@stigmer/react 0.0.71 → 0.0.73

package/iam-policy/RoleSelector.d.ts

@@ -0,0 +1,37 @@
+import type { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import type { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
+/** Props for {@link RoleSelector}. */
+export interface RoleSelectorProps {
+    /** The resource kind whose grantable roles to display. */
+    readonly kind: ApiResourceKind | null;
+    /** Fired when the user selects a role. */
+    readonly onSelect?: (role: IamRole) => void;
+    /** Externally controlled selected role — makes this a controlled component. */
+    readonly selected?: IamRole | null;
+    /** Initial role to select (uncontrolled mode). */
+    readonly defaultRole?: IamRole;
+    /** Disable all role options. */
+    readonly disabled?: boolean;
+    /** Additional CSS class names for the root container. */
+    readonly className?: string;
+}
+/**
+ * Styled radio-group for selecting an IAM role.
+ *
+ * Displays all grantable roles for the given resource kind as
+ * selectable pills, each showing the role name and description.
+ *
+ * For a headless alternative, use {@link useRoleSelector} directly.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <RoleSelector
+ *   kind={ApiResourceKind.organization}
+ *   onSelect={(role) => setRole(role)}
+ * />
+ * ```
+ */
+export declare function RoleSelector({ kind, onSelect, selected: controlledSelected, defaultRole, disabled, className, }: RoleSelectorProps): import("react/jsx-runtime").JSX.Element | null;
+//# sourceMappingURL=RoleSelector.d.ts.map

package/iam-policy/RoleSelector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleSelector.d.ts","sourceRoot":"","sources":["../../src/iam-policy/RoleSelector.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAC3H,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAIzE,sCAAsC;AACtC,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;IACtC,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAC5C,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,kDAAkD;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,gCAAgC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAAC,EAC3B,IAAI,EACJ,QAAQ,EACR,QAAQ,EAAE,kBAAkB,EAC5B,WAAW,EACX,QAAgB,EAChB,SAAS,GACV,EAAE,iBAAiB,kDAwDnB"}

package/iam-policy/RoleSelector.js

@@ -0,0 +1,42 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { cn } from "@stigmer/theme";
+import { useRoleSelector } from "./useRoleSelector";
+/**
+ * Styled radio-group for selecting an IAM role.
+ *
+ * Displays all grantable roles for the given resource kind as
+ * selectable pills, each showing the role name and description.
+ *
+ * For a headless alternative, use {@link useRoleSelector} directly.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ *
+ * @example
+ * ```tsx
+ * <RoleSelector
+ *   kind={ApiResourceKind.organization}
+ *   onSelect={(role) => setRole(role)}
+ * />
+ * ```
+ */
+export function RoleSelector({ kind, onSelect, selected: controlledSelected, defaultRole, disabled = false, className, }) {
+    const { options, selected: internalSelected, select } = useRoleSelector(kind, defaultRole);
+    const currentSelected = controlledSelected !== undefined
+        ? controlledSelected
+        : internalSelected;
+    const handleSelect = (role) => {
+        select(role);
+        onSelect?.(role);
+    };
+    if (options.length === 0) {
+        return null;
+    }
+    return (_jsxs("fieldset", { className: cn("space-y-1.5", className), children: [_jsx("legend", { className: "text-xs font-medium text-foreground", children: "Role" }), _jsx("div", { className: "flex flex-wrap gap-2", children: options.map((opt) => {
+                    const isChecked = currentSelected === opt.role;
+                    return (_jsxs("label", { title: opt.description, className: cn("inline-flex cursor-pointer flex-col rounded-md border px-3 py-1.5 text-xs transition-colors", isChecked
+                            ? "border-primary bg-primary-subtle text-primary font-medium"
+                            : "border-input bg-background text-muted-foreground hover:border-border hover:text-foreground", disabled && "pointer-events-none opacity-50"), children: [_jsx("input", { type: "radio", name: "stgm-role-selector", value: opt.value, checked: isChecked, disabled: disabled, onChange: () => handleSelect(opt.role), className: "sr-only" }), _jsx("span", { children: opt.label }), _jsx("span", { className: "text-[0.625rem] text-muted-foreground font-normal mt-0.5", children: opt.description })] }, opt.value));
+                }) })] }));
+}
+//# sourceMappingURL=RoleSelector.js.map

