@stigmer/react 0.0.36 → 0.0.40

package/agent-instance/usePersonalAgentInstance.js

@@ -0,0 +1,103 @@
+"use client";
+import { useCallback, useMemo, useRef, useState } from "react";
+import { useStigmer } from "../hooks";
+import { toError } from "../internal/toError";
+import { useAgentInstanceList } from "./useAgentInstanceList";
+import { buildPersonalInstanceInput } from "./buildPersonalInstanceInput";
+const PERSONAL_LABELS = {
+    "stigmer.ai/personal": "true",
+};
+/**
+ * Layer 2 orchestration hook that manages the caller's personal
+ * {@link AgentInstance} for a given organization, optionally scoped
+ * to a specific agent.
+ *
+ * Encapsulates the "personal agent instance" convention: unique slug
+ * per user, labels (`stigmer.ai/personal`, `stigmer.ai/for-agent`),
+ * and the get-or-create lifecycle. Composes {@link useAgentInstanceList}
+ * for declarative reading and the SDK client directly for mutations.
+ *
+ * Pass `null` as `org` to skip all operations (stable no-op).
+ * The `agentId` parameter is optional for read-only use (listing all
+ * personal instances) but required for {@link getOrCreate}.
+ *
+ * This is a Layer 2 **Environment Flow** hook. It provides the managed
+ * "personal agent instance" experience used by the Stigmer Console.
+ * Callers who pre-provision agent instances should use the Layer 1
+ * building-block hook {@link useCreateAgentInstance} directly.
+ *
+ * @example
+ * ```tsx
+ * // Read-only: check if a personal instance exists for an agent
+ * const { agentInstance, isLoading } = usePersonalAgentInstance(
+ *   "acme",
+ *   agent.metadata.id,
+ * );
+ *
+ * // Get-or-create: ensure a personal instance exists
+ * const { getOrCreate, isMutating } = usePersonalAgentInstance(
+ *   "acme",
+ *   agent.metadata.id,
+ * );
+ *
+ * const instance = await getOrCreate({
+ *   agentSlug: "my-github-bot",
+ *   personalEnvironmentRef: { org: "acme", slug: "env-personal-a1b2c3d4" },
+ * });
+ * ```
+ */
+export function usePersonalAgentInstance(org, agentId) {
+    const stigmer = useStigmer();
+    const { agentInstances, isLoading, error: listError, refetch } = useAgentInstanceList(org, PERSONAL_LABELS);
+    const agentInstance = useMemo(() => {
+        if (agentInstances.length === 0)
+            return null;
+        if (!agentId)
+            return agentInstances[0] ?? null;
+        return (agentInstances.find((ai) => ai.spec?.agentId === agentId) ?? null);
+    }, [agentInstances, agentId]);
+    const [isMutating, setIsMutating] = useState(false);
+    const [mutationError, setMutationError] = useState(null);
+    const agentInstanceRef = useRef(agentInstance);
+    agentInstanceRef.current = agentInstance;
+    const error = mutationError ?? listError;
+    const getOrCreate = useCallback(async (input) => {
+        if (agentInstanceRef.current)
+            return agentInstanceRef.current;
+        if (!org) {
+            throw new Error("usePersonalAgentInstance: cannot call getOrCreate when org is null.");
+        }
+        if (!agentId) {
+            throw new Error("usePersonalAgentInstance: agentId is required for getOrCreate. " +
+                "Pass the agent's ID as the second argument to the hook.");
+        }
+        setIsMutating(true);
+        setMutationError(null);
+        try {
+            const created = await stigmer.agentInstance.create(buildPersonalInstanceInput({
+                org,
+                agentId,
+                agentSlug: input.agentSlug,
+                environmentRef: input.personalEnvironmentRef,
+            }));
+            refetch();
+            return created;
+        }
+        catch (err) {
+            setMutationError(toError(err));
+            throw err;
+        }
+        finally {
+            setIsMutating(false);
+        }
+    }, [org, agentId, stigmer, refetch]);
+    return {
+        agentInstance,
+        isLoading,
+        error,
+        refetch,
+        getOrCreate,
+        isMutating,
+    };
+}
+//# sourceMappingURL=usePersonalAgentInstance.js.map

package/agent-instance/usePersonalAgentInstance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usePersonalAgentInstance.js","sourceRoot":"","sources":["../../src/agent-instance/usePersonalAgentInstance.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAG/D,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,MAAM,eAAe,GAA2B;IAC9C,qBAAqB,EAAE,MAAM;CAC9B,CAAC;AA0DF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAkB,EAClB,OAAgB;IAEhB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,GAC5D,oBAAoB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAE7C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;QACjC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC/C,OAAO,CACL,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,CAClE,CAAC;IACJ,CAAC,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IAE9B,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvE,MAAM,gBAAgB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/C,gBAAgB,CAAC,OAAO,GAAG,aAAa,CAAC;IAEzC,MAAM,KAAK,GAAG,aAAa,IAAI,SAAS,CAAC;IAEzC,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EACH,KAAuC,EACf,EAAE;QAC1B,IAAI,gBAAgB,CAAC,OAAO;YAAE,OAAO,gBAAgB,CAAC,OAAO,CAAC;QAE9D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,iEAAiE;gBAC/D,yDAAyD,CAC5D,CAAC;QACJ,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAChD,0BAA0B,CAAC;gBACzB,GAAG;gBACH,OAAO;gBACP,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,cAAc,EAAE,KAAK,CAAC,sBAAsB;aAC7C,CAAC,CACH,CAAC;YAEF,OAAO,EAAE,CAAC;YACV,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/B,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EACD,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CACjC,CAAC;IAEF,OAAO;QACL,aAAa;QACb,SAAS;QACT,KAAK;QACL,OAAO;QACP,WAAW;QACX,UAAU;KACX,CAAC;AACJ,CAAC"}

