@wildo-ai/presets-components 1.1.4 → 1.1.6

package/dist/esm/config/resources/agent-work.resource-presets.js

@@ -0,0 +1,115 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { LabellingTypes } from '@wildo-ai/presets-components-models';
+import { CollectionDisplayMode, DisplayField, DisplayLayout, SummaryLayout, SummaryMeta, resourceUIBehavior } from '@wildo-ai/saas-frontend-lib';
+import { BadgeSemanticVariant, DisplayChromeMode, EditChromeMode, EnumDisplayMode, StringDisplayMode, StringEditMode } from '@wildo-ai/zod-decorators';
+import { DatabaseZap, FileCheck2, ScanEye } from 'lucide-react';
+import { AgentWorkCaptureSettingsSchema, CoreResourceOperation as Op, CoreResourceType as R, CorrectionContentCapture, EvaluationDatasetExportSchema, EvaluationExportAuthorizationSchema, EvaluationExportAuthorizationStatus, agentWorkCaptureSettingsResourceConfiguration_InitializationFactory as captureSettingsFactory, evaluationDatasetExportsResourceConfiguration_InitializationFactory as datasetExportsFactory, evaluationExportAuthorizationsResourceConfiguration_InitializationFactory as exportAuthorizationsFactory, } from '@wildo-ai/saas-models';
+import { addressable, notAddressable } from './resource.config.utils.js';
+const CHROME = {
+    display: DisplayChromeMode.SETTINGS_ROW,
+    summary: DisplayChromeMode.HIDDEN,
+    edit: EditChromeMode.SETTINGS_ROW,
+};
+const hideWhenEmpty = { display: { hideWhenEmpty: true } };
+/** What the organization keeps, why, who else may read it, and for which cases. */
+function CaptureSettingsDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsx(DisplayField, { name: "contentCapture" }), _jsx(DisplayField, { name: "purpose" }), _jsx(DisplayField, { name: "contentReaderRole" }), _jsx(DisplayField, { name: "narrowToCaseRefs" }), _jsx(DisplayField, { name: "updatedAt" })] }));
+}
+/** Whether exports are authorised, on which basis and where it is documented, then the per-case consents and walls. */
+function ExportAuthorizationDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsx(DisplayField, { name: "status" }), _jsx(DisplayField, { name: "basis" }), _jsx(DisplayField, { name: "basisReference" }), _jsx(DisplayField, { name: "clientConsents" }), _jsx(DisplayField, { name: "excludedCaseRefs" }), _jsx(DisplayField, { name: "updatedAt" })] }));
+}
+/** One export: when, of which agent, how many records, where it went, under which basis, and whether it still stands. */
+function DatasetExportDisplayTemplate() {
+    return (_jsxs(DisplayLayout, { children: [_jsx(DisplayField, { name: "exportedAt" }), _jsx(DisplayField, { name: "agentRef" }), _jsx(DisplayField, { name: "recordCount" }), _jsx(DisplayField, { name: "windowFrom" }), _jsx(DisplayField, { name: "windowTo" }), _jsx(DisplayField, { name: "destination" }), _jsx(DisplayField, { name: "basis" }), _jsx(DisplayField, { name: "exportedByUserId" }), _jsx(DisplayField, { name: "invalidationReason" }), _jsx(DisplayField, { name: "invalidatedAt" }), _jsx(DisplayField, { name: "pseudonymisationVersion" })] }));
+}
+/* A ledger row: the agent is its title; when, how many and whether it was invalidated beside it. */
+function DatasetExportSummaryTemplate() {
+    return (_jsx(SummaryLayout, { children: _jsxs(SummaryMeta, { children: [_jsx(DisplayField, { name: "exportedAt" }), _jsx(DisplayField, { name: "recordCount" }), _jsx(DisplayField, { name: "invalidationReason" })] }) }));
+}
+export function buildAgentWorkMainPresets() {
+    return {
+        [R.AGENT_WORK_CAPTURE_SETTINGS]: resourceUIBehavior(captureSettingsFactory, AgentWorkCaptureSettingsSchema, ({ schemaShape }) => ({
+            icon: ScanEye,
+            // One row per organization and no name of its own: it is named by its resource's words.
+            getFrontendResourceLabel: ({ t, resourceType }) => t(`${LabellingTypes.RESOURCES}.${resourceType}.operations.read.title`),
+            layout: {
+                defaultChromeMode: CHROME,
+                defaultEmptyValue: 'placeholder',
+                display: CaptureSettingsDisplayTemplate,
+            },
+            fields: {
+                contentCapture: schemaShape.contentCapture.enumUI({
+                    display: { displayMode: EnumDisplayMode.BADGE, showDescription: true },
+                    values: {
+                        [CorrectionContentCapture.METADATA_ONLY]: { color: BadgeSemanticVariant.SECONDARY },
+                        [CorrectionContentCapture.WITH_CONTENT]: { color: BadgeSemanticVariant.WARNING },
+                    },
+                }),
+                // Shown with its description on the form: the purpose is what makes keeping client material lawful here.
