@haneinfo/frontend-instances 0.2.0 → 0.4.0

package/README.md

@@ -1,73 +1,119 @@
-# @haneinfo/frontend-instances
-
-Reusable instance lists, collaboration and import/export pages for React 19 / Next 16.
-Backend packages stay free of React and NestJS is not a dependency of this package.
-
-## Mounting
-
-Import `renderInstanceListPage`, `renderInstanceDetailPage` and `renderImportPage` from
-`@haneinfo/frontend-instances/server`. Each returns a server-renderable React tree. Supply:
-
-- `apiFetch<T>(path, init?)`, using the current authenticated session and an App-owned API URL.
-- `LinkComponent`, `t(LabelKey)`, `getCurrentUser()`, and `basePath`.
-- An App Server Action calling `performInstanceRequest(apiFetch, request)` and returning
-  `{ data }` or `{ error: instanceError(error) }` after checking the session.
-- For imports, an authenticated `uploadAction(FormData)` calling `readImportUpload`, plus
-  the App's `{ code, label }[]` machine choices.
-
-The list additionally takes `machineCode` and promised `searchParams: { query?: string }`.
-The detail takes `id`. The import takes `machines` and `uploadAction`.
-All UI labels are injected. System field labels use `t`; Form labels stay verbatim from the API.
-See `LabelKey` and the complete English/zh-TW mounting examples in
-`validation/equipment-loan/instance-frontend/app/` in the source repository.
-
-Add `@source "../../node_modules/@haneinfo/frontend-instances/dist";` to the App's Tailwind
-CSS source declarations. Mount navigation in the App's sidebar, not generated plugin files.
-Set the App's Server Action body limit to allow multipart uploads (the example uses 16 MB).
-The backend HTTP body limit remains App-owned; API rejections are shown in the UI.
-
-## Client components and contracts
-
-`@haneinfo/frontend-instances/client` exports `ListClient`, `DetailClient`, `ImportClient`,
-`FilterEditor`, `JobStatus`, `JobReport`, `ImportConfirmation` and `prepareFilter`.
-Use the server renderers for normal mounting. `@haneinfo/frontend-instances/contracts` exports
-HTTP-only types and `labelKeys`. The server entry also exports the contracts, `dateRange`,
-`importMapping`, `normalizeQuery`, `performInstanceRequest`, `readImportUpload` and `instanceError`.
-
-Lists support PREDICATE/GROUP AND/OR, all eight operators, inclusive date ranges, up to eight
-sort keys, selected columns and offset/limit pagination (1–500). IN uses one literal per line.
-Datetime-local controls are explicitly UTC. Exports use the last applied query, not unapplied
-editor changes. Saved views default to private; sharing controls depend only on `canShare`.
-
-Details use pinned subject Form labels and the merged timeline; mentions come only from the
-instance-specific mentionable API. Following comes from the timeline or mutation response.
-Comments are append-only plain text and AI comments have a visible attribution.
-
-CSV and xlsx headers are read using csv-parse and ExcelJS on the server, with a 10 MB upload
-bound. The backend performs the complete preflight and authorization. Duplicate keys are
-optional, mapped top-level keys with a five-key maximum. Preflight never confirms an import.
-Confirmation requires a separate button click; global errors and zero valid rows disable it.
-Re-upload to change a completed preflight's mapping.
-
-`JobStatus` polls every two seconds, stops on terminal status or failure, and bounds automatic
-polling to 90 requests. A manual refresh resumes polling. Job state is owner-authorized by the
-backend. Binary result bytes and uploaded job params are removed before returning jobs to clients.
-
-## Downloads and safety
-
-Mount `${basePath}/download?path=...` as an authenticated, no-store streaming GET proxy. Constrain
-the path to `/import-export/(imports|exports)/<id>/file`, forward the current session token to
-that exact backend-provided `downloadPath`, and forward its disposition/type. Never synthesize
-job download paths or put file bytes/tokens in the URL. The App example includes this route.
-
-Use real Next Server Actions so same-origin CSRF checks apply. All mutations have an immediate
-in-memory submission lock and disabled pending buttons. The backend remains authoritative for
-authorization and validation; the UI does not recreate RBAC. 401/403/404 display generic localized
-messages without raw API details. All user content is rendered as text nodes, including errors,
-field values, names, and timeline details. No HTML or Markdown rendering is used.
