// Administrator console II — settings, health, watchers (WP-U09), // and the Auditor's access history. // // THREE RULES, and the first is the one this file exists to get right. // // 1. THERE IS NO EDIT AFFORDANCE ON AN OWNER DECISION. Not a disabled input, // not a greyed-out button, not a field that fails on save. The boundary is // taught by the screen: an administrator looking at an owner decision must // see something that was never theirs to change, not something they are // currently forbidden from changing. A disabled editor says "you could, // but not now"; read-only text says "this belongs to somebody else". // // 2. NEVER-RAN IS ITS OWN STATE. A tile that renders green because a check has // never run is absence of evidence rendered as evidence, and it is how a // system reassures its operator into an incident. // // 3. THE NUDGE NOTIFIES AND DESTROYS NOTHING. It writes an audit row saying // Legal was told. It touches no retention state at all, and it cannot — // the administrator holds no write on that table. const { useState, useMemo, useRef } = React; // ── Settings ───────────────────────────────────────────────────────────── function OperationalRow({ s, onSaved, onError }) { const [value, setValue] = useState(s.value); const [busy, setBusy] = useState(false); const dirty = value !== s.value; const isDuration = ['session_idle_length', 'session_length'].includes(s.key); const valid = !isDuration || /^\s*[1-9][0-9]{0,5}\s*[smhd]\s*$/.test(value); // A value too long to sit beside its description gets the row to itself // rather than a box it does not fit in. `notification_immediate_list` is a // comma list needing 569px; it was being edited through 108px. const long = value.length > 44; return (
{s.key}
{s.purpose}
{/* THE BOX FOLLOWS ITS VALUE. This was a hard 110px for all eleven settings, and two of them do not fit: `daily_start_of_business` needs 195px, and the socialisation list needs 569px. Neither clipped with an ellipsis or carried a title, so an administrator was editing — and saving — a value they could not read. Clamped at both ends: a short number keeps a short box, and a long list stops before it takes the row. `title` carries the whole value however narrow the window, and `aria-label` gives the control the name the key beside it was only ever showing. */} {/* A LONG VALUE GETS A BOX THAT WRAPS, not a longer line. Giving the stacked row the full width fixed this at 1440 and not at 768, where `notification_immediate_list` needs 569px and the row offers 563 — six pixels short, and a different six at every other width. A single line can never promise to show an arbitrarily long value; a textarea can, at any width, which is the only version of this that is actually true. Newlines are stripped on the way in: a setting is one value, and a textarea is being used for its wrapping, not to make it multi-line. */} {long ? (