@marinoscar/platform-web 0.0.0-stage → 0.1.0-next.11

package/dist/identity/ui/device/DeviceInfoCard.js

@@ -0,0 +1,112 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The review step of `/activate`: what the device says it is, WHAT IT WILL GET,
+ * and the Approve / Deny decision.
+ *
+ * Two things about this component are security-relevant, both from #141:
+ *
+ *   1. Everything under `deviceInfo.clientInfo` is attacker-chosen —
+ *      `POST /auth/device/code` is public and its body is stored verbatim — so
+ *      nothing here reads those fields directly. Every value goes through
+ *      `sanitizeDeviceText()` first, and the credential kind through
+ *      `readCredentialKind()`. See `credential.ts` for the threat model.
+ *   2. The card is now explicit about the KIND of credential being granted.
+ *      Before #141 there was only one kind; now the requesting device picks,
+ *      and the person approving is the one who carries the consequence.
+ *
+ * LAYOUT NOTE: `/activate` is routed OUTSIDE `Layout` (see `App.tsx` — it is a
+ * deliberate full-screen page with no AppBar, rail or bottom nav), so the five
+ * coupled `sm` breakpoint gates documented in `common/Layout.tsx` do not apply
+ * here and must not be imitated. This page's only responsive behaviour is the
+ * card padding in `ActivateDevicePage`; the content below is a single column
+ * that reflows on its own, which is why nothing here calls `useMediaQuery`.
+ */
+import { useState, useEffect } from 'react';
+import { Box, Card, CardContent, Typography, Stack, Chip, Divider, Alert, Button, CircularProgress, } from '@mui/material';
+import { Devices as DevicesIcon, Computer as ComputerIcon, AccessTime as AccessTimeIcon, LocationOn as LocationIcon, VpnKey as VpnKeyIcon, } from '@mui/icons-material';
+import { CredentialGrantNotice } from './CredentialGrantNotice.js';
+import { DEVICE_NAME_MAX_DISPLAY, IP_ADDRESS_MAX_DISPLAY, USER_AGENT_MAX_DISPLAY, readCredentialKind, sanitizeDeviceText, } from '../../headless/index.js';
+export function DeviceInfoCard({ deviceInfo, onApprove, onDeny, error, }) {
+    const [isApproving, setIsApproving] = useState(false);
+    const [isDenying, setIsDenying] = useState(false);
+    const [timeRemaining, setTimeRemaining] = useState('');
+    // The credential this approval actually mints. `clientInfo` may be absent
+    // entirely (the API declares it optional) and `tokenType` may be absent (rows
+    // predating #141) or an unexpected value (the column is not re-validated on
+    // read) — `readCredentialKind` resolves all of those to 'session', matching
+    // what the API would in fact issue for such a row.
+    const credentialKind = readCredentialKind(deviceInfo.clientInfo);
+    const isPat = credentialKind === 'pat';
+    // Read once, sanitised, into locals. Sanitising at the point of use rather
+    // than once here would make it easy for a future field to be added to the
+    // JSX raw — which is exactly the mistake this component is being fixed for.
+    const deviceName = sanitizeDeviceText(deviceInfo.clientInfo?.deviceName, DEVICE_NAME_MAX_DISPLAY);
+    const userAgent = sanitizeDeviceText(deviceInfo.clientInfo?.userAgent, USER_AGENT_MAX_DISPLAY);
+    const ipAddress = sanitizeDeviceText(deviceInfo.clientInfo?.ipAddress, IP_ADDRESS_MAX_DISPLAY);
+    // Calculate time remaining until the CODE expires (not the credential's
+    // lifetime — see the label below, which has to say so out loud now that a
+    // 90-day token can be the thing on offer).
+    useEffect(() => {
+        const updateTimeRemaining = () => {
+            const now = new Date().getTime();
+            const expires = new Date(deviceInfo.expiresAt).getTime();
+            const diff = expires - now;
+            if (diff <= 0) {
+                setTimeRemaining('Expired');
+                return;
+            }
+            const minutes = Math.floor(diff / 60000);
+            const seconds = Math.floor((diff % 60000) / 1000);
+            if (minutes > 0) {
+                setTimeRemaining(`${minutes}m ${seconds}s`);
+            }
+            else {
+                setTimeRemaining(`${seconds}s`);
+            }
+        };
+        updateTimeRemaining();
+        const interval = setInterval(updateTimeRemaining, 1000);
+        return () => clearInterval(interval);
+    }, [deviceInfo.expiresAt]);
+    const handleApprove = async () => {
+        setIsApproving(true);
+        try {
+            await onApprove();
+        }
+        finally {
+            setIsApproving(false);
+        }
+    };
+    const handleDeny = async () => {
+        setIsDenying(true);
+        try {
+            await onDeny();
+        }
+        finally {
+            setIsDenying(false);
+        }
+    };
+    const isExpired = timeRemaining === 'Expired';
+    return (_jsxs(Box, { children: [_jsx(CredentialGrantNotice, { kind: credentialKind }), _jsx(Card, { variant: "outlined", sx: {
+                    mb: 3,
+                    // The PAT case gets a warning-coloured border so the banner and the
+                    // details it describes read as ONE block. Without it the alert floats
+                    // above an identical-looking card and a skimming eye can take the
+                    // card as the "real" content and the banner as page furniture.
+                    ...(isPat && {
+                        borderColor: 'warning.main',
+                        borderWidth: 2,
+                    }),
+                }, children: _jsx(CardContent, { children: _jsxs(Stack, { spacing: 2.5, children: [_jsxs(Box, { sx: { display: 'flex', alignItems: 'flex-start' }, children: [_jsx(VpnKeyIcon, { sx: {
+                                            mr: 1.5,
+                                            mt: 0.5,
+                                            color: isPat ? 'warning.main' : 'text.secondary',
+                                        } }), _jsxs(Box, { children: [_jsx(Typography, { variant: "caption", color: "text.secondary", children: "Grants" }), _jsx(Box, { sx: { mt: 0.5 }, children: _jsx(Chip, { label: isPat
+                                                        ? 'Long-lived access token'
+                                                        : 'Standard sign-in session', size: "small", color: isPat ? 'warning' : 'default', variant: isPat ? 'filled' : 'outlined' }) })] })] }), deviceName && (_jsxs(Box, { sx: { display: 'flex', alignItems: 'flex-start' }, children: [_jsx(DevicesIcon, { sx: { mr: 1.5, mt: 0.5, color: 'text.secondary' } }), _jsxs(Box, { sx: { minWidth: 0 }, children: [_jsx(Typography, { variant: "caption", color: "text.secondary", children: "Device Name" }), _jsx(Typography, { variant: "body1", sx: { fontWeight: 'medium', wordBreak: 'break-word' }, children: deviceName })] })] })), userAgent && (_jsxs(Box, { sx: { display: 'flex', alignItems: 'flex-start' }, children: [_jsx(ComputerIcon, { sx: { mr: 1.5, mt: 0.5, color: 'text.secondary' } }), _jsxs(Box, { sx: { minWidth: 0 }, children: [_jsx(Typography, { variant: "caption", color: "text.secondary", children: "Browser / Device" }), _jsx(Typography, { variant: "body2", sx: { wordBreak: 'break-word' }, children: userAgent })] })] })), ipAddress && (_jsxs(Box, { sx: { display: 'flex', alignItems: 'flex-start' }, children: [_jsx(LocationIcon, { sx: { mr: 1.5, mt: 0.5, color: 'text.secondary' } }), _jsxs(Box, { sx: { minWidth: 0 }, children: [_jsx(Typography, { variant: "caption", color: "text.secondary", children: "IP Address" }), _jsx(Typography, { variant: "body2", sx: { wordBreak: 'break-word' }, children: ipAddress })] })] })), _jsx(Divider, {}), _jsxs(Box, { sx: { display: 'flex', alignItems: 'center', justifyContent: 'space-between' }, children: [_jsxs(Box, { sx: { display: 'flex', alignItems: 'center' }, children: [_jsx(AccessTimeIcon, { sx: { mr: 1.5, color: 'text.secondary' } }), _jsx(Typography, { variant: "body2", color: "text.secondary", children: "Code expires in" })] }), _jsx(Chip, { label: timeRemaining, size: "small", color: isExpired ? 'error' : 'primary', variant: "outlined" })] })] }) }) }), error && (_jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error })), _jsxs(Stack, { direction: "row", spacing: 2, children: [_jsx(Button, { fullWidth: true, variant: "outlined", color: "error", size: "large", onClick: handleDeny, disabled: isApproving || isDenying || isExpired, startIcon: isDenying ? _jsx(CircularProgress, { size: 20 }) : undefined, children: isDenying ? 'Denying...' : 'Deny' }), _jsx(Button, { fullWidth: true, variant: "contained", color: "success", size: "large", onClick: handleApprove, disabled: isDenying || isApproving || isExpired, startIcon: isApproving ? _jsx(CircularProgress, { size: 20 }) : undefined, children: isApproving
+                            ? 'Approving...'
+                            : isPat
+                                ? 'Approve token'
+                                : 'Approve' })] }), isExpired && (_jsx(Alert, { severity: "error", sx: { mt: 2 }, children: "This code has expired. Please request a new one from your device." }))] }));
+}
+//# sourceMappingURL=DeviceInfoCard.js.map

