@stigmer/react 3.0.5 → 3.0.7-dev.20260611143057

package/library/ResourceVisibilityControl.d.ts

@@ -8,6 +8,13 @@ export interface ResourceVisibilityControlProps {
     readonly resourceId: string;
     /** Current visibility of the resource. */
     readonly visibility: ApiResourceVisibility;
+    /**
+     * Slug of the organization that OWNS the resource (`metadata.org`).
+     * Used to look up whether the org operates an IdentityProvider, which
+     * gates the Platform option for blueprints. When omitted, Platform is
+     * simply not offered (the other levels need no org context).
+     */
+    readonly org?: string;
     /**
      * Called after a successful visibility change so the host can refresh the
      * resource (e.g. `refetch`) and reflect the new state.
@@ -21,15 +28,25 @@ export interface ResourceVisibilityControlProps {
  *
  * Behavior:
  * - Always renders a legible state: a read-only {@link VisibilityBadge}
- *   (Private/Public) is shown to viewers without `can_edit` and while the
+ *   (all four levels) is shown to viewers without `can_edit` and while the
  *   permission check is in flight — never a silent blank.
- * - Upgrades to the interactive {@link VisibilityToggle} for users with
+ * - Upgrades to the interactive {@link VisibilitySelector} for users with
  *   `can_edit`, persisting changes via {@link useUpdateVisibility} and invoking
  *   {@link ResourceVisibilityControlProps.onChanged} on success.
  *
- * Blueprints (agent/workflow/skill/mcp_server) expose Private/Public; the toggle
- * intentionally offers only those two levels (org-scoped sharing for instances is
- * handled by `InstanceVisibilitySelector`).
+ * Offered levels are kind- and context-aware (`visibilityLevels.ts`):
+ * - Blueprints (agent/workflow/skill/mcp_server): Private / Organization /
+ *   Public, plus Platform when the deployment is `cloud` AND the owning org
+ *   operates an IdentityProvider (checked via {@link useSsoProvider}, the
+ *   only permission-free IdP lookup — blueprint owners editing visibility
+ *   are not necessarily org admins). In `local` mode (OSS Go backend) the
+ *   set collapses to Private / Public.
+ * - Instances: Private / Organization / Public — platform is excluded by
+ *   design to preserve tenant isolation.
+ *
+ * The backend remains the enforcer (`ValidateVisibilityStep` rejects
+ * platform without an IdP); the gate here only prevents offering an option
+ * that is guaranteed to fail.
  */
-export declare function ResourceVisibilityControl({ kind, resourceId, visibility, onChanged, className, }: ResourceVisibilityControlProps): import("react/jsx-runtime").JSX.Element;
+export declare function ResourceVisibilityControl({ kind, resourceId, visibility, org, onChanged, className, }: ResourceVisibilityControlProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=ResourceVisibilityControl.d.ts.map

package/library/ResourceVisibilityControl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceVisibilityControl.d.ts","sourceRoot":"","sources":["../../src/library/ResourceVisibilityControl.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAGpG,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAiB/B,mDAAmD;AACnD,MAAM,WAAW,8BAA8B;IAC7C,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,IAAI,EACJ,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,GACV,EAAE,8BAA8B,2CAkChC"}
+{"version":3,"file":"ResourceVisibilityControl.d.ts","sourceRoot":"","sources":["../../src/library/ResourceVisibilityControl.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AASpG,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAsB/B,mDAAmD;AACnD,MAAM,WAAW,8BAA8B;IAC7C,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,IAAI,EACJ,UAAU,EACV,UAAU,EACV,GAAG,EACH,SAAS,EACT,SAAS,GACV,EAAE,8BAA8B,2CAmDhC"}

