@xenosystem/blocks 0.13.14 → 0.13.15

package/dist/trust/index.d.ts

@@ -1,4 +1,4 @@
-import { PanelModule, PanelManifest } from '@xenosystem/block-sdk';
+import { PanelModule, PanelManifest, BlockDeclaration } from '@xenosystem/block-sdk';
 import { ReactNode } from 'react';
 
 /**
@@ -750,31 +750,133 @@ declare const CONSENT_PANEL_ID = "xeno.core.consent";
 declare const consentManifest: PanelManifest;
 
 /**
- * The Consent panel view.
+ * The Consent panel AS A DECLARATION — the seventeenth declared block: one elicitation at a time,
+ * a PERMISSION (scopes + how long) or a QUESTION (options and/or a typed answer), never in bulk.
+ *
+ * Everything drawn is data: the header (risk and kind badges, the subject, the waiting count), the
+ * request (title, detail, its facts as `KeyValue`s), the permission's scope rows with a `Toggle`
+ * each and the duration control, or the question's option rows and the answer field with its
+ * length counter, Deny / Allow or Cancel / Submit, the status bar with the expiry. Every rule the
+ * code view carried survives: a question has no "deny" — refusing is a CANCELLATION, and the two
+ * are different outcomes for the host; no auto-focus on Allow, so a stray Enter grants nothing;
+ * the button's `disabled` is the SAME predicate `submit()` enforces. No runtime-bound unit.
+ */
+
+type Tone = 'neutral' | 'warning' | 'error';
+interface ConsentViewFact {
+    key: string;
+    value: string;
+}
+interface ConsentViewScope {
+    id: string;
+    label: string;
+    detail?: string;
+    risk?: string;
+    riskTone: Tone;
+    granted: boolean;
+    grantable: boolean;
+    toggleLabel: string;
+    selected: boolean;
+}
+interface ConsentViewOption {
+    id: string;
+    label: string;
+    detail?: string;
+    risk?: string;
+    riskTone: Tone;
+    toggleLabel: string;
+    selected: boolean;
+}
+interface ConsentViewModel {
+    idle: boolean;
+    emptyHint: string;
+    active: boolean;
+    riskLabel: string;
+    riskTone: Tone;
+    kindLabel: string;
+    subject?: string;
+    waiting?: string;
+    title: string;
+    detail?: string;
+    facts: ConsentViewFact[];
+    permission: boolean;
+    scopes: ConsentViewScope[];
+    durations: {
+        value: string;
+        label: string;
+    }[];
+    duration: string;
+    unrememberable: boolean;
+    allowDisabled: boolean;
+    question: boolean;
+    hasOptions: boolean;
+    options: ConsentViewOption[];
+    wantsText: boolean;
+    textLabel?: string;
+    multiline: boolean;
+    placeholder: string;
+    draft: string;
+    hasCounter: boolean;
+    counter: string;
+    overLimit: boolean;
+    submitLabel: string;
+    submitDisabled: boolean;
+    pendingLabel: string;
+    expiryLabel?: string;
+}
+type ConsentUiIntent = {
+    kind: 'scope';
+    id: string;
+    on: boolean;
+} | {
+    kind: 'duration';
+    duration: XenoConsentDuration;
+} | {
+    kind: 'option';
+    id: string;
+    on: boolean;
+} | {
+    kind: 'text';
+    value: string;
+} | {
+    kind: 'allow';
+} | {
+    kind: 'deny';
+} | {
+    kind: 'submit';
+} | {
+    kind: 'dismiss';
+};
+interface ConsentViewOptions {
+    showQueueCount?: boolean;
+    emptyHint?: string;
+}
+/** Derive the view from the live controller — the runtime calls this on every draw. */
+declare function consentViewState(c: ConsentController, options?: ConsentViewOptions): ConsentViewModel;
+declare function applyConsentUi(c: ConsentController, intent: ConsentUiIntent): void;
+declare const consentViewManifest: PanelManifest;
+declare const BEHAVIOURS: {
+    'trust/consentPanelView': (inputs: Record<string, unknown>) => ConsentViewModel;
+};
+declare const CONSENT_RUNTIME_UNITS: readonly [];
+declare const CONSENT_DECLARATION: BlockDeclaration;
+
+/**
+ * The Consent panel view — the CODE VIEW of `CONSENT_DECLARATION`, drawing the same
+ * `ConsentViewModel` byte-identical (the equivalence suite holds the two together). No runtime-bound
+ * unit; every intent goes through `applyConsentUi`.
  *
  * Composes `@xenosystem/components/chrome`; the host must ensure `@xenosystem/workbench/primitives.css` is
  * present.
  *
- * Two deliberate absences: **no "Allow all"** (bulk approval is how consent fatigue becomes a
- * security hole) and **no auto-focus on Allow** (a stray Enter must not grant anything).
- *
- * 🔴 **A third absence, added with the question kinds: nothing here submits on its own.** The
- * question forms carry no auto-submit, no debounce-then-send, and no Enter-to-answer on the
- * single-line field. The emitted answer is always the product of a click the user made, which is
- * the view's half of the controller's *"no value without a user action"* invariant — the guard
- * lives in `submit()`, but a view that fired it on a keystroke would satisfy the guard while
- * defeating the point.
