@orthacms/users-admin 0.0.0-reserve.0

package/dist/lib/presentation/components/MembersTable/MemberRowActions/index.js

@@ -0,0 +1,284 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useId, useState } from 'react';
+import { useNavigate } from 'react-router-dom';
+import { defineMessages, useIntl } from 'react-intl';
+import { Activity, Ban, Building2, CircleCheck, KeyRound, MonitorSmartphone, MoreHorizontal, Send, ShieldCheck, Trash2, UserRound } from 'lucide-react';
+import { useAuth, useHasPermission } from '@orthacms/identity-admin';
+import { Button, ConfirmDialog, DropdownMenu, DropdownMenuContent, DropdownMenuGroup, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuTrigger, Tooltip, TooltipContent, TooltipTrigger, cn, toast } from '@orthacms/design-system';
+import { inviteLinkFor } from '../../../../infrastructure/inviteLink';
+import { InviteLinkDialog } from '../../InviteLinkDialog';
+import { MEMBERS_RESULTS_ANCHOR_ID } from '../../../membersResultsAnchor';
+import { useResendInvite } from '../../../../application/useResendInvite';
+import { useRevokeInvite } from '../../../../application/useRevokeInvite';
+import { useSetMemberStatus } from '../../../../application/useSetMemberStatus';
+import { MemberEntity } from '../../../../domain/member';
+/** Intl descriptors for {@link MemberRowActions}, co-located with the component. */
+const messages = defineMessages({
+    open: {
+        id: 'users.actions.open',
+        defaultMessage: 'Actions for {name}'
+    },
+    account: {
+        id: 'users.actions.account',
+        defaultMessage: 'Account'
+    },
+    audit: {
+        id: 'users.actions.audit',
+        defaultMessage: 'Audit'
+    },
+    access: {
+        id: 'users.actions.access',
+        defaultMessage: 'Access'
+    },
+    general: {
+        id: 'users.actions.general',
+        defaultMessage: 'General'
+    },
+    role: {
+        id: 'users.actions.role',
+        defaultMessage: 'Role'
+    },
+    workspaces: {
+        id: 'users.actions.workspaces',
+        defaultMessage: 'Workspaces'
+    },
+    sessions: {
+        id: 'users.actions.sessions',
+        defaultMessage: 'Sessions'
+    },
+    activity: {
+        id: 'users.actions.activity',
+        defaultMessage: 'Activity'
+    },
+    signInAccess: {
+        id: 'users.actions.signInAccess',
+        defaultMessage: 'Sign-in access'
+    },
+    disable: {
+        id: 'users.actions.disable',
+        defaultMessage: 'Disable'
+    },
+    enable: {
+        id: 'users.actions.enable',
+        defaultMessage: 'Enable'
+    },
+    resend: {
+        id: 'users.actions.resend',
+        defaultMessage: 'Resend invite'
+    },
+    revoke: {
+        id: 'users.actions.revoke',
+        defaultMessage: 'Revoke invite'
+    },
+    disableSelf: {
+        id: 'users.actions.disableSelf',
+        defaultMessage: 'You cannot disable your own account.'
+    },
+    disableLastAdmin: {
+        id: 'users.actions.disableLastAdmin',
+        defaultMessage: 'The last remaining admin cannot be disabled. Promote another member to admin first.'
+    },
+    disabled: {
+        id: 'users.actions.disabled.toast',
+        defaultMessage: 'Disabled {name}'
+    },
+    enabled: {
+        id: 'users.actions.enabled.toast',
+        defaultMessage: 'Enabled {name}'
+    },
+    revoked: {
+        id: 'users.actions.revoked.toast',
+        defaultMessage: 'Revoked the invite for {email}'
+    },
+    actionFailed: {
+        id: 'users.actions.failed.toast',
+        defaultMessage: 'Something went wrong. Please try again.'
+    },
+    confirmDisableTitle: {
+        id: 'users.actions.confirmDisable.title',
+        defaultMessage: 'Disable {name}?'
+    },
+    confirmDisableBody: {
+        id: 'users.actions.confirmDisable.body',
+        defaultMessage: '{email} will be signed out everywhere and blocked from signing in until you enable them again. Their workspace memberships and authored content are kept.'
