@gooddata/sdk-ui-ext 11.51.0-alpha.0 → 11.51.0-alpha.2

package/esm/share/ObjectShareDialog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ObjectShareDialog.d.ts","sourceRoot":"","sources":["../../src/share/ObjectShareDialog.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAY1E,OAAO,KAAK,EAAE,sBAAsB,EAA8B,MAAM,kCAAkC,CAAC;AAC3G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAQpD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,gDAAgD;IAChD,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7C,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,4FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,EAC9B,MAAM,EACN,WAAW,EACX,MAAM,EACN,OAAO,EACP,OAAO,EACP,MAAM,EACN,aAAa,EACb,WAAW,EACX,UAAU,EACb,EAAE,uBAAuB,2CAsTzB"}
+{"version":3,"file":"ObjectShareDialog.d.ts","sourceRoot":"","sources":["../../src/share/ObjectShareDialog.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAc1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA8B1E;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,gDAAgD;IAChD,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7C,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAC1D;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,uBAAuB,kDAK/D"}

package/esm/share/ObjectShareDialog.js

@@ -1,15 +1,21 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // (C) 2026 GoodData Corporation
-import { useCallback, useState } from "react";
 import { useIntl } from "react-intl";
 import { UiAddGranteeDialog, UiConfirmDialog, UiGranteeRowControls, UiObjectShareDialog, UiTag, UiTooltip, } from "@gooddata/sdk-ui-kit";
 import { objectShareMessages } from "./messages.js";
-import { granteeDisplayPair, userDisplayPair } from "./objectShareController.helpers.js";
-import { useObjectShareController } from "./useObjectShareController.js";
+import { granteeDisplayPair } from "./objectShareController.helpers.js";
+import { useObjectShareDialog } from "./useObjectShareDialog.js";
 // The workspace row has no labels menu (see workspaceControls below), so its
 // required onLabelsChange never fires; a stable no-op satisfies the prop type
 // without churning the controls' identity each render.
 const noop = () => { };
+// Static Admin badge on the synthesized administrator self row — the tooltip
+// explains the grant-independent access; the focusable span keeps it
+// keyboard-reachable (UiTag itself is not interactive).
+function AdminSelfTag() {
+    const intl = useIntl();
+    return (_jsx(UiTooltip, { triggerBy: ["hover", "focus"], content: intl.formatMessage(objectShareMessages.adminTagTooltip), anchor: _jsx("span", { tabIndex: 0, children: _jsx(UiTag, { label: intl.formatMessage(objectShareMessages.adminTagLabel), size: "small", variant: "solid" }) }) }));
+}
 /**
  * Connected share dialog. Renders the main share modal, the add-grantee
  * sub-dialog and the general-access confirm dialog, all driven by one
@@ -17,178 +23,98 @@ const noop = () => { };
  * be safely co-mounted; focus, backdrop and portal lifecycles are owned by
  * `UiModalDialog` inside the kit.
  *
- * Mount unconditionally and toggle via `isOpen`; the contents stay invisible
- * while closed. For the common case pass plain props and let the dialog own its
- * controller:
- *
- * ```tsx
- * <ObjectShareDialog target={ref} objectTitle={title} isOpen={open} onClose={close} />
- * ```
+ * One open = one dialog session over one fixed `target`: the session (the
+ * controller, its fetches, every transient — pending rows, staged confirms,
+ * optimistic edits) exists only while `isOpen`, enforced here, so the component
+ * may safely stay mounted across open/close cycles. Do not swap the target —
+ * or the backend/workspace context — while open; close and reopen instead.
  *
  * @internal
  */
-export function ObjectShareDialog({ target, objectTitle, isOpen, onClose, onSaved, labels, labelsLoading, labelsError, controller, }) {
+export function ObjectShareDialog(props) {
+    if (!props.isOpen) {
+        return null;
+    }
+    return _jsx(ObjectShareDialogSession, { ...props });
+}
+/** The dialog session — mounted only while open, so its state cannot outlive a close. */
+function ObjectShareDialogSession({ target, objectTitle, onClose, onSummaryChange, labels, labelsLoading, labelsError, }) {
     const intl = useIntl();
-    // Own a controller unless the consumer injects one. The hook must run
-    // unconditionally (rules of hooks), so when a controller is injected we pass
-    // it an undefined target — it then no-ops and never duplicates the fetch the
-    // injected controller already owns.
-    const ownController = useObjectShareController(controller ? undefined : target, {
-        onSaved,
+    const { state, actions, isShareViewOpen, isAddGranteeOpen, isGeneralAccessConfirmOpen, isSelfRestrictConfirmOpen, isMutable, isLoading, workspaceDisabledLevels, rowDisabledLevels, onClose: closeDialog, onRowPermissionChange, onRowRemove, onSelfRestrictCancel, onSelfRestrictConfirm, } = useObjectShareDialog({
+        target,
+        onClose,
+        onSummaryChange,
         labels,
-        labelsError,
         labelsLoading,
-        isOpen,
+        labelsError,
     });
-    const { state, actions } = controller ?? ownController;
-    // Staged self-restriction — the level (or removal) the signed-in user picked
-    // for their own sole grant, held until the "Restrict your access?" confirm.
-    const [pendingSelfChange, setPendingSelfChange] = useState(undefined);
-    // Drop the staged self-restriction whenever `isOpen` flips OR the target
-    // changes — the detail view navigates between objects by toggling `isOpen`
-    // alone (no onClose), but a consumer may also swap the target while open, and
-    // the self row's id is target-independent: a stale confirm could otherwise
