@endora-commerce/admin-kit 0.0.0-stage → 0.100.0

package/dist/field-protection/FieldProtectionSummary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldProtectionSummary.d.ts","sourceRoot":"","sources":["../../src/field-protection/FieldProtectionSummary.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAKvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,sBAAsB,CAAC,EACrC,MAAM,EACN,SAAS,GACV,EAAE,2BAA2B,GAAG,SAAS,CAmEzC"}

package/dist/field-protection/FieldProtectionSummary.js

@@ -0,0 +1,18 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Boxes, Lock, ShieldCheck } from 'lucide-react';
+import { describeFieldPath } from './describe-path.js';
+import { useFieldProtection } from './use-field-protection.js';
+export function FieldProtectionSummary({ source, className, }) {
+    const protection = useFieldProtection(source);
+    if (!protection.available)
+        return null;
+    const t = source.t;
+    const synced = protection.lastSyncedAt ? new Date(protection.lastSyncedAt) : null;
+    return (_jsxs("div", { className: `rounded-md border border-border bg-muted/30 px-3 py-2 text-xs ${className ?? ''}`, children: [_jsxs("div", { className: "flex flex-wrap items-center gap-x-4 gap-y-1", children: [_jsxs("span", { className: "inline-flex items-center gap-1.5 font-medium", children: [_jsx(ShieldCheck, { size: 13, "aria-hidden": "true" }), t('fieldProtection.title'), _jsx("span", { className: "opacity-70", children: source.sourceLabel })] }), protection.integrationManaged ? (_jsx("span", { className: "text-muted-foreground", children: t('fieldProtection.integrationManaged') })) : null, protection.sourceKind ? (_jsxs("span", { className: "inline-flex items-center gap-1.5 text-muted-foreground", children: [_jsx(Boxes, { size: 13, "aria-hidden": "true" }), t(`fieldProtection.structure.${protection.sourceKind}`), protection.variantCount > 0 ? (_jsxs("span", { className: "tabular-nums", children: ["\u00B7", ' ', t('fieldProtection.structure.variantCount', { count: protection.variantCount })] })) : null] })) : null, synced && !Number.isNaN(synced.getTime()) ? (_jsxs("span", { className: "text-muted-foreground", children: [t('fieldProtection.lastSyncedAt'), ":", ' ', _jsx("time", { dateTime: protection.lastSyncedAt ?? undefined, children: synced.toLocaleString() })] })) : null] }), _jsx("p", { className: "mt-1 text-muted-foreground", children: t('fieldProtection.description') }), protection.protections.length === 0 ? (_jsx("p", { className: "mt-1 text-muted-foreground", children: t('fieldProtection.summary.none') })) : (_jsx("ul", { className: "mt-1 flex flex-wrap gap-1.5", children: protection.protections.map((entry) => (_jsxs("li", { className: "inline-flex items-center gap-1 rounded border border-border bg-background px-1.5 py-0.5", children: [_jsx(Lock, { size: 11, "aria-hidden": "true" }), entry.languageCode === null
+                            ? describeFieldPath(t, entry.fieldPath, protection.livePricePaths)
+                            : t('fieldProtection.summary.item.language', {
+                                field: describeFieldPath(t, entry.fieldPath, protection.livePricePaths),
+                                language: entry.languageCode,
+                            })] }, `${entry.fieldPath}|${entry.languageCode ?? ''}`))) }))] }));
+}
+//# sourceMappingURL=FieldProtectionSummary.js.map

