@agent-native/core 0.11.2 → 0.11.4

package/dist/client/settings/useBuilderStatus.d.ts

@@ -11,6 +11,8 @@ export interface BuilderStatus {
     connectUrl: string;
     appHost: string;
     apiHost: string;
+    branchProjectIdConfigured?: boolean;
+    branchProjectId?: string;
     publicKeyConfigured: boolean;
     privateKeyConfigured: boolean;
     userId?: string;
@@ -52,9 +54,9 @@ export interface BuilderConnectFlow {
      */
     envManaged: boolean;
     /**
-     * True when ENABLE_BUILDER (or a BUILDER_BRANCH_PROJECT_ID) is set on the
-     * deploy, gating Builder cloud branch creation. When false, the card
-     * surfaces a "coming soon" waitlist CTA instead of a Send button.
+     * True when the server has a Builder branch project configured for this
+     * request. When false, the card surfaces a waitlist CTA instead of a Send
+     * button.
      */
     builderEnabled: boolean;
     orgName: string | null;

package/dist/client/settings/useBuilderStatus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBuilderStatus.d.ts","sourceRoot":"","sources":["../../../src/client/settings/useBuilderStatus.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB;;;;EA4C/B;AAkBD,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;;;;;OAOG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oFAAoF;IACpF,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAcD,wBAAgB,qBAAqB,CACnC,IAAI,GAAE,yBAA8B,GACnC,kBAAkB,CAuNpB"}
+{"version":3,"file":"useBuilderStatus.d.ts","sourceRoot":"","sources":["../../../src/client/settings/useBuilderStatus.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB;;;;EA4C/B;AAkBD,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;;;;;OAOG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oFAAoF;IACpF,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAcD,wBAAgB,qBAAqB,CACnC,IAAI,GAAE,yBAA8B,GACnC,kBAAkB,CAuOpB"}

package/dist/client/settings/useBuilderStatus.js

@@ -65,6 +65,11 @@ export function useBuilderConnectFlow(opts = {}) {
     const [error, setError] = useState(null);
     const [hasFetchedStatus, setHasFetchedStatus] = useState(false);
     const [statusConnectUrl, setStatusConnectUrl] = useState(null);
+    // When statusConnectUrl was last fetched. The server signs the embedded
+    // _an_connect token with a 10-minute TTL; using an older URL silently
+    // fails the same-origin check on the popup side. Track freshness so
+    // start() can fall back to the bare /builder/connect path when stale.
+    const statusConnectUrlAtRef = useRef(null);
     const pollRef = useRef(null);
     const mountedRef = useRef(true);
     const notifiedConnectedRef = useRef(false);
@@ -112,6 +117,7 @@ export function useBuilderConnectFlow(opts = {}) {
             setEnvManaged(!!s.envManaged);
             setBuilderEnabled(!!s.builderEnabled);
             setStatusConnectUrl(s.connectUrl ?? null);
+            statusConnectUrlAtRef.current = s.connectUrl ? Date.now() : null;
             const org = s.orgName ?? null;
             setOrgName(org);
             if (s.configured && !notifiedConnectedRef.current) {
@@ -158,7 +164,15 @@ export function useBuilderConnectFlow(opts = {}) {
         // before window.open lets the user-gesture token expire, which causes
         // popup blockers to block entirely or fall back to same-tab navigation.
         const origin = getCallbackOrigin() || window.location.origin;
-        const url = statusConnectUrl ??
+        // The signed _an_connect token in statusConnectUrl has a 10-minute TTL.
+        // If the panel has been open longer than that the token is dead and the
+        // popup will silently 403; drop the cached URL and let the bare /connect
+        // route do the same-origin Sec-Fetch-Site check instead.
+        const STATUS_CONNECT_URL_TTL_MS = 9 * 60 * 1000;
+        const cachedAt = statusConnectUrlAtRef.current;
+        const cachedFresh = typeof cachedAt === "number" &&
+            Date.now() - cachedAt < STATUS_CONNECT_URL_TTL_MS;
+        const url = (cachedFresh ? statusConnectUrl : null) ??
             popupUrl ??
             new URL(agentNativePath("/_agent-native/builder/connect"), origin).href;
         try {
@@ -181,6 +195,7 @@ export function useBuilderConnectFlow(opts = {}) {
                 setEnvManaged(!!s.envManaged);
                 setBuilderEnabled(!!s.builderEnabled);
                 setStatusConnectUrl(s.connectUrl ?? null);
+                statusConnectUrlAtRef.current = s.connectUrl ? Date.now() : null;
                 const org = s.orgName ?? null;
                 setOrgName(org);
                 setConnecting(false);

