@wildo-ai/saas-frontend-lib 1.1.5 → 1.1.7

package/dist/esm/core/external-providers/ProviderAddressLookupHost.js

@@ -0,0 +1,144 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The framework side of an address lookup (#561): offer the live `FRONTEND_ADDRESS_LOOKUP` providers, load the
+ * chosen one's component, run its vendor calls through the application backend, hold what it returns to the
+ * field's own rules, and keep the field usable by hand whatever happens.
+ *
+ * `FormField` renders it in every `z_address()` field's `renderLookup` slot. With no live lookup provider — every
+ * application that declared none — it renders NOTHING, and the field is the plain multi-part control.
+ *
+ * ## What the host ENFORCES, because a component could forget (#561 D2, D4)
+ *
+ * - **The vendor is reached only through the provider-operation door.** The component receives `suggest` and
+ *   `retrieve`, bound to the two operations its descriptor declares and run through
+ *   `POST /provider-operations/:providerRef/:operationId` on the application's own account. The page holds no
+ *   vendor key; the backend admits each operation by `providers.browserOperations`, counts it against the person,
+ *   and records it. A provider whose component declares no `addressLookup` operations is not offered at all.
+ * - **One vendor session per lookup.** The host writes a UUIDv4 into the declared `sessionTokenInput` of every
+ *   suggestion and of the retrieval, and starts a new one after a retrieval or when the lookup is abandoned — so a
+ *   vendor that bills by session is never billed per keystroke by a component that forgot the token.
+ * - **The vendor's attribution is handed to the component** from the descriptor's `attributionMark` — the mark
+ *   verbatim and a sentence from the application's labels naming it — for the component to show inside its
+ *   suggestion popup, the container the vendor's terms require (the framework combobox does, with
+ *   `ProviderAddressLookupAttribution`).
+ * - **The field decides.** A chosen address passes `receiveProviderAddressLookupSelection` against the field's own
+ *   schema (countries, required parts) and the component's declared place-id retention before `applyAddress`; a
+ *   refused one fills nothing and says so.
+ *
+ * ## Manual entry always works (#561 D5)
+ *
+ * A refusal, a throttle, a vendor timeout, a component that fails to load: each leaves the parts exactly as they
+ * were, editable, and shows one status line telling the person to enter the address below. Nothing blocks the
+ * form's submission.
+ */
+import { useCallback, useMemo, useRef, useState } from 'react';
+import { ButtonSize, FormFieldAddressLookupLabel, FrontendComponentType } from '@wildo-ai/presets-components-models';
+import { CoreResourceType, UserPrivacySchema } from '@wildo-ai/saas-models';
+import { BUILTIN_PROVIDER_CAPABILITY } from '@wildo-ai/saas-models/public-runtime';
+import { getZodObjectShape } from '@wildo-ai/zod-decorators';
+import { ProviderComponentStatus } from '@wildo-ai/external-connectors-public/app';
+import { useApplication } from '../../core/runtime/useApplication.js';
+import { useI18n } from '../../core/i18n/useI18n.js';
+import { useGrantedConsentPurposes } from '../../core/security/useGrantedConsentPurposes.js';
+import { getManualCallsHttpClient } from '../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
+import { useProviderComponent, useProviderComponentChoices, } from '../../core/components-registry/useProviderComponent.frontend.hooks.js';
+import { Button, ButtonVariants_Variant } from '../../components/actions/button.js';
+import { FieldLabel } from '../../components/form/chromes/field.js';
+import { receiveProviderAddressLookupSelection } from './provider-address-lookup-selection.frontend.utils.js';
+import { ProviderAddressLookupPlaceWithoutAddressError } from './ProviderAddressLookupCombobox.js';
+const ADDRESS_LOOKUP_CAPABILITY = BUILTIN_PROVIDER_CAPABILITY.FRONTEND_ADDRESS_LOOKUP;
+/** Consent purposes are worded through the field that stores a person's grant (#966), as the file field does. */
+const CONSENTED_PURPOSES_FIELD_SCHEMA = getZodObjectShape(UserPrivacySchema).consentedPurposes;
+/** Why the lookup is showing a status line instead of (or beside) its search. */
+export var ProviderAddressLookupNotice;
+(function (ProviderAddressLookupNotice) {
+    /** The lookup could not run; the parts work by hand. */
+    ProviderAddressLookupNotice["UNAVAILABLE"] = "UNAVAILABLE";
+    /** The chosen place could not fill this field. */
+    ProviderAddressLookupNotice["ADDRESS_REFUSED"] = "ADDRESS_REFUSED";
+})(ProviderAddressLookupNotice || (ProviderAddressLookupNotice = {}));
+/** A fresh vendor session token: a version 4 UUID, as Google recommends for Places session tokens. */
+function newSessionToken() {
+    return globalThis.crypto.randomUUID();
+}
+export function ProviderAddressLookupHost({ host, addressSchema, fieldName }) {
+    const { providerComponentRegistry, frontendProviderRegistry } = useApplication();
+    const { t, tComponent, tResourceFieldEnumValue, currentLanguage } = useI18n({ component: [FrontendComponentType.LOW_LEVEL_FORM_FIELD_ADDRESS] });
+    const label = (key, params) => tComponent(FrontendComponentType.LOW_LEVEL_FORM_FIELD_ADDRESS, key, params);
+    const allChoices = useProviderComponentChoices(ADDRESS_LOOKUP_CAPABILITY);
+    // Offered only when the component declares how it reaches its vendor: without declared operations there is no
+    // call this host could make on its behalf, and a component making its own would bypass the door.
+    const choices = useMemo(() => allChoices.filter((choice) => providerComponentRegistry?.describe(ADDRESS_LOOKUP_CAPABILITY, choice.providerRef)?.addressLookup !== undefined), [allChoices, providerComponentRegistry]);
+    const [pickedRef, setPickedRef] = useState(undefined);
+    // A single provider needs no chooser; several are a genuine choice the person makes, never this host.
+    const chosen = pickedRef ?? (choices.length === 1 ? choices[0]?.providerRef : undefined);
+    const { status, Component, missingConsentPurposes } = useProviderComponent(ADDRESS_LOOKUP_CAPABILITY, chosen);
+    const { grant: grantConsent } = useGrantedConsentPurposes();
+    const [notice, setNotice] = useState(undefined);
+    const descriptor = chosen === undefined ? undefined : providerComponentRegistry?.describe(ADDRESS_LOOKUP_CAPABILITY, chosen);
+    const declaration = descriptor?.addressLookup;
+    /** The current vendor session; `undefined` until the first call of a session needs one. */
+    const sessionTokenRef = useRef(undefined);
+    const endSession = useCallback(() => {
+        sessionTokenRef.current = undefined;
+    }, []);
+    const run = useCallback(async (operationId, input) => {
+        if (chosen === undefined)
+            throw new Error('No address lookup provider is chosen.');
+        const tokenInput = declaration?.sessionTokenInput;
+        let sent = { ...input };
+        if (tokenInput !== undefined) {
+            sessionTokenRef.current ??= newSessionToken();
+            // Written by the host AFTER the component's input, so a component cannot send its own token instead.
+            sent = { ...sent, [tokenInput]: sessionTokenRef.current };
+        }
+        const answer = await getManualCallsHttpClient().executeProviderOperation(chosen, operationId, { input: sent });
+        return answer.output;
+    }, [chosen, declaration?.sessionTokenInput]);
+    const suggest = useCallback((input) => {
+        if (declaration === undefined)
+            return Promise.reject(new Error('The address lookup declares no operations.'));
+        return run(declaration.suggestOperationId, input);
+    }, [declaration, run]);
+    const retrieve = useCallback((input) => {
+        if (declaration === undefined)
+            return Promise.reject(new Error('The address lookup declares no operations.'));
+        // The retrieval ends the vendor session whatever it answers: the next search is a new session.
+        return run(declaration.retrieveOperationId, input).finally(endSession);
+    }, [declaration, endSession, run]);
+    const handleSelect = useCallback((selection) => {
+        if (chosen === undefined)
+            return;
+        endSession();
+        const outcome = receiveProviderAddressLookupSelection({ providerRef: chosen, descriptor, selection, addressSchema });
+        if (outcome.accepted === undefined) {
+            setNotice(ProviderAddressLookupNotice.ADDRESS_REFUSED);
+            return;
+        }
+        setNotice(undefined);
+        host.applyAddress(outcome.accepted.address);
+    }, [addressSchema, chosen, descriptor, endSession, host]);
+    const handleCancel = useCallback(() => endSession(), [endSession]);
+    const handleError = useCallback((error) => {
+        endSession();
+        // A place with no holdable address is the lookup WORKING and the place being unusable — said as such.
+        setNotice(error instanceof ProviderAddressLookupPlaceWithoutAddressError ? ProviderAddressLookupNotice.ADDRESS_REFUSED : ProviderAddressLookupNotice.UNAVAILABLE);
+    }, [endSession]);
+    if (choices.length === 0)
+        return null;
+    const chosenChoice = choices.find((choice) => choice.providerRef === chosen);
+    const providerName = (choice) => t(choice.displayNameLabelKey) ?? choice.displayName ?? choice.providerRef;
+    const lookupName = `${fieldName}.lookup`;
+    const Lookup = Component;
+    const failedToLoad = status === ProviderComponentStatus.UNAVAILABLE;
+    const shownNotice = failedToLoad ? ProviderAddressLookupNotice.UNAVAILABLE : notice;
+    return (_jsxs("div", { className: "flex flex-col gap-1", "data-address-lookup": chosen ?? '', children: [_jsx(FieldLabel, { htmlFor: `field-${lookupName}`, className: "text-sm text-muted-foreground", children: label(FormFieldAddressLookupLabel.LOOKUP_LABEL) }), choices.length > 1 ? (_jsx("div", { role: "group", className: "flex flex-wrap gap-item-xs", children: choices.map((choice) => (_jsx(Button, { type: "button", size: ButtonSize.SM, variant: choice.providerRef === chosen ? ButtonVariants_Variant.DEFAULT : ButtonVariants_Variant.OUTLINE, "aria-pressed": choice.providerRef === chosen, onClick: () => { setNotice(undefined); endSession(); setPickedRef(choice.providerRef); }, children: providerName(choice) }, choice.providerRef))) })) : null, status === ProviderComponentStatus.CONSENT_REQUIRED && chosenChoice !== undefined ? (_jsx("div", { role: "status", className: "flex flex-wrap items-center gap-item-xs text-sm text-muted-foreground", children: (() => {
+                    const purposes = missingConsentPurposes
+                        .map((purpose) => tResourceFieldEnumValue(CoreResourceType.USER_SELF_PREFERENCES, 'privacy.consentedPurposes', purpose, CONSENTED_PURPOSES_FIELD_SCHEMA))
+                        .join(', ');
+                    return (_jsxs(_Fragment, { children: [_jsx("span", { children: label(FormFieldAddressLookupLabel.LOOKUP_CONSENT_REQUIRED, { provider: providerName(chosenChoice), purposes }) }), grantConsent === undefined ? null : (_jsx(Button, { type: "button", size: ButtonSize.SM, variant: ButtonVariants_Variant.OUTLINE, onClick: () => void grantConsent(missingConsentPurposes), children: label(FormFieldAddressLookupLabel.LOOKUP_CONSENT_GRANT, { purposes }) }))] }));
+                })() })) : null, status === ProviderComponentStatus.READY && Lookup !== null && chosen !== undefined && declaration !== undefined ? (_jsx(_Fragment, { children: _jsx(Lookup, { providerRef: chosen, publicConfig: frontendProviderRegistry?.getProviderByRef(chosen)?.publicConfig ?? {}, ...(host.countriesAllowed !== undefined ? { countriesAllowed: host.countriesAllowed } : {}), ...(host.defaultCountry !== undefined ? { defaultCountry: host.defaultCountry } : {}), languageCode: currentLanguage, disabled: host.disabled, name: lookupName, ...(declaration.attributionMark !== undefined
+                        ? { attribution: { mark: declaration.attributionMark, accessibleLabel: label(FormFieldAddressLookupLabel.LOOKUP_ATTRIBUTION, { mark: declaration.attributionMark }) } }
+                        : {}), suggest: suggest, retrieve: retrieve, onSelect: handleSelect, onCancel: handleCancel, onError: handleError }) })) : null, shownNotice !== undefined ? (_jsx("p", { role: "status", className: "text-sm text-muted-foreground", children: label(shownNotice === ProviderAddressLookupNotice.UNAVAILABLE ? FormFieldAddressLookupLabel.LOOKUP_UNAVAILABLE : FormFieldAddressLookupLabel.LOOKUP_ADDRESS_REFUSED) })) : null] }));
+}
+//# sourceMappingURL=ProviderAddressLookupHost.js.map