package/api-key/ApiKeyCreatedAlert.d.ts

@@ -0,0 +1,33 @@
+export interface ApiKeyCreatedAlertProps {
+    /** The raw API key value to display. Shown exactly once. */
+    readonly rawKey: string;
+    /** Human-readable name of the key for context. */
+    readonly keyName: string;
+    /** Fired when the user dismisses the alert. */
+    readonly onDismiss: () => void;
+    readonly className?: string;
+}
+/**
+ * One-time reveal component displayed after a new API key is created.
+ *
+ * Shows the raw key value in a monospace read-only field with a
+ * **Copy** button. The key is only available at creation time — the
+ * server never returns it again — so this component prominently warns
+ * the user to copy it immediately.
+ *
+ * This is a standalone alert component, not a modal — the parent
+ * decides how to present and position it.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <ApiKeyCreatedAlert
+ *   rawKey="stgm_live_abc123..."
+ *   keyName="ci-deploy-key"
+ *   onDismiss={() => setRevealedKey(null)}
+ * />
+ * ```
+ */
+export declare function ApiKeyCreatedAlert({ rawKey, keyName, onDismiss, className, }: ApiKeyCreatedAlertProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ApiKeyCreatedAlert.d.ts.map

package/api-key/ApiKeyCreatedAlert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyCreatedAlert.d.ts","sourceRoot":"","sources":["../../src/api-key/ApiKeyCreatedAlert.tsx"],"names":[],"mappings":"AASA,MAAM,WAAW,uBAAuB;IACtC,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,MAAM,EACN,OAAO,EACP,SAAS,EACT,SAAS,GACV,EAAE,uBAAuB,2CA+EzB"}

package/api-key/ApiKeyCreatedAlert.js

@@ -0,0 +1,61 @@
+"use client";
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+import { useCallback, useState } from "react";
+import { cn } from "@stigmer/theme";
+/**
+ * One-time reveal component displayed after a new API key is created.
+ *
+ * Shows the raw key value in a monospace read-only field with a
+ * **Copy** button. The key is only available at creation time — the
+ * server never returns it again — so this component prominently warns
+ * the user to copy it immediately.
+ *
+ * This is a standalone alert component, not a modal — the parent
+ * decides how to present and position it.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <ApiKeyCreatedAlert
+ *   rawKey="stgm_live_abc123..."
+ *   keyName="ci-deploy-key"
+ *   onDismiss={() => setRevealedKey(null)}
+ * />
+ * ```
+ */
+export function ApiKeyCreatedAlert({ rawKey, keyName, onDismiss, className, }) {
+    const [copied, setCopied] = useState(false);
+    const handleCopy = useCallback(async () => {
+        try {
+            await navigator.clipboard.writeText(rawKey);
+            setCopied(true);
+            setTimeout(() => setCopied(false), 2000);
+        }
+        catch {
+            // Fallback: select the text so the user can manually copy
+            const el = document.getElementById("stgm-api-key-reveal");
+            if (el) {
+                const selection = window.getSelection();
+                const range = document.createRange();
+                range.selectNodeContents(el);
+                selection?.removeAllRanges();
+                selection?.addRange(range);
+            }
+        }
+    }, [rawKey]);
+    return (_jsxs("div", { role: "alert", className: cn("rounded-lg border border-primary/30 bg-primary-subtle p-4", className), children: [_jsxs("div", { className: "mb-2 flex items-start justify-between gap-3", children: [_jsxs("div", { className: "min-w-0", children: [_jsxs("p", { className: "text-sm font-medium text-foreground", children: ["API key created: ", keyName] }), _jsx("p", { className: "mt-0.5 text-xs text-muted-foreground", children: "Copy this key now. It will not be shown again." })] }), _jsx("button", { type: "button", onClick: onDismiss, "aria-label": "Dismiss", className: cn("shrink-0 rounded p-1", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "transition-colors"), children: _jsx(CloseIcon, {}) })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx("code", { id: "stgm-api-key-reveal", className: cn("min-w-0 flex-1 select-all truncate rounded-md", "border border-input bg-background px-2.5 py-1.5", "font-mono text-xs text-foreground"), children: rawKey }), _jsxs("button", { type: "button", onClick: handleCopy, className: cn("inline-flex shrink-0 items-center gap-1.5 rounded-md px-3 py-1.5 text-xs font-medium", "bg-primary text-primary-foreground hover:bg-primary/90", "transition-colors"), children: [copied ? _jsx(CheckIcon, {}) : _jsx(CopyIcon, {}), copied ? "Copied" : "Copy"] })] })] }));
+}
+// ---------------------------------------------------------------------------
+// Icons
+// ---------------------------------------------------------------------------
+function CopyIcon() {
+    return (_jsxs("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("rect", { x: "5", y: "5", width: "9", height: "9", rx: "1.5" }), _jsx("path", { d: "M5 11H3.5A1.5 1.5 0 0 1 2 9.5V3.5A1.5 1.5 0 0 1 3.5 2h6A1.5 1.5 0 0 1 11 3.5V5" })] }));
+}
+function CheckIcon() {
+    return (_jsx("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: _jsx("path", { d: "M3 8.5l3.5 3.5L13 5" }) }));
+}
+function CloseIcon() {
+    return (_jsx("svg", { width: "14", height: "14", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", "aria-hidden": "true", children: _jsx("path", { d: "M4 4l8 8M12 4l-8 8" }) }));
+}
+//# sourceMappingURL=ApiKeyCreatedAlert.js.map