-    // apply the restriction to the NEXT object. Render-time adjust, matching the
-    // controller's own reset-on-target idiom.
-    const [lastOpen, setLastOpen] = useState(isOpen);
-    const [lastTargetKey, setLastTargetKey] = useState(state.targetKey);
-    if (lastOpen !== isOpen || lastTargetKey !== state.targetKey) {
-        setLastOpen(isOpen);
-        setLastTargetKey(state.targetKey);
-        setPendingSelfChange(undefined);
-    }
-    const handleClose = useCallback(() => {
-        setPendingSelfChange(undefined);
-        actions.reset();
-        onClose();
-    }, [actions, onClose]);
-    const isAddGranteeOpen = isOpen && state.subview === "addGrantee";
-    const isShareOpen = isOpen && state.subview === "main";
-    const isConfirmOpen = isOpen && !!state.pendingGeneralAccess;
-    // Don't allow mutations until the access list has loaded: before then the
-    // controller reports empty grantees + RESTRICTED, which is a placeholder, not
-    // the real state. Acting on it would write from a false assumption. Mutations
-    // are also gated until per-label scope resolves (`labelsResolved`): a new
-    // grantee defaults to all labels, and any access change before resolution
-    // would diff against an assumed-full scope (skipping grants / revoking the
-    // wrong labels). `labelsResolved` is false while labels are still loading and
-    // when their fetch failed, so a pending/failed label set blocks every
-    // access-changing control here — Add, row controls and general access alike.
-    const isLoaded = state.status === "success";
-    const isMutable = isLoaded && state.labelsResolved;
-    const isAddDisabled = !isMutable;
-    // Single-viewer empty states (design: the "restrict own access" board):
-    // (a) the sole explicit grant is the signed-in user's own → their row hosts a
-    //     merged menu managing their own access, with lowering gated by a confirm.
-    const soleSelfGrantee = state.grantees.length === 1 && !!state.grantees[0].isSelf;
-    // Until the profile resolves (or when it silently failed), a sole USER row
-    // can't be told apart from the caller's own grant — mutating it then would
-    // bypass the self-restriction confirm, so it stays disabled, not merely
-    // unmerged. Group rows are never the caller's own, and multi-row lists are
-    // unaffected: their rows aren't self-managed.
-    const soleRowIdentityPending = state.grantees.length === 1 && state.grantees[0].kind === "user" && !state.selfIdentityResolved;
-    // (b) the manage-gated list LOADED with no explicit grants at all → the caller
-    //     can only have passed the backend's gate through administrator/manager
-    //     rights, so render a synthesized self row with a static Admin tag. Keyed
-    //     to the load-time fact (`seededWithoutGrants`), not the live list — a
-    //     grant-holder who removes their own sole grant empties the list without
-    //     having grant-independent access. A workspace-wide SHARE rule is the one
-    //     other way through the gate — the viewer may then be any workspace
-    //     member, so no badge (list stays empty).
-    const workspaceShareCapable = state.generalAccess === "WORKSPACE" && state.workspaceLevel === "SHARE";
-    const adminSelfIdentity = isLoaded && state.grantees.length === 0 && state.seededWithoutGrants && !workspaceShareCapable
-        ? state.selfIdentity
-        : undefined;
-    const adminDisplay = adminSelfIdentity
-        ? userDisplayPair(adminSelfIdentity, adminSelfIdentity.id)
-        : undefined;
-    // Map the controller's labels to the picker's item shape; the primary label
-    // is rendered locked (always selected, can't be unchecked).
+    // Primary label is locked — always selected, can't be unchecked.
     const labelItems = state.labels.map((l) => ({
         id: l.id,
         label: l.title,
         kind: l.isPrimary ? "primary" : undefined,
         locked: l.isPrimary,
     }));
-    return (_jsxs(_Fragment, { children: [_jsx(UiObjectShareDialog, { isOpen: isShareOpen, objectTitle: objectTitle, onClose: handleClose, grantees: adminDisplay
-                    ? [
-                        {
-                            id: "self-admin",
-                            kind: "user",
-                            name: intl.formatMessage(objectShareMessages.granteeYou, {
-                                name: adminDisplay.name,
-                            }),
-                            email: adminDisplay.email,
-                            controls: (_jsx(UiTooltip, { triggerBy: ["hover", "focus"], content: intl.formatMessage(objectShareMessages.adminTagTooltip), anchor: _jsx("span", { tabIndex: 0, children: _jsx(UiTag, { label: intl.formatMessage(objectShareMessages.adminTagLabel), size: "small", variant: "solid" }) }) })),
-                        },
-                    ]
-                    : state.grantees.map((g) => {
-                        const display = granteeDisplayPair(g);
-                        const isManagedSelf = soleSelfGrantee && !!g.isSelf;
-                        return {
-                            id: g.id,
-                            kind: g.kind,
-                            name: g.isSelf
-                                ? intl.formatMessage(objectShareMessages.granteeYou, {
-                                    name: display.name,
-                                })
-                                : display.name,
-                            email: display.email,
-                            isPending: g.pending !== undefined,
-                            controls: (_jsx(UiGranteeRowControls, { labels: labelItems, selectedLabelIds: state.selectedLabelIdsByGrantee[g.id] ??
-                                    state.labels.map((l) => l.id), permissionLevel: g.level, effectivePermission: g.effectivePermission, mergedControls: isManagedSelf, 
