@flanksource/clicky-ui 0.3.15 → 0.3.17

package/dist/components/SecretKeySelector.js

@@ -1,10 +1,16 @@
-import { jsxs, jsx } from "react/jsx-runtime";
+import { jsx, jsxs } from "react/jsx-runtime";
 import { useMemo, useState, useEffect, createElement } from "react";
 import { Vault, K8SServiceaccount, Helm, K8SConfigmap, K8SSecret } from "@flanksource/icons/mi";
 import { cn } from "../lib/utils.js";
 import { Combobox } from "./Combobox.js";
+import { IconMenuPicker } from "./icon-menu-picker.js";
 import { UiEdit } from "../icons/components/UiEdit.js";
 const DEFAULT_SOURCES = ["secret", "configmap", "value"];
+const SHRINKABLE_FIELD = "max-w-full min-w-0 shrink";
+const SOURCE_FIELD = `${SHRINKABLE_FIELD} basis-40 grow-0`;
+const RESOURCE_FIELD = `${SHRINKABLE_FIELD} basis-40 grow-0`;
+const KEY_FIELD = `${SHRINKABLE_FIELD} basis-72 grow`;
+const VALUE_FIELD = `${SHRINKABLE_FIELD} basis-64 grow`;
 function SecretKeySelector({
   value,
   onChange,
@@ -87,8 +93,11 @@ function SecretKeySelector({
     }
   };
   const setName = (name) => {
-    if (isServiceAccount) return onChange(name ? { kind: "serviceaccount", name } : void 0);
-    return onChange(name ? { kind: refKind, name, key: selectedKey } : void 0);
+    if (isServiceAccount)
+      return onChange(name ? { kind: "serviceaccount", name } : void 0);
+    return onChange(
+      name ? { kind: refKind, name, key: selectedKey } : void 0
+    );
   };
   const setKey = (key) => selectedName ? onChange({ kind: refKind, name: selectedName, key }) : void 0;
   const setLiteral = (v) => onChange({ kind: "value", value: v });
@@ -101,80 +110,144 @@ function SecretKeySelector({
     })),
     [sourceList]
   );
-  return /* @__PURE__ */ jsxs("div", { className: cn("flex flex-wrap items-center gap-2", className), children: [
-    /* @__PURE__ */ jsx("div", { className: "w-[9.5rem] shrink-0", children: /* @__PURE__ */ jsx(
-      Combobox,
-      {
-        ariaLabel: "Secret value source",
-        options: sourceOptions,
-        value: source,
-        onChange: (next) => setSource(next),
-        allowCustomValue: false,
-        required: true
-      }
-    ) }),
-    isLiteral ? /* @__PURE__ */ jsx(
-      TextField,
-      {
-        value: literalValue,
-        onChange: setLiteral,
-        placeholder: "Static value…",
-        ariaLabel: "Static value"
-      }
-    ) : isOnePassword ? /* @__PURE__ */ jsx(
-      TextField,
-      {
-        value: opRef,
-        onChange: setOpRef,
-        placeholder: "op://vault/item/field",
-        ariaLabel: "1Password reference",
-        mono: true
-      }
-    ) : isServiceAccount ? /* @__PURE__ */ jsx("div", { className: "min-w-0 flex-[1_1_16rem]", "data-slot": "secret-serviceaccount-field", children: /* @__PURE__ */ jsx(
-      Combobox,
-      {
-        options: nameOptions,
-        value: selectedName,
-        onChange: setName,
-        allowCustomValue: true,
-        loading: resourcesLoading,
-        invalid: nameInvalid,
-        placeholder: "Service account…"
-      }
-    ) }) : /* @__PURE__ */ jsxs(
-      "div",
-      {
-        className: "grid min-w-0 flex-[1_1_18rem] grid-cols-[minmax(8rem,11rem)_minmax(8rem,1fr)] items-center gap-2",
-        "data-slot": "secret-reference-fields",
-        children: [
-          /* @__PURE__ */ jsx("div", { className: "min-w-0", children: /* @__PURE__ */ jsx(
-            Combobox,
-            {
-              options: nameOptions,
-              value: selectedName,
-              onChange: setName,
-              allowCustomValue: true,
-              loading: resourcesLoading,
-              invalid: nameInvalid,
-              placeholder: `Select ${refKind}…`
-            }
-          ) }),
-          /* @__PURE__ */ jsx("div", { className: "min-w-0", children: /* @__PURE__ */ jsx(
-            Combobox,
-            {
-              options: keyOptions,
-              value: selectedKey,
-              onChange: setKey,
-              allowCustomValue: true,
-              loading: previewLoading,
-              invalid: keyInvalid,
-              placeholder: selectedName ? keyPlaceholder(refKind) : "—"
-            }
-          ) })
-        ]
-      }
-    )
-  ] });
+  const sourceMenuOptions = useMemo(
+    () => sourceList.map((kind) => ({
+      value: kind,
+      label: SOURCE_LABEL[kind],
+      icon: SOURCE_ICON[kind]
+    })),
+    [sourceList]
+  );
+  return /* @__PURE__ */ jsx(
+    "div",
+    {
+      "data-slot": "secret-key-selector",
+      className: cn("@container w-full min-w-0", className),
+      children: /* @__PURE__ */ jsxs(
+        "div",
+        {
+          className: "flex w-full max-w-full min-w-0 flex-nowrap items-center gap-2",
+          "data-slot": "secret-fields",
+          children: [
+            /* @__PURE__ */ jsx(
+              "div",
+              {
+                className: cn(SOURCE_FIELD, "@max-md:hidden"),
+                "data-slot": "secret-source-combobox",
+                children: /* @__PURE__ */ jsx(
+                  Combobox,
+                  {
+                    ariaLabel: "Secret value source",
+                    options: sourceOptions,
+                    value: source,
+                    onChange: (next) => setSource(next),
+                    allowCustomValue: false,
+                    required: true
+                  }
+                )
+              }
+            ),
+            /* @__PURE__ */ jsx(
+              "div",
+              {
+                className: "hidden shrink-0 @max-md:!block",
+                "data-slot": "secret-source-menu",
+                children: /* @__PURE__ */ jsx(
+                  IconMenuPicker,
+                  {
+                    value: source,
+                    onChange: setSource,
+                    options: sourceMenuOptions,
+                    ariaLabel: "Secret value source",
+                    triggerClassName: "size-control-h rounded-md border border-input bg-background"
+                  }
+                )
+              }
+            ),
+            isLiteral ? /* @__PURE__ */ jsx(
+              TextField,
+              {
+                value: literalValue,
+                onChange: setLiteral,
+                placeholder: "Static value…",
+                ariaLabel: "Static value"
+              }
+            ) : isOnePassword ? /* @__PURE__ */ jsx(
+              TextField,
+              {
+                value: opRef,
+                onChange: setOpRef,
+                placeholder: "op://vault/item/field",
+                ariaLabel: "1Password reference",
+                mono: true
+              }
+            ) : isServiceAccount ? /* @__PURE__ */ jsx(
+              "div",
+              {
+                className: VALUE_FIELD,
+                "data-slot": "secret-serviceaccount-field",
+                children: /* @__PURE__ */ jsx(
+                  Combobox,
+                  {
+                    options: nameOptions,
+                    value: selectedName,
+                    onChange: setName,
+                    allowCustomValue: true,
+                    loading: resourcesLoading,
+                    invalid: nameInvalid,
+                    placeholder: "Service account…"
+                  }
+                )
+              }
+            ) : /* @__PURE__ */ jsxs(
+              "div",
+              {
+                className: cn(
+                  "flex flex-nowrap items-center gap-2",
+                  SHRINKABLE_FIELD,
+                  "grow"
+                ),
+                "data-slot": "secret-reference-fields",
+                children: [
+                  /* @__PURE__ */ jsx(
+                    "div",
+                    {
+                      className: RESOURCE_FIELD,
+                      "data-slot": "secret-resource-field",
+                      children: /* @__PURE__ */ jsx(
+                        Combobox,
+                        {
+                          options: nameOptions,
+                          value: selectedName,
+                          onChange: setName,
+                          allowCustomValue: true,
+                          loading: resourcesLoading,
+                          invalid: nameInvalid,
+                          placeholder: `Select ${refKind}…`
+                        }
+                      )
+                    }
+                  ),
+                  /* @__PURE__ */ jsx("div", { className: KEY_FIELD, "data-slot": "secret-key-field", children: /* @__PURE__ */ jsx(
+                    Combobox,
+                    {
+                      options: keyOptions,
+                      value: selectedKey,
+                      onChange: setKey,
+                      allowCustomValue: true,
+                      loading: previewLoading,
+                      invalid: keyInvalid,
+                      placeholder: selectedName ? keyPlaceholder(refKind) : "—"
+                    }
+                  ) })
+                ]
+              }
+            )
+          ]
+        }
+      )
+    }
+  );
 }
 function TextField({
   value,
@@ -183,7 +256,7 @@ function TextField({
   ariaLabel,
   mono
 }) {
-  return /* @__PURE__ */ jsx("div", { className: "min-w-0 flex-[1_1_16rem]", "data-slot": "secret-value-fields", children: /* @__PURE__ */ jsx(
+  return /* @__PURE__ */ jsx("div", { className: VALUE_FIELD, "data-slot": "secret-value-fields", children: /* @__PURE__ */ jsx(
     "input",
     {
       type: "text",