package/dist/client/settings/useBuilderStatus.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBuilderStatus.js","sourceRoot":"","sources":["../../../src/client/settings/useBuilderStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AA4BhD;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAuB,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,WAAW,EAAE,CAAC;QAEd,SAAS,OAAO;YACd,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,SAAS,YAAY;YACnB,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,WAAW,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAC5D,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;QACxE,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;YAC/D,MAAM,CAAC,mBAAmB,CACxB,iCAAiC,EACjC,WAAW,CACZ,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACnD,CAAC;AAuDD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,SAAS,kCAAkC,CAAC,MAAc;IACxD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,iCAAiC,EAAE;QACjD,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAkC,EAAE;IAEpC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,CAAwC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IAErC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,KAAK,CACnB,IAAI,GAAG,CAAC,eAAe,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CACvE,CAAC;YACF,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAOrB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,qEAAqE;IACrE,oDAAoD;IACpD,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,SAAS,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,OAAO;YAC7C,oEAAoE;YACpE,oEAAoE;YACpE,iEAAiE;YACjE,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9B,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9B,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YACtC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;YAC9B,UAAU,CAAC,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;gBAClD,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpC,kCAAkC,CAAC,gBAAgB,CAAC,CAAC;gBACrD,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBACzB,oBAAoB,CAAC,OAAO,GAAG,KAAK,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,OAAO,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;QACxD,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;YAC3B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC5D,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;YACvE,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE5B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,uEAAuE;QACvE,qEAAqE;QACrE,+CAA+C;QAC/C,IAAI,UAAU;YAAE,OAAO;QACvB,QAAQ,EAAE,CAAC;QACX,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,mEAAmE;QACnE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7D,MAAM,GAAG,GACP,gBAAgB;YAChB,QAAQ;YACR,IAAI,GAAG,CAAC,eAAe,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,4BAA4B;QAC9B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,QAAQ,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;gBAClB,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,IAAI,CAAC,CAAC;gBACpB,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC9B,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;gBACtC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;gBAC1C,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;gBAC9B,UAAU,CAAC,GAAG,CAAC,CAAC;gBAChB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpC,kCAAkC,CAAC,iBAAiB,CAAC,CAAC;gBACtD,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,iEAAiE;oBACjE,qDAAqD;gBACvD,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;gBACpC,qEAAqE;gBACrE,qEAAqE;gBACrE,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CACN,sCAAsC,CAAC,CAAC,YAAY,CAAC,OAAO,iCAAiC,CAC9F,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,eAAe,EAAE,CAAC;gBAClD,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CACN,yEAAyE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEpE,uEAAuE;IACvE,gEAAgE;IAChE,EAAE;IACF,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,iFAAiF;IACjF,8CAA8C;IAC9C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,GAA4B,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE;YACtC,QAAQ,EAAE,CAAC;YACX,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,QAAQ,CAAC,sCAAsC,OAAO,GAAG,CAAC,CAAC;QAC7D,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,gBAAgB,CAAC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,SAAS,GAAG,CAAC,CAAe,EAAE,EAAE;gBACtC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuD,CAAC;gBACvE,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;oBAAE,OAAO;gBACnD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAO;gBAC9D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,CAAe,EAAE,EAAE;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO;YAChD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuD,CAAC;YACvE,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;gBAAE,OAAO;YACnD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO;YAC9D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE5C,OAAO,GAAG,EAAE;YACV,OAAO,EAAE,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,OAAO;QACL,UAAU;QACV,UAAU;QACV,cAAc;QACd,OAAO;QACP,UAAU;QACV,KAAK;QACL,gBAAgB;QAChB,KAAK;KACN,CAAC;AACJ,CAAC","sourcesContent":["import { agentNativePath } from \"../api-path.js\";\nimport { useState, useEffect, useCallback, useRef } from \"react\";\nimport { getCallbackOrigin } from \"../frame.js\";\n\nexport interface BuilderStatus {\n  configured: boolean;\n  builderEnabled: boolean;\n  /**\n   * True when `BUILDER_PRIVATE_KEY` is set at the deploy level. Every user\n   * of this deploy shares the operator's Builder identity and per-user\n   * connect/disconnect is disabled. UIs must hide connect prompts and\n   * disconnect buttons when this is true.\n   */\n  envManaged?: boolean;\n  connectUrl: string;\n  appHost: string;\n  apiHost: string;\n  publicKeyConfigured: boolean;\n  privateKeyConfigured: boolean;\n  userId?: string;\n  orgName?: string;\n  orgKind?: string;\n  /**\n   * Set when the OAuth callback ran but failed to persist credentials.\n   * Surfaced as a one-shot row by the server so the connect-flow polling\n   * can stop with a clear message instead of timing out at 5min.\n   */\n  connectError?: { message: string; at: number };\n}\n\n/**\n * Fetches Builder connection status from /_agent-native/builder/status.\n * Re-fetches on window focus to detect post-redirect state changes.\n */\nexport function useBuilderStatus() {\n  const [status, setStatus] = useState<BuilderStatus | null>(null);\n  const [loading, setLoading] = useState(true);\n\n  const fetchStatus = useCallback(async () => {\n    try {\n      const res = await fetch(agentNativePath(\"/_agent-native/builder/status\"));\n      if (!res.ok) {\n        setStatus(null);\n        return;\n      }\n      setStatus(await res.json());\n    } catch {\n      setStatus(null);\n    } finally {\n      setLoading(false);\n    }\n  }, []);\n\n  useEffect(() => {\n    fetchStatus();\n\n    function onFocus() {\n      fetchStatus();\n    }\n    function onVisibility() {\n      if (document.visibilityState === \"visible\") fetchStatus();\n    }\n    window.addEventListener(\"focus\", onFocus);\n    document.addEventListener(\"visibilitychange\", onVisibility);\n    // Engine connect/disconnect actions (e.g. the Builder disconnect button)\n    // dispatch this event so dependent cards refresh without a full reload.\n    window.addEventListener(\"agent-engine:configured-changed\", fetchStatus);\n    return () => {\n      window.removeEventListener(\"focus\", onFocus);\n      document.removeEventListener(\"visibilitychange\", onVisibility);\n      window.removeEventListener(\n        \"agent-engine:configured-changed\",\n        fetchStatus,\n      );\n    };\n  }, [fetchStatus]);\n\n  return { status, loading, refetch: fetchStatus };\n}\n\n// ─── useBuilderConnectFlow ──────────────────────────────────────────────────\n//\n// Shared state machine for the \"open Builder CLI-auth popup + poll\n// /builder/status until credentials land\" interaction. Replaces three\n// near-duplicate inline implementations: `BuilderCliAuthMethod` in\n// OnboardingPanel, `ConnectBuilderCard`, and `BuilderConnectCta` in\n// AssistantChat. Each consumer supplies its own popup URL / completion\n// behavior; the hook owns the polling + timeout + focus refresh.\n//\n// `popupUrl` is what we pass to `window.open`. The default\n// `/_agent-native/builder/connect` is a server-side 302 to the real\n// cli-auth URL — using it keeps the click handler synchronous so popup\n// blockers don't downgrade the open to same-tab navigation. Pass an\n// explicit `popupUrl` (e.g. the already-computed cli-auth URL) if your\n// caller already has it in hand.\n\nexport interface BuilderConnectFlowOptions {\n  /** URL to synchronously open on start(). Defaults to the 302 shortcut. */\n  popupUrl?: string;\n  /** Invoked after the status poll first sees `configured: true`. */\n  onConnected?: (state: { orgName: string | null }) => void | Promise<void>;\n}\n\nexport interface BuilderConnectFlow {\n  configured: boolean;\n  /**\n   * True when the deploy has BUILDER_PRIVATE_KEY set. UIs should treat\n   * Builder as connected for everyone in this mode and hide all connect /\n   * disconnect controls — `start()` will be a no-op.\n   */\n  envManaged: boolean;\n  /**\n   * True when ENABLE_BUILDER (or a BUILDER_BRANCH_PROJECT_ID) is set on the\n   * deploy, gating Builder cloud branch creation. When false, the card\n   * surfaces a \"coming soon\" waitlist CTA instead of a Send button.\n   */\n  builderEnabled: boolean;\n  orgName: string | null;\n  connecting: boolean;\n  error: string | null;\n  /**\n   * True once the first `/builder/status` fetch has completed (successfully\n   * or not). Consumers that accept an `initialConfigured` prop (e.g. agent\n   * tool-call results rendered with server-side state) should treat\n   * `configured`/`orgName` as authoritative only once this flips true —\n   * otherwise the hook's starting `false` defaults would cause a flash\n   * back to \"Connect Builder\" on first paint.\n   */\n  hasFetchedStatus: boolean;\n  /** Open the popup and begin polling. Must be called from a user-gesture handler. */\n  start: () => void;\n}\n\nconst POLL_INTERVAL_MS = 2000;\nconst POLL_TIMEOUT_MS = 5 * 60 * 1000;\n\nfunction notifyAgentEngineConfiguredChanged(source: string) {\n  if (typeof window === \"undefined\") return;\n  window.dispatchEvent(\n    new CustomEvent(\"agent-engine:configured-changed\", {\n      detail: { source },\n    }),\n  );\n}\n\nexport function useBuilderConnectFlow(\n  opts: BuilderConnectFlowOptions = {},\n): BuilderConnectFlow {\n  const { popupUrl, onConnected } = opts;\n  const [configured, setConfigured] = useState(false);\n  const [envManaged, setEnvManaged] = useState(false);\n  const [builderEnabled, setBuilderEnabled] = useState(false);\n  const [orgName, setOrgName] = useState<string | null>(null);\n  const [connecting, setConnecting] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [hasFetchedStatus, setHasFetchedStatus] = useState(false);\n  const [statusConnectUrl, setStatusConnectUrl] = useState<string | null>(null);\n  const pollRef = useRef<ReturnType<typeof setInterval> | null>(null);\n  const mountedRef = useRef(true);\n  const notifiedConnectedRef = useRef(false);\n  // Keep onConnected in a ref so start() doesn't need to re-create when the\n  // caller passes an inline arrow function.\n  const onConnectedRef = useRef(onConnected);\n  onConnectedRef.current = onConnected;\n\n  const stopPoll = useCallback(() => {\n    if (pollRef.current) {\n      clearInterval(pollRef.current);\n      pollRef.current = null;\n    }\n  }, []);\n\n  const fetchStatus = useCallback(async () => {\n    const origin = getCallbackOrigin() || window.location.origin;\n    try {\n      const r = await fetch(\n        new URL(agentNativePath(\"/_agent-native/builder/status\"), origin).href,\n      );\n      if (!r.ok) return null;\n      return (await r.json()) as {\n        configured: boolean;\n        envManaged?: boolean;\n        builderEnabled?: boolean;\n        orgName?: string | null;\n        connectUrl?: string;\n        connectError?: { message: string; at: number };\n      };\n    } catch {\n      return null;\n    }\n  }, []);\n\n  // Initial fetch + focus/visibility refresh so if the user completed the\n  // flow in another tab (or a downgraded same-tab nav) we notice it. Also\n  // listen for `agent-engine:configured-changed` so a Disconnect click in\n  // Settings propagates to any connect-CTA cards rendered elsewhere in\n  // the app without waiting for the next focus event.\n  useEffect(() => {\n    mountedRef.current = true;\n    let cancelled = false;\n    const refresh = async () => {\n      const s = await fetchStatus();\n      if (cancelled || !mountedRef.current) return;\n      // Flip `hasFetchedStatus` even when the fetch failed — the caller's\n      // \"use initial props until the hook has an answer\" pattern wants to\n      // stop waiting after we've tried, regardless of network outcome.\n      setHasFetchedStatus(true);\n      if (!s) return;\n      setConfigured(!!s.configured);\n      setEnvManaged(!!s.envManaged);\n      setBuilderEnabled(!!s.builderEnabled);\n      setStatusConnectUrl(s.connectUrl ?? null);\n      const org = s.orgName ?? null;\n      setOrgName(org);\n      if (s.configured && !notifiedConnectedRef.current) {\n        notifiedConnectedRef.current = true;\n        notifyAgentEngineConfiguredChanged(\"builder-status\");\n        try {\n          await onConnectedRef.current?.({ orgName: org });\n        } catch {\n          // The caller's callback is a UI convenience; status is already set.\n        }\n      } else if (!s.configured) {\n        notifiedConnectedRef.current = false;\n      }\n    };\n    refresh();\n    const onVisible = () => {\n      if (document.visibilityState === \"visible\") refresh();\n    };\n    window.addEventListener(\"focus\", refresh);\n    document.addEventListener(\"visibilitychange\", onVisible);\n    window.addEventListener(\"agent-engine:configured-changed\", refresh);\n    return () => {\n      cancelled = true;\n      mountedRef.current = false;\n      window.removeEventListener(\"focus\", refresh);\n      document.removeEventListener(\"visibilitychange\", onVisible);\n      window.removeEventListener(\"agent-engine:configured-changed\", refresh);\n      stopPoll();\n    };\n  }, [fetchStatus, stopPoll]);\n\n  const start = useCallback(() => {\n    // In env-managed mode, per-user OAuth is disabled — `/builder/connect`\n    // returns 409. Skip the popup and just refresh state so the UI flips\n    // to its \"connected via deployment\" rendering.\n    if (envManaged) return;\n    stopPoll();\n    setConnecting(true);\n    setError(null);\n\n    // Open SYNCHRONOUSLY inside the caller's click handler — any await\n    // before window.open lets the user-gesture token expire, which causes\n    // popup blockers to block entirely or fall back to same-tab navigation.\n    const origin = getCallbackOrigin() || window.location.origin;\n    const url =\n      statusConnectUrl ??\n      popupUrl ??\n      new URL(agentNativePath(\"/_agent-native/builder/connect\"), origin).href;\n    try {\n      window.open(url, \"_blank\", \"noopener,noreferrer\");\n    } catch {\n      // Fall through — polling still detects completion if the user\n      // opens the URL themselves.\n    }\n\n    const started = Date.now();\n    pollRef.current = setInterval(async () => {\n      const s = await fetchStatus();\n      if (!mountedRef.current) {\n        stopPoll();\n        return;\n      }\n      if (s?.configured) {\n        stopPoll();\n        setConfigured(true);\n        setEnvManaged(!!s.envManaged);\n        setBuilderEnabled(!!s.builderEnabled);\n        setStatusConnectUrl(s.connectUrl ?? null);\n        const org = s.orgName ?? null;\n        setOrgName(org);\n        setConnecting(false);\n        notifiedConnectedRef.current = true;\n        notifyAgentEngineConfiguredChanged(\"builder-connect\");\n        try {\n          await onConnectedRef.current?.({ orgName: org });\n        } catch {\n          // Consumer's callback failed; we've already flipped the UI state\n          // to connected. Swallow so we don't re-arm the flow.\n        }\n      } else if (s?.connectError?.message) {\n        // OAuth callback ran but writeBuilderCredentials threw — surface the\n        // real error instead of letting the user wait 5 minutes for timeout.\n        stopPoll();\n        setConnecting(false);\n        setError(\n          `Couldn't save Builder credentials: ${s.connectError.message}. Try again or contact support.`,\n        );\n      } else if (Date.now() - started > POLL_TIMEOUT_MS) {\n        stopPoll();\n        setConnecting(false);\n        setError(\n          \"Didn't hear back from Builder in 5 minutes. Allow popups and try again.\",\n        );\n      }\n    }, POLL_INTERVAL_MS);\n  }, [envManaged, fetchStatus, popupUrl, statusConnectUrl, stopPoll]);\n\n  // Popup-side fast path: the error page broadcasts a message so we stop\n  // polling immediately rather than waiting for the next 2s tick.\n  //\n  // We listen on BroadcastChannel (same-origin, works with noopener popups)\n  // AND on window.message (legacy path for environments without BC or for\n  // popups that still have opener access). Both paths are safe to have open\n  // simultaneously \\u2014 the first one to fire wins and the error is deduplicated\n  // by the stopPoll() call which is idempotent.\n  useEffect(() => {\n    let channel: BroadcastChannel | null = null;\n    const handleError = (message: string) => {\n      stopPoll();\n      setConnecting(false);\n      setError(`Couldn't save Builder credentials: ${message}.`);\n    };\n\n    try {\n      channel = new BroadcastChannel(`builder-connect:${window.location.host}`);\n      channel.onmessage = (e: MessageEvent) => {\n        const data = e.data as { type?: string; message?: string } | undefined;\n        if (data?.type !== \"builder-connect-error\") return;\n        if (typeof data.message !== \"string\" || !data.message) return;\n        handleError(data.message);\n      };\n    } catch {\n      // BroadcastChannel not available (rare) \\u2014 fall through to postMessage.\n    }\n\n    const handler = (e: MessageEvent) => {\n      if (e.origin !== window.location.origin) return;\n      const data = e.data as { type?: string; message?: string } | undefined;\n      if (data?.type !== \"builder-connect-error\") return;\n      if (typeof data.message !== \"string\" || !data.message) return;\n      handleError(data.message);\n    };\n    window.addEventListener(\"message\", handler);\n\n    return () => {\n      channel?.close();\n      window.removeEventListener(\"message\", handler);\n    };\n  }, [stopPoll]);\n\n  return {\n    configured,\n    envManaged,\n    builderEnabled,\n    orgName,\n    connecting,\n    error,\n    hasFetchedStatus,\n    start,\n  };\n}\n"]}
+{"version":3,"file":"useBuilderStatus.js","sourceRoot":"","sources":["../../../src/client/settings/useBuilderStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AA8BhD;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAuB,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,WAAW,EAAE,CAAC;QAEd,SAAS,OAAO;YACd,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,SAAS,YAAY;YACnB,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,WAAW,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAC5D,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;QACxE,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;YAC/D,MAAM,CAAC,mBAAmB,CACxB,iCAAiC,EACjC,WAAW,CACZ,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACnD,CAAC;AAuDD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,SAAS,kCAAkC,CAAC,MAAc;IACxD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,iCAAiC,EAAE;QACjD,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAkC,EAAE;IAEpC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC9E,wEAAwE;IACxE,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,MAAM,qBAAqB,GAAG,MAAM,CAAgB,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAwC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IAErC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,KAAK,CACnB,IAAI,GAAG,CAAC,eAAe,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CACvE,CAAC;YACF,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAOrB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,qEAAqE;IACrE,oDAAoD;IACpD,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,SAAS,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,OAAO;YAC7C,oEAAoE;YACpE,oEAAoE;YACpE,iEAAiE;YACjE,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9B,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9B,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YACtC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;YAC1C,qBAAqB,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;YAC9B,UAAU,CAAC,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;gBAClD,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpC,kCAAkC,CAAC,gBAAgB,CAAC,CAAC;gBACrD,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBACzB,oBAAoB,CAAC,OAAO,GAAG,KAAK,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,OAAO,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;QACxD,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;YAC3B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC5D,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;YACvE,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE5B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,uEAAuE;QACvE,qEAAqE;QACrE,+CAA+C;QAC/C,IAAI,UAAU;YAAE,OAAO;QACvB,QAAQ,EAAE,CAAC;QACX,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,mEAAmE;QACnE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7D,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,yDAAyD;QACzD,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAChD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC;QAC/C,MAAM,WAAW,GACf,OAAO,QAAQ,KAAK,QAAQ;YAC5B,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,yBAAyB,CAAC;QACpD,MAAM,GAAG,GACP,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;YACvC,QAAQ;YACR,IAAI,GAAG,CAAC,eAAe,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,4BAA4B;QAC9B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,QAAQ,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;gBAClB,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,IAAI,CAAC,CAAC;gBACpB,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC9B,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;gBACtC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;gBAC1C,qBAAqB,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjE,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;gBAC9B,UAAU,CAAC,GAAG,CAAC,CAAC;gBAChB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpC,kCAAkC,CAAC,iBAAiB,CAAC,CAAC;gBACtD,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,iEAAiE;oBACjE,qDAAqD;gBACvD,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;gBACpC,qEAAqE;gBACrE,qEAAqE;gBACrE,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CACN,sCAAsC,CAAC,CAAC,YAAY,CAAC,OAAO,iCAAiC,CAC9F,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,eAAe,EAAE,CAAC;gBAClD,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CACN,yEAAyE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEpE,uEAAuE;IACvE,gEAAgE;IAChE,EAAE;IACF,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,iFAAiF;IACjF,8CAA8C;IAC9C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,GAA4B,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE;YACtC,QAAQ,EAAE,CAAC;YACX,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,QAAQ,CAAC,sCAAsC,OAAO,GAAG,CAAC,CAAC;QAC7D,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,gBAAgB,CAAC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,SAAS,GAAG,CAAC,CAAe,EAAE,EAAE;gBACtC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuD,CAAC;gBACvE,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;oBAAE,OAAO;gBACnD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAO;gBAC9D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,CAAe,EAAE,EAAE;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO;YAChD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuD,CAAC;YACvE,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;gBAAE,OAAO;YACnD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO;YAC9D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE5C,OAAO,GAAG,EAAE;YACV,OAAO,EAAE,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,OAAO;QACL,UAAU;QACV,UAAU;QACV,cAAc;QACd,OAAO;QACP,UAAU;QACV,KAAK;QACL,gBAAgB;QAChB,KAAK;KACN,CAAC;AACJ,CAAC","sourcesContent":["import { agentNativePath } from \"../api-path.js\";\nimport { useState, useEffect, useCallback, useRef } from \"react\";\nimport { getCallbackOrigin } from \"../frame.js\";\n\nexport interface BuilderStatus {\n  configured: boolean;\n  builderEnabled: boolean;\n  /**\n   * True when `BUILDER_PRIVATE_KEY` is set at the deploy level. Every user\n   * of this deploy shares the operator's Builder identity and per-user\n   * connect/disconnect is disabled. UIs must hide connect prompts and\n   * disconnect buttons when this is true.\n   */\n  envManaged?: boolean;\n  connectUrl: string;\n  appHost: string;\n  apiHost: string;\n  branchProjectIdConfigured?: boolean;\n  branchProjectId?: string;\n  publicKeyConfigured: boolean;\n  privateKeyConfigured: boolean;\n  userId?: string;\n  orgName?: string;\n  orgKind?: string;\n  /**\n   * Set when the OAuth callback ran but failed to persist credentials.\n   * Surfaced as a one-shot row by the server so the connect-flow polling\n   * can stop with a clear message instead of timing out at 5min.\n   */\n  connectError?: { message: string; at: number };\n}\n\n/**\n * Fetches Builder connection status from /_agent-native/builder/status.\n * Re-fetches on window focus to detect post-redirect state changes.\n */\nexport function useBuilderStatus() {\n  const [status, setStatus] = useState<BuilderStatus | null>(null);\n  const [loading, setLoading] = useState(true);\n\n  const fetchStatus = useCallback(async () => {\n    try {\n      const res = await fetch(agentNativePath(\"/_agent-native/builder/status\"));\n      if (!res.ok) {\n        setStatus(null);\n        return;\n      }\n      setStatus(await res.json());\n    } catch {\n      setStatus(null);\n    } finally {\n      setLoading(false);\n    }\n  }, []);\n\n  useEffect(() => {\n    fetchStatus();\n\n    function onFocus() {\n      fetchStatus();\n    }\n    function onVisibility() {\n      if (document.visibilityState === \"visible\") fetchStatus();\n    }\n    window.addEventListener(\"focus\", onFocus);\n    document.addEventListener(\"visibilitychange\", onVisibility);\n    // Engine connect/disconnect actions (e.g. the Builder disconnect button)\n    // dispatch this event so dependent cards refresh without a full reload.\n    window.addEventListener(\"agent-engine:configured-changed\", fetchStatus);\n    return () => {\n      window.removeEventListener(\"focus\", onFocus);\n      document.removeEventListener(\"visibilitychange\", onVisibility);\n      window.removeEventListener(\n        \"agent-engine:configured-changed\",\n        fetchStatus,\n      );\n    };\n  }, [fetchStatus]);\n\n  return { status, loading, refetch: fetchStatus };\n}\n\n// ─── useBuilderConnectFlow ──────────────────────────────────────────────────\n//\n// Shared state machine for the \"open Builder CLI-auth popup + poll\n// /builder/status until credentials land\" interaction. Replaces three\n// near-duplicate inline implementations: `BuilderCliAuthMethod` in\n// OnboardingPanel, `ConnectBuilderCard`, and `BuilderConnectCta` in\n// AssistantChat. Each consumer supplies its own popup URL / completion\n// behavior; the hook owns the polling + timeout + focus refresh.\n//\n// `popupUrl` is what we pass to `window.open`. The default\n// `/_agent-native/builder/connect` is a server-side 302 to the real\n// cli-auth URL — using it keeps the click handler synchronous so popup\n// blockers don't downgrade the open to same-tab navigation. Pass an\n// explicit `popupUrl` (e.g. the already-computed cli-auth URL) if your\n// caller already has it in hand.\n\nexport interface BuilderConnectFlowOptions {\n  /** URL to synchronously open on start(). Defaults to the 302 shortcut. */\n  popupUrl?: string;\n  /** Invoked after the status poll first sees `configured: true`. */\n  onConnected?: (state: { orgName: string | null }) => void | Promise<void>;\n}\n\nexport interface BuilderConnectFlow {\n  configured: boolean;\n  /**\n   * True when the deploy has BUILDER_PRIVATE_KEY set. UIs should treat\n   * Builder as connected for everyone in this mode and hide all connect /\n   * disconnect controls — `start()` will be a no-op.\n   */\n  envManaged: boolean;\n  /**\n   * True when the server has a Builder branch project configured for this\n   * request. When false, the card surfaces a waitlist CTA instead of a Send\n   * button.\n   */\n  builderEnabled: boolean;\n  orgName: string | null;\n  connecting: boolean;\n  error: string | null;\n  /**\n   * True once the first `/builder/status` fetch has completed (successfully\n   * or not). Consumers that accept an `initialConfigured` prop (e.g. agent\n   * tool-call results rendered with server-side state) should treat\n   * `configured`/`orgName` as authoritative only once this flips true —\n   * otherwise the hook's starting `false` defaults would cause a flash\n   * back to \"Connect Builder\" on first paint.\n   */\n  hasFetchedStatus: boolean;\n  /** Open the popup and begin polling. Must be called from a user-gesture handler. */\n  start: () => void;\n}\n\nconst POLL_INTERVAL_MS = 2000;\nconst POLL_TIMEOUT_MS = 5 * 60 * 1000;\n\nfunction notifyAgentEngineConfiguredChanged(source: string) {\n  if (typeof window === \"undefined\") return;\n  window.dispatchEvent(\n    new CustomEvent(\"agent-engine:configured-changed\", {\n      detail: { source },\n    }),\n  );\n}\n\nexport function useBuilderConnectFlow(\n  opts: BuilderConnectFlowOptions = {},\n): BuilderConnectFlow {\n  const { popupUrl, onConnected } = opts;\n  const [configured, setConfigured] = useState(false);\n  const [envManaged, setEnvManaged] = useState(false);\n  const [builderEnabled, setBuilderEnabled] = useState(false);\n  const [orgName, setOrgName] = useState<string | null>(null);\n  const [connecting, setConnecting] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [hasFetchedStatus, setHasFetchedStatus] = useState(false);\n  const [statusConnectUrl, setStatusConnectUrl] = useState<string | null>(null);\n  // When statusConnectUrl was last fetched. The server signs the embedded\n  // _an_connect token with a 10-minute TTL; using an older URL silently\n  // fails the same-origin check on the popup side. Track freshness so\n  // start() can fall back to the bare /builder/connect path when stale.\n  const statusConnectUrlAtRef = useRef<number | null>(null);\n  const pollRef = useRef<ReturnType<typeof setInterval> | null>(null);\n  const mountedRef = useRef(true);\n  const notifiedConnectedRef = useRef(false);\n  // Keep onConnected in a ref so start() doesn't need to re-create when the\n  // caller passes an inline arrow function.\n  const onConnectedRef = useRef(onConnected);\n  onConnectedRef.current = onConnected;\n\n  const stopPoll = useCallback(() => {\n    if (pollRef.current) {\n      clearInterval(pollRef.current);\n      pollRef.current = null;\n    }\n  }, []);\n\n  const fetchStatus = useCallback(async () => {\n    const origin = getCallbackOrigin() || window.location.origin;\n    try {\n      const r = await fetch(\n        new URL(agentNativePath(\"/_agent-native/builder/status\"), origin).href,\n      );\n      if (!r.ok) return null;\n      return (await r.json()) as {\n        configured: boolean;\n        envManaged?: boolean;\n        builderEnabled?: boolean;\n        orgName?: string | null;\n        connectUrl?: string;\n        connectError?: { message: string; at: number };\n      };\n    } catch {\n      return null;\n    }\n  }, []);\n\n  // Initial fetch + focus/visibility refresh so if the user completed the\n  // flow in another tab (or a downgraded same-tab nav) we notice it. Also\n  // listen for `agent-engine:configured-changed` so a Disconnect click in\n  // Settings propagates to any connect-CTA cards rendered elsewhere in\n  // the app without waiting for the next focus event.\n  useEffect(() => {\n    mountedRef.current = true;\n    let cancelled = false;\n    const refresh = async () => {\n      const s = await fetchStatus();\n      if (cancelled || !mountedRef.current) return;\n      // Flip `hasFetchedStatus` even when the fetch failed — the caller's\n      // \"use initial props until the hook has an answer\" pattern wants to\n      // stop waiting after we've tried, regardless of network outcome.\n      setHasFetchedStatus(true);\n      if (!s) return;\n      setConfigured(!!s.configured);\n      setEnvManaged(!!s.envManaged);\n      setBuilderEnabled(!!s.builderEnabled);\n      setStatusConnectUrl(s.connectUrl ?? null);\n      statusConnectUrlAtRef.current = s.connectUrl ? Date.now() : null;\n      const org = s.orgName ?? null;\n      setOrgName(org);\n      if (s.configured && !notifiedConnectedRef.current) {\n        notifiedConnectedRef.current = true;\n        notifyAgentEngineConfiguredChanged(\"builder-status\");\n        try {\n          await onConnectedRef.current?.({ orgName: org });\n        } catch {\n          // The caller's callback is a UI convenience; status is already set.\n        }\n      } else if (!s.configured) {\n        notifiedConnectedRef.current = false;\n      }\n    };\n    refresh();\n    const onVisible = () => {\n      if (document.visibilityState === \"visible\") refresh();\n    };\n    window.addEventListener(\"focus\", refresh);\n    document.addEventListener(\"visibilitychange\", onVisible);\n    window.addEventListener(\"agent-engine:configured-changed\", refresh);\n    return () => {\n      cancelled = true;\n      mountedRef.current = false;\n      window.removeEventListener(\"focus\", refresh);\n      document.removeEventListener(\"visibilitychange\", onVisible);\n      window.removeEventListener(\"agent-engine:configured-changed\", refresh);\n      stopPoll();\n    };\n  }, [fetchStatus, stopPoll]);\n\n  const start = useCallback(() => {\n    // In env-managed mode, per-user OAuth is disabled — `/builder/connect`\n    // returns 409. Skip the popup and just refresh state so the UI flips\n    // to its \"connected via deployment\" rendering.\n    if (envManaged) return;\n    stopPoll();\n    setConnecting(true);\n    setError(null);\n\n    // Open SYNCHRONOUSLY inside the caller's click handler — any await\n    // before window.open lets the user-gesture token expire, which causes\n    // popup blockers to block entirely or fall back to same-tab navigation.\n    const origin = getCallbackOrigin() || window.location.origin;\n    // The signed _an_connect token in statusConnectUrl has a 10-minute TTL.\n    // If the panel has been open longer than that the token is dead and the\n    // popup will silently 403; drop the cached URL and let the bare /connect\n    // route do the same-origin Sec-Fetch-Site check instead.\n    const STATUS_CONNECT_URL_TTL_MS = 9 * 60 * 1000;\n    const cachedAt = statusConnectUrlAtRef.current;\n    const cachedFresh =\n      typeof cachedAt === \"number\" &&\n      Date.now() - cachedAt < STATUS_CONNECT_URL_TTL_MS;\n    const url =\n      (cachedFresh ? statusConnectUrl : null) ??\n      popupUrl ??\n      new URL(agentNativePath(\"/_agent-native/builder/connect\"), origin).href;\n    try {\n      window.open(url, \"_blank\", \"noopener,noreferrer\");\n    } catch {\n      // Fall through — polling still detects completion if the user\n      // opens the URL themselves.\n    }\n\n    const started = Date.now();\n    pollRef.current = setInterval(async () => {\n      const s = await fetchStatus();\n      if (!mountedRef.current) {\n        stopPoll();\n        return;\n      }\n      if (s?.configured) {\n        stopPoll();\n        setConfigured(true);\n        setEnvManaged(!!s.envManaged);\n        setBuilderEnabled(!!s.builderEnabled);\n        setStatusConnectUrl(s.connectUrl ?? null);\n        statusConnectUrlAtRef.current = s.connectUrl ? Date.now() : null;\n        const org = s.orgName ?? null;\n        setOrgName(org);\n        setConnecting(false);\n        notifiedConnectedRef.current = true;\n        notifyAgentEngineConfiguredChanged(\"builder-connect\");\n        try {\n          await onConnectedRef.current?.({ orgName: org });\n        } catch {\n          // Consumer's callback failed; we've already flipped the UI state\n          // to connected. Swallow so we don't re-arm the flow.\n        }\n      } else if (s?.connectError?.message) {\n        // OAuth callback ran but writeBuilderCredentials threw — surface the\n        // real error instead of letting the user wait 5 minutes for timeout.\n        stopPoll();\n        setConnecting(false);\n        setError(\n          `Couldn't save Builder credentials: ${s.connectError.message}. Try again or contact support.`,\n        );\n      } else if (Date.now() - started > POLL_TIMEOUT_MS) {\n        stopPoll();\n        setConnecting(false);\n        setError(\n          \"Didn't hear back from Builder in 5 minutes. Allow popups and try again.\",\n        );\n      }\n    }, POLL_INTERVAL_MS);\n  }, [envManaged, fetchStatus, popupUrl, statusConnectUrl, stopPoll]);\n\n  // Popup-side fast path: the error page broadcasts a message so we stop\n  // polling immediately rather than waiting for the next 2s tick.\n  //\n  // We listen on BroadcastChannel (same-origin, works with noopener popups)\n  // AND on window.message (legacy path for environments without BC or for\n  // popups that still have opener access). Both paths are safe to have open\n  // simultaneously \\u2014 the first one to fire wins and the error is deduplicated\n  // by the stopPoll() call which is idempotent.\n  useEffect(() => {\n    let channel: BroadcastChannel | null = null;\n    const handleError = (message: string) => {\n      stopPoll();\n      setConnecting(false);\n      setError(`Couldn't save Builder credentials: ${message}.`);\n    };\n\n    try {\n      channel = new BroadcastChannel(`builder-connect:${window.location.host}`);\n      channel.onmessage = (e: MessageEvent) => {\n        const data = e.data as { type?: string; message?: string } | undefined;\n        if (data?.type !== \"builder-connect-error\") return;\n        if (typeof data.message !== \"string\" || !data.message) return;\n        handleError(data.message);\n      };\n    } catch {\n      // BroadcastChannel not available (rare) \\u2014 fall through to postMessage.\n    }\n\n    const handler = (e: MessageEvent) => {\n      if (e.origin !== window.location.origin) return;\n      const data = e.data as { type?: string; message?: string } | undefined;\n      if (data?.type !== \"builder-connect-error\") return;\n      if (typeof data.message !== \"string\" || !data.message) return;\n      handleError(data.message);\n    };\n    window.addEventListener(\"message\", handler);\n\n    return () => {\n      channel?.close();\n      window.removeEventListener(\"message\", handler);\n    };\n  }, [stopPoll]);\n\n  return {\n    configured,\n    envManaged,\n    builderEnabled,\n    orgName,\n    connecting,\n    error,\n    hasFetchedStatus,\n    start,\n  };\n}\n"]}

