAAO,YAAY,eAAe,IAAI;AAG7D,QAAM,aAAa;AAAA,IACjB,CAAC,OAAiC;AAChC,iBAAW,UAAU;AACrB,gBAAU,KAAK,EAAE;AAAA,IACnB;AAAA,IACA,CAAC,KAAK,UAAU;AAAA,EAClB;AAEA,QAAM,IAAI,MAAM,KAAK;AACrB,QAAM,UAAU,QAAQ,MAAM;AAC5B,UAAM,SAAS,IAAI,OAAO,KAAK,GAAG,MAAM,IAAI;AAC5C,UAAM,QAAQ,IAAI,OAAO,QAAQ,GAAG,MAAM,IAAI;AAG9C,UAAM,UAAU,OAAO,SAAS,IAAI,KAAK,SAAS;AAClD,WAAO,CAAC,GAAG,OAAO,IAAI,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,CAAC;AAAA,EACpG,GAAG,CAAC,KAAK,QAAQ,GAAG,KAAK,QAAQ,OAAO,MAAM,CAAC;AAG/C,QAAM,OAAO,cAAc,QAAQ,SAAS;AAC5C,QAAM,SAAS,KAAK;AACpB,QAAM,QAAQ,UAAU,QAAQ,QAAQ;AAIxC,MAAI,SAAS,KAAM,SAAQ,KAAK;AAGhC,QAAM,YAAY,MAAM;AACxB,QAAM,YAAY,MAAM;AACxB,QAAM,YAAY,GAAG,SAAS;AAI9B,QAAM,QAAQ,iBAAiB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,MAAM,SAAS;AAAA,IACf;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb;AAAA,IACA,UAAU,UAAU,KAAK;AAAA,EAC3B,CAAC;AAED,QAAM,OAAO,qBAAqB,KAAK;AACvC,QAAM,eAAe,OAAO,YAAY,MAAM,MAAM,IAAI;AAGxD,QAAM,YAAY,gBAAgB,UAAU,UAAa,CAAC,iBAAiB,KAAK,UAAU;AAC1F,QAAM,YAAY,OAAO,UAAU,WAAW,QAAQ,KAAK;AAC3D,QAAM,UAAU,GAAG,SAAS;AAI5B,QAAM,aACJ,cAAc,UAAa,iBACvB,iBAAiB,iBAAiB,iBAAiB,UAAa,QAAQ,WAAW,MAAM,OAAO,IAChG;AACN,QAAM,OACJ,eAAe,SACX,SACC,cACA,iBAAiB,SACd,OAAO,WAAW,WAAW,YAAY,IACzC,cACE,OAAO,WAAW,WAAW,WAAW,IACxC;AAEZ,QAAM,YAAY,QAAQ,aAAa,QAAQ,CAAC,KAAK;AAGrD,QAAM,OAAO;AACb,QAAM,QAAQ,MAAM;AAClB,QAAI,CAAC,UAAW;AAChB,SAAK,IAAI;AAAA,EACX;AAEA,QAAM,SAAS,CAAC,MAA2B;AACzC,QAAI,MAAO;AACX,SAAK,EAAE,KAAK;AAGZ,mBAAe;AAAA,EACjB;AAEA,QAAM,UACJ;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL,IAAI;AAAA,MACJ,MAAK;AAAA,MAIL,MAAK;AAAA,MACL,iBAAc;AAAA,MACd,iBAAe;AAAA,MACf,iBAAe;AAAA,MACf,cAAY;AAAA,MACZ,mBAAiB;AAAA,MACjB,gBAAc,MAAM,aAAa;AAAA,MACjC,iBAAe;AAAA,MACf,oBAAkB,MAAM;AAAA,MAGxB,UAAU,SAAS,SAAY;AAAA,MAC/B,iBAAe,UAAU;AAAA,MACzB,SAAS,CAAC,MAAM;AACd,YAAI,OAAO;AACT,YAAE,eAAe;AACjB;AAAA,QACF;AACA,gBAAQ,CAAC,MAAM,CAAC,CAAC;AAAA,MACnB;AAAA,MAGA,WAAW,CAAC,MAAM;AAChB,YAAI,MAAO;AACX,YAAI,EAAE,QAAQ,eAAe,EAAE,QAAQ,WAAW;AAChD,YAAE,eAAe;AACjB,kBAAQ,IAAI;AAAA,QACd,WAAW,aAAa,CAAC,SAAS,EAAE,QAAQ,YAAY,EAAE,QAAQ,cAAc;AAE9E,YAAE,eAAe;AACjB,gBAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT;AAAA;AAAA,QAEA;AAAA,QACA,UAAU,UAAa;AAAA,QACvB,SAAS;AAAA,QACT,MAAM,aAAa;AAAA,MACrB;AAAA,MAEA;AAAA,6BAAC,UAAK,WAAU,mCACb;AAAA,mBAAS,QAAQ,oBAAC,gBAAa,SAAS,KAAK,YAAY,GAAG;AAAA,UAI7D,oBAAC,UAAK,IAAI,SAAS,WAAW,GAAG,wBAAwB,iBAAiB,UAAa,kBAAkB,GACtG,0BAAgB,WACnB;AAAA,WACF;AAAA,QACC;AAAA;AAAA;AAAA;AAAA;AAAA,UAKC;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,UAAU;AAAA,cACV,cAAY,UAAU;AAAA,cACtB,SAAS,CAAC,MAAM;AACd,kBAAE,gBAAgB;AAClB,sBAAM;AAAA,cACR;AAAA,cACA,WAAU;AAAA,cAEV,8BAAC,KAAE,eAAW,MAAC,WAAU,UAAS;AAAA;AAAA,UACpC;AAAA,YAEA,oBAAC,gBAAa;AAAA;AAAA;AAAA,EAElB;AAGF,QAAM,UAAU;AAAA;AAAA;AAAA;AAAA,IAId,oBAAC,gBAAa,MAAY,SAAS,uBAAuB,WAAU,6BACjE,mBACH;AAAA,MAEA;AAGF,QAAM,MACJ,UAAU,SACR,oBAAC,iBAAc,SAAS,WAAW,OAAc,aAAW,MAAC,MAAM,MAAM,WACtE,mBACH;AAAA;AAAA;AAAA,IAIA,oBAAC,cAAW,MAAM,MAAM,WACtB,8BAAC,SAAI,WAAU,YAAY,mBAAQ,GACrC;AAAA;AAGJ;AAAA;AAAA;AAAA,IAGE,qBAAC,SAAK,GAAG,MAAM,WACZ;AAAA;AAAA,MACA,MAAM;AAAA,MACP;AAAA,QAAC;AAAA;AAAA,UAEC,MAAM,EAAE,GAAG,MAAM,QAAQ;AAAA,UACzB;AAAA,UAGA,YAAY,SAAS,KAAK;AAAA,UAC1B,mBAAmB,KAAK;AAAA,UACxB,YAAY,CAAC,MAAM,MAAM;AAAA,UACzB,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,UAAU,MAAM;AAAA,UAAC;AAAA,UACjB,eAAe;AAAA;AAAA,MACjB;AAAA,OACF;AAAA;AAEJ;","names":["code"]}
+{"version":3,"sources":["../../src/components/country-select.tsx"],"sourcesContent":["import { useCallback, useId, useMemo } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode, Ref } from \"react\";\nimport { X } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { COUNTRY_CODES, countryName, normalizeCountryCode } from \"../lib/countries\";\nimport { searchRanked } from \"../lib/text-match\";\nimport { FieldChevron, FIELD_FLOATING_PAD, FIELD_INVALID, FIELD_TRIGGER, FloatingField } from \"./field-base\";\nimport {\n  assignRef,\n  EndHintRow,\n  LockFrame,\n  mergeDescribedBy,\n  useFieldMessages,\n  useLockReason,\n  type DisabledReasonDisplay,\n  type FieldHelpProps,\n} from \"./field-parts\";\nimport { CurrencyFlag } from \"./currency-select\";\nimport { ComboboxPanel, useComboboxCore, type ComboOption } from \"./combobox-core\";\nimport type { CommitScope } from \"./write-lock\";\nimport {\n  DEFAULT_COMBOBOX_LABELS,\n  DEFAULT_COMMON_LABELS,\n  useKitLabels,\n  useKitLocale,\n  type LabelOverride,\n} from \"../i18n/kit-labels\";\nimport { DEFAULT_COUNTRY_SELECT_LABELS } from \"./country-select-labels\";\n\n// ── Labels ────────────────────────────────────────────────────────────────────\n\n/** The words {@link CountrySelect} renders on its own behalf. The list's \"no results\",\n *  \"loading\" and result-count announcements are the shared `combobox` namespace's,\n *  as on every other searchable picker. */\nexport interface CountrySelectLabels {\n  /** What the field is, when the caller gives no `label`: the first half of the\n   *  trigger's accessible name, the phone sheet's title, and the empty trigger's\n   *  text. */\n  country: string;\n  /** The search box in the open list. */\n  search: string;\n  /** The heading between the `preferred` countries and all the others. Shown only\n   *  when `preferred` puts something above it. */\n  others: string;\n}\n\n// Defined in ./country-select-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_COUNTRY_SELECT_LABELS };\n\n// ── Props ─────────────────────────────────────────────────────────────────────\n\n/**\n * `onChange` is the kit's — \"a country was picked\", carrying its code — rather than\n * the div's form event. `id` and the `aria-*` wiring below go to the TRIGGER, which is\n * the control a reader meets; everything else in `rest` dresses the wrapper.\n *\n * `Clearable` follows `clearable`, the way {@link EntityCombobox}'s `C` follows its\n * `clearValue`: it is inferred from the prop, so `onChange` is `(code: string) => void`\n * for the field as it always was (`onChange={setCountry}` over a `string` state still\n * type-checks), and `(code: string | null) => void` once `clearable` is set — the\n * `null` of a clear cannot reach a handler that was never told about it.\n */\nexport interface CountrySelectProps<Clearable extends boolean = false>\n  extends Omit<ComponentPropsWithoutRef<\"div\">, \"onChange\" | \"defaultValue\">, FieldHelpProps {\n  /** The chosen country as an ISO 3166-1 alpha-2 code (\"CH\"), in either case;\n   *  `null`, `undefined` or `\"\"` when none is. A code outside the list still shows\n   *  its name — the list restricts what can be PICKED, not what can be shown. */\n  value: string | null | undefined;\n  /** A country was picked: its alpha-2 code, always upper-case. With `clearable`,\n   *  also `null`: the \"×\" (or Delete on the trigger) emptied the field. */\n  onChange: (code: Clearable extends true ? string | null : string) => void;\n  /**\n   * Offer a clear \"×\" in place of the chevron while a country is chosen; it hands\n   * `onChange` `null` (the kit's later list: an optional country — a contact's\n   * nationality, a bank filter's \"any country\" — could be set but never unset again).\n   *\n   * The combobox family's clear, as {@link EntityCombobox} draws it: a pointer\n   * shortcut inside the trigger, out of the tab order so it is not a second stop\n   * between this field and the next, named by `clearLabel` (default: the\n   * `combobox.clear` label every picker in the family shares). The keyboard way is\n   * Delete or Backspace on the closed trigger. Not offered while `disabled` or locked\n   * (`commit` / `disabledReason`): a clear is a change like any other.\n   */\n  clearable?: Clearable;\n  /** The clear \"×\"'s accessible name. Wins over `combobox.clear` from the\n   *  {@link UiKitProvider}, as {@link EntityCombobox}'s `clearLabel` does. */\n  clearLabel?: string;\n  /**\n   * The TRIGGER — the focusable `<button>` a reader meets — as a React 19 ref prop,\n   * the way {@link MoneyField} takes its input's (kastlan: react-hook-form's\n   * focus-on-error calls `focus()` on whatever `field.ref` was handed, and without a\n   * ref the first field in error on an address form was never focused). See\n   * `RhfCountrySelect`, which passes it.\n   */\n  ref?: Ref<HTMLButtonElement>;\n  /**\n   * Offer only these codes (any case; duplicates and malformed entries dropped).\n   * Default: every ISO 3166-1 country, {@link COUNTRY_CODES}. Sorted by name either\n   * way — the order given is not kept, because the reader looks a country up by its\n   * name in their own language, and any other order is one they cannot predict.\n   *\n   * keksdose's bank picker passes the countries its configured bank-connection provider\n   * serves, read at runtime: its connections are provider-neutral since 2026-10-29, so\n   * the list is no longer a fixed fifteen. A code that is not in ISO's list is allowed\n   * here on purpose: `XK` (Kosovo) is the app's decision, not the kit's.\n   */\n  countries?: readonly string[];\n  /**\n   * A short group shown FIRST, in the order given, above the alphabetical rest —\n   * kastlan's CH, LI, DE, AT, FR, IT, the six countries most of its customers live\n   * in, out of a list of 249. Each code appears once: a preferred country is not\n   * repeated in the rest. The rest gets a heading (`labels.others`) so the boundary\n   * is visible. Search keeps the split: matching preferred countries stay on top.\n   * Codes not in `countries` are ignored — `countries` decides what can be picked.\n   */\n  preferred?: readonly string[];\n  /**\n   * Draw each country's flag as a flag-icons span (`fi fi-ch`), in the rows and on\n   * the trigger. Default `false`, because the kit ships no flag stylesheet — the same\n   * convention as `LanguageMenu`'s `country` and `CurrencySelect`: the host imports\n   * `flag-icons/css/flag-icons.min.css`, and without it a flag is an empty box.\n   */\n  flags?: boolean;\n  /** The floating label, as on every field. A string also names the trigger\n   *  (\"Country: Switzerland\"). */\n  label?: ReactNode;\n  /** As {@link Select}'s `hint`: plain TEXT is a caption under the field, attached\n   *  through `aria-describedby`; a {@link FieldHint} rides the label line (or the\n   *  field's end, when there is no label). */\n  hint?: ReactNode;\n  /** As {@link Input}'s `error`: rendered under the field, on the trigger's\n   *  `aria-describedby`, and implies `invalid`. */\n  error?: ReactNode;\n  /** Required and unanswered — {@link FIELD_INVALID}, as on every field. */\n  invalid?: boolean;\n  /** The empty trigger's text. Default: nothing when the field has a `label` or an\n   *  `aria-labelledby` (the label already says what goes here), else `labels.country`. */\n  placeholder?: string;\n  /** As on the other pickers: no focus, no list, the settled look. */\n  disabled?: boolean;\n  /**\n   * Why the country cannot be changed — {@link Button}'s `disabledReason`, for a field\n   * that saves itself. The trigger stays focusable and `aria-disabled`, the list does\n   * not open and `onChange` never fires; the reason is a line under the field at Large\n   * and on a touch screen, else in the kit {@link Tooltip} (`disabledReasonDisplay`), and\n   * on the trigger's `aria-describedby`. Wins over `disabled`.\n   */\n  disabledReason?: ReactNode;\n  /** Where the reason shows — {@link Button}'s `disabledReasonDisplay`: a line under the\n   *  field at Large and on a touch screen by default, the tooltip otherwise (DUP-3). */\n  disabledReasonDisplay?: DisabledReasonDisplay;\n  /**\n   * This select SAVES on change (a settings row with no Save button). Under a locked\n   * {@link WriteLockProvider} it is locked the `disabledReason` way, with the lock's\n   * reason. A country field inside a form that has its own Save stays editable under\n   * the lock — leave this off there, and put `commit` on the Save.\n   */\n  commit?: CommitScope;\n  /** The language the names are in. Default: the `<UiKitProvider locale>`, else\n   *  English (see {@link countryName}). */\n  locale?: string;\n  /** Per-instance overrides of {@link CountrySelectLabels}, over the provider's\n   *  `countrySelect` namespace, over English. */\n  labels?: LabelOverride<CountrySelectLabels>;\n  /**\n   * Name the trigger by an element of the caller's — a form's own label above the\n   * field, which is how `RhfCountrySelect` names it. The trigger is then named by\n   * that element AND the chosen country (two references, as {@link DatePicker}'s\n   * trigger is named, so \"Country Switzerland\" needs no punctuation to translate),\n   * instead of the composed \"label: country\". An `aria-label` still wins. Before\n   * 0.23 this landed on the wrapper `<div>`, which has no role to be named.\n   */\n  \"aria-labelledby\"?: string;\n}\n\ninterface Entry {\n  code: string;\n  name: string;\n}\n\n/** Every word of the query in the name, or the whole code (0.51.4's rule: \"kinshasa\n *  congo\" finds Congo - Kinshasa; refactor audit 2026-10-30, DUP-4), best rank first; a\n *  stable sort, so equal ranks keep the collated (or preferred) order they came in. The\n *  rank is the kit's one, for the WHOLE query (`rankMatch`, DUP-5 — written here first):\n *  the code itself (a two-letter query \"ch\" means Switzerland before it means Chad), then\n *  the start of the name, then anywhere in it, then the words apart (`searchRanked`, each\n *  name and code folded once), with accents and case folded — \"osterreich\" finds\n *  Österreich, \"cote\" Côte d'Ivoire.\n *\n *  A word is the code or it is not: searched INSIDE the code, as one more text, \"w\"\n *  listed Aruba (AW) and Samoa (WS) and \"d\" Germany (DE), names with nothing of the\n *  query in them (0.52 code review, country-select.tsx). */\nfunction search(entries: Entry[], q: string, locale: string): Entry[] {\n  return searchRanked(entries, q, (e) => [e.name], { code: (e) => e.code, locale })\n    .sort((a, b) => a.rank - b.rank)\n    .map((x) => x.row);\n}\n\nfunction toOption(e: Entry, flags: boolean, group?: string): ComboOption<string> {\n  return {\n    value: e.code,\n    label: e.name,\n    icon: flags ? <CurrencyFlag country={e.code.toLowerCase()} /> : undefined,\n    group,\n  };\n}\n\nfunction collator(locale: string): Intl.Collator {\n  try {\n    return new Intl.Collator(locale);\n  } catch {\n    return new Intl.Collator();\n  }\n}\n\n/**\n * A country picker: the value is the ISO 3166-1 alpha-2 code (\"CH\"), the names are the\n * runtime's own (`Intl.DisplayNames`) in the provider's locale, sorted by that\n * locale's collation. Requested by kastlan (customer and handover addresses, with its\n * six neighbours on top) and keksdose (its bank picker's countries) — both\n * apps carried a hand-written list of names in two languages.\n *\n * ## Built on the kit's searchable combobox\n *\n * 249 countries is not a menu, it is a lookup, and the list has to work on a phone. So\n * this is the entity pickers' machinery — `useComboboxCore` and `ComboboxPanel`, which\n * {@link EntityCombobox} is also made of — not a native `<select>`: the anchored panel\n * with a search box on a pointer device, the full-screen sheet with its own search box\n * on a phone (live #200), the same keyboard (APG listbox), the same announcements, the\n * same group headings. Only the trigger is this component's own, because the trigger\n * is where the write lock lives: `EntityCombobox`'s is a native `disabled` button,\n * and a locked field has to stay focusable to say why.\n *\n * The ranking is this component's own too: it folds accents and case (\"osterreich\"\n * finds Österreich), matches the code (\"ch\" ranks Switzerland first), and ranks\n * name-starts above name-contains — the kit's `rankMatch`, which began here. The panel\n * is handed those rows in place of the core's filter, which does not rank.\n *\n * Field anatomy as on every field: floating `label`, `hint`, `error`, `invalid`; the\n * trigger is named \"label: value\" as the other trigger pickers are.\n *\n * Since 0.23 it takes a `ref` to the trigger (react-hook-form's focus-on-error, kastlan)\n * and `clearable`, which hands `onChange` `null`.\n */\nexport function CountrySelect<Clearable extends boolean = false>({\n  value,\n  onChange,\n  countries,\n  preferred,\n  flags = false,\n  label,\n  hint,\n  help,\n  error,\n  invalid,\n  placeholder,\n  disabled,\n  disabledReason: ownReason,\n  disabledReasonDisplay,\n  commit,\n  clearable,\n  clearLabel,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  id,\n  ref,\n  \"aria-label\": ariaLabel,\n  \"aria-labelledby\": ariaLabelledBy,\n  \"aria-describedby\": ariaDescribedBy,\n  \"aria-invalid\": ariaInvalid,\n  \"aria-required\": ariaRequired,\n  ...rest\n}: CountrySelectProps<Clearable>) {\n  const text = useKitLabels(\"countrySelect\", DEFAULT_COUNTRY_SELECT_LABELS, labelsProp);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  // The clear's name is the family's (`combobox.clear`), as on EntityCombobox; a prop\n  // left `undefined` falls through to the provider rather than masking it.\n  const comboText = useKitLabels(\"combobox\", DEFAULT_COMBOBOX_LABELS, { clear: clearLabel });\n  // English without a locale — see `countryName`.\n  const locale = useKitLocale(localeProp) ?? \"en\";\n\n  // ── The list ──────────────────────────────────────────────────────────────\n  // Keyed on the arrays' CONTENTS: `countries={[\"DE\", \"AT\"]}` written inline is a new\n  // array every render, and resorting 249 names on every keystroke elsewhere in the\n  // form is work for nothing.\n  const countriesKey = countries?.join(\",\");\n  const preferredKey = preferred?.join(\",\");\n  const { top, rest: others } = useMemo(() => {\n    const seen = new Set<string>();\n    const pool: string[] = [];\n    for (const raw of countriesKey !== undefined ? countriesKey.split(\",\") : COUNTRY_CODES) {\n      const code = normalizeCountryCode(raw);\n      if (code && !seen.has(code)) {\n        seen.add(code);\n        pool.push(code);\n      }\n    }\n    const entry = (code: string): Entry => ({ code, name: countryName(code, locale) });\n    const firsts: Entry[] = [];\n    const picked = new Set<string>();\n    for (const raw of preferredKey ? preferredKey.split(\",\") : []) {\n      const code = normalizeCountryCode(raw);\n      if (code && seen.has(code) && !picked.has(code)) {\n        picked.add(code);\n        firsts.push(entry(code));\n      }\n    }\n    const compare = collator(locale).compare;\n    const sorted = pool\n      .filter((c) => !picked.has(c))\n      .map(entry)\n      .sort((a, b) => compare(a.name, b.name));\n    return { top: firsts, rest: sorted };\n  }, [countriesKey, preferredKey, locale]);\n\n  // `filter: false` — the panel is handed the rows `search` ranks below instead of\n  // the core's substring filter; the core still owns open, query, the highlighted row,\n  // anchoring and dismissal.\n  const allOptions = useMemo(() => [...top, ...others].map((e) => toOption(e, flags)), [top, others, flags]);\n  const core = useComboboxCore<string>({ options: allOptions, filter: false });\n  const { open, setOpen, query, triggerRef, closeToTrigger } = core;\n  // The core anchors the panel to the trigger and hands focus back to it; the caller's\n  // `ref` wants the same element. One callback feeds both.\n  const setTrigger = useCallback(\n    (el: HTMLButtonElement | null) => {\n      triggerRef.current = el;\n      assignRef(ref, el);\n    },\n    [ref, triggerRef],\n  );\n\n  const q = query.trim();\n  const results = useMemo(() => {\n    const firsts = q ? search(top, q, locale) : top;\n    const below = q ? search(others, q, locale) : others;\n    // The heading only where it separates something: with no preferred country in\n    // view it would head the whole list and divide nothing.\n    const heading = firsts.length > 0 ? text.others : undefined;\n    return [...firsts.map((e) => toOption(e, flags)), ...below.map((e) => toOption(e, flags, heading))];\n  }, [top, others, q, text.others, flags, locale]);\n\n  // ── The lock ──────────────────────────────────────────────────────────────\n  const lock = useLockReason(commit, ownReason);\n  const locked = lock.locked;\n  const inert = locked || Boolean(disabled);\n  // A lock (or `disabled`) arriving while the list is up closes it — adjusted while\n  // rendering, as the core adjusts its own query, so no frame shows a list that can\n  // no longer be used.\n  if (inert && open) setOpen(false);\n\n  // ── The field ─────────────────────────────────────────────────────────────\n  const generated = useId();\n  const triggerId = id ?? generated;\n  const listboxId = `${generated}-listbox`;\n  // Text is a caption under the field; a FieldHint rides the label line, and is that\n  // caption at Large and on touch (§4). The caller's ids, the caption, a lock's reason,\n  // the error — Select's order. Through useFieldMessages since 0.34 (DUP-2, DUP-8).\n  const field = useFieldMessages({\n    hint,\n    help,\n    name: label ?? ariaLabel,\n    error,\n    invalid,\n    describedBy: ariaDescribedBy,\n    ariaInvalid,\n    reasonId: locked && lock.reasonId,\n  });\n\n  const code = normalizeCountryCode(value);\n  const selectedName = code ? countryName(code, locale) : undefined;\n  // A field named by a label of the caller's (`aria-labelledby`) is a labelled field too:\n  // the label already says what goes here.\n  const emptyText = placeholder ?? (label === undefined && !ariaLabelledBy ? text.country : \"\");\n  const fieldName = typeof label === \"string\" ? label : text.country;\n  const valueId = `${generated}-value`;\n  // Named by the caller's element (a form's label) — then the shown text is the second\n  // reference, as the composed name below has the value second; but only when it IS a\n  // value or the caller's placeholder, never the `country` fallback word.\n  const labelledBy =\n    ariaLabel === undefined && ariaLabelledBy\n      ? mergeDescribedBy(ariaLabelledBy, (selectedName !== undefined || Boolean(placeholder)) && valueId)\n      : undefined;\n  const name =\n    labelledBy !== undefined\n      ? undefined\n      : (ariaLabel ??\n        (selectedName !== undefined\n          ? common.fieldValue(fieldName, selectedName)\n          : placeholder\n            ? common.fieldValue(fieldName, placeholder)\n            : fieldName));\n\n  const showClear = Boolean(clearable && code && !inert);\n  // `onChange` widened to take the clear's `null` — its type says so once `clearable`\n  // is set, and the clear is only ever offered then.\n  const emit = onChange as (code: string | null) => void;\n  const clear = () => {\n    if (!showClear) return;\n    emit(null);\n  };\n\n  const choose = (o: ComboOption<string>) => {\n    if (inert) return;\n    emit(o.value);\n    // Back to the trigger: the panel holding focus is about to unmount, and a keyboard\n    // user who has answered this field should stand on it, ready to Tab on.\n    closeToTrigger();\n  };\n\n  const trigger = (\n    <button\n      ref={setTrigger}\n      id={triggerId}\n      type=\"button\"\n      // A closed choice that expands into the list below — the role every trigger\n      // picker in the kit wears (see EntityCombobox), and the one that supports\n      // `aria-invalid`.