@xeonr/platform-ui 0.3.20 → 0.4.0

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export { BRAND, GRAD, GRAD_90, cssVariables, globalCss, v } from "./theme/tokens.ts";
 export { AppThemeProvider, useTheme, useThemeMaybe, type ThemePref, type AppThemeProviderProps } from "./theme/ThemeProvider.tsx";
 export { brandCss, brandRamp, type BrandRamp } from "./theme/brand.ts";
+export { tokenValue, useTokenColours, useSeriesColours, SERIES_TOKENS, seriesToken } from "./theme/paint.ts";
 export { Icon, extendIcons, type IconName } from "./kit/Icon.tsx";
 export { AppButton, IconButton, ButtonRow, type AppButtonProps } from "./kit/Button.tsx";
 export { StatusPill, Tag, LiveDot, InitialsTile, RemovableTag, type Tone } from "./kit/Badge.tsx";
@@ -17,7 +18,7 @@ export { LogSurface, LogPanel, type LogLine } from "./kit/LogView.tsx";
 export { KVGrid } from "./kit/KV.tsx";
 export { SecretField, CopyIcon, Digest } from "./kit/Secret.tsx";
 export { ToastProvider, useToast, toastError, type ToastKind } from "./kit/Toast.tsx";
-export { Mono, Num, Hint, InlineHint, Cell, InlineLink, Muted, Faint, InlineCode, Prose, Ago, toDate, relative, } from "./kit/Text.tsx";
+export { Mono, Num, Hint, InlineHint, Cell, InlineLink, Muted, Faint, InlineCode, Prose, Ago, toDate, relative, type TextTone, } from "./kit/Text.tsx";
 export { RowList, ListRow, RowActions, SelectableList, Breadcrumbs } from "./kit/List.tsx";
 export { FilterBar, FilterField, Chip, EditableChip } from "./kit/Chip.tsx";
 export { StatGrid, StatTile, StatValue, Meter } from "./kit/Stat.tsx";
@@ -41,4 +42,7 @@ export { Dot, LevelBars, PersonChip, initials } from "./kit/Marker.tsx";
 export { CommentList, Comment, CommentComposer } from "./kit/Comment.tsx";
 export { Board, BoardCardLine, BoardCardTitle, BoardCardFoot, type BoardLane } from "./kit/Board.tsx";
 export { EditableTitle } from "./kit/Editable.tsx";
+export { Tooltip, type TooltipProps } from "./kit/Tooltip.tsx";
+export { Sparkline, SparkRow, type SparklineProps } from "./kit/Sparkline.tsx";
+export { ApiKeys, keyHint, type ApiKeysProps, type ApiKeyRow, type ApiKeyBindingRow, type ApiKeyOwnerKind, type ApiKeyResourceMode, type ApiKeyScopePreset, type ApiKeyResourceTypeSpec, type ApiKeyCreateInput, type ApiKeyUpdateInput, } from "./kit/ApiKeys.tsx";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,KAAK,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAKlI,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAIvE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3H,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EACtE,WAAW,EAAE,WAAW,EAAE,WAAW,EACrC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,MAAM,EAAE,QAAQ,EAAE,UAAU,GAC9D,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAItF,OAAO,EACL,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAC7C,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,GACvD,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAC5E,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAClE,aAAa,EAAE,cAAc,EAAE,WAAW,GAC3C,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACvK,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAIhH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAMxE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAI7E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACpH,OAAO,EACL,QAAQ,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,KAAK,gBAAgB,EAAE,KAAK,QAAQ,EAAE,KAAK,OAAO,GAClG,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,KAAK,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,KAAK,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAKlI,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAMvE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAI7G,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3H,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EACtE,WAAW,EAAE,WAAW,EAAE,WAAW,EACrC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,MAAM,EAAE,QAAQ,EAAE,UAAU,GAC9D,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAItF,OAAO,EACL,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAC7C,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,QAAQ,GACtE,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAC5E,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAClE,aAAa,EAAE,cAAc,EAAE,WAAW,GAC3C,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACvK,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAIhH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAMxE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAI7E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACpH,OAAO,EACL,QAAQ,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,KAAK,gBAAgB,EAAE,KAAK,QAAQ,EAAE,KAAK,OAAO,GAClG,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,KAAK,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKnD,OAAO,EAAE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAM/E,OAAO,EACL,OAAO,EAAE,OAAO,EAChB,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,kBAAkB,EACvG,KAAK,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,GACpG,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -9,6 +9,12 @@ export { AppThemeProvider, useTheme, useThemeMaybe } from "./theme/ThemeProvider
 // this for anything mounting the shell; `brandCss` is for SSR hosts that inline
 // the sheet themselves.
 export { brandCss, brandRamp } from "./theme/brand.js";
+// Token values as concrete colours, for the surfaces that cannot use var() —
+// a <canvas>, or a charting library configured through JS. Added for the
+// Lantern adoption (2026-10-13): every console with a uPlot chart had
+// hardcoded its axis and series colours, which is how a chart ends up
+// unreadable in whichever theme its author did not have open.
+export { tokenValue, useTokenColours, useSeriesColours, SERIES_TOKENS, seriesToken } from "./theme/paint.js";
 // Kit: the same names and props container-platform/ui and functions/ui use,
 // so adopting the package is an import-path change.
 export { Icon, extendIcons } from "./kit/Icon.js";
@@ -67,6 +73,16 @@ export { Dot, LevelBars, PersonChip, initials } from "./kit/Marker.js";
 export { CommentList, Comment, CommentComposer } from "./kit/Comment.js";
 export { Board, BoardCardLine, BoardCardTitle, BoardCardFoot } from "./kit/Board.js";
 export { EditableTitle } from "./kit/Editable.js";
+// Added for the Lantern adoption (2026-10-13): the hover explanation the kit
+// had been doing with the native `title` attribute, and the cell-sized series
+// every list of entities-with-a-trend wants.
+export { Tooltip } from "./kit/Tooltip.js";
+export { Sparkline, SparkRow } from "./kit/Sparkline.js";
+// Added for centralised API keys (2026-10-13, CON-23): the one keys screen
+// every product shows for the keys auth holds on its behalf, and the portal's
+// read-only view across products. API-agnostic — the host maps its wire type
+// to ApiKeyRow and supplies the callbacks.
+export { ApiKeys, keyHint, } from "./kit/ApiKeys.js";
 // The markdown surface is `@xeonr/platform-ui/markdown` — its own entry point,
 // so react-markdown stays an optional peer.
