@gntik-ai/blocks 0.7.0 → 0.8.0

package/dist/index.d.ts

@@ -1815,6 +1815,13 @@ export declare function CreateApiKeyDialog({ scopes, expiries, defaultExpiry, on
 //#region src/forms/CreateApiKeyDialog/block.meta.d.ts
 declare const meta$13: BlockMeta;
 //#endregion
+//#region src/forms/CredentialDisclosureDialog/types.d.ts
+interface CredentialSecret {
+  id: string;
+  label: string;
+  value: string;
+}
+//#endregion
 //#region src/forms/CredentialDisclosureDialog/CredentialDisclosureDialog.d.ts
 export interface CredentialDisclosure {
   variant: 'stored' | 'fresh';
@@ -1824,9 +1831,21 @@ export interface CredentialDisclosure {
   secret: string;
 }
 export interface CredentialDisclosureDialogProps {
+  /** Additional masked values; ids must be unique, non-empty and not "secret". */
+  additionalSecrets?: readonly CredentialSecret[];
+  /** Mask a fresh primary secret; read at the start of each session. */
+  maskFresh?: boolean;
+  /** Redacted content below the secrets; clear secret-bearing content on close. */
+  revealContent?: ReactNode;
+  /** Presentation fixed for each non-null opening. Defaults to a modal dialog. */
+  presentation?: 'dialog' | 'inline';
+  /** Called after copying with the secret id (primary: "secret"), never its value. */
+  onCopy?: (id: string) => void;
+  /** Label-only success announcement override, used only in multi-secret mode. */
+  copiedAnnouncementFor?: (label: string) => string;
   /** Set only after a successful response. Leave null while pending or on failure. */
   disclosure: CredentialDisclosure | null;
-  /** Clear disclosure to null on dismissal, dropping the secret in the consumer. */
+  /** Clear disclosure, additionalSecrets and secret-bearing revealContent on dismissal. */
   onClose: () => void;
   /** Resolve the current row action at close time, including after list reloads. */
   resolveReturnFocus?: () => HTMLElement | null;
@@ -1848,9 +1867,10 @@ export interface CredentialDisclosureDialogProps {
   closeLabel?: string;
 }
 /**
- * Discloses an existing credential only after a successful response. Consumers keep disclosure
- * null while pending or on failure, and clear it on close. No pending/error state or internal
- * secret retention. A fresh secret requires a new successful response to be shown again.
+ * Render only successful responses. Keep disclosure null while pending or on failure.
+ * On close, clear disclosure, additionalSecrets and any secret-bearing revealContent.
+ * No pending/error state or internal secret retention. Retained dismissed sessions stay closed;
+ * a changed credential/value or a null-to-value opening starts a new session.
  */
 export declare function CredentialDisclosureDialog(props: CredentialDisclosureDialogProps): import("react").JSX.Element | null;
 //#endregion
@@ -3730,5 +3750,5 @@ export declare function SessionsDevices({ sessions, onRevoke, onRevokeOthers, ti
 //#region src/team/SessionsDevices/block.meta.d.ts
 declare const meta$60: BlockMeta;
 //#endregion
-export { type ApiKeyExpiry, type ApiKeyScope, type Assistant, type AssistantStatus, type AuthFormAccessibilityProps, type AuthHeaderProps, type AuthIdentifierConfig, type AuthSignUpField, type AuthSignUpValidationMessages, type AuthUnavailableState, type AuthValidationMessages, type BlockMeta, type CodeFile, type CodePanelMarker, type CodeProblem, type ColumnResizeHandleProps, type ColumnVisibilityMenuProps, type ColumnWidths, type ConfirmDestructiveDialogProps, type ConsoleEntry, type CostPoint, type DangerZoneAction, type DataTableCellEdit, type DataTableCellEditHandler, type DataTableCellEditResult, type DataTableLabels, type DataTableProps, type DataTableView, type DataTableViewState, ViewSwitcher as