-                                // Above the user's own level there is no way back
-                                // (you can't raise yourself) — offered levels above
-                                // it render disabled with the shared warning.
-                                disabledLevels: isManagedSelf && g.level === "VIEW" ? ["SHARE"] : undefined, disabledTooltip: isManagedSelf
-                                    ? intl.formatMessage(objectShareMessages.selfRestrictWarning)
-                                    : undefined, 
-                                // Disable row controls while saving, until per-label
-                                // scope resolves (labels still loading, failed, or the
-                                // probe in flight) — removing or re-scoping before then
-                                // would diff against the "assume all"/empty placeholder
-                                // and silently orphan real per-label grants — and while
-                                // a sole row's self identity is still unknown.
-                                isDisabled: g.pending !== undefined ||
-                                    !state.labelsResolved ||
-                                    soleRowIdentityPending, onLabelsChange: (selectedIds) => {
-                                    void actions.changeGranteeLabels(g.id, selectedIds);
-                                }, onPermissionChange: (level) => {
-                                    if (isManagedSelf) {
-                                        if (level !== g.level) {
-                                            setPendingSelfChange({ granteeId: g.id, level });
-                                        }
-                                        return;
-                                    }
-                                    void actions.changePermissionLevel(g.id, level);
-                                }, onRemoveAccess: () => {
-                                    if (isManagedSelf) {
-                                        setPendingSelfChange({ granteeId: g.id, level: "none" });
-                                        return;
-                                    }
-                                    void actions.removeGrantee(g.id);
-                                } })),
-                        };
-                    }), onAddClick: actions.openAddGrantee, isAddDisabled: isAddDisabled, generalAccess: state.generalAccess, onGeneralAccessChange: actions.requestGeneralAccessChange, 
-                // Inherited workspace access can't be revoked here — the kit disables
-                // the Restricted option and explains why.
-                workspaceAccessInherited: state.workspaceAccessInherited, 
-                // Permission dropdown on the "All workspace members" row — only while
-                // workspace access is on (the rule must exist to be re-graded). No
-                // labels (⋯) menu and no remove: per the Figma spec the workspace row
-                // carries the permission picker alone; the workspace rule's label
-                // scope is managed implicitly with the RESTRICTED↔WORKSPACE toggle.
+    const toGranteeRow = (g) => {
+        const display = granteeDisplayPair(g);
+        // Levels come back only for the signed-in user's own sole grant (you can't
+        // raise yourself); the confirm-vs-direct routing lives in the hook too.
+        const disabledLevels = rowDisabledLevels(g);
+        return {
+            id: g.id,
+            kind: g.kind,
+            name: g.isSelf
+                ? intl.formatMessage(objectShareMessages.granteeYou, { name: display.name })
+                : display.name,
+            email: display.email,
+            isPending: g.pending !== undefined,
+            controls: (_jsx(UiGranteeRowControls, { labels: labelItems, selectedLabelIds: state.selectedLabelIdsByGrantee[g.id] ?? state.labels.map((l) => l.id), permissionLevel: g.level, effectivePermission: g.effectivePermission, disabledLevels: disabledLevels, disabledTooltip: disabledLevels
+                    ? intl.formatMessage(objectShareMessages.selfRestrictWarning)
+                    : undefined, 
+                // Disabled while the row's own write is saving, while mutations are
+                // gated (unresolved label scope would orphan real per-label grants),
+                // and while a sole row's self identity is unknown.
+                isDisabled: g.pending !== undefined || !isMutable || state.granteeControlsLocked, onLabelsChange: (selectedIds) => {
+                    void actions.changeGranteeLabels(g.id, selectedIds);
+                }, onPermissionChange: (level) => onRowPermissionChange(g, level), onRemoveAccess: () => onRowRemove(g) })),
+        };
+    };
+    // Synthesized empty-state row: the controller reports it only while the list
+    // holds no grantees (adding one replaces it, removing the last one restores
+    // it — see `adminSelfRow`). The controller decides; this only renders it.
+    const rows = [
+        ...(state.adminSelfRow
+            ? [
+                {
+                    id: "self-admin",
+                    kind: "user",
+                    name: intl.formatMessage(objectShareMessages.granteeYou, {
+                        name: state.adminSelfRow.name,
+                    }),
+                    email: state.adminSelfRow.email,
+                    controls: _jsx(AdminSelfTag, {}),
+                },
+            ]
+            : []),
+        ...state.grantees.map(toGranteeRow),
+    ];
+    return (_jsxs(_Fragment, { children: [_jsx(UiObjectShareDialog, { isOpen: isShareViewOpen, objectTitle: objectTitle, onClose: closeDialog, grantees: rows, isLoading: isLoading, onAddClick: actions.openAddGrantee, isAddDisabled: !isMutable, generalAccess: state.generalAccess, onGeneralAccessChange: actions.requestGeneralAccessChange, 
