@wildo-ai/saas-frontend-lib 1.1.3 → 1.1.5

package/dist/esm/core/external-providers/ProviderFilePickerHost.js

@@ -29,15 +29,18 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
  * locale-bound copy, and freezing it into a framework component is how a missing
  * translation becomes invisible.
  */
-import { useCallback, useEffect, useMemo, useState } from 'react';
-import { BUILTIN_PROVIDER_CAPABILITY } from '@wildo-ai/saas-models/public-runtime';
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { BUILTIN_PROVIDER_CAPABILITY, layerProviderFilePickerConstraints } from '@wildo-ai/saas-models/public-runtime';
 import { useApplication } from '../../core/runtime/useApplication.js';
+import { getManualCallsHttpClient } from '../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
 import { ProviderComponentStatus, useProviderComponent, useProviderComponentChoices, } from '../../core/components-registry/useProviderComponent.frontend.hooks.js';
 import { receiveProviderFileSelections, } from './provider-file-selection.frontend.utils.js';
 const FILE_PICKER_CAPABILITY = BUILTIN_PROVIDER_CAPABILITY.FRONTEND_FILE_PICKER;
 export function ProviderFilePickerHost(props) {
     const { providerComponentRegistry, frontendProviderRegistry } = useApplication();
-    const choices = useProviderComponentChoices(FILE_PICKER_CAPABILITY);
+    const allChoices = useProviderComponentChoices(FILE_PICKER_CAPABILITY);
+    const acceptedStorages = props.acceptedStorages;
+    const choices = useMemo(() => allChoices.filter((choice) => choice.fileStorage === undefined || (acceptedStorages?.includes(choice.fileStorage) ?? false)), [allChoices, acceptedStorages]);
     const [chosen, setChosen] = useState(
     // A single provider needs no chooser: presenting one option as a choice is
     // a click that carries no information. Several is a genuine decision and is
@@ -60,6 +63,12 @@ export function ProviderFilePickerHost(props) {
             return {};
         return frontendProviderRegistry?.getProviderByRef(chosen)?.publicConfig ?? {};
     }, [chosen, frontendProviderRegistry]);
+    // The chosen provider's half, laid under the field's own. Recomputed when the
+    // person picks a different vendor, which is the whole point: the two vendors
+    // may declare different limits and each picker must be told its own.
+    const fieldConstraints = props.constraints;
+    const multiple = props.multiple;
+    const constraints = useMemo(() => layerProviderFilePickerConstraints({ base: fieldConstraints, multiple, publicConfig }), [fieldConstraints, multiple, publicConfig]);
     // Destructured, not read off `props` inside the callbacks: `props` is a fresh
     // object every render, so depending on it would give both callbacks a new
     // identity on every parent render — and a picker keying an effect on
@@ -85,6 +94,40 @@ export function ProviderFilePickerHost(props) {
         onProviderFailure?.({ providerRef: chosen, error });
     }, [chosen, onProviderFailure]);
     const handleCancel = useCallback(() => onCancel?.(), [onCancel]);
+    /*
+     * A chosen provider whose picker can never mount — its component failed to load, or a
+     * `<script>` its provider declares did not (`SCRIPT_LOAD_FAILED`) — is a failure the
+     * surface must hear about. Rendering nothing and saying nothing would leave a person who
+     * clicked a provider looking at a control that silently ignores them; the registry's
+     * diagnostic reaches a developer's log, not the field. Reported ONCE per chosen provider:
+     * `onProviderFailure` may change identity on every parent render, and the registry never
+     * retries, so a second report would describe the same failure again.
+     */
+    const reportedUnavailableRef = useRef(undefined);
+    useEffect(() => {
+        if (status !== ProviderComponentStatus.UNAVAILABLE || chosen === undefined) {
+            reportedUnavailableRef.current = undefined;
+            return;
+        }
+        if (reportedUnavailableRef.current === chosen)
+            return;
+        reportedUnavailableRef.current = chosen;
+        onProviderFailure?.({
+            providerRef: chosen,
+            error: new Error(`Provider "${chosen}" cannot open its file picker: its component or a script it declares did not load. `
+                + 'The provider component registry logged the cause.'),
+        });
+    }, [status, chosen, onProviderFailure]);
+    // The caller's own token for the chosen provider, from the one door that hands one out (#394 P4).
+    // Resolved lazily — a picker asks when it opens, never before — and `undefined` when nothing is
+    // connected, which the picker reports in its own words. Never read from `publicConfig`, which is
+    // served to every browser.
+    const getAccessToken = useCallback(async () => {
+        if (chosen === undefined)
+            return undefined;
+        const granted = await getManualCallsHttpClient().getProviderConnectionAccessToken(chosen);
+        return granted?.accessToken;
+    }, [chosen]);
     if (choices.length === 0)
         return null;
     const chooser = props.renderChooser?.({ choices, chosen, choose: setChosen })
@@ -93,7 +136,7 @@ export function ProviderFilePickerHost(props) {
     // not make the registry know any capability's props. The narrowing happens
     // HERE, where the capability is known, and it is the only cast in the path.
     const Picker = Component;
-    return (_jsxs(_Fragment, { children: [choices.length > 1 ? chooser : null, status === ProviderComponentStatus.READY && Picker !== null && chosen !== undefined ? (_jsx(Picker, { providerRef: chosen, publicConfig: publicConfig, constraints: props.constraints, onSelect: handleSelect, onCancel: handleCancel, onError: handleError })) : null] }));
+    return (_jsxs(_Fragment, { children: [choices.length > 1 ? chooser : null, status === ProviderComponentStatus.READY && Picker !== null && chosen !== undefined ? (_jsx(Picker, { providerRef: chosen, publicConfig: publicConfig, constraints: constraints, getAccessToken: getAccessToken, onSelect: handleSelect, onCancel: handleCancel, onError: handleError })) : null] }));
 }
 function defaultChooser(input) {
     return (_jsx("div", { role: "group", children: input.choices.map((choice) => (_jsx("button", { type: "button", "aria-pressed": choice.providerRef === input.chosen, onClick: () => input.choose(choice.providerRef), children: choice.displayName ?? choice.providerRef }, choice.providerRef))) }));