+                purpose: schemaShape.purpose.stringUI({ edit: { showDescription: true } }),
+                // #1921 — the ONE organization role, besides the administrator, that may read kept content: PICKED from the
+                // organization's role table (core + custom roles) and shown as the role's word, never typed as a key. A typed key
+                // with a typo named a role nobody holds, which admitted nobody and said nothing.
+                contentReaderRole: schemaShape.contentReaderRole.stringUI({
+                    display: { displayMode: StringDisplayMode.ORGANIZATION_ROLE },
+                    edit: { editMode: StringEditMode.ORGANIZATION_ROLE, showDescription: true },
+                }),
+            },
+            // The page is the READ (created METADATA_ONLY on first access); the change is one audited act in the form.
+            views: [
+                [Op.READ, addressable()],
+                [Op.UPDATE, notAddressable()],
+            ],
+        })),
+        [R.EVALUATION_EXPORT_AUTHORIZATIONS]: resourceUIBehavior(exportAuthorizationsFactory, EvaluationExportAuthorizationSchema, ({ schemaShape }) => ({
+            icon: FileCheck2,
+            getFrontendResourceLabel: ({ t, resourceType }) => t(`${LabellingTypes.RESOURCES}.${resourceType}.operations.read.title`),
+            layout: {
+                defaultChromeMode: CHROME,
+                defaultEmptyValue: 'placeholder',
+                display: ExportAuthorizationDisplayTemplate,
+            },
+            fields: {
+                status: schemaShape.status.enumUI({
+                    display: { displayMode: EnumDisplayMode.BADGE, showDescription: true },
+                    values: {
+                        [EvaluationExportAuthorizationStatus.NOT_GRANTED]: { color: BadgeSemanticVariant.SECONDARY },
+                        [EvaluationExportAuthorizationStatus.ACTIVE]: { color: BadgeSemanticVariant.SUCCESS },
+                        [EvaluationExportAuthorizationStatus.REVOKED]: { color: BadgeSemanticVariant.DESTRUCTIVE },
+                    },
+                }),
+                basis: schemaShape.basis.enumUI({ edit: { showDescription: true } }),
+                basisReference: schemaShape.basisReference.stringUI({ edit: { showDescription: true } }),
+            },
+            // The page is the READ (created NOT_GRANTED on first access); granting, changing and revoking are the form.
+            views: [
+                [Op.READ, addressable()],
+                [Op.UPDATE, notAddressable()],
+            ],
+        })),
+        // Every dataset the organization exported, newest first; a dataset a withdrawn basis or an erasure invalidated says so.
+        [R.EVALUATION_DATASET_EXPORTS]: resourceUIBehavior(datasetExportsFactory, EvaluationDatasetExportSchema, ({ schemaShape }) => ({
+            icon: DatabaseZap,
+            getFrontendResourceLabel: ({ currentObject }) => currentObject.agentRef || currentObject._id,
+            layout: {
+                defaultChromeMode: CHROME,
+                display: DatasetExportDisplayTemplate,
+                summary: DatasetExportSummaryTemplate,
+            },
+            fields: {
+                invalidationReason: schemaShape.invalidationReason.enumUI({
+                    display: { displayMode: EnumDisplayMode.BADGE, hideWhenEmpty: true },
+                }),
+                invalidatedAt: schemaShape.invalidatedAt.dateUI(hideWhenEmpty),
+                exportedByUserId: schemaShape.exportedByUserId.stringUI(hideWhenEmpty),
+            },
+            views: [
+                [Op.LIST, addressable({ collectionDisplayConfig: { displayMode: CollectionDisplayMode.TABLE, userSwitchableDisplayMode: true } })],
+                [Op.READ, notAddressable()],
+            ],
+        })),
+    };
+}
+export const agentWorkMainPresets = buildAgentWorkMainPresets();
+//# sourceMappingURL=agent-work.resource-presets.js.map