+                // Inherited workspace access can't be revoked here.
+                workspaceAccessInherited: state.workspaceInheritedLevel !== undefined, 
+                // Only while workspace access is on (the rule must exist to re-grade).
+                // The workspace row has the permission picker alone — no labels/remove;
+                // its label scope follows the RESTRICTED↔WORKSPACE toggle implicitly.
                 workspaceControls: state.generalAccess === "WORKSPACE" ? (_jsx(UiGranteeRowControls, { labels: [], selectedLabelIds: [], permissionLevel: state.workspaceLevel, 
+                    // Levels below an inherited workspace-wide level can't take
+                    // effect (the inherited grant already exceeds them).
+                    disabledLevels: workspaceDisabledLevels, disabledTooltip: intl.formatMessage(objectShareMessages.workspaceLevelInherited), 
                     // Also disabled while its own re-grade is committing, so
                     // rapid toggles can't queue overlapping writes — and when
                     // the level is locked (inherited-only access has no direct
-                    // rule to re-grade; an inherited SHARE pins the level).
+                    // rule to re-grade; an inherited EDIT pins the level).
                     isDisabled: !isMutable || state.workspaceLevelSaving || state.workspaceLevelLocked, onLabelsChange: noop, onPermissionChange: (level) => {
                         void actions.changeWorkspaceLevel(level);
-                    } })) : undefined, 
-                // Keep the "All workspace members" description in sync with the picked
-                // level ("can view" vs "can view and share").
-                workspaceLevel: state.workspaceLevel, 
+                    } })) : undefined, workspaceLevel: state.workspaceLevel, 
                 // Gated on the same condition as Add: changing general access also
                 // mirrors the label scope, so it must wait for resolution and stay
                 // disabled when label metadata failed to load. Also gated while a
@@ -199,26 +125,14 @@ export function ObjectShareDialog({ target, objectTitle, isOpen, onClose, onSave
                 // On a failed load the empty grantee list + RESTRICTED radio are a
                 // placeholder, not the real policy — show why instead of letting it
                 // read as "no one has access".
-                error: state.status === "error" ? intl.formatMessage(objectShareMessages.loadError) : undefined }), _jsx(UiAddGranteeDialog, { isOpen: isAddGranteeOpen, objectTitle: objectTitle, loadOptions: actions.loadOptions, selectedGrantees: state.pendingGrantees, onSelectedGranteesChange: actions.setPendingGrantees, onBack: actions.closeAddGrantee, onClose: handleClose, onCancel: actions.closeAddGrantee, onShare: () => {
+                error: state.status === "error" ? intl.formatMessage(objectShareMessages.loadError) : undefined }), _jsx(UiAddGranteeDialog, { isOpen: isAddGranteeOpen, objectTitle: objectTitle, loadOptions: actions.loadOptions, selectedGrantees: state.pendingGrantees, onSelectedGranteesChange: actions.setPendingGrantees, onBack: actions.closeAddGrantee, onClose: closeDialog, onCancel: actions.closeAddGrantee, onShare: () => {
                     void actions.confirmAddGrantees();
-                } }), _jsx(UiConfirmDialog, { isOpen: isConfirmOpen, title: intl.formatMessage(state.pendingGeneralAccess === "RESTRICTED"
+                } }), _jsx(UiConfirmDialog, { isOpen: isGeneralAccessConfirmOpen, title: intl.formatMessage(state.pendingGeneralAccess === "RESTRICTED"
                     ? objectShareMessages.confirmRestrictTitle
                     : objectShareMessages.confirmGrantWorkspaceTitle), description: intl.formatMessage(state.pendingGeneralAccess === "RESTRICTED"
                     ? objectShareMessages.confirmRestrictDescription
                     : objectShareMessages.confirmGrantWorkspaceDescription, { title: objectTitle }), confirmLabel: intl.formatMessage(objectShareMessages.confirmButton), confirmVariant: "primary", onCancel: actions.cancelGeneralAccessChange, onClose: actions.cancelGeneralAccessChange, onConfirm: () => {
                     void actions.confirmGeneralAccessChange();
-                } }), _jsx(UiConfirmDialog, { isOpen: Boolean(isOpen && pendingSelfChange), title: intl.formatMessage(objectShareMessages.selfRestrictTitle), description: intl.formatMessage(objectShareMessages.selfRestrictWarning), confirmLabel: intl.formatMessage(objectShareMessages.confirmButton), confirmVariant: "primary", onCancel: () => setPendingSelfChange(undefined), onClose: () => setPendingSelfChange(undefined), onConfirm: () => {
-                    if (!pendingSelfChange) {
-                        return;
-                    }
-                    const { granteeId, level } = pendingSelfChange;
-                    setPendingSelfChange(undefined);
-                    if (level === "none") {
-                        void actions.removeGrantee(granteeId);
-                    }
-                    else {
-                        void actions.changePermissionLevel(granteeId, level);
-                    }
-                } })
+                } }), _jsx(UiConfirmDialog, { isOpen: isSelfRestrictConfirmOpen, title: intl.formatMessage(objectShareMessages.selfRestrictTitle), description: intl.formatMessage(objectShareMessages.selfRestrictWarning), confirmLabel: intl.formatMessage(objectShareMessages.confirmButton), confirmVariant: "primary", onCancel: onSelfRestrictCancel, onClose: onSelfRestrictCancel, onConfirm: onSelfRestrictConfirm })
         ] }));
 }

