@stigmer/react 3.41.0 → 3.41.1-dev.20261003094357.g39d6aa748646

package/src/dashboard/useDashboardSummary.ts

@@ -17,10 +17,8 @@ import type { DashboardSummary } from "./types.js";
 
 /** Options for {@link useDashboardSummary}. */
 export interface UseDashboardSummaryOptions {
-  /** Organization slug for execution summaries. */
+  /** The organization whose execution summaries and usage report to read. */
   readonly org: string | null | undefined;
-  /** Organization ID (metadata.id) for the usage report. */
-  readonly orgId: string | null | undefined;
   /** Refetch interval in milliseconds. @default 60_000 */
   readonly refetchInterval?: number;
 }
@@ -66,7 +64,7 @@ export function useDashboardSummary(
 
   const dateRange = useMemo(() => dateRangeFromPreset("7d"), []);
   const { report: orgUsage, isLoading: usageLoading, error: usageError, refetch: usageRefetch } =
-    useOrgUsageReport(options.orgId ?? null, dateRange);
+    useOrgUsageReport(options.org ?? null, dateRange);
 
   const isLoading = wfLoading || agLoading || usageLoading;
   const error = wfError ?? agError ?? usageError;

package/src/environment/EnvironmentListPanel.tsx

@@ -10,6 +10,7 @@ import { EditResourceYamlDialog } from "../manifest/EditResourceYamlDialog.js";
 import { useEnvironmentList } from "./useEnvironmentList.js";
 import { EnvironmentVariableEditor } from "./EnvironmentVariableEditor.js";
 import { isShareRestrictedEnvironment } from "./shareRestriction.js";
+import { LoadingRegion } from "../internal/LoadingRegion.js";
 
 // ---------------------------------------------------------------------------
 // Public API
@@ -132,10 +133,9 @@ export function EnvironmentListPanel({
 
   if (isLoading) {
     return (
-      <div
+      <LoadingRegion
         className={cn("stg:space-y-2", className)}
-        aria-busy="true"
-        aria-label="Loading environments"
+        label="Loading environments"
       >
         {Array.from({ length: 2 }, (_, i) => (
           <div
@@ -143,7 +143,7 @@ export function EnvironmentListPanel({
             className="stg:bg-muted-subtle stg:h-14 stg:animate-pulse stg:rounded-lg"
           />
         ))}
-      </div>
+      </LoadingRegion>
     );
   }
 

package/src/environment/EnvironmentVariableEditor.tsx

@@ -18,6 +18,7 @@ import { useUpdateEnvironmentVariables } from "./useUpdateEnvironmentVariables.j
 import { useRemoveEnvironmentVariables } from "./useRemoveEnvironmentVariables.js";
 import { useRevealSecretValue } from "./useRevealSecretValue.js";
 import { SpinnerIcon } from "../internal/SpinnerIcon.js";
+import { LoadingRegion } from "../internal/LoadingRegion.js";
 
 // ---------------------------------------------------------------------------
 // Public API
@@ -152,10 +153,9 @@ export function EnvironmentVariableEditor({
 
   if (isLoading) {
     return (
-      <div
+      <LoadingRegion
         className={cn("stg:space-y-2", className)}
-        aria-busy="true"
-        aria-label="Loading variables"
+        label="Loading variables"
       >
         {Array.from({ length: 3 }, (_, i) => (
           <div
@@ -164,7 +164,7 @@ export function EnvironmentVariableEditor({
             style={{ width: `${85 - i * 10}%` }}
           />
         ))}
-      </div>
+      </LoadingRegion>
     );
   }
 

package/src/execution/ArtifactFileContent.tsx

@@ -4,6 +4,7 @@
 // unavailable / text). Domain: execution (data-model-agnostic).
 
 import { ArtifactContentRenderer } from "./ArtifactContentRenderer.js";
+import { LoadingRegion } from "../internal/LoadingRegion.js";
 