package/api-key/ApiKeyCreatedAlert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyCreatedAlert.js","sourceRoot":"","sources":["../../src/api-key/ApiKeyCreatedAlert.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAgBpC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,MAAM,EACN,OAAO,EACP,SAAS,EACT,SAAS,GACe;IACxB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE5C,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC5C,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC;YAC1D,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACrC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAC7B,SAAS,EAAE,eAAe,EAAE,CAAC;gBAC7B,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,OAAO,CACL,eACE,IAAI,EAAC,OAAO,EACZ,SAAS,EAAE,EAAE,CACX,2DAA2D,EAC3D,SAAS,CACV,aAED,eAAK,SAAS,EAAC,6CAA6C,aAC1D,eAAK,SAAS,EAAC,SAAS,aACtB,aAAG,SAAS,EAAC,qCAAqC,kCAC9B,OAAO,IACvB,EACJ,YAAG,SAAS,EAAC,sCAAsC,+DAE/C,IACA,EACN,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,SAAS,gBACP,SAAS,EACpB,SAAS,EAAE,EAAE,CACX,sBAAsB,EACtB,gEAAgE,EAChE,mBAAmB,CACpB,YAED,KAAC,SAAS,KAAG,GACN,IACL,EAEN,eAAK,SAAS,EAAC,yBAAyB,aACtC,eACE,EAAE,EAAC,qBAAqB,EACxB,SAAS,EAAE,EAAE,CACX,+CAA+C,EAC/C,iDAAiD,EACjD,mCAAmC,CACpC,YAEA,MAAM,GACF,EAEP,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,EAAE,CACX,sFAAsF,EACtF,wDAAwD,EACxD,mBAAmB,CACpB,aAEA,MAAM,CAAC,CAAC,CAAC,KAAC,SAAS,KAAG,CAAC,CAAC,CAAC,KAAC,QAAQ,KAAG,EACrC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IACpB,IACL,IACF,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,SAAS,QAAQ;IACf,OAAO,CACL,eACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,KAAK,EACjB,aAAa,EAAC,OAAO,EACrB,cAAc,EAAC,OAAO,iBACV,MAAM,aAElB,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,KAAK,GAAG,EAClD,eAAM,CAAC,EAAC,gFAAgF,GAAG,IACvF,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,GAAG,EACf,aAAa,EAAC,OAAO,EACrB,cAAc,EAAC,OAAO,iBACV,MAAM,YAElB,eAAM,CAAC,EAAC,qBAAqB,GAAG,GAC5B,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,KAAK,EACjB,aAAa,EAAC,OAAO,iBACT,MAAM,YAElB,eAAM,CAAC,EAAC,oBAAoB,GAAG,GAC3B,CACP,CAAC;AACJ,CAAC"}

package/api-key/ApiKeyListPanel.d.ts

@@ -0,0 +1,30 @@
+export interface ApiKeyListPanelProps {
+    /** Re-expose refetch so parents can trigger a list refresh. */
+    readonly onRefetchRef?: (refetch: () => void) => void;
+    readonly className?: string;
+}
+/**
+ * Displays a list of {@link ApiKey} resources for the authenticated
+ * identity with inline delete confirmation.
+ *
+ * Each key is rendered as a row showing name, fingerprint, creation
+ * date, expiry, and last-used time. A delete button triggers an
+ * inline confirmation — the row transforms to show confirm/cancel
+ * actions.
+ *
+ * API keys are identity-scoped: the server returns all keys belonging
+ * to the authenticated user, regardless of organization.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <ApiKeyListPanel />
+ *
+ * <ApiKeyListPanel
+ *   onRefetchRef={(refetch) => { listRefetchRef.current = refetch; }}
+ * />
+ * ```
+ */
+export declare function ApiKeyListPanel({ onRefetchRef, className, }: ApiKeyListPanelProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ApiKeyListPanel.d.ts.map

package/api-key/ApiKeyListPanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyListPanel.d.ts","sourceRoot":"","sources":["../../src/api-key/ApiKeyListPanel.tsx"],"names":[],"mappings":"AAcA,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAAC,EAC9B,YAAY,EACZ,SAAS,GACV,EAAE,oBAAoB,2CAsEtB"}

