@1mcp/agent 0.40.0-beta.0 → 0.40.0-beta.1

package/README.md

@@ -65,6 +65,14 @@ If you want the full walkthrough (with success criteria and off-ramps), use the
 
 For a given agent, choose one mode only. If you switch that agent to CLI mode, remove its old direct MCP configuration first.
 
+## Privacy and Product Usage Telemetry
+
+Product Usage Telemetry is **enabled by default** outside CI and tests, with a notice before first collection. It sends aggregate command/feature counts and coarse platform information with a random, pseudonymous installation ID to 1MCP's first-party collector. It excludes prompts, tool arguments/results, credentials, paths, and arbitrary server/tool names.
+
+To opt out for your local OS-user installation, run `1mcp telemetry disable`; use `1mcp telemetry status` to check the effective policy. `DO_NOT_TRACK=1` also suppresses collection. Remote runtimes follow their owner's settings.
+
+Read [Privacy and Product Usage Telemetry](https://docs.1mcp.app/guide/privacy) ([中文](https://docs.1mcp.app/zh/guide/privacy)) for the complete data scope, local storage, retention policy, and reset limitations.
+
 ## Work Across Projects and Worktrees
 
 Use one local runtime across repositories and Git worktrees. After configuring an installed backend with `mcp setup`, the agent selects a checkout on each call:

package/build/admin/assets/{admin-OAuthServicesWorkspace-Bu74Bzt5.js → admin-OAuthServicesWorkspace-pgsV0qQs.js}

@@ -1 +1 @@
-import{n as e}from"./admin-rolldown-runtime-Bh1tDfsg.js";import{D as t,E as n,S as r,T as i,b as a,j as o,s,y as c}from"./admin-mantine-xwbfu5Gd.js";import{i as l,r as u}from"./admin-react-BSaWeqgv.js";import{O as d,h as f,p,x as m}from"./admin-icons-wOzB38gm.js";import{n as h,t as g}from"./admin-console-DVuqABnE.js";var _=e(l(),1),v=u();function y({model:e,oauth:t,configureServer:r}){let{state:c,configuredServers:l}=e,u=c.status?.oauth.services??[],[d,p]=(0,_.useState)(null);async function m(e){try{await l.copy(`serviceId`,e.id),p(`Service id copied.`)}catch{p(`Could not copy service id. Select the value manually.`)}}return(0,v.jsxs)(`section`,{"aria-label":`OAuth services`,className:`operations-workspace`,children:[(0,v.jsx)(g,{title:`OAuth services`,description:`${u.length} reported services · runtime status ${c.status?.oauth.status??`unavailable`}`}),t.callbackFeedback?(0,v.jsx)(C,{feedback:t.callbackFeedback}):null,t.operationFeedback?(0,v.jsx)(C,{feedback:t.operationFeedback}):null,u.length===0?(0,v.jsx)(o,{className:`operations-panel`,withBorder:!0,children:(0,v.jsxs)(s,{gap:`sm`,className:`actionable-empty-state`,children:[(0,v.jsxs)(`div`,{children:[(0,v.jsx)(i,{fw:800,children:`No OAuth services reported`}),(0,v.jsx)(i,{c:`dimmed`,size:`sm`,children:`OAuth services appear when a configured server requires provider authorization.`})]}),(0,v.jsx)(a,{component:`a`,href:`/admin/servers/new`,leftSection:(0,v.jsx)(f,{size:16}),onClick:e=>{b(e)&&(e.preventDefault(),r())},children:`Configure server`})]})}):(0,v.jsx)(s,{gap:`sm`,children:u.map(e=>(0,v.jsx)(x,{service:e,busy:t.busy?.serviceId===e.id?t.busy.action:null,operationBlocked:t.busy!==null,onCopy:()=>void m(e),onOperate:n=>void t.operate(e.id,n)},e.id))}),d?(0,v.jsx)(n,{"aria-live":`polite`,color:d.startsWith(`Could not`)?`red`:`teal`,mt:`sm`,children:d}):null]})}function b(e){return e.button===0&&!e.metaKey&&!e.ctrlKey&&!e.shiftKey&&!e.altKey}function x({service:e,busy:n,operationBlocked:l,onCopy:u,onOperate:f}){let g=S(e),_=g===`authorize`?`Authorize`:`Restart`;return(0,v.jsx)(o,{component:`article`,className:`oauth-service-row`,withBorder:!0,children:(0,v.jsxs)(t,{justify:`space-between`,align:`flex-start`,wrap:`nowrap`,children:[(0,v.jsxs)(`div`,{className:`oauth-service-main`,children:[(0,v.jsxs)(t,{gap:`xs`,children:[(0,v.jsx)(i,{fw:800,children:e.displayName}),(0,v.jsx)(r,{color:e.status===`connected`?`teal`:`yellow`,variant:`light`,children:e.status})]}),(0,v.jsx)(i,{size:`xs`,c:`dimmed`,children:e.requiresOAuth?`OAuth required`:`No OAuth action required`}),e.lastError?(0,v.jsx)(i,{size:`sm`,c:`red`,children:h(e.lastError)??`Backend OAuth failed. Check local OAuth diagnostics.`}):null,(0,v.jsxs)(`details`,{className:`oauth-service-identity`,children:[(0,v.jsx)(`summary`,{children:`Full service ID`}),(0,v.jsxs)(t,{gap:`xs`,wrap:`nowrap`,children:[(0,v.jsx)(c,{className:`oauth-service-id`,children:e.id}),(0,v.jsx)(a,{"aria-label":`Copy full service ID for ${e.displayName}`,size:`compact-xs`,variant:`subtle`,onClick:u,children:(0,v.jsx)(d,{size:14,"aria-hidden":`true`})})]})]})]}),g?(0,v.jsxs)(s,{gap:4,align:`flex-end`,className:`oauth-service-action`,children:[(0,v.jsx)(a,{"aria-label":`${_} ${e.displayName}`,leftSection:g===`authorize`?(0,v.jsx)(m,{size:15}):(0,v.jsx)(p,{size:15}),loading:n===g,disabled:l,onClick:()=>f(g),children:_}),(0,v.jsx)(i,{size:`xs`,c:`dimmed`,"aria-live":`polite`,children:n?n===`authorize`?`Starting authorization...`:`Restarting authorization...`:``})]}):null]})})}function S(e){return e.requiresOAuth?e.status===`awaiting_oauth`?`authorize`:`restart`:null}function C({feedback:e}){return(0,v.jsx)(n,{color:e.kind===`success`?`teal`:`red`,role:e.kind===`success`?`status`:`alert`,mb:`sm`,children:e.message})}export{y as OAuthServicesWorkspace};
+import{n as e}from"./admin-rolldown-runtime-Bh1tDfsg.js";import{D as t,E as n,S as r,T as i,b as a,j as o,s,y as c}from"./admin-mantine-xwbfu5Gd.js";import{i as l,r as u}from"./admin-react-BSaWeqgv.js";import{O as d,h as f,p,x as m}from"./admin-icons-wOzB38gm.js";import{n as h,t as g}from"./admin-console-lrFAX4EQ.js";var _=e(l(),1),v=u();function y({model:e,oauth:t,configureServer:r}){let{state:c,configuredServers:l}=e,u=c.status?.oauth.services??[],[d,p]=(0,_.useState)(null);async function m(e){try{await l.copy(`serviceId`,e.id),p(`Service id copied.`)}catch{p(`Could not copy service id. Select the value manually.`)}}return(0,v.jsxs)(`section`,{"aria-label":`OAuth services`,className:`operations-workspace`,children:[(0,v.jsx)(g,{title:`OAuth services`,description:`${u.length} reported services · runtime status ${c.status?.oauth.status??`unavailable`}`}),t.callbackFeedback?(0,v.jsx)(C,{feedback:t.callbackFeedback}):null,t.operationFeedback?(0,v.jsx)(C,{feedback:t.operationFeedback}):null,u.length===0?(0,v.jsx)(o,{className:`operations-panel`,withBorder:!0,children:(0,v.jsxs)(s,{gap:`sm`,className:`actionable-empty-state`,children:[(0,v.jsxs)(`div`,{children:[(0,v.jsx)(i,{fw:800,children:`No OAuth services reported`}),(0,v.jsx)(i,{c:`dimmed`,size:`sm`,children:`OAuth services appear when a configured server requires provider authorization.`})]}),(0,v.jsx)(a,{component:`a`,href:`/admin/servers/new`,leftSection:(0,v.jsx)(f,{size:16}),onClick:e=>{b(e)&&(e.preventDefault(),r())},children:`Configure server`})]})}):(0,v.jsx)(s,{gap:`sm`,children:u.map(e=>(0,v.jsx)(x,{service:e,busy:t.busy?.serviceId===e.id?t.busy.action:null,operationBlocked:t.busy!==null,onCopy:()=>void m(e),onOperate:n=>void t.operate(e.id,n)},e.id))}),d?(0,v.jsx)(n,{"aria-live":`polite`,color:d.startsWith(`Could not`)?`red`:`teal`,mt:`sm`,children:d}):null]})}function b(e){return e.button===0&&!e.metaKey&&!e.ctrlKey&&!e.shiftKey&&!e.altKey}function x({service:e,busy:n,operationBlocked:l,onCopy:u,onOperate:f}){let g=S(e),_=g===`authorize`?`Authorize`:`Restart`;return(0,v.jsx)(o,{component:`article`,className:`oauth-service-row`,withBorder:!0,children:(0,v.jsxs)(t,{justify:`space-between`,align:`flex-start`,wrap:`nowrap`,children:[(0,v.jsxs)(`div`,{className:`oauth-service-main`,children:[(0,v.jsxs)(t,{gap:`xs`,children:[(0,v.jsx)(i,{fw:800,children:e.displayName}),(0,v.jsx)(r,{color:e.status===`connected`?`teal`:`yellow`,variant:`light`,children:e.status})]}),(0,v.jsx)(i,{size:`xs`,c:`dimmed`,children:e.requiresOAuth?`OAuth required`:`No OAuth action required`}),e.lastError?(0,v.jsx)(i,{size:`sm`,c:`red`,children:h(e.lastError)??`Backend OAuth failed. Check local OAuth diagnostics.`}):null,(0,v.jsxs)(`details`,{className:`oauth-service-identity`,children:[(0,v.jsx)(`summary`,{children:`Full service ID`}),(0,v.jsxs)(t,{gap:`xs`,wrap:`nowrap`,children:[(0,v.jsx)(c,{className:`oauth-service-id`,children:e.id}),(0,v.jsx)(a,{"aria-label":`Copy full service ID for ${e.displayName}`,size:`compact-xs`,variant:`subtle`,onClick:u,children:(0,v.jsx)(d,{size:14,"aria-hidden":`true`})})]})]})]}),g?(0,v.jsxs)(s,{gap:4,align:`flex-end`,className:`oauth-service-action`,children:[(0,v.jsx)(a,{"aria-label":`${_} ${e.displayName}`,leftSection:g===`authorize`?(0,v.jsx)(m,{size:15}):(0,v.jsx)(p,{size:15}),loading:n===g,disabled:l,onClick:()=>f(g),children:_}),(0,v.jsx)(i,{size:`xs`,c:`dimmed`,"aria-live":`polite`,children:n?n===`authorize`?`Starting authorization...`:`Restarting authorization...`:``})]}):null]})})}function S(e){return e.requiresOAuth?e.status===`awaiting_oauth`?`authorize`:`restart`:null}function C({feedback:e}){return(0,v.jsx)(n,{color:e.kind===`success`?`teal`:`red`,role:e.kind===`success`?`status`:`alert`,mb:`sm`,children:e.message})}export{y as OAuthServicesWorkspace};