package/dist/components/SecretKeySelector.js.map

@@ -1 +1 @@
-{"version":3,"file":"SecretKeySelector.js","sources":["../../src/components/SecretKeySelector.tsx"],"sourcesContent":["import { createElement, useEffect, useMemo, useState } from \"react\";\nimport {\n  K8SSecret,\n  K8SConfigmap,\n  Helm,\n  K8SServiceaccount,\n  Vault,\n} from \"@flanksource/icons/mi\";\nimport { type StaticIconComponent } from \"../data/Icon\";\nimport { cn } from \"../lib/utils\";\nimport { UiEdit } from \"../icons\";\nimport { Combobox, type ComboboxOption } from \"./Combobox\";\n\n// SecretKeySelector picks how a credential is sourced and lowers the choice into\n// a single reference string the consumer persists. It supports Kubernetes\n// Secrets and ConfigMaps (name + key), Helm release values (name + jsonpath\n// key), a service-account token (name only), a 1Password reference\n// (op://vault/item/field), and a static inline \"Value\". It is presentational:\n// it fetches nothing — the consumer supplies async `loadResources` /\n// `loadKeyPreview` (for keyed kinds) and optional `loadServiceAccounts` getters.\n\n/** Kinds that reference a named resource plus one of its keys. */\nexport type SecretKind = \"secret\" | \"configmap\" | \"helm\";\n\n/** Every source the picker can emit, including the non-keyed ones. */\nexport type SecretValueSource = SecretKind | \"serviceaccount\" | \"onepassword\" | \"value\";\n\n/** One key's mid-masked preview. `value` is already masked by the consumer. */\nexport type KeyPreview = { key: string; value: string };\n\n/**\n * The selector's value: a {kind,name,key} reference into a Secret / ConfigMap /\n * Helm release, a service-account token by name, a 1Password op:// reference, or\n * a static inline literal.\n */\nexport type SecretKeyValue =\n  | { kind: SecretKind; name: string; key: string }\n  | { kind: \"serviceaccount\"; name: string }\n  | { kind: \"onepassword\"; ref: string }\n  | { kind: \"value\"; value: string };\n\n/** A named secret/configmap/helm-release and its data key names (values never returned). */\nexport type SecretResource = { name: string; keys?: string[] };\n\nexport type SecretKeySelectorProps = {\n  value: SecretKeyValue | undefined;\n  onChange: (next: SecretKeyValue | undefined) => void;\n  /** Loads the named keyed kind's resources (name + data key names). */\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  /** Loads mid-masked previews for the named keyed resource's keys. */\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  /**\n   * Loads the service-account names (no keys) for the \"serviceaccount\" source.\n   * When omitted, that source's name field accepts freeform entry only.\n   */\n  loadServiceAccounts?: () => Promise<SecretResource[]>;\n  /**\n   * The sources offered in the picker, in order. Defaults to\n   * `[\"secret\", \"configmap\", \"value\"]` (or drops \"value\" when `allowLiteral` is\n   * false). Pass an explicit list to offer helm / serviceaccount / onepassword.\n   */\n  sources?: SecretValueSource[];\n  /**\n   * Shorthand honoured only when `sources` is not supplied: `false` drops the\n   * inline \"Value\" source, leaving Secret/ConfigMap. Ignored when `sources` is\n   * given.\n   */\n  allowLiteral?: boolean;\n  /**\n   * When true, a chosen name absent from the loaded resources, or a key absent\n   * from the chosen keyed resource's keys, is flagged invalid (once the load\n   * settles). The onepassword and literal sources are never strict-flagged.\n   */\n  strict?: boolean;\n  className?: string;\n};\n\nconst DEFAULT_SOURCES: SecretValueSource[] = [\"secret\", \"configmap\", \"value\"];\n\nexport function SecretKeySelector({\n  value,\n  onChange,\n  loadResources,\n  loadKeyPreview,\n  loadServiceAccounts,\n  sources,\n  allowLiteral = true,\n  strict = false,\n  className,\n}: SecretKeySelectorProps) {\n  const sourceList = useMemo<SecretValueSource[]>(\n    () => sources ?? (allowLiteral ? DEFAULT_SOURCES : [\"secret\", \"configmap\"]),\n    [sources, allowLiteral],\n  );\n\n  const source: SecretValueSource = value?.kind ?? sourceList[0] ?? \"secret\";\n  const isKeyed = source === \"secret\" || source === \"configmap\" || source === \"helm\";\n  const isServiceAccount = source === \"serviceaccount\";\n  const isOnePassword = source === \"onepassword\";\n  const isLiteral = source === \"value\";\n  // A keyed source's refKind drives the loaders; other sources default to \"secret\".\n  const refKind: SecretKind = isKeyed ? (source as SecretKind) : \"secret\";\n\n  const selectedName =\n    value && (value.kind === \"serviceaccount\" || isRefKind(value)) ? value.name : \"\";\n  const selectedKey = value && isRefKind(value) ? value.key : \"\";\n  const literalValue = value && value.kind === \"value\" ? value.value : \"\";\n  const opRef = value && value.kind === \"onepassword\" ? value.ref : \"\";\n\n  const [resources, setResources] = useState<SecretResource[]>([]);\n  const [resourcesLoading, setResourcesLoading] = useState(false);\n  const [previews, setPreviews] = useState<KeyPreview[]>([]);\n  const [previewLoading, setPreviewLoading] = useState(false);\n\n  // Load the name list for keyed kinds (secret/configmap/helm) and, when a\n  // loader is supplied, for the serviceaccount source. Other sources list nothing.\n  useEffect(() => {\n    const loader = isKeyed\n      ? () => loadResources(refKind)\n      : isServiceAccount && loadServiceAccounts\n        ? loadServiceAccounts\n        : null;\n    if (!loader) {\n      setResources([]);\n      return;\n    }\n    let cancelled = false;\n    setResourcesLoading(true);\n    loader()\n      .then((res) => !cancelled && setResources(res))\n      .finally(() => !cancelled && setResourcesLoading(false));\n    return () => {\n      cancelled = true;\n    };\n  }, [loadResources, loadServiceAccounts, refKind, isKeyed, isServiceAccount]);\n\n  useEffect(() => {\n    if (!isKeyed || !selectedName) {\n      setPreviews([]);\n      return;\n    }\n    let cancelled = false;\n    setPreviewLoading(true);\n    loadKeyPreview(refKind, selectedName)\n      .then((res) => !cancelled && setPreviews(res))\n      .catch(() => !cancelled && setPreviews([]))\n      .finally(() => !cancelled && setPreviewLoading(false));\n    return () => {\n      cancelled = true;\n    };\n  }, [loadKeyPreview, refKind, selectedName, isKeyed]);\n\n  const nameOptions = useMemo<ComboboxOption[]>(\n    () => resources.map((r) => ({ value: r.name, label: r.name })),\n    [resources],\n  );\n  const selectedResource = useMemo(\n    () => resources.find((r) => r.name === selectedName),\n    [resources, selectedName],\n  );\n  const keyOptions = useMemo(\n    () => buildKeyOptions(selectedResource?.keys ?? [], previews, selectedKey),\n    [selectedResource, selectedKey, previews],\n  );\n\n  // Strict validity: the name is invalid when it names no loaded resource; the\n  // key is invalid when, with a resolved resource, it isn't one of that\n  // resource's keys. Only names from a listed source are checked (a\n  // serviceaccount source with no loader lists nothing, so it never flags).\n  const listsNames = isKeyed || (isServiceAccount && !!loadServiceAccounts);\n  const nameInvalid = strict && listsNames && !!selectedName && !resourcesLoading && !selectedResource;\n  const keyInvalid =\n    strict &&\n    isKeyed &&\n    !!selectedKey &&\n    !!selectedResource &&\n    !resourcesLoading &&\n    !(selectedResource.keys ?? []).includes(selectedKey);\n\n  const setSource = (next: SecretValueSource) => {\n    switch (next) {\n      case \"value\":\n        return onChange({ kind: \"value\", value: \"\" });\n      case \"onepassword\":\n        return onChange({ kind: \"onepassword\", ref: \"\" });\n      case \"serviceaccount\":\n        return onChange({ kind: \"serviceaccount\", name: \"\" });\n      default:\n        return onChange({ kind: next, name: \"\", key: \"\" });\n    }\n  };\n  const setName = (name: string) => {\n    if (isServiceAccount) return onChange(name ? { kind: \"serviceaccount\", name } : undefined);\n    return onChange(name ? { kind: refKind, name, key: selectedKey } : undefined);\n  };\n  const setKey = (key: string) =>\n    selectedName ? onChange({ kind: refKind, name: selectedName, key }) : undefined;\n  const setLiteral = (v: string) => onChange({ kind: \"value\", value: v });\n  const setOpRef = (v: string) => onChange({ kind: \"onepassword\", ref: v });\n\n  const sourceOptions = useMemo<ComboboxOption[]>(\n    () =>\n      sourceList.map((k) => ({\n        value: k,\n        label: SOURCE_LABEL[k],\n        icon: createElement(SOURCE_ICON[k], { className: \"size-4\" }),\n      })),\n    [sourceList],\n  );\n\n  return (\n    <div className={cn(\"flex flex-wrap items-center gap-2\", className)}>\n      <div className=\"w-[9.5rem] shrink-0\">\n        <Combobox\n          ariaLabel=\"Secret value source\"\n          options={sourceOptions}\n          value={source}\n          onChange={(next) => setSource(next as SecretValueSource)}\n          allowCustomValue={false}\n          required\n        />\n      </div>\n      {isLiteral ? (\n        <TextField\n          value={literalValue}\n          onChange={setLiteral}\n          placeholder=\"Static value…\"\n          ariaLabel=\"Static value\"\n        />\n      ) : isOnePassword ? (\n        <TextField\n          value={opRef}\n          onChange={setOpRef}\n          placeholder=\"op://vault/item/field\"\n          ariaLabel=\"1Password reference\"\n          mono\n        />\n      ) : isServiceAccount ? (\n        <div className=\"min-w-0 flex-[1_1_16rem]\" data-slot=\"secret-serviceaccount-field\">\n          <Combobox\n            options={nameOptions}\n            value={selectedName}\n            onChange={setName}\n            allowCustomValue\n            loading={resourcesLoading}\n            invalid={nameInvalid}\n            placeholder=\"Service account…\"\n          />\n        </div>\n      ) : (\n        <div\n          className=\"grid min-w-0 flex-[1_1_18rem] grid-cols-[minmax(8rem,11rem)_minmax(8rem,1fr)] items-center gap-2\"\n          data-slot=\"secret-reference-fields\"\n        >\n          <div className=\"min-w-0\">\n            <Combobox\n              options={nameOptions}\n              value={selectedName}\n              onChange={setName}\n              allowCustomValue\n              loading={resourcesLoading}\n              invalid={nameInvalid}\n              placeholder={`Select ${refKind}…`}\n            />\n          </div>\n          <div className=\"min-w-0\">\n            <Combobox\n              options={keyOptions}\n              value={selectedKey}\n              onChange={setKey}\n              allowCustomValue\n              loading={previewLoading}\n              invalid={keyInvalid}\n              placeholder={selectedName ? keyPlaceholder(refKind) : \"—\"}\n            />\n          </div>\n        </div>\n      )}\n    </div>\n  );\n}\n\n// TextField is the shared single-input surface for the literal and 1Password\n// sources (no resource list backs either).