@stapel/workspaces-react 0.6.0 → 0.8.0

package/dist/default/MembersManager.js

@@ -5,73 +5,78 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * инвайты)"). Built entirely on this pair's EXISTING `Members` headless
  * wrapper (`useMembers`/`useInviteMembers`/`useUpdateMemberRole`/
  * `useRemoveMember`) — no new backend surface.
+ *
+ * Roles come from the EFFECTIVE registry via the `RoleSelect` headless
+ * (GET /roles, org-program §A2) — not a hardcoded builtin four: a deployment
+ * that overlays `STAPEL_WORKSPACES["ROLES"]` (e.g. a `secretary`) sees its
+ * roles here with `workspaces.role.<key>` labels (client-bundle merge,
+ * raw-name fallback). `owner` is offered only in the member-row select (the
+ * backend enforces "only an owner grants owner" and last-owner protection);
+ * the invite dialog filters it out, as before.
  */
 import { useState } from "react";
 import { Alert, Button, Card, Input, Modal, Popconfirm, Select, Table, Typography } from "antd";
 import { useT } from "@stapel/core";
 import { Members } from "../headless/Members.js";
+import { RoleSelect } from "../headless/RoleSelect.js";
 import { WORKSPACES_I18N_KEYS } from "../i18n/keys.js";
-const ROLES = ["owner", "admin", "member", "viewer"];
-const ROLE_KEY = {
-    owner: "roleOwner",
-    admin: "roleAdmin",
-    member: "roleMember",
-    viewer: "roleViewer",
-};
-function isWorkspaceRole(value) {
-    return ROLES.includes(value);
-}
+const DEFAULT_INVITE_ROLE = "member";
 export function MembersManager(props) {
     const t = useT();
     const canManage = props.canManage ?? true;
     const [inviteOpen, setInviteOpen] = useState(false);
     const [emailsText, setEmailsText] = useState("");
-    const [inviteRole, setInviteRole] = useState("member");
-    return (_jsx(Members, { workspaceId: props.workspaceId, children: ({ members, isLoading, isError, error, invite, isInviting, updateRole, remove }) => {
-            function openInvite() {
-                setEmailsText("");
-                setInviteRole("member");
-                setInviteOpen(true);
-            }
-            function submitInvite() {
-                const emails = emailsText
-                    .split(/[,\s]+/)
-                    .map((e) => e.trim())
-                    .filter((e) => e.length > 0);
-                if (emails.length === 0)
-                    return;
-                invite({ emails, role: inviteRole });
-                setInviteOpen(false);
-            }
-            const columns = [
-                {
-                    title: "Email",
-                    dataIndex: "email",
-                    key: "email",
-                    render: (value) => value ?? "—",
-                },
-                {
-                    title: t(WORKSPACES_I18N_KEYS.membersInviteRoleLabel),
-                    key: "role",
-                    render: (_, member) => {
-                        const role = isWorkspaceRole(member.role) ? member.role : "member";
-                        return canManage ? (_jsx(Select, { value: role, style: { width: 140 }, onChange: (next) => updateRole({ userId: member.user_id, role: next }), options: ROLES.map((r) => ({ value: r, label: t(WORKSPACES_I18N_KEYS[ROLE_KEY[r]]) })) })) : (_jsx("span", { children: t(WORKSPACES_I18N_KEYS[ROLE_KEY[role]]) }));
+    const [inviteRole, setInviteRole] = useState(DEFAULT_INVITE_ROLE);
+    return (_jsx(RoleSelect, { children: (rolesBag) => (_jsx(Members, { workspaceId: props.workspaceId, children: ({ members, isLoading, isError, error, invite, isInviting, updateRole, remove }) => {
+                const { labelFor } = rolesBag;
+                const roleOptions = rolesBag.roles.map((r) => ({
+                    value: r.role,
+                    label: labelFor(r.role),
+                }));
+                const inviteRoleOptions = roleOptions.filter((o) => o.value !== "owner");
+                function openInvite() {
+                    setEmailsText("");
+                    setInviteRole(DEFAULT_INVITE_ROLE);
+                    setInviteOpen(true);
+                }
+                function submitInvite() {
+                    const emails = emailsText
+                        .split(/[,\s]+/)
+                        .map((e) => e.trim())
+                        .filter((e) => e.length > 0);
+                    if (emails.length === 0)
+                        return;
+                    invite({ emails, role: inviteRole });
+                    setInviteOpen(false);
+                }
+                const columns = [
+                    {
+                        title: "Email",
+                        dataIndex: "email",
+                        key: "email",
+                        render: (value) => value ?? "—",
+                    },
+                    {
+                        title: t(WORKSPACES_I18N_KEYS.membersInviteRoleLabel),
+                        key: "role",
+                        render: (_, member) => canManage ? (_jsx(Select, { value: member.role, style: { width: 160 }, loading: rolesBag.isLoading, onChange: (next) => updateRole({ userId: member.user_id, role: next }), 
+                            // A member's CURRENT role may be missing from the
+                            // registry options (a deployment removed an overlay