- *
  * @module
  */
 
 /** Props for {@link ConsentPanelView}. */
-interface ConsentPanelViewProps {
+interface ConsentPanelViewProps extends ConsentViewOptions {
     controller: ConsentController;
-    showQueueCount?: boolean;
-    emptyHint?: string;
 }
 /** The Consent panel view. */
-declare function ConsentPanelView({ controller, showQueueCount, emptyHint, }: ConsentPanelViewProps): ReactNode;
+declare function ConsentPanelView({ controller, showQueueCount, emptyHint }: ConsentPanelViewProps): ReactNode;
 
-export { CONSENT_PANEL_ID, ConsentController, type ConsentControllerOptions, type ConsentHostBridge, type ConsentPanelState, ConsentPanelView, type ConsentPanelViewProps, type ConsentRenderContext, type ConsentViewState, type CreateConsentPanelOptions, ELICITATION_RESULT_SCHEMA, ELICITATION_SCHEMA, type XenoChoiceAnswer, type XenoChoiceElicitation, type XenoConsentDecision, type XenoConsentDuration, type XenoConsentKind, type XenoConsentRequest, type XenoConsentRisk, type XenoConsentScope, type XenoElicitation, type XenoElicitationAnswer, type XenoElicitationAsk, type XenoElicitationBase, type XenoElicitationCancelled, type XenoElicitationOption, type XenoElicitationResult, type XenoPathAnswer, type XenoPathElicitation, type XenoQuestionElicitation, type XenoTextAnswer, type XenoTextElicitation, allowedDurations, autoCancel, autoDeny, consentManifest, consentPanel, createConsentPanel, effectiveRisk, elicitationAsk, elicitationOptions, findOption, isConsentRequest, isElicitation, isElicitationAnswer, isElicitationCancelled, isExpired, isPermissionElicitation, maxTextLength, selectableScopes };
+export { BEHAVIOURS as CONSENT_BEHAVIOURS, CONSENT_DECLARATION, CONSENT_PANEL_ID, CONSENT_RUNTIME_UNITS, ConsentController, type ConsentControllerOptions, type ConsentHostBridge, type ConsentPanelState, ConsentPanelView, type ConsentPanelViewProps, type ConsentRenderContext, type ConsentUiIntent, type ConsentViewFact, type ConsentViewModel, type ConsentViewOption, type ConsentViewOptions, type ConsentViewScope, type ConsentViewState, type CreateConsentPanelOptions, ELICITATION_RESULT_SCHEMA, ELICITATION_SCHEMA, type XenoChoiceAnswer, type XenoChoiceElicitation, type XenoConsentDecision, type XenoConsentDuration, type XenoConsentKind, type XenoConsentRequest, type XenoConsentRisk, type XenoConsentScope, type XenoElicitation, type XenoElicitationAnswer, type XenoElicitationAsk, type XenoElicitationBase, type XenoElicitationCancelled, type XenoElicitationOption, type XenoElicitationResult, type XenoPathAnswer, type XenoPathElicitation, type XenoQuestionElicitation, type XenoTextAnswer, type XenoTextElicitation, allowedDurations, applyConsentUi, autoCancel, autoDeny, consentManifest, consentPanel, consentViewManifest, consentViewState, createConsentPanel, effectiveRisk, elicitationAsk, elicitationOptions, findOption, isConsentRequest, isElicitation, isElicitationAnswer, isElicitationCancelled, isExpired, isPermissionElicitation, maxTextLength, selectableScopes };

package/dist/trust/index.js

@@ -661,234 +661,364 @@ var consentManifest = {
 import { useSyncExternalStore } from "react";
 import {
   Badge,
+  Column,
   EmptyState,
+  Input,
+  KeyValue,
   Row,
   RowList,
   ScrollArea,
   SegmentedControl,
+  Stack,
   StatusBar,
+  Text,
+  TextArea,
   TextButton,
   Toggle,
   Toolbar,
   ToolbarGroup
 } from "@xenosystem/components/chrome";
-import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-var RISK_TONE = {
-  low: "neutral",
-  medium: "warning",
-  high: "error"
-};
+
+// src/trust/consent/declaration.ts
+var RISK_TONE = { low: "neutral", medium: "warning", high: "error" };
 var DURATION_LABEL = { once: "Once", session: "Session", always: "Always" };
-var FIELD_STYLE = {
-  width: "100%",
-  fontSize: 11,
-  background: "var(--xeno-canvas)",
-  border: "1px solid var(--xeno-border-subtle)",
-  borderRadius: 2,
-  padding: 4,
-  color: "inherit",
-  // 🔴 Text entry never takes the global focus ring: `outline-offset` draws it OUTSIDE the field,
-  // so on dark chrome it reads as a stray stroke over the container and the control looks broken.
