@adminide-stack/yantra-mobile 12.0.44-alpha.7 → 12.0.45

package/lib/features/chat/ChatTranscript.js

@@ -0,0 +1,202 @@
+import {jsx,jsxs}from'react/jsx-runtime';import {useRef,useMemo,useCallback,useEffect,memo}from'react';import {FlatList,StyleSheet,View,Text}from'react-native';import Markdown from'react-native-markdown-display';import {shouldRenderUserTranscriptTurn,displayUserMessageText}from'../attachments/displayUserMessageText.js';import {MessageAttachmentPreviews}from'../attachments/MessageAttachmentPreviews.js';var __defProp = Object.defineProperty;
+var __defProps = Object.defineProperties;
+var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
+var __getOwnPropSymbols = Object.getOwnPropertySymbols;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __propIsEnum = Object.prototype.propertyIsEnumerable;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __spreadValues = (a, b) => {
+  for (var prop in b || (b = {}))
+    if (__hasOwnProp.call(b, prop))
+      __defNormalProp(a, prop, b[prop]);
+  if (__getOwnPropSymbols)
+    for (var prop of __getOwnPropSymbols(b)) {
+      if (__propIsEnum.call(b, prop))
+        __defNormalProp(a, prop, b[prop]);
+    }
+  return a;
+};
+var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+const USER_BUBBLE_BG = "#2563eb";
+function ChatTranscript({
+  messages,
+  streamingContent,
+  renderMessageActions,
+  listContentStyle,
+  isDark = false,
+  keyboardVisible = false
+}) {
+  const listRef = useRef(null);
+  const stickToBottomRef = useRef(true);
+  const isProgrammaticScrollRef = useRef(false);
+  const historyRows = useMemo(() => messages.filter((msg) => msg.role !== "user" || shouldRenderUserTranscriptTurn(msg.content, msg.attachments)).map((msg) => __spreadProps(__spreadValues({}, msg), {
+    streaming: false
+  })), [messages]);
+  const rows = useMemo(() => {
+    const stream = streamingContent == null ? void 0 : streamingContent.trim();
+    if (!stream) return historyRows;
+    return [...historyRows, {
+      id: "__streaming__",
+      role: "assistant",
+      content: stream,
+      streaming: true
+    }];
+  }, [historyRows, streamingContent]);
+  const invertedRows = useMemo(() => [...rows].reverse(), [rows]);
+  const scrollToLatest = useCallback((animated) => {
+    var _a;
+    isProgrammaticScrollRef.current = true;
+    (_a = listRef.current) == null ? void 0 : _a.scrollToOffset({
+      offset: 0,
+      animated
+    });
+  }, []);
+  useEffect(() => {
+    if (invertedRows.length === 0 || !stickToBottomRef.current) return void 0;
+    const t = setTimeout(() => scrollToLatest(false), 0);
+    return () => clearTimeout(t);
+  }, [invertedRows.length, streamingContent == null ? void 0 : streamingContent.length, scrollToLatest]);
+  useEffect(() => {
+    if (!stickToBottomRef.current) return;
+    scrollToLatest(false);
+  }, [keyboardVisible, scrollToLatest]);
+  const handleScroll = useCallback((e) => {
+    const {
+      contentOffset
+    } = e.nativeEvent;
+    const nearLatest = contentOffset.y <= 80;
+    if (!isProgrammaticScrollRef.current) {
+      stickToBottomRef.current = nearLatest;
+    } else if (nearLatest) {
+      isProgrammaticScrollRef.current = false;
+    }
+  }, []);
+  const handleContentSizeChange = useCallback(() => {
+    if (!stickToBottomRef.current) return;
+    scrollToLatest(false);
+  }, [scrollToLatest]);
+  const renderItem = useCallback(({
+    item
+  }) => /* @__PURE__ */ jsx(TranscriptRowView, { item, isDark, renderMessageActions: item.streaming ? void 0 : renderMessageActions }), [isDark, renderMessageActions]);
+  return /* @__PURE__ */ jsx(FlatList, { ref: listRef, data: invertedRows, inverted: true, keyExtractor: (item) => item.id, renderItem, extraData: `${isDark}:${streamingContent != null ? streamingContent : ""}`, onScroll: handleScroll, onContentSizeChange: handleContentSizeChange, onLayout: () => {
+    if (stickToBottomRef.current) scrollToLatest(false);
+  }, scrollEventThrottle: 16, keyboardShouldPersistTaps: "always", keyboardDismissMode: "none", automaticallyAdjustKeyboardInsets: false, automaticallyAdjustContentInsets: false, contentInsetAdjustmentBehavior: "never", contentContainerStyle: [styles.listContent, listContentStyle], style: styles.list });
+}
+const TranscriptRowView = memo(function TranscriptRowView2({
+  item,
+  isDark,
+  renderMessageActions
+}) {
+  var _a;
+  const isUser = item.role === "user";
+  const attachments = (_a = item.attachments) != null ? _a : [];
+  const text = isUser ? displayUserMessageText(item.content) : item.content;
+  if (isUser) {
+    return /* @__PURE__ */ jsxs(View, { style: styles.userCol, children: [
+      attachments.length > 0 ? /* @__PURE__ */ jsx(MessageAttachmentPreviews, { attachments, align: "end", isDark }) : null,
+      text ? /* @__PURE__ */ jsx(View, { style: styles.userBubble, children: /* @__PURE__ */ jsx(Text, { style: styles.userText, children: text }) }) : null
+    ] });
+  }
+  const markdownColor = isDark ? "#e2e8f0" : "#111827";
+  const codeBg = isDark ? "#1e293b" : "#f3f4f6";
+  return /* @__PURE__ */ jsxs(View, { style: styles.assistantCol, children: [
+    attachments.length > 0 ? /* @__PURE__ */ jsx(MessageAttachmentPreviews, { attachments, align: "start", isDark }) : null,
+    text ? /* @__PURE__ */ jsx(Markdown, { style: {
+      body: {
+        color: markdownColor,
+        fontSize: 15,
+        lineHeight: 22
+      },
+      heading1: {
+        fontSize: 18,
+        fontWeight: "700",
+        marginTop: 12,
+        marginBottom: 4,
+        color: markdownColor
+      },
+      heading2: {
+        fontSize: 16,
+        fontWeight: "700",
+        marginTop: 10,
+        marginBottom: 4,
+        color: markdownColor
+      },
+      heading3: {
+        fontSize: 15,
+        fontWeight: "600",
+        marginTop: 8,
+        marginBottom: 4,
+        color: markdownColor
+      },
+      strong: {
+        fontWeight: "700"
+      },
+      paragraph: {
+        marginTop: 4,
+        marginBottom: 4
+      },
+      list_item: {
+        marginVertical: 2
+      },
+      bullet_list: {
+        marginVertical: 4
+      },
+      ordered_list: {
+        marginVertical: 4
+      },
+      code_inline: {
+        backgroundColor: codeBg,
+        paddingHorizontal: 4,
+        borderRadius: 4,
+        fontSize: 14,
+        color: markdownColor
+      },
+      code_block: {
+        backgroundColor: codeBg,
+        padding: 12,
+        borderRadius: 8,
+        marginVertical: 8,
+        fontSize: 14,
+        color: markdownColor
+      }
+    }, children: text }) : null,
+    renderMessageActions ? renderMessageActions({
+      id: item.id,
+      role: "assistant",
+      content: item.content
+    }) : null
+  ] });
+});
+const styles = StyleSheet.create({
+  list: {
+    flex: 1
+  },
+  listContent: {
+    paddingTop: 8,
+    paddingBottom: 8,
+    paddingHorizontal: 8
+  },
+  userCol: {
+    width: "100%",
+    alignItems: "flex-end",
+    marginBottom: 8,
+    paddingHorizontal: 4
+  },
+  userBubble: {
+    backgroundColor: USER_BUBBLE_BG,
+    borderRadius: 16,
+    padding: 12,
+    maxWidth: "92%"
+  },
+  userText: {
+    color: "#ffffff",
+    fontSize: 15,
+    lineHeight: 22
+  },
+  assistantCol: {
+    width: "100%",
+    alignItems: "flex-start",
+    marginBottom: 8,
+    paddingHorizontal: 4
+  }
+});export{ChatTranscript};//# sourceMappingURL=ChatTranscript.js.map

package/lib/features/chat/ChatTranscript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChatTranscript.js","sources":["../../../src/features/chat/ChatTranscript.tsx"],"sourcesContent":["/**\n * Chat thread list that can show attachment previews.\n *\n * `@messenger-box/platform-mobile` PlanModeView maps each row to GiftedChat\n * `{ text }` only, so an image send becomes the gateway caption\n * \"Attached: IMG_0005.jpg\" with no thumbnail. This list keeps streaming\n * markdown for the assistant and draws Manus-style previews on the user side.\n */\nimport React, { memo, useCallback, useEffect, useMemo, useRef } from 'react';\nimport { FlatList, StyleSheet, Text, View, type StyleProp, type ViewStyle } from 'react-native';\nimport Markdown from 'react-native-markdown-display';\nimport type { MessageAttachment } from '../../hooks/useChatStream';\nimport { displayUserMessageText, shouldRenderUserTranscriptTurn } from '../attachments/displayUserMessageText';\nimport { MessageAttachmentPreviews } from '../attachments/MessageAttachmentPreviews';\n\nexport type TranscriptMessage = {\n    id: string;\n    role: string;\n    content: string;\n    attachments?: MessageAttachment[];\n};\n\ntype TranscriptRow = TranscriptMessage & { streaming?: boolean };\n\nconst USER_BUBBLE_BG = '#2563eb';\n\nexport function ChatTranscript({\n    messages,\n    streamingContent,\n    renderMessageActions,\n    listContentStyle,\n    isDark = false,\n    keyboardVisible = false,\n}: {\n    messages: TranscriptMessage[];\n    streamingContent?: string;\n    renderMessageActions?: (message: { id: string; role: string; content: string }) => React.ReactNode;\n    listContentStyle?: StyleProp<ViewStyle>;\n    isDark?: boolean;\n    keyboardVisible?: boolean;\n}) {\n    const listRef = useRef<FlatList<TranscriptRow>>(null);\n    const stickToBottomRef = useRef(true);\n    const isProgrammaticScrollRef = useRef(false);\n\n    const historyRows = useMemo<TranscriptRow[]>(\n        () =>\n            messages\n                .filter((msg) => msg.role !== 'user' || shouldRenderUserTranscriptTurn(msg.content, msg.attachments))\n                .map((msg) => ({ ...msg, streaming: false })),\n        [messages],\n    );\n\n    const rows = useMemo<TranscriptRow[]>(() => {\n        const stream = streamingContent?.trim();\n        if (!stream) return historyRows;\n        return [\n            ...historyRows,\n            {\n                id: '__streaming__',\n                role: 'assistant',\n                content: stream,\n                streaming: true,\n            },\n        ];\n    }, [historyRows, streamingContent]);\n\n    /**\n     * Newest-first so `inverted` pins the latest turn to the composer. An\n     * uninverted list with `flexGrow` + `justifyContent: 'flex-end'` eats the\n     * viewport when the keyboard opens and stops the list from scrolling.