package/dist/extensions/actions.js

@@ -5,7 +5,7 @@ export function createExtensionActionEntries() {
     return {
         "create-extension": {
             tool: {
-                description: "Create a sandboxed Alpine.js mini-app extension. Use this when the user asks to create, build, or make an extension/widget/dashboard/calculator. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), dbExec(), extensionFetch(), and extensionData. Prefer appAction()/appFetch() for app data; parse JSON string action results before aggregating; use dbQuery()/dbExec() only for known existing SQL tables.",
+                description: "Create a sandboxed Alpine.js mini-app extension. Use this when the user asks to create, build, or make an extension/widget/dashboard/calculator. Call this action exactly once per requested extension. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), dbExec(), extensionFetch(), and extensionData. Prefer appAction(name, params) for app data and actions, including read actions mounted as GET; do not call template /api/* routes from appFetch because the extension bridge only allows framework /_agent-native/* paths. Parse JSON string action results before aggregating; use dbQuery()/dbExec() only for known existing SQL tables.",
                 parameters: {
                     type: "object",
                     properties: {

package/dist/extensions/actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/extensions/actions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EACL,eAAe,EACf,YAAY,EACZ,eAAe,EACf,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAI1B,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,kBAAkB,EAAE;YAClB,IAAI,EAAE;gBACJ,WAAW,EACT,+cAA+c;gBACjd,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qHAAqH;yBACxH;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,kDAAkD;yBAChE;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,kUAAkU;yBACrU;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,oCAAoC;yBAClD;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;iBAC9B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI;oBAAE,OAAO,0BAA0B,CAAC;gBAC7C,IAAI,CAAC,OAAO;oBAAE,OAAO,6BAA6B,CAAC;gBAEnD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC;oBACtC,IAAI;oBACJ,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBACnD,OAAO;oBACP,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;iBACjD,CAAC,CAAC;gBAEH,kEAAkE;gBAClE,8DAA8D;gBAC9D,oEAAoE;gBACpE,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC,UAAU,EAAE;wBAC9B,IAAI,EAAE,YAAY;wBAClB,WAAW,EAAE,SAAS,CAAC,EAAE;wBACzB,IAAI,EAAE,eAAe,SAAS,CAAC,EAAE,EAAE;qBACpC,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,6DAA6D;gBAC/D,CAAC;gBAED,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,SAAS;oBACT,IAAI,EAAE,oHAAoH;iBAC3H,CAAC;YACJ,CAAC;SACF;QAED,kBAAkB,EAAE;YAClB,IAAI,EAAE;gBACJ,WAAW,EACT,iJAAiJ;gBACnJ,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE;4BACF,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,yBAAyB;yBACvC;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,4BAA4B;yBAC1C;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,2BAA2B;yBACzC;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wDAAwD;yBAC3D;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qGAAqG;yBACxG;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,oCAAoC;yBAClD;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,8BAA8B;4BAC3C,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC;yBACnC;qBACF;oBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;iBACjB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACzC,IAAI,CAAC,EAAE;oBAAE,OAAO,wBAAwB,CAAC;gBAEzC,IAAI,MAAM,GAAG,IAAI,CAAC;gBAClB,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC/D,MAAM,OAAO,GAAG,YAAY,CAAE,IAAY,CAAC,OAAO,CAAC,CAAC;oBACpD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;wBAC5C,OAAO,mEAAmE,CAAC;oBAC7E,CAAC;oBACD,MAAM,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE;wBACxC,OAAO,EACL,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;wBAChE,OAAO;qBACR,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,GAA2B,EAAE,CAAC;gBACxC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnE,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;oBACpC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrD,CAAC;gBACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;oBACnC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5C,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjC,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAW,CAAC,CAAC;gBAClD,CAAC;gBAED,IAAI,CAAC,MAAM;oBAAE,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC7C,IAAI,CAAC,MAAM;oBAAE,OAAO,+BAA+B,EAAE,EAAE,CAAC;gBACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YACzC,CAAC;SACF;QAED,2BAA2B,EAAE;YAC3B,IAAI,EAAE;gBACJ,WAAW,EACT,uVAAuV;gBACzV,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;wBAC7D,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,yEAAyE;yBAC5E;qBACF;oBACD,QAAQ,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;iBACpC;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,WAAW;oBAAE,OAAO,iCAAiC,CAAC;gBAC3D,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,MAAM,GAAG,GAAG,MAAM,sBAAsB,CACtC,WAAW,EACX,MAAM,EACN,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAC/C,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACjC,CAAC;SACF;QAED,mBAAmB,EAAE;YACnB,IAAI,EAAE;gBACJ,WAAW,EACT,4UAA4U;gBAC9U,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,0BAA0B;yBACxC;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,+EAA+E;yBAClF;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qEAAqE;yBACxE;qBACF;oBACD,QAAQ,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;iBACpC;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,WAAW;oBAAE,OAAO,iCAAiC,CAAC;gBAC3D,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,MAAM,QAAQ,GACZ,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;oBACpD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACvB,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE;oBAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;oBACpE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;iBACvD,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YACpC,CAAC;SACF;QAED,qBAAqB,EAAE;YACrB,IAAI,EAAE;gBACJ,WAAW,EACT,8GAA8G;gBAChH,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;wBAC7D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;qBAC5D;oBACD,QAAQ,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;iBACpC;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,WAAW;oBAAE,OAAO,iCAAiC,CAAC;gBAC3D,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,MAAM,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;SACF;QAED,0BAA0B,EAAE;YAC1B,IAAI,EAAE;gBACJ,WAAW,EACT,uKAAuK;gBACzK,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;qBAC5D;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,CAAC;YACD,QAAQ,EAAE,IAAI;SACf;QAED,sBAAsB,EAAE;YACtB,IAAI,EAAE;gBACJ,WAAW,EACT,iIAAiI;gBACnI,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;qBAC9D;oBACD,QAAQ,EAAE,CAAC,aAAa,CAAC;iBAC1B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,IAAI,CAAC,WAAW;oBAAE,OAAO,iCAAiC,CAAC;gBAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7D,CAAC;YACD,QAAQ,EAAE,IAAI;SACf;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IACE,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK;QACN,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CACpC,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { ActionEntry } from \"../agent/production-agent.js\";\nimport { writeAppState } from \"../application-state/script-helpers.js\";\nimport {\n  createExtension,\n  getExtension,\n  updateExtension,\n  updateExtensionContent,\n} from \"./store.js\";\nimport {\n  addExtensionSlotTarget,\n  installExtensionSlot,\n  uninstallExtensionSlot,\n  listExtensionsForSlot,\n  listSlotsForExtension,\n} from \"./slots/store.js\";\n\ntype ExtensionPatch = { find: string; replace: string };\n\nexport function createExtensionActionEntries(): Record<string, ActionEntry> {\n  return {\n    \"create-extension\": {\n      tool: {\n        description:\n          \"Create a sandboxed Alpine.js mini-app extension. Use this when the user asks to create, build, or make an extension/widget/dashboard/calculator. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), dbExec(), extensionFetch(), and extensionData. Prefer appAction()/appFetch() for app data; parse JSON string action results before aggregating; use dbQuery()/dbExec() only for known existing SQL tables.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            name: {\n              type: \"string\",\n              description:\n                'Short display name for the extension. Do not include \"app\" — e.g. name a todo app \"Todos\", a weather app \"Weather\".',\n            },\n            description: {\n              type: \"string\",\n              description: \"One-sentence summary of what the extension does.\",\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Self-contained Alpine.js HTML body snippet. The iframe canvas already has modest default padding, so avoid duplicate outer padding unless the design needs it. Use semantic Tailwind colors (bg-background, text-foreground, bg-primary, etc.) for native theming. Do not include a full app build, React code, or source files.\",\n            },\n            icon: {\n              type: \"string\",\n              description: \"Optional icon name or short label.\",\n            },\n          },\n          required: [\"name\", \"content\"],\n        },\n      },\n      run: async (args) => {\n        const name = String(args?.name ?? \"\").trim();\n        const content = String(args?.content ?? \"\").trim();\n        if (!name) return \"Error: name is required.\";\n        if (!content) return \"Error: content is required.\";\n\n        const extension = await createExtension({\n          name,\n          description: String(args?.description ?? \"\").trim(),\n          content,\n          icon: args?.icon ? String(args.icon) : undefined,\n        });\n\n        // Auto-navigate so the user lands on the new extension instead of\n        // having to read the JSON response and click a link. Writes a\n        // one-shot `navigate` app-state command the UI consumes and clears.\n        try {\n          await writeAppState(\"navigate\", {\n            view: \"extensions\",\n            extensionId: extension.id,\n            path: `/extensions/${extension.id}`,\n          });\n        } catch {\n          // Non-fatal — agent can still mention the path in its reply.\n        }\n\n        return {\n          ok: true,\n          extension,\n          next: `Created. The user is being navigated to the new extension automatically — no further navigation tool calls needed.`,\n        };\n      },\n    },\n\n    \"update-extension\": {\n      tool: {\n        description:\n          \"Update an existing sandboxed Alpine.js mini-app extension. Prefer patches for surgical edits; use full content replacement only when necessary.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            id: {\n              type: \"string\",\n              description: \"Extension id to update.\",\n            },\n            name: {\n              type: \"string\",\n              description: \"Optional new display name.\",\n            },\n            description: {\n              type: \"string\",\n              description: \"Optional new description.\",\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Optional full replacement Alpine.js HTML body snippet.\",\n            },\n            patches: {\n              type: \"string\",\n              description:\n                'Optional JSON array of { \"find\": \"...\", \"replace\": \"...\" } patches to apply to the current content.',\n            },\n            icon: {\n              type: \"string\",\n              description: \"Optional icon name or short label.\",\n            },\n            visibility: {\n              type: \"string\",\n              description: \"Optional sharing visibility.\",\n              enum: [\"private\", \"org\", \"public\"],\n            },\n          },\n          required: [\"id\"],\n        },\n      },\n      run: async (args) => {\n        const id = String(args?.id ?? \"\").trim();\n        if (!id) return \"Error: id is required.\";\n\n        let result = null;\n        if (args?.content !== undefined || args?.patches !== undefined) {\n          const patches = parsePatches((args as any).patches);\n          if (args?.patches !== undefined && !patches) {\n            return \"Error: patches must be a JSON array of { find, replace } objects.\";\n          }\n          result = await updateExtensionContent(id, {\n            content:\n              args?.content !== undefined ? String(args.content) : undefined,\n            patches,\n          });\n        }\n\n        const meta: Record<string, string> = {};\n        if (args?.name !== undefined) meta.name = String(args.name).trim();\n        if (args?.description !== undefined) {\n          meta.description = String(args.description).trim();\n        }\n        if (args?.icon !== undefined) meta.icon = String(args.icon);\n        if (args?.visibility !== undefined) {\n          meta.visibility = String(args.visibility);\n        }\n        if (Object.keys(meta).length > 0) {\n          result = await updateExtension(id, meta as any);\n        }\n\n        if (!result) result = await getExtension(id);\n        if (!result) return `Error: extension not found: ${id}`;\n        return { ok: true, extension: result };\n      },\n    },\n\n    \"add-extension-slot-target\": {\n      tool: {\n        description:\n          'Declare that an extension can render in a UI extension-point slot of an app (e.g. \"mail.contact-sidebar.bottom\"). Apps drop ExtensionSlot components in their UI; this action registers an extension as installable into one of those slots. Slot IDs follow the convention <app>.<area>.<position>. Caller must have editor access to the extension.',\n        parameters: {\n          type: \"object\",\n          properties: {\n            extensionId: { type: \"string\", description: \"Extension id.\" },\n            slotId: {\n              type: \"string\",\n              description:\n                'Slot identifier — e.g. \"mail.contact-sidebar.bottom\".',\n            },\n            config: {\n              type: \"string\",\n              description:\n                \"Optional JSON string with slot-specific config (defaults, hints, etc.).\",\n            },\n          },\n          required: [\"extensionId\", \"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const extensionId = String(args?.extensionId ?? \"\").trim();\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!extensionId) return \"Error: extensionId is required.\";\n        if (!slotId) return \"Error: slotId is required.\";\n        const row = await addExtensionSlotTarget(\n          extensionId,\n          slotId,\n          args?.config ? String(args.config) : undefined,\n        );\n        return { ok: true, slot: row };\n      },\n    },\n\n    \"install-extension\": {\n      tool: {\n        description:\n          \"Install an extension as a widget in an extension-point slot for the current user. The extension must already declare the slot via add-extension-slot-target. Per-user installation — only affects the calling user's view. Use after creating an extension that targets a slot, or when the user asks to add an existing widget to a slot.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            extensionId: {\n              type: \"string\",\n              description: \"Extension id to install.\",\n            },\n            slotId: {\n              type: \"string\",\n              description:\n                'Slot identifier — e.g. \"mail.contact-sidebar.bottom\".',\n            },\n            position: {\n              type: \"number\",\n              description:\n                \"Optional integer position within the slot (lower = earlier). Defaults to end.\",\n            },\n            config: {\n              type: \"string\",\n              description:\n                \"Optional JSON string with per-install config (overrides, settings).\",\n            },\n          },\n          required: [\"extensionId\", \"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const extensionId = String(args?.extensionId ?? \"\").trim();\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!extensionId) return \"Error: extensionId is required.\";\n        if (!slotId) return \"Error: slotId is required.\";\n        const position =\n          args?.position !== undefined && args.position !== null\n            ? Number(args.position)\n            : undefined;\n        const row = await installExtensionSlot(extensionId, slotId, {\n          position: Number.isFinite(position as number) ? position : undefined,\n          config: args?.config ? String(args.config) : undefined,\n        });\n        return { ok: true, install: row };\n      },\n    },\n\n    \"uninstall-extension\": {\n      tool: {\n        description:\n          \"Remove an extension from an extension-point slot for the current user. Does not delete the extension itself.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            extensionId: { type: \"string\", description: \"Extension id.\" },\n            slotId: { type: \"string\", description: \"Slot identifier.\" },\n          },\n          required: [\"extensionId\", \"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const extensionId = String(args?.extensionId ?? \"\").trim();\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!extensionId) return \"Error: extensionId is required.\";\n        if (!slotId) return \"Error: slotId is required.\";\n        await uninstallExtensionSlot(extensionId, slotId);\n        return { ok: true };\n      },\n    },\n\n    \"list-extensions-for-slot\": {\n      tool: {\n        description:\n          \"List extensions the current user has access to that declare a given extension-point slot. Use to discover what's available to install into a slot the user mentioned.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            slotId: { type: \"string\", description: \"Slot identifier.\" },\n          },\n          required: [\"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!slotId) return \"Error: slotId is required.\";\n        return { extensions: await listExtensionsForSlot(slotId) };\n      },\n      readOnly: true,\n    },\n\n    \"list-extension-slots\": {\n      tool: {\n        description:\n          \"List the extension-point slots a specific extension declares it can render in. Caller must have viewer access to the extension.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            extensionId: { type: \"string\", description: \"Extension id.\" },\n          },\n          required: [\"extensionId\"],\n        },\n      },\n      run: async (args) => {\n        const extensionId = String(args?.extensionId ?? \"\").trim();\n        if (!extensionId) return \"Error: extensionId is required.\";\n        return { slots: await listSlotsForExtension(extensionId) };\n      },\n      readOnly: true,\n    },\n  };\n}\n\nfunction parsePatches(value: unknown): ExtensionPatch[] | undefined {\n  if (value === undefined) return undefined;\n  const parsed = typeof value === \"string\" ? JSON.parse(value) : value;\n  if (!Array.isArray(parsed)) return undefined;\n  if (\n    parsed.some(\n      (patch) =>\n        !patch ||\n        typeof patch.find !== \"string\" ||\n        typeof patch.replace !== \"string\",\n    )\n  ) {\n    return undefined;\n  }\n  return parsed;\n}\n"]}
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/extensions/actions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EACL,eAAe,EACf,YAAY,EACZ,eAAe,EACf,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAI1B,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,kBAAkB,EAAE;YAClB,IAAI,EAAE;gBACJ,WAAW,EACT,srBAAsrB;gBACxrB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qHAAqH;yBACxH;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,kDAAkD;yBAChE;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,kUAAkU;yBACrU;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,oCAAoC;yBAClD;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;iBAC9B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI;oBAAE,OAAO,0BAA0B,CAAC;gBAC7C,IAAI,CAAC,OAAO;oBAAE,OAAO,6BAA6B,CAAC;gBAEnD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC;oBACtC,IAAI;oBACJ,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBACnD,OAAO;oBACP,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;iBACjD,CAAC,CAAC;gBAEH,kEAAkE;gBAClE,8DAA8D;gBAC9D,oEAAoE;gBACpE,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC,UAAU,EAAE;wBAC9B,IAAI,EAAE,YAAY;wBAClB,WAAW,EAAE,SAAS,CAAC,EAAE;wBACzB,IAAI,EAAE,eAAe,SAAS,CAAC,EAAE,EAAE;qBACpC,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,6DAA6D;gBAC/D,CAAC;gBAED,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,SAAS;oBACT,IAAI,EAAE,oHAAoH;iBAC3H,CAAC;YACJ,CAAC;SACF;QAED,kBAAkB,EAAE;YAClB,IAAI,EAAE;gBACJ,WAAW,EACT,iJAAiJ;gBACnJ,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE;4BACF,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,yBAAyB;yBACvC;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,4BAA4B;yBAC1C;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,2BAA2B;yBACzC;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wDAAwD;yBAC3D;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qGAAqG;yBACxG;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,oCAAoC;yBAClD;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,8BAA8B;4BAC3C,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC;yBACnC;qBACF;oBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;iBACjB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACzC,IAAI,CAAC,EAAE;oBAAE,OAAO,wBAAwB,CAAC;gBAEzC,IAAI,MAAM,GAAG,IAAI,CAAC;gBAClB,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC/D,MAAM,OAAO,GAAG,YAAY,CAAE,IAAY,CAAC,OAAO,CAAC,CAAC;oBACpD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;wBAC5C,OAAO,mEAAmE,CAAC;oBAC7E,CAAC;oBACD,MAAM,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE;wBACxC,OAAO,EACL,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;wBAChE,OAAO;qBACR,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,GAA2B,EAAE,CAAC;gBACxC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnE,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;oBACpC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrD,CAAC;gBACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;oBACnC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5C,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjC,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAW,CAAC,CAAC;gBAClD,CAAC;gBAED,IAAI,CAAC,MAAM;oBAAE,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC7C,IAAI,CAAC,MAAM;oBAAE,OAAO,+BAA+B,EAAE,EAAE,CAAC;gBACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YACzC,CAAC;SACF;QAED,2BAA2B,EAAE;YAC3B,IAAI,EAAE;gBACJ,WAAW,EACT,uVAAuV;gBACzV,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;wBAC7D,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,yEAAyE;yBAC5E;qBACF;oBACD,QAAQ,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;iBACpC;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,WAAW;oBAAE,OAAO,iCAAiC,CAAC;gBAC3D,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,MAAM,GAAG,GAAG,MAAM,sBAAsB,CACtC,WAAW,EACX,MAAM,EACN,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAC/C,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACjC,CAAC;SACF;QAED,mBAAmB,EAAE;YACnB,IAAI,EAAE;gBACJ,WAAW,EACT,4UAA4U;gBAC9U,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,0BAA0B;yBACxC;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,+EAA+E;yBAClF;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qEAAqE;yBACxE;qBACF;oBACD,QAAQ,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;iBACpC;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,WAAW;oBAAE,OAAO,iCAAiC,CAAC;gBAC3D,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,MAAM,QAAQ,GACZ,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;oBACpD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACvB,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE;oBAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;oBACpE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;iBACvD,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YACpC,CAAC;SACF;QAED,qBAAqB,EAAE;YACrB,IAAI,EAAE;gBACJ,WAAW,EACT,8GAA8G;gBAChH,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;wBAC7D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;qBAC5D;oBACD,QAAQ,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;iBACpC;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,WAAW;oBAAE,OAAO,iCAAiC,CAAC;gBAC3D,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,MAAM,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;SACF;QAED,0BAA0B,EAAE;YAC1B,IAAI,EAAE;gBACJ,WAAW,EACT,uKAAuK;gBACzK,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;qBAC5D;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,CAAC;YACD,QAAQ,EAAE,IAAI;SACf;QAED,sBAAsB,EAAE;YACtB,IAAI,EAAE;gBACJ,WAAW,EACT,iIAAiI;gBACnI,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;qBAC9D;oBACD,QAAQ,EAAE,CAAC,aAAa,CAAC;iBAC1B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,IAAI,CAAC,WAAW;oBAAE,OAAO,iCAAiC,CAAC;gBAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7D,CAAC;YACD,QAAQ,EAAE,IAAI;SACf;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IACE,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK;QACN,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CACpC,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { ActionEntry } from \"../agent/production-agent.js\";\nimport { writeAppState } from \"../application-state/script-helpers.js\";\nimport {\n  createExtension,\n  getExtension,\n  updateExtension,\n  updateExtensionContent,\n} from \"./store.js\";\nimport {\n  addExtensionSlotTarget,\n  installExtensionSlot,\n  uninstallExtensionSlot,\n  listExtensionsForSlot,\n  listSlotsForExtension,\n} from \"./slots/store.js\";\n\ntype ExtensionPatch = { find: string; replace: string };\n\nexport function createExtensionActionEntries(): Record<string, ActionEntry> {\n  return {\n    \"create-extension\": {\n      tool: {\n        description:\n          \"Create a sandboxed Alpine.js mini-app extension. Use this when the user asks to create, build, or make an extension/widget/dashboard/calculator. Call this action exactly once per requested extension. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), dbExec(), extensionFetch(), and extensionData. Prefer appAction(name, params) for app data and actions, including read actions mounted as GET; do not call template /api/* routes from appFetch because the extension bridge only allows framework /_agent-native/* paths. Parse JSON string action results before aggregating; use dbQuery()/dbExec() only for known existing SQL tables.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            name: {\n              type: \"string\",\n              description:\n                'Short display name for the extension. Do not include \"app\" — e.g. name a todo app \"Todos\", a weather app \"Weather\".',\n            },\n            description: {\n              type: \"string\",\n              description: \"One-sentence summary of what the extension does.\",\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Self-contained Alpine.js HTML body snippet. The iframe canvas already has modest default padding, so avoid duplicate outer padding unless the design needs it. Use semantic Tailwind colors (bg-background, text-foreground, bg-primary, etc.) for native theming. Do not include a full app build, React code, or source files.\",\n            },\n            icon: {\n              type: \"string\",\n              description: \"Optional icon name or short label.\",\n            },\n          },\n          required: [\"name\", \"content\"],\n        },\n      },\n      run: async (args) => {\n        const name = String(args?.name ?? \"\").trim();\n        const content = String(args?.content ?? \"\").trim();\n        if (!name) return \"Error: name is required.\";\n        if (!content) return \"Error: content is required.\";\n\n        const extension = await createExtension({\n          name,\n          description: String(args?.description ?? \"\").trim(),\n          content,\n          icon: args?.icon ? String(args.icon) : undefined,\n        });\n\n        // Auto-navigate so the user lands on the new extension instead of\n        // having to read the JSON response and click a link. Writes a\n        // one-shot `navigate` app-state command the UI consumes and clears.\n        try {\n          await writeAppState(\"navigate\", {\n            view: \"extensions\",\n            extensionId: extension.id,\n            path: `/extensions/${extension.id}`,\n          });\n        } catch {\n          // Non-fatal — agent can still mention the path in its reply.\n        }\n\n        return {\n          ok: true,\n          extension,\n          next: `Created. The user is being navigated to the new extension automatically — no further navigation tool calls needed.`,\n        };\n      },\n    },\n\n    \"update-extension\": {\n      tool: {\n        description:\n          \"Update an existing sandboxed Alpine.js mini-app extension. Prefer patches for surgical edits; use full content replacement only when necessary.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            id: {\n              type: \"string\",\n              description: \"Extension id to update.\",\n            },\n            name: {\n              type: \"string\",\n              description: \"Optional new display name.\",\n            },\n            description: {\n              type: \"string\",\n              description: \"Optional new description.\",\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Optional full replacement Alpine.js HTML body snippet.\",\n            },\n            patches: {\n              type: \"string\",\n              description:\n                'Optional JSON array of { \"find\": \"...\", \"replace\": \"...\" } patches to apply to the current content.',\n            },\n            icon: {\n              type: \"string\",\n              description: \"Optional icon name or short label.\",\n            },\n            visibility: {\n              type: \"string\",\n              description: \"Optional sharing visibility.\",\n              enum: [\"private\", \"org\", \"public\"],\n            },\n          },\n          required: [\"id\"],\n        },\n      },\n      run: async (args) => {\n        const id = String(args?.id ?? \"\").trim();\n        if (!id) return \"Error: id is required.\";\n\n        let result = null;\n        if (args?.content !== undefined || args?.patches !== undefined) {\n          const patches = parsePatches((args as any).patches);\n          if (args?.patches !== undefined && !patches) {\n            return \"Error: patches must be a JSON array of { find, replace } objects.\";\n          }\n          result = await updateExtensionContent(id, {\n            content:\n              args?.content !== undefined ? String(args.content) : undefined,\n            patches,\n          });\n        }\n\n        const meta: Record<string, string> = {};\n        if (args?.name !== undefined) meta.name = String(args.name).trim();\n        if (args?.description !== undefined) {\n          meta.description = String(args.description).trim();\n        }\n        if (args?.icon !== undefined) meta.icon = String(args.icon);\n        if (args?.visibility !== undefined) {\n          meta.visibility = String(args.visibility);\n        }\n        if (Object.keys(meta).length > 0) {\n          result = await updateExtension(id, meta as any);\n        }\n\n        if (!result) result = await getExtension(id);\n        if (!result) return `Error: extension not found: ${id}`;\n        return { ok: true, extension: result };\n      },\n    },\n\n    \"add-extension-slot-target\": {\n      tool: {\n        description:\n          'Declare that an extension can render in a UI extension-point slot of an app (e.g. \"mail.contact-sidebar.bottom\"). Apps drop ExtensionSlot components in their UI; this action registers an extension as installable into one of those slots. Slot IDs follow the convention <app>.<area>.<position>. Caller must have editor access to the extension.',\n        parameters: {\n          type: \"object\",\n          properties: {\n            extensionId: { type: \"string\", description: \"Extension id.\" },\n            slotId: {\n              type: \"string\",\n              description:\n                'Slot identifier — e.g. \"mail.contact-sidebar.bottom\".',\n            },\n            config: {\n              type: \"string\",\n              description:\n                \"Optional JSON string with slot-specific config (defaults, hints, etc.).\",\n            },\n          },\n          required: [\"extensionId\", \"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const extensionId = String(args?.extensionId ?? \"\").trim();\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!extensionId) return \"Error: extensionId is required.\";\n        if (!slotId) return \"Error: slotId is required.\";\n        const row = await addExtensionSlotTarget(\n          extensionId,\n          slotId,\n          args?.config ? String(args.config) : undefined,\n        );\n        return { ok: true, slot: row };\n      },\n    },\n\n    \"install-extension\": {\n      tool: {\n        description:\n          \"Install an extension as a widget in an extension-point slot for the current user. The extension must already declare the slot via add-extension-slot-target. Per-user installation — only affects the calling user's view. Use after creating an extension that targets a slot, or when the user asks to add an existing widget to a slot.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            extensionId: {\n              type: \"string\",\n              description: \"Extension id to install.\",\n            },\n            slotId: {\n              type: \"string\",\n              description:\n                'Slot identifier — e.g. \"mail.contact-sidebar.bottom\".',\n            },\n            position: {\n              type: \"number\",\n              description:\n                \"Optional integer position within the slot (lower = earlier). Defaults to end.\",\n            },\n            config: {\n              type: \"string\",\n              description:\n                \"Optional JSON string with per-install config (overrides, settings).\",\n            },\n          },\n          required: [\"extensionId\", \"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const extensionId = String(args?.extensionId ?? \"\").trim();\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!extensionId) return \"Error: extensionId is required.\";\n        if (!slotId) return \"Error: slotId is required.\";\n        const position =\n          args?.position !== undefined && args.position !== null\n            ? Number(args.position)\n            : undefined;\n        const row = await installExtensionSlot(extensionId, slotId, {\n          position: Number.isFinite(position as number) ? position : undefined,\n          config: args?.config ? String(args.config) : undefined,\n        });\n        return { ok: true, install: row };\n      },\n    },\n\n    \"uninstall-extension\": {\n      tool: {\n        description:\n          \"Remove an extension from an extension-point slot for the current user. Does not delete the extension itself.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            extensionId: { type: \"string\", description: \"Extension id.\" },\n            slotId: { type: \"string\", description: \"Slot identifier.\" },\n          },\n          required: [\"extensionId\", \"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const extensionId = String(args?.extensionId ?? \"\").trim();\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!extensionId) return \"Error: extensionId is required.\";\n        if (!slotId) return \"Error: slotId is required.\";\n        await uninstallExtensionSlot(extensionId, slotId);\n        return { ok: true };\n      },\n    },\n\n    \"list-extensions-for-slot\": {\n      tool: {\n        description:\n          \"List extensions the current user has access to that declare a given extension-point slot. Use to discover what's available to install into a slot the user mentioned.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            slotId: { type: \"string\", description: \"Slot identifier.\" },\n          },\n          required: [\"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!slotId) return \"Error: slotId is required.\";\n        return { extensions: await listExtensionsForSlot(slotId) };\n      },\n      readOnly: true,\n    },\n\n    \"list-extension-slots\": {\n      tool: {\n        description:\n          \"List the extension-point slots a specific extension declares it can render in. Caller must have viewer access to the extension.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            extensionId: { type: \"string\", description: \"Extension id.\" },\n          },\n          required: [\"extensionId\"],\n        },\n      },\n      run: async (args) => {\n        const extensionId = String(args?.extensionId ?? \"\").trim();\n        if (!extensionId) return \"Error: extensionId is required.\";\n        return { slots: await listSlotsForExtension(extensionId) };\n      },\n      readOnly: true,\n    },\n  };\n}\n\nfunction parsePatches(value: unknown): ExtensionPatch[] | undefined {\n  if (value === undefined) return undefined;\n  const parsed = typeof value === \"string\" ? JSON.parse(value) : value;\n  if (!Array.isArray(parsed)) return undefined;\n  if (\n    parsed.some(\n      (patch) =>\n        !patch ||\n        typeof patch.find !== \"string\" ||\n        typeof patch.replace !== \"string\",\n    )\n  ) {\n    return undefined;\n  }\n  return parsed;\n}\n"]}