-  outline: "none",
-  resize: "none"
-};
-var SUBMIT_LABEL = {
-  text: "Submit",
-  path: "Use this path",
-  choice: "Confirm"
-};
-function ConsentPanelView({
-  controller,
-  showQueueCount = true,
-  emptyHint
-}) {
-  const state = useSyncExternalStore(controller.subscribe, controller.getState, controller.getState);
-  const request = state.current;
+var SUBMIT_LABEL = { text: "Submit", path: "Use this path", choice: "Confirm" };
+function consentViewState(c, options = {}) {
+  const s = c.getState();
+  const request = s.current;
+  const showQueueCount = options.showQueueCount ?? true;
+  const emptyHint = options.emptyHint ?? "Requests needing your approval appear here.";
+  const base = { idle: !request, emptyHint, active: !!request };
   if (!request) {
-    return /* @__PURE__ */ jsx(
-      EmptyState,
-      {
-        title: "Nothing pending",
-        hint: emptyHint ?? "Requests needing your approval appear here."
-      }
-    );
+    return { ...base, riskLabel: "", riskTone: "neutral", kindLabel: "", title: "", facts: [], permission: false, scopes: [], durations: [], duration: "once", unrememberable: false, allowDisabled: true, question: false, hasOptions: false, options: [], wantsText: false, multiline: false, placeholder: "", draft: "", hasCounter: false, counter: "", overLimit: false, submitLabel: "Submit", submitDisabled: true, pendingLabel: `${s.pending} pending` };
   }
   const risk = effectiveRisk(request);
   const ask = elicitationAsk(request);
   const permission = isPermissionElicitation(request) ? request : null;
-  return /* @__PURE__ */ jsxs("div", { style: { display: "flex", flexDirection: "column", height: "100%", minHeight: 0 }, children: [
-    /* @__PURE__ */ jsx(
-      Toolbar,
+  const opts = permission ? [] : elicitationOptions(request);
+  const chosen = opts.find((o) => o.id === s.selectedOptionId);
+  const max = permission ? null : maxTextLength(request);
+  const extra = request;
+  const wantsText = !permission && (ask !== "choice" || chosen?.requiresText === true);
+  return {
+    ...base,
+    riskLabel: `${risk} risk`,
+    riskTone: RISK_TONE[risk],
+    kindLabel: permission ? permission.kind : ask,
+    subject: request.subject,
+    waiting: showQueueCount && s.queued.length > 0 ? `+${s.queued.length} waiting` : void 0,
+    title: request.title,
+    detail: request.detail,
+    facts: request.fields ? Object.entries(request.fields).map(([key, value]) => ({ key, value: String(value) })) : [],
+    permission: !!permission,
+    scopes: permission ? permission.scopes.map((scope) => ({
+      id: scope.id,
+      label: scope.label,
+      detail: scope.detail,
+      risk: scope.risk && scope.risk !== risk ? scope.risk : void 0,
+      riskTone: scope.risk ? RISK_TONE[scope.risk] : "neutral",
+      granted: scope.alreadyGranted === true,
+      grantable: scope.alreadyGranted !== true,
+      toggleLabel: `Grant ${scope.label}`,
+      selected: s.selectedScopeIds.includes(scope.id)
+    })) : [],
+    durations: permission ? allowedDurations(permission).map((d) => ({ value: d, label: DURATION_LABEL[d] })) : [],
+    duration: s.duration,
+    unrememberable: permission?.remember === "forbidden",
+    allowDisabled: !!permission && permission.scopes.some((sc) => !sc.alreadyGranted) && s.selectedScopeIds.length === 0,
+    question: !permission,
+    hasOptions: opts.length > 0,
+    options: opts.map((option) => ({
+      id: option.id,
+      label: option.label,
+      detail: option.detail,
+      risk: option.risk && option.risk !== risk ? option.risk : void 0,
+      riskTone: option.risk ? RISK_TONE[option.risk] : "neutral",
+      toggleLabel: `Choose ${option.label}`,
+      selected: s.selectedOptionId === option.id
+    })),
+    wantsText,
+    textLabel: extra.textLabel,
+    multiline: ask === "text" && extra.multiline === true,
+    placeholder: extra.placeholder ?? (ask === "path" ? "Type or paste a path\u2026" : "Type your answer\u2026"),
+    draft: s.draftText,
+    hasCounter: max !== null,
+    counter: max !== null ? `${s.draftText.length} / ${max}` : "",
+    overLimit: max !== null && s.draftText.length > max,
+    submitLabel: SUBMIT_LABEL[ask] ?? "Submit",
+    submitDisabled: !s.canSubmit,
+    pendingLabel: `${s.pending} pending`,
+    expiryLabel: s.expiresInMs !== null ? `expires in ${Math.ceil(s.expiresInMs / 1e3)}s \u2014 ${permission ? "denies" : "cancels"}` : void 0
+  };
+}
+function applyConsentUi(c, intent) {
+  switch (intent.kind) {
+    case "scope":
+      c.toggleScope(intent.id, intent.on);
+      break;
+    case "duration":
+      c.setDuration(intent.duration);
+      break;
+    case "option":
+      c.selectOption(intent.on ? intent.id : null);
+      break;
+    case "text":
+      c.setDraftText(intent.value);