\nfunction TextField({\n  value,\n  onChange,\n  placeholder,\n  ariaLabel,\n  mono,\n}: {\n  value: string;\n  onChange: (v: string) => void;\n  placeholder: string;\n  ariaLabel: string;\n  mono?: boolean;\n}) {\n  return (\n    <div className=\"min-w-0 flex-[1_1_16rem]\" data-slot=\"secret-value-fields\">\n      <input\n        type=\"text\"\n        value={value}\n        onChange={(e) => onChange(e.target.value)}\n        placeholder={placeholder}\n        aria-label={ariaLabel}\n        className={cn(\n          \"h-control-h w-full min-w-0 rounded border border-input bg-background px-control-px text-sm\",\n          \"outline-none focus-visible:ring-2 focus-visible:ring-ring\",\n          mono && \"font-mono\",\n        )}\n      />\n    </div>\n  );\n}\n\n// isRefKind narrows to the keyed variants that carry both a name and a key.\nfunction isRefKind(\n  v: SecretKeyValue,\n): v is { kind: SecretKind; name: string; key: string } {\n  return v.kind === \"secret\" || v.kind === \"configmap\" || v.kind === \"helm\";\n}\n\n// keyPlaceholder hints the key field: helm keys are jsonpath expressions into\n// the merged release values, the others are literal data keys.\nfunction keyPlaceholder(kind: SecretKind): string {\n  return kind === \"helm\" ? \"jsonpath…\" : \"Key…\";\n}\n\n// Each source's leading glyph. The flanksource FCs carry static metadata that\n// doesn't unify with ComponentType, so type the slot as a plain render function.\nconst SOURCE_ICON: Record<SecretValueSource, StaticIconComponent> = {\n  secret: K8SSecret,\n  configmap: K8SConfigmap,\n  helm: Helm,\n  serviceaccount: K8SServiceaccount,\n  onepassword: Vault,\n  value: UiEdit,\n};\n\nconst SOURCE_LABEL: Record<SecretValueSource, string> = {\n  secret: \"Secret\",\n  configmap: \"ConfigMap\",\n  helm: \"Helm\",\n  serviceaccount: \"Service Account\",\n  onepassword: \"1Password\",\n  value: \"Value\",\n};\n\n// buildKeyOptions labels each key with its mid-masked preview value when one is\n// available. A selected key absent from the list is pinned so the selection\n// stays visible.\nfunction buildKeyOptions(\n  keys: string[],\n  previews: KeyPreview[],\n  selectedKey: string,\n): ComboboxOption[] {\n  const masked = new Map(previews.map((p) => [p.key, p.value]));\n  const base = keys.map((k) => ({\n    value: k,\n    label: masked.has(k) ? `${k} — ${masked.get(k)}` : k,\n  }));\n  if (selectedKey && !base.some((o) => o.value === selectedKey)) {\n    return [{ value: selectedKey, label: selectedKey }, ...base];\n  }\n  return base;\n}\n"],"names":[],"mappings":";;;;;;AA6EA,MAAM,kBAAuC,CAAC,UAAU,aAAa,OAAO;AAErE,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe;AAAA,EACf,SAAS;AAAA,EACT;AACF,GAA2B;AACzB,QAAM,aAAa;AAAA,IACjB,MAAM,YAAY,eAAe,kBAAkB,CAAC,UAAU,WAAW;AAAA,IACzE,CAAC,SAAS,YAAY;AAAA,EAAA;AAGxB,QAAM,UAA4B,+BAAO,SAAQ,WAAW,CAAC,KAAK;AAClE,QAAM,UAAU,WAAW,YAAY,WAAW,eAAe,WAAW;AAC5E,QAAM,mBAAmB,WAAW;AACpC,QAAM,gBAAgB,WAAW;AACjC,QAAM,YAAY,WAAW;AAE7B,QAAM,UAAsB,UAAW,SAAwB;AAE/D,QAAM,eACJ,UAAU,MAAM,SAAS,oBAAoB,UAAU,KAAK,KAAK,MAAM,OAAO;AAChF,QAAM,cAAc,SAAS,UAAU,KAAK,IAAI,MAAM,MAAM;AAC5D,QAAM,eAAe,SAAS,MAAM,SAAS,UAAU,MAAM,QAAQ;AACrE,QAAM,QAAQ,SAAS,MAAM,SAAS,gBAAgB,MAAM,MAAM;AAElE,QAAM,CAAC,WAAW,YAAY,IAAI,SAA2B,CAAA,CAAE;AAC/D,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,SAAS,KAAK;AAC9D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAuB,CAAA,CAAE;AACzD,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,SAAS,KAAK;AAI1D,YAAU,MAAM;AACd,UAAM,SAAS,UACX,MAAM,cAAc,OAAO,IAC3B,oBAAoB,sBAClB,sBACA;AACN,QAAI,CAAC,QAAQ;AACX,mBAAa,CAAA,CAAE;AACf;AAAA,IACF;AACA,QAAI,YAAY;AAChB,wBAAoB,IAAI;AACxB,WAAA,EACG,KAAK,CAAC,QAAQ,CAAC,aAAa,aAAa,GAAG,CAAC,EAC7C,QAAQ,MAAM,CAAC,aAAa,oBAAoB,KAAK,CAAC;AACzD,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,eAAe,qBAAqB,SAAS,SAAS,gBAAgB,CAAC;AAE3E,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,CAAC,cAAc;AAC7B,kBAAY,CAAA,CAAE;AACd;AAAA,IACF;AACA,QAAI,YAAY;AAChB,sBAAkB,IAAI;AACtB,mBAAe,SAAS,YAAY,EACjC,KAAK,CAAC,QAAQ,CAAC,aAAa,YAAY,GAAG,CAAC,EAC5C,MAAM,MAAM,CAAC,aAAa,YAAY,CAAA,CAAE,CAAC,EACzC,QAAQ,MAAM,CAAC,aAAa,kBAAkB,KAAK,CAAC;AACvD,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,gBAAgB,SAAS,cAAc,OAAO,CAAC;AAEnD,QAAM,cAAc;AAAA,IAClB,MAAM,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,KAAA,EAAO;AAAA,IAC7D,CAAC,SAAS;AAAA,EAAA;AAEZ,QAAM,mBAAmB;AAAA,IACvB,MAAM,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,YAAY;AAAA,IACnD,CAAC,WAAW,YAAY;AAAA,EAAA;AAE1B,QAAM,aAAa;AAAA,IACjB,MAAM,iBAAgB,qDAAkB,SAAQ,CAAA,GAAI,UAAU,WAAW;AAAA,IACzE,CAAC,kBAAkB,aAAa,QAAQ;AAAA,EAAA;AAO1C,QAAM,aAAa,WAAY,oBAAoB,CAAC,CAAC;AACrD,QAAM,cAAc,UAAU,cAAc,CAAC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;AACpF,QAAM,aACJ,UACA,WACA,CAAC,CAAC,eACF,CAAC,CAAC,oBACF,CAAC,oBACD,EAAE,iBAAiB,QAAQ,CAAA,GAAI,SAAS,WAAW;AAErD,QAAM,YAAY,CAAC,SAA4B;AAC7C,YAAQ,MAAA;AAAA,MACN,KAAK;AACH,eAAO,SAAS,EAAE,MAAM,SAAS,OAAO,IAAI;AAAA,MAC9C,KAAK;AACH,eAAO,SAAS,EAAE,MAAM,eAAe,KAAK,IAAI;AAAA,MAClD,KAAK;AACH,eAAO,SAAS,EAAE,MAAM,kBAAkB,MAAM,IAAI;AAAA,MACtD;AACE,eAAO,SAAS,EAAE,MAAM,MAAM,MAAM,IAAI,KAAK,IAAI;AAAA,IAAA;AAAA,EAEvD;AACA,QAAM,UAAU,CAAC,SAAiB;AAChC,QAAI,yBAAyB,SAAS,OAAO,EAAE,MAAM,kBAAkB,KAAA,IAAS,MAAS;AACzF,WAAO,SAAS,OAAO,EAAE,MAAM,SAAS,MAAM,KAAK,YAAA,IAAgB,MAAS;AAAA,EAC9E;AACA,QAAM,SAAS,CAAC,QACd,eAAe,SAAS,EAAE,MAAM,SAAS,MAAM,cAAc,IAAA,CAAK,IAAI;AACxE,QAAM,aAAa,CAAC,MAAc,SAAS,EAAE,MAAM,SAAS,OAAO,GAAG;AACtE,QAAM,WAAW,CAAC,MAAc,SAAS,EAAE,MAAM,eAAe,KAAK,GAAG;AAExE,QAAM,gBAAgB;AAAA,IACpB,MACE,WAAW,IAAI,CAAC,OAAO;AAAA,MACrB,OAAO;AAAA,MACP,OAAO,aAAa,CAAC;AAAA,MACrB,MAAM,cAAc,YAAY,CAAC,GAAG,EAAE,WAAW,UAAU;AAAA,IAAA,EAC3D;AAAA,IACJ,CAAC,UAAU;AAAA,EAAA;AAGb,8BACG,OAAA,EAAI,WAAW,GAAG,qCAAqC,SAAS,GAC/D,UAAA;AAAA,IAAA,oBAAC,OAAA,EAAI,WAAU,uBACb,UAAA;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,WAAU;AAAA,QACV,SAAS;AAAA,QACT,OAAO;AAAA,QACP,UAAU,CAAC,SAAS,UAAU,IAAyB;AAAA,QACvD,kBAAkB;AAAA,QAClB,UAAQ;AAAA,MAAA;AAAA,IAAA,GAEZ;AAAA,IACC,YACC;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,aAAY;AAAA,QACZ,WAAU;AAAA,MAAA;AAAA,IAAA,IAEV,gBACF;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,aAAY;AAAA,QACZ,WAAU;AAAA,QACV,MAAI;AAAA,MAAA;AAAA,IAAA,IAEJ,mBACF,oBAAC,SAAI,WAAU,4BAA2B,aAAU,+BAClD,UAAA;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,SAAS;AAAA,QACT,OAAO;AAAA,QACP,UAAU;AAAA,QACV,kBAAgB;AAAA,QAChB,SAAS;AAAA,QACT,SAAS;AAAA,QACT,aAAY;AAAA,MAAA;AAAA,IAAA,GAEhB,IAEA;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,WAAU;AAAA,QACV,aAAU;AAAA,QAEV,UAAA;AAAA,UAAA,oBAAC,OAAA,EAAI,WAAU,WACb,UAAA;AAAA,YAAC;AAAA,YAAA;AAAA,cACC,SAAS;AAAA,cACT,OAAO;AAAA,cACP,UAAU;AAAA,cACV,kBAAgB;AAAA,cAChB,SAAS;AAAA,cACT,SAAS;AAAA,cACT,aAAa,UAAU,OAAO;AAAA,YAAA;AAAA,UAAA,GAElC;AAAA,UACA,oBAAC,OAAA,EAAI,WAAU,WACb,UAAA;AAAA,YAAC;AAAA,YAAA;AAAA,cACC,SAAS;AAAA,cACT,OAAO;AAAA,cACP,UAAU;AAAA,cACV,kBAAgB;AAAA,cAChB,SAAS;AAAA,cACT,SAAS;AAAA,cACT,aAAa,eAAe,eAAe,OAAO,IAAI;AAAA,YAAA;AAAA,UAAA,EACxD,CACF;AAAA,QAAA;AAAA,MAAA;AAAA,IAAA;AAAA,EACF,GAEJ;AAEJ;AAIA,SAAS,UAAU;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMG;AACD,SACE,oBAAC,OAAA,EAAI,WAAU,4BAA2B,aAAU,uBAClD,UAAA;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,MAAK;AAAA,MACL;AAAA,MACA,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,MACxC;AAAA,MACA,cAAY;AAAA,MACZ,WAAW;AAAA,QACT;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MAAA;AAAA,IACV;AAAA,EAAA,GAEJ;AAEJ;AAGA,SAAS,UACP,GACsD;AACtD,SAAO,EAAE,SAAS,YAAY,EAAE,SAAS,eAAe,EAAE,SAAS;AACrE;AAIA,SAAS,eAAe,MAA0B;AAChD,SAAO,SAAS,SAAS,cAAc;AACzC;AAIA,MAAM,cAA8D;AAAA,EAClE,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,OAAO;AACT;AAEA,MAAM,eAAkD;AAAA,EACtD,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,OAAO;AACT;AAKA,SAAS,gBACP,MACA,UACA,aACkB;AAClB,QAAM,SAAS,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5D,QAAM,OAAO,KAAK,IAAI,CAAC,OAAO;AAAA,IAC5B,OAAO;AAAA,IACP,OAAO,OAAO,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC,KAAK;AAAA,EAAA,EACnD;AACF,MAAI,eAAe,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,UAAU,WAAW,GAAG;AAC7D,WAAO,CAAC,EAAE,OAAO,aAAa,OAAO,YAAA,GAAe,GAAG,IAAI;AAAA,EAC7D;AACA,SAAO;AACT;"}