-
-No instance creation, submission, approval, rejection or transition controls are included.
-
-## Submitter display
-
-List `$submitterId` cells and the detail submitter field display `submitterName ?? submitterId`. Both are plain React text nodes, including markup-like names. The HTTP contracts include nullable submitterName; older responses without it also fall back to the id. No new translation key, lookup request or App host-page change is required. Upgrade the state-machine and list-view backends with this frontend for names; otherwise the id remains visible.
+# @haneinfo/frontend-instances
+
+Reusable instance lists, collaboration and import/export pages for React 19 / Next 16.
+Backend packages stay free of React and NestJS is not a dependency of this package.
+
+## Mounting
+
+Import `renderInstanceListPage`, `renderInstanceDetailPage` and `renderImportPage` from
+`@haneinfo/frontend-instances/server`. Each returns a server-renderable React tree. Supply:
+
+- `apiFetch<T>(path, init?)`, using the current authenticated session and an App-owned API URL.
+- `LinkComponent`, `t(LabelKey)`, `getCurrentUser()`, and `basePath`.
+- An App Server Action calling `performInstanceRequest(apiFetch, request)` and returning
+  `{ data }` or `{ error: instanceError(error) }` after checking the session.
+- For imports, an authenticated `uploadAction(FormData)` calling `readImportUpload`, plus
+  the App's `{ code, label }[]` machine choices.
+
+The list additionally takes `machineCode` and promised `searchParams: { query?: string }`.
+The detail takes `id`. The import takes `machines` and `uploadAction`.
+All UI labels are injected. System field labels use `t`; Form labels stay verbatim from the API.
+See `LabelKey` and the complete English/zh-TW mounting examples in
+`validation/equipment-loan/instance-frontend/app/` in the source repository.
+
+Add `@source "../../node_modules/@haneinfo/frontend-instances/dist";` to the App's Tailwind
+CSS source declarations. Mount navigation in the App's sidebar, not generated plugin files.
+Set the App's Server Action body limit to allow multipart uploads (the example uses 16 MB).
+The backend HTTP body limit remains App-owned; API rejections are shown in the UI.
+
+## Client components and contracts
+
+`@haneinfo/frontend-instances/client` exports `ListClient`, `DetailClient`, `ImportClient`,
+`FilterEditor`, `JobStatus`, `JobReport`, `ImportConfirmation` and `prepareFilter`.
+Use the server renderers for normal mounting. `@haneinfo/frontend-instances/contracts` exports
+HTTP-only types and `labelKeys`. The server entry also exports the contracts, `dateRange`,
+`importMapping`, `normalizeQuery`, `performInstanceRequest`, `readImportUpload` and `instanceError`.
+
+Lists support PREDICATE/GROUP AND/OR, all eight operators, inclusive date ranges, up to eight
+sort keys, selected columns and offset/limit pagination (1–500). IN uses one literal per line.
+Datetime-local controls are explicitly UTC. Exports use the last applied query, not unapplied
+editor changes. Saved views default to private; sharing controls depend only on `canShare`.
+
+Details use pinned subject Form labels and the merged timeline; mentions come only from the
+instance-specific mentionable API. Following comes from the timeline or mutation response.
+Comments are append-only plain text and AI comments have a visible attribution.
+
+CSV and xlsx headers are read using csv-parse and ExcelJS on the server, with a 10 MB upload
+bound. The backend performs the complete preflight and authorization. Duplicate keys are
+optional, mapped top-level keys with a five-key maximum. Preflight never confirms an import.
+Confirmation requires a separate button click; global errors and zero valid rows disable it.
+Re-upload to change a completed preflight's mapping.
+
+`JobStatus` polls every two seconds, stops on terminal status or failure, and bounds automatic
+polling to 90 requests. A manual refresh resumes polling. Job state is owner-authorized by the
+backend. Binary result bytes and uploaded job params are removed before returning jobs to clients.
+
+## Downloads and safety
+
+Mount `${basePath}/download?path=...` as an authenticated, no-store streaming GET proxy. Constrain
+the path to `/import-export/(imports|exports)/<id>/file`, forward the current session token to
+that exact backend-provided `downloadPath`, and forward its disposition/type. Never synthesize
+job download paths or put file bytes/tokens in the URL. The App example includes this route.
