@agent-native/core 0.129.1 → 0.130.0

package/dist/client/chat/widgets/workspace-file-result.d.ts

@@ -0,0 +1,12 @@
+export interface WorkspaceFileResult {
+    file: {
+        resourceId: string;
+        path: string;
+        name: string;
+        contentType: string;
+        sizeBytes: number;
+        updatedAt?: string;
+    };
+}
+export declare function normalizeWorkspaceFileResult(value: unknown): WorkspaceFileResult | null;
+//# sourceMappingURL=workspace-file-result.d.ts.map

package/dist/client/chat/widgets/workspace-file-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-file-result.d.ts","sourceRoot":"","sources":["../../../../src/client/chat/widgets/workspace-file-result.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAMD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,GACb,mBAAmB,GAAG,IAAI,CA+B5B"}

package/dist/client/chat/widgets/workspace-file-result.js

@@ -0,0 +1,34 @@
+function isRecord(value) {
+    return !!value && typeof value === "object" && !Array.isArray(value);
+}
+export function normalizeWorkspaceFileResult(value) {
+    if (!isRecord(value) || !isRecord(value.file))
+        return null;
+    const file = value.file;
+    if (typeof file.resourceId !== "string" ||
+        !file.resourceId ||
+        typeof file.path !== "string" ||
+        !file.path ||
+        typeof file.name !== "string" ||
+        !file.name ||
+        typeof file.contentType !== "string" ||
+        !file.contentType ||
+        typeof file.sizeBytes !== "number" ||
+        !Number.isFinite(file.sizeBytes) ||
+        file.sizeBytes < 0) {
+        return null;
+    }
+    return {
+        file: {
+            resourceId: file.resourceId,
+            path: file.path,
+            name: file.name,
+            contentType: file.contentType,
+            sizeBytes: file.sizeBytes,
+            ...(typeof file.updatedAt === "string"
+                ? { updatedAt: file.updatedAt }
+                : {}),
+        },
+    };
+}
+//# sourceMappingURL=workspace-file-result.js.map

package/dist/client/chat/widgets/workspace-file-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-file-result.js","sourceRoot":"","sources":["../../../../src/client/chat/widgets/workspace-file-result.ts"],"names":[],"mappings":"AAWA,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IACE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,CAAC,IAAI,CAAC,UAAU;QAChB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAC7B,CAAC,IAAI,CAAC,IAAI;QACV,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAC7B,CAAC,IAAI,CAAC,IAAI;QACV,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,CAAC,IAAI,CAAC,WAAW;QACjB,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,CAAC,EAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI,EAAE;YACJ,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;gBACpC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;gBAC/B,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC","sourcesContent":["export interface WorkspaceFileResult {\n  file: {\n    resourceId: string;\n    path: string;\n    name: string;\n    contentType: string;\n    sizeBytes: number;\n    updatedAt?: string;\n  };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function normalizeWorkspaceFileResult(\n  value: unknown,\n): WorkspaceFileResult | null {\n  if (!isRecord(value) || !isRecord(value.file)) return null;\n  const file = value.file;\n  if (\n    typeof file.resourceId !== \"string\" ||\n    !file.resourceId ||\n    typeof file.path !== \"string\" ||\n    !file.path ||\n    typeof file.name !== \"string\" ||\n    !file.name ||\n    typeof file.contentType !== \"string\" ||\n    !file.contentType ||\n    typeof file.sizeBytes !== \"number\" ||\n    !Number.isFinite(file.sizeBytes) ||\n    file.sizeBytes < 0\n  ) {\n    return null;\n  }\n\n  return {\n    file: {\n      resourceId: file.resourceId,\n      path: file.path,\n      name: file.name,\n      contentType: file.contentType,\n      sizeBytes: file.sizeBytes,\n      ...(typeof file.updatedAt === \"string\"\n        ? { updatedAt: file.updatedAt }\n        : {}),\n    },\n  };\n}\n"]}

package/dist/client/embed-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embed-auth.d.ts","sourceRoot":"","sources":["../../src/client/embed-auth.ts"],"names":[],"mappings":"AAwDA,wBAAgB,iCAAiC,IAAI,OAAO,CAO3D;AAgBD,wBAAgB,4BAA4B,IAAI,IAAI,CAenD;AAED,wBAAgB,0BAA0B,IAAI,OAAO,CA8CpD;AAoBD,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CASjD;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAM3C;AA2ED,oDAAoD;AACpD,wBAAgB,uBAAuB,IAAI,IAAI,CAO9C;AAkPD,wBAAgB,+BAA+B,IAAI,IAAI,CAyCtD"}
+{"version":3,"file":"embed-auth.d.ts","sourceRoot":"","sources":["../../src/client/embed-auth.ts"],"names":[],"mappings":"AAyDA,wBAAgB,iCAAiC,IAAI,OAAO,CAO3D;AAgBD,wBAAgB,4BAA4B,IAAI,IAAI,CAenD;AAED,wBAAgB,0BAA0B,IAAI,OAAO,CA8CpD;AAoBD,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CASjD;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAM3C;AA2ED,oDAAoD;AACpD,wBAAgB,uBAAuB,IAAI,IAAI,CAO9C;AAmPD,wBAAgB,+BAA+B,IAAI,IAAI,CAyCtD"}

package/dist/client/embed-auth.js

@@ -1,4 +1,4 @@
-import { EMBED_MODE_QUERY_PARAM, EMBED_START_PATH, EMBED_TARGET_HEADER, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUERY_PARAM, } from "../shared/embed-auth.js";
+import { EMBED_MODE_QUERY_PARAM, EMBED_START_PATH, EMBED_TARGET_HEADER, EMBED_TARGET_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUERY_PARAM, } from "../shared/embed-auth.js";
 let installed = false;
 let memoryToken = null;
 let mcpChatBridgeActive = false;
@@ -401,6 +401,7 @@ function withEmbedAuthHeaders(input, init, token, win) {
         GUARDED_METHODS.has(method) &&
         isAgentNativeRuntimePath(url.pathname)) {
         url.searchParams.set(EMBED_TOKEN_QUERY_PARAM, token);
+        url.searchParams.set(EMBED_TARGET_QUERY_PARAM, currentEmbedTarget(win));
         return [url.toString(), init];
     }
     const headers = new Headers(init?.headers ?? (input instanceof Request ? input.headers : undefined));