package/api-key/ApiKeyListPanel.js

@@ -0,0 +1,126 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from "react";
+import { cn } from "@stigmer/theme";
+import { getUserMessage } from "@stigmer/sdk";
+import { timestampDate } from "@bufbuild/protobuf/wkt";
+import { useApiKeyList } from "./useApiKeyList";
+import { useDeleteApiKey } from "./useDeleteApiKey";
+/**
+ * Displays a list of {@link ApiKey} resources for the authenticated
+ * identity with inline delete confirmation.
+ *
+ * Each key is rendered as a row showing name, fingerprint, creation
+ * date, expiry, and last-used time. A delete button triggers an
+ * inline confirmation — the row transforms to show confirm/cancel
+ * actions.
+ *
+ * API keys are identity-scoped: the server returns all keys belonging
+ * to the authenticated user, regardless of organization.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <ApiKeyListPanel />
+ *
+ * <ApiKeyListPanel
+ *   onRefetchRef={(refetch) => { listRefetchRef.current = refetch; }}
+ * />
+ * ```
+ */
+export function ApiKeyListPanel({ onRefetchRef, className, }) {
+    const { apiKeys, isLoading, error, refetch } = useApiKeyList();
+    const [confirmingId, setConfirmingId] = useState(null);
+    if (onRefetchRef) {
+        onRefetchRef(refetch);
+    }
+    if (isLoading) {
+        return (_jsx("div", { className: cn("space-y-2", className), "aria-busy": "true", "aria-label": "Loading API keys", children: Array.from({ length: 2 }, (_, i) => (_jsx("div", { className: "bg-muted/40 h-14 animate-pulse rounded-lg" }, i))) }));
+    }
+    if (error) {
+        return (_jsx("p", { className: cn("text-destructive text-xs", className), role: "alert", children: getUserMessage(error) }));
+    }
+    if (apiKeys.length === 0) {
+        return (_jsx("p", { className: cn("text-muted-foreground py-4 text-center text-xs", className), children: "No API keys yet." }));
+    }
+    return (_jsx("div", { className: cn("space-y-2", className), role: "list", "aria-label": "API keys", children: apiKeys.map((key) => {
+            const id = key.metadata?.id ?? "";
+            return (_jsx(ApiKeyRow, { apiKey: key, isConfirming: confirmingId === id, onConfirmDelete: () => setConfirmingId(id), onCancelDelete: () => setConfirmingId(null), onDeleted: () => {
+                    setConfirmingId(null);
+                    refetch();
+                } }, id));
+        }) }));
+}
+// ---------------------------------------------------------------------------
+// ApiKeyRow (internal)
+// ---------------------------------------------------------------------------
+function ApiKeyRow({ apiKey, isConfirming, onConfirmDelete, onCancelDelete, onDeleted, }) {
+    const { deleteKey, isDeleting, error } = useDeleteApiKey();
+    const id = apiKey.metadata?.id ?? "";
+    const name = apiKey.metadata?.name || apiKey.metadata?.slug || "Unnamed key";
+    const fingerprint = apiKey.spec?.fingerprint;
+    const neverExpires = apiKey.spec?.neverExpires;
+    const expiresAt = apiKey.spec?.expiresAt;
+    const lastUsedAt = apiKey.status?.lastUsedAt;
+    const createdAt = apiKey.status?.audit?.specAudit?.createdAt;
+    const handleDelete = useCallback(async () => {
+        try {
+            await deleteKey(id);
+            onDeleted();
+        }
+        catch {
+            // error state is surfaced via the hook
+        }
+    }, [id, deleteKey, onDeleted]);
+    if (isConfirming) {
+        return (_jsxs("div", { role: "listitem", className: "flex items-center justify-between rounded-lg border border-destructive/30 bg-destructive/5 px-3 py-2.5", children: [_jsxs("div", { className: "min-w-0 flex-1", children: [_jsxs("p", { className: "text-xs text-foreground", children: ["Delete ", _jsx("span", { className: "font-medium", children: name }), "?", fingerprint && (_jsxs("span", { className: "text-muted-foreground", children: [" ", "(\u2026", fingerprint, ")"] }))] }), error && (_jsx("p", { className: "mt-0.5 text-[0.65rem] text-destructive", children: getUserMessage(error) }))] }), _jsxs("div", { className: "flex shrink-0 items-center gap-1.5", children: [_jsxs("button", { type: "button", onClick: handleDelete, disabled: isDeleting, className: cn("inline-flex items-center gap-1 rounded-md px-2.5 py-1 text-xs font-medium", "bg-destructive text-destructive-foreground hover:bg-destructive/90", "disabled:pointer-events-none disabled:opacity-50"), children: [isDeleting && _jsx(SpinnerIcon, {}), "Delete"] }), _jsx("button", { type: "button", onClick: onCancelDelete, disabled: isDeleting, className: cn("rounded-md px-2.5 py-1 text-xs", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "disabled:pointer-events-none disabled:opacity-50"), children: "Cancel" })] })] }));
+    }
+    return (_jsxs("div", { role: "listitem", className: "flex items-center gap-3 rounded-lg border border-border/60 px-3 py-2.5 hover:border-border transition-colors", children: [_jsx(KeyIcon, {}), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "block truncate text-sm font-medium text-foreground", children: name }), fingerprint && (_jsxs("span", { className: "block text-xs text-muted-foreground font-mono", children: ["\u2026", fingerprint] }))] }), _jsxs("div", { className: "hidden sm:flex shrink-0 items-center gap-4 text-xs text-muted-foreground", children: [createdAt && (_jsx("span", { title: `Created ${timestampDate(createdAt).toISOString()}`, children: formatShortDate(timestampDate(createdAt)) })), _jsx("span", { children: neverExpires
+                            ? "No expiry"
+                            : expiresAt
+                                ? `Expires ${formatShortDate(timestampDate(expiresAt))}`
+                                : "No expiry" }), _jsx("span", { children: lastUsedAt ? formatRelativeTime(timestampDate(lastUsedAt)) : "Never used" })] }), _jsx("button", { type: "button", onClick: onConfirmDelete, "aria-label": `Delete ${name}`, className: cn("shrink-0 rounded p-1", "text-muted-foreground hover:text-destructive hover:bg-destructive/10", "transition-colors"), children: _jsx(TrashIcon, {}) })] }));
+}
+// ---------------------------------------------------------------------------
+// Formatting helpers
+// ---------------------------------------------------------------------------
+function formatShortDate(date) {
+    return date.toLocaleDateString(undefined, {
+        month: "short",
+        day: "numeric",
+        year: "numeric",
+    });
+}
+function formatRelativeTime(date) {
+    const now = Date.now();
+    const diffMs = now - date.getTime();
+    if (diffMs < 0)
+        return "Just now";
+    const seconds = Math.floor(diffMs / 1000);
+    if (seconds < 60)
+        return "Just now";
+    const minutes = Math.floor(seconds / 60);
+    if (minutes < 60)
+        return `${minutes}m ago`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 24)
+        return `${hours}h ago`;
+    const days = Math.floor(hours / 24);
+    if (days < 30)
+        return `${days}d ago`;
+    return formatShortDate(date);
+}
+// ---------------------------------------------------------------------------
+// Icons
+// ---------------------------------------------------------------------------
+function KeyIcon() {
+    return (_jsxs("svg", { width: "14", height: "14", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", className: "shrink-0 text-muted-foreground", children: [_jsx("circle", { cx: "5.5", cy: "10.5", r: "3" }), _jsx("path", { d: "M8 8l5.5-5.5M11 5l2-2M10.5 2.5l2 2" })] }));
+}
+function TrashIcon() {
+    return (_jsxs("svg", { width: "14", height: "14", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("path", { d: "M2.5 4h11M5.5 4V2.5a1 1 0 0 1 1-1h3a1 1 0 0 1 1 1V4" }), _jsx("path", { d: "M12.5 4v9a1 1 0 0 1-1 1h-7a1 1 0 0 1-1-1V4" }), _jsx("line", { x1: "6.5", y1: "7", x2: "6.5", y2: "11" }), _jsx("line", { x1: "9.5", y1: "7", x2: "9.5", y2: "11" })] }));
+}
+function SpinnerIcon() {
+    return (_jsx("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", className: "animate-spin", "aria-hidden": "true", children: _jsx("path", { d: "M8 2a6 6 0 1 0 6 6" }) }));
+}
+//# sourceMappingURL=ApiKeyListPanel.js.map