+    },
+    confirmRevokeTitle: {
+        id: 'users.actions.confirmRevoke.title',
+        defaultMessage: 'Delete this invite permanently?'
+    },
+    confirmRevokeBody: {
+        id: 'users.actions.confirmRevoke.body',
+        defaultMessage: 'The pending account for {email} and its workspace assignments are deleted. This cannot be undone — you would have to invite them again and re-choose their workspaces.'
+    },
+    confirmRevokeAction: {
+        id: 'users.actions.confirmRevoke.action',
+        defaultMessage: 'Delete invite'
+    }
+});
+/**
+ * The row-end kebab menu. It mirrors the user detail page's side rail: an
+ * **Account** group (General / Role / Workspaces) that every reader sees, then
+ * permission-gated **Audit** (Sessions / Activity) and **Access** (Sign-in
+ * access) groups — each item navigates straight to that tab. Below a separator
+ * sit the status quick actions: a pending invite offers Resend / Revoke, an
+ * active member Disable, a disabled member Enable, each shown only with its
+ * `users:*` permission. The guardrailed Disable (yourself, the sole admin)
+ * stays visible but inert with a tooltip. (Clicking the row itself also opens
+ * the member — see {@link MembersTable}.)
+ */
+export function MemberRowActions({ member }) {
+    const intl = useIntl();
+    const navigate = useNavigate();
+    const { user } = useAuth();
+    const canUpdate = useHasPermission('users:update');
+    const canInvite = useHasPermission('users:create');
+    const canRevoke = useHasPermission('users:delete');
+    const canReadActivity = useHasPermission('activity:read');
+    const setStatus = useSetMemberStatus();
+    const resendInvite = useResendInvite();
+    const revokeInvite = useRevokeInvite();
+    // The rotated link, held only until the dialog is dismissed. Resending
+    // invalidates whatever link the invitee already had, so the new one has to
+    // be handed over — until a mailer exists, by the admin (identity epic #11).
+    const [rotatedLink, setRotatedLink] = useState(null);
+    // Which destructive action is awaiting confirmation. Both of these are
+    // irreversible from the UI — revoking deletes the pending account outright —
+    // so neither fires straight off a menu selection (WCAG 3.3.4).
+    const [confirming, setConfirming] = useState(null);
+    const failed = () => toast.error(intl.formatMessage(messages.actionFailed));
+    const base = `/users/${member.id}`;
+    const kebabId = `member-actions-${member.id}`;
+    /**
+     * Put focus back on a stable anchor after an overlay closes. Radix restores
+     * focus to whatever opened it, but a row-removing mutation unmounts that
+     * trigger mid-flight and focus lands on `<body>` — restarting a keyboard
+     * user at the top of the document after every action (WCAG 2.4.3). Deferred
+     * a frame so this runs after Radix's own restoration rather than racing it.
+     */
+    const restoreFocusTo = (selector) => {
+        requestAnimationFrame(() => {
+            document.querySelector(selector)?.focus();
+        });
+    };
+    /** The row survives this action, so focus belongs back on its own kebab. */
+    const focusKebab = () => restoreFocusTo(`#${CSS.escape(kebabId)}`);
+    /**
+     * The row is gone; fall back to the roster's results region. It wraps every
+     * result state, so it is still mounted even when removing this row emptied
+     * the table and swapped it for the empty state.
+     */
+    const focusResults = () => restoreFocusTo(`#${MEMBERS_RESULTS_ANCHOR_ID}`);
+    /** A navigation item that routes to one of the member's detail tabs. */
+    const navItem = (key, icon, label, to) => {
+        const Icon = icon;
+        return (_jsxs(DropdownMenuItem, { onSelect: () => navigate(to), children: [_jsx(Icon, { "aria-hidden": true }), label] }, key));
