@wildo-ai/presets-components 1.1.3 → 1.1.5

package/dist/esm/components/form/controls/file/providers/dropbox-picker.js

@@ -0,0 +1,137 @@
+/**
+ * Dropbox file picker — the component the `dropbox` provider contributes for `FRONTEND_FILE_PICKER`.
+ *
+ * ## Why it declares BROWSER_READABLE_URL, like OneDrive and unlike Drive
+ *
+ * The Chooser opened with `linkType: 'direct'` returns each chosen file carrying a link that needs no
+ * credential to fetch and expires after four hours. The browser genuinely can read the bytes, so the
+ * honest arm is `BROWSER_READABLE_URL` and the framework ingests the result into the field's own
+ * storage. Drive's picker returns metadata only, whose bytes need a credential the browser must not
+ * hold — which is why #383 was answered PER VENDOR rather than once.
+ *
+ * spec-cite: Dropbox Chooser reference —
+ * https://docs.dropboxapi.com/dropbox-api/docs/pre-built-components/chooser — for the `choose`
+ * options used here, the direct link being credential-free, and the returned file's fields.
+ * Paraphrased rather than quoted.
+ *
+ * ## The app key does NOT ride on the script tag
+ *
+ * The vendor documents `data-app-key` on a script carrying `id="dropboxjs"`, which the framework's
+ * declarative `scripts` channel cannot express: that declaration is static engine data and the key is
+ * per-application configuration. Reading the shipped `dropins.js` shows a second, public source —
+ * `Dropbox.init({ appKey })` — so the script is declared plainly in the provider module and the key
+ * is supplied HERE from `publicConfig`, after the script has executed.
+ *
+ * ## Two vendor limits worth knowing before debugging one
+ *
+ * `choose` has NO error callback — only `success` and `cancel` — so a failure inside the vendor's own
+ * overlay surfaces as a cancel or as silence. Everything this component CAN detect is checked before
+ * `choose` is called, which is why the guards below are eager rather than defensive.
+ *
+ * And a chosen file carries no MIME type. The selection therefore omits `mimeType` rather than
+ * guessing one from the extension: absent means UNKNOWN, and the field validates every chosen file
+ * against `allowedMimeTypes` on its own.
+ *
+ * ## Not proven in a browser
+ *
+ * Nothing here has been driven against a real Dropbox account. Tracked on #460, which is where the
+ * DROPBOX storage member's fate lives: this picker is the ATTACH-only offering, the governed path is
+ * not built, and `google-drive` remains the one proven governed mechanism.
+ */
+import { useEffect, useRef } from 'react';
+import { ProviderFrontendSelectionDelivery, } from '@wildo-ai/saas-models/public-runtime';
+function readString(value) {
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+function readNumber(value) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
+}
+/** Opens the Chooser as soon as it mounts — see the Drive picker for why mounting IS opening. */
+export function DropboxPicker(props) {
+    const openedRef = useRef(false);
+    useEffect(() => {
+        if (openedRef.current)
+            return;
+        openedRef.current = true;
+        let cancelled = false;
+        const fail = (message) => {
+            if (!cancelled)
+                props.onError(new Error(message));
+        };
+        const globals = window;
+        const dropbox = globals.Dropbox;
+        if (dropbox === undefined) {
+            fail('The Dropbox Chooser script has not loaded, so the picker cannot open. The `dropbox` provider declares it '
+                + 'in `scripts`; check that the surface injects provider scripts and that the composed '
+                + 'Content-Security-Policy admits https://www.dropbox.com.');
+            return;
+        }
+        const appKey = readString(props.publicConfig.appKey);
+        if (appKey === undefined) {
+            fail("The `dropbox` provider's publicConfig declares no `appKey`, which the Dropbox Chooser requires.");
+            return;
+        }
+        // The framework injects the script WITHOUT the vendor's documented `data-app-key` attribute — see
+        // the module note — so `init` is the only thing that can supply the key. A build of `dropins.js`
+        // without it would leave the Chooser keyless and throw from inside the vendor's own code, which is
+        // far harder to read than this sentence.
+        if (typeof dropbox.init !== 'function') {
+            fail('The loaded Dropbox Chooser script exposes no `Dropbox.init`, so its app key cannot be supplied. The '
+                + 'framework injects the script without the vendor-documented `data-app-key` attribute because that key is '
+                + 'per-application configuration, and `Dropbox.init({ appKey })` is the documented alternative.');
+            return;
+        }
+        dropbox.init({ appKey });
+        dropbox.choose({
+            // `direct` is what makes this picker's result browser-readable: it is the value that returns a
+            // credential-free download link rather than a shareable preview page. Changing it to `preview`
+            // would change what a selection CONTAINS, and the provider's declared `selectionDelivery` would
+            // then be a lie the framework refuses — see `receiveProviderFileSelections`.
+            linkType: 'direct',
+            multiselect: props.constraints.maxFiles !== undefined && props.constraints.maxFiles > 1,
+            // Incompatible with `linkType: 'direct'` by the vendor's own contract, and meaningless for a
+            // file field regardless: a folder has no bytes to ingest.
+            folderselect: false,
+            // Dropbox enforces this itself, so the user is stopped in the overlay rather than after
+            // choosing. Unlike the MIME allow-list, which the vendor filters by EXTENSION and so cannot be
+            // translated faithfully — that stays with the field, which validates every chosen file anyway.
+            ...(props.constraints.maxSize === undefined ? {} : { sizeLimit: props.constraints.maxSize }),
+            success: (files) => {
+                if (cancelled)
+                    return;
+                const selections = [];
+                for (const file of files) {
+                    const url = readString(file.link);
+                    // No link means the Chooser did not run with `linkType: 'direct'` — a misconfiguration, and
+                    // the one case where handing the selection up anyway would break the declaration this
+                    // provider makes.
+                    if (url === undefined) {
+                        fail('Dropbox returned a chosen file with no link. The Chooser must be opened with `linkType: "direct"` '
+                            + 'for its result to be browser-readable, which is what this provider declares.');
+                        return;
+                    }
+                    selections.push({
+                        kind: ProviderFrontendSelectionDelivery.BROWSER_READABLE_URL,
+                        url,
+                        displayName: readString(file.name),
+                        // No `mimeType`: Dropbox does not return one, and guessing from the extension would put an
+                        // invented value where the framework reads a fact.
+                        sizeBytes: readNumber(file.bytes),
+                    });
+                }
+                props.onSelect(selections);
+            },
+            cancel: () => {
+                if (!cancelled)
+                    props.onCancel();
+            },
+        });
+        return () => {
+            cancelled = true;
+        };
+        // Mount-only — see the Drive picker.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, []);
+    return null;
+}
+//# sourceMappingURL=dropbox-picker.js.map