DataTableViewSwitcher, type ViewSwitcherProps as DataTableViewSwitcherProps, type DensityToggleProps, type DeploymentRow, type DeviceKind, type DeviceSession, type EditableMember, type EvalMetric, type EvalRow, type EventKind, type EventTone, type FeedbackAction, type FlowConnection, type FlowConnectionRejection, type FlowEdge, type FlowHandle, type FlowNode, type FlowNodeData, type FlowNodeKind, type FlowNodeRenderProps, type FlowNodeRenderer, type FlowTone, type FlowValidationIssue, type Invitation, type LogLevel, type LogLine, type MarketingAction, type Member, type ModelKey, type ModelKeyStatus, type MonacoReady, type NodeInspectorProps, type NodePaletteProps, type NotificationChannel, type NotificationEvent, type NotificationMatrixValue, type PageChromeAction, type PaletteItem, type PanelHeading, type PinSide, type PinnedColumns, type PlanSummaryProps, type ProblemSeverity, type Profile, type ProfileMetaItem, type RoleOption, type RunConsoleProps, type ScheduleEvent, type SpanDetailsProps, type SpanKind, type SsoProvider, type SummaryPlan, type TokenUsagePeriod, type TraceSpan, type TrafficRow, type UploadItem, type UploadStatus, type ValidationIssue, meta$1 as activityFeedMeta, meta$2 as agendaListMeta, meta$3 as appSidebarMeta, meta$4 as appTopbarMeta, meta$5 as assistantCardGridMeta, meta$6 as bulkActionBarMeta, meta$7 as chartCardMeta, meta$8 as codePanelMeta, meta$9 as commentThreadMeta, meta$10 as comparisonTableMeta, meta$11 as confirmDestructiveMeta, meta$12 as costBreakdownMeta, meta$13 as createApiKeyDialogMeta, meta$14 as credentialDisclosureDialogMeta, meta$15 as cursorPagerFooterMeta, meta$16 as dangerZoneMeta, meta$17 as dataTableMeta, meta$18 as dateRangeFilterMeta, meta$19 as descriptionListCardMeta, meta$20 as dialogWizardMeta, meta$21 as emptyStatesMeta, meta$22 as environmentBadgeMeta, meta$23 as errorPanelMeta, meta$24 as evaluationScorecardMeta, meta$25 as faqMeta, meta$26 as featureGridMeta, meta$27 as fileUploadPanelMeta, meta$28 as filterBarMeta, meta$29 as flowBuilderMeta, meta$30 as forgotPasswordFormMeta, meta$31 as formSectionMeta, meta$32 as globalSearchMeta, meta$33 as heroMeta, meta$34 as inlineCalloutMeta, meta$35 as inlineEditRowMeta, meta$36 as inviteMembersDialogMeta, meta$37 as invoiceTableMeta, meta$38 as kpiRowMeta, meta$39 as loadMoreFooterMeta, meta$40 as logViewerMeta, meta$41 as membersTableMeta, meta$42 as mfaChallengeMeta, meta$43 as modelKeysListMeta, meta$44 as monthCalendarMeta, meta$45 as notificationMatrixMeta, meta$46 as pageHeaderMeta, meta$47 as pageToolbarMeta, meta$48 as paginationFooterMeta, meta$49 as paymentMethodCardMeta, meta$50 as pendingInvitationsMeta, meta$51 as planCardMeta, meta$52 as planDefinitionCardMeta, meta$53 as pricingTableMeta, meta$54 as profileHeaderMeta, meta$55 as promptEditorMeta, meta$56 as quotaMetersMeta, meta$57 as resetPasswordFormMeta, meta$58 as resourceCardGridMeta, deviceSessions as sampleDeviceSessions, invitations$1 as sampleInvitations, members$1 as sampleMembers, profile$1 as sampleProfile, sampleEvents as sampleScheduleEvents, sampleToday as sampleScheduleToday, meta$59 as sectionHeaderMeta, meta$60 as sessionsDevicesMeta, meta$61 as settingsRowMeta, meta$62 as signInFormMeta, meta$63 as signUpFormMeta, meta$64 as skeletonsMeta, meta$65 as spendVsBudgetMeta, meta$66 as ssoButtonsMeta, meta$67 as statCardMeta, meta$68 as statusTimelineMeta, meta$69 as stickyActionBarMeta, meta$70 as subordinateListMeta, meta$71 as systemBannerMeta, meta$72 as timeSlotPickerMeta, meta$73 as tokenCostCardMeta, meta$74 as traceWaterfallMeta, meta$75 as truncatedCollectionFooterMeta, validationIssues$1 as validationIssues, meta$76 as validationSummaryMeta, meta$77 as weekCalendarMeta };
