@stigmer/react 3.2.3 → 3.4.0

package/cursor-accounts/index.js

@@ -0,0 +1,13 @@
+// Data hooks
+export { useCursorAccounts } from "./useCursorAccounts.js";
+export { useCursorAccountView } from "./useCursorAccountView.js";
+// Behavior hooks
+export { useUpsertCursorAccount } from "./useUpsertCursorAccount.js";
+export { useDeleteCursorAccount } from "./useDeleteCursorAccount.js";
+export { useCursorMemberKeyActions } from "./useCursorMemberKeyActions.js";
+export { useSyncCursorAccount } from "./useSyncCursorAccount.js";
+// Styled components
+export { CursorAccountsConsole } from "./CursorAccountsConsole.js";
+export { CursorAccountEditor } from "./CursorAccountEditor.js";
+export { CursorAccountsAccessNotice } from "./CursorAccountsAccessNotice.js";
+//# sourceMappingURL=index.js.map

package/cursor-accounts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cursor-accounts/index.ts"],"names":[],"mappings":"AAAA,aAAa;AACb,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,iBAAiB;AACjB,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAKrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAM3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,oBAAoB;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC"}

package/cursor-accounts/useCursorAccountView.d.ts

@@ -0,0 +1,30 @@
+import type { CursorAccountView } from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/io_pb";
+/** Return value of {@link useCursorAccountView}. */
+export interface UseCursorAccountViewReturn {
+    /** The detail view, or `null` before the first successful fetch. */
+    readonly view: CursorAccountView | null;
+    /** `true` while the initial fetch is in flight. */
+    readonly isLoading: boolean;
+    /** `true` while a background refetch is in flight and stale data is shown. */
+    readonly isRefetching: boolean;
+    /** Error from the last failed request, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Discard cached data and re-fetch from the server. */
+    readonly refetch: () => void;
+}
+/**
+ * Data hook for one Cursor account's detail view: the redacted account,
+ * the latest roster/spend snapshot, and the server-computed coverage
+ * join (per-key owner state and cycle spend, active members without
+ * keys).
+ *
+ * Pass `null` as `accountId` to skip fetching (e.g. while the console is
+ * on the list phase).
+ *
+ * @example
+ * ```tsx
+ * const { view, isLoading, refetch } = useCursorAccountView(accountId);
+ * ```
+ */
+export declare function useCursorAccountView(accountId: string | null): UseCursorAccountViewReturn;
+//# sourceMappingURL=useCursorAccountView.d.ts.map

package/cursor-accounts/useCursorAccountView.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCursorAccountView.d.ts","sourceRoot":"","sources":["../../src/cursor-accounts/useCursorAccountView.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4DAA4D,CAAC;AAIpG,oDAAoD;AACpD,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACxC,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,0BAA0B,CAY5B"}

package/cursor-accounts/useCursorAccountView.js

@@ -0,0 +1,25 @@
+"use client";
+import { useStigmer } from "../hooks.js";
+import { useFetch } from "../internal/useFetch.js";
+/**
+ * Data hook for one Cursor account's detail view: the redacted account,
+ * the latest roster/spend snapshot, and the server-computed coverage
+ * join (per-key owner state and cycle spend, active members without
+ * keys).
+ *
+ * Pass `null` as `accountId` to skip fetching (e.g. while the console is
+ * on the list phase).
+ *
+ * @example
+ * ```tsx
+ * const { view, isLoading, refetch } = useCursorAccountView(accountId);
+ * ```
+ */
+export function useCursorAccountView(accountId) {
+    const stigmer = useStigmer();
+    const { data: view, isLoading, isRefetching, error, refetch } = useFetch(accountId
+        ? () => stigmer.cursorAccounts.getAccountView(accountId)
+        : null, [accountId, stigmer], null);
+    return { view, isLoading, isRefetching, error, refetch };
+}
+//# sourceMappingURL=useCursorAccountView.js.map

package/cursor-accounts/useCursorAccountView.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCursorAccountView.js","sourceRoot":"","sources":["../../src/cursor-accounts/useCursorAccountView.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAGb,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAgBnD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAwB;IAExB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,CACtE,SAAS;QACP,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,cAAc,CAAC,SAAS,CAAC;QACxD,CAAC,CAAC,IAAI,EACR,CAAC,SAAS,EAAE,OAAO,CAAC,EACpB,IAAgC,CACjC,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC3D,CAAC"}