package/esm/share/accessSummary.d.ts

@@ -1,5 +1,7 @@
-import type { AccessGranteeDetail, IGranularRulesAccess } from "@gooddata/sdk-model";
+import type { AccessGranteeDetail, IGranularRulesAccess, IObjectAccessList } from "@gooddata/sdk-model";
 import type { GeneralAccessValue } from "@gooddata/sdk-ui-kit";
+import type { ObjectSharePermissionLevel } from "./objectShareController.types.js";
+import type { IObjectAccessSummary } from "./types.js";
 /**
  * All `allWorkspaceUsers` rule grants. With workspace hierarchy the backend
  * returns one entry per granting workspace — this workspace's own grant carries
@@ -16,11 +18,10 @@ export declare function findAllWorkspaceUsersGrants(grants: AccessGranteeDetail[
  */
 export declare function deriveGeneralAccess(grants: AccessGranteeDetail[]): GeneralAccessValue;
 /**
- * Workspace-wide permission level of this workspace's own rule grant. Defaults
- * to VIEW; promoted to SHARE only when some rule entry directly permits SHARE.
- * EDIT is intentionally not surfaced — the UI caps at VIEW/SHARE.
+ * Workspace-wide permission level of this workspace's own rule grant — the
+ * strongest level any rule entry directly permits, defaulting to VIEW.
  */
-export declare function deriveWorkspacePermissionLevel(grants: AccessGranteeDetail[]): "VIEW" | "SHARE";
+export declare function deriveWorkspacePermissionLevel(grants: AccessGranteeDetail[]): ObjectSharePermissionLevel;
 /**
  * Strongest workspace-wide level inherited from parent workspaces, or undefined
  * when none is inherited. Inherited rule access grants every user of this
@@ -28,15 +29,24 @@ export declare function deriveWorkspacePermissionLevel(grants: AccessGranteeDeta
  * cannot be revoked from here — consumers must surface it as workspace access
  * and disable the Restricted option.
  */
-export declare function deriveInheritedWorkspaceLevel(grants: AccessGranteeDetail[]): "VIEW" | "SHARE" | undefined;
+export declare function deriveInheritedWorkspaceLevel(grants: AccessGranteeDetail[]): ObjectSharePermissionLevel | undefined;
 /**
  * The effective (displayed) workspace access: the direct state composed with
  * inherited rule access. Inherited access makes general access WORKSPACE even
  * when this workspace holds no rule of its own, and the level is the strongest
  * of the two.
  */
-export declare function composeEffectiveWorkspaceAccess(direct: GeneralAccessValue, directLevel: "VIEW" | "SHARE", inheritedLevel: "VIEW" | "SHARE" | undefined): {
+export declare function composeEffectiveWorkspaceAccess(direct: GeneralAccessValue, directLevelValue: ObjectSharePermissionLevel, inheritedLevel: ObjectSharePermissionLevel | undefined): {
     generalAccess: GeneralAccessValue;
-    workspaceLevel: "VIEW" | "SHARE";
+    workspaceLevel: ObjectSharePermissionLevel;
 };
+/**
+ * The access summary of a fetched access list — effective workspace access plus the
+ * explicit grantee count. The single derivation shared by an inline access row (a
+ * consumer's own page-level fetch) and {@link ObjectShareDialog}'s `onSummaryChange`,
+ * so the two can never disagree on what a list means.
+ *
+ * @internal
+ */
+export declare function accessListToSummary(list: IObjectAccessList): IObjectAccessSummary;
 //# sourceMappingURL=accessSummary.d.ts.map

package/esm/share/accessSummary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accessSummary.d.ts","sourceRoot":"","sources":["../../src/share/accessSummary.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,oBAAoB,EAAE,CAEjG;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,CAIrF;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,GAAG,OAAO,CAI9F;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAMzG;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC3C,MAAM,EAAE,kBAAkB,EAC1B,WAAW,EAAE,MAAM,GAAG,OAAO,EAC7B,cAAc,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAC7C;IAAE,aAAa,EAAE,kBAAkB,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAKzE"}
+{"version":3,"file":"accessSummary.d.ts","sourceRoot":"","sources":["../../src/share/accessSummary.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG/D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,oBAAoB,EAAE,CAEjG;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,CAIrF;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,0BAA0B,CAExG;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CACzC,MAAM,EAAE,mBAAmB,EAAE,GAC9B,0BAA0B,GAAG,SAAS,CAExC;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC3C,MAAM,EAAE,kBAAkB,EAC1B,gBAAgB,EAAE,0BAA0B,EAC5C,cAAc,EAAE,0BAA0B,GAAG,SAAS,GACvD;IAAE,aAAa,EAAE,kBAAkB,CAAC;IAAC,cAAc,EAAE,0BAA0B,CAAA;CAAE,CAOnF;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,oBAAoB,CAUjF"}

