@stapel/workspaces-react 0.17.0 → 0.19.1

package/manifest.json

@@ -1,10 +1,10 @@
 {
   "$generated": "by scripts/gen-manifest.mjs — do not edit; drift-gated (pnpm gen:manifest:check)",
   "package": "@stapel/workspaces-react",
-  "version": "0.17.0",
+  "version": "0.19.1",
   "backend": {
     "module": "stapel-workspaces",
-    "contract": ">=0.24 <0.25"
+    "contract": ">=0.30 <0.31"
   },
   "layers": [
     "api",
@@ -817,6 +817,16 @@
       "params": [],
       "remediation": "reauthenticate"
     },
+    "error.409.workspace_is_instance_default": {
+      "status": 409,
+      "params": [],
+      "remediation": "fix_input"
+    },
+    "error.409.workspace_is_personal": {
+      "status": 409,
+      "params": [],
+      "remediation": "fix_input"
+    },
     "error.410.gone": {
       "status": 410,
       "params": [],
@@ -847,6 +857,13 @@
       "params": [],
       "remediation": "wait_and_retry"
     },
+    "error.429.invitation_grant_pending": {
+      "status": 429,
+      "params": [
+        "retry_after"
+      ],
+      "remediation": "wait_and_retry"
+    },
     "error.429.invitation_resend_cooldown": {
       "status": 429,
       "params": [
@@ -876,6 +893,16 @@
       "params": [],
       "remediation": "wait_and_retry"
     },
+    "error.503.billing_unavailable": {
+      "status": 503,
+      "params": [],
+      "remediation": "wait_and_retry"
+    },
+    "error.503.mandate_unavailable": {
+      "status": 503,
+      "params": [],
+      "remediation": "retry"
+    },
     "error.503.profiles_not_configured": {
       "status": 503,
       "params": [],
@@ -893,101 +920,101 @@
   },
   "demos": [
     {
-      "id": "workspaces.accept",
-      "title": "Accept invitation",
-      "description": "The headless AcceptInvitation wraps joining a workspace by its email-link token, exposing accept() plus accepting / accepted / error state (a dead token surfaces a localizable StapelApiError). Bring your own UI — the component is renderless.",
-      "component": "AcceptInvitation",
-      "tokens": [
-        "card-bg",
-        "card-border"
-      ],
+      "id": "workspaces.audit-trail",
+      "title": "Membership history (default skin)",
+      "description": "The shipped audit trail: who let this person in, who took them out and when, filtered by action from the closed backend vocabulary, walked by anchor. An action the client does not know is title-cased from its key — never a dotted i18n key on the glass.",
+      "component": "AuditTrailPane",
       "variants": [
-        "default"
+        "default",
+        "empty"
       ],
-      "source": "demo/AcceptInvitation.demo.tsx"
+      "source": "demo/AuditTrailPaneSkin.demo.tsx"
     },
     {
-      "id": "workspaces.can",
-      "title": "Capability gate",
-      "description": "The headless Can gates UI on the caller's my_capabilities in a workspace, with the backend's wildcard matcher (* and prefix.*) ported client-side. Static children render only when allowed; the render-prop variant hands the verdict out for disabled-state UI. UI convenience only — the backend re-checks every operation.",
-      "component": "Can",
-      "tokens": [
-        "card-bg",
-        "card-border"
-      ],
+      "id": "workspaces.invitations-pane",
+      "title": "Invitations (default skin)",
+      "description": "The shipped invitation console: who has been invited and has not joined, filtered by what became of the invitation, searchable by address, with revoke / resend / rename each gated on the invitation's own state — and a confirm that says a resend rotates the token, so the earlier link stops working.",
+      "component": "InvitationsPane",
       "variants": [
-        "default"
+        "default",
+        "terminal",
+        "empty"
       ],
-      "source": "demo/Can.demo.tsx"
+      "source": "demo/InvitationsPaneSkin.demo.tsx"
     },
     {
-      "id": "workspaces.invite-accept",
-      "title": "Invite accept flow",
