@agent-native/core 0.80.6 → 0.80.7

package/corpus/README.md

@@ -28,4 +28,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 ## Generated Counts
 
 - core files: 2041
-- template files: 4587
+- template files: 4588

package/corpus/core/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @agent-native/core
 
+## 0.80.7
+
+### Patch Changes
+
+- 72ef787: Add `onReady` and `onUnavailable` callbacks to `EmbeddedExtension`. `onReady` fires once when the embedded iframe first signals content readiness (its first height report, or iframe load as a fallback) — hosts that gate on content paint, such as dashboard report screenshots, can use it to avoid capturing a blank extension. `onUnavailable` fires when the extension can't be loaded for the current viewer (e.g. 403/404 because it isn't shared with them or no longer exists), so hosts can render an explanatory fallback instead of a silently blank panel.
+
 ## 0.80.6
 
 ### Patch Changes

package/corpus/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.80.6",
+  "version": "0.80.7",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {

package/corpus/core/src/client/extensions/EmbeddedExtension.tsx

@@ -29,6 +29,7 @@ import {
 } from "./delete-extension.js";
 import {
   extensionLoadError,
+  extensionLoadErrorStatus,
   shouldRetryExtensionLoad,
 } from "./extension-load-error.js";
 import {
@@ -74,6 +75,15 @@ export interface EmbeddedExtensionProps {
   className?: string;
   /** Initial iframe height before content reports a real height. */
   initialHeight?: number;
+  /** Fires once when the embedded iframe first signals content readiness — its
+   * first height report, or iframe load as a fallback. Hosts that gate on
+   * content paint (e.g. dashboard report screenshots) use this. */
+  onReady?: () => void;
+  /** Fires when the extension can't be loaded for this viewer (e.g. 403/404 —
+   * the extension isn't shared with them or no longer exists). Hosts can use
+   * this to render an explanatory fallback instead of a blank panel. By default
+   * the component renders nothing on failure (slot-style silent skip). */
+  onUnavailable?: (status?: number) => void;
 }
 
 /**
@@ -87,8 +97,20 @@ export function EmbeddedExtension({
   context,
   className,
   initialHeight = 80,
+  onReady,
+  onUnavailable,
 }: EmbeddedExtensionProps) {
   const iframeRef = useRef<HTMLIFrameElement | null>(null);
+  // Latch the readiness signal so onReady fires at most once per iframe
+  // instance. Reset when the iframe is recreated (extensionId/updatedAt change).
+  const onReadyRef = useRef(onReady);
+  onReadyRef.current = onReady;
+  const readyFiredRef = useRef(false);
+  const fireReady = () => {
+    if (readyFiredRef.current) return;
+    readyFiredRef.current = true;
+    onReadyRef.current?.();
+  };
   const [height, setHeight] = useState<number>(initialHeight);
   const [isDark, setIsDark] = useState(false);
   // (audit H4) Mirror ExtensionViewer's role-aware gating; deny-by-default until
@@ -120,6 +142,8 @@ export function EmbeddedExtension({
     data: extension,
     isFetching,
     isLoading,
+    isError,
+    error,
   } = useQuery<Extension>({
     queryKey: ["extension", extensionId],
     queryFn: async () => {
@@ -141,6 +165,21 @@ export function EmbeddedExtension({
     retryDelay: (attempt) => Math.min(1000 * 2 ** attempt, 4000),
   });
 
+  // Notify the host once when the extension can't be loaded for this viewer so
+  // it can show a fallback instead of a blank panel.
+  const onUnavailableRef = useRef(onUnavailable);
+  onUnavailableRef.current = onUnavailable;
+  const unavailableFiredRef = useRef(false);
+  useEffect(() => {
+    unavailableFiredRef.current = false;
+  }, [extensionId]);
+  useEffect(() => {
+    if (isError && !isFetching && !unavailableFiredRef.current) {
+      unavailableFiredRef.current = true;
+      onUnavailableRef.current?.(extensionLoadErrorStatus(error));
+    }
+  }, [isError, isFetching, error]);
+
   // Initial dark state is baked into the URL on first load only; subsequent
   // theme toggles update the iframe's <html class="dark"> via postMessage so
   // the user's interaction state inside the extension survives the toggle.
@@ -158,6 +197,7 @@ export function EmbeddedExtension({
   useEffect(() => {
     bridgeContextRef.current = { role: "viewer", isAuthor: false };
     bindingLatchedRef.current = false;
+    readyFiredRef.current = false;
   }, [extensionId, extension?.updatedAt]);
 
   useEffect(() => {
@@ -215,6 +255,8 @@ export function EmbeddedExtension({
         const h = Number(message.height);
         if (Number.isFinite(h) && h > 0) {
           setHeight(Math.ceil(h));
+          // First laid-out height means the content has painted.
+          fireReady();
         }
         return;
       }
@@ -330,6 +372,9 @@ export function EmbeddedExtension({
             { type: "agent-native-slot-context", context: context ?? {} },
             "*",
           );
+          // Fallback readiness signal in case the extension never reports a
+          // height (e.g. fixed-height content that skips auto-resize).
+          fireReady();
         }}
       />
       <EmbeddedToolMenu

package/corpus/templates/analytics/.agents/skills/dashboard-management/SKILL.md

@@ -56,7 +56,7 @@ When the user asks for a dashboard:
 2. If a metric definition, date range, or grain is ambiguous and the choice would change the panel's numbers, use the `ask-question` clarifying tool once before building. Skip it when the dictionary or the user already settled it.
 3. If a metric is not documented, do not guess column names. Ask for the table/columns or introspect the provider schema, then propose a dictionary entry with `save-data-dictionary-entry`.
 4. Build a complete `SqlDashboardConfig` with `name` and `panels`. Optionally set top-level `columns` (1–6, default 2) to control how many grid columns the panels before any section use.
-5. Every panel needs `id`, `title`, `source`, `chartType`, `width`, and `sql`. `width` is the number of grid columns the panel spans (1..6, clamped to the active section's column count). Section panels skip `source` and `sql` and may set their own `columns` (1–6) to override the dashboard default for the panels following the section.
+5. Every panel needs `id`, `title`, `source`, `chartType`, `width`, and `sql`. `width` is the number of grid columns the panel spans (1..6, clamped to the active section's column count). Section panels skip `source` and `sql` and may set their own `columns` (1–6) to override the dashboard default for the panels following the section. Extension panels (`chartType: "extension"`) also skip `source` and `sql`; instead they require `config.extensionId` (see "Embedding An Extension As A Panel").
 6. Persist with `update-dashboard`, not raw SQL or settings writes.
 7. Navigate to it with `pnpm action navigate --view=adhoc --dashboardId=<id>`.
 
@@ -85,6 +85,37 @@ production mode, call `create-extension` automatically and then tell the user
 that the request needed a bespoke surface, so you built it as an extension
 rather than forcing it into a native dashboard config.
 