package/dist/esm/core/external-providers/ProviderFilePickerHost.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProviderFilePickerHost.js","sourceRoot":"","sources":["../../../../src/core/external-providers/ProviderFilePickerHost.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAMnF,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,GAE5B,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EACL,6BAA6B,GAE9B,MAAM,0CAA0C,CAAC;AAElD,MAAM,sBAAsB,GAAG,2BAA2B,CAAC,oBAA0C,CAAC;AA6BtG,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;IACjF,MAAM,OAAO,GAAG,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ;IAClC,2EAA2E;IAC3E,4EAA4E;IAC5E,mBAAmB;IACnB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CACnE,CAAC;IAEF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,SAAS,CAAC,GAAG,EAAE;QACb,2EAA2E;QAC3E,2EAA2E;QAC3E,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,wDAAwD;QACxD,IAAI,eAAe,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,eAAe,CAAC,CAAC;IACxF,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAEnF,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO,wBAAwB,EAAE,gBAAgB,CAAC,MAAe,CAAC,EAAE,YAAY,IAAI,EAAE,CAAC;IACzF,CAAC,EAAE,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEvC,8EAA8E;IAC9E,0EAA0E;IAC1E,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IAExD,MAAM,YAAY,GAAG,WAAW,CAC9B,CAAC,UAA4C,EAAE,EAAE;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QAEjC,MAAM,OAAO,GAAG,6BAA6B,CAAC;YAC5C,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,yBAAyB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;YAC/E,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,EACD,CAAC,MAAM,EAAE,yBAAyB,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CACjE,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC,EACD,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAC5B,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;WACxE,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAE5D,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,SAAgE,CAAC;IAEhF,OAAO,CACL,8BACG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EACnC,MAAM,KAAK,uBAAuB,CAAC,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CACrF,KAAC,MAAM,IACL,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,KAAK,CAAC,WAAW,EAC9B,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,WAAW,GACpB,CACH,CAAC,CAAC,CAAC,IAAI,IACP,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAIvB;IACC,OAAO,CACL,cAAK,IAAI,EAAC,OAAO,YACd,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAC7B,iBAEE,IAAI,EAAC,QAAQ,kBACC,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM,EACjD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,YAI9C,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,IAPpC,MAAM,CAAC,WAAW,CAQhB,CACV,CAAC,GACE,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The framework side of a provider file picker: choose a provider, load its\n * component on demand, mount it, and hold whatever it returns to the contract\n * it declared.\n *\n * This is the seam issue #380 exists to create. Before it, a provider could not\n * contribute a component at all, and resolution beside the registry was\n * first-match — so a Drive picker and a Dropbox picker could not coexist for one\n * field, and which one won depended on map order.\n *\n * ## What this component decides and what it deliberately does not\n *\n * It decides NOTHING about which provider is right. `useProviderComponentChoices`\n * returns every live provider that carries a picker, in a stable order, and this\n * host renders them for a person to choose between. A framework that picked one\n * would be making a product decision in a lookup table, which is the defect the\n * registry was rebuilt to remove.\n *\n * It also does not interpret a selection. Routing a `REMOTE_REFERENCE` to the\n * application's executor door, or uploading a `BROWSER_READABLE_FILE`, is the\n * FIELD's job — this host hands up an outcome that is already checked against\n * the provider's declaration, so the field can branch on a `kind` it can trust.\n *\n * ## Chrome\n *\n * There is none beyond a list of buttons and the mounted component. Every label\n * is an i18n KEY resolved by the caller: a provider's display name is\n * locale-bound copy, and freezing it into a framework component is how a missing\n * translation becomes invisible.\n */\n\nimport React, { useCallback, useEffect, useMemo, useState } from 'react';\nimport type { ProviderCapability } from '@wildo-ai/saas-models';\nimport { BUILTIN_PROVIDER_CAPABILITY } from '@wildo-ai/saas-models/public-runtime';\nimport type {\n  ProviderFilePickerConstraints,\n  ProviderFilePickerProps,\n  ProviderFileSelection,\n} from '@wildo-ai/external-connectors-public/app';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport {\n  ProviderComponentStatus,\n  useProviderComponent,\n  useProviderComponentChoices,\n  type ProviderComponentChoice,\n} from '~wildo-frontend-lib/core/components-registry/useProviderComponent.frontend.hooks';\nimport {\n  receiveProviderFileSelections,\n  type ProviderFileSelectionRejection,\n} from './provider-file-selection.frontend.utils';\n\nconst FILE_PICKER_CAPABILITY = BUILTIN_PROVIDER_CAPABILITY.FRONTEND_FILE_PICKER as ProviderCapability;\n\nexport interface ProviderFilePickerHostProps {\n  readonly constraints: ProviderFilePickerConstraints;\n  /**\n   * Called with selections that have already been checked against the chosen\n   * provider's declaration, so every `kind` here is the one that provider said\n   * it would produce.\n   */\n  onSelect(providerRef: string, selections: readonly ProviderFileSelection[]): void;\n  onCancel?(): void;\n  /**\n   * A provider's picker failed, or contradicted its own declaration. Both reach\n   * here because both mean the same thing to a user — this picker did not work —\n   * while the distinction that matters to a developer is in the rejection.\n   */\n  onProviderFailure?(failure: { readonly providerRef: string; readonly error?: Error; readonly rejections?: readonly ProviderFileSelectionRejection[] }): void;\n  /**\n   * Renders the chooser. Supplied by the caller, because a chooser is chrome and\n   * this package's components are injected rather than hard-coded. The default\n   * below is plain buttons: enough to be usable, not enough to be a design.\n   */\n  renderChooser?(input: {\n    readonly choices: readonly ProviderComponentChoice[];\n    readonly chosen: string | undefined;\n    choose(providerRef: string): void;\n  }): React.ReactNode;\n}\n\nexport function ProviderFilePickerHost(props: ProviderFilePickerHostProps): React.ReactElement | null {\n  const { providerComponentRegistry, frontendProviderRegistry } = useApplication();\n  const choices = useProviderComponentChoices(FILE_PICKER_CAPABILITY);\n  const [chosen, setChosen] = useState<string | undefined>(\n    // A single provider needs no chooser: presenting one option as a choice is\n    // a click that carries no information. Several is a genuine decision and is\n    // never made here.\n    () => (choices.length === 1 ? choices[0]?.providerRef : undefined),\n  );\n\n  const soleProviderRef = choices.length === 1 ? choices[0]?.providerRef : undefined;\n  useEffect(() => {\n    // The initializer above runs ONCE. In today's runtime that is enough — the\n    // registry is populated before application services are handed out and the\n    // context gates children on them — but a host whose only correctness\n    // argument lives in another file's ordering is one refactor from rendering\n    // nothing at all: with a single late-arriving provider there would be no\n    // chooser (length is 1) and no picker (nothing chosen).\n    if (soleProviderRef !== undefined && chosen === undefined) setChosen(soleProviderRef);\n  }, [soleProviderRef, chosen]);\n  const { status, Component } = useProviderComponent(FILE_PICKER_CAPABILITY, chosen);\n\n  const publicConfig = useMemo(() => {\n    if (chosen === undefined) return {};\n    return frontendProviderRegistry?.getProviderByRef(chosen as never)?.publicConfig ?? {};\n  }, [chosen, frontendProviderRegistry]);\n\n  // Destructured, not read off `props` inside the callbacks: `props` is a fresh\n  // object every render, so depending on it would give both callbacks a new\n  // identity on every parent render — and a picker keying an effect on\n  // `onSelect` would then re-run its whole open sequence each time.\n  const { onSelect, onCancel, onProviderFailure } = props;\n\n  const handleSelect = useCallback(\n    (selections: readonly ProviderFileSelection[]) => {\n      if (chosen === undefined) return;\n\n      const outcome = receiveProviderFileSelections({\n        providerRef: chosen,\n        descriptor: providerComponentRegistry?.describe(FILE_PICKER_CAPABILITY, chosen),\n        selections,\n      });\n\n      if (outcome.rejections.length > 0) {\n        onProviderFailure?.({ providerRef: chosen, rejections: outcome.rejections });\n        return;\n      }\n\n      onSelect(chosen, outcome.accepted);\n    },\n    [chosen, providerComponentRegistry, onSelect, onProviderFailure],\n  );\n\n  const handleError = useCallback(\n    (error: Error) => {\n      if (chosen === undefined) return;\n      onProviderFailure?.({ providerRef: chosen, error });\n    },\n    [chosen, onProviderFailure],\n  );\n\n  const handleCancel = useCallback(() => onCancel?.(), [onCancel]);\n\n  if (choices.length === 0) return null;\n\n  const chooser = props.renderChooser?.({ choices, chosen, choose: setChosen })\n    ?? defaultChooser({ choices, chosen, choose: setChosen });\n\n  // `Component` is typed as the registry's opaque component: this package must\n  // not make the registry know any capability's props. The narrowing happens\n  // HERE, where the capability is known, and it is the only cast in the path.\n  const Picker = Component as React.ComponentType<ProviderFilePickerProps> | null;\n\n  return (\n    <>\n      {choices.length > 1 ? chooser : null}\n      {status === ProviderComponentStatus.READY && Picker !== null && chosen !== undefined ? (\n        <Picker\n          providerRef={chosen}\n          publicConfig={publicConfig}\n          constraints={props.constraints}\n          onSelect={handleSelect}\n          onCancel={handleCancel}\n          onError={handleError}\n        />\n      ) : null}\n    </>\n  );\n}\n\nfunction defaultChooser(input: {\n  readonly choices: readonly ProviderComponentChoice[];\n  readonly chosen: string | undefined;\n  choose(providerRef: string): void;\n}): React.ReactNode {\n  return (\n    <div role=\"group\">\n      {input.choices.map((choice) => (\n        <button\n          key={choice.providerRef}\n          type=\"button\"\n          aria-pressed={choice.providerRef === input.chosen}\n          onClick={() => input.choose(choice.providerRef)}\n        >\n          {/* The authored fallback, NOT a translation — a surface that has an\n              i18n service should pass `renderChooser` and resolve the key. */}\n          {choice.displayName ?? choice.providerRef}\n        </button>\n      ))}\n    </div>\n  );\n}\n"]}
+{"version":3,"file":"ProviderFilePickerHost.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/ProviderFilePickerHost.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjF,OAAO,EAAE,2BAA2B,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAOvH,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,GAE5B,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EACL,6BAA6B,GAE9B,MAAM,0CAA0C,CAAC;AAElD,MAAM,sBAAsB,GAAG,2BAA2B,CAAC,oBAA0C,CAAC;AAmDtG,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;IACjF,MAAM,UAAU,GAAG,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,EAClI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAC/B,CAAC;IACF,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ;IAClC,2EAA2E;IAC3E,4EAA4E;IAC5E,mBAAmB;IACnB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CACnE,CAAC;IAEF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,SAAS,CAAC,GAAG,EAAE;QACb,2EAA2E;QAC3E,2EAA2E;QAC3E,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,wDAAwD;QACxD,IAAI,eAAe,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,eAAe,CAAC,CAAC;IACxF,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAEnF,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO,wBAAwB,EAAE,gBAAgB,CAAC,MAAe,CAAC,EAAE,YAAY,IAAI,EAAE,CAAC;IACzF,CAAC,EAAE,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEvC,8EAA8E;IAC9E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,gBAAgB,GAAG,KAAK,CAAC,WAAW,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,WAAW,GAAG,OAAO,CACzB,GAAG,EAAE,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAC5F,CAAC,gBAAgB,EAAE,QAAQ,EAAE,YAAY,CAAC,CAC3C,CAAC;IAEF,8EAA8E;IAC9E,0EAA0E;IAC1E,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IAExD,MAAM,YAAY,GAAG,WAAW,CAC9B,CAAC,UAA4C,EAAE,EAAE;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QAEjC,MAAM,OAAO,GAAG,6BAA6B,CAAC;YAC5C,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,yBAAyB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;YAC/E,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,EACD,CAAC,MAAM,EAAE,yBAAyB,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CACjE,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC,EACD,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAC5B,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjE;;;;;;;;OAQG;IACH,MAAM,sBAAsB,GAAG,MAAM,CAAqB,SAAS,CAAC,CAAC;IACrE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,KAAK,uBAAuB,CAAC,WAAW,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3E,sBAAsB,CAAC,OAAO,GAAG,SAAS,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,IAAI,sBAAsB,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO;QACtD,sBAAsB,CAAC,OAAO,GAAG,MAAM,CAAC;QACxC,iBAAiB,EAAE,CAAC;YAClB,WAAW,EAAE,MAAM;YACnB,KAAK,EAAE,IAAI,KAAK,CACd,aAAa,MAAM,qFAAqF;kBACtG,mDAAmD,CACtD;SACF,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAExC,kGAAkG;IAClG,gGAAgG;IAChG,iGAAiG;IACjG,2BAA2B;IAC3B,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAiC,EAAE;QACzE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC;QAC1F,OAAO,OAAO,EAAE,WAAW,CAAC;IAC9B,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;WACxE,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAE5D,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,SAAgE,CAAC;IAEhF,OAAO,CACL,8BACG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EACnC,MAAM,KAAK,uBAAuB,CAAC,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CACrF,KAAC,MAAM,IACL,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,WAAW,GACpB,CACH,CAAC,CAAC,CAAC,IAAI,IACP,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAIvB;IACC,OAAO,CACL,cAAK,IAAI,EAAC,OAAO,YACd,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAC7B,iBAEE,IAAI,EAAC,QAAQ,kBACC,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM,EACjD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,YAI9C,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,IAPpC,MAAM,CAAC,WAAW,CAQhB,CACV,CAAC,GACE,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The framework side of a provider file picker: choose a provider, load its\n * component on demand, mount it, and hold whatever it returns to the contract\n * it declared.\n *\n * This is the seam issue #380 exists to create. Before it, a provider could not\n * contribute a component at all, and resolution beside the registry was\n * first-match — so a Drive picker and a Dropbox picker could not coexist for one\n * field, and which one won depended on map order.\n *\n * ## What this component decides and what it deliberately does not\n *\n * It decides NOTHING about which provider is right. `useProviderComponentChoices`\n * returns every live provider that carries a picker, in a stable order, and this\n * host renders them for a person to choose between. A framework that picked one\n * would be making a product decision in a lookup table, which is the defect the\n * registry was rebuilt to remove.\n *\n * It also does not interpret a selection. Routing a `REMOTE_REFERENCE` to the\n * application's executor door, or uploading a `BROWSER_READABLE_FILE`, is the\n * FIELD's job — this host hands up an outcome that is already checked against\n * the provider's declaration, so the field can branch on a `kind` it can trust.\n *\n * ## Chrome\n *\n * There is none beyond a list of buttons and the mounted component. Every label\n * is an i18n KEY resolved by the caller: a provider's display name is\n * locale-bound copy, and freezing it into a framework component is how a missing\n * translation becomes invisible.\n */\n\nimport React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport type { ProviderCapability } from '@wildo-ai/saas-models';\nimport { BUILTIN_PROVIDER_CAPABILITY, layerProviderFilePickerConstraints } from '@wildo-ai/saas-models/public-runtime';\nimport type { FileStorageAccepted } from '@wildo-ai/saas-models/public-runtime';\nimport type {\n  ProviderFilePickerConstraints,\n  ProviderFilePickerProps,\n  ProviderFileSelection,\n} from '@wildo-ai/saas-models/public-runtime';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport {\n  ProviderComponentStatus,\n  useProviderComponent,\n  useProviderComponentChoices,\n  type ProviderComponentChoice,\n} from '~wildo-frontend-lib/core/components-registry/useProviderComponent.frontend.hooks';\nimport {\n  receiveProviderFileSelections,\n  type ProviderFileSelectionRejection,\n} from './provider-file-selection.frontend.utils';\n\nconst FILE_PICKER_CAPABILITY = BUILTIN_PROVIDER_CAPABILITY.FRONTEND_FILE_PICKER as ProviderCapability;\n\nexport interface ProviderFilePickerHostProps {\n  /**\n   * The FIELD's own constraints, read from its Zod metadata. The chosen\n   * provider's declared limits are laid UNDER these, here, per provider — never\n   * resolved once by the caller, which is how one vendor's limit came to govern\n   * every other vendor's picker (#380).\n   */\n  readonly constraints: ProviderFilePickerConstraints;\n  /**\n   * Whether the field accepts several files. A `maxSelectionCount` a provider\n   * declares applies only to a `multiple` field; a single-file field never\n   * inherits a selection count, whatever the vendor allows.\n   */\n  readonly multiple: boolean;\n  /**\n   * The field's `z_file({ storageAccepted })` (#394 P5). A provider whose picker\n   * fronts a storage (a `REMOTE_REFERENCE` picker — the file stays at the\n   * vendor) is offered only when this names that storage, because the link it\n   * produces lands in that storage and the backend refuses it otherwise. A\n   * provider declaring no storage delivers bytes into the field's own storage\n   * and is offered regardless. Undefined — the field declared nothing — accepts\n   * no vendor storage: the default storage is the framework's.\n   */\n  readonly acceptedStorages?: ReadonlyArray<FileStorageAccepted>;\n  /**\n   * Called with selections that have already been checked against the chosen\n   * provider's declaration, so every `kind` here is the one that provider said\n   * it would produce.\n   */\n  onSelect(providerRef: string, selections: readonly ProviderFileSelection[]): void;\n  onCancel?(): void;\n  /**\n   * A provider's picker failed, or contradicted its own declaration. Both reach\n   * here because both mean the same thing to a user — this picker did not work —\n   * while the distinction that matters to a developer is in the rejection.\n   */\n  onProviderFailure?(failure: { readonly providerRef: string; readonly error?: Error; readonly rejections?: readonly ProviderFileSelectionRejection[] }): void;\n  /**\n   * Renders the chooser. Supplied by the caller, because a chooser is chrome and\n   * this package's components are injected rather than hard-coded. The default\n   * below is plain buttons: enough to be usable, not enough to be a design.\n   */\n  renderChooser?(input: {\n    readonly choices: readonly ProviderComponentChoice[];\n    readonly chosen: string | undefined;\n    choose(providerRef: string): void;\n  }): React.ReactNode;\n}\n\nexport function ProviderFilePickerHost(props: ProviderFilePickerHostProps): React.ReactElement | null {\n  const { providerComponentRegistry, frontendProviderRegistry } = useApplication();\n  const allChoices = useProviderComponentChoices(FILE_PICKER_CAPABILITY);\n  const acceptedStorages = props.acceptedStorages;\n  const choices = useMemo(\n    () => allChoices.filter((choice) => choice.fileStorage === undefined || (acceptedStorages?.includes(choice.fileStorage) ?? false)),\n    [allChoices, acceptedStorages],\n  );\n  const [chosen, setChosen] = useState<string | undefined>(\n    // A single provider needs no chooser: presenting one option as a choice is\n    // a click that carries no information. Several is a genuine decision and is\n    // never made here.\n    () => (choices.length === 1 ? choices[0]?.providerRef : undefined),\n  );\n\n  const soleProviderRef = choices.length === 1 ? choices[0]?.providerRef : undefined;\n  useEffect(() => {\n    // The initializer above runs ONCE. In today's runtime that is enough — the\n    // registry is populated before application services are handed out and the\n    // context gates children on them — but a host whose only correctness\n    // argument lives in another file's ordering is one refactor from rendering\n    // nothing at all: with a single late-arriving provider there would be no\n    // chooser (length is 1) and no picker (nothing chosen).\n    if (soleProviderRef !== undefined && chosen === undefined) setChosen(soleProviderRef);\n  }, [soleProviderRef, chosen]);\n  const { status, Component } = useProviderComponent(FILE_PICKER_CAPABILITY, chosen);\n\n  const publicConfig = useMemo(() => {\n    if (chosen === undefined) return {};\n    return frontendProviderRegistry?.getProviderByRef(chosen as never)?.publicConfig ?? {};\n  }, [chosen, frontendProviderRegistry]);\n\n  // The chosen provider's half, laid under the field's own. Recomputed when the\n  // person picks a different vendor, which is the whole point: the two vendors\n  // may declare different limits and each picker must be told its own.\n  const fieldConstraints = props.constraints;\n  const multiple = props.multiple;\n  const constraints = useMemo(\n    () => layerProviderFilePickerConstraints({ base: fieldConstraints, multiple, publicConfig }),\n    [fieldConstraints, multiple, publicConfig],\n  );\n\n  // Destructured, not read off `props` inside the callbacks: `props` is a fresh\n  // object every render, so depending on it would give both callbacks a new\n  // identity on every parent render — and a picker keying an effect on\n  // `onSelect` would then re-run its whole open sequence each time.\n  const { onSelect, onCancel, onProviderFailure } = props;\n\n  const handleSelect = useCallback(\n    (selections: readonly ProviderFileSelection[]) => {\n      if (chosen === undefined) return;\n\n      const outcome = receiveProviderFileSelections({\n        providerRef: chosen,\n        descriptor: providerComponentRegistry?.describe(FILE_PICKER_CAPABILITY, chosen),\n        selections,\n      });\n\n      if (outcome.rejections.length > 0) {\n        onProviderFailure?.({ providerRef: chosen, rejections: outcome.rejections });\n        return;\n      }\n\n      onSelect(chosen, outcome.accepted);\n    },\n    [chosen, providerComponentRegistry, onSelect, onProviderFailure],\n  );\n\n  const handleError = useCallback(\n    (error: Error) => {\n      if (chosen === undefined) return;\n      onProviderFailure?.({ providerRef: chosen, error });\n    },\n    [chosen, onProviderFailure],\n  );\n\n  const handleCancel = useCallback(() => onCancel?.(), [onCancel]);\n\n  /*\n   * A chosen provider whose picker can never mount — its component failed to load, or a\n   * `<script>` its provider declares did not (`SCRIPT_LOAD_FAILED`) — is a failure the\n   * surface must hear about. Rendering nothing and saying nothing would leave a person who\n   * clicked a provider looking at a control that silently ignores them; the registry's\n   * diagnostic reaches a developer's log, not the field. Reported ONCE per chosen provider:\n   * `onProviderFailure` may change identity on every parent render, and the registry never\n   * retries, so a second report would describe the same failure again.\n   */\n  const reportedUnavailableRef = useRef<string | undefined>(undefined);\n  useEffect(() => {\n    if (status !== ProviderComponentStatus.UNAVAILABLE || chosen === undefined) {\n      reportedUnavailableRef.current = undefined;\n      return;\n    }\n    if (reportedUnavailableRef.current === chosen) return;\n    reportedUnavailableRef.current = chosen;\n    onProviderFailure?.({\n      providerRef: chosen,\n      error: new Error(\n        `Provider \"${chosen}\" cannot open its file picker: its component or a script it declares did not load. `\n        + 'The provider component registry logged the cause.',\n      ),\n    });\n  }, [status, chosen, onProviderFailure]);\n\n  // The caller's own token for the chosen provider, from the one door that hands one out (#394 P4).\n  // Resolved lazily — a picker asks when it opens, never before — and `undefined` when nothing is\n  // connected, which the picker reports in its own words. Never read from `publicConfig`, which is\n  // served to every browser.\n  const getAccessToken = useCallback(async (): Promise<string | undefined> => {\n    if (chosen === undefined) return undefined;\n    const granted = await getManualCallsHttpClient().getProviderConnectionAccessToken(chosen);\n    return granted?.accessToken;\n  }, [chosen]);\n\n  if (choices.length === 0) return null;\n\n  const chooser = props.renderChooser?.({ choices, chosen, choose: setChosen })\n    ?? defaultChooser({ choices, chosen, choose: setChosen });\n\n  // `Component` is typed as the registry's opaque component: this package must\n  // not make the registry know any capability's props. The narrowing happens\n  // HERE, where the capability is known, and it is the only cast in the path.\n  const Picker = Component as React.ComponentType<ProviderFilePickerProps> | null;\n\n  return (\n    <>\n      {choices.length > 1 ? chooser : null}\n      {status === ProviderComponentStatus.READY && Picker !== null && chosen !== undefined ? (\n        <Picker\n          providerRef={chosen}\n          publicConfig={publicConfig}\n          constraints={constraints}\n          getAccessToken={getAccessToken}\n          onSelect={handleSelect}\n          onCancel={handleCancel}\n          onError={handleError}\n        />\n      ) : null}\n    </>\n  );\n}\n\nfunction defaultChooser(input: {\n  readonly choices: readonly ProviderComponentChoice[];\n  readonly chosen: string | undefined;\n  choose(providerRef: string): void;\n}): React.ReactNode {\n  return (\n    <div role=\"group\">\n      {input.choices.map((choice) => (\n        <button\n          key={choice.providerRef}\n          type=\"button\"\n          aria-pressed={choice.providerRef === input.chosen}\n          onClick={() => input.choose(choice.providerRef)}\n        >\n          {/* The authored fallback, NOT a translation — a surface that has an\n              i18n service should pass `renderChooser` and resolve the key. */}\n          {choice.displayName ?? choice.providerRef}\n        </button>\n      ))}\n    </div>\n  );\n}\n"]}

package/dist/esm/core/external-providers/frontend-provider-display-label.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frontend-provider-display-label.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/frontend-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,iCAAiC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,SAAS,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAClD,MAAM,EAAE,CASV;AAED;;;;;;;;;GASG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,iCAAiC,GACvC,MAAM,CASR"}
+{"version":3,"file":"frontend-provider-display-label.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/frontend-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,iCAAiC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,SAAS,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAClD,MAAM,EAAE,CASV;AAED;;;;;;;;;GASG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,iCAAiC,GACvC,MAAM,CASR"}

package/dist/esm/core/external-providers/frontend-provider-display-label.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"frontend-provider-display-label.frontend.utils.js","sourceRoot":"","sources":["../../../../src/core/external-providers/frontend-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AAcxF;;;;;;GAMG;AACH,MAAM,UAAU,uCAAuC,CACrD,SAAmD;IAEnD,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,SAAS,CAAC,MAAM,CACd,CAAC,QAAQ,EAAsB,EAAE,CAC/B,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CACtD,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAwC;IAExC,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,IAAI,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,CAAC;AACvE,CAAC","sourcesContent":["import { buildProviderDisplayNameLabelKey } from '@wildo-ai/saas-models/public-runtime';\n\nexport interface FrontendProviderDisplayLabelInput {\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n  /**\n   * Optional explicit fallback when the caller wants a non-ref technical\n   * fallback (for example a brand label sourced from a static map).\n   */\n  fallbackLabel?: string;\n  translate?: (key: string) => string;\n}\n\n/**\n * Collect unique, non-empty provider display-label keys for `useI18n({ keys })`.\n *\n * The helper intentionally stays tiny and framework-agnostic: call sites can\n * build whatever provider view-model they need, then hand only the optional\n * label keys here to get the deduped request list.\n */\nexport function collectFrontendProviderDisplayLabelKeys(\n  labelKeys: ReadonlyArray<string | undefined | null>,\n): string[] {\n  return Array.from(\n    new Set(\n      labelKeys.filter(\n        (labelKey): labelKey is string =>\n          typeof labelKey === 'string' && labelKey.length > 0,\n      ),\n    ),\n  );\n}\n\n/**\n * Resolve a user-facing provider label without freezing locale-bound copy into\n * provider metadata or generated artifacts.\n *\n * Order of preference:\n * 1. Translation resolved from the provider label key.\n * 2. Authored display name on the provider metadata.\n * 3. Optional caller-supplied fallback label.\n * 4. Raw provider ref as the technical last resort.\n */\nexport function resolveFrontendProviderDisplayLabel(\n  input: FrontendProviderDisplayLabelInput,\n): string {\n  const labelKey = input.displayNameLabelKey ?? buildProviderDisplayNameLabelKey(input.providerRef);\n  const translated = input.translate?.(labelKey);\n\n  if (translated && translated !== labelKey) {\n    return translated;\n  }\n\n  return input.displayName ?? input.fallbackLabel ?? input.providerRef;\n}\n"]}
+{"version":3,"file":"frontend-provider-display-label.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/frontend-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AAcxF;;;;;;GAMG;AACH,MAAM,UAAU,uCAAuC,CACrD,SAAmD;IAEnD,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,SAAS,CAAC,MAAM,CACd,CAAC,QAAQ,EAAsB,EAAE,CAC/B,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CACtD,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAwC;IAExC,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,IAAI,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,CAAC;AACvE,CAAC","sourcesContent":["import { buildProviderDisplayNameLabelKey } from '@wildo-ai/saas-models/public-runtime';\n\nexport interface FrontendProviderDisplayLabelInput {\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n  /**\n   * Optional explicit fallback when the caller wants a non-ref technical\n   * fallback (for example a brand label sourced from a static map).\n   */\n  fallbackLabel?: string;\n  translate?: (key: string) => string;\n}\n\n/**\n * Collect unique, non-empty provider display-label keys for `useI18n({ keys })`.\n *\n * The helper intentionally stays tiny and framework-agnostic: call sites can\n * build whatever provider view-model they need, then hand only the optional\n * label keys here to get the deduped request list.\n */\nexport function collectFrontendProviderDisplayLabelKeys(\n  labelKeys: ReadonlyArray<string | undefined | null>,\n): string[] {\n  return Array.from(\n    new Set(\n      labelKeys.filter(\n        (labelKey): labelKey is string =>\n          typeof labelKey === 'string' && labelKey.length > 0,\n      ),\n    ),\n  );\n}\n\n/**\n * Resolve a user-facing provider label without freezing locale-bound copy into\n * provider metadata or generated artifacts.\n *\n * Order of preference:\n * 1. Translation resolved from the provider label key.\n * 2. Authored display name on the provider metadata.\n * 3. Optional caller-supplied fallback label.\n * 4. Raw provider ref as the technical last resort.\n */\nexport function resolveFrontendProviderDisplayLabel(\n  input: FrontendProviderDisplayLabelInput,\n): string {\n  const labelKey = input.displayNameLabelKey ?? buildProviderDisplayNameLabelKey(input.providerRef);\n  const translated = input.translate?.(labelKey);\n\n  if (translated && translated !== labelKey) {\n    return translated;\n  }\n\n  return input.displayName ?? input.fallbackLabel ?? input.providerRef;\n}\n"]}

package/dist/esm/core/external-providers/frontend-provider-registry.frontend.service.d.ts

