@wildo-ai/saas-frontend-lib 1.1.10 → 1.1.11

package/dist/esm/core/navigation/primary-destination-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"primary-destination-layout.d.ts","sourceRoot":"","sources":["../../../../src/core/navigation/primary-destination-layout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,qGAAqG;AACrG,MAAM,WAAW,mCAAmC;IAClD,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;IACxC,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC,iEAAiE;IACjE,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GACjC;IACA,WAAW,EAAE,qBAAqB,CAAC,kBAAkB,CAAC;IACtD,eAAe,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE;YAAE,uBAAuB,CAAC,EAAE,mCAAmC,CAAA;SAAE,CAAA;KAAE,CAAC;CACrG,GACC;IAAE,WAAW,EAAE,qBAAqB,CAAC,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,WAAW,EAAE,OAAO,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,kBAAkB,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAA;CAAE,CAAC;AAErI,6EAA6E;AAC7E,MAAM,MAAM,+BAA+B,GAAG,mCAAmC,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE;IACtD,gGAAgG;IAChG,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,sGAAsG;IACtG,aAAa,EAAE,OAAO,CAAC;IACvB,gFAAgF;IAChF,eAAe,EAAE,yBAAyB,GAAG,SAAS,CAAC;CACxD,GAAG,yBAAyB,GAAG,SAAS,CAKxC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oCAAoC,CAAC,MAAM,EAAE;IAC3D,cAAc,EAAE,yBAAyB,GAAG,SAAS,CAAC;IACtD,cAAc,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CACxE,GAAG,OAAO,CAWV;AAED;;;;;;;GAOG;AACH,wBAAgB,0CAA0C,CAAC,MAAM,EAAE;IACjE,cAAc,EAAE,yBAAyB,GAAG,SAAS,CAAC;IACtD,cAAc,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CACxE,GAAG,mCAAmC,GAAG,SAAS,CAelD"}
+{"version":3,"file":"primary-destination-layout.d.ts","sourceRoot":"","sources":["../../../../../src/core/navigation/primary-destination-layout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,qGAAqG;AACrG,MAAM,WAAW,mCAAmC;IAClD,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;IACxC,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC,iEAAiE;IACjE,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GACjC;IACA,WAAW,EAAE,qBAAqB,CAAC,kBAAkB,CAAC;IACtD,eAAe,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE;YAAE,uBAAuB,CAAC,EAAE,mCAAmC,CAAA;SAAE,CAAA;KAAE,CAAC;CACrG,GACC;IAAE,WAAW,EAAE,qBAAqB,CAAC,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,WAAW,EAAE,OAAO,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,kBAAkB,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAA;CAAE,CAAC;AAErI,6EAA6E;AAC7E,MAAM,MAAM,+BAA+B,GAAG,mCAAmC,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE;IACtD,gGAAgG;IAChG,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,sGAAsG;IACtG,aAAa,EAAE,OAAO,CAAC;IACvB,gFAAgF;IAChF,eAAe,EAAE,yBAAyB,GAAG,SAAS,CAAC;CACxD,GAAG,yBAAyB,GAAG,SAAS,CAKxC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oCAAoC,CAAC,MAAM,EAAE;IAC3D,cAAc,EAAE,yBAAyB,GAAG,SAAS,CAAC;IACtD,cAAc,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CACxE,GAAG,OAAO,CAWV;AAED;;;;;;;GAOG;AACH,wBAAgB,0CAA0C,CAAC,MAAM,EAAE;IACjE,cAAc,EAAE,yBAAyB,GAAG,SAAS,CAAC;IACtD,cAAc,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CACxE,GAAG,mCAAmC,GAAG,SAAS,CAelD"}

package/dist/esm/core/navigation/sidebar-resource-browser-operation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sidebar-resource-browser-operation.d.ts","sourceRoot":"","sources":["../../../../src/core/navigation/sidebar-resource-browser-operation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,gCAAgC,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAM/J,wBAAgB,sCAAsC,CACpD,cAAc,EAAE,gCAAgC,EAChD,mBAAmB,EAAE,MAAM,EAC3B,UAAU,CAAC,EAAE,MAAM,GAClB,uCAAuC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,SAAS,CA+BpE"}
+{"version":3,"file":"sidebar-resource-browser-operation.d.ts","sourceRoot":"","sources":["../../../../../src/core/navigation/sidebar-resource-browser-operation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,gCAAgC,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAM/J,wBAAgB,sCAAsC,CACpD,cAAc,EAAE,gCAAgC,EAChD,mBAAmB,EAAE,MAAM,EAC3B,UAAU,CAAC,EAAE,MAAM,GAClB,uCAAuC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,SAAS,CA+BpE"}

package/dist/esm/core/navigation/sidebar-resource-browser-operation.js.map

@@ -1 +1 @@
-{"version":3,"file":"sidebar-resource-browser-operation.js","sourceRoot":"","sources":["../../../../src/core/navigation/sidebar-resource-browser-operation.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAEpG,MAAM,MAAM,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACxE,MAAM,QAAQ,GAAiE,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;AAE9H,MAAM,UAAU,sCAAsC,CACpD,cAAgD,EAChD,mBAA2B,EAC3B,UAAmB;IAEnB,MAAM,kBAAkB,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CACzD,CAAC,SAAiE,EAAE,EAAE,CAAC,CACrE,SAAS,CAAC,mBAAmB,KAAK,mBAAmB;WAClD,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,KAAK,UAAU,CAAC,CACrE,CACF,CAAC;IAEF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,MAAM,CACxD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,kBAAkB,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI,CAC3F,CAAC;IACF,IAAI,UAAU,KAAK,SAAS,IAAI,wBAAwB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,4DAA4D,EAAE;QACrE,YAAY,EAAE,cAAc,CAAC,kBAAkB;QAC/C,mBAAmB;QACnB,UAAU;QACV,UAAU,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACjD,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;YAChD,eAAe,EAAE,SAAS,CAAC,eAAe;SAC3C,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * The operation a sidebar RESOURCE_BROWSER section is bound to: the one the browser fetches with, and the one launcher\n * resolution judges the viewer's roles against (#2674). One function for both, so the section is never hidden for an\n * operation other than the one it would call.\n */\nimport type { AnyFrontendResourceConfiguration, FrontendResourceConfiguration_Operation } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\n\nconst logger: LoggerFrontendService = LoggerFrontendService.getLogger();\nconst logDebug: (message: string, context?: Record<string, unknown>) => void = logger.debugByType('sidebar-resource-browser');\n\nexport function resolveSidebarResourceBrowserOperation(\n  resourceConfig: AnyFrontendResourceConfiguration,\n  operationIdentifier: string,\n  variantKey?: string,\n): FrontendResourceConfiguration_Operation<any, any, any> | undefined {\n  const matchingOperations = resourceConfig.operations.filter(\n    (operation: FrontendResourceConfiguration_Operation<any, any, any>) => (\n      operation.operationIdentifier === operationIdentifier\n      && (variantKey === undefined || operation.variantKey === variantKey)\n    ),\n  );\n\n  if (matchingOperations.length === 1) {\n    return matchingOperations[0];\n  }\n\n  const defaultNonBulkOperations = matchingOperations.filter(\n    (operation) => operation.isOperationDefault === true && operation.isBulkOperation !== true,\n  );\n  if (variantKey === undefined && defaultNonBulkOperations.length === 1) {\n    return defaultNonBulkOperations[0];\n  }\n\n  logDebug('Unable to resolve sidebar resource operation unambiguously', {\n    resourceType: resourceConfig.resourceIdentifier,\n    operationIdentifier,\n    variantKey,\n    candidates: matchingOperations.map((candidate) => ({\n      variantType: candidate.variantType,\n      variantKey: candidate.variantKey,\n      isOperationDefault: candidate.isOperationDefault,\n      isBulkOperation: candidate.isBulkOperation,\n    })),\n  });\n  return undefined;\n}\n"]}
+{"version":3,"file":"sidebar-resource-browser-operation.js","sourceRoot":"","sources":["../../../../../src/core/navigation/sidebar-resource-browser-operation.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAEpG,MAAM,MAAM,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACxE,MAAM,QAAQ,GAAiE,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;AAE9H,MAAM,UAAU,sCAAsC,CACpD,cAAgD,EAChD,mBAA2B,EAC3B,UAAmB;IAEnB,MAAM,kBAAkB,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CACzD,CAAC,SAAiE,EAAE,EAAE,CAAC,CACrE,SAAS,CAAC,mBAAmB,KAAK,mBAAmB;WAClD,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,KAAK,UAAU,CAAC,CACrE,CACF,CAAC;IAEF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,MAAM,CACxD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,kBAAkB,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI,CAC3F,CAAC;IACF,IAAI,UAAU,KAAK,SAAS,IAAI,wBAAwB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,4DAA4D,EAAE;QACrE,YAAY,EAAE,cAAc,CAAC,kBAAkB;QAC/C,mBAAmB;QACnB,UAAU;QACV,UAAU,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACjD,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;YAChD,eAAe,EAAE,SAAS,CAAC,eAAe;SAC3C,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * The operation a sidebar RESOURCE_BROWSER section is bound to: the one the browser fetches with, and the one launcher\n * resolution judges the viewer's roles against (#2674). One function for both, so the section is never hidden for an\n * operation other than the one it would call.\n */\nimport type { AnyFrontendResourceConfiguration, FrontendResourceConfiguration_Operation } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\n\nconst logger: LoggerFrontendService = LoggerFrontendService.getLogger();\nconst logDebug: (message: string, context?: Record<string, unknown>) => void = logger.debugByType('sidebar-resource-browser');\n\nexport function resolveSidebarResourceBrowserOperation(\n  resourceConfig: AnyFrontendResourceConfiguration,\n  operationIdentifier: string,\n  variantKey?: string,\n): FrontendResourceConfiguration_Operation<any, any, any> | undefined {\n  const matchingOperations = resourceConfig.operations.filter(\n    (operation: FrontendResourceConfiguration_Operation<any, any, any>) => (\n      operation.operationIdentifier === operationIdentifier\n      && (variantKey === undefined || operation.variantKey === variantKey)\n    ),\n  );\n\n  if (matchingOperations.length === 1) {\n    return matchingOperations[0];\n  }\n\n  const defaultNonBulkOperations = matchingOperations.filter(\n    (operation) => operation.isOperationDefault === true && operation.isBulkOperation !== true,\n  );\n  if (variantKey === undefined && defaultNonBulkOperations.length === 1) {\n    return defaultNonBulkOperations[0];\n  }\n\n  logDebug('Unable to resolve sidebar resource operation unambiguously', {\n    resourceType: resourceConfig.resourceIdentifier,\n    operationIdentifier,\n    variantKey,\n    candidates: matchingOperations.map((candidate) => ({\n      variantType: candidate.variantType,\n      variantKey: candidate.variantKey,\n      isOperationDefault: candidate.isOperationDefault,\n      isBulkOperation: candidate.isBulkOperation,\n    })),\n  });\n  return undefined;\n}\n"]}

