@wildo-ai/saas-frontend-lib 1.1.4 → 1.1.6

package/dist/esm/core/external-providers/provider-address-lookup-selection.frontend.utils.js

@@ -0,0 +1,65 @@
+/**
+ * Holding what an address-lookup component hands back to the contract it DECLARED (#1702) — the
+ * `FRONTEND_ADDRESS_LOOKUP` twin of `receiveProviderFileSelections`, and the slot the address field of #561
+ * fills from.
+ *
+ * ## What is checked, and why here
+ *
+ * The address itself is the application's value: the field validates it against its own `z_address()`
+ * schema, as it validates a typed address, and this function applies that schema when the caller passes it
+ * so a lookup cannot hand the field a value the field would refuse.
+ *
+ * The vendor's PLACE ID is the part a vendor's terms govern, so a component declares once, statically,
+ * whether it returns one (`ProviderAddressLookupPlaceIdRetention`), and this function holds every selection
+ * to that declaration (the #383 rule). A component that declared `NONE` and returns a place id contradicts
+ * itself and is refused — a surface that silently kept the id would be holding a vendor key nobody reviewed
+ * the terms for. A `TRANSIENT` id is passed through for the interaction.
+ *
+ * Nothing here says the id may be stored, because nothing may store it (#561 D3): the address field keeps
+ * only the address (`AddressFieldLookupHost.applyAddress` takes an `AddressValue`, which has no place for one).
+ * The `placeIdStorable` flag this function returned until #561 had no reader and was removed with the
+ * `STORABLE` declaration it reported.
+ */
+import { ProviderAddressLookupPlaceIdRetention, } from '@wildo-ai/saas-models/public-runtime';
+/** Why an address-lookup selection was not accepted. */
+export var ProviderAddressLookupRejectionKind;
+(function (ProviderAddressLookupRejectionKind) {
+    /** The component returned a place id although it declared it returns none. */
+    ProviderAddressLookupRejectionKind["PLACE_ID_CONTRADICTS_DECLARATION"] = "PLACE_ID_CONTRADICTS_DECLARATION";
+    /** The address it returned does not satisfy the receiving field's own schema. */
+    ProviderAddressLookupRejectionKind["ADDRESS_REFUSED_BY_FIELD"] = "ADDRESS_REFUSED_BY_FIELD";
+})(ProviderAddressLookupRejectionKind || (ProviderAddressLookupRejectionKind = {}));
+export function receiveProviderAddressLookupSelection(input) {
+    // Absent means NONE: a component that says nothing about place ids is read as returning none, which is
+    // the reading that can never store a vendor key by default.
+    const declared = input.descriptor?.placeIdRetention ?? ProviderAddressLookupPlaceIdRetention.NONE;
+    const { address, placeId } = input.selection;
+    if (placeId !== undefined && declared === ProviderAddressLookupPlaceIdRetention.NONE) {
+        return {
+            rejection: {
+                kind: ProviderAddressLookupRejectionKind.PLACE_ID_CONTRADICTS_DECLARATION,
+                providerRef: input.providerRef,
+                message: `Provider "${input.providerRef}" declared its address lookup returns no place id and returned one. `
+                    + 'Whether a vendor place id is returned is a declaration (`placeIdRetention`), not a runtime choice, '
+                    + 'so the selection is refused rather than guessed at.',
+            },
+        };
+    }
+    if (input.addressSchema !== undefined && !input.addressSchema.safeParse(address).success) {
+        return {
+            rejection: {
+                kind: ProviderAddressLookupRejectionKind.ADDRESS_REFUSED_BY_FIELD,
+                providerRef: input.providerRef,
+                message: `Provider "${input.providerRef}" returned an address the field's own schema refuses (a country outside `
+                    + 'the ones it accepts, or a missing required part). The lookup is a suggestion; the field decides.',
+            },
+        };
+    }
+    return {
+        accepted: {
+            address,
+            ...(placeId !== undefined ? { placeId } : {}),
+        },
+    };
+}
+//# sourceMappingURL=provider-address-lookup-selection.frontend.utils.js.map

package/dist/esm/core/external-providers/provider-address-lookup-selection.frontend.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-address-lookup-selection.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/provider-address-lookup-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EACL,qCAAqC,GAEtC,MAAM,sCAAsC,CAAC;AAG9C,wDAAwD;AACxD,MAAM,CAAN,IAAY,kCAKX;AALD,WAAY,kCAAkC;IAC5C,8EAA8E;IAC9E,2GAAqE,CAAA;IACrE,iFAAiF;IACjF,2FAAqD,CAAA;AACvD,CAAC,EALW,kCAAkC,KAAlC,kCAAkC,QAK7C;AAeD,MAAM,UAAU,qCAAqC,CAAC,KAOrD;IACC,uGAAuG;IACvG,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,gBAAgB,IAAI,qCAAqC,CAAC,IAAI,CAAC;IAClG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IAE7C,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,qCAAqC,CAAC,IAAI,EAAE,CAAC;QACrF,OAAO;YACL,SAAS,EAAE;gBACT,IAAI,EAAE,kCAAkC,CAAC,gCAAgC;gBACzE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,sEAAsE;sBAClG,qGAAqG;sBACrG,qDAAqD;aAC1D;SACF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QACzF,OAAO;YACL,SAAS,EAAE;gBACT,IAAI,EAAE,kCAAkC,CAAC,wBAAwB;gBACjE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,0EAA0E;sBACtG,kGAAkG;aACvG;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE;YACR,OAAO;YACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Holding what an address-lookup component hands back to the contract it DECLARED (#1702) — the\n * `FRONTEND_ADDRESS_LOOKUP` twin of `receiveProviderFileSelections`, and the slot the address field of #561\n * fills from.\n *\n * ## What is checked, and why here\n *\n * The address itself is the application's value: the field validates it against its own `z_address()`\n * schema, as it validates a typed address, and this function applies that schema when the caller passes it\n * so a lookup cannot hand the field a value the field would refuse.\n *\n * The vendor's PLACE ID is the part a vendor's terms govern, so a component declares once, statically,\n * whether it returns one (`ProviderAddressLookupPlaceIdRetention`), and this function holds every selection\n * to that declaration (the #383 rule). A component that declared `NONE` and returns a place id contradicts\n * itself and is refused — a surface that silently kept the id would be holding a vendor key nobody reviewed\n * the terms for. A `TRANSIENT` id is passed through for the interaction.\n *\n * Nothing here says the id may be stored, because nothing may store it (#561 D3): the address field keeps\n * only the address (`AddressFieldLookupHost.applyAddress` takes an `AddressValue`, which has no place for one).\n * The `placeIdStorable` flag this function returned until #561 had no reader and was removed with the\n * `STORABLE` declaration it reported.\n */\n\nimport type { z } from 'zod';\nimport {\n  ProviderAddressLookupPlaceIdRetention,\n  type ProviderFrontendComponentDescriptor,\n} from '@wildo-ai/saas-models/public-runtime';\nimport type { ProviderAddressLookupSelection } from '@wildo-ai/saas-models';\n\n/** Why an address-lookup selection was not accepted. */\nexport enum ProviderAddressLookupRejectionKind {\n  /** The component returned a place id although it declared it returns none. */\n  PLACE_ID_CONTRADICTS_DECLARATION = 'PLACE_ID_CONTRADICTS_DECLARATION',\n  /** The address it returned does not satisfy the receiving field's own schema. */\n  ADDRESS_REFUSED_BY_FIELD = 'ADDRESS_REFUSED_BY_FIELD',\n}\n\nexport interface ProviderAddressLookupRejection {\n  readonly kind: ProviderAddressLookupRejectionKind;\n  readonly providerRef: string;\n  readonly message: string;\n}\n\n/** A selection the field may take: its address, and a place id only when the component declared one (never stored). */\nexport type AcceptedProviderAddressLookupSelection = ProviderAddressLookupSelection;\n\nexport type ProviderAddressLookupOutcome =\n  | { readonly accepted: AcceptedProviderAddressLookupSelection; readonly rejection?: undefined }\n  | { readonly accepted?: undefined; readonly rejection: ProviderAddressLookupRejection };\n\nexport function receiveProviderAddressLookupSelection(input: {\n  readonly providerRef: string;\n  /** The component's declaration, from `providerComponentRegistry.describe(FRONTEND_ADDRESS_LOOKUP, ref)`. */\n  readonly descriptor: ProviderFrontendComponentDescriptor | undefined;\n  readonly selection: ProviderAddressLookupSelection;\n  /** The receiving field's own `z_address()` schema. When given, an address it refuses is refused here. */\n  readonly addressSchema?: z.ZodType;\n}): ProviderAddressLookupOutcome {\n  // Absent means NONE: a component that says nothing about place ids is read as returning none, which is\n  // the reading that can never store a vendor key by default.\n  const declared = input.descriptor?.placeIdRetention ?? ProviderAddressLookupPlaceIdRetention.NONE;\n  const { address, placeId } = input.selection;\n\n  if (placeId !== undefined && declared === ProviderAddressLookupPlaceIdRetention.NONE) {\n    return {\n      rejection: {\n        kind: ProviderAddressLookupRejectionKind.PLACE_ID_CONTRADICTS_DECLARATION,\n        providerRef: input.providerRef,\n        message:\n          `Provider \"${input.providerRef}\" declared its address lookup returns no place id and returned one. `\n          + 'Whether a vendor place id is returned is a declaration (`placeIdRetention`), not a runtime choice, '\n          + 'so the selection is refused rather than guessed at.',\n      },\n    };\n  }\n\n  if (input.addressSchema !== undefined && !input.addressSchema.safeParse(address).success) {\n    return {\n      rejection: {\n        kind: ProviderAddressLookupRejectionKind.ADDRESS_REFUSED_BY_FIELD,\n        providerRef: input.providerRef,\n        message:\n          `Provider \"${input.providerRef}\" returned an address the field's own schema refuses (a country outside `\n          + 'the ones it accepts, or a missing required part). The lookup is a suggestion; the field decides.',\n      },\n    };\n  }\n\n  return {\n    accepted: {\n      address,\n      ...(placeId !== undefined ? { placeId } : {}),\n    },\n  };\n}\n"]}

package/dist/esm/core/external-providers/provider-file-selection.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-file-selection.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/provider-file-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EACL,iCAAiC,EACjC,KAAK,qBAAqB,EAC1B,KAAK,mCAAmC,EACzC,MAAM,sCAAsC,CAAC;AAE9C,0DAA0D;AAC1D,oBAAY,kCAAkC;IAC5C;;;;;OAKG;IACH,6BAA6B,kCAAkC;IAC/D;;;;;OAKG;IACH,gCAAgC,qCAAqC;CACtE;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,iCAAiC,CAAC;IACtD,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,4BAA4B;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,SAAS,8BAA8B,EAAE,CAAC;CAChE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,mCAAmC,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACvD,GAAG,4BAA4B,CAqC/B"}
+{"version":3,"file":"provider-file-selection.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/provider-file-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EACL,iCAAiC,EACjC,KAAK,qBAAqB,EAC1B,KAAK,mCAAmC,EACzC,MAAM,sCAAsC,CAAC;AAE9C,0DAA0D;AAC1D,oBAAY,kCAAkC;IAC5C;;;;;OAKG;IACH,6BAA6B,kCAAkC;IAC/D;;;;;OAKG;IACH,gCAAgC,qCAAqC;CACtE;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,iCAAiC,CAAC;IACtD,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,4BAA4B;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,SAAS,8BAA8B,EAAE,CAAC;CAChE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,mCAAmC,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACvD,GAAG,4BAA4B,CAqC/B"}