+{"version":3,"file":"SecretKeySelector.js","sources":["../../src/components/SecretKeySelector.tsx"],"sourcesContent":["import { createElement, useEffect, useMemo, useState } from \"react\";\nimport {\n  K8SSecret,\n  K8SConfigmap,\n  Helm,\n  K8SServiceaccount,\n  Vault,\n} from \"@flanksource/icons/mi\";\nimport { type StaticIconComponent } from \"../data/Icon\";\nimport { cn } from \"../lib/utils\";\nimport { UiEdit } from \"../icons\";\nimport { Combobox, type ComboboxOption } from \"./Combobox\";\nimport { IconMenuPicker, type IconMenuOption } from \"./icon-menu-picker\";\n\n// SecretKeySelector picks how a credential is sourced and lowers the choice into\n// a single reference string the consumer persists. It supports Kubernetes\n// Secrets and ConfigMaps (name + key), Helm release values (name + jsonpath\n// key), a service-account token (name only), a 1Password reference\n// (op://vault/item/field), and a static inline \"Value\". It is presentational:\n// it fetches nothing — the consumer supplies async `loadResources` /\n// `loadKeyPreview` (for keyed kinds) and optional `loadServiceAccounts` getters.\n\n/** Kinds that reference a named resource plus one of its keys. */\nexport type SecretKind = \"secret\" | \"configmap\" | \"helm\";\n\n/** Every source the picker can emit, including the non-keyed ones. */\nexport type SecretValueSource =\n  | SecretKind\n  | \"serviceaccount\"\n  | \"onepassword\"\n  | \"value\";\n\n/** One key's mid-masked preview. `value` is already masked by the consumer. */\nexport type KeyPreview = { key: string; value: string };\n\n/**\n * The selector's value: a {kind,name,key} reference into a Secret / ConfigMap /\n * Helm release, a service-account token by name, a 1Password op:// reference, or\n * a static inline literal.\n */\nexport type SecretKeyValue =\n  | { kind: SecretKind; name: string; key: string }\n  | { kind: \"serviceaccount\"; name: string }\n  | { kind: \"onepassword\"; ref: string }\n  | { kind: \"value\"; value: string };\n\n/** A named secret/configmap/helm-release and its data key names (values never returned). */\nexport type SecretResource = { name: string; keys?: string[] };\n\nexport type SecretKeySelectorProps = {\n  value: SecretKeyValue | undefined;\n  onChange: (next: SecretKeyValue | undefined) => void;\n  /** Loads the named keyed kind's resources (name + data key names). */\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  /** Loads mid-masked previews for the named keyed resource's keys. */\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  /**\n   * Loads the service-account names (no keys) for the \"serviceaccount\" source.\n   * When omitted, that source's name field accepts freeform entry only.\n   */\n  loadServiceAccounts?: () => Promise<SecretResource[]>;\n  /**\n   * The sources offered in the picker, in order. Defaults to\n   * `[\"secret\", \"configmap\", \"value\"]` (or drops \"value\" when `allowLiteral` is\n   * false). Pass an explicit list to offer helm / serviceaccount / onepassword.\n   */\n  sources?: SecretValueSource[];\n  /**\n   * Shorthand honoured only when `sources` is not supplied: `false` drops the\n   * inline \"Value\" source, leaving Secret/ConfigMap. Ignored when `sources` is\n   * given.\n   */\n  allowLiteral?: boolean;\n  /**\n   * When true, a chosen name absent from the loaded resources, or a key absent\n   * from the chosen keyed resource's keys, is flagged invalid (once the load\n   * settles). The onepassword and literal sources are never strict-flagged.\n   */\n  strict?: boolean;\n  className?: string;\n};\n\nconst DEFAULT_SOURCES: SecretValueSource[] = [\"secret\", \"configmap\", \"value\"];\n\nconst SHRINKABLE_FIELD = \"max-w-full min-w-0 shrink\";\nconst SOURCE_FIELD = `${SHRINKABLE_FIELD} basis-40 grow-0`;\nconst RESOURCE_FIELD = `${SHRINKABLE_FIELD} basis-40 grow-0`;\nconst KEY_FIELD = `${SHRINKABLE_FIELD} basis-72 grow`;\nconst VALUE_FIELD = `${SHRINKABLE_FIELD} basis-64 grow`;\n\nexport function SecretKeySelector({\n  value,\n  onChange,\n  loadResources,\n  loadKeyPreview,\n  loadServiceAccounts,\n  sources,\n  allowLiteral = true,\n  strict = false,\n  className,\n}: SecretKeySelectorProps) {\n  const sourceList = useMemo<SecretValueSource[]>(\n    () => sources ?? (allowLiteral ? DEFAULT_SOURCES : [\"secret\", \"configmap\"]),\n    [sources, allowLiteral],\n  );\n\n  const source: SecretValueSource = value?.kind ?? sourceList[0] ?? \"secret\";\n  const isKeyed =\n    source === \"secret\" || source === \"configmap\" || source === \"helm\";\n  const isServiceAccount = source === \"serviceaccount\";\n  const isOnePassword = source === \"onepassword\";\n  const isLiteral = source === \"value\";\n  // A keyed source's refKind drives the loaders; other sources default to \"secret\".\n  const refKind: SecretKind = isKeyed ? (source as SecretKind) : \"secret\";\n\n  const selectedName =\n    value && (value.kind === \"serviceaccount\" || isRefKind(value))\n      ? value.name\n      : \"\";\n  const selectedKey = value && isRefKind(value) ? value.key : \"\";\n  const literalValue = value && value.kind === \"value\" ? value.value : \"\";\n  const opRef = value && value.kind === \"onepassword\" ? value.ref : \"\";\n\n  const [resources, setResources] = useState<SecretResource[]>([]);\n  const [resourcesLoading, setResourcesLoading] = useState(false);\n  const [previews, setPreviews] = useState<KeyPreview[]>([]);\n  const [previewLoading, setPreviewLoading] = useState(false);\n\n  // Load the name list for keyed kinds (secret/configmap/helm) and, when a\n  // loader is supplied, for the serviceaccount source. Other sources list nothing.\n  useEffect(() => {\n    const loader = isKeyed\n      ? () => loadResources(refKind)\n      : isServiceAccount && loadServiceAccounts\n        ? loadServiceAccounts\n        : null;\n    if (!loader) {\n      setResources([]);\n      return;\n    }\n    let cancelled = false;\n    setResourcesLoading(true);\n    loader()\n      .then((res) => !cancelled && setResources(res))\n      .finally(() => !cancelled && setResourcesLoading(false));\n    return () => {\n      cancelled = true;\n    };\n  }, [loadResources, loadServiceAccounts, refKind, isKeyed, isServiceAccount]);\n\n  useEffect(() => {\n    if (!isKeyed || !selectedName) {\n      setPreviews([]);\n      return;\n    }\n    let cancelled = false;\n    setPreviewLoading(true);\n    loadKeyPreview(refKind, selectedName)\n      .then((res) => !cancelled && setPreviews(res))\n      .catch(() => !cancelled && setPreviews([]))\n      .finally(() => !cancelled && setPreviewLoading(false));\n    return () => {\n      cancelled = true;\n    };\n  }, [loadKeyPreview, refKind, selectedName, isKeyed]);\n\n  const nameOptions = useMemo<ComboboxOption[]>(\n    () => resources.map((r) => ({ value: r.name, label: r.name })),\n    [resources],\n  );\n  const selectedResource = useMemo(\n    () => resources.find((r) => r.name === selectedName),\n    [resources, selectedName],\n  );\n  const keyOptions = useMemo(\n    () => buildKeyOptions(selectedResource?.keys ?? [], previews, selectedKey),\n    [selectedResource, selectedKey, previews],\n  );\n\n  // Strict validity: the name is invalid when it names no loaded resource; the\n  // key is invalid when, with a resolved resource, it isn't one of that\n  // resource's keys. Only names from a listed source are checked (a\n  // serviceaccount source with no loader lists nothing, so it never flags).\n  const listsNames = isKeyed || (isServiceAccount && !!loadServiceAccounts);\n  const nameInvalid =\n    strict &&\n    listsNames &&\n    !!selectedName &&\n    !resourcesLoading &&\n    !selectedResource;\n  const keyInvalid =\n    strict &&\n    isKeyed &&\n    !!selectedKey &&\n    !!selectedResource &&\n    !resourcesLoading &&\n    !(selectedResource.keys ?? []).includes(selectedKey);\n\n  const setSource = (next: SecretValueSource) => {\n    switch (next) {\n      case \"value\":\n        return onChange({ kind: \"value\", value: \"\" });\n      case \"onepassword\":\n        return onChange({ kind: \"onepassword\", ref: \"\" });\n      case \"serviceaccount\":\n        return onChange({ kind: \"serviceaccount\", name: \"\" });\n      default:\n        return onChange({ kind: next, name: \"\", key: \"\" });\n    }\n  };\n  const setName = (name: string) => {\n    if (isServiceAccount)\n      return onChange(name ? { kind: \"serviceaccount\", name } : undefined);\n    return onChange(\n      name ? { kind: refKind, name, key: selectedKey } : undefined,\n    );\n  };\n  const setKey = (key: string) =>\n    selectedName\n      ? onChange({ kind: refKind, name: selectedName, key })\n      : undefined;\n  const setLiteral = (v: string) => onChange({ kind: \"value\", value: v });\n  const setOpRef = (v: string) => onChange({ kind: \"onepassword\", ref: v });\n\n  const sourceOptions = useMemo<ComboboxOption[]>(\n    () =>\n      sourceList.map((k) => ({\n        value: k,\n        label: SOURCE_LABEL[k],\n        icon: createElement(SOURCE_ICON[k], { className: \"size-4\" }),\n      })),\n    [sourceList],\n  );\n  const sourceMenuOptions = useMemo<IconMenuOption<SecretValueSource>[]>(\n    () =>\n      sourceList.map((kind) => ({\n        value: kind,\n        label: SOURCE_LABEL[kind],\n        icon: SOURCE_ICON[kind],\n      })),\n    [sourceList],\n  );\n\n  return (\n    <div\n      data-slot=\"secret-key-selector\"\n      className={cn(\"@container w-full min-w-0\", className)}\n    >\n      <div\n        className=\"flex w-full max-w-full min-w-0 flex-nowrap items-center gap-2\"\n        data-slot=\"secret-fields\"\n      >\n        <div\n          className={cn(SOURCE_FIELD, \"@max-md:hidden\")}\n          data-slot=\"secret-source-combobox\"\n        >\n          <Combobox\n            ariaLabel=\"Secret value source\"\n            options={sourceOptions}\n            value={source}\n            onChange={(next) => setSource(next as SecretValueSource)}\n            allowCustomValue={false}\n            required\n          />\n        </div>\n        <div\n          className=\"hidden shrink-0 @max-md:!block\"\n          data-slot=\"secret-source-menu\"\n        >\n          <IconMenuPicker\n            value={source}\n            onChange={setSource}\n            options={sourceMenuOptions}\n            ariaLabel=\"Secret value source\"\n            triggerClassName=\"size-control-h rounded-md border border-input bg-background\"\n          />\n        </div>\n        {isLiteral ? (\n          <TextField\n            value={literalValue}\n            onChange={setLiteral}\n            placeholder=\"Static value…\"\n            ariaLabel=\"Static value\"\n          />\n        ) : isOnePassword ? (\n          <TextField\n            value={opRef}\n            onChange={setOpRef}\n            placeholder=\"op://vault/item/field\"\n            ariaLabel=\"1Password reference\"\n            mono\n          />\n        ) : isServiceAccount ? (\n          <div\n            className={VALUE_FIELD}\n            data-slot=\"secret-serviceaccount-field\"\n          >\n            <Combobox\n              options={nameOptions}\n              value={selectedName}\n              onChange={setName}\n              allowCustomValue\n              loading={resourcesLoading}\n              invalid={nameInvalid}\n              placeholder=\"Service account…\"\n            />\n          </div>\n        ) : (\n          <div\n            className={cn(\n              \"flex flex-nowrap items-center gap-2\",\n              SHRINKABLE_FIELD,\n              \"grow\",\n            )}\n            data-slot=\"secret-reference-fields\"\n          >\n            <div\n              className={RESOURCE_FIELD}\n              data-slot=\"secret-resource-field\"\n            >\n              <Combobox\n                options={nameOptions}\n                value={selectedName}\n                onChange={setName}\n                allowCustomValue\n                loading={resourcesLoading}\n                invalid={nameInvalid}\n                placeholder={`Select ${refKind}…`}\n              />\n            </div>\n            <div className={KEY_FIELD} data-slot=\"secret-key-field\">\n              <Combobox\n                options={keyOptions}\n                value={selectedKey}\n                onChange={setKey}\n                allowCustomValue\n                loading={previewLoading}\n                invalid={keyInvalid}\n                placeholder={selectedName ? keyPlaceholder(refKind) : \"—\"}\n              />\n            </div>\n          </div>\n        )}\n      </div>\n    </div>\n  );\n}\n\n// TextField is the shared single-input surface for the literal and 1Password\n// sources (no resource list backs either).