@wildo-ai/saas-frontend-lib 1.1.6 → 1.1.7

package/dist/esm/core/security/useDocumentAcceptanceGateBehavior.js.map

@@ -1 +1 @@
-{"version":3,"file":"useDocumentAcceptanceGateBehavior.js","sourceRoot":"","sources":["../../../../../src/core/security/useDocumentAcceptanceGateBehavior.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAClE,OAAO,EACL,8BAA8B,EAE9B,+BAA+B,EAC/B,oCAAoC,EACpC,iCAAiC,EACjC,4BAA4B,GAI7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAMhG,iDAAiD;AACjD,MAAM,CAAN,IAAY,4BAgBX;AAhBD,WAAY,4BAA4B;IACtC,gHAAgH;IAChH,iEAAiC,CAAA;IACjC,oGAAoG;IACpG,qDAAqB,CAAA;IACrB,uBAAuB;IACvB,uDAAuB,CAAA;IACvB,yGAAyG;IACzG,qDAAqB,CAAA;IACrB;;;;;OAKG;IACH,2DAA2B,CAAA;AAC7B,CAAC,EAhBW,4BAA4B,KAA5B,4BAA4B,QAgBvC;AAkBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,UAAU,iCAAiC;IAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACjC,MAAM,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAErD,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,EAAE,8BAA8B,IAAI,8BAA8B,CAAC,iBAAiB,CAAC;IAChI;;;;OAIG;IACH,MAAM,wBAAwB,GAAG,iCAAiC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzF,MAAM,iBAAiB,GAAG,gBAAgB,KAAK,IAAI;WAC9C,CAAC,SAAS,CAAC,UAAU,EAAE,wBAAwB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACzE,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,+BAA+B,CAAC,iBAAiB,CAAC;eACxF,CAAC,CAAC,wBAAwB,IAAI,OAAO,CAAC,aAAa,KAAK,oCAAoC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE/G,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAwD,SAAS,CAAC,CAAC;IACnG,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEpD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,iBAAiB;YAAE,OAAO,SAAS,CAAC;QACzC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,wBAAwB,EAAE,CAAC,kCAAkC,EAAE;aAC5D,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aAC/D,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;YAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAExB,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EACrD,CAAC,IAAI,CAAC,CACP,CAAC;IACF,MAAM,iBAAiB,GAAG,OAAO,CAA0C,GAAG,EAAE;QAC9E,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO;YACP,QAAQ,EAAE,4BAA4B,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE;gBAC7H,eAAe,EAAE,wBAAwB;aAC1C,CAAC;SACH,CAAC,CAAC,CAAC;IACN,CAAC,EAAE,CAAC,gBAAgB,EAAE,SAAS,CAAC,UAAU,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,OAAO,CAC7B,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,EACjD,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC,CACxC,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,gBAAgB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,MAAM,GAAG,CAAC,iBAAiB;QAC/B,CAAC,CAAC,4BAA4B,CAAC,cAAc;QAC7C,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,4BAA4B,CAAC,WAAW;YAC1C,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,4BAA4B,CAAC,QAAQ;gBACvC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,QAAQ,CAAC;IAE3G;;;;OAIG;IACH,MAAM,SAAS,GAAG,cAAc,KAAK,8BAA8B,CAAC,sBAAsB,IAAI,QAAQ,CAAC;IAEvG,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAmB,EAAE;QACnD,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACxD,WAAW,CAAC,IAAI,CAAC,CAAC;QAClB,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,EAAE,CAAC,uBAAuB,CACvE,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC9D,CAAC;YACF;;;eAGG;YACH,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvB,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACrB,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,aAAa,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,WAAW,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,OAAO,CAAkC,GAAG,EAAE,CAAC,CAAC;QACjE,gBAAgB;QAChB,cAAc;QACd,iBAAiB;QACjB,eAAe;QACf,QAAQ;QACR,WAAW;QACX,aAAa;QACb,gBAAgB;KACjB,CAAC,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEvH,OAAO;QACL,MAAM;QACN,MAAM,EAAE,MAAM,KAAK,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS;QACxF,UAAU;QACV,SAAS;QACT,QAAQ;QACR,UAAU;QACV,MAAM;QACN,OAAO,EAAE,MAAM;KAChB,CAAC;AACJ,CAAC","sourcesContent":["import { useCallback, useEffect, useMemo, useState } from 'react';\nimport {\n  GovernedDocumentAcceptanceMode,\n  GovernedDocumentAcceptanceOwedReason,\n  GovernedDocumentInteractionKind,\n  GovernedDocumentReleaseApprovalState,\n  requiresApprovedGovernedDocuments,\n  resolveInForcePublicDocument,\n  type GovernedDocumentAcceptanceOwed,\n  type GovernedDocumentInteractionSurface,\n  type GovernedDocumentPublicDocument,\n} from '@wildo-ai/saas-models';\n\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport type {\n  GovernedDocumentAcceptanceState,\n  RequiredDocumentPresentation,\n} from '~wildo-frontend-lib/components/compliance/GovernedDocumentAcceptanceControl';\n\n/** What the document acceptance gate must do. */\nexport enum DocumentAcceptanceGateStatus {\n  /** The application declares no release that asks for acceptance. Nothing is fetched, nothing is shown (R12). */\n  NOT_APPLICABLE = 'NOT_APPLICABLE',\n  /** The owed set is being read. The application renders meanwhile — see the hook's JSDoc for why. */\n  CHECKING = 'CHECKING',\n  /** Nothing is owed. */\n  SATISFIED = 'SATISFIED',\n  /** The person owes an acceptance: the gate stands in for the application until they give it or leave. */\n  REQUIRED = 'REQUIRED',\n  /**\n   * The owed set could not be read. The application renders, and the next session asks again.\n   *\n   * Distinct from SATISFIED on purpose: nothing was learned, so nothing is claimed. See the hook's\n   * JSDoc for why this opens rather than closes.\n   */\n  UNAVAILABLE = 'UNAVAILABLE',\n}\n\nexport interface DocumentAcceptanceGateBehavior {\n  readonly status: DocumentAcceptanceGateStatus;\n  /** Why the person is asked. Present exactly when `status` is REQUIRED; the first owed reason decides the heading. */\n  readonly reason: GovernedDocumentAcceptanceOwedReason | undefined;\n  /** The acceptance control's state — the same shape registration passes it. */\n  readonly acceptance: GovernedDocumentAcceptanceState;\n  /** Whether the person has done what the mode asks, so the accept action may run. */\n  readonly canAccept: boolean;\n  readonly isSaving: boolean;\n  readonly saveFailed: boolean;\n  /** Record the acceptance of every owed release, then re-read what is still owed. */\n  readonly accept: () => Promise<void>;\n  /** Leave the application instead of accepting. */\n  readonly signOut: () => void;\n}\n\n/**\n * The application-tier DOCUMENT ACCEPTANCE gate's behaviour (#1258, Step 2 / R7).\n *\n * A signed-in person owes an acceptance when they have never accepted a document the application\n * requires — a sign-up through a form that accepted nothing — or when a release changed it materially\n * since they last did. The server decides which (`GET /governed-documents/acceptances/owed`, over the\n * pure `governedDocumentAcceptancesOwed`), so the rule lives in one place.\n *\n * ## Four decisions this makes, each deliberately\n *\n * - **An application that asks for no acceptance never makes the request.** Decided here from the\n *   declared releases, before any network call, so a product with no terms pays nothing (R12).\n * - **A frontend service that authenticates no APPLICATION user never makes the request either.**\n *   An acceptance is owed by a user of the application — the rows the server reads are keyed on one\n *   — so a service whose `usersManagement` names no user type has nobody who could owe it. That is\n *   not hypothetical: the dev companion's workbench authors its entry EMPTY on purpose (its operator\n *   is the platform identity, never an application user), mounts a deliberate subset of the engine's\n *   controllers, and served the application's own releases in the config — so this gate asked\n *   `/governed-documents/acceptances/owed` on every session, the companion answered `404 Route not\n *   found`, and the error classifier rendered \"The companion has no record of this\" on Home\n *   (measured 2026-09-22). Decided from the same resolution `useResolvedAuthConfig` makes for the\n *   sign-in surfaces, so the two cannot disagree about whose acceptance a session can carry.\n * - **The application renders while the check is in flight.** Holding the whole shell on one request\n *   makes every sign-in wait on it, for the case — nothing owed — that is overwhelmingly the common\n *   one. The gate replaces the shell when the answer arrives.\n * - **A failed check OPENS, and says so (`UNAVAILABLE`).** Acceptance here is a rendering posture, not\n *   a server-side gate — the acceptance mode's own contract states that plainly — so failing closed\n *   would lock every signed-in person out of the product whenever one endpoint hiccups, to enforce\n *   something the server does not enforce. The next session asks again.\n *\n * ## The same acceptance control as registration\n *\n * `acceptance` is exactly the state `GovernedDocumentAcceptanceControl` takes, so this surface asks in\n * the same three modes, with the same reading gate and the same rules, as sign-up does.\n *\n * assurance-control: WILDO.PRIVACY.CONSENT_RECORD — a person whose agreement to a required document\n * is missing or superseded is asked again before the application renders, and their acceptance is\n * recorded against the exact release version through the same recorder as registration.\n */\nexport function useDocumentAcceptanceGateBehavior(): DocumentAcceptanceGateBehavior {\n  const { appConfig } = useApplication();\n  const { logout } = useUserOrgs();\n  const { resolvedUserType } = useResolvedAuthConfig();\n\n  const acceptanceMode = appConfig.compliance?.governedDocumentAcceptanceMode ?? GovernedDocumentAcceptanceMode.EXPLICIT_CHECKBOX;\n  /*\n   * Both halves of the second decision above: somebody who can owe, and a release that asks. With the\n   * approval gate armed (#1565) only an APPROVED release asks — the backend owes nothing else, so an\n   * application whose releases are all unapproved skips the read entirely.\n   */\n  const requireApprovedDocuments = requiresApprovedGovernedDocuments(appConfig.compliance);\n  const asksForAcceptance = resolvedUserType !== null\n    && (appConfig.compliance?.governedDocumentReleases ?? []).some((release) =>\n      release.allowedInteractionKinds.includes(GovernedDocumentInteractionKind.CONTRACT_ACCEPTED)\n      && (!requireApprovedDocuments || release.approvalState === GovernedDocumentReleaseApprovalState.APPROVED));\n\n  const [owed, setOwed] = useState<readonly GovernedDocumentAcceptanceOwed[] | undefined>(undefined);\n  const [checkFailed, setCheckFailed] = useState(false);\n  const [accepted, setAccepted] = useState(false);\n  const [documentsRead, setDocumentsRead] = useState<readonly string[]>([]);\n  const [isSaving, setIsSaving] = useState(false);\n  const [saveFailed, setSaveFailed] = useState(false);\n\n  useEffect(() => {\n    if (!asksForAcceptance) return undefined;\n    let cancelled = false;\n    getManualCallsHttpClient().getOwedGovernedDocumentAcceptances()\n      .then((response) => { if (!cancelled) setOwed(response.owed); })\n      .catch(() => { if (!cancelled) setCheckFailed(true); });\n    return () => { cancelled = true; };\n  }, [asksForAcceptance]);\n\n  const requiredReleases = useMemo<readonly GovernedDocumentInteractionSurface[]>(\n    () => (owed ?? []).flatMap((entry) => entry.releases),\n    [owed],\n  );\n  const requiredDocuments = useMemo<readonly RequiredDocumentPresentation[]>(() => {\n    const at = new Date().toISOString();\n    return requiredReleases.map((release) => ({\n      release,\n      document: resolveInForcePublicDocument(appConfig.compliance?.publicDocuments ?? [], release.identity.document.documentRef, at, {\n        requireApproved: requireApprovedDocuments,\n      }),\n    }));\n  }, [requiredReleases, appConfig.compliance?.publicDocuments, requireApprovedDocuments]);\n  const servedDocuments = useMemo<readonly GovernedDocumentPublicDocument[]>(\n    () => appConfig.compliance?.publicDocuments ?? [],\n    [appConfig.compliance?.publicDocuments],\n  );\n\n  const markDocumentRead = useCallback((paneKey: string) => {\n    setDocumentsRead((current) => (current.includes(paneKey) ? current : [...current, paneKey]));\n  }, []);\n\n  const status = !asksForAcceptance\n    ? DocumentAcceptanceGateStatus.NOT_APPLICABLE\n    : checkFailed\n      ? DocumentAcceptanceGateStatus.UNAVAILABLE\n      : owed === undefined\n        ? DocumentAcceptanceGateStatus.CHECKING\n        : owed.length === 0 ? DocumentAcceptanceGateStatus.SATISFIED : DocumentAcceptanceGateStatus.REQUIRED;\n\n  /*\n   * The mode decides whether pressing the action IS the act (sign-in-wrap) or whether the box must be\n   * ticked first — the same predicate registration's submit uses, so the two cannot disagree. The\n   * reading gate is enforced by the control itself, which withholds the box until the end is reached.\n   */\n  const canAccept = acceptanceMode === GovernedDocumentAcceptanceMode.IMPLIED_BY_REGISTERING || accepted;\n\n  const accept = useCallback(async (): Promise<void> => {\n    if (!canAccept || requiredReleases.length === 0) return;\n    setIsSaving(true);\n    setSaveFailed(false);\n    try {\n      const response = await getManualCallsHttpClient().acceptGovernedDocuments(\n        requiredReleases.map((release) => release.identity.releaseId),\n      );\n      /*\n       * Let the person through on what the server says is STILL owed, never on having sent the\n       * request. A write that recorded nothing leaves the gate up, which is the only honest outcome.\n       */\n      setOwed(response.owed);\n      setAccepted(false);\n      setDocumentsRead([]);\n      if (response.owed.length > 0) setSaveFailed(true);\n    } catch {\n      setSaveFailed(true);\n    } finally {\n      setIsSaving(false);\n    }\n  }, [canAccept, requiredReleases]);\n\n  const acceptance = useMemo<GovernedDocumentAcceptanceState>(() => ({\n    requiredReleases,\n    acceptanceMode,\n    requiredDocuments,\n    servedDocuments,\n    accepted,\n    setAccepted,\n    documentsRead,\n    markDocumentRead,\n  }), [requiredReleases, acceptanceMode, requiredDocuments, servedDocuments, accepted, documentsRead, markDocumentRead]);\n\n  return {\n    status,\n    reason: status === DocumentAcceptanceGateStatus.REQUIRED ? owed?.[0]?.reason : undefined,\n    acceptance,\n    canAccept,\n    isSaving,\n    saveFailed,\n    accept,\n    signOut: logout,\n  };\n}\n"]}
+{"version":3,"file":"useDocumentAcceptanceGateBehavior.js","sourceRoot":"","sources":["../../../../src/core/security/useDocumentAcceptanceGateBehavior.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAClE,OAAO,EACL,8BAA8B,EAE9B,+BAA+B,EAC/B,oCAAoC,EACpC,iCAAiC,EACjC,4BAA4B,GAI7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAMhG,iDAAiD;AACjD,MAAM,CAAN,IAAY,4BAgBX;AAhBD,WAAY,4BAA4B;IACtC,gHAAgH;IAChH,iEAAiC,CAAA;IACjC,oGAAoG;IACpG,qDAAqB,CAAA;IACrB,uBAAuB;IACvB,uDAAuB,CAAA;IACvB,yGAAyG;IACzG,qDAAqB,CAAA;IACrB;;;;;OAKG;IACH,2DAA2B,CAAA;AAC7B,CAAC,EAhBW,4BAA4B,KAA5B,4BAA4B,QAgBvC;AAkBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,UAAU,iCAAiC;IAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACjC,MAAM,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAErD,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,EAAE,8BAA8B,IAAI,8BAA8B,CAAC,iBAAiB,CAAC;IAChI;;;;OAIG;IACH,MAAM,wBAAwB,GAAG,iCAAiC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzF,MAAM,iBAAiB,GAAG,gBAAgB,KAAK,IAAI;WAC9C,CAAC,SAAS,CAAC,UAAU,EAAE,wBAAwB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACzE,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,+BAA+B,CAAC,iBAAiB,CAAC;eACxF,CAAC,CAAC,wBAAwB,IAAI,OAAO,CAAC,aAAa,KAAK,oCAAoC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE/G,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAwD,SAAS,CAAC,CAAC;IACnG,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEpD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,iBAAiB;YAAE,OAAO,SAAS,CAAC;QACzC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,wBAAwB,EAAE,CAAC,kCAAkC,EAAE;aAC5D,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aAC/D,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;YAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAExB,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EACrD,CAAC,IAAI,CAAC,CACP,CAAC;IACF,MAAM,iBAAiB,GAAG,OAAO,CAA0C,GAAG,EAAE;QAC9E,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO;YACP,QAAQ,EAAE,4BAA4B,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE;gBAC7H,eAAe,EAAE,wBAAwB;aAC1C,CAAC;SACH,CAAC,CAAC,CAAC;IACN,CAAC,EAAE,CAAC,gBAAgB,EAAE,SAAS,CAAC,UAAU,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,OAAO,CAC7B,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,EACjD,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC,CACxC,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,gBAAgB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,MAAM,GAAG,CAAC,iBAAiB;QAC/B,CAAC,CAAC,4BAA4B,CAAC,cAAc;QAC7C,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,4BAA4B,CAAC,WAAW;YAC1C,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,4BAA4B,CAAC,QAAQ;gBACvC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,QAAQ,CAAC;IAE3G;;;;OAIG;IACH,MAAM,SAAS,GAAG,cAAc,KAAK,8BAA8B,CAAC,sBAAsB,IAAI,QAAQ,CAAC;IAEvG,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAmB,EAAE;QACnD,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACxD,WAAW,CAAC,IAAI,CAAC,CAAC;QAClB,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,EAAE,CAAC,uBAAuB,CACvE,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC9D,CAAC;YACF;;;eAGG;YACH,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvB,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACrB,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,aAAa,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,WAAW,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,OAAO,CAAkC,GAAG,EAAE,CAAC,CAAC;QACjE,gBAAgB;QAChB,cAAc;QACd,iBAAiB;QACjB,eAAe;QACf,QAAQ;QACR,WAAW;QACX,aAAa;QACb,gBAAgB;KACjB,CAAC,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEvH,OAAO;QACL,MAAM;QACN,MAAM,EAAE,MAAM,KAAK,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS;QACxF,UAAU;QACV,SAAS;QACT,QAAQ;QACR,UAAU;QACV,MAAM;QACN,OAAO,EAAE,MAAM;KAChB,CAAC;AACJ,CAAC","sourcesContent":["import { useCallback, useEffect, useMemo, useState } from 'react';\nimport {\n  GovernedDocumentAcceptanceMode,\n  GovernedDocumentAcceptanceOwedReason,\n  GovernedDocumentInteractionKind,\n  GovernedDocumentReleaseApprovalState,\n  requiresApprovedGovernedDocuments,\n  resolveInForcePublicDocument,\n  type GovernedDocumentAcceptanceOwed,\n  type GovernedDocumentInteractionSurface,\n  type GovernedDocumentPublicDocument,\n} from '@wildo-ai/saas-models';\n\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport type {\n  GovernedDocumentAcceptanceState,\n  RequiredDocumentPresentation,\n} from '~wildo-frontend-lib/components/compliance/GovernedDocumentAcceptanceControl';\n\n/** What the document acceptance gate must do. */\nexport enum DocumentAcceptanceGateStatus {\n  /** The application declares no release that asks for acceptance. Nothing is fetched, nothing is shown (R12). */\n  NOT_APPLICABLE = 'NOT_APPLICABLE',\n  /** The owed set is being read. The application renders meanwhile — see the hook's JSDoc for why. */\n  CHECKING = 'CHECKING',\n  /** Nothing is owed. */\n  SATISFIED = 'SATISFIED',\n  /** The person owes an acceptance: the gate stands in for the application until they give it or leave. */\n  REQUIRED = 'REQUIRED',\n  /**\n   * The owed set could not be read. The application renders, and the next session asks again.\n   *\n   * Distinct from SATISFIED on purpose: nothing was learned, so nothing is claimed. See the hook's\n   * JSDoc for why this opens rather than closes.\n   */\n  UNAVAILABLE = 'UNAVAILABLE',\n}\n\nexport interface DocumentAcceptanceGateBehavior {\n  readonly status: DocumentAcceptanceGateStatus;\n  /** Why the person is asked. Present exactly when `status` is REQUIRED; the first owed reason decides the heading. */\n  readonly reason: GovernedDocumentAcceptanceOwedReason | undefined;\n  /** The acceptance control's state — the same shape registration passes it. */\n  readonly acceptance: GovernedDocumentAcceptanceState;\n  /** Whether the person has done what the mode asks, so the accept action may run. */\n  readonly canAccept: boolean;\n  readonly isSaving: boolean;\n  readonly saveFailed: boolean;\n  /** Record the acceptance of every owed release, then re-read what is still owed. */\n  readonly accept: () => Promise<void>;\n  /** Leave the application instead of accepting. */\n  readonly signOut: () => void;\n}\n\n/**\n * The application-tier DOCUMENT ACCEPTANCE gate's behaviour (#1258, Step 2 / R7).\n *\n * A signed-in person owes an acceptance when they have never accepted a document the application\n * requires — a sign-up through a form that accepted nothing — or when a release changed it materially\n * since they last did. The server decides which (`GET /governed-documents/acceptances/owed`, over the\n * pure `governedDocumentAcceptancesOwed`), so the rule lives in one place.\n *\n * ## Four decisions this makes, each deliberately\n *\n * - **An application that asks for no acceptance never makes the request.** Decided here from the\n *   declared releases, before any network call, so a product with no terms pays nothing (R12).\n * - **A frontend service that authenticates no APPLICATION user never makes the request either.**\n *   An acceptance is owed by a user of the application — the rows the server reads are keyed on one\n *   — so a service whose `usersManagement` names no user type has nobody who could owe it. That is\n *   not hypothetical: the dev companion's workbench authors its entry EMPTY on purpose (its operator\n *   is the platform identity, never an application user), mounts a deliberate subset of the engine's\n *   controllers, and served the application's own releases in the config — so this gate asked\n *   `/governed-documents/acceptances/owed` on every session, the companion answered `404 Route not\n *   found`, and the error classifier rendered \"The companion has no record of this\" on Home\n *   (measured 2026-09-22). Decided from the same resolution `useResolvedAuthConfig` makes for the\n *   sign-in surfaces, so the two cannot disagree about whose acceptance a session can carry.\n * - **The application renders while the check is in flight.** Holding the whole shell on one request\n *   makes every sign-in wait on it, for the case — nothing owed — that is overwhelmingly the common\n *   one. The gate replaces the shell when the answer arrives.\n * - **A failed check OPENS, and says so (`UNAVAILABLE`).** Acceptance here is a rendering posture, not\n *   a server-side gate — the acceptance mode's own contract states that plainly — so failing closed\n *   would lock every signed-in person out of the product whenever one endpoint hiccups, to enforce\n *   something the server does not enforce. The next session asks again.\n *\n * ## The same acceptance control as registration\n *\n * `acceptance` is exactly the state `GovernedDocumentAcceptanceControl` takes, so this surface asks in\n * the same three modes, with the same reading gate and the same rules, as sign-up does.\n *\n * assurance-control: WILDO.PRIVACY.CONSENT_RECORD — a person whose agreement to a required document\n * is missing or superseded is asked again before the application renders, and their acceptance is\n * recorded against the exact release version through the same recorder as registration.\n */\nexport function useDocumentAcceptanceGateBehavior(): DocumentAcceptanceGateBehavior {\n  const { appConfig } = useApplication();\n  const { logout } = useUserOrgs();\n  const { resolvedUserType } = useResolvedAuthConfig();\n\n  const acceptanceMode = appConfig.compliance?.governedDocumentAcceptanceMode ?? GovernedDocumentAcceptanceMode.EXPLICIT_CHECKBOX;\n  /*\n   * Both halves of the second decision above: somebody who can owe, and a release that asks. With the\n   * approval gate armed (#1565) only an APPROVED release asks — the backend owes nothing else, so an\n   * application whose releases are all unapproved skips the read entirely.\n   */\n  const requireApprovedDocuments = requiresApprovedGovernedDocuments(appConfig.compliance);\n  const asksForAcceptance = resolvedUserType !== null\n    && (appConfig.compliance?.governedDocumentReleases ?? []).some((release) =>\n      release.allowedInteractionKinds.includes(GovernedDocumentInteractionKind.CONTRACT_ACCEPTED)\n      && (!requireApprovedDocuments || release.approvalState === GovernedDocumentReleaseApprovalState.APPROVED));\n\n  const [owed, setOwed] = useState<readonly GovernedDocumentAcceptanceOwed[] | undefined>(undefined);\n  const [checkFailed, setCheckFailed] = useState(false);\n  const [accepted, setAccepted] = useState(false);\n  const [documentsRead, setDocumentsRead] = useState<readonly string[]>([]);\n  const [isSaving, setIsSaving] = useState(false);\n  const [saveFailed, setSaveFailed] = useState(false);\n\n  useEffect(() => {\n    if (!asksForAcceptance) return undefined;\n    let cancelled = false;\n    getManualCallsHttpClient().getOwedGovernedDocumentAcceptances()\n      .then((response) => { if (!cancelled) setOwed(response.owed); })\n      .catch(() => { if (!cancelled) setCheckFailed(true); });\n    return () => { cancelled = true; };\n  }, [asksForAcceptance]);\n\n  const requiredReleases = useMemo<readonly GovernedDocumentInteractionSurface[]>(\n    () => (owed ?? []).flatMap((entry) => entry.releases),\n    [owed],\n  );\n  const requiredDocuments = useMemo<readonly RequiredDocumentPresentation[]>(() => {\n    const at = new Date().toISOString();\n    return requiredReleases.map((release) => ({\n      release,\n      document: resolveInForcePublicDocument(appConfig.compliance?.publicDocuments ?? [], release.identity.document.documentRef, at, {\n        requireApproved: requireApprovedDocuments,\n      }),\n    }));\n  }, [requiredReleases, appConfig.compliance?.publicDocuments, requireApprovedDocuments]);\n  const servedDocuments = useMemo<readonly GovernedDocumentPublicDocument[]>(\n    () => appConfig.compliance?.publicDocuments ?? [],\n    [appConfig.compliance?.publicDocuments],\n  );\n\n  const markDocumentRead = useCallback((paneKey: string) => {\n    setDocumentsRead((current) => (current.includes(paneKey) ? current : [...current, paneKey]));\n  }, []);\n\n  const status = !asksForAcceptance\n    ? DocumentAcceptanceGateStatus.NOT_APPLICABLE\n    : checkFailed\n      ? DocumentAcceptanceGateStatus.UNAVAILABLE\n      : owed === undefined\n        ? DocumentAcceptanceGateStatus.CHECKING\n        : owed.length === 0 ? DocumentAcceptanceGateStatus.SATISFIED : DocumentAcceptanceGateStatus.REQUIRED;\n\n  /*\n   * The mode decides whether pressing the action IS the act (sign-in-wrap) or whether the box must be\n   * ticked first — the same predicate registration's submit uses, so the two cannot disagree. The\n   * reading gate is enforced by the control itself, which withholds the box until the end is reached.\n   */\n  const canAccept = acceptanceMode === GovernedDocumentAcceptanceMode.IMPLIED_BY_REGISTERING || accepted;\n\n  const accept = useCallback(async (): Promise<void> => {\n    if (!canAccept || requiredReleases.length === 0) return;\n    setIsSaving(true);\n    setSaveFailed(false);\n    try {\n      const response = await getManualCallsHttpClient().acceptGovernedDocuments(\n        requiredReleases.map((release) => release.identity.releaseId),\n      );\n      /*\n       * Let the person through on what the server says is STILL owed, never on having sent the\n       * request. A write that recorded nothing leaves the gate up, which is the only honest outcome.\n       */\n      setOwed(response.owed);\n      setAccepted(false);\n      setDocumentsRead([]);\n      if (response.owed.length > 0) setSaveFailed(true);\n    } catch {\n      setSaveFailed(true);\n    } finally {\n      setIsSaving(false);\n    }\n  }, [canAccept, requiredReleases]);\n\n  const acceptance = useMemo<GovernedDocumentAcceptanceState>(() => ({\n    requiredReleases,\n    acceptanceMode,\n    requiredDocuments,\n    servedDocuments,\n    accepted,\n    setAccepted,\n    documentsRead,\n    markDocumentRead,\n  }), [requiredReleases, acceptanceMode, requiredDocuments, servedDocuments, accepted, documentsRead, markDocumentRead]);\n\n  return {\n    status,\n    reason: status === DocumentAcceptanceGateStatus.REQUIRED ? owed?.[0]?.reason : undefined,\n    acceptance,\n    canAccept,\n    isSaving,\n    saveFailed,\n    accept,\n    signOut: logout,\n  };\n}\n"]}

