@pyric/ui 0.1.0-alpha.10

package/dist/auth/index.js

@@ -0,0 +1,13 @@
+export * from './hooks/index.js';
+// Injectable auth API bundle (Pyric Studio data-backend swap): defaults to
+// in-process `pyric/auth`; a consumer can provide the SharedWorker client.
+export { AuthApiProvider, useAuthApi } from './authApi.js';
+export { AuthSignInHelper, } from './components/AuthSignInHelper.js';
+export { AuthUserList, } from './components/AuthUserList.js';
+export { AuthProviderToggles, DEFAULT_KNOWN_PROVIDER_IDS, } from './components/AuthProviderToggles.js';
+export { AuthUserForm, } from './components/AuthUserForm.js';
+export { ClaimsField, } from './components/ClaimsField.js';
+export { DeleteUserWithConfirm, ClearUsersWithConfirm, } from './components/confirmActions.js';
+export { validateSerializedClaims, FORBIDDEN_CUSTOM_CLAIMS, CUSTOM_CLAIMS_MAX_LENGTH, } from './claims.js';
+export { PROVIDER_LABELS, providerLabel } from './providers.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AAEjC,2EAA2E;AAC3E,2EAA2E;AAC3E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AACzE,OAAO,EACL,gBAAgB,GAEjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,YAAY,GAEb,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,mBAAmB,EACnB,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,YAAY,GAKb,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,WAAW,GAEZ,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,qBAAqB,EAErB,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/auth/providers.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Provider-id → human label mapping, mirroring the provider set the
+ * Firebase emulator UI recognizes (it maps the same ids to icons; a
+ * headless library maps them to text and leaves icons to the consumer
+ * via `data-pyric-provider-id`).
+ */
+export declare const PROVIDER_LABELS: Record<string, string>;
+/** Label for a provider id; falls back to the raw id for custom
+ *  `OAuthProvider` ids the map doesn't know. */
+export declare function providerLabel(providerId: string): string;
+//# sourceMappingURL=providers.d.ts.map

package/dist/auth/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/auth/providers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAelD,CAAC;AAEF;gDACgD;AAChD,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/auth/providers.js

@@ -0,0 +1,28 @@
+/**
+ * Provider-id → human label mapping, mirroring the provider set the
+ * Firebase emulator UI recognizes (it maps the same ids to icons; a
+ * headless library maps them to text and leaves icons to the consumer
+ * via `data-pyric-provider-id`).
+ */
+export const PROVIDER_LABELS = {
+    'google.com': 'Google',
+    'apple.com': 'Apple',
+    'gc.apple.com': 'Game Center',
+    'facebook.com': 'Facebook',
+    'github.com': 'GitHub',
+    'microsoft.com': 'Microsoft',
+    'playgames.google.com': 'Play Games',
+    'twitter.com': 'Twitter',
+    'yahoo.com': 'Yahoo',
+    password: 'Email/Password',
+    phone: 'Phone',
+    anonymous: 'Anonymous',
+    oidc: 'OIDC',
+    saml: 'SAML',
+};
+/** Label for a provider id; falls back to the raw id for custom
+ *  `OAuthProvider` ids the map doesn't know. */
+export function providerLabel(providerId) {
+    return PROVIDER_LABELS[providerId] ?? providerId;
+}
+//# sourceMappingURL=providers.js.map

package/dist/auth/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/auth/providers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,YAAY,EAAE,QAAQ;IACtB,WAAW,EAAE,OAAO;IACpB,cAAc,EAAE,aAAa;IAC7B,cAAc,EAAE,UAAU;IAC1B,YAAY,EAAE,QAAQ;IACtB,eAAe,EAAE,WAAW;IAC5B,sBAAsB,EAAE,YAAY;IACpC,aAAa,EAAE,SAAS;IACxB,WAAW,EAAE,OAAO;IACpB,QAAQ,EAAE,gBAAgB;IAC1B,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AAEF;gDACgD;AAChD,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC;AACnD,CAAC"}