package/api-key/ApiKeyListPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyListPanel.js","sourceRoot":"","sources":["../../src/api-key/ApiKeyListPanel.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAYpD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,YAAY,EACZ,SAAS,GACY;IACrB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAC/D,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAEtE,IAAI,YAAY,EAAE,CAAC;QACjB,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CACL,cACE,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,eAC3B,MAAM,gBACL,kBAAkB,YAE5B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CACnC,cAEE,SAAS,EAAC,2CAA2C,IADhD,CAAC,CAEN,CACH,CAAC,GACE,CACP,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CACL,YAAG,SAAS,EAAE,EAAE,CAAC,0BAA0B,EAAE,SAAS,CAAC,EAAE,IAAI,EAAC,OAAO,YAClE,cAAc,CAAC,KAAK,CAAC,GACpB,CACL,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CACL,YACE,SAAS,EAAE,EAAE,CACX,gDAAgD,EAChD,SAAS,CACV,iCAGC,CACL,CAAC;IACJ,CAAC;IAED,OAAO,CACL,cACE,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EACrC,IAAI,EAAC,MAAM,gBACA,UAAU,YAEpB,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACnB,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;YAClC,OAAO,CACL,KAAC,SAAS,IAER,MAAM,EAAE,GAAG,EACX,YAAY,EAAE,YAAY,KAAK,EAAE,EACjC,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,EAC1C,cAAc,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAC3C,SAAS,EAAE,GAAG,EAAE;oBACd,eAAe,CAAC,IAAI,CAAC,CAAC;oBACtB,OAAO,EAAE,CAAC;gBACZ,CAAC,IARI,EAAE,CASP,CACH,CAAC;QACJ,CAAC,CAAC,GACE,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,SAAS,SAAS,CAAC,EACjB,MAAM,EACN,YAAY,EACZ,eAAe,EACf,cAAc,EACd,SAAS,GAOV;IACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,CAAC;IAE3D,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,aAAa,CAAC;IAC7E,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;IAE7D,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC1C,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;YACpB,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAE/B,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CACL,eACE,IAAI,EAAC,UAAU,EACf,SAAS,EAAC,wGAAwG,aAElH,eAAK,SAAS,EAAC,gBAAgB,aAC7B,aAAG,SAAS,EAAC,yBAAyB,wBAC7B,eAAM,SAAS,EAAC,aAAa,YAAE,IAAI,GAAQ,OACjD,WAAW,IAAI,CACd,gBAAM,SAAS,EAAC,uBAAuB,aACpC,GAAG,aACD,WAAW,SACT,CACR,IACC,EACH,KAAK,IAAI,CACR,YAAG,SAAS,EAAC,wCAAwC,YAClD,cAAc,CAAC,KAAK,CAAC,GACpB,CACL,IACG,EAEN,eAAK,SAAS,EAAC,oCAAoC,aACjD,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,2EAA2E,EAC3E,oEAAoE,EACpE,kDAAkD,CACnD,aAEA,UAAU,IAAI,KAAC,WAAW,KAAG,cAEvB,EACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,gCAAgC,EAChC,gEAAgE,EAChE,kDAAkD,CACnD,uBAGM,IACL,IACF,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eACE,IAAI,EAAC,UAAU,EACf,SAAS,EAAC,8GAA8G,aAGxH,KAAC,OAAO,KAAG,EAGX,eAAK,SAAS,EAAC,gBAAgB,aAC7B,eAAM,SAAS,EAAC,oDAAoD,YACjE,IAAI,GACA,EACN,WAAW,IAAI,CACd,gBAAM,SAAS,EAAC,+CAA+C,uBAC3D,WAAW,IACR,CACR,IACG,EAGN,eAAK,SAAS,EAAC,0EAA0E,aACtF,SAAS,IAAI,CACZ,eAAM,KAAK,EAAE,WAAW,aAAa,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,YAC7D,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,GACrC,CACR,EACD,yBACG,YAAY;4BACX,CAAC,CAAC,WAAW;4BACb,CAAC,CAAC,SAAS;gCACT,CAAC,CAAC,WAAW,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE;gCACxD,CAAC,CAAC,WAAW,GACZ,EACP,yBACG,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GACrE,IACH,EAGN,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,eAAe,gBACZ,UAAU,IAAI,EAAE,EAC5B,SAAS,EAAE,EAAE,CACX,sBAAsB,EACtB,sEAAsE,EACtE,mBAAmB,CACpB,YAED,KAAC,SAAS,KAAG,GACN,IACL,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,eAAe,CAAC,IAAU;IACjC,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE;QACxC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAU;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAEpC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAElC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,UAAU,CAAC;IAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,OAAO,CAAC;IAE3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,KAAK,OAAO,CAAC;IAEvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,OAAO,CAAC;IAErC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,SAAS,OAAO;IACd,OAAO,CACL,eACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,KAAK,EACjB,aAAa,EAAC,OAAO,EACrB,cAAc,EAAC,OAAO,iBACV,MAAM,EAClB,SAAS,EAAC,gCAAgC,aAE1C,iBAAQ,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,MAAM,EAAC,CAAC,EAAC,GAAG,GAAG,EACnC,eAAM,CAAC,EAAC,oCAAoC,GAAG,IAC3C,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CACL,eACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,KAAK,EACjB,aAAa,EAAC,OAAO,EACrB,cAAc,EAAC,OAAO,iBACV,MAAM,aAElB,eAAM,CAAC,EAAC,qDAAqD,GAAG,EAChE,eAAM,CAAC,EAAC,4CAA4C,GAAG,EACvD,eAAM,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,IAAI,GAAG,EACzC,eAAM,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,IAAI,GAAG,IACrC,CACP,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,GAAG,EACf,aAAa,EAAC,OAAO,EACrB,SAAS,EAAC,cAAc,iBACZ,MAAM,YAElB,eAAM,CAAC,EAAC,oBAAoB,GAAG,GAC3B,CACP,CAAC;AACJ,CAAC"}