+                            // role) — antd shows the raw value then, which matches
+                            // labelFor's raw-name fallback contract.
+                            options: roleOptions })) : (_jsx("span", { children: labelFor(member.role) })),
                     },
-                },
-                ...(canManage
-                    ? [
-                        {
-                            title: "",
-                            key: "actions",
-                            render: (_, member) => (_jsx(Popconfirm, { title: t(WORKSPACES_I18N_KEYS.membersRemoveConfirm), onConfirm: () => remove(member.user_id), children: _jsx(Button, { danger: true, type: "link", children: t(WORKSPACES_I18N_KEYS.membersRemove) }) })),
-                        },
-                    ]
-                    : []),
-            ];
-            return (_jsxs(Card, { "data-testid": "members-manager", children: [_jsxs("div", { style: { display: "flex", justifyContent: "space-between", alignItems: "flex-start", gap: 16 }, children: [_jsxs("div", { children: [_jsx(Typography.Title, { level: 4, style: { marginTop: 0 }, children: t(WORKSPACES_I18N_KEYS.membersTitle) }), _jsx(Typography.Text, { type: "secondary", children: t(WORKSPACES_I18N_KEYS.membersSubtitle) })] }), canManage && (_jsx(Button, { type: "primary", onClick: openInvite, "data-analytics": "none", "data-analytics-reason": "local-ui-open-invite-dialog", children: t(WORKSPACES_I18N_KEYS.membersInvite) }))] }), isError && error && (_jsx(Alert, { style: { marginTop: 12 }, type: "error", showIcon: true, message: error.message })), _jsx(Table, { style: { marginTop: 16 }, size: "small", loading: isLoading, rowKey: (member) => member.id, dataSource: members, columns: columns, pagination: false }), _jsx(Modal, { title: t(WORKSPACES_I18N_KEYS.membersInviteDialogTitle), open: inviteOpen, onCancel: () => setInviteOpen(false), onOk: submitInvite, okButtonProps: { loading: isInviting, disabled: emailsText.trim().length === 0 }, children: _jsxs("div", { style: { display: "grid", gap: 12 }, children: [_jsxs("div", { children: [_jsx(Typography.Text, { children: t(WORKSPACES_I18N_KEYS.membersInviteEmailsLabel) }), _jsx(Input, { value: emailsText, onChange: (e) => setEmailsText(e.target.value), placeholder: t(WORKSPACES_I18N_KEYS.membersInviteEmailsPlaceholder) })] }), _jsxs("div", { children: [_jsx(Typography.Text, { children: t(WORKSPACES_I18N_KEYS.membersInviteRoleLabel) }), _jsx(Select, { value: inviteRole, onChange: setInviteRole, style: { width: "100%" }, options: ROLES.filter((r) => r !== "owner").map((r) => ({
-                                                value: r,
-                                                label: t(WORKSPACES_I18N_KEYS[ROLE_KEY[r]]),
-                                            })) })] })] }) })] }));
-        } }));
+                    ...(canManage
+                        ? [
+                            {
+                                title: "",
+                                key: "actions",
+                                render: (_, member) => (_jsx(Popconfirm, { title: t(WORKSPACES_I18N_KEYS.membersRemoveConfirm), onConfirm: () => remove(member.user_id), children: _jsx(Button, { danger: true, type: "link", children: t(WORKSPACES_I18N_KEYS.membersRemove) }) })),
+                            },
+                        ]
+                        : []),
+                ];
+                return (_jsxs(Card, { "data-testid": "members-manager", children: [_jsxs("div", { style: { display: "flex", justifyContent: "space-between", alignItems: "flex-start", gap: 16 }, children: [_jsxs("div", { children: [_jsx(Typography.Title, { level: 4, style: { marginTop: 0 }, children: t(WORKSPACES_I18N_KEYS.membersTitle) }), _jsx(Typography.Text, { type: "secondary", children: t(WORKSPACES_I18N_KEYS.membersSubtitle) })] }), canManage && (_jsx(Button, { type: "primary", onClick: openInvite, "data-analytics": "none", "data-analytics-reason": "local-ui-open-invite-dialog", children: t(WORKSPACES_I18N_KEYS.membersInvite) }))] }), isError && error && (_jsx(Alert, { style: { marginTop: 12 }, type: "error", showIcon: true, message: error.message })), _jsx(Table, { style: { marginTop: 16 }, size: "small", loading: isLoading, rowKey: (member) => member.id, dataSource: members, columns: columns, pagination: false }), _jsx(Modal, { title: t(WORKSPACES_I18N_KEYS.membersInviteDialogTitle), open: inviteOpen, onCancel: () => setInviteOpen(false), onOk: submitInvite, okButtonProps: { loading: isInviting, disabled: emailsText.trim().length === 0 }, children: _jsxs("div", { style: { display: "grid", gap: 12 }, children: [_jsxs("div", { children: [_jsx(Typography.Text, { children: t(WORKSPACES_I18N_KEYS.membersInviteEmailsLabel) }), _jsx(Input, { value: emailsText, onChange: (e) => setEmailsText(e.target.value), placeholder: t(WORKSPACES_I18N_KEYS.membersInviteEmailsPlaceholder) })] }), _jsxs("div", { children: [_jsx(Typography.Text, { children: t(WORKSPACES_I18N_KEYS.membersInviteRoleLabel) }), _jsx(Select, { value: inviteRole, onChange: setInviteRole, style: { width: "100%" }, loading: rolesBag.isLoading, options: inviteRoleOptions })] })] }) })] }));
+            } })) }));
 }
 //# sourceMappingURL=MembersManager.js.map

