@aitne/dashboard 0.1.10 → 0.1.11

package/.next/server/chunks/ssr/packages_dashboard_src_components_connections_integration-card_tsx_0yh1a-~._.js

@@ -1,4 +1,4 @@
-module.exports=[36581,a=>{"use strict";var b=a.i(39752),c=a.i(34542),d=a.i(54506),e=a.i(78019),f=a.i(39293),g=a.i(85857),h=a.i(7384),i=a.i(21218),j=a.i(29629),k=a.i(30400),l=a.i(47696),m=a.i(57216),n=a.i(74794),o=a.i(54150),p=a.i(40410),q=a.i(47026),r=a.i(28314),s=a.i(81130),t=a.i(59974),u=a.i(48558);a.i(70010);var v=a.i(59825),w=a.i(58906);let x={search:"Search",read:"Read",draft:"Drafts",update_draft:"Update drafts",send:"Send",forward:"Forward",delete:"Archive / delete",label:"Labels",create_label:"Create labels",read_attachment:"Read attachments",batch:"Batch operations",list_events:"List events",get_event:"Read event",create_event:"Create event",update_event:"Update event",delete_event:"Delete event",respond_to_event:"RSVP",respond_event:"RSVP",suggest_time:"Suggest time",list_calendars:"List calendars",get_availability:"Check availability",batch_read:"Batch read"};function y(a){let b=x[a];return void 0!==b?b:a.split("_").map(a=>0===a.length?a:a[0].toUpperCase()+a.slice(1)).join(" ")}function z(a){return a.userManagedConnector?[...w.RUNTIME_AVAILABLE_BACKEND_IDS]:Object.keys(a.backendConnectors)}function A(a){return a.userManagedConnector?[...v.NATIVE_CONNECTOR_BACKEND_IDS]:Object.keys(a.backendConnectors)}let B="__auto__";function C(a){let b=Date.parse(a.endsWith("Z")||/[+-]\d{2}:\d{2}$/.test(a)?a:a.replace(" ","T")+"Z");return Number.isNaN(b)?null:b}function D(a){return 0===a?"$0":a<.01?"<$0.01":`$${a.toFixed(2)}`}function E(a,b){if("gmail"!==a||b<=1)return null;let c=b-1;return`Delegated mode supports one Google account. Your other ${c} Gmail ${1===c?"account":"accounts"} will be disabled (tokens kept — re-enable by switching back to direct).`}let F={gmail:{presentClause:"Gmail OAuth tokens are still in the keychain",absentClause:"Gmail has no OAuth tokens yet",setupPhrase:"the 5-step Google Cloud setup"},google_calendar:{presentClause:"Google Calendar OAuth tokens are still in the keychain",absentClause:"Google Calendar has no OAuth tokens yet",setupPhrase:"the 5-step Google Cloud setup"},notion:{presentClause:"The Notion API key is still in the keychain",absentClause:"Notion has no API key in the keychain yet",setupPhrase:"creating a Notion internal integration, pasting the key, and sharing each database with the integration"},git:{presentClause:"Git direct mode uses the local git CLI and watched repository list",absentClause:"Git direct mode needs watched repositories before it can poll",setupPhrase:"adding at least one watched repository"},github:{presentClause:"GitHub direct mode uses the local gh CLI",absentClause:"GitHub direct mode needs gh auth login outside the daemon",setupPhrase:"authenticating the gh CLI and optionally adding watched repositories"},outlook_mail:{presentClause:"The Outlook BYOA client config is still in the keychain",absentClause:"Outlook has no BYOA client config in the keychain yet",setupPhrase:"registering a Microsoft Identity (Azure) app and authenticating each Outlook mailbox"},outlook_calendar:{presentClause:"The Outlook BYOA client config is still in the keychain (shared with Outlook Mail)",absentClause:"Outlook Calendar has no BYOA client config to reuse yet",setupPhrase:"registering a Microsoft Identity (Azure) app via the Outlook Mail card"},browser_history:{presentClause:"Browser history consent is already accepted on this device",absentClause:"Browser history consent has not been accepted yet",setupPhrase:"accepting the on-device browser history consent latch"}};function G(a){let b=a.directSetup?.credentialKeys??