@jini-ai/ui 0.6.11 → 0.6.15-rc.1

package/dist/features/mcp-ui/surfaces/form.js

@@ -78,6 +78,7 @@ function cancelPlanOf(spec) {
 /** The inline runtime script that reads, validates and submits the fields. @complexity O(n) in the field count plus the script length. */
 function formScript(spec, text) {
     const cancelPlan = cancelPlanOf(spec);
+    const hasAlternatives = spec.fields.some(field => field.requiredUnless?.orPresent);
     return `(function () {
   "use strict";
 ${SURFACE_SCRIPT_PRELUDE}
@@ -124,20 +125,29 @@ ${SURFACE_SCRIPT_PRELUDE}
     control.dispatchEvent(new Event("input", { bubbles: true }));
   });
 
-  // A reveal button only changes presentation: replacing a textarea with a password input would
-  // discard line breaks. Listen on the form so clicks on the button's contents work too.
+  // The eye toggle only changes presentation. A textarea stays a textarea (a password input would
+  // discard line breaks) and flips its CSS masking; a single-line input flips password <-> text.
+  // Listen on the form so clicks on the button's icon work too.
+  function setRevealed(button, reveal) {
+    var control = document.getElementById(button.getAttribute("data-mcpui-secret-toggle"));
+    if (!control) return;
+    if (control.tagName === "TEXTAREA") control.setAttribute("style", "-webkit-text-security: " + (reveal ? "none" : "disc") + ";");
+    else control.type = reveal ? "text" : "password";
+    button.setAttribute("aria-pressed", reveal ? "true" : "false");
+    button.setAttribute("aria-label", button.getAttribute(reveal ? "data-mcpui-hide-secret" : "data-mcpui-show-secret"));
+  }
+  // Re-mask every secret once a save succeeds, so nothing stays readable on screen behind the result.
+  function concealSecrets() {
+    var toggles = form.querySelectorAll("button[data-mcpui-secret-toggle]");
+    for (var t = 0; t < toggles.length; t++) setRevealed(toggles[t], false);
+  }
   form.addEventListener("click", function (event) {
     if (event.isTrusted !== true) return;
     var target = event.target;
     if (!target || typeof target.closest !== "function") return;
     var button = target.closest("button[data-mcpui-secret-toggle]");
     if (!button || button.disabled) return;
-    var control = document.getElementById(button.getAttribute("data-mcpui-secret-toggle"));
-    if (!control) return;
-    var reveal = button.getAttribute("aria-pressed") !== "true";
-    control.setAttribute("style", "-webkit-text-security: " + (reveal ? "none" : "disc") + ";");
-    button.setAttribute("aria-pressed", reveal ? "true" : "false");
-    button.textContent = button.getAttribute(reveal ? "data-mcpui-hide-secret" : "data-mcpui-show-secret");
+    setRevealed(button, button.getAttribute("aria-pressed") !== "true");
   });
 
   // form.elements[name] yields a RadioNodeList when several controls share a name and the BARE
@@ -172,6 +182,69 @@ ${SURFACE_SCRIPT_PRELUDE}
     return value === "";
   }
 
+  // Presentation only; the host's save rule validates the effective settings and kept secrets.
+${hasAlternatives ? `  function hasAlternative(field) {
+    var name = field.requiredUnless && field.requiredUnless.orPresent;
+    if (!name) return false;
+    var control = form.elements[name];
+    var value = control && control.value.trim();
+    if (!value) return FIELDS.some(function(item) { return item.name === name && item.hasSavedValue; });
+    var names = field.requiredUnless.headerNames;
+    if (!names) return true;
+    var pairs = value.split(",").map(function(pair) { return /^([^=\\s][^=]*?)\\s*=\\s*(.+)$/.exec(pair.trim()); });
+    return pairs.every(Boolean) && pairs.some(function(pair) {
+      return names.some(function(name) { return name.toLowerCase() === pair[1].toLowerCase(); }) && pair[2].trim() !== "";
+    });
+  }
+` : ''}  function requiredNow(field) {
+    var condition = field.requiredUnless;
+    var other = condition && form.elements[condition.field];
+    var when = field.requiredWhen;
+    var controlling = when && form.elements[when.field];
+    var required = when ? Boolean(controlling && when.in.indexOf(controlling.value) !== -1) : field.required;
+${hasAlternatives ? `    if (hasAlternative(field)) return false;
+` : ''}    return required && (!condition || !other || other.value !== condition.equals);
+  }
+  function refreshRequirements() {
+    for (var i = 0; i < FIELDS.length; i++) {
+      var field = FIELDS[i];
+      if (!field.requiredUnless && !field.requiredWhen && !field.hasSavedValue) continue;
+      var control = form.elements[field.name];
+      var required = requiredNow(field);
+      control.required = required && !field.hasSavedValue;
+      control.setAttribute("aria-required", String(required && !field.hasSavedValue));
+      var label = control.labels && control.labels[0];
+      var mark = label && label.querySelector(".mcpui-required");
+      if (label && !mark) {
+        mark = document.createElement("span");
+        mark.className = "mcpui-required";
+        mark.setAttribute("aria-hidden", "true");
+        mark.textContent = "*";
+        label.appendChild(mark);
+      }
+      if (mark) mark.hidden = !required;
+    }
+  }
+  form.addEventListener("change", refreshRequirements);
+  form.addEventListener("input", refreshRequirements);
+  refreshRequirements();
+
+  // Collect field values and validation feedback before the submit path performs any effects.
+  function readFields() {
+    var params = {};
+    var missing = [];
+    var missingMessage;
+    for (var i = 0; i < FIELDS.length; i++) {
+      var value = readField(FIELDS[i]);
+      if (requiredNow(FIELDS[i]) && !FIELDS[i].hasSavedValue && isBlank(FIELDS[i], value)) {
+        missing.push(FIELDS[i].label);
+        if ((FIELDS[i].requiredUnless || FIELDS[i].requiredWhen) && FIELDS[i].hint) missingMessage = FIELDS[i].label + " is required. " + FIELDS[i].hint;
+      }
+      params[FIELDS[i].name] = value;
+    }
+    return { params: params, missing: missing, missingMessage: missingMessage };
+  }
+
   // NOT wired to the form's "submit" event. Per the WHATWG form submission algorithm, the
   // sandboxed-forms browsing-context check runs BEFORE that event is ever dispatched, so in the
   // real target sandbox (MCP_UI_VIEW_SANDBOX grants "allow-scripts" and nothing else -- no
@@ -201,14 +274,10 @@ ${SURFACE_SCRIPT_PRELUDE}
     var params = {};
     var key;
     for (key in BASE_PARAMS) if (Object.prototype.hasOwnProperty.call(BASE_PARAMS, key)) params[key] = BASE_PARAMS[key];
-    var missing = [];
-    for (var i = 0; i < FIELDS.length; i++) {
-      var value = readField(FIELDS[i]);
-      if (FIELDS[i].required && isBlank(FIELDS[i], value)) missing.push(FIELDS[i].label);
-      params[FIELDS[i].name] = value;
-    }
-    if (missing.length > 0) {
-      setStatus(TEXT.missingPrefix + missing.join(", "), "invalid");
+    var fields = readFields();
+    Object.assign(params, fields.params);
+    if (fields.missing.length > 0) {
+      setStatus(fields.missingMessage || TEXT.missingPrefix + fields.missing.join(", "), "invalid");
       return;
     }
     for (key in actionParams) if (Object.prototype.hasOwnProperty.call(actionParams, key)) params[key] = actionParams[key];
@@ -216,6 +285,7 @@ ${SURFACE_SCRIPT_PRELUDE}
     setBusy(true);
     setStatus(TEXT.working, "pending");
     api.callTool(TOOL, params).then(function () {
+      concealSecrets();
       setStatus(TEXT.done, "done");
       api.requestTeardown();
     }, function (error) {