+## Embedding An Extension As A Panel
+
+Use `chartType: "extension"` to embed an existing extension as a dashboard
+panel. This is different from the section above: there you replace the whole
+dashboard with an extension; here you drop a single extension widget into one
+panel slot alongside normal SQL charts. The panel renders the extension's
+sandboxed iframe instead of running a query, so it skips `source` and `sql` and
+instead requires `config.extensionId` (the id of an extension that already
+exists — create it first with `create-extension`). Validation rejects an
+extension panel without a non-empty `config.extensionId`.
+
+```jsonc
+{
+  "id": "pipeline-widget",
+  "title": "Pipeline Widget",
+  "chartType": "extension",
+  "width": 3,
+  "config": { "extensionId": "<existing-extension-id>" },
+}
+```
+
+Notes:
+
+- The panel renders full-bleed (no card chrome/title) and does not receive the
+  dashboard's filters/variables/date range — it's a standalone widget for now.
+- Access is scoped per viewer: embedding does NOT grant access to the extension
+  (same model as ExtensionSlots). If you share a dashboard more broadly than the
+  embedded extension, viewers without access to that extension see an
+  "extension unavailable" message instead of the content. Share the extension to
+  the same audience as the dashboard so all viewers can see it.
+
 ## Config Shape
 
 ```jsonc
@@ -207,7 +238,7 @@ type PanelPatch = {
   title?: string;
   sql?: string;
   source?: "bigquery" | "ga4" | "amplitude" | "first-party" | "demo" | "prometheus";
-  chartType?: "line" | "area" | "bar" | "metric" | "table" | "pie" | "section" | "heatmap" | "callout";
+  chartType?: "line" | "area" | "bar" | "metric" | "table" | "pie" | "section" | "heatmap" | "callout" | "extension";
   width?: number;
   columns?: number;
   tab?: string;
@@ -219,8 +250,9 @@ type PanelInput = PanelPatch & {
   id: string;
   title: string;
   chartType: NonNullable<PanelPatch["chartType"]>;
-  source?: PanelPatch["source"]; // required for non-section panels
-  sql?: string; // required for non-section panels
+  source?: PanelPatch["source"]; // required for non-section / non-extension panels
+  sql?: string; // required for non-section / non-extension panels
+  // For chartType "extension": config.extensionId is required (the extension to embed).
 };
 
 type PanelFilter = {
@@ -450,6 +482,12 @@ pnpm action set-resource-visibility --resourceType dashboard --resourceId weekly
 
 Writes require editor access; deletes require admin access. Owners always satisfy access checks.
 
+If a dashboard embeds an extension panel (`chartType: "extension"`), sharing the
+dashboard does not share the extension. Share the referenced extension to the
+same audience (`share-resource --resourceType extension ...`) so all dashboard
+viewers can see the embedded content; otherwise they get an "extension
+unavailable" placeholder.
+
 ## Important Rules
 
 - Never fabricate data or create a dashboard from guessed schema. A panel's SQL must hit a real source; do not present figures you did not actually query.

package/corpus/templates/analytics/actions/dashboard-mutation-api.ts

@@ -36,7 +36,7 @@ type PanelPatch = {
   title?: string;
   sql?: string;
   source?: "bigquery" | "ga4" | "amplitude" | "first-party" | "demo" | "prometheus";
-  chartType?: "line" | "area" | "bar" | "metric" | "table" | "pie" | "section" | "heatmap" | "callout";
+  chartType?: "line" | "area" | "bar" | "metric" | "table" | "pie" | "section" | "heatmap" | "callout" | "extension";
   width?: number;
   columns?: number;
   tab?: string;
@@ -115,6 +115,7 @@ export const DASHBOARD_MUTATION_EXAMPLES = [
   'dashboard.insertPanel({"id":"new-kpi","title":"New KPI","source":"first-party","chartType":"metric","width":1,"sql":"SELECT COUNT(*) AS value FROM analytics_events"}).atTop();',
   'dashboard.insertPanel({"id":"new-chart","title":"New Chart","source":"first-party","chartType":"line","width":1,"sql":"SELECT date, COUNT(*) AS value FROM analytics_events GROUP BY date ORDER BY date"}).nextTo("retention-over-time");',
   'dashboard.insertPanel({"id":"row-chart","title":"Row Chart","source":"first-party","chartType":"bar","width":1,"sql":"SELECT name, COUNT(*) AS value FROM analytics_events GROUP BY name"}).atRow(2);',
+  'dashboard.insertPanel({"id":"pipeline-widget","title":"Pipeline Widget","chartType":"extension","width":3,"config":{"extensionId":"<existing-extension-id>"}}).atBottom();',
 ] as const;
 
 export type DashboardMutationOperation =

package/corpus/templates/analytics/actions/update-dashboard.ts

@@ -334,12 +334,15 @@ export function validateDashboardConfig(
     if (!p || typeof p !== "object") {
       return `panel[${i}] must be an object`;
     }
-    // Section panels are pure layout dividers, so source and sql are optional.
-    // Width stays required for backward-compatible dashboard payloads.
+    // Section panels are pure layout dividers and extension panels render their
+    // own iframe, so both make source and sql optional. Width stays required for
+    // backward-compatible dashboard payloads.
     const isSection = p.chartType === "section";
-    const required = isSection
-      ? (["id", "title", "chartType", "width"] as const)
-      : (["id", "title", "sql", "source", "chartType", "width"] as const);
+    const isExtension = p.chartType === "extension";
+    const required =
+      isSection || isExtension
+        ? (["id", "title", "chartType", "width"] as const)
+        : (["id", "title", "sql", "source", "chartType", "width"] as const);
     for (const field of required) {
       const v = p[field];
       if (field === "width") {
@@ -352,9 +355,19 @@ export function validateDashboardConfig(
         return `panel[${i}].${field} is required (non-empty string)`;
       }
     }
-    if (!isSection && !validSources.has(p.source as string)) {
+    if (!isSection && !isExtension && !validSources.has(p.source as string)) {
       return `panel[${i}].source must be 'bigquery', 'ga4', 'amplitude', 'first-party', 'demo', or 'prometheus' (got '${p.source}'). source selects the backend — put the PromQL/SQL/table name in sql, not here.`;
     }
+    if (isExtension) {
+      const cfg = p.config as Record<string, unknown> | undefined;
+      const extensionId =
+        cfg && typeof cfg.extensionId === "string"
+          ? cfg.extensionId.trim()
+          : "";
+      if (!extensionId) {
+        return `panel[${i}].config.extensionId is required for extension panels (the id of the extension to render inline)`;
+      }
+    }
     if (
       isSection &&
       p.columns !== undefined &&
@@ -382,9 +395,10 @@ export async function validatePanelSql(
   const vars = buildDryRunVars(config);
   for (let i = 0; i < panels.length; i++) {
     const p = panels[i] as Record<string, unknown>;
-    // Sections are layout-only — no SQL to dry-run. heatmap, callout, and other
-    // query panels still validate normally below.
-    if (p.chartType === "section") continue;
+    // Sections are layout-only and extensions render their own iframe — neither
+    // has SQL to dry-run. heatmap, callout, and other query panels still
+    // validate normally below.
+    if (p.chartType === "section" || p.chartType === "extension") continue;
     if (p.source === "amplitude") {
       const raw = typeof p.sql === "string" ? p.sql : "";
       if (raw.trim()) {

package/corpus/templates/analytics/app/components/dashboard/SqlChart.tsx

@@ -1,4 +1,5 @@
 import { useT } from "@agent-native/core/client";
+import { EmbeddedExtension } from "@agent-native/core/client/extensions";
 import {
   IconArrowsSort,
   IconSortAscending,
@@ -868,7 +869,10 @@ export function SqlChart({
   const t = useT();
   // Hooks must be called unconditionally before any early return.
   const isSection = panel.chartType === "section";
-  const shouldQuery = !isSection && loadData;
+  const isExtension = panel.chartType === "extension";
+  // Sections are pure layout and extensions render their own iframe — neither
+  // runs the SQL pipeline.
+  const shouldQuery = !isSection && !isExtension && loadData;
   const sql = serializePanelSql(resolvedSql ?? panel.sql);
   const {
     data: result,
@@ -918,6 +922,24 @@ export function SqlChart({
       </div>
     );
   }
+
+  // Extension panels render a sandboxed extension iframe instead of querying a
+  // data source. The extension id lives in config.extensionId.
+  if (isExtension) {
+    const extensionId = panel.config?.extensionId;
+    if (!extensionId) {
+      return (
+        <div className="flex flex-1 items-center justify-center px-4 py-8 min-h-[120px]">
+          <p className="text-sm text-muted-foreground text-center">
+            {t("sqlDashboard.extensionMissingId")}
+          </p>
+        </div>
+      );
+    }
+    return (
+      <DashboardExtensionPanel extensionId={extensionId} panelId={panel.id} />
+    );
+  }
   const colors = panel.config?.colors || DEFAULT_COLORS;
   const yFormatter = panel.config?.yFormatter;
 
@@ -1041,6 +1063,55 @@ export function SqlChart({
   );
 }
 
+function DashboardExtensionPanel({
+  extensionId,
+  panelId,
+}: {
+  extensionId: string;
+  panelId: string;
+}) {
+  const t = useT();
+  // Hold the report-readiness marker until the extension iframe paints so
+  // dashboard report screenshots don't capture a blank extension panel.
+  const [ready, setReady] = useState(false);
+  const [unavailable, setUnavailable] = useState(false);
+
+  // Embedding never grants access to the extension itself (same model as
+  // ExtensionSlots). A viewer with dashboard-only access who can't see the
+  // referenced extension gets a clear message instead of a blank panel.
+  if (unavailable) {
+    return (
+      <div className="flex flex-1 items-center justify-center px-4 py-8 min-h-[120px]">
+        <p className="text-sm text-muted-foreground text-center">
+          {t("sqlDashboard.extensionUnavailable")}
+        </p>
+      </div>
+    );
+  }
+
+  return (
+    <div
+      className="w-full"
+      data-dashboard-report-loading={ready ? undefined : "true"}
+    >
+      <EmbeddedExtension
+        extensionId={extensionId}
+        slotId={`dashboard-panel-${panelId}`}
+        className="w-full"
+        // Intentional for v1: extension panels are standalone widgets and do not
+        // receive the dashboard's filters/variables/date range as `context`.
+        initialHeight={180}
+        onReady={() => setReady(true)}
+        onUnavailable={() => {
+          // Clear the report-loading gate so report capture doesn't hang.
+          setReady(true);
+          setUnavailable(true);
+        }}
+      />
+    </div>
+  );
+}
+
 function MetricRenderer({
   rows,
   panel,

package/corpus/templates/analytics/app/i18n/zh-TW.ts

@@ -629,6 +629,8 @@ const messages = {
     off: "Off",
     since: "Since",
     sectionOptions: "部分選項",
+    extensionMissingId: "此擴充面板未選擇任何擴充功能。",
+    extensionUnavailable: "此擴充功能未與您共用，或已不存在。",
     panelOptions: "面板選項",
     fullScreen: "全螢幕",
     refresh: "重新整理",

package/corpus/templates/analytics/app/i18n-data.ts

@@ -392,6 +392,9 @@ const enUS = {
     off: "Off",
     since: "Since",
     sectionOptions: "Section options",
+    extensionMissingId: "This extension panel has no extension selected.",
+    extensionUnavailable:
+      "This extension isn't shared with you, or it no longer exists.",
     panelOptions: "Panel options",
     fullScreen: "Full screen",
     refresh: "Refresh",
@@ -5249,6 +5252,8 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "保存视图",
       savedViews: "已保存的视图",
       sectionOptions: "部分选项",
+      extensionMissingId: "此扩展面板未选择任何扩展。",
+      extensionUnavailable: "此扩展未与您共享，或已不存在。",
       sharedWithOrg: "与组织共享",
       unhideFailed: "无法取消隐藏仪表板",
       untitledDashboard: "无标题仪表板",
@@ -5424,6 +5429,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "Guardar vista",
       savedViews: "Vistas guardadas",
       sectionOptions: "Opciones de sección",
+      extensionMissingId:
+        "Este panel de extensión no tiene ninguna extensión seleccionada.",
+      extensionUnavailable:
+        "Esta extensión no está compartida contigo o ya no existe.",
       sharedWithOrg: "Compartido con la organización",
       unhideFailed: "No se pudo mostrar el panel",
       untitledDashboard: "Panel de control sin título",
