@wildo-ai/saas-frontend-lib 1.1.9 → 1.1.11

package/dist/esm/components/settings/SettingsHub.js

@@ -17,13 +17,13 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * exactly what a tablist is for.
  *
  * Mounted by `NavigationContentRenderer` for `NavigationContentType.SETTINGS_HUB`
- * (always in the overlay zone). The `sectionRef` prop pre-selects the open
- * section and is kept in sync so URL-driven section changes re-select the rail.
+ * (always in the overlay zone). The `sectionRef` prop names the open
+ * section: it wins whenever the gated config admits it (see `active` below).
  */
-import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import React, { useCallback, useEffect, useMemo, useRef } from 'react';
 import { Link, useNavigate } from 'react-router-dom';
 import { ViewportBreakpoint } from '@wildo-ai/zod-decorators';
-import { CorePresetNames, FrontendComponentType, SelectableVariant, UIBehavior } from '@wildo-ai/presets-components-models';
+import { CorePresetNames, FrontendComponentType, SelectableVariant, TypographyVariant, UIBehavior } from '@wildo-ai/presets-components-models';
 import { Tabs, TabsList, TabsTrigger, TabsContent } from '../../components/sections/tabs.js';
 import { Separator } from '../../components/layout/separator.js';
 import { Button, ButtonVariants_Variant } from '../../components/actions/button.js';
@@ -39,6 +39,10 @@ import { AppPage_BillingSettings } from './AppPage_BillingSettings.js';
 import { ExternalProvider_Connection_OwnerScope } from '@wildo-ai/external-connectors-models';
 import { AppPage_ConnectedAccountsSettings } from './AppPage_ConnectedAccountsSettings.js';
 import { AppPage_AgentWorkOverrideRateSettings } from './AppPage_AgentWorkOverrideRateSettings.js';
+import { AppPage_AutonomousAgentsSettings } from './AppPage_AutonomousAgentsSettings.js';
+import { AppPage_ModelCostBreakdownSettings, ModelCostBreakdownScope } from './AppPage_ModelCostBreakdownSettings.js';
+import { AppPage_RepresentativeActivitySettings } from './AppPage_RepresentativeActivitySettings.js';
+import { AppPage_AgentWorkEvaluationExportSettings } from './AppPage_AgentWorkEvaluationExportSettings.js';
 import { ComponentRegistryService } from '../../core/components-registry/component-registry.frontend.service.js';
 import { ComponentNotInjected } from '../../core/components-registry/ComponentNotInjected.js';
 import { SettingsPanelRef, SettingsSectionTargetKind } from '../../core/config/settings-hub.frontend.schemas.js';
@@ -46,6 +50,9 @@ import { CommonRoutePaths } from '../../core/runtime/routes.frontend.definitions
 import { useVisibleSettingsHubConfig } from '../../core/config/useVisibleSettingsHubConfig.js';
 import { useI18n } from '../../core/i18n/useI18n.js';
 import { FeatureGate } from '../../core/features/FeatureGate.js';
+import { useFeatureAvailability } from '../../core/features/useFeatureAvailability.js';
+import { Alert, AlertDescription } from '../../components/overlays/containers/alert.js';
+import { FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';
 import { LoadingGate } from '../../core/loading/LoadingGate.js';
 import { SettingsResourceOperationPanel } from './SettingsResourceOperationPanel.js';
 // ──────────────────────────────────────────────────────────────
@@ -59,6 +66,22 @@ function sectionsForCategory(config, categoryRef) {
         .filter(section => section.categoryRef === categoryRef)
         .sort((a, b) => (a.order ?? 0) - (b.order ?? 0));
 }
+/**
+ * A category's rail in sub-category blocks (#2329): its ungrouped sections first, with no heading, then each declared
+ * group in order with its sections. A group no placed section names draws nothing, and a section naming an undeclared
+ * group (refused by the DEV verifier) is drawn with the ungrouped ones rather than lost.
+ */
+function railBlocks(category, sections) {
+    const groups = [...(category.groups ?? [])].sort((a, b) => (a.order ?? 0) - (b.order ?? 0));
+    const declared = new Set(groups.map(group => group.ref));
+    const ungrouped = sections.filter(section => section.groupRef === undefined || !declared.has(section.groupRef));
+    return [
+        ...(ungrouped.length > 0 ? [{ sections: ungrouped }] : []),
+        ...groups
+            .map(group => ({ group, sections: sections.filter(section => section.groupRef === group.ref) }))
+            .filter(block => block.sections.length > 0),
+    ];
+}
 /** Resolve the section to open: requested → config default → first section. */
 function resolveActiveSection(config, sectionRef) {
     if (sectionRef && config.sections.some(section => section.ref === sectionRef))
@@ -91,6 +114,17 @@ function SettingsEnginePanel({ panelRef }) {
             return _jsx(AppPage_ConnectedAccountsSettings, { ownerScope: ExternalProvider_Connection_OwnerScope.ORGANIZATION });
         case SettingsPanelRef.AGENT_WORK_OVERRIDE_RATE:
             return _jsx(AppPage_AgentWorkOverrideRateSettings, {});
+        case SettingsPanelRef.AUTONOMOUS_AGENTS:
+            return _jsx(AppPage_AutonomousAgentsSettings, {});
+        case SettingsPanelRef.MODEL_COST_BREAKDOWN:
+            // Whose cost is passed EXPLICITLY at both sites, as for connected accounts above.
+            return _jsx(AppPage_ModelCostBreakdownSettings, { scope: ModelCostBreakdownScope.APPLICATION });
+        case SettingsPanelRef.REPRESENTING_ORGANIZATION_MODEL_COST_BREAKDOWN:
+            return _jsx(AppPage_ModelCostBreakdownSettings, { scope: ModelCostBreakdownScope.REPRESENTING_ORGANIZATION });
+        case SettingsPanelRef.REPRESENTATIVE_ACTIVITY:
+            return _jsx(AppPage_RepresentativeActivitySettings, {});
+        case SettingsPanelRef.AGENT_WORK_EVALUATION_EXPORT:
+            return _jsx(AppPage_AgentWorkEvaluationExportSettings, {});
     }
 }
 function SettingsTargetRenderer({ target, resolveSubTabLabel, subTabRef, onSubTabChange, }) {
@@ -148,7 +182,28 @@ const RAIL_ITEM_CLASSES = "inline-flex w-full cursor-pointer items-center justif
 export function SettingsHub({ sectionRef, subTabRef }) {
     const config = useVisibleSettingsHubConfig();
     const categories = useMemo(() => orderedCategories(config), [config]);
-    const [active, setActive] = useState(() => resolveActiveSection(config, sectionRef));
+    /*
+     * The open section is DERIVED from the URL and the gated config, on every render. It is not
+     * state, and it was until 2026-10-02 (#2190), when it held a fallback that outlived its reason.
+     *
+     * The gated config arrives in stages: on a cold load the first answer is built before the
+     * organization's features resolve, so a feature-gated destination (`sso`, `scim`) is absent from
+     * it. The old state machine resolved `/settings/sso` against that first config, fell back to the
+     * first section (Profile), then kept Profile when `sso` joined the config, because Profile was
+     * still selectable. Its URL effect did not help, since `sectionRef` never changed. A deep link or
+     * a reload of a gated destination therefore opened the wrong pane for good, while a rail click
+     * opened the right one.
+     *
+     * Deriving it removes the "current choice" that a fallback could become. The URL can stand for
+     * the person's choice because the rail's links write it (`to` + `replace`) and nothing else
+     * selects a section, so `sectionRef` is always the section the person last asked for. Whenever it
+     * is selectable it is the open section, whatever order the gating signals land in. When it is not
+     * (yet) selectable, the default stands in, and the requested section takes over the moment the
+     * config admits it. The earlier concern that kept `config` out of the sync effect, config
+     * identity churning and resetting a rail click, has no purchase here: a click changes
+     * `sectionRef` itself, so a re-derivation can only re-confirm it.
+     */
+    const active = useMemo(() => resolveActiveSection(config, sectionRef), [config, sectionRef]);
     const routerNavigate = useNavigate();
     /*
      * In-hub navigation WRITES the URL. Until 2026-09-17 it did not, at either level: the rail set
@@ -167,8 +222,8 @@ export function SettingsHub({ sectionRef, subTabRef }) {
      * only a user gesture calls these, and the reconciler emits no navigation of its own.
      */
     // The SECTION half of this used to be `navigateToSection`, which the rail's triggers called. The
-    // rail's links now carry `to` + `replace` themselves, and `active` is driven by the URL-sync
-    // effect below — so the helper had no caller left. The SUB-TAB half stays: those really are tabs.
+    // rail's links now carry `to` + `replace` themselves, and `active` is derived from the URL
+    // (see its declaration above) — so the helper had no caller left. The SUB-TAB half stays: those really are tabs.
     const handleSubTabChange = useCallback((nextSubTabRef) => {
         if (!active)
             return;
@@ -201,13 +256,16 @@ export function SettingsHub({ sectionRef, subTabRef }) {
      * theme dresses it in. The recipe keys on `data-state`, which each link sets from `active`.
      */
     const railItemRecipe = getRecipe(UIBehavior.SELECTABLE, SelectableVariant.FILLED);
+    const eyebrowRecipe = getRecipe(UIBehavior.TYPOGRAPHY, TypographyVariant.EYEBROW);
+    // A sub-category heading (#2329) sits one step below its category's eyebrow.
+    const groupHeadingRecipe = getRecipe(UIBehavior.TYPOGRAPHY, TypographyVariant.LABEL);
     const { renderIcon } = useIconRegistry();
     const isMobile = UIConfig?.currentBreakpoint === ViewportBreakpoint.MOBILE;
     const mobileShowsSection = isMobile && Boolean(sectionRef);
     const handleBackToSections = useCallback(() => {
         routerNavigate(CommonRoutePaths.settings, { replace: true });
     }, [routerNavigate]);
-    const { tComponent, tSettingsHubCategory, tSettingsHubSection, isReady } = useI18n({
+    const { tComponent, tSettingsHubCategory, tSettingsHubGroup, tSettingsHubSection, isReady } = useI18n({
         component: FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB,
     });
     // Hub chrome labels (title, rail aria-label) read from the scoped component
@@ -223,19 +281,6 @@ export function SettingsHub({ sectionRef, subTabRef }) {
         const section = config.sections.find(candidate => candidate.ref === active);
         return section ? tSettingsHubSection(section.ref, section.label) : undefined;
     }, [config.sections, active, tSettingsHubSection]);
-    // Keep the rail in sync with URL-driven section changes (deep-link / browser
-    // nav). Keyed on `sectionRef` ALONE — deliberately not on `config` as well.
-    // The gated config is derived from live signals (scope, roles, features,
-    // runtime capabilities), so its identity churns independently of its content;
-    // with `config` in the deps this ran after essentially every render and
-    // re-asserted the requested-or-default section, which overwrote the section
-    // the user had just clicked in the rail. The rail then looked inert: the
-    // click did select, and the effect immediately put it back.
-    useEffect(() => {
-        if (!sectionRef)
-            return;
-        setActive(previous => (previous === sectionRef ? previous : sectionRef));
-    }, [sectionRef]);
     /*
      * Bring the OPEN section into view when it is not — and only then.
      *
@@ -261,18 +306,6 @@ export function SettingsHub({ sectionRef, subTabRef }) {
             return;
         activeRailItemRef.current?.scrollIntoView({ block: 'nearest', inline: 'nearest' });
     }, [active]);
-    // Adopt a section from the config ONLY when the current one is not (or is no
-    // longer) selectable — first resolve after an async gating signal lands, or a
-    // section disappearing because the user's roles/features changed. Anything
-    // broader would re-run the reset described above.
-    useEffect(() => {
-        setActive(previous => previous && config.sections.some(section => section.ref === previous)
-            ? previous
-            : resolveActiveSection(config, sectionRef));
-        // `sectionRef` is read as the fallback preference only; following ITS
-        // changes is the effect above.
-        // eslint-disable-next-line react-hooks/exhaustive-deps
-    }, [config]);
     /*
      * Gate on label readiness so the hub chrome never flashes raw key paths — copy is pipeline-owned
      * with no inline fallback, matching the hosted panels.
@@ -295,26 +328,43 @@ export function SettingsHub({ sectionRef, subTabRef }) {
                                 if (sections.length === 0)
                                     return null;
                                 const categoryLabelId = `settings-hub-category-${category.ref}`;
-                                return (_jsxs(React.Fragment, { children: [index > 0 && _jsx(Separator, { className: "my-item" }), _jsx("div", { id: categoryLabelId, className: "px-card-sm py-card-sm text-xs font-medium uppercase tracking-wider text-muted-foreground", children: tSettingsHubCategory(category.ref, category.label) }), _jsx("div", { role: "group", "aria-labelledby": categoryLabelId, children: sections.map(section => {
-                                                const isActive = section.ref === active;
-                                                return (
-                                                // `data-ref` = i18n-independent automation hook (see sub-tabs above).
-                                                _jsx(Link, { 
-                                                    // Only the OPEN item is tracked — the effect above needs one element, and a
-                                                    // ref on all thirty would be thirty callbacks re-created every render.
-                                                    ref: isActive ? activeRailItemRef : undefined, to: `${CommonRoutePaths.settings}/${section.ref}`, replace: true, "data-ref": section.ref, "aria-current": isActive ? 'page' : undefined, "data-state": isActive ? 'active' : 'inactive', className: cn(RAIL_ITEM_CLASSES, 
-                                                    // Composed part by part, exactly as the tab trigger does — `getRecipe`
-                                                    // returns a STRUCTURE (base / states / motion), not a class string, and
-                                                    // handing the object to `cn()` silently yields nothing. That is how the
-                                                    // first cut of this lost the selected fill while every other class held.
