@jini-ai/admin 0.3.8 → 0.3.10

package/dist/core/index.d.ts

@@ -18,7 +18,4 @@ export type { GatedConfirmResult, GatedOperation, GatedPlanResult } from './gate
 export type { DataTableSortDirection, DataTableSortState } from './data-table/types.js';
 export type { AdminAnalyticsHit, AdminAnalyticsPort, AdminAuthPort, AdminAuthUser, AdminComment, AdminCommentsPort, AdminCommentsQueuePage, AdminDatabasePort, AdminDegradedBanner, AdminDisclosureResult, AdminExtensionEnabledResult, AdminExtensionsPort, AdminIdentityPort, AdminIdentityUser, AdminIntegrationDelivery, AdminIntegrationDeliverySummary, AdminIntegrationSubscription, AdminIntegrationsPort, AdminLedgerRow, AdminMedia, AdminMediaPort, AdminMember, AdminMembersPort, AdminPlugin, AdminPolicy, AdminRecoveryDeepLinkResult, AdminRecoveryPort, AdminRecoveryStatus, AdminRestorePoint, AdminRestorePointSummary, AdminRole, AdminSettingsPort, AdminWorkspace, AdminWorkspacePort, CategoryCount, CommentModerationAction, CommentsSettings, CommentStatus, DatabaseContextEnvelope, DegradedBannerActionKind, DegradedBannerKind, MigrateForwardResult, RestoreConfirmInput, RestoreExecuteInput, RestoreExecuteResult, RestorePointCostClass, SettingResolvedValue, SettingResetResponse, SettingScope, SettingValueResponse, } from './ports/index.js';
 export type { AdminAssignMenuLocationResult, AdminDeleteMenuResult, AdminFormCreateInput, AdminFormDefinition, AdminFormField, AdminFormNotifyConfig, AdminFormsPort, AdminFormSubmission, AdminFormSubmissionPage, AdminFormUpdatePatch, AdminMenu, AdminMenuBinding, AdminMenuCreateInput, AdminMenuCustomTarget, AdminMenuEntryTarget, AdminMenuItem, AdminMenuItemAttrs, AdminMenuRouteTarget, AdminMenusPort, AdminMenuTarget, AdminMenuTermTarget, AdminMenuUpdateTreeInput, AdminMenuUrlTarget, AdminRedirect, AdminRedirectCreateInput, AdminRedirectHitStats, AdminRedirectImportFailure, AdminRedirectImportResult, AdminRedirectListFilter, AdminRedirectsPort, AdminRedirectUpdatePatch, AdminSeoAnalysis, AdminSeoIssue, AdminSeoMeta, AdminSeoOpenGraph, AdminSeoOverrides, AdminSeoPort, AdminSeoRobotsDirective, AdminSeoRobotsRule, AdminSeoSettings, AdminSeoTwitterCard, FormDefinitionStatus, FormFieldType, MenuStatus, NavTargetKind, RedirectMatchType, RedirectSource, RedirectStatus, RedirectStatusCode, SeoIssueSeverity, SeoOpenGraphType, SeoTwitterCardKind, } from './ports/index.js';
-export type { AdminEntityDescriptor, AdminEntityField, AdminEntityFieldKind, AdminEntityFilter, AdminEntityJsonField, AdminEntityListQuery, AdminEntityPage, AdminEntityPort, AdminEntityRegistry, AdminEntityRelationField, AdminEntityRow, AdminEntityRowData, AdminEntityScalarField, AdminErasedEntityPort, } from './ports/index.js';
-export { createAdminEntityRegistry, describeAdminEntityFieldMismatch, eraseEntityPort, getErasedEntityPort, listErasedEntityPorts, } from './entities/rules.js';
-export type { AdminEntityErasureOptions, AdminEntityRowViolation } from './entities/rules.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/index.js

@@ -12,5 +12,4 @@ export { DEFAULT_ADMIN_BASE, adminHref, currentRoutePath, matchRoute, stripTrail
 export { hasPermission } from './permissions/rules.js';
 // Transport — the seam every route group is built on.
 export { AdminApiError, createAdminClient, createHttpTransport, describeApiError, } from './transport/index.js';
-export { createAdminEntityRegistry, describeAdminEntityFieldMismatch, eraseEntityPort, getErasedEntityPort, listErasedEntityPorts, } from './entities/rules.js';
 //# sourceMappingURL=index.js.map