package/cursor-accounts/useCursorAccounts.d.ts

@@ -0,0 +1,33 @@
+import type { CursorAccountsResponse } from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/io_pb";
+/** Return value of {@link useCursorAccounts}. */
+export interface UseCursorAccountsReturn {
+    /** The account summaries, or `null` before the first successful fetch. */
+    readonly accounts: CursorAccountsResponse | null;
+    /** `true` while the initial fetch is in flight. */
+    readonly isLoading: boolean;
+    /** `true` while a background refetch is in flight and stale data is shown. */
+    readonly isRefetching: boolean;
+    /** Error from the last failed request, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Discard cached data and re-fetch from the server. */
+    readonly refetch: () => void;
+}
+/**
+ * Data hook that lists every managed Cursor account with its routing and
+ * sync summary (enabled member key count, last-synced timestamp). Key
+ * material is always redacted server-side.
+ *
+ * Platform-operator surface: the caller needs
+ * `can_manage_cursor_accounts` on `platform:stigmer`.
+ *
+ * Pass `enabled: false` to skip fetching (stable no-op).
+ *
+ * @example
+ * ```tsx
+ * const { accounts, isLoading, refetch } = useCursorAccounts();
+ * ```
+ */
+export declare function useCursorAccounts(options?: {
+    readonly enabled?: boolean;
+}): UseCursorAccountsReturn;
+//# sourceMappingURL=useCursorAccounts.d.ts.map

package/cursor-accounts/useCursorAccounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCursorAccounts.d.ts","sourceRoot":"","sources":["../../src/cursor-accounts/useCursorAccounts.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4DAA4D,CAAC;AAIzG,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACjD,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GACvC,uBAAuB,CAWzB"}

package/cursor-accounts/useCursorAccounts.js

@@ -0,0 +1,25 @@
+"use client";
+import { useStigmer } from "../hooks.js";
+import { useFetch } from "../internal/useFetch.js";
+/**
+ * Data hook that lists every managed Cursor account with its routing and
+ * sync summary (enabled member key count, last-synced timestamp). Key
+ * material is always redacted server-side.
+ *
+ * Platform-operator surface: the caller needs
+ * `can_manage_cursor_accounts` on `platform:stigmer`.
+ *
+ * Pass `enabled: false` to skip fetching (stable no-op).
+ *
+ * @example
+ * ```tsx
+ * const { accounts, isLoading, refetch } = useCursorAccounts();
+ * ```
+ */
+export function useCursorAccounts(options) {
+    const stigmer = useStigmer();
+    const enabled = options?.enabled ?? true;
+    const { data: accounts, isLoading, isRefetching, error, refetch } = useFetch(enabled ? () => stigmer.cursorAccounts.listAccounts() : null, [enabled, stigmer], null);
+    return { accounts, isLoading, isRefetching, error, refetch };
+}
+//# sourceMappingURL=useCursorAccounts.js.map

package/cursor-accounts/useCursorAccounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCursorAccounts.js","sourceRoot":"","sources":["../../src/cursor-accounts/useCursorAccounts.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAGb,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAgBnD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAwC;IAExC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;IAEzC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,CAC1E,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,EAC5D,CAAC,OAAO,EAAE,OAAO,CAAC,EAClB,IAAqC,CACtC,CAAC;IAEF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC"}

