@agent-native/core 0.15.3 → 0.15.4

package/dist/client/settings/useBuilderStatus.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBuilderStatus.js","sourceRoot":"","sources":["../../../src/client/settings/useBuilderStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA8B7C;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAuB,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,WAAW,EAAE,CAAC;QAEd,SAAS,OAAO;YACd,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,SAAS,YAAY;YACnB,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,WAAW,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAC5D,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;QACxE,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;YAC/D,MAAM,CAAC,mBAAmB,CACxB,iCAAiC,EACjC,WAAW,CACZ,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACnD,CAAC;AAyDD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,SAAS,kCAAkC,CAAC,MAAc;IACxD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,iCAAiC,EAAE;QACjD,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,CAAC,CACH,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,uBAAuB,CAAC,EACtC,GAAG,EACH,MAAM,GAAG,iBAAiB,EAC1B,QAAQ,GAAG,qBAAqB,MACE,EAAE;IACpC,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC7D,MAAM,IAAI,GACR,GAAG;QACH,IAAI,GAAG,CAAC,eAAe,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,UAAU,CAAC,yBAAyB,EAAE;QACpC,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,QAAQ;QACf,MAAM;QACN,gBAAgB,EAAE,cAAc;KACjC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,UAAU,CAAC,+BAA+B,EAAE;gBAC1C,OAAO,EAAE,SAAS;gBAClB,KAAK,EAAE,QAAQ;gBACf,MAAM;gBACN,gBAAgB,EAAE,cAAc;aACjC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CAAC,wBAAwB,EAAE;YACnC,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,sBAAsB;YAC9B,MAAM;YACN,gBAAgB,EAAE,cAAc;SACjC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAkC,EAAE;IAEpC,MAAM,EACJ,QAAQ,EACR,cAAc,GAAG,sBAAsB,EACvC,WAAW,GACZ,GAAG,IAAI,CAAC;IACT,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC9E,wEAAwE;IACxE,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,MAAM,qBAAqB,GAAG,MAAM,CAAgB,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAwC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IAErC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,KAAK,CACnB,IAAI,GAAG,CAAC,eAAe,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CACvE,CAAC;YACF,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAQrB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,qEAAqE;IACrE,oDAAoD;IACpD,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,SAAS,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,OAAO;YAC7C,oEAAoE;YACpE,oEAAoE;YACpE,iEAAiE;YACjE,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9B,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9B,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YACtC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;YAC1C,qBAAqB,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;YAC9B,UAAU,CAAC,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;gBAClD,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpC,kCAAkC,CAAC,gBAAgB,CAAC,CAAC;gBACrD,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBACzB,oBAAoB,CAAC,OAAO,GAAG,KAAK,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,OAAO,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;QACxD,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;YAC3B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC5D,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;YACvE,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE5B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,QAAQ,EAAE,CAAC;QACX,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,mEAAmE;QACnE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7D,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,yDAAyD;QACzD,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAChD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC;QAC/C,MAAM,WAAW,GACf,OAAO,QAAQ,KAAK,QAAQ;YAC5B,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,yBAAyB,CAAC;QACpD,MAAM,GAAG,GACP,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;YACvC,QAAQ;YACR,IAAI,GAAG,CAAC,eAAe,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;QAC1E,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,GAAG;YACH,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,oDAAoD,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,QAAQ,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;gBAClB,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,IAAI,CAAC,CAAC;gBACpB,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC9B,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;gBACtC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;gBAC1C,qBAAqB,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjE,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;gBAC9B,UAAU,CAAC,GAAG,CAAC,CAAC;gBAChB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpC,kCAAkC,CAAC,iBAAiB,CAAC,CAAC;gBACtD,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,iEAAiE;oBACjE,qDAAqD;gBACvD,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;gBACpC,qEAAqE;gBACrE,qEAAqE;gBACrE,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CACN,sCAAsC,CAAC,CAAC,YAAY,CAAC,OAAO,iCAAiC,CAC9F,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,eAAe,EAAE,CAAC;gBAClD,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,UAAU,CAAC,wBAAwB,EAAE;oBACnC,OAAO,EAAE,SAAS;oBAClB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,cAAc;iBACvB,CAAC,CAAC;gBACH,QAAQ,CACN,yEAAyE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;IAExE,uEAAuE;IACvE,gEAAgE;IAChE,EAAE;IACF,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,iFAAiF;IACjF,8CAA8C;IAC9C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,GAA4B,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE;YACtC,QAAQ,EAAE,CAAC;YACX,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,QAAQ,CAAC,sCAAsC,OAAO,GAAG,CAAC,CAAC;QAC7D,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,gBAAgB,CAAC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,SAAS,GAAG,CAAC,CAAe,EAAE,EAAE;gBACtC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuD,CAAC;gBACvE,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;oBAAE,OAAO;gBACnD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAO;gBAC9D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,CAAe,EAAE,EAAE;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO;YAChD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuD,CAAC;YACvE,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;gBAAE,OAAO;YACnD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO;YAC9D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE5C,OAAO,GAAG,EAAE;YACV,OAAO,EAAE,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,OAAO;QACL,UAAU;QACV,UAAU;QACV,cAAc;QACd,OAAO;QACP,UAAU;QACV,KAAK;QACL,gBAAgB;QAChB,KAAK;KACN,CAAC;AACJ,CAAC","sourcesContent":["import { agentNativePath } from \"../api-path.js\";\nimport { useState, useEffect, useCallback, useRef } from \"react\";\nimport { getCallbackOrigin } from \"../frame.js\";\nimport { trackEvent } from \"../analytics.js\";\n\nexport interface BuilderStatus {\n  configured: boolean;\n  builderEnabled: boolean;\n  /**\n   * True when `BUILDER_PRIVATE_KEY` is set at the deploy level. This is a\n   * fallback credential; per-user/org Builder connections are still allowed\n   * and take precedence for that request.\n   */\n  envManaged?: boolean;\n  credentialSource?: \"user\" | \"org\" | \"env\";\n  connectUrl: string;\n  appHost: string;\n  apiHost: string;\n  branchProjectIdConfigured?: boolean;\n  branchProjectId?: string;\n  publicKeyConfigured: boolean;\n  privateKeyConfigured: boolean;\n  userId?: string;\n  orgName?: string;\n  orgKind?: string;\n  /**\n   * Set when the OAuth callback ran but failed to persist credentials.\n   * Surfaced as a one-shot row by the server so the connect-flow polling\n   * can stop with a clear message instead of timing out at 5min.\n   */\n  connectError?: { message: string; at: number };\n}\n\n/**\n * Fetches Builder connection status from /_agent-native/builder/status.\n * Re-fetches on window focus to detect post-redirect state changes.\n */\nexport function useBuilderStatus() {\n  const [status, setStatus] = useState<BuilderStatus | null>(null);\n  const [loading, setLoading] = useState(true);\n\n  const fetchStatus = useCallback(async () => {\n    try {\n      const res = await fetch(agentNativePath(\"/_agent-native/builder/status\"));\n      if (!res.ok) {\n        setStatus(null);\n        return;\n      }\n      setStatus(await res.json());\n    } catch {\n      setStatus(null);\n    } finally {\n      setLoading(false);\n    }\n  }, []);\n\n  useEffect(() => {\n    fetchStatus();\n\n    function onFocus() {\n      fetchStatus();\n    }\n    function onVisibility() {\n      if (document.visibilityState === \"visible\") fetchStatus();\n    }\n    window.addEventListener(\"focus\", onFocus);\n    document.addEventListener(\"visibilitychange\", onVisibility);\n    // Engine connect/disconnect actions (e.g. the Builder disconnect button)\n    // dispatch this event so dependent cards refresh without a full reload.\n    window.addEventListener(\"agent-engine:configured-changed\", fetchStatus);\n    return () => {\n      window.removeEventListener(\"focus\", onFocus);\n      document.removeEventListener(\"visibilitychange\", onVisibility);\n      window.removeEventListener(\n        \"agent-engine:configured-changed\",\n        fetchStatus,\n      );\n    };\n  }, [fetchStatus]);\n\n  return { status, loading, refetch: fetchStatus };\n}\n\n// ─── useBuilderConnectFlow ──────────────────────────────────────────────────\n//\n// Shared state machine for the \"open Builder CLI-auth popup + poll\n// /builder/status until credentials land\" interaction. Replaces three\n// near-duplicate inline implementations: `BuilderCliAuthMethod` in\n// OnboardingPanel, `ConnectBuilderCard`, and `BuilderConnectCta` in\n// AssistantChat. Each consumer supplies its own popup URL / completion\n// behavior; the hook owns the polling + timeout + focus refresh.\n//\n// `popupUrl` is what we pass to `window.open`. The default\n// `/_agent-native/builder/connect` is a server-side 302 to the real\n// cli-auth URL — using it keeps the click handler synchronous so popup\n// blockers don't downgrade the open to same-tab navigation. Pass an\n// explicit `popupUrl` (e.g. the already-computed cli-auth URL) if your\n// caller already has it in hand.\n\nexport interface BuilderConnectFlowOptions {\n  /** URL to synchronously open on start(). Defaults to the 302 shortcut. */\n  popupUrl?: string;\n  /** Low-cardinality label for the UI surface that opened Builder connect. */\n  trackingSource?: string;\n  /** Invoked after the status poll first sees `configured: true`. */\n  onConnected?: (state: { orgName: string | null }) => void | Promise<void>;\n}\n\nexport interface BuilderConnectFlow {\n  configured: boolean;\n  /**\n   * True when the deploy has BUILDER_PRIVATE_KEY set as a fallback. Connect\n   * is still available so users can override the fallback with their own\n   * Builder account.\n   */\n  envManaged: boolean;\n  /**\n   * True when the server has a Builder branch project configured for this\n   * request. When false, the card surfaces a waitlist CTA instead of a Send\n   * button.\n   */\n  builderEnabled: boolean;\n  orgName: string | null;\n  connecting: boolean;\n  error: string | null;\n  /**\n   * True once the first `/builder/status` fetch has completed (successfully\n   * or not). Consumers that accept an `initialConfigured` prop (e.g. agent\n   * tool-call results rendered with server-side state) should treat\n   * `configured`/`orgName` as authoritative only once this flips true —\n   * otherwise the hook's starting `false` defaults would cause a flash\n   * back to \"Connect Builder\" on first paint.\n   */\n  hasFetchedStatus: boolean;\n  /** Open the popup and begin polling. Must be called from a user-gesture handler. */\n  start: () => void;\n}\n\nconst POLL_INTERVAL_MS = 2000;\nconst POLL_TIMEOUT_MS = 5 * 60 * 1000;\n\nfunction notifyAgentEngineConfiguredChanged(source: string) {\n  if (typeof window === \"undefined\") return;\n  window.dispatchEvent(\n    new CustomEvent(\"agent-engine:configured-changed\", {\n      detail: { source },\n    }),\n  );\n}\n\nexport interface OpenBuilderConnectPopupOptions {\n  url?: string;\n  source?: string;\n  features?: string;\n}\n\nexport function openBuilderConnectPopup({\n  url,\n  source = \"builder_connect\",\n  features = \"noopener,noreferrer\",\n}: OpenBuilderConnectPopupOptions = {}): Window | null {\n  if (typeof window === \"undefined\") return null;\n  const origin = getCallbackOrigin() || window.location.origin;\n  const href =\n    url ??\n    new URL(agentNativePath(\"/_agent-native/builder/connect\"), origin).href;\n  const connectUrlKind = url ? \"provided\" : \"default\";\n  trackEvent(\"builder connect clicked\", {\n    feature: \"builder\",\n    stage: \"client\",\n    source,\n    connect_url_kind: connectUrlKind,\n  });\n  try {\n    const opened = window.open(href, \"_blank\", features);\n    if (!opened && !