package/iam-policy/RoleSelector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleSelector.js","sourceRoot":"","sources":["../../src/iam-policy/RoleSelector.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAIb,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAkBpD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,IAAI,EACJ,QAAQ,EACR,QAAQ,EAAE,kBAAkB,EAC5B,WAAW,EACX,QAAQ,GAAG,KAAK,EAChB,SAAS,GACS;IAClB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,eAAe,CACrE,IAAI,EACJ,WAAW,CACZ,CAAC;IAEF,MAAM,eAAe,GAAG,kBAAkB,KAAK,SAAS;QACtD,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,gBAAgB,CAAC;IAErB,MAAM,YAAY,GAAG,CAAC,IAAa,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC;QACb,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,oBAAU,SAAS,EAAE,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,aAC/C,iBAAQ,SAAS,EAAC,qCAAqC,qBAAc,EACrE,cAAK,SAAS,EAAC,sBAAsB,YAClC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;oBACnB,MAAM,SAAS,GAAG,eAAe,KAAK,GAAG,CAAC,IAAI,CAAC;oBAC/C,OAAO,CACL,iBAEE,KAAK,EAAE,GAAG,CAAC,WAAW,EACtB,SAAS,EAAE,EAAE,CACX,6FAA6F,EAC7F,SAAS;4BACP,CAAC,CAAC,2DAA2D;4BAC7D,CAAC,CAAC,4FAA4F,EAChG,QAAQ,IAAI,gCAAgC,CAC7C,aAED,gBACE,IAAI,EAAC,OAAO,EACZ,IAAI,EAAC,oBAAoB,EACzB,KAAK,EAAE,GAAG,CAAC,KAAK,EAChB,OAAO,EAAE,SAAS,EAClB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EACtC,SAAS,EAAC,SAAS,GACnB,EACF,yBAAO,GAAG,CAAC,KAAK,GAAQ,EACxB,eAAM,SAAS,EAAC,0DAA0D,YACvE,GAAG,CAAC,WAAW,GACX,KAtBF,GAAG,CAAC,KAAK,CAuBR,CACT,CAAC;gBACJ,CAAC,CAAC,GACE,IACG,CACZ,CAAC;AACJ,CAAC"}

package/iam-policy/index.d.ts

@@ -0,0 +1,12 @@
+export { useGrantableRoles, type UseGrantableRolesReturn, } from "./useGrantableRoles";
+export { useRoleSelector, type RoleOption, type UseRoleSelectorReturn, } from "./useRoleSelector";
+export { useResourceAccess, type ResourceAccessRef, type UseResourceAccessOptions, type UseResourceAccessReturn, } from "./useResourceAccess";
+export { usePrincipalsCount, type UsePrincipalsCountReturn, } from "./usePrincipalsCount";
+export { useWhoAmI, type UseWhoAmIReturn, } from "./useWhoAmI";
+export { useCreateIamPolicy, type UseCreateIamPolicyReturn, } from "./useCreateIamPolicy";
+export { useDeleteIamPolicy, type UseDeleteIamPolicyReturn, } from "./useDeleteIamPolicy";
+export { useRevokeOrgAccess, type UseRevokeOrgAccessReturn, } from "./useRevokeOrgAccess";
+export { RoleSelector, type RoleSelectorProps } from "./RoleSelector";
+export { GrantAccessForm, type GrantAccessFormProps } from "./GrantAccessForm";
+export { OrgMembersPanel, type OrgMembersPanelProps, } from "./OrgMembersPanel";
+//# sourceMappingURL=index.d.ts.map