@@ -28,8 +28,7 @@ import type { FrontendAppProviderModule, FrontendAppProviderRef, FrontendProvide
  * Everything the registry needs to join the two channels.
  *
  * `modules` absent is the ordinary case for an application that declares no
- * package-shipped frontend provider: `wildo config sync` writes no generated
- * file, so there is nothing to import and nothing to pass.
+ * frontend provider. Config sync emits an empty map so startup imports remain stable.
  */
 export interface FrontendProviderRegistryHydrationInput {
     readonly entries?: FrontendProvidersBlock;

package/dist/esm/core/external-providers/frontend-provider-registry.frontend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frontend-provider-registry.frontend.service.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/frontend-provider-registry.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAK7E,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC5B,MAAM,0CAA0C,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,mCAAmC,KAAK,IAAI,CAAC;CACnF;AAED,MAAM,WAAW,uCAAuC;IACtD,gEAAgE;IAChE,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,yBAAyB,GAAG,SAAS,CAAC;IAErF,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,aAAa,CAAC,yBAAyB,CAAC,CAAC;IAE5C,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,yBAAyB,GAAG,SAAS,CAAC;IAEzC,mCAAmC,CACjC,kBAAkB,EAAE,kBAAkB,EACtC,gBAAgB,EAAE,gBAAgB,GAAG,MAAM,GAC1C,yBAAyB,GAAG,SAAS,CAAC;IAEzC,iEAAiE;IACjE,OAAO,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;CACrD;AAED,qBAAa,+CACX,YAAW,uCAAuC;IAElD,OAAO,CAAC,QAAQ,CAEb;IAEH,UAAU,CAAC,KAAK,CAAC,EAAE,sCAAsC,GAAG,IAAI;IAQhE,gBAAgB,CACd,GAAG,EAAE,sBAAsB,GAC1B,yBAAyB,GAAG,SAAS;IAIxC,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,aAAa,CAAC,yBAAyB,CAAC;IAI3C,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,yBAAyB,GAAG,SAAS;IAIxC,mCAAmC,CACjC,kBAAkB,EAAE,kBAAkB,EACtC,gBAAgB,EAAE,gBAAgB,GAAG,MAAM,GAC1C,yBAAyB,GAAG,SAAS;IAQxC,OAAO,IAAI,aAAa,CAAC,yBAAyB,CAAC;CAGpD;AAED,wBAAgB,6CAA6C,CAC3D,KAAK,CAAC,EAAE,sCAAsC,GAC7C,uCAAuC,CAIzC"}
+{"version":3,"file":"frontend-provider-registry.frontend.service.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/frontend-provider-registry.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAK7E,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC5B,MAAM,0CAA0C,CAAC;AAElD;;;;;GAKG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,mCAAmC,KAAK,IAAI,CAAC;CACnF;AAED,MAAM,WAAW,uCAAuC;IACtD,gEAAgE;IAChE,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,yBAAyB,GAAG,SAAS,CAAC;IAErF,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,aAAa,CAAC,yBAAyB,CAAC,CAAC;IAE5C,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,yBAAyB,GAAG,SAAS,CAAC;IAEzC,mCAAmC,CACjC,kBAAkB,EAAE,kBAAkB,EACtC,gBAAgB,EAAE,gBAAgB,GAAG,MAAM,GAC1C,yBAAyB,GAAG,SAAS,CAAC;IAEzC,iEAAiE;IACjE,OAAO,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;CACrD;AAED,qBAAa,+CACX,YAAW,uCAAuC;IAElD,OAAO,CAAC,QAAQ,CAEb;IAEH,UAAU,CAAC,KAAK,CAAC,EAAE,sCAAsC,GAAG,IAAI;IAQhE,gBAAgB,CACd,GAAG,EAAE,sBAAsB,GAC1B,yBAAyB,GAAG,SAAS;IAIxC,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,aAAa,CAAC,yBAAyB,CAAC;IAI3C,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,yBAAyB,GAAG,SAAS;IAIxC,mCAAmC,CACjC,kBAAkB,EAAE,kBAAkB,EACtC,gBAAgB,EAAE,gBAAgB,GAAG,MAAM,GAC1C,yBAAyB,GAAG,SAAS;IAQxC,OAAO,IAAI,aAAa,CAAC,yBAAyB,CAAC;CAGpD;AAED,wBAAgB,6CAA6C,CAC3D,KAAK,CAAC,EAAE,sCAAsC,GAC7C,uCAAuC,CAIzC"}

package/dist/esm/core/external-providers/frontend-provider-registry.frontend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"frontend-provider-registry.frontend.service.js","sourceRoot":"","sources":["../../../../src/core/external-providers/frontend-provider-registry.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,0CAA0C,CAAC;AA0ClD,MAAM,OAAO,+CAA+C;IAGlD,QAAQ,GAAG,2BAA2B,CAAC;QAC7C,OAAO,EAAE,IAAI,GAAG,EAAqD;KACtE,CAAC,CAAC;IAEH,UAAU,CAAC,KAA8C;QACvD,IAAI,CAAC,QAAQ,GAAG,mCAAmC,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,YAAY,EAAE,KAAK,EAAE,YAAY;SAClC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CACd,GAA2B;QAE3B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,wBAAwB,CACtB,kBAAsC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAED,wBAAwB,CACtB,kBAAsC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAED,mCAAmC,CACjC,kBAAsC,EACtC,gBAA2C;QAE3C,OAAO,IAAI,CAAC,QAAQ;aACjB,gCAAgC,CAAC,kBAAkB,CAAC;aACpD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACjB,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,gBAAgB,CAAC,CACrE,CAAC;IACN,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,6CAA6C,CAC3D,KAA8C;IAE9C,MAAM,OAAO,GAAG,IAAI,+CAA+C,EAAE,CAAC;IACtE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["/**\n * `FrontendProviderRegistryFrontendService` — frontend-side API for\n * reading the per-app provider catalog.\n *\n * The registry is built from TWO channels and no longer from a cast (#332):\n *\n *   - **DATA** — `FrontendAppBootstrapPayload.frontendProviders`, hydrated\n *     once at app start from `/application-config`. Built by\n *     `FrontendBootstrapBackendService.buildPayload()`, which is the SOLE\n *     cross-facet seam where backend code projects a `BackendProviderModule`\n *     into a `FrontendProviderEntry`. It is the authority on WHICH providers\n *     this frontend service has turned on, in this environment.\n *   - **CODE** — `generatedFrontendProviderModules` from the app's own\n *     `src/generated/frontend-providers.generated.ts`, written by\n *     `wildo config sync` and passed in through `StartApplicationOptions`. It\n *     is the authority on what code this bundle contains — an SDK loader, a\n *     public-config validator — none of which JSON could ever carry.\n *\n * From the frontend's perspective this service is still the only legal way to\n * read provider information — direct imports from\n * `@wildo-ai/external-connectors-private/*` are a TypeScript error because the\n * frontend bundle does not depend on that package.\n */\n\nimport type {\n  FrontendProvidersBlock,\n  ProviderCapability,\n} from '@wildo-ai/saas-models';\nimport type { ProviderProtocol } from '@wildo-ai/saas-models/public-runtime';\nimport {\n  composeFrontendAppProviders,\n  composeHydratedFrontendAppProviders,\n} from '@wildo-ai/external-connectors-public/app';\nimport type {\n  FrontendAppProviderModule,\n  FrontendAppProviderRef,\n  FrontendProviderHydrationDiagnostic,\n  GeneratedAppProviderModules,\n} from '@wildo-ai/external-connectors-public/app';\n\n/**\n * Everything the registry needs to join the two channels.\n *\n * `modules` absent is the ordinary case for an application that declares no\n * package-shipped frontend provider: `wildo config sync` writes no generated\n * file, so there is nothing to import and nothing to pass.\n */\nexport interface FrontendProviderRegistryHydrationInput {\n  readonly entries?: FrontendProvidersBlock;\n  readonly modules?: GeneratedAppProviderModules;\n  readonly onDiagnostic?: (diagnostic: FrontendProviderHydrationDiagnostic) => void;\n}\n\nexport interface FrontendProviderRegistryFrontendService {\n  /** Hydrated from `FrontendAppBootstrapPayload` at app start. */\n  getProviderByRef(ref: FrontendAppProviderRef): FrontendAppProviderModule | undefined;\n\n  listByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): ReadonlyArray<FrontendAppProviderModule>;\n\n  findByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): FrontendAppProviderModule | undefined;\n\n  findByProviderCapabilityAndProtocol(\n    providerCapability: ProviderCapability,\n    providerProtocol: ProviderProtocol | string,\n  ): FrontendAppProviderModule | undefined;\n\n  /** All providers (read-only). For debug / introspection only. */\n  listAll(): ReadonlyArray<FrontendAppProviderModule>;\n}\n\nexport class InMemoryFrontendProviderRegistryFrontendService\n  implements FrontendProviderRegistryFrontendService\n{\n  private registry = composeFrontendAppProviders({\n    modules: new Map<FrontendAppProviderRef, FrontendAppProviderModule>(),\n  });\n\n  initialize(input?: FrontendProviderRegistryHydrationInput): void {\n    this.registry = composeHydratedFrontendAppProviders({\n      entries: input?.entries,\n      modules: input?.modules,\n      onDiagnostic: input?.onDiagnostic,\n    });\n  }\n\n  getProviderByRef(\n    ref: FrontendAppProviderRef,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry.getProviderByRef(ref);\n  }\n\n  listByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): ReadonlyArray<FrontendAppProviderModule> {\n    return this.registry.getProvidersByProviderCapability(providerCapability);\n  }\n\n  findByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry.findProviderByProviderCapability(providerCapability);\n  }\n\n  findByProviderCapabilityAndProtocol(\n    providerCapability: ProviderCapability,\n    providerProtocol: ProviderProtocol | string,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry\n      .getProvidersByProviderCapability(providerCapability)\n      .find((provider) =>\n        provider.protocols.some((protocol) => protocol === providerProtocol),\n      );\n  }\n\n  listAll(): ReadonlyArray<FrontendAppProviderModule> {\n    return [...this.registry.modules.values()];\n  }\n}\n\nexport function createFrontendProviderRegistryFrontendService(\n  input?: FrontendProviderRegistryHydrationInput,\n): FrontendProviderRegistryFrontendService {\n  const service = new InMemoryFrontendProviderRegistryFrontendService();\n  service.initialize(input);\n  return service;\n}\n"]}
+{"version":3,"file":"frontend-provider-registry.frontend.service.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/frontend-provider-registry.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,0CAA0C,CAAC;AAyClD,MAAM,OAAO,+CAA+C;IAGlD,QAAQ,GAAG,2BAA2B,CAAC;QAC7C,OAAO,EAAE,IAAI,GAAG,EAAqD;KACtE,CAAC,CAAC;IAEH,UAAU,CAAC,KAA8C;QACvD,IAAI,CAAC,QAAQ,GAAG,mCAAmC,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,YAAY,EAAE,KAAK,EAAE,YAAY;SAClC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CACd,GAA2B;QAE3B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,wBAAwB,CACtB,kBAAsC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAED,wBAAwB,CACtB,kBAAsC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAED,mCAAmC,CACjC,kBAAsC,EACtC,gBAA2C;QAE3C,OAAO,IAAI,CAAC,QAAQ;aACjB,gCAAgC,CAAC,kBAAkB,CAAC;aACpD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACjB,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,gBAAgB,CAAC,CACrE,CAAC;IACN,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,6CAA6C,CAC3D,KAA8C;IAE9C,MAAM,OAAO,GAAG,IAAI,+CAA+C,EAAE,CAAC;IACtE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["/**\n * `FrontendProviderRegistryFrontendService` — frontend-side API for\n * reading the per-app provider catalog.\n *\n * The registry is built from TWO channels and no longer from a cast (#332):\n *\n *   - **DATA** — `FrontendAppBootstrapPayload.frontendProviders`, hydrated\n *     once at app start from `/application-config`. Built by\n *     `FrontendBootstrapBackendService.buildPayload()`, which is the SOLE\n *     cross-facet seam where backend code projects a `BackendProviderModule`\n *     into a `FrontendProviderEntry`. It is the authority on WHICH providers\n *     this frontend service has turned on, in this environment.\n *   - **CODE** — `generatedFrontendProviderModules` from the app's own\n *     `src/generated/frontend-providers.generated.ts`, written by\n *     `wildo config sync` and passed in through `StartApplicationOptions`. It\n *     is the authority on what code this bundle contains — an SDK loader, a\n *     public-config validator — none of which JSON could ever carry.\n *\n * From the frontend's perspective this service is still the only legal way to\n * read provider information — direct imports from\n * `@wildo-ai/external-connectors-private/*` are a TypeScript error because the\n * frontend bundle does not depend on that package.\n */\n\nimport type {\n  FrontendProvidersBlock,\n  ProviderCapability,\n} from '@wildo-ai/saas-models';\nimport type { ProviderProtocol } from '@wildo-ai/saas-models/public-runtime';\nimport {\n  composeFrontendAppProviders,\n  composeHydratedFrontendAppProviders,\n} from '@wildo-ai/external-connectors-public/app';\nimport type {\n  FrontendAppProviderModule,\n  FrontendAppProviderRef,\n  FrontendProviderHydrationDiagnostic,\n  GeneratedAppProviderModules,\n} from '@wildo-ai/external-connectors-public/app';\n\n/**\n * Everything the registry needs to join the two channels.\n *\n * `modules` absent is the ordinary case for an application that declares no\n * frontend provider. Config sync emits an empty map so startup imports remain stable.\n */\nexport interface FrontendProviderRegistryHydrationInput {\n  readonly entries?: FrontendProvidersBlock;\n  readonly modules?: GeneratedAppProviderModules;\n  readonly onDiagnostic?: (diagnostic: FrontendProviderHydrationDiagnostic) => void;\n}\n\nexport interface FrontendProviderRegistryFrontendService {\n  /** Hydrated from `FrontendAppBootstrapPayload` at app start. */\n  getProviderByRef(ref: FrontendAppProviderRef): FrontendAppProviderModule | undefined;\n\n  listByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): ReadonlyArray<FrontendAppProviderModule>;\n\n  findByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): FrontendAppProviderModule | undefined;\n\n  findByProviderCapabilityAndProtocol(\n    providerCapability: ProviderCapability,\n    providerProtocol: ProviderProtocol | string,\n  ): FrontendAppProviderModule | undefined;\n\n  /** All providers (read-only). For debug / introspection only. */\n  listAll(): ReadonlyArray<FrontendAppProviderModule>;\n}\n\nexport class InMemoryFrontendProviderRegistryFrontendService\n  implements FrontendProviderRegistryFrontendService\n{\n  private registry = composeFrontendAppProviders({\n    modules: new Map<FrontendAppProviderRef, FrontendAppProviderModule>(),\n  });\n\n  initialize(input?: FrontendProviderRegistryHydrationInput): void {\n    this.registry = composeHydratedFrontendAppProviders({\n      entries: input?.entries,\n      modules: input?.modules,\n      onDiagnostic: input?.onDiagnostic,\n    });\n  }\n\n  getProviderByRef(\n    ref: FrontendAppProviderRef,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry.getProviderByRef(ref);\n  }\n\n  listByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): ReadonlyArray<FrontendAppProviderModule> {\n    return this.registry.getProvidersByProviderCapability(providerCapability);\n  }\n\n  findByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry.findProviderByProviderCapability(providerCapability);\n  }\n\n  findByProviderCapabilityAndProtocol(\n    providerCapability: ProviderCapability,\n    providerProtocol: ProviderProtocol | string,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry\n      .getProvidersByProviderCapability(providerCapability)\n      .find((provider) =>\n        provider.protocols.some((protocol) => protocol === providerProtocol),\n      );\n  }\n\n  listAll(): ReadonlyArray<FrontendAppProviderModule> {\n    return [...this.registry.modules.values()];\n  }\n}\n\nexport function createFrontendProviderRegistryFrontendService(\n  input?: FrontendProviderRegistryHydrationInput,\n): FrontendProviderRegistryFrontendService {\n  const service = new InMemoryFrontendProviderRegistryFrontendService();\n  service.initialize(input);\n  return service;\n}\n"]}

package/dist/esm/core/external-providers/provider-file-selection.frontend.utils.d.ts