package/dist/esm/components/form/controls/file/providers/dropbox-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dropbox-picker.js","sourceRoot":"","sources":["../../../../../../../../src/components/form/controls/file/providers/dropbox-picker.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,EACL,iCAAiC,GAGlC,MAAM,sCAAsC,CAAC;AAkC9C,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,KAA8B;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEhC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,CAAC,OAAO;YAAE,OAAO;QAC9B,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC;QAEzB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAQ,EAAE;YACrC,IAAI,CAAC,SAAS;gBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,MAAmC,CAAC;QACpD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CACF,2GAA2G;kBACzG,sFAAsF;kBACtF,yDAAyD,CAC5D,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,iGAAiG,CAAC,CAAC;YACxG,OAAO;QACT,CAAC;QAED,kGAAkG;QAClG,iGAAiG;QACjG,mGAAmG;QACnG,yCAAyC;QACzC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACvC,IAAI,CACF,sGAAsG;kBACpG,0GAA0G;kBAC1G,8FAA8F,CACjG,CAAC;YACF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzB,OAAO,CAAC,MAAM,CAAC;YACb,+FAA+F;YAC/F,+FAA+F;YAC/F,gGAAgG;YAChG,6EAA6E;YAC7E,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC;YACvF,6FAA6F;YAC7F,0DAA0D;YAC1D,YAAY,EAAE,KAAK;YACnB,wFAAwF;YACxF,+FAA+F;YAC/F,+FAA+F;YAC/F,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5F,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,SAAS;oBAAE,OAAO;gBAEtB,MAAM,UAAU,GAA4B,EAAE,CAAC;gBAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAClC,4FAA4F;oBAC5F,sFAAsF;oBACtF,kBAAkB;oBAClB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;wBACtB,IAAI,CACF,oGAAoG;8BAClG,8EAA8E,CACjF,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,iCAAiC,CAAC,oBAAoB;wBAC5D,GAAG;wBACH,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;wBAClC,2FAA2F;wBAC3F,mDAAmD;wBACnD,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;qBAClC,CAAC,CAAC;gBACL,CAAC;gBACD,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,CAAC,SAAS;oBAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnC,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;QACF,qCAAqC;QACrC,uDAAuD;IACzD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["/**\n * Dropbox file picker — the component the `dropbox` provider contributes for `FRONTEND_FILE_PICKER`.\n *\n * ## Why it declares BROWSER_READABLE_URL, like OneDrive and unlike Drive\n *\n * The Chooser opened with `linkType: 'direct'` returns each chosen file carrying a link that needs no\n * credential to fetch and expires after four hours. The browser genuinely can read the bytes, so the\n * honest arm is `BROWSER_READABLE_URL` and the framework ingests the result into the field's own\n * storage. Drive's picker returns metadata only, whose bytes need a credential the browser must not\n * hold — which is why #383 was answered PER VENDOR rather than once.\n *\n * spec-cite: Dropbox Chooser reference —\n * https://docs.dropboxapi.com/dropbox-api/docs/pre-built-components/chooser — for the `choose`\n * options used here, the direct link being credential-free, and the returned file's fields.\n * Paraphrased rather than quoted.\n *\n * ## The app key does NOT ride on the script tag\n *\n * The vendor documents `data-app-key` on a script carrying `id=\"dropboxjs\"`, which the framework's\n * declarative `scripts` channel cannot express: that declaration is static engine data and the key is\n * per-application configuration. Reading the shipped `dropins.js` shows a second, public source —\n * `Dropbox.init({ appKey })` — so the script is declared plainly in the provider module and the key\n * is supplied HERE from `publicConfig`, after the script has executed.\n *\n * ## Two vendor limits worth knowing before debugging one\n *\n * `choose` has NO error callback — only `success` and `cancel` — so a failure inside the vendor's own\n * overlay surfaces as a cancel or as silence. Everything this component CAN detect is checked before\n * `choose` is called, which is why the guards below are eager rather than defensive.\n *\n * And a chosen file carries no MIME type. The selection therefore omits `mimeType` rather than\n * guessing one from the extension: absent means UNKNOWN, and the field validates every chosen file\n * against `allowedMimeTypes` on its own.\n *\n * ## Not proven in a browser\n *\n * Nothing here has been driven against a real Dropbox account. Tracked on #460, which is where the\n * DROPBOX storage member's fate lives: this picker is the ATTACH-only offering, the governed path is\n * not built, and `google-drive` remains the one proven governed mechanism.\n */\n\nimport { useEffect, useRef } from 'react';\nimport {\n  ProviderFrontendSelectionDelivery,\n  type ProviderFilePickerProps,\n  type ProviderFileSelection,\n} from '@wildo-ai/saas-models/public-runtime';\n\n/** The slice of a chosen Dropbox file this component reads. */\ninterface DropboxChosenFile {\n  readonly id?: unknown;\n  readonly name?: unknown;\n  readonly link?: unknown;\n  readonly bytes?: unknown;\n  readonly isDir?: unknown;\n}\n\ninterface DropboxChooseOptions {\n  linkType: string;\n  multiselect: boolean;\n  folderselect: boolean;\n  sizeLimit?: number;\n  success(files: readonly DropboxChosenFile[]): void;\n  cancel(): void;\n}\n\n/**\n * The `Dropbox` global `dropins.js` installs.\n *\n * Typed locally for the same reason as the Drive and OneDrive pickers: the surface used is two\n * functions, and a `@types` package for a global that may not be present buys nothing this file does\n * not already state.\n */\ninterface DropboxGlobals {\n  readonly Dropbox?: {\n    choose(options: DropboxChooseOptions): void;\n    init?(options: { appKey: string }): void;\n  };\n}\n\nfunction readString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction readNumber(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined;\n}\n\n/** Opens the Chooser as soon as it mounts — see the Drive picker for why mounting IS opening. */\nexport function DropboxPicker(props: ProviderFilePickerProps): null {\n  const openedRef = useRef(false);\n\n  useEffect(() => {\n    if (openedRef.current) return;\n    openedRef.current = true;\n\n    let cancelled = false;\n    const fail = (message: string): void => {\n      if (!cancelled) props.onError(new Error(message));\n    };\n\n    const globals = window as unknown as DropboxGlobals;\n    const dropbox = globals.Dropbox;\n    if (dropbox === undefined) {\n      fail(\n        'The Dropbox Chooser script has not loaded, so the picker cannot open. The `dropbox` provider declares it '\n        + 'in `scripts`; check that the surface injects provider scripts and that the composed '\n        + 'Content-Security-Policy admits https://www.dropbox.com.',\n      );\n      return;\n    }\n\n    const appKey = readString(props.publicConfig.appKey);\n    if (appKey === undefined) {\n      fail(\"The `dropbox` provider's publicConfig declares no `appKey`, which the Dropbox Chooser requires.\");\n      return;\n    }\n\n    // The framework injects the script WITHOUT the vendor's documented `data-app-key` attribute — see\n    // the module note — so `init` is the only thing that can supply the key. A build of `dropins.js`\n    // without it would leave the Chooser keyless and throw from inside the vendor's own code, which is\n    // far harder to read than this sentence.\n    if (typeof dropbox.init !== 'function') {\n      fail(\n        'The loaded Dropbox Chooser script exposes no `Dropbox.init`, so its app key cannot be supplied. The '\n        + 'framework injects the script without the vendor-documented `data-app-key` attribute because that key is '\n        + 'per-application configuration, and `Dropbox.init({ appKey })` is the documented alternative.',\n      );\n      return;\n    }\n    dropbox.init({ appKey });\n\n    dropbox.choose({\n      // `direct` is what makes this picker's result browser-readable: it is the value that returns a\n      // credential-free download link rather than a shareable preview page. Changing it to `preview`\n      // would change what a selection CONTAINS, and the provider's declared `selectionDelivery` would\n      // then be a lie the framework refuses — see `receiveProviderFileSelections`.\n      linkType: 'direct',\n      multiselect: props.constraints.maxFiles !== undefined && props.constraints.maxFiles > 1,\n      // Incompatible with `linkType: 'direct'` by the vendor's own contract, and meaningless for a\n      // file field regardless: a folder has no bytes to ingest.\n      folderselect: false,\n      // Dropbox enforces this itself, so the user is stopped in the overlay rather than after\n      // choosing. Unlike the MIME allow-list, which the vendor filters by EXTENSION and so cannot be\n      // translated faithfully — that stays with the field, which validates every chosen file anyway.\n      ...(props.constraints.maxSize === undefined ? {} : { sizeLimit: props.constraints.maxSize }),\n      success: (files) => {\n        if (cancelled) return;\n\n        const selections: ProviderFileSelection[] = [];\n        for (const file of files) {\n          const url = readString(file.link);\n          // No link means the Chooser did not run with `linkType: 'direct'` — a misconfiguration, and\n          // the one case where handing the selection up anyway would break the declaration this\n          // provider makes.\n          if (url === undefined) {\n            fail(\n              'Dropbox returned a chosen file with no link. The Chooser must be opened with `linkType: \"direct\"` '\n              + 'for its result to be browser-readable, which is what this provider declares.',\n            );\n            return;\n          }\n          selections.push({\n            kind: ProviderFrontendSelectionDelivery.BROWSER_READABLE_URL,\n            url,\n            displayName: readString(file.name),\n            // No `mimeType`: Dropbox does not return one, and guessing from the extension would put an\n            // invented value where the framework reads a fact.\n            sizeBytes: readNumber(file.bytes),\n          });\n        }\n        props.onSelect(selections);\n      },\n      cancel: () => {\n        if (!cancelled) props.onCancel();\n      },\n    });\n\n    return () => {\n      cancelled = true;\n    };\n    // Mount-only — see the Drive picker.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  return null;\n}\n"]}

