@haneinfo/frontend-instances 0.2.0 → 0.3.0

package/README.md

@@ -1,73 +1,95 @@
-# @haneinfo/frontend-instances
-
-Reusable instance lists, collaboration and import/export pages for React 19 / Next 16.
-Backend packages stay free of React and NestJS is not a dependency of this package.
-
-## Mounting
-
-Import `renderInstanceListPage`, `renderInstanceDetailPage` and `renderImportPage` from
-`@haneinfo/frontend-instances/server`. Each returns a server-renderable React tree. Supply:
-
-- `apiFetch<T>(path, init?)`, using the current authenticated session and an App-owned API URL.
-- `LinkComponent`, `t(LabelKey)`, `getCurrentUser()`, and `basePath`.
-- An App Server Action calling `performInstanceRequest(apiFetch, request)` and returning
-  `{ data }` or `{ error: instanceError(error) }` after checking the session.
-- For imports, an authenticated `uploadAction(FormData)` calling `readImportUpload`, plus
-  the App's `{ code, label }[]` machine choices.
-
-The list additionally takes `machineCode` and promised `searchParams: { query?: string }`.
-The detail takes `id`. The import takes `machines` and `uploadAction`.
-All UI labels are injected. System field labels use `t`; Form labels stay verbatim from the API.
-See `LabelKey` and the complete English/zh-TW mounting examples in
-`validation/equipment-loan/instance-frontend/app/` in the source repository.
-
-Add `@source "../../node_modules/@haneinfo/frontend-instances/dist";` to the App's Tailwind
-CSS source declarations. Mount navigation in the App's sidebar, not generated plugin files.
-Set the App's Server Action body limit to allow multipart uploads (the example uses 16 MB).
-The backend HTTP body limit remains App-owned; API rejections are shown in the UI.
-
-## Client components and contracts
-
-`@haneinfo/frontend-instances/client` exports `ListClient`, `DetailClient`, `ImportClient`,
-`FilterEditor`, `JobStatus`, `JobReport`, `ImportConfirmation` and `prepareFilter`.
-Use the server renderers for normal mounting. `@haneinfo/frontend-instances/contracts` exports
-HTTP-only types and `labelKeys`. The server entry also exports the contracts, `dateRange`,
-`importMapping`, `normalizeQuery`, `performInstanceRequest`, `readImportUpload` and `instanceError`.
-
-Lists support PREDICATE/GROUP AND/OR, all eight operators, inclusive date ranges, up to eight
-sort keys, selected columns and offset/limit pagination (1–500). IN uses one literal per line.
-Datetime-local controls are explicitly UTC. Exports use the last applied query, not unapplied
-editor changes. Saved views default to private; sharing controls depend only on `canShare`.
-
-Details use pinned subject Form labels and the merged timeline; mentions come only from the
-instance-specific mentionable API. Following comes from the timeline or mutation response.
-Comments are append-only plain text and AI comments have a visible attribution.
-
-CSV and xlsx headers are read using csv-parse and ExcelJS on the server, with a 10 MB upload
-bound. The backend performs the complete preflight and authorization. Duplicate keys are
-optional, mapped top-level keys with a five-key maximum. Preflight never confirms an import.
-Confirmation requires a separate button click; global errors and zero valid rows disable it.
-Re-upload to change a completed preflight's mapping.
-
-`JobStatus` polls every two seconds, stops on terminal status or failure, and bounds automatic
-polling to 90 requests. A manual refresh resumes polling. Job state is owner-authorized by the
-backend. Binary result bytes and uploaded job params are removed before returning jobs to clients.
-
-## Downloads and safety
-
-Mount `${basePath}/download?path=...` as an authenticated, no-store streaming GET proxy. Constrain
-the path to `/import-export/(imports|exports)/<id>/file`, forward the current session token to
-that exact backend-provided `downloadPath`, and forward its disposition/type. Never synthesize
-job download paths or put file bytes/tokens in the URL. The App example includes this route.
-
-Use real Next Server Actions so same-origin CSRF checks apply. All mutations have an immediate
-in-memory submission lock and disabled pending buttons. The backend remains authoritative for
-authorization and validation; the UI does not recreate RBAC. 401/403/404 display generic localized
-messages without raw API details. All user content is rendered as text nodes, including errors,
-field values, names, and timeline details. No HTML or Markdown rendering is used.
-
-No instance creation, submission, approval, rejection or transition controls are included.
-
-## Submitter display
-
-List `$submitterId` cells and the detail submitter field display `submitterName ?? submitterId`. Both are plain React text nodes, including markup-like names. The HTTP contracts include nullable submitterName; older responses without it also fall back to the id. No new translation key, lookup request or App host-page change is required. Upgrade the state-machine and list-view backends with this frontend for names; otherwise the id remains visible.
