@stratum-hq/react 0.1.0

package/dist/components/ConfigEditor.d.ts

@@ -0,0 +1,5 @@
+export interface ConfigEditorProps {
+    className?: string;
+}
+export declare function ConfigEditor({ className }: ConfigEditorProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ConfigEditor.d.ts.map

package/dist/components/ConfigEditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigEditor.d.ts","sourceRoot":"","sources":["../../src/components/ConfigEditor.tsx"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,YAAY,CAAC,EAAE,SAAS,EAAE,EAAE,iBAAiB,2CA6J5D"}

package/dist/components/ConfigEditor.js

@@ -0,0 +1,71 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useState } from "react";
+import { useConfig } from "../hooks/use-config.js";
+import { useMessages } from "../hooks/use-messages.js";
+import { useStratum } from "../provider.js";
+import { TableSkeleton } from "./TableSkeleton.js";
+export function ConfigEditor({ className }) {
+    const { config, loading, error, setConfigValue, deleteConfigValue } = useConfig();
+    const { toast } = useStratum();
+    const { t } = useMessages();
+    const [editingKey, setEditingKey] = useState(null);
+    const [editValue, setEditValue] = useState("");
+    const [newKey, setNewKey] = useState("");
+    const [newValue, setNewValue] = useState("");
+    if (loading) {
+        return (_jsx("div", { className: `stratum-config-editor ${className || ""}`, children: _jsx(TableSkeleton, { rows: 5, columns: 5 }) }));
+    }
+    if (error)
+        return _jsx("div", { className: className, children: t("configEditor.error", { message: error.message }) });
+    const handleSave = async (key) => {
+        try {
+            let value;
+            try {
+                value = JSON.parse(editValue);
+            }
+            catch {
+                value = editValue;
+            }
+            await setConfigValue(key, value);
+            setEditingKey(null);
+            toast.success(`Config "${key}" saved successfully`);
+        }
+        catch (err) {
+            toast.error(`Failed to save config "${key}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+    };
+    const handleDelete = async (key) => {
+        try {
+            await deleteConfigValue(key);
+            toast.success(`Config "${key}" removed`);
+        }
+        catch (err) {
+            toast.error(`Failed to remove config "${key}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+    };
+    const handleAdd = async () => {
+        if (!newKey)
+            return;
+        try {
+            let value;
+            try {
+                value = JSON.parse(newValue);
+            }
+            catch {
+                value = newValue;
+            }
+            await setConfigValue(newKey, value);
+            toast.success(`Config "${newKey}" added`);
+            setNewKey("");
+            setNewValue("");
+        }
+        catch (err) {
+            toast.error(`Failed to add config "${newKey}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+    };
+    return (_jsxs("div", { className: `stratum-config-editor ${className || ""}`, children: [_jsxs("table", { className: "stratum-config-editor__table", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { children: t("configEditor.columnKey") }), _jsx("th", { children: t("configEditor.columnValue") }), _jsx("th", { children: t("configEditor.columnSource") }), _jsx("th", { children: t("configEditor.columnStatus") }), _jsx("th", { children: t("configEditor.columnActions") })] }) }), _jsx("tbody", { children: config.map((entry) => (_jsxs("tr", { className: entry.locked ? "stratum-config-editor__row--locked" : "", children: [_jsx("td", { children: entry.key }), _jsx("td", { children: editingKey === entry.key ? (_jsx("input", { type: "text", value: editValue, onChange: (e) => setEditValue(e.target.value), onKeyDown: (e) => e.key === "Enter" && handleSave(entry.key), "aria-label": t("configEditor.editLabel", { key: entry.key }) })) : (_jsx("code", { children: JSON.stringify(entry.value) })) }), _jsxs("td", { className: "stratum-config-editor__source", children: [entry.source_tenant_id.slice(0, 8), "..."] }), _jsxs("td", { children: [entry.locked && _jsx("span", { className: "stratum-badge stratum-badge--locked", children: t("configEditor.locked") }), entry.inherited && !entry.locked && (_jsx("span", { className: "stratum-badge stratum-badge--inherited", children: t("configEditor.inherited") })), !entry.inherited && !entry.locked && (_jsx("span", { className: "stratum-badge stratum-badge--own", children: t("configEditor.own") }))] }), _jsx("td", { children: !entry.locked && (_jsx(_Fragment, { children: editingKey === entry.key ? (_jsxs(_Fragment, { children: [_jsx("button", { type: "button", onClick: () => handleSave(entry.key), children: t("configEditor.saveButton") }), _jsx("button", { type: "button", onClick: () => setEditingKey(null), children: t("configEditor.cancelButton") })] })) : (_jsxs(_Fragment, { children: [_jsx("button", { type: "button", onClick: () => {
+                                                        setEditingKey(entry.key);
+                                                        setEditValue(JSON.stringify(entry.value));
+                                                    }, children: t("configEditor.editButton") }), !entry.inherited && (_jsx("button", { type: "button", onClick: () => handleDelete(entry.key), children: t("configEditor.removeButton") }))] })) })) })] }, entry.key))) })] }), _jsxs("div", { className: "stratum-config-editor__add", children: [_jsx("input", { type: "text", value: newKey, onChange: (e) => setNewKey(e.target.value), placeholder: t("configEditor.keyPlaceholder"), "aria-label": t("configEditor.keyLabel") }), _jsx("input", { type: "text", value: newValue, onChange: (e) => setNewValue(e.target.value), placeholder: t("configEditor.valuePlaceholder"), "aria-label": t("configEditor.valueLabel") }), _jsx("button", { type: "button", onClick: handleAdd, disabled: !newKey, children: t("configEditor.addButton") })] })] }));
+}
+//# sourceMappingURL=ConfigEditor.js.map