package/dist/client/embed-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"embed-auth.js","sourceRoot":"","sources":["../../src/client/embed-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AAEjC,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,WAAW,GAAkB,IAAI,CAAC;AACtC,IAAI,mBAAmB,GAAG,KAAK,CAAC;AAChC,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAChE,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAEnE,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACjD,MAAM,mBAAmB,GAAG,qCAAqC,CAAC;AAClE,MAAM,iCAAiC,GACrC,uCAAuC,CAAC;AAC1C,MAAM,+BAA+B,GAAG,GAAG,CAAC;AAU5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAC;AAC9D,IAAI,gBAAgB,GAA6B,IAAI,CAAC;AAEtD,SAAS,aAAa;IACpB,OAAO,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CACZ,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,EACvF,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,6BAA6B,CACrD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,UAAU,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAC7C,+BAA+B,CAChC,CAAC;IACF,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,CAAC;AAC3C,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,mBAAmB,GAAG,KAAK,CAAC;IAC5B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,2BAA2B,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,mBAAmB,GAAG,IAAI,CAAC;IAC3B,kBAAkB,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,GAAG,EAAE,cAAc,EAAE,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACzB,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,iCAAiC,EAAE,EAAE,CAAC;QACxC,4BAA4B,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC7C,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,8BAA8B;IAC9B,IAAI,mBAAmB,EAAE,CAAC;QACxB,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,kBAAkB,IAAI,IAAI,IAAI,kBAAkB,KAAK,KAAK,EAAE,CAAC;YAC/D,oEAAoE;YACpE,kBAAkB,GAAG,KAAK,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,EAAE,OAAO,CAC7C,2BAA2B,CAC5B,CAAC;QACF,IAAI,WAAW,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,WAAW,KAAK,KAAK,CAAC,EAAE,CAAC;YAC5D,sEAAsE;YACtE,0EAA0E;YAC1E,mBAAmB,GAAG,IAAI,CAAC;YAC3B,kBAAkB,GAAG,WAAW,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,WAAW,IAAI,KAAK,IAAI,IAAI,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1D,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,GAAW;IAC5C,WAAW,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACZ,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,iBAAiB,EAAE;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACvE,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM,CAAC;AACzC,CAAC;AAED,SAAS,gCAAgC,CAAC,GAAW;IACnD,IAAI,CAAC,0BAA0B,EAAE;QAAE,OAAO;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC;IACzB,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,OAAO;IACvB,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,iCAAiC,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,CAAC,EAAE,GAAG,iCAAiC,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,+BAA+B,IAAI,CAAC;QACtD,KAAK,CAAC,WAAW,GAAG;;;;YAIZ,MAAM;gBACF,MAAM;;;;;;;;YAQV,MAAM;gBACF,MAAM;;;CAGrB,CAAC;QACE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,iCAAiC,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iCAAiC,CAAC,GAAW;IACpD,MAAM,MAAM,GAAG,+BAA+B,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GACV,GAKD,CAAC,MAAM,CAAC;YACT,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,GAAG,CAAC,MAAM,CAAC,WAAW,CACpB;oBACE,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,+BAA+B;oBACvC,MAAM,EAAE,EAAE,MAAM,EAAE;iBACnB,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,EAAE,CAAC;IACT,IAAI,CAAC;QACH,GAAG,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,GAAG,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,uBAAuB;IACrC,SAAS,GAAG,KAAK,CAAC;IAClB,WAAW,GAAG,IAAI,CAAC;IACnB,mBAAmB,GAAG,KAAK,CAAC;IAC5B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,gBAAgB,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,2DAA2D;IAC3D,yEAAyE;IACzE,2EAA2E;IAC3E,uDAAuD;IACvD,IAAI,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAAE,OAAO;QAC3D,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,YAAY,CACtB,GAAG,CAAC,OAAO,CAAC,KAAK,EACjB,EAAE,EACF,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAC1C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnC,OAAO,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB,EAAE,GAAW;IACrD,IAAI,CAAC;QACH,OAAO,KAAK,YAAY,OAAO;YAC7B,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;YACpB,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAwB,EAAE,GAAW;IACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB;IAChD,OAAO,CACL,QAAQ,KAAK,gBAAgB;QAC7B,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACnC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAwB,EAAE,IAAkB;IACjE,OAAO,CACL,IAAI,EAAE,MAAM;QACZ,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,KAAK,CACN,CAAC,WAAW,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,GAAQ;IAC9C,OAAO,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAc,EAAE,GAAQ;IACtD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpD,gEAAgE;IAChE,2EAA2E;IAC3E,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA4C;IAE5C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAW,EACX,mBAA4B;IAE5B,MAAM,MAAM,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE7B,IAAI,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,gBAAgB,GAAG,IAAI,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAyB;IACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CACT,aAAa,EACb,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAW,EACX,QAAkB,EAClB,mBAA4B;IAE5B,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IACE,KAAK,KAAK,kBAAkB;YAC5B,KAAK,KAAK,gBAAgB;YAC1B,KAAK,KAAK,mBAAmB,EAC7B,CAAC;YACD,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAsB;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;QACP,IAAI;QACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,wBAAwB;KACjD,CAAC;IACF,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,mBAAmB;QAAE,gBAAgB,GAAG,MAAM,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,mBAA4B;IACjE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,mBAAmB;QAAE,gBAAgB,GAAG,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAwB,EACxB,IAA6B,EAC7B,KAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,IACE,GAAG;QACH,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC;QACtB,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3B,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,EACtC,CAAC;QACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,IAAI,EAAE,OAAO,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CACxE,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAwB,EACxB,IAA6B,EAC7B,GAAW;IAOX,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC;QAChC,WAAW,EAAE,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO;IAEjB,IAAI,iCAAiC,EAAE;QAAE,4BAA4B,EAAE,CAAC;IAExE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1B,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,gCAAgC,CAAC,GAAG,CAAC,CAAC;IAEtC,IAAI,SAAS;QAAE,OAAO;IACtB,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO;IAC5C,SAAS,GAAG,IAAI,CAAC;IAEjB,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;QAClE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5D,IAAI,MAAM;gBAAE,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACpC,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,UAAiB,EAAE,SAAgB,CAAC,CAAC;QAC1E,IAAI,OAAO,EAAE,WAAW,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QACvE,CAAC;aAAM,IAAI,OAAO,EAAE,WAAW,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC/C,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAiB,CAAC;AACrB,CAAC","sourcesContent":["import {\n  EMBED_MODE_QUERY_PARAM,\n  EMBED_START_PATH,\n  EMBED_TARGET_HEADER,\n  EMBED_TOKEN_QUERY_PARAM,\n  MCP_APP_CHAT_BRIDGE_QUERY_PARAM,\n} from \"../shared/embed-auth.js\";\n\nlet installed = false;\nlet memoryToken: string | null = null;\nlet mcpChatBridgeActive = false;\nlet mcpChatBridgeScope: string | null = null;\nconst EMBED_TOKEN_STORAGE_KEY = \"agent-native:embed-auth-token\";\nconst MCP_CHAT_BRIDGE_STORAGE_KEY = \"agent-native:mcp-chat-bridge\";\n\nconst AUTH_FAILURE_COOLDOWN_MS = 60_000;\nconst GUARDED_METHODS = new Set([\"GET\", \"HEAD\"]);\nconst AUTH_FAILURE_HEADER = \"x-agent-native-auth-circuit-breaker\";\nconst MCP_CHAT_BRIDGE_VIEWPORT_STYLE_ID =\n  \"agent-native-mcp-chat-bridge-viewport\";\nconst MCP_CHAT_BRIDGE_VIEWPORT_HEIGHT = 560;\n\ntype AuthFailureRecord = {\n  status: number;\n  statusText: string;\n  headers: [string, string][];\n  body: string | null;\n  expiresAt: number;\n};\n\nconst authFailureCache = new Map<string, AuthFailureRecord>();\nlet embedAuthFailure: AuthFailureRecord | null = null;\n\nfunction browserWindow(): Window | null {\n  return typeof window === \"undefined\" ? null : window;\n}\n\nfunction currentUrl(win: Window): URL | null {\n  try {\n    return new URL(win.location.href);\n  } catch {\n    try {\n      return new URL(\n        `${win.location.pathname || \"/\"}${win.location.search || \"\"}${win.location.hash || \"\"}`,\n        win.location.origin || \"http://agent-native.invalid\",\n      );\n    } catch {\n      return null;\n    }\n  }\n}\n\nfunction readTokenFromUrl(win: Window): string | null {\n  return currentUrl(win)?.searchParams.get(EMBED_TOKEN_QUERY_PARAM) ?? null;\n}\n\nexport function readEmbedMcpChatBridgeFlagFromUrl(): boolean {\n  const win = browserWindow();\n  if (!win) return false;\n  const value = currentUrl(win)?.searchParams.get(\n    MCP_APP_CHAT_BRIDGE_QUERY_PARAM,\n  );\n  return value === \"1\" || value === \"true\";\n}\n\nfunction currentMcpChatBridgeScope(win: Window): string | null {\n  return readTokenFromUrl(win) ?? memoryToken ?? storedToken(win);\n}\n\nfunction clearMcpChatBridge(win: Window): void {\n  mcpChatBridgeActive = false;\n  mcpChatBridgeScope = null;\n  try {\n    win.sessionStorage?.removeItem(MCP_CHAT_BRIDGE_STORAGE_KEY);\n  } catch {\n    // ignore unavailable session storage\n  }\n}\n\nexport function markEmbedMcpChatBridgeActive(): void {\n  const win = browserWindow();\n  const scope = win ? currentMcpChatBridgeScope(win) : null;\n  mcpChatBridgeActive = true;\n  mcpChatBridgeScope = scope;\n  try {\n    if (scope) {\n      win?.sessionStorage?.setItem(MCP_CHAT_BRIDGE_STORAGE_KEY, scope);\n    } else {\n      win?.sessionStorage?.removeItem(MCP_CHAT_BRIDGE_STORAGE_KEY);\n    }\n  } catch {\n    // Session storage may be unavailable in some sandboxed hosts. The\n    // in-memory fallback still covers the normal single-page boot path.\n  }\n}\n\nexport function isEmbedMcpChatBridgeActive(): boolean {\n  const win = browserWindow();\n  if (!win) return false;\n  if (!isEmbedAuthActive()) {\n    clearMcpChatBridge(win);\n    return false;\n  }\n  if (readEmbedMcpChatBridgeFlagFromUrl()) {\n    markEmbedMcpChatBridgeActive();\n    return true;\n  }\n  const scope = currentMcpChatBridgeScope(win);\n  // Once we've enrolled in MCP bridge mode in this page, trust the in-memory\n  // flag. A null scope (because the URL token was stripped after enroll AND\n  // sessionStorage is denied — Safari private mode, third-party-cookie-blocked\n  // iframes, strict ChatGPT/Claude sandboxes) is NOT evidence of de-enrollment.\n  // Only an actual auth-scope CHANGE (a different non-null embed token) means\n  // we should clear the bridge.\n  if (mcpChatBridgeActive) {\n    if (scope == null) return true;\n    if (mcpChatBridgeScope == null || mcpChatBridgeScope === scope) {\n      // Capture the scope now that we have one; future calls can compare.\n      mcpChatBridgeScope = scope;\n      return true;\n    }\n    clearMcpChatBridge(win);\n    return false;\n  }\n  try {\n    const storedScope = win.sessionStorage?.getItem(\n      MCP_CHAT_BRIDGE_STORAGE_KEY,\n    );\n    if (storedScope && (scope == null || storedScope === scope)) {\n      // Promote the persisted enrollment into in-memory state so subsequent\n      // reads survive sessionStorage becoming unavailable later in the session.\n      mcpChatBridgeActive = true;\n      mcpChatBridgeScope = storedScope;\n      return true;\n    }\n    if (storedScope && scope != null && storedScope !