+
+Use real Next Server Actions so same-origin CSRF checks apply. All mutations have an immediate
+in-memory submission lock and disabled pending buttons. The backend remains authoritative for
+authorization and validation; the UI does not recreate RBAC. 401/403/404 display generic localized
+messages without raw API details. All user content is rendered as text nodes, including errors,
+field values, names, and timeline details. No HTML or Markdown rendering is used.
+
+No instance creation, submission, approval, rejection or transition controls are included.
+
+## Submitter display
+
+List `$submitterId` cells and the detail submitter field display `submitterName ?? submitterId`. Both are plain React text nodes, including markup-like names. The HTTP contracts include nullable submitterName; older responses without it also fall back to the id. No new translation key, lookup request or App host-page change is required. Upgrade the state-machine and list-view backends with this frontend for names; otherwise the id remains visible.
+
+
+## Delegation and access management (draft 202610-e2a9)
+
+`renderDelegationsPage` accepts the same injected page dependencies as instance pages. The App
+mounts it at `/dashboard/delegations` and supplies an authenticated Server Action calling
+`performInstanceRequest`. Administrative controls depend on the successful admin list API;
+only DELEGATION_NOT_FOUND is treated as a denial. Other failures render an error.
+The UTC datetime inputs require an explicit end; backend rules remain authoritative.
+
+Pass `showAccess: true` to `renderInstanceDetailPage` to load the access list. `InstanceAccessPanel`
+is exported from the client entry for other hosts. It renders USER/ROLE, READ/WRITE, sources,
+grantor and timestamps. Only API canManage enables management, and only GRANTED rows have
+change/remove controls. Mutations refresh both the list and the enclosing activity timeline.
+Pickers use bounded explicit searches and keyboard combobox selection; user search needs two
+trimmed characters. Every mutation uses the supplied Server Action and a synchronous submit lock.
+
+Merge the bilingual catalog fragments in validation/equipment-loan/delegation-access-frontend/app/
+into the host's instances catalog. The new keys include the known error code allowlist.
+`instanceError` only maps recognized codes. Unknown/missing codes, even on 401/403/404, use
+requestFailed. Backend message, diagnostic message and lastError text are never rendered.
+Upgrade common and frontend-shell together so the production filter and API adapter retain code.
+
+## Attachment panel (draft 202610-a7c1)
+
+Pass `showAttachments: true` to `renderInstanceDetailPage`. The client entry also exports
+`AttachmentsPanel`. The host supplies the existing authenticated action for `attachments` GET and
+`deleteAttachment` DELETE through `performInstanceRequest`. Successful mutations reload the list
+and enclosing timeline. Merge the complete bilingual catalogs in validation/equipment-loan/attachment-panel/app/.
+
+Mount POST `${basePath}/:id/attachments/upload` and GET
+`${basePath}/:id/attachments/:attachmentId/content` in the App. Upload uses XHR multipart with
+per-file progress, a synchronous mutation lock and sequential requests. It never uses a Server
+Action. The route must authenticate, reject missing/mismatched Origin and Host, and stream the
+unaltered body/Content-Type/Content-Length to the fixed backend route with the current token.
+Abort the upstream request on disconnect. Exclude upload from Next Proxy's request-body cloning;
+in Next 16.3 the proxy otherwise buffers bytes even when the route itself streams.
+The example retains the existing 16 MB Server Action setting and verifies an 18 MiB route upload.
+
+Use HTTP canUpload/canDelete only. Missing canUpload hides selection; remaining=0 disables it.
+Size/extension/remaining prechecks are advisory and still submit each selected file: only backend
+status and known codes determine the result. Unknown codes never expose response prose.
+READY downloads through the fixed App route; PENDING_SCAN shows scanning; REJECTED shows scan
+failed/content removed with no download. Rejections retain authorized record deletion and occupy
+no slots. Refresh rechecks scan status. Names, uploader labels and upload/delete timeline names
+are text nodes. Native buttons support keyboard selection/drop activation; progress is labelled.

