@opengeni/react 6.5.2-canary.41607687019001 → 6.7.0

package/dist/ui/access-list.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/ui/access-list.tsx"],"sourcesContent":["/* ----------------------------------------------------------------------------\n   AccessList - the one membership editor, used everywhere access is edited:\n   Workspace Access, the person sheet, the workspace sheet and the invite\n   dialog. Same rows, verbs and role definitions in all four places.\n\n   Roles come from the server's role catalog (see RoleSelect). You and owners\n   are always listed. Service accounts sit in their own subgroup.\n\n   Variants:\n   - \"inline\" (default): avatar, name and email, a role select that saves\n     immediately, and a menu with Remove.\n   - \"text\": quieter rows with the role as text; the whole row opens the\n     person sheet, where the role is changed.\n   - \"matrix\": people by workspaces, one role per cell. Only for a few\n     workspaces.\n   -------------------------------------------------------------------------- */\n\nimport { useId, type ReactNode } from \"react\";\nimport {\n  BotIcon,\n  ChevronRightIcon,\n  MailIcon,\n  MoreHorizontalIcon,\n  RotateCcwIcon,\n  SlidersHorizontalIcon,\n  UserMinusIcon,\n  XIcon,\n} from \"lucide-react\";\n\nimport { cn } from \"../lib/cn\";\nimport { Avatar, AvatarFallback } from \"./avatar\";\nimport { Button } from \"./button\";\nimport {\n  DropdownMenu,\n  DropdownMenuContent,\n  DropdownMenuItem,\n  DropdownMenuSeparator,\n  DropdownMenuTrigger,\n} from \"./dropdown-menu\";\nimport { MetaChip } from \"./meta-chip\";\nimport { failedLoadParts, type FailedLoad } from \"./diff-view\";\nimport { ErrorMessage } from \"./error-message\";\nimport { InlineDisabledReason } from \"./select-menu\";\nimport { Skeleton } from \"./skeleton\";\nimport { StatusBadge } from \"./status-badge\";\nimport { RoleSelect, roleLabel, type RoleOption, type RoleValue } from \"./role-select\";\n\nexport type AccessMemberStatus = \"active\" | \"invited\" | \"invite_failed\" | \"suspended\";\n\nexport interface AccessMember<R extends string = string> {\n  id: string;\n  name: string;\n  /** Service accounts have none. */\n  email?: string | null | undefined;\n  initials: string;\n  kind?: \"person\" | \"service\" | undefined;\n  isYou?: boolean | undefined;\n  /**\n   * The viewer administers this list from above (an organization owner or\n   * admin on the organization's workspace page), so their own row stays\n   * editable: they set and remove their own access like anyone else's.\n   */\n  managesOwnAccess?: boolean | undefined;\n  /** Owners are always listed and can't be removed here. */\n  isOwner?: boolean | undefined;\n  /** A small tag after the name, for example \"Only owner\". */\n  tag?: string | undefined;\n  status?: AccessMemberStatus | undefined;\n  /** \"Invited · expires in 5 days\". Shown only when not active. */\n  statusLabel?: string | undefined;\n  /** The role in this list's scope. */\n  role: RoleValue<R>;\n  /** For a legacy custom grant: the role \"Reset to role\" goes back to. */\n  resetRole?: R | undefined;\n  /** Why this person's role can't be changed here. */\n  roleLockedReason?: string | undefined;\n  /** Why this person can't be removed here. Owners and You never can. */\n  removeLockedReason?: string | undefined;\n  /** Matrix variant: the role per scope id (null is no access). */\n  grants?: Record<string, RoleValue<R>> | undefined;\n}\n\nexport interface AccessScope {\n  id: string;\n  /** \"Platform engineering\". */\n  label: string;\n}\n\nexport type AccessListVariant = \"inline\" | \"text\" | \"matrix\";\n\nexport interface AccessListProps<R extends string = string> {\n  members: readonly AccessMember<R>[];\n  /** From the server's role catalog, least to most access. */\n  roles: readonly RoleOption<R>[];\n  variant?: AccessListVariant | undefined;\n  /** Accessible name for the list: \"People with access to Platform engineering\". */\n  label: string;\n  /** Matrix columns. */\n  scopes?: readonly AccessScope[] | undefined;\n  /** Saves a role. Return a promise to show the saving state. */\n  onRoleChange?: (\n    member: AccessMember<R>,\n    role: R | null,\n    scopeId?: string,\n  ) => void | Promise<unknown>;\n  onRemove?: ((member: AccessMember<R>) => void) | undefined;\n  /**\n   * Opens the hand-picked permission editor (\"Custom permissions…\" in the ⋯\n   * menu). Optional: most places only offer roles.\n   */\n  onCustomize?: ((member: AccessMember<R>) => void) | undefined;\n  /** Replaces a legacy custom grant with `member.resetRole`. */\n  onResetToRole?: ((member: AccessMember<R>) => void | Promise<unknown>) | undefined;\n  /** Text variant: opens the person sheet. */\n  onOpen?: ((member: AccessMember<R>) => void) | undefined;\n  onResendInvite?: ((member: AccessMember<R>) => void) | undefined;\n  onRevokeInvite?: ((member: AccessMember<R>) => void) | undefined;\n  /** When set, nothing can be changed and this line says why. */\n  readOnlyReason?: string | undefined;\n  loading?: boolean | undefined;\n  /** Skeleton rows while loading. Default 4. */\n  loadingRows?: number | undefined;\n  /** What happened, what to do next, and an optional retry. Replaces the list. */\n  error?: FailedLoad | undefined;\n  /** Members whose role is being saved elsewhere, shown with a spinner. */\n  savingIds?: readonly string[] | undefined;\n  /** Shown when only you have access. */\n  emptyMessage?: ReactNode | undefined;\n  /** \"Remove from workspace\" or \"Remove from organization\". */\n  removeLabel?: string | undefined;\n  /** What the list sits on, so the matrix's sticky column matches. Default \"bg\". */\n  canvas?: \"bg\" | \"surface\" | undefined;\n  /** Adds \"No access\" to role choices (matrix, person sheet). */\n  noAccessLabel?: string | undefined;\n  className?: string | undefined;\n}\n\n/** Service accounts go in their own subgroup, after the people. */\nexport function groupAccessMembers<R extends string>(\n  members: readonly AccessMember<R>[],\n): { people: AccessMember<R>[]; services: AccessMember<R>[] } {\n  const people = members.filter((member) => member.kind !== \"service\");\n  const services = members.filter((member) => member.kind === \"service\");\n  // You first, then owners, then everyone else in the order the server sent.\n  const rank = (member: AccessMember<R>) => (member.isYou ? 0 : member.isOwner ? 1 : 2);\n  return {\n    people: people\n      .map((member, index) => ({ member, index }))\n      .sort((a, b) => rank(a.member) - rank(b.member) || a.index - b.index)\n      .map(({ member }) => member),\n    services,\n  };\n}\n\n/** Why a member can't be removed, or null when they can. */\nexport function removeBlockedReason(member: AccessMember): string | null {\n  if (member.removeLockedReason) return member.removeLockedReason;\n  if (member.isYou && !member.managesOwnAccess) return \"You can't remove yourself here.\";\n  if (member.isOwner) return \"Owners always have access.\";\n  return null;\n}\n\nfunction isInvite(member: AccessMember): boolean {\n  return member.status === \"invited\" || member.status === \"invite_failed\";\n}\n\n/* ---------------------------------------------------------------- pieces */\n\nfunction MemberAvatar({ member }: { member: AccessMember }) {\n  if (member.kind === \"service\") {\n    return (\n      <span\n        aria-hidden=\"true\"\n        className=\"grid size-8 shrink-0 place-items-center rounded-[10px] border border-border bg-surface-2 text-fg-muted\"\n      >\n        <BotIcon className=\"size-4\" />\n      </span>\n    );\n  }\n  // Someone who hasn't joined yet: a dashed outline, the same initials.\n  const pending = isInvite(member);\n  return (\n    <Avatar aria-hidden=\"true\">\n      <AvatarFallback\n        className={cn(\n          \"text-xs font-semibold\",\n          pending\n            ? \"border border-dashed border-border-strong bg-transparent text-fg-subtle\"\n            : \"bg-surface-2 text-fg-muted\",\n        )}\n      >\n        {member.initials}\n      </AvatarFallback>\n    </Avatar>\n  );\n}\n\nfunction MemberIdentity({\n  member,\n  roles,\n  onResetToRole,\n  readOnly,\n}: {\n  member: AccessMember<string>;\n  roles: readonly RoleOption<string>[];\n  onResetToRole?: ((member: AccessMember<string>) => void | Promise<unknown>) | undefined;\n  readOnly: boolean;\n}) {\n  const showStatus = member.status && member.status !== \"active\" && member.statusLabel;\n  const secondary = member.kind === \"service\" ? \"Service account\" : member.email;\n  const resetTo =\n    member.role === \"custom\" && member.resetRole ? roleLabel(roles, member.resetRole) : null;\n  return (\n    <div className=\"min-w-0\">\n      {/* One line: the name truncates before the chip wraps. */}\n      <div className=\"flex min-w-0 items-center gap-2\">\n        <span className=\"min-w-0 truncate text-sm leading-5 font-medium text-fg\">\n          {member.name}\n        </span>\n        {member.isYou ? <MetaChip variant=\"outline\">You</MetaChip> : null}\n      </div>\n      {secondary || member.tag ? (\n        // Like a ListRow meta line: the separator trails its item, so a\n        // wrapped tag (\"Only owner\") starts its own line cleanly.\n        <div className=\"flex min-w-0 flex-wrap items-center gap-x-1.5 text-xs leading-4.5 text-fg-muted\">\n          {secondary ? (\n            <span className=\"inline-flex max-w-full min-w-0 items-center gap-1.5\">\n              <span className=\"min-w-0 truncate\">{secondary}</span>\n              {member.tag ? (\n                <span aria-hidden=\"true\" className=\"text-fg-subtle\">\n                  ·\n                </span>\n              ) : null}\n            </span>\n          ) : null}\n          {member.tag ? <span className=\"whitespace-nowrap\">{member.tag}</span> : null}\n        </div>\n      ) : null}\n      {showStatus ? (\n        <div className=\"mt-0.5 flex min-w-0\">\n          <StatusBadge variant=\"dot\" status={member.status} className=\"min-w-0\">\n            {member.statusLabel}\n          </StatusBadge>\n        </div>\n      ) : null}\n      {member.role === \"custom\" ? (\n        // The reset link carries its own icon, so it needs no separator (and no\n        // dot is left dangling when it wraps under the text on narrow rows).\n        <div className=\"flex min-w-0 flex-wrap items-center gap-x-2 text-xs leading-4.5 text-fg-muted\">\n          <span className=\"whitespace-nowrap\">Hand-picked permissions</span>\n          {resetTo && onResetToRole && !readOnly ? (\n            <button\n              type=\"button\"\n              onClick={() => void onResetToRole(member)}\n              className=\"inline-flex items-center gap-1 rounded-[6px] font-medium whitespace-nowrap og-link pointer-coarse:min-h-11\"\n            >\n              <RotateCcwIcon aria-hidden=\"true\" className=\"size-3\" />\n              Reset to {resetTo}\n            </button>\n          ) : null}\n        </div>\n      ) : null}\n    </div>\n  );\n}\n\nfunction RowMenu({\n  member,\n  removeLabel,\n  onRemove,\n  onCustomize,\n  onResetToRole,\n  onResendInvite,\n  onRevokeInvite,\n  roles,\n}: {\n  member: AccessMember<string>;\n  removeLabel: string;\n  onRemove?: ((member: AccessMember<string>) => void) | undefined;\n  onCustomize?: ((member: AccessMember<string>) => void) | undefined;\n  onResetToRole?: ((member: AccessMember<string>) => void | Promise<unknown>) | undefined;\n  onResendInvite?: ((member: AccessMember<string>) => void) | undefined;\n  onRevokeInvite?: ((member: AccessMember<string>) => void) | undefined;\n  roles: readonly RoleOption<string>[];\n}) {\n  const invite = isInvite(member);\n  const blocked = removeBlockedReason(member);\n  const canReset = member.role === \"custom\" && member.resetRole && onResetToRole;\n  // Custom permissions follow the same rule as the role: never your own.