package/dist/field-protection/FieldProtectionSummary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldProtectionSummary.js","sourceRoot":"","sources":["../../src/field-protection/FieldProtectionSummary.tsx"],"names":[],"mappings":";AAWA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAQ/D,MAAM,UAAU,sBAAsB,CAAC,EACrC,MAAM,EACN,SAAS,GACmB;IAC5B,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElF,OAAO,CACL,eACE,SAAS,EAAE,iEAAiE,SAAS,IAAI,EAAE,EAAE,aAE7F,eAAK,SAAS,EAAC,6CAA6C,aAC1D,gBAAM,SAAS,EAAC,8CAA8C,aAC5D,KAAC,WAAW,IAAC,IAAI,EAAE,EAAE,iBAAc,MAAM,GAAG,EAC3C,CAAC,CAAC,uBAAuB,CAAC,EAG3B,eAAM,SAAS,EAAC,YAAY,YAAE,MAAM,CAAC,WAAW,GAAQ,IACnD,EACN,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAC/B,eAAM,SAAS,EAAC,uBAAuB,YAAE,CAAC,CAAC,oCAAoC,CAAC,GAAQ,CACzF,CAAC,CAAC,CAAC,IAAI,EACP,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CACvB,gBAAM,SAAS,EAAC,wDAAwD,aACtE,KAAC,KAAK,IAAC,IAAI,EAAE,EAAE,iBAAc,MAAM,GAAG,EAIrC,CAAC,CAAC,6BAA6B,UAAU,CAAC,UAAU,EAAE,CAAC,EACvD,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAC7B,gBAAM,SAAS,EAAC,cAAc,uBAC1B,GAAG,EACJ,CAAC,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,IAC3E,CACR,CAAC,CAAC,CAAC,IAAI,IACH,CACR,CAAC,CAAC,CAAC,IAAI,EACP,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAC3C,gBAAM,SAAS,EAAC,uBAAuB,aACpC,CAAC,CAAC,8BAA8B,CAAC,OAAG,GAAG,EACxC,eAAM,QAAQ,EAAE,UAAU,CAAC,YAAY,IAAI,SAAS,YAAG,MAAM,CAAC,cAAc,EAAE,GAAQ,IACjF,CACR,CAAC,CAAC,CAAC,IAAI,IACJ,EACN,YAAG,SAAS,EAAC,4BAA4B,YAAE,CAAC,CAAC,6BAA6B,CAAC,GAAK,EAC/E,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACrC,YAAG,SAAS,EAAC,4BAA4B,YAAE,CAAC,CAAC,8BAA8B,CAAC,GAAK,CAClF,CAAC,CAAC,CAAC,CACF,aAAI,SAAS,EAAC,6BAA6B,YACxC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACrC,cAEE,SAAS,EAAC,yFAAyF,aAEnG,KAAC,IAAI,IAAC,IAAI,EAAE,EAAE,iBAAc,MAAM,GAAG,EACpC,KAAK,CAAC,YAAY,KAAK,IAAI;4BAC1B,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,cAAc,CAAC;4BAClE,CAAC,CAAC,CAAC,CAAC,uCAAuC,EAAE;gCACzC,KAAK,EAAE,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,cAAc,CAAC;gCACvE,QAAQ,EAAE,KAAK,CAAC,YAAY;6BAC7B,CAAC,KATD,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,CAUlD,CACN,CAAC,GACC,CACN,IACG,CACP,CAAC;AACJ,CAAC"}

package/dist/field-protection/FieldProtectionToggle.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The per-field "the import may not have this" control (feature 091, P4b).
+ *
+ * Three rules it follows, unchanged from the control this generalises:
+ *
+ *  - **Hidden unless the owner says a connection is enabled.** Not disabled,
+ *    not shown with an explanation: an installation with no such integration
+ *    has no such concept, and a permanently greyed checkbox beside every field
+ *    is noise.
+ *  - **Optimistic, and it puts the value back if the server refuses.** The
+ *    store owns that half; see `use-field-protection.ts`.
+ *  - **The write is the whole set**, because the owner's surface is a
+ *    declarative replace.
+ *
+ * **It renders the source label**, which the single-integration control did not
+ * have to. Two connected integrations put two controls beside one field, and
+ * *"Protect this field: Name"* twice over tells an operator nothing about which
+ * import each one holds off.
+ */
+import type { ReactNode } from 'react';
+import type { FieldProtectionSource } from './types.js';
+export interface FieldProtectionToggleProps {
+    /** The integration that owns this control — its translator, loader and saver. */
+    readonly source: FieldProtectionSource;
+    /**
+     * `name`, `description`, `categories`, `gallery`, `attachments`,
+     * `attributeValues.<key>` or `price.<priceListId>.<currencyCode>` — the
+     * grammar the owner's server validates.
+     */
+    readonly fieldPath: string;
+    /** Set it to protect one language and leave the others synchronising. */
+    readonly languageCode?: string | null;
+    readonly className?: string;
+}
+export declare function FieldProtectionToggle({ source, fieldPath, languageCode: language, className, }: FieldProtectionToggleProps): ReactNode;
+//# sourceMappingURL=FieldProtectionToggle.d.ts.map

package/dist/field-protection/FieldProtectionToggle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldProtectionToggle.d.ts","sourceRoot":"","sources":["../../src/field-protection/FieldProtectionToggle.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAMvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,MAAM,WAAW,0BAA0B;IACzC,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,SAAS,EACT,YAAY,EAAE,QAAQ,EACtB,SAAS,GACV,EAAE,0BAA0B,GAAG,SAAS,CAwDxC"}

