@agimon-ai/po-web-dashboard 0.0.0-alpha.0

package/dist/web/features/remote/RemoteAccessPairing.mjs

@@ -0,0 +1,93 @@
+import { addPasskey, newPairingCode, remoteAccessStore } from "../../stores/remoteAccessStore.mjs";
+import { QrCode } from "../../components/QrCode.mjs";
+import { PairedDeviceList } from "./PairedDeviceList.mjs";
+import { useStore } from "@tanstack/react-store";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { Button, SectionLabel, Spinner } from "@agimon-ai/po-web-components";
+//#region src/web/features/remote/RemoteAccessPairing.tsx
+/** The QR credential, a short manual code, and the direct address. */
+function RemoteAccessPairing() {
+	const state = useStore(remoteAccessStore);
+	if (state.pairUrl === void 0 || state.pairCode === void 0 || state.pairFingerprint === void 0) return /* @__PURE__ */ jsx(Spinner, {});
+	return /* @__PURE__ */ jsxs("div", {
+		className: "flex flex-col items-center gap-4",
+		children: [
+			/* @__PURE__ */ jsx("div", {
+				className: "rounded-lg bg-doom-hi p-3 text-doom-deep",
+				children: /* @__PURE__ */ jsx(QrCode, {
+					value: state.pairUrl,
+					size: 288,
+					label: "Scan to pair this device"
+				})
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex w-full flex-col gap-1",
+				children: [/* @__PURE__ */ jsx(SectionLabel, { children: "or enter this pairing code" }), /* @__PURE__ */ jsx("code", {
+					"data-testid": "remote-pair-code",
+					className: "rounded bg-doom-deep p-2 text-center font-mono text-lg tracking-widest text-doom-text",
+					children: state.pairCode
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex w-full flex-col gap-1",
+				children: [
+					/* @__PURE__ */ jsx(SectionLabel, { children: "signing-key fingerprint" }),
+					/* @__PURE__ */ jsx("code", {
+						"data-testid": "remote-signing-fingerprint",
+						className: "break-all rounded bg-doom-deep p-2 text-center font-mono text-sm text-doom-text",
+						children: state.pairFingerprint.match(/.{1,8}/gu)?.join(" ") ?? state.pairFingerprint
+					}),
+					/* @__PURE__ */ jsxs("p", {
+						className: "text-sm text-doom-dim",
+						children: [
+							"Compare this on the phone when entering the manual code. Bundle revision ",
+							String(state.pairRevision),
+							"."
+						]
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex w-full flex-col gap-1",
+				children: [/* @__PURE__ */ jsx(SectionLabel, { children: "or open this address" }), /* @__PURE__ */ jsx("code", {
+					"data-testid": "remote-pair-url",
+					className: "break-all rounded bg-doom-deep p-2 text-sm text-doom-dim",
+					children: state.pairUrl
+				})]
+			}),
+			/* @__PURE__ */ jsx(Button, {
+				variant: "ghost",
+				size: "sm",
+				"data-testid": "remote-new-code",
+				onClick: () => void newPairingCode(),
+				children: "show a new code"
+			}),
+			state.passkeys?.supported === true ? /* @__PURE__ */ jsxs("div", {
+				className: "flex w-full flex-col gap-1.5 border-t border-doom-border pt-3",
+				children: [
+					/* @__PURE__ */ jsx(SectionLabel, { children: "passkeys" }),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-sm text-doom-dim",
+						children: state.passkeys.count === 0 ? "Add one on the device you just paired and it will not need the code again." : `${String(state.passkeys.count)} registered. A paired device signs in with a gesture instead of a code.`
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "outline",
+						size: "sm",
+						"data-testid": "remote-add-passkey",
+						onClick: () => void addPasskey(),
+						children: "add a passkey for this device"
+					})
+				]
+			}) : state.passkeys?.reason === void 0 ? null : /* @__PURE__ */ jsx("p", {
+				"data-testid": "remote-passkey-unavailable",
+				className: "w-full text-sm text-doom-dim",
+				children: state.passkeys.reason
+			}),
+			/* @__PURE__ */ jsx(PairedDeviceList, {})
+		]
+	});
+}
+//#endregion
+export { RemoteAccessPairing };
+
+//# sourceMappingURL=RemoteAccessPairing.mjs.map