package/cursor-accounts/useCursorMemberKeyActions.d.ts

@@ -0,0 +1,49 @@
+import type { CursorAccount } from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/cursor_account_pb";
+/** Input for adding one member key. */
+export interface AddCursorMemberKeyInput {
+    readonly accountId: string;
+    /**
+     * Plaintext user-scoped Cursor API key. The server identifies it via
+     * Cursor's `/v1/me` and binds it to its owning team member; admin and
+     * service-account keys are rejected with Cursor's own explanation —
+     * surface the error verbatim.
+     */
+    readonly apiKey: string;
+    /** Optional operator label. */
+    readonly label?: string;
+}
+/** Input for removing one member key. */
+export interface RemoveCursorMemberKeyInput {
+    readonly accountId: string;
+    readonly keyId: string;
+    /**
+     * Removal is refused while live sessions are pinned to this key.
+     * `force: true` overrides; prefer disabling (always safe).
+     */
+    readonly force?: boolean;
+}
+/** Return value of {@link useCursorMemberKeyActions}. */
+export interface UseCursorMemberKeyActionsReturn {
+    /** Add one execution-capable member key. Returns the redacted account. */
+    readonly addKey: (input: AddCursorMemberKeyInput) => Promise<CursorAccount>;
+    /** Remove one member key (live-pin guarded). */
+    readonly removeKey: (input: RemoveCursorMemberKeyInput) => Promise<CursorAccount>;
+    /** Enable/disable one key for NEW-session selection (pins unaffected). */
+    readonly setKeyEnabled: (accountId: string, keyId: string, enabled: boolean) => Promise<CursorAccount>;
+    /** `true` while any key mutation is in flight. */
+    readonly isSubmitting: boolean;
+    /** Error from the last failed attempt, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Reset `error` to `null`. */
+    readonly clearError: () => void;
+}
+/**
+ * Behavior hook bundling the member-key mutations of one Cursor account —
+ * add, remove, enable/disable. One hook because the console's key panel
+ * performs all three and they share submit/error surfaces.
+ *
+ * Rotation is deliberately remove + add (no in-place key swap), so the
+ * server-side `/v1/me` identity binding can never go stale.
+ */
+export declare function useCursorMemberKeyActions(): UseCursorMemberKeyActionsReturn;
+//# sourceMappingURL=useCursorMemberKeyActions.d.ts.map

package/cursor-accounts/useCursorMemberKeyActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCursorMemberKeyActions.d.ts","sourceRoot":"","sources":["../../src/cursor-accounts/useCursorMemberKeyActions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wEAAwE,CAAC;AAI5G,uCAAuC;AACvC,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,yCAAyC;AACzC,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,yDAAyD;AACzD,MAAM,WAAW,+BAA+B;IAC9C,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5E,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAClF,0EAA0E;IAC1E,QAAQ,CAAC,aAAa,EAAE,CACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,IAAI,+BAA+B,CA6C3E"}

package/cursor-accounts/useCursorMemberKeyActions.js

@@ -0,0 +1,38 @@
+"use client";
+import { useCallback, useState } from "react";
+import { useStigmer } from "../hooks.js";
+import { toError } from "../internal/toError.js";
+/**
+ * Behavior hook bundling the member-key mutations of one Cursor account —
+ * add, remove, enable/disable. One hook because the console's key panel
+ * performs all three and they share submit/error surfaces.
+ *
+ * Rotation is deliberately remove + add (no in-place key swap), so the
+ * server-side `/v1/me` identity binding can never go stale.
+ */
+export function useCursorMemberKeyActions() {
+    const stigmer = useStigmer();
+    const [isSubmitting, setIsSubmitting] = useState(false);
+    const [error, setError] = useState(null);
+    const run = useCallback(async (op) => {
+        setIsSubmitting(true);
+        setError(null);
+        try {
+            return await op();
+        }
+        catch (e) {
+            const err = toError(e);
+            setError(err);
+            throw err;
+        }
+        finally {
+            setIsSubmitting(false);
+        }
+    }, []);
+    const addKey = useCallback((input) => run(() => stigmer.cursorAccounts.addMemberKey(input)), [run, stigmer.cursorAccounts]);
+    const removeKey = useCallback((input) => run(() => stigmer.cursorAccounts.removeMemberKey(input)), [run, stigmer.cursorAccounts]);
+    const setKeyEnabled = useCallback((accountId, keyId, enabled) => run(() => stigmer.cursorAccounts.setMemberKeyEnabled({ accountId, keyId, enabled })), [run, stigmer.cursorAccounts]);
+    const clearError = useCallback(() => setError(null), []);
+    return { addKey, removeKey, setKeyEnabled, isSubmitting, error, clearError };
+}
+//# sourceMappingURL=useCursorMemberKeyActions.js.map