\n  const canCustomize =\n    Boolean(onCustomize) && (!member.isYou || member.managesOwnAccess) && !member.isOwner;\n  const hasItems = invite\n    ? Boolean(onResendInvite || onRevokeInvite)\n    : Boolean((onRemove && !blocked) || canReset || canCustomize);\n  if (!hasItems) return <span aria-hidden=\"true\" className=\"size-8\" />;\n  return (\n    <DropdownMenu modal={false}>\n      <DropdownMenuTrigger asChild>\n        <button\n          type=\"button\"\n          aria-label={`More actions for ${member.name}`}\n          className=\"grid size-8 shrink-0 place-items-center rounded-[10px] text-fg-subtle transition-colors duration-[120ms] outline-hidden hover:bg-surface-3 hover:text-fg focus-visible:ring-2 focus-visible:ring-brand/55 data-[state=open]:bg-surface-3 data-[state=open]:text-fg pointer-coarse:size-11\"\n        >\n          <MoreHorizontalIcon aria-hidden=\"true\" className=\"size-4\" />\n        </button>\n      </DropdownMenuTrigger>\n      {/* Same menu as a ListRow's ⋯: default content, icon + verb per item. */}\n      <DropdownMenuContent align=\"end\" className=\"min-w-44\">\n        {invite ? (\n          <>\n            {onResendInvite ? (\n              <DropdownMenuItem onSelect={() => onResendInvite(member)}>\n                <MailIcon />\n                Resend invitation\n              </DropdownMenuItem>\n            ) : null}\n            {onRevokeInvite ? (\n              <DropdownMenuItem variant=\"destructive\" onSelect={() => onRevokeInvite(member)}>\n                <XIcon />\n                Revoke invitation\n              </DropdownMenuItem>\n            ) : null}\n          </>\n        ) : (\n          <>\n            {canReset ? (\n              <DropdownMenuItem onSelect={() => void onResetToRole!(member)}>\n                <RotateCcwIcon />\n                Reset to {roleLabel(roles, member.resetRole!)}\n              </DropdownMenuItem>\n            ) : null}\n            {canCustomize ? (\n              <DropdownMenuItem onSelect={() => onCustomize!(member)}>\n                <SlidersHorizontalIcon />\n                Custom permissions…\n              </DropdownMenuItem>\n            ) : null}\n            {(canReset || canCustomize) && onRemove && !blocked ? <DropdownMenuSeparator /> : null}\n            {onRemove && !blocked ? (\n              <DropdownMenuItem variant=\"destructive\" onSelect={() => onRemove(member)}>\n                <UserMinusIcon />\n                {removeLabel}\n              </DropdownMenuItem>\n            ) : null}\n          </>\n        )}\n      </DropdownMenuContent>\n    </DropdownMenu>\n  );\n}\n\nfunction roleLockReason(\n  member: AccessMember,\n  readOnlyReason: string | undefined,\n): string | undefined {\n  if (readOnlyReason) return undefined; // read-only lists show text, not locked controls\n  if (member.roleLockedReason) return member.roleLockedReason;\n  if (member.isYou && !member.managesOwnAccess) {\n    return \"You can't change your own role. Ask another admin.\";\n  }\n  return undefined;\n}\n\n/* ---------------------------------------------------------------- states */\n\nfunction LoadingRows({ rows, variant }: { rows: number; variant: AccessListVariant }) {\n  return (\n    <ul aria-hidden=\"true\" className=\"flex flex-col divide-y divide-border\">\n      {Array.from({ length: rows }, (_, index) => (\n        // oxlint-disable-next-line react/no-array-index-key -- static placeholders\n        <li key={index} className=\"flex min-h-14 items-center gap-3 px-3 py-3\">\n          <Skeleton className=\"size-8 shrink-0 rounded-full bg-surface-3\" />\n          <div className=\"flex min-w-0 flex-1 flex-col gap-1.5\">\n            <Skeleton className=\"h-3.5 w-36 max-w-[60%] rounded-full bg-surface-3\" />\n            <Skeleton className=\"h-3 w-48 max-w-[80%] rounded-full bg-surface-3\" />\n          </div>\n          {variant === \"inline\" ? (\n            <Skeleton className=\"hidden h-8 w-[12.5rem] shrink-0 rounded-[10px] bg-surface-3 @md/access:block\" />\n          ) : (\n            <Skeleton className=\"h-3.5 w-20 shrink-0 rounded-full bg-surface-3\" />\n          )}\n        </li>\n      ))}\n    </ul>\n  );\n}\n\nfunction ErrorState({ error }: { error: NonNullable<AccessListProps[\"error\"]> }) {\n  const failure = failedLoadParts(error);\n  return (\n    <ErrorMessage\n      title={error.message}\n      details={failure.details}\n      align=\"center\"\n      announce\n      action={\n        error.onRetry ? (\n          <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={error.onRetry}>\n            Try again\n          </Button>\n        ) : undefined\n      }\n    >\n      {failure.detail}\n    </ErrorMessage>\n  );\n}\n\n/* ---------------------------------------------------------------- variants */\n\ninterface RowProps {\n  member: AccessMember<string>;\n  props: AccessListProps<string>;\n}\n\nfunction InlineRow({ member, props }: RowProps) {\n  const { roles, onRoleChange, readOnlyReason, noAccessLabel } = props;\n  const readOnly = Boolean(readOnlyReason);\n  const lockReason = roleLockReason(member, readOnlyReason);\n  return (\n    <li className=\"grid min-h-14 grid-cols-[2rem_minmax(0,1fr)_auto] items-center gap-x-3 gap-y-2 px-3 py-3 @md/access:grid-cols-[2rem_minmax(0,1fr)_12.5rem_2rem]\">\n      <div className=\"row-start-1 self-start @md/access:self-center\">\n        <MemberAvatar member={member} />\n      </div>\n      <div className=\"row-start-1 min-w-0\">\n        <MemberIdentity\n          member={member}\n          roles={roles}\n          onResetToRole={props.onResetToRole}\n          readOnly={readOnly}\n        />\n      </div>\n      <div className=\"col-span-2 col-start-2 row-start-2 min-w-0 @md/access:col-span-1 @md/access:col-start-3 @md/access:row-start-1\">\n        {readOnly ? (\n          <RoleSelect\n            variant=\"text\"\n            roles={roles}\n            value={member.role}\n            noAccessLabel={noAccessLabel}\n          />\n        ) : (\n          <RoleSelect\n            roles={roles}\n            value={member.role}\n            subjectName={member.name}\n            noAccessLabel={noAccessLabel}\n            disabledReason={lockReason}\n            pending={props.savingIds?.includes(member.id)}\n            onValueChange={onRoleChange ? (role) => onRoleChange(member, role) : undefined}\n            className=\"w-full max-w-[12.5rem] @md/access:max-w-none\"\n          />\n        )}\n      </div>\n      <div className=\"col-start-3 row-start-1 flex justify-end @md/access:col-start-4\">\n        {readOnly ? null : (\n          <RowMenu\n            member={member}\n            roles={roles}\n            removeLabel={props.removeLabel ?? \"Remove from workspace\"}\n            onRemove={props.onRemove}\n            onCustomize={props.onCustomize}\n            onResetToRole={props.onResetToRole}\n            onResendInvite={props.onResendInvite}\n            onRevokeInvite={props.onRevokeInvite}\n          />\n        )}\n      </div>\n    </li>\n  );\n}\n\nfunction TextRow({ member, props }: RowProps) {\n  const { roles, onOpen, noAccessLabel } = props;\n  const content = (\n    <>\n      <MemberAvatar member={member} />\n      <div className=\"min-w-0 flex-1\">\n        <MemberIdentity member={member} roles={roles} readOnly />\n      </div>\n      <span\n        className={cn(\n          \"shrink-0 text-sm\",\n          member.role === null ? \"text-fg-subtle\" : \"text-fg-muted\",\n        )}\n      >\n        {roleLabel(roles, member.role, { noAccessLabel })}\n      </span>\n      {onOpen ? (\n        <ChevronRightIcon aria-hidden=\"true\" className=\"size-4 shrink-0 text-fg-subtle\" />\n      ) : null}\n    </>\n  );\n  return (\n    <li className=\"min-w-0\">\n      {onOpen ? (\n        <button\n          type=\"button\"\n          onClick={() => onOpen(member)}\n          aria-label={`${member.name}, ${roleLabel(roles, member.role, { noAccessLabel })}`}\n          className=\"flex min-h-14 w-full min-w-0 items-center gap-3 px-3 py-3 text-left transition-colors duration-[120ms] outline-hidden hover:bg-surface-2 focus-visible:outline-2 focus-visible:-outline-offset-2 focus-visible:outline-brand/55\"\n        >\n          {content}\n        </button>\n      ) : (\n        <div className=\"flex min-h-14 min-w-0 items-center gap-3 px-3 py-3\">{content}</div>\n      )}\n    </li>\n  );\n}\n\nfunction ListVariant({ props }: { props: AccessListProps<string> }) {\n  const { people, services } = groupAccessMembers(props.members);\n  const servicesId = useId();\n  const Row = props.variant === \"text\" ? TextRow : InlineRow;\n  // Both list layouts use the resource row's hairlines (see ListRow).\n  const listClass = \"flex min-w-0 flex-col divide-y divide-border\";\n  const onlyYou = people.length <= 1 && services.length === 0;\n  return (\n    <>\n      <ul aria-label={props.label} className={listClass}>\n        {people.map((member) => (\n          <Row key={member.id} member={member} props={props} />\n        ))}\n      </ul>\n      {onlyYou && props.emptyMessage ? (\n        <p className=\"border-t border-border px-3 pt-3 text-sm text-fg-muted\">\n          {props.emptyMessage}\n        </p>\n      ) : null}\n      {services.length > 0 ? (\n        <div className=\"border-t border-border pt-4\">\n          <h3 id={servicesId} className=\"px-3 text-xs leading-4.5 font-medium text-fg\">\n            Service accounts\n          </h3>\n          <ul aria-labelledby={servicesId} className={cn(listClass, \"mt-1\")}>\n            {services.map((member) => (\n              <Row key={member.id} member={member} props={props} />\n            ))}\n          </ul>\n        </div>\n      ) : null}\n    </>\n  );\n}\n\nfunction MatrixVariant({ props }: { props: AccessListProps<string> }) {\n  const { roles, scopes = [], onRoleChange, readOnlyReason, noAccessLabel = \"No access\" } = props;\n  const { people, services } = groupAccessMembers(props.members);\n  const readOnly = Boolean(readOnlyReason);\n  const cellClass = \"border-b border-border px-1.5 py-1.5 align-middle\";\n  // Sticky cells need an opaque fill that matches what the list sits on.\n  const sticky = props.canvas === \"surface\" ? \"bg-surface\" : \"bg-bg\";\n  const renderRow = (member: AccessMember<string>) => {\n    const lockReason = roleLockReason(member, readOnlyReason);\n    return (\n      <tr key={member.id}>\n        <th\n          scope=\"row\"\n          className={cn(cellClass, sticky, \"sticky left-0 z-10 pr-4 pl-0 text-left font-normal\")}\n        >\n          <div className=\"flex min-w-0 items-center gap-3\">\n            <MemberAvatar member={member} />\n            <MemberIdentity member={member} roles={roles} readOnly />\n          </div>\n        </th>\n        {scopes.map((scope) => {\n          const value = member.grants?.[scope.id] ?? null;\n          return (\n            <td key={scope.id} className={cellClass}>\n              {readOnly ? (\n                <span className=\"px-2\">\n                  <RoleSelect\n                    variant=\"text\"\n                    roles={roles}\n                    value={value}\n                    noAccessLabel={noAccessLabel}\n                  />\n                </span>\n              ) : (\n                <RoleSelect\n                  variant=\"cell\"\n                  roles={roles}\n                  value={value}\n                  noAccessLabel={noAccessLabel}\n                  subjectName={member.name}\n                  aria-label={`${member.name} in ${scope.label}`}\n                  disabledReason={lockReason}\n                  align=\"start\"\n                  onValueChange={\n                    onRoleChange ? (role) => onRoleChange(member, role, scope.id) : undefined\n                  }\n                />\n              )}\n            </td>\n          );\n        })}\n      </tr>\n    );\n  };\n  return (\n    <div\n      role=\"region\"\n      aria-label={props.label}\n      // A scrollable region must be reachable by keyboard.