[];if(0===b.length)return null;let c=F[a.key],d=b.join(" + ");return{secretKeys:b,optionDescription:`Deletes ${d} from the keychain after the mode flip. Reverting to direct later will require ${c.setupPhrase}. Asks for a second confirmation.`,confirmTitle:`Purge ${a.displayName} credentials?`,confirmDescription:`This removes ${d} from the keychain. To restore direct mode later you will need to redo ${c.setupPhrase}.`}}var H=a.i(92241),I=a.i(61213),J=a.i(40091);function K(a){let{open:c,onOpenChange:d,descriptor:e,currentMode:f,currentBackend:g,targetMode:h,targetBackend:k,onTargetBackendChange:m,directCredentialsPresent:n,gmailAccountCount:o,tokenHandling:p,onTokenHandlingChange:q,onConfirm:r,isPending:s,error:t}=a,u=function(a){try{return function(a,b){let{mode:c,backend:d}=a,{toMode:e,toBackend:f}=b;if(c===e)return"delegated"===c&&f&&f!==d?{kind:"delegated-backend-change",toBackend:f}:{kind:"no-op"};if("native"===e){if(!f)throw Error("toBackend required for native flip");return"direct"!==c&&"delegated"!==c&&"disabled"!==c?{kind:"to-native",fromMode:"disabled",toBackend:f}:{kind:"to-native",fromMode:c,toBackend:f}}if("native"===c){if("direct"===e)return{kind:"native-to-direct",needsOauthSetup:!a.directCredentialsPresent};if("delegated"===e){if(!f)throw Error("toBackend required for native→delegated");return{kind:"native-to-delegated",toBackend:f}}return{kind:"native-to-disabled"}}if("direct"===c&&"delegated"===e){if(!f)throw Error("toBackend required for direct→delegated");return{kind:"direct-to-delegated",toBackend:f}}if("delegated"===c&&"direct"===e)return{kind:"delegated-to-direct",needsOauthSetup:!a.directCredentialsPresent};if("disabled"===c){if("delegated"===e){if(!f)throw Error("toBackend required for delegated flip");return{kind:"enable-from-disabled",to:"delegated",toBackend:f}}return{kind:"enable-from-disabled",to:"direct"}}return{kind:"disable-from-active"}}(a.from,{toMode:a.to.mode,toBackend:a.to.backend})}catch{return null}}({from:{mode:f,backend:g,directCredentialsPresent:n},to:{mode:h,backend:k}}),v=z(e),w="delegated"===h&&v.length>1,x="direct"===f&&"delegated"===h&&n&&null!==e.directSetup;return(0,b.jsx)(I.Sheet,{open:c,onOpenChange:d,children:(0,b.jsx)(I.SheetContent,{children:(0,b.jsxs)("div",{className:"flex h-full flex-col",children:[(0,b.jsx)(I.SheetHeader,{children:(0,b.jsx)(I.SheetTitle,{children:function(a,b){if(!b||"no-op"===b.kind)return`${a} — no change`;if("direct-to-delegated"===b.kind)return`Delegate ${a} to ${b.toBackend}?`;if("delegated-to-direct"===b.kind)return`Switch ${a} to direct mode?`;if("delegated-backend-change"===b.kind)return`Change ${a} delegate to ${b.toBackend}?`;if("enable-from-disabled"===b.kind){let c="direct"===b.to?"direct":`delegated to ${b.toBackend??"?"}`;return`Enable ${a} (${c})?`}return"to-native"===b.kind?`Switch ${a} to native (${b.toBackend})?`:"native-to-direct"===b.kind?`Switch ${a} to direct mode?`:"native-to-delegated"===b.kind?`Switch ${a} to delegated (${b.toBackend})?`:(b.kind,`Disable ${a}?`)}(e.displayName,u)})}),(0,b.jsxs)("div",{className:"mt-4 min-h-0 flex-1 space-y-4 overflow-y-auto px-1",children:[w&&(0,b.jsxs)("div",{children:[(0,b.jsx)("label",{className:"mb-1 block text-xs font-medium text-muted-foreground",children:"Backend"}),(0,b.jsxs)(l.Select,{value:k??v[0],onValueChange:a=>m?.