npm - @wildo-ai/saas-frontend-lib - Versions diffs - 1.1.3 → 1.1.5 - Mend

@wildo-ai/saas-frontend-lib 1.1.3 → 1.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2521) hide show

package/dist/esm/components/settings/AppPage_ConnectedAccountsSettings.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_ConnectedAccountsSettings.js","sourceRoot":"","sources":["../../../../src/components/settings/AppPage_ConnectedAccountsSettings.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,0CAA0C,EAC1C,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,8CAA8C,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EACL,wBAAwB,GAEzB,MAAM,mFAAmF,CAAC;AAE3F,MAAM,SAAS,GAAG,qBAAqB,CAAC,uCAAuC,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,GAAqD,EAAE;IAC/E,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS;QAC/C,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS;KAC5D,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAClD,SAA6C,EAClB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC5D,QAAQ,CAAC,WAAW;OACjB,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CACpC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,sCAAsC,CAAC,IAAI,CAC5E,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,iCAAiC,GAAa,GAAG,EAAE;IAC9D,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjF;;;;;;OAMG;IACH,MAAM,UAAU,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC;IAErC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAA4B,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,yGAAyG;IACzG,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAyC,EAAE,CAAC,CAAC;IAEnF,kGAAkG;IAClG,gGAAgG;IAChG,MAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAE9C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,CAAC,KAAK,IAAI,EAAE;YACV,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,wBAAwB,EAAE,CAAC,wBAAwB,EAAE,CAAC;gBACxE,IAAI,CAAC,SAAS;oBAAE,YAAY,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAC;gBACpC,IAAI,CAAC,SAAS;oBAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAC9C,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,SAAS;oBAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,oCAAoC,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEtG,MAAM,aAAa,GAAG,WAAW,CAC/B,KAAK,EAAE,QAAiC,EAAE,EAAE;QAC1C,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC,uBAAuB,CAC/E,QAAQ,CAAC,WAAW,EACpB;gBACE,kFAAkF;gBAClF,wEAAwE;gBACxE,MAAM,EAAE;oBACN,UAAU,EAAE,sCAAsC,CAAC,IAAI;oBACvD,OAAO,EAAE,UAAW;oBACpB,UAAU,EAAE,0CAA0C,CAAC,OAAO;iBAC/D;gBACD,oBAAoB,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;aACpD,CACF,CAAC;YACF,2FAA2F;YAC3F,4FAA4F;YAC5F,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAC;QACtC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAC5B,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CACzB,CAAC;IAEF,oEAAoE;IACpE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,eAAK,SAAS,EAAC,2BAA2B,aAGxC,aAAI,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,WAAW,CAAC,GAAM,EAC5E,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,iBAAiB,CAAC,GAAQ,IACzE,EAIL,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAClC,KAAC,KAAK,cAAC,KAAC,gBAAgB,cAAE,CAAC,CAAC,iBAAiB,CAAC,GAAoB,GAAQ,CAC3E,EACA,OAAO,CAAC,eAAe,KAAK,UAAU,IAAI,CACzC,KAAC,KAAK,cAAC,KAAC,gBAAgB,cAAE,CAAC,CAAC,gBAAgB,CAAC,GAAoB,GAAQ,CAC1E,EACA,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,KAAK,UAAU,IAAI,CAClF,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAAC,KAAC,gBAAgB,cAAE,CAAC,CAAC,cAAc,CAAC,GAAoB,GAAQ,CAC9F,EAEA,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAAC,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GAAQ,CAClF,EAkBD,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,kBAAkB,CAAC,GAAQ,EAE7E,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,SAAS,CAAC,GAAQ,CACtE,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACnC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,OAAO,CAAC,GAAQ,CACpE,CAAC,CAAC,CAAC,CACF,cAAK,SAAS,EAAC,yBAAyB,YACrC,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CACnC,MAAC,IAAI,eACH,KAAC,UAAU,cAIT,KAAC,SAAS,cAAE,QAAQ,CAAC,WAAW,GAAa,GAClC,EACb,MAAC,WAAW,IAAC,SAAS,EAAC,yBAAyB,aAC7C,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAC9D,MAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,aAC5C,CAAC,CAAC,cAAc,CAAC,OAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAC1C,CACR,EAMA,QAAQ,CAAC,oBAAoB,KAAK,SAAS,IAAI,QAAQ,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,IAAI,CAC1F,eAAK,SAAS,EAAC,2BAA2B,aACxC,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,mBAAmB,CAAC,GAAQ,EACrE,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,uBAAuB,CAAC,GAAQ,EAClF,QAAQ,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;wCAChD,2EAA2E;wCAC3E,8EAA8E;wCAC9E,4EAA4E;wCAC5E,qEAAqE;wCACrE,KAAC,SAAS,kBAII,SAAS,EACrB,WAAW,EAAE,SAAS,EACtB,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EACvD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gDAC7C,GAAG,QAAQ;gDACX,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;oDACtB,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;oDACjC,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;iDAChC;6CACF,CAAC,CAAC,IAZE,SAAS,CAad,CACH,CAAC,IACE,CACP,EAED,cAAK,SAAS,EAAC,kBAAkB,YAC/B,KAAC,MAAM,IACL,IAAI,EAAE,UAAU,CAAC,EAAE,EACnB,OAAO,EAAE,sBAAsB,CAAC,OAAO;wCACvC,+EAA+E;wCAC/E,mBAAmB;wCACnB,QAAQ,EACN,OAAO,KAAK,QAAQ,CAAC,WAAW;4CAChC,8EAA8E;4CAC9E,kEAAkE;+CAC/D,UAAU,KAAK,IAAI;+CACnB,CAAC,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAChF,EAEH,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,YAErC,OAAO,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GACvE,GACL,IACM,KAlEL,QAAQ,CAAC,WAAW,CAmExB,CACR,CAAC,GACE,CACP,IACG,CACP,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/*\n AppPage_ConnectedAccountsSettings — the Settings Hub \"Connected accounts\" connect panel.\n \n A bespoke `ENGINE_PANEL`, and the reason is the shape of the act rather than the shape of the data.\n * The stored credentials ARE a resource, and the generic surface beside this one lists, inspects and\n * deletes them perfectly. What it cannot do is CONNECT: that is not a row somebody creates, it is a\n * flow that leaves the application, obtains consent at a vendor, and returns with a grant nobody\n * typed. A resource screen has no mechanism for an action of that shape, so until this existed the\n * whole outbound-authorization lane — controller, exchange, refresher, encrypted store, migrations —\n * had no surface that could begin it.\n \n ## Two reads, deliberately not one\n \n `listConnectableProviders()` answers what MAY be connected; the sibling resource list answers what\n * IS. Merging them would make \"you have connected nothing\" and \"there is nothing to connect\"\n * indistinguishable — and the first of those is the state every person starts in, which is precisely\n * when they need the second question answered.\n \n ## USER scope only, and that is not a simplification\n \n This panel lives under the person's own settings, so it offers only connections the provider admits\n * as USER-owned. A tenant's shared integration is the administrator's screen next door\n * (`provider-credentials`), and the two must never be merged: one is an individual's own account that\n * nobody else may see or spend, the other is a shared credential an administrator configures for\n * everyone. There is no cross-scope defaulting anywhere in this lane — a person with no credential of\n * their own is refused rather than quietly spending the organization's.\n \n ## Why it navigates instead of following a redirect\n \n The start leg answers with a URL. A 302 would be followed by this fetch, produce an opaque\n * cross-origin response, and render the vendor's consent screen into a response body nobody sees. So\n * the panel assigns `window.location.href` and the browser leaves — which is also why the OUTCOME\n * arrives back as a query parameter rather than as a promise resolving: the return trip is a fresh\n * page load from the vendor, not a continuation of this component.\n \n i18n follows the framework convention: `useI18n({ component })` requests this component's label\n * namespace, the panel gates rendering on `isReady` so it never flashes raw key paths, and a thin\n * `t(key)` reads each label. Copy is owned by the labelling pipeline (sibling `.labels.ts`) — no\n * hardcoded strings, and no humanized provider ref either: a provider identifier is an open\n * vocabulary with no authored label, so it is rendered verbatim rather than invented from its own\n * characters.\n \n assurance-control: WILDO.IDENTITY.DELEGATED_AUTHORIZATION — the surface on which a person\n * authorizes this application to act toward a named third party on their behalf.\n /\nimport React, { useCallback, useEffect, useMemo, useState } from 'react';\nimport { ButtonSize, FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { isWildoBackendError } from '@wildo-ai/saas-models';\nimport {\n ExternalProvider_Connection_DelegationMode,\n ExternalProvider_Connection_OwnerScope,\n} from '@wildo-ai/external-connectors-models';\nimport { Card, CardContent, CardHeader, CardTitle } from '~wildo-frontend-lib/components/sections/card';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { InputRoot } from '~wildo-frontend-lib/components/form/controls/input';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport {\n getManualCallsHttpClient,\n type ConnectableProviderView,\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\n\nconst COMPONENT = FrontendComponentType.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS;\n\n/\n The outcome the callback wrote into the URL on its way back.\n \n Read once, from `window.location`, because this component did not survive the round trip — the\n * browser left for the vendor and came back on a fresh page load. Read as a plain string rather than\n * branched into a closed vocabulary: the callback's `connected` value is a provider ref, which is an\n * open set.\n /\nconst readReturnOutcome = (): { connected?: string; connectionError?: string } => {\n if (typeof window === 'undefined') return {};\n const params = new URLSearchParams(window.location.search);\n return {\n connected: params.get('connected') ?? undefined,\n connectionError: params.get('connectionError') ?? undefined,\n };\n};\n\n/\n The providers THIS person may connect for themselves.\n \n Named and exported rather than inlined because it is the panel's one substantive claim, and both\n * halves of it are a way for a button to be DEAD on press:\n \n - a provider admitting only ORGANIZATION-owned connections belongs on the administrator's screen\n * next door; offering it here renders a Connect button that answers 403;\n * - a provider whose credential is pasted has no authorization flow to start, so its button would\n * have nowhere to navigate.\n \n The two filters look interchangeable and are not: dropping the first shows an action the person is\n * not entitled to, dropping the second shows an action that does not exist.\n /\nexport const selectPersonallyConnectableProviders = (\n providers: readonly ConnectableProviderView[],\n): ConnectableProviderView[] => providers.filter((provider) =>\n provider.connectable\n && provider.admissibleConnections.some(\n (shape) => shape.ownerScope === ExternalProvider_Connection_OwnerScope.USER,\n ));\n\nexport const AppPage_ConnectedAccountsSettings: React.FC = () => {\n const { tComponent, isReady } = useI18n({ component: COMPONENT });\n const { user } = useUserOrgs();\n\n const t = useCallback((key: string) => tComponent(COMPONENT, key), [tComponent]);\n\n /\n Whose account is being connected — always the caller's own.\n \n Sent explicitly because the target schema is the SAME one the call leg uses, and there an owner\n * genuinely varies. The backend does not trust this value: it re-checks `ownerId === callerId` and\n * refuses anything else, so supplying it is a statement of intent rather than a decision.\n /\n const selfUserId = user?._id ?? null;\n\n const [providers, setProviders] = useState<ConnectableProviderView[]>([]);\n const [loading, setLoading] = useState(true);\n const [busyRef, setBusyRef] = useState<string \| null>(null);\n const [error, setError] = useState<string \| null>(null);\n /* Answers to a provider's `{placeholders}`, per provider ref. Nothing is remembered across a reload. /\n const [answers, setAnswers] = useState<Record<string, Record<string, string>>>({});\n\n // Read once on mount. The outcome describes a journey that has already finished; re-reading it on\n // every render would make the banner reappear after the person dismissed the tab and came back.\n const [outcome] = useState(readReturnOutcome);\n\n useEffect(() => {\n let cancelled = false;\n (async () => {\n try {\n const res = await getManualCallsHttpClient().listConnectableProviders();\n if (!cancelled) setProviders(res.providers ?? []);\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n if (!cancelled) setError(t('errorGeneric'));\n } finally {\n if (!cancelled) setLoading(false);\n }\n })();\n return () => { cancelled = true; };\n }, [t]);\n\n const personalProviders = useMemo(() => selectPersonallyConnectableProviders(providers), [providers]);\n\n const handleConnect = useCallback(\n async (provider: ConnectableProviderView) => {\n setBusyRef(provider.providerRef);\n setError(null);\n try {\n const { authorizeUrl } = await getManualCallsHttpClient().startProviderConnection(\n provider.providerRef,\n {\n // The person connects their OWN account and nobody else's — the backend re-checks\n // exactly this, so a tampered owner id is refused rather than honoured.\n target: {\n ownerScope: ExternalProvider_Connection_OwnerScope.USER,\n ownerId: selfUserId!,\n delegation: ExternalProvider_Connection_DelegationMode.SERVICE,\n },\n connectionParameters: answers[provider.providerRef],\n },\n );\n // The browser leaves. No state is set afterwards on purpose: this component is about to be\n // unmounted by a navigation, and a `setState` here would be a React warning on the way out.\n window.location.href = authorizeUrl;\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n setError(t('errorGeneric'));\n setBusyRef(null);\n }\n },\n [answers, selfUserId, t],\n );\n\n // Gate on label readiness so the panel never flashes raw key paths.\n if (!isReady) return null;\n\n return (\n <div className=\"flex flex-col gap-section\">\n <div className=\"flex flex-col gap-item-xs\">\n {/ `h3`, not `h2`: the Settings Hub header owns the `h2` for this dialog, so a panel\n heading is one level below it. /}\n <h3 className=\"text-base font-semibold tracking-tight\">{t('pageTitle')}</h3>\n <Text className=\"text-sm text-muted-foreground\">{t('pageDescription')}</Text>\n </div>\n\n {/ The return leg's own report. `declined` is NOT destructive — somebody who pressed \"Deny\"\n made a decision, and dressing it in red tells them they did something wrong. /}\n {outcome.connected !== undefined && (\n <Alert><AlertDescription>{t('connectedNotice')}</AlertDescription></Alert>\n )}\n {outcome.connectionError === 'declined' && (\n <Alert><AlertDescription>{t('declinedNotice')}</AlertDescription></Alert>\n )}\n {outcome.connectionError !== undefined && outcome.connectionError !== 'declined' && (\n <Alert variant=\"destructive\"><AlertDescription>{t('failedNotice')}</AlertDescription></Alert>\n )}\n\n {error && (\n <Alert variant=\"destructive\"><AlertDescription>{error}</AlertDescription></Alert>\n )}\n\n {/\n * A standing note, not a banner: it is true all the time rather than the report of something\n * that just happened, so it does not use `Alert` and does not come and go.\n \n It exists because removing a connection deletes THIS application's copy of the\n * authorization and tells the provider nothing — the token the provider issued stays valid\n * there until it expires on its own, and a refresh token frequently never does. Somebody who\n * presses Disconnect reasonably concludes they have withdrawn access, and that conclusion is\n * not quite true. Saying so is the honest answer available today; revoking at the provider is\n * tracked separately, and no wording here should imply it already happens.\n \n It sits on THIS tab rather than beside the Disconnect button because the credential list is\n * an auto-generated resource surface with no slot for copy, and giving every settings\n * destination one for the sake of a single note would be a framework change out of all\n * proportion to it.