/AgentNativeDesktop/i.test(navigator.userAgent || \"\")) {\n      trackEvent(\"builder connect popup blocked\", {\n        feature: \"builder\",\n        stage: \"client\",\n        source,\n        connect_url_kind: connectUrlKind,\n      });\n    }\n    return opened;\n  } catch {\n    trackEvent(\"builder connect failed\", {\n      feature: \"builder\",\n      stage: \"client\",\n      reason: \"popup_open_exception\",\n      source,\n      connect_url_kind: connectUrlKind,\n    });\n    return null;\n  }\n}\n\nexport function useBuilderConnectFlow(\n  opts: BuilderConnectFlowOptions = {},\n): BuilderConnectFlow {\n  const {\n    popupUrl,\n    trackingSource = \"builder_connect_flow\",\n    onConnected,\n  } = opts;\n  const [configured, setConfigured] = useState(false);\n  const [envManaged, setEnvManaged] = useState(false);\n  const [builderEnabled, setBuilderEnabled] = useState(false);\n  const [orgName, setOrgName] = useState<string | null>(null);\n  const [connecting, setConnecting] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [hasFetchedStatus, setHasFetchedStatus] = useState(false);\n  const [statusConnectUrl, setStatusConnectUrl] = useState<string | null>(null);\n  // When statusConnectUrl was last fetched. The server signs the embedded\n  // _an_connect token with a 10-minute TTL; using an older URL silently\n  // fails the same-origin check on the popup side. Track freshness so\n  // start() can fall back to the bare /builder/connect path when stale.\n  const statusConnectUrlAtRef = useRef<number | null>(null);\n  const pollRef = useRef<ReturnType<typeof setInterval> | null>(null);\n  const mountedRef = useRef(true);\n  const notifiedConnectedRef = useRef(false);\n  // Keep onConnected in a ref so start() doesn't need to re-create when the\n  // caller passes an inline arrow function.\n  const onConnectedRef = useRef(onConnected);\n  onConnectedRef.current = onConnected;\n\n  const stopPoll = useCallback(() => {\n    if (pollRef.current) {\n      clearInterval(pollRef.current);\n      pollRef.current = null;\n    }\n  }, []);\n\n  const fetchStatus = useCallback(async () => {\n    const origin = getCallbackOrigin() || window.location.origin;\n    try {\n      const r = await fetch(\n        new URL(agentNativePath(\"/_agent-native/builder/status\"), origin).href,\n      );\n      if (!r.ok) return null;\n      return (await r.json()) as {\n        configured: boolean;\n        envManaged?: boolean;\n        builderEnabled?: boolean;\n        orgName?: string | null;\n        connectUrl?: string;\n        credentialSource?: \"user\" | \"org\" | \"env\";\n        connectError?: { message: string; at: number };\n      };\n    } catch {\n      return null;\n    }\n  }, []);\n\n  // Initial fetch + focus/visibility refresh so if the user completed the\n  // flow in another tab (or a downgraded same-tab nav) we notice it. Also\n  // listen for `agent-engine:configured-changed` so a Disconnect click in\n  // Settings propagates to any connect-CTA cards rendered elsewhere in\n  // the app without waiting for the next focus event.\n  useEffect(() => {\n    mountedRef.current = true;\n    let cancelled = false;\n    const refresh = async () => {\n      const s = await fetchStatus();\n      if (cancelled || !mountedRef.current) return;\n      // Flip `hasFetchedStatus` even when the fetch failed — the caller's\n      // \"use initial props until the hook has an answer\" pattern wants to\n      // stop waiting after we've tried, regardless of network outcome.\n      setHasFetchedStatus(true);\n      if (!s) return;\n      setConfigured(!!s.configured);\n      setEnvManaged(!!s.envManaged);\n      setBuilderEnabled(!!s.builderEnabled);\n      setStatusConnectUrl(s.connectUrl ?? null);\n      statusConnectUrlAtRef.current = s.connectUrl ? Date.now() : null;\n      const org = s.orgName ?? null;\n      setOrgName(org);\n      if (s.configured && !notifiedConnectedRef.current) {\n        notifiedConnectedRef.current = true;\n        notifyAgentEngineConfiguredChanged(\"builder-status\");\n        try {\n          await onConnectedRef.current?.({ orgName: org });\n        } catch {\n          // The caller's callback is a UI convenience; status is already set.\n        }\n      } else if (!s.configured) {\n        notifiedConnectedRef.current = false;\n      }\n    };\n    refresh();\n    const onVisible = () => {\n      if (document.visibilityState === \"visible\") refresh();\n    };\n    window.addEventListener(\"focus\", refresh);\n    document.addEventListener(\"visibilitychange\", onVisible);\n    window.addEventListener(\"agent-engine:configured-changed\", refresh);\n    return () => {\n      cancelled = true;\n      mountedRef.current = false;\n      window.removeEventListener(\"focus\", refresh);\n      document.removeEventListener(\"visibilitychange\", onVisible);\n      window.removeEventListener(\"agent-engine:configured-changed\", refresh);\n      stopPoll();\n    };\n  }, [fetchStatus, stopPoll]);\n\n  const start = useCallback(() => {\n    stopPoll();\n    setConnecting(true);\n    setError(null);\n\n    // Open SYNCHRONOUSLY inside the caller's click handler — any await\n    // before window.open lets the user-gesture token expire, which causes\n    // popup blockers to block entirely or fall back to same-tab navigation.\n    const origin = getCallbackOrigin() || window.location.origin;\n    // The signed _an_connect token in statusConnectUrl has a 10-minute TTL.\n    // If the panel has been open longer than that the token is dead and the\n    // popup will silently 403; drop the cached URL and let the bare /connect\n    // route do the same-origin Sec-Fetch-Site check instead.\n    const STATUS_CONNECT_URL_TTL_MS = 9 * 60 * 1000;\n    const cachedAt = statusConnectUrlAtRef.current;\n    const cachedFresh =\n      typeof cachedAt === \"number\" &&\n      Date.now() - cachedAt < STATUS_CONNECT_URL_TTL_MS;\n    const url =\n      (cachedFresh ? statusConnectUrl : null) ??\n      popupUrl ??\n      new URL(agentNativePath(\"/_agent-native/builder/connect\"), origin).href;\n    const opened = openBuilderConnectPopup({\n      url,\n      source: trackingSource,\n    });\n    if (!opened && !/AgentNativeDesktop/i.test(navigator.userAgent || \"\")) {\n      setError(\"Couldn't open Builder. Allow popups and try again.\");\n    }\n\n    const started = Date.now();\n    pollRef.current = setInterval(async () => {\n      const s = await fetchStatus();\n      if (!mountedRef.current) {\n        stopPoll();\n        return;\n      }\n      if (s?.configured) {\n        stopPoll();\n        setConfigured(true);\n        setEnvManaged(!!s.envManaged);\n        setBuilderEnabled(!!s.builderEnabled);\n        setStatusConnectUrl(s.connectUrl ?? null);\n        statusConnectUrlAtRef.current = s.connectUrl ? Date.now() : null;\n        const org = s.orgName ?? null;\n        setOrgName(org);\n        setConnecting(false);\n        notifiedConnectedRef.current = true;\n        notifyAgentEngineConfiguredChanged(\"builder-connect\");\n        try {\n          await onConnectedRef.current?.({ orgName: org });\n        } catch {\n          // Consumer's callback failed; we've already flipped the UI state\n          // to connected. Swallow so we don't re-arm the flow.\n        }\n      } else if (s?.connectError?.message) {\n        // OAuth callback ran but writeBuilderCredentials threw — surface the\n        // real error instead of letting the user wait 5 minutes for timeout.\n        stopPoll();\n        setConnecting(false);\n        setError(\n          `Couldn't save Builder credentials: ${s.connectError.message}. Try again or contact support.`,\n        );\n      } else if (Date.now() - started > POLL_TIMEOUT_MS) {\n        stopPoll();\n        setConnecting(false);\n        trackEvent(\"builder connect failed\", {\n          feature: \"builder\",\n          stage: \"client\",\n          reason: \"timeout\",\n          source: trackingSource,\n        });\n        setError(\n          \"Didn't hear back from Builder in 5 minutes. Allow popups and try again.\",\n        );\n      }\n    }, POLL_INTERVAL_MS);\n  }, [fetchStatus, popupUrl, statusConnectUrl, stopPoll, trackingSource]);\n\n  // Popup-side fast path: the error page broadcasts a message so we stop\n  // polling immediately rather than waiting for the next 2s tick.\n  //\n  // We listen on BroadcastChannel (same-origin, works with noopener popups)\n  // AND on window.message (legacy path for environments without BC or for\n  // popups that still have opener access). Both paths are safe to have open\n  // simultaneously \\u2014 the first one to fire wins and the error is deduplicated\n  // by the stopPoll() call which is idempotent.\n  useEffect(() => {\n    let channel: BroadcastChannel | null = null;\n    const handleError = (message: string) => {\n      stopPoll();\n      setConnecting(false);\n      setError(`Couldn't save Builder credentials: ${message}.`);\n    };\n\n    try {\n      channel = new BroadcastChannel(`builder-connect:${window.location.host}`);\n      channel.onmessage = (e: MessageEvent) => {\n        const data = e.data as { type?: string; message?: string } | undefined;\n        if (data?.type !== \"builder-connect-error\") return;\n        if (typeof data.message !== \"string\" || !data.message) return;\n        handleError(data.message);\n      };\n    } catch {\n      // BroadcastChannel not available (rare) \\u2014 fall through to postMessage.\n    }\n\n    const handler = (e: MessageEvent) => {\n      if (e.origin !== window.location.origin) return;\n      const data = e.data as { type?: string; message?: string } | undefined;\n      if (data?.type !== \"builder-connect-error\") return;\n      if (typeof data.message !== \"string\" || !data.message) return;\n      handleError(data.message);\n    };\n    window.addEventListener(\"message\", handler);\n\n    return () => {\n      channel?.close();\n      window.removeEventListener(\"message\", handler);\n    };\n  }, [stopPoll]);\n\n  return {\n    configured,\n    envManaged,\n    builderEnabled,\n    orgName,\n    connecting,\n    error,\n    hasFetchedStatus,\n    start,\n  };\n}\n"]}
+{"version":3,"file":"useBuilderStatus.js","sourceRoot":"","sources":["../../../src/client/settings/useBuilderStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA8B7C;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAuB,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,WAAW,EAAE,CAAC;QAEd,SAAS,OAAO;YACd,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,SAAS,YAAY;YACnB,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,WAAW,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAC5D,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;QACxE,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;YAC/D,MAAM,CAAC,mBAAmB,CACxB,iCAAiC,EACjC,WAAW,CACZ,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACnD,CAAC;AAyDD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAC5C,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,SAAS,oBAAoB;IAC3B,IAAI,OAAO,SAAS,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAAC,GAA8B;IAC3D,IAAI,CAAC,GAAG,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,GAAG,CAC1D,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAAkB,EAClB,SAAwB;IAExB,OAAO,CACL,qBAAqB,CAAC,GAAG,CAAC;QAC1B,OAAO,SAAS,KAAK,QAAQ;QAC7B,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,yBAAyB,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CAAC,MAAc;IACxD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,oEAAoE;IACtE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,oBAAoB,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU;YACnC,2DAA2D,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,QAAQ,CAAC;QACrD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,GAAG,uBAAuB,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAc,EAAE,GAAW;IAC9D,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC,CAAC,MAAc;IACxD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,iCAAiC,EAAE;QACjD,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,CAAC,CACH,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,uBAAuB,CAAC,EACtC,GAAG,EACH,MAAM,GAAG,iBAAiB,EAC1B,QAAQ,GAAG,qBAAqB,MACE,EAAE;IACpC,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC7D,MAAM,IAAI,GACR,GAAG;QACH,IAAI,GAAG,CAAC,eAAe,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,UAAU,CAAC,yBAAyB,EAAE;QACpC,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,QAAQ;QACf,MAAM;QACN,gBAAgB,EAAE,cAAc;KACjC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,UAAU,CAAC,+BAA+B,EAAE;gBAC1C,OAAO,EAAE,SAAS;gBAClB,KAAK,EAAE,QAAQ;gBACf,MAAM;gBACN,gBAAgB,EAAE,cAAc;aACjC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CAAC,wBAAwB,EAAE;YACnC,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,sBAAsB;YAC9B,MAAM;YACN,gBAAgB,EAAE,cAAc;SACjC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAkC,EAAE;IAEpC,MAAM,EACJ,QAAQ,EACR,cAAc,GAAG,sBAAsB,EACvC,WAAW,GACZ,GAAG,IAAI,CAAC;IACT,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC9E,wEAAwE;IACxE,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,wCAAwC;IACxC,MAAM,qBAAqB,GAAG,MAAM,CAAgB,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAwC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IAErC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,KAAK,CACnB,IAAI,GAAG,CAAC,eAAe,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CACvE,CAAC;YACF,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAQrB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,qEAAqE;IACrE,oDAAoD;IACpD,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,SAAS,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,OAAO;YAC7C,oEAAoE;YACpE,oEAAoE;YACpE,iEAAiE;YACjE,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9B,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9B,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YACtC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;YAC1C,qBAAqB,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;YAC9B,UAAU,CAAC,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;gBAClD,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpC,kCAAkC,CAAC,gBAAgB,CAAC,CAAC;gBACrD,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBACzB,oBAAoB,CAAC,OAAO,GAAG,KAAK,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,OAAO,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;QACxD,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;YAC3B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC5D,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;YACvE,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE5B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,QAAQ,EAAE,CAAC;QACX,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,mEAAmE;QACnE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7D,MAAM,cAAc,GAAG,uBAAuB,CAC5C,gBAAgB,EAChB,qBAAqB,CAAC,OAAO,CAC9B;YACC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,aAAa,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,eAAe,CAAC,gCAAgC,CAAC,EACjD,MAAM,CACP,CAAC,IAAI,CAAC;QACP,MAAM,SAAS,GAAG,cAAc,IAAI,aAAa,IAAI,WAAW,CAAC;QAEjE,IAAI,oBAAoB,EAAE,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,uBAAuB,CAAC;gBACrC,GAAG,EAAE,SAAS;gBACd,MAAM,EAAE,cAAc;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,iEAAiE;gBACjE,+DAA+D;YACjE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,uBAAuB,CAAC;gBACrC,GAAG,EAAE,aAAa;gBAClB,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,sBAAsB;aACjC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CAAC,oDAAoD,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,kCAAkC,CAAC,MAAM,CAAC,CAAC;YAC3C,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;gBAC9B,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACxB,IAAI,CAAC;wBACH,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,CAAC;oBAAC,MAAM,CAAC;wBACP,yBAAyB;oBAC3B,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,EAAE,CAAC;oBACN,mBAAmB,CAAC,IAAI,CAAC,CAAC;oBAC1B,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;oBAC9B,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;oBAC9B,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;oBACtC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;oBAC1C,qBAAqB,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBACjE,UAAU,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;gBAChC,CAAC;gBAED,MAAM,QAAQ,GACZ,CAAC,CAAC,EAAE,UAAU,IAAI,qBAAqB,CAAC,CAAC,CAAC,UAAU,CAAC;oBACnD,CAAC,CAAC,CAAC,CAAC,UAAU;oBACd,CAAC,CAAC,IAAI,CAAC;oBACT,cAAc;oBACd,aAAa,CAAC;gBAChB,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,IAAI,CAAC;wBACH,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,CAAC;oBAAC,MAAM,CAAC;wBACP,yBAAyB;oBAC3B,CAAC;oBACD,QAAQ,EAAE,CAAC;oBACX,aAAa,CAAC,KAAK,CAAC,CAAC;oBACrB,QAAQ,CACN,kEAAkE,CACnE,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;oBACnD,QAAQ,EAAE,CAAC;oBACX,aAAa,CAAC,KAAK,CAAC,CAAC;oBACrB,QAAQ,CACN,kEAAkE,CACnE,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,QAAQ,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;gBAClB,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,IAAI,CAAC,CAAC;gBACpB,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC9B,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;gBACtC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;gBAC1C,qBAAqB,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjE,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;gBAC9B,UAAU,CAAC,GAAG,CAAC,CAAC;gBAChB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpC,kCAAkC,CAAC,iBAAiB,CAAC,CAAC;gBACtD,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,iEAAiE;oBACjE,qDAAqD;gBACvD,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;gBACpC,qEAAqE;gBACrE,qEAAqE;gBACrE,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CACN,sCAAsC,CAAC,CAAC,YAAY,CAAC,OAAO,iCAAiC,CAC9F,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,eAAe,EAAE,CAAC;gBAClD,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,UAAU,CAAC,wBAAwB,EAAE;oBACnC,OAAO,EAAE,SAAS;oBAClB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,cAAc;iBACvB,CAAC,CAAC;gBACH,QAAQ,CACN,yEAAyE,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;IAExE,uEAAuE;IACvE,gEAAgE;IAChE,EAAE;IACF,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,iFAAiF;IACjF,8CAA8C;IAC9C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,GAA4B,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE;YACtC,QAAQ,EAAE,CAAC;YACX,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,QAAQ,CAAC,sCAAsC,OAAO,GAAG,CAAC,CAAC;QAC7D,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,gBAAgB,CAAC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,SAAS,GAAG,CAAC,CAAe,EAAE,EAAE;gBACtC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuD,CAAC;gBACvE,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;oBAAE,OAAO;gBACnD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAO;gBAC9D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,CAAe,EAAE,EAAE;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO;YAChD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuD,CAAC;YACvE,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;gBAAE,OAAO;YACnD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO;YAC9D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE5C,OAAO,GAAG,EAAE;YACV,OAAO,EAAE,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,OAAO;QACL,UAAU;QACV,UAAU;QACV,cAAc;QACd,OAAO;QACP,UAAU;QACV,KAAK;QACL,gBAAgB;QAChB,KAAK;KACN,CAAC;AACJ,CAAC","sourcesContent":["import { agentNativePath } from \"../api-path.js\";\nimport { useState, useEffect, useCallback, useRef } from \"react\";\nimport { getCallbackOrigin } from \"../frame.js\";\nimport { trackEvent } from \"../analytics.js\";\n\nexport interface BuilderStatus {\n  configured: boolean;\n  builderEnabled: boolean;\n  /**\n   * True when `BUILDER_PRIVATE_KEY` is set at the deploy level. This is a\n   * fallback credential; per-user/org Builder connections are still allowed\n   * and take precedence for that request.\n   */\n  envManaged?: boolean;\n  credentialSource?: \"user\" | \"org\" | \"env\";\n  connectUrl: string;\n  appHost: string;\n  apiHost: string;\n  branchProjectIdConfigured?: boolean;\n  branchProjectId?: string;\n  publicKeyConfigured: boolean;\n  privateKeyConfigured: boolean;\n  userId?: string;\n  orgName?: string;\n  orgKind?: string;\n  /**\n   * Set when the OAuth callback ran but failed to persist credentials.\n   * Surfaced as a one-shot row by the server so the connect-flow polling\n   * can stop with a clear message instead of timing out at 5min.\n   */\n  connectError?: { message: string; at: number };\n}\n\n/**\n * Fetches Builder connection status from /_agent-native/builder/status.\n * Re-fetches on window focus to detect post-redirect state changes.\n */\nexport function useBuilderStatus() {\n  const [status, setStatus] = useState<BuilderStatus | null>(null);\n  const [loading, setLoading] = useState(true);\n\n  const fetchStatus = useCallback(async () => {\n    try {\n      const res = await fetch(agentNativePath(\"/_agent-native/builder/status\"));\n      if (!res.ok) {\n        setStatus(null);\n        return;\n      }\n      setStatus(await res.json());\n    } catch {\n      setStatus(null);\n    } finally {\n      setLoading(false);\n    }\n  }, []);\n\n  useEffect(() => {\n    fetchStatus();\n\n    function onFocus() {\n      fetchStatus();\n    }\n    function onVisibility() {\n      if (document.visibilityState === \"visible\") fetchStatus();\n    }\n    window.addEventListener(\"focus\", onFocus);\n    document.addEventListener(\"visibilitychange\", onVisibility);\n    // Engine connect/disconnect actions (e.g. the Builder disconnect button)\n    // dispatch this event so dependent cards refresh without a full reload.\n    window.addEventListener(\"agent-engine:configured-changed\", fetchStatus);\n    return () => {\n      window.removeEventListener(\"focus\", onFocus);\n      document.removeEventListener(\"visibilitychange\", onVisibility);\n      window.removeEventListener(\n        \"agent-engine:configured-changed\",\n        fetchStatus,\n      );\n    };\n  }, [fetchStatus]);\n\n  return { status, loading, refetch: fetchStatus };\n}\n\n// ─── useBuilderConnectFlow ──────────────────────────────────────────────────\n//\n// Shared state machine for the \"open Builder CLI-auth popup + poll\n// /builder/status until credentials land\" interaction. Replaces three\n// near-duplicate inline implementations: `BuilderCliAuthMethod` in\n// OnboardingPanel, `ConnectBuilderCard`, and `BuilderConnectCta` in\n// AssistantChat. Each consumer supplies its own popup URL / completion\n// behavior; the hook owns the polling + timeout + focus refresh.\n//\n// `popupUrl` is what we pass to `window.open`. The default\n// `/_agent-native/builder/connect` is a server-side 302 to the real\n// cli-auth URL — using it keeps the click handler synchronous so popup\n// blockers don't downgrade the open to same-tab navigation. Pass an\n// explicit `popupUrl` (e.g. the already-computed cli-auth URL) if your\n// caller already has it in hand.\n\nexport interface BuilderConnectFlowOptions {\n  /** URL to synchronously open on start(). Defaults to the 302 shortcut. */\n  popupUrl?: string;\n  /** Low-cardinality label for the UI surface that opened Builder connect. */\n  trackingSource?: string;\n  /** Invoked after the status poll first sees `configured: true`. */\n  onConnected?: (state: { orgName: string | null }) => void | Promise<void>;\n}\n\nexport interface BuilderConnectFlow {\n  configured: boolean;\n  /**\n   * True when the deploy has BUILDER_PRIVATE_KEY set as a fallback. Connect\n   * is still available so users can override the fallback with their own\n   * Builder account.\n   */\n  envManaged: boolean;\n  /**\n   * True when the server has a Builder branch project configured for this\n   * request. When false, the card surfaces a waitlist CTA instead of a Send\n   * button.\n   */\n  builderEnabled: boolean;\n  orgName: string | null;\n  connecting: boolean;\n  error: string | null;\n  /**\n   * True once the first `/builder/status` fetch has completed (successfully\n   * or not). Consumers that accept an `initialConfigured` prop (e.g. agent\n   * tool-call results rendered with server-side state) should treat\n   * `configured`/`orgName` as authoritative only once this flips true —\n   * otherwise the hook's starting `false` defaults would cause a flash\n   * back to \"Connect Builder\" on first paint.\n   */\n  hasFetchedStatus: boolean;\n  /** Open the popup and begin polling. Must be called from a user-gesture handler. */\n  start: () => void;\n}\n\nconst POLL_INTERVAL_MS = 2000;\nconst POLL_TIMEOUT_MS = 5 * 60 * 1000;\nconst BUILDER_CONNECT_PARAM = \"_an_connect\";\nconst STATUS_CONNECT_URL_TTL_MS = 9 * 60 * 1000;\n\nfunction isAgentNativeDesktop() {\n  if (typeof navigator === \"undefined\") return false;\n  return /AgentNativeDesktop/i.test(navigator.userAgent || \"\");\n}\n\nfunction hasSignedConnectToken(url: string | null | undefined): boolean {\n  if (!url || typeof window === \"undefined\") return false;\n  try {\n    return new URL(url, window.location.origin).searchParams.has(\n      BUILDER_CONNECT_PARAM,\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction isFreshSignedConnectUrl(\n  url: string | null,\n  fetchedAt: number | null,\n): url is string {\n  return (\n    hasSignedConnectToken(url) &&\n    typeof fetchedAt === \"number\" &&\n    Date.now() - fetchedAt < STATUS_CONNECT_URL_TTL_MS\n  );\n}\n\nfunction showBuilderConnectPopupPlaceholder(opened: Window) {\n  try {\n    opened.opener = null;\n  } catch {\n    // Best effort only. We still hold the WindowProxy so the parent can\n    // navigate the blank popup after refreshing the signed connect URL.\n  }\n  try {\n    opened.document.title = \"Opening Builder.io\";\n    opened.document.body.style.margin = \"0\";\n    opened.document.body.style.background = \"#111\";\n    opened.document.body.style.color = \"#ddd\";\n    opened.document.body.style.fontFamily =\n      '-apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif';\n    opened.document.body.style.display = \"flex\";\n    opened.document.body.style.alignItems = \"center\";\n    opened.document.body.style.justifyContent = \"center\";\n    opened.document.body.style.height = \"100vh\";\n    opened.document.body.textContent = \"Opening Builder.io...\";\n  } catch {\n    // Popup may already be cross-origin or browser may block document writes.