(a),disabled:s,children:[(0,b.jsx)(l.SelectTrigger,{className:"h-8 text-xs",children:(0,b.jsx)(l.SelectValue,{})}),(0,b.jsx)(l.SelectContent,{children:v.map(a=>{let c=(0,J.isUiPreviewOnlyBackend)(a);return(0,b.jsxs)(l.SelectItem,{value:a,disabled:c,children:[a,c?J.UI_PREVIEW_ONLY_BADGE_SUFFIX:""]},a)})})]})]}),u&&(0,b.jsx)(L,{action:u,descriptor:e,gmailAccountCount:o}),x&&(0,b.jsx)(M,{value:p,onChange:q,disabled:s,purgeDescription:G(e)?.optionDescription}),t&&(0,b.jsx)(j.Alert,{variant:"error",children:t})]}),(0,b.jsxs)("div",{className:"mt-6 flex items-center justify-end gap-2 border-t border-border pt-4",children:[(0,b.jsx)(i.Button,{variant:"outline",size:"sm",onClick:()=>d(!1),disabled:s,children:"Cancel"}),(0,b.jsxs)(i.Button,{variant:u?.kind==="disable-from-active"?"destructive":"default",size:"sm",onClick:()=>void r(),disabled:s||null===u||"no-op"===u.kind,children:[s&&(0,b.jsx)(H.Loader2,{className:"mr-1.5 h-3.5 w-3.5 animate-spin"}),function(a){if(!a)return"Apply";switch(a.kind){case"direct-to-delegated":case"enable-from-disabled":return"Apply";case"delegated-to-direct":case"native-to-direct":return a.needsOauthSetup?"Continue to setup":"Resume direct mode";case"delegated-backend-change":return"Change delegate";case"disable-from-active":case"native-to-disabled":return"Disable";case"to-native":return"Switch to native";case"native-to-delegated":return"Switch to delegated";case"no-op":return"—"}}(u)]})]})]})})})}function L({action:a,descriptor:c,gmailAccountCount:d}){var e,f,g,h,i,k,l;if("direct-to-delegated"===a.kind){let e=function(a,b,c){let d=[];"gmail"===a&&d.push({message:"Mail poller stops observing Gmail — receipts, travel, and Kindle classifiers will not run against new messages.",reversible:!0},{message:"Local FTS5 search on Gmail messages is unavailable. The agent searches through its backend connector instead.",reversible:!0},{message:"Only one Google account is reachable at a time. Additional Gmail accounts will be disabled.",reversible:!0}),"google_calendar"===a&&d.push({message:"Calendar poller stops running. Event awareness drops from 5-minute to hourly granularity.",reversible:!0},{message:"15-minute imminent-event alerts are unavailable — the agent learns about new events on the next hourly check.",reversible:!0}),"notion"===a&&d.push({message:"Notion poller stops observing database edits. Recent-edit awareness shifts from per-poll to inline notion-search inside the hourly check, with reduced recall on less-typed databases.",reversible:!0},{message:"Structured property filter on database queries is unavailable. The agent falls back to semantic notion-search plus client-side filtering — fine for small databases, awkward for >100-row workspaces.",reversible:!0},{message:"Native page archive is unavailable. The agent uses workarounds (status-property update, or move-to-trash-page) and DMs you naming the workaround taken.",reversible:!0}),"git"===a&&d.push({message:"GitWatcher stops polling directly. Git lifecycle checks move to a scheduled backend session, so detection is bounded by the delegated cadence and backend quota.",reversible:!0},{message:"Daemon-side project document updates no longer run from direct classifier output. The delegated session must inspect the repo and update context through the project-doc API.",reversible:!0}),"github"===a&&d.push({message:"GitHubPoller stops polling notifications and workflow runs directly. The delegated session uses gh read-only checks on its cadence instead.",reversible:!0},{message:"Review requests, CI failures, assignments, and security alerts may arrive later because they depend on the delegated