package/api-key/CreateApiKeyForm.d.ts

@@ -0,0 +1,35 @@
+import type { ApiKey } from "@stigmer/protos/ai/stigmer/iam/apikey/v1/api_pb";
+export interface CreateApiKeyFormProps {
+    /** Organization slug used as the `org` field when creating the key. */
+    readonly org: string;
+    /**
+     * Fired with the newly created API key after successful creation.
+     * The `spec.keyHash` field of the returned key contains the raw
+     * key value — available only at this moment.
+     */
+    readonly onCreated?: (apiKey: ApiKey) => void;
+    /** Fired when the user cancels creation. */
+    readonly onCancel?: () => void;
+    readonly className?: string;
+}
+/**
+ * Compact form for creating a new API key.
+ *
+ * Collects a **name** (required) and an **expiry** choice (30 / 60 /
+ * 90 days or never), then creates the key via {@link useCreateApiKey}.
+ * On success it fires `onCreated` with the full {@link ApiKey}
+ * response, which includes the raw key in `spec.keyHash`.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <CreateApiKeyForm
+ *   org="acme"
+ *   onCreated={(key) => setRevealedKey(key)}
+ *   onCancel={() => setShowForm(false)}
+ * />
+ * ```
+ */
+export declare function CreateApiKeyForm({ org, onCreated, onCancel, className, }: CreateApiKeyFormProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=CreateApiKeyForm.d.ts.map

package/api-key/CreateApiKeyForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateApiKeyForm.d.ts","sourceRoot":"","sources":["../../src/api-key/CreateApiKeyForm.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iDAAiD,CAAC;AAO9E,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAID;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,GAAG,EACH,SAAS,EACT,QAAQ,EACR,SAAS,GACV,EAAE,qBAAqB,2CAqHvB"}