\n  }\n}\n\nfunction navigateBuilderConnectPopup(opened: Window, url: string): boolean {\n  try {\n    opened.location.href = url;\n    return true;\n  } catch {\n    try {\n      opened.close();\n    } catch {\n      // Ignore close failures.\n    }\n    return false;\n  }\n}\n\nfunction notifyAgentEngineConfiguredChanged(source: string) {\n  if (typeof window === \"undefined\") return;\n  window.dispatchEvent(\n    new CustomEvent(\"agent-engine:configured-changed\", {\n      detail: { source },\n    }),\n  );\n}\n\nexport interface OpenBuilderConnectPopupOptions {\n  url?: string;\n  source?: string;\n  features?: string;\n}\n\nexport function openBuilderConnectPopup({\n  url,\n  source = \"builder_connect\",\n  features = \"noopener,noreferrer\",\n}: OpenBuilderConnectPopupOptions = {}): Window | null {\n  if (typeof window === \"undefined\") return null;\n  const origin = getCallbackOrigin() || window.location.origin;\n  const href =\n    url ??\n    new URL(agentNativePath(\"/_agent-native/builder/connect\"), origin).href;\n  const connectUrlKind = url ? \"provided\" : \"default\";\n  trackEvent(\"builder connect clicked\", {\n    feature: \"builder\",\n    stage: \"client\",\n    source,\n    connect_url_kind: connectUrlKind,\n  });\n  try {\n    const opened = window.open(href, \"_blank\", features);\n    if (!opened && !/AgentNativeDesktop/i.test(navigator.userAgent || \"\")) {\n      trackEvent(\"builder connect popup blocked\", {\n        feature: \"builder\",\n        stage: \"client\",\n        source,\n        connect_url_kind: connectUrlKind,\n      });\n    }\n    return opened;\n  } catch {\n    trackEvent(\"builder connect failed\", {\n      feature: \"builder\",\n      stage: \"client\",\n      reason: \"popup_open_exception\",\n      source,\n      connect_url_kind: connectUrlKind,\n    });\n    return null;\n  }\n}\n\nexport function useBuilderConnectFlow(\n  opts: BuilderConnectFlowOptions = {},\n): BuilderConnectFlow {\n  const {\n    popupUrl,\n    trackingSource = \"builder_connect_flow\",\n    onConnected,\n  } = opts;\n  const [configured, setConfigured] = useState(false);\n  const [envManaged, setEnvManaged] = useState(false);\n  const [builderEnabled, setBuilderEnabled] = useState(false);\n  const [orgName, setOrgName] = useState<string | null>(null);\n  const [connecting, setConnecting] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [hasFetchedStatus, setHasFetchedStatus] = useState(false);\n  const [statusConnectUrl, setStatusConnectUrl] = useState<string | null>(null);\n  // When statusConnectUrl was last fetched. The server signs the embedded\n  // _an_connect token with a 10-minute TTL; using an older URL fails the\n  // cross-origin popup gate. Track freshness so start() can either use a\n  // still-good direct URL (desktop) or refresh a new one inside the popup\n  // gesture path (browser/editor embeds).\n  const statusConnectUrlAtRef = useRef<number | null>(null);\n  const pollRef = useRef<ReturnType<typeof setInterval> | null>(null);\n  const mountedRef = useRef(true);\n  const notifiedConnectedRef = useRef(false);\n  // Keep onConnected in a ref so start() doesn't need to re-create when the\n  // caller passes an inline arrow function.\n  const onConnectedRef = useRef(onConnected);\n  onConnectedRef.current = onConnected;\n\n  const stopPoll = useCallback(() => {\n    if (pollRef.current) {\n      clearInterval(pollRef.current);\n      pollRef.current = null;\n    }\n  }, []);\n\n  const fetchStatus = useCallback(async () => {\n    const origin = getCallbackOrigin() || window.location.origin;\n    try {\n      const r = await fetch(\n        new URL(agentNativePath(\"/_agent-native/builder/status\"), origin).href,\n      );\n      if (!r.ok) return null;\n      return (await r.json()) as {\n        configured: boolean;\n        envManaged?: boolean;\n        builderEnabled?: boolean;\n        orgName?: string | null;\n        connectUrl?: string;\n        credentialSource?: \"user\" | \"org\" | \"env\";\n        connectError?: { message: string; at: number };\n      };\n    } catch {\n      return null;\n    }\n  }, []);\n\n  // Initial fetch + focus/visibility refresh so if the user completed the\n  // flow in another tab (or a downgraded same-tab nav) we notice it. Also\n  // listen for `agent-engine:configured-changed` so a Disconnect click in\n  // Settings propagates to any connect-CTA cards rendered elsewhere in\n  // the app without waiting for the next focus event.\n  useEffect(() => {\n    mountedRef.current = true;\n    let cancelled = false;\n    const refresh = async () => {\n      const s = await fetchStatus();\n      if (cancelled || !mountedRef.current) return;\n      // Flip `hasFetchedStatus` even when the fetch failed — the caller's\n      // \"use initial props until the hook has an answer\" pattern wants to\n      // stop waiting after we've tried, regardless of network outcome.\n      setHasFetchedStatus(true);\n      if (!s) return;\n      setConfigured(!!s.configured);\n      setEnvManaged(!!s.envManaged);\n      setBuilderEnabled(!!s.builderEnabled);\n      setStatusConnectUrl(s.connectUrl ?? null);\n      statusConnectUrlAtRef.current = s.connectUrl ? Date.now() : null;\n      const org = s.orgName ?? null;\n      setOrgName(org);\n      if (s.configured && !notifiedConnectedRef.current) {\n        notifiedConnectedRef.current = true;\n        notifyAgentEngineConfiguredChanged(\"builder-status\");\n        try {\n          await onConnectedRef.current?.({ orgName: org });\n        } catch {\n          // The caller's callback is a UI convenience; status is already set.\n        }\n      } else if (!s.configured) {\n        notifiedConnectedRef.current = false;\n      }\n    };\n    refresh();\n    const onVisible = () => {\n      if (document.visibilityState === \"visible\") refresh();\n    };\n    window.addEventListener(\"focus\", refresh);\n    document.addEventListener(\"visibilitychange\", onVisible);\n    window.addEventListener(\"agent-engine:configured-changed\", refresh);\n    return () => {\n      cancelled = true;\n      mountedRef.current = false;\n      window.removeEventListener(\"focus\", refresh);\n      document.removeEventListener(\"visibilitychange\", onVisible);\n      window.removeEventListener(\"agent-engine:configured-changed\", refresh);\n      stopPoll();\n    };\n  }, [fetchStatus, stopPoll]);\n\n  const start = useCallback(() => {\n    stopPoll();\n    setConnecting(true);\n    setError(null);\n\n    // Open SYNCHRONOUSLY inside the caller's click handler — any await\n    // before window.open lets the user-gesture token expire, which causes\n    // popup blockers to block entirely or fall back to same-tab navigation.\n    const origin = getCallbackOrigin() || window.location.origin;\n    const cachedFreshUrl = isFreshSignedConnectUrl(\n      statusConnectUrl,\n      statusConnectUrlAtRef.current,\n    )\n      ? statusConnectUrl\n      : null;\n    const signedPropUrl = hasSignedConnectToken(popupUrl) ? popupUrl : null;\n    const fallbackUrl = new URL(\n      agentNativePath(\"/_agent-native/builder/connect\"),\n      origin,\n    ).href;\n    const directUrl = cachedFreshUrl ?? signedPropUrl ?? fallbackUrl;\n\n    if (isAgentNativeDesktop()) {\n      const opened = openBuilderConnectPopup({\n        url: directUrl,\n        source: trackingSource,\n      });\n      if (!opened) {\n        // Agent Native Desktop handles the popup in Electron and reports\n        // null to the embedded webview, so null is not a blocker here.\n      }\n    } else {\n      const opened = openBuilderConnectPopup({\n        url: \"about:blank\",\n        source: trackingSource,\n        features: \"width=600,height=700\",\n      });\n      if (!opened) {\n        setConnecting(false);\n        setError(\"Couldn't open Builder. Allow popups and try again.\");\n        return;\n      }\n      showBuilderConnectPopupPlaceholder(opened);\n      void (async () => {\n        const s = await fetchStatus();\n        if (!mountedRef.current) {\n          try {\n            opened.close();\n          } catch {\n            // Ignore close failures.\n          }\n          return;\n        }\n        if (s) {\n          setHasFetchedStatus(true);\n          setConfigured(!!s.configured);\n          setEnvManaged(!!s.envManaged);\n          setBuilderEnabled(!!s.builderEnabled);\n          setStatusConnectUrl(s.connectUrl ?? null);\n          statusConnectUrlAtRef.current = s.connectUrl ? Date.now() : null;\n          setOrgName(s.orgName ?? null);\n        }\n\n        const freshUrl =\n          (s?.connectUrl && hasSignedConnectToken(s.connectUrl)\n            ? s.connectUrl\n            : null) ??\n          cachedFreshUrl ??\n          signedPropUrl;\n        if (!freshUrl) {\n          try {\n            opened.close();\n          } catch {\n            // Ignore close failures.\n          }\n          stopPoll();\n          setConnecting(false);\n          setError(\n            \"Couldn't start Builder connect. Refresh this page and try again.\",\n          );\n          return;\n        }\n        if (!navigateBuilderConnectPopup(opened, freshUrl)) {\n          stopPoll();\n          setConnecting(false);\n          setError(\n            \"Couldn't navigate the Builder popup. Allow popups and try again.\",\n          );\n        }\n      })();\n    }\n\n    const started = Date.now();\n    pollRef.current = setInterval(async () => {\n      const s = await fetchStatus();\n      if (!mountedRef.current) {\n        stopPoll();\n        return;\n      }\n      if (s?.configured) {\n        stopPoll();\n        setConfigured(true);\n        setEnvManaged(!!s.envManaged);\n        setBuilderEnabled(!!s.builderEnabled);\n        setStatusConnectUrl(s.connectUrl ?? null);\n        statusConnectUrlAtRef.current = s.connectUrl ? Date.now() : null;\n        const org = s.orgName ?? null;\n        setOrgName(org);\n        setConnecting(false);\n        notifiedConnectedRef.current = true;\n        notifyAgentEngineConfiguredChanged(\"builder-connect\");\n        try {\n          await onConnectedRef.current?.({ orgName: org });\n        } catch {\n          // Consumer's callback failed; we've already flipped the UI state\n          // to connected. Swallow so we don't re-arm the flow.\n        }\n      } else if (s?.connectError?.message) {\n        // OAuth callback ran but writeBuilderCredentials threw — surface the\n        // real error instead of letting the user wait 5 minutes for timeout.\n        stopPoll();\n        setConnecting(false);\n        setError(\n          `Couldn't save Builder credentials: ${s.connectError.message}. Try again or contact support.`,\n        );\n      } else if (Date.now() - started > POLL_TIMEOUT_MS) {\n        stopPoll();\n        setConnecting(false);\n        trackEvent(\"builder connect failed\", {\n          feature: \"builder\",\n          stage: \"client\",\n          reason: \"timeout\",\n          source: trackingSource,\n        });\n        setError(\n          \"Didn't hear back from Builder in 5 minutes. Allow popups and try again.\",\n        );\n      }\n    }, POLL_INTERVAL_MS);\n  }, [fetchStatus, popupUrl, statusConnectUrl, stopPoll, trackingSource]);\n\n  // Popup-side fast path: the error page broadcasts a message so we stop\n  // polling immediately rather than waiting for the next 2s tick.\n  //\n  // We listen on BroadcastChannel (same-origin, works with noopener popups)\n  // AND on window.message (legacy path for environments without BC or for\n  // popups that still have opener access). Both paths are safe to have open\n  // simultaneously \\u2014 the first one to fire wins and the error is deduplicated\n  // by the stopPoll() call which is idempotent.\n  useEffect(() => {\n    let channel: BroadcastChannel | null = null;\n    const handleError = (message: string) => {\n      stopPoll();\n      setConnecting(false);\n      setError(`Couldn't save Builder credentials: ${message}.`);\n    };\n\n    try {\n      channel = new BroadcastChannel(`builder-connect:${window.location.host}`);\n      channel.onmessage = (e: MessageEvent) => {\n        const data = e.data as { type?: string; message?: string } | undefined;\n        if (data?.type !== \"builder-connect-error\") return;\n        if (typeof data.message !== \"string\" || !data.message) return;\n        handleError(data.message);\n      };\n    } catch {\n      // BroadcastChannel not available (rare) \\u2014 fall through to postMessage.\n    }\n\n    const handler = (e: MessageEvent) => {\n      if (e.origin !== window.location.origin) return;\n      const data = e.data as { type?: string; message?: string } | undefined;\n      if (data?.type !== \"builder-connect-error\") return;\n      if (typeof data.message !== \"string\" || !data.message) return;\n      handleError(data.message);\n    };\n    window.addEventListener(\"message\", handler);\n\n    return () => {\n      channel?.close();\n      window.removeEventListener(\"message\", handler);\n    };\n  }, [stopPoll]);\n\n  return {\n    configured,\n    envManaged,\n    builderEnabled,\n    orgName,\n    connecting,\n    error,\n    hasFetchedStatus,\n    start,\n  };\n}\n"]}