package/dist/default/MembersManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"MembersManager.js","sourceRoot":"","sources":["../../src/default/MembersManager.tsx"],"names":[],"mappings":";AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAEhG,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAcvD,MAAM,KAAK,GAA6B,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAE/E,MAAM,QAAQ,GAGV;IACF,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;CACrB,CAAC;AAEF,SAAS,eAAe,CAAC,KAAa;IACpC,OAAQ,KAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;IAC1C,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,QAAQ,CAAC,CAAC;IAEtE,OAAO,CACL,KAAC,OAAO,IAAC,WAAW,EAAE,KAAK,CAAC,WAAW,YACpC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE;YAClF,SAAS,UAAU;gBACjB,aAAa,CAAC,EAAE,CAAC,CAAC;gBAClB,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACxB,aAAa,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YAED,SAAS,YAAY;gBACnB,MAAM,MAAM,GAAG,UAAU;qBACtB,KAAK,CAAC,QAAQ,CAAC;qBACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBAChC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;gBACrC,aAAa,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAED,MAAM,OAAO,GAAkC;gBAC7C;oBACE,KAAK,EAAE,OAAO;oBACd,SAAS,EAAE,OAAO;oBAClB,GAAG,EAAE,OAAO;oBACZ,MAAM,EAAE,CAAC,KAAoB,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG;iBAC/C;gBACD;oBACE,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC,sBAAsB,CAAC;oBACrD,GAAG,EAAE,MAAM;oBACX,MAAM,EAAE,CAAC,CAAU,EAAE,MAAc,EAAE,EAAE;wBACrC,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;wBACnE,OAAO,SAAS,CAAC,CAAC,CAAC,CACjB,KAAC,MAAM,IACL,KAAK,EAAE,IAAI,EACX,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EACrB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EACtE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GACtF,CACH,CAAC,CAAC,CAAC,CACF,yBAAO,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAQ,CACvD,CAAC;oBACJ,CAAC;iBACF;gBACD,GAAG,CAAC,SAAS;oBACX,CAAC,CAAC;wBACE;4BACE,KAAK,EAAE,EAAE;4BACT,GAAG,EAAE,SAAS;4BACd,MAAM,EAAE,CAAC,CAAU,EAAE,MAAc,EAAE,EAAE,CAAC,CACtC,KAAC,UAAU,IACT,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,EACnD,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAEvC,KAAC,MAAM,IAAC,MAAM,QAAC,IAAI,EAAC,MAAM,YACvB,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,GAC/B,GACE,CACd;yBACF;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;YAEF,OAAO,CACL,MAAC,IAAI,mBAAa,iBAAiB,aACjC,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,aACjG,0BACE,KAAC,UAAU,CAAC,KAAK,IAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAChD,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,GACpB,EACnB,KAAC,UAAU,CAAC,IAAI,IAAC,IAAI,EAAC,WAAW,YAAE,CAAC,CAAC,oBAAoB,CAAC,eAAe,CAAC,GAAmB,IACzF,EACL,SAAS,IAAI,CACZ,KAAC,MAAM,IACL,IAAI,EAAC,SAAS,EACd,OAAO,EAAE,UAAU,oBACJ,MAAM,2BACC,6BAA6B,YAElD,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,GAC/B,CACV,IACG,EAEL,OAAO,IAAI,KAAK,IAAI,CACnB,KAAC,KAAK,IAAC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAC,OAAO,EAAC,QAAQ,QAAC,OAAO,EAAE,KAAK,CAAC,OAAO,GAAI,CAClF,EAED,KAAC,KAAK,IACJ,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EACxB,IAAI,EAAC,OAAO,EACZ,OAAO,EAAE,SAAS,EAClB,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAC7B,UAAU,EAAE,OAAmB,EAC/B,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,KAAK,GACjB,EAEF,KAAC,KAAK,IACJ,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,EACvD,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EACpC,IAAI,EAAE,YAAY,EAClB,aAAa,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,YAEhF,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,aACtC,0BACE,KAAC,UAAU,CAAC,IAAI,cAAE,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,GAAmB,EACrF,KAAC,KAAK,IACJ,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC9C,WAAW,EAAE,CAAC,CAAC,oBAAoB,CAAC,8BAA8B,CAAC,GACnE,IACE,EACN,0BACE,KAAC,UAAU,CAAC,IAAI,cAAE,CAAC,CAAC,oBAAoB,CAAC,sBAAsB,CAAC,GAAmB,EACnF,KAAC,MAAM,IACL,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EACxB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gDACtD,KAAK,EAAE,CAAC;gDACR,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;6CAC5C,CAAC,CAAC,GACH,IACE,IACF,GACA,IACH,CACR,CAAC;QACJ,CAAC,GACO,CACX,CAAC;AACJ,CAAC"}