package/dist/esm/core/navigation/useCurrentOrganizationHoldsUnrevokedScimToken.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Whether the CURRENT organization still holds an unrevoked SCIM token (#2649): the one runtime capability the shell
+ * has to FETCH rather than derive from configuration.
+ *
+ * Read by `useLauncherRuntimeAvailabilityContext` to decide {@link DirectoryProvisioningCapability.SETTINGS_REACHABLE},
+ * so an organization whose type admits no directory is shown its SCIM tokens, Revoke only, for as long as one is live.
+ *
+ * ## One answer per (account, organization), shared by every reader
+ *
+ * The launcher context is read by every launcher surface (sidebar, command menu, toolbar, settings hub, resource action
+ * bars), so a fetch inside each reader would send one request per surface. The answer is kept in a module-level table
+ * instead, keyed by account and organization, and every reader subscribes to the same entry: the first reader that
+ * needs it asks, the rest wait for that answer. A different account or organization is a different key, so nothing is
+ * ever read across a sign-in or an organization switch.
+ *
+ * ## When it asks, and when it asks again
+ *
+ * It asks only when the caller says the answer can change what is shown (`asked`: the feature is offered and the type
+ * admits no directory, `isUnrevokedScimTokenProbeNeeded`) AND the viewer may read the organization's tokens, by the
+ * registry's own LIST roles. Every other caller gets `false` without a request.
+ *
+ * The answer goes STALE, and is asked again by the next reader, when:
+ *
+ * - a token operation succeeds (`RESOURCE_OPERATION_EXECUTED` on the tokens resource, a write), so revoking the last
+ *   token removes the section;
+ * - a reader moves to another organization, so coming back asks again rather than reusing what was true when it left
+ *   (which is also how a failed read gets another try).
+ *
+ * While a stale answer is re-asked, readers keep the LAST SETTLED answer (#2649 review F4). Reading `false` meanwhile
+ * would drop the SCIM section for the length of the request: an administrator revoking one of three leftover tokens
+ * would watch the hub jump to its default section and back. A change made in another session is seen on the next of
+ * those two events, or on a reload: the shell's ordinary staleness for a configuration-like signal, and the server
+ * refuses nothing on the strength of it.
+ *
+ * ## "Unrevoked" is the rule `organizations.changeType` reads
+ *
+ * A token counts while `isActive` is true, whatever its `expiresAt`: that is what makes the organization
+ * directory-managed and what refuses a move across the directory boundary (#2613 review 4). The rows are paged until one
+ * is found or none remain, because the LIST declares no `isActive` filter and a page of revoked tokens would otherwise
+ * hide a live one. A failed read answers `false` and is kept until one of the two events above: it hides a revoke-only
+ * section rather than retrying in a loop, and the API stays reachable.
+ */
+import { type LauncherEffectiveRoles } from './launcher-resolution';
+/** Where one (account, organization) answer stands. */
+export declare enum UnrevokedScimTokenProbeState {
+    /** Asked; the answer has not arrived. Reads as `false`. */
+    PENDING = "pending",
+    /** The organization holds at least one token with `isActive: true`. */
+    HELD = "held",
+    /** Every token the organization holds is revoked, or it holds none. */
+    NONE = "none",
+    /** The read failed. Reads as `false`, and is kept rather than retried in a loop (see the module comment). */
+    UNKNOWN = "unknown",
+    /** A token operation succeeded or the reader left the organization: the next reader asks again. */
+    STALE = "stale"
+}
+/** Forget every answer, so the next reader starts from nothing. Exported for tests, which must start from an empty table. */
+export declare function forgetUnrevokedScimTokenProbes(): void;
+/**
+ * See the module comment. `asked` is `isUnrevokedScimTokenProbeNeeded(...)`; `viewer` is the launcher context's
+ * effective roles, so the probe runs only for a viewer the LIST admits.
+ */
+export declare function useCurrentOrganizationHoldsUnrevokedScimToken(asked: boolean, viewer: LauncherEffectiveRoles): boolean;
+//# sourceMappingURL=useCurrentOrganizationHoldsUnrevokedScimToken.d.ts.map

package/dist/esm/core/navigation/useCurrentOrganizationHoldsUnrevokedScimToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCurrentOrganizationHoldsUnrevokedScimToken.d.ts","sourceRoot":"","sources":["../../../../../src/core/navigation/useCurrentOrganizationHoldsUnrevokedScimToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAgBH,OAAO,EAA6B,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAO/F,uDAAuD;AACvD,oBAAY,4BAA4B;IACtC,2DAA2D;IAC3D,OAAO,YAAY;IACnB,uEAAuE;IACvE,IAAI,SAAS;IACb,uEAAuE;IACvE,IAAI,SAAS;IACb,6GAA6G;IAC7G,OAAO,YAAY;IACnB,mGAAmG;IACnG,KAAK,UAAU;CAChB;AA0CD,6HAA6H;AAC7H,wBAAgB,8BAA8B,IAAI,IAAI,CAIrD;AAsBD;;;GAGG;AACH,wBAAgB,6CAA6C,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAwGrH"}

package/dist/esm/core/navigation/useCurrentOrganizationHoldsUnrevokedScimToken.js