-      "description": "The headless InviteAcceptFlow drives the /invite/{token} journey: public preview routing (accept prompt / wrong account / login / claim), the grant_token hand-off seam to auth (onLoginGrant), the basic-data slot, and accept/decline. Every screen is the host's; InviteAcceptPage is the reference skin.",
-      "component": "InviteAcceptFlow",
-      "tokens": [
-        "card-bg",
-        "button-primary-bg"
+      "id": "workspaces.invite-accept-page",
+      "title": "Invitation page (default skin)",
+      "description": "The shipped /invite/{token} screen: the workspace and the role being offered, one primary action per block (Join is the primary; Decline is a danger link behind a confirm that states what it costs), the wrong-account branch with a switch CTA, and the terminal states — expired, revoked, already used — as sentences rather than an error box.",
+      "component": "InviteAcceptPage",
+      "covers": [
+        "InviteAcceptFlow",
+        "AcceptInvitation"
       ],
       "variants": [
-        "default"
+        "default",
+        "wrong-account",
+        "expired"
       ],
-      "source": "demo/InviteAcceptFlow.demo.tsx"
+      "source": "demo/InviteAcceptPageSkin.demo.tsx"
     },
     {
-      "id": "workspaces.list",
-      "title": "Workspace list",
-      "description": "The headless WorkspaceList wraps the read of the caller's workspaces plus an owner-seeded create. The read arrives as a LoadState the skin renders through matchList, so 'no workspaces yet' and 'we could not load them' stay two different screens. Bring your own UI — the component is renderless.",
-      "component": "WorkspaceList",
-      "tokens": [
-        "card-bg",
-        "card-border"
+      "id": "workspaces.members-manager",
+      "title": "Members (default skin)",
+      "description": "The shipped roster: who is here, the role each one holds (from the effective registry, not a hardcoded four), the three states of two-factor evidence, an invite, a rename, an administrative password reset and a removal — each switched off with the server's reason where the server would refuse it, including on the viewer's own row.",
+      "component": "MembersManager",
+      "covers": [
+        "Members",
+        "Can"
       ],
       "variants": [
-        "default"
+        "default",
+        "read-only",
+        "empty",
+        "no-workspace"
       ],
-      "source": "demo/WorkspaceList.demo.tsx"
+      "source": "demo/MembersManagerSkin.demo.tsx"
     },
     {
-      "id": "workspaces.members",
-      "title": "Members",
-      "description": "The headless Members wraps a workspace's roster plus invite / role-change / removal controls, exposing members / loading / per-action pending / error state. Bring your own UI — the component is renderless.",
-      "component": "Members",
-      "tokens": [
-        "card-bg",
-        "card-border"
+      "id": "workspaces.role-select-field",
+      "title": "Role picker (default skin)",
+      "description": "The shipped role field: an accessible name of its own (a roster renders one per row, and 'combobox, combobox, combobox' is what a screen reader says otherwise), the effective registry as options with each role's rank as the caption, and a stated refusal instead of a picker when the registry cannot be read.",
+      "component": "RoleSelectField",
+      "covers": [
+        "RoleSelect"
       ],
       "variants": [
-        "default"
+        "default",
+        "no-registry"
       ],
-      "source": "demo/Members.demo.tsx"
+      "source": "demo/RoleSelectFieldSkin.demo.tsx"
     },
     {
-      "id": "workspaces.provider",
-      "title": "Workspaces provider",
-      "description": "The headless workspaces root wires the runtime, i18n engine, and query client into React context. Replace with per-flow demos as you add headless components.",
-      "component": "WorkspacesProvider",
-      "tokens": [
-        "card-bg"
-      ],
+      "id": "workspaces.workspace-settings",
+      "title": "Workspace settings (default skin)",