package/esm/share/accessSummary.js

@@ -1,4 +1,5 @@
 // (C) 2026 GoodData Corporation
+import { directLevel, granteesFromAccessList, strongestLevel } from "./objectShareController.helpers.js";
 /**
  * All `allWorkspaceUsers` rule grants. With workspace hierarchy the backend
  * returns one entry per granting workspace — this workspace's own grant carries
@@ -21,14 +22,11 @@ export function deriveGeneralAccess(grants) {
         : "RESTRICTED";
 }
 /**
- * Workspace-wide permission level of this workspace's own rule grant. Defaults
- * to VIEW; promoted to SHARE only when some rule entry directly permits SHARE.
- * EDIT is intentionally not surfaced — the UI caps at VIEW/SHARE.
+ * Workspace-wide permission level of this workspace's own rule grant — the
+ * strongest level any rule entry directly permits, defaulting to VIEW.
  */
 export function deriveWorkspacePermissionLevel(grants) {
-    return findAllWorkspaceUsersGrants(grants).some((rule) => rule.permissions.includes("SHARE"))
-        ? "SHARE"
-        : "VIEW";
+    return directLevel(findAllWorkspaceUsersGrants(grants).flatMap((rule) => rule.permissions));
 }
 /**
  * Strongest workspace-wide level inherited from parent workspaces, or undefined
@@ -38,11 +36,7 @@ export function deriveWorkspacePermissionLevel(grants) {
  * and disable the Restricted option.
  */
 export function deriveInheritedWorkspaceLevel(grants) {
-    const inherited = findAllWorkspaceUsersGrants(grants).flatMap((rule) => rule.inheritedPermissions);
-    if (inherited.includes("SHARE")) {
-        return "SHARE";
-    }
-    return inherited.length > 0 ? "VIEW" : undefined;
+    return strongestLevel(findAllWorkspaceUsersGrants(grants).flatMap((rule) => rule.inheritedPermissions));
 }
 /**
  * The effective (displayed) workspace access: the direct state composed with
@@ -50,8 +44,26 @@ export function deriveInheritedWorkspaceLevel(grants) {
  * when this workspace holds no rule of its own, and the level is the strongest
  * of the two.
  */
-export function composeEffectiveWorkspaceAccess(direct, directLevel, inheritedLevel) {
+export function composeEffectiveWorkspaceAccess(direct, directLevelValue, inheritedLevel) {
     const generalAccess = direct === "WORKSPACE" || inheritedLevel ? "WORKSPACE" : "RESTRICTED";
-    const workspaceLevel = inheritedLevel === "SHARE" || (direct === "WORKSPACE" && directLevel === "SHARE") ? "SHARE" : "VIEW";
+    const workspaceLevel = directLevel([
+        ...(direct === "WORKSPACE" ? [directLevelValue] : []),
+        ...(inheritedLevel ? [inheritedLevel] : []),
+    ]);
     return { generalAccess, workspaceLevel };
 }
+/**
+ * The access summary of a fetched access list — effective workspace access plus the
+ * explicit grantee count. The single derivation shared by an inline access row (a
+ * consumer's own page-level fetch) and {@link ObjectShareDialog}'s `onSummaryChange`,
+ * so the two can never disagree on what a list means.
+ *
+ * @internal
+ */
+export function accessListToSummary(list) {
+    const inheritedLevel = deriveInheritedWorkspaceLevel(list.grants);
+    return {
+        ...composeEffectiveWorkspaceAccess(deriveGeneralAccess(list.grants), deriveWorkspacePermissionLevel(list.grants), inheritedLevel),
+        granteeCount: granteesFromAccessList(list).length,
+    };
+}

package/esm/share/messages.d.ts

@@ -33,6 +33,13 @@ export declare const objectShareMessages: {
     selfRestrictWarning: {
         id: string;
     };
+    /**
+     * Disabled-option tooltip on the workspace rule's permission menu for levels
+     * below an inherited workspace-wide grant, which they could never lower.
+     */
+    workspaceLevelInherited: {
+        id: string;
+    };
     granteeYou: {
         id: string;
     };

package/esm/share/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/share/messages.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;IAO5B;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWL,CAAC"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/share/messages.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;IAO5B;;;;OAIG;;;;IAEH;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWL,CAAC"}

package/esm/share/messages.js

@@ -21,6 +21,11 @@ export const objectShareMessages = defineMessages({
      * the copy must stay identical in both places by design.
      */
     selfRestrictWarning: { id: "objectShare.selfRestrict.warning" },
+    /**
+     * Disabled-option tooltip on the workspace rule's permission menu for levels
+     * below an inherited workspace-wide grant, which they could never lower.
+     */
+    workspaceLevelInherited: { id: "objectShare.workspaceLevel.inherited" },
     granteeYou: { id: "objectShare.grantee.you" },
     adminTagLabel: { id: "objectShare.adminTag.label" },
     adminTagTooltip: { id: "objectShare.adminTag.tooltip" },