+    };
+    // Quick status actions, mirroring the member's lifecycle.
+    let quickItems = [];
+    let destructiveItem = null;
+    if (member.status === 'pending') {
+        quickItems = [
+            canInvite ? (_jsxs(DropdownMenuItem, { onSelect: () => resendInvite.mutate(member.id, {
+                    onSuccess: (invited) => setRotatedLink(inviteLinkFor(invited.inviteToken)),
+                    onError: failed
+                }), children: [_jsx(Send, { "aria-hidden": true }), intl.formatMessage(messages.resend)] }, "resend")) : null
+        ];
+        destructiveItem = canRevoke ? (_jsxs(DropdownMenuItem, { className: "text-destructive focus:text-destructive", onSelect: () => setConfirming('revoke'), children: [_jsx(Trash2, { "aria-hidden": true }), intl.formatMessage(messages.revoke)] }, "revoke")) : null;
+    }
+    else if (member.status === 'active') {
+        // The Member entity mirrors the server's guardrails (self, sole admin)
+        // so the item can disable itself with a reason instead of failing.
+        const removal = MemberEntity.of(member).canBeRemoved(user?.id);
+        const disableBlockedReason = removal.ok
+            ? null
+            : intl.formatMessage(removal.reason === 'self'
+                ? messages.disableSelf
+                : messages.disableLastAdmin);
+        quickItems = [
+            canUpdate ? (_jsxs(GuardedMenuItem, { blockedReason: disableBlockedReason, onSelect: () => setConfirming('disable'), children: [_jsx(Ban, { "aria-hidden": true }), intl.formatMessage(messages.disable)] }, "disable")) : null
+        ];
+    }
+    else {
+        quickItems = [
+            canUpdate ? (_jsxs(DropdownMenuItem, { onSelect: () => setStatus.mutate({ id: member.id, disabled: false }, {
+                    onSuccess: () => toast.success(intl.formatMessage(messages.enabled, {
+                        name: member.name
+                    })),
+                    onError: failed
+                }), children: [_jsx(CircleCheck, { "aria-hidden": true }), intl.formatMessage(messages.enable)] }, "enable")) : null
+        ];
+    }
+    const visibleQuick = quickItems.filter(Boolean);
+    const hasQuick = visibleQuick.length > 0 || destructiveItem;
+    /** Delete the pending account. The row goes with it, so focus the table. */
+    const confirmRevoke = () => revokeInvite.mutate(member.id, {
+        onSuccess: () => {
+            setConfirming(null);
+            focusResults();
+            toast.success(intl.formatMessage(messages.revoked, {
+                email: member.email
+            }));
+        },
+        onError: () => {
+            setConfirming(null);
+            focusKebab();
+            failed();
+        }
+    });
+    /** Suspend sign-in. The row stays (its pill flips), so focus its kebab. */
+    const confirmDisable = () => setStatus.mutate({ id: member.id, disabled: true }, {
+        onSuccess: () => {
+            setConfirming(null);
+            focusKebab();
+            toast.success(intl.formatMessage(messages.disabled, {
+                name: member.name
+            }));
+        },
+        onError: () => {
+            setConfirming(null);
+            focusKebab();
+            failed();
+        }
+    });
+    const confirmBusy = revokeInvite.isPending || setStatus.isPending;
+    return (_jsxs(_Fragment, { children: [_jsxs(DropdownMenu, { modal: false, children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { id: kebabId, variant: "ghost", size: "icon", className: "size-8", "aria-label": intl.formatMessage(messages.open, {
+                                name: member.name