\nfunction TextField({\n  value,\n  onChange,\n  placeholder,\n  ariaLabel,\n  mono,\n}: {\n  value: string;\n  onChange: (v: string) => void;\n  placeholder: string;\n  ariaLabel: string;\n  mono?: boolean;\n}) {\n  return (\n    <div className={VALUE_FIELD} data-slot=\"secret-value-fields\">\n      <input\n        type=\"text\"\n        value={value}\n        onChange={(e) => onChange(e.target.value)}\n        placeholder={placeholder}\n        aria-label={ariaLabel}\n        className={cn(\n          \"h-control-h w-full min-w-0 rounded border border-input bg-background px-control-px text-sm\",\n          \"outline-none focus-visible:ring-2 focus-visible:ring-ring\",\n          mono && \"font-mono\",\n        )}\n      />\n    </div>\n  );\n}\n\n// isRefKind narrows to the keyed variants that carry both a name and a key.\nfunction isRefKind(\n  v: SecretKeyValue,\n): v is { kind: SecretKind; name: string; key: string } {\n  return v.kind === \"secret\" || v.kind === \"configmap\" || v.kind === \"helm\";\n}\n\n// keyPlaceholder hints the key field: helm keys are jsonpath expressions into\n// the merged release values, the others are literal data keys.\nfunction keyPlaceholder(kind: SecretKind): string {\n  return kind === \"helm\" ? \"jsonpath…\" : \"Key…\";\n}\n\n// Each source's leading glyph. The flanksource FCs carry static metadata that\n// doesn't unify with ComponentType, so type the slot as a plain render function.\nconst SOURCE_ICON: Record<SecretValueSource, StaticIconComponent> = {\n  secret: K8SSecret,\n  configmap: K8SConfigmap,\n  helm: Helm,\n  serviceaccount: K8SServiceaccount,\n  onepassword: Vault,\n  value: UiEdit,\n};\n\nconst SOURCE_LABEL: Record<SecretValueSource, string> = {\n  secret: \"Secret\",\n  configmap: \"ConfigMap\",\n  helm: \"Helm\",\n  serviceaccount: \"Service Account\",\n  onepassword: \"1Password\",\n  value: \"Value\",\n};\n\n// buildKeyOptions labels each key with its mid-masked preview value when one is\n// available. A selected key absent from the list is pinned so the selection\n// stays visible.\nfunction buildKeyOptions(\n  keys: string[],\n  previews: KeyPreview[],\n  selectedKey: string,\n): ComboboxOption[] {\n  const masked = new Map(previews.map((p) => [p.key, p.value]));\n  const base = keys.map((k) => ({\n    value: k,\n    label: masked.has(k) ? `${k} — ${masked.get(k)}` : k,\n  }));\n  if (selectedKey && !base.some((o) => o.value === selectedKey)) {\n    return [{ value: selectedKey, label: selectedKey }, ...base];\n  }\n  return base;\n}\n"],"names":[],"mappings":";;;;;;;AAkFA,MAAM,kBAAuC,CAAC,UAAU,aAAa,OAAO;AAE5E,MAAM,mBAAmB;AACzB,MAAM,eAAe,GAAG,gBAAgB;AACxC,MAAM,iBAAiB,GAAG,gBAAgB;AAC1C,MAAM,YAAY,GAAG,gBAAgB;AACrC,MAAM,cAAc,GAAG,gBAAgB;AAEhC,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe;AAAA,EACf,SAAS;AAAA,EACT;AACF,GAA2B;AACzB,QAAM,aAAa;AAAA,IACjB,MAAM,YAAY,eAAe,kBAAkB,CAAC,UAAU,WAAW;AAAA,IACzE,CAAC,SAAS,YAAY;AAAA,EAAA;AAGxB,QAAM,UAA4B,+BAAO,SAAQ,WAAW,CAAC,KAAK;AAClE,QAAM,UACJ,WAAW,YAAY,WAAW,eAAe,WAAW;AAC9D,QAAM,mBAAmB,WAAW;AACpC,QAAM,gBAAgB,WAAW;AACjC,QAAM,YAAY,WAAW;AAE7B,QAAM,UAAsB,UAAW,SAAwB;AAE/D,QAAM,eACJ,UAAU,MAAM,SAAS,oBAAoB,UAAU,KAAK,KACxD,MAAM,OACN;AACN,QAAM,cAAc,SAAS,UAAU,KAAK,IAAI,MAAM,MAAM;AAC5D,QAAM,eAAe,SAAS,MAAM,SAAS,UAAU,MAAM,QAAQ;AACrE,QAAM,QAAQ,SAAS,MAAM,SAAS,gBAAgB,MAAM,MAAM;AAElE,QAAM,CAAC,WAAW,YAAY,IAAI,SAA2B,CAAA,CAAE;AAC/D,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,SAAS,KAAK;AAC9D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAuB,CAAA,CAAE;AACzD,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,SAAS,KAAK;AAI1D,YAAU,MAAM;AACd,UAAM,SAAS,UACX,MAAM,cAAc,OAAO,IAC3B,oBAAoB,sBAClB,sBACA;AACN,QAAI,CAAC,QAAQ;AACX,mBAAa,CAAA,CAAE;AACf;AAAA,IACF;AACA,QAAI,YAAY;AAChB,wBAAoB,IAAI;AACxB,WAAA,EACG,KAAK,CAAC,QAAQ,CAAC,aAAa,aAAa,GAAG,CAAC,EAC7C,QAAQ,MAAM,CAAC,aAAa,oBAAoB,KAAK,CAAC;AACzD,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,eAAe,qBAAqB,SAAS,SAAS,gBAAgB,CAAC;AAE3E,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,CAAC,cAAc;AAC7B,kBAAY,CAAA,CAAE;AACd;AAAA,IACF;AACA,QAAI,YAAY;AAChB,sBAAkB,IAAI;AACtB,mBAAe,SAAS,YAAY,EACjC,KAAK,CAAC,QAAQ,CAAC,aAAa,YAAY,GAAG,CAAC,EAC5C,MAAM,MAAM,CAAC,aAAa,YAAY,CAAA,CAAE,CAAC,EACzC,QAAQ,MAAM,CAAC,aAAa,kBAAkB,KAAK,CAAC;AACvD,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,gBAAgB,SAAS,cAAc,OAAO,CAAC;AAEnD,QAAM,cAAc;AAAA,IAClB,MAAM,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,KAAA,EAAO;AAAA,IAC7D,CAAC,SAAS;AAAA,EAAA;AAEZ,QAAM,mBAAmB;AAAA,IACvB,MAAM,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,YAAY;AAAA,IACnD,CAAC,WAAW,YAAY;AAAA,EAAA;AAE1B,QAAM,aAAa;AAAA,IACjB,MAAM,iBAAgB,qDAAkB,SAAQ,CAAA,GAAI,UAAU,WAAW;AAAA,IACzE,CAAC,kBAAkB,aAAa,QAAQ;AAAA,EAAA;AAO1C,QAAM,aAAa,WAAY,oBAAoB,CAAC,CAAC;AACrD,QAAM,cACJ,UACA,cACA,CAAC,CAAC,gBACF,CAAC,oBACD,CAAC;AACH,QAAM,aACJ,UACA,WACA,CAAC,CAAC,eACF,CAAC,CAAC,oBACF,CAAC,oBACD,EAAE,iBAAiB,QAAQ,CAAA,GAAI,SAAS,WAAW;AAErD,QAAM,YAAY,CAAC,SAA4B;AAC7C,YAAQ,MAAA;AAAA,MACN,KAAK;AACH,eAAO,SAAS,EAAE,MAAM,SAAS,OAAO,IAAI;AAAA,MAC9C,KAAK;AACH,eAAO,SAAS,EAAE,MAAM,eAAe,KAAK,IAAI;AAAA,MAClD,KAAK;AACH,eAAO,SAAS,EAAE,MAAM,kBAAkB,MAAM,IAAI;AAAA,MACtD;AACE,eAAO,SAAS,EAAE,MAAM,MAAM,MAAM,IAAI,KAAK,IAAI;AAAA,IAAA;AAAA,EAEvD;AACA,QAAM,UAAU,CAAC,SAAiB;AAChC,QAAI;AACF,aAAO,SAAS,OAAO,EAAE,MAAM,kBAAkB,KAAA,IAAS,MAAS;AACrE,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAS,MAAM,KAAK,gBAAgB;AAAA,IAAA;AAAA,EAEvD;AACA,QAAM,SAAS,CAAC,QACd,eACI,SAAS,EAAE,MAAM,SAAS,MAAM,cAAc,IAAA,CAAK,IACnD;AACN,QAAM,aAAa,CAAC,MAAc,SAAS,EAAE,MAAM,SAAS,OAAO,GAAG;AACtE,QAAM,WAAW,CAAC,MAAc,SAAS,EAAE,MAAM,eAAe,KAAK,GAAG;AAExE,QAAM,gBAAgB;AAAA,IACpB,MACE,WAAW,IAAI,CAAC,OAAO;AAAA,MACrB,OAAO;AAAA,MACP,OAAO,aAAa,CAAC;AAAA,MACrB,MAAM,cAAc,YAAY,CAAC,GAAG,EAAE,WAAW,UAAU;AAAA,IAAA,EAC3D;AAAA,IACJ,CAAC,UAAU;AAAA,EAAA;AAEb,QAAM,oBAAoB;AAAA,IACxB,MACE,WAAW,IAAI,CAAC,UAAU;AAAA,MACxB,OAAO;AAAA,MACP,OAAO,aAAa,IAAI;AAAA,MACxB,MAAM,YAAY,IAAI;AAAA,IAAA,EACtB;AAAA,IACJ,CAAC,UAAU;AAAA,EAAA;AAGb,SACE;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,aAAU;AAAA,MACV,WAAW,GAAG,6BAA6B,SAAS;AAAA,MAEpD,UAAA;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,WAAU;AAAA,UACV,aAAU;AAAA,UAEV,UAAA;AAAA,YAAA;AAAA,cAAC;AAAA,cAAA;AAAA,gBACC,WAAW,GAAG,cAAc,gBAAgB;AAAA,gBAC5C,aAAU;AAAA,gBAEV,UAAA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,WAAU;AAAA,oBACV,SAAS;AAAA,oBACT,OAAO;AAAA,oBACP,UAAU,CAAC,SAAS,UAAU,IAAyB;AAAA,oBACvD,kBAAkB;AAAA,oBAClB,UAAQ;AAAA,kBAAA;AAAA,gBAAA;AAAA,cACV;AAAA,YAAA;AAAA,YAEF;AAAA,cAAC;AAAA,cAAA;AAAA,gBACC,WAAU;AAAA,gBACV,aAAU;AAAA,gBAEV,UAAA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,OAAO;AAAA,oBACP,UAAU;AAAA,oBACV,SAAS;AAAA,oBACT,WAAU;AAAA,oBACV,kBAAiB;AAAA,kBAAA;AAAA,gBAAA;AAAA,cACnB;AAAA,YAAA;AAAA,YAED,YACC;AAAA,cAAC;AAAA,cAAA;AAAA,gBACC,OAAO;AAAA,gBACP,UAAU;AAAA,gBACV,aAAY;AAAA,gBACZ,WAAU;AAAA,cAAA;AAAA,YAAA,IAEV,gBACF;AAAA,cAAC;AAAA,cAAA;AAAA,gBACC,OAAO;AAAA,gBACP,UAAU;AAAA,gBACV,aAAY;AAAA,gBACZ,WAAU;AAAA,gBACV,MAAI;AAAA,cAAA;AAAA,YAAA,IAEJ,mBACF;AAAA,cAAC;AAAA,cAAA;AAAA,gBACC,WAAW;AAAA,gBACX,aAAU;AAAA,gBAEV,UAAA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,SAAS;AAAA,oBACT,OAAO;AAAA,oBACP,UAAU;AAAA,oBACV,kBAAgB;AAAA,oBAChB,SAAS;AAAA,oBACT,SAAS;AAAA,oBACT,aAAY;AAAA,kBAAA;AAAA,gBAAA;AAAA,cACd;AAAA,YAAA,IAGF;AAAA,cAAC;AAAA,cAAA;AAAA,gBACC,WAAW;AAAA,kBACT;AAAA,kBACA;AAAA,kBACA;AAAA,gBAAA;AAAA,gBAEF,aAAU;AAAA,gBAEV,UAAA;AAAA,kBAAA;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,WAAW;AAAA,sBACX,aAAU;AAAA,sBAEV,UAAA;AAAA,wBAAC;AAAA,wBAAA;AAAA,0BACC,SAAS;AAAA,0BACT,OAAO;AAAA,0BACP,UAAU;AAAA,0BACV,kBAAgB;AAAA,0BAChB,SAAS;AAAA,0BACT,SAAS;AAAA,0BACT,aAAa,UAAU,OAAO;AAAA,wBAAA;AAAA,sBAAA;AAAA,oBAChC;AAAA,kBAAA;AAAA,kBAEF,oBAAC,OAAA,EAAI,WAAW,WAAW,aAAU,oBACnC,UAAA;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,SAAS;AAAA,sBACT,OAAO;AAAA,sBACP,UAAU;AAAA,sBACV,kBAAgB;AAAA,sBAChB,SAAS;AAAA,sBACT,SAAS;AAAA,sBACT,aAAa,eAAe,eAAe,OAAO,IAAI;AAAA,oBAAA;AAAA,kBAAA,EACxD,CACF;AAAA,gBAAA;AAAA,cAAA;AAAA,YAAA;AAAA,UACF;AAAA,QAAA;AAAA,MAAA;AAAA,IAEJ;AAAA,EAAA;AAGN;AAIA,SAAS,UAAU;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMG;AACD,SACE,oBAAC,OAAA,EAAI,WAAW,aAAa,aAAU,uBACrC,UAAA;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,MAAK;AAAA,MACL;AAAA,MACA,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,MACxC;AAAA,MACA,cAAY;AAAA,MACZ,WAAW;AAAA,QACT;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MAAA;AAAA,IACV;AAAA,EAAA,GAEJ;AAEJ;AAGA,SAAS,UACP,GACsD;AACtD,SAAO,EAAE,SAAS,YAAY,EAAE,SAAS,eAAe,EAAE,SAAS;AACrE;AAIA,SAAS,eAAe,MAA0B;AAChD,SAAO,SAAS,SAAS,cAAc;AACzC;AAIA,MAAM,cAA8D;AAAA,EAClE,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,OAAO;AACT;AAEA,MAAM,eAAkD;AAAA,EACtD,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,OAAO;AACT;AAKA,SAAS,gBACP,MACA,UACA,aACkB;AAClB,QAAM,SAAS,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5D,QAAM,OAAO,KAAK,IAAI,CAAC,OAAO;AAAA,IAC5B,OAAO;AAAA,IACP,OAAO,OAAO,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC,KAAK;AAAA,EAAA,EACnD;AACF,MAAI,eAAe,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,UAAU,WAAW,GAAG;AAC7D,WAAO,CAAC,EAAE,OAAO,aAAa,OAAO,YAAA,GAAe,GAAG,IAAI;AAAA,EAC7D;AACA,SAAO;AACT;"}