-                                                    railItemRecipe.base, railItemRecipe.states.focus, railItemRecipe.states.selected, railItemRecipe.motion.transition), children: tSettingsHubSection(section.ref, section.label) }, section.ref));
-                                            }) })] }, category.ref));
+                                return (_jsxs(React.Fragment, { children: [index > 0 && _jsx(Separator, { className: "my-item" }), _jsx("div", { id: categoryLabelId, className: cn("px-card-sm py-card-sm", eyebrowRecipe.base), children: tSettingsHubCategory(category.ref, category.label) }), _jsx("div", { role: "group", "aria-labelledby": categoryLabelId, children: railBlocks(category, sections).map(block => (_jsxs(React.Fragment, { children: [block.group && (_jsx("div", { id: `${categoryLabelId}-group-${block.group.ref}`, className: cn('px-card-sm pt-card-sm pb-item-xs text-muted-foreground', groupHeadingRecipe.base), children: tSettingsHubGroup(category.ref, block.group.ref, block.group.label) })), _jsx("div", { role: block.group ? 'group' : undefined, "aria-labelledby": block.group ? `${categoryLabelId}-group-${block.group.ref}` : undefined, children: block.sections.map(section => {
+                                                            const isActive = section.ref === active;
+                                                            return (
+                                                            // `data-ref` = i18n-independent automation hook (see sub-tabs above).
+                                                            _jsxs(Link, { 
+                                                                // Only the OPEN item is tracked — the effect above needs one element, and a
+                                                                // ref on all thirty would be thirty callbacks re-created every render.
+                                                                ref: isActive ? activeRailItemRef : undefined, to: `${CommonRoutePaths.settings}/${section.ref}`, replace: true, "data-ref": section.ref, "aria-current": isActive ? 'page' : undefined, "data-state": isActive ? 'active' : 'inactive', className: cn(RAIL_ITEM_CLASSES, 
+                                                                // Composed part by part, exactly as the tab trigger does — `getRecipe`
+                                                                // returns a STRUCTURE (base / states / motion), not a class string, and
+                                                                // handing the object to `cn()` silently yields nothing. That is how the
+                                                                // first cut of this lost the selected fill while every other class held.
+                                                                railItemRecipe.base, railItemRecipe.states.focus, railItemRecipe.states.selected, railItemRecipe.motion.transition), children: [section.icon && renderIcon(section.icon, { size: IconSize.SM }), tSettingsHubSection(section.ref, section.label)] }, section.ref));
+                                                        }) })] }, block.group?.ref ?? '__ungrouped'))) })] }, category.ref));
                             }) }), _jsx("div", { className: cn('min-w-0 flex-1 overflow-y-auto p-card-lg', isMobile && !mobileShowsSection && 'hidden'), children: config.sections.filter(section => section.ref === active).map(section => (_jsx(React.Fragment, { children: section.entitlementFeatureId ? (
                                 // Section SURVIVED because the app OFFERS this feature
                                 // (`runtimeAvailability` capability = plan-independent
                                 // `isFeatureOffered`). Render its body through the entitlement gate:
                                 // entitled → the config surface; offered-but-not-entitled → the
                                 // policy-driven upgrade/add-on prompt (never a silent disappearance).
-                                _jsx(FeatureGate, { featureId: section.entitlementFeatureId, children: _jsx(SettingsTargetRenderer, { target: section.target, resolveSubTabLabel: tSettingsHubSection, subTabRef: section.ref === active ? subTabRef : undefined, onSubTabChange: handleSubTabChange }) })) : (_jsx(SettingsTargetRenderer, { target: section.target, resolveSubTabLabel: tSettingsHubSection, subTabRef: section.ref === active ? subTabRef : undefined, onSubTabChange: handleSubTabChange })) }, section.ref))) })] })] }) }));
+                                _jsx(EntitlementGatedSettingsSection, { featureId: section.entitlementFeatureId, keptConfigurationNotice: t('entitlementLapsedConfigurationKept'), children: _jsx(SettingsTargetRenderer, { target: section.target, resolveSubTabLabel: tSettingsHubSection, subTabRef: section.ref === active ? subTabRef : undefined, onSubTabChange: handleSubTabChange }) })) : (_jsx(SettingsTargetRenderer, { target: section.target, resolveSubTabLabel: tSettingsHubSection, subTabRef: section.ref === active ? subTabRef : undefined, onSubTabChange: handleSubTabChange })) }, section.ref))) })] })] }) }));
+}
+/**
+ * A settings section whose content the organization must be ENTITLED to (#2367).
+ *
+ * Not entitled: the upgrade prompt replaces the configuration surface, as before, and a notice above it
+ * says what happened to whatever was configured there. The backend keeps that configuration and stops
+ * applying it while the entitlement is missing (single sign-on stops being required, a directory may
+ * only read and remove access, security events stop being exported, webhooks stop being delivered),
+ * and it applies again on its own once the entitlement returns. Without the notice an administrator
+ * whose plan lapsed would read the prompt as "this was never set up", or as "it was deleted".
+ *
+ * A feature whose unavailability behaviour is HIDE renders nothing, notice included.
+ */
+function EntitlementGatedSettingsSection({ featureId, keptConfigurationNotice, children }) {
+    const availability = useFeatureAvailability(featureId);
+    const showsNotice = !availability.isAvailable && availability.behavior !== FeatureUnavailabilityBehavior.HIDE;
+    return (_jsxs("div", { className: "space-y-card", children: [showsNotice && (_jsx(Alert, { variant: "info", children: _jsx(AlertDescription, { children: keptConfigurationNotice }) })), _jsx(FeatureGate, { featureId: featureId, children: children })] }));
 }
 //# sourceMappingURL=SettingsHub.js.map

package/dist/esm/components/settings/SettingsHub.js.map

@@ -1 +1 @@
-{"version":3,"file":"SettingsHub.js","sourceRoot":"","sources":["../../../../../src/components/settings/SettingsHub.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAC5H,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AACxG,OAAO,EAAE,SAAS,EAAE,MAAM,iDAAiD,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AAChH,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2EAA2E,CAAC;AACrH,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,sCAAsC,CAAC;AAC9F,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,kFAAkF,CAAC;AAC5H,OAAO,EAAE,oBAAoB,EAAE,MAAM,mEAAmE,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAQ5H,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,2BAA2B,EAAE,MAAM,6DAA6D,CAAC;AAC1G,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAC3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAElF,iEAAiE;AACjE,iBAAiB;AACjB,iEAAiE;AAEjE,SAAS,iBAAiB,CAAC,MAAiC;IAC1D,OAAO,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAiC,EAAE,WAAmB;IACjF,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC;SACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,+EAA+E;AAC/E,SAAS,oBAAoB,CAAC,MAAiC,EAAE,UAAmB;IAClF,IAAI,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACjG,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1G,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AACjC,CAAC;AAED,iEAAiE;AACjE,yEAAyE;AACzE,kDAAkD;AAClD,iEAAiE;AAEjE,SAAS,mBAAmB,CAAC,EAAE,QAAQ,EAAkC;IACvE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,gBAAgB,CAAC,QAAQ;YAC5B,OAAO,KAAC,wBAAwB,KAAG,CAAC;QACtC,KAAK,gBAAgB,CAAC,UAAU;YAC9B,OAAO,KAAC,0BAA0B,KAAG,CAAC;QACxC,KAAK,gBAAgB,CAAC,WAAW;YAC/B,OAAO,KAAC,2BAA2B,KAAG,CAAC;QACzC,KAAK,gBAAgB,CAAC,OAAO;YAC3B,OAAO,KAAC,uBAAuB,KAAG,CAAC;QACrC,KAAK,gBAAgB,CAAC,kBAAkB;YACtC,OAAO,KAAC,iCAAiC,IAAC,UAAU,EAAE,sCAAsC,CAAC,IAAI,GAAI,CAAC;QACxG,KAAK,gBAAgB,CAAC,+BAA+B;YACnD,4FAA4F;YAC5F,+FAA+F;YAC/F,wCAAwC;YACxC,OAAO,KAAC,iCAAiC,IAAC,UAAU,EAAE,sCAAsC,CAAC,YAAY,GAAI,CAAC;QAChH,KAAK,gBAAgB,CAAC,wBAAwB;YAC5C,OAAO,KAAC,qCAAqC,KAAG,CAAC;IACrD,CAAC;AACH,CAAC;AAKD,SAAS,sBAAsB,CAAC,EAC9B,MAAM,EACN,kBAAkB,EAClB,SAAS,EACT,cAAc,GAMf;IACC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,yBAAyB,CAAC,YAAY;YACzC,OAAO,KAAC,mBAAmB,IAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAI,CAAC;QAC5D,KAAK,yBAAyB,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChD,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,CACtD,MAAM,CAAC,YAAY,EACnB,eAAe,CAAC,OAAO,CACxB,CAAC;YACF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,OAAO,KAAC,oBAAoB,IAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,GAAI,CAAC;YAC1G,CAAC;YACD,OAAO,CACL,KAAC,KAAK,CAAC,QAAQ,IAAC,QAAQ,EAAE,cAAK,SAAS,EAAC,+DAA+D,iBAAa,MAAM,GAAG,YAC5H,KAAC,eAAe,KAAG,GACJ,CAClB,CAAC;QACJ,CAAC;QACD,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO,CACL,KAAC,8BAA8B,IAC7B,YAAY,EAAE,MAAM,CAAC,YAAY,EACjC,SAAS,EAAE,MAAM,CAAC,SAAS,EAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,GACzC,CACH,CAAC;QACJ,KAAK,yBAAyB,CAAC,QAAQ;YACrC,OAAO,CACL,KAAC,eAAe,IACd,MAAM,EAAE,MAAM,EACd,kBAAkB,EAAE,kBAAkB,EACtC,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,cAAc,GAC9B,CACH,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,EACvB,MAAM,EACN,kBAAkB,EAClB,SAAS,EACT,cAAc,GAMf;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC;QACpE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,CACL,MAAC,IAAI,IAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,aAChE,KAAC,QAAQ,cACN,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,iEAAiE;gBACjE,2DAA2D;gBAC3D,KAAC,WAAW,IAAkB,KAAK,EAAE,MAAM,CAAC,GAAG,cAAY,MAAM,CAAC,GAAG,YAClE,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,IAD7B,MAAM,CAAC,GAAG,CAEd,CACf,CAAC,GACO,EACV,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAC5B,KAAC,WAAW,IAAkB,KAAK,EAAE,MAAM,CAAC,GAAG,YAG7C,KAAC,sBAAsB,IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,GAAI,IAHzE,MAAM,CAAC,GAAG,CAId,CACf,CAAC,IACG,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,iBAAiB,GACrB,yOAAyO,CAAC;AAa5O,MAAM,UAAU,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,EAAoB;IACrE,MAAM,MAAM,GAAG,2BAA2B,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAqB,GAAG,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACzG,MAAM,cAAc,GAAG,WAAW,EAAE,CAAC;IAErC;;;;;;;;;;;;;;;OAeG;IACH,iGAAiG;IACjG,6FAA6F;IAC7F,kGAAkG;IAElG,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,aAAqB,EAAE,EAAE;QAC/D,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,cAAc,CAAC,GAAG,gBAAgB,CAAC,QAAQ,IAAI,MAAM,IAAI,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;IACxC;;;;OAIG;IACH,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,QAAQ,EAAE,iBAAiB,KAAK,kBAAkB,CAAC,MAAM,CAAC;IAC3E,MAAM,kBAAkB,GAAG,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAE3D,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5C,cAAc,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAGrB,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACjF,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IACH,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,CAAC,GAAG,WAAW,CACnB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,EAChF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,uFAAuF;IACvF,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QAC5E,OAAO,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAEnD,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,4DAA4D;IAC5D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3E,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,iBAAiB,GAAG,MAAM,CAA2B,IAAI,CAAC,CAAC;IACjE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACrF,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,kDAAkD;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,QAAQ,CAAC,EAAE,CACnB,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC;YACnE,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAC7C,CAAC;QACF,sEAAsE;QACtE,+BAA+B;QAC/B,uDAAuD;IACzD,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb;;;;;;;;;;;;;OAaG;IACH,OAAO,CACL,KAAC,WAAW,IAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,YAS9D,eAAK,SAAS,EAAC,sCAAsC,aACrD,kBAAQ,SAAS,EAAC,8DAA8D,aAC7E,kBAAkB,IAAI,CACrB,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,KAAK,EACrC,IAAI,EAAE,UAAU,CAAC,OAAO,gBACZ,CAAC,CAAC,gBAAgB,CAAC,EAC/B,OAAO,EAAE,oBAAoB,YAE5B,UAAU,CAAC,qBAAqB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,GACvD,CACV,EAGD,aAAI,SAAS,EAAC,iDAAiD,YAC5D,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAChE,IACE,EACT,eAAK,SAAS,EAAC,qBAAqB,aA6BlC,4BACc,CAAC,CAAC,kBAAkB,CAAC,EACjC,SAAS,EAAE,EAAE,CACX,oCAAoC;4BACpC,yFAAyF;4BACzF,kEAAkE;4BAClE,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,wBAAwB,EACrD,kBAAkB,IAAI,QAAQ,CAC/B,YAEA,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;gCAClC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;gCAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oCAAE,OAAO,IAAI,CAAC;gCACvC,MAAM,eAAe,GAAG,yBAAyB,QAAQ,CAAC,GAAG,EAAE,CAAC;gCAChE,OAAO,CACL,MAAC,KAAK,CAAC,QAAQ,eACZ,KAAK,GAAG,CAAC,IAAI,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,GAAG,EAG/C,cACE,EAAE,EAAE,eAAe,EACnB,SAAS,EAAC,0FAA0F,YAEnG,oBAAoB,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAC/C,EACN,cAAK,IAAI,EAAC,OAAO,qBAAkB,eAAe,YAC/C,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gDACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC;gDACxC,OAAO;gDACL,sEAAsE;gDACtE,KAAC,IAAI;oDAEH,4EAA4E;oDAC5E,uEAAuE;oDACvE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,EAC7C,EAAE,EAAE,GAAG,gBAAgB,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,EACjD,OAAO,oBACG,OAAO,CAAC,GAAG,kBACP,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,gBAC/B,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C,SAAS,EAAE,EAAE,CACX,iBAAiB;oDACjB,uEAAuE;oDACvE,wEAAwE;oDACxE,wEAAwE;oDACxE,yEAAyE;oDACzE,cAAc,CAAC,IAAI,EACnB,cAAc,CAAC,MAAM,CAAC,KAAK,EAC3B,cAAc,CAAC,MAAM,CAAC,QAAQ,EAC9B,cAAc,CAAC,MAAM,CAAC,UAAU,CACjC,YAEA,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,IArB3C,OAAO,CAAC,GAAG,CAsBX,CACR,CAAC;4CACJ,CAAC,CAAC,GACE,KAzCa,QAAQ,CAAC,GAAG,CA0ChB,CAClB,CAAC;4BACJ,CAAC,CAAC,GACE,EACN,cACE,SAAS,EAAE,EAAE,CACX,0CAA0C,EAC1C,QAAQ,IAAI,CAAC,kBAAkB,IAAI,QAAQ,CAC5C,YAOA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CACxE,KAAC,KAAK,CAAC,QAAQ,cACZ,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;gCAC9B,uDAAuD;gCACvD,uDAAuD;gCACvD,qEAAqE;gCACrE,gEAAgE;gCAChE,sEAAsE;gCACtE,KAAC,WAAW,IAAC,SAAS,EAAE,OAAO,CAAC,oBAAoB,YAClD,KAAC,sBAAsB,IACrB,MAAM,EAAE,OAAO,CAAC,MAAM,EACtB,kBAAkB,EAAE,mBAAmB,EACvC,SAAS,EAAE,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACzD,cAAc,EAAE,kBAAkB,GAClC,GACU,CACf,CAAC,CAAC,CAAC,CACF,KAAC,sBAAsB,IACrB,MAAM,EAAE,OAAO,CAAC,MAAM,EACtB,kBAAkB,EAAE,mBAAmB,EACvC,SAAS,EAAE,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACzD,cAAc,EAAE,kBAAkB,GAClC,CACH,IAtBkB,OAAO,CAAC,GAAG,CAuBf,CAClB,CAAC,GACE,IACF,IACF,GACQ,CACf,CAAC;AACJ,CAAC","sourcesContent":["/**\n * SettingsHub — the unified settings surface.