package/dist/client/settings/useBuilderStatus.spec.js

@@ -19,6 +19,16 @@ function BuilderConnectProbe() {
     const flow = useBuilderConnectFlow();
     return (_jsxs("div", { children: [_jsx("button", { type: "button", onClick: flow.start, children: "Connect" }), _jsx("output", { children: flow.error ?? "" })] }));
 }
+function createPopupStub() {
+    const doc = document.implementation.createHTMLDocument("popup");
+    return {
+        closed: false,
+        close: vi.fn(),
+        document: doc,
+        location: { href: "" },
+        opener: window,
+    };
+}
 describe("useBuilderConnectFlow", () => {
     let container;
     let root;
@@ -48,6 +58,24 @@ describe("useBuilderConnectFlow", () => {
         container.remove();
         vi.unstubAllGlobals();
     });
+    it("refreshes the signed Builder connect URL inside a synchronously opened popup", async () => {
+        setUserAgent("Mozilla/5.0 Chrome/140.0");
+        const popup = createPopupStub();
+        openSpy.mockReturnValue(popup);
+        await act(async () => {
+            root.render(_jsx(BuilderConnectProbe, {}));
+        });
+        await act(async () => {
+            container.querySelector("button")?.click();
+        });
+        expect(openSpy).toHaveBeenCalledWith("about:blank", "_blank", "width=600,height=700");
+        await act(async () => {
+            await Promise.resolve();
+            await Promise.resolve();
+        });
+        expect(popup.location.href).toBe("http://localhost:3000/_agent-native/builder/connect?_an_connect=signed");
+        expect(container.textContent).not.toContain("Popup blocked");
+    });
     it("does not replace the desktop webview when Electron reports a handled popup as null", async () => {
         setUserAgent("Mozilla/5.0 Electron/41.2.2 AgentNativeDesktop/0.1.7");
         await act(async () => {

package/dist/client/settings/useBuilderStatus.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBuilderStatus.spec.js","sourceRoot":"","sources":["../../../src/client/settings/useBuilderStatus.spec.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAc,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,UAAU,EAAa,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,SAAS,YAAY,CAAC,IAAa;IACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE;QACnD,KAAK,EAAE,SAAS;QAChB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;IACrC,OAAO,CACL,0BACE,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,wBAEhC,EACT,2BAAS,IAAI,CAAC,KAAK,IAAI,EAAE,GAAU,IAC/B,CACP,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,SAAyB,CAAC;IAC9B,IAAI,IAAU,CAAC;IACf,IAAI,OAAiC,CAAC;IAEtC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,UAAU,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;QACtE,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CACf,YAAY,CAAC;YACX,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,IAAI;YACpB,OAAO,EAAE,IAAI;YACb,UAAU,EACR,wEAAwE;YAC1E,OAAO,EAAE,oBAAoB;YAC7B,OAAO,EAAE,wBAAwB;YACjC,mBAAmB,EAAE,KAAK;YAC1B,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CACH,CACF,CAAC;QACF,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5B,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,CAAC;QACnB,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,YAAY,CAAC,sDAAsD,CAAC,CAAC;QAErE,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,IAAI,CAAC,MAAM,CAAC,KAAC,mBAAmB,KAAG,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAClC,MAAM,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,EACzD,QAAQ,EACR,qBAAqB,CACtB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACpE,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment happy-dom\nimport React, { act } from \"react\";\nimport { createRoot, type Root } from \"react-dom/client\";\nimport { afterEach, beforeEach, describe, expect, it, vi } from \"vitest\";\nimport { useBuilderConnectFlow } from \"./useBuilderStatus.js\";\n\nfunction jsonResponse(data: unknown): Response {\n  return new Response(JSON.stringify(data), {\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction setUserAgent(userAgent: string) {\n  Object.defineProperty(window.navigator, \"userAgent\", {\n    value: userAgent,\n    configurable: true,\n  });\n}\n\nfunction BuilderConnectProbe() {\n  const flow = useBuilderConnectFlow();\n  return (\n    <div>\n      <button type=\"button\" onClick={flow.start}>\n        Connect\n      </button>\n      <output>{flow.error ?? \"\"}</output>\n    </div>\n  );\n}\n\ndescribe(\"useBuilderConnectFlow\", () => {\n  let container: HTMLDivElement;\n  let root: Root;\n  let openSpy: ReturnType<typeof vi.fn>;\n\n  beforeEach(() => {\n    vi.stubGlobal(\"IS_REACT_ACT_ENVIRONMENT\", true);\n    window.history.replaceState({}, \"\", \"http://localhost:3000/settings\");\n    vi.stubGlobal(\n      \"fetch\",\n      vi.fn(async () =>\n        jsonResponse({\n          configured: false,\n          envManaged: false,\n          builderEnabled: true,\n          orgName: null,\n          connectUrl:\n            \"http://localhost:3000/_agent-native/builder/connect?_an_connect=signed\",\n          appHost: \"https://builder.io\",\n          apiHost: \"https://api.builder.io\",\n          publicKeyConfigured: false,\n          privateKeyConfigured: false,\n        }),\n      ),\n    );\n    openSpy = vi.fn(() => null);\n    vi.stubGlobal(\"open\", openSpy);\n    container = document.createElement(\"div\");\n    document.body.appendChild(container);\n    root = createRoot(container);\n  });\n\n  afterEach(() => {\n    act(() => root.unmount());\n    container.remove();\n    vi.unstubAllGlobals();\n  });\n\n  it(\"does not replace the desktop webview when Electron reports a handled popup as null\", async () => {\n    setUserAgent(\"Mozilla/5.0 Electron/41.2.2 AgentNativeDesktop/0.1.7\");\n\n    await act(async () => {\n      root.render(<BuilderConnectProbe />);\n    });\n\n    await act(async () => {\n      container.querySelector(\"button\")?.click();\n    });\n\n    expect(openSpy).toHaveBeenCalledWith(\n      expect.stringContaining(\"/_agent-native/builder/connect\"),\n      \"_blank\",\n      \"noopener,noreferrer\",\n    );\n    expect(window.location.href).toBe(\"http://localhost:3000/settings\");\n    expect(container.textContent).not.toContain(\"Popup blocked\");\n  });\n});\n"]}
+{"version":3,"file":"useBuilderStatus.spec.js","sourceRoot":"","sources":["../../../src/client/settings/useBuilderStatus.spec.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAc,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,UAAU,EAAa,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,SAAS,YAAY,CAAC,IAAa;IACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE;QACnD,KAAK,EAAE,SAAS;QAChB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;IACrC,OAAO,CACL,0BACE,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,IAAI,CAAC,KAAK,wBAEhC,EACT,2BAAS,IAAI,CAAC,KAAK,IAAI,EAAE,GAAU,IAC/B,CACP,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO;QACL,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACtB,MAAM,EAAE,MAAM;KACM,CAAC;AACzB,CAAC;AAED,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,SAAyB,CAAC;IAC9B,IAAI,IAAU,CAAC;IACf,IAAI,OAAiC,CAAC;IAEtC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,UAAU,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;QACtE,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CACf,YAAY,CAAC;YACX,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,IAAI;YACpB,OAAO,EAAE,IAAI;YACb,UAAU,EACR,wEAAwE;YAC1E,OAAO,EAAE,oBAAoB;YAC7B,OAAO,EAAE,wBAAwB;YACjC,mBAAmB,EAAE,KAAK;YAC1B,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CACH,CACF,CAAC;QACF,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5B,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,CAAC;QACnB,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,YAAY,CAAC,0BAA0B,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAE/B,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,IAAI,CAAC,MAAM,CAAC,KAAC,mBAAmB,KAAG,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAClC,aAAa,EACb,QAAQ,EACR,sBAAsB,CACvB,CAAC;QAEF,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAC9B,wEAAwE,CACzE,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,YAAY,CAAC,sDAAsD,CAAC,CAAC;QAErE,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,IAAI,CAAC,MAAM,CAAC,KAAC,mBAAmB,KAAG,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAClC,MAAM,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,EACzD,QAAQ,EACR,qBAAqB,CACtB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACpE,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment happy-dom\nimport React, { act } from \"react\";\nimport { createRoot, type Root } from \"react-dom/client\";\nimport { afterEach, beforeEach, describe, expect, it, vi } from \"vitest\";\nimport { useBuilderConnectFlow } from \"./useBuilderStatus.js\";\n\nfunction jsonResponse(data: unknown): Response {\n  return new Response(JSON.stringify(data), {\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction setUserAgent(userAgent: string) {\n  Object.defineProperty(window.navigator, \"userAgent\", {\n    value: userAgent,\n    configurable: true,\n  });\n}\n\nfunction BuilderConnectProbe() {\n  const flow = useBuilderConnectFlow();\n  return (\n    <div>\n      <button type=\"button\" onClick={flow.start}>\n        Connect\n      </button>\n      <output>{flow.error ?? \"\"}</output>\n    </div>\n  );\n}\n\nfunction createPopupStub() {\n  const doc = document.implementation.createHTMLDocument(\"popup\");\n  return {\n    closed: false,\n    close: vi.fn(),\n    document: doc,\n    location: { href: \"\" },\n    opener: window,\n  } as unknown as Window;\n}\n\ndescribe(\"useBuilderConnectFlow\", () => {\n  let container: HTMLDivElement;\n  let root: Root;\n  let openSpy: ReturnType<typeof vi.fn>;\n\n  beforeEach(() => {\n    vi.stubGlobal(\"IS_REACT_ACT_ENVIRONMENT\", true);\n    window.history.replaceState({}, \"\", \"http://localhost:3000/settings\");\n    vi.stubGlobal(\n      \"fetch\",\n      vi.fn(async () =>\n        jsonResponse({\n          configured: false,\n          envManaged: false,\n          builderEnabled: true,\n          orgName: null,\n          connectUrl:\n            \"http://localhost:3000/_agent-native/builder/connect?_an_connect=signed\",\n          appHost: \"https://builder.io\",\n          apiHost: \"https://api.builder.io\",\n          publicKeyConfigured: false,\n          privateKeyConfigured: false,\n        }),\n      ),\n    );\n    openSpy = vi.fn(() => null);\n    vi.stubGlobal(\"open\", openSpy);\n    container = document.createElement(\"div\");\n    document.body.appendChild(container);\n    root = createRoot(container);\n  });\n\n  afterEach(() => {\n    act(() => root.unmount());\n    container.remove();\n    vi.unstubAllGlobals();\n  });\n\n  it(\"refreshes the signed Builder connect URL inside a synchronously opened popup\", async () => {\n    setUserAgent(\"Mozilla/5.0 Chrome/140.0\");\n    const popup = createPopupStub();\n    openSpy.mockReturnValue(popup);\n\n    await act(async () => {\n      root.render(<BuilderConnectProbe />);\n    });\n\n    await act(async () => {\n      container.querySelector(\"button\")?.click();\n    });\n\n    expect(openSpy).toHaveBeenCalledWith(\n      \"about:blank\",\n      \"_blank\",\n      \"width=600,height=700\",\n    );\n\n    await act(async () => {\n      await Promise.resolve();\n      await Promise.resolve();\n    });\n\n    expect(popup.location.href).toBe(\n      \"http://localhost:3000/_agent-native/builder/connect?_an_connect=signed\",\n    );\n    expect(container.textContent).not.toContain(\"Popup blocked\");\n  });\n\n  it(\"does not replace the desktop webview when Electron reports a handled popup as null\", async () => {\n    setUserAgent(\"Mozilla/5.0 Electron/41.2.2 AgentNativeDesktop/0.1.7\");\n\n    await act(async () => {\n      root.render(<BuilderConnectProbe />);\n    });\n\n    await act(async () => {\n      container.querySelector(\"button\")?.click();\n    });\n\n    expect(openSpy).toHaveBeenCalledWith(\n      expect.stringContaining(\"/_agent-native/builder/connect\"),\n      \"_blank\",\n      \"noopener,noreferrer\",\n    );\n    expect(window.location.href).toBe(\"http://localhost:3000/settings\");\n    expect(container.textContent).not.toContain(\"Popup blocked\");\n  });\n});\n"]}

package/dist/client/tools/EmbeddedTool.d.ts

@@ -0,0 +1,20 @@
+export interface EmbeddedToolProps {
+    toolId: string;
+    /** Slot identifier passed via the iframe URL so the tool runtime knows it's
+     * embedded and enables auto-resize. */
+    slotId: string;
+    /** Object pushed into the tool as `window.slotContext`. Re-posted whenever
+     * the host re-renders with a new context. */
+    context?: Record<string, unknown> | null;
+    /** Optional className applied to the iframe container. */
+    className?: string;
+    /** Initial iframe height before content reports a real height. */
+    initialHeight?: number;
+}
+/**
+ * Renders a tool inline as a small auto-sized iframe — for use inside an
+ * `<ExtensionSlot>`. Different from `<ToolViewer>` (which is full-page with a
+ * toolbar): no header, sized to content, receives a `slotContext`.