package/agent-guide.md

@@ -1,39 +1,65 @@
-# Instance frontend agent guide
-
-Use this package to mount shared instance lists, read-only details with collaboration, and
-human-confirmed bulk imports. Read the README for exact entry points and injected dependencies.
-Do not add React or Next dependencies to list-view, collaboration, import-export or background-jobs.
-
-## HTTP contracts
-
-- List metadata: GET `/list-view/machines/:code/fields`; query: POST the same machine's `/query`.
-- Views: GET/POST `/list-view/views`; PATCH `/list-view/views/:id/sharing`. Preserve `canShare`.
-- Details: GET `/state-machine-instances/:id` uses the pinned subject Form bundle.
-- Timeline: GET `/state-machine-instances/:id/timeline?offset=&limit=50`, including `following`.
-- People: GET `/state-machine-instances/:id/mentionable?q=`, at most twenty eligible people.
-- Collaboration: POST `comments` with `{ body }`, using `@{id}` from the people picker;
-  POST/DELETE `follow`. There are no comment edit/delete controls.
-- Imports: GET `/import-export/machines/:code/fields`; POST `/import-export/imports/preflight`
-  with file format/base64, header-to-key mapping, and optional duplicateKey (one to five keys).
-- Human confirmation: POST `/import-export/imports/:id/confirm` with `{ confirmed: true }` only
-  from an explicit button event, never from polling, render, an effect, or an AI tool.
-- Exports: POST `/import-export/exports` with `{ format, source: { machineCode, query } }`.
-- Jobs: GET `/background-jobs/:id`; downloads use the result's exact `downloadPath` through
-  an App-owned authenticated streaming proxy. The API alone decides job ownership and expiry.
-
-The minimal types are local HTTP contracts; never import backend runtime packages for types.
-Keep the API adapter and authentication in the App, with Server Action CSRF protection.
-Keep API error values and all user-controlled content as plain text. Do not inspect role names
-to decide sharing or visibility. Use both English and zh-TW translations for new UI text.
-
-## Validation
-
-Run package build/typecheck/tests and workspace build:graph, lint, specs:lint. Component tests
-render actual HTML, test authorization and escaping, and verify confirmation and parameters.
-Use the equipment-loan validation overlay for full production-build/browser acceptance. Always
-restore and finish it, including original manifest/lockfile bytes and dependency installation.
-Do not release, version, approve a decision, or commit as part of frontend validation.
-
-## Submitter display
-
-List `$submitterId` cells and the detail submitter field display `submitterName ?? submitterId`. Both are plain React text nodes, including markup-like names. The HTTP contracts include nullable submitterName; older responses without it also fall back to the id. No new translation key, lookup request or App host-page change is required. Upgrade the state-machine and list-view backends with this frontend for names; otherwise the id remains visible.
+# Instance frontend agent guide
+
+Use this package to mount shared instance lists, read-only details with collaboration, and
+human-confirmed bulk imports. Read the README for exact entry points and injected dependencies.
+Do not add React or Next dependencies to list-view, collaboration, import-export or background-jobs.
+
+## HTTP contracts
+
+- List metadata: GET `/list-view/machines/:code/fields`; query: POST the same machine's `/query`.
+- Views: GET/POST `/list-view/views`; PATCH `/list-view/views/:id/sharing`. Preserve `canShare`.
+- Details: GET `/state-machine-instances/:id` uses the pinned subject Form bundle.
+- Timeline: GET `/state-machine-instances/:id/timeline?offset=&limit=50`, including `following`.
+- People: GET `/state-machine-instances/:id/mentionable?q=`, at most twenty eligible people.
+- Collaboration: POST `comments` with `{ body }`, using `@{id}` from the people picker;