package/dist/web/features/remote/RemoteAccessPairing.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoteAccessPairing.mjs","names":[],"sources":["../../../../src/web/features/remote/RemoteAccessPairing.tsx"],"sourcesContent":["import { Button, SectionLabel, Spinner } from '@agimon-ai/po-web-components';\nimport { useStore } from '@tanstack/react-store';\n\nimport { QrCode } from '../../components/QrCode';\nimport { addPasskey, newPairingCode, remoteAccessStore } from '../../stores/remoteAccessStore';\nimport { PairedDeviceList } from './PairedDeviceList';\n\n/** The QR credential, a short manual code, and the direct address. */\nexport function RemoteAccessPairing() {\n  const state = useStore(remoteAccessStore);\n  if (state.pairUrl === undefined || state.pairCode === undefined || state.pairFingerprint === undefined)\n    return <Spinner />;\n\n  return (\n    <div className=\"flex flex-col items-center gap-4\">\n      {/* A light plate under the code: scanners want dark modules on a bright\n          field, which is the one thing a dark theme cannot supply. */}\n      <div className=\"rounded-lg bg-doom-hi p-3 text-doom-deep\">\n        <QrCode value={state.pairUrl} size={288} label=\"Scan to pair this device\" />\n      </div>\n      <div className=\"flex w-full flex-col gap-1\">\n        <SectionLabel>or enter this pairing code</SectionLabel>\n        <code\n          data-testid=\"remote-pair-code\"\n          className=\"rounded bg-doom-deep p-2 text-center font-mono text-lg tracking-widest text-doom-text\"\n        >\n          {state.pairCode}\n        </code>\n      </div>\n      <div className=\"flex w-full flex-col gap-1\">\n        <SectionLabel>signing-key fingerprint</SectionLabel>\n        <code\n          data-testid=\"remote-signing-fingerprint\"\n          className=\"break-all rounded bg-doom-deep p-2 text-center font-mono text-sm text-doom-text\"\n        >\n          {state.pairFingerprint.match(/.{1,8}/gu)?.join(' ') ?? state.pairFingerprint}\n        </code>\n        <p className=\"text-sm text-doom-dim\">\n          Compare this on the phone when entering the manual code. Bundle revision {String(state.pairRevision)}.\n        </p>\n      </div>\n      <div className=\"flex w-full flex-col gap-1\">\n        <SectionLabel>or open this address</SectionLabel>\n        <code data-testid=\"remote-pair-url\" className=\"break-all rounded bg-doom-deep p-2 text-sm text-doom-dim\">\n          {state.pairUrl}\n        </code>\n      </div>\n      <Button variant=\"ghost\" size=\"sm\" data-testid=\"remote-new-code\" onClick={() => void newPairingCode()}>\n        show a new code\n      </Button>\n\n      {/* Enrolling a passkey turns every later visit into one Face ID instead\n          of another scan, and it is what puts a second factor in front of the\n          two actions that escalate past driving the agent. */}\n      {state.passkeys?.supported === true ? (\n        <div className=\"flex w-full flex-col gap-1.5 border-t border-doom-border pt-3\">\n          <SectionLabel>passkeys</SectionLabel>\n          <p className=\"text-sm text-doom-dim\">\n            {state.passkeys.count === 0\n              ? 'Add one on the device you just paired and it will not need the code again.'\n              : `${String(state.passkeys.count)} registered. A paired device signs in with a gesture instead of a code.`}\n          </p>\n          <Button variant=\"outline\" size=\"sm\" data-testid=\"remote-add-passkey\" onClick={() => void addPasskey()}>\n            add a passkey for this device\n          </Button>\n        </div>\n      ) : state.passkeys?.reason === undefined ? null : (\n        <p data-testid=\"remote-passkey-unavailable\" className=\"w-full text-sm text-doom-dim\">\n          {state.passkeys.reason}\n        </p>\n      )}\n\n      <PairedDeviceList />\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,sBAAsB;CACpC,MAAM,QAAQ,SAAS,iBAAiB;CACxC,IAAI,MAAM,YAAY,KAAA,KAAa,MAAM,aAAa,KAAA,KAAa,MAAM,oBAAoB,KAAA,GAC3F,OAAO,oBAAC,SAAD,CAAU,CAAA;CAEnB,OACE,qBAAC,OAAD;EAAK,WAAU;EAAf,UAAA;GAGE,oBAAC,OAAD;IAAK,WAAU;IACb,UAAA,oBAAC,QAAD;KAAQ,OAAO,MAAM;KAAS,MAAM;KAAK,OAAM;IAA4B,CAAA;GACxE,CAAA;GACL,qBAAC,OAAD;IAAK,WAAU;IAAf,UAAA,CACE,oBAAC,cAAD,EAAA,UAAc,6BAAwC,CAAA,GACtD,oBAAC,QAAD;KACE,eAAY;KACZ,WAAU;KAET,UAAA,MAAM;IACH,CAAA,CACH;;GACL,qBAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,oBAAC,cAAD,EAAA,UAAc,0BAAqC,CAAA;KACnD,oBAAC,QAAD;MACE,eAAY;MACZ,WAAU;MAET,UAAA,MAAM,gBAAgB,MAAM,UAAU,CAAC,EAAE,KAAK,GAAG,KAAK,MAAM;KACzD,CAAA;KACN,qBAAC,KAAD;MAAG,WAAU;MAAb,UAAA;OAAqC;OACuC,OAAO,MAAM,YAAY;OAAE;MACpG;;IACA;;GACL,qBAAC,OAAD;IAAK,WAAU;IAAf,UAAA,CACE,oBAAC,cAAD,EAAA,UAAc,uBAAkC,CAAA,GAChD,oBAAC,QAAD;KAAM,eAAY;KAAkB,WAAU;KAC3C,UAAA,MAAM;IACH,CAAA,CACH;;GACL,oBAAC,QAAD;IAAQ,SAAQ;IAAQ,MAAK;IAAK,eAAY;IAAkB,eAAe,KAAK,eAAe;IAAG,UAAA;GAE9F,CAAA;GAKP,MAAM,UAAU,cAAc,OAC7B,qBAAC,OAAD;IAAK,WAAU;IAAf,UAAA;KACE,oBAAC,cAAD,EAAA,UAAc,WAAsB,CAAA;KACpC,oBAAC,KAAD;MAAG,WAAU;MACV,UAAA,MAAM,SAAS,UAAU,IACtB,+EACA,GAAG,OAAO,MAAM,SAAS,KAAK,EAAE;KACnC,CAAA;KACH,oBAAC,QAAD;MAAQ,SAAQ;MAAU,MAAK;MAAK,eAAY;MAAqB,eAAe,KAAK,WAAW;MAAG,UAAA;KAE/F,CAAA;IACL;GACH,CAAA,IAAA,MAAM,UAAU,WAAW,KAAA,IAAY,OACzC,oBAAC,KAAD;IAAG,eAAY;IAA6B,WAAU;IACnD,UAAA,MAAM,SAAS;GACf,CAAA;GAGL,oBAAC,kBAAD,CAAmB,CAAA;EAChB;;AAET"}