+                            }), children: _jsx(MoreHorizontal, { "aria-hidden": true }) }) }), _jsxs(DropdownMenuContent, { align: "end", className: "w-48", children: [_jsxs(DropdownMenuGroup, { children: [_jsx(DropdownMenuLabel, { children: intl.formatMessage(messages.account) }), navItem('general', UserRound, intl.formatMessage(messages.general), `${base}/general`), navItem('role', ShieldCheck, intl.formatMessage(messages.role), `${base}/roles`), navItem('workspaces', Building2, intl.formatMessage(messages.workspaces), `${base}/workspaces`)] }), canUpdate || canReadActivity ? (_jsxs(_Fragment, { children: [_jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuGroup, { children: [_jsx(DropdownMenuLabel, { children: intl.formatMessage(messages.audit) }), canUpdate
+                                                ? navItem('sessions', MonitorSmartphone, intl.formatMessage(messages.sessions), `${base}/sessions`)
+                                                : null, canReadActivity
+                                                ? navItem('activity', Activity, intl.formatMessage(messages.activity), `${base}/activity`)
+                                                : null] })] })) : null, canUpdate ? (_jsxs(_Fragment, { children: [_jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuGroup, { children: [_jsx(DropdownMenuLabel, { children: intl.formatMessage(messages.access) }), navItem('access', KeyRound, intl.formatMessage(messages.signInAccess), `${base}/access`)] })] })) : null, hasQuick ? (_jsxs(_Fragment, { children: [_jsx(DropdownMenuSeparator, {}), visibleQuick.length > 0 ? (_jsx(DropdownMenuGroup, { children: visibleQuick })) : null, destructiveItem ? (_jsx(DropdownMenuGroup, { children: destructiveItem })) : null] })) : null] })] }), _jsx(InviteLinkDialog, { link: rotatedLink, email: member.email, open: rotatedLink !== null, onOpenChange: (open) => {
+                    if (!open) {
+                        setRotatedLink(null);
+                        // The row is still here — Radix can't restore focus to
+                        // the kebab because the menu that opened this dialog has
+                        // already unmounted, so do it explicitly.
+                        focusKebab();
+                    }
+                } }), _jsx(ConfirmDialog, { open: confirming !== null, onOpenChange: (open) => {
+                    if (!open) {
+                        setConfirming(null);
+                        focusKebab();
+                    }
+                }, busy: confirmBusy, title: intl.formatMessage(confirming === 'revoke'
+                    ? messages.confirmRevokeTitle
+                    : messages.confirmDisableTitle, { name: member.name }), description: intl.formatMessage(confirming === 'revoke'
+                    ? messages.confirmRevokeBody
+                    : messages.confirmDisableBody, { email: member.email }), confirmLabel: intl.formatMessage(confirming === 'revoke'
+                    ? messages.confirmRevokeAction
+                    : messages.disable), confirmVariant: "destructive", onConfirm: confirming === 'revoke' ? confirmRevoke : confirmDisable })] }));
+}
+/**
+ * A menu item that a guardrail can veto. When `blockedReason` is set the item
+ * stays visible but inert — styled disabled, `aria-disabled`, selection
+ * suppressed — and a tooltip carries the reason. Radix's real `disabled`
+ * suppresses the pointer/focus events tooltips need, hence the manual
+ * treatment.
+ */
+function GuardedMenuItem({ blockedReason, onSelect, children }) {
+    const reasonId = useId();
+    if (!blockedReason) {
+        return (_jsx(DropdownMenuItem, { onSelect: onSelect, children: children }));
+    }
+    return (_jsxs(Tooltip, { children: [_jsx(TooltipTrigger, { asChild: true, children: _jsxs(DropdownMenuItem, { "aria-disabled": true, "aria-describedby": reasonId, className: cn('opacity-50 focus:bg-transparent'), onSelect: (event) => event.preventDefault(), children: [children, _jsx("span", { id: reasonId, className: "sr-only", children: blockedReason })] }) }), _jsx(TooltipContent, { className: "max-w-60", children: blockedReason })] }));
+}