package/cursor-accounts/useCursorMemberKeyActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCursorMemberKeyActions.js","sourceRoot":"","sources":["../../src/cursor-accounts/useCursorMemberKeyActions.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AA+CjD;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,WAAW,CACrB,KAAK,EAAE,EAAgC,EAA0B,EAAE;QACjE,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,eAAe,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,EACD,EAAE,CACH,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CACxB,CAAC,KAA8B,EAAE,EAAE,CACjC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EACvD,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAC9B,CAAC;IAEF,MAAM,SAAS,GAAG,WAAW,CAC3B,CAAC,KAAiC,EAAE,EAAE,CACpC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAC1D,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAC9B,CAAC;IAEF,MAAM,aAAa,GAAG,WAAW,CAC/B,CAAC,SAAiB,EAAE,KAAa,EAAE,OAAgB,EAAE,EAAE,CACrD,GAAG,CAAC,GAAG,EAAE,CACP,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAC1E,EACH,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAC9B,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC/E,CAAC"}

package/cursor-accounts/useDeleteCursorAccount.d.ts

@@ -0,0 +1,30 @@
+import type { CursorAccount } from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/cursor_account_pb";
+/** Input for {@link useDeleteCursorAccount}. */
+export interface DeleteCursorAccountInput {
+    readonly accountId: string;
+    /**
+     * Deletion is refused (FAILED_PRECONDITION) while live sessions are
+     * pinned to the account's keys. `force: true` overrides — their Cursor
+     * agent handles will be orphaned at disposal. Prefer disabling the
+     * account, which is always safe.
+     */
+    readonly force?: boolean;
+}
+/** Return value of {@link useDeleteCursorAccount}. */
+export interface UseDeleteCursorAccountReturn {
+    /** Delete the account (plus its snapshots and session pins). */
+    readonly remove: (input: DeleteCursorAccountInput) => Promise<CursorAccount>;
+    /** `true` while a delete is in flight. */
+    readonly isSubmitting: boolean;
+    /** Error from the last failed attempt, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Reset `error` to `null`. */
+    readonly clearError: () => void;
+}
+/**
+ * Behavior hook for deleting a managed Cursor account. The live-pin
+ * guard's FAILED_PRECONDITION message carries the pinned session count —
+ * surface it verbatim so the operator can choose disable-instead.
+ */
+export declare function useDeleteCursorAccount(): UseDeleteCursorAccountReturn;
+//# sourceMappingURL=useDeleteCursorAccount.d.ts.map

package/cursor-accounts/useDeleteCursorAccount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDeleteCursorAccount.d.ts","sourceRoot":"","sources":["../../src/cursor-accounts/useDeleteCursorAccount.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wEAAwE,CAAC;AAI5G,gDAAgD;AAChD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,sDAAsD;AACtD,MAAM,WAAW,4BAA4B;IAC3C,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,wBAAwB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC7E,0CAA0C;IAC1C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,4BAA4B,CAyBrE"}

package/cursor-accounts/useDeleteCursorAccount.js

@@ -0,0 +1,32 @@
+"use client";
+import { useCallback, useState } from "react";
+import { useStigmer } from "../hooks.js";
+import { toError } from "../internal/toError.js";
+/**
+ * Behavior hook for deleting a managed Cursor account. The live-pin
+ * guard's FAILED_PRECONDITION message carries the pinned session count —
+ * surface it verbatim so the operator can choose disable-instead.
+ */
+export function useDeleteCursorAccount() {
+    const stigmer = useStigmer();
+    const [isSubmitting, setIsSubmitting] = useState(false);
+    const [error, setError] = useState(null);
+    const remove = useCallback(async (input) => {
+        setIsSubmitting(true);
+        setError(null);
+        try {
+            return await stigmer.cursorAccounts.deleteAccount(input);
+        }
+        catch (e) {
+            const err = toError(e);
+            setError(err);
+            throw err;
+        }
+        finally {
+            setIsSubmitting(false);
+        }
+    }, [stigmer.cursorAccounts]);
+    const clearError = useCallback(() => setError(null), []);
+    return { remove, isSubmitting, error, clearError };
+}
+//# sourceMappingURL=useDeleteCursorAccount.js.map

package/cursor-accounts/useDeleteCursorAccount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDeleteCursorAccount.js","sourceRoot":"","sources":["../../src/cursor-accounts/useDeleteCursorAccount.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AA0BjD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,KAA+B,EAA0B,EAAE;QAChE,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,eAAe,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,CAAC,cAAc,CAAC,CACzB,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC"}