package/dist/features/mcp-ui/surfaces/text-input.d.ts

@@ -1,4 +1,4 @@
-/** Labels the host can translate for a multiline secret's reveal toggle. */
+/** Verbs the host can translate for a secret's reveal toggle; the field label is appended. */
 export interface SecretInputText {
     readonly showSecret: string;
     readonly hideSecret: string;
@@ -18,8 +18,8 @@ export interface TextInputProps extends Partial<SecretInputText> {
     readonly disabled?: boolean;
     /** `'number'` also constrains the on-screen keyboard on touch devices, which `'text'` would not. */
     readonly inputType?: 'text' | 'number';
-    /** Renders as `<input type="password">`, or a masked textarea with a show/hide toggle when
-     *  multiline. No `<textarea type="password">` exists, so multiline uses CSS text security.
+    /** Renders as `<input type="password">`, or a masked textarea when multiline — either way with
+     *  an eye show/hide toggle. No `<textarea type="password">` exists, so multiline uses CSS text security.
      *  Ignored for presentation when `inputType` is `'number'` (no such thing as a masked number) —
      *  same precedence `multiline`'s own doc comment already gives `inputType: 'number'`.
      *  A supplied value is always rejected: masking cannot protect a secret serialized into HTML. */

package/dist/features/mcp-ui/surfaces/text-input.js

@@ -29,35 +29,50 @@ function resolveInputType(props) {
         return 'number';
     return props.secret === true ? 'password' : 'text';
 }
-/** The reveal toggle a multiline secret carries. @complexity O(n) in the label lengths. */
+/** Eye / eye-off glyphs. Both ship; CSS shows the one matching `aria-pressed`, so the inline script
+ *  never builds markup. `currentColor` keeps them on the surface's theme tokens in light and dark. */
+const EYE_ICON = '<svg class="mcpui-secret-icon-show" aria-hidden="true" focusable="false" viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7S2 12 2 12z"/><circle cx="12" cy="12" r="3"/></svg>' +
+    '<svg class="mcpui-secret-icon-hide" aria-hidden="true" focusable="false" viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M9.9 4.24A9.1 9.1 0 0 1 12 4c6.5 0 10 7 10 7a17.8 17.8 0 0 1-2.16 3.19M6.6 6.6C3.9 8.4 2 12 2 12s3.5 7 10 7a9.7 9.7 0 0 0 5.4-1.6M14.12 14.12a3 3 0 1 1-4.24-4.24"/><path d="M2 2l20 20"/></svg>';
+/**
+ * The eye toggle every secret control carries, inside the field's right edge. Its accessible name
+ * is the host's verb plus the field label ("Show Token"); the full show/hide names ride on data
+ * attributes so the form script swaps them without knowing the label.
+ * @complexity O(n) in the label lengths.
+ */
 function renderSecretToggle(props, id) {
-    const showSecret = props.showSecret ?? DEFAULT_SECRET_INPUT_TEXT.showSecret;
-    const hideSecret = props.hideSecret ?? DEFAULT_SECRET_INPUT_TEXT.hideSecret;
-    return `<button type="button" class="mcpui-button" data-mcpui-secret-toggle="${escapeHtml(id)}" data-mcpui-show-secret="${escapeHtml(showSecret)}" data-mcpui-hide-secret="${escapeHtml(hideSecret)}" aria-controls="${escapeHtml(id)}" aria-pressed="false"${booleanAttribute('disabled', props.disabled)}>${escapeHtml(showSecret)}</button>`;
+    const show = `${props.showSecret ?? DEFAULT_SECRET_INPUT_TEXT.showSecret} ${props.label}`;
+    const hide = `${props.hideSecret ?? DEFAULT_SECRET_INPUT_TEXT.hideSecret} ${props.label}`;
+    return `<button type="button" class="mcpui-secret-toggle" data-mcpui-secret-toggle="${escapeHtml(id)}" data-mcpui-show-secret="${escapeHtml(show)}" data-mcpui-hide-secret="${escapeHtml(hide)}" aria-label="${escapeHtml(show)}" aria-controls="${escapeHtml(id)}" aria-pressed="false"${booleanAttribute('disabled', props.disabled)}>${EYE_ICON}</button>`;
+}
+/** Wraps a secret control so its toggle sits inside the field's right edge. @complexity O(n) in the rendered length. */
+function withSecretToggle(control, props, id) {
+    return `<div class="mcpui-secret">${control}${renderSecretToggle(props, id)}</div>`;
 }
 /** The `<textarea>` control, masked with a reveal toggle when secret. @complexity O(n) in the rendered length. */
 function renderTextarea(props, required) {
     const secret = props.secret === true;
-    return `<textarea class="mcpui-textarea"${required.common}${optionalAttribute('rows', props.rows)}` +
+    const control = `<textarea class="mcpui-textarea"${required.common}${optionalAttribute('rows', props.rows)}` +
         // Password inputs strip line breaks. CSS masking keeps the textarea's actual value intact,
         // and disables browser text assistance that could retain or alter a pasted credential.
         (secret ? ' data-mcpui-secret style="-webkit-text-security: disc;" autocomplete="off" spellcheck="false"' : '') +
-        `>${props.value === undefined ? '' : escapeHtml(String(props.value))}</textarea>` +
-        (secret ? renderSecretToggle(props, required.id) : '');
+        `>${props.value === undefined ? '' : escapeHtml(String(props.value))}</textarea>`;
+    return secret ? withSecretToggle(control, props, required.id) : control;
 }
-/** The single-line `<input>` control. @complexity O(n) in the rendered length. */
+/** The single-line `<input>` control, with the eye toggle when masked. @complexity O(n) in the rendered length. */
 function renderInput(props, required) {
     const { type, common } = required;
-    return `<input class="mcpui-input" type="${type}"${common}` +
+    const control = `<input class="mcpui-input" type="${type}"${common}` +
         optionalAttribute('value', props.value) +
         // A stored secret (e.g. a cloud provider's access key or a database password) must never be
         // autofilled with a saved website login. `new-password`, not `off`: Chrome ignores `off` on
         // password inputs by design and fills the saved login anyway.
-        (type === 'password' ? optionalAttribute('autocomplete', 'new-password') : '') +
+        // spellcheck off: once revealed as `type="text"`, enhanced spellcheck would ship the secret out.
+        (type === 'password' ? optionalAttribute('autocomplete', 'new-password') + optionalAttribute('spellcheck', 'false') : '') +
         (type === 'number'
             ? optionalAttribute('min', props.min) + optionalAttribute('max', props.max) + optionalAttribute('step', props.step)
             : '') +
         '>';
+    return type === 'password' ? withSecretToggle(control, props, required.id) : control;
 }
 /**
  * Renders one free-text field: its label, hint, and control, wrapped in `.mcpui-field`.
@@ -81,7 +96,7 @@ export function renderTextInput(props) {
     const type = resolveInputType(props);
     const control = props.multiline === true && type !== 'number'
         ? renderTextarea(props, { id, common })
-        : renderInput(props, { type, common });
+        : renderInput(props, { id, type, common });
     return `<div class="mcpui-field">\n${renderFieldLabel(props)}\n${control}\n</div>`;
 }
 //# sourceMappingURL=text-input.js.map

package/dist/features/media-providers/catalog.d.ts

@@ -0,0 +1,3 @@
+/** Example endpoint for the provider configuration UI; no provider is selected by default. */
+export declare const MEDIA_PROVIDER_BASE_URL_PLACEHOLDER = "https://api.example.com";
+//# sourceMappingURL=catalog.d.ts.map

package/dist/features/media-providers/catalog.js

@@ -0,0 +1,3 @@
+/** Example endpoint for the provider configuration UI; no provider is selected by default. */
+export const MEDIA_PROVIDER_BASE_URL_PLACEHOLDER = 'https://api.example.com';
+//# sourceMappingURL=catalog.js.map