package/dist/esm/components/form/controls/file/providers/dropbox-picker.lazy.d.ts

@@ -0,0 +1,22 @@
+/**
+ * DropboxPickerLazy — the ONLY public door onto the DropboxPicker module.
+ *
+ * Lazy-boundary wrapper (`*.lazy.tsx` convention, PdfViewerLazy precedent): owns the
+ * `React.lazy(() => import(...))` split point so the picker's code never lands in the
+ * application's entry chunk, and `pnpm check:lazy-boundaries` refuses any static import of
+ * the wrapped module from anywhere else. A provider picker is opened by a user who asked
+ * for one; every other visitor pays nothing for it.
+ *
+ * No Suspense fallback with a shape: a picker renders NOTHING of its own (it opens a
+ * vendor overlay), so reserving layout would draw a box where there will never be one.
+ */
+import * as React from "react";
+import type { ProviderFilePickerProps } from "@wildo-ai/saas-models/public-runtime";
+/**
+ * A chunk that fails to download throws during render, and Suspense does not catch it. The door
+ * catches it and reports it through the picker contract's own `onError` — the channel the host
+ * already turns into `onProviderFailure` — so a picker that could not arrive is a reported failure,
+ * not a crashed form.
+ */
+export declare function DropboxPickerLazy(props: ProviderFilePickerProps): React.JSX.Element;
+//# sourceMappingURL=dropbox-picker.lazy.d.ts.map

package/dist/esm/components/form/controls/file/providers/dropbox-picker.lazy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dropbox-picker.lazy.d.ts","sourceRoot":"","sources":["../../../../../../../../src/components/form/controls/file/providers/dropbox-picker.lazy.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAA;AAKnF;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,uBAAuB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAQnF"}

package/dist/esm/components/form/controls/file/providers/dropbox-picker.lazy.js

@@ -0,0 +1,27 @@
+"use client";
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * DropboxPickerLazy — the ONLY public door onto the DropboxPicker module.
+ *
+ * Lazy-boundary wrapper (`*.lazy.tsx` convention, PdfViewerLazy precedent): owns the
+ * `React.lazy(() => import(...))` split point so the picker's code never lands in the
+ * application's entry chunk, and `pnpm check:lazy-boundaries` refuses any static import of
+ * the wrapped module from anywhere else. A provider picker is opened by a user who asked
+ * for one; every other visitor pays nothing for it.
+ *
+ * No Suspense fallback with a shape: a picker renders NOTHING of its own (it opens a
+ * vendor overlay), so reserving layout would draw a box where there will never be one.
+ */
+import * as React from "react";
+import { LazyDoorErrorBoundary } from "@wildo-ai/saas-frontend-lib";
+const LazyDropboxPicker = React.lazy(async () => ({ default: (await import("./dropbox-picker.js")).DropboxPicker }));
+/**
+ * A chunk that fails to download throws during render, and Suspense does not catch it. The door
+ * catches it and reports it through the picker contract's own `onError` — the channel the host
+ * already turns into `onProviderFailure` — so a picker that could not arrive is a reported failure,
+ * not a crashed form.
+ */
+export function DropboxPickerLazy(props) {
+    return (_jsx(LazyDoorErrorBoundary, { doorName: "DropboxPickerLazy", fallback: null, onError: props.onError, children: _jsx(React.Suspense, { fallback: null, children: _jsx(LazyDropboxPicker, { ...props }) }) }));
+}
+//# sourceMappingURL=dropbox-picker.lazy.js.map