\n     */\n    const invertedRows = useMemo(() => [...rows].reverse(), [rows]);\n\n    const scrollToLatest = useCallback((animated: boolean) => {\n        isProgrammaticScrollRef.current = true;\n        listRef.current?.scrollToOffset({ offset: 0, animated });\n    }, []);\n\n    useEffect(() => {\n        if (invertedRows.length === 0 || !stickToBottomRef.current) return undefined;\n        const t = setTimeout(() => scrollToLatest(false), 0);\n        return () => clearTimeout(t);\n    }, [invertedRows.length, streamingContent?.length, scrollToLatest]);\n\n    useEffect(() => {\n        if (!stickToBottomRef.current) return;\n        scrollToLatest(false);\n    }, [keyboardVisible, scrollToLatest]);\n\n    const handleScroll = useCallback(\n        (e: {\n            nativeEvent: {\n                contentOffset: { y: number };\n                contentSize: { height: number };\n                layoutMeasurement: { height: number };\n            };\n        }) => {\n            const { contentOffset } = e.nativeEvent;\n            const nearLatest = contentOffset.y <= 80;\n            if (!isProgrammaticScrollRef.current) {\n                stickToBottomRef.current = nearLatest;\n            } else if (nearLatest) {\n                isProgrammaticScrollRef.current = false;\n            }\n        },\n        [],\n    );\n\n    const handleContentSizeChange = useCallback(() => {\n        if (!stickToBottomRef.current) return;\n        scrollToLatest(false);\n    }, [scrollToLatest]);\n\n    const renderItem = useCallback(\n        ({ item }: { item: TranscriptRow }) => (\n            <TranscriptRowView\n                item={item}\n                isDark={isDark}\n                renderMessageActions={item.streaming ? undefined : renderMessageActions}\n            />\n        ),\n        [isDark, renderMessageActions],\n    );\n\n    return (\n        <FlatList\n            ref={listRef}\n            data={invertedRows}\n            inverted\n            keyExtractor={(item) => item.id}\n            renderItem={renderItem}\n            extraData={`${isDark}:${streamingContent ?? ''}`}\n            onScroll={handleScroll}\n            onContentSizeChange={handleContentSizeChange}\n            onLayout={() => {\n                if (stickToBottomRef.current) scrollToLatest(false);\n            }}\n            scrollEventThrottle={16}\n            keyboardShouldPersistTaps=\"always\"\n            keyboardDismissMode=\"none\"\n            automaticallyAdjustKeyboardInsets={false}\n            automaticallyAdjustContentInsets={false}\n            contentInsetAdjustmentBehavior=\"never\"\n            contentContainerStyle={[styles.listContent, listContentStyle]}\n            style={styles.list}\n        />\n    );\n}\n\nconst TranscriptRowView = memo(function TranscriptRowView({\n    item,\n    isDark,\n    renderMessageActions,\n}: {\n    item: TranscriptRow;\n    isDark: boolean;\n    renderMessageActions?: (message: { id: string; role: string; content: string }) => React.ReactNode;\n}) {\n    const isUser = item.role === 'user';\n    const attachments = item.attachments ?? [];\n    const text = isUser ? displayUserMessageText(item.content, attachments) : item.content;\n\n    if (isUser) {\n        return (\n            <View style={styles.userCol}>\n                {attachments.length > 0 ? (\n                    <MessageAttachmentPreviews attachments={attachments} align=\"end\" isDark={isDark} />\n                ) : null}\n                {text ? (\n                    <View style={styles.userBubble}>\n                        <Text style={styles.userText}>{text}</Text>\n                    </View>\n                ) : null}\n            </View>\n        );\n    }\n\n    const markdownColor = isDark ? '#e2e8f0' : '#111827';\n    const codeBg = isDark ? '#1e293b' : '#f3f4f6';\n\n    return (\n        <View style={styles.assistantCol}>\n            {attachments.length > 0 ? (\n                <MessageAttachmentPreviews attachments={attachments} align=\"start\" isDark={isDark} />\n            ) : null}\n            {text ? (\n                <Markdown\n                    style={{\n                        body: { color: markdownColor, fontSize: 15, lineHeight: 22 },\n                        heading1: {\n                            fontSize: 18,\n                            fontWeight: '700',\n                            marginTop: 12,\n                            marginBottom: 4,\n                            color: markdownColor,\n                        },\n                        heading2: {\n                            fontSize: 16,\n                            fontWeight: '700',\n                            marginTop: 10,\n                            marginBottom: 4,\n                            color: markdownColor,\n                        },\n                        heading3: {\n                            fontSize: 15,\n                            fontWeight: '600',\n                            marginTop: 8,\n                            marginBottom: 4,\n                            color: markdownColor,\n                        },\n                        strong: { fontWeight: '700' },\n                        paragraph: { marginTop: 4, marginBottom: 4 },\n                        list_item: { marginVertical: 2 },\n                        bullet_list: { marginVertical: 4 },\n                        ordered_list: { marginVertical: 4 },\n                        code_inline: {\n                            backgroundColor: codeBg,\n                            paddingHorizontal: 4,\n                            borderRadius: 4,\n                            fontSize: 14,\n                            color: markdownColor,\n                        },\n                        code_block: {\n                            backgroundColor: codeBg,\n                            padding: 12,\n                            borderRadius: 8,\n                            marginVertical: 8,\n                            fontSize: 14,\n                            color: markdownColor,\n                        },\n                    }}\n                >\n                    {text}\n                </Markdown>\n            ) : null}\n            {renderMessageActions\n                ? renderMessageActions({ id: item.id, role: 'assistant', content: item.content })\n                : null}\n        </View>\n    );\n});\n\nconst styles = StyleSheet.create({\n    list: {\n        flex: 1,\n    },\n    listContent: {\n        paddingTop: 8,\n        paddingBottom: 8,\n        paddingHorizontal: 8,\n    },\n    userCol: {\n        width: '100%',\n        alignItems: 'flex-end',\n        marginBottom: 8,\n        paddingHorizontal: 4,\n    },\n    userBubble: {\n        backgroundColor: USER_BUBBLE_BG,\n        borderRadius: 16,\n        padding: 12,\n        maxWidth: '92%',\n    },\n    userText: {\n        color: '#ffffff',\n        fontSize: 15,\n        lineHeight: 22,\n    },\n    assistantCol: {\n        width: '100%',\n        alignItems: 'flex-start',\n        marginBottom: 8,\n        paddingHorizontal: 4,\n    },\n});\n"],"names":["TranscriptRowView"],"mappings":";;;;;;;;;;;;;;;;;;;AAuBA,MAAM,cAAiB,GAAA,SAAA;AAChB,SAAS,cAAe,CAAA;AAAA,EAC7B,QAAA;AAAA,EACA,gBAAA;AAAA,EACA,oBAAA;AAAA,EACA,gBAAA;AAAA,EACA,MAAS,GAAA,KAAA;AAAA,EACT,eAAkB,GAAA;AACpB,CAWG,EAAA;AACD,EAAM,MAAA,OAAA,GAAU,OAAgC,IAAI,CAAA;AACpD,EAAM,MAAA,gBAAA,GAAmB,OAAO,IAAI,CAAA;AACpC,EAAM,MAAA,uBAAA,GAA0B,OAAO,KAAK,CAAA;AAC5C,EAAA,MAAM,cAAc,OAAyB,CAAA,MAAM,SAAS,MAAO,CAAA,CAAA,GAAA,KAAO,IAAI,IAAS,KAAA,MAAA,IAAU,+BAA+B,GAAI,CAAA,OAAA,EAAS,IAAI,WAAW,CAAC,EAAE,GAAI,CAAA,CAAA,GAAA,KAAQ,iCACtK,GADsK,CAAA,EAAA;AAAA,IAEzK,SAAW,EAAA;AAAA,GACX,CAAA,CAAA,EAAG,CAAC,QAAQ,CAAC,CAAA;AACf,EAAM,MAAA,IAAA,GAAO,QAAyB,MAAM;AAC1C,IAAA,MAAM,SAAS,gBAAkB,IAAA,IAAA,GAAA,MAAA,GAAA,gBAAA,CAAA,IAAA,EAAA;AACjC,IAAI,IAAA,CAAC,QAAe,OAAA,WAAA;AACpB,IAAO,OAAA,CAAC,GAAG,WAAa,EAAA;AAAA,MACtB,EAAI,EAAA,eAAA;AAAA,MACJ,IAAM,EAAA,WAAA;AAAA,MACN,OAAS,EAAA,MAAA;AAAA,MACT,SAAW,EAAA;AAAA,KACZ,CAAA;AAAA,GACA,EAAA,CAAC,WAAa,EAAA,gBAAgB,CAAC,CAAA;AAOlC,EAAM,MAAA,YAAA,GAAe,OAAQ,CAAA,MAAM,CAAC,GAAG,IAAI,CAAA,CAAE,OAAQ,EAAA,EAAG,CAAC,IAAI,CAAC,CAAA;AAC9D,EAAM,MAAA,cAAA,GAAiB,WAAY,CAAA,CAAC,QAAsB,KAAA;AAnE5D,IAAA,IAAA,EAAA;AAoEI,IAAA,uBAAA,CAAwB,OAAU,GAAA,IAAA;AAClC,IAAQ,CAAA,EAAA,GAAA,OAAA,CAAA,OAAA,KAAR,mBAAiB,cAAe,CAAA;AAAA,MAC9B,MAAQ,EAAA,CAAA;AAAA,MACR;AAAA,KACF,CAAA;AAAA,GACF,EAAG,EAAE,CAAA;AACL,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,aAAa,MAAW,KAAA,CAAA,IAAK,CAAC,gBAAA,CAAiB,SAAgB,OAAA,MAAA;AACnE,IAAA,MAAM,IAAI,UAAW,CAAA,MAAM,cAAe,CAAA,KAAK,GAAG,CAAC,CAAA;AACnD,IAAO,OAAA,MAAM,aAAa,CAAC,CAAA;AAAA,KAC1B,CAAC,YAAA,CAAa,QAAQ,gBAAkB,IAAA,IAAA,GAAA,MAAA,GAAA,gBAAA,CAAA,MAAA,EAAQ,cAAc,CAAC,CAAA;AAClE,EAAA,SAAA,CAAU,MAAM;AACd,IAAI,IAAA,CAAC,iBAAiB,OAAS,EAAA;AAC/B,IAAA,cAAA,CAAe,KAAK,CAAA;AAAA,GACnB,EAAA,CAAC,eAAiB,EAAA,cAAc,CAAC,CAAA;AACpC,EAAM,MAAA,YAAA,GAAe,WAAY,CAAA,CAAC,CAY5B,KAAA;AACJ,IAAM,MAAA;AAAA,MACJ;AAAA,QACE,CAAE,CAAA,WAAA;AACN,IAAM,MAAA,UAAA,GAAa,cAAc,CAAK,IAAA,EAAA;AACtC,IAAI,IAAA,CAAC,wBAAwB,OAAS,EAAA;AACpC,MAAA,gBAAA,CAAiB,OAAU,GAAA,UAAA;AAAA,eAClB,UAAY,EAAA;AACrB,MAAA,uBAAA,CAAwB,OAAU,GAAA,KAAA;AAAA;AACpC,GACF,EAAG,EAAE,CAAA;AACL,EAAM,MAAA,uBAAA,GAA0B,YAAY,MAAM;AAChD,IAAI,IAAA,CAAC,iBAAiB,OAAS,EAAA;AAC/B,IAAA,cAAA,CAAe,KAAK,CAAA;AAAA,GACtB,EAAG,CAAC,cAAc,CAAC,CAAA;AACnB,EAAM,MAAA,UAAA,GAAa,YAAY,CAAC;AAAA,IAC9B;AAAA,GAGI,qBAAA,GAAA,CAAC,iBAAkB,EAAA,EAAA,IAAA,EAAY,QAAgB,oBAAsB,EAAA,IAAA,CAAK,SAAY,GAAA,MAAA,GAAY,oBAAsB,EAAA,CAAA,EAAI,CAAC,MAAA,EAAQ,oBAAoB,CAAC,CAAA;AAChK,EAAO,uBAAA,GAAA,CAAC,QAAS,EAAA,EAAA,GAAA,EAAK,OAAS,EAAA,IAAA,EAAM,cAAc,QAAQ,EAAA,IAAA,EAAC,YAAc,EAAA,CAAA,IAAA,KAAQ,IAAK,CAAA,EAAA,EAAI,YAAwB,SAAW,EAAA,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,gBAAoB,IAAA,IAAA,GAAA,gBAAA,GAAA,EAAE,CAAI,CAAA,EAAA,QAAA,EAAU,YAAc,EAAA,mBAAA,EAAqB,uBAAyB,EAAA,QAAA,EAAU,MAAM;AACzP,IAAI,IAAA,gBAAA,CAAiB,OAAS,EAAA,cAAA,CAAe,KAAK,CAAA;AAAA,GACpD,EAAG,qBAAqB,EAAI,EAAA,yBAAA,EAA0B,UAAS,mBAAoB,EAAA,MAAA,EAAO,mCAAmC,KAAO,EAAA,gCAAA,EAAkC,OAAO,8BAA+B,EAAA,OAAA,EAAQ,uBAAuB,CAAC,MAAA,CAAO,aAAa,gBAAgB,CAAA,EAAG,KAAO,EAAA,MAAA,CAAO,IAAM,EAAA,CAAA;AACzS;AACA,MAAM,iBAAA,GAAoB,IAAK,CAAA,SAASA,kBAAkB,CAAA;AAAA,EACxD,IAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAQG,EAAA;AAnIH,EAAA,IAAA,EAAA;AAoIE,EAAM,MAAA,MAAA,GAAS,KAAK,IAAS,KAAA,MAAA;AAC7B,EAAA,MAAM,WAAc,GAAA,CAAA,EAAA,GAAA,IAAA,CAAK,WAAL,KAAA,IAAA,GAAA,EAAA,GAAoB,EAAC;AACzC,EAAA,MAAM,OAAO,MAAS,GAAA,sBAAA,CAAuB,KAAK,OAAoB,IAAI,IAAK,CAAA,OAAA;AAC/E,EAAA,IAAI,MAAQ,EAAA;AACV,IAAA,uBAAQ,IAAA,CAAA,IAAA,EAAA,EAAK,KAAO,EAAA,MAAA,CAAO,OACd,EAAA,QAAA,EAAA;AAAA,MAAY,WAAA,CAAA,MAAA,GAAS,oBAAK,GAAA,CAAA,yBAAA,EAAA,EAA0B,aAA0B,KAAM,EAAA,KAAA,EAAM,QAAgB,CAAK,GAAA,IAAA;AAAA,MAC/G,IAAO,mBAAA,GAAA,CAAC,IAAK,EAAA,EAAA,KAAA,EAAO,MAAO,CAAA,UAAA,EACpB,QAAC,kBAAA,GAAA,CAAA,IAAA,EAAA,EAAK,KAAO,EAAA,MAAA,CAAO,QAAW,EAAA,QAAA,EAAA,IAAA,EAAK,GACxC,CAAU,GAAA;AAAA,KAClB,EAAA,CAAA;AAAA;AAEV,EAAM,MAAA,aAAA,GAAgB,SAAS,SAAY,GAAA,SAAA;AAC3C,EAAM,MAAA,MAAA,GAAS,SAAS,SAAY,GAAA,SAAA;AACpC,EAAA,uBAAQ,IAAA,CAAA,IAAA,EAAA,EAAK,KAAO,EAAA,MAAA,CAAO,YAChB,EAAA,QAAA,EAAA;AAAA,IAAY,WAAA,CAAA,MAAA,GAAS,oBAAK,GAAA,CAAA,yBAAA,EAAA,EAA0B,aAA0B,KAAM,EAAA,OAAA,EAAQ,QAAgB,CAAK,GAAA,IAAA;AAAA,IACjH,IAAA,mBAAQ,GAAA,CAAA,QAAA,EAAA,EAAS,KAAO,EAAA;AAAA,MAC/B,IAAM,EAAA;AAAA,QACJ,KAAO,EAAA,aAAA;AAAA,QACP,QAAU,EAAA,EAAA;AAAA,QACV,UAAY,EAAA;AAAA,OACd;AAAA,MACA,QAAU,EAAA;AAAA,QACR,QAAU,EAAA,EAAA;AAAA,QACV,UAAY,EAAA,KAAA;AAAA,QACZ,SAAW,EAAA,EAAA;AAAA,QACX,YAAc,EAAA,CAAA;AAAA,QACd,KAAO,EAAA;AAAA,OACT;AAAA,MACA,QAAU,EAAA;AAAA,QACR,QAAU,EAAA,EAAA;AAAA,QACV,UAAY,EAAA,KAAA;AAAA,QACZ,SAAW,EAAA,EAAA;AAAA,QACX,YAAc,EAAA,CAAA;AAAA,QACd,KAAO,EAAA;AAAA,OACT;AAAA,MACA,QAAU,EAAA;AAAA,QACR,QAAU,EAAA,EAAA;AAAA,QACV,UAAY,EAAA,KAAA;AAAA,QACZ,SAAW,EAAA,CAAA;AAAA,QACX,YAAc,EAAA,CAAA;AAAA,QACd,KAAO,EAAA;AAAA,OACT;AAAA,MACA,MAAQ,EAAA;AAAA,QACN,UAAY,EAAA;AAAA,OACd;AAAA,MACA,SAAW,EAAA;AAAA,QACT,SAAW,EAAA,CAAA;AAAA,QACX,YAAc,EAAA;AAAA,OAChB;AAAA,MACA,SAAW,EAAA;AAAA,QACT,cAAgB,EAAA;AAAA,OAClB;AAAA,MACA,WAAa,EAAA;AAAA,QACX,cAAgB,EAAA;AAAA,OAClB;AAAA,MACA,YAAc,EAAA;AAAA,QACZ,cAAgB,EAAA;AAAA,OAClB;AAAA,MACA,WAAa,EAAA;AAAA,QACX,eAAiB,EAAA,MAAA;AAAA,QACjB,iBAAmB,EAAA,CAAA;AAAA,QACnB,YAAc,EAAA,CAAA;AAAA,QACd,QAAU,EAAA,EAAA;AAAA,QACV,KAAO,EAAA;AAAA,OACT;AAAA,MACA,UAAY,EAAA;AAAA,QACV,eAAiB,EAAA,MAAA;AAAA,QACjB,OAAS,EAAA,EAAA;AAAA,QACT,YAAc,EAAA,CAAA;AAAA,QACd,cAAgB,EAAA,CAAA;AAAA,QAChB,QAAU,EAAA,EAAA;AAAA,QACV,KAAO,EAAA;AAAA;AACT,KACF,EACiB,gBACL,CAAc,GAAA,IAAA;AAAA,IACjB,uBAAuB,oBAAqB,CAAA;AAAA,MACnD,IAAI,IAAK,CAAA,EAAA;AAAA,MACT,IAAM,EAAA,WAAA;AAAA,MACN,SAAS,IAAK,CAAA;AAAA,KACf,CAAI,GAAA;AAAA,GACD,EAAA,CAAA;AACR,CAAC,CAAA;AACD,MAAM,MAAA,GAAS,WAAW,MAAO,CAAA;AAAA,EAC/B,IAAM,EAAA;AAAA,IACJ,IAAM,EAAA;AAAA,GACR;AAAA,EACA,WAAa,EAAA;AAAA,IACX,UAAY,EAAA,CAAA;AAAA,IACZ,aAAe,EAAA,CAAA;AAAA,IACf,iBAAmB,EAAA;AAAA,GACrB;AAAA,EACA,OAAS,EAAA;AAAA,IACP,KAAO,EAAA,MAAA;AAAA,IACP,UAAY,EAAA,UAAA;AAAA,IACZ,YAAc,EAAA,CAAA;AAAA,IACd,iBAAmB,EAAA;AAAA,GACrB;AAAA,EACA,UAAY,EAAA;AAAA,IACV,eAAiB,EAAA,cAAA;AAAA,IACjB,YAAc,EAAA,EAAA;AAAA,IACd,OAAS,EAAA,EAAA;AAAA,IACT,QAAU,EAAA;AAAA,GACZ;AAAA,EACA,QAAU,EAAA;AAAA,IACR,KAAO,EAAA,SAAA;AAAA,IACP,QAAU,EAAA,EAAA;AAAA,IACV,UAAY,EAAA;AAAA,GACd;AAAA,EACA,YAAc,EAAA;AAAA,IACZ,KAAO,EAAA,MAAA;AAAA,IACP,UAAY,EAAA,YAAA;AAAA,IACZ,YAAc,EAAA,CAAA;AAAA,IACd,iBAAmB,EAAA;AAAA;AAEvB,CAAC,CAAA"}