package/dist/features/media-providers/react/components/MediaProviderCard.js

@@ -1,7 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Fragment } from 'react';
+import { Fragment, useId } from 'react';
 import { agentHandleProps } from '@jini-ai/agentic';
-import { Icon } from '../../../../react/components/Icon.js';
+import { SecretInput } from '../../../../react/components/SecretInput.js';
 import { isEntryPresent, isMarkerOnlyEntry, isProviderBaseUrlInvalid, maskedKeyLabel, resolveProviderBaseUrl, } from '../../rules.js';
 /** One provider's credential card: API key, base URL, optional model, clear, and the base-URL hint. */
 export function MediaProviderCard(props) {
@@ -23,12 +23,13 @@ function CardHead({ option, labels, t, maskedLabel, pending, }) {
             _jsx("span", { className: "jini-field-status-badge jini-field-status-badge-success", children: t(labels.savedWithMaskTemplate, { mask: maskedLabel }) })) : null, !saved && pending ? _jsx("span", { className: "jini-field-status-badge", children: labels.unsavedLabel }) : null] }));
 }
 function ApiKeyField({ option, entry, labels, providerHandle, onUpdate, maskedLabel, keyVisible, onToggleKeyVisible, }) {
-    return (_jsxs("label", { className: "jini-media-provider-field jini-media-provider-field--secret", children: [_jsx("span", { className: "jini-field-label jini-sr-only", children: labels.apiKeyLabel }), _jsx("input", { className: "jini-input", type: keyVisible ? 'text' : 'password', 
+    const inputId = useId();
+    return (_jsxs("div", { className: "jini-media-provider-field jini-media-provider-field--secret", children: [_jsx("label", { htmlFor: inputId, className: "jini-field-label jini-sr-only", children: labels.apiKeyLabel }), _jsx(SecretInput, { id: inputId, label: `${option.label} ${labels.apiKeyLabel}`, revealed: keyVisible, onRevealedChange: onToggleKeyVisible, toggleLabels: { show: `${labels.showKeyLabel} ${option.label} ${labels.apiKeyLabel}`, hide: `${labels.hideKeyLabel} ${option.label} ${labels.apiKeyLabel}` }, toggleAttrs: agentHandleProps({}, { base: providerHandle, ...({ action: 'reveal-key', role: 'button', label: `${option.label} ${labels.showKeyLabel}` }) }), className: "jini-input", 
                 /* `new-password`, NOT `"off"` — Chrome deliberately ignores `off` on
                    credential-shaped fields, which is how a saved password gets autofilled into
                    an API-key box. Same defect, same fix, same reasoning as
                    `ByokProviderForm`'s own API-key input; see its comment. */
-                autoComplete: "new-password", spellCheck: false, placeholder: maskedLabel ?? labels.apiKeyPlaceholder, "aria-label": `${option.label} ${labels.apiKeyLabel}`, value: entry.apiKey ?? '', onChange: (event) => onUpdate({ apiKey: event.target.value }), ...agentHandleProps({}, { base: providerHandle, ...({ action: 'api-key', role: 'field', label: `${option.label} ${labels.apiKeyLabel}` }) }) }), _jsx("button", { type: "button", className: "jini-input-affix-btn", "aria-pressed": keyVisible, "aria-label": `${option.label} ${keyVisible ? labels.hideKeyLabel : labels.showKeyLabel}`, onClick: onToggleKeyVisible, ...agentHandleProps({}, { base: providerHandle, ...({ action: 'reveal-key', role: 'button', label: `${option.label} ${labels.showKeyLabel}` }) }), children: _jsx(Icon, { name: keyVisible ? 'eye-off' : 'eye', size: 14 }) })] }));
+                autoComplete: "new-password", spellCheck: false, placeholder: maskedLabel ?? labels.apiKeyPlaceholder, "aria-label": `${option.label} ${labels.apiKeyLabel}`, value: entry.apiKey ?? '', onChange: (event) => onUpdate({ apiKey: event.target.value }), ...agentHandleProps({}, { base: providerHandle, ...({ action: 'api-key', role: 'field', label: `${option.label} ${labels.apiKeyLabel}` }) }) })] }));
 }
 function BaseUrlField({ option, entry, labels, providerHandle, onUpdate }) {
     return (_jsxs("label", { className: "jini-media-provider-field", children: [_jsx("span", { className: "jini-field-label jini-sr-only", children: labels.baseUrlLabel }), _jsx("input", { className: "jini-input", type: "url", inputMode: "url", spellCheck: false, placeholder: option.defaultBaseUrl || labels.baseUrlPlaceholder, "aria-label": `${option.label} ${labels.baseUrlLabel}`, value: entry.baseUrl ?? '', "aria-invalid": isProviderBaseUrlInvalid(entry) || undefined, onChange: (event) => onUpdate({ baseUrl: event.target.value }), ...agentHandleProps({}, { base: providerHandle, ...({ action: 'base-url', role: 'field', label: `${option.label} ${labels.baseUrlLabel}` }) }) })] }));

package/dist/features/media-providers/react/components/media-providers-tab-labels.js

@@ -1,3 +1,4 @@
+import { MEDIA_PROVIDER_BASE_URL_PLACEHOLDER } from '../../catalog.js';
 /** English defaults, keyed exactly like `MediaProvidersTabLabels`; each is passed through `t`
  *  only when the host did not supply that label (the dictionaries are keyed by this English text). */
 const DEFAULT_LABELS = {
@@ -12,7 +13,7 @@ const DEFAULT_LABELS = {
     showKeyLabel: 'Show',
     hideKeyLabel: 'Hide',
     baseUrlLabel: 'Base URL',
-    baseUrlPlaceholder: 'https://api.example.com',
+    baseUrlPlaceholder: MEDIA_PROVIDER_BASE_URL_PLACEHOLDER,
     baseUrlDefaultHintTemplate: 'Uses {url} by default.',
     baseUrlInvalidLabel: 'Enter an absolute http:// or https:// URL that is not a private or internal address.',
     modelLabel: 'Model',