package/dist/components/WorkloadPicker.cjs

@@ -12,6 +12,7 @@ function WorkloadPicker({
   namespace,
   kinds = workloadPickerUtils.ALL_WORKLOAD_KINDS,
   strict = false,
+  allowCustomValue = true,
   placeholder = "Select workload / service…",
   className
 }) {
@@ -57,7 +58,7 @@ function WorkloadPicker({
         options,
         value,
         onChange,
-        allowCustomValue: true,
+        allowCustomValue,
         loading,
         invalid,
         placeholder

package/dist/components/WorkloadPicker.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"WorkloadPicker.cjs","sources":["../../src/components/WorkloadPicker.tsx"],"sourcesContent":["import { useEffect, useMemo, useState } from \"react\";\nimport { cn } from \"../lib/utils\";\nimport { Combobox } from \"./Combobox\";\nimport {\n  ALL_WORKLOAD_KINDS,\n  WORKLOAD_META,\n  buildWorkloadOptions,\n  kindForValue,\n  loadedWorkloads,\n  type WorkloadKind,\n  type WorkloadResource,\n} from \"./workload-picker-utils\";\n\n// WorkloadPicker selects a backing Kubernetes workload (Service / Ingress /\n// Deployment / StatefulSet) for an endpoint. Options from every kind are merged\n// into one Combobox, grouped by kind via the Combobox group-header support and\n// labelled with the kind's icon.\n//\n// The emitted value is a `[namespace/]kind/name` key (see workloadKey /\n// parseWorkloadKey in workload-picker-utils) so two workloads of different\n// kinds that share a name don't collide. An ingress's name-part is its first\n// host (the routable address), labelled with the ingress name for context;\n// every other kind uses its name.\n//\n// The component is presentational: the kind→group/icon mapping and the key\n// encoding live in workload-picker-utils; it fetches nothing — the consumer\n// supplies an async `loadWorkloads` getter.\n\nexport type WorkloadPickerProps = {\n  /**\n   * Controlled selected value — a `[namespace/]kind/name` key (see\n   * {@link workloadKey} / {@link parseWorkloadKey}).\n   */\n  value: string;\n  /** Called with the chosen `[namespace/]kind/name` key (or \"\" when cleared). */\n  onChange: (value: string) => void;\n  /**\n   * Async getter the component calls to load the requested kinds' workloads.\n   * Returns a map keyed by kind. The consumer owns fetching/caching.\n   */\n  loadWorkloads: (kinds: WorkloadKind[]) => Promise<Record<WorkloadKind, WorkloadResource[]>>;\n  /**\n   * Namespace the workloads live in. When set it prefixes the emitted key\n   * (`namespace/kind/name`), so values stay distinct across namespaces.\n   */\n  namespace?: string;\n  /** Kinds to offer, in display order. Defaults to all four. */\n  kinds?: WorkloadKind[];\n  /**\n   * When true, a non-empty value that does not match any loaded workload (once\n   * loading settles) is flagged invalid — the picked workload doesn't exist in\n   * the namespace. The value is still shown (pinned) so the user can see and\n   * fix it; freeform entry is not rejected, only marked.\n   */\n  strict?: boolean;\n  placeholder?: string;\n  className?: string;\n};\n\nexport function WorkloadPicker({\n  value,\n  onChange,\n  loadWorkloads,\n  namespace,\n  kinds = ALL_WORKLOAD_KINDS,\n  strict = false,\n  placeholder = \"Select workload / service…\",\n  className,\n}: WorkloadPickerProps) {\n  const [byKind, setByKind] = useState<Partial<Record<WorkloadKind, WorkloadResource[]>>>({});\n  const [loading, setLoading] = useState(false);\n\n  const kindsKey = kinds.join(\",\");\n  useEffect(() => {\n    let cancelled = false;\n    setLoading(true);\n    loadWorkloads(kinds)\n      .then((res) => {\n        if (!cancelled) setByKind(res);\n      })\n      .finally(() => {\n        if (!cancelled) setLoading(false);\n      });\n    return () => {\n      cancelled = true;\n    };\n    // loadWorkloads is expected to be stable (memoized by the consumer); kindsKey\n    // is the joined `kinds` so a changed selection reloads without depending on\n    // the array's identity.\n  }, [loadWorkloads, kindsKey]);\n\n  const options = useMemo(\n    () => buildWorkloadOptions(namespace, byKind, kinds, value),\n    [namespace, byKind, kinds, value],\n  );\n\n  // In strict mode a non-empty value is invalid once loading settles unless it\n  // matches a loaded workload — either by its full `[namespace/]kind/name` key\n  // (what the picker emits) or by its bare name-part (what consumers that\n  // persist only the resolved name, e.g. a Service name or ingress host, feed\n  // back in). buildWorkloadOptions pins an unmatched value first, so test\n  // membership against the loaded set, not `options`.\n  const invalid = useMemo(() => {\n    if (!strict || !value || loading) return false;\n    const { keys, names } = loadedWorkloads(namespace, byKind, kinds);\n    return !keys.has(value) && !names.has(value);\n  }, [strict, value, loading, namespace, byKind, kinds]);\n\n  // The lead icon reflects the selected workload's kind (read from the value's\n  // key), falling back to the first offered kind when nothing is selected or the\n  // value carries no recognised kind (e.g. freeform input).\n  const selectedKind = kindForValue(kinds, value);\n  const leadMeta = WORKLOAD_META[selectedKind];\n  const LeadIcon = leadMeta.Icon;\n  return (\n    <div className={cn(\"flex items-center gap-2\", className)}>\n      <LeadIcon\n        className=\"h-4 w-4 shrink-0 text-muted-foreground\"\n        title={leadMeta.label}\n        aria-label={leadMeta.label}\n      />\n      <div className=\"min-w-0 flex-1\">\n        <Combobox\n          options={options}\n          value={value}\n          onChange={onChange}\n          allowCustomValue\n          loading={loading}\n          invalid={invalid}\n          placeholder={placeholder}\n        />\n      </div>\n    </div>\n  );\n}\n\n"],"names":["ALL_WORKLOAD_KINDS","useState","useEffect","useMemo","buildWorkloadOptions","loadedWorkloads","kindForValue","WORKLOAD_META","cn","jsx","Combobox"],"mappings":";;;;;;;AA2DO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQA,oBAAAA;AAAAA,EACR,SAAS;AAAA,EACT,cAAc;AAAA,EACd;AACF,GAAwB;AACtB,QAAM,CAAC,QAAQ,SAAS,IAAIC,MAAAA,SAA4D,CAAA,CAAE;AAC1F,QAAM,CAAC,SAAS,UAAU,IAAIA,MAAAA,SAAS,KAAK;AAE5C,QAAM,WAAW,MAAM,KAAK,GAAG;AAC/BC,QAAAA,UAAU,MAAM;AACd,QAAI,YAAY;AAChB,eAAW,IAAI;AACf,kBAAc,KAAK,EAChB,KAAK,CAAC,QAAQ;AACb,UAAI,CAAC,UAAW,WAAU,GAAG;AAAA,IAC/B,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,CAAC,UAAW,YAAW,KAAK;AAAA,IAClC,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EAIF,GAAG,CAAC,eAAe,QAAQ,CAAC;AAE5B,QAAM,UAAUC,MAAAA;AAAAA,IACd,MAAMC,oBAAAA,qBAAqB,WAAW,QAAQ,OAAO,KAAK;AAAA,IAC1D,CAAC,WAAW,QAAQ,OAAO,KAAK;AAAA,EAAA;AASlC,QAAM,UAAUD,MAAAA,QAAQ,MAAM;AAC5B,QAAI,CAAC,UAAU,CAAC,SAAS,QAAS,QAAO;AACzC,UAAM,EAAE,MAAM,MAAA,IAAUE,oBAAAA,gBAAgB,WAAW,QAAQ,KAAK;AAChE,WAAO,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK;AAAA,EAC7C,GAAG,CAAC,QAAQ,OAAO,SAAS,WAAW,QAAQ,KAAK,CAAC;AAKrD,QAAM,eAAeC,oBAAAA,aAAa,OAAO,KAAK;AAC9C,QAAM,WAAWC,oBAAAA,cAAc,YAAY;AAC3C,QAAM,WAAW,SAAS;AAC1B,yCACG,OAAA,EAAI,WAAWC,MAAAA,GAAG,2BAA2B,SAAS,GACrD,UAAA;AAAA,IAAAC,2BAAAA;AAAAA,MAAC;AAAA,MAAA;AAAA,QACC,WAAU;AAAA,QACV,OAAO,SAAS;AAAA,QAChB,cAAY,SAAS;AAAA,MAAA;AAAA,IAAA;AAAA,IAEvBA,2BAAAA,IAAC,OAAA,EAAI,WAAU,kBACb,UAAAA,2BAAAA;AAAAA,MAACC,SAAAA;AAAAA,MAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,QACA,kBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MAAA;AAAA,IAAA,EACF,CACF;AAAA,EAAA,GACF;AAEJ;;"}
+{"version":3,"file":"WorkloadPicker.cjs","sources":["../../src/components/WorkloadPicker.tsx"],"sourcesContent":["import { useEffect, useMemo, useState } from \"react\";\nimport { cn } from \"../lib/utils\";\nimport { Combobox } from \"./Combobox\";\nimport {\n  ALL_WORKLOAD_KINDS,\n  WORKLOAD_META,\n  buildWorkloadOptions,\n  kindForValue,\n  loadedWorkloads,\n  type WorkloadKind,\n  type WorkloadResource,\n} from \"./workload-picker-utils\";\n\n// WorkloadPicker selects a backing Kubernetes workload (Service / Ingress /\n// Deployment / StatefulSet) for an endpoint. Options from every kind are merged\n// into one Combobox, grouped by kind via the Combobox group-header support and\n// labelled with the kind's icon.\n//\n// The emitted value is a `[namespace/]kind/name` key (see workloadKey /\n// parseWorkloadKey in workload-picker-utils) so two workloads of different\n// kinds that share a name don't collide. An ingress's name-part is its first\n// host (the routable address), labelled with the ingress name for context;\n// every other kind uses its name.\n//\n// The component is presentational: the kind→group/icon mapping and the key\n// encoding live in workload-picker-utils; it fetches nothing — the consumer\n// supplies an async `loadWorkloads` getter.\n\nexport type WorkloadPickerProps = {\n  /**\n   * Controlled selected value — a `[namespace/]kind/name` key (see\n   * {@link workloadKey} / {@link parseWorkloadKey}).\n   */\n  value: string;\n  /** Called with the chosen `[namespace/]kind/name` key (or \"\" when cleared). */\n  onChange: (value: string) => void;\n  /**\n   * Async getter the component calls to load the requested kinds' workloads.\n   * Returns a map keyed by kind. The consumer owns fetching/caching.\n   */\n  loadWorkloads: (kinds: WorkloadKind[]) => Promise<Record<WorkloadKind, WorkloadResource[]>>;\n  /**\n   * Namespace the workloads live in. When set it prefixes the emitted key\n   * (`namespace/kind/name`), so values stay distinct across namespaces.\n   */\n  namespace?: string;\n  /** Kinds to offer, in display order. Defaults to all four. */\n  kinds?: WorkloadKind[];\n  /**\n   * When true, a non-empty value that does not match any loaded workload (once\n   * loading settles) is flagged invalid — the picked workload doesn't exist in\n   * the namespace. The value is still shown (pinned) so the user can see and\n   * fix it; freeform entry is not rejected, only marked.\n   */\n  strict?: boolean;\n  /**\n   * Whether a typed name absent from the loaded resources may be committed.\n   * Defaults to true for the existing free-form workload picker behavior.\n   */\n  allowCustomValue?: boolean;\n  placeholder?: string;\n  className?: string;\n};\n\nexport function WorkloadPicker({\n  value,\n  onChange,\n  loadWorkloads,\n  namespace,\n  kinds = ALL_WORKLOAD_KINDS,\n  strict = false,\n  allowCustomValue = true,\n  placeholder = \"Select workload / service…\",\n  className,\n}: WorkloadPickerProps) {\n  const [byKind, setByKind] = useState<Partial<Record<WorkloadKind, WorkloadResource[]>>>({});\n  const [loading, setLoading] = useState(false);\n\n  const kindsKey = kinds.join(\",\");\n  useEffect(() => {\n    let cancelled = false;\n    setLoading(true);\n    loadWorkloads(kinds)\n      .then((res) => {\n        if (!cancelled) setByKind(res);\n      })\n      .finally(() => {\n        if (!cancelled) setLoading(false);\n      });\n    return () => {\n      cancelled = true;\n    };\n    // loadWorkloads is expected to be stable (memoized by the consumer); kindsKey\n    // is the joined `kinds` so a changed selection reloads without depending on\n    // the array's identity.\n  }, [loadWorkloads, kindsKey]);\n\n  const options = useMemo(\n    () => buildWorkloadOptions(namespace, byKind, kinds, value),\n    [namespace, byKind, kinds, value],\n  );\n\n  // In strict mode a non-empty value is invalid once loading settles unless it\n  // matches a loaded workload — either by its full `[namespace/]kind/name` key\n  // (what the picker emits) or by its bare name-part (what consumers that\n  // persist only the resolved name, e.g. a Service name or ingress host, feed\n  // back in). buildWorkloadOptions pins an unmatched value first, so test\n  // membership against the loaded set, not `options`.\n  const invalid = useMemo(() => {\n    if (!strict || !value || loading) return false;\n    const { keys, names } = loadedWorkloads(namespace, byKind, kinds);\n    return !keys.has(value) && !names.has(value);\n  }, [strict, value, loading, namespace, byKind, kinds]);\n\n  // The lead icon reflects the selected workload's kind (read from the value's\n  // key), falling back to the first offered kind when nothing is selected or the\n  // value carries no recognised kind (e.g. freeform input).\n  const selectedKind = kindForValue(kinds, value);\n  const leadMeta = WORKLOAD_META[selectedKind];\n  const LeadIcon = leadMeta.Icon;\n  return (\n    <div className={cn(\"flex items-center gap-2\", className)}>\n      <LeadIcon\n        className=\"h-4 w-4 shrink-0 text-muted-foreground\"\n        title={leadMeta.label}\n        aria-label={leadMeta.label}\n      />\n      <div className=\"min-w-0 flex-1\">\n        <Combobox\n          options={options}\n          value={value}\n          onChange={onChange}\n          allowCustomValue={allowCustomValue}\n          loading={loading}\n          invalid={invalid}\n          placeholder={placeholder}\n        />\n      </div>\n    </div>\n  );\n}\n"],"names":["ALL_WORKLOAD_KINDS","useState","useEffect","useMemo","buildWorkloadOptions","loadedWorkloads","kindForValue","WORKLOAD_META","cn","jsx","Combobox"],"mappings":";;;;;;;AAgEO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQA,oBAAAA;AAAAA,EACR,SAAS;AAAA,EACT,mBAAmB;AAAA,EACnB,cAAc;AAAA,EACd;AACF,GAAwB;AACtB,QAAM,CAAC,QAAQ,SAAS,IAAIC,MAAAA,SAA4D,CAAA,CAAE;AAC1F,QAAM,CAAC,SAAS,UAAU,IAAIA,MAAAA,SAAS,KAAK;AAE5C,QAAM,WAAW,MAAM,KAAK,GAAG;AAC/BC,QAAAA,UAAU,MAAM;AACd,QAAI,YAAY;AAChB,eAAW,IAAI;AACf,kBAAc,KAAK,EAChB,KAAK,CAAC,QAAQ;AACb,UAAI,CAAC,UAAW,WAAU,GAAG;AAAA,IAC/B,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,CAAC,UAAW,YAAW,KAAK;AAAA,IAClC,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EAIF,GAAG,CAAC,eAAe,QAAQ,CAAC;AAE5B,QAAM,UAAUC,MAAAA;AAAAA,IACd,MAAMC,oBAAAA,qBAAqB,WAAW,QAAQ,OAAO,KAAK;AAAA,IAC1D,CAAC,WAAW,QAAQ,OAAO,KAAK;AAAA,EAAA;AASlC,QAAM,UAAUD,MAAAA,QAAQ,MAAM;AAC5B,QAAI,CAAC,UAAU,CAAC,SAAS,QAAS,QAAO;AACzC,UAAM,EAAE,MAAM,MAAA,IAAUE,oBAAAA,gBAAgB,WAAW,QAAQ,KAAK;AAChE,WAAO,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK;AAAA,EAC7C,GAAG,CAAC,QAAQ,OAAO,SAAS,WAAW,QAAQ,KAAK,CAAC;AAKrD,QAAM,eAAeC,oBAAAA,aAAa,OAAO,KAAK;AAC9C,QAAM,WAAWC,oBAAAA,cAAc,YAAY;AAC3C,QAAM,WAAW,SAAS;AAC1B,yCACG,OAAA,EAAI,WAAWC,MAAAA,GAAG,2BAA2B,SAAS,GACrD,UAAA;AAAA,IAAAC,2BAAAA;AAAAA,MAAC;AAAA,MAAA;AAAA,QACC,WAAU;AAAA,QACV,OAAO,SAAS;AAAA,QAChB,cAAY,SAAS;AAAA,MAAA;AAAA,IAAA;AAAA,IAEvBA,2BAAAA,IAAC,OAAA,EAAI,WAAU,kBACb,UAAAA,2BAAAA;AAAAA,MAACC,SAAAA;AAAAA,MAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MAAA;AAAA,IAAA,EACF,CACF;AAAA,EAAA,GACF;AAEJ;;"}