package/dist/field-protection/FieldProtectionToggle.js

@@ -0,0 +1,30 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Lock } from 'lucide-react';
+import { Checkbox } from '../ui/checkbox.js';
+import { controlIdPrefix, describeFieldPath } from './describe-path.js';
+import { useFieldProtection } from './use-field-protection.js';
+export function FieldProtectionToggle({ source, fieldPath, languageCode: language, className, }) {
+    const protection = useFieldProtection(source);
+    const languageCode = language ?? null;
+    const checked = protection.isProtected(fieldPath, languageCode);
+    // A whole-field protection already covers this language, so its per-language
+    // control has nothing left to say — it renders checked and inert rather than
+    // offering an unprotect that would silently widen to the whole field.
+    const coveredByWholeField = languageCode !== null && protection.isProtected(fieldPath, null);
+    if (!protection.available)
+        return null;
+    const t = source.t;
+    const id = `${controlIdPrefix(source.scopeKey)}-${fieldPath}-${languageCode ?? 'all'}`.replace(/[^a-zA-Z0-9_-]/g, '-');
+    const field = describeFieldPath(t, fieldPath, protection.livePricePaths);
+    const label = languageCode === null
+        ? field
+        : t('fieldProtection.summary.item.language', { field, language: languageCode });
+    return (_jsxs("span", { className: `inline-flex items-center gap-1.5 text-xs text-muted-foreground ${className ?? ''}`, children: [_jsx(Checkbox, { id: id, checked: checked, disabled: protection.saving || coveredByWholeField, 
+                // The tooltip states what operating the control *does*, which changes
+                // with its state; the accessible name below states what it is about,
+                // which does not.
+                title: checked ? t('fieldProtection.toggle.unprotect') : t('fieldProtection.toggle.protect'), onChange: (event) => {
+                    void protection.setProtected(fieldPath, languageCode, event.target.checked);
+                } }), _jsxs("label", { htmlFor: id, className: "inline-flex cursor-pointer items-center gap-1", children: [_jsx(Lock, { size: 12, "aria-hidden": "true" }), _jsxs("span", { className: "sr-only", children: [t('fieldProtection.toggle.protect'), ": "] }), label, _jsx("span", { className: "opacity-70", children: source.sourceLabel })] }), protection.error ? (_jsx("span", { role: "status", className: "text-destructive", children: t('fieldProtection.saveFailed') })) : null] }));
+}
+//# sourceMappingURL=FieldProtectionToggle.js.map

package/dist/field-protection/FieldProtectionToggle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldProtectionToggle.js","sourceRoot":"","sources":["../../src/field-protection/FieldProtectionToggle.tsx"],"names":[],"mappings":";AAoBA,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAiB/D,MAAM,UAAU,qBAAqB,CAAC,EACpC,MAAM,EACN,SAAS,EACT,YAAY,EAAE,QAAQ,EACtB,SAAS,GACkB;IAC3B,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,QAAQ,IAAI,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChE,6EAA6E;IAC7E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,mBAAmB,GAAG,YAAY,KAAK,IAAI,IAAI,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAE7F,IAAI,CAAC,UAAU,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IACnB,MAAM,EAAE,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,SAAS,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC,OAAO,CAC5F,iBAAiB,EACjB,GAAG,CACJ,CAAC;IACF,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC;IACzE,MAAM,KAAK,GACT,YAAY,KAAK,IAAI;QACnB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,CAAC,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IAEpF,OAAO,CACL,gBACE,SAAS,EAAE,kEACT,SAAS,IAAI,EACf,EAAE,aAEF,KAAC,QAAQ,IACP,EAAE,EAAE,EAAE,EACN,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,UAAU,CAAC,MAAM,IAAI,mBAAmB;gBAClD,sEAAsE;gBACtE,qEAAqE;gBACrE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,EAC5F,QAAQ,EAAE,CAAC,KAAK,EAAQ,EAAE;oBACxB,KAAK,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9E,CAAC,GACD,EACF,iBAAO,OAAO,EAAE,EAAE,EAAE,SAAS,EAAC,+CAA+C,aAC3E,KAAC,IAAI,IAAC,IAAI,EAAE,EAAE,iBAAc,MAAM,GAAG,EAIrC,gBAAM,SAAS,EAAC,SAAS,aAAE,CAAC,CAAC,gCAAgC,CAAC,UAAU,EACvE,KAAK,EACN,eAAM,SAAS,EAAC,YAAY,YAAE,MAAM,CAAC,WAAW,GAAQ,IAClD,EACP,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAClB,eAAM,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,kBAAkB,YAC7C,CAAC,CAAC,4BAA4B,CAAC,GAC3B,CACR,CAAC,CAAC,CAAC,IAAI,IACH,CACR,CAAC;AACJ,CAAC"}

package/dist/field-protection/describe-path.d.ts

@@ -0,0 +1,27 @@
+/**
+ * A protection path as something an operator recognises, without opening the
+ * field (feature 091, P4b).
+ *
+ * The five bare paths below are the grammar **both** integration contracts
+ * already define, character for character, so they are the surface's rather
+ * than either owner's. Everything else is rendered through the caller's
+ * translator under a key the caller ships: an attribute key and a currency are
+ * data, and a path outside the grammar renders verbatim rather than as a
+ * missing key — a stale row is worth showing.
+ *
+ * A price path carries a price list identifier, which names nothing to a human.
+ * When the read said which lists are live the label uses the list's name; a
+ * protection on a list that no longer covers the record falls back to the
+ * currency alone.
+ */
+import type { FieldProtectionPricePath, Translate } from './types.js';
+export declare function describeFieldPath(t: Translate, fieldPath: string, livePricePaths?: readonly FieldProtectionPricePath[]): string;
+/**
+ * A DOM id prefix for one integration's controls on one record.
+ *
+ * Derived from `scopeKey` and from nothing else, so two integrations on one
+ * screen cannot collide: a duplicate `id` makes one `htmlFor` point at the
+ * other's checkbox, which is a silently wrong control rather than a broken one.
+ */
+export declare function controlIdPrefix(scopeKey: string): string;
+//# sourceMappingURL=describe-path.d.ts.map

package/dist/field-protection/describe-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe-path.d.ts","sourceRoot":"","sources":["../../src/field-protection/describe-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAKtE,wBAAgB,iBAAiB,CAC/B,CAAC,EAAE,SAAS,EACZ,SAAS,EAAE,MAAM,EACjB,cAAc,GAAE,SAAS,wBAAwB,EAAO,GACvD,MAAM,CAcR;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/field-protection/describe-path.js