package/lib/hooks/mintSurfaceSystemToken.js

@@ -1,4 +1,4 @@
-import {AuthStrategy,HttpHeaders}from'common';import {readAuth0IdToken}from'../bridge/readAuth0Session.js';import {config}from'../config/env-config.js';const OBTAIN_USER_SYSTEM_TOKEN = `
+import {AuthStrategy,HttpHeaders}from'common';import {readAuth0IdToken}from'../bridge/readAuth0Session.js';import {config}from'../config/env-config.js';export{isCanvasSurfaceUrl,resolveSurfaceAuthGraphqlUrl}from'./resolveSurfaceAuthGraphqlUrl.js';const OBTAIN_USER_SYSTEM_TOKEN = `
   mutation ObtainUserSystemToken($input: ObtainUserSystemTokenInput!) {
     obtainUserSystemToken(input: $input) {
       token
@@ -14,6 +14,29 @@ const GET_USER_SYSTEM_TOKEN = `
     }
   }
 `;
+const GET_USER_ORGANIZATIONS = `
+  query GetUserOrganizations {
+    getUserOrganizations {
+      name
+    }
+  }
+`;
+const GET_PROJECTS = `
+  query GetProjects($orgName: String!) {
+    getProjects(orgName: $orgName) {
+      data {
+        id
+      }
+    }
+  }
+`;
+const GET_ENVIRONMENT_TAGS = `
+  query GetEnvironmentTags($projectId: ID) {
+    getEnvironmentTags(projectId: $projectId) {
+      id
+    }
+  }
+`;
 const CREATE_SECRET_API_TOKEN = `
   mutation CreateSecretApiToken($input: CreateSecretApiTokenInput!) {
     createSecretApiToken(input: $input) {
@@ -60,6 +83,51 @@ async function gqlFetch(graphqlUrl, idToken, query, variables) {
 const DEV_TESTING_PROJECT_UUID = "9a8ac704-1040-4836-9b72-48b771ca91b1";
 const OBJECT_ID_HEX = /^[a-fA-F0-9]{24}$/;
 const PROJECT_UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+async function discoverMintScope(graphqlUrl, idToken) {
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s;
+  const orgs = await gqlFetch(graphqlUrl, idToken, GET_USER_ORGANIZATIONS);
+  if ((_a = orgs.errors) == null ? void 0 : _a.length) {
+    throw new Error(((_b = orgs.errors[0]) == null ? void 0 : _b.message) || "getUserOrganizations failed");
+  }
+  const orgName = ((_f = (_e = (_d = (_c = orgs.data) == null ? void 0 : _c.getUserOrganizations) == null ? void 0 : _d.find((o) => {
+    var _a2;
+    return (_a2 = o == null ? void 0 : o.name) == null ? void 0 : _a2.trim();
+  })) == null ? void 0 : _e.name) == null ? void 0 : _f.trim()) || "";
+  if (!orgName) {
+    throw new Error("No organization on the canvas backend. Sign in once in the canvas harness (Chrome on localhost:5175), then retry from the app.");
+  }
+  const projects = await gqlFetch(graphqlUrl, idToken, GET_PROJECTS, {
+    orgName
+  });
+  if ((_g = projects.errors) == null ? void 0 : _g.length) {
+    throw new Error(((_h = projects.errors[0]) == null ? void 0 : _h.message) || "getProjects failed");
+  }
+  const projectId = ((_m = (_l = (_k = (_j = (_i = projects.data) == null ? void 0 : _i.getProjects) == null ? void 0 : _j.data) == null ? void 0 : _k.find((p) => {
+    var _a2;
+    return (_a2 = p == null ? void 0 : p.id) == null ? void 0 : _a2.trim();
+  })) == null ? void 0 : _l.id) == null ? void 0 : _m.trim()) || "";
+  if (!projectId) {
+    throw new Error(`No project on the canvas backend for org "${orgName}".`);
+  }
+  const tags = await gqlFetch(graphqlUrl, idToken, GET_ENVIRONMENT_TAGS, {
+    projectId
+  });
+  if ((_n = tags.errors) == null ? void 0 : _n.length) {
+    throw new Error(((_o = tags.errors[0]) == null ? void 0 : _o.message) || "getEnvironmentTags failed");
+  }
+  const environmentTagId = ((_s = (_r = (_q = (_p = tags.data) == null ? void 0 : _p.getEnvironmentTags) == null ? void 0 : _q.find((t) => {
+    var _a2;
+    return (_a2 = t == null ? void 0 : t.id) == null ? void 0 : _a2.trim();
+  })) == null ? void 0 : _r.id) == null ? void 0 : _s.trim()) || "";
+  if (!environmentTagId) {
+    throw new Error(`No environment tag on the canvas backend for project "${projectId}".`);
+  }
+  return {
+    orgName,
+    projectId,
+    environmentTagId
+  };
+}
 function assertMintableProjectId(projectId) {
   if (projectId === "default" || !projectId.trim()) {
     throw new Error("Missing projectId \u2014 wait for org/project bootstrap, then retry.");
@@ -79,11 +147,24 @@ async function mintSurfaceSystemToken(input) {
   }
   const graphqlUrl = resolveSurfaceCatalogBackend(input.graphqlUrl);
   if (__DEV__) {
-    console.log("[WebBuilder] minting system token via", graphqlUrl);
+    console.log("[WebBuilder] minting system token via", graphqlUrl, input.discoverScope ? "(discover scope)" : "");
+  }
+  let orgName = ((_a = input.orgName) == null ? void 0 : _a.trim()) || "";
+  let projectId = ((_b = input.projectId) == null ? void 0 : _b.trim()) || "";
+  let environmentTagId = ((_c = input.tagId) == null ? void 0 : _c.trim()) || "";
+  if (input.discoverScope) {
+    const scope = await discoverMintScope(graphqlUrl, idToken);
+    orgName = scope.orgName;
+    projectId = scope.projectId;
+    environmentTagId = scope.environmentTagId;
+    if (__DEV__) {
+      console.log("[WebBuilder] discovered canvas scope", {
+        orgName,
+        projectId,
+        environmentTagId
+      });
+    }
   }
-  const orgName = (_a = input.orgName) == null ? void 0 : _a.trim();
-  const projectId = (_b = input.projectId) == null ? void 0 : _b.trim();
-  const environmentTagId = (_c = input.tagId) == null ? void 0 : _c.trim();
   if (!orgName) {
     throw new Error("Missing orgName \u2014 wait for org bootstrap, then retry.");
   }

package/lib/hooks/mintSurfaceSystemToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"mintSurfaceSystemToken.js","sources":["../../src/hooks/mintSurfaceSystemToken.ts"],"sourcesContent":["import { AuthStrategy, HttpHeaders } from 'common';\nimport { readAuth0IdToken } from '../bridge/readAuth0Session';\nimport { config } from '../config/env-config';\n\nconst OBTAIN_USER_SYSTEM_TOKEN = `\n  mutation ObtainUserSystemToken($input: ObtainUserSystemTokenInput!) {\n    obtainUserSystemToken(input: $input) {\n      token\n    }\n  }\n`;\n\nconst GET_USER_SYSTEM_TOKEN = `\n  query GetUserSystemToken {\n    getUserSystemToken {\n      id\n      expiresAt\n      isSystemToken\n    }\n  }\n`;\n\nconst CREATE_SECRET_API_TOKEN = `\n  mutation CreateSecretApiToken($input: CreateSecretApiTokenInput!) {\n    createSecretApiToken(input: $input) {\n      id\n      expiresAt\n    }\n  }\n`;\n\nconst REVEAL_SECRET_API_TOKEN = `\n  mutation RevealSecretApiToken($id: ID!) {\n    revealSecretApiToken(id: $id)\n  }\n`;\n\ntype GqlResult<T> = {\n    data?: T;\n    errors?: Array<{ message?: string }>;\n};\n\nfunction normalizeGraphqlUrl(url: string): string {\n    return url.trim().replace(/\\/$/, '');\n}\n\n/** App GRAPHQL_URL from env (optional override for device LAN rewrite). */\nexport function resolveSurfaceCatalogBackend(graphqlUrl?: string): string {\n    const raw = graphqlUrl?.trim() || config.GRAPHQL_URL;\n    if (!raw?.trim()) {\n        throw new Error('GRAPHQL_URL is not configured');\n    }\n    return normalizeGraphqlUrl(raw);\n}\n\nasync function gqlFetch<T>(\n    graphqlUrl: string,\n    idToken: string,\n    query: string,\n    variables?: Record<string, unknown>,\n): Promise<GqlResult<T>> {\n    // Staging JWT middleware only treats Bearer as mobile/SPA when\n    // `ismobile` (or `isspa`) is set — without it we get HTTP 401 Unauthorized.\n    // Match Apollo mobile authHeadersLink + Auth0Client.commonFetchRequestHeaders.\n    const res = await fetch(graphqlUrl, {\n        method: 'POST',\n        headers: {\n            [HttpHeaders.CONTENT_TYPE]: 'application/json',\n            [HttpHeaders.AUTHORIZATION]: `Bearer ${idToken}`,\n            [HttpHeaders.IS_MOBILE]: 'true',\n            [HttpHeaders.AUTH_STRATEGY]: AuthStrategy.Auth0,\n        },\n        body: JSON.stringify({ query, variables }),\n    });\n    if (!res.ok) {\n        const text = await res.text().catch(() => '');\n        throw new Error(`GraphQL HTTP ${res.status}: ${text.slice(0, 200)}`);\n    }\n    return (await res.json()) as GqlResult<T>;\n}\n\nexport type MintSurfaceTokenInput = {\n    /** App GRAPHQL_URL (e.g. device-rewritten). Defaults to env GRAPHQL_URL. */\n    graphqlUrl?: string;\n    orgName?: string | null;\n    projectId?: string | null;\n    tagId?: string | null;\n};\n\nexport type MintSurfaceTokenResult = {\n    token: string;\n    /** Exact backend URL string to stamp into cdecli_token_meta. */\n    backend: string;\n};\n\n/**\n * Reveal (or obtain) a system token on GRAPHQL_URL.\n */\n/** Local-dev testing project — must never mint against this on staging/prod. */\nconst DEV_TESTING_PROJECT_UUID = '9a8ac704-1040-4836-9b72-48b771ca91b1';\n\nconst OBJECT_ID_HEX = /^[a-fA-F0-9]{24}$/;\nconst PROJECT_UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;\n\nfunction assertMintableProjectId(projectId: string): void {\n    if (projectId === 'default' || !projectId.trim()) {\n        throw new Error('Missing projectId — wait for org/project bootstrap, then retry.');\n    }\n    if (!__DEV__ && projectId === DEV_TESTING_PROJECT_UUID) {\n        throw new Error(\n            'Invalid projectId (dev testing UUID). Open Home so a real project can be created, then retry.',\n        );\n    }\n    if (!OBJECT_ID_HEX.test(projectId) && !PROJECT_UUID.test(projectId)) {\n        throw new Error(`Invalid projectId format for system token mint: ${projectId.slice(0, 48)}`);\n    }\n}\n\nexport async function mintSurfaceSystemToken(input: MintSurfaceTokenInput): Promise<MintSurfaceTokenResult> {\n    const idToken = await readAuth0IdToken();\n    if (!idToken) {\n        throw new Error('No Auth0 id_token in storage — sign in to the mobile app first.');\n    }\n\n    const graphqlUrl = resolveSurfaceCatalogBackend(input.graphqlUrl);\n    if (__DEV__) {\n        // eslint-disable-next-line no-console\n        console.log('[WebBuilder] minting system token via', graphqlUrl);\n    }\n\n    const orgName = input.orgName?.trim();\n    const projectId = input.projectId?.trim();\n    const environmentTagId = input.tagId?.trim();\n\n    if (!orgName) {\n        throw new Error('Missing orgName — wait for org bootstrap, then retry.');\n    }\n    if (!projectId) {\n        throw new Error('Missing projectId — wait for org/project bootstrap, then retry.');\n    }\n    if (!environmentTagId) {\n        throw new Error('Missing environmentTagId — cannot mint system token.');\n    }\n    assertMintableProjectId(projectId);\n\n    // Canonical get-or-create (resolves project UUID → Mongo id server-side).