package/dist/auth/reducers/userEditor.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Reducer behind `useAuthUserEditor` — pure, React-free (drivable from
+ * tests or non-React hosts, like the firestore `documentEditor` reducer).
+ *
+ * Validation messages match the Firebase emulator UI:
+ * - email pattern → "Invalid email"
+ * - password length → "Password should be at least 6 characters"
+ * - password without email → "Email is required for password authentication"
+ * - claims → `validateSerializedClaims` messages
+ */
+import type { AuthUserRecord, CreateUserRequest, UpdateUserRequest } from 'pyric/auth';
+/** Editable field set. `claimsText` is the raw textarea JSON.
+ *  `providerIds` are the linked FEDERATED providers (`google.com`,
+ *  `apple.com`, …) — `password` is credential-derived (the password
+ *  field) and never appears here. */
+export interface AuthUserEditorFields {
+    email: string;
+    password: string;
+    displayName: string;
+    phoneNumber: string;
+    photoUrl: string;
+    emailVerified: boolean;
+    disabled: boolean;
+    claimsText: string;
+    providerIds: string[];
+}
+export interface AuthUserEditorState {
+    fields: AuthUserEditorFields;
+    /** What {@link reset} returns to; dirtiness is measured against this. */
+    initial: AuthUserEditorFields;
+}
+export type AuthUserEditorAction = {
+    type: 'setField';
+    field: keyof AuthUserEditorFields;
+    value: AuthUserEditorFields[keyof AuthUserEditorFields];
+} | {
+    type: 'reset';
+};
+export interface AuthUserEditorErrors {
+    email?: string;
+    password?: string;
+    claims?: string;
+}
+export declare function fieldsFromRecord(record?: AuthUserRecord): AuthUserEditorFields;
+export declare function initAuthUserEditorState(initial?: AuthUserRecord): AuthUserEditorState;
+export declare function authUserEditorReducer(state: AuthUserEditorState, action: AuthUserEditorAction): AuthUserEditorState;
+export declare function validateAuthUserFields(fields: AuthUserEditorFields): AuthUserEditorErrors;
+export declare function isDirty(state: AuthUserEditorState): boolean;
+/** Full payload for `sandbox.createUser` — every non-empty field. */
+export declare function toCreateRequest(state: AuthUserEditorState): CreateUserRequest;
+/** Delta payload for `sandbox.updateUser` — only fields that changed
+ *  from the initial record. A cleared displayName maps to `null`
+ *  (the update API's clear semantics). */
+export declare function toUpdateRequest(state: AuthUserEditorState): UpdateUserRequest;
+//# sourceMappingURL=userEditor.d.ts.map

package/dist/auth/reducers/userEditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userEditor.d.ts","sourceRoot":"","sources":["../../../src/auth/reducers/userEditor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAGvF;;;qCAGqC;AACrC,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,yEAAyE;IACzE,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED,MAAM,MAAM,oBAAoB,GAC5B;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,MAAM,oBAAoB,CAAC;IAClC,KAAK,EAAE,oBAAoB,CAAC,MAAM,oBAAoB,CAAC,CAAC;CACzD,GACD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAsBD,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,oBAAoB,CAiB9E;AAED,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,mBAAmB,CAGrF;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,oBAAoB,GAC3B,mBAAmB,CAOrB;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,GAAG,oBAAoB,CAgBzF;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAO3D;AAcD,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,iBAAiB,CAiB7E;AAED;;0CAE0C;AAC1C,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,iBAAiB,CAkB7E"}

package/dist/auth/reducers/userEditor.js

@@ -0,0 +1,136 @@
+import { validateSerializedClaims } from '../claims.js';
+const EMPTY_FIELDS = {
+    email: '',
+    password: '',
+    displayName: '',
+    phoneNumber: '',
+    photoUrl: '',
+    emailVerified: false,
+    disabled: false,
+    claimsText: '',
+    providerIds: [],
+};
+/** Credential-derived / token-level ids — sign-in methods, not linkable
+ *  federated entries (mirrors the sandbox backend's rule). */
+const NON_FEDERATED_IDS = new Set(['password', 'anonymous', 'phone']);
+/** Same permissive shape the emulator UI uses (`pattern` validation). */
+const EMAIL_REGEX = /^[^@]+@[^@]+\.[^@]+$/;
+const PASSWORD_MIN_LENGTH = 6;
+export function fieldsFromRecord(record) {
+    if (!record)
+        return { ...EMPTY_FIELDS };
+    return {
+        email: record.email ?? '',
+        password: '',
+        displayName: record.displayName ?? '',
+        phoneNumber: record.phoneNumber ?? '',
+        photoUrl: record.photoUrl ?? '',
+        emailVerified: record.emailVerified,
+        disabled: record.disabled,
+        claimsText: Object.keys(record.customClaims).length
+            ? JSON.stringify(record.customClaims, null, 2)
+            : '',
+        providerIds: record.providerUserInfo
+            .map((p) => p.providerId)
+            .filter((id) => !NON_FEDERATED_IDS.has(id)),
+    };
+}
+export function initAuthUserEditorState(initial) {
+    const fields = fieldsFromRecord(initial);
+    return { fields, initial: { ...fields } };
+}
+export function authUserEditorReducer(state, action) {
+    switch (action.type) {
+        case 'setField':
+            return { ...state, fields: { ...state.fields, [action.field]: action.value } };
+        case 'reset':
+            return { ...state, fields: { ...state.initial } };
+    }
+}
+export function validateAuthUserFields(fields) {
+    const errors = {};
+    const email = fields.email.trim();
+    const password = fields.password;
+    if (email && !EMAIL_REGEX.test(email)) {
+        errors.email = 'Invalid email';
+    }
+    if (password && password.length < PASSWORD_MIN_LENGTH) {
+        errors.password = `Password should be at least ${PASSWORD_MIN_LENGTH} characters`;
+    }
+    if (password && !email) {
+        errors.password = 'Email is required for password authentication';
+    }
+    const claims = validateSerializedClaims(fields.claimsText);
+    if (!claims.ok)
+        errors.claims = claims.message;
+    return errors;
+}
+export function isDirty(state) {
+    const { fields, initial } = state;
+    return Object.keys(fields).some((k) => k === 'providerIds'
+        ? !sameIds(fields.providerIds, initial.providerIds)
+        : fields[k] !== initial[k]);
+}
+/** Order-insensitive id-list equality (toggling A then B ≡ B then A). */
+function sameIds(a, b) {
+    if (a.length !== b.length)
+        return false;
+    const sorted = [...b].sort();
+    return [...a].sort().every((id, i) => id === sorted[i]);
+}
+function parsedClaims(fields) {
+    const r = validateSerializedClaims(fields.claimsText);
+    return r.ok ? r.claims : undefined;
+}
+/** Full payload for `sandbox.createUser` — every non-empty field. */
+export function toCreateRequest(state) {
+    const f = state.fields;
+    const req = {
+        emailVerified: f.emailVerified,
+        disabled: f.disabled,
+    };
+    if (f.email.trim())
+        req.email = f.email.trim();
+    if (f.password)
+        req.password = f.password;
+    if (f.displayName.trim())
+        req.displayName = f.displayName.trim();
+    if (f.phoneNumber.trim())
+        req.phoneNumber = f.phoneNumber.trim();
+    if (f.photoUrl.trim())
+        req.photoUrl = f.photoUrl.trim();
+    const claims = parsedClaims(f);
+    if (claims)
+        req.customClaims = claims;
+    if (f.providerIds.length) {
+        req.providerUserInfo = f.providerIds.map((providerId) => ({ providerId }));
+    }
+    return req;
+}
+/** Delta payload for `sandbox.updateUser` — only fields that changed
+ *  from the initial record. A cleared displayName maps to `null`
+ *  (the update API's clear semantics). */
+export function toUpdateRequest(state) {
+    const { fields: f, initial: i } = state;
+    const req = {};
+    if (f.email.trim() !== i.email && f.email.trim())
+        req.email = f.email.trim();
+    if (f.password && f.password !== i.password)
+        req.password = f.password;
+    if (f.displayName.trim() !== i.displayName) {
+        req.displayName = f.displayName.trim() || null;
+    }
+    if (f.emailVerified !== i.emailVerified)
+        req.emailVerified = f.emailVerified;
+    if (f.disabled !== i.disabled)
+        req.disabled = f.disabled;
+    if (f.claimsText !== i.claimsText) {
+        req.customClaims = parsedClaims(f) ?? {};
+    }
+    if (!sameIds(f.providerIds, i.providerIds)) {
+        // Replacement semantics; the backend re-derives the password entry.
+        req.providerUserInfo = f.providerIds.map((providerId) => ({ providerId }));
+    }
+    return req;
+}
+//# sourceMappingURL=userEditor.js.map