package/dist/esm/core/security/useGrantedConsentPurposes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useGrantedConsentPurposes.d.ts","sourceRoot":"","sources":["../../../../../src/core/security/useGrantedConsentPurposes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAIrG,MAAM,WAAW,sBAAsB;IACrC,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CACtF;AAED,wBAAgB,yBAAyB,IAAI,sBAAsB,CAkBlE"}
+{"version":3,"file":"useGrantedConsentPurposes.d.ts","sourceRoot":"","sources":["../../../../src/core/security/useGrantedConsentPurposes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAIrG,MAAM,WAAW,sBAAsB;IACrC,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CACtF;AAED,wBAAgB,yBAAyB,IAAI,sBAAsB,CAkBlE"}

package/dist/esm/core/security/useGrantedConsentPurposes.js.map

@@ -1 +1 @@
-{"version":3,"file":"useGrantedConsentPurposes.js","sourceRoot":"","sources":["../../../../../src/core/security/useGrantedConsentPurposes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAuB,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAYvE,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,cAAc,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAC1F,MAAM,qBAAqB,GAAG,OAAO,EAAE,qBAAqB,CAAC;IAC7D,MAAM,SAAS,GAAG,OAAO,EAAE,IAAI,KAAK,IAAI,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,qBAAqB,KAAK,SAAS,CAAC;IAE/G,MAAM,KAAK,GAAG,WAAW,CACvB,KAAK,EAAE,QAAmC,EAAiB,EAAE;QAC3D,IAAI,qBAAqB,KAAK,SAAS;YAAE,OAAO;QAChD,oGAAoG;QACpG,8DAA8D;QAC9D,MAAM,qBAAqB,CAAC,sBAAsB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnF,CAAC,EACD,CAAC,OAAO,EAAE,qBAAqB,CAAC,CACjC,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC3D,CAAC","sourcesContent":["/**\n * The consent purposes the signed-in person has granted, and the one door that records a new grant —\n * for a surface that must gate provider code on consent (#1702).\n *\n * ## Why this reads `UserOrgsContext` WITHOUT `useUserOrgs`\n *\n * `useUserOrgs` throws outside its provider. A provider component can be mounted outside it — in a test, on\n * a pre-authentication page — and there the right answer is not an exception but \"nothing has been\n * granted\", because nobody is known to have granted anything. So an absent context reads as the empty set,\n * which fails closed, and offers no way to record a grant, because there is no person to record it for.\n *\n * ## Why the grant source is the person's stored preferences\n *\n * `privacy.consentedPurposes` on the self-preferences record is the audited consent decision\n * (`resource-operation-audit-emission` reads it). Reading the same record here means a component gate and\n * the application's consent gate can never disagree about what was granted, and recording a grant through\n * `recordConsentDecision` adds no second audit trail — the write IS the audit event.\n */\n\nimport { useCallback, useContext, useMemo } from 'react';\nimport { normalizeConsentPurposes, type ConsentPurpose } from '@wildo-ai/saas-models/public-runtime';\nimport { UserOrgsContext } from './UserOrgsContext';\nimport { composeConsentDecision } from './consent-gate.frontend.utils';\n\nexport interface GrantedConsentPurposes {\n  /** What the signed-in person has granted, normalized. Empty when nobody is known. */\n  readonly granted: readonly ConsentPurpose[];\n  /**\n   * Grants exactly `purposes` IN ADDITION to what is already granted, through the audited preference\n   * write. `undefined` when there is no person to record a decision for.\n   */\n  readonly grant: ((purposes: readonly ConsentPurpose[]) => Promise<void>) | undefined;\n}\n\nexport function useGrantedConsentPurposes(): GrantedConsentPurposes {\n  const context = useContext(UserOrgsContext);\n  const storedPurposes = context?.privacy?.consentedPurposes;\n  const granted = useMemo(() => normalizeConsentPurposes(storedPurposes), [storedPurposes]);\n  const recordConsentDecision = context?.recordConsentDecision;\n  const canRecord = context?.user !== null && context?.user !== undefined && recordConsentDecision !== undefined;\n\n  const grant = useCallback(\n    async (purposes: readonly ConsentPurpose[]): Promise<void> => {\n      if (recordConsentDecision === undefined) return;\n      // Offered and selected are the same set: the person agreed to exactly the purposes they were shown,\n      // and every purpose they did not see keeps its stored answer.\n      await recordConsentDecision(composeConsentDecision(granted, purposes, purposes));\n    },\n    [granted, recordConsentDecision],\n  );\n\n  return { granted, grant: canRecord ? grant : undefined };\n}\n"]}
+{"version":3,"file":"useGrantedConsentPurposes.js","sourceRoot":"","sources":["../../../../src/core/security/useGrantedConsentPurposes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAuB,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAYvE,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,cAAc,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAC1F,MAAM,qBAAqB,GAAG,OAAO,EAAE,qBAAqB,CAAC;IAC7D,MAAM,SAAS,GAAG,OAAO,EAAE,IAAI,KAAK,IAAI,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,qBAAqB,KAAK,SAAS,CAAC;IAE/G,MAAM,KAAK,GAAG,WAAW,CACvB,KAAK,EAAE,QAAmC,EAAiB,EAAE;QAC3D,IAAI,qBAAqB,KAAK,SAAS;YAAE,OAAO;QAChD,oGAAoG;QACpG,8DAA8D;QAC9D,MAAM,qBAAqB,CAAC,sBAAsB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnF,CAAC,EACD,CAAC,OAAO,EAAE,qBAAqB,CAAC,CACjC,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC3D,CAAC","sourcesContent":["/**\n * The consent purposes the signed-in person has granted, and the one door that records a new grant —\n * for a surface that must gate provider code on consent (#1702).\n *\n * ## Why this reads `UserOrgsContext` WITHOUT `useUserOrgs`\n *\n * `useUserOrgs` throws outside its provider. A provider component can be mounted outside it — in a test, on\n * a pre-authentication page — and there the right answer is not an exception but \"nothing has been\n * granted\", because nobody is known to have granted anything. So an absent context reads as the empty set,\n * which fails closed, and offers no way to record a grant, because there is no person to record it for.\n *\n * ## Why the grant source is the person's stored preferences\n *\n * `privacy.consentedPurposes` on the self-preferences record is the audited consent decision\n * (`resource-operation-audit-emission` reads it). Reading the same record here means a component gate and\n * the application's consent gate can never disagree about what was granted, and recording a grant through\n * `recordConsentDecision` adds no second audit trail — the write IS the audit event.\n */\n\nimport { useCallback, useContext, useMemo } from 'react';\nimport { normalizeConsentPurposes, type ConsentPurpose } from '@wildo-ai/saas-models/public-runtime';\nimport { UserOrgsContext } from './UserOrgsContext';\nimport { composeConsentDecision } from './consent-gate.frontend.utils';\n\nexport interface GrantedConsentPurposes {\n  /** What the signed-in person has granted, normalized. Empty when nobody is known. */\n  readonly granted: readonly ConsentPurpose[];\n  /**\n   * Grants exactly `purposes` IN ADDITION to what is already granted, through the audited preference\n   * write. `undefined` when there is no person to record a decision for.\n   */\n  readonly grant: ((purposes: readonly ConsentPurpose[]) => Promise<void>) | undefined;\n}\n\nexport function useGrantedConsentPurposes(): GrantedConsentPurposes {\n  const context = useContext(UserOrgsContext);\n  const storedPurposes = context?.privacy?.consentedPurposes;\n  const granted = useMemo(() => normalizeConsentPurposes(storedPurposes), [storedPurposes]);\n  const recordConsentDecision = context?.recordConsentDecision;\n  const canRecord = context?.user !== null && context?.user !== undefined && recordConsentDecision !== undefined;\n\n  const grant = useCallback(\n    async (purposes: readonly ConsentPurpose[]): Promise<void> => {\n      if (recordConsentDecision === undefined) return;\n      // Offered and selected are the same set: the person agreed to exactly the purposes they were shown,\n      // and every purpose they did not see keeps its stored answer.\n      await recordConsentDecision(composeConsentDecision(granted, purposes, purposes));\n    },\n    [granted, recordConsentDecision],\n  );\n\n  return { granted, grant: canRecord ? grant : undefined };\n}\n"]}

package/dist/esm/core/security/useResolvedAuthConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useResolvedAuthConfig.d.ts","sourceRoot":"","sources":["../../../../../src/core/security/useResolvedAuthConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,KAAK,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,kBAAkB,EAElB,mBAAmB,EAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,UAAU,EAGV,gBAAgB,EAChB,4BAA4B,EAG7B,MAAM,uBAAuB,CAAC;AAqD/B,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,gBAAgB,CAAC;IACvB,cAAc,EAAE,UAAU,EAAE,CAAC;IAC7B,iCAAiC,EAAE,OAAO,CAAC;IAC3C,2BAA2B,EAAE,OAAO,CAAC;IACrC;;;;;;;;;;OAUG;IACH,0BAA0B,EAAE,wBAAwB,EAAE,CAAC;IACvD;;;;;OAKG;IACH,uBAAuB,EAAE,4BAA4B,CAAC;CACvD;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,UAAU,EAAE,4BAA4B,CAAC;IACzC,cAAc,EAAE,mBAAmB,CAAC;IACpC,kBAAkB,EAAE,0BAA0B,CAAC;CAChD;AAED,wBAAgB,qBAAqB,IAAI,kBAAkB,CA2D1D"}
+{"version":3,"file":"useResolvedAuthConfig.d.ts","sourceRoot":"","sources":["../../../../src/core/security/useResolvedAuthConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,KAAK,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,kBAAkB,EAElB,mBAAmB,EAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,UAAU,EAGV,gBAAgB,EAChB,4BAA4B,EAG7B,MAAM,uBAAuB,CAAC;AAqD/B,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,gBAAgB,CAAC;IACvB,cAAc,EAAE,UAAU,EAAE,CAAC;IAC7B,iCAAiC,EAAE,OAAO,CAAC;IAC3C,2BAA2B,EAAE,OAAO,CAAC;IACrC;;;;;;;;;;OAUG;IACH,0BAA0B,EAAE,wBAAwB,EAAE,CAAC;IACvD;;;;;OAKG;IACH,uBAAuB,EAAE,4BAA4B,CAAC;CACvD;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,UAAU,EAAE,4BAA4B,CAAC;IACzC,cAAc,EAAE,mBAAmB,CAAC;IACpC,kBAAkB,EAAE,0BAA0B,CAAC;CAChD;AAED,wBAAgB,qBAAqB,IAAI,kBAAkB,CA2D1D"}