\n *\n * Renders the declarative `ResolvedSettingsHubConfig` as a vertical NAVIGATION rail beside a\n * content panel. Categories become labelled groups of links, each destination addressed by its own\n * URL. A section's `target` resolves to a framework panel, an auto-rendered resource surface, a\n * custom component, or a set of horizontal sub-tabs.\n *\n * The rail was a `Tabs`/`TabsList` until 2026-09-19, chosen so that section state and keyboard\n * roving came from the primitive rather than being hand-rolled. It became navigation because a\n * tablist switches panels WITHIN a view while these are thirty destinations that each own a URL —\n * and the keyboard argument dissolves rather than transferring: roving tabindex is a tablist\n * requirement, and navigation wants ordinary Tab order through links. See the rail's own comment.\n *\n * The SUB-TABS are still `Tabs`, correctly: Configuration/Connections inside one destination is\n * exactly what a tablist is for.\n *\n * Mounted by `NavigationContentRenderer` for `NavigationContentType.SETTINGS_HUB`\n * (always in the overlay zone). The `sectionRef` prop pre-selects the open\n * section and is kept in sync so URL-driven section changes re-select the rail.\n */\nimport React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Link, useNavigate } from 'react-router-dom';\nimport { ViewportBreakpoint } from '@wildo-ai/zod-decorators';\nimport { CorePresetNames, FrontendComponentType, SelectableVariant, UIBehavior } from '@wildo-ai/presets-components-models';\nimport { Tabs, TabsList, TabsTrigger, TabsContent } from '~wildo-frontend-lib/components/sections/tabs';\nimport { Separator } from '~wildo-frontend-lib/components/layout/separator';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ButtonSize } from '@wildo-ai/presets-components-models';\nimport { useIconRegistry } from '~wildo-frontend-lib/core/icons/useIconRegistry';\nimport { IconSize, StandardIconReference } from '~wildo-frontend-lib/core/icons/icon-registry.frontend.schemas';\nimport { useUI } from '~wildo-frontend-lib/core/ui/useUI';\nimport { cn } from '~wildo-frontend-lib/core/ui/cn';\nimport { AppPage_SecuritySettings } from '~wildo-frontend-lib/components/auth/admin-config/AppPage_SecuritySettings';\nimport { AppPage_AppearanceSettings } from './AppPage_AppearanceSettings';\nimport { AppPage_InvitationsSettings } from './AppPage_InvitationsSettings';\nimport { AppPage_BillingSettings } from './AppPage_BillingSettings';\nimport { ExternalProvider_Connection_OwnerScope } from '@wildo-ai/external-connectors-models';\nimport { AppPage_ConnectedAccountsSettings } from './AppPage_ConnectedAccountsSettings';\nimport { AppPage_AgentWorkOverrideRateSettings } from './AppPage_AgentWorkOverrideRateSettings';\nimport { ComponentRegistryService } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.service';\nimport { ComponentNotInjected } from '~wildo-frontend-lib/core/components-registry/ComponentNotInjected';\nimport { SettingsPanelRef, SettingsSectionTargetKind } from '~wildo-frontend-lib/core/config/settings-hub.frontend.schemas';\nimport type {\n  ResolvedSettingsHubConfig,\n  SettingsCategory,\n  SettingsSection,\n  SettingsSectionTarget,\n  SettingsSubTabsTarget,\n} from '~wildo-frontend-lib/core/config/settings-hub.frontend.schemas';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { useVisibleSettingsHubConfig } from '~wildo-frontend-lib/core/config/useVisibleSettingsHubConfig';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { FeatureGate } from '~wildo-frontend-lib/core/features/FeatureGate';\nimport { LoadingGate } from '~wildo-frontend-lib/core/loading/LoadingGate';\nimport { SettingsResourceOperationPanel } from './SettingsResourceOperationPanel';\n\n// ──────────────────────────────────────────────────────────────\n// Config helpers\n// ──────────────────────────────────────────────────────────────\n\nfunction orderedCategories(config: ResolvedSettingsHubConfig): SettingsCategory[] {\n  return [...config.categories].sort((a, b) => (a.order ?? 0) - (b.order ?? 0));\n}\n\nfunction sectionsForCategory(config: ResolvedSettingsHubConfig, categoryRef: string): SettingsSection[] {\n  return config.sections\n    .filter(section => section.categoryRef === categoryRef)\n    .sort((a, b) => (a.order ?? 0) - (b.order ?? 0));\n}\n\n/** Resolve the section to open: requested → config default → first section. */\nfunction resolveActiveSection(config: ResolvedSettingsHubConfig, sectionRef?: string): string | undefined {\n  if (sectionRef && config.sections.some(section => section.ref === sectionRef)) return sectionRef;\n  if (config.defaultSectionRef && config.sections.some(section => section.ref === config.defaultSectionRef)) {\n    return config.defaultSectionRef;\n  }\n  return config.sections[0]?.ref;\n}\n\n// ──────────────────────────────────────────────────────────────\n// Target rendering (function declarations → hoisted for mutual recursion\n// between a SUB_TABS target and its leaf targets)\n// ──────────────────────────────────────────────────────────────\n\nfunction SettingsEnginePanel({ panelRef }: { panelRef: SettingsPanelRef }): React.JSX.Element {\n  switch (panelRef) {\n    case SettingsPanelRef.SECURITY:\n      return <AppPage_SecuritySettings />;\n    case SettingsPanelRef.APPEARANCE:\n      return <AppPage_AppearanceSettings />;\n    case SettingsPanelRef.INVITATIONS:\n      return <AppPage_InvitationsSettings />;\n    case SettingsPanelRef.BILLING:\n      return <AppPage_BillingSettings />;\n    case SettingsPanelRef.CONNECTED_ACCOUNTS:\n      return <AppPage_ConnectedAccountsSettings ownerScope={ExternalProvider_Connection_OwnerScope.USER} />;\n    case SettingsPanelRef.ORGANIZATION_CONNECTED_ACCOUNTS:\n      // The scope is passed EXPLICITLY at both sites rather than left to the component's default.\n      // A default is invisible at the call site, and the one thing a reader must be able to see here\n      // is whose account each panel connects.\n      return <AppPage_ConnectedAccountsSettings ownerScope={ExternalProvider_Connection_OwnerScope.ORGANIZATION} />;\n    case SettingsPanelRef.AGENT_WORK_OVERRIDE_RATE:\n      return <AppPage_AgentWorkOverrideRateSettings />;\n  }\n}\n\n/** Resolves a display label for a section/sub-tab ref, falling back to the authored label. */\ntype SettingsLabelResolver = (ref: string, fallbackLabel: string) => string;\n\nfunction SettingsTargetRenderer({\n  target,\n  resolveSubTabLabel,\n  subTabRef,\n  onSubTabChange,\n}: {\n  target: SettingsSectionTarget;\n  resolveSubTabLabel: SettingsLabelResolver;\n  subTabRef?: string;\n  onSubTabChange?: (subTabRef: string) => void;\n}): React.JSX.Element {\n  switch (target.kind) {\n    case SettingsSectionTargetKind.ENGINE_PANEL:\n      return <SettingsEnginePanel panelRef={target.panelRef} />;\n    case SettingsSectionTargetKind.CUSTOM_COMPONENT: {\n      const CustomComponent = ComponentRegistryService.resolve(\n        target.componentRef,\n        CorePresetNames.DEFAULT,\n      );\n      if (!CustomComponent) {\n        return <ComponentNotInjected componentType={target.componentRef} componentName={target.componentRef} />;\n      }\n      return (\n        <React.Suspense fallback={<div className=\"h-8 animate-pulse motion-reduce:animate-none bg-muted rounded\" aria-hidden=\"true\" />}>\n          <CustomComponent />\n        </React.Suspense>\n      );\n    }\n    case SettingsSectionTargetKind.RESOURCE_OPERATION:\n      return (\n        <SettingsResourceOperationPanel\n          resourceType={target.resourceType}\n          operation={target.operation}\n          operationVariant={target.operationVariant}\n        />\n      );\n    case SettingsSectionTargetKind.SUB_TABS:\n      return (\n        <SettingsSubTabs\n          target={target}\n          resolveSubTabLabel={resolveSubTabLabel}\n          subTabRef={subTabRef}\n          onSubTabChange={onSubTabChange}\n        />\n      );\n  }\n}\n\n/**\n * The sub-tab strip inside one section.\n *\n * The active tab is URL-DRIVEN since 2026-09-17. It used to be `useState(target.subTabs[0]?.ref)` —\n * local state that read nothing from the URL — so all twenty-one sub-tab panels in the shipped\n * catalogue were unaddressable: every link to a sub-tabbed section opened its FIRST tab, and\n * \"Single sign-on → Connections\" could not be sent to anybody. That contradicted the hub's own\n * contract, which is that the URL is its single source of truth, and it made the outcome banner a\n * connect-callback renders depend on tab ORDER rather than on the URL it returns to.\n *\n * A `subTabRef` the section does not declare is IGNORED rather than refused: the tab falls back to\n * the first entry, so a stale bookmark or a hand-typed segment still opens the section instead of an\n * error. `onSubTabChange` writes the selection back, which is what makes the strip a navigation\n * control rather than a widget with a URL beside it.\n */\nfunction SettingsSubTabs({\n  target,\n  resolveSubTabLabel,\n  subTabRef,\n  onSubTabChange,\n}: {\n  target: SettingsSubTabsTarget;\n  resolveSubTabLabel: SettingsLabelResolver;\n  subTabRef?: string;\n  onSubTabChange?: (subTabRef: string) => void;\n}): React.JSX.Element | null {\n  const active = target.subTabs.some(subTab => subTab.ref === subTabRef)\n    ? subTabRef\n    : target.subTabs[0]?.ref;\n  if (target.subTabs.length === 0) return null;\n  return (\n    <Tabs value={active} onValueChange={next => onSubTabChange?.(next)}>\n      <TabsList>\n        {target.subTabs.map(subTab => (\n          // `data-ref` is the i18n-independent automation hook (labels are\n          // runtime-translated; e2e drives must never key off them).\n          <TabsTrigger key={subTab.ref} value={subTab.ref} data-ref={subTab.ref}>\n            {resolveSubTabLabel(subTab.ref, subTab.label)}\n          </TabsTrigger>\n        ))}\n      </TabsList>\n      {target.subTabs.map(subTab => (\n        <TabsContent key={subTab.ref} value={subTab.ref}>\n          {/* Leaf targets only (schema forbids nested sub-tabs); the resolver is\n              still threaded to satisfy the shared renderer signature. */}\n          <SettingsTargetRenderer target={subTab.target} resolveSubTabLabel={resolveSubTabLabel} />\n        </TabsContent>\n      ))}\n    </Tabs>\n  );\n}\n\n/**\n * A rail item's layout classes — full-width, left-aligned, icon-tolerant.\n *\n * Carried here rather than reused from the tab trigger because the rail is no longer a tab: this is\n * a navigation item and owns its own shape. Only the SELECTED treatment is shared, and that comes\n * from the theme recipe rather than from a copied class string, so a theme change still reaches\n * both.\n */\nconst RAIL_ITEM_CLASSES =\n  \"inline-flex w-full cursor-pointer items-center justify-start gap-1.5 whitespace-nowrap rounded-md px-card-sm py-item text-sm font-medium no-underline [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4\";\n\n// ──────────────────────────────────────────────────────────────\n// Hub\n// ──────────────────────────────────────────────────────────────\n\nexport interface SettingsHubProps {\n  /** Section to pre-open; falls back to the config default. */\n  sectionRef?: string;\n  /** Sub-tab of `sectionRef` to pre-open; ignored when the section declares no such tab. */\n  subTabRef?: string;\n}\n\nexport function SettingsHub({ sectionRef, subTabRef }: SettingsHubProps): React.JSX.Element {\n  const config = useVisibleSettingsHubConfig();\n  const categories = useMemo(() => orderedCategories(config), [config]);\n  const [active, setActive] = useState<string | undefined>(() => resolveActiveSection(config, sectionRef));\n  const routerNavigate = useNavigate();\n\n  /*\n   * In-hub navigation WRITES the URL. Until 2026-09-17 it did not, at either level: the rail set\n   * local state and the sub-tab strip held its own, so the address bar kept whatever section the\n   * hub was opened at. Deep-linking IN worked and linking OUT never did — you could be looking at\n   * Administration → Single sign-on → Connections with `/settings/profile` in the address bar, and\n   * no sequence of clicks produced a URL for where you were.\n   *\n   * REPLACE rather than push, deliberately. A settings rail is a switcher, not a trail: pushing\n   * would make Back walk every section a person browsed before leaving the hub, which is the\n   * behaviour the overlay's own dismiss already owns. Replace keeps the address bar truthful and\n   * leaves Back meaning \"leave settings\".\n   *\n   * The overlay reconciler converges on the new URL — it keys on section AND sub-tab, so a tab\n   * switch inside one section is seen as a change rather than as already-correct. There is no loop:\n   * only a user gesture calls these, and the reconciler emits no navigation of its own.\n   */\n  // The SECTION half of this used to be `navigateToSection`, which the rail's triggers called. The\n  // rail's links now carry `to` + `replace` themselves, and `active` is driven by the URL-sync\n  // effect below — so the helper had no caller left. The SUB-TAB half stays: those really are tabs.\n\n  const handleSubTabChange = useCallback((nextSubTabRef: string) => {\n    if (!active) return;\n    routerNavigate(`${CommonRoutePaths.settings}/${active}/${nextSubTabRef}`, { replace: true });\n  }, [active, routerNavigate]);\n\n  /*\n   * On a small screen the hub is a BACK-STACK rather than two panes.