package/dist/auth/reducers/userEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userEditor.js","sourceRoot":"","sources":["../../../src/auth/reducers/userEditor.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAsCxD,MAAM,YAAY,GAAyB;IACzC,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;IACZ,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,KAAK;IACpB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,EAAE;IACd,WAAW,EAAE,EAAE;CAChB,CAAC;AAEF;8DAC8D;AAC9D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtE,yEAAyE;AACzE,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IACxC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM;YACjD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC,CAAC,EAAE;QACN,WAAW,EAAE,MAAM,CAAC,gBAAgB;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAA0B,EAC1B,MAA4B;IAE5B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACjF,KAAK,OAAO;YACV,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA4B;IACjE,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,GAAG,eAAe,CAAC;IACjC,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACtD,MAAM,CAAC,QAAQ,GAAG,+BAA+B,mBAAmB,aAAa,CAAC;IACpF,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,QAAQ,GAAG,+CAA+C,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAA0B;IAChD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAClC,OAAQ,MAAM,CAAC,IAAI,CAAC,MAAM,CAAuC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3E,CAAC,KAAK,aAAa;QACjB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC;QACnD,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,OAAO,CAAC,CAAoB,EAAE,CAAoB;IACzD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,MAA4B;IAChD,MAAM,CAAC,GAAG,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,MAAM,GAAG,GAAsB;QAC7B,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC;IACF,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC1C,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,MAAM;QAAE,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC;IACtC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;0CAE0C;AAC1C,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC;IACxC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACvE,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa;QAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;IAC7E,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACzD,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,oEAAoE;QACpE,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/events/components/ActivityActionItems.d.ts