package/dist/esm/config/resources/agent-work.resource-presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-work.resource-presets.js","sourceRoot":"","sources":["../../../../../src/config/resources/agent-work.resource-presets.tsx"],"names":[],"mappings":";AAgBA,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjJ,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACvJ,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,IAAI,EAAE,EAC3B,gBAAgB,IAAI,CAAC,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,mCAAmC,EACnC,mCAAmC,EACnC,mEAAmE,IAAI,sBAAsB,EAC7F,mEAAmE,IAAI,qBAAqB,EAC5F,yEAAyE,IAAI,2BAA2B,GACzG,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEtE,MAAM,MAAM,GAAG;IACb,OAAO,EAAE,iBAAiB,CAAC,YAAY;IACvC,OAAO,EAAE,iBAAiB,CAAC,MAAM;IACjC,IAAI,EAAE,cAAc,CAAC,YAAY;CACzB,CAAC;AAEX,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAW,CAAC;AAEpE,mFAAmF;AACnF,SAAS,8BAA8B;IACrC,OAAO,CACL,MAAC,aAAa,eACZ,KAAC,YAAY,IAAC,IAAI,EAAC,gBAAgB,GAAG,EACtC,KAAC,YAAY,IAAC,IAAI,EAAC,SAAS,GAAG,EAC/B,KAAC,YAAY,IAAC,IAAI,EAAC,mBAAmB,GAAG,EACzC,KAAC,YAAY,IAAC,IAAI,EAAC,kBAAkB,GAAG,EACxC,KAAC,YAAY,IAAC,IAAI,EAAC,WAAW,GAAG,IACnB,CACjB,CAAC;AACJ,CAAC;AAED,uHAAuH;AACvH,SAAS,kCAAkC;IACzC,OAAO,CACL,MAAC,aAAa,eACZ,KAAC,YAAY,IAAC,IAAI,EAAC,QAAQ,GAAG,EAC9B,KAAC,YAAY,IAAC,IAAI,EAAC,OAAO,GAAG,EAC7B,KAAC,YAAY,IAAC,IAAI,EAAC,gBAAgB,GAAG,EACtC,KAAC,YAAY,IAAC,IAAI,EAAC,gBAAgB,GAAG,EACtC,KAAC,YAAY,IAAC,IAAI,EAAC,kBAAkB,GAAG,EACxC,KAAC,YAAY,IAAC,IAAI,EAAC,WAAW,GAAG,IACnB,CACjB,CAAC;AACJ,CAAC;AAED,yHAAyH;AACzH,SAAS,4BAA4B;IACnC,OAAO,CACL,MAAC,aAAa,eACZ,KAAC,YAAY,IAAC,IAAI,EAAC,YAAY,GAAG,EAClC,KAAC,YAAY,IAAC,IAAI,EAAC,UAAU,GAAG,EAChC,KAAC,YAAY,IAAC,IAAI,EAAC,aAAa,GAAG,EACnC,KAAC,YAAY,IAAC,IAAI,EAAC,YAAY,GAAG,EAClC,KAAC,YAAY,IAAC,IAAI,EAAC,UAAU,GAAG,EAChC,KAAC,YAAY,IAAC,IAAI,EAAC,aAAa,GAAG,EACnC,KAAC,YAAY,IAAC,IAAI,EAAC,OAAO,GAAG,EAC7B,KAAC,YAAY,IAAC,IAAI,EAAC,kBAAkB,GAAG,EACxC,KAAC,YAAY,IAAC,IAAI,EAAC,oBAAoB,GAAG,EAC1C,KAAC,YAAY,IAAC,IAAI,EAAC,eAAe,GAAG,EACrC,KAAC,YAAY,IAAC,IAAI,EAAC,yBAAyB,GAAG,IACjC,CACjB,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,SAAS,4BAA4B;IACnC,OAAO,CACL,KAAC,aAAa,cACZ,MAAC,WAAW,eACV,KAAC,YAAY,IAAC,IAAI,EAAC,YAAY,GAAG,EAClC,KAAC,YAAY,IAAC,IAAI,EAAC,aAAa,GAAG,EACnC,KAAC,YAAY,IAAC,IAAI,EAAC,oBAAoB,GAAG,IAC9B,GACA,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,CAAC,CAAC,CAAC,2BAA2B,CAAC,EAAE,kBAAkB,CAAC,sBAAsB,EAAE,8BAA8B,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAChI,IAAI,EAAE,OAAO;YACb,wFAAwF;YACxF,wBAAwB,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,SAAS,IAAI,YAAY,wBAAwB,CAAC;YACzH,MAAM,EAAE;gBACN,iBAAiB,EAAE,MAAM;gBACzB,iBAAiB,EAAE,aAAa;gBAChC,OAAO,EAAE,8BAA8B;aACxC;YACD,MAAM,EAAE;gBACN,cAAc,EAAE,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC;oBAChD,OAAO,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE;oBACtE,MAAM,EAAE;wBACN,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC,SAAS,EAAE;wBACnF,CAAC,wBAAwB,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC,OAAO,EAAE;qBACjF;iBACF,CAAC;gBACF,yGAAyG;gBACzG,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC1E,4GAA4G;gBAC5G,kHAAkH;gBAClH,iFAAiF;gBACjF,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC;oBACxD,OAAO,EAAE,EAAE,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE;oBAC7D,IAAI,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE;iBAC5E,CAAC;aACH;YACD,2GAA2G;YAC3G,KAAK,EAAE;gBACL,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;gBACxB,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;aAC9B;SACF,CAAC,CAAC;QAEH,CAAC,CAAC,CAAC,gCAAgC,CAAC,EAAE,kBAAkB,CAAC,2BAA2B,EAAE,mCAAmC,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/I,IAAI,EAAE,UAAU;YAChB,wBAAwB,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,SAAS,IAAI,YAAY,wBAAwB,CAAC;YACzH,MAAM,EAAE;gBACN,iBAAiB,EAAE,MAAM;gBACzB,iBAAiB,EAAE,aAAa;gBAChC,OAAO,EAAE,kCAAkC;aAC5C;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;oBAChC,OAAO,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE;oBACtE,MAAM,EAAE;wBACN,CAAC,mCAAmC,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC,SAAS,EAAE;wBAC5F,CAAC,mCAAmC,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC,OAAO,EAAE;wBACrF,CAAC,mCAAmC,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC,WAAW,EAAE;qBAC3F;iBACF,CAAC;gBACF,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC;gBACpE,cAAc,EAAE,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC;aACzF;YACD,4GAA4G;YAC5G,KAAK,EAAE;gBACL,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