package/build/admin/assets/admin-console-lrFAX4EQ.js

@@ -0,0 +1,3 @@
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/admin-AboutRuntimeWorkspace-DH2QC2nJ.js","assets/admin-mantine-xwbfu5Gd.js","assets/admin-rolldown-runtime-Bh1tDfsg.js","assets/admin-react-BSaWeqgv.js","assets/admin-console-DmRyrCWD.css","assets/admin-BackendLogsWorkspace-DnPzXW3E.js","assets/admin-icons-wOzB38gm.js","assets/admin-InstructionTemplatesWorkspace-B7beKEgz.js","assets/admin-OAuthServicesWorkspace-pgsV0qQs.js","assets/admin-PresetAuthoringWorkspace-053b1zwU.js"])))=>i.map(i=>d[i]);
+import{n as e}from"./admin-rolldown-runtime-Bh1tDfsg.js";import{A as t,D as n,E as r,F as i,I as a,L as o,N as s,O as c,P as l,S as u,T as d,_ as f,a as p,b as m,c as h,d as g,f as _,g as v,h as y,j as b,k as x,l as S,m as C,n as w,o as T,p as E,r as D,s as O,t as k,u as A,v as ee,w as j,x as te,y as M}from"./admin-mantine-xwbfu5Gd.js";import{i as ne,n as N,r as P,t as re}from"./admin-react-BSaWeqgv.js";import{a as F,c as I,i as L,l as R,n as z,o as B,r as V,s as H,t as U}from"./admin-vendor-VzhcFgoy.js";import{C as W,E as G,M as ie,N as ae,O as oe,S as se,_ as K,a as ce,b as le,c as ue,d as de,h as fe,i as pe,j as me,k as he,l as ge,m as _e,n as ve,o as ye,p as be,r as xe,s as Se,t as Ce,u as we,v as Te,w as Ee,x as De,y as Oe}from"./admin-icons-wOzB38gm.js";(function(){let e=document.createElement(`link`).relList;if(e&&e.supports&&e.supports(`modulepreload`))return;for(let e of document.querySelectorAll(`link[rel="modulepreload"]`))n(e);new MutationObserver(e=>{for(let t of e)if(t.type===`childList`)for(let e of t.addedNodes)e.tagName===`LINK`&&e.rel===`modulepreload`&&n(e)}).observe(document,{childList:!0,subtree:!0});function t(e){let t={};return e.integrity&&(t.integrity=e.integrity),e.referrerPolicy&&(t.referrerPolicy=e.referrerPolicy),e.crossOrigin===`use-credentials`?t.credentials=`include`:e.crossOrigin===`anonymous`?t.credentials=`omit`:t.credentials=`same-origin`,t}function n(e){if(e.ep)return;e.ep=!0;let n=t(e);fetch(e.href,n)}})();var ke=re(),Ae={network_failure:{stage:`network`,guidance:`Check provider reachability and DNS.`},private_destination_blocked:{stage:`network`,guidance:`OAuth endpoint resolves to a private address. Explicitly approve its HTTPS origin with oauth.privateNetworkOrigins if trusted.`},metadata_http_error:{stage:`metadata`,guidance:`Check provider metadata availability and access policy.`},invalid_metadata:{stage:`metadata`,guidance:`Check the provider OAuth metadata format.`},authority_mismatch:{stage:`authority`,guidance:`Check the configured resource and issuer against provider metadata.`}};function je(e,t){let n=Ae[e],r=e===`metadata_http_error`&&Number.isInteger(t)&&t>=400&&t<=599?` (HTTP ${t})`:``;return`OAuth ${n.stage}: ${e}${r}. ${n.guidance}`}function Me(e){if(typeof e==`string`)for(let t of Object.keys(Ae)){if(e===je(t))return{...Ae[t],reason:t};if(t===`metadata_http_error`){let n=/^OAuth metadata: metadata_http_error \(HTTP ([45]\d{2})\)\. /.exec(e),r=n?Number(n[1]):void 0;if(r&&e===je(t,r))return{...Ae[t],reason:t,httpStatus:r}}}}function Ne(e){try{let t=typeof e==`string`?e:Object.getOwnPropertyDescriptor(e,`message`)?.value;if(t===`OAuth authority or authorization attempt is no longer valid; start authorization again`)return je(`authority_mismatch`);let n=Me(t);return n?je(n.reason,n.httpStatus):void 0}catch{return}}var Pe=B({type:L(`configured_server`),id:H(),source:U([`mcpServers`,`mcpTemplates`])}).passthrough(),Fe=B({status:H(),operation:H(),configPath:H().optional(),target:B({name:H(),source:H()}).passthrough(),changed:V(),backup:B({created:V(),path:H().optional()}).passthrough(),retentionCleanup:B({attempted:V(),deletedPaths:z(H()),warnings:z(H())}).passthrough(),reload:B({status:H(),error:H().optional(),before:R().optional(),after:R().optional()}).passthrough(),warnings:z(H()).optional(),error:H().optional()}).passthrough(),Ie=B({activeInstancesBefore:F(),retiredInstances:F(),activeInstancesAfter:F(),retirementObserved:V(),error:H().optional()}).passthrough(),Le=B({ok:L(!0),operationId:H(),preview:B({target:Pe,qualifiedId:H(),targetFingerprint:H(),previewFingerprint:H(),current:B({enabled:V(),disabledValueKind:U([`absent`,`literal`,`context_expression`])}).passthrough(),proposed:B({enabled:V(),disabledValueKind:U([`absent`,`literal`])}).passthrough(),expressionReplacement:B({occurs:V(),replacement:U([`disabled_true`,`enabled_absent`])}).passthrough(),configChange:Fe,expectedBackup:B({policy:L(`required`),recoveryCopy:L(!0)}).passthrough(),expectedReload:B({policy:L(`observe_after_write`),possibleStatuses:I([L(`observed`),L(`runtime_not_running`),L(`reload_disabled`),L(`failed`)])}).passthrough(),runtimeImpact:B({activeInstanceCount:F(),retirement:U([`after_successful_reload`,`not_required`]),recreation:L(`lazy_future_match_only`)}).passthrough(),warnings:z(H())}).passthrough()}).passthrough(),Re=B({ok:L(!0),operationId:H(),result:B({target:Pe,qualifiedId:H(),previewFingerprint:H(),enabled:V(),outcome:U([`enabled`,`disabled`,`already_enabled`,`already_disabled`]),configChange:Fe,runtimeImpact:Ie}).passthrough()}).passthrough(),q=class extends Error{status;body;failure;constructor(e,t,n,r){super(n),this.status=e,this.body=t,this.name=`AdminApiError`,this.failure=r??Be(this)}};function ze(e,t){try{return e.parse(t)}catch{let e=`The runtime returned an invalid configured-server lifecycle response.`;throw new q(502,{},e,{kind:`unavailable`,message:e})}}function Be(e){let t=$e(e),n=et(e.body),r=n?`${tt(e,t)} Request ID: ${n}`:tt(e,t);return e.status===401?{kind:`unauthenticated`,adminStatus:Qe(e.body),code:t,message:r,requestId:n,status:401}:e.status===404&&t===`configured_server_not_found`?{kind:`configuredServerNotFound`,code:t,message:r,requestId:n,status:404}:{kind:`rejected`,code:t,message:r,requestId:n,status:e.status}}function Ve(e={}){let t=Ye(e.fetch??fetch),n=e.idempotencyKey??rt,r=e.eventSource??(e=>new EventSource(e));return{login(e){return t(`/admin/api/session/login`,{method:`POST`,body:JSON.stringify(e)})},getSession(){return t(`/admin/api/session`)},logout(e){return t(`/admin/api/session/logout`,{method:`POST`,headers:{"X-CSRF-Token":e}})},getStatus(){return t(`/admin/api/status`)},getBackendLogSnapshot(e){let n=e?`?sourceId=${encodeURIComponent(e)}`:``;return t(`/admin/api/logs/snapshot${n}`)},openBackendLogStream(e){let t=t=>{try{return JSON.parse(t.data)}catch{e.onError();return}},n=r(`/admin/api/logs/stream`);return n.addEventListener(`snapshot`,n=>{let r=t(n);r&&e.onSnapshot(r)}),n.addEventListener(`gap`,n=>{let r=t(n);r&&e.onGap(r)}),n.addEventListener(`entry`,n=>{let r=t(n);r&&e.onEntry(r)}),n.addEventListener(`sources`,n=>{let r=t(n);r&&e.onSources(r)}),n.addEventListener(`source`,n=>{let r=t(n);r&&e.onSourceUpdate(r)}),n.onopen=()=>e.onOpen(),n.onerror=()=>e.onError(),()=>n.close()},async authorizeOAuthService(e){return(await t(`/admin/api/oauth/${encodeURIComponent(e.serviceId)}/authorize`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":n({action:`oauth-authorize`,targetName:e.serviceId})},body:`{}`})).result},async restartOAuthService(e){return(await t(`/admin/api/oauth/${encodeURIComponent(e.serviceId)}/restart`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":n({action:`oauth-restart`,targetName:e.serviceId})},body:`{}`})).result},async listPresets(){return(await t(`/admin/api/presets`)).result},async getPreset(e){return(await t(`/admin/api/presets/${encodeURIComponent(e)}`)).result},async previewPreset(e){return(await t(`/admin/api/presets/preview`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:JSON.stringify({draft:e.draft,sourceName:e.sourceName})})).result},mutatePreset(e){let n=e.action===`create`?`/admin/api/presets`:`/admin/api/presets/${encodeURIComponent(e.sourceName??``)}/${e.action===`duplicate`?`duplicate`:`update`}`;return t(n,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":Je(e.action,e.draft.name)},body:JSON.stringify({draft:e.draft,revision:e.revision,previewFingerprint:e.previewFingerprint,confirmationFacts:e.confirmations})})},async previewPresetDelete(e){return(await t(`/admin/api/presets/${encodeURIComponent(e.name)}/delete-preview`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:JSON.stringify({revision:e.revision})})).result},deletePreset(e){return t(`/admin/api/presets/${encodeURIComponent(e.name)}`,{method:`DELETE`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":Je(`delete`,e.name)},body:JSON.stringify({revision:e.revision,previewFingerprint:e.previewFingerprint,confirmationFacts:{previewConfirmed:e.previewFingerprint,presetNameConfirmed:e.name}})})},async getConfiguredServerCatalog(){let e=await t(`/admin/api/configured-servers`);return{servers:e.servers??[],configFingerprint:e.configFingerprint??``}},async listConfiguredServers(){return(await t(`/admin/api/configured-servers`)).servers??[]},getConfiguredServerCreateContract(){return t(`/admin/api/configured-servers/create-contract`)},previewConfiguredServerCreate(e){return t(`/admin/api/configured-servers/create-preview`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:JSON.stringify({draft:e.draft,...e.connectivityCheck?{connectivityCheck:e.connectivityCheck}:{}})})},createConfiguredServer(e){return t(`/admin/api/configured-servers`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":e.idempotencyKey},body:JSON.stringify({draft:e.draft,previewFingerprint:e.previewFingerprint,confirmationFacts:e.confirmationFacts})})},getConfiguredServerDetail(e,n){let r=n?`?model=${encodeURIComponent(n)}`:``;return t(`${He(e)}${r}`)},refreshConfiguredToolInventory(e){return t(`${He(e.target)}/tool-inventory/refresh`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:JSON.stringify(e.model?{model:e.model}:{})})},async listInstructionTemplates(){return(await t(`/admin/api/instruction-templates`)).result},async getInstructionTemplate(e){return(await t(J(e))).result},saveInstructionTemplate(e){let n=e.action===`create`?`/admin/api/instruction-templates`:`${J(e.draft.identity)}/update`;return t(n,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":e.idempotencyKey},body:JSON.stringify({...e.action===`create`?{identity:e.draft.identity}:{},variants:e.draft.variants,...e.expectedConfigFingerprint?{expectedConfigFingerprint:e.expectedConfigFingerprint}:{}})})},cloneInstructionTemplate(e){return t(`${J(e.sourceIdentity)}/clone`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":e.idempotencyKey},body:JSON.stringify({identity:e.identity,expectedConfigFingerprint:e.expectedConfigFingerprint})})},async validateInstructionTemplate(e){return(await t(`${J(e.identity)}/validate`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:JSON.stringify({expectedConfigFingerprint:e.expectedConfigFingerprint})})).result},async previewInstructionTemplate(e){return(await t(`${J(e.identity)}/preview`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:JSON.stringify({surface:e.surface,selection:e.selection,...e.requestContext?{requestContext:e.requestContext}:{}})})).result},activateInstructionTemplate(e){return t(`${J(e.identity)}/activate`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":e.idempotencyKey},body:JSON.stringify({expectedConfigFingerprint:e.expectedConfigFingerprint,previewFingerprint:e.previewFingerprint})})},importLegacyInstructionTemplate(e){return t(`/admin/api/instruction-templates/import-legacy`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":e.idempotencyKey},body:JSON.stringify({identity:e.identity,expectedConfigFingerprint:e.expectedConfigFingerprint})})},async previewInstructionTemplateDelete(e){return(await t(`${J(e.identity)}/delete-preview`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:JSON.stringify({expectedConfigFingerprint:e.expectedConfigFingerprint})})).result},deleteInstructionTemplate(e){return t(J(e.identity),{method:`DELETE`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":e.idempotencyKey},body:JSON.stringify({expectedConfigFingerprint:e.expectedConfigFingerprint,previewFingerprint:e.previewFingerprint})})},previewConfiguredServerEdit(e){return t(`${He(e.target)}/preview`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:JSON.stringify({edit:e.edit,...e.connectivityCheck?{connectivityCheck:e.connectivityCheck}:{},...e.model?{model:e.model}:{}})})},applyConfiguredServerEdit(e){return t(`${He(e.target)}/apply`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":e.idempotencyKey},body:JSON.stringify({edit:e.edit,previewFingerprint:e.previewFingerprint,confirmationFacts:e.confirmationFacts,...e.model?{model:e.model}:{}})})},previewConfiguredServerDelete(e){return t(`${He(e.target)}/delete-preview`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:`{}`})},deleteConfiguredServer(e){return t(He(e.target),{method:`DELETE`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":e.idempotencyKey},body:JSON.stringify({previewFingerprint:e.previewFingerprint,confirmationFacts:{previewConfirmed:e.previewFingerprint,targetIdentityConfirmed:e.confirmedIdentity}})})},previewConfiguredServerLifecycle(e){return t(`${He(e.target)}/lifecycle-preview`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken},body:JSON.stringify({enabled:e.enabled})}).then(e=>ze(Le,e))},applyConfiguredServerLifecycle(e){return t(`${He(e.target)}/lifecycle`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":e.idempotencyKey},body:JSON.stringify({enabled:e.enabled,previewFingerprint:e.previewFingerprint,confirmationFacts:{previewConfirmed:e.previewFingerprint,targetIdentityConfirmed:`${e.target.source}/${e.target.id}`}})}).then(e=>ze(Re,e))},setConfiguredServerEnabled(e){let r=e.enabled?`enable`:`disable`;return t(`/admin/api/configured-servers/${encodeURIComponent(e.name)}/${r}`,{method:`POST`,headers:{"X-CSRF-Token":e.csrfToken,"Idempotency-Key":n({action:r,targetName:e.name})},body:`{}`})}}}function J(e){return`/admin/api/instruction-templates/${encodeURIComponent(e)}`}function He(e){return typeof e==`string`?`/admin/api/configured-servers/${encodeURIComponent(e)}`:`/admin/api/configured-servers/${e.source}/${encodeURIComponent(e.id)}`}function Ue(e){return`admin-console-server-apply-${it(e)}-${Date.now()}-${crypto.getRandomValues(new Uint32Array(2)).join(`-`)}`}function We(e){return`admin-console-server-create-${it(e)}-${Date.now()}-${crypto.getRandomValues(new Uint32Array(2)).join(`-`)}`}function Ge(e){return`admin-console-server-delete-${it(e)}-${Date.now()}-${crypto.getRandomValues(new Uint32Array(2)).join(`-`)}`}function Ke(e,t){return`admin-console-server-${t?`enable`:`disable`}-${it(e)}-${Date.now()}-${crypto.getRandomValues(new Uint32Array(2)).join(`-`)}`}function qe(e,t){return`admin-console-instruction-template-${it(e)}-${it(t)}-${Date.now()}-${crypto.getRandomValues(new Uint32Array(2)).join(`-`)}`}function Je(e,t){return`admin-console-preset-${e}-${it(t)}-${Date.now()}-${crypto.getRandomValues(new Uint32Array(2)).join(`-`)}`}function Ye(e){return async function(t,n={}){let r={"Content-Type":`application/json`,"X-Admin-UI-Build-Version":`0.40.0-beta.1`,"X-Admin-UI-Protocol-Version":`1`,...n.headers??{}},i;try{i=await e(t,{...n,headers:r})}catch{let e=`The Admin Console could not reach the runtime. Check that the runtime is still available, then refresh.`;throw new q(0,{},e,{kind:`unavailable`,message:e})}let a=await Xe(i);if(!i.ok)throw new q(i.status,a,Ze(a,i.statusText));return a}}async function Xe(e){try{return await e.json()}catch{return{}}}function Ze(e,t){if(e&&typeof e==`object`){let t=e;if(typeof t.error==`string`)return t.error;if(typeof t.code==`string`)return t.code;let n=t.error;if(n&&typeof n.code==`string`)return n.code}return t||`Admin API request failed`}function Qe(e){return e&&typeof e==`object`&&e.adminStatus===`setupRequired`?`setupRequired`:`loginRequired`}function $e(e){if(e.body&&typeof e.body==`object`){let t=e.body;if(typeof t.error==`string`)return t.error;if(typeof t.code==`string`)return t.code;if(t.error&&typeof t.error==`object`){let e=t.error;if(typeof e.code==`string`)return e.code}}return e.message}function et(e){if(!e||typeof e!=`object`)return null;let t=e;if(typeof t.requestId==`string`)return t.requestId;if(t.error&&typeof t.error==`object`){let e=t.error;if(typeof e.requestId==`string`)return e.requestId}return null}function tt(e,t){switch(t){case`invalid_credentials`:return`Check the admin username and password, then try again.`;case`csrf_required`:return`Refresh the page to renew the admin session, then retry the action.`;case`admin_login_rate_limited`:return`Too many failed login attempts. Wait before trying again.`;case`idempotency_conflict`:return`This action was already retried with different inputs. Refresh the console and try again.`;case`idempotency_key_required`:return`Refresh the console and retry the action with a new request.`;case`admin_configured_servers_unavailable`:return`Configured-server operations are not available on this runtime.`;case`backend_oauth_service_not_found`:return`The OAuth service is no longer available. Refresh the OAuth status and try again.`;case`backend_oauth_runtime_unavailable`:return`Backend OAuth operations are not available on this runtime.`;case`backend_oauth_authorization_start_failed`:return Ne(e.body?.diagnostic)??`The runtime could not start backend OAuth authorization. Refresh the OAuth status and try again.`;case`mutation_failed`:return`The runtime could not apply the server change. Refresh the console and inspect the current state.`;case`configured_server_stale_preview`:return`The server changed after this preview. Preview the edit again before applying.`;case`configured_server_destination_conflict`:return`The requested server name is already in use. Choose another target name and preview again.`;case`configured_server_connectivity_blocked`:return`Connectivity validation did not pass. Fix the connection settings and rerun connectivity before applying.`;case`configured_server_edit_invalid`:return`The server edit is invalid. Review the field errors and preview again.`;case`configured_server_edit_unchanged`:return`The preview no longer contains a change. Refresh the server detail before editing again.`;case`configured_server_not_found`:return`The configured server no longer exists. Return to the inventory and refresh it.`;case`configured_server_reload_failed`:return`The configuration was written, but the runtime reload failed. Inspect runtime health before continuing.`;case`configured_server_apply_failed`:return`The server edit could not be written. Refresh the detail and inspect runtime health before retrying.`;case`operation_in_progress`:return`Another admin operation is still running. Wait for it to finish, then refresh the console.`;case`operation_state_unknown`:return`The runtime could not confirm the operation result. Refresh the console and inspect the current state before retrying.`;case`admin_operation_journal_unavailable`:return`The runtime cannot record admin operations right now. Check runtime health before retrying.`;case`runtime_scope_mismatch`:return`The runtime identity changed. Stop using this session and verify the selected runtime before retrying.`;case`mutation_confirmation_required`:return`This operation needs an explicit confirmation flow that is not available in the console yet.`;default:if(e.status===401)return`The admin session is no longer valid. Log in again.`;if(e.status===403)return`The admin session cannot perform this action. Refresh the page and try again.`;if(e.status===429)return`The runtime is rate limiting this request. Wait before trying again.`;if(t.startsWith(`configured_server_`)){let t=nt(e.body);if(t)return t}return`The Admin Console request failed. Refresh the console and try again.`}}function nt(e){if(!e||typeof e!=`object`)return null;let t=e.message;return typeof t==`string`&&t.trim().length>0?t.trim():null}function rt(e){let t=crypto.getRandomValues(new Uint32Array(2)).join(`-`);return`admin-console-${e.action}-${it(e.targetName)}-${Date.now()}-${t}`}function it(e){return encodeURIComponent(e).replace(/[!'()*]/g,e=>`%${e.charCodeAt(0).toString(16).toUpperCase()}`)}var Y=e(ne(),1);function at(e,t,n){let r=t.trim().toLowerCase();return e.filter(e=>{let t=!r||e.id.toLowerCase().includes(r)||dt(e).some(e=>e.toLowerCase().includes(r))||ut(e).toLowerCase().includes(r)||lt(e.transport).toLowerCase().includes(r),i=n===`all`||n===`enabled`&&e.enabled||n===`disabled`&&!e.enabled;return t&&i})}function ot(e){return e.filter(e=>e.enabled).length}function st(e){return e.filter(e=>!e.enabled).length}function ct(e){return!!e.requiresOAuth&&(e.status!==`connected`||!!e.lastError)}function lt(e){return typeof e.command==`string`?e.command:typeof e.url==`string`?e.url:typeof e.type==`string`?e.type:`configured`}function ut(e){return e.transportSummary?.label??lt(e.transport)}function dt(e){return Array.isArray(e.tags)?e.tags:[]}function ft(e){return e.mutationAvailability?.available??!0}function pt(e,t){return e.actionState?.[t]??{available:!0,label:t===`enable`?`Enable ${e.id}`:`Disable ${e.id}`}}function mt(e){let t=e.connectivityCheck;return t.status===`skipped`?gt(t.reason):t.status===`failed`?t.message:t.checkedAt?`Checked at ${t.checkedAt}`:void 0}function ht(e){return e.status===`passed`?`Bounded dry-run connectivity check passed.`:e.status===`failed`?`Connectivity check failed. Apply remains blocked until the check passes or a later override path is available.`:`Connectivity check was skipped for this preview.`}function gt(e){switch(e){case`connection_critical_fields_unchanged`:return`Connection-critical fields are unchanged. Rerun connectivity if you want an explicit check.`;case`target_disabled`:return`Target is disabled, so automatic connectivity was skipped.`;case`validation_failed`:return`Validation failed before a connectivity check could run.`;case`local_stdio_transport`:return`Local stdio transport does not use remote connectivity checks.`;case`checker_unavailable`:return`Connectivity checker is unavailable on this runtime.`;case`endpoint_changed_with_preserved_secrets`:return`Endpoint changed while secrets stayed preserved. Supply replacements or rerun after updating secrets.`;default:return e}}function _t(e){switch(e){case`rename`:return`violet`;case`connection_critical`:return`red`;case`secret`:return`grape`;case`template_risk`:return`orange`;case`tool_visibility`:return`yellow`;case`tool_metadata`:return`blue`;default:return`gray`}}function vt(e){switch(e){case`rename`:return`rename`;case`connection_critical`:return`connection critical`;case`secret`:return`secret`;case`template_risk`:return`template risk`;case`tool_visibility`:return`tool visibility`;case`tool_metadata`:return`tool metadata`;default:return e}}function yt(e){return e.secretInputs.length===0?`No secret inputs`:`${e.secretInputs.length} redacted`}function bt(e){return e?.runtimeVersion??`unknown`}function xt(e){return e?.externalUrl??`not reported`}function St(e){return e.view===`setupRequired`?`Setup required`:e.view}function Ct(e){return e.view===`setupRequired`?`yellow`:e.view===`console`?`teal`:`gray`}function wt(e){return e.replace(/([A-Z])/g,` $1`).toLowerCase()}function Tt(){return{preview:null,confirmation:``,previewBusy:!1,applyBusy:!1,error:null,result:null}}function Et(e,t){switch(t.type){case`reset`:return Tt();case`previewStarted`:return{...e,previewBusy:!0,error:null,result:null};case`previewSucceeded`:return{...e,preview:t.preview,confirmation:``,previewBusy:!1,error:null};case`previewFailed`:return{...e,previewBusy:!1,error:t.message};case`confirmationChanged`:return{...e,confirmation:t.value,error:null};case`applyStarted`:return{...e,applyBusy:!0,error:null};case`applySucceeded`:return{...e,preview:null,confirmation:``,applyBusy:!1,error:null,result:t.result};case`applyFailed`:return{...e,preview:t.clearPreview?null:e.preview,confirmation:t.clearPreview?``:e.confirmation,applyBusy:!1,error:t.message}}}function Dt(e){return e.configChange.reload.status!==`observed`||e.runtimeImpact?.retirementObserved===!1}function Ot(e){return!!(e.preview&&!e.previewBusy&&!e.applyBusy&&e.confirmation===e.preview.qualifiedId)}var X=P();function kt({result:e,dismiss:t}){let n=e.target.source===`mcpTemplates`?e.runtimeImpact:void 0,i=Dt(e);return(0,X.jsxs)(r,{color:i?`yellow`:`teal`,icon:i?(0,X.jsx)(ve,{size:16}):(0,X.jsx)(he,{size:16}),title:`${e.qualifiedId} deleted${i?`; recovery required`:``}`,withCloseButton:!0,closeButtonLabel:`Dismiss deletion notice`,onClose:t,role:`status`,children:[(0,X.jsx)(d,{size:`sm`,children:i?`Configuration write completed. Runtime reload status: ${e.configChange.reload.status}. Runtime reconciliation is incomplete and the runtime may still serve this target.`:`Runtime reload observed.`}),i?(0,X.jsx)(d,{size:`sm`,children:e.configChange.backup.created?