package/library/ResourceVisibilityControl.js

@@ -1,8 +1,11 @@
 "use client";
 import { jsx as _jsx } from "react/jsx-runtime";
 import { useCallback } from "react";
+import { useDeploymentMode } from "../deployment-mode";
 import { PermissionGate } from "../iam-policy/PermissionGate";
-import { VisibilityBadge, VisibilityToggle } from "./VisibilityToggle";
+import { useSsoProvider } from "../identity-provider/useSsoProvider";
+import { VisibilityBadge, VisibilitySelector } from "./VisibilitySelector";
+import { blueprintVisibilityLevels, INSTANCE_VISIBILITY_LEVELS, } from "./visibilityLevels";
 import { useUpdateVisibility, } from "./useUpdateVisibility";
 /**
  * Maps a {@link VisibilityResourceKind} (which mirrors the SDK method namespace,
@@ -18,23 +21,49 @@ const FGA_KIND = {
     agentInstance: "agent_instance",
     workflowInstance: "workflow_instance",
 };
+const INSTANCE_KINDS = new Set([
+    "agentInstance",
+    "workflowInstance",
+]);
 /**
  * Single source of truth for the resource-visibility control in detail headers.
  *
  * Behavior:
  * - Always renders a legible state: a read-only {@link VisibilityBadge}
- *   (Private/Public) is shown to viewers without `can_edit` and while the
+ *   (all four levels) is shown to viewers without `can_edit` and while the
  *   permission check is in flight — never a silent blank.
- * - Upgrades to the interactive {@link VisibilityToggle} for users with
+ * - Upgrades to the interactive {@link VisibilitySelector} for users with
  *   `can_edit`, persisting changes via {@link useUpdateVisibility} and invoking
  *   {@link ResourceVisibilityControlProps.onChanged} on success.
  *
- * Blueprints (agent/workflow/skill/mcp_server) expose Private/Public; the toggle
- * intentionally offers only those two levels (org-scoped sharing for instances is
- * handled by `InstanceVisibilitySelector`).
+ * Offered levels are kind- and context-aware (`visibilityLevels.ts`):
+ * - Blueprints (agent/workflow/skill/mcp_server): Private / Organization /
+ *   Public, plus Platform when the deployment is `cloud` AND the owning org
+ *   operates an IdentityProvider (checked via {@link useSsoProvider}, the
+ *   only permission-free IdP lookup — blueprint owners editing visibility
+ *   are not necessarily org admins). In `local` mode (OSS Go backend) the
+ *   set collapses to Private / Public.
+ * - Instances: Private / Organization / Public — platform is excluded by
+ *   design to preserve tenant isolation.
+ *
+ * The backend remains the enforcer (`ValidateVisibilityStep` rejects
+ * platform without an IdP); the gate here only prevents offering an option
+ * that is guaranteed to fail.
  */
-export function ResourceVisibilityControl({ kind, resourceId, visibility, onChanged, className, }) {
+export function ResourceVisibilityControl({ kind, resourceId, visibility, org, onChanged, className, }) {
     const { updateVisibility, isPending } = useUpdateVisibility(kind, resourceId);
+    const deploymentMode = useDeploymentMode();
+    const isInstance = INSTANCE_KINDS.has(kind);
+    // The IdP lookup only matters for blueprints in cloud mode; passing null
+    // makes the hook a stable no-op everywhere else.
+    const idpLookupOrg = !isInstance && deploymentMode === "cloud" ? (org ?? null) : null;
+    const { ssoProvider } = useSsoProvider(idpLookupOrg);
+    const options = isInstance
+        ? INSTANCE_VISIBILITY_LEVELS
+        : blueprintVisibilityLevels({
+            deploymentMode,
+            hasIdentityProvider: ssoProvider !== null,
+        });
     const handleChange = useCallback(async (next) => {
         try {
             await updateVisibility(next);
@@ -42,11 +71,11 @@ export function ResourceVisibilityControl({ kind, resourceId, visibility, onChan
         }
         catch {
             // The RPC error is captured in useUpdateVisibility's `error` state;
-            // swallow here so the toggle's promise settles without an unhandled
+            // swallow here so the selector's promise settles without an unhandled
             // rejection. Surfacing a toast is the host app's concern.
         }
     }, [updateVisibility, onChanged]);
     const badge = _jsx(VisibilityBadge, { visibility: visibility, className: className });
-    return (_jsx(PermissionGate, { resource: { kind: FGA_KIND[kind], id: resourceId }, relation: "can_edit", fallback: badge, loading: badge, children: _jsx(VisibilityToggle, { visibility: visibility, onVisibilityChange: handleChange, isPending: isPending, className: className }) }));
+    return (_jsx(PermissionGate, { resource: { kind: FGA_KIND[kind], id: resourceId }, relation: "can_edit", fallback: badge, loading: badge, children: _jsx(VisibilitySelector, { visibility: visibility, options: options, onVisibilityChange: handleChange, isPending: isPending, ariaLabel: isInstance ? "Instance visibility" : "Resource visibility", className: className }) }));
 }
 //# sourceMappingURL=ResourceVisibilityControl.js.map

package/library/ResourceVisibilityControl.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceVisibilityControl.js","sourceRoot":"","sources":["../../src/library/ResourceVisibilityControl.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,QAAQ,GAA2C;IACvD,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,YAAY;IACvB,aAAa,EAAE,gBAAgB;IAC/B,gBAAgB,EAAE,mBAAmB;CACtC,CAAC;AAmBF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,IAAI,EACJ,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,GACsB;IAC/B,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAE9E,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,IAA2B,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7B,SAAS,EAAE,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,oEAAoE;YACpE,0DAA0D;QAC5D,CAAC;IACH,CAAC,EACD,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAC9B,CAAC;IAEF,MAAM,KAAK,GAAG,KAAC,eAAe,IAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAI,CAAC;IAEhF,OAAO,CACL,KAAC,cAAc,IACb,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAClD,QAAQ,EAAC,UAAU,EACnB,QAAQ,EAAE,KAAK,EACf,OAAO,EAAE,KAAK,YAEd,KAAC,gBAAgB,IACf,UAAU,EAAE,UAAU,EACtB,kBAAkB,EAAE,YAAY,EAChC,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS,GACpB,GACa,CAClB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"ResourceVisibilityControl.js","sourceRoot":"","sources":["../../src/library/ResourceVisibilityControl.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EACL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,QAAQ,GAA2C;IACvD,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,YAAY;IACvB,aAAa,EAAE,gBAAgB;IAC/B,gBAAgB,EAAE,mBAAmB;CACtC,CAAC;AAEF,MAAM,cAAc,GAAwC,IAAI,GAAG,CAAC;IAClE,eAAe;IACf,kBAAkB;CACnB,CAAC,CAAC;AA0BH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,IAAI,EACJ,UAAU,EACV,UAAU,EACV,GAAG,EACH,SAAS,EACT,SAAS,GACsB;IAC/B,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9E,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAE3C,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,YAAY,GAChB,CAAC,UAAU,IAAI,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,yBAAyB,CAAC;YACxB,cAAc;YACd,mBAAmB,EAAE,WAAW,KAAK,IAAI;SAC1C,CAAC,CAAC;IAEP,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,IAA2B,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7B,SAAS,EAAE,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,sEAAsE;YACtE,0DAA0D;QAC5D,CAAC;IACH,CAAC,EACD,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAC9B,CAAC;IAEF,MAAM,KAAK,GAAG,KAAC,eAAe,IAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAI,CAAC;IAEhF,OAAO,CACL,KAAC,cAAc,IACb,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAClD,QAAQ,EAAC,UAAU,EACnB,QAAQ,EAAE,KAAK,EACf,OAAO,EAAE,KAAK,YAEd,KAAC,kBAAkB,IACjB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,OAAO,EAChB,kBAAkB,EAAE,YAAY,EAChC,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,EACrE,SAAS,EAAE,SAAS,GACpB,GACa,CAClB,CAAC;AACJ,CAAC"}

package/library/ScopeToggle.d.ts

@@ -22,7 +22,7 @@ export interface ScopeToggleProps {
  *
  * Renders as a WAI-ARIA Radio Group with roving tabindex and
  * arrow-key navigation. Follows the same visual pattern as
- * {@link VisibilityToggle}.
+ * {@link VisibilitySelector}.
  *
  * The component is controlled — the consumer owns the `value` state
  * and handles persistence (e.g., localStorage).