package/dist/identity/ui/device/DeviceInfoCard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceInfoCard.js","sourceRoot":"","sources":["../../../../src/identity/ui/device/DeviceInfoCard.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EACL,GAAG,EACH,IAAI,EACJ,WAAW,EACX,UAAU,EACV,KAAK,EACL,IAAI,EACJ,OAAO,EACP,KAAK,EACL,MAAM,EACN,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,OAAO,IAAI,WAAW,EACtB,QAAQ,IAAI,YAAY,EACxB,UAAU,IAAI,cAAc,EAC5B,UAAU,IAAI,YAAY,EAC1B,MAAM,IAAI,UAAU,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AASjC,MAAM,UAAU,cAAc,CAAC,EAC7B,UAAU,EACV,SAAS,EACT,MAAM,EACN,KAAK,GACe;IACpB,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IAE/D,0EAA0E;IAC1E,8EAA8E;IAC9E,4EAA4E;IAC5E,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,cAAc,GAAG,kBAAkB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,cAAc,KAAK,KAAK,CAAC;IAEvC,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,UAAU,GAAG,kBAAkB,CACnC,UAAU,CAAC,UAAU,EAAE,UAAU,EACjC,uBAAuB,CACxB,CAAC;IACF,MAAM,SAAS,GAAG,kBAAkB,CAClC,UAAU,CAAC,UAAU,EAAE,SAAS,EAChC,sBAAsB,CACvB,CAAC;IACF,MAAM,SAAS,GAAG,kBAAkB,CAClC,UAAU,CAAC,UAAU,EAAE,SAAS,EAChC,sBAAsB,CACvB,CAAC;IAEF,wEAAwE;IACxE,0EAA0E;IAC1E,2CAA2C;IAC3C,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,mBAAmB,GAAG,GAAG,EAAE;YAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,OAAO,GAAG,GAAG,CAAC;YAE3B,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACd,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;YAElD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,gBAAgB,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC;QAEF,mBAAmB,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAExD,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAE3B,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,SAAS,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,aAAa,KAAK,SAAS,CAAC;IAE9C,OAAO,CACL,MAAC,GAAG,eACF,KAAC,qBAAqB,IAAC,IAAI,EAAE,cAAc,GAAI,EAE/C,KAAC,IAAI,IACH,OAAO,EAAC,UAAU,EAClB,EAAE,EAAE;oBACF,EAAE,EAAE,CAAC;oBACL,oEAAoE;oBACpE,sEAAsE;oBACtE,kEAAkE;oBAClE,+DAA+D;oBAC/D,GAAG,CAAC,KAAK,IAAI;wBACX,WAAW,EAAE,cAAc;wBAC3B,WAAW,EAAE,CAAC;qBACf,CAAC;iBACH,YAED,KAAC,WAAW,cACV,MAAC,KAAK,IAAC,OAAO,EAAE,GAAG,aAKjB,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,aACpD,KAAC,UAAU,IACT,EAAE,EAAE;4CACF,EAAE,EAAE,GAAG;4CACP,EAAE,EAAE,GAAG;4CACP,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB;yCACjD,GACD,EACF,MAAC,GAAG,eACF,KAAC,UAAU,IAAC,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,gBAAgB,uBAEvC,EACb,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,YAClB,KAAC,IAAI,IACH,KAAK,EACH,KAAK;wDACH,CAAC,CAAC,yBAAyB;wDAC3B,CAAC,CAAC,0BAA0B,EAEhC,IAAI,EAAC,OAAO,EACZ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACpC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,GACtC,GACE,IACF,IACF,EAGL,UAAU,IAAI,CACb,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,aACpD,KAAC,WAAW,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAI,EAClE,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,aACtB,KAAC,UAAU,IAAC,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,gBAAgB,4BAEvC,EAIb,KAAC,UAAU,IACT,OAAO,EAAC,OAAO,EACf,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,YAEpD,UAAU,GACA,IACT,IACF,CACP,EAGA,SAAS,IAAI,CACZ,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,aACpD,KAAC,YAAY,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAI,EACnE,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,aACtB,KAAC,UAAU,IAAC,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,gBAAgB,iCAEvC,EACb,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,YACxD,SAAS,GACC,IACT,IACF,CACP,EAGA,SAAS,IAAI,CACZ,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,aACpD,KAAC,YAAY,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAI,EACnE,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,aACtB,KAAC,UAAU,IAAC,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,gBAAgB,2BAEvC,EACb,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,YACxD,SAAS,GACC,IACT,IACF,CACP,EAED,KAAC,OAAO,KAAG,EAGX,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,aACjF,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAChD,KAAC,cAAc,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAI,EAM5D,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,gCAErC,IACT,EACN,KAAC,IAAI,IACH,KAAK,EAAE,aAAa,EACpB,IAAI,EAAC,OAAO,EACZ,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EACtC,OAAO,EAAC,UAAU,GAClB,IACE,IACA,GACI,GACT,EAEN,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,QAAQ,EAAC,OAAO,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAClC,KAAK,GACA,CACT,EAGD,MAAC,KAAK,IAAC,SAAS,EAAC,KAAK,EAAC,OAAO,EAAE,CAAC,aAC/B,KAAC,MAAM,IACL,SAAS,QACT,OAAO,EAAC,UAAU,EAClB,KAAK,EAAC,OAAO,EACb,IAAI,EAAC,OAAO,EACZ,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,WAAW,IAAI,SAAS,IAAI,SAAS,EAC/C,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,KAAC,gBAAgB,IAAC,IAAI,EAAE,EAAE,GAAI,CAAC,CAAC,CAAC,SAAS,YAEhE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,GAC3B,EACT,KAAC,MAAM,IACL,SAAS,QACT,OAAO,EAAC,WAAW,EACnB,KAAK,EAAC,SAAS,EACf,IAAI,EAAC,OAAO,EACZ,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,SAAS,IAAI,WAAW,IAAI,SAAS,EAC/C,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,KAAC,gBAAgB,IAAC,IAAI,EAAE,EAAE,GAAI,CAAC,CAAC,CAAC,SAAS,YAMlE,WAAW;4BACV,CAAC,CAAC,cAAc;4BAChB,CAAC,CAAC,KAAK;gCACL,CAAC,CAAC,eAAe;gCACjB,CAAC,CAAC,SAAS,GACR,IACH,EAEP,SAAS,IAAI,CACZ,KAAC,KAAK,IAAC,QAAQ,EAAC,OAAO,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,kFAE7B,CACT,IACG,CACP,CAAC;AACJ,CAAC"}