@@ -51,8 +51,7 @@
  * nothing in the log. A returned result lets the mounting surface show the user
  * that the picker misbehaved and lets the diagnostic name the provider.
  */
-import { ProviderFrontendSelectionDelivery, type ProviderFrontendComponentDescriptor } from '@wildo-ai/saas-models/public-runtime';
-import type { ProviderFileSelection } from '@wildo-ai/external-connectors-public/app';
+import { ProviderFrontendSelectionDelivery, type ProviderFileSelection, type ProviderFrontendComponentDescriptor } from '@wildo-ai/saas-models/public-runtime';
 /** Why a selection a picker produced was not accepted. */
 export declare enum ProviderFileSelectionRejectionKind {
     /**

package/dist/esm/core/external-providers/provider-file-selection.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-file-selection.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/provider-file-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EACL,iCAAiC,EACjC,KAAK,mCAAmC,EACzC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAEtF,0DAA0D;AAC1D,oBAAY,kCAAkC;IAC5C;;;;;OAKG;IACH,6BAA6B,kCAAkC;IAC/D;;;;;OAKG;IACH,gCAAgC,qCAAqC;CACtE;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,iCAAiC,CAAC;IACtD,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,4BAA4B;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,SAAS,8BAA8B,EAAE,CAAC;CAChE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,mCAAmC,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACvD,GAAG,4BAA4B,CAqC/B"}
+{"version":3,"file":"provider-file-selection.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/provider-file-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EACL,iCAAiC,EACjC,KAAK,qBAAqB,EAC1B,KAAK,mCAAmC,EACzC,MAAM,sCAAsC,CAAC;AAE9C,0DAA0D;AAC1D,oBAAY,kCAAkC;IAC5C;;;;;OAKG;IACH,6BAA6B,kCAAkC;IAC/D;;;;;OAKG;IACH,gCAAgC,qCAAqC;CACtE;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,iCAAiC,CAAC;IACtD,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,4BAA4B;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,SAAS,8BAA8B,EAAE,CAAC;CAChE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,mCAAmC,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACvD,GAAG,4BAA4B,CAqC/B"}

package/dist/esm/core/external-providers/provider-file-selection.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-file-selection.frontend.utils.js","sourceRoot":"","sources":["../../../../src/core/external-providers/provider-file-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAQH,0DAA0D;AAC1D,MAAM,CAAN,IAAY,kCAeX;AAfD,WAAY,kCAAkC;IAC5C;;;;;OAKG;IACH,qGAA+D,CAAA;IAC/D;;;;;OAKG;IACH,2GAAqE,CAAA;AACvE,CAAC,EAfW,kCAAkC,KAAlC,kCAAkC,QAe7C;AAkBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAErD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,CAAC;oBACX,IAAI,EAAE,kCAAkC,CAAC,6BAA6B;oBACtE,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,8CAA8C;0BAC1E,qFAAqF;0BACrF,wFAAwF;0BACxF,4FAA4F;iBACjG,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC1C,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,kCAAkC,CAAC,gCAAgC;YACzE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ;YACR,QAAQ,EAAE,SAAS,CAAC,IAAI;YACxB,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,wCAAwC,QAAQ,mBAAmB;kBAC/F,IAAI,SAAS,CAAC,IAAI,0EAA0E;kBAC5F,6FAA6F;kBAC7F,yEAAyE;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE;QAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Holding a provider's file picker to the selection contract it DECLARED.\n *\n * ## Why this exists at all\n *\n * Issue #383 (Q5) settled what \"an application calls a third party directly from\n * a custom frontend component\" means when the component is a file picker, and\n * the answer was **per vendor, declared**: a picker for a credentialed vendor\n * hands back an opaque remote reference the backend resolves, a picker running\n * on a browser-safe grant hands back bytes or a URL the browser already has, and\n * a provider states which of the two it is.\n *\n * The union alone would have been the hedge that decision rejected. Three arms\n * with a runtime discriminant is a shape that says *\"one of these three, we will\n * find out when it happens\"* — and an application's file field cannot be written\n * against that: the reference arm has to be posted to the executor door, the\n * browser-readable arms go through the ordinary upload path, and choosing\n * between them at runtime means every field carries both.\n *\n * So the declaration is enforced here. A provider that declares\n * `REMOTE_REFERENCE` and hands back a `File` is refused, loudly, naming both\n * sides. Without this the declaration would be decoration, and a reviewer\n * reading a provider's manifest would be reading a wish rather than a contract.\n *\n * ## It is the SANCTIONED seam, not the only possible one\n *\n * `ProviderFilePickerHost` is the path that calls this, and it is what a surface\n * should use. But the registry and the `useProviderComponent` hooks are public\n * too — an application can resolve a provider's component itself, cast it and\n * mount it, and a selection then reaches that application without passing\n * through here.\n *\n * That is deliberate and it is stated rather than closed off: a framework that\n * could only mount a provider component one way would be unable to serve a\n * surface the framework has not thought of, which is the whole reason the\n * capability vocabulary is open. What the framework guarantees is that ITS\n * routing honours the declaration; an application taking the component directly\n * has taken the contract with it, and should call this function.\n *\n * An earlier revision of this paragraph said \"the one seam every selection\n * crosses\", which stopped being true in the same change that exported the other\n * path. Kept as a correction because a load-bearing sentence that quietly goes\n * false is how the next reader inherits a guarantee nobody makes.\n *\n * ## Why refusal is REPORTED rather than thrown\n *\n * This runs inside a picker's own callback, which is usually a vendor SDK's\n * event handler rather than a React render. A throw there does not reach an\n * error boundary — it reaches the vendor's own dispatcher, which typically\n * swallows it — so the surface would stop responding with nothing on screen and\n * nothing in the log. A returned result lets the mounting surface show the user\n * that the picker misbehaved and lets the diagnostic name the provider.\n */\n\nimport {\n  ProviderFrontendSelectionDelivery,\n  type ProviderFrontendComponentDescriptor,\n} from '@wildo-ai/saas-models/public-runtime';\nimport type { ProviderFileSelection } from '@wildo-ai/external-connectors-public/app';\n\n/** Why a selection a picker produced was not accepted. */\nexport enum ProviderFileSelectionRejectionKind {\n  /**\n   * The provider declared no `selectionDelivery` for its file picker, so the\n   * framework cannot know whether the result is a backend reference or bytes —\n   * and therefore cannot route it anywhere. An authoring defect in the provider\n   * package, not a user error.\n   */\n  PROVIDER_DECLARED_NO_DELIVERY = 'PROVIDER_DECLARED_NO_DELIVERY',\n  /**\n   * The picker returned a selection whose kind is not the one it declared. This\n   * is the case the whole declaration exists to catch: a `REMOTE_REFERENCE`\n   * provider handing back a `File` means bytes reached the browser on a path\n   * nobody reviewed for it.\n   */\n  DELIVERY_CONTRADICTS_DECLARATION = 'DELIVERY_CONTRADICTS_DECLARATION',\n}\n\nexport interface ProviderFileSelectionRejection {\n  readonly kind: ProviderFileSelectionRejectionKind;\n  readonly providerRef: string;\n  readonly message: string;\n  /** The delivery the provider declared, when it declared one. */\n  readonly declared?: ProviderFrontendSelectionDelivery;\n  /** The kind the picker actually produced, for the contradiction case. */\n  readonly received?: ProviderFileSelection['kind'];\n}\n\nexport interface ProviderFileSelectionOutcome {\n  /** Selections that match the declaration. Empty when anything was rejected — see below. */\n  readonly accepted: readonly ProviderFileSelection[];\n  readonly rejections: readonly ProviderFileSelectionRejection[];\n}\n\n/**\n * Checks every selection against what the provider declared.\n *\n * **All or nothing.** One contradicting selection rejects the whole batch rather\n * than the offending item, and that is deliberate: a picker that returned three\n * files of which one has the wrong shape is a picker whose contract is not what\n * it says, and accepting the other two would leave an application holding a\n * partial result it never asked for from a component it can no longer trust.\n * Silently dropping one of a user's three chosen files is the worse outcome —\n * the user sees two, has no idea why, and nothing anywhere says so.\n */\nexport function receiveProviderFileSelections(input: {\n  readonly providerRef: string;\n  readonly descriptor: ProviderFrontendComponentDescriptor | undefined;\n  readonly selections: readonly ProviderFileSelection[];\n}): ProviderFileSelectionOutcome {\n  const declared = input.descriptor?.selectionDelivery;\n\n  if (declared === undefined) {\n    return {\n      accepted: [],\n      rejections: [{\n        kind: ProviderFileSelectionRejectionKind.PROVIDER_DECLARED_NO_DELIVERY,\n        providerRef: input.providerRef,\n        message:\n          `Provider \"${input.providerRef}\" contributes a file picker but declares no `\n          + '`selectionDelivery`, so the framework cannot tell whether a selection is a backend '\n          + 'reference or bytes the browser already holds — and therefore cannot route it. Declare '\n          + 'one on the component: `components: { FRONTEND_FILE_PICKER: { load, selectionDelivery } }`.',\n      }],\n    };\n  }\n\n  const rejections: ProviderFileSelectionRejection[] = [];\n  for (const selection of input.selections) {\n    if (selection.kind === declared) continue;\n    rejections.push({\n      kind: ProviderFileSelectionRejectionKind.DELIVERY_CONTRADICTS_DECLARATION,\n      providerRef: input.providerRef,\n      declared,\n      received: selection.kind,\n      message:\n        `Provider \"${input.providerRef}\" declared its file picker delivers \"${declared}\" and returned a `\n        + `\"${selection.kind}\" selection. Which one a provider emits is a declaration, not a runtime `\n        + 'choice (issue #383): a surface routes a selection before it mounts the picker, so a picker '\n        + 'that contradicts its own declaration is refused rather than guessed at.',\n    });\n  }\n\n  return rejections.length > 0\n    ? { accepted: [], rejections }\n    : { accepted: input.selections, rejections: [] };\n}\n"]}
+{"version":3,"file":"provider-file-selection.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/provider-file-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAQH,0DAA0D;AAC1D,MAAM,CAAN,IAAY,kCAeX;AAfD,WAAY,kCAAkC;IAC5C;;;;;OAKG;IACH,qGAA+D,CAAA;IAC/D;;;;;OAKG;IACH,2GAAqE,CAAA;AACvE,CAAC,EAfW,kCAAkC,KAAlC,kCAAkC,QAe7C;AAkBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAErD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,CAAC;oBACX,IAAI,EAAE,kCAAkC,CAAC,6BAA6B;oBACtE,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,8CAA8C;0BAC1E,qFAAqF;0BACrF,wFAAwF;0BACxF,4FAA4F;iBACjG,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC1C,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,kCAAkC,CAAC,gCAAgC;YACzE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ;YACR,QAAQ,EAAE,SAAS,CAAC,IAAI;YACxB,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,wCAAwC,QAAQ,mBAAmB;kBAC/F,IAAI,SAAS,CAAC,IAAI,0EAA0E;kBAC5F,6FAA6F;kBAC7F,yEAAyE;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE;QAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Holding a provider's file picker to the selection contract it DECLARED.\n *\n * ## Why this exists at all\n *\n * Issue #383 (Q5) settled what \"an application calls a third party directly from\n * a custom frontend component\" means when the component is a file picker, and\n * the answer was **per vendor, declared**: a picker for a credentialed vendor\n * hands back an opaque remote reference the backend resolves, a picker running\n * on a browser-safe grant hands back bytes or a URL the browser already has, and\n * a provider states which of the two it is.\n *\n * The union alone would have been the hedge that decision rejected. Three arms\n * with a runtime discriminant is a shape that says *\"one of these three, we will\n * find out when it happens\"* — and an application's file field cannot be written\n * against that: the reference arm has to be posted to the executor door, the\n * browser-readable arms go through the ordinary upload path, and choosing\n * between them at runtime means every field carries both.\n *\n * So the declaration is enforced here. A provider that declares\n * `REMOTE_REFERENCE` and hands back a `File` is refused, loudly, naming both\n * sides. Without this the declaration would be decoration, and a reviewer\n * reading a provider's manifest would be reading a wish rather than a contract.\n *\n * ## It is the SANCTIONED seam, not the only possible one\n *\n * `ProviderFilePickerHost` is the path that calls this, and it is what a surface\n * should use. But the registry and the `useProviderComponent` hooks are public\n * too — an application can resolve a provider's component itself, cast it and\n * mount it, and a selection then reaches that application without passing\n * through here.\n *\n * That is deliberate and it is stated rather than closed off: a framework that\n * could only mount a provider component one way would be unable to serve a\n * surface the framework has not thought of, which is the whole reason the\n * capability vocabulary is open. What the framework guarantees is that ITS\n * routing honours the declaration; an application taking the component directly\n * has taken the contract with it, and should call this function.\n *\n * An earlier revision of this paragraph said \"the one seam every selection\n * crosses\", which stopped being true in the same change that exported the other\n * path. Kept as a correction because a load-bearing sentence that quietly goes\n * false is how the next reader inherits a guarantee nobody makes.\n *\n * ## Why refusal is REPORTED rather than thrown\n *\n * This runs inside a picker's own callback, which is usually a vendor SDK's\n * event handler rather than a React render. A throw there does not reach an\n * error boundary — it reaches the vendor's own dispatcher, which typically\n * swallows it — so the surface would stop responding with nothing on screen and\n * nothing in the log. A returned result lets the mounting surface show the user\n * that the picker misbehaved and lets the diagnostic name the provider.\n */\n\nimport {\n  ProviderFrontendSelectionDelivery,\n  type ProviderFileSelection,\n  type ProviderFrontendComponentDescriptor,\n} from '@wildo-ai/saas-models/public-runtime';\n\n/** Why a selection a picker produced was not accepted. */\nexport enum ProviderFileSelectionRejectionKind {\n  /**\n   * The provider declared no `selectionDelivery` for its file picker, so the\n   * framework cannot know whether the result is a backend reference or bytes —\n   * and therefore cannot route it anywhere. An authoring defect in the provider\n   * package, not a user error.\n   */\n  PROVIDER_DECLARED_NO_DELIVERY = 'PROVIDER_DECLARED_NO_DELIVERY',\n  /**\n   * The picker returned a selection whose kind is not the one it declared. This\n   * is the case the whole declaration exists to catch: a `REMOTE_REFERENCE`\n   * provider handing back a `File` means bytes reached the browser on a path\n   * nobody reviewed for it.\n   */\n  DELIVERY_CONTRADICTS_DECLARATION = 'DELIVERY_CONTRADICTS_DECLARATION',\n}\n\nexport interface ProviderFileSelectionRejection {\n  readonly kind: ProviderFileSelectionRejectionKind;\n  readonly providerRef: string;\n  readonly message: string;\n  /** The delivery the provider declared, when it declared one. */\n  readonly declared?: ProviderFrontendSelectionDelivery;\n  /** The kind the picker actually produced, for the contradiction case. */\n  readonly received?: ProviderFileSelection['kind'];\n}\n\nexport interface ProviderFileSelectionOutcome {\n  /** Selections that match the declaration. Empty when anything was rejected — see below. */\n  readonly accepted: readonly ProviderFileSelection[];\n  readonly rejections: readonly ProviderFileSelectionRejection[];\n}\n\n/**\n * Checks every selection against what the provider declared.\n *\n * **All or nothing.** One contradicting selection rejects the whole batch rather\n * than the offending item, and that is deliberate: a picker that returned three\n * files of which one has the wrong shape is a picker whose contract is not what\n * it says, and accepting the other two would leave an application holding a\n * partial result it never asked for from a component it can no longer trust.\n * Silently dropping one of a user's three chosen files is the worse outcome —\n * the user sees two, has no idea why, and nothing anywhere says so.\n */\nexport function receiveProviderFileSelections(input: {\n  readonly providerRef: string;\n  readonly descriptor: ProviderFrontendComponentDescriptor | undefined;\n  readonly selections: readonly ProviderFileSelection[];\n}): ProviderFileSelectionOutcome {\n  const declared = input.descriptor?.selectionDelivery;\n\n  if (declared === undefined) {\n    return {\n      accepted: [],\n      rejections: [{\n        kind: ProviderFileSelectionRejectionKind.PROVIDER_DECLARED_NO_DELIVERY,\n        providerRef: input.providerRef,\n        message:\n          `Provider \"${input.providerRef}\" contributes a file picker but declares no `\n          + '`selectionDelivery`, so the framework cannot tell whether a selection is a backend '\n          + 'reference or bytes the browser already holds — and therefore cannot route it. Declare '\n          + 'one on the component: `components: { FRONTEND_FILE_PICKER: { load, selectionDelivery } }`.',\n      }],\n    };\n  }\n\n  const rejections: ProviderFileSelectionRejection[] = [];\n  for (const selection of input.selections) {\n    if (selection.kind === declared) continue;\n    rejections.push({\n      kind: ProviderFileSelectionRejectionKind.DELIVERY_CONTRADICTS_DECLARATION,\n      providerRef: input.providerRef,\n      declared,\n      received: selection.kind,\n      message:\n        `Provider \"${input.providerRef}\" declared its file picker delivers \"${declared}\" and returned a `\n        + `\"${selection.kind}\" selection. Which one a provider emits is a declaration, not a runtime `\n        + 'choice (issue #383): a surface routes a selection before it mounts the picker, so a picker '\n        + 'that contradicts its own declaration is refused rather than guessed at.',\n    });\n  }\n\n  return rejections.length > 0\n    ? { accepted: [], rejections }\n    : { accepted: input.selections, rejections: [] };\n}\n"]}