package/dist/esm/core/security/useResolvedAuthConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"useResolvedAuthConfig.js","sourceRoot":"","sources":["../../../../../src/core/security/useResolvedAuthConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AASpD,OAAO,EAEL,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,4BAA4B,EAC5B,gCAAgC,EAChC,mCAAmC,GACpC,MAAM,uBAAuB,CAAC;AAE/B;;;;GAIG;AACH,SAAS,sCAAsC,CAC7C,mBAA2B,EAC3B,gBAAoD;IAEpD,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IACpE,IAAI,CAAC,qBAAqB,EAAE,eAAe;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,8CAA8C,CACrD,mBAA2B,EAC3B,sBAAqD,EACrD,gBAAoD;IAEpD,IAAI,CAAC,sBAAsB,EAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,eAAe,CAAC;IACrF,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,sBAAsB,EAAE,CAAC;QAC9C,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,uBAAuB,GAAwB;IACnD,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,GAAG;IACd,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,mBAAmB,EAAE,KAAK;IAC1B,UAAU,EAAE,CAAC;CACd,CAAC;AAoCF,MAAM,UAAU,qBAAqB;IACnC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,SAAS,CAAC,qBAAqB,EAAE,CAAC,mBAAmB,CAAC;IAElF,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,uBAAuB,GAAG,sCAAsC,CAAC,mBAAmB,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACxH,MAAM,qBAAqB,GAAG,8CAA8C,CAC1E,mBAAmB,EACnB,QAAQ,EAAE,IAAI,EAAE,SAAS,EACzB,SAAS,CAAC,gBAAgB,CAC3B,CAAC;QACF,MAAM,gBAAgB,GAAG,qBAAqB,IAAI,uBAAuB,CAAC;QAC1E,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,MAAM,YAAY,GAA8B,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC;QAE1E,MAAM,cAAc,GAAwB,YAAY,EAAE,cAAc,IAAI,uBAAuB,CAAC;QAEpG,MAAM,KAAK,GAAmC,YAAY,EAAE,YAAY,CAAC;QACzE,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,iCAAiC,GAAG,OAAO,CAC/C,gBAAgB;eACb,SAAS,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC;gBAClD,EAAE,eAAe,EAAE,CAAC,gBAAgB,CAAC,EAAE,QAAQ,KAAK,IAAI,CAC3D,CAAC;QAEF,MAAM,kBAAkB,GAA+B,kBAAkB,CAAC,OAAO;YAC/E,CAAC,CAAC;gBACE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI;gBAClC,cAAc,EAAE,kBAAkB,CAAC,IAAI,CAAC,cAAc;gBACtD,iCAAiC;gBACjC,2BAA2B,EACzB,iCAAiC;uBAC9B,gCAAgC,CACjC,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAC5B,8BAA8B,CAAC,mBAAmB,CACnD;gBACH,0BAA0B,EAAE,kBAAkB,CAAC,IAAI,CAAC,0BAA0B,IAAI,EAAE;gBACpF,uBAAuB,EAAE,mCAAmC,CAAC,kBAAkB,CAAC,IAAI,CAAC;aACtF;YACH,CAAC,CAAC;gBACE,qFAAqF;gBACrF,qFAAqF;gBACrF,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,cAAc,EAAE,EAAE;gBAClB,iCAAiC,EAAE,KAAK;gBACxC,2BAA2B,EAAE,KAAK;gBAClC,0BAA0B,EAAE,EAAE;gBAC9B,uBAAuB,EAAE,4BAA4B,CAAC,YAAY;aACnE,CAAC;QAEN,OAAO;YACL,gBAAgB;YAChB,YAAY;YACZ,UAAU;YACV,cAAc;YACd,kBAAkB;SACnB,CAAC;IACJ,CAAC,EAAE,CAAC,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["/**\n * W6.5: Resolves the effective auth config for the current frontend service.\n *\n * Resolution chain:\n * 1. If the user is authenticated, prefer their actual user type that is allowed on the\n *    current frontend service\n * 2. Otherwise use envLoader.frontendServiceName → frontendServices[frontendServiceName].usersManagement → default user type key\n * 3. userTypes[resolvedType].auth → per-user-type auth policy (UserTypeAuthPolicy)\n * 4. Falls back to hardcoded restrictive defaults when user type cannot be resolved\n *\n * Public social OAuth2 provider enumeration and passkeyConfig are global auth\n * concerns — always resolved from the shared auth payload.\n * Auth methods, MFA, registration, password policy come from the resolved user type.\n */\n\nimport { useContext, useMemo } from 'react';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { UserOrgsContext } from './UserOrgsContext';\nimport type {\n  OnboardingSurveyQuestion,\n  AppConfiguration_Shared_Auth,\n  UserTypeAuthPolicy,\n  FrontendServicesConfig,\n  PasswordPolicyRules,\n  RegistrationConfig,\n} from '@wildo-ai/saas-models';\nimport {\n  AuthMethod,\n  RegistrationAcquisitionChannel,\n  RegistrationConfigSchema,\n  RegistrationMode,\n  ProfileNamesCollectionMoment,\n  isRegistrationAcquisitionAllowed,\n  resolveProfileNamesCollectionMoment,\n} from '@wildo-ai/saas-models';\n\n/**\n * Resolves the default user type key from frontendServices config.\n * Mirrors backend AppConfigurationBackendService.resolveUserTypeFromFrontendServiceName():\n * isDefault entry first, then first entry.\n */\nfunction resolveUserTypeFromFrontendServiceName(\n  frontendServiceName: string,\n  frontendServices: FrontendServicesConfig | undefined,\n): string | null {\n  if (!frontendServices) return null;\n  const frontendServiceConfig = frontendServices[frontendServiceName];\n  if (!frontendServiceConfig?.usersManagement) return null;\n  const entries = Object.entries(frontendServiceConfig.usersManagement);\n  const defaultEntry = entries.find(([, v]) => v.isDefault);\n  const firstEntry = entries[0];\n  return (defaultEntry ?? firstEntry)?.[0] ?? null;\n}\n\nfunction resolveAuthenticatedUserTypeForFrontendService(\n  frontendServiceName: string,\n  authenticatedUserTypes: readonly string[] | undefined,\n  frontendServices: FrontendServicesConfig | undefined,\n): string | null {\n  if (!authenticatedUserTypes?.length || !frontendServices) {\n    return null;\n  }\n\n  const allowedUserManagement = frontendServices[frontendServiceName]?.usersManagement;\n  if (!allowedUserManagement) {\n    return null;\n  }\n\n  for (const userType of authenticatedUserTypes) {\n    if (allowedUserManagement[userType]) {\n      return userType;\n    }\n  }\n\n  return null;\n}\n\nconst DEFAULT_PASSWORD_POLICY: PasswordPolicyRules = {\n  minLength: 15,\n  maxLength: 128,\n  requireUppercase: false,\n  requireLowercase: false,\n  requireNumbers: false,\n  requireSpecialChars: false,\n  expiryDays: 0,\n};\n\nexport interface ResolvedRegistrationConfig {\n  mode: RegistrationMode;\n  allowedMethods: AuthMethod[];\n  frontendServiceAllowsRegistration: boolean;\n  publicRegistrationAvailable: boolean;\n  /**\n   * The extra profile questions this user type asks at sign-up (#1371).\n   *\n   * Exposed to the browser because the register form BUILDS ITS FIELDS from it — the one piece of\n   * registration policy the screen has to render rather than merely obey. Everything else on this\n   * projection is a yes/no the form consumes; this is a list it draws.\n   *\n   * Empty on the fail-closed branch, like `allowedMethods`: a boundary that could not be parsed\n   * must not be read as \"this user type asks nothing\", but a form that renders no extra fields is\n   * the safe shape either way — the SERVER refuses a required answer that never arrives.\n   */\n  additionalProfileQuestions: OnboardingSurveyQuestion[];\n  /**\n   * When the person's first and last name are asked (#1374). `ONBOARDING` removes them from the sign-up form —\n   * they are asked at the onboarding step once the address is proven. `REGISTRATION` on the fail-closed branch:\n   * a form that asks for names the server does not need is harmless (the server seeds them), while one that\n   * withholds names the server requires would be refused.\n   */\n  profileNamesCollectedAt: ProfileNamesCollectionMoment;\n}\n\nexport interface ResolvedAuthConfig {\n  resolvedUserType: string | null;\n  userTypeAuth: UserTypeAuthPolicy | null;\n  globalAuth: AppConfiguration_Shared_Auth;\n  passwordPolicy: PasswordPolicyRules;\n  registrationConfig: ResolvedRegistrationConfig;\n}\n\nexport function useResolvedAuthConfig(): ResolvedAuthConfig {\n  const { auth: globalAuth, appConfig } = useApplication();\n  const userOrgs = useContext(UserOrgsContext);\n  const frontendServiceName = envLoader.loadEnvironmentConfig().frontendServiceName;\n\n  return useMemo(() => {\n    const defaultFrontendUserType = resolveUserTypeFromFrontendServiceName(frontendServiceName, appConfig.frontendServices);\n    const authenticatedUserType = resolveAuthenticatedUserTypeForFrontendService(\n      frontendServiceName,\n      userOrgs?.user?.userTypes,\n      appConfig.frontendServices,\n    );\n    const resolvedUserType = authenticatedUserType ?? defaultFrontendUserType;\n    const userTypeDef = resolvedUserType ? appConfig.userTypes?.[resolvedUserType] : null;\n    const userTypeAuth: UserTypeAuthPolicy | null = userTypeDef?.auth ?? null;\n\n    const passwordPolicy: PasswordPolicyRules = userTypeAuth?.passwordPolicy ?? DEFAULT_PASSWORD_POLICY;\n\n    const utReg: RegistrationConfig | undefined = userTypeAuth?.registration;\n    const parsedRegistration = RegistrationConfigSchema.safeParse(utReg);\n    const frontendServiceAllowsRegistration = Boolean(\n      resolvedUserType\n      && appConfig.frontendServices?.[frontendServiceName]\n        ?.usersManagement?.[resolvedUserType]?.register === true,\n    );\n\n    const registrationConfig: ResolvedRegistrationConfig = parsedRegistration.success\n      ? {\n          mode: parsedRegistration.data.mode,\n          allowedMethods: parsedRegistration.data.allowedMethods,\n          frontendServiceAllowsRegistration,\n          publicRegistrationAvailable:\n            frontendServiceAllowsRegistration\n            && isRegistrationAcquisitionAllowed(\n              parsedRegistration.data.mode,\n              RegistrationAcquisitionChannel.PUBLIC_SELF_SERVICE,\n            ),\n          additionalProfileQuestions: parsedRegistration.data.additionalProfileQuestions ?? [],\n          profileNamesCollectedAt: resolveProfileNamesCollectionMoment(parsedRegistration.data),\n        }\n      : {\n          // No resolved or parseable leaf means the backend cannot authorize the same request.\n          // Mocked/stale/unparsed client boundaries fail closed without legacy interpretation.\n          mode: RegistrationMode.DISABLED,\n          allowedMethods: [],\n          frontendServiceAllowsRegistration: false,\n          publicRegistrationAvailable: false,\n          additionalProfileQuestions: [],\n          profileNamesCollectedAt: ProfileNamesCollectionMoment.REGISTRATION,\n        };\n\n    return {\n      resolvedUserType,\n      userTypeAuth,\n      globalAuth,\n      passwordPolicy,\n      registrationConfig,\n    };\n  }, [frontendServiceName, appConfig, globalAuth, userOrgs?.user?.userTypes]);\n}\n"]}
+{"version":3,"file":"useResolvedAuthConfig.js","sourceRoot":"","sources":["../../../../src/core/security/useResolvedAuthConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AASpD,OAAO,EAEL,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,4BAA4B,EAC5B,gCAAgC,EAChC,mCAAmC,GACpC,MAAM,uBAAuB,CAAC;AAE/B;;;;GAIG;AACH,SAAS,sCAAsC,CAC7C,mBAA2B,EAC3B,gBAAoD;IAEpD,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IACpE,IAAI,CAAC,qBAAqB,EAAE,eAAe;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,8CAA8C,CACrD,mBAA2B,EAC3B,sBAAqD,EACrD,gBAAoD;IAEpD,IAAI,CAAC,sBAAsB,EAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,eAAe,CAAC;IACrF,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,sBAAsB,EAAE,CAAC;QAC9C,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,uBAAuB,GAAwB;IACnD,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,GAAG;IACd,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,mBAAmB,EAAE,KAAK;IAC1B,UAAU,EAAE,CAAC;CACd,CAAC;AAoCF,MAAM,UAAU,qBAAqB;IACnC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,SAAS,CAAC,qBAAqB,EAAE,CAAC,mBAAmB,CAAC;IAElF,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,uBAAuB,GAAG,sCAAsC,CAAC,mBAAmB,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACxH,MAAM,qBAAqB,GAAG,8CAA8C,CAC1E,mBAAmB,EACnB,QAAQ,EAAE,IAAI,EAAE,SAAS,EACzB,SAAS,CAAC,gBAAgB,CAC3B,CAAC;QACF,MAAM,gBAAgB,GAAG,qBAAqB,IAAI,uBAAuB,CAAC;QAC1E,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,MAAM,YAAY,GAA8B,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC;QAE1E,MAAM,cAAc,GAAwB,YAAY,EAAE,cAAc,IAAI,uBAAuB,CAAC;QAEpG,MAAM,KAAK,GAAmC,YAAY,EAAE,YAAY,CAAC;QACzE,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,iCAAiC,GAAG,OAAO,CAC/C,gBAAgB;eACb,SAAS,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC;gBAClD,EAAE,eAAe,EAAE,CAAC,gBAAgB,CAAC,EAAE,QAAQ,KAAK,IAAI,CAC3D,CAAC;QAEF,MAAM,kBAAkB,GAA+B,kBAAkB,CAAC,OAAO;YAC/E,CAAC,CAAC;gBACE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI;gBAClC,cAAc,EAAE,kBAAkB,CAAC,IAAI,CAAC,cAAc;gBACtD,iCAAiC;gBACjC,2BAA2B,EACzB,iCAAiC;uBAC9B,gCAAgC,CACjC,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAC5B,8BAA8B,CAAC,mBAAmB,CACnD;gBACH,0BAA0B,EAAE,kBAAkB,CAAC,IAAI,CAAC,0BAA0B,IAAI,EAAE;gBACpF,uBAAuB,EAAE,mCAAmC,CAAC,kBAAkB,CAAC,IAAI,CAAC;aACtF;YACH,CAAC,CAAC;gBACE,qFAAqF;gBACrF,qFAAqF;gBACrF,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,cAAc,EAAE,EAAE;gBAClB,iCAAiC,EAAE,KAAK;gBACxC,2BAA2B,EAAE,KAAK;gBAClC,0BAA0B,EAAE,EAAE;gBAC9B,uBAAuB,EAAE,4BAA4B,CAAC,YAAY;aACnE,CAAC;QAEN,OAAO;YACL,gBAAgB;YAChB,YAAY;YACZ,UAAU;YACV,cAAc;YACd,kBAAkB;SACnB,CAAC;IACJ,CAAC,EAAE,CAAC,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["/**\n * W6.5: Resolves the effective auth config for the current frontend service.\n *\n * Resolution chain:\n * 1. If the user is authenticated, prefer their actual user type that is allowed on the\n *    current frontend service\n * 2. Otherwise use envLoader.frontendServiceName → frontendServices[frontendServiceName].usersManagement → default user type key\n * 3. userTypes[resolvedType].auth → per-user-type auth policy (UserTypeAuthPolicy)\n * 4. Falls back to hardcoded restrictive defaults when user type cannot be resolved\n *\n * Public social OAuth2 provider enumeration and passkeyConfig are global auth\n * concerns — always resolved from the shared auth payload.\n * Auth methods, MFA, registration, password policy come from the resolved user type.\n */\n\nimport { useContext, useMemo } from 'react';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { UserOrgsContext } from './UserOrgsContext';\nimport type {\n  OnboardingSurveyQuestion,\n  AppConfiguration_Shared_Auth,\n  UserTypeAuthPolicy,\n  FrontendServicesConfig,\n  PasswordPolicyRules,\n  RegistrationConfig,\n} from '@wildo-ai/saas-models';\nimport {\n  AuthMethod,\n  RegistrationAcquisitionChannel,\n  RegistrationConfigSchema,\n  RegistrationMode,\n  ProfileNamesCollectionMoment,\n  isRegistrationAcquisitionAllowed,\n  resolveProfileNamesCollectionMoment,\n} from '@wildo-ai/saas-models';\n\n/**\n * Resolves the default user type key from frontendServices config.\n * Mirrors backend AppConfigurationBackendService.resolveUserTypeFromFrontendServiceName():\n * isDefault entry first, then first entry.\n */\nfunction resolveUserTypeFromFrontendServiceName(\n  frontendServiceName: string,\n  frontendServices: FrontendServicesConfig | undefined,\n): string | null {\n  if (!frontendServices) return null;\n  const frontendServiceConfig = frontendServices[frontendServiceName];\n  if (!frontendServiceConfig?.usersManagement) return null;\n  const entries = Object.entries(frontendServiceConfig.usersManagement);\n  const defaultEntry = entries.find(([, v]) => v.isDefault);\n  const firstEntry = entries[0];\n  return (defaultEntry ?? firstEntry)?.[0] ?? null;\n}\n\nfunction resolveAuthenticatedUserTypeForFrontendService(\n  frontendServiceName: string,\n  authenticatedUserTypes: readonly string[] | undefined,\n  frontendServices: FrontendServicesConfig | undefined,\n): string | null {\n  if (!authenticatedUserTypes?.length || !frontendServices) {\n    return null;\n  }\n\n  const allowedUserManagement = frontendServices[frontendServiceName]?.usersManagement;\n  if (!allowedUserManagement) {\n    return null;\n  }\n\n  for (const userType of authenticatedUserTypes) {\n    if (allowedUserManagement[userType]) {\n      return userType;\n    }\n  }\n\n  return null;\n}\n\nconst DEFAULT_PASSWORD_POLICY: PasswordPolicyRules = {\n  minLength: 15,\n  maxLength: 128,\n  requireUppercase: false,\n  requireLowercase: false,\n  requireNumbers: false,\n  requireSpecialChars: false,\n  expiryDays: 0,\n};\n\nexport interface ResolvedRegistrationConfig {\n  mode: RegistrationMode;\n  allowedMethods: AuthMethod[];\n  frontendServiceAllowsRegistration: boolean;\n  publicRegistrationAvailable: boolean;\n  /**\n   * The extra profile questions this user type asks at sign-up (#1371).\n   *\n   * Exposed to the browser because the register form BUILDS ITS FIELDS from it — the one piece of\n   * registration policy the screen has to render rather than merely obey. Everything else on this\n   * projection is a yes/no the form consumes; this is a list it draws.\n   *\n   * Empty on the fail-closed branch, like `allowedMethods`: a boundary that could not be parsed\n   * must not be read as \"this user type asks nothing\", but a form that renders no extra fields is\n   * the safe shape either way — the SERVER refuses a required answer that never arrives.\n   */\n  additionalProfileQuestions: OnboardingSurveyQuestion[];\n  /**\n   * When the person's first and last name are asked (#1374). `ONBOARDING` removes them from the sign-up form —\n   * they are asked at the onboarding step once the address is proven. `REGISTRATION` on the fail-closed branch:\n   * a form that asks for names the server does not need is harmless (the server seeds them), while one that\n   * withholds names the server requires would be refused.\n   */\n  profileNamesCollectedAt: ProfileNamesCollectionMoment;\n}\n\nexport interface ResolvedAuthConfig {\n  resolvedUserType: string | null;\n  userTypeAuth: UserTypeAuthPolicy | null;\n  globalAuth: AppConfiguration_Shared_Auth;\n  passwordPolicy: PasswordPolicyRules;\n  registrationConfig: ResolvedRegistrationConfig;\n}\n\nexport function useResolvedAuthConfig(): ResolvedAuthConfig {\n  const { auth: globalAuth, appConfig } = useApplication();\n  const userOrgs = useContext(UserOrgsContext);\n  const frontendServiceName = envLoader.loadEnvironmentConfig().frontendServiceName;\n\n  return useMemo(() => {\n    const defaultFrontendUserType = resolveUserTypeFromFrontendServiceName(frontendServiceName, appConfig.frontendServices);\n    const authenticatedUserType = resolveAuthenticatedUserTypeForFrontendService(\n      frontendServiceName,\n      userOrgs?.user?.userTypes,\n      appConfig.frontendServices,\n    );\n    const resolvedUserType = authenticatedUserType ?? defaultFrontendUserType;\n    const userTypeDef = resolvedUserType ? appConfig.userTypes?.[resolvedUserType] : null;\n    const userTypeAuth: UserTypeAuthPolicy | null = userTypeDef?.auth ?? null;\n\n    const passwordPolicy: PasswordPolicyRules = userTypeAuth?.passwordPolicy ?? DEFAULT_PASSWORD_POLICY;\n\n    const utReg: RegistrationConfig | undefined = userTypeAuth?.registration;\n    const parsedRegistration = RegistrationConfigSchema.safeParse(utReg);\n    const frontendServiceAllowsRegistration = Boolean(\n      resolvedUserType\n      && appConfig.frontendServices?.[frontendServiceName]\n        ?.usersManagement?.[resolvedUserType]?.register === true,\n    );\n\n    const registrationConfig: ResolvedRegistrationConfig = parsedRegistration.success\n      ? {\n          mode: parsedRegistration.data.mode,\n          allowedMethods: parsedRegistration.data.allowedMethods,\n          frontendServiceAllowsRegistration,\n          publicRegistrationAvailable:\n            frontendServiceAllowsRegistration\n            && isRegistrationAcquisitionAllowed(\n              parsedRegistration.data.mode,\n              RegistrationAcquisitionChannel.PUBLIC_SELF_SERVICE,\n            ),\n          additionalProfileQuestions: parsedRegistration.data.additionalProfileQuestions ?? [],\n          profileNamesCollectedAt: resolveProfileNamesCollectionMoment(parsedRegistration.data),\n        }\n      : {\n          // No resolved or parseable leaf means the backend cannot authorize the same request.\n          // Mocked/stale/unparsed client boundaries fail closed without legacy interpretation.\n          mode: RegistrationMode.DISABLED,\n          allowedMethods: [],\n          frontendServiceAllowsRegistration: false,\n          publicRegistrationAvailable: false,\n          additionalProfileQuestions: [],\n          profileNamesCollectedAt: ProfileNamesCollectionMoment.REGISTRATION,\n        };\n\n    return {\n      resolvedUserType,\n      userTypeAuth,\n      globalAuth,\n      passwordPolicy,\n      registrationConfig,\n    };\n  }, [frontendServiceName, appConfig, globalAuth, userOrgs?.user?.userTypes]);\n}\n"]}