\n /}\n <Text className=\"text-xs text-muted-foreground\">{t('disconnectNotice')}</Text>\n\n {loading ? (\n <Text className=\"text-sm text-muted-foreground\">{t('loading')}</Text>\n ) : personalProviders.length === 0 ? (\n <Text className=\"text-sm text-muted-foreground\">{t('empty')}</Text>\n ) : (\n <div className=\"flex flex-col gap-group\">\n {personalProviders.map((provider) => (\n <Card key={provider.providerRef}>\n <CardHeader>\n {/ The provider ref verbatim. There is no authored label for an open vocabulary of\n vendors, and deriving words from the identifier would invent display text no\n translator can reach. /}\n <CardTitle>{provider.providerRef}</CardTitle>\n </CardHeader>\n <CardContent className=\"flex flex-col gap-group\">\n {provider.scopes !== undefined && provider.scopes.length > 0 && (\n <Text className=\"text-xs text-muted-foreground\">\n {t('scopesPrefix')} {provider.scopes.join(', ')}\n </Text>\n )}\n\n {/ Which cloud, which directory, which region. Facts about the ACCOUNT being\n connected, known only to the person connecting it — and without them the\n vendor's own URL still contains a brace, so the flow would fail in the browser\n rather than at the point where the missing input could be asked for. */}\n {provider.connectionParameters !== undefined && provider.connectionParameters.length > 0 && (\n <div className=\"flex flex-col gap-item-xs\">\n <Text className=\"text-sm font-medium\">{t('parametersHeading')}</Text>\n <Text className=\"text-xs text-muted-foreground\">{t('parametersDescription')}</Text>\n {provider.connectionParameters.map((parameter) => (\n // `InputRoot`, not `Input`: the compound `Input` is the SCHEMA-DRIVEN form\n // control and requires a `name` and a Zod `schema`. These fields belong to no\n // resource — they are answers to a vendor's URL, held for the length of one\n // click — so inventing a schema for them would be inventing a model.\n <InputRoot\n key={parameter}\n // The parameter name IS the vendor's own token (`cloud`, `tenantId`), not\n // display copy — it is what the person must look up in their own account.\n aria-label={parameter}\n placeholder={parameter}\n value={answers[provider.providerRef]?.[parameter] ?? ''}\n onChange={(event) => setAnswers((previous) => ({\n ...previous,\n [provider.providerRef]: {\n ...previous[provider.providerRef],\n [parameter]: event.target.value,\n },\n }))}\n />\n ))}\n </div>\n )}\n\n <div className=\"flex justify-end\">\n <Button\n size={ButtonSize.SM}\n variant={ButtonVariants_Variant.DEFAULT}\n // Every placeholder must be answered: a half-answered set builds a URL that is\n // still not a URL.\n disabled={\n busyRef === provider.providerRef\n // No identity yet — the auth context has not settled. Pressing now would send\n // an empty owner and be refused for a reason nobody could act on.\n \|\| selfUserId === null\n \|\| (provider.connectionParameters ?? []).some(\n (parameter) => (answers[provider.providerRef]?.[parameter] ?? '').trim() === '',\n )\n }\n onClick={() => handleConnect(provider)}\n >\n {busyRef === provider.providerRef ? t('connectingButton') : t('connectButton')}\n </Button>\n </div>\n </CardContent>\n </Card>\n ))}\n </div>\n )}\n </div>\n );\n};\n"]}
1	+ {"version":3,"file":"AppPage_ConnectedAccountsSettings.js","sourceRoot":"","sources":["../../../../../src/components/settings/AppPage_ConnectedAccountsSettings.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAC/G,OAAO,EACL,0CAA0C,EAC1C,sCAAsC,EACtC,yCAAyC,EACzC,0CAA0C,EAC1C,+BAA+B,GAChC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,8CAA8C,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,+DAA+D,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,0DAA0D,CAAC;AAClF,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EACL,wBAAwB,GAEzB,MAAM,mFAAmF,CAAC;AAE3F,MAAM,SAAS,GAAG,qBAAqB,CAAC,uCAAuC,CAAC;AAEhF,sGAAsG;AACtG,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9C,gGAAgG;AAChG,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5C,wGAAwG;AACxG,MAAM,sBAAsB,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;AAC3C,mFAAmF;AACnF,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,SAA6C,EAC7C,UAAkD,EACvB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAChG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAC3C,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,QAAiC,EACjC,UAAkD,EACJ,EAAE;IAChD,+FAA+F;IAC/F,8FAA8F;IAC9F,iGAAiG;IACjG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACzF,MAAM,WAAW,GAAiD,EAAE,CAAC;IACrE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,SAAS;QAC9E,MAAM,UAAU,GAAG,KAAK,CAAC,UAAwD,CAAC;QAClF,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAKrC,EAKC,EAAE,CAAC,CAAC;IACJ,UAAU,EAAE,KAAK,CAAC,UAAU;IAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;IAC5B,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,sCAAsC,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QACnG,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC/B,GAAG,CAAC,+BAA+B,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI;QACzE,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,cAAc,EAAE;QAC3C,CAAC,CAAC,EAAE,CAAC;CACR,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,MAAyB,EACzB,OAAyC,EACzC,YAAoB,EACV,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IAClC,MAAM,WAAW,GAAG,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9G,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;AACzF,CAAC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,GAKxB,EAAE;IACF,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS;QAC/C,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS;QAC3D,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;QACvC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;KACtC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,GAAS,EAAE;IAC7C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;AACxE,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,iCAAiC,GAAsD,CAAC;AACnG,uFAAuF;AACvF,oDAAoD;AACpD,UAAU,GAAG,sCAAsC,CAAC,IAAI,GACzD,EAAE,EAAE;IACH,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,WAAW,EAGlD,CAAC;IAEF,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjF;;;;;OAKG;IACH,MAAM,OAAO,GAAG,UAAU,KAAK,sCAAsC,CAAC,IAAI;QACxE,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI;QACnB,CAAC,CAAC,qBAAqB,IAAI,IAAI,CAAC;IAElC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAA4B,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,+FAA+F;IAC/F,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IACrE,0GAA0G;IAC1G,MAAM,CAAC,+BAA+B,EAAE,kCAAkC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9F,wFAAwF;IACxF,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAyB,EAAE,CAAC,CAAC;IAEnE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAE1D;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,MAAM,UAAU,GAAG,MAAM,CAAwC,IAAI,CAAC,CAAC;IACvE,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QACtD,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAChC,2BAA2B,EAAE,CAAC;YAC9B,UAAU,CAAC,OAAO,GAAG,wBAAwB,EAAE,CAAC,0BAA0B,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,UAAU,CAAC,OAAO;aACf,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS;YAAE,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;aACvE,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;YACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,oFAAoF;YACpF,IAAI,CAAC,SAAS;gBAAE,UAAU,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,4FAA4F;QAC5F,+EAA+E;QAC/E,uDAAuD;IACzD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,CAAC,KAAK,IAAI,EAAE;YACV,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,wBAAwB,EAAE,CAAC,wBAAwB,EAAE,CAAC;gBACxE,IAAI,CAAC,SAAS;oBAAE,YAAY,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAC;gBACpC,IAAI,CAAC,SAAS;oBAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAC9C,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,SAAS;oBAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzG;;;;OAIG;IACH,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE;QACvC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,kBAAkB,CAAC;QACtD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QAC5F,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,kBAAkB,CAAC;QAC1C,OAAO,IAAI,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IACzF,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB;;;;;;;;;;OAUG;IACH,MAAM,iBAAiB,GAAG,OAAO,CAC/B,GAAG,EAAE,CAAC,SAAS;SACZ,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW,EAAE,CAAC,QAAQ,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;KACjF,CAAC,CAAC,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CACtB,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,KAAK,WAAW,CAAC,EACxE,CAAC,SAAS,EAAE,WAAW,CAAC,CACzB,CAAC;IAEF,+FAA+F;IAC/F,6FAA6F;IAC7F,MAAM,cAAc,GAAG,WAAW,CAAC,CAAC,GAAW,EAAE,EAAE;QACjD,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,UAAU,CAAC,EAAE,CAAC,CAAC;QACf,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACxB,kGAAkG;QAClG,qCAAqC;QACrC,kCAAkC,CAAC,KAAK,CAAC,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;;;;;OAMG;IACH,MAAM,WAAW,GAAG,OAAO,CACzB,GAAG,EAAE,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,6BAA6B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,EACzF,CAAC,UAAU,EAAE,QAAQ,CAAC,CACvB,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC;QACzC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAChB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC;IAEpE,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAEpE;;;OAGG;IACH,MAAM,0BAA0B,GAAG,UAAU,KAAK,SAAS;WACtD,0CAA0C,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAE5E;;;;;;;OAOG;IACH,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC3C,gGAAgG;QAChG,iGAAiG;QACjG,oFAAoF;QACpF,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7G,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,IAAI,KAAK,EAAE,CAAC;gBAC1F,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC,uBAAuB,CAC/E,QAAQ,CAAC,WAAW,EACpB;oBACE,MAAM;oBACN,oBAAoB,EAAE,OAAO;oBAC7B,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5G,CACF,CAAC;gBACF,6FAA6F;gBAC7F,+EAA+E;gBAC/E,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAC;gBACpC,OAAO;YACT,CAAC;YAED,6FAA6F;YAC7F,8FAA8F;YAC9F,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACvF,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAC7F,CAAC;YACF,8FAA8F;YAC9F,2FAA2F;YAC3F,iEAAiE;YACjE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,oBAAoB,GAAG,MAAM,CAAC,WAAW,CAC7C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAC1F,CAAC;YACF,MAAM,wBAAwB,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAC7E,MAAM;gBACN,MAAM;gBACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC;gBACnF,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5G,CAAC,CAAC;YAEH,yFAAyF;YACzF,uEAAuE;YACvE,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;YAC5C,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,0BAA0B,EAAE,+BAA+B,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAEpI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,eAAe,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnD,KAAK,EAAE,QAAQ,CAAC,WAAW;QAC3B,+FAA+F;QAC/F,8EAA8E;QAC9E,KAAK,EAAE,QAAQ,CAAC,WAAW;KAC5B,CAAC,CAAC,CAAC;IAEJ,MAAM,MAAM,GAAG,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,IAAI,KAAK,CAAC;IACtG,MAAM,OAAO,GAAG,QAAQ,EAAE,mBAAmB,IAAI,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,QAAQ,EAAE,oBAAoB,IAAI,EAAE,CAAC;IACxD,MAAM,gBAAgB,GAAG,QAAQ,EAAE,0BAA0B,IAAI,EAAE,CAAC;IACpE,MAAM,gBAAgB,GAAG,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAC;IAC1D,kGAAkG;IAClG,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;IACtC,uGAAuG;IACvG,sGAAsG;IACtG,MAAM,UAAU,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;SACjH,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,eAAK,SAAS,EAAC,2BAA2B,aAExC,aAAI,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,WAAW,CAAC,GAAM,EAC5E,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,iBAAiB,CAAC,GAAQ,IACzE,EAIL,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAClC,KAAC,KAAK,cAAC,KAAC,gBAAgB,cAAE,CAAC,CAAC,iBAAiB,CAAC,GAAoB,GAAQ,CAC3E,EACA,OAAO,CAAC,eAAe,KAAK,UAAU,IAAI,CACzC,KAAC,KAAK,cAAC,KAAC,gBAAgB,cAAE,CAAC,CAAC,gBAAgB,CAAC,GAAoB,GAAQ,CAC1E,EACA,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,KAAK,UAAU,IAAI,CAClF,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAAC,KAAC,gBAAgB,cAAE,CAAC,CAAC,cAAc,CAAC,GAAoB,GAAQ,CAC9F,EACA,WAAW,IAAI,KAAC,KAAK,cAAC,KAAC,gBAAgB,cAAE,WAAW,GAAoB,GAAQ,EAChF,KAAK,IAAI,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAAC,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GAAQ,EAU1F,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAC/B,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cACf,eAAK,SAAS,EAAC,2BAA2B,aACxC,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,0BAA0B,CAAC,GAAQ,EAC5E,KAAC,IAAI,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,8BAA8B,CAAC,GAAQ,EACpE,aAAI,SAAS,EAAC,gBAAgB,YAC3B,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAC9B,cAA0B,SAAS,EAAC,SAAS,aAC1C,GAAG,CAAC,WAAW,EACf,IAAI,EACJ,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAHpB,GAAG,CAAC,WAAW,CAInB,CACN,CAAC,GACC,IACD,GACW,GACb,CACT,EAED,MAAC,IAAI,eACH,KAAC,UAAU,cAAC,KAAC,SAAS,cAAE,CAAC,CAAC,uBAAuB,CAAC,GAAa,GAAa,EAC5E,MAAC,WAAW,IAAC,SAAS,EAAC,yBAAyB,aAC7C,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,SAAS,CAAC,GAAQ,CACtE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACjC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,OAAO,CAAC,GAAQ,CACpE,CAAC,CAAC,CAAC,CACF,8BAGE,KAAC,MAAM,IACL,IAAI,EAAC,aAAa,EAClB,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,CAAC,CAAC,mBAAmB,CAAC,EACnC,QAAQ,EAAE,cAAc,GACxB,EAED,QAAQ,KAAK,SAAS,IAAI,CACzB,eAAK,SAAS,EAAC,yBAAyB,aAIrC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CACrB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,MAAC,gBAAgB,eACd,CAAC,CAAC,qBAAqB,CAAC,EACxB,GAAG,EACH,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IACjC,GACb,CACT,EAEA,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAClC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,wBAAwB,CAAC,GAAQ,CACrF,EAQA,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CACzB,eAAK,SAAS,EAAC,2BAA2B,aACxC,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,mBAAmB,CAAC,GAAQ,EACrE,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,uBAAuB,CAAC,GAAQ,EACnF,KAAC,MAAM,IACL,IAAI,EAAC,YAAY,EACjB,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4DAClC,KAAK,EAAE,IAAI;4DACX,KAAK,EAAE,CAAC,CAAC,IAAI,KAAK,0CAA0C,CAAC,OAAO;gEAClE,CAAC,CAAC,yBAAyB;gEAC3B,CAAC,CAAC,sBAAsB,CAAC;yDAC5B,CAAC,CAAC,EACH,KAAK,EAAE,gBAAgB,EACvB,WAAW,EAAE,CAAC,CAAC,uBAAuB,CAAC,EACvC,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;4DACzB,mBAAmB,CAAC,IAAI,CAAC,CAAC;4DAC1B,yEAAyE;4DACzE,0CAA0C;4DAC1C,kCAAkC,CAAC,KAAK,CAAC,CAAC;wDAC5C,CAAC,GACD,IACE,CACP,EAeA,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAC9B,MAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,aAC5C,CAAC,CAAC,cAAc,CAAC,EACjB,GAAG,EACH,uBAAuB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IACtE,CACR,EAMA,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CACtE,eAAK,SAAS,EAAC,2BAA2B,aACxC,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,mBAAmB,CAAC,GAAQ,EACrE,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,uBAAuB,CAAC,GAAQ,IAC/E,CACP,EAEA;gDACC,yEAAyE;gDACzE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gDAC9J,uFAAuF;gDACvF,oFAAoF;gDACpF,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,SAA+B,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;6CACxJ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACf,eAAqB,SAAS,EAAC,2BAA2B,aACxD,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,KAAK,CAAC,KAAK,GAAQ,EACzD,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAClC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,KAAK,CAAC,WAAW,GAAQ,CAC3E,EAKA,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAChF,KAAC,MAAM,IACL,IAAI,EAAE,KAAK,CAAC,GAAG,EACf,MAAM,EAAE,2BAA2B,EACnC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,EACvE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAC/B,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAC5F,CACH,CAAC,CAAC,CAAC,CACF,8BAKG,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAC9B,MAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,aAC5C,CAAC,CAAC,8BAA8B,CAAC,EACjC,GAAG,EACH;wEACC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM;wEACvB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,KAAK,yCAAyC,CAAC,MAAM;4EACjI,CAAC,CAAC,YAAY,MAAM,EAAE;4EACtB,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;qEACnB,CAAC,IAAI,CAAC,IAAI,CAAC,IACP,CACR,EACD,KAAC,SAAS,kBACI,KAAK,CAAC,KAAK;gEACvB,8EAA8E;gEAC9E,yDAAyD;gEACzD,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EACxC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAC/B,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,GACjG,IACD,CACJ,KA5CO,KAAK,CAAC,GAAG,CA6Cb,CACP,CAAC,EAMD,0BAA0B,IAAI,CAC7B,eAAK,SAAS,EAAC,8BAA8B,aAC3C,KAAC,QAAQ,IACP,IAAI,EAAC,iCAAiC,EACtC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,+BAA+B,EACxC,eAAe,EAAE,kCAAkC,sBAClC,mCAAmC,GACpD,EACF,eAAK,SAAS,EAAC,2BAA2B,aACxC,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,oCAAoC,CAAC,GAAQ,EACtF,KAAC,IAAI,IAAC,EAAE,EAAC,mCAAmC,EAAC,SAAS,EAAC,+BAA+B,YACnF,CAAC,CAAC,gCAAgC,CAAC,GAC/B,IACH,IACF,CACP,EAED,cAAK,SAAS,EAAC,kBAAkB,YAC/B,KAAC,MAAM,IACL,IAAI,EAAE,UAAU,CAAC,EAAE,EACnB,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,QAAQ,EACN,IAAI;2DACD,OAAO,KAAK,IAAI;wDACnB,oFAAoF;wDACpF,gFAAgF;wDAChF,oEAAoE;2DACjE,CAAC,QAAQ,CAAC,qBAAqB,KAAK,SAAS;+DAC3C,QAAQ,CAAC,qBAAqB,KAAK,6BAA6B,CAAC,qBAAqB,CAAC;2DACzF,UAAU;2DACV,UAAU,KAAK,SAAS;2DACxB,CAAC,0BAA0B,IAAI,CAAC,+BAA+B,CAAC,EAErE,OAAO,EAAE,aAAa,YAErB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAC3C,GACL,IACF,CACP,IACA,CACJ,EAqBD,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,mBAAmB,CAAC,GAAQ,IACnE,IACT,IACH,CACP,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/*\n AppPage_ConnectedAccountsSettings — connecting a third-party account, at either owner scope.