package/library/ScopeToggle.js

@@ -22,7 +22,7 @@ const OPTIONS = [
  *
  * Renders as a WAI-ARIA Radio Group with roving tabindex and
  * arrow-key navigation. Follows the same visual pattern as
- * {@link VisibilityToggle}.
+ * {@link VisibilitySelector}.
  *
  * The component is controlled — the consumer owns the `value` state
  * and handles persistence (e.g., localStorage).

package/library/VisibilityOptionRow.d.ts

@@ -0,0 +1,52 @@
+import type { VisibilityLevelOption } from "./visibilityLevels";
+/** Color treatment key shared by every visibility surface. */
+export type VisibilityTone = VisibilityLevelOption["tone"];
+/** Base classes for the visibility chip (badge + selector trigger). */
+export declare const VISIBILITY_CHIP_CLASS = "inline-flex shrink-0 items-center gap-1 rounded-full bg-muted px-2 py-0.5 text-[10px] font-medium text-muted-foreground";
+/** Props for {@link VisibilityOptionRow}. */
+export interface VisibilityOptionRowProps {
+    /** The level this row represents. */
+    readonly option: VisibilityLevelOption;
+    /** Whether this row is the resource's current visibility. */
+    readonly isSelected: boolean;
+    /**
+     * ARIA role for the row. `"option"` inside the popover listbox,
+     * `"radio"` inside the create-mode radiogroup — the matching selection
+     * attribute (`aria-selected` / `aria-checked`) is applied automatically.
+     */
+    readonly role: "option" | "radio";
+    /** Visually highlighted by keyboard/pointer navigation (popover only). */
+    readonly isHighlighted?: boolean;
+    /** Disables interaction (e.g. while a change is in flight). */
+    readonly disabled?: boolean;
+    /** Roving-tabindex value; the focused row is `0`, the rest `-1`. */
+    readonly tabIndex?: number;
+    /** Fires when the row is activated (click / Enter / Space). */
+    readonly onSelect: () => void;
+    /** Pointer hover, used to sync the keyboard highlight. */
+    readonly onMouseEnter?: () => void;
+    /** Keydown handler owned by the parent for roving focus. */
+    readonly onKeyDown?: (e: React.KeyboardEvent<HTMLButtonElement>) => void;
+}
+/**
+ * A single visibility level rendered as a left-aligned row: tone icon,
+ * label, one-line description, and a check when current. Shared by the
+ * {@link VisibilitySelector} popover and its create-mode inline list so
+ * option presentation has exactly one source.
+ */
+export declare const VisibilityOptionRow: import("react").ForwardRefExoticComponent<VisibilityOptionRowProps & import("react").RefAttributes<HTMLButtonElement>>;
+/** Selected-segment / active-tone treatment (also used by the inline confirm). */
+export declare const SELECTED_STYLES: Record<VisibilityTone, string>;
+/** Inline-confirm (escalation prompt) treatment, keyed by tone. */
+export declare const PROMPT_STYLES: Record<VisibilityTone, {
+    container: string;
+    text: string;
+    confirm: string;
+    cancel: string;
+}>;
+/** Icon for a visibility tone; shared by the row, badge, and trigger. */
+export declare function VisibilityIcon({ tone, className, }: {
+    readonly tone: VisibilityTone;
+    readonly className?: string;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=VisibilityOptionRow.d.ts.map

package/library/VisibilityOptionRow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VisibilityOptionRow.d.ts","sourceRoot":"","sources":["../../src/library/VisibilityOptionRow.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhE,8DAA8D;AAC9D,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAO3D,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,4HACyF,CAAC;AAQ5H,6CAA6C;AAC7C,MAAM,WAAW,wBAAwB;IACvC,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC;IAC9B,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC;CAC1E;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,wHAuD9B,CAAC;AAMH,kFAAkF;AAClF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAQ1D,CAAC;AAEF,mEAAmE;AACnE,eAAO,MAAM,aAAa,EAAE,MAAM,CAChC,cAAc,EACd;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAuCrE,CAAC;AAMF,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,EAC7B,IAAI,EACJ,SAAS,GACV,EAAE;IACD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,2CAWA"}