package/dist/core/ports/index.d.ts

@@ -18,5 +18,4 @@ export type { AdminSeoAnalysis, AdminSeoIssue, AdminSeoMeta, AdminSeoOpenGraph,
 export type { AdminRedirect, AdminRedirectCreateInput, AdminRedirectHitStats, AdminRedirectImportFailure, AdminRedirectImportResult, AdminRedirectListFilter, AdminRedirectsPort, AdminRedirectUpdatePatch, RedirectMatchType, RedirectSource, RedirectStatus, RedirectStatusCode, } from './redirects.js';
 export type { AdminAssignMenuLocationResult, AdminDeleteMenuResult, AdminMenu, AdminMenuBinding, AdminMenuCreateInput, AdminMenuCustomTarget, AdminMenuEntryTarget, AdminMenuItem, AdminMenuItemAttrs, AdminMenuRouteTarget, AdminMenusPort, AdminMenuTarget, AdminMenuTermTarget, AdminMenuUpdateTreeInput, AdminMenuUrlTarget, MenuStatus, NavTargetKind, } from './menus.js';
 export type { AdminFormCreateInput, AdminFormDefinition, AdminFormField, AdminFormNotifyConfig, AdminFormsPort, AdminFormSubmission, AdminFormSubmissionPage, AdminFormUpdatePatch, FormDefinitionStatus, FormFieldType, } from './forms.js';
-export type { AdminEntityDescriptor, AdminEntityField, AdminEntityFieldKind, AdminEntityFilter, AdminEntityJsonField, AdminEntityListQuery, AdminEntityPage, AdminEntityPort, AdminEntityRegistry, AdminEntityRelationField, AdminEntityRow, AdminEntityRowData, AdminEntityScalarField, AdminErasedEntityPort, } from './entities.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/ports/menus.d.ts

@@ -25,20 +25,6 @@
  * `kind` values (with `AdminMenuCustomTarget` as the `default` arm) is the straightforward way to
  * stay correct.
  *
- * **Migration hazard, measured 2026-09-05.** This is not merely a style preference — it means an
- * exhaustive `switch` with NO `default` arm cannot compile against `AdminMenuTarget` at all, and
- * that is exactly the shape a host arrives with. Both existing admin apps' `targetForKind`
- * (`apps/admin/src/features/menus/MenuEditor.tsx`) switch over their own local CLOSED four-member
- * union with no `default`, and rely on exhaustiveness for the return type. Compiling that function
- * against this port's union emits `TS2366` (lacks ending return statement) plus a `TS2339` per
- * field access. Confirmed by compiling the real function against this union directly.
- *
- * The hazard is pre-existing and belongs to `AdminMenuCustomTarget`, not to any later change: the
- * identical probe run against the union with and without an extra member emits a character-for-
- * character identical error set. Recorded here because it will surface the first time anyone wires
- * a host onto this port, and the natural instinct will be to blame whatever change is in flight at
- * that moment. The fix is a `default` arm in the host, not a change to this file.
- *
  * **This is a deliberately deferred decision, not a settled one — record it as such.** `entryRef`/
  * `termRef` encode a host content model (an "entry" and a "taxonomy term" are the reference
  * implementation's own vocabulary for its content system, not a vendor-neutral abstraction this
@@ -53,35 +39,6 @@
  * instead of one, and a genuine vendor-neutral reference shape (rather than another bespoke
  * `kind`-per-host member) becomes the right call.
  *
- * ### Status of that trigger, re-checked 2026-09-05 — NOT fired
- *
- * A second host now exists in this workspace, and that is NOT the trigger. The trigger is a second
- * host needing a fifth KIND. Recording the difference here because a promotion was very nearly
- * approved on the weaker reading. Four findings, all verified against source rather than assumed:
- *
- * 1. **Zero importers.** Nothing anywhere imports `AdminMenuTarget`, `NavTargetKind`, or any target
- *    variant from this package. In this repo they are re-exported by `core/index.ts` and
- *    `core/ports/index.ts` and consumed by nothing.
- * 2. **Both admin apps declare their own.** Each ships a local, *closed*
- *    `{ kind: "entryRef" | "termRef" | "url" | "route" }` in its own `src/lib/api.ts` — an HTTP
- *    DTO, not this port. The two are byte-identical to each other: the second is a fork of the
- *    first, so they are one data point, not two.
- * 3. **The other `NavTargetKind` is a different type.** `@jini-ai/cms/navigation` exports its own
- *    `NavTargetKind` (closed, plus a separate `ReservedNavTargetKind`). A host importing that one
- *    is not exercising this port.
- * 4. **The union is already open.** `AdminMenuCustomTarget`'s `kind: string & {}` already lets any
- *    host express any kind today. Nothing is blocked while the decision stays deferred.
- *
- * So no fifth kind has been needed, and adding a named generic variant now would be designing from
- * zero validating examples — the exact failure the paragraph above exists to prevent. Considered
- * and rejected on 2026-09-05 for that reason. Re-check this section, not the prose above it,
- * before concluding the trigger has fired.
- *
- * Note for whoever revisits: wiring `AdminMenusPort` into a host is the experiment that ANSWERS the
- * type question, and it is not blocked by it. A host that wires the port and finds
- * `entryRef`/`termRef` fit vindicates the deferral; one that needs a product/collection kind fires
- * the trigger with a real second example to design from.
- *
  * ## `deleteMenu` is a two-rung ladder driven by call count, not by `force` alone
  *
  * A single method models a two-step deletion flow: the FIRST call against a non-trashed menu