package/iam-policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/iam-policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,eAAe,EACf,KAAK,UAAU,EACf,KAAK,qBAAqB,GAC3B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,SAAS,EACT,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,EAClB,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,EAClB,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE/E,OAAO,EACL,eAAe,EACf,KAAK,oBAAoB,GAC1B,MAAM,mBAAmB,CAAC"}

package/iam-policy/index.js

@@ -0,0 +1,12 @@
+export { useGrantableRoles, } from "./useGrantableRoles";
+export { useRoleSelector, } from "./useRoleSelector";
+export { useResourceAccess, } from "./useResourceAccess";
+export { usePrincipalsCount, } from "./usePrincipalsCount";
+export { useWhoAmI, } from "./useWhoAmI";
+export { useCreateIamPolicy, } from "./useCreateIamPolicy";
+export { useDeleteIamPolicy, } from "./useDeleteIamPolicy";
+export { useRevokeOrgAccess, } from "./useRevokeOrgAccess";
+export { RoleSelector } from "./RoleSelector";
+export { GrantAccessForm } from "./GrantAccessForm";
+export { OrgMembersPanel, } from "./OrgMembersPanel";
+//# sourceMappingURL=index.js.map

package/iam-policy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/iam-policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,GAElB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,eAAe,GAGhB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,GAIlB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,SAAS,GAEV,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,YAAY,EAA0B,MAAM,gBAAgB,CAAC;AAEtE,OAAO,EAAE,eAAe,EAA6B,MAAM,mBAAmB,CAAC;AAE/E,OAAO,EACL,eAAe,GAEhB,MAAM,mBAAmB,CAAC"}

package/iam-policy/useCreateIamPolicy.d.ts

@@ -0,0 +1,35 @@
+import type { IamPolicy } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/api_pb";
+import type { IamPolicySpec } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/spec_pb";
+/** Return value of {@link useCreateIamPolicy}. */
+export interface UseCreateIamPolicyReturn {
+    /** Grant access by creating an IAM policy binding. */
+    readonly create: (spec: IamPolicySpec) => Promise<IamPolicy>;
+    /** `true` while the create request is in flight. */
+    readonly isCreating: boolean;
+    /** Error from the last failed create, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Reset `error` to `null`. */
+    readonly clearError: () => void;
+}
+/**
+ * Behavior hook that wraps `iamPolicy.create()` with loading/error
+ * state.
+ *
+ * Creates an IAM policy binding — granting a principal (identity
+ * account, team, etc.) a specific role on a resource. The caller
+ * provides the full {@link IamPolicySpec} with `principal`, `resource`,
+ * and `relation` (the role string, e.g. "admin").
+ *
+ * @example
+ * ```tsx
+ * const { create, isCreating, error } = useCreateIamPolicy();
+ *
+ * await create({
+ *   principal: { kind: "identity_account", id: accountId },
+ *   resource: { kind: "organization", id: orgId },
+ *   relation: "admin",
+ * });
+ * ```
+ */
+export declare function useCreateIamPolicy(): UseCreateIamPolicyReturn;
+//# sourceMappingURL=useCreateIamPolicy.d.ts.map

package/iam-policy/useCreateIamPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCreateIamPolicy.d.ts","sourceRoot":"","sources":["../../src/iam-policy/useCreateIamPolicy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qDAAqD,CAAC;AAIzF,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7D,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,IAAI,wBAAwB,CAyB7D"}