package/dist/esm/core/features/FeatureGate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FeatureGate.d.ts","sourceRoot":"","sources":["../../../../src/core/features/FeatureGate.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAA0B,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM5F,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,YAAY,EAAE,mBAAmB,KAAK,KAAK,CAAC,SAAS,CAAC;CAC5E;AAED,wBAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,QAAQ,EACR,iBAAiB,GAClB,EAAE,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAgC7C"}
+{"version":3,"file":"FeatureGate.d.ts","sourceRoot":"","sources":["../../../../../src/core/features/FeatureGate.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAA0B,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM5F,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,YAAY,EAAE,mBAAmB,KAAK,KAAK,CAAC,SAAS,CAAC;CAC5E;AAED,wBAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,QAAQ,EACR,iBAAiB,GAClB,EAAE,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAgC7C"}

package/dist/esm/core/features/FeatureGate.js.map

@@ -1 +1 @@
-{"version":3,"file":"FeatureGate.js","sourceRoot":"","sources":["../../../../src/core/features/FeatureGate.tsx"],"names":[],"mappings":";AAsBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAA4B,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAgBrF,MAAM,UAAU,WAAW,CAAC,EAC1B,SAAS,EACT,QAAQ,EACR,iBAAiB,GACA;IACjB,MAAM,YAAY,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,yCAAyC;IACzC,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,4BAAG,QAAQ,GAAI,CAAC;IACzB,CAAC;IAED,iCAAiC;IACjC,IAAI,YAAY,CAAC,QAAQ,KAAK,6BAA6B,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,4BAAG,iBAAiB,CAAC,YAAY,CAAC,GAAI,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,OAAO,CACL,KAAC,wBAAwB,IACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAC/B,eAAe,EAAE,YAAY,CAAC,eAAe,EAC7C,SAAS,EAAE,YAAY,CAAC,SAAS,EACjC,mBAAmB,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,EACxD,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,EACnD,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,GAC3C,CACH,CAAC;AACJ,CAAC","sourcesContent":["/**\n * FeatureGate — Declarative feature gating component\n * \n * Wraps children with a feature availability check. If the feature is available,\n * renders children. If not, automatically renders the policy-driven prompt.\n * \n * Usage:\n *   const analyticsFeatureId = APP_FEATURE_IDS.ADVANCED_ANALYTICS;\n *\n *   <FeatureGate featureId={analyticsFeatureId}>\n *     <AnalyticsDashboard />\n *   </FeatureGate>\n * \n *   // Custom rendering when unavailable:\n *   <FeatureGate featureId={analyticsFeatureId} renderUnavailable={(availability) => (\n *     <MyCustomUpsell availability={availability} />\n *   )}>\n *     <AnalyticsDashboard />\n *   </FeatureGate>\n */\n\nimport React from 'react';\nimport { FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';\nimport { useFeatureAvailability, type FeatureAvailability } from './useFeatureAvailability';\nimport { FeatureUnavailablePrompt } from '~wildo-frontend-lib/components/feedback/features/feature-unavailable-prompt';\nimport { useBillingAction } from '~wildo-frontend-lib/core/billing/useBillingAction';\n\n// Note: useFeatureGate hook is in a separate file (useFeatureGate.ts) for React Fast Refresh compatibility.\n\nexport interface FeatureGateProps {\n  /** Feature identifier to check */\n  featureId: string;\n  /** Content to render when the feature is available */\n  children: React.ReactNode;\n  /** \n   * Optional custom renderer when the feature is unavailable.\n   * If omitted, renders the policy-driven FeatureUnavailablePrompt automatically.\n   */\n  renderUnavailable?: (availability: FeatureAvailability) => React.ReactNode;\n}\n\nexport function FeatureGate({\n  featureId,\n  children,\n  renderUnavailable,\n}: FeatureGateProps): React.JSX.Element | null {\n  const availability = useFeatureAvailability(featureId);\n  const billingAction = useBillingAction();\n\n  // Feature is available → render children\n  if (availability.isAvailable) {\n    return <>{children}</>;\n  }\n\n  // HIDE behavior → render nothing\n  if (availability.behavior === FeatureUnavailabilityBehavior.HIDE) {\n    return null;\n  }\n\n  // Custom renderer provided → delegate\n  if (renderUnavailable) {\n    return <>{renderUnavailable(availability)}</>;\n  }\n\n  // Default: policy-driven prompt. Inline FeatureGate surfaces do not expose a\n  // generic \"go back\" action because they are embedded into the current page.\n  return (\n    <FeatureUnavailablePrompt\n      behavior={availability.behavior}\n      missingFeatures={availability.missingFeatures}\n      limitInfo={availability.limitInfo}\n      upgradeOptionsCount={availability.upgradeOptions?.length}\n      customComponentRef={availability.customComponentRef}\n      onDismiss={undefined}\n      onAction={() => billingAction(availability)}\n    />\n  );\n}\n"]}
+{"version":3,"file":"FeatureGate.js","sourceRoot":"","sources":["../../../../../src/core/features/FeatureGate.tsx"],"names":[],"mappings":";AAsBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAA4B,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAgBrF,MAAM,UAAU,WAAW,CAAC,EAC1B,SAAS,EACT,QAAQ,EACR,iBAAiB,GACA;IACjB,MAAM,YAAY,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,yCAAyC;IACzC,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,4BAAG,QAAQ,GAAI,CAAC;IACzB,CAAC;IAED,iCAAiC;IACjC,IAAI,YAAY,CAAC,QAAQ,KAAK,6BAA6B,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,4BAAG,iBAAiB,CAAC,YAAY,CAAC,GAAI,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,OAAO,CACL,KAAC,wBAAwB,IACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAC/B,eAAe,EAAE,YAAY,CAAC,eAAe,EAC7C,SAAS,EAAE,YAAY,CAAC,SAAS,EACjC,mBAAmB,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,EACxD,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,EACnD,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,GAC3C,CACH,CAAC;AACJ,CAAC","sourcesContent":["/**\n * FeatureGate — Declarative feature gating component\n * \n * Wraps children with a feature availability check. If the feature is available,\n * renders children. If not, automatically renders the policy-driven prompt.\n * \n * Usage:\n *   const analyticsFeatureId = APP_FEATURE_IDS.ADVANCED_ANALYTICS;\n *\n *   <FeatureGate featureId={analyticsFeatureId}>\n *     <AnalyticsDashboard />\n *   </FeatureGate>\n * \n *   // Custom rendering when unavailable:\n *   <FeatureGate featureId={analyticsFeatureId} renderUnavailable={(availability) => (\n *     <MyCustomUpsell availability={availability} />\n *   )}>\n *     <AnalyticsDashboard />\n *   </FeatureGate>\n */\n\nimport React from 'react';\nimport { FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';\nimport { useFeatureAvailability, type FeatureAvailability } from './useFeatureAvailability';\nimport { FeatureUnavailablePrompt } from '~wildo-frontend-lib/components/feedback/features/feature-unavailable-prompt';\nimport { useBillingAction } from '~wildo-frontend-lib/core/billing/useBillingAction';\n\n// Note: useFeatureGate hook is in a separate file (useFeatureGate.ts) for React Fast Refresh compatibility.\n\nexport interface FeatureGateProps {\n  /** Feature identifier to check */\n  featureId: string;\n  /** Content to render when the feature is available */\n  children: React.ReactNode;\n  /** \n   * Optional custom renderer when the feature is unavailable.\n   * If omitted, renders the policy-driven FeatureUnavailablePrompt automatically.\n   */\n  renderUnavailable?: (availability: FeatureAvailability) => React.ReactNode;\n}\n\nexport function FeatureGate({\n  featureId,\n  children,\n  renderUnavailable,\n}: FeatureGateProps): React.JSX.Element | null {\n  const availability = useFeatureAvailability(featureId);\n  const billingAction = useBillingAction();\n\n  // Feature is available → render children\n  if (availability.isAvailable) {\n    return <>{children}</>;\n  }\n\n  // HIDE behavior → render nothing\n  if (availability.behavior === FeatureUnavailabilityBehavior.HIDE) {\n    return null;\n  }\n\n  // Custom renderer provided → delegate\n  if (renderUnavailable) {\n    return <>{renderUnavailable(availability)}</>;\n  }\n\n  // Default: policy-driven prompt. Inline FeatureGate surfaces do not expose a\n  // generic \"go back\" action because they are embedded into the current page.\n  return (\n    <FeatureUnavailablePrompt\n      behavior={availability.behavior}\n      missingFeatures={availability.missingFeatures}\n      limitInfo={availability.limitInfo}\n      upgradeOptionsCount={availability.upgradeOptions?.length}\n      customComponentRef={availability.customComponentRef}\n      onDismiss={undefined}\n      onAction={() => billingAction(availability)}\n    />\n  );\n}\n"]}

package/dist/esm/core/features/FeatureRouteGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FeatureRouteGuard.d.ts","sourceRoot":"","sources":["../../../../src/core/features/FeatureRouteGuard.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAc7H,UAAU,sBAAsB;IAC9B,mDAAmD;IACnD,SAAS,CAAC,EAAE,uCAAuC,CAAC;IACpD,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,6DAA6D;IAC7D,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAMD,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAsF9D,CAAC"}
+{"version":3,"file":"FeatureRouteGuard.d.ts","sourceRoot":"","sources":["../../../../../src/core/features/FeatureRouteGuard.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAc7H,UAAU,sBAAsB;IAC9B,mDAAmD;IACnD,SAAS,CAAC,EAAE,uCAAuC,CAAC;IACpD,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,6DAA6D;IAC7D,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAMD,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAsF9D,CAAC"}

package/dist/esm/core/features/FeatureRouteGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"FeatureRouteGuard.js","sourceRoot":"","sources":["../../../../src/core/features/FeatureRouteGuard.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,6BAA6B,GAG9B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,+BAA+B,EAAkC,MAAM,mCAAmC,CAAC;AACpH,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2EAA2E,CAAC;AAevH,mCAAmC;AACnC,YAAY;AACZ,mCAAmC;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAqC,CAAC,EAClE,SAAS,EACT,gBAAgB,EAChB,QAAQ,GACT,EAAE,EAAE;IACH,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAE9D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;QAC5C,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAA0E,CAAC;QAC1I,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAElC,MAAM,YAAY,GAAG,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;IAEzE,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC1C,0BAA0B,CAAC;YACzB,IAAI;YACJ,cAAc,EAAE,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAErB,+EAA+E;IAC/E,oCAAoC;IACpC,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC3C,IAAI,iBAAiB,EAAE,CAAC;YACtB,+FAA+F;YAC/F,iFAAiF;YACjF,MAAM,MAAM,GAAG,eAAe,CAAC,mBAAmB,CAAC;gBACjD,iBAAiB,EAAE,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpG,YAAY,EAAE,iBAAiB,CAAC,YAAY;aAC7C,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;gBACvB,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3D,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;QACH,CAAC;QAED,YAAY,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEtD,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,UAAU,GACd,YAAY,KAAK,SAAS;QAC1B,CAAC,YAAY,CAAC,WAAW;QACzB,YAAY,CAAC,QAAQ,KAAK,6BAA6B,CAAC,IAAI,CAAC;IAE/D,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,YAAY,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IAE/B,kCAAkC;IAClC,IAAI,CAAC,YAAY;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAE1C,2CAA2C;IAC3C,IAAI,YAAY,CAAC,WAAW;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAErD,gCAAgC;IAChC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,OAAO,CACL,KAAC,wBAAwB,IACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAC/B,eAAe,EAAE,YAAY,CAAC,eAAe,EAC7C,SAAS,EAAE,YAAY,CAAC,SAAS,EACjC,mBAAmB,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,EACxD,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,EACnD,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,GAC3C,CACH,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * FeatureRouteGuard\n * \n * Route-level guard that checks feature availability before rendering page content.\n * Routes are always registered (so deep links and bookmarks work), but the guard\n * intercepts rendering when a feature is unavailable.\n * \n * Behavior is determined by the feature unavailability policy:\n * - HIDE → Navigate to home\n * - All other behaviors → FeatureUnavailablePrompt (adapts content per behavior)\n * \n * The prompt renders INSIDE the app layout (sidebar stays visible) — it replaces\n * only the route content area, not the entire page.\n */\n\nimport React from 'react';\nimport { useNavigate } from 'react-router-dom';\nimport {\n  FeatureUnavailabilityBehavior,\n  NavigationZoneName,\n  type RequiredFeaturesConfig,\n} from '@wildo-ai/saas-models';\nimport type { FrontendResourceConfiguration_Operation } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useOperationFeatureAvailability, type RequiredFeaturesCheckable } from './useOperationFeatureAvailability';\nimport { FeatureUnavailablePrompt } from '~wildo-frontend-lib/components/feedback/features/feature-unavailable-prompt';\nimport { useBillingAction } from '~wildo-frontend-lib/core/billing/useBillingAction';\nimport { useEventBus } from '~wildo-frontend-lib/core/events/useEventBus';\nimport { FrontendEvents } from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport { NavigationContext } from '~wildo-frontend-lib/core/navigation/NavigationContext';\nimport { NavigationUtils } from '~wildo-frontend-lib/core/navigation/navigation.utils';\nimport { navigateHomeWithFreshStart } from '~wildo-frontend-lib/core/navigation/navigation-clean-break.frontend.utils';\n\n// ================================\n// Props\n// ================================\n\ninterface FeatureRouteGuardProps {\n  /** For resource routes: the operation to check. */\n  operation?: FrontendResourceConfiguration_Operation;\n  /** For view routes: the view's required features config. */\n  requiredFeatures?: RequiredFeaturesConfig;\n  /** The page content to render when features are available */\n  children: React.ReactNode;\n}\n\n// ================================\n// Component\n// ================================\n\nexport const FeatureRouteGuard: React.FC<FeatureRouteGuardProps> = ({\n  operation,\n  requiredFeatures,\n  children,\n}) => {\n  const navigate = useNavigate();\n  const billingAction = useBillingAction();\n  const { emit } = useEventBus();\n  const navigationContext = React.useContext(NavigationContext);\n\n  const effectiveOperation = React.useMemo(() => {\n    if (operation) return operation;\n    if (requiredFeatures) {\n      return { requiredFeatures, operationIdentifier: 'VIEW_ACCESS' } as RequiredFeaturesCheckable as FrontendResourceConfiguration_Operation;\n    }\n    return null;\n  }, [operation, requiredFeatures]);\n\n  const availability = useOperationFeatureAvailability(effectiveOperation);\n\n  const navigateHome = React.useCallback(() => {\n    navigateHomeWithFreshStart({\n      emit,\n      routerNavigate: navigate,\n    });\n  }, [emit, navigate]);\n\n  // Dismiss handler: prefer runtime-owned back semantics, otherwise fall back to\n  // a full fresh-start redirect home.\n  const handleDismiss = React.useCallback(() => {\n    if (navigationContext) {\n      // The ONE go-back resolver (see `NavigationUtils.resolveGoBackTarget`): a hosted pane's URL is\n      // composed under its host here exactly as the controller's `goBack` composes it.\n      const target = NavigationUtils.resolveGoBackTarget({\n        currentBrowserUrl: NavigationUtils.buildBrowserUrl(window.location.pathname, window.location.search),\n        getZoneState: navigationContext.getZoneState,\n      });\n      if (target?.browserUrl) {\n        emit(FrontendEvents.NAVIGATION_POP, { zone: target.zone });\n        navigate(target.browserUrl, { replace: true });\n        return;\n      }\n    }\n\n    navigateHome();\n  }, [emit, navigate, navigateHome, navigationContext]);\n\n  // Computed (and the effect registered) BEFORE the early returns below:\n  // `availability` flips between undefined / available / unavailable across\n  // renders, so the hook count must not depend on it (rules of hooks).\n  const shouldHide =\n    availability !== undefined &&\n    !availability.isAvailable &&\n    availability.behavior === FeatureUnavailabilityBehavior.HIDE;\n\n  React.useEffect(() => {\n    if (!shouldHide) {\n      return;\n    }\n\n    navigateHome();\n  }, [navigateHome, shouldHide]);\n\n  // No requiredFeatures → no gating\n  if (!availability) return <>{children}</>;\n\n  // Features are available → render children\n  if (availability.isAvailable) return <>{children}</>;\n\n  // HIDE → navigate away silently\n  if (shouldHide) {\n    return null;\n  }\n\n  // All other behaviors → single reusable prompt (adapts per behavior)\n  return (\n    <FeatureUnavailablePrompt\n      behavior={availability.behavior}\n      missingFeatures={availability.missingFeatures}\n      limitInfo={availability.limitInfo}\n      upgradeOptionsCount={availability.upgradeOptions?.length}\n      customComponentRef={availability.customComponentRef}\n      onDismiss={handleDismiss}\n      onAction={() => billingAction(availability)}\n    />\n  );\n};\n"]}
+{"version":3,"file":"FeatureRouteGuard.js","sourceRoot":"","sources":["../../../../../src/core/features/FeatureRouteGuard.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,6BAA6B,GAG9B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,+BAA+B,EAAkC,MAAM,mCAAmC,CAAC;AACpH,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2EAA2E,CAAC;AAevH,mCAAmC;AACnC,YAAY;AACZ,mCAAmC;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAqC,CAAC,EAClE,SAAS,EACT,gBAAgB,EAChB,QAAQ,GACT,EAAE,EAAE;IACH,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAE9D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;QAC5C,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAA0E,CAAC;QAC1I,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAElC,MAAM,YAAY,GAAG,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;IAEzE,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC1C,0BAA0B,CAAC;YACzB,IAAI;YACJ,cAAc,EAAE,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAErB,+EAA+E;IAC/E,oCAAoC;IACpC,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC3C,IAAI,iBAAiB,EAAE,CAAC;YACtB,+FAA+F;YAC/F,iFAAiF;YACjF,MAAM,MAAM,GAAG,eAAe,CAAC,mBAAmB,CAAC;gBACjD,iBAAiB,EAAE,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpG,YAAY,EAAE,iBAAiB,CAAC,YAAY;aAC7C,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;gBACvB,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3D,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;QACH,CAAC;QAED,YAAY,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEtD,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,UAAU,GACd,YAAY,KAAK,SAAS;QAC1B,CAAC,YAAY,CAAC,WAAW;QACzB,YAAY,CAAC,QAAQ,KAAK,6BAA6B,CAAC,IAAI,CAAC;IAE/D,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,YAAY,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IAE/B,kCAAkC;IAClC,IAAI,CAAC,YAAY;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAE1C,2CAA2C;IAC3C,IAAI,YAAY,CAAC,WAAW;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAErD,gCAAgC;IAChC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,OAAO,CACL,KAAC,wBAAwB,IACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAC/B,eAAe,EAAE,YAAY,CAAC,eAAe,EAC7C,SAAS,EAAE,YAAY,CAAC,SAAS,EACjC,mBAAmB,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,EACxD,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,EACnD,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,GAC3C,CACH,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * FeatureRouteGuard\n * \n * Route-level guard that checks feature availability before rendering page content.\n * Routes are always registered (so deep links and bookmarks work), but the guard\n * intercepts rendering when a feature is unavailable.\n * \n * Behavior is determined by the feature unavailability policy:\n * - HIDE → Navigate to home\n * - All other behaviors → FeatureUnavailablePrompt (adapts content per behavior)\n * \n * The prompt renders INSIDE the app layout (sidebar stays visible) — it replaces\n * only the route content area, not the entire page.\n */\n\nimport React from 'react';\nimport { useNavigate } from 'react-router-dom';\nimport {\n  FeatureUnavailabilityBehavior,\n  NavigationZoneName,\n  type RequiredFeaturesConfig,\n} from '@wildo-ai/saas-models';\nimport type { FrontendResourceConfiguration_Operation } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useOperationFeatureAvailability, type RequiredFeaturesCheckable } from './useOperationFeatureAvailability';\nimport { FeatureUnavailablePrompt } from '~wildo-frontend-lib/components/feedback/features/feature-unavailable-prompt';\nimport { useBillingAction } from '~wildo-frontend-lib/core/billing/useBillingAction';\nimport { useEventBus } from '~wildo-frontend-lib/core/events/useEventBus';\nimport { FrontendEvents } from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport { NavigationContext } from '~wildo-frontend-lib/core/navigation/NavigationContext';\nimport { NavigationUtils } from '~wildo-frontend-lib/core/navigation/navigation.utils';\nimport { navigateHomeWithFreshStart } from '~wildo-frontend-lib/core/navigation/navigation-clean-break.frontend.utils';\n\n// ================================\n// Props\n// ================================\n\ninterface FeatureRouteGuardProps {\n  /** For resource routes: the operation to check. */\n  operation?: FrontendResourceConfiguration_Operation;\n  /** For view routes: the view's required features config. */\n  requiredFeatures?: RequiredFeaturesConfig;\n  /** The page content to render when features are available */\n  children: React.ReactNode;\n}\n\n// ================================\n// Component\n// ================================\n\nexport const FeatureRouteGuard: React.FC<FeatureRouteGuardProps> = ({\n  operation,\n  requiredFeatures,\n  children,\n}) => {\n  const navigate = useNavigate();\n  const billingAction = useBillingAction();\n  const { emit } = useEventBus();\n  const navigationContext = React.useContext(NavigationContext);\n\n  const effectiveOperation = React.useMemo(() => {\n    if (operation) return operation;\n    if (requiredFeatures) {\n      return { requiredFeatures, operationIdentifier: 'VIEW_ACCESS' } as RequiredFeaturesCheckable as FrontendResourceConfiguration_Operation;\n    }\n    return null;\n  }, [operation, requiredFeatures]);\n\n  const availability = useOperationFeatureAvailability(effectiveOperation);\n\n  const navigateHome = React.useCallback(() => {\n    navigateHomeWithFreshStart({\n      emit,\n      routerNavigate: navigate,\n    });\n  }, [emit, navigate]);\n\n  // Dismiss handler: prefer runtime-owned back semantics, otherwise fall back to\n  // a full fresh-start redirect home.\n  const handleDismiss = React.useCallback(() => {\n    if (navigationContext) {\n      // The ONE go-back resolver (see `NavigationUtils.resolveGoBackTarget`): a hosted pane's URL is\n      // composed under its host here exactly as the controller's `goBack` composes it.\n      const target = NavigationUtils.resolveGoBackTarget({\n        currentBrowserUrl: NavigationUtils.buildBrowserUrl(window.location.pathname, window.location.search),\n        getZoneState: navigationContext.getZoneState,\n      });\n      if (target?.browserUrl) {\n        emit(FrontendEvents.NAVIGATION_POP, { zone: target.zone });\n        navigate(target.browserUrl, { replace: true });\n        return;\n      }\n    }\n\n    navigateHome();\n  }, [emit, navigate, navigateHome, navigationContext]);\n\n  // Computed (and the effect registered) BEFORE the early returns below:\n  // `availability` flips between undefined / available / unavailable across\n  // renders, so the hook count must not depend on it (rules of hooks).\n  const shouldHide =\n    availability !== undefined &&\n    !availability.isAvailable &&\n    availability.behavior === FeatureUnavailabilityBehavior.HIDE;\n\n  React.useEffect(() => {\n    if (!shouldHide) {\n      return;\n    }\n\n    navigateHome();\n  }, [navigateHome, shouldHide]);\n\n  // No requiredFeatures → no gating\n  if (!availability) return <>{children}</>;\n\n  // Features are available → render children\n  if (availability.isAvailable) return <>{children}</>;\n\n  // HIDE → navigate away silently\n  if (shouldHide) {\n    return null;\n  }\n\n  // All other behaviors → single reusable prompt (adapts per behavior)\n  return (\n    <FeatureUnavailablePrompt\n      behavior={availability.behavior}\n      missingFeatures={availability.missingFeatures}\n      limitInfo={availability.limitInfo}\n      upgradeOptionsCount={availability.upgradeOptions?.length}\n      customComponentRef={availability.customComponentRef}\n      onDismiss={handleDismiss}\n      onAction={() => billingAction(availability)}\n    />\n  );\n};\n"]}