== scope) {\n      win.sessionStorage?.removeItem(MCP_CHAT_BRIDGE_STORAGE_KEY);\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n\nfunction storedToken(win: Window): string | null {\n  try {\n    return win.sessionStorage?.getItem(EMBED_TOKEN_STORAGE_KEY) ?? null;\n  } catch {\n    return null;\n  }\n}\n\nfunction storeToken(token: string, win: Window): void {\n  memoryToken = token;\n  try {\n    win.sessionStorage?.setItem(EMBED_TOKEN_STORAGE_KEY, token);\n  } catch {\n    // Session storage may be unavailable in some sandboxed hosts. The\n    // in-memory fallback still covers the normal single-page boot path.\n  }\n}\n\nexport function getEmbedAuthToken(): string | null {\n  const win = browserWindow();\n  if (!win) return null;\n  const fromUrl = readTokenFromUrl(win);\n  if (fromUrl) {\n    storeToken(fromUrl, win);\n    return fromUrl;\n  }\n  return memoryToken ?? storedToken(win);\n}\n\nexport function isEmbedAuthActive(): boolean {\n  const win = browserWindow();\n  if (!win) return false;\n  if (getEmbedAuthToken()) return true;\n  const mode = currentUrl(win)?.searchParams.get(EMBED_MODE_QUERY_PARAM);\n  return mode === \"1\" || mode === \"true\";\n}\n\nfunction ensureMcpChatBridgeViewportClamp(win: Window): void {\n  if (!isEmbedMcpChatBridgeActive()) return;\n  const doc = win.document;\n  if (!doc?.head) return;\n  if (!doc.getElementById(MCP_CHAT_BRIDGE_VIEWPORT_STYLE_ID)) {\n    const style = doc.createElement(\"style\");\n    style.id = MCP_CHAT_BRIDGE_VIEWPORT_STYLE_ID;\n    const height = `${MCP_CHAT_BRIDGE_VIEWPORT_HEIGHT}px`;\n    style.textContent = `\nhtml,\nbody {\n  min-height: 0 !important;\n  height: ${height} !important;\n  max-height: ${height} !important;\n  overflow: hidden !important;\n}\n\n#root,\n#__next,\n[data-agent-native-app-root] {\n  min-height: 0 !important;\n  height: ${height} !important;\n  max-height: ${height} !important;\n  overflow: hidden !important;\n}\n`;\n    doc.head.appendChild(style);\n  }\n  notifyMcpChatBridgeViewportHeight(win);\n}\n\nfunction notifyMcpChatBridgeViewportHeight(win: Window): void {\n  const height = MCP_CHAT_BRIDGE_VIEWPORT_HEIGHT;\n  const notify = () => {\n    try {\n      const openai = (\n        win as Window & {\n          openai?: {\n            notifyIntrinsicHeight?: (payload: { height: number }) => void;\n          };\n        }\n      ).openai;\n      openai?.notifyIntrinsicHeight?.({ height });\n    } catch {\n      // Host bridge availability varies by client; sizing is best-effort.\n    }\n\n    try {\n      if (win.parent && win.parent !== win) {\n        win.parent.postMessage(\n          {\n            jsonrpc: \"2.0\",\n            method: \"ui/notifications/size-changed\",\n            params: { height },\n          },\n          \"*\",\n        );\n      }\n    } catch {\n      // Cross-host embeds can deny parent messaging in tests or strict sandboxes.\n    }\n  };\n\n  notify();\n  try {\n    win.requestAnimationFrame?.(() => notify());\n    win.setTimeout?.(notify, 250);\n    win.setTimeout?.(notify, 1000);\n  } catch {\n    // Timers are a progressive enhancement for late host bridge initialization.\n  }\n}\n\n/** Internal test helper. Do not use in app code. */\nexport function _resetEmbedAuthForTests(): void {\n  installed = false;\n  memoryToken = null;\n  mcpChatBridgeActive = false;\n  mcpChatBridgeScope = null;\n  authFailureCache.clear();\n  embedAuthFailure = null;\n}\n\n/**\n * True when this document runs in an opaque-origin (`origin === \"null\"`)\n * browsing context — e.g. a `sandbox=\"allow-scripts\"` iframe without\n * `allow-same-origin`, which is how MCP App embeds always load (the outer host\n * iframe's sandbox propagates to nested frames).\n *\n * It matters for auth: the embed session cookie is keyed to the real app origin\n * and is NOT delivered to an opaque context, so a full document reload here\n * arrives with neither cookie nor — once stripped — URL token, and the server\n * auth guard serves the sign-in page. In that case the URL token is the only\n * credential that survives a reload, so it must stay in the URL.\n */\nfunction isOpaqueOriginFrame(win: Window): boolean {\n  try {\n    return win.location.origin === \"null\";\n  } catch {\n    // A thrown access is itself a signal of an opaque/cross-origin context.\n    return true;\n  }\n}\n\nfunction stripTokenFromUrl(win: Window): void {\n  // Keep the token in the URL for opaque-origin frames — see\n  // isOpaqueOriginFrame. Stripping it there breaks re-auth on any document\n  // reload. Referrer-Policy is set to no-referrer on embed responses, so the\n  // retained token does not leak via the Referer header.\n  if (isOpaqueOriginFrame(win)) return;\n  try {\n    const url = currentUrl(win);\n    if (!url) return;\n    if (!url.searchParams.has(EMBED_TOKEN_QUERY_PARAM)) return;\n    url.searchParams.delete(EMBED_TOKEN_QUERY_PARAM);\n    win.history.replaceState(\n      win.history.state,\n      \"\",\n      `${url.pathname}${url.search}${url.hash}`,\n    );\n  } catch {\n    // best effort only\n  }\n}\n\nfunction currentEmbedTarget(win: Window): string {\n  return `${win.location.pathname}${win.location.search}`;\n}\n\nfunction currentAppOrigin(win: Window): string | null {\n  const url = currentUrl(win);\n  if (url?.origin && url.origin !== \"null\") return url.origin;\n  try {\n    const origin = win.location.origin;\n    return origin && origin !== \"null\" ? origin : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction inputUrl(input: RequestInfo | URL, win: Window): URL | null {\n  try {\n    return input instanceof Request\n      ? new URL(input.url)\n      : new URL(String(input), currentUrl(win)?.href ?? win.location.href);\n  } catch {\n    return null;\n  }\n}\n\nfunction sameOrigin(input: RequestInfo | URL, win: Window): boolean {\n  const url = inputUrl(input, win);\n  const origin = currentAppOrigin(win);\n  return !!url && !!origin && url.origin === origin;\n}\n\nfunction isAgentNativeRuntimePath(pathname: string): boolean {\n  return (\n    pathname === \"/_agent-native\" ||\n    pathname.endsWith(\"/_agent-native\") ||\n    pathname.includes(\"/_agent-native/\")\n  );\n}\n\nfunction requestMethod(input: RequestInfo | URL, init?: RequestInit): string {\n  return (\n    init?.method ??\n    (input instanceof Request ? input.method : undefined) ??\n    \"GET\"\n  ).toUpperCase();\n}\n\nfunction authFailureKey(method: string, url: URL): string {\n  return `${method} ${url.href}`;\n}\n\nfunction isAuthFailureStatus(status: number): boolean {\n  return status === 401 || status === 403;\n}\n\nfunction shouldGuardAuthFailure(method: string, url: URL): boolean {\n  if (!GUARDED_METHODS.has(method)) return false;\n  if (url.pathname === EMBED_START_PATH) return false;\n  // Suffix, not equality: an app mounted under a base path serves\n  // `/<app>/_agent-native/sign-in`, which the old exact match never matched.\n  if (url.pathname.endsWith(\"/_agent-native/sign-in\")) return false;\n  return true;\n}\n\nfunction activeAuthFailure(\n  record: AuthFailureRecord | null | undefined,\n): AuthFailureRecord | null {\n  if (!record) return null;\n  if (record.expiresAt > Date.now()) return record;\n  return null;\n}\n\nfunction getCachedAuthFailure(\n  key: string,\n  useEmbedWideFailure: boolean,\n): AuthFailureRecord | null {\n  const cached = activeAuthFailure(authFailureCache.get(key));\n  if (cached) return cached;\n  authFailureCache.delete(key);\n\n  if (!useEmbedWideFailure) return null;\n  const embedCached = activeAuthFailure(embedAuthFailure);\n  if (embedCached) return embedCached;\n  embedAuthFailure = null;\n  return null;\n}\n\nfunction authFailureResponse(record: AuthFailureRecord): Response {\n  const headers = new Headers(record.headers);\n  headers.set(AUTH_FAILURE_HEADER, \"1\");\n  if (!headers.has(\"retry-after\")) {\n    headers.set(\n      \"retry-after\",\n      String(Math.max(1, Math.ceil((record.expiresAt - Date.now()) / 1000))),\n    );\n  }\n  return new Response(record.body, {\n    status: record.status,\n    statusText: record.statusText,\n    headers,\n  });\n}\n\nasync function recordAuthFailure(\n  key: string,\n  response: Response,\n  useEmbedWideFailure: boolean,\n): Promise<void> {\n  let body: string | null = null;\n  try {\n    body = await response.clone().text();\n  } catch {\n    body = null;\n  }\n\n  const headers: [string, string][] = [];\n  response.headers.forEach((value, name) => {\n    const lower = name.toLowerCase();\n    if (\n      lower === \"content-encoding\" ||\n      lower === \"content-length\" ||\n      lower === \"transfer-encoding\"\n    ) {\n      return;\n    }\n    headers.push([name, value]);\n  });\n\n  const record: AuthFailureRecord = {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n    body,\n    expiresAt: Date.now() + AUTH_FAILURE_COOLDOWN_MS,\n  };\n  authFailureCache.set(key, record);\n  if (useEmbedWideFailure) embedAuthFailure = record;\n}\n\nfunction clearAuthFailure(key: string, useEmbedWideFailure: boolean): void {\n  authFailureCache.delete(key);\n  if (useEmbedWideFailure) embedAuthFailure = null;\n}\n\nfunction withEmbedAuthHeaders(\n  input: RequestInfo | URL,\n  init: RequestInit | undefined,\n  token: string,\n  win: Window,\n): [RequestInfo | URL, RequestInit | undefined] {\n  const method = requestMethod(input, init);\n  const url = inputUrl(input, win);\n  if (\n    url &&\n    sameOrigin(input, win) &&\n    GUARDED_METHODS.has(method) &&\n    isAgentNativeRuntimePath(url.pathname)\n  ) {\n    url.searchParams.set(EMBED_TOKEN_QUERY_PARAM, token);\n    return [url.toString(), init];\n  }\n\n  const headers = new Headers(\n    init?.headers ?? (input instanceof Request ? input.headers : undefined),\n  );\n  if (!headers.has(\"Authorization\")) {\n    headers.set(\"Authorization\", `Bearer ${token}`);\n  }\n  if (!headers.has(EMBED_TARGET_HEADER)) {\n    headers.set(EMBED_TARGET_HEADER, currentEmbedTarget(win));\n  }\n\n  if (input instanceof Request) {\n    return [new Request(input, { ...init, headers }), undefined];\n  }\n  return [input, { ...init, headers }];\n}\n\nfunction requestUrlAndKey(\n  input: RequestInfo | URL,\n  init: RequestInit | undefined,\n  win: Window,\n):\n  | {\n      key: string;\n      shouldGuard: boolean;\n    }\n  | undefined {\n  const url = inputUrl(input, win);\n  const origin = currentAppOrigin(win);\n  if (!url || !origin || url.origin !== origin) return undefined;\n  const method = requestMethod(input, init);\n  return {\n    key: authFailureKey(method, url),\n    shouldGuard: shouldGuardAuthFailure(method, url),\n  };\n}\n\nexport function ensureEmbedAuthFetchInterceptor(): void {\n  const win = browserWindow();\n  if (!win) return;\n\n  if (readEmbedMcpChatBridgeFlagFromUrl()) markEmbedMcpChatBridgeActive();\n\n  const urlToken = readTokenFromUrl(win);\n  if (urlToken) {\n    storeToken(urlToken, win);\n    stripTokenFromUrl(win);\n  }\n  ensureMcpChatBridgeViewportClamp(win);\n\n  if (installed) return;\n  if (typeof win.fetch !== \"function\") return;\n  installed = true;\n\n  const originalFetch = win.fetch.bind(win);\n  win.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {\n    const request = requestUrlAndKey(input, init, win);\n    const embedMode = isEmbedAuthActive();\n    if (request?.shouldGuard) {\n      const cached = getCachedAuthFailure(request.key, embedMode);\n      if (cached) return authFailureResponse(cached);\n    }\n\n    const token = getEmbedAuthToken();\n    let fetchInput = input;\n    let fetchInit = init;\n    if (token && sameOrigin(input, win)) {\n      [fetchInput, fetchInit] = withEmbedAuthHeaders(input, init, token, win);\n    }\n\n    const response = await originalFetch(fetchInput as any, fetchInit as any);\n    if (request?.shouldGuard && isAuthFailureStatus(response.status)) {\n      await recordAuthFailure(request.key, response, embedMode || !!token);\n    } else if (request?.shouldGuard && response.ok) {\n      clearAuthFailure(request.key, embedMode || !!token);\n    }\n    return response;\n  }) as typeof fetch;\n}\n"]}