package/dist/esm/core/external-providers/ProviderAddressLookupHost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProviderAddressLookupHost.js","sourceRoot":"","sources":["../../../../src/core/external-providers/ProviderAddressLookupHost.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEtE,OAAO,EAAE,UAAU,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAErH,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAyC,MAAM,sCAAsC,CAAC;AAC1H,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAEnF,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6DAA6D,CAAC;AACxG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EACL,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,mDAAmD,CAAC;AAE/E,OAAO,EAAE,qCAAqC,EAAE,MAAM,oDAAoD,CAAC;AAC3G,OAAO,EAAE,6CAA6C,EAAE,MAAM,iCAAiC,CAAC;AAEhG,MAAM,yBAAyB,GAAG,2BAA2B,CAAC,uBAA6C,CAAC;AAE5G,iHAAiH;AACjH,MAAM,+BAA+B,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,iBAAiB,CAAC;AAE/F,iFAAiF;AACjF,MAAM,CAAN,IAAY,2BAKX;AALD,WAAY,2BAA2B;IACrC,wDAAwD;IACxD,0DAA2B,CAAA;IAC3B,kDAAkD;IAClD,kEAAmC,CAAA;AACrC,CAAC,EALW,2BAA2B,KAA3B,2BAA2B,QAKtC;AAWD,sGAAsG;AACtG,SAAS,eAAe;IACtB,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAkC;IAC1G,MAAM,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;IACjF,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,uBAAuB,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,qBAAqB,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;IACjJ,MAAM,KAAK,GAAG,CAAC,GAAgC,EAAE,MAAwC,EAAE,EAAE,CAC3F,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAE9E,MAAM,UAAU,GAAG,2BAA2B,CAAC,yBAAyB,CAAC,CAAC;IAC1E,8GAA8G;IAC9G,iGAAiG;IACjG,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,aAAa,KAAK,SAAS,CAAC,EACpJ,CAAC,UAAU,EAAE,yBAAyB,CAAC,CACxC,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAqB,SAAS,CAAC,CAAC;IAC1E,sGAAsG;IACtG,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzF,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,GAAG,oBAAoB,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;IAC9G,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,yBAAyB,EAAE,CAAC;IAC5D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAA0C,SAAS,CAAC,CAAC;IAEzF,MAAM,UAAU,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;IAC7H,MAAM,WAAW,GAAiD,UAAU,EAAE,aAAa,CAAC;IAE5F,2FAA2F;IAC3F,MAAM,eAAe,GAAG,MAAM,CAAqB,SAAS,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,eAAe,CAAC,OAAO,GAAG,SAAS,CAAC;IACtC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,GAAG,GAAG,WAAW,CACrB,KAAK,EAAE,WAAmB,EAAE,KAAwC,EAAoB,EAAE;QACxF,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACnF,MAAM,UAAU,GAAG,WAAW,EAAE,iBAAiB,CAAC;QAClD,IAAI,IAAI,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;QACjD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,eAAe,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;YAC9C,qGAAqG;YACrG,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,OAAO,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC,wBAAwB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/G,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,EACD,CAAC,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,CACzC,CAAC;IAEF,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,KAAwC,EAAE,EAAE;QAC3C,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;QAC9G,OAAO,GAAG,CAAC,WAAW,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC,EACD,CAAC,WAAW,EAAE,GAAG,CAAC,CACnB,CAAC;IAEF,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,KAAwC,EAAE,EAAE;QAC3C,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;QAC9G,+FAA+F;QAC/F,OAAO,GAAG,CAAC,WAAW,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC,EACD,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,CAC/B,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAC9B,CAAC,SAAyC,EAAE,EAAE;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,UAAU,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,qCAAqC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QACrH,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,SAAS,CAAC,2BAA2B,CAAC,eAAe,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC,EACD,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,CACtD,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEnE,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,KAAY,EAAE,EAAE;QAC/C,UAAU,EAAE,CAAC;QACb,sGAAsG;QACtG,SAAS,CAAC,KAAK,YAAY,6CAA6C,CAAC,CAAC,CAAC,2BAA2B,CAAC,eAAe,CAAC,CAAC,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACpK,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,CAAC,MAAgC,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;IAC7I,MAAM,UAAU,GAAG,GAAG,SAAS,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,SAAmE,CAAC;IACnF,MAAM,YAAY,GAAG,MAAM,KAAK,uBAAuB,CAAC,WAAW,CAAC;IACpE,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IAEpF,OAAO,CACL,eAAK,SAAS,EAAC,qBAAqB,yBAAsB,MAAM,IAAI,EAAE,aACpE,KAAC,UAAU,IAAC,OAAO,EAAE,SAAS,UAAU,EAAE,EAAE,SAAS,EAAC,+BAA+B,YAClF,KAAK,CAAC,2BAA2B,CAAC,YAAY,CAAC,GACrC,EACZ,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CACpB,cAAK,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,4BAA4B,YACrD,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CACvB,KAAC,MAAM,IAEL,IAAI,EAAC,QAAQ,EACb,IAAI,EAAE,UAAU,CAAC,EAAE,EACnB,OAAO,EAAE,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,kBAC1F,MAAM,CAAC,WAAW,KAAK,MAAM,EAC3C,OAAO,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAEvF,YAAY,CAAC,MAAM,CAAC,IAPhB,MAAM,CAAC,WAAW,CAQhB,CACV,CAAC,GACE,CACP,CAAC,CAAC,CAAC,IAAI,EACP,MAAM,KAAK,uBAAuB,CAAC,gBAAgB,IAAI,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CACnF,cAAK,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,uEAAuE,YACjG,CAAC,GAAG,EAAE;oBACL,MAAM,QAAQ,GAAG,sBAAsB;yBACpC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,2BAA2B,EAAE,OAAO,EAAE,+BAA+B,CAAC,CAAC;yBACxJ,IAAI,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO,CACL,8BACE,yBAAO,KAAK,CAAC,2BAA2B,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAQ,EAC5H,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CACnC,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,YAAY,CAAC,sBAAsB,CAAC,YACzI,KAAK,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,CAAC,GAC/D,CACV,IACA,CACJ,CAAC;gBACJ,CAAC,CAAC,EAAE,GACA,CACP,CAAC,CAAC,CAAC,IAAI,EACP,MAAM,KAAK,uBAAuB,CAAC,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAClH,4BACE,KAAC,MAAM,IACL,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,wBAAwB,EAAE,gBAAgB,CAAC,MAAe,CAAC,EAAE,YAAY,IAAI,EAAE,KACzF,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KACxF,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACtF,YAAY,EAAE,eAAe,EAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ,EACvB,IAAI,EAAE,UAAU,KACZ,CAAC,WAAW,CAAC,eAAe,KAAK,SAAS;wBAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,eAAe,EAAE,eAAe,EAAE,KAAK,CAAC,2BAA2B,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE;wBACvK,CAAC,CAAC,EAAE,CAAC,EACP,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,WAAW,GACpB,GACD,CACJ,CAAC,CAAC,CAAC,IAAI,EACP,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAC3B,YAAG,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,+BAA+B,YACvD,KAAK,CAAC,WAAW,KAAK,2BAA2B,CAAC,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,kBAAkB,CAAC,CAAC,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,GACnK,CACL,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The framework side of an address lookup (#561): offer the live `FRONTEND_ADDRESS_LOOKUP` providers, load the\n * chosen one's component, run its vendor calls through the application backend, hold what it returns to the\n * field's own rules, and keep the field usable by hand whatever happens.\n *\n * `FormField` renders it in every `z_address()` field's `renderLookup` slot. With no live lookup provider — every\n * application that declared none — it renders NOTHING, and the field is the plain multi-part control.\n *\n * ## What the host ENFORCES, because a component could forget (#561 D2, D4)\n *\n * - **The vendor is reached only through the provider-operation door.** The component receives `suggest` and\n *   `retrieve`, bound to the two operations its descriptor declares and run through\n *   `POST /provider-operations/:providerRef/:operationId` on the application's own account. The page holds no\n *   vendor key; the backend admits each operation by `providers.browserOperations`, counts it against the person,\n *   and records it. A provider whose component declares no `addressLookup` operations is not offered at all.\n * - **One vendor session per lookup.** The host writes a UUIDv4 into the declared `sessionTokenInput` of every\n *   suggestion and of the retrieval, and starts a new one after a retrieval or when the lookup is abandoned — so a\n *   vendor that bills by session is never billed per keystroke by a component that forgot the token.\n * - **The vendor's attribution is handed to the component** from the descriptor's `attributionMark` — the mark\n *   verbatim and a sentence from the application's labels naming it — for the component to show inside its\n *   suggestion popup, the container the vendor's terms require (the framework combobox does, with\n *   `ProviderAddressLookupAttribution`).\n * - **The field decides.** A chosen address passes `receiveProviderAddressLookupSelection` against the field's own\n *   schema (countries, required parts) and the component's declared place-id retention before `applyAddress`; a\n *   refused one fills nothing and says so.\n *\n * ## Manual entry always works (#561 D5)\n *\n * A refusal, a throttle, a vendor timeout, a component that fails to load: each leaves the parts exactly as they\n * were, editable, and shows one status line telling the person to enter the address below. Nothing blocks the\n * form's submission.\n */\n\nimport React, { useCallback, useMemo, useRef, useState } from 'react';\nimport type { z } from 'zod';\nimport { ButtonSize, FormFieldAddressLookupLabel, FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport type { ProviderAddressLookupProps, ProviderAddressLookupSelection, ProviderCapability } from '@wildo-ai/saas-models';\nimport { CoreResourceType, UserPrivacySchema } from '@wildo-ai/saas-models';\nimport { BUILTIN_PROVIDER_CAPABILITY, type ProviderAddressLookupDeclaration } from '@wildo-ai/saas-models/public-runtime';\nimport { getZodObjectShape } from '@wildo-ai/zod-decorators';\nimport { ProviderComponentStatus } from '@wildo-ai/external-connectors-public/app';\n\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useGrantedConsentPurposes } from '~wildo-frontend-lib/core/security/useGrantedConsentPurposes';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport {\n  useProviderComponent,\n  useProviderComponentChoices,\n} from '~wildo-frontend-lib/core/components-registry/useProviderComponent.frontend.hooks';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { FieldLabel } from '~wildo-frontend-lib/components/form/chromes/field';\nimport type { AddressFieldLookupHost } from '~wildo-frontend-lib/components/form/fields/form-field-address';\nimport { receiveProviderAddressLookupSelection } from './provider-address-lookup-selection.frontend.utils';\nimport { ProviderAddressLookupPlaceWithoutAddressError } from './ProviderAddressLookupCombobox';\n\nconst ADDRESS_LOOKUP_CAPABILITY = BUILTIN_PROVIDER_CAPABILITY.FRONTEND_ADDRESS_LOOKUP as ProviderCapability;\n\n/** Consent purposes are worded through the field that stores a person's grant (#966), as the file field does. */\nconst CONSENTED_PURPOSES_FIELD_SCHEMA = getZodObjectShape(UserPrivacySchema).consentedPurposes;\n\n/** Why the lookup is showing a status line instead of (or beside) its search. */\nexport enum ProviderAddressLookupNotice {\n  /** The lookup could not run; the parts work by hand. */\n  UNAVAILABLE = 'UNAVAILABLE',\n  /** The chosen place could not fill this field. */\n  ADDRESS_REFUSED = 'ADDRESS_REFUSED',\n}\n\nexport interface ProviderAddressLookupHostProps {\n  /** What the field hands its `renderLookup` slot. */\n  readonly host: AddressFieldLookupHost;\n  /** The field's own `z_address()` schema: a chosen address it refuses is refused here, before it fills anything. */\n  readonly addressSchema: z.ZodType;\n  /** The field's form name; the lookup control is named `<name>.lookup`. */\n  readonly fieldName: string;\n}\n\n/** A fresh vendor session token: a version 4 UUID, as Google recommends for Places session tokens. */\nfunction newSessionToken(): string {\n  return globalThis.crypto.randomUUID();\n}\n\nexport function ProviderAddressLookupHost({ host, addressSchema, fieldName }: ProviderAddressLookupHostProps): React.ReactElement | null {\n  const { providerComponentRegistry, frontendProviderRegistry } = useApplication();\n  const { t, tComponent, tResourceFieldEnumValue, currentLanguage } = useI18n({ component: [FrontendComponentType.LOW_LEVEL_FORM_FIELD_ADDRESS] });\n  const label = (key: FormFieldAddressLookupLabel, params?: Record<string, string | number>) =>\n    tComponent(FrontendComponentType.LOW_LEVEL_FORM_FIELD_ADDRESS, key, params);\n\n  const allChoices = useProviderComponentChoices(ADDRESS_LOOKUP_CAPABILITY);\n  // Offered only when the component declares how it reaches its vendor: without declared operations there is no\n  // call this host could make on its behalf, and a component making its own would bypass the door.\n  const choices = useMemo(\n    () => allChoices.filter((choice) => providerComponentRegistry?.describe(ADDRESS_LOOKUP_CAPABILITY, choice.providerRef)?.addressLookup !== undefined),\n    [allChoices, providerComponentRegistry],\n  );\n  const [pickedRef, setPickedRef] = useState<string | undefined>(undefined);\n  // A single provider needs no chooser; several are a genuine choice the person makes, never this host.\n  const chosen = pickedRef ?? (choices.length === 1 ? choices[0]?.providerRef : undefined);\n  const { status, Component, missingConsentPurposes } = useProviderComponent(ADDRESS_LOOKUP_CAPABILITY, chosen);\n  const { grant: grantConsent } = useGrantedConsentPurposes();\n  const [notice, setNotice] = useState<ProviderAddressLookupNotice | undefined>(undefined);\n\n  const descriptor = chosen === undefined ? undefined : providerComponentRegistry?.describe(ADDRESS_LOOKUP_CAPABILITY, chosen);\n  const declaration: ProviderAddressLookupDeclaration | undefined = descriptor?.addressLookup;\n\n  /** The current vendor session; `undefined` until the first call of a session needs one. */\n  const sessionTokenRef = useRef<string | undefined>(undefined);\n  const endSession = useCallback(() => {\n    sessionTokenRef.current = undefined;\n  }, []);\n\n  const run = useCallback(\n    async (operationId: string, input: Readonly<Record<string, unknown>>): Promise<unknown> => {\n      if (chosen === undefined) throw new Error('No address lookup provider is chosen.');\n      const tokenInput = declaration?.sessionTokenInput;\n      let sent: Record<string, unknown> = { ...input };\n      if (tokenInput !== undefined) {\n        sessionTokenRef.current ??= newSessionToken();\n        // Written by the host AFTER the component's input, so a component cannot send its own token instead.\n        sent = { ...sent, [tokenInput]: sessionTokenRef.current };\n      }\n      const answer = await getManualCallsHttpClient().executeProviderOperation(chosen, operationId, { input: sent });\n      return answer.output;\n    },\n    [chosen, declaration?.sessionTokenInput],\n  );\n\n  const suggest = useCallback(\n    (input: Readonly<Record<string, unknown>>) => {\n      if (declaration === undefined) return Promise.reject(new Error('The address lookup declares no operations.'));\n      return run(declaration.suggestOperationId, input);\n    },\n    [declaration, run],\n  );\n\n  const retrieve = useCallback(\n    (input: Readonly<Record<string, unknown>>) => {\n      if (declaration === undefined) return Promise.reject(new Error('The address lookup declares no operations.'));\n      // The retrieval ends the vendor session whatever it answers: the next search is a new session.\n      return run(declaration.retrieveOperationId, input).finally(endSession);\n    },\n    [declaration, endSession, run],\n  );\n\n  const handleSelect = useCallback(\n    (selection: ProviderAddressLookupSelection) => {\n      if (chosen === undefined) return;\n      endSession();\n      const outcome = receiveProviderAddressLookupSelection({ providerRef: chosen, descriptor, selection, addressSchema });\n      if (outcome.accepted === undefined) {\n        setNotice(ProviderAddressLookupNotice.ADDRESS_REFUSED);\n        return;\n      }\n      setNotice(undefined);\n      host.applyAddress(outcome.accepted.address);\n    },\n    [addressSchema, chosen, descriptor, endSession, host],\n  );\n\n  const handleCancel = useCallback(() => endSession(), [endSession]);\n\n  const handleError = useCallback((error: Error) => {\n    endSession();\n    // A place with no holdable address is the lookup WORKING and the place being unusable — said as such.\n    setNotice(error instanceof ProviderAddressLookupPlaceWithoutAddressError ? ProviderAddressLookupNotice.ADDRESS_REFUSED : ProviderAddressLookupNotice.UNAVAILABLE);\n  }, [endSession]);\n\n  if (choices.length === 0) return null;\n\n  const chosenChoice = choices.find((choice) => choice.providerRef === chosen);\n  const providerName = (choice: (typeof choices)[number]): string => t(choice.displayNameLabelKey) ?? choice.displayName ?? choice.providerRef;\n  const lookupName = `${fieldName}.lookup`;\n  const Lookup = Component as React.ComponentType<ProviderAddressLookupProps> | null;\n  const failedToLoad = status === ProviderComponentStatus.UNAVAILABLE;\n  const shownNotice = failedToLoad ? ProviderAddressLookupNotice.UNAVAILABLE : notice;\n\n  return (\n    <div className=\"flex flex-col gap-1\" data-address-lookup={chosen ?? ''}>\n      <FieldLabel htmlFor={`field-${lookupName}`} className=\"text-sm text-muted-foreground\">\n        {label(FormFieldAddressLookupLabel.LOOKUP_LABEL)}\n      </FieldLabel>\n      {choices.length > 1 ? (\n        <div role=\"group\" className=\"flex flex-wrap gap-item-xs\">\n          {choices.map((choice) => (\n            <Button\n              key={choice.providerRef}\n              type=\"button\"\n              size={ButtonSize.SM}\n              variant={choice.providerRef === chosen ? ButtonVariants_Variant.DEFAULT : ButtonVariants_Variant.OUTLINE}\n              aria-pressed={choice.providerRef === chosen}\n              onClick={() => { setNotice(undefined); endSession(); setPickedRef(choice.providerRef); }}\n            >\n              {providerName(choice)}\n            </Button>\n          ))}\n        </div>\n      ) : null}\n      {status === ProviderComponentStatus.CONSENT_REQUIRED && chosenChoice !== undefined ? (\n        <div role=\"status\" className=\"flex flex-wrap items-center gap-item-xs text-sm text-muted-foreground\">\n          {(() => {\n            const purposes = missingConsentPurposes\n              .map((purpose) => tResourceFieldEnumValue(CoreResourceType.USER_SELF_PREFERENCES, 'privacy.consentedPurposes', purpose, CONSENTED_PURPOSES_FIELD_SCHEMA))\n              .join(', ');\n            return (\n              <>\n                <span>{label(FormFieldAddressLookupLabel.LOOKUP_CONSENT_REQUIRED, { provider: providerName(chosenChoice), purposes })}</span>\n                {grantConsent === undefined ? null : (\n                  <Button type=\"button\" size={ButtonSize.SM} variant={ButtonVariants_Variant.OUTLINE} onClick={() => void grantConsent(missingConsentPurposes)}>\n                    {label(FormFieldAddressLookupLabel.LOOKUP_CONSENT_GRANT, { purposes })}\n                  </Button>\n                )}\n              </>\n            );\n          })()}\n        </div>\n      ) : null}\n      {status === ProviderComponentStatus.READY && Lookup !== null && chosen !== undefined && declaration !== undefined ? (\n        <>\n          <Lookup\n            providerRef={chosen}\n            publicConfig={frontendProviderRegistry?.getProviderByRef(chosen as never)?.publicConfig ?? {}}\n            {...(host.countriesAllowed !== undefined ? { countriesAllowed: host.countriesAllowed } : {})}\n            {...(host.defaultCountry !== undefined ? { defaultCountry: host.defaultCountry } : {})}\n            languageCode={currentLanguage}\n            disabled={host.disabled}\n            name={lookupName}\n            {...(declaration.attributionMark !== undefined\n              ? { attribution: { mark: declaration.attributionMark, accessibleLabel: label(FormFieldAddressLookupLabel.LOOKUP_ATTRIBUTION, { mark: declaration.attributionMark }) } }\n              : {})}\n            suggest={suggest}\n            retrieve={retrieve}\n            onSelect={handleSelect}\n            onCancel={handleCancel}\n            onError={handleError}\n          />\n        </>\n      ) : null}\n      {shownNotice !== undefined ? (\n        <p role=\"status\" className=\"text-sm text-muted-foreground\">\n          {label(shownNotice === ProviderAddressLookupNotice.UNAVAILABLE ? FormFieldAddressLookupLabel.LOOKUP_UNAVAILABLE : FormFieldAddressLookupLabel.LOOKUP_ADDRESS_REFUSED)}\n        </p>\n      ) : null}\n    </div>\n  );\n}\n"]}