+      "description": "The shipped settings screen: the name and slug, the two-factor policy with the live enforcement counts (checked / missing / unverified — the last is the number to get to zero), the first-login demands for provisioned accounts, and a danger zone whose Delete is drawn from the server's own verdict.",
+      "component": "WorkspaceSettings",
       "variants": [
-        "default"
+        "default",
+        "delete-refused"
       ],
-      "source": "demo/Workspaces.demo.tsx"
+      "source": "demo/WorkspaceSettingsSkin.demo.tsx"
     },
     {
-      "id": "workspaces.role-select",
-      "title": "Role select (registry)",
-      "description": "The headless RoleSelect reads the effective role registry (builtin four + the deployment's STAPEL_WORKSPACES[\"ROLES\"] overlay) from GET /roles and resolves labels via workspaces.role.<key> with a raw-name fallback — role UI stops hardcoding the builtin four.",
-      "component": "RoleSelect",
-      "tokens": [
-        "card-bg",
-        "card-border"
+      "id": "workspaces.workspaces-page",
+      "title": "Workspaces page (default skin)",
+      "description": "The shipped roster: every workspace the caller belongs to with its owner and member count, the home workspace set and cleared in place, and a create control gated on the installation's policy — with the reason printed beside it rather than the button silently missing.",
+      "component": "WorkspacesPage",
+      "covers": [
+        "WorkspaceList",
+        "WorkspacesProvider"
       ],
       "variants": [
-        "default"
+        "default",
+        "empty",
+        "failed"
       ],
-      "source": "demo/RoleSelect.demo.tsx"
+      "source": "demo/WorkspacesPageSkin.demo.tsx"
     }
   ],
   "i18nKeys": [
@@ -1047,34 +1074,100 @@
     "error.408.request_timeout",
     "error.409.conflict",
     "error.409.email_already_registered",
+    "error.409.workspace_is_instance_default",
+    "error.409.workspace_is_personal",
     "error.410.gone",
     "error.413.payload_too_large",
     "error.415.unsupported_media_type",
     "error.422.unprocessable_entity",
     "error.423.locked",
     "error.423.verification_locked",
+    "error.429.invitation_grant_pending",
     "error.429.invitation_resend_cooldown",
     "error.429.rate_limit",
     "error.429.too_many_requests",
     "error.500.internal",
     "error.503.auth_unavailable",
+    "error.503.billing_unavailable",
+    "error.503.mandate_unavailable",
     "error.503.profiles_not_configured",
     "error.503.profiles_unavailable",
     "workspaces.accept.accept",
     "workspaces.accept.accepted",
     "workspaces.accept.accepting",
+    "workspaces.active.choose.hint",
+    "workspaces.active.choose.title",
+    "workspaces.active.none.hint",
+    "workspaces.active.none.title",
+    "workspaces.audit.action.account_created_by_invitation",
+    "workspaces.audit.action.deleted",
+    "workspaces.audit.action.invitation_accepted",
+    "workspaces.audit.action.invitation_created",
+    "workspaces.audit.action.invitation_declined",
+    "workspaces.audit.action.invitation_revoked",
+    "workspaces.audit.action.member_joined",
+    "workspaces.audit.action.member_provisioned",
+    "workspaces.audit.action.member_removed",
+    "workspaces.audit.action.member_role_changed",
+    "workspaces.audit.action.member_suspended",
+    "workspaces.audit.action.member_unsuspended",
+    "workspaces.audit.actor_unknown",
+    "workspaces.audit.by",
+    "workspaces.audit.empty",
+    "workspaces.audit.filter.all",
+    "workspaces.audit.filter_label",
+    "workspaces.audit.role_line",
+    "workspaces.audit.subtitle",
+    "workspaces.audit.title",
+    "workspaces.cancel",
+    "workspaces.dialog.close",
     "workspaces.error.unknown",
+    "workspaces.invitations.blocked.resend_terminal",
+    "workspaces.invitations.blocked.row_closed",
+    "workspaces.invitations.blocked.row_resend_only",
+    "workspaces.invitations.blocked.terminal",
+    "workspaces.invitations.count",
+    "workspaces.invitations.count.one",
+    "workspaces.invitations.count.other",
+    "workspaces.invitations.empty",
+    "workspaces.invitations.expires_label",
+    "workspaces.invitations.filter.all",