package/dist/esm/core/external-providers/provider-file-selection.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-file-selection.frontend.utils.js","sourceRoot":"","sources":["../../../../src/core/external-providers/provider-file-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAQH,0DAA0D;AAC1D,MAAM,CAAN,IAAY,kCAeX;AAfD,WAAY,kCAAkC;IAC5C;;;;;OAKG;IACH,qGAA+D,CAAA;IAC/D;;;;;OAKG;IACH,2GAAqE,CAAA;AACvE,CAAC,EAfW,kCAAkC,KAAlC,kCAAkC,QAe7C;AAkBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAErD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,CAAC;oBACX,IAAI,EAAE,kCAAkC,CAAC,6BAA6B;oBACtE,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,8CAA8C;0BAC1E,qFAAqF;0BACrF,wFAAwF;0BACxF,4FAA4F;iBACjG,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC1C,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,kCAAkC,CAAC,gCAAgC;YACzE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ;YACR,QAAQ,EAAE,SAAS,CAAC,IAAI;YACxB,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,wCAAwC,QAAQ,mBAAmB;kBAC/F,IAAI,SAAS,CAAC,IAAI,0EAA0E;kBAC5F,6FAA6F;kBAC7F,yEAAyE;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE;QAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Holding a provider's file picker to the selection contract it DECLARED.\n *\n * ## Why this exists at all\n *\n * Issue #383 (Q5) settled what \"an application calls a third party directly from\n * a custom frontend component\" means when the component is a file picker, and\n * the answer was **per vendor, declared**: a picker for a credentialed vendor\n * hands back an opaque remote reference the backend resolves, a picker running\n * on a browser-safe grant hands back bytes or a URL the browser already has, and\n * a provider states which of the two it is.\n *\n * The union alone would have been the hedge that decision rejected. Three arms\n * with a runtime discriminant is a shape that says *\"one of these three, we will\n * find out when it happens\"* — and an application's file field cannot be written\n * against that: the reference arm has to be posted to the executor door, the\n * browser-readable arms go through the ordinary upload path, and choosing\n * between them at runtime means every field carries both.\n *\n * So the declaration is enforced here. A provider that declares\n * `REMOTE_REFERENCE` and hands back a `File` is refused, loudly, naming both\n * sides. Without this the declaration would be decoration, and a reviewer\n * reading a provider's manifest would be reading a wish rather than a contract.\n *\n * ## It is the SANCTIONED seam, not the only possible one\n *\n * `ProviderFilePickerHost` is the path that calls this, and it is what a surface\n * should use. But the registry and the `useProviderComponent` hooks are public\n * too — an application can resolve a provider's component itself, cast it and\n * mount it, and a selection then reaches that application without passing\n * through here.\n *\n * That is deliberate and it is stated rather than closed off: a framework that\n * could only mount a provider component one way would be unable to serve a\n * surface the framework has not thought of, which is the whole reason the\n * capability vocabulary is open. What the framework guarantees is that ITS\n * routing honours the declaration; an application taking the component directly\n * has taken the contract with it, and should call this function.\n *\n * An earlier revision of this paragraph said \"the one seam every selection\n * crosses\", which stopped being true in the same change that exported the other\n * path. Kept as a correction because a load-bearing sentence that quietly goes\n * false is how the next reader inherits a guarantee nobody makes.\n *\n * ## Why refusal is REPORTED rather than thrown\n *\n * This runs inside a picker's own callback, which is usually a vendor SDK's\n * event handler rather than a React render. A throw there does not reach an\n * error boundary — it reaches the vendor's own dispatcher, which typically\n * swallows it — so the surface would stop responding with nothing on screen and\n * nothing in the log. A returned result lets the mounting surface show the user\n * that the picker misbehaved and lets the diagnostic name the provider.\n */\n\nimport {\n  ProviderFrontendSelectionDelivery,\n  type ProviderFileSelection,\n  type ProviderFrontendComponentDescriptor,\n} from '@wildo-ai/saas-models/public-runtime';\n\n/** Why a selection a picker produced was not accepted. */\nexport enum ProviderFileSelectionRejectionKind {\n  /**\n   * The provider declared no `selectionDelivery` for its file picker, so the\n   * framework cannot know whether the result is a backend reference or bytes —\n   * and therefore cannot route it anywhere. An authoring defect in the provider\n   * package, not a user error.\n   */\n  PROVIDER_DECLARED_NO_DELIVERY = 'PROVIDER_DECLARED_NO_DELIVERY',\n  /**\n   * The picker returned a selection whose kind is not the one it declared. This\n   * is the case the whole declaration exists to catch: a `REMOTE_REFERENCE`\n   * provider handing back a `File` means bytes reached the browser on a path\n   * nobody reviewed for it.\n   */\n  DELIVERY_CONTRADICTS_DECLARATION = 'DELIVERY_CONTRADICTS_DECLARATION',\n}\n\nexport interface ProviderFileSelectionRejection {\n  readonly kind: ProviderFileSelectionRejectionKind;\n  readonly providerRef: string;\n  readonly message: string;\n  /** The delivery the provider declared, when it declared one. */\n  readonly declared?: ProviderFrontendSelectionDelivery;\n  /** The kind the picker actually produced, for the contradiction case. */\n  readonly received?: ProviderFileSelection['kind'];\n}\n\nexport interface ProviderFileSelectionOutcome {\n  /** Selections that match the declaration. Empty when anything was rejected — see below. */\n  readonly accepted: readonly ProviderFileSelection[];\n  readonly rejections: readonly ProviderFileSelectionRejection[];\n}\n\n/**\n * Checks every selection against what the provider declared.\n *\n * **All or nothing.** One contradicting selection rejects the whole batch rather\n * than the offending item, and that is deliberate: a picker that returned three\n * files of which one has the wrong shape is a picker whose contract is not what\n * it says, and accepting the other two would leave an application holding a\n * partial result it never asked for from a component it can no longer trust.\n * Silently dropping one of a user's three chosen files is the worse outcome —\n * the user sees two, has no idea why, and nothing anywhere says so.\n */\nexport function receiveProviderFileSelections(input: {\n  readonly providerRef: string;\n  readonly descriptor: ProviderFrontendComponentDescriptor | undefined;\n  readonly selections: readonly ProviderFileSelection[];\n}): ProviderFileSelectionOutcome {\n  const declared = input.descriptor?.selectionDelivery;\n\n  if (declared === undefined) {\n    return {\n      accepted: [],\n      rejections: [{\n        kind: ProviderFileSelectionRejectionKind.PROVIDER_DECLARED_NO_DELIVERY,\n        providerRef: input.providerRef,\n        message:\n          `Provider \"${input.providerRef}\" contributes a file picker but declares no `\n          + '`selectionDelivery`, so the framework cannot tell whether a selection is a backend '\n          + 'reference or bytes the browser already holds — and therefore cannot route it. Declare '\n          + 'one on the component: `components: { FRONTEND_FILE_PICKER: { load, selectionDelivery } }`.',\n      }],\n    };\n  }\n\n  const rejections: ProviderFileSelectionRejection[] = [];\n  for (const selection of input.selections) {\n    if (selection.kind === declared) continue;\n    rejections.push({\n      kind: ProviderFileSelectionRejectionKind.DELIVERY_CONTRADICTS_DECLARATION,\n      providerRef: input.providerRef,\n      declared,\n      received: selection.kind,\n      message:\n        `Provider \"${input.providerRef}\" declared its file picker delivers \"${declared}\" and returned a `\n        + `\"${selection.kind}\" selection. Which one a provider emits is a declaration, not a runtime `\n        + 'choice (issue #383): a surface routes a selection before it mounts the picker, so a picker '\n        + 'that contradicts its own declaration is refused rather than guessed at.',\n    });\n  }\n\n  return rejections.length > 0\n    ? { accepted: [], rejections }\n    : { accepted: input.selections, rejections: [] };\n}\n"]}
+{"version":3,"file":"provider-file-selection.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/provider-file-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAQH,0DAA0D;AAC1D,MAAM,CAAN,IAAY,kCAeX;AAfD,WAAY,kCAAkC;IAC5C;;;;;OAKG;IACH,qGAA+D,CAAA;IAC/D;;;;;OAKG;IACH,2GAAqE,CAAA;AACvE,CAAC,EAfW,kCAAkC,KAAlC,kCAAkC,QAe7C;AAkBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAErD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,CAAC;oBACX,IAAI,EAAE,kCAAkC,CAAC,6BAA6B;oBACtE,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,8CAA8C;0BAC1E,qFAAqF;0BACrF,wFAAwF;0BACxF,4FAA4F;iBACjG,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC1C,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,kCAAkC,CAAC,gCAAgC;YACzE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ;YACR,QAAQ,EAAE,SAAS,CAAC,IAAI;YACxB,OAAO,EACL,aAAa,KAAK,CAAC,WAAW,wCAAwC,QAAQ,mBAAmB;kBAC/F,IAAI,SAAS,CAAC,IAAI,0EAA0E;kBAC5F,6FAA6F;kBAC7F,yEAAyE;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE;QAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Holding a provider's file picker to the selection contract it DECLARED.\n *\n * ## Why this exists at all\n *\n * Issue #383 (Q5) settled what \"an application calls a third party directly from\n * a custom frontend component\" means when the component is a file picker, and\n * the answer was **per vendor, declared**: a picker for a credentialed vendor\n * hands back an opaque remote reference the backend resolves, a picker running\n * on a browser-safe grant hands back bytes or a URL the browser already has, and\n * a provider states which of the two it is.\n *\n * The union alone would have been the hedge that decision rejected. Three arms\n * with a runtime discriminant is a shape that says *\"one of these three, we will\n * find out when it happens\"* — and an application's file field cannot be written\n * against that: the reference arm has to be posted to the executor door, the\n * browser-readable arms go through the ordinary upload path, and choosing\n * between them at runtime means every field carries both.\n *\n * So the declaration is enforced here. A provider that declares\n * `REMOTE_REFERENCE` and hands back a `File` is refused, loudly, naming both\n * sides. Without this the declaration would be decoration, and a reviewer\n * reading a provider's manifest would be reading a wish rather than a contract.\n *\n * ## It is the SANCTIONED seam, not the only possible one\n *\n * `ProviderFilePickerHost` is the path that calls this, and it is what a surface\n * should use. But the registry and the `useProviderComponent` hooks are public\n * too — an application can resolve a provider's component itself, cast it and\n * mount it, and a selection then reaches that application without passing\n * through here.\n *\n * That is deliberate and it is stated rather than closed off: a framework that\n * could only mount a provider component one way would be unable to serve a\n * surface the framework has not thought of, which is the whole reason the\n * capability vocabulary is open. What the framework guarantees is that ITS\n * routing honours the declaration; an application taking the component directly\n * has taken the contract with it, and should call this function.\n *\n * An earlier revision of this paragraph said \"the one seam every selection\n * crosses\", which stopped being true in the same change that exported the other\n * path. Kept as a correction because a load-bearing sentence that quietly goes\n * false is how the next reader inherits a guarantee nobody makes.\n *\n * ## Why refusal is REPORTED rather than thrown\n *\n * This runs inside a picker's own callback, which is usually a vendor SDK's\n * event handler rather than a React render. A throw there does not reach an\n * error boundary — it reaches the vendor's own dispatcher, which typically\n * swallows it — so the surface would stop responding with nothing on screen and\n * nothing in the log. A returned result lets the mounting surface show the user\n * that the picker misbehaved and lets the diagnostic name the provider.\n */\n\nimport {\n  ProviderFrontendSelectionDelivery,\n  type ProviderFileSelection,\n  type ProviderFrontendComponentDescriptor,\n} from '@wildo-ai/saas-models/public-runtime';\n\n/** Why a selection a picker produced was not accepted. */\nexport enum ProviderFileSelectionRejectionKind {\n  /**\n   * The provider declared no `selectionDelivery` for its file picker, so the\n   * framework cannot know whether the result is a backend reference or bytes —\n   * and therefore cannot route it anywhere. An authoring defect in the provider\n   * package, not a user error.\n   */\n  PROVIDER_DECLARED_NO_DELIVERY = 'PROVIDER_DECLARED_NO_DELIVERY',\n  /**\n   * The picker returned a selection whose kind is not the one it declared. This\n   * is the case the whole declaration exists to catch: a `REMOTE_REFERENCE`\n   * provider handing back a `File` means bytes reached the browser on a path\n   * nobody reviewed for it.\n   */\n  DELIVERY_CONTRADICTS_DECLARATION = 'DELIVERY_CONTRADICTS_DECLARATION',\n}\n\nexport interface ProviderFileSelectionRejection {\n  readonly kind: ProviderFileSelectionRejectionKind;\n  readonly providerRef: string;\n  readonly message: string;\n  /** The delivery the provider declared, when it declared one. */\n  readonly declared?: ProviderFrontendSelectionDelivery;\n  /** The kind the picker actually produced, for the contradiction case. */\n  readonly received?: ProviderFileSelection['kind'];\n}\n\nexport interface ProviderFileSelectionOutcome {\n  /** Selections that match the declaration. Empty when anything was rejected — see below. */\n  readonly accepted: readonly ProviderFileSelection[];\n  readonly rejections: readonly ProviderFileSelectionRejection[];\n}\n\n/**\n * Checks every selection against what the provider declared.\n *\n * **All or nothing.** One contradicting selection rejects the whole batch rather\n * than the offending item, and that is deliberate: a picker that returned three\n * files of which one has the wrong shape is a picker whose contract is not what\n * it says, and accepting the other two would leave an application holding a\n * partial result it never asked for from a component it can no longer trust.\n * Silently dropping one of a user's three chosen files is the worse outcome —\n * the user sees two, has no idea why, and nothing anywhere says so.\n */\nexport function receiveProviderFileSelections(input: {\n  readonly providerRef: string;\n  readonly descriptor: ProviderFrontendComponentDescriptor | undefined;\n  readonly selections: readonly ProviderFileSelection[];\n}): ProviderFileSelectionOutcome {\n  const declared = input.descriptor?.selectionDelivery;\n\n  if (declared === undefined) {\n    return {\n      accepted: [],\n      rejections: [{\n        kind: ProviderFileSelectionRejectionKind.PROVIDER_DECLARED_NO_DELIVERY,\n        providerRef: input.providerRef,\n        message:\n          `Provider \"${input.providerRef}\" contributes a file picker but declares no `\n          + '`selectionDelivery`, so the framework cannot tell whether a selection is a backend '\n          + 'reference or bytes the browser already holds — and therefore cannot route it. Declare '\n          + 'one on the component: `components: { FRONTEND_FILE_PICKER: { load, selectionDelivery } }`.',\n      }],\n    };\n  }\n\n  const rejections: ProviderFileSelectionRejection[] = [];\n  for (const selection of input.selections) {\n    if (selection.kind === declared) continue;\n    rejections.push({\n      kind: ProviderFileSelectionRejectionKind.DELIVERY_CONTRADICTS_DECLARATION,\n      providerRef: input.providerRef,\n      declared,\n      received: selection.kind,\n      message:\n        `Provider \"${input.providerRef}\" declared its file picker delivers \"${declared}\" and returned a `\n        + `\"${selection.kind}\" selection. Which one a provider emits is a declaration, not a runtime `\n        + 'choice (issue #383): a surface routes a selection before it mounts the picker, so a picker '\n        + 'that contradicts its own declaration is refused rather than guessed at.',\n    });\n  }\n\n  return rejections.length > 0\n    ? { accepted: [], rejections }\n    : { accepted: input.selections, rejections: [] };\n}\n"]}