package/esm/share/objectShareController.helpers.d.ts

@@ -1,5 +1,6 @@
 import { type IAvailableAccessGrantee, type IGranularAccessGrantee, type IObjectAccessList, type ObjRef } from "@gooddata/sdk-model";
-import type { IGranteeIdentityFacts, IObjectShareGrantee, ObjectSharePermissionLevel } from "./objectShareController.types.js";
+import type { GeneralAccessValue } from "@gooddata/sdk-ui-kit";
+import type { IGranteeIdentityFacts, IObjectShareGrantee, ISelfIdentity, ObjectSharePermissionLevel } from "./objectShareController.types.js";
 import type { IObjectShareLabel } from "./types.js";
 /** Stable row id shared by grantee rows and picker options: `user:<ref>` / `group:<ref>`. */
 export declare function granteeId(kind: "user" | "group", ref: ObjRef): string;
@@ -14,7 +15,7 @@ export declare function userIdentityFacts(ref: ObjRef, name: string | undefined,
 export declare function groupNameFact(ref: ObjRef, name: string | undefined): string | undefined;
 /** Identity facts for a listing/picker assignee — {@link userIdentityFacts} for users, a name fact for groups. */
 export declare function assigneeIdentityFacts(assignee: IAvailableAccessGrantee): IGranteeIdentityFacts;
-/** Display pair per the spec's fallback order: name + email → name + userID → email + userID → userID. */
+/** Display pair, falling back: name + email → name + userID → email + userID → userID. */
 export declare function userDisplayPair(facts: IGranteeIdentityFacts, userId: string): {
     name: string;
     email?: string;
@@ -24,18 +25,95 @@ export declare function granteeDisplayPair(grantee: IObjectShareGrantee): {
     name: string;
     email?: string;
 };
+/**
+ * Deterministic display order for grantee rows — the backend returns them
+ * unsorted (and in an order that shuffles across reloads). Own row first, then
+ * groups, then users; within each, case-insensitive by display name with the
+ * grantee id as a stable tiebreaker so equal names don't reshuffle. Returns a
+ * new array; the input is not mutated.
+ */
+export declare function sortGrantees(grantees: readonly IObjectShareGrantee[]): IObjectShareGrantee[];
+/**
+ * Deterministic display order for an attribute's labels — the backend returns
+ * display forms in an order that isn't guaranteed stable. Primary (key) label
+ * first, then the rest case-insensitive by title with the label id as a stable
+ * tiebreaker. Shared by the detail-page labels popup and the share dialog's
+ * label-access checklist so the two never disagree. Returns a new array; the
+ * input is not mutated.
+ *
+ * @internal
+ */
+export declare function sortShareableLabels(labels: readonly IObjectShareLabel[]): IObjectShareLabel[];
 /** Case-insensitive match of an assignee against the picker query (name, or email for users). */
 export declare function assigneeMatchesQuery(assignee: IAvailableAccessGrantee, query: string): boolean;
+/** The strongest permission level present, or undefined when none. */
+export declare function strongestLevel(permissions: readonly string[]): ObjectSharePermissionLevel | undefined;
 /** The row's directly-granted level — the strongest permission present, defaulting to VIEW. */
 export declare function directLevel(permissions: readonly string[]): ObjectSharePermissionLevel;
+/**
+ * Levels strictly above the given one, e.g. for disabling levels the caller can't
+ * grant. An undefined bound means "unknown" — nothing is above it, so no level is
+ * disabled.
+ */
+export declare function levelsAbove(level: ObjectSharePermissionLevel | undefined): ObjectSharePermissionLevel[];
+/** Levels strictly below the given one, e.g. for disabling levels an inherited grant already exceeds. */
+export declare function levelsBelow(level: ObjectSharePermissionLevel): ObjectSharePermissionLevel[];
 /**
  * The effective permission to surface as a warning, or undefined when the direct
- * grant already covers it. Set only when the grantee *inherits* SHARE (e.g. via a
- * group) but is directly granted just VIEW — i.e. the effective access is higher
+ * grant already covers it. Set only when the grantee *inherits* a level (e.g. via
+ * a group) above the directly-granted one — i.e. the effective access is higher
  * than what the row's permission control shows.
  */
-export declare function effectivePermissionAbove(direct: ObjectSharePermissionLevel, inheritedPermissions: readonly string[]): ObjectSharePermissionLevel | undefined;
+export declare function effectivePermissionAbove(direct: ObjectSharePermissionLevel, inheritedLevel: ObjectSharePermissionLevel | undefined): ObjectSharePermissionLevel | undefined;
 export declare function granteesFromAccessList(list: IObjectAccessList | undefined): IObjectShareGrantee[];
+/**
+ * A transient edit overlaid on a fetched grantee row (keyed by grantee id in
+ * {@link mergeGrantees}). The pending-guard keeps at most one edit in flight per id.
+ * A pending edit that superseded an already-COMMITTED entry (an added row, an
+ * earlier level change) carries it as `settled`, because the fetched base no longer
+ * holds that row's last-settled state: failure restores `settled`, success drops it.
+ * With no `settled`, failure deletes the entry, reverting to the fetched row.
+ *
+ * @internal
+ */
+export type GranteeEdit = {
+    kind: "level";
+    level: ObjectSharePermissionLevel;
+    pending: boolean;
+    settled?: GranteeEdit;
+} | {
+    kind: "added";
+    grantee: IObjectShareGrantee;
+    pending: boolean;
+    settled?: GranteeEdit;
+} | {
+    kind: "removed";
+    pending: boolean;
+    settled?: GranteeEdit;
+};
+/**
+ * Transient edit of the all-workspace-users rule (general access + its level),
+ * overlaid on the fetched rule state in the hook. Same lifecycle and `settled`
+ * semantics as {@link GranteeEdit}, one edit in flight at a time.
+ *
+ * @internal
+ */
+export interface IRuleEdit {
+    generalAccess: GeneralAccessValue;
+    level: ObjectSharePermissionLevel;
+    pending: boolean;
+    /** The committed rule edit this pending one superseded; restored on failure. */
+    settled?: IRuleEdit;
+}
+/**
+ * Pure composition of the fetched base with the transient overlay — the hook's
+ * `grantees` derive from this with no effect and no mirrored state. Marks the
+ * caller's own row via `selfId`, backfilling its facts from `selfIdentity` (the
+ * self row is absent from the grant list by design). Input arrays are not mutated.
+ *
+ * @internal
+ */
+export declare function mergeGrantees(base: readonly IObjectShareGrantee[], edits: Readonly<Record<string, GranteeEdit>>, selfId: string | undefined, selfIdentity: ISelfIdentity | undefined): IObjectShareGrantee[];
 export declare function toGranularGrantee(kind: "user" | "group", granteeRef: ObjRef, level: ObjectSharePermissionLevel | "none"): IGranularAccessGrantee;
 /**
  * The principal a label-scope reconcile applies to: a named user/group, or the