\n      role=\"combobox\"\n      aria-haspopup=\"listbox\"\n      aria-controls={listboxId}\n      aria-expanded={open}\n      aria-label={name}\n      aria-labelledby={labelledBy}\n      aria-invalid={field.isInvalid || undefined}\n      aria-required={ariaRequired}\n      aria-describedby={field.describedBy}\n      // The focusable kind of disabled while locked (Button's rule): native `disabled`\n      // would take the field out of the tab order, and the reason with it.\n      disabled={locked ? undefined : disabled}\n      aria-disabled={locked || undefined}\n      onClick={(e) => {\n        if (inert) {\n          e.preventDefault();\n          return;\n        }\n        setOpen((o) => !o);\n      }}\n      // Down/Up opens the list from the closed trigger, per the APG; Enter and Space\n      // already do through the button's own click.\n      onKeyDown={(e) => {\n        if (inert) return;\n        if (e.key === \"ArrowDown\" || e.key === \"ArrowUp\") {\n          e.preventDefault();\n          setOpen(true);\n        } else if (showClear && !open && (e.key === \"Delete\" || e.key === \"Backspace\")) {\n          // The keyboard's clear: the \"×\" is out of the tab order (see `clearable`).\n          e.preventDefault();\n          clear();\n        }\n      }}\n      className={cn(\n        FIELD_TRIGGER,\n        // `peer` dims the floating label with a natively disabled trigger, as Select's.\n        \"peer pe-9\",\n        label !== undefined && FIELD_FLOATING_PAD,\n        inert && \"cursor-not-allowed opacity-50\",\n        field.isInvalid && FIELD_INVALID,\n      )}\n    >\n      <span className=\"flex min-w-0 items-center gap-2\">\n        {flags && code && <CurrencyFlag country={code.toLowerCase()} />}\n        {/* A long name (\"Saint Vincent and the Grenadines\") truncates rather than\n            widening the field: the kit is checked at 390px. From Large up it wraps and\n            the trigger grows instead (text size §10.17, round 0.34 T1). */}\n        <span id={valueId} className={cn(\"truncate-until-large\", selectedName === undefined && \"text-placeholder\")}>\n          {selectedName ?? emptyText}\n        </span>\n      </span>\n      {showClear ? (\n        /* eslint-disable-next-line jsx-a11y/click-events-have-key-events -- tabIndex -1 inside\n            the trigger <button>, so it never holds focus and a key handler here could never\n            fire; the keys go to the trigger, where Delete and Backspace clear. A pointer\n            shortcut, as on EntityCombobox. */\n        <span\n          role=\"button\"\n          tabIndex={-1}\n          aria-label={comboText.clear}\n          onClick={(e) => {\n            e.stopPropagation();\n            clear();\n          }}\n          className=\"absolute end-2 top-1/2 -translate-y-1/2 rounded p-0.5 text-placeholder hover:text-secondary\"\n        >\n          <X aria-hidden className=\"size-4\" />\n        </span>\n      ) : (\n        <FieldChevron />\n      )}\n    </button>\n  );\n\n  // Button's frame: the line under the trigger, or the Tooltip with a hidden copy for\n  // `aria-describedby`. `items-stretch`: in the line's column the trigger keeps the\n  // field's full width.\n  const control = (\n    <LockFrame lock={lock} display={disabledReasonDisplay} className=\"flex w-full items-stretch\">\n      {trigger}\n    </LockFrame>\n  );\n\n  const box =\n    label !== undefined ? (\n      <FloatingField htmlFor={triggerId} label={label} staticLabel hint={field.labelHint}>\n        {control}\n      </FloatingField>\n    ) : (\n      // No label line to ride: a \"?\" goes at the field's end, outside the box, as on an\n      // unlabelled Select.\n      <EndHintRow hint={field.labelHint}>\n        <div className=\"relative\">{control}</div>\n      </EndHintRow>\n    );\n\n  return (\n    // `rest` dresses the wrapper — a `data-tour` anchor, a test id. The name, the\n    // description and the invalid state are on the trigger above.\n    <div {...rest} className={className}>\n      {box}\n      {field.below}\n      <ComboboxPanel\n        // The core with the rows ranked above in place of its own filter's.\n        core={{ ...core, results }}\n        listboxId={listboxId}\n        // On a phone the list is a full-screen sheet, which needs the field's own\n        // name to say what it is asking for (live #200).\n        sheetTitle={label ?? text.country}\n        searchPlaceholder={text.search}\n        isSelected={(v) => v === code}\n        onChoose={choose}\n        showCreate={false}\n        onCreate={() => {}}\n        createContent={null}\n      />\n    </div>\n  );\n}\n"],"mappings":";AA0MkB,cAkQZ,YAlQY;AA1MlB,SAAS,aAAa,OAAO,eAAe;AAE5C,SAAS,SAAS;AAClB,SAAS,UAAU;AACnB,SAAS,eAAe,aAAa,4BAA4B;AACjE,SAAS,oBAAoB;AAC7B,SAAS,cAAc,oBAAoB,eAAe,eAAe,qBAAqB;AAC9F;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,oBAAoB;AAC7B,SAAS,eAAe,uBAAyC;AAEjE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,qCAAqC;AAqK9C,SAAS,OAAO,SAAkB,GAAW,QAAyB;AACpE,SAAO,aAAa,SAAS,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,EAC7E,KAAK,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,EAC9B,IAAI,CAAC,MAAM,EAAE,GAAG;AACrB;AAEA,SAAS,SAAS,GAAU,OAAgB,OAAqC;AAC/E,SAAO;AAAA,IACL,OAAO,EAAE;AAAA,IACT,OAAO,EAAE;AAAA,IACT,MAAM,QAAQ,oBAAC,gBAAa,SAAS,EAAE,KAAK,YAAY,GAAG,IAAK;AAAA,IAChE;AAAA,EACF;AACF;AAEA,SAAS,SAAS,QAA+B;AAC/C,MAAI;AACF,WAAO,IAAI,KAAK,SAAS,MAAM;AAAA,EACjC,QAAQ;AACN,WAAO,IAAI,KAAK,SAAS;AAAA,EAC3B;AACF;AA+BO,SAAS,cAAiD;AAAA,EAC/D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,mBAAmB;AAAA,EACnB,oBAAoB;AAAA,EACpB,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,GAAG;AACL,GAAkC;AAChC,QAAM,OAAO,aAAa,iBAAiB,+BAA+B,UAAU;AACpF,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAG3D,QAAM,YAAY,aAAa,YAAY,yBAAyB,EAAE,OAAO,WAAW,CAAC;AAEzF,QAAM,SAAS,aAAa,UAAU,KAAK;AAM3C,QAAM,eAAe,WAAW,KAAK,GAAG;AACxC,QAAM,eAAe,WAAW,KAAK,GAAG;AACxC,QAAM,EAAE,KAAK,MAAM,OAAO,IAAI,QAAQ,MAAM;AAC1C,UAAM,OAAO,oBAAI,IAAY;AAC7B,UAAM,OAAiB,CAAC;AACxB,eAAW,OAAO,iBAAiB,SAAY,aAAa,MAAM,GAAG,IAAI,eAAe;AACtF,YAAMA,QAAO,qBAAqB,GAAG;AACrC,UAAIA,SAAQ,CAAC,KAAK,IAAIA,KAAI,GAAG;AAC3B,aAAK,IAAIA,KAAI;AACb,aAAK,KAAKA,KAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,QAAQ,CAACA,WAAyB,EAAE,MAAAA,OAAM,MAAM,YAAYA,OAAM,MAAM,EAAE;AAChF,UAAM,SAAkB,CAAC;AACzB,UAAM,SAAS,oBAAI,IAAY;AAC/B,eAAW,OAAO,eAAe,aAAa,MAAM,GAAG,IAAI,CAAC,GAAG;AAC7D,YAAMA,QAAO,qBAAqB,GAAG;AACrC,UAAIA,SAAQ,KAAK,IAAIA,KAAI,KAAK,CAAC,OAAO,IAAIA,KAAI,GAAG;AAC/C,eAAO,IAAIA,KAAI;AACf,eAAO,KAAK,MAAMA,KAAI,CAAC;AAAA,MACzB;AAAA,IACF;AACA,UAAM,UAAU,SAAS,MAAM,EAAE;AACjC,UAAM,SAAS,KACZ,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAC5B,IAAI,KAAK,EACT,KAAK,CAAC,GAAG,MAAM,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;AACzC,WAAO,EAAE,KAAK,QAAQ,MAAM,OAAO;AAAA,EACrC,GAAG,CAAC,cAAc,cAAc,MAAM,CAAC;AAKvC,QAAM,aAAa,QAAQ,MAAM,CAAC,GAAG,KAAK,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,KAAK,CAAC;AACzG,QAAM,OAAO,gBAAwB,EAAE,SAAS,YAAY,QAAQ,MAAM,CAAC;AAC3E,QAAM,EAAE,MAAM,SAAS,OAAO,YAAY,eAAe,IAAI;AAG7D,QAAM,aAAa;AAAA,IACjB,CAAC,OAAiC;AAChC,iBAAW,UAAU;AACrB,gBAAU,KAAK,EAAE;AAAA,IACnB;AAAA,IACA,CAAC,KAAK,UAAU;AAAA,EAClB;AAEA,QAAM,IAAI,MAAM,KAAK;AACrB,QAAM,UAAU,QAAQ,MAAM;AAC5B,UAAM,SAAS,IAAI,OAAO,KAAK,GAAG,MAAM,IAAI;AAC5C,UAAM,QAAQ,IAAI,OAAO,QAAQ,GAAG,MAAM,IAAI;AAG9C,UAAM,UAAU,OAAO,SAAS,IAAI,KAAK,SAAS;AAClD,WAAO,CAAC,GAAG,OAAO,IAAI,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,CAAC;AAAA,EACpG,GAAG,CAAC,KAAK,QAAQ,GAAG,KAAK,QAAQ,OAAO,MAAM,CAAC;AAG/C,QAAM,OAAO,cAAc,QAAQ,SAAS;AAC5C,QAAM,SAAS,KAAK;AACpB,QAAM,QAAQ,UAAU,QAAQ,QAAQ;AAIxC,MAAI,SAAS,KAAM,SAAQ,KAAK;AAGhC,QAAM,YAAY,MAAM;AACxB,QAAM,YAAY,MAAM;AACxB,QAAM,YAAY,GAAG,SAAS;AAI9B,QAAM,QAAQ,iBAAiB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,MAAM,SAAS;AAAA,IACf;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb;AAAA,IACA,UAAU,UAAU,KAAK;AAAA,EAC3B,CAAC;AAED,QAAM,OAAO,qBAAqB,KAAK;AACvC,QAAM,eAAe,OAAO,YAAY,MAAM,MAAM,IAAI;AAGxD,QAAM,YAAY,gBAAgB,UAAU,UAAa,CAAC,iBAAiB,KAAK,UAAU;AAC1F,QAAM,YAAY,OAAO,UAAU,WAAW,QAAQ,KAAK;AAC3D,QAAM,UAAU,GAAG,SAAS;AAI5B,QAAM,aACJ,cAAc,UAAa,iBACvB,iBAAiB,iBAAiB,iBAAiB,UAAa,QAAQ,WAAW,MAAM,OAAO,IAChG;AACN,QAAM,OACJ,eAAe,SACX,SACC,cACA,iBAAiB,SACd,OAAO,WAAW,WAAW,YAAY,IACzC,cACE,OAAO,WAAW,WAAW,WAAW,IACxC;AAEZ,QAAM,YAAY,QAAQ,aAAa,QAAQ,CAAC,KAAK;AAGrD,QAAM,OAAO;AACb,QAAM,QAAQ,MAAM;AAClB,QAAI,CAAC,UAAW;AAChB,SAAK,IAAI;AAAA,EACX;AAEA,QAAM,SAAS,CAAC,MAA2B;AACzC,QAAI,MAAO;AACX,SAAK,EAAE,KAAK;AAGZ,mBAAe;AAAA,EACjB;AAEA,QAAM,UACJ;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL,IAAI;AAAA,MACJ,MAAK;AAAA,MAIL,MAAK;AAAA,MACL,iBAAc;AAAA,MACd,iBAAe;AAAA,MACf,iBAAe;AAAA,MACf,cAAY;AAAA,MACZ,mBAAiB;AAAA,MACjB,gBAAc,MAAM,aAAa;AAAA,MACjC,iBAAe;AAAA,MACf,oBAAkB,MAAM;AAAA,MAGxB,UAAU,SAAS,SAAY;AAAA,MAC/B,iBAAe,UAAU;AAAA,MACzB,SAAS,CAAC,MAAM;AACd,YAAI,OAAO;AACT,YAAE,eAAe;AACjB;AAAA,QACF;AACA,gBAAQ,CAAC,MAAM,CAAC,CAAC;AAAA,MACnB;AAAA,MAGA,WAAW,CAAC,MAAM;AAChB,YAAI,MAAO;AACX,YAAI,EAAE,QAAQ,eAAe,EAAE,QAAQ,WAAW;AAChD,YAAE,eAAe;AACjB,kBAAQ,IAAI;AAAA,QACd,WAAW,aAAa,CAAC,SAAS,EAAE,QAAQ,YAAY,EAAE,QAAQ,cAAc;AAE9E,YAAE,eAAe;AACjB,gBAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT;AAAA;AAAA,QAEA;AAAA,QACA,UAAU,UAAa;AAAA,QACvB,SAAS;AAAA,QACT,MAAM,aAAa;AAAA,MACrB;AAAA,MAEA;AAAA,6BAAC,UAAK,WAAU,mCACb;AAAA,mBAAS,QAAQ,oBAAC,gBAAa,SAAS,KAAK,YAAY,GAAG;AAAA,UAI7D,oBAAC,UAAK,IAAI,SAAS,WAAW,GAAG,wBAAwB,iBAAiB,UAAa,kBAAkB,GACtG,0BAAgB,WACnB;AAAA,WACF;AAAA,QACC;AAAA;AAAA;AAAA;AAAA;AAAA,UAKC;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,UAAU;AAAA,cACV,cAAY,UAAU;AAAA,cACtB,SAAS,CAAC,MAAM;AACd,kBAAE,gBAAgB;AAClB,sBAAM;AAAA,cACR;AAAA,cACA,WAAU;AAAA,cAEV,8BAAC,KAAE,eAAW,MAAC,WAAU,UAAS;AAAA;AAAA,UACpC;AAAA,YAEA,oBAAC,gBAAa;AAAA;AAAA;AAAA,EAElB;AAMF,QAAM,UACJ,oBAAC,aAAU,MAAY,SAAS,uBAAuB,WAAU,6BAC9D,mBACH;AAGF,QAAM,MACJ,UAAU,SACR,oBAAC,iBAAc,SAAS,WAAW,OAAc,aAAW,MAAC,MAAM,MAAM,WACtE,mBACH;AAAA;AAAA;AAAA,IAIA,oBAAC,cAAW,MAAM,MAAM,WACtB,8BAAC,SAAI,WAAU,YAAY,mBAAQ,GACrC;AAAA;AAGJ;AAAA;AAAA;AAAA,IAGE,qBAAC,SAAK,GAAG,MAAM,WACZ;AAAA;AAAA,MACA,MAAM;AAAA,MACP;AAAA,QAAC;AAAA;AAAA,UAEC,MAAM,EAAE,GAAG,MAAM,QAAQ;AAAA,UACzB;AAAA,UAGA,YAAY,SAAS,KAAK;AAAA,UAC1B,mBAAmB,KAAK;AAAA,UACxB,YAAY,CAAC,MAAM,MAAM;AAAA,UACzB,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,UAAU,MAAM;AAAA,UAAC;AAAA,UACjB,eAAe;AAAA;AAAA,MACjB;AAAA,OACF;AAAA;AAEJ;","names":["code"]}

package/dist/components/currency-select.js

@@ -6,7 +6,7 @@ import { FieldLabel } from "./field-parts.js";
 import {
   assignRef,
   EndHintRow,
-  LockedReason,
+  LockFrame,
   useFieldMessages,
   useLockReason
 } from "./field-parts.js";
@@ -132,7 +132,7 @@ function CurrencySelect({
       ]
     }
   );
-  const control = locked ? /* @__PURE__ */ jsx(LockedReason, { lock, display: disabledReasonDisplay, className: "flex w-full items-stretch", children: trigger }) : trigger;
+  const control = /* @__PURE__ */ jsx(LockFrame, { lock, display: disabledReasonDisplay, className: "flex w-full items-stretch", children: trigger });
   return (
     // The wrapper takes `rest`; the trigger takes the name. This field's label is a
     // floating <span> rather than a <label for>, so a caller who wants the control to

package/dist/components/currency-select.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/currency-select.tsx"],"sourcesContent":["import { useCallback, useId } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode, Ref } from \"react\";\nimport { FieldChevron, FIELD_TRIGGER, FIELD_INVALID, FIELD_FLOATING_PAD } from \"./field-base\";\nimport { FieldLabel } from \"./field-parts\";\nimport {\n  assignRef,\n  EndHintRow,\n  LockedReason,\n  useFieldMessages,\n  useLockReason,\n  type DisabledReasonDisplay,\n  type FieldHelpProps,\n} from \"./field-parts\";\nimport type { CommitScope } from \"./write-lock\";\nimport { cn } from \"../lib/cn\";\nimport { useComboboxCore } from \"./combobox-core\";\nimport {\n  CURRENCIES,\n  CurrencyFlag,\n  CurrencyOptionList,\n  currencyName,\n  getCurrency,\n  type CurrencyFlagProps,\n  type CurrencyOption,\n} from \"./currency-option-list\";\nimport { DEFAULT_COMMON_LABELS, DEFAULT_CURRENCY_LABELS, useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\n\n// The data and the flag are declared beside the one list both currency pickers render\n// (./currency-option-list, round 0.34 Wave 2, DUP-4) and are this module's exports, as\n// they always were.\nexport { CURRENCIES, CurrencyFlag, currencyName, getCurrency };\nexport type { CurrencyFlagProps, CurrencyOption };\n\n/** `onChange` is the kit's — \"a currency was picked\", carrying the code — rather\n *  than the div's form event. */\nexport interface CurrencySelectProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"onChange\">, FieldHelpProps {\n  value: string;\n  onChange: (code: string) => void;\n  placeholder?: string;\n  label?: ReactNode;\n  /**\n   * Restrict the pickable currencies to these ISO codes (e.g. only the\n   * currencies actually present in a budget). Order is preserved. Defaults to\n   * the full {@link CURRENCIES} list but a `retired` currency (the lev, since\n   * Bulgaria's euro), which only a field that holds it lists. A retired code named\n   * here is offered: the list is the caller's.\n   */\n  options?: string[];\n  /** Required and unanswered — {@link FIELD_INVALID}, the same rose border the\n   *  native `Select` has worn since feedback #235. Every field-styled control in\n   *  this package carries it now, so a form can mark any of its fields rather than\n   *  only the one that happened to have it first. */\n  invalid?: boolean;\n  /**\n   * What is wrong with the choice, in the caller's own words — {@link Input}'s `error`\n   * (keksdose K4: of the kit's pickers this one had neither a message nor a caption, so\n   * \"the account is in EUR\" sat in a loose `<p>` beside it that nothing pointed at).\n   * Rendered under the field, after a text `hint`; merged into the trigger's\n   * `aria-describedby`; implies `invalid`. `null`, `false` and `\"\"` are no message.\n   */\n  error?: ReactNode;\n  /**\n   * {@link Select}'s `hint`, the same rule (keksdose K4). A {@link FieldHint} \"?\" rides\n   * the label's line; on an unlabelled picker it sits at the field's end edge, outside\n   * the box. Plain TEXT (a string or a number) is a caption UNDER the field, attached\n   * to the trigger through `aria-describedby` — the label line has no room for a\n   * sentence.\n   */\n  hint?: ReactNode;\n  /** Every user-facing string this control owns, shaped like `AmountInput`'s\n   *  `labels` so the two currency pickers in the kit are configured the same way.\n   *\n   *  `search` exists because `placeholder` used to do BOTH jobs: it named the empty\n   *  field and, for want of anything else, it was also handed to the search box —\n   *  so a caller who wrote \"Currency\" got \"Currency\" as the prompt for typing a\n   *  filter, and a caller who wanted to name the filter had to rename the field.\n   *  `placeholder` still wins for the trigger, so nothing moves for the callers\n   *  that set it; what changes is that the search box no longer borrows it. */\n  labels?: {\n    /** The empty trigger, when `placeholder` is not given. */\n    currency?: string;\n    /** The filter box inside the open panel. */\n    search?: string;\n  };\n  /**\n   * Translated currency names, keyed by ISO code — `{ CHF: \"Schweizer Franken\" }`.\n   *\n   * {@link CURRENCIES} is data the package ships, so its 27 names were the one\n   * string in the row a consumer could not translate: the code and the symbol are\n   * language-neutral, and the name beside them stayed English in a German UI. This\n   * is a sparse OVERRIDE rather than a replacement list, so an app translates the\n   * eight currencies it actually uses and keeps the rest; forking `CURRENCIES` to\n   * get there would also fork the flags and symbols, which nobody wants to maintain.\n   *\n   * The search matches what is SHOWN — type \"Franken\" and you find CHF — because a\n   * filter that only matches the hidden English name is worse than no filter.\n   */\n  currencyNames?: Record<string, string>;\n  /** As {@link Select}'s: no focus, no list, the settled look, no chevron. */\n  disabled?: boolean;\n  /**\n   * Why the currency cannot be changed — {@link Select}'s `disabledReason` (keksdose,\n   * 2026-10-23: a budget's currency for a guest or a viewer, and while offline, which\n   * keksdose drew as a one-option `Select` to keep the reason and lost the flag). The\n   * trigger stays focusable and `aria-disabled` (never the `disabled` attribute), keeps\n   * its flag and code, opens nothing, and `onChange` is never called; the reason is a\n   * line under the field at Large and on a touch screen, else in the kit\n   * {@link Tooltip} (`disabledReasonDisplay`), and on the trigger's `aria-describedby`\n   * (after a caption, before an error). It wears the settled look of a disabled field\n   * and drops its chevron, as a locked Select does. It wins over `disabled`.\n   */\n  disabledReason?: ReactNode;\n  /** Where the reason shows — {@link Select}'s `disabledReasonDisplay`: a line under the\n   *  field at Large and on a touch screen by default, the tooltip otherwise. */\n  disabledReasonDisplay?: DisabledReasonDisplay;\n  /**\n   * This picker COMMITS — choosing saves. Under a locked {@link WriteLockProvider} it is\n   * locked the `disabledReason` way with the lock's reason (which wins over its own).\n   * No provider, or an unlocked one: no effect. {@link Select}'s `commit`. A currency\n   * field inside a form with its own Save stays editable under the lock — leave this off\n   * there, and put `commit` on the Save.\n   */\n  commit?: CommitScope;\n  /** The TRIGGER — the focusable `<button>` — as a React 19 ref prop, as on\n   *  {@link MultiSelect} and {@link CountrySelect}: react-hook-form's focus-on-error\n   *  calls `focus()` on it (0.34, API-3, refactor audit 2026-10). Not the wrapper. */\n  ref?: Ref<HTMLButtonElement>;\n}\n\nexport function CurrencySelect({\n  value,\n  onChange,\n  placeholder,\n  className,\n  label,\n  options,\n  invalid,\n  error,\n  hint,\n  help,\n  labels,\n  currencyNames,\n  disabled,\n  disabledReason,\n  disabledReasonDisplay,\n  commit,\n  \"aria-label\": ariaLabel,\n  \"aria-describedby\": ariaDescribedBy,\n  \"aria-invalid\": ariaInvalid,\n  ref,\n  ...rest\n}: CurrencySelectProps) {\n  // The picker family's foundation (round 0.34 Wave 2, DUP-4): open state, the query,\n  // the highlighted row, portal anchoring, outside press, Escape on the kit's stack and\n  // Back — what `useDropdownSearch` gave it, and the rest it did not. `filter: false`:\n  // the list's own currency filter hands the panel its rows.\n  const core = useComboboxCore<string>({ filter: false, backCloses: true });\n  const { open, setOpen, triggerRef, closeToTrigger } = core;\n  // The core anchors the panel to the trigger and hands focus back to it; the caller's\n  // `ref` wants the same element. One callback feeds both, as on MultiSelect.\n  const setTrigger = useCallback(\n    (el: HTMLButtonElement | null) => {\n      triggerRef.current = el;\n      assignRef(ref, el);\n    },\n    [ref, triggerRef],\n  );\n  // `labels` > `currency` from the provider > English.\n  const text = useKitLabels(\"currency\", DEFAULT_CURRENCY_LABELS, labels);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  const locale = useKitLocale();\n\n  const selected = getCurrency(value);\n\n  // The lock — Select's (`useLockReason`): the WriteLock's reason under `commit`, else\n  // the caller's own. Locked or `disabled`, nothing opens the list or picks a value.\n  const lock = useLockReason(commit, disabledReason);\n  const locked = lock.locked;\n  const inert = locked || Boolean(disabled);\n  // A lock (or `disabled`) arriving while the list is up closes it — adjusted while\n  // rendering, as CountrySelect does, so no frame shows a list that cannot be used.\n  if (inert && open) setOpen(false);\n\n  const listboxId = `${useId()}-listbox`;\n  // Text is a caption under the field; anything else (a FieldHint) rides the label\n  // line — and a FieldHint is that caption at Large and on touch (§4). See `hint`. On\n  // the TRIGGER, which is the control with a role: a caller's description used to land\n  // on the wrapper `<div>` through the spread, where nothing reads it. The caller's ids\n  // first, then the caption, then the error — Select's order, through useFieldMessages\n  // since 0.34 (DUP-2, DUP-8).\n  const field = useFieldMessages({\n    hint,\n    help,\n    name: label ?? ariaLabel,\n    error,\n    invalid,\n    describedBy: ariaDescribedBy,\n    ariaInvalid,\n    // A lock's reason sits between the caption and the error, as on Select.\n    reasonId: locked && lock.reasonId,\n  });\n  const { labelHint, describedBy, isInvalid } = field;\n\n  // The trigger's NAME. A combobox does not take its name from its content, and the\n  // floating label is a <span>, not a <label for> — so without `aria-label` from the\n  // caller this trigger had no name at all (keksdose's test suite, 0.5.0). Composed the\n  // way MultiSelect and the entity comboboxes compose theirs, \"label: value\", with the\n  // `currency` word standing in for a missing label so it is never nameless.\n  const fieldName = typeof label === \"string\" ? label : text.currency;\n  const name = ariaLabel ?? common.fieldValue(fieldName, selected ? selected.code : (placeholder ?? text.currency));\n\n  const trigger = (\n    <button\n      // Where Escape on the open list hands focus back to (round 0.34 BUG-1).\n      ref={setTrigger}\n      type=\"button\"\n      aria-label={name}\n      // The focusable kind of disabled while locked (Select's rule): native `disabled`\n      // would take the field out of the tab order, and the reason with it.\n      disabled={locked ? undefined : disabled}\n      aria-disabled={locked || undefined}\n      onClick={(e) => {\n        if (inert) {\n          e.preventDefault();\n          return;\n        }\n        setOpen((v) => !v);\n      }}\n      // Down/Up opens the list from the closed trigger, per the APG; Enter and Space\n      // already do through the button's own click.\n      onKeyDown={(e) => {\n        if (inert) return;\n        if (e.key === \"ArrowDown\" || e.key === \"ArrowUp\") {\n          e.preventDefault();\n          setOpen(true);\n        }\n      }}\n      // The implicit `button` role supports neither `aria-expanded` nor\n      // `aria-invalid`, so this trigger previously wore a red border and announced\n      // nothing about being invalid or about there being a list behind it. The role\n      // that DESCRIBES it is the one that also supports the attributes — the same\n      // treatment its siblings (MultiSelect, the entity comboboxes) now carry, so a\n      // form row of pickers reads the same way throughout. And since Wave 2 the popup\n      // IS the listbox it promises, of options with the chosen one selected (BUG-12).\n      role=\"combobox\"\n      aria-haspopup=\"listbox\"\n      aria-controls={listboxId}\n      aria-expanded={open}\n      aria-invalid={isInvalid || undefined}\n      aria-describedby={describedBy}\n      className={cn(\n        FIELD_TRIGGER,\n        \"pe-9\",\n        label !== undefined && FIELD_FLOATING_PAD,\n        // FIELD_BASE's `disabled:` look, for a trigger locked without being `disabled`\n        // (the `:disabled` variants cannot match it) — Select's FIELD_LOCKED. No hover:\n        // nothing here answers a press.