@@ -0,0 +1,28 @@
+/** The paths every provider spells identically, and the only ones this file knows. */
+const SHARED_FIELD_PATHS = ['name', 'description', 'categories', 'gallery', 'attachments'];
+export function describeFieldPath(t, fieldPath, livePricePaths = []) {
+    if (fieldPath.startsWith('attributeValues.')) {
+        return t('fieldProtection.field.attribute', {
+            key: fieldPath.slice('attributeValues.'.length),
+        });
+    }
+    if (fieldPath.startsWith('price.')) {
+        const currency = fieldPath.split('.').pop() ?? '';
+        const live = livePricePaths.find((entry) => entry.fieldPath === fieldPath);
+        return live
+            ? t('fieldProtection.field.priceInList', { list: live.priceListName, currency })
+            : t('fieldProtection.field.price', { currency });
+    }
+    return SHARED_FIELD_PATHS.includes(fieldPath) ? t(`fieldProtection.field.${fieldPath}`) : fieldPath;
+}
+/**
+ * A DOM id prefix for one integration's controls on one record.
+ *
+ * Derived from `scopeKey` and from nothing else, so two integrations on one
+ * screen cannot collide: a duplicate `id` makes one `htmlFor` point at the
+ * other's checkbox, which is a silently wrong control rather than a broken one.
+ */
+export function controlIdPrefix(scopeKey) {
+    return scopeKey.replace(/[^a-zA-Z0-9_-]/g, '-');
+}
+//# sourceMappingURL=describe-path.js.map

package/dist/field-protection/describe-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe-path.js","sourceRoot":"","sources":["../../src/field-protection/describe-path.ts"],"names":[],"mappings":"AAkBA,sFAAsF;AACtF,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAE3F,MAAM,UAAU,iBAAiB,CAC/B,CAAY,EACZ,SAAiB,EACjB,iBAAsD,EAAE;IAExD,IAAI,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,CAAC,iCAAiC,EAAE;YAC1C,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAC3E,OAAO,IAAI;YACT,CAAC,CAAC,CAAC,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC;YAChF,CAAC,CAAC,CAAC,CAAC,6BAA6B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC"}

package/dist/field-protection/index.d.ts

@@ -0,0 +1,46 @@
+/**
+ * `@endora-commerce/admin-kit/field-protection` — the shared machinery behind
+ * "the import may not have this field" (feature 091, P4b;
+ * `contracts/admin-component-contribution.md` § P4b).
+ *
+ * ## Why it is published at all
+ *
+ * `pim_ergonode` shipped a 540-line control; `pim_pimcore`'s would have been a
+ * 559-line near-copy — **61 diff lines** once the vendor name is normalised.
+ * Converting them as two packages would have made that duplication *published*,
+ * and on a platform carrying both PIMs it would have put two whole
+ * implementations of one concept beside every product field. One kit surface,
+ * two thin contributors, one control per connected integration.
+ *
+ * ## Where the R6 line falls
+ *
+ * Everything here is generic: the per-scope store, the mount de-duplication,
+ * the optimistic write and its rollback, the rendering, and the five field
+ * paths both integration contracts spell identically. Nothing here names an
+ * integration, imports one's client, or branches on an id.
+ *
+ * What arrives **by prop, from the caller that owns it** is
+ * {@link FieldProtectionSource}: the loader, the saver, the translator (its
+ * i18n namespace) and its source label, plus the scope key that keeps two
+ * integrations' state apart. That is `admin-kit-surface.md` R6 as extended on
+ * 2026-08-31 — *the kit may receive behaviour from the caller that owns it* —
+ * and it is not P2's rejected "data by prop", because here the prop-supplier
+ * **is** the owner and passing behaviour in moves nothing.
+ *
+ * A separate subpath rather than `./components`, for `./zones`' reason: this
+ * one publishes a hook whose lifetime is a module-scoped store, and a consumer
+ * naming it in an import line is legible about what it is taking.
+ *
+ * The barrel is **explicit and holds no `export *`** (R2).
+ */
+export { FieldProtectionPricePanel } from './FieldProtectionPricePanel.js';
+export type { FieldProtectionPricePanelProps } from './FieldProtectionPricePanel.js';
+export { FieldProtectionSummary } from './FieldProtectionSummary.js';
+export type { FieldProtectionSummaryProps } from './FieldProtectionSummary.js';
+export { FieldProtectionToggle } from './FieldProtectionToggle.js';
+export type { FieldProtectionToggleProps } from './FieldProtectionToggle.js';
+export { controlIdPrefix, describeFieldPath } from './describe-path.js';
+export type { FieldProtectionEntry, FieldProtectionPricePath, FieldProtectionSource, FieldProtectionView, Translate, } from './types.js';
+export { useFieldProtection } from './use-field-protection.js';
+export type { FieldProtectionApi } from './use-field-protection.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/field-protection/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/field-protection/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,YAAY,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,YAAY,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACxE,YAAY,EACV,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACnB,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,YAAY,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/field-protection/index.js