package/dist/features/panel-kit/fetch-query/adapter.react.d.ts

@@ -1,11 +1,16 @@
 import { type ReactNode } from 'react';
-import { type FetchQueryEnvironmentPort } from '@jini-ai/core/fetch';
+import { type FetchQueryCacheOptions } from '@jini-ai/core/fetch';
 import type { CachedLoader, CachedLoaderDefaults, CachedLoaderOptions, FetchMutationOptions, FetchQueryOptions, MutationResult, QueryKey, QueryResult } from '@jini-ai/core/fetch';
-/** Isolated cache scope; no external provider or query-library singleton is needed. */
-export declare function FetchQueryProvider({ children, environment }: {
+/** Isolated cache scope; no external provider or query-library singleton is needed.
+ * Omitted timing ports use core's real clock and native timers. Keep port identities stable:
+ * replacing a port creates a new cache and disposes the previous scope's timers/subscriptions.
+ * @param props Children and optional host environment, clock and scheduler ports.
+ * @returns The provider-scoped query binding; activates on mount and disposes on unmount.
+ * @example <FetchQueryProvider clock={clock} scheduler={scheduler}><Records /></FetchQueryProvider>
+ * @complexity O(1) setup time and space; disposal scales with cached entries. */
+export declare function FetchQueryProvider({ children, environment, ...timing }: {
     children: ReactNode;
-    environment?: FetchQueryEnvironmentPort;
-}): import("react").JSX.Element;
+} & Pick<FetchQueryCacheOptions, 'environment' | 'clock' | 'scheduler'>): import("react").JSX.Element;
 /**
  * Without prior successful data, a disabled read hides cached errors so gesture-gated
  * content cannot display a failure the user has not asked to retry. With prior data, retain

package/dist/features/panel-kit/fetch-query/adapter.react.js

@@ -4,11 +4,17 @@ import { DEFAULT_STALE_TIME, FetchQueryCache, toQueryError, withCachedLoaderFetc
 import { browserFetchQueryEnvironment } from './environment.browser.js';
 import { FetchQueryBinding } from './binding.react.js';
 const CacheContext = createContext(null);
-/** Isolated cache scope; no external provider or query-library singleton is needed. */
-export function FetchQueryProvider({ children, environment = browserFetchQueryEnvironment }) {
+/** Isolated cache scope; no external provider or query-library singleton is needed.
+ * Omitted timing ports use core's real clock and native timers. Keep port identities stable:
+ * replacing a port creates a new cache and disposes the previous scope's timers/subscriptions.
+ * @param props Children and optional host environment, clock and scheduler ports.
+ * @returns The provider-scoped query binding; activates on mount and disposes on unmount.
+ * @example <FetchQueryProvider clock={clock} scheduler={scheduler}><Records /></FetchQueryProvider>
+ * @complexity O(1) setup time and space; disposal scales with cached entries. */
+export function FetchQueryProvider({ children, environment = browserFetchQueryEnvironment, ...timing }) {
     // A module singleton would leak cache values between independent providers/tests,
     // producing cases that pass alone but fail together. Scope ownership to this provider.
-    const cache = useMemo(() => new FetchQueryCache({}, { environment }), [environment]);
+    const cache = useMemo(() => new FetchQueryCache({}, { environment, ...timing }), [environment, timing.clock, timing.scheduler]);
     useEffect(() => {
         cache.activate();
         return () => cache.dispose();

package/dist/features/panel-kit/fetch-query/binding.react.d.ts

@@ -14,4 +14,8 @@ export declare const useFetchMutation: FetchQueryAdapter['useFetchMutation'];
 export declare const useInvalidate: FetchQueryAdapter['useInvalidate'];
 /** Promise loader using the same cache as reactive reads. */
 export declare const useCachedLoader: FetchQueryAdapter['useCachedLoader'];
+/** Stable API identity shared by observers of the same provider, expressed as a primitive key. */
+export declare function useFetchQueryScope(required: {
+    owner: object;
+}, _options?: Record<string, never>): number;
 //# sourceMappingURL=binding.react.d.ts.map

package/dist/features/panel-kit/fetch-query/binding.react.js

@@ -1,24 +1,43 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-import { createContext, useContext } from 'react';
+import { createContext, useContext, useMemo, useState } from 'react';
+/** Allocate primitive namespace keys within one cache provider; weak keys do not retain APIs. */
+function createQueryScopes(_required, _options = {}) {
+    const scopes = new WeakMap();
+    let nextScope = 0;
+    return ({ owner }, _optional = {}) => {
+        let scope = scopes.get(owner);
+        if (scope === undefined) {
+            scope = ++nextScope;
+            scopes.set(owner, scope);
+        }
+        return scope;
+    };
+}
 const AdapterContext = createContext(null);
 /** Internal composition seam: hooks and imperative loaders always use the same provider.
  * Keep the adapter fixed for this provider's lifetime to preserve React hook ordering. */
 export function FetchQueryBinding({ adapter, children }) {
-    return _jsx(AdapterContext.Provider, { value: adapter, children: children });
+    const [scopeFor] = useState(() => createQueryScopes({}));
+    const binding = useMemo(() => ({ adapter, scopeFor }), [adapter, scopeFor]);
+    return _jsx(AdapterContext.Provider, { value: binding, children: children });
 }
 /** Resolve the nearest provider; fail before attempting an unscoped read or write. */
-function useAdapter() {
-    const adapter = useContext(AdapterContext);
-    if (!adapter)
+function useBinding() {
+    const binding = useContext(AdapterContext);
+    if (!binding)
         throw new Error('Fetch-query hooks require FetchQueryProvider');
-    return adapter;
+    return binding;
 }
 /** Library-free read facade; the provider selects its implementation. */
-export const useFetchQuery = (required, optional = {}) => useAdapter().useFetchQuery(required, optional);
+export const useFetchQuery = (required, optional = {}) => useBinding().adapter.useFetchQuery(required, optional);
 /** Library-free write facade, including safe discarded promises. */
-export const useFetchMutation = (required, optional = {}) => useAdapter().useFetchMutation(required, optional);
+export const useFetchMutation = (required, optional = {}) => useBinding().adapter.useFetchMutation(required, optional);
 /** Prefix invalidator for the nearest provider's cache. */
-export const useInvalidate = () => useAdapter().useInvalidate();
+export const useInvalidate = () => useBinding().adapter.useInvalidate();
 /** Promise loader using the same cache as reactive reads. */
-export const useCachedLoader = (required, optional = {}) => useAdapter().useCachedLoader(required, optional);
+export const useCachedLoader = (required, optional = {}) => useBinding().adapter.useCachedLoader(required, optional);
+/** Stable API identity shared by observers of the same provider, expressed as a primitive key. */
+export function useFetchQueryScope(required, _options = {}) {
+    return useBinding().scopeFor(required);
+}
 //# sourceMappingURL=binding.react.js.map