package/dist/components/ConfigEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigEditor.js","sourceRoot":"","sources":["../../src/components/ConfigEditor.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMnD,MAAM,UAAU,YAAY,CAAC,EAAE,SAAS,EAAqB;IAC3D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,SAAS,EAAE,CAAC;IAClF,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAClE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE7C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CACL,cAAK,SAAS,EAAE,yBAAyB,SAAS,IAAI,EAAE,EAAE,YACxD,KAAC,aAAa,IAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,GAAI,GAClC,CACP,CAAC;IACJ,CAAC;IACD,IAAI,KAAK;QAAE,OAAO,cAAK,SAAS,EAAE,SAAS,YAAG,CAAC,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,GAAO,CAAC;IAEzG,MAAM,UAAU,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;QACvC,IAAI,CAAC;YACH,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,aAAa,CAAC,IAAI,CAAC,CAAC;YACpB,KAAK,CAAC,OAAO,CAAC,WAAW,GAAG,sBAAsB,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,0BAA0B,GAAG,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAC7B,KAAK,CAAC,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,4BAA4B,GAAG,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;QAC3B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC;YACH,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,QAAQ,CAAC;YACnB,CAAC;YACD,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpC,KAAK,CAAC,OAAO,CAAC,WAAW,MAAM,SAAS,CAAC,CAAC;YAC1C,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,WAAW,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,yBAAyB,MAAM,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,eAAK,SAAS,EAAE,yBAAyB,SAAS,IAAI,EAAE,EAAE,aACxD,iBAAO,SAAS,EAAC,8BAA8B,aAC7C,0BACE,yBACE,uBAAK,CAAC,CAAC,wBAAwB,CAAC,GAAM,EACtC,uBAAK,CAAC,CAAC,0BAA0B,CAAC,GAAM,EACxC,uBAAK,CAAC,CAAC,2BAA2B,CAAC,GAAM,EACzC,uBAAK,CAAC,CAAC,2BAA2B,CAAC,GAAM,EACzC,uBAAK,CAAC,CAAC,4BAA4B,CAAC,GAAM,IACvC,GACC,EACR,0BACG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACrB,cAAoB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE,aACrF,uBAAK,KAAK,CAAC,GAAG,GAAM,EACpB,uBACG,UAAU,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAC1B,gBACE,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAClF,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,gBAChD,CAAC,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAC3D,CACH,CAAC,CAAC,CAAC,CACF,yBAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAQ,CAC3C,GACE,EACL,cAAI,SAAS,EAAC,+BAA+B,aAC1C,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAChC,EACL,yBACG,KAAK,CAAC,MAAM,IAAI,eAAM,SAAS,EAAC,qCAAqC,YAAE,CAAC,CAAC,qBAAqB,CAAC,GAAQ,EACvG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CACnC,eAAM,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,wBAAwB,CAAC,GAAQ,CAC9F,EACA,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CACpC,eAAM,SAAS,EAAC,kCAAkC,YAAE,CAAC,CAAC,kBAAkB,CAAC,GAAQ,CAClF,IACE,EACL,uBACG,CAAC,KAAK,CAAC,MAAM,IAAI,CAChB,4BACG,UAAU,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAC1B,8BACE,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,YAAG,CAAC,CAAC,yBAAyB,CAAC,GAAU,EACnG,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,YAAG,CAAC,CAAC,2BAA2B,CAAC,GAAU,IAClG,CACJ,CAAC,CAAC,CAAC,CACF,8BACE,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;wDACZ,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wDACzB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;oDAC5C,CAAC,YAEA,CAAC,CAAC,yBAAyB,CAAC,GACtB,EACR,CAAC,KAAK,CAAC,SAAS,IAAI,CACnB,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,YACzD,CAAC,CAAC,2BAA2B,CAAC,GACxB,CACV,IACA,CACJ,GACA,CACJ,GACE,KAvDE,KAAK,CAAC,GAAG,CAwDb,CACN,CAAC,GACI,IACF,EAER,eAAK,SAAS,EAAC,4BAA4B,aACzC,gBACE,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC/E,WAAW,EAAE,CAAC,CAAC,6BAA6B,CAAC,gBACjC,CAAC,CAAC,uBAAuB,CAAC,GACtC,EACF,gBACE,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACjF,WAAW,EAAE,CAAC,CAAC,+BAA+B,CAAC,gBACnC,CAAC,CAAC,yBAAyB,CAAC,GACxC,EACF,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,MAAM,YACxD,CAAC,CAAC,wBAAwB,CAAC,GACrB,IACL,IACF,CACP,CAAC;AACJ,CAAC"}