package/iam-policy/useCreateIamPolicy.js

@@ -0,0 +1,46 @@
+"use client";
+import { useCallback, useState } from "react";
+import { useStigmer } from "../hooks";
+import { toError } from "../internal/toError";
+/**
+ * Behavior hook that wraps `iamPolicy.create()` with loading/error
+ * state.
+ *
+ * Creates an IAM policy binding — granting a principal (identity
+ * account, team, etc.) a specific role on a resource. The caller
+ * provides the full {@link IamPolicySpec} with `principal`, `resource`,
+ * and `relation` (the role string, e.g. "admin").
+ *
+ * @example
+ * ```tsx
+ * const { create, isCreating, error } = useCreateIamPolicy();
+ *
+ * await create({
+ *   principal: { kind: "identity_account", id: accountId },
+ *   resource: { kind: "organization", id: orgId },
+ *   relation: "admin",
+ * });
+ * ```
+ */
+export function useCreateIamPolicy() {
+    const stigmer = useStigmer();
+    const [isCreating, setIsCreating] = useState(false);
+    const [error, setError] = useState(null);
+    const clearError = useCallback(() => setError(null), []);
+    const create = useCallback(async (spec) => {
+        setIsCreating(true);
+        setError(null);
+        try {
+            return await stigmer.iamPolicy.create(spec);
+        }
+        catch (err) {
+            setError(toError(err));
+            throw err;
+        }
+        finally {
+            setIsCreating(false);
+        }
+    }, [stigmer]);
+    return { create, isCreating, error, clearError };
+}
+//# sourceMappingURL=useCreateIamPolicy.js.map

package/iam-policy/useCreateIamPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCreateIamPolicy.js","sourceRoot":"","sources":["../../src/iam-policy/useCreateIamPolicy.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAG9C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAc9C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,IAAmB,EAAsB,EAAE;QAChD,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,CAAC,CACV,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC"}

package/iam-policy/useDeleteIamPolicy.d.ts

@@ -0,0 +1,34 @@
+import type { IamPolicy } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/api_pb";
+import type { IamPolicySpec } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/spec_pb";
+/** Return value of {@link useDeleteIamPolicy}. */
+export interface UseDeleteIamPolicyReturn {
+    /** Revoke access by deleting an IAM policy binding. */
+    readonly remove: (spec: IamPolicySpec) => Promise<IamPolicy>;
+    /** `true` while the delete request is in flight. */
+    readonly isDeleting: boolean;
+    /** Error from the last failed delete, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Reset `error` to `null`. */
+    readonly clearError: () => void;
+}
+/**
+ * Behavior hook that wraps `iamPolicy.delete()` with loading/error
+ * state.
+ *
+ * Removes an IAM policy binding — revoking a principal's role on a
+ * resource. The caller provides the same {@link IamPolicySpec} that was
+ * used when creating the binding.
+ *
+ * @example
+ * ```tsx
+ * const { remove, isDeleting, error } = useDeleteIamPolicy();
+ *
+ * await remove({
+ *   principal: { kind: "identity_account", id: accountId },
+ *   resource: { kind: "organization", id: orgId },
+ *   relation: "admin",
+ * });
+ * ```
+ */
+export declare function useDeleteIamPolicy(): UseDeleteIamPolicyReturn;
+//# sourceMappingURL=useDeleteIamPolicy.d.ts.map

package/iam-policy/useDeleteIamPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDeleteIamPolicy.d.ts","sourceRoot":"","sources":["../../src/iam-policy/useDeleteIamPolicy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qDAAqD,CAAC;AAIzF,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7D,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,kBAAkB,IAAI,wBAAwB,CAyB7D"}

package/iam-policy/useDeleteIamPolicy.js

@@ -0,0 +1,45 @@
+"use client";
+import { useCallback, useState } from "react";
+import { useStigmer } from "../hooks";
+import { toError } from "../internal/toError";
+/**
+ * Behavior hook that wraps `iamPolicy.delete()` with loading/error
+ * state.
+ *
+ * Removes an IAM policy binding — revoking a principal's role on a
+ * resource. The caller provides the same {@link IamPolicySpec} that was
+ * used when creating the binding.
+ *
+ * @example
+ * ```tsx
+ * const { remove, isDeleting, error } = useDeleteIamPolicy();
+ *
+ * await remove({
+ *   principal: { kind: "identity_account", id: accountId },
+ *   resource: { kind: "organization", id: orgId },
+ *   relation: "admin",
+ * });
+ * ```
+ */
+export function useDeleteIamPolicy() {
+    const stigmer = useStigmer();
+    const [isDeleting, setIsDeleting] = useState(false);
+    const [error, setError] = useState(null);
+    const clearError = useCallback(() => setError(null), []);
+    const remove = useCallback(async (spec) => {
+        setIsDeleting(true);
+        setError(null);
+        try {
+            return await stigmer.iamPolicy.delete(spec);
+        }
+        catch (err) {
+            setError(toError(err));
+            throw err;
+        }
+        finally {
+            setIsDeleting(false);
+        }
+    }, [stigmer]);
+    return { remove, isDeleting, error, clearError };
+}
+//# sourceMappingURL=useDeleteIamPolicy.js.map