 /** Props for {@link ArtifactFileContent}. */
 export interface ArtifactFileContentProps {
@@ -44,7 +45,7 @@ export function ArtifactFileContent({
 }: ArtifactFileContentProps) {
   if (isLoading) {
     return (
-      <div className="stg:space-y-2 stg:p-4" aria-busy="true" aria-label="Loading content">
+      <LoadingRegion className="stg:space-y-2 stg:p-4" label="Loading content">
         {SKELETON_LINE_WIDTHS.map((width, i) => (
           <div
             key={i}
@@ -53,7 +54,7 @@ export function ArtifactFileContent({
             aria-hidden="true"
           />
         ))}
-      </div>
+      </LoadingRegion>
     );
   }
 

package/src/execution/McpToolDetail.tsx

@@ -19,6 +19,7 @@ import { execIdFromStorageKey } from "./useFileChangeContent.js";
 import { useArtifactDownloadUrl } from "./useArtifactDownloadUrl.js";
 import { useArtifactDownload } from "./useArtifactDownload.js";
 import { useToolOutputContent } from "./useToolOutputContent.js";
+import { LoadingRegion } from "../internal/LoadingRegion.js";
 
 /** Props for {@link McpToolDetail}. */
 export interface McpToolDetailProps {
@@ -115,10 +116,9 @@ function McpOffloadedImage({ storageKey }: { readonly storageKey: string }) {
   }
   if (!url) {
     return (
-      <div
+      <LoadingRegion
         className="stg:h-40 stg:w-64 stg:animate-pulse stg:rounded-md stg:border stg:border-border stg:bg-muted"
-        aria-busy="true"
-        aria-label="Loading image output"
+        label="Loading image output"
       />
     );
   }

package/src/execution/ResultView.tsx

@@ -25,6 +25,7 @@ import { execIdFromStorageKey } from "./useFileChangeContent.js";
 import { useArtifactDownloadUrl } from "./useArtifactDownloadUrl.js";
 import { useArtifactDownload } from "./useArtifactDownload.js";
 import { useToolOutputContent } from "./useToolOutputContent.js";
+import { LoadingRegion } from "../internal/LoadingRegion.js";
 
 /** Props for {@link ResultView}. */
 export interface ResultViewProps {
@@ -509,10 +510,9 @@ function OutputRefImage({ storageKey, className }: { storageKey: string; classNa
   }
   if (!url) {
     return (
-      <div
+      <LoadingRegion
         className={cn("stg:h-40 stg:w-64 stg:animate-pulse stg:rounded-md stg:border stg:border-border stg:bg-muted", className)}
-        aria-busy="true"
-        aria-label="Loading image output"
+        label="Loading image output"
       />
     );
   }

package/src/execution/TerminalSession.tsx

@@ -128,7 +128,7 @@ export function TerminalTail({
   const combined = [stdout, stderr]
     .filter((s): s is string => Boolean(s))
     .join("\n")
-    .replace(/\s+$/, "");
+    .trimEnd();
   const lines = combined ? normalize(combined).split("\n") : [];
   const tail = lines.slice(-TAIL_LINE_LIMIT);
   const hiddenCount = lines.length - tail.length;

package/src/execution/ThreadSkeleton.tsx

@@ -1,6 +1,7 @@
 "use client";
 
 import { cn } from "@stigmer/theme";
+import { LoadingRegion } from "../internal/LoadingRegion.js";
 
 /** Props for {@link ThreadSkeleton}. */
 export interface ThreadSkeletonProps {
@@ -30,10 +31,9 @@ const AI_LINE_WIDTHS = [
  */
 export function ThreadSkeleton({ className }: ThreadSkeletonProps) {
   return (
-    <div
+    <LoadingRegion
       className={cn("stg:flex stg:flex-col stg:gap-4 stg:pt-6 stg:pb-4", className)}
-      aria-busy="true"
-      aria-label="Loading conversation"
+      label="Loading conversation"
     >
       <div className="stg:animate-pulse stg:space-y-4">
         {/* Turn 1: Human bubble */}
@@ -68,6 +68,6 @@ export function ThreadSkeleton({ className }: ThreadSkeletonProps) {
           ))}
         </div>
       </div>
-    </div>
+    </LoadingRegion>
   );
 }

package/src/execution/file-path-resolver.ts

@@ -1,4 +1,5 @@
 import type { WorkspaceEntry } from "@stigmer/protos/ai/stigmer/agentic/session/v1/workspace_pb";
+import { trimTrailing } from "../internal/trim.js";
 
 const PLATFORM_PREFIX = ".stigmer/";
 const PLATFORM_DIR_NAME = ".stigmer";
@@ -71,7 +72,7 @@ export interface DisplayPath {
  */
 export function splitDisplayPath(path: string): DisplayPath {
   if (!path) return { dir: "", base: "" };
-  const trimmed = path.replace(/\/+$/, "");
+  const trimmed = trimTrailing(path, "/");
   const idx = trimmed.lastIndexOf("/");
   if (idx < 0) return { dir: "", base: trimmed };
   const base = trimmed.slice(idx + 1);
@@ -239,7 +240,7 @@ function matchWorkspaceEntry(
 
 function joinLocalPath(base: string, rel: string): string {
   if (!rel) return base;
-  const cleanBase = base.replace(/\/+$/, "");
+  const cleanBase = trimTrailing(base, "/");
   const cleanRel = rel.replace(/^\/+/, "");
   return `${cleanBase}/${cleanRel}`;
 }

package/src/execution/sandbox-path-normalizer.ts

@@ -9,6 +9,7 @@
  *
  * @module
  */
+import { trimTrailing } from "../internal/trim.js";
 