+export { type ApiKeyExpiry, type ApiKeyScope, type Assistant, type AssistantStatus, type AuthFormAccessibilityProps, type AuthHeaderProps, type AuthIdentifierConfig, type AuthSignUpField, type AuthSignUpValidationMessages, type AuthUnavailableState, type AuthValidationMessages, type BlockMeta, type CodeFile, type CodePanelMarker, type CodeProblem, type ColumnResizeHandleProps, type ColumnVisibilityMenuProps, type ColumnWidths, type ConfirmDestructiveDialogProps, type ConsoleEntry, type CostPoint, type CredentialSecret, type DangerZoneAction, type DataTableCellEdit, type DataTableCellEditHandler, type DataTableCellEditResult, type DataTableLabels, type DataTableProps, type DataTableView, type DataTableViewState, ViewSwitcher as DataTableViewSwitcher, type ViewSwitcherProps as DataTableViewSwitcherProps, type DensityToggleProps, type DeploymentRow, type DeviceKind, type DeviceSession, type EditableMember, type EvalMetric, type EvalRow, type EventKind, type EventTone, type FeedbackAction, type FlowConnection, type FlowConnectionRejection, type FlowEdge, type FlowHandle, type FlowNode, type FlowNodeData, type FlowNodeKind, type FlowNodeRenderProps, type FlowNodeRenderer, type FlowTone, type FlowValidationIssue, type Invitation, type LogLevel, type LogLine, type MarketingAction, type Member, type ModelKey, type ModelKeyStatus, type MonacoReady, type NodeInspectorProps, type NodePaletteProps, type NotificationChannel, type NotificationEvent, type NotificationMatrixValue, type PageChromeAction, type PaletteItem, type PanelHeading, type PinSide, type PinnedColumns, type PlanSummaryProps, type ProblemSeverity, type Profile, type ProfileMetaItem, type RoleOption, type RunConsoleProps, type ScheduleEvent, type SpanDetailsProps, type SpanKind, type SsoProvider, type SummaryPlan, type TokenUsagePeriod, type TraceSpan, type TrafficRow, type UploadItem, type UploadStatus, type ValidationIssue, meta$1 as activityFeedMeta, meta$2 as agendaListMeta, meta$3 as appSidebarMeta, meta$4 as appTopbarMeta, meta$5 as assistantCardGridMeta, meta$6 as bulkActionBarMeta, meta$7 as chartCardMeta, meta$8 as codePanelMeta, meta$9 as commentThreadMeta, meta$10 as comparisonTableMeta, meta$11 as confirmDestructiveMeta, meta$12 as costBreakdownMeta, meta$13 as createApiKeyDialogMeta, meta$14 as credentialDisclosureDialogMeta, meta$15 as cursorPagerFooterMeta, meta$16 as dangerZoneMeta, meta$17 as dataTableMeta, meta$18 as dateRangeFilterMeta, meta$19 as descriptionListCardMeta, meta$20 as dialogWizardMeta, meta$21 as emptyStatesMeta, meta$22 as environmentBadgeMeta, meta$23 as errorPanelMeta, meta$24 as evaluationScorecardMeta, meta$25 as faqMeta, meta$26 as featureGridMeta, meta$27 as fileUploadPanelMeta, meta$28 as filterBarMeta, meta$29 as flowBuilderMeta, meta$30 as forgotPasswordFormMeta, meta$31 as formSectionMeta, meta$32 as globalSearchMeta, meta$33 as heroMeta, meta$34 as inlineCalloutMeta, meta$35 as inlineEditRowMeta, meta$36 as inviteMembersDialogMeta, meta$37 as invoiceTableMeta, meta$38 as kpiRowMeta, meta$39 as loadMoreFooterMeta, meta$40 as logViewerMeta, meta$41 as membersTableMeta, meta$42 as mfaChallengeMeta, meta$43 as modelKeysListMeta, meta$44 as monthCalendarMeta, meta$45 as notificationMatrixMeta, meta$46 as pageHeaderMeta, meta$47 as pageToolbarMeta, meta$48 as paginationFooterMeta, meta$49 as paymentMethodCardMeta, meta$50 as pendingInvitationsMeta, meta$51 as planCardMeta, meta$52 as planDefinitionCardMeta, meta$53 as pricingTableMeta, meta$54 as profileHeaderMeta, meta$55 as promptEditorMeta, meta$56 as quotaMetersMeta, meta$57 as resetPasswordFormMeta, meta$58 as resourceCardGridMeta, deviceSessions as sampleDeviceSessions, invitations$1 as sampleInvitations, members$1 as sampleMembers, profile$1 