\n      tabIndex={0}\n      className=\"-mx-1 min-w-0 overflow-x-auto px-1 pb-1\"\n    >\n      <table\n        className=\"w-full table-fixed border-separate border-spacing-0 text-sm\"\n        style={{ minWidth: `${16 + scopes.length * 11}rem` }}\n      >\n        <colgroup>\n          <col className=\"w-52 @md/access:w-64\" />\n          {scopes.map((scope) => (\n            <col key={scope.id} className=\"w-44\" />\n          ))}\n        </colgroup>\n        <thead>\n          <tr>\n            <th\n              scope=\"col\"\n              className={cn(\n                sticky,\n                \"sticky left-0 z-10 border-b border-border pr-4 pb-2 text-left text-xs leading-4.5 font-medium text-fg-subtle\",\n              )}\n            >\n              Person\n            </th>\n            {scopes.map((scope) => (\n              <th\n                key={scope.id}\n                scope=\"col\"\n                className=\"truncate border-b border-border px-3.5 pb-2 text-left text-xs leading-4.5 font-medium text-fg-subtle\"\n              >\n                {scope.label}\n              </th>\n            ))}\n          </tr>\n        </thead>\n        <tbody>\n          {people.map(renderRow)}\n          {services.length > 0 ? (\n            <tr>\n              <th\n                scope=\"colgroup\"\n                colSpan={scopes.length + 1}\n                className={cn(\n                  sticky,\n                  \"border-b border-border pt-4 pb-1.5 text-left text-xs leading-4.5 font-medium text-fg-subtle\",\n                )}\n              >\n                Service accounts\n              </th>\n            </tr>\n          ) : null}\n          {services.map(renderRow)}\n        </tbody>\n      </table>\n    </div>\n  );\n}\n\n/** Who has access, with one role each. */\nexport function AccessList<R extends string>(props: AccessListProps<R>) {\n  const { variant = \"inline\", loading, loadingRows = 4, error, readOnlyReason, className } = props;\n  // Rows are generic over the role id; internally they only pass ids through.\n  const erased = { ...props, variant } as unknown as AccessListProps<string>;\n  return (\n    <div\n      data-variant={variant}\n      aria-busy={loading || undefined}\n      className={cn(\"@container/access min-w-0\", className)}\n    >\n      {readOnlyReason && !loading && !error ? (\n        <p className=\"mb-1 flex min-w-0 px-3\">\n          <InlineDisabledReason>{readOnlyReason}</InlineDisabledReason>\n        </p>\n      ) : null}\n      {loading ? (\n        <>\n          <span className=\"sr-only\">Loading who has access</span>\n          <LoadingRows rows={loadingRows} variant={variant} />\n        </>\n      ) : error ? (\n        <ErrorState error={error} />\n      ) : variant === \"matrix\" ? (\n        <MatrixVariant props={erased} />\n      ) : (\n        <ListVariant props={erased} />\n      )}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,SAAS,aAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAoJC,SAsIE,UAtIF,KAwCF,YAxCE;AArCD,SAAS,mBACd,SAC4D;AAC5D,QAAM,SAAS,QAAQ,OAAO,CAAC,WAAW,OAAO,SAAS,SAAS;AACnE,QAAM,WAAW,QAAQ,OAAO,CAAC,WAAW,OAAO,SAAS,SAAS;AAErE,QAAM,OAAO,CAAC,WAA6B,OAAO,QAAQ,IAAI,OAAO,UAAU,IAAI;AACnF,SAAO;AAAA,IACL,QAAQ,OACL,IAAI,CAAC,QAAQ,WAAW,EAAE,QAAQ,MAAM,EAAE,EAC1C,KAAK,CAAC,GAAG,MAAM,KAAK,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,KAAK,EAAE,QAAQ,EAAE,KAAK,EACnE,IAAI,CAAC,EAAE,OAAO,MAAM,MAAM;AAAA,IAC7B;AAAA,EACF;AACF;AAGO,SAAS,oBAAoB,QAAqC;AACvE,MAAI,OAAO,mBAAoB,QAAO,OAAO;AAC7C,MAAI,OAAO,SAAS,CAAC,OAAO,iBAAkB,QAAO;AACrD,MAAI,OAAO,QAAS,QAAO;AAC3B,SAAO;AACT;AAEA,SAAS,SAAS,QAA+B;AAC/C,SAAO,OAAO,WAAW,aAAa,OAAO,WAAW;AAC1D;AAIA,SAAS,aAAa,EAAE,OAAO,GAA6B;AAC1D,MAAI,OAAO,SAAS,WAAW;AAC7B,WACE;AAAA,MAAC;AAAA;AAAA,QACC,eAAY;AAAA,QACZ,WAAU;AAAA,QAEV,8BAAC,WAAQ,WAAU,UAAS;AAAA;AAAA,IAC9B;AAAA,EAEJ;AAEA,QAAM,UAAU,SAAS,MAAM;AAC/B,SACE,oBAAC,UAAO,eAAY,QAClB;AAAA,IAAC;AAAA;AAAA,MACC,WAAW;AAAA,QACT;AAAA,QACA,UACI,4EACA;AAAA,MACN;AAAA,MAEC,iBAAO;AAAA;AAAA,EACV,GACF;AAEJ;AAEA,SAAS,eAAe;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKG;AACD,QAAM,aAAa,OAAO,UAAU,OAAO,WAAW,YAAY,OAAO;AACzE,QAAM,YAAY,OAAO,SAAS,YAAY,oBAAoB,OAAO;AACzE,QAAM,UACJ,OAAO,SAAS,YAAY,OAAO,YAAY,UAAU,OAAO,OAAO,SAAS,IAAI;AACtF,SACE,qBAAC,SAAI,WAAU,WAEb;AAAA,yBAAC,SAAI,WAAU,mCACb;AAAA,0BAAC,UAAK,WAAU,0DACb,iBAAO,MACV;AAAA,MACC,OAAO,QAAQ,oBAAC,YAAS,SAAQ,WAAU,iBAAG,IAAc;AAAA,OAC/D;AAAA,IACC,aAAa,OAAO;AAAA;AAAA;AAAA,MAGnB,qBAAC,SAAI,WAAU,mFACZ;AAAA,oBACC,qBAAC,UAAK,WAAU,uDACd;AAAA,8BAAC,UAAK,WAAU,oBAAoB,qBAAU;AAAA,UAC7C,OAAO,MACN,oBAAC,UAAK,eAAY,QAAO,WAAU,kBAAiB,kBAEpD,IACE;AAAA,WACN,IACE;AAAA,QACH,OAAO,MAAM,oBAAC,UAAK,WAAU,qBAAqB,iBAAO,KAAI,IAAU;AAAA,SAC1E;AAAA,QACE;AAAA,IACH,aACC,oBAAC,SAAI,WAAU,uBACb,8BAAC,eAAY,SAAQ,OAAM,QAAQ,OAAO,QAAQ,WAAU,WACzD,iBAAO,aACV,GACF,IACE;AAAA,IACH,OAAO,SAAS;AAAA;AAAA;AAAA,MAGf,qBAAC,SAAI,WAAU,iFACb;AAAA,4BAAC,UAAK,WAAU,qBAAoB,qCAAuB;AAAA,QAC1D,WAAW,iBAAiB,CAAC,WAC5B;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,KAAK,cAAc,MAAM;AAAA,YACxC,WAAU;AAAA,YAEV;AAAA,kCAAC,iBAAc,eAAY,QAAO,WAAU,UAAS;AAAA,cAAE;AAAA,cAC7C;AAAA;AAAA;AAAA,QACZ,IACE;AAAA,SACN;AAAA,QACE;AAAA,KACN;AAEJ;AAEA,SAAS,QAAQ;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GASG;AACD,QAAM,SAAS,SAAS,MAAM;AAC9B,QAAM,UAAU,oBAAoB,MAAM;AAC1C,QAAM,WAAW,OAAO,SAAS,YAAY,OAAO,aAAa;AAEjE,QAAM,eACJ,QAAQ,WAAW,MAAM,CAAC,OAAO,SAAS,OAAO,qBAAqB,CAAC,OAAO;AAChF,QAAM,WAAW,SACb,QAAQ,kBAAkB,cAAc,IACxC,QAAS,YAAY,CAAC,WAAY,YAAY,YAAY;AAC9D,MAAI,CAAC,SAAU,QAAO,oBAAC,UAAK,eAAY,QAAO,WAAU,UAAS;AAClE,SACE,qBAAC,gBAAa,OAAO,OACnB;AAAA,wBAAC,uBAAoB,SAAO,MAC1B;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,cAAY,oBAAoB,OAAO,IAAI;AAAA,QAC3C,WAAU;AAAA,QAEV,8BAAC,sBAAmB,eAAY,QAAO,WAAU,UAAS;AAAA;AAAA,IAC5D,GACF;AAAA,IAEA,oBAAC,uBAAoB,OAAM,OAAM,WAAU,YACxC,mBACC,iCACG;AAAA,uBACC,qBAAC,oBAAiB,UAAU,MAAM,eAAe,MAAM,GACrD;AAAA,4BAAC,YAAS;AAAA,QAAE;AAAA,SAEd,IACE;AAAA,MACH,iBACC,qBAAC,oBAAiB,SAAQ,eAAc,UAAU,MAAM,eAAe,MAAM,GAC3E;AAAA,4BAAC,SAAM;AAAA,QAAE;AAAA,SAEX,IACE;AAAA,OACN,IAEA,iCACG;AAAA,iBACC,qBAAC,oBAAiB,UAAU,MAAM,KAAK,cAAe,MAAM,GAC1D;AAAA,4BAAC,iBAAc;AAAA,QAAE;AAAA,QACP,UAAU,OAAO,OAAO,SAAU;AAAA,SAC9C,IACE;AAAA,MACH,eACC,qBAAC,oBAAiB,UAAU,MAAM,YAAa,MAAM,GACnD;AAAA,4BAAC,yBAAsB;AAAA,QAAE;AAAA,SAE3B,IACE;AAAA,OACF,YAAY,iBAAiB,YAAY,CAAC,UAAU,oBAAC,yBAAsB,IAAK;AAAA,MACjF,YAAY,CAAC,UACZ,qBAAC,oBAAiB,SAAQ,eAAc,UAAU,MAAM,SAAS,MAAM,GACrE;AAAA,4BAAC,iBAAc;AAAA,QACd;AAAA,SACH,IACE;AAAA,OACN,GAEJ;AAAA,KACF;AAEJ;AAEA,SAAS,eACP,QACA,gBACoB;AACpB,MAAI,eAAgB,QAAO;AAC3B,MAAI,OAAO,iBAAkB,QAAO,OAAO;AAC3C,MAAI,OAAO,SAAS,CAAC,OAAO,kBAAkB;AAC5C,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAIA,SAAS,YAAY,EAAE,MAAM,QAAQ,GAAiD;AACpF,SACE,oBAAC,QAAG,eAAY,QAAO,WAAU,wCAC9B,gBAAM,KAAK,EAAE,QAAQ,KAAK,GAAG,CAAC,GAAG;AAAA;AAAA,IAEhC,qBAAC,QAAe,WAAU,8CACxB;AAAA,0BAAC,YAAS,WAAU,6CAA4C;AAAA,MAChE,qBAAC,SAAI,WAAU,wCACb;AAAA,4BAAC,YAAS,WAAU,oDAAmD;AAAA,QACvE,oBAAC,YAAS,WAAU,kDAAiD;AAAA,SACvE;AAAA,MACC,YAAY,WACX,oBAAC,YAAS,WAAU,gFAA+E,IAEnG,oBAAC,YAAS,WAAU,iDAAgD;AAAA,SAT/D,KAWT;AAAA,GACD,GACH;AAEJ;AAEA,SAAS,WAAW,EAAE,MAAM,GAAqD;AAC/E,QAAM,UAAU,gBAAgB,KAAK;AACrC,SACE;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,MAAM;AAAA,MACb,SAAS,QAAQ;AAAA,MACjB,OAAM;AAAA,MACN,UAAQ;AAAA,MACR,QACE,MAAM,UACJ,oBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,SAAS,MAAM,SAAS,uBAE1E,IACE;AAAA,MAGL,kBAAQ;AAAA;AAAA,EACX;AAEJ;AASA,SAAS,UAAU,EAAE,QAAQ,MAAM,GAAa;AAC9C,QAAM,EAAE,OAAO,cAAc,gBAAgB,cAAc,IAAI;AAC/D,QAAM,WAAW,QAAQ,cAAc;AACvC,QAAM,aAAa,eAAe,QAAQ,cAAc;AACxD,SACE,qBAAC,QAAG,WAAU,mJACZ;AAAA,wBAAC,SAAI,WAAU,iDACb,8BAAC,gBAAa,QAAgB,GAChC;AAAA,IACA,oBAAC,SAAI,WAAU,uBACb;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,eAAe,MAAM;AAAA,QACrB;AAAA;AAAA,IACF,GACF;AAAA,IACA,oBAAC,SAAI,WAAU,kHACZ,qBACC;AAAA,MAAC;AAAA;AAAA,QACC,SAAQ;AAAA,QACR;AAAA,QACA,OAAO,OAAO;AAAA,QACd;AAAA;AAAA,IACF,IAEA;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,OAAO,OAAO;AAAA,QACd,aAAa,OAAO;AAAA,QACpB;AAAA,QACA,gBAAgB;AAAA,QAChB,SAAS,MAAM,WAAW,SAAS,OAAO,EAAE;AAAA,QAC5C,eAAe,eAAe,CAAC,SAAS,aAAa,QAAQ,IAAI,IAAI;AAAA,QACrE,WAAU;AAAA;AAAA,IACZ,GAEJ;AAAA,IACA,oBAAC,SAAI,WAAU,mEACZ,qBAAW,OACV;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,aAAa,MAAM,eAAe;AAAA,QAClC,UAAU,MAAM;AAAA,QAChB,aAAa,MAAM;AAAA,QACnB,eAAe,MAAM;AAAA,QACrB,gBAAgB,MAAM;AAAA,QACtB,gBAAgB,MAAM;AAAA;AAAA,IACxB,GAEJ;AAAA,KACF;AAEJ;AAEA,SAAS,QAAQ,EAAE,QAAQ,MAAM,GAAa;AAC5C,QAAM,EAAE,OAAO,QAAQ,cAAc,IAAI;AACzC,QAAM,UACJ,iCACE;AAAA,wBAAC,gBAAa,QAAgB;AAAA,IAC9B,oBAAC,SAAI,WAAU,kBACb,8BAAC,kBAAe,QAAgB,OAAc,UAAQ,MAAC,GACzD;AAAA,IACA;AAAA,MAAC;AAAA;AAAA,QACC,WAAW;AAAA,UACT;AAAA,UACA,OAAO,SAAS,OAAO,mBAAmB;AAAA,QAC5C;AAAA,QAEC,oBAAU,OAAO,OAAO,MAAM,EAAE,cAAc,CAAC;AAAA;AAAA,IAClD;AAAA,IACC,SACC,oBAAC,oBAAiB,eAAY,QAAO,WAAU,kCAAiC,IAC9E;AAAA,KACN;AAEF,SACE,oBAAC,QAAG,WAAU,WACX,mBACC;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,SAAS,MAAM,OAAO,MAAM;AAAA,MAC5B,cAAY,GAAG,OAAO,IAAI,KAAK,UAAU,OAAO,OAAO,MAAM,EAAE,cAAc,CAAC,CAAC;AAAA,MAC/E,WAAU;AAAA,MAET;AAAA;AAAA,EACH,IAEA,oBAAC,SAAI,WAAU,sDAAsD,mBAAQ,GAEjF;AAEJ;AAEA,SAAS,YAAY,EAAE,MAAM,GAAuC;AAClE,QAAM,EAAE,QAAQ,SAAS,IAAI,mBAAmB,MAAM,OAAO;AAC7D,QAAM,aAAa,MAAM;AACzB,QAAM,MAAM,MAAM,YAAY,SAAS,UAAU;AAEjD,QAAM,YAAY;AAClB,QAAM,UAAU,OAAO,UAAU,KAAK,SAAS,WAAW;AAC1D,SACE,iCACE;AAAA,wBAAC,QAAG,cAAY,MAAM,OAAO,WAAW,WACrC,iBAAO,IAAI,CAAC,WACX,oBAAC,OAAoB,QAAgB,SAA3B,OAAO,EAAkC,CACpD,GACH;AAAA,IACC,WAAW,MAAM,eAChB,oBAAC,OAAE,WAAU,0DACV,gBAAM,cACT,IACE;AAAA,IACH,SAAS,SAAS,IACjB,qBAAC,SAAI,WAAU,+BACb;AAAA,0BAAC,QAAG,IAAI,YAAY,WAAU,gDAA+C,8BAE7E;AAAA,MACA,oBAAC,QAAG,mBAAiB,YAAY,WAAW,GAAG,WAAW,MAAM,GAC7D,mBAAS,IAAI,CAAC,WACb,oBAAC,OAAoB,QAAgB,SAA3B,OAAO,EAAkC,CACpD,GACH;AAAA,OACF,IACE;AAAA,KACN;AAEJ;AAEA,SAAS,cAAc,EAAE,MAAM,GAAuC;AACpE,QAAM,EAAE,OAAO,SAAS,CAAC,GAAG,cAAc,gBAAgB,gBAAgB,YAAY,IAAI;AAC1F,QAAM,EAAE,QAAQ,SAAS,IAAI,mBAAmB,MAAM,OAAO;AAC7D,QAAM,WAAW,QAAQ,cAAc;AACvC,QAAM,YAAY;AAElB,QAAM,SAAS,MAAM,WAAW,YAAY,eAAe;AAC3D,QAAM,YAAY,CAAC,WAAiC;AAClD,UAAM,aAAa,eAAe,QAAQ,cAAc;AACxD,WACE,qBAAC,QACC;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,OAAM;AAAA,UACN,WAAW,GAAG,WAAW,QAAQ,oDAAoD;AAAA,UAErF,+BAAC,SAAI,WAAU,mCACb;AAAA,gCAAC,gBAAa,QAAgB;AAAA,YAC9B,oBAAC,kBAAe,QAAgB,OAAc,UAAQ,MAAC;AAAA,aACzD;AAAA;AAAA,MACF;AAAA,MACC,OAAO,IAAI,CAAC,UAAU;AACrB,cAAM,QAAQ,OAAO,SAAS,MAAM,EAAE,KAAK;AAC3C,eACE,oBAAC,QAAkB,WAAW,WAC3B,qBACC,oBAAC,UAAK,WAAU,QACd;AAAA,UAAC;AAAA;AAAA,YACC,SAAQ;AAAA,YACR;AAAA,YACA;AAAA,YACA;AAAA;AAAA,QACF,GACF,IAEA;AAAA,UAAC;AAAA;AAAA,YACC,SAAQ;AAAA,YACR;AAAA,YACA;AAAA,YACA;AAAA,YACA,aAAa,OAAO;AAAA,YACpB,cAAY,GAAG,OAAO,IAAI,OAAO,MAAM,KAAK;AAAA,YAC5C,gBAAgB;AAAA,YAChB,OAAM;AAAA,YACN,eACE,eAAe,CAAC,SAAS,aAAa,QAAQ,MAAM,MAAM,EAAE,IAAI;AAAA;AAAA,QAEpE,KAvBK,MAAM,EAyBf;AAAA,MAEJ,CAAC;AAAA,SAxCM,OAAO,EAyChB;AAAA,EAEJ;AACA,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,cAAY,MAAM;AAAA,MAElB,UAAU;AAAA,MACV,WAAU;AAAA,MAEV;AAAA,QAAC;AAAA;AAAA,UACC,WAAU;AAAA,UACV,OAAO,EAAE,UAAU,GAAG,KAAK,OAAO,SAAS,EAAE,MAAM;AAAA,UAEnD;AAAA,iCAAC,cACC;AAAA,kCAAC,SAAI,WAAU,wBAAuB;AAAA,cACrC,OAAO,IAAI,CAAC,UACX,oBAAC,SAAmB,WAAU,UAApB,MAAM,EAAqB,CACtC;AAAA,eACH;AAAA,YACA,oBAAC,WACC,+BAAC,QACC;AAAA;AAAA,gBAAC;AAAA;AAAA,kBACC,OAAM;AAAA,kBACN,WAAW;AAAA,oBACT;AAAA,oBACA;AAAA,kBACF;AAAA,kBACD;AAAA;AAAA,cAED;AAAA,cACC,OAAO,IAAI,CAAC,UACX;AAAA,gBAAC;AAAA;AAAA,kBAEC,OAAM;AAAA,kBACN,WAAU;AAAA,kBAET,gBAAM;AAAA;AAAA,gBAJF,MAAM;AAAA,cAKb,CACD;AAAA,eACH,GACF;AAAA,YACA,qBAAC,WACE;AAAA,qBAAO,IAAI,SAAS;AAAA,cACpB,SAAS,SAAS,IACjB,oBAAC,QACC;AAAA,gBAAC;AAAA;AAAA,kBACC,OAAM;AAAA,kBACN,SAAS,OAAO,SAAS;AAAA,kBACzB,WAAW;AAAA,oBACT;AAAA,oBACA;AAAA,kBACF;AAAA,kBACD;AAAA;AAAA,cAED,GACF,IACE;AAAA,cACH,SAAS,IAAI,SAAS;AAAA,eACzB;AAAA;AAAA;AAAA,MACF;AAAA;AAAA,EACF;AAEJ;AAGO,SAAS,WAA6B,OAA2B;AACtE,QAAM,EAAE,UAAU,UAAU,SAAS,cAAc,GAAG,OAAO,gBAAgB,UAAU,IAAI;AAE3F,QAAM,SAAS,EAAE,GAAG,OAAO,QAAQ;AACnC,SACE;AAAA,IAAC;AAAA;AAAA,MACC,gBAAc;AAAA,MACd,aAAW,WAAW;AAAA,MACtB,WAAW,GAAG,6BAA6B,SAAS;AAAA,MAEnD;AAAA,0BAAkB,CAAC,WAAW,CAAC,QAC9B,oBAAC,OAAE,WAAU,0BACX,8BAAC,wBAAsB,0BAAe,GACxC,IACE;AAAA,QACH,UACC,iCACE;AAAA,8BAAC,UAAK,WAAU,WAAU,oCAAsB;AAAA,UAChD,oBAAC,eAAY,MAAM,aAAa,SAAkB;AAAA,WACpD,IACE,QACF,oBAAC,cAAW,OAAc,IACxB,YAAY,WACd,oBAAC,iBAAc,OAAO,QAAQ,IAE9B,oBAAC,eAAY,OAAO,QAAQ;AAAA;AAAA;AAAA,EAEhC;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/ui/access-list.tsx"],"sourcesContent":["/* ----------------------------------------------------------------------------\n   AccessList - the one membership editor, used everywhere access is edited:\n   Workspace Access, the person sheet, the workspace sheet and the invite\n   dialog. Same rows, verbs and role definitions in all four places.