package/dist/extensions/html-shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"html-shell.d.ts","sourceRoot":"","sources":["../../src/extensions/html-shell.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,8YAC4W,CAAC;AAE9Y,eAAO,MAAM,yBAAyB,QAGrC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,MAAM,WAAW,sBAAsB;IACrC,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;;;;OASG;IACH,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;CAC/C;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,EACf,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,MAAM,CA4gBR"}
+{"version":3,"file":"html-shell.d.ts","sourceRoot":"","sources":["../../src/extensions/html-shell.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,8YAC4W,CAAC;AAE9Y,eAAO,MAAM,yBAAyB,QAGrC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,MAAM,WAAW,sBAAsB;IACrC,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;;;;OASG;IACH,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;CAC/C;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,EACf,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,MAAM,CA0jBR"}

package/dist/extensions/html-shell.js

@@ -242,13 +242,59 @@ export function buildExtensionHtml(content, themeVars, isDark, extensionId, bind
 	      });
 	    }
 
+	    function _appendActionQuery(path, params) {
+	      var search = new URLSearchParams();
+	      params = params || {};
+	      Object.keys(params).forEach(function(key) {
+	        var value = params[key];
+	        if (value === undefined || value === null) return;
+	        if (Array.isArray(value)) {
+	          value.forEach(function(item) {
+	            if (item !== undefined && item !== null) {
+	              search.append(key, String(item));
+	            }
+	          });
+	          return;
+	        }
+	        search.set(key, String(value));
+	      });
+	      var qs = search.toString();
+	      return qs ? path + '?' + qs : path;
+	    }
+
+	    function _methodHintFromActionResponse(res) {
+	      if (!res || res.status !== 405) return null;
+	      var body = res.body || {};
+	      var message = typeof body === 'string' ? body : body.error;
+	      if (!message) return null;
+	      var match = String(message).match(/Use (GET|POST|PUT|PATCH|DELETE|HEAD)\\.?/i);
+	      return match ? match[1].toUpperCase() : null;
+	    }
+
 	    async function appAction(name, params) {
 	      params = params || {};
-	      var res = await hostRequest('/_agent-native/actions/' + encodeURIComponent(name), {
+	      var path = '/_agent-native/actions/' + encodeURIComponent(name);
+	      var res = await hostRequest(path, {
 	        method: 'POST',
 	        headers: { 'Content-Type': 'application/json' },
 	        body: JSON.stringify(params),
 	      });
+
+	      var retryMethod = _methodHintFromActionResponse(res);
+	      if (!res.ok && retryMethod && retryMethod !== 'POST') {
+	        var retryPath = path;
+	        var retryOptions = {
+	          method: retryMethod,
+	          headers: { 'Content-Type': 'application/json' },
+	        };
+	        if (retryMethod === 'GET' || retryMethod === 'HEAD') {
+	          retryPath = _appendActionQuery(path, params);
+	        } else {
+	          retryOptions.body = JSON.stringify(params);
+	        }
+	        res = await hostRequest(retryPath, retryOptions);
+	      }
+
 	      if (!res.ok) {
 	        var err = res.body || { error: res.statusText };
 	        throw new Error(err.error || 'Action failed: ' + res.status);