package/dist/components/ConfigEditor.stories.d.ts

@@ -0,0 +1,35 @@
+import type { Meta, StoryObj } from "@storybook/react";
+import { ConfigEditor } from "./ConfigEditor.js";
+declare const meta: Meta<typeof ConfigEditor>;
+export default meta;
+type Story = StoryObj<typeof ConfigEditor>;
+/**
+ * Default state with a mix of own, inherited, and locked configuration
+ * values. Represents a typical mid-level tenant (CyberShield MSP) that
+ * inherits SSO and MFA settings from Acme Corp but sets its own billing plan.
+ */
+export declare const Default: Story;
+/**
+ * Loading state shown while config entries are being resolved.
+ * In production this shows "Loading config..." while the API
+ * resolves the full inheritance chain.
+ */
+export declare const Loading: Story;
+/**
+ * Empty state when the tenant has no configuration values set
+ * and nothing is inherited from parent tenants.
+ */
+export declare const Empty: Story;
+/**
+ * All values locked by a parent tenant (e.g., Acme Corp enforcing
+ * organization-wide policy). No edit or delete actions are available.
+ * The rows are highlighted with a warning background.
+ */
+export declare const AllLocked: Story;
+/**
+ * Configuration that includes sensitive values like webhook URLs
+ * and API secret keys. These are typically locked and inherited
+ * from the root tenant.
+ */
+export declare const WithSensitiveValues: Story;
+//# sourceMappingURL=ConfigEditor.stories.d.ts.map

package/dist/components/ConfigEditor.stories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigEditor.stories.d.ts","sourceRoot":"","sources":["../../src/components/ConfigEditor.stories.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAQjD,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,OAAO,YAAY,CAuBnC,CAAC;AAEF,eAAe,IAAI,CAAC;AACpB,KAAK,KAAK,GAAG,QAAQ,CAAC,OAAO,YAAY,CAAC,CAAC;AAE3C;;;;GAIG;AACH,eAAO,MAAM,OAAO,EAAE,KAErB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,OAAO,EAAE,KAcrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,KAAK,EAAE,KAcnB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,SAAS,EAAE,KAcvB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,KAcjC,CAAC"}

package/dist/components/ConfigEditor.stories.js

@@ -0,0 +1,73 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { ConfigEditor } from "./ConfigEditor.js";
+import { MockStratumProvider, mockLockedConfigEntries, mockSensitiveConfigEntries, } from "./storybook-helpers.js";
+const meta = {
+    title: "Components/ConfigEditor",
+    component: ConfigEditor,
+    parameters: {
+        docs: {
+            description: {
+                component: "Table-based editor for tenant configuration values. " +
+                    "Displays each key's value, source tenant, and inheritance status " +
+                    "(Own, Inherited, Locked). Inherited values show the source tenant ID. " +
+                    "Locked values cannot be edited or deleted.",
+            },
+        },
+    },
+    decorators: [
+        (Story) => (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) })),
+    ],
+};
+export default meta;
+/**
+ * Default state with a mix of own, inherited, and locked configuration
+ * values. Represents a typical mid-level tenant (CyberShield MSP) that
+ * inherits SSO and MFA settings from Acme Corp but sets its own billing plan.
+ */
+export const Default = {
+    args: {},
+};
+/**
+ * Loading state shown while config entries are being resolved.
+ * In production this shows "Loading config..." while the API
+ * resolves the full inheritance chain.
+ */
+export const Loading = {
+    args: {},
+    decorators: [
+        (Story) => (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", loading: true, children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) })),
+    ],
+};
+/**
+ * Empty state when the tenant has no configuration values set
+ * and nothing is inherited from parent tenants.
+ */
+export const Empty = {
+    args: {},
+    decorators: [
+        (Story) => (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", configEntries: [], children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) })),
+    ],
+};
+/**
+ * All values locked by a parent tenant (e.g., Acme Corp enforcing
+ * organization-wide policy). No edit or delete actions are available.
+ * The rows are highlighted with a warning background.
+ */
+export const AllLocked = {
+    args: {},
+    decorators: [
+        (Story) => (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", configEntries: mockLockedConfigEntries, children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) })),
+    ],
+};
+/**
+ * Configuration that includes sensitive values like webhook URLs
+ * and API secret keys. These are typically locked and inherited
+ * from the root tenant.
+ */
+export const WithSensitiveValues = {
+    args: {},
+    decorators: [
+        (Story) => (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", configEntries: mockSensitiveConfigEntries, children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) })),
+    ],
+};
+//# sourceMappingURL=ConfigEditor.stories.js.map