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,2EAA2E;AAC3E,sEAAsE;AACtE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAA8C,MAAM,0BAA2B,CAAC;AAClI,4EAA4E;AAC5E,6EAA6E;AAC7E,gFAAgF;AAChF,wBAAwB;AACxB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAkB,MAAM,kBAAkB,CAAC;AAEvE,4EAA4E;AAC5E,oDAAoD;AACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAiB,MAAM,eAAgB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAuB,MAAM,iBAAkB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAa,MAAM,gBAAiB,CAAC;AAClG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAiB,CAAC;AAC3H,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,mBAAoB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAsB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAkB,CAAC;AAC1C,OAAO,EACL,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EACtE,WAAW,EAAE,WAAW,EAAE,WAAW,EACrC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAe,QAAQ,EAAE,UAAU,GAC9D,MAAM,eAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,gBAAiB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAe,MAAM,oBAAqB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,qBAAsB,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,uBAAwB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAgB,MAAM,kBAAmB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAc,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iBAAkB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAkB,MAAM,gBAAiB,CAAC;AAEtF,4EAA4E;AAC5E,oDAAoD;AACpD,OAAO,EACL,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAC7C,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,GACvD,MAAM,eAAgB,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAgB,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,eAAgB,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAgB,CAAC;AACtE,OAAO,EACL,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAC5E,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAClE,aAAa,EAAE,cAAc,EAAE,WAAW,GAC3C,MAAM,iBAAkB,CAAC;AAE1B,0EAA0E;AAC1E,6DAA6D;AAC7D,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAoB,MAAM,gBAAiB,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAkB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAoC,MAAM,gBAAiB,CAAC;AACvK,OAAO,EAAE,SAAS,EAAE,SAAS,EAA0D,MAAM,iBAAkB,CAAC;AAEhH,4EAA4E;AAC5E,2CAA2C;AAC3C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAsB,MAAM,eAAgB,CAAC;AAExE,yEAAyE;AACzE,0EAA0E;AAC1E,8EAA8E;AAC9E,2BAA2B;AAC3B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAgB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAoB,MAAM,mBAAoB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAyB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAkB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAkB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAiC,MAAM,mBAAoB,CAAC;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,qCAAqC;AACrC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAqB,MAAM,kBAAmB,CAAC;AACpH,OAAO,EACL,QAAQ,GACT,MAAM,mBAAoB,CAAC;AAE5B,4EAA4E;AAC5E,+EAA+E;AAC/E,+CAA+C;AAC/C,OAAO,EAAE,KAAK,EAAmB,MAAM,gBAAiB,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAmB,CAAC;AAC1E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAkB,MAAM,gBAAiB,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAoB,CAAC;AACnD,+EAA+E;AAC/E,4CAA4C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,2EAA2E;AAC3E,sEAAsE;AACtE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAA8C,MAAM,0BAA2B,CAAC;AAClI,4EAA4E;AAC5E,6EAA6E;AAC7E,gFAAgF;AAChF,wBAAwB;AACxB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAkB,MAAM,kBAAkB,CAAC;AACvE,6EAA6E;AAC7E,yEAAyE;AACzE,sEAAsE;AACtE,sEAAsE;AACtE,8DAA8D;AAC9D,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE7G,4EAA4E;AAC5E,oDAAoD;AACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAiB,MAAM,eAAgB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAuB,MAAM,iBAAkB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAa,MAAM,gBAAiB,CAAC;AAClG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAiB,CAAC;AAC3H,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,mBAAoB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAsB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAkB,CAAC;AAC1C,OAAO,EACL,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EACtE,WAAW,EAAE,WAAW,EAAE,WAAW,EACrC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAe,QAAQ,EAAE,UAAU,GAC9D,MAAM,eAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,gBAAiB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAe,MAAM,oBAAqB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,qBAAsB,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,uBAAwB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAgB,MAAM,kBAAmB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAc,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iBAAkB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAkB,MAAM,gBAAiB,CAAC;AAEtF,4EAA4E;AAC5E,oDAAoD;AACpD,OAAO,EACL,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAC7C,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,GACvD,MAAM,eAAgB,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAgB,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,eAAgB,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAgB,CAAC;AACtE,OAAO,EACL,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAC5E,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAClE,aAAa,EAAE,cAAc,EAAE,WAAW,GAC3C,MAAM,iBAAkB,CAAC;AAE1B,0EAA0E;AAC1E,6DAA6D;AAC7D,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAoB,MAAM,gBAAiB,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAkB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAoC,MAAM,gBAAiB,CAAC;AACvK,OAAO,EAAE,SAAS,EAAE,SAAS,EAA0D,MAAM,iBAAkB,CAAC;AAEhH,4EAA4E;AAC5E,2CAA2C;AAC3C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAsB,MAAM,eAAgB,CAAC;AAExE,yEAAyE;AACzE,0EAA0E;AAC1E,8EAA8E;AAC9E,2BAA2B;AAC3B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAgB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAoB,MAAM,mBAAoB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAyB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAkB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAkB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAiC,MAAM,mBAAoB,CAAC;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,qCAAqC;AACrC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAqB,MAAM,kBAAmB,CAAC;AACpH,OAAO,EACL,QAAQ,GACT,MAAM,mBAAoB,CAAC;AAE5B,4EAA4E;AAC5E,+EAA+E;AAC/E,+CAA+C;AAC/C,OAAO,EAAE,KAAK,EAAmB,MAAM,gBAAiB,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAmB,CAAC;AAC1E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAkB,MAAM,gBAAiB,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAoB,CAAC;AAEnD,6EAA6E;AAC7E,8EAA8E;AAC9E,6CAA6C;AAC7C,OAAO,EAAE,OAAO,EAAqB,MAAM,kBAAmB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAuB,MAAM,oBAAqB,CAAC;AAE/E,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,2CAA2C;AAC3C,OAAO,EACL,OAAO,EAAE,OAAO,GAGjB,MAAM,kBAAmB,CAAC;AAC3B,+EAA+E;AAC/E,4CAA4C"}

package/dist/kit/ApiKeyForm.d.ts

@@ -0,0 +1,71 @@