\n\n   Roles come from the server's role catalog (see RoleSelect). You and owners\n   are always listed. Service accounts sit in their own subgroup.\n\n   Variants:\n   - \"inline\" (default): avatar, name and email, a role select that saves\n     immediately, and a menu with Remove.\n   - \"text\": quieter rows with the role as text; the whole row opens the\n     person sheet, where the role is changed.\n   - \"matrix\": people by workspaces, one role per cell. Only for a few\n     workspaces.\n   -------------------------------------------------------------------------- */\n\nimport { useId, type ReactNode } from \"react\";\nimport {\n  BotIcon,\n  ChevronRightIcon,\n  MailIcon,\n  MoreHorizontalIcon,\n  RotateCcwIcon,\n  SlidersHorizontalIcon,\n  UserMinusIcon,\n  XIcon,\n} from \"lucide-react\";\n\nimport { cn } from \"../lib/cn\";\nimport { Avatar, AvatarFallback } from \"./avatar\";\nimport { Button } from \"./button\";\nimport {\n  DropdownMenu,\n  DropdownMenuContent,\n  DropdownMenuItem,\n  DropdownMenuSeparator,\n  DropdownMenuTrigger,\n} from \"./dropdown-menu\";\nimport { MetaChip } from \"./meta-chip\";\nimport { failedLoadParts, type FailedLoad } from \"./diff-view\";\nimport { ErrorMessage } from \"./error-message\";\nimport { InlineDisabledReason } from \"./select-menu\";\nimport { Skeleton } from \"./skeleton\";\nimport { StatusBadge } from \"./status-badge\";\nimport { RoleSelect, roleLabel, type RoleOption, type RoleValue } from \"./role-select\";\n\nexport type AccessMemberStatus = \"active\" | \"invited\" | \"invite_failed\" | \"suspended\";\n\nexport interface AccessMember<R extends string = string> {\n  id: string;\n  name: string;\n  /** Service accounts have none. */\n  email?: string | null | undefined;\n  initials: string;\n  kind?: \"person\" | \"service\" | undefined;\n  isYou?: boolean | undefined;\n  /**\n   * The viewer administers this list from above (an organization owner or\n   * admin on the organization's workspace page), so their own row stays\n   * editable: they set and remove their own access like anyone else's.\n   */\n  managesOwnAccess?: boolean | undefined;\n  /** Owners are always listed and can't be removed here. */\n  isOwner?: boolean | undefined;\n  /** A small tag after the name, for example \"Only owner\". */\n  tag?: string | undefined;\n  status?: AccessMemberStatus | undefined;\n  /** \"Invited · expires in 5 days\". Shown only when not active. */\n  statusLabel?: string | undefined;\n  /** The role in this list's scope. */\n  role: RoleValue<R>;\n  /** For a legacy custom grant: the role \"Reset to role\" goes back to. */\n  resetRole?: R | undefined;\n  /** Why this person's role can't be changed here. */\n  roleLockedReason?: string | undefined;\n  /** Why this person can't be removed here. Owners and You never can. */\n  removeLockedReason?: string | undefined;\n  /** Matrix variant: the role per scope id (null is no access). */\n  grants?: Record<string, RoleValue<R>> | undefined;\n}\n\nexport interface AccessScope {\n  id: string;\n  /** \"Platform engineering\". */\n  label: string;\n}\n\nexport type AccessListVariant = \"inline\" | \"text\" | \"matrix\";\n\nexport interface AccessListProps<R extends string = string> {\n  members: readonly AccessMember<R>[];\n  /** From the server's role catalog, least to most access. */\n  roles: readonly RoleOption<R>[];\n  variant?: AccessListVariant | undefined;\n  /** Accessible name for the list: \"People with access to Platform engineering\". */\n  label: string;\n  /** Matrix columns. */\n  scopes?: readonly AccessScope[] | undefined;\n  /** Saves a role. Return a promise to show the saving state. */\n  onRoleChange?: (\n    member: AccessMember<R>,\n    role: R | null,\n    scopeId?: string,\n  ) => void | Promise<unknown>;\n  onRemove?: ((member: AccessMember<R>) => void) | undefined;\n  /**\n   * Opens the hand-picked permission editor (\"Custom permissions…\" in the ⋯\n   * menu). Optional: most places only offer roles.\n   */\n  onCustomize?: ((member: AccessMember<R>) => void) | undefined;\n  /** Replaces a legacy custom grant with `member.resetRole`. */\n  onResetToRole?: ((member: AccessMember<R>) => void | Promise<unknown>) | undefined;\n  /** Text variant: opens the person sheet. */\n  onOpen?: ((member: AccessMember<R>) => void) | undefined;\n  onResendInvite?: ((member: AccessMember<R>) => void) | undefined;\n  onRevokeInvite?: ((member: AccessMember<R>) => void) | undefined;\n  /** When set, nothing can be changed and this line says why. */\n  readOnlyReason?: string | undefined;\n  loading?: boolean | undefined;\n  /** Skeleton rows while loading. Default 4. */\n  loadingRows?: number | undefined;\n  /** What happened, what to do next, and an optional retry. Replaces the list. */\n  error?: FailedLoad | undefined;\n  /** Members whose role is being saved elsewhere, shown with a spinner. */\n  savingIds?: readonly string[] | undefined;\n  /** Shown when only you have access. */\n  emptyMessage?: ReactNode | undefined;\n  /** \"Remove from workspace\" or \"Remove from organization\". */\n  removeLabel?: string | undefined;\n  /** What the list sits on, so the matrix's sticky column matches. Default \"bg\". */\n  canvas?: \"bg\" | \"surface\" | undefined;\n  /** Adds \"No access\" to role choices (matrix, person sheet). */\n  noAccessLabel?: string | undefined;\n  className?: string | undefined;\n}\n\n/** Service accounts go in their own subgroup, after the people. */\nexport function groupAccessMembers<R extends string>(\n  members: readonly AccessMember<R>[],\n): { people: AccessMember<R>[]; services: AccessMember<R>[] } {\n  const people = members.filter((member) => member.kind !== \"service\");\n  const services = members.filter((member) => member.kind === \"service\");\n  // You first, then owners, then everyone else in the order the server sent.\n  const rank = (member: AccessMember<R>) => (member.isYou ? 0 : member.isOwner ? 1 : 2);\n  return {\n    people: people\n      .map((member, index) => ({ member, index }))\n      .sort((a, b) => rank(a.member) - rank(b.member) || a.index - b.index)\n      .map(({ member }) => member),\n    services,\n  };\n}\n\n/** Why a member can't be removed, or null when they can. */\nexport function removeBlockedReason(member: AccessMember): string | null {\n  if (member.removeLockedReason) return member.removeLockedReason;\n  if (member.isYou && !member.managesOwnAccess) return \"You can't remove yourself here.\";\n  if (member.isOwner) return \"Owners always have access.\";\n  return null;\n}\n\nfunction isInvite(member: AccessMember): boolean {\n  return member.status === \"invited\" || member.status === \"invite_failed\";\n}\n\n/* ---------------------------------------------------------------- pieces */\n\nfunction MemberAvatar({ member }: { member: AccessMember }) {\n  if (member.kind === \"service\") {\n    return (\n      <span\n        aria-hidden=\"true\"\n        className=\"grid size-8 shrink-0 place-items-center rounded-[10px] border border-border bg-surface-2 text-fg-muted\"\n      >\n        <BotIcon className=\"size-4\" />\n      </span>\n    );\n  }\n  // Someone who hasn't joined yet: a dashed outline, the same initials.\n  const pending = isInvite(member);\n  return (\n    <Avatar aria-hidden=\"true\">\n      <AvatarFallback\n        className={cn(\n          \"text-xs font-semibold\",\n          pending\n            ? \"border border-dashed border-border-strong bg-transparent text-fg-subtle\"\n            : \"bg-surface-2 text-fg-muted\",\n        )}\n      >\n        {member.initials}\n      </AvatarFallback>\n    </Avatar>\n  );\n}\n\nfunction MemberIdentity({\n  member,\n  roles,\n  onResetToRole,\n  readOnly,\n}: {\n  member: AccessMember<string>;\n  roles: readonly RoleOption<string>[];\n  onResetToRole?: ((member: AccessMember<string>) => void | Promise<unknown>) | undefined;\n  readOnly: boolean;\n}) {\n  const showStatus = member.status && member.status !== \"active\" && member.statusLabel;\n  const secondary = member.kind === \"service\" ? \"Service account\" : member.email;\n  const resetTo =\n    member.role === \"custom\" && member.resetRole ? roleLabel(roles, member.resetRole) : null;\n  return (\n    <div className=\"min-w-0\">\n      {/* One line: the name truncates before the chip wraps. */}\n      <div className=\"flex min-w-0 items-center gap-2\">\n        <span className=\"min-w-0 truncate text-sm leading-5 font-medium text-fg\">\n          {member.name}\n        </span>\n        {member.isYou ? <MetaChip variant=\"outline\">You</MetaChip> : null}\n      </div>\n      {secondary || member.tag ? (\n        // Like a ListRow meta line: the separator trails its item, so a\n        // wrapped tag (\"Only owner\") starts its own line cleanly.\n        <div className=\"flex min-w-0 flex-wrap items-center gap-x-1.5 text-xs leading-4.5 text-fg-muted\">\n          {secondary ? (\n            <span className=\"inline-flex max-w-full min-w-0 items-center gap-1.5\">\n              <span className=\"min-w-0 truncate\">{secondary}</span>\n              {member.tag ? (\n                <span aria-hidden=\"true\" className=\"text-fg-subtle\">\n                  ·\n                </span>\n              ) : null}\n            </span>\n          ) : null}\n          {member.tag ? <span className=\"whitespace-nowrap\">{member.tag}</span> : null}\n        </div>\n      ) : null}\n      {showStatus ? (\n        <div className=\"mt-0.5 flex min-w-0\">\n          <StatusBadge variant=\"dot\" status={member.status} className=\"min-w-0\">\n            {member.statusLabel}\n          </StatusBadge>\n        </div>\n      ) : null}\n      {member.role === \"custom\" ? (\n        // The reset link carries its own icon, so it needs no separator (and no\n        // dot is left dangling when it wraps under the text on narrow rows).\n        <div className=\"flex min-w-0 flex-wrap items-center gap-x-2 text-xs leading-4.5 text-fg-muted\">\n          <span className=\"whitespace-nowrap\">Hand-picked permissions</span>\n          {resetTo && onResetToRole && !readOnly ? (\n            <button\n              type=\"button\"\n              onClick={() => void onResetToRole(member)}\n              className=\"inline-flex items-center gap-1 rounded-[6px] font-medium whitespace-nowrap og-link pointer-coarse:min-h-11\"\n            >\n              <RotateCcwIcon aria-hidden=\"true\" className=\"size-3\" />\n              Reset to {resetTo}\n            </button>\n          ) : null}\n        </div>\n      ) : null}\n    </div>\n  );\n}\n\nfunction RowMenu({\n  member,\n  removeLabel,\n  onRemove,\n  onCustomize,\n  onResetToRole,\n  onResendInvite,\n  onRevokeInvite,\n  roles,\n}: {\n  member: AccessMember<string>;\n  removeLabel: string;\n  onRemove?: ((member: AccessMember<string>) => void) | undefined;\n  onCustomize?: ((member: AccessMember<string>) => void) | undefined;\n  onResetToRole?: ((member: AccessMember<string>) => void | Promise<unknown>) | undefined;\n  onResendInvite?: ((member: AccessMember<string>) => void) | undefined;\n  onRevokeInvite?: ((member: AccessMember<string>) => void) | undefined;\n  roles: readonly RoleOption<string>[];\n}) {\n  const invite = isInvite(member);\n  const blocked = removeBlockedReason(member);\n  const canReset = member.role === \"custom\" && member.resetRole && onResetToRole;\n  // Custom permissions follow the same rule as the role: never your own.