+      break;
+    case "allow":
+      c.allow();
+      break;
+    case "deny":
+      c.deny();
+      break;
+    case "submit":
+      c.submit();
+      break;
+    case "dismiss":
+      c.dismiss();
+      break;
+  }
+}
+var consentViewManifest = {
+  id: consentManifest.id,
+  version: "1.0.0",
+  title: "Consent",
+  category: "trust",
+  layout: { slot: "side" },
+  inputs: [{ id: "view", type: "object", label: "View state", description: "The ConsentViewModel the runtime derives from the controller on every draw." }],
+  outputs: [{ id: "ui", type: "object", label: "UI intent", description: "{ kind, \u2026 } \u2014 applied by the runtime to the controller." }],
+  commands: []
+};
+var EMPTY = { idle: true, emptyHint: "Requests needing your approval appear here.", active: false, riskLabel: "", riskTone: "neutral", kindLabel: "", title: "", facts: [], permission: false, scopes: [], durations: [], duration: "once", unrememberable: false, allowDisabled: true, question: false, hasOptions: false, options: [], wantsText: false, multiline: false, placeholder: "", draft: "", hasCounter: false, counter: "", overLimit: false, submitLabel: "Submit", submitDisabled: true, pendingLabel: "0 pending" };
+var BEHAVIOURS = {
+  "trust/consentPanelView": (inputs) => inputs.view ?? EMPTY
+};
+var CONSENT_RUNTIME_UNITS = [];
+var text = (b) => ({ component: "text", props: { text: b } });
+var ui = (kind, fields = {}) => ({ emit: "ui", value: { object: { kind: { value: kind }, ...fields } } });
+var twoLine = {
+  component: "chrome/Stack",
+  props: { gap: { value: 1 }, pad: { value: "none" } },
+  children: [{ component: "chrome/Text", children: [text({ item: "label" })] }, { component: "chrome/Text", when: { item: "detail" }, props: { role: { value: "meta" } }, children: [text({ item: "detail" })] }]
+};
+var riskMeta = { node: { component: "chrome/Badge", when: { item: "risk" }, props: { tone: { item: "riskTone" } }, children: [text({ item: "risk" })] } };
+var CONSENT_DECLARATION = {
+  format: "xeno.block@1",
+  manifest: consentViewManifest,
+  behaviour: "trust/consentPanelView",
+  composition: {
+    component: "fragment",
+    children: [
+      { component: "chrome/EmptyState", when: { input: "view.idle" }, props: { title: { value: "Nothing pending" }, hint: { input: "view.emptyHint" } } },
       {
-        left: /* @__PURE__ */ jsxs(Fragment, { children: [
-          /* @__PURE__ */ jsx(Badge, { tone: RISK_TONE[risk], children: `${risk} risk` }),
-          /* @__PURE__ */ jsx(Badge, { children: permission ? permission.kind : ask }),
-          request.subject ? /* @__PURE__ */ jsx("span", { style: { fontSize: 11 }, children: request.subject }) : null
-        ] }),
-        right: showQueueCount && state.queued.length > 0 ? /* @__PURE__ */ jsx(ToolbarGroup, { end: true, children: /* @__PURE__ */ jsx(Badge, { title: "Answered one at a time \u2014 never in bulk.", children: `+${state.queued.length} waiting` }) }) : void 0
-      }
-    ),
-    /* @__PURE__ */ jsxs(ScrollArea, { children: [
-      /* @__PURE__ */ jsxs("div", { style: { padding: 8, display: "flex", flexDirection: "column", gap: 6 }, children: [
-        /* @__PURE__ */ jsx("div", { style: { fontSize: 12, fontWeight: 600 }, children: request.title }),
-        request.detail ? (
-          // The HOST's sentence, verbatim. The panel never composes consent prose.
-          /* @__PURE__ */ jsx("div", { style: { fontSize: 11, opacity: 0.8, lineHeight: 1.45 }, children: request.detail })
-        ) : null,
-        request.fields ? Object.entries(request.fields).map(([key, value]) => /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 6, fontSize: 10 }, children: [
-          /* @__PURE__ */ jsx("span", { style: { opacity: 0.55, minWidth: 72 }, children: key }),
-          /* @__PURE__ */ jsx("code", { style: { userSelect: "all", wordBreak: "break-all" }, children: value })
-        ] }, key)) : null
-      ] }),
-      permission ? /* @__PURE__ */ jsx(RowList, { children: permission.scopes.map((scope) => /* @__PURE__ */ jsx(
-        Row,
-        {
-          noIcon: true,
-          label: /* @__PURE__ */ jsxs("span", { style: { display: "flex", flexDirection: "column", gap: 1, minWidth: 0 }, children: [
-            /* @__PURE__ */ jsx("span", { children: scope.label }),
-            scope.detail ? /* @__PURE__ */ jsx("span", { style: { fontSize: 10, opacity: 0.6 }, children: scope.detail }) : null
-          ] }),
-          meta: scope.risk && scope.risk !== risk ? /* @__PURE__ */ jsx(Badge, { tone: RISK_TONE[scope.risk], children: scope.risk }) : null,
-          trailing: scope.alreadyGranted ? (
-            // Shown for context, not as a choice — hiding it would make the new ask look
-            // bigger than it is.