+import { type ReactNode } from "react";
+export type ApiKeyResourceMode = "app_wide" | "bound";
+export interface ApiKeyScopePreset {
+    id: string;
+    label: string;
+    description?: string | undefined;
+    scopes: string[];
+}
+export interface ApiKeyResourceTypeSpec {
+    /** the type as auth knows it, e.g. 'bucket' */
+    type: string;
+    /** the type as a person reads it, e.g. 'Bucket' */
+    label: string;
+    /** host-provided picker; the form renders one per binding row */
+    Picker: React.ComponentType<{
+        value: string;
+        onChange: (id: string, label?: string) => void;
+        disabled?: boolean | undefined;
+    }>;
+    /** per-resource level choices (read / read+write) */
+    scopePresets: ApiKeyScopePreset[];
+}
+export interface ApiKeyCreateInput {
+    name: string;
+    description?: string | undefined;
+    scopes: string[];
+    resourceMode: ApiKeyResourceMode;
+    bindings: {
+        resourceType: string;
+        resourceId: string;
+        scopes: string[];
+    }[];
+    expiresAt?: Date | undefined;
+}
+export interface ApiKeyUpdateInput {
+    name?: string | undefined;
+    description?: string | undefined;
+    scopes?: string[] | undefined;
+    bindings?: ApiKeyCreateInput["bindings"] | undefined;
+    /** null clears the expiry; undefined leaves it alone */
+    expiresAt?: Date | null | undefined;
+}
+/** What the form starts from when editing — the subset of a row it can change. */
+export interface ApiKeyFormInitial {
+    name: string;
+    description?: string | undefined;
+    scopes: string[];
+    resourceMode: ApiKeyResourceMode;
+    bindings: {
+        resourceType: string;
+        resourceId: string;
+        resourceLabel?: string | undefined;
+        scopes: string[];
+    }[];
+}
+export declare function ApiKeyForm({ mode, initial, scopePresets, resourceTypes, fixedMode, ownerLabel, lifetimeDays, allowNoExpiry, busy, error, onCreate, onUpdate, onCancel, }: {
+    mode: "create" | "edit";
+    initial?: ApiKeyFormInitial | undefined;
+    scopePresets?: ApiKeyScopePreset[] | undefined;
+    resourceTypes?: ApiKeyResourceTypeSpec[] | undefined;
+    fixedMode?: ApiKeyResourceMode | undefined;
+    ownerLabel?: string | undefined;
+    lifetimeDays?: number[] | undefined;
+    allowNoExpiry?: boolean | undefined;
+    busy?: boolean | undefined;
+    error?: ReactNode | undefined;
+    onCreate?: ((input: ApiKeyCreateInput) => void) | undefined;
+    onUpdate?: ((input: ApiKeyUpdateInput) => void) | undefined;
+    onCancel: () => void;
+}): import("react").JSX.Element;
+//# sourceMappingURL=ApiKeyForm.d.ts.map

package/dist/kit/ApiKeyForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyForm.d.ts","sourceRoot":"","sources":["../../src/kit/ApiKeyForm.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAY1D,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,OAAO,CAAC;AAEtD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;IAC/H,qDAAqD;IACrD,YAAY,EAAE,iBAAiB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,kBAAkB,CAAC;IACjC,QAAQ,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IAC3E,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9B,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;IACrD,wDAAwD;IACxD,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC;CACrC;AAED,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,kBAAkB,CAAC;IACjC,QAAQ,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;CAChH;AAyCD,wBAAgB,UAAU,CAAC,EACzB,IAAI,EAAE,OAAO,EAAE,YAAiB,EAAE,aAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,YAAgC,EAC7G,aAAoB,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAChE,EAAE;IACD,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACxC,YAAY,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAC/C,aAAa,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAC;IACrD,SAAS,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC3C,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACpC,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC5D,QAAQ,EAAE,MAAM,IAAI,CAAC;CACtB,+BAqKA"}

package/dist/kit/ApiKeyForm.js

@@ -0,0 +1,105 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useMemo, useState } from "react";
+import styled from "styled-components";
+import { v } from "../theme/tokens.js";
+import { AppButton } from "./Button.js";
+import { CheckRow, Field, FormGrid, InlineError, Input, Segmented, Select, TextArea } from "./Form.js";
+import { RepeaterRows } from "./Blocks.js";
+import { Hint } from "./Text.js";
+import { Stack } from "./Layout.js";
+const DEFAULT_LIFETIMES = [30, 90, 365];
+const KEEP = "__keep__";
+const NEVER = "__never__";
+const OwnerLine = styled.div `
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 8px 10px;
+  border-radius: ${v.rCtl};
+  background: ${v.surface2};
+  border: 1px solid ${v.line};
+  font-size: 12.5px;
+  b { font-weight: 600; }
+  span { color: ${v.muted}; }
+`;
+const sameSet = (a, b) => a.length === b.length && a.every((s) => b.includes(s));
+const union = (presets, ids) => [...new Set(presets.filter((p) => ids.includes(p.id)).flatMap((p) => p.scopes))];
+/** The presets whose scopes a key already carries, so an edit starts checked. */
+function presetsCovering(presets, scopes) {
+    return presets.filter((p) => p.scopes.length > 0 && p.scopes.every((s) => scopes.includes(s))).map((p) => p.id);
+}
+function lifetimeLabel(days) {
+    if (days % 365 === 0)
+        return days === 365 ? "1 year" : `${days / 365} years`;
+    if (days % 30 === 0 && days >= 60)
+        return `${days / 30} months`;
+    return `${days} days`;
+}
+export function ApiKeyForm({ mode, initial, scopePresets = [], resourceTypes = [], fixedMode, ownerLabel, lifetimeDays = DEFAULT_LIFETIMES, allowNoExpiry = true, busy, error, onCreate, onUpdate, onCancel, }) {
+    const canBind = resourceTypes.length > 0;
+    const [name, setName] = useState(initial?.name ?? "");
+    const [description, setDescription] = useState(initial?.description ?? "");
+    const [presetIds, setPresetIds] = useState(() => presetsCovering(scopePresets, initial?.scopes ?? []));
+    const [resourceMode, setResourceMode] = useState(fixedMode ?? initial?.resourceMode ?? (canBind ? "bound" : "app_wide"));
+    const [bindings, setBindings] = useState(() => (initial?.bindings ?? []).map((b) => {
+        const spec = resourceTypes.find((t) => t.type === b.resourceType);
+        const preset = spec?.scopePresets.find((p) => sameSet(p.scopes, b.scopes));
+        return { resourceType: b.resourceType, resourceId: b.resourceId, resourceLabel: b.resourceLabel, presetId: preset?.id ?? "" };
+    }));
+    const firstLifetime = lifetimeDays[0];
+    const [lifetime, setLifetime] = useState(mode === "edit" ? KEEP : firstLifetime !== undefined ? String(firstLifetime) : NEVER);
+    const [problem, setProblem] = useState(null);
+    const bound = resourceMode === "bound" && canBind;
+    const modeLocked = !!fixedMode || !canBind;
+    // Scopes a bound key carries at key level, before the per-binding ones.