package/esm/share/objectShareController.helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"objectShareController.helpers.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,MAAM,EAId,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACR,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,EAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,6FAA6F;AAC7F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GAC1B,qBAAqB,CAKvB;AAED,kHAAkH;AAClH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGvF;AAED,oHAAkH;AAClH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,qBAAqB,CAI9F;AAED,gHAA0G;AAC1G,wBAAgB,eAAe,CAC3B,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAQlC;AAED,wGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAMjG;AAED,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAM9F;AAKD,iGAA+F;AAC/F,wBAAgB,WAAW,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,0BAA0B,CAEtF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,0BAA0B,EAClC,oBAAoB,EAAE,SAAS,MAAM,EAAE,GACxC,0BAA0B,GAAG,SAAS,CAGxC;AAYD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,GAAG,mBAAmB,EAAE,CAyBjG;AAUD,wBAAgB,iBAAiB,CAC7B,IAAI,EAAE,MAAM,GAAG,OAAO,EACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,0BAA0B,GAAG,MAAM,GAC3C,sBAAsB,CAKxB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GACzB;IAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,iBAAiB,EAAE,IAAI,CAAA;CAAE,CAAC;AAElC,wBAAgB,kBAAkB,CAC9B,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,0BAA0B,GAAG,MAAM,0BAO7C;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAC/B,SAAS,EAAE,mBAAmB,EAC9B,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,MAAM,EAAE,iBAAiB,EAAE,GAC5B,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC,CAWzD;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC5C,UAAU,EAAE,mBAAmB,EAAE,EACjC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,MAAM,EAAE,iBAAiB,EAAE,GAC5B,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CAAE,CAAC,CAcxE;AAED,sFAAsF;AACtF,eAAO,MAAM,SAAS,EAAE,iBAAiB,EAAO,CAAC;AAEjD,0DAA0D;AAC1D,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,CAAqB,CAAC;AAEhE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAU/E"}
+{"version":3,"file":"objectShareController.helpers.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,MAAM,EAId,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,KAAK,EACR,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,0BAA0B,EAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,6FAA6F;AAC7F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GAC1B,qBAAqB,CAKvB;AAED,kHAAkH;AAClH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGvF;AAED,oHAAkH;AAClH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,qBAAqB,CAI9F;AAED,gGAA0F;AAC1F,wBAAgB,eAAe,CAC3B,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAQlC;AAED,wGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAMjG;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,CAY5F;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,GAAG,iBAAiB,EAAE,CAQ7F;AAED,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAM9F;AAOD,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,0BAA0B,GAAG,SAAS,CAErG;AAED,iGAA+F;AAC/F,wBAAgB,WAAW,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,0BAA0B,CAEtF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,0BAA0B,GAAG,SAAS,GAAG,0BAA0B,EAAE,CAEvG;AAED,yGAAyG;AACzG,wBAAgB,WAAW,CAAC,KAAK,EAAE,0BAA0B,GAAG,0BAA0B,EAAE,CAE3F;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,0BAA0B,EAClC,cAAc,EAAE,0BAA0B,GAAG,SAAS,GACvD,0BAA0B,GAAG,SAAS,CAExC;AAaD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,GAAG,mBAAmB,EAAE,CAyBjG;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,0BAA0B,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACtB,aAAa,EAAE,kBAAkB,CAAC;IAClC,KAAK,EAAE,0BAA0B,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CACzB,IAAI,EAAE,SAAS,mBAAmB,EAAE,EACpC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,EAC5C,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,YAAY,EAAE,aAAa,GAAG,SAAS,GACxC,mBAAmB,EAAE,CA4EvB;AAUD,wBAAgB,iBAAiB,CAC7B,IAAI,EAAE,MAAM,GAAG,OAAO,EACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,0BAA0B,GAAG,MAAM,GAC3C,sBAAsB,CAKxB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GACzB;IAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,iBAAiB,EAAE,IAAI,CAAA;CAAE,CAAC;AAElC,wBAAgB,kBAAkB,CAC9B,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,0BAA0B,GAAG,MAAM,0BAO7C;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAC/B,SAAS,EAAE,mBAAmB,EAC9B,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,MAAM,EAAE,iBAAiB,EAAE,GAC5B,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC,CAWzD;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC5C,UAAU,EAAE,mBAAmB,EAAE,EACjC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,MAAM,EAAE,iBAAiB,EAAE,GAC5B,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CAAE,CAAC,CAcxE;AAED,sFAAsF;AACtF,eAAO,MAAM,SAAS,EAAE,iBAAiB,EAAO,CAAC;AAEjD,0DAA0D;AAC1D,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,CAAqB,CAAC;AAEhE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAU/E"}