@@ -0,0 +1,41 @@
+/**
+ * `@endora-commerce/admin-kit/field-protection` — the shared machinery behind
+ * "the import may not have this field" (feature 091, P4b;
+ * `contracts/admin-component-contribution.md` § P4b).
+ *
+ * ## Why it is published at all
+ *
+ * `pim_ergonode` shipped a 540-line control; `pim_pimcore`'s would have been a
+ * 559-line near-copy — **61 diff lines** once the vendor name is normalised.
+ * Converting them as two packages would have made that duplication *published*,
+ * and on a platform carrying both PIMs it would have put two whole
+ * implementations of one concept beside every product field. One kit surface,
+ * two thin contributors, one control per connected integration.
+ *
+ * ## Where the R6 line falls
+ *
+ * Everything here is generic: the per-scope store, the mount de-duplication,
+ * the optimistic write and its rollback, the rendering, and the five field
+ * paths both integration contracts spell identically. Nothing here names an
+ * integration, imports one's client, or branches on an id.
+ *
+ * What arrives **by prop, from the caller that owns it** is
+ * {@link FieldProtectionSource}: the loader, the saver, the translator (its
+ * i18n namespace) and its source label, plus the scope key that keeps two
+ * integrations' state apart. That is `admin-kit-surface.md` R6 as extended on
+ * 2026-08-31 — *the kit may receive behaviour from the caller that owns it* —
+ * and it is not P2's rejected "data by prop", because here the prop-supplier
+ * **is** the owner and passing behaviour in moves nothing.
+ *
+ * A separate subpath rather than `./components`, for `./zones`' reason: this
+ * one publishes a hook whose lifetime is a module-scoped store, and a consumer
+ * naming it in an import line is legible about what it is taking.
+ *
+ * The barrel is **explicit and holds no `export *`** (R2).
+ */
+export { FieldProtectionPricePanel } from './FieldProtectionPricePanel.js';
+export { FieldProtectionSummary } from './FieldProtectionSummary.js';
+export { FieldProtectionToggle } from './FieldProtectionToggle.js';
+export { controlIdPrefix, describeFieldPath } from './describe-path.js';
+export { useFieldProtection } from './use-field-protection.js';
+//# sourceMappingURL=index.js.map

package/dist/field-protection/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/field-protection/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAQxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/field-protection/types.d.ts