package/dist/identity/ui/index.d.ts

@@ -0,0 +1,33 @@
+export { LoginPage } from './LoginPage.js';
+export type { LoginPageProps, LoginPageSlots, LoginProvidersSlotProps } from './LoginPage.js';
+export { AuthCallbackPage } from './AuthCallbackPage.js';
+export type { AuthCallbackPageProps, AuthCallbackPageSlots } from './AuthCallbackPage.js';
+export { SignInErrorView } from './SignInErrorView.js';
+export type { SignInErrorViewProps } from './SignInErrorView.js';
+export { DEFAULT_SIGN_IN_ERROR_CODE, SIGN_IN_ERROR_CODES, createSignInErrorContent, resolveSignInErrorCode, } from './sign-in-error-content.js';
+export type { SignInErrorCode, SignInErrorContent, SignInErrorPrimaryAction, SignInErrorSeverity, } from './sign-in-error-content.js';
+export { BUILT_IN_AUTH_PROVIDERS, OAuthButton } from './OAuthButton.js';
+export type { OAuthButtonProps } from './OAuthButton.js';
+export { ActivateDevicePage } from './ActivateDevicePage.js';
+export type { ActivateDevicePageProps, ActivateDevicePageSlots } from './ActivateDevicePage.js';
+export { OrgSwitcher } from './OrgSwitcher.js';
+export { UserTokensPage } from './tokens/UserTokensPage.js';
+export type { UserTokensPageProps, UserTokensPageSlots } from './tokens/UserTokensPage.js';
+export { PersonalAccessTokens } from './tokens/PersonalAccessTokens.js';
+export { UsersPage } from './users/UsersPage.js';
+export type { UsersPageProps, UsersPageSlots, UsersPageTab } from './users/UsersPage.js';
+export { UserList } from './users/UserList.js';
+export type { UserListProps, UserListSlots } from './users/UserList.js';
+export { AllowlistTable } from './users/AllowlistTable.js';
+export { buildUserColumns } from './users/userListColumns.js';
+export { OrganizationPage } from './org/OrganizationPage.js';
+export type { OrganizationPageProps, OrganizationPageSlots } from './org/OrganizationPage.js';
+export { OrganizationsPage } from './org/OrganizationsPage.js';
+export type { OrganizationsPageProps, OrganizationsPageSlots } from './org/OrganizationsPage.js';
+export { OrgMembersPanel } from './org/OrgMembersPanel.js';
+export type { OrgMembersPanelProps, OrgMembersPanelSlots } from './org/OrgMembersPanel.js';
+export { OrgInvitesPanel } from './org/OrgInvitesPanel.js';
+export type { OrgInvitesPanelProps } from './org/OrgInvitesPanel.js';
+export { identityAdminSections, identityUserSettingsSections } from './settings.js';
+export type { IdentitySettingsCard } from './settings.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/ui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/identity/ui/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,YAAY,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,YAAY,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,YAAY,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,YAAY,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AACpF,YAAY,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/identity/ui/index.js

@@ -0,0 +1,24 @@
+// `@marinoscar/platform-web/identity/ui`: the identity slice's pages and
+// components (issue #727, PP-6.6), built on `/identity/headless` only.
+// "Packages own behaviour, apps own appearance": the app's theme styles them,
+// `slots` and the identity adapters (spinner, table) replace parts. Documented
+// in ../README.md. Explicit named exports only.
+export { LoginPage } from './LoginPage.js';
+export { AuthCallbackPage } from './AuthCallbackPage.js';
+export { SignInErrorView } from './SignInErrorView.js';
+export { DEFAULT_SIGN_IN_ERROR_CODE, SIGN_IN_ERROR_CODES, createSignInErrorContent, resolveSignInErrorCode, } from './sign-in-error-content.js';
+export { BUILT_IN_AUTH_PROVIDERS, OAuthButton } from './OAuthButton.js';
+export { ActivateDevicePage } from './ActivateDevicePage.js';
+export { OrgSwitcher } from './OrgSwitcher.js';
+export { UserTokensPage } from './tokens/UserTokensPage.js';
+export { PersonalAccessTokens } from './tokens/PersonalAccessTokens.js';
+export { UsersPage } from './users/UsersPage.js';
+export { UserList } from './users/UserList.js';
+export { AllowlistTable } from './users/AllowlistTable.js';
+export { buildUserColumns } from './users/userListColumns.js';
+export { OrganizationPage } from './org/OrganizationPage.js';
+export { OrganizationsPage } from './org/OrganizationsPage.js';
+export { OrgMembersPanel } from './org/OrgMembersPanel.js';
+export { OrgInvitesPanel } from './org/OrgInvitesPanel.js';
+export { identityAdminSections, identityUserSettingsSections } from './settings.js';
+//# sourceMappingURL=index.js.map

package/dist/identity/ui/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/identity/ui/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,uEAAuE;AACvE,8EAA8E;AAC9E,+EAA+E;AAC/E,gDAAgD;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AAOpC,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAExE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC"}

package/dist/identity/ui/org/InviteMemberDialog.d.ts

@@ -0,0 +1,15 @@
+import type { OrgRole, RoleDescriptor } from '../../headless/index.js';
+interface InviteMemberDialogProps {
+    open: boolean;
+    onClose: () => void;
+    onInvite: (data: {
+        email: string;
+        roleName: OrgRole;
+        notes?: string;
+    }) => Promise<void>;
+    /** The org roles the API says may be assigned (`GET /api/roles?scope=org`, `assignable` only). */
+    roles: readonly RoleDescriptor[];
+}
+export declare function InviteMemberDialog({ open, onClose, onInvite, roles }: InviteMemberDialogProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=InviteMemberDialog.d.ts.map