+  POST/DELETE `follow`. There are no comment edit/delete controls.
+- Imports: GET `/import-export/machines/:code/fields`; POST `/import-export/imports/preflight`
+  with file format/base64, header-to-key mapping, and optional duplicateKey (one to five keys).
+- Human confirmation: POST `/import-export/imports/:id/confirm` with `{ confirmed: true }` only
+  from an explicit button event, never from polling, render, an effect, or an AI tool.
+- Exports: POST `/import-export/exports` with `{ format, source: { machineCode, query } }`.
+- Jobs: GET `/background-jobs/:id`; downloads use the result's exact `downloadPath` through
+  an App-owned authenticated streaming proxy. The API alone decides job ownership and expiry.
+
+The minimal types are local HTTP contracts; never import backend runtime packages for types.
+Keep the API adapter and authentication in the App, with Server Action CSRF protection.
+Keep API error values and all user-controlled content as plain text. Do not inspect role names
+to decide sharing or visibility. Use both English and zh-TW translations for new UI text.
+
+## Validation
+
+Run package build/typecheck/tests and workspace build:graph, lint, specs:lint. Component tests
+render actual HTML, test authorization and escaping, and verify confirmation and parameters.
+Use the equipment-loan validation overlay for full production-build/browser acceptance. Always
+restore and finish it, including original manifest/lockfile bytes and dependency installation.
+Do not release, version, approve a decision, or commit as part of frontend validation.
+
+## Submitter display
+
+List `$submitterId` cells and the detail submitter field display `submitterName ?? submitterId`. Both are plain React text nodes, including markup-like names. The HTTP contracts include nullable submitterName; older responses without it also fall back to the id. No new translation key, lookup request or App host-page change is required. Upgrade the state-machine and list-view backends with this frontend for names; otherwise the id remains visible.
+
+
+## Delegations, access lists and safe errors
+
+Implemented against draft 202610-e2a9; approval/versioning remain with the maintainer.
+Use renderDelegationsPage and showAccess on renderInstanceDetailPage as documented in README.
+Lookup routes are GET /identity/users/lookup?q= (two trimmed characters) and
+GET /rbac/roles/lookup?q= (empty allowed), at most twenty projected public labels.
+GET instance access and the read-only list_instance_access MCP result now include canManage.
+Never infer authority from role names or HTTP status. Admin delegation visibility comes from
+GET /delegations; only DELEGATION_NOT_FOUND means this operation is unavailable to the caller.
+Use a same-origin authenticated Server Action for writes. Permanent sources have no controls.
+Translate only exact known codes in src/messages.ts; never show backend prose or job lastError.
+Both current pages and the new management pages follow this policy. Merge the complete English
+and zh-TW fragments with the existing host catalogs before building an overlay.
+
+## Attachments
+
+Use showAttachments on the detail renderer, or AttachmentsPanel from the client entry. Mount the
+fixed upload/content routes documented in README and the reversible attachment-panel overlay.
+Use the authenticated action adapter only for listing and deletion; binary uploads must stream
+through a separate same-origin authenticated route with abort propagation and no Proxy buffering.
+Never infer authority or quota from rows: REJECTED remains visible but uses no slots. Its content
+is removed and cannot download; permitted users may delete its record. PENDING_SCAN also cannot
+download. Copy all English/zh-TW keys from the current overlay catalogs. Keep quota prechecks
+advisory, confirm deletion, and refresh the backend list/timeline after changes.