+{"version":3,"file":"embed-auth.js","sourceRoot":"","sources":["../../src/client/embed-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AAEjC,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,WAAW,GAAkB,IAAI,CAAC;AACtC,IAAI,mBAAmB,GAAG,KAAK,CAAC;AAChC,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAChE,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAEnE,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACjD,MAAM,mBAAmB,GAAG,qCAAqC,CAAC;AAClE,MAAM,iCAAiC,GACrC,uCAAuC,CAAC;AAC1C,MAAM,+BAA+B,GAAG,GAAG,CAAC;AAU5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAC;AAC9D,IAAI,gBAAgB,GAA6B,IAAI,CAAC;AAEtD,SAAS,aAAa;IACpB,OAAO,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CACZ,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,EACvF,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,6BAA6B,CACrD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,UAAU,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAC7C,+BAA+B,CAChC,CAAC;IACF,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,CAAC;AAC3C,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,mBAAmB,GAAG,KAAK,CAAC;IAC5B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,2BAA2B,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,mBAAmB,GAAG,IAAI,CAAC;IAC3B,kBAAkB,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,GAAG,EAAE,cAAc,EAAE,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACzB,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,iCAAiC,EAAE,EAAE,CAAC;QACxC,4BAA4B,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC7C,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,8BAA8B;IAC9B,IAAI,mBAAmB,EAAE,CAAC;QACxB,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,kBAAkB,IAAI,IAAI,IAAI,kBAAkB,KAAK,KAAK,EAAE,CAAC;YAC/D,oEAAoE;YACpE,kBAAkB,GAAG,KAAK,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,EAAE,OAAO,CAC7C,2BAA2B,CAC5B,CAAC;QACF,IAAI,WAAW,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,WAAW,KAAK,KAAK,CAAC,EAAE,CAAC;YAC5D,sEAAsE;YACtE,0EAA0E;YAC1E,mBAAmB,GAAG,IAAI,CAAC;YAC3B,kBAAkB,GAAG,WAAW,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,WAAW,IAAI,KAAK,IAAI,IAAI,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1D,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,GAAW;IAC5C,WAAW,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACZ,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,iBAAiB,EAAE;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACvE,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM,CAAC;AACzC,CAAC;AAED,SAAS,gCAAgC,CAAC,GAAW;IACnD,IAAI,CAAC,0BAA0B,EAAE;QAAE,OAAO;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC;IACzB,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,OAAO;IACvB,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,iCAAiC,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,CAAC,EAAE,GAAG,iCAAiC,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,+BAA+B,IAAI,CAAC;QACtD,KAAK,CAAC,WAAW,GAAG;;;;YAIZ,MAAM;gBACF,MAAM;;;;;;;;YAQV,MAAM;gBACF,MAAM;;;CAGrB,CAAC;QACE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,iCAAiC,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iCAAiC,CAAC,GAAW;IACpD,MAAM,MAAM,GAAG,+BAA+B,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GACV,GAKD,CAAC,MAAM,CAAC;YACT,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,GAAG,CAAC,MAAM,CAAC,WAAW,CACpB;oBACE,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,+BAA+B;oBACvC,MAAM,EAAE,EAAE,MAAM,EAAE;iBACnB,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,EAAE,CAAC;IACT,IAAI,CAAC;QACH,GAAG,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,GAAG,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,uBAAuB;IACrC,SAAS,GAAG,KAAK,CAAC;IAClB,WAAW,GAAG,IAAI,CAAC;IACnB,mBAAmB,GAAG,KAAK,CAAC;IAC5B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,gBAAgB,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,2DAA2D;IAC3D,yEAAyE;IACzE,2EAA2E;IAC3E,uDAAuD;IACvD,IAAI,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAAE,OAAO;QAC3D,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,YAAY,CACtB,GAAG,CAAC,OAAO,CAAC,KAAK,EACjB,EAAE,EACF,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAC1C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnC,OAAO,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB,EAAE,GAAW;IACrD,IAAI,CAAC;QACH,OAAO,KAAK,YAAY,OAAO;YAC7B,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;YACpB,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAwB,EAAE,GAAW;IACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB;IAChD,OAAO,CACL,QAAQ,KAAK,gBAAgB;QAC7B,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACnC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAwB,EAAE,IAAkB;IACjE,OAAO,CACL,IAAI,EAAE,MAAM;QACZ,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,KAAK,CACN,CAAC,WAAW,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,GAAQ;IAC9C,OAAO,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAc,EAAE,GAAQ;IACtD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpD,gEAAgE;IAChE,2EAA2E;IAC3E,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA4C;IAE5C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAW,EACX,mBAA4B;IAE5B,MAAM,MAAM,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE7B,IAAI,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,gBAAgB,GAAG,IAAI,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAyB;IACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CACT,aAAa,EACb,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAW,EACX,QAAkB,EAClB,mBAA4B;IAE5B,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IACE,KAAK,KAAK,kBAAkB;YAC5B,KAAK,KAAK,gBAAgB;YAC1B,KAAK,KAAK,mBAAmB,EAC7B,CAAC;YACD,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAsB;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;QACP,IAAI;QACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,wBAAwB;KACjD,CAAC;IACF,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,mBAAmB;QAAE,gBAAgB,GAAG,MAAM,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,mBAA4B;IACjE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,mBAAmB;QAAE,gBAAgB,GAAG,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAwB,EACxB,IAA6B,EAC7B,KAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,IACE,GAAG;QACH,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC;QACtB,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3B,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,EACtC,CAAC;QACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,wBAAwB,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,IAAI,EAAE,OAAO,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CACxE,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAwB,EACxB,IAA6B,EAC7B,GAAW;IAOX,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC;QAChC,WAAW,EAAE,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO;IAEjB,IAAI,iCAAiC,EAAE;QAAE,4BAA4B,EAAE,CAAC;IAExE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1B,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,gCAAgC,CAAC,GAAG,CAAC,CAAC;IAEtC,IAAI,SAAS;QAAE,OAAO;IACtB,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO;IAC5C,SAAS,GAAG,IAAI,CAAC;IAEjB,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;QAClE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5D,IAAI,MAAM;gBAAE,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACpC,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,UAAiB,EAAE,SAAgB,CAAC,CAAC;QAC1E,IAAI,OAAO,EAAE,WAAW,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QACvE,CAAC;aAAM,IAAI,OAAO,EAAE,WAAW,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC/C,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAiB,CAAC;AACrB,CAAC","sourcesContent":["import {\n  EMBED_MODE_QUERY_PARAM,\n  EMBED_START_PATH,\n  EMBED_TARGET_HEADER,\n  EMBED_TARGET_QUERY_PARAM,\n  EMBED_TOKEN_QUERY_PARAM,\n  MCP_APP_CHAT_BRIDGE_QUERY_PARAM,\n} from \"../shared/embed-auth.js\";\n\nlet installed = false;\nlet memoryToken: string | null = null;\nlet mcpChatBridgeActive = false;\nlet mcpChatBridgeScope: string | null = null;\nconst EMBED_TOKEN_STORAGE_KEY = \"agent-native:embed-auth-token\";\nconst MCP_CHAT_BRIDGE_STORAGE_KEY = \"agent-native:mcp-chat-bridge\";\n\nconst AUTH_FAILURE_COOLDOWN_MS = 60_000;\nconst GUARDED_METHODS = new Set([\"GET\", \"HEAD\"]);\nconst AUTH_FAILURE_HEADER = \"x-agent-native-auth-circuit-breaker\";\nconst MCP_CHAT_BRIDGE_VIEWPORT_STYLE_ID =\n  \"agent-native-mcp-chat-bridge-viewport\";\nconst MCP_CHAT_BRIDGE_VIEWPORT_HEIGHT = 560;\n\ntype AuthFailureRecord = {\n  status: number;\n  statusText: string;\n  headers: [string, string][];\n  body: string | null;\n  expiresAt: number;\n};\n\nconst authFailureCache = new Map<string, AuthFailureRecord>();\nlet embedAuthFailure: AuthFailureRecord | null = null;\n\nfunction browserWindow(): Window | null {\n  return typeof window === \"undefined\" ? null : window;\n}\n\nfunction currentUrl(win: Window): URL | null {\n  try {\n    return new URL(win.location.href);\n  } catch {\n    try {\n      return new URL(\n        `${win.location.pathname || \"/\"}${win.location.search || \"\"}${win.location.hash || \"\"}`,\n        win.location.origin || \"http://agent-native.invalid\",\n      );\n    } catch {\n      return null;\n    }\n  }\n}\n\nfunction readTokenFromUrl(win: Window): string | null {\n  return currentUrl(win)?.searchParams.get(EMBED_TOKEN_QUERY_PARAM) ?? null;\n}\n\nexport function readEmbedMcpChatBridgeFlagFromUrl(): boolean {\n  const win = browserWindow();\n  if (!win) return false;\n  const value = currentUrl(win)?.searchParams.get(\n    MCP_APP_CHAT_BRIDGE_QUERY_PARAM,\n  );\n  return value === \"1\" || value === \"true\";\n}\n\nfunction currentMcpChatBridgeScope(win: Window): string | null {\n  return readTokenFromUrl(win) ?? memoryToken ?? storedToken(win);\n}\n\nfunction clearMcpChatBridge(win: Window): void {\n  mcpChatBridgeActive = false;\n  mcpChatBridgeScope = null;\n  try {\n    win.sessionStorage?.removeItem(MCP_CHAT_BRIDGE_STORAGE_KEY);\n  } catch {\n    // ignore unavailable session storage\n  }\n}\n\nexport function markEmbedMcpChatBridgeActive(): void {\n  const win = browserWindow();\n  const scope = win ? currentMcpChatBridgeScope(win) : null;\n  mcpChatBridgeActive = true;\n  mcpChatBridgeScope = scope;\n  try {\n    if (scope) {\n      win?.sessionStorage?.setItem(MCP_CHAT_BRIDGE_STORAGE_KEY, scope);\n    } else {\n      win?.sessionStorage?.removeItem(MCP_CHAT_BRIDGE_STORAGE_KEY);\n    }\n  } catch {\n    // Session storage may be unavailable in some sandboxed hosts. The\n    // in-memory fallback still covers the normal single-page boot path.\n  }\n}\n\nexport function isEmbedMcpChatBridgeActive(): boolean {\n  const win = browserWindow();\n  if (!win) return false;\n  if (!isEmbedAuthActive()) {\n    clearMcpChatBridge(win);\n    return false;\n  }\n  if (readEmbedMcpChatBridgeFlagFromUrl()) {\n    markEmbedMcpChatBridgeActive();\n    return true;\n  }\n  const scope = currentMcpChatBridgeScope(win);\n  // Once we've enrolled in MCP bridge mode in this page, trust the in-memory\n  // flag. A null scope (because the URL token was stripped after enroll AND\n  // sessionStorage is denied — Safari private mode, third-party-cookie-blocked\n  // iframes, strict ChatGPT/Claude sandboxes) is NOT evidence of de-enrollment.\n  // Only an actual auth-scope CHANGE (a different non-null embed token) means\n  // we should clear the bridge.\n  if (mcpChatBridgeActive) {\n    if (scope == null) return true;\n    if (mcpChatBridgeScope == null || mcpChatBridgeScope === scope) {\n      // Capture the scope now that we have one; future calls can compare.\n      mcpChatBridgeScope = scope;\n      return true;\n    }\n    clearMcpChatBridge(win);\n    return false;\n  }\n  try {\n    const storedScope = win.sessionStorage?.getItem(\n      MCP_CHAT_BRIDGE_STORAGE_KEY,\n    );\n    if (storedScope && (scope == null || storedScope === scope)) {\n      // Promote the persisted enrollment into in-memory state so subsequent\n      // reads survive sessionStorage becoming unavailable later in the session.\n      mcpChatBridgeActive = true;\n      mcpChatBridgeScope = storedScope;\n      return true;\n    }\n    if (storedScope && scope != null && storedScope !