+    const keyScopes = useMemo(() => union(scopePresets, presetIds), [scopePresets, presetIds]);
+    const togglePreset = (id, on) => setPresetIds((ids) => (on ? [...ids, id] : ids.filter((x) => x !== id)));
+    const blankBinding = () => {
+        const t = resourceTypes[0];
+        return { resourceType: t.type, resourceId: "", presetId: t.scopePresets[0]?.id ?? "" };
+    };
+    const submit = () => {
+        const trimmed = name.trim();
+        if (!trimmed)
+            return setProblem("Give the key a name.");
+        if (!bound && scopePresets.length > 0 && presetIds.length === 0)
+            return setProblem("Choose at least one scope.");
+        const wire = [];
+        if (bound) {
+            if (bindings.length === 0)
+                return setProblem("A bound key needs at least one resource.");
+            for (const b of bindings) {
+                const spec = resourceTypes.find((t) => t.type === b.resourceType);
+                const preset = spec?.scopePresets.find((p) => p.id === b.presetId);
+                if (!b.resourceId)
+                    return setProblem(`Choose a ${spec?.label.toLowerCase() ?? "resource"} for every binding.`);
+                if (!preset)
+                    return setProblem(`Choose an access level for ${b.resourceLabel ?? b.resourceId}.`);
+                wire.push({ resourceType: b.resourceType, resourceId: b.resourceId, scopes: preset.scopes });
+            }
+        }
+        setProblem(null);
+        const desc = description.trim() || undefined;
+        if (mode === "create") {
+            const expiresAt = lifetime === NEVER ? undefined : new Date(Date.now() + Number(lifetime) * 86_400_000);
+            onCreate?.({ name: trimmed, description: desc, scopes: keyScopes, resourceMode: bound ? "bound" : "app_wide", bindings: wire, expiresAt });
+        }
+        else {
+            const expiresAt = lifetime === KEEP ? undefined : lifetime === NEVER ? null : new Date(Date.now() + Number(lifetime) * 86_400_000);
+            onUpdate?.({
+                name: trimmed, description: desc ?? "", scopes: keyScopes,
+                bindings: bound ? wire : [],
+                ...(expiresAt !== undefined ? { expiresAt } : {}),
+            });
+        }
+    };
+    return (_jsxs(Stack, { "$gap": 14, children: [_jsxs(FormGrid, { "$cols": 2, children: [_jsx(Field, { label: "Name", span: 2, children: _jsx(Input, { autoFocus: true, value: name, placeholder: "e.g. ci-deploy", maxLength: 64, onChange: (e) => setName(e.target.value) }) }), _jsx(Field, { label: "Description", hint: "Optional \u2014 what the key is for, for whoever finds it later.", span: 2, children: _jsx(TextArea, { value: description, maxLength: 512, onChange: (e) => setDescription(e.target.value) }) }), mode === "create" && ownerLabel ? (_jsx(Field, { label: "Belongs to", span: 2, children: _jsxs(OwnerLine, { children: [_jsx("b", { children: ownerLabel }), _jsx("span", { children: "\u2014 the key can never do more than its owner can." })] }) })) : null, !modeLocked ? (_jsx(Field, { label: "Reach", span: 2, hint: bound ? "Only the resources listed below, plus any key-level scopes." : "Everything the owner can reach, with the scopes below.", children: _jsx(Segmented, { options: [{ value: "app_wide", label: "App-wide" }, { value: "bound", label: "Bound to resources" }], value: resourceMode, onChange: setResourceMode }) })) : null, scopePresets.length > 0 ? (_jsx(Field, { label: bound ? "Key-level scopes" : "Scopes", span: 2, children: _jsx(Stack, { "$gap": 8, children: scopePresets.map((p) => (_jsx(CheckRow, { checked: presetIds.includes(p.id), onChange: (on) => togglePreset(p.id, on), label: p.label, desc: p.description ?? p.scopes.join(", "), title: p.scopes.join(" ") }, p.id))) }) })) : null, bound ? (_jsx(Field, { label: "Resources", span: 2, children: _jsx(RepeaterRows, { rows: bindings, onChange: setBindings, blank: blankBinding, addLabel: "Add resource", addVariant: "button", removeLabel: "Remove binding", emptyLabel: "No resources yet \u2014 the key cannot reach anything until one is added.", columns: resourceTypes.length > 1 ? "minmax(0, 1fr) minmax(0, 2fr) minmax(0, 1fr)" : "minmax(0, 2fr) minmax(0, 1fr)", max: 50, render: (row, patch) => {
+                                const spec = resourceTypes.find((t) => t.type === row.resourceType) ?? resourceTypes[0];
+                                const Picker = spec.Picker;
+                                return (_jsxs(_Fragment, { children: [resourceTypes.length > 1 ? (_jsx(Select, { "aria-label": "Resource type", value: row.resourceType, disabled: busy, onChange: (e) => {
+                                                const next = resourceTypes.find((t) => t.type === e.target.value) ?? spec;
+                                                patch({ resourceType: next.type, resourceId: "", presetId: next.scopePresets[0]?.id ?? "" });
+                                            }, children: resourceTypes.map((t) => _jsx("option", { value: t.type, children: t.label }, t.type)) })) : null, _jsx(Picker, { value: row.resourceId, disabled: busy, onChange: (id, label) => patch({ ...row, resourceId: id, resourceLabel: label }) }), _jsxs(Select, { "aria-label": "Access level", value: row.presetId, disabled: busy, onChange: (e) => patch({ ...row, presetId: e.target.value }), children: [row.presetId ? null : _jsx("option", { value: "", children: "Access level\u2026" }), spec.scopePresets.map((p) => _jsx("option", { value: p.id, title: p.scopes.join(" "), children: p.label }, p.id))] })] }));
+                            } }) })) : null, _jsx(Field, { label: mode === "edit" ? "Expiry" : "Lifetime", span: 2, hint: mode === "create" ? "Rotate by creating a new key before this one expires." : undefined, children: _jsxs(Select, { value: lifetime, disabled: busy, onChange: (e) => setLifetime(e.target.value), children: [mode === "edit" ? _jsx("option", { value: KEEP, children: "Keep current expiry" }) : null, lifetimeDays.map((d) => _jsx("option", { value: String(d), children: lifetimeLabel(d) }, d)), allowNoExpiry ? _jsx("option", { value: NEVER, children: "No expiry" }) : null] }) })] }), bound && keyScopes.length === 0 && bindings.length > 0 ? (_jsx(Hint, { "$size": 11.5, children: "The key reaches only the resources above; it carries no scopes of its own." })) : null, problem || error ? _jsx(InlineError, { style: { marginTop: 0 }, children: problem ?? error }) : null, _jsxs("div", { style: { display: "flex", justifyContent: "flex-end", gap: 8 }, children: [_jsx(AppButton, { variant: "quiet", onClick: onCancel, disabled: busy, children: "Cancel" }), _jsx(AppButton, { variant: "grad", icon: mode === "create" ? "key" : "save", loading: busy, onClick: submit, children: mode === "create" ? "Create key" : "Save changes" })] })] }));
+}
+//# sourceMappingURL=ApiKeyForm.js.map