package/dist/esm/core/security/useRouteOrganizationAccess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useRouteOrganizationAccess.d.ts","sourceRoot":"","sources":["../../../../../src/core/security/useRouteOrganizationAccess.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,OAAO,EACL,uBAAuB,EAGxB,MAAM,4CAA4C,CAAC;AAOpD;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,uBAAuB,CA4FpE"}
+{"version":3,"file":"useRouteOrganizationAccess.d.ts","sourceRoot":"","sources":["../../../../src/core/security/useRouteOrganizationAccess.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,OAAO,EACL,uBAAuB,EAGxB,MAAM,4CAA4C,CAAC;AAOpD;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,uBAAuB,CA4FpE"}

package/dist/esm/core/security/useRouteOrganizationAccess.js.map

@@ -1 +1 @@
-{"version":3,"file":"useRouteOrganizationAccess.js","sourceRoot":"","sources":["../../../../../src/core/security/useRouteOrganizationAccess.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,mEAAmE,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,4CAA4C,CAAC;AAEpD,MAAM,MAAM,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAKxE;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,eAAe,GAAG,SAAS,EAA0B,CAAC;IAC5D,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,qGAAqG;IACrG,wGAAwG;IACxG,uGAAuG;IACvG,wFAAwF;IACxF,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IAErC,uGAAuG;IACvG,sFAAsF;IACtF,MAAM,0BAA0B,GAAG,QAAQ,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACnG,MAAM,2BAA2B,GAAG,0BAA0B,EAAE,uBAAuB,CAAC;IACxF,MAAM,mBAAmB,GAAG,2BAA2B,CAAC,CAAC,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnH,MAAM,cAAc,GAAG,QAAQ,EAAE,aAAa,IAAI,IAAI,CAAC;IACvD,kGAAkG;IAClG,qGAAqG;IACrG,4DAA4D;IAC5D,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW;WACxC,IAAI,CAAC,WAAW,KAAK,WAAW,CAAC,OAAO;WACxC,CAAC,IAAI,CAAC,kBAAkB;WACxB,IAAI,CAAC,eAAe;WACpB,CAAC,CAAC,IAAI;WACN,CAAC,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAEtD,MAAM,qBAAqB,GAAG,CAAC,CAAC,mBAAmB,IAAI,kBAAkB;WACpE,iCAAiC,CAAC,IAAI,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAEvF,MAAM,kBAAkB,GAAG,CAAC,CAAC,mBAAmB,IAAI,kBAAkB,IAAI,CAAC,qBAAqB,CAAC;IACjG,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAErF,wGAAwG;IACxG,wGAAwG;IACxG,uDAAuD;IACvD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAgD,EAAE,CAAC,CAAC;IACxG,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU,IAAI,aAAa,IAAI,CAAC,mBAAmB,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACzF,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,OAA4B,EAAQ,EAAE;YAC3D,iBAAiB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,2BAA2B,CAAC,0BAA0B,CAAC,CAAC;QAC9E,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,aAAa,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,cAAc,CAAC,OAAO,CACpB,kCAAkC,CAAC,kCAAkC,CAAC,aAAa,CAAC,EACpF,EAAE,oBAAoB,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,mBAAmB,EAAE,EAAE;QAChF,2GAA2G;QAC3G,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB;aACE,IAAI,CAAC,GAAG,EAAE;YACT,IAAI,CAAC,UAAU;gBAAE,aAAa,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,UAAU;gBAAE,OAAO;YACvB,6GAA6G;YAC7G,MAAM,OAAO,GAAG,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACtG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,oEAAoE,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;YACpI,CAAC;YACD,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAClG,CAAC,CAAC,CAAC;QAEL,OAAO,GAAG,EAAE;YACV,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAE9G,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,uBAAuB,CAAC,aAAa,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,uBAAuB,CAAC,WAAW,CAAC;IAC7C,CAAC;IACD,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO,uBAAuB,CAAC,iBAAiB,CAAC;IACnD,CAAC;IACD,OAAO,aAAa,IAAI,uBAAuB,CAAC,SAAS,CAAC;AAC5D,CAAC","sourcesContent":["/**\n * useRouteOrganizationAccess\n *\n * Decides whether the signed-in account may open the organization the current route addresses. See\n * {@link RouteOrganizationAccess} for why the route needs its own answer and why the server decides.\n */\n\nimport { useEffect, useRef, useState } from 'react';\nimport { useParams } from 'react-router-dom';\nimport { CoreResourceType, ResourcesConfig_OperationPathUtils, SessionType } from '@wildo-ai/saas-models';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { errorManagement } from '~wildo-frontend-lib/core/errors/error-management.frontend.service';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { useUserOrgs } from './useUserOrgs';\nimport {\n  RouteOrganizationAccess,\n  findDefaultApiReadOperation,\n  hasActiveMembershipInOrganization,\n} from './route-organization-access.frontend.utils';\n\nconst logger: LoggerFrontendService = LoggerFrontendService.getLogger();\n\n/** The verdicts only the server can give. */\ntype ServerAccessVerdict = RouteOrganizationAccess.ADMITTED | RouteOrganizationAccess.REFUSED | RouteOrganizationAccess.INCONCLUSIVE;\n\n/**\n * Must be called inside the authenticated route: it reads the matched route's params (a layout route\n * sees its child's params), the registry, the session and AppScope.\n */\nexport function useRouteOrganizationAccess(): RouteOrganizationAccess {\n  const routeParameters = useParams<Record<string, string>>();\n  const { registry, doOperation } = useResourceRegistry();\n  const { auth, user } = useUserOrgs();\n  const appScope = useAppScopeSafe();\n\n  // The scoped `doOperation` changes identity with every AppScope change, and AppScope commits while a\n  // session settles. Depending on it would cancel the in-flight probe and send another one, so the effect\n  // reads the latest function through a ref. Explicit `contextualParameters` still win over the injected\n  // scope, so the probe addresses the route's organization whichever function is current.\n  const doOperationRef = useRef(doOperation);\n  doOperationRef.current = doOperation;\n\n  // The segment name is the ORGANIZATIONS resource's own identifier field, read from the registry rather\n  // than spelled here, so the check follows the routes the registry actually generates.\n  const organizationsConfiguration = registry.resourceConfigurations[CoreResourceType.ORGANIZATIONS];\n  const organizationFieldIdentifier = organizationsConfiguration?.resourceFieldIdentifier;\n  const routeOrganizationId = organizationFieldIdentifier ? routeParameters[organizationFieldIdentifier] : undefined;\n\n  const tokenSubjectId = appScope?.currentUserId ?? null;\n  // A one-off session is not judged here. Its token is bound to one organization by the server, and\n  // `UserOrgsContext.loadOrganizations` already confines the session to it; a probe with that narrowed\n  // token could refuse the very page the link was issued for.\n  const sessionIsJudgeable = !!auth.accessToken\n    && auth.sessionType !== SessionType.ONE_OFF\n    && !auth.isRestoringSession\n    && auth.sessionRestored\n    && !!user\n    && (!tokenSubjectId || user._id === tokenSubjectId);\n\n  const knownActiveMembership = !!routeOrganizationId && sessionIsJudgeable\n    && hasActiveMembershipInOrganization(user?.organizationMembers, routeOrganizationId);\n\n  const needsServerVerdict = !!routeOrganizationId && sessionIsJudgeable && !knownActiveMembership;\n  const verdictKey = needsServerVerdict ? `${user?._id}:${routeOrganizationId}` : null;\n\n  // One verdict per (account, organization), kept for the layout's lifetime. Moving between organizations\n  // past the membership cap then asks once each, not on every visit. The account is part of the key, so a\n  // different account signing in is always asked afresh.\n  const [serverVerdicts, setServerVerdicts] = useState<Readonly<Record<string, ServerAccessVerdict>>>({});\n  const cachedVerdict = verdictKey ? serverVerdicts[verdictKey] : undefined;\n\n  useEffect(() => {\n    if (!verdictKey || cachedVerdict || !routeOrganizationId || !organizationFieldIdentifier) {\n      return;\n    }\n\n    const recordVerdict = (verdict: ServerAccessVerdict): void => {\n      setServerVerdicts((previous) => ({ ...previous, [verdictKey]: verdict }));\n    };\n\n    const readOperation = findDefaultApiReadOperation(organizationsConfiguration);\n    if (!readOperation) {\n      recordVerdict(RouteOrganizationAccess.INCONCLUSIVE);\n      return;\n    }\n\n    let superseded = false;\n    doOperationRef.current(\n      ResourcesConfig_OperationPathUtils.buildOperationPathKeyFromOperation(readOperation),\n      { contextualParameters: { [organizationFieldIdentifier]: routeOrganizationId } },\n      // Silent: the probe's refusal is answered by the redirect and its notice, never by the global error toast.\n      { silent: true },\n    )\n      .then(() => {\n        if (!superseded) recordVerdict(RouteOrganizationAccess.ADMITTED);\n      })\n      .catch((error: unknown) => {\n        if (superseded) return;\n        // A non-member's READ of another tenant's organization is a deliberate 404, not a 403, so both are refusals.\n        const refused = errorManagement.isAuthorizationError(error) || errorManagement.isNotFoundError(error);\n        if (!refused) {\n          logger.warn('Could not verify access to the organization addressed by the route', { organizationId: routeOrganizationId, error });\n        }\n        recordVerdict(refused ? RouteOrganizationAccess.REFUSED : RouteOrganizationAccess.INCONCLUSIVE);\n      });\n\n    return () => {\n      superseded = true;\n    };\n  }, [verdictKey, cachedVerdict, routeOrganizationId, organizationFieldIdentifier, organizationsConfiguration]);\n\n  if (!routeOrganizationId) {\n    return RouteOrganizationAccess.NOT_ADDRESSED;\n  }\n  if (!sessionIsJudgeable) {\n    return RouteOrganizationAccess.UNDECIDABLE;\n  }\n  if (knownActiveMembership) {\n    return RouteOrganizationAccess.ACTIVE_MEMBERSHIP;\n  }\n  return cachedVerdict ?? RouteOrganizationAccess.VERIFYING;\n}\n"]}
+{"version":3,"file":"useRouteOrganizationAccess.js","sourceRoot":"","sources":["../../../../src/core/security/useRouteOrganizationAccess.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,mEAAmE,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,4CAA4C,CAAC;AAEpD,MAAM,MAAM,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAKxE;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,eAAe,GAAG,SAAS,EAA0B,CAAC;IAC5D,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,qGAAqG;IACrG,wGAAwG;IACxG,uGAAuG;IACvG,wFAAwF;IACxF,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IAErC,uGAAuG;IACvG,sFAAsF;IACtF,MAAM,0BAA0B,GAAG,QAAQ,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACnG,MAAM,2BAA2B,GAAG,0BAA0B,EAAE,uBAAuB,CAAC;IACxF,MAAM,mBAAmB,GAAG,2BAA2B,CAAC,CAAC,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnH,MAAM,cAAc,GAAG,QAAQ,EAAE,aAAa,IAAI,IAAI,CAAC;IACvD,kGAAkG;IAClG,qGAAqG;IACrG,4DAA4D;IAC5D,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW;WACxC,IAAI,CAAC,WAAW,KAAK,WAAW,CAAC,OAAO;WACxC,CAAC,IAAI,CAAC,kBAAkB;WACxB,IAAI,CAAC,eAAe;WACpB,CAAC,CAAC,IAAI;WACN,CAAC,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAEtD,MAAM,qBAAqB,GAAG,CAAC,CAAC,mBAAmB,IAAI,kBAAkB;WACpE,iCAAiC,CAAC,IAAI,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAEvF,MAAM,kBAAkB,GAAG,CAAC,CAAC,mBAAmB,IAAI,kBAAkB,IAAI,CAAC,qBAAqB,CAAC;IACjG,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAErF,wGAAwG;IACxG,wGAAwG;IACxG,uDAAuD;IACvD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAgD,EAAE,CAAC,CAAC;IACxG,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU,IAAI,aAAa,IAAI,CAAC,mBAAmB,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACzF,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,OAA4B,EAAQ,EAAE;YAC3D,iBAAiB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,2BAA2B,CAAC,0BAA0B,CAAC,CAAC;QAC9E,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,aAAa,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,cAAc,CAAC,OAAO,CACpB,kCAAkC,CAAC,kCAAkC,CAAC,aAAa,CAAC,EACpF,EAAE,oBAAoB,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,mBAAmB,EAAE,EAAE;QAChF,2GAA2G;QAC3G,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB;aACE,IAAI,CAAC,GAAG,EAAE;YACT,IAAI,CAAC,UAAU;gBAAE,aAAa,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,UAAU;gBAAE,OAAO;YACvB,6GAA6G;YAC7G,MAAM,OAAO,GAAG,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACtG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,oEAAoE,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;YACpI,CAAC;YACD,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAClG,CAAC,CAAC,CAAC;QAEL,OAAO,GAAG,EAAE;YACV,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAE9G,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,uBAAuB,CAAC,aAAa,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,uBAAuB,CAAC,WAAW,CAAC;IAC7C,CAAC;IACD,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO,uBAAuB,CAAC,iBAAiB,CAAC;IACnD,CAAC;IACD,OAAO,aAAa,IAAI,uBAAuB,CAAC,SAAS,CAAC;AAC5D,CAAC","sourcesContent":["/**\n * useRouteOrganizationAccess\n *\n * Decides whether the signed-in account may open the organization the current route addresses. See\n * {@link RouteOrganizationAccess} for why the route needs its own answer and why the server decides.\n */\n\nimport { useEffect, useRef, useState } from 'react';\nimport { useParams } from 'react-router-dom';\nimport { CoreResourceType, ResourcesConfig_OperationPathUtils, SessionType } from '@wildo-ai/saas-models';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { errorManagement } from '~wildo-frontend-lib/core/errors/error-management.frontend.service';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { useUserOrgs } from './useUserOrgs';\nimport {\n  RouteOrganizationAccess,\n  findDefaultApiReadOperation,\n  hasActiveMembershipInOrganization,\n} from './route-organization-access.frontend.utils';\n\nconst logger: LoggerFrontendService = LoggerFrontendService.getLogger();\n\n/** The verdicts only the server can give. */\ntype ServerAccessVerdict = RouteOrganizationAccess.ADMITTED | RouteOrganizationAccess.REFUSED | RouteOrganizationAccess.INCONCLUSIVE;\n\n/**\n * Must be called inside the authenticated route: it reads the matched route's params (a layout route\n * sees its child's params), the registry, the session and AppScope.\n */\nexport function useRouteOrganizationAccess(): RouteOrganizationAccess {\n  const routeParameters = useParams<Record<string, string>>();\n  const { registry, doOperation } = useResourceRegistry();\n  const { auth, user } = useUserOrgs();\n  const appScope = useAppScopeSafe();\n\n  // The scoped `doOperation` changes identity with every AppScope change, and AppScope commits while a\n  // session settles. Depending on it would cancel the in-flight probe and send another one, so the effect\n  // reads the latest function through a ref. Explicit `contextualParameters` still win over the injected\n  // scope, so the probe addresses the route's organization whichever function is current.\n  const doOperationRef = useRef(doOperation);\n  doOperationRef.current = doOperation;\n\n  // The segment name is the ORGANIZATIONS resource's own identifier field, read from the registry rather\n  // than spelled here, so the check follows the routes the registry actually generates.\n  const organizationsConfiguration = registry.resourceConfigurations[CoreResourceType.ORGANIZATIONS];\n  const organizationFieldIdentifier = organizationsConfiguration?.resourceFieldIdentifier;\n  const routeOrganizationId = organizationFieldIdentifier ? routeParameters[organizationFieldIdentifier] : undefined;\n\n  const tokenSubjectId = appScope?.currentUserId ?? null;\n  // A one-off session is not judged here. Its token is bound to one organization by the server, and\n  // `UserOrgsContext.loadOrganizations` already confines the session to it; a probe with that narrowed\n  // token could refuse the very page the link was issued for.\n  const sessionIsJudgeable = !!auth.accessToken\n    && auth.sessionType !== SessionType.ONE_OFF\n    && !auth.isRestoringSession\n    && auth.sessionRestored\n    && !!user\n    && (!tokenSubjectId || user._id === tokenSubjectId);\n\n  const knownActiveMembership = !!routeOrganizationId && sessionIsJudgeable\n    && hasActiveMembershipInOrganization(user?.organizationMembers, routeOrganizationId);\n\n  const needsServerVerdict = !!routeOrganizationId && sessionIsJudgeable && !knownActiveMembership;\n  const verdictKey = needsServerVerdict ? `${user?._id}:${routeOrganizationId}` : null;\n\n  // One verdict per (account, organization), kept for the layout's lifetime. Moving between organizations\n  // past the membership cap then asks once each, not on every visit. The account is part of the key, so a\n  // different account signing in is always asked afresh.\n  const [serverVerdicts, setServerVerdicts] = useState<Readonly<Record<string, ServerAccessVerdict>>>({});\n  const cachedVerdict = verdictKey ? serverVerdicts[verdictKey] : undefined;\n\n  useEffect(() => {\n    if (!verdictKey || cachedVerdict || !routeOrganizationId || !organizationFieldIdentifier) {\n      return;\n    }\n\n    const recordVerdict = (verdict: ServerAccessVerdict): void => {\n      setServerVerdicts((previous) => ({ ...previous, [verdictKey]: verdict }));\n    };\n\n    const readOperation = findDefaultApiReadOperation(organizationsConfiguration);\n    if (!readOperation) {\n      recordVerdict(RouteOrganizationAccess.INCONCLUSIVE);\n      return;\n    }\n\n    let superseded = false;\n    doOperationRef.current(\n      ResourcesConfig_OperationPathUtils.buildOperationPathKeyFromOperation(readOperation),\n      { contextualParameters: { [organizationFieldIdentifier]: routeOrganizationId } },\n      // Silent: the probe's refusal is answered by the redirect and its notice, never by the global error toast.\n      { silent: true },\n    )\n      .then(() => {\n        if (!superseded) recordVerdict(RouteOrganizationAccess.ADMITTED);\n      })\n      .catch((error: unknown) => {\n        if (superseded) return;\n        // A non-member's READ of another tenant's organization is a deliberate 404, not a 403, so both are refusals.\n        const refused = errorManagement.isAuthorizationError(error) || errorManagement.isNotFoundError(error);\n        if (!refused) {\n          logger.warn('Could not verify access to the organization addressed by the route', { organizationId: routeOrganizationId, error });\n        }\n        recordVerdict(refused ? RouteOrganizationAccess.REFUSED : RouteOrganizationAccess.INCONCLUSIVE);\n      });\n\n    return () => {\n      superseded = true;\n    };\n  }, [verdictKey, cachedVerdict, routeOrganizationId, organizationFieldIdentifier, organizationsConfiguration]);\n\n  if (!routeOrganizationId) {\n    return RouteOrganizationAccess.NOT_ADDRESSED;\n  }\n  if (!sessionIsJudgeable) {\n    return RouteOrganizationAccess.UNDECIDABLE;\n  }\n  if (knownActiveMembership) {\n    return RouteOrganizationAccess.ACTIVE_MEMBERSHIP;\n  }\n  return cachedVerdict ?? RouteOrganizationAccess.VERIFYING;\n}\n"]}