+{"version":3,"file":"MembersManager.js","sourceRoot":"","sources":["../../src/default/MembersManager.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAEhG,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAcvD,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAErC,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;IAC1C,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAS,mBAAmB,CAAC,CAAC;IAE1E,OAAO,CACL,KAAC,UAAU,cACR,CAAC,QAAuB,EAAE,EAAE,CAAC,CAC5B,KAAC,OAAO,IAAC,WAAW,EAAE,KAAK,CAAC,WAAW,YACpC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE;gBAClF,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;gBAC9B,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7C,KAAK,EAAE,CAAC,CAAC,IAAI;oBACb,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;iBACxB,CAAC,CAAC,CAAC;gBACJ,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAC3B,CAAC;gBAEF,SAAS,UAAU;oBACjB,aAAa,CAAC,EAAE,CAAC,CAAC;oBAClB,aAAa,CAAC,mBAAmB,CAAC,CAAC;oBACnC,aAAa,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;gBAED,SAAS,YAAY;oBACnB,MAAM,MAAM,GAAG,UAAU;yBACtB,KAAK,CAAC,QAAQ,CAAC;yBACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;yBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO;oBAChC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;oBACrC,aAAa,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;gBAED,MAAM,OAAO,GAAkC;oBAC7C;wBACE,KAAK,EAAE,OAAO;wBACd,SAAS,EAAE,OAAO;wBAClB,GAAG,EAAE,OAAO;wBACZ,MAAM,EAAE,CAAC,KAAoB,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG;qBAC/C;oBACD;wBACE,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC,sBAAsB,CAAC;wBACrD,GAAG,EAAE,MAAM;wBACX,MAAM,EAAE,CAAC,CAAU,EAAE,MAAc,EAAE,EAAE,CACrC,SAAS,CAAC,CAAC,CAAC,CACV,KAAC,MAAM,IACL,KAAK,EAAE,MAAM,CAAC,IAAI,EAClB,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EACrB,OAAO,EAAE,QAAQ,CAAC,SAAS,EAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;4BACtE,kDAAkD;4BAClD,oDAAoD;4BACpD,uDAAuD;4BACvD,yCAAyC;4BACzC,OAAO,EAAE,WAAW,GACpB,CACH,CAAC,CAAC,CAAC,CACF,yBAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CACrC;qBACJ;oBACD,GAAG,CAAC,SAAS;wBACX,CAAC,CAAC;4BACE;gCACE,KAAK,EAAE,EAAE;gCACT,GAAG,EAAE,SAAS;gCACd,MAAM,EAAE,CAAC,CAAU,EAAE,MAAc,EAAE,EAAE,CAAC,CACtC,KAAC,UAAU,IACT,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,EACnD,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAEvC,KAAC,MAAM,IAAC,MAAM,QAAC,IAAI,EAAC,MAAM,YACvB,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,GAC/B,GACE,CACd;6BACF;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;gBAEF,OAAO,CACL,MAAC,IAAI,mBAAa,iBAAiB,aACjC,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,aACjG,0BACE,KAAC,UAAU,CAAC,KAAK,IAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAChD,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,GACpB,EACnB,KAAC,UAAU,CAAC,IAAI,IAAC,IAAI,EAAC,WAAW,YAAE,CAAC,CAAC,oBAAoB,CAAC,eAAe,CAAC,GAAmB,IACzF,EACL,SAAS,IAAI,CACZ,KAAC,MAAM,IACL,IAAI,EAAC,SAAS,EACd,OAAO,EAAE,UAAU,oBACJ,MAAM,2BACC,6BAA6B,YAElD,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,GAC/B,CACV,IACG,EAEL,OAAO,IAAI,KAAK,IAAI,CACnB,KAAC,KAAK,IAAC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAC,OAAO,EAAC,QAAQ,QAAC,OAAO,EAAE,KAAK,CAAC,OAAO,GAAI,CAClF,EAED,KAAC,KAAK,IACJ,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EACxB,IAAI,EAAC,OAAO,EACZ,OAAO,EAAE,SAAS,EAClB,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAC7B,UAAU,EAAE,OAAmB,EAC/B,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,KAAK,GACjB,EAEF,KAAC,KAAK,IACJ,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,EACvD,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EACpC,IAAI,EAAE,YAAY,EAClB,aAAa,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,YAEhF,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,aACtC,0BACE,KAAC,UAAU,CAAC,IAAI,cAAE,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,GAAmB,EACrF,KAAC,KAAK,IACJ,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC9C,WAAW,EAAE,CAAC,CAAC,oBAAoB,CAAC,8BAA8B,CAAC,GACnE,IACE,EACN,0BACE,KAAC,UAAU,CAAC,IAAI,cAAE,CAAC,CAAC,oBAAoB,CAAC,sBAAsB,CAAC,GAAmB,EACnF,KAAC,MAAM,IACL,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EACxB,OAAO,EAAE,QAAQ,CAAC,SAAS,EAC3B,OAAO,EAAE,iBAAiB,GAC1B,IACE,IACF,GACA,IACH,CACR,CAAC;YACJ,CAAC,GACO,CACX,GACU,CACd,CAAC;AACJ,CAAC"}