\n   *\n   * It had no responsive treatment at all before 2026-09-17 — a fixed `w-60 shrink-0` rail at every\n   * width, which is 240px of a ~375px viewport, and the rail is now thirty entries rather than\n   * sixteen. The back-stack is chosen over a drawer or a collapsed select because the panel BELOW\n   * already works this way: `SettingsSectionNavigationHost` keeps a section's own drill-ins\n   * (view → edit → back) inside the panel, so mobile becomes the same mechanism one level up\n   * instead of a second navigation concept.\n   *\n   * WHICH screen shows is the URL's business, not local state: `/settings` is the list and\n   * `/settings/:sectionRef` is a section. That falls out of the hub's own contract — the URL is its\n   * single source of truth — and it means Back, a deep link and a shared link all agree without any\n   * of them being special-cased.\n   *\n   * Both panes stay MOUNTED and only their classes change. `field-chrome-and-sections.md` Gotcha 1b\n   * records what the alternative costs: a chrome that swapped element structure across a breakpoint\n   * remounted its control and dropped a pending edit on resize. Hiding is a class here for exactly\n   * that reason.\n   */\n  const { UIConfig, getRecipe } = useUI();\n  /*\n   * The rail item's SELECTED styling comes from the theme's SELECTABLE/FILLED recipe — the same one\n   * the vertical tab trigger used, so the rail looks exactly as it did and still follows whatever a\n   * theme dresses it in. The recipe keys on `data-state`, which each link sets from `active`.\n   */\n  const railItemRecipe = getRecipe(UIBehavior.SELECTABLE, SelectableVariant.FILLED);\n  const { renderIcon } = useIconRegistry();\n  const isMobile = UIConfig?.currentBreakpoint === ViewportBreakpoint.MOBILE;\n  const mobileShowsSection = isMobile && Boolean(sectionRef);\n\n  const handleBackToSections = useCallback(() => {\n    routerNavigate(CommonRoutePaths.settings, { replace: true });\n  }, [routerNavigate]);\n\n\n  const { tComponent, tSettingsHubCategory, tSettingsHubSection, isReady } = useI18n({\n    component: FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB,\n  });\n  // Hub chrome labels (title, rail aria-label) read from the scoped component\n  // namespace. Copy is owned by the labelling pipeline (declared in the sibling\n  // `.labels.ts`), so there are deliberately no inline fallback strings — the\n  // hub gates on `isReady` below, the same convention as the panels it hosts\n  // (`AppPage_SecuritySettings` / `AppPage_AppearanceSettings`). The dynamic\n  // category/section labels keep their config-authored `fallbackLabel` (the\n  // required contract of `tSettingsHubCategory` / `tSettingsHubSection`).\n  const t = useCallback(\n    (key: string) => tComponent(FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB, key),\n    [tComponent],\n  );\n\n  /** The pushed section's own label — the mobile header's only cue for where you are. */\n  const activeSectionLabel = useMemo(() => {\n    const section = config.sections.find(candidate => candidate.ref === active);\n    return section ? tSettingsHubSection(section.ref, section.label) : undefined;\n  }, [config.sections, active, tSettingsHubSection]);\n\n  // Keep the rail in sync with URL-driven section changes (deep-link / browser\n  // nav). Keyed on `sectionRef` ALONE — deliberately not on `config` as well.\n  // The gated config is derived from live signals (scope, roles, features,\n  // runtime capabilities), so its identity churns independently of its content;\n  // with `config` in the deps this ran after essentially every render and\n  // re-asserted the requested-or-default section, which overwrote the section\n  // the user had just clicked in the rail. The rail then looked inert: the\n  // click did select, and the effect immediately put it back.\n  useEffect(() => {\n    if (!sectionRef) return;\n    setActive(previous => (previous === sectionRef ? previous : sectionRef));\n  }, [sectionRef]);\n\n  /*\n   * Bring the OPEN section into view when it is not — and only then.\n   *\n   * The rail carries thirty destinations and scrolls, so a cold load or a deep link at a section\n   * near the bottom (`/settings/webhooks`) renders a list scrolled to the top with nothing on it\n   * marked: the one cue that says where you are is off screen, and the reader has to scroll a list\n   * of thirty to find out.\n   *\n   * `block: 'nearest'` is what makes this safe to run on every section change rather than only on\n   * mount: it is defined to move the container by the MINIMUM needed, so an item already fully\n   * visible — the ordinary case when somebody clicks the rail — is not scrolled at all. That is the\n   * whole reason it is 'nearest' and not 'center', which would yank the list on every click and\n   * replace one annoyance with another.\n   *\n   * It pairs with, and does not substitute for, the key fix in `getContentKey`: this positions the\n   * rail, that one stops the rail being rebuilt (and its scroll offset discarded) on every click.\n   * Without the key fix this would fire into a freshly mounted `<nav>` each time and merely make the\n   * reset land somewhere else.\n   */\n  const activeRailItemRef = useRef<HTMLAnchorElement | null>(null);\n  useEffect(() => {\n    if (!active) return;\n    activeRailItemRef.current?.scrollIntoView({ block: 'nearest', inline: 'nearest' });\n  }, [active]);\n\n  // Adopt a section from the config ONLY when the current one is not (or is no\n  // longer) selectable — first resolve after an async gating signal lands, or a\n  // section disappearing because the user's roles/features changed. Anything\n  // broader would re-run the reset described above.\n  useEffect(() => {\n    setActive(previous =>\n      previous && config.sections.some(section => section.ref === previous)\n        ? previous\n        : resolveActiveSection(config, sectionRef),\n    );\n    // `sectionRef` is read as the fallback preference only; following ITS\n    // changes is the effect above.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [config]);\n\n  /*\n   * Gate on label readiness so the hub chrome never flashes raw key paths — copy is pipeline-owned\n   * with no inline fallback, matching the hosted panels.\n   *\n   * Through `LoadingGate` rather than `if (!isReady) return null`, which is what this was until\n   * 2026-09-17. Returning null is correct about the raw keys and wrong about everything else: the\n   * overlay is already open and mounted by the time the hub renders, so a null gave a person an\n   * empty dialog with no indication that anything was coming — and the wait got longer as the rail\n   * grew. `LoadingGate` keeps the same guarantee (children are not rendered until ready) and lets\n   * the ENCLOSING SURFACE POLICY choose the treatment, which for an overlay is to overlay the\n   * children rather than to blank them. The hub does not pick a visual here on purpose: that choice\n   * belongs to the surface it is hosted in, and hard-coding a skeleton would override a policy the\n   * design system already owns.\n   */\n  return (\n    <LoadingGate readiness={[{ id: 'settings-hub-labels', isReady }]}>\n      {/*\n        `min-w-0` is REQUIRED: this is the grid item of the (fixed-width) dialog surface.\n        Without it the item keeps its default `min-width: auto` and cannot shrink below its\n        content's min-content width — a wide field row (e.g. a file card with a long\n        filename, or a text input) then pushes the whole two-pane body past the dialog edge,\n        and the dialog's `overflow-x: hidden` clips the right side of every field. `min-w-0`\n        lets the item fit the track so the content pane (and its form) reflow within it.\n      */}\n      <div className=\"flex h-full min-h-0 flex-col min-w-0\">\n      <header className=\"flex h-14 shrink-0 items-center gap-item border-b px-card-lg\">\n        {mobileShowsSection && (\n          <Button\n            variant={ButtonVariants_Variant.GHOST}\n            size={ButtonSize.ICON_SM}\n            aria-label={t('backToSections')}\n            onClick={handleBackToSections}\n          >\n            {renderIcon(StandardIconReference.BACK, { size: IconSize.SM })}\n          </Button>\n        )}\n        {/* On mobile the header names the SECTION you pushed into — without it the back-stack loses\n            the one cue that says where you are, since the rail that said so is off screen. */}\n        <h2 className=\"truncate text-base font-semibold tracking-tight\">\n          {mobileShowsSection ? activeSectionLabel ?? t('title') : t('title')}\n        </h2>\n      </header>\n      <div className=\"flex min-h-0 flex-1\">\n        {/*\n          * The rail is NAVIGATION, not a tablist, and until 2026-09-19 it was rendered as one —\n          * thirty `<button role=\"tab\">` in a `TabsList`. Three things followed, all measured on the\n          * running application:\n          *\n          *  - No destination could be OPENED any other way. `/settings/members` is a real route the\n          *    hub already writes to the address bar, but with no `href` there was nothing to\n          *    ⌘-click, middle-click or \"copy link address\" — the one gesture an operator uses to\n          *    send a colleague to a setting.\n          *  - The ARIA pattern was wrong for what this is. A tablist switches panels WITHIN a view;\n          *    a list of destinations that each own a URL is navigation (WAI-ARIA APG). That is not a\n          *    preference — it decides what an assistive technology announces and how it is reached.\n          *  - The category headings carried `role=\"presentation\"`, so they were invisible to\n          *    assistive technology, and a tablist cannot nest labelled groups anyway. That left AT\n          *    users with a flat list of thirty items containing NINE duplicated names — \"General\",\n          *    \"Entitlements\", \"API keys\", \"Connected accounts\", \"Single sign-on\", \"User\n          *    provisioning\", \"Audit streaming\", \"Webhooks\" and \"Audit log\" each appear under two\n          *    scopes — with nothing to tell the pairs apart.\n          *\n          * A `<nav>` of grouped links fixes all three at once, and the keyboard concern the previous\n          * shape was chosen for DISSOLVES rather than needing to be reimplemented: roving tabindex\n          * is a tablist requirement. Navigation uses ordinary Tab order through links, which is what\n          * a reader expects and what the browser already does.\n          *\n          * `replace` is kept from the old `navigateToSection` and for its reason: a settings rail is\n          * a switcher, not a trail, so Back means \"leave settings\" rather than walking every section\n          * somebody browsed.\n          */}\n        <nav\n          aria-label={t('sectionsNavLabel')}\n          className={cn(\n            'overflow-y-auto px-card-sm py-card',\n            // Desktop: the fixed rail beside the content. Mobile: the full-width first screen of the\n            // back-stack, with no divider because there is nothing beside it.\n            isMobile ? 'w-full flex-1' : 'w-60 shrink-0 border-e',\n            mobileShowsSection && 'hidden',\n          )}\n        >\n          {categories.map((category, index) => {\n            const sections = sectionsForCategory(config, category.ref);\n            if (sections.length === 0) return null;\n            const categoryLabelId = `settings-hub-category-${category.ref}`;\n            return (\n              <React.Fragment key={category.ref}>\n                {index > 0 && <Separator className=\"my-item\" />}\n                {/* Named, not decorative: this heading is the ONLY thing distinguishing the nine\n                    section labels that appear under two scopes, so it has to reach AT. */}\n                <div\n                  id={categoryLabelId}\n                  className=\"px-card-sm py-card-sm text-xs font-medium uppercase tracking-wider text-muted-foreground\"\n                >\n                  {tSettingsHubCategory(category.ref, category.label)}\n                </div>\n                <div role=\"group\" aria-labelledby={categoryLabelId}>\n                  {sections.map(section => {\n                    const isActive = section.ref === active;\n                    return (\n                      // `data-ref` = i18n-independent automation hook (see sub-tabs above).\n                      <Link\n                        key={section.ref}\n                        // Only the OPEN item is tracked — the effect above needs one element, and a\n                        // ref on all thirty would be thirty callbacks re-created every render.\n                        ref={isActive ? activeRailItemRef : undefined}\n                        to={`${CommonRoutePaths.settings}/${section.ref}`}\n                        replace\n                        data-ref={section.ref}\n                        aria-current={isActive ? 'page' : undefined}\n                        data-state={isActive ? 'active' : 'inactive'}\n                        className={cn(\n                          RAIL_ITEM_CLASSES,\n                          // Composed part by part, exactly as the tab trigger does — `getRecipe`\n                          // returns a STRUCTURE (base / states / motion), not a class string, and\n                          // handing the object to `cn()` silently yields nothing. That is how the\n                          // first cut of this lost the selected fill while every other class held.\n                          railItemRecipe.base,\n                          railItemRecipe.states.focus,\n                          railItemRecipe.states.selected,\n                          railItemRecipe.motion.transition,\n                        )}\n                      >\n                        {tSettingsHubSection(section.ref, section.label)}\n                      </Link>\n                    );\n                  })}\n                </div>\n              </React.Fragment>\n            );\n          })}\n        </nav>\n        <div\n          className={cn(\n            'min-w-0 flex-1 overflow-y-auto p-card-lg',\n            isMobile && !mobileShowsSection && 'hidden',\n          )}\n        >\n          {/*\n            * ONE section renders — the active one. `TabsContent` unmounts its inactive panels\n            * anyway, so this is the same mounting behaviour written directly rather than delegated\n            * to a primitive the rail no longer uses.\n            */}\n          {config.sections.filter(section => section.ref === active).map(section => (\n            <React.Fragment key={section.ref}>\n              {section.entitlementFeatureId ? (\n                // Section SURVIVED because the app OFFERS this feature\n                // (`runtimeAvailability` capability = plan-independent\n                // `isFeatureOffered`). Render its body through the entitlement gate:\n                // entitled → the config surface; offered-but-not-entitled → the\n                // policy-driven upgrade/add-on prompt (never a silent disappearance).\n                <FeatureGate featureId={section.entitlementFeatureId}>\n                  <SettingsTargetRenderer\n                    target={section.target}\n                    resolveSubTabLabel={tSettingsHubSection}\n                    subTabRef={section.ref === active ? subTabRef : undefined}\n                    onSubTabChange={handleSubTabChange}\n                  />\n                </FeatureGate>\n              ) : (\n                <SettingsTargetRenderer\n                  target={section.target}\n                  resolveSubTabLabel={tSettingsHubSection}\n                  subTabRef={section.ref === active ? subTabRef : undefined}\n                  onSubTabChange={handleSubTabChange}\n                />\n              )}\n            </React.Fragment>\n          ))}\n        </div>\n      </div>\n    </div>\n    </LoadingGate>\n  );\n}\n"]}