 /**
  * Replace absolute sandbox workspace paths with workspace-relative
@@ -49,7 +50,7 @@ export function normalizeSandboxPaths(
 ): string {
   if (!text || !workspaceRoot) return text;
 
-  const wsRoot = workspaceRoot.replace(/\/+$/, "");
+  const wsRoot = trimTrailing(workspaceRoot, "/");
 
   // 1) Strip workspace root prefix (with trailing slash) → workspace-relative
   text = replaceAll(text, wsRoot + "/", "");

package/src/github/parseGitUrl.ts

@@ -9,7 +9,7 @@ export interface ParsedGitRepo {
   readonly repo: string;
 }
 
-const GITHUB_URL_RE = /github\.com[/:]([^/]+)\/([^/.]+?)(?:\.git)?$/;
+const GITHUB_HOST = "github.com";
 
 /**
  * Extract the owner and repository name from a GitHub URL.
@@ -22,7 +22,16 @@ const GITHUB_URL_RE = /github\.com[/:]([^/]+)\/([^/.]+?)(?:\.git)?$/;
  * Returns `null` for non-GitHub or unparseable URLs.
  */
 export function parseGitUrl(url: string): ParsedGitRepo | null {
-  const match = url.match(GITHUB_URL_RE);
-  if (!match) return null;
-  return { owner: match[1], repo: match[2] };
+  // Read by position rather than by a pattern: the lazy repository group of
+  // `github\.com[/:]([^/]+)\/([^/.]+?)(?:\.git)?$` backtracks on a long input.
+  const at = url.indexOf(GITHUB_HOST);
+  if (at === -1) return null;
+  const separator = url[at + GITHUB_HOST.length];
+  if (separator !== "/" && separator !== ":") return null;
+  const parts = url.slice(at + GITHUB_HOST.length + 1).split("/");
+  if (parts.length !== 2) return null;
+  const [owner, name] = parts as [string, string];
+  const repo = name.endsWith(".git") ? name.slice(0, -".git".length) : name;
+  if (owner === "" || repo === "" || repo.includes(".")) return null;
+  return { owner, repo };
 }

package/src/iam-policy/GrantAccessForm.tsx

@@ -45,7 +45,7 @@ export interface GrantAccessFormProps {
    * Organization whose people (and teams) can be granted access. Drives
    * the {@link PrincipalPicker} typeahead.
    */
-  readonly orgId: string;
+  readonly org: string;
   /**
    * Offer the organization's teams beside its people. Set it where the
    * resource can be shared with a team (`useShareFlow().canShareWithTeams`).
@@ -72,7 +72,7 @@ export interface GrantAccessFormProps {
  *   resourceKind={ApiResourceKind.agent}
  *   resourceKindString="agent"
  *   resourceId={agentId}
- *   orgId={orgId}
+ *   org={org}
  *   includeTeams={share.canShareWithTeams}
  *   onGranted={() => share.refetch()}
  *   onCancel={() => setShowForm(false)}
@@ -83,7 +83,7 @@ export function GrantAccessForm({
   resourceKind,
   resourceKindString,
   resourceId,
-  orgId,
+  org,
   includeTeams = false,
   excludeGrantees,
   onGranted,
@@ -150,7 +150,7 @@ export function GrantAccessForm({
     <form onSubmit={handleSubmit} className={cn("stg:space-y-3", className)}>
       <div className="stg:space-y-3">
         <PrincipalPicker
-          orgId={orgId}
+          org={org}
           value={grantee}
           onChange={chooseGrantee}
           includeTeams={includeTeams}

package/src/iam-policy/OrgMembersPanel.tsx

@@ -26,6 +26,7 @@ import { useDeleteIamPolicy } from "./useDeleteIamPolicy.js";
 import { RoleSelector } from "./RoleSelector.js";
 import { ProviderBadge } from "./ProviderBadge.js";
 import { SpinnerIcon } from "../internal/SpinnerIcon.js";
+import { LoadingRegion } from "../internal/LoadingRegion.js";
 