package/dist/features/panel-kit/fetch-query/index.d.ts

@@ -1,5 +1,5 @@
 export { FetchQueryProvider } from './adapter.react.js';
-export { useFetchQuery, useFetchMutation, useCachedLoader, useInvalidate } from './binding.react.js';
+export { useFetchQuery, useFetchMutation, useCachedLoader, useInvalidate, useFetchQueryScope } from './binding.react.js';
 /** @deprecated Import the framework-neutral environment port from @jini-ai/core/fetch. */
 export type { FetchQueryEnvironmentPort } from '@jini-ai/core/fetch';
 /** @deprecated Import framework-neutral query contracts from @jini-ai/core/fetch. */

package/dist/features/panel-kit/fetch-query/index.js

@@ -1,3 +1,3 @@
 export { FetchQueryProvider } from './adapter.react.js';
-export { useFetchQuery, useFetchMutation, useCachedLoader, useInvalidate } from './binding.react.js';
+export { useFetchQuery, useFetchMutation, useCachedLoader, useInvalidate, useFetchQueryScope } from './binding.react.js';
 //# sourceMappingURL=index.js.map

package/dist/features/panel-kit/fetch-query/tanstack.d.ts

@@ -1,6 +1,6 @@
 /** Optional adapter entry. Importing the default entry never loads TanStack. */
 export { FetchQueryProvider } from './adapter.tanstack.js';
-export { useFetchQuery, useFetchMutation, useCachedLoader, useInvalidate } from './binding.react.js';
+export { useFetchQuery, useFetchMutation, useCachedLoader, useInvalidate, useFetchQueryScope } from './binding.react.js';
 /** @deprecated Import the framework-neutral environment port from @jini-ai/core/fetch. */
 export type { FetchQueryEnvironmentPort } from '@jini-ai/core/fetch';
 /** @deprecated Import framework-neutral query contracts from @jini-ai/core/fetch. */

package/dist/features/panel-kit/fetch-query/tanstack.js

@@ -1,4 +1,4 @@
 /** Optional adapter entry. Importing the default entry never loads TanStack. */
 export { FetchQueryProvider } from './adapter.tanstack.js';
-export { useFetchQuery, useFetchMutation, useCachedLoader, useInvalidate } from './binding.react.js';
+export { useFetchQuery, useFetchMutation, useCachedLoader, useInvalidate, useFetchQueryScope } from './binding.react.js';
 //# sourceMappingURL=tanstack.js.map

package/dist/features/privacy/react/components/PrivacyTab.d.ts

@@ -3,8 +3,6 @@ export interface PrivacyTabLabels {
     consentKicker?: string;
     consentLead?: string;
     consentFooter?: string;
-    declineLabel?: string;
-    shareLabel?: string;
     metricsLabel?: string;
     metricsHint?: string;
     contentLabel?: string;
@@ -30,7 +28,7 @@ export interface PrivacyTabProps {
     agentHandle?: string;
 }
 /**
- * Telemetry consent card (share/decline + two per-category toggles) over a
+ * Telemetry consent card (two per-category toggles) over a
  * generic `{ metrics, content }` shape, plus an installation-id
  * generate/rotate ("Delete my data") flow. Origin: `PrivacySection.tsx`,
  * mounted by `SettingsDialog.tsx`'s `privacy` tab — flagged "likely