+ */
+export declare function EmbeddedTool({ toolId, slotId, context, className, initialHeight, }: EmbeddedToolProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=EmbeddedTool.d.ts.map

package/dist/client/tools/EmbeddedTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmbeddedTool.d.ts","sourceRoot":"","sources":["../../../src/client/tools/EmbeddedTool.tsx"],"names":[],"mappings":"AA8BA,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf;2CACuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf;iDAC6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,MAAM,EACN,OAAO,EACP,SAAS,EACT,aAAkB,GACnB,EAAE,iBAAiB,2CA6LnB"}

package/dist/client/tools/EmbeddedTool.js

@@ -0,0 +1,199 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { agentNativePath } from "../api-path.js";
+import { useEffect, useMemo, useRef, useState } from "react";
+import { useQuery, useQueryClient } from "@tanstack/react-query";
+import { useNavigate } from "react-router";
+import { IconDots, IconExternalLink, IconLayoutSidebarRightCollapse, IconTrash, } from "@tabler/icons-react";
+import { Popover, PopoverContent, PopoverTrigger, } from "../components/ui/popover.js";
+import { isAllowedToolPath, sanitizeToolRequestOptions, checkBridgePolicy, } from "./iframe-bridge.js";
+/**
+ * Renders a tool inline as a small auto-sized iframe — for use inside an
+ * `<ExtensionSlot>`. Different from `<ToolViewer>` (which is full-page with a
+ * toolbar): no header, sized to content, receives a `slotContext`.
+ */
+export function EmbeddedTool({ toolId, slotId, context, className, initialHeight = 80, }) {
+    const iframeRef = useRef(null);
+    const [height, setHeight] = useState(initialHeight);
+    const [isDark, setIsDark] = useState(false);
+    // (audit H4) Mirror ToolViewer's role-aware gating; deny-by-default until
+    // the iframe's render binding announcement arrives.
+    const bridgeContextRef = useRef({
+        role: "viewer",
+        isAuthor: false,
+    });
+    useEffect(() => {
+        setIsDark(document.documentElement.classList.contains("dark"));
+        const observer = new MutationObserver(() => {
+            setIsDark(document.documentElement.classList.contains("dark"));
+        });
+        observer.observe(document.documentElement, {
+            attributes: true,
+            attributeFilter: ["class"],
+        });
+        return () => observer.disconnect();
+    }, []);
+    const { data: tool } = useQuery({
+        queryKey: ["tool", toolId],
+        queryFn: async () => {
+            const res = await fetch(agentNativePath(`/_agent-native/tools/${toolId}`));
+            if (!res.ok)
+                throw new Error("Failed to fetch tool");
+            return res.json();
+        },
+    });
+    const iframeSrc = useMemo(() => {
+        const v = encodeURIComponent(tool?.updatedAt ?? "");
+        return agentNativePath(`/_agent-native/tools/${toolId}/render?slot=${encodeURIComponent(slotId)}&dark=${isDark}&v=${v}`);
+    }, [toolId, slotId, isDark, tool?.updatedAt]);
+    // Forward slot context whenever it changes. The iframe's own load handler
+    // posts the initial value once it's ready; this effect handles updates.
+    const contextJson = JSON.stringify(context ?? {});
+    useEffect(() => {
+        const win = iframeRef.current?.contentWindow;
+        if (!win)
+            return;
+        win.postMessage({ type: "agent-native-slot-context", context: context ?? {} }, "*");
+    }, [contextJson]);
+    // Bridge tool requests + height reports.
+    useEffect(() => {
+        const handleMessage = async (event) => {
+            if (event.source !== iframeRef.current?.contentWindow)
+                return;
+            const message = event.data;
+            if (!message || typeof message !== "object")
+                return;
+            if (message.type === "agent-native-tool-binding") {
+                const binding = message.binding ?? {};
+                const role = binding.role === "owner" ||
+                    binding.role === "admin" ||
+                    binding.role === "editor" ||
+                    binding.role === "viewer"
+                    ? binding.role
+                    : "viewer";
+                bridgeContextRef.current = {
+                    role,
+                    isAuthor: !!binding.isAuthor,
+                };
+                return;
+            }
+            if (message.type === "agent-native-tool-resize") {
+                const h = Number(message.height);
+                if (Number.isFinite(h) && h > 0) {
+                    setHeight(Math.ceil(h));
+                }
+                return;
+            }
+            if (message.type !== "agent-native-tool-request")
+                return;
+            const requestId = String(message.requestId ?? "");
+            const path = String(message.path ?? "");
+            const respond = (payload) => {
+                iframeRef.current?.contentWindow?.postMessage({ type: "agent-native-tool-response", requestId, ...payload }, "*");
+            };
+            if (!requestId || !isAllowedToolPath(path, toolId)) {
+                respond({ error: "Tool request path is not allowed" });
+                return;
+            }
+            try {
+                const options = sanitizeToolRequestOptions(message.options);
+                // (audit H4) Role-aware gating: viewer-shared tools can read but not
+                // write. The bridge policy is decided here in the parent before the
+                // request leaves; the server enforces a second layer.
+                const policy = checkBridgePolicy(path, options.method ?? "GET", bridgeContextRef.current);
+                if (!policy.ok) {
+                    respond({
+                        response: {
+                            ok: false,
+                            status: 403,
+                            statusText: "Forbidden",
+                            body: { error: policy.error },
+                        },
+                    });
+                    return;
+                }
+                // (audit H5) Same tool-bridge tagging as <ToolViewer>. action-routes
+                // uses these headers to enforce per-action `toolCallable` opt-in.
