@orthacms/users-admin 0.0.0-reserve.0

package/dist/lib/infrastructure/preferencesGateway/index.js

@@ -0,0 +1,43 @@
+import { apiClient, toApiError } from '@orthacms/utils-admin';
+/**
+ * React Query keys for a user's own preferences. Distinct from `membersKeys` —
+ * these are the caller's *own* app preferences, not a member record, so they
+ * never invalidate alongside the members list.
+ *
+ * The key is scoped **by user id**, not a flat `'me'`. Sign-out only invalidates
+ * the current-user query; every other cache entry survives it. With a shared
+ * `'me'` key, signing in as someone else on the same machine would read the
+ * previous user's cached theme (and, because this query never goes stale, never
+ * refetch to correct it). Scoping by id makes that structurally impossible.
+ */
+export const preferencesKeys = {
+    /** One user's preferences. */
+    forUser: (userId) => ['preferences', userId]
+};
+/**
+ * The one place `/api/preferences` is spoken to. Keeps `apiClient` out of the
+ * application hooks (per this plugin's layering) and normalizes transport
+ * errors to `ApiError` so callers branch on status, not axios internals.
+ */
+export const httpPreferencesGateway = {
+    /** Reads the signed-in user's preferences (defaults if never saved). */
+    async get() {
+        try {
+            const response = await apiClient.get('/preferences');
+            return response.data;
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    /** Persists the signed-in user's theme choice, returning the stored row. */
+    async updateTheme(theme) {
+        try {
+            const response = await apiClient.put('/preferences', { theme });
+            return response.data;
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    }
+};

package/dist/lib/pages/InviteMemberPage/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Full-page, three-step invite wizard (Details → Role → Workspaces) at
+ * `/users/invite`, on the design-system wizard chrome. Gated on `users:create`
+ * — the server enforces the same — so a user without it is redirected.
+ */
+export declare function InviteMemberPage(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/pages/InviteMemberPage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/pages/InviteMemberPage/index.tsx"],"names":[],"mappings":"AA+PA;;;;GAIG;AACH,wBAAgB,gBAAgB,gCAuiB/B"}

package/dist/lib/pages/MembersPage/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The Members management page: a searchable, filterable, paginated, and
+ * deep-linkable table of everyone who can sign in, with invite / edit / role /
+ * status controls gated on the signed-in user's `users:*` permissions. The URL
+ * query string is the single source of truth for search, the query-builder
+ * filter, and the page (via `useTableUrlState`), so a filtered view can be
+ * shared or bookmarked. Rendered at `/users` inside the authenticated shell.
+ *
+ * Gated on `users:read`: without it the page shows a no-access state and
+ * fetches nothing (the server would refuse the request anyway).
+ */
+export declare function MembersPage(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/pages/MembersPage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/pages/MembersPage/index.tsx"],"names":[],"mappings":"AAiEA;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,gCA0M1B"}

package/dist/lib/pages/UserAccessPage/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The Access tab: suspend or reactivate a member's sign-in. Mirrors the
+ * server's lifecycle — only `active` can be suspended, only `disabled`
+ * reactivated, and `pending` (un-accepted invite) is read-only. The last
+ * active admin and your own account can't be suspended; the button explains
+ * why instead of failing on submit.
+ */
+export declare function UserAccessPage(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/pages/UserAccessPage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/pages/UserAccessPage/index.tsx"],"names":[],"mappings":"AA8FA;;;;;;GAMG;AACH,wBAAgB,cAAc,gCAsG7B"}

package/dist/lib/pages/UserActivityPage/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The Activity tab: a timeline of audit events whose subject is this member,
+ * reusing the activity plugin's `useActivityLog` with a pinned `subjectId`
+ * filter. Gated on `activity:read` (the rail hides it otherwise). Paginated
+ * with the shared members pagination control.
+ */
+export declare function UserActivityPage(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/pages/UserActivityPage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/pages/UserActivityPage/index.tsx"],"names":[],"mappings":"AAoNA;;;;;GAKG;AACH,wBAAgB,gBAAgB,gCA6F/B"}