@@ -0,0 +1,45 @@
+import type { ReactNode } from 'react';
+import type { ActivityDigest, ActivityRow } from '../digest.js';
+/** A single action item — a mechanical fact that invites a decision. */
+export interface ActivityActionItem {
+    /** Stable key. */
+    key: string;
+    /** What it is — drives `data-pyric-action-type`. Today: `denied`. */
+    type: 'denied';
+    /** The headline (mechanical: "4 writes to /notes were denied"). */
+    title: string;
+    /** Sub-line — attribution / cause. */
+    meta?: string;
+    /** The rows this item summarizes — for drill-in / linking into the
+     *  matching Activity band (items LINK to bands, they don't duplicate). */
+    rows: ActivityRow[];
+}
+export interface ActivityActionItemsProps {
+    digest: ActivityDigest;
+    /** Render the action button/affordance for an item (e.g. a "Debug"
+     *  link). Returns `null` to render no action. */
+    renderAction?: (item: ActivityActionItem) => ReactNode;
+    /** Override item-title composition (host owns app-semantic copy). */
+    renderTitle?: (item: ActivityActionItem) => ReactNode;
+    className?: string;
+    /** Rendered when there are no action items — default renders nothing
+     *  (calm by default; the region collapses). */
+    emptyState?: ReactNode;
+}
+/**
+ * The action-items tier — the few things wanting a decision, surfaced
+ * ABOVE the activity grid (design-ideation Tier 2 / "Needs you").
+ * Denials lead and are first-class. Mechanical copy by default; the host
+ * supplies the action affordance (e.g. a "Debug" link into the rules
+ * debugger) via `renderAction`.
+ *
+ * Data contract:
+ * - `[data-pyric-ui="activity-action-items"]` — the root (absent when
+ *   empty and no `emptyState`).
+ * - `[data-pyric-action-item]` (+ `data-pyric-action-type`,
+ *   `data-pyric-action-count`) — one item.
+ * - `[data-pyric-action-title]` / `[data-pyric-action-meta]` — the copy.
+ * - `[data-pyric-action-affordance]` — wraps the host's action node.
+ */
+export declare function ActivityActionItems({ digest, renderAction, renderTitle, className, emptyState, }: ActivityActionItemsProps): ReactNode;
+//# sourceMappingURL=ActivityActionItems.d.ts.map

package/dist/events/components/ActivityActionItems.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivityActionItems.d.ts","sourceRoot":"","sources":["../../../src/events/components/ActivityActionItems.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhE,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,kBAAkB;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,IAAI,EAAE,QAAQ,CAAC;IACf,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;8EAC0E;IAC1E,IAAI,EAAE,WAAW,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,cAAc,CAAC;IACvB;qDACiD;IACjD,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,SAAS,CAAC;IACvD,qEAAqE;IACrE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,SAAS,CAAC;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;mDAC+C;IAC/C,UAAU,CAAC,EAAE,SAAS,CAAC;CACxB;AA8CD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,MAAM,EACN,YAAY,EACZ,WAAW,EACX,SAAS,EACT,UAAU,GACX,EAAE,wBAAwB,GAAG,SAAS,CAuCtC"}

package/dist/events/components/ActivityActionItems.js

@@ -0,0 +1,68 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Group denial rows by collection prefix so the headline aggregates
+ * ("4 writes to /notes were denied") rather than listing each row.
+ */
+function buildDenialItems(digest) {
+    if (digest.denials.length === 0)
+        return [];
+    const byPrefix = new Map();
+    for (const r of digest.denials) {
+        // Collection prefix = everything up to the last segment.
+        const i = r.target.lastIndexOf('/');
+        const prefix = i === -1 ? r.target : r.target.slice(0, i);
+        const key = prefix ? `/${prefix.replace(/^\/+/, '')}` : '(root)';
+        const list = byPrefix.get(key);
+        if (list)
+            list.push(r);
+        else
+            byPrefix.set(key, [r]);
+    }
+    const items = [];
+    for (const [prefix, rows] of byPrefix) {
+        const subjects = new Set(rows.map((r) => r.subjectUid).filter((u) => !!u));
+        const n = rows.length;
+        const noun = n === 1 ? 'write' : 'writes';
+        const title = `${n} ${noun} to ${prefix} ${n === 1 ? 'was' : 'were'} denied`;
+        const meta = subjects.size === 1
+            ? `All by ${[...subjects][0]}.`
+            : subjects.size > 1
+                ? `By ${subjects.size} users.`
+                : undefined;
+        const item = {
+            key: `denied:${prefix}`,
+            type: 'denied',
+            title,
+            rows,
+        };
+        if (meta)
+            item.meta = meta;
+        items.push(item);
+    }
+    // Most denials first.
+    items.sort((a, b) => b.rows.length - a.rows.length);
+    return items;
+}
+/**
+ * The action-items tier — the few things wanting a decision, surfaced
+ * ABOVE the activity grid (design-ideation Tier 2 / "Needs you").
+ * Denials lead and are first-class. Mechanical copy by default; the host
+ * supplies the action affordance (e.g. a "Debug" link into the rules
+ * debugger) via `renderAction`.
+ *
+ * Data contract:
+ * - `[data-pyric-ui="activity-action-items"]` — the root (absent when
+ *   empty and no `emptyState`).
+ * - `[data-pyric-action-item]` (+ `data-pyric-action-type`,
+ *   `data-pyric-action-count`) — one item.
+ * - `[data-pyric-action-title]` / `[data-pyric-action-meta]` — the copy.
+ * - `[data-pyric-action-affordance]` — wraps the host's action node.
+ */
+export function ActivityActionItems({ digest, renderAction, renderTitle, className, emptyState, }) {
+    const items = buildDenialItems(digest);
+    if (items.length === 0) {
+        return emptyState ? (_jsx("div", { className: className, "data-pyric-ui": "activity-action-items", "data-pyric-empty": "", children: emptyState })) : null;
+    }
+    return (_jsx("div", { className: className, "data-pyric-ui": "activity-action-items", children: items.map((item) => (_jsxs("div", { "data-pyric-action-item": "", "data-pyric-action-type": item.type, "data-pyric-action-count": item.rows.length, children: [_jsxs("div", { "data-pyric-action-what": "", children: [_jsx("div", { "data-pyric-action-title": "", children: renderTitle ? renderTitle(item) : item.title }), item.meta ? (_jsx("div", { "data-pyric-action-meta": "", children: item.meta })) : null] }), renderAction ? (_jsx("div", { "data-pyric-action-affordance": "", children: renderAction(item) })) : null] }, item.key))) }));
+}
+//# sourceMappingURL=ActivityActionItems.js.map