cron tick.",reversible:!0}),"outlook_mail"===a&&d.push({message:"Mail poller stops observing Outlook accounts; receipts, travel, and Kindle classifiers will not run against new Outlook messages.",reversible:!0},{message:"Local FTS5 search on Outlook messages is unavailable. The agent searches through whichever Outlook MCP / connector you have wired up on the selected backend.",reversible:!0},{message:`You must register an Outlook / Microsoft Graph MCP server on the ${b} backend before the agent can send, read, or label Outlook mail. The daemon does not proxy this integration.`,reversible:!1}),"outlook_calendar"===a&&d.push({message:"On-demand Outlook calendar reads via /api/calendar/outlook return 410. Calendar awareness depends entirely on the MCP / connector you configure on the selected backend.",reversible:!0},{message:`You must register an Outlook / Microsoft Graph MCP server on the ${b} backend that exposes calendar reads/writes. The daemon does not proxy this integration.`,reversible:!1});let e=c.backendConnectors[b];if(e&&"gmail"===a)for(let a of["send","forward","delete","read_attachment"].filter(a=>!e.optionalCapabilities.includes(a)))d.push({message:`${y(a)} is unavailable on this backend — the agent will draft but not ${function(a){switch(a){case"send":return"send";case"forward":return"forward";case"delete":return"archive or delete";case"read_attachment":return"read attachments";default:return a}}(a)}.`,reversible:!0});return d}(c.key,a.toBackend,c),f=E(c.key,d);return(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)(j.Alert,{variant:"warning",children:[(0,b.jsx)("p",{className:"font-medium",children:"You will lose these direct-mode features"}),(0,b.jsx)("p",{className:"mt-1 text-xs text-muted-foreground",children:"All losses are reversible — OAuth tokens stay in the keychain by default so switching back is frictionless."})]}),f&&(0,b.jsx)(j.Alert,{variant:"warning",children:f}),(0,b.jsx)("ul",{className:"space-y-1.5 text-sm",children:e.map((a,c)=>(0,b.jsxs)("li",{className:"flex items-start gap-2",children:[(0,b.jsx)("span",{className:"mt-1 inline-block h-1.5 w-1.5 shrink-0 rounded-full bg-amber-500"}),(0,b.jsx)("span",{className:"text-muted-foreground",children:a.message})]},c))})]})}if("delegated-to-direct"===a.kind){let d,g=(c.state.deniedTools?.length??0)>0;return(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsx)(j.Alert,{variant:a.needsOauthSetup?"warning":"success",children:(0,b.jsx)("p",{className:"text-sm",children:(e=c.key,f=!a.needsOauthSetup,d=F[e],f?`${d.presentClause}. Switching back re-enables polling with no re-consent step.`:`${d.absentClause}. Switching to direct will walk through ${d.setupPhrase}.`)})}),g&&(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsx)("p",{className:"text-sm",children:"Your tool deny list will be retained but is inactive in direct mode. Re-enabling delegated mode restores it."})})]})}if("delegated-backend-change"===a.kind)return(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsxs)("p",{className:"text-sm",children:["The integration stays delegated — only the backend changes to"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono text-xs",children:a.toBackend}),". Skills and task-flow variants re-materialize on the next session."]})});if("enable-from-disabled"===a.kind)return(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsx)("p",{className:"text-sm",children:"direct"===a.to?"The integration will poll the service directly. You may need to complete OAuth setup.":`The integration will delegate to the ${a.toBackend} backend connector.