package/dist/core/ports/menus.js

@@ -25,20 +25,6 @@
  * `kind` values (with `AdminMenuCustomTarget` as the `default` arm) is the straightforward way to
  * stay correct.
  *
- * **Migration hazard, measured 2026-09-05.** This is not merely a style preference — it means an
- * exhaustive `switch` with NO `default` arm cannot compile against `AdminMenuTarget` at all, and
- * that is exactly the shape a host arrives with. Both existing admin apps' `targetForKind`
- * (`apps/admin/src/features/menus/MenuEditor.tsx`) switch over their own local CLOSED four-member
- * union with no `default`, and rely on exhaustiveness for the return type. Compiling that function
- * against this port's union emits `TS2366` (lacks ending return statement) plus a `TS2339` per
- * field access. Confirmed by compiling the real function against this union directly.
- *
- * The hazard is pre-existing and belongs to `AdminMenuCustomTarget`, not to any later change: the
- * identical probe run against the union with and without an extra member emits a character-for-
- * character identical error set. Recorded here because it will surface the first time anyone wires
- * a host onto this port, and the natural instinct will be to blame whatever change is in flight at
- * that moment. The fix is a `default` arm in the host, not a change to this file.
- *
  * **This is a deliberately deferred decision, not a settled one — record it as such.** `entryRef`/
  * `termRef` encode a host content model (an "entry" and a "taxonomy term" are the reference
  * implementation's own vocabulary for its content system, not a vendor-neutral abstraction this
@@ -53,35 +39,6 @@
  * instead of one, and a genuine vendor-neutral reference shape (rather than another bespoke
  * `kind`-per-host member) becomes the right call.
  *
- * ### Status of that trigger, re-checked 2026-09-05 — NOT fired
- *
- * A second host now exists in this workspace, and that is NOT the trigger. The trigger is a second
- * host needing a fifth KIND. Recording the difference here because a promotion was very nearly
- * approved on the weaker reading. Four findings, all verified against source rather than assumed:
- *
- * 1. **Zero importers.** Nothing anywhere imports `AdminMenuTarget`, `NavTargetKind`, or any target
- *    variant from this package. In this repo they are re-exported by `core/index.ts` and
- *    `core/ports/index.ts` and consumed by nothing.
- * 2. **Both admin apps declare their own.** Each ships a local, *closed*
- *    `{ kind: "entryRef" | "termRef" | "url" | "route" }` in its own `src/lib/api.ts` — an HTTP
- *    DTO, not this port. The two are byte-identical to each other: the second is a fork of the
- *    first, so they are one data point, not two.
- * 3. **The other `NavTargetKind` is a different type.** `@jini-ai/cms/navigation` exports its own
- *    `NavTargetKind` (closed, plus a separate `ReservedNavTargetKind`). A host importing that one
- *    is not exercising this port.
- * 4. **The union is already open.** `AdminMenuCustomTarget`'s `kind: string & {}` already lets any
- *    host express any kind today. Nothing is blocked while the decision stays deferred.
- *
- * So no fifth kind has been needed, and adding a named generic variant now would be designing from
- * zero validating examples — the exact failure the paragraph above exists to prevent. Considered
- * and rejected on 2026-09-05 for that reason. Re-check this section, not the prose above it,
- * before concluding the trigger has fired.
- *
- * Note for whoever revisits: wiring `AdminMenusPort` into a host is the experiment that ANSWERS the
- * type question, and it is not blocked by it. A host that wires the port and finds
- * `entryRef`/`termRef` fit vindicates the deferral; one that needs a product/collection kind fires
- * the trigger with a real second example to design from.
- *
  * ## `deleteMenu` is a two-rung ladder driven by call count, not by `force` alone
  *
  * A single method models a two-step deletion flow: the FIRST call against a non-trashed menu