+                const finalHeaders = new Headers(options.headers ?? undefined);
+                finalHeaders.set("X-Agent-Native-Tool-Bridge", "1");
+                finalHeaders.set("X-Agent-Native-Tool-Id", toolId);
+                const res = await fetch(agentNativePath(path), {
+                    ...options,
+                    headers: finalHeaders,
+                    credentials: "same-origin",
+                });
+                const text = await res.text();
+                let body = text;
+                if (text) {
+                    try {
+                        body = JSON.parse(text);
+                    }
+                    catch {
+                        body = text;
+                    }
+                }
+                respond({
+                    response: {
+                        ok: res.ok,
+                        status: res.status,
+                        statusText: res.statusText,
+                        body,
+                    },
+                });
+            }
+            catch (err) {
+                respond({ error: err?.message ?? "Tool host request failed" });
+            }
+        };
+        window.addEventListener("message", handleMessage);
+        return () => window.removeEventListener("message", handleMessage);
+    }, [toolId]);
+    if (!tool) {
+        return (_jsx("div", { className: className, style: { height: initialHeight }, "aria-busy": "true" }));
+    }
+    return (_jsxs("div", { className: `relative group/embedded-tool ${className ?? ""}`, children: [_jsx("iframe", { ref: iframeRef, src: iframeSrc, title: tool.name, sandbox: "allow-scripts allow-forms", style: { width: "100%", border: 0, height, display: "block" }, onLoad: () => {
+                    iframeRef.current?.contentWindow?.postMessage({ type: "agent-native-slot-context", context: context ?? {} }, "*");
+                } }, `${toolId}-${tool.updatedAt ?? ""}`), _jsx(EmbeddedToolMenu, { toolId: toolId, slotId: slotId, toolName: tool.name })] }));
+}
+function EmbeddedToolMenu({ toolId, slotId, toolName, }) {
+    const [open, setOpen] = useState(false);
+    const [confirmingDelete, setConfirmingDelete] = useState(false);
+    const queryClient = useQueryClient();
+    const navigate = useNavigate();
+    const closeMenu = () => {
+        setOpen(false);
+        setConfirmingDelete(false);
+    };
+    const removeFromSlot = async () => {
+        closeMenu();
+        queryClient.setQueryData(["slot-installs", slotId], (old) => (old ?? []).filter((i) => i.toolId !== toolId));
+        try {
+            await fetch(agentNativePath(`/_agent-native/slots/${encodeURIComponent(slotId)}/install/${encodeURIComponent(toolId)}`), { method: "DELETE" });
+        }
+        finally {
+            queryClient.invalidateQueries({ queryKey: ["slot-installs", slotId] });
+        }
+    };
+    const deleteTool = async () => {
+        closeMenu();
+        queryClient.setQueryData(["slot-installs", slotId], (old) => (old ?? []).filter((i) => i.toolId !== toolId));
+        try {
+            await fetch(agentNativePath(`/_agent-native/tools/${toolId}`), {
+                method: "DELETE",
+            });
+        }
+        finally {
+            queryClient.invalidateQueries({ queryKey: ["slot-installs", slotId] });
+            queryClient.invalidateQueries({ queryKey: ["tool", toolId] });
+            queryClient.invalidateQueries({ queryKey: ["tools"] });
+        }
+    };
+    return (_jsxs(Popover, { open: open, onOpenChange: (o) => {
+            setOpen(o);
+            if (!o)
+                setConfirmingDelete(false);
+        }, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsx("button", { type: "button", className: "absolute top-1 right-1 flex h-6 w-6 items-center justify-center rounded-md bg-background/60 text-muted-foreground/60 opacity-0 hover:bg-accent hover:text-foreground hover:opacity-100 group-hover/embedded-tool:opacity-100 cursor-pointer transition-opacity", title: `${toolName} options`, "aria-label": `${toolName} options`, children: _jsx(IconDots, { className: "h-3.5 w-3.5" }) }) }), _jsx(PopoverContent, { align: "end", sideOffset: 4, className: "w-56 p-1", children: !confirmingDelete ? (_jsxs("div", { className: "flex flex-col", children: [_jsxs("button", { type: "button", onClick: () => {
+                                closeMenu();
+                                navigate(`/tools/${toolId}`);
+                            }, className: "flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] hover:bg-accent cursor-pointer text-left", children: [_jsx(IconExternalLink, { className: "h-3.5 w-3.5" }), _jsx("span", { children: "Open full view" })] }), _jsxs("button", { type: "button", onClick: removeFromSlot, className: "flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] hover:bg-accent cursor-pointer text-left", children: [_jsx(IconLayoutSidebarRightCollapse, { className: "h-3.5 w-3.5" }), _jsx("span", { children: "Remove from this widget area" })] }), _jsx("div", { className: "my-1 h-px bg-border/40" }), _jsxs("button", { type: "button", onClick: () => setConfirmingDelete(true), className: "flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] text-destructive hover:bg-destructive/10 cursor-pointer text-left", children: [_jsx(IconTrash, { className: "h-3.5 w-3.5" }), _jsx("span", { children: "Delete tool\u2026" })] })] })) : (_jsxs("div", { className: "flex flex-col gap-2 p-2", children: [_jsxs("p", { className: "text-[12px]", children: ["Delete ", _jsx("span", { className: "font-medium", children: toolName }), "? This removes the tool everywhere, for everyone it's shared with."] }), _jsxs("div", { className: "flex justify-end gap-1", children: [_jsx("button", { type: "button", onClick: () => setConfirmingDelete(false), className: "rounded-md px-2 py-1 text-[12px] hover:bg-accent cursor-pointer", children: "Cancel" }), _jsx("button", { type: "button", onClick: deleteTool, className: "rounded-md bg-destructive px-2 py-1 text-[12px] text-destructive-foreground hover:bg-destructive/90 cursor-pointer", children: "Delete" })] })] })) })] }));
+}
+//# sourceMappingURL=EmbeddedTool.js.map

package/dist/client/tools/EmbeddedTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmbeddedTool.js","sourceRoot":"","sources":["../../../src/client/tools/EmbeddedTool.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,8BAA8B,EAC9B,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,OAAO,EACP,cAAc,EACd,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAwB5B;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,MAAM,EACN,MAAM,EACN,OAAO,EACP,SAAS,EACT,aAAa,GAAG,EAAE,GACA;IAClB,MAAM,SAAS,GAAG,MAAM,CAA2B,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAS,aAAa,CAAC,CAAC;IAC5D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,gBAAgB,GAAG,MAAM,CAG5B;QACD,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE;YACzC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE;YACzC,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,CAAC,OAAO,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;IACrC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAO;QACpC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;QAC1B,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,eAAe,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAClD,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE;QAC7B,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QACpD,OAAO,eAAe,CACpB,wBAAwB,MAAM,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,EAAE,CACjG,CAAC;IACJ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAE9C,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,GAAG,CAAC,WAAW,CACb,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,EAC7D,GAAG,CACJ,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,yCAAyC;IACzC,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,aAAa,GAAG,KAAK,EAAE,KAAmB,EAAE,EAAE;YAClD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,EAAE,aAAa;gBAAE,OAAO;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;YAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO;YAEpD,IAAI,OAAO,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBACjD,MAAM,OAAO,GAAI,OAAe,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC/C,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,OAAO;oBACxB,OAAO,CAAC,IAAI,KAAK,OAAO;oBACxB,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACzB,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACvB,CAAC,CAAC,OAAO,CAAC,IAAI;oBACd,CAAC,CAAC,QAAQ,CAAC;gBACf,gBAAgB,CAAC,OAAO,GAAG;oBACzB,IAAI;oBACJ,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ;iBAC7B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1B,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,2BAA2B;gBAAE,OAAO;YAEzD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,CAAC,OAAgC,EAAE,EAAE;gBACnD,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAC3C,EAAE,IAAI,EAAE,4BAA4B,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,EAC7D,GAAG,CACJ,CAAC;YACJ,CAAC,CAAC;YAEF,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC5D,qEAAqE;gBACrE,oEAAoE;gBACpE,sDAAsD;gBACtD,MAAM,MAAM,GAAG,iBAAiB,CAC9B,IAAI,EACJ,OAAO,CAAC,MAAM,IAAI,KAAK,EACvB,gBAAgB,CAAC,OAAO,CACzB,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,OAAO,CAAC;wBACN,QAAQ,EAAE;4BACR,EAAE,EAAE,KAAK;4BACT,MAAM,EAAE,GAAG;4BACX,UAAU,EAAE,WAAW;4BACvB,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;yBAC9B;qBACF,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,qEAAqE;gBACrE,kEAAkE;gBAClE,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;gBAC/D,YAAY,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;gBACpD,YAAY,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE;oBAC7C,GAAG,OAAO;oBACV,OAAO,EAAE,YAAY;oBACrB,WAAW,EAAE,aAAa;iBAC3B,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;gBACzB,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC;wBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC1B,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,GAAG,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC;oBACN,QAAQ,EAAE;wBACR,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,IAAI;qBACL;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,0BAA0B,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAClD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CACL,cACE,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,eACtB,MAAM,GAChB,CACH,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAE,gCAAgC,SAAS,IAAI,EAAE,EAAE,aAC/D,iBACE,GAAG,EAAE,SAAS,EAEd,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,IAAI,CAAC,IAAI,EAChB,OAAO,EAAC,2BAA2B,EACnC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAC7D,MAAM,EAAE,GAAG,EAAE;oBACX,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAC3C,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,EAC7D,GAAG,CACJ,CAAC;gBACJ,CAAC,IAVI,GAAG,MAAM,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,CAWxC,EACF,KAAC,gBAAgB,IAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,GAAI,IACrE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,EACxB,MAAM,EACN,MAAM,EACN,QAAQ,GAKT;IACC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,OAAO,CAAC,KAAK,CAAC,CAAC;QACf,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,SAAS,EAAE,CAAC;QACZ,WAAW,CAAC,YAAY,CAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CACjE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAC/C,CAAC;QACF,IAAI,CAAC;YACH,MAAM,KAAK,CACT,eAAe,CACb,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAC3F,EACD,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,SAAS,EAAE,CAAC;QACZ,WAAW,CAAC,YAAY,CAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CACjE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAC/C,CAAC;QACF,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,eAAe,CAAC,wBAAwB,MAAM,EAAE,CAAC,EAAE;gBAC7D,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACvE,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9D,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,OAAO,IACN,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;YAClB,OAAO,CAAC,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,CAAC;gBAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,aAED,KAAC,cAAc,IAAC,OAAO,kBACrB,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,gQAAgQ,EAC1Q,KAAK,EAAE,GAAG,QAAQ,UAAU,gBAChB,GAAG,QAAQ,UAAU,YAEjC,KAAC,QAAQ,IAAC,SAAS,EAAC,aAAa,GAAG,GAC7B,GACM,EACjB,KAAC,cAAc,IAAC,KAAK,EAAC,KAAK,EAAC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAC,UAAU,YAC5D,CAAC,gBAAgB,CAAC,CAAC,CAAC,CACnB,eAAK,SAAS,EAAC,eAAe,aAC5B,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;gCACZ,SAAS,EAAE,CAAC;gCACZ,QAAQ,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;4BAC/B,CAAC,EACD,SAAS,EAAC,qGAAqG,aAE/G,KAAC,gBAAgB,IAAC,SAAS,EAAC,aAAa,GAAG,EAC5C,4CAA2B,IACpB,EACT,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,cAAc,EACvB,SAAS,EAAC,qGAAqG,aAE/G,KAAC,8BAA8B,IAAC,SAAS,EAAC,aAAa,GAAG,EAC1D,0DAAyC,IAClC,EACT,cAAK,SAAS,EAAC,wBAAwB,GAAG,EAC1C,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EACxC,SAAS,EAAC,8HAA8H,aAExI,KAAC,SAAS,IAAC,SAAS,EAAC,aAAa,GAAG,EACrC,+CAAyB,IAClB,IACL,CACP,CAAC,CAAC,CAAC,CACF,eAAK,SAAS,EAAC,yBAAyB,aACtC,aAAG,SAAS,EAAC,aAAa,wBACjB,eAAM,SAAS,EAAC,aAAa,YAAE,QAAQ,GAAQ,0EAEpD,EACJ,eAAK,SAAS,EAAC,wBAAwB,aACrC,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,EACzC,SAAS,EAAC,iEAAiE,uBAGpE,EACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,UAAU,EACnB,SAAS,EAAC,oHAAoH,uBAGvH,IACL,IACF,CACP,GACc,IACT,CACX,CAAC;AACJ,CAAC","sourcesContent":["import { agentNativePath } from \"../api-path.js\";\nimport { useEffect, useMemo, useRef, useState } from \"react\";\nimport { useQuery, useQueryClient } from \"@tanstack/react-query\";\nimport { useNavigate } from \"react-router\";\nimport {\n  IconDots,\n  IconExternalLink,\n  IconLayoutSidebarRightCollapse,\n  IconTrash,\n} from \"@tabler/icons-react\";\nimport {\n  Popover,\n  PopoverContent,\n  PopoverTrigger,\n} from \"../components/ui/popover.js\";\nimport {\n  isAllowedToolPath,\n  sanitizeToolRequestOptions,\n  checkBridgePolicy,\n  type ToolBridgeRole,\n} from \"./iframe-bridge.js\";\n\ninterface Tool {\n  id: string;\n  name: string;\n  description?: string;\n  content?: string;\n  updatedAt?: string;\n}\n\nexport interface EmbeddedToolProps {\n  toolId: string;\n  /** Slot identifier passed via the iframe URL so the tool runtime knows it's\n   * embedded and enables auto-resize. */\n  slotId: string;\n  /** Object pushed into the tool as `window.slotContext`. Re-posted whenever\n   * the host re-renders with a new context. */\n  context?: Record<string, unknown> | null;\n  /** Optional className applied to the iframe container. */\n  className?: string;\n  /** Initial iframe height before content reports a real height. */\n  initialHeight?: number;\n}\n\n/**\n * Renders a tool inline as a small auto-sized iframe — for use inside an\n * `<ExtensionSlot>`. Different from `<ToolViewer>` (which is full-page with a\n * toolbar): no header, sized to content, receives a `slotContext`.