\n    try {\n        const obtained = await gqlFetch<{ obtainUserSystemToken?: { token?: string } | null }>(\n            graphqlUrl,\n            idToken,\n            OBTAIN_USER_SYSTEM_TOKEN,\n            {\n                input: {\n                    projectId,\n                    environmentTagId,\n                    orgName,\n                    renewBufferSeconds: 7 * 24 * 60 * 60,\n                    algorithm: 'HS256',\n                },\n            },\n        );\n        const token = obtained.data?.obtainUserSystemToken?.token?.trim();\n        if (token && !obtained.errors?.length) {\n            if (__DEV__) {\n                // eslint-disable-next-line no-console\n                console.log('[WebBuilder] obtained system token length=', token.length);\n            }\n            return { token, backend: graphqlUrl };\n        }\n        if (obtained.errors?.length) {\n            throw new Error(obtained.errors[0]?.message || 'obtainUserSystemToken failed');\n        }\n    } catch (err) {\n        if (__DEV__) {\n            // eslint-disable-next-line no-console\n            console.warn('[WebBuilder] obtainUserSystemToken failed, falling back to reveal:', err);\n        }\n        // Fall through to get/create/reveal only when obtain is unavailable.\n        const msg = err instanceof Error ? err.message : String(err);\n        if (/12 bytes|24 hex|Project not found/i.test(msg)) {\n            throw new Error(\n                `Project \"${projectId}\" is not valid on this backend. Pick/create a real project in the app, then retry.`,\n            );\n        }\n        // Continue to legacy path for older backends without obtainUserSystemToken.\n        if (!/Unknown field|Cannot query field|obtainUserSystemToken/i.test(msg)) {\n            // Non-schema errors from obtain should surface (auth, project, etc.).\n            if (/Unauthorized|401|Project not found|Invalid project/i.test(msg)) {\n                throw err instanceof Error ? err : new Error(msg);\n            }\n        }\n    }\n\n    const getResult = await gqlFetch<{ getUserSystemToken?: { id?: string } | null }>(\n        graphqlUrl,\n        idToken,\n        GET_USER_SYSTEM_TOKEN,\n    );\n    if (getResult.errors?.length) {\n        throw new Error(getResult.errors[0]?.message || 'GetUserSystemToken failed');\n    }\n\n    let tokenId = getResult.data?.getUserSystemToken?.id ?? null;\n\n    if (!tokenId) {\n        const createResult = await gqlFetch<{ createSecretApiToken?: { id?: string } | null }>(\n            graphqlUrl,\n            idToken,\n            CREATE_SECRET_API_TOKEN,\n            {\n                input: {\n                    name: 'System Token',\n                    expiryInSeconds: 31536000,\n                    isSystemToken: true,\n                    environmentTagId,\n                    orgName,\n                    projectId,\n                    algorithm: 'HS256',\n                },\n            },\n        );\n\n        const createErr = createResult.errors?.[0]?.message || '';\n        if (createErr && !/already have a system token/i.test(createErr)) {\n            if (/12 bytes|24 hex/i.test(createErr)) {\n                throw new Error(\n                    `Project \"${projectId}\" is not valid on this backend. Pick/create a real project in the app, then retry.`,\n                );\n            }\n            throw new Error(createErr);\n        }\n\n        if (createResult.data?.createSecretApiToken?.id) {\n            tokenId = createResult.data.createSecretApiToken.id;\n        } else {\n            const refetch = await gqlFetch<{ getUserSystemToken?: { id?: string } | null }>(\n                graphqlUrl,\n                idToken,\n                GET_USER_SYSTEM_TOKEN,\n            );\n            tokenId = refetch.data?.getUserSystemToken?.id ?? null;\n        }\n    }\n\n    if (!tokenId) {\n        throw new Error('No system token id on GraphQL backend — cannot reveal.');\n    }\n\n    const reveal = await gqlFetch<{ revealSecretApiToken?: string | null }>(\n        graphqlUrl,\n        idToken,\n        REVEAL_SECRET_API_TOKEN,\n        { id: tokenId },\n    );\n    if (reveal.errors?.length) {\n        throw new Error(reveal.errors[0]?.message || 'RevealSecretApiToken failed');\n    }\n\n    const token = reveal.data?.revealSecretApiToken?.trim();\n    if (!token) {\n        throw new Error('RevealSecretApiToken returned empty token');\n    }\n\n    if (__DEV__) {\n        // eslint-disable-next-line no-console\n        console.log('[WebBuilder] minted system token length=', token.length);\n    }\n    return { token, backend: graphqlUrl };\n}\n\nexport function appendSurfaceAuthParams(baseUrl: string, token: string, state: string): string {\n    try {\n        const url = new URL(baseUrl);\n        url.searchParams.set('token', token);\n        url.searchParams.set('code', token);\n        url.searchParams.set('state', state);\n        return url.toString();\n    } catch {\n        const sep = baseUrl.includes('?') ? '&' : '?';\n        return `${baseUrl}${sep}token=${encodeURIComponent(token)}&code=${encodeURIComponent(token)}&state=${encodeURIComponent(state)}`;\n    }\n}\n\nfunction tokenFingerprint(token: string): string {\n    const sig = token.split('.')[2] ?? token;\n    return sig.slice(-24);\n}\n\n/** Shared WebView boot script: token + meta + fetch shims for surface-kit auth. */\nfunction buildSurfaceHandoffScript(token: string, backend: string, state: string, withGateRecovery: boolean): string {\n    const safeToken = JSON.stringify(token);\n    const safeBackend = JSON.stringify(backend);\n    const safeState = JSON.stringify(state);\n    const fp = JSON.stringify(tokenFingerprint(token));\n    const recovery = withGateRecovery\n        ? `\n    function tryRecover() {\n      stamp();\n      var gate = document.querySelector('[data-surface-login]');\n      if (!gate) return;\n      if (sessionStorage.getItem('__yantra_wb_token_reload')) return;\n      sessionStorage.setItem('__yantra_wb_token_reload', '1');\n      var u = new URL(window.location.href);\n      u.searchParams.set('token', t);\n      u.searchParams.set('code', t);\n      u.searchParams.set('state', state);\n      window.location.replace(u.toString());\n    }\n    tryRecover();\n    var i = 0;\n    var timer = setInterval(function () {\n      i += 1;\n      tryRecover();\n      if (i >= 40 || !document.querySelector('[data-surface-login]')) clearInterval(timer);\n    }, 250);\n`\n        : `\n    var n = 0;\n    var id = setInterval(function () {\n      stamp();\n      n += 1;\n      if (n >= 80) clearInterval(id);\n    }, 50);\n`;\n\n    return `\n(function () {\n  try {\n    var t = ${safeToken};\n    var backend = ${safeBackend};\n    var state = ${safeState};\n    var fp = ${fp};\n    var PROBE_Q = 'query { getUserAccount { id } }';\n\n    if (!window.__yantraWbFetchPatched) {\n      window.__yantraWbFetchPatched = true;\n      var origFetch = window.fetch.bind(window);\n      window.fetch = function (input, init) {\n        try {\n          var url = typeof input === 'string' ? input : (input && input.url) ? String(input.url) : '';\n          // Force surface-kit resolveCatalogBackend() to our GRAPHQL_URL (not remote agent → ideback).\n          if (url.indexOf('/v1/auth/context') !== -1) {\n            return Promise.resolve(new Response(\n              JSON.stringify({ backendGraphqlUrl: backend }),\n              { status: 200, headers: { 'Content-Type': 'application/json' } }\n            ));\n          }\n          var body = init && typeof init.body === 'string' ? init.body : '';\n          if (body && body.indexOf('getUserAccount') !== -1) {\n            var parsed = JSON.parse(body);\n            var q = parsed && typeof parsed.query === 'string' ? parsed.query.replace(/\\\\s+/g, ' ').trim() : '';\n            if (q === PROBE_Q) {\n              return Promise.resolve(new Response(\n                JSON.stringify({ data: { getUserAccount: { id: 'mobile-webview-handoff' } } }),\n                { status: 200, headers: { 'Content-Type': 'application/json' } }\n              ));\n            }\n          }\n        } catch (e0) {}\n        return origFetch(input, init);\n      };\n    }\n\n    function stamp() {\n      try {\n        sessionStorage.setItem('cdecli_oauth_state', state);\n        localStorage.setItem('cdecli_token', t);\n        sessionStorage.setItem('cdecli_token', t);\n        localStorage.setItem('cdecli_system_token', t);\n        localStorage.setItem('cdecli_token_meta', JSON.stringify({\n          backend: backend,\n          verifiedAt: Date.now(),\n          fp: fp\n        }));\n      } catch (e1) {}\n    }\n    stamp();\n    ${recovery}\n  } catch (e) {}\n  true;\n})();\ntrue;\n`;\n}\n\nexport function buildCdecliTokenInjection(token: string, backend: string, state: string): string {\n    return buildSurfaceHandoffScript(token, backend, state, false);\n}\n\nexport function buildSurfaceGateRecoveryScript(token: string, backend: string, state: string): string {\n    return buildSurfaceHandoffScript(token, backend, state, true);\n}\n"],"names":["token"],"mappings":"wJAGA,MAAM,wBAA2B,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAOjC,MAAM,qBAAwB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAS9B,MAAM,uBAA0B,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQhC,MAAM,uBAA0B,GAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAWhC,SAAS,oBAAoB,GAAqB,EAAA;AAChD,EAAA,OAAO,GAAI,CAAA,IAAA,EAAO,CAAA,OAAA,CAAQ,OAAO,EAAE,CAAA;AACrC;AAGO,SAAS,6BAA6B,UAA6B,EAAA;AACxE,EAAM,MAAA,GAAA,GAAA,CAAM,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,IAAA,EAAA,KAAU,MAAO,CAAA,WAAA;AACzC,EAAI,IAAA,EAAC,2BAAK,IAAQ,EAAA,CAAA,EAAA;AAChB,IAAM,MAAA,IAAI,MAAM,+BAA+B,CAAA;AAAA;AAEjD,EAAA,OAAO,oBAAoB,GAAG,CAAA;AAChC;AACA,eAAe,QAAY,CAAA,UAAA,EAAoB,OAAiB,EAAA,KAAA,EAAe,SAA4D,EAAA;AAIzI,EAAM,MAAA,GAAA,GAAM,MAAM,KAAA,CAAM,UAAY,EAAA;AAAA,IAClC,MAAQ,EAAA,MAAA;AAAA,IACR,OAAS,EAAA;AAAA,MACP,CAAC,WAAY,CAAA,YAAY,GAAG,kBAAA;AAAA,MAC5B,CAAC,WAAA,CAAY,aAAa,GAAG,UAAU,OAAO,CAAA,CAAA;AAAA,MAC9C,CAAC,WAAY,CAAA,SAAS,GAAG,MAAA;AAAA,MACzB,CAAC,WAAA,CAAY,aAAa,GAAG,YAAa,CAAA;AAAA,KAC5C;AAAA,IACA,IAAA,EAAM,KAAK,SAAU,CAAA;AAAA,MACnB,KAAA;AAAA,MACA;AAAA,KACD;AAAA,GACF,CAAA;AACD,EAAI,IAAA,CAAC,IAAI,EAAI,EAAA;AACX,IAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAO,CAAA,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,IAAM,MAAA,IAAI,KAAM,CAAA,CAAA,aAAA,EAAgB,GAAI,CAAA,MAAM,CAAK,EAAA,EAAA,IAAA,CAAK,KAAM,CAAA,CAAA,EAAG,GAAG,CAAC,CAAE,CAAA,CAAA;AAAA;AAErE,EAAQ,OAAA,MAAM,IAAI,IAAK,EAAA;AACzB;AAkBA,MAAM,wBAA2B,GAAA,sCAAA;AACjC,MAAM,aAAgB,GAAA,mBAAA;AACtB,MAAM,YAAe,GAAA,+EAAA;AACrB,SAAS,wBAAwB,SAAyB,EAAA;AACxD,EAAA,IAAI,SAAc,KAAA,SAAA,IAAa,CAAC,SAAA,CAAU,MAAQ,EAAA;AAChD,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAI,IAAA,CAAC,OAAW,IAAA,SAAA,KAAc,wBAA0B,EAAA;AACtD,IAAM,MAAA,IAAI,MAAM,+FAA+F,CAAA;AAAA;AAEjH,EAAI,IAAA,CAAC,cAAc,IAAK,CAAA,SAAS,KAAK,CAAC,YAAA,CAAa,IAAK,CAAA,SAAS,CAAG,EAAA;AACnE,IAAM,MAAA,IAAI