package/dist/react/components/ConfirmDialog/ConfirmDialog.d.ts

@@ -22,8 +22,15 @@ import { type UseConfirmDialog } from './ConfirmDialog.hooks.js';
  *
  * | element | handle | role |
  * |---|---|---|
- * | the confirm action | `delete-role-confirm` | `button` |
  * | the cancel/dismiss action | `delete-role-cancel` | `button` |
+ * | the confirm action, unless the caller opts out with `agentMayConfirm={false}` | `delete-role-confirm` | `button` |
+ *
+ * The confirm action is agent-reachable by default, same as every other published control — the
+ * product's standing policy is that the in-page assistant may click buttons, fill forms and confirm
+ * dialogs, with permanently destructive actions gated by a separate in-chat confirmation at the tool
+ * level rather than by hiding the button. A caller whose dialog must stay human-only regardless
+ * (e.g. it guards a secret the assistant must never see or move on its own) opts out explicitly with
+ * `agentMayConfirm={false}`.
  *
  * Both segments are literals this component chooses itself, never host data — unlike `RowMenu`'s
  * per-item keys (arbitrary host strings that can collide after slugifying), `confirm`/`cancel`
@@ -31,7 +38,7 @@ import { type UseConfirmDialog } from './ConfirmDialog.hooks.js';
  * choice of name, and a bad one should fail loudly at first render rather than silently answer to a
  * handle the caller never wrote. Omit `agentHandle` and no `data-agent-*` markup is emitted at all.
  *
- * Both handles are present in the DOM as soon as `agentHandle` is supplied, regardless of `open` —
+ * The published handles are present in the DOM as soon as `agentHandle` is supplied, regardless of `open` —
  * this component stays mounted and toggles the native `<dialog>`'s open state rather than being
  * conditionally rendered by its caller (see `useConfirmDialog`'s doc comment), so there is no
  * "closed" render that omits them, the same reasoning `RowMenu`'s always-visible trigger handle
@@ -51,7 +58,8 @@ export interface ConfirmDialogProps {
     title: string;
     body: ReactNode;
     confirmLabel: string;
-    /** @default "Cancel" */
+    /** @default the enclosing `ConfirmDialogDefaultsProvider`'s `cancelLabel`, or "Cancel" with
+     *  none mounted. */
     cancelLabel?: string;
     /** Applies `.btn-warning`/`.btn-danger` to the confirm action. Defaults to `"default"` (no class,
      *  the plain primary button). Wins over `destructive` below when both are passed. */
@@ -76,6 +84,11 @@ export interface ConfirmDialogProps {
     /** This dialog's own agent handle — see this file's "Agent handles" doc comment for the full
      *  scheme. Omit and no `data-agent-*` markup is emitted at all. */
     agentHandle?: string;
+    /** Publishes the confirm action (`<agentHandle>-confirm`) so the assistant can confirm this
+     *  dialog without a human — on by default, matching every other published control. Pass `false`
+     *  only for a dialog that must stay human-only regardless (e.g. it guards a secret). Has no
+     *  effect without `agentHandle`. @default true */
+    agentMayConfirm?: boolean;
 }
 /**
  * Controlled modal confirm — renders the `<dialog>` markup and delegates its open/close and focus
@@ -86,5 +99,5 @@ export interface ConfirmDialogProps {
  * is no browser-assigned "default button" for Enter to reach for at all; confirm can only ever fire
  * from an explicit click or explicit Tab-then-Enter onto it.
  */
-export declare function ConfirmDialog({ useDialog, agentHandle: baseHandle, ...props }: ConfirmDialogProps): import("react").JSX.Element;
+export declare function ConfirmDialog({ useDialog, agentHandle: baseHandle, agentMayConfirm, ...props }: ConfirmDialogProps): import("react").JSX.Element;
 //# sourceMappingURL=ConfirmDialog.d.ts.map