\n        locked && \"cursor-not-allowed bg-surface-2 text-muted hover:bg-surface-2\",\n        isInvalid && FIELD_INVALID,\n      )}\n    >\n      {/* The trigger stays COMPACT — flag + code only — so it never clips in a\n          narrow field; the full names live in the (wider) popup (feedback\n          #308). */}\n      <span\n        className={cn(\n          \"flex items-center gap-2 min-w-0\",\n          // The settled look reaches the code too: `text-primary` here would outweigh it.\n          !selected ? \"text-placeholder\" : inert ? \"text-muted\" : \"text-primary\",\n        )}\n      >\n        {selected ? (\n          <>\n            <CurrencyFlag country={selected.country} />\n            <span className=\"font-medium\">{selected.code}</span>\n          </>\n        ) : (\n          (placeholder ?? text.currency)\n        )}\n      </span>\n      {/* No menu to drop while disabled or locked, so no chevron — the arrow is the one\n          thing on the control that promises a choice (dev#474, as on Select). */}\n      {!inert && <FieldChevron />}\n    </button>\n  );\n\n  // Select's frame: the line under the trigger, or the Tooltip with a hidden copy for\n  // `aria-describedby`. The wrapper `<div>` keeps `className`, so the layout holds.\n  // `flex w-full items-stretch`: the trigger keeps the field's full width in it.\n  const control = locked ? (\n    <LockedReason lock={lock} display={disabledReasonDisplay} className=\"flex w-full items-stretch\">\n      {trigger}\n    </LockedReason>\n  ) : (\n    trigger\n  );\n\n  return (\n    // The wrapper takes `rest`; the trigger takes the name. This field's label is a\n    // floating <span> rather than a <label for>, so a caller who wants the control to\n    // announce more than the code inside it has nowhere else to put it.\n    <div {...rest} className={cn(\"relative\", className)}>\n      {label !== undefined &&\n        (labelHint === undefined ? (\n          <FieldLabel>{label}</FieldLabel>\n        ) : (\n          // The label and its \"?\" as one row on the label's line, as FloatingField lays\n          // out a static label with a hint: the row places both, the label truncates\n          // and the hint keeps its width. `z-10` like FieldLabel's own: the trigger is\n          // `relative` and comes later, so it would paint over the strip.\n          <div className=\"pointer-events-none absolute inset-x-3 top-1 z-10 flex items-center gap-1\">\n            <FieldLabel className=\"static z-auto min-w-0 max-w-none\">{label}</FieldLabel>\n            <span className=\"pointer-events-auto flex shrink-0 items-center\">{labelHint}</span>\n          </div>\n        ))}\n      {/* No label line to ride: at the field's end edge, outside the box, as an\n          unlabelled Select places its FieldHint. */}\n      <EndHintRow hint={label === undefined ? labelHint : undefined}>{control}</EndHintRow>\n      {field.below}\n      {/* Portalled to <body> and anchored to the trigger (dev#548), so where it stands\n          in the flow no longer moves it. */}\n      <CurrencyOptionList\n        core={core}\n        listboxId={listboxId}\n        value={value}\n        codes={options}\n        currencyNames={currencyNames}\n        locale={locale}\n        searchPlaceholder={text.search}\n        // On a phone the list is a full-screen sheet, which needs the field's own name\n        // to say what it asks for (live #200).\n        sheetTitle={label ?? text.currency}\n        onChoose={(code) => {\n          if (inert) return;\n          onChange(code);\n          // Back to the trigger: the panel holding focus is about to unmount, and a\n          // keyboard user who has answered the field should stand on it, ready to Tab on.\n          closeToTrigger();\n        }}\n      />\n    </div>\n  );\n}\n"],"mappings":";AAgRU,mBACE,KADF;AAhRV,SAAS,aAAa,aAAa;AAEnC,SAAS,cAAc,eAAe,eAAe,0BAA0B;AAC/E,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,UAAU;AACnB,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,uBAAuB,yBAAyB,cAAc,oBAAoB;AAwGpF,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,oBAAoB;AAAA,EACpB,gBAAgB;AAAA,EAChB;AAAA,EACA,GAAG;AACL,GAAwB;AAKtB,QAAM,OAAO,gBAAwB,EAAE,QAAQ,OAAO,YAAY,KAAK,CAAC;AACxE,QAAM,EAAE,MAAM,SAAS,YAAY,eAAe,IAAI;AAGtD,QAAM,aAAa;AAAA,IACjB,CAAC,OAAiC;AAChC,iBAAW,UAAU;AACrB,gBAAU,KAAK,EAAE;AAAA,IACnB;AAAA,IACA,CAAC,KAAK,UAAU;AAAA,EAClB;AAEA,QAAM,OAAO,aAAa,YAAY,yBAAyB,MAAM;AACrE,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAC3D,QAAM,SAAS,aAAa;AAE5B,QAAM,WAAW,YAAY,KAAK;AAIlC,QAAM,OAAO,cAAc,QAAQ,cAAc;AACjD,QAAM,SAAS,KAAK;AACpB,QAAM,QAAQ,UAAU,QAAQ,QAAQ;AAGxC,MAAI,SAAS,KAAM,SAAQ,KAAK;AAEhC,QAAM,YAAY,GAAG,MAAM,CAAC;AAO5B,QAAM,QAAQ,iBAAiB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,MAAM,SAAS;AAAA,IACf;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb;AAAA;AAAA,IAEA,UAAU,UAAU,KAAK;AAAA,EAC3B,CAAC;AACD,QAAM,EAAE,WAAW,aAAa,UAAU,IAAI;AAO9C,QAAM,YAAY,OAAO,UAAU,WAAW,QAAQ,KAAK;AAC3D,QAAM,OAAO,aAAa,OAAO,WAAW,WAAW,WAAW,SAAS,OAAQ,eAAe,KAAK,QAAS;AAEhH,QAAM,UACJ;AAAA,IAAC;AAAA;AAAA,MAEC,KAAK;AAAA,MACL,MAAK;AAAA,MACL,cAAY;AAAA,MAGZ,UAAU,SAAS,SAAY;AAAA,MAC/B,iBAAe,UAAU;AAAA,MACzB,SAAS,CAAC,MAAM;AACd,YAAI,OAAO;AACT,YAAE,eAAe;AACjB;AAAA,QACF;AACA,gBAAQ,CAAC,MAAM,CAAC,CAAC;AAAA,MACnB;AAAA,MAGA,WAAW,CAAC,MAAM;AAChB,YAAI,MAAO;AACX,YAAI,EAAE,QAAQ,eAAe,EAAE,QAAQ,WAAW;AAChD,YAAE,eAAe;AACjB,kBAAQ,IAAI;AAAA,QACd;AAAA,MACF;AAAA,MAQA,MAAK;AAAA,MACL,iBAAc;AAAA,MACd,iBAAe;AAAA,MACf,iBAAe;AAAA,MACf,gBAAc,aAAa;AAAA,MAC3B,oBAAkB;AAAA,MAClB,WAAW;AAAA,QACT;AAAA,QACA;AAAA,QACA,UAAU,UAAa;AAAA;AAAA;AAAA;AAAA,QAIvB,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,MAKA;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,WAAW;AAAA,cACT;AAAA;AAAA,cAEA,CAAC,WAAW,qBAAqB,QAAQ,eAAe;AAAA,YAC1D;AAAA,YAEC,qBACC,iCACE;AAAA,kCAAC,gBAAa,SAAS,SAAS,SAAS;AAAA,cACzC,oBAAC,UAAK,WAAU,eAAe,mBAAS,MAAK;AAAA,eAC/C,IAEC,eAAe,KAAK;AAAA;AAAA,QAEzB;AAAA,QAGC,CAAC,SAAS,oBAAC,gBAAa;AAAA;AAAA;AAAA,EAC3B;AAMF,QAAM,UAAU,SACd,oBAAC,gBAAa,MAAY,SAAS,uBAAuB,WAAU,6BACjE,mBACH,IAEA;AAGF;AAAA;AAAA;AAAA;AAAA,IAIE,qBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,YAAY,SAAS,GAC/C;AAAA,gBAAU,WACR,cAAc,SACb,oBAAC,cAAY,iBAAM;AAAA;AAAA;AAAA;AAAA;AAAA,QAMnB,qBAAC,SAAI,WAAU,6EACb;AAAA,8BAAC,cAAW,WAAU,oCAAoC,iBAAM;AAAA,UAChE,oBAAC,UAAK,WAAU,kDAAkD,qBAAU;AAAA,WAC9E;AAAA;AAAA,MAIJ,oBAAC,cAAW,MAAM,UAAU,SAAY,YAAY,QAAY,mBAAQ;AAAA,MACvE,MAAM;AAAA,MAGP;AAAA,QAAC;AAAA;AAAA,UACC;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA,mBAAmB,KAAK;AAAA,UAGxB,YAAY,SAAS,KAAK;AAAA,UAC1B,UAAU,CAAC,SAAS;AAClB,gBAAI,MAAO;AACX,qBAAS,IAAI;AAGb,2BAAe;AAAA,UACjB;AAAA;AAAA,MACF;AAAA,OACF;AAAA;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/components/currency-select.tsx"],"sourcesContent":["import { useCallback, useId } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode, Ref } from \"react\";\nimport { FieldChevron, FIELD_TRIGGER, FIELD_INVALID, FIELD_FLOATING_PAD } from \"./field-base\";\nimport { FieldLabel } from \"./field-parts\";\nimport {\n  assignRef,\n  EndHintRow,\n  LockFrame,\n  useFieldMessages,\n  useLockReason,\n  type DisabledReasonDisplay,\n  type FieldHelpProps,\n} from \"./field-parts\";\nimport type { CommitScope } from \"./write-lock\";\nimport { cn } from \"../lib/cn\";\nimport { useComboboxCore } from \"./combobox-core\";\nimport {\n  CURRENCIES,\n  CurrencyFlag,\n  CurrencyOptionList,\n  currencyName,\n  getCurrency,\n  type CurrencyFlagProps,\n  type CurrencyOption,\n} from \"./currency-option-list\";\nimport { DEFAULT_COMMON_LABELS, DEFAULT_CURRENCY_LABELS, useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\n\n// The data and the flag are declared beside the one list both currency pickers render\n// (./currency-option-list, round 0.34 Wave 2, DUP-4) and are this module's exports, as\n// they always were.\nexport { CURRENCIES, CurrencyFlag, currencyName, getCurrency };\nexport type { CurrencyFlagProps, CurrencyOption };\n\n/** `onChange` is the kit's — \"a currency was picked\", carrying the code — rather\n *  than the div's form event. */\nexport interface CurrencySelectProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"onChange\">, FieldHelpProps {\n  value: string;\n  onChange: (code: string) => void;\n  placeholder?: string;\n  label?: ReactNode;\n  /**\n   * Restrict the pickable currencies to these ISO codes (e.g. only the\n   * currencies actually present in a budget). Order is preserved. Defaults to\n   * the full {@link CURRENCIES} list but a `retired` currency (the lev, since\n   * Bulgaria's euro), which only a field that holds it lists. A retired code named\n   * here is offered: the list is the caller's.\n   */\n  options?: string[];\n  /** Required and unanswered — {@link FIELD_INVALID}, the same rose border the\n   *  native `Select` has worn since feedback #235. Every field-styled control in\n   *  this package carries it now, so a form can mark any of its fields rather than\n   *  only the one that happened to have it first. */\n  invalid?: boolean;\n  /**\n   * What is wrong with the choice, in the caller's own words — {@link Input}'s `error`\n   * (keksdose K4: of the kit's pickers this one had neither a message nor a caption, so\n   * \"the account is in EUR\" sat in a loose `<p>` beside it that nothing pointed at).\n   * Rendered under the field, after a text `hint`; merged into the trigger's\n   * `aria-describedby`; implies `invalid`. `null`, `false` and `\"\"` are no message.\n   */\n  error?: ReactNode;\n  /**\n   * {@link Select}'s `hint`, the same rule (keksdose K4). A {@link FieldHint} \"?\" rides\n   * the label's line; on an unlabelled picker it sits at the field's end edge, outside\n   * the box. Plain TEXT (a string or a number) is a caption UNDER the field, attached\n   * to the trigger through `aria-describedby` — the label line has no room for a\n   * sentence.\n   */\n  hint?: ReactNode;\n  /** Every user-facing string this control owns, shaped like `AmountInput`'s\n   *  `labels` so the two currency pickers in the kit are configured the same way.\n   *\n   *  `search` exists because `placeholder` used to do BOTH jobs: it named the empty\n   *  field and, for want of anything else, it was also handed to the search box —\n   *  so a caller who wrote \"Currency\" got \"Currency\" as the prompt for typing a\n   *  filter, and a caller who wanted to name the filter had to rename the field.\n   *  `placeholder` still wins for the trigger, so nothing moves for the callers\n   *  that set it; what changes is that the search box no longer borrows it. */\n  labels?: {\n    /** The empty trigger, when `placeholder` is not given. */\n    currency?: string;\n    /** The filter box inside the open panel. */\n    search?: string;\n  };\n  /**\n   * Translated currency names, keyed by ISO code — `{ CHF: \"Schweizer Franken\" }`.\n   *\n   * {@link CURRENCIES} is data the package ships, so its 27 names were the one\n   * string in the row a consumer could not translate: the code and the symbol are\n   * language-neutral, and the name beside them stayed English in a German UI. This\n   * is a sparse OVERRIDE rather than a replacement list, so an app translates the\n   * eight currencies it actually uses and keeps the rest; forking `CURRENCIES` to\n   * get there would also fork the flags and symbols, which nobody wants to maintain.\n   *\n   * The search matches what is SHOWN — type \"Franken\" and you find CHF — because a\n   * filter that only matches the hidden English name is worse than no filter.\n   */\n  currencyNames?: Record<string, string>;\n  /** As {@link Select}'s: no focus, no list, the settled look, no chevron. */\n  disabled?: boolean;\n  /**\n   * Why the currency cannot be changed — {@link Select}'s `disabledReason` (keksdose,\n   * 2026-10-23: a budget's currency for a guest or a viewer, and while offline, which\n   * keksdose drew as a one-option `Select` to keep the reason and lost the flag). The\n   * trigger stays focusable and `aria-disabled` (never the `disabled` attribute), keeps\n   * its flag and code, opens nothing, and `onChange` is never called; the reason is a\n   * line under the field at Large and on a touch screen, else in the kit\n   * {@link Tooltip} (`disabledReasonDisplay`), and on the trigger's `aria-describedby`\n   * (after a caption, before an error). It wears the settled look of a disabled field\n   * and drops its chevron, as a locked Select does. It wins over `disabled`.\n   */\n  disabledReason?: ReactNode;\n  /** Where the reason shows — {@link Select}'s `disabledReasonDisplay`: a line under the\n   *  field at Large and on a touch screen by default, the tooltip otherwise. */\n  disabledReasonDisplay?: DisabledReasonDisplay;\n  /**\n   * This picker COMMITS — choosing saves. Under a locked {@link WriteLockProvider} it is\n   * locked the `disabledReason` way with the lock's reason (which wins over its own).\n   * No provider, or an unlocked one: no effect. {@link Select}'s `commit`. A currency\n   * field inside a form with its own Save stays editable under the lock — leave this off\n   * there, and put `commit` on the Save.\n   */\n  commit?: CommitScope;\n  /** The TRIGGER — the focusable `<button>` — as a React 19 ref prop, as on\n   *  {@link MultiSelect} and {@link CountrySelect}: react-hook-form's focus-on-error\n   *  calls `focus()` on it (0.34, API-3, refactor audit 2026-10). Not the wrapper. */\n  ref?: Ref<HTMLButtonElement>;\n}\n\nexport function CurrencySelect({\n  value,\n  onChange,\n  placeholder,\n  className,\n  label,\n  options,\n  invalid,\n  error,\n  hint,\n  help,\n  labels,\n  currencyNames,\n  disabled,\n  disabledReason,\n  disabledReasonDisplay,\n  commit,\n  \"aria-label\": ariaLabel,\n  \"aria-describedby\": ariaDescribedBy,\n  \"aria-invalid\": ariaInvalid,\n  ref,\n  ...rest\n}: CurrencySelectProps) {\n  // The picker family's foundation (round 0.34 Wave 2, DUP-4): open state, the query,\n  // the highlighted row, portal anchoring, outside press, Escape on the kit's stack and\n  // Back — what `useDropdownSearch` gave it, and the rest it did not. `filter: false`:\n  // the list's own currency filter hands the panel its rows.\n  const core = useComboboxCore<string>({ filter: false, backCloses: true });\n  const { open, setOpen, triggerRef, closeToTrigger } = core;\n  // The core anchors the panel to the trigger and hands focus back to it; the caller's\n  // `ref` wants the same element. One callback feeds both, as on MultiSelect.\n  const setTrigger = useCallback(\n    (el: HTMLButtonElement | null) => {\n      triggerRef.current = el;\n      assignRef(ref, el);\n    },\n    [ref, triggerRef],\n  );\n  // `labels` > `currency` from the provider > English.\n  const text = useKitLabels(\"currency\", DEFAULT_CURRENCY_LABELS, labels);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  const locale = useKitLocale();\n\n  const selected = getCurrency(value);\n\n  // The lock — Select's (`useLockReason`): the WriteLock's reason under `commit`, else\n  // the caller's own. Locked or `disabled`, nothing opens the list or picks a value.\n  const lock = useLockReason(commit, disabledReason);\n  const locked = lock.locked;\n  const inert = locked || Boolean(disabled);\n  // A lock (or `disabled`) arriving while the list is up closes it — adjusted while\n  // rendering, as CountrySelect does, so no frame shows a list that cannot be used.\n  if (inert && open) setOpen(false);\n\n  const listboxId = `${useId()}-listbox`;\n  // Text is a caption under the field; anything else (a FieldHint) rides the label\n  // line — and a FieldHint is that caption at Large and on touch (§4). See `hint`. On\n  // the TRIGGER, which is the control with a role: a caller's description used to land\n  // on the wrapper `<div>` through the spread, where nothing reads it. The caller's ids\n  // first, then the caption, then the error — Select's order, through useFieldMessages\n  // since 0.34 (DUP-2, DUP-8).\n  const field = useFieldMessages({\n    hint,\n    help,\n    name: label ?? ariaLabel,\n    error,\n    invalid,\n    describedBy: ariaDescribedBy,\n    ariaInvalid,\n    // A lock's reason sits between the caption and the error, as on Select.\n    reasonId: locked && lock.reasonId,\n  });\n  const { labelHint, describedBy, isInvalid } = field;\n\n  // The trigger's NAME. A combobox does not take its name from its content, and the\n  // floating label is a <span>, not a <label for> — so without `aria-label` from the\n  // caller this trigger had no name at all (keksdose's test suite, 0.5.0). Composed the\n  // way MultiSelect and the entity comboboxes compose theirs, \"label: value\", with the\n  // `currency` word standing in for a missing label so it is never nameless.\n  const fieldName = typeof label === \"string\" ? label : text.currency;\n  const name = ariaLabel ?? common.fieldValue(fieldName, selected ? selected.code : (placeholder ?? text.currency));\n\n  const trigger = (\n    <button\n      // Where Escape on the open list hands focus back to (round 0.34 BUG-1).\n      ref={setTrigger}\n      type=\"button\"\n      aria-label={name}\n      // The focusable kind of disabled while locked (Select's rule): native `disabled`\n      // would take the field out of the tab order, and the reason with it.\n      disabled={locked ? undefined : disabled}\n      aria-disabled={locked || undefined}\n      onClick={(e) => {\n        if (inert) {\n          e.preventDefault();\n          return;\n        }\n        setOpen((v) => !v);\n      }}\n      // Down/Up opens the list from the closed trigger, per the APG; Enter and Space\n      // already do through the button's own click.\n      onKeyDown={(e) => {\n        if (inert) return;\n        if (e.key === \"ArrowDown\" || e.key === \"ArrowUp\") {\n          e.preventDefault();\n          setOpen(true);\n        }\n      }}\n      // The implicit `button` role supports neither `aria-expanded` nor\n      // `aria-invalid`, so this trigger previously wore a red border and announced\n      // nothing about being invalid or about there being a list behind it. The role\n      // that DESCRIBES it is the one that also supports the attributes — the same\n      // treatment its siblings (MultiSelect, the entity comboboxes) now carry, so a\n      // form row of pickers reads the same way throughout. And since Wave 2 the popup\n      // IS the listbox it promises, of options with the chosen one selected (BUG-12).\n      role=\"combobox\"\n      aria-haspopup=\"listbox\"\n      aria-controls={listboxId}\n      aria-expanded={open}\n      aria-invalid={isInvalid || undefined}\n      aria-describedby={describedBy}\n      className={cn(\n        FIELD_TRIGGER,\n        \"pe-9\",\n        label !== undefined && FIELD_FLOATING_PAD,\n        // FIELD_BASE's `disabled:` look, for a trigger locked without being `disabled`\n        // (the `:disabled` variants cannot match it) — Select's FIELD_LOCKED. No hover:\n        // nothing here answers a press.\n        locked && \"cursor-not-allowed bg-surface-2 text-muted hover:bg-surface-2\",\n        isInvalid && FIELD_INVALID,\n      )}\n    >\n      {/* The trigger stays COMPACT — flag + code only — so it never clips in a\n          narrow field; the full names live in the (wider) popup (feedback\n          #308). */}\n      <span\n        className={cn(\n          \"flex items-center gap-2 min-w-0\",\n          // The settled look reaches the code too: `text-primary` here would outweigh it.\n          !selected ? \"text-placeholder\" : inert ? \"text-muted\" : \"text-primary\",\n        )}\n      >\n        {selected ? (\n          <>\n            <CurrencyFlag country={selected.country} />\n            <span className=\"font-medium\">{selected.code}</span>\n          </>\n        ) : (\n          (placeholder ?? text.currency)\n        )}\n      </span>\n      {/* No menu to drop while disabled or locked, so no chevron — the arrow is the one\n          thing on the control that promises a choice (dev#474, as on Select). */}\n      {!inert && <FieldChevron />}\n    </button>\n  );\n\n  // Select's frame: the line under the trigger, or the Tooltip with a hidden copy for\n  // `aria-describedby`. The wrapper `<div>` keeps `className`, so the layout holds.\n  // `flex w-full items-stretch`: the trigger keeps the field's full width in it.\n  const control = (\n    <LockFrame lock={lock} display={disabledReasonDisplay} className=\"flex w-full items-stretch\">\n      {trigger}\n    </LockFrame>\n  );\n\n  return (\n    // The wrapper takes `rest`; the trigger takes the name. This field's label is a\n    // floating <span> rather than a <label for>, so a caller who wants the control to\n    // announce more than the code inside it has nowhere else to put it.\n    <div {...rest} className={cn(\"relative\", className)}>\n      {label !== undefined &&\n        (labelHint === undefined ? (\n          <FieldLabel>{label}</FieldLabel>\n        ) : (\n          // The label and its \"?\" as one row on the label's line, as FloatingField lays\n          // out a static label with a hint: the row places both, the label truncates\n          // and the hint keeps its width. `z-10` like FieldLabel's own: the trigger is\n          // `relative` and comes later, so it would paint over the strip.\n          <div className=\"pointer-events-none absolute inset-x-3 top-1 z-10 flex items-center gap-1\">\n            <FieldLabel className=\"static z-auto min-w-0 max-w-none\">{label}</FieldLabel>\n            <span className=\"pointer-events-auto flex shrink-0 items-center\">{labelHint}</span>\n          </div>\n        ))}\n      {/* No label line to ride: at the field's end edge, outside the box, as an\n          unlabelled Select places its FieldHint. */}\n      <EndHintRow hint={label === undefined ? labelHint : undefined}>{control}</EndHintRow>\n      {field.below}\n      {/* Portalled to <body> and anchored to the trigger (dev#548), so where it stands\n          in the flow no longer moves it. */}\n      <CurrencyOptionList\n        core={core}\n        listboxId={listboxId}\n        value={value}\n        codes={options}\n        currencyNames={currencyNames}\n        locale={locale}\n        searchPlaceholder={text.search}\n        // On a phone the list is a full-screen sheet, which needs the field's own name\n        // to say what it asks for (live #200).\n        sheetTitle={label ?? text.currency}\n        onChoose={(code) => {\n          if (inert) return;\n          onChange(code);\n          // Back to the trigger: the panel holding focus is about to unmount, and a\n          // keyboard user who has answered the field should stand on it, ready to Tab on.\n          closeToTrigger();\n        }}\n      />\n    </div>\n  );\n}\n"],"mappings":";AAgRU,mBACE,KADF;AAhRV,SAAS,aAAa,aAAa;AAEnC,SAAS,cAAc,eAAe,eAAe,0BAA0B;AAC/E,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,UAAU;AACnB,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,uBAAuB,yBAAyB,cAAc,oBAAoB;AAwGpF,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,oBAAoB;AAAA,EACpB,gBAAgB;AAAA,EAChB;AAAA,EACA,GAAG;AACL,GAAwB;AAKtB,QAAM,OAAO,gBAAwB,EAAE,QAAQ,OAAO,YAAY,KAAK,CAAC;AACxE,QAAM,EAAE,MAAM,SAAS,YAAY,eAAe,IAAI;AAGtD,QAAM,aAAa;AAAA,IACjB,CAAC,OAAiC;AAChC,iBAAW,UAAU;AACrB,gBAAU,KAAK,EAAE;AAAA,IACnB;AAAA,IACA,CAAC,KAAK,UAAU;AAAA,EAClB;AAEA,QAAM,OAAO,aAAa,YAAY,yBAAyB,MAAM;AACrE,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAC3D,QAAM,SAAS,aAAa;AAE5B,QAAM,WAAW,YAAY,KAAK;AAIlC,QAAM,OAAO,cAAc,QAAQ,cAAc;AACjD,QAAM,SAAS,KAAK;AACpB,QAAM,QAAQ,UAAU,QAAQ,QAAQ;AAGxC,MAAI,SAAS,KAAM,SAAQ,KAAK;AAEhC,QAAM,YAAY,GAAG,MAAM,CAAC;AAO5B,QAAM,QAAQ,iBAAiB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,MAAM,SAAS;AAAA,IACf;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb;AAAA;AAAA,IAEA,UAAU,UAAU,KAAK;AAAA,EAC3B,CAAC;AACD,QAAM,EAAE,WAAW,aAAa,UAAU,IAAI;AAO9C,QAAM,YAAY,OAAO,UAAU,WAAW,QAAQ,KAAK;AAC3D,QAAM,OAAO,aAAa,OAAO,WAAW,WAAW,WAAW,SAAS,OAAQ,eAAe,KAAK,QAAS;AAEhH,QAAM,UACJ;AAAA,IAAC;AAAA;AAAA,MAEC,KAAK;AAAA,MACL,MAAK;AAAA,MACL,cAAY;AAAA,MAGZ,UAAU,SAAS,SAAY;AAAA,MAC/B,iBAAe,UAAU;AAAA,MACzB,SAAS,CAAC,MAAM;AACd,YAAI,OAAO;AACT,YAAE,eAAe;AACjB;AAAA,QACF;AACA,gBAAQ,CAAC,MAAM,CAAC,CAAC;AAAA,MACnB;AAAA,MAGA,WAAW,CAAC,MAAM;AAChB,YAAI,MAAO;AACX,YAAI,EAAE,QAAQ,eAAe,EAAE,QAAQ,WAAW;AAChD,YAAE,eAAe;AACjB,kBAAQ,IAAI;AAAA,QACd;AAAA,MACF;AAAA,MAQA,MAAK;AAAA,MACL,iBAAc;AAAA,MACd,iBAAe;AAAA,MACf,iBAAe;AAAA,MACf,gBAAc,aAAa;AAAA,MAC3B,oBAAkB;AAAA,MAClB,WAAW;AAAA,QACT;AAAA,QACA;AAAA,QACA,UAAU,UAAa;AAAA;AAAA;AAAA;AAAA,QAIvB,UAAU;AAAA,QACV,aAAa;AAAA,MACf;AAAA,MAKA;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,WAAW;AAAA,cACT;AAAA;AAAA,cAEA,CAAC,WAAW,qBAAqB,QAAQ,eAAe;AAAA,YAC1D;AAAA,YAEC,qBACC,iCACE;AAAA,kCAAC,gBAAa,SAAS,SAAS,SAAS;AAAA,cACzC,oBAAC,UAAK,WAAU,eAAe,mBAAS,MAAK;AAAA,eAC/C,IAEC,eAAe,KAAK;AAAA;AAAA,QAEzB;AAAA,QAGC,CAAC,SAAS,oBAAC,gBAAa;AAAA;AAAA;AAAA,EAC3B;AAMF,QAAM,UACJ,oBAAC,aAAU,MAAY,SAAS,uBAAuB,WAAU,6BAC9D,mBACH;AAGF;AAAA;AAAA;AAAA;AAAA,IAIE,qBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,YAAY,SAAS,GAC/C;AAAA,gBAAU,WACR,cAAc,SACb,oBAAC,cAAY,iBAAM;AAAA;AAAA;AAAA;AAAA;AAAA,QAMnB,qBAAC,SAAI,WAAU,6EACb;AAAA,8BAAC,cAAW,WAAU,oCAAoC,iBAAM;AAAA,UAChE,oBAAC,UAAK,WAAU,kDAAkD,qBAAU;AAAA,WAC9E;AAAA;AAAA,MAIJ,oBAAC,cAAW,MAAM,UAAU,SAAY,YAAY,QAAY,mBAAQ;AAAA,MACvE,MAAM;AAAA,MAGP;AAAA,QAAC;AAAA;AAAA,UACC;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA,mBAAmB,KAAK;AAAA,UAGxB,YAAY,SAAS,KAAK;AAAA,UAC1B,UAAU,CAAC,SAAS;AAClB,gBAAI,MAAO;AACX,qBAAS,IAAI;AAGb,2BAAe;AAAA,UACjB;AAAA;AAAA,MACF;AAAA,OACF;AAAA;AAEJ;","names":[]}