package/api-key/CreateApiKeyForm.js

@@ -0,0 +1,81 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from "react";
+import { cn } from "@stigmer/theme";
+import { getUserMessage } from "@stigmer/sdk";
+import { useCreateApiKey } from "./useCreateApiKey";
+/**
+ * Compact form for creating a new API key.
+ *
+ * Collects a **name** (required) and an **expiry** choice (30 / 60 /
+ * 90 days or never), then creates the key via {@link useCreateApiKey}.
+ * On success it fires `onCreated` with the full {@link ApiKey}
+ * response, which includes the raw key in `spec.keyHash`.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <CreateApiKeyForm
+ *   org="acme"
+ *   onCreated={(key) => setRevealedKey(key)}
+ *   onCancel={() => setShowForm(false)}
+ * />
+ * ```
+ */
+export function CreateApiKeyForm({ org, onCreated, onCancel, className, }) {
+    const { create, isCreating, error, clearError } = useCreateApiKey();
+    const [name, setName] = useState("");
+    const [expiry, setExpiry] = useState("never");
+    const trimmedName = name.trim();
+    const canSubmit = trimmedName !== "" && !isCreating;
+    const handleSubmit = useCallback(async (e) => {
+        e.preventDefault();
+        if (!canSubmit)
+            return;
+        clearError();
+        try {
+            const apiKey = await create({
+                name: trimmedName,
+                org,
+                ...(expiry === "never"
+                    ? { neverExpires: true }
+                    : { expiresAt: daysFromNow(Number(expiry)) }),
+            });
+            onCreated?.(apiKey);
+        }
+        catch {
+            // error state is managed by useCreateApiKey
+        }
+    }, [canSubmit, trimmedName, org, expiry, create, clearError, onCreated]);
+    return (_jsxs("form", { onSubmit: handleSubmit, className: cn("space-y-3", className), children: [_jsxs("div", { className: "space-y-3", children: [_jsxs("div", { className: "space-y-1", children: [_jsx("label", { htmlFor: "stgm-new-apikey-name", className: "text-xs font-medium text-foreground", children: "Name" }), _jsx("input", { id: "stgm-new-apikey-name", type: "text", value: name, onChange: (e) => setName(e.target.value), placeholder: "e.g. ci-deploy-key", disabled: isCreating, autoFocus: true, required: true, className: cn("w-full rounded-md border border-input bg-background px-2.5 py-1.5 text-xs text-foreground", "placeholder:text-muted-foreground", "focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring", "disabled:pointer-events-none disabled:opacity-50") })] }), _jsxs("fieldset", { className: "space-y-1.5", children: [_jsx("legend", { className: "text-xs font-medium text-foreground", children: "Expiration" }), _jsx("div", { className: "flex flex-wrap gap-2", children: EXPIRY_OPTIONS.map(({ value, label }) => (_jsx(ExpiryRadio, { value: value, label: label, checked: expiry === value, disabled: isCreating, onChange: setExpiry }, value))) })] })] }), error && (_jsx("p", { className: "text-destructive text-[0.65rem]", role: "alert", children: getUserMessage(error) })), _jsxs("div", { className: "flex items-center gap-2", children: [_jsxs("button", { type: "submit", disabled: !canSubmit, className: cn("inline-flex items-center gap-1.5 rounded-md px-3 py-1.5 text-xs font-medium", "bg-primary text-primary-foreground hover:bg-primary/90", "disabled:pointer-events-none disabled:opacity-40"), children: [isCreating && _jsx(SpinnerIcon, {}), "Create API key"] }), onCancel && (_jsx("button", { type: "button", onClick: onCancel, disabled: isCreating, className: cn("rounded-md px-3 py-1.5 text-xs", "text-muted-foreground hover:text-foreground hover:bg-accent/50", "disabled:pointer-events-none disabled:opacity-50"), children: "Cancel" }))] })] }));
+}
+// ---------------------------------------------------------------------------
+// Expiry helpers
+// ---------------------------------------------------------------------------
+const EXPIRY_OPTIONS = [
+    { value: "30", label: "30 days" },
+    { value: "60", label: "60 days" },
+    { value: "90", label: "90 days" },
+    { value: "never", label: "Never" },
+];
+function daysFromNow(days) {
+    const date = new Date();
+    date.setDate(date.getDate() + days);
+    return date;
+}
+// ---------------------------------------------------------------------------
+// ExpiryRadio (internal)
+// ---------------------------------------------------------------------------
+function ExpiryRadio({ value, label, checked, disabled, onChange, }) {
+    return (_jsxs("label", { className: cn("inline-flex cursor-pointer items-center rounded-md border px-2.5 py-1 text-xs transition-colors", checked
+            ? "border-primary bg-primary-subtle text-primary font-medium"
+            : "border-input bg-background text-muted-foreground hover:border-border hover:text-foreground", disabled && "pointer-events-none opacity-50"), children: [_jsx("input", { type: "radio", name: "stgm-apikey-expiry", value: value, checked: checked, disabled: disabled, onChange: () => onChange(value), className: "sr-only" }), label] }));
+}
+// ---------------------------------------------------------------------------
+// Icons
+// ---------------------------------------------------------------------------
+function SpinnerIcon() {
+    return (_jsx("svg", { width: "12", height: "12", viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", className: "animate-spin", "aria-hidden": "true", children: _jsx("path", { d: "M8 2a6 6 0 1 0 6 6" }) }));
+}
+//# sourceMappingURL=CreateApiKeyForm.js.map