package/dist/react/components/ConfirmDialog/ConfirmDialog.hooks.d.ts

@@ -1,4 +1,4 @@
-import { type MouseEvent, type RefObject, type SyntheticEvent } from 'react';
+import { type MouseEvent, type ReactNode, type RefObject, type SyntheticEvent } from 'react';
 /**
  * @file `ConfirmDialog`'s open/close and focus-management state, split out of the component so it
  * can be swapped for a fake via the `useDialog` prop on `ConfirmDialogProps` — see that prop's doc
@@ -33,6 +33,42 @@ export interface ConfirmDialogController {
 /** The signature `ConfirmDialogProps.useDialog` accepts. Any hook matching this can drive the
  *  component; it does not have to be {@link useConfirmDialog}, or even use React state at all. */
 export type UseConfirmDialog = (open: boolean, pending: boolean | undefined, onCancel: () => void) => ConfirmDialogController;
+/**
+ * Host-wide defaults every `ConfirmDialog` beneath a {@link ConfirmDialogDefaultsProvider} falls
+ * back to when the matching prop is not passed explicitly. Today this is only `cancelLabel` — see
+ * that provider's doc comment for why it exists.
+ */
+export interface ConfirmDialogDefaults {
+    cancelLabel?: string | undefined;
+}
+export interface ConfirmDialogDefaultsProviderProps extends ConfirmDialogDefaults {
+    children: ReactNode;
+}
+/**
+ * Publishes host-wide `ConfirmDialog` defaults — today just a translated `cancelLabel` — to every
+ * `ConfirmDialog` mounted beneath it. Exists so a host with its own localized "Cancel" copy can
+ * set it once at its app root instead of passing `cancelLabel` at every call site (and remembering
+ * to add it to every new one it writes later).
+ *
+ * An explicit `cancelLabel` prop on a given `ConfirmDialog` still wins over this (see
+ * {@link useConfirmDialogCancelLabel}). A `ConfirmDialog` mounted with no enclosing provider at
+ * all is unaffected — it falls back to the component's own built-in `"Cancel"`, exactly as before
+ * this provider existed.
+ *
+ * Optional by design, unlike `Sidebar`'s `useSidebar` context: a caller with no localization need
+ * should never be forced to wrap anything just to render one dialog.
+ */
+export declare function ConfirmDialogDefaultsProvider({ children, cancelLabel }: ConfirmDialogDefaultsProviderProps): import("react").JSX.Element;
+/**
+ * Resolves `ConfirmDialog`'s Cancel button text: the explicit `cancelLabel` prop first, then the
+ * enclosing {@link ConfirmDialogDefaultsProvider}'s default, then the built-in `"Cancel"`. No
+ * provider is a normal, fully-supported state (unlike `useSidebar`, this never throws).
+ *
+ * @param explicit - The dialog's own `cancelLabel` prop, or `undefined` when the caller passed none.
+ * @returns The label to render.
+ * @complexity O(1).
+ */
+export declare function useConfirmDialogCancelLabel(explicit: string | undefined): string;
 /**
  * Owns the `<dialog>` element's open/close lifecycle and focus management for `ConfirmDialog`.
  *

package/dist/react/components/ConfirmDialog/ConfirmDialog.hooks.js

@@ -1,4 +1,45 @@
-import { useEffect, useId, useRef } from 'react';
+import { jsx as _jsx } from "react/jsx-runtime";
+import { createContext, useContext, useEffect, useId, useMemo, useRef, } from 'react';
+/** Empty object, not `undefined` — {@link useConfirmDialogCancelLabel} can always read `cancelLabel`
+ *  off it without an extra null check, whether or not a provider is mounted. */
+const ConfirmDialogDefaultsContext = createContext({});
+/** The built-in last resort for {@link useConfirmDialogCancelLabel}, used when neither the prop nor
+ *  an enclosing provider supplies a label. */
+const DEFAULT_CANCEL_LABEL = 'Cancel';
+/**
+ * Publishes host-wide `ConfirmDialog` defaults — today just a translated `cancelLabel` — to every
+ * `ConfirmDialog` mounted beneath it. Exists so a host with its own localized "Cancel" copy can
+ * set it once at its app root instead of passing `cancelLabel` at every call site (and remembering
+ * to add it to every new one it writes later).
+ *
+ * An explicit `cancelLabel` prop on a given `ConfirmDialog` still wins over this (see
+ * {@link useConfirmDialogCancelLabel}). A `ConfirmDialog` mounted with no enclosing provider at
+ * all is unaffected — it falls back to the component's own built-in `"Cancel"`, exactly as before
+ * this provider existed.
+ *
+ * Optional by design, unlike `Sidebar`'s `useSidebar` context: a caller with no localization need
+ * should never be forced to wrap anything just to render one dialog.
+ */
+export function ConfirmDialogDefaultsProvider({ children, cancelLabel }) {
+    // Memoized so a host re-render that leaves `cancelLabel` unchanged does not publish a new context
+    // value — a fresh object would re-render every `ConfirmDialog` beneath it, even under a memoized
+    // parent that otherwise bailed out.
+    const defaults = useMemo(() => ({ cancelLabel }), [cancelLabel]);
+    return _jsx(ConfirmDialogDefaultsContext.Provider, { value: defaults, children: children });
+}
+/**
+ * Resolves `ConfirmDialog`'s Cancel button text: the explicit `cancelLabel` prop first, then the
+ * enclosing {@link ConfirmDialogDefaultsProvider}'s default, then the built-in `"Cancel"`. No
+ * provider is a normal, fully-supported state (unlike `useSidebar`, this never throws).
+ *
+ * @param explicit - The dialog's own `cancelLabel` prop, or `undefined` when the caller passed none.
+ * @returns The label to render.
+ * @complexity O(1).
+ */
+export function useConfirmDialogCancelLabel(explicit) {
+    const { cancelLabel } = useContext(ConfirmDialogDefaultsContext);
+    return explicit ?? cancelLabel ?? DEFAULT_CANCEL_LABEL;
+}
 /**
  * Owns the `<dialog>` element's open/close lifecycle and focus management for `ConfirmDialog`.
  *