package/dist/web/features/remote/SandboxWorkspaces.cjs

@@ -0,0 +1,87 @@
+const require_remoteAccessStore = require("../../stores/remoteAccessStore.cjs");
+const require_dashboardStateStore = require("../../stores/dashboardStateStore.cjs");
+let react_jsx_runtime = require("react/jsx-runtime");
+let _agimon_ai_po_web_components = require("@agimon-ai/po-web-components");
+//#region src/web/features/remote/SandboxWorkspaces.tsx
+/**
+* The directories the contained cockpit is allowed to see.
+*
+* This list is the boundary, not a convenience. A hub inside the container
+* cannot create a session in a path that is not mounted, so what is not here is
+* unreachable by anything the remote device asks for, including the agent's
+* shell. Editing it therefore reads as a security decision and is spelled out
+* as one.
+*/
+const ABSOLUTE = "/";
+function SandboxWorkspaces({ workspaces }) {
+	const [draft, setDraft] = require_dashboardStateStore.useDashboardState("sandbox/draft", "");
+	const trimmed = draft.trim();
+	const valid = trimmed.startsWith(ABSOLUTE) && !workspaces.includes(trimmed);
+	const add = async () => {
+		if (!valid) return;
+		if (await require_remoteAccessStore.updateRemoteSettings({ sandbox: {
+			enabled: true,
+			workspaces: [...workspaces, trimmed]
+		} })) setDraft((current) => current === draft ? "" : current);
+	};
+	const remove = (path) => {
+		require_remoteAccessStore.updateRemoteSettings({ sandbox: {
+			enabled: true,
+			workspaces: workspaces.filter((workspace) => workspace !== path)
+		} });
+	};
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: "flex flex-col gap-2 pl-4",
+		"data-testid": "sandbox-workspaces",
+		children: [
+			workspaces.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				className: "text-sm text-doom-dim",
+				children: "Nothing is mounted yet, so the container would have no directory to work in. Add at least one."
+			}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+				className: "flex flex-col gap-1",
+				children: workspaces.map((workspace) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
+					className: "flex items-center justify-between gap-2",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+						className: "truncate text-sm text-doom-hi",
+						children: workspace
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_agimon_ai_po_web_components.Button, {
+						variant: "ghost",
+						"data-testid": `sandbox-workspace-remove-${workspace}`,
+						onClick: () => {
+							remove(workspace);
+						},
+						children: "remove"
+					})]
+				}, workspace))
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "flex items-center gap-2",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_agimon_ai_po_web_components.Input, {
+					"data-testid": "sandbox-workspace-input",
+					placeholder: "/absolute/path/to/a/repository",
+					value: draft,
+					onChange: (event) => {
+						setDraft(event.target.value);
+					},
+					onKeyDown: (event) => {
+						if (event.key === "Enter") add();
+					}
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_agimon_ai_po_web_components.Button, {
+					variant: "outline",
+					"data-testid": "sandbox-workspace-add",
+					disabled: !valid,
+					onClick: () => void add(),
+					children: "add"
+				})]
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				className: "text-sm text-doom-dim",
+				children: "Absolute paths only, mounted at the same path inside. Sessions working anywhere else stay on the host and will not appear in the contained cockpit."
+			})
+		]
+	});
+}
+//#endregion
+exports.SandboxWorkspaces = SandboxWorkspaces;
+
+//# sourceMappingURL=SandboxWorkspaces.cjs.map

package/dist/web/features/remote/SandboxWorkspaces.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxWorkspaces.cjs","names":["useDashboardState","updateRemoteSettings","Button","Input"],"sources":["../../../../src/web/features/remote/SandboxWorkspaces.tsx"],"sourcesContent":["import { Button, Input } from '@agimon-ai/po-web-components';\n\nimport { useDashboardState } from '../../stores/dashboardStateStore';\nimport { updateRemoteSettings } from '../../stores/remoteAccessStore';\n\n/**\n * The directories the contained cockpit is allowed to see.\n *\n * This list is the boundary, not a convenience. A hub inside the container\n * cannot create a session in a path that is not mounted, so what is not here is\n * unreachable by anything the remote device asks for, including the agent's\n * shell. Editing it therefore reads as a security decision and is spelled out\n * as one.\n */\n\nconst ABSOLUTE = '/';\n\nexport interface SandboxWorkspacesProps {\n  workspaces: readonly string[];\n}\n\nexport function SandboxWorkspaces({ workspaces }: SandboxWorkspacesProps) {\n  const [draft, setDraft] = useDashboardState('sandbox/draft', '');\n  const trimmed = draft.trim();\n  const valid = trimmed.startsWith(ABSOLUTE) && !workspaces.includes(trimmed);\n\n  const add = async (): Promise<void> => {\n    if (!valid) return;\n    if (await updateRemoteSettings({ sandbox: { enabled: true, workspaces: [...workspaces, trimmed] } }))\n      setDraft((current) => (current === draft ? '' : current));\n  };\n\n  const remove = (path: string): void => {\n    void updateRemoteSettings({\n      sandbox: { enabled: true, workspaces: workspaces.filter((workspace) => workspace !== path) },\n    });\n  };\n\n  return (\n    <div className=\"flex flex-col gap-2 pl-4\" data-testid=\"sandbox-workspaces\">\n      {workspaces.length === 0 ? (\n        <p className=\"text-sm text-doom-dim\">\n          Nothing is mounted yet, so the container would have no directory to work in. Add at least one.\n        </p>\n      ) : (\n        <ul className=\"flex flex-col gap-1\">\n          {workspaces.map((workspace) => (\n            <li key={workspace} className=\"flex items-center justify-between gap-2\">\n              <code className=\"truncate text-sm text-doom-hi\">{workspace}</code>\n              <Button\n                variant=\"ghost\"\n                data-testid={`sandbox-workspace-remove-${workspace}`}\n                onClick={() => {\n                  remove(workspace);\n                }}\n              >\n                remove\n              </Button>\n            </li>\n          ))}\n        </ul>\n      )}\n      <div className=\"flex items-center gap-2\">\n        <Input\n          data-testid=\"sandbox-workspace-input\"\n          placeholder=\"/absolute/path/to/a/repository\"\n          value={draft}\n          onChange={(event) => {\n            setDraft(event.target.value);\n          }}\n          onKeyDown={(event) => {\n            if (event.key === 'Enter') void add();\n          }}\n        />\n        <Button variant=\"outline\" data-testid=\"sandbox-workspace-add\" disabled={!valid} onClick={() => void add()}>\n          add\n        </Button>\n      </div>\n      <p className=\"text-sm text-doom-dim\">\n        Absolute paths only, mounted at the same path inside. Sessions working anywhere else stay on the host and will\n        not appear in the contained cockpit.\n      </p>\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,MAAM,WAAW;AAMjB,SAAgB,kBAAkB,EAAE,cAAsC;CACxE,MAAM,CAAC,OAAO,YAAYA,4BAAAA,kBAAkB,iBAAiB,EAAE;CAC/D,MAAM,UAAU,MAAM,KAAK;CAC3B,MAAM,QAAQ,QAAQ,WAAW,QAAQ,KAAK,CAAC,WAAW,SAAS,OAAO;CAE1E,MAAM,MAAM,YAA2B;EACrC,IAAI,CAAC,OAAO;EACZ,IAAI,MAAMC,0BAAAA,qBAAqB,EAAE,SAAS;GAAE,SAAS;GAAM,YAAY,CAAC,GAAG,YAAY,OAAO;EAAE,EAAE,CAAC,GACjG,UAAU,YAAa,YAAY,QAAQ,KAAK,OAAQ;CAC5D;CAEA,MAAM,UAAU,SAAuB;EACrC,0BAAKA,qBAAqB,EACxB,SAAS;GAAE,SAAS;GAAM,YAAY,WAAW,QAAQ,cAAc,cAAc,IAAI;EAAE,EAC7F,CAAC;CACH;CAEA,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;EAAK,WAAU;EAA2B,eAAY;EAAtD,UAAA;GACG,WAAW,WAAW,IACrB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;IAAG,WAAU;IAAwB,UAAA;GAElC,CAAA,IAEH,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;IAAI,WAAU;IACX,UAAA,WAAW,KAAK,cACf,iBAAA,GAAA,kBAAA,KAAA,CAAC,MAAD;KAAoB,WAAU;KAA9B,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,WAAU;MAAiC,UAAA;KAAgB,CAAA,GACjE,iBAAA,GAAA,kBAAA,IAAA,CAACC,6BAAAA,QAAD;MACE,SAAQ;MACR,eAAa,4BAA4B;MACzC,eAAe;OACb,OAAO,SAAS;MAClB;MACD,UAAA;KAEO,CAAA,CACN;IAXK,GAAA,SAWL,CACL;GACC,CAAA;GAEN,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,WAAU;IAAf,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,6BAAAA,OAAD;KACE,eAAY;KACZ,aAAY;KACZ,OAAO;KACP,WAAW,UAAU;MACnB,SAAS,MAAM,OAAO,KAAK;KAC7B;KACA,YAAY,UAAU;MACpB,IAAI,MAAM,QAAQ,SAAS,IAAS;KACtC;IACD,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAACD,6BAAAA,QAAD;KAAQ,SAAQ;KAAU,eAAY;KAAwB,UAAU,CAAC;KAAO,eAAe,KAAK,IAAI;KAAG,UAAA;IAEnG,CAAA,CACL;;GACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;IAAG,WAAU;IAAwB,UAAA;GAGlC,CAAA;EACA;;AAET"}