package/dist/lib/presentation/components/MembersTable/MemberStatusBadge/index.d.ts

@@ -0,0 +1,10 @@
+import type { MemberStatus } from '../../../../domain/types/member';
+/**
+ * The Status column's pill: a leading colored dot plus the status label —
+ * green "Active", amber "Invited" (a sent, unaccepted invite), muted
+ * "Disabled".
+ */
+export declare function MemberStatusBadge({ status }: {
+    status: MemberStatus;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/MembersTable/MemberStatusBadge/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/lib/presentation/components/MembersTable/MemberStatusBadge/index.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAwCpE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,+BAuBrE"}

package/dist/lib/presentation/components/MembersTable/MemberStatusBadge/index.js

@@ -0,0 +1,49 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { defineMessages, useIntl } from 'react-intl';
+import { Badge, cn } from '@orthacms/design-system';
+/** Intl descriptors for {@link MemberStatusBadge}, co-located with the component. */
+const messages = defineMessages({
+    active: {
+        id: 'users.status.active',
+        defaultMessage: 'Active'
+    },
+    invited: {
+        id: 'users.status.invited',
+        defaultMessage: 'Invited'
+    },
+    disabled: {
+        id: 'users.status.disabled',
+        defaultMessage: 'Disabled'
+    }
+});
+/**
+ * Dot color, pill variant, and label per status; the label keeps color from
+ * being the sole signal.
+ */
+const APPEARANCE = {
+    active: {
+        dot: 'bg-status-active',
+        variant: 'success',
+        message: messages.active
+    },
+    pending: {
+        dot: 'bg-status-invited',
+        variant: 'warning',
+        message: messages.invited
+    },
+    disabled: {
+        dot: 'bg-muted-foreground',
+        variant: 'secondary',
+        message: messages.disabled
+    }
+};
+/**
+ * The Status column's pill: a leading colored dot plus the status label —
+ * green "Active", amber "Invited" (a sent, unaccepted invite), muted
+ * "Disabled".
+ */
+export function MemberStatusBadge({ status }) {
+    const intl = useIntl();
+    const appearance = APPEARANCE[status];
+    return (_jsxs(Badge, { variant: appearance.variant, className: cn('gap-1.5 rounded-xl', status === 'disabled' && 'border-border'), children: [_jsx("span", { "aria-hidden": true, className: cn('size-1.5 rounded-full', appearance.dot) }), _jsx("span", { className: cn(status === 'disabled' && 'text-muted-foreground'), children: intl.formatMessage(appearance.message) })] }));
+}

package/dist/lib/presentation/components/MembersTable/MemberWorkspaces/index.d.ts

@@ -0,0 +1,10 @@
+import type { MemberWorkspace } from '../../../../domain/types/member';
+/**
+ * The Workspaces column: a row of overlapping workspace avatars plus a count,
+ * opening a popover that lists every workspace the member belongs to — the
+ * same stack-and-popover treatment as the workspace card's member roster.
+ */
+export declare function MemberWorkspaces({ workspaces }: {
+    workspaces: MemberWorkspace[];
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/MembersTable/MemberWorkspaces/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/lib/presentation/components/MembersTable/MemberWorkspaces/index.tsx"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAsBvE;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,EAC7B,UAAU,EACb,EAAE;IACC,UAAU,EAAE,eAAe,EAAE,CAAC;CACjC,+BAsEA"}