 // ---------------------------------------------------------------------------
 // Public API
@@ -34,7 +35,7 @@ import { SpinnerIcon } from "../internal/SpinnerIcon.js";
 /** Props for {@link OrgMembersPanel}. */
 export interface OrgMembersPanelProps {
   /** Organization ID (`metadata.id`) whose members to manage. */
-  readonly orgId: string;
+  readonly org: string;
   /** Exposed refetch for parent-triggered refresh. */
   readonly onRefetchRef?: (refetch: () => void) => void;
   /** Additional CSS class names for the root container. */
@@ -71,11 +72,11 @@ export interface OrgMembersPanelProps {
  *
  * @example
  * ```tsx
- * <OrgMembersPanel orgId={activeOrg.metadata.id} />
+ * <OrgMembersPanel org={activeOrg.metadata.id} />
  * ```
  */
 export function OrgMembersPanel({
-  orgId,
+  org: orgId,
   onRefetchRef,
   className,
 }: OrgMembersPanelProps) {
@@ -127,10 +128,9 @@ export function OrgMembersPanel({
 
   if (isLoading) {
     return (
-      <div
+      <LoadingRegion
         className={cn("stg:space-y-2", className)}
-        aria-busy="true"
-        aria-label="Loading members"
+        label="Loading members"
       >
         {Array.from({ length: 3 }, (_, i) => (
           <div
@@ -138,7 +138,7 @@ export function OrgMembersPanel({
             className="stg:bg-muted-subtle stg:h-14 stg:animate-pulse stg:rounded-lg"
           />
         ))}
-      </div>
+      </LoadingRegion>
     );
   }
 

package/src/iam-policy/PeopleWithAccess.tsx

@@ -42,7 +42,7 @@ export interface PeopleWithAccessProps {
    * Organization the resource belongs to (`metadata.org`). Drives the
    * people-and-teams typeahead in the grant form.
    */
-  readonly orgId: string;
+  readonly org: string;
   /** Additional CSS class names for the root container. */
   readonly className?: string;
 }
@@ -72,7 +72,7 @@ export function PeopleWithAccess({
   resource,
   resourceKindString,
   resourceKind,
-  orgId,
+  org,
   className,
 }: PeopleWithAccessProps) {
   const {
@@ -155,7 +155,7 @@ export function PeopleWithAccess({
                 resourceKind={resourceKind}
                 resourceKindString={resourceKindString}
                 resourceId={resource.id}
-                orgId={orgId}
+                org={org}
                 includeTeams={canShareWithTeams}
                 excludeGrantees={existingGrantees}
                 onGranted={() => {

package/src/iam-policy/PrincipalPicker.tsx

@@ -37,7 +37,7 @@ export type SelectedGrantee = GranteeCandidate;
 /** Props for {@link PrincipalPicker}. */
 export interface PrincipalPickerProps {
   /** Organization whose people (and teams) are selectable. */
-  readonly orgId: string;
+  readonly org: string;
   /** Currently selected grantee, or `null`. Controlled. */
   readonly value: SelectedGrantee | null;
   /** Fired when the selection changes. */
@@ -73,7 +73,7 @@ export interface PrincipalPickerProps {
  * All visual properties flow through `--stgm-*` design tokens.
  */
 export function PrincipalPicker({
-  orgId,
+  org,
   value,
   onChange,
   includeTeams = false,
@@ -85,7 +85,7 @@ export function PrincipalPicker({
 }: PrincipalPickerProps) {
   const listboxId = useId();
   const { people, teams, isLoading, error } = useGranteeCandidates({
-    orgId: orgId || null,
+    org: org || null,
     includeTeams,
   });
 