package/library/VisibilityOptionRow.js

@@ -0,0 +1,92 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { forwardRef } from "react";
+import { cn } from "@stigmer/theme";
+// ---------------------------------------------------------------------------
+// Chip — the read-only badge and the editable trigger share this base so the
+// two states are visually identical apart from the trigger's caret affordance.
+// ---------------------------------------------------------------------------
+/** Base classes for the visibility chip (badge + selector trigger). */
+export const VISIBILITY_CHIP_CLASS = "inline-flex shrink-0 items-center gap-1 rounded-full bg-muted px-2 py-0.5 text-[10px] font-medium text-muted-foreground";
+/**
+ * A single visibility level rendered as a left-aligned row: tone icon,
+ * label, one-line description, and a check when current. Shared by the
+ * {@link VisibilitySelector} popover and its create-mode inline list so
+ * option presentation has exactly one source.
+ */
+export const VisibilityOptionRow = forwardRef(function VisibilityOptionRow({ option, isSelected, role, isHighlighted, disabled, tabIndex, onSelect, onMouseEnter, onKeyDown, }, ref) {
+    const selectionAttr = role === "radio"
+        ? { "aria-checked": isSelected }
+        : { "aria-selected": isSelected };
+    return (_jsxs("button", { ref: ref, type: "button", role: role, ...selectionAttr, tabIndex: tabIndex, disabled: disabled, onClick: onSelect, onMouseEnter: onMouseEnter, onKeyDown: onKeyDown, className: cn("flex w-full items-start gap-2 rounded-md px-2.5 py-2 text-left transition-colors", "focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", "disabled:pointer-events-none disabled:opacity-50", isHighlighted ? "bg-accent text-foreground" : "hover:bg-accent-hover"), children: [_jsx(VisibilityIcon, { tone: option.tone, className: "mt-0.5 size-3.5 shrink-0 text-muted-foreground" }), _jsxs("span", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "block text-xs font-medium text-foreground", children: option.label }), _jsx("span", { className: "block text-[0.65rem] leading-snug text-muted-foreground", children: option.description })] }), isSelected && _jsx(CheckIcon, { className: "mt-0.5 size-3.5 shrink-0 text-primary" })] }));
+});
+// ---------------------------------------------------------------------------
+// Tone styling — one row per visibility tone, keyed by VisibilityLevelOption
+// ---------------------------------------------------------------------------
+/** Selected-segment / active-tone treatment (also used by the inline confirm). */
+export const SELECTED_STYLES = {
+    private: "bg-amber-50 text-amber-800 dark:bg-amber-900/30 dark:text-amber-300",
+    org: "bg-blue-100 text-blue-800 dark:bg-blue-900/40 dark:text-blue-300",
+    platform: "bg-violet-100 text-violet-800 dark:bg-violet-900/40 dark:text-violet-300",
+    public: "bg-emerald-100 text-emerald-800 dark:bg-emerald-900/40 dark:text-emerald-300",
+};
+/** Inline-confirm (escalation prompt) treatment, keyed by tone. */
+export const PROMPT_STYLES = {
+    // Private never escalates, but the row keeps the Record total.
+    private: {
+        container: "border-amber-200 bg-amber-50 dark:border-amber-800/50 dark:bg-amber-950/30",
+        text: "text-amber-800 dark:text-amber-200",
+        confirm: "bg-amber-600 hover:bg-amber-700 dark:bg-amber-600 dark:hover:bg-amber-500",
+        cancel: "text-amber-700 hover:text-amber-900 dark:text-amber-300 dark:hover:text-amber-100",
+    },
+    org: {
+        container: "border-blue-200 bg-blue-50 dark:border-blue-800/50 dark:bg-blue-950/30",
+        text: "text-blue-800 dark:text-blue-200",
+        confirm: "bg-blue-600 hover:bg-blue-700 dark:bg-blue-600 dark:hover:bg-blue-500",
+        cancel: "text-blue-700 hover:text-blue-900 dark:text-blue-300 dark:hover:text-blue-100",
+    },
+    platform: {
+        container: "border-violet-200 bg-violet-50 dark:border-violet-800/50 dark:bg-violet-950/30",
+        text: "text-violet-800 dark:text-violet-200",
+        confirm: "bg-violet-600 hover:bg-violet-700 dark:bg-violet-600 dark:hover:bg-violet-500",
+        cancel: "text-violet-700 hover:text-violet-900 dark:text-violet-300 dark:hover:text-violet-100",
+    },
+    public: {
+        container: "border-emerald-200 bg-emerald-50 dark:border-emerald-800/50 dark:bg-emerald-950/30",
+        text: "text-emerald-800 dark:text-emerald-200",
+        confirm: "bg-emerald-600 hover:bg-emerald-700 dark:bg-emerald-600 dark:hover:bg-emerald-500",
+        cancel: "text-emerald-700 hover:text-emerald-900 dark:text-emerald-300 dark:hover:text-emerald-100",
+    },
+};
+// ---------------------------------------------------------------------------
+// Icons — inline SVGs following the SDK pattern (no icon library dependency)
+// ---------------------------------------------------------------------------
+/** Icon for a visibility tone; shared by the row, badge, and trigger. */
+export function VisibilityIcon({ tone, className, }) {
+    switch (tone) {
+        case "org":
+            return _jsx(UsersIcon, { className: className });
+        case "platform":
+            return _jsx(BuildingsIcon, { className: className });
+        case "public":
+            return _jsx(GlobeIcon, { className: className });
+        default:
+            return _jsx(LockIcon, { className: className });
+    }
+}
+function LockIcon({ className }) {
+    return (_jsxs("svg", { className: className, viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("rect", { x: "3.5", y: "7", width: "9", height: "7", rx: "1.5" }), _jsx("path", { d: "M5.5 7V5a2.5 2.5 0 0 1 5 0v2" })] }));
+}
+function UsersIcon({ className }) {
+    return (_jsxs("svg", { className: className, viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("circle", { cx: "6", cy: "5", r: "2.5" }), _jsx("path", { d: "M2 13c0-2.21 1.79-4 4-4s4 1.79 4 4" }), _jsx("circle", { cx: "11.5", cy: "5.5", r: "2" }), _jsx("path", { d: "M14 13c0-1.66-1.12-3-2.5-3-.5 0-1 .14-1.4.4" })] }));
+}
+function BuildingsIcon({ className }) {
+    return (_jsxs("svg", { className: className, viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("path", { d: "M2 14V4.5L6.5 2v12" }), _jsx("path", { d: "M6.5 6.5 14 8.5V14" }), _jsx("path", { d: "M2 14h12" }), _jsx("path", { d: "M4.25 6h.01M4.25 8.5h.01M4.25 11h.01M10.5 10.5h.01M10.5 12.5h.01" })] }));
+}
+function GlobeIcon({ className }) {
+    return (_jsxs("svg", { className: className, viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("circle", { cx: "8", cy: "8", r: "6" }), _jsx("path", { d: "M2 8h12" }), _jsx("path", { d: "M8 2c1.66 1.46 2.6 3.63 2.6 6s-.94 4.54-2.6 6c-1.66-1.46-2.6-3.63-2.6-6s.94-4.54 2.6-6Z" })] }));
+}
+function CheckIcon({ className }) {
+    return (_jsx("svg", { className: className, viewBox: "0 0 16 16", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: _jsx("path", { d: "M3 8.5 6.5 12 13 4.5" }) }));
+}
+//# sourceMappingURL=VisibilityOptionRow.js.map