package/dist/esm/core/external-providers/provider-scope-reauthorization-offers.frontend.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The re-authorization OFFERS a browser has been handed and not yet acted on (#1671, #1727).
+ *
+ * ## Why a store, and why it lives here
+ *
+ * A provider operation refused for a missing scope answers `409 PROVIDER_OPERATION_SCOPE_NOT_GRANTED` carrying a
+ * `reauthorization` offer: which scopes a person may add by re-authorizing the connection, for which operation. The
+ * refusal happens wherever the operation was called — a feature's own screen, a picker loading its options — while
+ * growing the grant is an act on the CONNECTION, which the connected-accounts screen owns. Something has to carry the
+ * offer from the one to the other, or the person meets a dead end at the feature and a screen that knows nothing
+ * about it.
+ *
+ * The manual-calls client records every offer it sees (`executeProviderOperation`, `loadProviderOperationInputOptions`),
+ * so no feature has to remember to; the connected-accounts screen reads them and shows "grant more access" on the
+ * connection they belong to.
+ *
+ * ## Keyed on the OWNER as well as the connection
+ *
+ * One vendor connection exists per owner: a person's own Microsoft grant and their organization's Microsoft grant are
+ * two grants with one `connectionRef`. An offer keyed on the connection alone would appear on whichever owner's screen
+ * was opened next — and pressing it would grow a DIFFERENT owner's grant while its audit row named an operation that
+ * was refused on the first. So an offer is recorded under the owner the refused call spent (`ownerScope`, `ownerId`),
+ * and a screen reads only its own owner's.
+ *
+ * ## Deliberately in-memory, one per owner and connection
+ *
+ * An offer is a statement about ONE refused call in this browser session. It is not persisted: a reload loses it, and
+ * the next refused call records it again — the backend recomputes the offer on every refusal, so nothing durable is
+ * lost and nothing stale can outlive the page. Growing the grant leaves the page for the vendor, which also ends it.
+ * The latest refusal replaces an earlier one for the same owner and connection; scopes the connection has since been
+ * granted are filtered by the screen, not here.
+ */
+import type { ProviderScopeReauthorizationOffer } from '@wildo-ai/saas-models';
+/** Whose grant a refused call spent — the connection target's owner half. */
+export interface ProviderScopeReauthorizationOfferOwner {
+    readonly ownerScope: string;
+    /** Absent for the application's own connection, which no settings screen grows. */
+    readonly ownerId?: string;
+}
+/**
+ * The store key of one owner's offer for one connection. JSON of a fixed-order tuple rather than a joined string, so
+ * no separator a ref or an id could contain can make two different owners collide.
+ */
+export declare function providerScopeReauthorizationOfferKey(owner: ProviderScopeReauthorizationOfferOwner, connectionRef: string): string;
+/**
+ * Whether a refused call's body carries a re-authorization offer — read by SHAPE, so the frontend holds no copy of the
+ * backend's door error code. An offer names its connection, the ref to start through, the operation and the scope
+ * lists; anything missing one of them is not an offer and is ignored rather than half-recorded.
+ */
+export declare function readProviderScopeReauthorizationOffer(body: unknown): ProviderScopeReauthorizationOffer | undefined;
+/** Record an offer for the owner whose grant the refused call spent, replacing an earlier one for that connection. */
+export declare function recordProviderScopeReauthorizationOffer(owner: ProviderScopeReauthorizationOfferOwner, offer: ProviderScopeReauthorizationOffer): void;
+/** Forget one owner's offer for one connection — after it was acted on, or when the connection is gone. */
+export declare function clearProviderScopeReauthorizationOffer(owner: ProviderScopeReauthorizationOfferOwner, connectionRef: string): void;
+/** Forget every offer. For a test's `beforeEach`. */
+export declare function clearAllProviderScopeReauthorizationOffers(): void;
+/** Every pending offer, keyed by {@link providerScopeReauthorizationOfferKey}. */
+export declare function getProviderScopeReauthorizationOffers(): ReadonlyMap<string, ProviderScopeReauthorizationOffer>;
+/** One owner's pending offer for one connection, from a snapshot of the store. */
+export declare function findProviderScopeReauthorizationOffer(offers: ReadonlyMap<string, ProviderScopeReauthorizationOffer>, owner: ProviderScopeReauthorizationOfferOwner, connectionRef: string): ProviderScopeReauthorizationOffer | undefined;
+/** The pending offers, re-rendering the caller when one is recorded or cleared. */
+export declare function useProviderScopeReauthorizationOffers(): ReadonlyMap<string, ProviderScopeReauthorizationOffer>;
+//# sourceMappingURL=provider-scope-reauthorization-offers.frontend.d.ts.map

package/dist/esm/core/external-providers/provider-scope-reauthorization-offers.frontend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-scope-reauthorization-offers.frontend.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/provider-scope-reauthorization-offers.frontend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AAE/E,6EAA6E;AAC7E,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAYD;;;GAGG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,sCAAsC,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAEjI;AAED;;;;GAIG;AACH,wBAAgB,qCAAqC,CAAC,IAAI,EAAE,OAAO,GAAG,iCAAiC,GAAG,SAAS,CAMlH;AAED,sHAAsH;AACtH,wBAAgB,uCAAuC,CAAC,KAAK,EAAE,sCAAsC,EAAE,KAAK,EAAE,iCAAiC,GAAG,IAAI,CAIrJ;AAED,2GAA2G;AAC3G,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,sCAAsC,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAMjI;AAED,qDAAqD;AACrD,wBAAgB,0CAA0C,IAAI,IAAI,CAGjE;AAED,kFAAkF;AAClF,wBAAgB,qCAAqC,IAAI,WAAW,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAE9G;AAED,kFAAkF;AAClF,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,iCAAiC,CAAC,EAC9D,KAAK,EAAE,sCAAsC,EAC7C,aAAa,EAAE,MAAM,GACpB,iCAAiC,GAAG,SAAS,CAE/C;AAOD,mFAAmF;AACnF,wBAAgB,qCAAqC,IAAI,WAAW,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAE9G"}

package/dist/esm/core/external-providers/provider-scope-reauthorization-offers.frontend.js

@@ -0,0 +1,100 @@
+/**
+ * The re-authorization OFFERS a browser has been handed and not yet acted on (#1671, #1727).
+ *
+ * ## Why a store, and why it lives here
+ *
+ * A provider operation refused for a missing scope answers `409 PROVIDER_OPERATION_SCOPE_NOT_GRANTED` carrying a
+ * `reauthorization` offer: which scopes a person may add by re-authorizing the connection, for which operation. The
+ * refusal happens wherever the operation was called — a feature's own screen, a picker loading its options — while
+ * growing the grant is an act on the CONNECTION, which the connected-accounts screen owns. Something has to carry the
+ * offer from the one to the other, or the person meets a dead end at the feature and a screen that knows nothing
+ * about it.
+ *
+ * The manual-calls client records every offer it sees (`executeProviderOperation`, `loadProviderOperationInputOptions`),
+ * so no feature has to remember to; the connected-accounts screen reads them and shows "grant more access" on the
+ * connection they belong to.
+ *
+ * ## Keyed on the OWNER as well as the connection
+ *
+ * One vendor connection exists per owner: a person's own Microsoft grant and their organization's Microsoft grant are
+ * two grants with one `connectionRef`. An offer keyed on the connection alone would appear on whichever owner's screen
+ * was opened next — and pressing it would grow a DIFFERENT owner's grant while its audit row named an operation that
+ * was refused on the first. So an offer is recorded under the owner the refused call spent (`ownerScope`, `ownerId`),
+ * and a screen reads only its own owner's.
+ *
+ * ## Deliberately in-memory, one per owner and connection
+ *
+ * An offer is a statement about ONE refused call in this browser session. It is not persisted: a reload loses it, and
+ * the next refused call records it again — the backend recomputes the offer on every refusal, so nothing durable is
+ * lost and nothing stale can outlive the page. Growing the grant leaves the page for the vendor, which also ends it.
+ * The latest refusal replaces an earlier one for the same owner and connection; scopes the connection has since been
+ * granted are filtered by the screen, not here.
+ */
+import { useSyncExternalStore } from 'react';
+let offersByKey = new Map();
+const listeners = new Set();
+function publish(next) {
+    offersByKey = next;
+    for (const listener of listeners)
+        listener();
+}
+/**
+ * The store key of one owner's offer for one connection. JSON of a fixed-order tuple rather than a joined string, so
+ * no separator a ref or an id could contain can make two different owners collide.
+ */
+export function providerScopeReauthorizationOfferKey(owner, connectionRef) {
+    return JSON.stringify([owner.ownerScope, owner.ownerId ?? null, connectionRef]);
+}
+/**
+ * Whether a refused call's body carries a re-authorization offer — read by SHAPE, so the frontend holds no copy of the
+ * backend's door error code. An offer names its connection, the ref to start through, the operation and the scope
+ * lists; anything missing one of them is not an offer and is ignored rather than half-recorded.
+ */
+export function readProviderScopeReauthorizationOffer(body) {
+    const offer = body?.reauthorization;
+    if (offer === undefined || offer === null || typeof offer !== 'object')
+        return undefined;
+    if (typeof offer.connectionRef !== 'string' || typeof offer.providerRef !== 'string' || typeof offer.operationId !== 'string')
+        return undefined;
+    if (!Array.isArray(offer.requestableScopes) || !Array.isArray(offer.administratorConsentScopes) || !Array.isArray(offer.unrequestableScopes))
+        return undefined;
+    return offer;
+}
+/** Record an offer for the owner whose grant the refused call spent, replacing an earlier one for that connection. */
+export function recordProviderScopeReauthorizationOffer(owner, offer) {
+    const next = new Map(offersByKey);
+    next.set(providerScopeReauthorizationOfferKey(owner, offer.connectionRef), offer);
+    publish(next);
+}
+/** Forget one owner's offer for one connection — after it was acted on, or when the connection is gone. */
+export function clearProviderScopeReauthorizationOffer(owner, connectionRef) {
+    const key = providerScopeReauthorizationOfferKey(owner, connectionRef);
+    if (!offersByKey.has(key))
+        return;
+    const next = new Map(offersByKey);
+    next.delete(key);
+    publish(next);
+}
+/** Forget every offer. For a test's `beforeEach`. */
+export function clearAllProviderScopeReauthorizationOffers() {
+    if (offersByKey.size === 0)
+        return;
+    publish(new Map());
+}
+/** Every pending offer, keyed by {@link providerScopeReauthorizationOfferKey}. */
+export function getProviderScopeReauthorizationOffers() {
+    return offersByKey;
+}
+/** One owner's pending offer for one connection, from a snapshot of the store. */
+export function findProviderScopeReauthorizationOffer(offers, owner, connectionRef) {
+    return offers.get(providerScopeReauthorizationOfferKey(owner, connectionRef));
+}
+function subscribe(listener) {
+    listeners.add(listener);
+    return () => { listeners.delete(listener); };
+}
+/** The pending offers, re-rendering the caller when one is recorded or cleared. */
+export function useProviderScopeReauthorizationOffers() {
+    return useSyncExternalStore(subscribe, getProviderScopeReauthorizationOffers, getProviderScopeReauthorizationOffers);
+}
+//# sourceMappingURL=provider-scope-reauthorization-offers.frontend.js.map

package/dist/esm/core/external-providers/provider-scope-reauthorization-offers.frontend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-scope-reauthorization-offers.frontend.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/provider-scope-reauthorization-offers.frontend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAY7C,IAAI,WAAW,GAA2D,IAAI,GAAG,EAAE,CAAC;AACpF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAY,CAAC;AAEtC,SAAS,OAAO,CAAC,IAA4D;IAC3E,WAAW,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAA6C,EAAE,aAAqB;IACvH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CAAC,IAAa;IACjE,MAAM,KAAK,GAAI,IAAyD,EAAE,eAAyE,CAAC;IACpJ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzF,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChJ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/J,OAAO,KAA0C,CAAC;AACpD,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,uCAAuC,CAAC,KAA6C,EAAE,KAAwC;IAC7I,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,oCAAoC,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,sCAAsC,CAAC,KAA6C,EAAE,aAAqB;IACzH,MAAM,GAAG,GAAG,oCAAoC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACvE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,0CAA0C;IACxD,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IACnC,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;AACrB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,qCAAqC;IACnD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,qCAAqC,CACnD,MAA8D,EAC9D,KAA6C,EAC7C,aAAqB;IAErB,OAAO,MAAM,CAAC,GAAG,CAAC,oCAAoC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,SAAS,CAAC,QAAkB;IACnC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qCAAqC;IACnD,OAAO,oBAAoB,CAAC,SAAS,EAAE,qCAAqC,EAAE,qCAAqC,CAAC,CAAC;AACvH,CAAC","sourcesContent":["/**\n * The re-authorization OFFERS a browser has been handed and not yet acted on (#1671, #1727).\n *\n * ## Why a store, and why it lives here\n *\n * A provider operation refused for a missing scope answers `409 PROVIDER_OPERATION_SCOPE_NOT_GRANTED` carrying a\n * `reauthorization` offer: which scopes a person may add by re-authorizing the connection, for which operation. The\n * refusal happens wherever the operation was called — a feature's own screen, a picker loading its options — while\n * growing the grant is an act on the CONNECTION, which the connected-accounts screen owns. Something has to carry the\n * offer from the one to the other, or the person meets a dead end at the feature and a screen that knows nothing\n * about it.\n *\n * The manual-calls client records every offer it sees (`executeProviderOperation`, `loadProviderOperationInputOptions`),\n * so no feature has to remember to; the connected-accounts screen reads them and shows \"grant more access\" on the\n * connection they belong to.\n *\n * ## Keyed on the OWNER as well as the connection\n *\n * One vendor connection exists per owner: a person's own Microsoft grant and their organization's Microsoft grant are\n * two grants with one `connectionRef`. An offer keyed on the connection alone would appear on whichever owner's screen\n * was opened next — and pressing it would grow a DIFFERENT owner's grant while its audit row named an operation that\n * was refused on the first. So an offer is recorded under the owner the refused call spent (`ownerScope`, `ownerId`),\n * and a screen reads only its own owner's.\n *\n * ## Deliberately in-memory, one per owner and connection\n *\n * An offer is a statement about ONE refused call in this browser session. It is not persisted: a reload loses it, and\n * the next refused call records it again — the backend recomputes the offer on every refusal, so nothing durable is\n * lost and nothing stale can outlive the page. Growing the grant leaves the page for the vendor, which also ends it.\n * The latest refusal replaces an earlier one for the same owner and connection; scopes the connection has since been\n * granted are filtered by the screen, not here.\n */\n\nimport { useSyncExternalStore } from 'react';\nimport type { ProviderScopeReauthorizationOffer } from '@wildo-ai/saas-models';\n\n/** Whose grant a refused call spent — the connection target's owner half. */\nexport interface ProviderScopeReauthorizationOfferOwner {\n  readonly ownerScope: string;\n  /** Absent for the application's own connection, which no settings screen grows. */\n  readonly ownerId?: string;\n}\n\ntype Listener = () => void;\n\nlet offersByKey: ReadonlyMap<string, ProviderScopeReauthorizationOffer> = new Map();\nconst listeners = new Set<Listener>();\n\nfunction publish(next: ReadonlyMap<string, ProviderScopeReauthorizationOffer>): void {\n  offersByKey = next;\n  for (const listener of listeners) listener();\n}\n\n/**\n * The store key of one owner's offer for one connection. JSON of a fixed-order tuple rather than a joined string, so\n * no separator a ref or an id could contain can make two different owners collide.\n */\nexport function providerScopeReauthorizationOfferKey(owner: ProviderScopeReauthorizationOfferOwner, connectionRef: string): string {\n  return JSON.stringify([owner.ownerScope, owner.ownerId ?? null, connectionRef]);\n}\n\n/**\n * Whether a refused call's body carries a re-authorization offer — read by SHAPE, so the frontend holds no copy of the\n * backend's door error code. An offer names its connection, the ref to start through, the operation and the scope\n * lists; anything missing one of them is not an offer and is ignored rather than half-recorded.\n */\nexport function readProviderScopeReauthorizationOffer(body: unknown): ProviderScopeReauthorizationOffer | undefined {\n  const offer = (body as { reauthorization?: unknown } | null | undefined)?.reauthorization as Partial<ProviderScopeReauthorizationOffer> | undefined;\n  if (offer === undefined || offer === null || typeof offer !== 'object') return undefined;\n  if (typeof offer.connectionRef !== 'string' || typeof offer.providerRef !== 'string' || typeof offer.operationId !== 'string') return undefined;\n  if (!Array.isArray(offer.requestableScopes) || !Array.isArray(offer.administratorConsentScopes) || !Array.isArray(offer.unrequestableScopes)) return undefined;\n  return offer as ProviderScopeReauthorizationOffer;\n}\n\n/** Record an offer for the owner whose grant the refused call spent, replacing an earlier one for that connection. */\nexport function recordProviderScopeReauthorizationOffer(owner: ProviderScopeReauthorizationOfferOwner, offer: ProviderScopeReauthorizationOffer): void {\n  const next = new Map(offersByKey);\n  next.set(providerScopeReauthorizationOfferKey(owner, offer.connectionRef), offer);\n  publish(next);\n}\n\n/** Forget one owner's offer for one connection — after it was acted on, or when the connection is gone. */\nexport function clearProviderScopeReauthorizationOffer(owner: ProviderScopeReauthorizationOfferOwner, connectionRef: string): void {\n  const key = providerScopeReauthorizationOfferKey(owner, connectionRef);\n  if (!offersByKey.has(key)) return;\n  const next = new Map(offersByKey);\n  next.delete(key);\n  publish(next);\n}\n\n/** Forget every offer. For a test's `beforeEach`. */\nexport function clearAllProviderScopeReauthorizationOffers(): void {\n  if (offersByKey.size === 0) return;\n  publish(new Map());\n}\n\n/** Every pending offer, keyed by {@link providerScopeReauthorizationOfferKey}. */\nexport function getProviderScopeReauthorizationOffers(): ReadonlyMap<string, ProviderScopeReauthorizationOffer> {\n  return offersByKey;\n}\n\n/** One owner's pending offer for one connection, from a snapshot of the store. */\nexport function findProviderScopeReauthorizationOffer(\n  offers: ReadonlyMap<string, ProviderScopeReauthorizationOffer>,\n  owner: ProviderScopeReauthorizationOfferOwner,\n  connectionRef: string,\n): ProviderScopeReauthorizationOffer | undefined {\n  return offers.get(providerScopeReauthorizationOfferKey(owner, connectionRef));\n}\n\nfunction subscribe(listener: Listener): () => void {\n  listeners.add(listener);\n  return () => { listeners.delete(listener); };\n}\n\n/** The pending offers, re-rendering the caller when one is recorded or cleared. */\nexport function useProviderScopeReauthorizationOffers(): ReadonlyMap<string, ProviderScopeReauthorizationOffer> {\n  return useSyncExternalStore(subscribe, getProviderScopeReauthorizationOffers, getProviderScopeReauthorizationOffers);\n}\n"]}