package/dist/esm/core/external-providers/ProviderFilePickerHost.d.ts

@@ -29,7 +29,7 @@
  * translation becomes invisible.
  */
 import React from 'react';
-import type { FileStorageAccepted } from '@wildo-ai/saas-models/public-runtime';
+import type { ConsentPurpose, FileStorageAccepted } from '@wildo-ai/saas-models/public-runtime';
 import type { ProviderFilePickerConstraints, ProviderFileSelection } from '@wildo-ai/saas-models/public-runtime';
 import { type ProviderComponentChoice } from '../../core/components-registry/useProviderComponent.frontend.hooks';
 import { type ProviderFileSelectionRejection } from './provider-file-selection.frontend.utils';
@@ -84,6 +84,27 @@ export interface ProviderFilePickerHostProps {
         readonly chosen: string | undefined;
         choose(providerRef: string): void;
     }): React.ReactNode;
+    /**
+     * Renders the state shown when the chosen provider rests on consent the person has not granted (#1702):
+     * nothing of the provider has been downloaded, and the surface owes the person the reason and the way to
+     * change it. Supplied by the caller for the same reason as `renderChooser` — it is chrome, and its words
+     * are the caller's i18n. The default below names the purposes by their raw values: a missing label that
+     * LOOKS missing, never invented text.
+     */
+    renderConsentRequired?(input: ProviderFilePickerConsentRequiredInput): React.ReactNode;
+}
+/** What a consent-required state needs to say and to offer. */
+export interface ProviderFilePickerConsentRequiredInput {
+    /** The chosen provider, as a choice — its display-name label KEY included. */
+    readonly choice: ProviderComponentChoice;
+    /** The purposes the person would have to grant, in vocabulary order. Never empty. */
+    readonly missingPurposes: readonly ConsentPurpose[];
+    /**
+     * Records a grant of exactly `missingPurposes` through the person's audited preference write; the picker
+     * then loads without a re-mount. `undefined` when there is no signed-in person to record it for — the
+     * state must then say what is missing without offering an action it cannot perform.
+     */
+    readonly grant: (() => Promise<void>) | undefined;
 }
 export declare function ProviderFilePickerHost(props: ProviderFilePickerHostProps): React.ReactElement | null;
 //# sourceMappingURL=ProviderFilePickerHost.d.ts.map

package/dist/esm/core/external-providers/ProviderFilePickerHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProviderFilePickerHost.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/ProviderFilePickerHost.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAA4D,MAAM,OAAO,CAAC;AAGjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EACV,6BAA6B,EAE7B,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,0CAA0C,CAAC;AAIlD,MAAM,WAAW,2BAA2B;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,qBAAqB,EAAE,GAAG,IAAI,CAAC;IAClF,QAAQ,CAAC,IAAI,IAAI,CAAC;IAClB;;;;OAIG;IACH,iBAAiB,CAAC,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,8BAA8B,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7J;;;;OAIG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE;QACpB,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;QACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC,GAAG,KAAK,CAAC,SAAS,CAAC;CACrB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,KAAK,CAAC,YAAY,GAAG,IAAI,CA4IpG"}
+{"version":3,"file":"ProviderFilePickerHost.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/ProviderFilePickerHost.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAA4D,MAAM,OAAO,CAAC;AAGjF,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChG,OAAO,KAAK,EACV,6BAA6B,EAE7B,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAK9C,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,0CAA0C,CAAC;AAIlD,MAAM,WAAW,2BAA2B;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,qBAAqB,EAAE,GAAG,IAAI,CAAC;IAClF,QAAQ,CAAC,IAAI,IAAI,CAAC;IAClB;;;;OAIG;IACH,iBAAiB,CAAC,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,8BAA8B,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7J;;;;OAIG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE;QACpB,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;QACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC,GAAG,KAAK,CAAC,SAAS,CAAC;IACpB;;;;;;OAMG;IACH,qBAAqB,CAAC,CAAC,KAAK,EAAE,sCAAsC,GAAG,KAAK,CAAC,SAAS,CAAC;CACxF;AAED,+DAA+D;AAC/D,MAAM,WAAW,sCAAsC;IACrD,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,qFAAqF;IACrF,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CACnD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,KAAK,CAAC,YAAY,GAAG,IAAI,CAuJpG"}