package/dist/identity/ui/org/InviteMemberDialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InviteMemberDialog.d.ts","sourceRoot":"","sources":["../../../../src/identity/ui/org/InviteMemberDialog.tsx"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEvE,UAAU,uBAAuB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,kGAAkG;IAClG,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;CAClC;AAOD,wBAAgB,kBAAkB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,uBAAuB,+BA0G7F"}

package/dist/identity/ui/org/InviteMemberDialog.js

@@ -0,0 +1,60 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The "Invite member" form of the Organization page (#726). Collects an
+ * address, an org role and an optional private note; the API validates and
+ * decides (a member or an accepted invitation is refused, and its message is
+ * shown here).
+ */
+import { useState } from 'react';
+import { Alert, Button, Dialog, DialogActions, DialogContent, DialogTitle, FormControl, InputLabel, MenuItem, Select, Stack, TextField, } from '@mui/material';
+/** The role offered first: `viewer` (the least privileged built-in) when it is assignable, else the first one. */
+function defaultRoleOf(roles) {
+    return (roles.find((role) => role.id === 'viewer') ?? roles[0])?.id ?? '';
+}
+export function InviteMemberDialog({ open, onClose, onInvite, roles }) {
+    const [email, setEmail] = useState('');
+    // `null` until the person picks one: the default follows the list as it loads.
+    const [picked, setPicked] = useState(null);
+    const roleName = picked !== null && roles.some((role) => role.id === picked) ? picked : defaultRoleOf(roles);
+    const [notes, setNotes] = useState('');
+    const [error, setError] = useState(null);
+    const [isSubmitting, setIsSubmitting] = useState(false);
+    function reset() {
+        setEmail('');
+        setPicked(null);
+        setNotes('');
+        setError(null);
+    }
+    async function handleSubmit(event) {
+        event.preventDefault();
+        if (!email.trim()) {
+            setError('Email is required');
+            return;
+        }
+        if (!roleName) {
+            setError('There is no role you can invite someone as');
+            return;
+        }
+        setIsSubmitting(true);
+        setError(null);
+        try {
+            await onInvite({ email: email.trim(), roleName, ...(notes.trim() ? { notes: notes.trim() } : {}) });
+            reset();
+            onClose();
+        }
+        catch (err) {
+            setError(err instanceof Error ? err.message : 'Failed to send the invitation');
+        }
+        finally {
+            setIsSubmitting(false);
+        }
+    }
+    return (_jsx(Dialog, { open: open, onClose: () => {
+            reset();
+            onClose();
+        }, fullWidth: true, maxWidth: "sm", children: _jsxs("form", { onSubmit: handleSubmit, noValidate: true, children: [_jsx(DialogTitle, { children: "Invite member" }), _jsx(DialogContent, { children: _jsxs(Stack, { spacing: 2, sx: { pt: 1 }, children: [error && _jsx(Alert, { severity: "error", children: error }), _jsx(TextField, { label: "Email", type: "email", value: email, onChange: (event) => setEmail(event.target.value), autoFocus: true, required: true, fullWidth: true, helperText: "They join when they sign in with this address. It is added to the allowlist." }), _jsxs(FormControl, { fullWidth: true, children: [_jsx(InputLabel, { id: "invite-role", children: "Role" }), _jsx(Select, { labelId: "invite-role", label: "Role", value: roleName, onChange: (event) => setPicked(event.target.value), children: roles.map((role) => (_jsx(MenuItem, { value: role.id, children: role.label }, role.id))) })] }), _jsx(TextField, { label: "Notes (private, not emailed)", value: notes, onChange: (event) => setNotes(event.target.value), multiline: true, minRows: 2, fullWidth: true, slotProps: { htmlInput: { maxLength: 500 } } })] }) }), _jsxs(DialogActions, { children: [_jsx(Button, { onClick: () => {
+                                reset();
+                                onClose();
+                            }, children: "Cancel" }), _jsx(Button, { type: "submit", variant: "contained", disabled: isSubmitting || !roleName, children: "Send invitation" })] })] }) }));
+}
+//# sourceMappingURL=InviteMemberDialog.js.map

package/dist/identity/ui/org/InviteMemberDialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InviteMemberDialog.js","sourceRoot":"","sources":["../../../../src/identity/ui/org/InviteMemberDialog.tsx"],"names":[],"mappings":";AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AACjD,OAAO,EACL,KAAK,EACL,MAAM,EACN,MAAM,EACN,aAAa,EACb,aAAa,EACb,WAAW,EACX,WAAW,EACX,UAAU,EACV,QAAQ,EACR,MAAM,EACN,KAAK,EACL,SAAS,GACV,MAAM,eAAe,CAAC;AAWvB,kHAAkH;AAClH,SAAS,aAAa,CAAC,KAAgC;IACrD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAA2B;IAC5F,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,+EAA+E;IAC/E,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC7G,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAExD,SAAS,KAAK;QACZ,QAAQ,CAAC,EAAE,CAAC,CAAC;QACb,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,QAAQ,CAAC,EAAE,CAAC,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,KAAgB;QAC1C,KAAK,CAAC,cAAc,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,4CAA4C,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACpG,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;QACjF,CAAC;gBAAS,CAAC;YACT,eAAe,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,CACL,KAAC,MAAM,IACL,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,GAAG,EAAE;YACZ,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,CAAC;QACZ,CAAC,EACD,SAAS,QACT,QAAQ,EAAC,IAAI,YAEb,gBAAM,QAAQ,EAAE,YAAY,EAAE,UAAU,mBACtC,KAAC,WAAW,gCAA4B,EACxC,KAAC,aAAa,cACZ,MAAC,KAAK,IAAC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,aAC7B,KAAK,IAAI,KAAC,KAAK,IAAC,QAAQ,EAAC,OAAO,YAAE,KAAK,GAAS,EACjD,KAAC,SAAS,IACR,KAAK,EAAC,OAAO,EACb,IAAI,EAAC,OAAO,EACZ,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EACjD,SAAS,QACT,QAAQ,QACR,SAAS,QACT,UAAU,EAAC,8EAA8E,GACzF,EACF,MAAC,WAAW,IAAC,SAAS,mBACpB,KAAC,UAAU,IAAC,EAAE,EAAC,aAAa,qBAAkB,EAC9C,KAAC,MAAM,IACL,OAAO,EAAC,aAAa,EACrB,KAAK,EAAC,MAAM,EACZ,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,YAEjD,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACnB,KAAC,QAAQ,IAAe,KAAK,EAAE,IAAI,CAAC,EAAE,YACnC,IAAI,CAAC,KAAK,IADE,IAAI,CAAC,EAAE,CAEX,CACZ,CAAC,GACK,IACG,EACd,KAAC,SAAS,IACR,KAAK,EAAC,8BAA8B,EACpC,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EACjD,SAAS,QACT,OAAO,EAAE,CAAC,EACV,SAAS,QACT,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAC5C,IACI,GACM,EAChB,MAAC,aAAa,eACZ,KAAC,MAAM,IACL,OAAO,EAAE,GAAG,EAAE;gCACZ,KAAK,EAAE,CAAC;gCACR,OAAO,EAAE,CAAC;4BACZ,CAAC,uBAGM,EACT,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,QAAQ,EAAE,YAAY,IAAI,CAAC,QAAQ,gCAEpE,IACK,IACX,GACA,CACV,CAAC;AACJ,CAAC"}