package/library/VisibilityOptionRow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VisibilityOptionRow.js","sourceRoot":"","sources":["../../src/library/VisibilityOptionRow.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAMpC,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAE9E,uEAAuE;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAChC,yHAAyH,CAAC;AAkC5H;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAG3C,SAAS,mBAAmB,CAC5B,EACE,MAAM,EACN,UAAU,EACV,IAAI,EACJ,aAAa,EACb,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,SAAS,GACV,EACD,GAAG;IAEH,MAAM,aAAa,GACjB,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE;QAChC,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;IAEtC,OAAO,CACL,kBACE,GAAG,EAAE,GAAG,EACR,IAAI,EAAC,QAAQ,EACb,IAAI,EAAE,IAAI,KACN,aAAa,EACjB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,QAAQ,EACjB,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,EAAE,CACX,kFAAkF,EAClF,yEAAyE,EACzE,kDAAkD,EAClD,aAAa,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,uBAAuB,CACtE,aAED,KAAC,cAAc,IACb,IAAI,EAAE,MAAM,CAAC,IAAI,EACjB,SAAS,EAAC,gDAAgD,GAC1D,EACF,gBAAM,SAAS,EAAC,gBAAgB,aAC9B,eAAM,SAAS,EAAC,2CAA2C,YACxD,MAAM,CAAC,KAAK,GACR,EACP,eAAM,SAAS,EAAC,yDAAyD,YACtE,MAAM,CAAC,WAAW,GACd,IACF,EACN,UAAU,IAAI,KAAC,SAAS,IAAC,SAAS,EAAC,uCAAuC,GAAG,IACvE,CACV,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAE9E,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAmC;IAC7D,OAAO,EACL,qEAAqE;IACvE,GAAG,EAAE,kEAAkE;IACvE,QAAQ,EACN,0EAA0E;IAC5E,MAAM,EACJ,8EAA8E;CACjF,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,aAAa,GAGtB;IACF,+DAA+D;IAC/D,OAAO,EAAE;QACP,SAAS,EACP,4EAA4E;QAC9E,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EACL,2EAA2E;QAC7E,MAAM,EACJ,mFAAmF;KACtF;IACD,GAAG,EAAE;QACH,SAAS,EACP,wEAAwE;QAC1E,IAAI,EAAE,kCAAkC;QACxC,OAAO,EACL,uEAAuE;QACzE,MAAM,EACJ,+EAA+E;KAClF;IACD,QAAQ,EAAE;QACR,SAAS,EACP,gFAAgF;QAClF,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EACL,+EAA+E;QACjF,MAAM,EACJ,uFAAuF;KAC1F;IACD,MAAM,EAAE;QACN,SAAS,EACP,oFAAoF;QACtF,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EACL,mFAAmF;QACrF,MAAM,EACJ,2FAA2F;KAC9F;CACF,CAAC;AAEF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAE9E,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,EAC7B,IAAI,EACJ,SAAS,GAIV;IACC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,KAAC,SAAS,IAAC,SAAS,EAAE,SAAS,GAAI,CAAC;QAC7C,KAAK,UAAU;YACb,OAAO,KAAC,aAAa,IAAC,SAAS,EAAE,SAAS,GAAI,CAAC;QACjD,KAAK,QAAQ;YACX,OAAO,KAAC,SAAS,IAAC,SAAS,EAAE,SAAS,GAAI,CAAC;QAC7C;YACE,OAAO,KAAC,QAAQ,IAAC,SAAS,EAAE,SAAS,GAAI,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,EAAE,SAAS,EAAmC;IAC9D,OAAO,CACL,eAAK,SAAS,EAAE,SAAS,EAAE,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,aAChK,eAAM,CAAC,EAAC,KAAK,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,KAAK,GAAG,EACpD,eAAM,CAAC,EAAC,8BAA8B,GAAG,IACrC,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,EAAE,SAAS,EAAmC;IAC/D,OAAO,CACL,eAAK,SAAS,EAAE,SAAS,EAAE,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,aAChK,iBAAQ,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,EAAC,CAAC,EAAC,KAAK,GAAG,EAChC,eAAM,CAAC,EAAC,oCAAoC,GAAG,EAC/C,iBAAQ,EAAE,EAAC,MAAM,EAAC,EAAE,EAAC,KAAK,EAAC,CAAC,EAAC,GAAG,GAAG,EACnC,eAAM,CAAC,EAAC,6CAA6C,GAAG,IACpD,CACP,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,EAAE,SAAS,EAAmC;IACnE,OAAO,CACL,eAAK,SAAS,EAAE,SAAS,EAAE,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,aAChK,eAAM,CAAC,EAAC,oBAAoB,GAAG,EAC/B,eAAM,CAAC,EAAC,oBAAoB,GAAG,EAC/B,eAAM,CAAC,EAAC,UAAU,GAAG,EACrB,eAAM,CAAC,EAAC,kEAAkE,GAAG,IACzE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,EAAE,SAAS,EAAmC;IAC/D,OAAO,CACL,eAAK,SAAS,EAAE,SAAS,EAAE,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,aAChK,iBAAQ,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,EAAC,CAAC,EAAC,GAAG,GAAG,EAC9B,eAAM,CAAC,EAAC,SAAS,GAAG,EACpB,eAAM,CAAC,EAAC,yFAAyF,GAAG,IAChG,CACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,EAAE,SAAS,EAAmC;IAC/D,OAAO,CACL,cAAK,SAAS,EAAE,SAAS,EAAE,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,YAC9J,eAAM,CAAC,EAAC,sBAAsB,GAAG,GAC7B,CACP,CAAC;AACJ,CAAC"}