package/dist/esm/components/form/controls/file/providers/dropbox-picker.lazy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dropbox-picker.lazy.js","sourceRoot":"","sources":["../../../../../../../../src/components/form/controls/file/providers/dropbox-picker.lazy.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAE9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAEnE,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;AAEjH;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA8B;IAC9D,OAAO,CACL,KAAC,qBAAqB,IAAC,QAAQ,EAAC,mBAAmB,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,YACxF,KAAC,KAAK,CAAC,QAAQ,IAAC,QAAQ,EAAE,IAAI,YAC5B,KAAC,iBAAiB,OAAK,KAAK,GAAI,GACjB,GACK,CACzB,CAAA;AACH,CAAC","sourcesContent":["\"use client\"\n\n/**\n * DropboxPickerLazy — the ONLY public door onto the DropboxPicker module.\n *\n * Lazy-boundary wrapper (`*.lazy.tsx` convention, PdfViewerLazy precedent): owns the\n * `React.lazy(() => import(...))` split point so the picker's code never lands in the\n * application's entry chunk, and `pnpm check:lazy-boundaries` refuses any static import of\n * the wrapped module from anywhere else. A provider picker is opened by a user who asked\n * for one; every other visitor pays nothing for it.\n *\n * No Suspense fallback with a shape: a picker renders NOTHING of its own (it opens a\n * vendor overlay), so reserving layout would draw a box where there will never be one.\n */\n\nimport * as React from \"react\"\nimport type { ProviderFilePickerProps } from \"@wildo-ai/saas-models/public-runtime\"\nimport { LazyDoorErrorBoundary } from \"@wildo-ai/saas-frontend-lib\"\n\nconst LazyDropboxPicker = React.lazy(async () => ({ default: (await import(\"./dropbox-picker\")).DropboxPicker }))\n\n/**\n * A chunk that fails to download throws during render, and Suspense does not catch it. The door\n * catches it and reports it through the picker contract's own `onError` — the channel the host\n * already turns into `onProviderFailure` — so a picker that could not arrive is a reported failure,\n * not a crashed form.\n */\nexport function DropboxPickerLazy(props: ProviderFilePickerProps): React.JSX.Element {\n  return (\n    <LazyDoorErrorBoundary doorName=\"DropboxPickerLazy\" fallback={null} onError={props.onError}>\n      <React.Suspense fallback={null}>\n        <LazyDropboxPicker {...props} />\n      </React.Suspense>\n    </LazyDoorErrorBoundary>\n  )\n}\n"]}

package/dist/esm/components/form/controls/file/providers/google-drive-picker.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Google Drive file picker — the component the `google-drive` provider contributes for
+ * `FRONTEND_FILE_PICKER`.
+ *
+ * ## Why it declares REMOTE_REFERENCE
+ *
+ * Drive's Picker hands back file METADATA — an id, a name, a mime type — never
+ * the bytes. Fetching the bytes is a separate authenticated call to the Drive
+ * API, and in a Wildo application the credential that call needs belongs to the
+ * backend. So a selection here is an opaque handle the application's executor
+ * door resolves, which is exactly `REMOTE_REFERENCE`.
+ *
+ * Its sibling `onedrive-picker.tsx` declares the OTHER arm,
+ * and the contrast is why issue #383 was answered per-vendor rather than
+ * globally: two real pickers for one capability genuinely return different
+ * things, and a framework insisting on one contract would have had to exclude
+ * one of them.
+ *
+ * ## Why it lives in presets-components, behind a lazy boundary
+ *
+ * The engine's provider MODULES live in `@wildo-ai/external-connectors-public`,
+ * which ships into three browser bundles behind a one-entry allow-list and
+ * deliberately has no renderer. A component cannot live there, and that
+ * package cannot name a loader that reaches this one either — it would close a
+ * package cycle. So the module DECLARES the picker (its delivery, its keys) and
+ * this library REGISTERS the loader beside its presets (`register-provider-components.ts`),
+ * keyed by capability and provider ref. `google-drive-picker.lazy.tsx` is the
+ * only door onto this file, and `check:lazy-boundaries` keeps it that way.
+ *
+ * This component has no vendor dependency: the Picker arrives as a `<script>`
+ * global the provider module declares. A per-vendor package was built for it
+ * first and retired for exactly that reason (#394).
+ *
+ * ## Not proven in a browser
+ *
+ * Nothing here has been driven against a real Drive account: the Picker
+ * authorizes as the SIGNED-IN USER, so it needs a user-consented OAuth token,
+ * which is the account-connection surface (#333) and does not exist yet. Without
+ * one this picker reports through `onError` and opens nothing — deliberately,
+ * rather than reading a token from `publicConfig`, which is served to every
+ * browser. Tracked on #569, which is this picker's own unproven record — a Drive file picked, linked
+ * and read through the GOOGLE_DRIVE storage by somebody who did not write it. (The previous pointer
+ * here was #359, which is closed.)
+ */
+import { type ProviderFilePickerProps } from '@wildo-ai/saas-models/public-runtime';
+/**
+ * Opens the Drive picker as soon as it mounts.
+ *
+ * Mounting IS opening: the framework host mounts a picker only once a user has
+ * asked for one, so an extra button inside the component would be a second click
+ * for the same intent.
+ */
+export declare function GoogleDrivePicker(props: ProviderFilePickerProps): null;
+//# sourceMappingURL=google-drive-picker.d.ts.map

package/dist/esm/components/form/controls/file/providers/google-drive-picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-drive-picker.d.ts","sourceRoot":"","sources":["../../../../../../../../src/components/form/controls/file/providers/google-drive-picker.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAGH,OAAO,EAEL,KAAK,uBAAuB,EAE7B,MAAM,sCAAsC,CAAC;AAsD9C;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,CAuGtE"}