package/dist/esm/core/features/FeatureGate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FeatureGate.d.ts","sourceRoot":"","sources":["../../../../src/core/features/FeatureGate.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAA0B,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM5F,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,YAAY,EAAE,mBAAmB,KAAK,KAAK,CAAC,SAAS,CAAC;CAC5E;AAED,wBAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,QAAQ,EACR,iBAAiB,GAClB,EAAE,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAgC7C"}
+{"version":3,"file":"FeatureGate.d.ts","sourceRoot":"","sources":["../../../../../src/core/features/FeatureGate.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAA0B,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM5F,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,YAAY,EAAE,mBAAmB,KAAK,KAAK,CAAC,SAAS,CAAC;CAC5E;AAED,wBAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,QAAQ,EACR,iBAAiB,GAClB,EAAE,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAgC7C"}

package/dist/esm/core/features/FeatureGate.js.map

@@ -1 +1 @@
-{"version":3,"file":"FeatureGate.js","sourceRoot":"","sources":["../../../../src/core/features/FeatureGate.tsx"],"names":[],"mappings":";AAsBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAA4B,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAgBrF,MAAM,UAAU,WAAW,CAAC,EAC1B,SAAS,EACT,QAAQ,EACR,iBAAiB,GACA;IACjB,MAAM,YAAY,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,yCAAyC;IACzC,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,4BAAG,QAAQ,GAAI,CAAC;IACzB,CAAC;IAED,iCAAiC;IACjC,IAAI,YAAY,CAAC,QAAQ,KAAK,6BAA6B,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,4BAAG,iBAAiB,CAAC,YAAY,CAAC,GAAI,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,OAAO,CACL,KAAC,wBAAwB,IACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAC/B,eAAe,EAAE,YAAY,CAAC,eAAe,EAC7C,SAAS,EAAE,YAAY,CAAC,SAAS,EACjC,mBAAmB,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,EACxD,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,EACnD,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,GAC3C,CACH,CAAC;AACJ,CAAC","sourcesContent":["/**\n * FeatureGate — Declarative feature gating component\n * \n * Wraps children with a feature availability check. If the feature is available,\n * renders children. If not, automatically renders the policy-driven prompt.\n * \n * Usage:\n *   const analyticsFeatureId = APP_FEATURE_IDS.ADVANCED_ANALYTICS;\n *\n *   <FeatureGate featureId={analyticsFeatureId}>\n *     <AnalyticsDashboard />\n *   </FeatureGate>\n * \n *   // Custom rendering when unavailable:\n *   <FeatureGate featureId={analyticsFeatureId} renderUnavailable={(availability) => (\n *     <MyCustomUpsell availability={availability} />\n *   )}>\n *     <AnalyticsDashboard />\n *   </FeatureGate>\n */\n\nimport React from 'react';\nimport { FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';\nimport { useFeatureAvailability, type FeatureAvailability } from './useFeatureAvailability';\nimport { FeatureUnavailablePrompt } from '~wildo-frontend-lib/components/feedback/features/feature-unavailable-prompt';\nimport { useBillingAction } from '~wildo-frontend-lib/core/billing/useBillingAction';\n\n// Note: useFeatureGate hook is in a separate file (useFeatureGate.ts) for React Fast Refresh compatibility.\n\nexport interface FeatureGateProps {\n  /** Feature identifier to check */\n  featureId: string;\n  /** Content to render when the feature is available */\n  children: React.ReactNode;\n  /** \n   * Optional custom renderer when the feature is unavailable.\n   * If omitted, renders the policy-driven FeatureUnavailablePrompt automatically.\n   */\n  renderUnavailable?: (availability: FeatureAvailability) => React.ReactNode;\n}\n\nexport function FeatureGate({\n  featureId,\n  children,\n  renderUnavailable,\n}: FeatureGateProps): React.JSX.Element | null {\n  const availability = useFeatureAvailability(featureId);\n  const billingAction = useBillingAction();\n\n  // Feature is available → render children\n  if (availability.isAvailable) {\n    return <>{children}</>;\n  }\n\n  // HIDE behavior → render nothing\n  if (availability.behavior === FeatureUnavailabilityBehavior.HIDE) {\n    return null;\n  }\n\n  // Custom renderer provided → delegate\n  if (renderUnavailable) {\n    return <>{renderUnavailable(availability)}</>;\n  }\n\n  // Default: policy-driven prompt. Inline FeatureGate surfaces do not expose a\n  // generic \"go back\" action because they are embedded into the current page.\n  return (\n    <FeatureUnavailablePrompt\n      behavior={availability.behavior}\n      missingFeatures={availability.missingFeatures}\n      limitInfo={availability.limitInfo}\n      upgradeOptionsCount={availability.upgradeOptions?.length}\n      customComponentRef={availability.customComponentRef}\n      onDismiss={undefined}\n      onAction={() => billingAction(availability)}\n    />\n  );\n}\n"]}
+{"version":3,"file":"FeatureGate.js","sourceRoot":"","sources":["../../../../../src/core/features/FeatureGate.tsx"],"names":[],"mappings":";AAsBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAA4B,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAgBrF,MAAM,UAAU,WAAW,CAAC,EAC1B,SAAS,EACT,QAAQ,EACR,iBAAiB,GACA;IACjB,MAAM,YAAY,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,yCAAyC;IACzC,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,4BAAG,QAAQ,GAAI,CAAC;IACzB,CAAC;IAED,iCAAiC;IACjC,IAAI,YAAY,CAAC,QAAQ,KAAK,6BAA6B,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,4BAAG,iBAAiB,CAAC,YAAY,CAAC,GAAI,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,OAAO,CACL,KAAC,wBAAwB,IACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAC/B,eAAe,EAAE,YAAY,CAAC,eAAe,EAC7C,SAAS,EAAE,YAAY,CAAC,SAAS,EACjC,mBAAmB,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,EACxD,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,EACnD,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,GAC3C,CACH,CAAC;AACJ,CAAC","sourcesContent":["/**\n * FeatureGate — Declarative feature gating component\n * \n * Wraps children with a feature availability check. If the feature is available,\n * renders children. If not, automatically renders the policy-driven prompt.\n * \n * Usage:\n *   const analyticsFeatureId = APP_FEATURE_IDS.ADVANCED_ANALYTICS;\n *\n *   <FeatureGate featureId={analyticsFeatureId}>\n *     <AnalyticsDashboard />\n *   </FeatureGate>\n * \n *   // Custom rendering when unavailable:\n *   <FeatureGate featureId={analyticsFeatureId} renderUnavailable={(availability) => (\n *     <MyCustomUpsell availability={availability} />\n *   )}>\n *     <AnalyticsDashboard />\n *   </FeatureGate>\n */\n\nimport React from 'react';\nimport { FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';\nimport { useFeatureAvailability, type FeatureAvailability } from './useFeatureAvailability';\nimport { FeatureUnavailablePrompt } from '~wildo-frontend-lib/components/feedback/features/feature-unavailable-prompt';\nimport { useBillingAction } from '~wildo-frontend-lib/core/billing/useBillingAction';\n\n// Note: useFeatureGate hook is in a separate file (useFeatureGate.ts) for React Fast Refresh compatibility.\n\nexport interface FeatureGateProps {\n  /** Feature identifier to check */\n  featureId: string;\n  /** Content to render when the feature is available */\n  children: React.ReactNode;\n  /** \n   * Optional custom renderer when the feature is unavailable.\n   * If omitted, renders the policy-driven FeatureUnavailablePrompt automatically.\n   */\n  renderUnavailable?: (availability: FeatureAvailability) => React.ReactNode;\n}\n\nexport function FeatureGate({\n  featureId,\n  children,\n  renderUnavailable,\n}: FeatureGateProps): React.JSX.Element | null {\n  const availability = useFeatureAvailability(featureId);\n  const billingAction = useBillingAction();\n\n  // Feature is available → render children\n  if (availability.isAvailable) {\n    return <>{children}</>;\n  }\n\n  // HIDE behavior → render nothing\n  if (availability.behavior === FeatureUnavailabilityBehavior.HIDE) {\n    return null;\n  }\n\n  // Custom renderer provided → delegate\n  if (renderUnavailable) {\n    return <>{renderUnavailable(availability)}</>;\n  }\n\n  // Default: policy-driven prompt. Inline FeatureGate surfaces do not expose a\n  // generic \"go back\" action because they are embedded into the current page.\n  return (\n    <FeatureUnavailablePrompt\n      behavior={availability.behavior}\n      missingFeatures={availability.missingFeatures}\n      limitInfo={availability.limitInfo}\n      upgradeOptionsCount={availability.upgradeOptions?.length}\n      customComponentRef={availability.customComponentRef}\n      onDismiss={undefined}\n      onAction={() => billingAction(availability)}\n    />\n  );\n}\n"]}

package/dist/esm/core/features/FeatureRouteGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FeatureRouteGuard.d.ts","sourceRoot":"","sources":["../../../../src/core/features/FeatureRouteGuard.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAc7H,UAAU,sBAAsB;IAC9B,mDAAmD;IACnD,SAAS,CAAC,EAAE,uCAAuC,CAAC;IACpD,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,6DAA6D;IAC7D,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAMD,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAsF9D,CAAC"}
+{"version":3,"file":"FeatureRouteGuard.d.ts","sourceRoot":"","sources":["../../../../../src/core/features/FeatureRouteGuard.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAc7H,UAAU,sBAAsB;IAC9B,mDAAmD;IACnD,SAAS,CAAC,EAAE,uCAAuC,CAAC;IACpD,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,6DAA6D;IAC7D,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAMD,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAsF9D,CAAC"}