package/dist/esm/core/features/FeaturesContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FeaturesContext.d.ts","sourceRoot":"","sources":["../../../../src/core/features/FeaturesContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAA2E,MAAM,OAAO,CAAC;AAChG,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAiC/B,MAAM,WAAW,mBAAmB;IAElC,+DAA+D;IAC/D,gBAAgB,EAAE,yBAAyB,CAAC;IAC5C,8CAA8C;IAC9C,wBAAwB,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAG1D,4EAA4E;IAC5E,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAGnD,iFAAiF;IACjF,oBAAoB,EAAE,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;IAGnE,mFAAmF;IACnF,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kGAAkG;IAClG,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACpD,yEAAyE;IACzE,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC3D,uFAAuF;IACvF,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAGhE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAGpB,wFAAwF;IACxF,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AASD,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAA6D,CAAC;AAMzI,UAAU,qBAAqB;IAC7B,mFAAmF;IACnF,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAAE,qBAAqB,GAAG,KAAK,CAAC,YAAY,CAoO9G"}
+{"version":3,"file":"FeaturesContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/features/FeaturesContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAuF,MAAM,OAAO,CAAC;AAC5G,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAoC/B,MAAM,WAAW,mBAAmB;IAElC,+DAA+D;IAC/D,gBAAgB,EAAE,yBAAyB,CAAC;IAC5C,8CAA8C;IAC9C,wBAAwB,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAG1D,4EAA4E;IAC5E,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAGnD,iFAAiF;IACjF,oBAAoB,EAAE,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;IAGnE,mFAAmF;IACnF,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kGAAkG;IAClG,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACpD,yEAAyE;IACzE,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC3D,uFAAuF;IACvF,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAGhE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAGpB,wFAAwF;IACxF,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AASD,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAA6D,CAAC;AAMzI,UAAU,qBAAqB;IAC7B,mFAAmF;IACnF,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAAE,qBAAqB,GAAG,KAAK,CAAC,YAAY,CA6P9G"}

package/dist/esm/core/features/FeaturesContext.js

@@ -16,9 +16,12 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * Stale usage data means the frontend might allow a click that the backend rejects
  * (which is acceptable — the error is caught and displayed).
  */
-import { createContext, useEffect, useState, useCallback, useMemo, useRef } from 'react';
-import { CoreWebSocketEvent, FEATURES_UNLIMITED, MAIN_API_BASE_PATH, } from '@wildo-ai/saas-models';
+import { createContext, useContext, useEffect, useState, useCallback, useMemo, useRef } from 'react';
+import { CoreResourceType, CoreWebSocketEvent, FEATURES_UNLIMITED, MAIN_API_BASE_PATH, } from '@wildo-ai/saas-models';
 import { useWebSocket } from '../../core/requests/websockets/useWebSocket.js';
+import { EventBusContext } from '../../core/events/EventBusContext.js';
+import { FrontendEvents } from '../../core/events/events.frontend.schemas.js';
+import { useResourceReachability } from '../../core/resources/useResourceRegistry.js';
 import { useAuthSession } from '../../core/security/useAuthSession.js';
 import { LoggerFrontendService } from '../../core/monitoring/logger.frontend.service.js';
 import { getManualCallsHttpClient } from '../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
@@ -58,11 +61,19 @@ export function FeaturesProvider({ featureConfiguration, children }) {
     const debounceTimerRef = useRef(null);
     // ── Auth — features are user-scoped, only fetch when authenticated ──
     const { isAuthenticated } = useAuthSession();
-    const authenticated = isAuthenticated();
+    // Fetch only when this consumer can REACH the features route: configured-and-authenticated is half
+    // the answer (#1069, the #268 rule). The resolved features are derived from the per-user ledger, so
+    // a consumer whose registry excludes it — the application-creation workbench — has no route to ask.
+    const featuresReachable = useResourceReachability(CoreResourceType.USER_FEATURES);
+    const authenticated = isAuthenticated() && featuresReachable;
     const appScope = useAppScopeSafe();
     const currentOrganizationId = appScope?.currentOrganizationId ?? null;
     // ── WebSocket ──
     const { on } = useWebSocket();
+    // ── Frontend event bus (preference changes) ──
+    // Read from the context directly: `useEventBus().bus` is typed as the React context object, not the bus.
+    const bus = useContext(EventBusContext);
+    const errorRef = useRef(null);
     // ── Build definitions map from configuration ──
     const featureDefinitions = useMemo(() => {
         const map = new Map();
@@ -135,6 +146,22 @@ export function FeaturesProvider({ featureConfiguration, children }) {
             mountedRef.current = false;
         };
     }, [authenticated, currentOrganizationId, fetchResolvedFeatures, clearResolvedFeatures]);
+    useEffect(() => {
+        errorRef.current = error;
+    }, [error]);
+    // ── Retry a FAILED fetch when the person's preferences change (#534) ──
+    // A declared service consent requirement refuses this read until the person grants it, so the fetch that ran at
+    // sign-in can fail — and while the organization stays the same nothing else would retry it, leaving features
+    // unresolved until a reload. A preferences change is how a consent decision reaches the rest of the application,
+    // so it retries a failed fetch. Only a failed one: a theme or language change does not invalidate a good set.
+    useEffect(() => {
+        if (!authenticated)
+            return;
+        return bus.on(FrontendEvents.USER_PREFERENCES_CHANGED, () => {
+            if (errorRef.current)
+                fetchResolvedFeatures();
+        });
+    }, [authenticated, bus, fetchResolvedFeatures]);
     // ── WebSocket invalidation (debounced to coalesce rapid events) ──
     useEffect(() => {
         if (!authenticated)