@@ -5601,6 +5610,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "Enregistrer la vue",
       savedViews: "Vues enregistrées",
       sectionOptions: "Options de sections",
+      extensionMissingId:
+        "Ce panneau d'extension n'a aucune extension sélectionnée.",
+      extensionUnavailable:
+        "Cette extension n'est pas partagée avec vous ou n'existe plus.",
       sharedWithOrg: "Partagé avec l'organisation",
       unhideFailed: "Impossible d'afficher le tableau de bord",
       untitledDashboard: "Tableau de bord sans titre",
@@ -5779,6 +5792,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "Ansicht speichern",
       savedViews: "Gespeicherte Ansichten",
       sectionOptions: "Abschnittsoptionen",
+      extensionMissingId:
+        "Für dieses Erweiterungs-Panel ist keine Erweiterung ausgewählt.",
+      extensionUnavailable:
+        "Diese Erweiterung ist nicht für Sie freigegeben oder existiert nicht mehr.",
       sharedWithOrg: "Mit Org geteilt",
       unhideFailed: "Das Dashboard konnte nicht eingeblendet werden",
       untitledDashboard: "Unbenanntes Dashboard",
@@ -5952,6 +5969,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "ビューを保存",
       savedViews: "保存されたビュー",
       sectionOptions: "セクションのオプション",
+      extensionMissingId:
+        "この拡張機能パネルには拡張機能が選択されていません。",
+      extensionUnavailable:
+        "この拡張機能はあなたと共有されていないか、存在しません。",
       sharedWithOrg: "組織と共有",
       unhideFailed: "ダッシュボードを再表示できませんでした",
       untitledDashboard: "無題のダッシュボード",
@@ -6124,6 +6145,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "보기 저장",
       savedViews: "저장된 보기",
       sectionOptions: "섹션 옵션",
+      extensionMissingId:
+        "이 확장 프로그램 패널에 선택된 확장 프로그램이 없습니다.",
+      extensionUnavailable:
+        "이 확장 프로그램이 공유되지 않았거나 더 이상 존재하지 않습니다.",
       sharedWithOrg: "조직과 공유됨",
       unhideFailed: "대시보드를 숨기기 해제할 수 없습니다.",
       untitledDashboard: "제목 없는 대시보드",
@@ -6300,6 +6325,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "Salvar visualização",
       savedViews: "Visualizações salvas",
       sectionOptions: "Opções de seção",
+      extensionMissingId:
+        "Este painel de extensão não tem nenhuma extensão selecionada.",
+      extensionUnavailable:
+        "Esta extensão não foi compartilhada com você ou não existe mais.",
       sharedWithOrg: "Compartilhado com a organização",
       unhideFailed: "Não foi possível exibir o painel",
       untitledDashboard: "Painel sem título",
@@ -6472,6 +6501,9 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "दृश्य सहेजें",
       savedViews: "सहेजे गए दृश्य",
       sectionOptions: "अनुभाग विकल्प",
+      extensionMissingId: "इस एक्सटेंशन पैनल में कोई एक्सटेंशन चयनित नहीं है।",
+      extensionUnavailable:
+        "यह एक्सटेंशन आपके साथ साझा नहीं किया गया है, या अब मौजूद नहीं है।",
       sharedWithOrg: "संगठन के साथ साझा किया गया",
       unhideFailed: "डैशबोर्ड को उजागर नहीं किया जा सका",
       untitledDashboard: "शीर्षक रहित डैशबोर्ड",
@@ -6644,6 +6676,8 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "حفظ العرض",
       savedViews: "المشاهدات المحفوظة",
       sectionOptions: "خيارات القسم",
+      extensionMissingId: "لم يتم تحديد أي إضافة في لوحة الإضافة هذه.",
+      extensionUnavailable: "هذه الإضافة غير مشاركة معك، أو لم تعد موجودة.",
       sharedWithOrg: "تمت المشاركة مع منظمة",
       unhideFailed: "تعذر إظهار لوحة البيانات",
       untitledDashboard: "لوحة تحكم بلا عنوان",

package/corpus/templates/analytics/app/pages/adhoc/sql-dashboard/SqlChartCard.tsx

@@ -121,7 +121,9 @@ export function SqlChartCard({
   const [expanded, setExpanded] = useState(false);
   const [exportCsv, setExportCsv] = useState<(() => void) | null>(null);
   const [shouldLoadData, setShouldLoadData] = useState(
-    eagerLoad || panel.chartType === "section",
+    eagerLoad ||
+      panel.chartType === "section" ||
+      panel.chartType === "extension",
   );
   const cardRef = useRef<HTMLDivElement | null>(null);
   const chartQueryKey = useMemo(
@@ -159,7 +161,9 @@ export function SqlChartCard({
       setShouldLoadData(true);
       return;
     }
-    if (panel.chartType === "section") {
+    // Sections are layout-only and extensions render their own iframe — neither
+    // waits on the intersection observer that gates SQL panels.
+    if (panel.chartType === "section" || panel.chartType === "extension") {
       setShouldLoadData(true);
       return;
     }
@@ -286,6 +290,88 @@ export function SqlChartCard({
     );
   }
 
+  // Extension panels render their sandboxed iframe full-bleed with no card chrome
+  // or title — the extension owns its own UI. Editable dashboards still get a
+  // hover overlay for delete/drag. Editing routes through the agent (the manual
+  // panel editor has no extension picker), so no inline edit action here.
+  if (panel.chartType === "extension") {
+    return (
+      <div
+        ref={setCardNodeRef}
+        style={isDragSource ? { zIndex: 50 } : undefined}
+        data-dragging={isDragSource ? "true" : undefined}
+        className="dashboard-extension-card group relative h-full"
+      >
+        <SqlChart panel={panel} resolvedSql={resolvedSql} loadData />
+        {editable ? (
+          <div className="absolute right-1 top-1 flex items-center gap-1 opacity-0 group-hover:opacity-100">
+            <DropdownMenu>
+              <Tooltip>
+                <TooltipTrigger asChild>
+                  <DropdownMenuTrigger asChild>
+                    <button
+                      className="p-1 rounded bg-background/80 text-muted-foreground hover:text-foreground"
+                      aria-label={t("sqlDashboard.panelOptions")}
+                    >
+                      <IconDotsVertical className="h-3.5 w-3.5" />
+                    </button>
+                  </DropdownMenuTrigger>
+                </TooltipTrigger>
+                <TooltipContent>
+                  {t("sqlDashboard.panelOptions")}
+                </TooltipContent>
+              </Tooltip>
+              <DropdownMenuContent align="end" className="w-40">
+                <DropdownMenuItem
+                  onSelect={(e) => {
+                    e.preventDefault();
+                    setConfirmOpen(true);
+                  }}
+                >
+                  <IconTrash className="h-4 w-4 mr-2" />
+                  {t("sidebar.delete")}
+                </DropdownMenuItem>
+              </DropdownMenuContent>
+            </DropdownMenu>
+            <PanelDragHandle
+              panelId={panel.id}
+              label={t("sqlDashboard.dragToReorder")}
+              className="p-1 rounded bg-background/80 cursor-grab active:cursor-grabbing text-muted-foreground/50 hover:text-muted-foreground"
+              iconClassName="h-3.5 w-3.5"
+            />
+          </div>
+        ) : null}
+        {editable ? (
+          <AlertDialog open={confirmOpen} onOpenChange={setConfirmOpen}>
+            <AlertDialogContent>
+              <AlertDialogHeader>
+                <AlertDialogTitle>
+                  {t("sqlDashboard.deletePanelTitle")}
+                </AlertDialogTitle>
+                <AlertDialogDescription>
+                  {t("sqlDashboard.deletePanelDescription", {
+                    title: panel.title,
+                  })}
+                </AlertDialogDescription>
+              </AlertDialogHeader>
+              <AlertDialogFooter>
+                <AlertDialogCancel>{t("sidebar.cancel")}</AlertDialogCancel>
+                <AlertDialogAction
+                  onClick={() => {
+                    setConfirmOpen(false);
+                    onRemove();
+                  }}
+                >
+                  {t("sidebar.delete")}
+                </AlertDialogAction>
+              </AlertDialogFooter>
+            </AlertDialogContent>
+          </AlertDialog>
+        ) : null}
+      </div>
+    );
+  }
+
   // Every non-section panel exposes at least the Full screen view action, so the
   // options menu always renders — including on read-only / shared dashboards.
   const showPanelMenu = true;

package/corpus/templates/analytics/app/pages/adhoc/sql-dashboard/types.ts

@@ -15,7 +15,8 @@ export type ChartType =
   | "pie"
   | "section"
   | "heatmap"
-  | "callout";
+  | "callout"
+  | "extension";
 
 export type FilterType =
   | "date"
@@ -79,6 +80,11 @@ export interface SqlPanelConfig {
   sortable?: boolean;
   columns?: TableColumnConfig[];
   limit?: number;
+  /**
+   * Extension panels only (`chartType: "extension"`): id of the extension to
+   * render inline as a sandboxed iframe instead of running the SQL pipeline.
+   */
+  extensionId?: string;
 }
 
 export interface SqlPanel {

package/corpus/templates/analytics/changelog/2026-06-29-dashboards-can-now-include-extension-panels-that-embed-a-san.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-06-29
+---
+
+Dashboards can now include extension panels that embed a sandboxed extension inline instead of a SQL chart

package/dist/client/extensions/EmbeddedExtension.d.ts

@@ -10,11 +10,20 @@ export interface EmbeddedExtensionProps {
     className?: string;
     /** Initial iframe height before content reports a real height. */
     initialHeight?: number;
+    /** Fires once when the embedded iframe first signals content readiness — its
+     * first height report, or iframe load as a fallback. Hosts that gate on
+     * content paint (e.g. dashboard report screenshots) use this. */
+    onReady?: () => void;
+    /** Fires when the extension can't be loaded for this viewer (e.g. 403/404 —
+     * the extension isn't shared with them or no longer exists). Hosts can use
+     * this to render an explanatory fallback instead of a blank panel. By default
+     * the component renders nothing on failure (slot-style silent skip). */
+    onUnavailable?: (status?: number) => void;
 }
 /**
  * Renders a extension inline as a small auto-sized iframe — for use inside an
  * `<ExtensionSlot>`. Different from `<ExtensionViewer>` (which is full-page with a
  * toolbar): no header, sized to content, receives a `slotContext`.
  */
-export declare function EmbeddedExtension({ extensionId, slotId, context, className, initialHeight, }: EmbeddedExtensionProps): import("react").JSX.Element | null;
+export declare function EmbeddedExtension({ extensionId, slotId, context, className, initialHeight, onReady, onUnavailable, }: EmbeddedExtensionProps): import("react").JSX.Element | null;
 //# sourceMappingURL=EmbeddedExtension.d.ts.map

package/dist/client/extensions/EmbeddedExtension.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EmbeddedExtension.d.ts","sourceRoot":"","sources":["../../../src/client/extensions/EmbeddedExtension.tsx"],"names":[],"mappings":"AAgEA,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB;2CACuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf;iDAC6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,WAAW,EACX,MAAM,EACN,OAAO,EACP,SAAS,EACT,aAAkB,GACnB,EAAE,sBAAsB,sCA6PxB"}
+{"version":3,"file":"EmbeddedExtension.d.ts","sourceRoot":"","sources":["../../../src/client/extensions/EmbeddedExtension.tsx"],"names":[],"mappings":"AAiEA,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB;2CACuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf;iDAC6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;qEAEiE;IACjE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;4EAGwE;IACxE,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,WAAW,EACX,MAAM,EACN,OAAO,EACP,SAAS,EACT,aAAkB,EAClB,OAAO,EACP,aAAa,GACd,EAAE,sBAAsB,sCA8RxB"}

package/dist/client/extensions/EmbeddedExtension.js

@@ -10,7 +10,7 @@ import { Popover, PopoverContent, PopoverTrigger, } from "../components/ui/popov
 import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger, } from "../components/ui/tooltip.js";
 import { useT } from "../i18n.js";
 import { deleteOrHideExtension, invalidateExtensionRemoval, } from "./delete-extension.js";
-import { extensionLoadError, shouldRetryExtensionLoad, } from "./extension-load-error.js";
+import { extensionLoadError, extensionLoadErrorStatus, shouldRetryExtensionLoad, } from "./extension-load-error.js";
 import { isAllowedExtensionPath, sanitizeExtensionRequestOptions, checkBridgePolicy, } from "./iframe-bridge.js";
 function serializeChatValue(value) {
     if (value === undefined || value === null)
@@ -29,8 +29,19 @@ function serializeChatValue(value) {