package/dist/components/WorkloadPicker.d.ts

@@ -26,8 +26,13 @@ export type WorkloadPickerProps = {
      * fix it; freeform entry is not rejected, only marked.
      */
     strict?: boolean;
+    /**
+     * Whether a typed name absent from the loaded resources may be committed.
+     * Defaults to true for the existing free-form workload picker behavior.
+     */
+    allowCustomValue?: boolean;
     placeholder?: string;
     className?: string;
 };
-export declare function WorkloadPicker({ value, onChange, loadWorkloads, namespace, kinds, strict, placeholder, className, }: WorkloadPickerProps): import("react/jsx-runtime").JSX.Element;
+export declare function WorkloadPicker({ value, onChange, loadWorkloads, namespace, kinds, strict, allowCustomValue, placeholder, className, }: WorkloadPickerProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=WorkloadPicker.d.ts.map

package/dist/components/WorkloadPicker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WorkloadPicker.d.ts","sourceRoot":"","sources":["../../src/components/WorkloadPicker.tsx"],"names":[],"mappings":"AAGA,OAAO,EAML,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AAiBjC,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC;;;OAGG;IACH,aAAa,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC5F;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAgB,cAAc,CAAC,EAC7B,KAAK,EACL,QAAQ,EACR,aAAa,EACb,SAAS,EACT,KAA0B,EAC1B,MAAc,EACd,WAA0C,EAC1C,SAAS,GACV,EAAE,mBAAmB,2CAkErB"}
+{"version":3,"file":"WorkloadPicker.d.ts","sourceRoot":"","sources":["../../src/components/WorkloadPicker.tsx"],"names":[],"mappings":"AAGA,OAAO,EAML,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AAiBjC,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC;;;OAGG;IACH,aAAa,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC5F;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAgB,cAAc,CAAC,EAC7B,KAAK,EACL,QAAQ,EACR,aAAa,EACb,SAAS,EACT,KAA0B,EAC1B,MAAc,EACd,gBAAuB,EACvB,WAA0C,EAC1C,SAAS,GACV,EAAE,mBAAmB,2CAkErB"}

package/dist/components/WorkloadPicker.js

@@ -10,6 +10,7 @@ function WorkloadPicker({
   namespace,
   kinds = ALL_WORKLOAD_KINDS,
   strict = false,
+  allowCustomValue = true,
   placeholder = "Select workload / service…",
   className
 }) {
@@ -55,7 +56,7 @@ function WorkloadPicker({
         options,
         value,
         onChange,
-        allowCustomValue: true,
+        allowCustomValue,
         loading,
         invalid,
         placeholder

package/dist/components/WorkloadPicker.js.map

@@ -1 +1 @@
-{"version":3,"file":"WorkloadPicker.js","sources":["../../src/components/WorkloadPicker.tsx"],"sourcesContent":["import { useEffect, useMemo, useState } from \"react\";\nimport { cn } from \"../lib/utils\";\nimport { Combobox } from \"./Combobox\";\nimport {\n  ALL_WORKLOAD_KINDS,\n  WORKLOAD_META,\n  buildWorkloadOptions,\n  kindForValue,\n  loadedWorkloads,\n  type WorkloadKind,\n  type WorkloadResource,\n} from \"./workload-picker-utils\";\n\n// WorkloadPicker selects a backing Kubernetes workload (Service / Ingress /\n// Deployment / StatefulSet) for an endpoint. Options from every kind are merged\n// into one Combobox, grouped by kind via the Combobox group-header support and\n// labelled with the kind's icon.\n//\n// The emitted value is a `[namespace/]kind/name` key (see workloadKey /\n// parseWorkloadKey in workload-picker-utils) so two workloads of different\n// kinds that share a name don't collide. An ingress's name-part is its first\n// host (the routable address), labelled with the ingress name for context;\n// every other kind uses its name.\n//\n// The component is presentational: the kind→group/icon mapping and the key\n// encoding live in workload-picker-utils; it fetches nothing — the consumer\n// supplies an async `loadWorkloads` getter.\n\nexport type WorkloadPickerProps = {\n  /**\n   * Controlled selected value — a `[namespace/]kind/name` key (see\n   * {@link workloadKey} / {@link parseWorkloadKey}).\n   */\n  value: string;\n  /** Called with the chosen `[namespace/]kind/name` key (or \"\" when cleared). */\n  onChange: (value: string) => void;\n  /**\n   * Async getter the component calls to load the requested kinds' workloads.\n   * Returns a map keyed by kind. The consumer owns fetching/caching.\n   */\n  loadWorkloads: (kinds: WorkloadKind[]) => Promise<Record<WorkloadKind, WorkloadResource[]>>;\n  /**\n   * Namespace the workloads live in. When set it prefixes the emitted key\n   * (`namespace/kind/name`), so values stay distinct across namespaces.\n   */\n  namespace?: string;\n  /** Kinds to offer, in display order. Defaults to all four. */\n  kinds?: WorkloadKind[];\n  /**\n   * When true, a non-empty value that does not match any loaded workload (once\n   * loading settles) is flagged invalid — the picked workload doesn't exist in\n   * the namespace. The value is still shown (pinned) so the user can see and\n   * fix it; freeform entry is not rejected, only marked.\n   */\n  strict?: boolean;\n  placeholder?: string;\n  className?: string;\n};\n\nexport function WorkloadPicker({\n  value,\n  onChange,\n  loadWorkloads,\n  namespace,\n  kinds = ALL_WORKLOAD_KINDS,\n  strict = false,\n  placeholder = \"Select workload / service…\",\n  className,\n}: WorkloadPickerProps) {\n  const [byKind, setByKind] = useState<Partial<Record<WorkloadKind, WorkloadResource[]>>>({});\n  const [loading, setLoading] = useState(false);\n\n  const kindsKey = kinds.join(\",\");\n  useEffect(() => {\n    let cancelled = false;\n    setLoading(true);\n    loadWorkloads(kinds)\n      .then((res) => {\n        if (!cancelled) setByKind(res);\n      })\n      .finally(() => {\n        if (!cancelled) setLoading(false);\n      });\n    return () => {\n      cancelled = true;\n    };\n    // loadWorkloads is expected to be stable (memoized by the consumer); kindsKey\n    // is the joined `kinds` so a changed selection reloads without depending on\n    // the array's identity.\n  }, [loadWorkloads, kindsKey]);\n\n  const options = useMemo(\n    () => buildWorkloadOptions(namespace, byKind, kinds, value),\n    [namespace, byKind, kinds, value],\n  );\n\n  // In strict mode a non-empty value is invalid once loading settles unless it\n  // matches a loaded workload — either by its full `[namespace/]kind/name` key\n  // (what the picker emits) or by its bare name-part (what consumers that\n  // persist only the resolved name, e.g. a Service name or ingress host, feed\n  // back in). buildWorkloadOptions pins an unmatched value first, so test\n  // membership against the loaded set, not `options`.\n  const invalid = useMemo(() => {\n    if (!strict || !value || loading) return false;\n    const { keys, names } = loadedWorkloads(namespace, byKind, kinds);\n    return !keys.has(value) && !names.has(value);\n  }, [strict, value, loading, namespace, byKind, kinds]);\n\n  // The lead icon reflects the selected workload's kind (read from the value's\n  // key), falling back to the first offered kind when nothing is selected or the\n  // value carries no recognised kind (e.g. freeform input).\n  const selectedKind = kindForValue(kinds, value);\n  const leadMeta = WORKLOAD_META[selectedKind];\n  const LeadIcon = leadMeta.Icon;\n  return (\n    <div className={cn(\"flex items-center gap-2\", className)}>\n      <LeadIcon\n        className=\"h-4 w-4 shrink-0 text-muted-foreground\"\n        title={leadMeta.label}\n        aria-label={leadMeta.label}\n      />\n      <div className=\"min-w-0 flex-1\">\n        <Combobox\n          options={options}\n          value={value}\n          onChange={onChange}\n          allowCustomValue\n          loading={loading}\n          invalid={invalid}\n          placeholder={placeholder}\n        />\n      </div>\n    </div>\n  );\n}\n\n"],"names":[],"mappings":";;;;;AA2DO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,cAAc;AAAA,EACd;AACF,GAAwB;AACtB,QAAM,CAAC,QAAQ,SAAS,IAAI,SAA4D,CAAA,CAAE;AAC1F,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAE5C,QAAM,WAAW,MAAM,KAAK,GAAG;AAC/B,YAAU,MAAM;AACd,QAAI,YAAY;AAChB,eAAW,IAAI;AACf,kBAAc,KAAK,EAChB,KAAK,CAAC,QAAQ;AACb,UAAI,CAAC,UAAW,WAAU,GAAG;AAAA,IAC/B,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,CAAC,UAAW,YAAW,KAAK;AAAA,IAClC,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EAIF,GAAG,CAAC,eAAe,QAAQ,CAAC;AAE5B,QAAM,UAAU;AAAA,IACd,MAAM,qBAAqB,WAAW,QAAQ,OAAO,KAAK;AAAA,IAC1D,CAAC,WAAW,QAAQ,OAAO,KAAK;AAAA,EAAA;AASlC,QAAM,UAAU,QAAQ,MAAM;AAC5B,QAAI,CAAC,UAAU,CAAC,SAAS,QAAS,QAAO;AACzC,UAAM,EAAE,MAAM,MAAA,IAAU,gBAAgB,WAAW,QAAQ,KAAK;AAChE,WAAO,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK;AAAA,EAC7C,GAAG,CAAC,QAAQ,OAAO,SAAS,WAAW,QAAQ,KAAK,CAAC;AAKrD,QAAM,eAAe,aAAa,OAAO,KAAK;AAC9C,QAAM,WAAW,cAAc,YAAY;AAC3C,QAAM,WAAW,SAAS;AAC1B,8BACG,OAAA,EAAI,WAAW,GAAG,2BAA2B,SAAS,GACrD,UAAA;AAAA,IAAA;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,WAAU;AAAA,QACV,OAAO,SAAS;AAAA,QAChB,cAAY,SAAS;AAAA,MAAA;AAAA,IAAA;AAAA,IAEvB,oBAAC,OAAA,EAAI,WAAU,kBACb,UAAA;AAAA,MAAC;AAAA,MAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,QACA,kBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MAAA;AAAA,IAAA,EACF,CACF;AAAA,EAAA,GACF;AAEJ;"}
+{"version":3,"file":"WorkloadPicker.js","sources":["../../src/components/WorkloadPicker.tsx"],"sourcesContent":["import { useEffect, useMemo, useState } from \"react\";\nimport { cn } from \"../lib/utils\";\nimport { Combobox } from \"./Combobox\";\nimport {\n  ALL_WORKLOAD_KINDS,\n  WORKLOAD_META,\n  buildWorkloadOptions,\n  kindForValue,\n  loadedWorkloads,\n  type WorkloadKind,\n  type WorkloadResource,\n} from \"./workload-picker-utils\";\n\n// WorkloadPicker selects a backing Kubernetes workload (Service / Ingress /\n// Deployment / StatefulSet) for an endpoint. Options from every kind are merged\n// into one Combobox, grouped by kind via the Combobox group-header support and\n// labelled with the kind's icon.\n//\n// The emitted value is a `[namespace/]kind/name` key (see workloadKey /\n// parseWorkloadKey in workload-picker-utils) so two workloads of different\n// kinds that share a name don't collide. An ingress's name-part is its first\n// host (the routable address), labelled with the ingress name for context;\n// every other kind uses its name.\n//\n// The component is presentational: the kind→group/icon mapping and the key\n// encoding live in workload-picker-utils; it fetches nothing — the consumer\n// supplies an async `loadWorkloads` getter.\n\nexport type WorkloadPickerProps = {\n  /**\n   * Controlled selected value — a `[namespace/]kind/name` key (see\n   * {@link workloadKey} / {@link parseWorkloadKey}).\n   */\n  value: string;\n  /** Called with the chosen `[namespace/]kind/name` key (or \"\" when cleared). */\n  onChange: (value: string) => void;\n  /**\n   * Async getter the component calls to load the requested kinds' workloads.\n   * Returns a map keyed by kind. The consumer owns fetching/caching.\n   */\n  loadWorkloads: (kinds: WorkloadKind[]) => Promise<Record<WorkloadKind, WorkloadResource[]>>;\n  /**\n   * Namespace the workloads live in. When set it prefixes the emitted key\n   * (`namespace/kind/name`), so values stay distinct across namespaces.\n   */\n  namespace?: string;\n  /** Kinds to offer, in display order. Defaults to all four. */\n  kinds?: WorkloadKind[];\n  /**\n   * When true, a non-empty value that does not match any loaded workload (once\n   * loading settles) is flagged invalid — the picked workload doesn't exist in\n   * the namespace. The value is still shown (pinned) so the user can see and\n   * fix it; freeform entry is not rejected, only marked.\n   */\n  strict?: boolean;\n  /**\n   * Whether a typed name absent from the loaded resources may be committed.\n   * Defaults to true for the existing free-form workload picker behavior.\n   */\n  allowCustomValue?: boolean;\n  placeholder?: string;\n  className?: string;\n};\n\nexport function WorkloadPicker({\n  value,\n  onChange,\n  loadWorkloads,\n  namespace,\n  kinds = ALL_WORKLOAD_KINDS,\n  strict = false,\n  allowCustomValue = true,\n  placeholder = \"Select workload / service…\",\n  className,\n}: WorkloadPickerProps) {\n  const [byKind, setByKind] = useState<Partial<Record<WorkloadKind, WorkloadResource[]>>>({});\n  const [loading, setLoading] = useState(false);\n\n  const kindsKey = kinds.join(\",\");\n  useEffect(() => {\n    let cancelled = false;\n    setLoading(true);\n    loadWorkloads(kinds)\n      .then((res) => {\n        if (!cancelled) setByKind(res);\n      })\n      .finally(() => {\n        if (!cancelled) setLoading(false);\n      });\n    return () => {\n      cancelled = true;\n    };\n    // loadWorkloads is expected to be stable (memoized by the consumer); kindsKey\n    // is the joined `kinds` so a changed selection reloads without depending on\n    // the array's identity.\n  }, [loadWorkloads, kindsKey]);\n\n  const options = useMemo(\n    () => buildWorkloadOptions(namespace, byKind, kinds, value),\n    [namespace, byKind, kinds, value],\n  );\n\n  // In strict mode a non-empty value is invalid once loading settles unless it\n  // matches a loaded workload — either by its full `[namespace/]kind/name` key\n  // (what the picker emits) or by its bare name-part (what consumers that\n  // persist only the resolved name, e.g. a Service name or ingress host, feed\n  // back in). buildWorkloadOptions pins an unmatched value first, so test\n  // membership against the loaded set, not `options`.\n  const invalid = useMemo(() => {\n    if (!strict || !value || loading) return false;\n    const { keys, names } = loadedWorkloads(namespace, byKind, kinds);\n    return !keys.has(value) && !names.has(value);\n  }, [strict, value, loading, namespace, byKind, kinds]);\n\n  // The lead icon reflects the selected workload's kind (read from the value's\n  // key), falling back to the first offered kind when nothing is selected or the\n  // value carries no recognised kind (e.g. freeform input).\n  const selectedKind = kindForValue(kinds, value);\n  const leadMeta = WORKLOAD_META[selectedKind];\n  const LeadIcon = leadMeta.Icon;\n  return (\n    <div className={cn(\"flex items-center gap-2\", className)}>\n      <LeadIcon\n        className=\"h-4 w-4 shrink-0 text-muted-foreground\"\n        title={leadMeta.label}\n        aria-label={leadMeta.label}\n      />\n      <div className=\"min-w-0 flex-1\">\n        <Combobox\n          options={options}\n          value={value}\n          onChange={onChange}\n          allowCustomValue={allowCustomValue}\n          loading={loading}\n          invalid={invalid}\n          placeholder={placeholder}\n        />\n      </div>\n    </div>\n  );\n}\n"],"names":[],"mappings":";;;;;AAgEO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,mBAAmB;AAAA,EACnB,cAAc;AAAA,EACd;AACF,GAAwB;AACtB,QAAM,CAAC,QAAQ,SAAS,IAAI,SAA4D,CAAA,CAAE;AAC1F,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAE5C,QAAM,WAAW,MAAM,KAAK,GAAG;AAC/B,YAAU,MAAM;AACd,QAAI,YAAY;AAChB,eAAW,IAAI;AACf,kBAAc,KAAK,EAChB,KAAK,CAAC,QAAQ;AACb,UAAI,CAAC,UAAW,WAAU,GAAG;AAAA,IAC/B,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,CAAC,UAAW,YAAW,KAAK;AAAA,IAClC,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EAIF,GAAG,CAAC,eAAe,QAAQ,CAAC;AAE5B,QAAM,UAAU;AAAA,IACd,MAAM,qBAAqB,WAAW,QAAQ,OAAO,KAAK;AAAA,IAC1D,CAAC,WAAW,QAAQ,OAAO,KAAK;AAAA,EAAA;AASlC,QAAM,UAAU,QAAQ,MAAM;AAC5B,QAAI,CAAC,UAAU,CAAC,SAAS,QAAS,QAAO;AACzC,UAAM,EAAE,MAAM,MAAA,IAAU,gBAAgB,WAAW,QAAQ,KAAK;AAChE,WAAO,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK;AAAA,EAC7C,GAAG,CAAC,QAAQ,OAAO,SAAS,WAAW,QAAQ,KAAK,CAAC;AAKrD,QAAM,eAAe,aAAa,OAAO,KAAK;AAC9C,QAAM,WAAW,cAAc,YAAY;AAC3C,QAAM,WAAW,SAAS;AAC1B,8BACG,OAAA,EAAI,WAAW,GAAG,2BAA2B,SAAS,GACrD,UAAA;AAAA,IAAA;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,WAAU;AAAA,QACV,OAAO,SAAS;AAAA,QAChB,cAAY,SAAS;AAAA,MAAA;AAAA,IAAA;AAAA,IAEvB,oBAAC,OAAA,EAAI,WAAU,kBACb,UAAA;AAAA,MAAC;AAAA,MAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MAAA;AAAA,IAAA,EACF,CACF;AAAA,EAAA,GACF;AAEJ;"}