package/dist/web/features/remote/SandboxWorkspaces.d.mts

@@ -0,0 +1,7 @@
+//#region src/web/features/remote/SandboxWorkspaces.d.ts
+export interface SandboxWorkspacesProps {
+  workspaces: readonly string[];
+}
+export declare function SandboxWorkspaces({ workspaces }: SandboxWorkspacesProps): import("react").JSX.Element;
+//#endregion
+//# sourceMappingURL=SandboxWorkspaces.d.mts.map

package/dist/web/features/remote/SandboxWorkspaces.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxWorkspaces.d.mts","names":[],"sources":["../../../../src/web/features/remote/SandboxWorkspaces.tsx"],"mappings":";iBAiBiB;EACf;;wBAGc,oBAAoB,cAAc,yCAAsB,IAAA"}

package/dist/web/features/remote/SandboxWorkspaces.mjs

@@ -0,0 +1,87 @@
+import { updateRemoteSettings } from "../../stores/remoteAccessStore.mjs";
+import { useDashboardState } from "../../stores/dashboardStateStore.mjs";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { Button, Input } from "@agimon-ai/po-web-components";
+//#region src/web/features/remote/SandboxWorkspaces.tsx
+/**
+* The directories the contained cockpit is allowed to see.
+*
+* This list is the boundary, not a convenience. A hub inside the container
+* cannot create a session in a path that is not mounted, so what is not here is
+* unreachable by anything the remote device asks for, including the agent's
+* shell. Editing it therefore reads as a security decision and is spelled out
+* as one.
+*/
+const ABSOLUTE = "/";
+function SandboxWorkspaces({ workspaces }) {
+	const [draft, setDraft] = useDashboardState("sandbox/draft", "");
+	const trimmed = draft.trim();
+	const valid = trimmed.startsWith(ABSOLUTE) && !workspaces.includes(trimmed);
+	const add = async () => {
+		if (!valid) return;
+		if (await updateRemoteSettings({ sandbox: {
+			enabled: true,
+			workspaces: [...workspaces, trimmed]
+		} })) setDraft((current) => current === draft ? "" : current);
+	};
+	const remove = (path) => {
+		updateRemoteSettings({ sandbox: {
+			enabled: true,
+			workspaces: workspaces.filter((workspace) => workspace !== path)
+		} });
+	};
+	return /* @__PURE__ */ jsxs("div", {
+		className: "flex flex-col gap-2 pl-4",
+		"data-testid": "sandbox-workspaces",
+		children: [
+			workspaces.length === 0 ? /* @__PURE__ */ jsx("p", {
+				className: "text-sm text-doom-dim",
+				children: "Nothing is mounted yet, so the container would have no directory to work in. Add at least one."
+			}) : /* @__PURE__ */ jsx("ul", {
+				className: "flex flex-col gap-1",
+				children: workspaces.map((workspace) => /* @__PURE__ */ jsxs("li", {
+					className: "flex items-center justify-between gap-2",
+					children: [/* @__PURE__ */ jsx("code", {
+						className: "truncate text-sm text-doom-hi",
+						children: workspace
+					}), /* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						"data-testid": `sandbox-workspace-remove-${workspace}`,
+						onClick: () => {
+							remove(workspace);
+						},
+						children: "remove"
+					})]
+				}, workspace))
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex items-center gap-2",
+				children: [/* @__PURE__ */ jsx(Input, {
+					"data-testid": "sandbox-workspace-input",
+					placeholder: "/absolute/path/to/a/repository",
+					value: draft,
+					onChange: (event) => {
+						setDraft(event.target.value);
+					},
+					onKeyDown: (event) => {
+						if (event.key === "Enter") add();
+					}
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "outline",
+					"data-testid": "sandbox-workspace-add",
+					disabled: !valid,
+					onClick: () => void add(),
+					children: "add"
+				})]
+			}),
+			/* @__PURE__ */ jsx("p", {
+				className: "text-sm text-doom-dim",
+				children: "Absolute paths only, mounted at the same path inside. Sessions working anywhere else stay on the host and will not appear in the contained cockpit."
+			})
+		]
+	});
+}
+//#endregion
+export { SandboxWorkspaces };
+
+//# sourceMappingURL=SandboxWorkspaces.mjs.map