package/dist/esm/core/features/FeatureRouteGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"FeatureRouteGuard.js","sourceRoot":"","sources":["../../../../src/core/features/FeatureRouteGuard.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,6BAA6B,GAG9B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,+BAA+B,EAAkC,MAAM,mCAAmC,CAAC;AACpH,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2EAA2E,CAAC;AAevH,mCAAmC;AACnC,YAAY;AACZ,mCAAmC;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAqC,CAAC,EAClE,SAAS,EACT,gBAAgB,EAChB,QAAQ,GACT,EAAE,EAAE;IACH,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAE9D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;QAC5C,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAA0E,CAAC;QAC1I,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAElC,MAAM,YAAY,GAAG,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;IAEzE,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC1C,0BAA0B,CAAC;YACzB,IAAI;YACJ,cAAc,EAAE,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAErB,+EAA+E;IAC/E,oCAAoC;IACpC,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC3C,IAAI,iBAAiB,EAAE,CAAC;YACtB,+FAA+F;YAC/F,iFAAiF;YACjF,MAAM,MAAM,GAAG,eAAe,CAAC,mBAAmB,CAAC;gBACjD,iBAAiB,EAAE,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpG,YAAY,EAAE,iBAAiB,CAAC,YAAY;aAC7C,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;gBACvB,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3D,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;QACH,CAAC;QAED,YAAY,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEtD,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,UAAU,GACd,YAAY,KAAK,SAAS;QAC1B,CAAC,YAAY,CAAC,WAAW;QACzB,YAAY,CAAC,QAAQ,KAAK,6BAA6B,CAAC,IAAI,CAAC;IAE/D,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,YAAY,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IAE/B,kCAAkC;IAClC,IAAI,CAAC,YAAY;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAE1C,2CAA2C;IAC3C,IAAI,YAAY,CAAC,WAAW;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAErD,gCAAgC;IAChC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,OAAO,CACL,KAAC,wBAAwB,IACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAC/B,eAAe,EAAE,YAAY,CAAC,eAAe,EAC7C,SAAS,EAAE,YAAY,CAAC,SAAS,EACjC,mBAAmB,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,EACxD,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,EACnD,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,GAC3C,CACH,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * FeatureRouteGuard\n * \n * Route-level guard that checks feature availability before rendering page content.\n * Routes are always registered (so deep links and bookmarks work), but the guard\n * intercepts rendering when a feature is unavailable.\n * \n * Behavior is determined by the feature unavailability policy:\n * - HIDE → Navigate to home\n * - All other behaviors → FeatureUnavailablePrompt (adapts content per behavior)\n * \n * The prompt renders INSIDE the app layout (sidebar stays visible) — it replaces\n * only the route content area, not the entire page.\n */\n\nimport React from 'react';\nimport { useNavigate } from 'react-router-dom';\nimport {\n  FeatureUnavailabilityBehavior,\n  NavigationZoneName,\n  type RequiredFeaturesConfig,\n} from '@wildo-ai/saas-models';\nimport type { FrontendResourceConfiguration_Operation } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useOperationFeatureAvailability, type RequiredFeaturesCheckable } from './useOperationFeatureAvailability';\nimport { FeatureUnavailablePrompt } from '~wildo-frontend-lib/components/feedback/features/feature-unavailable-prompt';\nimport { useBillingAction } from '~wildo-frontend-lib/core/billing/useBillingAction';\nimport { useEventBus } from '~wildo-frontend-lib/core/events/useEventBus';\nimport { FrontendEvents } from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport { NavigationContext } from '~wildo-frontend-lib/core/navigation/NavigationContext';\nimport { NavigationUtils } from '~wildo-frontend-lib/core/navigation/navigation.utils';\nimport { navigateHomeWithFreshStart } from '~wildo-frontend-lib/core/navigation/navigation-clean-break.frontend.utils';\n\n// ================================\n// Props\n// ================================\n\ninterface FeatureRouteGuardProps {\n  /** For resource routes: the operation to check. */\n  operation?: FrontendResourceConfiguration_Operation;\n  /** For view routes: the view's required features config. */\n  requiredFeatures?: RequiredFeaturesConfig;\n  /** The page content to render when features are available */\n  children: React.ReactNode;\n}\n\n// ================================\n// Component\n// ================================\n\nexport const FeatureRouteGuard: React.FC<FeatureRouteGuardProps> = ({\n  operation,\n  requiredFeatures,\n  children,\n}) => {\n  const navigate = useNavigate();\n  const billingAction = useBillingAction();\n  const { emit } = useEventBus();\n  const navigationContext = React.useContext(NavigationContext);\n\n  const effectiveOperation = React.useMemo(() => {\n    if (operation) return operation;\n    if (requiredFeatures) {\n      return { requiredFeatures, operationIdentifier: 'VIEW_ACCESS' } as RequiredFeaturesCheckable as FrontendResourceConfiguration_Operation;\n    }\n    return null;\n  }, [operation, requiredFeatures]);\n\n  const availability = useOperationFeatureAvailability(effectiveOperation);\n\n  const navigateHome = React.useCallback(() => {\n    navigateHomeWithFreshStart({\n      emit,\n      routerNavigate: navigate,\n    });\n  }, [emit, navigate]);\n\n  // Dismiss handler: prefer runtime-owned back semantics, otherwise fall back to\n  // a full fresh-start redirect home.\n  const handleDismiss = React.useCallback(() => {\n    if (navigationContext) {\n      // The ONE go-back resolver (see `NavigationUtils.resolveGoBackTarget`): a hosted pane's URL is\n      // composed under its host here exactly as the controller's `goBack` composes it.\n      const target = NavigationUtils.resolveGoBackTarget({\n        currentBrowserUrl: NavigationUtils.buildBrowserUrl(window.location.pathname, window.location.search),\n        getZoneState: navigationContext.getZoneState,\n      });\n      if (target?.browserUrl) {\n        emit(FrontendEvents.NAVIGATION_POP, { zone: target.zone });\n        navigate(target.browserUrl, { replace: true });\n        return;\n      }\n    }\n\n    navigateHome();\n  }, [emit, navigate, navigateHome, navigationContext]);\n\n  // Computed (and the effect registered) BEFORE the early returns below:\n  // `availability` flips between undefined / available / unavailable across\n  // renders, so the hook count must not depend on it (rules of hooks).\n  const shouldHide =\n    availability !== undefined &&\n    !availability.isAvailable &&\n    availability.behavior === FeatureUnavailabilityBehavior.HIDE;\n\n  React.useEffect(() => {\n    if (!shouldHide) {\n      return;\n    }\n\n    navigateHome();\n  }, [navigateHome, shouldHide]);\n\n  // No requiredFeatures → no gating\n  if (!availability) return <>{children}</>;\n\n  // Features are available → render children\n  if (availability.isAvailable) return <>{children}</>;\n\n  // HIDE → navigate away silently\n  if (shouldHide) {\n    return null;\n  }\n\n  // All other behaviors → single reusable prompt (adapts per behavior)\n  return (\n    <FeatureUnavailablePrompt\n      behavior={availability.behavior}\n      missingFeatures={availability.missingFeatures}\n      limitInfo={availability.limitInfo}\n      upgradeOptionsCount={availability.upgradeOptions?.length}\n      customComponentRef={availability.customComponentRef}\n      onDismiss={handleDismiss}\n      onAction={() => billingAction(availability)}\n    />\n  );\n};\n"]}
+{"version":3,"file":"FeatureRouteGuard.js","sourceRoot":"","sources":["../../../../../src/core/features/FeatureRouteGuard.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,6BAA6B,GAG9B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,+BAA+B,EAAkC,MAAM,mCAAmC,CAAC;AACpH,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2EAA2E,CAAC;AAevH,mCAAmC;AACnC,YAAY;AACZ,mCAAmC;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAqC,CAAC,EAClE,SAAS,EACT,gBAAgB,EAChB,QAAQ,GACT,EAAE,EAAE;IACH,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAE9D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;QAC5C,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAA0E,CAAC;QAC1I,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAElC,MAAM,YAAY,GAAG,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;IAEzE,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC1C,0BAA0B,CAAC;YACzB,IAAI;YACJ,cAAc,EAAE,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAErB,+EAA+E;IAC/E,oCAAoC;IACpC,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC3C,IAAI,iBAAiB,EAAE,CAAC;YACtB,+FAA+F;YAC/F,iFAAiF;YACjF,MAAM,MAAM,GAAG,eAAe,CAAC,mBAAmB,CAAC;gBACjD,iBAAiB,EAAE,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpG,YAAY,EAAE,iBAAiB,CAAC,YAAY;aAC7C,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;gBACvB,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3D,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;QACH,CAAC;QAED,YAAY,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEtD,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,UAAU,GACd,YAAY,KAAK,SAAS;QAC1B,CAAC,YAAY,CAAC,WAAW;QACzB,YAAY,CAAC,QAAQ,KAAK,6BAA6B,CAAC,IAAI,CAAC;IAE/D,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,YAAY,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IAE/B,kCAAkC;IAClC,IAAI,CAAC,YAAY;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAE1C,2CAA2C;IAC3C,IAAI,YAAY,CAAC,WAAW;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAErD,gCAAgC;IAChC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,OAAO,CACL,KAAC,wBAAwB,IACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAC/B,eAAe,EAAE,YAAY,CAAC,eAAe,EAC7C,SAAS,EAAE,YAAY,CAAC,SAAS,EACjC,mBAAmB,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,EACxD,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,EACnD,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,GAC3C,CACH,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * FeatureRouteGuard\n * \n * Route-level guard that checks feature availability before rendering page content.\n * Routes are always registered (so deep links and bookmarks work), but the guard\n * intercepts rendering when a feature is unavailable.\n * \n * Behavior is determined by the feature unavailability policy:\n * - HIDE → Navigate to home\n * - All other behaviors → FeatureUnavailablePrompt (adapts content per behavior)\n * \n * The prompt renders INSIDE the app layout (sidebar stays visible) — it replaces\n * only the route content area, not the entire page.\n */\n\nimport React from 'react';\nimport { useNavigate } from 'react-router-dom';\nimport {\n  FeatureUnavailabilityBehavior,\n  NavigationZoneName,\n  type RequiredFeaturesConfig,\n} from '@wildo-ai/saas-models';\nimport type { FrontendResourceConfiguration_Operation } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useOperationFeatureAvailability, type RequiredFeaturesCheckable } from './useOperationFeatureAvailability';\nimport { FeatureUnavailablePrompt } from '~wildo-frontend-lib/components/feedback/features/feature-unavailable-prompt';\nimport { useBillingAction } from '~wildo-frontend-lib/core/billing/useBillingAction';\nimport { useEventBus } from '~wildo-frontend-lib/core/events/useEventBus';\nimport { FrontendEvents } from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport { NavigationContext } from '~wildo-frontend-lib/core/navigation/NavigationContext';\nimport { NavigationUtils } from '~wildo-frontend-lib/core/navigation/navigation.utils';\nimport { navigateHomeWithFreshStart } from '~wildo-frontend-lib/core/navigation/navigation-clean-break.frontend.utils';\n\n// ================================\n// Props\n// ================================\n\ninterface FeatureRouteGuardProps {\n  /** For resource routes: the operation to check. */\n  operation?: FrontendResourceConfiguration_Operation;\n  /** For view routes: the view's required features config. */\n  requiredFeatures?: RequiredFeaturesConfig;\n  /** The page content to render when features are available */\n  children: React.ReactNode;\n}\n\n// ================================\n// Component\n// ================================\n\nexport const FeatureRouteGuard: React.FC<FeatureRouteGuardProps> = ({\n  operation,\n  requiredFeatures,\n  children,\n}) => {\n  const navigate = useNavigate();\n  const billingAction = useBillingAction();\n  const { emit } = useEventBus();\n  const navigationContext = React.useContext(NavigationContext);\n\n  const effectiveOperation = React.useMemo(() => {\n    if (operation) return operation;\n    if (requiredFeatures) {\n      return { requiredFeatures, operationIdentifier: 'VIEW_ACCESS' } as RequiredFeaturesCheckable as FrontendResourceConfiguration_Operation;\n    }\n    return null;\n  }, [operation, requiredFeatures]);\n\n  const availability = useOperationFeatureAvailability(effectiveOperation);\n\n  const navigateHome = React.useCallback(() => {\n    navigateHomeWithFreshStart({\n      emit,\n      routerNavigate: navigate,\n    });\n  }, [emit, navigate]);\n\n  // Dismiss handler: prefer runtime-owned back semantics, otherwise fall back to\n  // a full fresh-start redirect home.\n  const handleDismiss = React.useCallback(() => {\n    if (navigationContext) {\n      // The ONE go-back resolver (see `NavigationUtils.resolveGoBackTarget`): a hosted pane's URL is\n      // composed under its host here exactly as the controller's `goBack` composes it.\n      const target = NavigationUtils.resolveGoBackTarget({\n        currentBrowserUrl: NavigationUtils.buildBrowserUrl(window.location.pathname, window.location.search),\n        getZoneState: navigationContext.getZoneState,\n      });\n      if (target?.browserUrl) {\n        emit(FrontendEvents.NAVIGATION_POP, { zone: target.zone });\n        navigate(target.browserUrl, { replace: true });\n        return;\n      }\n    }\n\n    navigateHome();\n  }, [emit, navigate, navigateHome, navigationContext]);\n\n  // Computed (and the effect registered) BEFORE the early returns below:\n  // `availability` flips between undefined / available / unavailable across\n  // renders, so the hook count must not depend on it (rules of hooks).\n  const shouldHide =\n    availability !== undefined &&\n    !availability.isAvailable &&\n    availability.behavior === FeatureUnavailabilityBehavior.HIDE;\n\n  React.useEffect(() => {\n    if (!shouldHide) {\n      return;\n    }\n\n    navigateHome();\n  }, [navigateHome, shouldHide]);\n\n  // No requiredFeatures → no gating\n  if (!availability) return <>{children}</>;\n\n  // Features are available → render children\n  if (availability.isAvailable) return <>{children}</>;\n\n  // HIDE → navigate away silently\n  if (shouldHide) {\n    return null;\n  }\n\n  // All other behaviors → single reusable prompt (adapts per behavior)\n  return (\n    <FeatureUnavailablePrompt\n      behavior={availability.behavior}\n      missingFeatures={availability.missingFeatures}\n      limitInfo={availability.limitInfo}\n      upgradeOptionsCount={availability.upgradeOptions?.length}\n      customComponentRef={availability.customComponentRef}\n      onDismiss={handleDismiss}\n      onAction={() => billingAction(availability)}\n    />\n  );\n};\n"]}

package/dist/esm/core/features/FeaturesContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FeaturesContext.d.ts","sourceRoot":"","sources":["../../../../src/core/features/FeaturesContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAA2E,MAAM,OAAO,CAAC;AAChG,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAiC/B,MAAM,WAAW,mBAAmB;IAElC,+DAA+D;IAC/D,gBAAgB,EAAE,yBAAyB,CAAC;IAC5C,8CAA8C;IAC9C,wBAAwB,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAG1D,4EAA4E;IAC5E,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAGnD,iFAAiF;IACjF,oBAAoB,EAAE,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;IAGnE,mFAAmF;IACnF,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kGAAkG;IAClG,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACpD,yEAAyE;IACzE,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC3D,uFAAuF;IACvF,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAGhE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAGpB,wFAAwF;IACxF,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AASD,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAA6D,CAAC;AAMzI,UAAU,qBAAqB;IAC7B,mFAAmF;IACnF,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAAE,qBAAqB,GAAG,KAAK,CAAC,YAAY,CAoO9G"}
+{"version":3,"file":"FeaturesContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/features/FeaturesContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAuF,MAAM,OAAO,CAAC;AAC5G,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAoC/B,MAAM,WAAW,mBAAmB;IAElC,+DAA+D;IAC/D,gBAAgB,EAAE,yBAAyB,CAAC;IAC5C,8CAA8C;IAC9C,wBAAwB,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAG1D,4EAA4E;IAC5E,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAGnD,iFAAiF;IACjF,oBAAoB,EAAE,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;IAGnE,mFAAmF;IACnF,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kGAAkG;IAClG,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACpD,yEAAyE;IACzE,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC3D,uFAAuF;IACvF,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAGhE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAGpB,wFAAwF;IACxF,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AASD,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAA6D,CAAC;AAMzI,UAAU,qBAAqB;IAC7B,mFAAmF;IACnF,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAAE,qBAAqB,GAAG,KAAK,CAAC,YAAY,CA6P9G"}