+{"version":3,"file":"SettingsHub.js","sourceRoot":"","sources":["../../../../../src/components/settings/SettingsHub.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAC/I,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AACxG,OAAO,EAAE,SAAS,EAAE,MAAM,iDAAiD,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AAChH,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2EAA2E,CAAC;AACrH,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,sCAAsC,CAAC;AAC9F,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,kCAAkC,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACnH,OAAO,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAClG,OAAO,EAAE,yCAAyC,EAAE,MAAM,6CAA6C,CAAC;AACxG,OAAO,EAAE,wBAAwB,EAAE,MAAM,kFAAkF,CAAC;AAC5H,OAAO,EAAE,oBAAoB,EAAE,MAAM,mEAAmE,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAS5H,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,2BAA2B,EAAE,MAAM,6DAA6D,CAAC;AAC1G,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAClG,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAC3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAElF,iEAAiE;AACjE,iBAAiB;AACjB,iEAAiE;AAEjE,SAAS,iBAAiB,CAAC,MAAiC;IAC1D,OAAO,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAiC,EAAE,WAAmB;IACjF,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC;SACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,QAA0B,EAAE,QAA2B;IACzE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChH,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,MAAM;aACN,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aAC/F,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,oBAAoB,CAAC,MAAiC,EAAE,UAAmB;IAClF,IAAI,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACjG,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1G,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AACjC,CAAC;AAED,iEAAiE;AACjE,yEAAyE;AACzE,kDAAkD;AAClD,iEAAiE;AAEjE,SAAS,mBAAmB,CAAC,EAAE,QAAQ,EAAkC;IACvE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,gBAAgB,CAAC,QAAQ;YAC5B,OAAO,KAAC,wBAAwB,KAAG,CAAC;QACtC,KAAK,gBAAgB,CAAC,UAAU;YAC9B,OAAO,KAAC,0BAA0B,KAAG,CAAC;QACxC,KAAK,gBAAgB,CAAC,WAAW;YAC/B,OAAO,KAAC,2BAA2B,KAAG,CAAC;QACzC,KAAK,gBAAgB,CAAC,OAAO;YAC3B,OAAO,KAAC,uBAAuB,KAAG,CAAC;QACrC,KAAK,gBAAgB,CAAC,kBAAkB;YACtC,OAAO,KAAC,iCAAiC,IAAC,UAAU,EAAE,sCAAsC,CAAC,IAAI,GAAI,CAAC;QACxG,KAAK,gBAAgB,CAAC,+BAA+B;YACnD,4FAA4F;YAC5F,+FAA+F;YAC/F,wCAAwC;YACxC,OAAO,KAAC,iCAAiC,IAAC,UAAU,EAAE,sCAAsC,CAAC,YAAY,GAAI,CAAC;QAChH,KAAK,gBAAgB,CAAC,wBAAwB;YAC5C,OAAO,KAAC,qCAAqC,KAAG,CAAC;QACnD,KAAK,gBAAgB,CAAC,iBAAiB;YACrC,OAAO,KAAC,gCAAgC,KAAG,CAAC;QAC9C,KAAK,gBAAgB,CAAC,oBAAoB;YACxC,kFAAkF;YAClF,OAAO,KAAC,kCAAkC,IAAC,KAAK,EAAE,uBAAuB,CAAC,WAAW,GAAI,CAAC;QAC5F,KAAK,gBAAgB,CAAC,8CAA8C;YAClE,OAAO,KAAC,kCAAkC,IAAC,KAAK,EAAE,uBAAuB,CAAC,yBAAyB,GAAI,CAAC;QAC1G,KAAK,gBAAgB,CAAC,uBAAuB;YAC3C,OAAO,KAAC,sCAAsC,KAAG,CAAC;QACpD,KAAK,gBAAgB,CAAC,4BAA4B;YAChD,OAAO,KAAC,yCAAyC,KAAG,CAAC;IACzD,CAAC;AACH,CAAC;AAKD,SAAS,sBAAsB,CAAC,EAC9B,MAAM,EACN,kBAAkB,EAClB,SAAS,EACT,cAAc,GAMf;IACC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,yBAAyB,CAAC,YAAY;YACzC,OAAO,KAAC,mBAAmB,IAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAI,CAAC;QAC5D,KAAK,yBAAyB,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChD,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,CACtD,MAAM,CAAC,YAAY,EACnB,eAAe,CAAC,OAAO,CACxB,CAAC;YACF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,OAAO,KAAC,oBAAoB,IAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,GAAI,CAAC;YAC1G,CAAC;YACD,OAAO,CACL,KAAC,KAAK,CAAC,QAAQ,IAAC,QAAQ,EAAE,cAAK,SAAS,EAAC,+DAA+D,iBAAa,MAAM,GAAG,YAC5H,KAAC,eAAe,KAAG,GACJ,CAClB,CAAC;QACJ,CAAC;QACD,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO,CACL,KAAC,8BAA8B,IAC7B,YAAY,EAAE,MAAM,CAAC,YAAY,EACjC,SAAS,EAAE,MAAM,CAAC,SAAS,EAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,GACzC,CACH,CAAC;QACJ,KAAK,yBAAyB,CAAC,QAAQ;YACrC,OAAO,CACL,KAAC,eAAe,IACd,MAAM,EAAE,MAAM,EACd,kBAAkB,EAAE,kBAAkB,EACtC,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,cAAc,GAC9B,CACH,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,EACvB,MAAM,EACN,kBAAkB,EAClB,SAAS,EACT,cAAc,GAMf;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC;QACpE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,CACL,MAAC,IAAI,IAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,aAChE,KAAC,QAAQ,cACN,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,iEAAiE;gBACjE,2DAA2D;gBAC3D,KAAC,WAAW,IAAkB,KAAK,EAAE,MAAM,CAAC,GAAG,cAAY,MAAM,CAAC,GAAG,YAClE,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,IAD7B,MAAM,CAAC,GAAG,CAEd,CACf,CAAC,GACO,EACV,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAC5B,KAAC,WAAW,IAAkB,KAAK,EAAE,MAAM,CAAC,GAAG,YAG7C,KAAC,sBAAsB,IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,GAAI,IAHzE,MAAM,CAAC,GAAG,CAId,CACf,CAAC,IACG,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,iBAAiB,GACrB,yOAAyO,CAAC;AAa5O,MAAM,UAAU,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,EAAoB;IACrE,MAAM,MAAM,GAAG,2BAA2B,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7F,MAAM,cAAc,GAAG,WAAW,EAAE,CAAC;IAErC;;;;;;;;;;;;;;;OAeG;IACH,iGAAiG;IACjG,2FAA2F;IAC3F,iHAAiH;IAEjH,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,aAAqB,EAAE,EAAE;QAC/D,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,cAAc,CAAC,GAAG,gBAAgB,CAAC,QAAQ,IAAI,MAAM,IAAI,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;IACxC;;;;OAIG;IACH,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClF,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACrF,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,QAAQ,EAAE,iBAAiB,KAAK,kBAAkB,CAAC,MAAM,CAAC;IAC3E,MAAM,kBAAkB,GAAG,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAE3D,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5C,cAAc,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAGrB,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACpG,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IACH,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,CAAC,GAAG,WAAW,CACnB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,EAChF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,uFAAuF;IACvF,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QAC5E,OAAO,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAEnD;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,iBAAiB,GAAG,MAAM,CAA2B,IAAI,CAAC,CAAC;IACjE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACrF,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb;;;;;;;;;;;;;OAaG;IACH,OAAO,CACL,KAAC,WAAW,IAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,YAS9D,eAAK,SAAS,EAAC,sCAAsC,aACrD,kBAAQ,SAAS,EAAC,8DAA8D,aAC7E,kBAAkB,IAAI,CACrB,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,KAAK,EACrC,IAAI,EAAE,UAAU,CAAC,OAAO,gBACZ,CAAC,CAAC,gBAAgB,CAAC,EAC/B,OAAO,EAAE,oBAAoB,YAE5B,UAAU,CAAC,qBAAqB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,GACvD,CACV,EAGD,aAAI,SAAS,EAAC,iDAAiD,YAC5D,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAChE,IACE,EACT,eAAK,SAAS,EAAC,qBAAqB,aA6BlC,4BACc,CAAC,CAAC,kBAAkB,CAAC,EACjC,SAAS,EAAE,EAAE,CACX,oCAAoC;4BACpC,yFAAyF;4BACzF,kEAAkE;4BAClE,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,wBAAwB,EACrD,kBAAkB,IAAI,QAAQ,CAC/B,YAEA,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;gCAClC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;gCAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oCAAE,OAAO,IAAI,CAAC;gCACvC,MAAM,eAAe,GAAG,yBAAyB,QAAQ,CAAC,GAAG,EAAE,CAAC;gCAChE,OAAO,CACL,MAAC,KAAK,CAAC,QAAQ,eACZ,KAAK,GAAG,CAAC,IAAI,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,GAAG,EAG/C,cACE,EAAE,EAAE,eAAe,EACnB,SAAS,EAAE,EAAE,CAAC,uBAAuB,EAAE,aAAa,CAAC,IAAI,CAAC,YAEzD,oBAAoB,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAC/C,EACN,cAAK,IAAI,EAAC,OAAO,qBAAkB,eAAe,YAC/C,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAC3C,MAAC,KAAK,CAAC,QAAQ,eACZ,KAAK,CAAC,KAAK,IAAI,CACd,cACE,EAAE,EAAE,GAAG,eAAe,UAAU,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,EACjD,SAAS,EAAE,EAAE,CAAC,wDAAwD,EAAE,kBAAkB,CAAC,IAAI,CAAC,YAE/F,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAChE,CACP,EACD,cAAK,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,qBAAmB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,eAAe,UAAU,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,YACrI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;4DAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC;4DACxC,OAAO;4DACL,sEAAsE;4DACtE,MAAC,IAAI;gEAEH,4EAA4E;gEAC5E,uEAAuE;gEACvE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,EAC7C,EAAE,EAAE,GAAG,gBAAgB,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,EACjD,OAAO,oBACG,OAAO,CAAC,GAAG,kBACP,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,gBAC/B,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C,SAAS,EAAE,EAAE,CACX,iBAAiB;gEACjB,uEAAuE;gEACvE,wEAAwE;gEACxE,wEAAwE;gEACxE,yEAAyE;gEACzE,cAAc,CAAC,IAAI,EACnB,cAAc,CAAC,MAAM,CAAC,KAAK,EAC3B,cAAc,CAAC,MAAM,CAAC,QAAQ,EAC9B,cAAc,CAAC,MAAM,CAAC,UAAU,CACjC,aAIA,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,EAC/D,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,KAxB3C,OAAO,CAAC,GAAG,CAyBX,CACR,CAAC;wDACJ,CAAC,CAAC,GACI,KA3Ca,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,aAAa,CA4CrC,CAClB,CAAC,GACE,KA1Da,QAAQ,CAAC,GAAG,CA2DhB,CAClB,CAAC;4BACJ,CAAC,CAAC,GACE,EACN,cACE,SAAS,EAAE,EAAE,CACX,0CAA0C,EAC1C,QAAQ,IAAI,CAAC,kBAAkB,IAAI,QAAQ,CAC5C,YAOA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CACxE,KAAC,KAAK,CAAC,QAAQ,cACZ,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;gCAC9B,uDAAuD;gCACvD,uDAAuD;gCACvD,qEAAqE;gCACrE,gEAAgE;gCAChE,sEAAsE;gCACtE,KAAC,+BAA+B,IAAC,SAAS,EAAE,OAAO,CAAC,oBAAoB,EAAE,uBAAuB,EAAE,CAAC,CAAC,oCAAoC,CAAC,YACxI,KAAC,sBAAsB,IACrB,MAAM,EAAE,OAAO,CAAC,MAAM,EACtB,kBAAkB,EAAE,mBAAmB,EACvC,SAAS,EAAE,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACzD,cAAc,EAAE,kBAAkB,GAClC,GAC8B,CACnC,CAAC,CAAC,CAAC,CACF,KAAC,sBAAsB,IACrB,MAAM,EAAE,OAAO,CAAC,MAAM,EACtB,kBAAkB,EAAE,mBAAmB,EACvC,SAAS,EAAE,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACzD,cAAc,EAAE,kBAAkB,GAClC,CACH,IAtBkB,OAAO,CAAC,GAAG,CAuBf,CAClB,CAAC,GACE,IACF,IACF,GACQ,CACf,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,+BAA+B,CAAC,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAItF;IACC,MAAM,YAAY,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,WAAW,IAAI,YAAY,CAAC,QAAQ,KAAK,6BAA6B,CAAC,IAAI,CAAC;IAC9G,OAAO,CACL,eAAK,SAAS,EAAC,cAAc,aAC1B,WAAW,IAAI,CACd,KAAC,KAAK,IAAC,OAAO,EAAC,MAAM,YACnB,KAAC,gBAAgB,cAAE,uBAAuB,GAAoB,GACxD,CACT,EACD,KAAC,WAAW,IAAC,SAAS,EAAE,SAAS,YAAG,QAAQ,GAAe,IACvD,CACP,CAAC;AACJ,CAAC","sourcesContent":["/**\n * SettingsHub — the unified settings surface.\n *\n * Renders the declarative `ResolvedSettingsHubConfig` as a vertical NAVIGATION rail beside a\n * content panel. Categories become labelled groups of links, each destination addressed by its own\n * URL. A section's `target` resolves to a framework panel, an auto-rendered resource surface, a\n * custom component, or a set of horizontal sub-tabs.\n *\n * The rail was a `Tabs`/`TabsList` until 2026-09-19, chosen so that section state and keyboard\n * roving came from the primitive rather than being hand-rolled. It became navigation because a\n * tablist switches panels WITHIN a view while these are thirty destinations that each own a URL —\n * and the keyboard argument dissolves rather than transferring: roving tabindex is a tablist\n * requirement, and navigation wants ordinary Tab order through links. See the rail's own comment.\n *\n * The SUB-TABS are still `Tabs`, correctly: Configuration/Connections inside one destination is\n * exactly what a tablist is for.\n *\n * Mounted by `NavigationContentRenderer` for `NavigationContentType.SETTINGS_HUB`\n * (always in the overlay zone). The `sectionRef` prop names the open\n * section: it wins whenever the gated config admits it (see `active` below).