== scope) {\n      win.sessionStorage?.removeItem(MCP_CHAT_BRIDGE_STORAGE_KEY);\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n\nfunction storedToken(win: Window): string | null {\n  try {\n    return win.sessionStorage?.getItem(EMBED_TOKEN_STORAGE_KEY) ?? null;\n  } catch {\n    return null;\n  }\n}\n\nfunction storeToken(token: string, win: Window): void {\n  memoryToken = token;\n  try {\n    win.sessionStorage?.setItem(EMBED_TOKEN_STORAGE_KEY, token);\n  } catch {\n    // Session storage may be unavailable in some sandboxed hosts. The\n    // in-memory fallback still covers the normal single-page boot path.\n  }\n}\n\nexport function getEmbedAuthToken(): string | null {\n  const win = browserWindow();\n  if (!win) return null;\n  const fromUrl = readTokenFromUrl(win);\n  if (fromUrl) {\n    storeToken(fromUrl, win);\n    return fromUrl;\n  }\n  return memoryToken ?? storedToken(win);\n}\n\nexport function isEmbedAuthActive(): boolean {\n  const win = browserWindow();\n  if (!win) return false;\n  if (getEmbedAuthToken()) return true;\n  const mode = currentUrl(win)?.searchParams.get(EMBED_MODE_QUERY_PARAM);\n  return mode === \"1\" || mode === \"true\";\n}\n\nfunction ensureMcpChatBridgeViewportClamp(win: Window): void {\n  if (!isEmbedMcpChatBridgeActive()) return;\n  const doc = win.document;\n  if (!doc?.head) return;\n  if (!doc.getElementById(MCP_CHAT_BRIDGE_VIEWPORT_STYLE_ID)) {\n    const style = doc.createElement(\"style\");\n    style.id = MCP_CHAT_BRIDGE_VIEWPORT_STYLE_ID;\n    const height = `${MCP_CHAT_BRIDGE_VIEWPORT_HEIGHT}px`;\n    style.textContent = `\nhtml,\nbody {\n  min-height: 0 !important;\n  height: ${height} !important;\n  max-height: ${height} !important;\n  overflow: hidden !important;\n}\n\n#root,\n#__next,\n[data-agent-native-app-root] {\n  min-height: 0 !important;\n  height: ${height} !important;\n  max-height: ${height} !important;\n  overflow: hidden !important;\n}\n`;\n    doc.head.appendChild(style);\n  }\n  notifyMcpChatBridgeViewportHeight(win);\n}\n\nfunction notifyMcpChatBridgeViewportHeight(win: Window): void {\n  const height = MCP_CHAT_BRIDGE_VIEWPORT_HEIGHT;\n  const notify = () => {\n    try {\n      const openai = (\n        win as Window & {\n          openai?: {\n            notifyIntrinsicHeight?: (payload: { height: number }) => void;\n          };\n        }\n      ).openai;\n      openai?.notifyIntrinsicHeight?.({ height });\n    } catch {\n      // Host bridge availability varies by client; sizing is best-effort.\n    }\n\n    try {\n      if (win.parent && win.parent !== win) {\n        win.parent.postMessage(\n          {\n            jsonrpc: \"2.0\",\n            method: \"ui/notifications/size-changed\",\n            params: { height },\n          },\n          \"*\",\n        );\n      }\n    } catch {\n      // Cross-host embeds can deny parent messaging in tests or strict sandboxes.\n    }\n  };\n\n  notify();\n  try {\n    win.requestAnimationFrame?.(() => notify());\n    win.setTimeout?.(notify, 250);\n    win.setTimeout?.(notify, 1000);\n  } catch {\n    // Timers are a progressive enhancement for late host bridge initialization.\n  }\n}\n\n/** Internal test helper. Do not use in app code. */\nexport function _resetEmbedAuthForTests(): void {\n  installed = false;\n  memoryToken = null;\n  mcpChatBridgeActive = false;\n  mcpChatBridgeScope = null;\n  authFailureCache.clear();\n  embedAuthFailure = null;\n}\n\n/**\n * True when this document runs in an opaque-origin (`origin === \"null\"`)\n * browsing context — e.g. a `sandbox=\"allow-scripts\"` iframe without\n * `allow-same-origin`, which is how MCP App embeds always load (the outer host\n * iframe's sandbox propagates to nested frames).\n *\n * It matters for auth: the embed session cookie is keyed to the real app origin\n * and is NOT delivered to an opaque context, so a full document reload here\n * arrives with neither cookie nor — once stripped — URL token, and the server\n * auth guard serves the sign-in page. In that case the URL token is the only\n * credential that survives a reload, so it must stay in the URL.\n */\nfunction isOpaqueOriginFrame(win: Window): boolean {\n  try {\n    return win.location.origin === \"null\";\n  } catch {\n    // A thrown access is itself a signal of an opaque/cross-origin context.\n    return true;\n  }\n}\n\nfunction stripTokenFromUrl(win: Window): void {\n  // Keep the token in the URL for opaque-origin frames — see\n  // isOpaqueOriginFrame. Stripping it there breaks re-auth on any document\n  // reload. Referrer-Policy is set to no-referrer on embed responses, so the\n  // retained token does not leak via the Referer header.\n  if (isOpaqueOriginFrame(win)) return;\n  try {\n    const url = currentUrl(win);\n    if (!url) return;\n    if (!url.searchParams.has(EMBED_TOKEN_QUERY_PARAM)) return;\n    url.searchParams.delete(EMBED_TOKEN_QUERY_PARAM);\n    win.history.replaceState(\n      win.history.state,\n      \"\",\n      `${url.pathname}${url.search}${url.hash}`,\n    );\n  } catch {\n    // best effort only\n  }\n}\n\nfunction currentEmbedTarget(win: Window): string {\n  return `${win.location.pathname}${win.location.search}`;\n}\n\nfunction currentAppOrigin(win: Window): string | null {\n  const url = currentUrl(win);\n  if (url?.origin && url.origin !== \"null\") return url.origin;\n  try {\n    const origin = win.location.origin;\n    return origin && origin !== \"null\" ? origin : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction inputUrl(input: RequestInfo | URL, win: Window): URL | null {\n  try {\n    return input instanceof Request\n      ? new URL(input.url)\n      : new URL(String(input), currentUrl(win)?.href ?? win.location.href);\n  } catch {\n    return null;\n  }\n}\n\nfunction sameOrigin(input: RequestInfo | URL, win: Window): boolean {\n  const url = inputUrl(input, win);\n  const origin = currentAppOrigin(win);\n  return !!url && !!origin && url.origin === origin;\n}\n\nfunction isAgentNativeRuntimePath(pathname: string): boolean {\n  return (\n    pathname === \"/_agent-native\" ||\n    pathname.endsWith(\"/_agent-native\") ||\n    pathname.includes(\"/_agent-native/\")\n  );\n}\n\nfunction requestMethod(input: RequestInfo | URL, init?: RequestInit): string {\n  return (\n    init?.method ??\n    (input instanceof Request ? input.method : undefined) ??\n    \"GET\"\n  ).toUpperCase();\n}\n\nfunction authFailureKey(method: string, url: URL): string {\n  return `${method} ${url.href}`;\n}\n\nfunction isAuthFailureStatus(status: number): boolean {\n  return status === 401 || status === 403;\n}\n\nfunction shouldGuardAuthFailure(method: string, url: URL): boolean {\n  if (!GUARDED_METHODS.has(method)) return false;\n  if (url.pathname === EMBED_START_PATH) return false;\n  // Suffix, not equality: an app mounted under a base path serves\n  // `/<app>/_agent-native/sign-in`, which the old exact match never matched.\n  if (url.pathname.endsWith(\"/_agent-native/sign-in\")) return false;\n  return true;\n}\n\nfunction activeAuthFailure(\n  record: AuthFailureRecord | null | undefined,\n): AuthFailureRecord | null {\n  if (!record) return null;\n  if (record.expiresAt > Date.now()) return record;\n  return null;\n}\n\nfunction getCachedAuthFailure(\n  key: string,\n  useEmbedWideFailure: boolean,\n): AuthFailureRecord | null {\n  const cached = activeAuthFailure(authFailureCache.get(key));\n  if (cached) return cached;\n  authFailureCache.delete(key);\n\n  if (!useEmbedWideFailure) return null;\n  const embedCached = activeAuthFailure(embedAuthFailure);\n  if (embedCached) return embedCached;\n  embedAuthFailure = null;\n  return null;\n}\n\nfunction authFailureResponse(record: AuthFailureRecord): Response {\n  const headers = new Headers(record.headers);\n  headers.set(AUTH_FAILURE_HEADER, \"1\");\n  if (!headers.has(\"retry-after\")) {\n    headers.set(\n      \"retry-after\",\n      String(Math.max(1, Math.ceil((record.expiresAt - Date.now()) / 1000))),\n    );\n  }\n  return new Response(record.body, {\n    status: record.status,\n    statusText: record.statusText,\n    headers,\n  });\n}\n\nasync function recordAuthFailure(\n  key: string,\n  response: Response,\n  useEmbedWideFailure: boolean,\n): Promise<void> {\n  let body: string | null = null;\n  try {\n    body = await response.clone().text();\n  } catch {\n    body = null;\n  }\n\n  const headers: [string, string][] = [];\n  response.headers.forEach((value, name) => {\n    const lower = name.toLowerCase();\n    if (\n      lower === \"content-encoding\" ||\n      lower === \"content-length\" ||\n      lower === \"transfer-encoding\"\n    ) {\n      return;\n    }\n    headers.push([name, value]);\n  });\n\n  const record: AuthFailureRecord = {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n    body,\n    expiresAt: Date.now() + AUTH_FAILURE_COOLDOWN_MS,\n  };\n  authFailureCache.set(key, record);\n  if (useEmbedWideFailure) embedAuthFailure = record;\n}\n\nfunction clearAuthFailure(key: string, useEmbedWideFailure: boolean): void {\n  authFailureCache.delete(key);\n  if (useEmbedWideFailure) embedAuthFailure = null;\n}\n\nfunction withEmbedAuthHeaders(\n  input: RequestInfo | URL,\n  init: RequestInit | undefined,\n  token: string,\n  win: Window,\n): [RequestInfo | URL, RequestInit | undefined] {\n  const method = requestMethod(input, init);\n  const url = inputUrl(input, win);\n  if (\n    url &&\n    sameOrigin(input, win) &&\n    GUARDED_METHODS.has(method) &&\n    isAgentNativeRuntimePath(url.pathname)\n  ) {\n    url.searchParams.set(EMBED_TOKEN_QUERY_PARAM, token);\n    url.searchParams.set(EMBED_TARGET_QUERY_PARAM, currentEmbedTarget(win));\n    return [url.toString(), init];\n  }\n\n  const headers = new Headers(\n    init?.headers ?? (input instanceof Request ? input.headers : undefined),\n  );\n  if (!headers.has(\"Authorization\")) {\n    headers.set(\"Authorization\", `Bearer ${token}`);\n  }\n  if (!headers.has(EMBED_TARGET_HEADER)) {\n    headers.set(EMBED_TARGET_HEADER, currentEmbedTarget(win));\n  }\n\n  if (input instanceof Request) {\n    return [new Request(input, { ...init, headers }), undefined];\n  }\n  return [input, { ...init, headers }];\n}\n\nfunction requestUrlAndKey(\n  input: RequestInfo | URL,\n  init: RequestInit | undefined,\n  win: Window,\n):\n  | {\n      key: string;\n      shouldGuard: boolean;\n    }\n  | undefined {\n  const url = inputUrl(input, win);\n  const origin = currentAppOrigin(win);\n  if (!url || !origin || url.origin !== origin) return undefined;\n  const method = requestMethod(input, init);\n  return {\n    key: authFailureKey(method, url),\n    shouldGuard: shouldGuardAuthFailure(method, url),\n  };\n}\n\nexport function ensureEmbedAuthFetchInterceptor(): void {\n  const win = browserWindow();\n  if (!win) return;\n\n  if (readEmbedMcpChatBridgeFlagFromUrl()) markEmbedMcpChatBridgeActive();\n\n  const urlToken = readTokenFromUrl(win);\n  if (urlToken) {\n    storeToken(urlToken, win);\n    stripTokenFromUrl(win);\n  }\n  ensureMcpChatBridgeViewportClamp(win);\n\n  if (installed) return;\n  if (typeof win.fetch !== \"function\") return;\n  installed = true;\n\n  const originalFetch = win.fetch.bind(win);\n  win.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {\n    const request = requestUrlAndKey(input, init, win);\n    const embedMode = isEmbedAuthActive();\n    if (request?.shouldGuard) {\n      const cached = getCachedAuthFailure(request.key, embedMode);\n      if (cached) return authFailureResponse(cached);\n    }\n\n    const token = getEmbedAuthToken();\n    let fetchInput = input;\n    let fetchInit = init;\n    if (token && sameOrigin(input, win)) {\n      [fetchInput, fetchInit] = withEmbedAuthHeaders(input, init, token, win);\n    }\n\n    const response = await originalFetch(fetchInput as any, fetchInit as any);\n    if (request?.shouldGuard && isAuthFailureStatus(response.status)) {\n      await recordAuthFailure(request.key, response, embedMode || !!token);\n    } else if (request?.shouldGuard && response.ok) {\n      clearAuthFailure(request.key, embedMode || !!token);\n    }\n    return response;\n  }) as typeof fetch;\n}\n"]}