package/src/iam-policy/SharePanel.tsx

@@ -17,7 +17,7 @@ export interface SharePanelProps {
    * Organization the resource belongs to (`metadata.org`). Drives the
    * org-member typeahead in the grant form.
    */
-  readonly orgId: string;
+  readonly org: string;
   /** Fired when the user closes the panel. */
   readonly onClose?: () => void;
   /** Additional CSS class names for the root container. */
@@ -42,7 +42,7 @@ export interface SharePanelProps {
  *   resource={{ kind: "session", id: sessionId, resourceKind: ApiResourceKind.session }}
  *   resourceKindString="session"
  *   resourceKind={ApiResourceKind.session}
- *   orgId={orgId}
+ *   org={org}
  *   onClose={() => setOpen(false)}
  * />
  * ```
@@ -51,7 +51,7 @@ export function SharePanel({
   resource,
   resourceKindString,
   resourceKind,
-  orgId,
+  org,
   onClose,
   className,
 }: SharePanelProps) {
@@ -85,7 +85,7 @@ export function SharePanel({
         resource={resource}
         resourceKindString={resourceKindString}
         resourceKind={resourceKind}
-        orgId={orgId}
+        org={org}
       />
     </div>
   );

package/src/iam-policy/useCreateIamPolicy.ts

@@ -33,7 +33,7 @@ export interface UseCreateIamPolicyReturn {
  *
  * await create({
  *   principal: { kind: "identity_account", id: accountId },
- *   resource: { kind: "organization", id: orgId },
+ *   resource: { kind: "organization", id: org },
  *   relation: "admin",
  * });
  * ```