package/dist/kit/ApiKeyForm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyForm.js","sourceRoot":"","sources":["../../src/kit/ApiKeyForm.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAC1D,OAAO,MAAM,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAc,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAY,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAc,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAY,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAc,CAAC;AA2DrC,MAAM,iBAAiB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AACxC,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,KAAK,GAAG,WAAW,CAAC;AAE1B,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;mBAKT,CAAC,CAAC,IAAI;gBACT,CAAC,CAAC,QAAQ;sBACJ,CAAC,CAAC,IAAI;;;kBAGV,CAAC,CAAC,KAAK;CACxB,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,CAAW,EAAE,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACrG,MAAM,KAAK,GAAG,CAAC,OAA4B,EAAE,GAAa,EAAE,EAAE,CAC5D,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAEnF,iFAAiF;AACjF,SAAS,eAAe,CAAC,OAA4B,EAAE,MAAgB;IACrE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,QAAQ,CAAC;IAC7E,IAAI,IAAI,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,GAAG,IAAI,GAAG,EAAE,SAAS,CAAC;IAChE,OAAO,GAAG,IAAI,OAAO,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EACzB,IAAI,EAAE,OAAO,EAAE,YAAY,GAAG,EAAE,EAAE,aAAa,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,GAAG,iBAAiB,EAC7G,aAAa,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAehE;IACC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;IACzC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAW,GAAG,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IACjH,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAC9C,SAAS,IAAI,OAAO,EAAE,YAAY,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CACvE,CAAC;IACF,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAiB,GAAG,EAAE,CAC5D,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;IAChI,CAAC,CAAC,CACH,CAAC;IACF,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CACtC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CACrF,CAAC;IACF,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAE5D,MAAM,KAAK,GAAG,YAAY,KAAK,OAAO,IAAI,OAAO,CAAC;IAClD,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC;IAE3C,wEAAwE;IACxE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IAE3F,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,EAAW,EAAE,EAAE,CAC/C,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAE3E,MAAM,YAAY,GAAG,GAAiB,EAAE;QACtC,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC;QAC5B,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;IACzF,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,4BAA4B,CAAC,CAAC;QACjH,MAAM,IAAI,GAAkC,EAAE,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,UAAU,CAAC,0CAA0C,CAAC,CAAC;YACzF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;gBAClE,MAAM,MAAM,GAAG,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACnE,IAAI,CAAC,CAAC,CAAC,UAAU;oBAAE,OAAO,UAAU,CAAC,YAAY,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,UAAU,qBAAqB,CAAC,CAAC;gBAC/G,IAAI,CAAC,MAAM;oBAAE,OAAO,UAAU,CAAC,8BAA8B,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;gBACjG,IAAI,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QAC7C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC;YACxG,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7I,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC;YACnI,QAAQ,EAAE,CAAC;gBACT,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS;gBACzD,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;gBAC3B,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,KAAK,YAAO,EAAE,aACb,MAAC,QAAQ,aAAQ,CAAC,aAChB,KAAC,KAAK,IAAC,KAAK,EAAC,MAAM,EAAC,IAAI,EAAE,CAAC,YACzB,KAAC,KAAK,IAAC,SAAS,QAAC,KAAK,EAAE,IAAI,EAAE,WAAW,EAAC,gBAAgB,EAAC,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,GAChH,EACR,KAAC,KAAK,IAAC,KAAK,EAAC,aAAa,EAAC,IAAI,EAAC,kEAA6D,EAAC,IAAI,EAAE,CAAC,YACnG,KAAC,QAAQ,IAAC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,GAC3F,EACP,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,CACjC,KAAC,KAAK,IAAC,KAAK,EAAC,YAAY,EAAC,IAAI,EAAE,CAAC,YAC/B,MAAC,SAAS,eAAC,sBAAI,UAAU,GAAK,EAAA,kFAA4D,IAAY,GAChG,CACT,CAAC,CAAC,CAAC,IAAI,EACP,CAAC,UAAU,CAAC,CAAC,CAAC,CACb,KAAC,KAAK,IAAC,KAAK,EAAC,OAAO,EAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,wDAAwD,YAClK,KAAC,SAAS,IACR,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,EACpG,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe,GACzB,GACI,CACT,CAAC,CAAC,CAAC,IAAI,EACP,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CACzB,KAAC,KAAK,IAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,YAC1D,KAAC,KAAK,YAAO,CAAC,YACX,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACvB,KAAC,QAAQ,IAEP,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EACjC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EACxC,KAAK,EAAE,CAAC,CAAC,KAAK,EACd,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IALpB,CAAC,CAAC,EAAE,CAMT,CACH,CAAC,GACI,GACF,CACT,CAAC,CAAC,CAAC,IAAI,EACP,KAAK,CAAC,CAAC,CAAC,CACP,KAAC,KAAK,IAAC,KAAK,EAAC,WAAW,EAAC,IAAI,EAAE,CAAC,YAC9B,KAAC,YAAY,IACX,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,WAAW,EACrB,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAC,cAAc,EACvB,UAAU,EAAC,QAAQ,EACnB,WAAW,EAAC,gBAAgB,EAC5B,UAAU,EAAC,2EAAsE,EACjF,OAAO,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,+BAA+B,EACpH,GAAG,EAAE,EAAE,EACP,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gCACrB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,YAAY,CAAC,IAAI,aAAa,CAAC,CAAC,CAAE,CAAC;gCACzF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gCAC3B,OAAO,CACL,8BACG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAC1B,KAAC,MAAM,kBACM,eAAe,EAC1B,KAAK,EAAE,GAAG,CAAC,YAAY,EACvB,QAAQ,EAAE,IAAI,EACd,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;gDACd,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;gDAC1E,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;4CAC/F,CAAC,YAEA,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAqB,KAAK,EAAE,CAAC,CAAC,IAAI,YAAG,CAAC,CAAC,KAAK,IAA/B,CAAC,CAAC,IAAI,CAAmC,CAAC,GAC1E,CACV,CAAC,CAAC,CAAC,IAAI,EACR,KAAC,MAAM,IAAC,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,GAAI,EACnI,MAAC,MAAM,kBAAY,cAAc,EAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,aAChI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAQ,KAAK,EAAC,EAAE,mCAAuB,EAC7D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAmB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAG,CAAC,CAAC,KAAK,IAAtD,CAAC,CAAC,EAAE,CAA4D,CAAC,IACrG,IACR,CACJ,CAAC;4BACJ,CAAC,GACD,GACI,CACT,CAAC,CAAC,CAAC,IAAI,EACR,KAAC,KAAK,IAAC,KAAK,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC,SAAS,YAC3J,MAAC,MAAM,IAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAClF,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAQ,KAAK,EAAE,IAAI,oCAA8B,CAAC,CAAC,CAAC,IAAI,EAC1E,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAgB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,YAAG,aAAa,CAAC,CAAC,CAAC,IAAtC,CAAC,CAA+C,CAAC,EACtF,aAAa,CAAC,CAAC,CAAC,iBAAQ,KAAK,EAAE,KAAK,0BAAoB,CAAC,CAAC,CAAC,IAAI,IACzD,GACH,IACC,EACV,KAAK,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CACxD,KAAC,IAAI,aAAQ,IAAI,2FAAmF,CACrG,CAAC,CAAC,CAAC,IAAI,EACP,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAC,WAAW,IAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAAG,OAAO,IAAI,KAAK,GAAe,CAAC,CAAC,CAAC,IAAI,EACjG,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,aACjE,KAAC,SAAS,IAAC,OAAO,EAAC,OAAO,EAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,uBAAoB,EAChF,KAAC,SAAS,IAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAC/F,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,GACxC,IACR,IACA,CACT,CAAC;AACJ,CAAC"}

package/dist/kit/ApiKeys.d.ts

@@ -0,0 +1,79 @@
+import { type ApiKeyCreateInput, type ApiKeyResourceMode, type ApiKeyResourceTypeSpec, type ApiKeyScopePreset, type ApiKeyUpdateInput } from "./ApiKeyForm.tsx";
+export type { ApiKeyCreateInput, ApiKeyResourceMode, ApiKeyResourceTypeSpec, ApiKeyScopePreset, ApiKeyUpdateInput };
+/**
+ * ApiKeys: the one screen every product shows for the keys auth holds on its
+ * behalf — and the portal's view across products. API-agnostic: the host maps
+ * its wire type to `ApiKeyRow`, resolves owner labels, and supplies the
+ * callbacks. Omit `onCreate` for a read-only list (the portal never mints a
+ * key; only a product can vouch for the resources one is bound to).