\n  const canCustomize =\n    Boolean(onCustomize) && (!member.isYou || member.managesOwnAccess) && !member.isOwner;\n  const hasItems = invite\n    ? Boolean(onResendInvite || onRevokeInvite)\n    : Boolean((onRemove && !blocked) || canReset || canCustomize);\n  if (!hasItems) return <span aria-hidden=\"true\" className=\"size-8\" />;\n  return (\n    <DropdownMenu modal={false}>\n      <DropdownMenuTrigger asChild>\n        <button\n          type=\"button\"\n          aria-label={`More actions for ${member.name}`}\n          className=\"grid size-8 shrink-0 place-items-center rounded-[10px] text-fg-subtle transition-colors duration-[120ms] outline-hidden hover:bg-surface-3 hover:text-fg focus-visible:ring-2 focus-visible:ring-brand/55 data-[state=open]:bg-surface-3 data-[state=open]:text-fg pointer-coarse:size-11\"\n        >\n          <MoreHorizontalIcon aria-hidden=\"true\" className=\"size-4\" />\n        </button>\n      </DropdownMenuTrigger>\n      {/* Same menu as a ListRow's ⋯: default content, icon + verb per item. */}\n      <DropdownMenuContent align=\"end\" className=\"min-w-44\">\n        {invite ? (\n          <>\n            {onResendInvite ? (\n              <DropdownMenuItem onSelect={() => onResendInvite(member)}>\n                <MailIcon />\n                Resend invitation\n              </DropdownMenuItem>\n            ) : null}\n            {onRevokeInvite ? (\n              <DropdownMenuItem variant=\"destructive\" onSelect={() => onRevokeInvite(member)}>\n                <XIcon />\n                Revoke invitation\n              </DropdownMenuItem>\n            ) : null}\n          </>\n        ) : (\n          <>\n            {canReset ? (\n              <DropdownMenuItem onSelect={() => void onResetToRole!(member)}>\n                <RotateCcwIcon />\n                Reset to {roleLabel(roles, member.resetRole!)}\n              </DropdownMenuItem>\n            ) : null}\n            {canCustomize ? (\n              <DropdownMenuItem onSelect={() => onCustomize!(member)}>\n                <SlidersHorizontalIcon />\n                Custom permissions…\n              </DropdownMenuItem>\n            ) : null}\n            {(canReset || canCustomize) && onRemove && !blocked ? <DropdownMenuSeparator /> : null}\n            {onRemove && !blocked ? (\n              <DropdownMenuItem variant=\"destructive\" onSelect={() => onRemove(member)}>\n                <UserMinusIcon />\n                {removeLabel}\n              </DropdownMenuItem>\n            ) : null}\n          </>\n        )}\n      </DropdownMenuContent>\n    </DropdownMenu>\n  );\n}\n\nfunction roleLockReason(\n  member: AccessMember,\n  readOnlyReason: string | undefined,\n): string | undefined {\n  if (readOnlyReason) return undefined; // read-only lists show text, not locked controls\n  if (member.roleLockedReason) return member.roleLockedReason;\n  if (member.isYou && !member.managesOwnAccess) {\n    return \"You can't change your own role. Ask another admin.\";\n  }\n  return undefined;\n}\n\n/* ---------------------------------------------------------------- states */\n\nfunction LoadingRows({ rows, variant }: { rows: number; variant: AccessListVariant }) {\n  return (\n    <ul aria-hidden=\"true\" className=\"flex flex-col divide-y divide-border\">\n      {Array.from({ length: rows }, (_, index) => (\n        // oxlint-disable-next-line react/no-array-index-key -- static placeholders\n        <li key={index} className=\"flex min-h-14 items-center gap-3 px-3 py-3\">\n          <Skeleton className=\"size-8 shrink-0 rounded-full bg-surface-3\" />\n          <div className=\"flex min-w-0 flex-1 flex-col gap-1.5\">\n            <Skeleton className=\"h-3.5 w-36 max-w-[60%] rounded-full bg-surface-3\" />\n            <Skeleton className=\"h-3 w-48 max-w-[80%] rounded-full bg-surface-3\" />\n          </div>\n          {variant === \"inline\" ? (\n            <Skeleton className=\"hidden h-8 w-[12.5rem] shrink-0 rounded-[10px] bg-surface-3 @md/access:block\" />\n          ) : (\n            <Skeleton className=\"h-3.5 w-20 shrink-0 rounded-full bg-surface-3\" />\n          )}\n        </li>\n      ))}\n    </ul>\n  );\n}\n\nfunction ErrorState({ error }: { error: NonNullable<AccessListProps[\"error\"]> }) {\n  const failure = failedLoadParts(error);\n  return (\n    <ErrorMessage\n      title={error.message}\n      details={failure.details}\n      align=\"center\"\n      announce\n      action={\n        error.onRetry ? (\n          <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={error.onRetry}>\n            Try again\n          </Button>\n        ) : undefined\n      }\n    >\n      {failure.detail}\n    </ErrorMessage>\n  );\n}\n\n/* ---------------------------------------------------------------- variants */\n\ninterface RowProps {\n  member: AccessMember<string>;\n  props: AccessListProps<string>;\n}\n\nfunction InlineRow({ member, props }: RowProps) {\n  const { roles, onRoleChange, readOnlyReason, noAccessLabel } = props;\n  const readOnly = Boolean(readOnlyReason);\n  const lockReason = roleLockReason(member, readOnlyReason);\n  return (\n    <li className=\"grid min-h-14 grid-cols-[2rem_minmax(0,1fr)_auto] items-center gap-x-3 gap-y-2 px-3 py-3 @md/access:grid-cols-[2rem_minmax(0,1fr)_12.5rem_2rem]\">\n      <div className=\"row-start-1 self-start @md/access:self-center\">\n        <MemberAvatar member={member} />\n      </div>\n      <div className=\"row-start-1 min-w-0\">\n        <MemberIdentity\n          member={member}\n          roles={roles}\n          onResetToRole={props.onResetToRole}\n          readOnly={readOnly}\n        />\n      </div>\n      <div className=\"col-span-2 col-start-2 row-start-2 min-w-0 @md/access:col-span-1 @md/access:col-start-3 @md/access:row-start-1\">\n        {readOnly ? (\n          <RoleSelect\n            variant=\"text\"\n            roles={roles}\n            value={member.role}\n            noAccessLabel={noAccessLabel}\n          />\n        ) : (\n          <RoleSelect\n            roles={roles}\n            value={member.role}\n            subjectName={member.name}\n            noAccessLabel={noAccessLabel}\n            disabledReason={lockReason}\n            pending={props.savingIds?.includes(member.id)}\n            onValueChange={onRoleChange ? (role) => onRoleChange(member, role) : undefined}\n            className=\"w-full max-w-[12.5rem] @md/access:max-w-none\"\n          />\n        )}\n      </div>\n      <div className=\"col-start-3 row-start-1 flex justify-end @md/access:col-start-4\">\n        {readOnly ? null : (\n          <RowMenu\n            member={member}\n            roles={roles}\n            removeLabel={props.removeLabel ?? \"Remove from workspace\"}\n            onRemove={props.onRemove}\n            onCustomize={props.onCustomize}\n            onResetToRole={props.onResetToRole}\n            onResendInvite={props.onResendInvite}\n            onRevokeInvite={props.onRevokeInvite}\n          />\n        )}\n      </div>\n    </li>\n  );\n}\n\nfunction TextRow({ member, props }: RowProps) {\n  const { roles, onOpen, noAccessLabel } = props;\n  const content = (\n    <>\n      <MemberAvatar member={member} />\n      <div className=\"min-w-0 flex-1\">\n        <MemberIdentity member={member} roles={roles} readOnly />\n      </div>\n      <span\n        className={cn(\n          \"shrink-0 text-sm\",\n          member.role === null ? \"text-fg-subtle\" : \"text-fg-muted\",\n        )}\n      >\n        {roleLabel(roles, member.role, { noAccessLabel })}\n      </span>\n      {onOpen ? (\n        <ChevronRightIcon aria-hidden=\"true\" className=\"size-4 shrink-0 text-fg-subtle\" />\n      ) : null}\n    </>\n  );\n  return (\n    <li className=\"min-w-0\">\n      {onOpen ? (\n        <button\n          type=\"button\"\n          onClick={() => onOpen(member)}\n          aria-label={`${member.name}, ${roleLabel(roles, member.role, { noAccessLabel })}`}\n          className=\"flex min-h-14 w-full min-w-0 items-center gap-3 px-3 py-3 text-left transition-colors duration-[120ms] outline-hidden hover:bg-surface-2 focus-visible:outline-2 focus-visible:-outline-offset-2 focus-visible:outline-brand/55\"\n        >\n          {content}\n        </button>\n      ) : (\n        <div className=\"flex min-h-14 min-w-0 items-center gap-3 px-3 py-3\">{content}</div>\n      )}\n    </li>\n  );\n}\n\nfunction ListVariant({ props }: { props: AccessListProps<string> }) {\n  const { people, services } = groupAccessMembers(props.members);\n  const servicesId = useId();\n  const Row = props.variant === \"text\" ? TextRow : InlineRow;\n  // Both list layouts use the resource row's hairlines (see ListRow).\n  const listClass = \"flex min-w-0 flex-col divide-y divide-border\";\n  const onlyYou = people.length <= 1 && services.length === 0;\n  return (\n    <>\n      <ul aria-label={props.label} className={listClass}>\n        {people.map((member) => (\n          <Row key={member.id} member={member} props={props} />\n        ))}\n      </ul>\n      {onlyYou && props.emptyMessage ? (\n        <p className=\"border-t border-border px-3 pt-3 text-sm text-fg-muted\">\n          {props.emptyMessage}\n        </p>\n      ) : null}\n      {services.length > 0 ? (\n        <div className=\"border-t border-border pt-4\">\n          <h3 id={servicesId} className=\"px-3 text-xs leading-4.5 font-medium text-fg\">\n            Service accounts\n          </h3>\n          <ul aria-labelledby={servicesId} className={cn(listClass, \"mt-1\")}>\n            {services.map((member) => (\n              <Row key={member.id} member={member} props={props} />\n            ))}\n          </ul>\n        </div>\n      ) : null}\n    </>\n  );\n}\n\nfunction MatrixVariant({ props }: { props: AccessListProps<string> }) {\n  const { roles, scopes = [], onRoleChange, readOnlyReason, noAccessLabel = \"No access\" } = props;\n  const { people, services } = groupAccessMembers(props.members);\n  const readOnly = Boolean(readOnlyReason);\n  const cellClass = \"border-b border-border px-1.5 py-1.5 align-middle\";\n  // Sticky cells need an opaque fill that matches what the list sits on.\n  const sticky = props.canvas === \"surface\" ? \"bg-surface\" : \"bg-bg\";\n  const renderRow = (member: AccessMember<string>) => {\n    const lockReason = roleLockReason(member, readOnlyReason);\n    return (\n      <tr key={member.id}>\n        <th\n          scope=\"row\"\n          className={cn(cellClass, sticky, \"sticky left-0 z-10 pr-4 pl-0 text-left font-normal\")}\n        >\n          <div className=\"flex min-w-0 items-center gap-3\">\n            <MemberAvatar member={member} />\n            <MemberIdentity member={member} roles={roles} readOnly />\n          </div>\n        </th>\n        {scopes.map((scope) => {\n          const value = member.grants?.[scope.id] ?? null;\n          return (\n            <td key={scope.id} className={cellClass}>\n              {readOnly ? (\n                <span className=\"px-2\">\n                  <RoleSelect\n                    variant=\"text\"\n                    roles={roles}\n                    value={value}\n                    noAccessLabel={noAccessLabel}\n                  />\n                </span>\n              ) : (\n                <RoleSelect\n                  variant=\"cell\"\n                  roles={roles}\n                  value={value}\n                  noAccessLabel={noAccessLabel}\n                  subjectName={member.name}\n                  aria-label={`${member.name} in ${scope.label}`}\n                  disabledReason={lockReason}\n                  align=\"start\"\n                  onValueChange={\n                    onRoleChange ? (role) => onRoleChange(member, role, scope.id) : undefined\n                  }\n                />\n              )}\n            </td>\n          );\n        })}\n      </tr>\n    );\n  };\n  return (\n    <div\n      role=\"region\"\n      aria-label={props.label}\n      // A scrollable region must be reachable by keyboard.