package/dist/esm/core/external-providers/ProviderFilePickerHost.js

@@ -32,8 +32,10 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
 import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
 import { BUILTIN_PROVIDER_CAPABILITY, layerProviderFilePickerConstraints } from '@wildo-ai/saas-models/public-runtime';
 import { useApplication } from '../../core/runtime/useApplication.js';
+import { useGrantedConsentPurposes } from '../../core/security/useGrantedConsentPurposes.js';
 import { getManualCallsHttpClient } from '../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
-import { ProviderComponentStatus, useProviderComponent, useProviderComponentChoices, } from '../../core/components-registry/useProviderComponent.frontend.hooks.js';
+import { ProviderComponentStatus } from '@wildo-ai/external-connectors-public/app';
+import { useProviderComponent, useProviderComponentChoices, } from '../../core/components-registry/useProviderComponent.frontend.hooks.js';
 import { receiveProviderFileSelections, } from './provider-file-selection.frontend.utils.js';
 const FILE_PICKER_CAPABILITY = BUILTIN_PROVIDER_CAPABILITY.FRONTEND_FILE_PICKER;
 export function ProviderFilePickerHost(props) {
@@ -57,7 +59,8 @@ export function ProviderFilePickerHost(props) {
         if (soleProviderRef !== undefined && chosen === undefined)
             setChosen(soleProviderRef);
     }, [soleProviderRef, chosen]);
-    const { status, Component } = useProviderComponent(FILE_PICKER_CAPABILITY, chosen);
+    const { status, Component, missingConsentPurposes } = useProviderComponent(FILE_PICKER_CAPABILITY, chosen);
+    const { grant: grantConsent } = useGrantedConsentPurposes();
     const publicConfig = useMemo(() => {
         if (chosen === undefined)
             return {};
@@ -132,13 +135,30 @@ export function ProviderFilePickerHost(props) {
         return null;
     const chooser = props.renderChooser?.({ choices, chosen, choose: setChosen })
         ?? defaultChooser({ choices, chosen, choose: setChosen });
+    const chosenChoice = choices.find((choice) => choice.providerRef === chosen);
+    const consentRequired = status === ProviderComponentStatus.CONSENT_REQUIRED && chosenChoice !== undefined
+        ? (props.renderConsentRequired ?? defaultConsentRequired)({
+            choice: chosenChoice,
+            missingPurposes: missingConsentPurposes,
+            grant: grantConsent === undefined ? undefined : () => grantConsent(missingConsentPurposes),
+        })
+        : null;
     // `Component` is typed as the registry's opaque component: this package must
     // not make the registry know any capability's props. The narrowing happens
     // HERE, where the capability is known, and it is the only cast in the path.
     const Picker = Component;
-    return (_jsxs(_Fragment, { children: [choices.length > 1 ? chooser : null, status === ProviderComponentStatus.READY && Picker !== null && chosen !== undefined ? (_jsx(Picker, { providerRef: chosen, publicConfig: publicConfig, constraints: constraints, getAccessToken: getAccessToken, onSelect: handleSelect, onCancel: handleCancel, onError: handleError })) : null] }));
+    return (_jsxs(_Fragment, { children: [choices.length > 1 ? chooser : null, consentRequired, status === ProviderComponentStatus.READY && Picker !== null && chosen !== undefined ? (_jsx(Picker, { providerRef: chosen, publicConfig: publicConfig, constraints: constraints, getAccessToken: getAccessToken, onSelect: handleSelect, onCancel: handleCancel, onError: handleError })) : null] }));
 }
 function defaultChooser(input) {
     return (_jsx("div", { role: "group", children: input.choices.map((choice) => (_jsx("button", { type: "button", "aria-pressed": choice.providerRef === input.chosen, onClick: () => input.choose(choice.providerRef), children: choice.displayName ?? choice.providerRef }, choice.providerRef))) }));
 }
+/**
+ * The fallback consent-required state: announced (`role="status"`), with a real, keyboard-reachable
+ * button when a grant can be recorded. It names purposes by their RAW values on purpose — a surface with an
+ * i18n service passes `renderConsentRequired` and words them; this default must not invent the words.
+ */
+function defaultConsentRequired(input) {
+    const purposes = input.missingPurposes.join(', ');
+    return (_jsxs("div", { role: "status", "data-provider-consent-required": input.choice.providerRef, children: [_jsx("span", { children: purposes }), input.grant === undefined ? null : (_jsx("button", { type: "button", onClick: () => void input.grant?.(), children: purposes }))] }));
+}
 //# sourceMappingURL=ProviderFilePickerHost.js.map