@@ -0,0 +1,212 @@
+/**
+ * Whether the CURRENT organization still holds an unrevoked SCIM token (#2649): the one runtime capability the shell
+ * has to FETCH rather than derive from configuration.
+ *
+ * Read by `useLauncherRuntimeAvailabilityContext` to decide {@link DirectoryProvisioningCapability.SETTINGS_REACHABLE},
+ * so an organization whose type admits no directory is shown its SCIM tokens, Revoke only, for as long as one is live.
+ *
+ * ## One answer per (account, organization), shared by every reader
+ *
+ * The launcher context is read by every launcher surface (sidebar, command menu, toolbar, settings hub, resource action
+ * bars), so a fetch inside each reader would send one request per surface. The answer is kept in a module-level table
+ * instead, keyed by account and organization, and every reader subscribes to the same entry: the first reader that
+ * needs it asks, the rest wait for that answer. A different account or organization is a different key, so nothing is
+ * ever read across a sign-in or an organization switch.
+ *
+ * ## When it asks, and when it asks again
+ *
+ * It asks only when the caller says the answer can change what is shown (`asked`: the feature is offered and the type
+ * admits no directory, `isUnrevokedScimTokenProbeNeeded`) AND the viewer may read the organization's tokens, by the
+ * registry's own LIST roles. Every other caller gets `false` without a request.
+ *
+ * The answer goes STALE, and is asked again by the next reader, when:
+ *
+ * - a token operation succeeds (`RESOURCE_OPERATION_EXECUTED` on the tokens resource, a write), so revoking the last
+ *   token removes the section;
+ * - a reader moves to another organization, so coming back asks again rather than reusing what was true when it left
+ *   (which is also how a failed read gets another try).
+ *
+ * While a stale answer is re-asked, readers keep the LAST SETTLED answer (#2649 review F4). Reading `false` meanwhile
+ * would drop the SCIM section for the length of the request: an administrator revoking one of three leftover tokens
+ * would watch the hub jump to its default section and back. A change made in another session is seen on the next of
+ * those two events, or on a reload: the shell's ordinary staleness for a configuration-like signal, and the server
+ * refuses nothing on the strength of it.
+ *
+ * ## "Unrevoked" is the rule `organizations.changeType` reads
+ *
+ * A token counts while `isActive` is true, whatever its `expiresAt`: that is what makes the organization
+ * directory-managed and what refuses a move across the directory boundary (#2613 review 4). The rows are paged until one
+ * is found or none remain, because the LIST declares no `isActive` filter and a page of revoked tokens would otherwise
+ * hide a live one. A failed read answers `false` and is kept until one of the two events above: it hides a revoke-only
+ * section rather than retrying in a loop, and the API stays reachable.
+ */
+import { useContext, useEffect, useMemo, useRef, useSyncExternalStore } from 'react';
+import { CoreResourceOperation, CoreResourceType, ResourceOperationVariantType, ResourcesConfig_OperationPathUtils, isReadShapedOperation, } from '@wildo-ai/saas-models';
+import { ResourceRegistryContext } from '../../core/resources/ResourceRegistryContext.js';
+import { useAppScopeSafe } from '../../core/scope/useAppScope.js';
+import { EventBusContext } from '../../core/events/EventBusContext.js';
+import { FrontendEvents } from '../../core/events/events.frontend.schemas.js';
+import { LoggerFrontendService } from '../../core/monitoring/logger.frontend.service.js';
+import { viewerMayPerformOperation } from './launcher-resolution.js';
+const logger = LoggerFrontendService.getLogger();
+/** The largest page the LIST serves by default; fewer round trips while paging for a live token. */
+const UNREVOKED_TOKEN_PROBE_PAGE_LIMIT = 100;
+/** Where one (account, organization) answer stands. */
+export var UnrevokedScimTokenProbeState;
+(function (UnrevokedScimTokenProbeState) {
+    /** Asked; the answer has not arrived. Reads as `false`. */
+    UnrevokedScimTokenProbeState["PENDING"] = "pending";
+    /** The organization holds at least one token with `isActive: true`. */
+    UnrevokedScimTokenProbeState["HELD"] = "held";
+    /** Every token the organization holds is revoked, or it holds none. */
+    UnrevokedScimTokenProbeState["NONE"] = "none";
+    /** The read failed. Reads as `false`, and is kept rather than retried in a loop (see the module comment). */
+    UnrevokedScimTokenProbeState["UNKNOWN"] = "unknown";
+    /** A token operation succeeded or the reader left the organization: the next reader asks again. */
+    UnrevokedScimTokenProbeState["STALE"] = "stale";
+})(UnrevokedScimTokenProbeState || (UnrevokedScimTokenProbeState = {}));
+/** Whether an entry reads as "holds an unrevoked token": settled HELD, or re-asking after a settled HELD. */
+function entryReadsAsHeld(entry) {
+    if (!entry)
+        return false;
+    if (entry.state === UnrevokedScimTokenProbeState.HELD)
+        return true;
+    return (entry.state === UnrevokedScimTokenProbeState.PENDING || entry.state === UnrevokedScimTokenProbeState.STALE)
+        && entry.previouslyHeld === true;
+}
+const probeEntries = new Map();
+const probeListeners = new Set();
+function subscribeToProbes(listener) {
+    probeListeners.add(listener);
+    return () => {
+        probeListeners.delete(listener);
+    };
+}
+function notifyProbeListeners() {
+    for (const listener of probeListeners)
+        listener();
+}
+/**
+ * Mark one answer STALE so the next reader asks again, keeping what it last settled on for the readers in the meantime.
+ * Called when a token operation succeeds and when a reader leaves the organization. A no-op for an entry already being
+ * re-asked, so a burst of events sends one request.
+ */
+function markUnrevokedScimTokenProbeStale(key) {
+    const entry = probeEntries.get(key);
+    if (!entry || entry.state === UnrevokedScimTokenProbeState.STALE)
+        return;
+    probeEntries.set(key, { state: UnrevokedScimTokenProbeState.STALE, previouslyHeld: entryReadsAsHeld(entry) });
+    notifyProbeListeners();
+}
+/** Forget every answer, so the next reader starts from nothing. Exported for tests, which must start from an empty table. */
+export function forgetUnrevokedScimTokenProbes() {
+    if (probeEntries.size === 0)
+        return;
+    probeEntries.clear();
+    notifyProbeListeners();
+}
+/** The tokens' default API LIST, the operation the settings panel reads them through. */
+function findTokensListOperation(operations) {
+    return operations?.find((operation) => operation.operationIdentifier === CoreResourceOperation.LIST
+        && operation.isOperationDefault === true
+        && operation.isBulkOperation !== true
+        && operation.variantType === ResourceOperationVariantType.API_CALL);
+}
+/** The rows and page count of one LIST answer, from either the paginated or the bare-array shape. */
+function readListPage(result) {
+    if (Array.isArray(result))
+        return { rows: result, totalPages: 1 };
+    const paginated = result;
+    const rows = Array.isArray(paginated?.data) ? paginated.data : [];
+    const totalPages = typeof paginated?.pagination?.totalPages === 'number' ? paginated.pagination.totalPages : 1;
+    return { rows, totalPages };
+}
+/**
+ * See the module comment. `asked` is `isUnrevokedScimTokenProbeNeeded(...)`; `viewer` is the launcher context's
+ * effective roles, so the probe runs only for a viewer the LIST admits.
+ */
+export function useCurrentOrganizationHoldsUnrevokedScimToken(asked, viewer) {
+    // The context itself, not a hook module: this runs inside every launcher reader, and a reader rendered outside the
+    // registry provider (or under a test that substitutes the hook module) must read "no registry" rather than fail.
+    const registryContext = useContext(ResourceRegistryContext);
+    const appScope = useAppScopeSafe();
+    const bus = useContext(EventBusContext);
+    const currentUserId = appScope?.currentUserId ?? null;
+    const currentOrganizationId = appScope?.currentOrganizationId ?? null;
+    const registry = registryContext?.registry;
+    const listOperation = useMemo(() => findTokensListOperation(registry?.resourceConfigurations[CoreResourceType.ORGANIZATION_SCIM_TOKENS]?.operations), [registry]);
+    const organizationFieldIdentifier = registry?.resourceConfigurations[CoreResourceType.ORGANIZATIONS]?.resourceFieldIdentifier;
+    const viewerMayList = !!listOperation
+        && viewerMayPerformOperation({ ...listOperation, resourceType: CoreResourceType.ORGANIZATION_SCIM_TOKENS }, viewer);
+    const key = asked && viewerMayList && currentUserId && currentOrganizationId && organizationFieldIdentifier
+        ? `${currentUserId}|${currentOrganizationId}`
+        : null;
+    // The scoped `doOperation` changes identity with every scope change; the probe reads the latest one through a ref so
+    // a settling scope does not cancel and resend it (the same reason `useRouteOrganizationAccess` gives).
+    const doOperationRef = useRef(registryContext?.doOperation);
+    doOperationRef.current = registryContext?.doOperation;
+    const entry = useSyncExternalStore(subscribeToProbes, () => (key ? probeEntries.get(key) : undefined), () => undefined);
+    useEffect(() => {
+        const current = key ? probeEntries.get(key) : undefined;
+        if (!key || (current && current.state !== UnrevokedScimTokenProbeState.STALE) || !listOperation || !organizationFieldIdentifier || !currentOrganizationId)
+            return;
+        const doOperation = doOperationRef.current;
+        if (!doOperation)
+            return;
+        const pending = { state: UnrevokedScimTokenProbeState.PENDING, previouslyHeld: entryReadsAsHeld(current) };
+        probeEntries.set(key, pending);
+        notifyProbeListeners();
+        const settle = (state) => {
+            // A token operation that succeeded while this read was in flight has already marked `pending` stale; its answer
+            // would describe the tokens before that operation, so it is dropped and the next reader asks again.
+            if (probeEntries.get(key) !== pending)
+                return;
+            probeEntries.set(key, { state });
+            notifyProbeListeners();
+        };
+        const operationPathKey = ResourcesConfig_OperationPathUtils.buildOperationPathKeyFromOperation(listOperation);
+        void (async () => {
+            try {
+                for (let page = 1;; page += 1) {
+                    const result = await doOperation(operationPathKey, {
+                        contextualParameters: { [organizationFieldIdentifier]: currentOrganizationId },
+                        queryParameters: { page, limit: UNREVOKED_TOKEN_PROBE_PAGE_LIMIT },
+                    }, 
+                    // Silent: an unanswered probe hides a revoke-only section; it is not an error the viewer acted on.
+                    { silent: true });
+                    const { rows, totalPages } = readListPage(result);
+                    if (rows.some((token) => token.isActive === true)) {
+                        settle(UnrevokedScimTokenProbeState.HELD);
+                        return;
+                    }
+                    if (page >= totalPages || rows.length === 0) {
+                        settle(UnrevokedScimTokenProbeState.NONE);
+                        return;
+                    }
+                }
+            }
+            catch (error) {
+                logger.warn('Could not read whether the organization holds an unrevoked SCIM token', { organizationId: currentOrganizationId, error });
+                settle(UnrevokedScimTokenProbeState.UNKNOWN);
+            }
+        })();
+    }, [key, entry, listOperation, organizationFieldIdentifier, currentOrganizationId]);
+    // Leaving an organization makes its answer stale (#2649 review F6): coming back asks again, while it keeps showing what
+    // was last settled. Keyed on the key CHANGING, not on unmounting: a list row unmounting must not re-ask for every
+    // other reader still showing the same organization.
+    const previousKeyRef = useRef(key);
+    useEffect(() => {
+        const previousKey = previousKeyRef.current;
+        previousKeyRef.current = key;
+        if (previousKey && previousKey !== key)
+            markUnrevokedScimTokenProbeStale(previousKey);
+    }, [key]);
+    useEffect(() => {
+        if (!key)
+            return undefined;
+        return bus.on(FrontendEvents.RESOURCE_OPERATION_EXECUTED, () => markUnrevokedScimTokenProbeStale(key), (payload) => payload.resourceType === CoreResourceType.ORGANIZATION_SCIM_TOKENS
+            && !isReadShapedOperation(payload.operation ?? { operationIdentifier: payload.operationIdentifier }));
+    }, [bus, key]);
+    return entryReadsAsHeld(entry);
+}
+//# sourceMappingURL=useCurrentOrganizationHoldsUnrevokedScimToken.js.map