package/dist/components/ConfigEditor.stories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigEditor.stories.js","sourceRoot":"","sources":["../../src/components/ConfigEditor.stories.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,mBAAmB,EAEnB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,IAAI,GAA8B;IACtC,KAAK,EAAE,yBAAyB;IAChC,SAAS,EAAE,YAAY;IACvB,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,WAAW,EAAE;gBACX,SAAS,EACP,sDAAsD;oBACtD,mEAAmE;oBACnE,wEAAwE;oBACxE,4CAA4C;aAC/C;SACF;KACF;IACD,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE,CAAC,CACT,KAAC,mBAAmB,IAAC,eAAe,EAAC,sCAAsC,YACzE,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB;KACF;CACF,CAAC;AAEF,eAAe,IAAI,CAAC;AAGpB;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAU;IAC5B,IAAI,EAAE,EAAE;CACT,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAU;IAC5B,IAAI,EAAE,EAAE;IACR,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE,CAAC,CACT,KAAC,mBAAmB,IAClB,eAAe,EAAC,sCAAsC,EACtD,OAAO,EAAE,IAAI,YAEb,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB;KACF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,KAAK,GAAU;IAC1B,IAAI,EAAE,EAAE;IACR,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE,CAAC,CACT,KAAC,mBAAmB,IAClB,eAAe,EAAC,sCAAsC,EACtD,aAAa,EAAE,EAAE,YAEjB,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB;KACF;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAU;IAC9B,IAAI,EAAE,EAAE;IACR,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE,CAAC,CACT,KAAC,mBAAmB,IAClB,eAAe,EAAC,sCAAsC,EACtD,aAAa,EAAE,uBAAuB,YAEtC,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB;KACF;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAU;IACxC,IAAI,EAAE,EAAE;IACR,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE,CAAC,CACT,KAAC,mBAAmB,IAClB,eAAe,EAAC,sCAAsC,EACtD,aAAa,EAAE,0BAA0B,YAEzC,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB;KACF;CACF,CAAC"}

package/dist/components/PermissionEditor.d.ts

@@ -0,0 +1,5 @@
+export interface PermissionEditorProps {
+    className?: string;
+}
+export declare function PermissionEditor({ className }: PermissionEditorProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=PermissionEditor.d.ts.map

package/dist/components/PermissionEditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionEditor.d.ts","sourceRoot":"","sources":["../../src/components/PermissionEditor.tsx"],"names":[],"mappings":"AAMA,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAKD,wBAAgB,gBAAgB,CAAC,EAAE,SAAS,EAAE,EAAE,qBAAqB,2CAiHpE"}

package/dist/components/PermissionEditor.js

@@ -0,0 +1,46 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from "react";
+import { usePermissions } from "../hooks/use-permissions.js";
+import { useMessages } from "../hooks/use-messages.js";
+import { useStratum } from "../provider.js";
+import { TableSkeleton } from "./TableSkeleton.js";
+const MODES = ["LOCKED", "INHERITED", "DELEGATED"];
+const REVOCATION_MODES = ["CASCADE", "SOFT", "PERMANENT"];
+export function PermissionEditor({ className }) {
+    const { permissions, loading, error, createPermission, deletePermission } = usePermissions();
+    const { toast } = useStratum();
+    const { t } = useMessages();
+    const [newKey, setNewKey] = useState("");
+    const [newMode, setNewMode] = useState("INHERITED");
+    const [newRevocationMode, setNewRevocationMode] = useState("CASCADE");
+    if (loading) {
+        return (_jsx("div", { className: `stratum-permission-editor ${className || ""}`, children: _jsx(TableSkeleton, { rows: 5, columns: 6 }) }));
+    }
+    if (error)
+        return _jsx("div", { className: className, children: t("permissionEditor.error", { message: error.message }) });
+    const handleAdd = async () => {
+        if (!newKey)
+            return;
+        try {
+            await createPermission(newKey, true, newMode, newRevocationMode);
+            toast.success(`Permission "${newKey}" added`);
+            setNewKey("");
+            setNewMode("INHERITED");
+            setNewRevocationMode("CASCADE");
+        }
+        catch (err) {
+            toast.error(`Failed to add permission "${newKey}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+    };
+    const handleDelete = async (key, sourceTenantId) => {
+        try {
+            await deletePermission(sourceTenantId);
+            toast.success(`Permission "${key}" removed`);
+        }
+        catch (err) {
+            toast.error(`Failed to remove permission "${key}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+    };
+    return (_jsxs("div", { className: `stratum-permission-editor ${className || ""}`, children: [_jsxs("table", { className: "stratum-permission-editor__table", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { children: t("permissionEditor.columnKey") }), _jsx("th", { children: t("permissionEditor.columnValue") }), _jsx("th", { children: t("permissionEditor.columnMode") }), _jsx("th", { children: t("permissionEditor.columnSource") }), _jsx("th", { children: t("permissionEditor.columnStatus") }), _jsx("th", { children: t("permissionEditor.columnActions") })] }) }), _jsx("tbody", { children: permissions.map((perm) => (_jsxs("tr", { children: [_jsx("td", { children: perm.key }), _jsx("td", { children: _jsx("code", { children: JSON.stringify(perm.value) }) }), _jsx("td", { children: _jsx("span", { className: `stratum-badge stratum-badge--${perm.mode.toLowerCase()}`, children: perm.mode }) }), _jsxs("td", { className: "stratum-permission-editor__source", children: [perm.source_tenant_id.slice(0, 8), "..."] }), _jsxs("td", { children: [perm.locked && _jsx("span", { className: "stratum-badge stratum-badge--locked", children: t("permissionEditor.locked") }), perm.delegated && _jsx("span", { className: "stratum-badge stratum-badge--delegated", children: t("permissionEditor.delegated") })] }), _jsx("td", { children: !perm.locked && (_jsx("button", { type: "button", onClick: () => handleDelete(perm.key, perm.source_tenant_id), children: t("permissionEditor.removeButton") })) })] }, perm.key))) })] }), _jsxs("div", { className: "stratum-permission-editor__add", children: [_jsx("input", { type: "text", value: newKey, onChange: (e) => setNewKey(e.target.value), placeholder: t("permissionEditor.keyPlaceholder"), "aria-label": t("permissionEditor.keyLabel") }), _jsx("select", { value: newMode, onChange: (e) => setNewMode(e.target.value), "aria-label": t("permissionEditor.modeLabel"), children: MODES.map((m) => (_jsx("option", { value: m, children: m }, m))) }), _jsx("select", { value: newRevocationMode, onChange: (e) => setNewRevocationMode(e.target.value), "aria-label": t("permissionEditor.revocationModeLabel"), children: REVOCATION_MODES.map((m) => (_jsx("option", { value: m, children: m }, m))) }), _jsx("button", { type: "button", onClick: handleAdd, disabled: !newKey, children: t("permissionEditor.addButton") })] })] }));
+}
+//# sourceMappingURL=PermissionEditor.js.map