package/dist/components/danger-confirm.js

@@ -3,6 +3,7 @@ import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { Children, useCallback, useEffect, useId, useRef, useState } from "react";
 import { cn } from "../lib/cn.js";
 import { hasContent } from "../lib/presence.js";
+import { returnFocus } from "../lib/focus-left.js";
 import { useKitLabels } from "../i18n/kit-labels.js";
 import { Button } from "./button.js";
 import { Input } from "./input.js";
@@ -219,8 +220,7 @@ function DangerConfirm(props) {
       return;
     }
     confirmed.current = false;
-    const lost = document.activeElement === null || document.activeElement === document.body;
-    if (byUser || lost) document.getElementById(armId)?.focus();
+    returnFocus({ opener: document.getElementById(armId) });
   }, [armed, armId, cancelId]);
   const wasBusy = useRef(busy);
   useEffect(() => {

package/dist/components/danger-confirm.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/danger-confirm.tsx"],"sourcesContent":["import { Children, useCallback, useEffect, useId, useRef, useState } from \"react\";\nimport type { ChangeEvent, ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\nimport { cn } from \"../lib/cn\";\nimport { hasContent } from \"../lib/presence\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { Button } from \"./button\";\nimport { Input } from \"./input\";\nimport { Label } from \"./field-base\";\nimport { FIELD_ERROR_CLASS } from \"./field-parts\";\nimport { Spinner } from \"./spinner\";\nimport type { ButtonVariant } from \"./button-look\";\nimport type { InputProps } from \"./input\";\nimport { Checkbox } from \"./checkbox\";\nimport { Tooltip } from \"./tooltip\";\nimport { useCommitReason, type CommitScope } from \"./write-lock\";\nimport { DEFAULT_DANGER_CONFIRM_LABELS } from \"./danger-confirm-labels\";\n\n/**\n * How typed text is compared with the text it has to repeat — shared by\n * `DangerConfirm`'s `phraseMatch` and `useConfirm`'s `typedMatch`.\n *\n * - `\"trim\"` ignores spaces around the typed text — a phone keyboard's autocomplete\n *   likes to add one. Case counts: \"delete\" is not \"DELETE\".\n * - `\"exact\"` compares character for character, spaces included.\n * - `\"caseless\"` trims AND ignores case: for an e-mail address, whose domain is\n *   case-insensitive and whose local part every real mail server treats so. Both apps'\n *   \"type the account's address\" rules (keksdose's `TYPE_EMAIL`, Kurvenschmiede's\n *   `TypedConfirm`) compared `trim().toLowerCase()`, and a capital the user's keyboard\n *   put at the start must not make the right row look like the wrong one.\n */\nexport type TypedMatch = \"trim\" | \"exact\" | \"caseless\";\n\n/** Whether `typed` repeats `target` under `mode` — see {@link TypedMatch}. Exported for\n *  a caller that draws its own field (a dialog that also picks a recipient) and wants\n *  the same rule as the kit's. */\nexport function typedMatches(typed: string, target: string, mode: TypedMatch = \"trim\"): boolean {\n  if (mode === \"exact\") return typed === target;\n  if (mode === \"trim\") return typed.trim() === target;\n  // `toLowerCase`, not `toLocaleLowerCase`: the comparison must not change with the\n  // reader's locale (a Turkish dotless i would otherwise fail an ASCII address).\n  return typed.trim().toLowerCase() === target.trim().toLowerCase();\n}\n\n/**\n * Busy-while-a-promise-runs, for an action that MAY return one: `run(result, onResolved)`\n * marks the caller pending until `result` settles, calls `onResolved` if it fulfilled,\n * and only clears the flag if it rejected — the caller shows why and the user retries.\n * Nothing runs after unmount. Shared by `DangerConfirm` and `ReauthDialog`, whose\n * contract is the same: resolve = done, reject = stay put.\n *\n * @internal\n */\nexport function usePromisePending() {\n  const [pending, setPending] = useState(false);\n  const mounted = useRef(true);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n  const run = useCallback((result: unknown, onResolved: () => void): boolean => {\n    if (!result || typeof (result as Promise<unknown>).then !== \"function\") return false;\n    setPending(true);\n    (result as Promise<unknown>).then(\n      () => {\n        if (!mounted.current) return;\n        setPending(false);\n        onResolved();\n      },\n      () => {\n        if (mounted.current) setPending(false);\n      },\n    );\n    return true;\n  }, []);\n  return { pending, run };\n}\n\n/** The one word {@link CurrentPasswordInput} says on its own behalf — the\n *  `dangerConfirm.password` label, shared with DangerConfirm's password field, so an\n *  app translates \"Password\" once. */\nexport type CurrentPasswordInputLabels = Pick<DangerConfirmLabels, \"password\">;\n\n/**\n * Everything {@link Input} takes except what makes this field what it is: `type` is\n * always `\"password\"` and `autoComplete` always `\"current-password\"`.\n */\nexport interface CurrentPasswordInputProps extends Omit<InputProps, \"type\" | \"autoComplete\" | \"label\"> {\n  /**\n   * The visible label. Default `dangerConfirm.password` (\"Password\") — unless the field\n   * is named another way (`aria-label` / `aria-labelledby`), which then stays the only\n   * name. Pass the app's own word on a sign-in form (\"Password\", \"Your password\"), or\n   * `null` for a field whose `<label htmlFor>` is drawn elsewhere (a form library's\n   * label), which would otherwise be labelled twice.\n   */\n  label?: ReactNode;\n  /** The value as a string — the `(next) => …` shape, so a caller holding it in\n   *  `useState` need not unwrap `event.target.value`. Fires alongside `onChange`,\n   *  never instead of it, so a form library's `onChange` keeps working. */\n  onValueChange?: (value: string) => void;\n  /**\n   * A check is running (the sign-in request, the re-auth). The field turns `readOnly`,\n   * NOT `disabled`: the field being submitted is usually the focused one (Enter was\n   * pressed in it), and disabling a focused field drops focus to `<body>` — the user\n   * lands nowhere when the \"wrong password\" answer comes back.\n   */\n  busy?: boolean;\n  /** Per-instance override of `dangerConfirm.password`. */\n  labels?: LabelOverride<CurrentPasswordInputLabels>;\n}\n\n/**\n * The \"prove it is you\" field: a password input that a password manager fills with\n * the CURRENT password and never offers to generate a new one for.\n *\n * It is the field of a sign-in form, a re-auth step ({@link ReauthDialog} draws the same\n * field), and {@link DangerConfirm}'s `requirePassword`. Public since 0.22 for kastlan's\n * sign-in and re-auth (kastlan 1), which wrote `type=\"password\"` +\n * `autoComplete=\"current-password\"` by hand — and a sign-in field that forgets the\n * second half gets the browser's \"suggest a strong password\" offer on the one form where\n * a NEW password is never what is wanted. The reverse matters as much: a field that sets\n * a NEW password (a passphrase, a sign-up) must NOT be this one — keksdose #170 keeps\n * its passphrase doors on `new-password` / `off` for that reason.\n *\n * Everything else is {@link Input}: the reveal toggle, `error` (under the field,\n * `aria-describedby`, `aria-invalid`), `invalid`, `name`, `id`, `autoFocus`, `required`.\n * The ref is the `<input>`, so it works with `@eifi1/ui-kit/rhf`'s `RhfField` / a\n * `register()` spread, and controlled or uncontrolled.\n *\n * ```tsx\n * <CurrentPasswordInput name=\"password\" label={t(\"password\")} error={errors.password?.message}\n *   busy={isSubmitting} {...register(\"password\")} />\n * ```\n */\nexport function CurrentPasswordInput({\n  label,\n  onValueChange,\n  onChange,\n  busy,\n  readOnly,\n  labels: labelsProp,\n  ...rest\n}: CurrentPasswordInputProps) {\n  const labels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS, labelsProp);\n  const namedOtherwise = rest[\"aria-label\"] !== undefined || rest[\"aria-labelledby\"] !== undefined;\n  return (\n    <Input\n      // `ref` (the `<input>`) rides along: a React 19 ref prop since 0.34 (MOD-4, refactor\n      // audit 2026-10), where this was `forwardRef`.\n      {...rest}\n      // After the spread: a props object spread at the field must not turn it into a\n      // text field, or into one the password manager offers a new password for.\n      type=\"password\"\n      autoComplete=\"current-password\"\n      label={\n        label === undefined ? (namedOtherwise ? undefined : labels.password) : hasContent(label) ? label : undefined\n      }\n      readOnly={Boolean(busy) || readOnly}\n      onChange={(e) => {\n        onChange?.(e);\n        onValueChange?.(e.target.value);\n      }}\n    />\n  );\n}\n\n/** The words {@link TypedConfirmField} says on its own behalf — the `dangerConfirm`\n *  namespace's `phrase` and `phrasePlaceholder`, shared with DangerConfirm's own field,\n *  so the sentence \"Type “X” to confirm\" is translated once. */\nexport type TypedConfirmFieldLabels = Pick<DangerConfirmLabels, \"phrase\" | \"phrasePlaceholder\">;\n\nexport interface TypedConfirmFieldProps extends Omit<\n  InputProps,\n  \"type\" | \"value\" | \"defaultValue\" | \"label\" | \"placeholder\"\n> {\n  /** The text to repeat — a word (\"DELETE\"), a name, an e-mail address. */\n  target: string;\n  /** How the typed text is compared with `target` — {@link TypedMatch}. Default\n   *  `\"trim\"`, as {@link typedMatches}; `\"caseless\"` for an address or an\n   *  acknowledgement word a user may type in any case. */\n  match?: TypedMatch;\n  /** Controlled value. Left out, the field keeps its own (start: `defaultValue`). */\n  value?: string;\n  defaultValue?: string;\n  /** The typed text as a string, on every keystroke. Fires alongside `onChange`. */\n  onValueChange?: (value: string) => void;\n  /**\n   * The typed text started or stopped matching `target` — fired from the keystroke\n   * that flipped it, so an uncontrolled field can still drive the button it guards. A\n   * controlled caller that resets the value itself (on a close) knows the answer\n   * already, and gets no call for that; it can also compute it with {@link typedMatches}.\n   */\n  onMatchedChange?: (matched: boolean) => void;\n  /** The label. Default `dangerConfirm.phrase(target)` — \"Type “DELETE” to confirm\". */\n  label?: ReactNode;\n  /** Text inside the empty field. Default `dangerConfirm.phrasePlaceholder` (unset).\n   *  Given, the label moves ABOVE the field: a floating label occupies the empty\n   *  field, which is exactly where a placeholder shows. `\"\"` means none. */\n  placeholder?: string;\n  /** The guarded action is running: the field turns `readOnly` (not `disabled`, which\n   *  would drop the focus Enter left in it). */\n  busy?: boolean;\n  labels?: LabelOverride<TypedConfirmFieldLabels>;\n}\n\n/**\n * The \"type this to confirm\" field — {@link DangerConfirm}'s `phrase` field and\n * `useConfirm({ requireTyped })`'s, on its own (keksdose K7).\n *\n * keksdose writes it by hand four times: the privacy enrol, upgrade and sweep dialogs\n * (type the acknowledgement word, then the key doors appear) and the admin's \"type the\n * user's address\" (`UserActionConfirm`), each an `Input` plus its own\n * `trim().toUpperCase()` / `toLowerCase()` comparison. None of those places is an\n * arm → confirm tile or a modal confirm — what is guarded is a whole form, or the\n * next step of a dialog — so the field had to stand alone. What it brings over a plain\n * `Input`: one match rule ({@link typedMatches}, which lower-cases locale-independently\n * on purpose), the label worded from the target in the app's language, and the\n * attributes a phone keyboard needs to leave the text alone (no autocomplete, no\n * auto-capital, no autocorrect, no spellcheck — a keyboard that \"corrects\" an e-mail\n * address makes the guard unpassable).\n *\n * The field reports whether it matches (`onMatchedChange`, and `data-matched` on the\n * `<input>` for styling); what the match unlocks is the caller's. The ref is the\n * `<input>`.\n *\n * ```tsx\n * const [ok, setOk] = useState(false);\n * <TypedConfirmField target={t(\"privacy.enroll_ack_word\")} match=\"caseless\" onMatchedChange={setOk} />\n * {ok && <KeyDoorsForm … />}\n * ```\n */\nexport function TypedConfirmField({\n  ref,\n  target,\n  match = \"trim\",\n  value: valueProp,\n  defaultValue = \"\",\n  onValueChange,\n  onMatchedChange,\n  onChange,\n  label: labelProp,\n  placeholder: placeholderProp,\n  busy,\n  readOnly,\n  labels: labelsProp,\n  id,\n  className,\n  ...rest\n}: TypedConfirmFieldProps) {\n  const labels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS, labelsProp);\n  const [own, setOwn] = useState(defaultValue);\n  const value = valueProp ?? own;\n  const matched = typedMatches(value, target, match);\n  const generated = useId();\n  const fieldId = id ?? generated;\n  const label =\n    labelProp !== undefined ? labelProp : typeof labels.phrase === \"function\" ? labels.phrase(target) : labels.phrase;\n  const fromLabels =\n    labels.phrasePlaceholder === undefined\n      ? undefined\n      : typeof labels.phrasePlaceholder === \"function\"\n        ? labels.phrasePlaceholder(target)\n        : labels.phrasePlaceholder;\n  const placeholder = placeholderProp ?? fromLabels;\n\n  const fieldProps = {\n    ...rest,\n    ref,\n    id: fieldId,\n    value,\n    autoComplete: \"off\",\n    autoCapitalize: \"off\",\n    autoCorrect: \"off\",\n    spellCheck: false,\n    readOnly: Boolean(busy) || readOnly,\n    \"data-matched\": matched || undefined,\n    onChange: (e: ChangeEvent<HTMLInputElement>) => {\n      onChange?.(e);\n      const next = e.target.value;\n      if (valueProp === undefined) setOwn(next);\n      onValueChange?.(next);\n      const nextMatched = typedMatches(next, target, match);\n      if (nextMatched !== matched) onMatchedChange?.(nextMatched);\n    },\n  };\n\n  if (placeholder) {\n    return (\n      // A static label above, so the placeholder has the empty field to itself.\n      <div className={cn(\"space-y-1.5\", className)}>\n        <Label htmlFor={fieldId}>{label}</Label>\n        <Input {...fieldProps} placeholder={placeholder} />\n      </div>\n    );\n  }\n  return <Input {...fieldProps} label={label} className={className} />;\n}\n\n/**\n * Every string the tile renders — the `dangerConfirm` namespace of\n * `<UiKitProvider labels>`, overridable per instance through `labels`. The arm and\n * confirm buttons are usually worded per action (\"Delete budget\"), which is what the\n * `armLabel` / `confirmLabel` props are for; these are the fallbacks.\n */\nexport interface DangerConfirmLabels {\n  /** The button that arms the tile. */\n  arm: string;\n  /** The button that runs the action once the guards are satisfied. */\n  confirm: string;\n  cancel: string;\n  /** The warning above the fields, when no `prompt` is given. */\n  prompt: string;\n  /** Label of the password field (`requirePassword`). */\n  password: string;\n  /** Label of the type-to-confirm field. A FUNCTION of the phrase by default, like\n   *  every message that carries a value: where the phrase sits in the sentence moves\n   *  with the language. A plain STRING is taken as the finished label — for an app\n   *  whose catalogue already words it (\"Type DELETE to confirm\") and would otherwise\n   *  wrap it as `() => label`. */\n  phrase: string | ((phrase: string) => string);\n  /** Placeholder of the type-to-confirm field — a string, or a function of the\n   *  phrase (`(p) => p` echoes it). Optional and unset by default: the field keeps its\n   *  floating label, as before. Given, the label moves ABOVE the field (a floating\n   *  label occupies the empty field, which is exactly where a placeholder shows) and\n   *  the placeholder fills the field. An empty string means none. */\n  phrasePlaceholder?: string | ((phrase: string) => string);\n  /** 0.22: the checkbox `requireAcknowledge={true}` shows — \"I have read what this does\n   *  and want to continue\" (keksdose's `admin.users.confirm_ack`). */\n  acknowledge: string;\n  /**\n   * 0.23: why the armed confirm is held while the typed phrase does not match yet — in\n   * the confirm's tooltip and its description (keksdose G4a). A FUNCTION of the phrase\n   * by default (\"Type “DELETE” to confirm\"), or a finished STRING, as `phrase`.\n   */\n  needsPhrase: string | ((phrase: string) => string);\n  /** 0.23: why the armed confirm is held while the `requireAcknowledge` box is unticked\n   *  — \"Tick the box to confirm\". */\n  needsAcknowledge: string;\n  /** 0.23: why the armed confirm is held while the `requirePassword` field is empty —\n   *  \"Enter your password to confirm\". */\n  needsPassword: string;\n}\n\n// Defined in ./danger-confirm-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_DANGER_CONFIRM_LABELS };\n\n/**\n * What the guards were answered with — the second argument of\n * {@link DangerConfirmProps.onConfirm} (0.23, keksdose G4b). A key is there only when its\n * guard was asked for, so the object can go into a request body as it is.\n */\nexport interface DangerConfirmValues {\n  /**\n   * The text typed into the `phrase` field — as the match rule compared it: trimmed\n   * under `phraseMatch` `\"trim\"` and `\"caseless\"` (the spaces a phone keyboard adds are\n   * not part of it), exactly as typed under `\"exact\"`. The case is the user's, even\n   * under `\"caseless\"`: a server that re-checks applies its own rule to it. Absent\n   * without a `phrase`.\n   */\n  typed?: string;\n  /** The entered password — the same value as the first argument. Absent without\n   *  `requirePassword`. */\n  password?: string;\n  /** `true` when the `requireAcknowledge` box was shown — it was ticked, since the\n   *  confirm is held until it is. Absent without one. */\n  acknowledged?: true;\n}\n\n/**\n * One line of {@link DangerConfirmProps.consequences}: what the action will do. A plain\n * string, or this, for a key of its own and the `severe` mark.\n */\nexport interface DangerConsequence {\n  /** React key — keksdose keys its lines by what they say (\"api_tokens\", \"only_door\").\n   *  Default: the text when it is a string, else the position. */\n  key?: string;\n  text: ReactNode;\n  /** \"There is no way back\" — painted in the danger colour rather than the list's\n   *  muted one. keksdose reserves it for the one line that loses something for good. */\n  severe?: boolean;\n}\n\nexport interface DangerConfirmProps extends Omit<ComponentPropsWithRef<\"div\">, \"onChange\"> {\n  /**\n   * Runs the action, with the entered password when `requirePassword` is on.\n   *\n   * Return a promise and the tile manages itself: busy until it settles, disarmed\n   * (fields wiped) when it resolves, still armed when it rejects — so the user can\n   * correct a wrong password and retry. The rejection is not swallowed for you to\n   * miss: handle it (and show why) in the caller, as with any mutation.\n   *\n   * 0.23: the second argument is what every guard was answered with — the typed phrase,\n   * the password, the tick ({@link DangerConfirmValues}). keksdose G4b: its admin\n   * actions send the address the admin TYPED, and the server re-checks it against the\n   * account (`assert_confirmed`), so a client that put the wrong row's id in the request\n   * is refused rather than obeyed; the tile kept the text to itself.\n   *\n   *     onConfirm={(_password, { typed }) =>\n   *       reset.mutateAsync({ id, confirm: { acknowledged: true, confirm_email: typed ?? null } })}\n   *\n   * A second argument rather than one object in place of the password: every\n   * `(password) => …` and `() => …` handler, and a `mutation.mutate` passed as it is,\n   * keeps working unchanged, and a handler that needs one guard's answer names it.\n   */\n  onConfirm: (password: string | undefined, values: DangerConfirmValues) => void | Promise<unknown>;\n  /** Show a password field; confirm is held until it is filled. */\n  requirePassword?: boolean;\n  /**\n   * Show an \"I understand\" checkbox; confirm is held until it is ticked\n   * (keksdose K7). `true` words it with `labels.acknowledge`; any other node IS the\n   * checkbox's label (\"I understand Anna will be signed out everywhere\").\n   *\n   * The guard for an action whose risk is MIS-TARGETING less than carelessness:\n   * keksdose's admin password reset asks for a typed address when the account has an\n   * encrypted door to lose, and a tick otherwise (`UserActionConfirm`), and its plan\n   * editor asks for the tick alone (`UserPlanEditor`). Both were hand-built beside this\n   * tile because it had no tick. It combines with `phrase` and `requirePassword`: every\n   * guard given must be satisfied.\n   */\n  requireAcknowledge?: ReactNode;\n  /**\n   * What the action will do, said before it happens — a list under the prompt, shown\n   * once armed (keksdose K7, `UserActionConfirm`'s consequences). Strings, or\n   * {@link DangerConsequence}s for a `severe` line in the danger colour.