\n      tabIndex={0}\n      className=\"-mx-1 min-w-0 overflow-x-auto px-1 pb-1\"\n    >\n      <table\n        className=\"w-full table-fixed border-separate border-spacing-0 text-sm\"\n        style={{ minWidth: `${16 + scopes.length * 11}rem` }}\n      >\n        <colgroup>\n          <col className=\"w-52 @md/access:w-64\" />\n          {scopes.map((scope) => (\n            <col key={scope.id} className=\"w-44\" />\n          ))}\n        </colgroup>\n        <thead>\n          <tr>\n            <th\n              scope=\"col\"\n              className={cn(\n                sticky,\n                \"sticky left-0 z-10 border-b border-border pr-4 pb-2 text-left text-xs leading-4.5 font-medium text-fg-subtle\",\n              )}\n            >\n              Person\n            </th>\n            {scopes.map((scope) => (\n              <th\n                key={scope.id}\n                scope=\"col\"\n                className=\"truncate border-b border-border px-3.5 pb-2 text-left text-xs leading-4.5 font-medium text-fg-subtle\"\n              >\n                {scope.label}\n              </th>\n            ))}\n          </tr>\n        </thead>\n        <tbody>\n          {people.map(renderRow)}\n          {services.length > 0 ? (\n            <tr>\n              <th\n                scope=\"colgroup\"\n                colSpan={scopes.length + 1}\n                className={cn(\n                  sticky,\n                  \"border-b border-border pt-4 pb-1.5 text-left text-xs leading-4.5 font-medium text-fg-subtle\",\n                )}\n              >\n                Service accounts\n              </th>\n            </tr>\n          ) : null}\n          {services.map(renderRow)}\n        </tbody>\n      </table>\n    </div>\n  );\n}\n\n/** Who has access, with one role each. */\nexport function AccessList<R extends string>(props: AccessListProps<R>) {\n  const { variant = \"inline\", loading, loadingRows = 4, error, readOnlyReason, className } = props;\n  // Rows are generic over the role id; internally they only pass ids through.\n  const erased = { ...props, variant } as unknown as AccessListProps<string>;\n  return (\n    <div\n      data-variant={variant}\n      aria-busy={loading || undefined}\n      className={cn(\"@container/access min-w-0\", className)}\n    >\n      {readOnlyReason && !loading && !error ? (\n        <p className=\"mb-1 flex min-w-0 px-3\">\n          <InlineDisabledReason>{readOnlyReason}</InlineDisabledReason>\n        </p>\n      ) : null}\n      {loading ? (\n        <>\n          <span className=\"sr-only\">Loading who has access</span>\n          <LoadingRows rows={loadingRows} variant={variant} />\n        </>\n      ) : error ? (\n        <ErrorState error={error} />\n      ) : variant === \"matrix\" ? (\n        <MatrixVariant props={erased} />\n      ) : (\n        <ListVariant props={erased} />\n      )}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,SAAS,aAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAoJC,SAsIE,UAtIF,KAwCF,YAxCE;AArCD,SAAS,mBACd,SAC4D;AAC5D,QAAM,SAAS,QAAQ,OAAO,CAAC,WAAW,OAAO,SAAS,SAAS;AACnE,QAAM,WAAW,QAAQ,OAAO,CAAC,WAAW,OAAO,SAAS,SAAS;AAErE,QAAM,OAAO,CAAC,WAA6B,OAAO,QAAQ,IAAI,OAAO,UAAU,IAAI;AACnF,SAAO;AAAA,IACL,QAAQ,OACL,IAAI,CAAC,QAAQ,WAAW,EAAE,QAAQ,MAAM,EAAE,EAC1C,KAAK,CAAC,GAAG,MAAM,KAAK,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,KAAK,EAAE,QAAQ,EAAE,KAAK,EACnE,IAAI,CAAC,EAAE,OAAO,MAAM,MAAM;AAAA,IAC7B;AAAA,EACF;AACF;AAGO,SAAS,oBAAoB,QAAqC;AACvE,MAAI,OAAO,mBAAoB,QAAO,OAAO;AAC7C,MAAI,OAAO,SAAS,CAAC,OAAO,iBAAkB,QAAO;AACrD,MAAI,OAAO,QAAS,QAAO;AAC3B,SAAO;AACT;AAEA,SAAS,SAAS,QAA+B;AAC/C,SAAO,OAAO,WAAW,aAAa,OAAO,WAAW;AAC1D;AAIA,SAAS,aAAa,EAAE,OAAO,GAA6B;AAC1D,MAAI,OAAO,SAAS,WAAW;AAC7B,WACE;AAAA,MAAC;AAAA;AAAA,QACC,eAAY;AAAA,QACZ,WAAU;AAAA,QAEV,8BAAC,WAAQ,WAAU,UAAS;AAAA;AAAA,IAC9B;AAAA,EAEJ;AAEA,QAAM,UAAU,SAAS,MAAM;AAC/B,SACE,oBAAC,UAAO,eAAY,QAClB;AAAA,IAAC;AAAA;AAAA,MACC,WAAW;AAAA,QACT;AAAA,QACA,UACI,4EACA;AAAA,MACN;AAAA,MAEC,iBAAO;AAAA;AAAA,EACV,GACF;AAEJ;AAEA,SAAS,eAAe;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKG;AACD,QAAM,aAAa,OAAO,UAAU,OAAO,WAAW,YAAY,OAAO;AACzE,QAAM,YAAY,OAAO,SAAS,YAAY,oBAAoB,OAAO;AACzE,QAAM,UACJ,OAAO,SAAS,YAAY,OAAO,YAAY,UAAU,OAAO,OAAO,SAAS,IAAI;AACtF,SACE,qBAAC,SAAI,WAAU,WAEb;AAAA,yBAAC,SAAI,WAAU,mCACb;AAAA,0BAAC,UAAK,WAAU,0DACb,iBAAO,MACV;AAAA,MACC,OAAO,QAAQ,oBAAC,YAAS,SAAQ,WAAU,iBAAG,IAAc;AAAA,OAC/D;AAAA,IACC,aAAa,OAAO;AAAA;AAAA;AAAA,MAGnB,qBAAC,SAAI,WAAU,mFACZ;AAAA,oBACC,qBAAC,UAAK,WAAU,uDACd;AAAA,8BAAC,UAAK,WAAU,oBAAoB,qBAAU;AAAA,UAC7C,OAAO,MACN,oBAAC,UAAK,eAAY,QAAO,WAAU,kBAAiB,kBAEpD,IACE;AAAA,WACN,IACE;AAAA,QACH,OAAO,MAAM,oBAAC,UAAK,WAAU,qBAAqB,iBAAO,KAAI,IAAU;AAAA,SAC1E;AAAA,QACE;AAAA,IACH,aACC,oBAAC,SAAI,WAAU,uBACb,8BAAC,eAAY,SAAQ,OAAM,QAAQ,OAAO,QAAQ,WAAU,WACzD,iBAAO,aACV,GACF,IACE;AAAA,IACH,OAAO,SAAS;AAAA;AAAA;AAAA,MAGf,qBAAC,SAAI,WAAU,iFACb;AAAA,4BAAC,UAAK,WAAU,qBAAoB,qCAAuB;AAAA,QAC1D,WAAW,iBAAiB,CAAC,WAC5B;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,KAAK,cAAc,MAAM;AAAA,YACxC,WAAU;AAAA,YAEV;AAAA,kCAAC,iBAAc,eAAY,QAAO,WAAU,UAAS;AAAA,cAAE;AAAA,cAC7C;AAAA;AAAA;AAAA,QACZ,IACE;AAAA,SACN;AAAA,QACE;AAAA,KACN;AAEJ;AAEA,SAAS,QAAQ;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GASG;AACD,QAAM,SAAS,SAAS,MAAM;AAC9B,QAAM,UAAU,oBAAoB,MAAM;AAC1C,QAAM,WAAW,OAAO,SAAS,YAAY,OAAO,aAAa;AAEjE,QAAM,eACJ,QAAQ,WAAW,MAAM,CAAC,OAAO,SAAS,OAAO,qBAAqB,CAAC,OAAO;AAChF,QAAM,WAAW,SACb,QAAQ,kBAAkB,cAAc,IACxC,QAAS,YAAY,CAAC,WAAY,YAAY,YAAY;AAC9D,MAAI,CAAC,SAAU,QAAO,oBAAC,UAAK,eAAY,QAAO,WAAU,UAAS;AAClE,SACE,qBAAC,gBAAa,OAAO,OACnB;AAAA,wBAAC,uBAAoB,SAAO,MAC1B;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,cAAY,oBAAoB,OAAO,IAAI;AAAA,QAC3C,WAAU;AAAA,QAEV,8BAAC,sBAAmB,eAAY,QAAO,WAAU,UAAS;AAAA;AAAA,IAC5D,GACF;AAAA,IAEA,oBAAC,uBAAoB,OAAM,OAAM,WAAU,YACxC,mBACC,iCACG;AAAA,uBACC,qBAAC,oBAAiB,UAAU,MAAM,eAAe,MAAM,GACrD;AAAA,4BAAC,YAAS;AAAA,QAAE;AAAA,SAEd,IACE;AAAA,MACH,iBACC,qBAAC,oBAAiB,SAAQ,eAAc,UAAU,MAAM,eAAe,MAAM,GAC3E;AAAA,4BAAC,SAAM;AAAA,QAAE;AAAA,SAEX,IACE;AAAA,OACN,IAEA,iCACG;AAAA,iBACC,qBAAC,oBAAiB,UAAU,MAAM,KAAK,cAAe,MAAM,GAC1D;AAAA,4BAAC,iBAAc;AAAA,QAAE;AAAA,QACP,UAAU,OAAO,OAAO,SAAU;AAAA,SAC9C,IACE;AAAA,MACH,eACC,qBAAC,oBAAiB,UAAU,MAAM,YAAa,MAAM,GACnD;AAAA,4BAAC,yBAAsB;AAAA,QAAE;AAAA,SAE3B,IACE;AAAA,OACF,YAAY,iBAAiB,YAAY,CAAC,UAAU,oBAAC,yBAAsB,IAAK;AAAA,MACjF,YAAY,CAAC,UACZ,qBAAC,oBAAiB,SAAQ,eAAc,UAAU,MAAM,SAAS,MAAM,GACrE;AAAA,4BAAC,iBAAc;AAAA,QACd;AAAA,SACH,IACE;AAAA,OACN,GAEJ;AAAA,KACF;AAEJ;AAEA,SAAS,eACP,QACA,gBACoB;AACpB,MAAI,eAAgB,QAAO;AAC3B,MAAI,OAAO,iBAAkB,QAAO,OAAO;AAC3C,MAAI,OAAO,SAAS,CAAC,OAAO,kBAAkB;AAC5C,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAIA,SAAS,YAAY,EAAE,MAAM,QAAQ,GAAiD;AACpF,SACE,oBAAC,QAAG,eAAY,QAAO,WAAU,wCAC9B,gBAAM,KAAK,EAAE,QAAQ,KAAK,GAAG,CAAC,GAAG;AAAA;AAAA,IAEhC,qBAAC,QAAe,WAAU,8CACxB;AAAA,0BAAC,YAAS,WAAU,6CAA4C;AAAA,MAChE,qBAAC,SAAI,WAAU,wCACb;AAAA,4BAAC,YAAS,WAAU,oDAAmD;AAAA,QACvE,oBAAC,YAAS,WAAU,kDAAiD;AAAA,SACvE;AAAA,MACC,YAAY,WACX,oBAAC,YAAS,WAAU,gFAA+E,IAEnG,oBAAC,YAAS,WAAU,iDAAgD;AAAA,SAT/D,KAWT;AAAA,GACD,GACH;AAEJ;AAEA,SAAS,WAAW,EAAE,MAAM,GAAqD;AAC/E,QAAM,UAAU,gBAAgB,KAAK;AACrC,SACE;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,MAAM;AAAA,MACb,SAAS,QAAQ;AAAA,MACjB,OAAM;AAAA,MACN,UAAQ;AAAA,MACR,QACE,MAAM,UACJ,oBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,SAAS,MAAM,SAAS,uBAE1E,IACE;AAAA,MAGL,kBAAQ;AAAA;AAAA,EACX;AAEJ;AASA,SAAS,UAAU,EAAE,QAAQ,MAAM,GAAa;AAC9C,QAAM,EAAE,OAAO,cAAc,gBAAgB,cAAc,IAAI;AAC/D,QAAM,WAAW,QAAQ,cAAc;AACvC,QAAM,aAAa,eAAe,QAAQ,cAAc;AACxD,SACE,qBAAC,QAAG,WAAU,mJACZ;AAAA,wBAAC,SAAI,WAAU,iDACb,8BAAC,gBAAa,QAAgB,GAChC;AAAA,IACA,oBAAC,SAAI,WAAU,uBACb;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,eAAe,MAAM;AAAA,QACrB;AAAA;AAAA,IACF,GACF;AAAA,IACA,oBAAC,SAAI,WAAU,kHACZ,qBACC;AAAA,MAAC;AAAA;AAAA,QACC,SAAQ;AAAA,QACR;AAAA,QACA,OAAO,OAAO;AAAA,QACd;AAAA;AAAA,IACF,IAEA;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,OAAO,OAAO;AAAA,QACd,aAAa,OAAO;AAAA,QACpB;AAAA,QACA,gBAAgB;AAAA,QAChB,SAAS,MAAM,WAAW,SAAS,OAAO,EAAE;AAAA,QAC5C,eAAe,eAAe,CAAC,SAAS,aAAa,QAAQ,IAAI,IAAI;AAAA,QACrE,WAAU;AAAA;AAAA,IACZ,GAEJ;AAAA,IACA,oBAAC,SAAI,WAAU,mEACZ,qBAAW,OACV;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,aAAa,MAAM,eAAe;AAAA,QAClC,UAAU,MAAM;AAAA,QAChB,aAAa,MAAM;AAAA,QACnB,eAAe,MAAM;AAAA,QACrB,gBAAgB,MAAM;AAAA,QACtB,gBAAgB,MAAM;AAAA;AAAA,IACxB,GAEJ;AAAA,KACF;AAEJ;AAEA,SAAS,QAAQ,EAAE,QAAQ,MAAM,GAAa;AAC5C,QAAM,EAAE,OAAO,QAAQ,cAAc,IAAI;AACzC,QAAM,UACJ,iCACE;AAAA,wBAAC,gBAAa,QAAgB;AAAA,IAC9B,oBAAC,SAAI,WAAU,kBACb,8BAAC,kBAAe,QAAgB,OAAc,UAAQ,MAAC,GACzD;AAAA,IACA;AAAA,MAAC;AAAA;AAAA,QACC,WAAW;AAAA,UACT;AAAA,UACA,OAAO,SAAS,OAAO,mBAAmB;AAAA,QAC5C;AAAA,QAEC,oBAAU,OAAO,OAAO,MAAM,EAAE,cAAc,CAAC;AAAA;AAAA,IAClD;AAAA,IACC,SACC,oBAAC,oBAAiB,eAAY,QAAO,WAAU,kCAAiC,IAC9E;AAAA,KACN;AAEF,SACE,oBAAC,QAAG,WAAU,WACX,mBACC;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,SAAS,MAAM,OAAO,MAAM;AAAA,MAC5B,cAAY,GAAG,OAAO,IAAI,KAAK,UAAU,OAAO,OAAO,MAAM,EAAE,cAAc,CAAC,CAAC;AAAA,MAC/E,WAAU;AAAA,MAET;AAAA;AAAA,EACH,IAEA,oBAAC,SAAI,WAAU,sDAAsD,mBAAQ,GAEjF;AAEJ;AAEA,SAAS,YAAY,EAAE,MAAM,GAAuC;AAClE,QAAM,EAAE,QAAQ,SAAS,IAAI,mBAAmB,MAAM,OAAO;AAC7D,QAAM,aAAa,MAAM;AACzB,QAAM,MAAM,MAAM,YAAY,SAAS,UAAU;AAEjD,QAAM,YAAY;AAClB,QAAM,UAAU,OAAO,UAAU,KAAK,SAAS,WAAW;AAC1D,SACE,iCACE;AAAA,wBAAC,QAAG,cAAY,MAAM,OAAO,WAAW,WACrC,iBAAO,IAAI,CAAC,WACX,oBAAC,OAAoB,QAAgB,SAA3B,OAAO,EAAkC,CACpD,GACH;AAAA,IACC,WAAW,MAAM,eAChB,oBAAC,OAAE,WAAU,0DACV,gBAAM,cACT,IACE;AAAA,IACH,SAAS,SAAS,IACjB,qBAAC,SAAI,WAAU,+BACb;AAAA,0BAAC,QAAG,IAAI,YAAY,WAAU,gDAA+C,8BAE7E;AAAA,MACA,oBAAC,QAAG,mBAAiB,YAAY,WAAW,GAAG,WAAW,MAAM,GAC7D,mBAAS,IAAI,CAAC,WACb,oBAAC,OAAoB,QAAgB,SAA3B,OAAO,EAAkC,CACpD,GACH;AAAA,OACF,IACE;AAAA,KACN;AAEJ;AAEA,SAAS,cAAc,EAAE,MAAM,GAAuC;AACpE,QAAM,EAAE,OAAO,SAAS,CAAC,GAAG,cAAc,gBAAgB,gBAAgB,YAAY,IAAI;AAC1F,QAAM,EAAE,QAAQ,SAAS,IAAI,mBAAmB,MAAM,OAAO;AAC7D,QAAM,WAAW,QAAQ,cAAc;AACvC,QAAM,YAAY;AAElB,QAAM,SAAS,MAAM,WAAW,YAAY,eAAe;AAC3D,QAAM,YAAY,CAAC,WAAiC;AAClD,UAAM,aAAa,eAAe,QAAQ,cAAc;AACxD,WACE,qBAAC,QACC;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,OAAM;AAAA,UACN,WAAW,GAAG,WAAW,QAAQ,oDAAoD;AAAA,UAErF,+BAAC,SAAI,WAAU,mCACb;AAAA,gCAAC,gBAAa,QAAgB;AAAA,YAC9B,oBAAC,kBAAe,QAAgB,OAAc,UAAQ,MAAC;AAAA,aACzD;AAAA;AAAA,MACF;AAAA,MACC,OAAO,IAAI,CAAC,UAAU;AACrB,cAAM,QAAQ,OAAO,SAAS,MAAM,EAAE,KAAK;AAC3C,eACE,oBAAC,QAAkB,WAAW,WAC3B,qBACC,oBAAC,UAAK,WAAU,QACd;AAAA,UAAC;AAAA;AAAA,YACC,SAAQ;AAAA,YACR;AAAA,YACA;AAAA,YACA;AAAA;AAAA,QACF,GACF,IAEA;AAAA,UAAC;AAAA;AAAA,YACC,SAAQ;AAAA,YACR;AAAA,YACA;AAAA,YACA;AAAA,YACA,aAAa,OAAO;AAAA,YACpB,cAAY,GAAG,OAAO,IAAI,OAAO,MAAM,KAAK;AAAA,YAC5C,gBAAgB;AAAA,YAChB,OAAM;AAAA,YACN,eACE,eAAe,CAAC,SAAS,aAAa,QAAQ,MAAM,MAAM,EAAE,IAAI;AAAA;AAAA,QAEpE,KAvBK,MAAM,EAyBf;AAAA,MAEJ,CAAC;AAAA,SAxCM,OAAO,EAyChB;AAAA,EAEJ;AACA,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,cAAY,MAAM;AAAA,MAElB,UAAU;AAAA,MACV,WAAU;AAAA,MAEV;AAAA,QAAC;AAAA;AAAA,UACC,WAAU;AAAA,UACV,OAAO,EAAE,UAAU,GAAG,KAAK,OAAO,SAAS,EAAE,MAAM;AAAA,UAEnD;AAAA,iCAAC,cACC;AAAA,kCAAC,SAAI,WAAU,wBAAuB;AAAA,cACrC,OAAO,IAAI,CAAC,UACX,oBAAC,SAAmB,WAAU,UAApB,MAAM,EAAqB,CACtC;AAAA,eACH;AAAA,YACA,oBAAC,WACC,+BAAC,QACC;AAAA;AAAA,gBAAC;AAAA;AAAA,kBACC,OAAM;AAAA,kBACN,WAAW;AAAA,oBACT;AAAA,oBACA;AAAA,kBACF;AAAA,kBACD;AAAA;AAAA,cAED;AAAA,cACC,OAAO,IAAI,CAAC,UACX;AAAA,gBAAC;AAAA;AAAA,kBAEC,OAAM;AAAA,kBACN,WAAU;AAAA,kBAET,gBAAM;AAAA;AAAA,gBAJF,MAAM;AAAA,cAKb,CACD;AAAA,eACH,GACF;AAAA,YACA,qBAAC,WACE;AAAA,qBAAO,IAAI,SAAS;AAAA,cACpB,SAAS,SAAS,IACjB,oBAAC,QACC;AAAA,gBAAC;AAAA;AAAA,kBACC,OAAM;AAAA,kBACN,SAAS,OAAO,SAAS;AAAA,kBACzB,WAAW;AAAA,oBACT;AAAA,oBACA;AAAA,kBACF;AAAA,kBACD;AAAA;AAAA,cAED,GACF,IACE;AAAA,cACH,SAAS,IAAI,SAAS;AAAA,eACzB;AAAA;AAAA;AAAA,MACF;AAAA;AAAA,EACF;AAEJ;AAGO,SAAS,WAA6B,OAA2B;AACtE,QAAM,EAAE,UAAU,UAAU,SAAS,cAAc,GAAG,OAAO,gBAAgB,UAAU,IAAI;AAE3F,QAAM,SAAS,EAAE,GAAG,OAAO,QAAQ;AACnC,SACE;AAAA,IAAC;AAAA;AAAA,MACC,gBAAc;AAAA,MACd,aAAW,WAAW;AAAA,MACtB,WAAW,GAAG,6BAA6B,SAAS;AAAA,MAEnD;AAAA,0BAAkB,CAAC,WAAW,CAAC,QAC9B,oBAAC,OAAE,WAAU,0BACX,8BAAC,wBAAsB,0BAAe,GACxC,IACE;AAAA,QACH,UACC,iCACE;AAAA,8BAAC,UAAK,WAAU,WAAU,oCAAsB;AAAA,UAChD,oBAAC,eAAY,MAAM,aAAa,SAAkB;AAAA,WACpD,IACE,QACF,oBAAC,cAAW,OAAc,IACxB,YAAY,WACd,oBAAC,iBAAc,OAAO,QAAQ,IAE9B,oBAAC,eAAY,OAAO,QAAQ;AAAA;AAAA;AAAA,EAEhC;AAEJ;","names":[]}