+# @haneinfo/frontend-instances
+
+Reusable instance lists, collaboration and import/export pages for React 19 / Next 16.
+Backend packages stay free of React and NestJS is not a dependency of this package.
+
+## Mounting
+
+Import `renderInstanceListPage`, `renderInstanceDetailPage` and `renderImportPage` from
+`@haneinfo/frontend-instances/server`. Each returns a server-renderable React tree. Supply:
+
+- `apiFetch<T>(path, init?)`, using the current authenticated session and an App-owned API URL.
+- `LinkComponent`, `t(LabelKey)`, `getCurrentUser()`, and `basePath`.
+- An App Server Action calling `performInstanceRequest(apiFetch, request)` and returning
+  `{ data }` or `{ error: instanceError(error) }` after checking the session.
+- For imports, an authenticated `uploadAction(FormData)` calling `readImportUpload`, plus
+  the App's `{ code, label }[]` machine choices.
+
+The list additionally takes `machineCode` and promised `searchParams: { query?: string }`.
+The detail takes `id`. The import takes `machines` and `uploadAction`.
+All UI labels are injected. System field labels use `t`; Form labels stay verbatim from the API.
+See `LabelKey` and the complete English/zh-TW mounting examples in
+`validation/equipment-loan/instance-frontend/app/` in the source repository.
+
+Add `@source "../../node_modules/@haneinfo/frontend-instances/dist";` to the App's Tailwind
+CSS source declarations. Mount navigation in the App's sidebar, not generated plugin files.
+Set the App's Server Action body limit to allow multipart uploads (the example uses 16 MB).
+The backend HTTP body limit remains App-owned; API rejections are shown in the UI.
+
+## Client components and contracts
+
+`@haneinfo/frontend-instances/client` exports `ListClient`, `DetailClient`, `ImportClient`,
+`FilterEditor`, `JobStatus`, `JobReport`, `ImportConfirmation` and `prepareFilter`.
+Use the server renderers for normal mounting. `@haneinfo/frontend-instances/contracts` exports
+HTTP-only types and `labelKeys`. The server entry also exports the contracts, `dateRange`,
+`importMapping`, `normalizeQuery`, `performInstanceRequest`, `readImportUpload` and `instanceError`.
+
+Lists support PREDICATE/GROUP AND/OR, all eight operators, inclusive date ranges, up to eight
+sort keys, selected columns and offset/limit pagination (1–500). IN uses one literal per line.
+Datetime-local controls are explicitly UTC. Exports use the last applied query, not unapplied
+editor changes. Saved views default to private; sharing controls depend only on `canShare`.
+
+Details use pinned subject Form labels and the merged timeline; mentions come only from the
+instance-specific mentionable API. Following comes from the timeline or mutation response.
+Comments are append-only plain text and AI comments have a visible attribution.
+
+CSV and xlsx headers are read using csv-parse and ExcelJS on the server, with a 10 MB upload
+bound. The backend performs the complete preflight and authorization. Duplicate keys are
+optional, mapped top-level keys with a five-key maximum. Preflight never confirms an import.
+Confirmation requires a separate button click; global errors and zero valid rows disable it.
+Re-upload to change a completed preflight's mapping.
+
+`JobStatus` polls every two seconds, stops on terminal status or failure, and bounds automatic
+polling to 90 requests. A manual refresh resumes polling. Job state is owner-authorized by the
+backend. Binary result bytes and uploaded job params are removed before returning jobs to clients.
+
+## Downloads and safety
+
+Mount `${basePath}/download?path=...` as an authenticated, no-store streaming GET proxy. Constrain
+the path to `/import-export/(imports|exports)/<id>/file`, forward the current session token to
+that exact backend-provided `downloadPath`, and forward its disposition/type. Never synthesize
+job download paths or put file bytes/tokens in the URL. The App example includes this route.
+
+Use real Next Server Actions so same-origin CSRF checks apply. All mutations have an immediate
+in-memory submission lock and disabled pending buttons. The backend remains authoritative for
+authorization and validation; the UI does not recreate RBAC. 401/403/404 display generic localized
+messages without raw API details. All user content is rendered as text nodes, including errors,
+field values, names, and timeline details. No HTML or Markdown rendering is used.
+
+No instance creation, submission, approval, rejection or transition controls are included.
+
+## Submitter display
+
+List `$submitterId` cells and the detail submitter field display `submitterName ?? submitterId`. Both are plain React text nodes, including markup-like names. The HTTP contracts include nullable submitterName; older responses without it also fall back to the id. No new translation key, lookup request or App host-page change is required. Upgrade the state-machine and list-view backends with this frontend for names; otherwise the id remains visible.