package/library/VisibilitySelector.d.ts

@@ -0,0 +1,98 @@
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { type VisibilityLevelOption } from "./visibilityLevels";
+/** How the selector presents itself and how it confirms escalations. */
+export type VisibilitySelectorMode = "manage" | "create";
+/** Props for {@link VisibilitySelector}. */
+export interface VisibilitySelectorProps {
+    /** Current visibility of the resource. */
+    readonly visibility: ApiResourceVisibility;
+    /**
+     * Levels to offer, in escalation order (least to most exposed). Selecting
+     * a level later in the list than the current one is an escalation and is
+     * confirmed by severity (see {@link mode}); de-escalation applies
+     * immediately (revoking access is always safe).
+     */
+    readonly options: readonly VisibilityLevelOption[];
+    /** Called when the user selects (and, for escalations, confirms) a level. */
+    readonly onVisibilityChange: (v: ApiResourceVisibility) => void;
+    /**
+     * Presentation + confirmation mode.
+     *
+     * - `"manage"` (default) — a compact current-state chip opens a popover
+     *   ladder of levels. Escalations are confirmed by severity: a light
+     *   inline prompt for levels carrying {@link VisibilityLevelOption.confirmPrompt}
+     *   (e.g. Organization), and a blocking modal for levels carrying
+     *   {@link VisibilityLevelOption.confirmDialog} (Platform, Public). This is
+     *   the live-resource case.
+     * - `"create"` — an inline radio list that applies immediately, with no
+     *   escalation confirmation. Used to pick an initial value while creating
+     *   a resource (typically inside a native `<dialog>`, where a portaled
+     *   popover would render beneath the modal's top layer).
+     *
+     * @default "manage"
+     */
+    readonly mode?: VisibilitySelectorMode;
+    /** Shows a spinner/disabled state while the RPC is in flight. */
+    readonly isPending?: boolean;
+    /** Disables all interaction (e.g., when the user lacks can_edit). */
+    readonly disabled?: boolean;
+    /** Accessible name for the control. Defaults to "Resource visibility". */
+    readonly ariaLabel?: string;
+    /** Additional CSS classes applied to the root element. */
+    readonly className?: string;
+}
+/**
+ * The single control for resource visibility across blueprints AND
+ * instances. Offered levels are pure data ({@link VisibilityLevelOption});
+ * per-kind level sets live in `visibilityLevels.ts`, so this component
+ * carries no kind-specific logic.
+ *
+ * In `"manage"` mode it renders a current-state chip (icon + label + caret)
+ * that opens a popover listing each offered level with its own description —
+ * scaling cleanly to four levels without the layout shift of a segmented
+ * control, and explaining every choice at a glance (Recognition over
+ * Recall). Escalation is confirmed in proportion to how far access expands:
+ * de-escalation applies instantly, an Organization escalation shows a light
+ * inline prompt, and Platform/Public escalations open a blocking
+ * {@link ConfirmDialog} that names the exact audience. Confirmation is owned
+ * here so every consumer — blueprint detail, instance detail, and any
+ * standalone embed — behaves identically.
+ *
+ * In `"create"` mode it renders an inline radio list that applies
+ * immediately (initial value selection has no escalation semantics).
+ *
+ * If the current visibility is not among the offered options (e.g. a
+ * platform-shared blueprint whose org no longer operates an
+ * IdentityProvider), its canonical option is rendered in place so the
+ * state stays legible and the user can still move to an offered level.
+ *
+ * All visual properties flow through `--stgm-*` design tokens; portaled
+ * content targets the {@link useStigmerPortalContainer} so it inherits the
+ * active theme.
+ *
+ * @example
+ * ```tsx
+ * <VisibilitySelector
+ *   visibility={agent.metadata.visibility}
+ *   options={blueprintVisibilityLevels({ deploymentMode, hasIdentityProvider })}
+ *   onVisibilityChange={updateVisibility}
+ *   isPending={isPending}
+ * />
+ * ```
+ */
+export declare function VisibilitySelector({ visibility, options, onVisibilityChange, mode, isPending, disabled, ariaLabel, className, }: VisibilitySelectorProps): import("react/jsx-runtime").JSX.Element;
+/**
+ * Read-only visibility indicator with a matching icon, covering all four
+ * levels (Private / Organization / Platform / Public).
+ *
+ * Rendered wherever the interactive {@link VisibilitySelector} is not
+ * available — for viewers who lack `can_edit`, and while a permission check
+ * is in flight — so a resource's visibility is always legible rather than
+ * silently blank. Shares the chip styling with the selector trigger so the
+ * read-only and editable states are visually consistent.
+ */
+export declare function VisibilityBadge({ visibility, className, }: {
+    readonly visibility: ApiResourceVisibility;
+    readonly className?: string;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=VisibilitySelector.d.ts.map

package/library/VisibilitySelector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VisibilitySelector.d.ts","sourceRoot":"","sources":["../../src/library/VisibilitySelector.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAU/F,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAE5B,wEAAwE;AACxE,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEzD,4CAA4C;AAC5C,MAAM,WAAW,uBAAuB;IACtC,0CAA0C;IAC1C,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,6EAA6E;IAC7E,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAChE;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC;IACvC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,UAAU,EACV,OAAO,EACP,kBAAkB,EAClB,IAAe,EACf,SAAiB,EACjB,QAAgB,EAChB,SAAiC,EACjC,SAAS,GACV,EAAE,uBAAuB,2CAyRzB;AAmBD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,EAC9B,UAAU,EACV,SAAS,GACV,EAAE;IACD,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,2CAQA"}