package/dist/action-client.d.ts

@@ -0,0 +1,16 @@
+import type { ActionError, InstanceAction, InstanceRequest, Labels } from './contracts.js';
+export declare class RequestFailure extends Error {
+    readonly reason: ActionError;
+    constructor(reason: ActionError);
+}
+export declare function call<T>(action: InstanceAction, request: InstanceRequest): Promise<T>;
+export declare function useTask(): {
+    pending: boolean;
+    error: ActionError | undefined;
+    run: (work: () => Promise<void>) => Promise<void>;
+};
+export declare function ErrorMessage({ error, labels }: {
+    error?: ActionError;
+    labels: Labels;
+}): import("react").JSX.Element | null;
+//# sourceMappingURL=action-client.d.ts.map

package/dist/action-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-client.d.ts","sourceRoot":"","sources":["../src/action-client.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC3F,qBAAa,cAAe,SAAQ,KAAK;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW;gBAAnB,MAAM,EAAE,WAAW;CAGzC;AACD,wBAAsB,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAI1F;AACD,wBAAgB,OAAO;;;gBAII,MAAM,OAAO,CAAC,IAAI,CAAC;EAe7C;AACD,wBAAgB,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;IAAE,KAAK,CAAC,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,sCAMtF"}

package/dist/action-client.js

@@ -0,0 +1,42 @@
+'use client';
+import { jsx as _jsx } from "react/jsx-runtime";
+import { useRef, useState } from 'react';
+export class RequestFailure extends Error {
+    constructor(reason) {
+        super(reason.key);
+        this.reason = reason;
+    }
+}
+export async function call(action, request) {
+    const result = await action(request);
+    if (result.error)
+        throw new RequestFailure(result.error);
+    return result.data;
+}
+export function useTask() {
+    const lock = useRef(false);
+    const [pending, setPending] = useState(false);
+    const [error, setError] = useState();
+    async function run(work) {
+        if (lock.current)
+            return;
+        lock.current = true;
+        setPending(true);
+        setError(undefined);
+        try {
+            await work();
+        }
+        catch (error) {
+            setError(error instanceof RequestFailure ? error.reason : { key: 'requestFailed' });
+        }
+        finally {
+            lock.current = false;
+            setPending(false);
+        }
+    }
+    return { pending, error, run };
+}
+export function ErrorMessage({ error, labels }) {
+    return error ? (_jsx("p", { role: "alert", className: "break-words text-destructive", children: labels[error.key] })) : null;
+}
+//# sourceMappingURL=action-client.js.map

package/dist/action-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-client.js","sourceRoot":"","sources":["../src/action-client.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEzC,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAqB,MAAmB;QACtC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QADC,WAAM,GAAN,MAAM,CAAa;IAExC,CAAC;CACF;AACD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAI,MAAsB,EAAE,OAAwB;IAC5E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAS,CAAC;AAC1B,CAAC;AACD,MAAM,UAAU,OAAO;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,EAAe,CAAC;IAClD,KAAK,UAAU,GAAG,CAAC,IAAyB;QAC1C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,KAAK,YAAY,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;QACtF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACjC,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAA2C;IACrF,OAAO,KAAK,CAAC,CAAC,CAAC,CACb,YAAG,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,8BAA8B,YACrD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAChB,CACL,CAAC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/attachment-messages.d.ts

@@ -0,0 +1,27 @@
+export declare const attachmentMessages: {
+    readonly attachmentDownload: readonly ["Download file", "下載檔案"];
+    readonly attachmentRefresh: readonly ["Refresh attachments", "更新附件"];
+    readonly attachmentsTitle: readonly ["Attachments", "附件"];
+    readonly attachmentName: readonly ["File name", "檔名"];
+    readonly attachmentSize: readonly ["Size", "大小"];
+    readonly attachmentType: readonly ["Type", "型別"];
+    readonly attachmentStatus: readonly ["Status", "狀態"];
+    readonly uploadedBy: readonly ["Uploaded by", "上傳者"];
+    readonly uploadAttachments: readonly ["Choose files", "選擇檔案"];
+    readonly attachmentDrop: readonly ["Drop files here or press Enter to choose files", "將檔案拖放至此，或按 Enter 選擇檔案"];
+    readonly attachmentPrecheck: readonly ["Precheck hint only; the server decides each upload.", "預檢僅供提示，每個檔案仍由伺服器判定。"];
+    readonly attachmentLimit: readonly ["The attachment limit has been reached.", "附件數量已達上限。"];
+    readonly attachmentRemaining: readonly ["Remaining slots", "剩餘名額"];
+    readonly deleteAttachment: readonly ["Delete record", "刪除紀錄"];
+    readonly confirmDeleteAttachment: readonly ["Delete this attachment record?", "確定刪除此附件紀錄？"];
+    readonly cancelDeleteAttachment: readonly ["Cancel", "取消"];
+    readonly confirmAttachmentDeletion: readonly ["Confirm deletion", "確認刪除"];
+    readonly attachmentQueued: readonly ["Queued", "等待上傳"];
+    readonly attachmentUploading: readonly ["Uploading", "上傳中"];
+    readonly attachmentUploaded: readonly ["Upload accepted", "上傳成功"];
+    readonly attachmentReady: readonly ["Ready", "可下載"];
+    readonly attachmentPending: readonly ["Scanning", "掃描中"];
+    readonly attachmentRejected: readonly ["Scan failed; content has been removed", "未通過掃描，內容已移除"];
+};
+export declare const attachmentKeys: (keyof typeof attachmentMessages)[];
+//# sourceMappingURL=attachment-messages.d.ts.map