package/dist/lib/pages/UserGeneralPage/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The General tab: edit the member's display name; the email is read-only. The
+ * Save/Discard pair only enables on a real change. Edit controls require
+ * `users:update`; without it the fields render disabled.
+ */
+export declare function UserGeneralPage(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/pages/UserGeneralPage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/pages/UserGeneralPage/index.tsx"],"names":[],"mappings":"AAkDA;;;;GAIG;AACH,wBAAgB,eAAe,gCAkF9B"}

package/dist/lib/pages/UserRolesPage/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The Role tab: pick the member's single global role and apply it behind a
+ * confirm step (with an extra warning when escalating to Admin). The last
+ * active admin can't be re-roled; the picker locks with the reason shown.
+ * Requires `users:update`.
+ */
+export declare function UserRolesPage(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/pages/UserRolesPage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/pages/UserRolesPage/index.tsx"],"names":[],"mappings":"AAqEA;;;;;GAKG;AACH,wBAAgB,aAAa,gCA+F5B"}

package/dist/lib/pages/UserSessionsPage/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The Sessions tab: a member's live sessions with a per-device Revoke. Gated on
+ * `users:update` (the rail hides it otherwise); revoking is confirmed and drops
+ * the row on success. The viewer's own session can't be revoked from here.
+ */
+export declare function UserSessionsPage(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/pages/UserSessionsPage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/pages/UserSessionsPage/index.tsx"],"names":[],"mappings":"AA4DA;;;;GAIG;AACH,wBAAgB,gBAAgB,gCA6F/B"}

package/dist/lib/pages/UserWorkspacesPage/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The Workspaces tab: the member's workspace memberships, with add (a
+ * multi-select dialog) and per-card remove (confirmed). Memberships come from
+ * the shared detail record; mutations invalidate it so the list refreshes.
+ * Editing requires `users:update`.
+ */
+export declare function UserWorkspacesPage(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/pages/UserWorkspacesPage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/pages/UserWorkspacesPage/index.tsx"],"names":[],"mappings":"AAiEA;;;;;GAKG;AACH,wBAAgB,kBAAkB,gCAyHjC"}

package/dist/lib/presentation/components/AccountMenu/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The account widget pinned to the sidebar footer: a full-width row showing the
+ * signed-in user's avatar, name, and email that opens a menu with a link to
+ * their own profile (the user detail page) and a Logout action. Contributed to
+ * the shell's `SIDEBAR_FOOTER_SLOT`. Renders nothing until a user is resolved,
+ * so it never flashes an empty row during the auth probe.
+ */
+export declare function AccountMenu(): import("react").JSX.Element | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/AccountMenu/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/presentation/components/AccountMenu/index.tsx"],"names":[],"mappings":"AAqCA;;;;;;GAMG;AACH,wBAAgB,WAAW,uCA8D1B"}

package/dist/lib/presentation/components/AccountMenu/index.js

@@ -0,0 +1,42 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useNavigate } from 'react-router-dom';
+import { defineMessages, useIntl } from 'react-intl';
+import { ChevronsUpDown, LogOut, UserRound } from 'lucide-react';
+import { DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator, DropdownMenuTrigger, SidebarMenu, SidebarMenuButton, SidebarMenuItem } from '@orthacms/design-system';
+import { avatarColorForId, initialsOf } from '@orthacms/utils-admin';
+import { AuthStatus, useAuth, useLogoutMutation } from '@orthacms/identity-admin';
+import { MemberAvatar } from '../MemberAvatar';
+/** Intl descriptors for {@link AccountMenu}, co-located with the component. */
+const messages = defineMessages({
+    open: {
+        id: 'users.account.open',
+        defaultMessage: 'Account menu'
+    },
+    myProfile: {
+        id: 'users.account.myProfile',
+        defaultMessage: 'My profile'
+    },
+    logout: {
+        id: 'users.account.logout',
+        defaultMessage: 'Logout'
+    }
+});
+/**
+ * The account widget pinned to the sidebar footer: a full-width row showing the
+ * signed-in user's avatar, name, and email that opens a menu with a link to
+ * their own profile (the user detail page) and a Logout action. Contributed to
+ * the shell's `SIDEBAR_FOOTER_SLOT`. Renders nothing until a user is resolved,
+ * so it never flashes an empty row during the auth probe.
+ */
+export function AccountMenu() {
+    const intl = useIntl();
+    const navigate = useNavigate();
+    const auth = useAuth();
+    const logout = useLogoutMutation();
+    if (auth.status !== AuthStatus.Authenticated) {
+        return null;
+    }
+    const { id, email, name } = auth.user;
+    const displayName = name ?? email;
+    return (_jsx(SidebarMenu, { children: _jsx(SidebarMenuItem, { children: _jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsxs(SidebarMenuButton, { size: "lg", "aria-label": intl.formatMessage(messages.open), children: [_jsx(MemberAvatar, { initials: initialsOf(displayName), color: avatarColorForId(id), className: "size-8 text-xs" }), _jsxs("span", { className: "flex min-w-0 flex-1 flex-col text-left", children: [_jsx("span", { className: "truncate text-sm font-medium", children: displayName }), _jsx("span", { className: "truncate text-xs text-sidebar-foreground/70", children: email })] }), _jsx(ChevronsUpDown, { className: "ml-auto", "aria-hidden": true })] }) }), _jsxs(DropdownMenuContent, { side: "top", align: "start", className: "w-56", children: [_jsxs(DropdownMenuItem, { onSelect: () => navigate(`/users/${id}`), children: [_jsx(UserRound, { "aria-hidden": true }), intl.formatMessage(messages.myProfile)] }), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuItem, { disabled: logout.isPending, onSelect: () => logout.mutate(), children: [_jsx(LogOut, { "aria-hidden": true }), intl.formatMessage(messages.logout)] })] })] }) }) }));
+}