+ */
+export type ApiKeyOwnerKind = "user" | "service_account" | "team" | "resource";
+export interface ApiKeyBindingRow {
+    resourceType: string;
+    resourceId: string;
+    resourceLabel?: string | undefined;
+    scopes: string[];
+    effectiveScopes?: string[] | undefined;
+}
+export interface ApiKeyRow {
+    /** the key's URN */
+    id: string;
+    name: string;
+    description?: string | undefined;
+    /** rendered as `xk_<keyPrefix>…`, or `<legacyPrefix><keyPrefix>…` for an imported key */
+    keyPrefix: string;
+    legacyPrefix?: string | undefined;
+    applicationSlug?: string | undefined;
+    applicationName?: string | undefined;
+    /** the label is resolved by the host — "You", a team name, "bucket media" */
+    owner: {
+        kind: ApiKeyOwnerKind;
+        label: string;
+    };
+    identityless: boolean;
+    resourceMode: ApiKeyResourceMode;
+    /** key-level scopes as granted; a granted scope absent from effectiveScopes is drawn muted */
+    scopes: string[];
+    effectiveScopes?: string[] | undefined;
+    bindings: ApiKeyBindingRow[];
+    expiresAt?: Date | undefined;
+    lastUsedAt?: Date | undefined;
+    revokedAt?: Date | undefined;
+    createdAt: Date;
+    createdByLabel?: string | undefined;
+}
+export interface ApiKeysProps {
+    rows: ApiKeyRow[];
+    loading?: boolean | undefined;
+    includeRevoked: boolean;
+    onIncludeRevokedChange: (v: boolean) => void;
+    /** omit for a read-only view (the auth portal) */
+    onCreate?: ((input: ApiKeyCreateInput) => Promise<{
+        secret: string;
+        key: ApiKeyRow;
+    }>) | undefined;
+    onUpdate?: ((id: string, input: ApiKeyUpdateInput) => Promise<ApiKeyRow>) | undefined;
+    /** offered only when there is no onUpdate — the edit form renames too */
+    onRename?: ((id: string, name: string) => Promise<void>) | undefined;
+    onRevoke: (id: string) => Promise<void>;
+    /** key-level scope choices in the create/edit forms */
+    scopePresets?: ApiKeyScopePreset[] | undefined;
+    /** resource types a key may be bound to; absent → only app-wide keys can be created */
+    resourceTypes?: ApiKeyResourceTypeSpec[] | undefined;
+    /** fixed mode for created keys; absent → the person picks */
+    mode?: ApiKeyResourceMode | undefined;
+    /** who new keys belong to, shown in the create form */
+    ownerLabel?: string | undefined;
+    /** lifetime options in days; absent → 30, 90, 365. A required expiry is `allowNoExpiry={false}` */
+    lifetimeDays?: number[] | undefined;
+    allowNoExpiry?: boolean | undefined;
+    /** one table per application (the portal's view across products) */
+    groupByApplication?: boolean | undefined;
+    /** the revocation propagation note under the secret and in the revoke dialog */
+    revokeNote?: string | undefined;
+    emptyTitle?: string | undefined;
+    emptyBody?: string | undefined;
+}
+export declare const keyHint: (k: ApiKeyRow) => string;
+export declare function ApiKeys({ rows, loading, includeRevoked, onIncludeRevokedChange, onCreate, onUpdate, onRename, onRevoke, scopePresets, resourceTypes, mode, ownerLabel, lifetimeDays, allowNoExpiry, groupByApplication, revokeNote, emptyTitle, emptyBody, }: ApiKeysProps): import("react").JSX.Element;
+//# sourceMappingURL=ApiKeys.d.ts.map

package/dist/kit/ApiKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeys.d.ts","sourceRoot":"","sources":["../../src/kit/ApiKeys.tsx"],"names":[],"mappings":"AAeA,OAAO,EAEL,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,KAAK,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EAC7H,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;AAEpH;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,iBAAiB,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,SAAS;IACxB,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,yFAAyF;IACzF,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,6EAA6E;IAC7E,KAAK,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,kBAAkB,CAAC;IACjC,8FAA8F;IAC9F,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACvC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,UAAU,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC9B,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,sBAAsB,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC7C,kDAAkD;IAClD,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC,GAAG,SAAS,CAAC;IACnG,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IACtF,yEAAyE;IACzE,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACrE,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,uDAAuD;IACvD,YAAY,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAC/C,uFAAuF;IACvF,aAAa,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAC;IACrD,6DAA6D;IAC7D,IAAI,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACtC,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,mGAAmG;IACnG,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACpC,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,oEAAoE;IACpE,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AA2BD,eAAO,MAAM,OAAO,GAAI,GAAG,SAAS,WAAgD,CAAC;AAqDrF,wBAAgB,OAAO,CAAC,EACtB,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAC7F,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAC9F,UAAgC,EAAE,UAA0B,EAAE,SAAS,GACxE,EAAE,YAAY,+BA+Pd"}

package/dist/kit/ApiKeys.js

@@ -0,0 +1,198 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useMemo, useState } from "react";
+import styled from "styled-components";
+import { AppButton, IconButton } from "./Button.js";
+import { StatusPill, Tag } from "./Badge.js";
+import { DataTable } from "./DataTable.js";
+import { EmptyState } from "./EmptyState.js";
+import { ConfirmDialog, EntityModal, PromptDialog } from "./Modal.js";
+import { Toggle } from "./Form.js";
+import { Icon } from "./Icon.js";
+import { Menu, MenuItem } from "./Menu.js";
+import { SecretField } from "./Secret.js";
+import { Ago, Cell, Faint, Hint } from "./Text.js";
+import { Callout } from "./Blocks.js";
+import { SectionHead } from "./Panel.js";
+import { Row, Stack } from "./Layout.js";
+import { ApiKeyForm, } from "./ApiKeyForm.js";
+const DEFAULT_REVOKE_NOTE = "Revoked keys stop working within 30 seconds.";
+const SOON_MS = 7 * 86_400_000;
+const KIND_LABEL = {
+    user: "user", service_account: "service account", team: "team", resource: "resource",
+};
+const STATUS = {
+    active: { label: "Active", tone: "ok" },
+    soon: { label: "Expires soon", tone: "warn" },
+    expired: { label: "Expired", tone: "warn" },
+    revoked: { label: "Revoked", tone: "mut" },
+};
+function statusOf(k, now = Date.now()) {
+    if (k.revokedAt)
+        return "revoked";
+    if (k.expiresAt) {
+        const t = k.expiresAt.getTime();
+        if (t <= now)
+            return "expired";
+        if (t - now < SOON_MS)
+            return "soon";
+    }
+    return "active";
+}
+export const keyHint = (k) => `${k.legacyPrefix ?? "xk_"}${k.keyPrefix}…`;
+const Tags = styled.span `
+  display: inline-flex;
+  flex-wrap: wrap;
+  gap: 4px;
+  max-width: 280px;
+`;
+// A granted scope the owner cannot currently exercise: still on the key, so
+// still shown, but drawn as the dead letter it is.