package/cursor-accounts/useSyncCursorAccount.d.ts

@@ -0,0 +1,23 @@
+import type { CursorAccountView } from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/io_pb";
+/** Return value of {@link useSyncCursorAccount}. */
+export interface UseSyncCursorAccountReturn {
+    /**
+     * Run an on-demand roster + spend sync and return the refreshed view.
+     * The Cursor Admin API is rate-limited (20 req/min, poll-hourly
+     * guidance) — `isSyncing` should disable the trigger while in flight,
+     * and callers should not poll this.
+     */
+    readonly sync: (accountId: string) => Promise<CursorAccountView>;
+    /** `true` while a sync is in flight. */
+    readonly isSyncing: boolean;
+    /** Error from the last failed attempt, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Reset `error` to `null`. */
+    readonly clearError: () => void;
+}
+/**
+ * Behavior hook for the console's "Sync now" — the same server-side sync
+ * the hourly schedule runs, on demand.
+ */
+export declare function useSyncCursorAccount(): UseSyncCursorAccountReturn;
+//# sourceMappingURL=useSyncCursorAccount.d.ts.map

package/cursor-accounts/useSyncCursorAccount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useSyncCursorAccount.d.ts","sourceRoot":"","sources":["../../src/cursor-accounts/useSyncCursorAccount.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4DAA4D,CAAC;AAIpG,oDAAoD;AACpD,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;CACjC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,0BAA0B,CAyBjE"}

package/cursor-accounts/useSyncCursorAccount.js

@@ -0,0 +1,31 @@
+"use client";
+import { useCallback, useState } from "react";
+import { useStigmer } from "../hooks.js";
+import { toError } from "../internal/toError.js";
+/**
+ * Behavior hook for the console's "Sync now" — the same server-side sync
+ * the hourly schedule runs, on demand.
+ */
+export function useSyncCursorAccount() {
+    const stigmer = useStigmer();
+    const [isSyncing, setIsSyncing] = useState(false);
+    const [error, setError] = useState(null);
+    const sync = useCallback(async (accountId) => {
+        setIsSyncing(true);
+        setError(null);
+        try {
+            return await stigmer.cursorAccounts.syncAccount(accountId);
+        }
+        catch (e) {
+            const err = toError(e);
+            setError(err);
+            throw err;
+        }
+        finally {
+            setIsSyncing(false);
+        }
+    }, [stigmer.cursorAccounts]);
+    const clearError = useCallback(() => setError(null), []);
+    return { sync, isSyncing, error, clearError };
+}
+//# sourceMappingURL=useSyncCursorAccount.js.map

package/cursor-accounts/useSyncCursorAccount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useSyncCursorAccount.js","sourceRoot":"","sources":["../../src/cursor-accounts/useSyncCursorAccount.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAmBjD;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,SAAiB,EAA8B,EAAE;QACtD,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,CAAC,cAAc,CAAC,CACzB,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAChD,CAAC"}

package/cursor-accounts/useUpsertCursorAccount.d.ts

@@ -0,0 +1,26 @@
+import type { CursorAccount } from "@stigmer/protos/ai/stigmer/platform/cursoraccount/v1/cursor_account_pb";
+/** Return value of {@link useUpsertCursorAccount}. */
+export interface UseUpsertCursorAccountReturn {
+    /**
+     * Create (empty `accountId`) or update a Cursor account. The admin key
+     * is plaintext to set/rotate or the `***REDACTED***` marker to keep the
+     * stored value; the server validates new keys live against Cursor's
+     * `/teams/members` before persisting. Returns the redacted account.
+     */
+    readonly upsert: (account: CursorAccount) => Promise<CursorAccount>;
+    /** `true` while a save is in flight. */
+    readonly isSubmitting: boolean;
+    /** Error from the last failed attempt, or `null` when healthy. */
+    readonly error: Error | null;
+    /** Reset `error` to `null`. */
+    readonly clearError: () => void;
+}
+/**
+ * Behavior hook for creating or updating a managed Cursor account.
+ *
+ * The parent should refetch its list/detail view after a successful
+ * save — org assignments affect key selection within the proxy's cache
+ * TTL (~5 minutes).
+ */
+export declare function useUpsertCursorAccount(): UseUpsertCursorAccountReturn;
+//# sourceMappingURL=useUpsertCursorAccount.d.ts.map