package/dist/ui/api-error.d.ts

@@ -25,9 +25,12 @@ export declare function isPermissionDenied(error: unknown): boolean;
 export declare function apiErrorAdvice(error: unknown): string;
 /**
  * The text to show for a failed action where only one line fits (a toast
- * description, a form error). API errors become advice, followed by the
- * request reference for support; an error the app wrote itself keeps its own
- * message. Next to Technical details (which already show the reference), use
+ * description, a form error). API errors become advice; an error the app
+ * wrote itself keeps its own message. An expected refusal (a 4xx) is only
+ * what to do. An unexpected failure ends with "Reference: <id>." for support,
+ * which the toast and the shared error renderers turn into a discreet "Copy
+ * details" or Technical details instead of printing it. Next to Technical
+ * details (which already show the reference), use
  * `userErrorTextWithoutReference`.
  */
 export declare function userErrorText(error: unknown, fallback?: string): string;

package/dist/ui/api-error.js

@@ -9,7 +9,8 @@ import {
   userErrorText,
   userErrorTextWithoutReference,
   userFacingError
-} from "../chunk-L4OF77LE.js";
+} from "../chunk-O4OOG3D6.js";
+import "../chunk-FYWT2O76.js";
 export {
   apiErrorAdvice,
   apiErrorDetails,

package/dist/ui/cadence-picker.js

@@ -26,16 +26,18 @@ import {
   validateCadence,
   zonedParts,
   zonedTimeToUtc
-} from "../chunk-7WIDB4PL.js";
-import "../chunk-2VB2O4FQ.js";
+} from "../chunk-6JHU2UBS.js";
+import "../chunk-3CPWWGNK.js";
 import "../chunk-5OTQA7CM.js";
-import "../chunk-AOHU6O3M.js";
+import "../chunk-MVW6HNPI.js";
+import "../chunk-V4Z4B2E3.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-USG4XNMA.js";
 import "../chunk-EDYVC3U3.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   CadencePicker,
   CadencePreview,

package/dist/ui/choice-cards.js

@@ -7,12 +7,14 @@ import {
   SELECTED_SURFACE_CLASS,
   SelectedCheck,
   selectableSurface
-} from "../chunk-APW4T4SW.js";
-import "../chunk-AOHU6O3M.js";
+} from "../chunk-YENLNISG.js";
+import "../chunk-MVW6HNPI.js";
 import "../chunk-ZMBJPN4T.js";
+import "../chunk-V4Z4B2E3.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-EDYVC3U3.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   ChoiceCard,
   ChoiceCards,

package/dist/ui/confirm-dialog.js

@@ -2,14 +2,14 @@
 import {
   ConfirmDialog,
   destructiveActionFocusTarget
-} from "../chunk-E6SQKHAU.js";
+} from "../chunk-SIRLACNZ.js";
 import "../chunk-ZQCND77P.js";
 import "../chunk-HD5X76TP.js";
 import "../chunk-7QQN3KNP.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   ConfirmDialog,
   destructiveActionFocusTarget

package/dist/ui/copy-field.js

@@ -4,14 +4,16 @@ import {
   copyText,
   truncateMiddle,
   useCopyToClipboard
-} from "../chunk-XYBV4ZJQ.js";
-import "../chunk-AOHU6O3M.js";
+} from "../chunk-2YUOVM3G.js";
+import "../chunk-MVW6HNPI.js";
+import "../chunk-V4Z4B2E3.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-7QQN3KNP.js";
 import "../chunk-EDYVC3U3.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   CopyField,
   copyText,