package/dist/default/index.d.ts

@@ -15,4 +15,6 @@ export { WorkspaceSettings } from "./WorkspaceSettings.js";
 export type { WorkspaceSettingsProps } from "./WorkspaceSettings.js";
 export { MembersManager } from "./MembersManager.js";
 export type { MembersManagerProps } from "./MembersManager.js";
+export { InviteAcceptPage } from "./InviteAcceptPage.js";
+export type { InviteAcceptPageProps } from "./InviteAcceptPage.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/default/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/default/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,YAAY,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/default/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,YAAY,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/default/index.js

@@ -13,4 +13,5 @@
  */
 export { WorkspaceSettings } from "./WorkspaceSettings.js";
 export { MembersManager } from "./MembersManager.js";
+export { InviteAcceptPage } from "./InviteAcceptPage.js";
 //# sourceMappingURL=index.js.map

package/dist/default/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/default/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/default/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/flows/inviteAcceptFlow.d.ts

@@ -0,0 +1,155 @@
+import type { Analytics } from "@stapel/core";
+import type { FlowMachine } from "@stapel/core";
+import type { WorkspacesApi } from "../api/workspacesApi.js";
+import type { InvitationPreview, Member } from "../api/types.js";
+import type { FlowError } from "./errors.js";
+/**
+ * The `/invite/{token}` journey (org-program §B4) as a flow machine:
+ *
+ * ```
+ * preview → (session && email match)      → acceptPrompt [accept/decline]
+ *         → (session && email mismatch)   → wrongAccount (logout CTA)
+ *         → (no session, email_registered)→ loginRequired (host's login slot)
+ *         → (no session, new user)        → newUser → claim →
+ *              grantIssued (grant_token handed OUT) → [host exchanges at auth]
+ *              → basicData (host's initial-setup slot) → acceptPrompt
+ * ```
+ *
+ * Non-`pending` invitations (expired / revoked / accepted / declined) park in
+ * the terminal `unavailable` step — the page renders the matching copy.
+ *
+ * ## The grant_token seam (deliberate pair boundary)
+ *
+ * `claim` mints a login grant that must be exchanged at AUTH's
+ * `POST /grant/exchange/` — an endpoint of the auth pair, and pairs do NOT
+ * depend on each other (no auth-react peer dependency here). The flow
+ * therefore parks in `grantIssued` and hands `grantToken` OUT via the
+ * `onLoginGrant` callback; the HOST connects the two pairs:
+ *
+ * ```tsx
+ * <InviteAcceptFlow token={token}
+ *   onLoginGrant={async (grant) => {
+ *     const r = await authApi.exchangeLoginGrant(grant); // auth-react
+ *     session.adopt(r);                                  // full session
+ *   }}>
+ * ```
+ *
+ * then calls `grantExchanged()` (the default `InviteAcceptPage` does this
+ * automatically when the host's `onLoginGrant` promise resolves), which moves
+ * the flow to `basicData` — the host's profiles-react `InitialSetupPrompt`
+ * slot — and `completeBasicData()` finally reaches `acceptPrompt`. The
+ * account created by the exchange IS the invited email's account (verified by
+ * construction), so no re-match happens on that path.
+ *
+ * ## Session/email detection
+ *
+ * The pair has no auth dependency, so the CALLER supplies the signed-in
+ * email (`sessionEmail`, e.g. auth-react's `useAuthSessionState().user?.email`
+ * — or any other session source; null/undefined = no session). Match against
+ * the preview's MASKED email is decided client-side by masking the known
+ * email with the same algorithm (see `model/emailMask.ts`); the backend's
+ * real email-match on accept/decline stays the enforcement point — a mask
+ * collision merely shows the prompt, the accept then surfaces the 403.
+ */
+export type InviteAcceptState = {
+    readonly step: "idle";
+} | {
+    readonly step: "loadingPreview";
+} | {
+    readonly step: "previewError";
+    readonly error: FlowError;
+}
+/** Terminal: the invitation is not pending (expired/revoked/accepted/declined). */
+ | {
+    readonly step: "unavailable";
+    readonly preview: InvitationPreview;
+    readonly status: string;
+}
+/** Signed in with a non-matching account — logout CTA (host slot). */
+ | {
+    readonly step: "wrongAccount";
+    readonly preview: InvitationPreview;
+}
+/** No session, account exists — the host's login slot; call
+ * `sessionEstablished(email)` once signed in. */
+ | {
+    readonly step: "loginRequired";
+    readonly preview: InvitationPreview;
+}
+/** No session, no account — deliberate CTA before minting the grant. */
+ | {
+    readonly step: "newUser";
+    readonly preview: InvitationPreview;
+} | {
+    readonly step: "claiming";
+    readonly preview: InvitationPreview;
+} | {
+    readonly step: "claimError";
+    readonly preview: InvitationPreview;
+    readonly error: FlowError;
+}
+/** The grant is out via `onLoginGrant` — waiting for the host to exchange
+ * it at auth and call `grantExchanged()`. */
+ | {
+    readonly step: "grantIssued";
+    readonly preview: InvitationPreview;
+    readonly grantToken: string;
+}
+/** Host's basic-data slot (profiles-react InitialSetupPrompt canon, §B5). */
+ | {
+    readonly step: "basicData";
+    readonly preview: InvitationPreview;
+} | {
+    readonly step: "acceptPrompt";
+    readonly preview: InvitationPreview;
+} | {
+    readonly step: "accepting";
+    readonly preview: InvitationPreview;
+} | {
+    readonly step: "declining";
+    readonly preview: InvitationPreview;
+} | {
+    readonly step: "acceptError";
+    readonly preview: InvitationPreview;
+    readonly error: FlowError;
+} | {
+    readonly step: "accepted";
+    readonly member: Member;
+    readonly preview: InvitationPreview;
+} | {
+    readonly step: "declined";
+    readonly preview: InvitationPreview;
+};
+export interface InviteAcceptFlow {
+    readonly machine: FlowMachine<InviteAcceptState>;
+    /** Fetch the preview and route per §B4. `sessionEmail` = the signed-in
+     * account's email, or null when there is no session. */
+    load(sessionEmail: string | null): Promise<void>;
+    /** From `newUser`/`claimError`: mint the login grant (`onLoginGrant` fires
+     * with the token; the flow parks in `grantIssued`). */
+    claim(): Promise<void>;
+    /** From `loginRequired`/`wrongAccount`: a session now exists (host's login
+     * slot finished, or the user switched accounts) — re-route on its email. */
+    sessionEstablished(email: string): void;
+    /** From `grantIssued`: the host exchanged the grant at auth — proceed to
+     * the basic-data step. */
+    grantExchanged(): void;
+    /** From `basicData`: the initial-setup slot finished — show the accept prompt. */
+    completeBasicData(): void;
+    accept(): Promise<void>;
+    decline(): Promise<void>;
+    reset(): void;
+}
+export interface InviteAcceptFlowDeps {
+    readonly api: WorkspacesApi;
+    /** The invite token from the `/invite/{token}` URL — a bearer secret. */
+    readonly token: string;
+    readonly analytics?: Analytics | null;
+    /** The grant_token hand-off seam (see the module doc). A credential:
+     * exchange it, never log it. */
+    readonly onLoginGrant?: (grantToken: string) => void;
+    readonly onAccepted?: (member: Member) => void;
+    readonly onDeclined?: () => void;
+}
+export declare function createInviteAcceptFlow(deps: InviteAcceptFlowDeps): InviteAcceptFlow;
+//# sourceMappingURL=inviteAcceptFlow.d.ts.map