package/dist/esm/core/security/useStepUpAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useStepUpAuth.d.ts","sourceRoot":"","sources":["../../../../../src/core/security/useStepUpAuth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAqB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEpF,eAAO,MAAM,aAAa,QAAO,qBAMhC,CAAC"}
+{"version":3,"file":"useStepUpAuth.d.ts","sourceRoot":"","sources":["../../../../src/core/security/useStepUpAuth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAqB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEpF,eAAO,MAAM,aAAa,QAAO,qBAMhC,CAAC"}

package/dist/esm/core/security/useStepUpAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"useStepUpAuth.js","sourceRoot":"","sources":["../../../../../src/core/security/useStepUpAuth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAA8B,MAAM,qBAAqB,CAAC;AAEpF,MAAM,CAAC,MAAM,aAAa,GAAG,GAA0B,EAAE;IACvD,MAAM,OAAO,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["/**\n * useStepUpAuth Hook\n * \n * Separated from StepUpAuthContext.tsx for React Fast Refresh compatibility.\n */\n\nimport { useContext } from 'react';\nimport { StepUpAuthContext, type StepUpAuthContextType } from './StepUpAuthContext';\n\nexport const useStepUpAuth = (): StepUpAuthContextType => {\n  const context = useContext(StepUpAuthContext);\n  if (!context) {\n    throw new Error('useStepUpAuth must be used within a StepUpAuthProvider');\n  }\n  return context;\n};\n"]}
+{"version":3,"file":"useStepUpAuth.js","sourceRoot":"","sources":["../../../../src/core/security/useStepUpAuth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAA8B,MAAM,qBAAqB,CAAC;AAEpF,MAAM,CAAC,MAAM,aAAa,GAAG,GAA0B,EAAE;IACvD,MAAM,OAAO,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["/**\n * useStepUpAuth Hook\n * \n * Separated from StepUpAuthContext.tsx for React Fast Refresh compatibility.\n */\n\nimport { useContext } from 'react';\nimport { StepUpAuthContext, type StepUpAuthContextType } from './StepUpAuthContext';\n\nexport const useStepUpAuth = (): StepUpAuthContextType => {\n  const context = useContext(StepUpAuthContext);\n  if (!context) {\n    throw new Error('useStepUpAuth must be used within a StepUpAuthProvider');\n  }\n  return context;\n};\n"]}

package/dist/esm/core/security/useUserOrgs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useUserOrgs.d.ts","sourceRoot":"","sources":["../../../../../src/core/security/useUserOrgs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAO,mBAM9B,CAAC"}
+{"version":3,"file":"useUserOrgs.d.ts","sourceRoot":"","sources":["../../../../src/core/security/useUserOrgs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAO,mBAM9B,CAAC"}

package/dist/esm/core/security/useUserOrgs.js.map

@@ -1 +1 @@
-{"version":3,"file":"useUserOrgs.js","sourceRoot":"","sources":["../../../../../src/core/security/useUserOrgs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,eAAe,EAA4B,MAAM,mBAAmB,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAwB,EAAE;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["/**\n * useUserOrgs Hook\n * \n * Separated from UserOrgsContext.tsx for React Fast Refresh compatibility.\n */\n\nimport { useContext } from 'react';\nimport { UserOrgsContext, type UserOrgsContextType } from './UserOrgsContext';\n\n/**\n * Hook to access the User Organizations context\n * @returns UserOrgsContextType with auth state and authentication functions\n * @throws Error if used outside of UserOrgsProvider\n */\nexport const useUserOrgs = (): UserOrgsContextType => {\n  const context = useContext(UserOrgsContext);\n  if (!context) {\n    throw new Error('useUserOrgs must be used within a UserOrgsProvider');\n  }\n  return context;\n};\n\n\n\n"]}
+{"version":3,"file":"useUserOrgs.js","sourceRoot":"","sources":["../../../../src/core/security/useUserOrgs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,eAAe,EAA4B,MAAM,mBAAmB,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAwB,EAAE;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["/**\n * useUserOrgs Hook\n * \n * Separated from UserOrgsContext.tsx for React Fast Refresh compatibility.\n */\n\nimport { useContext } from 'react';\nimport { UserOrgsContext, type UserOrgsContextType } from './UserOrgsContext';\n\n/**\n * Hook to access the User Organizations context\n * @returns UserOrgsContextType with auth state and authentication functions\n * @throws Error if used outside of UserOrgsProvider\n */\nexport const useUserOrgs = (): UserOrgsContextType => {\n  const context = useContext(UserOrgsContext);\n  if (!context) {\n    throw new Error('useUserOrgs must be used within a UserOrgsProvider');\n  }\n  return context;\n};\n\n\n\n"]}

package/dist/esm/core/ui/SurfaceErrorBoundary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SurfaceErrorBoundary.d.ts","sourceRoot":"","sources":["../../../../../src/core/ui/SurfaceErrorBoundary.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAqB,MAAM,OAAO,CAAC;AAY1C,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,UAAU,yBAAyB;IACjC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;CACnC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,SAAQ,KAAK,CAAC,SAAS,CAAC,yBAAyB,EAAE,yBAAyB,CAAC;IAC7G,KAAK,EAAE,yBAAyB,CAG9B;IAEF,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAIjF,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,IAAI;IAKjE,OAAO,CAAC,UAAU,CAEhB;IAEF,MAAM,IAAI,KAAK,CAAC,SAAS;CAO1B"}
+{"version":3,"file":"SurfaceErrorBoundary.d.ts","sourceRoot":"","sources":["../../../../src/core/ui/SurfaceErrorBoundary.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAqB,MAAM,OAAO,CAAC;AAY1C,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,UAAU,yBAAyB;IACjC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;CACnC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,SAAQ,KAAK,CAAC,SAAS,CAAC,yBAAyB,EAAE,yBAAyB,CAAC;IAC7G,KAAK,EAAE,yBAAyB,CAG9B;IAEF,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAIjF,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,IAAI;IAKjE,OAAO,CAAC,UAAU,CAEhB;IAEF,MAAM,IAAI,KAAK,CAAC,SAAS;CAO1B"}

package/dist/esm/core/ui/SurfaceErrorBoundary.js.map

@@ -1 +1 @@
-{"version":3,"file":"SurfaceErrorBoundary.js","sourceRoot":"","sources":["../../../../../src/core/ui/SurfaceErrorBoundary.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,YAAY,EAA4B,MAAM,uDAAuD,CAAC;AAC/G,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAElG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAEjD,MAAM,sBAAsB,GAAG,qBAAqB,CAAC,kCAAkC,CAAC;AAWxF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK,CAAC,SAA+D;IAC7G,KAAK,GAA8B;QACjC,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;KAChB,CAAC;IAEF,MAAM,CAAC,wBAAwB,CAAC,KAAY;QAC1C,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,iBAAiB,CAAC,KAAY,EAAE,SAA0B;QACxD,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IAEO,UAAU,GAAG,GAAS,EAAE;QAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM;QACJ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,CAAC;QAED,OAAO,KAAC,oBAAoB,IAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,GAAI,CAAC;IACtH,CAAC;CACF;AAQD;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,KAAgC;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAC,wBAAwB,OAAK,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,sBAAsB,IAAI,GAAG,EAAE,GAAI,CAAC;IAChH,CAAC;IACD,OAAO,KAAC,6BAA6B,OAAK,KAAK,GAAI,CAAC;AACtD,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAgC;IACrE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,KAAC,wBAAwB,OAAK,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,sBAAsB,CAAC,GAAI,CAAC;AACjG,CAAC;AAED,SAAS,wBAAwB,CAAC,EAChC,KAAK,EACL,SAAS,EACT,OAAO,EACP,KAAK,GAC0D;IAC/D,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;IAChD,MAAM,eAAe,GAA0B,EAAE,CAAC;IAClD,IAAI,aAAa,EAAE,CAAC;QAClB,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACtG,IAAI,SAAS,EAAE,cAAc,EAAE,CAAC;YAC9B,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;IAED,OAAO,CACL,KAAC,YAAY,IACX,OAAO,EAAC,OAAO,EACf,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EACrB,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EACzB,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;gBACxB,OAAO,EAAE,OAAO;gBAChB,OAAO,EAAE,SAAS;aACnB;SACF,EACD,WAAW,EAAE,aAAa,EAC1B,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,EACnC,eAAe,EAAE,eAAe,GAChC,CACH,CAAC;AACJ,CAAC","sourcesContent":["import React, { useContext } from 'react';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { ErrorDisplay, type ErrorDisplayDevInfo } from '~wildo-frontend-lib/components/feedback/error-display';\nimport { I18nContext } from '~wildo-frontend-lib/core/i18n/I18nContext';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\n\nconst logger = LoggerFrontendService.getLogger();\n\nconst SURFACE_ERROR_BOUNDARY = FrontendComponentType.APP_LAYOUTS_SURFACE_ERROR_BOUNDARY;\n\nexport interface SurfaceErrorBoundaryProps {\n  children: React.ReactNode;\n}\n\ninterface SurfaceErrorBoundaryState {\n  error: Error | null;\n  errorInfo: React.ErrorInfo | null;\n}\n\n/**\n * Surface-scoped crash isolation for `policy.interactiveState.errorBoundary`.\n *\n * This boundary intentionally avoids router/navigation recovery assumptions:\n * a surface can be rendered inside dialogs, menus, sidebars, or tests where\n * route-level recovery is not available. Route/app boundaries remain\n * responsible for full-page recovery.\n *\n * The fallback's words are labels of `APP_LAYOUTS_SURFACE_ERROR_BOUNDARY`. The crash's own message is\n * developer text, so it appears only in development diagnostics, never as what a person reads.\n */\nexport class SurfaceErrorBoundary extends React.Component<SurfaceErrorBoundaryProps, SurfaceErrorBoundaryState> {\n  state: SurfaceErrorBoundaryState = {\n    error: null,\n    errorInfo: null,\n  };\n\n  static getDerivedStateFromError(error: Error): Partial<SurfaceErrorBoundaryState> {\n    return { error };\n  }\n\n  componentDidCatch(error: Error, errorInfo: React.ErrorInfo): void {\n    logger.error('[SurfaceErrorBoundary] Surface child crashed', { error, errorInfo });\n    this.setState({ error, errorInfo });\n  }\n\n  private resetError = (): void => {\n    this.setState({ error: null, errorInfo: null });\n  };\n\n  render(): React.ReactNode {\n    if (!this.state.error) {\n      return this.props.children;\n    }\n\n    return <SurfaceErrorFallback error={this.state.error} errorInfo={this.state.errorInfo} onRetry={this.resetError} />;\n  }\n}\n\ninterface SurfaceErrorFallbackProps {\n  error: Error;\n  errorInfo: React.ErrorInfo | null;\n  onRetry: () => void;\n}\n\n/**\n * Words come from the i18n tree when a provider is mounted. A surface can also render where none is (an\n * isolated test, a tree mounted outside the application); there each label renders as its key, so the\n * missing words look missing instead of being replaced by invented English. Choosing a COMPONENT here,\n * rather than calling `useI18n` conditionally, keeps the hook order fixed.\n */\nfunction SurfaceErrorFallback(props: SurfaceErrorFallbackProps): React.JSX.Element | null {\n  const i18n = useContext(I18nContext);\n  if (!i18n) {\n    return <SurfaceErrorFallbackView {...props} label={(ref) => `components.${SURFACE_ERROR_BOUNDARY}.${ref}`} />;\n  }\n  return <LocalizedSurfaceErrorFallback {...props} />;\n}\n\nfunction LocalizedSurfaceErrorFallback(props: SurfaceErrorFallbackProps): React.JSX.Element | null {\n  const { makeTrComponent, isReady } = useI18n({ component: SURFACE_ERROR_BOUNDARY });\n  if (!isReady) return null;\n  return <SurfaceErrorFallbackView {...props} label={makeTrComponent(SURFACE_ERROR_BOUNDARY)} />;\n}\n\nfunction SurfaceErrorFallbackView({\n  error,\n  errorInfo,\n  onRetry,\n  label,\n}: SurfaceErrorFallbackProps & { label: (ref: string) => string }): React.JSX.Element {\n  const isDevelopment = envLoader.isDevelopment();\n  const devInfoSections: ErrorDisplayDevInfo[] = [];\n  if (isDevelopment) {\n    devInfoSections.push({ label: label('errorMessageLabel'), content: error.message, variant: 'error' });\n    if (errorInfo?.componentStack) {\n      devInfoSections.push({ label: label('componentStackLabel'), content: errorInfo.componentStack, variant: 'info' });\n    }\n  }\n\n  return (\n    <ErrorDisplay\n      variant=\"error\"\n      title={label('title')}\n      message={label('message')}\n      actions={[\n        {\n          label: label('tryAgain'),\n          onClick: onRetry,\n          variant: 'primary',\n        },\n      ]}\n      showDevInfo={isDevelopment}\n      devInfoTitle={label('devInfoTitle')}\n      devInfoSections={devInfoSections}\n    />\n  );\n}\n"]}
+{"version":3,"file":"SurfaceErrorBoundary.js","sourceRoot":"","sources":["../../../../src/core/ui/SurfaceErrorBoundary.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,YAAY,EAA4B,MAAM,uDAAuD,CAAC;AAC/G,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAElG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAEjD,MAAM,sBAAsB,GAAG,qBAAqB,CAAC,kCAAkC,CAAC;AAWxF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK,CAAC,SAA+D;IAC7G,KAAK,GAA8B;QACjC,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;KAChB,CAAC;IAEF,MAAM,CAAC,wBAAwB,CAAC,KAAY;QAC1C,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,iBAAiB,CAAC,KAAY,EAAE,SAA0B;QACxD,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IAEO,UAAU,GAAG,GAAS,EAAE;QAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM;QACJ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,CAAC;QAED,OAAO,KAAC,oBAAoB,IAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,GAAI,CAAC;IACtH,CAAC;CACF;AAQD;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,KAAgC;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAC,wBAAwB,OAAK,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,sBAAsB,IAAI,GAAG,EAAE,GAAI,CAAC;IAChH,CAAC;IACD,OAAO,KAAC,6BAA6B,OAAK,KAAK,GAAI,CAAC;AACtD,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAgC;IACrE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,KAAC,wBAAwB,OAAK,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,sBAAsB,CAAC,GAAI,CAAC;AACjG,CAAC;AAED,SAAS,wBAAwB,CAAC,EAChC,KAAK,EACL,SAAS,EACT,OAAO,EACP,KAAK,GAC0D;IAC/D,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;IAChD,MAAM,eAAe,GAA0B,EAAE,CAAC;IAClD,IAAI,aAAa,EAAE,CAAC;QAClB,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACtG,IAAI,SAAS,EAAE,cAAc,EAAE,CAAC;YAC9B,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;IAED,OAAO,CACL,KAAC,YAAY,IACX,OAAO,EAAC,OAAO,EACf,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EACrB,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EACzB,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;gBACxB,OAAO,EAAE,OAAO;gBAChB,OAAO,EAAE,SAAS;aACnB;SACF,EACD,WAAW,EAAE,aAAa,EAC1B,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,EACnC,eAAe,EAAE,eAAe,GAChC,CACH,CAAC;AACJ,CAAC","sourcesContent":["import React, { useContext } from 'react';\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { ErrorDisplay, type ErrorDisplayDevInfo } from '~wildo-frontend-lib/components/feedback/error-display';\nimport { I18nContext } from '~wildo-frontend-lib/core/i18n/I18nContext';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\n\nconst logger = LoggerFrontendService.getLogger();\n\nconst SURFACE_ERROR_BOUNDARY = FrontendComponentType.APP_LAYOUTS_SURFACE_ERROR_BOUNDARY;\n\nexport interface SurfaceErrorBoundaryProps {\n  children: React.ReactNode;\n}\n\ninterface SurfaceErrorBoundaryState {\n  error: Error | null;\n  errorInfo: React.ErrorInfo | null;\n}\n\n/**\n * Surface-scoped crash isolation for `policy.interactiveState.errorBoundary`.\n *\n * This boundary intentionally avoids router/navigation recovery assumptions:\n * a surface can be rendered inside dialogs, menus, sidebars, or tests where\n * route-level recovery is not available. Route/app boundaries remain\n * responsible for full-page recovery.\n *\n * The fallback's words are labels of `APP_LAYOUTS_SURFACE_ERROR_BOUNDARY`. The crash's own message is\n * developer text, so it appears only in development diagnostics, never as what a person reads.\n */\nexport class SurfaceErrorBoundary extends React.Component<SurfaceErrorBoundaryProps, SurfaceErrorBoundaryState> {\n  state: SurfaceErrorBoundaryState = {\n    error: null,\n    errorInfo: null,\n  };\n\n  static getDerivedStateFromError(error: Error): Partial<SurfaceErrorBoundaryState> {\n    return { error };\n  }\n\n  componentDidCatch(error: Error, errorInfo: React.ErrorInfo): void {\n    logger.error('[SurfaceErrorBoundary] Surface child crashed', { error, errorInfo });\n    this.setState({ error, errorInfo });\n  }\n\n  private resetError = (): void => {\n    this.setState({ error: null, errorInfo: null });\n  };\n\n  render(): React.ReactNode {\n    if (!this.state.error) {\n      return this.props.children;\n    }\n\n    return <SurfaceErrorFallback error={this.state.error} errorInfo={this.state.errorInfo} onRetry={this.resetError} />;\n  }\n}\n\ninterface SurfaceErrorFallbackProps {\n  error: Error;\n  errorInfo: React.ErrorInfo | null;\n  onRetry: () => void;\n}\n\n/**\n * Words come from the i18n tree when a provider is mounted. A surface can also render where none is (an\n * isolated test, a tree mounted outside the application); there each label renders as its key, so the\n * missing words look missing instead of being replaced by invented English. Choosing a COMPONENT here,\n * rather than calling `useI18n` conditionally, keeps the hook order fixed.\n */\nfunction SurfaceErrorFallback(props: SurfaceErrorFallbackProps): React.JSX.Element | null {\n  const i18n = useContext(I18nContext);\n  if (!i18n) {\n    return <SurfaceErrorFallbackView {...props} label={(ref) => `components.${SURFACE_ERROR_BOUNDARY}.${ref}`} />;\n  }\n  return <LocalizedSurfaceErrorFallback {...props} />;\n}\n\nfunction LocalizedSurfaceErrorFallback(props: SurfaceErrorFallbackProps): React.JSX.Element | null {\n  const { makeTrComponent, isReady } = useI18n({ component: SURFACE_ERROR_BOUNDARY });\n  if (!isReady) return null;\n  return <SurfaceErrorFallbackView {...props} label={makeTrComponent(SURFACE_ERROR_BOUNDARY)} />;\n}\n\nfunction SurfaceErrorFallbackView({\n  error,\n  errorInfo,\n  onRetry,\n  label,\n}: SurfaceErrorFallbackProps & { label: (ref: string) => string }): React.JSX.Element {\n  const isDevelopment = envLoader.isDevelopment();\n  const devInfoSections: ErrorDisplayDevInfo[] = [];\n  if (isDevelopment) {\n    devInfoSections.push({ label: label('errorMessageLabel'), content: error.message, variant: 'error' });\n    if (errorInfo?.componentStack) {\n      devInfoSections.push({ label: label('componentStackLabel'), content: errorInfo.componentStack, variant: 'info' });\n    }\n  }\n\n  return (\n    <ErrorDisplay\n      variant=\"error\"\n      title={label('title')}\n      message={label('message')}\n      actions={[\n        {\n          label: label('tryAgain'),\n          onClick: onRetry,\n          variant: 'primary',\n        },\n      ]}\n      showDevInfo={isDevelopment}\n      devInfoTitle={label('devInfoTitle')}\n      devInfoSections={devInfoSections}\n    />\n  );\n}\n"]}

package/dist/esm/core/ui/SurfaceErrorBoundary.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SurfaceErrorBoundary.labels.d.ts","sourceRoot":"","sources":["../../../../../src/core/ui/SurfaceErrorBoundary.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM1I,eAAO,MAAM,oCAAoC,EAAE,mBAAmB,EAOrE,CAAC"}
+{"version":3,"file":"SurfaceErrorBoundary.labels.d.ts","sourceRoot":"","sources":["../../../../src/core/ui/SurfaceErrorBoundary.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM1I,eAAO,MAAM,oCAAoC,EAAE,mBAAmB,EAOrE,CAAC"}