@@ -0,0 +1,93 @@
+/**
+ * The shapes the field-protection surface renders, and the descriptor the
+ * integration that owns them supplies (feature 091, P4b).
+ *
+ * **Nothing here names an integration.** The view below is the intersection of
+ * `ErgonodeProductProtectionsDto` and `PimcoreProductProtectionsDto` — the
+ * fields both contracts already carry, with the two Pimcore-only ones
+ * (`pimcoreId`, `connector`) deliberately absent, because a field only one
+ * provider has is a field this surface would have to branch on. Neither DTO is
+ * imported: a structural view is what lets a third provider arrive without this
+ * package learning its name, and both DTOs are assignable to it as they stand.
+ *
+ * `sourceKind` is a `string | null` rather than either provider's enum for the
+ * same reason. It is rendered through the caller's own translator, under the
+ * caller's own key, so the vocabulary stays where the vocabulary is defined:
+ * Ergonode ships three structural kinds and Pimcore six, and neither set is
+ * this package's to enumerate.
+ */
+import type { Translate } from '../lib/invoice-email-outcome.js';
+/**
+ * The kit's one name for a scope-bound translator, re-exported rather than
+ * re-declared (R5): `./lib` already publishes it, and a second name for one
+ * type is the second answer to one question a design system exists to prevent.
+ */
+export type { Translate };
+/**
+ * One protected field of one record.
+ *
+ * `languageCode: null` protects the whole field; a value protects one language
+ * and leaves the others synchronising.
+ */
+export interface FieldProtectionEntry {
+    readonly fieldPath: string;
+    readonly languageCode: string | null;
+}
+/** One price the integration could write here, named so an operator recognises it. */
+export interface FieldProtectionPricePath {
+    /** The ready-made `price.<priceListId>.<currencyCode>` the write expects. */
+    readonly fieldPath: string;
+    readonly priceListId: string;
+    readonly priceListName: string;
+    readonly currencyCode: string;
+}
+/** What one integration says about one record's protections. */
+export interface FieldProtectionView {
+    /** False hides every control: this installation has no such concept. */
+    readonly connectionEnabled: boolean;
+    readonly integrationManaged: boolean;
+    readonly lastSyncedAt: string | null;
+    /** The integration's own word for how it models this record, or `null`. */
+    readonly sourceKind: string | null;
+    readonly variantCount: number;
+    readonly livePricePaths: readonly FieldProtectionPricePath[];
+    readonly protections: readonly FieldProtectionEntry[];
+}
+/**
+ * Everything one integration hands this surface — the whole of R6's amendment
+ * in one object.
+ *
+ * `admin-kit-surface.md` R6, as extended on 2026-08-31: *a kit component may
+ * receive behaviour — a loader, a saver, a namespace — as a prop from the
+ * caller that owns it*, because where the caller **is** the owner, passing
+ * behaviour in moves nothing. Every field below is one of those, and there is
+ * no path, no id and no branch anywhere in this directory.
+ */
+export interface FieldProtectionSource {
+    /**
+     * The identity of *this integration's* protections for *this record*.
+     *
+     * It keys the store, so two integrations mounted on one product each get
+     * their own state and their own single request; and it prefixes the controls'
+     * DOM ids, so two checkboxes for one field carry distinct `id`/`htmlFor`
+     * pairs. One value for both because they answer one question — "whose control
+     * is this, on what" — and two would be two chances to make them disagree.
+     */
+    readonly scopeKey: string;
+    /**
+     * What the operator calls the integration: `Ergonode`, `Pimcore`.
+     *
+     * It is rendered beside every control, and it is why the duplication P4b
+     * removes was a *product* defect and not only a code one: with two
+     * integrations connected this surface renders two controls per field, and an
+     * operator has to be able to tell which import each one holds off.
+     */
+    readonly sourceLabel: string;
+    /** The owner's scope-bound translator — its namespace, by prop (R6). */
+    readonly t: Translate;
+    /** Read this record's protections. Rejecting means "nothing to offer here". */
+    readonly load: () => Promise<FieldProtectionView>;
+    /** Replace the whole set, declaratively, and answer with the new state. */
+    readonly save: (protections: readonly FieldProtectionEntry[]) => Promise<FieldProtectionView>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/field-protection/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/field-protection/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAEjE;;;;GAIG;AACH,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,sFAAsF;AACtF,MAAM,WAAW,wBAAwB;IACvC,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC7D,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACvD;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClD,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC/F"}

package/dist/field-protection/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/field-protection/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/field-protection/types.ts"],"names":[],"mappings":""}

package/dist/field-protection/use-field-protection.d.ts

@@ -0,0 +1,27 @@
+import type { FieldProtectionEntry, FieldProtectionPricePath, FieldProtectionSource } from './types.js';
+/** Everything a control needs to render and to operate itself. */
+export interface FieldProtectionApi {
+    /** True only once the owner has said a connection is enabled. */
+    readonly available: boolean;
+    readonly saving: boolean;
+    readonly error: string | null;
+    readonly integrationManaged: boolean;
+    readonly lastSyncedAt: string | null;
+    readonly sourceKind: string | null;
+    readonly variantCount: number;
+    readonly livePricePaths: readonly FieldProtectionPricePath[];
+    readonly protections: readonly FieldProtectionEntry[];
+    readonly isProtected: (fieldPath: string, languageCode?: string | null) => boolean;
+    readonly setProtected: (fieldPath: string, languageCode: string | null, next: boolean) => Promise<void>;
+}
+/**
+ * Subscribe to one integration's protections for one record.
+ *
+ * The effect depends on `scopeKey` alone: `load` and `save` are closures the
+ * contributor rebuilds every render, and depending on their identity would
+ * re-run the read on every parent render. They are read through a ref instead,
+ * so the newest pair is always the one that runs — which is the same guarantee
+ * a dependency array would give and none of the churn.
+ */
+export declare function useFieldProtection(source: FieldProtectionSource): FieldProtectionApi;
+//# sourceMappingURL=use-field-protection.d.ts.map

package/dist/field-protection/use-field-protection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-field-protection.d.ts","sourceRoot":"","sources":["../../src/field-protection/use-field-protection.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EAEtB,MAAM,YAAY,CAAC;AAkEpB,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC7D,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;IACnF,QAAQ,CAAC,YAAY,EAAE,CACrB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,IAAI,EAAE,OAAO,KACV,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,GAAG,kBAAkB,CAsEpF"}