\n   *\n   * Derive them from the row's own facts rather than reciting the worst case: an admin\n   * who reads the same paragraph on every row stops reading it (keksdose dev#488).\n   */\n  consequences?: readonly (string | DangerConsequence)[];\n  /** Show a \"type <phrase> to confirm\" field; confirm is held until the field matches\n   *  (case-sensitive; surrounding spaces ignored unless `phraseMatch=\"exact\"`). */\n  phrase?: string;\n  /**\n   * How the typed text is compared with `phrase`. `\"trim\"` (default) ignores spaces\n   * around it — a phone keyboard's autocomplete likes to add one. `\"exact\"` compares\n   * character for character, spaces included, for an app whose contract is \"type\n   * exactly this\". `\"caseless\"` (0.18) also ignores case — for a phrase that is an\n   * e-mail address (keksdose's \"type the user's address\" admin rule). See\n   * {@link TypedMatch}.\n   */\n  phraseMatch?: TypedMatch;\n  /** The warning above the fields. Defaults to `labels.prompt`. */\n  prompt?: ReactNode;\n  /** `\"danger\"` (default) for what cannot be undone; `\"warning\"` for what can, at a\n   *  cost (loading demo data over your own). Colours the prompt, and picks the arm\n   *  button's variant and — unless {@link DangerConfirmProps.confirmVariant} is\n   *  given — the confirm's. */\n  tone?: \"danger\" | \"warning\";\n  /**\n   * The confirm button's variant, apart from `tone` (0.24, keksdose). Default: what\n   * `tone` picks, as before — `\"danger\"` for `\"danger\"`, `\"default\"` for `\"warning\"`.\n   *\n   * `tone` says how bad the outcome is; this says how loud the last press is, and the two\n   * need not agree. keksdose's `UserActionConfirm` (an admin resets somebody else's\n   * password) asks an AMBER question — what it guards against is mis-targeting, not data\n   * loss, so the danger colour stays its one `severe` consequence's — and ends in a RED\n   * Go, as its hand-built panel did before it moved onto this tile in 0.23; with only\n   * `tone`, the amber question made Go the neutral `default` fill. `tone=\"warning\"\n   * confirmVariant=\"danger\"` is that panel again.\n   */\n  confirmVariant?: ButtonVariant;\n  /**\n   * Hold the armed confirm for a reason of the CALLER's own (0.24, keksdose) — the\n   * tile's counterpart of FormActions' `submitDisabledReason`. While it has content the\n   * confirm is held exactly as by the built-in guards: `aria-disabled` but focusable,\n   * the reason in the kit {@link Tooltip} and its description, a press — or Enter in a\n   * field — does nothing. Nothing else changes: the arm button stays usable, and no\n   * line is printed under the buttons.\n   *\n   * keksdose's `UserPlanEditor` (\"move this account onto another plan\") must not confirm\n   * the plan the account already holds — the request would only write FREE → FREE into\n   * the audit trail. With no guard of its own to give, it passed \"Pick a different plan\"\n   * as `lockedReason`, which is a LOCK: documented as \"the action is not available\",\n   * spelled out under the buttons as well as in the tooltip, and meant for a write the\n   * user cannot make land. A guard the user lifts by changing a field is this prop.\n   *\n   * Which reason the held confirm names: a write lock's first (`lockedReason`, `commit`\n   * — nothing in the tile lifts it), then this one, then the built-in guards in the\n   * order they are drawn (the tick, the phrase, the password). This one before the\n   * built-ins because it is usually about a field in\n   * {@link DangerConfirmProps.children}, which is drawn ABOVE them — the rule since 0.23\n   * is \"the first open guard in the order the user meets it\" — and because it is about\n   * WHAT is being confirmed (which plan), which has to be settled before acknowledging\n   * it means anything. It is also the order keksdose's plan editor had, its\n   * `lockedReason` winning over the tick.\n   */\n  confirmDisabledReason?: ReactNode;\n  /**\n   * Fields of the caller's own, drawn INSIDE the armed tile (0.24, keksdose): after the\n   * prompt and the consequences, before the tick, the typed phrase and the password —\n   * the order is \"what this does, what to do it with, then prove you mean it\". Nothing\n   * is drawn for them while the tile is disarmed, and nothing at all without them, so a\n   * tile without children is laid out exactly as before.\n   *\n   * keksdose's `UserPlanEditor` asks WHICH plan before it asks for the tick; with no\n   * place inside the tile for the picker, the `Select` sat above it, and the tile's\n   * prompt — the panel's title by rights — became the \"FREE → PRO\" line under the\n   * picker. With the picker here, the prompt is the title again.\n   *\n   * The fields are the caller's: their values are not wiped on disarm (an uncontrolled\n   * field starts over anyway — the slot unmounts), not passed to `onConfirm`, and a\n   * guard on them is {@link DangerConfirmProps.confirmDisabledReason}. Arming moves\n   * focus to their first form field (an input, a select, a combobox, a radio…), else to\n   * the tile's own first field as before; Tab then goes on through the tick, the phrase\n   * and the password to Cancel and the confirm. They sit inside the tile's `<form>`:\n   * Enter in a text field confirms once every guard allows, and a {@link Button} among\n   * them needs `type=\"button\"` — without one it SUBMITS the form, as a native button\n   * does.\n   */\n  children?: ReactNode;\n  /** Visible text of the arm button; defaults to `labels.arm`. */\n  armLabel?: ReactNode;\n  /** Visible text of the confirm button; defaults to `labels.confirm`. */\n  confirmLabel?: ReactNode;\n  /**\n   * The action is running: confirm shows a spinner and nothing can be pressed — Cancel\n   * included. For a caller that tracks the mutation itself (a `useMutation`'s\n   * `isPending`); a promise returned from `onConfirm` does the same on its own.\n   *\n   * Cancel stays disabled ON PURPOSE, unlike FormActions' (keksdose asked in 0.24 why the\n   * two differ). Once the request has left, nothing on the client can call it back —\n   * not even an `AbortSignal`, which only stops the waiting, not the server — so a usable\n   * Cancel could only collapse the tile while the action went on: \"Cancel\" pressed, and\n   * the account reset anyway. Every way of settling what comes back is wrong somewhere: a\n   * resolve after the Cancel did what the user called off; a reject finds the fields\n   * wiped (a collapsed tile holds no password), so the 0.23 \"stay armed and retry\" is\n   * gone; and re-arming while the first request runs is either a busy tile with empty\n   * fields or — if the busy state went with the Cancel — a second destructive request\n   * beside the first. FormActions' Cancel leaves an editor whose save is the user's own\n   * edit landing, and a form can be edited again; the tile's action is the one that\n   * cannot be undone, so it says nothing it cannot keep and waits — the wait is one\n   * request long.\n   *\n   * When the action settles still armed (it failed) and the press on the confirm had\n   * dropped the focus — a natively disabled button loses it — focus comes back to the\n   * confirm, so a keyboard user can retry or Shift+Tab to the field to correct (0.24).\n   */\n  busy?: boolean;\n  /**\n   * Why the last confirm failed (\"Wrong password\"), in the tile beside the field it is\n   * about rather than in a toast away from it (keksdose audit follow-up, 2026-11-01:\n   * PasswordDangerCard toasted its `password_incorrect` for want of this). The app sets\n   * it from the failure and words it — a 400 is a wrong password, a 500 is not.\n   *\n   * Drawn as the field's own `error`, as {@link ReauthDialog} draws its own: under the\n   * password with `requirePassword`, else under the typed phrase — the field painted,\n   * `aria-invalid`, the message its `aria-describedby` — and in a tile with neither, as\n   * a line above the buttons. Announced as it appears (`role=\"alert\"`): it arrives\n   * after the press, with focus on the confirm, where a field's description alone is\n   * not heard. Passed at all — even as `undefined` — the field keeps its box, as with\n   * Input's `error`, so the message going away does not rebuild the field mid-edit.\n   *\n   * Hidden while the next attempt runs, once the user edits the tick, the phrase or the\n   * password (it is about what was submitted), and when the tile arms or disarms, until\n   * the next confirm; shown again when a confirm fails with it still set. So a\n   * mutation's error can be handed over as it is:\n   * `error={mut.error ? message(mut.error) : undefined}`.\n   */\n  error?: ReactNode;\n  /** The arm button is disabled. */\n  disabled?: boolean;\n  /**\n   * Why the action is not available — a read-only demo, a write lock, a missing\n   * permission. Disables the arm button like `disabled`, and SAYS so: the sentence is\n   * shown under the button and attached to it with `aria-describedby`, and the button\n   * stays focusable (`aria-disabled`) so a keyboard user can land on it and hear why.\n   *\n   * On the ARM button rather than the confirm: arming asks for a password, and asking\n   * for a password for a write that can never land is the worse of the two. A tile that\n   * is ALREADY armed when the reason arrives (controlled `armed`, or a lock that landed\n   * while it was open) keeps its fields but its confirm takes the reason the same way\n   * — focusable, `aria-disabled`, the reason in its tooltip — and Enter does nothing.\n   */\n  lockedReason?: ReactNode;\n  /**\n   * This tile COMMITS — the 0.18 write-lock opt-in that {@link Button} has (keksdose\n   * K3). Under a locked {@link WriteLockProvider} the lock's reason becomes\n   * `lockedReason` (and wins over one of the tile's own), so a page that mounts the\n   * provider no longer threads `lockedReason={lock.locked ? lock.reason : undefined}`\n   * into every tile. No provider, or an unlocked one: no effect.\n   */\n  commit?: CommitScope;\n  /** Controlled armed state. The parent can then collapse the tile from a mutation's\n   *  own `onSuccess` without returning a promise. */\n  armed?: boolean;\n  /** Called with the next armed state — on arm, cancel, and a resolved `onConfirm`. */\n  onArmedChange?: (armed: boolean) => void;\n  /** User-facing strings; see {@link DangerConfirmLabels}. */\n  labels?: LabelOverride<DangerConfirmLabels>;\n}\n\n/** What counts as a FIELD among the caller's `children` — what arming focuses. Not\n *  any tabbable element: a \"see the plans\" link or a disclosure button before the\n *  picker is not where the user starts. `[tabindex=\"-1\"]` is a roving radio group's\n *  unselected option; the selected one (`0`) is the group's stop. */\nconst SLOT_FIELD = [\n  'input:not([type=\"hidden\"])',\n  \"select\",\n  \"textarea\",\n  ...[\"combobox\", \"listbox\", \"radio\", \"checkbox\", \"switch\", \"slider\", \"spinbutton\", \"textbox\"].map(\n    (role) => `[role=\"${role}\"]`,\n  ),\n]\n  .map((selector) => `${selector}:not(:disabled):not([tabindex=\"-1\"]):not([aria-hidden=\"true\"])`)\n  .join(\", \");\n\n/** The first field among the caller's `children`, skipping a native radio that is not\n *  the checked one of its group (Tab lands on the checked one). */\nfunction firstSlotField(slot: HTMLElement | null): HTMLElement | null {\n  if (!slot) return null;\n  for (const el of slot.querySelectorAll<HTMLElement>(SLOT_FIELD)) {\n    if (el.closest(\"[hidden], [inert]\")) continue;\n    if (el instanceof HTMLInputElement && el.type === \"radio\" && !el.checked && el.name) {\n      const group = el.form?.elements.namedItem(el.name);\n      const checked =\n        group instanceof RadioNodeList && Array.from(group).some((r) => r instanceof HTMLInputElement && r.checked);\n      if (checked) continue;\n    }\n    return el;\n  }\n  return null;\n}\n\n/**\n * An \"arm → confirm\" tile for destructive actions: one button, which expands into a\n * warning, an optional list of consequences, optional fields of the caller's own\n * (`children`, 0.24), an optional \"I understand\" tick, an optional type-to-confirm\n * field, an optional password field and a confirm that is held until every guard is\n * satisfied — the built-in ones, and the caller's `confirmDisabledReason` (0.24).\n *\n * A held confirm SAYS which guard is still open (0.23, keksdose G4a): it is\n * `aria-disabled` rather than `disabled` — still focusable, so a keyboard user can land\n * on it — with the reason in the kit {@link Tooltip} and its description (\"Type\n * “DELETE” to confirm\", \"Tick the box to confirm\", \"Enter your password to confirm\";\n * `labels.needs*`), the first open guard in the order they are drawn. FormActions'\n * `submitDisabledReason` does the same for a form's Save. Pressing it, or Enter in a\n * field, does nothing. A lock's reason wins over a guard's, the caller's guard over the\n * built-in ones; while the action runs the confirm is plainly disabled, its spinner\n * saying why — and so is Cancel, which cannot call back a request that has left (see\n * `busy`).\n *\n * Keksdose hand-rolled it three times (load demo data, wipe everything, reset a\n * budget) and then as `shared/components/danger-confirm.tsx`; the only app-specific\n * part was its write-lock hook, which is `lockedReason` here.\n *\n * The fields are a `<form>`, so Enter confirms once the guards allow it. They are\n * wiped every time the tile disarms — a password must not sit in a collapsed tile.\n * Arming moves focus to the first field (or Cancel, when there is none — never to the\n * destructive button itself), and disarming moves it back to the arm button, so the\n * keyboard user is never left on an element that just vanished.\n */\nexport function DangerConfirm(props: DangerConfirmProps) {\n  const {\n    onConfirm,\n    requirePassword,\n    requireAcknowledge,\n    consequences,\n    phrase,\n    phraseMatch = \"trim\",\n    prompt,\n    tone = \"danger\",\n    confirmVariant,\n    confirmDisabledReason,\n    children,\n    armLabel,\n    confirmLabel,\n    busy: busyProp,\n    error,\n    disabled,\n    lockedReason: ownLockedReason,\n    commit,\n    armed: armedProp,\n    onArmedChange,\n    labels: labelsProp,\n    className,\n    ...rest\n  } = props;\n  const labels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS, labelsProp);\n  const lockedReason = useCommitReason(commit, ownLockedReason);\n  const [armedState, setArmedState] = useState(false);\n  const armed = armedProp ?? armedState;\n  const [password, setPassword] = useState(\"\");\n  const [typed, setTyped] = useState(\"\");\n  const [acknowledged, setAcknowledged] = useState(false);\n  // The `error` describes what was submitted: an edit, an arm or a disarm leaves it\n  // describing nothing on screen. Cleared by the next confirm — ReauthDialog's `edited`.\n  const [errorStale, setErrorStale] = useState(false);\n  const { pending, run } = usePromisePending();\n  const busy = Boolean(busyProp) || pending;\n  // `readOnly` rather than `disabled` on the fields while busy: disabling the field\n  // that has focus (Enter was pressed in it) drops focus to <body>.\n  const promptId = useId();\n  const consequencesId = useId();\n  const reasonId = useId();\n\n  // The buttons focus is moved to are found by id.\n  const armId = useId();\n  const cancelId = useId();\n  const confirmId = useId();\n  const firstFieldRef = useRef<HTMLInputElement>(null);\n  // The caller's fields (`children`), searched for their first form field on arm.\n  const slotRef = useRef<HTMLDivElement>(null);\n  // Focus moves only after a transition — never on mount, so a tile that renders armed\n  // (controlled) does not take the page's focus merely by existing.\n  const moveFocus = useRef(false);\n  // A confirm from this tile is under way — see the focus return after a failure below.\n  const confirmed = useRef(false);\n\n  // A disarm from anywhere (cancel, a resolved confirm, the parent) wipes the fields.\n  // During render, like NumberField's draft, so no frame shows a collapsed tile that\n  // still holds a password.\n  const [wasArmed, setWasArmed] = useState(armed);\n  if (wasArmed !== armed) {\n    setWasArmed(armed);\n    // An `error` still passed is about the attempt before: not shown until a confirm.\n    setErrorStale(true);\n    if (!armed) {\n      setPassword(\"\");\n      setTyped(\"\");\n      setAcknowledged(false);\n    }\n  }\n\n  const prevArmed = useRef(armed);\n  useEffect(() => {\n    const changed = prevArmed.current !== armed;\n    prevArmed.current = armed;\n    const byUser = moveFocus.current;\n    moveFocus.current = false;\n    if (!changed) return;\n    if (armed) {\n      if (byUser) {\n        // The caller's fields come first on the page, so first in focus too.\n        (firstSlotField(slotRef.current) ?? firstFieldRef.current ?? document.getElementById(cancelId))?.focus();\n      }\n      return;\n    }\n    confirmed.current = false;\n    // A controlled parent collapsing the tile from its own `onSuccess` did not go\n    // through `setArmed`; if focus went down with the form, bring it back too.\n    const lost = document.activeElement === null || document.activeElement === document.body;\n    if (byUser || lost) document.getElementById(armId)?.focus();\n  }, [armed, armId, cancelId]);\n\n  // The action settled and the tile is still armed — it failed, and the user retries.\n  // The confirm was natively disabled while it ran, and a focused button that turns\n  // disabled drops the focus to <body>: bring it back to the button that was pressed.\n  // Only after a confirm from THIS tile (`confirmed`), so a `busy` that comes and goes\n  // on its own never pulls the page's focus in. (A resolve disarms, and the effect\n  // above takes the focus to the arm button.)\n  const wasBusy = useRef(busy);\n  useEffect(() => {\n    const settled = wasBusy.current && !busy;\n    wasBusy.current = busy;\n    if (!settled) return;\n    const ours = confirmed.current;\n    confirmed.current = false;\n    if (!ours || !armed) return;\n    if (document.activeElement === null || document.activeElement === document.body) {\n      document.getElementById(confirmId)?.focus();\n    }\n  }, [busy, armed, confirmId]);\n\n  const setArmed = (next: boolean) => {\n    moveFocus.current = true;\n    if (armedProp === undefined) setArmedState(next);\n    onArmedChange?.(next);\n  };\n\n  const locked = hasContent(lockedReason);\n  // `true` words the tick with the namespace; any other node is its label; `false`,\n  // `null` and `\"\"` are no tick at all.\n  const acknowledgeLabel: ReactNode =\n    requireAcknowledge === true ? labels.acknowledge : hasContent(requireAcknowledge) ? requireAcknowledge : null;\n  const asksAcknowledge = acknowledgeLabel !== null;\n  const passwordOk = !requirePassword || password !== \"\";\n  const phraseOk = phrase === undefined || typedMatches(typed, phrase, phraseMatch);\n  const acknowledgeOk = !asksAcknowledge || acknowledged;\n  const callerHeld = hasContent(confirmDisabledReason);\n  // `{cond && <Select />}` and `[null, false]` are no fields: no wrapper, no gap.\n  const hasFields = Children.toArray(children).some(hasContent);\n  const canConfirm = passwordOk && phraseOk && acknowledgeOk && !callerHeld && !busy;\n  // The first guard still open, in the order the fields are drawn — the one the user\n  // meets next, so the sentence points at it.\n  const guardReason: string | undefined = !acknowledgeOk\n    ? labels.needsAcknowledge\n    : !phraseOk\n      ? typeof labels.needsPhrase === \"function\"\n        ? labels.needsPhrase(phrase ?? \"\")\n        : labels.needsPhrase\n      : !passwordOk\n        ? labels.needsPassword\n        : undefined;\n  // The lock first (no guard can lift it); none while busy, when the guards were met and\n  // the spinner is the state; then the caller's guard — about the fields drawn above the\n  // built-in ones, and about WHAT is confirmed — then the first built-in guard still open.\n  const confirmReason: ReactNode = locked\n    ? lockedReason\n    : busy\n      ? undefined\n      : callerHeld\n        ? confirmDisabledReason\n        : guardReason;\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    // `locked` too: Enter in a field submits the form without the button's say (and\n    // `canConfirm` holds the caller's guard the same way).\n    if (!canConfirm || locked) return;\n    const values: DangerConfirmValues = {\n      ...(phrase !== undefined && { typed: phraseMatch === \"exact\" ? typed : typed.trim() }),\n      ...(requirePassword && { password }),\n      ...(asksAcknowledge && { acknowledged: true as const }),\n    };\n    confirmed.current = true;\n    setErrorStale(false);\n    // Disarms when it resolves; a rejection leaves it armed, fields kept: the caller\n    // shows why, the user retries.\n    run(onConfirm(values.password, values), () => setArmed(false));\n  };\n\n  // The failure's message, under the field it is about: the password, else the phrase,\n  // else (a tile with neither) a line of its own. Not while the next attempt runs.\n  const shownError = errorStale || busy ? undefined : error;\n  const errorAlert = hasContent(shownError) ? <span role=\"alert\">{shownError}</span> : undefined;\n  const errorOn = requirePassword ? \"password\" : phrase !== undefined ? \"phrase\" : \"line\";\n  // Passed at all, the carrying field keeps its box (Input's `error` rule): only then.\n  const fieldError = (field: \"password\" | \"phrase\") =>\n    \"error\" in props && errorOn === field ? { error: errorAlert } : {};\n  const edited = () => setErrorStale(true);\n\n  // The first field takes focus on arm: the tick, then the phrase, then the password —\n  // the order they are drawn in.\n  const firstField = asksAcknowledge ? \"acknowledge\" : phrase !== undefined ? \"phrase\" : \"password\";\n  const lines = (consequences ?? []).map((item, index) =>\n    typeof item === \"string\"\n      ? { key: item, text: item as ReactNode, severe: false }\n      : { key: item.key ?? String(index), text: item.text, severe: Boolean(item.severe) },\n  );\n\n  const toneText = tone === \"warning\" ? \"text-warning\" : \"text-danger\";\n\n  if (!armed) {\n    const arm = (\n      <Button\n        id={armId}\n        type=\"button\"\n        variant={tone === \"warning\" ? \"secondary\" : \"danger\"}\n        disabled={disabled}\n        aria-disabled={locked || undefined}\n        aria-describedby={locked ? reasonId : undefined}\n        onClick={() => {\n          if (!locked) setArmed(true);\n        }}\n        className=\"aria-disabled:cursor-not-allowed aria-disabled:opacity-50\"\n      >\n        {armLabel ?? labels.arm}\n      </Button>\n    );\n    return (\n      <div {...rest} className={cn(\"space-y-1\", className)}>\n        {locked ? (\n          // The reason on the button itself too, where the pointer that tried it is —\n          // the line below can sit out of view in a long settings card. Portalled, so\n          // a card that scrolls neither clips it nor grows by it.