package/dist/identity/ui/org/OrgInvitesPanel.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The Invites tab of the Organization page (#726, PP-6.7): the ACTIVE
+ * organization's invitations. The tab itself is gated on `org_invites:read`
+ * by the page; the Invite and Revoke actions are disabled without
+ * `org_invites:write` (the API enforces both).
+ */
+import type { ReactElement } from 'react';
+import type { UseRolesReturn } from '../../headless/index.js';
+/**
+ * Props of {@link OrgInvitesPanel}.
+ *
+ * @stability experimental
+ */
+export interface OrgInvitesPanelProps {
+    /**
+     * The org roles (`useRoles('org')`), when the page already read them. Without
+     * it the panel reads its own.
+     */
+    roles?: UseRolesReturn;
+}
+/**
+ * The current organization's invitations: invite and revoke
+ * (`org_invites:write`). The Invites tab of {@link OrganizationPage}. The role
+ * choices and labels come from `GET /api/roles?scope=org`.
+ *
+ * @param props - see {@link OrgInvitesPanelProps}.
+ * @returns the component.
+ *
+ * @stability stable
+ */
+export declare function OrgInvitesPanel({ roles: rolesFromPage }?: OrgInvitesPanelProps): ReactElement;
+//# sourceMappingURL=OrgInvitesPanel.d.ts.map

package/dist/identity/ui/org/OrgInvitesPanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgInvitesPanel.d.ts","sourceRoot":"","sources":["../../../../src/identity/ui/org/OrgInvitesPanel.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAkB1C,OAAO,KAAK,EAAmB,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAM/E;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,GAAE,oBAAyB,GAAG,YAAY,CAqGjG"}

package/dist/identity/ui/org/OrgInvitesPanel.js

@@ -0,0 +1,48 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { Alert, Box, Button, Chip, FormControl, InputLabel, MenuItem, Paper, Select, Stack, Typography, } from '@mui/material';
+import { Add as AddIcon } from '@mui/icons-material';
+import { usePermissions } from '../../headless/index.js';
+import { useOrgInvites, useRoles } from '../../headless/index.js';
+import { INVITE_STATUS_COLOR, formatDate, orgRoleLabel } from './orgLabels.js';
+import { InviteMemberDialog } from './InviteMemberDialog.js';
+/**
+ * The current organization's invitations: invite and revoke
+ * (`org_invites:write`). The Invites tab of {@link OrganizationPage}. The role
+ * choices and labels come from `GET /api/roles?scope=org`.
+ *
+ * @param props - see {@link OrgInvitesPanelProps}.
+ * @returns the component.
+ *
+ * @stability stable
+ */
+export function OrgInvitesPanel({ roles: rolesFromPage } = {}) {
+    const ownRoles = useRoles('org', { enabled: rolesFromPage === undefined });
+    const roles = rolesFromPage ?? ownRoles;
+    const { hasPermission } = usePermissions();
+    const canWrite = hasPermission('org_invites:write');
+    const { invites, isLoading, error, fetchInvites, inviteMember, revokeInvite } = useOrgInvites();
+    const [status, setStatus] = useState('pending');
+    const [dialogOpen, setDialogOpen] = useState(false);
+    const [busy, setBusy] = useState(null);
+    useEffect(() => {
+        void fetchInvites({ page: 1, pageSize: 100, status });
+    }, [fetchInvites, status]);
+    return (_jsxs(Stack, { spacing: 2, children: [_jsxs(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 2, sx: { alignItems: { sm: 'center' } }, children: [_jsxs(FormControl, { size: "small", sx: { minWidth: 180 }, children: [_jsx(InputLabel, { id: "invite-status-filter", children: "Status" }), _jsxs(Select, { labelId: "invite-status-filter", label: "Status", value: status, onChange: (event) => setStatus(event.target.value), children: [_jsx(MenuItem, { value: "pending", children: "Pending" }), _jsx(MenuItem, { value: "accepted", children: "Accepted" }), _jsx(MenuItem, { value: "revoked", children: "Revoked" }), _jsx(MenuItem, { value: "expired", children: "Expired" }), _jsx(MenuItem, { value: "all", children: "All" })] })] }), _jsx(Box, { sx: { flexGrow: 1 } }), _jsx(Button, { variant: "contained", startIcon: _jsx(AddIcon, {}), disabled: !canWrite, onClick: () => setDialogOpen(true), children: "Invite member" })] }), error && _jsx(Alert, { severity: "error", children: error }), !isLoading && invites.length === 0 && !error && (_jsx(Typography, { color: "text.secondary", children: "No invitations." })), invites.map((invite) => (_jsx(Paper, { variant: "outlined", sx: { p: 2 }, "data-testid": `invite-${invite.id}`, children: _jsxs(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 2, sx: { alignItems: { sm: 'center' } }, children: [_jsxs(Box, { sx: { flexGrow: 1, minWidth: 0 }, children: [_jsx(Typography, { noWrap: true, sx: { fontWeight: 600 }, children: invite.email }), _jsxs(Typography, { variant: "body2", color: "text.secondary", children: [orgRoleLabel(invite.role, roles.roles), invite.invitedBy ? ` · invited by ${invite.invitedBy.email}` : ''] }), _jsx(Typography, { variant: "caption", color: "text.secondary", children: invite.status === 'pending'
+                                        ? `Expires ${formatDate(invite.expiresAt)}`
+                                        : invite.status === 'accepted'
+                                            ? `Accepted ${formatDate(invite.acceptedAt)}`
+                                            : `Sent ${formatDate(invite.createdAt)}` })] }), _jsx(Chip, { label: invite.status, color: INVITE_STATUS_COLOR[invite.status], size: "small", sx: { alignSelf: { xs: 'flex-start', sm: 'center' }, textTransform: 'capitalize' } }), invite.status === 'pending' && (_jsx(Button, { size: "small", color: "error", variant: "outlined", disabled: !canWrite || busy === invite.id, onClick: async () => {
+                                setBusy(invite.id);
+                                try {
+                                    await revokeInvite(invite.id);
+                                }
+                                catch {
+                                    // The hook holds the API's message in `error`.
+                                }
+                                finally {
+                                    setBusy(null);
+                                }
+                            }, children: "Revoke" }))] }) }, invite.id))), _jsx(InviteMemberDialog, { open: dialogOpen, onClose: () => setDialogOpen(false), onInvite: inviteMember, roles: roles.assignable })] }));
+}
+//# sourceMappingURL=OrgInvitesPanel.js.map