package/dist/esm/components/form/controls/file/providers/google-drive-picker.js

@@ -0,0 +1,159 @@
+/**
+ * Google Drive file picker — the component the `google-drive` provider contributes for
+ * `FRONTEND_FILE_PICKER`.
+ *
+ * ## Why it declares REMOTE_REFERENCE
+ *
+ * Drive's Picker hands back file METADATA — an id, a name, a mime type — never
+ * the bytes. Fetching the bytes is a separate authenticated call to the Drive
+ * API, and in a Wildo application the credential that call needs belongs to the
+ * backend. So a selection here is an opaque handle the application's executor
+ * door resolves, which is exactly `REMOTE_REFERENCE`.
+ *
+ * Its sibling `onedrive-picker.tsx` declares the OTHER arm,
+ * and the contrast is why issue #383 was answered per-vendor rather than
+ * globally: two real pickers for one capability genuinely return different
+ * things, and a framework insisting on one contract would have had to exclude
+ * one of them.
+ *
+ * ## Why it lives in presets-components, behind a lazy boundary
+ *
+ * The engine's provider MODULES live in `@wildo-ai/external-connectors-public`,
+ * which ships into three browser bundles behind a one-entry allow-list and
+ * deliberately has no renderer. A component cannot live there, and that
+ * package cannot name a loader that reaches this one either — it would close a
+ * package cycle. So the module DECLARES the picker (its delivery, its keys) and
+ * this library REGISTERS the loader beside its presets (`register-provider-components.ts`),
+ * keyed by capability and provider ref. `google-drive-picker.lazy.tsx` is the
+ * only door onto this file, and `check:lazy-boundaries` keeps it that way.
+ *
+ * This component has no vendor dependency: the Picker arrives as a `<script>`
+ * global the provider module declares. A per-vendor package was built for it
+ * first and retired for exactly that reason (#394).
+ *
+ * ## Not proven in a browser
+ *
+ * Nothing here has been driven against a real Drive account: the Picker
+ * authorizes as the SIGNED-IN USER, so it needs a user-consented OAuth token,
+ * which is the account-connection surface (#333) and does not exist yet. Without
+ * one this picker reports through `onError` and opens nothing — deliberately,
+ * rather than reading a token from `publicConfig`, which is served to every
+ * browser. Tracked on #569, which is this picker's own unproven record — a Drive file picked, linked
+ * and read through the GOOGLE_DRIVE storage by somebody who did not write it. (The previous pointer
+ * here was #359, which is closed.)
+ */
+import { useEffect, useRef } from 'react';
+import { ProviderFrontendSelectionDelivery, } from '@wildo-ai/saas-models/public-runtime';
+function readString(value) {
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+function readNumber(value) {
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    // Drive reports `sizeBytes` as a decimal STRING for large files, so this is a
+    // real case rather than defensiveness. A bare `Number()` would turn an empty
+    // string into 0 and claim the file is empty.
+    const parsed = typeof value === 'string' && value.trim() !== '' ? Number(value) : Number.NaN;
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+/**
+ * Opens the Drive picker as soon as it mounts.
+ *
+ * Mounting IS opening: the framework host mounts a picker only once a user has
+ * asked for one, so an extra button inside the component would be a second click
+ * for the same intent.
+ */
+export function GoogleDrivePicker(props) {
+    // A picker must open exactly once per mount. Without this, any re-render
+    // caused by a parent — a resize, a sibling's state — would open a second Drive
+    // dialog over the first, and dismissing one would leave the other live.
+    const openedRef = useRef(false);
+    useEffect(() => {
+        if (openedRef.current)
+            return;
+        openedRef.current = true;
+        let cancelled = false;
+        const fail = (message) => {
+            if (!cancelled)
+                props.onError(new Error(message));
+        };
+        void (async () => {
+            const globals = window;
+            if (globals.gapi === undefined) {
+                fail('The Google API script has not loaded, so the Drive picker cannot open. The `google-drive` provider '
+                    + 'declares it in `scripts`; check that the surface injects provider scripts and that the composed '
+                    + 'Content-Security-Policy admits https://apis.google.com.');
+                return;
+            }
+            const token = await props.getAccessToken?.();
+            if (token === undefined) {
+                fail('No Google access token is available for this user, so the Drive picker cannot open. The Picker '
+                    + "authorizes as the SIGNED-IN USER, so the application must connect the user's Google account "
+                    + 'first. A token must never be read from `publicConfig`, which is served to every browser.');
+                return;
+            }
+            const appId = readString(props.publicConfig.appId);
+            if (appId === undefined) {
+                fail("The `google-drive` provider's publicConfig declares no `appId`, which the Drive picker requires.");
+                return;
+            }
+            globals.gapi.load('picker', () => {
+                const picker = window.google?.picker;
+                if (picker === undefined) {
+                    fail('The Google Picker module loaded but installed no `google.picker` global.');
+                    return;
+                }
+                const builder = new picker.PickerBuilder()
+                    .setOAuthToken(token)
+                    .setAppId(appId)
+                    .addView(new picker.DocsView(picker.ViewId.DOCS))
+                    .setCallback((data) => {
+                    if (cancelled)
+                        return;
+                    if (data.action === picker.Action.CANCEL) {
+                        props.onCancel();
+                        return;
+                    }
+                    if (data.action !== picker.Action.PICKED)
+                        return;
+                    const selections = [];
+                    for (const document of data.docs ?? []) {
+                        const externalId = readString(document.id);
+                        // A document with no id is one the backend could never resolve.
+                        // Reporting beats handing up a selection whose reference is empty,
+                        // which would fail later and somewhere else.
+                        if (externalId === undefined) {
+                            fail('Google Picker returned a selected document with no id, which cannot be resolved.');
+                            return;
+                        }
+                        selections.push({
+                            kind: ProviderFrontendSelectionDelivery.REMOTE_REFERENCE,
+                            externalId,
+                            displayName: readString(document.name),
+                            mimeType: readString(document.mimeType),
+                            sizeBytes: readNumber(document.sizeBytes),
+                        });
+                    }
+                    props.onSelect(selections);
+                });
+                if (props.constraints.maxFiles !== undefined && props.constraints.maxFiles > 1) {
+                    builder.enableFeature('multiselectEnabled');
+                }
+                const developerKey = readString(props.publicConfig.developerKey);
+                if (developerKey !== undefined)
+                    builder.setDeveloperKey(developerKey);
+                builder.build().setVisible(true);
+            });
+        })();
+        return () => {
+            cancelled = true;
+        };
+        // Mount-only: re-running this opens a second dialog, and every prop it reads
+        // is fixed for the life of one picker.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, []);
+    // The picker is a vendor-owned overlay. This component renders nothing of its
+    // own and must not put a placeholder behind it.
+    return null;
+}
+//# sourceMappingURL=google-drive-picker.js.map