`})});if("disable-from-active"===a.kind)return(0,b.jsx)(j.Alert,{variant:"warning",children:(0,b.jsx)("p",{className:"text-sm",children:"The daemon stops observing this integration. Any poller associated with it pauses; the agent's session templates drop the skill / task-flow body that depends on it. Re-enabling is one click — credentials stay in the keychain."})});if("to-native"===a.kind){let e,f,k,l,m,n=(g=a.fromMode,h=a.toBackend,e=[],f=c.displayName,"direct"===g&&(e.push({message:`The daemon's background poller for ${f} stops. The agent fetches via ${h}'s native connector during DM and hourly_check turns instead.`,reversible:!0}),e.push({message:"Local FTS5 search / classifier passes (receipts, travel, Kindle for mail; calendar reconcile for events) stop running. Direct-mode data already in the DB stays searchable; new data lands as in-turn observations only.",reversible:!0}),e.push({message:`Your direct-mode credentials for ${f} stay in the keychain (dormant) so a future flip back to direct re-uses them without re-consent. Delete them explicitly via the direct→delegated "Purge from keychain" flow if you want them gone.`,reversible:!0})),"delegated"===g&&(e.push({message:"The delegated-sync worker stops ticking on its cadence. Observations land at hourly_check granularity instead, fetched by the main DM session itself.",reversible:!0}),e.push({message:"Per-call proxy cost shifts from the (cheap) lite-tier delegated model to your main DM session's medium tier — typically ~20–30× more expensive per fetch.",reversible:!0})),"disabled"===g&&e.push({message:"The integration becomes reachable from hourly_check and DM again — currently it is silent. No background poller runs; the agent fetches in-turn.",reversible:!0}),e.push({message:`${h} must already have its ${f} connector configured (e.g. claude.ai/connections, ~/.codex MCP entry, or ~/.gemini extension). The daemon does not see ${f} credentials.`,reversible:!1}),e.push({message:"Switching the main backend later automatically disables this row (an explicit binding, not a routing rule). You'll be asked to re-configure on the new backend.",reversible:!0}),e),o="direct"===a.fromMode?E(c.key,d):null,p=(l=Math.round((.39-(k=.014*("delegated"===(i=a.fromMode))))*365),m=k>0?Math.round(.39/k):null,{fromDailyUsd:k,toDailyUsd:.39,yearlyDeltaUsd:l,multiplier:m,fromLabel:"delegated"===i?"delegated worker":"direct"===i?"direct poller (no LLM tokens)":"disabled (no fetch at all)"});return(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)(j.Alert,{variant:"info",children:[(0,b.jsxs)("p",{className:"text-sm font-medium",children:["Native mode — the agent fetches ",c.displayName," in-turn via ",a.toBackend,"'s connector. No background poller, no delegated worker."]}),(0,b.jsx)("p",{className:"mt-1 text-xs text-muted-foreground",children:"We run a live capability probe before committing the flip so a missing connector capability surfaces here, not at the next DM / hourly_check turn."})]}),o&&(0,b.jsx)(j.Alert,{variant:"warning",children:o}),(0,b.jsxs)("div",{className:"rounded-md border border-amber-300/60 bg-amber-50/60 p-3 text-xs dark:border-amber-700/50 dark:bg-amber-950/30",children:[(0,b.jsx)("p",{className:"font-medium text-amber-800 dark:text-amber-200",children:"Estimated cost shift (typical workload)"}),(0,b.jsxs)("p",{className:"mt-1 text-amber-900/80 dark:text-amber-100/80",children:["From ",p.fromLabel," ",(0,b.jsxs)("code",{className:"rounded bg-amber-100 px-1 py-0.5 font-mono text-[11px] dark:bg-amber-900/50",children:["≈ ",D(p.fromDailyUsd),"/day"]})," ","→ native MCP on ",a.toBackend," ",(0,b.jsxs)("code",{className:"rounded bg-amber-100 px-1 py-0.5 font-mono text-[11px] dark:bg-amber-900/50",children:["≈ ",D(p.toDailyUsd),"/day"]}),null!