\n \n A bespoke `ENGINE_PANEL`, and the reason is the shape of the act rather than the shape of the data.\n * The stored credentials ARE a resource and the generic surface beside this one lists, inspects and\n * deletes them perfectly. What it cannot do is CONNECT: that is not a row somebody creates, it is a\n * flow that leaves the application, obtains consent at a vendor, and returns with a grant nobody\n * typed. A resource screen has no mechanism for an action of that shape.\n \n ## Nothing is typed by hand\n \n The provider comes from a SELECT over what the application declares; the credential fields come\n * from that provider's own secrets contract. Both were free text until this panel existed, which is\n * how somebody ends up typing `secretSlug` into a box and storing a grant in a slot nothing reads.\n \n So this panel is the ONLY place the application offers to add a credential. The list beside it hides\n * its resource CREATE (`actionVisibility: HIDDEN`, no empty-state call to action) — for a while it kept\n * the free-text form as a second door, and a slot the provider does not declare was refused with a\n * message naming the valid ones that the form then reduced to a generic toast (#1040).\n \n ## The flow follows the AUTH METHOD\n \n A connect surface cannot be one form. A vendor with an authorization flow gets the consent round\n * trip; a vendor whose credential is typed gets a form over the fields IT declares. One button for\n * both would be wrong for whichever it was not built around.\n \n ## A provider this deployment cannot connect is SHOWN, never hidden\n \n When the application has not registered with a vendor, the panel names the environment variables an\n * operator must set. Removing the provider would answer \"we do not support Asana\", which is false and\n * unfixable; naming `ASANA_CLIENT_ID` is true and is the thing that gets it set.\n \n ## One component, both scopes\n \n `ownerScope` decides whose account is being connected — a person's own, or the tenant's. The panel\n * is otherwise identical because the ACT is identical, and duplicating it would guarantee the two\n * drift. What must never be shared is the DATA: a person's connection and a tenant's shared\n * integration have different owners, different authorization and different readers, and the scope is\n * what keeps them apart at every call this panel makes.\n \n assurance-control: WILDO.IDENTITY.DELEGATED_AUTHORIZATION — the surface on which a principal\n * authorizes this application to act toward a named third party on their behalf.\n /\nimport React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { z } from 'zod';\nimport { ButtonSize, FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { isWildoBackendError, ProviderAuthMethod, ProviderConnectabilityBlocker } from '@wildo-ai/saas-models';\nimport {\n ExternalProvider_Connection_DelegationMode,\n ExternalProvider_Connection_OwnerScope,\n ProviderOAuth2EndpointPlaceholderPosition,\n connectionLendsMemberAccountToOrganization,\n connectionTargetNamesActingUser,\n} from '@wildo-ai/external-connectors-models';\nimport { Card, CardContent, CardHeader, CardTitle } from '~wildo-frontend-lib/components/sections/card';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { InputRoot } from '~wildo-frontend-lib/components/form/controls/input';\nimport { Checkbox } from '~wildo-frontend-lib/components/form/controls/boolean/checkbox';\nimport { Select } from '~wildo-frontend-lib/components/form/controls/enum/select';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport {\n getManualCallsHttpClient,\n type ConnectableProviderView,\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\n\nconst COMPONENT = FrontendComponentType.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS;\n\n/* The select's schema. A provider ref is an open identifier, so the control validates shape only. /\nconst PROVIDER_REF_SCHEMA = z.string().min(1);\n/* The chooser's own shape. Its OPTIONS are the provider's declared delegations, never this. /\nconst DELEGATION_SCHEMA = z.string().min(1);\n/* The organization-wide-use acknowledgement's shape: a statement a person either makes or does not. /\nconst ACKNOWLEDGEMENT_SCHEMA = z.boolean();\n/* A host chosen from the provider's declared values — never empty once chosen. /\nconst CONNECTION_PARAMETER_SCHEMA = z.string().min(1);\n\n/\n The providers connectable AT THIS SCOPE.\n \n Exported and named because it is the panel's one substantive claim: a provider admitting only\n * ORGANIZATION connections must never be offered on a person's screen, and vice versa — offering it\n * renders an action that answers 403 at the start leg.\n \n It deliberately does NOT filter on `connectable`. A provider this deployment cannot connect is\n * still offered, because the panel's answer for it is the missing configuration rather than silence.\n /\nexport const selectProvidersForScope = (\n providers: readonly ConnectableProviderView[],\n ownerScope: ExternalProvider_Connection_OwnerScope,\n): ConnectableProviderView[] => providers.filter((provider) => provider.admissibleConnections.some(\n (shape) => shape.ownerScope === ownerScope,\n));\n\n/\n ON WHOSE BEHALF this provider admits a connection at this scope — DERIVED, never assumed.\n \n The panel used to send `delegation: SERVICE` for every connect, at both scopes. That is one of the\n * five declared shapes, so it worked by coincidence for the providers that happen to declare it and\n * answered `409 CONNECTION_NOT_ADMISSIBLE` for the rest — the start leg checks the exact\n * (ownerScope, delegation) PAIR against what the provider admits, and a scope does not imply a\n * delegation.\n \n Measured across the generated catalogue on 2026-09-10, which is why this is a derivation rather\n * than a better constant: at ORGANIZATION scope, 75 vendors declare `USER` and 39 declare `SERVICE`.\n * A hard-coded `SERVICE` was therefore wrong for the larger half — `asana` among them, which is how\n * this surfaced: the provider was listed, the button rendered, and the vendor was never reached.\n \n The pair is the provider's own statement, so the panel reads it rather than the person supplying\n * it. Where a provider declares BOTH delegations for one scope — 27 vendors do, `box`, `dropbox`,\n * `gmail` and `google-calendar` among them — the declaration genuinely does not decide, and only\n * then is there a question to put to anybody. See `.claude/rules/derive-before-you-ask.md`.\n /\nexport const admissibleDelegationsForScope = (\n provider: ConnectableProviderView,\n ownerScope: ExternalProvider_Connection_OwnerScope,\n): ExternalProvider_Connection_DelegationMode[] => {\n // The view types both members as `string` — it is a wire record — so this is where they become\n // the vocabulary. NARROWED rather than cast: a delegation this build does not know is dropped\n // instead of being sent to the start leg, which would answer 409 for a value the panel invented.\n const known = new Set<string>(Object.values(ExternalProvider_Connection_DelegationMode));\n const delegations: ExternalProvider_Connection_DelegationMode[] = [];\n for (const shape of provider.admissibleConnections) {\n if (shape.ownerScope !== ownerScope \|\| !known.has(shape.delegation)) continue;\n const delegation = shape.delegation as ExternalProvider_Connection_DelegationMode;\n if (!delegations.includes(delegation)) delegations.push(delegation);\n }\n return delegations;\n};\n\n/\n The target the start leg is given — assembled here so the shape is TESTABLE, not inlined.\n \n `ExternalProvider_ConnectionTargetSchema` decides `actingForUserId`, and it refuses in BOTH\n * directions, through the one predicate `connectionTargetNamesActingUser`:\n \n - an APPLICATION × USER call MUST name the person the application's identity impersonates;\n * - every other shape MUST NOT. For ORGANIZATION × USER — what 75 of the harvested vendors declare,\n * `asana` among them — the person is whoever LINKS the account: one member lends their own vendor\n * account to the whole organization (decision on wildo-ai/wildo-ai#18), so the grant, not the\n * call, fixes who it acts as. A USER-owned connection already names its person in `ownerId`.\n \n History worth keeping: the panel once sent no `actingForUserId` at all, then (2026-09-10) sent the\n * signed-in person for every USER delegation. The second fixed the connect and hid that the spend\n * path refused the same shape, so a grant could be connected that nothing could use.\n \n `ownerId` is omitted for APPLICATION, which the schema likewise refuses — \"an application-owned\n * connection has exactly one instance, so an ownerId here names something that does not exist\".\n * The Settings Hub renders only USER and ORGANIZATION today, so that arm is unreachable from this\n * panel; it is handled because the function is the shape's one statement, and a caller that grows\n * the third scope should not have to rediscover the rule.\n /\nexport const buildConnectionTarget = (input: {\n ownerScope: ExternalProvider_Connection_OwnerScope;\n ownerId: string \| null;\n delegation: ExternalProvider_Connection_DelegationMode;\n signedInUserId: string \| null;\n}): {\n ownerScope: ExternalProvider_Connection_OwnerScope;\n delegation: ExternalProvider_Connection_DelegationMode;\n ownerId?: string;\n actingForUserId?: string;\n} => ({\n ownerScope: input.ownerScope,\n delegation: input.delegation,\n ...(input.ownerScope === ExternalProvider_Connection_OwnerScope.APPLICATION \|\| input.ownerId === null\n ? {}\n : { ownerId: input.ownerId }),\n ...(connectionTargetNamesActingUser(input) && input.signedInUserId !== null\n ? { actingForUserId: input.signedInUserId }\n : {}),\n});\n\n/\n The scopes a connection will REQUEST, as a person reads them before consenting (#991 review F12).\n \n A declared scope can carry a placeholder — Dataverse's `{hostUrl}/.default`, Outlook's `{accessMode}` —\n * and shown raw the list promised the literal brace. So a placeholder the person has ANSWERED below is\n * replaced by that answer, exactly as the start route resolves it, and one not yet answered is replaced\n * by the authored `pendingLabel`. Every other scope stays VERBATIM: it is the vendor's own token and the\n * string its consent screen is about to show, and no text is invented for it.\n /\nexport const describeRequestedScopes = (\n scopes: readonly string[],\n answers: Readonly<Record<string, string>>,\n pendingLabel: string,\n): string[] => scopes.map((scope) => {\n const placeholder = /^\\{([A-Za-z_][A-Za-z0-9_])\\}/.exec(scope);\n if (placeholder === null) return scope;\n const answer = (Object.hasOwn(answers, placeholder[1]!) ? answers[placeholder[1]!] : undefined)?.trim() ?? '';\n return answer === '' ? pendingLabel : `${answer}${scope.slice(placeholder[0].length)}`;\n});\n\n/*\n What the callback left in the URL on its way back. Read once — see the panel's mount.\n \n Two shapes arrive here, and they are different acts. `connectionError` is a FINISHED outcome the\n * callback already decided — a refusal at the vendor, or an attempt it could not recognise. `state`\n * and `code` are an approval that is NOT yet redeemed: the callback cannot redeem it, because a\n * vendor redirect carries no bearer token, so it hands the approval to this screen to finish.\n /\nconst readReturnOutcome = (): {\n connected?: string;\n connectionError?: string;\n state?: string;\n code?: string;\n} => {\n if (typeof window === 'undefined') return {};\n const params = new URLSearchParams(window.location.search);\n return {\n connected: params.get('connected') ?? undefined,\n connectionError: params.get('connectionError') ?? undefined,\n state: params.get('state') ?? undefined,\n code: params.get('code') ?? undefined,\n };\n};\n\n/\n Take the approval out of the address bar once it has been redeemed.\n \n `replaceState` rather than a navigation: the entry is REPLACED, so the code does not sit in\n * history for a back button to return to, and no re-render is triggered. It is single-use at the\n * backend regardless — this is about not leaving it lying in the URL, in a referrer, or in whatever\n * the browser syncs.\n /\nconst clearApprovalFromAddressBar = (): void => {\n if (typeof window === 'undefined') return;\n const url = new URL(window.location.href);\n url.searchParams.delete('state');\n url.searchParams.delete('code');\n window.history.replaceState(window.history.state, '', url.toString());\n};\n\nexport interface ConnectedAccountsSettingsProps {\n /\n WHOSE account is being connected.\n \n A prop rather than two components: the act is identical and duplicating it would guarantee the\n * two screens drift. The DATA never mixes — every call this panel makes carries the scope.\n /\n ownerScope: ExternalProvider_Connection_OwnerScope;\n}\n\nexport const AppPage_ConnectedAccountsSettings: React.FC<Partial<ConnectedAccountsSettingsProps>> = ({\n // Defaults to the person's own, which is the destination this panel was built for; the\n // organization surface passes the scope explicitly.\n ownerScope = ExternalProvider_Connection_OwnerScope.USER,\n}) => {\n const { tComponent, isReady } = useI18n({ component: COMPONENT });\n const { user, currentOrganizationId } = useUserOrgs() as {\n user?: { _id?: string };\n currentOrganizationId?: string \| null;\n };\n\n const t = useCallback((key: string) => tComponent(COMPONENT, key), [tComponent]);\n\n /\n WHOSE account, resolved for the scope in play.\n \n The backend re-checks it — a USER target must be the caller, an ORGANIZATION target goes through\n * the membership port — so supplying it is a statement of intent rather than a decision.\n /\n const ownerId = ownerScope === ExternalProvider_Connection_OwnerScope.USER\n ? user?._id ?? null\n : currentOrganizationId ?? null;\n\n const [providers, setProviders] = useState<ConnectableProviderView[]>([]);\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState<string \| null>(null);\n const [selectedRef, setSelectedRef] = useState<string>('');\n const [busy, setBusy] = useState(false);\n /* Set ONLY when the provider declares both delegations for this scope — otherwise derived. /\n const [delegationChoice, setDelegationChoice] = useState<string>('');\n /* The linking member's acknowledgement for a connection that lends their account to the organization. /\n const [organizationWideUseAcknowledged, setOrganizationWideUseAcknowledged] = useState(false);\n /* Answers keyed by the slug the PROVIDER declared — never by a name somebody typed. /\n const [answers, setAnswers] = useState<Record<string, string>>({});\n\n const [outcome, setOutcome] = useState(readReturnOutcome);\n\n /\n Redeem an approval the vendor just granted — the half the callback could not do.