package/dist/flows/inviteAcceptFlow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inviteAcceptFlow.d.ts","sourceRoot":"","sources":["../../src/flows/inviteAcceptFlow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAGjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE;AAC9D,mFAAmF;GACjF;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AACH,sEAAsE;GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE;AACxE;iDACiD;GAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE;AACzE,wEAAwE;GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GACjE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GAClE;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AACH;6CAC6C;GAC3C;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AACH,6EAA6E;GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GACnE;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACjD;4DACwD;IACxD,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD;2DACuD;IACvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB;gFAC4E;IAC5E,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;8BAC0B;IAC1B,cAAc,IAAI,IAAI,CAAC;IACvB,kFAAkF;IAClF,iBAAiB,IAAI,IAAI,CAAC;IAC1B,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACtC;oCACgC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IACrD,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;CAClC;AAkCD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,oBAAoB,GACzB,gBAAgB,CAqHlB"}

package/dist/flows/inviteAcceptFlow.js

@@ -0,0 +1,126 @@
+import { createFlowMachine } from "@stapel/core";
+import { emailMatchesMask } from "../model/emailMask.js";
+import { toFlowError } from "./errors.js";
+/**
+ * Flow id: stapel-workspaces annotates no `@flow_step` yet (its
+ * `docs/flows.json` is empty — the pair's flow registry is the zero-flow
+ * shim), so this id is pair-local until the backend documents the flow;
+ * switch to the generated registry id when it lands.
+ */
+const FLOW_ID = "workspaces.invite_accept";
+function routeSignedIn(preview, email) {
+    return emailMatchesMask(email, preview.email_masked)
+        ? { step: "acceptPrompt", preview }
+        : { step: "wrongAccount", preview };
+}
+function routePreview(preview, sessionEmail) {
+    if (preview.status !== "pending") {
+        return { step: "unavailable", preview, status: preview.status };
+    }
+    if (sessionEmail !== null && sessionEmail !== "") {
+        return routeSignedIn(preview, sessionEmail);
+    }
+    return preview.email_registered
+        ? { step: "loginRequired", preview }
+        : { step: "newUser", preview };
+}
+export function createInviteAcceptFlow(deps) {
+    const machine = createFlowMachine({
+        id: FLOW_ID,
+        initial: { step: "idle" },
+        analytics: deps.analytics ?? null,
+    });
+    async function load(sessionEmail) {
+        await machine.run({ step: "loadingPreview" }, () => deps.api.getInvitationPreview(deps.token), {
+            resolve: (preview) => routePreview(preview, sessionEmail),
+            reject: (error) => ({
+                step: "previewError",
+                error: toFlowError(error),
+            }),
+        });
+    }
+    async function claim() {
+        const s = machine.getState();
+        if (s.step !== "newUser" && s.step !== "claimError")
+            return;
+        const { preview } = s;
+        await machine.run({ step: "claiming", preview }, () => deps.api.claimInvitation(deps.token), {
+            resolve: (r) => {
+                deps.onLoginGrant?.(r.grant_token);
+                return { step: "grantIssued", preview, grantToken: r.grant_token };
+            },
+            reject: (error) => ({
+                step: "claimError",
+                preview,
+                error: toFlowError(error),
+            }),
+        });
+    }
+    function sessionEstablished(email) {
+        const s = machine.getState();
+        if (s.step !== "loginRequired" && s.step !== "wrongAccount")
+            return;
+        machine.to(routeSignedIn(s.preview, email));
+    }
+    function grantExchanged() {
+        const s = machine.getState();
+        if (s.step !== "grantIssued")
+            return;
+        machine.to({ step: "basicData", preview: s.preview });
+    }
+    function completeBasicData() {
+        const s = machine.getState();
+        if (s.step !== "basicData")
+            return;
+        machine.to({ step: "acceptPrompt", preview: s.preview });
+    }
+    async function accept() {
+        const s = machine.getState();
+        if (s.step !== "acceptPrompt" && s.step !== "acceptError")
+            return;
+        const { preview } = s;
+        await machine.run({ step: "accepting", preview }, () => deps.api.acceptInvitation({ token: deps.token }), {
+            resolve: (member) => {
+                deps.onAccepted?.(member);
+                return { step: "accepted", member, preview };
+            },
+            reject: (error) => ({
+                step: "acceptError",
+                preview,
+                error: toFlowError(error),
+            }),
+        });
+    }
+    async function decline() {
+        const s = machine.getState();
+        if (s.step !== "acceptPrompt" && s.step !== "acceptError")
+            return;
+        const { preview } = s;
+        await machine.run({ step: "declining", preview }, () => deps.api.declineInvitation(deps.token), {
+            resolve: () => {
+                deps.onDeclined?.();
+                return { step: "declined", preview };
+            },
+            reject: (error) => ({
+                step: "acceptError",
+                preview,
+                error: toFlowError(error),
+            }),
+        });
+    }
+    function reset() {
+        machine.to({ step: "idle" });
+    }
+    return {
+        machine,
+        load,
+        claim,
+        sessionEstablished,
+        grantExchanged,
+        completeBasicData,
+        accept,
+        decline,
+        reset,
+    };
+}
+//# sourceMappingURL=inviteAcceptFlow.js.map