package/dist/esm/core/features/FeaturesContext.js

@@ -16,9 +16,12 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * Stale usage data means the frontend might allow a click that the backend rejects
  * (which is acceptable — the error is caught and displayed).
  */
-import { createContext, useEffect, useState, useCallback, useMemo, useRef } from 'react';
-import { CoreWebSocketEvent, FEATURES_UNLIMITED, MAIN_API_BASE_PATH, } from '@wildo-ai/saas-models';
+import { createContext, useContext, useEffect, useState, useCallback, useMemo, useRef } from 'react';
+import { CoreResourceType, CoreWebSocketEvent, FEATURES_UNLIMITED, MAIN_API_BASE_PATH, } from '@wildo-ai/saas-models';
 import { useWebSocket } from '../../core/requests/websockets/useWebSocket.js';
+import { EventBusContext } from '../../core/events/EventBusContext.js';
+import { FrontendEvents } from '../../core/events/events.frontend.schemas.js';
+import { useResourceReachability } from '../../core/resources/useResourceRegistry.js';
 import { useAuthSession } from '../../core/security/useAuthSession.js';
 import { LoggerFrontendService } from '../../core/monitoring/logger.frontend.service.js';
 import { getManualCallsHttpClient } from '../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
@@ -58,11 +61,19 @@ export function FeaturesProvider({ featureConfiguration, children }) {
     const debounceTimerRef = useRef(null);
     // ── Auth — features are user-scoped, only fetch when authenticated ──
     const { isAuthenticated } = useAuthSession();
-    const authenticated = isAuthenticated();
+    // Fetch only when this consumer can REACH the features route: configured-and-authenticated is half
+    // the answer (#1069, the #268 rule). The resolved features are derived from the per-user ledger, so
+    // a consumer whose registry excludes it — the application-creation workbench — has no route to ask.
+    const featuresReachable = useResourceReachability(CoreResourceType.USER_FEATURES);
+    const authenticated = isAuthenticated() && featuresReachable;
     const appScope = useAppScopeSafe();
     const currentOrganizationId = appScope?.currentOrganizationId ?? null;
     // ── WebSocket ──
     const { on } = useWebSocket();
+    // ── Frontend event bus (preference changes) ──
+    // Read from the context directly: `useEventBus().bus` is typed as the React context object, not the bus.
+    const bus = useContext(EventBusContext);
+    const errorRef = useRef(null);
     // ── Build definitions map from configuration ──
     const featureDefinitions = useMemo(() => {
         const map = new Map();
@@ -135,6 +146,22 @@ export function FeaturesProvider({ featureConfiguration, children }) {
             mountedRef.current = false;
         };
     }, [authenticated, currentOrganizationId, fetchResolvedFeatures, clearResolvedFeatures]);
+    useEffect(() => {
+        errorRef.current = error;
+    }, [error]);
+    // ── Retry a FAILED fetch when the person's preferences change (#534) ──
+    // A declared service consent requirement refuses this read until the person grants it, so the fetch that ran at
+    // sign-in can fail — and while the organization stays the same nothing else would retry it, leaving features
+    // unresolved until a reload. A preferences change is how a consent decision reaches the rest of the application,
+    // so it retries a failed fetch. Only a failed one: a theme or language change does not invalidate a good set.
+    useEffect(() => {
+        if (!authenticated)
+            return;
+        return bus.on(FrontendEvents.USER_PREFERENCES_CHANGED, () => {
+            if (errorRef.current)
+                fetchResolvedFeatures();
+        });
+    }, [authenticated, bus, fetchResolvedFeatures]);
     // ── WebSocket invalidation (debounced to coalesce rapid events) ──
     useEffect(() => {
         if (!authenticated)