\n \n ## The in-flight request is CACHED, and both mounts subscribe to it\n \n React 18 mounts an effect, tears it down and mounts it again in StrictMode, and the attempt is\n * consumed atomically by the backend — so a second redemption answers\n * `CONNECTION_ATTEMPT_INVALID` and the `catch` would replace a connection that genuinely succeeded\n * with a failure notice. That is not hypothetical: on the first real consent, 2026-09-10, the\n * backend logged `[oauth2-connect] account connected` with `grantedScopes: [\"default\",\"identity\"]`\n * and stored the credential, and the browser then posted a second time and showed a 400.\n \n A once-guard alone does not fix it, and the way it fails is worse than the defect — the same\n * trap `TotpEnrollmentMethod.strict-mode-setup.test.tsx` records. A guard PLUS a cancel-on-cleanup\n * flag means mount 1 starts the request, its cleanup cancels the only subscriber, and the guard\n * then stops mount 2 from applying anything: the account connects and the panel says nothing at\n * all. Caching the PROMISE instead lets the remount re-subscribe, so there is one request and the\n * live mount is the one that renders its result.\n \n The address bar is cleared beside the request rather than after it, for its own reason: not\n * leaving an authorization code sitting in history behind a back button.\n /\n const redemption = useRef<Promise<{ connected: string }> \| null>(null);\n useEffect(() => {\n const { state, code } = outcome;\n if (state === undefined \|\| code === undefined) return;\n if (redemption.current === null) {\n clearApprovalFromAddressBar();\n redemption.current = getManualCallsHttpClient().completeProviderConnection({ state, code });\n }\n let cancelled = false;\n redemption.current\n .then(({ connected }) => { if (!cancelled) setOutcome({ connected }); })\n .catch((e: unknown) => {\n if (isWildoBackendError(e)) throw e;\n // The callback's own vocabulary, so the notices below stay one set rather than two.\n if (!cancelled) setOutcome({ connectionError: 'failed' });\n });\n return () => { cancelled = true; };\n // `outcome` is seeded once from the URL and the cached promise is what makes this issue one\n // request, so this deliberately does not re-run on the outcome it sets itself.\n // eslint-disable-next-line react-hooks/exhaustive-deps\n }, []);\n\n useEffect(() => {\n let cancelled = false;\n (async () => {\n try {\n const res = await getManualCallsHttpClient().listConnectableProviders();\n if (!cancelled) setProviders(res.providers ?? []);\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n if (!cancelled) setError(t('errorGeneric'));\n } finally {\n if (!cancelled) setLoading(false);\n }\n })();\n return () => { cancelled = true; };\n }, [t]);\n\n const available = useMemo(() => selectProvidersForScope(providers, ownerScope), [providers, ownerScope]);\n\n /\n * WHICH disconnect notice is true here. `undefined` from an older backend counts as \"cannot be\n * told\", which is the safe direction: it sends the person to check at the vendor, where the worst\n * outcome is a wasted look rather than a belief that access ended when it did not.\n /\n const disconnectNoticeRef = useMemo(() => {\n if (available.length === 0) return 'disconnectNotice';\n const told = available.filter((provider) => provider.revocationTellsVendor === true).length;\n if (told === 0) return 'disconnectNotice';\n return told === available.length ? 'disconnectRevokesNotice' : 'disconnectMixedNotice';\n }, [available]);\n\n /\n EVERY declared provider still missing part of its configuration — not just the selected one.\n \n A gap found by selecting a provider is a gap found one click at a time, and an operator asking\n * \"what is not configured\" would have to walk all eighteen. This answers it once.\n \n Deliberately NOT filtered by `ownerScope`. A missing environment variable is a fact about the\n * APPLICATION: `ASANA_CLIENT_ID` is absent for everybody, and hiding it on the person's screen\n * because Asana also admits a tenant connection would make the same gap visible or invisible\n * depending on which settings page somebody happened to open.\n /\n const configurationGaps = useMemo(\n () => providers\n .filter((provider) => (provider.missingRegistration ?? []).length > 0)\n .map((provider) => ({\n providerRef: provider.providerRef,\n envVarNames: (provider.missingRegistration ?? []).map((slot) => slot.envVarName),\n })),\n [providers],\n );\n const selected = useMemo(\n () => available.find((provider) => provider.providerRef === selectedRef),\n [available, selectedRef],\n );\n\n // Answers belong to the provider they were typed for. Clearing on change is what stops a value\n // meant for one vendor being submitted to another when somebody changes their mind mid-form.\n const chooseProvider = useCallback((ref: string) => {\n setSelectedRef(ref);\n setAnswers({});\n setDelegationChoice('');\n // An acknowledgement is about ONE provider's account; carrying it to the next would be consent to\n // something the person has not read.\n setOrganizationWideUseAcknowledged(false);\n setError(null);\n }, []);\n\n /\n What this provider admits at the scope in play, and the one the connect will carry.\n \n `delegationChoice` is only ever set by the chooser below, which renders solely when the provider\n * declares more than one. For the ordinary provider `delegations` has a single member and that\n * member IS the answer — nothing is asked and nothing is assumed.\n /\n const delegations = useMemo(\n () => (selected === undefined ? [] : admissibleDelegationsForScope(selected, ownerScope)),\n [ownerScope, selected],\n );\n const delegation = delegations.length === 1\n ? delegations[0]\n : delegations.find((candidate) => candidate === delegationChoice);\n\n const [savedNotice, setSavedNotice] = useState<string \| null>(null);\n\n /\n Whether connecting lends the signed-in member's OWN account to the whole organization — and so\n * owes their acknowledgement before the connect may run. Same predicate the connect leg enforces.\n /\n const lendsAccountToOrganization = delegation !== undefined\n && connectionLendsMemberAccountToOrganization({ ownerScope, delegation });\n\n /\n The two acts behind one button, branching on the provider's own auth method.\n \n An authorization flow ENDS THE PAGE — the browser leaves for the vendor and returns to a fresh\n * load. A typed credential ends in a stored row and the person stays here. Sharing a handler is\n * right because the person's intent is the same (\"connect this\"); sharing the OUTCOME would not be,\n * which is why only one of the branches navigates.\n /\n const handleConnect = useCallback(async () => {\n // `delegation` undefined means the provider declares several and none is chosen yet. The button\n // is disabled in that state; the guard is here because a disabled control is a courtesy and this\n // is the statement that a target is never assembled with a delegation nobody chose.\n if (selected === undefined \|\| ownerId === null \|\| delegation === undefined) return;\n setBusy(true);\n setError(null);\n setSavedNotice(null);\n const target = buildConnectionTarget({ ownerScope, ownerId, delegation, signedInUserId: user?._id ?? null });\n try {\n if (selected.authMethods?.includes(ProviderAuthMethod.OAUTH2_AUTHORIZATION_CODE) ?? false) {\n const { authorizeUrl } = await getManualCallsHttpClient().startProviderConnection(\n selected.providerRef,\n {\n target,\n connectionParameters: answers,\n ...(lendsAccountToOrganization ? { acknowledgesOrganizationWideUse: organizationWideUseAcknowledged } : {}),\n },\n );\n // The browser leaves. No state is set afterwards: this component is about to be unmounted by\n // a navigation, and a `setState` here would be a React warning on the way out.\n window.location.href = authorizeUrl;\n return;\n }\n\n // Only the values the provider DECLARED, so a stale answer left over from a field that is no\n // longer offered cannot be posted. The route re-checks this; sending less is still the honest\n // thing for the screen to do.\n const declared = new Set((selected.credentialFields ?? []).map((field) => field.slug));\n const values = Object.fromEntries(\n Object.entries(answers).filter(([slug, value]) => declared.has(slug) && value.trim() !== ''),\n );\n // The REST base URL's own answers, apart from the credential (#1097) — which subdomain, which\n // workspace host. Not secrets; the route admits each against the provider's host allowance\n // before anything is written, and refuses a missing one by name.\n const asked = new Set(selected.connectionParameters ?? []);\n const connectionParameters = Object.fromEntries(\n Object.entries(answers).filter(([name, value]) => asked.has(name) && value.trim() !== ''),\n );\n await getManualCallsHttpClient().storeProviderCredential(selected.providerRef, {\n target,\n values,\n ...(Object.keys(connectionParameters).length === 0 ? {} : { connectionParameters }),\n ...(lendsAccountToOrganization ? { acknowledgesOrganizationWideUse: organizationWideUseAcknowledged } : {}),\n });\n\n // The typed values are cleared once stored. They are secrets, and a form that keeps them\n // on screen after they have been sealed is holding them for no reason.\n setAnswers({});\n setSavedNotice(t('credentialStoredNotice'));\n setBusy(false);\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n setError(t('errorGeneric'));\n setBusy(false);\n }\n }, [answers, delegation, lendsAccountToOrganization, organizationWideUseAcknowledged, ownerId, ownerScope, selected, t, user?._id]);\n\n if (!isReady) return null;\n\n const providerOptions = available.map((provider) => ({\n value: provider.providerRef,\n // The ref VERBATIM. There is no authored label for an open vocabulary of vendors, and deriving\n // words from an identifier would invent display text no translator can reach.\n label: provider.providerRef,\n }));\n\n const oauth2 = selected?.authMethods?.includes(ProviderAuthMethod.OAUTH2_AUTHORIZATION_CODE) ?? false;\n const missing = selected?.missingRegistration ?? [];\n const parameters = selected?.connectionParameters ?? [];\n const parameterChoices = selected?.connectionParameterChoices ?? {};\n const credentialFields = selected?.credentialFields ?? [];\n /* What the authorization will REQUEST — rendered before the button, never only after consent. /\n const scopes = selected?.scopes ?? [];\n // Every asked connection parameter is required on BOTH paths (#1097): a base-URL placeholder is a hole\n // in the address every call dials, exactly as an endpoint placeholder is a hole in the vendor's URLs.\n const unanswered = [...parameters, ...(oauth2 ? [] : credentialFields.filter((f) => f.required).map((f) => f.slug))]\n .some((key) => (answers[key] ?? '').trim() === '');\n\n return (\n <div className=\"flex flex-col gap-section\">\n <div className=\"flex flex-col gap-item-xs\">\n {/ `h3`, not `h2`: the Settings Hub header owns the `h2` for this dialog. /}\n <h3 className=\"text-base font-semibold tracking-tight\">{t('pageTitle')}</h3>\n <Text className=\"text-sm text-muted-foreground\">{t('pageDescription')}</Text>\n </div>\n\n {/ The return leg's own report. `declined` is NOT destructive — somebody who pressed \"Deny\"\n made a decision, and dressing it in red tells them they did something wrong. /}\n {outcome.connected !== undefined && (\n <Alert><AlertDescription>{t('connectedNotice')}</AlertDescription></Alert>\n )}\n {outcome.connectionError === 'declined' && (\n <Alert><AlertDescription>{t('declinedNotice')}</AlertDescription></Alert>\n )}\n {outcome.connectionError !== undefined && outcome.connectionError !== 'declined' && (\n <Alert variant=\"destructive\"><AlertDescription>{t('failedNotice')}</AlertDescription></Alert>\n )}\n {savedNotice && <Alert><AlertDescription>{savedNotice}</AlertDescription></Alert>}\n {error && <Alert variant=\"destructive\"><AlertDescription>{error}</AlertDescription></Alert>}\n\n {/\n * The whole configuration's gaps, stated once and before anything else.\n \n Written rather than hidden, which is the decision this panel exists to make visible: a\n * provider whose registration is absent still appears in the chooser, and this says what an\n * operator must set for ANY of them to work. An environment variable's NAME is not a secret —\n * it is the only thing that makes the gap actionable.\n /}\n {configurationGaps.length > 0 && (\n <Alert variant=\"destructive\">\n <AlertDescription>\n <div className=\"flex flex-col gap-item-xs\">\n <Text className=\"text-sm font-medium\">{t('configurationGapsHeading')}</Text>\n <Text className=\"text-xs\">{t('configurationGapsDescription')}</Text>\n <ul className=\"list-disc pl-4\">\n {configurationGaps.map((gap) => (\n <li key={gap.providerRef} className=\"text-xs\">\n {gap.providerRef}\n {': '}\n {gap.envVarNames.join(', ')}\n </li>\n ))}\n </ul>\n </div>\n </AlertDescription>\n </Alert>\n )}\n\n <Card>\n <CardHeader><CardTitle>{t('chooseProviderHeading')}</CardTitle></CardHeader>\n <CardContent className=\"flex flex-col gap-group\">\n {loading ? (\n <Text className=\"text-sm text-muted-foreground\">{t('loading')}</Text>\n ) : providerOptions.length === 0 ? (\n <Text className=\"text-sm text-muted-foreground\">{t('empty')}</Text>\n ) : (\n <>\n {/ A SELECT over what the application declares. The whole point: a provider ref is\n never typed, so it can never be a ref that does not exist. /}\n <Select\n name=\"providerRef\"\n schema={PROVIDER_REF_SCHEMA}\n options={providerOptions}\n value={selectedRef}\n placeholder={t('choosePlaceholder')}\n onChange={chooseProvider}\n />\n\n {selected !== undefined && (\n <div className=\"flex flex-col gap-group\">\n {/ An operator's gap, named rather than hidden. `missingRegistration` carries the\n environment variables — which are not secrets, and are the only thing that makes\n this actionable. /}\n {missing.length > 0 && (\n <Alert variant=\"destructive\">\n <AlertDescription>\n {t('notRegisteredNotice')}\n {' '}\n {missing.map((slot) => slot.envVarName).join(', ')}\n </AlertDescription>\n </Alert>\n )}\n\n {!oauth2 && missing.length === 0 && (\n <Text className=\"text-xs text-muted-foreground\">{t('pastedCredentialNotice')}</Text>\n )}\n\n {/ ON WHOSE BEHALF — asked ONLY where the provider's own declaration leaves it open.\n One admitted delegation is an answer, not a question, so the ordinary provider\n renders nothing here and the connect carries what the vendor declared. The 27\n that admit both at one scope are a real choice between two different accounts —\n the tenant's own token, or a token minted for the person acting — and neither\n the panel nor a default may make it on their behalf. /}\n {delegations.length > 1 && (\n <div className=\"flex flex-col gap-item-xs\">\n <Text className=\"text-sm font-medium\">{t('delegationHeading')}</Text>\n <Text className=\"text-xs text-muted-foreground\">{t('delegationDescription')}</Text>\n <Select\n name=\"delegation\"\n schema={DELEGATION_SCHEMA}\n options={delegations.map((mode) => ({\n value: mode,\n label: t(mode === ExternalProvider_Connection_DelegationMode.SERVICE\n ? 'delegationServiceOption'\n : 'delegationUserOption'),\n }))}\n value={delegationChoice}\n placeholder={t('delegationPlaceholder')}\n onChange={(mode: string) => {\n setDelegationChoice(mode);\n // An acknowledgement given for one delegation is not consent to another:\n // switching away and back must ask again.\n setOrganizationWideUseAcknowledged(false);\n }}\n />\n </div>\n )}\n\n {/ WHAT THIS WILL ASK THE VENDOR FOR, before the button that asks for it.\n \n The scopes are the substance of the consent: `slack` requests THIRTY of them,\n * `gitlab` asks for `api`, and a panel that sends somebody to a vendor without\n * naming them is asking for a signature on an unread page. The catalogue has\n * carried `scopes` since the route was written and nothing rendered it — the\n * label existed too, authored and never wired.