package/dist/components/PermissionEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionEditor.js","sourceRoot":"","sources":["../../src/components/PermissionEditor.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMnD,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAC5D,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAU,CAAC;AAEnE,MAAM,UAAU,gBAAgB,CAAC,EAAE,SAAS,EAAyB;IACnE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7F,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAS,WAAW,CAAC,CAAC;IAC5D,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,GAAG,QAAQ,CAAS,SAAS,CAAC,CAAC;IAE9E,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CACL,cAAK,SAAS,EAAE,6BAA6B,SAAS,IAAI,EAAE,EAAE,YAC5D,KAAC,aAAa,IAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,GAAI,GAClC,CACP,CAAC;IACJ,CAAC;IACD,IAAI,KAAK;QAAE,OAAO,cAAK,SAAS,EAAE,SAAS,YAAG,CAAC,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,GAAO,CAAC;IAE7G,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;QAC3B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;YACjE,KAAK,CAAC,OAAO,CAAC,eAAe,MAAM,SAAS,CAAC,CAAC;YAC9C,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,UAAU,CAAC,WAAW,CAAC,CAAC;YACxB,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,6BAA6B,MAAM,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,GAAW,EAAE,cAAsB,EAAE,EAAE;QACjE,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACvC,KAAK,CAAC,OAAO,CAAC,eAAe,GAAG,WAAW,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,gCAAgC,GAAG,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,eAAK,SAAS,EAAE,6BAA6B,SAAS,IAAI,EAAE,EAAE,aAC5D,iBAAO,SAAS,EAAC,kCAAkC,aACjD,0BACE,yBACE,uBAAK,CAAC,CAAC,4BAA4B,CAAC,GAAM,EAC1C,uBAAK,CAAC,CAAC,8BAA8B,CAAC,GAAM,EAC5C,uBAAK,CAAC,CAAC,6BAA6B,CAAC,GAAM,EAC3C,uBAAK,CAAC,CAAC,+BAA+B,CAAC,GAAM,EAC7C,uBAAK,CAAC,CAAC,+BAA+B,CAAC,GAAM,EAC7C,uBAAK,CAAC,CAAC,gCAAgC,CAAC,GAAM,IAC3C,GACC,EACR,0BACG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACzB,yBACE,uBAAK,IAAI,CAAC,GAAG,GAAM,EACnB,uBAAI,yBAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAQ,GAAK,EAClD,uBACE,eAAM,SAAS,EAAE,gCAAgC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YACvE,IAAI,CAAC,IAAI,GACL,GACJ,EACL,cAAI,SAAS,EAAC,mCAAmC,aAC9C,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAC/B,EACL,yBACG,IAAI,CAAC,MAAM,IAAI,eAAM,SAAS,EAAC,qCAAqC,YAAE,CAAC,CAAC,yBAAyB,CAAC,GAAQ,EAC1G,IAAI,CAAC,SAAS,IAAI,eAAM,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,4BAA4B,CAAC,GAAQ,IACjH,EACL,uBACG,CAAC,IAAI,CAAC,MAAM,IAAI,CACf,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,YAC/E,CAAC,CAAC,+BAA+B,CAAC,GAC5B,CACV,GACE,KArBE,IAAI,CAAC,GAAG,CAsBZ,CACN,CAAC,GACI,IACF,EAER,eAAK,SAAS,EAAC,gCAAgC,aAC7C,gBACE,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC/E,WAAW,EAAE,CAAC,CAAC,iCAAiC,CAAC,gBACrC,CAAC,CAAC,2BAA2B,CAAC,GAC1C,EACF,iBACE,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,CAAC,CAAuC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBACrE,CAAC,CAAC,4BAA4B,CAAC,YAE1C,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAChB,iBAAgB,KAAK,EAAE,CAAC,YAAG,CAAC,IAAf,CAAC,CAAwB,CACvC,CAAC,GACK,EACT,iBACE,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,CAAC,CAAuC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAC/E,CAAC,CAAC,sCAAsC,CAAC,YAEpD,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC3B,iBAAgB,KAAK,EAAE,CAAC,YAAG,CAAC,IAAf,CAAC,CAAwB,CACvC,CAAC,GACK,EACT,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,MAAM,YACxD,CAAC,CAAC,4BAA4B,CAAC,GACzB,IACL,IACF,CACP,CAAC;AACJ,CAAC"}