  * `<ExtensionSlot>`. Different from `<ExtensionViewer>` (which is full-page with a
  * toolbar): no header, sized to content, receives a `slotContext`.
  */
-export function EmbeddedExtension({ extensionId, slotId, context, className, initialHeight = 80, }) {
+export function EmbeddedExtension({ extensionId, slotId, context, className, initialHeight = 80, onReady, onUnavailable, }) {
     const iframeRef = useRef(null);
+    // Latch the readiness signal so onReady fires at most once per iframe
+    // instance. Reset when the iframe is recreated (extensionId/updatedAt change).
+    const onReadyRef = useRef(onReady);
+    onReadyRef.current = onReady;
+    const readyFiredRef = useRef(false);
+    const fireReady = () => {
+        if (readyFiredRef.current)
+            return;
+        readyFiredRef.current = true;
+        onReadyRef.current?.();
+    };
     const [height, setHeight] = useState(initialHeight);
     const [isDark, setIsDark] = useState(false);
     // (audit H4) Mirror ExtensionViewer's role-aware gating; deny-by-default until
@@ -56,7 +67,7 @@ export function EmbeddedExtension({ extensionId, slotId, context, className, ini
         });
         return () => observer.disconnect();
     }, []);
-    const { data: extension, isFetching, isLoading, } = useQuery({
+    const { data: extension, isFetching, isLoading, isError, error, } = useQuery({
         queryKey: ["extension", extensionId],
         queryFn: async () => {
             const res = await fetch(agentNativePath(`/_agent-native/extensions/${extensionId}`));
@@ -74,6 +85,20 @@ export function EmbeddedExtension({ extensionId, slotId, context, className, ini
         retry: shouldRetryExtensionLoad,
         retryDelay: (attempt) => Math.min(1000 * 2 ** attempt, 4000),
     });
+    // Notify the host once when the extension can't be loaded for this viewer so
+    // it can show a fallback instead of a blank panel.
+    const onUnavailableRef = useRef(onUnavailable);
+    onUnavailableRef.current = onUnavailable;
+    const unavailableFiredRef = useRef(false);
+    useEffect(() => {
+        unavailableFiredRef.current = false;
+    }, [extensionId]);
+    useEffect(() => {
+        if (isError && !isFetching && !unavailableFiredRef.current) {
+            unavailableFiredRef.current = true;
+            onUnavailableRef.current?.(extensionLoadErrorStatus(error));
+        }
+    }, [isError, isFetching, error]);
     // Initial dark state is baked into the URL on first load only; subsequent
     // theme toggles update the iframe's <html class="dark"> via postMessage so
     // the user's interaction state inside the extension survives the toggle.
@@ -88,6 +113,7 @@ export function EmbeddedExtension({ extensionId, slotId, context, className, ini
     useEffect(() => {
         bridgeContextRef.current = { role: "viewer", isAuthor: false };
         bindingLatchedRef.current = false;
+        readyFiredRef.current = false;
     }, [extensionId, extension?.updatedAt]);
     useEffect(() => {
         const win = iframeRef.current?.contentWindow;
@@ -140,6 +166,8 @@ export function EmbeddedExtension({ extensionId, slotId, context, className, ini
                 const h = Number(message.height);
                 if (Number.isFinite(h) && h > 0) {
                     setHeight(Math.ceil(h));
+                    // First laid-out height means the content has painted.
+                    fireReady();
                 }
                 return;
             }
@@ -231,6 +259,9 @@ export function EmbeddedExtension({ extensionId, slotId, context, className, ini
     }
     return (_jsxs("div", { className: `relative group/embedded-extension ${className ?? ""}`, children: [_jsx("iframe", { ref: iframeRef, src: iframeSrc, title: extension.name, sandbox: "allow-scripts allow-forms", style: { width: "100%", border: 0, height, display: "block" }, onLoad: () => {
                     iframeRef.current?.contentWindow?.postMessage({ type: "agent-native-slot-context", context: context ?? {} }, "*");
+                    // Fallback readiness signal in case the extension never reports a
+                    // height (e.g. fixed-height content that skips auto-resize).
+                    fireReady();
                 } }, `${extensionId}-${extension.updatedAt ?? ""}`), _jsx(EmbeddedToolMenu, { extensionId: extensionId, slotId: slotId, toolName: extension.name, canDelete: extension.canDelete })] }));
 }
 function EmbeddedToolMenu({ extensionId, slotId, toolName, canDelete, }) {

package/dist/client/extensions/EmbeddedExtension.js.map

@@ -1 +1 @@
-{"version":3,"file":"EmbeddedExtension.js","sourceRoot":"","sources":["../../../src/client/extensions/EmbeddedExtension.tsx"],"names":[],"mappings":";AAAA,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,8BAA8B,EAC9B,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,OAAO,EACP,cAAc,EACd,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,OAAO,EACP,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,iBAAiB,GAGlB,MAAM,oBAAoB,CAAC;AAe5B,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAgBD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,WAAW,EACX,MAAM,EACN,OAAO,EACP,SAAS,EACT,aAAa,GAAG,EAAE,GACK;IACvB,MAAM,SAAS,GAAG,MAAM,CAA2B,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAS,aAAa,CAAC,CAAC;IAC5D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,+EAA+E;IAC/E,oDAAoD;IACpD,MAAM,gBAAgB,GAAG,MAAM,CAAsB;QACnD,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,0EAA0E;IAC1E,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAExC,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE;YACzC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE;YACzC,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,CAAC,OAAO,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;IACrC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,EACJ,IAAI,EAAE,SAAS,EACf,UAAU,EACV,SAAS,GACV,GAAG,QAAQ,CAAY;QACtB,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QACpC,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,eAAe,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAC5D,CAAC;YACF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,kBAAkB,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QACD,KAAK,EAAE,wBAAwB;QAC/B,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,EAAE,IAAI,CAAC;KAC7D,CAAC,CAAC;IAEH,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE;QAC7B,MAAM,CAAC,GAAG,kBAAkB,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,eAAe,CACpB,6BAA6B,WAAW,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,SAAS,cAAc,CAAC,OAAO,MAAM,CAAC,EAAE,CAC3H,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAEhD,uEAAuE;IACvE,2EAA2E;IAC3E,2BAA2B;IAC3B,SAAS,CAAC,GAAG,EAAE;QACb,gBAAgB,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC/D,iBAAiB,CAAC,OAAO,GAAG,KAAK,CAAC;IACpC,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAExC,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,GAAG,CAAC,WAAW,CACb,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,EAC7D,GAAG,CACJ,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,8CAA8C;IAC9C,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,aAAa,GAAG,KAAK,EAAE,KAAmB,EAAE,EAAE;YAClD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,EAAE,aAAa;gBAAE,OAAO;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;YAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO;YAEpD,IAAI,OAAO,CAAC,IAAI,KAAK,gCAAgC,EAAE,CAAC;gBACtD,qEAAqE;gBACrE,oEAAoE;gBACpE,uEAAuE;gBACvE,IAAI,iBAAiB,CAAC,OAAO;oBAAE,OAAO;gBACtC,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACjC,MAAM,OAAO,GAAI,OAAe,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC/C,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,OAAO;oBACxB,OAAO,CAAC,IAAI,KAAK,OAAO;oBACxB,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACzB,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACvB,CAAC,CAAC,OAAO,CAAC,IAAI;oBACd,CAAC,CAAC,QAAQ,CAAC;gBACf,gBAAgB,CAAC,OAAO,GAAG;oBACzB,IAAI;oBACJ,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU;oBACrE,WAAW,EACT,OAAO,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;wBAChD,CAAC,CAAC,OAAO,CAAC,WAAW;wBACrB,CAAC,CAAC,SAAS;iBAChB,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;gBACrD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1B,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBACjD,MAAM,IAAI,GAAG,kBAAkB,CAAE,OAAe,CAAC,OAAO,CAAC,CAAC;gBAC1D,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;oBAAE,OAAO;gBAC1B,eAAe,CAAC;oBACd,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,kBAAkB,CAAE,OAAe,CAAC,OAAO,CAAC;oBACrD,MAAM,EAAG,OAAe,CAAC,MAAM,KAAK,KAAK;oBACzC,WAAW,EAAG,OAAe,CAAC,WAAW,KAAK,KAAK;iBACpD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,gCAAgC;gBAAE,OAAO;YAE9D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,CAAC,OAAgC,EAAE,EAAE;gBACnD,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAC3C,EAAE,IAAI,EAAE,iCAAiC,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,EAClE,GAAG,CACJ,CAAC;YACJ,CAAC,CAAC;YAEF,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC7D,OAAO,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,+BAA+B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACjE,0EAA0E;gBAC1E,oEAAoE;gBACpE,sDAAsD;gBACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE;oBAC9D,GAAG,gBAAgB,CAAC,OAAO;oBAC3B,WAAW;iBACZ,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,OAAO,CAAC;wBACN,QAAQ,EAAE;4BACR,EAAE,EAAE,KAAK;4BACT,MAAM,EAAE,GAAG;4BACX,UAAU,EAAE,WAAW;4BACvB,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;yBAC9B;qBACF,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,+EAA+E;gBAC/E,kEAAkE;gBAClE,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;gBAC/D,YAAY,CAAC,GAAG,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;gBACzD,YAAY,CAAC,GAAG,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;gBAC7D,YAAY,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;gBACpD,YAAY,CAAC,GAAG,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE;oBAC7C,GAAG,OAAO;oBACV,OAAO,EAAE,YAAY;oBACrB,WAAW,EAAE,aAAa;iBAC3B,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;gBACzB,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC;wBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC1B,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,GAAG,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC;oBACN,QAAQ,EAAE;wBACR,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,IAAI;qBACL;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,+BAA+B,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAClD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,CACL,cACE,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,eACtB,MAAM,GAChB,CACH,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAE,qCAAqC,SAAS,IAAI,EAAE,EAAE,aACpE,iBACE,GAAG,EAAE,SAAS,EAEd,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,SAAS,CAAC,IAAI,EACrB,OAAO,EAAC,2BAA2B,EACnC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAC7D,MAAM,EAAE,GAAG,EAAE;oBACX,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAC3C,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,EAC7D,GAAG,CACJ,CAAC;gBACJ,CAAC,IAVI,GAAG,WAAW,IAAI,SAAS,CAAC,SAAS,IAAI,EAAE,EAAE,CAWlD,EACF,KAAC,gBAAgB,IACf,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,SAAS,CAAC,IAAI,EACxB,SAAS,EAAE,SAAS,CAAC,SAAS,GAC9B,IACE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,EACxB,WAAW,EACX,MAAM,EACN,QAAQ,EACR,SAAS,GAMV;IACC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,OAAO,CAAC,KAAK,CAAC,CAAC;QACf,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,SAAS,EAAE,CAAC;QACZ,WAAW,CAAC,YAAY,CAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CACjE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CACzD,CAAC;QACF,IAAI,CAAC;YACH,MAAM,KAAK,CACT,eAAe,CACb,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAChG,EACD,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;QACjC,SAAS,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5D,0BAA0B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,OAAO,IACN,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;YAClB,OAAO,CAAC,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,CAAC;gBAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,aAED,KAAC,eAAe,IAAC,aAAa,EAAE,GAAG,YACjC,MAAC,OAAO,eACN,KAAC,cAAc,IAAC,OAAO,kBACrB,KAAC,cAAc,IAAC,OAAO,kBACrB,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,qQAAqQ,gBACnQ,CAAC,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,YAE1D,KAAC,QAAQ,IAAC,SAAS,EAAC,aAAa,GAAG,GAC7B,GACM,GACF,EACjB,KAAC,cAAc,cACZ,CAAC,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAChC,IACT,GACM,EAClB,KAAC,cAAc,IAAC,KAAK,EAAC,KAAK,EAAC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAC,UAAU,YAC5D,CAAC,gBAAgB,CAAC,CAAC,CAAC,CACnB,eAAK,SAAS,EAAC,eAAe,aAC5B,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;gCACZ,SAAS,EAAE,CAAC;gCACZ,QAAQ,CAAC,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;4BACjD,CAAC,EACD,SAAS,EAAC,qGAAqG,aAE/G,KAAC,gBAAgB,IAAC,SAAS,EAAC,aAAa,GAAG,EAC5C,yBAAO,CAAC,CAAC,yBAAyB,CAAC,GAAQ,IACpC,EACT,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,cAAc,EACvB,SAAS,EAAC,qGAAqG,aAE/G,KAAC,8BAA8B,IAAC,SAAS,EAAC,aAAa,GAAG,EAC1D,yBAAO,CAAC,CAAC,iCAAiC,CAAC,GAAQ,IAC5C,EACR,SAAS,KAAK,KAAK,IAAI,CACtB,8BACE,cAAK,SAAS,EAAC,wBAAwB,GAAG,EAC1C,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EACxC,SAAS,EAAC,8HAA8H,aAExI,KAAC,SAAS,IAAC,SAAS,EAAC,aAAa,GAAG,EACrC,yBAAO,CAAC,CAAC,oCAAoC,CAAC,GAAQ,IAC/C,IACR,CACJ,IACG,CACP,CAAC,CAAC,CAAC,CACF,eAAK,SAAS,EAAC,yBAAyB,aACtC,aAAG,SAAS,EAAC,aAAa,aACvB,CAAC,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EACvD,CAAC,CAAC,yCAAyC,CAAC,IAC3C,EACJ,eAAK,SAAS,EAAC,wBAAwB,aACrC,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,EACzC,SAAS,EAAC,iEAAiE,YAE1E,CAAC,CAAC,mBAAmB,CAAC,GAChB,EACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,eAAe,EACxB,SAAS,EAAC,oHAAoH,YAE7H,CAAC,CAAC,mBAAmB,CAAC,GAChB,IACL,IACF,CACP,GACc,IACT,CACX,CAAC;AACJ,CAAC","sourcesContent":["import {\n  IconDots,\n  IconExternalLink,\n  IconLayoutSidebarRightCollapse,\n  IconTrash,\n} from \"@tabler/icons-react\";\nimport { useQuery, useQueryClient } from \"@tanstack/react-query\";\nimport { useEffect, useMemo, useRef, useState } from \"react\";\nimport { useNavigate } from \"react-router\";\n\nimport { extensionPath } from \"../../extensions/path.js\";\nimport { sendToAgentChat } from \"../agent-chat.js\";\nimport { agentNativePath } from \"../api-path.js\";\nimport {\n  Popover,\n  PopoverContent,\n  PopoverTrigger,\n} from \"../components/ui/popover.js\";\nimport {\n  Tooltip,\n  TooltipContent,\n  TooltipProvider,\n  TooltipTrigger,\n} from \"../components/ui/tooltip.js\";\nimport { useT } from \"../i18n.js\";\nimport {\n  deleteOrHideExtension,\n  invalidateExtensionRemoval,\n} from \"./delete-extension.js\";\nimport {\n  extensionLoadError,\n  shouldRetryExtensionLoad,\n} from \"./extension-load-error.js\";\nimport {\n  isAllowedExtensionPath,\n  sanitizeExtensionRequestOptions,\n  checkBridgePolicy,\n  type BridgePolicyContext,\n  type ExtensionBridgeRole,\n} from \"./iframe-bridge.js\";\n\ninterface Extension {\n  id: string;\n  name: string;\n  description?: string;\n  content?: string;\n  updatedAt?: string;\n  canDelete?: boolean;\n  source?: {\n    mode?: \"database\" | \"local-files\";\n    permissions?: BridgePolicyContext[\"permissions\"];\n  };\n}\n\nfunction serializeChatValue(value: unknown): string | undefined {\n  if (value === undefined || value === null) return undefined;\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nexport interface EmbeddedExtensionProps {\n  extensionId: string;\n  /** Slot identifier passed via the iframe URL so the extension runtime knows it's\n   * embedded and enables auto-resize. */\n  slotId: string;\n  /** Object pushed into the extension as `window.slotContext`. Re-posted whenever\n   * the host re-renders with a new context. */\n  context?: Record<string, unknown> | null;\n  /** Optional className applied to the iframe container. */\n  className?: string;\n  /** Initial iframe height before content reports a real height. */\n  initialHeight?: number;\n}\n\n/**\n * Renders a extension inline as a small auto-sized iframe — for use inside an\n * `<ExtensionSlot>`. Different from `<ExtensionViewer>` (which is full-page with a\n * toolbar): no header, sized to content, receives a `slotContext`.\n */\nexport function EmbeddedExtension({\n  extensionId,\n  slotId,\n  context,\n  className,\n  initialHeight = 80,\n}: EmbeddedExtensionProps) {\n  const iframeRef = useRef<HTMLIFrameElement | null>(null);\n  const [height, setHeight] = useState<number>(initialHeight);\n  const [isDark, setIsDark] = useState(false);\n  // (audit H4) Mirror ExtensionViewer's role-aware gating; deny-by-default until\n  // the iframe's render binding announcement arrives.\n  const bridgeContextRef = useRef<BridgePolicyContext>({\n    role: \"viewer\",\n    isAuthor: false,\n  });\n  // (audit H4) Latch the render binding once per iframe instance. The shell\n  // posts the server-resolved binding BEFORE user content runs; any later\n  // agent-native-extension-binding message is attacker-controllable (it\n  // originates inside the same sandboxed realm as user code) and must be\n  // ignored so a viewer cannot self-escalate to owner.\n  const bindingLatchedRef = useRef(false);\n\n  useEffect(() => {\n    setIsDark(document.documentElement.classList.contains(\"dark\"));\n    const observer = new MutationObserver(() => {\n      setIsDark(document.documentElement.classList.contains(\"dark\"));\n    });\n    observer.observe(document.documentElement, {\n      attributes: true,\n      attributeFilter: [\"class\"],\n    });\n    return () => observer.disconnect();\n  }, []);\n\n  const {\n    data: extension,\n    isFetching,\n    isLoading,\n  } = useQuery<Extension>({\n    queryKey: [\"extension\", extensionId],\n    queryFn: async () => {\n      const res = await fetch(\n        agentNativePath(`/_agent-native/extensions/${extensionId}`),\n      );\n      if (res.status === 404) {\n        throw extensionLoadError(404, \"Extension not found\");\n      }\n      if (res.status === 403) {\n        throw extensionLoadError(403, \"Extension access denied\");\n      }\n      if (!res.ok) {\n        throw extensionLoadError(res.status, \"Failed to fetch extension\");\n      }\n      return res.json();\n    },\n    retry: shouldRetryExtensionLoad,\n    retryDelay: (attempt) => Math.min(1000 * 2 ** attempt, 4000),\n  });\n\n  // Initial dark state is baked into the URL on first load only; subsequent\n  // theme toggles update the iframe's <html class=\"dark\"> via postMessage so\n  // the user's interaction state inside the extension survives the toggle.\n  const initialDarkRef = useRef(isDark);\n  const iframeSrc = useMemo(() => {\n    const v = encodeURIComponent(extension?.updatedAt ?? \"\");\n    return agentNativePath(\n      `/_agent-native/extensions/${extensionId}/render?slot=${encodeURIComponent(slotId)}&dark=${initialDarkRef.current}&v=${v}`,\n    );\n  }, [extensionId, slotId, extension?.updatedAt]);\n\n  // Reset role + binding latch to deny-by-default whenever the iframe is\n  // recreated (its key changes). The new render's first binding announcement\n  // re-establishes the role.\n  useEffect(() => {\n    bridgeContextRef.current = { role: \"viewer\", isAuthor: false };\n    bindingLatchedRef.current = false;\n  }, [extensionId, extension?.updatedAt]);\n\n  useEffect(() => {\n    const win = iframeRef.current?.contentWindow;\n    if (!win) return;\n    win.postMessage({ type: \"agent-native-theme-update\", isDark }, \"*\");\n  }, [isDark]);\n\n  // Forward slot context whenever it changes. The iframe's own load handler\n  // posts the initial value once it's ready; this effect handles updates.\n  const contextJson = JSON.stringify(context ?? {});\n  useEffect(() => {\n    const win = iframeRef.current?.contentWindow;\n    if (!win) return;\n    win.postMessage(\n      { type: \"agent-native-slot-context\", context: context ?? {} },\n      \"*\",\n    );\n  }, [contextJson]);\n\n  // Bridge extension requests + height reports.\n  useEffect(() => {\n    const handleMessage = async (event: MessageEvent) => {\n      if (event.source !== iframeRef.current?.contentWindow) return;\n      const message = event.data;\n      if (!message || typeof message !== \"object\") return;\n\n      if (message.type === \"agent-native-extension-binding\") {\n        // Only the FIRST announcement (sent by the shell before user content\n        // runs) is trusted. Ignore re-announcements — a malicious extension\n        // body could otherwise postMessage a forged owner binding to escalate.\n        if (bindingLatchedRef.current) return;\n        bindingLatchedRef.current = true;\n        const binding = (message as any).binding ?? {};\n        const role: ExtensionBridgeRole =\n          binding.role === \"owner\" ||\n          binding.role === \"admin\" ||\n          binding.role === \"editor\" ||\n          binding.role === \"viewer\"\n            ? binding.role\n            : \"viewer\";\n        bridgeContextRef.current = {\n          role,\n          isAuthor: !!binding.isAuthor,\n          source: binding.source === \"local-files\" ? \"local-files\" : \"database\",\n          permissions:\n            binding && typeof binding.permissions === \"object\"\n              ? binding.permissions\n              : undefined,\n        };\n        return;\n      }\n\n      if (message.type === \"agent-native-extension-resize\") {\n        const h = Number(message.height);\n        if (Number.isFinite(h) && h > 0) {\n          setHeight(Math.ceil(h));\n        }\n        return;\n      }\n\n      if (message.type === \"agent-native-send-to-chat\") {\n        const text = serializeChatValue((message as any).message);\n        if (!text?.trim()) return;\n        sendToAgentChat({\n          message: text,\n          context: serializeChatValue((message as any).context),\n          submit: (message as any).submit !== false,\n          openSidebar: (message as any).openSidebar !== false,\n        });\n        return;\n      }\n\n      if (message.type !== \"agent-native-extension-request\") return;\n\n      const requestId = String(message.requestId ?? \"\");\n      const path = String(message.path ?? \"\");\n      const respond = (payload: Record<string, unknown>) => {\n        iframeRef.current?.contentWindow?.postMessage(\n          { type: \"agent-native-extension-response\", requestId, ...payload },\n          \"*\",\n        );\n      };\n\n      if (!requestId || !isAllowedExtensionPath(path, extensionId)) {\n        respond({ error: \"Extension request path is not allowed\" });\n        return;\n      }\n\n      try {\n        const options = sanitizeExtensionRequestOptions(message.options);\n        // (audit H4) Role-aware gating: viewer-shared extensions can read but not\n        // write. The bridge policy is decided here in the parent before the\n        // request leaves; the server enforces a second layer.\n        const policy = checkBridgePolicy(path, options.method ?? \"GET\", {\n          ...bridgeContextRef.current,\n          extensionId,\n        });\n        if (!policy.ok) {\n          respond({\n            response: {\n              ok: false,\n              status: 403,\n              statusText: \"Forbidden\",\n              body: { error: policy.error },\n            },\n          });\n          return;\n        }\n        // (audit H5) Same extension-bridge tagging as <ExtensionViewer>. action-routes\n        // uses these headers to enforce per-action `toolCallable` opt-in.