as sampleProfile, sampleEvents as sampleScheduleEvents, sampleToday as sampleScheduleToday, meta$59 as sectionHeaderMeta, meta$60 as sessionsDevicesMeta, meta$61 as settingsRowMeta, meta$62 as signInFormMeta, meta$63 as signUpFormMeta, meta$64 as skeletonsMeta, meta$65 as spendVsBudgetMeta, meta$66 as ssoButtonsMeta, meta$67 as statCardMeta, meta$68 as statusTimelineMeta, meta$69 as stickyActionBarMeta, meta$70 as subordinateListMeta, meta$71 as systemBannerMeta, meta$72 as timeSlotPickerMeta, meta$73 as tokenCostCardMeta, meta$74 as traceWaterfallMeta, meta$75 as truncatedCollectionFooterMeta, validationIssues$1 as validationIssues, meta$76 as validationSummaryMeta, meta$77 as weekCalendarMeta };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,5 +1,5 @@
 'use client';
-import { Fragment, createElement, useCallback, useEffect, useId, useImperativeHandle, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
+import { Fragment, createElement, useCallback, useEffect, useEffectEvent, useId, useImperativeHandle, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { Activity, Archive, ArrowDown, ArrowLeft, ArrowRight, ArrowUp, BarChart3, Bookmark, Bot, Boxes, Braces, Building2, CalendarCheck, CalendarDays, Camera, Check, ChevronDown, ChevronLeft, ChevronRight, ChevronsUpDown, CircleAlert, CircleCheck, CircleHelp, CircleX, Clock, Cog, Columns3, Copy, CreditCard, Database, Download, ExternalLink, Eye, FileCode, FileText, FolderKanban, FolderPlus, Gauge, GitBranch, Globe, HardDrive, Home, Inbox, Info, KeyRound, Layers, LayoutGrid, List, ListFilter, Lock, LogOut, Mail, MailCheck, MapPin, Minus, Monitor, MousePointerClick, Pencil, Play, PlugZap, Plus, RefreshCw, Rocket, RotateCcw, RotateCw, Rows2, Rows3, Search, SearchX, Server, ServerCrash, Settings, ShieldCheck, SlidersHorizontal, Smartphone, Sparkles, Table2, Tablet, Trash2, TriangleAlert, Upload, User, UserMinus, UserPlus, Users, Workflow, Wrench, X, Zap } from "@gntik-ai/icons";
 import { Accordion, AccordionItem, AccordionPanel, AccordionTrigger, Alert, AlertDialog, AlertDialogAction, AlertDialogCancel, AlertDialogContent, AlertDialogDescription, AlertDialogFooter, AlertDialogHeader, AlertDialogTitle, AlertDialogTrigger, Avatar, Badge, Breadcrumbs, Button, Card, CardAction, CardBody, CardDescription, CardHeader, CardTitle, Checkbox, CheckboxGroup, ClickableCard, CodeBlock, Collapsible, CollapsiblePanel, CollapsibleTrigger, CommandPalette, CommandPaletteTrigger, CopyButton, CursorPagination, DEFAULT_DATE_RANGE_PRESETS, DateRangePicker, DensityProvider, Dialog, DialogBody, DialogClose, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, DialogTrigger, EmptyState, Field, FieldDescription, FieldError, FieldLabel, Fieldset, FieldsetLegend, IconButton, Input, Link, LiveAnnouncer, Logo, Menu, MenuCheckboxItem, MenuContent, MenuGroup, MenuGroupLabel, MenuItem, MenuRadioGroup, MenuRadioItem, MenuSeparator, MenuSub, MenuSubContent, MenuSubTrigger, MenuTrigger, Meter, MoreMenu, NavList, NotificationsPopover, OtpInput, Pagination, PasswordInput, Progress, Radio, RadioGroup, ResizablePanel, ResizablePanelGroup, ResizeHandle, SecretField, Select, SelectContent, SelectItem, SelectTrigger, SimpleSelect, Skeleton, Slider, Sparkline, Spinner, StatusDot, StatusTag, Switch, Table, TableBody, TableCaption, TableCell, TableHead, TableHeader, TableRow, Tabs, TabsList, TabsPanel, TabsTab, Textarea, ThemeCycleButton, ThemeSwitcher, Timestamp, Toggle, ToggleGroup, Token, TokenInput, Toolbar, ToolbarButton, ToolbarEnd, ToolbarInput, ToolbarSeparator, ToolbarStart, UserMenu, WizardLayout, WorkspaceSwitcher, buttonVariants, cn, nextSortDirection, tableVariants, toDate, useAnnounce, useDensity, useHasLiveAnnouncer, useI18n } from "@gntik-ai/ui";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