package/dist/esm/core/features/FeaturesContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"FeaturesContext.js","sourceRoot":"","sources":["../../../../src/core/features/FeaturesContext.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAc,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAChG,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAKnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E,mCAAmC;AACnC,SAAS;AACT,mCAAmC;AAEnC,MAAM,cAAc,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAChF,MAAM,QAAQ,GAAiE,cAAc,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAC7H,cAAc,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAE7D,mCAAmC;AACnC,YAAY;AACZ,mCAAmC;AAEnC,MAAM,gBAAgB,GAAG,GAAG,kBAAkB,oBAAoB,CAAC;AAEnE,mEAAmE;AACnE,MAAM,mBAAmB,GAAG;IAC1B,kBAAkB,CAAC,sBAAsB;IACzC,kBAAkB,CAAC,4BAA4B;IAC/C,kBAAkB,CAAC,uBAAuB;IAC1C,kBAAkB,CAAC,wBAAwB;CACnC,CAAC;AA8CX,4BAA4B;AAC5B,MAAM,cAAc,GAA8B;IAChD,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAmD,aAAa,CAAkC,SAAS,CAAC,CAAC;AAYzI,MAAM,UAAU,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAyB;IACxF,cAAc;IACd,MAAM,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,GAAG,QAAQ,CAAkC,IAAI,CAAC,CAAC;IAChH,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAU,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,MAAM,CAAU,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAU,IAAI,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,MAAM,CAAuC,IAAI,CAAC,CAAC;IAE5E,uEAAuE;IACvE,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,aAAa,GAAG,eAAe,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAEtE,kBAAkB;IAClB,MAAM,EAAE,EAAE,EAAE,GAAG,YAAY,EAAE,CAAC;IAE9B,iDAAiD;IACjD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,WAAW,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,QAAQ,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEvC,8BAA8B;IAC9B,MAAM,oBAAoB,GAAG,OAAO,CAClC,GAAG,EAAE,CAAC,oBAAoB,CAAC,oBAAoB,EAC/C,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAC5C,CAAC;IAEF,kCAAkC;IAClC,MAAM,gBAAgB,GAA8B,OAAO,CAAC,GAAG,EAAE;QAC/D,IAAI,CAAC,wBAAwB;YAAE,OAAO,cAAc,CAAC;QACrD,OAAO;YACL,QAAQ,EAAE,wBAAwB,CAAC,QAAQ;YAC3C,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,YAAY,EAAE,wBAAwB,CAAC,YAAY;SACpD,CAAC;IACJ,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAE/B,MAAM,qBAAqB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7C,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6CAA6C;IAC7C,MAAM,qBAAqB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACnD,IAAI,gBAAgB,CAAC,OAAO;YAAE,OAAO;QACrC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC;YACH,QAAQ,CAAC,yCAAyC,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,CAA2B,gBAAgB,CAAC,CAAC;YAElF,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,2BAA2B,CAAC,QAAQ,CAAC,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,QAAQ,CAAC,2BAA2B,EAAE;oBACpC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;oBACtC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM;oBAC/C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,0BAA0B,CAAC,CAAC,CAAC;gBAC7F,QAAQ,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,gBAAgB,CAAC,OAAO,GAAG,KAAK,CAAC;QACnC,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,8DAA8D;IAC9D,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,qBAAqB,EAAE,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,qBAAqB,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,GAAG,EAAE;YACV,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;QAC7B,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,aAAa,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEzF,oEAAoE;IACpE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa;YAAE,OAAO;QAE3B,MAAM,aAAa,GAAsB,EAAE,CAAC;QAE5C,MAAM,gBAAgB,GAAG,GAAG,EAAE;YAC5B,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC7B,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,gBAAgB,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC;gBAChC,qBAAqB,EAAE,CAAC;YAC1B,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBAC3B,QAAQ,CAAC,2DAA2D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjF,gBAAgB,EAAE,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,GAAG,EAAE;YACV,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC7B,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;gBAClC,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAE/C,8CAA8C;IAC9C,MAAM,mBAAmB,GAAG,OAAO,CACjC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EACxC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAC5B,CAAC;IAEF,8BAA8B;IAC9B,MAAM,gBAAgB,GAAG,WAAW,CAClC,CAAC,SAAiB,EAAW,EAAE;QAC7B,OAAO,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,EACD,CAAC,mBAAmB,CAAC,CACtB,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAClC,CAAC,SAAiB,EAAW,EAAE;QAC7B,0EAA0E;QAC1E,yEAAyE;QACzE,8CAA8C;QAC9C,2EAA2E;QAC3E,0BAA0B;QAC1B,8EAA8E;QAC9E,0EAA0E;QAC1E,2EAA2E;QAC3E,gFAAgF;QAChF,sEAAsE;QACtE,8EAA8E;QAC9E,sEAAsE;QACtE,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,OAAO,OAAO,CAAC,wBAAwB,EAAE,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC,EACD,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,CAChD,CAAC;IAEF,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,SAAiB,EAAsB,EAAE;QACxC,OAAO,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,EACD,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAC1B,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,CAAC,SAAiB,EAAsB,EAAE;QACxC,OAAO,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,EACD,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAChC,CAAC;IAEF,MAAM,oBAAoB,GAAG,WAAW,CACtC,CAAC,SAAiB,EAAsB,EAAE;QACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,KAAK,KAAK,kBAAkB;YAAE,OAAO,SAAS,CAAC,CAAC,sCAAsC;QAC1F,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;IACpC,CAAC,EACD,CAAC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,YAAY,CAAC,CACzD,CAAC;IAEF,sDAAsD;IACtD,MAAM,YAAY,GAAwB,OAAO,CAC/C,GAAG,EAAE,CAAC,CAAC;QACL,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,oBAAoB;QACpB,SAAS;QACT,KAAK;QACL,OAAO,EAAE,qBAAqB;KAC/B,CAAC,EACF;QACE,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,oBAAoB;QACpB,SAAS;QACT,KAAK;QACL,qBAAqB;KACtB,CACF,CAAC;IAEF,OAAO,CACL,KAAC,eAAe,CAAC,QAAQ,IAAC,KAAK,EAAE,YAAY,YAC1C,QAAQ,GACgB,CAC5B,CAAC;AACJ,CAAC","sourcesContent":["/**\n * FeaturesContext\n *\n * Central context for feature gating on the frontend.\n *\n * Responsibilities:\n * - Receives the merged FeatureConfiguration (core + custom) from app initialization\n * - Builds a definitions map for fast lookup\n * - Fetches resolved features from backend API: GET /api/v1/features/resolved\n * - Caches resolved features in context state\n * - Invalidates on WebSocket events (FEATURES_CHANGED, BILLING_STATUS_CHANGED, etc.)\n * - Exposes raw resolved features + definitions + unavailability policy\n *\n * Frontend limit checking is ADVISORY — backend gate is authoritative.\n * Stale usage data means the frontend might allow a click that the backend rejects\n * (which is acceptable — the error is caught and displayed).\n */\n\nimport React, { createContext, useEffect, useState, useCallback, useMemo, useRef } from 'react';\nimport {\n  CoreWebSocketEvent,\n  FEATURES_UNLIMITED,\n  MAIN_API_BASE_PATH,\n  type FeatureConfiguration,\n  type FeatureDefinition,\n  type ResolvedFeaturesResponse,\n  type ResolvedFeaturesWithUsage,\n} from '@wildo-ai/saas-models';\nimport { useWebSocket } from '~wildo-frontend-lib/core/requests/websockets/useWebSocket';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\n\n// ================================\n// Logger\n// ================================\n\nconst featuresLogger: LoggerFrontendService = LoggerFrontendService.getLogger();\nconst logDebug: (message: string, context?: Record<string, unknown>) => void = featuresLogger.debugByType('FeaturesContext');\nfeaturesLogger.setDebugTypeLogging('FeaturesContext', false);\n\n// ================================\n// Constants\n// ================================\n\nconst FEATURES_API_URL = `${MAIN_API_BASE_PATH}/features/resolved`;\n\n/** WebSocket events that trigger a refetch of resolved features */\nconst INVALIDATION_EVENTS = [\n  CoreWebSocketEvent.BILLING_STATUS_CHANGED,\n  CoreWebSocketEvent.BILLING_SUBSCRIPTION_UPDATED,\n  CoreWebSocketEvent.BILLING_ACCOUNT_CHANGED,\n  CoreWebSocketEvent.BILLING_FEATURES_UPDATED,\n] as const;\n\n// ================================\n// Context Type\n// ================================\n\nexport interface FeaturesContextType {\n  // ── Resolved features from backend ──\n  /** Raw resolved features with usage data (from backend API) */\n  resolvedFeatures: ResolvedFeaturesWithUsage;\n  /** Full response including upgrade options */\n  resolvedFeaturesResponse: ResolvedFeaturesResponse | null;\n\n  // ── Feature definitions (from configuration) ──\n  /** Feature definitions map (built from featureConfiguration.definitions) */\n  featureDefinitions: Map<string, FeatureDefinition>;\n\n  // ── Policy ──\n  /** The unavailability policy (from featureConfiguration.unavailabilityPolicy) */\n  unavailabilityPolicy: FeatureConfiguration['unavailabilityPolicy'];\n\n  // ── Convenience accessors ──\n  /** Check if a boolean feature is ENTITLED for the current scope (plan/profile). */\n  isFeatureEnabled: (featureId: string) => boolean;\n  /**\n   * Check if the app OFFERS a feature for the current scope — entitled now, or\n   * reachable via an upgrade/add-on. Plan-independent survival signal, distinct\n   * from `isFeatureEnabled` (entitlement). See the impl for the two-axis rationale.\n   */\n  isFeatureOffered: (featureId: string) => boolean;\n  /** Get a limit value (FEATURES_UNLIMITED = unlimited). Returns undefined if feature not found. */\n  getLimit: (featureId: string) => number | undefined;\n  /** Get current usage for a limit feature. undefined if no usage data. */\n  getCurrentUsage: (featureId: string) => number | undefined;\n  /** Get remaining capacity (limit - current). undefined if unlimited or no counting. */\n  getRemainingCapacity: (featureId: string) => number | undefined;\n\n  // ── State ──\n  isLoading: boolean;\n  error: Error | null;\n\n  // ── Actions ──\n  /** Force refetch of resolved features (e.g., after a mutation on a counted resource) */\n  refetch: () => void;\n}\n\n// ── Default empty state ──\nconst EMPTY_RESOLVED: ResolvedFeaturesWithUsage = {\n  features: [],\n  limits: {},\n  currentUsage: {},\n};\n\nexport const FeaturesContext: React.Context<FeaturesContextType | undefined> = createContext<FeaturesContextType | undefined>(undefined);\n\n// ================================\n// Provider\n// ================================\n\ninterface FeaturesProviderProps {\n  /** Merged FeatureConfiguration (core + custom) — passed from app initialization */\n  featureConfiguration: FeatureConfiguration;\n  children: React.ReactNode;\n}\n\nexport function FeaturesProvider({ featureConfiguration, children }: FeaturesProviderProps): React.ReactElement {\n  // ── State ──\n  const [resolvedFeaturesResponse, setResolvedFeaturesResponse] = useState<ResolvedFeaturesResponse | null>(null);\n  const [isLoading, setIsLoading] = useState<boolean>(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  // ── Refs for stable callbacks ──\n  const fetchInFlightRef = useRef<boolean>(false);\n  const mountedRef = useRef<boolean>(true);\n  const debounceTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);\n\n  // ── Auth — features are user-scoped, only fetch when authenticated ──\n  const { isAuthenticated } = useAuthSession();\n  const authenticated = isAuthenticated();\n  const appScope = useAppScopeSafe();\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n\n  // ── WebSocket ──\n  const { on } = useWebSocket();\n\n  // ── Build definitions map from configuration ──\n  const featureDefinitions = useMemo(() => {\n    const map = new Map<string, FeatureDefinition>();\n    for (const def of featureConfiguration.definitions) {\n      map.set(def.identifier, def);\n    }\n    logDebug('Feature definitions map built', { count: map.size });\n    return map;\n  }, [featureConfiguration.definitions]);\n\n  // ── Unavailability policy ──\n  const unavailabilityPolicy = useMemo(\n    () => featureConfiguration.unavailabilityPolicy,\n    [featureConfiguration.unavailabilityPolicy],\n  );\n\n  // ── Derived resolved features ──\n  const resolvedFeatures: ResolvedFeaturesWithUsage = useMemo(() => {\n    if (!resolvedFeaturesResponse) return EMPTY_RESOLVED;\n    return {\n      features: resolvedFeaturesResponse.features,\n      limits: resolvedFeaturesResponse.limits,\n      currentUsage: resolvedFeaturesResponse.currentUsage,\n    };\n  }, [resolvedFeaturesResponse]);\n\n  const clearResolvedFeatures = useCallback(() => {\n    setResolvedFeaturesResponse(null);\n    setError(null);\n    setIsLoading(false);\n  }, []);\n\n  // ── Fetch resolved features from backend ──\n  const fetchResolvedFeatures = useCallback(async () => {\n    if (fetchInFlightRef.current) return;\n    fetchInFlightRef.current = true;\n\n    try {\n      logDebug('Fetching resolved features from backend');\n      const httpClient = getManualCallsHttpClient();\n      const response = await httpClient.get<ResolvedFeaturesResponse>(FEATURES_API_URL);\n\n      if (mountedRef.current) {\n        setResolvedFeaturesResponse(response);\n        setError(null);\n        logDebug('Resolved features fetched', {\n          featureCount: response.features.length,\n          limitCount: Object.keys(response.limits).length,\n          usageCount: Object.keys(response.currentUsage).length,\n        });\n      }\n    } catch (err: any) {\n      if (mountedRef.current) {\n        setError(err instanceof Error ? err : new Error(err?.message ?? 'Failed to fetch features'));\n        logDebug('Failed to fetch resolved features', { error: err?.message });\n      }\n    } finally {\n      if (mountedRef.current) {\n        setIsLoading(false);\n      }\n      fetchInFlightRef.current = false;\n    }\n  }, []);\n\n  // ── Fetch when authenticated (and refetch on auth change) ──\n  useEffect(() => {\n    mountedRef.current = true;\n    if (authenticated) {\n      setIsLoading(true);\n      fetchResolvedFeatures();\n    } else {\n      clearResolvedFeatures();\n    }\n    return () => {\n      mountedRef.current = false;\n    };\n  }, [authenticated, currentOrganizationId, fetchResolvedFeatures, clearResolvedFeatures]);\n\n  // ── WebSocket invalidation (debounced to coalesce rapid events) ──\n  useEffect(() => {\n    if (!authenticated) return;\n\n    const unsubscribers: Array<() => void> = [];\n\n    const debouncedRefetch = () => {\n      if (debounceTimerRef.current) {\n        clearTimeout(debounceTimerRef.current);\n      }\n      debounceTimerRef.current = setTimeout(() => {\n        debounceTimerRef.current = null;\n        fetchResolvedFeatures();\n      }, 300);\n    };\n\n    for (const event of INVALIDATION_EVENTS) {\n      const unsub = on(event, () => {\n        logDebug('WebSocket invalidation event received, scheduling refetch', { event });\n        debouncedRefetch();\n      });\n      unsubscribers.push(unsub);\n    }\n\n    return () => {\n      if (debounceTimerRef.current) {\n        clearTimeout(debounceTimerRef.current);\n      }\n      for (const unsub of unsubscribers) {\n        unsub();\n      }\n    };\n  }, [authenticated, on, fetchResolvedFeatures]);\n\n  // ── Derived features set for O(1) lookups ──\n  const resolvedFeaturesSet = useMemo(\n    () => new Set(resolvedFeatures.features),\n    [resolvedFeatures.features],\n  );\n\n  // ── Convenience accessors ──\n  const isFeatureEnabled = useCallback(\n    (featureId: string): boolean => {\n      return resolvedFeaturesSet.has(featureId);\n    },\n    [resolvedFeaturesSet],\n  );\n\n  const isFeatureOffered = useCallback(\n    (featureId: string): boolean => {\n      // \"Offered\" = the app makes this feature available for the current scope,\n      // INDEPENDENT of whether the current plan/profile currently ENTITLES it:\n      //  - entitled now (in `resolvedFeatures`), OR\n      //  - not entitled but reachable via an upgrade/add-on the backend surfaced\n      //    in `upgradeOptions`.\n      // This is the plan-independent \"does this app offer feature X\" axis, distinct\n      // from `isFeatureEnabled` (the entitlement axis). Consumers gate SURVIVAL\n      // (should the surface exist at all) on `isFeatureOffered`, then render the\n      // entitlement state via {@link FeatureGate} (content vs upgrade/add-on prompt).\n      // Billing OFF → `upgradeOptions` is empty, so offered == entitled (no\n      // \"offered-but-locked\" state exists without a plan to upgrade to). Billing ON\n      // → `upgradeOptions` carries the sellable-but-not-yet-owned features.\n      if (resolvedFeaturesSet.has(featureId)) return true;\n      return Boolean(resolvedFeaturesResponse?.upgradeOptions?.[featureId]);\n    },\n    [resolvedFeaturesSet, resolvedFeaturesResponse],\n  );\n\n  const getLimit = useCallback(\n    (featureId: string): number | undefined => {\n      return resolvedFeatures.limits[featureId];\n    },\n    [resolvedFeatures.limits],\n  );\n\n  const getCurrentUsage = useCallback(\n    (featureId: string): number | undefined => {\n      return resolvedFeatures.currentUsage[featureId];\n    },\n    [resolvedFeatures.currentUsage],\n  );\n\n  const getRemainingCapacity = useCallback(\n    (featureId: string): number | undefined => {\n      const limit = resolvedFeatures.limits[featureId];\n      if (limit === undefined) return undefined;\n      if (limit === FEATURES_UNLIMITED) return undefined; // unlimited → no meaningful remaining\n      const usage = resolvedFeatures.currentUsage[featureId] ?? 0;\n      return Math.max(0, limit - usage);\n    },\n    [resolvedFeatures.limits, resolvedFeatures.currentUsage],\n  );\n\n  // ── Context value (memoized for stable reference) ──\n  const contextValue: FeaturesContextType = useMemo(\n    () => ({\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      isFeatureEnabled,\n      isFeatureOffered,\n      getLimit,\n      getCurrentUsage,\n      getRemainingCapacity,\n      isLoading,\n      error,\n      refetch: fetchResolvedFeatures,\n    }),\n    [\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      isFeatureEnabled,\n      isFeatureOffered,\n      getLimit,\n      getCurrentUsage,\n      getRemainingCapacity,\n      isLoading,\n      error,\n      fetchResolvedFeatures,\n    ],\n  );\n\n  return (\n    <FeaturesContext.Provider value={contextValue}>\n      {children}\n    </FeaturesContext.Provider>\n  );\n}\n\n// Note: useFeatures hook is in a separate file (useFeatures.ts) for React Fast Refresh compatibility.\n"]}