package/dist/extensions/html-shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"html-shell.js","sourceRoot":"","sources":["../../src/extensions/html-shell.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAC/B,2YAA2Y,CAAC;AAE9Y,MAAM,CAAC,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,OAAO,CACnE,8BAA8B,EAC9B,EAAE,CACH,CAAC;AAwDF,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,SAAiB,EACjB,MAAe,EACf,WAAoB,EACpB,OAAgC;IAEhC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAChC,OAAO,IAAI;QACT,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,OAAO;KACd,CACF,CAAC;IAEF,OAAO;iBACQ,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;;;;wDAIU,yBAAyB;IAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,uDAAuD,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8ElI,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAqMK,eAAe;8BACV,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA0NjC,WAAW,CAAC,CAAC,CAAC,uBAAuB,eAAe,mBAAmB,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE;GACnG,OAAO;;;;;;;;;;SAUD,CAAC;AACV,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["export const EXTENSION_IFRAME_CSP =\n  \"default-src 'none'; script-src 'self' https://cdn.jsdelivr.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src https://fonts.gstatic.com; connect-src 'self'; img-src 'self' data: blob:; media-src 'self' data: blob:; frame-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'self';\";\n\nexport const EXTENSION_IFRAME_META_CSP = EXTENSION_IFRAME_CSP.replace(\n  /\\s*frame-ancestors 'self';?$/,\n  \"\",\n);\n\n/**\n * SECURITY — EXTENSION CONTENT IS UNTRUSTED.\n *\n * `${content}` (line ~Body) interpolates raw HTML/JS authored by a user. This\n * file is the boundary between framework-controlled HTML and user-controlled\n * HTML. Two non-negotiable invariants for every change here:\n *\n *   1. The iframe MUST be rendered with a `sandbox` attribute that does NOT\n *      include `allow-same-origin`. The viewer (`ExtensionViewer.tsx`,\n *      `EmbeddedExtension.tsx`) sets `sandbox=\"allow-scripts allow-forms\"` —\n *      and that is the only acceptable shape. Adding `allow-same-origin`\n *      would give the extension full DOM access to the parent window via\n *      cross-frame script.\n *\n *   2. Every reachable parent action must treat the postMessage payload as\n *      hostile. The bridge in `iframe-bridge.ts` enforces a path allowlist,\n *      header sanitization, and method allowlist; do not relax those gates\n *      for \"convenience\" in this file or any caller.\n *\n * For the trust model rationale, see audit 05-tools-sandbox.md (C1) and the\n * `extensions` skill. When in doubt, fail closed.\n *\n * BACKWARDS COMPAT — the iframe injects helpers under both their canonical\n * `extension*` names (`extensionFetch`, `extensionData`, `extensionId`,\n * `extensionBinding`) AND legacy `tool*` aliases (`toolFetch`, `toolData`,\n * `toolId`, `toolBinding`) so existing user-authored extension bodies that\n * pre-date the rename keep working. Same for layout opt-ins:\n * `data-extension-layout=\"full-bleed\"` / `data-extension-padding=\"none\"` /\n * class `agent-native-extension-bleed` / CSS var\n * `--agent-native-extension-padding` are canonical; the `data-tool-*`,\n * `agent-native-tool-bleed`, and `--agent-native-tool-padding` variants are\n * accepted as aliases.\n */\n\nexport interface ExtensionRenderBinding {\n  /** Email of the user who authored / owns the extension. */\n  authorEmail: string;\n  /** Email of the user currently viewing/running the extension. */\n  viewerEmail: string;\n  /** True when viewer === author. */\n  isAuthor: boolean;\n  /**\n   * Resolved role for the viewer (\"owner\" | \"admin\" | \"editor\" | \"viewer\").\n   *\n   * TODO(security, audit H4): the host-side bridge does not yet gate any\n   * helper based on this value — every viewer gets the same powers as the\n   * author. The role is plumbed through so a follow-up PR can constrain\n   * `appAction` / `dbExec` / `extensionFetch` for non-author viewers (and\n   * eventually require an explicit consent step before running a shared\n   * extension, audit C1). For now this is metadata only.\n   */\n  role: \"owner\" | \"admin\" | \"editor\" | \"viewer\";\n}\n\nexport function buildExtensionHtml(\n  content: string,\n  themeVars: string,\n  isDark: boolean,\n  extensionId?: string,\n  binding?: ExtensionRenderBinding,\n): string {\n  const extensionIdJson = JSON.stringify(extensionId ?? \"\");\n  const extensionIdAttr = escapeHtmlAttribute(extensionId ?? \"\");\n  const bindingJson = JSON.stringify(\n    binding ?? {\n      authorEmail: \"\",\n      viewerEmail: \"\",\n      isAuthor: true,\n      role: \"owner\",\n    },\n  );\n\n  return `<!DOCTYPE html>\n<html lang=\"en\"${isDark ? ' class=\"dark\"' : \"\"}>\n<head>\n  <meta charset=\"utf-8\" />\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n  <meta http-equiv=\"Content-Security-Policy\" content=\"${EXTENSION_IFRAME_META_CSP}\" />\n  ${binding && !binding.isAuthor ? `<meta name=\"agent-native-extension-author\" content=\"${escapeHtmlAttribute(binding.authorEmail)}\" />` : \"\"}\n  <link rel=\"preconnect\" href=\"https://fonts.googleapis.com\" />\n  <link rel=\"preconnect\" href=\"https://fonts.gstatic.com\" crossorigin />\n  <link href=\"https://fonts.googleapis.com/css2?family=Inter:wght@300..700&display=swap\" rel=\"stylesheet\" />\n  <script>\n    var _extensionErrors = [];\n    var _extensionErrorDetails = [];\n    var _consoleLogs = [];\n    var _networkLogs = [];\n\n    var _origConsole = { log: console.log, warn: console.warn, error: console.error, info: console.info };\n    function _wrapConsole(level, orig) {\n      return function() {\n        var args = Array.prototype.slice.call(arguments);\n        var msg = args.map(function(a) {\n          try { return typeof a === 'object' ? JSON.stringify(a) : String(a); }\n          catch(e) { return String(a); }\n        }).join(' ');\n        if (_consoleLogs.length >= 50) _consoleLogs.shift();\n        _consoleLogs.push({ level: level, message: msg });\n        orig.apply(console, arguments);\n      };\n    }\n    console.log = _wrapConsole('log', _origConsole.log);\n    console.warn = _wrapConsole('warn', _origConsole.warn);\n    console.error = _wrapConsole('error', _origConsole.error);\n    console.info = _wrapConsole('info', _origConsole.info);\n\n    function _collectError(message, stack) {\n      if (!message) return;\n      if (message === 'Script error.' || message === 'Script error') message = 'Runtime error';\n      if (_extensionErrors.indexOf(message) !== -1) return;\n      _extensionErrors.push(message);\n      _extensionErrorDetails.push({ message: message, stack: stack || '' });\n      var toast = document.getElementById('__extension-error-toast');\n      if (!toast) return;\n      var msg = document.getElementById('__extension-error-msg');\n      if (_extensionErrors.length === 1) {\n        msg.textContent = _extensionErrors[0];\n      } else {\n        msg.textContent = _extensionErrors.length + ' errors — ' + _extensionErrors[_extensionErrors.length - 1];\n      }\n      toast.style.display = 'block';\n    }\n\n    window.addEventListener('error', function(event) {\n      var msg = event.message || '';\n      if (msg.indexOf('Alpine Expression Error') === 0) return;\n      var stack = event.error && event.error.stack ? event.error.stack : '';\n      _collectError(msg, stack);\n    });\n\n    window.addEventListener('unhandledrejection', function(event) {\n      var msg = event.reason && event.reason.message ? event.reason.message : String(event.reason);\n      var stack = event.reason && event.reason.stack ? event.reason.stack : '';\n      _collectError(msg, stack);\n    });\n  </script>\n  <!--\n    SECURITY: pinned to exact patch versions + SRI integrity hashes. A\n    malicious republish of @tailwindcss/browser@4.x or alpinejs@3.x would\n    otherwise inject code into every extension. To bump these versions:\n      1. npm view @tailwindcss/browser version  (or alpinejs)\n      2. curl -sL https://cdn.jsdelivr.net/npm/@tailwindcss/browser@<v> \\\\\n         | openssl dgst -sha384 -binary | openssl base64 -A\n      3. Update the URL + integrity hash below in lockstep.\n  -->\n  <script\n    src=\"https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4.2.4\"\n    integrity=\"sha384-yNSZBFvuOWcmww494a9+1zNuvgUGEXoWkein7cxP8wHUTi3iXCU4vJ7hr3tzBCml\"\n    crossorigin=\"anonymous\"\n  ></script>\n  <script\n    defer\n    src=\"https://cdn.jsdelivr.net/npm/alpinejs@3.15.11/dist/cdn.min.js\"\n    integrity=\"sha384-WPtu0YHhJ3arcykfnv1JgUffWDSKRnqnDeTpJUbOc2os2moEmLkIdaeR0trPN4be\"\n    crossorigin=\"anonymous\"\n  ></script>\n  <style>${themeVars}</style>\n  <style type=\"text/tailwindcss\">\n    @custom-variant dark (&:where(.dark, .dark *));\n    @theme {\n      --color-border: hsl(var(--border));\n      --color-input: hsl(var(--input));\n      --color-ring: hsl(var(--ring));\n      --color-background: hsl(var(--background));\n      --color-foreground: hsl(var(--foreground));\n      --color-primary: hsl(var(--primary));\n      --color-primary-foreground: hsl(var(--primary-foreground));\n      --color-secondary: hsl(var(--secondary));\n      --color-secondary-foreground: hsl(var(--secondary-foreground));\n      --color-destructive: hsl(var(--destructive));\n      --color-destructive-foreground: hsl(var(--destructive-foreground));\n      --color-muted: hsl(var(--muted));\n      --color-muted-foreground: hsl(var(--muted-foreground));\n      --color-accent: hsl(var(--accent));\n      --color-accent-foreground: hsl(var(--accent-foreground));\n      --color-popover: hsl(var(--popover));\n      --color-popover-foreground: hsl(var(--popover-foreground));\n      --color-card: hsl(var(--card));\n      --color-card-foreground: hsl(var(--card-foreground));\n      --color-sidebar: hsl(var(--sidebar-background));\n      --color-sidebar-foreground: hsl(var(--sidebar-foreground));\n      --color-sidebar-primary: hsl(var(--sidebar-primary));\n      --color-sidebar-primary-foreground: hsl(var(--sidebar-primary-foreground));\n      --color-sidebar-accent: hsl(var(--sidebar-accent));\n      --color-sidebar-accent-foreground: hsl(var(--sidebar-accent-foreground));\n      --color-sidebar-border: hsl(var(--sidebar-border));\n      --color-sidebar-ring: hsl(var(--sidebar-ring));\n      --radius-lg: var(--radius);\n      --radius-md: calc(var(--radius) - 2px);\n      --radius-sm: calc(var(--radius) - 4px);\n    }\n  </style>\n\t  <style>\n\t    *, *::before, *::after { border-color: hsl(var(--border)); }\n\t    body {\n\t      --agent-native-extension-padding: clamp(16px, 2vw, 24px);\n\t      /* Legacy alias for pre-rename extension content (do not remove). */\n\t      --agent-native-tool-padding: var(--agent-native-extension-padding);\n\t      box-sizing: border-box;\n\t      font-family: 'Inter', sans-serif;\n\t      margin: 0;\n\t      min-height: 100vh;\n\t      padding: var(--agent-native-extension-padding);\n\t    }\n\t    body:has(> [data-extension-layout=\"full-bleed\"]),\n\t    body:has(> [data-extension-padding=\"none\"]),\n\t    body:has(> .agent-native-extension-bleed),\n\t    /* Legacy aliases (do not remove). */\n\t    body:has(> [data-tool-layout=\"full-bleed\"]),\n\t    body:has(> [data-tool-padding=\"none\"]),\n\t    body:has(> .agent-native-tool-bleed) {\n\t      padding: 0;\n\t    }\n\t  </style>\n\t  <script>\n\t    var _extensionRequestSeq = 0;\n\t    var _extensionPendingRequests = {};\n\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var message = event.data || {};\n\t      if (\n\t        message.type !== 'agent-native-extension-response' &&\n\t        message.type !== 'agent-native-tool-response'\n\t      ) return;\n\t      var pending = _extensionPendingRequests[message.requestId];\n\t      if (!pending) return;\n\t      delete _extensionPendingRequests[message.requestId];\n\t      if (message.error) {\n\t        pending.reject(new Error(message.error));\n\t      } else {\n\t        pending.resolve(message.response);\n\t      }\n\t    });\n\n\t    function hostRequest(path, options) {\n\t      options = options || {};\n\t      return new Promise(function(resolve, reject) {\n\t        var requestId = 'extension-req-' + (++_extensionRequestSeq);\n\t        _extensionPendingRequests[requestId] = { resolve: resolve, reject: reject };\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-request',\n\t          requestId: requestId,\n\t          path: path,\n\t          options: {\n\t            method: options.method || 'GET',\n\t            headers: options.headers || {},\n\t            body: options.body,\n\t          },\n\t        }, '*');\n\t        setTimeout(function() {\n\t          var pending = _extensionPendingRequests[requestId];\n\t          if (!pending) return;\n\t          delete _extensionPendingRequests[requestId];\n\t          pending.reject(new Error('Extension host request timed out'));\n\t        }, 30000);\n\t      });\n\t    }\n\n\t    var _origHostRequest = hostRequest;\n\t    hostRequest = function(path, options) {\n\t      var entry = { path: path, method: (options && options.method) || 'GET' };\n\t      return _origHostRequest(path, options).then(function(res) {\n\t        entry.ok = res.ok;\n\t        entry.status = res.status;\n\t        if (!res.ok && res.body) {\n\t          try { entry.error = typeof res.body === 'string' ? res.body.slice(0, 200) : JSON.stringify(res.body).slice(0, 200); } catch(e) {}\n\t        }\n\t        if (_networkLogs.length >= 20) _networkLogs.shift();\n\t        _networkLogs.push(entry);\n\t        return res;\n\t      }, function(err) {\n\t        entry.ok = false;\n\t        entry.error = err.message;\n\t        if (_networkLogs.length >= 20) _networkLogs.shift();\n\t        _networkLogs.push(entry);\n\t        throw err;\n\t      });\n\t    };\n\n\t    function extensionFetch(url, options) {\n\t      var opts = options || {};\n\t      return hostRequest('/_agent-native/extensions/proxy', {\n\t        method: 'POST',\n\t        headers: { 'Content-Type': 'application/json' },\n\t        body: JSON.stringify({\n\t          url: url,\n          method: opts.method || 'GET',\n          headers: opts.headers,\n          body: opts.body,\n        }),\n\t      }).then(function(res) {\n\t        var data = res.body;\n\t          if (data.error && data.status === undefined) {\n\t            throw new Error(data.error);\n\t          }\n          return {\n            ok: data.status >= 200 && data.status < 300,\n            status: data.status,\n\t            json: function() { return Promise.resolve(data.body); },\n\t            text: function() { return Promise.resolve(typeof data.body === 'string' ? data.body : JSON.stringify(data.body)); },\n\t          };\n\t      });\n\t    }\n\n\t    async function appAction(name, params) {\n\t      params = params || {};\n\t      var res = await hostRequest('/_agent-native/actions/' + encodeURIComponent(name), {\n\t        method: 'POST',\n\t        headers: { 'Content-Type': 'application/json' },\n\t        body: JSON.stringify(params),\n\t      });\n\t      if (!res.ok) {\n\t        var err = res.body || { error: res.statusText };\n\t        throw new Error(err.error || 'Action failed: ' + res.status);\n\t      }\n\t      return res.body;\n\t    }\n\n\t    async function appFetch(path, options) {\n\t      options = options || {};\n\t      var res = await hostRequest(path, {\n\t        ...options,\n\t        headers: {\n\t          'Content-Type': 'application/json',\n\t          ...(options.headers || {}),\n\t        },\n\t      });\n\t      if (!res.ok) {\n\t        var err = typeof res.body === 'object' && res.body ? res.body : { error: res.statusText };\n\t        throw new Error(err.error || 'Request failed: ' + res.status);\n\t      }\n\t      return res.body;\n\t    }\n\n    async function dbQuery(sql, args) {\n      var body = { sql: sql };\n      if (args) body.args = args;\n      return appFetch('/_agent-native/extensions/sql/query', {\n        method: 'POST',\n        body: JSON.stringify(body),\n      });\n    }\n\n    async function dbExec(sql, args) {\n      var body = { sql: sql };\n      if (args) body.args = args;\n      return appFetch('/_agent-native/extensions/sql/exec', {\n        method: 'POST',\n        body: JSON.stringify(body),\n      });\n    }\n\n    var _extensionId = ${extensionIdJson};\n    var _extensionBinding = ${bindingJson};\n    window.extensionBinding = _extensionBinding;\n    // Legacy alias for extension bodies authored before the rename.\n    window.toolBinding = _extensionBinding;\n    // SECURITY (audit H4): announce the resolved binding to the parent so the\n    // host bridge can gate dangerous helpers based on viewer role. Sent\n    // BEFORE the user-authored content has a chance to run, so a malicious\n    // extension body cannot suppress or rewrite the announcement. The parent\n    // ignores subsequent announcements for the same iframe; see\n    // ExtensionViewer.tsx / EmbeddedExtension.tsx.\n    try {\n      window.parent.postMessage(\n        {\n          type: 'agent-native-extension-binding',\n          extensionId: _extensionId,\n          binding: _extensionBinding,\n        },\n        '*',\n      );\n    } catch (_) {}\n    // SECURITY: when the viewer is not the author of this extension, emit a\n    // clear console warning. The bridge currently runs every helper with the\n    // viewer's session — a malicious shared extension can call any action,\n    // read any owned table row in scope, and resolve any user-scope secret.\n    // A full consent step is tracked as TODO C1 in audit 05-tools-sandbox.md.\n    if (_extensionBinding && !