@@ -8056,11 +8056,78 @@ const meta$12 = {
 	]
 };
 //#endregion
+//#region src/forms/CredentialDisclosureDialog/SecretCopy.tsx
+/** Each secret owns feedback so simultaneous settlements cannot overwrite each other. */
+function SecretCopy({ secret, options, grouped = false, masked = true, warning }) {
+	const { t } = useI18n();
+	const [pending, setPending] = useState(false);
+	const copied = options.copiedLabel ?? t("credentialDisclosure.copied");
+	const content = /* @__PURE__ */ jsxs(LiveAnnouncer, { children: [
+		warning,
+		/* @__PURE__ */ jsx("div", {
+			"data-kit-redact": true,
+			children: masked ? /* @__PURE__ */ jsx(SecretField, {
+				value: secret.value,
+				copyable: false,
+				"aria-label": secret.label,
+				showLabel: options.showLabel ?? t("credentialDisclosure.show"),
+				hideLabel: options.hideLabel ?? t("credentialDisclosure.hide")
+			}) : /* @__PURE__ */ jsx(CodeBlock, {
+				code: secret.value,
+				copyable: false,
+				label: secret.label,
+				wrapToggle: false,
+				defaultWrap: true
+			})
+		}),
+		/* @__PURE__ */ jsx(CopyButton, {
+			value: () => {
+				if (grouped) setPending(true);
+				return secret.value;
+			},
+			loading: grouped && pending,
+			display: "label",
+			label: options.copyLabel ?? t("credentialDisclosure.copy"),
+			copiedLabel: copied,
+			announcement: grouped ? options.copiedAnnouncementFor?.(secret.label) ?? `${secret.label}: ${copied}` : options.successAnnouncement ?? t("credentialDisclosure.success"),
+			failureLabel: options.failureAnnouncement ?? t("credentialDisclosure.failure"),
+			failureAnnouncement: options.failureAnnouncement ?? t("credentialDisclosure.failure"),
+			failurePoliteness: "polite",
+			onCopy: () => {
+				if (grouped) setPending(false);
+				options.onCopy?.(secret.id);
+			},
+			onCopyError: () => {
+				if (grouped) setPending(false);
+			}
+		})
+	] });
+	return grouped ? /* @__PURE__ */ jsx("div", {
+		role: "group",
+		"aria-label": secret.label,
+		children: content
+	}) : content;
+}
+//#endregion
+//#region src/forms/CredentialDisclosureDialog/focus.ts
+/** Programmatic focus permits negative tabIndex, but never hidden, inert or disabled targets. */
+function usableFocusTarget(element) {
+	if (!(element instanceof HTMLElement) || !element.isConnected || element === document.body) return false;
+	if (element.matches(":disabled, [disabled], [aria-disabled=\"true\"], input[type=\"hidden\"]")) return false;
+	for (let ancestor = element; ancestor; ancestor = ancestor.parentElement) {
+		if (ancestor.hidden || ancestor.hasAttribute("inert") || ancestor.getAttribute("aria-disabled") === "true") return false;
+		const style = getComputedStyle(ancestor);
+		if (style.display === "none" || style.visibility === "hidden" || style.visibility === "collapse" || style.contentVisibility === "hidden") return false;
+	}
+	return element.tabIndex >= 0 || element.hasAttribute("tabindex") || element.isContentEditable;
+}
+//#endregion
 //#region src/forms/CredentialDisclosureDialog/CredentialDisclosureDialog.tsx
 /**
-* Discloses an existing credential only after a successful response. Consumers keep disclosure
-* null while pending or on failure, and clear it on close. No pending/error state or internal
-* secret retention. A fresh secret requires a new successful response to be shown again.
+* Render only successful responses. Keep disclosure null while pending or on failure.
+* On close, clear disclosure, additionalSecrets and any secret-bearing revealContent.
+* No pending/error state or internal secret retention. Retained dismissed sessions stay closed;
+* a changed credential/value or a null-to-value opening starts a new session.