,MAAM,CAAmD,gDAAA,EAAA,SAAA,CAAU,MAAM,CAAG,EAAA,EAAE,CAAC,CAAE,CAAA,CAAA;AAAA;AAE/F;AACA,eAAsB,uBAAuB,KAA+D,EAAA;AAxG5G,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAyGE,EAAM,MAAA,OAAA,GAAU,MAAM,gBAAiB,EAAA;AACvC,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAM,MAAA,UAAA,GAAa,4BAA6B,CAAA,KAAA,CAAM,UAAU,CAAA;AAChE,EAAA,IAAI,OAAS,EAAA;AAEX,IAAQ,OAAA,CAAA,GAAA,CAAI,yCAAyC,UAAU,CAAA;AAAA;AAEjE,EAAM,MAAA,OAAA,GAAA,CAAU,EAAM,GAAA,KAAA,CAAA,OAAA,KAAN,IAAe,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AAC/B,EAAM,MAAA,SAAA,GAAA,CAAY,EAAM,GAAA,KAAA,CAAA,SAAA,KAAN,IAAiB,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AACnC,EAAM,MAAA,gBAAA,GAAA,CAAmB,EAAM,GAAA,KAAA,CAAA,KAAA,KAAN,IAAa,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AACtC,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,4DAAuD,CAAA;AAAA;AAEzE,EAAA,IAAI,CAAC,SAAW,EAAA;AACd,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAA,IAAI,CAAC,gBAAkB,EAAA;AACrB,IAAM,MAAA,IAAI,MAAM,2DAAsD,CAAA;AAAA;AAExE,EAAA,uBAAA,CAAwB,SAAS,CAAA;AAGjC,EAAI,IAAA;AACF,IAAA,MAAM,QAAW,GAAA,MAAM,QAIpB,CAAA,UAAA,EAAY,SAAS,wBAA0B,EAAA;AAAA,MAChD,KAAO,EAAA;AAAA,QACL,SAAA;AAAA,QACA,gBAAA;AAAA,QACA,OAAA;AAAA,QACA,kBAAA,EAAoB,CAAI,GAAA,EAAA,GAAK,EAAK,GAAA,EAAA;AAAA,QAClC,SAAW,EAAA;AAAA;AACb,KACD,CAAA;AACD,IAAA,MAAMA,UAAQ,EAAS,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,QAAA,CAAA,IAAA,KAAT,mBAAe,qBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAsC,UAAtC,IAA6C,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AAC3D,IAAA,IAAIA,MAAS,IAAA,EAAA,CAAC,EAAS,GAAA,QAAA,CAAA,MAAA,KAAT,mBAAiB,MAAQ,CAAA,EAAA;AACrC,MAAA,IAAI,OAAS,EAAA;AAEX,QAAQ,OAAA,CAAA,GAAA,CAAI,4CAA8CA,EAAAA,MAAAA,CAAM,MAAM,CAAA;AAAA;AAExE,MAAO,OAAA;AAAA,QACL,KAAAA,EAAAA,MAAAA;AAAA,QACA,OAAS,EAAA;AAAA,OACX;AAAA;AAEF,IAAI,IAAA,CAAA,EAAA,GAAA,QAAA,CAAS,MAAT,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAiB,MAAQ,EAAA;AAC3B,MAAM,MAAA,IAAI,QAAM,EAAS,GAAA,QAAA,CAAA,MAAA,CAAO,CAAC,CAAjB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAoB,YAAW,8BAA8B,CAAA;AAAA;AAC/E,WACO,GAAK,EAAA;AACZ,IAAA,IAAI,OAAS,EAAA;AAEX,MAAQ,OAAA,CAAA,IAAA,CAAK,sEAAsE,GAAG,CAAA;AAAA;AAGxF,IAAA,MAAM,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAI,CAAA,OAAA,GAAU,OAAO,GAAG,CAAA;AAC3D,IAAI,IAAA,oCAAA,CAAqC,IAAK,CAAA,GAAG,CAAG,EAAA;AAClD,MAAA,MAAM,IAAI,KAAA,CAAM,CAAY,SAAA,EAAA,SAAS,CAAoF,kFAAA,CAAA,CAAA;AAAA;AAG3H,IAAA,IAAI,CAAC,yDAAA,CAA0D,IAAK,CAAA,GAAG,CAAG,EAAA;AAExE,MAAI,IAAA,qDAAA,CAAsD,IAAK,CAAA,GAAG,CAAG,EAAA;AACnE,QAAA,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAM,GAAA,IAAI,MAAM,GAAG,CAAA;AAAA;AAClD;AACF;AAEF,EAAA,MAAM,SAAY,GAAA,MAAM,QAIrB,CAAA,UAAA,EAAY,SAAS,qBAAqB,CAAA;AAC7C,EAAI,IAAA,CAAA,EAAA,GAAA,SAAA,CAAU,MAAV,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkB,MAAQ,EAAA;AAC5B,IAAM,MAAA,IAAI,QAAM,EAAU,GAAA,SAAA,CAAA,MAAA,CAAO,CAAC,CAAlB,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAqB,YAAW,2BAA2B,CAAA;AAAA;AAE7E,EAAA,IAAI,WAAU,EAAU,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,SAAA,CAAA,IAAA,KAAV,mBAAgB,kBAAhB,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAoC,OAApC,IAA0C,GAAA,EAAA,GAAA,IAAA;AACxD,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAA,MAAM,YAAe,GAAA,MAAM,QAIxB,CAAA,UAAA,EAAY,SAAS,uBAAyB,EAAA;AAAA,MAC/C,KAAO,EAAA;AAAA,QACL,IAAM,EAAA,cAAA;AAAA,QACN,eAAiB,EAAA,OAAA;AAAA,QACjB,aAAe,EAAA,IAAA;AAAA,QACf,gBAAA;AAAA,QACA,OAAA;AAAA,QACA,SAAA;AAAA,QACA,SAAW,EAAA;AAAA;AACb,KACD,CAAA;AACD,IAAA,MAAM,cAAY,EAAa,GAAA,CAAA,EAAA,GAAA,YAAA,CAAA,MAAA,KAAb,IAAsB,GAAA,MAAA,GAAA,EAAA,CAAA,CAAA,CAAA,KAAtB,mBAA0B,OAAW,KAAA,EAAA;AACvD,IAAA,IAAI,SAAa,IAAA,CAAC,8BAA+B,CAAA,IAAA,CAAK,SAAS,CAAG,EAAA;AAChE,MAAI,IAAA,kBAAA,CAAmB,IAAK,CAAA,SAAS,CAAG,EAAA;AACtC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAY,SAAA,EAAA,SAAS,CAAoF,kFAAA,CAAA,CAAA;AAAA;AAE3H,MAAM,MAAA,IAAI,MAAM,SAAS,CAAA;AAAA;AAE3B,IAAA,IAAA,CAAI,EAAa,GAAA,CAAA,EAAA,GAAA,YAAA,CAAA,IAAA,KAAb,IAAmB,GAAA,MAAA,GAAA,EAAA,CAAA,oBAAA,KAAnB,mBAAyC,EAAI,EAAA;AAC/C,MAAU,OAAA,GAAA,YAAA,CAAa,KAAK,oBAAqB,CAAA,EAAA;AAAA,KAC5C,MAAA;AACL,MAAA,MAAM,OAAU,GAAA,MAAM,QAInB,CAAA,UAAA,EAAY,SAAS,qBAAqB,CAAA;AAC7C,MAAA,OAAA,GAAA,CAAU,yBAAQ,IAAR,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAc,kBAAd,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkC,OAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAAA;AACpD;AAEF,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,6DAAwD,CAAA;AAAA;AAE1E,EAAA,MAAM,MAAS,GAAA,MAAM,QAElB,CAAA,UAAA,EAAY,SAAS,uBAAyB,EAAA;AAAA,IAC/C,EAAI,EAAA;AAAA,GACL,CAAA;AACD,EAAI,IAAA,CAAA,EAAA,GAAA,MAAA,CAAO,MAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAe,MAAQ,EAAA;AACzB,IAAM,MAAA,IAAI,QAAM,EAAO,GAAA,MAAA,CAAA,MAAA,CAAO,CAAC,CAAf,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkB,YAAW,6BAA6B,CAAA;AAAA;AAE5E,EAAA,MAAM,KAAQ,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,MAAA,CAAO,IAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,yBAAb,IAAmC,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AACjD,EAAA,IAAI,CAAC,KAAO,EAAA;AACV,IAAM,MAAA,IAAI,MAAM,2CAA2C,CAAA;AAAA;AAE7D,EAAA,IAAI,OAAS,EAAA;AAEX,IAAQ,OAAA,CAAA,GAAA,CAAI,0CAA4C,EAAA,KAAA,CAAM,MAAM,CAAA;AAAA;AAEtE,EAAO,OAAA;AAAA,IACL,KAAA;AAAA,IACA,OAAS,EAAA;AAAA,GACX;AACF;AACgB,SAAA,uBAAA,CAAwB,OAAiB,EAAA,KAAA,EAAe,KAAuB,EAAA;AAC7F,EAAI,IAAA;AACF,IAAM,MAAA,GAAA,GAAM,IAAI,GAAA,CAAI,OAAO,CAAA;AAC3B,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,OAAA,EAAS,KAAK,CAAA;AACnC,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,MAAA,EAAQ,KAAK,CAAA;AAClC,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,OAAA,EAAS,KAAK,CAAA;AACnC,IAAA,OAAO,IAAI,QAAS,EAAA;AAAA,GACd,CAAA,OAAA,CAAA,EAAA;AACN,IAAA,MAAM,GAAM,GAAA,OAAA,CAAQ,QAAS,CAAA,GAAG,IAAI,GAAM,GAAA,GAAA;AAC1C,IAAA,OAAO,CAAG,EAAA,OAAO,CAAG,EAAA,GAAG,SAAS,kBAAmB,CAAA,KAAK,CAAC,CAAA,MAAA,EAAS,mBAAmB,KAAK,CAAC,CAAU,OAAA,EAAA,kBAAA,CAAmB,KAAK,CAAC,CAAA,CAAA;AAAA;AAElI;AACA,SAAS,iBAAiB,KAAuB,EAAA;AA9PjD,EAAA,IAAA,EAAA;AA+PE,EAAA,MAAM,OAAM,EAAM,GAAA,KAAA,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,CAAC,MAAlB,IAAuB,GAAA,EAAA,GAAA,KAAA;AACnC,EAAO,OAAA,GAAA,CAAI,MAAM,GAAG,CAAA;AACtB;AAGA,SAAS,yBAA0B,CAAA,KAAA,EAAe,OAAiB,EAAA,KAAA,EAAe,gBAAmC,EAAA;AACnH,EAAM,MAAA,SAAA,GAAY,IAAK,CAAA,SAAA,CAAU,KAAK,CAAA;AACtC,EAAM,MAAA,WAAA,GAAc,IAAK,CAAA,SAAA,CAAU,OAAO,CAAA;AAC1C,EAAM,MAAA,SAAA,GAAY,IAAK,CAAA,SAAA,CAAU,KAAK,CAAA;AACtC,EAAA,MAAM,EAAK,GAAA,IAAA,CAAK,SAAU,CAAA,gBAAA,CAAiB,KAAK,CAAC,CAAA;AACjD,EAAA,MAAM,WAAW,gBAAmB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAoBlC,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQF,EAAO,OAAA;AAAA;AAAA;AAAA,YAAA,EAGK,SAAS,CAAA;AAAA,kBAAA,EACH,WAAW,CAAA;AAAA,gBAAA,EACb,SAAS,CAAA;AAAA,aAAA,EACZ,EAAE,CAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,EA8CX,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAMd;AACgB,SAAA,yBAAA,CAA0B,KAAe,EAAA,OAAA,EAAiB,KAAuB,EAAA;AAC/F,EAAA,OAAO,yBAA0B,CAAA,KAAA,EAAO,OAAS,EAAA,KAAA,EAAO,KAAK,CAAA;AAC/D;AACgB,SAAA,8BAAA,CAA+B,KAAe,EAAA,OAAA,EAAiB,KAAuB,EAAA;AACpG,EAAA,OAAO,yBAA0B,CAAA,KAAA,EAAO,OAAS,EAAA,KAAA,EAAO,IAAI,CAAA;AAC9D"}
+{"version":3,"file":"mintSurfaceSystemToken.js","sources":["../../src/hooks/mintSurfaceSystemToken.ts"],"sourcesContent":["import { AuthStrategy, HttpHeaders } from 'common';\nimport { readAuth0IdToken } from '../bridge/readAuth0Session';\nimport { config } from '../config/env-config';\n\nconst OBTAIN_USER_SYSTEM_TOKEN = `\n  mutation ObtainUserSystemToken($input: ObtainUserSystemTokenInput!) {\n    obtainUserSystemToken(input: $input) {\n      token\n    }\n  }\n`;\n\nconst GET_USER_SYSTEM_TOKEN = `\n  query GetUserSystemToken {\n    getUserSystemToken {\n      id\n      expiresAt\n      isSystemToken\n    }\n  }\n`;\n\nconst GET_USER_ORGANIZATIONS = `\n  query GetUserOrganizations {\n    getUserOrganizations {\n      name\n    }\n  }\n`;\n\nconst GET_PROJECTS = `\n  query GetProjects($orgName: String!) {\n    getProjects(orgName: $orgName) {\n      data {\n        id\n      }\n    }\n  }\n`;\n\nconst GET_ENVIRONMENT_TAGS = `\n  query GetEnvironmentTags($projectId: ID) {\n    getEnvironmentTags(projectId: $projectId) {\n      id\n    }\n  }\n`;\n\nconst CREATE_SECRET_API_TOKEN = `\n  mutation CreateSecretApiToken($input: CreateSecretApiTokenInput!) {\n    createSecretApiToken(input: $input) {\n      id\n      expiresAt\n    }\n  }\n`;\n\nconst REVEAL_SECRET_API_TOKEN = `\n  mutation RevealSecretApiToken($id: ID!) {\n    revealSecretApiToken(id: $id)\n  }\n`;\n\ntype GqlResult<T> = {\n    data?: T;\n    errors?: Array<{ message?: string }>;\n};\n\nfunction normalizeGraphqlUrl(url: string): string {\n    return url.trim().replace(/\\/$/, '');\n}\n\n/** App GRAPHQL_URL from env (optional override for device LAN rewrite). */\nexport function resolveSurfaceCatalogBackend(graphqlUrl?: string): string {\n    const raw = graphqlUrl?.trim() || config.GRAPHQL_URL;\n    if (!raw?.trim()) {\n        throw new Error('GRAPHQL_URL is not configured');\n    }\n    return normalizeGraphqlUrl(raw);\n}\n\nexport { isCanvasSurfaceUrl, resolveSurfaceAuthGraphqlUrl } from './resolveSurfaceAuthGraphqlUrl';\nexport type { SurfaceAuthUrlConfig } from './resolveSurfaceAuthGraphqlUrl';\n\nasync function gqlFetch<T>(\n    graphqlUrl: string,\n    idToken: string,\n    query: string,\n    variables?: Record<string, unknown>,\n): Promise<GqlResult<T>> {\n    // Staging JWT middleware only treats Bearer as mobile/SPA when\n    // `ismobile` (or `isspa`) is set — without it we get HTTP 401 Unauthorized.\n    // Match Apollo mobile authHeadersLink + Auth0Client.commonFetchRequestHeaders.\n    const res = await fetch(graphqlUrl, {\n        method: 'POST',\n        headers: {\n            [HttpHeaders.CONTENT_TYPE]: 'application/json',\n            [HttpHeaders.AUTHORIZATION]: `Bearer ${idToken}`,\n            [HttpHeaders.IS_MOBILE]: 'true',\n            [HttpHeaders.AUTH_STRATEGY]: AuthStrategy.Auth0,\n        },\n        body: JSON.stringify({ query, variables }),\n    });\n    if (!res.ok) {\n        const text = await res.text().catch(() => '');\n        throw new Error(`GraphQL HTTP ${res.status}: ${text.slice(0, 200)}`);\n    }\n    return (await res.json()) as GqlResult<T>;\n}\n\nexport type MintSurfaceTokenInput = {\n    /** App GRAPHQL_URL (e.g. device-rewritten). Defaults to env GRAPHQL_URL. */\n    graphqlUrl?: string;\n    orgName?: string | null;\n    projectId?: string | null;\n    tagId?: string | null;\n    /**\n     * Resolve org/project/env on `graphqlUrl` instead of using the mobile\n     * app's local ids. Required when minting against a different cluster\n     * than GRAPHQL_URL (canvas index lives on yantra-app-v1).\n     */\n    discoverScope?: boolean;\n};\n\nexport type MintSurfaceTokenResult = {\n    token: string;\n    /** Exact backend URL string to stamp into cdecli_token_meta. */\n    backend: string;\n};\n\n/**\n * Reveal (or obtain) a system token on GRAPHQL_URL.