package/dist/esm/core/features/FeaturesContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"FeaturesContext.js","sourceRoot":"","sources":["../../../../src/core/features/FeaturesContext.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAc,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAChG,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAKnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E,mCAAmC;AACnC,SAAS;AACT,mCAAmC;AAEnC,MAAM,cAAc,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAChF,MAAM,QAAQ,GAAiE,cAAc,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAC7H,cAAc,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAE7D,mCAAmC;AACnC,YAAY;AACZ,mCAAmC;AAEnC,MAAM,gBAAgB,GAAG,GAAG,kBAAkB,oBAAoB,CAAC;AAEnE,mEAAmE;AACnE,MAAM,mBAAmB,GAAG;IAC1B,kBAAkB,CAAC,sBAAsB;IACzC,kBAAkB,CAAC,4BAA4B;IAC/C,kBAAkB,CAAC,uBAAuB;IAC1C,kBAAkB,CAAC,wBAAwB;CACnC,CAAC;AA8CX,4BAA4B;AAC5B,MAAM,cAAc,GAA8B;IAChD,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAmD,aAAa,CAAkC,SAAS,CAAC,CAAC;AAYzI,MAAM,UAAU,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAyB;IACxF,cAAc;IACd,MAAM,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,GAAG,QAAQ,CAAkC,IAAI,CAAC,CAAC;IAChH,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAU,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,MAAM,CAAU,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAU,IAAI,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,MAAM,CAAuC,IAAI,CAAC,CAAC;IAE5E,uEAAuE;IACvE,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,aAAa,GAAG,eAAe,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAEtE,kBAAkB;IAClB,MAAM,EAAE,EAAE,EAAE,GAAG,YAAY,EAAE,CAAC;IAE9B,iDAAiD;IACjD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,WAAW,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,QAAQ,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEvC,8BAA8B;IAC9B,MAAM,oBAAoB,GAAG,OAAO,CAClC,GAAG,EAAE,CAAC,oBAAoB,CAAC,oBAAoB,EAC/C,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAC5C,CAAC;IAEF,kCAAkC;IAClC,MAAM,gBAAgB,GAA8B,OAAO,CAAC,GAAG,EAAE;QAC/D,IAAI,CAAC,wBAAwB;YAAE,OAAO,cAAc,CAAC;QACrD,OAAO;YACL,QAAQ,EAAE,wBAAwB,CAAC,QAAQ;YAC3C,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,YAAY,EAAE,wBAAwB,CAAC,YAAY;SACpD,CAAC;IACJ,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAE/B,MAAM,qBAAqB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7C,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6CAA6C;IAC7C,MAAM,qBAAqB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACnD,IAAI,gBAAgB,CAAC,OAAO;YAAE,OAAO;QACrC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC;YACH,QAAQ,CAAC,yCAAyC,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,CAA2B,gBAAgB,CAAC,CAAC;YAElF,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,2BAA2B,CAAC,QAAQ,CAAC,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,QAAQ,CAAC,2BAA2B,EAAE;oBACpC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;oBACtC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM;oBAC/C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,0BAA0B,CAAC,CAAC,CAAC;gBAC7F,QAAQ,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,gBAAgB,CAAC,OAAO,GAAG,KAAK,CAAC;QACnC,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,8DAA8D;IAC9D,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,qBAAqB,EAAE,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,qBAAqB,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,GAAG,EAAE;YACV,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;QAC7B,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,aAAa,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEzF,oEAAoE;IACpE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa;YAAE,OAAO;QAE3B,MAAM,aAAa,GAAsB,EAAE,CAAC;QAE5C,MAAM,gBAAgB,GAAG,GAAG,EAAE;YAC5B,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC7B,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,gBAAgB,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC;gBAChC,qBAAqB,EAAE,CAAC;YAC1B,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBAC3B,QAAQ,CAAC,2DAA2D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjF,gBAAgB,EAAE,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,GAAG,EAAE;YACV,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC7B,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;gBAClC,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAE/C,8CAA8C;IAC9C,MAAM,mBAAmB,GAAG,OAAO,CACjC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EACxC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAC5B,CAAC;IAEF,8BAA8B;IAC9B,MAAM,gBAAgB,GAAG,WAAW,CAClC,CAAC,SAAiB,EAAW,EAAE;QAC7B,OAAO,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,EACD,CAAC,mBAAmB,CAAC,CACtB,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAClC,CAAC,SAAiB,EAAW,EAAE;QAC7B,0EAA0E;QAC1E,yEAAyE;QACzE,8CAA8C;QAC9C,2EAA2E;QAC3E,0BAA0B;QAC1B,8EAA8E;QAC9E,0EAA0E;QAC1E,2EAA2E;QAC3E,gFAAgF;QAChF,sEAAsE;QACtE,8EAA8E;QAC9E,sEAAsE;QACtE,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,OAAO,OAAO,CAAC,wBAAwB,EAAE,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC,EACD,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,CAChD,CAAC;IAEF,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,SAAiB,EAAsB,EAAE;QACxC,OAAO,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,EACD,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAC1B,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,CAAC,SAAiB,EAAsB,EAAE;QACxC,OAAO,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,EACD,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAChC,CAAC;IAEF,MAAM,oBAAoB,GAAG,WAAW,CACtC,CAAC,SAAiB,EAAsB,EAAE;QACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,KAAK,KAAK,kBAAkB;YAAE,OAAO,SAAS,CAAC,CAAC,sCAAsC;QAC1F,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;IACpC,CAAC,EACD,CAAC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,YAAY,CAAC,CACzD,CAAC;IAEF,sDAAsD;IACtD,MAAM,YAAY,GAAwB,OAAO,CAC/C,GAAG,EAAE,CAAC,CAAC;QACL,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,oBAAoB;QACpB,SAAS;QACT,KAAK;QACL,OAAO,EAAE,qBAAqB;KAC/B,CAAC,EACF;QACE,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,oBAAoB;QACpB,SAAS;QACT,KAAK;QACL,qBAAqB;KACtB,CACF,CAAC;IAEF,OAAO,CACL,KAAC,eAAe,CAAC,QAAQ,IAAC,KAAK,EAAE,YAAY,YAC1C,QAAQ,GACgB,CAC5B,CAAC;AACJ,CAAC","sourcesContent":["/**\n * FeaturesContext\n *\n * Central context for feature gating on the frontend.\n *\n * Responsibilities:\n * - Receives the merged FeatureConfiguration (core + custom) from app initialization\n * - Builds a definitions map for fast lookup\n * - Fetches resolved features from backend API: GET /api/v1/features/resolved\n * - Caches resolved features in context state\n * - Invalidates on WebSocket events (FEATURES_CHANGED, BILLING_STATUS_CHANGED, etc.)\n * - Exposes raw resolved features + definitions + unavailability policy\n *\n * Frontend limit checking is ADVISORY — backend gate is authoritative.\n * Stale usage data means the frontend might allow a click that the backend rejects\n * (which is acceptable — the error is caught and displayed).\n */\n\nimport React, { createContext, useEffect, useState, useCallback, useMemo, useRef } from 'react';\nimport {\n  CoreWebSocketEvent,\n  FEATURES_UNLIMITED,\n  MAIN_API_BASE_PATH,\n  type FeatureConfiguration,\n  type FeatureDefinition,\n  type ResolvedFeaturesResponse,\n  type ResolvedFeaturesWithUsage,\n} from '@wildo-ai/saas-models';\nimport { useWebSocket } from '~wildo-frontend-lib/core/requests/websockets/useWebSocket';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\n\n// ================================\n// Logger\n// ================================\n\nconst featuresLogger: LoggerFrontendService = LoggerFrontendService.getLogger();\nconst logDebug: (message: string, context?: Record<string, unknown>) => void = featuresLogger.debugByType('FeaturesContext');\nfeaturesLogger.setDebugTypeLogging('FeaturesContext', false);\n\n// ================================\n// Constants\n// ================================\n\nconst FEATURES_API_URL = `${MAIN_API_BASE_PATH}/features/resolved`;\n\n/** WebSocket events that trigger a refetch of resolved features */\nconst INVALIDATION_EVENTS = [\n  CoreWebSocketEvent.BILLING_STATUS_CHANGED,\n  CoreWebSocketEvent.BILLING_SUBSCRIPTION_UPDATED,\n  CoreWebSocketEvent.BILLING_ACCOUNT_CHANGED,\n  CoreWebSocketEvent.BILLING_FEATURES_UPDATED,\n] as const;\n\n// ================================\n// Context Type\n// ================================\n\nexport interface FeaturesContextType {\n  // ── Resolved features from backend ──\n  /** Raw resolved features with usage data (from backend API) */\n  resolvedFeatures: ResolvedFeaturesWithUsage;\n  /** Full response including upgrade options */\n  resolvedFeaturesResponse: ResolvedFeaturesResponse | null;\n\n  // ── Feature definitions (from configuration) ──\n  /** Feature definitions map (built from featureConfiguration.definitions) */\n  featureDefinitions: Map<string, FeatureDefinition>;\n\n  // ── Policy ──\n  /** The unavailability policy (from featureConfiguration.unavailabilityPolicy) */\n  unavailabilityPolicy: FeatureConfiguration['unavailabilityPolicy'];\n\n  // ── Convenience accessors ──\n  /** Check if a boolean feature is ENTITLED for the current scope (plan/profile). */\n  isFeatureEnabled: (featureId: string) => boolean;\n  /**\n   * Check if the app OFFERS a feature for the current scope — entitled now, or\n   * reachable via an upgrade/add-on. Plan-independent survival signal, distinct\n   * from `isFeatureEnabled` (entitlement). See the impl for the two-axis rationale.\n   */\n  isFeatureOffered: (featureId: string) => boolean;\n  /** Get a limit value (FEATURES_UNLIMITED = unlimited). Returns undefined if feature not found. */\n  getLimit: (featureId: string) => number | undefined;\n  /** Get current usage for a limit feature. undefined if no usage data. */\n  getCurrentUsage: (featureId: string) => number | undefined;\n  /** Get remaining capacity (limit - current). undefined if unlimited or no counting. */\n  getRemainingCapacity: (featureId: string) => number | undefined;\n\n  // ── State ──\n  isLoading: boolean;\n  error: Error | null;\n\n  // ── Actions ──\n  /** Force refetch of resolved features (e.g., after a mutation on a counted resource) */\n  refetch: () => void;\n}\n\n// ── Default empty state ──\nconst EMPTY_RESOLVED: ResolvedFeaturesWithUsage = {\n  features: [],\n  limits: {},\n  currentUsage: {},\n};\n\nexport const FeaturesContext: React.Context<FeaturesContextType | undefined> = createContext<FeaturesContextType | undefined>(undefined);\n\n// ================================\n// Provider\n// ================================\n\ninterface FeaturesProviderProps {\n  /** Merged FeatureConfiguration (core + custom) — passed from app initialization */\n  featureConfiguration: FeatureConfiguration;\n  children: React.ReactNode;\n}\n\nexport function FeaturesProvider({ featureConfiguration, children }: FeaturesProviderProps): React.ReactElement {\n  // ── State ──\n  const [resolvedFeaturesResponse, setResolvedFeaturesResponse] = useState<ResolvedFeaturesResponse | null>(null);\n  const [isLoading, setIsLoading] = useState<boolean>(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  // ── Refs for stable callbacks ──\n  const fetchInFlightRef = useRef<boolean>(false);\n  const mountedRef = useRef<boolean>(true);\n  const debounceTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);\n\n  // ── Auth — features are user-scoped, only fetch when authenticated ──\n  const { isAuthenticated } = useAuthSession();\n  const authenticated = isAuthenticated();\n  const appScope = useAppScopeSafe();\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n\n  // ── WebSocket ──\n  const { on } = useWebSocket();\n\n  // ── Build definitions map from configuration ──\n  const featureDefinitions = useMemo(() => {\n    const map = new Map<string, FeatureDefinition>();\n    for (const def of featureConfiguration.definitions) {\n      map.set(def.identifier, def);\n    }\n    logDebug('Feature definitions map built', { count: map.size });\n    return map;\n  }, [featureConfiguration.definitions]);\n\n  // ── Unavailability policy ──\n  const unavailabilityPolicy = useMemo(\n    () => featureConfiguration.unavailabilityPolicy,\n    [featureConfiguration.unavailabilityPolicy],\n  );\n\n  // ── Derived resolved features ──\n  const resolvedFeatures: ResolvedFeaturesWithUsage = useMemo(() => {\n    if (!resolvedFeaturesResponse) return EMPTY_RESOLVED;\n    return {\n      features: resolvedFeaturesResponse.features,\n      limits: resolvedFeaturesResponse.limits,\n      currentUsage: resolvedFeaturesResponse.currentUsage,\n    };\n  }, [resolvedFeaturesResponse]);\n\n  const clearResolvedFeatures = useCallback(() => {\n    setResolvedFeaturesResponse(null);\n    setError(null);\n    setIsLoading(false);\n  }, []);\n\n  // ── Fetch resolved features from backend ──\n  const fetchResolvedFeatures = useCallback(async () => {\n    if (fetchInFlightRef.current) return;\n    fetchInFlightRef.current = true;\n\n    try {\n      logDebug('Fetching resolved features from backend');\n      const httpClient = getManualCallsHttpClient();\n      const response = await httpClient.get<ResolvedFeaturesResponse>(FEATURES_API_URL);\n\n      if (mountedRef.current) {\n        setResolvedFeaturesResponse(response);\n        setError(null);\n        logDebug('Resolved features fetched', {\n          featureCount: response.features.length,\n          limitCount: Object.keys(response.limits).length,\n          usageCount: Object.keys(response.currentUsage).length,\n        });\n      }\n    } catch (err: any) {\n      if (mountedRef.current) {\n        setError(err instanceof Error ? err : new Error(err?.message ?? 'Failed to fetch features'));\n        logDebug('Failed to fetch resolved features', { error: err?.message });\n      }\n    } finally {\n      if (mountedRef.current) {\n        setIsLoading(false);\n      }\n      fetchInFlightRef.current = false;\n    }\n  }, []);\n\n  // ── Fetch when authenticated (and refetch on auth change) ──\n  useEffect(() => {\n    mountedRef.current = true;\n    if (authenticated) {\n      setIsLoading(true);\n      fetchResolvedFeatures();\n    } else {\n      clearResolvedFeatures();\n    }\n    return () => {\n      mountedRef.current = false;\n    };\n  }, [authenticated, currentOrganizationId, fetchResolvedFeatures, clearResolvedFeatures]);\n\n  // ── WebSocket invalidation (debounced to coalesce rapid events) ──\n  useEffect(() => {\n    if (!authenticated) return;\n\n    const unsubscribers: Array<() => void> = [];\n\n    const debouncedRefetch = () => {\n      if (debounceTimerRef.current) {\n        clearTimeout(debounceTimerRef.current);\n      }\n      debounceTimerRef.current = setTimeout(() => {\n        debounceTimerRef.current = null;\n        fetchResolvedFeatures();\n      }, 300);\n    };\n\n    for (const event of INVALIDATION_EVENTS) {\n      const unsub = on(event, () => {\n        logDebug('WebSocket invalidation event received, scheduling refetch', { event });\n        debouncedRefetch();\n      });\n      unsubscribers.push(unsub);\n    }\n\n    return () => {\n      if (debounceTimerRef.current) {\n        clearTimeout(debounceTimerRef.current);\n      }\n      for (const unsub of unsubscribers) {\n        unsub();\n      }\n    };\n  }, [authenticated, on, fetchResolvedFeatures]);\n\n  // ── Derived features set for O(1) lookups ──\n  const resolvedFeaturesSet = useMemo(\n    () => new Set(resolvedFeatures.features),\n    [resolvedFeatures.features],\n  );\n\n  // ── Convenience accessors ──\n  const isFeatureEnabled = useCallback(\n    (featureId: string): boolean => {\n      return resolvedFeaturesSet.has(featureId);\n    },\n    [resolvedFeaturesSet],\n  );\n\n  const isFeatureOffered = useCallback(\n    (featureId: string): boolean => {\n      // \"Offered\" = the app makes this feature available for the current scope,\n      // INDEPENDENT of whether the current plan/profile currently ENTITLES it:\n      //  - entitled now (in `resolvedFeatures`), OR\n      //  - not entitled but reachable via an upgrade/add-on the backend surfaced\n      //    in `upgradeOptions`.\n      // This is the plan-independent \"does this app offer feature X\" axis, distinct\n      // from `isFeatureEnabled` (the entitlement axis). Consumers gate SURVIVAL\n      // (should the surface exist at all) on `isFeatureOffered`, then render the\n      // entitlement state via {@link FeatureGate} (content vs upgrade/add-on prompt).\n      // Billing OFF → `upgradeOptions` is empty, so offered == entitled (no\n      // \"offered-but-locked\" state exists without a plan to upgrade to). Billing ON\n      // → `upgradeOptions` carries the sellable-but-not-yet-owned features.\n      if (resolvedFeaturesSet.has(featureId)) return true;\n      return Boolean(resolvedFeaturesResponse?.upgradeOptions?.[featureId]);\n    },\n    [resolvedFeaturesSet, resolvedFeaturesResponse],\n  );\n\n  const getLimit = useCallback(\n    (featureId: string): number | undefined => {\n      return resolvedFeatures.limits[featureId];\n    },\n    [resolvedFeatures.limits],\n  );\n\n  const getCurrentUsage = useCallback(\n    (featureId: string): number | undefined => {\n      return resolvedFeatures.currentUsage[featureId];\n    },\n    [resolvedFeatures.currentUsage],\n  );\n\n  const getRemainingCapacity = useCallback(\n    (featureId: string): number | undefined => {\n      const limit = resolvedFeatures.limits[featureId];\n      if (limit === undefined) return undefined;\n      if (limit === FEATURES_UNLIMITED) return undefined; // unlimited → no meaningful remaining\n      const usage = resolvedFeatures.currentUsage[featureId] ?? 0;\n      return Math.max(0, limit - usage);\n    },\n    [resolvedFeatures.limits, resolvedFeatures.currentUsage],\n  );\n\n  // ── Context value (memoized for stable reference) ──\n  const contextValue: FeaturesContextType = useMemo(\n    () => ({\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      isFeatureEnabled,\n      isFeatureOffered,\n      getLimit,\n      getCurrentUsage,\n      getRemainingCapacity,\n      isLoading,\n      error,\n      refetch: fetchResolvedFeatures,\n    }),\n    [\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      isFeatureEnabled,\n      isFeatureOffered,\n      getLimit,\n      getCurrentUsage,\n      getRemainingCapacity,\n      isLoading,\n      error,\n      fetchResolvedFeatures,\n    ],\n  );\n\n  return (\n    <FeaturesContext.Provider value={contextValue}>\n      {children}\n    </FeaturesContext.Provider>\n  );\n}\n\n// Note: useFeatures hook is in a separate file (useFeatures.ts) for React Fast Refresh compatibility.\n"]}