package/iam-policy/useDeleteIamPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDeleteIamPolicy.js","sourceRoot":"","sources":["../../src/iam-policy/useDeleteIamPolicy.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAG9C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAc9C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,IAAmB,EAAsB,EAAE;QAChD,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,CAAC,CACV,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC"}

package/iam-policy/useGrantableRoles.d.ts

@@ -0,0 +1,28 @@
+import type { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import type { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
+/** Return value of {@link useGrantableRoles}. */
+export interface UseGrantableRolesReturn {
+    /** Roles that can be granted on the given resource kind. Empty if none. */
+    readonly roles: readonly IamRole[];
+    /** Whether the kind has at least one user-grantable role. */
+    readonly hasRoles: boolean;
+}
+/**
+ * Returns the list of IAM roles that can be granted on the given
+ * resource kind.
+ *
+ * This is a local read — no network call. The data comes from the
+ * `grantable_roles` field in each `ApiResourceKind`'s proto metadata,
+ * generated at build time.
+ *
+ * @param kind - The resource kind to query, or `null` while loading.
+ *
+ * @example
+ * ```tsx
+ * const { roles, hasRoles } = useGrantableRoles(ApiResourceKind.agent);
+ * // roles = [IamRole.owner, IamRole.viewer]
+ * // hasRoles = true
+ * ```
+ */
+export declare function useGrantableRoles(kind: ApiResourceKind | null): UseGrantableRolesReturn;
+//# sourceMappingURL=useGrantableRoles.d.ts.map

package/iam-policy/useGrantableRoles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGrantableRoles.d.ts","sourceRoot":"","sources":["../../src/iam-policy/useGrantableRoles.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAC3H,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAGzE,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,eAAe,GAAG,IAAI,GAC3B,uBAAuB,CAUzB"}

package/iam-policy/useGrantableRoles.js

@@ -0,0 +1,32 @@
+"use client";
+import { useMemo } from "react";
+import { getGrantableRoles, hasGrantableRoles } from "@stigmer/sdk";
+/**
+ * Returns the list of IAM roles that can be granted on the given
+ * resource kind.
+ *
+ * This is a local read — no network call. The data comes from the
+ * `grantable_roles` field in each `ApiResourceKind`'s proto metadata,
+ * generated at build time.
+ *
+ * @param kind - The resource kind to query, or `null` while loading.
+ *
+ * @example
+ * ```tsx
+ * const { roles, hasRoles } = useGrantableRoles(ApiResourceKind.agent);
+ * // roles = [IamRole.owner, IamRole.viewer]
+ * // hasRoles = true
+ * ```
+ */
+export function useGrantableRoles(kind) {
+    return useMemo(() => {
+        if (kind === null) {
+            return { roles: [], hasRoles: false };
+        }
+        return {
+            roles: getGrantableRoles(kind),
+            hasRoles: hasGrantableRoles(kind),
+        };
+    }, [kind]);
+}
+//# sourceMappingURL=useGrantableRoles.js.map

package/iam-policy/useGrantableRoles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGrantableRoles.js","sourceRoot":"","sources":["../../src/iam-policy/useGrantableRoles.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAGhC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAUpE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA4B;IAE5B,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QACD,OAAO;YACL,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAC9B,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;SAClC,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACb,CAAC"}