package/dist/identity/ui/org/OrgInvitesPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgInvitesPanel.js","sourceRoot":"","sources":["../../../../src/identity/ui/org/OrgInvitesPanel.tsx"],"names":[],"mappings":";AAOA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EACL,KAAK,EACL,GAAG,EACH,MAAM,EACN,IAAI,EACJ,WAAW,EACX,UAAU,EACV,QAAQ,EACR,KAAK,EACL,MAAM,EACN,KAAK,EACL,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,GAAG,IAAI,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAiB7D;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,KAA2B,EAAE;IACjF,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,aAAa,IAAI,QAAQ,CAAC;IACxC,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;IACpD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,aAAa,EAAE,CAAC;IAChG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAe,SAAS,CAAC,CAAC;IAC9D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAEtD,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3B,OAAO,CACL,MAAC,KAAK,IAAC,OAAO,EAAE,CAAC,aACf,MAAC,KAAK,IAAC,SAAS,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,aAC7F,MAAC,WAAW,IAAC,IAAI,EAAC,OAAO,EAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,aAC7C,KAAC,UAAU,IAAC,EAAE,EAAC,sBAAsB,uBAAoB,EACzD,MAAC,MAAM,IACL,OAAO,EAAC,sBAAsB,EAC9B,KAAK,EAAC,QAAQ,EACd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAqB,CAAC,aAElE,KAAC,QAAQ,IAAC,KAAK,EAAC,SAAS,wBAAmB,EAC5C,KAAC,QAAQ,IAAC,KAAK,EAAC,UAAU,yBAAoB,EAC9C,KAAC,QAAQ,IAAC,KAAK,EAAC,SAAS,wBAAmB,EAC5C,KAAC,QAAQ,IAAC,KAAK,EAAC,SAAS,wBAAmB,EAC5C,KAAC,QAAQ,IAAC,KAAK,EAAC,KAAK,oBAAe,IAC7B,IACG,EACd,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAI,EAC5B,KAAC,MAAM,IAAC,OAAO,EAAC,WAAW,EAAC,SAAS,EAAE,KAAC,OAAO,KAAG,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,8BAElG,IACH,EAEP,KAAK,IAAI,KAAC,KAAK,IAAC,QAAQ,EAAC,OAAO,YAAE,KAAK,GAAS,EAEhD,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAC/C,KAAC,UAAU,IAAC,KAAK,EAAC,gBAAgB,gCAA6B,CAChE,EAEA,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CACvB,KAAC,KAAK,IAAiB,OAAO,EAAC,UAAU,EAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,iBAAe,UAAU,MAAM,CAAC,EAAE,EAAE,YACxF,MAAC,KAAK,IAAC,SAAS,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,aAC7F,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aACnC,KAAC,UAAU,IAAC,MAAM,QAAC,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,YACvC,MAAM,CAAC,KAAK,GACF,EACb,MAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,aAC/C,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EACtC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IACvD,EACb,KAAC,UAAU,IAAC,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,gBAAgB,YACjD,MAAM,CAAC,MAAM,KAAK,SAAS;wCAC1B,CAAC,CAAC,WAAW,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;wCAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;4CAC5B,CAAC,CAAC,YAAY,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;4CAC7C,CAAC,CAAC,QAAQ,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GACjC,IACT,EACN,KAAC,IAAI,IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EACpB,KAAK,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EACzC,IAAI,EAAC,OAAO,EACZ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,GAClF,EACD,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAC9B,KAAC,MAAM,IACL,IAAI,EAAC,OAAO,EACZ,KAAK,EAAC,OAAO,EACb,OAAO,EAAC,UAAU,EAClB,QAAQ,EAAE,CAAC,QAAQ,IAAI,IAAI,KAAK,MAAM,CAAC,EAAE,EACzC,OAAO,EAAE,KAAK,IAAI,EAAE;gCAClB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gCACnB,IAAI,CAAC;oCACH,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gCAChC,CAAC;gCAAC,MAAM,CAAC;oCACP,+CAA+C;gCACjD,CAAC;wCAAS,CAAC;oCACT,OAAO,CAAC,IAAI,CAAC,CAAC;gCAChB,CAAC;4BACH,CAAC,uBAGM,CACV,IACK,IA5CE,MAAM,CAAC,EAAE,CA6Cb,CACT,CAAC,EAEF,KAAC,kBAAkB,IACjB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EACnC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,KAAK,CAAC,UAAU,GACvB,IACI,CACT,CAAC;AACJ,CAAC"}

package/dist/identity/ui/org/OrgMembersPanel.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The Members tab of the Organization page (#726, PP-6.7): the ACTIVE
+ * organization's members, with their org role and status.
+ *
+ * Controls are disabled without `org_members:write` (the API enforces it
+ * anyway), and on the viewer's own row: the API refuses self-demotion,
+ * self-suspension and self-removal, so the page does not offer them. Every
+ * other rule (the last active administrator) is the API's to decide; its
+ * refusal is shown as returned.
+ *
+ * Laid out as a list of rows that wrap, not a wide table, so it works at
+ * phone width without horizontal scrolling.
+ */
+import type { ReactElement } from 'react';
+import type { TableSlots } from '../../../core/index.js';
+import type { OrgMember, UseRolesReturn } from '../../headless/index.js';
+/**
+ * The slots of {@link OrgMembersPanel}: the table slots that make sense for a
+ * list of member rows. `RowActions` adds controls to a member's action row,
+ * `DetailPanel` adds content under the member's row, `Toolbar` adds controls
+ * under the search box. There is no `Columns`: the panel is a list of cards that
+ * wrap at phone width, not a table with columns to add.
+ *
+ * @example
+ * ```tsx
+ * <OrgMembersPanel slots={{ RowActions: ({ row }) => <ResendWelcome userId={row.userId} /> }} />
+ * ```
+ *
+ * @extensionPoint slot
+ * @stability experimental
+ */
+export type OrgMembersPanelSlots = Pick<TableSlots<OrgMember>, 'RowActions' | 'DetailPanel' | 'Toolbar'>;
+/**
+ * Props of {@link OrgMembersPanel}.
+ *
+ * @stability experimental
+ */
+export interface OrgMembersPanelProps {
+    /**
+     * The org roles (`useRoles('org')`), when the page already read them. Without
+     * it the panel reads its own.
+     */
+    roles?: UseRolesReturn;
+    /** Add per-member actions, a detail view or toolbar controls. */
+    slots?: OrgMembersPanelSlots;
+}
+/**
+ * The current organization's members: role and status changes and removal
+ * (`org_members:write`). The Members tab of {@link OrganizationPage}. The roles
+ * offered come from `GET /api/roles?scope=org` (the assignable ones).
+ *
+ * @param props - see {@link OrgMembersPanelProps}.
+ * @returns the component.
+ *
+ * @stability stable
+ */
+export declare function OrgMembersPanel({ roles: rolesFromPage, slots }?: OrgMembersPanelProps): ReactElement;
+//# sourceMappingURL=OrgMembersPanel.d.ts.map

package/dist/identity/ui/org/OrgMembersPanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgMembersPanel.d.ts","sourceRoot":"","sources":["../../../../src/identity/ui/org/OrgMembersPanel.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAqB1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAIzD,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,YAAY,GAAG,aAAa,GAAG,SAAS,CAAC,CAAC;AAEzG;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,iEAAiE;IACjE,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,GAAE,oBAAyB,GAAG,YAAY,CA0KxG"}