package/cursor-accounts/useUpsertCursorAccount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useUpsertCursorAccount.d.ts","sourceRoot":"","sources":["../../src/cursor-accounts/useUpsertCursorAccount.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wEAAwE,CAAC;AAI5G,sDAAsD;AACtD,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,wCAAwC;IACxC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,4BAA4B,CAyBrE"}

package/cursor-accounts/useUpsertCursorAccount.js

@@ -0,0 +1,34 @@
+"use client";
+import { useCallback, useState } from "react";
+import { useStigmer } from "../hooks.js";
+import { toError } from "../internal/toError.js";
+/**
+ * Behavior hook for creating or updating a managed Cursor account.
+ *
+ * The parent should refetch its list/detail view after a successful
+ * save — org assignments affect key selection within the proxy's cache
+ * TTL (~5 minutes).
+ */
+export function useUpsertCursorAccount() {
+    const stigmer = useStigmer();
+    const [isSubmitting, setIsSubmitting] = useState(false);
+    const [error, setError] = useState(null);
+    const upsert = useCallback(async (account) => {
+        setIsSubmitting(true);
+        setError(null);
+        try {
+            return await stigmer.cursorAccounts.upsertAccount({ account });
+        }
+        catch (e) {
+            const err = toError(e);
+            setError(err);
+            throw err;
+        }
+        finally {
+            setIsSubmitting(false);
+        }
+    }, [stigmer.cursorAccounts]);
+    const clearError = useCallback(() => setError(null), []);
+    return { upsert, isSubmitting, error, clearError };
+}
+//# sourceMappingURL=useUpsertCursorAccount.js.map

package/cursor-accounts/useUpsertCursorAccount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useUpsertCursorAccount.js","sourceRoot":"","sources":["../../src/cursor-accounts/useUpsertCursorAccount.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAmBjD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,OAAsB,EAA0B,EAAE;QACvD,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,eAAe,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,CAAC,cAAc,CAAC,CACzB,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC"}

package/datastore/CollectionRecordsBrowser.d.ts

@@ -0,0 +1,34 @@
+import { type DatastoreSpec } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/spec_pb";
+/** Props for {@link CollectionRecordsBrowser}. */
+export interface CollectionRecordsBrowserProps {
+    /** Organization slug. */
+    readonly org: string;
+    /** Datastore slug. */
+    readonly datastoreSlug: string;
+    /** The datastore spec — collections and fields drive the grid columns. */
+    readonly spec: DatastoreSpec;
+    /** Additional CSS classes for the root container. */
+    readonly className?: string;
+}
+/**
+ * The records browser (DD-008 SD-3): collection selector, partition
+ * picker, schema-aware filter builder, typed-cell grid, RPC-paged
+ * navigation, and verb-gated write affordances — the console surface
+ * that absorbs the Supabase-dashboard capability the datastore
+ * primitive retires.
+ *
+ * Authorization is rendered as the two layers it is:
+ * - Write affordances gate on `describeDatastore`'s per-collection
+ *   effective verbs (projections, never authority — the server's
+ *   record layer stays the enforcer).
+ * - **The denied state is a first-class render**, driven primarily by
+ *   empty access lists (deny-by-default renders as empty access, never
+ *   an error) with a caught reach-level `PERMISSION_DENIED` as the
+ *   defensive branch. Both show the relayable message plus operator
+ *   guidance — never a silently empty grid.
+ *
+ * All visual properties flow through `--stgm-*` design tokens.
+ * Zero Console dependencies — safe for platform builder embedding.
+ */
+export declare function CollectionRecordsBrowser({ org, datastoreSlug, spec, className, }: CollectionRecordsBrowserProps): import("react/jsx-runtime").JSX.Element | null;
+//# sourceMappingURL=CollectionRecordsBrowser.d.ts.map

package/datastore/CollectionRecordsBrowser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CollectionRecordsBrowser.d.ts","sourceRoot":"","sources":["../../src/datastore/CollectionRecordsBrowser.tsx"],"names":[],"mappings":"AAMA,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,yDAAyD,CAAC;AAuBjE,kDAAkD;AAClD,MAAM,WAAW,6BAA6B;IAC5C,yBAAyB;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,sBAAsB;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAID;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,GAAG,EACH,aAAa,EACb,IAAI,EACJ,SAAS,GACV,EAAE,6BAA6B,kDA6F/B"}