package/dist/events/components/ActivityActionItems.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivityActionItems.js","sourceRoot":"","sources":["../../../src/events/components/ActivityActionItems.tsx"],"names":[],"mappings":";AA+BA;;;GAGG;AACH,SAAS,gBAAgB,CAAC,MAAsB;IAC9C,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,yDAAyD;QACzD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAClB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAC9D,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC;QAC7E,MAAM,IAAI,GACR,QAAQ,CAAC,IAAI,KAAK,CAAC;YACjB,CAAC,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG;YAC/B,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;gBACjB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,SAAS;gBAC9B,CAAC,CAAC,SAAS,CAAC;QAClB,MAAM,IAAI,GAAuB;YAC/B,GAAG,EAAE,UAAU,MAAM,EAAE;YACvB,IAAI,EAAE,QAAQ;YACd,KAAK;YACL,IAAI;SACL,CAAC;QACF,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,sBAAsB;IACtB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,MAAM,EACN,YAAY,EACZ,WAAW,EACX,SAAS,EACT,UAAU,GACe;IACzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,CAAC,CAAC,CAClB,cACE,SAAS,EAAE,SAAS,mBACN,uBAAuB,sBACpB,EAAE,YAElB,UAAU,GACP,CACP,CAAC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,OAAO,CACL,cAAK,SAAS,EAAE,SAAS,mBAAgB,uBAAuB,YAC7D,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACnB,yCAEyB,EAAE,4BACD,IAAI,CAAC,IAAI,6BACR,IAAI,CAAC,IAAI,CAAC,MAAM,aAEzC,yCAA4B,EAAE,aAC5B,yCAA6B,EAAE,YAC5B,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GACzC,EACL,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CACX,wCAA4B,EAAE,YAAE,IAAI,CAAC,IAAI,GAAO,CACjD,CAAC,CAAC,CAAC,IAAI,IACJ,EACL,YAAY,CAAC,CAAC,CAAC,CACd,8CAAkC,EAAE,YAAE,YAAY,CAAC,IAAI,CAAC,GAAO,CAChE,CAAC,CAAC,CAAC,IAAI,KAfH,IAAI,CAAC,GAAG,CAgBT,CACP,CAAC,GACE,CACP,CAAC;AACJ,CAAC"}

package/dist/events/components/ActivityGrid.d.ts

@@ -0,0 +1,65 @@
+import type { ReactNode } from 'react';
+import type { AnyActivityEvent } from '../types.js';
+import { type ActivityBandWithGroups, type ActivityDigest, type ActivityDigestOptions, type ActivityRow } from '../digest.js';
+export interface ActivityGridProps {
+    /**
+     * The unified event stream — `sandbox.history()` and/or a live buffer
+     * (see `useActivityStream`). The grid folds it into the banded digest
+     * internally. Mutually exclusive with `digest`.
+     */
+    events?: readonly AnyActivityEvent[];
+    /**
+     * A precomputed digest from `useActivityDigest` / `computeActivity
+     * Digest`. Pass this when the host already memoizes the fold (so the
+     * grid doesn't recompute). Mutually exclusive with `events`.
+     */
+    digest?: ActivityDigest;
+    /** Grouping / ordering options, forwarded to the reducer when the grid
+     *  folds `events` itself. Ignored when `digest` is supplied. */
+    options?: ActivityDigestOptions & {
+        now?: number;
+    };
+    /** The selected row id (`data-pyric-selected`). */
+    selectedId?: string;
+    onSelect?: (row: ActivityRow) => void;
+    /** Clamp rows shown per band; the rest collapse into a "N more" stub.
+     *  Independent of the reducer's `rowsPerBand` (which trims the data) —
+     *  this is a pure display clamp that keeps the true count visible.
+     *  Default: show all rows. */
+    maxRowsPerBand?: number;
+    /** Render the per-band overflow stub. Default renders a
+     *  `[data-pyric-band-more]` element reading "N more {label}". */
+    renderBandMore?: (band: ActivityBandWithGroups, hidden: number) => ReactNode;
+    /** Override the `when` column rendering. */
+    formatWhen?: (at: number, now: number) => string;
+    /** "Now" anchor for `formatWhen`. */
+    now?: number;
+    /** Shown when the digest has no rows. */
+    emptyState?: ReactNode;
+    className?: string;
+    /** Render a leading column-header row (`target change for lens when`).
+     *  Default true — matches the mock's `.colhead`. */
+    showColumnHeader?: boolean;
+}
+/**
+ * Headless activity grid over the unified `SandboxEvent` stream. Folds
+ * events into category bands (Denied / Added / Updated / Removed /
+ * Signed in / …), each band a `target · change · for · lens · when`
+ * column grid grouped under a `label · count · attribution` header.
+ * Denials lead (lead-with-consequence) and are flagged first-class.
+ *
+ * Ships ZERO styling — the host (Pyric Studio) applies the rigid column
+ * grid + band typography via the `data-pyric-*` contract:
+ * - `[data-pyric-ui="activity-grid"]` — the root.
+ * - `[data-pyric-band]` — a band header, with `data-pyric-band-key`,
+ *   `data-pyric-band-count`, `data-pyric-band-denied` (on the denied
+ *   band). Children: `[data-pyric-band-label]`, `[data-pyric-band-n]`,
+ *   `[data-pyric-band-attr]` (omitted when attribution is mixed).
+ * - `[data-pyric-band-rows]` — the row container; with grouping,
+ *   `[data-pyric-band-subgroup]` (+ `data-pyric-subgroup-key`) wraps
+ *   each pivot bucket.
+ * - `[data-pyric-band-more]` — the "N more" overflow stub.
+ * - the `<ActivityGridRow>` contract for each row.
+ */
+export declare function ActivityGrid({ events, digest, options, selectedId, onSelect, maxRowsPerBand, renderBandMore, formatWhen, now, emptyState, className, showColumnHeader, }: ActivityGridProps): ReactNode;
+//# sourceMappingURL=ActivityGrid.d.ts.map