package/dist/esm/core/ui/SurfaceErrorBoundary.labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"SurfaceErrorBoundary.labels.js","sourceRoot":"","sources":["../../../../../src/core/ui/SurfaceErrorBoundary.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE1I,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAE/E,MAAM,CAAC,MAAM,oCAAoC,GAA0B;IACzE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qIAAqI,EAAE;IACzL,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6GAA6G,EAAE;IACnK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,kEAAkE,EAAE;IACxH,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kFAAkF,EAAE;IAC7I,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qEAAqE,EAAE;IACnI,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sEAAsE,EAAE;CACvI,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,oCAAoC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + (where\n// authored) per-key purpose / kind / variable meaning. Statically scanned by\n// the dev companion; NOT imported at runtime, so it never ships in the bundle.\n\nexport const AppLayoutsSurfaceErrorBoundaryLabels: LabellingUnitaryDef[] = [\n  { ref: 'title', kind: LabelKind.HEADING, purpose: 'Heading shown in place of one part of a screen (a panel, dialog or menu) that failed to display; the rest of the screen still works' },\n  { ref: 'message', kind: LabelKind.MESSAGE, purpose: 'Short reassuring text explaining that this part of the screen could not be displayed and can be tried again' },\n  { ref: 'tryAgain', kind: LabelKind.BUTTON, purpose: 'Action that tries to display the failed part of the screen again' },\n  { ref: 'devInfoTitle', kind: LabelKind.HEADING, purpose: 'Heading for the developer-only diagnostics of the part of the screen that failed' },\n  { ref: 'errorMessageLabel', kind: LabelKind.LABEL, purpose: 'Caption preceding the caught error message in developer diagnostics' },\n  { ref: 'componentStackLabel', kind: LabelKind.LABEL, purpose: 'Caption preceding the React component stack in developer diagnostics' },\n];\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_SURFACE_ERROR_BOUNDARY, AppLayoutsSurfaceErrorBoundaryLabels);\n"]}
+{"version":3,"file":"SurfaceErrorBoundary.labels.js","sourceRoot":"","sources":["../../../../src/core/ui/SurfaceErrorBoundary.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE1I,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAE/E,MAAM,CAAC,MAAM,oCAAoC,GAA0B;IACzE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qIAAqI,EAAE;IACzL,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6GAA6G,EAAE;IACnK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,kEAAkE,EAAE;IACxH,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kFAAkF,EAAE;IAC7I,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qEAAqE,EAAE;IACnI,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sEAAsE,EAAE;CACvI,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,oCAAoC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + (where\n// authored) per-key purpose / kind / variable meaning. Statically scanned by\n// the dev companion; NOT imported at runtime, so it never ships in the bundle.\n\nexport const AppLayoutsSurfaceErrorBoundaryLabels: LabellingUnitaryDef[] = [\n  { ref: 'title', kind: LabelKind.HEADING, purpose: 'Heading shown in place of one part of a screen (a panel, dialog or menu) that failed to display; the rest of the screen still works' },\n  { ref: 'message', kind: LabelKind.MESSAGE, purpose: 'Short reassuring text explaining that this part of the screen could not be displayed and can be tried again' },\n  { ref: 'tryAgain', kind: LabelKind.BUTTON, purpose: 'Action that tries to display the failed part of the screen again' },\n  { ref: 'devInfoTitle', kind: LabelKind.HEADING, purpose: 'Heading for the developer-only diagnostics of the part of the screen that failed' },\n  { ref: 'errorMessageLabel', kind: LabelKind.LABEL, purpose: 'Caption preceding the caught error message in developer diagnostics' },\n  { ref: 'componentStackLabel', kind: LabelKind.LABEL, purpose: 'Caption preceding the React component stack in developer diagnostics' },\n];\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_SURFACE_ERROR_BOUNDARY, AppLayoutsSurfaceErrorBoundaryLabels);\n"]}

package/dist/esm/core/ui/SurfacePolicyContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SurfacePolicyContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/ui/SurfacePolicyContext.tsx"],"names":[],"mappings":"AACA,OAAO,EAEL,cAAc,EACd,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EACnB,MAAM,qCAAqC,CAAC;AAK7C,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;;OAMG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAC5B,+EAA+E;IAC/E,eAAe,EAAE,OAAO,CAAC;IACzB,4BAA4B,EAAE,cAAc,GAAG,IAAI,CAAC;IACpD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACrD,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACxD;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACnE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACrE;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B;AAED,eAAO,MAAM,oBAAoB,oDAAwD,CAAC;AAmO1F;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,gBAAgB,EAAE,aAAa,EAC/B,YAAY,EAAE,wBAAwB,GAAG,SAAS,EAClD,iBAAiB,EAAE,wBAAwB,GAAG,SAAS,EACvD,gBAAgB,EAAE,wBAAwB,GAAG,SAAS,EACtD,OAAO,EAAE,yBAAyB,GACjC,aAAa,CAwBf;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,yBAAyB,GAAG,IAAI,EAC/C,kBAAkB,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,GAAG,kBAAkB,GAAG,oBAAoB,CAAC,GAC3G,yBAAyB,CAiB3B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,cAAoC,GAAG,aAAa,CAE1F;AAED,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,IAAI,CAEzD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C"}
+{"version":3,"file":"SurfacePolicyContext.d.ts","sourceRoot":"","sources":["../../../../src/core/ui/SurfacePolicyContext.tsx"],"names":[],"mappings":"AACA,OAAO,EAEL,cAAc,EACd,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EACnB,MAAM,qCAAqC,CAAC;AAK7C,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;;OAMG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAC5B,+EAA+E;IAC/E,eAAe,EAAE,OAAO,CAAC;IACzB,4BAA4B,EAAE,cAAc,GAAG,IAAI,CAAC;IACpD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACrD,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACxD;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACnE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACrE;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B;AAED,eAAO,MAAM,oBAAoB,oDAAwD,CAAC;AAmO1F;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,gBAAgB,EAAE,aAAa,EAC/B,YAAY,EAAE,wBAAwB,GAAG,SAAS,EAClD,iBAAiB,EAAE,wBAAwB,GAAG,SAAS,EACvD,gBAAgB,EAAE,wBAAwB,GAAG,SAAS,EACtD,OAAO,EAAE,yBAAyB,GACjC,aAAa,CAwBf;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,yBAAyB,GAAG,IAAI,EAC/C,kBAAkB,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,GAAG,kBAAkB,GAAG,oBAAoB,CAAC,GAC3G,yBAAyB,CAiB3B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,cAAoC,GAAG,aAAa,CAE1F;AAED,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,IAAI,CAEzD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C"}