+    "workspaces.invitations.filter.never_accepted",
+    "workspaces.invitations.filter.pending",
+    "workspaces.invitations.filter_label",
+    "workspaces.invitations.rename",
+    "workspaces.invitations.rename_dialog.title",
+    "workspaces.invitations.resend",
+    "workspaces.invitations.resend_confirm",
+    "workspaces.invitations.resend_confirm_body",
+    "workspaces.invitations.revoke",
+    "workspaces.invitations.revoke_confirm",
+    "workspaces.invitations.revoke_confirm_body",
+    "workspaces.invitations.search_placeholder",
+    "workspaces.invitations.sent_label",
+    "workspaces.invitations.sent_never",
+    "workspaces.invitations.status.accepted",
+    "workspaces.invitations.status.declined",
+    "workspaces.invitations.status.expired",
+    "workspaces.invitations.status.pending",
+    "workspaces.invitations.status.revoked",
+    "workspaces.invitations.subtitle",
+    "workspaces.invitations.title",
     "workspaces.invite.acceptTitle",
     "workspaces.invite.accepted",
     "workspaces.invite.basicDataContinueCta",
     "workspaces.invite.basicDataTitle",
+    "workspaces.invite.blocked.busy",
     "workspaces.invite.claiming",
     "workspaces.invite.createAccountCta",
+    "workspaces.invite.declineConfirm",
+    "workspaces.invite.declineConfirmBody",
     "workspaces.invite.declineCta",
     "workspaces.invite.declined",
     "workspaces.invite.emailLine",
     "workspaces.invite.exchangeFailed",
     "workspaces.invite.exchanging",
+    "workspaces.invite.exitCta",
     "workspaces.invite.joinCta",
     "workspaces.invite.loading",
     "workspaces.invite.loginTitle",
@@ -1085,50 +1178,168 @@
     "workspaces.invite.unavailable.accepted",
     "workspaces.invite.unavailable.declined",
     "workspaces.invite.unavailable.expired",
+    "workspaces.invite.unavailable.next_step",
     "workspaces.invite.unavailable.revoked",
     "workspaces.invite.wrongAccount",
     "workspaces.invite.wrongAccountHint",
+    "workspaces.list.blocked.create_policy",
+    "workspaces.list.clear_preferred",
+    "workspaces.list.count",
+    "workspaces.list.count.one",
+    "workspaces.list.count.other",
     "workspaces.list.create",
+    "workspaces.list.create_dialog.blocked.no_name",
+    "workspaces.list.create_dialog.name_label",
+    "workspaces.list.create_dialog.name_placeholder",
+    "workspaces.list.create_dialog.submit",
+    "workspaces.list.create_dialog.title",
     "workspaces.list.creating",
     "workspaces.list.empty",
+    "workspaces.list.empty_hint",
+    "workspaces.list.guest_notice",
+    "workspaces.list.instance_closed",
     "workspaces.list.load_failed",
     "workspaces.list.loading",
+    "workspaces.list.member_count",
+    "workspaces.list.member_count.one",
+    "workspaces.list.member_count.other",
+    "workspaces.list.open",
+    "workspaces.list.owner_line",
+    "workspaces.list.preferred",
+    "workspaces.list.set_preferred",
+    "workspaces.list.your_role",
+    "workspaces.members.blocked.read_only",
+    "workspaces.members.count",
+    "workspaces.members.count.one",
+    "workspaces.members.count.other",
     "workspaces.members.empty",
     "workspaces.members.invite",
+    "workspaces.members.invite_dialog.blocked.bad_email",
+    "workspaces.members.invite_dialog.blocked.no_emails",
     "workspaces.members.invite_dialog.emails_label",
     "workspaces.members.invite_dialog.emails_placeholder",
+    "workspaces.members.invite_dialog.name_label",
+    "workspaces.members.invite_dialog.name_placeholder",
     "workspaces.members.invite_dialog.role_label",
+    "workspaces.members.invite_dialog.submit",
     "workspaces.members.invite_dialog.title",
     "workspaces.members.inviting",
+    "workspaces.members.joined",
+    "workspaces.members.last_seen",
+    "workspaces.members.last_seen_never",
     "workspaces.members.load_failed",
     "workspaces.members.loading",
+    "workspaces.members.mfa.compliant",
+    "workspaces.members.mfa.noncompliant",
+    "workspaces.members.mfa.unknown",
+    "workspaces.members.mfa_label",