package/dist/lib/presentation/components/AddToWorkspacesDialog/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * A modal to add the member to one or more workspaces. Lists every workspace
+ * they're not already in (via the shared `GET /api/workspaces`), with a search
+ * filter and multi-select. The parent runs the actual additions and owns
+ * `busy`; the dialog stays open and non-dismissable until they settle.
+ */
+export declare function AddToWorkspacesDialog({ open, onOpenChange, existingIds, busy, onAdd }: {
+    /** Whether the dialog is shown. */
+    open: boolean;
+    /** Open/close handler; ignored while busy. */
+    onOpenChange: (open: boolean) => void;
+    /** Workspace ids the member already belongs to (excluded from the list). */
+    existingIds: ReadonlyArray<string>;
+    /** Whether additions are in flight. */
+    busy?: boolean;
+    /** Called with the chosen workspace ids. */
+    onAdd: (workspaceIds: string[]) => void;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/AddToWorkspacesDialog/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/presentation/components/AddToWorkspacesDialog/index.tsx"],"names":[],"mappings":"AAoDA;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,EAClC,IAAI,EACJ,YAAY,EACZ,WAAW,EACX,IAAY,EACZ,KAAK,EACR,EAAE;IACC,mCAAmC;IACnC,IAAI,EAAE,OAAO,CAAC;IACd,8CAA8C;IAC9C,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACtC,4EAA4E;IAC5E,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,uCAAuC;IACvC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4CAA4C;IAC5C,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;CAC3C,+BAyJA"}