package/dist/esm/components/form/controls/file/providers/google-drive-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-drive-picker.js","sourceRoot":"","sources":["../../../../../../../../src/components/form/controls/file/providers/google-drive-picker.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,EACL,iCAAiC,GAGlC,MAAM,sCAAsC,CAAC;AAyC9C,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,8EAA8E;IAC9E,6EAA6E;IAC7E,6CAA6C;IAC7C,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAC7F,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA8B;IAC9D,yEAAyE;IACzE,+EAA+E;IAC/E,wEAAwE;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEhC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,CAAC,OAAO;YAAE,OAAO;QAC9B,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC;QAEzB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAQ,EAAE;YACrC,IAAI,CAAC,SAAS;gBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC;QAEF,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,OAAO,GAAG,MAAwC,CAAC;YACzD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CACF,qGAAqG;sBACnG,kGAAkG;sBAClG,yDAAyD,CAC5D,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CACF,iGAAiG;sBAC/F,8FAA8F;sBAC9F,0FAA0F,CAC7F,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,kGAAkG,CAAC,CAAC;gBACzG,OAAO;YACT,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC/B,MAAM,MAAM,GAAI,MAAyC,CAAC,MAAM,EAAE,MAAM,CAAC;gBACzE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,IAAI,CAAC,0EAA0E,CAAC,CAAC;oBACjF,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,aAAa,EAAE;qBACvC,aAAa,CAAC,KAAK,CAAC;qBACpB,QAAQ,CAAC,KAAK,CAAC;qBACf,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;qBAChD,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE;oBACpB,IAAI,SAAS;wBAAE,OAAO;oBACtB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;wBACzC,KAAK,CAAC,QAAQ,EAAE,CAAC;wBACjB,OAAO;oBACT,CAAC;oBACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM;wBAAE,OAAO;oBAEjD,MAAM,UAAU,GAA4B,EAAE,CAAC;oBAC/C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;wBACvC,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;wBAC3C,gEAAgE;wBAChE,mEAAmE;wBACnE,6CAA6C;wBAC7C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;4BAC7B,IAAI,CAAC,kFAAkF,CAAC,CAAC;4BACzF,OAAO;wBACT,CAAC;wBACD,UAAU,CAAC,IAAI,CAAC;4BACd,IAAI,EAAE,iCAAiC,CAAC,gBAAgB;4BACxD,UAAU;4BACV,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;4BACtC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;4BACvC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;yBAC1C,CAAC,CAAC;oBACL,CAAC;oBACD,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC7B,CAAC,CAAC,CAAC;gBAEL,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/E,OAAO,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;gBAC9C,CAAC;gBACD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBACjE,IAAI,YAAY,KAAK,SAAS;oBAAE,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBAEtE,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;QACF,6EAA6E;QAC7E,uCAAuC;QACvC,uDAAuD;IACzD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,8EAA8E;IAC9E,gDAAgD;IAChD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["/**\n * Google Drive file picker — the component the `google-drive` provider contributes for\n * `FRONTEND_FILE_PICKER`.\n *\n * ## Why it declares REMOTE_REFERENCE\n *\n * Drive's Picker hands back file METADATA — an id, a name, a mime type — never\n * the bytes. Fetching the bytes is a separate authenticated call to the Drive\n * API, and in a Wildo application the credential that call needs belongs to the\n * backend. So a selection here is an opaque handle the application's executor\n * door resolves, which is exactly `REMOTE_REFERENCE`.\n *\n * Its sibling `onedrive-picker.tsx` declares the OTHER arm,\n * and the contrast is why issue #383 was answered per-vendor rather than\n * globally: two real pickers for one capability genuinely return different\n * things, and a framework insisting on one contract would have had to exclude\n * one of them.\n *\n * ## Why it lives in presets-components, behind a lazy boundary\n *\n * The engine's provider MODULES live in `@wildo-ai/external-connectors-public`,\n * which ships into three browser bundles behind a one-entry allow-list and\n * deliberately has no renderer. A component cannot live there, and that\n * package cannot name a loader that reaches this one either — it would close a\n * package cycle. So the module DECLARES the picker (its delivery, its keys) and\n * this library REGISTERS the loader beside its presets (`register-provider-components.ts`),\n * keyed by capability and provider ref. `google-drive-picker.lazy.tsx` is the\n * only door onto this file, and `check:lazy-boundaries` keeps it that way.\n *\n * This component has no vendor dependency: the Picker arrives as a `<script>`\n * global the provider module declares. A per-vendor package was built for it\n * first and retired for exactly that reason (#394).\n *\n * ## Not proven in a browser\n *\n * Nothing here has been driven against a real Drive account: the Picker\n * authorizes as the SIGNED-IN USER, so it needs a user-consented OAuth token,\n * which is the account-connection surface (#333) and does not exist yet. Without\n * one this picker reports through `onError` and opens nothing — deliberately,\n * rather than reading a token from `publicConfig`, which is served to every\n * browser. Tracked on #569, which is this picker's own unproven record — a Drive file picked, linked\n * and read through the GOOGLE_DRIVE storage by somebody who did not write it. (The previous pointer\n * here was #359, which is closed.)\n */\n\nimport { useEffect, useRef } from 'react';\nimport {\n  ProviderFrontendSelectionDelivery,\n  type ProviderFilePickerProps,\n  type ProviderFileSelection,\n} from '@wildo-ai/saas-models/public-runtime';\n\n/** The slice of Drive's picker metadata this component reads. */\ninterface GooglePickerDocument {\n  readonly id?: unknown;\n  readonly name?: unknown;\n  readonly mimeType?: unknown;\n  readonly sizeBytes?: unknown;\n}\n\ninterface GooglePickerBuilder {\n  setOAuthToken(token: string): GooglePickerBuilder;\n  setAppId(appId: string): GooglePickerBuilder;\n  setDeveloperKey(key: string): GooglePickerBuilder;\n  addView(view: object): GooglePickerBuilder;\n  enableFeature(feature: string): GooglePickerBuilder;\n  setCallback(\n    callback: (data: { action?: unknown; docs?: readonly GooglePickerDocument[] }) => void,\n  ): GooglePickerBuilder;\n  build(): { setVisible(visible: boolean): void };\n}\n\n/**\n * The `gapi` / `google.picker` globals the vendor's `<script>` installs.\n *\n * Typed structurally and locally rather than through `@types/gapi`: the surface\n * used here is four calls wide, and a `@types` package for a global that may not\n * be present is a dependency bought for a shape this file already states.\n */\ninterface GooglePickerGlobals {\n  readonly gapi?: { load(name: string, callback: () => void): void };\n  readonly google?: {\n    readonly picker?: {\n      readonly Action: { readonly PICKED: string; readonly CANCEL: string };\n      readonly ViewId: { readonly DOCS: string };\n      readonly PickerBuilder: new () => GooglePickerBuilder;\n      readonly DocsView: new (viewId: string) => object;\n    };\n  };\n}\n\nfunction readString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction readNumber(value: unknown): number | undefined {\n  if (typeof value === 'number' && Number.isFinite(value)) return value;\n  // Drive reports `sizeBytes` as a decimal STRING for large files, so this is a\n  // real case rather than defensiveness. A bare `Number()` would turn an empty\n  // string into 0 and claim the file is empty.\n  const parsed = typeof value === 'string' && value.trim() !== '' ? Number(value) : Number.NaN;\n  return Number.isFinite(parsed) ? parsed : undefined;\n}\n\n/**\n * Opens the Drive picker as soon as it mounts.\n *\n * Mounting IS opening: the framework host mounts a picker only once a user has\n * asked for one, so an extra button inside the component would be a second click\n * for the same intent.\n */\nexport function GoogleDrivePicker(props: ProviderFilePickerProps): null {\n  // A picker must open exactly once per mount. Without this, any re-render\n  // caused by a parent — a resize, a sibling's state — would open a second Drive\n  // dialog over the first, and dismissing one would leave the other live.\n  const openedRef = useRef(false);\n\n  useEffect(() => {\n    if (openedRef.current) return;\n    openedRef.current = true;\n\n    let cancelled = false;\n    const fail = (message: string): void => {\n      if (!cancelled) props.onError(new Error(message));\n    };\n\n    void (async () => {\n      const globals = window as unknown as GooglePickerGlobals;\n      if (globals.gapi === undefined) {\n        fail(\n          'The Google API script has not loaded, so the Drive picker cannot open. The `google-drive` provider '\n          + 'declares it in `scripts`; check that the surface injects provider scripts and that the composed '\n          + 'Content-Security-Policy admits https://apis.google.com.',\n        );\n        return;\n      }\n\n      const token = await props.getAccessToken?.();\n      if (token === undefined) {\n        fail(\n          'No Google access token is available for this user, so the Drive picker cannot open. The Picker '\n          + \"authorizes as the SIGNED-IN USER, so the application must connect the user's Google account \"\n          + 'first. A token must never be read from `publicConfig`, which is served to every browser.',\n        );\n        return;\n      }\n\n      const appId = readString(props.publicConfig.appId);\n      if (appId === undefined) {\n        fail(\"The `google-drive` provider's publicConfig declares no `appId`, which the Drive picker requires.\");\n        return;\n      }\n\n      globals.gapi.load('picker', () => {\n        const picker = (window as unknown as GooglePickerGlobals).google?.picker;\n        if (picker === undefined) {\n          fail('The Google Picker module loaded but installed no `google.picker` global.');\n          return;\n        }\n\n        const builder = new picker.PickerBuilder()\n          .setOAuthToken(token)\n          .setAppId(appId)\n          .addView(new picker.DocsView(picker.ViewId.DOCS))\n          .setCallback((data) => {\n            if (cancelled) return;\n            if (data.action === picker.Action.CANCEL) {\n              props.onCancel();\n              return;\n            }\n            if (data.action !== picker.Action.PICKED) return;\n\n            const selections: ProviderFileSelection[] = [];\n            for (const document of data.docs ?? []) {\n              const externalId = readString(document.id);\n              // A document with no id is one the backend could never resolve.\n              // Reporting beats handing up a selection whose reference is empty,\n              // which would fail later and somewhere else.\n              if (externalId === undefined) {\n                fail('Google Picker returned a selected document with no id, which cannot be resolved.');\n                return;\n              }\n              selections.push({\n                kind: ProviderFrontendSelectionDelivery.REMOTE_REFERENCE,\n                externalId,\n                displayName: readString(document.name),\n                mimeType: readString(document.mimeType),\n                sizeBytes: readNumber(document.sizeBytes),\n              });\n            }\n            props.onSelect(selections);\n          });\n\n        if (props.constraints.maxFiles !== undefined && props.constraints.maxFiles > 1) {\n          builder.enableFeature('multiselectEnabled');\n        }\n        const developerKey = readString(props.publicConfig.developerKey);\n        if (developerKey !== undefined) builder.setDeveloperKey(developerKey);\n\n        builder.build().setVisible(true);\n      });\n    })();\n\n    return () => {\n      cancelled = true;\n    };\n    // Mount-only: re-running this opens a second dialog, and every prop it reads\n    // is fixed for the life of one picker.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  // The picker is a vendor-owned overlay. This component renders nothing of its\n  // own and must not put a placeholder behind it.\n  return null;\n}\n"]}