package/dist/identity/ui/org/OrgMembersPanel.js

@@ -0,0 +1,59 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { Alert, Box, Button, Chip, Dialog, DialogActions, DialogContent, DialogContentText, DialogTitle, FormControl, InputLabel, MenuItem, Paper, Select, Stack, TextField, Typography, } from '@mui/material';
+import { useAuth } from '../../headless/index.js';
+import { usePermissions } from '../../headless/index.js';
+import { useOrgMembers, useRoles } from '../../headless/index.js';
+import { MEMBER_STATUS_COLOR, formatDate, orgRoleLabel } from './orgLabels.js';
+/**
+ * The current organization's members: role and status changes and removal
+ * (`org_members:write`). The Members tab of {@link OrganizationPage}. The roles
+ * offered come from `GET /api/roles?scope=org` (the assignable ones).
+ *
+ * @param props - see {@link OrgMembersPanelProps}.
+ * @returns the component.
+ *
+ * @stability stable
+ */
+export function OrgMembersPanel({ roles: rolesFromPage, slots } = {}) {
+    const RowActions = slots?.RowActions;
+    const DetailPanel = slots?.DetailPanel;
+    const Toolbar = slots?.Toolbar;
+    const ownRoles = useRoles('org', { enabled: rolesFromPage === undefined });
+    const roles = rolesFromPage ?? ownRoles;
+    const { user } = useAuth();
+    const { hasPermission } = usePermissions();
+    const canWrite = hasPermission('org_members:write');
+    const { members, total, isLoading, error, fetchMembers, updateMember, removeMember } = useOrgMembers();
+    const [search, setSearch] = useState('');
+    const [busy, setBusy] = useState(null);
+    const [confirmRemove, setConfirmRemove] = useState(null);
+    useEffect(() => {
+        void fetchMembers({ page: 1, pageSize: 100, search: search.trim() || undefined });
+    }, [fetchMembers, search]);
+    async function run(userId, action) {
+        setBusy(userId);
+        try {
+            await action();
+        }
+        catch {
+            // The hook already holds the API's message in `error`.
+        }
+        finally {
+            setBusy(null);
+        }
+    }
+    return (_jsxs(Stack, { spacing: 2, children: [_jsx(TextField, { label: "Search members", size: "small", value: search, onChange: (event) => setSearch(event.target.value), sx: { maxWidth: { sm: 360 } } }), Toolbar && _jsx(Toolbar, {}), error && _jsx(Alert, { severity: "error", children: error }), !isLoading && members.length === 0 && !error && (_jsx(Typography, { color: "text.secondary", children: "No members match." })), members.map((member) => {
+                const isSelf = member.userId === user?.id;
+                const disabled = !canWrite || isSelf || busy === member.userId;
+                return (_jsxs(Paper, { variant: "outlined", sx: { p: 2 }, "data-testid": `member-${member.userId}`, children: [_jsxs(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 2, sx: { alignItems: { xs: 'stretch', sm: 'center' } }, children: [_jsxs(Box, { sx: { flexGrow: 1, minWidth: 0 }, children: [_jsxs(Typography, { noWrap: true, sx: { fontWeight: 600 }, children: [member.displayName ?? member.email, isSelf ? ' (you)' : ''] }), _jsx(Typography, { variant: "body2", color: "text.secondary", noWrap: true, children: member.email }), _jsxs(Typography, { variant: "caption", color: "text.secondary", children: ["Last active ", formatDate(member.lastActiveAt)] })] }), _jsx(Chip, { label: member.status === 'active' ? 'Active' : 'Suspended', color: MEMBER_STATUS_COLOR[member.status], size: "small", sx: { alignSelf: { xs: 'flex-start', sm: 'center' } } }), _jsxs(FormControl, { size: "small", sx: { minWidth: 160 }, disabled: disabled, children: [_jsx(InputLabel, { id: `role-${member.userId}`, children: "Role" }), _jsxs(Select, { labelId: `role-${member.userId}`, label: "Role", value: member.role, onChange: (event) => void run(member.userId, () => updateMember(member.userId, { roleName: event.target.value })), children: [!roles.assignable.some((role) => role.id === member.role) && (_jsx(MenuItem, { value: member.role, disabled: true, children: orgRoleLabel(member.role, roles.roles) })), roles.assignable.map((role) => (_jsx(MenuItem, { value: role.id, children: role.label }, role.id)))] })] }), _jsxs(Stack, { direction: "row", spacing: 1, children: [_jsx(Button, { size: "small", variant: "outlined", disabled: disabled, onClick: () => void run(member.userId, () => updateMember(member.userId, {
+                                                status: member.status === 'active' ? 'suspended' : 'active',
+                                            })), children: member.status === 'active' ? 'Suspend' : 'Reactivate' }), _jsx(Button, { size: "small", color: "error", variant: "outlined", disabled: disabled, onClick: () => setConfirmRemove(member), children: "Remove" }), RowActions && _jsx(RowActions, { row: member })] })] }), DetailPanel && (_jsx(Box, { sx: { mt: 2 }, children: _jsx(DetailPanel, { row: member }) }))] }, member.userId));
+            }), total > members.length && (_jsxs(Typography, { variant: "body2", color: "text.secondary", children: ["Showing ", members.length, " of ", total, ". Search to narrow the list."] })), _jsxs(Dialog, { open: confirmRemove !== null, onClose: () => setConfirmRemove(null), children: [_jsx(DialogTitle, { children: "Remove member?" }), _jsx(DialogContent, { children: _jsxs(DialogContentText, { children: [confirmRemove?.email, " loses access to this organization at once: their sessions, personal access tokens and device sign-ins for it stop working. Their other organizations are not affected."] }) }), _jsxs(DialogActions, { children: [_jsx(Button, { onClick: () => setConfirmRemove(null), children: "Cancel" }), _jsx(Button, { color: "error", onClick: () => {
+                                    const target = confirmRemove;
+                                    setConfirmRemove(null);
+                                    if (target)
+                                        void run(target.userId, () => removeMember(target.userId));
+                                }, children: "Remove" })] })] })] }));
+}
+//# sourceMappingURL=OrgMembersPanel.js.map