package/dist/ui/detail-page.js

@@ -9,7 +9,7 @@ import {
 import {
   BackLink,
   DetailPage
-} from "../chunk-CQH4FWYA.js";
+} from "../chunk-6PZ7OBYU.js";
 import "../chunk-ZBIXBQNI.js";
 import "../chunk-K4DHWGCT.js";
 import "../chunk-HJO32O7Z.js";
@@ -21,7 +21,7 @@ import "../chunk-7QQN3KNP.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   BackLink,
   DetailAside,

package/dist/ui/detail-sheet.js

@@ -16,7 +16,7 @@ import {
   DetailSheetTrigger,
   DetailSkeleton,
   useDetailPresentation
-} from "../chunk-CQH4FWYA.js";
+} from "../chunk-6PZ7OBYU.js";
 import "../chunk-ZBIXBQNI.js";
 import "../chunk-K4DHWGCT.js";
 import "../chunk-HJO32O7Z.js";
@@ -28,7 +28,7 @@ import "../chunk-7QQN3KNP.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   BackLink,
   DetailBody,

package/dist/ui/diff-view.js

@@ -6,11 +6,12 @@ import {
   diffStats,
   diffWords,
   failedLoadParts
-} from "../chunk-SRFARKXC.js";
-import "../chunk-WHWUWN2X.js";
-import "../chunk-L4OF77LE.js";
+} from "../chunk-K56XV3C3.js";
+import "../chunk-IKXNLWAL.js";
+import "../chunk-O4OOG3D6.js";
 import "../chunk-HJO32O7Z.js";
 import "../chunk-ZMBJPN4T.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-7QQN3KNP.js";
 import "../chunk-TXS65BB2.js";
 export {

package/dist/ui/disclosure.js

@@ -1,9 +1,9 @@
 "use client";
 import {
   Disclosure
-} from "../chunk-AB5MBIXY.js";
+} from "../chunk-I4MRDSUF.js";
 import "../chunk-NKFTYEON.js";
-import "../chunk-CQH4FWYA.js";
+import "../chunk-6PZ7OBYU.js";
 import "../chunk-ZBIXBQNI.js";
 import "../chunk-K4DHWGCT.js";
 import "../chunk-HJO32O7Z.js";
@@ -15,7 +15,7 @@ import "../chunk-7QQN3KNP.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   Disclosure
 };

package/dist/ui/email-chips-input.js

@@ -1,11 +1,13 @@
 "use client";
 import {
   EmailChipsInput
-} from "../chunk-73NXYYWE.js";
-import "../chunk-AOHU6O3M.js";
+} from "../chunk-O732GAFC.js";
+import "../chunk-MVW6HNPI.js";
+import "../chunk-V4Z4B2E3.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-EDYVC3U3.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   EmailChipsInput
 };

package/dist/ui/error-message.js

@@ -2,8 +2,9 @@
 import {
   ErrorMessage,
   TechnicalDetails
-} from "../chunk-WHWUWN2X.js";
+} from "../chunk-IKXNLWAL.js";
 import "../chunk-ZMBJPN4T.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-TXS65BB2.js";
 export {
   ErrorMessage,

package/dist/ui/error-reference.d.ts

@@ -0,0 +1,15 @@
+export interface ErrorTextParts {
+    /** The text without an "API 409:" prefix or the reference. */
+    text: string;
+    /** The request reference, for an unexpected failure only. */
+    reference: string | undefined;
+}
+/** True for a 4xx: the request was refused for a reason the person can act on. */
+export declare function isExpectedApiStatus(status: number | undefined): boolean;
+/** The status in a raw "API 409: ..." message, if it has one. */
+export declare function apiStatusInText(text: string): number | undefined;
+/**
+ * Splits text meant for a person into what to show and the reference to offer
+ * discreetly. A raw "API 4xx: ..." message loses its prefix and its reference.
+ */
+export declare function splitErrorText(text: string): ErrorTextParts;

package/dist/ui/error-text.d.ts

@@ -0,0 +1,10 @@
+import { type ReactNode } from "react";
+/**
+ * One line of error text from `userErrorText`. An unexpected failure's
+ * "Reference: <id>." becomes a small "Copy details" instead of printed text,
+ * and a raw "API 409:" prefix never shows. Anything that is not a string
+ * renders as is.
+ */
+export declare function ErrorText({ children }: {
+    children?: ReactNode;
+}): import("react").JSX.Element;

package/dist/ui/error-text.js

@@ -0,0 +1,9 @@
+"use client";
+import {
+  ErrorText
+} from "../chunk-V4Z4B2E3.js";
+import "../chunk-FYWT2O76.js";
+export {
+  ErrorText
+};
+//# sourceMappingURL=error-text.js.map

package/dist/ui/error-text.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/ui/field.js

@@ -8,10 +8,12 @@ import {
   TextInput,
   useField,
   useFieldControlProps
-} from "../chunk-AOHU6O3M.js";
+} from "../chunk-MVW6HNPI.js";
+import "../chunk-V4Z4B2E3.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-EDYVC3U3.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   Checkbox,
   CheckboxField,

package/dist/ui/flush-form-page.js

@@ -3,19 +3,21 @@ import {
   FLUSH_DETAIL_PAGE_CLASS,
   FLUSH_FORM_PAGE_CLASS,
   FlushFormPage
-} from "../chunk-5QM2WPKV.js";
-import "../chunk-IGVVXLKJ.js";
-import "../chunk-WHWUWN2X.js";
-import "../chunk-L4OF77LE.js";
+} from "../chunk-4E3ZJRTZ.js";
+import "../chunk-ZYAZUPPV.js";
+import "../chunk-IKXNLWAL.js";
+import "../chunk-O4OOG3D6.js";
 import "../chunk-HJO32O7Z.js";
 import "../chunk-HD5X76TP.js";
 import "../chunk-ZMBJPN4T.js";
-import "../chunk-WLEDGIVS.js";
+import "../chunk-FSOQDUCG.js";
+import "../chunk-V4Z4B2E3.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-7QQN3KNP.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   FLUSH_DETAIL_PAGE_CLASS,
   FLUSH_FORM_PAGE_CLASS,

package/dist/ui/form-dialog.js

@@ -7,18 +7,20 @@ import {
   FormPage,
   firstFormField,
   useFormOverlay
-} from "../chunk-IGVVXLKJ.js";
-import "../chunk-WHWUWN2X.js";
-import "../chunk-L4OF77LE.js";
+} from "../chunk-ZYAZUPPV.js";
+import "../chunk-IKXNLWAL.js";
+import "../chunk-O4OOG3D6.js";
 import "../chunk-HJO32O7Z.js";
 import "../chunk-HD5X76TP.js";
 import "../chunk-ZMBJPN4T.js";
-import "../chunk-WLEDGIVS.js";
+import "../chunk-FSOQDUCG.js";
+import "../chunk-V4Z4B2E3.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-7QQN3KNP.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   FormDialog,
   FormDialogChromeProvider,

package/dist/ui/list-row.js

@@ -5,11 +5,11 @@ import {
   RowIndicator,
   RowList,
   useRowListVariant
-} from "../chunk-G6ZZC543.js";
+} from "../chunk-54YW6SZZ.js";
 import "../chunk-GM3LG6BG.js";
 import "../chunk-K4DHWGCT.js";
 import "../chunk-HJO32O7Z.js";
-import "../chunk-ELL6HSYR.js";
+import "../chunk-53AGXXZM.js";
 import "../chunk-5OTQA7CM.js";
 import "../chunk-ZMBJPN4T.js";
 import "../chunk-UX3XHFRX.js";
@@ -17,7 +17,7 @@ import "../chunk-X5NTDJIO.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   ListRow,
   ListRowSkeleton,

package/dist/ui/load-failure.js

@@ -1,11 +1,12 @@
 "use client";
 import {
   ErrorMessage
-} from "../chunk-WHWUWN2X.js";
+} from "../chunk-IKXNLWAL.js";
 import {
   apiErrorFacts
-} from "../chunk-L4OF77LE.js";
+} from "../chunk-O4OOG3D6.js";
 import "../chunk-ZMBJPN4T.js";
+import "../chunk-FYWT2O76.js";
 import {
   Button
 } from "../chunk-7QQN3KNP.js";

package/dist/ui/load-failure.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/ui/load-failure.tsx"],"sourcesContent":["import { RotateCcwIcon } from \"lucide-react\";\nimport { Button } from \"./button\";\nimport { ErrorMessage } from \"./error-message\";\nimport { apiErrorFacts } from \"./api-error\";\n\n/** A page or section that could not load, with its server facts and one retry action. */\nexport function LoadFailure({\n  title,\n  error,\n  onRetry,\n}: {\n  title: string;\n  error: unknown;\n  onRetry: () => void;\n}) {\n  const { status, reference, serverMessage } = apiErrorFacts(error);\n  let message = serverMessage ?? \"\";\n  if (message && !/[.!?]$/u.test(message)) message = `${message}.`;\n  if (message) message = message.charAt(0).toUpperCase() + message.slice(1);\n  return (\n    <ErrorMessage\n      variant=\"block\"\n      align=\"center\"\n      title={title}\n      reference={reference}\n      details={[\n        ...(status ? [{ label: \"Status\", value: String(status) }] : []),\n        { label: \"Message\", value: message || \"Something went wrong. Try again.\" },\n      ]}\n      action={\n        <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={onRetry}>\n          <RotateCcwIcon aria-hidden=\"true\" />\n          Try again\n        </Button>\n      }\n    >\n      Check your connection, then try again.\n    </ErrorMessage>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,qBAAqB;AA8BtB,SACE,KADF;AAxBD,SAAS,YAAY;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,EAAE,QAAQ,WAAW,cAAc,IAAI,cAAc,KAAK;AAChE,MAAI,UAAU,iBAAiB;AAC/B,MAAI,WAAW,CAAC,UAAU,KAAK,OAAO,EAAG,WAAU,GAAG,OAAO;AAC7D,MAAI,QAAS,WAAU,QAAQ,OAAO,CAAC,EAAE,YAAY,IAAI,QAAQ,MAAM,CAAC;AACxE,SACE;AAAA,IAAC;AAAA;AAAA,MACC,SAAQ;AAAA,MACR,OAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,SAAS;AAAA,QACP,GAAI,SAAS,CAAC,EAAE,OAAO,UAAU,OAAO,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC;AAAA,QAC7D,EAAE,OAAO,WAAW,OAAO,WAAW,mCAAmC;AAAA,MAC3E;AAAA,MACA,QACE,qBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,SAAS,SACzD;AAAA,4BAAC,iBAAc,eAAY,QAAO;AAAA,QAAE;AAAA,SAEtC;AAAA,MAEH;AAAA;AAAA,EAED;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/ui/load-failure.tsx"],"sourcesContent":["import { RotateCcwIcon } from \"lucide-react\";\nimport { Button } from \"./button\";\nimport { ErrorMessage } from \"./error-message\";\nimport { apiErrorFacts } from \"./api-error\";\n\n/** A page or section that could not load, with its server facts and one retry action. */\nexport function LoadFailure({\n  title,\n  error,\n  onRetry,\n}: {\n  title: string;\n  error: unknown;\n  onRetry: () => void;\n}) {\n  const { status, reference, serverMessage } = apiErrorFacts(error);\n  let message = serverMessage ?? \"\";\n  if (message && !/[.!?]$/u.test(message)) message = `${message}.`;\n  if (message) message = message.charAt(0).toUpperCase() + message.slice(1);\n  return (\n    <ErrorMessage\n      variant=\"block\"\n      align=\"center\"\n      title={title}\n      reference={reference}\n      details={[\n        ...(status ? [{ label: \"Status\", value: String(status) }] : []),\n        { label: \"Message\", value: message || \"Something went wrong. Try again.\" },\n      ]}\n      action={\n        <Button type=\"button\" variant=\"outline\" size=\"sm\" onClick={onRetry}>\n          <RotateCcwIcon aria-hidden=\"true\" />\n          Try again\n        </Button>\n      }\n    >\n      Check your connection, then try again.\n    </ErrorMessage>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,qBAAqB;AA8BtB,SACE,KADF;AAxBD,SAAS,YAAY;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,EAAE,QAAQ,WAAW,cAAc,IAAI,cAAc,KAAK;AAChE,MAAI,UAAU,iBAAiB;AAC/B,MAAI,WAAW,CAAC,UAAU,KAAK,OAAO,EAAG,WAAU,GAAG,OAAO;AAC7D,MAAI,QAAS,WAAU,QAAQ,OAAO,CAAC,EAAE,YAAY,IAAI,QAAQ,MAAM,CAAC;AACxE,SACE;AAAA,IAAC;AAAA;AAAA,MACC,SAAQ;AAAA,MACR,OAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,SAAS;AAAA,QACP,GAAI,SAAS,CAAC,EAAE,OAAO,UAAU,OAAO,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC;AAAA,QAC7D,EAAE,OAAO,WAAW,OAAO,WAAW,mCAAmC;AAAA,MAC3E;AAAA,MACA,QACE,qBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,SAAS,SACzD;AAAA,4BAAC,iBAAc,eAAY,QAAO;AAAA,QAAE;AAAA,SAEtC;AAAA,MAEH;AAAA;AAAA,EAED;AAEJ;","names":[]}

package/dist/ui/notice.js

@@ -1,7 +1,9 @@
 "use client";
 import {
   Notice
-} from "../chunk-WLEDGIVS.js";
+} from "../chunk-FSOQDUCG.js";
+import "../chunk-V4Z4B2E3.js";
+import "../chunk-FYWT2O76.js";
 import "../chunk-TXS65BB2.js";
 export {
   Notice

package/dist/ui/relative-time.js

@@ -11,12 +11,12 @@ import {
   timeZoneLabel,
   toDate,
   useMinuteNow
-} from "../chunk-ELL6HSYR.js";
+} from "../chunk-53AGXXZM.js";
 import "../chunk-UX3XHFRX.js";
 import "../chunk-UD6AAZSC.js";
 import "../chunk-XEA5BCMA.js";
 import "../chunk-TXS65BB2.js";
-import "../chunk-TNUSPXPW.js";
+import "../chunk-7T2ZE3VT.js";
 export {
   RelativeTime,
   RelativeTimeDefaultsContext,