package/dist/esm/components/form/controls/file/providers/google-drive-picker.lazy.d.ts

@@ -0,0 +1,22 @@
+/**
+ * GoogleDrivePickerLazy — the ONLY public door onto the GoogleDrivePicker module.
+ *
+ * Lazy-boundary wrapper (`*.lazy.tsx` convention, PdfViewerLazy precedent): owns the
+ * `React.lazy(() => import(...))` split point so the picker's code never lands in the
+ * application's entry chunk, and `pnpm check:lazy-boundaries` refuses any static import of
+ * the wrapped module from anywhere else. A provider picker is opened by a user who asked
+ * for one; every other visitor pays nothing for it.
+ *
+ * No Suspense fallback with a shape: a picker renders NOTHING of its own (it opens a
+ * vendor overlay), so reserving layout would draw a box where there will never be one.
+ */
+import * as React from "react";
+import type { ProviderFilePickerProps } from "@wildo-ai/saas-models/public-runtime";
+/**
+ * A chunk that fails to download throws during render, and Suspense does not catch it. The door
+ * catches it and reports it through the picker contract's own `onError` — the channel the host
+ * already turns into `onProviderFailure` — so a picker that could not arrive is a reported failure,
+ * not a crashed form.
+ */
+export declare function GoogleDrivePickerLazy(props: ProviderFilePickerProps): React.JSX.Element;
+//# sourceMappingURL=google-drive-picker.lazy.d.ts.map

package/dist/esm/components/form/controls/file/providers/google-drive-picker.lazy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-drive-picker.lazy.d.ts","sourceRoot":"","sources":["../../../../../../../../src/components/form/controls/file/providers/google-drive-picker.lazy.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAA;AAKnF;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,uBAAuB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAQvF"}

package/dist/esm/components/form/controls/file/providers/google-drive-picker.lazy.js