package/dist/esm/core/external-providers/ProviderFilePickerHost.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProviderFilePickerHost.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/ProviderFilePickerHost.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjF,OAAO,EAAE,2BAA2B,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAOvH,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,GAE5B,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EACL,6BAA6B,GAE9B,MAAM,0CAA0C,CAAC;AAElD,MAAM,sBAAsB,GAAG,2BAA2B,CAAC,oBAA0C,CAAC;AAmDtG,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;IACjF,MAAM,UAAU,GAAG,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,EAClI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAC/B,CAAC;IACF,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ;IAClC,2EAA2E;IAC3E,4EAA4E;IAC5E,mBAAmB;IACnB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CACnE,CAAC;IAEF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,SAAS,CAAC,GAAG,EAAE;QACb,2EAA2E;QAC3E,2EAA2E;QAC3E,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,wDAAwD;QACxD,IAAI,eAAe,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,eAAe,CAAC,CAAC;IACxF,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAEnF,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO,wBAAwB,EAAE,gBAAgB,CAAC,MAAe,CAAC,EAAE,YAAY,IAAI,EAAE,CAAC;IACzF,CAAC,EAAE,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEvC,8EAA8E;IAC9E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,gBAAgB,GAAG,KAAK,CAAC,WAAW,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,WAAW,GAAG,OAAO,CACzB,GAAG,EAAE,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAC5F,CAAC,gBAAgB,EAAE,QAAQ,EAAE,YAAY,CAAC,CAC3C,CAAC;IAEF,8EAA8E;IAC9E,0EAA0E;IAC1E,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IAExD,MAAM,YAAY,GAAG,WAAW,CAC9B,CAAC,UAA4C,EAAE,EAAE;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QAEjC,MAAM,OAAO,GAAG,6BAA6B,CAAC;YAC5C,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,yBAAyB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;YAC/E,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,EACD,CAAC,MAAM,EAAE,yBAAyB,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CACjE,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC,EACD,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAC5B,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjE;;;;;;;;OAQG;IACH,MAAM,sBAAsB,GAAG,MAAM,CAAqB,SAAS,CAAC,CAAC;IACrE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,KAAK,uBAAuB,CAAC,WAAW,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3E,sBAAsB,CAAC,OAAO,GAAG,SAAS,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,IAAI,sBAAsB,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO;QACtD,sBAAsB,CAAC,OAAO,GAAG,MAAM,CAAC;QACxC,iBAAiB,EAAE,CAAC;YAClB,WAAW,EAAE,MAAM;YACnB,KAAK,EAAE,IAAI,KAAK,CACd,aAAa,MAAM,qFAAqF;kBACtG,mDAAmD,CACtD;SACF,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAExC,kGAAkG;IAClG,gGAAgG;IAChG,iGAAiG;IACjG,2BAA2B;IAC3B,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAiC,EAAE;QACzE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC;QAC1F,OAAO,OAAO,EAAE,WAAW,CAAC;IAC9B,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;WACxE,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAE5D,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,SAAgE,CAAC;IAEhF,OAAO,CACL,8BACG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EACnC,MAAM,KAAK,uBAAuB,CAAC,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CACrF,KAAC,MAAM,IACL,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,WAAW,GACpB,CACH,CAAC,CAAC,CAAC,IAAI,IACP,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAIvB;IACC,OAAO,CACL,cAAK,IAAI,EAAC,OAAO,YACd,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAC7B,iBAEE,IAAI,EAAC,QAAQ,kBACC,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM,EACjD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,YAI9C,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,IAPpC,MAAM,CAAC,WAAW,CAQhB,CACV,CAAC,GACE,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The framework side of a provider file picker: choose a provider, load its\n * component on demand, mount it, and hold whatever it returns to the contract\n * it declared.\n *\n * This is the seam issue #380 exists to create. Before it, a provider could not\n * contribute a component at all, and resolution beside the registry was\n * first-match — so a Drive picker and a Dropbox picker could not coexist for one\n * field, and which one won depended on map order.\n *\n * ## What this component decides and what it deliberately does not\n *\n * It decides NOTHING about which provider is right. `useProviderComponentChoices`\n * returns every live provider that carries a picker, in a stable order, and this\n * host renders them for a person to choose between. A framework that picked one\n * would be making a product decision in a lookup table, which is the defect the\n * registry was rebuilt to remove.\n *\n * It also does not interpret a selection. Routing a `REMOTE_REFERENCE` to the\n * application's executor door, or uploading a `BROWSER_READABLE_FILE`, is the\n * FIELD's job — this host hands up an outcome that is already checked against\n * the provider's declaration, so the field can branch on a `kind` it can trust.\n *\n * ## Chrome\n *\n * There is none beyond a list of buttons and the mounted component. Every label\n * is an i18n KEY resolved by the caller: a provider's display name is\n * locale-bound copy, and freezing it into a framework component is how a missing\n * translation becomes invisible.\n */\n\nimport React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport type { ProviderCapability } from '@wildo-ai/saas-models';\nimport { BUILTIN_PROVIDER_CAPABILITY, layerProviderFilePickerConstraints } from '@wildo-ai/saas-models/public-runtime';\nimport type { FileStorageAccepted } from '@wildo-ai/saas-models/public-runtime';\nimport type {\n  ProviderFilePickerConstraints,\n  ProviderFilePickerProps,\n  ProviderFileSelection,\n} from '@wildo-ai/saas-models/public-runtime';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport {\n  ProviderComponentStatus,\n  useProviderComponent,\n  useProviderComponentChoices,\n  type ProviderComponentChoice,\n} from '~wildo-frontend-lib/core/components-registry/useProviderComponent.frontend.hooks';\nimport {\n  receiveProviderFileSelections,\n  type ProviderFileSelectionRejection,\n} from './provider-file-selection.frontend.utils';\n\nconst FILE_PICKER_CAPABILITY = BUILTIN_PROVIDER_CAPABILITY.FRONTEND_FILE_PICKER as ProviderCapability;\n\nexport interface ProviderFilePickerHostProps {\n  /**\n   * The FIELD's own constraints, read from its Zod metadata. The chosen\n   * provider's declared limits are laid UNDER these, here, per provider — never\n   * resolved once by the caller, which is how one vendor's limit came to govern\n   * every other vendor's picker (#380).\n   */\n  readonly constraints: ProviderFilePickerConstraints;\n  /**\n   * Whether the field accepts several files. A `maxSelectionCount` a provider\n   * declares applies only to a `multiple` field; a single-file field never\n   * inherits a selection count, whatever the vendor allows.\n   */\n  readonly multiple: boolean;\n  /**\n   * The field's `z_file({ storageAccepted })` (#394 P5). A provider whose picker\n   * fronts a storage (a `REMOTE_REFERENCE` picker — the file stays at the\n   * vendor) is offered only when this names that storage, because the link it\n   * produces lands in that storage and the backend refuses it otherwise. A\n   * provider declaring no storage delivers bytes into the field's own storage\n   * and is offered regardless. Undefined — the field declared nothing — accepts\n   * no vendor storage: the default storage is the framework's.\n   */\n  readonly acceptedStorages?: ReadonlyArray<FileStorageAccepted>;\n  /**\n   * Called with selections that have already been checked against the chosen\n   * provider's declaration, so every `kind` here is the one that provider said\n   * it would produce.\n   */\n  onSelect(providerRef: string, selections: readonly ProviderFileSelection[]): void;\n  onCancel?(): void;\n  /**\n   * A provider's picker failed, or contradicted its own declaration. Both reach\n   * here because both mean the same thing to a user — this picker did not work —\n   * while the distinction that matters to a developer is in the rejection.\n   */\n  onProviderFailure?(failure: { readonly providerRef: string; readonly error?: Error; readonly rejections?: readonly ProviderFileSelectionRejection[] }): void;\n  /**\n   * Renders the chooser. Supplied by the caller, because a chooser is chrome and\n   * this package's components are injected rather than hard-coded. The default\n   * below is plain buttons: enough to be usable, not enough to be a design.\n   */\n  renderChooser?(input: {\n    readonly choices: readonly ProviderComponentChoice[];\n    readonly chosen: string | undefined;\n    choose(providerRef: string): void;\n  }): React.ReactNode;\n}\n\nexport function ProviderFilePickerHost(props: ProviderFilePickerHostProps): React.ReactElement | null {\n  const { providerComponentRegistry, frontendProviderRegistry } = useApplication();\n  const allChoices = useProviderComponentChoices(FILE_PICKER_CAPABILITY);\n  const acceptedStorages = props.acceptedStorages;\n  const choices = useMemo(\n    () => allChoices.filter((choice) => choice.fileStorage === undefined || (acceptedStorages?.includes(choice.fileStorage) ?? false)),\n    [allChoices, acceptedStorages],\n  );\n  const [chosen, setChosen] = useState<string | undefined>(\n    // A single provider needs no chooser: presenting one option as a choice is\n    // a click that carries no information. Several is a genuine decision and is\n    // never made here.\n    () => (choices.length === 1 ? choices[0]?.providerRef : undefined),\n  );\n\n  const soleProviderRef = choices.length === 1 ? choices[0]?.providerRef : undefined;\n  useEffect(() => {\n    // The initializer above runs ONCE. In today's runtime that is enough — the\n    // registry is populated before application services are handed out and the\n    // context gates children on them — but a host whose only correctness\n    // argument lives in another file's ordering is one refactor from rendering\n    // nothing at all: with a single late-arriving provider there would be no\n    // chooser (length is 1) and no picker (nothing chosen).\n    if (soleProviderRef !== undefined && chosen === undefined) setChosen(soleProviderRef);\n  }, [soleProviderRef, chosen]);\n  const { status, Component } = useProviderComponent(FILE_PICKER_CAPABILITY, chosen);\n\n  const publicConfig = useMemo(() => {\n    if (chosen === undefined) return {};\n    return frontendProviderRegistry?.getProviderByRef(chosen as never)?.publicConfig ?? {};\n  }, [chosen, frontendProviderRegistry]);\n\n  // The chosen provider's half, laid under the field's own. Recomputed when the\n  // person picks a different vendor, which is the whole point: the two vendors\n  // may declare different limits and each picker must be told its own.\n  const fieldConstraints = props.constraints;\n  const multiple = props.multiple;\n  const constraints = useMemo(\n    () => layerProviderFilePickerConstraints({ base: fieldConstraints, multiple, publicConfig }),\n    [fieldConstraints, multiple, publicConfig],\n  );\n\n  // Destructured, not read off `props` inside the callbacks: `props` is a fresh\n  // object every render, so depending on it would give both callbacks a new\n  // identity on every parent render — and a picker keying an effect on\n  // `onSelect` would then re-run its whole open sequence each time.\n  const { onSelect, onCancel, onProviderFailure } = props;\n\n  const handleSelect = useCallback(\n    (selections: readonly ProviderFileSelection[]) => {\n      if (chosen === undefined) return;\n\n      const outcome = receiveProviderFileSelections({\n        providerRef: chosen,\n        descriptor: providerComponentRegistry?.describe(FILE_PICKER_CAPABILITY, chosen),\n        selections,\n      });\n\n      if (outcome.rejections.length > 0) {\n        onProviderFailure?.({ providerRef: chosen, rejections: outcome.rejections });\n        return;\n      }\n\n      onSelect(chosen, outcome.accepted);\n    },\n    [chosen, providerComponentRegistry, onSelect, onProviderFailure],\n  );\n\n  const handleError = useCallback(\n    (error: Error) => {\n      if (chosen === undefined) return;\n      onProviderFailure?.({ providerRef: chosen, error });\n    },\n    [chosen, onProviderFailure],\n  );\n\n  const handleCancel = useCallback(() => onCancel?.(), [onCancel]);\n\n  /*\n   * A chosen provider whose picker can never mount — its component failed to load, or a\n   * `<script>` its provider declares did not (`SCRIPT_LOAD_FAILED`) — is a failure the\n   * surface must hear about. Rendering nothing and saying nothing would leave a person who\n   * clicked a provider looking at a control that silently ignores them; the registry's\n   * diagnostic reaches a developer's log, not the field. Reported ONCE per chosen provider:\n   * `onProviderFailure` may change identity on every parent render, and the registry never\n   * retries, so a second report would describe the same failure again.\n   */\n  const reportedUnavailableRef = useRef<string | undefined>(undefined);\n  useEffect(() => {\n    if (status !== ProviderComponentStatus.UNAVAILABLE || chosen === undefined) {\n      reportedUnavailableRef.current = undefined;\n      return;\n    }\n    if (reportedUnavailableRef.current === chosen) return;\n    reportedUnavailableRef.current = chosen;\n    onProviderFailure?.({\n      providerRef: chosen,\n      error: new Error(\n        `Provider \"${chosen}\" cannot open its file picker: its component or a script it declares did not load. `\n        + 'The provider component registry logged the cause.',\n      ),\n    });\n  }, [status, chosen, onProviderFailure]);\n\n  // The caller's own token for the chosen provider, from the one door that hands one out (#394 P4).\n  // Resolved lazily — a picker asks when it opens, never before — and `undefined` when nothing is\n  // connected, which the picker reports in its own words. Never read from `publicConfig`, which is\n  // served to every browser.\n  const getAccessToken = useCallback(async (): Promise<string | undefined> => {\n    if (chosen === undefined) return undefined;\n    const granted = await getManualCallsHttpClient().getProviderConnectionAccessToken(chosen);\n    return granted?.accessToken;\n  }, [chosen]);\n\n  if (choices.length === 0) return null;\n\n  const chooser = props.renderChooser?.({ choices, chosen, choose: setChosen })\n    ?? defaultChooser({ choices, chosen, choose: setChosen });\n\n  // `Component` is typed as the registry's opaque component: this package must\n  // not make the registry know any capability's props. The narrowing happens\n  // HERE, where the capability is known, and it is the only cast in the path.\n  const Picker = Component as React.ComponentType<ProviderFilePickerProps> | null;\n\n  return (\n    <>\n      {choices.length > 1 ? chooser : null}\n      {status === ProviderComponentStatus.READY && Picker !== null && chosen !== undefined ? (\n        <Picker\n          providerRef={chosen}\n          publicConfig={publicConfig}\n          constraints={constraints}\n          getAccessToken={getAccessToken}\n          onSelect={handleSelect}\n          onCancel={handleCancel}\n          onError={handleError}\n        />\n      ) : null}\n    </>\n  );\n}\n\nfunction defaultChooser(input: {\n  readonly choices: readonly ProviderComponentChoice[];\n  readonly chosen: string | undefined;\n  choose(providerRef: string): void;\n}): React.ReactNode {\n  return (\n    <div role=\"group\">\n      {input.choices.map((choice) => (\n        <button\n          key={choice.providerRef}\n          type=\"button\"\n          aria-pressed={choice.providerRef === input.chosen}\n          onClick={() => input.choose(choice.providerRef)}\n        >\n          {/* The authored fallback, NOT a translation — a surface that has an\n              i18n service should pass `renderChooser` and resolve the key. */}\n          {choice.displayName ?? choice.providerRef}\n        </button>\n      ))}\n    </div>\n  );\n}\n"]}