_extensionBinding.isAuthor) {\n      try {\n        console.warn(\n          '[agent-native] Shared extension — running with viewer\\\\'s session. ' +\n            'Author: ' + (_extensionBinding.authorEmail || '<unknown>') + '. ' +\n            'Bridge calls (appAction, dbExec, extensionFetch) execute under ' +\n            'your account; they are gated by your permissions, not the ' +\n            'author\\\\'s. Do not run untrusted shared extensions.',\n        );\n      } catch (_) {}\n    }\n\n    var extensionData = {\n\t      async list(collection, opts) {\n\t        var limit = (opts && opts.limit) || 100;\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection) + '?limit=' + limit + '&scope=' + scope);\n\t        if (!res.ok) throw new Error('Failed to list extension data');\n\t        return res.body;\n\t      },\n      async get(collection, id, opts) {\n        var scope = (opts && opts.scope) || 'user';\n        var items = await this.list(collection, { scope: scope });\n        return (items || []).find(function(item) { return item.id === id; }) || null;\n      },\n      async set(collection, id, data, opts) {\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection), {\n\t          method: 'POST',\n\t          headers: { 'Content-Type': 'application/json' },\n\t          body: JSON.stringify({ id: id, data: data, scope: scope }),\n\t        });\n\t        if (!res.ok) throw new Error('Failed to save extension data');\n\t        return res.body;\n\t      },\n\t      async remove(collection, id, opts) {\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection) + '/' + encodeURIComponent(id) + '?scope=' + scope, {\n\t          method: 'DELETE',\n\t        });\n\t        if (!res.ok) throw new Error('Failed to delete extension data');\n\t        return res.body;\n\t      },\n\t    };\n\n\t    // Legacy aliases — extension bodies authored before the rename use\n\t    // toolFetch, toolData, toolId. Keep these working forever.\n\t    var toolFetch = extensionFetch;\n\t    var toolData = extensionData;\n\t    var _toolId = _extensionId;\n\t  </script>\n\t  <style>\n\t    #__extension-error-toast {\n\t      display: none;\n\t      position: fixed;\n\t      bottom: 16px;\n\t      right: 16px;\n\t      max-width: 420px;\n\t      background: hsl(var(--destructive));\n\t      color: hsl(var(--destructive-foreground));\n\t      border: 1px solid hsl(var(--destructive) / .6);\n\t      border-radius: calc(var(--radius, .5rem) + 2px);\n\t      padding: 12px 16px;\n\t      font-size: 13px;\n\t      line-height: 1.4;\n\t      font-family: 'Inter', sans-serif;\n\t      z-index: 9999;\n\t      box-shadow: 0 4px 12px rgba(0,0,0,.15), 0 1px 3px rgba(0,0,0,.1);\n\t      animation: __toast-in 0.2s ease-out;\n\t    }\n\t    @keyframes __toast-in {\n\t      from { opacity: 0; transform: translateY(8px); }\n\t      to { opacity: 1; transform: translateY(0); }\n\t    }\n\t  </style>\n\t  <script>\n\t    // Extension-point slot context: when an extension is rendered embedded\n\t    // inside an ExtensionSlot, the host pushes a context object via\n\t    // postMessage. Extensions read it synchronously via window.slotContext\n\t    // or subscribe to changes via window.onSlotContext(fn). When rendered\n\t    // full-page (no ?slot= param), slotContext stays null and extensions\n\t    // branch on that.\n\t    window.slotContext = null;\n\t    var _slotContextSubscribers = [];\n\t    window.onSlotContext = function(fn) {\n\t      _slotContextSubscribers.push(fn);\n\t      if (window.slotContext !== null) {\n\t        try { fn(window.slotContext); } catch(_) {}\n\t      }\n\t      return function() {\n\t        _slotContextSubscribers = _slotContextSubscribers.filter(function(f) { return f !== fn; });\n\t      };\n\t    };\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var msg = event.data;\n\t      if (!msg || msg.type !== 'agent-native-slot-context') return;\n\t      window.slotContext = msg.context || {};\n\t      _slotContextSubscribers.forEach(function(fn) {\n\t        try { fn(window.slotContext); } catch(_) {}\n\t      });\n\t    });\n\n\t    // Auto-resize the iframe to its content when running in slot mode. The\n\t    // host listens for agent-native-extension-resize and adjusts the iframe height.\n\t    if (new URLSearchParams(location.search).get('slot')) {\n\t      var _lastH = 0;\n\t      var _reportHeight = function() {\n\t        var h = Math.max(\n\t          document.documentElement.scrollHeight,\n\t          document.body ? document.body.scrollHeight : 0,\n\t        );\n\t        if (h !== _lastH) {\n\t          _lastH = h;\n\t          window.parent.postMessage({ type: 'agent-native-extension-resize', height: h }, '*');\n\t        }\n\t      };\n\t      if (typeof ResizeObserver !== 'undefined') {\n\t        var _ro = new ResizeObserver(_reportHeight);\n\t        document.addEventListener('DOMContentLoaded', function() {\n\t          _ro.observe(document.documentElement);\n\t          if (document.body) _ro.observe(document.body);\n\t        });\n\t      }\n\t      // Initial reports — Alpine takes a tick to render after DOMContentLoaded.\n\t      setTimeout(_reportHeight, 50);\n\t      setTimeout(_reportHeight, 250);\n\t    }\n\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var msg = event.data;\n\t      if (!msg || msg.type !== 'agent-native-theme-update') return;\n\t      var root = document.documentElement;\n\t      if (msg.isDark !== undefined) {\n\t        if (msg.isDark) root.classList.add('dark');\n\t        else root.classList.remove('dark');\n\t      }\n\t      var vars = msg.vars || {};\n\t      for (var key in vars) {\n\t        if (vars.hasOwnProperty(key)) {\n\t          root.style.setProperty(key, vars[key]);\n\t        }\n\t      }\n\t    });\n\n\t    document.addEventListener('keydown', function(e) {\n\t      if ((e.metaKey || e.ctrlKey) && !e.altKey) {\n\t        var key = e.key.toLowerCase();\n\t        if (key === 'c' || key === 'v' || key === 'x' || key === 'a' || key === 'z' || key === 'y') return;\n\t        e.preventDefault();\n\t        e.stopPropagation();\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-keydown',\n\t          key: e.key, code: e.code,\n\t          metaKey: e.metaKey, ctrlKey: e.ctrlKey,\n\t          shiftKey: e.shiftKey, altKey: e.altKey,\n\t        }, '*');\n\t        return;\n\t      }\n\t      if (e.key === 'Escape') {\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-keydown',\n\t          key: e.key, code: e.code,\n\t          metaKey: false, ctrlKey: false,\n\t          shiftKey: false, altKey: false,\n\t        }, '*');\n\t      }\n\t    });\n\n\t    document.addEventListener('DOMContentLoaded', function() {\n\t      var fixBtn = document.getElementById('__extension-error-fix');\n\t      if (fixBtn) {\n\t        fixBtn.addEventListener('click', function() {\n\t          window.parent.postMessage({\n\t            type: 'agent-native-extension-error-fix',\n\t            errors: _extensionErrors,\n\t            errorDetails: _extensionErrorDetails,\n\t            consoleLogs: _consoleLogs.slice(-30),\n\t            networkLogs: _networkLogs.slice(-15)\n\t          }, '*');\n\t          document.getElementById('__extension-error-toast').style.display = 'none';\n\t        });\n\t      }\n\t      var dismissBtn = document.getElementById('__extension-error-dismiss');\n\t      if (dismissBtn) {\n\t        dismissBtn.addEventListener('click', function() {\n\t          document.getElementById('__extension-error-toast').style.display = 'none';\n\t        });\n\t      }\n\t    });\n\t  </script>\n\t</head>\n\t<body${extensionId ? ` data-extension-id=\"${extensionIdAttr}\" data-tool-id=\"${extensionIdAttr}\"` : \"\"} class=\"bg-background text-foreground\">\n\t${content}\n\t<div id=\"__extension-error-toast\">\n\t  <div style=\"display:flex;align-items:flex-start;gap:8px;\">\n\t    <svg xmlns=\"http://www.w3.org/2000/svg\" width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"flex-shrink:0;margin-top:1px;\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><line x1=\"12\" y1=\"8\" x2=\"12\" y2=\"12\"/><line x1=\"12\" y1=\"16\" x2=\"12.01\" y2=\"16\"/></svg>\n\t    <span id=\"__extension-error-msg\" style=\"flex:1;overflow:hidden;display:-webkit-box;-webkit-line-clamp:3;-webkit-box-orient:vertical;\"></span>\n\t    <button id=\"__extension-error-fix\" style=\"cursor:pointer;border:none;background:rgba(255,255,255,.9);color:hsl(0 84.2% 40%);font-size:12px;font-weight:500;padding:4px 12px;border-radius:4px;flex-shrink:0;\">Fix</button>\n\t    <button id=\"__extension-error-dismiss\" style=\"cursor:pointer;border:none;background:transparent;color:inherit;font-size:16px;padding:2px 6px;opacity:0.7;flex-shrink:0;\">&#215;</button>\n\t  </div>\n\t</div>\n\t</body>\n\t</html>`;\n}\n\nfunction escapeHtmlAttribute(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n"]}
+{"version":3,"file":"html-shell.js","sourceRoot":"","sources":["../../src/extensions/html-shell.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAC/B,2YAA2Y,CAAC;AAE9Y,MAAM,CAAC,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,OAAO,CACnE,8BAA8B,EAC9B,EAAE,CACH,CAAC;AAwDF,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,SAAiB,EACjB,MAAe,EACf,WAAoB,EACpB,OAAgC;IAEhC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAChC,OAAO,IAAI;QACT,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,OAAO;KACd,CACF,CAAC;IAEF,OAAO;iBACQ,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;;;;wDAIU,yBAAyB;IAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,uDAAuD,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8ElI,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAmPK,eAAe;8BACV,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA0NjC,WAAW,CAAC,CAAC,CAAC,uBAAuB,eAAe,mBAAmB,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE;GACnG,OAAO;;;;;;;;;;SAUD,CAAC;AACV,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["export const EXTENSION_IFRAME_CSP =\n  \"default-src 'none'; script-src 'self' https://cdn.jsdelivr.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src https://fonts.gstatic.com; connect-src 'self'; img-src 'self' data: blob:; media-src 'self' data: blob:; frame-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'self';\";\n\nexport const EXTENSION_IFRAME_META_CSP = EXTENSION_IFRAME_CSP.replace(\n  /\\s*frame-ancestors 'self';?$/,\n  \"\",\n);\n\n/**\n * SECURITY — EXTENSION CONTENT IS UNTRUSTED.\n *\n * `${content}` (line ~Body) interpolates raw HTML/JS authored by a user. This\n * file is the boundary between framework-controlled HTML and user-controlled\n * HTML. Two non-negotiable invariants for every change here:\n *\n *   1. The iframe MUST be rendered with a `sandbox` attribute that does NOT\n *      include `allow-same-origin`. The viewer (`ExtensionViewer.tsx`,\n *      `EmbeddedExtension.tsx`) sets `sandbox=\"allow-scripts allow-forms\"` —\n *      and that is the only acceptable shape. Adding `allow-same-origin`\n *      would give the extension full DOM access to the parent window via\n *      cross-frame script.\n *\n *   2. Every reachable parent action must treat the postMessage payload as\n *      hostile. The bridge in `iframe-bridge.ts` enforces a path allowlist,\n *      header sanitization, and method allowlist; do not relax those gates\n *      for \"convenience\" in this file or any caller.\n *\n * For the trust model rationale, see audit 05-tools-sandbox.md (C1) and the\n * `extensions` skill. When in doubt, fail closed.\n *\n * BACKWARDS COMPAT — the iframe injects helpers under both their canonical\n * `extension*` names (`extensionFetch`, `extensionData`, `extensionId`,\n * `extensionBinding`) AND legacy `tool*` aliases (`toolFetch`, `toolData`,\n * `toolId`, `toolBinding`) so existing user-authored extension bodies that\n * pre-date the rename keep working. Same for layout opt-ins:\n * `data-extension-layout=\"full-bleed\"` / `data-extension-padding=\"none\"` /\n * class `agent-native-extension-bleed` / CSS var\n * `--agent-native-extension-padding` are canonical; the `data-tool-*`,\n * `agent-native-tool-bleed`, and `--agent-native-tool-padding` variants are\n * accepted as aliases.\n */\n\nexport interface ExtensionRenderBinding {\n  /** Email of the user who authored / owns the extension. */\n  authorEmail: string;\n  /** Email of the user currently viewing/running the extension. */\n  viewerEmail: string;\n  /** True when viewer === author. */\n  isAuthor: boolean;\n  /**\n   * Resolved role for the viewer (\"owner\" | \"admin\" | \"editor\" | \"viewer\").\n   *\n   * TODO(security, audit H4): the host-side bridge does not yet gate any\n   * helper based on this value — every viewer gets the same powers as the\n   * author. The role is plumbed through so a follow-up PR can constrain\n   * `appAction` / `dbExec` / `extensionFetch` for non-author viewers (and\n   * eventually require an explicit consent step before running a shared\n   * extension, audit C1). For now this is metadata only.\n   */\n  role: \"owner\" | \"admin\" | \"editor\" | \"viewer\";\n}\n\nexport function buildExtensionHtml(\n  content: string,\n  themeVars: string,\n  isDark: boolean,\n  extensionId?: string,\n  binding?: ExtensionRenderBinding,\n): string {\n  const extensionIdJson = JSON.stringify(extensionId ?? \"\");\n  const extensionIdAttr = escapeHtmlAttribute(extensionId ?? \"\");\n  const bindingJson = JSON.stringify(\n    binding ?? {\n      authorEmail: \"\",\n      viewerEmail: \"\",\n      isAuthor: true,\n      role: \"owner\",\n    },\n  );\n\n  return `<!DOCTYPE html>\n<html lang=\"en\"${isDark ? ' class=\"dark\"' : \"\"}>\n<head>\n  <meta charset=\"utf-8\" />\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n  <meta http-equiv=\"Content-Security-Policy\" content=\"${EXTENSION_IFRAME_META_CSP}\" />\n  ${binding && !binding.isAuthor ? `<meta name=\"agent-native-extension-author\" content=\"${escapeHtmlAttribute(binding.authorEmail)}\" />` : \"\"}\n  <link rel=\"preconnect\" href=\"https://fonts.googleapis.com\" />\n  <link rel=\"preconnect\" href=\"https://fonts.gstatic.com\" crossorigin />\n  <link href=\"https://fonts.googleapis.com/css2?family=Inter:wght@300..700&display=swap\" rel=\"stylesheet\" />\n  <script>\n    var _extensionErrors = [];\n    var _extensionErrorDetails = [];\n    var _consoleLogs = [];\n    var _networkLogs = [];\n\n    var _origConsole = { log: console.log, warn: console.warn, error: console.error, info: console.info };\n    function _wrapConsole(level, orig) {\n      return function() {\n        var args = Array.prototype.slice.call(arguments);\n        var msg = args.map(function(a) {\n          try { return typeof a === 'object' ? JSON.stringify(a) : String(a); }\n          catch(e) { return String(a); }\n        }).join(' ');\n        if (_consoleLogs.length >= 50) _consoleLogs.shift();\n        _consoleLogs.push({ level: level, message: msg });\n        orig.apply(console, arguments);\n      };\n    }\n    console.log = _wrapConsole('log', _origConsole.log);\n    console.warn = _wrapConsole('warn', _origConsole.warn);\n    console.error = _wrapConsole('error', _origConsole.error);\n    console.info = _wrapConsole('info', _origConsole.info);\n\n    function _collectError(message, stack) {\n      if (!message) return;\n      if (message === 'Script error.' || message === 'Script error') message = 'Runtime error';\n      if (_extensionErrors.indexOf(message) !== -1) return;\n      _extensionErrors.push(message);\n      _extensionErrorDetails.push({ message: message, stack: stack || '' });\n      var toast = document.getElementById('__extension-error-toast');\n      if (!toast) return;\n      var msg = document.getElementById('__extension-error-msg');\n      if (_extensionErrors.length === 1) {\n        msg.textContent = _extensionErrors[0];\n      } else {\n        msg.textContent = _extensionErrors.length + ' errors — ' + _extensionErrors[_extensionErrors.length - 1];\n      }\n      toast.style.display = 'block';\n    }\n\n    window.addEventListener('error', function(event) {\n      var msg = event.message || '';\n      if (msg.indexOf('Alpine Expression Error') === 0) return;\n      var stack = event.error && event.error.stack ? event.error.stack : '';\n      _collectError(msg, stack);\n    });\n\n    window.addEventListener('unhandledrejection', function(event) {\n      var msg = event.reason && event.reason.message ? event.reason.message : String(event.reason);\n      var stack = event.reason && event.reason.stack ? event.reason.stack : '';\n      _collectError(msg, stack);\n    });\n  </script>\n  <!--\n    SECURITY: pinned to exact patch versions + SRI integrity hashes. A\n    malicious republish of @tailwindcss/browser@4.x or alpinejs@3.x would\n    otherwise inject code into every extension. To bump these versions:\n      1. npm view @tailwindcss/browser version  (or alpinejs)\n      2. curl -sL https://cdn.jsdelivr.net/npm/@tailwindcss/browser@<v> \\\\\n         | openssl dgst -sha384 -binary | openssl base64 -A\n      3. Update the URL + integrity hash below in lockstep.\n  -->\n  <script\n    src=\"https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4.2.4\"\n    integrity=\"sha384-yNSZBFvuOWcmww494a9+1zNuvgUGEXoWkein7cxP8wHUTi3iXCU4vJ7hr3tzBCml\"\n    crossorigin=\"anonymous\"\n  ></script>\n  <script\n    defer\n    src=\"https://cdn.jsdelivr.net/npm/alpinejs@3.15.11/dist/cdn.min.js\"\n    integrity=\"sha384-WPtu0YHhJ3arcykfnv1JgUffWDSKRnqnDeTpJUbOc2os2moEmLkIdaeR0trPN4be\"\n    crossorigin=\"anonymous\"\n  ></script>\n  <style>${themeVars}</style>\n  <style type=\"text/tailwindcss\">\n    @custom-variant dark (&:where(.dark, .dark *));\n    @theme {\n      --color-border: hsl(var(--border));\n      --color-input: hsl(var(--input));\n      --color-ring: hsl(var(--ring));\n      --color-background: hsl(var(--background));\n      --color-foreground: hsl(var(--foreground));\n      --color-primary: hsl(var(--primary));\n      --color-primary-foreground: hsl(var(--primary-foreground));\n      --color-secondary: hsl(var(--secondary));\n      --color-secondary-foreground: hsl(var(--secondary-foreground));\n      --color-destructive: hsl(var(--destructive));\n      --color-destructive-foreground: hsl(var(--destructive-foreground));\n      --color-muted: hsl(var(--muted));\n      --color-muted-foreground: hsl(var(--muted-foreground));\n      --color-accent: hsl(var(--accent));\n      --color-accent-foreground: hsl(var(--accent-foreground));\n      --color-popover: hsl(var(--popover));\n      --color-popover-foreground: hsl(var(--popover-foreground));\n      --color-card: hsl(var(--card));\n      --color-card-foreground: hsl(var(--card-foreground));\n      --color-sidebar: hsl(var(--sidebar-background));\n      --color-sidebar-foreground: hsl(var(--sidebar-foreground));\n      --color-sidebar-primary: hsl(var(--sidebar-primary));\n      --color-sidebar-primary-foreground: hsl(var(--sidebar-primary-foreground));\n      --color-sidebar-accent: hsl(var(--sidebar-accent));\n      --color-sidebar-accent-foreground: hsl(var(--sidebar-accent-foreground));\n      --color-sidebar-border: hsl(var(--sidebar-border));\n      --color-sidebar-ring: hsl(var(--sidebar-ring));\n      --radius-lg: var(--radius);\n      --radius-md: calc(var(--radius) - 2px);\n      --radius-sm: calc(var(--radius) - 4px);\n    }\n  </style>\n\t  <style>\n\t    *, *::before, *::after { border-color: hsl(var(--border)); }\n\t    body {\n\t      --agent-native-extension-padding: clamp(16px, 2vw, 24px);\n\t      /* Legacy alias for pre-rename extension content (do not remove). */\n\t      --agent-native-tool-padding: var(--agent-native-extension-padding);\n\t      box-sizing: border-box;\n\t      font-family: 'Inter', sans-serif;\n\t      margin: 0;\n\t      min-height: 100vh;\n\t      padding: var(--agent-native-extension-padding);\n\t    }\n\t    body:has(> [data-extension-layout=\"full-bleed\"]),\n\t    body:has(> [data-extension-padding=\"none\"]),\n\t    body:has(> .agent-native-extension-bleed),\n\t    /* Legacy aliases (do not remove). */\n\t    body:has(> [data-tool-layout=\"full-bleed\"]),\n\t    body:has(> [data-tool-padding=\"none\"]),\n\t    body:has(> .agent-native-tool-bleed) {\n\t      padding: 0;\n\t    }\n\t  </style>\n\t  <script>\n\t    var _extensionRequestSeq = 0;\n\t    var _extensionPendingRequests = {};\n\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var message = event.data || {};\n\t      if (\n\t        message.type !