-            /* @__PURE__ */ jsx(Badge, { title: "Already granted", children: "granted" })
-          ) : /* @__PURE__ */ jsx(
-            Toggle,
-            {
-              size: "sm",
-              label: `Grant ${scope.label}`,
-              checked: state.selectedScopeIds.includes(scope.id),
-              onChange: (next) => controller.toggleScope(scope.id, next)
+        component: "chrome/Column",
+        when: { input: "view.active" },
+        children: [
+          {
+            component: "chrome/Toolbar",
+            props: {
+              left: {
+                node: {
+                  component: "fragment",
+                  children: [
+                    { component: "chrome/Badge", props: { tone: { input: "view.riskTone" } }, children: [text({ input: "view.riskLabel" })] },
+                    { component: "chrome/Badge", children: [text({ input: "view.kindLabel" })] },
+                    { component: "chrome/Text", when: { input: "view.subject" }, children: [text({ input: "view.subject" })] }
+                  ]
+                }
+              },
+              right: { node: { component: "chrome/ToolbarGroup", when: { input: "view.waiting" }, props: { end: { value: true } }, children: [{ component: "chrome/Badge", props: { title: { value: "Answered one at a time \u2014 never in bulk." } }, children: [text({ input: "view.waiting" })] }] } }
             }
-          )
-        },
-        scope.id
-      )) }) : /* @__PURE__ */ jsx(QuestionForm, { controller, request, state, risk })
-    ] }),
-    permission ? /* @__PURE__ */ jsxs("div", { style: { padding: "4px 8px", display: "flex", alignItems: "center", gap: 8 }, children: [
+          },
+          {
+            component: "chrome/ScrollArea",
+            children: [
+              {
+                component: "chrome/Stack",
+                props: { gap: { value: 6 }, pad: { value: "gutter" } },
+                children: [
+                  { component: "chrome/Text", props: { role: { value: "title" } }, children: [text({ input: "view.title" })] },
+                  { component: "chrome/Text", when: { input: "view.detail" }, children: [text({ input: "view.detail" })] },
+                  { component: "chrome/KeyValue", each: { input: "view.facts", key: "key" }, props: { name: { item: "key" }, value: { item: "value" } } }
+                ]
+              },
+              {
+                component: "chrome/RowList",
+                when: { input: "view.permission" },
+                children: [
+                  {
+                    component: "chrome/Row",
+                    each: { input: "view.scopes", key: "id" },
+                    props: {
+                      noIcon: { value: true },
+                      label: { node: twoLine },
+                      meta: riskMeta,
+                      trailing: {
+                        node: {
+                          component: "fragment",
+                          children: [
+                            { component: "chrome/Badge", when: { item: "granted" }, props: { title: { value: "Already granted" } }, children: [text({ value: "granted" })] },
+                            { component: "chrome/Toggle", when: { item: "grantable" }, props: { size: { value: "sm" }, label: { item: "toggleLabel" }, checked: { item: "selected" } }, on: { onChange: ui("scope", { id: { item: "id" }, on: { arg: "" } }) } }
+                          ]
+                        }
+                      }
+                    }
+                  }
+                ]
+              },
+              {
+                component: "chrome/Stack",
+                when: { input: "view.question" },
+                props: { gap: { value: 6 }, pad: { value: "inset" } },
+                children: [
+                  {
+                    component: "chrome/RowList",
+                    when: { input: "view.hasOptions" },
+                    children: [
+                      {
+                        component: "chrome/Row",
+                        each: { input: "view.options", key: "id" },
+                        props: { noIcon: { value: true }, label: { node: twoLine }, meta: riskMeta, trailing: { node: { component: "chrome/Toggle", props: { size: { value: "sm" }, label: { item: "toggleLabel" }, checked: { item: "selected" } }, on: { onChange: ui("option", { id: { item: "id" }, on: { arg: "" } }) } } } }
+                      }
+                    ]
+                  },
+                  {
+                    component: "chrome/Stack",
+                    when: { input: "view.wantsText" },
+                    props: { gap: { value: 3 }, pad: { value: "none" } },
+                    children: [
+                      { component: "chrome/Text", when: { input: "view.textLabel" }, props: { role: { value: "meta" } }, children: [text({ input: "view.textLabel" })] },
+                      { component: "chrome/TextArea", when: { input: "view.multiline" }, props: { value: { input: "view.draft" }, placeholder: { input: "view.placeholder" }, rows: { value: 3 }, label: { value: "Answer" } }, on: { onChange: ui("text", { value: { arg: "" } }) } },
+                      { component: "chrome/Input", when: { not: { input: "view.multiline" } }, props: { value: { input: "view.draft" }, placeholder: { input: "view.placeholder" }, autoComplete: { value: "off" }, label: { value: "Answer" } }, on: { onChange: ui("text", { value: { arg: "" } }) } },
+                      { component: "chrome/Text", when: { input: "view.hasCounter" }, props: { role: { value: "caption" } }, children: [text({ input: "view.counter" })] },
+                      { component: "chrome/Badge", when: { input: "view.overLimit" }, props: { tone: { value: "error" } }, children: [text({ value: "too long" })] }
+                    ]
+                  }
+                ]
+              }
+            ]
+          },
+          {
+            component: "chrome/Toolbar",
+            when: { input: "view.permission" },
+            props: {
+              divided: { value: false },
+              // Duration is IN the decision, not buried in a settings page.