package/dist/components/PermissionEditor.stories.d.ts

@@ -0,0 +1,34 @@
+import type { Meta, StoryObj } from "@storybook/react";
+import { PermissionEditor } from "./PermissionEditor.js";
+declare const meta: Meta<typeof PermissionEditor>;
+export default meta;
+type Story = StoryObj<typeof PermissionEditor>;
+/**
+ * Default state with a realistic mix of permission modes.
+ * - LOCKED: tenant.manage and audit.read (set by root, cannot be changed)
+ * - INHERITED: config.write and users.invite (flow from ancestor)
+ * - DELEGATED: billing.view and webhooks.manage (delegated to this tenant)
+ */
+export declare const Default: Story;
+/**
+ * Loading state while permissions are being resolved through
+ * the inheritance chain.
+ */
+export declare const Loading: Story;
+/**
+ * Empty state when no permission policies have been defined.
+ * Only the table headers and the "Add" form are visible.
+ */
+export declare const Empty: Story;
+/**
+ * All permissions locked by the root tenant. No "Remove" actions
+ * are available. This represents a leaf tenant with fully restricted
+ * permission management.
+ */
+export declare const AllLocked: Story;
+/**
+ * All permissions delegated to this tenant, meaning the tenant
+ * has full control and can remove any of them.
+ */
+export declare const AllDelegated: Story;
+//# sourceMappingURL=PermissionEditor.stories.d.ts.map

package/dist/components/PermissionEditor.stories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionEditor.stories.d.ts","sourceRoot":"","sources":["../../src/components/PermissionEditor.stories.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,OAAO,gBAAgB,CAuBvC,CAAC;AAEF,eAAe,IAAI,CAAC;AACpB,KAAK,KAAK,GAAG,QAAQ,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,OAAO,EAAE,KAErB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,OAAO,EAAE,KAcrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,KAAK,EAAE,KAcnB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,SAAS,EAAE,KAuBvB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,KAuB1B,CAAC"}

package/dist/components/PermissionEditor.stories.js

@@ -0,0 +1,90 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { PermissionEditor } from "./PermissionEditor.js";
+import { MockStratumProvider, mockPermissions } from "./storybook-helpers.js";
+const meta = {
+    title: "Components/PermissionEditor",
+    component: PermissionEditor,
+    parameters: {
+        docs: {
+            description: {
+                component: "Table-based editor for tenant permission policies. " +
+                    "Shows each permission's key, value, mode (LOCKED / INHERITED / DELEGATED), " +
+                    "source tenant, and status badges. Locked permissions cannot be removed. " +
+                    "Supports adding new permissions with configurable mode and revocation policy.",
+            },
+        },
+    },
+    decorators: [
+        (Story) => (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) })),
+    ],
+};
+export default meta;
+/**
+ * Default state with a realistic mix of permission modes.
+ * - LOCKED: tenant.manage and audit.read (set by root, cannot be changed)
+ * - INHERITED: config.write and users.invite (flow from ancestor)
+ * - DELEGATED: billing.view and webhooks.manage (delegated to this tenant)
+ */
+export const Default = {
+    args: {},
+};
+/**
+ * Loading state while permissions are being resolved through
+ * the inheritance chain.
+ */
+export const Loading = {
+    args: {},
+    decorators: [
+        (Story) => (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", loading: true, children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) })),
+    ],
+};
+/**
+ * Empty state when no permission policies have been defined.
+ * Only the table headers and the "Add" form are visible.
+ */
+export const Empty = {
+    args: {},
+    decorators: [
+        (Story) => (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", permissions: [], children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) })),
+    ],
+};
+/**
+ * All permissions locked by the root tenant. No "Remove" actions
+ * are available. This represents a leaf tenant with fully restricted
+ * permission management.
+ */
+export const AllLocked = {
+    args: {},
+    decorators: [
+        (Story) => {
+            const allLocked = mockPermissions.map((p) => ({
+                ...p,
+                mode: "LOCKED",
+                locked: true,
+                delegated: false,
+                source_tenant_id: "00000000-0000-0000-0000-000000000001",
+            }));
+            return (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", permissions: allLocked, children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) }));
+        },
+    ],
+};
+/**
+ * All permissions delegated to this tenant, meaning the tenant
+ * has full control and can remove any of them.
+ */
+export const AllDelegated = {
+    args: {},
+    decorators: [
+        (Story) => {
+            const allDelegated = mockPermissions.map((p) => ({
+                ...p,
+                mode: "DELEGATED",
+                locked: false,
+                delegated: true,
+                source_tenant_id: "00000000-0000-0000-0000-000000000003",
+            }));
+            return (_jsx(MockStratumProvider, { initialTenantId: "00000000-0000-0000-0000-000000000003", permissions: allDelegated, children: _jsx("div", { style: { padding: "24px", maxWidth: 900 }, children: _jsx(Story, {}) }) }));
+        },
+    ],
+};
+//# sourceMappingURL=PermissionEditor.stories.js.map