package/dist/events/components/ActivityGrid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivityGrid.d.ts","sourceRoot":"","sources":["../../../src/events/components/ActivityGrid.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAGtB,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACrC;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB;oEACgE;IAChE,OAAO,CAAC,EAAE,qBAAqB,GAAG;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,CAAC;IACtC;;;kCAG8B;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;qEACiE;IACjE,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC;IAC7E,4CAA4C;IAC5C,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACjD,qCAAqC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;wDACoD;IACpD,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAID;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,MAAM,EACN,OAAO,EACP,UAAU,EACV,QAAQ,EACR,cAAc,EACd,cAAc,EACd,UAAU,EACV,GAAG,EACH,UAAU,EACV,SAAS,EACT,gBAAuB,GACxB,EAAE,iBAAiB,GAAG,SAAS,CA+G/B"}

package/dist/events/components/ActivityGrid.js

@@ -0,0 +1,61 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { computeActivityDigest, } from '../digest.js';
+import { ActivityGridRow } from './ActivityGridRow.js';
+const COLUMN_HEADERS = ['target', 'change', 'for', 'as', 'when'];
+/**
+ * Headless activity grid over the unified `SandboxEvent` stream. Folds
+ * events into category bands (Denied / Added / Updated / Removed /
+ * Signed in / …), each band a `target · change · for · lens · when`
+ * column grid grouped under a `label · count · attribution` header.
+ * Denials lead (lead-with-consequence) and are flagged first-class.
+ *
+ * Ships ZERO styling — the host (Pyric Studio) applies the rigid column
+ * grid + band typography via the `data-pyric-*` contract:
+ * - `[data-pyric-ui="activity-grid"]` — the root.
+ * - `[data-pyric-band]` — a band header, with `data-pyric-band-key`,
+ *   `data-pyric-band-count`, `data-pyric-band-denied` (on the denied
+ *   band). Children: `[data-pyric-band-label]`, `[data-pyric-band-n]`,
+ *   `[data-pyric-band-attr]` (omitted when attribution is mixed).
+ * - `[data-pyric-band-rows]` — the row container; with grouping,
+ *   `[data-pyric-band-subgroup]` (+ `data-pyric-subgroup-key`) wraps
+ *   each pivot bucket.
+ * - `[data-pyric-band-more]` — the "N more" overflow stub.
+ * - the `<ActivityGridRow>` contract for each row.
+ */
+export function ActivityGrid({ events, digest, options, selectedId, onSelect, maxRowsPerBand, renderBandMore, formatWhen, now, emptyState, className, showColumnHeader = true, }) {
+    const model = digest ?? computeActivityDigest(events ?? [], options ?? {});
+    if (model.total === 0) {
+        return (_jsx("div", { className: className, "data-pyric-ui": "activity-grid", "data-pyric-empty": "", children: emptyState }));
+    }
+    const renderRow = (row) => (_jsx(ActivityGridRow, { row: row, selected: row.id === selectedId, onSelect: onSelect, formatWhen: formatWhen, now: now }, row.id));
+    const renderBandBody = (band) => {
+        const shown = maxRowsPerBand !== undefined
+            ? band.rows.slice(0, maxRowsPerBand)
+            : band.rows;
+        const hidden = band.count - shown.length;
+        // Grouped: render pivot buckets, preserving the band's row order
+        // within each. We re-bucket the *shown* rows so the display clamp
+        // and the pivot compose.
+        let body;
+        if (band.subgroups) {
+            const shownIds = new Set(shown.map((r) => r.id));
+            const buckets = band.subgroups
+                .map((g) => ({
+                ...g,
+                rows: g.rows.filter((r) => shownIds.has(r.id)),
+            }))
+                .filter((g) => g.rows.length > 0);
+            body = buckets.map((g) => (_jsx("div", { "data-pyric-band-subgroup": "", "data-pyric-subgroup-key": g.key, "data-pyric-subgroup-count": g.count, children: g.rows.map(renderRow) }, g.key)));
+        }
+        else {
+            body = shown.map(renderRow);
+        }
+        return (_jsxs("div", { "data-pyric-band-rows": "", children: [body, hidden > 0
+                    ? renderBandMore
+                        ? renderBandMore(band, hidden)
+                        : (_jsxs("div", { "data-pyric-band-more": "", children: [hidden, " more ", band.label.toLowerCase()] }))
+                    : null] }));
+    };
+    return (_jsxs("div", { className: className, "data-pyric-ui": "activity-grid", children: [showColumnHeader ? (_jsx("div", { "data-pyric-event-colhead": "", children: COLUMN_HEADERS.map((h) => (_jsx("span", { "data-pyric-event-col": h, children: h }, h))) })) : null, model.bands.map((band) => (_jsxs("section", { "data-pyric-band-section": "", "data-pyric-band-key": band.key, children: [_jsxs("header", { "data-pyric-band": "", "data-pyric-band-key": band.key, "data-pyric-band-count": band.count, "data-pyric-band-denied": band.key === 'denied' ? '' : undefined, children: [_jsx("span", { "data-pyric-band-label": "", children: band.label }), _jsx("span", { "data-pyric-band-n": "", children: band.count }), band.attribution ? (_jsx("span", { "data-pyric-band-attr": "", children: band.attribution })) : null] }), renderBandBody(band)] }, band.key)))] }));
+}
+//# sourceMappingURL=ActivityGrid.js.map