\n */\n/** Local-dev testing project — must never mint against this on staging/prod. */\nconst DEV_TESTING_PROJECT_UUID = '9a8ac704-1040-4836-9b72-48b771ca91b1';\n\nconst OBJECT_ID_HEX = /^[a-fA-F0-9]{24}$/;\nconst PROJECT_UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;\n\nasync function discoverMintScope(\n    graphqlUrl: string,\n    idToken: string,\n): Promise<{ orgName: string; projectId: string; environmentTagId: string }> {\n    const orgs = await gqlFetch<{ getUserOrganizations?: Array<{ name?: string | null } | null> | null }>(\n        graphqlUrl,\n        idToken,\n        GET_USER_ORGANIZATIONS,\n    );\n    if (orgs.errors?.length) {\n        throw new Error(orgs.errors[0]?.message || 'getUserOrganizations failed');\n    }\n    const orgName = orgs.data?.getUserOrganizations?.find((o) => o?.name?.trim())?.name?.trim() || '';\n    if (!orgName) {\n        throw new Error(\n            'No organization on the canvas backend. Sign in once in the canvas harness (Chrome on localhost:5175), then retry from the app.',\n        );\n    }\n\n    const projects = await gqlFetch<{ getProjects?: { data?: Array<{ id?: string | null } | null> | null } | null }>(\n        graphqlUrl,\n        idToken,\n        GET_PROJECTS,\n        { orgName },\n    );\n    if (projects.errors?.length) {\n        throw new Error(projects.errors[0]?.message || 'getProjects failed');\n    }\n    const projectId = projects.data?.getProjects?.data?.find((p) => p?.id?.trim())?.id?.trim() || '';\n    if (!projectId) {\n        throw new Error(`No project on the canvas backend for org \"${orgName}\".`);\n    }\n\n    const tags = await gqlFetch<{ getEnvironmentTags?: Array<{ id?: string | null } | null> | null }>(\n        graphqlUrl,\n        idToken,\n        GET_ENVIRONMENT_TAGS,\n        { projectId },\n    );\n    if (tags.errors?.length) {\n        throw new Error(tags.errors[0]?.message || 'getEnvironmentTags failed');\n    }\n    const environmentTagId = tags.data?.getEnvironmentTags?.find((t) => t?.id?.trim())?.id?.trim() || '';\n    if (!environmentTagId) {\n        throw new Error(`No environment tag on the canvas backend for project \"${projectId}\".`);\n    }\n\n    return { orgName, projectId, environmentTagId };\n}\n\nfunction assertMintableProjectId(projectId: string): void {\n    if (projectId === 'default' || !projectId.trim()) {\n        throw new Error('Missing projectId — wait for org/project bootstrap, then retry.');\n    }\n    if (!__DEV__ && projectId === DEV_TESTING_PROJECT_UUID) {\n        throw new Error(\n            'Invalid projectId (dev testing UUID). Open Home so a real project can be created, then retry.',\n        );\n    }\n    if (!OBJECT_ID_HEX.test(projectId) && !PROJECT_UUID.test(projectId)) {\n        throw new Error(`Invalid projectId format for system token mint: ${projectId.slice(0, 48)}`);\n    }\n}\n\nexport async function mintSurfaceSystemToken(input: MintSurfaceTokenInput): Promise<MintSurfaceTokenResult> {\n    const idToken = await readAuth0IdToken();\n    if (!idToken) {\n        throw new Error('No Auth0 id_token in storage — sign in to the mobile app first.');\n    }\n\n    const graphqlUrl = resolveSurfaceCatalogBackend(input.graphqlUrl);\n    if (__DEV__) {\n        // eslint-disable-next-line no-console\n        console.log('[WebBuilder] minting system token via', graphqlUrl, input.discoverScope ? '(discover scope)' : '');\n    }\n\n    let orgName = input.orgName?.trim() || '';\n    let projectId = input.projectId?.trim() || '';\n    let environmentTagId = input.tagId?.trim() || '';\n\n    if (input.discoverScope) {\n        const scope = await discoverMintScope(graphqlUrl, idToken);\n        orgName = scope.orgName;\n        projectId = scope.projectId;\n        environmentTagId = scope.environmentTagId;\n        if (__DEV__) {\n            // eslint-disable-next-line no-console\n            console.log('[WebBuilder] discovered canvas scope', { orgName, projectId, environmentTagId });\n        }\n    }\n\n    if (!orgName) {\n        throw new Error('Missing orgName — wait for org bootstrap, then retry.');\n    }\n    if (!projectId) {\n        throw new Error('Missing projectId — wait for org/project bootstrap, then retry.');\n    }\n    if (!environmentTagId) {\n        throw new Error('Missing environmentTagId — cannot mint system token.');\n    }\n    assertMintableProjectId(projectId);\n\n    // Canonical get-or-create (resolves project UUID → Mongo id server-side).\n    try {\n        const obtained = await gqlFetch<{ obtainUserSystemToken?: { token?: string } | null }>(\n            graphqlUrl,\n            idToken,\n            OBTAIN_USER_SYSTEM_TOKEN,\n            {\n                input: {\n                    projectId,\n                    environmentTagId,\n                    orgName,\n                    renewBufferSeconds: 7 * 24 * 60 * 60,\n                    algorithm: 'HS256',\n                },\n            },\n        );\n        const token = obtained.data?.obtainUserSystemToken?.token?.trim();\n        if (token && !obtained.errors?.length) {\n            if (__DEV__) {\n                // eslint-disable-next-line no-console\n                console.log('[WebBuilder] obtained system token length=', token.length);\n            }\n            return { token, backend: graphqlUrl };\n        }\n        if (obtained.errors?.length) {\n            throw new Error(obtained.errors[0]?.message || 'obtainUserSystemToken failed');\n        }\n    } catch (err) {\n        if (__DEV__) {\n            // eslint-disable-next-line no-console\n            console.warn('[WebBuilder] obtainUserSystemToken failed, falling back to reveal:', err);\n        }\n        // Fall through to get/create/reveal only when obtain is unavailable.\n        const msg = err instanceof Error ? err.message : String(err);\n        if (/12 bytes|24 hex|Project not found/i.test(msg)) {\n            throw new Error(\n                `Project \"${projectId}\" is not valid on this backend. Pick/create a real project in the app, then retry.`,\n            );\n        }\n        // Continue to legacy path for older backends without obtainUserSystemToken.\n        if (!/Unknown field|Cannot query field|obtainUserSystemToken/i.test(msg)) {\n            // Non-schema errors from obtain should surface (auth, project, etc.).\n            if (/Unauthorized|401|Project not found|Invalid project/i.test(msg)) {\n                throw err instanceof Error ? err : new Error(msg);\n            }\n        }\n    }\n\n    const getResult = await gqlFetch<{ getUserSystemToken?: { id?: string } | null }>(\n        graphqlUrl,\n        idToken,\n        GET_USER_SYSTEM_TOKEN,\n    );\n    if (getResult.errors?.length) {\n        throw new Error(getResult.errors[0]?.message || 'GetUserSystemToken failed');\n    }\n\n    let tokenId = getResult.data?.getUserSystemToken?.id ?? null;\n\n    if (!tokenId) {\n        const createResult = await gqlFetch<{ createSecretApiToken?: { id?: string } | null }>(\n            graphqlUrl,\n            idToken,\n            CREATE_SECRET_API_TOKEN,\n            {\n                input: {\n                    name: 'System Token',\n                    expiryInSeconds: 31536000,\n                    isSystemToken: true,\n                    environmentTagId,\n                    orgName,\n                    projectId,\n                    algorithm: 'HS256',\n                },\n            },\n        );\n\n        const createErr = createResult.errors?.[0]?.message || '';\n        if (createErr && !/already have a system token/i.test(createErr)) {\n            if (/12 bytes|24 hex/i.test(createErr)) {\n                throw new Error(\n                    `Project \"${projectId}\" is not valid on this backend. Pick/create a real project in the app, then retry.`,\n                );\n            }\n            throw new Error(createErr);\n        }\n\n        if (createResult.data?.createSecretApiToken?.id) {\n            tokenId = createResult.data.createSecretApiToken.id;\n        } else {\n            const refetch = await gqlFetch<{ getUserSystemToken?: { id?: string } | null }>(\n                graphqlUrl,\n                idToken,\n                GET_USER_SYSTEM_TOKEN,\n            );\n            tokenId = refetch.data?.getUserSystemToken?.id ?? null;\n        }\n    }\n\n    if (!tokenId) {\n        throw new Error('No system token id on GraphQL backend — cannot reveal.');\n    }\n\n    const reveal = await gqlFetch<{ revealSecretApiToken?: string | null }>(\n        graphqlUrl,\n        idToken,\n        REVEAL_SECRET_API_TOKEN,\n        { id: tokenId },\n    );\n    if (reveal.errors?.length) {\n        throw new Error(reveal.errors[0]?.message || 'RevealSecretApiToken failed');\n    }\n\n    const token = reveal.data?.revealSecretApiToken?.trim();\n    if (!token) {\n        throw new Error('RevealSecretApiToken returned empty token');\n    }\n\n    if (__DEV__) {\n        // eslint-disable-next-line no-console\n        console.log('[WebBuilder] minted system token length=', token.length);\n    }\n    return { token, backend: graphqlUrl };\n}\n\nexport function appendSurfaceAuthParams(baseUrl: string, token: string, state: string): string {\n    try {\n        const url = new URL(baseUrl);\n        url.searchParams.set('token', token);\n        url.searchParams.set('code', token);\n        url.searchParams.set('state', state);\n        return url.toString();\n    } catch {\n        const sep = baseUrl.includes('?') ? '&' : '?';\n        return `${baseUrl}${sep}token=${encodeURIComponent(token)}&code=${encodeURIComponent(token)}&state=${encodeURIComponent(state)}`;\n    }\n}\n\nfunction tokenFingerprint(token: string): string {\n    const sig = token.split('.')[2] ?? token;\n    return sig.slice(-24);\n}\n\n/** Shared WebView boot script: token + meta + fetch shims for surface-kit auth. */\nfunction buildSurfaceHandoffScript(token: string, backend: string, state: string, withGateRecovery: boolean): string {\n    const safeToken = JSON.stringify(token);\n    const safeBackend = JSON.stringify(backend);\n    const safeState = JSON.stringify(state);\n    const fp = JSON.stringify(tokenFingerprint(token));\n    const recovery = withGateRecovery\n        ? `\n    function tryRecover() {\n      stamp();\n      var gate = document.querySelector('[data-surface-login]');\n      if (!gate) return;\n      if (sessionStorage.getItem('__yantra_wb_token_reload')) return;\n      sessionStorage.setItem('__yantra_wb_token_reload', '1');\n      var u = new URL(window.location.href);\n      u.searchParams.set('token', t);\n      u.searchParams.set('code', t);\n      u.searchParams.set('state', state);\n      window.location.replace(u.toString());\n    }\n    tryRecover();\n    var i = 0;\n    var timer = setInterval(function () {\n      i += 1;\n      tryRecover();\n      if (i >= 40 || !document.querySelector('[data-surface-login]')) clearInterval(timer);\n    }, 250);\n`\n        : `\n    var n = 0;\n    var id = setInterval(function () {\n      stamp();\n      n += 1;\n      if (n >= 80) clearInterval(id);\n    }, 50);\n`;\n\n    return `\n(function () {\n  try {\n    var t = ${safeToken};\n    var backend = ${safeBackend};\n    var state = ${safeState};\n    var fp = ${fp};\n    var PROBE_Q = 'query { getUserAccount { id } }';\n\n    if (!window.__yantraWbFetchPatched) {\n      window.__yantraWbFetchPatched = true;\n      var origFetch = window.fetch.bind(window);\n      window.fetch = function (input, init) {\n        try {\n          var url = typeof input === 'string' ? input : (input && input.url) ? String(input.url) : '';\n          // Force surface-kit resolveCatalogBackend() to our GRAPHQL_URL (not remote agent → ideback).