package/dist/attachment-messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-messages.d.ts","sourceRoot":"","sources":["../src/attachment-messages.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;CA8BrB,CAAC;AACX,eAAO,MAAM,cAAc,EAEtB,CAAC,MAAM,OAAO,kBAAkB,CAAC,EAAE,CAAC"}

package/dist/attachment-messages.js

@@ -0,0 +1,33 @@
+export const attachmentMessages = {
+    attachmentDownload: ['Download file', '下載檔案'],
+    attachmentRefresh: ['Refresh attachments', '更新附件'],
+    attachmentsTitle: ['Attachments', '附件'],
+    attachmentName: ['File name', '檔名'],
+    attachmentSize: ['Size', '大小'],
+    attachmentType: ['Type', '型別'],
+    attachmentStatus: ['Status', '狀態'],
+    uploadedBy: ['Uploaded by', '上傳者'],
+    uploadAttachments: ['Choose files', '選擇檔案'],
+    attachmentDrop: [
+        'Drop files here or press Enter to choose files',
+        '將檔案拖放至此，或按 Enter 選擇檔案',
+    ],
+    attachmentPrecheck: [
+        'Precheck hint only; the server decides each upload.',
+        '預檢僅供提示，每個檔案仍由伺服器判定。',
+    ],
+    attachmentLimit: ['The attachment limit has been reached.', '附件數量已達上限。'],
+    attachmentRemaining: ['Remaining slots', '剩餘名額'],
+    deleteAttachment: ['Delete record', '刪除紀錄'],
+    confirmDeleteAttachment: ['Delete this attachment record?', '確定刪除此附件紀錄？'],
+    cancelDeleteAttachment: ['Cancel', '取消'],
+    confirmAttachmentDeletion: ['Confirm deletion', '確認刪除'],
+    attachmentQueued: ['Queued', '等待上傳'],
+    attachmentUploading: ['Uploading', '上傳中'],
+    attachmentUploaded: ['Upload accepted', '上傳成功'],
+    attachmentReady: ['Ready', '可下載'],
+    attachmentPending: ['Scanning', '掃描中'],
+    attachmentRejected: ['Scan failed; content has been removed', '未通過掃描，內容已移除'],
+};
+export const attachmentKeys = Object.keys(attachmentMessages);
+//# sourceMappingURL=attachment-messages.js.map

package/dist/attachment-messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-messages.js","sourceRoot":"","sources":["../src/attachment-messages.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,kBAAkB,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC;IAC7C,iBAAiB,EAAE,CAAC,qBAAqB,EAAE,MAAM,CAAC;IAClD,gBAAgB,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC;IACvC,cAAc,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC;IACnC,cAAc,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;IAC9B,cAAc,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;IAC9B,gBAAgB,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;IAClC,UAAU,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC;IAClC,iBAAiB,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC;IAC3C,cAAc,EAAE;QACd,gDAAgD;QAChD,uBAAuB;KACxB;IACD,kBAAkB,EAAE;QAClB,qDAAqD;QACrD,qBAAqB;KACtB;IACD,eAAe,EAAE,CAAC,wCAAwC,EAAE,WAAW,CAAC;IACxE,mBAAmB,EAAE,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAChD,gBAAgB,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC;IAC3C,uBAAuB,EAAE,CAAC,gCAAgC,EAAE,YAAY,CAAC;IACzE,sBAAsB,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxC,yBAAyB,EAAE,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACvD,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IACpC,mBAAmB,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC;IACzC,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAC/C,eAAe,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;IACjC,iBAAiB,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;IACtC,kBAAkB,EAAE,CAAC,uCAAuC,EAAE,aAAa,CAAC;CACpE,CAAC;AACX,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CACvC,kBAAkB,CACoB,CAAC"}