+{"version":3,"file":"ProviderFilePickerHost.js","sourceRoot":"","sources":["../../../../src/core/external-providers/ProviderFilePickerHost.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjF,OAAO,EAAE,2BAA2B,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAOvH,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6DAA6D,CAAC;AACxG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,2BAA2B,GAE5B,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EACL,6BAA6B,GAE9B,MAAM,0CAA0C,CAAC;AAElD,MAAM,sBAAsB,GAAG,2BAA2B,CAAC,oBAA0C,CAAC;AAyEtG,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;IACjF,MAAM,UAAU,GAAG,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,EAClI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAC/B,CAAC;IACF,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ;IAClC,2EAA2E;IAC3E,4EAA4E;IAC5E,mBAAmB;IACnB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CACnE,CAAC;IAEF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,SAAS,CAAC,GAAG,EAAE;QACb,2EAA2E;QAC3E,2EAA2E;QAC3E,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,wDAAwD;QACxD,IAAI,eAAe,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,eAAe,CAAC,CAAC;IACxF,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,GAAG,oBAAoB,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAC3G,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,yBAAyB,EAAE,CAAC;IAE5D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO,wBAAwB,EAAE,gBAAgB,CAAC,MAAe,CAAC,EAAE,YAAY,IAAI,EAAE,CAAC;IACzF,CAAC,EAAE,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEvC,8EAA8E;IAC9E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,gBAAgB,GAAG,KAAK,CAAC,WAAW,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,WAAW,GAAG,OAAO,CACzB,GAAG,EAAE,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAC5F,CAAC,gBAAgB,EAAE,QAAQ,EAAE,YAAY,CAAC,CAC3C,CAAC;IAEF,8EAA8E;IAC9E,0EAA0E;IAC1E,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IAExD,MAAM,YAAY,GAAG,WAAW,CAC9B,CAAC,UAA4C,EAAE,EAAE;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QAEjC,MAAM,OAAO,GAAG,6BAA6B,CAAC;YAC5C,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,yBAAyB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;YAC/E,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,EACD,CAAC,MAAM,EAAE,yBAAyB,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CACjE,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAY,EAAE,EAAE;QACf,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC,EACD,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAC5B,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjE;;;;;;;;OAQG;IACH,MAAM,sBAAsB,GAAG,MAAM,CAAqB,SAAS,CAAC,CAAC;IACrE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,KAAK,uBAAuB,CAAC,WAAW,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3E,sBAAsB,CAAC,OAAO,GAAG,SAAS,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,IAAI,sBAAsB,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO;QACtD,sBAAsB,CAAC,OAAO,GAAG,MAAM,CAAC;QACxC,iBAAiB,EAAE,CAAC;YAClB,WAAW,EAAE,MAAM;YACnB,KAAK,EAAE,IAAI,KAAK,CACd,aAAa,MAAM,qFAAqF;kBACtG,mDAAmD,CACtD;SACF,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAExC,kGAAkG;IAClG,gGAAgG;IAChG,iGAAiG;IACjG,2BAA2B;IAC3B,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAiC,EAAE;QACzE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC;QAC1F,OAAO,OAAO,EAAE,WAAW,CAAC;IAC9B,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;WACxE,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAE5D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,MAAM,KAAK,uBAAuB,CAAC,gBAAgB,IAAI,YAAY,KAAK,SAAS;QACvG,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,IAAI,sBAAsB,CAAC,CAAC;YACxD,MAAM,EAAE,YAAY;YACpB,eAAe,EAAE,sBAAsB;YACvC,KAAK,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,sBAAsB,CAAC;SAC3F,CAAC;QACF,CAAC,CAAC,IAAI,CAAC;IAET,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,SAAgE,CAAC;IAEhF,OAAO,CACL,8BACG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EACnC,eAAe,EACf,MAAM,KAAK,uBAAuB,CAAC,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CACrF,KAAC,MAAM,IACL,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,WAAW,GACpB,CACH,CAAC,CAAC,CAAC,IAAI,IACP,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAIvB;IACC,OAAO,CACL,cAAK,IAAI,EAAC,OAAO,YACd,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAC7B,iBAEE,IAAI,EAAC,QAAQ,kBACC,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM,EACjD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,YAI9C,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,IAPpC,MAAM,CAAC,WAAW,CAQhB,CACV,CAAC,GACE,CACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,KAA6C;IAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,CACL,eAAK,IAAI,EAAC,QAAQ,oCAAiC,KAAK,CAAC,MAAM,CAAC,WAAW,aACzE,yBAAO,QAAQ,GAAQ,EACtB,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAClC,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,EAAE,YACtD,QAAQ,GACF,CACV,IACG,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The framework side of a provider file picker: choose a provider, load its\n * component on demand, mount it, and hold whatever it returns to the contract\n * it declared.\n *\n * This is the seam issue #380 exists to create. Before it, a provider could not\n * contribute a component at all, and resolution beside the registry was\n * first-match — so a Drive picker and a Dropbox picker could not coexist for one\n * field, and which one won depended on map order.\n *\n * ## What this component decides and what it deliberately does not\n *\n * It decides NOTHING about which provider is right. `useProviderComponentChoices`\n * returns every live provider that carries a picker, in a stable order, and this\n * host renders them for a person to choose between. A framework that picked one\n * would be making a product decision in a lookup table, which is the defect the\n * registry was rebuilt to remove.\n *\n * It also does not interpret a selection. Routing a `REMOTE_REFERENCE` to the\n * application's executor door, or uploading a `BROWSER_READABLE_FILE`, is the\n * FIELD's job — this host hands up an outcome that is already checked against\n * the provider's declaration, so the field can branch on a `kind` it can trust.\n *\n * ## Chrome\n *\n * There is none beyond a list of buttons and the mounted component. Every label\n * is an i18n KEY resolved by the caller: a provider's display name is\n * locale-bound copy, and freezing it into a framework component is how a missing\n * translation becomes invisible.\n */\n\nimport React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport type { ProviderCapability } from '@wildo-ai/saas-models';\nimport { BUILTIN_PROVIDER_CAPABILITY, layerProviderFilePickerConstraints } from '@wildo-ai/saas-models/public-runtime';\nimport type { ConsentPurpose, FileStorageAccepted } from '@wildo-ai/saas-models/public-runtime';\nimport type {\n  ProviderFilePickerConstraints,\n  ProviderFilePickerProps,\n  ProviderFileSelection,\n} from '@wildo-ai/saas-models/public-runtime';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useGrantedConsentPurposes } from '~wildo-frontend-lib/core/security/useGrantedConsentPurposes';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { ProviderComponentStatus } from '@wildo-ai/external-connectors-public/app';\nimport {\n  useProviderComponent,\n  useProviderComponentChoices,\n  type ProviderComponentChoice,\n} from '~wildo-frontend-lib/core/components-registry/useProviderComponent.frontend.hooks';\nimport {\n  receiveProviderFileSelections,\n  type ProviderFileSelectionRejection,\n} from './provider-file-selection.frontend.utils';\n\nconst FILE_PICKER_CAPABILITY = BUILTIN_PROVIDER_CAPABILITY.FRONTEND_FILE_PICKER as ProviderCapability;\n\nexport interface ProviderFilePickerHostProps {\n  /**\n   * The FIELD's own constraints, read from its Zod metadata. The chosen\n   * provider's declared limits are laid UNDER these, here, per provider — never\n   * resolved once by the caller, which is how one vendor's limit came to govern\n   * every other vendor's picker (#380).\n   */\n  readonly constraints: ProviderFilePickerConstraints;\n  /**\n   * Whether the field accepts several files. A `maxSelectionCount` a provider\n   * declares applies only to a `multiple` field; a single-file field never\n   * inherits a selection count, whatever the vendor allows.\n   */\n  readonly multiple: boolean;\n  /**\n   * The field's `z_file({ storageAccepted })` (#394 P5). A provider whose picker\n   * fronts a storage (a `REMOTE_REFERENCE` picker — the file stays at the\n   * vendor) is offered only when this names that storage, because the link it\n   * produces lands in that storage and the backend refuses it otherwise. A\n   * provider declaring no storage delivers bytes into the field's own storage\n   * and is offered regardless. Undefined — the field declared nothing — accepts\n   * no vendor storage: the default storage is the framework's.\n   */\n  readonly acceptedStorages?: ReadonlyArray<FileStorageAccepted>;\n  /**\n   * Called with selections that have already been checked against the chosen\n   * provider's declaration, so every `kind` here is the one that provider said\n   * it would produce.\n   */\n  onSelect(providerRef: string, selections: readonly ProviderFileSelection[]): void;\n  onCancel?(): void;\n  /**\n   * A provider's picker failed, or contradicted its own declaration. Both reach\n   * here because both mean the same thing to a user — this picker did not work —\n   * while the distinction that matters to a developer is in the rejection.\n   */\n  onProviderFailure?(failure: { readonly providerRef: string; readonly error?: Error; readonly rejections?: readonly ProviderFileSelectionRejection[] }): void;\n  /**\n   * Renders the chooser. Supplied by the caller, because a chooser is chrome and\n   * this package's components are injected rather than hard-coded. The default\n   * below is plain buttons: enough to be usable, not enough to be a design.\n   */\n  renderChooser?(input: {\n    readonly choices: readonly ProviderComponentChoice[];\n    readonly chosen: string | undefined;\n    choose(providerRef: string): void;\n  }): React.ReactNode;\n  /**\n   * Renders the state shown when the chosen provider rests on consent the person has not granted (#1702):\n   * nothing of the provider has been downloaded, and the surface owes the person the reason and the way to\n   * change it. Supplied by the caller for the same reason as `renderChooser` — it is chrome, and its words\n   * are the caller's i18n. The default below names the purposes by their raw values: a missing label that\n   * LOOKS missing, never invented text.\n   */\n  renderConsentRequired?(input: ProviderFilePickerConsentRequiredInput): React.ReactNode;\n}\n\n/** What a consent-required state needs to say and to offer. */\nexport interface ProviderFilePickerConsentRequiredInput {\n  /** The chosen provider, as a choice — its display-name label KEY included. */\n  readonly choice: ProviderComponentChoice;\n  /** The purposes the person would have to grant, in vocabulary order. Never empty. */\n  readonly missingPurposes: readonly ConsentPurpose[];\n  /**\n   * Records a grant of exactly `missingPurposes` through the person's audited preference write; the picker\n   * then loads without a re-mount. `undefined` when there is no signed-in person to record it for — the\n   * state must then say what is missing without offering an action it cannot perform.\n   */\n  readonly grant: (() => Promise<void>) | undefined;\n}\n\nexport function ProviderFilePickerHost(props: ProviderFilePickerHostProps): React.ReactElement | null {\n  const { providerComponentRegistry, frontendProviderRegistry } = useApplication();\n  const allChoices = useProviderComponentChoices(FILE_PICKER_CAPABILITY);\n  const acceptedStorages = props.acceptedStorages;\n  const choices = useMemo(\n    () => allChoices.filter((choice) => choice.fileStorage === undefined || (acceptedStorages?.includes(choice.fileStorage) ?? false)),\n    [allChoices, acceptedStorages],\n  );\n  const [chosen, setChosen] = useState<string | undefined>(\n    // A single provider needs no chooser: presenting one option as a choice is\n    // a click that carries no information. Several is a genuine decision and is\n    // never made here.\n    () => (choices.length === 1 ? choices[0]?.providerRef : undefined),\n  );\n\n  const soleProviderRef = choices.length === 1 ? choices[0]?.providerRef : undefined;\n  useEffect(() => {\n    // The initializer above runs ONCE. In today's runtime that is enough — the\n    // registry is populated before application services are handed out and the\n    // context gates children on them — but a host whose only correctness\n    // argument lives in another file's ordering is one refactor from rendering\n    // nothing at all: with a single late-arriving provider there would be no\n    // chooser (length is 1) and no picker (nothing chosen).\n    if (soleProviderRef !== undefined && chosen === undefined) setChosen(soleProviderRef);\n  }, [soleProviderRef, chosen]);\n  const { status, Component, missingConsentPurposes } = useProviderComponent(FILE_PICKER_CAPABILITY, chosen);\n  const { grant: grantConsent } = useGrantedConsentPurposes();\n\n  const publicConfig = useMemo(() => {\n    if (chosen === undefined) return {};\n    return frontendProviderRegistry?.getProviderByRef(chosen as never)?.publicConfig ?? {};\n  }, [chosen, frontendProviderRegistry]);\n\n  // The chosen provider's half, laid under the field's own. Recomputed when the\n  // person picks a different vendor, which is the whole point: the two vendors\n  // may declare different limits and each picker must be told its own.\n  const fieldConstraints = props.constraints;\n  const multiple = props.multiple;\n  const constraints = useMemo(\n    () => layerProviderFilePickerConstraints({ base: fieldConstraints, multiple, publicConfig }),\n    [fieldConstraints, multiple, publicConfig],\n  );\n\n  // Destructured, not read off `props` inside the callbacks: `props` is a fresh\n  // object every render, so depending on it would give both callbacks a new\n  // identity on every parent render — and a picker keying an effect on\n  // `onSelect` would then re-run its whole open sequence each time.\n  const { onSelect, onCancel, onProviderFailure } = props;\n\n  const handleSelect = useCallback(\n    (selections: readonly ProviderFileSelection[]) => {\n      if (chosen === undefined) return;\n\n      const outcome = receiveProviderFileSelections({\n        providerRef: chosen,\n        descriptor: providerComponentRegistry?.describe(FILE_PICKER_CAPABILITY, chosen),\n        selections,\n      });\n\n      if (outcome.rejections.length > 0) {\n        onProviderFailure?.({ providerRef: chosen, rejections: outcome.rejections });\n        return;\n      }\n\n      onSelect(chosen, outcome.accepted);\n    },\n    [chosen, providerComponentRegistry, onSelect, onProviderFailure],\n  );\n\n  const handleError = useCallback(\n    (error: Error) => {\n      if (chosen === undefined) return;\n      onProviderFailure?.({ providerRef: chosen, error });\n    },\n    [chosen, onProviderFailure],\n  );\n\n  const handleCancel = useCallback(() => onCancel?.(), [onCancel]);\n\n  /*\n   * A chosen provider whose picker can never mount — its component failed to load, or a\n   * `<script>` its provider declares did not (`SCRIPT_LOAD_FAILED`) — is a failure the\n   * surface must hear about. Rendering nothing and saying nothing would leave a person who\n   * clicked a provider looking at a control that silently ignores them; the registry's\n   * diagnostic reaches a developer's log, not the field. Reported ONCE per chosen provider:\n   * `onProviderFailure` may change identity on every parent render, and the registry never\n   * retries, so a second report would describe the same failure again.\n   */\n  const reportedUnavailableRef = useRef<string | undefined>(undefined);\n  useEffect(() => {\n    if (status !== ProviderComponentStatus.UNAVAILABLE || chosen === undefined) {\n      reportedUnavailableRef.current = undefined;\n      return;\n    }\n    if (reportedUnavailableRef.current === chosen) return;\n    reportedUnavailableRef.current = chosen;\n    onProviderFailure?.({\n      providerRef: chosen,\n      error: new Error(\n        `Provider \"${chosen}\" cannot open its file picker: its component or a script it declares did not load. `\n        + 'The provider component registry logged the cause.',\n      ),\n    });\n  }, [status, chosen, onProviderFailure]);\n\n  // The caller's own token for the chosen provider, from the one door that hands one out (#394 P4).\n  // Resolved lazily — a picker asks when it opens, never before — and `undefined` when nothing is\n  // connected, which the picker reports in its own words. Never read from `publicConfig`, which is\n  // served to every browser.\n  const getAccessToken = useCallback(async (): Promise<string | undefined> => {\n    if (chosen === undefined) return undefined;\n    const granted = await getManualCallsHttpClient().getProviderConnectionAccessToken(chosen);\n    return granted?.accessToken;\n  }, [chosen]);\n\n  if (choices.length === 0) return null;\n\n  const chooser = props.renderChooser?.({ choices, chosen, choose: setChosen })\n    ?? defaultChooser({ choices, chosen, choose: setChosen });\n\n  const chosenChoice = choices.find((choice) => choice.providerRef === chosen);\n  const consentRequired = status === ProviderComponentStatus.CONSENT_REQUIRED && chosenChoice !== undefined\n    ? (props.renderConsentRequired ?? defaultConsentRequired)({\n      choice: chosenChoice,\n      missingPurposes: missingConsentPurposes,\n      grant: grantConsent === undefined ? undefined : () => grantConsent(missingConsentPurposes),\n    })\n    : null;\n\n  // `Component` is typed as the registry's opaque component: this package must\n  // not make the registry know any capability's props. The narrowing happens\n  // HERE, where the capability is known, and it is the only cast in the path.\n  const Picker = Component as React.ComponentType<ProviderFilePickerProps> | null;\n\n  return (\n    <>\n      {choices.length > 1 ? chooser : null}\n      {consentRequired}\n      {status === ProviderComponentStatus.READY && Picker !== null && chosen !== undefined ? (\n        <Picker\n          providerRef={chosen}\n          publicConfig={publicConfig}\n          constraints={constraints}\n          getAccessToken={getAccessToken}\n          onSelect={handleSelect}\n          onCancel={handleCancel}\n          onError={handleError}\n        />\n      ) : null}\n    </>\n  );\n}\n\nfunction defaultChooser(input: {\n  readonly choices: readonly ProviderComponentChoice[];\n  readonly chosen: string | undefined;\n  choose(providerRef: string): void;\n}): React.ReactNode {\n  return (\n    <div role=\"group\">\n      {input.choices.map((choice) => (\n        <button\n          key={choice.providerRef}\n          type=\"button\"\n          aria-pressed={choice.providerRef === input.chosen}\n          onClick={() => input.choose(choice.providerRef)}\n        >\n          {/* The authored fallback, NOT a translation — a surface that has an\n              i18n service should pass `renderChooser` and resolve the key. */}\n          {choice.displayName ?? choice.providerRef}\n        </button>\n      ))}\n    </div>\n  );\n}\n\n/**\n * The fallback consent-required state: announced (`role=\"status\"`), with a real, keyboard-reachable\n * button when a grant can be recorded. It names purposes by their RAW values on purpose — a surface with an\n * i18n service passes `renderConsentRequired` and words them; this default must not invent the words.\n */\nfunction defaultConsentRequired(input: ProviderFilePickerConsentRequiredInput): React.ReactNode {\n  const purposes = input.missingPurposes.join(', ');\n  return (\n    <div role=\"status\" data-provider-consent-required={input.choice.providerRef}>\n      <span>{purposes}</span>\n      {input.grant === undefined ? null : (\n        <button type=\"button\" onClick={() => void input.grant?.()}>\n          {purposes}\n        </button>\n      )}\n    </div>\n  );\n}\n"]}