+    "workspaces.members.provisioned",
     "workspaces.members.remove",
+    "workspaces.members.remove.blocked.last_owner",
+    "workspaces.members.remove.blocked.self",
     "workspaces.members.remove_confirm",
+    "workspaces.members.remove_confirm_body",
+    "workspaces.members.rename",
+    "workspaces.members.rename_dialog.blocked.unchanged",
+    "workspaces.members.rename_dialog.hint",
+    "workspaces.members.rename_dialog.label",
+    "workspaces.members.rename_dialog.placeholder",
+    "workspaces.members.rename_dialog.submit",
+    "workspaces.members.rename_dialog.title",
+    "workspaces.members.reset_password",
+    "workspaces.members.reset_password.blocked.self",
+    "workspaces.members.reset_password_dialog.body",
+    "workspaces.members.reset_password_dialog.done",
+    "workspaces.members.reset_password_dialog.generated",
+    "workspaces.members.reset_password_dialog.generated_hint",
+    "workspaces.members.reset_password_dialog.not_notified",
+    "workspaces.members.reset_password_dialog.step_up",
+    "workspaces.members.reset_password_dialog.submit",
+    "workspaces.members.reset_password_dialog.title",
     "workspaces.members.role.admin",
     "workspaces.members.role.member",
     "workspaces.members.role.owner",
     "workspaces.members.role.viewer",
+    "workspaces.members.role_picker_label",
+    "workspaces.members.search_placeholder",
     "workspaces.members.subtitle",
+    "workspaces.members.suspended",
+    "workspaces.members.suspended.no_mfa",
     "workspaces.members.title",
     "workspaces.members.update_role",
+    "workspaces.nav.audit",
+    "workspaces.nav.invitations",
+    "workspaces.nav.invite",
+    "workspaces.nav.members",
+    "workspaces.nav.settings",
+    "workspaces.nav.workspaces",
+    "workspaces.page.subtitle",
+    "workspaces.page.title",
+    "workspaces.pager.next",
+    "workspaces.pager.position",
+    "workspaces.pager.prev",
     "workspaces.retry",
     "workspaces.role.admin",
     "workspaces.role.member",
     "workspaces.role.owner",
+    "workspaces.role.rank_caption",
     "workspaces.role.viewer",
+    "workspaces.roles.empty",
     "workspaces.roles.load_failed",
+    "workspaces.settings.blocked.cannot_manage",
     "workspaces.settings.blocked.name_required",
-    "workspaces.settings.blocked.not_owner",
+    "workspaces.settings.blocked.unchanged",
+    "workspaces.settings.danger_zone.blocked",
     "workspaces.settings.danger_zone.delete",
     "workspaces.settings.danger_zone.delete_confirm",
+    "workspaces.settings.danger_zone.delete_confirm_body",
     "workspaces.settings.danger_zone.title",
     "workspaces.settings.field.name",
     "workspaces.settings.field.slug",
     "workspaces.settings.field.type",
     "workspaces.settings.save",
     "workspaces.settings.saving",
+    "workspaces.settings.security.blocked.capability",
+    "workspaces.settings.security.mfa.attempts_count",
+    "workspaces.settings.security.mfa.attempts_count.one",
+    "workspaces.settings.security.mfa.attempts_count.other",
+    "workspaces.settings.security.mfa.checked_count",
+    "workspaces.settings.security.mfa.checked_count.one",
+    "workspaces.settings.security.mfa.checked_count.other",
+    "workspaces.settings.security.mfa.completed_at",
+    "workspaces.settings.security.mfa.last_attempt",
+    "workspaces.settings.security.mfa.last_error",
+    "workspaces.settings.security.mfa.no_status_yet",
+    "workspaces.settings.security.mfa.noncompliant_count",
+    "workspaces.settings.security.mfa.noncompliant_count.one",
+    "workspaces.settings.security.mfa.noncompliant_count.other",
+    "workspaces.settings.security.mfa.off",
+    "workspaces.settings.security.mfa.state.enforced",
+    "workspaces.settings.security.mfa.state.enforcing",
+    "workspaces.settings.security.mfa.state.failed",
+    "workspaces.settings.security.mfa.state.other",
+    "workspaces.settings.security.mfa.state.pending",
+    "workspaces.settings.security.mfa.state_label",
+    "workspaces.settings.security.mfa.status_title",
+    "workspaces.settings.security.mfa.unverified_count",