\n */\nimport React, { useCallback, useEffect, useMemo, useRef } from 'react';\nimport { Link, useNavigate } from 'react-router-dom';\nimport { ViewportBreakpoint } from '@wildo-ai/zod-decorators';\nimport { CorePresetNames, FrontendComponentType, SelectableVariant, TypographyVariant, UIBehavior } from '@wildo-ai/presets-components-models';\nimport { Tabs, TabsList, TabsTrigger, TabsContent } from '~wildo-frontend-lib/components/sections/tabs';\nimport { Separator } from '~wildo-frontend-lib/components/layout/separator';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { ButtonSize } from '@wildo-ai/presets-components-models';\nimport { useIconRegistry } from '~wildo-frontend-lib/core/icons/useIconRegistry';\nimport { IconSize, StandardIconReference } from '~wildo-frontend-lib/core/icons/icon-registry.frontend.schemas';\nimport { useUI } from '~wildo-frontend-lib/core/ui/useUI';\nimport { cn } from '~wildo-frontend-lib/core/ui/cn';\nimport { AppPage_SecuritySettings } from '~wildo-frontend-lib/components/auth/admin-config/AppPage_SecuritySettings';\nimport { AppPage_AppearanceSettings } from './AppPage_AppearanceSettings';\nimport { AppPage_InvitationsSettings } from './AppPage_InvitationsSettings';\nimport { AppPage_BillingSettings } from './AppPage_BillingSettings';\nimport { ExternalProvider_Connection_OwnerScope } from '@wildo-ai/external-connectors-models';\nimport { AppPage_ConnectedAccountsSettings } from './AppPage_ConnectedAccountsSettings';\nimport { AppPage_AgentWorkOverrideRateSettings } from './AppPage_AgentWorkOverrideRateSettings';\nimport { AppPage_AutonomousAgentsSettings } from './AppPage_AutonomousAgentsSettings';\nimport { AppPage_ModelCostBreakdownSettings, ModelCostBreakdownScope } from './AppPage_ModelCostBreakdownSettings';\nimport { AppPage_RepresentativeActivitySettings } from './AppPage_RepresentativeActivitySettings';\nimport { AppPage_AgentWorkEvaluationExportSettings } from './AppPage_AgentWorkEvaluationExportSettings';\nimport { ComponentRegistryService } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.service';\nimport { ComponentNotInjected } from '~wildo-frontend-lib/core/components-registry/ComponentNotInjected';\nimport { SettingsPanelRef, SettingsSectionTargetKind } from '~wildo-frontend-lib/core/config/settings-hub.frontend.schemas';\nimport type {\n  ResolvedSettingsHubConfig,\n  SettingsCategory,\n  SettingsCategoryGroup,\n  SettingsSection,\n  SettingsSectionTarget,\n  SettingsSubTabsTarget,\n} from '~wildo-frontend-lib/core/config/settings-hub.frontend.schemas';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { useVisibleSettingsHubConfig } from '~wildo-frontend-lib/core/config/useVisibleSettingsHubConfig';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { FeatureGate } from '~wildo-frontend-lib/core/features/FeatureGate';\nimport { useFeatureAvailability } from '~wildo-frontend-lib/core/features/useFeatureAvailability';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';\nimport { LoadingGate } from '~wildo-frontend-lib/core/loading/LoadingGate';\nimport { SettingsResourceOperationPanel } from './SettingsResourceOperationPanel';\n\n// ──────────────────────────────────────────────────────────────\n// Config helpers\n// ──────────────────────────────────────────────────────────────\n\nfunction orderedCategories(config: ResolvedSettingsHubConfig): SettingsCategory[] {\n  return [...config.categories].sort((a, b) => (a.order ?? 0) - (b.order ?? 0));\n}\n\nfunction sectionsForCategory(config: ResolvedSettingsHubConfig, categoryRef: string): SettingsSection[] {\n  return config.sections\n    .filter(section => section.categoryRef === categoryRef)\n    .sort((a, b) => (a.order ?? 0) - (b.order ?? 0));\n}\n\n/**\n * A category's rail in sub-category blocks (#2329): its ungrouped sections first, with no heading, then each declared\n * group in order with its sections. A group no placed section names draws nothing, and a section naming an undeclared\n * group (refused by the DEV verifier) is drawn with the ungrouped ones rather than lost.\n */\nfunction railBlocks(category: SettingsCategory, sections: SettingsSection[]): Array<{ group?: SettingsCategoryGroup; sections: SettingsSection[] }> {\n  const groups = [...(category.groups ?? [])].sort((a, b) => (a.order ?? 0) - (b.order ?? 0));\n  const declared = new Set(groups.map(group => group.ref));\n  const ungrouped = sections.filter(section => section.groupRef === undefined || !declared.has(section.groupRef));\n  return [\n    ...(ungrouped.length > 0 ? [{ sections: ungrouped }] : []),\n    ...groups\n      .map(group => ({ group, sections: sections.filter(section => section.groupRef === group.ref) }))\n      .filter(block => block.sections.length > 0),\n  ];\n}\n\n/** Resolve the section to open: requested → config default → first section. */\nfunction resolveActiveSection(config: ResolvedSettingsHubConfig, sectionRef?: string): string | undefined {\n  if (sectionRef && config.sections.some(section => section.ref === sectionRef)) return sectionRef;\n  if (config.defaultSectionRef && config.sections.some(section => section.ref === config.defaultSectionRef)) {\n    return config.defaultSectionRef;\n  }\n  return config.sections[0]?.ref;\n}\n\n// ──────────────────────────────────────────────────────────────\n// Target rendering (function declarations → hoisted for mutual recursion\n// between a SUB_TABS target and its leaf targets)\n// ──────────────────────────────────────────────────────────────\n\nfunction SettingsEnginePanel({ panelRef }: { panelRef: SettingsPanelRef }): React.JSX.Element {\n  switch (panelRef) {\n    case SettingsPanelRef.SECURITY:\n      return <AppPage_SecuritySettings />;\n    case SettingsPanelRef.APPEARANCE:\n      return <AppPage_AppearanceSettings />;\n    case SettingsPanelRef.INVITATIONS:\n      return <AppPage_InvitationsSettings />;\n    case SettingsPanelRef.BILLING:\n      return <AppPage_BillingSettings />;\n    case SettingsPanelRef.CONNECTED_ACCOUNTS:\n      return <AppPage_ConnectedAccountsSettings ownerScope={ExternalProvider_Connection_OwnerScope.USER} />;\n    case SettingsPanelRef.ORGANIZATION_CONNECTED_ACCOUNTS:\n      // The scope is passed EXPLICITLY at both sites rather than left to the component's default.\n      // A default is invisible at the call site, and the one thing a reader must be able to see here\n      // is whose account each panel connects.\n      return <AppPage_ConnectedAccountsSettings ownerScope={ExternalProvider_Connection_OwnerScope.ORGANIZATION} />;\n    case SettingsPanelRef.AGENT_WORK_OVERRIDE_RATE:\n      return <AppPage_AgentWorkOverrideRateSettings />;\n    case SettingsPanelRef.AUTONOMOUS_AGENTS:\n      return <AppPage_AutonomousAgentsSettings />;\n    case SettingsPanelRef.MODEL_COST_BREAKDOWN:\n      // Whose cost is passed EXPLICITLY at both sites, as for connected accounts above.\n      return <AppPage_ModelCostBreakdownSettings scope={ModelCostBreakdownScope.APPLICATION} />;\n    case SettingsPanelRef.REPRESENTING_ORGANIZATION_MODEL_COST_BREAKDOWN:\n      return <AppPage_ModelCostBreakdownSettings scope={ModelCostBreakdownScope.REPRESENTING_ORGANIZATION} />;\n    case SettingsPanelRef.REPRESENTATIVE_ACTIVITY:\n      return <AppPage_RepresentativeActivitySettings />;\n    case SettingsPanelRef.AGENT_WORK_EVALUATION_EXPORT:\n      return <AppPage_AgentWorkEvaluationExportSettings />;\n  }\n}\n\n/** Resolves a display label for a section/sub-tab ref, falling back to the authored label. */\ntype SettingsLabelResolver = (ref: string, fallbackLabel: string) => string;\n\nfunction SettingsTargetRenderer({\n  target,\n  resolveSubTabLabel,\n  subTabRef,\n  onSubTabChange,\n}: {\n  target: SettingsSectionTarget;\n  resolveSubTabLabel: SettingsLabelResolver;\n  subTabRef?: string;\n  onSubTabChange?: (subTabRef: string) => void;\n}): React.JSX.Element {\n  switch (target.kind) {\n    case SettingsSectionTargetKind.ENGINE_PANEL:\n      return <SettingsEnginePanel panelRef={target.panelRef} />;\n    case SettingsSectionTargetKind.CUSTOM_COMPONENT: {\n      const CustomComponent = ComponentRegistryService.resolve(\n        target.componentRef,\n        CorePresetNames.DEFAULT,\n      );\n      if (!CustomComponent) {\n        return <ComponentNotInjected componentType={target.componentRef} componentName={target.componentRef} />;\n      }\n      return (\n        <React.Suspense fallback={<div className=\"h-8 animate-pulse motion-reduce:animate-none bg-muted rounded\" aria-hidden=\"true\" />}>\n          <CustomComponent />\n        </React.Suspense>\n      );\n    }\n    case SettingsSectionTargetKind.RESOURCE_OPERATION:\n      return (\n        <SettingsResourceOperationPanel\n          resourceType={target.resourceType}\n          operation={target.operation}\n          operationVariant={target.operationVariant}\n        />\n      );\n    case SettingsSectionTargetKind.SUB_TABS:\n      return (\n        <SettingsSubTabs\n          target={target}\n          resolveSubTabLabel={resolveSubTabLabel}\n          subTabRef={subTabRef}\n          onSubTabChange={onSubTabChange}\n        />\n      );\n  }\n}\n\n/**\n * The sub-tab strip inside one section.\n *\n * The active tab is URL-DRIVEN since 2026-09-17. It used to be `useState(target.subTabs[0]?.ref)` —\n * local state that read nothing from the URL — so all twenty-one sub-tab panels in the shipped\n * catalogue were unaddressable: every link to a sub-tabbed section opened its FIRST tab, and\n * \"Single sign-on → Connections\" could not be sent to anybody. That contradicted the hub's own\n * contract, which is that the URL is its single source of truth, and it made the outcome banner a\n * connect-callback renders depend on tab ORDER rather than on the URL it returns to.\n *\n * A `subTabRef` the section does not declare is IGNORED rather than refused: the tab falls back to\n * the first entry, so a stale bookmark or a hand-typed segment still opens the section instead of an\n * error. `onSubTabChange` writes the selection back, which is what makes the strip a navigation\n * control rather than a widget with a URL beside it.\n */\nfunction SettingsSubTabs({\n  target,\n  resolveSubTabLabel,\n  subTabRef,\n  onSubTabChange,\n}: {\n  target: SettingsSubTabsTarget;\n  resolveSubTabLabel: SettingsLabelResolver;\n  subTabRef?: string;\n  onSubTabChange?: (subTabRef: string) => void;\n}): React.JSX.Element | null {\n  const active = target.subTabs.some(subTab => subTab.ref === subTabRef)\n    ? subTabRef\n    : target.subTabs[0]?.ref;\n  if (target.subTabs.length === 0) return null;\n  return (\n    <Tabs value={active} onValueChange={next => onSubTabChange?.(next)}>\n      <TabsList>\n        {target.subTabs.map(subTab => (\n          // `data-ref` is the i18n-independent automation hook (labels are\n          // runtime-translated; e2e drives must never key off them).\n          <TabsTrigger key={subTab.ref} value={subTab.ref} data-ref={subTab.ref}>\n            {resolveSubTabLabel(subTab.ref, subTab.label)}\n          </TabsTrigger>\n        ))}\n      </TabsList>\n      {target.subTabs.map(subTab => (\n        <TabsContent key={subTab.ref} value={subTab.ref}>\n          {/* Leaf targets only (schema forbids nested sub-tabs); the resolver is\n              still threaded to satisfy the shared renderer signature. */}\n          <SettingsTargetRenderer target={subTab.target} resolveSubTabLabel={resolveSubTabLabel} />\n        </TabsContent>\n      ))}\n    </Tabs>\n  );\n}\n\n/**\n * A rail item's layout classes — full-width, left-aligned, icon-tolerant.\n *\n * Carried here rather than reused from the tab trigger because the rail is no longer a tab: this is\n * a navigation item and owns its own shape. Only the SELECTED treatment is shared, and that comes\n * from the theme recipe rather than from a copied class string, so a theme change still reaches\n * both.\n */\nconst RAIL_ITEM_CLASSES =\n  \"inline-flex w-full cursor-pointer items-center justify-start gap-1.5 whitespace-nowrap rounded-md px-card-sm py-item text-sm font-medium no-underline [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4\";\n\n// ──────────────────────────────────────────────────────────────\n// Hub\n// ──────────────────────────────────────────────────────────────\n\nexport interface SettingsHubProps {\n  /** The section the URL names. It is open whenever the gated config admits it; until then, the config default. */\n  sectionRef?: string;\n  /** Sub-tab of `sectionRef` to pre-open; ignored when the section declares no such tab. */\n  subTabRef?: string;\n}\n\nexport function SettingsHub({ sectionRef, subTabRef }: SettingsHubProps): React.JSX.Element {\n  const config = useVisibleSettingsHubConfig();\n  const categories = useMemo(() => orderedCategories(config), [config]);\n  /*\n   * The open section is DERIVED from the URL and the gated config, on every render. It is not\n   * state, and it was until 2026-10-02 (#2190), when it held a fallback that outlived its reason.\n   *\n   * The gated config arrives in stages: on a cold load the first answer is built before the\n   * organization's features resolve, so a feature-gated destination (`sso`, `scim`) is absent from\n   * it. The old state machine resolved `/settings/sso` against that first config, fell back to the\n   * first section (Profile), then kept Profile when `sso` joined the config, because Profile was\n   * still selectable. Its URL effect did not help, since `sectionRef` never changed. A deep link or\n   * a reload of a gated destination therefore opened the wrong pane for good, while a rail click\n   * opened the right one.\n   *\n   * Deriving it removes the \"current choice\" that a fallback could become. The URL can stand for\n   * the person's choice because the rail's links write it (`to` + `replace`) and nothing else\n   * selects a section, so `sectionRef` is always the section the person last asked for. Whenever it\n   * is selectable it is the open section, whatever order the gating signals land in. When it is not\n   * (yet) selectable, the default stands in, and the requested section takes over the moment the\n   * config admits it. The earlier concern that kept `config` out of the sync effect, config\n   * identity churning and resetting a rail click, has no purchase here: a click changes\n   * `sectionRef` itself, so a re-derivation can only re-confirm it.\n   */\n  const active = useMemo(() => resolveActiveSection(config, sectionRef), [config, sectionRef]);\n  const routerNavigate = useNavigate();\n\n  /*\n   * In-hub navigation WRITES the URL. Until 2026-09-17 it did not, at either level: the rail set\n   * local state and the sub-tab strip held its own, so the address bar kept whatever section the\n   * hub was opened at. Deep-linking IN worked and linking OUT never did — you could be looking at\n   * Administration → Single sign-on → Connections with `/settings/profile` in the address bar, and\n   * no sequence of clicks produced a URL for where you were.\n   *\n   * REPLACE rather than push, deliberately. A settings rail is a switcher, not a trail: pushing\n   * would make Back walk every section a person browsed before leaving the hub, which is the\n   * behaviour the overlay's own dismiss already owns. Replace keeps the address bar truthful and\n   * leaves Back meaning \"leave settings\".\n   *\n   * The overlay reconciler converges on the new URL — it keys on section AND sub-tab, so a tab\n   * switch inside one section is seen as a change rather than as already-correct. There is no loop:\n   * only a user gesture calls these, and the reconciler emits no navigation of its own.\n   */\n  // The SECTION half of this used to be `navigateToSection`, which the rail's triggers called. The\n  // rail's links now carry `to` + `replace` themselves, and `active` is derived from the URL\n  // (see its declaration above) — so the helper had no caller left. The SUB-TAB half stays: those really are tabs.