package/dist/esm/core/external-providers/frontend-provider-display-label.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frontend-provider-display-label.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/frontend-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,iCAAiC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,SAAS,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAClD,MAAM,EAAE,CASV;AAED;;;;;;;;;GASG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,iCAAiC,GACvC,MAAM,CASR"}
+{"version":3,"file":"frontend-provider-display-label.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/frontend-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,iCAAiC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,SAAS,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,GAClD,MAAM,EAAE,CASV;AAED;;;;;;;;;GASG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,iCAAiC,GACvC,MAAM,CASR"}

package/dist/esm/core/external-providers/frontend-provider-display-label.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"frontend-provider-display-label.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/frontend-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AAcxF;;;;;;GAMG;AACH,MAAM,UAAU,uCAAuC,CACrD,SAAmD;IAEnD,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,SAAS,CAAC,MAAM,CACd,CAAC,QAAQ,EAAsB,EAAE,CAC/B,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CACtD,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAwC;IAExC,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,IAAI,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,CAAC;AACvE,CAAC","sourcesContent":["import { buildProviderDisplayNameLabelKey } from '@wildo-ai/saas-models/public-runtime';\n\nexport interface FrontendProviderDisplayLabelInput {\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n  /**\n   * Optional explicit fallback when the caller wants a non-ref technical\n   * fallback (for example a brand label sourced from a static map).\n   */\n  fallbackLabel?: string;\n  translate?: (key: string) => string;\n}\n\n/**\n * Collect unique, non-empty provider display-label keys for `useI18n({ keys })`.\n *\n * The helper intentionally stays tiny and framework-agnostic: call sites can\n * build whatever provider view-model they need, then hand only the optional\n * label keys here to get the deduped request list.\n */\nexport function collectFrontendProviderDisplayLabelKeys(\n  labelKeys: ReadonlyArray<string | undefined | null>,\n): string[] {\n  return Array.from(\n    new Set(\n      labelKeys.filter(\n        (labelKey): labelKey is string =>\n          typeof labelKey === 'string' && labelKey.length > 0,\n      ),\n    ),\n  );\n}\n\n/**\n * Resolve a user-facing provider label without freezing locale-bound copy into\n * provider metadata or generated artifacts.\n *\n * Order of preference:\n * 1. Translation resolved from the provider label key.\n * 2. Authored display name on the provider metadata.\n * 3. Optional caller-supplied fallback label.\n * 4. Raw provider ref as the technical last resort.\n */\nexport function resolveFrontendProviderDisplayLabel(\n  input: FrontendProviderDisplayLabelInput,\n): string {\n  const labelKey = input.displayNameLabelKey ?? buildProviderDisplayNameLabelKey(input.providerRef);\n  const translated = input.translate?.(labelKey);\n\n  if (translated && translated !== labelKey) {\n    return translated;\n  }\n\n  return input.displayName ?? input.fallbackLabel ?? input.providerRef;\n}\n"]}
+{"version":3,"file":"frontend-provider-display-label.frontend.utils.js","sourceRoot":"","sources":["../../../../src/core/external-providers/frontend-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AAcxF;;;;;;GAMG;AACH,MAAM,UAAU,uCAAuC,CACrD,SAAmD;IAEnD,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,SAAS,CAAC,MAAM,CACd,CAAC,QAAQ,EAAsB,EAAE,CAC/B,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CACtD,CACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAwC;IAExC,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,IAAI,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,CAAC;AACvE,CAAC","sourcesContent":["import { buildProviderDisplayNameLabelKey } from '@wildo-ai/saas-models/public-runtime';\n\nexport interface FrontendProviderDisplayLabelInput {\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n  /**\n   * Optional explicit fallback when the caller wants a non-ref technical\n   * fallback (for example a brand label sourced from a static map).\n   */\n  fallbackLabel?: string;\n  translate?: (key: string) => string;\n}\n\n/**\n * Collect unique, non-empty provider display-label keys for `useI18n({ keys })`.\n *\n * The helper intentionally stays tiny and framework-agnostic: call sites can\n * build whatever provider view-model they need, then hand only the optional\n * label keys here to get the deduped request list.\n */\nexport function collectFrontendProviderDisplayLabelKeys(\n  labelKeys: ReadonlyArray<string | undefined | null>,\n): string[] {\n  return Array.from(\n    new Set(\n      labelKeys.filter(\n        (labelKey): labelKey is string =>\n          typeof labelKey === 'string' && labelKey.length > 0,\n      ),\n    ),\n  );\n}\n\n/**\n * Resolve a user-facing provider label without freezing locale-bound copy into\n * provider metadata or generated artifacts.\n *\n * Order of preference:\n * 1. Translation resolved from the provider label key.\n * 2. Authored display name on the provider metadata.\n * 3. Optional caller-supplied fallback label.\n * 4. Raw provider ref as the technical last resort.\n */\nexport function resolveFrontendProviderDisplayLabel(\n  input: FrontendProviderDisplayLabelInput,\n): string {\n  const labelKey = input.displayNameLabelKey ?? buildProviderDisplayNameLabelKey(input.providerRef);\n  const translated = input.translate?.(labelKey);\n\n  if (translated && translated !== labelKey) {\n    return translated;\n  }\n\n  return input.displayName ?? input.fallbackLabel ?? input.providerRef;\n}\n"]}

package/dist/esm/core/external-providers/frontend-provider-registry.frontend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frontend-provider-registry.frontend.service.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/frontend-provider-registry.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAK7E,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC5B,MAAM,0CAA0C,CAAC;AAElD;;;;;GAKG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,mCAAmC,KAAK,IAAI,CAAC;CACnF;AAED,MAAM,WAAW,uCAAuC;IACtD,gEAAgE;IAChE,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,yBAAyB,GAAG,SAAS,CAAC;IAErF,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,aAAa,CAAC,yBAAyB,CAAC,CAAC;IAE5C,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,yBAAyB,GAAG,SAAS,CAAC;IAEzC,mCAAmC,CACjC,kBAAkB,EAAE,kBAAkB,EACtC,gBAAgB,EAAE,gBAAgB,GAAG,MAAM,GAC1C,yBAAyB,GAAG,SAAS,CAAC;IAEzC,iEAAiE;IACjE,OAAO,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;CACrD;AAED,qBAAa,+CACX,YAAW,uCAAuC;IAElD,OAAO,CAAC,QAAQ,CAEb;IAEH,UAAU,CAAC,KAAK,CAAC,EAAE,sCAAsC,GAAG,IAAI;IAQhE,gBAAgB,CACd,GAAG,EAAE,sBAAsB,GAC1B,yBAAyB,GAAG,SAAS;IAIxC,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,aAAa,CAAC,yBAAyB,CAAC;IAI3C,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,yBAAyB,GAAG,SAAS;IAIxC,mCAAmC,CACjC,kBAAkB,EAAE,kBAAkB,EACtC,gBAAgB,EAAE,gBAAgB,GAAG,MAAM,GAC1C,yBAAyB,GAAG,SAAS;IAQxC,OAAO,IAAI,aAAa,CAAC,yBAAyB,CAAC;CAGpD;AAED,wBAAgB,6CAA6C,CAC3D,KAAK,CAAC,EAAE,sCAAsC,GAC7C,uCAAuC,CAIzC"}
+{"version":3,"file":"frontend-provider-registry.frontend.service.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/frontend-provider-registry.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAK7E,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC5B,MAAM,0CAA0C,CAAC;AAElD;;;;;GAKG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,mCAAmC,KAAK,IAAI,CAAC;CACnF;AAED,MAAM,WAAW,uCAAuC;IACtD,gEAAgE;IAChE,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,yBAAyB,GAAG,SAAS,CAAC;IAErF,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,aAAa,CAAC,yBAAyB,CAAC,CAAC;IAE5C,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,yBAAyB,GAAG,SAAS,CAAC;IAEzC,mCAAmC,CACjC,kBAAkB,EAAE,kBAAkB,EACtC,gBAAgB,EAAE,gBAAgB,GAAG,MAAM,GAC1C,yBAAyB,GAAG,SAAS,CAAC;IAEzC,iEAAiE;IACjE,OAAO,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;CACrD;AAED,qBAAa,+CACX,YAAW,uCAAuC;IAElD,OAAO,CAAC,QAAQ,CAEb;IAEH,UAAU,CAAC,KAAK,CAAC,EAAE,sCAAsC,GAAG,IAAI;IAQhE,gBAAgB,CACd,GAAG,EAAE,sBAAsB,GAC1B,yBAAyB,GAAG,SAAS;IAIxC,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,aAAa,CAAC,yBAAyB,CAAC;IAI3C,wBAAwB,CACtB,kBAAkB,EAAE,kBAAkB,GACrC,yBAAyB,GAAG,SAAS;IAIxC,mCAAmC,CACjC,kBAAkB,EAAE,kBAAkB,EACtC,gBAAgB,EAAE,gBAAgB,GAAG,MAAM,GAC1C,yBAAyB,GAAG,SAAS;IAQxC,OAAO,IAAI,aAAa,CAAC,yBAAyB,CAAC;CAGpD;AAED,wBAAgB,6CAA6C,CAC3D,KAAK,CAAC,EAAE,sCAAsC,GAC7C,uCAAuC,CAIzC"}

package/dist/esm/core/external-providers/frontend-provider-registry.frontend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"frontend-provider-registry.frontend.service.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/frontend-provider-registry.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,0CAA0C,CAAC;AAyClD,MAAM,OAAO,+CAA+C;IAGlD,QAAQ,GAAG,2BAA2B,CAAC;QAC7C,OAAO,EAAE,IAAI,GAAG,EAAqD;KACtE,CAAC,CAAC;IAEH,UAAU,CAAC,KAA8C;QACvD,IAAI,CAAC,QAAQ,GAAG,mCAAmC,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,YAAY,EAAE,KAAK,EAAE,YAAY;SAClC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CACd,GAA2B;QAE3B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,wBAAwB,CACtB,kBAAsC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAED,wBAAwB,CACtB,kBAAsC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAED,mCAAmC,CACjC,kBAAsC,EACtC,gBAA2C;QAE3C,OAAO,IAAI,CAAC,QAAQ;aACjB,gCAAgC,CAAC,kBAAkB,CAAC;aACpD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACjB,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,gBAAgB,CAAC,CACrE,CAAC;IACN,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,6CAA6C,CAC3D,KAA8C;IAE9C,MAAM,OAAO,GAAG,IAAI,+CAA+C,EAAE,CAAC;IACtE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["/**\n * `FrontendProviderRegistryFrontendService` — frontend-side API for\n * reading the per-app provider catalog.\n *\n * The registry is built from TWO channels and no longer from a cast (#332):\n *\n *   - **DATA** — `FrontendAppBootstrapPayload.frontendProviders`, hydrated\n *     once at app start from `/application-config`. Built by\n *     `FrontendBootstrapBackendService.buildPayload()`, which is the SOLE\n *     cross-facet seam where backend code projects a `BackendProviderModule`\n *     into a `FrontendProviderEntry`. It is the authority on WHICH providers\n *     this frontend service has turned on, in this environment.\n *   - **CODE** — `generatedFrontendProviderModules` from the app's own\n *     `src/generated/frontend-providers.generated.ts`, written by\n *     `wildo config sync` and passed in through `StartApplicationOptions`. It\n *     is the authority on what code this bundle contains — an SDK loader, a\n *     public-config validator — none of which JSON could ever carry.\n *\n * From the frontend's perspective this service is still the only legal way to\n * read provider information — direct imports from\n * `@wildo-ai/external-connectors-private/*` are a TypeScript error because the\n * frontend bundle does not depend on that package.\n */\n\nimport type {\n  FrontendProvidersBlock,\n  ProviderCapability,\n} from '@wildo-ai/saas-models';\nimport type { ProviderProtocol } from '@wildo-ai/saas-models/public-runtime';\nimport {\n  composeFrontendAppProviders,\n  composeHydratedFrontendAppProviders,\n} from '@wildo-ai/external-connectors-public/app';\nimport type {\n  FrontendAppProviderModule,\n  FrontendAppProviderRef,\n  FrontendProviderHydrationDiagnostic,\n  GeneratedAppProviderModules,\n} from '@wildo-ai/external-connectors-public/app';\n\n/**\n * Everything the registry needs to join the two channels.\n *\n * `modules` absent is the ordinary case for an application that declares no\n * frontend provider. Config sync emits an empty map so startup imports remain stable.\n */\nexport interface FrontendProviderRegistryHydrationInput {\n  readonly entries?: FrontendProvidersBlock;\n  readonly modules?: GeneratedAppProviderModules;\n  readonly onDiagnostic?: (diagnostic: FrontendProviderHydrationDiagnostic) => void;\n}\n\nexport interface FrontendProviderRegistryFrontendService {\n  /** Hydrated from `FrontendAppBootstrapPayload` at app start. */\n  getProviderByRef(ref: FrontendAppProviderRef): FrontendAppProviderModule | undefined;\n\n  listByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): ReadonlyArray<FrontendAppProviderModule>;\n\n  findByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): FrontendAppProviderModule | undefined;\n\n  findByProviderCapabilityAndProtocol(\n    providerCapability: ProviderCapability,\n    providerProtocol: ProviderProtocol | string,\n  ): FrontendAppProviderModule | undefined;\n\n  /** All providers (read-only). For debug / introspection only. */\n  listAll(): ReadonlyArray<FrontendAppProviderModule>;\n}\n\nexport class InMemoryFrontendProviderRegistryFrontendService\n  implements FrontendProviderRegistryFrontendService\n{\n  private registry = composeFrontendAppProviders({\n    modules: new Map<FrontendAppProviderRef, FrontendAppProviderModule>(),\n  });\n\n  initialize(input?: FrontendProviderRegistryHydrationInput): void {\n    this.registry = composeHydratedFrontendAppProviders({\n      entries: input?.entries,\n      modules: input?.modules,\n      onDiagnostic: input?.onDiagnostic,\n    });\n  }\n\n  getProviderByRef(\n    ref: FrontendAppProviderRef,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry.getProviderByRef(ref);\n  }\n\n  listByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): ReadonlyArray<FrontendAppProviderModule> {\n    return this.registry.getProvidersByProviderCapability(providerCapability);\n  }\n\n  findByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry.findProviderByProviderCapability(providerCapability);\n  }\n\n  findByProviderCapabilityAndProtocol(\n    providerCapability: ProviderCapability,\n    providerProtocol: ProviderProtocol | string,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry\n      .getProvidersByProviderCapability(providerCapability)\n      .find((provider) =>\n        provider.protocols.some((protocol) => protocol === providerProtocol),\n      );\n  }\n\n  listAll(): ReadonlyArray<FrontendAppProviderModule> {\n    return [...this.registry.modules.values()];\n  }\n}\n\nexport function createFrontendProviderRegistryFrontendService(\n  input?: FrontendProviderRegistryHydrationInput,\n): FrontendProviderRegistryFrontendService {\n  const service = new InMemoryFrontendProviderRegistryFrontendService();\n  service.initialize(input);\n  return service;\n}\n"]}
+{"version":3,"file":"frontend-provider-registry.frontend.service.js","sourceRoot":"","sources":["../../../../src/core/external-providers/frontend-provider-registry.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,0CAA0C,CAAC;AAyClD,MAAM,OAAO,+CAA+C;IAGlD,QAAQ,GAAG,2BAA2B,CAAC;QAC7C,OAAO,EAAE,IAAI,GAAG,EAAqD;KACtE,CAAC,CAAC;IAEH,UAAU,CAAC,KAA8C;QACvD,IAAI,CAAC,QAAQ,GAAG,mCAAmC,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,YAAY,EAAE,KAAK,EAAE,YAAY;SAClC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CACd,GAA2B;QAE3B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,wBAAwB,CACtB,kBAAsC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAED,wBAAwB,CACtB,kBAAsC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAED,mCAAmC,CACjC,kBAAsC,EACtC,gBAA2C;QAE3C,OAAO,IAAI,CAAC,QAAQ;aACjB,gCAAgC,CAAC,kBAAkB,CAAC;aACpD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACjB,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,gBAAgB,CAAC,CACrE,CAAC;IACN,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,6CAA6C,CAC3D,KAA8C;IAE9C,MAAM,OAAO,GAAG,IAAI,+CAA+C,EAAE,CAAC;IACtE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["/**\n * `FrontendProviderRegistryFrontendService` — frontend-side API for\n * reading the per-app provider catalog.\n *\n * The registry is built from TWO channels and no longer from a cast (#332):\n *\n *   - **DATA** — `FrontendAppBootstrapPayload.frontendProviders`, hydrated\n *     once at app start from `/application-config`. Built by\n *     `FrontendBootstrapBackendService.buildPayload()`, which is the SOLE\n *     cross-facet seam where backend code projects a `BackendProviderModule`\n *     into a `FrontendProviderEntry`. It is the authority on WHICH providers\n *     this frontend service has turned on, in this environment.\n *   - **CODE** — `generatedFrontendProviderModules` from the app's own\n *     `src/generated/frontend-providers.generated.ts`, written by\n *     `wildo config sync` and passed in through `StartApplicationOptions`. It\n *     is the authority on what code this bundle contains — an SDK loader, a\n *     public-config validator — none of which JSON could ever carry.\n *\n * From the frontend's perspective this service is still the only legal way to\n * read provider information — direct imports from\n * `@wildo-ai/external-connectors-private/*` are a TypeScript error because the\n * frontend bundle does not depend on that package.\n */\n\nimport type {\n  FrontendProvidersBlock,\n  ProviderCapability,\n} from '@wildo-ai/saas-models';\nimport type { ProviderProtocol } from '@wildo-ai/saas-models/public-runtime';\nimport {\n  composeFrontendAppProviders,\n  composeHydratedFrontendAppProviders,\n} from '@wildo-ai/external-connectors-public/app';\nimport type {\n  FrontendAppProviderModule,\n  FrontendAppProviderRef,\n  FrontendProviderHydrationDiagnostic,\n  GeneratedAppProviderModules,\n} from '@wildo-ai/external-connectors-public/app';\n\n/**\n * Everything the registry needs to join the two channels.\n *\n * `modules` absent is the ordinary case for an application that declares no\n * frontend provider. Config sync emits an empty map so startup imports remain stable.\n */\nexport interface FrontendProviderRegistryHydrationInput {\n  readonly entries?: FrontendProvidersBlock;\n  readonly modules?: GeneratedAppProviderModules;\n  readonly onDiagnostic?: (diagnostic: FrontendProviderHydrationDiagnostic) => void;\n}\n\nexport interface FrontendProviderRegistryFrontendService {\n  /** Hydrated from `FrontendAppBootstrapPayload` at app start. */\n  getProviderByRef(ref: FrontendAppProviderRef): FrontendAppProviderModule | undefined;\n\n  listByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): ReadonlyArray<FrontendAppProviderModule>;\n\n  findByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): FrontendAppProviderModule | undefined;\n\n  findByProviderCapabilityAndProtocol(\n    providerCapability: ProviderCapability,\n    providerProtocol: ProviderProtocol | string,\n  ): FrontendAppProviderModule | undefined;\n\n  /** All providers (read-only). For debug / introspection only. */\n  listAll(): ReadonlyArray<FrontendAppProviderModule>;\n}\n\nexport class InMemoryFrontendProviderRegistryFrontendService\n  implements FrontendProviderRegistryFrontendService\n{\n  private registry = composeFrontendAppProviders({\n    modules: new Map<FrontendAppProviderRef, FrontendAppProviderModule>(),\n  });\n\n  initialize(input?: FrontendProviderRegistryHydrationInput): void {\n    this.registry = composeHydratedFrontendAppProviders({\n      entries: input?.entries,\n      modules: input?.modules,\n      onDiagnostic: input?.onDiagnostic,\n    });\n  }\n\n  getProviderByRef(\n    ref: FrontendAppProviderRef,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry.getProviderByRef(ref);\n  }\n\n  listByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): ReadonlyArray<FrontendAppProviderModule> {\n    return this.registry.getProvidersByProviderCapability(providerCapability);\n  }\n\n  findByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry.findProviderByProviderCapability(providerCapability);\n  }\n\n  findByProviderCapabilityAndProtocol(\n    providerCapability: ProviderCapability,\n    providerProtocol: ProviderProtocol | string,\n  ): FrontendAppProviderModule | undefined {\n    return this.registry\n      .getProvidersByProviderCapability(providerCapability)\n      .find((provider) =>\n        provider.protocols.some((protocol) => protocol === providerProtocol),\n      );\n  }\n\n  listAll(): ReadonlyArray<FrontendAppProviderModule> {\n    return [...this.registry.modules.values()];\n  }\n}\n\nexport function createFrontendProviderRegistryFrontendService(\n  input?: FrontendProviderRegistryHydrationInput,\n): FrontendProviderRegistryFrontendService {\n  const service = new InMemoryFrontendProviderRegistryFrontendService();\n  service.initialize(input);\n  return service;\n}\n"]}