package/dist/lib/presentation/components/MembersTable/MemberWorkspaces/index.js

@@ -0,0 +1,37 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { defineMessages, useIntl } from 'react-intl';
+import { Popover, PopoverContent, PopoverTrigger } from '@orthacms/design-system';
+import { MemberAvatar } from '../../MemberAvatar';
+/** Intl descriptors for {@link MemberWorkspaces}, co-located with the component. */
+const messages = defineMessages({
+    count: {
+        id: 'users.workspaces.count',
+        defaultMessage: '{count, plural, one {# workspace} other {# workspaces}}'
+    },
+    open: {
+        id: 'users.workspaces.open',
+        defaultMessage: 'View workspaces'
+    },
+    none: {
+        id: 'users.workspaces.none',
+        defaultMessage: 'No workspaces'
+    }
+});
+/** Up to this many workspace avatars show before collapsing into a "+N" pill. */
+const MAX_AVATARS = 3;
+/**
+ * The Workspaces column: a row of overlapping workspace avatars plus a count,
+ * opening a popover that lists every workspace the member belongs to — the
+ * same stack-and-popover treatment as the workspace card's member roster.
+ */
+export function MemberWorkspaces({ workspaces }) {
+    const intl = useIntl();
+    if (workspaces.length === 0) {
+        return (_jsx("span", { className: "text-sm text-muted-foreground", children: intl.formatMessage(messages.none) }));
+    }
+    const shown = workspaces.slice(0, MAX_AVATARS);
+    const overflow = workspaces.length - shown.length;
+    return (_jsxs(Popover, { children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs("button", { type: "button", "aria-label": intl.formatMessage(messages.open), onClick: (event) => event.stopPropagation(), className: "-m-1 flex items-center gap-2 rounded-lg p-1 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", children: [_jsxs("span", { className: "flex", children: [shown.map((workspace, index) => (_jsx(MemberAvatar, { initials: workspace.initials, color: workspace.color, className: "size-[26px] border-2 border-background text-[10px]", style: { marginLeft: index === 0 ? 0 : -8 } }, workspace.id))), overflow > 0 ? (_jsxs("span", { className: "flex size-[26px] items-center justify-center rounded-xl border-2 border-background bg-secondary text-[10px] font-semibold text-muted-foreground", style: { marginLeft: -8 }, children: ["+", overflow] })) : null] }), _jsx("span", { className: "text-xs text-muted-foreground", children: intl.formatMessage(messages.count, {
+                                count: workspaces.length
+                            }) })] }) }), _jsx(PopoverContent, { align: "start", className: "w-64 p-0", children: _jsx("ul", { className: "max-h-[15rem] overflow-y-auto py-1", children: workspaces.map((workspace) => (_jsxs("li", { className: "flex items-center gap-3 px-4 py-2", children: [_jsx(MemberAvatar, { initials: workspace.initials, color: workspace.color, className: "size-[26px] shrink-0 text-[10px]" }), _jsx("span", { className: "truncate text-sm", children: workspace.name })] }, workspace.id))) }) })] }));
+}

package/dist/lib/presentation/components/MembersTable/index.d.ts

@@ -0,0 +1,12 @@
+import type { Member } from '../../../domain/types/member';
+/**
+ * The members table: avatar + name + email, the role chip, the status pill, the
+ * workspace stack, the joined date (the invite date for Invited rows), and the
+ * per-row actions menu. The whole row is a shortcut to the member's detail page
+ * (the name is a real link for keyboard users); the actions cell stops the
+ * click from bubbling so opening the menu doesn't also navigate.
+ */
+export declare function MembersTable({ members }: {
+    members: Member[];
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/MembersTable/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/presentation/components/MembersTable/index.tsx"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAkC3D;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,EAAE,OAAO,EAAE,EAAE;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,+BAiG9D"}