+              left: { node: { component: "chrome/SegmentedControl", props: { size: { value: "sm" }, label: { value: "How long" }, options: { input: "view.durations" }, value: { input: "view.duration" } }, on: { onChange: ui("duration", { duration: { arg: "" } }) } } },
+              right: { node: { component: "chrome/Text", when: { input: "view.unrememberable" }, props: { role: { value: "caption" } }, children: [text({ value: "This grant cannot be remembered." })] } }
+            }
+          },
+          {
+            component: "chrome/Toolbar",
+            props: {
+              divided: { value: false },
+              right: {
+                node: {
+                  component: "chrome/ToolbarGroup",
+                  props: { end: { value: true } },
+                  children: [
+                    { component: "chrome/TextButton", when: { input: "view.permission" }, on: { onClick: ui("deny") }, children: [text({ value: "Deny" })] },
+                    // No auto-focus: a stray Enter must not grant anything.
+                    { component: "chrome/TextButton", when: { input: "view.permission" }, props: { strong: { value: true }, disabled: { input: "view.allowDisabled" } }, on: { onClick: ui("allow") }, children: [text({ value: "Allow" })] },
+                    // A question has no "deny" — refusing to answer is a CANCELLATION.
+                    { component: "chrome/TextButton", when: { input: "view.question" }, on: { onClick: ui("dismiss") }, children: [text({ value: "Cancel" })] },
+                    { component: "chrome/TextButton", when: { input: "view.question" }, props: { strong: { value: true }, disabled: { input: "view.submitDisabled" } }, on: { onClick: ui("submit") }, children: [text({ input: "view.submitLabel" })] }
+                  ]
+                }
+              }
+            }
+          },
+          { component: "chrome/StatusBar", props: { left: { input: "view.pendingLabel" }, right: { input: "view.expiryLabel" } } }
+        ]
+      }
+    ]
+  }
+};
+
+// src/trust/consent/react/ConsentPanelView.tsx
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+var TwoLine = ({ label, detail }) => /* @__PURE__ */ jsxs(Stack, { gap: 1, pad: "none", children: [
+  /* @__PURE__ */ jsx(Text, { children: label }),
+  detail ? /* @__PURE__ */ jsx(Text, { role: "meta", children: detail }) : null
+] });
+function ConsentPanelView({ controller, showQueueCount, emptyHint }) {
+  useSyncExternalStore(controller.subscribe, controller.getState, controller.getState);
+  const view = consentViewState(controller, { showQueueCount, emptyHint });
+  const ui2 = (intent) => applyConsentUi(controller, intent);
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    view.idle ? /* @__PURE__ */ jsx(EmptyState, { title: "Nothing pending", hint: view.emptyHint }) : null,
+    view.active ? /* @__PURE__ */ jsxs(Column, { children: [
       /* @__PURE__ */ jsx(
-        SegmentedControl,
+        Toolbar,
         {
-          size: "sm",
-          label: "How long",
-          options: allowedDurations(permission).map((d) => ({
-            value: d,
-            label: DURATION_LABEL[d]
-          })),
-          value: state.duration,
-          onChange: (d) => controller.setDuration(d)
+          left: /* @__PURE__ */ jsxs(Fragment, { children: [
+            /* @__PURE__ */ jsx(Badge, { tone: view.riskTone, children: view.riskLabel }),
+            /* @__PURE__ */ jsx(Badge, { children: view.kindLabel }),
+            view.subject ? /* @__PURE__ */ jsx(Text, { children: view.subject }) : null
+          ] }),
+          right: view.waiting ? /* @__PURE__ */ jsx(ToolbarGroup, { end: true, children: /* @__PURE__ */ jsx(Badge, { title: "Answered one at a time \u2014 never in bulk.", children: view.waiting }) }) : null
         }
       ),
-      permission.remember === "forbidden" ? /* @__PURE__ */ jsx("span", { style: { fontSize: 9, opacity: 0.6 }, children: "This grant cannot be remembered." }) : null
-    ] }) : null,
-    /* @__PURE__ */ jsx(
-      Toolbar,
-      {
-        divided: false,
-        right: /* @__PURE__ */ jsx(ToolbarGroup, { end: true, children: permission ? /* @__PURE__ */ jsxs(Fragment, { children: [
-          /* @__PURE__ */ jsx(TextButton, { onClick: () => controller.deny(), children: "Deny" }),
-          /* @__PURE__ */ jsx(
-            TextButton,
-            {
-              strong: true,
-              disabled: permission.scopes.some((s) => !s.alreadyGranted) && state.selectedScopeIds.length === 0,
-              onClick: () => controller.allow(),
-              children: "Allow"
-            }
-          )
-        ] }) : /* @__PURE__ */ jsxs(Fragment, { children: [
-          /* @__PURE__ */ jsx(TextButton, { onClick: () => controller.dismiss(), children: "Cancel" }),