package/dist/esm/core/external-providers/provider-address-lookup-selection.frontend.utils.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Holding what an address-lookup component hands back to the contract it DECLARED (#1702) — the
+ * `FRONTEND_ADDRESS_LOOKUP` twin of `receiveProviderFileSelections`, and the slot the address field of #561
+ * fills from.
+ *
+ * ## What is checked, and why here
+ *
+ * The address itself is the application's value: the field validates it against its own `z_address()`
+ * schema, as it validates a typed address, and this function applies that schema when the caller passes it
+ * so a lookup cannot hand the field a value the field would refuse.
+ *
+ * The vendor's PLACE ID is the part a vendor's terms govern, so a component declares once, statically,
+ * whether it returns one (`ProviderAddressLookupPlaceIdRetention`), and this function holds every selection
+ * to that declaration (the #383 rule). A component that declared `NONE` and returns a place id contradicts
+ * itself and is refused — a surface that silently kept the id would be holding a vendor key nobody reviewed
+ * the terms for. A `TRANSIENT` id is passed through for the interaction.
+ *
+ * Nothing here says the id may be stored, because nothing may store it (#561 D3): the address field keeps
+ * only the address (`AddressFieldLookupHost.applyAddress` takes an `AddressValue`, which has no place for one).
+ * The `placeIdStorable` flag this function returned until #561 had no reader and was removed with the
+ * `STORABLE` declaration it reported.
+ */
+import type { z } from 'zod';
+import { type ProviderFrontendComponentDescriptor } from '@wildo-ai/saas-models/public-runtime';
+import type { ProviderAddressLookupSelection } from '@wildo-ai/saas-models';
+/** Why an address-lookup selection was not accepted. */
+export declare enum ProviderAddressLookupRejectionKind {
+    /** The component returned a place id although it declared it returns none. */
+    PLACE_ID_CONTRADICTS_DECLARATION = "PLACE_ID_CONTRADICTS_DECLARATION",
+    /** The address it returned does not satisfy the receiving field's own schema. */
+    ADDRESS_REFUSED_BY_FIELD = "ADDRESS_REFUSED_BY_FIELD"
+}
+export interface ProviderAddressLookupRejection {
+    readonly kind: ProviderAddressLookupRejectionKind;
+    readonly providerRef: string;
+    readonly message: string;
+}
+/** A selection the field may take: its address, and a place id only when the component declared one (never stored). */
+export type AcceptedProviderAddressLookupSelection = ProviderAddressLookupSelection;
+export type ProviderAddressLookupOutcome = {
+    readonly accepted: AcceptedProviderAddressLookupSelection;
+    readonly rejection?: undefined;
+} | {
+    readonly accepted?: undefined;
+    readonly rejection: ProviderAddressLookupRejection;
+};
+export declare function receiveProviderAddressLookupSelection(input: {
+    readonly providerRef: string;
+    /** The component's declaration, from `providerComponentRegistry.describe(FRONTEND_ADDRESS_LOOKUP, ref)`. */
+    readonly descriptor: ProviderFrontendComponentDescriptor | undefined;
+    readonly selection: ProviderAddressLookupSelection;
+    /** The receiving field's own `z_address()` schema. When given, an address it refuses is refused here. */
+    readonly addressSchema?: z.ZodType;
+}): ProviderAddressLookupOutcome;
+//# sourceMappingURL=provider-address-lookup-selection.frontend.utils.d.ts.map

package/dist/esm/core/external-providers/provider-address-lookup-selection.frontend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-address-lookup-selection.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/provider-address-lookup-selection.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAEL,KAAK,mCAAmC,EACzC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AAE5E,wDAAwD;AACxD,oBAAY,kCAAkC;IAC5C,8EAA8E;IAC9E,gCAAgC,qCAAqC;IACrE,iFAAiF;IACjF,wBAAwB,6BAA6B;CACtD;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,uHAAuH;AACvH,MAAM,MAAM,sCAAsC,GAAG,8BAA8B,CAAC;AAEpF,MAAM,MAAM,4BAA4B,GACpC;IAAE,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAE,GAC7F;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,8BAA8B,CAAA;CAAE,CAAC;AAE1F,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,4GAA4G;IAC5G,QAAQ,CAAC,UAAU,EAAE,mCAAmC,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,SAAS,EAAE,8BAA8B,CAAC;IACnD,yGAAyG;IACzG,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;CACpC,GAAG,4BAA4B,CAqC/B"}

package/dist/esm/core/external-providers/provider-address-lookup-selection.frontend.utils.js

@@ -0,0 +1,65 @@
+/**
+ * Holding what an address-lookup component hands back to the contract it DECLARED (#1702) — the
+ * `FRONTEND_ADDRESS_LOOKUP` twin of `receiveProviderFileSelections`, and the slot the address field of #561
+ * fills from.
+ *
+ * ## What is checked, and why here
+ *
+ * The address itself is the application's value: the field validates it against its own `z_address()`
+ * schema, as it validates a typed address, and this function applies that schema when the caller passes it
+ * so a lookup cannot hand the field a value the field would refuse.
+ *
+ * The vendor's PLACE ID is the part a vendor's terms govern, so a component declares once, statically,
+ * whether it returns one (`ProviderAddressLookupPlaceIdRetention`), and this function holds every selection
+ * to that declaration (the #383 rule). A component that declared `NONE` and returns a place id contradicts
+ * itself and is refused — a surface that silently kept the id would be holding a vendor key nobody reviewed
+ * the terms for. A `TRANSIENT` id is passed through for the interaction.
+ *
+ * Nothing here says the id may be stored, because nothing may store it (#561 D3): the address field keeps
+ * only the address (`AddressFieldLookupHost.applyAddress` takes an `AddressValue`, which has no place for one).
+ * The `placeIdStorable` flag this function returned until #561 had no reader and was removed with the
+ * `STORABLE` declaration it reported.
+ */
+import { ProviderAddressLookupPlaceIdRetention, } from '@wildo-ai/saas-models/public-runtime';
+/** Why an address-lookup selection was not accepted. */
+export var ProviderAddressLookupRejectionKind;
+(function (ProviderAddressLookupRejectionKind) {
+    /** The component returned a place id although it declared it returns none. */
+    ProviderAddressLookupRejectionKind["PLACE_ID_CONTRADICTS_DECLARATION"] = "PLACE_ID_CONTRADICTS_DECLARATION";
+    /** The address it returned does not satisfy the receiving field's own schema. */
+    ProviderAddressLookupRejectionKind["ADDRESS_REFUSED_BY_FIELD"] = "ADDRESS_REFUSED_BY_FIELD";
+})(ProviderAddressLookupRejectionKind || (ProviderAddressLookupRejectionKind = {}));
+export function receiveProviderAddressLookupSelection(input) {
+    // Absent means NONE: a component that says nothing about place ids is read as returning none, which is
+    // the reading that can never store a vendor key by default.
+    const declared = input.descriptor?.placeIdRetention ?? ProviderAddressLookupPlaceIdRetention.NONE;
+    const { address, placeId } = input.selection;
+    if (placeId !== undefined && declared === ProviderAddressLookupPlaceIdRetention.NONE) {
+        return {
+            rejection: {
+                kind: ProviderAddressLookupRejectionKind.PLACE_ID_CONTRADICTS_DECLARATION,
+                providerRef: input.providerRef,
+                message: `Provider "${input.providerRef}" declared its address lookup returns no place id and returned one. `
+                    + 'Whether a vendor place id is returned is a declaration (`placeIdRetention`), not a runtime choice, '
+                    + 'so the selection is refused rather than guessed at.',
+            },
+        };
+    }
+    if (input.addressSchema !== undefined && !input.addressSchema.safeParse(address).success) {
+        return {
+            rejection: {
+                kind: ProviderAddressLookupRejectionKind.ADDRESS_REFUSED_BY_FIELD,
+                providerRef: input.providerRef,
+                message: `Provider "${input.providerRef}" returned an address the field's own schema refuses (a country outside `
+                    + 'the ones it accepts, or a missing required part). The lookup is a suggestion; the field decides.',
+            },
+        };
+    }
+    return {
+        accepted: {
+            address,
+            ...(placeId !== undefined ? { placeId } : {}),
+        },
+    };
+}
+//# sourceMappingURL=provider-address-lookup-selection.frontend.utils.js.map