package/dist/events/components/ActivityGrid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivityGrid.js","sourceRoot":"","sources":["../../../src/events/components/ActivityGrid.tsx"],"names":[],"mappings":";AAEA,OAAO,EACL,qBAAqB,GAKtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAyCvD,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAU,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,MAAM,EACN,MAAM,EACN,OAAO,EACP,UAAU,EACV,QAAQ,EACR,cAAc,EACd,cAAc,EACd,UAAU,EACV,GAAG,EACH,UAAU,EACV,SAAS,EACT,gBAAgB,GAAG,IAAI,GACL;IAClB,MAAM,KAAK,GACT,MAAM,IAAI,qBAAqB,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAE/D,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CACL,cACE,SAAS,EAAE,SAAS,mBACN,eAAe,sBACZ,EAAE,YAElB,UAAU,GACP,CACP,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAgB,EAAa,EAAE,CAAC,CACjD,KAAC,eAAe,IAEd,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,GAAG,CAAC,EAAE,KAAK,UAAU,EAC/B,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,GAAG,IALH,GAAG,CAAC,EAAE,CAMX,CACH,CAAC;IAEF,MAAM,cAAc,GAAG,CAAC,IAA4B,EAAa,EAAE;QACjE,MAAM,KAAK,GACT,cAAc,KAAK,SAAS;YAC1B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAEzC,iEAAiE;QACjE,kEAAkE;QAClE,yBAAyB;QACzB,IAAI,IAAe,CAAC;QACpB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;iBAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,GAAG,CAAC;gBACJ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC/C,CAAC,CAAC;iBACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACxB,0CAE2B,EAAE,6BACF,CAAC,CAAC,GAAG,+BACH,CAAC,CAAC,KAAK,YAEjC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IALjB,CAAC,CAAC,GAAG,CAMN,CACP,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,CACL,uCAA0B,EAAE,aACzB,IAAI,EACJ,MAAM,GAAG,CAAC;oBACT,CAAC,CAAC,cAAc;wBACd,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC;wBAC9B,CAAC,CAAC,CACE,uCAA0B,EAAE,aACzB,MAAM,YAAQ,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IACnC,CACP;oBACL,CAAC,CAAC,IAAI,IACJ,CACP,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,CACL,eAAK,SAAS,EAAE,SAAS,mBAAgB,eAAe,aACrD,gBAAgB,CAAC,CAAC,CAAC,CAClB,0CAA8B,EAAE,YAC7B,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACzB,uCAAoC,CAAC,YAClC,CAAC,IADO,CAAC,CAEL,CACR,CAAC,GACE,CACP,CAAC,CAAC,CAAC,IAAI,EAEP,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACzB,8CAE0B,EAAE,yBACL,IAAI,CAAC,GAAG,aAE7B,qCACkB,EAAE,yBACG,IAAI,CAAC,GAAG,2BACN,IAAI,CAAC,KAAK,4BACT,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,aAE9D,wCAA4B,EAAE,YAAE,IAAI,CAAC,KAAK,GAAQ,EAClD,oCAAwB,EAAE,YAAE,IAAI,CAAC,KAAK,GAAQ,EAC7C,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAClB,uCAA2B,EAAE,YAAE,IAAI,CAAC,WAAW,GAAQ,CACxD,CAAC,CAAC,CAAC,IAAI,IACD,EACR,cAAc,CAAC,IAAI,CAAC,KAhBhB,IAAI,CAAC,GAAG,CAiBL,CACX,CAAC,IACE,CACP,CAAC;AACJ,CAAC"}