+    "workspaces.settings.security.mfa.unverified_count.one",
+    "workspaces.settings.security.mfa.unverified_count.other",
+    "workspaces.settings.security.mfa.unverified_hint",
+    "workspaces.settings.security.policies_hint",
+    "workspaces.settings.security.policies_label",
+    "workspaces.settings.security.policy.mfa_enroll",
+    "workspaces.settings.security.policy.password_change",
+    "workspaces.settings.security.require_mfa",
+    "workspaces.settings.security.require_mfa_hint",
+    "workspaces.settings.security.save",
+    "workspaces.settings.security.saving",
+    "workspaces.settings.security.step_up_notice",
+    "workspaces.settings.security.subtitle",
+    "workspaces.settings.security.title",
     "workspaces.settings.subtitle",
-    "workspaces.settings.title"
+    "workspaces.settings.title",
+    "workspaces.settings.type.personal",
+    "workspaces.settings.type.work"
   ],
   "exports": {
     "runtime": [
@@ -1181,6 +1392,7 @@
       "useMandateSource",
       "useMandateState",
       "useMembers",
+      "useOptionalWorkspaceSelection",
       "useRemoveMember",
       "useRenameInvitation",
       "useRenameMember",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stapel/workspaces-react",
-  "version": "0.17.0",
+  "version": "0.19.1",
   "description": "Headless React flow pair for stapel-workspaces: typed API client, TanStack Query hooks, flow machines, headless components, and i18n keys. Zero visual opinion.",
   "license": "MIT",
   "repository": {
@@ -48,31 +48,35 @@
     {
       "name": "index — the ru/es locales must NOT be in the main bundle",
       "path": "dist/index.js",
-      "limit": "12 KB"
+      "limit": "12.5 KB"
     },
     {
-      "name": "i18n/ru subpath (opt-in locale: en floor + generated ru + ru UI)",
+      "name": "i18n/ru subpath (opt-in locale: en floor + generated ru errors + COMPLETE ru UI copy)",
       "path": "dist/i18n/ru.js",
-      "limit": "5 KB"
+      "limit": "11 KB"
     },
     {
-      "name": "i18n/es subpath (opt-in locale: en floor + generated es errors; no es UI copy yet)",
+      "name": "i18n/es subpath (opt-in locale: en floor + generated es errors + COMPLETE es UI copy)",
       "path": "dist/i18n/es.js",
-      "limit": "3.5 KB"
+      "limit": "9.5 KB"
     },
     {
-      "name": "default — the settings skin (antd) must stay out of the main bundle",
+      "name": "default — seven antd screens; must stay out of the main bundle",
       "path": "dist/default/index.js",
-      "limit": "12 KB"
+      "limit": "22 KB"
     }
   ],
   "peerDependencies": {
-    "@stapel/core": ">=0.15.0 <1.0.0",
+    "@stapel/core": ">=0.18.1 <1.0.0",
+    "@stapel/tokens-antd": ">=0.16.0",
     "@tanstack/react-query": "^5.0.0",
     "antd": ">=5.20.0 <7",
     "react": ">=19"
   },
   "peerDependenciesMeta": {
+    "@stapel/tokens-antd": {
+      "optional": true
+    },
     "antd": {
       "optional": true
     }
@@ -91,9 +95,10 @@
     "size-limit": "^11.2.0",
     "typescript": "^5.8.3",
     "vitest": "^3.2.4",
-    "@stapel/core": "^0.15.0",
-    "@stapel/tokens": "^0.5.0",
-    "@stapel/showcase": "^0.2.0"
+    "@stapel/showcase": "^0.3.0",
+    "@stapel/tokens-antd": "^0.16.0",
+    "@stapel/tokens": "^0.7.0",
+    "@stapel/core": "^0.23.1"
   },
   "engines": {
     "node": ">=22"
@@ -106,6 +111,7 @@
     "test": "tsc -p tsconfig.demo.json && vitest run --exclude test/prodBundlePurity.test.ts",
     "test:pack": "vitest run test/prodBundlePurity.test.ts",
     "lint": "eslint .",
+    "gen:nav": "NAV_PACKAGES=$(cd ../.. && ls -d packages/*/src/nav/manifest.ts | sed 's|/src/nav/manifest.ts||' | paste -sd, -) NAV_PKG_DIR=packages/workspaces-react node --experimental-strip-types ../../scripts/gen-nav-manifest.mjs",
     "size": "size-limit"
   }
 }

package/src/analytics/generated/events.json

@@ -1,7 +1,7 @@
 {
   "$generated": "by scripts/gen-events.mjs — do not edit; drift-gated (pnpm gen:events:check)",
   "package": "@stapel/workspaces-react",
-  "version": "0.17.0",
+  "version": "0.19.1",
   "defined": [],
   "flows": []
 }