package/dist/web/features/remote/SandboxWorkspaces.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxWorkspaces.mjs","names":[],"sources":["../../../../src/web/features/remote/SandboxWorkspaces.tsx"],"sourcesContent":["import { Button, Input } from '@agimon-ai/po-web-components';\n\nimport { useDashboardState } from '../../stores/dashboardStateStore';\nimport { updateRemoteSettings } from '../../stores/remoteAccessStore';\n\n/**\n * The directories the contained cockpit is allowed to see.\n *\n * This list is the boundary, not a convenience. A hub inside the container\n * cannot create a session in a path that is not mounted, so what is not here is\n * unreachable by anything the remote device asks for, including the agent's\n * shell. Editing it therefore reads as a security decision and is spelled out\n * as one.\n */\n\nconst ABSOLUTE = '/';\n\nexport interface SandboxWorkspacesProps {\n  workspaces: readonly string[];\n}\n\nexport function SandboxWorkspaces({ workspaces }: SandboxWorkspacesProps) {\n  const [draft, setDraft] = useDashboardState('sandbox/draft', '');\n  const trimmed = draft.trim();\n  const valid = trimmed.startsWith(ABSOLUTE) && !workspaces.includes(trimmed);\n\n  const add = async (): Promise<void> => {\n    if (!valid) return;\n    if (await updateRemoteSettings({ sandbox: { enabled: true, workspaces: [...workspaces, trimmed] } }))\n      setDraft((current) => (current === draft ? '' : current));\n  };\n\n  const remove = (path: string): void => {\n    void updateRemoteSettings({\n      sandbox: { enabled: true, workspaces: workspaces.filter((workspace) => workspace !== path) },\n    });\n  };\n\n  return (\n    <div className=\"flex flex-col gap-2 pl-4\" data-testid=\"sandbox-workspaces\">\n      {workspaces.length === 0 ? (\n        <p className=\"text-sm text-doom-dim\">\n          Nothing is mounted yet, so the container would have no directory to work in. Add at least one.\n        </p>\n      ) : (\n        <ul className=\"flex flex-col gap-1\">\n          {workspaces.map((workspace) => (\n            <li key={workspace} className=\"flex items-center justify-between gap-2\">\n              <code className=\"truncate text-sm text-doom-hi\">{workspace}</code>\n              <Button\n                variant=\"ghost\"\n                data-testid={`sandbox-workspace-remove-${workspace}`}\n                onClick={() => {\n                  remove(workspace);\n                }}\n              >\n                remove\n              </Button>\n            </li>\n          ))}\n        </ul>\n      )}\n      <div className=\"flex items-center gap-2\">\n        <Input\n          data-testid=\"sandbox-workspace-input\"\n          placeholder=\"/absolute/path/to/a/repository\"\n          value={draft}\n          onChange={(event) => {\n            setDraft(event.target.value);\n          }}\n          onKeyDown={(event) => {\n            if (event.key === 'Enter') void add();\n          }}\n        />\n        <Button variant=\"outline\" data-testid=\"sandbox-workspace-add\" disabled={!valid} onClick={() => void add()}>\n          add\n        </Button>\n      </div>\n      <p className=\"text-sm text-doom-dim\">\n        Absolute paths only, mounted at the same path inside. Sessions working anywhere else stay on the host and will\n        not appear in the contained cockpit.\n      </p>\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,MAAM,WAAW;AAMjB,SAAgB,kBAAkB,EAAE,cAAsC;CACxE,MAAM,CAAC,OAAO,YAAY,kBAAkB,iBAAiB,EAAE;CAC/D,MAAM,UAAU,MAAM,KAAK;CAC3B,MAAM,QAAQ,QAAQ,WAAW,QAAQ,KAAK,CAAC,WAAW,SAAS,OAAO;CAE1E,MAAM,MAAM,YAA2B;EACrC,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,qBAAqB,EAAE,SAAS;GAAE,SAAS;GAAM,YAAY,CAAC,GAAG,YAAY,OAAO;EAAE,EAAE,CAAC,GACjG,UAAU,YAAa,YAAY,QAAQ,KAAK,OAAQ;CAC5D;CAEA,MAAM,UAAU,SAAuB;EACrC,qBAA0B,EACxB,SAAS;GAAE,SAAS;GAAM,YAAY,WAAW,QAAQ,cAAc,cAAc,IAAI;EAAE,EAC7F,CAAC;CACH;CAEA,OACE,qBAAC,OAAD;EAAK,WAAU;EAA2B,eAAY;EAAtD,UAAA;GACG,WAAW,WAAW,IACrB,oBAAC,KAAD;IAAG,WAAU;IAAwB,UAAA;GAElC,CAAA,IAEH,oBAAC,MAAD;IAAI,WAAU;IACX,UAAA,WAAW,KAAK,cACf,qBAAC,MAAD;KAAoB,WAAU;KAA9B,UAAA,CACE,oBAAC,QAAD;MAAM,WAAU;MAAiC,UAAA;KAAgB,CAAA,GACjE,oBAAC,QAAD;MACE,SAAQ;MACR,eAAa,4BAA4B;MACzC,eAAe;OACb,OAAO,SAAS;MAClB;MACD,UAAA;KAEO,CAAA,CACN;IAXK,GAAA,SAWL,CACL;GACC,CAAA;GAEN,qBAAC,OAAD;IAAK,WAAU;IAAf,UAAA,CACE,oBAAC,OAAD;KACE,eAAY;KACZ,aAAY;KACZ,OAAO;KACP,WAAW,UAAU;MACnB,SAAS,MAAM,OAAO,KAAK;KAC7B;KACA,YAAY,UAAU;MACpB,IAAI,MAAM,QAAQ,SAAS,IAAS;KACtC;IACD,CAAA,GACD,oBAAC,QAAD;KAAQ,SAAQ;KAAU,eAAY;KAAwB,UAAU,CAAC;KAAO,eAAe,KAAK,IAAI;KAAG,UAAA;IAEnG,CAAA,CACL;;GACL,oBAAC,KAAD;IAAG,WAAU;IAAwB,UAAA;GAGlC,CAAA;EACA;;AAET"}