`A recovery backup exists. Restore it if the deletion must be reversed.`:`No recovery backup was reported; inspect runtime and configuration state before continuing.`}):null,n?(0,X.jsxs)(d,{size:`sm`,children:[`Instances: `,n.activeInstancesBefore,` before, `,n.retiredInstances,` retired,`,` `,n.activeInstancesAfter,` active after. Retirement observed:`,` `,n.retirementObserved?`yes`:`no`,`.`]}):i?null:(0,X.jsx)(d,{size:`sm`,children:`Configured backend removal observed after reload.`})]})}function Z({label:e,value:t,meta:r,description:i,copyLabel:a,copyValue:o,onCopyText:s,wrapValue:c=!1}){let l=o??t;return(0,X.jsxs)(n,{className:`detail-row`,justify:`space-between`,wrap:`nowrap`,children:[(0,X.jsxs)(`div`,{className:`detail-row-main`,children:[(0,X.jsx)(d,{fw:700,children:e}),(0,X.jsx)(d,{className:c?`detail-row-value-wrap`:`truncate`,size:`sm`,children:t}),r?(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:r}):null,i?(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:i}):null]}),a&&l!==`-`?(0,X.jsx)(m,{"aria-label":`Copy ${wt(a)}`,size:`compact-xs`,variant:`subtle`,leftSection:(0,X.jsx)(oe,{size:14}),onClick:()=>void s?.(a,l),children:`Copy`}):null]})}function Q({title:e,utility:t,icon:r,children:i}){return(0,X.jsx)(b,{component:`section`,className:`operations-panel`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`center`,children:[(0,X.jsxs)(n,{gap:`xs`,children:[r,(0,X.jsx)(k,{order:3,children:e})]}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:t})]}),i]})})}function At({message:e}){return(0,X.jsx)(d,{c:`dimmed`,children:e})}function jt(e){let t=(0,Y.useRef)(e),n=(0,Y.useRef)(0),r=(0,Y.useRef)(0),i=(0,Y.useRef)(0),a=(0,Y.useRef)(!1),o=(0,Y.useRef)();return t.current=e,{loadRequestRef:n,previewRequestRef:r,applyRequestRef:i,applyInteractionRef:a,applyAttemptRef:o,invalidatePreview:(0,Y.useCallback)(()=>{r.current+=1,o.current=void 0},[]),invalidateApply:(0,Y.useCallback)(()=>{i.current+=1,o.current=void 0},[]),reset:(0,Y.useCallback)(()=>{n.current+=1,r.current+=1,i.current+=1,a.current=!1,o.current=void 0,t.current()},[])}}function Mt(e,t,n,r,i,a=[]){let o={},s={};for(let r of e)for(let e of r.fields){if(e.control===`secret`||!e.editable||e.control===`readonly`||!Ft(e,i))continue;let r=$(e.fieldPath),a=Vt(e,t[r]);if(Ut(a)===Ut(Vt(e,n[r])))continue;let c=e.fieldPath[0];if(c===`id`)o.id=String(a??``);else if(c===`enabled`)o.enabled=!!a;else if(c===`tags`)o.tags=It(a);else if(c===`transport`&&e.fieldPath.length>1){if(e.fieldPath.length===2&&e.fieldPath[1]===`oauth`){let e=Rt(n[r]),t=Rt(a),i=Object.fromEntries(Object.entries(t).filter(([t,n])=>Ut(n)!==Ut(e[t])));for(let n of[`autoRegister`,`scopes`,`insecureAllowIncompleteMetadata`,`privateNetworkOrigins`])Object.hasOwn(e,n)&&!Object.hasOwn(t,n)&&(i[n]=null);s.oauth=i;continue}Ht(s,e.fieldPath.slice(1),a)}else c&&Ht(o,e.fieldPath,a)}let c=Object.values(r).filter(t=>{let n=e.flatMap(e=>e.fields).find(e=>$(e.fieldPath)===$(t.fieldPath));return!n||Ft(n,i)}).filter(e=>e.action!==`preserve`).map(e=>({fieldPath:e.fieldPath,action:e.action,...e.action===`replace`?{replacement:{kind:e.replacementKind,value:e.replacementValue}}:{}}));return{...o,...Object.keys(s).length>0?{transport:s}:{},...c.length>0?{secrets:c}:{},...a.length>0?{clearTransportOverrides:a}:{}}}function $(e){return e.join(`\0`)}function Nt(e){return Vt(e,e.value)}function Pt(e,t){let n=e[$([`transport`,`type`])]??t;return n===`stdio`||n===`http`||n===`sse`||n===`streamableHttp`?n:void 0}function Ft(e,t){return!t||!e.applicableTransportTypes||e.applicableTransportTypes.includes(t)}function It(e){return Array.isArray(e)?e.filter(e=>typeof e==`string`):[]}function Lt(e){return e.split(/\r?\n/u).map(e=>e.trim()).filter(Boolean)}function Rt(e){return!e||typeof e!=`object`||Array.isArray(e)?{}:{...e}}function zt(e){return Array.isArray(e)?e.join(`, `):e&&typeof e==`object`?Object.keys(e).length>0?Object.keys(e).join(`, `):`-`:String(e??`-`)}function Bt(e){if(e==null)return`-`;if(typeof e==`string`||typeof e==`number`||typeof e==`boolean`)return String(e);if(Array.isArray(e))return e.map(Bt).join(`, `);if(typeof e!=`object`)return`-`;let t=e;return t.secret===!0||t.value===`[REDACTED]`?`[REDACTED]`:t.kind===`inlineSecret`?`inline secret: [REDACTED]`:typeof t.kind==`string`&&typeof t.value==`string`?`${Gt(t.kind)}: ${t.value}`:Object.entries(t).map(([e,t])=>`${e}: ${Wt(e)?`[REDACTED]`:Bt(t)}`).join(`; `)}function Vt(e,t){return e.control===`switch`?!!t:e.control===`tag-list`||e.control===`string-list`?It(t):e.control===`record`?Rt(t):e.control===`number`?typeof t==`number`?t:void 0:e.control===`text`||e.control===`select`?String(t??``):t}function Ht(e,t,n){let r=e;for(let e of t.slice(0,-1)){let t=r[e];(!t||typeof t!=`object`||Array.isArray(t))&&(r[e]={}),r=r[e]}let i=t.at(-1);i&&(r[i]=n)}function Ut(e){return JSON.stringify(e)}function Wt(e){return/authorization|password|secret|token/iu.test(e)}function Gt(e){return e.replace(/([A-Z])/g,` $1`).toLowerCase()}function Kt(){return{status:`idle`}}function qt(e,t){switch(t.type){case`closed`:return{status:`idle`};case`contractLoadStarted`:return{status:`loading`};case`contractLoaded`:{let e={};for(let n of t.contract.createContract.fieldGroups.flatMap(e=>e.fields))e[$(n.fieldPath)]=Nt(n);let n=$([`transport`,`type`]);return[`stdio`,`http`,`sse`].includes(String(e[n]??``))||(e[n]=`stdio`),{status:`editing`,contract:t.contract,fieldDraft:e,secrets:[],dirty:!1,previewBusy:!1,applyBusy:!1}}case`contractFailed`:return{status:`failed`,message:t.message};case`fieldChanged`:return e.status!==`editing`||e.applyBusy?e:Xt(e,{fieldDraft:{...e.fieldDraft,[$(t.fieldPath)]:t.value}});case`secretAdded`:return e.status!==`editing`||e.applyBusy?e:Xt(e,{secrets:[...e.secrets,t.secret]});case`secretChanged`:return e.status!==`editing`||e.applyBusy?e:Xt(e,{secrets:e.secrets.map(e=>e.id===t.secret.id?t.secret:e)});case`secretRemoved`:return e.status!==`editing`||e.applyBusy?e:Xt(e,{secrets:e.secrets.filter(e=>e.id!==t.id)});case`previewStarted`:return e.status===`editing`?{...e,previewBusy:!0,previewError:void 0}:e;case`previewSucceeded`:return e.status===`editing`?{...e,preview:t.preview,previewBusy:!1,previewError:void 0}:e;case`previewFailed`:return e.status===`editing`?{...e,previewBusy:!1,previewError:t.message}:e;case`applyStarted`:return e.status===`editing`?{...e,applyBusy:!0,applyError:void 0}:e;case`applyFailed`:return e.status===`editing`?{...e,applyBusy:!1,applyError:t.message,preview:t.clearPreview?void 0:e.preview}:e;case`applySucceeded`:return{status:`committed`,serverId:t.response.result.targetName,result:t.response.result,warning:t.response.result.configChange.reload.status===`failed`?t.response.result.configChange.reload.error??`Runtime reload failed after configuration was written.`:void 0}}}function Jt(e){if(e.status!==`editing`)return null;let t=e.fieldDraft[$([`transport`,`type`])];if(t!==`stdio`&&t!==`http`&&t!==`sse`)return null;let n={type:t},r=e.fieldDraft[$([`source`])]===`mcpTemplates`?`mcpTemplates`:`mcpServers`;for(let i of e.contract.createContract.fieldGroups.flatMap(e=>e.fields)){if(i.fieldPath[0]!==`transport`||i.fieldPath.length<2||i.applicableSources&&!i.applicableSources.includes(r)||!Ft(i,t)||i.fieldPath[1]===`type`)continue;let a=e.fieldDraft[$(i.fieldPath)],o=i.control===`string-list`?It(a):i.control===`record`?Rt(a):a;o!==``&&o!==void 0&&Yt(n,i.fieldPath.slice(1),o)}let i=t===`stdio`?`env`:`headers`,a=e.secrets.filter(e=>e.container===i&&e.key.trim()&&e.replacementValue.trim()).map(e=>({fieldPath:[e.container,e.key.trim()],action:`replace`,replacement:{kind:e.replacementKind,value:e.replacementValue}}));return{source:r,name:String(e.fieldDraft[$([`name`])]??``),enabled:r!==`mcpServers`||!!e.fieldDraft[$([`enabled`])],tags:It(e.fieldDraft[$([`tags`])]),transport:n,...a.length>0?{secrets:a}:{}}}function Yt(e,t,n){let r=e;for(let e of t.slice(0,-1)){let t=r[e];(!t||typeof t!=`object`||Array.isArray(t))&&(r[e]={}),r=r[e]}let i=t.at(-1);i&&(r[i]=n)}function Xt(e,t){return{...e,...t,dirty:!0,preview:void 0,previewBusy:!1,previewError:void 0,applyError:void 0}}function Zt({api:e,session:t,browser:n,onUnauthenticated:r,onCreated:i,onOpenCreated:a,onPathCommitted:o}){let[s,c]=(0,Y.useReducer)(qt,void 0,Kt),l=(0,Y.useRef)(s),u=(0,Y.useRef)(e),d=(0,Y.useRef)(t),f=(0,Y.useRef)(r);u.current=e,d.current=t,f.current=r;let p=(0,Y.useCallback)(e=>{let t=qt(l.current,e);l.current=t,c(e)},[]),{loadRequestRef:m,previewRequestRef:h,applyRequestRef:g,applyInteractionRef:_,applyAttemptRef:v,invalidatePreview:y,reset:b}=jt(()=>p({type:`closed`})),x=(0,Y.useCallback)(e=>!(e instanceof q)||e.failure.kind!==`unauthenticated`?!1:(b(),f.current(e.failure.adminStatus),!0),[b]),S=(0,Y.useCallback)(async()=>{let e=d.current;if(!e)return;let t=m.current+1;m.current=t;let n=e.csrfToken;p({type:`contractLoadStarted`});try{let e=await u.current.getConfiguredServerCreateContract();if(t!==m.current||d.current?.csrfToken!==n)return;p({type:`contractLoaded`,contract:e})}catch(e){if(t!==m.current||d.current?.csrfToken!==n)return;x(e)||p({type:`contractFailed`,message:tn(e)})}},[p,x]),C=(0,Y.useCallback)(async()=>{let e=l.current;e.status===`editing`&&e.dirty&&!await $t(n)||(b(),n.push(`/admin/servers/new`),o?.(`/admin/servers/new`),await S())},[n,S,o,b]),w=(0,Y.useCallback)(async(e=`/admin/servers`)=>{let t=l.current;return t.status===`editing`&&t.dirty&&!await $t(n)?!1:(b(),n.push(e),o?.(e),!0)},[n,o,b]),T=(0,Y.useCallback)(async e=>{await w(`/admin/servers`)&&await a?.({source:`mcpServers`,id:e})},[w,a]),E=(0,Y.useCallback)((e,t)=>{y(),p({type:`fieldChanged`,fieldPath:e,value:t})},[p,y]),D=(0,Y.useCallback)(e=>{y(),p({type:`secretAdded`,secret:e})},[p,y]),O=(0,Y.useCallback)(e=>{y(),p({type:`secretChanged`,secret:e})},[p,y]),k=(0,Y.useCallback)(e=>{y(),p({type:`secretRemoved`,id:e})},[p,y]),A=(0,Y.useCallback)(async(e=`auto`)=>{let t=d.current,n=l.current,r=Jt(n);if(!t||n.status!==`editing`||!r)return;let i=h.current+1;h.current=i;let a=t.csrfToken;p({type:`previewStarted`});try{let t=await u.current.previewConfiguredServerCreate({draft:r,csrfToken:a,connectivityCheck:e});if(i!==h.current||d.current?.csrfToken!==a)return;v.current?.previewFingerprint!==t.preview.previewFingerprint&&(v.current=void 0),p({type:`previewSucceeded`,preview:t.preview})}catch(e){if(i!==h.current||d.current?.csrfToken!==a)return;x(e)||p({type:`previewFailed`,message:`Preview failed: ${tn(e)}`})}},[p,x]),ee=(0,Y.useCallback)(async()=>{if(_.current)return;let e=d.current,t=l.current,r=Jt(t);if(!(!e||t.status!==`editing`||!t.preview||!r)&&Qt(t).eligible){_.current=!0;try{let o=t.preview,s=o.connectivityCheck.status===`failed`,c=r.source===`mcpTemplates`;if(!await n.confirm({title:s?`Create ${r.name} despite failed connectivity?`:c?`Create Template definition ${r.name}?`:`Create configured server ${r.name}?`,message:s?`The bounded connectivity check failed. Creating this target may leave it unavailable.`:c?`This writes a Template Server definition and reloads the Runtime Scope. No runtime instance is created.`:`This writes a new static target and reloads the Runtime Scope.`,confirmLabel:s?`Create despite failure`:c?`Create template`:`Create server`,tone:s?`danger`:void 0,details:[{label:`Target`,value:r.name},{label:`Transport`,value:r.transport.type},{label:`Connectivity`,value:o.connectivityCheck.status},{label:`Existing target`,value:`Must remain absent`}]}))return;let l=v.current?.previewFingerprint===o.previewFingerprint?v.current:{previewFingerprint:o.previewFingerprint,idempotencyKey:We(r.name)};v.current=l;let f=g.current+1;g.current=f;let m=e.csrfToken;p({type:`applyStarted`});try{let e=await u.current.createConfiguredServer({draft:r,csrfToken:m,idempotencyKey:l.idempotencyKey,previewFingerprint:o.previewFingerprint,confirmationFacts:{previewConfirmed:o.previewFingerprint,targetNameConfirmed:r.name,connectionCriticalConfirmed:!0,...o.diff.some(e=>e.riskFlags.includes(`secret`))?{secretChangeConfirmed:!0}:{},...s?{connectivityFailureOverrideConfirmed:!0}:{}}});if(f!==g.current||d.current?.csrfToken!==m)return;v.current=void 0,p({type:`applySucceeded`,response:e}),await i?.(),await a?.({source:e.result.targetSource===`mcpTemplates`||e.result.configChange.target.source===`mcpTemplates`?`mcpTemplates`:`mcpServers`,id:e.result.targetName}),e.result.configChange.reload.status!==`failed`&&p({type:`closed`})}catch(e){if(f!==g.current||d.current?.csrfToken!==m)return;if(!x(e)){let t=en(e);t&&(v.current=void 0),p({type:`applyFailed`,message:`Create failed: ${tn(e)}`,clearPreview:t})}}}finally{_.current=!1}}},[n,p,x,i,a]);return(0,Y.useEffect)(()=>{if(!t){b();return}n.pathname()===`/admin/servers/new`&&S()},[n,S,b,t?.csrfToken]),(0,Y.useEffect)(()=>n.subscribePopState(()=>{(async()=>{let e=n.pathname(),t=l.current;if(t.status===`editing`&&t.dirty){if(n.replace(`/admin/servers/new`),!await $t(n)){o?.(`/admin/servers/new`);return}n.replace(e)}b(),o?.(e)})()}),[n,o,b]),{state:s,open:C,close:w,editExisting:T,changeField:E,addSecret:D,changeSecret:O,removeSecret:k,preview:A,apply:ee}}function Qt(e){if(e.status!==`editing`||!e.preview)return{eligible:!1,reason:`Preview this server first.`};if(!e.contract.createContract.capabilities.apply.supported)return{eligible:!1,reason:`Creation is unavailable.`};if(e.preview.validation.status!==`valid`)return{eligible:!1,reason:`Resolve validation issues.`};if(!e.preview.configChange.changed||e.preview.diff.length===0)return{eligible:!1,reason:`The preview contains no changes.`};let t=Jt(e);if(!t)return{eligible:!1,reason:`Complete the server configuration.`};let n=e.preview.diff.some(e=>e.riskFlags.includes(`connection_critical`));return t.enabled&&t.transport.type!==`stdio`&&n&&e.preview.connectivityCheck.status!==`passed`&&e.preview.connectivityCheck.status!==`failed`&&!(e.preview.connectivityCheck.status===`skipped`&&e.preview.connectivityCheck.reason===`checker_unavailable`)?{eligible:!1,reason:`A connectivity check must run before creation.`}:{eligible:!0}}function $t(e){return e.confirm({title:`Discard custom server?`,message:`The configured-server draft, preview, and secret replacements will be lost.`,confirmLabel:`Discard draft`,tone:`danger`})}function en(e){return e instanceof q&&e.failure.kind===`rejected`&&e.failure.code===`configured_server_stale_preview`}function tn(e){if(e instanceof q)return e.failure.message;throw e}function nn(e){return e===`identity`?`Rename or enable this target before previewing.`:e===`secrets`?`Choose preserve, replace, or clear without revealing current values.`:e===`transport`?`Change how the runtime connects to this server.`:`Edit normalized fields owned by the Admin Domain.`}function rn({field:e,value:t,onChange:n}){return!e.editable||e.control===`readonly`?(0,X.jsx)(Z,{label:e.label,value:zt(t)}):e.control===`switch`?(0,X.jsx)(T,{label:e.label,checked:!!t,onChange:e=>n(e.currentTarget.checked)}):e.control===`tag-list`?(0,X.jsx)(D,{label:e.label,value:It(t),onChange:n}):e.control===`select`?(0,X.jsx)(y,{label:e.label,value:String(t??``),data:e.options??[],onChange:e=>n(e.currentTarget.value)}):e.control===`number`?(0,X.jsx)(C,{label:e.label,value:typeof t==`number`?t:``,onChange:e=>n(e===``?void 0:e)}):e.control===`string-list`?(0,X.jsx)(ee,{label:e.label,value:It(t).join(`
+`),autosize:!0,minRows:2,onChange:e=>n(Lt(e.currentTarget.value))}):e.control===`record`?e.fieldPath.join(`.`)===`transport.oauth`?(0,X.jsx)(an,{label:e.label,value:Rt(t),onChange:n}):(0,X.jsx)(on,{label:e.label,value:Rt(t),onChange:n}):(0,X.jsx)(w,{label:e.label,value:String(t??``),onChange:e=>n(e.currentTarget.value)})}function an({label:e,value:t,onChange:n}){let{insecureAllowIncompleteMetadata:r,privateNetworkOrigins:i,...a}=t;return(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsx)(T,{label:`Allow incomplete OAuth metadata (insecure)`,description:`Infer a missing issuer and resolve relative endpoints. Keep off for providers with complete metadata.`,checked:r===!0,onChange:e=>n({...t,insecureAllowIncompleteMetadata:e.currentTarget.checked})}),(0,X.jsx)(D,{label:`Private-network HTTPS origins`,description:`Press Enter after each trusted HTTPS origin. This approval is separate from incomplete metadata compatibility.`,value:It(i),clearable:!0,clearButtonProps:{"aria-label":`Clear private-network origins`},onChange:e=>n({...t,privateNetworkOrigins:e})}),(0,X.jsx)(on,{label:e,value:a,onChange:e=>n({...e,...r===void 0?{}:{insecureAllowIncompleteMetadata:r},...i===void 0?{}:{privateNetworkOrigins:i}})})]})}function on({label:e,value:t,onChange:r}){let[i,a]=(0,Y.useState)(``),[o,s]=(0,Y.useState)(``);function c(e,n){r({...t,[e]:n})}function l(e){let n={...t};delete n[e],r(n)}function u(){let e=i.trim();e&&(r({...t,[e]:o}),a(``),s(``))}return(0,X.jsxs)(O,{className:`record-editor`,gap:`xs`,children:[(0,X.jsx)(d,{fw:700,children:e}),Object.entries(t).map(([t,r])=>(0,X.jsxs)(n,{gap:`xs`,align:`flex-end`,wrap:`nowrap`,children:[(0,X.jsx)(w,{className:`record-editor-value`,label:`${e} ${t}`,value:String(r??``),onChange:e=>c(t,e.currentTarget.value)}),(0,X.jsx)(m,{"aria-label":`Remove ${e} ${t}`,size:`compact-xs`,variant:`subtle`,color:`red`,onClick:()=>l(t),children:`Remove`})]},t)),(0,X.jsxs)(n,{gap:`xs`,align:`flex-end`,children:[(0,X.jsx)(w,{label:`New ${e} key`,value:i,onChange:e=>a(e.currentTarget.value)}),(0,X.jsx)(w,{label:`New ${e} value`,value:o,onChange:e=>s(e.currentTarget.value)}),(0,X.jsx)(m,{variant:`default`,onClick:u,children:`Add entry`})]})]})}function sn({field:e,draft:t,onChange:i}){let a=t??{fieldPath:e.fieldPath,action:`preserve`,replacementKind:e.secret?.environmentReference.supported===!1?`inlineSecret`:`environmentReference`,replacementValue:``},o=e.secret?.allowedActions??[`preserve`,`replace`,`clear`],s=e.secret?.environmentReference.supported??!0,c=e.secret?.environmentReference.recommended??s,l=e.secret?.inlineReplacement.supported??!1;return(0,X.jsx)(b,{className:`secret-editor`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:700,children:e.label}),(0,X.jsx)(d,{size:`xs`,c:`dimmed`,children:e.secret?.environmentReference.guidance??`Store only an environment variable name or substitution expression when possible.`})]}),(0,X.jsxs)(n,{gap:4,children:[(0,X.jsx)(u,{variant:`light`,children:`redacted`}),c?(0,X.jsx)(u,{color:`teal`,variant:`light`,children:`env reference recommended`}):null]})]}),(0,X.jsx)(_.Group,{value:a.action,onChange:e=>i({...a,action:e}),children:(0,X.jsx)(n,{gap:`sm`,children:o.map(t=>(0,X.jsx)(_,{value:t,label:cn(t,e.label)},t))})}),a.action===`replace`?(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsx)(r,{color:`teal`,variant:`light`,children:`Recommended: keep secret material outside 1MCP config by writing only an environment variable name or substitution expression.`}),(0,X.jsx)(_.Group,{label:`Replacement source`,value:a.replacementKind,onChange:e=>i({...a,replacementKind:e}),children:(0,X.jsx)(n,{gap:`sm`,children:(0,X.jsx)(_,{disabled:!s,value:`environmentReference`,label:`Environment variable (recommended)`})})}),a.replacementKind===`environmentReference`?(0,X.jsxs)(X.Fragment,{children:[(0,X.jsx)(w,{label:`Environment variable for ${e.label}`,description:"Example: GITHUB_TOKEN or ${GITHUB_TOKEN}",value:a.replacementValue,onChange:e=>i({...a,replacementValue:e.currentTarget.value})}),l?(0,X.jsx)(m,{size:`compact-sm`,variant:`subtle`,color:`yellow`,onClick:()=>i({...a,replacementKind:`inlineSecret`,replacementValue:``}),children:`Use advanced inline secret instead`}):null]}):(0,X.jsxs)(X.Fragment,{children:[(0,X.jsx)(r,{color:`yellow`,role:`alert`,children:`Advanced path: inline replacement stores secret material in configuration. Prefer an environment reference unless the deployment cannot provide one.`}),(0,X.jsx)(E,{label:`Inline secret for ${e.label}`,value:a.replacementValue,onChange:e=>i({...a,replacementValue:e.currentTarget.value})}),s?(0,X.jsx)(m,{size:`compact-sm`,variant:`subtle`,onClick:()=>i({...a,replacementKind:`environmentReference`,replacementValue:``}),children:`Use environment variable instead`}):null]}),(0,X.jsx)(d,{size:`xs`,c:`dimmed`,children:a.replacementKind===`environmentReference`?e.secret?.environmentReference.guidance:e.secret?.inlineReplacement.guidance})]}):null]})})}function cn(e,t){return e===`preserve`?`Preserve existing ${t}`:e===`replace`?`Replace ${t}`:`Clear saved ${t}`}function ln({preview:e}){let t=e.connectivityCheck,i=e.validation.status===`valid`?`teal`:`red`,a=t.status===`passed`?`teal`:t.status===`failed`?`red`:`yellow`,o=t.status===`skipped`&&t.reason===`template_structural_preview`;return(0,X.jsx)(b,{className:`preview-result`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:800,children:`Preview result`}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:`Domain facts only. No config has been written.`})]}),(0,X.jsx)(M,{className:`preview-fingerprint`,children:e.previewFingerprint})]}),(0,X.jsx)(r,{color:`blue`,variant:`light`,children:`Preview only - no config has been written.`}),(0,X.jsxs)(h,{cols:{base:1,sm:2},spacing:`xs`,children:[(0,X.jsx)(Z,{label:`Target`,value:e.targetName,meta:`Proposed: ${e.proposedTargetName??e.targetName}`}),(0,X.jsx)(Z,{label:`Validation`,value:e.validation.status,meta:e.validation.errors.length>0?`${e.validation.errors.length} field issue${e.validation.errors.length===1?``:`s`}`:`Ready to apply after confirmation`}),(0,X.jsx)(Z,{label:`Config change`,value:e.configChange.status,meta:`${e.configChange.operation} / ${e.configChange.changed?`changed`:`unchanged`}`}),`expectedReload`in e?(0,X.jsx)(Z,{label:`Expected reload`,value:`Checked after creation`,meta:`The runtime reports the reload outcome after configuration is written.`}):(0,X.jsx)(Z,{label:`Reload`,value:e.configChange.reload.status,meta:e.configChange.reload.error}),(0,X.jsx)(Z,{label:`Backup`,value:e.configChange.backup.created?`created`:`not created`,meta:e.configChange.backup.path}),(0,X.jsx)(b,{className:`connectivity-card connectivity-${t.status}`,withBorder:!0,children:(0,X.jsxs)(O,{gap:4,children:[(0,X.jsxs)(n,{justify:`space-between`,gap:`xs`,children:[(0,X.jsx)(d,{fw:700,children:o?`Runtime contact`:`Connectivity`}),(0,X.jsx)(u,{color:a,variant:`light`,children:t.status})]}),(0,X.jsx)(d,{size:`sm`,children:o?`Skipped. Template preview is structural and does not contact a backend.`:ht(t)}),mt(e)?(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:mt(e)}):null]})})]}),e.templateAnalysis?(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsx)(d,{fw:800,children:`Template structure`}),(0,X.jsx)(u,{color:e.templateAnalysis.syntax.valid?`teal`:`red`,variant:`light`,children:e.templateAnalysis.syntax.valid?`valid syntax`:`invalid syntax`})]}),(0,X.jsxs)(h,{cols:{base:1,sm:2},spacing:`xs`,children:[(0,X.jsx)(Z,{label:`Request Context variables`,value:e.templateAnalysis.variables.join(`, `)||`none`,meta:`Names only; values are never loaded or rendered during preview.`}),(0,X.jsx)(Z,{label:`Runtime instances`,value:`${e.runtimeImpact?.activeInstanceCount??0} active`,meta:e.runtimeImpact?.retirementRequired?`Active instances retire after apply and successful reload.`:`Preview and creation do not create an instance.`})]})]}):null,e.toolSelection?(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsx)(d,{fw:800,children:`Tool impact`}),(0,X.jsx)(u,{variant:`outline`,children:e.toolSelection.model})]}),(0,X.jsxs)(h,{cols:{base:1,sm:3},spacing:`xs`,children:[(0,X.jsx)(Z,{label:`Selection`,value:`${e.toolSelection.counts.enabled} enabled / ${e.toolSelection.counts.disabled} disabled`,meta:`${e.toolSelection.counts.unresolved} unresolved`}),(0,X.jsx)(Z,{label:`Approximate tokens`,value:`${e.toolSelection.approximateTokens.before} to ${e.toolSelection.approximateTokens.after}`,meta:`Savings: ${e.toolSelection.approximateTokens.savings}`}),(0,X.jsx)(Z,{label:`Runtime effect`,value:e.toolSelection.effect===`immediate`?`Immediate`:`Deferred`,meta:`${e.toolSelection.changedTools.length} changed tools`})]}),e.toolSelection.requiresZeroEnabledConfirmation?(0,X.jsx)(r,{color:`red`,role:`alert`,children:`Applying this preview disables every currently observed tool.`}):null]}):null,e.configChange.warnings?.map(e=>(0,X.jsx)(Z,{label:`Warning`,value:e},`warning:${e}`)),e.warnings?.map(e=>(0,X.jsx)(Z,{label:`Preview warning`,value:e},`preview-warning:${e}`)),e.configChange.retentionCleanup.warnings.map(e=>(0,X.jsx)(Z,{label:`Retention warning`,value:e},`retention:${e}`)),e.validation.errors.length>0?(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsx)(d,{fw:800,children:`Validation issues`}),(0,X.jsx)(u,{color:i,variant:`light`,children:e.validation.errors.length})]}),e.validation.errors.map(e=>(0,X.jsx)(Z,{label:e.fieldPath.join(`.