package/dist/esm/core/navigation/useCurrentOrganizationHoldsUnrevokedScimToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCurrentOrganizationHoldsUnrevokedScimToken.js","sourceRoot":"","sources":["../../../../../src/core/navigation/useCurrentOrganizationHoldsUnrevokedScimToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AACrF,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,4BAA4B,EAC5B,kCAAkC,EAClC,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AAErG,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAA+B,MAAM,uBAAuB,CAAC;AAE/F,MAAM,MAAM,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAExE,oGAAoG;AACpG,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAE7C,uDAAuD;AACvD,MAAM,CAAN,IAAY,4BAWX;AAXD,WAAY,4BAA4B;IACtC,2DAA2D;IAC3D,mDAAmB,CAAA;IACnB,uEAAuE;IACvE,6CAAa,CAAA;IACb,uEAAuE;IACvE,6CAAa,CAAA;IACb,6GAA6G;IAC7G,mDAAmB,CAAA;IACnB,mGAAmG;IACnG,+CAAe,CAAA;AACjB,CAAC,EAXW,4BAA4B,KAA5B,4BAA4B,QAWvC;AAQD,6GAA6G;AAC7G,SAAS,gBAAgB,CAAC,KAA+C;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,KAAK,KAAK,4BAA4B,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,4BAA4B,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,4BAA4B,CAAC,KAAK,CAAC;WAC9G,KAAK,CAAC,cAAc,KAAK,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAwC,CAAC;AACrE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAc,CAAC;AAE7C,SAAS,iBAAiB,CAAC,QAAoB;IAC7C,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,OAAO,GAAG,EAAE;QACV,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,KAAK,MAAM,QAAQ,IAAI,cAAc;QAAE,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,gCAAgC,CAAC,GAAW;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,4BAA4B,CAAC,KAAK;QAAE,OAAO;IACzE,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,4BAA4B,CAAC,KAAK,EAAE,cAAc,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9G,oBAAoB,EAAE,CAAC;AACzB,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,8BAA8B;IAC5C,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IACpC,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,oBAAoB,EAAE,CAAC;AACzB,CAAC;AAED,yFAAyF;AACzF,SAAS,uBAAuB,CAC9B,UAA0E;IAE1E,OAAO,UAAU,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACpC,SAAS,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,IAAI;WACzD,SAAS,CAAC,kBAAkB,KAAK,IAAI;WACrC,SAAS,CAAC,eAAe,KAAK,IAAI;WAClC,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,QAAQ,CAAC,CAAC;AACxE,CAAC;AAED,qGAAqG;AACrG,SAAS,YAAY,CAAC,MAAe;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAmC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC/F,MAAM,SAAS,GAAG,MAAsF,CAAC;IACzG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,MAAM,UAAU,GAAG,OAAO,SAAS,EAAE,UAAU,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6CAA6C,CAAC,KAAc,EAAE,MAA8B;IAC1G,mHAAmH;IACnH,iHAAiH;IACjH,MAAM,eAAe,GAAG,UAAU,CAAC,uBAAuB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,aAAa,GAAG,QAAQ,EAAE,aAAa,IAAI,IAAI,CAAC;IACtD,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAEtE,MAAM,QAAQ,GAAG,eAAe,EAAE,QAAQ,CAAC;IAC3C,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,UAE9F,CAAC,EACd,CAAC,QAAQ,CAAC,CACX,CAAC;IACF,MAAM,2BAA2B,GAAG,QAAQ,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IAC9H,MAAM,aAAa,GAAG,CAAC,CAAC,aAAa;WAChC,yBAAyB,CAAC,EAAE,GAAG,aAAa,EAAE,YAAY,EAAE,gBAAgB,CAAC,wBAAwB,EAAE,EAAE,MAAM,CAAC,CAAC;IAEtH,MAAM,GAAG,GAAG,KAAK,IAAI,aAAa,IAAI,aAAa,IAAI,qBAAqB,IAAI,2BAA2B;QACzG,CAAC,CAAC,GAAG,aAAa,IAAI,qBAAqB,EAAE;QAC7C,CAAC,CAAC,IAAI,CAAC;IAET,qHAAqH;IACrH,uGAAuG;IACvG,MAAM,cAAc,GAAG,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC5D,cAAc,CAAC,OAAO,GAAG,eAAe,EAAE,WAAW,CAAC;IAEtD,MAAM,KAAK,GAAG,oBAAoB,CAChC,iBAAiB,EACjB,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC/C,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,2BAA2B,IAAI,CAAC,qBAAqB;YAAE,OAAO;QAClK,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC;QAC3C,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,MAAM,OAAO,GAAiC,EAAE,KAAK,EAAE,4BAA4B,CAAC,OAAO,EAAE,cAAc,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QACzI,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/B,oBAAoB,EAAE,CAAC;QAEvB,MAAM,MAAM,GAAG,CAAC,KAAmC,EAAQ,EAAE;YAC3D,gHAAgH;YAChH,oGAAoG;YACpG,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;gBAAE,OAAO;YAC9C,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjC,oBAAoB,EAAE,CAAC;QACzB,CAAC,CAAC;QAEF,MAAM,gBAAgB,GAAG,kCAAkC,CAAC,kCAAkC,CAAC,aAAa,CAAC,CAAC;QAC9G,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,IAAI,CAAC,EAAE,CAAC;oBAC/B,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,gBAAgB,EAChB;wBACE,oBAAoB,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,qBAAqB,EAAE;wBAC9E,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,gCAAgC,EAAE;qBACnE;oBACD,mGAAmG;oBACnG,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;oBACF,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;oBAClD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;wBAClD,MAAM,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;wBAC1C,OAAO;oBACT,CAAC;oBACD,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC5C,MAAM,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;wBAC1C,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,uEAAuE,EAAE,EAAE,cAAc,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvI,MAAM,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,2BAA2B,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEpF,wHAAwH;IACxH,kHAAkH;IAClH,oDAAoD;IACpD,MAAM,cAAc,GAAG,MAAM,CAAgB,GAAG,CAAC,CAAC;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC;QAC3C,cAAc,CAAC,OAAO,GAAG,GAAG,CAAC;QAC7B,IAAI,WAAW,IAAI,WAAW,KAAK,GAAG;YAAE,gCAAgC,CAAC,WAAW,CAAC,CAAC;IACxF,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEV,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,OAAO,GAAG,CAAC,EAAE,CACX,cAAc,CAAC,2BAA2B,EAC1C,GAAG,EAAE,CAAC,gCAAgC,CAAC,GAAG,CAAC,EAC3C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,gBAAgB,CAAC,wBAAwB;eAC1E,CAAC,qBAAqB,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CACvG,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAEf,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC","sourcesContent":["/**\n * Whether the CURRENT organization still holds an unrevoked SCIM token (#2649): the one runtime capability the shell\n * has to FETCH rather than derive from configuration.\n *\n * Read by `useLauncherRuntimeAvailabilityContext` to decide {@link DirectoryProvisioningCapability.SETTINGS_REACHABLE},\n * so an organization whose type admits no directory is shown its SCIM tokens, Revoke only, for as long as one is live.\n *\n * ## One answer per (account, organization), shared by every reader\n *\n * The launcher context is read by every launcher surface (sidebar, command menu, toolbar, settings hub, resource action\n * bars), so a fetch inside each reader would send one request per surface. The answer is kept in a module-level table\n * instead, keyed by account and organization, and every reader subscribes to the same entry: the first reader that\n * needs it asks, the rest wait for that answer. A different account or organization is a different key, so nothing is\n * ever read across a sign-in or an organization switch.\n *\n * ## When it asks, and when it asks again\n *\n * It asks only when the caller says the answer can change what is shown (`asked`: the feature is offered and the type\n * admits no directory, `isUnrevokedScimTokenProbeNeeded`) AND the viewer may read the organization's tokens, by the\n * registry's own LIST roles. Every other caller gets `false` without a request.\n *\n * The answer goes STALE, and is asked again by the next reader, when:\n *\n * - a token operation succeeds (`RESOURCE_OPERATION_EXECUTED` on the tokens resource, a write), so revoking the last\n *   token removes the section;\n * - a reader moves to another organization, so coming back asks again rather than reusing what was true when it left\n *   (which is also how a failed read gets another try).\n *\n * While a stale answer is re-asked, readers keep the LAST SETTLED answer (#2649 review F4). Reading `false` meanwhile\n * would drop the SCIM section for the length of the request: an administrator revoking one of three leftover tokens\n * would watch the hub jump to its default section and back. A change made in another session is seen on the next of\n * those two events, or on a reload: the shell's ordinary staleness for a configuration-like signal, and the server\n * refuses nothing on the strength of it.\n *\n * ## \"Unrevoked\" is the rule `organizations.changeType` reads\n *\n * A token counts while `isActive` is true, whatever its `expiresAt`: that is what makes the organization\n * directory-managed and what refuses a move across the directory boundary (#2613 review 4). The rows are paged until one\n * is found or none remain, because the LIST declares no `isActive` filter and a page of revoked tokens would otherwise\n * hide a live one. A failed read answers `false` and is kept until one of the two events above: it hides a revoke-only\n * section rather than retrying in a loop, and the API stays reachable.\n */\n\nimport { useContext, useEffect, useMemo, useRef, useSyncExternalStore } from 'react';\nimport {\n  CoreResourceOperation,\n  CoreResourceType,\n  ResourceOperationVariantType,\n  ResourcesConfig_OperationPathUtils,\n  isReadShapedOperation,\n} from '@wildo-ai/saas-models';\nimport { ResourceRegistryContext } from '~wildo-frontend-lib/core/resources/ResourceRegistryContext';\nimport type { FrontendResourceConfiguration_Operation } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { EventBusContext } from '~wildo-frontend-lib/core/events/EventBusContext';\nimport { FrontendEvents } from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { viewerMayPerformOperation, type LauncherEffectiveRoles } from './launcher-resolution';\n\nconst logger: LoggerFrontendService = LoggerFrontendService.getLogger();\n\n/** The largest page the LIST serves by default; fewer round trips while paging for a live token. */\nconst UNREVOKED_TOKEN_PROBE_PAGE_LIMIT = 100;\n\n/** Where one (account, organization) answer stands. */\nexport enum UnrevokedScimTokenProbeState {\n  /** Asked; the answer has not arrived. Reads as `false`. */\n  PENDING = 'pending',\n  /** The organization holds at least one token with `isActive: true`. */\n  HELD = 'held',\n  /** Every token the organization holds is revoked, or it holds none. */\n  NONE = 'none',\n  /** The read failed. Reads as `false`, and is kept rather than retried in a loop (see the module comment). */\n  UNKNOWN = 'unknown',\n  /** A token operation succeeded or the reader left the organization: the next reader asks again. */\n  STALE = 'stale',\n}\n\ninterface UnrevokedScimTokenProbeEntry {\n  readonly state: UnrevokedScimTokenProbeState;\n  /** While PENDING or STALE: the last settled answer, which readers keep until the new one arrives. */\n  readonly previouslyHeld?: boolean;\n}\n\n/** Whether an entry reads as \"holds an unrevoked token\": settled HELD, or re-asking after a settled HELD. */\nfunction entryReadsAsHeld(entry: UnrevokedScimTokenProbeEntry | undefined): boolean {\n  if (!entry) return false;\n  if (entry.state === UnrevokedScimTokenProbeState.HELD) return true;\n  return (entry.state === UnrevokedScimTokenProbeState.PENDING || entry.state === UnrevokedScimTokenProbeState.STALE)\n    && entry.previouslyHeld === true;\n}\n\nconst probeEntries = new Map<string, UnrevokedScimTokenProbeEntry>();\nconst probeListeners = new Set<() => void>();\n\nfunction subscribeToProbes(listener: () => void): () => void {\n  probeListeners.add(listener);\n  return () => {\n    probeListeners.delete(listener);\n  };\n}\n\nfunction notifyProbeListeners(): void {\n  for (const listener of probeListeners) listener();\n}\n\n/**\n * Mark one answer STALE so the next reader asks again, keeping what it last settled on for the readers in the meantime.\n * Called when a token operation succeeds and when a reader leaves the organization. A no-op for an entry already being\n * re-asked, so a burst of events sends one request.\n */\nfunction markUnrevokedScimTokenProbeStale(key: string): void {\n  const entry = probeEntries.get(key);\n  if (!entry || entry.state === UnrevokedScimTokenProbeState.STALE) return;\n  probeEntries.set(key, { state: UnrevokedScimTokenProbeState.STALE, previouslyHeld: entryReadsAsHeld(entry) });\n  notifyProbeListeners();\n}\n\n/** Forget every answer, so the next reader starts from nothing. Exported for tests, which must start from an empty table. */\nexport function forgetUnrevokedScimTokenProbes(): void {\n  if (probeEntries.size === 0) return;\n  probeEntries.clear();\n  notifyProbeListeners();\n}\n\n/** The tokens' default API LIST, the operation the settings panel reads them through. */\nfunction findTokensListOperation(\n  operations: readonly FrontendResourceConfiguration_Operation[] | undefined,\n): FrontendResourceConfiguration_Operation | undefined {\n  return operations?.find((operation) =>\n    operation.operationIdentifier === CoreResourceOperation.LIST\n    && operation.isOperationDefault === true\n    && operation.isBulkOperation !== true\n    && operation.variantType === ResourceOperationVariantType.API_CALL);\n}\n\n/** The rows and page count of one LIST answer, from either the paginated or the bare-array shape. */\nfunction readListPage(result: unknown): { rows: readonly Record<string, unknown>[]; totalPages: number } {\n  if (Array.isArray(result)) return { rows: result as Record<string, unknown>[], totalPages: 1 };\n  const paginated = result as { data?: unknown; pagination?: { totalPages?: unknown } } | null | undefined;\n  const rows = Array.isArray(paginated?.data) ? paginated.data as Record<string, unknown>[] : [];\n  const totalPages = typeof paginated?.pagination?.totalPages === 'number' ? paginated.pagination.totalPages : 1;\n  return { rows, totalPages };\n}\n\n/**\n * See the module comment. `asked` is `isUnrevokedScimTokenProbeNeeded(...)`; `viewer` is the launcher context's\n * effective roles, so the probe runs only for a viewer the LIST admits.\n */\nexport function useCurrentOrganizationHoldsUnrevokedScimToken(asked: boolean, viewer: LauncherEffectiveRoles): boolean {\n  // The context itself, not a hook module: this runs inside every launcher reader, and a reader rendered outside the\n  // registry provider (or under a test that substitutes the hook module) must read \"no registry\" rather than fail.\n  const registryContext = useContext(ResourceRegistryContext);\n  const appScope = useAppScopeSafe();\n  const bus = useContext(EventBusContext);\n  const currentUserId = appScope?.currentUserId ?? null;\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n\n  const registry = registryContext?.registry;\n  const listOperation = useMemo(\n    () => findTokensListOperation(registry?.resourceConfigurations[CoreResourceType.ORGANIZATION_SCIM_TOKENS]?.operations as\n      | readonly FrontendResourceConfiguration_Operation[]\n      | undefined),\n    [registry],\n  );\n  const organizationFieldIdentifier = registry?.resourceConfigurations[CoreResourceType.ORGANIZATIONS]?.resourceFieldIdentifier;\n  const viewerMayList = !!listOperation\n    && viewerMayPerformOperation({ ...listOperation, resourceType: CoreResourceType.ORGANIZATION_SCIM_TOKENS }, viewer);\n\n  const key = asked && viewerMayList && currentUserId && currentOrganizationId && organizationFieldIdentifier\n    ? `${currentUserId}|${currentOrganizationId}`\n    : null;\n\n  // The scoped `doOperation` changes identity with every scope change; the probe reads the latest one through a ref so\n  // a settling scope does not cancel and resend it (the same reason `useRouteOrganizationAccess` gives).\n  const doOperationRef = useRef(registryContext?.doOperation);\n  doOperationRef.current = registryContext?.doOperation;\n\n  const entry = useSyncExternalStore(\n    subscribeToProbes,\n    () => (key ? probeEntries.get(key) : undefined),\n    () => undefined,\n  );\n\n  useEffect(() => {\n    const current = key ? probeEntries.get(key) : undefined;\n    if (!key || (current && current.state !== UnrevokedScimTokenProbeState.STALE) || !listOperation || !organizationFieldIdentifier || !currentOrganizationId) return;\n    const doOperation = doOperationRef.current;\n    if (!doOperation) return;\n\n    const pending: UnrevokedScimTokenProbeEntry = { state: UnrevokedScimTokenProbeState.PENDING, previouslyHeld: entryReadsAsHeld(current) };\n    probeEntries.set(key, pending);\n    notifyProbeListeners();\n\n    const settle = (state: UnrevokedScimTokenProbeState): void => {\n      // A token operation that succeeded while this read was in flight has already marked `pending` stale; its answer\n      // would describe the tokens before that operation, so it is dropped and the next reader asks again.\n      if (probeEntries.get(key) !== pending) return;\n      probeEntries.set(key, { state });\n      notifyProbeListeners();\n    };\n\n    const operationPathKey = ResourcesConfig_OperationPathUtils.buildOperationPathKeyFromOperation(listOperation);\n    void (async () => {\n      try {\n        for (let page = 1; ; page += 1) {\n          const result = await doOperation(\n            operationPathKey,\n            {\n              contextualParameters: { [organizationFieldIdentifier]: currentOrganizationId },\n              queryParameters: { page, limit: UNREVOKED_TOKEN_PROBE_PAGE_LIMIT },\n            },\n            // Silent: an unanswered probe hides a revoke-only section; it is not an error the viewer acted on.\n            { silent: true },\n          );\n          const { rows, totalPages } = readListPage(result);\n          if (rows.some((token) => token.isActive === true)) {\n            settle(UnrevokedScimTokenProbeState.HELD);\n            return;\n          }\n          if (page >= totalPages || rows.length === 0) {\n            settle(UnrevokedScimTokenProbeState.NONE);\n            return;\n          }\n        }\n      } catch (error: unknown) {\n        logger.warn('Could not read whether the organization holds an unrevoked SCIM token', { organizationId: currentOrganizationId, error });\n        settle(UnrevokedScimTokenProbeState.UNKNOWN);\n      }\n    })();\n  }, [key, entry, listOperation, organizationFieldIdentifier, currentOrganizationId]);\n\n  // Leaving an organization makes its answer stale (#2649 review F6): coming back asks again, while it keeps showing what\n  // was last settled. Keyed on the key CHANGING, not on unmounting: a list row unmounting must not re-ask for every\n  // other reader still showing the same organization.\n  const previousKeyRef = useRef<string | null>(key);\n  useEffect(() => {\n    const previousKey = previousKeyRef.current;\n    previousKeyRef.current = key;\n    if (previousKey && previousKey !== key) markUnrevokedScimTokenProbeStale(previousKey);\n  }, [key]);\n\n  useEffect(() => {\n    if (!key) return undefined;\n    return bus.on(\n      FrontendEvents.RESOURCE_OPERATION_EXECUTED,\n      () => markUnrevokedScimTokenProbeStale(key),\n      (payload) => payload.resourceType === CoreResourceType.ORGANIZATION_SCIM_TOKENS\n        && !isReadShapedOperation(payload.operation ?? { operationIdentifier: payload.operationIdentifier }),\n    );\n  }, [bus, key]);\n\n  return entryReadsAsHeld(entry);\n}\n"]}