package/dist/flows/inviteAcceptFlow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inviteAcceptFlow.js","sourceRoot":"","sources":["../../src/flows/inviteAcceptFlow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAIjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAmI1C;;;;;GAKG;AACH,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAE3C,SAAS,aAAa,CACpB,OAA0B,EAC1B,KAAa;IAEb,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC;QAClD,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE;QACnC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,YAAY,CACnB,OAA0B,EAC1B,YAA2B;IAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;QACjD,OAAO,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC,gBAAgB;QAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE;QACpC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAA0B;IAE1B,MAAM,OAAO,GAAG,iBAAiB,CAAoB;QACnD,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;KAClC,CAAC,CAAC;IAEH,KAAK,UAAU,IAAI,CAAC,YAA2B;QAC7C,MAAM,OAAO,CAAC,GAAG,CACf,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC1B,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAC/C;YACE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC;YACzD,MAAM,EAAE,CAAC,KAAK,EAAqB,EAAE,CAAC,CAAC;gBACrC,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;aAC1B,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO;QAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACtB,MAAM,OAAO,CAAC,GAAG,CACf,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAC7B,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAC1C;YACE,OAAO,EAAE,CAAC,CAAC,EAAqB,EAAE;gBAChC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBACnC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACrE,CAAC;YACD,MAAM,EAAE,CAAC,KAAK,EAAqB,EAAE,CAAC,CAAC;gBACrC,IAAI,EAAE,YAAY;gBAClB,OAAO;gBACP,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;aAC1B,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED,SAAS,kBAAkB,CAAC,KAAa;QACvC,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO;QACpE,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,SAAS,cAAc;QACrB,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO;QACrC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,SAAS,iBAAiB;QACxB,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO;QACnC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,UAAU,MAAM;QACnB,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACtB,MAAM,OAAO,CAAC,GAAG,CACf,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAC9B,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EACtD;YACE,OAAO,EAAE,CAAC,MAAM,EAAqB,EAAE;gBACrC,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC/C,CAAC;YACD,MAAM,EAAE,CAAC,KAAK,EAAqB,EAAE,CAAC,CAAC;gBACrC,IAAI,EAAE,aAAa;gBACnB,OAAO;gBACP,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;aAC1B,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACtB,MAAM,OAAO,CAAC,GAAG,CACf,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAC9B,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAC5C;YACE,OAAO,EAAE,GAAsB,EAAE;gBAC/B,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;gBACpB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YACvC,CAAC;YACD,MAAM,EAAE,CAAC,KAAK,EAAqB,EAAE,CAAC,CAAC;gBACrC,IAAI,EAAE,aAAa;gBACnB,OAAO;gBACP,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;aAC1B,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED,SAAS,KAAK;QACZ,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,OAAO;QACP,IAAI;QACJ,KAAK;QACL,kBAAkB;QAClB,cAAc;QACd,iBAAiB;QACjB,MAAM;QACN,OAAO;QACP,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/headless/Can.d.ts

@@ -0,0 +1,40 @@
+import type { ReactNode } from "react";
+/** Render-prop bag for {@link Can}'s function-children variant. */
+export interface CanBag {
+    /** The wildcard-aware verdict for `capability` in `workspaceId`. */
+    readonly allowed: boolean;
+    /** The underlying read is still in flight (verdict is `false` meanwhile —
+     * deny-by-default; render a skeleton off this if flicker matters). */
+    readonly isLoading: boolean;
+}
+/**
+ * Capability gate (org-program §A2) — the mandate model's UI affordance:
+ *
+ * ```tsx
+ * <Can capability="meetings.spotlight" workspaceId={wsId}>
+ *   <SpotlightButton />
+ * </Can>
+ * // or the render-prop variant, when "disabled" beats "hidden":
+ * <Can capability="members.invite" workspaceId={wsId}>
+ *   {({ allowed }) => <Button disabled={!allowed}>…</Button>}
+ * </Can>
+ * ```
+ *
+ * Reads the caller's `my_capabilities` from the workspace detail
+ * ({@link useCapabilities}) and matches with the backend's ported wildcard
+ * matcher (`*` / `prefix.*`). Deny-by-default: nothing renders (or
+ * `allowed: false`) while loading, on error, for a non-member, or against a
+ * pre-0.6 backend. UI convenience ONLY — the backend re-checks every
+ * capability on every operation; hiding a button is not access control.
+ */
+export declare function Can(props: {
+    /** Namespaced capability string, e.g. `"meetings.spotlight"`. */
+    capability: string;
+    workspaceId: string;
+    /** Static children render when allowed; function children always render,
+     * receiving the {@link CanBag}. */
+    children: ReactNode | ((bag: CanBag) => ReactNode);
+    /** Rendered when the verdict is a definite "no" (static children only). */
+    fallback?: ReactNode;
+}): ReactNode;
+//# sourceMappingURL=Can.d.ts.map