`)||`form`,value:e.code,meta:e.message},`${$(e.fieldPath)}:${e.code}`))]}):null,e.diff.length>0?(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsx)(d,{fw:800,children:`Redacted diff`}),(0,X.jsxs)(u,{variant:`outline`,children:[e.diff.length,` change`,e.diff.length===1?``:`s`]})]}),e.diff.map(e=>(0,X.jsx)(b,{className:`preview-diff-entry`,withBorder:!0,children:(0,X.jsxs)(O,{gap:6,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,gap:`xs`,children:[(0,X.jsx)(d,{fw:700,children:e.fieldPath.join(`.`)}),(0,X.jsxs)(n,{gap:4,children:[e.secretAction?(0,X.jsxs)(u,{color:`grape`,variant:`light`,children:[`secret: `,e.secretAction]}):null,e.riskFlags.map(e=>(0,X.jsx)(u,{color:_t(e),variant:`light`,children:vt(e)},e))]})]}),(0,X.jsxs)(d,{size:`sm`,children:[(0,X.jsxs)(d,{span:!0,c:`dimmed`,children:[`from`,` `]}),Bt(e.oldValue),(0,X.jsxs)(d,{span:!0,c:`dimmed`,children:[` `,`to`,` `]}),Bt(e.newValue)]})]})},$(e.fieldPath)))]}):(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`No field-level changes were reported by preview.`})]})})}function un({model:e}){let{state:t}=e,i=(0,Y.useRef)(null),a=t.status===`editing`&&!!t.preview?.validation.errors.some(e=>!dn(e.fieldPath));if((0,Y.useEffect)(()=>{a&&i.current&&(i.current.open=!0)},[a]),t.status===`idle`)return null;if(t.status===`loading`)return(0,X.jsx)(Q,{title:`Configure custom server`,utility:`loading`,icon:(0,X.jsx)(we,{size:17}),children:(0,X.jsx)(At,{message:`Loading creation controls.`})});if(t.status===`failed`)return(0,X.jsx)(Q,{title:`Configure custom server`,utility:`unavailable`,icon:(0,X.jsx)(we,{size:17}),children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsx)(r,{color:`red`,role:`alert`,children:t.message}),(0,X.jsxs)(n,{children:[(0,X.jsx)(m,{onClick:()=>void e.open(),children:`Retry loading`}),(0,X.jsx)(m,{variant:`default`,onClick:()=>void e.close(),children:`Back to servers`})]})]})});if(t.status===`committed`)return(0,X.jsx)(Q,{title:`Configured server created`,utility:t.serverId,icon:(0,X.jsx)(ue,{size:17}),children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsxs)(r,{color:`teal`,role:`status`,children:[`Created `,t.serverId,`.`]}),t.warning?(0,X.jsx)(r,{color:`yellow`,children:t.warning}):null,(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`Refreshing the inventory and opening the created target.`}),(0,X.jsx)(m,{onClick:()=>void e.close(`/admin/servers/${t.result.targetSource??t.result.configChange.target.source??`mcpServers`}/${encodeURIComponent(t.serverId)}`),children:`Open server detail`})]})});let o=t.fieldDraft[$([`transport`,`type`])],s=t.fieldDraft[$([`source`])]===`mcpTemplates`?`mcpTemplates`:`mcpServers`,c=o===`http`||o===`sse`?o:`stdio`,l=t.contract.createContract.fieldGroups.map(e=>({...e,fields:e.fields.filter(e=>e.fieldPath[0]!==`source`&&(!e.applicableSources||e.applicableSources.includes(s))&&Ft(e,c))})).filter(e=>e.fields.length>0),f=l.map(e=>({...e,fields:e.fields.filter(e=>dn(e.fieldPath))})).filter(e=>e.fields.length>0),p=l.flatMap(e=>e.fields).filter(e=>!dn(e.fieldPath)),h=Qt(t),g=t.preview?.configChange.target.source===`mcpServers`&&t.preview.validation.errors.some(e=>[`configured_server_name_conflict`,`configured_server_destination_conflict`].includes(e.code));return(0,X.jsx)(Q,{title:`Configure custom server`,utility:s===`mcpTemplates`?`new template definition`:`new static target`,icon:(0,X.jsx)(fe,{size:17}),children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{className:`eyebrow`,size:`xs`,children:`Configured Server Target`}),(0,X.jsx)(k,{order:2,children:s===`mcpTemplates`?`New template definition`:`New custom server`}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`Configure -> Preview -> Confirm creation`})]}),(0,X.jsx)(m,{variant:`default`,onClick:()=>void e.close(),children:`Back`})]}),(0,X.jsx)(A,{fullWidth:!0,"aria-label":`Configured server definition type`,value:s,onChange:t=>e.changeField([`source`],t),data:[{value:`mcpServers`,label:`Static`},{value:`mcpTemplates`,label:`Template`}]}),s===`mcpTemplates`?(0,X.jsx)(r,{color:`blue`,variant:`light`,children:`Preview checks structure and Request Context variable names only. It never renders context, connects a backend, or creates an instance.`}):null,c===`sse`?(0,X.jsx)(r,{color:`yellow`,title:`Legacy transport`,children:`SSE is deprecated. Use HTTP for new remote servers when the endpoint supports it.`}):null,f.map(r=>(0,X.jsx)(b,{className:`edit-section`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:800,children:r.label}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:nn(r.id)})]}),(0,X.jsxs)(u,{variant:`outline`,children:[r.fields.length,` fields`]})]}),r.fields.map(n=>fn(n,t.fieldDraft,e.changeField))]})},r.id)),(0,X.jsxs)(`details`,{ref:i,className:`advanced-settings`,children:[(0,X.jsx)(`summary`,{children:`Advanced settings`}),(0,X.jsxs)(O,{gap:`sm`,mt:`sm`,children:[p.length>0?(0,X.jsx)(b,{className:`edit-section`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsx)(d,{fw:800,children:`Optional transport settings`}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:`Timeouts use milliseconds. Prefer Connection Timeout and Request Timeout over Deprecated Timeout.`}),p.map(n=>fn(n,t.fieldDraft,e.changeField))]})}):null,(0,X.jsx)(pn,{transport:c,secrets:t.secrets,inlineSupported:!!t.contract.createContract.secretPolicy.inlineReplacement&&t.contract.createContract.secretPolicy.allowedActions.includes(`replace`),onAdd:e.addSecret,onChange:e.changeSecret,onRemove:e.removeSecret})]})]}),(0,X.jsxs)(n,{className:`draft-action-bar`,justify:`space-between`,gap:`sm`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(u,{color:t.dirty?`yellow`:`gray`,variant:t.dirty?`light`:`outline`,children:t.dirty?`Unpreviewed draft`:`Complete the server details`}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:`Preview validates the new target without writing configuration.`})]}),(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsx)(m,{loading:t.previewBusy,disabled:!t.dirty||t.previewBusy||t.applyBusy,onClick:()=>void e.preview(`auto`),children:`Preview server`}),t.preview?(0,X.jsx)(m,{variant:`default`,disabled:t.applyBusy,onClick:()=>void e.preview(`manual`),children:`Rerun connectivity`}):null]})]}),t.previewError?(0,X.jsx)(r,{color:`red`,role:`alert`,children:t.previewError}):null,t.applyError?(0,X.jsx)(r,{color:`red`,role:`alert`,children:t.applyError}):null,t.preview?(0,X.jsxs)(X.Fragment,{children:[(0,X.jsxs)(n,{justify:`flex-end`,align:`center`,children:[g?(0,X.jsx)(m,{leftSection:(0,X.jsx)(K,{size:16}),variant:`default`,onClick:()=>void e.editExisting(t.preview?.targetName??``),children:`Edit existing server`}):null,h.eligible?null:(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:h.reason}),(0,X.jsx)(m,{leftSection:(0,X.jsx)(ue,{size:16}),loading:t.applyBusy,disabled:!h.eligible||t.applyBusy,onClick:()=>void e.apply(),children:s===`mcpTemplates`?`Create template`:`Create server`})]}),(0,X.jsx)(ln,{preview:t.preview})]}):null]})})}function dn(e){return e[0]===`secrets`?!1:e[0]!==`transport`||[`type`,`command`,`args`,`url`].includes(e[1]??``)}function fn(e,t,n){let r=$(e.fieldPath);return(0,X.jsx)(rn,{field:[`timeout`,`connectionTimeout`,`requestTimeout`].includes(e.fieldPath[1]??``)?{...e,label:`${e.label} (ms)`}:e,value:t[r],onChange:t=>n(e.fieldPath,t)},r)}function pn({transport:e,secrets:t,inlineSupported:i,onAdd:a,onChange:o,onRemove:s}){let c=e===`stdio`?`env`:`headers`,l=t.filter(e=>e.container===c),u=c===`env`?`Environment secrets`:`Header secrets`;return(0,X.jsx)(b,{className:`edit-section`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{justify:`space-between`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:800,children:u}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:`Environment Secret Reference is recommended. Only the reference is stored in configuration.`})]}),(0,X.jsx)(m,{size:`compact-sm`,variant:`default`,leftSection:(0,X.jsx)(fe,{size:14}),onClick:()=>a({id:hn(),container:c,key:``,replacementKind:`environmentReference`,replacementValue:``}),children:`Add secret`})]}),l.length===0?(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`No secret inputs configured.`}):l.map(e=>(0,X.jsx)(b,{className:`secret-editor`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{align:`flex-end`,wrap:`nowrap`,children:[(0,X.jsx)(w,{label:c===`env`?`Environment variable`:`Header name`,value:e.key,onChange:t=>o({...e,key:t.currentTarget.value})}),(0,X.jsx)(y,{label:`Secret source`,value:e.replacementKind,data:[{value:`environmentReference`,label:`Environment Secret Reference`},...i?[{value:`inlineSecret`,label:`Advanced inline secret`}]:[]],onChange:t=>o({...e,replacementKind:t.currentTarget.value,replacementValue:``})}),(0,X.jsx)(m,{"aria-label":`Remove ${e.key||`secret`} input`,variant:`subtle`,color:`red`,onClick:()=>s(e.id),children:(0,X.jsx)(xe,{size:16})})]}),e.replacementKind===`environmentReference`?(0,X.jsx)(w,{label:`Environment reference for ${e.key||u}`,placeholder:"MY_SECRET or ${MY_SECRET}",value:e.replacementValue,onChange:t=>o({...e,replacementValue:t.currentTarget.value})}):(0,X.jsxs)(X.Fragment,{children:[(0,X.jsx)(r,{color:`yellow`,children:`Advanced path: inline replacement stores secret material in configuration. Prefer an Environment Secret Reference.`}),(0,X.jsx)(E,{label:`Inline secret for ${e.key||u}`,value:e.replacementValue,onChange:t=>o({...e,replacementValue:t.currentTarget.value})})]})]})},e.id))]})})}var mn=0;function hn(){return mn+=1,`create-secret-${mn}`}function gn({model:e,target:t}){let{state:i}=e,a=i.preview,o=i.result;return(0,X.jsx)(b,{className:`edit-section configured-server-delete`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:800,c:`red`,children:`Delete definition`}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`Remove this source-qualified definition after a recovery copy and Runtime Scope reload observation.`})]}),o?(0,X.jsxs)(r,{color:Dt(o)?`yellow`:`teal`,role:`status`,children:[Dt(o)?o.configChange.reload.status===`failed`?`The definition was deleted from disk, but runtime reload failed and the runtime may still serve this target.`:`The definition was deleted from disk, but Template instance retirement was not confirmed and the runtime may still serve this target.`:`The definition was deleted from disk and the runtime reload was observed.`,` `,o.configChange.backup.created?`A recovery backup exists. Restore it if the deletion must be reversed.`:`No recovery backup was reported; inspect runtime and configuration state before continuing.`]}):a?(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(r,{color:`red`,title:`Delete ${a.qualifiedId}`,children:[a.runtimeImpact.kind===`template`?`${a.runtimeImpact.activeInstanceCount} active instance${a.runtimeImpact.activeInstanceCount===1?``:`s`} will be retired after reload.`:`The configured backend will be removed after reload.`,a.removal.preservesSameNamedOtherSource?` The same-named definition in the other source remains.`:``]}),(0,X.jsxs)(O,{gap:2,className:`configured-server-delete-facts`,children:[(0,X.jsxs)(d,{size:`xs`,children:[`Identity: `,a.qualifiedId]}),(0,X.jsxs)(d,{size:`xs`,children:[`Authority: `,a.authority]}),(0,X.jsxs)(d,{size:`xs`,children:[`Target fingerprint: `,a.targetFingerprint]}),(0,X.jsx)(d,{size:`xs`,children:`Removal diff: present definition to removed`}),(0,X.jsx)(d,{size:`xs`,children:`Backup: required recovery copy before write`}),(0,X.jsx)(d,{size:`xs`,children:`Reload: observe after write`}),(0,X.jsxs)(d,{size:`xs`,children:[`Expected reload outcomes: `,a.expectedReload.possibleStatuses.join(`, `)]}),(0,X.jsxs)(d,{size:`xs`,children:[`Runtime impact:`,` `,a.runtimeImpact.kind===`template`?`retire ${a.runtimeImpact.activeInstanceCount} active instance${a.runtimeImpact.activeInstanceCount===1?``:`s`} after reload`:`remove configured backend after reload`]})]}),(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{size:`xs`,fw:700,children:`Redacted definition`}),(0,X.jsx)(M,{block:!0,children:JSON.stringify(a.removal.definition,null,2)})]}),a.warnings.map(e=>(0,X.jsx)(d,{size:`xs`,c:`dimmed`,children:e},e)),(0,X.jsx)(w,{label:`Type ${a.qualifiedId} to confirm`,value:i.confirmation,disabled:i.applyBusy,autoComplete:`off`,onChange:t=>e.changeConfirmation(t.currentTarget.value)}),(0,X.jsxs)(n,{justify:`space-between`,children:[(0,X.jsx)(m,{variant:`default`,disabled:i.applyBusy,onClick:e.reset,children:`Cancel`}),(0,X.jsx)(m,{color:`red`,leftSection:(0,X.jsx)(xe,{size:16}),loading:i.applyBusy,disabled:!Ot(i),onClick:()=>void e.apply(t),children:`Delete definition`})]})]}):(0,X.jsx)(m,{color:`red`,variant:`outline`,leftSection:(0,X.jsx)(xe,{size:16}),loading:i.previewBusy,disabled:i.previewBusy||i.applyBusy,onClick:()=>void e.preview(t),children:`Preview deletion`}),i.error?(0,X.jsx)(r,{color:`red`,role:`alert`,children:i.error}):null]})})}function _n(){return{status:`list`}}function vn(e){if(e.status!==`loaded`)return{};let t=Pt(e.fieldDraft,e.detail.server.transport.type),n=Mt(e.detail.editContract.fieldGroups,e.fieldDraft,e.initialFieldDraft,e.secretDraft,t,e.clearedTransportOverrides),r=e.instructionOverride,i=e.initialInstructionOverride;return(r.mode!==i.mode||r.mode===`replace`&&r.value!==i.value)&&(n.instructionOverride=r.mode===`upstream`?{action:`remove`}:{action:`set`,value:r.mode===`suppress`?``:r.value}),JSON.stringify(e.toolDraft)!==JSON.stringify(e.initialToolDraft)&&(n.disabledTools=Object.entries(e.toolDraft).filter(([,e])=>!e.enabled).map(([e])=>e).sort((e,t)=>e.localeCompare(t)),n.toolDescriptionOverrides=Object.fromEntries(Object.entries(e.toolDraft).map(([e,t])=>[e,t.descriptionOverride.trim()]).filter(([,e])=>e.length>0).sort(([e],[t])=>e.localeCompare(t)))),n}function yn(e,t){switch(t.type){case`closed`:return _n();case`detailLoadStarted`:return{status:`loading`,serverId:t.serverId};case`detailLoaded`:return bn(t.serverId,t.detail);case`detailMissing`:return{status:`missing`,serverId:t.serverId};case`detailFailed`:return{status:`failed`,serverId:t.serverId,message:t.message};case`fieldChanged`:return e.status!==`loaded`||e.applyBusy?e:xn(e,{fieldDraft:{...e.fieldDraft,[$(t.fieldPath)]:t.value},clearedTransportOverrides:t.fieldPath[0]===`transport`&&t.fieldPath[1]?e.clearedTransportOverrides.filter(e=>e!==t.fieldPath[1]):e.clearedTransportOverrides});case`secretChanged`:return e.status!==`loaded`||e.applyBusy?e:xn(e,{secretDraft:{...e.secretDraft,[$(t.fieldPath)]:t.value}});case`transportOverrideChanged`:return e.status!==`loaded`||e.applyBusy?e:xn(e,{clearedTransportOverrides:t.clear?Array.from(new Set([...e.clearedTransportOverrides,t.key])):e.clearedTransportOverrides.filter(e=>e!==t.key)});case`instructionOverrideChanged`:return e.status!==`loaded`||e.applyBusy?e:xn(e,{instructionOverride:{mode:t.mode,value:t.mode===`replace`?t.value??e.instructionOverride.value:e.instructionOverride.value}});case`toolChanged`:{if(e.status!==`loaded`||e.applyBusy)return e;let n=e.toolDraft[t.name];return n?xn(e,{toolDraft:{...e.toolDraft,[t.name]:{enabled:t.enabled??n.enabled,descriptionOverride:t.descriptionOverride??n.descriptionOverride}}}):e}case`toolsBulkChanged`:return e.status!==`loaded`||e.applyBusy?e:xn(e,{toolDraft:Object.fromEntries(Object.entries(e.toolDraft).map(([e,n])=>[e,t.names.includes(e)?{...n,enabled:t.enabled}:n]))});case`toolInventoryRequestStarted`:return e.status!==`loaded`||e.applyBusy||e.toolInventoryBusy?e:{...e,toolInventoryBusy:!0,toolInventoryError:void 0,...t.clearPreview?{preview:void 0,previewBusy:!1,previewError:void 0,applyError:void 0}:{}};case`toolInventoryReceived`:{if(e.status!==`loaded`)return e;let n={...e.toolDraft},r={...e.initialToolDraft};for(let e of t.inventory.rows)n[e.name]??={enabled:e.enabled,descriptionOverride:e.descriptionOverride??``},r[e.name]??={enabled:e.enabled,descriptionOverride:e.descriptionOverride??``};let i=e.detail.toolInventory?.generation!==t.inventory.generation,a={...e,detail:{...e.detail,toolInventory:t.inventory},toolDraft:n,initialToolDraft:r,toolModel:t.inventory.model,toolInventoryBusy:!1,toolInventoryError:void 0,...t.clearPreview===`always`||i?{preview:void 0,previewBusy:!1,previewError:void 0,applyError:void 0}:{}};return{...a,dirty:Object.keys(vn(a)).length>0}}case`toolInventoryRequestFailed`:return e.status===`loaded`?{...e,toolInventoryBusy:!1,toolInventoryError:t.message}:e;case`previewStarted`:return e.status===`loaded`?{...e,previewBusy:!0,previewError:void 0}:e;case`previewSucceeded`:return e.status===`loaded`?{...e,preview:t.preview,previewBusy:!1,previewError:void 0}:e;case`previewFailed`:return e.status===`loaded`?{...e,previewBusy:!1,previewError:t.message}:e;case`applyStarted`:return e.status===`loaded`?{...e,applyBusy:!0,applyError:void 0,applySuccess:void 0}:e;case`applyCommitted`:return e.status===`loaded`?{status:`committed`,serverId:t.serverId,success:`Changes applied to ${t.result.targetName}.`,warning:Cn(t.result)}:e;case`applySucceeded`:return{...bn(t.serverId,t.detail),applySuccess:`Changes applied to ${t.result.targetName}.`,applyWarning:Cn(t.result)};case`applyFailed`:return e.status===`loaded`?{...e,preview:t.clearPreview?void 0:e.preview,applyBusy:!1,applyError:t.message}:e;case`applyRefreshFailed`:return e.status===`committed`?{...e,status:`committedRefreshFailed`,message:t.message}:e}}function bn(e,t){let n={},r={};for(let e of t.editContract.fieldGroups)for(let t of e.fields){let e=$(t.fieldPath);t.control===`secret`?r[e]={fieldPath:t.fieldPath,action:t.secret?.defaultAction??`preserve`,replacementKind:t.secret?.environmentReference.supported===!1?`inlineSecret`:`environmentReference`,replacementValue:``}:n[e]=Nt(t)}let i=Object.fromEntries((t.toolInventory?.rows??[]).map(e=>[e.name,{enabled:e.enabled,descriptionOverride:e.descriptionOverride??``}]));return{status:`loaded`,serverId:e,detail:t,fieldDraft:n,initialFieldDraft:n,secretDraft:r,clearedTransportOverrides:[],instructionOverride:Sn(t.server.instructionOverride),initialInstructionOverride:Sn(t.server.instructionOverride),toolDraft:i,initialToolDraft:i,toolModel:t.toolInventory?.model??`gpt-4o`,toolInventoryBusy:!1,dirty:!1,previewBusy:!1,applyBusy:!1}}function xn(e,t){let n={...e,...t,preview:void 0,previewBusy:!1,previewError:void 0,applyError:void 0,applyWarning:void 0,applySuccess:void 0};return{...n,dirty:Object.keys(vn(n)).length>0}}function Sn(e){return e?.state===`replace`?{mode:`replace`,value:e.value}:e?.state===`suppress`?{mode:`suppress`,value:``}:{mode:`upstream`,value:``}}function Cn(e){if(e.configChange.reload.status===`failed`)return e.configChange.reload.error?`Configuration was written, but runtime reload failed: ${e.configChange.reload.error}`:`Configuration was written, but runtime reload failed. Inspect runtime health before continuing.`}function wn({api:e,session:t,browser:n,onUnauthenticated:r,onApplied:i,onPathCommitted:a}){let[o,s]=(0,Y.useReducer)(yn,void 0,_n),c=(0,Y.useRef)(o),l=(0,Y.useRef)(t),u=(0,Y.useRef)(e),d=(0,Y.useRef)(r),f=(0,Y.useRef)(0),p=(0,Y.useRef)(!1),m=(0,Y.useRef)();c.current=o,l.current=t,u.current=e,d.current=r;let{loadRequestRef:h,previewRequestRef:g,applyRequestRef:_,applyInteractionRef:v,applyAttemptRef:y,invalidatePreview:b,invalidateApply:x,reset:S}=jt(()=>s({type:`closed`})),C=(0,Y.useCallback)(()=>{f.current+=1,p.current=!1,m.current=void 0},[]),w=(0,Y.useCallback)(()=>{C(),S()},[C,S]),T=(0,Y.useCallback)(e=>!(e instanceof q)||e.failure.kind!==`unauthenticated`?!1:(w(),d.current(e.failure.adminStatus),!0),[w]),E=(0,Y.useCallback)(async(e,t)=>{let n=l.current;if(!n||p.current)return;p.current=!0;let r=n.csrfToken,i=f.current+1;f.current=i,s({type:`toolInventoryRequestStarted`,clearPreview:!1});try{let n=await u.current.refreshConfiguredToolInventory({target:e,csrfToken:r,model:t});if(i!==f.current||l.current?.csrfToken!==r)return;let a=c.current;if(a.status!==`loaded`||!Dn(a,e))return;a.detail.toolInventory?.generation!==n.toolInventory.generation&&b(),s({type:`toolInventoryReceived`,inventory:n.toolInventory,clearPreview:`generationChanged`})}catch(e){if(i!==f.current||l.current?.csrfToken!==r)return;T(e)||s({type:`toolInventoryRequestFailed`,message:`Tool refresh failed: ${An(e)}`})}finally{i===f.current&&(p.current=!1)}},[T,b]),D=(0,Y.useCallback)(async e=>{let t=typeof e==`string`?e:e.id,n=l.current;if(!n)return;x(),C();let r=n.csrfToken,i=h.current+1;h.current=i,b(),s({type:`detailLoadStarted`,serverId:t});try{let n=await u.current.getConfiguredServerDetail(e);if(i!==h.current||l.current?.csrfToken!==r)return;m.current=n.toolInventory?.freshness===`unavailable`?{target:n.server.target,model:n.toolInventory.model}:void 0,s({type:`detailLoaded`,serverId:t,detail:n})}catch(e){if(i!==h.current||l.current?.csrfToken!==r||T(e))return;if(e instanceof q&&e.failure.kind===`configuredServerNotFound`){s({type:`detailMissing`,serverId:t});return}s({type:`detailFailed`,serverId:t,message:`Server detail failed: ${An(e)}`})}},[T,x,b,C]),O=(0,Y.useCallback)(async e=>{let t=c.current;t.status===`loaded`&&!Dn(t,e)&&t.dirty&&!await kn(n)||(n.push(jn(e)),await D(e))},[n,D]),k=(0,Y.useCallback)(async(e=`/admin`)=>{let t=c.current;return t.status===`loaded`&&t.dirty&&!await kn(n)?!1:(n.push(e),w(),!0)},[n,w]),A=(0,Y.useCallback)((e,t)=>{b(),s({type:`fieldChanged`,fieldPath:e,value:t})},[b]),ee=(0,Y.useCallback)((e,t)=>{b(),s({type:`secretChanged`,fieldPath:e,value:t})},[b]),j=(0,Y.useCallback)((e,t)=>{b(),s({type:`transportOverrideChanged`,key:e,clear:t})},[b]),te=(0,Y.useCallback)((e,t)=>{b(),s({type:`instructionOverrideChanged`,mode:e,value:t})},[b]),M=(0,Y.useCallback)((e,t)=>{b(),s({type:`toolChanged`,name:e,...t})},[b]),ne=(0,Y.useCallback)((e,t)=>{b(),s({type:`toolsBulkChanged`,names:e,enabled:t})},[b]),N=(0,Y.useCallback)(async e=>{let t=c.current;if(t.status!==`loaded`||t.applyBusy||t.toolInventoryBusy||p.current||v.current||e===t.toolModel)return;let n=l.current;if(!n)return;let r=n.csrfToken;p.current=!0;let i=f.current+1;f.current=i,b(),s({type:`toolInventoryRequestStarted`,clearPreview:!0});try{let n=await u.current.getConfiguredServerDetail(En(t),e);if(i!==f.current||l.current?.csrfToken!==r||c.current.status!==`loaded`||!Dn(c.current,En(t)))return;n.toolInventory?s({type:`toolInventoryReceived`,inventory:n.toolInventory,clearPreview:`always`}):s({type:`toolInventoryRequestFailed`,message:`Token estimate failed: inventory unavailable.`})}catch(e){if(i!==f.current||l.current?.csrfToken!==r)return;T(e)||s({type:`toolInventoryRequestFailed`,message:`Token estimate failed: ${An(e)}`})}finally{i===f.current&&(p.current=!1)}},[T,b]),P=(0,Y.useCallback)(()=>{let e=c.current;if(!(e.status!==`loaded`||e.applyBusy||e.toolInventoryBusy||v.current))return E(En(e),e.toolModel)},[E]);(0,Y.useEffect)(()=>{if(o.status!==`loaded`)return;let e=m.current;!e||!Dn(o,e.target)||(m.current=void 0,E(e.target,e.model))},[E,o]);let re=(0,Y.useCallback)(async(e=`auto`)=>{let t=l.current,n=c.current;if(!t||n.status!==`loaded`||n.toolInventoryBusy||p.current)return;let r=t.csrfToken,i=n.serverId,a=g.current+1;g.current=a,s({type:`previewStarted`});try{let t=await u.current.previewConfiguredServerEdit({target:En(n),csrfToken:r,connectivityCheck:e,...n.detail.toolInventory?{model:n.toolModel}:{},edit:vn(n)});if(a!==g.current||l.current?.csrfToken!==r)return;let o=c.current;if(o.status!==`loaded`||o.serverId!==i)return;y.current?.previewFingerprint!==t.preview.previewFingerprint&&(y.current=void 0),s({type:`previewSucceeded`,preview:t.preview})}catch(e){if(a!==g.current||l.current?.csrfToken!==r)return;T(e)||s({type:`previewFailed`,message:`Preview failed: ${An(e)}`})}},[T]),F=(0,Y.useCallback)(async()=>{if(v.current)return;let e=l.current,t=c.current;if(!(!e||t.status!==`loaded`||!t.preview||t.toolInventoryBusy||p.current)&&Tn(t).eligible){v.current=!0;try{let r=t.preview,a=Array.from(new Set(r.diff.flatMap(e=>e.riskFlags))),o=r.connectivityCheck.status===`failed`,d=r.toolSelection?.requiresZeroEnabledConfirmation===!0,f=t.detail.server.source===`mcpTemplates`;if(!await n.confirm({title:d?`Disable all observed tools for ${r.proposedTargetName}?`:o?`Apply despite failed connectivity to ${r.proposedTargetName}?`:f?`Apply template changes to ${r.proposedTargetName}?`:`Apply changes to ${r.proposedTargetName}?`,message:d?`No currently observed tools will remain enabled. Newly discovered tools will still be enabled by default.`:o?`The bounded connectivity check failed. Applying may make this configured server unavailable.`:f?r.runtimeImpact?.retirementRequired?`This writes the validated template definition, reloads the Runtime Scope, and retires active instances.`:`This writes the validated template metadata and reloads the Runtime Scope without retiring active instances.`:`This writes the validated configuration and reloads the Runtime Scope.`,confirmLabel:d?`Disable all tools`:o?`Apply despite failure`:f?`Apply template`:`Apply changes`,tone:d||o?`danger`:void 0,details:[{label:`Current target`,value:r.targetName},{label:`Final target`,value:r.proposedTargetName},{label:`Changes`,value:String(r.diff.length)},{label:`Risk flags`,value:a.join(`, `)||`none`},{label:`Connectivity`,value:r.connectivityCheck.status},{label:`Backup`,value:`Created before the config write`}]}))return;let m=c.current;if(m.status!==`loaded`||m.toolInventoryBusy||p.current||m.preview?.previewFingerprint!==r.previewFingerprint)return;let h=e.csrfToken,g=t.serverId,v=_.current+1;_.current=v;let b=y.current?.previewFingerprint===r.previewFingerprint?y.current:{previewFingerprint:r.previewFingerprint,idempotencyKey:Ue(g)};y.current=b,s({type:`applyStarted`});let x;try{x=await u.current.applyConfiguredServerEdit({target:En(t),csrfToken:h,idempotencyKey:b.idempotencyKey,edit:vn(t),previewFingerprint:r.previewFingerprint,...t.detail.toolInventory?{model:t.toolModel}:{},confirmationFacts:{previewConfirmed:r.previewFingerprint,...r.proposedTargetName===r.targetName?{}:{targetNameConfirmed:r.proposedTargetName},...a.includes(`connection_critical`)?{connectionCriticalConfirmed:!0}:{},...a.includes(`secret`)?{secretChangeConfirmed:!0}:{},...o?{connectivityFailureOverrideConfirmed:!0}:{},...r.toolSelection?.requiresZeroEnabledConfirmation?{zeroEnabledToolsConfirmed:!0}:{}}})}catch(e){if(v!==_.current||l.current?.csrfToken!==h)return;if(!T(e)){let t=On(e);t&&(y.current=void 0),s({type:`applyFailed`,message:`Apply failed: ${An(e)}`,clearPreview:t})}return}if(v!==_.current||l.current?.csrfToken!==h)return;y.current=void 0;let S=x.result.targetName;S!==g&&n.replace(jn({source:t.detail.server.source,id:S})),s({type:`applyCommitted`,serverId:S,result:x.result});try{await i?.()}catch{}try{let e=await u.current.getConfiguredServerDetail(t.detail.server.source===`mcpTemplates`?{source:`mcpTemplates`,id:S}:{source:`mcpServers`,id:S});if(v!==_.current||l.current?.csrfToken!==h)return;s({type:`applySucceeded`,serverId:S,detail:e,result:x.result})}catch(e){if(v!==_.current||l.current?.csrfToken!==h)return;T(e)||s({type:`applyRefreshFailed`,message:`Changes were applied, but server detail could not be refreshed: ${An(e)}`})}}finally{v.current=!1}}},[n,T,i]);return(0,Y.useEffect)(()=>{if(!t){w();return}let e=Mn(n.pathname());e?D(e):w()},[n,D,w,t?.csrfToken]),(0,Y.useEffect)(()=>n.subscribePopState(()=>{(async()=>{let e=c.current,t=n.pathname(),r=Mn(t);if(e.status===`loaded`&&!Dn(e,r)&&e.dirty){if(n.replace(jn(e.detail.server.target)),!await kn(n))return;n.replace(t)}r?D(r):w(),a?.(t)})()}),[n,D,a,w]),{state:o,open:O,close:k,changeField:A,changeSecret:ee,changeTransportOverride:j,changeInstructionOverride:te,changeTool:M,changeVisibleTools:ne,changeToolModel:N,refreshToolInventory:P,preview:re,apply:F}}function Tn(e){if(e.status!==`loaded`||!e.preview)return{eligible:!1,reason:`Preview changes first.`};if(e.toolInventoryBusy)return{eligible:!1,reason:`Wait for the tool inventory refresh to finish.`};if(!e.detail.editContract.capabilities.apply.supported)return{eligible:!1,reason:`This runtime does not support applying server edits.`};if(e.preview.validation.status!==`valid`)return{eligible:!1,reason:`Resolve validation issues.`};if(!e.preview.configChange.changed||e.preview.diff.length===0)return{eligible:!1,reason:`The preview contains no changes.`};let t=e.preview.diff.some(e=>e.riskFlags.includes(`connection_critical`)),n=Pt(e.fieldDraft,e.detail.server.transport.type);return(vn(e).enabled??e.detail.server.enabled)&&e.detail.server.source!==`mcpTemplates`&&n!==`stdio`&&t&&e.preview.connectivityCheck.status!==`passed`&&e.preview.connectivityCheck.status!==`failed`?{eligible:!1,reason:`A connectivity check must run before applying these changes.`}:{eligible:!0}}function En(e){return{source:e.detail.server.source,id:e.serverId}}function Dn(e,t){if(!t)return!1;let n=typeof t==`string`?`mcpServers`:t.source,r=typeof t==`string`?t:t.id;return e.serverId===r&&e.detail.server.source===n}function On(e){return e instanceof q&&e.failure.kind===`rejected`&&e.failure.code===`configured_server_stale_preview`}function kn(e){return e.confirm({title:`Discard unsaved changes?`,message:`Your configured-server draft and preview will be lost.`,confirmLabel:`Discard changes`,tone:`danger`})}function An(e){if(e instanceof q)return e.failure.message;throw e}function jn(e){return typeof e==`string`?`/admin/servers/${encodeURIComponent(e)}`:`/admin/servers/${e.source}/${encodeURIComponent(e.id)}`}function Mn(e){if(!e.startsWith(`/admin/servers/`))return null;let t=e.slice(15).split(`#`,1)[0];if(!t)return null;let n;try{n=decodeURIComponent(t)}catch{n=t}if(n===`new`)return null;let[r,...i]=n.split(`/`);return(r===`mcpServers`||r===`mcpTemplates`)&&i.length>0?{source:r,id:i.join(`/`)}:n}function Nn({inventory:e,draft:t,disabled:r,refreshBusy:i,refreshError:a,onToolChange:o,onBulkChange:s,onModelChange:l,onRefresh:f}){let[p,h]=(0,Y.useState)(``),[_,v]=(0,Y.useState)(`all`),y=(0,Y.useMemo)(()=>{let n=p.trim().toLowerCase();return e.rows.filter(e=>{let r=t[e.name]??{enabled:e.enabled,descriptionOverride:e.descriptionOverride??``},i=!n||e.name.toLowerCase().includes(n)||e.effectiveDescription?.toLowerCase().includes(n)||e.upstreamDescription?.toLowerCase().includes(n),a=_===`all`||_===`enabled`&&r.enabled||_===`disabled`&&!r.enabled||_===`unresolved`&&e.unresolved;return i&&a})},[t,_,e.rows,p]),b=y.map(e=>e.name),x=(0,Y.useMemo)(()=>Array.from(new Set([`gpt-4o`,`gpt-4o-mini`,`gpt-3.5-turbo`,e.model].filter(Boolean))),[e.model]),C=(0,Y.useMemo)(()=>{let n=0,r=0;for(let i of e.rows)t[i.name]?.enabled??i.enabled?r+=i.approximateTokens:n+=1;return{disabled:n,enabledTokens:r}},[t,e.rows]),E=Fn(e,a),D=Pn(e),k=!!a||e.inspection?.retryable===!0;return(0,X.jsxs)(O,{className:`configured-tool-table`,gap:`sm`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-end`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:800,children:`Configured Tool Selection`}),(0,X.jsxs)(d,{c:`dimmed`,size:`xs`,children:[e.counts.observed,` observed, `,C.disabled,` disabled, `,e.counts.unresolved,` `,`unresolved`]}),E?(0,X.jsxs)(`div`,{role:a||e.inspection?.status===`failed`?`alert`:`status`,"aria-live":a||e.inspection?.status===`failed`?void 0:`polite`,children:[(0,X.jsx)(d,{c:a||e.inspection?.status===`failed`?`red`:`yellow`,size:`xs`,children:E}),D.length>0?(0,X.jsx)(O,{component:`ul`,gap:2,m:0,pl:`md`,children:D.map(e=>(0,X.jsxs)(d,{component:`li`,c:`red`,size:`xs`,style:{overflowWrap:`anywhere`},children:[e.instanceId,`: `,e.error]},`${e.instanceId}:${e.error}`))}):null]}):null]}),(0,X.jsxs)(n,{align:`flex-end`,gap:`xs`,children:[(0,X.jsx)(m,{variant:`default`,leftSection:(0,X.jsx)(_e,{size:15}),loading:i,disabled:r||i,onClick:()=>void f(),children:k?`Retry`:`Refresh`}),(0,X.jsx)(S,{label:`Estimate model`,"aria-label":`Token estimate model`,value:e.model,data:x,allowDeselect:!1,disabled:r||i,onChange:e=>{e&&l(e)}})]})]}),(0,X.jsxs)(n,{align:`flex-end`,grow:!0,children:[(0,X.jsx)(w,{label:`Search tools`,leftSection:(0,X.jsx)(de,{size:15}),value:p,onChange:e=>h(e.currentTarget.value)}),(0,X.jsx)(A,{"aria-label":`Tool status filter`,value:_,onChange:e=>v(e),data:[{label:`All`,value:`all`},{label:`Enabled`,value:`enabled`},{label:`Disabled`,value:`disabled`},{label:`Unresolved`,value:`unresolved`}]})]}),(0,X.jsxs)(n,{justify:`space-between`,children:[(0,X.jsxs)(d,{c:`dimmed`,size:`xs`,children:[y.length,` visible tools, approximately `,C.enabledTokens,` enabled tokens`]}),(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsxs)(m,{size:`compact-xs`,variant:`default`,disabled:r||b.length===0,onClick:()=>s(b,!0),children:[`Enable visible (`,b.length,`)`]}),(0,X.jsxs)(m,{size:`compact-xs`,variant:`default`,disabled:r||b.length===0,onClick:()=>s(b,!1),children:[`Disable visible (`,b.length,`)`]})]})]}),(0,X.jsx)(`div`,{className:`configured-tool-rows`,children:y.map(e=>{let i=t[e.name]??{enabled:e.enabled,descriptionOverride:e.descriptionOverride??``};return(0,X.jsxs)(`div`,{className:`configured-tool-row`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,wrap:`nowrap`,children:[(0,X.jsxs)(`div`,{className:`configured-tool-identity`,children:[(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsx)(d,{fw:700,children:e.name}),e.stale?(0,X.jsx)(u,{color:`orange`,children:`last observed`}):null,e.unresolved?(0,X.jsx)(u,{color:`yellow`,children:`unresolved`}):null,e.observedInSomeInstances?(0,X.jsxs)(u,{variant:`outline`,children:[e.observedInstanceCount,`/`,e.activeInstanceCount,` instances`]}):null,(0,X.jsxs)(u,{variant:`outline`,children:[`~`,e.approximateTokens,` tokens`]})]}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:e.effectiveDescription??`No upstream description`}),e.descriptionOverridden&&e.upstreamDescription?(0,X.jsxs)(d,{c:`dimmed`,size:`xs`,children:[`Upstream: `,e.upstreamDescription]}):null]}),(0,X.jsx)(T,{"aria-label":`Enable ${e.name}`,checked:i.enabled,disabled:r,onChange:t=>o(e.name,{enabled:t.currentTarget.checked})})]}),(0,X.jsxs)(n,{mt:`xs`,align:`flex-end`,wrap:`nowrap`,children:[(0,X.jsx)(w,{className:`configured-tool-description-input`,label:`Description override`,placeholder:e.upstreamDescription??`Add a description`,value:i.descriptionOverride,disabled:r,onChange:t=>o(e.name,{descriptionOverride:t.currentTarget.value})}),(0,X.jsx)(g,{label:`Reset to upstream description`,children:(0,X.jsx)(c,{"aria-label":`Reset ${e.name} description`,variant:`default`,disabled:r||!i.descriptionOverride,onClick:()=>o(e.name,{descriptionOverride:``}),children:(0,X.jsx)(be,{size:16})})})]})]},e.name)})}),e.targetEnabled?null:(0,X.jsx)(d,{c:`yellow`,size:`xs`,children:`This target is disabled. Tool changes will take effect when the target is enabled.`}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:`Selection uses a denylist. Tools discovered later are enabled unless explicitly disabled.`})]})}function Pn(e){return(e.inspection?.instances??[]).flatMap(e=>{let t=e.error?.trim();return e.status===`complete`||!t?[]:[{instanceId:e.instanceId,error:t.length>240?`${t.slice(0,237)}...`:t}]}).slice(0,5)}function Fn(e,t){if(t)return t;let n=e.inspection;if(n?.status===`in_progress`)return`Refreshing live tool inventory from connected instances.`;if(!(n?.status===`complete`&&e.freshness===`live`))switch(n?.reason){case`target_disabled`:return`This target is disabled, so live tool inventory cannot be refreshed.`;case`target_disconnected`:return`This configured server is disconnected. Reconnect it before refreshing live tool inventory.`;case`no_active_instances`:return`This Template Server has no active instances to inspect.`;case`active_instance_unavailable`:return`An active instance became unavailable before its tools could be inspected.`;case`inspection_failed`:return`Live tool inspection failed for one or more active instances.`;case`snapshot_unavailable`:return`No complete live tool snapshot is available yet.`;case`active_instances_changed`:return`The active instance set changed during inspection. Retry to inspect the current instances.`;default:return e.freshness===`unavailable`?`Live inventory is unavailable. Rows may come from the last complete snapshot or stored configuration.`:void 0}}function In({model:e,deleteModel:t}){let{state:i}=e,a=(0,Y.useRef)(null),o=i.status===`loaded`&&!!i.preview?.validation.errors.some(e=>i.detail.editContract.fieldGroups.flatMap(e=>e.fields).some(t=>$(t.fieldPath)===$(e.fieldPath)&&!Ln(t)));if((0,Y.useEffect)(()=>{o&&a.current&&(a.current.open=!0)},[o]),i.status===`list`)return(0,X.jsx)(Q,{title:`Edit server`,utility:`select a target`,icon:(0,X.jsx)(K,{size:17}),children:(0,X.jsxs)(O,{className:`edit-empty-state`,gap:`xs`,children:[(0,X.jsx)(d,{fw:700,children:`Select Edit server to change target settings.`}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`Edit fields -> Preview change -> Review result`})]})});if(i.status===`loading`)return(0,X.jsx)(Q,{title:`Server detail`,utility:i.serverId,icon:(0,X.jsx)(we,{size:17}),children:(0,X.jsx)(At,{message:`Loading server detail.`})});if(i.status===`committed`||i.status===`committedRefreshFailed`)return(0,X.jsx)(Q,{title:`Server detail`,utility:i.serverId,icon:(0,X.jsx)(we,{size:17}),children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsx)(r,{color:`teal`,role:`status`,children:i.success}),i.warning?(0,X.jsx)(r,{color:`yellow`,role:`status`,children:i.warning}):null,i.status===`committed`?(0,X.jsx)(At,{message:`Refreshing the committed server detail.`}):(0,X.jsx)(r,{color:`yellow`,role:`status`,children:i.message}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`Editing stays unavailable until the runtime returns a fresh server detail model.`}),(0,X.jsxs)(n,{children:[i.status===`committedRefreshFailed`?(0,X.jsx)(m,{onClick:()=>void e.open(i.serverId),children:`Retry detail`}):null,(0,X.jsx)(m,{variant:`default`,onClick:()=>void e.close(`/admin/servers`),children:`Back to servers`})]})]})});if(i.status===`missing`)return(0,X.jsx)(Q,{title:`Server detail`,utility:i.serverId,icon:(0,X.jsx)(we,{size:17}),children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsx)(k,{order:3,children:`Server target not found`}),(0,X.jsxs)(d,{c:`dimmed`,children:[i.serverId,` is no longer available. It may have been renamed or removed. Return to the list, refresh, and open the current target ID if a rename succeeded.`]}),(0,X.jsx)(r,{color:`yellow`,variant:`light`,children:`Old detail URLs are not aliases. Use the server list after a rename instead of bookmarking the previous ID.`}),(0,X.jsx)(m,{variant:`default`,onClick:()=>e.close(`/admin/servers`),children:`Back to servers`})]})});if(i.status===`failed`)return(0,X.jsx)(Q,{title:`Server detail`,utility:i.serverId,icon:(0,X.jsx)(we,{size:17}),children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsx)(r,{color:`red`,role:`alert`,children:i.message}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`Refresh the console or return to the server list, then retry. Preserve any non-secret request ID from the error when asking for support.`}),(0,X.jsx)(m,{variant:`default`,onClick:()=>e.close(`/admin/servers`),children:`Back to servers`})]})});let s=Pt(i.fieldDraft,i.detail.server.transport.type),c=i.detail.server.source===`mcpTemplates`,l=i.detail.editContract.fieldGroups.map(e=>({...e,fields:e.fields.filter(e=>Ft(e,s))})).filter(e=>e.fields.length>0),f=l.map(e=>({...e,fields:e.fields.filter(Ln)})).filter(e=>e.fields.length>0),p=l.flatMap(e=>e.fields).filter(e=>!Ln(e)),h=Tn(i),g=t=>{let r=t.fieldPath[0]===`transport`?t.fieldPath[1]:t.fieldPath[0],a=!!(r&&i.clearedTransportOverrides.includes(r)),o=[`timeout`,`connectionTimeout`,`requestTimeout`].includes(t.fieldPath[1]??``)?{...t,label:`${t.label} (ms)`}:t;return(0,X.jsxs)(O,{gap:4,children:[t.control===`secret`?(0,X.jsx)(sn,{field:o,draft:i.secretDraft[$(t.fieldPath)],onChange:n=>e.changeSecret(t.fieldPath,n)}):(0,X.jsx)(rn,{field:o,value:i.fieldDraft[$(t.fieldPath)],onChange:n=>e.changeField(t.fieldPath,n)}),t.overrideSupported&&r?(0,X.jsxs)(n,{justify:`space-between`,gap:`xs`,children:[(0,X.jsx)(u,{variant:`outline`,children:a?`will inherit`:t.source===`inherited`?`inherited`:t.source}),t.clearOverrideSupported?(0,X.jsx)(m,{size:`compact-xs`,variant:`subtle`,onClick:()=>e.changeTransportOverride(r,!a),children:a?`Restore override`:`Clear override`}):null]}):null]},$(t.fieldPath))};return(0,X.jsx)(Q,{title:`Edit server`,utility:i.detail.server.enabled?`enabled`:`disabled`,icon:(0,X.jsx)(K,{size:17}),children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{className:`eyebrow`,size:`xs`,children:`Configured Server Target`}),(0,X.jsxs)(n,{gap:`xs`,align:`center`,children:[(0,X.jsx)(k,{order:2,children:i.detail.server.id}),(0,X.jsx)(u,{color:i.detail.server.enabled?`teal`:`yellow`,variant:`light`,children:i.detail.server.enabled?`enabled`:`disabled`}),(0,X.jsx)(u,{variant:`outline`,children:c?`Template`:`Static`}),i.detail.server.definition?.authority&&i.detail.server.definition.authority!==`sole`?(0,X.jsx)(u,{color:i.detail.server.definition.authority===`authoritative`?`teal`:`yellow`,children:i.detail.server.definition.authority}):null]}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:ut(i.detail.server)}),(0,X.jsxs)(d,{c:`dimmed`,size:`xs`,children:[i.detail.server.definition?.qualifiedId??`${i.detail.server.source}/${i.detail.server.id}`,` `,`· Draft changes stay local until preview.`]})]}),(0,X.jsx)(m,{variant:`default`,onClick:()=>e.close(`/admin/servers`),children:`Back`})]}),c?(0,X.jsx)(b,{className:`edit-section`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{justify:`space-between`,children:[(0,X.jsx)(d,{fw:800,children:`Template definition`}),(0,X.jsxs)(u,{variant:`outline`,children:[i.detail.server.runtime?.activeInstanceCount??0,` active instance`,(i.detail.server.runtime?.activeInstanceCount??0)===1?``:`s`]})]}),(0,X.jsx)(d,{size:`sm`,c:`dimmed`,children:`This is a definition, not a live instance. Rename or structural changes retire active instances; metadata-only changes retain them. Future matching requests recreate retired instances lazily.`}),(0,X.jsxs)(d,{size:`sm`,children:[`Request Context variables:`,` `,i.detail.server.templateAnalysis?.unresolvedVariables.join(`, `)||`none`]}),i.detail.server.templateAnalysis?.syntax.valid===!1?(0,X.jsx)(r,{color:`red`,children:`Template syntax is invalid. Preview lists each affected field.`}):null]})}):null,f.map(e=>(0,X.jsx)(b,{className:`edit-section`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:800,children:e.label}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:nn(e.id)})]}),(0,X.jsxs)(u,{variant:`outline`,children:[e.fields.length,` fields`]})]}),e.fields.map(g)]})},e.id)),i.detail.toolInventory?(0,X.jsx)(b,{className:`edit-section`,withBorder:!0,children:(0,X.jsx)(Nn,{inventory:i.detail.toolInventory,draft:i.toolDraft,disabled:i.applyBusy,refreshBusy:i.toolInventoryBusy,refreshError:i.toolInventoryError,onToolChange:e.changeTool,onBulkChange:e.changeVisibleTools,onModelChange:e.changeToolModel,onRefresh:()=>e.refreshToolInventory?.()})}):null,p.length>0?(0,X.jsxs)(`details`,{ref:a,className:`advanced-settings`,children:[(0,X.jsx)(`summary`,{children:`Advanced settings`}),(0,X.jsxs)(O,{gap:`sm`,mt:`sm`,children:[(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:`Timeouts use milliseconds. Prefer Connection Timeout and Request Timeout over Deprecated Timeout.`}),p.map(g)]})]}):null,(0,X.jsx)(b,{className:`edit-section instruction-override-editor`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`xs`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:800,children:`Server instructions`}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:`Choose whether clients receive upstream instructions, an operator replacement, or no instructions.`})]}),(0,X.jsxs)(u,{variant:`outline`,children:[`Effective:`,` `,i.instructionOverride.mode===`replace`?`replacement`:i.instructionOverride.mode]})]}),(0,X.jsx)(A,{fullWidth:!0,"aria-label":`Instruction override outcome`,value:i.instructionOverride.mode,onChange:t=>e.changeInstructionOverride(t),data:[{value:`upstream`,label:`Use upstream`},{value:`replace`,label:`Replace`},{value:`suppress`,label:`Suppress`}]}),i.instructionOverride.mode===`replace`?(0,X.jsx)(ee,{label:`Replacement instructions`,minRows:5,value:i.instructionOverride.value,onChange:t=>e.changeInstructionOverride(`replace`,t.currentTarget.value)}):(0,X.jsx)(d,{size:`sm`,className:`instruction-override-readonly`,children:i.instructionOverride.mode===`upstream`?`Upstream state is preserved. Effective instructions are resolved when the server connects.`:`Effective instructions are an intentional empty value.`})]})}),(0,X.jsxs)(n,{className:`draft-action-bar`,justify:`space-between`,gap:`sm`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(u,{color:i.dirty?`yellow`:`gray`,variant:i.dirty?`light`:`outline`,children:i.dirty?`Unsaved changes`:`No changes yet`}),(0,X.jsx)(d,{c:`dimmed`,size:`xs`,children:`Preview validates the draft without writing config. Leaving this page with unsaved changes asks for confirmation.`})]}),(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsx)(m,{loading:i.previewBusy,disabled:!i.dirty||i.previewBusy||i.applyBusy||i.toolInventoryBusy,onClick:()=>void e.preview(`auto`),children:`Preview change`}),i.preview&&!c?(0,X.jsx)(m,{variant:`default`,loading:i.previewBusy,disabled:i.applyBusy||i.toolInventoryBusy,onClick:()=>void e.preview(`manual`),children:`Rerun connectivity`}):null]})]}),i.previewError?(0,X.jsx)(r,{color:`red`,role:`alert`,children:i.previewError}):null,i.applyError?(0,X.jsx)(r,{color:`red`,role:`alert`,children:i.applyError}):null,i.applyWarning?(0,X.jsx)(r,{color:`yellow`,role:`status`,children:i.applyWarning}):null,i.applySuccess?(0,X.jsx)(r,{color:`teal`,role:`status`,children:i.applySuccess}):null,i.preview?(0,X.jsxs)(X.Fragment,{children:[(0,X.jsxs)(n,{justify:`flex-end`,align:`center`,children:[h.eligible?null:(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:h.reason}),(0,X.jsx)(m,{leftSection:(0,X.jsx)(ue,{size:16}),loading:i.applyBusy,disabled:!h.eligible||i.applyBusy||i.toolInventoryBusy,onClick:()=>void e.apply(),children:`Apply changes`})]}),(0,X.jsx)(ln,{preview:i.preview})]}):null,!i.dirty&&i.detail.editContract.capabilities.delete.supported?(0,X.jsx)(gn,{model:t,target:i.detail.server.target}):null]})})}function Ln(e){return e.control===`secret`?!1:e.fieldPath[0]!==`transport`||[`type`,`command`,`args`,`url`].includes(e.fieldPath[1]??``)}function Rn({state:e,onServerAction:t,onOpenServerDetail:r,onConfigureCustomServer:i}){let[a,s]=(0,Y.useState)(``),[c,l]=(0,Y.useState)(`all`),[u,f]=(0,Y.useState)(`all`),h=o(`(max-width: 620px)`,!1),g=(0,Y.useMemo)(()=>at(e.configuredServers,a,c).filter(e=>u===`all`||e.source===u),[c,a,u,e.configuredServers]),_=e.configuredServers.length===0;return(0,X.jsxs)(Q,{title:`Server inventory`,utility:`${g.length} of ${e.configuredServers.length} targets`,icon:(0,X.jsx)(we,{size:17}),children:[_?null:(0,X.jsxs)(n,{align:`flex-end`,gap:`sm`,className:`server-filter-row`,children:[(0,X.jsx)(w,{className:`server-search`,leftSection:(0,X.jsx)(de,{size:16}),label:`Search servers`,type:`search`,value:a,onChange:e=>s(e.currentTarget.value)}),(0,X.jsx)(A,{"aria-label":`Server status filter`,value:c,onChange:e=>l(e),data:[{label:`All`,value:`all`},{label:`Enabled`,value:`enabled`},{label:`Disabled`,value:`disabled`}]}),(0,X.jsx)(A,{"aria-label":`Server source filter`,value:u,onChange:e=>f(e),data:[{label:`Both`,value:`all`},{label:`Static`,value:`mcpServers`},{label:`Template`,value:`mcpTemplates`}]}),(0,X.jsx)(m,{leftSection:(0,X.jsx)(fe,{size:16}),onClick:()=>void i?.(),children:`Configure Custom Server`})]}),_?(0,X.jsxs)(O,{gap:`sm`,className:`actionable-empty-state`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:800,children:`No servers configured`}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`Configure a target to start routing MCP capabilities and observing runtime activity.`})]}),(0,X.jsx)(m,{leftSection:(0,X.jsx)(fe,{size:16}),onClick:()=>void i?.(),children:`Configure server`})]}):g.length===0?(0,X.jsxs)(O,{gap:`sm`,className:`actionable-empty-state`,children:[(0,X.jsx)(At,{message:`No servers match the current search and status filter.`}),(0,X.jsx)(m,{variant:`default`,onClick:()=>{s(``),l(`all`),f(`all`)},children:`Clear filters`})]}):h?(0,X.jsx)(`div`,{className:`server-mobile-list`,children:g.map(n=>(0,X.jsx)(Vn,{server:n,mutation:zn(e,n),onServerAction:t,onOpenServerDetail:r},`${n.source}:${n.id}`))}):(0,X.jsx)(`div`,{className:`server-table-view`,children:(0,X.jsx)(p.ScrollContainer,{minWidth:720,children:(0,X.jsxs)(p,{className:`admin-table`,verticalSpacing:`xs`,children:[(0,X.jsx)(p.Thead,{children:(0,X.jsxs)(p.Tr,{children:[(0,X.jsx)(p.Th,{children:`Server`}),(0,X.jsx)(p.Th,{children:`Status`}),(0,X.jsx)(p.Th,{children:`Transport`}),(0,X.jsx)(p.Th,{children:`Secrets`}),(0,X.jsx)(p.Th,{children:`Action`})]})}),(0,X.jsx)(p.Tbody,{children:g.map(n=>(0,X.jsx)(Hn,{server:n,mutation:zn(e,n),onServerAction:t,onOpenServerDetail:r},`${n.source}:${n.id}`))})]})})})]})}function zn(e,t){return e.serverMutations[`${t.source}/${t.id}`]??(t.source===`mcpServers`?e.serverMutations[t.id]:void 0)}function Bn(e,t,n){return t.source===`mcpTemplates`?e?.(t.id,n,t.source):e?.(t.id,n)}function Vn({server:e,mutation:t,onServerAction:r,onOpenServerDetail:i}){let a=e.enabled?`disable`:`enable`,o=t?.state===`busy`,s=dt(e),l=pt(e,a),f=!ft(e)||!l.available;return(0,X.jsxs)(`article`,{className:`server-mobile-card${t?` server-action-${t.state}`:``}`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,wrap:`nowrap`,children:[(0,X.jsxs)(`div`,{className:`server-mobile-identity`,children:[(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsx)(d,{fw:700,children:e.id}),(0,X.jsx)(u,{size:`xs`,variant:`outline`,children:e.source===`mcpTemplates`?`Template`:`Static`}),e.definition?.authority&&e.definition.authority!==`sole`?(0,X.jsx)(u,{size:`xs`,color:e.definition.authority===`authoritative`?`teal`:`yellow`,children:e.definition.authority}):null]}),s.length>0?(0,X.jsx)(d,{size:`xs`,c:`dimmed`,children:s.join(` / `)}):null]}),(0,X.jsx)(u,{color:e.enabled?`teal`:`yellow`,variant:`light`,children:e.enabled?`enabled`:`disabled`})]}),(0,X.jsxs)(`dl`,{className:`server-mobile-facts`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(`dt`,{children:`Transport`}),(0,X.jsx)(`dd`,{children:ut(e)})]}),(0,X.jsxs)(`div`,{children:[(0,X.jsx)(`dt`,{children:`Secrets`}),(0,X.jsx)(`dd`,{children:yt(e)})]})]}),t?.message?(0,X.jsx)(d,{size:`xs`,c:t.state===`failed`?`red`:`dimmed`,children:t.message}):null,(0,X.jsxs)(n,{gap:`sm`,justify:`space-between`,wrap:`nowrap`,className:`server-mobile-actions`,children:[(0,X.jsx)(g,{label:`Edit ${e.id}`,children:(0,X.jsx)(c,{"aria-label":`Edit ${e.source===`mcpTemplates`?`template`:`static`} ${e.id} server`,size:`lg`,variant:`default`,onClick:()=>void i?.({source:e.source,id:e.id}),children:(0,X.jsx)(K,{size:16})})}),(0,X.jsx)(Un,{server:e,busy:o,action:a,actionLabel:l.label,disabled:o||f,onChange:()=>void Bn(r,e,a)})]})]})}function Hn({server:e,mutation:t,onServerAction:r,onOpenServerDetail:i}){let a=e.enabled?`disable`:`enable`,o=t?.state===`busy`,s=dt(e),l=pt(e,a),f=!ft(e)||!l.available;return(0,X.jsxs)(p.Tr,{className:t?`server-action-${t.state}`:void 0,children:[(0,X.jsxs)(p.Td,{children:[(0,X.jsxs)(n,{gap:`xs`,children:[(0,X.jsx)(d,{fw:700,children:e.id}),(0,X.jsx)(u,{size:`xs`,variant:`outline`,children:e.source===`mcpTemplates`?`Template`:`Static`}),e.definition?.authority&&e.definition.authority!==`sole`?(0,X.jsx)(u,{size:`xs`,color:e.definition.authority===`authoritative`?`teal`:`yellow`,children:e.definition.authority}):null]}),s.length>0?(0,X.jsx)(d,{size:`xs`,c:`dimmed`,children:s.join(` / `)}):null,t?.message?(0,X.jsx)(d,{size:`xs`,c:t.state===`failed`?`red`:`dimmed`,children:t.message}):null]}),(0,X.jsx)(p.Td,{children:(0,X.jsx)(u,{color:e.enabled?`teal`:`yellow`,variant:`light`,children:e.enabled?`enabled`:`disabled`})}),(0,X.jsx)(p.Td,{children:ut(e)}),(0,X.jsx)(p.Td,{children:yt(e)}),(0,X.jsx)(p.Td,{children:(0,X.jsxs)(n,{gap:`sm`,wrap:`nowrap`,justify:`flex-end`,children:[(0,X.jsx)(g,{label:`Edit ${e.id}`,children:(0,X.jsx)(c,{"aria-label":`Edit ${e.source===`mcpTemplates`?`template`:`static`} ${e.id} server`,size:`lg`,variant:`default`,onClick:()=>void i?.({source:e.source,id:e.id}),children:(0,X.jsx)(K,{size:16})})}),(0,X.jsx)(Un,{server:e,busy:o,action:a,actionLabel:l.label,disabled:o||f,onChange:()=>void Bn(r,e,a)})]})})]})}function Un({server:e,busy:t,action:r,actionLabel:i,disabled:a,onChange:o}){return(0,X.jsxs)(n,{gap:7,wrap:`nowrap`,className:`server-state-control`,children:[t?(0,X.jsx)(x,{"aria-label":`Updating ${e.id}`,size:14}):null,(0,X.jsx)(T,{"aria-label":i,checked:e.enabled,color:`teal`,disabled:a,onChange:o,styles:{input:{cursor:`pointer`,zIndex:1}}}),(0,X.jsx)(d,{className:`server-state-label`,size:`xs`,fw:700,children:r===`disable`?`Enabled`:`Disabled`})]})}function Wn({facts:e,onCopyText:t}){return(0,X.jsx)(Q,{title:`Recent audit facts`,utility:`redacted`,icon:(0,X.jsx)(ve,{size:17}),children:e.length===0?(0,X.jsx)(At,{message:`No recent admin audit facts.`}):(0,X.jsx)(O,{gap:`xs`,children:e.map(e=>(0,X.jsx)(Z,{label:e.operationName,value:e.result,meta:e.target?.id??e.operationId??`-`,description:e.timestamp,copyLabel:e.request?.requestId?`requestId`:void 0,copyValue:e.request?.requestId,onCopyText:t},e.operationId??`${e.operationName}-${e.timestamp}`))})})}function Gn({model:e,navigate:t}){let{state:r,configuredServers:i}=e,a=(r.status?.audit.facts??[]).filter(e=>e.result===`failed`).length,o=(r.status?.oauth.services??[]).filter(ct).length,s=st(r.configuredServers),[c,l]=(0,Y.useState)(null),u=r.status?.runtime;async function f(){await i.create.open()}async function p(e,t){try{await i.copy(e,t),l(`${wt(e)} copied.`)}catch{l(`Could not copy ${wt(e)}. Select the value manually.`)}}return(0,X.jsxs)(`section`,{"aria-labelledby":`runtime-operations-title`,className:`operations-workspace`,children:[(0,X.jsx)(k,{id:`runtime-operations-title`,order:2,className:`sr-only`,children:`Runtime operations`}),(0,X.jsx)(Jn,{title:`Overview`,description:`Runtime summaries for ${r.session?.account.username??`operator`} · updated ${r.lastUpdatedAt??`never`}`}),(0,X.jsxs)(`div`,{className:`runtime-status-strip`,role:`status`,"aria-label":`Runtime status and freshness`,children:[(0,X.jsxs)(n,{gap:`xs`,wrap:`nowrap`,className:`runtime-status-main`,children:[(0,X.jsx)(`span`,{className:`runtime-live-dot`}),(0,X.jsx)(d,{fw:800,size:`sm`,children:`Runtime online`}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,className:`truncate`,children:u?.externalUrl??`Local runtime`})]}),(0,X.jsxs)(n,{gap:`lg`,wrap:`nowrap`,className:`runtime-status-facts`,children:[(0,X.jsxs)(d,{size:`xs`,c:`dimmed`,children:[`Version `,(0,X.jsx)(`strong`,{children:u?.runtimeVersion??`unavailable`})]}),(0,X.jsxs)(d,{size:`xs`,c:`dimmed`,children:[`Updated `,(0,X.jsx)(`strong`,{children:r.lastUpdatedAt??`never`})]})]})]}),(0,X.jsxs)(h,{cols:{base:2,sm:4},spacing:`sm`,className:`summary-grid`,children:[(0,X.jsx)(Xn,{label:`Enabled servers`,value:ot(r.configuredServers),tone:`good`,icon:`01`,href:`/admin/servers`,onNavigate:()=>t(`servers`)}),(0,X.jsx)(Xn,{label:`Disabled servers`,value:s,tone:`warn`,icon:`02`,href:`/admin/servers`,onNavigate:()=>t(`servers`)}),(0,X.jsx)(Xn,{label:`OAuth attention`,value:o,tone:o>0?`warn`:`good`,icon:`03`,href:`/admin/oauth`,onNavigate:()=>t(`oauth`)}),(0,X.jsx)(Xn,{label:`Failed audits`,value:a,tone:a>0?`bad`:`good`,icon:`04`,href:`/admin/audit`,onNavigate:()=>t(`audit`)})]}),(0,X.jsxs)(`div`,{className:`dashboard-grid`,children:[(0,X.jsxs)(`section`,{className:`attention-panel`,"aria-labelledby":`attention-title`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,mb:`sm`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{className:`eyebrow`,size:`xs`,children:`Triage`}),(0,X.jsx)(k,{id:`attention-title`,order:3,children:`Needs attention`})]}),(0,X.jsx)(m,{leftSection:(0,X.jsx)(fe,{size:16}),onClick:()=>void f(),children:`Configure server`})]}),(0,X.jsxs)(O,{gap:0,className:`attention-list`,children:[s>0?(0,X.jsx)(Yn,{icon:(0,X.jsx)(ge,{size:17}),label:`${s} disabled ${s===1?`server`:`servers`}`,detail:`Review availability before enabling a target.`,href:`/admin/servers`,onNavigate:()=>t(`servers`)}):null,o>0?(0,X.jsx)(Yn,{icon:(0,X.jsx)(De,{size:17}),label:`${o} OAuth ${o===1?`service needs`:`services need`} action`,detail:`Authorization or restart is required.`,href:`/admin/oauth`,onNavigate:()=>t(`oauth`)}):null,a>0?(0,X.jsx)(Yn,{icon:(0,X.jsx)(ve,{size:17}),label:`${a} failed ${a===1?`operation`:`operations`}`,detail:`Inspect recent redacted audit facts.`,href:`/admin/audit`,onNavigate:()=>t(`audit`)}):null,s===0&&o===0&&a===0?(0,X.jsxs)(`div`,{className:`attention-clear`,children:[(0,X.jsx)(he,{size:18}),(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{fw:800,children:`No action required`}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:`Configured servers and runtime services report a clear state.`})]})]}):null]})]}),(0,X.jsx)(Q,{title:`Runtime identity`,utility:`current target`,icon:(0,X.jsx)(`span`,{className:`runtime-live-dot`}),children:u?(0,X.jsxs)(h,{cols:1,spacing:`sm`,className:`runtime-identity-grid`,children:[(0,X.jsx)(Z,{label:`Version`,value:u.runtimeVersion}),(0,X.jsx)(Z,{label:`External URL`,value:u.externalUrl??`-`,copyLabel:`externalUrl`,onCopyText:p,wrapValue:!0}),(0,X.jsx)(Z,{label:`Runtime scope`,value:u.runtimeScopeId,copyLabel:`runtimeScopeId`,onCopyText:p,wrapValue:!0})]}):(0,X.jsx)(d,{c:`dimmed`,children:`Runtime status has not loaded.`})})]}),(0,X.jsx)(Zn,{message:c})]})}function Kn({model:e}){let{state:t,configuredServers:n}=e,r=n.create.state.status!==`idle`,i=n.edit.state.status!==`list`;return(0,X.jsxs)(`section`,{"aria-labelledby":`servers-workspace-title`,className:`operations-workspace`,children:[(0,X.jsx)(Jn,{title:`Configured servers`,titleId:`servers-workspace-title`,description:`${t.configuredServers.length} configured targets · updated ${t.lastUpdatedAt??`never`}`}),!r&&!i&&n.deletionNotice?(0,X.jsx)(kt,{result:n.deletionNotice,dismiss:n.dismissDeletionNotice}):null,(0,X.jsx)(`div`,{className:`inventory-column server-browse-workspace`,hidden:r||i,children:(0,X.jsx)(Rn,{state:t,onServerAction:n.mutate,onOpenServerDetail:n.edit.open,onConfigureCustomServer:n.create.open})}),r||i?(0,X.jsx)(`div`,{className:`server-task-workspace`,children:r?(0,X.jsx)(un,{model:n.create}):(0,X.jsx)(In,{model:n.edit,deleteModel:n.delete})}):null]})}function qn({model:e}){let{state:t,configuredServers:n}=e,[r,i]=(0,Y.useState)(null);async function a(e,t){try{await n.copy(e,t),i(`${wt(e)} copied.`)}catch{i(`Could not copy ${wt(e)}. Select the value manually.`)}}return(0,X.jsxs)(`section`,{"aria-labelledby":`audit-workspace-title`,className:`operations-workspace`,children:[(0,X.jsx)(Jn,{title:`Audit trail`,titleId:`audit-workspace-title`,description:`Recent redacted Admin Operations · updated ${t.lastUpdatedAt??`never`}`}),(0,X.jsx)(Wn,{facts:t.status?.audit.facts??[],onCopyText:a}),(0,X.jsx)(Zn,{message:r})]})}function Jn({title:e,titleId:t,description:r}){return(0,X.jsx)(n,{justify:`space-between`,align:`flex-start`,className:`workspace-heading`,children:(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{className:`eyebrow`,size:`xs`,children:`Operator workspace / live`}),(0,X.jsx)(k,{id:t,order:2,children:e}),(0,X.jsx)(d,{c:`dimmed`,size:`sm`,children:r})]})})}function Yn({icon:e,label:t,detail:n,href:r,onNavigate:i}){return(0,X.jsxs)(`a`,{className:`attention-row`,href:r,onClick:e=>{Qn(e)&&(e.preventDefault(),i())},children:[(0,X.jsx)(`span`,{className:`attention-icon`,children:e}),(0,X.jsxs)(`span`,{className:`attention-copy`,children:[(0,X.jsx)(d,{component:`span`,fw:800,size:`sm`,children:t}),(0,X.jsx)(d,{component:`span`,c:`dimmed`,size:`xs`,children:n})]}),(0,X.jsx)(ae,{size:16})]})}function Xn({label:e,value:t,tone:r,icon:i,href:a,onNavigate:o}){return(0,X.jsx)(b,{component:`a`,href:a,className:`summary-counter summary-link summary-${r}`,withBorder:!0,onClick:e=>{Qn(e)&&(e.preventDefault(),o())},children:(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,wrap:`nowrap`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{size:`xs`,c:`dimmed`,fw:800,tt:`uppercase`,children:e}),(0,X.jsx)(d,{className:`summary-value`,children:t})]}),(0,X.jsxs)(O,{gap:4,align:`flex-end`,children:[(0,X.jsx)(d,{className:`summary-index`,children:i}),(0,X.jsx)(ae,{size:15,"aria-hidden":`true`})]})]})})}function Zn({message:e}){return(0,X.jsx)(`div`,{"aria-live":`polite`,children:e?(0,X.jsx)(r,{color:e.startsWith(`Could not`)?`red`:`teal`,mt:`sm`,children:e}):null})}function Qn(e){return e.button===0&&!e.metaKey&&!e.ctrlKey&&!e.shiftKey&&!e.altKey}var $n=`modulepreload`,er=function(e){return`/admin/`+e},tr={},nr=function(e,t,n){let r=Promise.resolve();if(t&&t.length>0){let e=document.getElementsByTagName(`link`),i=document.querySelector(`meta[property=csp-nonce]`),a=i?.nonce||i?.getAttribute(`nonce`);function o(e){return Promise.all(e.map(e=>Promise.resolve(e).then(e=>({status:`fulfilled`,value:e}),e=>({status:`rejected`,reason:e}))))}function s(e){return import.meta.resolve?import.meta.resolve(e):new URL(e,new URL(`../../../src/node/plugins/importAnalysisBuild.ts`,import.meta.url)).href}r=o(t.map(t=>{if(t=er(t,n),t=s(t),t in tr)return;tr[t]=!0;let r=t.endsWith(`.css`);for(let n=e.length-1;n>=0;n--){let i=e[n];if(i.href===t&&(!r||i.rel===`stylesheet`))return}let i=document.createElement(`link`);if(i.rel=r?`stylesheet`:$n,r||(i.as=`script`),i.crossOrigin=``,i.href=t,a&&i.setAttribute(`nonce`,a),document.head.appendChild(i),r)return new Promise((e,n)=>{i.addEventListener(`load`,e),i.addEventListener(`error`,()=>n(Error(`Unable to preload CSS for ${t}`)))})}))}function i(e){let t=new Event(`vite:preloadError`,{cancelable:!0});if(t.payload=e,window.dispatchEvent(t),!t.defaultPrevented)throw e}return r.then(t=>{for(let e of t||[])e.status===`rejected`&&i(e.reason);return e().catch(i)})},rr=(0,Y.lazy)(()=>nr(()=>import(`./admin-AboutRuntimeWorkspace-DH2QC2nJ.js`).then(e=>({default:e.AboutRuntimeWorkspace})),__vite__mapDeps([0,1,2,3,4]))),ir=(0,Y.lazy)(()=>nr(()=>import(`./admin-BackendLogsWorkspace-DnPzXW3E.js`).then(e=>({default:e.BackendLogsWorkspace})),__vite__mapDeps([5,1,2,3,4,6]))),ar=(0,Y.lazy)(()=>nr(()=>import(`./admin-InstructionTemplatesWorkspace-B7beKEgz.js`).then(e=>({default:e.InstructionTemplatesWorkspace})),__vite__mapDeps([7,2,1,3,4,6]))),or=(0,Y.lazy)(()=>nr(()=>import(`./admin-OAuthServicesWorkspace-pgsV0qQs.js`).then(e=>({default:e.OAuthServicesWorkspace})),__vite__mapDeps([8,2,1,3,4,6]))),sr=(0,Y.lazy)(()=>nr(()=>import(`./admin-PresetAuthoringWorkspace-053b1zwU.js`).then(e=>({default:e.PresetAuthoringWorkspace})),__vite__mapDeps([9,2,1,3,4,6])));function cr({session:e}){let{state:t,loginBusy:r,navigation:i}=e,a=i.route,[o,s]=(0,Y.useState)(!1);if(t.view!==`console`)return(0,X.jsxs)(pr,{state:t,children:[t.view===`setupRequired`?(0,X.jsx)(hr,{}):null,t.view===`loading`||t.view===`login`?(0,X.jsx)(gr,{loading:t.view===`loading`||r,onLogin:e.login}):null]});return(0,X.jsxs)(X.Fragment,{children:[(0,X.jsx)(`a`,{className:`skip-link`,href:`#admin-main`,children:`Skip to main content`}),(0,X.jsxs)(j,{className:`admin-app-shell`,header:{height:66},navbar:{width:232,breakpoint:`md`,collapsed:{mobile:!o}},padding:0,children:[(0,X.jsx)(j.Header,{"aria-label":`Admin Console`,className:`admin-app-header`,children:(0,X.jsxs)(n,{h:`100%`,px:`lg`,justify:`space-between`,wrap:`nowrap`,className:`command-bar`,children:[(0,X.jsxs)(n,{gap:`sm`,wrap:`nowrap`,children:[(0,X.jsx)(te,{"aria-label":o?`Close operations navigation`:`Open operations navigation`,className:`mobile-navigation-toggle`,color:`var(--admin-ink)`,opened:o,size:`sm`,onClick:()=>s(e=>!e)}),(0,X.jsx)(`div`,{className:`brand-mark`,"aria-hidden":`true`,children:`1`}),(0,X.jsxs)(`div`,{className:`command-brand-copy`,children:[(0,X.jsx)(d,{className:`eyebrow command-eyebrow`,size:`xs`,children:`1MCP control plane`}),(0,X.jsx)(k,{order:1,size:`h4`,children:`Admin Console`})]})]}),(0,X.jsxs)(n,{gap:`xs`,wrap:`nowrap`,className:`global-actions`,children:[(0,X.jsxs)(`div`,{className:`runtime-live`,"aria-label":`Runtime online`,children:[(0,X.jsx)(`span`,{className:`runtime-live-dot`}),(0,X.jsx)(d,{size:`xs`,fw:800,children:`Runtime online`})]}),(0,X.jsx)(u,{className:`global-view-badge`,variant:`light`,color:Ct(t),children:St(t)}),(0,X.jsx)(g,{label:`Refresh runtime data`,children:(0,X.jsx)(c,{"aria-label":`Refresh runtime data`,color:`gray`,size:`lg`,variant:`subtle`,onClick:()=>void e.refresh(),children:(0,X.jsx)(_e,{size:17})})}),(0,X.jsx)(mr,{}),(0,X.jsxs)(`div`,{className:`operator-identity`,title:t.session?.account.role??`Admin session`,children:[(0,X.jsx)(Ce,{size:16}),(0,X.jsx)(d,{className:`operator-name`,fw:700,size:`sm`,children:t.session?.account.username??`Operator`})]}),(0,X.jsx)(g,{label:`Log out`,children:(0,X.jsx)(c,{"aria-label":`Log out`,color:`red`,size:`lg`,variant:`subtle`,onClick:()=>void e.logout(),children:(0,X.jsx)(le,{size:17})})})]})]})}),(0,X.jsxs)(j.Navbar,{className:`admin-app-navbar`,"aria-label":`Operations navigation`,children:[(0,X.jsxs)(O,{gap:`lg`,className:`nav-stack`,children:[(0,X.jsxs)(O,{gap:4,children:[(0,X.jsx)(d,{className:`nav-section-label`,children:`Manage`}),(0,X.jsx)(dr,{icon:(0,X.jsx)(W,{size:17}),label:`Overview`,href:`/admin`,active:a===`dashboard`,onNavigate:()=>l(`dashboard`)}),(0,X.jsx)(dr,{icon:(0,X.jsx)(ie,{size:17}),label:`Server inventory`,href:`/admin/servers`,active:a===`servers`,onNavigate:()=>l(`servers`)}),(0,X.jsx)(dr,{icon:(0,X.jsx)(Se,{size:17}),label:`Presets`,href:`/admin/presets`,active:a===`presets`,onNavigate:()=>l(`presets`)}),(0,X.jsx)(dr,{icon:(0,X.jsx)(Ee,{size:17}),label:`Instructions`,href:`/admin/instructions`,active:a===`instructions`,onNavigate:()=>l(`instructions`)})]}),(0,X.jsxs)(O,{gap:4,children:[(0,X.jsx)(d,{className:`nav-section-label`,children:`Observe`}),(0,X.jsx)(dr,{icon:(0,X.jsx)(ue,{size:17}),label:`OAuth services`,href:`/admin/oauth`,active:a===`oauth`,onNavigate:()=>l(`oauth`)}),(0,X.jsx)(dr,{icon:(0,X.jsx)(G,{size:17}),label:`Audit trail`,href:`/admin/audit`,active:a===`audit`,onNavigate:()=>l(`audit`)}),(0,X.jsx)(dr,{icon:(0,X.jsx)(ye,{size:17}),label:`Backend logs`,href:`/admin/logs`,active:a===`logs`,onNavigate:()=>l(`logs`)})]}),(0,X.jsxs)(O,{gap:4,children:[(0,X.jsx)(d,{className:`nav-section-label`,children:`System`}),(0,X.jsx)(dr,{icon:(0,X.jsx)(se,{size:17}),label:`About`,href:`/admin/about`,active:a===`about`,onNavigate:()=>l(`about`)})]})]}),(0,X.jsxs)(O,{gap:`xs`,className:`nav-runtime-card`,children:[(0,X.jsx)(d,{className:`nav-section-label`,children:`Runtime target`}),(0,X.jsx)(d,{fw:800,className:`truncate`,children:bt(t.status?.runtime)}),(0,X.jsx)(d,{size:`xs`,c:`dimmed`,className:`truncate`,children:xt(t.status?.runtime)}),(0,X.jsx)(d,{size:`xs`,className:`nav-scope truncate`,children:t.status?.runtime.runtimeScopeId??`scope unavailable`})]})]}),(0,X.jsx)(j.Main,{id:`admin-main`,className:`admin-shell-main`,children:(0,X.jsxs)(O,{gap:`md`,className:`admin-console`,children:[(0,X.jsx)(_r,{state:t}),(0,X.jsx)(Y.Suspense,{fallback:(0,X.jsx)(lr,{}),children:(0,X.jsx)(ur,{session:e})})]})})]})]});function l(e){i.navigate(e),s(!1)}}function lr(){return(0,X.jsx)(b,{className:`operations-panel`,role:`status`,withBorder:!0,children:(0,X.jsx)(d,{c:`dimmed`,children:`Loading workspace...`})})}function ur({session:e}){let{state:t,navigation:n,configuredServers:r,presets:i}=e,a={state:t,logout:e.logout,refresh:e.refresh,configuredServers:r};switch(n.route){case`servers`:return(0,X.jsx)(Kn,{model:a});case`oauth`:return(0,X.jsx)(or,{model:a,oauth:e.oauth,configureServer:a.configuredServers.create.open});case`audit`:return(0,X.jsx)(qn,{model:a});case`presets`:return(0,X.jsx)(sr,{model:{...i,targets:i.targets.length>0?i.targets:t.configuredServers.map(e=>({name:e.id,tags:e.tags,enabled:e.enabled}))},runtimeScopeId:t.status?.runtime.runtimeScopeId});case`instructions`:return(0,X.jsx)(ar,{model:e.instructions,runtimeScopeId:t.status?.runtime.runtimeScopeId});case`logs`:return(0,X.jsx)(ir,{logs:e.logs,configureServer:a.configuredServers.create.open});case`about`:return(0,X.jsx)(rr,{state:t});case`dashboard`:return(0,X.jsx)(Gn,{model:a,navigate:n.navigate})}}function dr({icon:e,label:t,href:n,active:r=!1,onNavigate:i}){return(0,X.jsxs)(`a`,{href:n,"aria-current":r?`page`:void 0,className:`nav-item${r?` nav-item-active`:``}`,onClick:e=>{fr(e)&&(e.preventDefault(),i?.())},children:[e,(0,X.jsx)(d,{size:`sm`,fw:700,children:t})]})}function fr(e){return e.button===0&&!e.metaKey&&!e.ctrlKey&&!e.shiftKey&&!e.altKey}function pr({state:e,children:t}){return(0,X.jsxs)(`main`,{className:`admin-auth-shell`,"aria-label":`Admin authentication`,children:[(0,X.jsx)(`div`,{className:`auth-theme-control`,children:(0,X.jsx)(mr,{})}),(0,X.jsxs)(O,{gap:`md`,className:`admin-auth-card`,children:[(0,X.jsx)(_r,{state:e}),t]})]})}function mr(){let{colorScheme:e,setColorScheme:t}=l(),n=[{value:`auto`,label:`System`,icon:(0,X.jsx)(Oe,{size:16})},{value:`light`,label:`Light`,icon:(0,X.jsx)(pe,{size:16})},{value:`dark`,label:`Dark`,icon:(0,X.jsx)(Te,{size:16})}];return(0,X.jsxs)(v,{position:`bottom-end`,shadow:`md`,width:170,children:[(0,X.jsx)(v.Target,{children:(0,X.jsx)(c,{"aria-label":`Choose color theme`,color:`gray`,size:`lg`,title:`Color theme`,variant:`subtle`,children:(0,X.jsx)(ce,{size:17})})}),(0,X.jsxs)(v.Dropdown,{children:[(0,X.jsx)(v.Label,{children:`Color theme`}),n.map(n=>(0,X.jsx)(v.Item,{"aria-label":`${n.label} theme${e===n.value?`, selected`:``}`,leftSection:n.icon,rightSection:e===n.value?(0,X.jsx)(me,{size:14}):null,onClick:()=>t(n.value),children:n.label},n.value))]})]})}function hr(){return(0,X.jsx)(b,{component:`section`,className:`operations-panel`,"aria-labelledby":`setup-required-title`,withBorder:!0,children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{className:`eyebrow`,size:`xs`,children:`Runtime gate`}),(0,X.jsx)(k,{id:`setup-required-title`,order:2,children:`Setup required`})]}),(0,X.jsx)(u,{color:`yellow`,variant:`filled`,children:`No Admin Account`})]}),(0,X.jsx)(d,{c:`dimmed`,children:`Run CLI bootstrap from the runtime host, then refresh this page. The browser setup page does not create admin accounts.`}),(0,X.jsx)(M,{block:!0,children:`1mcp admin bootstrap --username operator --password 'use-a-long-random-password'`})]})})}function gr({loading:e,onLogin:t}){let[r,i]=(0,Y.useState)(``),[a,o]=(0,Y.useState)(``),[s,c]=(0,Y.useState)(!1);return(0,X.jsx)(b,{component:`section`,className:`login-panel`,"aria-labelledby":`login-title`,withBorder:!0,children:(0,X.jsx)(`form`,{onSubmit:n=>{n.preventDefault(),e||t?.({username:r,password:a})},children:(0,X.jsxs)(O,{gap:`sm`,children:[(0,X.jsxs)(n,{justify:`space-between`,align:`flex-start`,children:[(0,X.jsxs)(`div`,{children:[(0,X.jsx)(d,{className:`eyebrow`,size:`xs`,children:`Admin Session`}),(0,X.jsx)(k,{id:`login-title`,order:2,children:`Operator login`})]}),(0,X.jsx)(u,{variant:`light`,children:e?`Checking session`:`Login required`})]}),(0,X.jsx)(w,{label:`Username`,autoComplete:`username`,disabled:e,value:r,onChange:e=>i(e.currentTarget.value),required:!0}),(0,X.jsx)(E,{label:`Password`,autoComplete:`current-password`,disabled:e,value:a,onChange:e=>o(e.currentTarget.value),visible:s,onVisibilityChange:()=>c(e=>!e),visibilityToggleButtonProps:{"aria-label":s?`Hide password`:`Show password`,"aria-pressed":s,tabIndex:0,onKeyDown:e=>{e.key===`Enter`&&(e.preventDefault(),c(e=>!e))}},required:!0}),(0,X.jsx)(m,{type:`submit`,loading:e,disabled:e,children:e?`Checking`:`Log in`})]})})})}function _r({state:e}){let t=e.banner??(e.error?{kind:`error`,message:e.error}:null);return t?(0,X.jsx)(r,{color:t.kind===`error`?`red`:`teal`,role:t.kind===`error`?`alert`:`status`,children:t.message}):null}var vr=e(N(),1),yr=(0,Y.createContext)(null);function br({children:e}){let[r,i]=(0,Y.useState)(null),a=(0,Y.useRef)(null),o=(0,Y.useRef)([]),s=(0,Y.useRef)(new WeakSet),c=(0,Y.useRef)(!1),l=(0,Y.useRef)(null),u=(0,Y.useRef)(null),p=(0,Y.useCallback)(e=>new Promise(t=>{let n={...e,resolve:t};if(a.current){o.current.push(n);return}u.current=document.activeElement instanceof HTMLElement?document.activeElement:null,a.current=n,(0,vr.flushSync)(()=>i(n))}),[]),h=(0,Y.useCallback)(e=>{let t=a.current;if(!t||c.current||s.current.has(t))return;c.current=!0,s.current.add(t),t.resolve(e);let n=o.current.shift()??null;a.current=n,(0,vr.flushSync)(()=>i(n)),window.setTimeout(()=>{c.current=!1,n?l.current?.focus():u.current?.focus()},0)},[]),g=(0,Y.useMemo)(()=>p,[p]);return(0,Y.useEffect)(()=>{r&&l.current?.focus()},[r]),(0,X.jsxs)(yr.Provider,{value:g,children:[e,r?(0,X.jsx)(`div`,{className:`confirmation-overlay`,role:`presentation`,children:(0,X.jsx)(t,{active:!0,children:(0,X.jsx)(b,{className:`confirmation-dialog`,withBorder:!0,role:`dialog`,"aria-modal":`true`,"aria-labelledby":`admin-confirmation-title`,"aria-describedby":`admin-confirmation-message`,onKeyDown:e=>{e.key===`Escape`&&(e.preventDefault(),e.stopPropagation(),h(!1))},children:(0,X.jsxs)(O,{gap:`md`,children:[(0,X.jsx)(k,{id:`admin-confirmation-title`,order:3,children:r.title}),(0,X.jsx)(d,{id:`admin-confirmation-message`,children:r.message}),r.details?.length?(0,X.jsx)(f,{spacing:`xs`,size:`sm`,children:r.details.map(e=>(0,X.jsxs)(f.Item,{children:[(0,X.jsxs)(d,{span:!0,fw:700,children:[e.label,`:`,` `]}),(0,X.jsx)(d,{span:!0,children:e.value})]},`${e.label}:${e.value}`))}):null,(0,X.jsxs)(n,{justify:`flex-end`,children:[(0,X.jsx)(m,{ref:l,variant:`default`,onClick:()=>h(!1),children:r.cancelLabel??`Cancel`}),(0,X.jsx)(m,{color:r.tone===`danger`?`red`:void 0,onClick:()=>h(!0),children:r.confirmLabel??`Confirm`})]})]})})})}):null]})}function xr(){let e=(0,Y.useContext)(yr);if(!e)throw Error(`useConfirmationDialog must be used within ConfirmationDialogProvider`);return e}function Sr({api:e,session:t,onUnauthenticated:n,onDeleted:r}){let[i,a]=(0,Y.useReducer)(Et,void 0,Tt),o=(0,Y.useRef)(i),s=(0,Y.useRef)(0),c=(0,Y.useRef)();o.current=i;let l=(0,Y.useCallback)(()=>{s.current+=1,c.current=void 0,a({type:`reset`})},[]),u=(0,Y.useCallback)((e,t,r=!1)=>{if(e instanceof q&&e.failure.kind===`unauthenticated`){l(),n(e.failure.adminStatus);return}let i=e instanceof q?e.failure.message:String(e);a({type:`applyFailed`,message:`${t}: ${i}`,clearPreview:r})},[n,l]);return{state:i,preview:(0,Y.useCallback)(async r=>{if(!t||o.current.previewBusy||o.current.applyBusy)return;let i=++s.current;a({type:`previewStarted`});try{let n=await e.previewConfiguredServerDelete({target:r,csrfToken:t.csrfToken});if(i!==s.current)return;c.current=void 0,a({type:`previewSucceeded`,preview:n.preview})}catch(e){if(i!==s.current)return;if(e instanceof q&&e.failure.kind===`unauthenticated`){l(),n(e.failure.adminStatus);return}a({type:`previewFailed`,message:`Delete preview failed: ${e instanceof q?e.failure.message:String(e)}`})}},[e,n,l,t]),changeConfirmation:(0,Y.useCallback)(e=>{a({type:`confirmationChanged`,value:e})},[]),apply:(0,Y.useCallback)(async n=>{let i=o.current;if(!t||!i.preview||i.applyBusy||i.confirmation!==i.preview.qualifiedId)return;let l=++s.current,d=c.current?.previewFingerprint===i.preview.previewFingerprint?c.current:{previewFingerprint:i.preview.previewFingerprint,idempotencyKey:Ge(i.preview.qualifiedId)};c.current=d,a({type:`applyStarted`});try{let o=await e.deleteConfiguredServer({target:n,csrfToken:t.csrfToken,idempotencyKey:d.idempotencyKey,previewFingerprint:i.preview.previewFingerprint,confirmedIdentity:i.confirmation});if(l!==s.current)return;c.current=void 0,a({type:`applySucceeded`,result:o.result}),await r(n,o.result)}catch(e){if(l!==s.current)return;let t=e instanceof q&&e.failure.kind===`rejected`&&[`configured_server_stale_preview`,`configured_server_already_removed`,`configured_server_source_changed`].includes(e.failure.code);t&&(c.current=void 0),u(e,`Delete failed`,t)}},[e,u,r,l,t]),reset:l}}var Cr={identity:``,variants:{initialization:``,cli:``}};function wr({api:e,active:t,csrfToken:n,confirm:r,onUnauthenticated:i}){let[a,o]=(0,Y.useState)([]),[s,c]=(0,Y.useState)(),[l,u]=(0,Y.useState)(!1),[d,f]=(0,Y.useState)(``),[p,m]=(0,Y.useState)(!1),[h,g]=(0,Y.useState)({}),[_,v]=(0,Y.useState)(),[y,b]=(0,Y.useState)(Cr),[x,S]=(0,Y.useState)(`initialize`),[C,w]=(0,Y.useState)({mode:`all`}),[T,E]=(0,Y.useState)(``),[D,O]=(0,Y.useState)(null),[k,A]=(0,Y.useState)(null),[ee,j]=(0,Y.useState)(!1),[te,M]=(0,Y.useState)(!1),[ne,N]=(0,Y.useState)(null),[P,re]=(0,Y.useState)(null),F=(0,Y.useRef)(!1),I=(0,Y.useRef)(0),L=(0,Y.useRef)(n),R=(0,Y.useRef)(),z=(0,Y.useCallback)((e,t)=>{if(e instanceof q&&e.failure.kind===`unauthenticated`){F.current=!1,i?.(e.failure.adminStatus);return}N(Er(e,t))},[i]),B=(0,Y.useMemo)(()=>a.find(e=>e.identity===_),[a,_]),V=B?B.identity!==y.identity||JSON.stringify(B.variants)!==JSON.stringify(y.variants):!!(y.identity||y.variants.initialization||y.variants.cli),H=(0,Y.useCallback)(()=>{R.current=void 0,O(e=>(e&&j(!0),null)),A(null)},[]),U=(0,Y.useCallback)(async()=>{if(!n)return;let t=I.current,r=n;M(!0),N(null);try{let i=await e.listInstructionTemplates();if(t!==I.current||r!==n)return;o(i.templates),c(i.activeIdentity),u(i.selectionExplicit),f(i.configFingerprint),m(i.legacyImportAvailable),g(i.renderFailures),F.current=!0}catch(e){if(t!==I.current||r!==n)return;z(e,`Instruction templates could not be loaded.`)}finally{t===I.current&&r===n&&M(!1)}},[e,n,z]);(0,Y.useEffect)(()=>{L.current!==n&&(L.current=n,I.current+=1,F.current=!1),!n&&(o([]),v(void 0),b(Cr),O(null),A(null),M(!1))},[n]),(0,Y.useEffect)(()=>{t&&n&&!F.current&&U()},[t,n,U]);let W=(0,Y.useCallback)(e=>{v(e);let t=a.find(t=>t.identity===e);b(t?{identity:t.identity,variants:{...t.variants}}:Cr),O(null),A(null),j(!1),N(null)},[a]),G=(0,Y.useCallback)(async(e,t)=>{if(!n)return!1;let r=R.current?.signature===e?R.current:{signature:e,idempotencyKey:qe(e,y.identity)};R.current=r,M(!0),N(null);try{let e=await t(r.idempotencyKey);return re(e.result.reload?.status===`failed`?e.result.reload.error?`Configuration was written, but runtime reload failed: ${e.result.reload.error}`:`Configuration was written, but runtime reload failed. Inspect runtime health before continuing.`:null),R.current=void 0,F.current=!1,await U(),!0}catch(e){return z(e,`Instruction template operation failed.`),!1}finally{M(!1)}},[n,y.identity,U,z]);return{items:a,activeIdentity:s,selectionExplicit:l,configFingerprint:d,legacyAvailable:p,renderFailures:h,selectedIdentity:_,draft:y,surface:x,selection:C,requestContext:T,preview:D,activationValidation:k,previewStale:ee,dirty:V,busy:te,error:ne,reloadWarning:P,select:W,newDraft:()=>W(void 0),changeIdentity:e=>{b(t=>({...t,identity:e})),H()},changeVariant:(e,t)=>{let n=e===`initialize`?`initialization`:`cli`;b(e=>({...e,variants:{...e.variants,[n]:t}})),H()},changeSurface:e=>{S(e),H()},changeSelection:e=>{w(e),H()},changeRequestContext:e=>{E(e),H()},load:U,async saveDraft(){if(!n||!y.identity.trim())return!1;let t=await G(`save:${_?`update`:`create`}:${d}:${JSON.stringify(y)}`,t=>e.saveInstructionTemplate({action:_?`update`:`create`,draft:y,expectedConfigFingerprint:d,csrfToken:n,idempotencyKey:t}));return t&&v(y.identity),t},async previewDraft(){if(!n||!y.identity)return;let t=I.current,r=n;M(!0),N(null);try{let i;T.trim()&&(i=Tr(JSON.parse(T)));let a=await e.previewInstructionTemplate({identity:y.identity,surface:x,selection:C,...i?{requestContext:i}:{},csrfToken:n});if(t!==I.current||r!==n)return;O(a),j(!1)}catch(e){if(t!==I.current||r!==n)return;z(e,`Instruction template preview failed.`)}finally{t===I.current&&r===n&&M(!1)}},async validateDraft(){if(!n||!_||V)return;let t=I.current,r=n;M(!0),N(null);try{let i=await e.validateInstructionTemplate({identity:_,expectedConfigFingerprint:d,csrfToken:n});if(t!==I.current||r!==n)return;A(i)}catch(e){if(t!==I.current||r!==n)return;z(e,`Instruction template validation failed.`)}finally{t===I.current&&r===n&&M(!1)}},async activate(){!n||!k||k.identity!==y.identity||await G(`activate:${y.identity}:${k.expectedConfigFingerprint}:${k.previewFingerprint}`,t=>e.activateInstructionTemplate({identity:y.identity,expectedConfigFingerprint:k.expectedConfigFingerprint,previewFingerprint:k.previewFingerprint,csrfToken:n,idempotencyKey:t}))&&(O(null),A(null))},async clone(t){!n||!_||await G(`clone:${_}:${t}:${d}`,r=>e.cloneInstructionTemplate({sourceIdentity:_,identity:t,expectedConfigFingerprint:d,csrfToken:n,idempotencyKey:r}))},async importLegacy(t){n&&await G(`import:${t}:${d}`,r=>e.importLegacyInstructionTemplate({identity:t,expectedConfigFingerprint:d,csrfToken:n,idempotencyKey:r}))},async deleteSelected(){if(!(!n||!_||B?.protected))try{let t=await e.previewInstructionTemplateDelete({identity:_,expectedConfigFingerprint:d,csrfToken:n});if(!t.allowed){N(t.reason===`active_conflict`?`Activate another template before deleting this one.`:`This template cannot be deleted.`);return}if(!await r({title:`Delete ${t.identity}?`,message:`This permanently removes the managed template from the current Runtime Scope.`,confirmLabel:`Delete template`,tone:`danger`,details:[{label:`Template`,value:t.identity},{label:`Reason`,value:t.reason??`Template is inactive and not protected`}]}))return;await G(`delete:${_}:${t.expectedConfigFingerprint}:${t.previewFingerprint}`,r=>e.deleteInstructionTemplate({identity:_,expectedConfigFingerprint:t.expectedConfigFingerprint,previewFingerprint:t.previewFingerprint,csrfToken:n,idempotencyKey:r}))&&W(void 0)}catch(e){z(e,`Instruction template deletion could not be prepared.`)}}}}function Tr(e){if(!e||typeof e!=`object`||Array.isArray(e))throw Error(`Request context must include project, user, and environment objects.`);let t=e;for(let e of[`project`,`user`,`environment`]){let n=t[e];if(!n||typeof n!=`object`||Array.isArray(n))throw Error(`Request context must include project, user, and environment objects.`)}return t}function Er(e,t){return e instanceof q?e.failure.message:e instanceof Error?e.message:t}function Dr(){return{view:`loading`,session:null,status:null,configuredServers:[],serverMutations:{},banner:null,error:null,lastUpdatedAt:null}}function Or(e,t){switch(t.type){case`sessionLoaded`:return{...e,view:`console`,session:t.session,banner:null,error:null};case`sessionUnauthenticated`:return{...Dr(),view:t.adminStatus===`setupRequired`?`setupRequired`:`login`,session:null};case`refreshSucceeded`:return{...e,view:`console`,status:t.status,configuredServers:t.configuredServers,lastUpdatedAt:t.updatedAt,banner:e.banner?.kind===`error`?null:e.banner,error:null};case`refreshFailed`:case`loginFailed`:return{...e,error:t.message,banner:{kind:`error`,message:t.message}};case`logoutSucceeded`:return{...Dr(),view:`login`};case`mutationStarted`:return kr(e,t.serverId,{state:`busy`,action:t.action});case`mutationSucceeded`:return kr(e,t.serverId,{state:`succeeded`,action:t.action,message:`Server ${t.action} completed.`});case`mutationFailed`:return kr(e,t.serverId,{state:`failed`,action:t.action,message:t.message});case`clearBanner`:return{...e,banner:null,error:null}}}function kr(e,t,n){return{...e,serverMutations:{...e.serverMutations,[t]:n},banner:n.state===`failed`?{kind:`error`,message:n.message??``}:e.banner}}var Ar=5e3,jr=6e4;function Mr(e){return e===`visible`?Ar:jr}function Nr(e){return e.view===`console`&&!!e.session?.csrfToken}var Pr=5e3,Fr=512*1024,Ir={connection:`idle`,sources:[],selectedSourceId:null,entries:[],unread:{},cursors:{},selectionLoading:!1,selectionError:null};function Lr(e){let[t,n]=(0,Y.useState)(Ir),r=(0,Y.useRef)(t),i=(0,Y.useRef)([]),a=(0,Y.useRef)(e.onUnauthenticated),o=(0,Y.useRef)(0);(0,Y.useEffect)(()=>{r.current=t},[t]),(0,Y.useEffect)(()=>{a.current=e.onUnauthenticated},[e.onUnauthenticated]);let s=(0,Y.useCallback)(e=>{i.current=e.sources,n(t=>{let n=e.sources.some(e=>e.id===t.selectedSourceId)?t.selectedSourceId:e.sources[0]?.id??null;return{connection:`active`,sources:e.sources,selectedSourceId:n,entries:n?Wr(e.entries.filter(e=>e.sourceId===n)):[],unread:Ur(e,n),cursors:Br(e.entries),selectionLoading:!1,selectionError:null}})},[]),c=(0,Y.useCallback)(async t=>{let r=++o.current;n(e=>({...e,selectedSourceId:t,entries:[],unread:{...e.unread,[t]:0},selectionLoading:!0,selectionError:null}));try{let i=await e.api.getBackendLogSnapshot(t);if(o.current!==r)return;n(e=>{if(e.selectedSourceId!==t)return e;let n=i.entries.filter(e=>e.sourceId===t),r=e.entries.filter(e=>e.sequence>i.sequence);return{...e,entries:Wr([...n,...r]),selectionLoading:!1,selectionError:null}})}catch(e){if(o.current!==r)return;if(e instanceof q&&e.failure.kind===`unauthenticated`){a.current();return}n(e=>e.selectedSourceId===t?{...e,selectionLoading:!1,selectionError:`Failed to load retained backend logs. Live entries will continue to appear.`}:e)}},[e.api]);(0,Y.useEffect)(()=>{if(!e.active||!e.authenticated){o.current+=1,i.current=[],n(Ir);return}return n(e=>({...e,connection:`loading`})),e.api.openBackendLogStream({onSnapshot:s,onGap:s,onEntry:e=>{i.current.some(t=>t.id===e.sourceId)||(i.current=[...i.current,zr(e)]),n(t=>Rr(t,e))},onSources:e=>{i.current=e;let t=r.current,a=e.some(e=>e.id===t.selectedSourceId)?t.selectedSourceId:e[0]?.id??null;n(t=>Vr(t,e,a)),a&&a!==t.selectedSourceId&&c(a)},onSourceUpdate:e=>{let t=r.current,a=e.removed?i.current.filter(t=>t.id!==e.sourceId):[...i.current.filter(t=>t.id!==e.sourceId),e.source].sort((e,t)=>e.id.localeCompare(t.id));i.current=a;let o=a.some(e=>e.id===t.selectedSourceId)?t.selectedSourceId:a[0]?.id??null;n(e=>Vr(e,a,o)),o&&o!==t.selectedSourceId&&c(o)},onOpen:()=>n(e=>({...e,connection:e.sources.length?`active`:`loading`})),onError:()=>n(e=>({...e,connection:`reconnecting`}))})},[s,e.active,e.api,e.authenticated,c]);let l=(0,Y.useCallback)(e=>c(e),[c]);return{...t,select:l}}function Rr(e,t){let n=e.sources.some(e=>e.id===t.sourceId)?e.sources:[...e.sources,zr(t)];return e.selectedSourceId===null?{...e,connection:`active`,sources:n,selectedSourceId:t.sourceId,entries:[t],unread:{...e.unread,[t.sourceId]:0},cursors:{...e.cursors,[t.sourceId]:t.sequence},selectionLoading:!1,selectionError:null}:t.sourceId===e.selectedSourceId?{...e,connection:`active`,sources:n,entries:Wr([...e.entries,t]),cursors:{...e.cursors,[t.sourceId]:t.sequence}}:{...e,connection:`active`,sources:n,unread:{...e.unread,[t.sourceId]:(e.unread[t.sourceId]??0)+1},cursors:{...e.cursors,[t.sourceId]:t.sequence}}}function zr(e){return{id:e.sourceId,canonicalName:e.canonicalName,displayName:e.displayName,kind:e.sourceKind,capture:`managed`,lifecycle:`active`}}function Br(e){let t={};for(let n of e)t[n.sourceId]=n.sequence;return t}function Vr(e,t,n){let r=new Set(t.map(e=>e.id)),i=n!==e.selectedSourceId;return{...e,sources:t,selectedSourceId:n,entries:i?[]:e.entries,unread:Hr(e.unread,r),cursors:Hr(e.cursors,r),selectionLoading:i&&n!==null,selectionError:i?null:e.selectionError}}function Hr(e,t){return Object.fromEntries(Object.entries(e).filter(([e])=>t.has(e)))}function Ur(e,t){let n={};for(let r of e.entries)r.sourceId!==t&&(n[r.sourceId]=(n[r.sourceId]??0)+1);return n}function Wr(e){let t=0,n=[];for(let r=e.length-1;r>=0&&n.length<Pr;r--){let i=e[r];if(t+=i.content.length,t>Fr&&n.length>0)break;n.push(i)}return n.reverse()}var Gr={access_denied:`OAuth authorization was denied.`,missing_code:`The OAuth provider callback did not include an authorization code.`,callback_failed:`The runtime could not complete the OAuth provider callback.`,runtime_unavailable:`The OAuth runtime became unavailable during the callback.`};function Kr(e){if(e instanceof q)return e.failure.message;throw e}function qr({api:e,documentRef:t=document,windowRef:n=window,nowLabel:r}){return(0,X.jsx)(br,{children:(0,X.jsx)(Jr,{api:e,documentRef:t,windowRef:n,nowLabel:r})})}function Jr({api:e,documentRef:t,windowRef:n,nowLabel:r}){return(0,X.jsx)(cr,{session:Yr({api:e,documentRef:t,windowRef:n,nowLabel:r,confirm:xr()})})}function Yr({api:e,documentRef:t,windowRef:n,nowLabel:r,confirm:i}){let[a,o]=(0,Y.useState)(Dr),[s,c]=(0,Y.useState)(!1),[l,u]=(0,Y.useState)(()=>Zr(n.location?.pathname??`/admin`)),[d,f]=(0,Y.useState)(null),[p]=(0,Y.useState)(()=>{let e=$r(n.location?.search??``);return e&&n.history?.replaceState(null,``,`/admin/oauth`),e}),[m,h]=(0,Y.useState)(null),[g,_]=(0,Y.useState)([]),[v,y]=(0,Y.useState)([]),[b,x]=(0,Y.useState)(``),[S,C]=(0,Y.useState)(!1),[w,T]=(0,Y.useState)(null),E=(0,Y.useRef)(a),D=(0,Y.useRef)(null),O=(0,Y.useRef)(),k=(0,Y.useRef)(),A=(0,Y.useRef)(),ee=(0,Y.useRef)(!1),j=(0,Y.useRef)(!1),te=(0,Y.useRef)(!1),M=(0,Y.useRef)(0),ne=(0,Y.useCallback)(()=>r?.()??new Date().toLocaleTimeString(),[r]),N=(0,Y.useCallback)(e=>{let t=Or(E.current,e);E.current=t,o(t)},[]);(0,Y.useEffect)(()=>{E.current=a},[a]);let P=(0,Y.useCallback)(()=>{D.current!==null&&(n.clearTimeout(D.current),D.current=null)},[n]),re=(0,Y.useCallback)(()=>{M.current+=1,te.current=!1,f(null),h(null)},[]),F=(0,Y.useCallback)(e=>{P(),re(),T(null),N({type:`sessionUnauthenticated`,adminStatus:e})},[P,N,re]),I=(0,Y.useCallback)(e=>{let t=e instanceof q?e.failure:null;return t?.kind===`unauthenticated`?(F(t.adminStatus),!0):!1},[F]),L=(0,Y.useMemo)(()=>({pathname:()=>n.location?.pathname??`/admin`,push:e=>n.history?.pushState(null,``,e),replace:e=>n.history?.replaceState(null,``,e),confirm:i,subscribePopState:e=>(n.addEventListener?.(`popstate`,e),()=>n.removeEventListener?.(`popstate`,e))}),[i,n]),R=(0,Y.useCallback)(e=>{u(Zr(e))},[]),z=wn({api:e,session:a.session,browser:L,onUnauthenticated:F,onApplied:()=>O.current?.(),onPathCommitted:R}),B=Zt({api:e,session:a.session,browser:L,onUnauthenticated:F,onCreated:()=>k.current?.(),onOpenCreated:z.open,onPathCommitted:R}),V=Sr({api:e,session:a.session,onUnauthenticated:F,onDeleted:(e,t)=>A.current?.(e,t)}),H=Lr({api:e,active:l===`logs`,authenticated:!!a.session,onUnauthenticated:()=>F(`loginRequired`)}),U=wr({api:e,active:l===`instructions`,csrfToken:a.session?.csrfToken,confirm:i,onUnauthenticated:F}),W=(0,Y.useCallback)(e=>E.current.session?.csrfToken===e,[]),G=(0,Y.useCallback)(async()=>{if(E.current.session){C(!0);try{let t=await e.listPresets();_(t.presets),y(t.targets??[]),x(t.revision)}finally{C(!1)}}},[e]);(0,Y.useEffect)(()=>{l===`presets`&&a.session&&G()},[G,l,a.session]);let ie=(0,Y.useCallback)(async(t,n)=>{let r=E.current.session?.csrfToken;if(!r)throw Error(`admin_session_required`);return e.previewPreset({draft:t,sourceName:n,csrfToken:r})},[e]),ae=(0,Y.useCallback)(async t=>{if(ee.current)return!1;ee.current=!0;try{let n=E.current.session?.csrfToken;return!n||!await i({title:`${Xr(t.action)} ${t.preview.draft.name}?`,message:`The preview must still match the current preset store when this change is saved.`,confirmLabel:`${Xr(t.action)} preset`,details:[{label:`Preset`,value:t.preview.draft.name},{label:`Current matches`,value:String(t.preview.matchCount)},...t.preview.matchCount===0?[{label:`Attention`,value:`This preset currently matches no configured servers.`}]:[]]})?!1:(await e.mutatePreset({action:t.action,sourceName:t.sourceName,draft:t.preview.draft,revision:t.preview.revision,previewFingerprint:t.preview.previewFingerprint,confirmations:{previewConfirmed:t.preview.previewFingerprint,...t.preview.matchCount===0?{zeroMatchConfirmed:!0}:{}},csrfToken:n}),await G(),!0)}finally{ee.current=!1}},[e,i,G]),oe=(0,Y.useCallback)(async t=>{if(!j.current){j.current=!0;try{let n=E.current.session?.csrfToken;if(!n)return;let r=await e.previewPresetDelete({name:t,revision:b,csrfToken:n}),a=r.matches.filter(e=>e.matched).map(e=>e.name);if(!await i({title:`Delete ${t}?`,message:`This removes the preset from the current Runtime Scope.`,confirmLabel:`Delete preset`,tone:`danger`,details:[{label:`Preset`,value:t},{label:`Current matches`,value:a.join(`, `)||`none`},{label:`Consequence`,value:r.consequence}]}))return;await e.deletePreset({name:t,revision:b,previewFingerprint:r.previewFingerprint,csrfToken:n}),await G()}finally{j.current=!1}}},[e,i,G,b]),se=(0,Y.useCallback)(async e=>{let t=Qr(e);if(B.state.status!==`idle`){if(!await B.close(t))return;u(e);return}await z.close(t)&&u(e)},[B,z]),K=(0,Y.useCallback)(async(t,n)=>{let r=n??E.current.session;if(!r)return;let i=r.csrfToken;try{let[t,n]=await Promise.all([e.getStatus(),e.listConfiguredServers()]);if(!W(i))return;N({type:`refreshSucceeded`,status:t,configuredServers:n,updatedAt:ne()})}catch(e){if(!W(i))return;I(e)||N({type:`refreshFailed`,message:`${t}${Kr(e)}`})}},[e,N,ne,I,W]);O.current=()=>K(``),k.current=()=>K(``),A.current=async(e,t)=>{if(Dt(t)){T(null),await K(`Deletion was persisted, but inventory refresh failed: `);return}await z.close(`/admin/servers`),V.reset(),T(t),u(`servers`),await K(`Deletion succeeded, but refresh failed: `)};let ce=(0,Y.useCallback)(()=>{P(),Nr(E.current)&&(D.current=n.setTimeout(()=>{K(``).finally(ce)},Mr(t.visibilityState)))},[P,t,K,n]),le=(0,Y.useCallback)(async()=>{try{let t=await e.getSession();if(!t.authenticated){F(t.adminStatus??`loginRequired`);return}N({type:`sessionLoaded`,session:t}),await K(`Session loaded, but refresh failed: `,t)}catch(e){I(e)||N({type:`refreshFailed`,message:`Session check failed: ${Kr(e)}`})}finally{ce()}},[e,N,I,F,K,ce]),ue=(0,Y.useCallback)(async t=>{if(!s){c(!0);try{let n=await e.login(t);N({type:`sessionLoaded`,session:n}),await K(`Login succeeded, but refresh failed: `,n)}catch(e){N({type:`loginFailed`,message:`Login failed: ${Kr(e)}`})}finally{c(!1),ce()}}},[e,N,s,K,ce]),de=(0,Y.useCallback)(async(t,n,r=`mcpServers`)=>{let a=E.current.session;if(!a)return;let o=a.csrfToken,s=r===`mcpTemplates`?`${r}/${t}`:t;N({type:`mutationStarted`,serverId:s,action:n});try{let a=n===`enable`,c;if(r===`mcpTemplates`){let l={id:t,source:r},u=await e.previewConfiguredServerLifecycle({target:l,enabled:a,csrfToken:o});if(!await i({title:`${a?`Enable`:`Disable`} Template Server ${t}?`,message:u.preview.warnings.join(` `)||`Apply the source-qualified definition lifecycle change.`,confirmLabel:a?`Enable template`:`Disable template`,tone:a?`default`:`danger`,details:[{label:`Target`,value:u.preview.qualifiedId},{label:`Active instances`,value:String(u.preview.runtimeImpact.activeInstanceCount)},...u.preview.expressionReplacement.occurs?[{label:`Expression replacement`,value:`Context-rendered disabled expression becomes literal true.`}]:[],{label:`Re-enable behavior`,value:`Future matching requests create instances lazily.`}]})){N({type:`mutationFailed`,serverId:s,action:n,message:`Lifecycle change cancelled.`});return}let d=await e.applyConfiguredServerLifecycle({target:l,enabled:a,csrfToken:o,previewFingerprint:u.preview.previewFingerprint,idempotencyKey:Ke(u.preview.qualifiedId,a)});d.result.configChange.reload.status===`failed`?c=`Lifecycle configuration was saved, but runtime reload failed. Recovery is required.`:d.result.configChange.reload.status===`runtime_not_running`?c=`Lifecycle configuration was saved, but the runtime is not running. Recovery is required.`:d.result.configChange.reload.status===`reload_disabled`?c=`Lifecycle configuration was saved, but runtime reload is disabled. Recovery is required.`:!a&&!d.result.runtimeImpact.retirementObserved&&(c=`Lifecycle configuration was saved, but Template instance retirement was not confirmed. Recovery is required.`)}else await e.setConfiguredServerEnabled({name:t,enabled:a,csrfToken:o});if(!W(o))return;await K(c?`Lifecycle was persisted, but inventory refresh failed: `:``),N(c?{type:`mutationFailed`,serverId:s,action:n,message:c}:{type:`mutationSucceeded`,serverId:s,action:n})}catch(e){if(!W(o))return;I(e)||N({type:`mutationFailed`,serverId:s,action:n,message:`Server ${n} failed: ${Kr(e)}`})}},[e,i,N,I,W,K]),fe=(0,Y.useCallback)(async(t,r)=>{if(te.current)return;let i=E.current.session;if(!i)return;te.current=!0;let a=M.current+1;M.current=a;let o=i.csrfToken;f({serviceId:t,action:r}),h(null);try{let i=r===`authorize`?await e.authorizeOAuthService({serviceId:t,csrfToken:o}):await e.restartOAuthService({serviceId:t,csrfToken:o});if(!W(o))return;h({kind:`success`,message:`${r===`authorize`?`Authorization`:`Authorization restart`} started. Opening the provider.`}),n.location?.assign(i.redirectUrl)}catch(e){if(!W(o))return;I(e)||h({kind:`error`,message:Kr(e)})}finally{M.current===a&&(te.current=!1,W(o)&&f(null))}},[e,I,W,n]),pe=(0,Y.useCallback)(async()=>{let t=E.current.session?.csrfToken;try{t&&await e.logout(t)}finally{P(),re(),N({type:`logoutSucceeded`}),T(null)}},[e,P,N,re]),me=(0,Y.useCallback)(async(e,t)=>{if(!navigator.clipboard?.writeText)throw Error(`clipboard_unavailable`);await navigator.clipboard.writeText(t)},[]);return(0,Y.useEffect)(()=>(le(),P),[P,le]),(0,Y.useEffect)(()=>{let e=()=>ce();return t.addEventListener?.(`visibilitychange`,e),()=>t.removeEventListener?.(`visibilitychange`,e)},[t,ce]),{state:a,loginBusy:s,login:ue,logout:pe,refresh:()=>K(`Manual refresh failed: `),navigation:{route:l,navigate:se},configuredServers:{create:{...B,open:async()=>{if(T(null),B.state.status!==`idle`){await B.open();return}await z.close(`/admin/servers`)&&await B.open()}},edit:{...z,open:async e=>{T(null),await z.open(e)}},delete:V,deletionNotice:w,dismissDeletionNotice:()=>T(null),mutate:de,copy:me},oauth:{busy:d,callbackFeedback:p,operationFeedback:m,operate:fe},logs:H,presets:{items:g,targets:v,revision:b,busy:S,load:G,preview:ie,save:ae,delete:oe},instructions:U}}function Xr(e){return e===`create`?`Create`:e===`duplicate`?`Duplicate`:`Update`}function Zr(e){return e===`/admin/servers`||e.startsWith(`/admin/servers/`)?`servers`:e===`/admin/oauth`||e.startsWith(`/admin/oauth/`)?`oauth`:e===`/admin/audit`||e.startsWith(`/admin/audit/`)?`audit`:e.startsWith(`/admin/presets`)?`presets`:e.startsWith(`/admin/instructions`)?`instructions`:e.startsWith(`/admin/logs`)?`logs`:e.startsWith(`/admin/about`)?`about`:`dashboard`}function Qr(e){return e===`dashboard`?`/admin`:`/admin/${e}`}function $r(e){let t=new URLSearchParams(e);if(t.get(`success`)===`1`)return{kind:`success`,message:`OAuth authorization completed.`};let n=t.get(`error`);return n?{kind:`error`,message:Object.hasOwn(Gr,n)?Gr[n]:`OAuth authorization did not complete.`}:null}var ei=s({primaryColor:`conduit`,defaultRadius:`sm`,fontFamily:`ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif`,headings:{fontFamily:`ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif`,fontWeight:`760`},defaultGradient:{from:`conduit.7`,to:`conduit.5`,deg:90},colors:{conduit:[`#eef7f4`,`#d7eee7`,`#acdccc`,`#7fc8ae`,`#59b393`,`#3a9d7b`,`#2c7f65`,`#246653`,`#1d5244`,`#123229`]}}),ti=document.querySelector(`#admin-root`),ni=a({key:`1mcp-admin-color-scheme`});if(!ti)throw Error(`Admin Console root element was not found`);(0,ke.createRoot)(ti).render((0,X.jsx)(i,{theme:ei,defaultColorScheme:`auto`,colorSchemeManager:ni,children:(0,X.jsx)(qr,{api:Ve()})}));export{Ne as n,Jn as t};

package/build/admin/index.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="icon" href="/admin/favicon.svg" type="image/svg+xml" />
     <title>1MCP Admin Console</title>
-    <script type="module" crossorigin src="/admin/assets/admin-console-DVuqABnE.js"></script>
+    <script type="module" crossorigin src="/admin/assets/admin-console-lrFAX4EQ.js"></script>
     <link rel="modulepreload" crossorigin href="/admin/assets/admin-rolldown-runtime-Bh1tDfsg.js">
     <link rel="modulepreload" crossorigin href="/admin/assets/admin-react-BSaWeqgv.js">
     <link rel="modulepreload" crossorigin href="/admin/assets/admin-mantine-xwbfu5Gd.js">

package/build/auth/oauthDiagnostics.d.ts

@@ -3,6 +3,10 @@ declare const diagnostics: {
         readonly stage: "network";
         readonly guidance: "Check provider reachability and DNS.";
     };
+    readonly private_destination_blocked: {
+        readonly stage: "network";
+        readonly guidance: "OAuth endpoint resolves to a private address. Explicitly approve its HTTPS origin with oauth.privateNetworkOrigins if trusted.";
+    };
     readonly metadata_http_error: {
         readonly stage: "metadata";
         readonly guidance: "Check provider metadata availability and access policy.";

package/build/auth/oauthDiagnostics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauthDiagnostics.d.ts","sourceRoot":"","sources":["../../src/auth/oauthDiagnostics.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;CAQP,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,MAAM,OAAO,WAAW,CAAC;AAE7D,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,qBAAqB,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAOjG;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,GACf;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAYrG;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAW7E"}
+{"version":3,"file":"oauthDiagnostics.d.ts","sourceRoot":"","sources":["../../src/auth/oauthDiagnostics.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;CAaP,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,MAAM,OAAO,WAAW,CAAC;AAE7D,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,qBAAqB,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAOjG;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,GACf;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAYrG;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAW7E"}

package/build/auth/oauthDiagnostics.js

@@ -1,5 +1,9 @@
 const diagnostics = {
     network_failure: { stage: 'network', guidance: 'Check provider reachability and DNS.' },
+    private_destination_blocked: {
+        stage: 'network',
+        guidance: 'OAuth endpoint resolves to a private address. Explicitly approve its HTTPS origin with oauth.privateNetworkOrigins if trusted.',
+    },
     metadata_http_error: { stage: 'metadata', guidance: 'Check provider metadata availability and access policy.' },
     invalid_metadata: { stage: 'metadata', guidance: 'Check the provider OAuth metadata format.' },
     authority_mismatch: {

package/build/auth/oauthDiagnostics.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauthDiagnostics.js","sourceRoot":"","sources":["../../src/auth/oauthDiagnostics.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG;IAClB,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,sCAAsC,EAAE;IACvF,mBAAmB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,yDAAyD,EAAE;IAC/G,gBAAgB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,2CAA2C,EAAE;IAC9F,kBAAkB,EAAE;QAClB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,qEAAqE;KAChF;CACO,CAAC;AAIX,MAAM,UAAU,sBAAsB,CAAC,MAA6B,EAAE,UAAmB;IACvF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GACV,MAAM,KAAK,qBAAqB,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAW,IAAI,GAAG,IAAI,UAAW,IAAI,GAAG;QAC1G,CAAC,CAAC,UAAU,UAAU,GAAG;QACzB,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,SAAS,UAAU,CAAC,KAAK,KAAK,MAAM,GAAG,MAAM,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAgB;IAEhB,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAA4B,EAAE,CAAC;QACzE,IAAI,OAAO,KAAK,sBAAsB,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1F,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,8DAA8D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3F,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,IAAI,UAAU,IAAI,OAAO,KAAK,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC;gBACtE,OAAO,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC;QACH,MAAM,OAAO,GACX,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC;QAC/F,IAAI,OAAO,KAAK,wFAAwF;YACtG,OAAO,sBAAsB,CAAC,oBAAoB,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"oauthDiagnostics.js","sourceRoot":"","sources":["../../src/auth/oauthDiagnostics.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG;IAClB,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,sCAAsC,EAAE;IACvF,2BAA2B,EAAE;QAC3B,KAAK,EAAE,SAAS;QAChB,QAAQ,EACN,gIAAgI;KACnI;IACD,mBAAmB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,yDAAyD,EAAE;IAC/G,gBAAgB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,2CAA2C,EAAE;IAC9F,kBAAkB,EAAE;QAClB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,qEAAqE;KAChF;CACO,CAAC;AAIX,MAAM,UAAU,sBAAsB,CAAC,MAA6B,EAAE,UAAmB;IACvF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GACV,MAAM,KAAK,qBAAqB,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAW,IAAI,GAAG,IAAI,UAAW,IAAI,GAAG;QAC1G,CAAC,CAAC,UAAU,UAAU,GAAG;QACzB,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,SAAS,UAAU,CAAC,KAAK,KAAK,MAAM,GAAG,MAAM,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAgB;IAEhB,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAA4B,EAAE,CAAC;QACzE,IAAI,OAAO,KAAK,sBAAsB,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1F,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,8DAA8D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3F,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,IAAI,UAAU,IAAI,OAAO,KAAK,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC;gBACtE,OAAO,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC;QACH,MAAM,OAAO,GACX,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC;QAC/F,IAAI,OAAO,KAAK,wFAAwF;YACtG,OAAO,sBAAsB,CAAC,oBAAoB,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/build/auth/oauthEndpointFetch.d.ts

@@ -4,11 +4,12 @@ export declare class OAuthResourceRedirectError extends Error {
     constructor();
 }
 export declare function isPrivateOAuthAddress(address: string): boolean;
-export declare function validateOAuthEndpoint(value: string, configuredResource: string, expectedOrigin?: string, configuredIssuer?: string): URL;
+export declare function validateOAuthEndpoint(value: string, configuredResource: string, expectedOrigin?: string, configuredIssuer?: string, privateNetworkOrigins?: readonly string[]): URL;
 /** Pin the DNS result into the actual socket lookup, not just a preflight check. */
 export declare function createOAuthEndpointFetch(options: {
     resource: string;
     issuer?: string;
+    privateNetworkOrigins?: string[];
     isResource: (url: URL) => boolean;
     acceptSseEndpoint?: (endpoint: string) => void;
     beforeRequest: (url: URL, init: RequestInit) => Promise<RequestInit>;

package/build/auth/oauthEndpointFetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauthEndpointFetch.d.ts","sourceRoot":"","sources":["../../src/auth/oauthEndpointFetch.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,oBAAoB,QAAc,CAAC;AAChD,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,qBAAa,0BAA2B,SAAQ,KAAK;;CAIpD;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CA2B9D;AAaD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,MAAM,EACvB,gBAAgB,CAAC,EAAE,MAAM,GACxB,GAAG,CAcL;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;IAClC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,SAAS,EAAE,CAAC,eAAe,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9C,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnE,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACrE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAChF,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpG,GAAG,OAAO,KAAK,CA4Mf"}
+{"version":3,"file":"oauthEndpointFetch.d.ts","sourceRoot":"","sources":["../../src/auth/oauthEndpointFetch.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,oBAAoB,QAAc,CAAC;AAChD,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,qBAAa,0BAA2B,SAAQ,KAAK;;CAIpD;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CA2B9D;AAiBD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,MAAM,EACvB,gBAAgB,CAAC,EAAE,MAAM,EACzB,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,GACxC,GAAG,CAeL;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;IAClC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,SAAS,EAAE,CAAC,eAAe,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9C,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnE,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACrE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAChF,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpG,GAAG,OAAO,KAAK,CAyNf"}

package/build/auth/oauthEndpointFetch.js

@@ -52,7 +52,10 @@ function isConfiguredLocalOrigin(url, configuredResource, configuredIssuer) {
     }
     return false;
 }
-export function validateOAuthEndpoint(value, configuredResource, expectedOrigin, configuredIssuer) {
+function isApprovedPrivateOrigin(url, origins = []) {
+    return url.protocol === 'https:' && origins.some((origin) => new URL(origin).origin === url.origin);
+}
+export function validateOAuthEndpoint(value, configuredResource, expectedOrigin, configuredIssuer, privateNetworkOrigins) {
     try {
         const url = new URL(value);
         const localException = isConfiguredLocalOrigin(url, configuredResource, configuredIssuer);
@@ -62,9 +65,10 @@ export function validateOAuthEndpoint(value, configuredResource, expectedOrigin,
             throw oauthAuthorityError();
         if (expectedOrigin && url.origin !== expectedOrigin)
             throw oauthAuthorityError();
-        if (url.hostname === 'localhost' && !localException)
+        const privateException = localException || isApprovedPrivateOrigin(url, privateNetworkOrigins);
+        if (url.hostname === 'localhost' && !privateException)
             throw oauthAuthorityError();
-        if (isIP(url.hostname.replace(/^\[|\]$/g, '')) && isPrivateOAuthAddress(url.hostname) && !localException)
+        if (isIP(url.hostname.replace(/^\[|\]$/g, '')) && isPrivateOAuthAddress(url.hostname) && !privateException)
             throw oauthAuthorityError();
         return url;
     }
@@ -94,7 +98,9 @@ export function createOAuthEndpointFetch(options) {
             const target = new URL(request?.url ?? String(input));
             const resource = new URL(options.resource);
             const isResource = options.isResource(target);
-            const url = isResource ? target : validateOAuthEndpoint(target.href, options.resource, undefined, options.issuer);
+            const url = isResource
+                ? target
+                : validateOAuthEndpoint(target.href, options.resource, undefined, options.issuer, options.privateNetworkOrigins);
             if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.hash)
                 throw oauthAuthorityError();
             resourceRequest = isResource;
@@ -118,10 +124,15 @@ export function createOAuthEndpointFetch(options) {
                     lookup(hostname, { all: true }),
                     new Promise((_resolve, reject) => boundedSignal.addEventListener('abort', () => reject(oauthAuthorityError()), { once: true })),
                 ]);
-            const localException = isResource || isConfiguredLocalOrigin(url, options.resource, options.issuer);
+            const approvedPrivateOrigin = isApprovedPrivateOrigin(url, options.privateNetworkOrigins);
+            const localException = isResource || approvedPrivateOrigin || isConfiguredLocalOrigin(url, options.resource, options.issuer);
             reason = 'authority_mismatch';
-            if (!addresses.length || (!localException && addresses.some((item) => isPrivateOAuthAddress(item.address))))
+            if (!addresses.length)
+                throw oauthAuthorityError();
+            if (!localException && addresses.some((item) => isPrivateOAuthAddress(item.address))) {
+                reason = 'private_destination_blocked';
                 throw oauthAuthorityError();
+            }
             const resolved = addresses
                 .map((item) => item.address)
                 .sort()

package/build/auth/oauthEndpointFetch.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauthEndpointFetch.js","sourceRoot":"","sources":["../../src/auth/oauthEndpointFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAA8B,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEhH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD;QACE,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAClG,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,qBAAqB,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,8EAA8E;QAC9E,OAAO,CACL,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAC1B,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YACtB,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YACxB,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CACxB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/G,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACrB,OAAO,CACL,CAAC,KAAK,CAAC;QACP,CAAC,KAAK,EAAE;QACR,CAAC,KAAK,GAAG;QACT,CAAC,IAAI,GAAG;QACR,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;QAClC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAQ,EAAE,kBAA0B,EAAE,gBAAyB;IAC9F,KAAK,MAAM,eAAe,IAAI,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,eAAe;YAAE,SAAS;QAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/G,IAAI,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,kBAA0B,EAC1B,cAAuB,EACvB,gBAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,cAAc,GAAG,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;QAC1F,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,mBAAmB,EAAE,CAAC;QAC1E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;YAAE,MAAM,mBAAmB,EAAE,CAAC;QAC5G,IAAI,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc;YAAE,MAAM,mBAAmB,EAAE,CAAC;QACjF,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,cAAc;YAAE,MAAM,mBAAmB,EAAE,CAAC;QACjF,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc;YACtG,MAAM,mBAAmB,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,OAYxC;IACC,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,MAAM,GAA0B,oBAAoB,CAAC;QACzD,IAAI,UAA8B,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,OAAO,CAAC,YAAY,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;gBACjD,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,EAAE,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAE,EAAE,CAAC,CAAC;YAC9F,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAClH,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;gBACzF,MAAM,mBAAmB,EAAE,CAAC;YAC9B,eAAe,GAAG,UAAU,CAAC;YAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,CAAC;YAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC9E,MAAM,SAAS,GAAG,OAAO;gBACvB,CAAC,CAAC;oBACE,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE;oBAC9F,GAAG,IAAI;iBACR;gBACH,CAAC,CAAC,IAAI,CAAC;YACT,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YACjH,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACtD,MAAM,GAAG,iBAAiB,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAC9B,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC;oBACjB,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;oBAC/B,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACtC,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAC7F;iBACF,CAAC,CAAC;YACP,MAAM,cAAc,GAAG,UAAU,IAAI,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACpG,MAAM,GAAG,oBAAoB,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBACzG,MAAM,mBAAmB,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,SAAS;iBACvB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;iBAC3B,IAAI,EAAE;iBACN,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3D,IAAI,aAAa,CAAC,OAAO;gBAAE,MAAM,mBAAmB,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,kBAAkB,EAAE,CAAC,CAAC;YACxF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,YAAY,eAAe,CAAC;gBACvG,MAAM,mBAAmB,EAAE,CAAC;YAC9B,MAAM,GAAG,iBAAiB,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3E,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CACjE,GAAG,EACH;oBACE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,KAAK;oBAChC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,SAAS;oBACpC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;wBACnC,IAAI,OAAO,CAAC,GAAG;4BAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;;4BACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBACjE,CAAC;iBACF,EACD,OAAO,CACR,CAAC;gBACF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC7B,IAAI,CAAC,UAAU;oBAAE,QAAQ,CAAC,UAAU,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBAC5G,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC;YAC1C,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;gBAClC,MAAM,GAAG,oBAAoB,CAAC;gBAC9B,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,UAAU;oBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAC;gBACvD,MAAM,mBAAmB,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,eAAe,GAAG,IAAI,OAAO,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;qBAChF,IAAI,KAAK,KAAK,SAAS;oBAAE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAChE,CAAC;YACD,kFAAkF;YAClF,MAAM,aAAa,GAAG,CAAC,UAAU,CAAC;YAClC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,IAAI,MAAM,GAAa,QAAQ,CAAC;gBAChC,IACE,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;oBAC1B,OAAO,CAAC,iBAAiB;oBACzB,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAClE,CAAC;oBACD,IAAI,OAAO,GAAG,EAAE,CAAC;oBACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;oBACrB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;wBAC3B,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;4BAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACd,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gCAClC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;oCAC/B,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC;oCAChC,OAAO;gCACT,CAAC;gCACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gCACzC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;oCACb,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oCACpC,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;wCACvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wCAChD,IAAI,CAAC;4CACH,IAAI,IAAI;gDAAE,OAAO,CAAC,iBAAkB,CAAC,IAAI,CAAC,CAAC;wCAC7C,CAAC;wCAAC,MAAM,CAAC;4CACP,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC;4CAChC,OAAO;wCACT,CAAC;wCACD,QAAQ,GAAG,IAAI,CAAC;oCAClB,CAAC;oCACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gCACnD,CAAC;4BACH,CAAC;4BACD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBACxB,CAAC;qBACF,CAAC,CAAC;oBACH,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,IAAI,QAAQ,CACjB,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;oBAChD,CAAC,CAAC,IAAI;oBACN,CAAC,CAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAgC,EAC1D,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,CACrC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;gBAC/C,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACrB,IAAI,IAAI,GAAG,oBAAoB,EAAE,CAAC;oBAChC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACnB,MAAM,mBAAmB,EAAE,CAAC;gBAC9B,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC1E,MAAM,GAAG,kBAAkB,CAAC;gBAC5B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,mBAAmB,EAAE,CAAC;gBAC7F,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAgC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC3F,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC,OAAO;wBAAE,MAAM,GAAG,oBAAoB,CAAC;oBAC7G,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC3E,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,mBAAmB,EAAE,CAAC;gBAC7F,OAAO,CAAC,QAAQ,CAAC,KAAgC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YACpE,CAAC;YACD,kEAAkE;YAClE,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;oBACzC,MAAM,GAAG,qBAAqB,CAAC;oBAC/B,UAAU,GAAG,MAAM,CAAC;oBACpB,MAAM,EAAE,CAAC;gBACX,CAAC;gBACD,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACnD,IAAI,IAAI,GAAG,cAAc,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACxC,IACE,KAAK;wBACL,OAAO,KAAK,KAAK,QAAQ;wBACzB,OAAO,IAAI,KAAK;wBAChB,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,eAAe,CAAC,CAAC,QAAQ,CACnG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CACpB;wBAED,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,4CAA4C;gBAC9C,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACzC,eAAe,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC3C,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACnG,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YACnC,IAAI,KAAK,YAAY,0BAA0B;gBAAE,MAAM,KAAK,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"oauthEndpointFetch.js","sourceRoot":"","sources":["../../src/auth/oauthEndpointFetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAA8B,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEhH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD;QACE,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAClG,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,qBAAqB,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,8EAA8E;QAC9E,OAAO,CACL,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAC1B,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YACtB,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YACxB,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CACxB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/G,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACrB,OAAO,CACL,CAAC,KAAK,CAAC;QACP,CAAC,KAAK,EAAE;QACR,CAAC,KAAK,GAAG;QACT,CAAC,IAAI,GAAG;QACR,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;QAClC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAQ,EAAE,kBAA0B,EAAE,gBAAyB;IAC9F,KAAK,MAAM,eAAe,IAAI,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,eAAe;YAAE,SAAS;QAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/G,IAAI,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAQ,EAAE,UAA6B,EAAE;IACxE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,kBAA0B,EAC1B,cAAuB,EACvB,gBAAyB,EACzB,qBAAyC;IAEzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,cAAc,GAAG,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;QAC1F,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,mBAAmB,EAAE,CAAC;QAC1E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;YAAE,MAAM,mBAAmB,EAAE,CAAC;QAC5G,IAAI,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc;YAAE,MAAM,mBAAmB,EAAE,CAAC;QACjF,MAAM,gBAAgB,GAAG,cAAc,IAAI,uBAAuB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAC/F,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,gBAAgB;YAAE,MAAM,mBAAmB,EAAE,CAAC;QACnF,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB;YACxG,MAAM,mBAAmB,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,OAaxC;IACC,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,MAAM,GAA0B,oBAAoB,CAAC;QACzD,IAAI,UAA8B,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,OAAO,CAAC,YAAY,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;gBACjD,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,EAAE,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAE,EAAE,CAAC,CAAC;YAC9F,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,UAAU;gBACpB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,qBAAqB,CACnB,MAAM,CAAC,IAAI,EACX,OAAO,CAAC,QAAQ,EAChB,SAAS,EACT,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,qBAAqB,CAC9B,CAAC;YACN,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;gBACzF,MAAM,mBAAmB,EAAE,CAAC;YAC9B,eAAe,GAAG,UAAU,CAAC;YAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,CAAC;YAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC9E,MAAM,SAAS,GAAG,OAAO;gBACvB,CAAC,CAAC;oBACE,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE;oBAC9F,GAAG,IAAI;iBACR;gBACH,CAAC,CAAC,IAAI,CAAC;YACT,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YACjH,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACtD,MAAM,GAAG,iBAAiB,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAC9B,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC;oBACjB,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;oBAC/B,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACtC,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAC7F;iBACF,CAAC,CAAC;YACP,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;YAC1F,MAAM,cAAc,GAClB,UAAU,IAAI,qBAAqB,IAAI,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACxG,MAAM,GAAG,oBAAoB,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,MAAM;gBAAE,MAAM,mBAAmB,EAAE,CAAC;YACnD,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACrF,MAAM,GAAG,6BAA6B,CAAC;gBACvC,MAAM,mBAAmB,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,QAAQ,GAAG,SAAS;iBACvB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;iBAC3B,IAAI,EAAE;iBACN,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3D,IAAI,aAAa,CAAC,OAAO;gBAAE,MAAM,mBAAmB,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,kBAAkB,EAAE,CAAC,CAAC;YACxF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,YAAY,eAAe,CAAC;gBACvG,MAAM,mBAAmB,EAAE,CAAC;YAC9B,MAAM,GAAG,iBAAiB,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3E,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CACjE,GAAG,EACH;oBACE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,KAAK;oBAChC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,SAAS;oBACpC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;wBACnC,IAAI,OAAO,CAAC,GAAG;4BAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;;4BACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBACjE,CAAC;iBACF,EACD,OAAO,CACR,CAAC;gBACF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC7B,IAAI,CAAC,UAAU;oBAAE,QAAQ,CAAC,UAAU,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBAC5G,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC;YAC1C,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;gBAClC,MAAM,GAAG,oBAAoB,CAAC;gBAC9B,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,UAAU;oBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAC;gBACvD,MAAM,mBAAmB,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,eAAe,GAAG,IAAI,OAAO,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;qBAChF,IAAI,KAAK,KAAK,SAAS;oBAAE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAChE,CAAC;YACD,kFAAkF;YAClF,MAAM,aAAa,GAAG,CAAC,UAAU,CAAC;YAClC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,IAAI,MAAM,GAAa,QAAQ,CAAC;gBAChC,IACE,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;oBAC1B,OAAO,CAAC,iBAAiB;oBACzB,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAClE,CAAC;oBACD,IAAI,OAAO,GAAG,EAAE,CAAC;oBACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;oBACrB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;wBAC3B,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;4BAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACd,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gCAClC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;oCAC/B,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC;oCAChC,OAAO;gCACT,CAAC;gCACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gCACzC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;oCACb,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oCACpC,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;wCACvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wCAChD,IAAI,CAAC;4CACH,IAAI,IAAI;gDAAE,OAAO,CAAC,iBAAkB,CAAC,IAAI,CAAC,CAAC;wCAC7C,CAAC;wCAAC,MAAM,CAAC;4CACP,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC;4CAChC,OAAO;wCACT,CAAC;wCACD,QAAQ,GAAG,IAAI,CAAC;oCAClB,CAAC;oCACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gCACnD,CAAC;4BACH,CAAC;4BACD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBACxB,CAAC;qBACF,CAAC,CAAC;oBACH,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,IAAI,QAAQ,CACjB,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;oBAChD,CAAC,CAAC,IAAI;oBACN,CAAC,CAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAgC,EAC1D,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,CACrC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;gBAC/C,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACrB,IAAI,IAAI,GAAG,oBAAoB,EAAE,CAAC;oBAChC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACnB,MAAM,mBAAmB,EAAE,CAAC;gBAC9B,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC1E,MAAM,GAAG,kBAAkB,CAAC;gBAC5B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,mBAAmB,EAAE,CAAC;gBAC7F,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAgC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC3F,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC,OAAO;wBAAE,MAAM,GAAG,oBAAoB,CAAC;oBAC7G,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC3E,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,mBAAmB,EAAE,CAAC;gBAC7F,OAAO,CAAC,QAAQ,CAAC,KAAgC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YACpE,CAAC;YACD,kEAAkE;YAClE,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;oBACzC,MAAM,GAAG,qBAAqB,CAAC;oBAC/B,UAAU,GAAG,MAAM,CAAC;oBACpB,MAAM,EAAE,CAAC;gBACX,CAAC;gBACD,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACnD,IAAI,IAAI,GAAG,cAAc,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACxC,IACE,KAAK;wBACL,OAAO,KAAK,KAAK,QAAQ;wBACzB,OAAO,IAAI,KAAK;wBAChB,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,eAAe,CAAC,CAAC,QAAQ,CACnG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CACpB;wBAED,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,4CAA4C;gBAC9C,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACzC,eAAe,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC3C,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACnG,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YACnC,IAAI,KAAK,YAAY,0BAA0B;gBAAE,MAAM,KAAK,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}