;gBACxB,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;aAC9B;SACF,CAAC,CAAC;QAEH,wHAAwH;QACxH,CAAC,CAAC,CAAC,0BAA0B,CAAC,EAAE,kBAAkB,CAAC,qBAAqB,EAAE,6BAA6B,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7H,IAAI,EAAE,WAAW;YACjB,wBAAwB,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,IAAI,aAAa,CAAC,GAAG;YAC5F,MAAM,EAAE;gBACN,iBAAiB,EAAE,MAAM;gBACzB,OAAO,EAAE,4BAA4B;gBACrC,OAAO,EAAE,4BAA4B;aACtC;YACD,MAAM,EAAE;gBACN,kBAAkB,EAAE,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC;oBACxD,OAAO,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;iBACrE,CAAC;gBACF,aAAa,EAAE,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC9D,gBAAgB,EAAE,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC;aACvE;YACD,KAAK,EAAE;gBACL,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,uBAAuB,EAAE,EAAE,WAAW,EAAE,qBAAqB,CAAC,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;gBAClI,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;aAC5B;SACF,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,EAAE,CAAC","sourcesContent":["/**\n * Experts' corrections to agent work (#1599): the organization's own settings pages for them.\n *\n * - The content-capture setting and the evaluation-export authorisation are SINGLETONS of the organization: each page\n *   IS the resource's READ, which the backend creates in its default state on first access (METADATA_ONLY /\n *   NOT_GRANTED), and the change is the UPDATE form. Each is one audited decision, so it is taken as one act in the\n *   form rather than field by field in place: turning content capture on needs its purpose in the same write, and a\n *   grant needs its basis and the reference to where it is documented.\n * - The export ledger is the list of every dataset the organization exported, read in its settings beside the\n *   authorisation it relied on.\n *\n * Surfaced by the `agent-work-review` Settings Hub destination (organization administrators), beside the\n * override-rate panel.\n */\nimport React from 'react';\nimport type { ResourceUIBehavior } from '@wildo-ai/saas-frontend-lib';\nimport { LabellingTypes } from '@wildo-ai/presets-components-models';\nimport { CollectionDisplayMode, DisplayField, DisplayLayout, SummaryLayout, SummaryMeta, resourceUIBehavior } from '@wildo-ai/saas-frontend-lib';\nimport { BadgeSemanticVariant, DisplayChromeMode, EditChromeMode, EnumDisplayMode, StringDisplayMode, StringEditMode } from '@wildo-ai/zod-decorators';\nimport { DatabaseZap, FileCheck2, ScanEye } from 'lucide-react';\nimport {\n  AgentWorkCaptureSettingsSchema,\n  CoreResourceOperation as Op,\n  CoreResourceType as R,\n  CorrectionContentCapture,\n  EvaluationDatasetExportSchema,\n  EvaluationExportAuthorizationSchema,\n  EvaluationExportAuthorizationStatus,\n  agentWorkCaptureSettingsResourceConfiguration_InitializationFactory as captureSettingsFactory,\n  evaluationDatasetExportsResourceConfiguration_InitializationFactory as datasetExportsFactory,\n  evaluationExportAuthorizationsResourceConfiguration_InitializationFactory as exportAuthorizationsFactory,\n} from '@wildo-ai/saas-models';\nimport { addressable, notAddressable } from './resource.config.utils';\n\nconst CHROME = {\n  display: DisplayChromeMode.SETTINGS_ROW,\n  summary: DisplayChromeMode.HIDDEN,\n  edit: EditChromeMode.SETTINGS_ROW,\n} as const;\n\nconst hideWhenEmpty = { display: { hideWhenEmpty: true } } as const;\n\n/** What the organization keeps, why, who else may read it, and for which cases. */\nfunction CaptureSettingsDisplayTemplate(): React.JSX.Element {\n  return (\n    <DisplayLayout>\n      <DisplayField name=\"contentCapture\" />\n      <DisplayField name=\"purpose\" />\n      <DisplayField name=\"contentReaderRole\" />\n      <DisplayField name=\"narrowToCaseRefs\" />\n      <DisplayField name=\"updatedAt\" />\n    </DisplayLayout>\n  );\n}\n\n/** Whether exports are authorised, on which basis and where it is documented, then the per-case consents and walls. */\nfunction ExportAuthorizationDisplayTemplate(): React.JSX.Element {\n  return (\n    <DisplayLayout>\n      <DisplayField name=\"status\" />\n      <DisplayField name=\"basis\" />\n      <DisplayField name=\"basisReference\" />\n      <DisplayField name=\"clientConsents\" />\n      <DisplayField name=\"excludedCaseRefs\" />\n      <DisplayField name=\"updatedAt\" />\n    </DisplayLayout>\n  );\n}\n\n/** One export: when, of which agent, how many records, where it went, under which basis, and whether it still stands. */\nfunction DatasetExportDisplayTemplate(): React.JSX.Element {\n  return (\n    <DisplayLayout>\n      <DisplayField name=\"exportedAt\" />\n      <DisplayField name=\"agentRef\" />\n      <DisplayField name=\"recordCount\" />\n      <DisplayField name=\"windowFrom\" />\n      <DisplayField name=\"windowTo\" />\n      <DisplayField name=\"destination\" />\n      <DisplayField name=\"basis\" />\n      <DisplayField name=\"exportedByUserId\" />\n      <DisplayField name=\"invalidationReason\" />\n      <DisplayField name=\"invalidatedAt\" />\n      <DisplayField name=\"pseudonymisationVersion\" />\n    </DisplayLayout>\n  );\n}\n\n/* A ledger row: the agent is its title; when, how many and whether it was invalidated beside it. */\nfunction DatasetExportSummaryTemplate(): React.JSX.Element {\n  return (\n    <SummaryLayout>\n      <SummaryMeta>\n        <DisplayField name=\"exportedAt\" />\n        <DisplayField name=\"recordCount\" />\n        <DisplayField name=\"invalidationReason\" />\n      </SummaryMeta>\n    </SummaryLayout>\n  );\n}\n\nexport function buildAgentWorkMainPresets(): Partial<ResourceUIBehavior> {\n  return {\n    [R.AGENT_WORK_CAPTURE_SETTINGS]: resourceUIBehavior(captureSettingsFactory, AgentWorkCaptureSettingsSchema, ({ schemaShape }) => ({\n      icon: ScanEye,\n      // One row per organization and no name of its own: it is named by its resource's words.\n      getFrontendResourceLabel: ({ t, resourceType }) => t(`${LabellingTypes.RESOURCES}.${resourceType}.operations.read.title`),\n      layout: {\n        defaultChromeMode: CHROME,\n        defaultEmptyValue: 'placeholder',\n        display: CaptureSettingsDisplayTemplate,\n      },\n      fields: {\n        contentCapture: schemaShape.contentCapture.enumUI({\n          display: { displayMode: EnumDisplayMode.BADGE, showDescription: true },\n          values: {\n            [CorrectionContentCapture.METADATA_ONLY]: { color: BadgeSemanticVariant.SECONDARY },\n            [CorrectionContentCapture.WITH_CONTENT]: { color: BadgeSemanticVariant.WARNING },\n          },\n        }),\n        // Shown with its description on the form: the purpose is what makes keeping client material lawful here.\n        purpose: schemaShape.purpose.stringUI({ edit: { showDescription: true } }),\n        // #1921 — the ONE organization role, besides the administrator, that may read kept content: PICKED from the\n        // organization's role table (core + custom roles) and shown as the role's word, never typed as a key. A typed key\n        // with a typo named a role nobody holds, which admitted nobody and said nothing.\n        contentReaderRole: schemaShape.contentReaderRole.stringUI({\n          display: { displayMode: StringDisplayMode.ORGANIZATION_ROLE },\n          edit: { editMode: StringEditMode.ORGANIZATION_ROLE, showDescription: true },\n        }),\n      },\n      // The page is the READ (created METADATA_ONLY on first access); the change is one audited act in the form.\n      views: [\n        [Op.READ, addressable()],\n        [Op.UPDATE, notAddressable()],\n      ],\n    })),\n\n    [R.EVALUATION_EXPORT_AUTHORIZATIONS]: resourceUIBehavior(exportAuthorizationsFactory, EvaluationExportAuthorizationSchema, ({ schemaShape }) => ({\n      icon: FileCheck2,\n      getFrontendResourceLabel: ({ t, resourceType }) => t(`${LabellingTypes.RESOURCES}.${resourceType}.operations.read.title`),\n      layout: {\n        defaultChromeMode: CHROME,\n        defaultEmptyValue: 'placeholder',\n        display: ExportAuthorizationDisplayTemplate,\n      },\n      fields: {\n        status: schemaShape.status.enumUI({\n          display: { displayMode: EnumDisplayMode.BADGE, showDescription: true },\n          values: {\n            [EvaluationExportAuthorizationStatus.NOT_GRANTED]: { color: BadgeSemanticVariant.SECONDARY },\n            [EvaluationExportAuthorizationStatus.ACTIVE]: { color: BadgeSemanticVariant.SUCCESS },\n            [EvaluationExportAuthorizationStatus.REVOKED]: { color: BadgeSemanticVariant.DESTRUCTIVE },\n          },\n        }),\n        basis: schemaShape.basis.enumUI({ edit: { showDescription: true } }),\n        basisReference: schemaShape.basisReference.stringUI({ edit: { showDescription: true } }),\n      },\n      // The page is the READ (created NOT_GRANTED on first access); granting, changing and revoking are the form.