@@ -0,0 +1,27 @@
+"use client";
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * GoogleDrivePickerLazy — the ONLY public door onto the GoogleDrivePicker module.
+ *
+ * Lazy-boundary wrapper (`*.lazy.tsx` convention, PdfViewerLazy precedent): owns the
+ * `React.lazy(() => import(...))` split point so the picker's code never lands in the
+ * application's entry chunk, and `pnpm check:lazy-boundaries` refuses any static import of
+ * the wrapped module from anywhere else. A provider picker is opened by a user who asked
+ * for one; every other visitor pays nothing for it.
+ *
+ * No Suspense fallback with a shape: a picker renders NOTHING of its own (it opens a
+ * vendor overlay), so reserving layout would draw a box where there will never be one.
+ */
+import * as React from "react";
+import { LazyDoorErrorBoundary } from "@wildo-ai/saas-frontend-lib";
+const LazyGoogleDrivePicker = React.lazy(async () => ({ default: (await import("./google-drive-picker.js")).GoogleDrivePicker }));
+/**
+ * A chunk that fails to download throws during render, and Suspense does not catch it. The door
+ * catches it and reports it through the picker contract's own `onError` — the channel the host
+ * already turns into `onProviderFailure` — so a picker that could not arrive is a reported failure,
+ * not a crashed form.
+ */
+export function GoogleDrivePickerLazy(props) {
+    return (_jsx(LazyDoorErrorBoundary, { doorName: "GoogleDrivePickerLazy", fallback: null, onError: props.onError, children: _jsx(React.Suspense, { fallback: null, children: _jsx(LazyGoogleDrivePicker, { ...props }) }) }));
+}
+//# sourceMappingURL=google-drive-picker.lazy.js.map

package/dist/esm/components/form/controls/file/providers/google-drive-picker.lazy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-drive-picker.lazy.js","sourceRoot":"","sources":["../../../../../../../../src/components/form/controls/file/providers/google-drive-picker.lazy.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAE9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAEnE,MAAM,qBAAqB,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;AAE9H;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA8B;IAClE,OAAO,CACL,KAAC,qBAAqB,IAAC,QAAQ,EAAC,uBAAuB,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,YAC5F,KAAC,KAAK,CAAC,QAAQ,IAAC,QAAQ,EAAE,IAAI,YAC5B,KAAC,qBAAqB,OAAK,KAAK,GAAI,GACrB,GACK,CACzB,CAAA;AACH,CAAC","sourcesContent":["\"use client\"\n\n/**\n * GoogleDrivePickerLazy — the ONLY public door onto the GoogleDrivePicker module.\n *\n * Lazy-boundary wrapper (`*.lazy.tsx` convention, PdfViewerLazy precedent): owns the\n * `React.lazy(() => import(...))` split point so the picker's code never lands in the\n * application's entry chunk, and `pnpm check:lazy-boundaries` refuses any static import of\n * the wrapped module from anywhere else. A provider picker is opened by a user who asked\n * for one; every other visitor pays nothing for it.\n *\n * No Suspense fallback with a shape: a picker renders NOTHING of its own (it opens a\n * vendor overlay), so reserving layout would draw a box where there will never be one.\n */\n\nimport * as React from \"react\"\nimport type { ProviderFilePickerProps } from \"@wildo-ai/saas-models/public-runtime\"\nimport { LazyDoorErrorBoundary } from \"@wildo-ai/saas-frontend-lib\"\n\nconst LazyGoogleDrivePicker = React.lazy(async () => ({ default: (await import(\"./google-drive-picker\")).GoogleDrivePicker }))\n\n/**\n * A chunk that fails to download throws during render, and Suspense does not catch it. The door\n * catches it and reports it through the picker contract's own `onError` — the channel the host\n * already turns into `onProviderFailure` — so a picker that could not arrive is a reported failure,\n * not a crashed form.\n */\nexport function GoogleDrivePickerLazy(props: ProviderFilePickerProps): React.JSX.Element {\n  return (\n    <LazyDoorErrorBoundary doorName=\"GoogleDrivePickerLazy\" fallback={null} onError={props.onError}>\n      <React.Suspense fallback={null}>\n        <LazyGoogleDrivePicker {...props} />\n      </React.Suspense>\n    </LazyDoorErrorBoundary>\n  )\n}\n"]}

package/dist/esm/components/form/controls/file/providers/onedrive-picker.d.ts

@@ -0,0 +1,41 @@
+/**
+ * OneDrive file picker — the component the `microsoft-onedrive` provider contributes for
+ * `FRONTEND_FILE_PICKER`.
+ *
+ * ## Why it declares BROWSER_READABLE_URL, where its Google sibling declares REMOTE_REFERENCE
+ *
+ * This is the pair that shows why issue #383 was answered PER VENDOR.
+ *
+ * OneDrive's picker, opened with the `download` action, returns each chosen file
+ * carrying a pre-authenticated download URL — a short-lived link that needs no
+ * credential to fetch. The browser genuinely can read the bytes, so the honest
+ * declaration is `BROWSER_READABLE_URL` and the framework uploads the result the
+ * way it uploads any other file.
+ *
+ * spec-cite: Microsoft Graph `driveItem` reference —
+ * https://learn.microsoft.com/en-us/graph/api/resources/driveitem — for the
+ * pre-authenticated `@microsoft.graph.downloadUrl` property. Paraphrased rather
+ * than quoted; the reading that matters here is that the URL carries its own
+ * authorization and expires, which is what makes the browser-readable arm
+ * available at all.
+ *
+ * Drive's picker returns metadata only, so its bytes need a credential the
+ * browser must not hold. Two real vendors, two different contracts, and a
+ * framework that insisted on one would have had to drop one of them.
+ *
+ * ## Not proven in a browser
+ *
+ * Nothing here has been driven against a real OneDrive account. Unlike the Drive
+ * picker this one authenticates through the vendor's own popup rather than
+ * needing a token from the application, so it does not depend on #333 — but it
+ * still needs a real `clientId` and a real user.
+ *
+ * Tracked on #570, which is where OneDrive's whole state lives — and #570 is DEFERRED by decision:
+ * this v7.2 picker stays as the OneDrive offering, the governed v8 path is not built, and the
+ * capability is honest about being "OneDrive files can be attached" rather than "stored in OneDrive".
+ * (The previous pointer here was #359, which is closed.)
+ */
+import { type ProviderFilePickerProps } from '@wildo-ai/saas-models/public-runtime';
+/** Opens the OneDrive picker as soon as it mounts — see the Drive picker for why mounting IS opening. */
+export declare function OneDrivePicker(props: ProviderFilePickerProps): null;
+//# sourceMappingURL=onedrive-picker.d.ts.map

package/dist/esm/components/form/controls/file/providers/onedrive-picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onedrive-picker.d.ts","sourceRoot":"","sources":["../../../../../../../../src/components/form/controls/file/providers/onedrive-picker.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,EAEL,KAAK,uBAAuB,EAE7B,MAAM,sCAAsC,CAAC;AAwC9C,yGAAyG;AACzG,wBAAgB,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,CAyFnE"}