== 'agent-native-extension-response' &&\n\t        message.type !== 'agent-native-tool-response'\n\t      ) return;\n\t      var pending = _extensionPendingRequests[message.requestId];\n\t      if (!pending) return;\n\t      delete _extensionPendingRequests[message.requestId];\n\t      if (message.error) {\n\t        pending.reject(new Error(message.error));\n\t      } else {\n\t        pending.resolve(message.response);\n\t      }\n\t    });\n\n\t    function hostRequest(path, options) {\n\t      options = options || {};\n\t      return new Promise(function(resolve, reject) {\n\t        var requestId = 'extension-req-' + (++_extensionRequestSeq);\n\t        _extensionPendingRequests[requestId] = { resolve: resolve, reject: reject };\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-request',\n\t          requestId: requestId,\n\t          path: path,\n\t          options: {\n\t            method: options.method || 'GET',\n\t            headers: options.headers || {},\n\t            body: options.body,\n\t          },\n\t        }, '*');\n\t        setTimeout(function() {\n\t          var pending = _extensionPendingRequests[requestId];\n\t          if (!pending) return;\n\t          delete _extensionPendingRequests[requestId];\n\t          pending.reject(new Error('Extension host request timed out'));\n\t        }, 30000);\n\t      });\n\t    }\n\n\t    var _origHostRequest = hostRequest;\n\t    hostRequest = function(path, options) {\n\t      var entry = { path: path, method: (options && options.method) || 'GET' };\n\t      return _origHostRequest(path, options).then(function(res) {\n\t        entry.ok = res.ok;\n\t        entry.status = res.status;\n\t        if (!res.ok && res.body) {\n\t          try { entry.error = typeof res.body === 'string' ? res.body.slice(0, 200) : JSON.stringify(res.body).slice(0, 200); } catch(e) {}\n\t        }\n\t        if (_networkLogs.length >= 20) _networkLogs.shift();\n\t        _networkLogs.push(entry);\n\t        return res;\n\t      }, function(err) {\n\t        entry.ok = false;\n\t        entry.error = err.message;\n\t        if (_networkLogs.length >= 20) _networkLogs.shift();\n\t        _networkLogs.push(entry);\n\t        throw err;\n\t      });\n\t    };\n\n\t    function extensionFetch(url, options) {\n\t      var opts = options || {};\n\t      return hostRequest('/_agent-native/extensions/proxy', {\n\t        method: 'POST',\n\t        headers: { 'Content-Type': 'application/json' },\n\t        body: JSON.stringify({\n\t          url: url,\n          method: opts.method || 'GET',\n          headers: opts.headers,\n          body: opts.body,\n        }),\n\t      }).then(function(res) {\n\t        var data = res.body;\n\t          if (data.error && data.status === undefined) {\n\t            throw new Error(data.error);\n\t          }\n          return {\n            ok: data.status >= 200 && data.status < 300,\n            status: data.status,\n\t            json: function() { return Promise.resolve(data.body); },\n\t            text: function() { return Promise.resolve(typeof data.body === 'string' ? data.body : JSON.stringify(data.body)); },\n\t          };\n\t      });\n\t    }\n\n\t    function _appendActionQuery(path, params) {\n\t      var search = new URLSearchParams();\n\t      params = params || {};\n\t      Object.keys(params).forEach(function(key) {\n\t        var value = params[key];\n\t        if (value === undefined || value === null) return;\n\t        if (Array.isArray(value)) {\n\t          value.forEach(function(item) {\n\t            if (item !== undefined && item !== null) {\n\t              search.append(key, String(item));\n\t            }\n\t          });\n\t          return;\n\t        }\n\t        search.set(key, String(value));\n\t      });\n\t      var qs = search.toString();\n\t      return qs ? path + '?' + qs : path;\n\t    }\n\n\t    function _methodHintFromActionResponse(res) {\n\t      if (!res || res.status !== 405) return null;\n\t      var body = res.body || {};\n\t      var message = typeof body === 'string' ? body : body.error;\n\t      if (!message) return null;\n\t      var match = String(message).match(/Use (GET|POST|PUT|PATCH|DELETE|HEAD)\\\\.?/i);\n\t      return match ? match[1].toUpperCase() : null;\n\t    }\n\n\t    async function appAction(name, params) {\n\t      params = params || {};\n\t      var path = '/_agent-native/actions/' + encodeURIComponent(name);\n\t      var res = await hostRequest(path, {\n\t        method: 'POST',\n\t        headers: { 'Content-Type': 'application/json' },\n\t        body: JSON.stringify(params),\n\t      });\n\n\t      var retryMethod = _methodHintFromActionResponse(res);\n\t      if (!res.ok && retryMethod && retryMethod !== 'POST') {\n\t        var retryPath = path;\n\t        var retryOptions = {\n\t          method: retryMethod,\n\t          headers: { 'Content-Type': 'application/json' },\n\t        };\n\t        if (retryMethod === 'GET' || retryMethod === 'HEAD') {\n\t          retryPath = _appendActionQuery(path, params);\n\t        } else {\n\t          retryOptions.body = JSON.stringify(params);\n\t        }\n\t        res = await hostRequest(retryPath, retryOptions);\n\t      }\n\n\t      if (!res.ok) {\n\t        var err = res.body || { error: res.statusText };\n\t        throw new Error(err.error || 'Action failed: ' + res.status);\n\t      }\n\t      return res.body;\n\t    }\n\n\t    async function appFetch(path, options) {\n\t      options = options || {};\n\t      var res = await hostRequest(path, {\n\t        ...options,\n\t        headers: {\n\t          'Content-Type': 'application/json',\n\t          ...(options.headers || {}),\n\t        },\n\t      });\n\t      if (!res.ok) {\n\t        var err = typeof res.body === 'object' && res.body ? res.body : { error: res.statusText };\n\t        throw new Error(err.error || 'Request failed: ' + res.status);\n\t      }\n\t      return res.body;\n\t    }\n\n    async function dbQuery(sql, args) {\n      var body = { sql: sql };\n      if (args) body.args = args;\n      return appFetch('/_agent-native/extensions/sql/query', {\n        method: 'POST',\n        body: JSON.stringify(body),\n      });\n    }\n\n    async function dbExec(sql, args) {\n      var body = { sql: sql };\n      if (args) body.args = args;\n      return appFetch('/_agent-native/extensions/sql/exec', {\n        method: 'POST',\n        body: JSON.stringify(body),\n      });\n    }\n\n    var _extensionId = ${extensionIdJson};\n    var _extensionBinding = ${bindingJson};\n    window.extensionBinding = _extensionBinding;\n    // Legacy alias for extension bodies authored before the rename.\n    window.toolBinding = _extensionBinding;\n    // SECURITY (audit H4): announce the resolved binding to the parent so the\n    // host bridge can gate dangerous helpers based on viewer role. Sent\n    // BEFORE the user-authored content has a chance to run, so a malicious\n    // extension body cannot suppress or rewrite the announcement. The parent\n    // ignores subsequent announcements for the same iframe; see\n    // ExtensionViewer.tsx / EmbeddedExtension.tsx.\n    try {\n      window.parent.postMessage(\n        {\n          type: 'agent-native-extension-binding',\n          extensionId: _extensionId,\n          binding: _extensionBinding,\n        },\n        '*',\n      );\n    } catch (_) {}\n    // SECURITY: when the viewer is not the author of this extension, emit a\n    // clear console warning. The bridge currently runs every helper with the\n    // viewer's session — a malicious shared extension can call any action,\n    // read any owned table row in scope, and resolve any user-scope secret.\n    // A full consent step is tracked as TODO C1 in audit 05-tools-sandbox.md.\n    if (_extensionBinding && !_extensionBinding.isAuthor) {\n      try {\n        console.warn(\n          '[agent-native] Shared extension — running with viewer\\\\'s session. ' +\n            'Author: ' + (_extensionBinding.authorEmail || '<unknown>') + '. ' +\n            'Bridge calls (appAction, dbExec, extensionFetch) execute under ' +\n            'your account; they are gated by your permissions, not the ' +\n            'author\\\\'s. Do not run untrusted shared extensions.',\n        );\n      } catch (_) {}\n    }\n\n    var extensionData = {\n\t      async list(collection, opts) {\n\t        var limit = (opts && opts.limit) || 100;\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection) + '?limit=' + limit + '&scope=' + scope);\n\t        if (!res.ok) throw new Error('Failed to list extension data');\n\t        return res.body;\n\t      },\n      async get(collection, id, opts) {\n        var scope = (opts && opts.scope) || 'user';\n        var items = await this.list(collection, { scope: scope });\n        return (items || []).find(function(item) { return item.id === id; }) || null;\n      },\n      async set(collection, id, data, opts) {\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection), {\n\t          method: 'POST',\n\t          headers: { 'Content-Type': 'application/json' },\n\t          body: JSON.stringify({ id: id, data: data, scope: scope }),\n\t        });\n\t        if (!res.ok) throw new Error('Failed to save extension data');\n\t        return res.body;\n\t      },\n\t      async remove(collection, id, opts) {\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection) + '/' + encodeURIComponent(id) + '?scope=' + scope, {\n\t          method: 'DELETE',\n\t        });\n\t        if (!res.ok) throw new Error('Failed to delete extension data');\n\t        return res.body;\n\t      },\n\t    };\n\n\t    // Legacy aliases — extension bodies authored before the rename use\n\t    // toolFetch, toolData, toolId. Keep these working forever.\n\t    var toolFetch = extensionFetch;\n\t    var toolData = extensionData;\n\t    var _toolId = _extensionId;\n\t  </script>\n\t  <style>\n\t    #__extension-error-toast {\n\t      display: none;\n\t      position: fixed;\n\t      bottom: 16px;\n\t      right: 16px;\n\t      max-width: 420px;\n\t      background: hsl(var(--destructive));\n\t      color: hsl(var(--destructive-foreground));\n\t      border: 1px solid hsl(var(--destructive) / .6);\n\t      border-radius: calc(var(--radius, .5rem) + 2px);\n\t      padding: 12px 16px;\n\t      font-size: 13px;\n\t      line-height: 1.4;\n\t      font-family: 'Inter', sans-serif;\n\t      z-index: 9999;\n\t      box-shadow: 0 4px 12px rgba(0,0,0,.15), 0 1px 3px rgba(0,0,0,.1);\n\t      animation: __toast-in 0.2s ease-out;\n\t    }\n\t    @keyframes __toast-in {\n\t      from { opacity: 0; transform: translateY(8px); }\n\t      to { opacity: 1; transform: translateY(0); }\n\t    }\n\t  </style>\n\t  <script>\n\t    // Extension-point slot context: when an extension is rendered embedded\n\t    // inside an ExtensionSlot, the host pushes a context object via\n\t    // postMessage. Extensions read it synchronously via window.slotContext\n\t    // or subscribe to changes via window.onSlotContext(fn). When rendered\n\t    // full-page (no ?slot= param), slotContext stays null and extensions\n\t    // branch on that.\n\t    window.slotContext = null;\n\t    var _slotContextSubscribers = [];\n\t    window.onSlotContext = function(fn) {\n\t      _slotContextSubscribers.push(fn);\n\t      if (window.slotContext !== null) {\n\t        try { fn(window.slotContext); } catch(_) {}\n\t      }\n\t      return function() {\n\t        _slotContextSubscribers = _slotContextSubscribers.filter(function(f) { return f !== fn; });\n\t      };\n\t    };\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var msg = event.data;\n\t      if (!msg || msg.type !== 'agent-native-slot-context') return;\n\t      window.slotContext = msg.context || {};\n\t      _slotContextSubscribers.forEach(function(fn) {\n\t        try { fn(window.slotContext); } catch(_) {}\n\t      });\n\t    });\n\n\t    // Auto-resize the iframe to its content when running in slot mode. The\n\t    // host listens for agent-native-extension-resize and adjusts the iframe height.\n\t    if (new URLSearchParams(location.search).get('slot')) {\n\t      var _lastH = 0;\n\t      var _reportHeight = function() {\n\t        var h = Math.max(\n\t          document.documentElement.scrollHeight,\n\t          document.body ? document.body.scrollHeight : 0,\n\t        );\n\t        if (h !== _lastH) {\n\t          _lastH = h;\n\t          window.parent.postMessage({ type: 'agent-native-extension-resize', height: h }, '*');\n\t        }\n\t      };\n\t      if (typeof ResizeObserver !== 'undefined') {\n\t        var _ro = new ResizeObserver(_reportHeight);\n\t        document.addEventListener('DOMContentLoaded', function() {\n\t          _ro.observe(document.documentElement);\n\t          if (document.body) _ro.observe(document.body);\n\t        });\n\t      }\n\t      // Initial reports — Alpine takes a tick to render after DOMContentLoaded.\n\t      setTimeout(_reportHeight, 50);\n\t      setTimeout(_reportHeight, 250);\n\t    }\n\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var msg = event.data;\n\t      if (!msg || msg.type !== 'agent-native-theme-update') return;\n\t      var root = document.documentElement;\n\t      if (msg.isDark !== undefined) {\n\t        if (msg.isDark) root.classList.add('dark');\n\t        else root.classList.remove('dark');\n\t      }\n\t      var vars = msg.vars || {};\n\t      for (var key in vars) {\n\t        if (vars.hasOwnProperty(key)) {\n\t          root.style.setProperty(key, vars[key]);\n\t        }\n\t      }\n\t    });\n\n\t    document.addEventListener('keydown', function(e) {\n\t      if ((e.metaKey || e.ctrlKey) && !e.altKey) {\n\t        var key = e.key.toLowerCase();\n\t        if (key === 'c' || key === 'v' || key === 'x' || key === 'a' || key === 'z' || key === 'y') return;\n\t        e.preventDefault();\n\t        e.stopPropagation();\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-keydown',\n\t          key: e.key, code: e.code,\n\t          metaKey: e.metaKey, ctrlKey: e.ctrlKey,\n\t          shiftKey: e.shiftKey, altKey: e.altKey,\n\t        }, '*');\n\t        return;\n\t      }\n\t      if (e.key === 'Escape') {\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-keydown',\n\t          key: e.key, code: e.code,\n\t          metaKey: false, ctrlKey: false,\n\t          shiftKey: false, altKey: false,\n\t        }, '*');\n\t      }\n\t    });\n\n\t    document.addEventListener('DOMContentLoaded', function() {\n\t      var fixBtn = document.getElementById('__extension-error-fix');\n\t      if (fixBtn) {\n\t        fixBtn.addEventListener('click', function() {\n\t          window.parent.postMessage({\n\t            type: 'agent-native-extension-error-fix',\n\t            errors: _extensionErrors,\n\t            errorDetails: _extensionErrorDetails,\n\t            consoleLogs: _consoleLogs.slice(-30),\n\t            networkLogs: _networkLogs.slice(-15)\n\t          }, '*');\n\t          document.getElementById('__extension-error-toast').style.display = 'none';\n\t        });\n\t      }\n\t      var dismissBtn = document.getElementById('__extension-error-dismiss');\n\t      if (dismissBtn) {\n\t        dismissBtn.addEventListener('click', function() {\n\t          document.getElementById('__extension-error-toast').style.display = 'none';\n\t        });\n\t      }\n\t    });\n\t  </script>\n\t</head>\n\t<body${extensionId ? ` data-extension-id=\"${extensionIdAttr}\" data-tool-id=\"${extensionIdAttr}\"` : \"\"} class=\"bg-background text-foreground\">\n\t${content}\n\t<div id=\"__extension-error-toast\">\n\t  <div style=\"display:flex;align-items:flex-start;gap:8px;\">\n\t    <svg xmlns=\"http://www.w3.org/2000/svg\" width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"flex-shrink:0;margin-top:1px;\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><line x1=\"12\" y1=\"8\" x2=\"12\" y2=\"12\"/><line x1=\"12\" y1=\"16\" x2=\"12.01\" y2=\"16\"/></svg>\n\t    <span id=\"__extension-error-msg\" style=\"flex:1;overflow:hidden;display:-webkit-box;-webkit-line-clamp:3;-webkit-box-orient:vertical;\"></span>\n\t    <button id=\"__extension-error-fix\" style=\"cursor:pointer;border:none;background:rgba(255,255,255,.9);color:hsl(0 84.2% 40%);font-size:12px;font-weight:500;padding:4px 12px;border-radius:4px;flex-shrink:0;\">Fix</button>\n\t    <button id=\"__extension-error-dismiss\" style=\"cursor:pointer;border:none;background:transparent;color:inherit;font-size:16px;padding:2px 6px;opacity:0.7;flex-shrink:0;\">&#215;</button>\n\t  </div>\n\t</div>\n\t</body>\n\t</html>`;\n}\n\nfunction escapeHtmlAttribute(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n"]}