package/dist/client/org/InvitationBanner.d.ts

@@ -2,7 +2,10 @@ export interface InvitationBannerProps {
     className?: string;
 }
 /**
- * Top-of-app banner that surfaces:
+ * Top-of-app notice bar. Mounted in every template shell, so it owns the
+ * org-level notices a member needs before they can make sense of what they're
+ * looking at:
+ *   - They're on the wrong deployment ({@link WorkspaceNotice}).
  *   - Pending org invitations (one-click Accept).
  *   - Domain-match orgs the user can auto-join because their email domain
  *     matches `organizations.allowed_domain` (one-click Join). Lets a new
@@ -11,5 +14,5 @@ export interface InvitationBannerProps {
  *
  * Renders nothing when there's nothing to surface.
  */
-export declare function InvitationBanner({ className }: InvitationBannerProps): import("react").JSX.Element | null;
+export declare function InvitationBanner({ className }: InvitationBannerProps): import("react").JSX.Element;
 //# sourceMappingURL=InvitationBanner.d.ts.map

package/dist/client/org/InvitationBanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"InvitationBanner.d.ts","sourceRoot":"","sources":["../../../src/client/org/InvitationBanner.tsx"],"names":[],"mappings":"AAKA,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,SAAS,EAAE,EAAE,qBAAqB,sCAgIpE"}
+{"version":3,"file":"InvitationBanner.d.ts","sourceRoot":"","sources":["../../../src/client/org/InvitationBanner.tsx"],"names":[],"mappings":"AAMA,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,SAAS,EAAE,EAAE,qBAAqB,+BAOpE"}

package/dist/client/org/InvitationBanner.js

@@ -1,9 +1,13 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { IconLoader2 } from "@tabler/icons-react";
 import { useState } from "react";
 import { useOrg, useAcceptInvitation, useJoinByDomain } from "./hooks.js";
+import { WorkspaceNotice } from "./WorkspaceNotice.js";
 /**
- * Top-of-app banner that surfaces:
+ * Top-of-app notice bar. Mounted in every template shell, so it owns the
+ * org-level notices a member needs before they can make sense of what they're
+ * looking at:
+ *   - They're on the wrong deployment ({@link WorkspaceNotice}).
  *   - Pending org invitations (one-click Accept).
  *   - Domain-match orgs the user can auto-join because their email domain
  *     matches `organizations.allowed_domain` (one-click Join). Lets a new
@@ -13,6 +17,9 @@ import { useOrg, useAcceptInvitation, useJoinByDomain } from "./hooks.js";
  * Renders nothing when there's nothing to surface.
  */
 export function InvitationBanner({ className }) {
+    return (_jsxs(_Fragment, { children: [_jsx(WorkspaceNotice, { className: className }), _jsx(InvitationRows, { className: className })] }));
+}
+function InvitationRows({ className }) {
     const { data: org } = useOrg();
     const acceptInvitation = useAcceptInvitation();
     const joinByDomain = useJoinByDomain();