package/library/VisibilitySelector.js

@@ -0,0 +1,193 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import { Popover } from "@base-ui/react/popover";
+import { cn } from "@stigmer/theme";
+import { useStigmerPortalContainer } from "../portal-container";
+import { ConfirmDialog } from "../resource-detail/ConfirmDialog";
+import { useConfirmAction } from "../resource-detail/useConfirmAction";
+import { PROMPT_STYLES, VISIBILITY_CHIP_CLASS, VisibilityIcon, VisibilityOptionRow, } from "./VisibilityOptionRow";
+import { visibilityOption, } from "./visibilityLevels";
+/**
+ * The single control for resource visibility across blueprints AND
+ * instances. Offered levels are pure data ({@link VisibilityLevelOption});
+ * per-kind level sets live in `visibilityLevels.ts`, so this component
+ * carries no kind-specific logic.
+ *
+ * In `"manage"` mode it renders a current-state chip (icon + label + caret)
+ * that opens a popover listing each offered level with its own description —
+ * scaling cleanly to four levels without the layout shift of a segmented
+ * control, and explaining every choice at a glance (Recognition over
+ * Recall). Escalation is confirmed in proportion to how far access expands:
+ * de-escalation applies instantly, an Organization escalation shows a light
+ * inline prompt, and Platform/Public escalations open a blocking
+ * {@link ConfirmDialog} that names the exact audience. Confirmation is owned
+ * here so every consumer — blueprint detail, instance detail, and any
+ * standalone embed — behaves identically.
+ *
+ * In `"create"` mode it renders an inline radio list that applies
+ * immediately (initial value selection has no escalation semantics).
+ *
+ * If the current visibility is not among the offered options (e.g. a
+ * platform-shared blueprint whose org no longer operates an
+ * IdentityProvider), its canonical option is rendered in place so the
+ * state stays legible and the user can still move to an offered level.
+ *
+ * All visual properties flow through `--stgm-*` design tokens; portaled
+ * content targets the {@link useStigmerPortalContainer} so it inherits the
+ * active theme.
+ *
+ * @example
+ * ```tsx
+ * <VisibilitySelector
+ *   visibility={agent.metadata.visibility}
+ *   options={blueprintVisibilityLevels({ deploymentMode, hasIdentityProvider })}
+ *   onVisibilityChange={updateVisibility}
+ *   isPending={isPending}
+ * />
+ * ```
+ */
+export function VisibilitySelector({ visibility, options, onVisibilityChange, mode = "manage", isPending = false, disabled = false, ariaLabel = "Resource visibility", className, }) {
+    const portalContainer = useStigmerPortalContainer();
+    const { confirmState, confirm, handleConfirm, handleCancel } = useConfirmAction();
+    const [open, setOpen] = useState(false);
+    // The Organization-style escalation awaiting its light inline confirm.
+    const [pendingInline, setPendingInline] = useState(null);
+    const [highlightIdx, setHighlightIdx] = useState(-1);
+    const optionRefs = useRef([]);
+    const effectivelyDisabled = disabled || isPending;
+    // Keep the current state legible even when it is not offerable in the
+    // current context: render its canonical option as an extra row.
+    const effectiveOptions = useMemo(() => {
+        if (options.some((o) => o.value === visibility))
+            return options;
+        return [...options, visibilityOption(visibility)];
+    }, [options, visibility]);
+    const isEscalation = useCallback((target) => {
+        const values = effectiveOptions.map((o) => o.value);
+        return values.indexOf(target) > values.indexOf(visibility);
+    }, [effectiveOptions, visibility]);
+    const apply = useCallback((value) => {
+        setOpen(false);
+        setPendingInline(null);
+        onVisibilityChange(value);
+    }, [onVisibilityChange]);
+    const handleSelect = useCallback((option) => {
+        const value = option.value;
+        if (value === visibility) {
+            setPendingInline(null);
+            setOpen(false);
+            return;
+        }
+        // De-escalation (and create mode) never confirm — narrowing access is
+        // always safe, and an initial pick has no escalation semantics.
+        if (mode === "create" || !isEscalation(value)) {
+            apply(value);
+            return;
+        }
+        if (option.confirmDialog) {
+            setOpen(false);
+            setPendingInline(null);
+            void confirm({
+                title: option.confirmDialog.title,
+                description: option.confirmDialog.description,
+                confirmLabel: `Make ${option.label}`,
+                // Exposure is reversible, so this is a primary (not destructive)
+                // confirmation; the audience-naming copy carries the caution.
+                variant: "default",
+            }).then((ok) => {
+                if (ok)
+                    onVisibilityChange(value);
+            });
+            return;
+        }
+        if (option.confirmPrompt) {
+            setPendingInline(value);
+            return;
+        }
+        apply(value);
+    }, [visibility, mode, isEscalation, apply, confirm, onVisibilityChange]);
+    const moveFocus = useCallback((from, delta) => {
+        const count = effectiveOptions.length;
+        const next = (from + delta + count) % count;
+        setHighlightIdx(next);
+        optionRefs.current[next]?.focus();
+    }, [effectiveOptions.length]);
+    const handleRowKeyDown = useCallback((e, index) => {
+        switch (e.key) {
+            case "ArrowDown":
+            case "ArrowRight":
+                e.preventDefault();
+                moveFocus(index, 1);
+                break;
+            case "ArrowUp":
+            case "ArrowLeft":