package/dist/lib/presentation/components/AddToWorkspacesDialog/index.js

@@ -0,0 +1,89 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useMemo, useState } from 'react';
+import { defineMessages, useIntl } from 'react-intl';
+import { Button, Checkbox, Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, Input, Label, Spinner, cn } from '@orthacms/design-system';
+import { useWorkspaceOptions } from '../../../application/useWorkspaceOptions';
+import { MemberAvatar } from '../MemberAvatar';
+/** Intl descriptors for {@link AddToWorkspacesDialog}. */
+const messages = defineMessages({
+    title: {
+        id: 'users.addWorkspaces.title',
+        defaultMessage: 'Add to workspaces'
+    },
+    description: {
+        id: 'users.addWorkspaces.description',
+        defaultMessage: 'Pick the workspaces this member should join.'
+    },
+    search: {
+        id: 'users.addWorkspaces.search',
+        defaultMessage: 'Search workspaces'
+    },
+    none: {
+        id: 'users.addWorkspaces.none',
+        defaultMessage: 'This member already belongs to every workspace.'
+    },
+    noMatch: {
+        id: 'users.addWorkspaces.noMatch',
+        defaultMessage: 'No workspaces match your search.'
+    },
+    error: {
+        id: 'users.addWorkspaces.error',
+        defaultMessage: 'Couldn’t load workspaces. Please try again.'
+    },
+    cancel: { id: 'users.addWorkspaces.cancel', defaultMessage: 'Cancel' },
+    add: {
+        id: 'users.addWorkspaces.add',
+        defaultMessage: 'Add{count, plural, =0 {} other { (#)}}'
+    }
+});
+/**
+ * A modal to add the member to one or more workspaces. Lists every workspace
+ * they're not already in (via the shared `GET /api/workspaces`), with a search
+ * filter and multi-select. The parent runs the actual additions and owns
+ * `busy`; the dialog stays open and non-dismissable until they settle.
+ */
+export function AddToWorkspacesDialog({ open, onOpenChange, existingIds, busy = false, onAdd }) {
+    const intl = useIntl();
+    const { data, isPending, isError } = useWorkspaceOptions(open);
+    const [query, setQuery] = useState('');
+    const [selected, setSelected] = useState(new Set());
+    const existing = useMemo(() => new Set(existingIds), [existingIds]);
+    const available = useMemo(() => (data ?? []).filter((workspace) => !existing.has(workspace.id)), [data, existing]);
+    const filtered = useMemo(() => {
+        const needle = query.trim().toLowerCase();
+        if (!needle) {
+            return available;
+        }
+        return available.filter((workspace) => workspace.name.toLowerCase().includes(needle));
+    }, [available, query]);
+    const toggle = (id) => {
+        setSelected((prev) => {
+            const next = new Set(prev);
+            if (next.has(id)) {
+                next.delete(id);
+            }
+            else {
+                next.add(id);
+            }
+            return next;
+        });
+    };
+    const close = (next) => {
+        if (busy) {
+            return;
+        }
+        if (!next) {
+            setQuery('');
+            setSelected(new Set());
+        }
+        onOpenChange(next);
+    };
+    return (_jsx(Dialog, { open: open, onOpenChange: close, children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: intl.formatMessage(messages.title) }), _jsx(DialogDescription, { children: intl.formatMessage(messages.description) })] }), isPending ? (_jsx("div", { className: "flex justify-center py-8", children: _jsx(Spinner, {}) })) : isError ? (_jsx("p", { className: "py-6 text-center text-sm text-muted-foreground", children: intl.formatMessage(messages.error) })) : available.length === 0 ? (_jsx("p", { className: "py-6 text-center text-sm text-muted-foreground", children: intl.formatMessage(messages.none) })) : (_jsxs("div", { className: "space-y-3", children: [_jsx(Input, { value: query, onChange: (event) => setQuery(event.target.value), placeholder: intl.formatMessage(messages.search), "aria-label": intl.formatMessage(messages.search), disabled: busy }), filtered.length === 0 ? (_jsx("p", { className: "py-6 text-center text-sm text-muted-foreground", children: intl.formatMessage(messages.noMatch) })) : (_jsx("ul", { className: "max-h-64 space-y-1 overflow-y-auto", children: filtered.map((workspace) => {
+                                const id = `add-workspace-${workspace.id}`;
+                                const checked = selected.has(workspace.id);
+                                return (_jsx("li", { children: _jsxs(Label, { htmlFor: id, className: cn('flex cursor-pointer items-center gap-3 rounded-lg p-2 transition-colors hover:bg-muted/50', busy &&
+                                            'cursor-not-allowed opacity-70'), children: [_jsx(Checkbox, { id: id, checked: checked, disabled: busy, onCheckedChange: () => toggle(workspace.id) }), _jsx(MemberAvatar, { initials: workspace.initials, color: workspace.color, className: "size-9 shrink-0 text-xs" }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "block truncate text-sm", children: workspace.name }), workspace.description ? (_jsx("span", { className: "line-clamp-3 text-xs text-muted-foreground", children: workspace.description })) : null] })] }) }, workspace.id));
+                            }) }))] })), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "outline", onClick: () => close(false), disabled: busy, children: intl.formatMessage(messages.cancel) }), _jsxs(Button, { onClick: () => onAdd([...selected]), disabled: busy || selected.size === 0, children: [busy ? _jsx(Spinner, {}) : null, intl.formatMessage(messages.add, {
+                                    count: selected.size
+                                })] })] })] }) }));
+}