package/dist/scripts/db/exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../src/scripts/db/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAqkBH,wBAA8B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4JlE"}
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../src/scripts/db/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA6kBH,wBAA8B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4JlE"}

package/dist/scripts/db/exec.js

@@ -306,10 +306,18 @@ function sqliteScopePredicate(tableName, scoping) {
         return `(${userClause}${orgClause})`;
     }
     const clauses = [];
-    if (scoping.userEmail && scoping.ownerEmailTables.has(tableName)) {
-        clauses.push(`owner_email = '${escapeSqlString(scoping.userEmail)}'`);
+    const hasOwner = scoping.ownerEmailTables.has(tableName);
+    const hasOrg = scoping.orgIdTables.has(tableName);
+    if (scoping.userEmail && hasOwner) {
+        const ownerClause = `owner_email = '${escapeSqlString(scoping.userEmail)}'`;
+        if (scoping.orgId && hasOrg) {
+            clauses.push(`${ownerClause} AND (org_id = '${escapeSqlString(scoping.orgId)}' OR org_id IS NULL)`);
+        }
+        else {
+            clauses.push(ownerClause);
+        }
     }
-    if (scoping.orgId && scoping.orgIdTables.has(tableName)) {
+    else if (scoping.orgId && hasOrg) {
         clauses.push(`org_id = '${escapeSqlString(scoping.orgId)}'`);
     }
     return clauses.length > 0 ? clauses.join(" AND ") : null;