package/dist/features/privacy/react/components/PrivacyTab.js

@@ -1,8 +1,8 @@
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { agentHandleProps, agentSubHandle } from '@jini-ai/agentic';
 import { useT } from '../../../i18n/index.js';
 import { Icon } from '../../../../react/components/Icon.js';
-import { hasMadeConsentDecision, isSharingEnabled, nextStateForDeclineAll, nextStateForDeleteMyData, nextStateForShareAll, nextStateForTelemetryPatch, } from '../../rules.js';
+import { hasMadeConsentDecision, nextStateForDeleteMyData, nextStateForTelemetryPatch, } from '../../rules.js';
 function ToggleRow({ label, hint, checked, onChange, agentHandle }) {
     return (_jsxs("button", { type: "button", className: `jini-toggle-row${checked ? ' on' : ''}`, onClick: () => onChange(!checked), "aria-pressed": checked, ...agentHandleProps({}, { base: agentHandle, ...({ role: 'checkbox', label }) }), children: [_jsxs("div", { className: "jini-toggle-row-text", children: [_jsx("span", { className: "jini-toggle-row-label", children: label }), _jsx("span", { className: "jini-toggle-row-hint", children: hint })] }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": true })] }));
 }
@@ -11,8 +11,6 @@ function resolveConsentLabels({ labels }, { t }) {
         consentKicker: labels.consentKicker ?? t('Help improve this product'),
         consentLead: labels.consentLead ?? t('Choose what you share. You can change this anytime.'),
         consentFooter: labels.consentFooter ?? t('Nothing is shared unless you opt in.'),
-        declineLabel: labels.declineLabel ?? t("Don't share"),
-        shareLabel: labels.shareLabel ?? t('Share usage'),
         metricsLabel: labels.metricsLabel ?? t('Anonymous metrics'),
         metricsHint: labels.metricsHint ?? t('Feature usage and performance data, with no personal content.'),
         contentLabel: labels.contentLabel ?? t('Conversation and tool content'),
@@ -28,7 +26,7 @@ function resolveInstallationLabels({ labels }, { t }) {
     };
 }
 /**
- * Telemetry consent card (share/decline + two per-category toggles) over a
+ * Telemetry consent card (two per-category toggles) over a
  * generic `{ metrics, content }` shape, plus an installation-id
  * generate/rotate ("Delete my data") flow. Origin: `PrivacySection.tsx`,
  * mounted by `SettingsDialog.tsx`'s `privacy` tab — flagged "likely
@@ -39,10 +37,9 @@ function resolveInstallationLabels({ labels }, { t }) {
 export function PrivacyTab({ state, onChange, labels, now = Date.now, agentHandle }) {
     const t = useT();
     const decided = hasMadeConsentDecision(state);
-    const sharing = decided ? isSharingEnabled(state.telemetry) : undefined;
     const labelOverrides = labels ?? {};
-    const { consentKicker, consentLead, consentFooter, declineLabel, shareLabel, metricsLabel, metricsHint, contentLabel, contentHint, } = resolveConsentLabels({ labels: labelOverrides }, { t });
+    const { consentKicker, consentLead, consentFooter, metricsLabel, metricsHint, contentLabel, contentHint, } = resolveConsentLabels({ labels: labelOverrides }, { t });
     const { installationIdLabel, installationIdHint, optedOutLabel, deleteMyDataLabel, } = resolveInstallationLabels({ labels: labelOverrides }, { t });
-    return (_jsxs("section", { className: "jini-settings-section jini-settings-privacy", children: [_jsxs("div", { className: "jini-settings-subsection", children: [_jsx("div", { className: "jini-section-head", children: _jsxs("div", { children: [_jsx("h4", { children: consentKicker }), _jsx("p", { className: "jini-hint", children: consentLead })] }) }), _jsxs("dl", { className: "jini-settings-privacy-disclosure", children: [_jsxs("div", { children: [_jsx("dt", { children: metricsLabel }), _jsx("dd", { children: metricsHint })] }), _jsxs("div", { children: [_jsx("dt", { children: contentLabel }), _jsx("dd", { children: contentHint })] })] }), _jsx("p", { className: "jini-hint", children: consentFooter }), _jsxs("div", { className: "jini-privacy-consent-actions", role: "group", "aria-label": consentKicker, children: [_jsx("button", { type: "button", className: `jini-privacy-consent-action${sharing === false ? ' is-active' : ''}`, "aria-pressed": sharing === false, onClick: () => onChange(nextStateForDeclineAll(state, now())), ...agentHandleProps({}, { base: agentHandle, ...