package/dist/web/features/remote/TrustedDeviceList.cjs

@@ -0,0 +1,65 @@
+const require_remoteAccessStore = require("../../stores/remoteAccessStore.cjs");
+let _tanstack_react_store = require("@tanstack/react-store");
+let react_jsx_runtime = require("react/jsx-runtime");
+let _agimon_ai_po_web_components = require("@agimon-ai/po-web-components");
+//#region src/web/features/remote/TrustedDeviceList.tsx
+const PLATFORM_LABEL = {
+	ios: "iOS",
+	android: "Android"
+};
+/** Native devices that sign back in with their own key, each with the one way to take that back. */
+function TrustedDeviceListView({ devices, busy = false, onRevoke }) {
+	if (devices.length === 0) return null;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: "flex w-full flex-col gap-1.5",
+		"data-testid": "remote-trusted-devices",
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_agimon_ai_po_web_components.SectionLabel, { children: "trusted phones" }),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				className: "text-sm text-doom-dim",
+				children: "A trusted phone signs back in on its own. Revoking one signs it out now, and it pairs again by QR."
+			}),
+			devices.map((device) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				"data-testid": `remote-trusted-device-${device.id}`,
+				className: "flex items-center justify-between gap-3 rounded border border-doom-border px-2.5 py-1.5",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					className: "flex min-w-0 flex-col",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+						className: "truncate text-base font-semibold text-doom-hi",
+						children: [device.label, device.self ? " · this device" : ""]
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+						className: "truncate text-sm text-doom-dim",
+						children: [
+							PLATFORM_LABEL[device.platform],
+							" ",
+							"·",
+							" trusted since ",
+							device.createdAt.slice(0, 10)
+						]
+					})]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_agimon_ai_po_web_components.Button, {
+					variant: "ghost",
+					size: "sm",
+					disabled: busy,
+					"data-testid": `remote-trusted-revoke-${device.id}`,
+					onClick: () => onRevoke(device.id),
+					children: "revoke"
+				})]
+			}, device.id))
+		]
+	});
+}
+/** Reads the hub's trusted devices; revoking from a remote caller asks for a step-up first. */
+function TrustedDeviceList() {
+	const state = (0, _tanstack_react_store.useStore)(require_remoteAccessStore.remoteAccessStore);
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(TrustedDeviceListView, {
+		devices: state.view?.trustedDevices ?? [],
+		busy: state.busy,
+		onRevoke: (id) => void require_remoteAccessStore.revokeTrustedNativeDevice(id)
+	});
+}
+//#endregion
+exports.TrustedDeviceList = TrustedDeviceList;
+exports.TrustedDeviceListView = TrustedDeviceListView;
+
+//# sourceMappingURL=TrustedDeviceList.cjs.map