 */
 function CredentialDisclosureDialog(props) {
 	if (!props.disclosure) return null;
@@ -8071,93 +8138,182 @@ function CredentialDisclosureDialog(props) {
 }
 function DisclosureOpening(props) {
 	const [opener] = useState(() => typeof document === "undefined" ? null : document.activeElement);
+	const [presentation] = useState(props.presentation ?? "dialog");
+	const root = useRef(null);
+	const target = useRef(null);
+	const active = useRef(opener);
+	const started = useRef(false);
+	const activeWasInside = useRef(false);
+	const returnFocus = () => {
+		const current = props.resolveReturnFocus?.();
+		if (usableFocusTarget(current)) return current;
+		const fallback = props.fallbackFocus?.();
+		if (usableFocusTarget(fallback)) return fallback;
+		return usableFocusTarget(opener) ? opener : false;
+	};
+	const restore = useEffectEvent(() => {
+		if (root.current?.contains(document.activeElement)) {
+			const element = returnFocus();
+			if (element) element.focus();
+		}
+	});
+	useLayoutEffect(() => {
+		const track = () => {
+			if (document.activeElement !== document.body) {
+				active.current = document.activeElement;
+				activeWasInside.current = root.current?.contains(document.activeElement) ?? false;
+			}
+		};
+		document.addEventListener("focusin", track);
+		return () => {
+			document.removeEventListener("focusin", track);
+			restore();
+		};
+	}, [presentation]);
+	useLayoutEffect(() => {
+		if (activeWasInside.current && active.current && !active.current.isConnected) target.current?.focus();
+	});
+	const seen = /* @__PURE__ */ new Set(["secret", ""]);
+	const additionalSecrets = (props.additionalSecrets ?? []).filter(({ id }) => {
+		if (seen.has(id)) return false;
+		seen.add(id);
+		return true;
+	});
 	const { variant, credentialId, secret } = props.disclosure;
 	return /* @__PURE__ */ jsx(DisclosureSession, {
 		...props,
-		opener
+		presentation,
+		additionalSecrets,
+		onRootRef: (node) => {
+			root.current = node;
+		},
+		onTargetRef: (node) => {
+			target.current = node;
+		},
+		onPopupRef: (node) => {
+			root.current = node;
+			target.current = node;
+		},
+		containsFocus: () => root.current?.contains(document.activeElement) ?? false,
+		initialFocus: () => {
+			const shouldFocus = !started.current || activeWasInside.current && !active.current?.isConnected;
+			started.current = true;
+			return shouldFocus ? root.current : false;
+		},
+		returnFocus
 	}, JSON.stringify([
 		variant,
 		credentialId,
-		secret
+		secret,
+		...additionalSecrets.map(({ id, value }) => [id, value])
 	]));
 }
-function DisclosureSession({ disclosure, onClose, resolveReturnFocus, fallbackFocus, opener, ...labels }) {
+function DisclosureSession(props) {
 	const { t } = useI18n();
+	const { disclosure, onRootRef, onTargetRef, onPopupRef, initialFocus, containsFocus, presentation, additionalSecrets = [] } = props;
 	const [open, setOpen] = useState(true);
-	const popup = useRef(null);
+	const [maskFresh] = useState(props.maskFresh ?? false);
 	const dismissed = useRef(false);
-	const returnFocus = () => {
-		const target = resolveReturnFocus?.();
-		if (usableFocusTarget(target)) return target;
-		const fallback = fallbackFocus?.();
-		if (usableFocusTarget(fallback)) return fallback;
-		return usableFocusTarget(opener) ? opener : false;
-	};
-	const closeLabel = labels.closeLabel ?? t("credentialDisclosure.close");
-	const secretLabel = labels.secretLabel ?? t("credentialDisclosure.secret");
+	const headingId = useId();
+	const close = () => {
+		if (dismissed.current) return;
+		dismissed.current = true;
+		if (presentation === "inline" && containsFocus()) {
+			const element = props.returnFocus();
+			if (element) element.focus();
+		}
+		setOpen(false);
+		props.onClose();
+	};
+	const closeLabel = props.closeLabel ?? t("credentialDisclosure.close");
+	const title = props.title ?? t("credentialDisclosure.title");
+	const description = props.description ?? t("credentialDisclosure.description");
+	const secretLabel = props.secretLabel ?? t("credentialDisclosure.secret");
+	const warning = disclosure.variant === "fresh" ? /* @__PURE__ */ jsx(Alert, {
+		role: presentation === "inline" ? "note" : "alert",
+		tone: "warning",
+		title: props.warningTitle ?? t("credentialDisclosure.warningTitle"),
+		description: props.warningText ?? t("credentialDisclosure.warningText")
+	}) : null;
+	const body = /* @__PURE__ */ jsxs(Fragment$1, { children: [
+		/* @__PURE__ */ jsxs("dl", {
+			className: "grid grid-cols-2 gap-2 text-sm",
+			children: [
+				/* @__PURE__ */ jsx("dt", {
+					className: "text-muted-foreground",
+					children: props.credentialIdLabel ?? t("credentialDisclosure.credentialId")
+				}),
+				/* @__PURE__ */ jsx("dd", {