package/dist/lib/presentation/components/MembersTable/index.js

@@ -0,0 +1,54 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Link, useNavigate } from 'react-router-dom';
+import { defineMessages, useIntl } from 'react-intl';
+import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from '@orthacms/design-system';
+import { MemberAvatar } from '../MemberAvatar';
+import { MemberRoleChip } from './MemberRoleChip';
+import { MemberRowActions } from './MemberRowActions';
+import { MemberStatusBadge } from './MemberStatusBadge';
+import { MemberWorkspaces } from './MemberWorkspaces';
+/** Intl descriptors for {@link MembersTable}, co-located with the component. */
+const messages = defineMessages({
+    member: {
+        id: 'users.table.member',
+        defaultMessage: 'Member'
+    },
+    role: {
+        id: 'users.table.role',
+        defaultMessage: 'Role'
+    },
+    status: {
+        id: 'users.table.status',
+        defaultMessage: 'Status'
+    },
+    workspaces: {
+        id: 'users.table.workspaces',
+        defaultMessage: 'Workspaces'
+    },
+    joined: {
+        id: 'users.table.joined',
+        defaultMessage: 'Joined'
+    },
+    actions: {
+        id: 'users.table.actions',
+        defaultMessage: 'Actions'
+    },
+    caption: {
+        id: 'users.table.caption',
+        defaultMessage: 'Members'
+    }
+});
+/**
+ * The members table: avatar + name + email, the role chip, the status pill, the
+ * workspace stack, the joined date (the invite date for Invited rows), and the
+ * per-row actions menu. The whole row is a shortcut to the member's detail page
+ * (the name is a real link for keyboard users); the actions cell stops the
+ * click from bubbling so opening the menu doesn't also navigate.
+ */
+export function MembersTable({ members }) {
+    const intl = useIntl();
+    const navigate = useNavigate();
+    return (_jsx("div", { className: "overflow-hidden rounded-xl border bg-card shadow-xs", children: _jsxs(Table, { "aria-label": intl.formatMessage(messages.caption), children: [_jsx(TableHeader, { children: _jsxs(TableRow, { children: [_jsx(TableHead, { scope: "col", children: intl.formatMessage(messages.member) }), _jsx(TableHead, { scope: "col", children: intl.formatMessage(messages.role) }), _jsx(TableHead, { scope: "col", children: intl.formatMessage(messages.status) }), _jsx(TableHead, { scope: "col", children: intl.formatMessage(messages.workspaces) }), _jsx(TableHead, { scope: "col", children: intl.formatMessage(messages.joined) }), _jsx(TableHead, { scope: "col", className: "w-12", children: _jsx("span", { className: "sr-only", children: intl.formatMessage(messages.actions) }) })] }) }), _jsx(TableBody, { children: members.map((member) => (_jsxs(TableRow, { onClick: () => navigate(`/users/${member.id}`), className: "cursor-pointer", children: [_jsx(TableCell, { children: _jsxs("div", { className: "flex items-center gap-3", children: [_jsx(MemberAvatar, { initials: member.initials, color: member.color, className: "size-9 shrink-0 text-xs" }), _jsxs("div", { className: "min-w-0 max-w-[22rem]", children: [_jsx(Link, { to: `/users/${member.id}`, className: "block truncate text-sm font-medium hover:underline", onClick: (event) => event.stopPropagation(), children: member.name }), _jsx("p", { className: "truncate text-xs text-muted-foreground", children: member.email })] })] }) }), _jsx(TableCell, { children: _jsx(MemberRoleChip, { role: member.role, roleName: member.roleName }) }), _jsx(TableCell, { children: _jsx(MemberStatusBadge, { status: member.status }) }), _jsx(TableCell, { children: _jsx(MemberWorkspaces, { workspaces: member.workspaces }) }), _jsx(TableCell, { className: "text-sm text-muted-foreground", children: intl.formatDate(member.joinedAt, {
+                                    dateStyle: 'medium'
+                                }) }), _jsx(TableCell, { className: "text-right", onClick: (event) => event.stopPropagation(), children: _jsx(MemberRowActions, { member: member }) })] }, member.id))) })] }) }));
+}