\n      views: [\n        [Op.READ, addressable()],\n        [Op.UPDATE, notAddressable()],\n      ],\n    })),\n\n    // Every dataset the organization exported, newest first; a dataset a withdrawn basis or an erasure invalidated says so.\n    [R.EVALUATION_DATASET_EXPORTS]: resourceUIBehavior(datasetExportsFactory, EvaluationDatasetExportSchema, ({ schemaShape }) => ({\n      icon: DatabaseZap,\n      getFrontendResourceLabel: ({ currentObject }) => currentObject.agentRef || currentObject._id,\n      layout: {\n        defaultChromeMode: CHROME,\n        display: DatasetExportDisplayTemplate,\n        summary: DatasetExportSummaryTemplate,\n      },\n      fields: {\n        invalidationReason: schemaShape.invalidationReason.enumUI({\n          display: { displayMode: EnumDisplayMode.BADGE, hideWhenEmpty: true },\n        }),\n        invalidatedAt: schemaShape.invalidatedAt.dateUI(hideWhenEmpty),\n        exportedByUserId: schemaShape.exportedByUserId.stringUI(hideWhenEmpty),\n      },\n      views: [\n        [Op.LIST, addressable({ collectionDisplayConfig: { displayMode: CollectionDisplayMode.TABLE, userSwitchableDisplayMode: true } })],\n        [Op.READ, notAddressable()],\n      ],\n    })),\n  };\n}\n\nexport const agentWorkMainPresets = buildAgentWorkMainPresets();\n"]}

package/dist/esm/config/resources/api-key-rotation-window.d.ts

@@ -0,0 +1,22 @@
+import React from 'react';
+/**
+ * The rows of an API key's read page that answer "does the key's previous secret still work, and until when?" —
+ * shown only while it does.
+ *
+ * The raw fields mislead in both directions, which is why this component decides and the rows do not:
+ * - after a REGENERATE the end date is empty and the old secret works with no end date, so rows that merely hide
+ *   when empty would show nothing at the moment an operator most needs to see it;
+ * - after a default ROTATE the end date is the rotation instant and the old secret is already dead, yet its prefix
+ *   is still stored, so an unconditional prefix row would show a dead secret as though it mattered.
+ *
+ * So the pair renders exactly when the request-auth handlers would accept the previous secret
+ * (`isPreviousCredentialSecretAccepted`, the same rule they apply). The prefix row's description says what an
+ * absent end date means: its words are generated from the `whyItMatters` both API-key specifications declare on
+ * `previousKeyPrefix` (the labeller reads the specification, never the schema's `.describe()`). The end-date row
+ * hides itself when there is no date.
+ *
+ * The rule reads the clock when the page renders, so a handover deadline passing while the page is open takes
+ * effect on the next render — the same instant-by-instant answer the backend gives each request.
+ */
+export declare function ApiKeyRotationWindowRows(): React.JSX.Element | null;
+//# sourceMappingURL=api-key-rotation-window.d.ts.map

package/dist/esm/config/resources/api-key-rotation-window.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-rotation-window.d.ts","sourceRoot":"","sources":["../../../../../src/config/resources/api-key-rotation-window.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAoB1B;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAgBnE"}

package/dist/esm/config/resources/api-key-rotation-window.js

@@ -0,0 +1,45 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { DisplayField, useDisplayTemplateContext } from '@wildo-ai/saas-frontend-lib';
+import { ApiKeyStatus, isPreviousCredentialSecretAccepted } from '@wildo-ai/saas-models';
+function toDate(value) {
+    // Empty stays empty — it is the open-ended window, not a date. (Returned as literals: this package does not
+    // narrow on a null test.)