\n\n  const handleSubTabChange = useCallback((nextSubTabRef: string) => {\n    if (!active) return;\n    routerNavigate(`${CommonRoutePaths.settings}/${active}/${nextSubTabRef}`, { replace: true });\n  }, [active, routerNavigate]);\n\n  /*\n   * On a small screen the hub is a BACK-STACK rather than two panes.\n   *\n   * It had no responsive treatment at all before 2026-09-17 — a fixed `w-60 shrink-0` rail at every\n   * width, which is 240px of a ~375px viewport, and the rail is now thirty entries rather than\n   * sixteen. The back-stack is chosen over a drawer or a collapsed select because the panel BELOW\n   * already works this way: `SettingsSectionNavigationHost` keeps a section's own drill-ins\n   * (view → edit → back) inside the panel, so mobile becomes the same mechanism one level up\n   * instead of a second navigation concept.\n   *\n   * WHICH screen shows is the URL's business, not local state: `/settings` is the list and\n   * `/settings/:sectionRef` is a section. That falls out of the hub's own contract — the URL is its\n   * single source of truth — and it means Back, a deep link and a shared link all agree without any\n   * of them being special-cased.\n   *\n   * Both panes stay MOUNTED and only their classes change. `field-chrome-and-sections.md` Gotcha 1b\n   * records what the alternative costs: a chrome that swapped element structure across a breakpoint\n   * remounted its control and dropped a pending edit on resize. Hiding is a class here for exactly\n   * that reason.\n   */\n  const { UIConfig, getRecipe } = useUI();\n  /*\n   * The rail item's SELECTED styling comes from the theme's SELECTABLE/FILLED recipe — the same one\n   * the vertical tab trigger used, so the rail looks exactly as it did and still follows whatever a\n   * theme dresses it in. The recipe keys on `data-state`, which each link sets from `active`.\n   */\n  const railItemRecipe = getRecipe(UIBehavior.SELECTABLE, SelectableVariant.FILLED);\n  const eyebrowRecipe = getRecipe(UIBehavior.TYPOGRAPHY, TypographyVariant.EYEBROW);\n  // A sub-category heading (#2329) sits one step below its category's eyebrow.\n  const groupHeadingRecipe = getRecipe(UIBehavior.TYPOGRAPHY, TypographyVariant.LABEL);\n  const { renderIcon } = useIconRegistry();\n  const isMobile = UIConfig?.currentBreakpoint === ViewportBreakpoint.MOBILE;\n  const mobileShowsSection = isMobile && Boolean(sectionRef);\n\n  const handleBackToSections = useCallback(() => {\n    routerNavigate(CommonRoutePaths.settings, { replace: true });\n  }, [routerNavigate]);\n\n\n  const { tComponent, tSettingsHubCategory, tSettingsHubGroup, tSettingsHubSection, isReady } = useI18n({\n    component: FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB,\n  });\n  // Hub chrome labels (title, rail aria-label) read from the scoped component\n  // namespace. Copy is owned by the labelling pipeline (declared in the sibling\n  // `.labels.ts`), so there are deliberately no inline fallback strings — the\n  // hub gates on `isReady` below, the same convention as the panels it hosts\n  // (`AppPage_SecuritySettings` / `AppPage_AppearanceSettings`). The dynamic\n  // category/section labels keep their config-authored `fallbackLabel` (the\n  // required contract of `tSettingsHubCategory` / `tSettingsHubSection`).\n  const t = useCallback(\n    (key: string) => tComponent(FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB, key),\n    [tComponent],\n  );\n\n  /** The pushed section's own label — the mobile header's only cue for where you are. */\n  const activeSectionLabel = useMemo(() => {\n    const section = config.sections.find(candidate => candidate.ref === active);\n    return section ? tSettingsHubSection(section.ref, section.label) : undefined;\n  }, [config.sections, active, tSettingsHubSection]);\n\n  /*\n   * Bring the OPEN section into view when it is not — and only then.\n   *\n   * The rail carries thirty destinations and scrolls, so a cold load or a deep link at a section\n   * near the bottom (`/settings/webhooks`) renders a list scrolled to the top with nothing on it\n   * marked: the one cue that says where you are is off screen, and the reader has to scroll a list\n   * of thirty to find out.\n   *\n   * `block: 'nearest'` is what makes this safe to run on every section change rather than only on\n   * mount: it is defined to move the container by the MINIMUM needed, so an item already fully\n   * visible — the ordinary case when somebody clicks the rail — is not scrolled at all. That is the\n   * whole reason it is 'nearest' and not 'center', which would yank the list on every click and\n   * replace one annoyance with another.\n   *\n   * It pairs with, and does not substitute for, the key fix in `getContentKey`: this positions the\n   * rail, that one stops the rail being rebuilt (and its scroll offset discarded) on every click.\n   * Without the key fix this would fire into a freshly mounted `<nav>` each time and merely make the\n   * reset land somewhere else.\n   */\n  const activeRailItemRef = useRef<HTMLAnchorElement | null>(null);\n  useEffect(() => {\n    if (!active) return;\n    activeRailItemRef.current?.scrollIntoView({ block: 'nearest', inline: 'nearest' });\n  }, [active]);\n\n  /*\n   * Gate on label readiness so the hub chrome never flashes raw key paths — copy is pipeline-owned\n   * with no inline fallback, matching the hosted panels.\n   *\n   * Through `LoadingGate` rather than `if (!isReady) return null`, which is what this was until\n   * 2026-09-17. Returning null is correct about the raw keys and wrong about everything else: the\n   * overlay is already open and mounted by the time the hub renders, so a null gave a person an\n   * empty dialog with no indication that anything was coming — and the wait got longer as the rail\n   * grew. `LoadingGate` keeps the same guarantee (children are not rendered until ready) and lets\n   * the ENCLOSING SURFACE POLICY choose the treatment, which for an overlay is to overlay the\n   * children rather than to blank them. The hub does not pick a visual here on purpose: that choice\n   * belongs to the surface it is hosted in, and hard-coding a skeleton would override a policy the\n   * design system already owns.\n   */\n  return (\n    <LoadingGate readiness={[{ id: 'settings-hub-labels', isReady }]}>\n      {/*\n        `min-w-0` is REQUIRED: this is the grid item of the (fixed-width) dialog surface.\n        Without it the item keeps its default `min-width: auto` and cannot shrink below its\n        content's min-content width — a wide field row (e.g. a file card with a long\n        filename, or a text input) then pushes the whole two-pane body past the dialog edge,\n        and the dialog's `overflow-x: hidden` clips the right side of every field. `min-w-0`\n        lets the item fit the track so the content pane (and its form) reflow within it.\n      */}\n      <div className=\"flex h-full min-h-0 flex-col min-w-0\">\n      <header className=\"flex h-14 shrink-0 items-center gap-item border-b px-card-lg\">\n        {mobileShowsSection && (\n          <Button\n            variant={ButtonVariants_Variant.GHOST}\n            size={ButtonSize.ICON_SM}\n            aria-label={t('backToSections')}\n            onClick={handleBackToSections}\n          >\n            {renderIcon(StandardIconReference.BACK, { size: IconSize.SM })}\n          </Button>\n        )}\n        {/* On mobile the header names the SECTION you pushed into — without it the back-stack loses\n            the one cue that says where you are, since the rail that said so is off screen. */}\n        <h2 className=\"truncate text-base font-semibold tracking-tight\">\n          {mobileShowsSection ? activeSectionLabel ?? t('title') : t('title')}\n        </h2>\n      </header>\n      <div className=\"flex min-h-0 flex-1\">\n        {/*\n          * The rail is NAVIGATION, not a tablist, and until 2026-09-19 it was rendered as one —\n          * thirty `<button role=\"tab\">` in a `TabsList`. Three things followed, all measured on the\n          * running application:\n          *\n          *  - No destination could be OPENED any other way. `/settings/members` is a real route the\n          *    hub already writes to the address bar, but with no `href` there was nothing to\n          *    ⌘-click, middle-click or \"copy link address\" — the one gesture an operator uses to\n          *    send a colleague to a setting.\n          *  - The ARIA pattern was wrong for what this is. A tablist switches panels WITHIN a view;\n          *    a list of destinations that each own a URL is navigation (WAI-ARIA APG). That is not a\n          *    preference — it decides what an assistive technology announces and how it is reached.\n          *  - The category headings carried `role=\"presentation\"`, so they were invisible to\n          *    assistive technology, and a tablist cannot nest labelled groups anyway. That left AT\n          *    users with a flat list of thirty items containing NINE duplicated names — \"General\",\n          *    \"Entitlements\", \"API keys\", \"Connected accounts\", \"Single sign-on\", \"User\n          *    provisioning\", \"Audit streaming\", \"Webhooks\" and \"Audit log\" each appear under two\n          *    scopes — with nothing to tell the pairs apart.\n          *\n          * A `<nav>` of grouped links fixes all three at once, and the keyboard concern the previous\n          * shape was chosen for DISSOLVES rather than needing to be reimplemented: roving tabindex\n          * is a tablist requirement. Navigation uses ordinary Tab order through links, which is what\n          * a reader expects and what the browser already does.\n          *\n          * `replace` is kept from the old `navigateToSection` and for its reason: a settings rail is\n          * a switcher, not a trail, so Back means \"leave settings\" rather than walking every section\n          * somebody browsed.\n          */}\n        <nav\n          aria-label={t('sectionsNavLabel')}\n          className={cn(\n            'overflow-y-auto px-card-sm py-card',\n            // Desktop: the fixed rail beside the content. Mobile: the full-width first screen of the\n            // back-stack, with no divider because there is nothing beside it.\n            isMobile ? 'w-full flex-1' : 'w-60 shrink-0 border-e',\n            mobileShowsSection && 'hidden',\n          )}\n        >\n          {categories.map((category, index) => {\n            const sections = sectionsForCategory(config, category.ref);\n            if (sections.length === 0) return null;\n            const categoryLabelId = `settings-hub-category-${category.ref}`;\n            return (\n              <React.Fragment key={category.ref}>\n                {index > 0 && <Separator className=\"my-item\" />}\n                {/* Named, not decorative: this heading is the ONLY thing distinguishing the nine\n                    section labels that appear under two scopes, so it has to reach AT. */}\n                <div\n                  id={categoryLabelId}\n                  className={cn(\"px-card-sm py-card-sm\", eyebrowRecipe.base)}\n                >\n                  {tSettingsHubCategory(category.ref, category.label)}\n                </div>\n                <div role=\"group\" aria-labelledby={categoryLabelId}>\n                  {railBlocks(category, sections).map(block => (\n                    <React.Fragment key={block.group?.ref ?? '__ungrouped'}>\n                      {block.group && (\n                        <div\n                          id={`${categoryLabelId}-group-${block.group.ref}`}\n                          className={cn('px-card-sm pt-card-sm pb-item-xs text-muted-foreground', groupHeadingRecipe.base)}\n                        >\n                          {tSettingsHubGroup(category.ref, block.group.ref, block.group.label)}\n                        </div>\n                      )}\n                      <div role={block.group ? 'group' : undefined} aria-labelledby={block.group ? `${categoryLabelId}-group-${block.group.ref}` : undefined}>\n                      {block.sections.map(section => {\n                        const isActive = section.ref === active;\n                        return (\n                          // `data-ref` = i18n-independent automation hook (see sub-tabs above).\n                          <Link\n                            key={section.ref}\n                            // Only the OPEN item is tracked — the effect above needs one element, and a\n                            // ref on all thirty would be thirty callbacks re-created every render.\n                            ref={isActive ? activeRailItemRef : undefined}\n                            to={`${CommonRoutePaths.settings}/${section.ref}`}\n                            replace\n                            data-ref={section.ref}\n                            aria-current={isActive ? 'page' : undefined}\n                            data-state={isActive ? 'active' : 'inactive'}\n                            className={cn(\n                              RAIL_ITEM_CLASSES,\n                              // Composed part by part, exactly as the tab trigger does — `getRecipe`\n                              // returns a STRUCTURE (base / states / motion), not a class string, and\n                              // handing the object to `cn()` silently yields nothing. That is how the\n                              // first cut of this lost the selected fill while every other class held.\n                              railItemRecipe.base,\n                              railItemRecipe.states.focus,\n                              railItemRecipe.states.selected,\n                              railItemRecipe.motion.transition,\n                            )}\n                          >\n                            {/* The destination's glyph, sized by the rail item's own `[&_svg]:size-4`. Declared on every\n                                engine destination (#2378); a section that names none is drawn by its words alone. */}\n                            {section.icon && renderIcon(section.icon, { size: IconSize.SM })}\n                            {tSettingsHubSection(section.ref, section.label)}\n                          </Link>\n                        );\n                      })}\n                      </div>\n                    </React.Fragment>\n                  ))}\n                </div>\n              </React.Fragment>\n            );\n          })}\n        </nav>\n        <div\n          className={cn(\n            'min-w-0 flex-1 overflow-y-auto p-card-lg',\n            isMobile && !mobileShowsSection && 'hidden',\n          )}\n        >\n          {/*\n            * ONE section renders — the active one. `TabsContent` unmounts its inactive panels\n            * anyway, so this is the same mounting behaviour written directly rather than delegated\n            * to a primitive the rail no longer uses.