package/dist/esm/core/ui/SurfacePolicyContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"SurfacePolicyContext.js","sourceRoot":"","sources":["../../../../../src/core/ui/SurfacePolicyContext.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAClD,OAAO,EACL,kCAAkC,EAClC,cAAc,GAGf,MAAM,qCAAqC,CAAC;AAmC7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAmC,IAAI,CAAC,CAAC;AAE1F,MAAM,uBAAuB,GAAmC;IAC9D,aAAa;IACb,SAAS;IACT,SAAS;IACT,YAAY;IACZ,kBAAkB;IAClB,MAAM;IACN,UAAU;IACV,UAAU;IACV,UAAU;IACV,aAAa;CACd,CAAC;AAEF,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,wBAAwB;IACxB,sBAAsB;IACtB,0BAA0B;IAC1B,+BAA+B;IAC/B,4BAA4B;IAC5B,6BAA6B;IAC7B,+BAA+B;IAC/B,iCAAiC;IACjC,gCAAgC;IAChC,0BAA0B;IAC1B,2BAA2B;IAC3B,0BAA0B;IAC1B,kCAAkC;CACnC,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAAU,CAAC;AACrD,MAAM,4BAA4B,GAAG,IAAI,GAAG,EAAU,CAAC;AACvD,MAAM,SAAS,GAAG,IAAI,OAAO,EAAkB,CAAC;AAChD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;AACpD,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,EAAE,GAAG,YAAY,CAAC;QAClB,YAAY,IAAI,CAAC,CAAC;QAClB,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,IAAI,EAAE,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAuB,EACvB,gBAA+B,EAC/B,YAAkD,EAClD,iBAAuD,EACvD,gBAAsD,EACtD,YAAuC;IAEvC,OAAO;QACL,OAAO;QACP,UAAU,CAAC,gBAAgB,CAAC;QAC5B,UAAU,CAAC,YAAY,CAAC;QACxB,UAAU,CAAC,iBAAiB,CAAC;QAC7B,UAAU,CAAC,gBAAgB,CAAC;QAC5B,UAAU,CAAC,YAAY,CAAC;KACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAmB,EACnB,QAA8C;IAE9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,GAAG,IAAI,EAAE,CAAC;IAE1C,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC,GAAG;gBACf,GAAG,IAAI,CAAC,MAAM,CAAC;gBACf,GAAG,cAAc;gBACjB,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,SAAS,IAAI,cAAc;oBACzD,CAAC,CAAC,uBAAuB,CAAC,IAAI,EAAE,cAAc,CAAC;oBAC/C,CAAC,CAAC,EAAE,CAAC;aACwB,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAAmB,EACnB,cAAoE;IAEpE,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChC,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO;YAC5B,GAAG,cAAc,CAAC,OAAO;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CAAC,MAA2B,EAAE,IAAuB;IAC3F,OAAO,0BAA0B,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,4BAA4B,CACnC,MAAqB,EACrB,gBAA+B,EAC/B,OAAkC;IAElC,MAAM,QAAQ,GAAkB,EAAE,GAAG,MAAM,EAAE,CAAC;IAE9C,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QAED,MAAM,cAAc,GAAG,EAAE,GAAG,YAAY,EAA6B,CAAC;QACtE,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAwC,CAAC;QACxF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,CAAwC,CAAC;QAE3F,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAuC,CAAC,EAAE,CAAC;YACpF,IAAI,MAAM,KAAK,aAAa,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC;gBAC/D,MAAM,eAAe,GAAG,EAAE,GAAI,KAAiC,EAAE,CAAC;gBAElE,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;oBACpE,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;wBAC1B,SAAS;oBACX,CAAC;oBAED,MAAM,UAAU,GAAG,QAAmF,CAAC;oBACvG,MAAM,cAAc,GAAG,gBAAgB,EAAE,CAAC,UAAU,CAAC,CAAC;oBACtD,eAAe,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC;oBAE3C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;wBACjC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;wBAC/D,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC3C,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;4BACtC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,kEAAkE,EAAE;gCACxF,OAAO,EAAE,OAAO,CAAC,OAAO;gCACxB,MAAM;gCACN,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE;6BAC5B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,cAAc,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;gBACvC,SAAS;YACX,CAAC;YAED,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBACtB,MAAM,cAAc,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC/C,cAAc,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;gBAEtC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC3C,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACtC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,kEAAkE,EAAE;4BACxF,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,MAAM;4BACN,IAAI;yBACL,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,KAAK,KAAK,SAAS,IAAI,+BAA+B,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBACzE,MAAM,WAAW,GAAG,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,cAAc,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;oBACnC,SAAS;gBACX,CAAC;gBAED,MAAM,kBAAkB,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;gBACnD,cAAc,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC;gBAE1C,mEAAmE;gBACnE,wEAAwE;gBACxE,iEAAiE;gBACjE,uEAAuE;gBACvE,sEAAsE;gBACtE,mEAAmE;gBACnE,uEAAuE;gBACvE,sEAAsE;gBACtE,8DAA8D;gBAC9D,EAAE;gBACF,mEAAmE;gBACnE,sEAAsE;gBACtE,iEAAiE;gBACjE,gBAAgB;gBAChB,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnD,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACpC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,sFAAsF,EAAE;4BAC3G,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,MAAM;4BACN,IAAI;yBACL,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,MAAM,CAAC,GAAG,cAA8C,CAAC;IACpE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,gBAA+B,EAC/B,YAAkD,EAClD,iBAAuD,EACvD,gBAAsD,EACtD,OAAkC;IAElC,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,OAAO,CAAC,OAAO,EACf,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,OAAO,CAAC,YAAY,CACrB,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,4BAA4B,CAAC,cAAc,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAEzF,IAAI,UAAU,CAAC,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC/C,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAAuB,EACvB,MAAqB,EACrB,aAA+C,EAC/C,kBAA4G;IAE5G,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,CAAC;IAC5D,MAAM,eAAe,GAAG,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,KAAK,aAAa,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAC1H,MAAM,4BAA4B,GAAG,eAAe;QAClD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,aAAa,EAAE,4BAA4B,IAAI,IAAI,CAAC;IAExD,OAAO;QACL,OAAO;QACP,MAAM;QACN,kBAAkB,EAAE,OAAO,CAAC,aAAa,EAAE,kBAAkB,IAAI,eAAe,CAAC;QACjF,eAAe;QACf,4BAA4B;QAC5B,QAAQ,EAAE,kBAAkB,EAAE,QAAQ;QACtC,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB;QACtD,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAuB,cAAc,CAAC,IAAI;IACzE,OAAO,UAAU,CAAC,oBAAoB,CAAC,EAAE,MAAM,IAAI,kCAAkC,CAAC,IAAI,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,UAAU,CAAC,oBAAoB,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,UAAU,CAAC,oBAAoB,CAAC,EAAE,kBAAkB,IAAI,KAAK,CAAC;AACvE,CAAC","sourcesContent":["import { createContext, useContext } from 'react';\nimport {\n  FRAMEWORK_DEFAULT_SURFACE_POLICIES,\n  SurfaceVariant,\n  type DeepPartialSurfacePolicy,\n  type SurfacePolicy,\n} from '@wildo-ai/presets-components-models';\n\ntype SurfacePolicyFamily = keyof SurfacePolicy;\ntype SurfacePolicySlot = string;\n\nexport interface SurfacePolicyContextValue {\n  variant: SurfaceVariant;\n  policy: SurfacePolicy;\n  /**\n   * True when the current context chain already contains a rendered frame.\n   *\n   * The value is intentionally precomputed by each `<Surface>` provider so a\n   * nested surface can decide `framingMode: 'when-orphan'` in O(1), without\n   * walking the whole React ancestor chain on every render.\n   */\n  isInFramedAncestor: boolean;\n  /** True when this exact surface resolves to rendering its own visual frame. */\n  rendersOwnFrame: boolean;\n  nearestFramedAncestorVariant: SurfaceVariant | null;\n  headerId: string | undefined;\n  registerHeaderId: ((id: string) => void) | undefined;\n  unregisterHeaderId: ((id: string) => void) | undefined;\n}\n\nexport interface SurfacePolicyLogger {\n  warn: (message: string, context?: Record<string, unknown>) => void;\n  error: (message: string, context?: Record<string, unknown>) => void;\n}\n\nexport interface MergeSurfacePolicyOptions {\n  variant: SurfaceVariant;\n  parentPolicy?: SurfacePolicy;\n  logger?: SurfacePolicyLogger;\n}\n\nexport const SurfacePolicyContext = createContext<SurfacePolicyContextValue | null>(null);\n\nconst SURFACE_POLICY_FAMILIES: readonly SurfacePolicyFamily[] = [\n  'containment',\n  'nesting',\n  'content',\n  'autoRender',\n  'interactiveState',\n  'a11y',\n  'geometry',\n  'stacking',\n  'skeleton',\n  'composition',\n];\n\nconst POLICY_VALUE_INHERIT_SLOTS: ReadonlySet<string> = new Set([\n  'content.textTruncation',\n  'content.wrapStrategy',\n  'content.numericAlignment',\n  'content.overlongTokenStrategy',\n  'autoRender.autoFieldChrome',\n  'autoRender.autoFieldDensity',\n  'autoRender.autoErrorPlacement',\n  'interactiveState.loadingDisplay',\n  'interactiveState.errorBoundary',\n  'geometry.actionAlignment',\n  'skeleton.skeletonTemplate',\n  'skeleton.skeletonDensity',\n  'composition.selectionColumnAware',\n]);\n\nconst warnedMissingParentInherit = new Set<string>();\nconst erroredMissingFrameworkReset = new Set<string>();\nconst objectIds = new WeakMap<object, number>();\nconst mergeCache = new Map<string, SurfacePolicy>();\nconst MAX_MERGE_CACHE_ENTRIES = 500;\nlet nextObjectId = 1;\n\nfunction getInputId(value: object | undefined): string {\n  if (!value) {\n    return 'u';\n  }\n\n  let id = objectIds.get(value);\n  if (!id) {\n    id = nextObjectId;\n    nextObjectId += 1;\n    objectIds.set(value, id);\n  }\n\n  return `o${id}`;\n}\n\nfunction getMergeCacheKey(\n  variant: SurfaceVariant,\n  frameworkDefault: SurfacePolicy,\n  themeDefault: DeepPartialSurfacePolicy | undefined,\n  appConfigOverride: DeepPartialSurfacePolicy | undefined,\n  callSiteOverride: DeepPartialSurfacePolicy | undefined,\n  parentPolicy: SurfacePolicy | undefined,\n): string {\n  return [\n    variant,\n    getInputId(frameworkDefault),\n    getInputId(themeDefault),\n    getInputId(appConfigOverride),\n    getInputId(callSiteOverride),\n    getInputId(parentPolicy),\n  ].join('|');\n}\n\nfunction mergePolicyLayer(\n  base: SurfacePolicy,\n  override: DeepPartialSurfacePolicy | undefined,\n): SurfacePolicy {\n  if (!override) {\n    return base;\n  }\n\n  const merged: SurfacePolicy = { ...base };\n\n  for (const family of SURFACE_POLICY_FAMILIES) {\n    const familyOverride = override[family];\n    if (familyOverride) {\n      merged[family] = {\n        ...base[family],\n        ...familyOverride,\n        ...(family === 'containment' && 'slotGap' in familyOverride\n          ? mergeContainmentSlotGap(base, familyOverride)\n          : {}),\n      } as SurfacePolicy[typeof family];\n    }\n  }\n\n  return merged;\n}\n\nfunction mergeContainmentSlotGap(\n  base: SurfacePolicy,\n  familyOverride: NonNullable<DeepPartialSurfacePolicy['containment']>,\n): Pick<NonNullable<SurfacePolicy['containment']>, 'slotGap'> {\n  if (familyOverride.slotGap === undefined) {\n    return { slotGap: undefined };\n  }\n\n  return {\n    slotGap: {\n      ...base.containment?.slotGap,\n      ...familyOverride.slotGap,\n    },\n  };\n}\n\nfunction shouldResolvePolicyValueInherit(family: SurfacePolicyFamily, slot: SurfacePolicySlot): boolean {\n  return POLICY_VALUE_INHERIT_SLOTS.has(`${family}.${slot}`);\n}\n\nfunction resolveResetAndInheritValues(\n  policy: SurfacePolicy,\n  frameworkDefault: SurfacePolicy,\n  options: MergeSurfacePolicyOptions,\n): SurfacePolicy {\n  const resolved: SurfacePolicy = { ...policy };\n\n  for (const family of SURFACE_POLICY_FAMILIES) {\n    const familyPolicy = policy[family];\n    if (!familyPolicy) {\n      continue;\n    }\n\n    const familyResolved = { ...familyPolicy } as Record<string, unknown>;\n    const frameworkFamily = frameworkDefault[family] as Record<string, unknown> | undefined;\n    const parentFamily = options.parentPolicy?.[family] as Record<string, unknown> | undefined;\n\n    for (const [slot, value] of Object.entries(familyPolicy as Record<string, unknown>)) {\n      if (family === 'containment' && slot === 'slotGap' && value && typeof value === 'object') {\n        const frameworkSlotGap = frameworkDefault.containment?.slotGap;\n        const resolvedSlotGap = { ...(value as Record<string, unknown>) };\n\n        for (const [slotName, slotValue] of Object.entries(resolvedSlotGap)) {\n          if (slotValue !== 'reset') {\n            continue;\n          }\n\n          const slotGapKey = slotName as keyof NonNullable<NonNullable<SurfacePolicy['containment']>['slotGap']>;\n          const frameworkValue = frameworkSlotGap?.[slotGapKey];\n          resolvedSlotGap[slotName] = frameworkValue;\n\n          if (frameworkValue === undefined) {\n            const key = `${options.variant}.${family}.${slot}.${slotName}`;\n            if (!erroredMissingFrameworkReset.has(key)) {\n              erroredMissingFrameworkReset.add(key);\n              options.logger?.error('[SurfacePolicy] reset resolved to an undefined framework default', {\n                variant: options.variant,\n                family,\n                slot: `${slot}.${slotName}`,\n              });\n            }\n          }\n        }\n\n        familyResolved[slot] = resolvedSlotGap;\n        continue;\n      }\n\n      if (value === 'reset') {\n        const frameworkValue = frameworkFamily?.[slot];\n        familyResolved[slot] = frameworkValue;\n\n        if (frameworkValue === undefined) {\n          const key = `${options.variant}.${family}.${slot}`;\n          if (!erroredMissingFrameworkReset.has(key)) {\n            erroredMissingFrameworkReset.add(key);\n            options.logger?.error('[SurfacePolicy] reset resolved to an undefined framework default', {\n              variant: options.variant,\n              family,\n              slot,\n            });\n          }\n        }\n        continue;\n      }\n\n      if (value === 'inherit' && shouldResolvePolicyValueInherit(family, slot)) {\n        const parentValue = parentFamily?.[slot];\n        if (parentValue !== undefined) {\n          familyResolved[slot] = parentValue;\n          continue;\n        }\n\n        const frameworkSlotValue = frameworkFamily?.[slot];\n        familyResolved[slot] = frameworkSlotValue;\n\n        // Only warn when the framework default would actually substitute a\n        // DIFFERENT concrete value than the `'inherit'` the call-site provided.\n        // If the variant's own framework default for this slot is ITSELF\n        // `'inherit'` (as is the case for root variants like SHELL and OVERLAY\n        // on `content.numericAlignment`), then the resolver's fallback simply\n        // re-emits the same `'inherit'` keyword the author asked for — CSS\n        // then handles DOM-level inheritance natively. That is the framework's\n        // intentional design for root-level variants which by definition have\n        // no parent Surface, and is NOT an authoring mistake to flag.\n        //\n        // The warning is reserved for the case where the framework default\n        // would substitute a concrete value — that's the case worth surfacing\n        // because the resolved policy then quietly differs from what the\n        // author wrote.\n        if (frameworkSlotValue !== 'inherit') {\n          const key = `${options.variant}.${family}.${slot}`;\n          if (!warnedMissingParentInherit.has(key)) {\n            warnedMissingParentInherit.add(key);\n            options.logger?.warn('[SurfacePolicy] inherit had no parent surface; falling back to the framework default', {\n              variant: options.variant,\n              family,\n              slot,\n            });\n          }\n        }\n      }\n    }\n\n    resolved[family] = familyResolved as SurfacePolicy[typeof family];\n  }\n\n  return resolved;\n}\n\n/**\n * Merge the four Surface Policy layers into a concrete `SurfacePolicy`.\n *\n * Order is fixed by KD-4: framework fallback → theme recipe policy → app\n * configuration override → call-site override. The function is memoized by\n * shallow identity of those inputs so repeated renders with stable config\n * objects reuse the same policy reference.\n */\nexport function mergeSurfacePolicy(\n  frameworkDefault: SurfacePolicy,\n  themeDefault: DeepPartialSurfacePolicy | undefined,\n  appConfigOverride: DeepPartialSurfacePolicy | undefined,\n  callSiteOverride: DeepPartialSurfacePolicy | undefined,\n  options: MergeSurfacePolicyOptions,\n): SurfacePolicy {\n  const cacheKey = getMergeCacheKey(\n    options.variant,\n    frameworkDefault,\n    themeDefault,\n    appConfigOverride,\n    callSiteOverride,\n    options.parentPolicy,\n  );\n  const cached = mergeCache.get(cacheKey);\n  if (cached) {\n    return cached;\n  }\n\n  const mergedTheme = mergePolicyLayer(frameworkDefault, themeDefault);\n  const mergedApp = mergePolicyLayer(mergedTheme, appConfigOverride);\n  const mergedCallSite = mergePolicyLayer(mergedApp, callSiteOverride);\n  const resolved = resolveResetAndInheritValues(mergedCallSite, frameworkDefault, options);\n\n  if (mergeCache.size >= MAX_MERGE_CACHE_ENTRIES) {\n    mergeCache.clear();\n  }\n  mergeCache.set(cacheKey, resolved);\n  return resolved;\n}\n\nexport function computeSurfacePolicyContextValue(\n  variant: SurfaceVariant,\n  policy: SurfacePolicy,\n  parentContext: SurfacePolicyContextValue | null,\n  headerRegistration?: Pick<SurfacePolicyContextValue, 'headerId' | 'registerHeaderId' | 'unregisterHeaderId'>,\n): SurfacePolicyContextValue {\n  const framingMode = policy.nesting?.framingMode ?? 'always';\n  const rendersOwnFrame = framingMode === 'always' || (framingMode === 'when-orphan' && !parentContext?.isInFramedAncestor);\n  const nearestFramedAncestorVariant = rendersOwnFrame\n    ? variant\n    : parentContext?.nearestFramedAncestorVariant ?? null;\n\n  return {\n    variant,\n    policy,\n    isInFramedAncestor: Boolean(parentContext?.isInFramedAncestor || rendersOwnFrame),\n    rendersOwnFrame,\n    nearestFramedAncestorVariant,\n    headerId: headerRegistration?.headerId,\n    registerHeaderId: headerRegistration?.registerHeaderId,\n    unregisterHeaderId: headerRegistration?.unregisterHeaderId,\n  };\n}\n\nexport function useSurfacePolicy(hint: SurfaceVariant = SurfaceVariant.BASE): SurfacePolicy {\n  return useContext(SurfacePolicyContext)?.policy ?? FRAMEWORK_DEFAULT_SURFACE_POLICIES[hint];\n}\n\nexport function useSurfaceVariant(): SurfaceVariant | null {\n  return useContext(SurfacePolicyContext)?.variant ?? null;\n}\n\n/**\n * `true` when the current React subtree is already inside a surface that paints\n * its own visual frame (border + shadow). Section/card chrome reads this to\n * activate the `when-orphan` framing semantic: a framed section nested inside an\n * already-framed ancestor (card-in-card, card-in-dialog, card-in-composite)\n * suppresses its OWN frame to avoid \"border soup\", because the outer frame\n * already delineates the region.\n *\n * Returns `false` at the top of the tree (no surface ancestor). The value is\n * precomputed by each `<Surface>` provider (see\n * {@link computeSurfacePolicyContextValue}), so this read is O(1) and never\n * walks the ancestor chain.\n *\n * IMPORTANT: this signal is only reliable when every surface's\n * `nesting.framingMode` truthfully reflects whether it paints a frame. A surface\n * that renders FLAT but declares `framingMode: 'always'` would falsely report\n * `true` to its descendants — so flat chrome must declare `framingMode: 'never'`\n * and `when-orphan` chrome must paint its frame iff this hook returns `false`.\n */\nexport function useIsInFramedAncestor(): boolean {\n  return useContext(SurfacePolicyContext)?.isInFramedAncestor ?? false;\n}\n"]}
+{"version":3,"file":"SurfacePolicyContext.js","sourceRoot":"","sources":["../../../../src/core/ui/SurfacePolicyContext.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAClD,OAAO,EACL,kCAAkC,EAClC,cAAc,GAGf,MAAM,qCAAqC,CAAC;AAmC7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAmC,IAAI,CAAC,CAAC;AAE1F,MAAM,uBAAuB,GAAmC;IAC9D,aAAa;IACb,SAAS;IACT,SAAS;IACT,YAAY;IACZ,kBAAkB;IAClB,MAAM;IACN,UAAU;IACV,UAAU;IACV,UAAU;IACV,aAAa;CACd,CAAC;AAEF,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,wBAAwB;IACxB,sBAAsB;IACtB,0BAA0B;IAC1B,+BAA+B;IAC/B,4BAA4B;IAC5B,6BAA6B;IAC7B,+BAA+B;IAC/B,iCAAiC;IACjC,gCAAgC;IAChC,0BAA0B;IAC1B,2BAA2B;IAC3B,0BAA0B;IAC1B,kCAAkC;CACnC,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAAU,CAAC;AACrD,MAAM,4BAA4B,GAAG,IAAI,GAAG,EAAU,CAAC;AACvD,MAAM,SAAS,GAAG,IAAI,OAAO,EAAkB,CAAC;AAChD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;AACpD,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,EAAE,GAAG,YAAY,CAAC;QAClB,YAAY,IAAI,CAAC,CAAC;QAClB,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,IAAI,EAAE,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAuB,EACvB,gBAA+B,EAC/B,YAAkD,EAClD,iBAAuD,EACvD,gBAAsD,EACtD,YAAuC;IAEvC,OAAO;QACL,OAAO;QACP,UAAU,CAAC,gBAAgB,CAAC;QAC5B,UAAU,CAAC,YAAY,CAAC;QACxB,UAAU,CAAC,iBAAiB,CAAC;QAC7B,UAAU,CAAC,gBAAgB,CAAC;QAC5B,UAAU,CAAC,YAAY,CAAC;KACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAmB,EACnB,QAA8C;IAE9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,GAAG,IAAI,EAAE,CAAC;IAE1C,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC,GAAG;gBACf,GAAG,IAAI,CAAC,MAAM,CAAC;gBACf,GAAG,cAAc;gBACjB,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,SAAS,IAAI,cAAc;oBACzD,CAAC,CAAC,uBAAuB,CAAC,IAAI,EAAE,cAAc,CAAC;oBAC/C,CAAC,CAAC,EAAE,CAAC;aACwB,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAAmB,EACnB,cAAoE;IAEpE,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChC,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO;YAC5B,GAAG,cAAc,CAAC,OAAO;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CAAC,MAA2B,EAAE,IAAuB;IAC3F,OAAO,0BAA0B,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,4BAA4B,CACnC,MAAqB,EACrB,gBAA+B,EAC/B,OAAkC;IAElC,MAAM,QAAQ,GAAkB,EAAE,GAAG,MAAM,EAAE,CAAC;IAE9C,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QAED,MAAM,cAAc,GAAG,EAAE,GAAG,YAAY,EAA6B,CAAC;QACtE,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAwC,CAAC;QACxF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,CAAwC,CAAC;QAE3F,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAuC,CAAC,EAAE,CAAC;YACpF,IAAI,MAAM,KAAK,aAAa,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC;gBAC/D,MAAM,eAAe,GAAG,EAAE,GAAI,KAAiC,EAAE,CAAC;gBAElE,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;oBACpE,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;wBAC1B,SAAS;oBACX,CAAC;oBAED,MAAM,UAAU,GAAG,QAAmF,CAAC;oBACvG,MAAM,cAAc,GAAG,gBAAgB,EAAE,CAAC,UAAU,CAAC,CAAC;oBACtD,eAAe,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC;oBAE3C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;wBACjC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;wBAC/D,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC3C,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;4BACtC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,kEAAkE,EAAE;gCACxF,OAAO,EAAE,OAAO,CAAC,OAAO;gCACxB,MAAM;gCACN,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE;6BAC5B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,cAAc,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;gBACvC,SAAS;YACX,CAAC;YAED,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBACtB,MAAM,cAAc,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC/C,cAAc,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;gBAEtC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC3C,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACtC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,kEAAkE,EAAE;4BACxF,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,MAAM;4BACN,IAAI;yBACL,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,KAAK,KAAK,SAAS,IAAI,+BAA+B,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBACzE,MAAM,WAAW,GAAG,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,cAAc,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;oBACnC,SAAS;gBACX,CAAC;gBAED,MAAM,kBAAkB,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;gBACnD,cAAc,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC;gBAE1C,mEAAmE;gBACnE,wEAAwE;gBACxE,iEAAiE;gBACjE,uEAAuE;gBACvE,sEAAsE;gBACtE,mEAAmE;gBACnE,uEAAuE;gBACvE,sEAAsE;gBACtE,8DAA8D;gBAC9D,EAAE;gBACF,mEAAmE;gBACnE,sEAAsE;gBACtE,iEAAiE;gBACjE,gBAAgB;gBAChB,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnD,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACpC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,sFAAsF,EAAE;4BAC3G,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,MAAM;4BACN,IAAI;yBACL,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,MAAM,CAAC,GAAG,cAA8C,CAAC;IACpE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,gBAA+B,EAC/B,YAAkD,EAClD,iBAAuD,EACvD,gBAAsD,EACtD,OAAkC;IAElC,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,OAAO,CAAC,OAAO,EACf,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,OAAO,CAAC,YAAY,CACrB,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,4BAA4B,CAAC,cAAc,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAEzF,IAAI,UAAU,CAAC,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC/C,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAAuB,EACvB,MAAqB,EACrB,aAA+C,EAC/C,kBAA4G;IAE5G,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,CAAC;IAC5D,MAAM,eAAe,GAAG,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,KAAK,aAAa,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAC1H,MAAM,4BAA4B,GAAG,eAAe;QAClD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,aAAa,EAAE,4BAA4B,IAAI,IAAI,CAAC;IAExD,OAAO;QACL,OAAO;QACP,MAAM;QACN,kBAAkB,EAAE,OAAO,CAAC,aAAa,EAAE,kBAAkB,IAAI,eAAe,CAAC;QACjF,eAAe;QACf,4BAA4B;QAC5B,QAAQ,EAAE,kBAAkB,EAAE,QAAQ;QACtC,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB;QACtD,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAuB,cAAc,CAAC,IAAI;IACzE,OAAO,UAAU,CAAC,oBAAoB,CAAC,EAAE,MAAM,IAAI,kCAAkC,CAAC,IAAI,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,UAAU,CAAC,oBAAoB,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,UAAU,CAAC,oBAAoB,CAAC,EAAE,kBAAkB,IAAI,KAAK,CAAC;AACvE,CAAC","sourcesContent":["import { createContext, useContext } from 'react';\nimport {\n  FRAMEWORK_DEFAULT_SURFACE_POLICIES,\n  SurfaceVariant,\n  type DeepPartialSurfacePolicy,\n  type SurfacePolicy,\n} from '@wildo-ai/presets-components-models';\n\ntype SurfacePolicyFamily = keyof SurfacePolicy;\ntype SurfacePolicySlot = string;\n\nexport interface SurfacePolicyContextValue {\n  variant: SurfaceVariant;\n  policy: SurfacePolicy;\n  /**\n   * True when the current context chain already contains a rendered frame.\n   *\n   * The value is intentionally precomputed by each `<Surface>` provider so a\n   * nested surface can decide `framingMode: 'when-orphan'` in O(1), without\n   * walking the whole React ancestor chain on every render.\n   */\n  isInFramedAncestor: boolean;\n  /** True when this exact surface resolves to rendering its own visual frame. */\n  rendersOwnFrame: boolean;\n  nearestFramedAncestorVariant: SurfaceVariant | null;\n  headerId: string | undefined;\n  registerHeaderId: ((id: string) => void) | undefined;\n  unregisterHeaderId: ((id: string) => void) | undefined;\n}\n\nexport interface SurfacePolicyLogger {\n  warn: (message: string, context?: Record<string, unknown>) => void;\n  error: (message: string, context?: Record<string, unknown>) => void;\n}\n\nexport interface MergeSurfacePolicyOptions {\n  variant: SurfaceVariant;\n  parentPolicy?: SurfacePolicy;\n  logger?: SurfacePolicyLogger;\n}\n\nexport const SurfacePolicyContext = createContext<SurfacePolicyContextValue | null>(null);\n\nconst SURFACE_POLICY_FAMILIES: readonly SurfacePolicyFamily[] = [\n  'containment',\n  'nesting',\n  'content',\n  'autoRender',\n  'interactiveState',\n  'a11y',\n  'geometry',\n  'stacking',\n  'skeleton',\n  'composition',\n];\n\nconst POLICY_VALUE_INHERIT_SLOTS: ReadonlySet<string> = new Set([\n  'content.textTruncation',\n  'content.wrapStrategy',\n  'content.numericAlignment',\n  'content.overlongTokenStrategy',\n  'autoRender.autoFieldChrome',\n  'autoRender.autoFieldDensity',\n  'autoRender.autoErrorPlacement',\n  'interactiveState.loadingDisplay',\n  'interactiveState.errorBoundary',\n  'geometry.actionAlignment',\n  'skeleton.skeletonTemplate',\n  'skeleton.skeletonDensity',\n  'composition.selectionColumnAware',\n]);\n\nconst warnedMissingParentInherit = new Set<string>();\nconst erroredMissingFrameworkReset = new Set<string>();\nconst objectIds = new WeakMap<object, number>();\nconst mergeCache = new Map<string, SurfacePolicy>();\nconst MAX_MERGE_CACHE_ENTRIES = 500;\nlet nextObjectId = 1;\n\nfunction getInputId(value: object | undefined): string {\n  if (!value) {\n    return 'u';\n  }\n\n  let id = objectIds.get(value);\n  if (!id) {\n    id = nextObjectId;\n    nextObjectId += 1;\n    objectIds.set(value, id);\n  }\n\n  return `o${id}`;\n}\n\nfunction getMergeCacheKey(\n  variant: SurfaceVariant,\n  frameworkDefault: SurfacePolicy,\n  themeDefault: DeepPartialSurfacePolicy | undefined,\n  appConfigOverride: DeepPartialSurfacePolicy | undefined,\n  callSiteOverride: DeepPartialSurfacePolicy | undefined,\n  parentPolicy: SurfacePolicy | undefined,\n): string {\n  return [\n    variant,\n    getInputId(frameworkDefault),\n    getInputId(themeDefault),\n    getInputId(appConfigOverride),\n    getInputId(callSiteOverride),\n    getInputId(parentPolicy),\n  ].join('|');\n}\n\nfunction mergePolicyLayer(\n  base: SurfacePolicy,\n  override: DeepPartialSurfacePolicy | undefined,\n): SurfacePolicy {\n  if (!override) {\n    return base;\n  }\n\n  const merged: SurfacePolicy = { ...base };\n\n  for (const family of SURFACE_POLICY_FAMILIES) {\n    const familyOverride = override[family];\n    if (familyOverride) {\n      merged[family] = {\n        ...base[family],\n        ...familyOverride,\n        ...(family === 'containment' && 'slotGap' in familyOverride\n          ? mergeContainmentSlotGap(base, familyOverride)\n          : {}),\n      } as SurfacePolicy[typeof family];\n    }\n  }\n\n  return merged;\n}\n\nfunction mergeContainmentSlotGap(\n  base: SurfacePolicy,\n  familyOverride: NonNullable<DeepPartialSurfacePolicy['containment']>,\n): Pick<NonNullable<SurfacePolicy['containment']>, 'slotGap'> {\n  if (familyOverride.slotGap === undefined) {\n    return { slotGap: undefined };\n  }\n\n  return {\n    slotGap: {\n      ...base.containment?.slotGap,\n      ...familyOverride.slotGap,\n    },\n  };\n}\n\nfunction shouldResolvePolicyValueInherit(family: SurfacePolicyFamily, slot: SurfacePolicySlot): boolean {\n  return POLICY_VALUE_INHERIT_SLOTS.has(`${family}.${slot}`);\n}\n\nfunction resolveResetAndInheritValues(\n  policy: SurfacePolicy,\n  frameworkDefault: SurfacePolicy,\n  options: MergeSurfacePolicyOptions,\n): SurfacePolicy {\n  const resolved: SurfacePolicy = { ...policy };\n\n  for (const family of SURFACE_POLICY_FAMILIES) {\n    const familyPolicy = policy[family];\n    if (!familyPolicy) {\n      continue;\n    }\n\n    const familyResolved = { ...familyPolicy } as Record<string, unknown>;\n    const frameworkFamily = frameworkDefault[family] as Record<string, unknown> | undefined;\n    const parentFamily = options.parentPolicy?.[family] as Record<string, unknown> | undefined;\n\n    for (const [slot, value] of Object.entries(familyPolicy as Record<string, unknown>)) {\n      if (family === 'containment' && slot === 'slotGap' && value && typeof value === 'object') {\n        const frameworkSlotGap = frameworkDefault.containment?.slotGap;\n        const resolvedSlotGap = { ...(value as Record<string, unknown>) };\n\n        for (const [slotName, slotValue] of Object.entries(resolvedSlotGap)) {\n          if (slotValue !== 'reset') {\n            continue;\n          }\n\n          const slotGapKey = slotName as keyof NonNullable<NonNullable<SurfacePolicy['containment']>['slotGap']>;\n          const frameworkValue = frameworkSlotGap?.[slotGapKey];\n          resolvedSlotGap[slotName] = frameworkValue;\n\n          if (frameworkValue === undefined) {\n            const key = `${options.variant}.${family}.${slot}.${slotName}`;\n            if (!erroredMissingFrameworkReset.has(key)) {\n              erroredMissingFrameworkReset.add(key);\n              options.logger?.error('[SurfacePolicy] reset resolved to an undefined framework default', {\n                variant: options.variant,\n                family,\n                slot: `${slot}.${slotName}`,\n              });\n            }\n          }\n        }\n\n        familyResolved[slot] = resolvedSlotGap;\n        continue;\n      }\n\n      if (value === 'reset') {\n        const frameworkValue = frameworkFamily?.[slot];\n        familyResolved[slot] = frameworkValue;\n\n        if (frameworkValue === undefined) {\n          const key = `${options.variant}.${family}.${slot}`;\n          if (!erroredMissingFrameworkReset.has(key)) {\n            erroredMissingFrameworkReset.add(key);\n            options.logger?.error('[SurfacePolicy] reset resolved to an undefined framework default', {\n              variant: options.variant,\n              family,\n              slot,\n            });\n          }\n        }\n        continue;\n      }\n\n      if (value === 'inherit' && shouldResolvePolicyValueInherit(family, slot)) {\n        const parentValue = parentFamily?.[slot];\n        if (parentValue !== undefined) {\n          familyResolved[slot] = parentValue;\n          continue;\n        }\n\n        const frameworkSlotValue = frameworkFamily?.[slot];\n        familyResolved[slot] = frameworkSlotValue;\n\n        // Only warn when the framework default would actually substitute a\n        // DIFFERENT concrete value than the `'inherit'` the call-site provided.\n        // If the variant's own framework default for this slot is ITSELF\n        // `'inherit'` (as is the case for root variants like SHELL and OVERLAY\n        // on `content.numericAlignment`), then the resolver's fallback simply\n        // re-emits the same `'inherit'` keyword the author asked for — CSS\n        // then handles DOM-level inheritance natively. That is the framework's\n        // intentional design for root-level variants which by definition have\n        // no parent Surface, and is NOT an authoring mistake to flag.\n        //\n        // The warning is reserved for the case where the framework default\n        // would substitute a concrete value — that's the case worth surfacing\n        // because the resolved policy then quietly differs from what the\n        // author wrote.\n        if (frameworkSlotValue !== 'inherit') {\n          const key = `${options.variant}.${family}.${slot}`;\n          if (!warnedMissingParentInherit.has(key)) {\n            warnedMissingParentInherit.add(key);\n            options.logger?.warn('[SurfacePolicy] inherit had no parent surface; falling back to the framework default', {\n              variant: options.variant,\n              family,\n              slot,\n            });\n          }\n        }\n      }\n    }\n\n    resolved[family] = familyResolved as SurfacePolicy[typeof family];\n  }\n\n  return resolved;\n}\n\n/**\n * Merge the four Surface Policy layers into a concrete `SurfacePolicy`.\n *\n * Order is fixed by KD-4: framework fallback → theme recipe policy → app\n * configuration override → call-site override. The function is memoized by\n * shallow identity of those inputs so repeated renders with stable config\n * objects reuse the same policy reference.\n */\nexport function mergeSurfacePolicy(\n  frameworkDefault: SurfacePolicy,\n  themeDefault: DeepPartialSurfacePolicy | undefined,\n  appConfigOverride: DeepPartialSurfacePolicy | undefined,\n  callSiteOverride: DeepPartialSurfacePolicy | undefined,\n  options: MergeSurfacePolicyOptions,\n): SurfacePolicy {\n  const cacheKey = getMergeCacheKey(\n    options.variant,\n    frameworkDefault,\n    themeDefault,\n    appConfigOverride,\n    callSiteOverride,\n    options.parentPolicy,\n  );\n  const cached = mergeCache.get(cacheKey);\n  if (cached) {\n    return cached;\n  }\n\n  const mergedTheme = mergePolicyLayer(frameworkDefault, themeDefault);\n  const mergedApp = mergePolicyLayer(mergedTheme, appConfigOverride);\n  const mergedCallSite = mergePolicyLayer(mergedApp, callSiteOverride);\n  const resolved = resolveResetAndInheritValues(mergedCallSite, frameworkDefault, options);\n\n  if (mergeCache.size >= MAX_MERGE_CACHE_ENTRIES) {\n    mergeCache.clear();\n  }\n  mergeCache.set(cacheKey, resolved);\n  return resolved;\n}\n\nexport function computeSurfacePolicyContextValue(\n  variant: SurfaceVariant,\n  policy: SurfacePolicy,\n  parentContext: SurfacePolicyContextValue | null,\n  headerRegistration?: Pick<SurfacePolicyContextValue, 'headerId' | 'registerHeaderId' | 'unregisterHeaderId'>,\n): SurfacePolicyContextValue {\n  const framingMode = policy.nesting?.framingMode ?? 'always';\n  const rendersOwnFrame = framingMode === 'always' || (framingMode === 'when-orphan' && !parentContext?.isInFramedAncestor);\n  const nearestFramedAncestorVariant = rendersOwnFrame\n    ? variant\n    : parentContext?.nearestFramedAncestorVariant ?? null;\n\n  return {\n    variant,\n    policy,\n    isInFramedAncestor: Boolean(parentContext?.isInFramedAncestor || rendersOwnFrame),\n    rendersOwnFrame,\n    nearestFramedAncestorVariant,\n    headerId: headerRegistration?.headerId,\n    registerHeaderId: headerRegistration?.registerHeaderId,\n    unregisterHeaderId: headerRegistration?.unregisterHeaderId,\n  };\n}\n\nexport function useSurfacePolicy(hint: SurfaceVariant = SurfaceVariant.BASE): SurfacePolicy {\n  return useContext(SurfacePolicyContext)?.policy ?? FRAMEWORK_DEFAULT_SURFACE_POLICIES[hint];\n}\n\nexport function useSurfaceVariant(): SurfaceVariant | null {\n  return useContext(SurfacePolicyContext)?.variant ?? null;\n}\n\n/**\n * `true` when the current React subtree is already inside a surface that paints\n * its own visual frame (border + shadow). Section/card chrome reads this to\n * activate the `when-orphan` framing semantic: a framed section nested inside an\n * already-framed ancestor (card-in-card, card-in-dialog, card-in-composite)\n * suppresses its OWN frame to avoid \"border soup\", because the outer frame\n * already delineates the region.\n *\n * Returns `false` at the top of the tree (no surface ancestor). The value is\n * precomputed by each `<Surface>` provider (see\n * {@link computeSurfacePolicyContextValue}), so this read is O(1) and never\n * walks the ancestor chain.\n *\n * IMPORTANT: this signal is only reliable when every surface's\n * `nesting.framingMode` truthfully reflects whether it paints a frame. A surface\n * that renders FLAT but declares `framingMode: 'always'` would falsely report\n * `true` to its descendants — so flat chrome must declare `framingMode: 'never'`\n * and `when-orphan` chrome must paint its frame iff this hook returns `false`.\n */\nexport function useIsInFramedAncestor(): boolean {\n  return useContext(SurfacePolicyContext)?.isInFramedAncestor ?? false;\n}\n"]}