package/dist/web/features/remote/TrustedDeviceList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustedDeviceList.cjs","names":["SectionLabel","Button","useStore","remoteAccessStore","revokeTrustedNativeDevice"],"sources":["../../../../src/web/features/remote/TrustedDeviceList.tsx"],"sourcesContent":["import { Button, SectionLabel } from '@agimon-ai/po-web-components';\nimport { useStore } from '@tanstack/react-store';\n\nimport type { TrustedDevicePlatform, TrustedDeviceView } from '../../../types/remoteAccess';\nimport { remoteAccessStore, revokeTrustedNativeDevice } from '../../stores/remoteAccessStore';\n\nconst PLATFORM_LABEL: Record<TrustedDevicePlatform, string> = { ios: 'iOS', android: 'Android' };\n\nexport interface TrustedDeviceListViewProps {\n  devices: TrustedDeviceView[];\n  busy?: boolean;\n  onRevoke: (id: string) => void;\n}\n\n/** Native devices that sign back in with their own key, each with the one way to take that back. */\nexport function TrustedDeviceListView({ devices, busy = false, onRevoke }: TrustedDeviceListViewProps) {\n  if (devices.length === 0) return null;\n\n  return (\n    <div className=\"flex w-full flex-col gap-1.5\" data-testid=\"remote-trusted-devices\">\n      <SectionLabel>trusted phones</SectionLabel>\n      <p className=\"text-sm text-doom-dim\">\n        A trusted phone signs back in on its own. Revoking one signs it out now, and it pairs again by QR.\n      </p>\n      {devices.map((device) => (\n        <div\n          key={device.id}\n          data-testid={`remote-trusted-device-${device.id}`}\n          className=\"flex items-center justify-between gap-3 rounded border border-doom-border px-2.5 py-1.5\"\n        >\n          <span className=\"flex min-w-0 flex-col\">\n            <span className=\"truncate text-base font-semibold text-doom-hi\">\n              {device.label}\n              {device.self ? ' \\u00b7 this device' : ''}\n            </span>\n            <span className=\"truncate text-sm text-doom-dim\">\n              {PLATFORM_LABEL[device.platform]} {'\\u00b7'} trusted since {device.createdAt.slice(0, 10)}\n            </span>\n          </span>\n          <Button\n            variant=\"ghost\"\n            size=\"sm\"\n            disabled={busy}\n            data-testid={`remote-trusted-revoke-${device.id}`}\n            onClick={() => onRevoke(device.id)}\n          >\n            revoke\n          </Button>\n        </div>\n      ))}\n    </div>\n  );\n}\n\n/** Reads the hub's trusted devices; revoking from a remote caller asks for a step-up first. */\nexport function TrustedDeviceList() {\n  const state = useStore(remoteAccessStore);\n  return (\n    <TrustedDeviceListView\n      devices={state.view?.trustedDevices ?? []}\n      busy={state.busy}\n      onRevoke={(id) => void revokeTrustedNativeDevice(id)}\n    />\n  );\n}\n"],"mappings":";;;;;AAMA,MAAM,iBAAwD;CAAE,KAAK;CAAO,SAAS;AAAU;;AAS/F,SAAgB,sBAAsB,EAAE,SAAS,OAAO,OAAO,YAAwC;CACrG,IAAI,QAAQ,WAAW,GAAG,OAAO;CAEjC,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;EAAK,WAAU;EAA+B,eAAY;EAA1D,UAAA;GACE,iBAAA,GAAA,kBAAA,IAAA,CAACA,6BAAAA,cAAD,EAAA,UAAc,iBAA4B,CAAA;GAC1C,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;IAAG,WAAU;IAAwB,UAAA;GAElC,CAAA;GACF,QAAQ,KAAK,WACZ,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAEE,eAAa,yBAAyB,OAAO;IAC7C,WAAU;IAHZ,UAAA,CAKE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;KAAM,WAAU;KAAhB,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;MAAM,WAAU;MAAhB,UAAA,CACG,OAAO,OACP,OAAO,OAAO,mBAAwB,EACnC;KACN,CAAA,GAAA,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;MAAM,WAAU;MAAhB,UAAA;OACG,eAAe,OAAO;OAAU;OAAE;OAAS;OAAgB,OAAO,UAAU,MAAM,GAAG,EAAE;MACpF;KACF,CAAA,CAAA;IACN,CAAA,GAAA,iBAAA,GAAA,kBAAA,IAAA,CAACC,6BAAAA,QAAD;KACE,SAAQ;KACR,MAAK;KACL,UAAU;KACV,eAAa,yBAAyB,OAAO;KAC7C,eAAe,SAAS,OAAO,EAAE;KAClC,UAAA;IAEO,CAAA,CACL;GAtBE,GAAA,OAAO,EAsBT,CACN;EACE;;AAET;;AAGA,SAAgB,oBAAoB;CAClC,MAAM,SAAA,GAAQC,sBAAAA,SAAAA,CAASC,0BAAAA,iBAAiB;CACxC,OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,uBAAD;EACE,SAAS,MAAM,MAAM,kBAAkB,CAAC;EACxC,MAAM,MAAM;EACZ,WAAW,OAAO,KAAKC,0BAAAA,0BAA0B,EAAE;CACpD,CAAA;AAEL"}

package/dist/web/features/remote/TrustedDeviceList.d.mts

@@ -0,0 +1,13 @@
+import { TrustedDeviceView } from "../../../types/remoteAccess.mjs";
+//#region src/web/features/remote/TrustedDeviceList.d.ts
+export interface TrustedDeviceListViewProps {
+  devices: TrustedDeviceView[];
+  busy?: boolean;
+  onRevoke: (id: string) => void;
+}
+/** Native devices that sign back in with their own key, each with the one way to take that back. */
+export declare function TrustedDeviceListView({ devices, busy, onRevoke }: TrustedDeviceListViewProps): import("react").JSX.Element | null;
+/** Reads the hub's trusted devices; revoking from a remote caller asks for a step-up first. */
+export declare function TrustedDeviceList(): import("react").JSX.Element;
+//#endregion
+//# sourceMappingURL=TrustedDeviceList.d.mts.map

package/dist/web/features/remote/TrustedDeviceList.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustedDeviceList.d.mts","names":[],"sources":["../../../../src/web/features/remote/TrustedDeviceList.tsx"],"mappings":";;iBAQiB;EACf,SAAS;EACT;EACA,WAAW;;;wBAIG,wBAAwB,SAAS,MAAc,YAAY,6CAA0B,IAAA;;wBAwCrF,qCAAiB,IAAA"}

package/dist/web/features/remote/TrustedDeviceList.mjs

@@ -0,0 +1,64 @@
+import { remoteAccessStore, revokeTrustedNativeDevice } from "../../stores/remoteAccessStore.mjs";
+import { useStore } from "@tanstack/react-store";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { Button, SectionLabel } from "@agimon-ai/po-web-components";
+//#region src/web/features/remote/TrustedDeviceList.tsx
+const PLATFORM_LABEL = {
+	ios: "iOS",
+	android: "Android"
+};
+/** Native devices that sign back in with their own key, each with the one way to take that back. */
+function TrustedDeviceListView({ devices, busy = false, onRevoke }) {
+	if (devices.length === 0) return null;
+	return /* @__PURE__ */ jsxs("div", {
+		className: "flex w-full flex-col gap-1.5",
+		"data-testid": "remote-trusted-devices",
+		children: [
+			/* @__PURE__ */ jsx(SectionLabel, { children: "trusted phones" }),
+			/* @__PURE__ */ jsx("p", {
+				className: "text-sm text-doom-dim",
+				children: "A trusted phone signs back in on its own. Revoking one signs it out now, and it pairs again by QR."
+			}),
+			devices.map((device) => /* @__PURE__ */ jsxs("div", {
+				"data-testid": `remote-trusted-device-${device.id}`,
+				className: "flex items-center justify-between gap-3 rounded border border-doom-border px-2.5 py-1.5",
+				children: [/* @__PURE__ */ jsxs("span", {
+					className: "flex min-w-0 flex-col",
+					children: [/* @__PURE__ */ jsxs("span", {
+						className: "truncate text-base font-semibold text-doom-hi",
+						children: [device.label, device.self ? " · this device" : ""]
+					}), /* @__PURE__ */ jsxs("span", {
+						className: "truncate text-sm text-doom-dim",
+						children: [
+							PLATFORM_LABEL[device.platform],
+							" ",
+							"·",
+							" trusted since ",
+							device.createdAt.slice(0, 10)
+						]
+					})]
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "ghost",
+					size: "sm",
+					disabled: busy,
+					"data-testid": `remote-trusted-revoke-${device.id}`,
+					onClick: () => onRevoke(device.id),
+					children: "revoke"
+				})]
+			}, device.id))
+		]
+	});
+}
+/** Reads the hub's trusted devices; revoking from a remote caller asks for a step-up first. */
+function TrustedDeviceList() {
+	const state = useStore(remoteAccessStore);
+	return /* @__PURE__ */ jsx(TrustedDeviceListView, {
+		devices: state.view?.trustedDevices ?? [],
+		busy: state.busy,
+		onRevoke: (id) => void revokeTrustedNativeDevice(id)
+	});
+}
+//#endregion
+export { TrustedDeviceList, TrustedDeviceListView };
+
+//# sourceMappingURL=TrustedDeviceList.mjs.map