+                e.preventDefault();
+                moveFocus(index, -1);
+                break;
+            case "Home":
+                e.preventDefault();
+                setHighlightIdx(0);
+                optionRefs.current[0]?.focus();
+                break;
+            case "End": {
+                e.preventDefault();
+                const last = effectiveOptions.length - 1;
+                setHighlightIdx(last);
+                optionRefs.current[last]?.focus();
+                break;
+            }
+        }
+    }, [moveFocus, effectiveOptions.length]);
+    // On open, focus the current level so keyboard users land on a sensible row.
+    useEffect(() => {
+        if (!open) {
+            setPendingInline(null);
+            setHighlightIdx(-1);
+            return;
+        }
+        const current = effectiveOptions.findIndex((o) => o.value === visibility);
+        const start = current >= 0 ? current : 0;
+        setHighlightIdx(start);
+        const raf = requestAnimationFrame(() => optionRefs.current[start]?.focus());
+        return () => cancelAnimationFrame(raf);
+    }, [open, effectiveOptions, visibility]);
+    const dialog = (_jsx(ConfirmDialog, { state: confirmState, onConfirm: handleConfirm, onCancel: handleCancel }));
+    const renderRows = (role) => effectiveOptions.map((option, index) => (_jsx(VisibilityOptionRow, { ref: (el) => {
+            optionRefs.current[index] = el;
+        }, option: option, role: role, isSelected: visibility === option.value, isHighlighted: role === "option" && highlightIdx === index, tabIndex: role === "radio"
+            ? visibility === option.value
+                ? 0
+                : -1
+            : highlightIdx === index
+                ? 0
+                : -1, disabled: effectivelyDisabled, onSelect: () => handleSelect(option), onMouseEnter: role === "option" ? () => setHighlightIdx(index) : undefined, onKeyDown: (e) => handleRowKeyDown(e, index) }, option.value)));
+    // ---- Create mode: inline radio list, applies immediately ---------------
+    if (mode === "create") {
+        return (_jsx("div", { role: "radiogroup", "aria-label": ariaLabel, "aria-disabled": effectivelyDisabled || undefined, className: cn("flex flex-col gap-0.5 rounded-md border border-border p-1", effectivelyDisabled && "pointer-events-none opacity-50", className), children: renderRows("radio") }));
+    }
+    // ---- Manage mode: current-state chip + popover ladder ------------------
+    const current = visibilityOption(visibility);
+    const pendingOption = pendingInline !== null
+        ? effectiveOptions.find((o) => o.value === pendingInline)
+        : undefined;
+    return (_jsxs(_Fragment, { children: [_jsxs(Popover.Root, { open: open, onOpenChange: setOpen, children: [_jsxs(Popover.Trigger, { disabled: effectivelyDisabled, "aria-label": `${ariaLabel}: ${current.label}`, className: cn(VISIBILITY_CHIP_CLASS, "transition-colors hover:bg-accent-hover hover:text-foreground", "focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", "disabled:pointer-events-none disabled:opacity-50", className), children: [isPending ? (_jsx("span", { className: "inline-block size-2.5 animate-spin rounded-full border-2 border-current border-t-transparent", "aria-hidden": "true" })) : (_jsx(VisibilityIcon, { tone: current.tone, className: "size-2.5" })), current.label, _jsx(CaretIcon, {})] }), _jsx(Popover.Portal, { container: portalContainer, children: _jsx(Popover.Positioner, { sideOffset: 4, align: "start", children: _jsxs(Popover.Popup, { role: "listbox", "aria-label": ariaLabel, className: cn("z-popover w-72 rounded-lg border border-border bg-popover p-1 shadow-md", "text-popover-foreground animate-in fade-in-0 zoom-in-95"), children: [renderRows("option"), pendingOption?.confirmPrompt && (_jsxs("div", { role: "alert", className: cn("mt-1 flex items-center gap-2 rounded-md border px-2.5 py-1.5", PROMPT_STYLES[pendingOption.tone].container), children: [_jsx("span", { className: cn("flex-1 text-[0.65rem] leading-snug", PROMPT_STYLES[pendingOption.tone].text), children: pendingOption.confirmPrompt }), _jsx("button", { type: "button", onClick: () => setPendingInline(null), className: cn("rounded px-2 py-0.5 text-[0.65rem] font-medium", "focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", PROMPT_STYLES[pendingOption.tone].cancel), children: "Cancel" }), _jsx("button", { type: "button", onClick: () => apply(pendingOption.value), className: cn("rounded px-2 py-0.5 text-[0.65rem] font-medium text-white", "focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", PROMPT_STYLES[pendingOption.tone].confirm), children: "Confirm" })] }))] }) }) })] }), dialog] }));
+}
+function CaretIcon() {
+    return (_jsx("svg", { className: "size-2.5 shrink-0 text-muted-foreground", viewBox: "0 0 12 12", fill: "none", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: _jsx("path", { d: "M3 4.5 6 7.5 9 4.5" }) }));
+}
+/**
+ * Read-only visibility indicator with a matching icon, covering all four
+ * levels (Private / Organization / Platform / Public).
+ *
+ * Rendered wherever the interactive {@link VisibilitySelector} is not
+ * available — for viewers who lack `can_edit`, and while a permission check
+ * is in flight — so a resource's visibility is always legible rather than
+ * silently blank. Shares the chip styling with the selector trigger so the
+ * read-only and editable states are visually consistent.
+ */
+export function VisibilityBadge({ visibility, className, }) {
+    const option = visibilityOption(visibility);
+    return (_jsxs("span", { className: cn(VISIBILITY_CHIP_CLASS, className), children: [_jsx(VisibilityIcon, { tone: option.tone, className: "size-2.5" }), option.label] }));
+}
+//# sourceMappingURL=VisibilitySelector.js.map