package/dist/components/PermissionEditor.stories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionEditor.stories.js","sourceRoot":"","sources":["../../src/components/PermissionEditor.stories.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9E,MAAM,IAAI,GAAkC;IAC1C,KAAK,EAAE,6BAA6B;IACpC,SAAS,EAAE,gBAAgB;IAC3B,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,WAAW,EAAE;gBACX,SAAS,EACP,qDAAqD;oBACrD,6EAA6E;oBAC7E,0EAA0E;oBAC1E,+EAA+E;aAClF;SACF;KACF;IACD,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE,CAAC,CACT,KAAC,mBAAmB,IAAC,eAAe,EAAC,sCAAsC,YACzE,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB;KACF;CACF,CAAC;AAEF,eAAe,IAAI,CAAC;AAGpB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAU;IAC5B,IAAI,EAAE,EAAE;CACT,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAU;IAC5B,IAAI,EAAE,EAAE;IACR,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE,CAAC,CACT,KAAC,mBAAmB,IAClB,eAAe,EAAC,sCAAsC,EACtD,OAAO,EAAE,IAAI,YAEb,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB;KACF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,KAAK,GAAU;IAC1B,IAAI,EAAE,EAAE;IACR,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE,CAAC,CACT,KAAC,mBAAmB,IAClB,eAAe,EAAC,sCAAsC,EACtD,WAAW,EAAE,EAAE,YAEf,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB;KACF;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAU;IAC9B,IAAI,EAAE,EAAE;IACR,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,GAAG,CAAC;gBACJ,IAAI,EAAE,QAAiB;gBACvB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,KAAK;gBAChB,gBAAgB,EAAE,sCAAsC;aACzD,CAAC,CAAC,CAAC;YACJ,OAAO,CACL,KAAC,mBAAmB,IAClB,eAAe,EAAC,sCAAsC,EACtD,WAAW,EAAE,SAAS,YAEtB,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB,CAAC;QACJ,CAAC;KACF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAU;IACjC,IAAI,EAAE,EAAE;IACR,UAAU,EAAE;QACV,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/C,GAAG,CAAC;gBACJ,IAAI,EAAE,WAAoB;gBAC1B,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,IAAI;gBACf,gBAAgB,EAAE,sCAAsC;aACzD,CAAC,CAAC,CAAC;YACJ,OAAO,CACL,KAAC,mBAAmB,IAClB,eAAe,EAAC,sCAAsC,EACtD,WAAW,EAAE,YAAY,YAEzB,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,YAC5C,KAAC,KAAK,KAAG,GACL,GACc,CACvB,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}

package/dist/components/Skeleton.d.ts

@@ -0,0 +1,14 @@
+export interface SkeletonProps {
+    /** Width of the skeleton element (CSS value) */
+    width?: string;
+    /** Height of the skeleton element (CSS value) */
+    height?: string;
+    /** Shape variant */
+    variant?: "text" | "rect" | "circle";
+    /** Number of skeleton elements to render */
+    count?: number;
+    /** Additional CSS class name */
+    className?: string;
+}
+export declare function Skeleton({ width, height, variant, count, className, }: SkeletonProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=Skeleton.d.ts.map

package/dist/components/Skeleton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Skeleton.d.ts","sourceRoot":"","sources":["../../src/components/Skeleton.tsx"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;IACrC,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,QAAQ,CAAC,EACvB,KAAK,EACL,MAAM,EACN,OAAgB,EAChB,KAAS,EACT,SAAS,GACV,EAAE,aAAa,2CAqCf"}