({ action: 'decline', role: 'button', label: declineLabel }) }), children: declineLabel }), _jsx("button", { type: "button", className: `jini-privacy-consent-action jini-privacy-consent-action--primary${sharing === true ? ' is-active' : ''}`, "aria-pressed": sharing === true, onClick: () => onChange(nextStateForShareAll(state, now())), ...agentHandleProps({}, { base: agentHandle, ...({ action: 'share', role: 'button', label: shareLabel }) }), children: shareLabel })] })] }), decided ? (_jsxs(_Fragment, { children: [_jsxs("div", { className: "jini-settings-privacy-toggles", children: [_jsx(ToggleRow, { label: metricsLabel, hint: metricsHint, checked: state.telemetry.metrics === true, onChange: (v) => onChange(nextStateForTelemetryPatch(state, { metrics: v }, now())), ...(agentHandle ? { agentHandle: agentSubHandle({ base: agentHandle, action: 'metrics-toggle' }) } : {}) }), _jsx(ToggleRow, { label: contentLabel, hint: contentHint, checked: state.telemetry.content === true, onChange: (v) => onChange(nextStateForTelemetryPatch(state, { content: v }, now())), ...(agentHandle ? { agentHandle: agentSubHandle({ base: agentHandle, action: 'content-toggle' }) } : {}) })] }), _jsxs("div", { className: "jini-settings-subsection", children: [_jsx("div", { className: "jini-section-head", children: _jsxs("div", { children: [_jsx("h4", { children: installationIdLabel }), _jsx("p", { className: "jini-hint", children: installationIdHint })] }) }), _jsx("div", { className: "jini-settings-field", children: _jsx("input", { type: "text", readOnly: true, value: state.installationId ?? optedOutLabel, "aria-label": installationIdLabel, ...agentHandleProps({}, { base: agentHandle, ...({ action: 'installation-id', role: 'field', label: installationIdLabel }) }) }) }), _jsxs("button", { type: "button", className: "jini-button jini-button-ghost", onClick: () => onChange(nextStateForDeleteMyData(state, now())), ...agentHandleProps({}, { base: agentHandle, ...({ action: 'delete-my-data', role: 'button', label: deleteMyDataLabel }) }), children: [_jsx(Icon, { name: "trash", size: 13 }), _jsx("span", { children: deleteMyDataLabel })] })] })] })) : null] }));
+    return (_jsxs("section", { className: "jini-settings-section jini-settings-privacy", children: [_jsxs("div", { className: "jini-settings-subsection", children: [_jsx("div", { className: "jini-section-head", children: _jsxs("div", { children: [_jsx("h4", { children: consentKicker }), _jsx("p", { className: "jini-hint", children: consentLead })] }) }), _jsxs("div", { className: "jini-settings-privacy-toggles", children: [_jsx(ToggleRow, { label: metricsLabel, hint: metricsHint, checked: state.telemetry.metrics === true, onChange: (v) => onChange(nextStateForTelemetryPatch(state, { metrics: v }, now())), ...(agentHandle ? { agentHandle: agentSubHandle({ base: agentHandle, action: 'metrics-toggle' }) } : {}) }), _jsx(ToggleRow, { label: contentLabel, hint: contentHint, checked: state.telemetry.content === true, onChange: (v) => onChange(nextStateForTelemetryPatch(state, { content: v }, now())), ...(agentHandle ? { agentHandle: agentSubHandle({ base: agentHandle, action: 'content-toggle' }) } : {}) })] }), _jsx("p", { className: "jini-hint", children: consentFooter })] }), decided ? (_jsxs("div", { className: "jini-settings-subsection", children: [_jsx("div", { className: "jini-section-head", children: _jsxs("div", { children: [_jsx("h4", { children: installationIdLabel }), _jsx("p", { className: "jini-hint", children: installationIdHint })] }) }), _jsx("div", { className: "jini-settings-field", children: _jsx("input", { type: "text", readOnly: true, value: state.installationId ?? optedOutLabel, "aria-label": installationIdLabel, ...agentHandleProps({}, { base: agentHandle, ...({ action: 'installation-id', role: 'field', label: installationIdLabel }) }) }) }), _jsxs("button", { type: "button", className: "jini-button jini-button-ghost", onClick: () => onChange(nextStateForDeleteMyData(state, now())), ...agentHandleProps({}, { base: agentHandle, ...({ action: 'delete-my-data', role: 'button', label: deleteMyDataLabel }) }), children: [_jsx(Icon, { name: "trash", size: 13 }), _jsx("span", { children: deleteMyDataLabel })] })] })) : null] }));
 }
 //# sourceMappingURL=PrivacyTab.js.map