package/dist/identity/ui/org/OrgMembersPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgMembersPanel.js","sourceRoot":"","sources":["../../../../src/identity/ui/org/OrgMembersPanel.tsx"],"names":[],"mappings":";AAcA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EACL,KAAK,EACL,GAAG,EACH,MAAM,EACN,IAAI,EACJ,MAAM,EACN,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,UAAU,EACV,QAAQ,EACR,KAAK,EACL,MAAM,EACN,KAAK,EACL,SAAS,EACT,UAAU,GACX,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAkC/E;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,KAA2B,EAAE;IACxF,MAAM,UAAU,GAAG,KAAK,EAAE,UAAU,CAAC;IACrC,MAAM,WAAW,GAAG,KAAK,EAAE,WAAW,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,CAAC;IAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,aAAa,IAAI,QAAQ,CAAC;IACxC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;IACpD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,aAAa,EAAE,CAAC;IACvG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAmB,IAAI,CAAC,CAAC;IAE3E,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC;IACpF,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3B,KAAK,UAAU,GAAG,CAAC,MAAc,EAAE,MAA2B;QAC5D,OAAO,CAAC,MAAM,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,CACL,MAAC,KAAK,IAAC,OAAO,EAAE,CAAC,aACf,KAAC,SAAS,IACR,KAAK,EAAC,gBAAgB,EACtB,IAAI,EAAC,OAAO,EACZ,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAClD,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAC7B,EAED,OAAO,IAAI,KAAC,OAAO,KAAG,EAEtB,KAAK,IAAI,KAAC,KAAK,IAAC,QAAQ,EAAC,OAAO,YAAE,KAAK,GAAS,EAEhD,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAC/C,KAAC,UAAU,IAAC,KAAK,EAAC,gBAAgB,kCAA+B,CAClE,EAEA,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;gBACtB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;gBAC1C,MAAM,QAAQ,GAAG,CAAC,QAAQ,IAAI,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC;gBAC/D,OAAO,CACL,MAAC,KAAK,IAAqB,OAAO,EAAC,UAAU,EAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,iBAAe,UAAU,MAAM,CAAC,MAAM,EAAE,aAChG,MAAC,KAAK,IACJ,SAAS,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EACtC,OAAO,EAAE,CAAC,EACV,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,aAEnD,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aACnC,MAAC,UAAU,IAAC,MAAM,QAAC,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,aACvC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,EAClC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IACZ,EACb,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,MAAM,kBACtD,MAAM,CAAC,KAAK,GACF,EACb,MAAC,UAAU,IAAC,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,gBAAgB,6BACrC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,IACjC,IACT,EAEN,KAAC,IAAI,IACH,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAC1D,KAAK,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EACzC,IAAI,EAAC,OAAO,EACZ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GACrD,EAEF,MAAC,WAAW,IAAC,IAAI,EAAC,OAAO,EAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,aACjE,KAAC,UAAU,IAAC,EAAE,EAAE,QAAQ,MAAM,CAAC,MAAM,EAAE,qBAAmB,EAC1D,MAAC,MAAM,IACL,OAAO,EAAE,QAAQ,MAAM,CAAC,MAAM,EAAE,EAChC,KAAK,EAAC,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,IAAI,EAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAC3B,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAC9D,aAKF,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAC5D,KAAC,QAAQ,IAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,kBACnC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAC9B,CACZ,EACA,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAC9B,KAAC,QAAQ,IAAe,KAAK,EAAE,IAAI,CAAC,EAAE,YACnC,IAAI,CAAC,KAAK,IADE,IAAI,CAAC,EAAE,CAEX,CACZ,CAAC,IACK,IACG,EAEd,MAAC,KAAK,IAAC,SAAS,EAAC,KAAK,EAAC,OAAO,EAAE,CAAC,aAC/B,KAAC,MAAM,IACL,IAAI,EAAC,OAAO,EACZ,OAAO,EAAC,UAAU,EAClB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CACZ,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAC3B,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE;gDAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;6CAC5D,CAAC,CACH,YAGF,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,GAC/C,EACT,KAAC,MAAM,IACL,IAAI,EAAC,OAAO,EACZ,KAAK,EAAC,OAAO,EACb,OAAO,EAAC,UAAU,EAClB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,uBAGhC,EACR,UAAU,IAAI,KAAC,UAAU,IAAC,GAAG,EAAE,MAAM,GAAI,IACpC,IACF,EACP,WAAW,IAAI,CACd,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAChB,KAAC,WAAW,IAAC,GAAG,EAAE,MAAM,GAAI,GACxB,CACP,KApFS,MAAM,CAAC,MAAM,CAqFjB,CACT,CAAC;YACJ,CAAC,CAAC,EAED,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,CACzB,MAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,yBACvC,OAAO,CAAC,MAAM,UAAM,KAAK,oCACvB,CACd,EAED,MAAC,MAAM,IAAC,IAAI,EAAE,aAAa,KAAK,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,aACzE,KAAC,WAAW,iCAA6B,EACzC,KAAC,aAAa,cACZ,MAAC,iBAAiB,eACf,aAAa,EAAE,KAAK,+KAEH,GACN,EAChB,MAAC,aAAa,eACZ,KAAC,MAAM,IAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,uBAAiB,EAC9D,KAAC,MAAM,IACL,KAAK,EAAC,OAAO,EACb,OAAO,EAAE,GAAG,EAAE;oCACZ,MAAM,MAAM,GAAG,aAAa,CAAC;oCAC7B,gBAAgB,CAAC,IAAI,CAAC,CAAC;oCACvB,IAAI,MAAM;wCAAE,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gCACzE,CAAC,uBAGM,IACK,IACT,IACH,CACT,CAAC;AACJ,CAAC"}

package/dist/identity/ui/org/OrganizationPage.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Organization (#726, PP-6.7): the people of the CURRENT organization, for
+ * its administrator. Reached through the `Organization` card
+ * (`/admin/settings/organization`, `org_members:read`, `feature: 'orgs'`).
+ *
+ * TWO TABS, ONE DESTINATION, the `UsersPage` precedent: Members and Invites
+ * are parallel answers to one question ("who belongs to this org"), not two
+ * settings pages. The Invites tab gates its own content on `org_invites:read`
+ * because its data comes from a different controller
+ * (`org-invites.controller.ts`); a destination gate is about reachability, a
+ * tab gate about content.
+ *
+ * "Current" is the org the session's token is bound to (the AppBar switcher
+ * changes it); no org id is ever sent from here.
+ */
+import type { ReactElement } from 'react';
+import type { PageSlotsBase } from '../../../core/index.js';
+import type { OrgMembersPanelSlots } from './OrgMembersPanel.js';
+/**
+ * The slots of {@link OrganizationPage}: the page-slot contract and the member
+ * list's slots (`RowActions`, `DetailPanel`, `Toolbar`, passed to the Members
+ * tab). `Sections` is drawn at both ends of the page body, outside the tab strip.
+ *
+ * @example
+ * ```tsx
+ * <OrganizationPage slots={{ BeforeContent: SeatsNotice, RowActions: ({ row }) => <SeatMenu userId={row.userId} /> }} />
+ * ```
+ *
+ * @extensionPoint slot
+ * @stability experimental
+ */
+export interface OrganizationPageSlots extends PageSlotsBase, OrgMembersPanelSlots {
+}
+/**
+ * Props of {@link OrganizationPage}.
+ *
+ * @stability experimental
+ */
+export interface OrganizationPageProps {
+    /** Add to the page without a fork. */
+    slots?: OrganizationPageSlots;
+}
+/**
+ * The `Organization` page (`/admin/settings/organization`): the current
+ * organization's Members tab and, gated on `org_invites:read`, its Invites tab.
+ *
+ * @param props - see {@link OrganizationPageProps}.
+ * @returns the page.
+ *
+ * @extensionPoint component
+ * @stability stable
+ */
+export declare function OrganizationPage({ slots }?: OrganizationPageProps): ReactElement;
+//# sourceMappingURL=OrganizationPage.d.ts.map

package/dist/identity/ui/org/OrganizationPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationPage.d.ts","sourceRoot":"","sources":["../../../../src/identity/ui/org/OrganizationPage.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAG1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAK5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAoBjE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAsB,SAAQ,aAAa,EAAE,oBAAoB;CAAG;AAErF;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,KAAK,CAAC,EAAE,qBAAqB,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAE,qBAA0B,GAAG,YAAY,CAkEpF"}