\n */\nexport function EmbeddedTool({\n  toolId,\n  slotId,\n  context,\n  className,\n  initialHeight = 80,\n}: EmbeddedToolProps) {\n  const iframeRef = useRef<HTMLIFrameElement | null>(null);\n  const [height, setHeight] = useState<number>(initialHeight);\n  const [isDark, setIsDark] = useState(false);\n  // (audit H4) Mirror ToolViewer's role-aware gating; deny-by-default until\n  // the iframe's render binding announcement arrives.\n  const bridgeContextRef = useRef<{\n    role: ToolBridgeRole;\n    isAuthor: boolean;\n  }>({\n    role: \"viewer\",\n    isAuthor: false,\n  });\n\n  useEffect(() => {\n    setIsDark(document.documentElement.classList.contains(\"dark\"));\n    const observer = new MutationObserver(() => {\n      setIsDark(document.documentElement.classList.contains(\"dark\"));\n    });\n    observer.observe(document.documentElement, {\n      attributes: true,\n      attributeFilter: [\"class\"],\n    });\n    return () => observer.disconnect();\n  }, []);\n\n  const { data: tool } = useQuery<Tool>({\n    queryKey: [\"tool\", toolId],\n    queryFn: async () => {\n      const res = await fetch(\n        agentNativePath(`/_agent-native/tools/${toolId}`),\n      );\n      if (!res.ok) throw new Error(\"Failed to fetch tool\");\n      return res.json();\n    },\n  });\n\n  const iframeSrc = useMemo(() => {\n    const v = encodeURIComponent(tool?.updatedAt ?? \"\");\n    return agentNativePath(\n      `/_agent-native/tools/${toolId}/render?slot=${encodeURIComponent(slotId)}&dark=${isDark}&v=${v}`,\n    );\n  }, [toolId, slotId, isDark, tool?.updatedAt]);\n\n  // Forward slot context whenever it changes. The iframe's own load handler\n  // posts the initial value once it's ready; this effect handles updates.\n  const contextJson = JSON.stringify(context ?? {});\n  useEffect(() => {\n    const win = iframeRef.current?.contentWindow;\n    if (!win) return;\n    win.postMessage(\n      { type: \"agent-native-slot-context\", context: context ?? {} },\n      \"*\",\n    );\n  }, [contextJson]);\n\n  // Bridge tool requests + height reports.\n  useEffect(() => {\n    const handleMessage = async (event: MessageEvent) => {\n      if (event.source !== iframeRef.current?.contentWindow) return;\n      const message = event.data;\n      if (!message || typeof message !== \"object\") return;\n\n      if (message.type === \"agent-native-tool-binding\") {\n        const binding = (message as any).binding ?? {};\n        const role: ToolBridgeRole =\n          binding.role === \"owner\" ||\n          binding.role === \"admin\" ||\n          binding.role === \"editor\" ||\n          binding.role === \"viewer\"\n            ? binding.role\n            : \"viewer\";\n        bridgeContextRef.current = {\n          role,\n          isAuthor: !!binding.isAuthor,\n        };\n        return;\n      }\n\n      if (message.type === \"agent-native-tool-resize\") {\n        const h = Number(message.height);\n        if (Number.isFinite(h) && h > 0) {\n          setHeight(Math.ceil(h));\n        }\n        return;\n      }\n\n      if (message.type !== \"agent-native-tool-request\") return;\n\n      const requestId = String(message.requestId ?? \"\");\n      const path = String(message.path ?? \"\");\n      const respond = (payload: Record<string, unknown>) => {\n        iframeRef.current?.contentWindow?.postMessage(\n          { type: \"agent-native-tool-response\", requestId, ...payload },\n          \"*\",\n        );\n      };\n\n      if (!requestId || !isAllowedToolPath(path, toolId)) {\n        respond({ error: \"Tool request path is not allowed\" });\n        return;\n      }\n\n      try {\n        const options = sanitizeToolRequestOptions(message.options);\n        // (audit H4) Role-aware gating: viewer-shared tools can read but not\n        // write. The bridge policy is decided here in the parent before the\n        // request leaves; the server enforces a second layer.\n        const policy = checkBridgePolicy(\n          path,\n          options.method ?? \"GET\",\n          bridgeContextRef.current,\n        );\n        if (!policy.ok) {\n          respond({\n            response: {\n              ok: false,\n              status: 403,\n              statusText: \"Forbidden\",\n              body: { error: policy.error },\n            },\n          });\n          return;\n        }\n        // (audit H5) Same tool-bridge tagging as <ToolViewer>. action-routes\n        // uses these headers to enforce per-action `toolCallable` opt-in.\n        const finalHeaders = new Headers(options.headers ?? undefined);\n        finalHeaders.set(\"X-Agent-Native-Tool-Bridge\", \"1\");\n        finalHeaders.set(\"X-Agent-Native-Tool-Id\", toolId);\n        const res = await fetch(agentNativePath(path), {\n          ...options,\n          headers: finalHeaders,\n          credentials: \"same-origin\",\n        });\n        const text = await res.text();\n        let body: unknown = text;\n        if (text) {\n          try {\n            body = JSON.parse(text);\n          } catch {\n            body = text;\n          }\n        }\n        respond({\n          response: {\n            ok: res.ok,\n            status: res.status,\n            statusText: res.statusText,\n            body,\n          },\n        });\n      } catch (err: any) {\n        respond({ error: err?.message ?? \"Tool host request failed\" });\n      }\n    };\n\n    window.addEventListener(\"message\", handleMessage);\n    return () => window.removeEventListener(\"message\", handleMessage);\n  }, [toolId]);\n\n  if (!tool) {\n    return (\n      <div\n        className={className}\n        style={{ height: initialHeight }}\n        aria-busy=\"true\"\n      />\n    );\n  }\n\n  return (\n    <div className={`relative group/embedded-tool ${className ?? \"\"}`}>\n      <iframe\n        ref={iframeRef}\n        key={`${toolId}-${tool.updatedAt ?? \"\"}`}\n        src={iframeSrc}\n        title={tool.name}\n        sandbox=\"allow-scripts allow-forms\"\n        style={{ width: \"100%\", border: 0, height, display: \"block\" }}\n        onLoad={() => {\n          iframeRef.current?.contentWindow?.postMessage(\n            { type: \"agent-native-slot-context\", context: context ?? {} },\n            \"*\",\n          );\n        }}\n      />\n      <EmbeddedToolMenu toolId={toolId} slotId={slotId} toolName={tool.name} />\n    </div>\n  );\n}\n\nfunction EmbeddedToolMenu({\n  toolId,\n  slotId,\n  toolName,\n}: {\n  toolId: string;\n  slotId: string;\n  toolName: string;\n}) {\n  const [open, setOpen] = useState(false);\n  const [confirmingDelete, setConfirmingDelete] = useState(false);\n  const queryClient = useQueryClient();\n  const navigate = useNavigate();\n\n  const closeMenu = () => {\n    setOpen(false);\n    setConfirmingDelete(false);\n  };\n\n  const removeFromSlot = async () => {\n    closeMenu();\n    queryClient.setQueryData<any[]>([\"slot-installs\", slotId], (old) =>\n      (old ?? []).filter((i) => i.toolId !== toolId),\n    );\n    try {\n      await fetch(\n        agentNativePath(\n          `/_agent-native/slots/${encodeURIComponent(slotId)}/install/${encodeURIComponent(toolId)}`,\n        ),\n        { method: \"DELETE\" },\n      );\n    } finally {\n      queryClient.invalidateQueries({ queryKey: [\"slot-installs\", slotId] });\n    }\n  };\n\n  const deleteTool = async () => {\n    closeMenu();\n    queryClient.setQueryData<any[]>([\"slot-installs\", slotId], (old) =>\n      (old ?? []).filter((i) => i.toolId !== toolId),\n    );\n    try {\n      await fetch(agentNativePath(`/_agent-native/tools/${toolId}`), {\n        method: \"DELETE\",\n      });\n    } finally {\n      queryClient.invalidateQueries({ queryKey: [\"slot-installs\", slotId] });\n      queryClient.invalidateQueries({ queryKey: [\"tool\", toolId] });\n      queryClient.invalidateQueries({ queryKey: [\"tools\"] });\n    }\n  };\n\n  return (\n    <Popover\n      open={open}\n      onOpenChange={(o) => {\n        setOpen(o);\n        if (!o) setConfirmingDelete(false);\n      }}\n    >\n      <PopoverTrigger asChild>\n        <button\n          type=\"button\"\n          className=\"absolute top-1 right-1 flex h-6 w-6 items-center justify-center rounded-md bg-background/60 text-muted-foreground/60 opacity-0 hover:bg-accent hover:text-foreground hover:opacity-100 group-hover/embedded-tool:opacity-100 cursor-pointer transition-opacity\"\n          title={`${toolName} options`}\n          aria-label={`${toolName} options`}\n        >\n          <IconDots className=\"h-3.5 w-3.5\" />\n        </button>\n      </PopoverTrigger>\n      <PopoverContent align=\"end\" sideOffset={4} className=\"w-56 p-1\">\n        {!confirmingDelete ? (\n          <div className=\"flex flex-col\">\n            <button\n              type=\"button\"\n              onClick={() => {\n                closeMenu();\n                navigate(`/tools/${toolId}`);\n              }}\n              className=\"flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] hover:bg-accent cursor-pointer text-left\"\n            >\n              <IconExternalLink className=\"h-3.5 w-3.5\" />\n              <span>Open full view</span>\n            </button>\n            <button\n              type=\"button\"\n              onClick={removeFromSlot}\n              className=\"flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] hover:bg-accent cursor-pointer text-left\"\n            >\n              <IconLayoutSidebarRightCollapse className=\"h-3.5 w-3.5\" />\n              <span>Remove from this widget area</span>\n            </button>\n            <div className=\"my-1 h-px bg-border/40\" />\n            <button\n              type=\"button\"\n              onClick={() => setConfirmingDelete(true)}\n              className=\"flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] text-destructive hover:bg-destructive/10 cursor-pointer text-left\"\n            >\n              <IconTrash className=\"h-3.5 w-3.5\" />\n              <span>Delete tool…</span>\n            </button>\n          </div>\n        ) : (\n          <div className=\"flex flex-col gap-2 p-2\">\n            <p className=\"text-[12px]\">\n              Delete <span className=\"font-medium\">{toolName}</span>? This\n              removes the tool everywhere, for everyone it's shared with.\n            </p>\n            <div className=\"flex justify-end gap-1\">\n              <button\n                type=\"button\"\n                onClick={() => setConfirmingDelete(false)}\n                className=\"rounded-md px-2 py-1 text-[12px] hover:bg-accent cursor-pointer\"\n              >\n                Cancel\n              </button>\n              <button\n                type=\"button\"\n                onClick={deleteTool}\n                className=\"rounded-md bg-destructive px-2 py-1 text-[12px] text-destructive-foreground hover:bg-destructive/90 cursor-pointer\"\n              >\n                Delete\n              </button>\n            </div>\n          </div>\n        )}\n      </PopoverContent>\n    </Popover>\n  );\n}\n"]}

package/dist/client/tools/ExtensionSlot.d.ts

@@ -0,0 +1,27 @@
+export interface ExtensionSlotProps {
+    /** Stable slot identifier — convention: `<app>.<area>.<position>`. */
+    id: string;
+    /** Object pushed to each embedded tool as `slotContext`. */
+    context?: Record<string, unknown> | null;
+    /** Show a small "+" affordance when the slot has no installs. Default: false. */
+    showEmptyAffordance?: boolean;
+    /** Optional className applied to the wrapper. */
+    className?: string;
+    /** Optional className applied to each EmbeddedTool. */
+    toolClassName?: string;
+}
+/**
+ * A named UI slot that user-installed tools can render into. Apps drop this
+ * component wherever they want to allow extensions; the framework handles
+ * fetching, sandboxing, context delivery, and lifecycle.
+ *
+ * Example:
+ *
+ *   <ExtensionSlot
+ *     id="mail.contact-sidebar.bottom"
+ *     context={{ contactEmail }}
+ *     showEmptyAffordance
+ *   />
+ */
+export declare function ExtensionSlot({ id, context, showEmptyAffordance, className, toolClassName, }: ExtensionSlotProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ExtensionSlot.d.ts.map

package/dist/client/tools/ExtensionSlot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExtensionSlot.d.ts","sourceRoot":"","sources":["../../../src/client/tools/ExtensionSlot.tsx"],"names":[],"mappings":"AA+BA,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,iFAAiF;IACjF,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,EAC5B,EAAE,EACF,OAAO,EACP,mBAAmB,EACnB,SAAS,EACT,aAAa,GACd,EAAE,kBAAkB,2CAwCpB"}