package/dist/components/Skeleton.js

@@ -0,0 +1,25 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+export function Skeleton({ width, height, variant = "text", count = 1, className, }) {
+    const variantStyles = {
+        text: {
+            width: width || "100%",
+            height: height || "0.8125rem",
+            borderRadius: "var(--radius-sm, 4px)",
+        },
+        rect: {
+            width: width || "100%",
+            height: height || "48px",
+            borderRadius: "var(--radius-sm, 4px)",
+        },
+        circle: {
+            width: width || "40px",
+            height: height || "40px",
+            borderRadius: "var(--radius-full, 9999px)",
+        },
+    }[variant];
+    const elements = Array.from({ length: count }, (_, i) => (_jsx("div", { className: `stratum-skeleton stratum-skeleton--${variant} ${className || ""}`, style: variantStyles, role: "status", "aria-label": "Loading", "aria-busy": "true" }, i)));
+    if (count === 1)
+        return elements[0];
+    return (_jsx("div", { className: "stratum-skeleton__group", style: { display: "flex", flexDirection: "column", gap: "var(--space-sm, 8px)" }, children: elements }));
+}
+//# sourceMappingURL=Skeleton.js.map

package/dist/components/Skeleton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Skeleton.js","sourceRoot":"","sources":["../../src/components/Skeleton.tsx"],"names":[],"mappings":";AAeA,MAAM,UAAU,QAAQ,CAAC,EACvB,KAAK,EACL,MAAM,EACN,OAAO,GAAG,MAAM,EAChB,KAAK,GAAG,CAAC,EACT,SAAS,GACK;IACd,MAAM,aAAa,GAAwB;QACzC,IAAI,EAAE;YACJ,KAAK,EAAE,KAAK,IAAI,MAAM;YACtB,MAAM,EAAE,MAAM,IAAI,WAAW;YAC7B,YAAY,EAAE,uBAAuB;SACtC;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,KAAK,IAAI,MAAM;YACtB,MAAM,EAAE,MAAM,IAAI,MAAM;YACxB,YAAY,EAAE,uBAAuB;SACtC;QACD,MAAM,EAAE;YACN,KAAK,EAAE,KAAK,IAAI,MAAM;YACtB,MAAM,EAAE,MAAM,IAAI,MAAM;YACxB,YAAY,EAAE,4BAA4B;SAC3C;KACF,CAAC,OAAO,CAAC,CAAC;IAEX,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CACvD,cAEE,SAAS,EAAE,sCAAsC,OAAO,IAAI,SAAS,IAAI,EAAE,EAAE,EAC7E,KAAK,EAAE,aAAa,EACpB,IAAI,EAAC,QAAQ,gBACF,SAAS,eACV,MAAM,IALX,CAAC,CAMN,CACH,CAAC,CAAC;IAEH,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;IAErC,OAAO,CACL,cAAK,SAAS,EAAC,yBAAyB,EAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAsB,EAAE,YACtH,QAAQ,GACL,CACP,CAAC;AACJ,CAAC"}

package/dist/components/Skeleton.stories.d.ts

@@ -0,0 +1,46 @@
+import type { Meta, StoryObj } from "@storybook/react";
+import { Skeleton } from "./Skeleton.js";
+import { TableSkeleton } from "./TableSkeleton.js";
+declare const meta: Meta<typeof Skeleton>;
+export default meta;
+type Story = StoryObj<typeof Skeleton>;
+/**
+ * Text variant — default skeleton for loading text lines.
+ * Full width, 13px height matching the base font size.
+ */
+export declare const Text: Story;
+/**
+ * Multiple text lines simulating a paragraph or list loading state.
+ */
+export declare const TextMultipleLines: Story;
+/**
+ * Rectangle variant — for cards, images, or block-level placeholders.
+ */
+export declare const Rect: Story;
+/**
+ * Circle variant — for avatar or icon placeholders.
+ */
+export declare const Circle: Story;
+/**
+ * Composite layout: avatar circle next to text lines,
+ * simulating a tenant detail card loading state.
+ */
+export declare const CompositeLayout: Story;
+/**
+ * Custom sizing with small dimensions for inline placeholders.
+ */
+export declare const CustomSizing: Story;
+/**
+ * Default TableSkeleton with 5 rows and 4 columns, matching the
+ * ConfigEditor table layout.
+ */
+export declare const TableDefault: StoryObj<typeof TableSkeleton>;
+/**
+ * Config-style table skeleton with 5 columns (Key, Value, Source, Status, Actions).
+ */
+export declare const TableConfigLayout: StoryObj<typeof TableSkeleton>;
+/**
+ * Minimal skeleton — 2 rows, 2 columns.
+ */
+export declare const TableMinimal: StoryObj<typeof TableSkeleton>;
+//# sourceMappingURL=Skeleton.stories.d.ts.map

package/dist/components/Skeleton.stories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Skeleton.stories.d.ts","sourceRoot":"","sources":["../../src/components/Skeleton.stories.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,OAAO,QAAQ,CAa/B,CAAC;AAEF,eAAe,IAAI,CAAC;AACpB,KAAK,KAAK,GAAG,QAAQ,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,IAAI,EAAE,KAWlB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,KAY/B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,IAAI,EAAE,KAalB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,MAAM,EAAE,KAapB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,KAgB7B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,KAa1B,CAAC;AAwBF;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,OAAO,aAAa,CAMvD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,OAAO,aAAa,CAM5D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,OAAO,aAAa,CAMvD,CAAC"}