\n \n VERBATIM, and deliberately: a scope is the vendor's own token, it is the\n * string the vendor's own consent screen is about to show, and there is no\n * authored label for an open vocabulary spanning every provider. Prettifying\n * `channels:write.invites` into words would invent display text no translator\n * can reach and would no longer match what the vendor says next. /}\n {oauth2 && scopes.length > 0 && (\n <Text className=\"text-xs text-muted-foreground\">\n {t('scopesPrefix')}\n {' '}\n {describeRequestedScopes(scopes, answers, t('scopeChosenBelow')).join(', ')}\n </Text>\n )}\n\n {/ THE DECLARED FIELDS — for an authorization flow, the placeholders its own URLs\n carry; for a typed credential, the slots the provider's secrets contract names AND\n the placeholders its REST base URL carries (#1097). Either way the form knows what\n to ask for, and nobody types a slug. /}\n {(parameters.length > 0 \|\| (!oauth2 && credentialFields.length > 0)) && (\n <div className=\"flex flex-col gap-item-xs\">\n <Text className=\"text-sm font-medium\">{t('parametersHeading')}</Text>\n <Text className=\"text-xs text-muted-foreground\">{t('parametersDescription')}</Text>\n </div>\n )}\n\n {[\n // The credential itself, for a typed one: a secret, so a password field.\n ...(oauth2 ? [] : credentialFields.map((field) => ({ key: field.slug, label: field.slug, description: field.description, choices: undefined, secret: true }))),\n // The placeholders — the endpoints' for an authorization flow, the REST base URL's for\n // a typed credential (#1097): which cloud, which subdomain. Not secrets, and shown.\n ...parameters.map((name) => ({ key: name, label: name, description: undefined as string \| undefined, choices: parameterChoices[name], secret: false })),\n ].map((field) => (\n <div key={field.key} className=\"flex flex-col gap-item-xs\">\n <Text className=\"text-sm font-medium\">{field.label}</Text>\n {field.description !== undefined && (\n <Text className=\"text-xs text-muted-foreground\">{field.description}</Text>\n )}\n {/ A HOST the vendor is reached at is CHOSEN from what the provider declares, never\n typed (#623): the token endpoint receives the application's client secret, and\n the start route refuses anything else. The values are hostnames, rendered\n verbatim like provider refs — there is no authored label for a vendor's host. /}\n {field.choices !== undefined && (field.choices.hostSuffixes ?? []).length === 0 ? (\n <Select\n name={field.key}\n schema={CONNECTION_PARAMETER_SCHEMA}\n options={field.choices.values.map((value) => ({ value, label: value }))}\n value={answers[field.key] ?? ''}\n onChange={(value: string) => setAnswers((previous) => ({ ...previous, [field.key]: value }))}\n />\n ) : (\n <>\n {/ A vendor with per-customer hosts under a domain it controls (Salesforce My\n Domain) still takes a typed host — but the screen says which ones will be\n accepted before the route has to refuse. Under an ORIGIN (a Dataverse\n environment URL, #991) the accepted spelling carries the scheme. /}\n {field.choices !== undefined && (\n <Text className=\"text-xs text-muted-foreground\">\n {t('parameterAdmittedHostsPrefix')}\n {' '}\n {[\n ...field.choices.values,\n ...(field.choices.hostSuffixes ?? []).map((suffix) => (field.choices?.position === ProviderOAuth2EndpointPlaceholderPosition.ORIGIN\n ? `https://${suffix}`\n : `${suffix}`)),\n ].join(', ')}\n </Text>\n )}\n <InputRoot\n aria-label={field.label}\n // A credential is typed into a password field; a connection parameter — which\n // cloud, which directory — is not a secret and is shown.\n type={field.secret ? 'password' : 'text'}\n value={answers[field.key] ?? ''}\n onChange={(event) => setAnswers((previous) => ({ ...previous, [field.key]: event.target.value }))}\n />\n </>\n )}\n </div>\n ))}\n\n {/ WHOSE ACCOUNT THE ORGANIZATION WILL USE — asked only when connecting lends the\n person's own vendor account to every member (ORGANIZATION × USER). The person is\n trusting their colleagues' activity with it; this is where they say so, and the\n connect leg refuses a link that did not (decision on wildo-ai/wildo-ai#18). /}\n {lendsAccountToOrganization && (\n <div className=\"flex items-start gap-item-xs\">\n <Checkbox\n name=\"organizationWideUseAcknowledged\"\n schema={ACKNOWLEDGEMENT_SCHEMA}\n checked={organizationWideUseAcknowledged}\n onCheckedChange={setOrganizationWideUseAcknowledged}\n aria-describedby=\"organization-wide-use-description\"\n />\n <div className=\"flex flex-col gap-item-xs\">\n <Text className=\"text-sm font-medium\">{t('organizationWideUseAcknowledgement')}</Text>\n <Text id=\"organization-wide-use-description\" className=\"text-xs text-muted-foreground\">\n {t('organizationWideUseDescription')}\n </Text>\n </div>\n </div>\n )}\n\n <div className=\"flex justify-end\">\n <Button\n size={ButtonSize.SM}\n variant={ButtonVariants_Variant.DEFAULT}\n disabled={\n busy\n \|\| ownerId === null\n // Any blocker except NO_AUTHORIZATION_FLOW, which is the typed-credential path this\n // same button serves. An endpoint the provider cannot resolve (#623) refuses on\n // press whatever is typed, so the button must not invite the press.\n \|\| (selected.notConnectableBecause !== undefined\n && selected.notConnectableBecause !== ProviderConnectabilityBlocker.NO_AUTHORIZATION_FLOW)\n \|\| unanswered\n \|\| delegation === undefined\n \|\| (lendsAccountToOrganization && !organizationWideUseAcknowledged)\n }\n onClick={handleConnect}\n >\n {busy ? t('connectingButton') : t('connectButton')}\n </Button>\n </div>\n </div>\n )}\n </>\n )}\n\n {/\n * A standing note, not a banner: it is true all the time rather than the report of\n * something that just happened.\n \n ## Three notices, because the answer is PER VENDOR (#545)\n \n This said one thing for everybody — \"removing a connection tells the provider nothing\" —\n * and that was true of every vendor until `google-drive` and `asana` declared an RFC 7009\n * revocation endpoint. RFC 7009 is the only revocation standard and the vendors do not\n * agree with it (Slack's `auth.revoke` is a Web API method, GitHub's is a `DELETE` with\n * basic auth), so no single sentence can be true of the whole list.\n \n A notice that is false for SOME providers is worse than none: it sends somebody to\n * revoke by hand at a vendor that has already been told, and teaches them the reassuring\n * sentence is not to be believed.\n \n Computed over the providers on THIS screen rather than over the catalogue: what the\n * person needs to know is about the accounts in front of them.\n */}\n <Text className=\"text-xs text-muted-foreground\">{t(disconnectNoticeRef)}</Text>\n </CardContent>\n </Card>\n </div>\n );\n};\n"]}

package/dist/esm/components/settings/AppPage_ConnectedAccountsSettings.labels.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_ConnectedAccountsSettings.labels.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/settings/AppPage_ConnectedAccountsSettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;~~AAO7C~~,eAAO,MAAM,yCAAyC,EAAE,mBAAmB,~~EAiB1E~~,CAAC"}
1	+ {"version":3,"file":"AppPage_ConnectedAccountsSettings.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/settings/AppPage_ConnectedAccountsSettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AA2B7C,eAAO,MAAM,yCAAyC,EAAE,mBAAmB,EAiC1E,CAAC"}

package/dist/esm/components/settings/AppPage_ConnectedAccountsSettings.labels.js CHANGED Viewed

@@ -4,23 +4,59 @@ import { FrontendComponentType, LabelKind, registerComponentLabels, } from '@wil
 // `components.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS.*` bundle; NOT imported at runtime, so it
 // never ships in the browser bundle. Keep in lock-step with the keys the component reads via
 // `tComponent(APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS, ...)`.
+//
+// LOCK-STEP DRIFTS SILENTLY IN BOTH DIRECTIONS, and on 2026-09-10 it had drifted both ways at once.
+// Nothing mechanical compares this array to the component's `t('...')` call sites, and neither
+// failure raises anything: a key the component reads and this array omits renders as its RAW KEY
+// PATH in the browser — visible only to somebody looking at the panel — while a key declared here
+// and never read costs a generated entry plus a translation round trip in every locale, and tells
+// the next reader the panel renders a message it does not. Five of each had accumulated before the
+// panel was first rendered. When you add or remove a `t('...')` call, edit this array in the same
+// change, and regenerate with
+// `wildo generate labels --units component:APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS --force`
+// followed by the matching `wildo generate translate`.
+//
+// `errorNotAdmissible` and `errorForbidden` were declared here and REMOVED on 2026-09-10 rather
+// than wired. The start route really does answer 409 CONNECTION_NOT_ADMISSIBLE and 403 FORBIDDEN
+// with those two distinct meanings — but this panel's catch does `if (isWildoBackendError(e)) throw
+// e`, so a structured backend refusal propagates to the global error handler and no branch in this
+// component can ever render either message. Reintroducing them is a real option and it is a
+// DECISION, not a cleanup: it means this panel stops re-throwing those two statuses and reports
+// them itself, which departs from the repository-wide convention that a `WildoBackendError`
+// belongs to the global handler. Declare them again in the same change that makes them reachable.
 export const AppLayoutsConnectedAccountsSettingsLabels = [
     { ref: 'pageTitle', kind: LabelKind.HEADING, purpose: 'Heading for the panel where a person connects their own third-party accounts' },
     { ref: 'pageDescription', kind: LabelKind.DESCRIPTION, purpose: 'Sub-heading explaining that connecting an account lets this application act as that account on the person’s behalf, and that they can disconnect at any time' },
     { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Shown while the list of connectable providers is being loaded' },
     { ref: 'empty', kind: LabelKind.MESSAGE, purpose: 'Shown when this application declares no provider a person may connect individually' },
+    { ref: 'chooseProviderHeading', kind: LabelKind.HEADING, purpose: 'Heading above the control where somebody picks which third-party provider to connect' },
+    { ref: 'choosePlaceholder', kind: LabelKind.LABEL, purpose: 'Placeholder shown in the provider chooser before anything is selected, inviting the person to pick a provider' },
     { ref: 'connectButton', kind: LabelKind.BUTTON, purpose: 'Button that starts connecting the named third-party account, sending the person to that vendor to grant consent' },
     { ref: 'connectingButton', kind: LabelKind.BUTTON, purpose: 'Button caption while the authorization URL is being obtained, before the browser leaves for the vendor' },
+    { ref: 'delegationHeading', kind: LabelKind.HEADING, purpose: 'Heading above the control asking on whose behalf the connection will act — shown only for a provider that admits both a service identity and a user-delegated one at this scope' },
+    { ref: 'delegationDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that this provider can be connected either as the tenant itself or as the person acting, that these are two different accounts at the vendor, and that nobody may choose on the person’s behalf' },
+    { ref: 'delegationPlaceholder', kind: LabelKind.LABEL, purpose: 'Placeholder in the on-whose-behalf chooser before either delegation is picked' },
+    { ref: 'delegationServiceOption', kind: LabelKind.LABEL, purpose: 'Option naming the connection that acts as the organization or application itself, using a shared identity rather than any individual’s account' },
+    { ref: 'delegationUserOption', kind: LabelKind.LABEL, purpose: 'Option naming the connection that acts as the individual person authorizing it, so anything it does at the vendor is attributed to them' },
+    { ref: 'organizationWideUseAcknowledgement', kind: LabelKind.LABEL, purpose: 'Checkbox label a member ticks before linking THEIR OWN vendor account for the whole organization, stating that every member of the organization will be able to act through that account' },
+    { ref: 'organizationWideUseDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains beneath that checkbox that anything a colleague does through this connection is attributed to the linking person at the vendor, that the linking person is trusting their colleagues with it, and that the audit trail records whose account was used' },
     { ref: 'parametersHeading', kind: LabelKind.HEADING, purpose: 'Heading above the inputs a person must answer before connecting, such as which cloud or which directory their account lives in' },
     { ref: 'parametersDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that these answers are facts about the account being connected and that the vendor’s own addresses cannot be built without them' },
+    { ref: 'parameterAdmittedHostsPrefix', kind: LabelKind.LABEL, purpose: 'Prefix before the list of vendor hostnames a connection parameter accepts, shown above a typed host field so the person knows which addresses will be allowed (e.g. "Accepted:")' },
     { ref: 'scopesPrefix', kind: LabelKind.LABEL, purpose: 'Prefix before the list of permissions the connection will ask the vendor for (e.g. "Requests:")' },
+    { ref: 'scopeChosenBelow', kind: LabelKind.LABEL, purpose: 'Stands in, inside the list of requested permissions, for a permission that depends on an answer the person has not given yet in the fields below (e.g. "(depends on your answer below)")' },
+    { ref: 'credentialStoredNotice', kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after a typed credential has been saved for a provider that has no authorization flow' },
     { ref: 'connectedNotice', kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after returning from a vendor where the account was connected successfully' },
     { ref: 'declinedNotice', kind: LabelKind.MESSAGE, purpose: 'Shown after returning from a vendor where the person chose not to grant access — a decision, not an error' },
     { ref: 'failedNotice', kind: LabelKind.MESSAGE, purpose: 'Shown after returning from a vendor when the connection attempt could not be completed and should be started again' },
     { ref: 'errorGeneric', kind: LabelKind.MESSAGE, purpose: 'Generic error shown when listing connectable providers or starting a connection fails' },
-    { ref: 'errorNotAdmissible', kind: LabelKind.MESSAGE, purpose: 'Shown when this provider does not admit a personally-owned connection, so nobody may connect it individually' },
-    { ref: 'errorForbidden', kind: LabelKind.MESSAGE, purpose: 'Shown when the person is not allowed to connect an account on behalf of the named owner' },
-    { ref: 'disconnectNotice', kind: LabelKind.MESSAGE, purpose: 'Standing note explaining that removing a connection deletes this application\u2019s copy of the authorization but does not withdraw it at the provider, and that the person should also remove the application in the provider\u2019s own connected-applications settings if they want access ended there' },
+    { ref: 'configurationGapsHeading', kind: LabelKind.HEADING, purpose: 'Heading of the block listing every provider whose application-level configuration is incomplete, shown before the chooser' },
+    { ref: 'configurationGapsDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that the providers listed below cannot be connected by anybody until an operator sets the named environment variables for this deployment, and that this is a configuration gap rather than a lack of support' },
+    { ref: 'notRegisteredNotice', kind: LabelKind.MESSAGE, purpose: 'Explains that this application has not yet registered with the provider, so connecting is not possible until an operator creates an application at that vendor and configures its credentials — shown in place of the Connect button' },
+    { ref: 'pastedCredentialNotice', kind: LabelKind.MESSAGE, purpose: 'Explains that this provider has no authorization flow because its credential is typed rather than granted, and points the person at the credentials tab' },
+    { ref: 'disconnectNotice', kind: LabelKind.MESSAGE, purpose: 'Standing note shown when NO connected provider can be told: removing a connection deletes this application\u2019s copy of the authorization but does not withdraw it at the provider, so the person should also remove the application in the provider\u2019s own connected-applications settings if they want access ended there' },
+    { ref: 'disconnectRevokesNotice', kind: LabelKind.MESSAGE, purpose: 'Standing note shown when EVERY connected provider can be told: removing a connection also hands the authorization back to the provider, so access ends there as well and nothing further needs doing at the vendor' },