package/dist/esm/core/navigation/useLauncherResolutionContext.d.ts

@@ -8,14 +8,7 @@
  * Used by behavior hooks to call per-launcher resolution functions
  * (e.g., `resolveSidebarSections`, `resolveCommandMenuCommands`).
  */
-import { type UserOrgsContextType } from '../../core/security/UserOrgsContext';
-import type { LauncherResolutionContext } from './launcher-resolution';
-/**
- * The launcher's operation role gate (#2674) for a viewer: their application roles and the CURRENT organization's,
- * judged by `userRolesSatisfyRequiredRoles`, the action bar's rule (core inheritance, fail-open on a role the browser
- * cannot expand). `undefined` with no user context: nothing to judge by, so no gate.
- */
-export declare function buildLauncherOperationRoleGate(userOrgs: Pick<UserOrgsContextType, 'permissions' | 'currentOrganizationId'> | null | undefined): ((requiredRoles: readonly string[] | undefined) => boolean) | undefined;
+import { type LauncherResolutionContext } from './launcher-resolution';
 /**
  * Assembles a `LauncherResolutionContext` from existing React contexts.
  *

package/dist/esm/core/navigation/useLauncherResolutionContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useLauncherResolutionContext.d.ts","sourceRoot":"","sources":["../../../../src/core/navigation/useLauncherResolutionContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAM9G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAwBvE;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAAE,aAAa,GAAG,uBAAuB,CAAC,GAAG,IAAI,GAAG,SAAS,GAC9F,CAAC,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,KAAK,OAAO,CAAC,GAAG,SAAS,CAMzE;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,IAAI,yBAAyB,GAAG,IAAI,CAgJ/E"}
+{"version":3,"file":"useLauncherResolutionContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/navigation/useLauncherResolutionContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,EAAgC,KAAK,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAyBrG;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,IAAI,yBAAyB,GAAG,IAAI,CAmI/E"}

package/dist/esm/core/navigation/useLauncherResolutionContext.js

@@ -8,14 +8,15 @@
  * Used by behavior hooks to call per-launcher resolution functions
  * (e.g., `resolveSidebarSections`, `resolveCommandMenuCommands`).
  */
-import { useContext, useMemo } from 'react';
-import { userRolesSatisfyRequiredRoles } from '@wildo-ai/saas-models';
-import { UserOrgsContext } from '../../core/security/UserOrgsContext.js';
+import { useMemo } from 'react';
 import { useResourceRegistry } from '../../core/resources/useResourceRegistry.js';
 import { useUI } from '../../core/ui/useUI.js';
 import { useI18n } from '../../core/i18n/useI18n.js';
 import { useIconRegistry } from '../../core/icons/useIconRegistry.js';
 import { useAppScopeSafe } from '../../core/scope/useAppScope.js';
+import { useSettingsHubConfig } from '../../core/config/useSettingsHubConfig.js';
+import { SETTINGS_HUB_TITLE_LABEL_KEY } from './launcher-resolution.js';
+import { useViewerEffectiveRoles } from './launcher-runtime-availability.js';
 import { ENGINE_PAGE_METADATA } from '../../core/config/launcher-items.frontend.schemas.js';
 import { buildCompositeViewLabelKey, buildNavigationViewLabelKey, resolveNavigationViewTitle, buildApplicationViewTranslationRef, buildResourceViewTranslationRef, } from './view-title-resolution.js';
 import { NavigationViewLabelFamily } from '@wildo-ai/presets-components-models';
@@ -28,19 +29,6 @@ import { NavigationViewLabelFamily } from '@wildo-ai/presets-components-models';
  * engine page to `ENGINE_PAGE_METADATA` auto-extends this list.
  */
 const ENGINE_PAGE_LABEL_KEYS = Object.values(ENGINE_PAGE_METADATA).map((metadata) => `${metadata.i18nKey}.title`);
-/**
- * The launcher's operation role gate (#2674) for a viewer: their application roles and the CURRENT organization's,
- * judged by `userRolesSatisfyRequiredRoles`, the action bar's rule (core inheritance, fail-open on a role the browser
- * cannot expand). `undefined` with no user context: nothing to judge by, so no gate.
- */
-export function buildLauncherOperationRoleGate(userOrgs) {
-    if (userOrgs === null || userOrgs === undefined)
-        return undefined;
-    const userAppRoles = userOrgs.permissions?.appLevel ?? [];
-    const organizationId = userOrgs.currentOrganizationId;
-    const userOrgRoles = organizationId ? userOrgs.permissions?.organizations?.[organizationId] ?? [] : [];
-    return (requiredRoles) => userRolesSatisfyRequiredRoles({ requiredRoles, userAppRoles, userOrgRoles });
-}
 /**
  * Assembles a `LauncherResolutionContext` from existing React contexts.
  *
@@ -96,30 +84,19 @@ export function useLauncherResolutionContext() {
     }, [flowsActorsViews, fullCustomViews, registry]);
     const { t, tResourceHeader, tResourceOperation, tCompositeView, tView, translations, isReady } = useI18n({
         resource: resourceTypes,
-        keys: [...compositeLabelKeys, ...viewLabelKeys, ...ENGINE_PAGE_LABEL_KEYS],
+        // The hub's title names a settings row that opens the hub itself (`resolveSettingsSection`); it is a component
+        // label, not in an eager section, so it is requested here like the engine-page titles.
+        keys: [...compositeLabelKeys, ...viewLabelKeys, ...ENGINE_PAGE_LABEL_KEYS, SETTINGS_HUB_TITLE_LABEL_KEY],
     });
     const { renderIcon } = useIconRegistry();
-    /*
-     * The viewer's roles for the operation gate (#2674): application roles and the CURRENT organization's. Read from the
-     * context without throwing: only a test renders a launcher with no user provider, and it gets no gate. In the app the
-     * provider wraps every route, so an anonymous viewer IS gated, with no roles (public and anonymous operations pass).
-     *
-     * Keyed on the role lists' contents, not on the context value, which changes with every token refresh and privacy
-     * update: a new gate re-resolves every launcher surface and re-registers every hotkey. The action bar stabilizes the
-     * same way.
-     */
-    const userOrgs = useContext(UserOrgsContext);
-    const hasUserOrgs = userOrgs !== undefined && userOrgs !== null;
-    const currentOrganizationId = userOrgs?.currentOrganizationId ?? null;
-    const appRoles = userOrgs?.permissions?.appLevel ?? [];
-    const orgRoles = currentOrganizationId ? userOrgs?.permissions?.organizations?.[currentOrganizationId] ?? [] : [];
-    const appRolesKey = appRoles.join(',');
-    const orgRolesKey = orgRoles.join(',');
-    const canPerformOperation = useMemo(() => buildLauncherOperationRoleGate(hasUserOrgs
-        ? { currentOrganizationId, permissions: { appLevel: appRoles, organizations: currentOrganizationId ? { [currentOrganizationId]: orgRoles } : {} } }
-        : undefined), 
-    // Value-stabilized on the serialized role keys; the arrays themselves are read from the same render.
-    [hasUserOrgs, currentOrganizationId, appRolesKey, orgRolesKey]);
+    // The viewer's roles, so a resource row the viewer may not perform is not offered (#2376).
+    const viewerRoles = useViewerEffectiveRoles();
+    // The resolved hub config the rail renders, so a settings row and the rail entry it opens draw one icon.
+    const { sections: settingsSections } = useSettingsHubConfig();
+    const settingsSectionIcon = useMemo(() => {
+        const iconBySection = new Map(settingsSections.map(section => [section.ref, section.icon]));
+        return (sectionRef) => iconBySection.get(sectionRef);
+    }, [settingsSections]);
     /**
      * View title resolver aligned with the authored runtime contracts.
      *
@@ -165,10 +142,11 @@ export function useLauncherResolutionContext() {
             tViewTitle,
             t,
             renderIcon,
-            ...(canPerformOperation === undefined ? {} : { canPerformOperation }),
+            settingsSectionIcon,
+            viewerRoles,
         };
         // `translations` forces recomputation when i18n data loads — i18n helper
         // closures capture translation data, so the memo must invalidate.
-    }, [registry, isReady, appScope, compositeViews, fullCustomViews, flowsActorsViews, tResourceHeader, tResourceOperation, tViewTitle, t, renderIcon, translations, canPerformOperation]);
+    }, [registry, isReady, appScope, compositeViews, fullCustomViews, flowsActorsViews, tResourceHeader, tResourceOperation, tViewTitle, t, renderIcon, settingsSectionIcon, viewerRoles, translations]);
 }
 //# sourceMappingURL=useLauncherResolutionContext.js.map