package/dist/lib/presentation/components/MembersTable/membersTableAnchor/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The id of the roster's focus anchor — the table wrapper, which carries
+ * `tabIndex={-1}` so it can receive focus programmatically without becoming a
+ * tab stop.
+ *
+ * It exists because a row-removing mutation unmounts the control that opened
+ * the overlay (the row's kebab), so Radix's focus restoration has nowhere to
+ * return to and focus falls to `<body>` — which restarts a keyboard user at the
+ * top of the document after every action (WCAG 2.4.3 Focus Order). Shared as a
+ * constant rather than a hardcoded string in two files so the contract between
+ * {@link MembersTable} and its row menu is explicit.
+ */
+export declare const MEMBERS_TABLE_ANCHOR_ID = "members-table";
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/MembersTable/membersTableAnchor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/lib/presentation/components/MembersTable/membersTableAnchor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,kBAAkB,CAAC"}

package/dist/lib/presentation/components/MembersToolbar/index.d.ts

@@ -0,0 +1,15 @@
+import type { ReactNode } from 'react';
+/**
+ * The Members table toolbar: a name/email search box with the advanced-filter
+ * control pinned to the right. Layout lives in the shared `SearchToolbar`; this
+ * wrapper only supplies the localised strings and the page-owned filter control.
+ */
+export declare function MembersToolbar({ search, onSearchChange, filterControl, busy }: {
+    search: string;
+    onSearchChange: (value: string) => void;
+    /** Whether a search/filter request driven from here is still settling. */
+    busy?: boolean;
+    /** Optional advanced-filter control rendered on the right. */
+    filterControl?: ReactNode;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/MembersToolbar/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/presentation/components/MembersToolbar/index.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAgBvC;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,EAC3B,MAAM,EACN,cAAc,EACd,aAAa,EACb,IAAY,EACf,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,0EAA0E;IAC1E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8DAA8D;IAC9D,aAAa,CAAC,EAAE,SAAS,CAAC;CAC7B,+BAaA"}

package/dist/lib/presentation/components/MembersToolbar/index.js

@@ -0,0 +1,23 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { defineMessages, useIntl } from 'react-intl';
+import { SearchToolbar } from '@orthacms/design-system';
+/** Intl descriptors for {@link MembersToolbar}, co-located with the component. */
+const messages = defineMessages({
+    searchLabel: {
+        id: 'users.toolbar.searchLabel',
+        defaultMessage: 'Search members by name or email'
+    },
+    searchPlaceholder: {
+        id: 'users.toolbar.searchPlaceholder',
+        defaultMessage: 'Search by name or email'
+    }
+});
+/**
+ * The Members table toolbar: a name/email search box with the advanced-filter
+ * control pinned to the right. Layout lives in the shared `SearchToolbar`; this
+ * wrapper only supplies the localised strings and the page-owned filter control.
+ */
+export function MembersToolbar({ search, onSearchChange, filterControl, busy = false }) {
+    const intl = useIntl();
+    return (_jsx(SearchToolbar, { busy: busy, value: search, onValueChange: onSearchChange, searchLabel: intl.formatMessage(messages.searchLabel), searchPlaceholder: intl.formatMessage(messages.searchPlaceholder), actions: filterControl }));
+}

package/dist/lib/presentation/components/PasswordResetCard/index.d.ts

@@ -0,0 +1,19 @@
+import type { Member } from '../../../domain/types/member';
+/**
+ * The Access tab's password card: an admin generates a single-use reset link
+ * for an active member and hands it over.
+ *
+ * This is the whole "forgot my password" story today. There is no self-service
+ * flow, because there is no mailer to send a link to (identity epic #11) — so
+ * the recovery path runs through someone who can already be asked to vouch for
+ * the person, which is a reasonable place for it to sit in the meantime.
+ *
+ * Only an `active` member qualifies: a `pending` one has no password yet (they
+ * finish through the invite link) and a `disabled` one cannot sign in at all,
+ * so a link for either is a link to nowhere. The server enforces both; the card
+ * says so up front instead of letting the button fail.
+ */
+export declare function PasswordResetCard({ member }: {
+    member: Member;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/presentation/components/PasswordResetCard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/presentation/components/PasswordResetCard/index.tsx"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AA6D3D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,+BAqG/D"}