package/dist/esm/core/ui/TypographyScopeContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TypographyScopeContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/ui/TypographyScopeContext.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;CAC5B;AAED,wBAAgB,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAEhG;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvD"}
+{"version":3,"file":"TypographyScopeContext.d.ts","sourceRoot":"","sources":["../../../../src/core/ui/TypographyScopeContext.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;CAC5B;AAED,wBAAgB,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAEhG;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvD"}

package/dist/esm/core/ui/TypographyScopeContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"TypographyScopeContext.js","sourceRoot":"","sources":["../../../../../src/core/ui/TypographyScopeContext.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,yFAAyF;AACzF,MAAM,sBAAsB,GAAG,KAAK,CAAC,aAAa,CAAqB,SAAS,CAAC,CAAC;AAQlF,MAAM,UAAU,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAwB;IAC3E,OAAO,KAAC,sBAAsB,CAAC,QAAQ,IAAC,KAAK,EAAE,SAAS,YAAG,QAAQ,GAAmC,CAAC;AACzG,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB;IAChC,OAAO,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;AAClD,CAAC","sourcesContent":["'use client';\n\n/**\n * A TYPOGRAPHY SCOPE — the type treatment a subtree's text renders at, when the text itself is\n * rendered by machinery the caller does not control.\n *\n * ## The problem it exists for\n *\n * A display field's value is not written by whoever places the field. `<DisplayField name=\"title\" />`\n * reaches a formatter preset, which constructs its own `<Text>`, which resolves its own typography\n * recipe — and `Text` sets an explicit `text-sm`. So a caller wanting that value to read as a\n * HEADLINE has nothing to say: a class on any wrapper loses to the size the inner element sets on\n * itself.\n *\n * What the repository did instead, at 22 sites and counting, was reach through the field:\n *\n *     <div className=\"text-xl font-semibold [&_p]:text-xl [&_p]:font-semibold\">\n *       <DisplayField name=\"idea.oneLiner\" hideLabel />\n *     </div>\n *\n * That is worse than it looks. It hard-codes a step of a ladder eight themes each define\n * differently; it hits EVERY paragraph in the subtree rather than the value; and the size cannot come\n * from a theme at all, because a Tailwind variant composed at runtime is never generated — the\n * scanner only sees what is written literally in source, so `[&_p]:${themeClass}` produces no CSS.\n * That last fact is what rules out fixing this with a smarter wrapper.\n *\n * ## Why a context rather than a prop\n *\n * The alternative is to thread a typography intent from `DisplayField` through the resolved props,\n * the dispatcher, and into each formatter's `<Text>`: **24 formatter presets, 75 call sites**, every\n * one of which could be forgotten — and the one forgotten is invisible, because the text still\n * renders, just at the wrong size.\n *\n * A scope inverts it. `Text` is the ONE component that renders display text, and its wrapper here\n * merges the scope into what it forwards, so every formatter is covered without being edited and a\n * new formatter is covered on the day it is written.\n *\n * ## Precedence, and why this direction\n *\n * The scope is merged BEFORE the element's own `className`, so an explicit class on a specific\n * `<Text>` still wins — a formatter that deliberately renders something small (a machine ref, a\n * secret's monospace) keeps its choice. The scope is a default for text that expressed no opinion,\n * never an override of one.\n *\n * The value is a resolved class string rather than a semantic name on purpose: whoever provides the\n * scope has the theme's recipe in hand and resolves it there, so this context stays a transport and\n * never becomes a second place where type scale is decided.\n */\n\nimport React from 'react';\n\n/** The class string every `Text` in the subtree renders with, unless it sets its own. */\nconst TypographyScopeContext = React.createContext<string | undefined>(undefined);\n\nexport interface TypographyScopeProps {\n  /** Resolved typography classes — from a theme recipe, never a literal step. */\n  className: string | undefined;\n  children?: React.ReactNode;\n}\n\nexport function TypographyScope({ className, children }: TypographyScopeProps): React.JSX.Element {\n  return <TypographyScopeContext.Provider value={className}>{children}</TypographyScopeContext.Provider>;\n}\n\n/** The active scope, or `undefined` outside one — which is the overwhelmingly common case. */\nexport function useTypographyScope(): string | undefined {\n  return React.useContext(TypographyScopeContext);\n}\n"]}
+{"version":3,"file":"TypographyScopeContext.js","sourceRoot":"","sources":["../../../../src/core/ui/TypographyScopeContext.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,yFAAyF;AACzF,MAAM,sBAAsB,GAAG,KAAK,CAAC,aAAa,CAAqB,SAAS,CAAC,CAAC;AAQlF,MAAM,UAAU,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAwB;IAC3E,OAAO,KAAC,sBAAsB,CAAC,QAAQ,IAAC,KAAK,EAAE,SAAS,YAAG,QAAQ,GAAmC,CAAC;AACzG,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB;IAChC,OAAO,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;AAClD,CAAC","sourcesContent":["'use client';\n\n/**\n * A TYPOGRAPHY SCOPE — the type treatment a subtree's text renders at, when the text itself is\n * rendered by machinery the caller does not control.\n *\n * ## The problem it exists for\n *\n * A display field's value is not written by whoever places the field. `<DisplayField name=\"title\" />`\n * reaches a formatter preset, which constructs its own `<Text>`, which resolves its own typography\n * recipe — and `Text` sets an explicit `text-sm`. So a caller wanting that value to read as a\n * HEADLINE has nothing to say: a class on any wrapper loses to the size the inner element sets on\n * itself.\n *\n * What the repository did instead, at 22 sites and counting, was reach through the field:\n *\n *     <div className=\"text-xl font-semibold [&_p]:text-xl [&_p]:font-semibold\">\n *       <DisplayField name=\"idea.oneLiner\" hideLabel />\n *     </div>\n *\n * That is worse than it looks. It hard-codes a step of a ladder eight themes each define\n * differently; it hits EVERY paragraph in the subtree rather than the value; and the size cannot come\n * from a theme at all, because a Tailwind variant composed at runtime is never generated — the\n * scanner only sees what is written literally in source, so `[&_p]:${themeClass}` produces no CSS.\n * That last fact is what rules out fixing this with a smarter wrapper.\n *\n * ## Why a context rather than a prop\n *\n * The alternative is to thread a typography intent from `DisplayField` through the resolved props,\n * the dispatcher, and into each formatter's `<Text>`: **24 formatter presets, 75 call sites**, every\n * one of which could be forgotten — and the one forgotten is invisible, because the text still\n * renders, just at the wrong size.\n *\n * A scope inverts it. `Text` is the ONE component that renders display text, and its wrapper here\n * merges the scope into what it forwards, so every formatter is covered without being edited and a\n * new formatter is covered on the day it is written.\n *\n * ## Precedence, and why this direction\n *\n * The scope is merged BEFORE the element's own `className`, so an explicit class on a specific\n * `<Text>` still wins — a formatter that deliberately renders something small (a machine ref, a\n * secret's monospace) keeps its choice. The scope is a default for text that expressed no opinion,\n * never an override of one.\n *\n * The value is a resolved class string rather than a semantic name on purpose: whoever provides the\n * scope has the theme's recipe in hand and resolves it there, so this context stays a transport and\n * never becomes a second place where type scale is decided.\n */\n\nimport React from 'react';\n\n/** The class string every `Text` in the subtree renders with, unless it sets its own. */\nconst TypographyScopeContext = React.createContext<string | undefined>(undefined);\n\nexport interface TypographyScopeProps {\n  /** Resolved typography classes — from a theme recipe, never a literal step. */\n  className: string | undefined;\n  children?: React.ReactNode;\n}\n\nexport function TypographyScope({ className, children }: TypographyScopeProps): React.JSX.Element {\n  return <TypographyScopeContext.Provider value={className}>{children}</TypographyScopeContext.Provider>;\n}\n\n/** The active scope, or `undefined` outside one — which is the overwhelmingly common case. */\nexport function useTypographyScope(): string | undefined {\n  return React.useContext(TypographyScopeContext);\n}\n"]}

package/dist/esm/core/ui/UIContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UIContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/ui/UIContext.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,EAAiB,SAAS,EAAqD,MAAM,OAAO,CAAC;AAG3G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AACpH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+DAA+D,CAAC;AACvG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oEAAoE,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAyB,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,eAAe,EAAuB,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kEAAkE,CAAC;AAGjH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACzG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AAC3G,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oEAAoE,CAAC;AACzG,OAAO,EACL,iBAAiB,EAEjB,UAAU,EAIV,cAAc,EAMd,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAEV,gBAAgB,EAGhB,wBAAwB,EACxB,aAAa,EACb,gBAAgB,EAChB,eAAe,EAChB,MAAM,qCAAqC,CAAC;AAa7C,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AA2HlF,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,SAAS,CAAC;IACpB,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA6DD,eAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC,EAAE,CAAC,+BAA+B,CAsFhF,CAAC;AAMF;;;GAGG;AACH,MAAM,WAAW,aAAa;IAE5B,QAAQ,EAAG,eAAe,GAAG,SAAS,CAAC;IAGvC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,0BAA0B,CAAC,EAAE,eAAe,CAAC,4BAA4B,CAAC,CAAC;IAC3E,yBAAyB,CAAC,EAAE,eAAe,CAAC,2BAA2B,CAAC,CAAC;IAGzE,cAAc,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC3C,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC/C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAG9B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACpC,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB;;;;OAIG;IACH,eAAe,EAAE,SAAS,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;IAGrC,aAAa,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAG5C,gBAAgB,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAGrD,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;IAGf,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,gBAAgB,CAAC;IACxE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACtF,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,GAAG,SAAS,KAAK,eAAe,GAAG,SAAS,CAAC;IAC5F,gBAAgB,CAAC,EAAE,CACjB,OAAO,EAAE,cAAc,EACvB,gBAAgB,CAAC,EAAE,wBAAwB,EAC3C,YAAY,CAAC,EAAE,aAAa,KACzB,aAAa,CAAC;IACnB,aAAa,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC;IACpD,cAAc,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC;IACrD,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;IAC5C,WAAW,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C;;;;;OAKG;IACH,eAAe,EAAE,eAAe,CAAC;IACjC;;;;OAIG;IACH,uBAAuB,EAAE,uBAAuB,CAAC;IACjD;;;;;OAKG;IACH,sBAAsB,EAAE,sBAAsB,CAAC;CAChD;AAED;;;;GAIG;AACH,eAAO,MAAM,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,GAAG,SAAS,CAAuD,CAAC;AAKvH;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,SAAS,CAAC;IACpB,yDAAyD;IACzD,qBAAqB,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAC7D,oEAAoE;IACpE,0BAA0B,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;IAC1G,6DAA6D;IAC7D,eAAe,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,wBAAgB,UAAU,CAAC,EACzB,QAAQ,EACR,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,GAChB,EAAE,eAAe,GAAG,KAAK,CAAC,YAAY,CAsgBtC"}
+{"version":3,"file":"UIContext.d.ts","sourceRoot":"","sources":["../../../../src/core/ui/UIContext.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,EAAiB,SAAS,EAAqD,MAAM,OAAO,CAAC;AAG3G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AACpH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+DAA+D,CAAC;AACvG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oEAAoE,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAyB,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,eAAe,EAAuB,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kEAAkE,CAAC;AAGjH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACzG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AAC3G,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oEAAoE,CAAC;AACzG,OAAO,EACL,iBAAiB,EAEjB,UAAU,EAIV,cAAc,EAMd,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAEV,gBAAgB,EAGhB,wBAAwB,EACxB,aAAa,EACb,gBAAgB,EAChB,eAAe,EAChB,MAAM,qCAAqC,CAAC;AAa7C,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AA2HlF,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,SAAS,CAAC;IACpB,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA6DD,eAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC,EAAE,CAAC,+BAA+B,CAsFhF,CAAC;AAMF;;;GAGG;AACH,MAAM,WAAW,aAAa;IAE5B,QAAQ,EAAG,eAAe,GAAG,SAAS,CAAC;IAGvC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,0BAA0B,CAAC,EAAE,eAAe,CAAC,4BAA4B,CAAC,CAAC;IAC3E,yBAAyB,CAAC,EAAE,eAAe,CAAC,2BAA2B,CAAC,CAAC;IAGzE,cAAc,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC3C,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC/C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAG9B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACpC,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB;;;;OAIG;IACH,eAAe,EAAE,SAAS,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;IAGrC,aAAa,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAG5C,gBAAgB,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAGrD,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;IAGf,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,gBAAgB,CAAC;IACxE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACtF,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,GAAG,SAAS,KAAK,eAAe,GAAG,SAAS,CAAC;IAC5F,gBAAgB,CAAC,EAAE,CACjB,OAAO,EAAE,cAAc,EACvB,gBAAgB,CAAC,EAAE,wBAAwB,EAC3C,YAAY,CAAC,EAAE,aAAa,KACzB,aAAa,CAAC;IACnB,aAAa,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC;IACpD,cAAc,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC;IACrD,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;IAC5C,WAAW,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C;;;;;OAKG;IACH,eAAe,EAAE,eAAe,CAAC;IACjC;;;;OAIG;IACH,uBAAuB,EAAE,uBAAuB,CAAC;IACjD;;;;;OAKG;IACH,sBAAsB,EAAE,sBAAsB,CAAC;CAChD;AAED;;;;GAIG;AACH,eAAO,MAAM,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,GAAG,SAAS,CAAuD,CAAC;AAKvH;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,SAAS,CAAC;IACpB,yDAAyD;IACzD,qBAAqB,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAC7D,oEAAoE;IACpE,0BAA0B,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;IAC1G,6DAA6D;IAC7D,eAAe,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,wBAAgB,UAAU,CAAC,EACzB,QAAQ,EACR,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,GAChB,EAAE,eAAe,GAAG,KAAK,CAAC,YAAY,CAsgBtC"}