\n            */}\n          {config.sections.filter(section => section.ref === active).map(section => (\n            <React.Fragment key={section.ref}>\n              {section.entitlementFeatureId ? (\n                // Section SURVIVED because the app OFFERS this feature\n                // (`runtimeAvailability` capability = plan-independent\n                // `isFeatureOffered`). Render its body through the entitlement gate:\n                // entitled → the config surface; offered-but-not-entitled → the\n                // policy-driven upgrade/add-on prompt (never a silent disappearance).\n                <EntitlementGatedSettingsSection featureId={section.entitlementFeatureId} keptConfigurationNotice={t('entitlementLapsedConfigurationKept')}>\n                  <SettingsTargetRenderer\n                    target={section.target}\n                    resolveSubTabLabel={tSettingsHubSection}\n                    subTabRef={section.ref === active ? subTabRef : undefined}\n                    onSubTabChange={handleSubTabChange}\n                  />\n                </EntitlementGatedSettingsSection>\n              ) : (\n                <SettingsTargetRenderer\n                  target={section.target}\n                  resolveSubTabLabel={tSettingsHubSection}\n                  subTabRef={section.ref === active ? subTabRef : undefined}\n                  onSubTabChange={handleSubTabChange}\n                />\n              )}\n            </React.Fragment>\n          ))}\n        </div>\n      </div>\n    </div>\n    </LoadingGate>\n  );\n}\n\n/**\n * A settings section whose content the organization must be ENTITLED to (#2367).\n *\n * Not entitled: the upgrade prompt replaces the configuration surface, as before, and a notice above it\n * says what happened to whatever was configured there. The backend keeps that configuration and stops\n * applying it while the entitlement is missing (single sign-on stops being required, a directory may\n * only read and remove access, security events stop being exported, webhooks stop being delivered),\n * and it applies again on its own once the entitlement returns. Without the notice an administrator\n * whose plan lapsed would read the prompt as \"this was never set up\", or as \"it was deleted\".\n *\n * A feature whose unavailability behaviour is HIDE renders nothing, notice included.\n */\nfunction EntitlementGatedSettingsSection({ featureId, keptConfigurationNotice, children }: {\n  featureId: string;\n  keptConfigurationNotice: string;\n  children: React.ReactNode;\n}): React.JSX.Element {\n  const availability = useFeatureAvailability(featureId);\n  const showsNotice = !availability.isAvailable && availability.behavior !== FeatureUnavailabilityBehavior.HIDE;\n  return (\n    <div className=\"space-y-card\">\n      {showsNotice && (\n        <Alert variant=\"info\">\n          <AlertDescription>{keptConfigurationNotice}</AlertDescription>\n        </Alert>\n      )}\n      <FeatureGate featureId={featureId}>{children}</FeatureGate>\n    </div>\n  );\n}\n"]}

package/dist/esm/components/settings/SettingsHub.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SettingsHub.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/settings/SettingsHub.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAO7C,eAAO,MAAM,2BAA2B,EAAE,mBAAmB,EAM5D,CAAC"}
+{"version":3,"file":"SettingsHub.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/settings/SettingsHub.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAO7C,eAAO,MAAM,2BAA2B,EAAE,mBAAmB,EAQ5D,CAAC"}

package/dist/esm/components/settings/SettingsHub.labels.js

@@ -10,6 +10,8 @@ export const AppLayoutsSettingsHubLabels = [
     // Mobile only: the hub becomes a back-stack there (the rail is the first screen, a section is
     // pushed over it), so this is the control that returns from a section to the list.
     { ref: 'backToSections', kind: LabelKind.LABEL, purpose: 'Accessible label for the control that returns from a settings section to the sections list on a small screen' },
+    // #2367: shown above the upgrade prompt of a section the organization is no longer entitled to.
+    { ref: 'entitlementLapsedConfigurationKept', kind: LabelKind.DESCRIPTION, purpose: 'Notice above the upgrade prompt of a settings section the organization is not entitled to on its current plan: anything already configured in this section is kept, is not applied while the plan does not include it, and applies again automatically once it does' },
 ];
 registerComponentLabels(FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB, AppLayoutsSettingsHubLabels);
 //# sourceMappingURL=SettingsHub.labels.js.map

package/dist/esm/components/settings/SettingsHub.labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"SettingsHub.labels.js","sourceRoot":"","sources":["../../../../../src/components/settings/SettingsHub.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EAET,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,oDAAoD;AACpD,MAAM,CAAC,MAAM,2BAA2B,GAA0B;IAChE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kDAAkD,EAAE;IACtG,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qEAAqE,EAAE;IAClI,8FAA8F;IAC9F,mFAAmF;IACnF,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,8GAA8G,EAAE;CAC1K,CAAC;AAEF,uBAAuB,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC","sourcesContent":["import {\n  FrontendComponentType,\n  LabelKind,\n  type LabellingUnitaryDef,\n  registerComponentLabels,\n} from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for the Settings Hub's fixed chrome (header +\n// rail aria-label). The DYNAMIC category/section labels are NOT here — those\n// live in the `settings_hub.*` namespace (tSettingsHubCategory/Section), keyed\n// by registry ref. Statically scanned by the dev companion; NOT imported at\n// runtime, so it never ships in the browser bundle.\nexport const AppLayoutsSettingsHubLabels: LabellingUnitaryDef[] = [\n  { ref: 'title', kind: LabelKind.HEADING, purpose: 'Header title of the unified Settings Hub overlay' },\n  { ref: 'sectionsNavLabel', kind: LabelKind.LABEL, purpose: 'Accessible label for the vertical settings-sections navigation rail' },\n  // Mobile only: the hub becomes a back-stack there (the rail is the first screen, a section is\n  // pushed over it), so this is the control that returns from a section to the list.\n  { ref: 'backToSections', kind: LabelKind.LABEL, purpose: 'Accessible label for the control that returns from a settings section to the sections list on a small screen' },\n];\n\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB, AppLayoutsSettingsHubLabels);\n"]}
+{"version":3,"file":"SettingsHub.labels.js","sourceRoot":"","sources":["../../../../../src/components/settings/SettingsHub.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EAET,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,oDAAoD;AACpD,MAAM,CAAC,MAAM,2BAA2B,GAA0B;IAChE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kDAAkD,EAAE;IACtG,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qEAAqE,EAAE;IAClI,8FAA8F;IAC9F,mFAAmF;IACnF,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,8GAA8G,EAAE;IACzK,gGAAgG;IAChG,EAAE,GAAG,EAAE,oCAAoC,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qQAAqQ,EAAE;CAC3V,CAAC;AAEF,uBAAuB,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC","sourcesContent":["import {\n  FrontendComponentType,\n  LabelKind,\n  type LabellingUnitaryDef,\n  registerComponentLabels,\n} from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for the Settings Hub's fixed chrome (header +\n// rail aria-label). The DYNAMIC category/section labels are NOT here — those\n// live in the `settings_hub.*` namespace (tSettingsHubCategory/Section), keyed\n// by registry ref. Statically scanned by the dev companion; NOT imported at\n// runtime, so it never ships in the browser bundle.\nexport const AppLayoutsSettingsHubLabels: LabellingUnitaryDef[] = [\n  { ref: 'title', kind: LabelKind.HEADING, purpose: 'Header title of the unified Settings Hub overlay' },\n  { ref: 'sectionsNavLabel', kind: LabelKind.LABEL, purpose: 'Accessible label for the vertical settings-sections navigation rail' },\n  // Mobile only: the hub becomes a back-stack there (the rail is the first screen, a section is\n  // pushed over it), so this is the control that returns from a section to the list.\n  { ref: 'backToSections', kind: LabelKind.LABEL, purpose: 'Accessible label for the control that returns from a settings section to the sections list on a small screen' },\n  // #2367: shown above the upgrade prompt of a section the organization is no longer entitled to.\n  { ref: 'entitlementLapsedConfigurationKept', kind: LabelKind.DESCRIPTION, purpose: 'Notice above the upgrade prompt of a settings section the organization is not entitled to on its current plan: anything already configured in this section is kept, is not applied while the plan does not include it, and applies again automatically once it does' },\n];\n\nregisterComponentLabels(FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB, AppLayoutsSettingsHubLabels);\n"]}

package/dist/esm/components/settings/SettingsResourceOperationPanel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SettingsResourceOperationPanel.d.ts","sourceRoot":"","sources":["../../../../../src/components/settings/SettingsResourceOperationPanel.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAA8B,MAAM,OAAO,CAAC;AAanD,MAAM,WAAW,mCAAmC;IAClD,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAiCD,wBAAgB,8BAA8B,CAAC,EAC7C,YAAY,EACZ,SAAS,EACT,gBAAgB,GACjB,EAAE,mCAAmC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CA4FzD"}
+{"version":3,"file":"SettingsResourceOperationPanel.d.ts","sourceRoot":"","sources":["../../../../../src/components/settings/SettingsResourceOperationPanel.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAA8B,MAAM,OAAO,CAAC;AAgBnD,MAAM,WAAW,mCAAmC;IAClD,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAiCD,wBAAgB,8BAA8B,CAAC,EAC7C,YAAY,EACZ,SAAS,EACT,gBAAgB,GACjB,EAAE,mCAAmC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CA8GzD"}

package/dist/esm/components/settings/SettingsResourceOperationPanel.js

@@ -32,11 +32,14 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * @see core/runtime/AppRouter.tsx — `ResourcePageWrapper`, the routed counterpart
  */
 import { useContext, useMemo } from 'react';
+import { CoreResourceType } from '@wildo-ai/saas-models';
 import { useResourceRegistry } from '../../core/resources/useResourceRegistry.js';
 import { useAppScopeSafe } from '../../core/scope/useAppScope.js';
 import { ApplicationContext } from '../../core/runtime/ApplicationContext.shared.js';
 import { ScopeUtilsService } from '../../core/scope/scope.utils.frontend.service.js';
 import { frontendResourceUtils } from '../../core/resources/frontend-resource.utils.js';
+import { operationAddressesOneRecord } from '../../core/resources/operation-semantics.frontend.utils.js';
+import { isCallerIdentityRecordResource } from '../../core/resources/caller-identity-record.frontend.utils.js';
 import { SettingsSectionNavigationHost } from './SettingsSectionNavigationHost.js';
 /**
  * Select the operation object matching `operationIdentifier` (+ optional
@@ -98,7 +101,7 @@ export function SettingsResourceOperationPanel({ resourceType, operation, operat
             return undefined;
         // Inject the live primary-scope identifiers (org/user/app) so an org-scoped
         // resource resolves to the current organization without a URL param.
-        const contextResourceIdentifiers = ScopeUtilsService.buildResourceOperationContextIdentifiers({
+        const scopeContextResourceIdentifiers = ScopeUtilsService.buildResourceOperationContextIdentifiers({
             currentUserId: appScope?.currentUserId,
             currentOrganizationId: appScope?.currentOrganizationId,
             currentApplicationId,
@@ -107,6 +110,23 @@ export function SettingsResourceOperationPanel({ resourceType, operation, operat
             liveAppScopeContextResourceIdentifiers: appScope?.buildContextResourceIdentifiers?.(),
             explicitContextResourceIdentifiers: {},
         });
+        // The record's OWN id, when the record IS the signed-in principal (#2324). A routed page reads it from its URL;
+        // here there is none, and the scope identifiers name the principal under its scope type (`users`), not under
+        // this resource's own (`user_self`), so an operation on that one record (`deactivate_account`) could not
+        // address it and its form failed to load.
+        //
+        // The record IS the caller's account when `isCallerIdentityRecordResource` says so (its key names the caller and
+        // its field identifier is the user's own). Its id is then the caller's user id from the scope, reused, never
+        // invented. `users` is never it, so an administrator's pane on another user is never handed the caller's id. A
+        // collection verb, or a context that already names the record, is left as it is.
+        const ownRecordId = isCallerIdentityRecordResource(config, registry.allResourceFieldIdentifiers)
+            && operationAddressesOneRecord(resolvedOperation)
+            && scopeContextResourceIdentifiers[resourceType] === undefined
+            ? scopeContextResourceIdentifiers[CoreResourceType.USERS]
+            : undefined;
+        const contextResourceIdentifiers = typeof ownRecordId === 'string'
+            ? { ...scopeContextResourceIdentifiers, [resourceType]: ownRecordId }
+            : scopeContextResourceIdentifiers;
         // Derive parent requirements from the injected identifiers (no route params
         // to walk here), so the scoped LIST/READ query carries its org parent edge.
         const parentResourcesRequirements = frontendResourceUtils.buildParentResourcesRequirements(resourceType, contextResourceIdentifiers, registry);