package/dist/react/components/ConfirmDialog/ConfirmDialog.js

@@ -2,8 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import {} from 'react';
 import { agentHandle } from '@jini-ai/agentic';
 import { resolveTone, toneClassName } from '../../types.js';
-import { useConfirmDialog } from './ConfirmDialog.hooks.js';
-const DEFAULT_CANCEL_LABEL = 'Cancel';
+import { useConfirmDialog, useConfirmDialogCancelLabel } from './ConfirmDialog.hooks.js';
 /** Sub-handle segments appended to the caller's base — literals this component chooses itself,
  *  never host data (see this file's "Agent handles" doc comment for why that means neither needs
  *  sanitizing, unlike `RowMenu`'s per-item keys). */
@@ -77,14 +76,14 @@ function confirmDialogAgentProps(base, action, options) {
  * is no browser-assigned "default button" for Enter to reach for at all; confirm can only ever fire
  * from an explicit click or explicit Tab-then-Enter onto it.
  */
-export function ConfirmDialog({ useDialog = useConfirmDialog, agentHandle: baseHandle, ...props }) {
+export function ConfirmDialog({ useDialog = useConfirmDialog, agentHandle: baseHandle, agentMayConfirm = true, ...props }) {
     const { titleId, dialogRef, cancelRef, handleNativeCancel, handleBackdropClick } = useDialog(props.open, props.pending, props.onCancel);
     const tone = resolveTone(props);
-    const cancelLabel = props.cancelLabel ?? DEFAULT_CANCEL_LABEL;
+    const cancelLabel = useConfirmDialogCancelLabel(props.cancelLabel);
     return (_jsxs("dialog", { ref: dialogRef, className: "confirm-dialog", "aria-labelledby": titleId, onCancel: handleNativeCancel, onClick: handleBackdropClick, children: [_jsx("h2", { id: titleId, children: props.title }), _jsx("div", { className: "confirm-dialog-body", children: props.body }), _jsxs("div", { className: "confirm-dialog-actions", children: [_jsx("button", { ref: cancelRef, type: "button", className: "btn-secondary", disabled: props.pending, onClick: props.onCancel, ...confirmDialogAgentProps(baseHandle, CANCEL_HANDLE_ACTION, {
                             role: 'button',
                             label: confirmDialogCancelLabel(cancelLabel, props.title),
-                        }), children: cancelLabel }), _jsx("button", { type: "button", className: toneClassName(tone), disabled: props.pending, onClick: props.onConfirm, ...confirmDialogAgentProps(baseHandle, CONFIRM_HANDLE_ACTION, {
+                        }), children: cancelLabel }), _jsx("button", { type: "button", className: toneClassName(tone), disabled: props.pending, onClick: props.onConfirm, ...confirmDialogAgentProps(agentMayConfirm ? baseHandle : undefined, CONFIRM_HANDLE_ACTION, {
                             role: 'button',
                             label: confirmDialogConfirmLabel(props.confirmLabel, props.title, tone),
                         }), children: props.confirmLabel })] })] }));