package/dist/attachments-client.d.ts

@@ -0,0 +1,14 @@
+import type { AttachmentList, InstanceAction, Labels } from './contracts.js';
+export declare function attachmentSize(bytes: number): string;
+/** Advisory only: every selected file is still submitted for authoritative validation. */
+export declare function attachmentPrecheck(file: File, limits: AttachmentList['limits'], index: number): ("ATTACHMENT_TOO_LARGE" | "ATTACHMENT_TYPE_NOT_ALLOWED" | "ATTACHMENT_TYPE_MISMATCH" | "ATTACHMENT_LIMIT_EXCEEDED" | "ATTACHMENT_NAME_INVALID" | "ATTACHMENT_NOT_FOUND" | "ATTACHMENT_MULTIPART_INVALID" | "ATTACHMENT_UPLOAD_ABORTED" | "INVALID_INPUT" | "FORBIDDEN" | "INSTANCE_NOT_FOUND" | "MACHINE_NOT_FOUND" | "VIEW_NOT_FOUND" | "JOB_NOT_FOUND" | "UNDECLARED_QUERY_FIELD" | "INVALID_QUERY" | "INVALID_VIEW" | "INVALID_VIEW_SHARING" | "PREFLIGHT_REJECTED" | "PREFLIGHT_REQUIRED" | "DUPLICATE_KEY_EXISTING" | "DUPLICATE_KEY_IN_FILE" | "DUPLICATE_ROW" | "INVALID_DUPLICATE_KEY" | "DUPLICATE_MAPPING" | "INVALID_FIELD_MAPPING" | "MISSING_COLUMN" | "MISSING_FIELD" | "FORBIDDEN_COLUMN" | "REQUIRED" | "TYPE_MISMATCH" | "INVALID_CELL" | "INVALID_ENCODING" | "INVALID_FILE" | "INVALID_HEADERS" | "FILE_TOO_LARGE" | "EXPORT_FILE_TOO_LARGE" | "EXPORT_LIMIT_EXCEEDED" | "EXPORT_NOT_AVAILABLE" | "IMPORT_REPORT_NOT_AVAILABLE" | "DEFINITION_CHANGED" | "DEFINITION_NOT_FOUND" | "SUBJECT_REQUIRED" | "INVALID_COMMENT" | "INVALID_MENTION" | "MENTION_NOT_ALLOWED" | "IDENTITY_SEARCH_UNAVAILABLE" | "DELEGATE_INVALID" | "DELEGATOR_INVALID" | "DELEGATION_PERIOD_INVALID" | "DELEGATION_DURATION_EXCEEDED" | "DELEGATION_OVERLAP" | "DELEGATION_CYCLE" | "DELEGATION_NOT_FOUND" | "ACCESS_NOT_MANAGEABLE" | "ACCESS_LIMIT_EXCEEDED" | "ACCESS_PRINCIPAL_INVALID" | "unauthorized" | "forbidden" | "notFound" | "invalidInput" | "requestFailed")[];
+/** Uploads are XHR multipart to an App-owned streaming route, never a Server Action. */
+export declare function AttachmentsPanel({ id, basePath, initial, labels: t, action, onChanged, }: {
+    id: string;
+    basePath: string;
+    initial?: AttachmentList;
+    labels: Labels;
+    action: InstanceAction;
+    onChanged?: () => Promise<void>;
+}): import("react").JSX.Element;
+//# sourceMappingURL=attachments-client.d.ts.map

package/dist/attachments-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments-client.d.ts","sourceRoot":"","sources":["../src/attachments-client.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAe,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAG1F,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,UAI3C;AACD,0FAA0F;AAC1F,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,64CAS7F;AASD,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,EAC/B,EAAE,EACF,QAAQ,EACR,OAAO,EACP,MAAM,EAAE,CAAC,EACT,MAAM,EACN,SAAS,GACV,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,+BAgSA"}