\n        const finalHeaders = new Headers(options.headers ?? undefined);\n        finalHeaders.set(\"X-Agent-Native-Extension-Bridge\", \"1\");\n        finalHeaders.set(\"X-Agent-Native-Extension-Id\", extensionId);\n        finalHeaders.set(\"X-Agent-Native-Tool-Bridge\", \"1\");\n        finalHeaders.set(\"X-Agent-Native-Tool-Id\", extensionId);\n        const res = await fetch(agentNativePath(path), {\n          ...options,\n          headers: finalHeaders,\n          credentials: \"same-origin\",\n        });\n        const text = await res.text();\n        let body: unknown = text;\n        if (text) {\n          try {\n            body = JSON.parse(text);\n          } catch {\n            body = text;\n          }\n        }\n        respond({\n          response: {\n            ok: res.ok,\n            status: res.status,\n            statusText: res.statusText,\n            body,\n          },\n        });\n      } catch (err: any) {\n        respond({ error: err?.message ?? \"Extension host request failed\" });\n      }\n    };\n\n    window.addEventListener(\"message\", handleMessage);\n    return () => window.removeEventListener(\"message\", handleMessage);\n  }, [extensionId]);\n\n  if (!extension) {\n    if (!isLoading && !isFetching) return null;\n    return (\n      <div\n        className={className}\n        style={{ height: initialHeight }}\n        aria-busy=\"true\"\n      />\n    );\n  }\n\n  return (\n    <div className={`relative group/embedded-extension ${className ?? \"\"}`}>\n      <iframe\n        ref={iframeRef}\n        key={`${extensionId}-${extension.updatedAt ?? \"\"}`}\n        src={iframeSrc}\n        title={extension.name}\n        sandbox=\"allow-scripts allow-forms\"\n        style={{ width: \"100%\", border: 0, height, display: \"block\" }}\n        onLoad={() => {\n          iframeRef.current?.contentWindow?.postMessage(\n            { type: \"agent-native-slot-context\", context: context ?? {} },\n            \"*\",\n          );\n        }}\n      />\n      <EmbeddedToolMenu\n        extensionId={extensionId}\n        slotId={slotId}\n        toolName={extension.name}\n        canDelete={extension.canDelete}\n      />\n    </div>\n  );\n}\n\nfunction EmbeddedToolMenu({\n  extensionId,\n  slotId,\n  toolName,\n  canDelete,\n}: {\n  extensionId: string;\n  slotId: string;\n  toolName: string;\n  canDelete?: boolean;\n}) {\n  const t = useT();\n  const [open, setOpen] = useState(false);\n  const [confirmingDelete, setConfirmingDelete] = useState(false);\n  const queryClient = useQueryClient();\n  const navigate = useNavigate();\n\n  const closeMenu = () => {\n    setOpen(false);\n    setConfirmingDelete(false);\n  };\n\n  const removeFromSlot = async () => {\n    closeMenu();\n    queryClient.setQueryData<any[]>([\"slot-installs\", slotId], (old) =>\n      (old ?? []).filter((i) => i.extensionId !== extensionId),\n    );\n    try {\n      await fetch(\n        agentNativePath(\n          `/_agent-native/slots/${encodeURIComponent(slotId)}/install/${encodeURIComponent(extensionId)}`,\n        ),\n        { method: \"DELETE\" },\n      );\n    } finally {\n      queryClient.invalidateQueries({ queryKey: [\"slot-installs\", slotId] });\n    }\n  };\n\n  const deleteExtension = async () => {\n    closeMenu();\n    try {\n      await deleteOrHideExtension({ id: extensionId, canDelete });\n      invalidateExtensionRemoval(queryClient, extensionId);\n    } catch {\n      queryClient.invalidateQueries({ queryKey: [\"extension\", extensionId] });\n    }\n  };\n\n  return (\n    <Popover\n      open={open}\n      onOpenChange={(o) => {\n        setOpen(o);\n        if (!o) setConfirmingDelete(false);\n      }}\n    >\n      <TooltipProvider delayDuration={200}>\n        <Tooltip>\n          <TooltipTrigger asChild>\n            <PopoverTrigger asChild>\n              <button\n                type=\"button\"\n                className=\"absolute top-1 right-1 flex h-6 w-6 items-center justify-center rounded-md bg-background/60 text-muted-foreground/60 opacity-0 hover:bg-accent hover:text-foreground hover:opacity-100 group-hover/embedded-extension:opacity-100 cursor-pointer transition-opacity\"\n                aria-label={t(\"extensions.optionsFor\", { name: toolName })}\n              >\n                <IconDots className=\"h-3.5 w-3.5\" />\n              </button>\n            </PopoverTrigger>\n          </TooltipTrigger>\n          <TooltipContent>\n            {t(\"extensions.optionsFor\", { name: toolName })}\n          </TooltipContent>\n        </Tooltip>\n      </TooltipProvider>\n      <PopoverContent align=\"end\" sideOffset={4} className=\"w-56 p-1\">\n        {!confirmingDelete ? (\n          <div className=\"flex flex-col\">\n            <button\n              type=\"button\"\n              onClick={() => {\n                closeMenu();\n                navigate(extensionPath(extensionId, toolName));\n              }}\n              className=\"flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] hover:bg-accent cursor-pointer text-left\"\n            >\n              <IconExternalLink className=\"h-3.5 w-3.5\" />\n              <span>{t(\"extensions.openFullView\")}</span>\n            </button>\n            <button\n              type=\"button\"\n              onClick={removeFromSlot}\n              className=\"flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] hover:bg-accent cursor-pointer text-left\"\n            >\n              <IconLayoutSidebarRightCollapse className=\"h-3.5 w-3.5\" />\n              <span>{t(\"extensions.removeFromWidgetArea\")}</span>\n            </button>\n            {canDelete !== false && (\n              <>\n                <div className=\"my-1 h-px bg-border/40\" />\n                <button\n                  type=\"button\"\n                  onClick={() => setConfirmingDelete(true)}\n                  className=\"flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] text-destructive hover:bg-destructive/10 cursor-pointer text-left\"\n                >\n                  <IconTrash className=\"h-3.5 w-3.5\" />\n                  <span>{t(\"extensions.deleteExtensionEllipsis\")}</span>\n                </button>\n              </>\n            )}\n          </div>\n        ) : (\n          <div className=\"flex flex-col gap-2 p-2\">\n            <p className=\"text-[12px]\">\n              {t(\"extensions.deleteQuestion\", { name: toolName })}{\" \"}\n              {t(\"extensions.deleteEverywhereConfirmation\")}\n            </p>\n            <div className=\"flex justify-end gap-1\">\n              <button\n                type=\"button\"\n                onClick={() => setConfirmingDelete(false)}\n                className=\"rounded-md px-2 py-1 text-[12px] hover:bg-accent cursor-pointer\"\n              >\n                {t(\"extensions.cancel\")}\n              </button>\n              <button\n                type=\"button\"\n                onClick={deleteExtension}\n                className=\"rounded-md bg-destructive px-2 py-1 text-[12px] text-destructive-foreground hover:bg-destructive/90 cursor-pointer\"\n              >\n                {t(\"extensions.delete\")}\n              </button>\n            </div>\n          </div>\n        )}\n      </PopoverContent>\n    </Popover>\n  );\n}\n"]}
+{"version":3,"file":"EmbeddedExtension.js","sourceRoot":"","sources":["../../../src/client/extensions/EmbeddedExtension.tsx"],"names":[],"mappings":";AAAA,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,8BAA8B,EAC9B,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,OAAO,EACP,cAAc,EACd,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,OAAO,EACP,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,iBAAiB,GAGlB,MAAM,oBAAoB,CAAC;AAe5B,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAyBD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,WAAW,EACX,MAAM,EACN,OAAO,EACP,SAAS,EACT,aAAa,GAAG,EAAE,EAClB,OAAO,EACP,aAAa,GACU;IACvB,MAAM,SAAS,GAAG,MAAM,CAA2B,IAAI,CAAC,CAAC;IACzD,sEAAsE;IACtE,+EAA+E;IAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAC7B,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,IAAI,aAAa,CAAC,OAAO;YAAE,OAAO;QAClC,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;IACzB,CAAC,CAAC;IACF,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAS,aAAa,CAAC,CAAC;IAC5D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,+EAA+E;IAC/E,oDAAoD;IACpD,MAAM,gBAAgB,GAAG,MAAM,CAAsB;QACnD,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,0EAA0E;IAC1E,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAExC,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE;YACzC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE;YACzC,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,CAAC,OAAO,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;IACrC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,EACJ,IAAI,EAAE,SAAS,EACf,UAAU,EACV,SAAS,EACT,OAAO,EACP,KAAK,GACN,GAAG,QAAQ,CAAY;QACtB,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QACpC,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,eAAe,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAC5D,CAAC;YACF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,kBAAkB,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QACD,KAAK,EAAE,wBAAwB;QAC/B,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,EAAE,IAAI,CAAC;KAC7D,CAAC,CAAC;IAEH,6EAA6E;IAC7E,mDAAmD;IACnD,MAAM,gBAAgB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/C,gBAAgB,CAAC,OAAO,GAAG,aAAa,CAAC;IACzC,MAAM,mBAAmB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,SAAS,CAAC,GAAG,EAAE;QACb,mBAAmB,CAAC,OAAO,GAAG,KAAK,CAAC;IACtC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAClB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,IAAI,CAAC,UAAU,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;YAC3D,mBAAmB,CAAC,OAAO,GAAG,IAAI,CAAC;YACnC,gBAAgB,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAEjC,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE;QAC7B,MAAM,CAAC,GAAG,kBAAkB,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,eAAe,CACpB,6BAA6B,WAAW,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,SAAS,cAAc,CAAC,OAAO,MAAM,CAAC,EAAE,CAC3H,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAEhD,uEAAuE;IACvE,2EAA2E;IAC3E,2BAA2B;IAC3B,SAAS,CAAC,GAAG,EAAE;QACb,gBAAgB,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC/D,iBAAiB,CAAC,OAAO,GAAG,KAAK,CAAC;QAClC,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC;IAChC,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAExC,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,GAAG,CAAC,WAAW,CACb,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,EAC7D,GAAG,CACJ,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,8CAA8C;IAC9C,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,aAAa,GAAG,KAAK,EAAE,KAAmB,EAAE,EAAE;YAClD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,EAAE,aAAa;gBAAE,OAAO;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;YAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO;YAEpD,IAAI,OAAO,CAAC,IAAI,KAAK,gCAAgC,EAAE,CAAC;gBACtD,qEAAqE;gBACrE,oEAAoE;gBACpE,uEAAuE;gBACvE,IAAI,iBAAiB,CAAC,OAAO;oBAAE,OAAO;gBACtC,iBAAiB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACjC,MAAM,OAAO,GAAI,OAAe,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC/C,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,OAAO;oBACxB,OAAO,CAAC,IAAI,KAAK,OAAO;oBACxB,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACzB,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACvB,CAAC,CAAC,OAAO,CAAC,IAAI;oBACd,CAAC,CAAC,QAAQ,CAAC;gBACf,gBAAgB,CAAC,OAAO,GAAG;oBACzB,IAAI;oBACJ,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU;oBACrE,WAAW,EACT,OAAO,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;wBAChD,CAAC,CAAC,OAAO,CAAC,WAAW;wBACrB,CAAC,CAAC,SAAS;iBAChB,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;gBACrD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;oBACxB,uDAAuD;oBACvD,SAAS,EAAE,CAAC;gBACd,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBACjD,MAAM,IAAI,GAAG,kBAAkB,CAAE,OAAe,CAAC,OAAO,CAAC,CAAC;gBAC1D,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;oBAAE,OAAO;gBAC1B,eAAe,CAAC;oBACd,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,kBAAkB,CAAE,OAAe,CAAC,OAAO,CAAC;oBACrD,MAAM,EAAG,OAAe,CAAC,MAAM,KAAK,KAAK;oBACzC,WAAW,EAAG,OAAe,CAAC,WAAW,KAAK,KAAK;iBACpD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,gCAAgC;gBAAE,OAAO;YAE9D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,CAAC,OAAgC,EAAE,EAAE;gBACnD,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAC3C,EAAE,IAAI,EAAE,iCAAiC,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,EAClE,GAAG,CACJ,CAAC;YACJ,CAAC,CAAC;YAEF,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC7D,OAAO,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,+BAA+B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACjE,0EAA0E;gBAC1E,oEAAoE;gBACpE,sDAAsD;gBACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE;oBAC9D,GAAG,gBAAgB,CAAC,OAAO;oBAC3B,WAAW;iBACZ,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,OAAO,CAAC;wBACN,QAAQ,EAAE;4BACR,EAAE,EAAE,KAAK;4BACT,MAAM,EAAE,GAAG;4BACX,UAAU,EAAE,WAAW;4BACvB,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;yBAC9B;qBACF,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,+EAA+E;gBAC/E,kEAAkE;gBAClE,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;gBAC/D,YAAY,CAAC,GAAG,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;gBACzD,YAAY,CAAC,GAAG,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;gBAC7D,YAAY,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;gBACpD,YAAY,CAAC,GAAG,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE;oBAC7C,GAAG,OAAO;oBACV,OAAO,EAAE,YAAY;oBACrB,WAAW,EAAE,aAAa;iBAC3B,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;gBACzB,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC;wBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC1B,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,GAAG,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC;oBACN,QAAQ,EAAE;wBACR,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,IAAI;qBACL;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,+BAA+B,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAClD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,CACL,cACE,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,eACtB,MAAM,GAChB,CACH,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAE,qCAAqC,SAAS,IAAI,EAAE,EAAE,aACpE,iBACE,GAAG,EAAE,SAAS,EAEd,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,SAAS,CAAC,IAAI,EACrB,OAAO,EAAC,2BAA2B,EACnC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAC7D,MAAM,EAAE,GAAG,EAAE;oBACX,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAC3C,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,EAC7D,GAAG,CACJ,CAAC;oBACF,kEAAkE;oBAClE,6DAA6D;oBAC7D,SAAS,EAAE,CAAC;gBACd,CAAC,IAbI,GAAG,WAAW,IAAI,SAAS,CAAC,SAAS,IAAI,EAAE,EAAE,CAclD,EACF,KAAC,gBAAgB,IACf,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,SAAS,CAAC,IAAI,EACxB,SAAS,EAAE,SAAS,CAAC,SAAS,GAC9B,IACE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,EACxB,WAAW,EACX,MAAM,EACN,QAAQ,EACR,SAAS,GAMV;IACC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,OAAO,CAAC,KAAK,CAAC,CAAC;QACf,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,SAAS,EAAE,CAAC;QACZ,WAAW,CAAC,YAAY,CAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CACjE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CACzD,CAAC;QACF,IAAI,CAAC;YACH,MAAM,KAAK,CACT,eAAe,CACb,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAChG,EACD,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;QACjC,SAAS,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5D,0BAA0B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,OAAO,IACN,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;YAClB,OAAO,CAAC,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,CAAC;gBAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,aAED,KAAC,eAAe,IAAC,aAAa,EAAE,GAAG,YACjC,MAAC,OAAO,eACN,KAAC,cAAc,IAAC,OAAO,kBACrB,KAAC,cAAc,IAAC,OAAO,kBACrB,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,qQAAqQ,gBACnQ,CAAC,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,YAE1D,KAAC,QAAQ,IAAC,SAAS,EAAC,aAAa,GAAG,GAC7B,GACM,GACF,EACjB,KAAC,cAAc,cACZ,CAAC,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAChC,IACT,GACM,EAClB,KAAC,cAAc,IAAC,KAAK,EAAC,KAAK,EAAC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAC,UAAU,YAC5D,CAAC,gBAAgB,CAAC,CAAC,CAAC,CACnB,eAAK,SAAS,EAAC,eAAe,aAC5B,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;gCACZ,SAAS,EAAE,CAAC;gCACZ,QAAQ,CAAC,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;4BACjD,CAAC,EACD,SAAS,EAAC,qGAAqG,aAE/G,KAAC,gBAAgB,IAAC,SAAS,EAAC,aAAa,GAAG,EAC5C,yBAAO,CAAC,CAAC,yBAAyB,CAAC,GAAQ,IACpC,EACT,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,cAAc,EACvB,SAAS,EAAC,qGAAqG,aAE/G,KAAC,8BAA8B,IAAC,SAAS,EAAC,aAAa,GAAG,EAC1D,yBAAO,CAAC,CAAC,iCAAiC,CAAC,GAAQ,IAC5C,EACR,SAAS,KAAK,KAAK,IAAI,CACtB,8BACE,cAAK,SAAS,EAAC,wBAAwB,GAAG,EAC1C,kBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EACxC,SAAS,EAAC,8HAA8H,aAExI,KAAC,SAAS,IAAC,SAAS,EAAC,aAAa,GAAG,EACrC,yBAAO,CAAC,CAAC,oCAAoC,CAAC,GAAQ,IAC/C,IACR,CACJ,IACG,CACP,CAAC,CAAC,CAAC,CACF,eAAK,SAAS,EAAC,yBAAyB,aACtC,aAAG,SAAS,EAAC,aAAa,aACvB,CAAC,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EACvD,CAAC,CAAC,yCAAyC,CAAC,IAC3C,EACJ,eAAK,SAAS,EAAC,wBAAwB,aACrC,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,EACzC,SAAS,EAAC,iEAAiE,YAE1E,CAAC,CAAC,mBAAmB,CAAC,GAChB,EACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,eAAe,EACxB,SAAS,EAAC,oHAAoH,YAE7H,CAAC,CAAC,mBAAmB,CAAC,GAChB,IACL,IACF,CACP,GACc,IACT,CACX,CAAC;AACJ,CAAC","sourcesContent":["import {\n  IconDots,\n  IconExternalLink,\n  IconLayoutSidebarRightCollapse,\n  IconTrash,\n} from \"@tabler/icons-react\";\nimport { useQuery, useQueryClient } from \"@tanstack/react-query\";\nimport { useEffect, useMemo, useRef, useState } from \"react\";\nimport { useNavigate } from \"react-router\";\n\nimport { extensionPath } from \"../../extensions/path.js\";\nimport { sendToAgentChat } from \"../agent-chat.js\";\nimport { agentNativePath } from \"../api-path.js\";\nimport {\n  Popover,\n  PopoverContent,\n  PopoverTrigger,\n} from \"../components/ui/popover.js\";\nimport {\n  Tooltip,\n  TooltipContent,\n  TooltipProvider,\n  TooltipTrigger,\n} from \"../components/ui/tooltip.js\";\nimport { useT } from \"../i18n.js\";\nimport {\n  deleteOrHideExtension,\n  invalidateExtensionRemoval,\n} from \"./delete-extension.js\";\nimport {\n  extensionLoadError,\n  extensionLoadErrorStatus,\n  shouldRetryExtensionLoad,\n} from \"./extension-load-error.js\";\nimport {\n  isAllowedExtensionPath,\n  sanitizeExtensionRequestOptions,\n  checkBridgePolicy,\n  type BridgePolicyContext,\n  type ExtensionBridgeRole,\n} from \"./iframe-bridge.js\";\n\ninterface Extension {\n  id: string;\n  name: string;\n  description?: string;\n  content?: string;\n  updatedAt?: string;\n  canDelete?: boolean;\n  source?: {\n    mode?: \"database\" | \"local-files\";\n    permissions?: BridgePolicyContext[\"permissions\"];\n  };\n}\n\nfunction serializeChatValue(value: unknown): string | undefined {\n  if (value === undefined || value === null) return undefined;\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nexport interface EmbeddedExtensionProps {\n  extensionId: string;\n  /** Slot identifier passed via the iframe URL so the extension runtime knows it's\n   * embedded and enables auto-resize. */\n  slotId: string;\n  /** Object pushed into the extension as `window.slotContext`. Re-posted whenever\n   * the host re-renders with a new context. */\n  context?: Record<string, unknown> | null;\n  /** Optional className applied to the iframe container. */\n  className?: string;\n  /** Initial iframe height before content reports a real height. */\n  initialHeight?: number;\n  /** Fires once when the embedded iframe first signals content readiness — its\n   * first height report, or iframe load as a fallback. Hosts that gate on\n   * content paint (e.g. dashboard report screenshots) use this. */\n  onReady?: () => void;\n  /** Fires when the extension can't be loaded for this viewer (e.g. 403/404 —\n   * the extension isn't shared with them or no longer exists). Hosts can use\n   * this to render an explanatory fallback instead of a blank panel. By default\n   * the component renders nothing on failure (slot-style silent skip). */\n  onUnavailable?: (status?: number) => void;\n}\n\n/**\n * Renders a extension inline as a small auto-sized iframe — for use inside an\n * `<ExtensionSlot>`. Different from `<ExtensionViewer>` (which is full-page with a\n * toolbar): no header, sized to content, receives a `slotContext`.\n */\nexport function EmbeddedExtension({\n  extensionId,\n  slotId,\n  context,\n  className,\n  initialHeight = 80,\n  onReady,\n  onUnavailable,\n}: EmbeddedExtensionProps) {\n  const iframeRef = useRef<HTMLIFrameElement | null>(null);\n  // Latch the readiness signal so onReady fires at most once per iframe\n  // instance. Reset when the iframe is recreated (extensionId/updatedAt change).\n  const onReadyRef = useRef(onReady);\n  onReadyRef.current = onReady;\n  const readyFiredRef = useRef(false);\n  const fireReady = () => {\n    if (readyFiredRef.current) return;\n    readyFiredRef.current = true;\n    onReadyRef.current?.();\n  };\n  const [height, setHeight] = useState<number>(initialHeight);\n  const [isDark, setIsDark] = useState(false);\n  // (audit H4) Mirror ExtensionViewer's role-aware gating; deny-by-default until\n  // the iframe's render binding announcement arrives.\n  const bridgeContextRef = useRef<BridgePolicyContext>({\n    role: \"viewer\",\n    isAuthor: false,\n  });\n  // (audit H4) Latch the render binding once per iframe instance. The shell\n  // posts the server-resolved binding BEFORE user content runs; any later\n  // agent-native-extension-binding message is attacker-controllable (it\n  // originates inside the same sandboxed realm as user code) and must be\n  // ignored so a viewer cannot self-escalate to owner.\n  const bindingLatchedRef = useRef(false);\n\n  useEffect(() => {\n    setIsDark(document.documentElement.classList.contains(\"dark\"));\n    const observer = new MutationObserver(() => {\n      setIsDark(document.documentElement.classList.contains(\"dark\"));\n    });\n    observer.observe(document.documentElement, {\n      attributes: true,\n      attributeFilter: [\"class\"],\n    });\n    return () => observer.disconnect();\n  }, []);\n\n  const {\n    data: extension,\n    isFetching,\n    isLoading,\n    isError,\n    error,\n  } = useQuery<Extension>({\n    queryKey: [\"extension\", extensionId],\n    queryFn: async () => {\n      const res = await fetch(\n        agentNativePath(`/_agent-native/extensions/${extensionId}`),\n      );\n      if (res.status === 404) {\n        throw extensionLoadError(404, \"Extension not found\");\n      }\n      if (res.status === 403) {\n        throw extensionLoadError(403, \"Extension access denied\");\n      }\n      if (!res.ok) {\n        throw extensionLoadError(res.status, \"Failed to fetch extension\");\n      }\n      return res.json();\n    },\n    retry: shouldRetryExtensionLoad,\n    retryDelay: (attempt) => Math.min(1000 * 2 ** attempt, 4000),\n  });\n\n  // Notify the host once when the extension can't be loaded for this viewer so\n  // it can show a fallback instead of a blank panel.\n  const onUnavailableRef = useRef(onUnavailable);\n  onUnavailableRef.current = onUnavailable;\n  const unavailableFiredRef = useRef(false);\n  useEffect(() => {\n    unavailableFiredRef.current = false;\n  }, [extensionId]);\n  useEffect(() => {\n    if (isError && !isFetching && !unavailableFiredRef.current) {\n      unavailableFiredRef.current = true;\n      onUnavailableRef.current?.(extensionLoadErrorStatus(error));\n    }\n  }, [isError, isFetching, error]);\n\n  // Initial dark state is baked into the URL on first load only; subsequent\n  // theme toggles update the iframe's <html class=\"dark\"> via postMessage so\n  // the user's interaction state inside the extension survives the toggle.\n  const initialDarkRef = useRef(isDark);\n  const iframeSrc = useMemo(() => {\n    const v = encodeURIComponent(extension?.updatedAt ?? \"\");\n    return agentNativePath(\n      `/_agent-native/extensions/${extensionId}/render?slot=${encodeURIComponent(slotId)}&dark=${initialDarkRef.current}&v=${v}`,\n    );\n  }, [extensionId, slotId, extension?.updatedAt]);\n\n  // Reset role + binding latch to deny-by-default whenever the iframe is\n  // recreated (its key changes). The new render's first binding announcement\n  // re-establishes the role.\n  useEffect(() => {\n    bridgeContextRef.current = { role: \"viewer\", isAuthor: false };\n    bindingLatchedRef.current = false;\n    readyFiredRef.current = false;\n  }, [extensionId, extension?.updatedAt]);\n\n  useEffect(() => {\n    const win = iframeRef.current?.contentWindow;\n    if (!win) return;\n    win.postMessage({ type: \"agent-native-theme-update\", isDark }, \"*\");\n  }, [isDark]);\n\n  // Forward slot context whenever it changes. The iframe's own load handler\n  // posts the initial value once it's ready; this effect handles updates.\n  const contextJson = JSON.stringify(context ?? {});\n  useEffect(() => {\n    const win = iframeRef.current?.contentWindow;\n    if (!win) return;\n    win.postMessage(\n      { type: \"agent-native-slot-context\", context: context ?? {} },\n      \"*\",\n    );\n  }, [contextJson]);\n\n  // Bridge extension requests + height reports.\n  useEffect(() => {\n    const handleMessage = async (event: MessageEvent) => {\n      if (event.source !== iframeRef.current?.contentWindow) return;\n      const message = event.data;\n      if (!message || typeof message !== \"object\") return;\n\n      if (message.type === \"agent-native-extension-binding\") {\n        // Only the FIRST announcement (sent by the shell before user content\n        // runs) is trusted. Ignore re-announcements — a malicious extension\n        // body could otherwise postMessage a forged owner binding to escalate.