package/dist/client/org/InvitationBanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"InvitationBanner.js","sourceRoot":"","sources":["../../../src/client/org/InvitationBanner.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAM1E;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,SAAS,EAAyB;IACnE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/B,MAAM,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,GAAG,QAAQ,CAEhE,IAAI,CAAC,CAAC;IAER,MAAM,kBAAkB,GAAG,GAAG,EAAE,kBAAkB,IAAI,EAAE,CAAC;IACzD,MAAM,aAAa,GAAG,GAAG,EAAE,aAAa,IAAI,EAAE,CAAC;IAE/C,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC;IAE3D,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;QAC3B,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CACL,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,EAAE,OAAO,IAAI,IAAI,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,qBAAqB,EAAE,CAAC;YAC1B,OAAO,CACL,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,qBAAqB,CAAC;gBAC5D,EAAE,OAAO,IAAI,IAAI,CACpB,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CACL,cACE,IAAI,EAAC,QAAQ,eACH,QAAQ,EAClB,SAAS,EAAE,2EAA2E,SAAS,IAAI,EAAE,EAAE,YAEvG,eAAK,SAAS,EAAC,iDAAiD,aAC9D,KAAC,WAAW,IAAC,SAAS,EAAC,gEAAgE,GAAG,EAC1F,gBAAM,SAAS,EAAC,gBAAgB,yBACtB,eAAM,SAAS,EAAC,aAAa,YAAE,cAAc,GAAQ,cACxD,IACH,GACF,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eACE,SAAS,EAAE,6EAA6E,SAAS,IAAI,EAAE,EAAE,aAEzG,cAAK,SAAS,EAAC,+DAA+D,YAC3E,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CACtC,eAEE,SAAS,EAAE,mDAAmD,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,aAEvF,gBAAM,SAAS,EAAC,gCAAgC,aAC9C,eAAM,SAAS,EAAC,aAAa,YAAE,GAAG,CAAC,SAAS,GAAQ,2BAC5C,eAAM,SAAS,EAAC,aAAa,YAAE,GAAG,CAAC,OAAO,GAAQ,IACrD,EACP,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;gCACZ,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gCACjC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oCAC9B,OAAO,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;iCAC9C,CAAC,CAAC;4BACL,CAAC,EACD,QAAQ,EAAE,gBAAgB,CAAC,SAAS,EACpC,SAAS,EAAC,mIAAmI,YAE5I,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAC5B,KAAC,WAAW,IAAC,SAAS,EAAC,sBAAsB,GAAG,CACjD,CAAC,CAAC,CAAC,CACF,MAAM,CACP,GACM,KAvBJ,GAAG,CAAC,EAAE,CAwBP,CACP,CAAC,GACE,EACL,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC3B,MAAM,SAAS,GACb,YAAY,CAAC,SAAS,IAAI,YAAY,KAAK,KAAK,CAAC,KAAK,CAAC;gBACzD,OAAO,CACL,eAEE,SAAS,EAAE,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,+DAA+D,CAAC,CAAC,CAAC,EAAE,kDAAkD,aAEpK,gBAAM,SAAS,EAAC,gCAAgC,0DACJ,GAAG,EAC7C,eAAM,SAAS,EAAC,aAAa,YAAE,KAAK,CAAC,OAAO,GAAQ,wBAE/C,EACP,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;gCACZ,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gCAC7B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;oCAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;iCACrC,CAAC,CAAC;4BACL,CAAC,EACD,QAAQ,EAAE,YAAY,CAAC,SAAS,EAChC,SAAS,EAAC,mIAAmI,YAE5I,SAAS,CAAC,CAAC,CAAC,CACX,KAAC,WAAW,IAAC,SAAS,EAAC,sBAAsB,GAAG,CACjD,CAAC,CAAC,CAAC,CACF,MAAM,CACP,GACM,KAxBJ,KAAK,CAAC,KAAK,CAyBZ,CACP,CAAC;YACJ,CAAC,CAAC,EACD,KAAK,IAAI,CACR,cAAK,SAAS,EAAC,2BAA2B,YACtC,KAAe,CAAC,OAAO,GACrB,CACP,IACG,CACP,CAAC;AACJ,CAAC","sourcesContent":["import { IconLoader2 } from \"@tabler/icons-react\";\nimport { useState } from \"react\";\n\nimport { useOrg, useAcceptInvitation, useJoinByDomain } from \"./hooks.js\";\n\nexport interface InvitationBannerProps {\n  className?: string;\n}\n\n/**\n * Top-of-app banner that surfaces:\n *   - Pending org invitations (one-click Accept).\n *   - Domain-match orgs the user can auto-join because their email domain\n *     matches `organizations.allowed_domain` (one-click Join). Lets a new\n *     signup at e.g. `someone@builder.io` see and join the existing\n *     Builder.io org without going through the picker.\n *\n * Renders nothing when there's nothing to surface.\n */\nexport function InvitationBanner({ className }: InvitationBannerProps) {\n  const { data: org } = useOrg();\n  const acceptInvitation = useAcceptInvitation();\n  const joinByDomain = useJoinByDomain();\n  const [joiningOrgId, setJoiningOrgId] = useState<string | null>(null);\n  const [acceptingInvitationId, setAcceptingInvitationId] = useState<\n    string | null\n  >(null);\n\n  const pendingInvitations = org?.pendingInvitations ?? [];\n  const domainMatches = org?.domainMatches ?? [];\n\n  if (pendingInvitations.length === 0 && domainMatches.length === 0) {\n    return null;\n  }\n\n  const error = acceptInvitation.error || joinByDomain.error;\n\n  // While the join/accept request is in flight (and continuing until the\n  // refreshed org data unmounts this banner), surface a prominent in-place\n  // \"Joining {orgName}…\" state so the chat panel reflects the action instead\n  // of looking unchanged until the view abruptly swaps.\n  const joiningOrgName = (() => {\n    if (joiningOrgId) {\n      return (\n        domainMatches.find((m) => m.orgId === joiningOrgId)?.orgName ?? null\n      );\n    }\n    if (acceptingInvitationId) {\n      return (\n        pendingInvitations.find((i) => i.id === acceptingInvitationId)\n          ?.orgName ?? null\n      );\n    }\n    return null;\n  })();\n\n  if (joiningOrgName) {\n    return (\n      <div\n        role=\"status\"\n        aria-live=\"polite\"\n        className={`border-b border-border bg-blue-50 dark:bg-blue-950/30 px-3 py-3 sm:px-4 ${className ?? \"\"}`}\n      >\n        <div className=\"flex items-center gap-3 text-sm text-foreground\">\n          <IconLoader2 className=\"h-4 w-4 shrink-0 animate-spin text-blue-600 dark:text-blue-400\" />\n          <span className=\"min-w-0 flex-1\">\n            Joining <span className=\"font-medium\">{joiningOrgName}</span>…\n          </span>\n        </div>\n      </div>\n    );\n  }\n\n  return (\n    <div\n      className={`border-b border-border bg-blue-50 dark:bg-blue-950/30 px-3 py-2.5 sm:px-4 ${className ?? \"\"}`}\n    >\n      <div className=\"space-y-2 divide-y divide-blue-200/70 dark:divide-blue-800/50\">\n        {pendingInvitations.map((inv, index) => (\n          <div\n            key={inv.id}\n            className={`flex items-center justify-between gap-4 text-sm ${index > 0 ? \"pt-2\" : \"\"}`}\n          >\n            <span className=\"min-w-0 flex-1 text-foreground\">\n              <span className=\"font-medium\">{inv.invitedBy}</span> invited you\n              to join <span className=\"font-medium\">{inv.orgName}</span>\n            </span>\n            <button\n              type=\"button\"\n              onClick={() => {\n                setAcceptingInvitationId(inv.id);\n                acceptInvitation.mutate(inv.id, {\n                  onError: () => setAcceptingInvitationId(null),\n                });\n              }}\n              disabled={acceptInvitation.isPending}\n              className=\"shrink-0 rounded-md bg-green-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-green-700 disabled:opacity-50 cursor-pointer\"\n            >\n              {acceptInvitation.isPending ? (\n                <IconLoader2 className=\"h-3 w-3 animate-spin\" />\n              ) : (\n                \"Join\"\n              )}\n            </button>\n          </div>\n        ))}\n      </div>\n      {domainMatches.map((match) => {\n        const isJoining =\n          joinByDomain.isPending && joiningOrgId === match.orgId;\n        return (\n          <div\n            key={match.orgId}\n            className={`${pendingInvitations.length > 0 ? \"mt-2 border-t border-blue-200/70 pt-2 dark:border-blue-800/50\" : \"\"} flex items-center justify-between gap-4 text-sm`}\n          >\n            <span className=\"min-w-0 flex-1 text-foreground\">\n              Your team is already using this app. Join{\" \"}\n              <span className=\"font-medium\">{match.orgName}</span> to\n              collaborate.\n            </span>\n            <button\n              type=\"button\"\n              onClick={() => {\n                setJoiningOrgId(match.orgId);\n                joinByDomain.mutate(match.orgId, {\n                  onError: () => setJoiningOrgId(null),\n                });\n              }}\n              disabled={joinByDomain.isPending}\n              className=\"shrink-0 rounded-md bg-green-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-green-700 disabled:opacity-50 cursor-pointer\"\n            >\n              {isJoining ? (\n                <IconLoader2 className=\"h-3 w-3 animate-spin\" />\n              ) : (\n                \"Join\"\n              )}\n            </button>\n          </div>\n        );\n      })}\n      {error && (\n        <div className=\"mt-1 text-xs text-red-600\">\n          {(error as Error).message}\n        </div>\n      )}\n    </div>\n  );\n}\n"]}
+{"version":3,"file":"InvitationBanner.js","sourceRoot":"","sources":["../../../src/client/org/InvitationBanner.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAMvD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,SAAS,EAAyB;IACnE,OAAO,CACL,8BACE,KAAC,eAAe,IAAC,SAAS,EAAE,SAAS,GAAI,EACzC,KAAC,cAAc,IAAC,SAAS,EAAE,SAAS,GAAI,IACvC,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,EAAE,SAAS,EAAyB;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/B,MAAM,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,GAAG,QAAQ,CAEhE,IAAI,CAAC,CAAC;IAER,MAAM,kBAAkB,GAAG,GAAG,EAAE,kBAAkB,IAAI,EAAE,CAAC;IACzD,MAAM,aAAa,GAAG,GAAG,EAAE,aAAa,IAAI,EAAE,CAAC;IAE/C,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC;IAE3D,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;QAC3B,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CACL,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,EAAE,OAAO,IAAI,IAAI,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,qBAAqB,EAAE,CAAC;YAC1B,OAAO,CACL,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,qBAAqB,CAAC;gBAC5D,EAAE,OAAO,IAAI,IAAI,CACpB,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CACL,cACE,IAAI,EAAC,QAAQ,eACH,QAAQ,EAClB,SAAS,EAAE,2EAA2E,SAAS,IAAI,EAAE,EAAE,YAEvG,eAAK,SAAS,EAAC,iDAAiD,aAC9D,KAAC,WAAW,IAAC,SAAS,EAAC,gEAAgE,GAAG,EAC1F,gBAAM,SAAS,EAAC,gBAAgB,yBACtB,eAAM,SAAS,EAAC,aAAa,YAAE,cAAc,GAAQ,cACxD,IACH,GACF,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eACE,SAAS,EAAE,6EAA6E,SAAS,IAAI,EAAE,EAAE,aAEzG,cAAK,SAAS,EAAC,+DAA+D,YAC3E,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CACtC,eAEE,SAAS,EAAE,mDAAmD,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,aAEvF,gBAAM,SAAS,EAAC,gCAAgC,aAC9C,eAAM,SAAS,EAAC,aAAa,YAAE,GAAG,CAAC,SAAS,GAAQ,2BAC5C,eAAM,SAAS,EAAC,aAAa,YAAE,GAAG,CAAC,OAAO,GAAQ,IACrD,EACP,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;gCACZ,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gCACjC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oCAC9B,OAAO,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;iCAC9C,CAAC,CAAC;4BACL,CAAC,EACD,QAAQ,EAAE,gBAAgB,CAAC,SAAS,EACpC,SAAS,EAAC,mIAAmI,YAE5I,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAC5B,KAAC,WAAW,IAAC,SAAS,EAAC,sBAAsB,GAAG,CACjD,CAAC,CAAC,CAAC,CACF,MAAM,CACP,GACM,KAvBJ,GAAG,CAAC,EAAE,CAwBP,CACP,CAAC,GACE,EACL,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC3B,MAAM,SAAS,GACb,YAAY,CAAC,SAAS,IAAI,YAAY,KAAK,KAAK,CAAC,KAAK,CAAC;gBACzD,OAAO,CACL,eAEE,SAAS,EAAE,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,+DAA+D,CAAC,CAAC,CAAC,EAAE,kDAAkD,aAEpK,gBAAM,SAAS,EAAC,gCAAgC,0DACJ,GAAG,EAC7C,eAAM,SAAS,EAAC,aAAa,YAAE,KAAK,CAAC,OAAO,GAAQ,wBAE/C,EACP,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;gCACZ,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gCAC7B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;oCAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;iCACrC,CAAC,CAAC;4BACL,CAAC,EACD,QAAQ,EAAE,YAAY,CAAC,SAAS,EAChC,SAAS,EAAC,mIAAmI,YAE5I,SAAS,CAAC,CAAC,CAAC,CACX,KAAC,WAAW,IAAC,SAAS,EAAC,sBAAsB,GAAG,CACjD,CAAC,CAAC,CAAC,CACF,MAAM,CACP,GACM,KAxBJ,KAAK,CAAC,KAAK,CAyBZ,CACP,CAAC;YACJ,CAAC,CAAC,EACD,KAAK,IAAI,CACR,cAAK,SAAS,EAAC,2BAA2B,YACtC,KAAe,CAAC,OAAO,GACrB,CACP,IACG,CACP,CAAC;AACJ,CAAC","sourcesContent":["import { IconLoader2 } from \"@tabler/icons-react\";\nimport { useState } from \"react\";\n\nimport { useOrg, useAcceptInvitation, useJoinByDomain } from \"./hooks.js\";\nimport { WorkspaceNotice } from \"./WorkspaceNotice.js\";\n\nexport interface InvitationBannerProps {\n  className?: string;\n}\n\n/**\n * Top-of-app notice bar. Mounted in every template shell, so it owns the\n * org-level notices a member needs before they can make sense of what they're\n * looking at:\n *   - They're on the wrong deployment ({@link WorkspaceNotice}).\n *   - Pending org invitations (one-click Accept).\n *   - Domain-match orgs the user can auto-join because their email domain\n *     matches `organizations.allowed_domain` (one-click Join). Lets a new\n *     signup at e.g. `someone@builder.io` see and join the existing\n *     Builder.io org without going through the picker.\n *\n * Renders nothing when there's nothing to surface.\n */\nexport function InvitationBanner({ className }: InvitationBannerProps) {\n  return (\n    <>\n      <WorkspaceNotice className={className} />\n      <InvitationRows className={className} />\n    </>\n  );\n}\n\nfunction InvitationRows({ className }: InvitationBannerProps) {\n  const { data: org } = useOrg();\n  const acceptInvitation = useAcceptInvitation();\n  const joinByDomain = useJoinByDomain();\n  const [joiningOrgId, setJoiningOrgId] = useState<string | null>(null);\n  const [acceptingInvitationId, setAcceptingInvitationId] = useState<\n    string | null\n  >(null);\n\n  const pendingInvitations = org?.pendingInvitations ?? [];\n  const domainMatches = org?.domainMatches ?? [];\n\n  if (pendingInvitations.length === 0 && domainMatches.length === 0) {\n    return null;\n  }\n\n  const error = acceptInvitation.error || joinByDomain.error;\n\n  // While the join/accept request is in flight (and continuing until the\n  // refreshed org data unmounts this banner), surface a prominent in-place\n  // \"Joining {orgName}…\" state so the chat panel reflects the action instead\n  // of looking unchanged until the view abruptly swaps.\n  const joiningOrgName = (() => {\n    if (joiningOrgId) {\n      return (\n        domainMatches.find((m) => m.orgId === joiningOrgId)?.orgName ?? null\n      );\n    }\n    if (acceptingInvitationId) {\n      return (\n        pendingInvitations.find((i) => i.id === acceptingInvitationId)\n          ?.orgName ?? null\n      );\n    }\n    return null;\n  })();\n\n  if (joiningOrgName) {\n    return (\n      <div\n        role=\"status\"\n        aria-live=\"polite\"\n        className={`border-b border-border bg-blue-50 dark:bg-blue-950/30 px-3 py-3 sm:px-4 ${className ?? \"\"}`}\n      >\n        <div className=\"flex items-center gap-3 text-sm text-foreground\">\n          <IconLoader2 className=\"h-4 w-4 shrink-0 animate-spin text-blue-600 dark:text-blue-400\" />\n          <span className=\"min-w-0 flex-1\">\n            Joining <span className=\"font-medium\">{joiningOrgName}</span>…\n          </span>\n        </div>\n      </div>\n    );\n  }\n\n  return (\n    <div\n      className={`border-b border-border bg-blue-50 dark:bg-blue-950/30 px-3 py-2.5 sm:px-4 ${className ?? \"\"}`}\n    >\n      <div className=\"space-y-2 divide-y divide-blue-200/70 dark:divide-blue-800/50\">\n        {pendingInvitations.map((inv, index) => (\n          <div\n            key={inv.id}\n            className={`flex items-center justify-between gap-4 text-sm ${index > 0 ? \"pt-2\" : \"\"}`}\n          >\n            <span className=\"min-w-0 flex-1 text-foreground\">\n              <span className=\"font-medium\">{inv.invitedBy}</span> invited you\n              to join <span className=\"font-medium\">{inv.orgName}</span>\n            </span>\n            <button\n              type=\"button\"\n              onClick={() => {\n                setAcceptingInvitationId(inv.id);\n                acceptInvitation.mutate(inv.id, {\n                  onError: () => setAcceptingInvitationId(null),\n                });\n              }}\n              disabled={acceptInvitation.isPending}\n              className=\"shrink-0 rounded-md bg-green-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-green-700 disabled:opacity-50 cursor-pointer\"\n            >\n              {acceptInvitation.isPending ? (\n                <IconLoader2 className=\"h-3 w-3 animate-spin\" />\n              ) : (\n                \"Join\"\n              )}\n            </button>\n          </div>\n        ))}\n      </div>\n      {domainMatches.map((match) => {\n        const isJoining =\n          joinByDomain.isPending && joiningOrgId === match.orgId;\n        return (\n          <div\n            key={match.orgId}\n            className={`${pendingInvitations.length > 0 ? \"mt-2 border-t border-blue-200/70 pt-2 dark:border-blue-800/50\" : \"\"} flex items-center justify-between gap-4 text-sm`}\n          >\n            <span className=\"min-w-0 flex-1 text-foreground\">\n              Your team is already using this app. Join{\" \"}\n              <span className=\"font-medium\">{match.orgName}</span> to\n              collaborate.\n            </span>\n            <button\n              type=\"button\"\n              onClick={() => {\n                setJoiningOrgId(match.orgId);\n                joinByDomain.mutate(match.orgId, {\n                  onError: () => setJoiningOrgId(null),\n                });\n              }}\n              disabled={joinByDomain.isPending}\n              className=\"shrink-0 rounded-md bg-green-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-green-700 disabled:opacity-50 cursor-pointer\"\n            >\n              {isJoining ? (\n                <IconLoader2 className=\"h-3 w-3 animate-spin\" />\n              ) : (\n                \"Join\"\n              )}\n            </button>\n          </div>\n        );\n      })}\n      {error && (\n        <div className=\"mt-1 text-xs text-red-600\">\n          {(error as Error).message}\n        </div>\n      )}\n    </div>\n  );\n}\n"]}