+const Ineffective = styled(Tag) `
+  opacity: 0.45;
+  border-style: dashed;
+  text-decoration: line-through;
+`;
+const Owner = styled.span `
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  min-width: 0;
+  > span:last-child { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+`;
+const Bar = styled(Row) `
+  justify-content: space-between;
+  margin-bottom: 12px;
+`;
+// The application heading over each group: the Stack already spaces groups,
+// so the kit heading's own top margin would double it.
+const GroupHead = styled(SectionHead) `
+  margin: 0 0 8px;
+`;
+function ScopeTags({ scopes, effective, empty }) {
+    if (scopes.length === 0)
+        return _jsx(Faint, { children: empty });
+    return (_jsx(Tags, { children: scopes.map((s) => effective && !effective.includes(s)
+            ? _jsx(Ineffective, { title: "not currently effective", children: s }, s)
+            : _jsx(Tag, { title: s, children: s }, s)) }));
+}
+function bindingLabel(b) {
+    return b.resourceLabel ?? `${b.resourceType} ${b.resourceId}`;
+}
+export function ApiKeys({ rows, loading, includeRevoked, onIncludeRevokedChange, onCreate, onUpdate, onRename, onRevoke, scopePresets, resourceTypes, mode, ownerLabel, lifetimeDays, allowNoExpiry, groupByApplication, revokeNote = DEFAULT_REVOKE_NOTE, emptyTitle = "No API keys", emptyBody, }) {
+    const [creating, setCreating] = useState(false);
+    const [editing, setEditing] = useState(null);
+    const [renaming, setRenaming] = useState(null);
+    const [revoking, setRevoking] = useState(null);
+    const [minted, setMinted] = useState(null);
+    const [busy, setBusy] = useState(false);
+    const [formError, setFormError] = useState(null);
+    const [lastError, setLastError] = useState(null);
+    const fail = (e) => String(e?.message ?? e);
+    const run = async (work, inForm) => {
+        setBusy(true);
+        setLastError(null);
+        if (inForm)
+            setFormError(null);
+        try {
+            return await work();
+        }
+        catch (e) {
+            (inForm ? setFormError : setLastError)(fail(e));
+            return undefined;
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    const create = async (input) => {
+        if (!onCreate)
+            return;
+        const out = await run(() => onCreate(input), true);
+        if (out) {
+            setCreating(false);
+            setMinted(out);
+        }
+    };
+    const update = async (input) => {
+        if (!onUpdate || !editing)
+            return;
+        const out = await run(() => onUpdate(editing.id, input), true);
+        if (out)
+            setEditing(null);
+    };
+    // Rename and revoke close either way: a failure has nothing to correct in a
+    // one-field dialog, so it is reported above the table instead.
+    const rename = async (name) => {
+        if (!onRename || !renaming)
+            return;
+        await run(() => onRename(renaming.id, name), false);
+        setRenaming(null);
+    };
+    const revoke = async () => {
+        if (!revoking)
+            return;
+        await run(() => onRevoke(revoking.id), false);
+        setRevoking(null);
+    };
+    const columns = useMemo(() => [
+        {
+            key: "name", head: "Key",
+            sortBy: (k) => k.name,
+            render: (k) => (_jsx(Cell, { title: k.name, sub: keyHint(k), ...(k.description ? { tooltip: k.description } : {}) })),
+        },
+        {
+            key: "owner", head: "Owner", hideBelow: 720,
+            sortBy: (k) => `${k.owner.kind} ${k.owner.label}`,
+            render: (k) => (_jsxs(Owner, { title: k.identityless ? "Identityless: the key acts as itself, on behalf of its owner" : "The key acts as its owner", children: [_jsx(Tag, { "$tone": k.identityless ? "mut" : "brand", children: KIND_LABEL[k.owner.kind] }), _jsx("span", { children: k.owner.label })] })),
+        },
+        {
+            key: "reach", head: "Reach", hideBelow: 960,
+            render: (k) => k.resourceMode === "app_wide" ? (_jsx(Faint, { children: "App-wide" })) : (_jsxs(Tags, { children: [k.bindings.slice(0, 3).map((b) => (_jsx(Tag, { title: `${bindingLabel(b)}: ${b.scopes.join(" ")}`, children: bindingLabel(b) }, `${b.resourceType}:${b.resourceId}`))), k.bindings.length > 3 ? _jsxs(Tag, { title: k.bindings.slice(3).map(bindingLabel).join(", "), children: ["+", k.bindings.length - 3] }) : null, k.bindings.length === 0 ? _jsx(Faint, { children: "No resources" }) : null] })),
+        },
+        {
+            key: "scopes", head: "Scopes", hideBelow: 1100,
+            render: (k) => _jsx(ScopeTags, { scopes: k.scopes, effective: k.effectiveScopes, empty: k.resourceMode === "bound" ? "Per resource" : "None" }),
+        },
+        {
+            key: "status", head: "Status", width: "150px",
+            sortBy: (k) => statusOf(k),
+            render: (k) => {
+                const s = statusOf(k);
+                return (_jsxs(Stack, { "$gap": 3, children: [_jsx(StatusPill, { "$tone": STATUS[s].tone, children: STATUS[s].label }), _jsx(Hint, { "$size": 11, style: { margin: 0 }, children: s === "revoked" ? _jsxs(_Fragment, { children: ["revoked ", _jsx(Ago, { at: k.revokedAt })] }) : k.expiresAt ? _jsxs(_Fragment, { children: ["expires ", _jsx(Ago, { at: k.expiresAt })] }) : "never expires" })] }));
+            },
+        },
+        {
+            key: "used", head: "Last used", width: "120px", hideBelow: 820,
+            sortBy: (k) => k.lastUsedAt?.getTime(),
+            render: (k) => (k.lastUsedAt ? _jsx(Ago, { at: k.lastUsedAt }) : _jsx(Faint, { children: "never" })),
+        },
+        {
+            key: "actions", head: "", width: "48px", align: "right",
+            render: (k) => (_jsxs(Menu, { width: 180, trigger: () => _jsx(IconButton, { "aria-label": "Key actions", title: "Actions", children: _jsx(Icon, { name: "more" }) }), children: [onUpdate ? _jsx(MenuItem, { icon: "edit", disabled: !!k.revokedAt, onClick: () => { setFormError(null); setEditing(k); }, children: "Edit" }) : null, !onUpdate && onRename ? _jsx(MenuItem, { icon: "edit", disabled: !!k.revokedAt, onClick: () => setRenaming(k), children: "Rename" }) : null, _jsx(MenuItem, { icon: "ban", danger: true, disabled: !!k.revokedAt, onClick: () => setRevoking(k), children: "Revoke\u2026" })] })),
+        },
+    ], [onUpdate, onRename]);
+    const groups = useMemo(() => {
+        if (!groupByApplication)
+            return [{ id: "", label: "", rows }];
+        const by = new Map();
+        for (const k of rows) {
+            const id = k.applicationSlug ?? "";
+            const g = by.get(id) ?? { id, label: k.applicationName ?? k.applicationSlug ?? "Other", rows: [] };
+            g.rows.push(k);
+            by.set(id, g);
+        }
+        const out = [...by.values()].sort((a, b) => a.label.localeCompare(b.label));
+        // nothing to group yet (still loading, or genuinely empty): one table, so
+        // the skeleton or the empty state has somewhere to be
+        return out.length > 0 ? out : [{ id: "", label: "", rows: [] }];
+    }, [rows, groupByApplication]);
+    const createButton = onCreate ? (_jsx(AppButton, { variant: "grad", icon: "key", onClick: () => { setFormError(null); setCreating(true); }, children: "Create key" })) : null;
+    const empty = (_jsx(EmptyState, { icon: "key", title: emptyTitle, desc: emptyBody ?? (onCreate ? "Create a key to call the API without signing in." : "Keys products issue for you show up here."), action: createButton, compact: true }));
+    const search = (k) => `${k.name} ${keyHint(k)} ${k.owner.label} ${k.applicationName ?? ""} ${k.scopes.join(" ")}`;
+    return (_jsxs("div", { children: [_jsxs(Bar, { children: [_jsx(Toggle, { checked: includeRevoked, onChange: onIncludeRevokedChange, label: "Show revoked" }), createButton] }), lastError ? _jsx(Callout, { tone: "crit", title: "That did not go through", children: lastError }) : null, _jsx(Stack, { "$gap": 18, children: groups.map((g) => (_jsxs("div", { children: [groupByApplication && g.label ? _jsx(GroupHead, { children: g.label }) : null, _jsx(DataTable, { columns: columns, rows: g.rows, rowKey: (k) => k.id, loading: loading, empty: empty, defaultSort: { key: "name" }, ...(groupByApplication ? {} : { search, searchPlaceholder: "Filter keys…" }) })] }, g.id))) }), creating && onCreate ? (_jsx(EntityModal, { title: "Create API key", icon: "key", size: "lg", onClose: () => { if (!busy)
+                    setCreating(false); }, children: _jsx(ApiKeyForm, { mode: "create", scopePresets: scopePresets, resourceTypes: resourceTypes, fixedMode: mode, ownerLabel: ownerLabel, lifetimeDays: lifetimeDays, allowNoExpiry: allowNoExpiry, busy: busy, error: formError, onCreate: create, onCancel: () => setCreating(false) }) })) : null, editing && onUpdate ? (_jsx(EntityModal, { title: "Edit API key", sub: keyHint(editing), icon: "key", size: "lg", onClose: () => { if (!busy)
+                    setEditing(null); }, children: _jsx(ApiKeyForm, { mode: "edit", initial: editing, scopePresets: scopePresets, resourceTypes: resourceTypes, fixedMode: editing.resourceMode, lifetimeDays: lifetimeDays, allowNoExpiry: allowNoExpiry, busy: busy, error: formError, onUpdate: update, onCancel: () => setEditing(null) }) })) : null, minted ? (_jsx(EntityModal, { title: "API key created", sub: minted.key.name, icon: "key", size: "md", dismissable: false, onClose: () => setMinted(null), children: _jsxs(Stack, { children: [_jsx(Callout, { tone: "warn", title: "Copy it now", children: "This is the only time the secret is shown. Lose it and the only way back is a new key." }), _jsx(SecretField, { value: minted.secret, revealed: true, noReveal: true }), _jsx(Hint, { "$size": 11.5, style: { margin: 0 }, children: revokeNote }), _jsx(Row, { style: { justifyContent: "flex-end" }, children: _jsx(AppButton, { variant: "grad", icon: "check", onClick: () => setMinted(null), children: "I have copied it" }) })] }) })) : null, renaming ? (_jsx(PromptDialog, { title: "Rename key", sub: keyHint(renaming), label: "Name", initial: renaming.name, actionLabel: "Rename", busy: busy, validate: (name) => (name.trim().length > 64 ? "At most 64 characters." : null), onSubmit: (name) => void rename(name), onClose: () => { if (!busy)
+                    setRenaming(null); } })) : null, revoking ? (_jsx(ConfirmDialog, { title: `Revoke ${revoking.name}?`, body: _jsxs(_Fragment, { children: ["Anything presenting ", _jsx("b", { children: keyHint(revoking) }), " is refused from then on. ", revokeNote, " The key stays in the list for the audit trail."] }), actionLabel: "Revoke key", typedValue: revoking.name, busy: busy, onConfirm: () => void revoke(), onClose: () => { if (!busy)
+                    setRevoking(null); } })) : null] }));
+}
+//# sourceMappingURL=ApiKeys.js.map