+					className: "break-all font-mono",
+					children: disclosure.credentialId
+				}),
+				/* @__PURE__ */ jsx("dt", {
+					className: "text-muted-foreground",
+					children: props.expiryLabel ?? t("credentialDisclosure.expiry")
+				}),
+				/* @__PURE__ */ jsx("dd", { children: disclosure.expiresAt })
+			]
+		}),
+		/* @__PURE__ */ jsx(SecretCopy, {
+			secret: {
+				id: "secret",
+				label: secretLabel,
+				value: disclosure.secret
+			},
+			options: props,
+			grouped: additionalSecrets.length > 0,
+			masked: disclosure.variant === "stored" || maskFresh,
+			warning
+		}),
+		additionalSecrets.map((secret) => /* @__PURE__ */ jsx(SecretCopy, {
+			secret,
+			options: props,
+			grouped: true
+		}, secret.id)),
+		props.revealContent != null && /* @__PURE__ */ jsx("div", {
+			"data-kit-redact": true,
+			children: props.revealContent
+		})
+	] });
+	if (presentation === "inline") {
+		if (!open) return null;
+		return /* @__PURE__ */ jsxs("section", {
+			ref: onRootRef,
+			"aria-labelledby": headingId,
+			className: "grid gap-4",
+			children: [
+				/* @__PURE__ */ jsx("h2", {
+					id: headingId,
+					tabIndex: -1,
+					ref: onTargetRef,
+					children: title
+				}),
+				/* @__PURE__ */ jsx("p", { children: description }),
+				body,
+				/* @__PURE__ */ jsx(Button, {
+					variant: "secondary",
+					onClick: close,
+					children: closeLabel
+				})
+			]
+		});
+	}
 	return /* @__PURE__ */ jsx(Dialog, {
 		open,
 		onOpenChange: (next) => {
-			if (!next && !dismissed.current) {
-				dismissed.current = true;
-				setOpen(false);
-				onClose();
-			}
+			if (!next) close();
 		},
 		children: /* @__PURE__ */ jsx(DialogContent, {
-			ref: popup,
-			initialFocus: popup,
-			finalFocus: returnFocus,
+			ref: onPopupRef,
+			initialFocus,
+			finalFocus: () => dismissed.current ? props.returnFocus() : false,
 			showClose: false,
 			closeLabel,
 			children: open && /* @__PURE__ */ jsxs(Fragment$1, { children: [
-				/* @__PURE__ */ jsxs(DialogHeader, { children: [/* @__PURE__ */ jsx(DialogTitle, { children: labels.title ?? t("credentialDisclosure.title") }), /* @__PURE__ */ jsx(DialogDescription, { children: labels.description ?? t("credentialDisclosure.description") })] }),
-				/* @__PURE__ */ jsxs(DialogBody, {
+				/* @__PURE__ */ jsxs(DialogHeader, { children: [/* @__PURE__ */ jsx(DialogTitle, { children: title }), /* @__PURE__ */ jsx(DialogDescription, { children: description })] }),
+				/* @__PURE__ */ jsx(DialogBody, {
 					className: "grid gap-4",
-					children: [/* @__PURE__ */ jsxs("dl", {
-						className: "grid grid-cols-2 gap-2 text-sm",
-						children: [
-							/* @__PURE__ */ jsx("dt", {
-								className: "text-muted-foreground",
-								children: labels.credentialIdLabel ?? t("credentialDisclosure.credentialId")
-							}),
-							/* @__PURE__ */ jsx("dd", {
-								className: "break-all font-mono",
-								children: disclosure.credentialId
-							}),
-							/* @__PURE__ */ jsx("dt", {
-								className: "text-muted-foreground",
-								children: labels.expiryLabel ?? t("credentialDisclosure.expiry")
-							}),
-							/* @__PURE__ */ jsx("dd", { children: disclosure.expiresAt })
-						]
-					}), /* @__PURE__ */ jsxs(LiveAnnouncer, { children: [disclosure.variant === "stored" ? /* @__PURE__ */ jsx(SecretField, {
-						value: disclosure.secret,
-						copyable: false,
-						"aria-label": secretLabel,
-						showLabel: labels.showLabel ?? t("credentialDisclosure.show"),
-						hideLabel: labels.hideLabel ?? t("credentialDisclosure.hide")
-					}) : /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(Alert, {
-						role: "alert",
-						tone: "warning",
-						title: labels.warningTitle ?? t("credentialDisclosure.warningTitle"),
-						description: labels.warningText ?? t("credentialDisclosure.warningText")
-					}), /* @__PURE__ */ jsx(CodeBlock, {
-						code: disclosure.secret,
-						copyable: false,
-						label: secretLabel,
-						wrapToggle: false,
-						defaultWrap: true
-					})] }), /* @__PURE__ */ jsx(CopyButton, {
-						value: () => disclosure.secret,
-						display: "label",
-						label: labels.copyLabel ?? t("credentialDisclosure.copy"),
-						copiedLabel: labels.copiedLabel ?? t("credentialDisclosure.copied"),
-						announcement: labels.successAnnouncement ?? t("credentialDisclosure.success"),
-						failureLabel: labels.failureAnnouncement ?? t("credentialDisclosure.failure"),
-						failureAnnouncement: labels.failureAnnouncement ?? t("credentialDisclosure.failure"),
-						failurePoliteness: "polite"
-					})] })]
+					children: body
 				}),
 				/* @__PURE__ */ jsx(DialogFooter, { children: /* @__PURE__ */ jsx(DialogClose, {
 					render: /* @__PURE__ */ jsx(Button, { variant: "secondary" }),