+{"version":3,"file":"FeaturesContext.js","sourceRoot":"","sources":["../../../../../src/core/features/FeaturesContext.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAc,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC5G,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAKnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E,mCAAmC;AACnC,SAAS;AACT,mCAAmC;AAEnC,MAAM,cAAc,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAChF,MAAM,QAAQ,GAAiE,cAAc,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAC7H,cAAc,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAE7D,mCAAmC;AACnC,YAAY;AACZ,mCAAmC;AAEnC,MAAM,gBAAgB,GAAG,GAAG,kBAAkB,oBAAoB,CAAC;AAEnE,mEAAmE;AACnE,MAAM,mBAAmB,GAAG;IAC1B,kBAAkB,CAAC,sBAAsB;IACzC,kBAAkB,CAAC,4BAA4B;IAC/C,kBAAkB,CAAC,uBAAuB;IAC1C,kBAAkB,CAAC,wBAAwB;CACnC,CAAC;AA8CX,4BAA4B;AAC5B,MAAM,cAAc,GAA8B;IAChD,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAmD,aAAa,CAAkC,SAAS,CAAC,CAAC;AAYzI,MAAM,UAAU,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAyB;IACxF,cAAc;IACd,MAAM,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,GAAG,QAAQ,CAAkC,IAAI,CAAC,CAAC;IAChH,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAU,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,MAAM,CAAU,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAU,IAAI,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,MAAM,CAAuC,IAAI,CAAC,CAAC;IAE5E,uEAAuE;IACvE,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,mGAAmG;IACnG,oGAAoG;IACpG,oGAAoG;IACpG,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,eAAe,EAAE,IAAI,iBAAiB,CAAC;IAC7D,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAEtE,kBAAkB;IAClB,MAAM,EAAE,EAAE,EAAE,GAAG,YAAY,EAAE,CAAC;IAE9B,gDAAgD;IAChD,yGAAyG;IACzG,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAe,IAAI,CAAC,CAAC;IAE5C,iDAAiD;IACjD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,WAAW,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,QAAQ,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEvC,8BAA8B;IAC9B,MAAM,oBAAoB,GAAG,OAAO,CAClC,GAAG,EAAE,CAAC,oBAAoB,CAAC,oBAAoB,EAC/C,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAC5C,CAAC;IAEF,kCAAkC;IAClC,MAAM,gBAAgB,GAA8B,OAAO,CAAC,GAAG,EAAE;QAC/D,IAAI,CAAC,wBAAwB;YAAE,OAAO,cAAc,CAAC;QACrD,OAAO;YACL,QAAQ,EAAE,wBAAwB,CAAC,QAAQ;YAC3C,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,YAAY,EAAE,wBAAwB,CAAC,YAAY;SACpD,CAAC;IACJ,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAE/B,MAAM,qBAAqB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7C,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6CAA6C;IAC7C,MAAM,qBAAqB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACnD,IAAI,gBAAgB,CAAC,OAAO;YAAE,OAAO;QACrC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC;YACH,QAAQ,CAAC,yCAAyC,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,CAA2B,gBAAgB,CAAC,CAAC;YAElF,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,2BAA2B,CAAC,QAAQ,CAAC,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,QAAQ,CAAC,2BAA2B,EAAE;oBACpC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;oBACtC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM;oBAC/C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,0BAA0B,CAAC,CAAC,CAAC;gBAC7F,QAAQ,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,gBAAgB,CAAC,OAAO,GAAG,KAAK,CAAC;QACnC,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,8DAA8D;IAC9D,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,qBAAqB,EAAE,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,qBAAqB,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,GAAG,EAAE;YACV,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;QAC7B,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,aAAa,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEzF,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC;IAC3B,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEZ,yEAAyE;IACzE,gHAAgH;IAChH,6GAA6G;IAC7G,iHAAiH;IACjH,8GAA8G;IAC9G,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3B,OAAO,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAC1D,IAAI,QAAQ,CAAC,OAAO;gBAAE,qBAAqB,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEhD,oEAAoE;IACpE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa;YAAE,OAAO;QAE3B,MAAM,aAAa,GAAsB,EAAE,CAAC;QAE5C,MAAM,gBAAgB,GAAG,GAAG,EAAE;YAC5B,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC7B,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,gBAAgB,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC;gBAChC,qBAAqB,EAAE,CAAC;YAC1B,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBAC3B,QAAQ,CAAC,2DAA2D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjF,gBAAgB,EAAE,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,GAAG,EAAE;YACV,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC7B,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;gBAClC,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAE/C,8CAA8C;IAC9C,MAAM,mBAAmB,GAAG,OAAO,CACjC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EACxC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAC5B,CAAC;IAEF,8BAA8B;IAC9B,MAAM,gBAAgB,GAAG,WAAW,CAClC,CAAC,SAAiB,EAAW,EAAE;QAC7B,OAAO,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,EACD,CAAC,mBAAmB,CAAC,CACtB,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAClC,CAAC,SAAiB,EAAW,EAAE;QAC7B,0EAA0E;QAC1E,yEAAyE;QACzE,8CAA8C;QAC9C,2EAA2E;QAC3E,0BAA0B;QAC1B,8EAA8E;QAC9E,0EAA0E;QAC1E,2EAA2E;QAC3E,gFAAgF;QAChF,sEAAsE;QACtE,8EAA8E;QAC9E,sEAAsE;QACtE,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,OAAO,OAAO,CAAC,wBAAwB,EAAE,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC,EACD,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,CAChD,CAAC;IAEF,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,SAAiB,EAAsB,EAAE;QACxC,OAAO,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,EACD,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAC1B,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,CAAC,SAAiB,EAAsB,EAAE;QACxC,OAAO,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,EACD,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAChC,CAAC;IAEF,MAAM,oBAAoB,GAAG,WAAW,CACtC,CAAC,SAAiB,EAAsB,EAAE;QACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,KAAK,KAAK,kBAAkB;YAAE,OAAO,SAAS,CAAC,CAAC,sCAAsC;QAC1F,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;IACpC,CAAC,EACD,CAAC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,YAAY,CAAC,CACzD,CAAC;IAEF,sDAAsD;IACtD,MAAM,YAAY,GAAwB,OAAO,CAC/C,GAAG,EAAE,CAAC,CAAC;QACL,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,oBAAoB;QACpB,SAAS;QACT,KAAK;QACL,OAAO,EAAE,qBAAqB;KAC/B,CAAC,EACF;QACE,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,oBAAoB;QACpB,SAAS;QACT,KAAK;QACL,qBAAqB;KACtB,CACF,CAAC;IAEF,OAAO,CACL,KAAC,eAAe,CAAC,QAAQ,IAAC,KAAK,EAAE,YAAY,YAC1C,QAAQ,GACgB,CAC5B,CAAC;AACJ,CAAC","sourcesContent":["/**\n * FeaturesContext\n *\n * Central context for feature gating on the frontend.\n *\n * Responsibilities:\n * - Receives the merged FeatureConfiguration (core + custom) from app initialization\n * - Builds a definitions map for fast lookup\n * - Fetches resolved features from backend API: GET /api/v1/features/resolved\n * - Caches resolved features in context state\n * - Invalidates on WebSocket events (FEATURES_CHANGED, BILLING_STATUS_CHANGED, etc.)\n * - Exposes raw resolved features + definitions + unavailability policy\n *\n * Frontend limit checking is ADVISORY — backend gate is authoritative.\n * Stale usage data means the frontend might allow a click that the backend rejects\n * (which is acceptable — the error is caught and displayed).\n */\n\nimport React, { createContext, useContext, useEffect, useState, useCallback, useMemo, useRef } from 'react';\nimport {\n  CoreResourceType,\n  CoreWebSocketEvent,\n  FEATURES_UNLIMITED,\n  MAIN_API_BASE_PATH,\n  type FeatureConfiguration,\n  type FeatureDefinition,\n  type ResolvedFeaturesResponse,\n  type ResolvedFeaturesWithUsage,\n} from '@wildo-ai/saas-models';\nimport { useWebSocket } from '~wildo-frontend-lib/core/requests/websockets/useWebSocket';\nimport { EventBusContext } from '~wildo-frontend-lib/core/events/EventBusContext';\nimport { FrontendEvents } from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport { useResourceReachability } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\n\n// ================================\n// Logger\n// ================================\n\nconst featuresLogger: LoggerFrontendService = LoggerFrontendService.getLogger();\nconst logDebug: (message: string, context?: Record<string, unknown>) => void = featuresLogger.debugByType('FeaturesContext');\nfeaturesLogger.setDebugTypeLogging('FeaturesContext', false);\n\n// ================================\n// Constants\n// ================================\n\nconst FEATURES_API_URL = `${MAIN_API_BASE_PATH}/features/resolved`;\n\n/** WebSocket events that trigger a refetch of resolved features */\nconst INVALIDATION_EVENTS = [\n  CoreWebSocketEvent.BILLING_STATUS_CHANGED,\n  CoreWebSocketEvent.BILLING_SUBSCRIPTION_UPDATED,\n  CoreWebSocketEvent.BILLING_ACCOUNT_CHANGED,\n  CoreWebSocketEvent.BILLING_FEATURES_UPDATED,\n] as const;\n\n// ================================\n// Context Type\n// ================================\n\nexport interface FeaturesContextType {\n  // ── Resolved features from backend ──\n  /** Raw resolved features with usage data (from backend API) */\n  resolvedFeatures: ResolvedFeaturesWithUsage;\n  /** Full response including upgrade options */\n  resolvedFeaturesResponse: ResolvedFeaturesResponse | null;\n\n  // ── Feature definitions (from configuration) ──\n  /** Feature definitions map (built from featureConfiguration.definitions) */\n  featureDefinitions: Map<string, FeatureDefinition>;\n\n  // ── Policy ──\n  /** The unavailability policy (from featureConfiguration.unavailabilityPolicy) */\n  unavailabilityPolicy: FeatureConfiguration['unavailabilityPolicy'];\n\n  // ── Convenience accessors ──\n  /** Check if a boolean feature is ENTITLED for the current scope (plan/profile). */\n  isFeatureEnabled: (featureId: string) => boolean;\n  /**\n   * Check if the app OFFERS a feature for the current scope — entitled now, or\n   * reachable via an upgrade/add-on. Plan-independent survival signal, distinct\n   * from `isFeatureEnabled` (entitlement). See the impl for the two-axis rationale.\n   */\n  isFeatureOffered: (featureId: string) => boolean;\n  /** Get a limit value (FEATURES_UNLIMITED = unlimited). Returns undefined if feature not found. */\n  getLimit: (featureId: string) => number | undefined;\n  /** Get current usage for a limit feature. undefined if no usage data. */\n  getCurrentUsage: (featureId: string) => number | undefined;\n  /** Get remaining capacity (limit - current). undefined if unlimited or no counting. */\n  getRemainingCapacity: (featureId: string) => number | undefined;\n\n  // ── State ──\n  isLoading: boolean;\n  error: Error | null;\n\n  // ── Actions ──\n  /** Force refetch of resolved features (e.g., after a mutation on a counted resource) */\n  refetch: () => void;\n}\n\n// ── Default empty state ──\nconst EMPTY_RESOLVED: ResolvedFeaturesWithUsage = {\n  features: [],\n  limits: {},\n  currentUsage: {},\n};\n\nexport const FeaturesContext: React.Context<FeaturesContextType | undefined> = createContext<FeaturesContextType | undefined>(undefined);\n\n// ================================\n// Provider\n// ================================\n\ninterface FeaturesProviderProps {\n  /** Merged FeatureConfiguration (core + custom) — passed from app initialization */\n  featureConfiguration: FeatureConfiguration;\n  children: React.ReactNode;\n}\n\nexport function FeaturesProvider({ featureConfiguration, children }: FeaturesProviderProps): React.ReactElement {\n  // ── State ──\n  const [resolvedFeaturesResponse, setResolvedFeaturesResponse] = useState<ResolvedFeaturesResponse | null>(null);\n  const [isLoading, setIsLoading] = useState<boolean>(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  // ── Refs for stable callbacks ──\n  const fetchInFlightRef = useRef<boolean>(false);\n  const mountedRef = useRef<boolean>(true);\n  const debounceTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);\n\n  // ── Auth — features are user-scoped, only fetch when authenticated ──\n  const { isAuthenticated } = useAuthSession();\n  // Fetch only when this consumer can REACH the features route: configured-and-authenticated is half\n  // the answer (#1069, the #268 rule). The resolved features are derived from the per-user ledger, so\n  // a consumer whose registry excludes it — the application-creation workbench — has no route to ask.\n  const featuresReachable = useResourceReachability(CoreResourceType.USER_FEATURES);\n  const authenticated = isAuthenticated() && featuresReachable;\n  const appScope = useAppScopeSafe();\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n\n  // ── WebSocket ──\n  const { on } = useWebSocket();\n\n  // ── Frontend event bus (preference changes) ──\n  // Read from the context directly: `useEventBus().bus` is typed as the React context object, not the bus.\n  const bus = useContext(EventBusContext);\n  const errorRef = useRef<Error | null>(null);\n\n  // ── Build definitions map from configuration ──\n  const featureDefinitions = useMemo(() => {\n    const map = new Map<string, FeatureDefinition>();\n    for (const def of featureConfiguration.definitions) {\n      map.set(def.identifier, def);\n    }\n    logDebug('Feature definitions map built', { count: map.size });\n    return map;\n  }, [featureConfiguration.definitions]);\n\n  // ── Unavailability policy ──\n  const unavailabilityPolicy = useMemo(\n    () => featureConfiguration.unavailabilityPolicy,\n    [featureConfiguration.unavailabilityPolicy],\n  );\n\n  // ── Derived resolved features ──\n  const resolvedFeatures: ResolvedFeaturesWithUsage = useMemo(() => {\n    if (!resolvedFeaturesResponse) return EMPTY_RESOLVED;\n    return {\n      features: resolvedFeaturesResponse.features,\n      limits: resolvedFeaturesResponse.limits,\n      currentUsage: resolvedFeaturesResponse.currentUsage,\n    };\n  }, [resolvedFeaturesResponse]);\n\n  const clearResolvedFeatures = useCallback(() => {\n    setResolvedFeaturesResponse(null);\n    setError(null);\n    setIsLoading(false);\n  }, []);\n\n  // ── Fetch resolved features from backend ──\n  const fetchResolvedFeatures = useCallback(async () => {\n    if (fetchInFlightRef.current) return;\n    fetchInFlightRef.current = true;\n\n    try {\n      logDebug('Fetching resolved features from backend');\n      const httpClient = getManualCallsHttpClient();\n      const response = await httpClient.get<ResolvedFeaturesResponse>(FEATURES_API_URL);\n\n      if (mountedRef.current) {\n        setResolvedFeaturesResponse(response);\n        setError(null);\n        logDebug('Resolved features fetched', {\n          featureCount: response.features.length,\n          limitCount: Object.keys(response.limits).length,\n          usageCount: Object.keys(response.currentUsage).length,\n        });\n      }\n    } catch (err: any) {\n      if (mountedRef.current) {\n        setError(err instanceof Error ? err : new Error(err?.message ?? 'Failed to fetch features'));\n        logDebug('Failed to fetch resolved features', { error: err?.message });\n      }\n    } finally {\n      if (mountedRef.current) {\n        setIsLoading(false);\n      }\n      fetchInFlightRef.current = false;\n    }\n  }, []);\n\n  // ── Fetch when authenticated (and refetch on auth change) ──\n  useEffect(() => {\n    mountedRef.current = true;\n    if (authenticated) {\n      setIsLoading(true);\n      fetchResolvedFeatures();\n    } else {\n      clearResolvedFeatures();\n    }\n    return () => {\n      mountedRef.current = false;\n    };\n  }, [authenticated, currentOrganizationId, fetchResolvedFeatures, clearResolvedFeatures]);\n\n  useEffect(() => {\n    errorRef.current = error;\n  }, [error]);\n\n  // ── Retry a FAILED fetch when the person's preferences change (#534) ──\n  // A declared service consent requirement refuses this read until the person grants it, so the fetch that ran at\n  // sign-in can fail — and while the organization stays the same nothing else would retry it, leaving features\n  // unresolved until a reload. A preferences change is how a consent decision reaches the rest of the application,\n  // so it retries a failed fetch. Only a failed one: a theme or language change does not invalidate a good set.\n  useEffect(() => {\n    if (!authenticated) return;\n    return bus.on(FrontendEvents.USER_PREFERENCES_CHANGED, () => {\n      if (errorRef.current) fetchResolvedFeatures();\n    });\n  }, [authenticated, bus, fetchResolvedFeatures]);\n\n  // ── WebSocket invalidation (debounced to coalesce rapid events) ──\n  useEffect(() => {\n    if (!authenticated) return;\n\n    const unsubscribers: Array<() => void> = [];\n\n    const debouncedRefetch = () => {\n      if (debounceTimerRef.current) {\n        clearTimeout(debounceTimerRef.current);\n      }\n      debounceTimerRef.current = setTimeout(() => {\n        debounceTimerRef.current = null;\n        fetchResolvedFeatures();\n      }, 300);\n    };\n\n    for (const event of INVALIDATION_EVENTS) {\n      const unsub = on(event, () => {\n        logDebug('WebSocket invalidation event received, scheduling refetch', { event });\n        debouncedRefetch();\n      });\n      unsubscribers.push(unsub);\n    }\n\n    return () => {\n      if (debounceTimerRef.current) {\n        clearTimeout(debounceTimerRef.current);\n      }\n      for (const unsub of unsubscribers) {\n        unsub();\n      }\n    };\n  }, [authenticated, on, fetchResolvedFeatures]);\n\n  // ── Derived features set for O(1) lookups ──\n  const resolvedFeaturesSet = useMemo(\n    () => new Set(resolvedFeatures.features),\n    [resolvedFeatures.features],\n  );\n\n  // ── Convenience accessors ──\n  const isFeatureEnabled = useCallback(\n    (featureId: string): boolean => {\n      return resolvedFeaturesSet.has(featureId);\n    },\n    [resolvedFeaturesSet],\n  );\n\n  const isFeatureOffered = useCallback(\n    (featureId: string): boolean => {\n      // \"Offered\" = the app makes this feature available for the current scope,\n      // INDEPENDENT of whether the current plan/profile currently ENTITLES it:\n      //  - entitled now (in `resolvedFeatures`), OR\n      //  - not entitled but reachable via an upgrade/add-on the backend surfaced\n      //    in `upgradeOptions`.\n      // This is the plan-independent \"does this app offer feature X\" axis, distinct\n      // from `isFeatureEnabled` (the entitlement axis). Consumers gate SURVIVAL\n      // (should the surface exist at all) on `isFeatureOffered`, then render the\n      // entitlement state via {@link FeatureGate} (content vs upgrade/add-on prompt).\n      // Billing OFF → `upgradeOptions` is empty, so offered == entitled (no\n      // \"offered-but-locked\" state exists without a plan to upgrade to). Billing ON\n      // → `upgradeOptions` carries the sellable-but-not-yet-owned features.\n      if (resolvedFeaturesSet.has(featureId)) return true;\n      return Boolean(resolvedFeaturesResponse?.upgradeOptions?.[featureId]);\n    },\n    [resolvedFeaturesSet, resolvedFeaturesResponse],\n  );\n\n  const getLimit = useCallback(\n    (featureId: string): number | undefined => {\n      return resolvedFeatures.limits[featureId];\n    },\n    [resolvedFeatures.limits],\n  );\n\n  const getCurrentUsage = useCallback(\n    (featureId: string): number | undefined => {\n      return resolvedFeatures.currentUsage[featureId];\n    },\n    [resolvedFeatures.currentUsage],\n  );\n\n  const getRemainingCapacity = useCallback(\n    (featureId: string): number | undefined => {\n      const limit = resolvedFeatures.limits[featureId];\n      if (limit === undefined) return undefined;\n      if (limit === FEATURES_UNLIMITED) return undefined; // unlimited → no meaningful remaining\n      const usage = resolvedFeatures.currentUsage[featureId] ?? 0;\n      return Math.max(0, limit - usage);\n    },\n    [resolvedFeatures.limits, resolvedFeatures.currentUsage],\n  );\n\n  // ── Context value (memoized for stable reference) ──\n  const contextValue: FeaturesContextType = useMemo(\n    () => ({\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      isFeatureEnabled,\n      isFeatureOffered,\n      getLimit,\n      getCurrentUsage,\n      getRemainingCapacity,\n      isLoading,\n      error,\n      refetch: fetchResolvedFeatures,\n    }),\n    [\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      isFeatureEnabled,\n      isFeatureOffered,\n      getLimit,\n      getCurrentUsage,\n      getRemainingCapacity,\n      isLoading,\n      error,\n      fetchResolvedFeatures,\n    ],\n  );\n\n  return (\n    <FeaturesContext.Provider value={contextValue}>\n      {children}\n    </FeaturesContext.Provider>\n  );\n}\n\n// Note: useFeatures hook is in a separate file (useFeatures.ts) for React Fast Refresh compatibility.\n"]}