package/dist/lib/presentation/components/BackLink/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * A muted "back" link with a leading arrow — the detail page's return path to
+ * the members roster. The arrow is decorative; the text label carries the
+ * destination for assistive tech.
+ */
+export declare function BackLink({ to, label, className }: {
+    /** Destination path. */
+    to: string;
+    /** Visible, accessible label (e.g. "Back to members"). */
+    label: string;
+    /** Extra classes. */
+    className?: string;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/BackLink/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/presentation/components/BackLink/index.tsx"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,EACrB,EAAE,EACF,KAAK,EACL,SAAS,EACZ,EAAE;IACC,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,+BAaA"}

package/dist/lib/presentation/components/BackLink/index.js

@@ -0,0 +1,12 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Link } from 'react-router-dom';
+import { ArrowLeft } from 'lucide-react';
+import { cn } from '@orthacms/design-system';
+/**
+ * A muted "back" link with a leading arrow — the detail page's return path to
+ * the members roster. The arrow is decorative; the text label carries the
+ * destination for assistive tech.
+ */
+export function BackLink({ to, label, className }) {
+    return (_jsxs(Link, { to: to, className: cn('inline-flex items-center gap-1.5 text-sm text-muted-foreground transition-colors hover:text-foreground', className), children: [_jsx(ArrowLeft, { "aria-hidden": true, className: "size-4" }), label] }));
+}

package/dist/lib/presentation/components/InviteLinkDialog/index.d.ts

@@ -0,0 +1,25 @@
+/** Props for {@link InviteLinkDialog}. */
+type InviteLinkDialogProps = {
+    /** The freshly rotated invite link, or `null` when there is none to show. */
+    link: string | null;
+    /** Who the link is for. */
+    email: string;
+    /** Whether the dialog is open. */
+    open: boolean;
+    /** Called when the dialog opens or closes. */
+    onOpenChange: (open: boolean) => void;
+};
+/**
+ * Shows the invite link produced by a **resend**. Resending rotates the token,
+ * which kills the link the invitee may already be holding — so handing the new
+ * one over is not a nicety, it is the rest of the operation.
+ *
+ * Because of that, dismissing before copying is guarded. Esc, an overlay click
+ * and the close button all reach `onOpenChange(false)` by reflex, and the link
+ * is not re-fetchable: losing it leaves the invitee with a dead link and the
+ * admin with no live one, recoverable only by resending — which rotates again.
+ * So the first dismissal without a copy asks; once copied, it closes freely.
+ */
+export declare function InviteLinkDialog({ link, email, open, onOpenChange }: InviteLinkDialogProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/InviteLinkDialog/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/presentation/components/InviteLinkDialog/index.tsx"],"names":[],"mappings":"AA8CA,0CAA0C;AAC1C,KAAK,qBAAqB,GAAG;IACzB,6EAA6E;IAC7E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,8CAA8C;IAC9C,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;CACzC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,EAC7B,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,YAAY,EACf,EAAE,qBAAqB,+BAyFvB"}