\n        if (bindingLatchedRef.current) return;\n        bindingLatchedRef.current = true;\n        const binding = (message as any).binding ?? {};\n        const role: ExtensionBridgeRole =\n          binding.role === \"owner\" ||\n          binding.role === \"admin\" ||\n          binding.role === \"editor\" ||\n          binding.role === \"viewer\"\n            ? binding.role\n            : \"viewer\";\n        bridgeContextRef.current = {\n          role,\n          isAuthor: !!binding.isAuthor,\n          source: binding.source === \"local-files\" ? \"local-files\" : \"database\",\n          permissions:\n            binding && typeof binding.permissions === \"object\"\n              ? binding.permissions\n              : undefined,\n        };\n        return;\n      }\n\n      if (message.type === \"agent-native-extension-resize\") {\n        const h = Number(message.height);\n        if (Number.isFinite(h) && h > 0) {\n          setHeight(Math.ceil(h));\n          // First laid-out height means the content has painted.\n          fireReady();\n        }\n        return;\n      }\n\n      if (message.type === \"agent-native-send-to-chat\") {\n        const text = serializeChatValue((message as any).message);\n        if (!text?.trim()) return;\n        sendToAgentChat({\n          message: text,\n          context: serializeChatValue((message as any).context),\n          submit: (message as any).submit !== false,\n          openSidebar: (message as any).openSidebar !== false,\n        });\n        return;\n      }\n\n      if (message.type !== \"agent-native-extension-request\") return;\n\n      const requestId = String(message.requestId ?? \"\");\n      const path = String(message.path ?? \"\");\n      const respond = (payload: Record<string, unknown>) => {\n        iframeRef.current?.contentWindow?.postMessage(\n          { type: \"agent-native-extension-response\", requestId, ...payload },\n          \"*\",\n        );\n      };\n\n      if (!requestId || !isAllowedExtensionPath(path, extensionId)) {\n        respond({ error: \"Extension request path is not allowed\" });\n        return;\n      }\n\n      try {\n        const options = sanitizeExtensionRequestOptions(message.options);\n        // (audit H4) Role-aware gating: viewer-shared extensions can read but not\n        // write. The bridge policy is decided here in the parent before the\n        // request leaves; the server enforces a second layer.\n        const policy = checkBridgePolicy(path, options.method ?? \"GET\", {\n          ...bridgeContextRef.current,\n          extensionId,\n        });\n        if (!policy.ok) {\n          respond({\n            response: {\n              ok: false,\n              status: 403,\n              statusText: \"Forbidden\",\n              body: { error: policy.error },\n            },\n          });\n          return;\n        }\n        // (audit H5) Same extension-bridge tagging as <ExtensionViewer>. action-routes\n        // uses these headers to enforce per-action `toolCallable` opt-in.\n        const finalHeaders = new Headers(options.headers ?? undefined);\n        finalHeaders.set(\"X-Agent-Native-Extension-Bridge\", \"1\");\n        finalHeaders.set(\"X-Agent-Native-Extension-Id\", extensionId);\n        finalHeaders.set(\"X-Agent-Native-Tool-Bridge\", \"1\");\n        finalHeaders.set(\"X-Agent-Native-Tool-Id\", extensionId);\n        const res = await fetch(agentNativePath(path), {\n          ...options,\n          headers: finalHeaders,\n          credentials: \"same-origin\",\n        });\n        const text = await res.text();\n        let body: unknown = text;\n        if (text) {\n          try {\n            body = JSON.parse(text);\n          } catch {\n            body = text;\n          }\n        }\n        respond({\n          response: {\n            ok: res.ok,\n            status: res.status,\n            statusText: res.statusText,\n            body,\n          },\n        });\n      } catch (err: any) {\n        respond({ error: err?.message ?? \"Extension host request failed\" });\n      }\n    };\n\n    window.addEventListener(\"message\", handleMessage);\n    return () => window.removeEventListener(\"message\", handleMessage);\n  }, [extensionId]);\n\n  if (!extension) {\n    if (!isLoading && !isFetching) return null;\n    return (\n      <div\n        className={className}\n        style={{ height: initialHeight }}\n        aria-busy=\"true\"\n      />\n    );\n  }\n\n  return (\n    <div className={`relative group/embedded-extension ${className ?? \"\"}`}>\n      <iframe\n        ref={iframeRef}\n        key={`${extensionId}-${extension.updatedAt ?? \"\"}`}\n        src={iframeSrc}\n        title={extension.name}\n        sandbox=\"allow-scripts allow-forms\"\n        style={{ width: \"100%\", border: 0, height, display: \"block\" }}\n        onLoad={() => {\n          iframeRef.current?.contentWindow?.postMessage(\n            { type: \"agent-native-slot-context\", context: context ?? {} },\n            \"*\",\n          );\n          // Fallback readiness signal in case the extension never reports a\n          // height (e.g. fixed-height content that skips auto-resize).\n          fireReady();\n        }}\n      />\n      <EmbeddedToolMenu\n        extensionId={extensionId}\n        slotId={slotId}\n        toolName={extension.name}\n        canDelete={extension.canDelete}\n      />\n    </div>\n  );\n}\n\nfunction EmbeddedToolMenu({\n  extensionId,\n  slotId,\n  toolName,\n  canDelete,\n}: {\n  extensionId: string;\n  slotId: string;\n  toolName: string;\n  canDelete?: boolean;\n}) {\n  const t = useT();\n  const [open, setOpen] = useState(false);\n  const [confirmingDelete, setConfirmingDelete] = useState(false);\n  const queryClient = useQueryClient();\n  const navigate = useNavigate();\n\n  const closeMenu = () => {\n    setOpen(false);\n    setConfirmingDelete(false);\n  };\n\n  const removeFromSlot = async () => {\n    closeMenu();\n    queryClient.setQueryData<any[]>([\"slot-installs\", slotId], (old) =>\n      (old ?? []).filter((i) => i.extensionId !== extensionId),\n    );\n    try {\n      await fetch(\n        agentNativePath(\n          `/_agent-native/slots/${encodeURIComponent(slotId)}/install/${encodeURIComponent(extensionId)}`,\n        ),\n        { method: \"DELETE\" },\n      );\n    } finally {\n      queryClient.invalidateQueries({ queryKey: [\"slot-installs\", slotId] });\n    }\n  };\n\n  const deleteExtension = async () => {\n    closeMenu();\n    try {\n      await deleteOrHideExtension({ id: extensionId, canDelete });\n      invalidateExtensionRemoval(queryClient, extensionId);\n    } catch {\n      queryClient.invalidateQueries({ queryKey: [\"extension\", extensionId] });\n    }\n  };\n\n  return (\n    <Popover\n      open={open}\n      onOpenChange={(o) => {\n        setOpen(o);\n        if (!o) setConfirmingDelete(false);\n      }}\n    >\n      <TooltipProvider delayDuration={200}>\n        <Tooltip>\n          <TooltipTrigger asChild>\n            <PopoverTrigger asChild>\n              <button\n                type=\"button\"\n                className=\"absolute top-1 right-1 flex h-6 w-6 items-center justify-center rounded-md bg-background/60 text-muted-foreground/60 opacity-0 hover:bg-accent hover:text-foreground hover:opacity-100 group-hover/embedded-extension:opacity-100 cursor-pointer transition-opacity\"\n                aria-label={t(\"extensions.optionsFor\", { name: toolName })}\n              >\n                <IconDots className=\"h-3.5 w-3.5\" />\n              </button>\n            </PopoverTrigger>\n          </TooltipTrigger>\n          <TooltipContent>\n            {t(\"extensions.optionsFor\", { name: toolName })}\n          </TooltipContent>\n        </Tooltip>\n      </TooltipProvider>\n      <PopoverContent align=\"end\" sideOffset={4} className=\"w-56 p-1\">\n        {!confirmingDelete ? (\n          <div className=\"flex flex-col\">\n            <button\n              type=\"button\"\n              onClick={() => {\n                closeMenu();\n                navigate(extensionPath(extensionId, toolName));\n              }}\n              className=\"flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] hover:bg-accent cursor-pointer text-left\"\n            >\n              <IconExternalLink className=\"h-3.5 w-3.5\" />\n              <span>{t(\"extensions.openFullView\")}</span>\n            </button>\n            <button\n              type=\"button\"\n              onClick={removeFromSlot}\n              className=\"flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] hover:bg-accent cursor-pointer text-left\"\n            >\n              <IconLayoutSidebarRightCollapse className=\"h-3.5 w-3.5\" />\n              <span>{t(\"extensions.removeFromWidgetArea\")}</span>\n            </button>\n            {canDelete !== false && (\n              <>\n                <div className=\"my-1 h-px bg-border/40\" />\n                <button\n                  type=\"button\"\n                  onClick={() => setConfirmingDelete(true)}\n                  className=\"flex items-center gap-2 rounded-sm px-2 py-1.5 text-[12px] text-destructive hover:bg-destructive/10 cursor-pointer text-left\"\n                >\n                  <IconTrash className=\"h-3.5 w-3.5\" />\n                  <span>{t(\"extensions.deleteExtensionEllipsis\")}</span>\n                </button>\n              </>\n            )}\n          </div>\n        ) : (\n          <div className=\"flex flex-col gap-2 p-2\">\n            <p className=\"text-[12px]\">\n              {t(\"extensions.deleteQuestion\", { name: toolName })}{\" \"}\n              {t(\"extensions.deleteEverywhereConfirmation\")}\n            </p>\n            <div className=\"flex justify-end gap-1\">\n              <button\n                type=\"button\"\n                onClick={() => setConfirmingDelete(false)}\n                className=\"rounded-md px-2 py-1 text-[12px] hover:bg-accent cursor-pointer\"\n              >\n                {t(\"extensions.cancel\")}\n              </button>\n              <button\n                type=\"button\"\n                onClick={deleteExtension}\n                className=\"rounded-md bg-destructive px-2 py-1 text-[12px] text-destructive-foreground hover:bg-destructive/90 cursor-pointer\"\n              >\n                {t(\"extensions.delete\")}\n              </button>\n            </div>\n          </div>\n        )}\n      </PopoverContent>\n    </Popover>\n  );\n}\n"]}

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;
@@ -41,9 +41,9 @@ export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import
  * Body: { text: string, fieldName?: string, requestSource?: string }
  */
 export declare const postCollabText: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    text?: undefined;
     ok?: undefined;
     error: string;
+    text?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/observability/routes.d.ts

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
+    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,10 +59,10 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/resources/handlers.d.ts

@@ -52,8 +52,8 @@ export declare function handleDeleteResource(event: any): Promise<{
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>;
 /** POST /_agent-native/resources/upload — upload a file as a resource */
 export declare function handleUploadResource(event: any): Promise<import("./store.js").Resource | {
@@ -73,9 +73,9 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     runId: string | null;
     expiresAt: number | null;
     metadata: string | null;
-    error?: undefined;
     url: string;
     provider: string;
+    error?: undefined;
 }>;
 export {};
 //# sourceMappingURL=handlers.d.ts.map

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,11 +27,11 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
+    error?: undefined;
 }>>;
 export {};
 //# sourceMappingURL=agent-engine-api-key-route.d.ts.map

package/dist/server/transcribe-voice.d.ts

@@ -20,7 +20,7 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=transcribe-voice.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.80.6",
+  "version": "0.80.7",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {