@adminide-stack/yantra-mobile 12.0.39-alpha.1 → 12.0.39-alpha.10

package/lib/components/NavigationHeader/NavigationHeader.js.map

@@ -1 +1 @@
-{"version":3,"file":"NavigationHeader.js","sources":["../../../src/components/NavigationHeader/NavigationHeader.tsx"],"sourcesContent":["/**\n * Universal navigation header for the Yantra mobile app.\n *\n * Wired via `customHeader` in `compute.ts`, so the React Navigation runtime\n * passes us TWO sets of props on every render:\n *\n *  1. The standard navigator props — `navigation`, `route`, `options`, `back`,\n *     `layout`. We read EVERYTHING visual out of `options` (set by `props.options`\n *     in compute.ts):\n *        • `options.title` / `options.headerTitle` — visible title text\n *        • `options.headerTitleAlign` — `'left' | 'center'`\n *        • `options.headerTitleStyle` — text style overrides (fontWeight, etc.)\n *        • `options.headerTintColor`  — title + icon tint (light-mode default)\n *        • `options.headerStyle`      — outer header view style overrides\n *\n *  2. The static `customHeader.props` from compute.ts — the layout flags\n *     describing what the header should render for this route:\n *        • `showTitle, showToggle, showBack, showFilter, isSearchBack`\n *        • `showGateway, showHistory, showNewChat` (`showGateway` is intended for Home only)\n *        • `headerBgColor`\n *\n * Screens never touch the header — no `setOptions`, no slot registration.\n * If a route needs a different header configuration, change its\n * `customHeader.props` / `props.options` in `compute.ts`.\n */\nimport React, { useCallback, useMemo } from 'react';\nimport { Pressable, StyleSheet, View, useColorScheme } from 'react-native';\nimport { SafeAreaView, useSafeAreaInsets } from 'react-native-safe-area-context';\nimport { StatusBar } from 'expo-status-bar';\nimport { CommonActions, DrawerActions, useNavigation } from '@react-navigation/native';\nimport { getHeaderTitle } from '@react-navigation/elements';\nimport { MaterialCommunityIcons } from '@expo/vector-icons';\nimport { Text } from '@admin-layout/gluestack-ui-mobile';\nimport { GatewayConnector } from '../GatewayConnector';\nimport { mobileTokens } from '../../theme/mobileTokens';\nimport { tryWebBuilderBack } from '../../screens/WebBuilder/webbuilderBackHandler';\n\ninterface NavigationHeaderProps {\n    /** React Navigation header props (typed loose because they vary per navigator). */\n    navigation?: any;\n    route?: any;\n    options?: any;\n    /** Set by the native-stack navigator when there's a previous screen on the stack. */\n    back?: { title?: string };\n\n    showTitle?: boolean;\n    showToggle?: boolean;\n    showBack?: boolean;\n    showFilter?: boolean;\n    isSearchBack?: boolean;\n    showGateway?: boolean;\n    showHistory?: boolean;\n    showNewChat?: boolean;\n    headerBgColor?: string;\n}\n\nconst ICON_SIZE = 22;\n\nfunction resolveTitle(options: any, route: any): string {\n    if (typeof options?.title === 'string' && options.title.trim()) {\n        return options.title.trim();\n    }\n    if (typeof options?.headerTitle === 'string' && options.headerTitle.trim()) {\n        return options.headerTitle.trim();\n    }\n    const fallback = getHeaderTitle?.(options ?? {}, route?.name ?? 'Yantra');\n    return typeof fallback === 'string' && fallback.trim() ? fallback : 'Yantra';\n}\n\nconst NavigationHeader: React.FC<NavigationHeaderProps> = (props) => {\n    const {\n        navigation: navProp,\n        route,\n        options,\n        back,\n        showTitle = true,\n        showToggle = false,\n        showBack = false,\n        showGateway = false,\n        showHistory = false,\n        showNewChat = false,\n        headerBgColor,\n    } = props;\n\n    const fallbackNav = useNavigation<any>();\n    const navigation = navProp ?? fallbackNav;\n\n    const colorScheme = useColorScheme();\n    const isDark = colorScheme === 'dark';\n    const insets = useSafeAreaInsets();\n\n    /* ── Theme + options-driven colours / styles ─────────────────────────── */\n    const themeTitleColor = isDark ? '#f1f5f9' : '#0f172a';\n    const themeAccentColor = isDark ? '#a5b4fc' : '#4338ca';\n    const themeNewChatIconColor = isDark ? '#e5e7eb' : '#000000';\n\n    /**\n     * Honour `options.headerTintColor` (set in `compute.ts` → `props.options`).\n     * In dark mode we ignore a hard \"black\" tint so the title stays legible —\n     * but any non-black tint is respected in both modes.\n     */\n    const optionTint = typeof options?.headerTintColor === 'string' ? options.headerTintColor : null;\n    const tintLooksDark = optionTint && /^(#?000(000)?|black)$/i.test(optionTint.trim());\n    const effectiveTint = optionTint && !(isDark && tintLooksDark) ? optionTint : null;\n\n    const titleColor = effectiveTint ?? themeTitleColor;\n    const iconColor = effectiveTint ?? themeTitleColor;\n    const accentColor = effectiveTint ?? themeAccentColor;\n    const newChatIconColor = effectiveTint ?? themeNewChatIconColor;\n\n    const surfaceColor = headerBgColor ?? (isDark ? '#0f172a' : '#ffffff');\n    const dividerColor = isDark ? 'rgba(148, 163, 184, 0.18)' : 'rgba(15, 23, 42, 0.06)';\n\n    const titleAlignLeft = options?.headerTitleAlign === 'left';\n    const title = useMemo(() => resolveTitle(options, route), [options, route]);\n    const optionTitleStyle = options?.headerTitleStyle ?? null;\n\n    /** Org slug used by header navigation actions; falls back to route params. */\n    const orgName = useMemo(() => {\n        const raw = (route?.params?.orgName as string | undefined) ?? '';\n        return typeof raw === 'string' && raw.trim() ? raw.trim() : null;\n    }, [route?.params?.orgName]);\n\n    /* ── Action handlers ─────────────────────────────────────────────────── */\n    const handleBack = useCallback(() => {\n        // WebBuilder: prefer WebView history / in-surface preview dismiss so we\n        // don't drop users onto Home while a live preview tab is open.\n        const routeName = typeof route?.name === 'string' ? route.name : '';\n        if (/webbuilder/i.test(routeName) && tryWebBuilderBack()) {\n            return;\n        }\n        if (navigation?.canGoBack?.()) {\n            navigation.goBack();\n            return;\n        }\n        navigation?.dispatch?.(\n            CommonActions.navigate({\n                name: 'MainStack.Layout.Home',\n                params: orgName ? { orgName } : undefined,\n            }),\n        );\n    }, [navigation, orgName, route?.name]);\n\n    const handleToggleDrawer = useCallback(() => {\n        try {\n            navigation?.dispatch?.(DrawerActions.openDrawer());\n        } catch {\n            /* Current navigator may not be a drawer — ignore. */\n        }\n    }, [navigation]);\n\n    const handleOpenChatHistory = useCallback(() => {\n        navigation?.dispatch?.(\n            CommonActions.navigate({\n                name: 'MainStack.ChatHistory',\n                params: orgName ? { orgName } : undefined,\n            }),\n        );\n    }, [navigation, orgName]);\n\n    const handleNewChat = useCallback(() => {\n        navigation?.dispatch?.(\n            CommonActions.navigate({\n                name: 'MainStack.Layout.Home',\n                params: orgName ? { orgName } : undefined,\n                merge: true,\n            }),\n        );\n    }, [navigation, orgName]);\n\n    /* ── Slot composition (left → title → right) ─────────────────────────── */\n    const wantsBack = Boolean(back) || showBack;\n\n    const leftSlot = wantsBack ? (\n        <Pressable\n            onPress={handleBack}\n            accessibilityLabel=\"Go back\"\n            accessibilityRole=\"button\"\n            style={({ pressed }) => [styles.iconButton, pressed && styles.iconButtonPressed]}\n            hitSlop={8}\n        >\n            <MaterialCommunityIcons name=\"chevron-left\" size={ICON_SIZE + 4} color={iconColor} />\n        </Pressable>\n    ) : showToggle ? (\n        <Pressable\n            onPress={handleToggleDrawer}\n            accessibilityLabel=\"Open menu\"\n            accessibilityRole=\"button\"\n            style={({ pressed }) => [styles.iconButton, pressed && styles.iconButtonPressed]}\n            hitSlop={8}\n        >\n            <MaterialCommunityIcons name=\"menu\" size={ICON_SIZE} color={iconColor} />\n        </Pressable>\n    ) : null;\n\n    const titleSlot = showTitle ? (\n        <Text\n            style={[\n                styles.title,\n                titleAlignLeft ? styles.titleAlignLeft : styles.titleAlignCenter,\n                { color: titleColor },\n                optionTitleStyle,\n            ]}\n            numberOfLines={1}\n            ellipsizeMode=\"tail\"\n        >\n            {title}\n        </Text>\n    ) : null;\n\n    const showRightSlot = showGateway || showHistory || showNewChat;\n    const rightSlot = showRightSlot ? (\n        <View style={styles.rightActions}>\n            {showGateway ? <GatewayConnector /> : null}\n            {showHistory ? (\n                <Pressable\n                    onPress={handleOpenChatHistory}\n                    style={({ pressed }) => [styles.actionButton, pressed && styles.actionButtonPressed]}\n                    accessibilityLabel=\"Chat history\"\n                    accessibilityRole=\"button\"\n                    hitSlop={8}\n                >\n                    <View style={[styles.actionButtonInner, isDark ? styles.actionButtonInnerDark : null]}>\n                        <MaterialCommunityIcons name=\"history\" size={19} color={accentColor} />\n                    </View>\n                </Pressable>\n            ) : null}\n            {showNewChat ? (\n                <Pressable\n                    onPress={handleNewChat}\n                    style={({ pressed }) => [styles.actionButton, pressed && styles.actionButtonPressed]}\n                    accessibilityLabel=\"New chat\"\n                    accessibilityRole=\"button\"\n                    hitSlop={8}\n                >\n                    <View style={[styles.actionButtonInner, isDark ? styles.actionButtonInnerDark : null]}>\n                        <MaterialCommunityIcons name=\"chat-plus-outline\" size={20} color={newChatIconColor} />\n                    </View>\n                </Pressable>\n            ) : null}\n        </View>\n    ) : null;\n\n    return (\n        <>\n            <StatusBar style={isDark ? 'light' : 'dark'} />\n            <SafeAreaView edges={['top']} style={{ backgroundColor: surfaceColor }}>\n                <View\n                    style={[\n                        styles.row,\n                        {\n                            backgroundColor: surfaceColor,\n                            borderBottomColor: dividerColor,\n                            paddingTop: insets.top > 0 ? 0 : 6,\n                        },\n                        options?.headerStyle ?? null,\n                    ]}\n                >\n                    <View style={styles.leftSlot}>{leftSlot}</View>\n                    <View style={[styles.titleSlot, titleAlignLeft && styles.titleSlotLeft]}>{titleSlot}</View>\n                    <View style={styles.rightSlot}>{rightSlot}</View>\n                </View>\n            </SafeAreaView>\n        </>\n    );\n};\n\nconst styles = StyleSheet.create({\n    row: {\n        flexDirection: 'row',\n        alignItems: 'center',\n        paddingHorizontal: 12,\n        paddingVertical: 10,\n        minHeight: 52,\n        borderBottomWidth: StyleSheet.hairlineWidth,\n    },\n    leftSlot: {\n        minWidth: 40,\n        alignItems: 'flex-start',\n        justifyContent: 'center',\n    },\n    titleSlot: {\n        flex: 1,\n        alignItems: 'center',\n        justifyContent: 'center',\n        paddingHorizontal: 8,\n        minWidth: 0,\n    },\n    titleSlotLeft: {\n        alignItems: 'flex-start',\n    },\n    rightSlot: {\n        minWidth: 40,\n        alignItems: 'flex-end',\n        justifyContent: 'center',\n    },\n    rightActions: {\n        flexDirection: 'row',\n        alignItems: 'center',\n        gap: 6,\n    },\n    title: {\n        fontSize: 17,\n        fontWeight: '700',\n        letterSpacing: -0.2,\n        width: '100%',\n    },\n    titleAlignCenter: {\n        textAlign: 'center',\n    },\n    titleAlignLeft: {\n        textAlign: 'left',\n    },\n    iconButton: {\n        width: 36,\n        height: 36,\n        alignItems: 'center',\n        justifyContent: 'center',\n        borderRadius: 18,\n    },\n    iconButtonPressed: {\n        opacity: 0.6,\n    },\n    actionButton: {\n        padding: 0,\n        alignItems: 'center',\n        justifyContent: 'center',\n        borderRadius: 22,\n    },\n    actionButtonPressed: {\n        opacity: 0.6,\n    },\n    actionButtonInner: {\n        width: 32,\n        height: 32,\n        borderRadius: 16,\n        alignItems: 'center',\n        justifyContent: 'center',\n        backgroundColor: mobileTokens.color.surface,\n        borderWidth: 1,\n        borderColor: mobileTokens.color.border,\n        shadowColor: '#0f172a',\n        shadowOpacity: 0.08,\n        shadowRadius: 5,\n        shadowOffset: { width: 0, height: 2 },\n        elevation: 2,\n    },\n    actionButtonInnerDark: {\n        backgroundColor: '#0f172a',\n        borderColor: '#334155',\n    },\n});\n\nexport default React.memo(NavigationHeader);\n"],"names":["_a","_b"],"mappings":"6tBAuDA,MAAM,SAAY,GAAA,EAAA;AAClB,SAAS,YAAA,CAAa,SAAc,KAAoB,EAAA;AAxDxD,EAAA,IAAA,EAAA,EAAA,EAAA;AAyDE,EAAA,IAAI,QAAO,OAAS,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAA,KAAA,CAAA,KAAU,YAAY,OAAQ,CAAA,KAAA,CAAM,MAAQ,EAAA;AAC9D,IAAO,OAAA,OAAA,CAAQ,MAAM,IAAK,EAAA;AAAA;AAE5B,EAAA,IAAI,QAAO,OAAS,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAA,WAAA,CAAA,KAAgB,YAAY,OAAQ,CAAA,WAAA,CAAY,MAAQ,EAAA;AAC1E,IAAO,OAAA,OAAA,CAAQ,YAAY,IAAK,EAAA;AAAA;AAElC,EAAA,MAAM,YAAW,EAAiB,GAAA,cAAA,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAA,OAAA,IAAA,IAAA,GAAA,OAAA,GAAW,EAAI,EAAA,CAAA,EAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,SAAP,IAAe,GAAA,EAAA,GAAA,QAAA,CAAA;AAChE,EAAA,OAAO,OAAO,QAAa,KAAA,QAAA,IAAY,QAAS,CAAA,IAAA,KAAS,QAAW,GAAA,QAAA;AACtE;AACA,MAAM,mBAAoD,CAAS,KAAA,KAAA;AAlEnE,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAmEE,EAAM,MAAA;AAAA,IACJ,UAAY,EAAA,OAAA;AAAA,IACZ,KAAA;AAAA,IACA,OAAA;AAAA,IACA,IAAA;AAAA,IACA,SAAY,GAAA,IAAA;AAAA,IACZ,UAAa,GAAA,KAAA;AAAA,IACb,QAAW,GAAA,KAAA;AAAA,IACX,WAAc,GAAA,KAAA;AAAA,IACd,WAAc,GAAA,KAAA;AAAA,IACd,WAAc,GAAA,KAAA;AAAA,IACd;AAAA,GACE,GAAA,KAAA;AACJ,EAAA,MAAM,cAAc,aAAmB,EAAA;AACvC,EAAA,MAAM,aAAa,OAAW,IAAA,IAAA,GAAA,OAAA,GAAA,WAAA;AAC9B,EAAA,MAAM,cAAc,cAAe,EAAA;AACnC,EAAA,MAAM,SAAS,WAAgB,KAAA,MAAA;AAC/B,EAAA,MAAM,SAAS,iBAAkB,EAAA;AAGjC,EAAM,MAAA,eAAA,GAAkB,SAAS,SAAY,GAAA,SAAA;AAC7C,EAAM,MAAA,gBAAA,GAAmB,SAAS,SAAY,GAAA,SAAA;AAC9C,EAAM,MAAA,qBAAA,GAAwB,SAAS,SAAY,GAAA,SAAA;AAOnD,EAAA,MAAM,aAAa,QAAO,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,eAAoB,CAAA,KAAA,QAAA,GAAW,QAAQ,eAAkB,GAAA,IAAA;AAC5F,EAAA,MAAM,gBAAgB,UAAc,IAAA,wBAAA,CAAyB,IAAK,CAAA,UAAA,CAAW,MAAM,CAAA;AACnF,EAAA,MAAM,aAAgB,GAAA,UAAA,IAAc,EAAE,MAAA,IAAU,iBAAiB,UAAa,GAAA,IAAA;AAC9E,EAAA,MAAM,aAAa,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,eAAA;AACpC,EAAA,MAAM,YAAY,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,eAAA;AACnC,EAAA,MAAM,cAAc,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,gBAAA;AACrC,EAAA,MAAM,mBAAmB,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,qBAAA;AAC1C,EAAM,MAAA,YAAA,GAAe,aAAkB,IAAA,IAAA,GAAA,aAAA,GAAA,MAAA,GAAS,SAAY,GAAA,SAAA;AAC5D,EAAM,MAAA,YAAA,GAAe,SAAS,2BAA8B,GAAA,wBAAA;AAC5D,EAAM,MAAA,cAAA,GAAA,CAAiB,mCAAS,gBAAqB,MAAA,MAAA;AACrD,EAAM,MAAA,KAAA,GAAQ,OAAQ,CAAA,MAAM,YAAa,CAAA,OAAA,EAAS,KAAK,CAAG,EAAA,CAAC,OAAS,EAAA,KAAK,CAAC,CAAA;AAC1E,EAAM,MAAA,gBAAA,GAAA,CAAmB,EAAS,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAA,gBAAA,KAAT,IAA6B,GAAA,EAAA,GAAA,IAAA;AAGtD,EAAM,MAAA,OAAA,GAAU,QAAQ,MAAM;AA9GhC,IAAA,IAAAA,GAAAC,EAAAA,GAAAA;AA+GI,IAAM,MAAA,GAAA,GAAA,CAAMA,OAAAD,GAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,WAAP,IAAAA,GAAAA,MAAAA,GAAAA,GAAAA,CAAe,OAAf,KAAA,IAAA,GAAAC,GAAgD,GAAA,EAAA;AAC5D,IAAO,OAAA,OAAO,QAAQ,QAAY,IAAA,GAAA,CAAI,MAAS,GAAA,GAAA,CAAI,MAAS,GAAA,IAAA;AAAA,KAC3D,CAAC,CAAA,EAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,MAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAe,OAAO,CAAC,CAAA;AAG3B,EAAM,MAAA,UAAA,GAAa,YAAY,MAAM;AApHvC,IAAA,IAAAD,GAAAC,EAAAA,GAAAA;AAuHI,IAAA,MAAM,YAAY,QAAO,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,IAAS,CAAA,KAAA,QAAA,GAAW,MAAM,IAAO,GAAA,EAAA;AACjE,IAAA,IAAI,aAAc,CAAA,IAAA,CAAK,SAAS,CAAA,IAAK,mBAAqB,EAAA;AACxD,MAAA;AAAA;AAEF,IAAA,IAAA,CAAID,GAAA,GAAA,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,SAAZ,KAAA,IAAA,GAAA,MAAA,GAAAA,IAAA,IAA2B,CAAA,UAAA,CAAA,EAAA;AAC7B,MAAA,UAAA,CAAW,MAAO,EAAA;AAClB,MAAA;AAAA;AAEF,IAAA,CAAAC,MAAA,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,QAAA,KAAZ,gBAAAA,GAAA,CAAA,IAAA,CAAA,UAAA,EAAuB,cAAc,QAAS,CAAA;AAAA,MAC5C,IAAM,EAAA,uBAAA;AAAA,MACN,QAAQ,OAAU,GAAA;AAAA,QAChB;AAAA,OACE,GAAA;AAAA,KACL,CAAA,CAAA;AAAA,KACA,CAAC,UAAA,EAAY,OAAS,EAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,IAAI,CAAC,CAAA;AACrC,EAAM,MAAA,kBAAA,GAAqB,YAAY,MAAM;AAtI/C,IAAAD,IAAAA,GAAAA;AAuII,IAAI,IAAA;AACF,MAAA,CAAAA,MAAA,UAAY,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAA,QAAA,KAAZ,gBAAAA,GAAA,CAAA,IAAA,CAAA,UAAA,EAAuB,cAAc,UAAW,EAAA,CAAA;AAAA,KAC1C,CAAA,OAAA,CAAA,EAAA;AAAA;AAER,GACF,EAAG,CAAC,UAAU,CAAC,CAAA;AACf,EAAM,MAAA,qBAAA,GAAwB,YAAY,MAAM;AA7IlD,IAAAA,IAAAA,GAAAA;AA8II,IAAA,CAAAA,MAAA,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,QAAA,KAAZ,gBAAAA,GAAA,CAAA,IAAA,CAAA,UAAA,EAAuB,cAAc,QAAS,CAAA;AAAA,MAC5C,IAAM,EAAA,uBAAA;AAAA,MACN,QAAQ,OAAU,GAAA;AAAA,QAChB;AAAA,OACE,GAAA;AAAA,KACL,CAAA,CAAA;AAAA,GACA,EAAA,CAAC,UAAY,EAAA,OAAO,CAAC,CAAA;AACxB,EAAM,MAAA,aAAA,GAAgB,YAAY,MAAM;AArJ1C,IAAAA,IAAAA,GAAAA;AAsJI,IAAA,CAAAA,MAAA,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,QAAA,KAAZ,gBAAAA,GAAA,CAAA,IAAA,CAAA,UAAA,EAAuB,cAAc,QAAS,CAAA;AAAA,MAC5C,IAAM,EAAA,uBAAA;AAAA,MACN,QAAQ,OAAU,GAAA;AAAA,QAChB;AAAA,OACE,GAAA,MAAA;AAAA,MACJ,KAAO,EAAA;AAAA,KACR,CAAA,CAAA;AAAA,GACA,EAAA,CAAC,UAAY,EAAA,OAAO,CAAC,CAAA;AAGxB,EAAM,MAAA,SAAA,GAAY,OAAQ,CAAA,IAAI,CAAK,IAAA,QAAA;AACnC,EAAM,MAAA,QAAA,GAAW,SAAY,mBAAA,GAAA,CAAC,SAAU,EAAA,EAAA,OAAA,EAAS,UAAY,EAAA,kBAAA,EAAmB,SAAU,EAAA,iBAAA,EAAkB,QAAS,EAAA,KAAA,EAAO,CAAC;AAAA,IAC3H;AAAA,GACI,KAAA,CAAC,MAAO,CAAA,UAAA,EAAY,OAAW,IAAA,MAAA,CAAO,iBAAiB,CAAA,EAAG,OAAS,EAAA,CAAA,EAC/D,QAAC,kBAAA,GAAA,CAAA,sBAAA,EAAA,EAAuB,MAAK,cAAe,EAAA,IAAA,EAAM,SAAY,GAAA,CAAA,EAAG,KAAO,EAAA,SAAA,EAAW,CACvF,EAAA,CAAA,GAAe,6BAAc,GAAA,CAAA,SAAA,EAAA,EAAU,OAAS,EAAA,kBAAA,EAAoB,kBAAmB,EAAA,WAAA,EAAY,iBAAkB,EAAA,QAAA,EAAS,OAAO,CAAC;AAAA,IAC1I;AAAA,QACI,CAAC,MAAA,CAAO,YAAY,OAAW,IAAA,MAAA,CAAO,iBAAiB,CAAG,EAAA,OAAA,EAAS,GAC/D,QAAC,kBAAA,GAAA,CAAA,sBAAA,EAAA,EAAuB,MAAK,MAAO,EAAA,IAAA,EAAM,WAAW,KAAO,EAAA,SAAA,EAAW,GAC3E,CAAe,GAAA,IAAA;AACrB,EAAA,MAAM,SAAY,GAAA,SAAA,mBAAa,GAAA,CAAA,IAAA,EAAA,EAAK,KAAO,EAAA,CAAC,MAAO,CAAA,KAAA,EAAO,cAAiB,GAAA,MAAA,CAAO,cAAiB,GAAA,MAAA,CAAO,gBAAkB,EAAA;AAAA,IAC1H,KAAO,EAAA;AAAA,GACT,EAAG,gBAAgB,CAAG,EAAA,aAAA,EAAe,GAAG,aAAc,EAAA,MAAA,EAC3C,iBACL,CAAU,GAAA,IAAA;AAChB,EAAM,MAAA,aAAA,GAAgB,eAAe,WAAe,IAAA,WAAA;AACpD,EAAA,MAAM,YAAY,aAAgB,mBAAA,IAAA,CAAC,IAAK,EAAA,EAAA,KAAA,EAAO,OAAO,YAC3C,EAAA,QAAA,EAAA;AAAA,IAAc,WAAA,mBAAA,GAAA,CAAC,oBAAiB,CAAK,GAAA,IAAA;AAAA,IACrC,8BAAe,GAAA,CAAA,SAAA,EAAA,EAAU,OAAS,EAAA,qBAAA,EAAuB,OAAO,CAAC;AAAA,MACxE;AAAA,KACI,KAAA,CAAC,MAAO,CAAA,YAAA,EAAc,WAAW,MAAO,CAAA,mBAAmB,CAAG,EAAA,kBAAA,EAAmB,gBAAe,iBAAkB,EAAA,QAAA,EAAS,OAAS,EAAA,CAAA,EAC1H,8BAAC,IAAK,EAAA,EAAA,KAAA,EAAO,CAAC,MAAA,CAAO,mBAAmB,MAAS,GAAA,MAAA,CAAO,qBAAwB,GAAA,IAAI,GAChF,QAAC,kBAAA,GAAA,CAAA,sBAAA,EAAA,EAAuB,IAAK,EAAA,SAAA,EAAU,MAAM,EAAI,EAAA,KAAA,EAAO,WAAa,EAAA,CAAA,EACzE,GACJ,CAAe,GAAA,IAAA;AAAA,IAClB,8BAAe,GAAA,CAAA,SAAA,EAAA,EAAU,OAAS,EAAA,aAAA,EAAe,OAAO,CAAC;AAAA,MAChE;AAAA,KACI,KAAA,CAAC,MAAO,CAAA,YAAA,EAAc,WAAW,MAAO,CAAA,mBAAmB,CAAG,EAAA,kBAAA,EAAmB,YAAW,iBAAkB,EAAA,QAAA,EAAS,OAAS,EAAA,CAAA,EACtH,8BAAC,IAAK,EAAA,EAAA,KAAA,EAAO,CAAC,MAAA,CAAO,mBAAmB,MAAS,GAAA,MAAA,CAAO,qBAAwB,GAAA,IAAI,GAChF,QAAC,kBAAA,GAAA,CAAA,sBAAA,EAAA,EAAuB,IAAK,EAAA,mBAAA,EAAoB,MAAM,EAAI,EAAA,KAAA,EAAO,gBAAkB,EAAA,CAAA,EACxF,GACJ,CAAe,GAAA;AAAA,GAAA,EACvB,CAAU,GAAA,IAAA;AAChB,EAAA,uBACU,IAAA,CAAA,QAAA,EAAA,EAAA,QAAA,EAAA;AAAA,oBAAA,GAAA,CAAC,SAAU,EAAA,EAAA,KAAA,EAAO,MAAS,GAAA,OAAA,GAAU,MAAQ,EAAA,CAAA;AAAA,wBAC5C,YAAa,EAAA,EAAA,KAAA,EAAO,CAAC,KAAK,GAAG,KAAO,EAAA;AAAA,MAC3C,eAAiB,EAAA;AAAA,OAEP,QAAC,kBAAA,IAAA,CAAA,IAAA,EAAA,EAAK,KAAO,EAAA,CAAC,OAAO,GAAK,EAAA;AAAA,MAClC,eAAiB,EAAA,YAAA;AAAA,MACjB,iBAAmB,EAAA,YAAA;AAAA,MACnB,UAAY,EAAA,MAAA,CAAO,GAAM,GAAA,CAAA,GAAI,CAAI,GAAA;AAAA,KAChC,EAAA,CAAA,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,WAAT,KAAA,IAAA,GAAA,EAAA,GAAwB,IAAI,CACjB,EAAA,QAAA,EAAA;AAAA,sBAAA,GAAA,CAAC,IAAK,EAAA,EAAA,KAAA,EAAO,MAAO,CAAA,QAAA,EAAW,QAAS,EAAA,QAAA,EAAA,CAAA;AAAA,sBACxC,GAAA,CAAC,IAAK,EAAA,EAAA,KAAA,EAAO,CAAC,MAAA,CAAO,WAAW,cAAkB,IAAA,MAAA,CAAO,aAAa,CAAA,EAAI,QAAU,EAAA,SAAA,EAAA,CAAA;AAAA,sBACnF,GAAA,CAAA,IAAA,EAAA,EAAK,KAAO,EAAA,MAAA,CAAO,WAAY,QAAU,EAAA,SAAA,EAAA;AAAA,KAAA,EAC9C,CACJ,EAAA;AAAA,GACJ,EAAA,CAAA;AACR,CAAA;AACA,MAAM,MAAA,GAAS,WAAW,MAAO,CAAA;AAAA,EAC/B,GAAK,EAAA;AAAA,IACH,aAAe,EAAA,KAAA;AAAA,IACf,UAAY,EAAA,QAAA;AAAA,IACZ,iBAAmB,EAAA,EAAA;AAAA,IACnB,eAAiB,EAAA,EAAA;AAAA,IACjB,SAAW,EAAA,EAAA;AAAA,IACX,mBAAmB,UAAW,CAAA;AAAA,GAChC;AAAA,EACA,QAAU,EAAA;AAAA,IACR,QAAU,EAAA,EAAA;AAAA,IACV,UAAY,EAAA,YAAA;AAAA,IACZ,cAAgB,EAAA;AAAA,GAClB;AAAA,EACA,SAAW,EAAA;AAAA,IACT,IAAM,EAAA,CAAA;AAAA,IACN,UAAY,EAAA,QAAA;AAAA,IACZ,cAAgB,EAAA,QAAA;AAAA,IAChB,iBAAmB,EAAA,CAAA;AAAA,IACnB,QAAU,EAAA;AAAA,GACZ;AAAA,EACA,aAAe,EAAA;AAAA,IACb,UAAY,EAAA;AAAA,GACd;AAAA,EACA,SAAW,EAAA;AAAA,IACT,QAAU,EAAA,EAAA;AAAA,IACV,UAAY,EAAA,UAAA;AAAA,IACZ,cAAgB,EAAA;AAAA,GAClB;AAAA,EACA,YAAc,EAAA;AAAA,IACZ,aAAe,EAAA,KAAA;AAAA,IACf,UAAY,EAAA,QAAA;AAAA,IACZ,GAAK,EAAA;AAAA,GACP;AAAA,EACA,KAAO,EAAA;AAAA,IACL,QAAU,EAAA,EAAA;AAAA,IACV,UAAY,EAAA,KAAA;AAAA,IACZ,aAAe,EAAA,IAAA;AAAA,IACf,KAAO,EAAA;AAAA,GACT;AAAA,EACA,gBAAkB,EAAA;AAAA,IAChB,SAAW,EAAA;AAAA,GACb;AAAA,EACA,cAAgB,EAAA;AAAA,IACd,SAAW,EAAA;AAAA,GACb;AAAA,EACA,UAAY,EAAA;AAAA,IACV,KAAO,EAAA,EAAA;AAAA,IACP,MAAQ,EAAA,EAAA;AAAA,IACR,UAAY,EAAA,QAAA;AAAA,IACZ,cAAgB,EAAA,QAAA;AAAA,IAChB,YAAc,EAAA;AAAA,GAChB;AAAA,EACA,iBAAmB,EAAA;AAAA,IACjB,OAAS,EAAA;AAAA,GACX;AAAA,EACA,YAAc,EAAA;AAAA,IACZ,OAAS,EAAA,CAAA;AAAA,IACT,UAAY,EAAA,QAAA;AAAA,IACZ,cAAgB,EAAA,QAAA;AAAA,IAChB,YAAc,EAAA;AAAA,GAChB;AAAA,EACA,mBAAqB,EAAA;AAAA,IACnB,OAAS,EAAA;AAAA,GACX;AAAA,EACA,iBAAmB,EAAA;AAAA,IACjB,KAAO,EAAA,EAAA;AAAA,IACP,MAAQ,EAAA,EAAA;AAAA,IACR,YAAc,EAAA,EAAA;AAAA,IACd,UAAY,EAAA,QAAA;AAAA,IACZ,cAAgB,EAAA,QAAA;AAAA,IAChB,eAAA,EAAiB,aAAa,KAAM,CAAA,OAAA;AAAA,IACpC,WAAa,EAAA,CAAA;AAAA,IACb,WAAA,EAAa,aAAa,KAAM,CAAA,MAAA;AAAA,IAChC,WAAa,EAAA,SAAA;AAAA,IACb,aAAe,EAAA,IAAA;AAAA,IACf,YAAc,EAAA,CAAA;AAAA,IACd,YAAc,EAAA;AAAA,MACZ,KAAO,EAAA,CAAA;AAAA,MACP,MAAQ,EAAA;AAAA,KACV;AAAA,IACA,SAAW,EAAA;AAAA,GACb;AAAA,EACA,qBAAuB,EAAA;AAAA,IACrB,eAAiB,EAAA,SAAA;AAAA,IACjB,WAAa,EAAA;AAAA;AAEjB,CAAC,CAAA;AACD,yBAAe,KAAA,CAAM,KAAK,gBAAgB,CAAA"}
+{"version":3,"file":"NavigationHeader.js","sources":["../../../src/components/NavigationHeader/NavigationHeader.tsx"],"sourcesContent":["/**\n * Universal navigation header for the Yantra mobile app.\n *\n * Wired via `customHeader` in `compute.ts`, so the React Navigation runtime\n * passes us TWO sets of props on every render:\n *\n *  1. The standard navigator props — `navigation`, `route`, `options`, `back`,\n *     `layout`. We read EVERYTHING visual out of `options` (set by `props.options`\n *     in compute.ts):\n *        • `options.title` / `options.headerTitle` — visible title text\n *        • `options.headerTitleAlign` — `'left' | 'center'`\n *        • `options.headerTitleStyle` — text style overrides (fontWeight, etc.)\n *        • `options.headerTintColor`  — title + icon tint (light-mode default)\n *        • `options.headerStyle`      — outer header view style overrides\n *\n *  2. The static `customHeader.props` from compute.ts — the layout flags\n *     describing what the header should render for this route:\n *        • `showTitle, showToggle, showBack, showFilter, isSearchBack`\n *        • `showGateway, showHistory, showNewChat` (`showGateway` is intended for Home only)\n *        • `headerBgColor`\n *\n * Screens never touch the header — no `setOptions`, no slot registration.\n * If a route needs a different header configuration, change its\n * `customHeader.props` / `props.options` in `compute.ts`.\n */\nimport React, { useCallback, useMemo } from 'react';\nimport { Pressable, StyleSheet, View, useColorScheme } from 'react-native';\nimport { SafeAreaView, useSafeAreaInsets } from 'react-native-safe-area-context';\nimport { StatusBar } from 'expo-status-bar';\nimport { CommonActions, DrawerActions, useNavigation } from '@react-navigation/native';\nimport { getHeaderTitle } from '@react-navigation/elements';\nimport { MaterialCommunityIcons } from '@expo/vector-icons';\nimport { Text } from '@admin-layout/gluestack-ui-mobile';\nimport { GatewayConnector } from '../GatewayConnector';\nimport { mobileTokens } from '../../theme/mobileTokens';\nimport { tryWebBuilderBack } from '../../screens/WebBuilder/webbuilderBackHandler';\n\ninterface NavigationHeaderProps {\n    /** React Navigation header props (typed loose because they vary per navigator). */\n    navigation?: any;\n    route?: any;\n    options?: any;\n    /** Set by the native-stack navigator when there's a previous screen on the stack. */\n    back?: { title?: string };\n\n    showTitle?: boolean;\n    showToggle?: boolean;\n    showBack?: boolean;\n    showFilter?: boolean;\n    isSearchBack?: boolean;\n    showGateway?: boolean;\n    showHistory?: boolean;\n    showNewChat?: boolean;\n    headerBgColor?: string;\n}\n\nconst ICON_SIZE = 22;\n\nfunction resolveTitle(options: any, route: any): string {\n    if (typeof options?.title === 'string' && options.title.trim()) {\n        return options.title.trim();\n    }\n    if (typeof options?.headerTitle === 'string' && options.headerTitle.trim()) {\n        return options.headerTitle.trim();\n    }\n    const fallback = getHeaderTitle?.(options ?? {}, route?.name ?? 'Yantra');\n    return typeof fallback === 'string' && fallback.trim() ? fallback : 'Yantra';\n}\n\nconst NavigationHeader: React.FC<NavigationHeaderProps> = (props) => {\n    const {\n        navigation: navProp,\n        route,\n        options,\n        back,\n        showTitle = true,\n        showToggle = false,\n        showBack = false,\n        showGateway = false,\n        showHistory = false,\n        showNewChat = false,\n        headerBgColor,\n    } = props;\n\n    const fallbackNav = useNavigation<any>();\n    const navigation = navProp ?? fallbackNav;\n\n    const colorScheme = useColorScheme();\n    const isDark = colorScheme === 'dark';\n    const insets = useSafeAreaInsets();\n\n    /* ── Theme + options-driven colours / styles ─────────────────────────── */\n    const themeTitleColor = isDark ? '#f1f5f9' : '#0f172a';\n    const themeAccentColor = isDark ? '#a5b4fc' : '#4338ca';\n    const themeNewChatIconColor = isDark ? '#e5e7eb' : '#000000';\n\n    /**\n     * Honour `options.headerTintColor` (set in `compute.ts` → `props.options`).\n     * In dark mode we ignore a hard \"black\" tint so the title stays legible —\n     * but any non-black tint is respected in both modes.\n     */\n    const optionTint = typeof options?.headerTintColor === 'string' ? options.headerTintColor : null;\n    const tintLooksDark = optionTint && /^(#?000(000)?|black)$/i.test(optionTint.trim());\n    const effectiveTint = optionTint && !(isDark && tintLooksDark) ? optionTint : null;\n\n    const titleColor = effectiveTint ?? themeTitleColor;\n    const iconColor = effectiveTint ?? themeTitleColor;\n    const accentColor = effectiveTint ?? themeAccentColor;\n    const newChatIconColor = effectiveTint ?? themeNewChatIconColor;\n\n    const surfaceColor = headerBgColor ?? (isDark ? '#0f172a' : '#ffffff');\n    const dividerColor = isDark ? 'rgba(148, 163, 184, 0.18)' : 'rgba(15, 23, 42, 0.06)';\n\n    const titleAlignLeft = options?.headerTitleAlign === 'left';\n    const title = useMemo(() => resolveTitle(options, route), [options, route]);\n    const optionTitleStyle = options?.headerTitleStyle ?? null;\n\n    /** Org slug used by header navigation actions; falls back to route params. */\n    const orgName = useMemo(() => {\n        const raw = (route?.params?.orgName as string | undefined) ?? '';\n        return typeof raw === 'string' && raw.trim() ? raw.trim() : null;\n    }, [route?.params?.orgName]);\n\n    /* ── Action handlers ─────────────────────────────────────────────────── */\n    const handleBack = useCallback(() => {\n        // WebBuilder: dismiss in-app preview first; otherwise leave the screen.\n        const routeName = typeof route?.name === 'string' ? route.name : '';\n        if (/webbuilder/i.test(routeName) && tryWebBuilderBack()) {\n            return;\n        }\n        if (navigation?.canGoBack?.()) {\n            navigation.goBack();\n            return;\n        }\n        // Fallback when WebBuilder was opened without stack history (e.g. deep link).\n        navigation?.dispatch?.(\n            CommonActions.navigate({\n                name: 'MainStack.Layout.Home',\n                params: orgName ? { orgName } : undefined,\n            }),\n        );\n    }, [navigation, orgName, route?.name]);\n\n    const handleToggleDrawer = useCallback(() => {\n        try {\n            navigation?.dispatch?.(DrawerActions.openDrawer());\n        } catch {\n            /* Current navigator may not be a drawer — ignore. */\n        }\n    }, [navigation]);\n\n    const handleOpenChatHistory = useCallback(() => {\n        navigation?.dispatch?.(\n            CommonActions.navigate({\n                name: 'MainStack.ChatHistory',\n                params: orgName ? { orgName } : undefined,\n            }),\n        );\n    }, [navigation, orgName]);\n\n    const handleNewChat = useCallback(() => {\n        navigation?.dispatch?.(\n            CommonActions.navigate({\n                name: 'MainStack.Layout.Home',\n                params: orgName ? { orgName } : undefined,\n                merge: true,\n            }),\n        );\n    }, [navigation, orgName]);\n\n    /* ── Slot composition (left → title → right) ─────────────────────────── */\n    const wantsBack = Boolean(back) || showBack;\n\n    const leftSlot = wantsBack ? (\n        <Pressable\n            onPress={handleBack}\n            accessibilityLabel=\"Go back\"\n            accessibilityRole=\"button\"\n            style={({ pressed }) => [styles.iconButton, pressed && styles.iconButtonPressed]}\n            hitSlop={8}\n        >\n            <MaterialCommunityIcons name=\"chevron-left\" size={ICON_SIZE + 4} color={iconColor} />\n        </Pressable>\n    ) : showToggle ? (\n        <Pressable\n            onPress={handleToggleDrawer}\n            accessibilityLabel=\"Open menu\"\n            accessibilityRole=\"button\"\n            style={({ pressed }) => [styles.iconButton, pressed && styles.iconButtonPressed]}\n            hitSlop={8}\n        >\n            <MaterialCommunityIcons name=\"menu\" size={ICON_SIZE} color={iconColor} />\n        </Pressable>\n    ) : null;\n\n    const titleSlot = showTitle ? (\n        <Text\n            style={[\n                styles.title,\n                titleAlignLeft ? styles.titleAlignLeft : styles.titleAlignCenter,\n                { color: titleColor },\n                optionTitleStyle,\n            ]}\n            numberOfLines={1}\n            ellipsizeMode=\"tail\"\n        >\n            {title}\n        </Text>\n    ) : null;\n\n    const showRightSlot = showGateway || showHistory || showNewChat;\n    const rightSlot = showRightSlot ? (\n        <View style={styles.rightActions}>\n            {showGateway ? <GatewayConnector /> : null}\n            {showHistory ? (\n                <Pressable\n                    onPress={handleOpenChatHistory}\n                    style={({ pressed }) => [styles.actionButton, pressed && styles.actionButtonPressed]}\n                    accessibilityLabel=\"Chat history\"\n                    accessibilityRole=\"button\"\n                    hitSlop={8}\n                >\n                    <View style={[styles.actionButtonInner, isDark ? styles.actionButtonInnerDark : null]}>\n                        <MaterialCommunityIcons name=\"history\" size={19} color={accentColor} />\n                    </View>\n                </Pressable>\n            ) : null}\n            {showNewChat ? (\n                <Pressable\n                    onPress={handleNewChat}\n                    style={({ pressed }) => [styles.actionButton, pressed && styles.actionButtonPressed]}\n                    accessibilityLabel=\"New chat\"\n                    accessibilityRole=\"button\"\n                    hitSlop={8}\n                >\n                    <View style={[styles.actionButtonInner, isDark ? styles.actionButtonInnerDark : null]}>\n                        <MaterialCommunityIcons name=\"chat-plus-outline\" size={20} color={newChatIconColor} />\n                    </View>\n                </Pressable>\n            ) : null}\n        </View>\n    ) : null;\n\n    return (\n        <>\n            <StatusBar style={isDark ? 'light' : 'dark'} />\n            <SafeAreaView edges={['top']} style={{ backgroundColor: surfaceColor }}>\n                <View\n                    style={[\n                        styles.row,\n                        {\n                            backgroundColor: surfaceColor,\n                            borderBottomColor: dividerColor,\n                            paddingTop: insets.top > 0 ? 0 : 6,\n                        },\n                        options?.headerStyle ?? null,\n                    ]}\n                >\n                    <View style={styles.leftSlot}>{leftSlot}</View>\n                    <View style={[styles.titleSlot, titleAlignLeft && styles.titleSlotLeft]}>{titleSlot}</View>\n                    <View style={styles.rightSlot}>{rightSlot}</View>\n                </View>\n            </SafeAreaView>\n        </>\n    );\n};\n\nconst styles = StyleSheet.create({\n    row: {\n        flexDirection: 'row',\n        alignItems: 'center',\n        paddingHorizontal: 12,\n        paddingVertical: 10,\n        minHeight: 52,\n        borderBottomWidth: StyleSheet.hairlineWidth,\n    },\n    leftSlot: {\n        minWidth: 40,\n        alignItems: 'flex-start',\n        justifyContent: 'center',\n    },\n    titleSlot: {\n        flex: 1,\n        alignItems: 'center',\n        justifyContent: 'center',\n        paddingHorizontal: 8,\n        minWidth: 0,\n    },\n    titleSlotLeft: {\n        alignItems: 'flex-start',\n    },\n    rightSlot: {\n        minWidth: 40,\n        alignItems: 'flex-end',\n        justifyContent: 'center',\n    },\n    rightActions: {\n        flexDirection: 'row',\n        alignItems: 'center',\n        gap: 6,\n    },\n    title: {\n        fontSize: 17,\n        fontWeight: '700',\n        letterSpacing: -0.2,\n        width: '100%',\n    },\n    titleAlignCenter: {\n        textAlign: 'center',\n    },\n    titleAlignLeft: {\n        textAlign: 'left',\n    },\n    iconButton: {\n        width: 36,\n        height: 36,\n        alignItems: 'center',\n        justifyContent: 'center',\n        borderRadius: 18,\n    },\n    iconButtonPressed: {\n        opacity: 0.6,\n    },\n    actionButton: {\n        padding: 0,\n        alignItems: 'center',\n        justifyContent: 'center',\n        borderRadius: 22,\n    },\n    actionButtonPressed: {\n        opacity: 0.6,\n    },\n    actionButtonInner: {\n        width: 32,\n        height: 32,\n        borderRadius: 16,\n        alignItems: 'center',\n        justifyContent: 'center',\n        backgroundColor: mobileTokens.color.surface,\n        borderWidth: 1,\n        borderColor: mobileTokens.color.border,\n        shadowColor: '#0f172a',\n        shadowOpacity: 0.08,\n        shadowRadius: 5,\n        shadowOffset: { width: 0, height: 2 },\n        elevation: 2,\n    },\n    actionButtonInnerDark: {\n        backgroundColor: '#0f172a',\n        borderColor: '#334155',\n    },\n});\n\nexport default React.memo(NavigationHeader);\n"],"names":["_a","_b"],"mappings":"6tBAuDA,MAAM,SAAY,GAAA,EAAA;AAClB,SAAS,YAAA,CAAa,SAAc,KAAoB,EAAA;AAxDxD,EAAA,IAAA,EAAA,EAAA,EAAA;AAyDE,EAAA,IAAI,QAAO,OAAS,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAA,KAAA,CAAA,KAAU,YAAY,OAAQ,CAAA,KAAA,CAAM,MAAQ,EAAA;AAC9D,IAAO,OAAA,OAAA,CAAQ,MAAM,IAAK,EAAA;AAAA;AAE5B,EAAA,IAAI,QAAO,OAAS,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAA,WAAA,CAAA,KAAgB,YAAY,OAAQ,CAAA,WAAA,CAAY,MAAQ,EAAA;AAC1E,IAAO,OAAA,OAAA,CAAQ,YAAY,IAAK,EAAA;AAAA;AAElC,EAAA,MAAM,YAAW,EAAiB,GAAA,cAAA,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAA,OAAA,IAAA,IAAA,GAAA,OAAA,GAAW,EAAI,EAAA,CAAA,EAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,SAAP,IAAe,GAAA,EAAA,GAAA,QAAA,CAAA;AAChE,EAAA,OAAO,OAAO,QAAa,KAAA,QAAA,IAAY,QAAS,CAAA,IAAA,KAAS,QAAW,GAAA,QAAA;AACtE;AACA,MAAM,mBAAoD,CAAS,KAAA,KAAA;AAlEnE,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAmEE,EAAM,MAAA;AAAA,IACJ,UAAY,EAAA,OAAA;AAAA,IACZ,KAAA;AAAA,IACA,OAAA;AAAA,IACA,IAAA;AAAA,IACA,SAAY,GAAA,IAAA;AAAA,IACZ,UAAa,GAAA,KAAA;AAAA,IACb,QAAW,GAAA,KAAA;AAAA,IACX,WAAc,GAAA,KAAA;AAAA,IACd,WAAc,GAAA,KAAA;AAAA,IACd,WAAc,GAAA,KAAA;AAAA,IACd;AAAA,GACE,GAAA,KAAA;AACJ,EAAA,MAAM,cAAc,aAAmB,EAAA;AACvC,EAAA,MAAM,aAAa,OAAW,IAAA,IAAA,GAAA,OAAA,GAAA,WAAA;AAC9B,EAAA,MAAM,cAAc,cAAe,EAAA;AACnC,EAAA,MAAM,SAAS,WAAgB,KAAA,MAAA;AAC/B,EAAA,MAAM,SAAS,iBAAkB,EAAA;AAGjC,EAAM,MAAA,eAAA,GAAkB,SAAS,SAAY,GAAA,SAAA;AAC7C,EAAM,MAAA,gBAAA,GAAmB,SAAS,SAAY,GAAA,SAAA;AAC9C,EAAM,MAAA,qBAAA,GAAwB,SAAS,SAAY,GAAA,SAAA;AAOnD,EAAA,MAAM,aAAa,QAAO,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,eAAoB,CAAA,KAAA,QAAA,GAAW,QAAQ,eAAkB,GAAA,IAAA;AAC5F,EAAA,MAAM,gBAAgB,UAAc,IAAA,wBAAA,CAAyB,IAAK,CAAA,UAAA,CAAW,MAAM,CAAA;AACnF,EAAA,MAAM,aAAgB,GAAA,UAAA,IAAc,EAAE,MAAA,IAAU,iBAAiB,UAAa,GAAA,IAAA;AAC9E,EAAA,MAAM,aAAa,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,eAAA;AACpC,EAAA,MAAM,YAAY,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,eAAA;AACnC,EAAA,MAAM,cAAc,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,gBAAA;AACrC,EAAA,MAAM,mBAAmB,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,qBAAA;AAC1C,EAAM,MAAA,YAAA,GAAe,aAAkB,IAAA,IAAA,GAAA,aAAA,GAAA,MAAA,GAAS,SAAY,GAAA,SAAA;AAC5D,EAAM,MAAA,YAAA,GAAe,SAAS,2BAA8B,GAAA,wBAAA;AAC5D,EAAM,MAAA,cAAA,GAAA,CAAiB,mCAAS,gBAAqB,MAAA,MAAA;AACrD,EAAM,MAAA,KAAA,GAAQ,OAAQ,CAAA,MAAM,YAAa,CAAA,OAAA,EAAS,KAAK,CAAG,EAAA,CAAC,OAAS,EAAA,KAAK,CAAC,CAAA;AAC1E,EAAM,MAAA,gBAAA,GAAA,CAAmB,EAAS,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAA,gBAAA,KAAT,IAA6B,GAAA,EAAA,GAAA,IAAA;AAGtD,EAAM,MAAA,OAAA,GAAU,QAAQ,MAAM;AA9GhC,IAAA,IAAAA,GAAAC,EAAAA,GAAAA;AA+GI,IAAM,MAAA,GAAA,GAAA,CAAMA,OAAAD,GAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,WAAP,IAAAA,GAAAA,MAAAA,GAAAA,GAAAA,CAAe,OAAf,KAAA,IAAA,GAAAC,GAAgD,GAAA,EAAA;AAC5D,IAAO,OAAA,OAAO,QAAQ,QAAY,IAAA,GAAA,CAAI,MAAS,GAAA,GAAA,CAAI,MAAS,GAAA,IAAA;AAAA,KAC3D,CAAC,CAAA,EAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,MAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAe,OAAO,CAAC,CAAA;AAG3B,EAAM,MAAA,UAAA,GAAa,YAAY,MAAM;AApHvC,IAAA,IAAAD,GAAAC,EAAAA,GAAAA;AAsHI,IAAA,MAAM,YAAY,QAAO,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,IAAS,CAAA,KAAA,QAAA,GAAW,MAAM,IAAO,GAAA,EAAA;AACjE,IAAA,IAAI,aAAc,CAAA,IAAA,CAAK,SAAS,CAAA,IAAK,mBAAqB,EAAA;AACxD,MAAA;AAAA;AAEF,IAAA,IAAA,CAAID,GAAA,GAAA,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,SAAZ,KAAA,IAAA,GAAA,MAAA,GAAAA,IAAA,IAA2B,CAAA,UAAA,CAAA,EAAA;AAC7B,MAAA,UAAA,CAAW,MAAO,EAAA;AAClB,MAAA;AAAA;AAGF,IAAA,CAAAC,MAAA,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,QAAA,KAAZ,gBAAAA,GAAA,CAAA,IAAA,CAAA,UAAA,EAAuB,cAAc,QAAS,CAAA;AAAA,MAC5C,IAAM,EAAA,uBAAA;AAAA,MACN,QAAQ,OAAU,GAAA;AAAA,QAChB;AAAA,OACE,GAAA;AAAA,KACL,CAAA,CAAA;AAAA,KACA,CAAC,UAAA,EAAY,OAAS,EAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,IAAI,CAAC,CAAA;AACrC,EAAM,MAAA,kBAAA,GAAqB,YAAY,MAAM;AAtI/C,IAAAD,IAAAA,GAAAA;AAuII,IAAI,IAAA;AACF,MAAA,CAAAA,MAAA,UAAY,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAA,QAAA,KAAZ,gBAAAA,GAAA,CAAA,IAAA,CAAA,UAAA,EAAuB,cAAc,UAAW,EAAA,CAAA;AAAA,KAC1C,CAAA,OAAA,CAAA,EAAA;AAAA;AAER,GACF,EAAG,CAAC,UAAU,CAAC,CAAA;AACf,EAAM,MAAA,qBAAA,GAAwB,YAAY,MAAM;AA7IlD,IAAAA,IAAAA,GAAAA;AA8II,IAAA,CAAAA,MAAA,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,QAAA,KAAZ,gBAAAA,GAAA,CAAA,IAAA,CAAA,UAAA,EAAuB,cAAc,QAAS,CAAA;AAAA,MAC5C,IAAM,EAAA,uBAAA;AAAA,MACN,QAAQ,OAAU,GAAA;AAAA,QAChB;AAAA,OACE,GAAA;AAAA,KACL,CAAA,CAAA;AAAA,GACA,EAAA,CAAC,UAAY,EAAA,OAAO,CAAC,CAAA;AACxB,EAAM,MAAA,aAAA,GAAgB,YAAY,MAAM;AArJ1C,IAAAA,IAAAA,GAAAA;AAsJI,IAAA,CAAAA,MAAA,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,QAAA,KAAZ,gBAAAA,GAAA,CAAA,IAAA,CAAA,UAAA,EAAuB,cAAc,QAAS,CAAA;AAAA,MAC5C,IAAM,EAAA,uBAAA;AAAA,MACN,QAAQ,OAAU,GAAA;AAAA,QAChB;AAAA,OACE,GAAA,MAAA;AAAA,MACJ,KAAO,EAAA;AAAA,KACR,CAAA,CAAA;AAAA,GACA,EAAA,CAAC,UAAY,EAAA,OAAO,CAAC,CAAA;AAGxB,EAAM,MAAA,SAAA,GAAY,OAAQ,CAAA,IAAI,CAAK,IAAA,QAAA;AACnC,EAAM,MAAA,QAAA,GAAW,SAAY,mBAAA,GAAA,CAAC,SAAU,EAAA,EAAA,OAAA,EAAS,UAAY,EAAA,kBAAA,EAAmB,SAAU,EAAA,iBAAA,EAAkB,QAAS,EAAA,KAAA,EAAO,CAAC;AAAA,IAC3H;AAAA,GACI,KAAA,CAAC,MAAO,CAAA,UAAA,EAAY,OAAW,IAAA,MAAA,CAAO,iBAAiB,CAAA,EAAG,OAAS,EAAA,CAAA,EAC/D,QAAC,kBAAA,GAAA,CAAA,sBAAA,EAAA,EAAuB,MAAK,cAAe,EAAA,IAAA,EAAM,SAAY,GAAA,CAAA,EAAG,KAAO,EAAA,SAAA,EAAW,CACvF,EAAA,CAAA,GAAe,6BAAc,GAAA,CAAA,SAAA,EAAA,EAAU,OAAS,EAAA,kBAAA,EAAoB,kBAAmB,EAAA,WAAA,EAAY,iBAAkB,EAAA,QAAA,EAAS,OAAO,CAAC;AAAA,IAC1I;AAAA,QACI,CAAC,MAAA,CAAO,YAAY,OAAW,IAAA,MAAA,CAAO,iBAAiB,CAAG,EAAA,OAAA,EAAS,GAC/D,QAAC,kBAAA,GAAA,CAAA,sBAAA,EAAA,EAAuB,MAAK,MAAO,EAAA,IAAA,EAAM,WAAW,KAAO,EAAA,SAAA,EAAW,GAC3E,CAAe,GAAA,IAAA;AACrB,EAAA,MAAM,SAAY,GAAA,SAAA,mBAAa,GAAA,CAAA,IAAA,EAAA,EAAK,KAAO,EAAA,CAAC,MAAO,CAAA,KAAA,EAAO,cAAiB,GAAA,MAAA,CAAO,cAAiB,GAAA,MAAA,CAAO,gBAAkB,EAAA;AAAA,IAC1H,KAAO,EAAA;AAAA,GACT,EAAG,gBAAgB,CAAG,EAAA,aAAA,EAAe,GAAG,aAAc,EAAA,MAAA,EAC3C,iBACL,CAAU,GAAA,IAAA;AAChB,EAAM,MAAA,aAAA,GAAgB,eAAe,WAAe,IAAA,WAAA;AACpD,EAAA,MAAM,YAAY,aAAgB,mBAAA,IAAA,CAAC,IAAK,EAAA,EAAA,KAAA,EAAO,OAAO,YAC3C,EAAA,QAAA,EAAA;AAAA,IAAc,WAAA,mBAAA,GAAA,CAAC,oBAAiB,CAAK,GAAA,IAAA;AAAA,IACrC,8BAAe,GAAA,CAAA,SAAA,EAAA,EAAU,OAAS,EAAA,qBAAA,EAAuB,OAAO,CAAC;AAAA,MACxE;AAAA,KACI,KAAA,CAAC,MAAO,CAAA,YAAA,EAAc,WAAW,MAAO,CAAA,mBAAmB,CAAG,EAAA,kBAAA,EAAmB,gBAAe,iBAAkB,EAAA,QAAA,EAAS,OAAS,EAAA,CAAA,EAC1H,8BAAC,IAAK,EAAA,EAAA,KAAA,EAAO,CAAC,MAAA,CAAO,mBAAmB,MAAS,GAAA,MAAA,CAAO,qBAAwB,GAAA,IAAI,GAChF,QAAC,kBAAA,GAAA,CAAA,sBAAA,EAAA,EAAuB,IAAK,EAAA,SAAA,EAAU,MAAM,EAAI,EAAA,KAAA,EAAO,WAAa,EAAA,CAAA,EACzE,GACJ,CAAe,GAAA,IAAA;AAAA,IAClB,8BAAe,GAAA,CAAA,SAAA,EAAA,EAAU,OAAS,EAAA,aAAA,EAAe,OAAO,CAAC;AAAA,MAChE;AAAA,KACI,KAAA,CAAC,MAAO,CAAA,YAAA,EAAc,WAAW,MAAO,CAAA,mBAAmB,CAAG,EAAA,kBAAA,EAAmB,YAAW,iBAAkB,EAAA,QAAA,EAAS,OAAS,EAAA,CAAA,EACtH,8BAAC,IAAK,EAAA,EAAA,KAAA,EAAO,CAAC,MAAA,CAAO,mBAAmB,MAAS,GAAA,MAAA,CAAO,qBAAwB,GAAA,IAAI,GAChF,QAAC,kBAAA,GAAA,CAAA,sBAAA,EAAA,EAAuB,IAAK,EAAA,mBAAA,EAAoB,MAAM,EAAI,EAAA,KAAA,EAAO,gBAAkB,EAAA,CAAA,EACxF,GACJ,CAAe,GAAA;AAAA,GAAA,EACvB,CAAU,GAAA,IAAA;AAChB,EAAA,uBACU,IAAA,CAAA,QAAA,EAAA,EAAA,QAAA,EAAA;AAAA,oBAAA,GAAA,CAAC,SAAU,EAAA,EAAA,KAAA,EAAO,MAAS,GAAA,OAAA,GAAU,MAAQ,EAAA,CAAA;AAAA,wBAC5C,YAAa,EAAA,EAAA,KAAA,EAAO,CAAC,KAAK,GAAG,KAAO,EAAA;AAAA,MAC3C,eAAiB,EAAA;AAAA,OAEP,QAAC,kBAAA,IAAA,CAAA,IAAA,EAAA,EAAK,KAAO,EAAA,CAAC,OAAO,GAAK,EAAA;AAAA,MAClC,eAAiB,EAAA,YAAA;AAAA,MACjB,iBAAmB,EAAA,YAAA;AAAA,MACnB,UAAY,EAAA,MAAA,CAAO,GAAM,GAAA,CAAA,GAAI,CAAI,GAAA;AAAA,KAChC,EAAA,CAAA,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,WAAT,KAAA,IAAA,GAAA,EAAA,GAAwB,IAAI,CACjB,EAAA,QAAA,EAAA;AAAA,sBAAA,GAAA,CAAC,IAAK,EAAA,EAAA,KAAA,EAAO,MAAO,CAAA,QAAA,EAAW,QAAS,EAAA,QAAA,EAAA,CAAA;AAAA,sBACxC,GAAA,CAAC,IAAK,EAAA,EAAA,KAAA,EAAO,CAAC,MAAA,CAAO,WAAW,cAAkB,IAAA,MAAA,CAAO,aAAa,CAAA,EAAI,QAAU,EAAA,SAAA,EAAA,CAAA;AAAA,sBACnF,GAAA,CAAA,IAAA,EAAA,EAAK,KAAO,EAAA,MAAA,CAAO,WAAY,QAAU,EAAA,SAAA,EAAA;AAAA,KAAA,EAC9C,CACJ,EAAA;AAAA,GACJ,EAAA,CAAA;AACR,CAAA;AACA,MAAM,MAAA,GAAS,WAAW,MAAO,CAAA;AAAA,EAC/B,GAAK,EAAA;AAAA,IACH,aAAe,EAAA,KAAA;AAAA,IACf,UAAY,EAAA,QAAA;AAAA,IACZ,iBAAmB,EAAA,EAAA;AAAA,IACnB,eAAiB,EAAA,EAAA;AAAA,IACjB,SAAW,EAAA,EAAA;AAAA,IACX,mBAAmB,UAAW,CAAA;AAAA,GAChC;AAAA,EACA,QAAU,EAAA;AAAA,IACR,QAAU,EAAA,EAAA;AAAA,IACV,UAAY,EAAA,YAAA;AAAA,IACZ,cAAgB,EAAA;AAAA,GAClB;AAAA,EACA,SAAW,EAAA;AAAA,IACT,IAAM,EAAA,CAAA;AAAA,IACN,UAAY,EAAA,QAAA;AAAA,IACZ,cAAgB,EAAA,QAAA;AAAA,IAChB,iBAAmB,EAAA,CAAA;AAAA,IACnB,QAAU,EAAA;AAAA,GACZ;AAAA,EACA,aAAe,EAAA;AAAA,IACb,UAAY,EAAA;AAAA,GACd;AAAA,EACA,SAAW,EAAA;AAAA,IACT,QAAU,EAAA,EAAA;AAAA,IACV,UAAY,EAAA,UAAA;AAAA,IACZ,cAAgB,EAAA;AAAA,GAClB;AAAA,EACA,YAAc,EAAA;AAAA,IACZ,aAAe,EAAA,KAAA;AAAA,IACf,UAAY,EAAA,QAAA;AAAA,IACZ,GAAK,EAAA;AAAA,GACP;AAAA,EACA,KAAO,EAAA;AAAA,IACL,QAAU,EAAA,EAAA;AAAA,IACV,UAAY,EAAA,KAAA;AAAA,IACZ,aAAe,EAAA,IAAA;AAAA,IACf,KAAO,EAAA;AAAA,GACT;AAAA,EACA,gBAAkB,EAAA;AAAA,IAChB,SAAW,EAAA;AAAA,GACb;AAAA,EACA,cAAgB,EAAA;AAAA,IACd,SAAW,EAAA;AAAA,GACb;AAAA,EACA,UAAY,EAAA;AAAA,IACV,KAAO,EAAA,EAAA;AAAA,IACP,MAAQ,EAAA,EAAA;AAAA,IACR,UAAY,EAAA,QAAA;AAAA,IACZ,cAAgB,EAAA,QAAA;AAAA,IAChB,YAAc,EAAA;AAAA,GAChB;AAAA,EACA,iBAAmB,EAAA;AAAA,IACjB,OAAS,EAAA;AAAA,GACX;AAAA,EACA,YAAc,EAAA;AAAA,IACZ,OAAS,EAAA,CAAA;AAAA,IACT,UAAY,EAAA,QAAA;AAAA,IACZ,cAAgB,EAAA,QAAA;AAAA,IAChB,YAAc,EAAA;AAAA,GAChB;AAAA,EACA,mBAAqB,EAAA;AAAA,IACnB,OAAS,EAAA;AAAA,GACX;AAAA,EACA,iBAAmB,EAAA;AAAA,IACjB,KAAO,EAAA,EAAA;AAAA,IACP,MAAQ,EAAA,EAAA;AAAA,IACR,YAAc,EAAA,EAAA;AAAA,IACd,UAAY,EAAA,QAAA;AAAA,IACZ,cAAgB,EAAA,QAAA;AAAA,IAChB,eAAA,EAAiB,aAAa,KAAM,CAAA,OAAA;AAAA,IACpC,WAAa,EAAA,CAAA;AAAA,IACb,WAAA,EAAa,aAAa,KAAM,CAAA,MAAA;AAAA,IAChC,WAAa,EAAA,SAAA;AAAA,IACb,aAAe,EAAA,IAAA;AAAA,IACf,YAAc,EAAA,CAAA;AAAA,IACd,YAAc,EAAA;AAAA,MACZ,KAAO,EAAA,CAAA;AAAA,MACP,MAAQ,EAAA;AAAA,KACV;AAAA,IACA,SAAW,EAAA;AAAA,GACb;AAAA,EACA,qBAAuB,EAAA;AAAA,IACrB,eAAiB,EAAA,SAAA;AAAA,IACjB,WAAa,EAAA;AAAA;AAEjB,CAAC,CAAA;AACD,yBAAe,KAAA,CAAM,KAAK,gBAAgB,CAAA"}

package/lib/hooks/mintSurfaceSystemToken.js

@@ -1,4 +1,4 @@
-import {readAuth0IdToken}from'../bridge/readAuth0Session.js';import {config}from'../config/env-config.js';const OBTAIN_USER_SYSTEM_TOKEN = `
+import {AuthStrategy,HttpHeaders}from'common';import {readAuth0IdToken}from'../bridge/readAuth0Session.js';import {config}from'../config/env-config.js';const OBTAIN_USER_SYSTEM_TOKEN = `
   mutation ObtainUserSystemToken($input: ObtainUserSystemTokenInput!) {
     obtainUserSystemToken(input: $input) {
       token
@@ -15,7 +15,7 @@ const GET_USER_SYSTEM_TOKEN = `
   }
 `;
 const CREATE_SECRET_API_TOKEN = `
-  mutation CreateSecretApiToken($input: SecretApiTokenInput!) {
+  mutation CreateSecretApiToken($input: CreateSecretApiTokenInput!) {
     createSecretApiToken(input: $input) {
       id
       expiresAt
@@ -41,8 +41,10 @@ async function gqlFetch(graphqlUrl, idToken, query, variables) {
   const res = await fetch(graphqlUrl, {
     method: "POST",
     headers: {
-      "content-type": "application/json",
-      authorization: `Bearer ${idToken}`
+      [HttpHeaders.CONTENT_TYPE]: "application/json",
+      [HttpHeaders.AUTHORIZATION]: `Bearer ${idToken}`,
+      [HttpHeaders.IS_MOBILE]: "true",
+      [HttpHeaders.AUTH_STRATEGY]: AuthStrategy.Auth0
     },
     body: JSON.stringify({
       query,
@@ -55,8 +57,22 @@ async function gqlFetch(graphqlUrl, idToken, query, variables) {
   }
   return await res.json();
 }
+const DEV_TESTING_PROJECT_UUID = "9a8ac704-1040-4836-9b72-48b771ca91b1";
+const OBJECT_ID_HEX = /^[a-fA-F0-9]{24}$/;
+const PROJECT_UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+function assertMintableProjectId(projectId) {
+  if (projectId === "default" || !projectId.trim()) {
+    throw new Error("Missing projectId \u2014 wait for org/project bootstrap, then retry.");
+  }
+  if (!__DEV__ && projectId === DEV_TESTING_PROJECT_UUID) {
+    throw new Error("Invalid projectId (dev testing UUID). Open Home so a real project can be created, then retry.");
+  }
+  if (!OBJECT_ID_HEX.test(projectId) && !PROJECT_UUID.test(projectId)) {
+    throw new Error(`Invalid projectId format for system token mint: ${projectId.slice(0, 48)}`);
+  }
+}
 async function mintSurfaceSystemToken(input) {
-  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v, _w;
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y;
   const idToken = await readAuth0IdToken();
   if (!idToken) {
     throw new Error("No Auth0 id_token in storage \u2014 sign in to the mobile app first.");
@@ -65,40 +81,61 @@ async function mintSurfaceSystemToken(input) {
   if (__DEV__) {
     console.log("[WebBuilder] minting system token via", graphqlUrl);
   }
-  const orgName = ((_a = input.orgName) == null ? void 0 : _a.trim()) || "default";
-  const projectId = ((_b = input.projectId) == null ? void 0 : _b.trim()) || "default";
-  const environmentTagId = ((_c = input.tagId) == null ? void 0 : _c.trim()) || void 0;
-  if (environmentTagId) {
-    try {
-      const obtained = await gqlFetch(graphqlUrl, idToken, OBTAIN_USER_SYSTEM_TOKEN, {
-        input: {
-          projectId,
-          environmentTagId,
-          orgName,
-          renewBufferSeconds: 7 * 24 * 60 * 60
-        }
-      });
-      const token2 = (_f = (_e = (_d = obtained.data) == null ? void 0 : _d.obtainUserSystemToken) == null ? void 0 : _e.token) == null ? void 0 : _f.trim();
-      if (token2 && !((_g = obtained.errors) == null ? void 0 : _g.length)) {
-        if (__DEV__) {
-          console.log("[WebBuilder] obtained system token length=", token2.length);
-        }
-        return {
-          token: token2,
-          backend: graphqlUrl
-        };
+  const orgName = (_a = input.orgName) == null ? void 0 : _a.trim();
+  const projectId = (_b = input.projectId) == null ? void 0 : _b.trim();
+  const environmentTagId = (_c = input.tagId) == null ? void 0 : _c.trim();
+  if (!orgName) {
+    throw new Error("Missing orgName \u2014 wait for org bootstrap, then retry.");
+  }
+  if (!projectId) {
+    throw new Error("Missing projectId \u2014 wait for org/project bootstrap, then retry.");
+  }
+  if (!environmentTagId) {
+    throw new Error("Missing environmentTagId \u2014 cannot mint system token.");
+  }
+  assertMintableProjectId(projectId);
+  try {
+    const obtained = await gqlFetch(graphqlUrl, idToken, OBTAIN_USER_SYSTEM_TOKEN, {
+      input: {
+        projectId,
+        environmentTagId,
+        orgName,
+        renewBufferSeconds: 7 * 24 * 60 * 60,
+        algorithm: "HS256"
       }
-    } catch (err) {
+    });
+    const token2 = (_f = (_e = (_d = obtained.data) == null ? void 0 : _d.obtainUserSystemToken) == null ? void 0 : _e.token) == null ? void 0 : _f.trim();
+    if (token2 && !((_g = obtained.errors) == null ? void 0 : _g.length)) {
       if (__DEV__) {
-        console.warn("[WebBuilder] obtainUserSystemToken failed, falling back to reveal:", err);
+        console.log("[WebBuilder] obtained system token length=", token2.length);
+      }
+      return {
+        token: token2,
+        backend: graphqlUrl
+      };
+    }
+    if ((_h = obtained.errors) == null ? void 0 : _h.length) {
+      throw new Error(((_i = obtained.errors[0]) == null ? void 0 : _i.message) || "obtainUserSystemToken failed");
+    }
+  } catch (err) {
+    if (__DEV__) {
+      console.warn("[WebBuilder] obtainUserSystemToken failed, falling back to reveal:", err);
+    }
+    const msg = err instanceof Error ? err.message : String(err);
+    if (/12 bytes|24 hex|Project not found/i.test(msg)) {
+      throw new Error(`Project "${projectId}" is not valid on this backend. Pick/create a real project in the app, then retry.`);
+    }
+    if (!/Unknown field|Cannot query field|obtainUserSystemToken/i.test(msg)) {
+      if (/Unauthorized|401|Project not found|Invalid project/i.test(msg)) {
+        throw err instanceof Error ? err : new Error(msg);
       }
     }
   }
   const getResult = await gqlFetch(graphqlUrl, idToken, GET_USER_SYSTEM_TOKEN);
-  if ((_h = getResult.errors) == null ? void 0 : _h.length) {
-    throw new Error(((_i = getResult.errors[0]) == null ? void 0 : _i.message) || "GetUserSystemToken failed");
+  if ((_j = getResult.errors) == null ? void 0 : _j.length) {
+    throw new Error(((_k = getResult.errors[0]) == null ? void 0 : _k.message) || "GetUserSystemToken failed");
   }
-  let tokenId = (_l = (_k = (_j = getResult.data) == null ? void 0 : _j.getUserSystemToken) == null ? void 0 : _k.id) != null ? _l : null;
+  let tokenId = (_n = (_m = (_l = getResult.data) == null ? void 0 : _l.getUserSystemToken) == null ? void 0 : _m.id) != null ? _n : null;
   if (!tokenId) {
     const createResult = await gqlFetch(graphqlUrl, idToken, CREATE_SECRET_API_TOKEN, {
       input: {
@@ -108,18 +145,21 @@ async function mintSurfaceSystemToken(input) {
         environmentTagId,
         orgName,
         projectId,
-        algorithm: "RS256"
+        algorithm: "HS256"
       }
     });
-    const createErr = ((_n = (_m = createResult.errors) == null ? void 0 : _m[0]) == null ? void 0 : _n.message) || "";
+    const createErr = ((_p = (_o = createResult.errors) == null ? void 0 : _o[0]) == null ? void 0 : _p.message) || "";
     if (createErr && !/already have a system token/i.test(createErr)) {
+      if (/12 bytes|24 hex/i.test(createErr)) {
+        throw new Error(`Project "${projectId}" is not valid on this backend. Pick/create a real project in the app, then retry.`);
+      }
       throw new Error(createErr);
     }
-    if ((_p = (_o = createResult.data) == null ? void 0 : _o.createSecretApiToken) == null ? void 0 : _p.id) {
+    if ((_r = (_q = createResult.data) == null ? void 0 : _q.createSecretApiToken) == null ? void 0 : _r.id) {
       tokenId = createResult.data.createSecretApiToken.id;
     } else {
       const refetch = await gqlFetch(graphqlUrl, idToken, GET_USER_SYSTEM_TOKEN);
-      tokenId = (_s = (_r = (_q = refetch.data) == null ? void 0 : _q.getUserSystemToken) == null ? void 0 : _r.id) != null ? _s : null;
+      tokenId = (_u = (_t = (_s = refetch.data) == null ? void 0 : _s.getUserSystemToken) == null ? void 0 : _t.id) != null ? _u : null;
     }
   }
   if (!tokenId) {
@@ -128,10 +168,10 @@ async function mintSurfaceSystemToken(input) {
   const reveal = await gqlFetch(graphqlUrl, idToken, REVEAL_SECRET_API_TOKEN, {
     id: tokenId
   });
-  if ((_t = reveal.errors) == null ? void 0 : _t.length) {
-    throw new Error(((_u = reveal.errors[0]) == null ? void 0 : _u.message) || "RevealSecretApiToken failed");
+  if ((_v = reveal.errors) == null ? void 0 : _v.length) {
+    throw new Error(((_w = reveal.errors[0]) == null ? void 0 : _w.message) || "RevealSecretApiToken failed");
   }
-  const token = (_w = (_v = reveal.data) == null ? void 0 : _v.revealSecretApiToken) == null ? void 0 : _w.trim();
+  const token = (_y = (_x = reveal.data) == null ? void 0 : _x.revealSecretApiToken) == null ? void 0 : _y.trim();
   if (!token) {
     throw new Error("RevealSecretApiToken returned empty token");
   }

package/lib/hooks/mintSurfaceSystemToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"mintSurfaceSystemToken.js","sources":["../../src/hooks/mintSurfaceSystemToken.ts"],"sourcesContent":["import { readAuth0IdToken } from '../bridge/readAuth0Session';\nimport { config } from '../config/env-config';\n\nconst OBTAIN_USER_SYSTEM_TOKEN = `\n  mutation ObtainUserSystemToken($input: ObtainUserSystemTokenInput!) {\n    obtainUserSystemToken(input: $input) {\n      token\n    }\n  }\n`;\n\nconst GET_USER_SYSTEM_TOKEN = `\n  query GetUserSystemToken {\n    getUserSystemToken {\n      id\n      expiresAt\n      isSystemToken\n    }\n  }\n`;\n\nconst CREATE_SECRET_API_TOKEN = `\n  mutation CreateSecretApiToken($input: SecretApiTokenInput!) {\n    createSecretApiToken(input: $input) {\n      id\n      expiresAt\n    }\n  }\n`;\n\nconst REVEAL_SECRET_API_TOKEN = `\n  mutation RevealSecretApiToken($id: ID!) {\n    revealSecretApiToken(id: $id)\n  }\n`;\n\ntype GqlResult<T> = {\n    data?: T;\n    errors?: Array<{ message?: string }>;\n};\n\nfunction normalizeGraphqlUrl(url: string): string {\n    return url.trim().replace(/\\/$/, '');\n}\n\n/** App GRAPHQL_URL from env (optional override for device LAN rewrite). */\nexport function resolveSurfaceCatalogBackend(graphqlUrl?: string): string {\n    const raw = graphqlUrl?.trim() || config.GRAPHQL_URL;\n    if (!raw?.trim()) {\n        throw new Error('GRAPHQL_URL is not configured');\n    }\n    return normalizeGraphqlUrl(raw);\n}\n\nasync function gqlFetch<T>(\n    graphqlUrl: string,\n    idToken: string,\n    query: string,\n    variables?: Record<string, unknown>,\n): Promise<GqlResult<T>> {\n    const res = await fetch(graphqlUrl, {\n        method: 'POST',\n        headers: {\n            'content-type': 'application/json',\n            authorization: `Bearer ${idToken}`,\n        },\n        body: JSON.stringify({ query, variables }),\n    });\n    if (!res.ok) {\n        const text = await res.text().catch(() => '');\n        throw new Error(`GraphQL HTTP ${res.status}: ${text.slice(0, 200)}`);\n    }\n    return (await res.json()) as GqlResult<T>;\n}\n\nexport type MintSurfaceTokenInput = {\n    /** App GRAPHQL_URL (e.g. device-rewritten). Defaults to env GRAPHQL_URL. */\n    graphqlUrl?: string;\n    orgName?: string | null;\n    projectId?: string | null;\n    tagId?: string | null;\n};\n\nexport type MintSurfaceTokenResult = {\n    token: string;\n    /** Exact backend URL string to stamp into cdecli_token_meta. */\n    backend: string;\n};\n\n/**\n * Reveal (or obtain) a system token on GRAPHQL_URL.\n */\nexport async function mintSurfaceSystemToken(input: MintSurfaceTokenInput): Promise<MintSurfaceTokenResult> {\n    const idToken = await readAuth0IdToken();\n    if (!idToken) {\n        throw new Error('No Auth0 id_token in storage — sign in to the mobile app first.');\n    }\n\n    const graphqlUrl = resolveSurfaceCatalogBackend(input.graphqlUrl);\n    if (__DEV__) {\n        // eslint-disable-next-line no-console\n        console.log('[WebBuilder] minting system token via', graphqlUrl);\n    }\n\n    const orgName = input.orgName?.trim() || 'default';\n    const projectId = input.projectId?.trim() || 'default';\n    const environmentTagId = input.tagId?.trim() || undefined;\n\n    if (environmentTagId) {\n        try {\n            const obtained = await gqlFetch<{ obtainUserSystemToken?: { token?: string } | null }>(\n                graphqlUrl,\n                idToken,\n                OBTAIN_USER_SYSTEM_TOKEN,\n                {\n                    input: {\n                        projectId,\n                        environmentTagId,\n                        orgName,\n                        renewBufferSeconds: 7 * 24 * 60 * 60,\n                    },\n                },\n            );\n            const token = obtained.data?.obtainUserSystemToken?.token?.trim();\n            if (token && !obtained.errors?.length) {\n                if (__DEV__) {\n                    // eslint-disable-next-line no-console\n                    console.log('[WebBuilder] obtained system token length=', token.length);\n                }\n                return { token, backend: graphqlUrl };\n            }\n        } catch (err) {\n            if (__DEV__) {\n                // eslint-disable-next-line no-console\n                console.warn('[WebBuilder] obtainUserSystemToken failed, falling back to reveal:', err);\n            }\n        }\n    }\n\n    const getResult = await gqlFetch<{ getUserSystemToken?: { id?: string } | null }>(\n        graphqlUrl,\n        idToken,\n        GET_USER_SYSTEM_TOKEN,\n    );\n    if (getResult.errors?.length) {\n        throw new Error(getResult.errors[0]?.message || 'GetUserSystemToken failed');\n    }\n\n    let tokenId = getResult.data?.getUserSystemToken?.id ?? null;\n\n    if (!tokenId) {\n        const createResult = await gqlFetch<{ createSecretApiToken?: { id?: string } | null }>(\n            graphqlUrl,\n            idToken,\n            CREATE_SECRET_API_TOKEN,\n            {\n                input: {\n                    name: 'System Token',\n                    expiryInSeconds: 31536000,\n                    isSystemToken: true,\n                    environmentTagId,\n                    orgName,\n                    projectId,\n                    algorithm: 'RS256',\n                },\n            },\n        );\n\n        const createErr = createResult.errors?.[0]?.message || '';\n        if (createErr && !/already have a system token/i.test(createErr)) {\n            throw new Error(createErr);\n        }\n\n        if (createResult.data?.createSecretApiToken?.id) {\n            tokenId = createResult.data.createSecretApiToken.id;\n        } else {\n            const refetch = await gqlFetch<{ getUserSystemToken?: { id?: string } | null }>(\n                graphqlUrl,\n                idToken,\n                GET_USER_SYSTEM_TOKEN,\n            );\n            tokenId = refetch.data?.getUserSystemToken?.id ?? null;\n        }\n    }\n\n    if (!tokenId) {\n        throw new Error('No system token id on GraphQL backend — cannot reveal.');\n    }\n\n    const reveal = await gqlFetch<{ revealSecretApiToken?: string | null }>(\n        graphqlUrl,\n        idToken,\n        REVEAL_SECRET_API_TOKEN,\n        { id: tokenId },\n    );\n    if (reveal.errors?.length) {\n        throw new Error(reveal.errors[0]?.message || 'RevealSecretApiToken failed');\n    }\n\n    const token = reveal.data?.revealSecretApiToken?.trim();\n    if (!token) {\n        throw new Error('RevealSecretApiToken returned empty token');\n    }\n\n    if (__DEV__) {\n        // eslint-disable-next-line no-console\n        console.log('[WebBuilder] minted system token length=', token.length);\n    }\n    return { token, backend: graphqlUrl };\n}\n\nexport function appendSurfaceAuthParams(baseUrl: string, token: string, state: string): string {\n    try {\n        const url = new URL(baseUrl);\n        url.searchParams.set('token', token);\n        url.searchParams.set('code', token);\n        url.searchParams.set('state', state);\n        return url.toString();\n    } catch {\n        const sep = baseUrl.includes('?') ? '&' : '?';\n        return `${baseUrl}${sep}token=${encodeURIComponent(token)}&code=${encodeURIComponent(token)}&state=${encodeURIComponent(state)}`;\n    }\n}\n\nfunction tokenFingerprint(token: string): string {\n    const sig = token.split('.')[2] ?? token;\n    return sig.slice(-24);\n}\n\n/** Shared WebView boot script: token + meta + fetch shims for surface-kit auth. */\nfunction buildSurfaceHandoffScript(token: string, backend: string, state: string, withGateRecovery: boolean): string {\n    const safeToken = JSON.stringify(token);\n    const safeBackend = JSON.stringify(backend);\n    const safeState = JSON.stringify(state);\n    const fp = JSON.stringify(tokenFingerprint(token));\n    const recovery = withGateRecovery\n        ? `\n    function tryRecover() {\n      stamp();\n      var gate = document.querySelector('[data-surface-login]');\n      if (!gate) return;\n      if (sessionStorage.getItem('__yantra_wb_token_reload')) return;\n      sessionStorage.setItem('__yantra_wb_token_reload', '1');\n      var u = new URL(window.location.href);\n      u.searchParams.set('token', t);\n      u.searchParams.set('code', t);\n      u.searchParams.set('state', state);\n      window.location.replace(u.toString());\n    }\n    tryRecover();\n    var i = 0;\n    var timer = setInterval(function () {\n      i += 1;\n      tryRecover();\n      if (i >= 40 || !document.querySelector('[data-surface-login]')) clearInterval(timer);\n    }, 250);\n`\n        : `\n    var n = 0;\n    var id = setInterval(function () {\n      stamp();\n      n += 1;\n      if (n >= 80) clearInterval(id);\n    }, 50);\n`;\n\n    return `\n(function () {\n  try {\n    var t = ${safeToken};\n    var backend = ${safeBackend};\n    var state = ${safeState};\n    var fp = ${fp};\n    var PROBE_Q = 'query { getUserAccount { id } }';\n\n    if (!window.__yantraWbFetchPatched) {\n      window.__yantraWbFetchPatched = true;\n      var origFetch = window.fetch.bind(window);\n      window.fetch = function (input, init) {\n        try {\n          var url = typeof input === 'string' ? input : (input && input.url) ? String(input.url) : '';\n          // Force surface-kit resolveCatalogBackend() to our GRAPHQL_URL (not remote agent → ideback).\n          if (url.indexOf('/v1/auth/context') !== -1) {\n            return Promise.resolve(new Response(\n              JSON.stringify({ backendGraphqlUrl: backend }),\n              { status: 200, headers: { 'Content-Type': 'application/json' } }\n            ));\n          }\n          var body = init && typeof init.body === 'string' ? init.body : '';\n          if (body && body.indexOf('getUserAccount') !== -1) {\n            var parsed = JSON.parse(body);\n            var q = parsed && typeof parsed.query === 'string' ? parsed.query.replace(/\\\\s+/g, ' ').trim() : '';\n            if (q === PROBE_Q) {\n              return Promise.resolve(new Response(\n                JSON.stringify({ data: { getUserAccount: { id: 'mobile-webview-handoff' } } }),\n                { status: 200, headers: { 'Content-Type': 'application/json' } }\n              ));\n            }\n          }\n        } catch (e0) {}\n        return origFetch(input, init);\n      };\n    }\n\n    function stamp() {\n      try {\n        sessionStorage.setItem('cdecli_oauth_state', state);\n        localStorage.setItem('cdecli_token', t);\n        sessionStorage.setItem('cdecli_token', t);\n        localStorage.setItem('cdecli_system_token', t);\n        localStorage.setItem('cdecli_token_meta', JSON.stringify({\n          backend: backend,\n          verifiedAt: Date.now(),\n          fp: fp\n        }));\n      } catch (e1) {}\n    }\n    stamp();\n    ${recovery}\n  } catch (e) {}\n  true;\n})();\ntrue;\n`;\n}\n\nexport function buildCdecliTokenInjection(token: string, backend: string, state: string): string {\n    return buildSurfaceHandoffScript(token, backend, state, false);\n}\n\nexport function buildSurfaceGateRecoveryScript(token: string, backend: string, state: string): string {\n    return buildSurfaceHandoffScript(token, backend, state, true);\n}\n"],"names":["token"],"mappings":"0GAEA,MAAM,wBAA2B,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAOjC,MAAM,qBAAwB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAS9B,MAAM,uBAA0B,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQhC,MAAM,uBAA0B,GAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAWhC,SAAS,oBAAoB,GAAqB,EAAA;AAChD,EAAA,OAAO,GAAI,CAAA,IAAA,EAAO,CAAA,OAAA,CAAQ,OAAO,EAAE,CAAA;AACrC;AAGO,SAAS,6BAA6B,UAA6B,EAAA;AACxE,EAAM,MAAA,GAAA,GAAA,CAAM,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,IAAA,EAAA,KAAU,MAAO,CAAA,WAAA;AACzC,EAAI,IAAA,EAAC,2BAAK,IAAQ,EAAA,CAAA,EAAA;AAChB,IAAM,MAAA,IAAI,MAAM,+BAA+B,CAAA;AAAA;AAEjD,EAAA,OAAO,oBAAoB,GAAG,CAAA;AAChC;AACA,eAAe,QAAY,CAAA,UAAA,EAAoB,OAAiB,EAAA,KAAA,EAAe,SAA4D,EAAA;AACzI,EAAM,MAAA,GAAA,GAAM,MAAM,KAAA,CAAM,UAAY,EAAA;AAAA,IAClC,MAAQ,EAAA,MAAA;AAAA,IACR,OAAS,EAAA;AAAA,MACP,cAAgB,EAAA,kBAAA;AAAA,MAChB,aAAA,EAAe,UAAU,OAAO,CAAA;AAAA,KAClC;AAAA,IACA,IAAA,EAAM,KAAK,SAAU,CAAA;AAAA,MACnB,KAAA;AAAA,MACA;AAAA,KACD;AAAA,GACF,CAAA;AACD,EAAI,IAAA,CAAC,IAAI,EAAI,EAAA;AACX,IAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAO,CAAA,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,IAAM,MAAA,IAAI,KAAM,CAAA,CAAA,aAAA,EAAgB,GAAI,CAAA,MAAM,CAAK,EAAA,EAAA,IAAA,CAAK,KAAM,CAAA,CAAA,EAAG,GAAG,CAAC,CAAE,CAAA,CAAA;AAAA;AAErE,EAAQ,OAAA,MAAM,IAAI,IAAK,EAAA;AACzB;AAiBA,eAAsB,uBAAuB,KAA+D,EAAA;AAnF5G,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAoFE,EAAM,MAAA,OAAA,GAAU,MAAM,gBAAiB,EAAA;AACvC,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAM,MAAA,UAAA,GAAa,4BAA6B,CAAA,KAAA,CAAM,UAAU,CAAA;AAChE,EAAA,IAAI,OAAS,EAAA;AAEX,IAAQ,OAAA,CAAA,GAAA,CAAI,yCAAyC,UAAU,CAAA;AAAA;AAEjE,EAAA,MAAM,OAAU,GAAA,CAAA,CAAA,EAAA,GAAA,KAAA,CAAM,OAAN,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAe,IAAU,EAAA,KAAA,SAAA;AACzC,EAAA,MAAM,SAAY,GAAA,CAAA,CAAA,EAAA,GAAA,KAAA,CAAM,SAAN,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,IAAU,EAAA,KAAA,SAAA;AAC7C,EAAA,MAAM,gBAAmB,GAAA,CAAA,CAAA,EAAA,GAAA,KAAA,CAAM,KAAN,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,IAAU,EAAA,KAAA,MAAA;AAChD,EAAA,IAAI,gBAAkB,EAAA;AACpB,IAAI,IAAA;AACF,MAAA,MAAM,QAAW,GAAA,MAAM,QAIpB,CAAA,UAAA,EAAY,SAAS,wBAA0B,EAAA;AAAA,QAChD,KAAO,EAAA;AAAA,UACL,SAAA;AAAA,UACA,gBAAA;AAAA,UACA,OAAA;AAAA,UACA,kBAAA,EAAoB,CAAI,GAAA,EAAA,GAAK,EAAK,GAAA;AAAA;AACpC,OACD,CAAA;AACD,MAAA,MAAMA,UAAQ,EAAS,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,QAAA,CAAA,IAAA,KAAT,mBAAe,qBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAsC,UAAtC,IAA6C,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AAC3D,MAAA,IAAIA,MAAS,IAAA,EAAA,CAAC,EAAS,GAAA,QAAA,CAAA,MAAA,KAAT,mBAAiB,MAAQ,CAAA,EAAA;AACrC,QAAA,IAAI,OAAS,EAAA;AAEX,UAAQ,OAAA,CAAA,GAAA,CAAI,4CAA8CA,EAAAA,MAAAA,CAAM,MAAM,CAAA;AAAA;AAExE,QAAO,OAAA;AAAA,UACL,KAAAA,EAAAA,MAAAA;AAAA,UACA,OAAS,EAAA;AAAA,SACX;AAAA;AACF,aACO,GAAK,EAAA;AACZ,MAAA,IAAI,OAAS,EAAA;AAEX,QAAQ,OAAA,CAAA,IAAA,CAAK,sEAAsE,GAAG,CAAA;AAAA;AACxF;AACF;AAEF,EAAA,MAAM,SAAY,GAAA,MAAM,QAIrB,CAAA,UAAA,EAAY,SAAS,qBAAqB,CAAA;AAC7C,EAAI,IAAA,CAAA,EAAA,GAAA,SAAA,CAAU,MAAV,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkB,MAAQ,EAAA;AAC5B,IAAM,MAAA,IAAI,QAAM,EAAU,GAAA,SAAA,CAAA,MAAA,CAAO,CAAC,CAAlB,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAqB,YAAW,2BAA2B,CAAA;AAAA;AAE7E,EAAA,IAAI,WAAU,EAAU,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,SAAA,CAAA,IAAA,KAAV,mBAAgB,kBAAhB,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAoC,OAApC,IAA0C,GAAA,EAAA,GAAA,IAAA;AACxD,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAA,MAAM,YAAe,GAAA,MAAM,QAIxB,CAAA,UAAA,EAAY,SAAS,uBAAyB,EAAA;AAAA,MAC/C,KAAO,EAAA;AAAA,QACL,IAAM,EAAA,cAAA;AAAA,QACN,eAAiB,EAAA,OAAA;AAAA,QACjB,aAAe,EAAA,IAAA;AAAA,QACf,gBAAA;AAAA,QACA,OAAA;AAAA,QACA,SAAA;AAAA,QACA,SAAW,EAAA;AAAA;AACb,KACD,CAAA;AACD,IAAA,MAAM,cAAY,EAAa,GAAA,CAAA,EAAA,GAAA,YAAA,CAAA,MAAA,KAAb,IAAsB,GAAA,MAAA,GAAA,EAAA,CAAA,CAAA,CAAA,KAAtB,mBAA0B,OAAW,KAAA,EAAA;AACvD,IAAA,IAAI,SAAa,IAAA,CAAC,8BAA+B,CAAA,IAAA,CAAK,SAAS,CAAG,EAAA;AAChE,MAAM,MAAA,IAAI,MAAM,SAAS,CAAA;AAAA;AAE3B,IAAA,IAAA,CAAI,EAAa,GAAA,CAAA,EAAA,GAAA,YAAA,CAAA,IAAA,KAAb,IAAmB,GAAA,MAAA,GAAA,EAAA,CAAA,oBAAA,KAAnB,mBAAyC,EAAI,EAAA;AAC/C,MAAU,OAAA,GAAA,YAAA,CAAa,KAAK,oBAAqB,CAAA,EAAA;AAAA,KAC5C,MAAA;AACL,MAAA,MAAM,OAAU,GAAA,MAAM,QAInB,CAAA,UAAA,EAAY,SAAS,qBAAqB,CAAA;AAC7C,MAAA,OAAA,GAAA,CAAU,yBAAQ,IAAR,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAc,kBAAd,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkC,OAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAAA;AACpD;AAEF,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,6DAAwD,CAAA;AAAA;AAE1E,EAAA,MAAM,MAAS,GAAA,MAAM,QAElB,CAAA,UAAA,EAAY,SAAS,uBAAyB,EAAA;AAAA,IAC/C,EAAI,EAAA;AAAA,GACL,CAAA;AACD,EAAI,IAAA,CAAA,EAAA,GAAA,MAAA,CAAO,MAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAe,MAAQ,EAAA;AACzB,IAAM,MAAA,IAAI,QAAM,EAAO,GAAA,MAAA,CAAA,MAAA,CAAO,CAAC,CAAf,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkB,YAAW,6BAA6B,CAAA;AAAA;AAE5E,EAAA,MAAM,KAAQ,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,MAAA,CAAO,IAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,yBAAb,IAAmC,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AACjD,EAAA,IAAI,CAAC,KAAO,EAAA;AACV,IAAM,MAAA,IAAI,MAAM,2CAA2C,CAAA;AAAA;AAE7D,EAAA,IAAI,OAAS,EAAA;AAEX,IAAQ,OAAA,CAAA,GAAA,CAAI,0CAA4C,EAAA,KAAA,CAAM,MAAM,CAAA;AAAA;AAEtE,EAAO,OAAA;AAAA,IACL,KAAA;AAAA,IACA,OAAS,EAAA;AAAA,GACX;AACF;AACgB,SAAA,uBAAA,CAAwB,OAAiB,EAAA,KAAA,EAAe,KAAuB,EAAA;AAC7F,EAAI,IAAA;AACF,IAAM,MAAA,GAAA,GAAM,IAAI,GAAA,CAAI,OAAO,CAAA;AAC3B,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,OAAA,EAAS,KAAK,CAAA;AACnC,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,MAAA,EAAQ,KAAK,CAAA;AAClC,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,OAAA,EAAS,KAAK,CAAA;AACnC,IAAA,OAAO,IAAI,QAAS,EAAA;AAAA,GACd,CAAA,OAAA,CAAA,EAAA;AACN,IAAA,MAAM,GAAM,GAAA,OAAA,CAAQ,QAAS,CAAA,GAAG,IAAI,GAAM,GAAA,GAAA;AAC1C,IAAA,OAAO,CAAG,EAAA,OAAO,CAAG,EAAA,GAAG,SAAS,kBAAmB,CAAA,KAAK,CAAC,CAAA,MAAA,EAAS,mBAAmB,KAAK,CAAC,CAAU,OAAA,EAAA,kBAAA,CAAmB,KAAK,CAAC,CAAA,CAAA;AAAA;AAElI;AACA,SAAS,iBAAiB,KAAuB,EAAA;AA5MjD,EAAA,IAAA,EAAA;AA6ME,EAAA,MAAM,OAAM,EAAM,GAAA,KAAA,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,CAAC,MAAlB,IAAuB,GAAA,EAAA,GAAA,KAAA;AACnC,EAAO,OAAA,GAAA,CAAI,MAAM,GAAG,CAAA;AACtB;AAGA,SAAS,yBAA0B,CAAA,KAAA,EAAe,OAAiB,EAAA,KAAA,EAAe,gBAAmC,EAAA;AACnH,EAAM,MAAA,SAAA,GAAY,IAAK,CAAA,SAAA,CAAU,KAAK,CAAA;AACtC,EAAM,MAAA,WAAA,GAAc,IAAK,CAAA,SAAA,CAAU,OAAO,CAAA;AAC1C,EAAM,MAAA,SAAA,GAAY,IAAK,CAAA,SAAA,CAAU,KAAK,CAAA;AACtC,EAAA,MAAM,EAAK,GAAA,IAAA,CAAK,SAAU,CAAA,gBAAA,CAAiB,KAAK,CAAC,CAAA;AACjD,EAAA,MAAM,WAAW,gBAAmB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAoBlC,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQF,EAAO,OAAA;AAAA;AAAA;AAAA,YAAA,EAGK,SAAS,CAAA;AAAA,kBAAA,EACH,WAAW,CAAA;AAAA,gBAAA,EACb,SAAS,CAAA;AAAA,aAAA,EACZ,EAAE,CAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,EA8CX,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAMd;AACgB,SAAA,yBAAA,CAA0B,KAAe,EAAA,OAAA,EAAiB,KAAuB,EAAA;AAC/F,EAAA,OAAO,yBAA0B,CAAA,KAAA,EAAO,OAAS,EAAA,KAAA,EAAO,KAAK,CAAA;AAC/D;AACgB,SAAA,8BAAA,CAA+B,KAAe,EAAA,OAAA,EAAiB,KAAuB,EAAA;AACpG,EAAA,OAAO,yBAA0B,CAAA,KAAA,EAAO,OAAS,EAAA,KAAA,EAAO,IAAI,CAAA;AAC9D"}
+{"version":3,"file":"mintSurfaceSystemToken.js","sources":["../../src/hooks/mintSurfaceSystemToken.ts"],"sourcesContent":["import { AuthStrategy, HttpHeaders } from 'common';\nimport { readAuth0IdToken } from '../bridge/readAuth0Session';\nimport { config } from '../config/env-config';\n\nconst OBTAIN_USER_SYSTEM_TOKEN = `\n  mutation ObtainUserSystemToken($input: ObtainUserSystemTokenInput!) {\n    obtainUserSystemToken(input: $input) {\n      token\n    }\n  }\n`;\n\nconst GET_USER_SYSTEM_TOKEN = `\n  query GetUserSystemToken {\n    getUserSystemToken {\n      id\n      expiresAt\n      isSystemToken\n    }\n  }\n`;\n\nconst CREATE_SECRET_API_TOKEN = `\n  mutation CreateSecretApiToken($input: CreateSecretApiTokenInput!) {\n    createSecretApiToken(input: $input) {\n      id\n      expiresAt\n    }\n  }\n`;\n\nconst REVEAL_SECRET_API_TOKEN = `\n  mutation RevealSecretApiToken($id: ID!) {\n    revealSecretApiToken(id: $id)\n  }\n`;\n\ntype GqlResult<T> = {\n    data?: T;\n    errors?: Array<{ message?: string }>;\n};\n\nfunction normalizeGraphqlUrl(url: string): string {\n    return url.trim().replace(/\\/$/, '');\n}\n\n/** App GRAPHQL_URL from env (optional override for device LAN rewrite). */\nexport function resolveSurfaceCatalogBackend(graphqlUrl?: string): string {\n    const raw = graphqlUrl?.trim() || config.GRAPHQL_URL;\n    if (!raw?.trim()) {\n        throw new Error('GRAPHQL_URL is not configured');\n    }\n    return normalizeGraphqlUrl(raw);\n}\n\nasync function gqlFetch<T>(\n    graphqlUrl: string,\n    idToken: string,\n    query: string,\n    variables?: Record<string, unknown>,\n): Promise<GqlResult<T>> {\n    // Staging JWT middleware only treats Bearer as mobile/SPA when\n    // `ismobile` (or `isspa`) is set — without it we get HTTP 401 Unauthorized.\n    // Match Apollo mobile authHeadersLink + Auth0Client.commonFetchRequestHeaders.\n    const res = await fetch(graphqlUrl, {\n        method: 'POST',\n        headers: {\n            [HttpHeaders.CONTENT_TYPE]: 'application/json',\n            [HttpHeaders.AUTHORIZATION]: `Bearer ${idToken}`,\n            [HttpHeaders.IS_MOBILE]: 'true',\n            [HttpHeaders.AUTH_STRATEGY]: AuthStrategy.Auth0,\n        },\n        body: JSON.stringify({ query, variables }),\n    });\n    if (!res.ok) {\n        const text = await res.text().catch(() => '');\n        throw new Error(`GraphQL HTTP ${res.status}: ${text.slice(0, 200)}`);\n    }\n    return (await res.json()) as GqlResult<T>;\n}\n\nexport type MintSurfaceTokenInput = {\n    /** App GRAPHQL_URL (e.g. device-rewritten). Defaults to env GRAPHQL_URL. */\n    graphqlUrl?: string;\n    orgName?: string | null;\n    projectId?: string | null;\n    tagId?: string | null;\n};\n\nexport type MintSurfaceTokenResult = {\n    token: string;\n    /** Exact backend URL string to stamp into cdecli_token_meta. */\n    backend: string;\n};\n\n/**\n * Reveal (or obtain) a system token on GRAPHQL_URL.\n */\n/** Local-dev testing project — must never mint against this on staging/prod. */\nconst DEV_TESTING_PROJECT_UUID = '9a8ac704-1040-4836-9b72-48b771ca91b1';\n\nconst OBJECT_ID_HEX = /^[a-fA-F0-9]{24}$/;\nconst PROJECT_UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;\n\nfunction assertMintableProjectId(projectId: string): void {\n    if (projectId === 'default' || !projectId.trim()) {\n        throw new Error('Missing projectId — wait for org/project bootstrap, then retry.');\n    }\n    if (!__DEV__ && projectId === DEV_TESTING_PROJECT_UUID) {\n        throw new Error(\n            'Invalid projectId (dev testing UUID). Open Home so a real project can be created, then retry.',\n        );\n    }\n    if (!OBJECT_ID_HEX.test(projectId) && !PROJECT_UUID.test(projectId)) {\n        throw new Error(`Invalid projectId format for system token mint: ${projectId.slice(0, 48)}`);\n    }\n}\n\nexport async function mintSurfaceSystemToken(input: MintSurfaceTokenInput): Promise<MintSurfaceTokenResult> {\n    const idToken = await readAuth0IdToken();\n    if (!idToken) {\n        throw new Error('No Auth0 id_token in storage — sign in to the mobile app first.');\n    }\n\n    const graphqlUrl = resolveSurfaceCatalogBackend(input.graphqlUrl);\n    if (__DEV__) {\n        // eslint-disable-next-line no-console\n        console.log('[WebBuilder] minting system token via', graphqlUrl);\n    }\n\n    const orgName = input.orgName?.trim();\n    const projectId = input.projectId?.trim();\n    const environmentTagId = input.tagId?.trim();\n\n    if (!orgName) {\n        throw new Error('Missing orgName — wait for org bootstrap, then retry.');\n    }\n    if (!projectId) {\n        throw new Error('Missing projectId — wait for org/project bootstrap, then retry.');\n    }\n    if (!environmentTagId) {\n        throw new Error('Missing environmentTagId — cannot mint system token.');\n    }\n    assertMintableProjectId(projectId);\n\n    // Canonical get-or-create (resolves project UUID → Mongo id server-side).\n    try {\n        const obtained = await gqlFetch<{ obtainUserSystemToken?: { token?: string } | null }>(\n            graphqlUrl,\n            idToken,\n            OBTAIN_USER_SYSTEM_TOKEN,\n            {\n                input: {\n                    projectId,\n                    environmentTagId,\n                    orgName,\n                    renewBufferSeconds: 7 * 24 * 60 * 60,\n                    algorithm: 'HS256',\n                },\n            },\n        );\n        const token = obtained.data?.obtainUserSystemToken?.token?.trim();\n        if (token && !obtained.errors?.length) {\n            if (__DEV__) {\n                // eslint-disable-next-line no-console\n                console.log('[WebBuilder] obtained system token length=', token.length);\n            }\n            return { token, backend: graphqlUrl };\n        }\n        if (obtained.errors?.length) {\n            throw new Error(obtained.errors[0]?.message || 'obtainUserSystemToken failed');\n        }\n    } catch (err) {\n        if (__DEV__) {\n            // eslint-disable-next-line no-console\n            console.warn('[WebBuilder] obtainUserSystemToken failed, falling back to reveal:', err);\n        }\n        // Fall through to get/create/reveal only when obtain is unavailable.\n        const msg = err instanceof Error ? err.message : String(err);\n        if (/12 bytes|24 hex|Project not found/i.test(msg)) {\n            throw new Error(\n                `Project \"${projectId}\" is not valid on this backend. Pick/create a real project in the app, then retry.`,\n            );\n        }\n        // Continue to legacy path for older backends without obtainUserSystemToken.\n        if (!/Unknown field|Cannot query field|obtainUserSystemToken/i.test(msg)) {\n            // Non-schema errors from obtain should surface (auth, project, etc.).\n            if (/Unauthorized|401|Project not found|Invalid project/i.test(msg)) {\n                throw err instanceof Error ? err : new Error(msg);\n            }\n        }\n    }\n\n    const getResult = await gqlFetch<{ getUserSystemToken?: { id?: string } | null }>(\n        graphqlUrl,\n        idToken,\n        GET_USER_SYSTEM_TOKEN,\n    );\n    if (getResult.errors?.length) {\n        throw new Error(getResult.errors[0]?.message || 'GetUserSystemToken failed');\n    }\n\n    let tokenId = getResult.data?.getUserSystemToken?.id ?? null;\n\n    if (!tokenId) {\n        const createResult = await gqlFetch<{ createSecretApiToken?: { id?: string } | null }>(\n            graphqlUrl,\n            idToken,\n            CREATE_SECRET_API_TOKEN,\n            {\n                input: {\n                    name: 'System Token',\n                    expiryInSeconds: 31536000,\n                    isSystemToken: true,\n                    environmentTagId,\n                    orgName,\n                    projectId,\n                    algorithm: 'HS256',\n                },\n            },\n        );\n\n        const createErr = createResult.errors?.[0]?.message || '';\n        if (createErr && !/already have a system token/i.test(createErr)) {\n            if (/12 bytes|24 hex/i.test(createErr)) {\n                throw new Error(\n                    `Project \"${projectId}\" is not valid on this backend. Pick/create a real project in the app, then retry.`,\n                );\n            }\n            throw new Error(createErr);\n        }\n\n        if (createResult.data?.createSecretApiToken?.id) {\n            tokenId = createResult.data.createSecretApiToken.id;\n        } else {\n            const refetch = await gqlFetch<{ getUserSystemToken?: { id?: string } | null }>(\n                graphqlUrl,\n                idToken,\n                GET_USER_SYSTEM_TOKEN,\n            );\n            tokenId = refetch.data?.getUserSystemToken?.id ?? null;\n        }\n    }\n\n    if (!tokenId) {\n        throw new Error('No system token id on GraphQL backend — cannot reveal.');\n    }\n\n    const reveal = await gqlFetch<{ revealSecretApiToken?: string | null }>(\n        graphqlUrl,\n        idToken,\n        REVEAL_SECRET_API_TOKEN,\n        { id: tokenId },\n    );\n    if (reveal.errors?.length) {\n        throw new Error(reveal.errors[0]?.message || 'RevealSecretApiToken failed');\n    }\n\n    const token = reveal.data?.revealSecretApiToken?.trim();\n    if (!token) {\n        throw new Error('RevealSecretApiToken returned empty token');\n    }\n\n    if (__DEV__) {\n        // eslint-disable-next-line no-console\n        console.log('[WebBuilder] minted system token length=', token.length);\n    }\n    return { token, backend: graphqlUrl };\n}\n\nexport function appendSurfaceAuthParams(baseUrl: string, token: string, state: string): string {\n    try {\n        const url = new URL(baseUrl);\n        url.searchParams.set('token', token);\n        url.searchParams.set('code', token);\n        url.searchParams.set('state', state);\n        return url.toString();\n    } catch {\n        const sep = baseUrl.includes('?') ? '&' : '?';\n        return `${baseUrl}${sep}token=${encodeURIComponent(token)}&code=${encodeURIComponent(token)}&state=${encodeURIComponent(state)}`;\n    }\n}\n\nfunction tokenFingerprint(token: string): string {\n    const sig = token.split('.')[2] ?? token;\n    return sig.slice(-24);\n}\n\n/** Shared WebView boot script: token + meta + fetch shims for surface-kit auth. */\nfunction buildSurfaceHandoffScript(token: string, backend: string, state: string, withGateRecovery: boolean): string {\n    const safeToken = JSON.stringify(token);\n    const safeBackend = JSON.stringify(backend);\n    const safeState = JSON.stringify(state);\n    const fp = JSON.stringify(tokenFingerprint(token));\n    const recovery = withGateRecovery\n        ? `\n    function tryRecover() {\n      stamp();\n      var gate = document.querySelector('[data-surface-login]');\n      if (!gate) return;\n      if (sessionStorage.getItem('__yantra_wb_token_reload')) return;\n      sessionStorage.setItem('__yantra_wb_token_reload', '1');\n      var u = new URL(window.location.href);\n      u.searchParams.set('token', t);\n      u.searchParams.set('code', t);\n      u.searchParams.set('state', state);\n      window.location.replace(u.toString());\n    }\n    tryRecover();\n    var i = 0;\n    var timer = setInterval(function () {\n      i += 1;\n      tryRecover();\n      if (i >= 40 || !document.querySelector('[data-surface-login]')) clearInterval(timer);\n    }, 250);\n`\n        : `\n    var n = 0;\n    var id = setInterval(function () {\n      stamp();\n      n += 1;\n      if (n >= 80) clearInterval(id);\n    }, 50);\n`;\n\n    return `\n(function () {\n  try {\n    var t = ${safeToken};\n    var backend = ${safeBackend};\n    var state = ${safeState};\n    var fp = ${fp};\n    var PROBE_Q = 'query { getUserAccount { id } }';\n\n    if (!window.__yantraWbFetchPatched) {\n      window.__yantraWbFetchPatched = true;\n      var origFetch = window.fetch.bind(window);\n      window.fetch = function (input, init) {\n        try {\n          var url = typeof input === 'string' ? input : (input && input.url) ? String(input.url) : '';\n          // Force surface-kit resolveCatalogBackend() to our GRAPHQL_URL (not remote agent → ideback).\n          if (url.indexOf('/v1/auth/context') !== -1) {\n            return Promise.resolve(new Response(\n              JSON.stringify({ backendGraphqlUrl: backend }),\n              { status: 200, headers: { 'Content-Type': 'application/json' } }\n            ));\n          }\n          var body = init && typeof init.body === 'string' ? init.body : '';\n          if (body && body.indexOf('getUserAccount') !== -1) {\n            var parsed = JSON.parse(body);\n            var q = parsed && typeof parsed.query === 'string' ? parsed.query.replace(/\\\\s+/g, ' ').trim() : '';\n            if (q === PROBE_Q) {\n              return Promise.resolve(new Response(\n                JSON.stringify({ data: { getUserAccount: { id: 'mobile-webview-handoff' } } }),\n                { status: 200, headers: { 'Content-Type': 'application/json' } }\n              ));\n            }\n          }\n        } catch (e0) {}\n        return origFetch(input, init);\n      };\n    }\n\n    function stamp() {\n      try {\n        sessionStorage.setItem('cdecli_oauth_state', state);\n        localStorage.setItem('cdecli_token', t);\n        sessionStorage.setItem('cdecli_token', t);\n        localStorage.setItem('cdecli_system_token', t);\n        localStorage.setItem('cdecli_token_meta', JSON.stringify({\n          backend: backend,\n          verifiedAt: Date.now(),\n          fp: fp\n        }));\n      } catch (e1) {}\n    }\n    stamp();\n    ${recovery}\n  } catch (e) {}\n  true;\n})();\ntrue;\n`;\n}\n\nexport function buildCdecliTokenInjection(token: string, backend: string, state: string): string {\n    return buildSurfaceHandoffScript(token, backend, state, false);\n}\n\nexport function buildSurfaceGateRecoveryScript(token: string, backend: string, state: string): string {\n    return buildSurfaceHandoffScript(token, backend, state, true);\n}\n"],"names":["token"],"mappings":"wJAGA,MAAM,wBAA2B,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAOjC,MAAM,qBAAwB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAS9B,MAAM,uBAA0B,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQhC,MAAM,uBAA0B,GAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAWhC,SAAS,oBAAoB,GAAqB,EAAA;AAChD,EAAA,OAAO,GAAI,CAAA,IAAA,EAAO,CAAA,OAAA,CAAQ,OAAO,EAAE,CAAA;AACrC;AAGO,SAAS,6BAA6B,UAA6B,EAAA;AACxE,EAAM,MAAA,GAAA,GAAA,CAAM,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,IAAA,EAAA,KAAU,MAAO,CAAA,WAAA;AACzC,EAAI,IAAA,EAAC,2BAAK,IAAQ,EAAA,CAAA,EAAA;AAChB,IAAM,MAAA,IAAI,MAAM,+BAA+B,CAAA;AAAA;AAEjD,EAAA,OAAO,oBAAoB,GAAG,CAAA;AAChC;AACA,eAAe,QAAY,CAAA,UAAA,EAAoB,OAAiB,EAAA,KAAA,EAAe,SAA4D,EAAA;AAIzI,EAAM,MAAA,GAAA,GAAM,MAAM,KAAA,CAAM,UAAY,EAAA;AAAA,IAClC,MAAQ,EAAA,MAAA;AAAA,IACR,OAAS,EAAA;AAAA,MACP,CAAC,WAAY,CAAA,YAAY,GAAG,kBAAA;AAAA,MAC5B,CAAC,WAAA,CAAY,aAAa,GAAG,UAAU,OAAO,CAAA,CAAA;AAAA,MAC9C,CAAC,WAAY,CAAA,SAAS,GAAG,MAAA;AAAA,MACzB,CAAC,WAAA,CAAY,aAAa,GAAG,YAAa,CAAA;AAAA,KAC5C;AAAA,IACA,IAAA,EAAM,KAAK,SAAU,CAAA;AAAA,MACnB,KAAA;AAAA,MACA;AAAA,KACD;AAAA,GACF,CAAA;AACD,EAAI,IAAA,CAAC,IAAI,EAAI,EAAA;AACX,IAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAO,CAAA,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,IAAM,MAAA,IAAI,KAAM,CAAA,CAAA,aAAA,EAAgB,GAAI,CAAA,MAAM,CAAK,EAAA,EAAA,IAAA,CAAK,KAAM,CAAA,CAAA,EAAG,GAAG,CAAC,CAAE,CAAA,CAAA;AAAA;AAErE,EAAQ,OAAA,MAAM,IAAI,IAAK,EAAA;AACzB;AAkBA,MAAM,wBAA2B,GAAA,sCAAA;AACjC,MAAM,aAAgB,GAAA,mBAAA;AACtB,MAAM,YAAe,GAAA,+EAAA;AACrB,SAAS,wBAAwB,SAAyB,EAAA;AACxD,EAAA,IAAI,SAAc,KAAA,SAAA,IAAa,CAAC,SAAA,CAAU,MAAQ,EAAA;AAChD,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAI,IAAA,CAAC,OAAW,IAAA,SAAA,KAAc,wBAA0B,EAAA;AACtD,IAAM,MAAA,IAAI,MAAM,+FAA+F,CAAA;AAAA;AAEjH,EAAI,IAAA,CAAC,cAAc,IAAK,CAAA,SAAS,KAAK,CAAC,YAAA,CAAa,IAAK,CAAA,SAAS,CAAG,EAAA;AACnE,IAAM,MAAA,IAAI,MAAM,CAAmD,gDAAA,EAAA,SAAA,CAAU,MAAM,CAAG,EAAA,EAAE,CAAC,CAAE,CAAA,CAAA;AAAA;AAE/F;AACA,eAAsB,uBAAuB,KAA+D,EAAA;AAxG5G,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAyGE,EAAM,MAAA,OAAA,GAAU,MAAM,gBAAiB,EAAA;AACvC,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAM,MAAA,UAAA,GAAa,4BAA6B,CAAA,KAAA,CAAM,UAAU,CAAA;AAChE,EAAA,IAAI,OAAS,EAAA;AAEX,IAAQ,OAAA,CAAA,GAAA,CAAI,yCAAyC,UAAU,CAAA;AAAA;AAEjE,EAAM,MAAA,OAAA,GAAA,CAAU,EAAM,GAAA,KAAA,CAAA,OAAA,KAAN,IAAe,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AAC/B,EAAM,MAAA,SAAA,GAAA,CAAY,EAAM,GAAA,KAAA,CAAA,SAAA,KAAN,IAAiB,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AACnC,EAAM,MAAA,gBAAA,GAAA,CAAmB,EAAM,GAAA,KAAA,CAAA,KAAA,KAAN,IAAa,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AACtC,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,4DAAuD,CAAA;AAAA;AAEzE,EAAA,IAAI,CAAC,SAAW,EAAA;AACd,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAA,IAAI,CAAC,gBAAkB,EAAA;AACrB,IAAM,MAAA,IAAI,MAAM,2DAAsD,CAAA;AAAA;AAExE,EAAA,uBAAA,CAAwB,SAAS,CAAA;AAGjC,EAAI,IAAA;AACF,IAAA,MAAM,QAAW,GAAA,MAAM,QAIpB,CAAA,UAAA,EAAY,SAAS,wBAA0B,EAAA;AAAA,MAChD,KAAO,EAAA;AAAA,QACL,SAAA;AAAA,QACA,gBAAA;AAAA,QACA,OAAA;AAAA,QACA,kBAAA,EAAoB,CAAI,GAAA,EAAA,GAAK,EAAK,GAAA,EAAA;AAAA,QAClC,SAAW,EAAA;AAAA;AACb,KACD,CAAA;AACD,IAAA,MAAMA,UAAQ,EAAS,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,QAAA,CAAA,IAAA,KAAT,mBAAe,qBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAsC,UAAtC,IAA6C,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AAC3D,IAAA,IAAIA,MAAS,IAAA,EAAA,CAAC,EAAS,GAAA,QAAA,CAAA,MAAA,KAAT,mBAAiB,MAAQ,CAAA,EAAA;AACrC,MAAA,IAAI,OAAS,EAAA;AAEX,QAAQ,OAAA,CAAA,GAAA,CAAI,4CAA8CA,EAAAA,MAAAA,CAAM,MAAM,CAAA;AAAA;AAExE,MAAO,OAAA;AAAA,QACL,KAAAA,EAAAA,MAAAA;AAAA,QACA,OAAS,EAAA;AAAA,OACX;AAAA;AAEF,IAAI,IAAA,CAAA,EAAA,GAAA,QAAA,CAAS,MAAT,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAiB,MAAQ,EAAA;AAC3B,MAAM,MAAA,IAAI,QAAM,EAAS,GAAA,QAAA,CAAA,MAAA,CAAO,CAAC,CAAjB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAoB,YAAW,8BAA8B,CAAA;AAAA;AAC/E,WACO,GAAK,EAAA;AACZ,IAAA,IAAI,OAAS,EAAA;AAEX,MAAQ,OAAA,CAAA,IAAA,CAAK,sEAAsE,GAAG,CAAA;AAAA;AAGxF,IAAA,MAAM,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAI,CAAA,OAAA,GAAU,OAAO,GAAG,CAAA;AAC3D,IAAI,IAAA,oCAAA,CAAqC,IAAK,CAAA,GAAG,CAAG,EAAA;AAClD,MAAA,MAAM,IAAI,KAAA,CAAM,CAAY,SAAA,EAAA,SAAS,CAAoF,kFAAA,CAAA,CAAA;AAAA;AAG3H,IAAA,IAAI,CAAC,yDAAA,CAA0D,IAAK,CAAA,GAAG,CAAG,EAAA;AAExE,MAAI,IAAA,qDAAA,CAAsD,IAAK,CAAA,GAAG,CAAG,EAAA;AACnE,QAAA,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAM,GAAA,IAAI,MAAM,GAAG,CAAA;AAAA;AAClD;AACF;AAEF,EAAA,MAAM,SAAY,GAAA,MAAM,QAIrB,CAAA,UAAA,EAAY,SAAS,qBAAqB,CAAA;AAC7C,EAAI,IAAA,CAAA,EAAA,GAAA,SAAA,CAAU,MAAV,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkB,MAAQ,EAAA;AAC5B,IAAM,MAAA,IAAI,QAAM,EAAU,GAAA,SAAA,CAAA,MAAA,CAAO,CAAC,CAAlB,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAqB,YAAW,2BAA2B,CAAA;AAAA;AAE7E,EAAA,IAAI,WAAU,EAAU,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,SAAA,CAAA,IAAA,KAAV,mBAAgB,kBAAhB,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAoC,OAApC,IAA0C,GAAA,EAAA,GAAA,IAAA;AACxD,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAA,MAAM,YAAe,GAAA,MAAM,QAIxB,CAAA,UAAA,EAAY,SAAS,uBAAyB,EAAA;AAAA,MAC/C,KAAO,EAAA;AAAA,QACL,IAAM,EAAA,cAAA;AAAA,QACN,eAAiB,EAAA,OAAA;AAAA,QACjB,aAAe,EAAA,IAAA;AAAA,QACf,gBAAA;AAAA,QACA,OAAA;AAAA,QACA,SAAA;AAAA,QACA,SAAW,EAAA;AAAA;AACb,KACD,CAAA;AACD,IAAA,MAAM,cAAY,EAAa,GAAA,CAAA,EAAA,GAAA,YAAA,CAAA,MAAA,KAAb,IAAsB,GAAA,MAAA,GAAA,EAAA,CAAA,CAAA,CAAA,KAAtB,mBAA0B,OAAW,KAAA,EAAA;AACvD,IAAA,IAAI,SAAa,IAAA,CAAC,8BAA+B,CAAA,IAAA,CAAK,SAAS,CAAG,EAAA;AAChE,MAAI,IAAA,kBAAA,CAAmB,IAAK,CAAA,SAAS,CAAG,EAAA;AACtC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAY,SAAA,EAAA,SAAS,CAAoF,kFAAA,CAAA,CAAA;AAAA;AAE3H,MAAM,MAAA,IAAI,MAAM,SAAS,CAAA;AAAA;AAE3B,IAAA,IAAA,CAAI,EAAa,GAAA,CAAA,EAAA,GAAA,YAAA,CAAA,IAAA,KAAb,IAAmB,GAAA,MAAA,GAAA,EAAA,CAAA,oBAAA,KAAnB,mBAAyC,EAAI,EAAA;AAC/C,MAAU,OAAA,GAAA,YAAA,CAAa,KAAK,oBAAqB,CAAA,EAAA;AAAA,KAC5C,MAAA;AACL,MAAA,MAAM,OAAU,GAAA,MAAM,QAInB,CAAA,UAAA,EAAY,SAAS,qBAAqB,CAAA;AAC7C,MAAA,OAAA,GAAA,CAAU,yBAAQ,IAAR,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAc,kBAAd,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkC,OAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAAA;AACpD;AAEF,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,6DAAwD,CAAA;AAAA;AAE1E,EAAA,MAAM,MAAS,GAAA,MAAM,QAElB,CAAA,UAAA,EAAY,SAAS,uBAAyB,EAAA;AAAA,IAC/C,EAAI,EAAA;AAAA,GACL,CAAA;AACD,EAAI,IAAA,CAAA,EAAA,GAAA,MAAA,CAAO,MAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAe,MAAQ,EAAA;AACzB,IAAM,MAAA,IAAI,QAAM,EAAO,GAAA,MAAA,CAAA,MAAA,CAAO,CAAC,CAAf,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkB,YAAW,6BAA6B,CAAA;AAAA;AAE5E,EAAA,MAAM,KAAQ,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,MAAA,CAAO,IAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,yBAAb,IAAmC,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AACjD,EAAA,IAAI,CAAC,KAAO,EAAA;AACV,IAAM,MAAA,IAAI,MAAM,2CAA2C,CAAA;AAAA;AAE7D,EAAA,IAAI,OAAS,EAAA;AAEX,IAAQ,OAAA,CAAA,GAAA,CAAI,0CAA4C,EAAA,KAAA,CAAM,MAAM,CAAA;AAAA;AAEtE,EAAO,OAAA;AAAA,IACL,KAAA;AAAA,IACA,OAAS,EAAA;AAAA,GACX;AACF;AACgB,SAAA,uBAAA,CAAwB,OAAiB,EAAA,KAAA,EAAe,KAAuB,EAAA;AAC7F,EAAI,IAAA;AACF,IAAM,MAAA,GAAA,GAAM,IAAI,GAAA,CAAI,OAAO,CAAA;AAC3B,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,OAAA,EAAS,KAAK,CAAA;AACnC,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,MAAA,EAAQ,KAAK,CAAA;AAClC,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,OAAA,EAAS,KAAK,CAAA;AACnC,IAAA,OAAO,IAAI,QAAS,EAAA;AAAA,GACd,CAAA,OAAA,CAAA,EAAA;AACN,IAAA,MAAM,GAAM,GAAA,OAAA,CAAQ,QAAS,CAAA,GAAG,IAAI,GAAM,GAAA,GAAA;AAC1C,IAAA,OAAO,CAAG,EAAA,OAAO,CAAG,EAAA,GAAG,SAAS,kBAAmB,CAAA,KAAK,CAAC,CAAA,MAAA,EAAS,mBAAmB,KAAK,CAAC,CAAU,OAAA,EAAA,kBAAA,CAAmB,KAAK,CAAC,CAAA,CAAA;AAAA;AAElI;AACA,SAAS,iBAAiB,KAAuB,EAAA;AA9PjD,EAAA,IAAA,EAAA;AA+PE,EAAA,MAAM,OAAM,EAAM,GAAA,KAAA,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,CAAC,MAAlB,IAAuB,GAAA,EAAA,GAAA,KAAA;AACnC,EAAO,OAAA,GAAA,CAAI,MAAM,GAAG,CAAA;AACtB;AAGA,SAAS,yBAA0B,CAAA,KAAA,EAAe,OAAiB,EAAA,KAAA,EAAe,gBAAmC,EAAA;AACnH,EAAM,MAAA,SAAA,GAAY,IAAK,CAAA,SAAA,CAAU,KAAK,CAAA;AACtC,EAAM,MAAA,WAAA,GAAc,IAAK,CAAA,SAAA,CAAU,OAAO,CAAA;AAC1C,EAAM,MAAA,SAAA,GAAY,IAAK,CAAA,SAAA,CAAU,KAAK,CAAA;AACtC,EAAA,MAAM,EAAK,GAAA,IAAA,CAAK,SAAU,CAAA,gBAAA,CAAiB,KAAK,CAAC,CAAA;AACjD,EAAA,MAAM,WAAW,gBAAmB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAoBlC,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQF,EAAO,OAAA;AAAA;AAAA;AAAA,YAAA,EAGK,SAAS,CAAA;AAAA,kBAAA,EACH,WAAW,CAAA;AAAA,gBAAA,EACb,SAAS,CAAA;AAAA,aAAA,EACZ,EAAE,CAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,EA8CX,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAMd;AACgB,SAAA,yBAAA,CAA0B,KAAe,EAAA,OAAA,EAAiB,KAAuB,EAAA;AAC/F,EAAA,OAAO,yBAA0B,CAAA,KAAA,EAAO,OAAS,EAAA,KAAA,EAAO,KAAK,CAAA;AAC/D;AACgB,SAAA,8BAAA,CAA+B,KAAe,EAAA,OAAA,EAAiB,KAAuB,EAAA;AACpG,EAAA,OAAO,yBAA0B,CAAA,KAAA,EAAO,OAAS,EAAA,KAAA,EAAO,IAAI,CAAA;AAC9D"}

package/lib/hooks/useCdecliAutoConnect.js

@@ -17,7 +17,7 @@ var __spreadValues = (a, b) => {
   return a;
 };
 var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
-const SYSTEM_TOKEN_ALGORITHM = __DEV__ ? SecretApiTokenAlgorithm.Hs256 : SecretApiTokenAlgorithm.Rs256;
+const SYSTEM_TOKEN_ALGORITHM = SecretApiTokenAlgorithm.Hs256;
 const CHANNEL_TYPE = "cdecli-serve";
 function useCdecliAutoConnect(isSelected, channelId) {
   const [status, setStatus] = useState("idle");

package/lib/hooks/useCdecliAutoConnect.js.map

@@ -1 +1 @@
-{"version":3,"file":"useCdecliAutoConnect.js","sources":["../../src/hooks/useCdecliAutoConnect.ts"],"sourcesContent":["/**\n * Auto-connects the cdecli-serve messenger-gateway channel when the CDeCLI\n * gateway is selected from the dropdown. Obtains/creates a system token and\n * calls the `gatewayConnect` mutation so the backend provider has a live\n * session with the cdecli-agent endpoint.\n */\n\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport {\n    useGatewayConnectMutation,\n    useGatewayDisconnectMutation,\n    useGetUserSystemTokenQuery,\n    useCreateSecretApiTokenMutation,\n    useRevealSecretApiTokenMutation,\n} from 'common/graphql';\nimport { SecretApiTokenAlgorithm } from 'common';\nimport { config } from '../config/env-config';\nimport { usePrerequisiteIds } from './usePrerequisiteIds';\n\n/** Local backend ships RS256 public key but often no private key; HS256 uses dev JWT secret. */\nconst SYSTEM_TOKEN_ALGORITHM = __DEV__ ? SecretApiTokenAlgorithm.Hs256 : SecretApiTokenAlgorithm.Rs256;\n\n// ─── Types ───────────────────────────────────────────────────────\n\nexport type CdecliAutoConnectStatus = 'idle' | 'connecting' | 'connected' | 'error';\n\nexport interface UseCdecliAutoConnectResult {\n    /** Whether the backend cdecli-serve channel is connected. */\n    channelConnected: boolean;\n    /** Current connection status. */\n    status: CdecliAutoConnectStatus;\n    /** Error message if status is 'error'. */\n    error: string | null;\n    /** Persistence mode reported by the backend provider ('backend' | 'frontend'). */\n    persistenceMode: 'backend' | 'frontend' | undefined;\n    /** Active skill name on the current CDeCLI session (null if none). */\n    activeSkill: string | null;\n    /** Per-user accountId used for this gateway connection. */\n    accountId: string;\n    /** Reconnect the CDeCLI session with a specific skill pre-activated. */\n    connectWithSkill: (skill: string, model?: string, systemPrompt?: string, skillId?: string) => Promise<void>;\n}\n\n// ─── Constants ───────────────────────────────────────────────────\n\nconst CHANNEL_TYPE = 'cdecli-serve';\n\n// ─── Hook ────────────────────────────────────────────────────────\n\n/**\n * When `isSelected` is true, auto-connects the cdecli-serve channel on the\n * messenger-gateway backend using the hosted endpoint and a system token.\n */\nexport function useCdecliAutoConnect(isSelected: boolean, channelId?: string): UseCdecliAutoConnectResult {\n    const [status, setStatus] = useState<CdecliAutoConnectStatus>('idle');\n    const [error, setError] = useState<string | null>(null);\n    const [persistenceMode, setPersistenceMode] = useState<'backend' | 'frontend' | undefined>(undefined);\n    const [activeSkill, setActiveSkill] = useState<string | null>(null);\n    const connectingRef = useRef(false);\n    const connectedRef = useRef(false);\n\n    const { orgName, projectId, tagId, accountUserId, loading: prerequisitesLoading } = usePrerequisiteIds();\n\n    // Per-user accountId so each user gets their own cdecli-agent session.\n    // Wait for the profile query to load before connecting — otherwise all\n    // users fall back to 'default' and share a single cdecli-agent session.\n    const accountId = accountUserId ?? 'default';\n\n    // Track the previous channelId so we can reconnect when the user opens a new chat.\n    const prevChannelIdRef = useRef<string | undefined>(channelId);\n\n    const [connectMutation] = useGatewayConnectMutation();\n    const [disconnectMutation] = useGatewayDisconnectMutation();\n    const [createTokenMutation] = useCreateSecretApiTokenMutation();\n    const [revealTokenMutation] = useRevealSecretApiTokenMutation();\n    const {\n        data: systemTokenData,\n        loading: systemTokenLoading,\n        refetch: refetchSystemToken,\n    } = useGetUserSystemTokenQuery({\n        skip: !isSelected,\n        fetchPolicy: 'network-only',\n    });\n\n    /** True when the backend rejects createSecretApiToken because the user already has one. */\n    const isAlreadyHasSystemTokenError = (err: unknown): boolean => {\n        const message = err instanceof Error ? err.message : String(err ?? '');\n        return /already have a system token/i.test(message);\n    };\n\n    const obtainSystemToken = useCallback(async (): Promise<string | null> => {\n        try {\n            let tokenId: string | null = systemTokenData?.getUserSystemToken?.id ?? null;\n\n            /**\n             * Race recovery: if the GetUserSystemToken query hasn't returned yet (or returned\n             * stale data) we'll fall through to createSecretApiToken. The backend rejects that\n             * with \"you already have a system token\" — catch it, refetch, and use the existing\n             * token id instead of falling back to an unauthenticated connection.\n             */\n            if (!tokenId) {\n                if (!orgName || !projectId) {\n                    const refetchResult = await refetchSystemToken().catch(() => null);\n                    tokenId = refetchResult?.data?.getUserSystemToken?.id ?? null;\n                    if (!tokenId) return null;\n                } else {\n                    try {\n                        const { data: createData } = await createTokenMutation({\n                            variables: {\n                                input: {\n                                    name: 'System Token',\n                                    expiryInSeconds: 31536000,\n                                    isSystemToken: true,\n                                    environmentTagId: tagId,\n                                    orgName: orgName || 'default',\n                                    projectId: projectId || 'default',\n                                    algorithm: SYSTEM_TOKEN_ALGORITHM,\n                                },\n                            },\n                        });\n                        tokenId = createData?.createSecretApiToken?.id ?? null;\n                        await refetchSystemToken();\n                    } catch (createErr) {\n                        if (!isAlreadyHasSystemTokenError(createErr)) throw createErr;\n                        const refetchResult = await refetchSystemToken().catch(() => null);\n                        tokenId = refetchResult?.data?.getUserSystemToken?.id ?? null;\n                        if (!tokenId) {\n                            console.warn(\n                                '[useCdecliAutoConnect] System token already exists but refetch returned no id; retrying',\n                            );\n                            return null;\n                        }\n                    }\n                }\n            }\n\n            if (!tokenId) return null;\n\n            const { data: revealData } = await revealTokenMutation({\n                variables: { id: tokenId },\n            });\n            return (revealData?.revealSecretApiToken as string) || null;\n        } catch (err) {\n            console.error('[useCdecliAutoConnect] obtainSystemToken error:', err);\n            return null;\n        }\n    }, [systemTokenData, createTokenMutation, revealTokenMutation, refetchSystemToken, orgName, projectId, tagId]);\n\n    // Auto-connect when CDeCLI gateway is selected\n    useEffect(() => {\n        if (!isSelected) {\n            // Reset when deselected, but don't disconnect — keep the session alive\n            // so switching back is instant.\n            connectingRef.current = false;\n            return;\n        }\n\n        // Wait until the user profile has loaded so accountId is the real\n        // user id instead of the 'default' fallback.\n        if (prerequisitesLoading || !accountUserId) return;\n\n        /**\n         * Wait for the GetUserSystemToken query to resolve before we connect — otherwise we\n         * race the network and try to create a duplicate token, which the backend rejects with\n         * \"you already have a system token\" and we fall back to an unauthenticated session.\n         */\n        if (systemTokenLoading) return;\n\n        /**\n         * If we're already connected and just switching channels, the gateway needs a reconnect\n         * (the session is bound server-side to chatId), but the user already had a working\n         * connection. Skip flipping the visible status to 'connecting' so the toolbar pill\n         * doesn't briefly show \"Checking...\" every time someone taps a history row.\n         */\n        let isSilentReconnect = false;\n        if (connectedRef.current || connectingRef.current) {\n            if (channelId && prevChannelIdRef.current !== channelId) {\n                isSilentReconnect = connectedRef.current;\n                prevChannelIdRef.current = channelId;\n                connectedRef.current = false;\n            } else {\n                return;\n            }\n        }\n\n        const doConnect = async () => {\n            connectingRef.current = true;\n            if (!isSilentReconnect) setStatus('connecting');\n            setError(null);\n\n            try {\n                const endpoint = config.CDECLI_AGENT_ENDPOINT || 'https://cdecli-agent.cdebase.dev';\n                const token = await obtainSystemToken();\n                if (!token) {\n                    console.warn('[useCdecliAutoConnect] No system token, connecting without auth');\n                }\n\n                const { data } = await connectMutation({\n                    variables: {\n                        input: {\n                            channelType: CHANNEL_TYPE,\n                            accountId,\n                            options: {\n                                endpoint: endpoint.trim(),\n                                ...(token ? { token } : {}),\n                                ...(channelId ? { chatId: channelId } : {}),\n                            },\n                        },\n                    },\n                });\n\n                const result = data?.gatewayConnect as\n                    | ((typeof data)['gatewayConnect'] & { persistenceMode?: string })\n                    | undefined;\n                console.log(\n                    '[useCdecliAutoConnect] connectMutation result (account=%s):',\n                    accountId,\n                    JSON.stringify(result),\n                );\n                if (result?.persistenceMode) {\n                    setPersistenceMode(result.persistenceMode as 'backend' | 'frontend');\n                }\n                if (result?.state === 'CONNECTED' || result?.connected) {\n                    setStatus('connected');\n                    connectedRef.current = true;\n                } else if (result?.state === 'ERROR') {\n                    setStatus('error');\n                    setError(result.lastError ?? 'Failed to connect to CDeCLI agent');\n                    connectedRef.current = false;\n                } else {\n                    // Assume connecting — the subscription will push the final state\n                    setStatus('connected');\n                    connectedRef.current = true;\n                }\n            } catch (err) {\n                const msg = err instanceof Error ? err.message : String(err);\n                console.error('[useCdecliAutoConnect] connect error:', msg);\n                setStatus('error');\n                setError(msg);\n                connectedRef.current = false;\n            } finally {\n                connectingRef.current = false;\n            }\n        };\n\n        doConnect();\n    }, [\n        isSelected,\n        obtainSystemToken,\n        connectMutation,\n        accountId,\n        prerequisitesLoading,\n        accountUserId,\n        channelId,\n        systemTokenLoading,\n    ]);\n\n    // Keep the backend session alive across page refreshes and SPA navigations.\n    // The backend CdecliServeProvider.connect() will reuse the existing session\n    // if the endpoint hasn't changed, preserving conversation context.\n    // Only disconnect when the user explicitly switches to a different gateway.\n\n    /** Reconnect the CDeCLI session with a specific skill pre-activated. */\n    const connectWithSkill = useCallback(\n        async (skill: string, model?: string, systemPrompt?: string, skillId?: string) => {\n            console.log(\n                '[useCdecliAutoConnect] connectWithSkill called with skill=%s skillId=%s model=%s systemPrompt=%d chars',\n                skill,\n                skillId ?? '',\n                model,\n                systemPrompt?.length ?? 0,\n            );\n            setStatus('connecting');\n            setError(null);\n\n            try {\n                const endpoint = config.CDECLI_AGENT_ENDPOINT || 'https://cdecli-agent.cdebase.dev';\n                const token = await obtainSystemToken();\n\n                console.log('[useCdecliAutoConnect] connectWithSkill sending mutation with skill=%s', skill);\n                const { data } = await connectMutation({\n                    variables: {\n                        input: {\n                            channelType: CHANNEL_TYPE,\n                            accountId,\n                            options: {\n                                endpoint: endpoint.trim(),\n                                ...(token ? { token } : {}),\n                                skill,\n                                ...(skillId ? { skillId } : {}),\n                                ...(model ? { model } : {}),\n                                ...(systemPrompt ? { systemPrompt } : {}),\n                                ...(channelId ? { chatId: channelId } : {}),\n                            },\n                        },\n                    },\n                });\n\n                console.log('[useCdecliAutoConnect] connectWithSkill result:', JSON.stringify(data?.gatewayConnect));\n                const result = data?.gatewayConnect as\n                    | ((typeof data)['gatewayConnect'] & { persistenceMode?: string })\n                    | undefined;\n                if (result?.persistenceMode) {\n                    setPersistenceMode(result.persistenceMode as 'backend' | 'frontend');\n                }\n                if (result?.state === 'CONNECTED' || result?.connected) {\n                    setStatus('connected');\n                    connectedRef.current = true;\n                    setActiveSkill(skill);\n                } else {\n                    setStatus('connected');\n                    connectedRef.current = true;\n                    setActiveSkill(skill);\n                }\n            } catch (err) {\n                const msg = err instanceof Error ? err.message : String(err);\n                console.error('[useCdecliAutoConnect] connectWithSkill error:', msg);\n                setStatus('error');\n                setError(msg);\n            }\n        },\n        [connectMutation, obtainSystemToken, accountId, channelId],\n    );\n\n    return {\n        channelConnected: status === 'connected',\n        status,\n        error,\n        persistenceMode,\n        activeSkill,\n        accountId,\n        connectWithSkill,\n    };\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAcA,MAAM,sBAAyB,GAAA,OAAA,GAAU,uBAAwB,CAAA,KAAA,GAAQ,uBAAwB,CAAA,KAAA;AAwBjG,MAAM,YAAe,GAAA,cAAA;AAQL,SAAA,oBAAA,CAAqB,YAAqB,SAAgD,EAAA;AACxG,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAI,SAAkC,MAAM,CAAA;AACpE,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAI,SAAwB,IAAI,CAAA;AACtD,EAAA,MAAM,CAAC,eAAA,EAAiB,kBAAkB,CAAA,GAAI,SAA6C,MAAS,CAAA;AACpG,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAI,SAAwB,IAAI,CAAA;AAClE,EAAM,MAAA,aAAA,GAAgB,OAAO,KAAK,CAAA;AAClC,EAAM,MAAA,YAAA,GAAe,OAAO,KAAK,CAAA;AACjC,EAAM,MAAA;AAAA,IACJ,OAAA;AAAA,IACA,SAAA;AAAA,IACA,KAAA;AAAA,IACA,aAAA;AAAA,IACA,OAAS,EAAA;AAAA,MACP,kBAAmB,EAAA;AAKvB,EAAA,MAAM,YAAY,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,SAAA;AAGnC,EAAM,MAAA,gBAAA,GAAmB,OAA2B,SAAS,CAAA;AAC7D,EAAM,MAAA,CAAC,eAAe,CAAA,GAAI,yBAA0B,EAAA;AACpD,EAAM,MAAA,CAAC,kBAAkB,CAAA,GAAI,4BAA6B,EAAA;AAC1D,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA;AAAA,IACJ,IAAM,EAAA,eAAA;AAAA,IACN,OAAS,EAAA,kBAAA;AAAA,IACT,OAAS,EAAA;AAAA,MACP,0BAA2B,CAAA;AAAA,IAC7B,MAAM,CAAC,UAAA;AAAA,IACP,WAAa,EAAA;AAAA,GACd,CAAA;AAGD,EAAM,MAAA,4BAAA,GAA+B,CAAC,GAA0B,KAAA;AAC9D,IAAA,MAAM,UAAU,GAAe,YAAA,KAAA,GAAQ,IAAI,OAAU,GAAA,MAAA,CAAO,oBAAO,EAAE,CAAA;AACrE,IAAO,OAAA,8BAAA,CAA+B,KAAK,OAAO,CAAA;AAAA,GACpD;AACA,EAAM,MAAA,iBAAA,GAAoB,YAAY,YAAoC;AAtF5E,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAuFI,IAAI,IAAA;AACF,MAAA,IAAI,OAAyB,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,eAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,eAAA,CAAiB,kBAAjB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqC,OAArC,IAA2C,GAAA,EAAA,GAAA,IAAA;AAQxE,MAAA,IAAI,CAAC,OAAS,EAAA;AACZ,QAAI,IAAA,CAAC,OAAW,IAAA,CAAC,SAAW,EAAA;AAC1B,UAAA,MAAM,gBAAgB,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AACjE,UAAA,OAAA,GAAA,CAAU,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,OAAzC,IAA+C,GAAA,EAAA,GAAA,IAAA;AACzD,UAAI,IAAA,CAAC,SAAgB,OAAA,IAAA;AAAA,SAChB,MAAA;AACL,UAAI,IAAA;AACF,YAAM,MAAA;AAAA,cACJ,IAAM,EAAA;AAAA,aACR,GAAI,MAAM,mBAAoB,CAAA;AAAA,cAC5B,SAAW,EAAA;AAAA,gBACT,KAAO,EAAA;AAAA,kBACL,IAAM,EAAA,cAAA;AAAA,kBACN,eAAiB,EAAA,OAAA;AAAA,kBACjB,aAAe,EAAA,IAAA;AAAA,kBACf,gBAAkB,EAAA,KAAA;AAAA,kBAClB,SAAS,OAAW,IAAA,SAAA;AAAA,kBACpB,WAAW,SAAa,IAAA,SAAA;AAAA,kBACxB,SAAW,EAAA;AAAA;AACb;AACF,aACD,CAAA;AACD,YAAA,OAAA,GAAA,CAAU,EAAY,GAAA,CAAA,EAAA,GAAA,UAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAA,oBAAA,KAAZ,IAAkC,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,EAAA,KAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAClD,YAAA,MAAM,kBAAmB,EAAA;AAAA,mBAClB,SAAW,EAAA;AAClB,YAAA,IAAI,CAAC,4BAAA,CAA6B,SAAS,CAAA,EAAS,MAAA,SAAA;AACpD,YAAA,MAAM,gBAAgB,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AACjE,YAAA,OAAA,GAAA,CAAU,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,OAAzC,IAA+C,GAAA,EAAA,GAAA,IAAA;AACzD,YAAA,IAAI,CAAC,OAAS,EAAA;AACZ,cAAA,OAAA,CAAQ,KAAK,yFAAyF,CAAA;AACtG,cAAO,OAAA,IAAA;AAAA;AACT;AACF;AACF;AAEF,MAAI,IAAA,CAAC,SAAgB,OAAA,IAAA;AACrB,MAAM,MAAA;AAAA,QACJ,IAAM,EAAA;AAAA,OACR,GAAI,MAAM,mBAAoB,CAAA;AAAA,QAC5B,SAAW,EAAA;AAAA,UACT,EAAI,EAAA;AAAA;AACN,OACD,CAAA;AACD,MAAA,OAAA,CAAO,yCAAY,oBAAkC,KAAA,IAAA;AAAA,aAC9C,GAAK,EAAA;AACZ,MAAQ,OAAA,CAAA,KAAA,CAAM,mDAAmD,GAAG,CAAA;AACpE,MAAO,OAAA,IAAA;AAAA;AACT,GACF,EAAG,CAAC,eAAiB,EAAA,mBAAA,EAAqB,qBAAqB,kBAAoB,EAAA,OAAA,EAAS,SAAW,EAAA,KAAK,CAAC,CAAA;AAG7G,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAY,EAAA;AAGf,MAAA,aAAA,CAAc,OAAU,GAAA,KAAA;AACxB,MAAA;AAAA;AAKF,IAAI,IAAA,oBAAA,IAAwB,CAAC,aAAe,EAAA;AAO5C,IAAA,IAAI,kBAAoB,EAAA;AAQxB,IAAA,IAAI,iBAAoB,GAAA,KAAA;AACxB,IAAI,IAAA,YAAA,CAAa,OAAW,IAAA,aAAA,CAAc,OAAS,EAAA;AACjD,MAAI,IAAA,SAAA,IAAa,gBAAiB,CAAA,OAAA,KAAY,SAAW,EAAA;AACvD,QAAA,iBAAA,GAAoB,YAAa,CAAA,OAAA;AACjC,QAAA,gBAAA,CAAiB,OAAU,GAAA,SAAA;AAC3B,QAAA,YAAA,CAAa,OAAU,GAAA,KAAA;AAAA,OAClB,MAAA;AACL,QAAA;AAAA;AACF;AAEF,IAAA,MAAM,YAAY,YAAY;AAtLlC,MAAA,IAAA,EAAA;AAuLM,MAAA,aAAA,CAAc,OAAU,GAAA,IAAA;AACxB,MAAI,IAAA,CAAC,iBAAmB,EAAA,SAAA,CAAU,YAAY,CAAA;AAC9C,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAI,IAAA;AACF,QAAM,MAAA,QAAA,GAAW,OAAO,qBAAyB,IAAA,kCAAA;AACjD,QAAM,MAAA,KAAA,GAAQ,MAAM,iBAAkB,EAAA;AACtC,QAAA,IAAI,CAAC,KAAO,EAAA;AACV,UAAA,OAAA,CAAQ,KAAK,iEAAiE,CAAA;AAAA;AAEhF,QAAM,MAAA;AAAA,UACJ;AAAA,SACF,GAAI,MAAM,eAAgB,CAAA;AAAA,UACxB,SAAW,EAAA;AAAA,YACT,KAAO,EAAA;AAAA,cACL,WAAa,EAAA,YAAA;AAAA,cACb,SAAA;AAAA,cACA,OAAS,EAAA,cAAA,CAAA,cAAA,CAAA;AAAA,gBACP,QAAA,EAAU,SAAS,IAAK;AAAA,eAAA,EACpB,KAAQ,GAAA;AAAA,gBACV;AAAA,eACF,GAAI,EAAC,CAAA,EACD,SAAY,GAAA;AAAA,gBACd,MAAQ,EAAA;AAAA,kBACN,EAAC;AAAA;AAET;AACF,SACD,CAAA;AACD,QAAA,MAAM,SAAS,IAAM,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,IAAA,CAAA,cAAA;AAGrB,QAAA,OAAA,CAAQ,IAAI,6DAA+D,EAAA,SAAA,EAAW,IAAK,CAAA,SAAA,CAAU,MAAM,CAAC,CAAA;AAC5G,QAAA,IAAI,iCAAQ,eAAiB,EAAA;AAC3B,UAAA,kBAAA,CAAmB,OAAO,eAAyC,CAAA;AAAA;AAErE,QAAA,IAAA,CAAI,MAAQ,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,KAAA,MAAU,WAAe,KAAA,MAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAQ,SAAW,CAAA,EAAA;AACtD,UAAA,SAAA,CAAU,WAAW,CAAA;AACrB,UAAA,YAAA,CAAa,OAAU,GAAA,IAAA;AAAA,SACzB,MAAA,IAAA,CAAW,MAAQ,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,KAAA,MAAU,OAAS,EAAA;AACpC,UAAA,SAAA,CAAU,OAAO,CAAA;AACjB,UAAS,QAAA,CAAA,CAAA,EAAA,GAAA,MAAA,CAAO,SAAP,KAAA,IAAA,GAAA,EAAA,GAAoB,mCAAmC,CAAA;AAChE,UAAA,YAAA,CAAa,OAAU,GAAA,KAAA;AAAA,SAClB,MAAA;AAEL,UAAA,SAAA,CAAU,WAAW,CAAA;AACrB,UAAA,YAAA,CAAa,OAAU,GAAA,IAAA;AAAA;AACzB,eACO,GAAK,EAAA;AACZ,QAAA,MAAM,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAI,CAAA,OAAA,GAAU,OAAO,GAAG,CAAA;AAC3D,QAAQ,OAAA,CAAA,KAAA,CAAM,yCAAyC,GAAG,CAAA;AAC1D,QAAA,SAAA,CAAU,OAAO,CAAA;AACjB,QAAA,QAAA,CAAS,GAAG,CAAA;AACZ,QAAA,YAAA,CAAa,OAAU,GAAA,KAAA;AAAA,OACvB,SAAA;AACA,QAAA,aAAA,CAAc,OAAU,GAAA,KAAA;AAAA;AAC1B,KACF;AACA,IAAU,SAAA,EAAA;AAAA,GACZ,EAAG,CAAC,UAAA,EAAY,iBAAmB,EAAA,eAAA,EAAiB,WAAW,oBAAsB,EAAA,aAAA,EAAe,SAAW,EAAA,kBAAkB,CAAC,CAAA;AAQlI,EAAA,MAAM,mBAAmB,WAAY,CAAA,OAAO,KAAe,EAAA,KAAA,EAAgB,cAAuB,OAAqB,KAAA;AAzPzH,IAAA,IAAA,EAAA;AA0PI,IAAQ,OAAA,CAAA,GAAA,CAAI,0GAA0G,KAAO,EAAA,OAAA,IAAA,IAAA,GAAA,OAAA,GAAW,IAAI,KAAO,EAAA,CAAA,EAAA,GAAA,YAAA,IAAA,IAAA,GAAA,MAAA,GAAA,YAAA,CAAc,MAAd,KAAA,IAAA,GAAA,EAAA,GAAwB,CAAC,CAAA;AAC5K,IAAA,SAAA,CAAU,YAAY,CAAA;AACtB,IAAA,QAAA,CAAS,IAAI,CAAA;AACb,IAAI,IAAA;AACF,MAAM,MAAA,QAAA,GAAW,OAAO,qBAAyB,IAAA,kCAAA;AACjD,MAAM,MAAA,KAAA,GAAQ,MAAM,iBAAkB,EAAA;AACtC,MAAQ,OAAA,CAAA,GAAA,CAAI,0EAA0E,KAAK,CAAA;AAC3F,MAAM,MAAA;AAAA,QACJ;AAAA,OACF,GAAI,MAAM,eAAgB,CAAA;AAAA,QACxB,SAAW,EAAA;AAAA,UACT,KAAO,EAAA;AAAA,YACL,WAAa,EAAA,YAAA;AAAA,YACb,SAAA;AAAA,YACA,OAAS,EAAA,cAAA,CAAA,cAAA,CAAA,cAAA,CAAA,cAAA,CAAA,aAAA,CAAA,cAAA,CAAA;AAAA,cACP,QAAA,EAAU,SAAS,IAAK;AAAA,aAAA,EACpB,KAAQ,GAAA;AAAA,cACV;AAAA,aACF,GAAI,EAJG,CAAA,EAAA;AAAA,cAKP;AAAA,aAAA,CAAA,EACI,OAAU,GAAA;AAAA,cACZ;AAAA,aACF,GAAI,EAAC,CAAA,EACD,KAAQ,GAAA;AAAA,cACV;AAAA,aACF,GAAI,EAAC,CAAA,EACD,YAAe,GAAA;AAAA,cACjB;AAAA,aACF,GAAI,EAAC,CAAA,EACD,SAAY,GAAA;AAAA,cACd,MAAQ,EAAA;AAAA,gBACN,EAAC;AAAA;AAET;AACF,OACD,CAAA;AACD,MAAA,OAAA,CAAQ,IAAI,iDAAmD,EAAA,IAAA,CAAK,SAAU,CAAA,IAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,IAAA,CAAM,cAAc,CAAC,CAAA;AACnG,MAAA,MAAM,SAAS,IAAM,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,IAAA,CAAA,cAAA;AAGrB,MAAA,IAAI,iCAAQ,eAAiB,EAAA;AAC3B,QAAA,kBAAA,CAAmB,OAAO,eAAyC,CAAA;AAAA;AAErE,MAAA,IAAA,CAAI,MAAQ,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,KAAA,MAAU,WAAe,KAAA,MAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAQ,SAAW,CAAA,EAAA;AACtD,QAAA,SAAA,CAAU,WAAW,CAAA;AACrB,QAAA,YAAA,CAAa,OAAU,GAAA,IAAA;AACvB,QAAA,cAAA,CAAe,KAAK,CAAA;AAAA,OACf,MAAA;AACL,QAAA,SAAA,CAAU,WAAW,CAAA;AACrB,QAAA,YAAA,CAAa,OAAU,GAAA,IAAA;AACvB,QAAA,cAAA,CAAe,KAAK,CAAA;AAAA;AACtB,aACO,GAAK,EAAA;AACZ,MAAA,MAAM,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAI,CAAA,OAAA,GAAU,OAAO,GAAG,CAAA;AAC3D,MAAQ,OAAA,CAAA,KAAA,CAAM,kDAAkD,GAAG,CAAA;AACnE,MAAA,SAAA,CAAU,OAAO,CAAA;AACjB,MAAA,QAAA,CAAS,GAAG,CAAA;AAAA;AACd,KACC,CAAC,eAAA,EAAiB,iBAAmB,EAAA,SAAA,EAAW,SAAS,CAAC,CAAA;AAC7D,EAAO,OAAA;AAAA,IACL,kBAAkB,MAAW,KAAA,WAAA;AAAA,IAC7B,MAAA;AAAA,IACA,KAAA;AAAA,IACA,eAAA;AAAA,IACA,WAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF"}
+{"version":3,"file":"useCdecliAutoConnect.js","sources":["../../src/hooks/useCdecliAutoConnect.ts"],"sourcesContent":["/**\n * Auto-connects the cdecli-serve messenger-gateway channel when the CDeCLI\n * gateway is selected from the dropdown. Obtains/creates a system token and\n * calls the `gatewayConnect` mutation so the backend provider has a live\n * session with the cdecli-agent endpoint.\n */\n\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport {\n    useGatewayConnectMutation,\n    useGatewayDisconnectMutation,\n    useGetUserSystemTokenQuery,\n    useCreateSecretApiTokenMutation,\n    useRevealSecretApiTokenMutation,\n} from 'common/graphql';\nimport { SecretApiTokenAlgorithm } from 'common';\nimport { config } from '../config/env-config';\nimport { usePrerequisiteIds } from './usePrerequisiteIds';\n\n/** Local backend ships RS256 public key but often no private key; HS256 uses dev JWT secret. */\nconst SYSTEM_TOKEN_ALGORITHM = SecretApiTokenAlgorithm.Hs256;\n\n// ─── Types ───────────────────────────────────────────────────────\n\nexport type CdecliAutoConnectStatus = 'idle' | 'connecting' | 'connected' | 'error';\n\nexport interface UseCdecliAutoConnectResult {\n    /** Whether the backend cdecli-serve channel is connected. */\n    channelConnected: boolean;\n    /** Current connection status. */\n    status: CdecliAutoConnectStatus;\n    /** Error message if status is 'error'. */\n    error: string | null;\n    /** Persistence mode reported by the backend provider ('backend' | 'frontend'). */\n    persistenceMode: 'backend' | 'frontend' | undefined;\n    /** Active skill name on the current CDeCLI session (null if none). */\n    activeSkill: string | null;\n    /** Per-user accountId used for this gateway connection. */\n    accountId: string;\n    /** Reconnect the CDeCLI session with a specific skill pre-activated. */\n    connectWithSkill: (skill: string, model?: string, systemPrompt?: string, skillId?: string) => Promise<void>;\n}\n\n// ─── Constants ───────────────────────────────────────────────────\n\nconst CHANNEL_TYPE = 'cdecli-serve';\n\n// ─── Hook ────────────────────────────────────────────────────────\n\n/**\n * When `isSelected` is true, auto-connects the cdecli-serve channel on the\n * messenger-gateway backend using the hosted endpoint and a system token.\n */\nexport function useCdecliAutoConnect(isSelected: boolean, channelId?: string): UseCdecliAutoConnectResult {\n    const [status, setStatus] = useState<CdecliAutoConnectStatus>('idle');\n    const [error, setError] = useState<string | null>(null);\n    const [persistenceMode, setPersistenceMode] = useState<'backend' | 'frontend' | undefined>(undefined);\n    const [activeSkill, setActiveSkill] = useState<string | null>(null);\n    const connectingRef = useRef(false);\n    const connectedRef = useRef(false);\n\n    const { orgName, projectId, tagId, accountUserId, loading: prerequisitesLoading } = usePrerequisiteIds();\n\n    // Per-user accountId so each user gets their own cdecli-agent session.\n    // Wait for the profile query to load before connecting — otherwise all\n    // users fall back to 'default' and share a single cdecli-agent session.\n    const accountId = accountUserId ?? 'default';\n\n    // Track the previous channelId so we can reconnect when the user opens a new chat.\n    const prevChannelIdRef = useRef<string | undefined>(channelId);\n\n    const [connectMutation] = useGatewayConnectMutation();\n    const [disconnectMutation] = useGatewayDisconnectMutation();\n    const [createTokenMutation] = useCreateSecretApiTokenMutation();\n    const [revealTokenMutation] = useRevealSecretApiTokenMutation();\n    const {\n        data: systemTokenData,\n        loading: systemTokenLoading,\n        refetch: refetchSystemToken,\n    } = useGetUserSystemTokenQuery({\n        skip: !isSelected,\n        fetchPolicy: 'network-only',\n    });\n\n    /** True when the backend rejects createSecretApiToken because the user already has one. */\n    const isAlreadyHasSystemTokenError = (err: unknown): boolean => {\n        const message = err instanceof Error ? err.message : String(err ?? '');\n        return /already have a system token/i.test(message);\n    };\n\n    const obtainSystemToken = useCallback(async (): Promise<string | null> => {\n        try {\n            let tokenId: string | null = systemTokenData?.getUserSystemToken?.id ?? null;\n\n            /**\n             * Race recovery: if the GetUserSystemToken query hasn't returned yet (or returned\n             * stale data) we'll fall through to createSecretApiToken. The backend rejects that\n             * with \"you already have a system token\" — catch it, refetch, and use the existing\n             * token id instead of falling back to an unauthenticated connection.\n             */\n            if (!tokenId) {\n                if (!orgName || !projectId) {\n                    const refetchResult = await refetchSystemToken().catch(() => null);\n                    tokenId = refetchResult?.data?.getUserSystemToken?.id ?? null;\n                    if (!tokenId) return null;\n                } else {\n                    try {\n                        const { data: createData } = await createTokenMutation({\n                            variables: {\n                                input: {\n                                    name: 'System Token',\n                                    expiryInSeconds: 31536000,\n                                    isSystemToken: true,\n                                    environmentTagId: tagId,\n                                    orgName: orgName || 'default',\n                                    projectId: projectId || 'default',\n                                    algorithm: SYSTEM_TOKEN_ALGORITHM,\n                                },\n                            },\n                        });\n                        tokenId = createData?.createSecretApiToken?.id ?? null;\n                        await refetchSystemToken();\n                    } catch (createErr) {\n                        if (!isAlreadyHasSystemTokenError(createErr)) throw createErr;\n                        const refetchResult = await refetchSystemToken().catch(() => null);\n                        tokenId = refetchResult?.data?.getUserSystemToken?.id ?? null;\n                        if (!tokenId) {\n                            console.warn(\n                                '[useCdecliAutoConnect] System token already exists but refetch returned no id; retrying',\n                            );\n                            return null;\n                        }\n                    }\n                }\n            }\n\n            if (!tokenId) return null;\n\n            const { data: revealData } = await revealTokenMutation({\n                variables: { id: tokenId },\n            });\n            return (revealData?.revealSecretApiToken as string) || null;\n        } catch (err) {\n            console.error('[useCdecliAutoConnect] obtainSystemToken error:', err);\n            return null;\n        }\n    }, [systemTokenData, createTokenMutation, revealTokenMutation, refetchSystemToken, orgName, projectId, tagId]);\n\n    // Auto-connect when CDeCLI gateway is selected\n    useEffect(() => {\n        if (!isSelected) {\n            // Reset when deselected, but don't disconnect — keep the session alive\n            // so switching back is instant.\n            connectingRef.current = false;\n            return;\n        }\n\n        // Wait until the user profile has loaded so accountId is the real\n        // user id instead of the 'default' fallback.\n        if (prerequisitesLoading || !accountUserId) return;\n\n        /**\n         * Wait for the GetUserSystemToken query to resolve before we connect — otherwise we\n         * race the network and try to create a duplicate token, which the backend rejects with\n         * \"you already have a system token\" and we fall back to an unauthenticated session.\n         */\n        if (systemTokenLoading) return;\n\n        /**\n         * If we're already connected and just switching channels, the gateway needs a reconnect\n         * (the session is bound server-side to chatId), but the user already had a working\n         * connection. Skip flipping the visible status to 'connecting' so the toolbar pill\n         * doesn't briefly show \"Checking...\" every time someone taps a history row.\n         */\n        let isSilentReconnect = false;\n        if (connectedRef.current || connectingRef.current) {\n            if (channelId && prevChannelIdRef.current !== channelId) {\n                isSilentReconnect = connectedRef.current;\n                prevChannelIdRef.current = channelId;\n                connectedRef.current = false;\n            } else {\n                return;\n            }\n        }\n\n        const doConnect = async () => {\n            connectingRef.current = true;\n            if (!isSilentReconnect) setStatus('connecting');\n            setError(null);\n\n            try {\n                const endpoint = config.CDECLI_AGENT_ENDPOINT || 'https://cdecli-agent.cdebase.dev';\n                const token = await obtainSystemToken();\n                if (!token) {\n                    console.warn('[useCdecliAutoConnect] No system token, connecting without auth');\n                }\n\n                const { data } = await connectMutation({\n                    variables: {\n                        input: {\n                            channelType: CHANNEL_TYPE,\n                            accountId,\n                            options: {\n                                endpoint: endpoint.trim(),\n                                ...(token ? { token } : {}),\n                                ...(channelId ? { chatId: channelId } : {}),\n                            },\n                        },\n                    },\n                });\n\n                const result = data?.gatewayConnect as\n                    | ((typeof data)['gatewayConnect'] & { persistenceMode?: string })\n                    | undefined;\n                console.log(\n                    '[useCdecliAutoConnect] connectMutation result (account=%s):',\n                    accountId,\n                    JSON.stringify(result),\n                );\n                if (result?.persistenceMode) {\n                    setPersistenceMode(result.persistenceMode as 'backend' | 'frontend');\n                }\n                if (result?.state === 'CONNECTED' || result?.connected) {\n                    setStatus('connected');\n                    connectedRef.current = true;\n                } else if (result?.state === 'ERROR') {\n                    setStatus('error');\n                    setError(result.lastError ?? 'Failed to connect to CDeCLI agent');\n                    connectedRef.current = false;\n                } else {\n                    // Assume connecting — the subscription will push the final state\n                    setStatus('connected');\n                    connectedRef.current = true;\n                }\n            } catch (err) {\n                const msg = err instanceof Error ? err.message : String(err);\n                console.error('[useCdecliAutoConnect] connect error:', msg);\n                setStatus('error');\n                setError(msg);\n                connectedRef.current = false;\n            } finally {\n                connectingRef.current = false;\n            }\n        };\n\n        doConnect();\n    }, [\n        isSelected,\n        obtainSystemToken,\n        connectMutation,\n        accountId,\n        prerequisitesLoading,\n        accountUserId,\n        channelId,\n        systemTokenLoading,\n    ]);\n\n    // Keep the backend session alive across page refreshes and SPA navigations.\n    // The backend CdecliServeProvider.connect() will reuse the existing session\n    // if the endpoint hasn't changed, preserving conversation context.\n    // Only disconnect when the user explicitly switches to a different gateway.\n\n    /** Reconnect the CDeCLI session with a specific skill pre-activated. */\n    const connectWithSkill = useCallback(\n        async (skill: string, model?: string, systemPrompt?: string, skillId?: string) => {\n            console.log(\n                '[useCdecliAutoConnect] connectWithSkill called with skill=%s skillId=%s model=%s systemPrompt=%d chars',\n                skill,\n                skillId ?? '',\n                model,\n                systemPrompt?.length ?? 0,\n            );\n            setStatus('connecting');\n            setError(null);\n\n            try {\n                const endpoint = config.CDECLI_AGENT_ENDPOINT || 'https://cdecli-agent.cdebase.dev';\n                const token = await obtainSystemToken();\n\n                console.log('[useCdecliAutoConnect] connectWithSkill sending mutation with skill=%s', skill);\n                const { data } = await connectMutation({\n                    variables: {\n                        input: {\n                            channelType: CHANNEL_TYPE,\n                            accountId,\n                            options: {\n                                endpoint: endpoint.trim(),\n                                ...(token ? { token } : {}),\n                                skill,\n                                ...(skillId ? { skillId } : {}),\n                                ...(model ? { model } : {}),\n                                ...(systemPrompt ? { systemPrompt } : {}),\n                                ...(channelId ? { chatId: channelId } : {}),\n                            },\n                        },\n                    },\n                });\n\n                console.log('[useCdecliAutoConnect] connectWithSkill result:', JSON.stringify(data?.gatewayConnect));\n                const result = data?.gatewayConnect as\n                    | ((typeof data)['gatewayConnect'] & { persistenceMode?: string })\n                    | undefined;\n                if (result?.persistenceMode) {\n                    setPersistenceMode(result.persistenceMode as 'backend' | 'frontend');\n                }\n                if (result?.state === 'CONNECTED' || result?.connected) {\n                    setStatus('connected');\n                    connectedRef.current = true;\n                    setActiveSkill(skill);\n                } else {\n                    setStatus('connected');\n                    connectedRef.current = true;\n                    setActiveSkill(skill);\n                }\n            } catch (err) {\n                const msg = err instanceof Error ? err.message : String(err);\n                console.error('[useCdecliAutoConnect] connectWithSkill error:', msg);\n                setStatus('error');\n                setError(msg);\n            }\n        },\n        [connectMutation, obtainSystemToken, accountId, channelId],\n    );\n\n    return {\n        channelConnected: status === 'connected',\n        status,\n        error,\n        persistenceMode,\n        activeSkill,\n        accountId,\n        connectWithSkill,\n    };\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAcA,MAAM,yBAAyB,uBAAwB,CAAA,KAAA;AAwBvD,MAAM,YAAe,GAAA,cAAA;AAQL,SAAA,oBAAA,CAAqB,YAAqB,SAAgD,EAAA;AACxG,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAI,SAAkC,MAAM,CAAA;AACpE,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAI,SAAwB,IAAI,CAAA;AACtD,EAAA,MAAM,CAAC,eAAA,EAAiB,kBAAkB,CAAA,GAAI,SAA6C,MAAS,CAAA;AACpG,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAI,SAAwB,IAAI,CAAA;AAClE,EAAM,MAAA,aAAA,GAAgB,OAAO,KAAK,CAAA;AAClC,EAAM,MAAA,YAAA,GAAe,OAAO,KAAK,CAAA;AACjC,EAAM,MAAA;AAAA,IACJ,OAAA;AAAA,IACA,SAAA;AAAA,IACA,KAAA;AAAA,IACA,aAAA;AAAA,IACA,OAAS,EAAA;AAAA,MACP,kBAAmB,EAAA;AAKvB,EAAA,MAAM,YAAY,aAAiB,IAAA,IAAA,GAAA,aAAA,GAAA,SAAA;AAGnC,EAAM,MAAA,gBAAA,GAAmB,OAA2B,SAAS,CAAA;AAC7D,EAAM,MAAA,CAAC,eAAe,CAAA,GAAI,yBAA0B,EAAA;AACpD,EAAM,MAAA,CAAC,kBAAkB,CAAA,GAAI,4BAA6B,EAAA;AAC1D,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA,CAAC,mBAAmB,CAAA,GAAI,+BAAgC,EAAA;AAC9D,EAAM,MAAA;AAAA,IACJ,IAAM,EAAA,eAAA;AAAA,IACN,OAAS,EAAA,kBAAA;AAAA,IACT,OAAS,EAAA;AAAA,MACP,0BAA2B,CAAA;AAAA,IAC7B,MAAM,CAAC,UAAA;AAAA,IACP,WAAa,EAAA;AAAA,GACd,CAAA;AAGD,EAAM,MAAA,4BAAA,GAA+B,CAAC,GAA0B,KAAA;AAC9D,IAAA,MAAM,UAAU,GAAe,YAAA,KAAA,GAAQ,IAAI,OAAU,GAAA,MAAA,CAAO,oBAAO,EAAE,CAAA;AACrE,IAAO,OAAA,8BAAA,CAA+B,KAAK,OAAO,CAAA;AAAA,GACpD;AACA,EAAM,MAAA,iBAAA,GAAoB,YAAY,YAAoC;AAtF5E,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAuFI,IAAI,IAAA;AACF,MAAA,IAAI,OAAyB,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,eAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,eAAA,CAAiB,kBAAjB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqC,OAArC,IAA2C,GAAA,EAAA,GAAA,IAAA;AAQxE,MAAA,IAAI,CAAC,OAAS,EAAA;AACZ,QAAI,IAAA,CAAC,OAAW,IAAA,CAAC,SAAW,EAAA;AAC1B,UAAA,MAAM,gBAAgB,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AACjE,UAAA,OAAA,GAAA,CAAU,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,OAAzC,IAA+C,GAAA,EAAA,GAAA,IAAA;AACzD,UAAI,IAAA,CAAC,SAAgB,OAAA,IAAA;AAAA,SAChB,MAAA;AACL,UAAI,IAAA;AACF,YAAM,MAAA;AAAA,cACJ,IAAM,EAAA;AAAA,aACR,GAAI,MAAM,mBAAoB,CAAA;AAAA,cAC5B,SAAW,EAAA;AAAA,gBACT,KAAO,EAAA;AAAA,kBACL,IAAM,EAAA,cAAA;AAAA,kBACN,eAAiB,EAAA,OAAA;AAAA,kBACjB,aAAe,EAAA,IAAA;AAAA,kBACf,gBAAkB,EAAA,KAAA;AAAA,kBAClB,SAAS,OAAW,IAAA,SAAA;AAAA,kBACpB,WAAW,SAAa,IAAA,SAAA;AAAA,kBACxB,SAAW,EAAA;AAAA;AACb;AACF,aACD,CAAA;AACD,YAAA,OAAA,GAAA,CAAU,EAAY,GAAA,CAAA,EAAA,GAAA,UAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,UAAA,CAAA,oBAAA,KAAZ,IAAkC,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,EAAA,KAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAClD,YAAA,MAAM,kBAAmB,EAAA;AAAA,mBAClB,SAAW,EAAA;AAClB,YAAA,IAAI,CAAC,4BAAA,CAA6B,SAAS,CAAA,EAAS,MAAA,SAAA;AACpD,YAAA,MAAM,gBAAgB,MAAM,kBAAA,EAAqB,CAAA,KAAA,CAAM,MAAM,IAAI,CAAA;AACjE,YAAA,OAAA,GAAA,CAAU,gEAAe,IAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAqB,kBAArB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAyC,OAAzC,IAA+C,GAAA,EAAA,GAAA,IAAA;AACzD,YAAA,IAAI,CAAC,OAAS,EAAA;AACZ,cAAA,OAAA,CAAQ,KAAK,yFAAyF,CAAA;AACtG,cAAO,OAAA,IAAA;AAAA;AACT;AACF;AACF;AAEF,MAAI,IAAA,CAAC,SAAgB,OAAA,IAAA;AACrB,MAAM,MAAA;AAAA,QACJ,IAAM,EAAA;AAAA,OACR,GAAI,MAAM,mBAAoB,CAAA;AAAA,QAC5B,SAAW,EAAA;AAAA,UACT,EAAI,EAAA;AAAA;AACN,OACD,CAAA;AACD,MAAA,OAAA,CAAO,yCAAY,oBAAkC,KAAA,IAAA;AAAA,aAC9C,GAAK,EAAA;AACZ,MAAQ,OAAA,CAAA,KAAA,CAAM,mDAAmD,GAAG,CAAA;AACpE,MAAO,OAAA,IAAA;AAAA;AACT,GACF,EAAG,CAAC,eAAiB,EAAA,mBAAA,EAAqB,qBAAqB,kBAAoB,EAAA,OAAA,EAAS,SAAW,EAAA,KAAK,CAAC,CAAA;AAG7G,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,UAAY,EAAA;AAGf,MAAA,aAAA,CAAc,OAAU,GAAA,KAAA;AACxB,MAAA;AAAA;AAKF,IAAI,IAAA,oBAAA,IAAwB,CAAC,aAAe,EAAA;AAO5C,IAAA,IAAI,kBAAoB,EAAA;AAQxB,IAAA,IAAI,iBAAoB,GAAA,KAAA;AACxB,IAAI,IAAA,YAAA,CAAa,OAAW,IAAA,aAAA,CAAc,OAAS,EAAA;AACjD,MAAI,IAAA,SAAA,IAAa,gBAAiB,CAAA,OAAA,KAAY,SAAW,EAAA;AACvD,QAAA,iBAAA,GAAoB,YAAa,CAAA,OAAA;AACjC,QAAA,gBAAA,CAAiB,OAAU,GAAA,SAAA;AAC3B,QAAA,YAAA,CAAa,OAAU,GAAA,KAAA;AAAA,OAClB,MAAA;AACL,QAAA;AAAA;AACF;AAEF,IAAA,MAAM,YAAY,YAAY;AAtLlC,MAAA,IAAA,EAAA;AAuLM,MAAA,aAAA,CAAc,OAAU,GAAA,IAAA;AACxB,MAAI,IAAA,CAAC,iBAAmB,EAAA,SAAA,CAAU,YAAY,CAAA;AAC9C,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAI,IAAA;AACF,QAAM,MAAA,QAAA,GAAW,OAAO,qBAAyB,IAAA,kCAAA;AACjD,QAAM,MAAA,KAAA,GAAQ,MAAM,iBAAkB,EAAA;AACtC,QAAA,IAAI,CAAC,KAAO,EAAA;AACV,UAAA,OAAA,CAAQ,KAAK,iEAAiE,CAAA;AAAA;AAEhF,QAAM,MAAA;AAAA,UACJ;AAAA,SACF,GAAI,MAAM,eAAgB,CAAA;AAAA,UACxB,SAAW,EAAA;AAAA,YACT,KAAO,EAAA;AAAA,cACL,WAAa,EAAA,YAAA;AAAA,cACb,SAAA;AAAA,cACA,OAAS,EAAA,cAAA,CAAA,cAAA,CAAA;AAAA,gBACP,QAAA,EAAU,SAAS,IAAK;AAAA,eAAA,EACpB,KAAQ,GAAA;AAAA,gBACV;AAAA,eACF,GAAI,EAAC,CAAA,EACD,SAAY,GAAA;AAAA,gBACd,MAAQ,EAAA;AAAA,kBACN,EAAC;AAAA;AAET;AACF,SACD,CAAA;AACD,QAAA,MAAM,SAAS,IAAM,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,IAAA,CAAA,cAAA;AAGrB,QAAA,OAAA,CAAQ,IAAI,6DAA+D,EAAA,SAAA,EAAW,IAAK,CAAA,SAAA,CAAU,MAAM,CAAC,CAAA;AAC5G,QAAA,IAAI,iCAAQ,eAAiB,EAAA;AAC3B,UAAA,kBAAA,CAAmB,OAAO,eAAyC,CAAA;AAAA;AAErE,QAAA,IAAA,CAAI,MAAQ,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,KAAA,MAAU,WAAe,KAAA,MAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAQ,SAAW,CAAA,EAAA;AACtD,UAAA,SAAA,CAAU,WAAW,CAAA;AACrB,UAAA,YAAA,CAAa,OAAU,GAAA,IAAA;AAAA,SACzB,MAAA,IAAA,CAAW,MAAQ,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,KAAA,MAAU,OAAS,EAAA;AACpC,UAAA,SAAA,CAAU,OAAO,CAAA;AACjB,UAAS,QAAA,CAAA,CAAA,EAAA,GAAA,MAAA,CAAO,SAAP,KAAA,IAAA,GAAA,EAAA,GAAoB,mCAAmC,CAAA;AAChE,UAAA,YAAA,CAAa,OAAU,GAAA,KAAA;AAAA,SAClB,MAAA;AAEL,UAAA,SAAA,CAAU,WAAW,CAAA;AACrB,UAAA,YAAA,CAAa,OAAU,GAAA,IAAA;AAAA;AACzB,eACO,GAAK,EAAA;AACZ,QAAA,MAAM,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAI,CAAA,OAAA,GAAU,OAAO,GAAG,CAAA;AAC3D,QAAQ,OAAA,CAAA,KAAA,CAAM,yCAAyC,GAAG,CAAA;AAC1D,QAAA,SAAA,CAAU,OAAO,CAAA;AACjB,QAAA,QAAA,CAAS,GAAG,CAAA;AACZ,QAAA,YAAA,CAAa,OAAU,GAAA,KAAA;AAAA,OACvB,SAAA;AACA,QAAA,aAAA,CAAc,OAAU,GAAA,KAAA;AAAA;AAC1B,KACF;AACA,IAAU,SAAA,EAAA;AAAA,GACZ,EAAG,CAAC,UAAA,EAAY,iBAAmB,EAAA,eAAA,EAAiB,WAAW,oBAAsB,EAAA,aAAA,EAAe,SAAW,EAAA,kBAAkB,CAAC,CAAA;AAQlI,EAAA,MAAM,mBAAmB,WAAY,CAAA,OAAO,KAAe,EAAA,KAAA,EAAgB,cAAuB,OAAqB,KAAA;AAzPzH,IAAA,IAAA,EAAA;AA0PI,IAAQ,OAAA,CAAA,GAAA,CAAI,0GAA0G,KAAO,EAAA,OAAA,IAAA,IAAA,GAAA,OAAA,GAAW,IAAI,KAAO,EAAA,CAAA,EAAA,GAAA,YAAA,IAAA,IAAA,GAAA,MAAA,GAAA,YAAA,CAAc,MAAd,KAAA,IAAA,GAAA,EAAA,GAAwB,CAAC,CAAA;AAC5K,IAAA,SAAA,CAAU,YAAY,CAAA;AACtB,IAAA,QAAA,CAAS,IAAI,CAAA;AACb,IAAI,IAAA;AACF,MAAM,MAAA,QAAA,GAAW,OAAO,qBAAyB,IAAA,kCAAA;AACjD,MAAM,MAAA,KAAA,GAAQ,MAAM,iBAAkB,EAAA;AACtC,MAAQ,OAAA,CAAA,GAAA,CAAI,0EAA0E,KAAK,CAAA;AAC3F,MAAM,MAAA;AAAA,QACJ;AAAA,OACF,GAAI,MAAM,eAAgB,CAAA;AAAA,QACxB,SAAW,EAAA;AAAA,UACT,KAAO,EAAA;AAAA,YACL,WAAa,EAAA,YAAA;AAAA,YACb,SAAA;AAAA,YACA,OAAS,EAAA,cAAA,CAAA,cAAA,CAAA,cAAA,CAAA,cAAA,CAAA,aAAA,CAAA,cAAA,CAAA;AAAA,cACP,QAAA,EAAU,SAAS,IAAK;AAAA,aAAA,EACpB,KAAQ,GAAA;AAAA,cACV;AAAA,aACF,GAAI,EAJG,CAAA,EAAA;AAAA,cAKP;AAAA,aAAA,CAAA,EACI,OAAU,GAAA;AAAA,cACZ;AAAA,aACF,GAAI,EAAC,CAAA,EACD,KAAQ,GAAA;AAAA,cACV;AAAA,aACF,GAAI,EAAC,CAAA,EACD,YAAe,GAAA;AAAA,cACjB;AAAA,aACF,GAAI,EAAC,CAAA,EACD,SAAY,GAAA;AAAA,cACd,MAAQ,EAAA;AAAA,gBACN,EAAC;AAAA;AAET;AACF,OACD,CAAA;AACD,MAAA,OAAA,CAAQ,IAAI,iDAAmD,EAAA,IAAA,CAAK,SAAU,CAAA,IAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,IAAA,CAAM,cAAc,CAAC,CAAA;AACnG,MAAA,MAAM,SAAS,IAAM,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,IAAA,CAAA,cAAA;AAGrB,MAAA,IAAI,iCAAQ,eAAiB,EAAA;AAC3B,QAAA,kBAAA,CAAmB,OAAO,eAAyC,CAAA;AAAA;AAErE,MAAA,IAAA,CAAI,MAAQ,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAA,KAAA,MAAU,WAAe,KAAA,MAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAQ,SAAW,CAAA,EAAA;AACtD,QAAA,SAAA,CAAU,WAAW,CAAA;AACrB,QAAA,YAAA,CAAa,OAAU,GAAA,IAAA;AACvB,QAAA,cAAA,CAAe,KAAK,CAAA;AAAA,OACf,MAAA;AACL,QAAA,SAAA,CAAU,WAAW,CAAA;AACrB,QAAA,YAAA,CAAa,OAAU,GAAA,IAAA;AACvB,QAAA,cAAA,CAAe,KAAK,CAAA;AAAA;AACtB,aACO,GAAK,EAAA;AACZ,MAAA,MAAM,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAI,CAAA,OAAA,GAAU,OAAO,GAAG,CAAA;AAC3D,MAAQ,OAAA,CAAA,KAAA,CAAM,kDAAkD,GAAG,CAAA;AACnE,MAAA,SAAA,CAAU,OAAO,CAAA;AACjB,MAAA,QAAA,CAAS,GAAG,CAAA;AAAA;AACd,KACC,CAAC,eAAA,EAAiB,iBAAmB,EAAA,SAAA,EAAW,SAAS,CAAC,CAAA;AAC7D,EAAO,OAAA;AAAA,IACL,kBAAkB,MAAW,KAAA,WAAA;AAAA,IAC7B,MAAA;AAAA,IACA,KAAA;AAAA,IACA,eAAA;AAAA,IACA,WAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF"}

package/lib/hooks/useObtainSystemToken.js

@@ -1,4 +1,4 @@
-import {useCallback}from'react';import {useCreateSecretApiTokenMutation,useRevealSecretApiTokenMutation,useGetUserSystemTokenQuery}from'common/graphql';import {SecretApiTokenAlgorithm}from'common';import {usePrerequisiteIds}from'./usePrerequisiteIds.js';const SYSTEM_TOKEN_ALGORITHM = __DEV__ ? SecretApiTokenAlgorithm.Hs256 : SecretApiTokenAlgorithm.Rs256;
+import {useCallback}from'react';import {useCreateSecretApiTokenMutation,useRevealSecretApiTokenMutation,useGetUserSystemTokenQuery}from'common/graphql';import {SecretApiTokenAlgorithm}from'common';import {usePrerequisiteIds}from'./usePrerequisiteIds.js';const SYSTEM_TOKEN_ALGORITHM = SecretApiTokenAlgorithm.Hs256;
 function isAlreadyHasSystemTokenError(err) {
   const message = err instanceof Error ? err.message : String(err != null ? err : "");
   return /already have a system token/i.test(message);
@@ -20,39 +20,47 @@ function useObtainSystemToken(enabled = true) {
     fetchPolicy: "network-only"
   });
   const obtainSystemToken = useCallback(async () => {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m;
     try {
       let tokenId = (_b = (_a = systemTokenData == null ? void 0 : systemTokenData.getUserSystemToken) == null ? void 0 : _a.id) != null ? _b : null;
       if (!tokenId) {
-        if (!orgName || !projectId) {
-          const refetchResult = await refetchSystemToken().catch(() => null);
-          tokenId = (_e = (_d = (_c = refetchResult == null ? void 0 : refetchResult.data) == null ? void 0 : _c.getUserSystemToken) == null ? void 0 : _d.id) != null ? _e : null;
-          if (!tokenId) return null;
-        } else {
-          try {
-            const {
-              data: createData
-            } = await createTokenMutation({
-              variables: {
-                input: {
-                  name: "System Token",
-                  expiryInSeconds: 31536e3,
-                  isSystemToken: true,
-                  environmentTagId: tagId,
-                  orgName: orgName || "default",
-                  projectId: projectId || "default",
-                  algorithm: SYSTEM_TOKEN_ALGORITHM
-                }
+        const refetchResult = await refetchSystemToken().catch(() => null);
+        tokenId = (_e = (_d = (_c = refetchResult == null ? void 0 : refetchResult.data) == null ? void 0 : _c.getUserSystemToken) == null ? void 0 : _d.id) != null ? _e : null;
+      }
+      if (!tokenId) {
+        if (!orgName || !projectId || !tagId) {
+          return null;
+        }
+        if (!__DEV__ && projectId === "9a8ac704-1040-4836-9b72-48b771ca91b1") {
+          console.warn("[useObtainSystemToken] refusing staging mint with testing project UUID");
+          return null;
+        }
+        try {
+          const {
+            data: createData
+          } = await createTokenMutation({
+            variables: {
+              input: {
+                name: "System Token",
+                expiryInSeconds: 31536e3,
+                isSystemToken: true,
+                environmentTagId: tagId,
+                orgName,
+                projectId,
+                algorithm: SYSTEM_TOKEN_ALGORITHM
               }
-            });
-            tokenId = (_g = (_f = createData == null ? void 0 : createData.createSecretApiToken) == null ? void 0 : _f.id) != null ? _g : null;
-            await refetchSystemToken();
-          } catch (createErr) {
-            if (!isAlreadyHasSystemTokenError(createErr)) throw createErr;
-            const refetchResult = await refetchSystemToken().catch(() => null);
-            tokenId = (_j = (_i = (_h = refetchResult == null ? void 0 : refetchResult.data) == null ? void 0 : _h.getUserSystemToken) == null ? void 0 : _i.id) != null ? _j : null;
-            if (!tokenId) return null;
+            }
+          });
+          tokenId = (_g = (_f = createData == null ? void 0 : createData.createSecretApiToken) == null ? void 0 : _f.id) != null ? _g : null;
+          if (!tokenId) {
+            const afterCreate = await refetchSystemToken().catch(() => null);
+            tokenId = (_j = (_i = (_h = afterCreate == null ? void 0 : afterCreate.data) == null ? void 0 : _h.getUserSystemToken) == null ? void 0 : _i.id) != null ? _j : null;
           }
+        } catch (createErr) {
+          if (!isAlreadyHasSystemTokenError(createErr)) throw createErr;
+          const refetchResult = await refetchSystemToken().catch(() => null);
+          tokenId = (_m = (_l = (_k = refetchResult == null ? void 0 : refetchResult.data) == null ? void 0 : _k.getUserSystemToken) == null ? void 0 : _l.id) != null ? _m : null;
+          if (!tokenId) return null;
         }
       }
       if (!tokenId) return null;