package/dist/client/org/OrgSwitcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OrgSwitcher.d.ts","sourceRoot":"","sources":["../../../src/client/org/OrgSwitcher.tsx"],"names":[],"mappings":"AA6DA,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,2GAA2G;IAC3G,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAuND;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,cAAc,EACd,YAAY,EACZ,OAAO,EACP,YAAiD,EACjD,WAAkC,GACnC,EAAE,gBAAgB,sCAoelB"}
+{"version":3,"file":"OrgSwitcher.d.ts","sourceRoot":"","sources":["../../../src/client/org/OrgSwitcher.tsx"],"names":[],"mappings":"AA+DA,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,2GAA2G;IAC3G,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAuND;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,cAAc,EACd,YAAY,EACZ,OAAO,EACP,YAAiD,EACjD,WAAkC,GACnC,EAAE,gBAAgB,sCAyflB"}

package/dist/client/org/OrgSwitcher.js

@@ -1,8 +1,9 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import * as PopoverPrimitive from "@radix-ui/react-popover";
-import { IconApps, IconArrowUpRight, IconBrain, IconBrandJira, IconBrush, IconCalendar, IconCalendarTime, IconChartBar, IconCheck, IconChevronRight, IconClipboardList, IconCode, IconFileText, IconKey, IconLayoutBoard, IconListCheck, IconLoader2, IconLogout, IconMail, IconMessageCircle, IconMicrophone, IconNote, IconPhone, IconPhoto, IconPlus, IconPresentation, IconRoute, IconScreenShare, IconSelector, IconSettings, IconStack2, IconUser, IconUserCircle, IconUserPlus, IconUsers, IconUsersGroup, IconWorld, } from "@tabler/icons-react";
+import { IconApps, IconArrowUpRight, IconBrain, IconBrandJira, IconBrush, IconCalendar, IconCalendarTime, IconChartBar, IconCheck, IconChevronRight, IconClipboardList, IconCode, IconExternalLink, IconFileText, IconKey, IconLayoutBoard, IconListCheck, IconLoader2, IconLogout, IconMail, IconMessageCircle, IconMicrophone, IconNote, IconPhone, IconPhoto, IconPlus, IconPresentation, IconRoute, IconScreenShare, IconSelector, IconSettings, IconStack2, IconUser, IconUserCircle, IconUserPlus, IconUsers, IconUsersGroup, IconWorld, } from "@tabler/icons-react";
 import { useState } from "react";
 import { useNavigate } from "react-router";
+import { shouldOfferWorkspace } from "../../org/workspace-url.js";
 import { agentNativePath } from "../api-path.js";
 import { useT } from "../i18n.js";
 import { useSession } from "../use-session.js";
@@ -171,7 +172,7 @@ export function OrgSwitcher({ className, hideWhenSingle, reserveSpace, compact,
                         // Don't auto-focus the first item — feels heavy on a switcher.
                         if (mode === "list")
                             e.preventDefault();
-                    }, children: [mode === "list" && (_jsxs(_Fragment, { children: [!inOrg && (_jsxs("div", { className: "flex w-full items-center gap-2 px-2.5 py-1.5 text-xs text-muted-foreground", "aria-disabled": "true", children: [_jsx(IconUser, { className: "h-3.5 w-3.5 shrink-0" }), _jsxs("span", { className: "truncate flex-1 text-start", children: ["Personal (", personalLabel, ")"] })] })), orgs.length > 0 && (_jsx("div", { className: SECTION_LABEL_CLASS, children: "Organizations" })), orgs.map((o) => (_jsxs("button", { type: "button", onClick: async () => {
+                    }, children: [mode === "list" && (_jsxs(_Fragment, { children: [typeof window !== "undefined" && (_jsxs("div", { className: "px-2.5 pb-1.5 pt-1 text-[11px] text-muted-foreground", children: [_jsx("div", { className: "truncate", children: window.location.host }), shouldOfferWorkspace(window.location.href, org.workspaceUrl) && (_jsxs("a", { href: org.workspaceUrl ?? undefined, className: "mt-0.5 inline-flex items-center gap-1 text-foreground no-underline hover:underline", children: [_jsx(IconExternalLink, { className: "h-3 w-3 shrink-0" }), "Your workspace"] }))] })), !inOrg && (_jsxs("div", { className: "flex w-full items-center gap-2 px-2.5 py-1.5 text-xs text-muted-foreground", "aria-disabled": "true", children: [_jsx(IconUser, { className: "h-3.5 w-3.5 shrink-0" }), _jsxs("span", { className: "truncate flex-1 text-start", children: ["Personal (", personalLabel, ")"] })] })), orgs.length > 0 && (_jsx("div", { className: SECTION_LABEL_CLASS, children: "Organizations" })), orgs.map((o) => (_jsxs("button", { type: "button", onClick: async () => {
                                         if (o.orgId === org.orgId) {
                                             setOpen(false);
                                             return;