package/iam-policy/usePrincipalsCount.d.ts

@@ -0,0 +1,31 @@
+/** Return value of {@link usePrincipalsCount}. */
+export interface UsePrincipalsCountReturn {
+    /** Number of distinct principals with access. `0` while loading. */
+    readonly count: number;
+    /** `true` while the fetch is in flight. */
+    readonly isLoading: boolean;
+    /** Error from the last failed request, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Re-fetch the count from the server. */
+    readonly refetch: () => void;
+}
+/**
+ * Data hook that fetches the count of principals with access to an
+ * organization.
+ *
+ * Wraps `iamPolicy.getPrincipalsCount()`. Useful for member count
+ * badges in navigation and summary statistics.
+ *
+ * Pass `null` as `orgId` to skip fetching (stable no-op).
+ *
+ * @param orgId         - Organization ID, or `null` to skip.
+ * @param principalKind - Kind of principals to count. Defaults to `"identity_account"`.
+ *
+ * @example
+ * ```tsx
+ * const { count, isLoading } = usePrincipalsCount(orgId);
+ * // count = 5
+ * ```
+ */
+export declare function usePrincipalsCount(orgId: string | null, principalKind?: string): UsePrincipalsCountReturn;
+//# sourceMappingURL=usePrincipalsCount.d.ts.map

package/iam-policy/usePrincipalsCount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usePrincipalsCount.d.ts","sourceRoot":"","sources":["../../src/iam-policy/usePrincipalsCount.ts"],"names":[],"mappings":"AAQA,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,aAAa,GAAE,MAA2B,GACzC,wBAAwB,CAsD1B"}

package/iam-policy/usePrincipalsCount.js

@@ -0,0 +1,72 @@
+"use client";
+import { useCallback, useEffect, useState } from "react";
+import { create } from "@bufbuild/protobuf";
+import { GetPrincipalsCountInputSchema } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/io_pb";
+import { useStigmer } from "../hooks";
+import { toError } from "../internal/toError";
+/**
+ * Data hook that fetches the count of principals with access to an
+ * organization.
+ *
+ * Wraps `iamPolicy.getPrincipalsCount()`. Useful for member count
+ * badges in navigation and summary statistics.
+ *
+ * Pass `null` as `orgId` to skip fetching (stable no-op).
+ *
+ * @param orgId         - Organization ID, or `null` to skip.
+ * @param principalKind - Kind of principals to count. Defaults to `"identity_account"`.
+ *
+ * @example
+ * ```tsx
+ * const { count, isLoading } = usePrincipalsCount(orgId);
+ * // count = 5
+ * ```
+ */
+export function usePrincipalsCount(orgId, principalKind = "identity_account") {
+    const stigmer = useStigmer();
+    const [count, setCount] = useState(0);
+    const [isLoading, setIsLoading] = useState(!!orgId);
+    const [error, setError] = useState(null);
+    const [fetchKey, setFetchKey] = useState(0);
+    const [prevOrgId, setPrevOrgId] = useState(orgId);
+    if (orgId !== prevOrgId) {
+        setPrevOrgId(orgId);
+        if (orgId) {
+            setIsLoading(true);
+            setCount(0);
+            setError(null);
+        }
+        else {
+            setIsLoading(false);
+            setCount(0);
+            setError(null);
+        }
+    }
+    const refetch = useCallback(() => setFetchKey((k) => k + 1), []);
+    useEffect(() => {
+        if (!orgId)
+            return;
+        const cancelled = { current: false };
+        stigmer.iamPolicy
+            .getPrincipalsCount(create(GetPrincipalsCountInputSchema, {
+            orgId,
+            principalKind,
+        }))
+            .then((result) => {
+            if (cancelled.current)
+                return;
+            setCount(result.count);
+            setIsLoading(false);
+        }, (err) => {
+            if (cancelled.current)
+                return;
+            setError(toError(err));
+            setIsLoading(false);
+        });
+        return () => {
+            cancelled.current = true;
+        };
+    }, [orgId, principalKind, stigmer, fetchKey]);
+    return { count, isLoading, error, refetch };
+}
+//# sourceMappingURL=usePrincipalsCount.js.map