\n          //\n          // The button in a FRAGMENT on purpose: Tooltip clones an element child to\n          // add the bubble to its `aria-describedby`, and the button is already\n          // described by the visible line below — the same sentence twice, read out\n          // on every focus. A fragment is left as it is, so the bubble stays visual.\n          <Tooltip label={lockedReason} portal>\n            <>{arm}</>\n          </Tooltip>\n        ) : (\n          arm\n        )}\n        {locked && (\n          <p id={reasonId} className=\"text-xs text-muted\">\n            {lockedReason}\n          </p>\n        )}\n      </div>\n    );\n  }\n\n  return (\n    <div {...rest} className={cn(\"space-y-2\", className)}>\n      <form\n        className=\"space-y-2\"\n        aria-describedby={lines.length > 0 ? `${promptId} ${consequencesId}` : promptId}\n        aria-busy={busy || undefined}\n        onSubmit={submit}\n        noValidate\n      >\n        <p id={promptId} className={cn(\"text-xs font-medium\", toneText)}>\n          {prompt ?? labels.prompt}\n        </p>\n        {lines.length > 0 && (\n          <ul id={consequencesId} className=\"list-disc space-y-1 ps-5 text-xs text-secondary\">\n            {lines.map((line) => (\n              <li key={line.key} className={line.severe ? \"text-danger\" : undefined}>\n                {line.text}\n              </li>\n            ))}\n          </ul>\n        )}\n        {/* The caller's fields: after what the action does, before the proof that it is\n            meant. No wrapper without them — a 0.23 tile's markup is unchanged. */}\n        {hasFields && (\n          <div ref={slotRef} className=\"space-y-2\">\n            {children}\n          </div>\n        )}\n        {asksAcknowledge && (\n          <Checkbox\n            ref={firstField === \"acknowledge\" ? firstFieldRef : undefined}\n            label={acknowledgeLabel}\n            checked={acknowledged}\n            // Not `disabled` while busy, for the same reason the fields are readOnly:\n            // the box may hold the focus. A change while busy is simply not taken.\n            onCheckedChange={(next) => {\n              if (busy) return;\n              setAcknowledged(next);\n              edited();\n            }}\n          />\n        )}\n        {phrase !== undefined && (\n          <TypedConfirmField\n            ref={firstField === \"phrase\" ? firstFieldRef : undefined}\n            target={phrase}\n            match={phraseMatch}\n            value={typed}\n            onValueChange={(next) => {\n              setTyped(next);\n              edited();\n            }}\n            busy={busy}\n            // Already resolved through this tile's own `labels` prop; handed on so a\n            // per-instance phrase wording reaches the field.\n            labels={{ phrase: labels.phrase, phrasePlaceholder: labels.phrasePlaceholder }}\n            {...fieldError(\"phrase\")}\n          />\n        )}\n        {requirePassword && (\n          <CurrentPasswordInput\n            ref={firstField === \"password\" ? firstFieldRef : undefined}\n            label={labels.password}\n            value={password}\n            busy={busy}\n            onValueChange={(next) => {\n              setPassword(next);\n              edited();\n            }}\n            {...fieldError(\"password\")}\n          />\n        )}\n        {errorOn === \"line\" && errorAlert !== undefined && (\n          <p className={cn(FIELD_ERROR_CLASS, \"mt-0\")}>{errorAlert}</p>\n        )}\n        <div className=\"flex flex-wrap gap-2\">\n          <Button id={cancelId} type=\"button\" variant=\"ghost\" disabled={busy} onClick={() => setArmed(false)}>\n            {labels.cancel}\n          </Button>\n          <Button\n            id={confirmId}\n            type=\"submit\"\n            variant={confirmVariant ?? (tone === \"warning\" ? \"default\" : \"danger\")}\n            disabled={!canConfirm}\n            // Held by a guard (the caller's or a built-in one), or armed and then locked\n            // (or rendered armed under a lock): the confirm says why the way Button\n            // does — focusable, `aria-disabled`, the reason in its tooltip and\n            // description, a press swallowed (the submit with it) — and the fields stay\n            // as typed. Only busy is the native `disabled`.\n            disabledReason={confirmReason}\n            aria-busy={busy || undefined}\n          >\n            {busy && <Spinner label={null} className=\"h-4 w-4\" />}\n            {confirmLabel ?? labels.confirm}\n          </Button>\n        </div>\n        {locked && <p className=\"text-xs text-muted\">{lockedReason}</p>}\n      </form>\n    </div>\n  );\n}\n"],"mappings":";AAmJI,SAqtBQ,UArtBR,KA+IE,YA/IF;AAnJJ,SAAS,UAAU,aAAa,WAAW,OAAO,QAAQ,gBAAgB;AAE1E,SAAS,UAAU;AACnB,SAAS,kBAAkB;AAC3B,SAAS,oBAAwC;AACjD,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,aAAa;AACtB,SAAS,yBAAyB;AAClC,SAAS,eAAe;AAGxB,SAAS,gBAAgB;AACzB,SAAS,eAAe;AACxB,SAAS,uBAAyC;AAClD,SAAS,qCAAqC;AAoBvC,SAAS,aAAa,OAAe,QAAgB,OAAmB,QAAiB;AAC9F,MAAI,SAAS,QAAS,QAAO,UAAU;AACvC,MAAI,SAAS,OAAQ,QAAO,MAAM,KAAK,MAAM;AAG7C,SAAO,MAAM,KAAK,EAAE,YAAY,MAAM,OAAO,KAAK,EAAE,YAAY;AAClE;AAWO,SAAS,oBAAoB;AAClC,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AACL,QAAM,MAAM,YAAY,CAAC,QAAiB,eAAoC;AAC5E,QAAI,CAAC,UAAU,OAAQ,OAA4B,SAAS,WAAY,QAAO;AAC/E,eAAW,IAAI;AACf,IAAC,OAA4B;AAAA,MAC3B,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,mBAAW,KAAK;AAChB,mBAAW;AAAA,MACb;AAAA,MACA,MAAM;AACJ,YAAI,QAAQ,QAAS,YAAW,KAAK;AAAA,MACvC;AAAA,IACF;AACA,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AACL,SAAO,EAAE,SAAS,IAAI;AACxB;AA0DO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,GAAG;AACL,GAA8B;AAC5B,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AACtF,QAAM,iBAAiB,KAAK,YAAY,MAAM,UAAa,KAAK,iBAAiB,MAAM;AACvF,SACE;AAAA,IAAC;AAAA;AAAA,MAGE,GAAG;AAAA,MAGJ,MAAK;AAAA,MACL,cAAa;AAAA,MACb,OACE,UAAU,SAAa,iBAAiB,SAAY,OAAO,WAAY,WAAW,KAAK,IAAI,QAAQ;AAAA,MAErG,UAAU,QAAQ,IAAI,KAAK;AAAA,MAC3B,UAAU,CAAC,MAAM;AACf,mBAAW,CAAC;AACZ,wBAAgB,EAAE,OAAO,KAAK;AAAA,MAChC;AAAA;AAAA,EACF;AAEJ;AAmEO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AACtF,QAAM,CAAC,KAAK,MAAM,IAAI,SAAS,YAAY;AAC3C,QAAM,QAAQ,aAAa;AAC3B,QAAM,UAAU,aAAa,OAAO,QAAQ,KAAK;AACjD,QAAM,YAAY,MAAM;AACxB,QAAM,UAAU,MAAM;AACtB,QAAM,QACJ,cAAc,SAAY,YAAY,OAAO,OAAO,WAAW,aAAa,OAAO,OAAO,MAAM,IAAI,OAAO;AAC7G,QAAM,aACJ,OAAO,sBAAsB,SACzB,SACA,OAAO,OAAO,sBAAsB,aAClC,OAAO,kBAAkB,MAAM,IAC/B,OAAO;AACf,QAAM,cAAc,mBAAmB;AAEvC,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH;AAAA,IACA,IAAI;AAAA,IACJ;AAAA,IACA,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,UAAU,QAAQ,IAAI,KAAK;AAAA,IAC3B,gBAAgB,WAAW;AAAA,IAC3B,UAAU,CAAC,MAAqC;AAC9C,iBAAW,CAAC;AACZ,YAAM,OAAO,EAAE,OAAO;AACtB,UAAI,cAAc,OAAW,QAAO,IAAI;AACxC,sBAAgB,IAAI;AACpB,YAAM,cAAc,aAAa,MAAM,QAAQ,KAAK;AACpD,UAAI,gBAAgB,QAAS,mBAAkB,WAAW;AAAA,IAC5D;AAAA,EACF;AAEA,MAAI,aAAa;AACf;AAAA;AAAA,MAEE,qBAAC,SAAI,WAAW,GAAG,eAAe,SAAS,GACzC;AAAA,4BAAC,SAAM,SAAS,SAAU,iBAAM;AAAA,QAChC,oBAAC,SAAO,GAAG,YAAY,aAA0B;AAAA,SACnD;AAAA;AAAA,EAEJ;AACA,SAAO,oBAAC,SAAO,GAAG,YAAY,OAAc,WAAsB;AACpE;AA2SA,MAAM,aAAa;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA,GAAG,CAAC,YAAY,WAAW,SAAS,YAAY,UAAU,UAAU,cAAc,SAAS,EAAE;AAAA,IAC3F,CAAC,SAAS,UAAU,IAAI;AAAA,EAC1B;AACF,EACG,IAAI,CAAC,aAAa,GAAG,QAAQ,gEAAgE,EAC7F,KAAK,IAAI;AAIZ,SAAS,eAAe,MAA8C;AACpE,MAAI,CAAC,KAAM,QAAO;AAClB,aAAW,MAAM,KAAK,iBAA8B,UAAU,GAAG;AAC/D,QAAI,GAAG,QAAQ,mBAAmB,EAAG;AACrC,QAAI,cAAc,oBAAoB,GAAG,SAAS,WAAW,CAAC,GAAG,WAAW,GAAG,MAAM;AACnF,YAAM,QAAQ,GAAG,MAAM,SAAS,UAAU,GAAG,IAAI;AACjD,YAAM,UACJ,iBAAiB,iBAAiB,MAAM,KAAK,KAAK,EAAE,KAAK,CAAC,MAAM,aAAa,oBAAoB,EAAE,OAAO;AAC5G,UAAI,QAAS;AAAA,IACf;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AA8BO,SAAS,cAAc,OAA2B;AACvD,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,GAAG;AAAA,EACL,IAAI;AACJ,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AACtF,QAAM,eAAe,gBAAgB,QAAQ,eAAe;AAC5D,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,QAAQ,aAAa;AAC3B,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,cAAc,eAAe,IAAI,SAAS,KAAK;AAGtD,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,EAAE,SAAS,IAAI,IAAI,kBAAkB;AAC3C,QAAM,OAAO,QAAQ,QAAQ,KAAK;AAGlC,QAAM,WAAW,MAAM;AACvB,QAAM,iBAAiB,MAAM;AAC7B,QAAM,WAAW,MAAM;AAGvB,QAAM,QAAQ,MAAM;AACpB,QAAM,WAAW,MAAM;AACvB,QAAM,YAAY,MAAM;AACxB,QAAM,gBAAgB,OAAyB,IAAI;AAEnD,QAAM,UAAU,OAAuB,IAAI;AAG3C,QAAM,YAAY,OAAO,KAAK;AAE9B,QAAM,YAAY,OAAO,KAAK;AAK9B,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO;AACtB,gBAAY,KAAK;AAEjB,kBAAc,IAAI;AAClB,QAAI,CAAC,OAAO;AACV,kBAAY,EAAE;AACd,eAAS,EAAE;AACX,sBAAgB,KAAK;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,YAAY,OAAO,KAAK;AAC9B,YAAU,MAAM;AACd,UAAM,UAAU,UAAU,YAAY;AACtC,cAAU,UAAU;AACpB,UAAM,SAAS,UAAU;AACzB,cAAU,UAAU;AACpB,QAAI,CAAC,QAAS;AACd,QAAI,OAAO;AACT,UAAI,QAAQ;AAEV,SAAC,eAAe,QAAQ,OAAO,KAAK,cAAc,WAAW,SAAS,eAAe,QAAQ,IAAI,MAAM;AAAA,MACzG;AACA;AAAA,IACF;AACA,cAAU,UAAU;AAGpB,UAAM,OAAO,SAAS,kBAAkB,QAAQ,SAAS,kBAAkB,SAAS;AACpF,QAAI,UAAU,KAAM,UAAS,eAAe,KAAK,GAAG,MAAM;AAAA,EAC5D,GAAG,CAAC,OAAO,OAAO,QAAQ,CAAC;AAQ3B,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,UAAM,UAAU,QAAQ,WAAW,CAAC;AACpC,YAAQ,UAAU;AAClB,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,UAAU;AACvB,cAAU,UAAU;AACpB,QAAI,CAAC,QAAQ,CAAC,MAAO;AACrB,QAAI,SAAS,kBAAkB,QAAQ,SAAS,kBAAkB,SAAS,MAAM;AAC/E,eAAS,eAAe,SAAS,GAAG,MAAM;AAAA,IAC5C;AAAA,EACF,GAAG,CAAC,MAAM,OAAO,SAAS,CAAC;AAE3B,QAAM,WAAW,CAAC,SAAkB;AAClC,cAAU,UAAU;AACpB,QAAI,cAAc,OAAW,eAAc,IAAI;AAC/C,oBAAgB,IAAI;AAAA,EACtB;AAEA,QAAM,SAAS,WAAW,YAAY;AAGtC,QAAM,mBACJ,uBAAuB,OAAO,OAAO,cAAc,WAAW,kBAAkB,IAAI,qBAAqB;AAC3G,QAAM,kBAAkB,qBAAqB;AAC7C,QAAM,aAAa,CAAC,mBAAmB,aAAa;AACpD,QAAM,WAAW,WAAW,UAAa,aAAa,OAAO,QAAQ,WAAW;AAChF,QAAM,gBAAgB,CAAC,mBAAmB;AAC1C,QAAM,aAAa,WAAW,qBAAqB;AAEnD,QAAM,YAAY,SAAS,QAAQ,QAAQ,EAAE,KAAK,UAAU;AAC5D,QAAM,aAAa,cAAc,YAAY,iBAAiB,CAAC,cAAc,CAAC;AAG9E,QAAM,cAAkC,CAAC,gBACrC,OAAO,mBACP,CAAC,WACC,OAAO,OAAO,gBAAgB,aAC5B,OAAO,YAAY,UAAU,EAAE,IAC/B,OAAO,cACT,CAAC,aACC,OAAO,gBACP;AAIR,QAAM,gBAA2B,SAC7B,eACA,OACE,SACA,aACE,wBACA;AAER,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AAGjB,QAAI,CAAC,cAAc,OAAQ;AAC3B,UAAM,SAA8B;AAAA,MAClC,GAAI,WAAW,UAAa,EAAE,OAAO,gBAAgB,UAAU,QAAQ,MAAM,KAAK,EAAE;AAAA,MACpF,GAAI,mBAAmB,EAAE,SAAS;AAAA,MAClC,GAAI,mBAAmB,EAAE,cAAc,KAAc;AAAA,IACvD;AACA,cAAU,UAAU;AACpB,kBAAc,KAAK;AAGnB,QAAI,UAAU,OAAO,UAAU,MAAM,GAAG,MAAM,SAAS,KAAK,CAAC;AAAA,EAC/D;AAIA,QAAM,aAAa,cAAc,OAAO,SAAY;AACpD,QAAM,aAAa,WAAW,UAAU,IAAI,oBAAC,UAAK,MAAK,SAAS,sBAAW,IAAU;AACrF,QAAM,UAAU,kBAAkB,aAAa,WAAW,SAAY,WAAW;AAEjF,QAAM,aAAa,CAAC,UAClB,WAAW,SAAS,YAAY,QAAQ,EAAE,OAAO,WAAW,IAAI,CAAC;AACnE,QAAM,SAAS,MAAM,cAAc,IAAI;AAIvC,QAAM,aAAa,kBAAkB,gBAAgB,WAAW,SAAY,WAAW;AACvF,QAAM,SAAS,gBAAgB,CAAC,GAAG;AAAA,IAAI,CAAC,MAAM,UAC5C,OAAO,SAAS,WACZ,EAAE,KAAK,MAAM,MAAM,MAAmB,QAAQ,MAAM,IACpD,EAAE,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG,MAAM,KAAK,MAAM,QAAQ,QAAQ,KAAK,MAAM,EAAE;AAAA,EACtF;AAEA,QAAM,WAAW,SAAS,YAAY,iBAAiB;AAEvD,MAAI,CAAC,OAAO;AACV,UAAM,MACJ;AAAA,MAAC;AAAA;AAAA,QACC,IAAI;AAAA,QACJ,MAAK;AAAA,QACL,SAAS,SAAS,YAAY,cAAc;AAAA,QAC5C;AAAA,QACA,iBAAe,UAAU;AAAA,QACzB,oBAAkB,SAAS,WAAW;AAAA,QACtC,SAAS,MAAM;AACb,cAAI,CAAC,OAAQ,UAAS,IAAI;AAAA,QAC5B;AAAA,QACA,WAAU;AAAA,QAET,sBAAY,OAAO;AAAA;AAAA,IACtB;AAEF,WACE,qBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,aAAa,SAAS,GAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QASC,oBAAC,WAAQ,OAAO,cAAc,QAAM,MAClC,0CAAG,eAAI,GACT;AAAA,UAEA;AAAA,MAED,UACC,oBAAC,OAAE,IAAI,UAAU,WAAU,sBACxB,wBACH;AAAA,OAEJ;AAAA,EAEJ;AAEA,SACE,oBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,aAAa,SAAS,GACjD;AAAA,IAAC;AAAA;AAAA,MACC,WAAU;AAAA,MACV,oBAAkB,MAAM,SAAS,IAAI,GAAG,QAAQ,IAAI,cAAc,KAAK;AAAA,MACvE,aAAW,QAAQ;AAAA,MACnB,UAAU;AAAA,MACV,YAAU;AAAA,MAEV;AAAA,4BAAC,OAAE,IAAI,UAAU,WAAW,GAAG,uBAAuB,QAAQ,GAC3D,oBAAU,OAAO,QACpB;AAAA,QACC,MAAM,SAAS,KACd,oBAAC,QAAG,IAAI,gBAAgB,WAAU,mDAC/B,gBAAM,IAAI,CAAC,SACV,oBAAC,QAAkB,WAAW,KAAK,SAAS,gBAAgB,QACzD,eAAK,QADC,KAAK,GAEd,CACD,GACH;AAAA,QAID,aACC,oBAAC,SAAI,KAAK,SAAS,WAAU,aAC1B,UACH;AAAA,QAED,mBACC;AAAA,UAAC;AAAA;AAAA,YACC,KAAK,eAAe,gBAAgB,gBAAgB;AAAA,YACpD,OAAO;AAAA,YACP,SAAS;AAAA,YAGT,iBAAiB,CAAC,SAAS;AACzB,kBAAI,KAAM;AACV,8BAAgB,IAAI;AACpB,qBAAO;AAAA,YACT;AAAA;AAAA,QACF;AAAA,QAED,WAAW,UACV;AAAA,UAAC;AAAA;AAAA,YACC,KAAK,eAAe,WAAW,gBAAgB;AAAA,YAC/C,QAAQ;AAAA,YACR,OAAO;AAAA,YACP,OAAO;AAAA,YACP,eAAe,CAAC,SAAS;AACvB,uBAAS,IAAI;AACb,qBAAO;AAAA,YACT;AAAA,YACA;AAAA,YAGA,QAAQ,EAAE,QAAQ,OAAO,QAAQ,mBAAmB,OAAO,kBAAkB;AAAA,YAC5E,GAAG,WAAW,QAAQ;AAAA;AAAA,QACzB;AAAA,QAED,mBACC;AAAA,UAAC;AAAA;AAAA,YACC,KAAK,eAAe,aAAa,gBAAgB;AAAA,YACjD,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP;AAAA,YACA,eAAe,CAAC,SAAS;AACvB,0BAAY,IAAI;AAChB,qBAAO;AAAA,YACT;AAAA,YACC,GAAG,WAAW,UAAU;AAAA;AAAA,QAC3B;AAAA,QAED,YAAY,UAAU,eAAe,UACpC,oBAAC,OAAE,WAAW,GAAG,mBAAmB,MAAM,GAAI,sBAAW;AAAA,QAE3D,qBAAC,SAAI,WAAU,wBACb;AAAA,8BAAC,UAAO,IAAI,UAAU,MAAK,UAAS,SAAQ,SAAQ,UAAU,MAAM,SAAS,MAAM,SAAS,KAAK,GAC9F,iBAAO,QACV;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAI;AAAA,cACJ,MAAK;AAAA,cACL,SAAS,mBAAmB,SAAS,YAAY,YAAY;AAAA,cAC7D,UAAU,CAAC;AAAA,cAMX,gBAAgB;AAAA,cAChB,aAAW,QAAQ;AAAA,cAElB;AAAA,wBAAQ,oBAAC,WAAQ,OAAO,MAAM,WAAU,WAAU;AAAA,gBAClD,gBAAgB,OAAO;AAAA;AAAA;AAAA,UAC1B;AAAA,WACF;AAAA,QACC,UAAU,oBAAC,OAAE,WAAU,sBAAsB,wBAAa;AAAA;AAAA;AAAA,EAC7D,GACF;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/components/danger-confirm.tsx"],"sourcesContent":["import { Children, useCallback, useEffect, useId, useRef, useState } from \"react\";\nimport type { ChangeEvent, ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\nimport { cn } from \"../lib/cn\";\nimport { hasContent } from \"../lib/presence\";\nimport { returnFocus } from \"../lib/focus-left\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { Button } from \"./button\";\nimport { Input } from \"./input\";\nimport { Label } from \"./field-base\";\nimport { FIELD_ERROR_CLASS } from \"./field-parts\";\nimport { Spinner } from \"./spinner\";\nimport type { ButtonVariant } from \"./button-look\";\nimport type { InputProps } from \"./input\";\nimport { Checkbox } from \"./checkbox\";\nimport { Tooltip } from \"./tooltip\";\nimport { useCommitReason, type CommitScope } from \"./write-lock\";\nimport { DEFAULT_DANGER_CONFIRM_LABELS } from \"./danger-confirm-labels\";\n\n/**\n * How typed text is compared with the text it has to repeat — shared by\n * `DangerConfirm`'s `phraseMatch` and `useConfirm`'s `typedMatch`.\n *\n * - `\"trim\"` ignores spaces around the typed text — a phone keyboard's autocomplete\n *   likes to add one. Case counts: \"delete\" is not \"DELETE\".\n * - `\"exact\"` compares character for character, spaces included.\n * - `\"caseless\"` trims AND ignores case: for an e-mail address, whose domain is\n *   case-insensitive and whose local part every real mail server treats so. Both apps'\n *   \"type the account's address\" rules (keksdose's `TYPE_EMAIL`, Kurvenschmiede's\n *   `TypedConfirm`) compared `trim().toLowerCase()`, and a capital the user's keyboard\n *   put at the start must not make the right row look like the wrong one.\n */\nexport type TypedMatch = \"trim\" | \"exact\" | \"caseless\";\n\n/** Whether `typed` repeats `target` under `mode` — see {@link TypedMatch}. Exported for\n *  a caller that draws its own field (a dialog that also picks a recipient) and wants\n *  the same rule as the kit's. */\nexport function typedMatches(typed: string, target: string, mode: TypedMatch = \"trim\"): boolean {\n  if (mode === \"exact\") return typed === target;\n  if (mode === \"trim\") return typed.trim() === target;\n  // `toLowerCase`, not `toLocaleLowerCase`: the comparison must not change with the\n  // reader's locale (a Turkish dotless i would otherwise fail an ASCII address).\n  return typed.trim().toLowerCase() === target.trim().toLowerCase();\n}\n\n/**\n * Busy-while-a-promise-runs, for an action that MAY return one: `run(result, onResolved)`\n * marks the caller pending until `result` settles, calls `onResolved` if it fulfilled,\n * and only clears the flag if it rejected — the caller shows why and the user retries.\n * Nothing runs after unmount. Shared by `DangerConfirm` and `ReauthDialog`, whose\n * contract is the same: resolve = done, reject = stay put.\n *\n * @internal\n */\nexport function usePromisePending() {\n  const [pending, setPending] = useState(false);\n  const mounted = useRef(true);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n  const run = useCallback((result: unknown, onResolved: () => void): boolean => {\n    if (!result || typeof (result as Promise<unknown>).then !== \"function\") return false;\n    setPending(true);\n    (result as Promise<unknown>).then(\n      () => {\n        if (!mounted.current) return;\n        setPending(false);\n        onResolved();\n      },\n      () => {\n        if (mounted.current) setPending(false);\n      },\n    );\n    return true;\n  }, []);\n  return { pending, run };\n}\n\n/** The one word {@link CurrentPasswordInput} says on its own behalf — the\n *  `dangerConfirm.password` label, shared with DangerConfirm's password field, so an\n *  app translates \"Password\" once. */\nexport type CurrentPasswordInputLabels = Pick<DangerConfirmLabels, \"password\">;\n\n/**\n * Everything {@link Input} takes except what makes this field what it is: `type` is\n * always `\"password\"` and `autoComplete` always `\"current-password\"`.\n */\nexport interface CurrentPasswordInputProps extends Omit<InputProps, \"type\" | \"autoComplete\" | \"label\"> {\n  /**\n   * The visible label. Default `dangerConfirm.password` (\"Password\") — unless the field\n   * is named another way (`aria-label` / `aria-labelledby`), which then stays the only\n   * name. Pass the app's own word on a sign-in form (\"Password\", \"Your password\"), or\n   * `null` for a field whose `<label htmlFor>` is drawn elsewhere (a form library's\n   * label), which would otherwise be labelled twice.\n   */\n  label?: ReactNode;\n  /** The value as a string — the `(next) => …` shape, so a caller holding it in\n   *  `useState` need not unwrap `event.target.value`. Fires alongside `onChange`,\n   *  never instead of it, so a form library's `onChange` keeps working. */\n  onValueChange?: (value: string) => void;\n  /**\n   * A check is running (the sign-in request, the re-auth). The field turns `readOnly`,\n   * NOT `disabled`: the field being submitted is usually the focused one (Enter was\n   * pressed in it), and disabling a focused field drops focus to `<body>` — the user\n   * lands nowhere when the \"wrong password\" answer comes back.\n   */\n  busy?: boolean;\n  /** Per-instance override of `dangerConfirm.password`. */\n  labels?: LabelOverride<CurrentPasswordInputLabels>;\n}\n\n/**\n * The \"prove it is you\" field: a password input that a password manager fills with\n * the CURRENT password and never offers to generate a new one for.\n *\n * It is the field of a sign-in form, a re-auth step ({@link ReauthDialog} draws the same\n * field), and {@link DangerConfirm}'s `requirePassword`. Public since 0.22 for kastlan's\n * sign-in and re-auth (kastlan 1), which wrote `type=\"password\"` +\n * `autoComplete=\"current-password\"` by hand — and a sign-in field that forgets the\n * second half gets the browser's \"suggest a strong password\" offer on the one form where\n * a NEW password is never what is wanted. The reverse matters as much: a field that sets\n * a NEW password (a passphrase, a sign-up) must NOT be this one — keksdose #170 keeps\n * its passphrase doors on `new-password` / `off` for that reason.\n *\n * Everything else is {@link Input}: the reveal toggle, `error` (under the field,\n * `aria-describedby`, `aria-invalid`), `invalid`, `name`, `id`, `autoFocus`, `required`.\n * The ref is the `<input>`, so it works with `@eifi1/ui-kit/rhf`'s `RhfField` / a\n * `register()` spread, and controlled or uncontrolled.\n *\n * ```tsx\n * <CurrentPasswordInput name=\"password\" label={t(\"password\")} error={errors.password?.message}\n *   busy={isSubmitting} {...register(\"password\")} />\n * ```\n */\nexport function CurrentPasswordInput({\n  label,\n  onValueChange,\n  onChange,\n  busy,\n  readOnly,\n  labels: labelsProp,\n  ...rest\n}: CurrentPasswordInputProps) {\n  const labels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS, labelsProp);\n  const namedOtherwise = rest[\"aria-label\"] !== undefined || rest[\"aria-labelledby\"] !== undefined;\n  return (\n    <Input\n      // `ref` (the `<input>`) rides along: a React 19 ref prop since 0.34 (MOD-4, refactor\n      // audit 2026-10), where this was `forwardRef`.\n      {...rest}\n      // After the spread: a props object spread at the field must not turn it into a\n      // text field, or into one the password manager offers a new password for.\n      type=\"password\"\n      autoComplete=\"current-password\"\n      label={\n        label === undefined ? (namedOtherwise ? undefined : labels.password) : hasContent(label) ? label : undefined\n      }\n      readOnly={Boolean(busy) || readOnly}\n      onChange={(e) => {\n        onChange?.(e);\n        onValueChange?.(e.target.value);\n      }}\n    />\n  );\n}\n\n/** The words {@link TypedConfirmField} says on its own behalf — the `dangerConfirm`\n *  namespace's `phrase` and `phrasePlaceholder`, shared with DangerConfirm's own field,\n *  so the sentence \"Type “X” to confirm\" is translated once. */\nexport type TypedConfirmFieldLabels = Pick<DangerConfirmLabels, \"phrase\" | \"phrasePlaceholder\">;\n\nexport interface TypedConfirmFieldProps extends Omit<\n  InputProps,\n  \"type\" | \"value\" | \"defaultValue\" | \"label\" | \"placeholder\"\n> {\n  /** The text to repeat — a word (\"DELETE\"), a name, an e-mail address. */\n  target: string;\n  /** How the typed text is compared with `target` — {@link TypedMatch}. Default\n   *  `\"trim\"`, as {@link typedMatches}; `\"caseless\"` for an address or an\n   *  acknowledgement word a user may type in any case. */\n  match?: TypedMatch;\n  /** Controlled value. Left out, the field keeps its own (start: `defaultValue`). */\n  value?: string;\n  defaultValue?: string;\n  /** The typed text as a string, on every keystroke. Fires alongside `onChange`. */\n  onValueChange?: (value: string) => void;\n  /**\n   * The typed text started or stopped matching `target` — fired from the keystroke\n   * that flipped it, so an uncontrolled field can still drive the button it guards. A\n   * controlled caller that resets the value itself (on a close) knows the answer\n   * already, and gets no call for that; it can also compute it with {@link typedMatches}.\n   */\n  onMatchedChange?: (matched: boolean) => void;\n  /** The label. Default `dangerConfirm.phrase(target)` — \"Type “DELETE” to confirm\". */\n  label?: ReactNode;\n  /** Text inside the empty field. Default `dangerConfirm.phrasePlaceholder` (unset).\n   *  Given, the label moves ABOVE the field: a floating label occupies the empty\n   *  field, which is exactly where a placeholder shows. `\"\"` means none. */\n  placeholder?: string;\n  /** The guarded action is running: the field turns `readOnly` (not `disabled`, which\n   *  would drop the focus Enter left in it). */\n  busy?: boolean;\n  labels?: LabelOverride<TypedConfirmFieldLabels>;\n}\n\n/**\n * The \"type this to confirm\" field — {@link DangerConfirm}'s `phrase` field and\n * `useConfirm({ requireTyped })`'s, on its own (keksdose K7).