package/dist/field-protection/use-field-protection.js

@@ -0,0 +1,149 @@
+/**
+ * The per-scope store, the mount de-duplication and the optimistic write with
+ * its rollback (feature 091, P4b) — the three things that were generic in the
+ * 540-line control `pim_ergonode` shipped and the 559-line near-copy
+ * `pim_pimcore` was going to.
+ *
+ * ## Why a module-scoped store and not a React context
+ *
+ * The controls belong **next to the fields**, which means a dozen of them
+ * render on one product, in four tabs of a screen the integration does not own.
+ * A context would have to wrap that screen's tree, and the wrap would be a
+ * larger and more invasive edit to somebody else's component than the controls
+ * themselves. As a zone contribution the point is sharper still: a contributor
+ * is mounted by the host, at twelve independent mount points, and has nowhere
+ * to put a provider above them.
+ *
+ * So the state lives here, keyed by `scopeKey`: every control on one record and
+ * one integration subscribes to the same entry, the first to mount triggers the
+ * single read, and the rest await the same promise. **Two integrations on one
+ * product are two keys**, which is what stops the pair sharing a view neither
+ * of them produced.
+ *
+ * ## What is *not* here
+ *
+ * No HTTP. `load` and `save` are the owner's functions, closing over the
+ * owner's own admin client (R6's amendment). The one policy this file does keep
+ * is what a rejected `load` means: not configured, not permitted, or
+ * unreachable all mean the same thing to a control that is an *addition* —
+ * there is nothing to offer here — and that is a property of the surface rather
+ * than of any one integration.
+ */
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+const INITIAL = { status: 'loading', view: null, saving: false, error: null };
+/**
+ * Keyed by `scopeKey`, so the controls of one integration on one record share
+ * one request. An entry is dropped when its last subscriber unmounts, which is
+ * what stops a long admin session accumulating one per record ever opened — and
+ * what makes a re-opened editor refetch rather than render yesterday's answer.
+ */
+const STORES = new Map();
+function storeFor(scopeKey) {
+    const existing = STORES.get(scopeKey);
+    if (existing)
+        return existing;
+    const created = { state: INITIAL, listeners: new Set(), loading: null };
+    STORES.set(scopeKey, created);
+    return created;
+}
+function publish(store, next) {
+    store.state = { ...store.state, ...next };
+    for (const listener of store.listeners)
+        listener();
+}
+function beginLoad(scopeKey, load) {
+    const store = storeFor(scopeKey);
+    if (store.loading)
+        return store.loading;
+    store.loading = (async () => {
+        try {
+            publish(store, { status: 'ready', view: await load(), error: null });
+        }
+        catch {
+            // Not configured, not permitted, or unreachable. All three mean the same
+            // thing to this surface: there is nothing to offer here. It is not a
+            // swallowed failure of the host's own work — the control is an addition,
+            // and an addition that cannot load renders nothing.
+            publish(store, { status: 'unavailable', view: null, error: null });
+        }
+        finally {
+            store.loading = null;
+        }
+    })();
+    return store.loading;
+}
+/** Equality on the primary key of a protection row. */
+function sameEntry(entry, fieldPath, languageCode) {
+    return entry.fieldPath === fieldPath && (entry.languageCode ?? null) === languageCode;
+}
+/**
+ * Subscribe to one integration's protections for one record.
+ *
+ * The effect depends on `scopeKey` alone: `load` and `save` are closures the
+ * contributor rebuilds every render, and depending on their identity would
+ * re-run the read on every parent render. They are read through a ref instead,
+ * so the newest pair is always the one that runs — which is the same guarantee
+ * a dependency array would give and none of the churn.
+ */
+export function useFieldProtection(source) {
+    const [, forceRender] = useState(0);
+    const behaviour = useRef(source);
+    behaviour.current = source;
+    const { scopeKey } = source;
+    useEffect(() => {
+        const store = storeFor(scopeKey);
+        const listener = () => forceRender((tick) => tick + 1);
+        store.listeners.add(listener);
+        if (store.state === INITIAL)
+            void beginLoad(scopeKey, () => behaviour.current.load());
+        return () => {
+            store.listeners.delete(listener);
+            if (store.listeners.size === 0)
+                STORES.delete(scopeKey);
+        };
+    }, [scopeKey]);
+    const state = STORES.get(scopeKey)?.state ?? INITIAL;
+    const isProtected = useCallback((fieldPath, languageCode) => {
+        const entries = state.view?.protections ?? [];
+        // A whole-field protection covers every language, so a per-language
+        // control renders as checked under it.
+        if (entries.some((entry) => sameEntry(entry, fieldPath, null)))
+            return true;
+        if (languageCode == null)
+            return false;
+        return entries.some((entry) => sameEntry(entry, fieldPath, languageCode));
+    }, [state.view]);
+    const setProtected = useCallback(async (fieldPath, languageCode, next) => {
+        const store = STORES.get(scopeKey);
+        if (!store?.state.view)
+            return;
+        const previous = store.state.view;
+        const desired = next
+            ? [...previous.protections, { fieldPath, languageCode }]
+            : previous.protections.filter((entry) => !sameEntry(entry, fieldPath, languageCode));
+        // Optimistic: the checkbox moves now. A control that waits for a round
+        // trip feels broken, and one that stays moved after a refusal lies — so
+        // the rollback below is not defensive, it is the other half of this.
+        publish(store, { view: { ...previous, protections: desired }, saving: true, error: null });
+        try {
+            publish(store, { view: await behaviour.current.save(desired), saving: false });
+        }
+        catch {
+            publish(store, { view: previous, saving: false, error: 'save_failed' });
+        }
+    }, [scopeKey]);
+    return useMemo(() => ({
+        available: state.status === 'ready' && state.view?.connectionEnabled === true,
+        saving: state.saving,
+        error: state.error,
+        integrationManaged: state.view?.integrationManaged === true,
+        lastSyncedAt: state.view?.lastSyncedAt ?? null,
+        sourceKind: state.view?.sourceKind ?? null,
+        variantCount: state.view?.variantCount ?? 0,
+        livePricePaths: state.view?.livePricePaths ?? [],
+        protections: state.view?.protections ?? [],
+        isProtected,
+        setProtected,
+    }), [state, isProtected, setProtected]);
+}
+//# sourceMappingURL=use-field-protection.js.map