package/dist/components/combobox-types.d.ts

@@ -0,0 +1,107 @@
+import { KeyboardEvent, ReactNode } from 'react';
+import { LabelIconSpec } from '../data/Icon';
+import { FormSize } from './json-schema-form-size';
+export type ComboboxOption = {
+    value: string;
+    /** Full label used for searching and in the open option menu. */
+    label: string;
+    /** Optional compact label used only while this option is selected and closed. */
+    selectedLabel?: string;
+    disabled?: boolean;
+    /** Leading glyph for the option: a runtime icon name or a rendered node. */
+    icon?: LabelIconSpec;
+    /**
+     * Optional section label. A non-interactive header renders above the first
+     * option of each group (options are grouped by contiguous `group` value in
+     * the order provided). Options without a `group` render no header.
+     */
+    group?: string;
+    /** Browser tooltip on the option row (for truncated or explanatory labels). */
+    title?: string;
+};
+type ComboboxBaseProps = {
+    /** Available options, rendered in the order provided. */
+    options: ComboboxOption[];
+    /** Ghost text when no value is set. */
+    placeholder?: string;
+    /** Optional label rendered inline inside the control, before the input. */
+    label?: ReactNode;
+    /**
+     * Accessible name for the input. Use when `label` is a non-string node (e.g.
+     * an icon) so the control still has a text name for screen readers; defaults
+     * to `label` when it is a string.
+     */
+    ariaLabel?: string;
+    /** Disables the input. */
+    disabled?: boolean;
+    /** When true, the value cannot be cleared (the clear button is hidden). */
+    required?: boolean;
+    /**
+     * Marks the control as invalid: renders a destructive border and sets
+     * aria-invalid. Purely presentational — the consumer decides what invalid
+     * means (e.g. a value absent from the options in a strict picker).
+     */
+    invalid?: boolean;
+    /**
+     * When false, the value is restricted to the provided options — typed text
+     * that does not match an option is discarded instead of committed. Defaults
+     * to true (freeform entry allowed).
+     */
+    allowCustomValue?: boolean;
+    /**
+     * Converts unmatched text into a creatable option. Returning null rejects
+     * the text. The same option decorates a controlled unmatched single value.
+     */
+    onNew?: (value: string) => ComboboxOption | null;
+    /**
+     * Converts a creatable option into the committed value. Returning null
+     * rejects the candidate. Defaults to the option's value.
+     */
+    onCreate?: (option: ComboboxOption) => string | null;
+    /** HTML id for the input element. */
+    id?: string;
+    /**
+     * Overrides the input's height/padding/text size with an explicit size token
+     * (xs–xl). When unset, the input uses the global density tokens.
+     */
+    size?: FormSize;
+    /** Classes applied to the root wrapper. */
+    className?: string;
+    /** Shows a loading indicator when options are being fetched. */
+    loading?: boolean;
+    /**
+     * Optional async search invoked (debounced ~250ms) as the user types. The
+     * consumer fetches and feeds matching options back via the `options` prop.
+     */
+    onSearch?: (query: string) => void;
+    /** Called when a key is pressed in the input. */
+    onKeyDown?: (e: KeyboardEvent<HTMLInputElement>) => void;
+    /** Trailing in-field adornment, rendered left of the clear/chevron controls. */
+    suffix?: ReactNode;
+    /** Leading in-field adornment, rendered at the left edge of the input. */
+    prefix?: ReactNode;
+    /** Non-interactive content pinned below the option rows. */
+    footer?: ReactNode;
+};
+export type ComboboxSingleProps = ComboboxBaseProps & {
+    multiple?: false;
+    tristate?: false;
+    value: string;
+    onChange: (value: string) => void;
+};
+export type ComboboxMultiProps = ComboboxBaseProps & {
+    multiple: true;
+    tristate?: false;
+    value: string[];
+    onChange: (value: string[]) => void;
+};
+export type ComboboxTriStateMode = "include" | "exclude";
+export type ComboboxTriStateProps = ComboboxBaseProps & {
+    multiple: true;
+    tristate: true;
+    value: Record<string, ComboboxTriStateMode>;
+    onChange: (value: Record<string, ComboboxTriStateMode>) => void;
+};
+export type ComboboxProps = ComboboxSingleProps | ComboboxMultiProps | ComboboxTriStateProps;
+export {};
+//# sourceMappingURL=combobox-types.d.ts.map

package/dist/components/combobox-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"combobox-types.d.ts","sourceRoot":"","sources":["../../src/components/combobox-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,yDAAyD;IACzD,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,MAAM,GAAG,IAAI,CAAC;IACrD,qCAAqC;IACrC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,iDAAiD;IACjD,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC;IACzD,gFAAgF;IAChF,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG;IACpD,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,GAAG;IACnD,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,CAAC;AAEzD,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,GAAG;IACtD,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,EAAE,IAAI,CAAC;IACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC5C,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,KAAK,IAAI,CAAC;CACjE,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,kBAAkB,GAClB,qBAAqB,CAAC"}

package/dist/components/combobox-utils.cjs

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const COMBOBOX_MENU_MAX_WIDTH_PX = 400;
+const COMBOBOX_MENU_MAX_HEIGHT_PX = 256;
+function comboboxLabelPadding(label, measuredWidth) {
+  if (measuredWidth > 0) {
+    return { paddingLeft: `calc(${measuredWidth}px + 0.75rem)` };
+  }
+  if (typeof label !== "string") return { paddingLeft: "1.75rem" };
+  return { paddingLeft: `${Math.min(label.length * 0.48 + 0.75, 7)}rem` };
+}
+function withSelectedComboboxOptions(options, selectedValues) {
+  const present = new Set(options.map((option) => option.value));
+  const pinned = selectedValues.filter((value) => !present.has(value)).map((value) => ({ value, label: value }));
+  return pinned.length === 0 ? options : [...pinned, ...options];
+}
+exports.COMBOBOX_MENU_MAX_HEIGHT_PX = COMBOBOX_MENU_MAX_HEIGHT_PX;
+exports.COMBOBOX_MENU_MAX_WIDTH_PX = COMBOBOX_MENU_MAX_WIDTH_PX;
+exports.comboboxLabelPadding = comboboxLabelPadding;
+exports.withSelectedComboboxOptions = withSelectedComboboxOptions;
+//# sourceMappingURL=combobox-utils.cjs.map