package/iam-policy/usePrincipalsCount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usePrincipalsCount.js","sourceRoot":"","sources":["../../src/iam-policy/usePrincipalsCount.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAc9C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAoB,EACpB,gBAAwB,kBAAkB;IAE1C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE5C,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,QAAQ,CAAC,CAAC,CAAC,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,QAAQ,CAAC,CAAC,CAAC,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEjE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAErC,OAAO,CAAC,SAAS;aACd,kBAAkB,CACjB,MAAM,CAAC,6BAA6B,EAAE;YACpC,KAAK;YACL,aAAa;SACd,CAAC,CACH;aACA,IAAI,CACH,CAAC,MAAM,EAAE,EAAE;YACT,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO;YAC9B,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO;YAC9B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CACF,CAAC;QAEJ,OAAO,GAAG,EAAE;YACV,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC;QAC3B,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE9C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC"}

package/iam-policy/useResourceAccess.d.ts

@@ -0,0 +1,51 @@
+import type { PrincipalAccess } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/io_pb";
+/** Resource reference for the access query. */
+export interface ResourceAccessRef {
+    /** Resource kind (e.g. "organization", "agent"). */
+    readonly kind: string;
+    /** Resource ID. */
+    readonly id: string;
+}
+/** Options for {@link useResourceAccess}. */
+export interface UseResourceAccessOptions {
+    /** Include roles inherited from parent resources. Defaults to `false`. */
+    readonly includeInherited?: boolean;
+}
+/** Return value of {@link useResourceAccess}. */
+export interface UseResourceAccessReturn {
+    /** Principals with their role grants on the resource. */
+    readonly members: readonly PrincipalAccess[];
+    /** `true` while the fetch is in flight. */
+    readonly isLoading: boolean;
+    /** Error from the last failed request, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Re-fetch the access list from the server. */
+    readonly refetch: () => void;
+}
+/**
+ * Data hook that fetches the list of principals and their roles on a
+ * resource.
+ *
+ * Wraps `iamPolicy.listResourceAccessByPrincipal()`. Returns each
+ * principal with full display information (`ApiResourceRefView`) and
+ * all their role grants, optionally including roles inherited from
+ * parent resources.
+ *
+ * Pass `null` as `resource` to skip fetching (stable no-op).
+ *
+ * **Generic** — works for organizations, agents, environments, or any
+ * resource kind that has IAM policies.
+ *
+ * @param resource - The resource to query access for, or `null` to skip.
+ * @param options  - Optional configuration.
+ *
+ * @example
+ * ```tsx
+ * const { members, isLoading } = useResourceAccess(
+ *   { kind: "organization", id: orgId },
+ *   { includeInherited: true },
+ * );
+ * ```
+ */
+export declare function useResourceAccess(resource: ResourceAccessRef | null, options?: UseResourceAccessOptions): UseResourceAccessReturn;
+//# sourceMappingURL=useResourceAccess.d.ts.map

package/iam-policy/useResourceAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useResourceAccess.d.ts","sourceRoot":"","sources":["../../src/iam-policy/useResourceAccess.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AAQzF,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mBAAmB;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,6CAA6C;AAC7C,MAAM,WAAW,wBAAwB;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,iBAAiB,GAAG,IAAI,EAClC,OAAO,CAAC,EAAE,wBAAwB,GACjC,uBAAuB,CA6DzB"}