+    { ref: 'disconnectMixedNotice', kind: LabelKind.MESSAGE, purpose: 'Standing note shown when SOME connected providers can be told and others cannot: removing a connection ends access at the providers that accept a withdrawal and only deletes this application\u2019s copy for the rest, so the person should check the provider\u2019s own connected-applications settings for those' },
 ];
 registerComponentLabels(FrontendComponentType.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS, AppLayoutsConnectedAccountsSettingsLabels);
 //# sourceMappingURL=AppPage_ConnectedAccountsSettings.labels.js.map

package/dist/esm/components/settings/AppPage_ConnectedAccountsSettings.labels.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_ConnectedAccountsSettings.labels.js","sourceRoot":"","sources":["../../../../src/components/settings/AppPage_ConnectedAccountsSettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EAET,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,iGAAiG;AACjG,0DAA0D;AAC1D,gGAAgG;AAChG,6FAA6F;AAC7F,8DAA8D;AAC9D,MAAM,CAAC,MAAM,yCAAyC,GAA0B;IAC9E,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8EAA8E,EAAE;IACtI,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8JAA8J,EAAE;IAChO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACrH,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oFAAoF,EAAE;IACxI,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iHAAiH,EAAE;IAC5K,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wGAAwG,EAAE;IACtK,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gIAAgI,EAAE;IAChM,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,0IAA0I,EAAE;IAClN,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,iGAAiG,EAAE;IAC1J,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+FAA+F,EAAE;IAC7J,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2GAA2G,EAAE;IACxK,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oHAAoH,EAAE;IAC/K,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uFAAuF,EAAE;IAClJ,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8GAA8G,EAAE;IAC/K,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yFAAyF,EAAE;IACtJ,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2SAA2S,EAAE;CAC3W,CAAC;AAEF,uBAAuB,CAAC,qBAAqB,CAAC,uCAAuC,EAAE,yCAAyC,CAAC,CAAC","sourcesContent":["import {\n FrontendComponentType,\n LabelKind,\n type LabellingUnitaryDef,\n registerComponentLabels,\n} from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for the Connected-accounts panel: keys + kind + per-key purpose.\n// Statically scanned by the dev companion to generate the\n// `components.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS.*` bundle; NOT imported at runtime, so it\n// never ships in the browser bundle. Keep in lock-step with the keys the component reads via\n// `tComponent(APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS, ...)`.\nexport const AppLayoutsConnectedAccountsSettingsLabels: LabellingUnitaryDef[] = [\n { ref: 'pageTitle', kind: LabelKind.HEADING, purpose: 'Heading for the panel where a person connects their own third-party accounts' },\n { ref: 'pageDescription', kind: LabelKind.DESCRIPTION, purpose: 'Sub-heading explaining that connecting an account lets this application act as that account on the person’s behalf, and that they can disconnect at any time' },\n { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Shown while the list of connectable providers is being loaded' },\n { ref: 'empty', kind: LabelKind.MESSAGE, purpose: 'Shown when this application declares no provider a person may connect individually' },\n { ref: 'connectButton', kind: LabelKind.BUTTON, purpose: 'Button that starts connecting the named third-party account, sending the person to that vendor to grant consent' },\n { ref: 'connectingButton', kind: LabelKind.BUTTON, purpose: 'Button caption while the authorization URL is being obtained, before the browser leaves for the vendor' },\n { ref: 'parametersHeading', kind: LabelKind.HEADING, purpose: 'Heading above the inputs a person must answer before connecting, such as which cloud or which directory their account lives in' },\n { ref: 'parametersDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that these answers are facts about the account being connected and that the vendor’s own addresses cannot be built without them' },\n { ref: 'scopesPrefix', kind: LabelKind.LABEL, purpose: 'Prefix before the list of permissions the connection will ask the vendor for (e.g. \"Requests:\")' },\n { ref: 'connectedNotice', kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after returning from a vendor where the account was connected successfully' },\n { ref: 'declinedNotice', kind: LabelKind.MESSAGE, purpose: 'Shown after returning from a vendor where the person chose not to grant access — a decision, not an error' },\n { ref: 'failedNotice', kind: LabelKind.MESSAGE, purpose: 'Shown after returning from a vendor when the connection attempt could not be completed and should be started again' },\n { ref: 'errorGeneric', kind: LabelKind.MESSAGE, purpose: 'Generic error shown when listing connectable providers or starting a connection fails' },\n { ref: 'errorNotAdmissible', kind: LabelKind.MESSAGE, purpose: 'Shown when this provider does not admit a personally-owned connection, so nobody may connect it individually' },\n { ref: 'errorForbidden', kind: LabelKind.MESSAGE, purpose: 'Shown when the person is not allowed to connect an account on behalf of the named owner' },\n { ref: 'disconnectNotice', kind: LabelKind.MESSAGE, purpose: 'Standing note explaining that removing a connection deletes this application\\u2019s copy of the authorization but does not withdraw it at the provider, and that the person should also remove the application in the provider\\u2019s own connected-applications settings if they want access ended there' },\n];\n\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS, AppLayoutsConnectedAccountsSettingsLabels);\n"]}
1	+ {"version":3,"file":"AppPage_ConnectedAccountsSettings.labels.js","sourceRoot":"","sources":["../../../../../src/components/settings/AppPage_ConnectedAccountsSettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EAET,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,iGAAiG;AACjG,0DAA0D;AAC1D,gGAAgG;AAChG,6FAA6F;AAC7F,8DAA8D;AAC9D,EAAE;AACF,oGAAoG;AACpG,+FAA+F;AAC/F,iGAAiG;AACjG,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG,kGAAkG;AAClG,8BAA8B;AAC9B,4FAA4F;AAC5F,uDAAuD;AACvD,EAAE;AACF,gGAAgG;AAChG,iGAAiG;AACjG,oGAAoG;AACpG,mGAAmG;AACnG,4FAA4F;AAC5F,gGAAgG;AAChG,4FAA4F;AAC5F,kGAAkG;AAClG,MAAM,CAAC,MAAM,yCAAyC,GAA0B;IAC9E,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8EAA8E,EAAE;IACtI,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8JAA8J,EAAE;IAChO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACrH,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oFAAoF,EAAE;IACxI,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sFAAsF,EAAE;IAC1J,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,+GAA+G,EAAE;IAC7K,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iHAAiH,EAAE;IAC5K,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wGAAwG,EAAE;IACtK,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iLAAiL,EAAE;IACjP,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,0MAA0M,EAAE;IAClR,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,+EAA+E,EAAE;IACjJ,EAAE,GAAG,EAAE,yBAAyB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gJAAgJ,EAAE;IACpN,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,yIAAyI,EAAE;IAC1M,EAAE,GAAG,EAAE,oCAAoC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,0LAA0L,EAAE;IACzQ,EAAE,GAAG,EAAE,gCAAgC,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,gQAAgQ,EAAE;IACjV,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gIAAgI,EAAE;IAChM,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,0IAA0I,EAAE;IAClN,EAAE,GAAG,EAAE,8BAA8B,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,kLAAkL,EAAE;IAC3P,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,iGAAiG,EAAE;IAC1J,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,0LAA0L,EAAE;IACvP,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0GAA0G,EAAE;IAC/K,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+FAA+F,EAAE;IAC7J,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2GAA2G,EAAE;IACxK,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oHAAoH,EAAE;IAC/K,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uFAAuF,EAAE;IAClJ,EAAE,GAAG,EAAE,0BAA0B,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2HAA2H,EAAE;IAClM,EAAE,GAAG,EAAE,8BAA8B,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,wNAAwN,EAAE;IACvS,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sOAAsO,EAAE;IACxS,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yJAAyJ,EAAE;IAC9N,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mUAAmU,EAAE;IAClY,EAAE,GAAG,EAAE,yBAAyB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oNAAoN,EAAE;IAC1R,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uTAAuT,EAAE;CAC5X,CAAC;AAEF,uBAAuB,CAAC,qBAAqB,CAAC,uCAAuC,EAAE,yCAAyC,CAAC,CAAC","sourcesContent":["import {\n FrontendComponentType,\n LabelKind,\n type LabellingUnitaryDef,\n registerComponentLabels,\n} from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for the Connected-accounts panel: keys + kind + per-key purpose.\n// Statically scanned by the dev companion to generate the\n// `components.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS.*` bundle; NOT imported at runtime, so it\n// never ships in the browser bundle. Keep in lock-step with the keys the component reads via\n// `tComponent(APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS, ...)`.\n//\n// LOCK-STEP DRIFTS SILENTLY IN BOTH DIRECTIONS, and on 2026-09-10 it had drifted both ways at once.\n// Nothing mechanical compares this array to the component's `t('...')` call sites, and neither\n// failure raises anything: a key the component reads and this array omits renders as its RAW KEY\n// PATH in the browser — visible only to somebody looking at the panel — while a key declared here\n// and never read costs a generated entry plus a translation round trip in every locale, and tells\n// the next reader the panel renders a message it does not. Five of each had accumulated before the\n// panel was first rendered. When you add or remove a `t('...')` call, edit this array in the same\n// change, and regenerate with\n// `wildo generate labels --units component:APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS --force`\n// followed by the matching `wildo generate translate`.\n//\n// `errorNotAdmissible` and `errorForbidden` were declared here and REMOVED on 2026-09-10 rather\n// than wired. The start route really does answer 409 CONNECTION_NOT_ADMISSIBLE and 403 FORBIDDEN\n// with those two distinct meanings — but this panel's catch does `if (isWildoBackendError(e)) throw\n// e`, so a structured backend refusal propagates to the global error handler and no branch in this\n// component can ever render either message. Reintroducing them is a real option and it is a\n// DECISION, not a cleanup: it means this panel stops re-throwing those two statuses and reports\n// them itself, which departs from the repository-wide convention that a `WildoBackendError`\n// belongs to the global handler. Declare them again in the same change that makes them reachable.\nexport const AppLayoutsConnectedAccountsSettingsLabels: LabellingUnitaryDef[] = [\n { ref: 'pageTitle', kind: LabelKind.HEADING, purpose: 'Heading for the panel where a person connects their own third-party accounts' },\n { ref: 'pageDescription', kind: LabelKind.DESCRIPTION, purpose: 'Sub-heading explaining that connecting an account lets this application act as that account on the person’s behalf, and that they can disconnect at any time' },\n { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Shown while the list of connectable providers is being loaded' },\n { ref: 'empty', kind: LabelKind.MESSAGE, purpose: 'Shown when this application declares no provider a person may connect individually' },\n { ref: 'chooseProviderHeading', kind: LabelKind.HEADING, purpose: 'Heading above the control where somebody picks which third-party provider to connect' },\n { ref: 'choosePlaceholder', kind: LabelKind.LABEL, purpose: 'Placeholder shown in the provider chooser before anything is selected, inviting the person to pick a provider' },\n { ref: 'connectButton', kind: LabelKind.BUTTON, purpose: 'Button that starts connecting the named third-party account, sending the person to that vendor to grant consent' },\n { ref: 'connectingButton', kind: LabelKind.BUTTON, purpose: 'Button caption while the authorization URL is being obtained, before the browser leaves for the vendor' },\n { ref: 'delegationHeading', kind: LabelKind.HEADING, purpose: 'Heading above the control asking on whose behalf the connection will act — shown only for a provider that admits both a service identity and a user-delegated one at this scope' },\n { ref: 'delegationDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that this provider can be connected either as the tenant itself or as the person acting, that these are two different accounts at the vendor, and that nobody may choose on the person’s behalf' },\n { ref: 'delegationPlaceholder', kind: LabelKind.LABEL, purpose: 'Placeholder in the on-whose-behalf chooser before either delegation is picked' },\n { ref: 'delegationServiceOption', kind: LabelKind.LABEL, purpose: 'Option naming the connection that acts as the organization or application itself, using a shared identity rather than any individual’s account' },\n { ref: 'delegationUserOption', kind: LabelKind.LABEL, purpose: 'Option naming the connection that acts as the individual person authorizing it, so anything it does at the vendor is attributed to them' },\n { ref: 'organizationWideUseAcknowledgement', kind: LabelKind.LABEL, purpose: 'Checkbox label a member ticks before linking THEIR OWN vendor account for the whole organization, stating that every member of the organization will be able to act through that account' },\n { ref: 'organizationWideUseDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains beneath that checkbox that anything a colleague does through this connection is attributed to the linking person at the vendor, that the linking person is trusting their colleagues with it, and that the audit trail records whose account was used' },\n { ref: 'parametersHeading', kind: LabelKind.HEADING, purpose: 'Heading above the inputs a person must answer before connecting, such as which cloud or which directory their account lives in' },\n { ref: 'parametersDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that these answers are facts about the account being connected and that the vendor’s own addresses cannot be built without them' },\n { ref: 'parameterAdmittedHostsPrefix', kind: LabelKind.LABEL, purpose: 'Prefix before the list of vendor hostnames a connection parameter accepts, shown above a typed host field so the person knows which addresses will be allowed (e.g. \"Accepted:\")' },\n { ref: 'scopesPrefix', kind: LabelKind.LABEL, purpose: 'Prefix before the list of permissions the connection will ask the vendor for (e.g. \"Requests:\")' },\n { ref: 'scopeChosenBelow', kind: LabelKind.LABEL, purpose: 'Stands in, inside the list of requested permissions, for a permission that depends on an answer the person has not given yet in the fields below (e.g. \"(depends on your answer below)\")' },\n { ref: 'credentialStoredNotice', kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after a typed credential has been saved for a provider that has no authorization flow' },\n { ref: 'connectedNotice', kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after returning from a vendor where the account was connected successfully' },\n { ref: 'declinedNotice', kind: LabelKind.MESSAGE, purpose: 'Shown after returning from a vendor where the person chose not to grant access — a decision, not an error' },\n { ref: 'failedNotice', kind: LabelKind.MESSAGE, purpose: 'Shown after returning from a vendor when the connection attempt could not be completed and should be started again' },\n { ref: 'errorGeneric', kind: LabelKind.MESSAGE, purpose: 'Generic error shown when listing connectable providers or starting a connection fails' },\n { ref: 'configurationGapsHeading', kind: LabelKind.HEADING, purpose: 'Heading of the block listing every provider whose application-level configuration is incomplete, shown before the chooser' },\n { ref: 'configurationGapsDescription', kind: LabelKind.DESCRIPTION, purpose: 'Explains that the providers listed below cannot be connected by anybody until an operator sets the named environment variables for this deployment, and that this is a configuration gap rather than a lack of support' },\n { ref: 'notRegisteredNotice', kind: LabelKind.MESSAGE, purpose: 'Explains that this application has not yet registered with the provider, so connecting is not possible until an operator creates an application at that vendor and configures its credentials — shown in place of the Connect button' },\n { ref: 'pastedCredentialNotice', kind: LabelKind.MESSAGE, purpose: 'Explains that this provider has no authorization flow because its credential is typed rather than granted, and points the person at the credentials tab' },\n { ref: 'disconnectNotice', kind: LabelKind.MESSAGE, purpose: 'Standing note shown when NO connected provider can be told: removing a connection deletes this application\\u2019s copy of the authorization but does not withdraw it at the provider, so the person should also remove the application in the provider\\u2019s own connected-applications settings if they want access ended there' },\n { ref: 'disconnectRevokesNotice', kind: LabelKind.MESSAGE, purpose: 'Standing note shown when EVERY connected provider can be told: removing a connection also hands the authorization back to the provider, so access ends there as well and nothing further needs doing at the vendor' },\n { ref: 'disconnectMixedNotice', kind: LabelKind.MESSAGE, purpose: 'Standing note shown when SOME connected providers can be told and others cannot: removing a connection ends access at the providers that accept a withdrawal and only deletes this application\\u2019s copy for the rest, so the person should check the provider\\u2019s own connected-applications settings for those' },\n];\n\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS, AppLayoutsConnectedAccountsSettingsLabels);\n"]}