-          /* @__PURE__ */ jsx(
-            TextButton,
-            {
-              strong: true,
-              disabled: !state.canSubmit,
-              onClick: () => controller.submit(),
-              children: SUBMIT_LABEL[ask] ?? "Submit"
-            }
-          )
-        ] }) })
-      }
-    ),
-    /* @__PURE__ */ jsx(
-      StatusBar,
-      {
-        left: `${state.pending} pending`,
-        right: state.expiresInMs !== null ? `expires in ${Math.ceil(state.expiresInMs / 1e3)}s \u2014 ${permission ? "denies" : "cancels"}` : void 0
-      }
-    )
-  ] });
-}
-function QuestionForm({ controller, request, state, risk }) {
-  const ask = elicitationAsk(request);
-  const options = elicitationOptions(request);
-  const max = maxTextLength(request);
-  const chosen = options.find((o) => o.id === state.selectedOptionId);
-  const multiline = ask === "text" && request.multiline === true;
-  const placeholder = request.placeholder ?? (ask === "path" ? "Type or paste a path\u2026" : "Type your answer\u2026");
-  const wantsText = ask !== "choice" || chosen?.requiresText === true;
-  const textLabel = request.textLabel;
-  return /* @__PURE__ */ jsxs("div", { style: { padding: "0 8px 8px", display: "flex", flexDirection: "column", gap: 6 }, children: [
-    options.length > 0 ? /* @__PURE__ */ jsx(RowList, { children: options.map((option) => /* @__PURE__ */ jsx(
-      Row,
-      {
-        noIcon: true,
-        label: /* @__PURE__ */ jsxs("span", { style: { display: "flex", flexDirection: "column", gap: 1, minWidth: 0 }, children: [
-          /* @__PURE__ */ jsx("span", { children: option.label }),
-          option.detail ? /* @__PURE__ */ jsx("span", { style: { fontSize: 10, opacity: 0.6 }, children: option.detail }) : null
+      /* @__PURE__ */ jsxs(ScrollArea, { children: [
+        /* @__PURE__ */ jsxs(Stack, { gap: 6, pad: "gutter", children: [
+          /* @__PURE__ */ jsx(Text, { role: "title", children: view.title }),
+          view.detail ? /* @__PURE__ */ jsx(Text, { children: view.detail }) : null,
+          view.facts.map((f) => /* @__PURE__ */ jsx(KeyValue, { name: f.key, value: f.value }, f.key))
         ] }),
-        meta: option.risk && option.risk !== risk ? /* @__PURE__ */ jsx(Badge, { tone: RISK_TONE[option.risk], children: option.risk }) : null,
-        trailing: /* @__PURE__ */ jsx(
-          Toggle,
+        view.permission ? /* @__PURE__ */ jsx(RowList, { children: view.scopes.map((scope) => /* @__PURE__ */ jsx(
+          Row,
           {
-            size: "sm",
-            label: `Choose ${option.label}`,
-            checked: state.selectedOptionId === option.id,
-            onChange: (next) => controller.selectOption(next ? option.id : null)
-          }
-        )
-      },
-      option.id
-    )) }) : null,
-    wantsText ? /* @__PURE__ */ jsxs("label", { style: { display: "flex", flexDirection: "column", gap: 3 }, children: [
-      textLabel ? /* @__PURE__ */ jsx("span", { style: { fontSize: 10, opacity: 0.6 }, children: textLabel }) : null,
-      multiline ? /* @__PURE__ */ jsx(
-        "textarea",
+            noIcon: true,
+            label: /* @__PURE__ */ jsx(TwoLine, { label: scope.label, detail: scope.detail }),
+            meta: scope.risk ? /* @__PURE__ */ jsx(Badge, { tone: scope.riskTone, children: scope.risk }) : null,
+            trailing: /* @__PURE__ */ jsxs(Fragment, { children: [
+              scope.granted ? /* @__PURE__ */ jsx(Badge, { title: "Already granted", children: "granted" }) : null,
+              scope.grantable ? /* @__PURE__ */ jsx(Toggle, { size: "sm", label: scope.toggleLabel, checked: scope.selected, onChange: (on) => ui2({ kind: "scope", id: scope.id, on }) }) : null
+            ] })
+          },
+          scope.id
+        )) }) : null,
+        view.question ? /* @__PURE__ */ jsxs(Stack, { gap: 6, pad: "inset", children: [
+          view.hasOptions ? /* @__PURE__ */ jsx(RowList, { children: view.options.map((option) => /* @__PURE__ */ jsx(
+            Row,
+            {
+              noIcon: true,
+              label: /* @__PURE__ */ jsx(TwoLine, { label: option.label, detail: option.detail }),
+              meta: option.risk ? /* @__PURE__ */ jsx(Badge, { tone: option.riskTone, children: option.risk }) : null,
+              trailing: /* @__PURE__ */ jsx(Toggle, { size: "sm", label: option.toggleLabel, checked: option.selected, onChange: (on) => ui2({ kind: "option", id: option.id, on }) })
+            },
+            option.id
+          )) }) : null,
+          view.wantsText ? /* @__PURE__ */ jsxs(Stack, { gap: 3, pad: "none", children: [
+            view.textLabel ? /* @__PURE__ */ jsx(Text, { role: "meta", children: view.textLabel }) : null,