package/dist/events/components/ActivityGridRow.d.ts

@@ -0,0 +1,31 @@
+import type { ReactNode } from 'react';
+import type { ActivityRow } from '../digest.js';
+export interface ActivityGridRowProps {
+    row: ActivityRow;
+    /** Marks the row as the active selection (`data-pyric-selected`). */
+    selected?: boolean;
+    onSelect?: (row: ActivityRow) => void;
+    /** Override the `when` rendering. Receives `(at, now)`; default is the
+     *  session-relative duration. */
+    formatWhen?: (at: number, now: number) => string;
+    /** The "now" anchor passed to `formatWhen` (and `row.when` is used as
+     *  a fallback when omitted). */
+    now?: number;
+    className?: string;
+}
+/**
+ * One activity grid row — the `target · change · for · lens · when`
+ * column contract from `c-result.html`, plus a trailing drill affordance
+ * column. Headless: every cell is a `data-pyric-event-*` span the host
+ * styles into the rigid column grid.
+ *
+ * Styling / data contract:
+ * - `[data-pyric-event-row]` — the row, with `data-pyric-event-band`,
+ *   `data-pyric-event-service`, `data-pyric-event-lens`,
+ *   `data-pyric-event-denied` (present only on denials), and
+ *   `data-pyric-selected` when active.
+ * - `[data-pyric-event-target]` / `-change` / `-for` / `-lens` / `-when`
+ *   — the five columns, in order.
+ */
+export declare function ActivityGridRow({ row, selected, onSelect, formatWhen, now, className, }: ActivityGridRowProps): ReactNode;
+//# sourceMappingURL=ActivityGridRow.d.ts.map

package/dist/events/components/ActivityGridRow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivityGridRow.d.ts","sourceRoot":"","sources":["../../../src/events/components/ActivityGridRow.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,WAAW,CAAC;IACjB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,CAAC;IACtC;qCACiC;IACjC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACjD;oCACgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,EAC9B,GAAG,EACH,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,GAAG,EACH,SAAS,GACV,EAAE,oBAAoB,GAAG,SAAS,CAyBlC"}

package/dist/events/components/ActivityGridRow.js

@@ -0,0 +1,23 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { defaultFormatWhen } from './format.js';
+/**
+ * One activity grid row — the `target · change · for · lens · when`
+ * column contract from `c-result.html`, plus a trailing drill affordance
+ * column. Headless: every cell is a `data-pyric-event-*` span the host
+ * styles into the rigid column grid.
+ *
+ * Styling / data contract:
+ * - `[data-pyric-event-row]` — the row, with `data-pyric-event-band`,
+ *   `data-pyric-event-service`, `data-pyric-event-lens`,
+ *   `data-pyric-event-denied` (present only on denials), and
+ *   `data-pyric-selected` when active.
+ * - `[data-pyric-event-target]` / `-change` / `-for` / `-lens` / `-when`
+ *   — the five columns, in order.
+ */
+export function ActivityGridRow({ row, selected, onSelect, formatWhen, now, className, }) {
+    const when = formatWhen
+        ? formatWhen(row.at, now ?? Date.now())
+        : row.when || defaultFormatWhen(row.at, now ?? Date.now());
+    return (_jsxs("button", { type: "button", onClick: () => onSelect?.(row), className: className, "data-pyric-event-row": "", "data-pyric-event-band": row.band, "data-pyric-event-service": row.service, "data-pyric-event-lens": row.authLens.mode, "data-pyric-event-actor": row.actor.kind, "data-pyric-event-denied": row.denied ? '' : undefined, "data-pyric-selected": selected ? '' : undefined, children: [_jsx("span", { "data-pyric-event-target": "", children: row.target }), _jsx("span", { "data-pyric-event-change": "", children: row.change }), _jsx("span", { "data-pyric-event-for": "", children: row.for }), _jsx("span", { "data-pyric-event-lens": "", children: row.lens }), _jsx("span", { "data-pyric-event-when": "", children: when })] }));
+}
+//# sourceMappingURL=ActivityGridRow.js.map

package/dist/events/components/ActivityGridRow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivityGridRow.js","sourceRoot":"","sources":["../../../src/events/components/ActivityGridRow.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAgBhD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,GAAG,EACH,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,GAAG,EACH,SAAS,GACY;IACrB,MAAM,IAAI,GAAG,UAAU;QACrB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACvC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE7D,OAAO,CACL,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAC9B,SAAS,EAAE,SAAS,0BACC,EAAE,2BACA,GAAG,CAAC,IAAI,8BACL,GAAG,CAAC,OAAO,2BACd,GAAG,CAAC,QAAQ,CAAC,IAAI,4BAChB,GAAG,CAAC,KAAK,CAAC,IAAI,6BACb,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,yBAC/B,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,aAE9C,0CAA8B,EAAE,YAAE,GAAG,CAAC,MAAM,GAAQ,EACpD,0CAA8B,EAAE,YAAE,GAAG,CAAC,MAAM,GAAQ,EACpD,uCAA2B,EAAE,YAAE,GAAG,CAAC,GAAG,GAAQ,EAC9C,wCAA4B,EAAE,YAAE,GAAG,CAAC,IAAI,GAAQ,EAChD,wCAA4B,EAAE,YAAE,IAAI,GAAQ,IACrC,CACV,CAAC;AACJ,CAAC"}