package/dist/lib/presentation/components/InviteLinkDialog/index.js

@@ -0,0 +1,77 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { defineMessages, useIntl } from 'react-intl';
+import { Alert, AlertDescription, Button, Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle } from '@orthacms/design-system';
+import { TriangleAlert } from 'lucide-react';
+import { InviteLinkPanel } from '../InviteLinkPanel';
+/** Intl descriptors for {@link InviteLinkDialog}, co-located with the component. */
+const messages = defineMessages({
+    title: {
+        id: 'users.inviteLinkDialog.title',
+        defaultMessage: 'Send this link to {email}'
+    },
+    description: {
+        id: 'users.inviteLinkDialog.description',
+        defaultMessage: 'The previous invite link stopped working the moment this one was created, so this is the link they need. It’s shown once — copy it before you close this.'
+    },
+    done: {
+        id: 'users.inviteLinkDialog.done',
+        defaultMessage: 'Done'
+    },
+    uncopied: {
+        id: 'users.inviteLinkDialog.uncopied',
+        defaultMessage: 'You haven’t copied the link yet, and it can’t be shown again. Closing now leaves {email} with no working invite until you resend.'
+    },
+    closeAnyway: {
+        id: 'users.inviteLinkDialog.closeAnyway',
+        defaultMessage: 'Close without copying'
+    },
+    keepOpen: {
+        id: 'users.inviteLinkDialog.keepOpen',
+        defaultMessage: 'Keep it open'
+    }
+});
+/**
+ * Shows the invite link produced by a **resend**. Resending rotates the token,
+ * which kills the link the invitee may already be holding — so handing the new
+ * one over is not a nicety, it is the rest of the operation.
+ *
+ * Because of that, dismissing before copying is guarded. Esc, an overlay click
+ * and the close button all reach `onOpenChange(false)` by reflex, and the link
+ * is not re-fetchable: losing it leaves the invitee with a dead link and the
+ * admin with no live one, recoverable only by resending — which rotates again.
+ * So the first dismissal without a copy asks; once copied, it closes freely.
+ */
+export function InviteLinkDialog({ link, email, open, onOpenChange }) {
+    const intl = useIntl();
+    const [copied, setCopied] = useState(false);
+    const [confirmingClose, setConfirmingClose] = useState(false);
+    // A new link is a new chance to lose it — reset the guard whenever one
+    // arrives, so a second resend doesn't inherit the first one's "copied".
+    useEffect(() => {
+        if (link !== null) {
+            setCopied(false);
+            setConfirmingClose(false);
+        }
+    }, [link]);
+    /** Close for real, clearing the guard. */
+    const close = () => {
+        setConfirmingClose(false);
+        onOpenChange(false);
+    };
+    /** Every dismissal path funnels through here so none of them can slip past. */
+    const requestClose = () => {
+        if (copied) {
+            close();
+            return;
+        }
+        setConfirmingClose(true);
+    };
+    return (_jsx(Dialog, { open: open, onOpenChange: (next) => {
+            if (next) {
+                onOpenChange(true);
+                return;
+            }
+            requestClose();
+        }, children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: intl.formatMessage(messages.title, { email }) }), _jsx(DialogDescription, { children: intl.formatMessage(messages.description) })] }), link && (_jsx(InviteLinkPanel, { link: link, email: email, onCopied: () => setCopied(true) })), confirmingClose ? (_jsxs(Alert, { variant: "destructive", role: "alert", children: [_jsx(TriangleAlert, { "aria-hidden": true }), _jsx(AlertDescription, { children: intl.formatMessage(messages.uncopied, { email }) })] })) : null, _jsx(DialogFooter, { children: confirmingClose ? (_jsxs(_Fragment, { children: [_jsx(Button, { variant: "outline", onClick: () => setConfirmingClose(false), children: intl.formatMessage(messages.keepOpen) }), _jsx(Button, { variant: "destructive", onClick: close, children: intl.formatMessage(messages.closeAnyway) })] })) : (_jsx(Button, { onClick: requestClose, children: intl.formatMessage(messages.done) })) })] }) }));
+}

package/dist/lib/presentation/components/InviteLinkPanel/index.d.ts

@@ -0,0 +1,26 @@
+/** Props for {@link InviteLinkPanel}. */
+type InviteLinkPanelProps = {
+    /** The full invite URL to hand over. */
+    link: string;
+    /** Who the link is for — named in the warning so the risk is concrete. */
+    email: string;
+    /**
+     * Called once the link has actually reached the clipboard. Lets a container
+     * tell "captured" from "about to be lost" — the resend dialog guards its
+     * dismissal on it.
+     */
+    onCopied?: () => void;
+};
+/**
+ * The reveal-once invite link, with a copy button and a plain warning about
+ * what the link is. Mirrors the API-token reveal dialog: the secret exists only
+ * in the caller's state, is never re-fetchable, and this is the single chance to
+ * capture it.
+ *
+ * It exists because nothing emails invites yet — the admin is the delivery
+ * channel. When a mailer lands (identity epic #11) this becomes a fallback for
+ * deployments with no SMTP rather than the only path.
+ */
+export declare function InviteLinkPanel({ link, email, onCopied }: InviteLinkPanelProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/InviteLinkPanel/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/presentation/components/InviteLinkPanel/index.tsx"],"names":[],"mappings":"AAoCA,yCAAyC;AACzC,KAAK,oBAAoB,GAAG;IACxB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;CACzB,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,EAC5B,IAAI,EACJ,KAAK,EACL,QAAQ,EACX,EAAE,oBAAoB,+BAoDtB"}