package/dist/esm/core/navigation/useLauncherResolutionContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"useLauncherResolutionContext.js","sourceRoot":"","sources":["../../../../src/core/navigation/useLauncherResolutionContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,eAAe,EAA4B,MAAM,mDAAmD,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iEAAiE,CAAC;AAEvG,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,kCAAkC,EAClC,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,sBAAsB,GAAsB,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CACvF,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,QAAQ,CAC1C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAA+F;IAE/F,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC1D,MAAM,cAAc,GAAG,QAAQ,CAAC,qBAAqB,CAAC;IACtD,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvG,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,6BAA6B,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;AACzG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B;IAC1C,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC3C,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,KAAK,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CACH,QAAQ,EAAE,sBAAsB;QAC9B,CAAC,CAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAClD,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,qBAAqB,CACpD;QAChB,CAAC,CAAC,EAAE,EACR,CAAC,QAAQ,CAAC,CACX,CAAC;IACF,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,MAAM,wBAAwB,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACpE,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC,CAChD,CAAC,CAAC;QACH,MAAM,qBAAqB,GAAG,QAAQ,EAAE,sBAAsB;YAC5D,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAChF,qBAAqB,CAAC,qBAAqB,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACzE,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC,CAChD,CAAC,IAAI,EAAE,CACT,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;YACxB,GAAG,wBAAwB;YAC3B,GAAG,qBAAqB;SACzB,CAAC,CAAC,CAAC;IACN,CAAC,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;QACjC,MAAM,mBAAmB,GAAG;YAC1B,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC;gBACnE,MAAM,EAAE,yBAAyB,CAAC,WAAW;gBAC7C,cAAc,EAAE,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC;aAC7D,CAAC,CAAC;YACH,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC;gBACpE,MAAM,EAAE,yBAAyB,CAAC,YAAY;gBAC9C,cAAc,EAAE,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC;aAC7D,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,gBAAgB,GAAG,QAAQ,EAAE,sBAAsB;YACvD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClG,GAAG,CAAC,qBAAqB,CAAC,qBAAqB,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC;oBACrG,MAAM,EAAE,yBAAyB,CAAC,KAAK;oBACvC,cAAc,EAAE,+BAA+B,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC;iBACxE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,qBAAqB,CAAC,qBAAqB,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC;oBACzG,MAAM,EAAE,yBAAyB,CAAC,SAAS;oBAC3C,cAAc,EAAE,+BAA+B,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC;iBACxE,CAAC,CAAC,IAAI,EAAE,CAAC;aACX,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;YACxB,GAAG,mBAAmB;YACtB,GAAG,gBAAgB;SACpB,CAAC,CAAC,CAAC;IACN,CAAC,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACvG,QAAQ,EAAE,aAAa;QACvB,IAAI,EAAE,CAAC,GAAG,kBAAkB,EAAE,GAAG,aAAa,EAAE,GAAG,sBAAsB,CAAC;KAC3E,CAAC,CAAC;IACH,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;IAEzC;;;;;;;;OAQG;IACH,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC;IAChE,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IACtE,MAAM,QAAQ,GAAG,QAAQ,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC;IACvD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClH,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,mBAAmB,GAAG,OAAO,CACjC,GAAG,EAAE,CAAC,8BAA8B,CAAC,WAAW;QAC9C,CAAC,CAAC,EAAE,qBAAqB,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAwE;QACzN,CAAC,CAAC,SAAS,CAAC;IACd,qGAAqG;IACrG,CAAC,WAAW,EAAE,qBAAqB,EAAE,WAAW,EAAE,WAAW,CAAC,CAC/D,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,UAAU,GAAG,OAAO,CACxB,GAAG,EAAE,CAAC,CAAC,OAAe,EAAE,WAAkC,EAAU,EAAE,CAAC,CACrE,0BAA0B,CAAC;QACzB,OAAO;QACP,WAAW;QACX,cAAc;QACd,KAAK;KACN,CAAC,CACH,EACD,CAAC,cAAc,EAAE,KAAK,CAAC,CACxB,CAAC;IAEF,OAAO,OAAO,CAAC,GAAqC,EAAE;QACpD,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B;;;;;;;;;;;;;;;;;WAiBG;QACH,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,OAAO;YACL,QAAQ;YACR,0BAA0B,EAAE,QAAQ,EAAE,+BAA+B,EAAE,IAAI,EAAE;YAC7E,KAAK,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE;YAC5D,eAAe;YACf,kBAAkB;YAClB,UAAU;YACV,CAAC;YACD,UAAU;YACV,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC;SACtE,CAAC;QACJ,yEAAyE;QACzE,kEAAkE;IAClE,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAC1L,CAAC","sourcesContent":["/**\n * Hook that assembles a `LauncherResolutionContext` from existing React contexts.\n *\n * Per-launcher resolution functions (`resolveSidebarSections`, `resolveCommandMenuCommands`,\n * etc.) are pure functions that need registry, views, i18n, and icon rendering as inputs.\n * This hook collects those from the existing provider tree and returns a stable context object.\n *\n * Used by behavior hooks to call per-launcher resolution functions\n * (e.g., `resolveSidebarSections`, `resolveCommandMenuCommands`).\n */\n\nimport { useContext, useMemo } from 'react';\nimport { userRolesSatisfyRequiredRoles } from '@wildo-ai/saas-models';\nimport { UserOrgsContext, type UserOrgsContextType } from '~wildo-frontend-lib/core/security/UserOrgsContext';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useUI } from '~wildo-frontend-lib/core/ui/useUI';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useIconRegistry } from '~wildo-frontend-lib/core/icons/useIconRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport type { LauncherResolutionContext } from './launcher-resolution';\nimport { ENGINE_PAGE_METADATA } from '~wildo-frontend-lib/core/config/launcher-items.frontend.schemas';\nimport { NavigationContentType } from './navigation.schemas';\nimport {\n  buildCompositeViewLabelKey,\n  buildNavigationViewLabelKey,\n  resolveNavigationViewTitle,\n  buildApplicationViewTranslationRef,\n  buildResourceViewTranslationRef,\n} from './view-title-resolution';\nimport { NavigationViewLabelFamily } from '@wildo-ai/presets-components-models';\n\n/**\n * Engine-page display-label keys, resolved at `engine.pages.<key>.title` (the\n * contract on `EnginePageMetadata.i18nKey`). The launcher context MUST request\n * these so the lazy i18n loader fetches them — `engine.pages.*` is not in\n * `EAGER_I18N_SECTIONS`, so without an explicit request the sidebar renders the\n * raw key (e.g. `engine.pages.securitySettings`). Static + bounded: adding an\n * engine page to `ENGINE_PAGE_METADATA` auto-extends this list.\n */\nconst ENGINE_PAGE_LABEL_KEYS: readonly string[] = Object.values(ENGINE_PAGE_METADATA).map(\n  (metadata) => `${metadata.i18nKey}.title`,\n);\n\n/**\n * The launcher's operation role gate (#2674) for a viewer: their application roles and the CURRENT organization's,\n * judged by `userRolesSatisfyRequiredRoles`, the action bar's rule (core inheritance, fail-open on a role the browser\n * cannot expand). `undefined` with no user context: nothing to judge by, so no gate.\n */\nexport function buildLauncherOperationRoleGate(\n  userOrgs: Pick<UserOrgsContextType, 'permissions' | 'currentOrganizationId'> | null | undefined,\n): ((requiredRoles: readonly string[] | undefined) => boolean) | undefined {\n  if (userOrgs === null || userOrgs === undefined) return undefined;\n  const userAppRoles = userOrgs.permissions?.appLevel ?? [];\n  const organizationId = userOrgs.currentOrganizationId;\n  const userOrgRoles = organizationId ? userOrgs.permissions?.organizations?.[organizationId] ?? [] : [];\n  return (requiredRoles) => userRolesSatisfyRequiredRoles({ requiredRoles, userAppRoles, userOrgRoles });\n}\n\n/**\n * Assembles a `LauncherResolutionContext` from existing React contexts.\n *\n * Returns `null` if the registry isn't loaded yet, OR if the label bundles its\n * items are named from have not settled (callers should treat as not-ready:\n * empty resolved lists or skip rendering until loaded). See the gate below for\n * why the second condition exists (#1411).\n */\nexport function useLauncherResolutionContext(): LauncherResolutionContext | null {\n  const { registry } = useResourceRegistry();\n  const { compositeViews, fullCustomViews, flowsActorsViews } = useUI();\n  const appScope = useAppScopeSafe();\n  const resourceTypes = useMemo(\n    () =>\n      registry?.resourceConfigurations\n        ? (Object.keys(registry.resourceConfigurations).filter(\n            rt => registry.resourceConfigurations[rt]?.frontendConfiguration,\n          ) as string[])\n        : [],\n    [registry],\n  );\n  const compositeLabelKeys = useMemo(() => {\n    const applicationCompositeKeys = (compositeViews ?? []).map((view) => (\n      buildCompositeViewLabelKey(view.translationRef)\n    ));\n    const resourceCompositeKeys = registry?.resourceConfigurations\n      ? Object.values(registry.resourceConfigurations).flatMap((resourceConfiguration) => (\n          resourceConfiguration.frontendConfiguration?.compositeViews?.map((view) => (\n            buildCompositeViewLabelKey(view.translationRef)\n          )) ?? []\n        ))\n      : [];\n\n    return Array.from(new Set([\n      ...applicationCompositeKeys,\n      ...resourceCompositeKeys,\n    ]));\n  }, [compositeViews, registry]);\n  const viewLabelKeys = useMemo(() => {\n    const applicationViewKeys = [\n      ...(fullCustomViews ?? []).map((view) => buildNavigationViewLabelKey({\n        family: NavigationViewLabelFamily.FULL_CUSTOM,\n        translationRef: buildApplicationViewTranslationRef(view.ref),\n      })),\n      ...(flowsActorsViews ?? []).map((view) => buildNavigationViewLabelKey({\n        family: NavigationViewLabelFamily.FLOWS_ACTORS,\n        translationRef: buildApplicationViewTranslationRef(view.ref),\n      })),\n    ];\n    const resourceViewKeys = registry?.resourceConfigurations\n      ? Object.entries(registry.resourceConfigurations).flatMap(([resourceType, resourceConfiguration]) => ([\n          ...(resourceConfiguration.frontendConfiguration?.chartViews?.map((view) => buildNavigationViewLabelKey({\n            family: NavigationViewLabelFamily.CHART,\n            translationRef: buildResourceViewTranslationRef(resourceType, view.ref),\n          })) ?? []),\n          ...(resourceConfiguration.frontendConfiguration?.executionViews?.map((view) => buildNavigationViewLabelKey({\n            family: NavigationViewLabelFamily.EXECUTION,\n            translationRef: buildResourceViewTranslationRef(resourceType, view.ref),\n          })) ?? []),\n        ]))\n      : [];\n\n    return Array.from(new Set([\n      ...applicationViewKeys,\n      ...resourceViewKeys,\n    ]));\n  }, [flowsActorsViews, fullCustomViews, registry]);\n  const { t, tResourceHeader, tResourceOperation, tCompositeView, tView, translations, isReady } = useI18n({\n    resource: resourceTypes,\n    keys: [...compositeLabelKeys, ...viewLabelKeys, ...ENGINE_PAGE_LABEL_KEYS],\n  });\n  const { renderIcon } = useIconRegistry();\n\n  /*\n   * The viewer's roles for the operation gate (#2674): application roles and the CURRENT organization's. Read from the\n   * context without throwing: only a test renders a launcher with no user provider, and it gets no gate. In the app the\n   * provider wraps every route, so an anonymous viewer IS gated, with no roles (public and anonymous operations pass).\n   *\n   * Keyed on the role lists' contents, not on the context value, which changes with every token refresh and privacy\n   * update: a new gate re-resolves every launcher surface and re-registers every hotkey. The action bar stabilizes the\n   * same way.\n   */\n  const userOrgs = useContext(UserOrgsContext);\n  const hasUserOrgs = userOrgs !== undefined && userOrgs !== null;\n  const currentOrganizationId = userOrgs?.currentOrganizationId ?? null;\n  const appRoles = userOrgs?.permissions?.appLevel ?? [];\n  const orgRoles = currentOrganizationId ? userOrgs?.permissions?.organizations?.[currentOrganizationId] ?? [] : [];\n  const appRolesKey = appRoles.join(',');\n  const orgRolesKey = orgRoles.join(',');\n  const canPerformOperation = useMemo(\n    () => buildLauncherOperationRoleGate(hasUserOrgs\n      ? { currentOrganizationId, permissions: { appLevel: appRoles, organizations: currentOrganizationId ? { [currentOrganizationId]: orgRoles } : {} } } as Pick<UserOrgsContextType, 'permissions' | 'currentOrganizationId'>\n      : undefined),\n    // Value-stabilized on the serialized role keys; the arrays themselves are read from the same render.\n    [hasUserOrgs, currentOrganizationId, appRolesKey, orgRolesKey],\n  );\n\n  /**\n   * View title resolver aligned with the authored runtime contracts.\n   *\n   * Composite views resolve through `composite_views.{translationRef}.title`.\n   * Other view families resolve through the dedicated `views.{family}.*`\n   * contract instead of surfacing authored refs or inserted runtime identities.\n   */\n  const tViewTitle = useMemo(\n    () => (viewRef: string, contentType: NavigationContentType): string => (\n      resolveNavigationViewTitle({\n        viewRef,\n        contentType,\n        tCompositeView,\n        tView,\n      })\n    ),\n    [tCompositeView, tView],\n  );\n\n  return useMemo((): LauncherResolutionContext | null => {\n    if (!registry) return null;\n    /*\n     * NOT BEFORE THE LABELS. Every item this context resolves takes its visible text from the label\n     * bundles requested above, and until they settle `tViewTitle` / `tResourceOperation` answer `''`.\n     * An item resolved in that window renders as a button with an icon and NO NAME.\n     *\n     * Measured on the Wonder Todos home (#1411): on first paint the sidebar held two items with empty\n     * labels, and one second later five, all named. axe audited inside that window and reported a\n     * CRITICAL `button-name`, and a screen-reader user landing on the page meets exactly what axe did.\n     *\n     * Gated HERE rather than in the sidebar because eight shell surfaces read this context — sidebar,\n     * command menu, toolbar, menubar, control panel, quick action, the user/org menu and the hotkey\n     * handler — and every one of them would otherwise need the same check. Returning `null` is the\n     * contract they already honour for a missing registry. `isReady` settles on a FAILED bundle as\n     * well as a loaded one, so this cannot hold the shell empty forever. A title that stays missing\n     * AFTER settling is the other case, and the resolvers themselves answer it (#1450): the title's\n     * KEY PATH, so the item looks missing rather than being silent, as\n     * `display-text-comes-from-i18n.md` asks.\n     */\n    if (!isReady) return null;\n\n    return {\n      registry,\n      contextResourceIdentifiers: appScope?.buildContextResourceIdentifiers() ?? {},\n      views: { compositeViews, fullCustomViews, flowsActorsViews },\n      tResourceHeader,\n      tResourceOperation,\n      tViewTitle,\n      t,\n      renderIcon,\n      ...(canPerformOperation === undefined ? {} : { canPerformOperation }),\n    };\n  // `translations` forces recomputation when i18n data loads — i18n helper\n  // closures capture translation data, so the memo must invalidate.\n  }, [registry, isReady, appScope, compositeViews, fullCustomViews, flowsActorsViews, tResourceHeader, tResourceOperation, tViewTitle, t, renderIcon, translations, canPerformOperation]);\n}\n"]}