+    if (value === null)
+        return null;
+    if (value === undefined)
+        return undefined;
+    return new Date(value);
+}
+/**
+ * The rows of an API key's read page that answer "does the key's previous secret still work, and until when?" —
+ * shown only while it does.
+ *
+ * The raw fields mislead in both directions, which is why this component decides and the rows do not:
+ * - after a REGENERATE the end date is empty and the old secret works with no end date, so rows that merely hide
+ *   when empty would show nothing at the moment an operator most needs to see it;
+ * - after a default ROTATE the end date is the rotation instant and the old secret is already dead, yet its prefix
+ *   is still stored, so an unconditional prefix row would show a dead secret as though it mattered.
+ *
+ * So the pair renders exactly when the request-auth handlers would accept the previous secret
+ * (`isPreviousCredentialSecretAccepted`, the same rule they apply). The prefix row's description says what an
+ * absent end date means: its words are generated from the `whyItMatters` both API-key specifications declare on
+ * `previousKeyPrefix` (the labeller reads the specification, never the schema's `.describe()`). The end-date row
+ * hides itself when there is no date.
+ *
+ * The rule reads the clock when the page renders, so a handover deadline passing while the page is open takes
+ * effect on the next render — the same instant-by-instant answer the backend gives each request.
+ */
+export function ApiKeyRotationWindowRows() {
+    const { data } = useDisplayTemplateContext();
+    const key = (data ?? {});
+    const accepted = isPreviousCredentialSecretAccepted({
+        hasPreviousSecret: Boolean(key.previousKeyPrefix),
+        previousSecretInvalidationDate: toDate(key.previousKeyInvalidationDate),
+        isActive: key.status === ApiKeyStatus.ACTIVE,
+        expiresAt: toDate(key.expiresAt),
+    });
+    if (!accepted)
+        return null;
+    return (_jsxs(_Fragment, { children: [_jsx(DisplayField, { name: "previousKeyPrefix" }), _jsx(DisplayField, { name: "previousKeyInvalidationDate" })] }));
+}
+//# sourceMappingURL=api-key-rotation-window.js.map

package/dist/esm/config/resources/api-key-rotation-window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-rotation-window.js","sourceRoot":"","sources":["../../../../../src/config/resources/api-key-rotation-window.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAUzF,SAAS,MAAM,CAAC,KAAuC;IACrD,4GAA4G;IAC5G,0BAA0B;IAC1B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,EAAE,IAAI,EAAE,GAAG,yBAAyB,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;IAChD,MAAM,QAAQ,GAAG,kCAAkC,CAAC;QAClD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACjD,8BAA8B,EAAE,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC;QACvE,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;QAC5C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,CACL,8BACE,KAAC,YAAY,IAAC,IAAI,EAAC,mBAAmB,GAAG,EACzC,KAAC,YAAY,IAAC,IAAI,EAAC,6BAA6B,GAAG,IAClD,CACJ,CAAC;AACJ,CAAC","sourcesContent":["import React from 'react';\nimport { DisplayField, useDisplayTemplateContext } from '@wildo-ai/saas-frontend-lib';\nimport { ApiKeyStatus, isPreviousCredentialSecretAccepted } from '@wildo-ai/saas-models';\n\n/** The fields of an API key that decide whether its previous secret still authenticates. */\ninterface ApiKeyRotationState {\n  status?: ApiKeyStatus;\n  expiresAt?: Date | string | null;\n  previousKeyPrefix?: string | null;\n  previousKeyInvalidationDate?: Date | string | null;\n}\n\nfunction toDate(value: Date | string | null | undefined): Date | null | undefined {\n  // Empty stays empty — it is the open-ended window, not a date. (Returned as literals: this package does not\n  // narrow on a null test.)\n  if (value === null) return null;\n  if (value === undefined) return undefined;\n  return new Date(value);\n}\n\n/**\n * The rows of an API key's read page that answer \"does the key's previous secret still work, and until when?\" —\n * shown only while it does.