package/dist/react/components/Sidebar.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { Fragment, createContext, createElement, useContext, useEffect, useMemo, useRef, useState, } from 'react';
+import { Fragment, createContext, useContext, useEffect, useMemo, useRef, useState, } from 'react';
 import { createPortal } from 'react-dom';
 import { DEFAULT_ADMIN_BASE, adminHref } from '../../core/routing/rules.js';
 import { useNavSections } from '../hooks/use-nav-sections.js';
@@ -18,96 +18,8 @@ export function useSidebar() {
     }
     return value;
 }
-/**
- * Shape elements `AdminNavEntry.icon` markup may use. A host draws its own glyphs as raw inner
- * SVG (see that field's doc comment in `core/manifest/types.ts`), so this can't be a fixed set of
- * named icons — but it also means the string reaching {@link Icon} was written by whoever owns the
- * nav entry, which soon enough will be a descriptor rather than code. `g` is included so multi-path
- * icons can group and transform their pieces together.
- */
-const ICON_ALLOWED_TAGS = new Set(['path', 'circle', 'rect', 'line', 'polygon', 'polyline', 'ellipse', 'g']);
-/**
- * Presentation attributes let through on an icon shape, mapped from their SVG/XML spelling to the
- * camelCase prop name React expects. Anything not listed here — `style`, `href`/`xlink:href`, every
- * `on*` handler — is dropped by {@link sanitizeIconNode} rather than passed through, so there is no
- * allowlist gap to keep in sync with a separate denylist.
- */
-const ICON_ALLOWED_ATTRS = {
-    d: 'd',
-    cx: 'cx',
-    cy: 'cy',
-    r: 'r',
-    rx: 'rx',
-    ry: 'ry',
-    x: 'x',
-    y: 'y',
-    width: 'width',
-    height: 'height',
-    x1: 'x1',
-    y1: 'y1',
-    x2: 'x2',
-    y2: 'y2',
-    points: 'points',
-    transform: 'transform',
-    fill: 'fill',
-    'fill-rule': 'fillRule',
-    opacity: 'opacity',
-    'stroke-width': 'strokeWidth',
-    'stroke-linecap': 'strokeLinecap',
-    'stroke-linejoin': 'strokeLinejoin',
-    'clip-rule': 'clipRule',
-};
-/**
- * Rebuilds one parsed element as a React element, keeping only {@link ICON_ALLOWED_TAGS} /
- * {@link ICON_ALLOWED_ATTRS}. This is what stands in for `dangerouslySetInnerHTML`: the browser's
- * own parser does the tokenizing (far less error-prone than a hand-rolled regex over SVG/XML), and
- * this function decides what survives the trip into React's tree — a `<script>`, a `<foreignObject>`
- * carrying arbitrary HTML, an `<image>`/`<use>` reference, or an `onload=` attribute all fail to
- * match anything on either allowlist and are simply not there afterward, whatever they contained.
- */
-function sanitizeIconNode(node, key) {
-    const tag = node.tagName.toLowerCase();
-    if (!ICON_ALLOWED_TAGS.has(tag))
-        return null;
-    // `key` goes straight into the props object — `createElement` pulls it out as the element's
-    // reserved key rather than forwarding it to the DOM, the same as writing `key={key}` in JSX.
-    const props = { key };
-    for (const attr of Array.from(node.attributes)) {
-        const propName = ICON_ALLOWED_ATTRS[attr.name.toLowerCase()];
-        if (propName)
-            props[propName] = attr.value;
-    }
-    const children = Array.from(node.children)
-        .map((child, i) => sanitizeIconNode(child, i))
-        .filter((child) => child !== null);
-    return createElement(tag, props, children.length ? children : undefined);
-}
-// Reused across parses rather than constructed per render — `DOMParser` instances are stateless
-// and this runs once per icon render, but there is no reason to pay allocation cost for it twice.
-let iconMarkupParser;
-/**
- * Parses one `AdminNavEntry.icon` string into a sanitized element list. Wrapping in a throwaway
- * `<svg>` document (never attached to the page — this is markup parsing, not rendering) lets the
- * browser's own XML parser validate structure for free: malformed markup surfaces as a
- * `parsererror` node, which is treated the same as empty input — the row loses its icon, not its
- * label or link.
- */
-function parseIconMarkup(markup) {
-    if (!markup)
-        return [];
-    iconMarkupParser ??= new DOMParser();
-    const doc = iconMarkupParser.parseFromString(`<svg xmlns="http://www.w3.org/2000/svg">${markup}</svg>`, 'image/svg+xml');
-    if (doc.getElementsByTagName('parsererror').length > 0)
-        return [];
-    return Array.from(doc.documentElement.children)
-        .map((child, i) => sanitizeIconNode(child, i))
-        .filter((child) => child !== null);
-}
 function Icon(props) {
-    // Re-parsing on every keystroke of an unrelated state update would be wasted work for a string
-    // that, in practice, never changes after the nav manifest is built.
-    const children = useMemo(() => parseIconMarkup(props.markup), [props.markup]);
-    return (_jsx("svg", { viewBox: "0 0 18 18", fill: "none", stroke: "currentColor", strokeWidth: 1.5, children: children }));
+    return (_jsx("svg", { viewBox: "0 0 18 18", fill: "none", stroke: "currentColor", strokeWidth: 1.5, dangerouslySetInnerHTML: { __html: props.markup } }));
 }
 /**
  * Rail-mode tooltip, portaled to `document.body`.

package/dist/react/index.d.ts

@@ -38,8 +38,10 @@ export type { ConfirmButtonProps } from './components/ConfirmButton/ConfirmButto
 export { ConfirmDialog } from './components/ConfirmDialog/ConfirmDialog.js';
 export type { ConfirmDialogProps } from './components/ConfirmDialog/ConfirmDialog.js';
 export type { ConfirmDialogController, UseConfirmDialog } from './components/ConfirmDialog/ConfirmDialog.hooks.js';
+export { ConfirmDialogDefaultsProvider } from './components/ConfirmDialog/ConfirmDialog.hooks.js';
+export type { ConfirmDialogDefaults, ConfirmDialogDefaultsProviderProps, } from './components/ConfirmDialog/ConfirmDialog.hooks.js';
 export { DataTable } from './components/DataTable.js';
-export type { DataTableColumn, DataTableColumnSort, DataTableProps, DataTableSortDirection, DataTableSortState, } from './components/DataTable.js';
+export type { DataTableColumn, DataTableProps } from './components/DataTable.js';
 export { InteractiveHtmlEditor } from './components/InteractiveHtmlEditor/InteractiveHtmlEditor.js';
 export type { InteractiveHtmlEditorProps } from './components/InteractiveHtmlEditor/InteractiveHtmlEditor.js';
 export { RowMenu } from './components/RowMenu/RowMenu.js';