package/dist/field-protection/use-field-protection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-field-protection.js","sourceRoot":"","sources":["../../src/field-protection/use-field-protection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAgB1E,MAAM,OAAO,GAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAQ/F;;;;;GAKG;AACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;AAElD,SAAS,QAAQ,CAAC,QAAgB;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzF,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,KAAsB,EAAE,IAA8B;IACrE,KAAK,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;IAC1C,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS;QAAE,QAAQ,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,IAAwC;IAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACxC,KAAK,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,qEAAqE;YACrE,yEAAyE;YACzE,oDAAoD;YACpD,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,uDAAuD;AACvD,SAAS,SAAS,CAChB,KAA2B,EAC3B,SAAiB,EACjB,YAA2B;IAE3B,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,YAAY,CAAC;AACxF,CAAC;AAsBD;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA6B;IAC9D,MAAM,CAAC,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,OAAO,GAAG,MAAM,CAAC;IAE3B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAE5B,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAS,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC7D,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO;YAAE,KAAK,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACtF,OAAO,GAAG,EAAE;YACV,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,OAAO,CAAC;IAErD,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,SAAiB,EAAE,YAA4B,EAAW,EAAE;QAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;QAC9C,oEAAoE;QACpE,uCAAuC;QACvC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5E,IAAI,YAAY,IAAI,IAAI;YAAE,OAAO,KAAK,CAAC;QACvC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5E,CAAC,EACD,CAAC,KAAK,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,SAAiB,EAAE,YAA2B,EAAE,IAAa,EAAiB,EAAE;QACrF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;YAAE,OAAO;QAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QAClC,MAAM,OAAO,GAAoC,IAAI;YACnD,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;YACxD,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QAEvF,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,CAAC,CACX,CAAC;IAEF,OAAO,OAAO,CACZ,GAAG,EAAE,CAAC,CAAC;QACL,SAAS,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,iBAAiB,KAAK,IAAI;QAC7E,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,kBAAkB,EAAE,KAAK,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI;QAC3D,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,IAAI,IAAI;QAC9C,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI;QAC1C,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,IAAI,CAAC;QAC3C,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE;QAChD,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;QAC1C,WAAW;QACX,YAAY;KACb,CAAC,EACF,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CACnC,CAAC;AACJ,CAAC"}

package/dist/i18n/TranslationProvider.d.ts

@@ -0,0 +1,27 @@
+import { type ReactNode } from 'react';
+import type { Bundle, SupportedAdminLanguage } from './types.js';
+export interface TranslationProviderProps {
+    /** Current language; flips when the user changes their preference. */
+    language: SupportedAdminLanguage;
+    /**
+     * Optional pre-supplied bundle. When provided the provider skips its
+     * boot fetch and uses this value (used by interaction tests and by
+     * the pre-auth login screen which has no auth to call the endpoint).
+     */
+    initialBundle?: Bundle;
+    /** Optional pre-supplied EN bundle for cross-language fallback (FR-013). */
+    initialFallbackBundle?: Bundle;
+    children: ReactNode;
+}
+interface TranslationContextValue {
+    language: SupportedAdminLanguage;
+    bundle: Bundle;
+    fallbackBundle: Bundle | undefined;
+    /** Translate a key under a module-scoped namespace (defaults to `core`). */
+    t(scope: string, key: string, params?: Record<string, string | number>): string;
+}
+export declare function TranslationProvider(props: TranslationProviderProps): ReactNode;
+/** Internal accessor — `useTranslation` is the public-facing wrapper. */
+export declare function useTranslationContext(): TranslationContextValue;
+export {};
+//# sourceMappingURL=TranslationProvider.d.ts.map

package/dist/i18n/TranslationProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TranslationProvider.d.ts","sourceRoot":"","sources":["../../src/i18n/TranslationProvider.tsx"],"names":[],"mappings":"AAaA,OAAO,EAQL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EACV,MAAM,EAEN,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAIpB,MAAM,WAAW,wBAAwB;IACvC,sEAAsE;IACtE,QAAQ,EAAE,sBAAsB,CAAC;IACjC;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,UAAU,uBAAuB;IAC/B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,4EAA4E;IAC5E,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;CACjF;AA8CD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,SAAS,CAmF9E;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,IAAI,uBAAuB,CAQ/D"}