\n *\n * The raw fields mislead in both directions, which is why this component decides and the rows do not:\n * - after a REGENERATE the end date is empty and the old secret works with no end date, so rows that merely hide\n *   when empty would show nothing at the moment an operator most needs to see it;\n * - after a default ROTATE the end date is the rotation instant and the old secret is already dead, yet its prefix\n *   is still stored, so an unconditional prefix row would show a dead secret as though it mattered.\n *\n * So the pair renders exactly when the request-auth handlers would accept the previous secret\n * (`isPreviousCredentialSecretAccepted`, the same rule they apply). The prefix row's description says what an\n * absent end date means: its words are generated from the `whyItMatters` both API-key specifications declare on\n * `previousKeyPrefix` (the labeller reads the specification, never the schema's `.describe()`). The end-date row\n * hides itself when there is no date.\n *\n * The rule reads the clock when the page renders, so a handover deadline passing while the page is open takes\n * effect on the next render — the same instant-by-instant answer the backend gives each request.\n */\nexport function ApiKeyRotationWindowRows(): React.JSX.Element | null {\n  const { data } = useDisplayTemplateContext();\n  const key = (data ?? {}) as ApiKeyRotationState;\n  const accepted = isPreviousCredentialSecretAccepted({\n    hasPreviousSecret: Boolean(key.previousKeyPrefix),\n    previousSecretInvalidationDate: toDate(key.previousKeyInvalidationDate),\n    isActive: key.status === ApiKeyStatus.ACTIVE,\n    expiresAt: toDate(key.expiresAt),\n  });\n  if (!accepted) return null;\n  return (\n    <>\n      <DisplayField name=\"previousKeyPrefix\" />\n      <DisplayField name=\"previousKeyInvalidationDate\" />\n    </>\n  );\n}\n"]}

package/dist/esm/config/resources/application.resource-presets.d.ts

@@ -20,4 +20,6 @@ export declare const applicationVersionsAdminResourceUIBehavior: import("@wildo-
 export declare const applicationMetadataAdminResourceUIBehavior: import("@wildo-ai/saas-frontend-lib").ResourceUIBehaviorConfig<any, any, import("zod").ZodAny>;
 export declare const applicationFeaturesAdminResourceUIBehavior: import("@wildo-ai/saas-frontend-lib").ResourceUIBehaviorConfig<any, any, import("zod").ZodAny>;
 export declare const appApiKeysApplicationAdminResourceUIBehavior: import("@wildo-ai/saas-frontend-lib").ResourceUIBehaviorConfig<any, any, import("zod").ZodAny>;
+export declare const appOAuthClientsApplicationAdminResourceUIBehavior: import("@wildo-ai/saas-frontend-lib").ResourceUIBehaviorConfig<any, any, import("zod").ZodAny>;
+export declare const applicationAccessGrantsAdminResourceUIBehavior: import("@wildo-ai/saas-frontend-lib").ResourceUIBehaviorConfig<any, any, import("zod").ZodAny>;
 //# sourceMappingURL=application.resource-presets.d.ts.map

package/dist/esm/config/resources/application.resource-presets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application.resource-presets.d.ts","sourceRoot":"","sources":["../../../../src/config/resources/application.resource-presets.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAoDtE;;;;;;;;;;GAUG;AAEH,wBAAgB,2BAA2B,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAmDzE;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwP3G;AAED,eAAO,MAAM,sBAAsB,6BAAgC,CAAC;AACpE,eAAO,MAAM,uBAAuB,6BAAuD,CAAC;AAE5F,eAAO,MAAM,4CAA4C,gGAAyC,CAAC;AACnG,eAAO,MAAM,6CAA6C,gGAA0C,CAAC;AACrG,eAAO,MAAM,0CAA0C,gGAAmD,CAAC;AAC3G,eAAO,MAAM,0CAA0C,gGAAmD,CAAC;AAC3G,eAAO,MAAM,0CAA0C,gGAAmD,CAAC;AAC3G,eAAO,MAAM,4CAA4C,gGAAmD,CAAC"}
+{"version":3,"file":"application.resource-presets.d.ts","sourceRoot":"","sources":["../../../../../src/config/resources/application.resource-presets.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AA+EtE;;;;;;;;;;GAUG;AAEH,wBAAgB,2BAA2B,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAmDzE;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA0kB3G;AAED,eAAO,MAAM,sBAAsB,6BAAgC,CAAC;AACpE,eAAO,MAAM,uBAAuB,6BAAuD,CAAC;AAE5F,eAAO,MAAM,4CAA4C,gGAAyC,CAAC;AACnG,eAAO,MAAM,6CAA6C,gGAA0C,CAAC;AACrG,eAAO,MAAM,0CAA0C,gGAAmD,CAAC;AAC3G,eAAO,MAAM,0CAA0C,gGAAmD,CAAC;AAC3G,eAAO,MAAM,0CAA0C,gGAAmD,CAAC;AAC3G,eAAO,MAAM,4CAA4C,gGAAmD,CAAC;AAC7G,eAAO,MAAM,iDAAiD,gGAAwD,CAAC;AACvH,eAAO,MAAM,8CAA8C,gGAAwD,CAAC"}