\n *\n * keksdose writes it by hand four times: the privacy enrol, upgrade and sweep dialogs\n * (type the acknowledgement word, then the key doors appear) and the admin's \"type the\n * user's address\" (`UserActionConfirm`), each an `Input` plus its own\n * `trim().toUpperCase()` / `toLowerCase()` comparison. None of those places is an\n * arm → confirm tile or a modal confirm — what is guarded is a whole form, or the\n * next step of a dialog — so the field had to stand alone. What it brings over a plain\n * `Input`: one match rule ({@link typedMatches}, which lower-cases locale-independently\n * on purpose), the label worded from the target in the app's language, and the\n * attributes a phone keyboard needs to leave the text alone (no autocomplete, no\n * auto-capital, no autocorrect, no spellcheck — a keyboard that \"corrects\" an e-mail\n * address makes the guard unpassable).\n *\n * The field reports whether it matches (`onMatchedChange`, and `data-matched` on the\n * `<input>` for styling); what the match unlocks is the caller's. The ref is the\n * `<input>`.\n *\n * ```tsx\n * const [ok, setOk] = useState(false);\n * <TypedConfirmField target={t(\"privacy.enroll_ack_word\")} match=\"caseless\" onMatchedChange={setOk} />\n * {ok && <KeyDoorsForm … />}\n * ```\n */\nexport function TypedConfirmField({\n  ref,\n  target,\n  match = \"trim\",\n  value: valueProp,\n  defaultValue = \"\",\n  onValueChange,\n  onMatchedChange,\n  onChange,\n  label: labelProp,\n  placeholder: placeholderProp,\n  busy,\n  readOnly,\n  labels: labelsProp,\n  id,\n  className,\n  ...rest\n}: TypedConfirmFieldProps) {\n  const labels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS, labelsProp);\n  const [own, setOwn] = useState(defaultValue);\n  const value = valueProp ?? own;\n  const matched = typedMatches(value, target, match);\n  const generated = useId();\n  const fieldId = id ?? generated;\n  const label =\n    labelProp !== undefined ? labelProp : typeof labels.phrase === \"function\" ? labels.phrase(target) : labels.phrase;\n  const fromLabels =\n    labels.phrasePlaceholder === undefined\n      ? undefined\n      : typeof labels.phrasePlaceholder === \"function\"\n        ? labels.phrasePlaceholder(target)\n        : labels.phrasePlaceholder;\n  const placeholder = placeholderProp ?? fromLabels;\n\n  const fieldProps = {\n    ...rest,\n    ref,\n    id: fieldId,\n    value,\n    autoComplete: \"off\",\n    autoCapitalize: \"off\",\n    autoCorrect: \"off\",\n    spellCheck: false,\n    readOnly: Boolean(busy) || readOnly,\n    \"data-matched\": matched || undefined,\n    onChange: (e: ChangeEvent<HTMLInputElement>) => {\n      onChange?.(e);\n      const next = e.target.value;\n      if (valueProp === undefined) setOwn(next);\n      onValueChange?.(next);\n      const nextMatched = typedMatches(next, target, match);\n      if (nextMatched !== matched) onMatchedChange?.(nextMatched);\n    },\n  };\n\n  if (placeholder) {\n    return (\n      // A static label above, so the placeholder has the empty field to itself.\n      <div className={cn(\"space-y-1.5\", className)}>\n        <Label htmlFor={fieldId}>{label}</Label>\n        <Input {...fieldProps} placeholder={placeholder} />\n      </div>\n    );\n  }\n  return <Input {...fieldProps} label={label} className={className} />;\n}\n\n/**\n * Every string the tile renders — the `dangerConfirm` namespace of\n * `<UiKitProvider labels>`, overridable per instance through `labels`. The arm and\n * confirm buttons are usually worded per action (\"Delete budget\"), which is what the\n * `armLabel` / `confirmLabel` props are for; these are the fallbacks.\n */\nexport interface DangerConfirmLabels {\n  /** The button that arms the tile. */\n  arm: string;\n  /** The button that runs the action once the guards are satisfied. */\n  confirm: string;\n  cancel: string;\n  /** The warning above the fields, when no `prompt` is given. */\n  prompt: string;\n  /** Label of the password field (`requirePassword`). */\n  password: string;\n  /** Label of the type-to-confirm field. A FUNCTION of the phrase by default, like\n   *  every message that carries a value: where the phrase sits in the sentence moves\n   *  with the language. A plain STRING is taken as the finished label — for an app\n   *  whose catalogue already words it (\"Type DELETE to confirm\") and would otherwise\n   *  wrap it as `() => label`. */\n  phrase: string | ((phrase: string) => string);\n  /** Placeholder of the type-to-confirm field — a string, or a function of the\n   *  phrase (`(p) => p` echoes it). Optional and unset by default: the field keeps its\n   *  floating label, as before. Given, the label moves ABOVE the field (a floating\n   *  label occupies the empty field, which is exactly where a placeholder shows) and\n   *  the placeholder fills the field. An empty string means none. */\n  phrasePlaceholder?: string | ((phrase: string) => string);\n  /** 0.22: the checkbox `requireAcknowledge={true}` shows — \"I have read what this does\n   *  and want to continue\" (keksdose's `admin.users.confirm_ack`). */\n  acknowledge: string;\n  /**\n   * 0.23: why the armed confirm is held while the typed phrase does not match yet — in\n   * the confirm's tooltip and its description (keksdose G4a). A FUNCTION of the phrase\n   * by default (\"Type “DELETE” to confirm\"), or a finished STRING, as `phrase`.\n   */\n  needsPhrase: string | ((phrase: string) => string);\n  /** 0.23: why the armed confirm is held while the `requireAcknowledge` box is unticked\n   *  — \"Tick the box to confirm\". */\n  needsAcknowledge: string;\n  /** 0.23: why the armed confirm is held while the `requirePassword` field is empty —\n   *  \"Enter your password to confirm\". */\n  needsPassword: string;\n}\n\n// Defined in ./danger-confirm-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_DANGER_CONFIRM_LABELS };\n\n/**\n * What the guards were answered with — the second argument of\n * {@link DangerConfirmProps.onConfirm} (0.23, keksdose G4b). A key is there only when its\n * guard was asked for, so the object can go into a request body as it is.\n */\nexport interface DangerConfirmValues {\n  /**\n   * The text typed into the `phrase` field — as the match rule compared it: trimmed\n   * under `phraseMatch` `\"trim\"` and `\"caseless\"` (the spaces a phone keyboard adds are\n   * not part of it), exactly as typed under `\"exact\"`. The case is the user's, even\n   * under `\"caseless\"`: a server that re-checks applies its own rule to it. Absent\n   * without a `phrase`.\n   */\n  typed?: string;\n  /** The entered password — the same value as the first argument. Absent without\n   *  `requirePassword`. */\n  password?: string;\n  /** `true` when the `requireAcknowledge` box was shown — it was ticked, since the\n   *  confirm is held until it is. Absent without one. */\n  acknowledged?: true;\n}\n\n/**\n * One line of {@link DangerConfirmProps.consequences}: what the action will do. A plain\n * string, or this, for a key of its own and the `severe` mark.\n */\nexport interface DangerConsequence {\n  /** React key — keksdose keys its lines by what they say (\"api_tokens\", \"only_door\").\n   *  Default: the text when it is a string, else the position. */\n  key?: string;\n  text: ReactNode;\n  /** \"There is no way back\" — painted in the danger colour rather than the list's\n   *  muted one. keksdose reserves it for the one line that loses something for good. */\n  severe?: boolean;\n}\n\nexport interface DangerConfirmProps extends Omit<ComponentPropsWithRef<\"div\">, \"onChange\"> {\n  /**\n   * Runs the action, with the entered password when `requirePassword` is on.\n   *\n   * Return a promise and the tile manages itself: busy until it settles, disarmed\n   * (fields wiped) when it resolves, still armed when it rejects — so the user can\n   * correct a wrong password and retry. The rejection is not swallowed for you to\n   * miss: handle it (and show why) in the caller, as with any mutation.\n   *\n   * 0.23: the second argument is what every guard was answered with — the typed phrase,\n   * the password, the tick ({@link DangerConfirmValues}). keksdose G4b: its admin\n   * actions send the address the admin TYPED, and the server re-checks it against the\n   * account (`assert_confirmed`), so a client that put the wrong row's id in the request\n   * is refused rather than obeyed; the tile kept the text to itself.\n   *\n   *     onConfirm={(_password, { typed }) =>\n   *       reset.mutateAsync({ id, confirm: { acknowledged: true, confirm_email: typed ?? null } })}\n   *\n   * A second argument rather than one object in place of the password: every\n   * `(password) => …` and `() => …` handler, and a `mutation.mutate` passed as it is,\n   * keeps working unchanged, and a handler that needs one guard's answer names it.\n   */\n  onConfirm: (password: string | undefined, values: DangerConfirmValues) => void | Promise<unknown>;\n  /** Show a password field; confirm is held until it is filled. */\n  requirePassword?: boolean;\n  /**\n   * Show an \"I understand\" checkbox; confirm is held until it is ticked\n   * (keksdose K7). `true` words it with `labels.acknowledge`; any other node IS the\n   * checkbox's label (\"I understand Anna will be signed out everywhere\").\n   *\n   * The guard for an action whose risk is MIS-TARGETING less than carelessness:\n   * keksdose's admin password reset asks for a typed address when the account has an\n   * encrypted door to lose, and a tick otherwise (`UserActionConfirm`), and its plan\n   * editor asks for the tick alone (`UserPlanEditor`). Both were hand-built beside this\n   * tile because it had no tick. It combines with `phrase` and `requirePassword`: every\n   * guard given must be satisfied.\n   */\n  requireAcknowledge?: ReactNode;\n  /**\n   * What the action will do, said before it happens — a list under the prompt, shown\n   * once armed (keksdose K7, `UserActionConfirm`'s consequences). Strings, or\n   * {@link DangerConsequence}s for a `severe` line in the danger colour.\n   *\n   * Derive them from the row's own facts rather than reciting the worst case: an admin\n   * who reads the same paragraph on every row stops reading it (keksdose dev#488).\n   */\n  consequences?: readonly (string | DangerConsequence)[];\n  /** Show a \"type <phrase> to confirm\" field; confirm is held until the field matches\n   *  (case-sensitive; surrounding spaces ignored unless `phraseMatch=\"exact\"`). */\n  phrase?: string;\n  /**\n   * How the typed text is compared with `phrase`. `\"trim\"` (default) ignores spaces\n   * around it — a phone keyboard's autocomplete likes to add one. `\"exact\"` compares\n   * character for character, spaces included, for an app whose contract is \"type\n   * exactly this\". `\"caseless\"` (0.18) also ignores case — for a phrase that is an\n   * e-mail address (keksdose's \"type the user's address\" admin rule). See\n   * {@link TypedMatch}.\n   */\n  phraseMatch?: TypedMatch;\n  /** The warning above the fields. Defaults to `labels.prompt`. */\n  prompt?: ReactNode;\n  /** `\"danger\"` (default) for what cannot be undone; `\"warning\"` for what can, at a\n   *  cost (loading demo data over your own). Colours the prompt, and picks the arm\n   *  button's variant and — unless {@link DangerConfirmProps.confirmVariant} is\n   *  given — the confirm's. */\n  tone?: \"danger\" | \"warning\";\n  /**\n   * The confirm button's variant, apart from `tone` (0.24, keksdose). Default: what\n   * `tone` picks, as before — `\"danger\"` for `\"danger\"`, `\"default\"` for `\"warning\"`.\n   *\n   * `tone` says how bad the outcome is; this says how loud the last press is, and the two\n   * need not agree. keksdose's `UserActionConfirm` (an admin resets somebody else's\n   * password) asks an AMBER question — what it guards against is mis-targeting, not data\n   * loss, so the danger colour stays its one `severe` consequence's — and ends in a RED\n   * Go, as its hand-built panel did before it moved onto this tile in 0.23; with only\n   * `tone`, the amber question made Go the neutral `default` fill. `tone=\"warning\"\n   * confirmVariant=\"danger\"` is that panel again.\n   */\n  confirmVariant?: ButtonVariant;\n  /**\n   * Hold the armed confirm for a reason of the CALLER's own (0.24, keksdose) — the\n   * tile's counterpart of FormActions' `submitDisabledReason`. While it has content the\n   * confirm is held exactly as by the built-in guards: `aria-disabled` but focusable,\n   * the reason in the kit {@link Tooltip} and its description, a press — or Enter in a\n   * field — does nothing. Nothing else changes: the arm button stays usable, and no\n   * line is printed under the buttons.\n   *\n   * keksdose's `UserPlanEditor` (\"move this account onto another plan\") must not confirm\n   * the plan the account already holds — the request would only write FREE → FREE into\n   * the audit trail. With no guard of its own to give, it passed \"Pick a different plan\"\n   * as `lockedReason`, which is a LOCK: documented as \"the action is not available\",\n   * spelled out under the buttons as well as in the tooltip, and meant for a write the\n   * user cannot make land. A guard the user lifts by changing a field is this prop.\n   *\n   * Which reason the held confirm names: a write lock's first (`lockedReason`, `commit`\n   * — nothing in the tile lifts it), then this one, then the built-in guards in the\n   * order they are drawn (the tick, the phrase, the password). This one before the\n   * built-ins because it is usually about a field in\n   * {@link DangerConfirmProps.children}, which is drawn ABOVE them — the rule since 0.23\n   * is \"the first open guard in the order the user meets it\" — and because it is about\n   * WHAT is being confirmed (which plan), which has to be settled before acknowledging\n   * it means anything. It is also the order keksdose's plan editor had, its\n   * `lockedReason` winning over the tick.\n   */\n  confirmDisabledReason?: ReactNode;\n  /**\n   * Fields of the caller's own, drawn INSIDE the armed tile (0.24, keksdose): after the\n   * prompt and the consequences, before the tick, the typed phrase and the password —\n   * the order is \"what this does, what to do it with, then prove you mean it\". Nothing\n   * is drawn for them while the tile is disarmed, and nothing at all without them, so a\n   * tile without children is laid out exactly as before.\n   *\n   * keksdose's `UserPlanEditor` asks WHICH plan before it asks for the tick; with no\n   * place inside the tile for the picker, the `Select` sat above it, and the tile's\n   * prompt — the panel's title by rights — became the \"FREE → PRO\" line under the\n   * picker. With the picker here, the prompt is the title again.\n   *\n   * The fields are the caller's: their values are not wiped on disarm (an uncontrolled\n   * field starts over anyway — the slot unmounts), not passed to `onConfirm`, and a\n   * guard on them is {@link DangerConfirmProps.confirmDisabledReason}. Arming moves\n   * focus to their first form field (an input, a select, a combobox, a radio…), else to\n   * the tile's own first field as before; Tab then goes on through the tick, the phrase\n   * and the password to Cancel and the confirm. They sit inside the tile's `<form>`:\n   * Enter in a text field confirms once every guard allows, and a {@link Button} among\n   * them needs `type=\"button\"` — without one it SUBMITS the form, as a native button\n   * does.\n   */\n  children?: ReactNode;\n  /** Visible text of the arm button; defaults to `labels.arm`. */\n  armLabel?: ReactNode;\n  /** Visible text of the confirm button; defaults to `labels.confirm`. */\n  confirmLabel?: ReactNode;\n  /**\n   * The action is running: confirm shows a spinner and nothing can be pressed — Cancel\n   * included. For a caller that tracks the mutation itself (a `useMutation`'s\n   * `isPending`); a promise returned from `onConfirm` does the same on its own.\n   *\n   * Cancel stays disabled ON PURPOSE, unlike FormActions' (keksdose asked in 0.24 why the\n   * two differ). Once the request has left, nothing on the client can call it back —\n   * not even an `AbortSignal`, which only stops the waiting, not the server — so a usable\n   * Cancel could only collapse the tile while the action went on: \"Cancel\" pressed, and\n   * the account reset anyway. Every way of settling what comes back is wrong somewhere: a\n   * resolve after the Cancel did what the user called off; a reject finds the fields\n   * wiped (a collapsed tile holds no password), so the 0.23 \"stay armed and retry\" is\n   * gone; and re-arming while the first request runs is either a busy tile with empty\n   * fields or — if the busy state went with the Cancel — a second destructive request\n   * beside the first. FormActions' Cancel leaves an editor whose save is the user's own\n   * edit landing, and a form can be edited again; the tile's action is the one that\n   * cannot be undone, so it says nothing it cannot keep and waits — the wait is one\n   * request long.\n   *\n   * When the action settles still armed (it failed) and the press on the confirm had\n   * dropped the focus — a natively disabled button loses it — focus comes back to the\n   * confirm, so a keyboard user can retry or Shift+Tab to the field to correct (0.24).\n   */\n  busy?: boolean;\n  /**\n   * Why the last confirm failed (\"Wrong password\"), in the tile beside the field it is\n   * about rather than in a toast away from it (keksdose audit follow-up, 2026-11-01:\n   * PasswordDangerCard toasted its `password_incorrect` for want of this). The app sets\n   * it from the failure and words it — a 400 is a wrong password, a 500 is not.\n   *\n   * Drawn as the field's own `error`, as {@link ReauthDialog} draws its own: under the\n   * password with `requirePassword`, else under the typed phrase — the field painted,\n   * `aria-invalid`, the message its `aria-describedby` — and in a tile with neither, as\n   * a line above the buttons. Announced as it appears (`role=\"alert\"`): it arrives\n   * after the press, with focus on the confirm, where a field's description alone is\n   * not heard. Passed at all — even as `undefined` — the field keeps its box, as with\n   * Input's `error`, so the message going away does not rebuild the field mid-edit.\n   *\n   * Hidden while the next attempt runs, once the user edits the tick, the phrase or the\n   * password (it is about what was submitted), and when the tile arms or disarms, until\n   * the next confirm; shown again when a confirm fails with it still set. So a\n   * mutation's error can be handed over as it is:\n   * `error={mut.error ? message(mut.error) : undefined}`.\n   */\n  error?: ReactNode;\n  /** The arm button is disabled. */\n  disabled?: boolean;\n  /**\n   * Why the action is not available — a read-only demo, a write lock, a missing\n   * permission. Disables the arm button like `disabled`, and SAYS so: the sentence is\n   * shown under the button and attached to it with `aria-describedby`, and the button\n   * stays focusable (`aria-disabled`) so a keyboard user can land on it and hear why.\n   *\n   * On the ARM button rather than the confirm: arming asks for a password, and asking\n   * for a password for a write that can never land is the worse of the two. A tile that\n   * is ALREADY armed when the reason arrives (controlled `armed`, or a lock that landed\n   * while it was open) keeps its fields but its confirm takes the reason the same way\n   * — focusable, `aria-disabled`, the reason in its tooltip — and Enter does nothing.\n   */\n  lockedReason?: ReactNode;\n  /**\n   * This tile COMMITS — the 0.18 write-lock opt-in that {@link Button} has (keksdose\n   * K3). Under a locked {@link WriteLockProvider} the lock's reason becomes\n   * `lockedReason` (and wins over one of the tile's own), so a page that mounts the\n   * provider no longer threads `lockedReason={lock.locked ? lock.reason : undefined}`\n   * into every tile. No provider, or an unlocked one: no effect.\n   */\n  commit?: CommitScope;\n  /** Controlled armed state. The parent can then collapse the tile from a mutation's\n   *  own `onSuccess` without returning a promise. */\n  armed?: boolean;\n  /** Called with the next armed state — on arm, cancel, and a resolved `onConfirm`. */\n  onArmedChange?: (armed: boolean) => void;\n  /** User-facing strings; see {@link DangerConfirmLabels}. */\n  labels?: LabelOverride<DangerConfirmLabels>;\n}\n\n/** What counts as a FIELD among the caller's `children` — what arming focuses. Not\n *  any tabbable element: a \"see the plans\" link or a disclosure button before the\n *  picker is not where the user starts. `[tabindex=\"-1\"]` is a roving radio group's\n *  unselected option; the selected one (`0`) is the group's stop. */\nconst SLOT_FIELD = [\n  'input:not([type=\"hidden\"])',\n  \"select\",\n  \"textarea\",\n  ...[\"combobox\", \"listbox\", \"radio\", \"checkbox\", \"switch\", \"slider\", \"spinbutton\", \"textbox\"].map(\n    (role) => `[role=\"${role}\"]`,\n  ),\n]\n  .map((selector) => `${selector}:not(:disabled):not([tabindex=\"-1\"]):not([aria-hidden=\"true\"])`)\n  .join(\", \");\n\n/** The first field among the caller's `children`, skipping a native radio that is not\n *  the checked one of its group (Tab lands on the checked one). */\nfunction firstSlotField(slot: HTMLElement | null): HTMLElement | null {\n  if (!slot) return null;\n  for (const el of slot.querySelectorAll<HTMLElement>(SLOT_FIELD)) {\n    if (el.closest(\"[hidden], [inert]\")) continue;\n    if (el instanceof HTMLInputElement && el.type === \"radio\" && !el.checked && el.name) {\n      const group = el.form?.elements.namedItem(el.name);\n      const checked =\n        group instanceof RadioNodeList && Array.from(group).some((r) => r instanceof HTMLInputElement && r.checked);\n      if (checked) continue;\n    }\n    return el;\n  }\n  return null;\n}\n\n/**\n * An \"arm → confirm\" tile for destructive actions: one button, which expands into a\n * warning, an optional list of consequences, optional fields of the caller's own\n * (`children`, 0.24), an optional \"I understand\" tick, an optional type-to-confirm\n * field, an optional password field and a confirm that is held until every guard is\n * satisfied — the built-in ones, and the caller's `confirmDisabledReason` (0.24).\n *\n * A held confirm SAYS which guard is still open (0.23, keksdose G4a): it is\n * `aria-disabled` rather than `disabled` — still focusable, so a keyboard user can land\n * on it — with the reason in the kit {@link Tooltip} and its description (\"Type\n * “DELETE” to confirm\", \"Tick the box to confirm\", \"Enter your password to confirm\";\n * `labels.needs*`), the first open guard in the order they are drawn. FormActions'\n * `submitDisabledReason` does the same for a form's Save. Pressing it, or Enter in a\n * field, does nothing. A lock's reason wins over a guard's, the caller's guard over the\n * built-in ones; while the action runs the confirm is plainly disabled, its spinner\n * saying why — and so is Cancel, which cannot call back a request that has left (see\n * `busy`).