+
+
+## Delegation and access management (draft 202610-e2a9)
+
+`renderDelegationsPage` accepts the same injected page dependencies as instance pages. The App
+mounts it at `/dashboard/delegations` and supplies an authenticated Server Action calling
+`performInstanceRequest`. Administrative controls depend on the successful admin list API;
+only DELEGATION_NOT_FOUND is treated as a denial. Other failures render an error.
+The UTC datetime inputs require an explicit end; backend rules remain authoritative.
+
+Pass `showAccess: true` to `renderInstanceDetailPage` to load the access list. `InstanceAccessPanel`
+is exported from the client entry for other hosts. It renders USER/ROLE, READ/WRITE, sources,
+grantor and timestamps. Only API canManage enables management, and only GRANTED rows have
+change/remove controls. Mutations refresh both the list and the enclosing activity timeline.
+Pickers use bounded explicit searches and keyboard combobox selection; user search needs two
+trimmed characters. Every mutation uses the supplied Server Action and a synchronous submit lock.
+
+Merge the bilingual catalog fragments in validation/equipment-loan/delegation-access-frontend/app/
+into the host's instances catalog. The new keys include the known error code allowlist.
+`instanceError` only maps recognized codes. Unknown/missing codes, even on 401/403/404, use
+requestFailed. Backend message, diagnostic message and lastError text are never rendered.
+Upgrade common and frontend-shell together so the production filter and API adapter retain code.

package/agent-guide.md

@@ -1,39 +1,54 @@
-# Instance frontend agent guide
-
-Use this package to mount shared instance lists, read-only details with collaboration, and
-human-confirmed bulk imports. Read the README for exact entry points and injected dependencies.
-Do not add React or Next dependencies to list-view, collaboration, import-export or background-jobs.
-
-## HTTP contracts
-
-- List metadata: GET `/list-view/machines/:code/fields`; query: POST the same machine's `/query`.
-- Views: GET/POST `/list-view/views`; PATCH `/list-view/views/:id/sharing`. Preserve `canShare`.
-- Details: GET `/state-machine-instances/:id` uses the pinned subject Form bundle.
-- Timeline: GET `/state-machine-instances/:id/timeline?offset=&limit=50`, including `following`.
-- People: GET `/state-machine-instances/:id/mentionable?q=`, at most twenty eligible people.
-- Collaboration: POST `comments` with `{ body }`, using `@{id}` from the people picker;
-  POST/DELETE `follow`. There are no comment edit/delete controls.
-- Imports: GET `/import-export/machines/:code/fields`; POST `/import-export/imports/preflight`
-  with file format/base64, header-to-key mapping, and optional duplicateKey (one to five keys).
-- Human confirmation: POST `/import-export/imports/:id/confirm` with `{ confirmed: true }` only
-  from an explicit button event, never from polling, render, an effect, or an AI tool.
-- Exports: POST `/import-export/exports` with `{ format, source: { machineCode, query } }`.
-- Jobs: GET `/background-jobs/:id`; downloads use the result's exact `downloadPath` through
-  an App-owned authenticated streaming proxy. The API alone decides job ownership and expiry.
-
-The minimal types are local HTTP contracts; never import backend runtime packages for types.
-Keep the API adapter and authentication in the App, with Server Action CSRF protection.
-Keep API error values and all user-controlled content as plain text. Do not inspect role names
-to decide sharing or visibility. Use both English and zh-TW translations for new UI text.
-
-## Validation
-
-Run package build/typecheck/tests and workspace build:graph, lint, specs:lint. Component tests
-render actual HTML, test authorization and escaping, and verify confirmation and parameters.
-Use the equipment-loan validation overlay for full production-build/browser acceptance. Always
-restore and finish it, including original manifest/lockfile bytes and dependency installation.
-Do not release, version, approve a decision, or commit as part of frontend validation.
-
-## Submitter display
-
-List `$submitterId` cells and the detail submitter field display `submitterName ?? submitterId`. Both are plain React text nodes, including markup-like names. The HTTP contracts include nullable submitterName; older responses without it also fall back to the id. No new translation key, lookup request or App host-page change is required. Upgrade the state-machine and list-view backends with this frontend for names; otherwise the id remains visible.
+# Instance frontend agent guide
+
+Use this package to mount shared instance lists, read-only details with collaboration, and
+human-confirmed bulk imports. Read the README for exact entry points and injected dependencies.
+Do not add React or Next dependencies to list-view, collaboration, import-export or background-jobs.
+
+## HTTP contracts
+
+- List metadata: GET `/list-view/machines/:code/fields`; query: POST the same machine's `/query`.
+- Views: GET/POST `/list-view/views`; PATCH `/list-view/views/:id/sharing`. Preserve `canShare`.
+- Details: GET `/state-machine-instances/:id` uses the pinned subject Form bundle.
+- Timeline: GET `/state-machine-instances/:id/timeline?offset=&limit=50`, including `following`.