+{"version":3,"file":"FeaturesContext.js","sourceRoot":"","sources":["../../../../../src/core/features/FeaturesContext.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAc,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC5G,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAKnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E,mCAAmC;AACnC,SAAS;AACT,mCAAmC;AAEnC,MAAM,cAAc,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAChF,MAAM,QAAQ,GAAiE,cAAc,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAC7H,cAAc,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAE7D,mCAAmC;AACnC,YAAY;AACZ,mCAAmC;AAEnC,MAAM,gBAAgB,GAAG,GAAG,kBAAkB,oBAAoB,CAAC;AAEnE,mEAAmE;AACnE,MAAM,mBAAmB,GAAG;IAC1B,kBAAkB,CAAC,sBAAsB;IACzC,kBAAkB,CAAC,4BAA4B;IAC/C,kBAAkB,CAAC,uBAAuB;IAC1C,kBAAkB,CAAC,wBAAwB;CACnC,CAAC;AA8CX,4BAA4B;AAC5B,MAAM,cAAc,GAA8B;IAChD,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAmD,aAAa,CAAkC,SAAS,CAAC,CAAC;AAYzI,MAAM,UAAU,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAyB;IACxF,cAAc;IACd,MAAM,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,GAAG,QAAQ,CAAkC,IAAI,CAAC,CAAC;IAChH,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAU,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,MAAM,CAAU,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAU,IAAI,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,MAAM,CAAuC,IAAI,CAAC,CAAC;IAE5E,uEAAuE;IACvE,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,mGAAmG;IACnG,oGAAoG;IACpG,oGAAoG;IACpG,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,eAAe,EAAE,IAAI,iBAAiB,CAAC;IAC7D,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAEtE,kBAAkB;IAClB,MAAM,EAAE,EAAE,EAAE,GAAG,YAAY,EAAE,CAAC;IAE9B,gDAAgD;IAChD,yGAAyG;IACzG,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAe,IAAI,CAAC,CAAC;IAE5C,iDAAiD;IACjD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,WAAW,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,QAAQ,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEvC,8BAA8B;IAC9B,MAAM,oBAAoB,GAAG,OAAO,CAClC,GAAG,EAAE,CAAC,oBAAoB,CAAC,oBAAoB,EAC/C,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAC5C,CAAC;IAEF,kCAAkC;IAClC,MAAM,gBAAgB,GAA8B,OAAO,CAAC,GAAG,EAAE;QAC/D,IAAI,CAAC,wBAAwB;YAAE,OAAO,cAAc,CAAC;QACrD,OAAO;YACL,QAAQ,EAAE,wBAAwB,CAAC,QAAQ;YAC3C,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,YAAY,EAAE,wBAAwB,CAAC,YAAY;SACpD,CAAC;IACJ,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAE/B,MAAM,qBAAqB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7C,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6CAA6C;IAC7C,MAAM,qBAAqB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACnD,IAAI,gBAAgB,CAAC,OAAO;YAAE,OAAO;QACrC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC;YACH,QAAQ,CAAC,yCAAyC,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,CAA2B,gBAAgB,CAAC,CAAC;YAElF,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,2BAA2B,CAAC,QAAQ,CAAC,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,QAAQ,CAAC,2BAA2B,EAAE;oBACpC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;oBACtC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM;oBAC/C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,0BAA0B,CAAC,CAAC,CAAC;gBAC7F,QAAQ,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,gBAAgB,CAAC,OAAO,GAAG,KAAK,CAAC;QACnC,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,8DAA8D;IAC9D,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,qBAAqB,EAAE,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,qBAAqB,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,GAAG,EAAE;YACV,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;QAC7B,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,aAAa,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEzF,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC;IAC3B,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEZ,yEAAyE;IACzE,gHAAgH;IAChH,6GAA6G;IAC7G,iHAAiH;IACjH,8GAA8G;IAC9G,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3B,OAAO,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAC1D,IAAI,QAAQ,CAAC,OAAO;gBAAE,qBAAqB,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEhD,oEAAoE;IACpE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa;YAAE,OAAO;QAE3B,MAAM,aAAa,GAAsB,EAAE,CAAC;QAE5C,MAAM,gBAAgB,GAAG,GAAG,EAAE;YAC5B,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC7B,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,gBAAgB,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC;gBAChC,qBAAqB,EAAE,CAAC;YAC1B,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBAC3B,QAAQ,CAAC,2DAA2D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjF,gBAAgB,EAAE,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,GAAG,EAAE;YACV,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC7B,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;gBAClC,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAE/C,8CAA8C;IAC9C,MAAM,mBAAmB,GAAG,OAAO,CACjC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EACxC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAC5B,CAAC;IAEF,8BAA8B;IAC9B,MAAM,gBAAgB,GAAG,WAAW,CAClC,CAAC,SAAiB,EAAW,EAAE;QAC7B,OAAO,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,EACD,CAAC,mBAAmB,CAAC,CACtB,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAClC,CAAC,SAAiB,EAAW,EAAE;QAC7B,0EAA0E;QAC1E,yEAAyE;QACzE,8CAA8C;QAC9C,2EAA2E;QAC3E,0BAA0B;QAC1B,8EAA8E;QAC9E,0EAA0E;QAC1E,2EAA2E;QAC3E,gFAAgF;QAChF,sEAAsE;QACtE,8EAA8E;QAC9E,sEAAsE;QACtE,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,OAAO,OAAO,CAAC,wBAAwB,EAAE,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC,EACD,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,CAChD,CAAC;IAEF,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,SAAiB,EAAsB,EAAE;QACxC,OAAO,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,EACD,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAC1B,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,CAAC,SAAiB,EAAsB,EAAE;QACxC,OAAO,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,EACD,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAChC,CAAC;IAEF,MAAM,oBAAoB,GAAG,WAAW,CACtC,CAAC,SAAiB,EAAsB,EAAE;QACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,KAAK,KAAK,kBAAkB;YAAE,OAAO,SAAS,CAAC,CAAC,sCAAsC;QAC1F,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;IACpC,CAAC,EACD,CAAC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,YAAY,CAAC,CACzD,CAAC;IAEF,sDAAsD;IACtD,MAAM,YAAY,GAAwB,OAAO,CAC/C,GAAG,EAAE,CAAC,CAAC;QACL,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,oBAAoB;QACpB,SAAS;QACT,KAAK;QACL,OAAO,EAAE,qBAAqB;KAC/B,CAAC,EACF;QACE,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,oBAAoB;QACpB,SAAS;QACT,KAAK;QACL,qBAAqB;KACtB,CACF,CAAC;IAEF,OAAO,CACL,KAAC,eAAe,CAAC,QAAQ,IAAC,KAAK,EAAE,YAAY,YAC1C,QAAQ,GACgB,CAC5B,CAAC;AACJ,CAAC","sourcesContent":["/**\n * FeaturesContext\n *\n * Central context for feature gating on the frontend.\n *\n * Responsibilities:\n * - Receives the merged FeatureConfiguration (core + custom) from app initialization\n * - Builds a definitions map for fast lookup\n * - Fetches resolved features from backend API: GET /api/v1/features/resolved\n * - Caches resolved features in context state\n * - Invalidates on WebSocket events (FEATURES_CHANGED, BILLING_STATUS_CHANGED, etc.)\n * - Exposes raw resolved features + definitions + unavailability policy\n *\n * Frontend limit checking is ADVISORY — backend gate is authoritative.\n * Stale usage data means the frontend might allow a click that the backend rejects\n * (which is acceptable — the error is caught and displayed).\n */\n\nimport React, { createContext, useContext, useEffect, useState, useCallback, useMemo, useRef } from 'react';\nimport {\n  CoreResourceType,\n  CoreWebSocketEvent,\n  FEATURES_UNLIMITED,\n  MAIN_API_BASE_PATH,\n  type FeatureConfiguration,\n  type FeatureDefinition,\n  type ResolvedFeaturesResponse,\n  type ResolvedFeaturesWithUsage,\n} from '@wildo-ai/saas-models';\nimport { useWebSocket } from '~wildo-frontend-lib/core/requests/websockets/useWebSocket';\nimport { EventBusContext } from '~wildo-frontend-lib/core/events/EventBusContext';\nimport { FrontendEvents } from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport { useResourceReachability } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\n\n// ================================\n// Logger\n// ================================\n\nconst featuresLogger: LoggerFrontendService = LoggerFrontendService.getLogger();\nconst logDebug: (message: string, context?: Record<string, unknown>) => void = featuresLogger.debugByType('FeaturesContext');\nfeaturesLogger.setDebugTypeLogging('FeaturesContext', false);\n\n// ================================\n// Constants\n// ================================\n\nconst FEATURES_API_URL = `${MAIN_API_BASE_PATH}/features/resolved`;\n\n/** WebSocket events that trigger a refetch of resolved features */\nconst INVALIDATION_EVENTS = [\n  CoreWebSocketEvent.BILLING_STATUS_CHANGED,\n  CoreWebSocketEvent.BILLING_SUBSCRIPTION_UPDATED,\n  CoreWebSocketEvent.BILLING_ACCOUNT_CHANGED,\n  CoreWebSocketEvent.BILLING_FEATURES_UPDATED,\n] as const;\n\n// ================================\n// Context Type\n// ================================\n\nexport interface FeaturesContextType {\n  // ── Resolved features from backend ──\n  /** Raw resolved features with usage data (from backend API) */\n  resolvedFeatures: ResolvedFeaturesWithUsage;\n  /** Full response including upgrade options */\n  resolvedFeaturesResponse: ResolvedFeaturesResponse | null;\n\n  // ── Feature definitions (from configuration) ──\n  /** Feature definitions map (built from featureConfiguration.definitions) */\n  featureDefinitions: Map<string, FeatureDefinition>;\n\n  // ── Policy ──\n  /** The unavailability policy (from featureConfiguration.unavailabilityPolicy) */\n  unavailabilityPolicy: FeatureConfiguration['unavailabilityPolicy'];\n\n  // ── Convenience accessors ──\n  /** Check if a boolean feature is ENTITLED for the current scope (plan/profile). */\n  isFeatureEnabled: (featureId: string) => boolean;\n  /**\n   * Check if the app OFFERS a feature for the current scope — entitled now, or\n   * reachable via an upgrade/add-on. Plan-independent survival signal, distinct\n   * from `isFeatureEnabled` (entitlement). See the impl for the two-axis rationale.\n   */\n  isFeatureOffered: (featureId: string) => boolean;\n  /** Get a limit value (FEATURES_UNLIMITED = unlimited). Returns undefined if feature not found. */\n  getLimit: (featureId: string) => number | undefined;\n  /** Get current usage for a limit feature. undefined if no usage data. */\n  getCurrentUsage: (featureId: string) => number | undefined;\n  /** Get remaining capacity (limit - current). undefined if unlimited or no counting. */\n  getRemainingCapacity: (featureId: string) => number | undefined;\n\n  // ── State ──\n  isLoading: boolean;\n  error: Error | null;\n\n  // ── Actions ──\n  /** Force refetch of resolved features (e.g., after a mutation on a counted resource) */\n  refetch: () => void;\n}\n\n// ── Default empty state ──\nconst EMPTY_RESOLVED: ResolvedFeaturesWithUsage = {\n  features: [],\n  limits: {},\n  currentUsage: {},\n};\n\nexport const FeaturesContext: React.Context<FeaturesContextType | undefined> = createContext<FeaturesContextType | undefined>(undefined);\n\n// ================================\n// Provider\n// ================================\n\ninterface FeaturesProviderProps {\n  /** Merged FeatureConfiguration (core + custom) — passed from app initialization */\n  featureConfiguration: FeatureConfiguration;\n  children: React.ReactNode;\n}\n\nexport function FeaturesProvider({ featureConfiguration, children }: FeaturesProviderProps): React.ReactElement {\n  // ── State ──\n  const [resolvedFeaturesResponse, setResolvedFeaturesResponse] = useState<ResolvedFeaturesResponse | null>(null);\n  const [isLoading, setIsLoading] = useState<boolean>(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  // ── Refs for stable callbacks ──\n  const fetchInFlightRef = useRef<boolean>(false);\n  const mountedRef = useRef<boolean>(true);\n  const debounceTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);\n\n  // ── Auth — features are user-scoped, only fetch when authenticated ──\n  const { isAuthenticated } = useAuthSession();\n  // Fetch only when this consumer can REACH the features route: configured-and-authenticated is half\n  // the answer (#1069, the #268 rule). The resolved features are derived from the per-user ledger, so\n  // a consumer whose registry excludes it — the application-creation workbench — has no route to ask.\n  const featuresReachable = useResourceReachability(CoreResourceType.USER_FEATURES);\n  const authenticated = isAuthenticated() && featuresReachable;\n  const appScope = useAppScopeSafe();\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n\n  // ── WebSocket ──\n  const { on } = useWebSocket();\n\n  // ── Frontend event bus (preference changes) ──\n  // Read from the context directly: `useEventBus().bus` is typed as the React context object, not the bus.\n  const bus = useContext(EventBusContext);\n  const errorRef = useRef<Error | null>(null);\n\n  // ── Build definitions map from configuration ──\n  const featureDefinitions = useMemo(() => {\n    const map = new Map<string, FeatureDefinition>();\n    for (const def of featureConfiguration.definitions) {\n      map.set(def.identifier, def);\n    }\n    logDebug('Feature definitions map built', { count: map.size });\n    return map;\n  }, [featureConfiguration.definitions]);\n\n  // ── Unavailability policy ──\n  const unavailabilityPolicy = useMemo(\n    () => featureConfiguration.unavailabilityPolicy,\n    [featureConfiguration.unavailabilityPolicy],\n  );\n\n  // ── Derived resolved features ──\n  const resolvedFeatures: ResolvedFeaturesWithUsage = useMemo(() => {\n    if (!resolvedFeaturesResponse) return EMPTY_RESOLVED;\n    return {\n      features: resolvedFeaturesResponse.features,\n      limits: resolvedFeaturesResponse.limits,\n      currentUsage: resolvedFeaturesResponse.currentUsage,\n    };\n  }, [resolvedFeaturesResponse]);\n\n  const clearResolvedFeatures = useCallback(() => {\n    setResolvedFeaturesResponse(null);\n    setError(null);\n    setIsLoading(false);\n  }, []);\n\n  // ── Fetch resolved features from backend ──\n  const fetchResolvedFeatures = useCallback(async () => {\n    if (fetchInFlightRef.current) return;\n    fetchInFlightRef.current = true;\n\n    try {\n      logDebug('Fetching resolved features from backend');\n      const httpClient = getManualCallsHttpClient();\n      const response = await httpClient.get<ResolvedFeaturesResponse>(FEATURES_API_URL);\n\n      if (mountedRef.current) {\n        setResolvedFeaturesResponse(response);\n        setError(null);\n        logDebug('Resolved features fetched', {\n          featureCount: response.features.length,\n          limitCount: Object.keys(response.limits).length,\n          usageCount: Object.keys(response.currentUsage).length,\n        });\n      }\n    } catch (err: any) {\n      if (mountedRef.current) {\n        setError(err instanceof Error ? err : new Error(err?.message ?? 'Failed to fetch features'));\n        logDebug('Failed to fetch resolved features', { error: err?.message });\n      }\n    } finally {\n      if (mountedRef.current) {\n        setIsLoading(false);\n      }\n      fetchInFlightRef.current = false;\n    }\n  }, []);\n\n  // ── Fetch when authenticated (and refetch on auth change) ──\n  useEffect(() => {\n    mountedRef.current = true;\n    if (authenticated) {\n      setIsLoading(true);\n      fetchResolvedFeatures();\n    } else {\n      clearResolvedFeatures();\n    }\n    return () => {\n      mountedRef.current = false;\n    };\n  }, [authenticated, currentOrganizationId, fetchResolvedFeatures, clearResolvedFeatures]);\n\n  useEffect(() => {\n    errorRef.current = error;\n  }, [error]);\n\n  // ── Retry a FAILED fetch when the person's preferences change (#534) ──\n  // A declared service consent requirement refuses this read until the person grants it, so the fetch that ran at\n  // sign-in can fail — and while the organization stays the same nothing else would retry it, leaving features\n  // unresolved until a reload. A preferences change is how a consent decision reaches the rest of the application,\n  // so it retries a failed fetch. Only a failed one: a theme or language change does not invalidate a good set.\n  useEffect(() => {\n    if (!authenticated) return;\n    return bus.on(FrontendEvents.USER_PREFERENCES_CHANGED, () => {\n      if (errorRef.current) fetchResolvedFeatures();\n    });\n  }, [authenticated, bus, fetchResolvedFeatures]);\n\n  // ── WebSocket invalidation (debounced to coalesce rapid events) ──\n  useEffect(() => {\n    if (!authenticated) return;\n\n    const unsubscribers: Array<() => void> = [];\n\n    const debouncedRefetch = () => {\n      if (debounceTimerRef.current) {\n        clearTimeout(debounceTimerRef.current);\n      }\n      debounceTimerRef.current = setTimeout(() => {\n        debounceTimerRef.current = null;\n        fetchResolvedFeatures();\n      }, 300);\n    };\n\n    for (const event of INVALIDATION_EVENTS) {\n      const unsub = on(event, () => {\n        logDebug('WebSocket invalidation event received, scheduling refetch', { event });\n        debouncedRefetch();\n      });\n      unsubscribers.push(unsub);\n    }\n\n    return () => {\n      if (debounceTimerRef.current) {\n        clearTimeout(debounceTimerRef.current);\n      }\n      for (const unsub of unsubscribers) {\n        unsub();\n      }\n    };\n  }, [authenticated, on, fetchResolvedFeatures]);\n\n  // ── Derived features set for O(1) lookups ──\n  const resolvedFeaturesSet = useMemo(\n    () => new Set(resolvedFeatures.features),\n    [resolvedFeatures.features],\n  );\n\n  // ── Convenience accessors ──\n  const isFeatureEnabled = useCallback(\n    (featureId: string): boolean => {\n      return resolvedFeaturesSet.has(featureId);\n    },\n    [resolvedFeaturesSet],\n  );\n\n  const isFeatureOffered = useCallback(\n    (featureId: string): boolean => {\n      // \"Offered\" = the app makes this feature available for the current scope,\n      // INDEPENDENT of whether the current plan/profile currently ENTITLES it:\n      //  - entitled now (in `resolvedFeatures`), OR\n      //  - not entitled but reachable via an upgrade/add-on the backend surfaced\n      //    in `upgradeOptions`.\n      // This is the plan-independent \"does this app offer feature X\" axis, distinct\n      // from `isFeatureEnabled` (the entitlement axis). Consumers gate SURVIVAL\n      // (should the surface exist at all) on `isFeatureOffered`, then render the\n      // entitlement state via {@link FeatureGate} (content vs upgrade/add-on prompt).\n      // Billing OFF → `upgradeOptions` is empty, so offered == entitled (no\n      // \"offered-but-locked\" state exists without a plan to upgrade to). Billing ON\n      // → `upgradeOptions` carries the sellable-but-not-yet-owned features.\n      if (resolvedFeaturesSet.has(featureId)) return true;\n      return Boolean(resolvedFeaturesResponse?.upgradeOptions?.[featureId]);\n    },\n    [resolvedFeaturesSet, resolvedFeaturesResponse],\n  );\n\n  const getLimit = useCallback(\n    (featureId: string): number | undefined => {\n      return resolvedFeatures.limits[featureId];\n    },\n    [resolvedFeatures.limits],\n  );\n\n  const getCurrentUsage = useCallback(\n    (featureId: string): number | undefined => {\n      return resolvedFeatures.currentUsage[featureId];\n    },\n    [resolvedFeatures.currentUsage],\n  );\n\n  const getRemainingCapacity = useCallback(\n    (featureId: string): number | undefined => {\n      const limit = resolvedFeatures.limits[featureId];\n      if (limit === undefined) return undefined;\n      if (limit === FEATURES_UNLIMITED) return undefined; // unlimited → no meaningful remaining\n      const usage = resolvedFeatures.currentUsage[featureId] ?? 0;\n      return Math.max(0, limit - usage);\n    },\n    [resolvedFeatures.limits, resolvedFeatures.currentUsage],\n  );\n\n  // ── Context value (memoized for stable reference) ──\n  const contextValue: FeaturesContextType = useMemo(\n    () => ({\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      isFeatureEnabled,\n      isFeatureOffered,\n      getLimit,\n      getCurrentUsage,\n      getRemainingCapacity,\n      isLoading,\n      error,\n      refetch: fetchResolvedFeatures,\n    }),\n    [\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      isFeatureEnabled,\n      isFeatureOffered,\n      getLimit,\n      getCurrentUsage,\n      getRemainingCapacity,\n      isLoading,\n      error,\n      fetchResolvedFeatures,\n    ],\n  );\n\n  return (\n    <FeaturesContext.Provider value={contextValue}>\n      {children}\n    </FeaturesContext.Provider>\n  );\n}\n\n// Note: useFeatures hook is in a separate file (useFeatures.ts) for React Fast Refresh compatibility.\n"]}