\n *\n * Keksdose hand-rolled it three times (load demo data, wipe everything, reset a\n * budget) and then as `shared/components/danger-confirm.tsx`; the only app-specific\n * part was its write-lock hook, which is `lockedReason` here.\n *\n * The fields are a `<form>`, so Enter confirms once the guards allow it. They are\n * wiped every time the tile disarms — a password must not sit in a collapsed tile.\n * Arming moves focus to the first field (or Cancel, when there is none — never to the\n * destructive button itself), and disarming moves it back to the arm button, so the\n * keyboard user is never left on an element that just vanished.\n */\nexport function DangerConfirm(props: DangerConfirmProps) {\n  const {\n    onConfirm,\n    requirePassword,\n    requireAcknowledge,\n    consequences,\n    phrase,\n    phraseMatch = \"trim\",\n    prompt,\n    tone = \"danger\",\n    confirmVariant,\n    confirmDisabledReason,\n    children,\n    armLabel,\n    confirmLabel,\n    busy: busyProp,\n    error,\n    disabled,\n    lockedReason: ownLockedReason,\n    commit,\n    armed: armedProp,\n    onArmedChange,\n    labels: labelsProp,\n    className,\n    ...rest\n  } = props;\n  const labels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS, labelsProp);\n  const lockedReason = useCommitReason(commit, ownLockedReason);\n  const [armedState, setArmedState] = useState(false);\n  const armed = armedProp ?? armedState;\n  const [password, setPassword] = useState(\"\");\n  const [typed, setTyped] = useState(\"\");\n  const [acknowledged, setAcknowledged] = useState(false);\n  // The `error` describes what was submitted: an edit, an arm or a disarm leaves it\n  // describing nothing on screen. Cleared by the next confirm — ReauthDialog's `edited`.\n  const [errorStale, setErrorStale] = useState(false);\n  const { pending, run } = usePromisePending();\n  const busy = Boolean(busyProp) || pending;\n  // `readOnly` rather than `disabled` on the fields while busy: disabling the field\n  // that has focus (Enter was pressed in it) drops focus to <body>.\n  const promptId = useId();\n  const consequencesId = useId();\n  const reasonId = useId();\n\n  // The buttons focus is moved to are found by id.\n  const armId = useId();\n  const cancelId = useId();\n  const confirmId = useId();\n  const firstFieldRef = useRef<HTMLInputElement>(null);\n  // The caller's fields (`children`), searched for their first form field on arm.\n  const slotRef = useRef<HTMLDivElement>(null);\n  // Focus moves only after a transition — never on mount, so a tile that renders armed\n  // (controlled) does not take the page's focus merely by existing.\n  const moveFocus = useRef(false);\n  // A confirm from this tile is under way — see the focus return after a failure below.\n  const confirmed = useRef(false);\n\n  // A disarm from anywhere (cancel, a resolved confirm, the parent) wipes the fields.\n  // During render, like NumberField's draft, so no frame shows a collapsed tile that\n  // still holds a password.\n  const [wasArmed, setWasArmed] = useState(armed);\n  if (wasArmed !== armed) {\n    setWasArmed(armed);\n    // An `error` still passed is about the attempt before: not shown until a confirm.\n    setErrorStale(true);\n    if (!armed) {\n      setPassword(\"\");\n      setTyped(\"\");\n      setAcknowledged(false);\n    }\n  }\n\n  const prevArmed = useRef(armed);\n  useEffect(() => {\n    const changed = prevArmed.current !== armed;\n    prevArmed.current = armed;\n    const byUser = moveFocus.current;\n    moveFocus.current = false;\n    if (!changed) return;\n    if (armed) {\n      if (byUser) {\n        // The caller's fields come first on the page, so first in focus too.\n        (firstSlotField(slotRef.current) ?? firstFieldRef.current ?? document.getElementById(cancelId))?.focus();\n      }\n      return;\n    }\n    confirmed.current = false;\n    // Back to the arm button when the focus went down with the form — Cancel's, or a\n    // controlled parent collapsing the tile from its own `onSuccess`, which did not go\n    // through `setArmed`. By the kit's one rule (lib/focus-left `returnFocus`; 0.52 code\n    // review 2026-10-31, held to 0.55): it was moved for every `setArmed(false)` too, so a\n    // confirm that resolved after the user had gone on to another field took them back.\n    returnFocus({ opener: document.getElementById(armId) });\n  }, [armed, armId, cancelId]);\n\n  // The action settled and the tile is still armed — it failed, and the user retries.\n  // The confirm was natively disabled while it ran, and a focused button that turns\n  // disabled drops the focus to <body>: bring it back to the button that was pressed.\n  // Only after a confirm from THIS tile (`confirmed`), so a `busy` that comes and goes\n  // on its own never pulls the page's focus in. (A resolve disarms, and the effect\n  // above takes the focus to the arm button.)\n  const wasBusy = useRef(busy);\n  useEffect(() => {\n    const settled = wasBusy.current && !busy;\n    wasBusy.current = busy;\n    if (!settled) return;\n    const ours = confirmed.current;\n    confirmed.current = false;\n    if (!ours || !armed) return;\n    if (document.activeElement === null || document.activeElement === document.body) {\n      document.getElementById(confirmId)?.focus();\n    }\n  }, [busy, armed, confirmId]);\n\n  const setArmed = (next: boolean) => {\n    moveFocus.current = true;\n    if (armedProp === undefined) setArmedState(next);\n    onArmedChange?.(next);\n  };\n\n  const locked = hasContent(lockedReason);\n  // `true` words the tick with the namespace; any other node is its label; `false`,\n  // `null` and `\"\"` are no tick at all.\n  const acknowledgeLabel: ReactNode =\n    requireAcknowledge === true ? labels.acknowledge : hasContent(requireAcknowledge) ? requireAcknowledge : null;\n  const asksAcknowledge = acknowledgeLabel !== null;\n  const passwordOk = !requirePassword || password !== \"\";\n  const phraseOk = phrase === undefined || typedMatches(typed, phrase, phraseMatch);\n  const acknowledgeOk = !asksAcknowledge || acknowledged;\n  const callerHeld = hasContent(confirmDisabledReason);\n  // `{cond && <Select />}` and `[null, false]` are no fields: no wrapper, no gap.\n  const hasFields = Children.toArray(children).some(hasContent);\n  const canConfirm = passwordOk && phraseOk && acknowledgeOk && !callerHeld && !busy;\n  // The first guard still open, in the order the fields are drawn — the one the user\n  // meets next, so the sentence points at it.\n  const guardReason: string | undefined = !acknowledgeOk\n    ? labels.needsAcknowledge\n    : !phraseOk\n      ? typeof labels.needsPhrase === \"function\"\n        ? labels.needsPhrase(phrase ?? \"\")\n        : labels.needsPhrase\n      : !passwordOk\n        ? labels.needsPassword\n        : undefined;\n  // The lock first (no guard can lift it); none while busy, when the guards were met and\n  // the spinner is the state; then the caller's guard — about the fields drawn above the\n  // built-in ones, and about WHAT is confirmed — then the first built-in guard still open.\n  const confirmReason: ReactNode = locked\n    ? lockedReason\n    : busy\n      ? undefined\n      : callerHeld\n        ? confirmDisabledReason\n        : guardReason;\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    // `locked` too: Enter in a field submits the form without the button's say (and\n    // `canConfirm` holds the caller's guard the same way).\n    if (!canConfirm || locked) return;\n    const values: DangerConfirmValues = {\n      ...(phrase !== undefined && { typed: phraseMatch === \"exact\" ? typed : typed.trim() }),\n      ...(requirePassword && { password }),\n      ...(asksAcknowledge && { acknowledged: true as const }),\n    };\n    confirmed.current = true;\n    setErrorStale(false);\n    // Disarms when it resolves; a rejection leaves it armed, fields kept: the caller\n    // shows why, the user retries.\n    run(onConfirm(values.password, values), () => setArmed(false));\n  };\n\n  // The failure's message, under the field it is about: the password, else the phrase,\n  // else (a tile with neither) a line of its own. Not while the next attempt runs.\n  const shownError = errorStale || busy ? undefined : error;\n  const errorAlert = hasContent(shownError) ? <span role=\"alert\">{shownError}</span> : undefined;\n  const errorOn = requirePassword ? \"password\" : phrase !== undefined ? \"phrase\" : \"line\";\n  // Passed at all, the carrying field keeps its box (Input's `error` rule): only then.\n  const fieldError = (field: \"password\" | \"phrase\") =>\n    \"error\" in props && errorOn === field ? { error: errorAlert } : {};\n  const edited = () => setErrorStale(true);\n\n  // The first field takes focus on arm: the tick, then the phrase, then the password —\n  // the order they are drawn in.\n  const firstField = asksAcknowledge ? \"acknowledge\" : phrase !== undefined ? \"phrase\" : \"password\";\n  const lines = (consequences ?? []).map((item, index) =>\n    typeof item === \"string\"\n      ? { key: item, text: item as ReactNode, severe: false }\n      : { key: item.key ?? String(index), text: item.text, severe: Boolean(item.severe) },\n  );\n\n  const toneText = tone === \"warning\" ? \"text-warning\" : \"text-danger\";\n\n  if (!armed) {\n    const arm = (\n      <Button\n        id={armId}\n        type=\"button\"\n        variant={tone === \"warning\" ? \"secondary\" : \"danger\"}\n        disabled={disabled}\n        aria-disabled={locked || undefined}\n        aria-describedby={locked ? reasonId : undefined}\n        onClick={() => {\n          if (!locked) setArmed(true);\n        }}\n        className=\"aria-disabled:cursor-not-allowed aria-disabled:opacity-50\"\n      >\n        {armLabel ?? labels.arm}\n      </Button>\n    );\n    return (\n      <div {...rest} className={cn(\"space-y-1\", className)}>\n        {locked ? (\n          // The reason on the button itself too, where the pointer that tried it is —\n          // the line below can sit out of view in a long settings card. Portalled, so\n          // a card that scrolls neither clips it nor grows by it.\n          //\n          // The button in a FRAGMENT on purpose: Tooltip clones an element child to\n          // add the bubble to its `aria-describedby`, and the button is already\n          // described by the visible line below — the same sentence twice, read out\n          // on every focus. A fragment is left as it is, so the bubble stays visual.\n          <Tooltip label={lockedReason} portal>\n            <>{arm}</>\n          </Tooltip>\n        ) : (\n          arm\n        )}\n        {locked && (\n          <p id={reasonId} className=\"text-xs text-muted\">\n            {lockedReason}\n          </p>\n        )}\n      </div>\n    );\n  }\n\n  return (\n    <div {...rest} className={cn(\"space-y-2\", className)}>\n      <form\n        className=\"space-y-2\"\n        aria-describedby={lines.length > 0 ? `${promptId} ${consequencesId}` : promptId}\n        aria-busy={busy || undefined}\n        onSubmit={submit}\n        noValidate\n      >\n        <p id={promptId} className={cn(\"text-xs font-medium\", toneText)}>\n          {prompt ?? labels.prompt}\n        </p>\n        {lines.length > 0 && (\n          <ul id={consequencesId} className=\"list-disc space-y-1 ps-5 text-xs text-secondary\">\n            {lines.map((line) => (\n              <li key={line.key} className={line.severe ? \"text-danger\" : undefined}>\n                {line.text}\n              </li>\n            ))}\n          </ul>\n        )}\n        {/* The caller's fields: after what the action does, before the proof that it is\n            meant. No wrapper without them — a 0.23 tile's markup is unchanged. */}\n        {hasFields && (\n          <div ref={slotRef} className=\"space-y-2\">\n            {children}\n          </div>\n        )}\n        {asksAcknowledge && (\n          <Checkbox\n            ref={firstField === \"acknowledge\" ? firstFieldRef : undefined}\n            label={acknowledgeLabel}\n            checked={acknowledged}\n            // Not `disabled` while busy, for the same reason the fields are readOnly:\n            // the box may hold the focus. A change while busy is simply not taken.\n            onCheckedChange={(next) => {\n              if (busy) return;\n              setAcknowledged(next);\n              edited();\n            }}\n          />\n        )}\n        {phrase !== undefined && (\n          <TypedConfirmField\n            ref={firstField === \"phrase\" ? firstFieldRef : undefined}\n            target={phrase}\n            match={phraseMatch}\n            value={typed}\n            onValueChange={(next) => {\n              setTyped(next);\n              edited();\n            }}\n            busy={busy}\n            // Already resolved through this tile's own `labels` prop; handed on so a\n            // per-instance phrase wording reaches the field.\n            labels={{ phrase: labels.phrase, phrasePlaceholder: labels.phrasePlaceholder }}\n            {...fieldError(\"phrase\")}\n          />\n        )}\n        {requirePassword && (\n          <CurrentPasswordInput\n            ref={firstField === \"password\" ? firstFieldRef : undefined}\n            label={labels.password}\n            value={password}\n            busy={busy}\n            onValueChange={(next) => {\n              setPassword(next);\n              edited();\n            }}\n            {...fieldError(\"password\")}\n          />\n        )}\n        {errorOn === \"line\" && errorAlert !== undefined && (\n          <p className={cn(FIELD_ERROR_CLASS, \"mt-0\")}>{errorAlert}</p>\n        )}\n        <div className=\"flex flex-wrap gap-2\">\n          <Button id={cancelId} type=\"button\" variant=\"ghost\" disabled={busy} onClick={() => setArmed(false)}>\n            {labels.cancel}\n          </Button>\n          <Button\n            id={confirmId}\n            type=\"submit\"\n            variant={confirmVariant ?? (tone === \"warning\" ? \"default\" : \"danger\")}\n            disabled={!canConfirm}\n            // Held by a guard (the caller's or a built-in one), or armed and then locked\n            // (or rendered armed under a lock): the confirm says why the way Button\n            // does — focusable, `aria-disabled`, the reason in its tooltip and\n            // description, a press swallowed (the submit with it) — and the fields stay\n            // as typed. Only busy is the native `disabled`.\n            disabledReason={confirmReason}\n            aria-busy={busy || undefined}\n          >\n            {busy && <Spinner label={null} className=\"h-4 w-4\" />}\n            {confirmLabel ?? labels.confirm}\n          </Button>\n        </div>\n        {locked && <p className=\"text-xs text-muted\">{lockedReason}</p>}\n      </form>\n    </div>\n  );\n}\n"],"mappings":";AAoJI,SAutBQ,UAvtBR,KA+IE,YA/IF;AApJJ,SAAS,UAAU,aAAa,WAAW,OAAO,QAAQ,gBAAgB;AAE1E,SAAS,UAAU;AACnB,SAAS,kBAAkB;AAC3B,SAAS,mBAAmB;AAC5B,SAAS,oBAAwC;AACjD,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,aAAa;AACtB,SAAS,yBAAyB;AAClC,SAAS,eAAe;AAGxB,SAAS,gBAAgB;AACzB,SAAS,eAAe;AACxB,SAAS,uBAAyC;AAClD,SAAS,qCAAqC;AAoBvC,SAAS,aAAa,OAAe,QAAgB,OAAmB,QAAiB;AAC9F,MAAI,SAAS,QAAS,QAAO,UAAU;AACvC,MAAI,SAAS,OAAQ,QAAO,MAAM,KAAK,MAAM;AAG7C,SAAO,MAAM,KAAK,EAAE,YAAY,MAAM,OAAO,KAAK,EAAE,YAAY;AAClE;AAWO,SAAS,oBAAoB;AAClC,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AACL,QAAM,MAAM,YAAY,CAAC,QAAiB,eAAoC;AAC5E,QAAI,CAAC,UAAU,OAAQ,OAA4B,SAAS,WAAY,QAAO;AAC/E,eAAW,IAAI;AACf,IAAC,OAA4B;AAAA,MAC3B,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,mBAAW,KAAK;AAChB,mBAAW;AAAA,MACb;AAAA,MACA,MAAM;AACJ,YAAI,QAAQ,QAAS,YAAW,KAAK;AAAA,MACvC;AAAA,IACF;AACA,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AACL,SAAO,EAAE,SAAS,IAAI;AACxB;AA0DO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,GAAG;AACL,GAA8B;AAC5B,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AACtF,QAAM,iBAAiB,KAAK,YAAY,MAAM,UAAa,KAAK,iBAAiB,MAAM;AACvF,SACE;AAAA,IAAC;AAAA;AAAA,MAGE,GAAG;AAAA,MAGJ,MAAK;AAAA,MACL,cAAa;AAAA,MACb,OACE,UAAU,SAAa,iBAAiB,SAAY,OAAO,WAAY,WAAW,KAAK,IAAI,QAAQ;AAAA,MAErG,UAAU,QAAQ,IAAI,KAAK;AAAA,MAC3B,UAAU,CAAC,MAAM;AACf,mBAAW,CAAC;AACZ,wBAAgB,EAAE,OAAO,KAAK;AAAA,MAChC;AAAA;AAAA,EACF;AAEJ;AAmEO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AACtF,QAAM,CAAC,KAAK,MAAM,IAAI,SAAS,YAAY;AAC3C,QAAM,QAAQ,aAAa;AAC3B,QAAM,UAAU,aAAa,OAAO,QAAQ,KAAK;AACjD,QAAM,YAAY,MAAM;AACxB,QAAM,UAAU,MAAM;AACtB,QAAM,QACJ,cAAc,SAAY,YAAY,OAAO,OAAO,WAAW,aAAa,OAAO,OAAO,MAAM,IAAI,OAAO;AAC7G,QAAM,aACJ,OAAO,sBAAsB,SACzB,SACA,OAAO,OAAO,sBAAsB,aAClC,OAAO,kBAAkB,MAAM,IAC/B,OAAO;AACf,QAAM,cAAc,mBAAmB;AAEvC,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH;AAAA,IACA,IAAI;AAAA,IACJ;AAAA,IACA,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,UAAU,QAAQ,IAAI,KAAK;AAAA,IAC3B,gBAAgB,WAAW;AAAA,IAC3B,UAAU,CAAC,MAAqC;AAC9C,iBAAW,CAAC;AACZ,YAAM,OAAO,EAAE,OAAO;AACtB,UAAI,cAAc,OAAW,QAAO,IAAI;AACxC,sBAAgB,IAAI;AACpB,YAAM,cAAc,aAAa,MAAM,QAAQ,KAAK;AACpD,UAAI,gBAAgB,QAAS,mBAAkB,WAAW;AAAA,IAC5D;AAAA,EACF;AAEA,MAAI,aAAa;AACf;AAAA;AAAA,MAEE,qBAAC,SAAI,WAAW,GAAG,eAAe,SAAS,GACzC;AAAA,4BAAC,SAAM,SAAS,SAAU,iBAAM;AAAA,QAChC,oBAAC,SAAO,GAAG,YAAY,aAA0B;AAAA,SACnD;AAAA;AAAA,EAEJ;AACA,SAAO,oBAAC,SAAO,GAAG,YAAY,OAAc,WAAsB;AACpE;AA2SA,MAAM,aAAa;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA,GAAG,CAAC,YAAY,WAAW,SAAS,YAAY,UAAU,UAAU,cAAc,SAAS,EAAE;AAAA,IAC3F,CAAC,SAAS,UAAU,IAAI;AAAA,EAC1B;AACF,EACG,IAAI,CAAC,aAAa,GAAG,QAAQ,gEAAgE,EAC7F,KAAK,IAAI;AAIZ,SAAS,eAAe,MAA8C;AACpE,MAAI,CAAC,KAAM,QAAO;AAClB,aAAW,MAAM,KAAK,iBAA8B,UAAU,GAAG;AAC/D,QAAI,GAAG,QAAQ,mBAAmB,EAAG;AACrC,QAAI,cAAc,oBAAoB,GAAG,SAAS,WAAW,CAAC,GAAG,WAAW,GAAG,MAAM;AACnF,YAAM,QAAQ,GAAG,MAAM,SAAS,UAAU,GAAG,IAAI;AACjD,YAAM,UACJ,iBAAiB,iBAAiB,MAAM,KAAK,KAAK,EAAE,KAAK,CAAC,MAAM,aAAa,oBAAoB,EAAE,OAAO;AAC5G,UAAI,QAAS;AAAA,IACf;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AA8BO,SAAS,cAAc,OAA2B;AACvD,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,GAAG;AAAA,EACL,IAAI;AACJ,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AACtF,QAAM,eAAe,gBAAgB,QAAQ,eAAe;AAC5D,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,QAAQ,aAAa;AAC3B,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,cAAc,eAAe,IAAI,SAAS,KAAK;AAGtD,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,EAAE,SAAS,IAAI,IAAI,kBAAkB;AAC3C,QAAM,OAAO,QAAQ,QAAQ,KAAK;AAGlC,QAAM,WAAW,MAAM;AACvB,QAAM,iBAAiB,MAAM;AAC7B,QAAM,WAAW,MAAM;AAGvB,QAAM,QAAQ,MAAM;AACpB,QAAM,WAAW,MAAM;AACvB,QAAM,YAAY,MAAM;AACxB,QAAM,gBAAgB,OAAyB,IAAI;AAEnD,QAAM,UAAU,OAAuB,IAAI;AAG3C,QAAM,YAAY,OAAO,KAAK;AAE9B,QAAM,YAAY,OAAO,KAAK;AAK9B,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO;AACtB,gBAAY,KAAK;AAEjB,kBAAc,IAAI;AAClB,QAAI,CAAC,OAAO;AACV,kBAAY,EAAE;AACd,eAAS,EAAE;AACX,sBAAgB,KAAK;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,YAAY,OAAO,KAAK;AAC9B,YAAU,MAAM;AACd,UAAM,UAAU,UAAU,YAAY;AACtC,cAAU,UAAU;AACpB,UAAM,SAAS,UAAU;AACzB,cAAU,UAAU;AACpB,QAAI,CAAC,QAAS;AACd,QAAI,OAAO;AACT,UAAI,QAAQ;AAEV,SAAC,eAAe,QAAQ,OAAO,KAAK,cAAc,WAAW,SAAS,eAAe,QAAQ,IAAI,MAAM;AAAA,MACzG;AACA;AAAA,IACF;AACA,cAAU,UAAU;AAMpB,gBAAY,EAAE,QAAQ,SAAS,eAAe,KAAK,EAAE,CAAC;AAAA,EACxD,GAAG,CAAC,OAAO,OAAO,QAAQ,CAAC;AAQ3B,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,UAAM,UAAU,QAAQ,WAAW,CAAC;AACpC,YAAQ,UAAU;AAClB,QAAI,CAAC,QAAS;AACd,UAAM,OAAO,UAAU;AACvB,cAAU,UAAU;AACpB,QAAI,CAAC,QAAQ,CAAC,MAAO;AACrB,QAAI,SAAS,kBAAkB,QAAQ,SAAS,kBAAkB,SAAS,MAAM;AAC/E,eAAS,eAAe,SAAS,GAAG,MAAM;AAAA,IAC5C;AAAA,EACF,GAAG,CAAC,MAAM,OAAO,SAAS,CAAC;AAE3B,QAAM,WAAW,CAAC,SAAkB;AAClC,cAAU,UAAU;AACpB,QAAI,cAAc,OAAW,eAAc,IAAI;AAC/C,oBAAgB,IAAI;AAAA,EACtB;AAEA,QAAM,SAAS,WAAW,YAAY;AAGtC,QAAM,mBACJ,uBAAuB,OAAO,OAAO,cAAc,WAAW,kBAAkB,IAAI,qBAAqB;AAC3G,QAAM,kBAAkB,qBAAqB;AAC7C,QAAM,aAAa,CAAC,mBAAmB,aAAa;AACpD,QAAM,WAAW,WAAW,UAAa,aAAa,OAAO,QAAQ,WAAW;AAChF,QAAM,gBAAgB,CAAC,mBAAmB;AAC1C,QAAM,aAAa,WAAW,qBAAqB;AAEnD,QAAM,YAAY,SAAS,QAAQ,QAAQ,EAAE,KAAK,UAAU;AAC5D,QAAM,aAAa,cAAc,YAAY,iBAAiB,CAAC,cAAc,CAAC;AAG9E,QAAM,cAAkC,CAAC,gBACrC,OAAO,mBACP,CAAC,WACC,OAAO,OAAO,gBAAgB,aAC5B,OAAO,YAAY,UAAU,EAAE,IAC/B,OAAO,cACT,CAAC,aACC,OAAO,gBACP;AAIR,QAAM,gBAA2B,SAC7B,eACA,OACE,SACA,aACE,wBACA;AAER,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AAGjB,QAAI,CAAC,cAAc,OAAQ;AAC3B,UAAM,SAA8B;AAAA,MAClC,GAAI,WAAW,UAAa,EAAE,OAAO,gBAAgB,UAAU,QAAQ,MAAM,KAAK,EAAE;AAAA,MACpF,GAAI,mBAAmB,EAAE,SAAS;AAAA,MAClC,GAAI,mBAAmB,EAAE,cAAc,KAAc;AAAA,IACvD;AACA,cAAU,UAAU;AACpB,kBAAc,KAAK;AAGnB,QAAI,UAAU,OAAO,UAAU,MAAM,GAAG,MAAM,SAAS,KAAK,CAAC;AAAA,EAC/D;AAIA,QAAM,aAAa,cAAc,OAAO,SAAY;AACpD,QAAM,aAAa,WAAW,UAAU,IAAI,oBAAC,UAAK,MAAK,SAAS,sBAAW,IAAU;AACrF,QAAM,UAAU,kBAAkB,aAAa,WAAW,SAAY,WAAW;AAEjF,QAAM,aAAa,CAAC,UAClB,WAAW,SAAS,YAAY,QAAQ,EAAE,OAAO,WAAW,IAAI,CAAC;AACnE,QAAM,SAAS,MAAM,cAAc,IAAI;AAIvC,QAAM,aAAa,kBAAkB,gBAAgB,WAAW,SAAY,WAAW;AACvF,QAAM,SAAS,gBAAgB,CAAC,GAAG;AAAA,IAAI,CAAC,MAAM,UAC5C,OAAO,SAAS,WACZ,EAAE,KAAK,MAAM,MAAM,MAAmB,QAAQ,MAAM,IACpD,EAAE,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG,MAAM,KAAK,MAAM,QAAQ,QAAQ,KAAK,MAAM,EAAE;AAAA,EACtF;AAEA,QAAM,WAAW,SAAS,YAAY,iBAAiB;AAEvD,MAAI,CAAC,OAAO;AACV,UAAM,MACJ;AAAA,MAAC;AAAA;AAAA,QACC,IAAI;AAAA,QACJ,MAAK;AAAA,QACL,SAAS,SAAS,YAAY,cAAc;AAAA,QAC5C;AAAA,QACA,iBAAe,UAAU;AAAA,QACzB,oBAAkB,SAAS,WAAW;AAAA,QACtC,SAAS,MAAM;AACb,cAAI,CAAC,OAAQ,UAAS,IAAI;AAAA,QAC5B;AAAA,QACA,WAAU;AAAA,QAET,sBAAY,OAAO;AAAA;AAAA,IACtB;AAEF,WACE,qBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,aAAa,SAAS,GAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QASC,oBAAC,WAAQ,OAAO,cAAc,QAAM,MAClC,0CAAG,eAAI,GACT;AAAA,UAEA;AAAA,MAED,UACC,oBAAC,OAAE,IAAI,UAAU,WAAU,sBACxB,wBACH;AAAA,OAEJ;AAAA,EAEJ;AAEA,SACE,oBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,aAAa,SAAS,GACjD;AAAA,IAAC;AAAA;AAAA,MACC,WAAU;AAAA,MACV,oBAAkB,MAAM,SAAS,IAAI,GAAG,QAAQ,IAAI,cAAc,KAAK;AAAA,MACvE,aAAW,QAAQ;AAAA,MACnB,UAAU;AAAA,MACV,YAAU;AAAA,MAEV;AAAA,4BAAC,OAAE,IAAI,UAAU,WAAW,GAAG,uBAAuB,QAAQ,GAC3D,oBAAU,OAAO,QACpB;AAAA,QACC,MAAM,SAAS,KACd,oBAAC,QAAG,IAAI,gBAAgB,WAAU,mDAC/B,gBAAM,IAAI,CAAC,SACV,oBAAC,QAAkB,WAAW,KAAK,SAAS,gBAAgB,QACzD,eAAK,QADC,KAAK,GAEd,CACD,GACH;AAAA,QAID,aACC,oBAAC,SAAI,KAAK,SAAS,WAAU,aAC1B,UACH;AAAA,QAED,mBACC;AAAA,UAAC;AAAA;AAAA,YACC,KAAK,eAAe,gBAAgB,gBAAgB;AAAA,YACpD,OAAO;AAAA,YACP,SAAS;AAAA,YAGT,iBAAiB,CAAC,SAAS;AACzB,kBAAI,KAAM;AACV,8BAAgB,IAAI;AACpB,qBAAO;AAAA,YACT;AAAA;AAAA,QACF;AAAA,QAED,WAAW,UACV;AAAA,UAAC;AAAA;AAAA,YACC,KAAK,eAAe,WAAW,gBAAgB;AAAA,YAC/C,QAAQ;AAAA,YACR,OAAO;AAAA,YACP,OAAO;AAAA,YACP,eAAe,CAAC,SAAS;AACvB,uBAAS,IAAI;AACb,qBAAO;AAAA,YACT;AAAA,YACA;AAAA,YAGA,QAAQ,EAAE,QAAQ,OAAO,QAAQ,mBAAmB,OAAO,kBAAkB;AAAA,YAC5E,GAAG,WAAW,QAAQ;AAAA;AAAA,QACzB;AAAA,QAED,mBACC;AAAA,UAAC;AAAA;AAAA,YACC,KAAK,eAAe,aAAa,gBAAgB;AAAA,YACjD,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP;AAAA,YACA,eAAe,CAAC,SAAS;AACvB,0BAAY,IAAI;AAChB,qBAAO;AAAA,YACT;AAAA,YACC,GAAG,WAAW,UAAU;AAAA;AAAA,QAC3B;AAAA,QAED,YAAY,UAAU,eAAe,UACpC,oBAAC,OAAE,WAAW,GAAG,mBAAmB,MAAM,GAAI,sBAAW;AAAA,QAE3D,qBAAC,SAAI,WAAU,wBACb;AAAA,8BAAC,UAAO,IAAI,UAAU,MAAK,UAAS,SAAQ,SAAQ,UAAU,MAAM,SAAS,MAAM,SAAS,KAAK,GAC9F,iBAAO,QACV;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAI;AAAA,cACJ,MAAK;AAAA,cACL,SAAS,mBAAmB,SAAS,YAAY,YAAY;AAAA,cAC7D,UAAU,CAAC;AAAA,cAMX,gBAAgB;AAAA,cAChB,aAAW,QAAQ;AAAA,cAElB;AAAA,wBAAQ,oBAAC,WAAQ,OAAO,MAAM,WAAU,WAAU;AAAA,gBAClD,gBAAgB,OAAO;AAAA;AAAA;AAAA,UAC1B;AAAA,WACF;AAAA,QACC,UAAU,oBAAC,OAAE,WAAU,sBAAsB,wBAAa;AAAA;AAAA;AAAA,EAC7D,GACF;AAEJ;","names":[]}