package/dist/esm/components/settings/AppPage_InvitationsSettings.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_InvitationsSettings.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/settings/AppPage_InvitationsSettings.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAA2C,MAAM,OAAO,CAAC;AAchE,eAAO,MAAM,2BAA2B,EAAE,KAAK,CAAC,EA4J/C,CAAC"}
1	+ {"version":3,"file":"AppPage_InvitationsSettings.d.ts","sourceRoot":"","sources":["../../../../../src/components/settings/AppPage_InvitationsSettings.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAA2C,MAAM,OAAO,CAAC;AAchE,eAAO,MAAM,2BAA2B,EAAE,KAAK,CAAC,EA4J/C,CAAC"}

package/dist/esm/components/settings/AppPage_InvitationsSettings.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_InvitationsSettings.js","sourceRoot":"","sources":["../../../../src/components/settings/AppPage_InvitationsSettings.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,8CAA8C,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EACL,wBAAwB,GAEzB,MAAM,mFAAmF,CAAC;AAE3F,MAAM,CAAC,MAAM,2BAA2B,GAAa,GAAG,EAAE;IACxD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,gCAAgC,EAAE,CAAC,CAAC;IAC/G,MAAM,EAAE,oBAAoB,EAAE,GAAG,WAAW,EAAE,CAAC;IAE/C,MAAM,CAAC,GAAG,WAAW,CACnB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,gCAAgC,EAAE,GAAG,CAAC,EACxF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAA4B,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAElE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,wBAAwB,EAAE,CAAC,wBAAwB,EAAE,CAAC;YACxE,cAAc,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,EAAE,CAAC;IACZ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,iFAAiF;IACjF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,YAAoB,EAAE,EAAE;QAC7B,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAClE,8EAA8E;YAC9E,MAAM,oBAAoB,EAAE,CAAC;YAC7B,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAClC,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC,CACnC,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,YAAoB,EAAE,EAAE;QAC7B,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAClE,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAClC,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,CAAC,CAAC,CACb,CAAC;IAEF,4FAA4F;IAC5F,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,eAAK,SAAS,EAAC,2BAA2B,aAGxC,aAAI,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,WAAW,CAAC,GAAM,EAC5E,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,iBAAiB,CAAC,GAAQ,IACzE,EAEL,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EACA,UAAU,IAAI,CACb,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,UAAU,GAAoB,GAC3C,CACT,EAED,MAAC,IAAI,eACH,KAAC,UAAU,cACT,KAAC,SAAS,cAAE,CAAC,CAAC,aAAa,CAAC,GAAa,GAC9B,EACb,KAAC,WAAW,cACT,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,SAAS,CAAC,GAAQ,CACtE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAC7B,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,OAAO,CAAC,GAAQ,CACpE,CAAC,CAAC,CAAC;wBACF;;;;;8EAKsD;wBACtD,aAAI,SAAS,EAAC,wBAAwB,YACnC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAC/B,cAEE,SAAS,EAAC,wDAAwD,aAElE,eAAK,SAAS,EAAC,mCAAmC,aAChD,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,YAAE,UAAU,CAAC,gBAAgB,IAAI,CAAC,CAAC,qBAAqB,CAAC,GAAQ,EAC7F,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAC9B,MAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,aAC5C,CAAC,CAAC,aAAa,CAAC,OAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAC1C,CACR,IACG,EACN,eAAK,SAAS,EAAC,2BAA2B,aACxC,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,IAAI,EAAE,UAAU,CAAC,EAAE,EACnB,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC,YAAY,EAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,YAEnD,CAAC,CAAC,cAAc,CAAC,GACX,EACT,KAAC,MAAM,IACL,IAAI,EAAE,UAAU,CAAC,EAAE,EACnB,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC,YAAY,EAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,YAEnD,CAAC,CAAC,cAAc,CAAC,GACX,IACL,KA3BD,UAAU,CAAC,YAAY,CA4BzB,CACN,CAAC,GACC,CACN,GACW,IACT,IACH,CACP,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/*\n AppPage_InvitationsSettings — the Settings Hub \"Invitations\" panel (Approach P).\n \n A bespoke `ENGINE_PANEL` (not a resource surface) that lets a signed-in user act on\n * THEIR OWN pending organization invitations in-app, without opening the emailed link.\n * It lists the caller's pending invitations — their own INVITED membership rows, resolved\n * server-side by userId-ownership via `GET /auth/invitations/mine` — and offers Accept /\n * Decline per row (Accept flips the row to ACTIVE; Decline deletes it) — calling the\n * authenticated `acceptMyInvitation` / `rejectMyInvitation` endpoints (no token, no new\n * session). On accept the caller becomes a member, so the panel refreshes the user's\n * organizations via `useUserOrgs().refreshOrganizations()` and re-lists.\n \n i18n follows the framework convention (same shape as `AppPage_AppearanceSettings`):\n * `useI18n({ component })` requests this component's label namespace, the panel gates\n * rendering on `isReady` so it never flashes raw key paths, and a thin `t(key)` reads\n * each label. Copy is owned by the labelling pipeline (sibling `.labels.ts`) — no\n * hardcoded fallback strings here.\n /\nimport React, { useCallback, useEffect, useState } from 'react';\nimport { ButtonSize, FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { isWildoBackendError } from '@wildo-ai/saas-models';\nimport { Card, CardContent, CardHeader, CardTitle } from '~wildo-frontend-lib/components/sections/card';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport {\n getManualCallsHttpClient,\n type MyPendingInvitationView,\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\n\nexport const AppPage_InvitationsSettings: React.FC = () => {\n const { tComponent, isReady } = useI18n({ component: FrontendComponentType.APP_LAYOUTS_INVITATIONS_SETTINGS });\n const { refreshOrganizations } = useUserOrgs();\n\n const t = useCallback(\n (key: string) => tComponent(FrontendComponentType.APP_LAYOUTS_INVITATIONS_SETTINGS, key),\n [tComponent],\n );\n\n const [invitations, setInvitations] = useState<MyPendingInvitationView[]>([]);\n const [loading, setLoading] = useState(true);\n const [busyId, setBusyId] = useState<string \| null>(null);\n const [error, setError] = useState<string \| null>(null);\n const [successMsg, setSuccessMsg] = useState<string \| null>(null);\n\n const refresh = useCallback(async () => {\n setLoading(true);\n setError(null);\n try {\n const res = await getManualCallsHttpClient().listMyPendingInvitations();\n setInvitations(res.invitations ?? []);\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n setError(t('errorGeneric'));\n } finally {\n setLoading(false);\n }\n }, [t]);\n\n useEffect(() => {\n refresh();\n }, [refresh]);\n\n // Auto-dismiss the success banner (same convention as AppPage_SecuritySettings).\n useEffect(() => {\n if (!successMsg) return;\n const timer = setTimeout(() => setSuccessMsg(null), 5000);\n return () => clearTimeout(timer);\n }, [successMsg]);\n\n const handleAccept = useCallback(\n async (membershipId: string) => {\n setBusyId(membershipId);\n setError(null);\n try {\n await getManualCallsHttpClient().acceptMyInvitation(membershipId);\n // The caller just became a member — refresh their org list before re-listing.\n await refreshOrganizations();\n setSuccessMsg(t('acceptSuccess'));\n await refresh();\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n setError(t('errorGeneric'));\n } finally {\n setBusyId(null);\n }\n },\n [refresh, refreshOrganizations, t],\n );\n\n const handleReject = useCallback(\n async (membershipId: string) => {\n setBusyId(membershipId);\n setError(null);\n try {\n await getManualCallsHttpClient().rejectMyInvitation(membershipId);\n setSuccessMsg(t('rejectSuccess'));\n await refresh();\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n setError(t('errorGeneric'));\n } finally {\n setBusyId(null);\n }\n },\n [refresh, t],\n );\n\n // Gate on label readiness so the panel never flashes raw key paths (Appearance convention).\n if (!isReady) return null;\n\n return (\n <div className=\"flex flex-col gap-section\">\n <div className=\"flex flex-col gap-item-xs\">\n {/ `h3`, not `h2`: the Settings Hub header owns the `h2` for this dialog,\n so a panel heading is one level below it. /}\n <h3 className=\"text-base font-semibold tracking-tight\">{t('pageTitle')}</h3>\n <Text className=\"text-sm text-muted-foreground\">{t('pageDescription')}</Text>\n </div>\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n {successMsg && (\n <Alert>\n <AlertDescription>{successMsg}</AlertDescription>\n </Alert>\n )}\n\n <Card>\n <CardHeader>\n <CardTitle>{t('listHeading')}</CardTitle>\n </CardHeader>\n <CardContent>\n {loading ? (\n <Text className=\"text-sm text-muted-foreground\">{t('loading')}</Text>\n ) : invitations.length === 0 ? (\n <Text className=\"text-sm text-muted-foreground\">{t('empty')}</Text>\n ) : (\n / Flush divided list — same settings-list geometry as the\n SETTINGS_ROW field chrome (label/meta inline-start, actions\n inline-end, `py-group` rhythm, `divide-y` hairline dividers) so\n this bespoke action panel reads as the same family as the\n decorator-driven settings surfaces. (Was per-row bordered boxes\n with `space-y-2`, a visually divergent pattern.) */\n <ul className=\"divide-y divide-border\">\n {invitations.map((invitation) => (\n <li\n key={invitation.membershipId}\n className=\"flex items-center justify-between gap-section py-group\"\n >\n <div className=\"flex min-w-0 flex-col gap-item-xs\">\n <Text className=\"font-medium\">{invitation.organizationName ?? t('unknownOrganization')}</Text>\n {invitation.roles.length > 0 && (\n <Text className=\"text-xs text-muted-foreground\">\n {t('rolesPrefix')} {invitation.roles.join(', ')}\n </Text>\n )}\n </div>\n <div className=\"flex shrink-0 gap-element\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n size={ButtonSize.SM}\n disabled={busyId === invitation.membershipId}\n onClick={() => handleReject(invitation.membershipId)}\n >\n {t('rejectButton')}\n </Button>\n <Button\n size={ButtonSize.SM}\n disabled={busyId === invitation.membershipId}\n onClick={() => handleAccept(invitation.membershipId)}\n >\n {t('acceptButton')}\n </Button>\n </div>\n </li>\n ))}\n </ul>\n )}\n </CardContent>\n </Card>\n </div>\n );\n};\n"]}
1	+ {"version":3,"file":"AppPage_InvitationsSettings.js","sourceRoot":"","sources":["../../../../../src/components/settings/AppPage_InvitationsSettings.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,8CAA8C,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EACL,wBAAwB,GAEzB,MAAM,mFAAmF,CAAC;AAE3F,MAAM,CAAC,MAAM,2BAA2B,GAAa,GAAG,EAAE;IACxD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,gCAAgC,EAAE,CAAC,CAAC;IAC/G,MAAM,EAAE,oBAAoB,EAAE,GAAG,WAAW,EAAE,CAAC;IAE/C,MAAM,CAAC,GAAG,WAAW,CACnB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,gCAAgC,EAAE,GAAG,CAAC,EACxF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAA4B,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAElE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,wBAAwB,EAAE,CAAC,wBAAwB,EAAE,CAAC;YACxE,cAAc,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,EAAE,CAAC;IACZ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,iFAAiF;IACjF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,YAAoB,EAAE,EAAE;QAC7B,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAClE,8EAA8E;YAC9E,MAAM,oBAAoB,EAAE,CAAC;YAC7B,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAClC,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC,CACnC,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,YAAoB,EAAE,EAAE;QAC7B,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAClE,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAClC,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,mBAAmB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,CAAC,CAAC,CACb,CAAC;IAEF,4FAA4F;IAC5F,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,eAAK,SAAS,EAAC,2BAA2B,aACxC,eAAK,SAAS,EAAC,2BAA2B,aAGxC,aAAI,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,WAAW,CAAC,GAAM,EAC5E,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,iBAAiB,CAAC,GAAQ,IACzE,EAEL,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EACA,UAAU,IAAI,CACb,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,UAAU,GAAoB,GAC3C,CACT,EAED,MAAC,IAAI,eACH,KAAC,UAAU,cACT,KAAC,SAAS,cAAE,CAAC,CAAC,aAAa,CAAC,GAAa,GAC9B,EACb,KAAC,WAAW,cACT,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,SAAS,CAAC,GAAQ,CACtE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAC7B,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,OAAO,CAAC,GAAQ,CACpE,CAAC,CAAC,CAAC;wBACF;;;;;8EAKsD;wBACtD,aAAI,SAAS,EAAC,wBAAwB,YACnC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAC/B,cAEE,SAAS,EAAC,wDAAwD,aAElE,eAAK,SAAS,EAAC,mCAAmC,aAChD,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,YAAE,UAAU,CAAC,gBAAgB,IAAI,CAAC,CAAC,qBAAqB,CAAC,GAAQ,EAC7F,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAC9B,MAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,aAC5C,CAAC,CAAC,aAAa,CAAC,OAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAC1C,CACR,IACG,EACN,eAAK,SAAS,EAAC,2BAA2B,aACxC,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,IAAI,EAAE,UAAU,CAAC,EAAE,EACnB,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC,YAAY,EAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,YAEnD,CAAC,CAAC,cAAc,CAAC,GACX,EACT,KAAC,MAAM,IACL,IAAI,EAAE,UAAU,CAAC,EAAE,EACnB,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC,YAAY,EAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,YAEnD,CAAC,CAAC,cAAc,CAAC,GACX,IACL,KA3BD,UAAU,CAAC,YAAY,CA4BzB,CACN,CAAC,GACC,CACN,GACW,IACT,IACH,CACP,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/*\n AppPage_InvitationsSettings — the Settings Hub \"Invitations\" panel (Approach P).\n \n A bespoke `ENGINE_PANEL` (not a resource surface) that lets a signed-in user act on\n * THEIR OWN pending organization invitations in-app, without opening the emailed link.