package/src/iam-policy/useDeleteIamPolicy.ts

@@ -32,7 +32,7 @@ export interface UseDeleteIamPolicyReturn {
  *
  * await remove({
  *   principal: { kind: "identity_account", id: accountId },
- *   resource: { kind: "organization", id: orgId },
+ *   resource: { kind: "organization", id: org },
  *   relation: "admin",
  * });
  * ```

package/src/iam-policy/useGranteeCandidates.ts

@@ -49,7 +49,7 @@ export type GranteeCandidate = PersonCandidate | TeamCandidate;
 /** Options for {@link useGranteeCandidates}. */
 export interface UseGranteeCandidatesOptions {
   /** The organization whose people (and teams) are offered, or `null` to skip. */
-  readonly orgId: string | null;
+  readonly org: string | null;
   /** Offer the organization's teams too. Pass `false` where teams cannot be granted. */
   readonly includeTeams: boolean;
 }
@@ -70,13 +70,13 @@ export interface UseGranteeCandidatesReturn {
  * @example
  * ```tsx
  * const { people, teams } = useGranteeCandidates({
- *   orgId,
+ *   org,
  *   includeTeams: share.canShareWithTeams,
  * });
  * ```
  */
 export function useGranteeCandidates({
-  orgId,
+  org: orgId,
   includeTeams,
 }: UseGranteeCandidatesOptions): UseGranteeCandidatesReturn {
   const access = useResourceAccess(orgId ? { kind: "organization", id: orgId } : null);

package/src/iam-policy/useOwnerAssignment.ts

@@ -26,11 +26,11 @@ export interface UseOwnerAssignmentReturn {
  * change asks the same question here. Fails open, like every capability
  * gate: the server refuses whatever this lets through.
  *
- * @param orgId - The organization's id, or `null` to skip the check.
+ * @param org - The organization's id, or `null` to skip the check.
  */
-export function useOwnerAssignment(orgId: string | null): UseOwnerAssignmentReturn {
+export function useOwnerAssignment(org: string | null): UseOwnerAssignmentReturn {
   const { allowed } = useCheckPermission(
-    orgId ? { kind: "organization", id: orgId } : null,
+    org ? { kind: "organization", id: org } : null,
     "can_assign_roles",
   );
   return {

package/src/iam-policy/usePrincipalsCount.ts

@@ -33,33 +33,33 @@ export interface UsePrincipalsCountReturn {
  * `isPlatformClientAccount` (from `@stigmer/sdk`) marks, as
  * `OrgMembersPanel` does.
  *
- * Pass `null` as `orgId` to skip fetching (stable no-op).
+ * Pass `null` as `org` to skip fetching (stable no-op).
  *
- * @param orgId         - Organization ID, or `null` to skip.
+ * @param org         - Organization ID, or `null` to skip.
  * @param principalKind - Kind of principals to count. Defaults to `"identity_account"`.
  *
  * @example
  * ```tsx
- * const { count, isLoading } = usePrincipalsCount(orgId);
+ * const { count, isLoading } = usePrincipalsCount(org);
  * // count = 5
  * ```
  */
 export function usePrincipalsCount(
-  orgId: string | null,
+  org: string | null,
   principalKind: string = "identity_account",
 ): UsePrincipalsCountReturn {
   const stigmer = useStigmer();
 
   const { data: count, isLoading, isRefetching, error, refetch } = useFetch(
-    orgId
+    org
       ? () =>
           stigmer.iamPolicy
             .getPrincipalsCount(
-              create(GetPrincipalsCountInputSchema, { orgId, principalKind }),
+              create(GetPrincipalsCountInputSchema, { org, principalKind }),
             )
             .then((r) => r.count)
       : null,
-    [orgId, principalKind, stigmer],
+    [org, principalKind, stigmer],
     0,
   );
 

package/src/iam-policy/useResourceAccess.ts

@@ -57,7 +57,7 @@ export interface UseResourceAccessReturn {
  * @example
  * ```tsx
  * const { members, isLoading } = useResourceAccess(
- *   { kind: "organization", id: orgId },
+ *   { kind: "organization", id: org },
  *   { includeInherited: true },
  * );
  * ```

package/src/iam-policy/useRevokeOrgAccess.ts

@@ -17,7 +17,7 @@ export interface UseRevokeOrgAccessReturn {
    * operation. What they created stays with the organization; it is
    * theirs again only if they are invited back.
    */
-  readonly revoke: (accountId: string, orgId: string) => Promise<void>;
+  readonly revoke: (accountId: string, org: string) => Promise<void>;
   /** `true` while the revoke request is in flight. */
   readonly isRevoking: boolean;
   /** Error from the last failed revoke, or `null` when healthy. */
@@ -51,7 +51,7 @@ export function useRevokeOrgAccess(): UseRevokeOrgAccessReturn {
   const clearError = useCallback(() => setError(null), []);
 
   const revoke = useCallback(
-    async (accountId: string, orgId: string): Promise<void> => {
+    async (accountId: string, org: string): Promise<void> => {
       setIsRevoking(true);
       setError(null);
 
@@ -59,7 +59,7 @@ export function useRevokeOrgAccess(): UseRevokeOrgAccessReturn {
         await stigmer.iamPolicy.revokeOrgAccess(
           create(RevokeOrgAccessInputSchema, {
             identityAccountId: accountId,
-            organizationId: orgId,
+            org,
           }),
         );
       } catch (err) {

package/src/identity-account/AccountPreferencesPanel.tsx

@@ -21,6 +21,7 @@ import { MemoryEnabledRow } from "../internal/MemoryEnabledRow.js";
 import { StandingContextField } from "../internal/StandingContextField.js";
 import { SpinnerIcon } from "../internal/SpinnerIcon.js";
 import { Switch } from "../switch/Switch.js";
+import { LoadingRegion } from "../internal/LoadingRegion.js";
 
 /** Props for {@link AccountPreferencesPanel}. */
 export interface AccountPreferencesPanelProps {
@@ -232,14 +233,13 @@ export function AccountPreferencesPanel({
 
   if (isFetching && !account) {
     return (
-      <div
+      <LoadingRegion
         className={cn("stg:space-y-4", className)}
-        aria-busy="true"
-        aria-label="Loading account preferences"
+        label="Loading account preferences"
       >
         <div className="stg:bg-muted-subtle stg:h-28 stg:animate-pulse stg:rounded" />
         <div className="stg:bg-muted-subtle stg:h-8 stg:w-32 stg:animate-pulse stg:rounded" />
-      </div>
+      </LoadingRegion>
     );
   }
 

package/src/identity-provider/IdentityProviderDetailPanel.tsx

@@ -136,8 +136,8 @@ export function IdentityProviderDetailPanel({
       clearError();
       try {
         // Full-spec-replace safety: spread the complete mapped input and
-        // override only the edited fields, so unlisted spec fields (e.g.
-        // rate_limit_budget) survive the save. Fields the form clears
+        // override only the edited fields, so a spec field the form does
+        // not list survives the save. Fields the form clears
         // (SSO providers have no JIT settings) are set to undefined
         // explicitly — omitting them would carry the stale mapped value.
         const updated = await update({
@@ -289,7 +289,7 @@ export function IdentityProviderDetailPanel({
             value={userinfoEndpoint}
             onChange={setUserinfoEndpoint}
             placeholder="https://example.com/userinfo"
-            hint="Optional — used to fetch user profile data"
+            hint="Optional. Read only when Stigmer creates an account from a token with no email claim"
             disabled={isUpdating}
           />
 
@@ -421,12 +421,6 @@ function ViewMode({
           hint="Share this URL with your team members to sign in via SSO"
         />
       )}
-      {(spec?.rateLimitBudget ?? 0) > 0 && (
-        <Field
-          label="Rate limit"
-          value={`${spec!.rateLimitBudget} req/min`}
-        />
-      )}
 
       {/* JIT provisioning fields */}
       {!spec?.isSsoProvider && spec?.autoProvisionAccounts && (