+            view.multiline ? /* @__PURE__ */ jsx(TextArea, { value: view.draft, placeholder: view.placeholder, rows: 3, label: "Answer", onChange: (value) => ui2({ kind: "text", value }) }) : null,
+            !view.multiline ? /* @__PURE__ */ jsx(Input, { value: view.draft, placeholder: view.placeholder, autoComplete: "off", label: "Answer", onChange: (value) => ui2({ kind: "text", value }) }) : null,
+            view.hasCounter ? /* @__PURE__ */ jsx(Text, { role: "caption", children: view.counter }) : null,
+            view.overLimit ? /* @__PURE__ */ jsx(Badge, { tone: "error", children: "too long" }) : null
+          ] }) : null
+        ] }) : null
+      ] }),
+      view.permission ? /* @__PURE__ */ jsx(
+        Toolbar,
         {
-          value: state.draftText,
-          onChange: (event) => controller.setDraftText(event.target.value),
-          placeholder,
-          rows: 3,
-          spellCheck: false,
-          style: FIELD_STYLE
+          divided: false,
+          left: /* @__PURE__ */ jsx(SegmentedControl, { size: "sm", label: "How long", options: view.durations, value: view.duration, onChange: (duration) => ui2({ kind: "duration", duration }) }),
+          right: view.unrememberable ? /* @__PURE__ */ jsx(Text, { role: "caption", children: "This grant cannot be remembered." }) : null
         }
-      ) : /* @__PURE__ */ jsx(
-        "input",
+      ) : null,
+      /* @__PURE__ */ jsx(
+        Toolbar,
         {
-          type: "text",
-          value: state.draftText,
-          onChange: (event) => controller.setDraftText(event.target.value),
-          placeholder,
-          spellCheck: false,
-          autoComplete: "off",
-          style: FIELD_STYLE
+          divided: false,
+          right: /* @__PURE__ */ jsxs(ToolbarGroup, { end: true, children: [
+            view.permission ? /* @__PURE__ */ jsx(TextButton, { onClick: () => ui2({ kind: "deny" }), children: "Deny" }) : null,
+            view.permission ? /* @__PURE__ */ jsx(TextButton, { strong: true, disabled: view.allowDisabled, onClick: () => ui2({ kind: "allow" }), children: "Allow" }) : null,
+            view.question ? /* @__PURE__ */ jsx(TextButton, { onClick: () => ui2({ kind: "dismiss" }), children: "Cancel" }) : null,
+            view.question ? /* @__PURE__ */ jsx(TextButton, { strong: true, disabled: view.submitDisabled, onClick: () => ui2({ kind: "submit" }), children: view.submitLabel }) : null
+          ] })
         }
       ),
-      max !== null ? /* @__PURE__ */ jsx(
-        "span",
-        {
-          style: {
-            fontSize: 9,
-            opacity: 0.6,
-            alignSelf: "flex-end",
-            // Over the limit the answer is REFUSED, not truncated — so the counter has to say
-            // so rather than implying the extra characters are merely ignored.
-            color: state.draftText.length > max ? "var(--xeno-danger)" : void 0
-          },
-          children: `${state.draftText.length} / ${max}`
-        }
-      ) : null
+      /* @__PURE__ */ jsx(StatusBar, { left: view.pendingLabel, right: view.expiryLabel })
     ] }) : null
   ] });
 }
@@ -979,16 +1109,22 @@ function createConsentPanel(options = {}) {
 }
 var consentPanel = createConsentPanel();
 export {
+  BEHAVIOURS as CONSENT_BEHAVIOURS,
+  CONSENT_DECLARATION,
   CONSENT_PANEL_ID,
+  CONSENT_RUNTIME_UNITS,
   ConsentController,
   ConsentPanelView,
   ELICITATION_RESULT_SCHEMA,
   ELICITATION_SCHEMA,
   allowedDurations,
+  applyConsentUi,
   autoCancel,
   autoDeny,
   consentManifest,
   consentPanel,
+  consentViewManifest,
+  consentViewState,
   createConsentPanel,
   effectiveRisk,
   elicitationAsk,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xenosystem/blocks",
-  "version": "0.13.14",
+  "version": "0.13.15",
   "description": "XENO Blocks — rung 3 of the front ladder: components composed into a contract-bearing unit (manifest: ports, intents, commands, agent surface), rendered by @xenosystem/workbench. ONE package, one subpath per family (/auth, /edit, /data, /time, /ops, /trust, /agent), one named export per block — XENO PACKAGE NAMING - STANDARD.md.",
   "license": "UNLICENSED",
   "type": "module",
@@ -64,7 +64,7 @@
   "peerDependencies": {
     "@duckdb/duckdb-wasm": ">=1.28.0",
     "@xenosystem/block-sdk": ">=0.3.4 <1",
-    "@xenosystem/components": ">=0.24.0 <1",
+    "@xenosystem/components": ">=0.25.0 <1",
     "@xenosystem/data-core": "^0.1.0",
     "@xenosystem/elements": ">=0.0.1",
     "@xenosystem/elements-react": ">=0.0.1",
@@ -81,7 +81,7 @@
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "@xenosystem/block-sdk": "^0.3.4",
-    "@xenosystem/components": "^0.24.0",
+    "@xenosystem/components": "^0.25.0",
     "@xenosystem/data-core": "^0.1.0",
     "@xenosystem/elements": "0.0.1",
     "@xenosystem/elements-react": "0.0.1",