package/dist/headless/Can.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Can.d.ts","sourceRoot":"","sources":["../../src/headless/Can.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAGvC,mEAAmE;AACnE,MAAM,WAAW,MAAM;IACrB,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;0EACsE;IACtE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,GAAG,CAAC,KAAK,EAAE;IACzB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB;uCACmC;IACnC,QAAQ,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC;IACnD,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB,GAAG,SAAS,CAOZ"}

package/dist/headless/Can.js

@@ -0,0 +1,30 @@
+import { useCapabilities } from "../model/queries.js";
+/**
+ * Capability gate (org-program §A2) — the mandate model's UI affordance:
+ *
+ * ```tsx
+ * <Can capability="meetings.spotlight" workspaceId={wsId}>
+ *   <SpotlightButton />
+ * </Can>
+ * // or the render-prop variant, when "disabled" beats "hidden":
+ * <Can capability="members.invite" workspaceId={wsId}>
+ *   {({ allowed }) => <Button disabled={!allowed}>…</Button>}
+ * </Can>
+ * ```
+ *
+ * Reads the caller's `my_capabilities` from the workspace detail
+ * ({@link useCapabilities}) and matches with the backend's ported wildcard
+ * matcher (`*` / `prefix.*`). Deny-by-default: nothing renders (or
+ * `allowed: false`) while loading, on error, for a non-member, or against a
+ * pre-0.6 backend. UI convenience ONLY — the backend re-checks every
+ * capability on every operation; hiding a button is not access control.
+ */
+export function Can(props) {
+    const caps = useCapabilities(props.workspaceId);
+    const allowed = caps.can(props.capability);
+    if (typeof props.children === "function") {
+        return props.children({ allowed, isLoading: caps.isLoading });
+    }
+    return allowed ? props.children : (props.fallback ?? null);
+}
+//# sourceMappingURL=Can.js.map

package/dist/headless/Can.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Can.js","sourceRoot":"","sources":["../../src/headless/Can.tsx"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAWtD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,GAAG,CAAC,KASnB;IACC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC;AAC7D,CAAC"}

package/dist/headless/InviteAcceptFlow.d.ts

@@ -0,0 +1,44 @@
+import type { ReactNode } from "react";
+import type { InviteAcceptState } from "../flows/inviteAcceptFlow.js";
+import type { Member } from "../api/types.js";
+/** Render-prop bag for {@link InviteAcceptFlow}. */
+export interface InviteAcceptFlowBag {
+    readonly state: InviteAcceptState;
+    /** From `newUser`/`claimError`: mint the login grant. */
+    claim(): void;
+    /** From `loginRequired`/`wrongAccount`: a session now exists — re-route on
+     * its email. (Also fired automatically when the `sessionEmail` prop
+     * becomes non-null while parked in either step.) */
+    sessionEstablished(email: string): void;
+    /** From `grantIssued`: the host exchanged the grant at auth. */
+    grantExchanged(): void;
+    /** From `basicData`: the initial-setup slot finished. */
+    completeBasicData(): void;
+    accept(): void;
+    decline(): void;
+    /** Re-fetch the preview and re-route (e.g. after a logout on wrongAccount). */
+    reload(): void;
+}
+/**
+ * Headless `/invite/{token}` journey (org-program §B4) — the flow machine
+ * (`flows/inviteAcceptFlow.ts`, see ITS doc for the full state graph and the
+ * grant_token hand-off seam) wired to this pair's runtime. Renderless: every
+ * screen (accept modal, wrong-account, the login and initial-setup SLOTS) is
+ * the host's; the default `InviteAcceptPage` is the reference skin.
+ *
+ * The pair knows nothing about auth: pass the signed-in email (or null) as
+ * `sessionEmail`, and connect `onLoginGrant` to auth-react's
+ * `exchangeLoginGrant` yourself — then call `grantExchanged()`.
+ */
+export declare function InviteAcceptFlow(props: {
+    /** The invite token from the URL — a bearer secret, never log it. */
+    token: string;
+    /** The signed-in account's email, or null/undefined when no session. */
+    sessionEmail?: string | null;
+    children: (bag: InviteAcceptFlowBag) => ReactNode;
+    /** The grant_token hand-off (a credential — exchange, never log). */
+    onLoginGrant?: (grantToken: string) => void;
+    onAccepted?: (member: Member) => void;
+    onDeclined?: () => void;
+}): ReactNode;
+//# sourceMappingURL=InviteAcceptFlow.d.ts.map

package/dist/headless/InviteAcceptFlow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InviteAcceptFlow.d.ts","sourceRoot":"","sources":["../../src/headless/InviteAcceptFlow.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAGvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAG9C,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,yDAAyD;IACzD,KAAK,IAAI,IAAI,CAAC;IACd;;wDAEoD;IACpD,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,gEAAgE;IAChE,cAAc,IAAI,IAAI,CAAC;IACvB,yDAAyD;IACzD,iBAAiB,IAAI,IAAI,CAAC;IAC1B,MAAM,IAAI,IAAI,CAAC;IACf,OAAO,IAAI,IAAI,CAAC;IAChB,+EAA+E;IAC/E,MAAM,IAAI,IAAI,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,SAAS,CAAC;IAClD,qEAAqE;IACrE,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;CACzB,GAAG,SAAS,CAwDZ"}