package/dist/web/features/remote/TrustedDeviceList.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustedDeviceList.mjs","names":[],"sources":["../../../../src/web/features/remote/TrustedDeviceList.tsx"],"sourcesContent":["import { Button, SectionLabel } from '@agimon-ai/po-web-components';\nimport { useStore } from '@tanstack/react-store';\n\nimport type { TrustedDevicePlatform, TrustedDeviceView } from '../../../types/remoteAccess';\nimport { remoteAccessStore, revokeTrustedNativeDevice } from '../../stores/remoteAccessStore';\n\nconst PLATFORM_LABEL: Record<TrustedDevicePlatform, string> = { ios: 'iOS', android: 'Android' };\n\nexport interface TrustedDeviceListViewProps {\n  devices: TrustedDeviceView[];\n  busy?: boolean;\n  onRevoke: (id: string) => void;\n}\n\n/** Native devices that sign back in with their own key, each with the one way to take that back. */\nexport function TrustedDeviceListView({ devices, busy = false, onRevoke }: TrustedDeviceListViewProps) {\n  if (devices.length === 0) return null;\n\n  return (\n    <div className=\"flex w-full flex-col gap-1.5\" data-testid=\"remote-trusted-devices\">\n      <SectionLabel>trusted phones</SectionLabel>\n      <p className=\"text-sm text-doom-dim\">\n        A trusted phone signs back in on its own. Revoking one signs it out now, and it pairs again by QR.\n      </p>\n      {devices.map((device) => (\n        <div\n          key={device.id}\n          data-testid={`remote-trusted-device-${device.id}`}\n          className=\"flex items-center justify-between gap-3 rounded border border-doom-border px-2.5 py-1.5\"\n        >\n          <span className=\"flex min-w-0 flex-col\">\n            <span className=\"truncate text-base font-semibold text-doom-hi\">\n              {device.label}\n              {device.self ? ' \\u00b7 this device' : ''}\n            </span>\n            <span className=\"truncate text-sm text-doom-dim\">\n              {PLATFORM_LABEL[device.platform]} {'\\u00b7'} trusted since {device.createdAt.slice(0, 10)}\n            </span>\n          </span>\n          <Button\n            variant=\"ghost\"\n            size=\"sm\"\n            disabled={busy}\n            data-testid={`remote-trusted-revoke-${device.id}`}\n            onClick={() => onRevoke(device.id)}\n          >\n            revoke\n          </Button>\n        </div>\n      ))}\n    </div>\n  );\n}\n\n/** Reads the hub's trusted devices; revoking from a remote caller asks for a step-up first. */\nexport function TrustedDeviceList() {\n  const state = useStore(remoteAccessStore);\n  return (\n    <TrustedDeviceListView\n      devices={state.view?.trustedDevices ?? []}\n      busy={state.busy}\n      onRevoke={(id) => void revokeTrustedNativeDevice(id)}\n    />\n  );\n}\n"],"mappings":";;;;;AAMA,MAAM,iBAAwD;CAAE,KAAK;CAAO,SAAS;AAAU;;AAS/F,SAAgB,sBAAsB,EAAE,SAAS,OAAO,OAAO,YAAwC;CACrG,IAAI,QAAQ,WAAW,GAAG,OAAO;CAEjC,OACE,qBAAC,OAAD;EAAK,WAAU;EAA+B,eAAY;EAA1D,UAAA;GACE,oBAAC,cAAD,EAAA,UAAc,iBAA4B,CAAA;GAC1C,oBAAC,KAAD;IAAG,WAAU;IAAwB,UAAA;GAElC,CAAA;GACF,QAAQ,KAAK,WACZ,qBAAC,OAAD;IAEE,eAAa,yBAAyB,OAAO;IAC7C,WAAU;IAHZ,UAAA,CAKE,qBAAC,QAAD;KAAM,WAAU;KAAhB,UAAA,CACE,qBAAC,QAAD;MAAM,WAAU;MAAhB,UAAA,CACG,OAAO,OACP,OAAO,OAAO,mBAAwB,EACnC;KACN,CAAA,GAAA,qBAAC,QAAD;MAAM,WAAU;MAAhB,UAAA;OACG,eAAe,OAAO;OAAU;OAAE;OAAS;OAAgB,OAAO,UAAU,MAAM,GAAG,EAAE;MACpF;KACF,CAAA,CAAA;IACN,CAAA,GAAA,oBAAC,QAAD;KACE,SAAQ;KACR,MAAK;KACL,UAAU;KACV,eAAa,yBAAyB,OAAO;KAC7C,eAAe,SAAS,OAAO,EAAE;KAClC,UAAA;IAEO,CAAA,CACL;GAtBE,GAAA,OAAO,EAsBT,CACN;EACE;;AAET;;AAGA,SAAgB,oBAAoB;CAClC,MAAM,QAAQ,SAAS,iBAAiB;CACxC,OACE,oBAAC,uBAAD;EACE,SAAS,MAAM,MAAM,kBAAkB,CAAC;EACxC,MAAM,MAAM;EACZ,WAAW,OAAO,KAAK,0BAA0B,EAAE;CACpD,CAAA;AAEL"}