+- People: GET `/state-machine-instances/:id/mentionable?q=`, at most twenty eligible people.
+- Collaboration: POST `comments` with `{ body }`, using `@{id}` from the people picker;
+  POST/DELETE `follow`. There are no comment edit/delete controls.
+- Imports: GET `/import-export/machines/:code/fields`; POST `/import-export/imports/preflight`
+  with file format/base64, header-to-key mapping, and optional duplicateKey (one to five keys).
+- Human confirmation: POST `/import-export/imports/:id/confirm` with `{ confirmed: true }` only
+  from an explicit button event, never from polling, render, an effect, or an AI tool.
+- Exports: POST `/import-export/exports` with `{ format, source: { machineCode, query } }`.
+- Jobs: GET `/background-jobs/:id`; downloads use the result's exact `downloadPath` through
+  an App-owned authenticated streaming proxy. The API alone decides job ownership and expiry.
+
+The minimal types are local HTTP contracts; never import backend runtime packages for types.
+Keep the API adapter and authentication in the App, with Server Action CSRF protection.
+Keep API error values and all user-controlled content as plain text. Do not inspect role names
+to decide sharing or visibility. Use both English and zh-TW translations for new UI text.
+
+## Validation
+
+Run package build/typecheck/tests and workspace build:graph, lint, specs:lint. Component tests
+render actual HTML, test authorization and escaping, and verify confirmation and parameters.
+Use the equipment-loan validation overlay for full production-build/browser acceptance. Always
+restore and finish it, including original manifest/lockfile bytes and dependency installation.
+Do not release, version, approve a decision, or commit as part of frontend validation.
+
+## Submitter display
+
+List `$submitterId` cells and the detail submitter field display `submitterName ?? submitterId`. Both are plain React text nodes, including markup-like names. The HTTP contracts include nullable submitterName; older responses without it also fall back to the id. No new translation key, lookup request or App host-page change is required. Upgrade the state-machine and list-view backends with this frontend for names; otherwise the id remains visible.
+
+
+## Delegations, access lists and safe errors
+
+Implemented against draft 202610-e2a9; approval/versioning remain with the maintainer.
+Use renderDelegationsPage and showAccess on renderInstanceDetailPage as documented in README.
+Lookup routes are GET /identity/users/lookup?q= (two trimmed characters) and
+GET /rbac/roles/lookup?q= (empty allowed), at most twenty projected public labels.
+GET instance access and the read-only list_instance_access MCP result now include canManage.
+Never infer authority from role names or HTTP status. Admin delegation visibility comes from
+GET /delegations; only DELEGATION_NOT_FOUND means this operation is unavailable to the caller.
+Use a same-origin authenticated Server Action for writes. Permanent sources have no controls.
+Translate only exact known codes in src/messages.ts; never show backend prose or job lastError.
+Both current pages and the new management pages follow this policy. Merge the complete English
+and zh-TW fragments with the existing host catalogs before building an overlay.

package/dist/action-client.d.ts

@@ -0,0 +1,16 @@
+import type { ActionError, InstanceAction, InstanceRequest, Labels } from './contracts.js';
+export declare class RequestFailure extends Error {
+    readonly reason: ActionError;
+    constructor(reason: ActionError);
+}
+export declare function call<T>(action: InstanceAction, request: InstanceRequest): Promise<T>;
+export declare function useTask(): {
+    pending: boolean;
+    error: ActionError | undefined;
+    run: (work: () => Promise<void>) => Promise<void>;
+};
+export declare function ErrorMessage({ error, labels }: {
+    error?: ActionError;
+    labels: Labels;
+}): import("react").JSX.Element | null;
+//# sourceMappingURL=action-client.d.ts.map

package/dist/action-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-client.d.ts","sourceRoot":"","sources":["../src/action-client.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC3F,qBAAa,cAAe,SAAQ,KAAK;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW;gBAAnB,MAAM,EAAE,WAAW;CAGzC;AACD,wBAAsB,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAI1F;AACD,wBAAgB,OAAO;;;gBAII,MAAM,OAAO,CAAC,IAAI,CAAC;EAe7C;AACD,wBAAgB,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;IAAE,KAAK,CAAC,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,sCAMtF"}

package/dist/action-client.js

@@ -0,0 +1,42 @@
+'use client';
+import { jsx as _jsx } from "react/jsx-runtime";
+import { useRef, useState } from 'react';
+export class RequestFailure extends Error {
+    constructor(reason) {
+        super(reason.key);
+        this.reason = reason;
+    }
+}
+export async function call(action, request) {
+    const result = await action(request);
+    if (result.error)
+        throw new RequestFailure(result.error);
+    return result.data;
+}
+export function useTask() {
+    const lock = useRef(false);
+    const [pending, setPending] = useState(false);
+    const [error, setError] = useState();
+    async function run(work) {
+        if (lock.current)
+            return;
+        lock.current = true;
+        setPending(true);
+        setError(undefined);
+        try {
+            await work();
+        }
+        catch (error) {
+            setError(error instanceof RequestFailure ? error.reason : { key: 'requestFailed' });
+        }
+        finally {
+            lock.current = false;
+            setPending(false);
+        }
+    }
+    return { pending, error, run };
+}
+export function ErrorMessage({ error, labels }) {
+    return error ? (_jsx("p", { role: "alert", className: "break-words text-destructive", children: labels[error.key] })) : null;
+}
+//# sourceMappingURL=action-client.js.map

package/dist/action-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-client.js","sourceRoot":"","sources":["../src/action-client.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEzC,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAqB,MAAmB;QACtC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QADC,WAAM,GAAN,MAAM,CAAa;IAExC,CAAC;CACF;AACD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAI,MAAsB,EAAE,OAAwB;IAC5E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAS,CAAC;AAC1B,CAAC;AACD,MAAM,UAAU,OAAO;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,EAAe,CAAC;IAClD,KAAK,UAAU,GAAG,CAAC,IAAyB;QAC1C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,KAAK,YAAY,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;QACtF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACjC,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAA2C;IACrF,OAAO,KAAK,CAAC,CAAC,CAAC,CACb,YAAG,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,8BAA8B,YACrD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAChB,CACL,CAAC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/client.d.ts

@@ -1,4 +1,7 @@
+import type { AccessList } from './contracts.js';
 import { type Condition, type FormField, type ImportField, type InstanceAction, type InstanceQuery, type Job, type JobResult, type Labels, type ListResult, type QueryField, type SavedView, type Timeline, type UploadAction } from './contracts.js';
+export { call, ErrorMessage, useTask } from './action-client.js';
+export { InstanceAccessPanel } from './management-client.js';
 export declare function FilterEditor({ condition, fields, labels, onChange, depth, }: {
     condition: Condition;
     fields: QueryField[];
@@ -18,7 +21,7 @@ export declare function ListClient({ fields, initial, initialQuery, views: initi
     labels: Labels;
     action: InstanceAction;
 }): import("react").JSX.Element;
-export declare function DetailClient({ id, data, fields, state, submitterId, submitterName, createdAt, initial, initialNumbers, labels: t, action, }: {
+export declare function DetailClient({ id, data, fields, state, submitterId, submitterName, createdAt, initial, initialNumbers, initialAccess, labels: t, action, }: {
     id: string;
     data: Record<string, unknown>;
     fields: FormField[];
@@ -28,6 +31,7 @@ export declare function DetailClient({ id, data, fields, state, submitterId, sub
     createdAt: string;
     initial: Timeline;
     initialNumbers?: string[];
+    initialAccess?: AccessList;
     labels: Labels;
     action: InstanceAction;
 }): import("react").JSX.Element;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.tsx"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EAElB,KAAK,GAAG,EACR,KAAK,SAAS,EACd,KAAK,MAAM,EACX,KAAK,UAAU,EAGf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,QAAQ,EAEb,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAwExB,wBAAgB,YAAY,CAAC,EAC3B,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAS,GACV,EAAE;IACD,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,+BAoKA;AAWD,iBAAS,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,GAAG,SAAS,CAwBxF;AAED,OAAO,EAAE,aAAa,EAAE,CAAC;AAkBzB,wBAAgB,UAAU,CAAC,EACzB,MAAM,EACN,OAAO,EACP,YAAY,EACZ,KAAK,EAAE,YAAY,EACnB,WAAW,EACX,QAAQ,EACR,MAAM,EAAE,CAAC,EACT,MAAM,GACP,EAAE;IACD,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC;IACpB,YAAY,EAAE,aAAa,CAAC;IAC5B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;CACxB,+BAwWA;AA4ED,wBAAgB,YAAY,CAAC,EAC3B,EAAE,EACF,IAAI,EACJ,MAAM,EACN,KAAK,EACL,WAAW,EACX,aAAa,EACb,SAAS,EACT,OAAO,EACP,cAAc,EACd,MAAM,EAAE,CAAC,EACT,MAAM,GACP,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,QAAQ,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;CACxB,+BAmLA;AAqBD,wBAAgB,SAAS,CAAC,EACxB,OAAO,EACP,MAAM,EAAE,CAAC,EACT,MAAM,EACN,YAAY,EACZ,UAAU,GACX,EAAE;IACD,OAAO,EAAE,GAAG,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;CACjC,+BAyEA;AACD,wBAAgB,SAAS,CAAC,EACxB,MAAM,EACN,MAAM,EAAE,CAAC,EACT,YAAY,GACb,EAAE;IACD,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,+BA2EA;AAED,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,CAAC,EACT,MAAM,EACN,YAAY,EACZ,YAAY,GACb,EAAE;IACD,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5C,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,+BAqMA;AAED,wBAAgB,kBAAkB,CAAC,EACjC,GAAG,EACH,MAAM,EAAE,CAAC,EACT,OAAO,EACP,SAAS,GACV,EAAE;IACD,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,IAAI,CAAC;CACvB,sCAcA"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,GAAG,EACR,KAAK,SAAS,EACd,KAAK,MAAM,EACX,KAAK,UAAU,EAGf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,QAAQ,EAEb,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAIjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAyB7D,wBAAgB,YAAY,CAAC,EAC3B,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAS,GACV,EAAE;IACD,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,+BAoKA;AAWD,iBAAS,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,GAAG,SAAS,CAwBxF;AAED,OAAO,EAAE,aAAa,EAAE,CAAC;AAkBzB,wBAAgB,UAAU,CAAC,EACzB,MAAM,EACN,OAAO,EACP,YAAY,EACZ,KAAK,EAAE,YAAY,EACnB,WAAW,EACX,QAAQ,EACR,MAAM,EAAE,CAAC,EACT,MAAM,GACP,EAAE;IACD,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC;IACpB,YAAY,EAAE,aAAa,CAAC;IAC5B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;CACxB,+BAwWA;AA4ED,wBAAgB,YAAY,CAAC,EAC3B,EAAE,EACF,IAAI,EACJ,MAAM,EACN,KAAK,EACL,WAAW,EACX,aAAa,EACb,SAAS,EACT,OAAO,EACP,cAAc,EACd,aAAa,EACb,MAAM,EAAE,CAAC,EACT,MAAM,GACP,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,QAAQ,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,UAAU,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;CACxB,+BA4LA;AAqBD,wBAAgB,SAAS,CAAC,EACxB,OAAO,EACP,MAAM,EAAE,CAAC,EACT,MAAM,EACN,YAAY,EACZ,UAAU,GACX,EAAE;IACD,OAAO,EAAE,GAAG,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;CACjC,+BAyEA;AACD,wBAAgB,SAAS,CAAC,EACxB,MAAM,EACN,MAAM,EAAE,CAAC,EACT,YAAY,GACb,EAAE;IACD,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,+BA+EA;AAED,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,CAAC,EACT,MAAM,EACN,YAAY,EACZ,YAAY,GACb,EAAE;IACD,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5C,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,+BAqMA;AAED,wBAAgB,kBAAkB,CAAC,EACjC,GAAG,EACH,MAAM,EAAE,CAAC,EACT,OAAO,EACP,SAAS,GACV,EAAE;IACD,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,IAAI,CAAC;CACvB,sCAcA"}

package/dist/client.js

@@ -1,56 +1,18 @@
 'use client';
-import { jsxs as _jsxs, jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { Button, Input, ListPagination } from '@haneinfo/frontend-shell';
 import { useEffect, useId, useRef, useState } from 'react';
+import { call, ErrorMessage, RequestFailure, useTask } from './action-client.js';
 import { operators, } from './contracts.js';
+import { InstanceAccessPanel } from './management-client.js';
+import { errorKey } from './messages.js';
+export { call, ErrorMessage, useTask } from './action-client.js';
 import { canPoll, dateRange, fieldValue, importMapping, listHref, textValue } from './query.js';
+export { InstanceAccessPanel } from './management-client.js';
 const box = 'rounded-md border bg-card p-4';
 const selectClass = 'min-w-0 rounded-md border bg-background px-3 py-2 text-foreground';
-class RequestFailure extends Error {
-    constructor(reason) {
-        super(reason.key);
-        this.reason = reason;
-    }
-}
-async function call(action, request) {
-    const result = await action(request);
-    if (result.error)
-        throw new RequestFailure(result.error);
-    return result.data;
-}
-function useTask() {
-    const lock = useRef(false);
-    const [pending, setPending] = useState(false);
-    const [error, setError] = useState();
-    async function run(work) {
-        if (lock.current)
-            return;
-        lock.current = true;
-        setPending(true);
-        setError(undefined);
-        try {
-            await work();
-        }
-        catch (error) {
-            setError(error instanceof RequestFailure
-                ? error.reason
-                : {
-                    key: error instanceof Error && error.message === 'invalidInput'
-                        ? 'invalidInput'
-                        : 'requestFailed',
-                });
-        }
-        finally {
-            lock.current = false;
-            setPending(false);
-        }
-    }
-    return { pending, error, run };
-}
-function ErrorMessage({ error, labels }) {
-    return error ? (_jsxs("p", { role: "alert", className: "break-words text-destructive", children: [labels[error.key], error.message && `: ${error.message}`] })) : null;
-}
-const inaccessible = (error) => error && ['unauthorized', 'forbidden', 'notFound'].includes(error.key);
+const inaccessible = (error) => error &&
+    ['unauthorized', 'forbidden', 'notFound', 'FORBIDDEN', 'INSTANCE_NOT_FOUND'].includes(error.key);
 function labelOf(field, labels) {
     const system = {
         $state: 'state',
@@ -264,7 +226,7 @@ function DataFields({ fields, data }) {
             .filter((f) => (f.id ?? f.key) in data)
             .map((field) => (_jsxs("div", { className: "min-w-0", children: [_jsx("dt", { className: "text-sm text-muted-foreground", children: field.label }), _jsx("dd", { className: "whitespace-pre-wrap break-words", children: textValue(data[field.id ?? field.key]) })] }, field.id ?? field.key))) }));
 }
-export function DetailClient({ id, data, fields, state, submitterId, submitterName, createdAt, initial, initialNumbers, labels: t, action, }) {
+export function DetailClient({ id, data, fields, state, submitterId, submitterName, createdAt, initial, initialNumbers, initialAccess, labels: t, action, }) {
     const task = useTask();
     const [timeline, setTimeline] = useState(initial), [body, setBody] = useState('');
     const [q, setQ] = useState(''), [people, setPeople] = useState(), [selected, setSelected] = useState('');
@@ -285,7 +247,7 @@ export function DetailClient({ id, data, fields, state, submitterId, submitterNa
             : next);
     };
     const numbers = timeline.items.filter((e) => e.kind === 'NUMBER');
-    return (_jsxs("div", { className: "flex min-w-0 flex-col gap-4", "aria-busy": task.pending, children: [_jsx(ErrorMessage, { error: task.error, labels: t }), task.pending && _jsx("p", { role: "status", children: t.loading }), _jsxs("section", { className: `${box} flex flex-col gap-4`, children: [_jsxs("dl", { className: "grid gap-3 sm:grid-cols-2", children: [_jsxs("div", { children: [_jsx("dt", { children: t.state }), _jsx("dd", { children: state })] }), _jsxs("div", { children: [_jsx("dt", { children: t.number }), _jsx("dd", { children: initialNumbers?.length
+    return (_jsxs("div", { className: "flex min-w-0 flex-col gap-4", "aria-busy": task.pending, children: [_jsx(ErrorMessage, { error: task.error, labels: t }), task.pending && _jsx("p", { role: "status", children: t.loading }), initialAccess && (_jsx(InstanceAccessPanel, { id: id, initial: initialAccess, labels: t, action: action, onChanged: () => loadTimeline(false) })), _jsxs("section", { className: `${box} flex flex-col gap-4`, children: [_jsxs("dl", { className: "grid gap-3 sm:grid-cols-2", children: [_jsxs("div", { children: [_jsx("dt", { children: t.state }), _jsx("dd", { children: state })] }), _jsxs("div", { children: [_jsx("dt", { children: t.number }), _jsx("dd", { children: initialNumbers?.length
                                             ? initialNumbers.join(', ')
                                             : numbers.length
                                                 ? numbers.map((e) => textValue(e.details.number)).join(', ')
@@ -368,7 +330,7 @@ export function JobStatus({ initial, labels: t, action, downloadBase, onComplete
     }, [initial, action, attempt]);
     if (inaccessible(error))
         return _jsx(ErrorMessage, { error: error, labels: t });
-    return (_jsxs("section", { className: `${box} flex flex-col gap-2`, "aria-label": t.job, children: [_jsxs("p", { role: "status", children: [t.job, ": ", t[job.status], " (", Math.max(0, Math.min(100, job.progress)), "%)"] }), _jsx("progress", { "aria-label": t.job, value: Math.max(0, Math.min(100, job.progress)), max: 100, className: "w-full" }), _jsx(ErrorMessage, { error: error, labels: t }), job.lastError && (_jsx("p", { role: "alert", className: "break-words text-destructive", children: job.lastError })), stopped && (_jsxs("div", { children: [_jsx("p", { children: t.pollStopped }), _jsx(Button, { type: "button", variant: "outline", onClick: () => setAttempt(attempt + 1), children: t.retry })] })), job.status === 'SUCCEEDED' && job.result && (_jsx(JobReport, { result: job.result, labels: t, downloadBase: downloadBase }))] }));
+    return (_jsxs("section", { className: `${box} flex flex-col gap-2`, "aria-label": t.job, children: [_jsxs("p", { role: "status", children: [t.job, ": ", t[job.status], " (", Math.max(0, Math.min(100, job.progress)), "%)"] }), _jsx("progress", { "aria-label": t.job, value: Math.max(0, Math.min(100, job.progress)), max: 100, className: "w-full" }), _jsx(ErrorMessage, { error: error, labels: t }), job.lastError && (_jsx("p", { role: "alert", className: "break-words text-destructive", children: t.requestFailed })), stopped && (_jsxs("div", { children: [_jsx("p", { children: t.pollStopped }), _jsx(Button, { type: "button", variant: "outline", onClick: () => setAttempt(attempt + 1), children: t.retry })] })), job.status === 'SUCCEEDED' && job.result && (_jsx(JobReport, { result: job.result, labels: t, downloadBase: downloadBase }))] }));
 }
 export function JobReport({ result, labels: t, downloadBase, }) {
     const failures = result.kind === 'preflight'
@@ -376,7 +338,9 @@ export function JobReport({ result, labels: t, downloadBase, }) {
         : Array.isArray(result.failed)
             ? result.failed
             : [];
-    return (_jsxs("div", { className: "flex min-w-0 flex-col gap-3", children: [_jsxs("div", { className: "flex flex-wrap gap-4", children: [_jsxs("span", { children: [t.total, ": ", result.total ?? result.rowCount ?? 0] }), result.kind === 'preflight' && (_jsxs("span", { children: [t.valid, ": ", result.valid ?? 0] })), result.kind === 'import' && (_jsxs("span", { children: [t.success, ": ", result.imported?.length ?? 0] })), result.kind !== 'export' && (_jsxs("span", { children: [t.failed, ": ", Array.isArray(result.failed) ? result.failed.length : (result.failed ?? 0)] }))] }), (result.errors ?? []).map((error) => (_jsxs("p", { className: "break-words text-destructive", children: [error.code, ": ", error.message] }, `${error.code}-${error.path}-${error.message}`))), !!failures.length && (_jsx("div", { className: "max-h-96 overflow-auto", children: _jsxs("table", { className: "w-full text-left text-sm", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { children: t.row }), _jsx("th", { children: t.value }), _jsx("th", { children: t.code }), _jsx("th", { children: t.reason })] }) }), _jsx("tbody", { children: failures.map((row) => (_jsxs("tr", { className: "border-t", children: [_jsx("td", { className: "p-2", children: row.rowNumber }), _jsx("td", { className: "max-w-64 break-words p-2", children: row.data ? textValue(row.data) : '—' }), _jsx("td", { className: "p-2", children: row.errors.map((e) => e.code).join(', ') }), _jsx("td", { className: "max-w-64 break-words p-2", children: row.errors.map((e) => e.message).join('; ') })] }, row.rowNumber))) })] }) })), result.downloadPath && (_jsx("a", { className: "underline", href: `${downloadBase}?${new URLSearchParams({ path: result.downloadPath })}`, children: result.kind === 'export' ? t.download : t.downloadErrors }))] }));
+    return (_jsxs("div", { className: "flex min-w-0 flex-col gap-3", children: [_jsxs("div", { className: "flex flex-wrap gap-4", children: [_jsxs("span", { children: [t.total, ": ", result.total ?? result.rowCount ?? 0] }), result.kind === 'preflight' && (_jsxs("span", { children: [t.valid, ": ", result.valid ?? 0] })), result.kind === 'import' && (_jsxs("span", { children: [t.success, ": ", result.imported?.length ?? 0] })), result.kind !== 'export' && (_jsxs("span", { children: [t.failed, ": ", Array.isArray(result.failed) ? result.failed.length : (result.failed ?? 0)] }))] }), (result.errors ?? []).map((error) => (_jsx("p", { className: "break-words text-destructive", children: t[errorKey(error.code)] }, `${error.code}-${error.path}-${error.message}`))), !!failures.length && (_jsx("div", { className: "max-h-96 overflow-auto", children: _jsxs("table", { className: "w-full text-left text-sm", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { children: t.row }), _jsx("th", { children: t.value }), _jsx("th", { children: t.code }), _jsx("th", { children: t.reason })] }) }), _jsx("tbody", { children: failures.map((row) => (_jsxs("tr", { className: "border-t", children: [_jsx("td", { className: "p-2", children: row.rowNumber }), _jsx("td", { className: "max-w-64 break-words p-2", children: row.data ? textValue(row.data) : '—' }), _jsx("td", { className: "p-2", children: row.errors
+                                            .map((e) => (errorKey(e.code) === 'requestFailed' ? '—' : e.code))
+                                            .join(', ') }), _jsx("td", { className: "max-w-64 break-words p-2", children: row.errors.map((e) => t[errorKey(e.code)]).join('; ') })] }, row.rowNumber))) })] }) })), result.downloadPath && (_jsx("a", { className: "underline", href: `${downloadBase}?${new URLSearchParams({ path: result.downloadPath })}`, children: result.kind === 'export' ? t.download : t.downloadErrors }))] }));
 }
 export function ImportClient({ machines, fields: initialFields, labels: t, action, uploadAction, downloadBase, }) {
     const task = useTask();