package/api-key/CreateApiKeyForm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateApiKeyForm.js","sourceRoot":"","sources":["../../src/api-key/CreateApiKeyForm.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAsBpD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,GAAG,EACH,SAAS,EACT,QAAQ,EACR,SAAS,GACa;IACtB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;IAEpE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAe,OAAO,CAAC,CAAC;IAE5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,WAAW,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC;IAEpD,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,CAAY,EAAE,EAAE;QACrB,CAAC,CAAC,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,UAAU,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;gBAC1B,IAAI,EAAE,WAAW;gBACjB,GAAG;gBACH,GAAG,CAAC,MAAM,KAAK,OAAO;oBACpB,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE;oBACxB,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;YACH,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC,EACD,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CACrE,CAAC;IAEF,OAAO,CACL,gBAAM,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,aACjE,eAAK,SAAS,EAAC,WAAW,aAExB,eAAK,SAAS,EAAC,WAAW,aACxB,gBACE,OAAO,EAAC,sBAAsB,EAC9B,SAAS,EAAC,qCAAqC,qBAGzC,EACR,gBACE,EAAE,EAAC,sBAAsB,EACzB,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACxC,WAAW,EAAC,oBAAoB,EAChC,QAAQ,EAAE,UAAU,EACpB,SAAS,QACT,QAAQ,QACR,SAAS,EAAE,EAAE,CACX,2FAA2F,EAC3F,mCAAmC,EACnC,yEAAyE,EACzE,kDAAkD,CACnD,GACD,IACE,EAGN,oBAAU,SAAS,EAAC,aAAa,aAC/B,iBAAQ,SAAS,EAAC,qCAAqC,2BAE9C,EACT,cAAK,SAAS,EAAC,sBAAsB,YAClC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CACxC,KAAC,WAAW,IAEV,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,KAAK,KAAK,EACzB,QAAQ,EAAE,UAAU,EACpB,QAAQ,EAAE,SAAS,IALd,KAAK,CAMV,CACH,CAAC,GACE,IACG,IACP,EAEL,KAAK,IAAI,CACR,YAAG,SAAS,EAAC,iCAAiC,EAAC,IAAI,EAAC,OAAO,YACxD,cAAc,CAAC,KAAK,CAAC,GACpB,CACL,EAED,eAAK,SAAS,EAAC,yBAAyB,aACtC,kBACE,IAAI,EAAC,QAAQ,EACb,QAAQ,EAAE,CAAC,SAAS,EACpB,SAAS,EAAE,EAAE,CACX,6EAA6E,EAC7E,wDAAwD,EACxD,kDAAkD,CACnD,aAEA,UAAU,IAAI,KAAC,WAAW,KAAG,sBAEvB,EAER,QAAQ,IAAI,CACX,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,QAAQ,EACjB,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAE,EAAE,CACX,gCAAgC,EAChC,gEAAgE,EAChE,kDAAkD,CACnD,uBAGM,CACV,IACG,IACD,CACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,cAAc,GAA6C;IAC/D,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;IACjC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;IACjC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;IACjC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;CACnC,CAAC;AAEF,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,SAAS,WAAW,CAAC,EACnB,KAAK,EACL,KAAK,EACL,OAAO,EACP,QAAQ,EACR,QAAQ,GAOT;IACC,OAAO,CACL,iBACE,SAAS,EAAE,EAAE,CACX,iGAAiG,EACjG,OAAO;YACL,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,4FAA4F,EAChG,QAAQ,IAAI,gCAAgC,CAC7C,aAED,gBACE,IAAI,EAAC,OAAO,EACZ,IAAI,EAAC,oBAAoB,EACzB,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC/B,SAAS,EAAC,SAAS,GACnB,EACD,KAAK,IACA,CACT,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,SAAS,WAAW;IAClB,OAAO,CACL,cACE,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,EACnB,IAAI,EAAC,MAAM,EACX,MAAM,EAAC,cAAc,EACrB,WAAW,EAAC,GAAG,EACf,aAAa,EAAC,OAAO,EACrB,SAAS,EAAC,cAAc,iBACZ,MAAM,YAElB,eAAM,CAAC,EAAC,oBAAoB,GAAG,GAC3B,CACP,CAAC;AACJ,CAAC"}

package/api-key/index.d.ts

@@ -0,0 +1,13 @@
+export { useApiKeyList } from "./useApiKeyList";
+export type { UseApiKeyListReturn } from "./useApiKeyList";
+export { useCreateApiKey } from "./useCreateApiKey";
+export type { UseCreateApiKeyReturn } from "./useCreateApiKey";
+export { useDeleteApiKey } from "./useDeleteApiKey";
+export type { UseDeleteApiKeyReturn } from "./useDeleteApiKey";
+export { ApiKeyListPanel } from "./ApiKeyListPanel";
+export type { ApiKeyListPanelProps } from "./ApiKeyListPanel";
+export { CreateApiKeyForm } from "./CreateApiKeyForm";
+export type { CreateApiKeyFormProps } from "./CreateApiKeyForm";
+export { ApiKeyCreatedAlert } from "./ApiKeyCreatedAlert";
+export type { ApiKeyCreatedAlertProps } from "./ApiKeyCreatedAlert";
+//# sourceMappingURL=index.d.ts.map

package/api-key/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api-key/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC"}

package/api-key/index.js

@@ -0,0 +1,7 @@
+export { useApiKeyList } from "./useApiKeyList";
+export { useCreateApiKey } from "./useCreateApiKey";
+export { useDeleteApiKey } from "./useDeleteApiKey";
+export { ApiKeyListPanel } from "./ApiKeyListPanel";
+export { CreateApiKeyForm } from "./CreateApiKeyForm";
+export { ApiKeyCreatedAlert } from "./ApiKeyCreatedAlert";
+//# sourceMappingURL=index.js.map

package/api-key/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api-key/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC"}

package/api-key/useApiKeyList.d.ts

@@ -0,0 +1,28 @@
+import type { ApiKey } from "@stigmer/protos/ai/stigmer/iam/apikey/v1/api_pb";
+export interface UseApiKeyListReturn {
+    readonly apiKeys: readonly ApiKey[];
+    readonly isLoading: boolean;
+    readonly error: Error | null;
+    readonly refetch: () => void;
+}
+/**
+ * Data hook that fetches all {@link ApiKey} entries for the
+ * authenticated identity.
+ *
+ * API keys are identity-scoped — the server returns every key owned
+ * by the identity in the auth header, regardless of organization.
+ * Call `refetch()` to re-query after mutations (create / delete).
+ *
+ * The raw key value is never returned by `findAll` — only the
+ * `fingerprint` (last 6 characters) is available for display.
+ *
+ * @example
+ * ```tsx
+ * const { apiKeys, isLoading, error, refetch } = useApiKeyList();
+ *
+ * if (isLoading) return <Spinner />;
+ * apiKeys.map((k) => k.metadata?.name);
+ * ```
+ */
+export declare function useApiKeyList(): UseApiKeyListReturn;
+//# sourceMappingURL=useApiKeyList.d.ts.map

package/api-key/useApiKeyList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useApiKeyList.d.ts","sourceRoot":"","sources":["../../src/api-key/useApiKeyList.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iDAAiD,CAAC;AAI9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,IAAI,mBAAmB,CAkCnD"}