+{"version":3,"file":"useLauncherResolutionContext.js","sourceRoot":"","sources":["../../../../../src/core/navigation/useLauncherResolutionContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAc,OAAO,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAkC,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iEAAiE,CAAC;AAEvG,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,kCAAkC,EAClC,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,sBAAsB,GAAsB,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CACvF,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,QAAQ,CAC1C,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B;IAC1C,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC3C,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,KAAK,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CACH,QAAQ,EAAE,sBAAsB;QAC9B,CAAC,CAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAClD,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,qBAAqB,CACpD;QAChB,CAAC,CAAC,EAAE,EACR,CAAC,QAAQ,CAAC,CACX,CAAC;IACF,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,MAAM,wBAAwB,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACpE,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC,CAChD,CAAC,CAAC;QACH,MAAM,qBAAqB,GAAG,QAAQ,EAAE,sBAAsB;YAC5D,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAChF,qBAAqB,CAAC,qBAAqB,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACzE,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC,CAChD,CAAC,IAAI,EAAE,CACT,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;YACxB,GAAG,wBAAwB;YAC3B,GAAG,qBAAqB;SACzB,CAAC,CAAC,CAAC;IACN,CAAC,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;QACjC,MAAM,mBAAmB,GAAG;YAC1B,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC;gBACnE,MAAM,EAAE,yBAAyB,CAAC,WAAW;gBAC7C,cAAc,EAAE,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC;aAC7D,CAAC,CAAC;YACH,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC;gBACpE,MAAM,EAAE,yBAAyB,CAAC,YAAY;gBAC9C,cAAc,EAAE,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC;aAC7D,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,gBAAgB,GAAG,QAAQ,EAAE,sBAAsB;YACvD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClG,GAAG,CAAC,qBAAqB,CAAC,qBAAqB,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC;oBACrG,MAAM,EAAE,yBAAyB,CAAC,KAAK;oBACvC,cAAc,EAAE,+BAA+B,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC;iBACxE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,qBAAqB,CAAC,qBAAqB,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC;oBACzG,MAAM,EAAE,yBAAyB,CAAC,SAAS;oBAC3C,cAAc,EAAE,+BAA+B,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC;iBACxE,CAAC,CAAC,IAAI,EAAE,CAAC;aACX,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;YACxB,GAAG,mBAAmB;YACtB,GAAG,gBAAgB;SACpB,CAAC,CAAC,CAAC;IACN,CAAC,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACvG,QAAQ,EAAE,aAAa;QACvB,+GAA+G;QAC/G,uFAAuF;QACvF,IAAI,EAAE,CAAC,GAAG,kBAAkB,EAAE,GAAG,aAAa,EAAE,GAAG,sBAAsB,EAAE,4BAA4B,CAAC;KACzG,CAAC,CAAC;IACH,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;IACzC,2FAA2F;IAC3F,MAAM,WAAW,GAAG,uBAAuB,EAAE,CAAC;IAC9C,yGAAyG;IACzG,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAC9D,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE;QACvC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,UAAkB,EAAsB,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnF,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEvB;;;;;;OAMG;IACH,MAAM,UAAU,GAAG,OAAO,CACxB,GAAG,EAAE,CAAC,CAAC,OAAe,EAAE,WAAkC,EAAU,EAAE,CAAC,CACrE,0BAA0B,CAAC;QACzB,OAAO;QACP,WAAW;QACX,cAAc;QACd,KAAK;KACN,CAAC,CACH,EACD,CAAC,cAAc,EAAE,KAAK,CAAC,CACxB,CAAC;IAEF,OAAO,OAAO,CAAC,GAAqC,EAAE;QACpD,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B;;;;;;;;;;;;;;;;;WAiBG;QACH,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,OAAO;YACL,QAAQ;YACR,0BAA0B,EAAE,QAAQ,EAAE,+BAA+B,EAAE,IAAI,EAAE;YAC7E,KAAK,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE;YAC5D,eAAe;YACf,kBAAkB;YAClB,UAAU;YACV,CAAC;YACD,UAAU;YACV,mBAAmB;YACnB,WAAW;SACZ,CAAC;QACJ,yEAAyE;QACzE,kEAAkE;IAClE,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AACvM,CAAC","sourcesContent":["/**\n * Hook that assembles a `LauncherResolutionContext` from existing React contexts.\n *\n * Per-launcher resolution functions (`resolveSidebarSections`, `resolveCommandMenuCommands`,\n * etc.) are pure functions that need registry, views, i18n, and icon rendering as inputs.\n * This hook collects those from the existing provider tree and returns a stable context object.\n *\n * Used by behavior hooks to call per-launcher resolution functions\n * (e.g., `resolveSidebarSections`, `resolveCommandMenuCommands`).\n */\n\nimport { useContext, useMemo } from 'react';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useUI } from '~wildo-frontend-lib/core/ui/useUI';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useIconRegistry } from '~wildo-frontend-lib/core/icons/useIconRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { useSettingsHubConfig } from '~wildo-frontend-lib/core/config/useSettingsHubConfig';\nimport { SETTINGS_HUB_TITLE_LABEL_KEY, type LauncherResolutionContext } from './launcher-resolution';\nimport { useViewerEffectiveRoles } from './launcher-runtime-availability';\nimport { ENGINE_PAGE_METADATA } from '~wildo-frontend-lib/core/config/launcher-items.frontend.schemas';\nimport { NavigationContentType } from './navigation.schemas';\nimport {\n  buildCompositeViewLabelKey,\n  buildNavigationViewLabelKey,\n  resolveNavigationViewTitle,\n  buildApplicationViewTranslationRef,\n  buildResourceViewTranslationRef,\n} from './view-title-resolution';\nimport { NavigationViewLabelFamily } from '@wildo-ai/presets-components-models';\n\n/**\n * Engine-page display-label keys, resolved at `engine.pages.<key>.title` (the\n * contract on `EnginePageMetadata.i18nKey`). The launcher context MUST request\n * these so the lazy i18n loader fetches them — `engine.pages.*` is not in\n * `EAGER_I18N_SECTIONS`, so without an explicit request the sidebar renders the\n * raw key (e.g. `engine.pages.securitySettings`). Static + bounded: adding an\n * engine page to `ENGINE_PAGE_METADATA` auto-extends this list.\n */\nconst ENGINE_PAGE_LABEL_KEYS: readonly string[] = Object.values(ENGINE_PAGE_METADATA).map(\n  (metadata) => `${metadata.i18nKey}.title`,\n);\n\n/**\n * Assembles a `LauncherResolutionContext` from existing React contexts.\n *\n * Returns `null` if the registry isn't loaded yet, OR if the label bundles its\n * items are named from have not settled (callers should treat as not-ready:\n * empty resolved lists or skip rendering until loaded). See the gate below for\n * why the second condition exists (#1411).\n */\nexport function useLauncherResolutionContext(): LauncherResolutionContext | null {\n  const { registry } = useResourceRegistry();\n  const { compositeViews, fullCustomViews, flowsActorsViews } = useUI();\n  const appScope = useAppScopeSafe();\n  const resourceTypes = useMemo(\n    () =>\n      registry?.resourceConfigurations\n        ? (Object.keys(registry.resourceConfigurations).filter(\n            rt => registry.resourceConfigurations[rt]?.frontendConfiguration,\n          ) as string[])\n        : [],\n    [registry],\n  );\n  const compositeLabelKeys = useMemo(() => {\n    const applicationCompositeKeys = (compositeViews ?? []).map((view) => (\n      buildCompositeViewLabelKey(view.translationRef)\n    ));\n    const resourceCompositeKeys = registry?.resourceConfigurations\n      ? Object.values(registry.resourceConfigurations).flatMap((resourceConfiguration) => (\n          resourceConfiguration.frontendConfiguration?.compositeViews?.map((view) => (\n            buildCompositeViewLabelKey(view.translationRef)\n          )) ?? []\n        ))\n      : [];\n\n    return Array.from(new Set([\n      ...applicationCompositeKeys,\n      ...resourceCompositeKeys,\n    ]));\n  }, [compositeViews, registry]);\n  const viewLabelKeys = useMemo(() => {\n    const applicationViewKeys = [\n      ...(fullCustomViews ?? []).map((view) => buildNavigationViewLabelKey({\n        family: NavigationViewLabelFamily.FULL_CUSTOM,\n        translationRef: buildApplicationViewTranslationRef(view.ref),\n      })),\n      ...(flowsActorsViews ?? []).map((view) => buildNavigationViewLabelKey({\n        family: NavigationViewLabelFamily.FLOWS_ACTORS,\n        translationRef: buildApplicationViewTranslationRef(view.ref),\n      })),\n    ];\n    const resourceViewKeys = registry?.resourceConfigurations\n      ? Object.entries(registry.resourceConfigurations).flatMap(([resourceType, resourceConfiguration]) => ([\n          ...(resourceConfiguration.frontendConfiguration?.chartViews?.map((view) => buildNavigationViewLabelKey({\n            family: NavigationViewLabelFamily.CHART,\n            translationRef: buildResourceViewTranslationRef(resourceType, view.ref),\n          })) ?? []),\n          ...(resourceConfiguration.frontendConfiguration?.executionViews?.map((view) => buildNavigationViewLabelKey({\n            family: NavigationViewLabelFamily.EXECUTION,\n            translationRef: buildResourceViewTranslationRef(resourceType, view.ref),\n          })) ?? []),\n        ]))\n      : [];\n\n    return Array.from(new Set([\n      ...applicationViewKeys,\n      ...resourceViewKeys,\n    ]));\n  }, [flowsActorsViews, fullCustomViews, registry]);\n  const { t, tResourceHeader, tResourceOperation, tCompositeView, tView, translations, isReady } = useI18n({\n    resource: resourceTypes,\n    // The hub's title names a settings row that opens the hub itself (`resolveSettingsSection`); it is a component\n    // label, not in an eager section, so it is requested here like the engine-page titles.\n    keys: [...compositeLabelKeys, ...viewLabelKeys, ...ENGINE_PAGE_LABEL_KEYS, SETTINGS_HUB_TITLE_LABEL_KEY],\n  });\n  const { renderIcon } = useIconRegistry();\n  // The viewer's roles, so a resource row the viewer may not perform is not offered (#2376).\n  const viewerRoles = useViewerEffectiveRoles();\n  // The resolved hub config the rail renders, so a settings row and the rail entry it opens draw one icon.\n  const { sections: settingsSections } = useSettingsHubConfig();\n  const settingsSectionIcon = useMemo(() => {\n    const iconBySection = new Map(settingsSections.map(section => [section.ref, section.icon]));\n    return (sectionRef: string): string | undefined => iconBySection.get(sectionRef);\n  }, [settingsSections]);\n\n  /**\n   * View title resolver aligned with the authored runtime contracts.\n   *\n   * Composite views resolve through `composite_views.{translationRef}.title`.\n   * Other view families resolve through the dedicated `views.{family}.*`\n   * contract instead of surfacing authored refs or inserted runtime identities.\n   */\n  const tViewTitle = useMemo(\n    () => (viewRef: string, contentType: NavigationContentType): string => (\n      resolveNavigationViewTitle({\n        viewRef,\n        contentType,\n        tCompositeView,\n        tView,\n      })\n    ),\n    [tCompositeView, tView],\n  );\n\n  return useMemo((): LauncherResolutionContext | null => {\n    if (!registry) return null;\n    /*\n     * NOT BEFORE THE LABELS. Every item this context resolves takes its visible text from the label\n     * bundles requested above, and until they settle `tViewTitle` / `tResourceOperation` answer `''`.\n     * An item resolved in that window renders as a button with an icon and NO NAME.\n     *\n     * Measured on the Wonder Todos home (#1411): on first paint the sidebar held two items with empty\n     * labels, and one second later five, all named. axe audited inside that window and reported a\n     * CRITICAL `button-name`, and a screen-reader user landing on the page meets exactly what axe did.\n     *\n     * Gated HERE rather than in the sidebar because eight shell surfaces read this context — sidebar,\n     * command menu, toolbar, menubar, control panel, quick action, the user/org menu and the hotkey\n     * handler — and every one of them would otherwise need the same check. Returning `null` is the\n     * contract they already honour for a missing registry. `isReady` settles on a FAILED bundle as\n     * well as a loaded one, so this cannot hold the shell empty forever. A title that stays missing\n     * AFTER settling is the other case, and the resolvers themselves answer it (#1450): the title's\n     * KEY PATH, so the item looks missing rather than being silent, as\n     * `display-text-comes-from-i18n.md` asks.\n     */\n    if (!isReady) return null;\n\n    return {\n      registry,\n      contextResourceIdentifiers: appScope?.buildContextResourceIdentifiers() ?? {},\n      views: { compositeViews, fullCustomViews, flowsActorsViews },\n      tResourceHeader,\n      tResourceOperation,\n      tViewTitle,\n      t,\n      renderIcon,\n      settingsSectionIcon,\n      viewerRoles,\n    };\n  // `translations` forces recomputation when i18n data loads — i18n helper\n  // closures capture translation data, so the memo must invalidate.\n  }, [registry, isReady, appScope, compositeViews, fullCustomViews, flowsActorsViews, tResourceHeader, tResourceOperation, tViewTitle, t, renderIcon, settingsSectionIcon, viewerRoles, translations]);\n}\n"]}