package/dist/lib/presentation/components/InviteLinkPanel/index.js

@@ -0,0 +1,59 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
+import { defineMessages, useIntl } from 'react-intl';
+import { Check, Copy, TriangleAlert } from 'lucide-react';
+import { Alert, AlertDescription, Button, toast } from '@orthacms/design-system';
+/** Intl descriptors for {@link InviteLinkPanel}, co-located with the component. */
+const messages = defineMessages({
+    copy: {
+        id: 'users.inviteLink.copy',
+        defaultMessage: 'Copy link'
+    },
+    copied: {
+        id: 'users.inviteLink.copied',
+        defaultMessage: 'Invite link copied to clipboard'
+    },
+    copyFailed: {
+        id: 'users.inviteLink.copyFailed',
+        defaultMessage: 'Couldn’t reach the clipboard. Select the link and copy it manually.'
+    },
+    warning: {
+        id: 'users.inviteLink.warning',
+        defaultMessage: 'This link is shown once and works once. Anyone who opens it becomes {email} — send it the way you’d send a password, not in a public channel.'
+    },
+    linkLabel: {
+        id: 'users.inviteLink.linkLabel',
+        defaultMessage: 'Invite link for {email}'
+    }
+});
+/**
+ * The reveal-once invite link, with a copy button and a plain warning about
+ * what the link is. Mirrors the API-token reveal dialog: the secret exists only
+ * in the caller's state, is never re-fetchable, and this is the single chance to
+ * capture it.
+ *
+ * It exists because nothing emails invites yet — the admin is the delivery
+ * channel. When a mailer lands (identity epic #11) this becomes a fallback for
+ * deployments with no SMTP rather than the only path.
+ */
+export function InviteLinkPanel({ link, email, onCopied }) {
+    const intl = useIntl();
+    const [copied, setCopied] = useState(false);
+    const copy = async () => {
+        try {
+            await navigator.clipboard.writeText(link);
+            setCopied(true);
+            onCopied?.();
+            toast.success(intl.formatMessage(messages.copied));
+        }
+        catch {
+            // Clipboard access can be denied (insecure origin, permissions).
+            // The link is selectable in the field, so say so rather than
+            // failing silently.
+            toast.error(intl.formatMessage(messages.copyFailed));
+        }
+    };
+    return (_jsxs("div", { className: "flex flex-col gap-4", children: [_jsxs("div", { className: "flex min-w-0 items-center gap-2", children: [_jsx("input", { readOnly: true, value: link, "aria-label": intl.formatMessage(messages.linkLabel, {
+                            email
+                        }), onFocus: (e) => e.currentTarget.select(), className: "min-w-0 flex-1 truncate rounded-md bg-muted px-3 py-2 font-mono text-sm" }), _jsxs(Button, { type: "button", variant: "outline", className: "shrink-0", onClick: copy, children: [copied ? _jsx(Check, { "aria-hidden": true }) : _jsx(Copy, { "aria-hidden": true }), intl.formatMessage(messages.copy)] })] }), _jsxs(Alert, { children: [_jsx(TriangleAlert, { "aria-hidden": true }), _jsx(AlertDescription, { children: intl.formatMessage(messages.warning, { email }) })] })] }));
+}

package/dist/lib/presentation/components/InviteSent/index.d.ts

@@ -0,0 +1,20 @@
+/** Props for {@link InviteSent}. */
+type InviteSentProps = {
+    /** The invitee's email. */
+    email: string;
+    /** The invite link to hand over. */
+    link: string;
+    /** Human-readable label of the role granted on acceptance. */
+    roleLabel: string;
+};
+/**
+ * The invite wizard's final step: the invite exists, and here is the link.
+ *
+ * It is a step rather than a toast-then-redirect because the link is shown
+ * **once** — the server keeps only its hash, so navigating away before copying
+ * it means resending the invite. The copy spells out what the invitee will see,
+ * since the admin can't preview the page they're sending someone to.
+ */
+export declare function InviteSent({ email, link, roleLabel }: InviteSentProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/InviteSent/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/presentation/components/InviteSent/index.tsx"],"names":[],"mappings":"AAmDA,oCAAoC;AACpC,KAAK,eAAe,GAAG;IACnB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe,+BA4DrE"}