@@ -8167,24 +8323,13 @@ function DisclosureSession({ disclosure, onClose, resolveReturnFocus, fallbackFo
 		})
 	});
 }
-/** Programmatic focus permits negative tabIndex, but never hidden, inert or disabled targets. */
-function usableFocusTarget(element) {
-	if (!(element instanceof HTMLElement) || !element.isConnected || element === document.body) return false;
-	if (element.matches(":disabled, [disabled], [aria-disabled=\"true\"], input[type=\"hidden\"]")) return false;
-	for (let ancestor = element; ancestor; ancestor = ancestor.parentElement) {
-		if (ancestor.hidden || ancestor.hasAttribute("inert") || ancestor.getAttribute("aria-disabled") === "true") return false;
-		const style = getComputedStyle(ancestor);
-		if (style.display === "none" || style.visibility === "hidden" || style.visibility === "collapse" || style.contentVisibility === "hidden") return false;
-	}
-	return element.tabIndex >= 0 || element.hasAttribute("tabindex") || element.isContentEditable;
-}
 //#endregion
 //#region src/forms/CredentialDisclosureDialog/block.meta.ts
 const meta$13 = {
 	name: "Credential disclosure dialog",
 	family: "forms",
 	status: "beta",
-	description: "Controlled disclosure for an existing credential. Set disclosure ({variant: stored | fresh, credentialId, expiresAt: caller-formatted ReactNode, secret}) only after a successful response; null renders nothing while pending or on failure. Clear disclosure to null in onClose to drop the secret; a fresh secret requires a new successful response before showing it again. No pending/error state or internal secret retention. Stored values start masked; each null-to-value opening or changed credentialId/secret resets masking and copy feedback. Fresh values use a non-copyable CodeBlock with a kit CopyButton and a replacement warning. Optional English defaults through en/es i18n for title, description, credentialIdLabel, expiryLabel, secretLabel, showLabel, hideLabel, copyLabel, copiedLabel, successAnnouncement, failureAnnouncement, warningTitle, warningText and closeLabel. Copy results are announced politely, including manual-selection fallback. Popup initial focus and focus trapping use Base UI; at close, resolveReturnFocus() is validated for connection, visibility, enabled state and focusability, then fallbackFocus(), then the original opener. Synthetic fixtures only; the default Stored preview is masked and the Fresh preview starts closed.",
+	description: "Controlled disclosure for an existing credential. Set disclosure ({variant: stored | fresh, credentialId, expiresAt: caller-formatted ReactNode, secret}) only after a successful response; null renders nothing while pending or on failure. Clear disclosure, additionalSecrets and secret-bearing revealContent in onClose to drop every secret; a fresh secret requires a new successful response before showing it again. No pending/error state or internal secret retention. Stored values start masked; each null-to-value opening or changed credentialId/secret resets masking and copy feedback. Fresh values use a non-copyable CodeBlock with a kit CopyButton and a replacement warning, or a masked SecretField when maskFresh is set at session start. Optional additionalSecrets ({id, label, value}) are always masked and use independent toggles and serialized copy actions; ids must be non-empty, unique and not secret, with the first duplicate winning. Multi-secret groups announce label plus copiedLabel, or copiedAnnouncementFor(label); onCopy(id) never receives a value. Every secret and the optional revealContent slot have data-kit-redact. The session key includes additional ids and values. presentation is dialog by default or inline, fixed until the next opening: inline is a named section, never traps focus or handles Escape, and its warning is a non-live note. Surviving focus stays; removing the focused slot or session control focuses the popup or inline heading. Focused inline unmounts return focus through the same resolvers. Dismissed retained props stay hidden; clear and re-set or change a session value to reopen. Optional English defaults through en/es i18n for title, description, credentialIdLabel, expiryLabel, secretLabel, showLabel, hideLabel, copyLabel, copiedLabel, successAnnouncement, failureAnnouncement, warningTitle, warningText and closeLabel. Copy results are announced politely, including manual-selection fallback. Popup initial focus and focus trapping use Base UI; at close, resolveReturnFocus() is validated for connection, visibility, enabled state and focusability, then fallbackFocus(), then the original opener. Synthetic fixtures only; the default Stored preview is masked and the Fresh preview starts closed.",
 	uses: [
 		"Dialog",
 		"SecretField",