package/dist/esm/core/navigation/useNavigationController.d.ts

@@ -18,6 +18,7 @@
  * | `useNavigationRouterSync.ts` | what a URL means — deep links, back/forward, hosted panes |
  * | `navigation-cascade.ts` | what fills the zones nobody clicked |
  * | `navigation-controller-internals.ts` | the debug channel and the browser-URL write |
+ * | `navigation-commit.ts` | the commit a shell layout may wrap (a view transition between the two screens) |
  */
 import { NavigationZone, NavigationContent, NavigationInitiatorContext } from './navigation.schemas';
 import { NavigationZoneName, type TransitionConfig } from '@wildo-ai/saas-models';

package/dist/esm/core/navigation/useNavigationController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useNavigationController.d.ts","sourceRoot":"","sources":["../../../../src/core/navigation/useNavigationController.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAkCH,OAAO,EACL,cAAc,EACd,iBAAiB,EAEjB,0BAA0B,EAI3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,kBAAkB,EAIlB,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAAE,gCAAgC,EAAE,MAAM,+DAA+D,CAAC;AA+BjH;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,EAAE,0BAA0B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0BAA0B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpD;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,QAAQ,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;IAE7C;;;;;;;;OAQG;IACH,kBAAkB,EAAE,CAAE,eAAe,EAAE,gCAAgC,EAAE,SAAS,EAAE,0BAA0B,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,gBAAgB,KAAM,IAAI,CAAC;IAElL,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,cAAc,KAAK,IAAI,CAAC;IACxC;;;;;;;;;OASG;IACH,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,wGAAwG;IACxG,WAAW,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAChD,SAAS,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC;IAE7C;;OAEG;IACH,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iCAAiC,+CAAmD,CAAC;AAElG;;;;;;GAMG;AACH,wBAAgB,6BAA6B,IAAI,oBAAoB,CAm1BpE;AA8CD,wBAAgB,uBAAuB,IAAI,oBAAoB,CAI9D"}
+{"version":3,"file":"useNavigationController.d.ts","sourceRoot":"","sources":["../../../../../src/core/navigation/useNavigationController.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAkCH,OAAO,EACL,cAAc,EACd,iBAAiB,EAEjB,0BAA0B,EAI3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,kBAAkB,EAIlB,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAAE,gCAAgC,EAAE,MAAM,+DAA+D,CAAC;AA0BjH;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,EAAE,0BAA0B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0BAA0B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpD;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,QAAQ,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;IAE7C;;;;;;;;OAQG;IACH,kBAAkB,EAAE,CAAE,eAAe,EAAE,gCAAgC,EAAE,SAAS,EAAE,0BAA0B,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,gBAAgB,KAAM,IAAI,CAAC;IAElL,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,cAAc,KAAK,IAAI,CAAC;IACxC;;;;;;;;;OASG;IACH,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,wGAAwG;IACxG,WAAW,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAChD,SAAS,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC;IAE7C;;OAEG;IACH,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iCAAiC,+CAAmD,CAAC;AAElG;;;;;;GAMG;AACH,wBAAgB,6BAA6B,IAAI,oBAAoB,CA8zBpE;AA8CD,wBAAgB,uBAAuB,IAAI,oBAAoB,CAI9D"}