\n * It lists the caller's pending invitations — their own INVITED membership rows, resolved\n * server-side by userId-ownership via `GET /auth/invitations/mine` — and offers Accept /\n * Decline per row (Accept flips the row to ACTIVE; Decline deletes it) — calling the\n * authenticated `acceptMyInvitation` / `rejectMyInvitation` endpoints (no token, no new\n * session). On accept the caller becomes a member, so the panel refreshes the user's\n * organizations via `useUserOrgs().refreshOrganizations()` and re-lists.\n \n i18n follows the framework convention (same shape as `AppPage_AppearanceSettings`):\n * `useI18n({ component })` requests this component's label namespace, the panel gates\n * rendering on `isReady` so it never flashes raw key paths, and a thin `t(key)` reads\n * each label. Copy is owned by the labelling pipeline (sibling `.labels.ts`) — no\n * hardcoded fallback strings here.\n /\nimport React, { useCallback, useEffect, useState } from 'react';\nimport { ButtonSize, FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { isWildoBackendError } from '@wildo-ai/saas-models';\nimport { Card, CardContent, CardHeader, CardTitle } from '~wildo-frontend-lib/components/sections/card';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport {\n getManualCallsHttpClient,\n type MyPendingInvitationView,\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\n\nexport const AppPage_InvitationsSettings: React.FC = () => {\n const { tComponent, isReady } = useI18n({ component: FrontendComponentType.APP_LAYOUTS_INVITATIONS_SETTINGS });\n const { refreshOrganizations } = useUserOrgs();\n\n const t = useCallback(\n (key: string) => tComponent(FrontendComponentType.APP_LAYOUTS_INVITATIONS_SETTINGS, key),\n [tComponent],\n );\n\n const [invitations, setInvitations] = useState<MyPendingInvitationView[]>([]);\n const [loading, setLoading] = useState(true);\n const [busyId, setBusyId] = useState<string \| null>(null);\n const [error, setError] = useState<string \| null>(null);\n const [successMsg, setSuccessMsg] = useState<string \| null>(null);\n\n const refresh = useCallback(async () => {\n setLoading(true);\n setError(null);\n try {\n const res = await getManualCallsHttpClient().listMyPendingInvitations();\n setInvitations(res.invitations ?? []);\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n setError(t('errorGeneric'));\n } finally {\n setLoading(false);\n }\n }, [t]);\n\n useEffect(() => {\n refresh();\n }, [refresh]);\n\n // Auto-dismiss the success banner (same convention as AppPage_SecuritySettings).\n useEffect(() => {\n if (!successMsg) return;\n const timer = setTimeout(() => setSuccessMsg(null), 5000);\n return () => clearTimeout(timer);\n }, [successMsg]);\n\n const handleAccept = useCallback(\n async (membershipId: string) => {\n setBusyId(membershipId);\n setError(null);\n try {\n await getManualCallsHttpClient().acceptMyInvitation(membershipId);\n // The caller just became a member — refresh their org list before re-listing.\n await refreshOrganizations();\n setSuccessMsg(t('acceptSuccess'));\n await refresh();\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n setError(t('errorGeneric'));\n } finally {\n setBusyId(null);\n }\n },\n [refresh, refreshOrganizations, t],\n );\n\n const handleReject = useCallback(\n async (membershipId: string) => {\n setBusyId(membershipId);\n setError(null);\n try {\n await getManualCallsHttpClient().rejectMyInvitation(membershipId);\n setSuccessMsg(t('rejectSuccess'));\n await refresh();\n } catch (e: unknown) {\n if (isWildoBackendError(e)) throw e;\n setError(t('errorGeneric'));\n } finally {\n setBusyId(null);\n }\n },\n [refresh, t],\n );\n\n // Gate on label readiness so the panel never flashes raw key paths (Appearance convention).\n if (!isReady) return null;\n\n return (\n <div className=\"flex flex-col gap-section\">\n <div className=\"flex flex-col gap-item-xs\">\n {/ `h3`, not `h2`: the Settings Hub header owns the `h2` for this dialog,\n so a panel heading is one level below it. /}\n <h3 className=\"text-base font-semibold tracking-tight\">{t('pageTitle')}</h3>\n <Text className=\"text-sm text-muted-foreground\">{t('pageDescription')}</Text>\n </div>\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n {successMsg && (\n <Alert>\n <AlertDescription>{successMsg}</AlertDescription>\n </Alert>\n )}\n\n <Card>\n <CardHeader>\n <CardTitle>{t('listHeading')}</CardTitle>\n </CardHeader>\n <CardContent>\n {loading ? (\n <Text className=\"text-sm text-muted-foreground\">{t('loading')}</Text>\n ) : invitations.length === 0 ? (\n <Text className=\"text-sm text-muted-foreground\">{t('empty')}</Text>\n ) : (\n / Flush divided list — same settings-list geometry as the\n SETTINGS_ROW field chrome (label/meta inline-start, actions\n inline-end, `py-group` rhythm, `divide-y` hairline dividers) so\n this bespoke action panel reads as the same family as the\n decorator-driven settings surfaces. (Was per-row bordered boxes\n with `space-y-2`, a visually divergent pattern.) */\n <ul className=\"divide-y divide-border\">\n {invitations.map((invitation) => (\n <li\n key={invitation.membershipId}\n className=\"flex items-center justify-between gap-section py-group\"\n >\n <div className=\"flex min-w-0 flex-col gap-item-xs\">\n <Text className=\"font-medium\">{invitation.organizationName ?? t('unknownOrganization')}</Text>\n {invitation.roles.length > 0 && (\n <Text className=\"text-xs text-muted-foreground\">\n {t('rolesPrefix')} {invitation.roles.join(', ')}\n </Text>\n )}\n </div>\n <div className=\"flex shrink-0 gap-element\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n size={ButtonSize.SM}\n disabled={busyId === invitation.membershipId}\n onClick={() => handleReject(invitation.membershipId)}\n >\n {t('rejectButton')}\n </Button>\n <Button\n size={ButtonSize.SM}\n disabled={busyId === invitation.membershipId}\n onClick={() => handleAccept(invitation.membershipId)}\n >\n {t('acceptButton')}\n </Button>\n </div>\n </li>\n ))}\n </ul>\n )}\n </CardContent>\n </Card>\n </div>\n );\n};\n"]}

package/dist/esm/components/settings/AppPage_InvitationsSettings.labels.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_InvitationsSettings.labels.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/settings/AppPage_InvitationsSettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAO7C,eAAO,MAAM,mCAAmC,EAAE,mBAAmB,EAapE,CAAC"}
1	+ {"version":3,"file":"AppPage_InvitationsSettings.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/settings/AppPage_InvitationsSettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAO7C,eAAO,MAAM,mCAAmC,EAAE,mBAAmB,EAapE,CAAC"}

package/dist/esm/components/settings/AppPage_InvitationsSettings.labels.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AppPage_InvitationsSettings.labels.js","sourceRoot":"","sources":["~~../../../../~~src/components/settings/AppPage_InvitationsSettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EAET,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mCAAmC,GAA0B;IACxE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qFAAqF,EAAE;IAC7I,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mGAAmG,EAAE;IACrK,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAC/G,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sDAAsD,EAAE;IAC5G,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACpG,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gFAAgF,EAAE;IAChJ,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC/H,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACzH,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC/F,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACrH,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0DAA0D,EAAE;IACtH,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;CACtI,CAAC;AAEF,uBAAuB,CAAC,qBAAqB,CAAC,gCAAgC,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import {\n FrontendComponentType,\n LabelKind,\n type LabellingUnitaryDef,\n registerComponentLabels,\n} from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for the Invitations settings panel: keys + kind\n// + per-key purpose. Statically scanned by the dev companion to generate the\n// `components.APP_LAYOUTS_INVITATIONS_SETTINGS.*` bundle; NOT imported at runtime,\n// so it never ships in the browser bundle. Keep in lock-step with the keys the\n// component reads via `tComponent(APP_LAYOUTS_INVITATIONS_SETTINGS, ...)`.\nexport const AppLayoutsInvitationsSettingsLabels: LabellingUnitaryDef[] = [\n { ref: 'pageTitle', kind: LabelKind.HEADING, purpose: 'Heading for the Invitations settings panel (the user’s own pending org invitations)' },\n { ref: 'pageDescription', kind: LabelKind.DESCRIPTION, purpose: 'Sub-heading explaining the panel lists organizations that invited this user, to accept or decline' },\n { ref: 'listHeading', kind: LabelKind.HEADING, purpose: 'Section title above the list of pending invitations' },\n { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Shown while the pending invitations are being loaded' },\n { ref: 'empty', kind: LabelKind.MESSAGE, purpose: 'Shown when the user has no pending invitations' },\n { ref: 'unknownOrganization', kind: LabelKind.LABEL, purpose: 'Fallback label for an invitation whose organization name could not be resolved' },\n { ref: 'rolesPrefix', kind: LabelKind.LABEL, purpose: 'Prefix before the list of roles the invitation grants (e.g. \"Roles:\")' },\n { ref: 'acceptButton', kind: LabelKind.BUTTON, purpose: 'Button that accepts the invitation and joins the organization' },\n { ref: 'rejectButton', kind: LabelKind.BUTTON, purpose: 'Button that declines the invitation' },\n { ref: 'acceptSuccess', kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after the user accepts an invitation' },\n { ref: 'rejectSuccess', kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after the user declines an invitation' },\n { ref: 'errorGeneric', kind: LabelKind.MESSAGE, purpose: 'Generic error shown when listing/accepting/declining an invitation fails' },\n];\n\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_INVITATIONS_SETTINGS, AppLayoutsInvitationsSettingsLabels);\n"]}
1	+ {"version":3,"file":"AppPage_InvitationsSettings.labels.js","sourceRoot":"","sources":["../../../../../src/components/settings/AppPage_InvitationsSettings.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EAET,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mCAAmC,GAA0B;IACxE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qFAAqF,EAAE;IAC7I,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mGAAmG,EAAE;IACrK,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAC/G,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sDAAsD,EAAE;IAC5G,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACpG,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gFAAgF,EAAE;IAChJ,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC/H,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACzH,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC/F,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACrH,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0DAA0D,EAAE;IACtH,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;CACtI,CAAC;AAEF,uBAAuB,CAAC,qBAAqB,CAAC,gCAAgC,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import {\n FrontendComponentType,\n LabelKind,\n type LabellingUnitaryDef,\n registerComponentLabels,\n} from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for the Invitations settings panel: keys + kind\n// + per-key purpose. Statically scanned by the dev companion to generate the\n// `components.APP_LAYOUTS_INVITATIONS_SETTINGS.*` bundle; NOT imported at runtime,\n// so it never ships in the browser bundle. Keep in lock-step with the keys the\n// component reads via `tComponent(APP_LAYOUTS_INVITATIONS_SETTINGS, ...)`.\nexport const AppLayoutsInvitationsSettingsLabels: LabellingUnitaryDef[] = [\n { ref: 'pageTitle', kind: LabelKind.HEADING, purpose: 'Heading for the Invitations settings panel (the user’s own pending org invitations)' },\n { ref: 'pageDescription', kind: LabelKind.DESCRIPTION, purpose: 'Sub-heading explaining the panel lists organizations that invited this user, to accept or decline' },\n { ref: 'listHeading', kind: LabelKind.HEADING, purpose: 'Section title above the list of pending invitations' },\n { ref: 'loading', kind: LabelKind.MESSAGE, purpose: 'Shown while the pending invitations are being loaded' },\n { ref: 'empty', kind: LabelKind.MESSAGE, purpose: 'Shown when the user has no pending invitations' },\n { ref: 'unknownOrganization', kind: LabelKind.LABEL, purpose: 'Fallback label for an invitation whose organization name could not be resolved' },\n { ref: 'rolesPrefix', kind: LabelKind.LABEL, purpose: 'Prefix before the list of roles the invitation grants (e.g. \"Roles:\")' },\n { ref: 'acceptButton', kind: LabelKind.BUTTON, purpose: 'Button that accepts the invitation and joins the organization' },\n { ref: 'rejectButton', kind: LabelKind.BUTTON, purpose: 'Button that declines the invitation' },\n { ref: 'acceptSuccess', kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after the user accepts an invitation' },\n { ref: 'rejectSuccess', kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after the user declines an invitation' },\n { ref: 'errorGeneric', kind: LabelKind.MESSAGE, purpose: 'Generic error shown when listing/accepting/declining an invitation fails' },\n];\n\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_INVITATIONS_SETTINGS, AppLayoutsInvitationsSettingsLabels);\n"]}

package/dist/esm/components/settings/SettingsHub.d.ts CHANGED Viewed

@@ -1,13 +1,19 @@
 /**
  * SettingsHub — the unified settings surface.
  *
- * Renders the declarative `ResolvedSettingsHubConfig` as a vertical `Tabs` rail beside a
- * content panel. Categories become labelled groups + separators rendered INSIDE
- * the `TabsList` (per the BetterStack reference) — the `Tabs` primitive stays the
- * section mechanism, so section state, keyboard roving, and `value`/
- * `onValueChange` all live on the primitive rather than a hand-rolled rail. A
- * section's `target` resolves to a framework panel, an auto-rendered resource
- * surface, a custom component, or a set of horizontal sub-tabs.
+ * Renders the declarative `ResolvedSettingsHubConfig` as a vertical NAVIGATION rail beside a
+ * content panel. Categories become labelled groups of links, each destination addressed by its own
+ * URL. A section's `target` resolves to a framework panel, an auto-rendered resource surface, a
+ * custom component, or a set of horizontal sub-tabs.
+ *
+ * The rail was a `Tabs`/`TabsList` until 2026-09-19, chosen so that section state and keyboard
+ * roving came from the primitive rather than being hand-rolled. It became navigation because a
+ * tablist switches panels WITHIN a view while these are thirty destinations that each own a URL —
+ * and the keyboard argument dissolves rather than transferring: roving tabindex is a tablist
+ * requirement, and navigation wants ordinary Tab order through links. See the rail's own comment.
+ *
+ * The SUB-TABS are still `Tabs`, correctly: Configuration/Connections inside one destination is
+ * exactly what a tablist is for.
  *
  * Mounted by `NavigationContentRenderer` for `NavigationContentType.SETTINGS_HUB`
  * (always in the overlay zone). The `sectionRef` prop pre-selects the open
@@ -17,6 +23,8 @@ import React from 'react';
 export interface SettingsHubProps {
     /** Section to pre-open; falls back to the config default. */
     sectionRef?: string;
+    /** Sub-tab of `sectionRef` to pre-open; ignored when the section declares no such tab. */
+    subTabRef?: string;
 }
-export declare function SettingsHub({ sectionRef }: SettingsHubProps): React.JSX.Element;
+export declare function SettingsHub({ sectionRef, subTabRef }: SettingsHubProps): React.JSX.Element;
 //# sourceMappingURL=SettingsHub.d.ts.map

package/dist/esm/components/settings/SettingsHub.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"SettingsHub.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/settings/SettingsHub.tsx"],"names":[],"mappings":"AAAA~~;;;;;;;;;;;;;;GAcG~~;AACH,OAAO,~~KAAoD~~,MAAM,OAAO,CAAC;~~AA+IzE~~,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;~~CACrB~~;AAED,wBAAgB,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,~~CA+F/E~~"}
1	+ {"version":3,"file":"SettingsHub.d.ts","sourceRoot":"","sources":["../../../../../src/components/settings/SettingsHub.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAA4D,MAAM,OAAO,CAAC;AAyMjF,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CA2T1F"}