package/dist/features/settings/dialog/styles/settings-dialog.css

@@ -1274,16 +1274,11 @@ select.jini-input {
 /* ============================================================
    Privacy tab
    ============================================================
-   `PrivacyTab.tsx`'s disclosure list was a bare `<dl>`/`<dt>`/`<dd>` (browser
-   default `<dd>` indent leaking through), its consent buttons
-   (`jini-privacy-consent-action*`) were unstyled text, and its toggle
-   switches (`jini-toggle-row*`) had NO rules anywhere in this file — not
-   even a partial match; `grep -i "toggle|switch"` against the file returned
-   nothing before this. Reference: `od-settings-privacy.png` — the two
-   disclosure items read as plain title+description pairs, the two consent
-   buttons sit side by side with the primary one filled, and the granular
-   toggles are real switches once a consent decision exists
-   (`hasMadeConsentDecision`). */
+   `PrivacyTab.tsx`'s toggle switches (`jini-toggle-row*`) had NO rules
+   anywhere in this file — not even a partial match; `grep -i
+   "toggle|switch"` against the file returned nothing before this. The two
+   choices show once, as these switches (the disclosure list and
+   share/decline buttons that repeated them were removed 2026-10-26). */
 
 /* `PrivacyTab.tsx` puts its two `jini-section-head` headings ("Help improve
    this product", "Installation ID") in a bare `<h4>` with no className of
@@ -1301,66 +1296,6 @@ select.jini-input {
   color: var(--jini-text-strong);
 }
 
-.jini-settings-privacy-disclosure {
-  margin: 0;
-  display: flex;
-  flex-direction: column;
-  gap: 10px;
-}
-
-.jini-settings-privacy-disclosure > div {
-  display: flex;
-  flex-direction: column;
-  gap: 2px;
-}
-
-.jini-settings-privacy-disclosure dt {
-  margin: 0;
-  font-size: 13px;
-  font-weight: 600;
-  color: var(--jini-text-strong);
-}
-
-.jini-settings-privacy-disclosure dd {
-  margin: 0;
-  font-size: 12px;
-  color: var(--jini-text-muted);
-}
-
-.jini-privacy-consent-actions {
-  display: flex;
-  gap: 10px;
-}
-
-.jini-privacy-consent-action {
-  flex: 1 1 0;
-  padding: 9px 16px;
-  font: inherit;
-  font-size: 13px;
-  font-weight: 600;
-  color: var(--jini-text);
-  background: var(--jini-bg-panel);
-  border: 1px solid var(--jini-border-strong);
-  border-radius: var(--jini-radius-sm);
-  cursor: pointer;
-}
-
-.jini-privacy-consent-action:hover {
-  border-color: var(--jini-text-muted);
-}
-
-.jini-privacy-consent-action--primary {
-  color: var(--jini-accent-ink);
-  background: var(--jini-accent);
-  border-color: var(--jini-accent);
-}
-
-.jini-privacy-consent-action--primary:hover,
-.jini-privacy-consent-action--primary.is-active {
-  background: var(--jini-accent-hover);
-  border-color: var(--jini-accent-hover);
-}
-
 .jini-settings-privacy-toggles {
   display: flex;
   flex-direction: column;