\n          if (url.indexOf('/v1/auth/context') !== -1) {\n            return Promise.resolve(new Response(\n              JSON.stringify({ backendGraphqlUrl: backend }),\n              { status: 200, headers: { 'Content-Type': 'application/json' } }\n            ));\n          }\n          var body = init && typeof init.body === 'string' ? init.body : '';\n          if (body && body.indexOf('getUserAccount') !== -1) {\n            var parsed = JSON.parse(body);\n            var q = parsed && typeof parsed.query === 'string' ? parsed.query.replace(/\\\\s+/g, ' ').trim() : '';\n            if (q === PROBE_Q) {\n              return Promise.resolve(new Response(\n                JSON.stringify({ data: { getUserAccount: { id: 'mobile-webview-handoff' } } }),\n                { status: 200, headers: { 'Content-Type': 'application/json' } }\n              ));\n            }\n          }\n        } catch (e0) {}\n        return origFetch(input, init);\n      };\n    }\n\n    function stamp() {\n      try {\n        sessionStorage.setItem('cdecli_oauth_state', state);\n        localStorage.setItem('cdecli_token', t);\n        sessionStorage.setItem('cdecli_token', t);\n        localStorage.setItem('cdecli_system_token', t);\n        localStorage.setItem('cdecli_token_meta', JSON.stringify({\n          backend: backend,\n          verifiedAt: Date.now(),\n          fp: fp\n        }));\n      } catch (e1) {}\n    }\n    stamp();\n    ${recovery}\n  } catch (e) {}\n  true;\n})();\ntrue;\n`;\n}\n\nexport function buildCdecliTokenInjection(token: string, backend: string, state: string): string {\n    return buildSurfaceHandoffScript(token, backend, state, false);\n}\n\nexport function buildSurfaceGateRecoveryScript(token: string, backend: string, state: string): string {\n    return buildSurfaceHandoffScript(token, backend, state, true);\n}\n"],"names":["_a","token"],"mappings":"uPAGA,MAAM,wBAA2B,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAOjC,MAAM,qBAAwB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAS9B,MAAM,sBAAyB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAO/B,MAAM,YAAe,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AASrB,MAAM,oBAAuB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAO7B,MAAM,uBAA0B,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQhC,MAAM,uBAA0B,GAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAWhC,SAAS,oBAAoB,GAAqB,EAAA;AAChD,EAAA,OAAO,GAAI,CAAA,IAAA,EAAO,CAAA,OAAA,CAAQ,OAAO,EAAE,CAAA;AACrC;AAGO,SAAS,6BAA6B,UAA6B,EAAA;AACxE,EAAM,MAAA,GAAA,GAAA,CAAM,UAAY,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAA,IAAA,EAAA,KAAU,MAAO,CAAA,WAAA;AACzC,EAAI,IAAA,EAAC,2BAAK,IAAQ,EAAA,CAAA,EAAA;AAChB,IAAM,MAAA,IAAI,MAAM,+BAA+B,CAAA;AAAA;AAEjD,EAAA,OAAO,oBAAoB,GAAG,CAAA;AAChC;AAGA,eAAe,QAAY,CAAA,UAAA,EAAoB,OAAiB,EAAA,KAAA,EAAe,SAA4D,EAAA;AAIzI,EAAM,MAAA,GAAA,GAAM,MAAM,KAAA,CAAM,UAAY,EAAA;AAAA,IAClC,MAAQ,EAAA,MAAA;AAAA,IACR,OAAS,EAAA;AAAA,MACP,CAAC,WAAY,CAAA,YAAY,GAAG,kBAAA;AAAA,MAC5B,CAAC,WAAA,CAAY,aAAa,GAAG,UAAU,OAAO,CAAA,CAAA;AAAA,MAC9C,CAAC,WAAY,CAAA,SAAS,GAAG,MAAA;AAAA,MACzB,CAAC,WAAA,CAAY,aAAa,GAAG,YAAa,CAAA;AAAA,KAC5C;AAAA,IACA,IAAA,EAAM,KAAK,SAAU,CAAA;AAAA,MACnB,KAAA;AAAA,MACA;AAAA,KACD;AAAA,GACF,CAAA;AACD,EAAI,IAAA,CAAC,IAAI,EAAI,EAAA;AACX,IAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAO,CAAA,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,IAAM,MAAA,IAAI,KAAM,CAAA,CAAA,aAAA,EAAgB,GAAI,CAAA,MAAM,CAAK,EAAA,EAAA,IAAA,CAAK,KAAM,CAAA,CAAA,EAAG,GAAG,CAAC,CAAE,CAAA,CAAA;AAAA;AAErE,EAAQ,OAAA,MAAM,IAAI,IAAK,EAAA;AACzB;AAwBA,MAAM,wBAA2B,GAAA,sCAAA;AACjC,MAAM,aAAgB,GAAA,mBAAA;AACtB,MAAM,YAAe,GAAA,+EAAA;AACrB,eAAe,iBAAA,CAAkB,YAAoB,OAIlD,EAAA;AAhIH,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAiIE,EAAA,MAAM,IAAO,GAAA,MAAM,QAIhB,CAAA,UAAA,EAAY,SAAS,sBAAsB,CAAA;AAC9C,EAAI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,MAAL,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,MAAQ,EAAA;AACvB,IAAM,MAAA,IAAI,QAAM,EAAK,GAAA,IAAA,CAAA,MAAA,CAAO,CAAC,CAAb,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAgB,YAAW,6BAA6B,CAAA;AAAA;AAE1E,EAAA,MAAM,YAAU,EAAK,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,IAAA,CAAA,IAAA,KAAL,mBAAW,oBAAX,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiC,KAAK,CAAE,CAAA,KAAA;AAzI1D,IAAAA,IAAAA,GAAAA;AAyI6D,IAAA,OAAA,CAAAA,GAAA,GAAA,CAAA,IAAA,IAAA,GAAA,MAAA,GAAA,CAAA,CAAG,IAAH,KAAA,IAAA,GAAA,MAAA,GAAAA,GAAS,CAAA,IAAA,EAAA;AAAA,GAApD,CAAA,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAA6D,IAA7D,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAmE,IAAU,EAAA,KAAA,EAAA;AAC7F,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,gIAAgI,CAAA;AAAA;AAElJ,EAAA,MAAM,QAAW,GAAA,MAAM,QAMpB,CAAA,UAAA,EAAY,SAAS,YAAc,EAAA;AAAA,IACpC;AAAA,GACD,CAAA;AACD,EAAI,IAAA,CAAA,EAAA,GAAA,QAAA,CAAS,MAAT,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,MAAQ,EAAA;AAC3B,IAAM,MAAA,IAAI,QAAM,EAAS,GAAA,QAAA,CAAA,MAAA,CAAO,CAAC,CAAjB,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAoB,YAAW,oBAAoB,CAAA;AAAA;AAErE,EAAM,MAAA,SAAA,GAAA,CAAA,CAAY,sCAAS,IAAT,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAe,gBAAf,IAA4B,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,KAA5B,IAAkC,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,CAAK,CAAE,CAAA,KAAA;AAzJ7D,IAAAA,IAAAA,GAAAA;AAyJgE,IAAA,OAAA,CAAAA,GAAA,GAAA,CAAA,IAAA,IAAA,GAAA,MAAA,GAAA,CAAA,CAAG,EAAH,KAAA,IAAA,GAAA,MAAA,GAAAA,GAAO,CAAA,IAAA,EAAA;AAAA,GAAnD,CAAA,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAA4D,EAA5D,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAgE,IAAU,EAAA,KAAA,EAAA;AAC5F,EAAA,IAAI,CAAC,SAAW,EAAA;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,CAA6C,0CAAA,EAAA,OAAO,CAAI,EAAA,CAAA,CAAA;AAAA;AAE1E,EAAA,MAAM,IAAO,GAAA,MAAM,QAIhB,CAAA,UAAA,EAAY,SAAS,oBAAsB,EAAA;AAAA,IAC5C;AAAA,GACD,CAAA;AACD,EAAI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,MAAL,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,MAAQ,EAAA;AACvB,IAAM,MAAA,IAAI,QAAM,EAAK,GAAA,IAAA,CAAA,MAAA,CAAO,CAAC,CAAb,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAgB,YAAW,2BAA2B,CAAA;AAAA;AAExE,EAAA,MAAM,qBAAmB,EAAK,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,IAAA,CAAA,IAAA,KAAL,mBAAW,kBAAX,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAA+B,KAAK,CAAE,CAAA,KAAA;AAvKjE,IAAAA,IAAAA,GAAAA;AAuKoE,IAAA,OAAA,CAAAA,GAAA,GAAA,CAAA,IAAA,IAAA,GAAA,MAAA,GAAA,CAAA,CAAG,EAAH,KAAA,IAAA,GAAA,MAAA,GAAAA,GAAO,CAAA,IAAA,EAAA;AAAA,GAAhD,CAAA,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAyD,EAAzD,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAA6D,IAAU,EAAA,KAAA,EAAA;AAChG,EAAA,IAAI,CAAC,gBAAkB,EAAA;AACrB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAyD,sDAAA,EAAA,SAAS,CAAI,EAAA,CAAA,CAAA;AAAA;AAExF,EAAO,OAAA;AAAA,IACL,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF;AACA,SAAS,wBAAwB,SAAyB,EAAA;AACxD,EAAA,IAAI,SAAc,KAAA,SAAA,IAAa,CAAC,SAAA,CAAU,MAAQ,EAAA;AAChD,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAI,IAAA,CAAC,OAAW,IAAA,SAAA,KAAc,wBAA0B,EAAA;AACtD,IAAM,MAAA,IAAI,MAAM,+FAA+F,CAAA;AAAA;AAEjH,EAAI,IAAA,CAAC,cAAc,IAAK,CAAA,SAAS,KAAK,CAAC,YAAA,CAAa,IAAK,CAAA,SAAS,CAAG,EAAA;AACnE,IAAM,MAAA,IAAI,MAAM,CAAmD,gDAAA,EAAA,SAAA,CAAU,MAAM,CAAG,EAAA,EAAE,CAAC,CAAE,CAAA,CAAA;AAAA;AAE/F;AACA,eAAsB,uBAAuB,KAA+D,EAAA;AA5L5G,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AA6LE,EAAM,MAAA,OAAA,GAAU,MAAM,gBAAiB,EAAA;AACvC,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAM,MAAA,UAAA,GAAa,4BAA6B,CAAA,KAAA,CAAM,UAAU,CAAA;AAChE,EAAA,IAAI,OAAS,EAAA;AAEX,IAAA,OAAA,CAAQ,IAAI,uCAAyC,EAAA,UAAA,EAAY,KAAM,CAAA,aAAA,GAAgB,qBAAqB,EAAE,CAAA;AAAA;AAEhH,EAAA,IAAI,OAAU,GAAA,CAAA,CAAA,EAAA,GAAA,KAAA,CAAM,OAAN,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAe,IAAU,EAAA,KAAA,EAAA;AACvC,EAAA,IAAI,SAAY,GAAA,CAAA,CAAA,EAAA,GAAA,KAAA,CAAM,SAAN,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,IAAU,EAAA,KAAA,EAAA;AAC3C,EAAA,IAAI,gBAAmB,GAAA,CAAA,CAAA,EAAA,GAAA,KAAA,CAAM,KAAN,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,IAAU,EAAA,KAAA,EAAA;AAC9C,EAAA,IAAI,MAAM,aAAe,EAAA;AACvB,IAAA,MAAM,KAAQ,GAAA,MAAM,iBAAkB,CAAA,UAAA,EAAY,OAAO,CAAA;AACzD,IAAA,OAAA,GAAU,KAAM,CAAA,OAAA;AAChB,IAAA,SAAA,GAAY,KAAM,CAAA,SAAA;AAClB,IAAA,gBAAA,GAAmB,KAAM,CAAA,gBAAA;AACzB,IAAA,IAAI,OAAS,EAAA;AAEX,MAAA,OAAA,CAAQ,IAAI,sCAAwC,EAAA;AAAA,QAClD,OAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA;AACH;AAEF,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,4DAAuD,CAAA;AAAA;AAEzE,EAAA,IAAI,CAAC,SAAW,EAAA;AACd,IAAM,MAAA,IAAI,MAAM,sEAAiE,CAAA;AAAA;AAEnF,EAAA,IAAI,CAAC,gBAAkB,EAAA;AACrB,IAAM,MAAA,IAAI,MAAM,2DAAsD,CAAA;AAAA;AAExE,EAAA,uBAAA,CAAwB,SAAS,CAAA;AAGjC,EAAI,IAAA;AACF,IAAA,MAAM,QAAW,GAAA,MAAM,QAIpB,CAAA,UAAA,EAAY,SAAS,wBAA0B,EAAA;AAAA,MAChD,KAAO,EAAA;AAAA,QACL,SAAA;AAAA,QACA,gBAAA;AAAA,QACA,OAAA;AAAA,QACA,kBAAA,EAAoB,CAAI,GAAA,EAAA,GAAK,EAAK,GAAA,EAAA;AAAA,QAClC,SAAW,EAAA;AAAA;AACb,KACD,CAAA;AACD,IAAA,MAAMC,UAAQ,EAAS,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,QAAA,CAAA,IAAA,KAAT,mBAAe,qBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAsC,UAAtC,IAA6C,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AAC3D,IAAA,IAAIA,MAAS,IAAA,EAAA,CAAC,EAAS,GAAA,QAAA,CAAA,MAAA,KAAT,mBAAiB,MAAQ,CAAA,EAAA;AACrC,MAAA,IAAI,OAAS,EAAA;AAEX,QAAQ,OAAA,CAAA,GAAA,CAAI,4CAA8CA,EAAAA,MAAAA,CAAM,MAAM,CAAA;AAAA;AAExE,MAAO,OAAA;AAAA,QACL,KAAAA,EAAAA,MAAAA;AAAA,QACA,OAAS,EAAA;AAAA,OACX;AAAA;AAEF,IAAI,IAAA,CAAA,EAAA,GAAA,QAAA,CAAS,MAAT,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAiB,MAAQ,EAAA;AAC3B,MAAM,MAAA,IAAI,QAAM,EAAS,GAAA,QAAA,CAAA,MAAA,CAAO,CAAC,CAAjB,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAoB,YAAW,8BAA8B,CAAA;AAAA;AAC/E,WACO,GAAK,EAAA;AACZ,IAAA,IAAI,OAAS,EAAA;AAEX,MAAQ,OAAA,CAAA,IAAA,CAAK,sEAAsE,GAAG,CAAA;AAAA;AAGxF,IAAA,MAAM,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAI,CAAA,OAAA,GAAU,OAAO,GAAG,CAAA;AAC3D,IAAI,IAAA,oCAAA,CAAqC,IAAK,CAAA,GAAG,CAAG,EAAA;AAClD,MAAA,MAAM,IAAI,KAAA,CAAM,CAAY,SAAA,EAAA,SAAS,CAAoF,kFAAA,CAAA,CAAA;AAAA;AAG3H,IAAA,IAAI,CAAC,yDAAA,CAA0D,IAAK,CAAA,GAAG,CAAG,EAAA;AAExE,MAAI,IAAA,qDAAA,CAAsD,IAAK,CAAA,GAAG,CAAG,EAAA;AACnE,QAAA,MAAM,GAAe,YAAA,KAAA,GAAQ,GAAM,GAAA,IAAI,MAAM,GAAG,CAAA;AAAA;AAClD;AACF;AAEF,EAAA,MAAM,SAAY,GAAA,MAAM,QAIrB,CAAA,UAAA,EAAY,SAAS,qBAAqB,CAAA;AAC7C,EAAI,IAAA,CAAA,EAAA,GAAA,SAAA,CAAU,MAAV,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkB,MAAQ,EAAA;AAC5B,IAAM,MAAA,IAAI,QAAM,EAAU,GAAA,SAAA,CAAA,MAAA,CAAO,CAAC,CAAlB,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAqB,YAAW,2BAA2B,CAAA;AAAA;AAE7E,EAAA,IAAI,WAAU,EAAU,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,SAAA,CAAA,IAAA,KAAV,mBAAgB,kBAAhB,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAoC,OAApC,IAA0C,GAAA,EAAA,GAAA,IAAA;AACxD,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAA,MAAM,YAAe,GAAA,MAAM,QAIxB,CAAA,UAAA,EAAY,SAAS,uBAAyB,EAAA;AAAA,MAC/C,KAAO,EAAA;AAAA,QACL,IAAM,EAAA,cAAA;AAAA,QACN,eAAiB,EAAA,OAAA;AAAA,QACjB,aAAe,EAAA,IAAA;AAAA,QACf,gBAAA;AAAA,QACA,OAAA;AAAA,QACA,SAAA;AAAA,QACA,SAAW,EAAA;AAAA;AACb,KACD,CAAA;AACD,IAAA,MAAM,cAAY,EAAa,GAAA,CAAA,EAAA,GAAA,YAAA,CAAA,MAAA,KAAb,IAAsB,GAAA,MAAA,GAAA,EAAA,CAAA,CAAA,CAAA,KAAtB,mBAA0B,OAAW,KAAA,EAAA;AACvD,IAAA,IAAI,SAAa,IAAA,CAAC,8BAA+B,CAAA,IAAA,CAAK,SAAS,CAAG,EAAA;AAChE,MAAI,IAAA,kBAAA,CAAmB,IAAK,CAAA,SAAS,CAAG,EAAA;AACtC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAY,SAAA,EAAA,SAAS,CAAoF,kFAAA,CAAA,CAAA;AAAA;AAE3H,MAAM,MAAA,IAAI,MAAM,SAAS,CAAA;AAAA;AAE3B,IAAA,IAAA,CAAI,EAAa,GAAA,CAAA,EAAA,GAAA,YAAA,CAAA,IAAA,KAAb,IAAmB,GAAA,MAAA,GAAA,EAAA,CAAA,oBAAA,KAAnB,mBAAyC,EAAI,EAAA;AAC/C,MAAU,OAAA,GAAA,YAAA,CAAa,KAAK,oBAAqB,CAAA,EAAA;AAAA,KAC5C,MAAA;AACL,MAAA,MAAM,OAAU,GAAA,MAAM,QAInB,CAAA,UAAA,EAAY,SAAS,qBAAqB,CAAA;AAC7C,MAAA,OAAA,GAAA,CAAU,yBAAQ,IAAR,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAc,kBAAd,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkC,OAAlC,IAAwC,GAAA,EAAA,GAAA,IAAA;AAAA;AACpD;AAEF,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAM,MAAA,IAAI,MAAM,6DAAwD,CAAA;AAAA;AAE1E,EAAA,MAAM,MAAS,GAAA,MAAM,QAElB,CAAA,UAAA,EAAY,SAAS,uBAAyB,EAAA;AAAA,IAC/C,EAAI,EAAA;AAAA,GACL,CAAA;AACD,EAAI,IAAA,CAAA,EAAA,GAAA,MAAA,CAAO,MAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAe,MAAQ,EAAA;AACzB,IAAM,MAAA,IAAI,QAAM,EAAO,GAAA,MAAA,CAAA,MAAA,CAAO,CAAC,CAAf,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkB,YAAW,6BAA6B,CAAA;AAAA;AAE5E,EAAA,MAAM,KAAQ,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,MAAA,CAAO,IAAP,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,yBAAb,IAAmC,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,EAAA;AACjD,EAAA,IAAI,CAAC,KAAO,EAAA;AACV,IAAM,MAAA,IAAI,MAAM,2CAA2C,CAAA;AAAA;AAE7D,EAAA,IAAI,OAAS,EAAA;AAEX,IAAQ,OAAA,CAAA,GAAA,CAAI,0CAA4C,EAAA,KAAA,CAAM,MAAM,CAAA;AAAA;AAEtE,EAAO,OAAA;AAAA,IACL,KAAA;AAAA,IACA,OAAS,EAAA;AAAA,GACX;AACF;AACgB,SAAA,uBAAA,CAAwB,OAAiB,EAAA,KAAA,EAAe,KAAuB,EAAA;AAC7F,EAAI,IAAA;AACF,IAAM,MAAA,GAAA,GAAM,IAAI,GAAA,CAAI,OAAO,CAAA;AAC3B,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,OAAA,EAAS,KAAK,CAAA;AACnC,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,MAAA,EAAQ,KAAK,CAAA;AAClC,IAAI,GAAA,CAAA,YAAA,CAAa,GAAI,CAAA,OAAA,EAAS,KAAK,CAAA;AACnC,IAAA,OAAO,IAAI,QAAS,EAAA;AAAA,GACd,CAAA,OAAA,CAAA,EAAA;AACN,IAAA,MAAM,GAAM,GAAA,OAAA,CAAQ,QAAS,CAAA,GAAG,IAAI,GAAM,GAAA,GAAA;AAC1C,IAAA,OAAO,CAAG,EAAA,OAAO,CAAG,EAAA,GAAG,SAAS,kBAAmB,CAAA,KAAK,CAAC,CAAA,MAAA,EAAS,mBAAmB,KAAK,CAAC,CAAU,OAAA,EAAA,kBAAA,CAAmB,KAAK,CAAC,CAAA,CAAA;AAAA;AAElI;AACA,SAAS,iBAAiB,KAAuB,EAAA;AAhWjD,EAAA,IAAA,EAAA;AAiWE,EAAA,MAAM,OAAM,EAAM,GAAA,KAAA,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,CAAC,MAAlB,IAAuB,GAAA,EAAA,GAAA,KAAA;AACnC,EAAO,OAAA,GAAA,CAAI,MAAM,GAAG,CAAA;AACtB;AAGA,SAAS,yBAA0B,CAAA,KAAA,EAAe,OAAiB,EAAA,KAAA,EAAe,gBAAmC,EAAA;AACnH,EAAM,MAAA,SAAA,GAAY,IAAK,CAAA,SAAA,CAAU,KAAK,CAAA;AACtC,EAAM,MAAA,WAAA,GAAc,IAAK,CAAA,SAAA,CAAU,OAAO,CAAA;AAC1C,EAAM,MAAA,SAAA,GAAY,IAAK,CAAA,SAAA,CAAU,KAAK,CAAA;AACtC,EAAA,MAAM,EAAK,GAAA,IAAA,CAAK,SAAU,CAAA,gBAAA,CAAiB,KAAK,CAAC,CAAA;AACjD,EAAA,MAAM,WAAW,gBAAmB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAoBlC,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQF,EAAO,OAAA;AAAA;AAAA;AAAA,YAAA,EAGK,SAAS,CAAA;AAAA,kBAAA,EACH,WAAW,CAAA;AAAA,gBAAA,EACb,SAAS,CAAA;AAAA,aAAA,EACZ,EAAE,CAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,EA8CX,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAMd;AACgB,SAAA,yBAAA,CAA0B,KAAe,EAAA,OAAA,EAAiB,KAAuB,EAAA;AAC/F,EAAA,OAAO,yBAA0B,CAAA,KAAA,EAAO,OAAS,EAAA,KAAA,EAAO,KAAK,CAAA;AAC/D;AACgB,SAAA,8BAAA,CAA+B,KAAe,EAAA,OAAA,EAAiB,KAAuB,EAAA;AACpG,EAAA,OAAO,yBAA0B,CAAA,KAAA,EAAO,OAAS,EAAA,KAAA,EAAO,IAAI,CAAA;AAC9D"}

package/lib/hooks/resolveSurfaceAuthGraphqlUrl.js

@@ -0,0 +1,48 @@
+const DEFAULT_CANVAS_HARNESS_BACKEND = "https://ideback.yantra-app-v1.cdebase.dev/graphql";
+function normalizeGraphqlUrl(url) {
+  return url.trim().replace(/\/$/, "");
+}
+function isLoopbackOrPrivateHost(hostname) {
+  const host = hostname.toLowerCase();
+  if (host === "localhost" || host === "127.0.0.1" || host === "::1") return true;
+  if (/^10\./.test(host)) return true;
+  if (/^192\.168\./.test(host)) return true;
+  if (/^172\.(1[6-9]|2\d|3[0-1])\./.test(host)) return true;
+  return false;
+}
+function hostnameOf(url) {
+  try {
+    return new URL(url).hostname;
+  } catch (e) {
+    return "";
+  }
+}
+function isCanvasSurfaceUrl(surfaceUrl, canvasSurfaceUrl) {
+  try {
+    const u = new URL(surfaceUrl);
+    if (u.hostname.toLowerCase().startsWith("canvas-surface.")) return true;
+    if (u.port === "5175" || u.port === "4175") return true;
+    const configured = canvasSurfaceUrl == null ? void 0 : canvasSurfaceUrl.trim();
+    if (configured) {
+      const c = new URL(configured);
+      if (u.origin === c.origin) return true;
+    }
+  } catch (e) {
+    return /canvas-surface/i.test(surfaceUrl);
+  }
+  return false;
+}
+function resolveSurfaceAuthGraphqlUrl(surfaceUrl, appGraphqlUrl, cfg = {}) {
+  var _a;
+  const app = normalizeGraphqlUrl(appGraphqlUrl);
+  if (!isCanvasSurfaceUrl(surfaceUrl, cfg.CANVAS_SURFACE_URL)) return app;
+  try {
+    const u = new URL(surfaceUrl);
+    const m = u.hostname.match(/^[a-z0-9-]+-surface\.(.+)$/i);
+    if (m) return normalizeGraphqlUrl(`${u.protocol}//ideback.${m[1]}/graphql`);
+  } catch (e) {
+  }
+  if (!isLoopbackOrPrivateHost(hostnameOf(app))) return app;
+  const harness = ((_a = cfg.CANVAS_BACKEND_GRAPHQL_URL) == null ? void 0 : _a.trim()) || DEFAULT_CANVAS_HARNESS_BACKEND;
+  return normalizeGraphqlUrl(harness);
+}export{isCanvasSurfaceUrl,resolveSurfaceAuthGraphqlUrl};//# sourceMappingURL=resolveSurfaceAuthGraphqlUrl.js.map

package/lib/hooks/resolveSurfaceAuthGraphqlUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSurfaceAuthGraphqlUrl.js","sources":["../../src/hooks/resolveSurfaceAuthGraphqlUrl.ts"],"sourcesContent":["/**\n * Which GraphQL backend to mint the WebView system JWT against.\n *\n * Canvas local harness (`packages/canvas/.env.development`) pins\n * `VITE_SURFACE_INDEX_URL` at surface-index-backend.yantra-app-v1 and\n * `VITE_BACKEND_GRAPHQL_URL` at ideback.yantra-app-v1. The index verifies\n * JWTs with that cluster's SECRET_API_TOKEN_* keys, so a token minted\n * against local GRAPHQL_URL 401s as `{\"message\":\"Unauthorized\"}`.\n */\n\nexport type SurfaceAuthUrlConfig = {\n    CANVAS_SURFACE_URL?: string;\n    CANVAS_BACKEND_GRAPHQL_URL?: string;\n};\n\nconst DEFAULT_CANVAS_HARNESS_BACKEND = 'https://ideback.yantra-app-v1.cdebase.dev/graphql';\n\nfunction normalizeGraphqlUrl(url: string): string {\n    return url.trim().replace(/\\/$/, '');\n}\n\nfunction isLoopbackOrPrivateHost(hostname: string): boolean {\n    const host = hostname.toLowerCase();\n    if (host === 'localhost' || host === '127.0.0.1' || host === '::1') return true;\n    if (/^10\\./.test(host)) return true;\n    if (/^192\\.168\\./.test(host)) return true;\n    if (/^172\\.(1[6-9]|2\\d|3[0-1])\\./.test(host)) return true;\n    return false;\n}\n\nfunction hostnameOf(url: string): string {\n    try {\n        return new URL(url).hostname;\n    } catch {\n        return '';\n    }\n}\n\n/**\n * True when `surfaceUrl` is the canvas SPA (local harness or deployed\n * `canvas-surface.*`). Web Builder is 5174/4174; canvas vite is 5175/4175.\n */\nexport function isCanvasSurfaceUrl(surfaceUrl: string, canvasSurfaceUrl?: string): boolean {\n    try {\n        const u = new URL(surfaceUrl);\n        if (u.hostname.toLowerCase().startsWith('canvas-surface.')) return true;\n        if (u.port === '5175' || u.port === '4175') return true;\n        const configured = canvasSurfaceUrl?.trim();\n        if (configured) {\n            const c = new URL(configured);\n            if (u.origin === c.origin) return true;\n        }\n    } catch {\n        return /canvas-surface/i.test(surfaceUrl);\n    }\n    return false;\n}\n\nexport function resolveSurfaceAuthGraphqlUrl(\n    surfaceUrl: string,\n    appGraphqlUrl: string,\n    cfg: SurfaceAuthUrlConfig = {},\n): string {\n    const app = normalizeGraphqlUrl(appGraphqlUrl);\n    if (!isCanvasSurfaceUrl(surfaceUrl, cfg.CANVAS_SURFACE_URL)) return app;\n\n    try {\n        const u = new URL(surfaceUrl);\n        const m = u.hostname.match(/^[a-z0-9-]+-surface\\.(.+)$/i);\n        if (m) return normalizeGraphqlUrl(`${u.protocol}//ideback.${m[1]}/graphql`);\n    } catch {\n        /* localhost / unparseable — fall through */\n    }\n\n    if (!isLoopbackOrPrivateHost(hostnameOf(app))) return app;\n\n    const harness = cfg.CANVAS_BACKEND_GRAPHQL_URL?.trim() || DEFAULT_CANVAS_HARNESS_BACKEND;\n    return normalizeGraphqlUrl(harness);\n}\n"],"names":[],"mappings":"AAcA,MAAM,8BAAiC,GAAA,mDAAA;AACvC,SAAS,oBAAoB,GAAqB,EAAA;AAChD,EAAA,OAAO,GAAI,CAAA,IAAA,EAAO,CAAA,OAAA,CAAQ,OAAO,EAAE,CAAA;AACrC;AACA,SAAS,wBAAwB,QAA2B,EAAA;AAC1D,EAAM,MAAA,IAAA,GAAO,SAAS,WAAY,EAAA;AAClC,EAAA,IAAI,SAAS,WAAe,IAAA,IAAA,KAAS,WAAe,IAAA,IAAA,KAAS,OAAc,OAAA,IAAA;AAC3E,EAAA,IAAI,OAAQ,CAAA,IAAA,CAAK,IAAI,CAAA,EAAU,OAAA,IAAA;AAC/B,EAAA,IAAI,aAAc,CAAA,IAAA,CAAK,IAAI,CAAA,EAAU,OAAA,IAAA;AACrC,EAAA,IAAI,6BAA8B,CAAA,IAAA,CAAK,IAAI,CAAA,EAAU,OAAA,IAAA;AACrD,EAAO,OAAA,KAAA;AACT;AACA,SAAS,WAAW,GAAqB,EAAA;AACvC,EAAI,IAAA;AACF,IAAO,OAAA,IAAI,GAAI,CAAA,GAAG,CAAE,CAAA,QAAA;AAAA,GACd,CAAA,OAAA,CAAA,EAAA;AACN,IAAO,OAAA,EAAA;AAAA;AAEX;AAMgB,SAAA,kBAAA,CAAmB,YAAoB,gBAAoC,EAAA;AACzF,EAAI,IAAA;AACF,IAAM,MAAA,CAAA,GAAI,IAAI,GAAA,CAAI,UAAU,CAAA;AAC5B,IAAA,IAAI,EAAE,QAAS,CAAA,WAAA,GAAc,UAAW,CAAA,iBAAiB,GAAU,OAAA,IAAA;AACnE,IAAA,IAAI,EAAE,IAAS,KAAA,MAAA,IAAU,CAAE,CAAA,IAAA,KAAS,QAAe,OAAA,IAAA;AACnD,IAAA,MAAM,aAAa,gBAAkB,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,gBAAA,CAAA,IAAA,EAAA;AACrC,IAAA,IAAI,UAAY,EAAA;AACd,MAAM,MAAA,CAAA,GAAI,IAAI,GAAA,CAAI,UAAU,CAAA;AAC5B,MAAA,IAAI,CAAE,CAAA,MAAA,KAAW,CAAE,CAAA,MAAA,EAAe,OAAA,IAAA;AAAA;AACpC,GACM,CAAA,OAAA,CAAA,EAAA;AACN,IAAO,OAAA,iBAAA,CAAkB,KAAK,UAAU,CAAA;AAAA;AAE1C,EAAO,OAAA,KAAA;AACT;AACO,SAAS,4BAA6B,CAAA,UAAA,EAAoB,aAAuB,EAAA,GAAA,GAA4B,EAAY,EAAA;AArDhI,EAAA,IAAA,EAAA;AAsDE,EAAM,MAAA,GAAA,GAAM,oBAAoB,aAAa,CAAA;AAC7C,EAAA,IAAI,CAAC,kBAAmB,CAAA,UAAA,EAAY,GAAI,CAAA,kBAAkB,GAAU,OAAA,GAAA;AACpE,EAAI,IAAA;AACF,IAAM,MAAA,CAAA,GAAI,IAAI,GAAA,CAAI,UAAU,CAAA;AAC5B,IAAA,MAAM,CAAI,GAAA,CAAA,CAAE,QAAS,CAAA,KAAA,CAAM,6BAA6B,CAAA;AACxD,IAAI,IAAA,CAAA,EAAU,OAAA,mBAAA,CAAoB,CAAG,EAAA,CAAA,CAAE,QAAQ,CAAa,UAAA,EAAA,CAAA,CAAE,CAAC,CAAC,CAAU,QAAA,CAAA,CAAA;AAAA,GACpE,CAAA,OAAA,CAAA,EAAA;AAAA;AAGR,EAAA,IAAI,CAAC,uBAAwB,CAAA,UAAA,CAAW,GAAG,CAAC,GAAU,OAAA,GAAA;AACtD,EAAA,MAAM,OAAU,GAAA,CAAA,CAAA,EAAA,GAAA,GAAA,CAAI,0BAAJ,KAAA,IAAA,GAAA,MAAA,GAAA,EAAA,CAAgC,IAAU,EAAA,KAAA,8BAAA;AAC1D,EAAA,OAAO,oBAAoB,OAAO,CAAA;AACpC"}

package/lib/hooks/useCdecliChannel.js

@@ -96,7 +96,7 @@ function useCdecliChannel(isConnected, accountId, channelId, callbacks, model, s
       cbRef.current.onError(err.message || "CDeCLI subscription error");
     }
   });
-  const sendMessage = useCallback(async (text, chatId = "messenger") => {
+  const sendMessage = useCallback(async (text, chatId = "messenger", media = []) => {
     var _a;
     if (!isConnected) return false;
     pendingRef.current = {
@@ -110,12 +110,14 @@ function useCdecliChannel(isConnected, accountId, channelId, callbacks, model, s
     try {
       const result = await sendMutation({
         variables: {
-          input: __spreadValues({
+          input: __spreadValues(__spreadValues({
             channelType: "cdecli-serve",
             accountId,
             chatId,
             text
-          }, model || skill ? {
+          }, media.length > 0 ? {
+            media
+          } : {}), model || skill ? {
             metadata: __spreadValues(__spreadValues({}, model && {
               model
             }), skill && {