package/iam-policy/useResourceAccess.js

@@ -0,0 +1,85 @@
+"use client";
+import { useCallback, useEffect, useState } from "react";
+import { create } from "@bufbuild/protobuf";
+import { ListResourceAccessInputSchema, } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/io_pb";
+import { ApiResourceRefSchema } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/spec_pb";
+import { useStigmer } from "../hooks";
+import { toError } from "../internal/toError";
+/**
+ * Data hook that fetches the list of principals and their roles on a
+ * resource.
+ *
+ * Wraps `iamPolicy.listResourceAccessByPrincipal()`. Returns each
+ * principal with full display information (`ApiResourceRefView`) and
+ * all their role grants, optionally including roles inherited from
+ * parent resources.
+ *
+ * Pass `null` as `resource` to skip fetching (stable no-op).
+ *
+ * **Generic** — works for organizations, agents, environments, or any
+ * resource kind that has IAM policies.
+ *
+ * @param resource - The resource to query access for, or `null` to skip.
+ * @param options  - Optional configuration.
+ *
+ * @example
+ * ```tsx
+ * const { members, isLoading } = useResourceAccess(
+ *   { kind: "organization", id: orgId },
+ *   { includeInherited: true },
+ * );
+ * ```
+ */
+export function useResourceAccess(resource, options) {
+    const stigmer = useStigmer();
+    const [members, setMembers] = useState([]);
+    const [isLoading, setIsLoading] = useState(!!resource);
+    const [error, setError] = useState(null);
+    const [fetchKey, setFetchKey] = useState(0);
+    const kind = resource?.kind ?? null;
+    const id = resource?.id ?? null;
+    const includeInherited = options?.includeInherited ?? false;
+    const [prevKey, setPrevKey] = useState(kind && id ? `${kind}:${id}` : null);
+    const currentKey = kind && id ? `${kind}:${id}` : null;
+    if (currentKey !== prevKey) {
+        setPrevKey(currentKey);
+        if (currentKey) {
+            setIsLoading(true);
+            setMembers([]);
+            setError(null);
+        }
+        else {
+            setIsLoading(false);
+            setMembers([]);
+            setError(null);
+        }
+    }
+    const refetch = useCallback(() => setFetchKey((k) => k + 1), []);
+    useEffect(() => {
+        if (!kind || !id)
+            return;
+        const cancelled = { current: false };
+        const input = create(ListResourceAccessInputSchema, {
+            resource: create(ApiResourceRefSchema, { kind, id }),
+            includeInherited,
+        });
+        stigmer.iamPolicy
+            .listResourceAccessByPrincipal(input)
+            .then((result) => {
+            if (cancelled.current)
+                return;
+            setMembers([...result.entries]);
+            setIsLoading(false);
+        }, (err) => {
+            if (cancelled.current)
+                return;
+            setError(toError(err));
+            setIsLoading(false);
+        });
+        return () => {
+            cancelled.current = true;
+        };
+    }, [kind, id, includeInherited, stigmer, fetchKey]);
+    return { members, isLoading, error, refetch };
+}
+//# sourceMappingURL=useResourceAccess.js.map

package/iam-policy/useResourceAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useResourceAccess.js","sourceRoot":"","sources":["../../src/iam-policy/useResourceAccess.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EACL,6BAA6B,GAC9B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AA4B9C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAkC,EAClC,OAAkC;IAElC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAC9D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC;IACpC,MAAM,EAAE,GAAG,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;IAChC,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,KAAK,CAAC;IAE5D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CACpC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CACpC,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,UAAU,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,UAAU,EAAE,CAAC;YACf,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEjE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;YAAE,OAAO;QAEzB,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAErC,MAAM,KAAK,GAAG,MAAM,CAAC,6BAA6B,EAAE;YAClD,QAAQ,EAAE,MAAM,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACpD,gBAAgB;SACjB,CAAC,CAAC;QAEH,OAAO,CAAC,SAAS;aACd,6BAA6B,CAAC,KAAK,CAAC;aACpC,IAAI,CACH,CAAC,MAAM,EAAE,EAAE;YACT,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO;YAC9B,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAChC,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO;YAC9B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CACF,CAAC;QAEJ,OAAO,GAAG,EAAE;YACV,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC;QAC3B,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEpD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC"}