package/dist/react/index.js

@@ -36,9 +36,11 @@
 export { resolveTone, toneClassName } from './types.js';
 export { ConfirmButton } from './components/ConfirmButton/ConfirmButton.js';
 export { ConfirmDialog } from './components/ConfirmDialog/ConfirmDialog.js';
-// The list table. Sorting is opt-in per column (`DataTableColumn.sort`); pagination and row
-// selection are still deliberately absent — see its file header for the corpus evidence behind
-// every one of these decisions.
+// Host-wide `ConfirmDialog` defaults (today just a translated `cancelLabel`), set once at an app
+// root rather than passed at every call site — see `ConfirmDialogDefaultsProvider`'s doc comment.
+export { ConfirmDialogDefaultsProvider } from './components/ConfirmDialog/ConfirmDialog.hooks.js';
+// The list table. Deliberately has no sorting, pagination or row selection — see its file header
+// for the corpus evidence behind each omission.
 export { DataTable } from './components/DataTable.js';
 // Visual click-into-text editing surface for a bespoke HTML document, built on GrapesJS. See its
 // own file header for the styling-contract exception it carries (vendor CSS import) and the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/admin",
-  "version": "0.3.8",
+  "version": "0.3.10",
   "description": "Composable admin surface for Jini-hosted products: framework-free contracts, panel registry, and route model in `/core`; React shell and panels in `/react`. Import only the layers you need.",
   "license": "Apache-2.0",
   "repository": {
@@ -51,7 +51,8 @@
     "!dist/**/*.test.d.ts",
     "!dist/**/*.test.js.map",
     "!dist/**/*.test.d.ts.map",
-    "!dist/**/__tests__/**"
+    "!dist/**/__tests__/**",
+    "!dist/**/*.map"
   ],
   "publishConfig": {
     "access": "public",
@@ -80,8 +81,8 @@
     "react-dom": "^19.2.0"
   },
   "dependencies": {
-    "@jini-ai/agentic": "0.3.6",
-    "@jini-ai/ui": "0.3.8"
+    "@jini-ai/agentic": "0.3.7",
+    "@jini-ai/ui": "0.3.12"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",

package/dist/browser/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/browser/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,QAAQ,EACR,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC"}

package/dist/browser/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/browser/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,QAAQ,EACR,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC"}

package/dist/browser/navigation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"navigation.d.ts","sourceRoot":"","sources":["../../src/browser/navigation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,iGAAiG;AACjG,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,yDAAyD;AACzD,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAA2B,GAAG,MAAM,CAEvE;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACnE,IAAI,CA8BN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,GAAE,MAA2B,GAAG,MAAM,IAAI,CAiC5F;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAOjE"}

package/dist/browser/navigation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"navigation.js","sourceRoot":"","sources":["../../src/browser/navigation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE/G,iGAAiG;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,OAAe,kBAAkB;IAC7D,OAAO,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,SAAiB,EACjB,UAAkE,EAAE;IAEpE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,CAAC;IAChD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAEvC;;;;;;;;;;;;;;;OAeG;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,SAAS,GACb,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpF,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;QACxC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;IACvC,IAAI,SAAS;QAAE,OAAO;IAEtB,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;;QAC3D,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAe,kBAAkB;IAC9E,MAAM,OAAO,GAAG,CAAC,KAAiB,EAAE,EAAE;QACpC,8FAA8F;QAC9F,kDAAkD;QAClD,IAAI,KAAK,CAAC,gBAAgB;YAAE,OAAO;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO;QAE7E,MAAM,MAAM,GAAI,KAAK,CAAC,MAAyB,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YAAE,OAAO;QAC5C,+FAA+F;QAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO;QAEzC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAE1C,sFAAsF;QACtF,8CAA8C;QAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QAClD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,OAAO;QAE1E,KAAK,CAAC,cAAc,EAAE,CAAC;QACvB,+FAA+F;QAC/F,6FAA6F;QAC7F,oFAAoF;QACpF,QAAQ,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;IAEF,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,QAAoB;IACnD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACpD,OAAO,GAAG,EAAE;QACV,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/data-table/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/data-table/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,MAAM,CAAC;AAEpD;oFACoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,sBAAsB,CAAC;CACnC"}

package/dist/core/data-table/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/data-table/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}