==p.multiplier&&(0,b.jsxs)(b.Fragment,{children:[" ","— roughly"," ",(0,b.jsxs)("strong",{children:[p.multiplier,"×"]})," more per integration"]}),"."]}),(0,b.jsxs)("p",{className:"mt-1 text-[11px] text-amber-900/70 dark:text-amber-100/70",children:["Marginal ~$",p.yearlyDeltaUsd,"/year per integration at typical volume. Native is recommended when the alternative is leaving the integration disabled — not as a free upgrade from delegated."]})]}),(0,b.jsxs)("div",{children:[(0,b.jsx)("p",{className:"mb-2 text-xs font-medium text-muted-foreground",children:"What changes"}),(0,b.jsx)("ul",{className:"space-y-1.5 text-sm",children:n.map((a,c)=>(0,b.jsxs)("li",{className:"flex items-start gap-2",children:[(0,b.jsx)("span",{className:`mt-1 inline-block h-1.5 w-1.5 shrink-0 rounded-full ${a.reversible?"bg-amber-500":"bg-red-500"}`}),(0,b.jsx)("span",{className:"text-muted-foreground",children:a.message})]},c))})]})]})}if("native-to-direct"===a.kind){let d;return(0,b.jsx)(j.Alert,{variant:a.needsOauthSetup?"warning":"success",children:(0,b.jsx)("p",{className:"text-sm",children:(k=c.key,l=!a.needsOauthSetup,d=F[k],l?`${d.presentClause} from a previous direct-mode setup. Switching back re-enables polling without re-consent.`:`${d.absentClause} — native mode left credential management to the backend. Switching to direct will walk through ${d.setupPhrase}.`)})})}return"native-to-delegated"===a.kind?(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsxs)("p",{className:"text-sm",children:["The agent stops calling ",c.displayName," directly through the main backend. Instead, the daemon proxies through"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono text-xs",children:a.toBackend})," ","and the delegated-sync worker resumes its cadence — observations land server-side again."]})}):"native-to-disabled"===a.kind?(0,b.jsx)(j.Alert,{variant:"warning",children:(0,b.jsxs)("p",{className:"text-sm",children:["The agent loses awareness of ",c.displayName,". No background poller, no in-turn fetch — the hourly check and DM flow drop the integration from their actionable steps. Re-enabling is one click; no data is destroyed."]})}):null}function M({value:a,onChange:c,disabled:d,purgeDescription:e}){return(0,b.jsxs)("div",{className:"rounded-md border border-border bg-muted/30 p-3",children:[(0,b.jsx)("p",{className:"mb-2 text-sm font-medium",children:"Direct-mode credential handling"}),(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsx)(N,{checked:"keep"===a,disabled:d,onSelect:()=>c("keep"),label:"Keep dormant (recommended)",description:"Credentials stay in the keychain. Reverting to direct is a one-click flip with no re-consent step."}),(0,b.jsx)(N,{checked:"purge"===a,disabled:d,onSelect:()=>c("purge"),label:"Purge from keychain",description:e??"Deletes the direct-mode credentials after the mode flip. Reverting to direct later will require redoing the original setup. Asks for a second confirmation."})]})]})}function N({checked:a,disabled:c,onSelect:d,label:e,description:f}){return(0,b.jsxs)("label",{className:`flex cursor-pointer items-start gap-2 rounded-md border p-2 text-xs transition ${a?"border-primary bg-primary/5":"border-border hover:bg-muted/50"} ${c?"pointer-events-none opacity-50":""}`,children:[(0,b.jsx)("input",{type:"radio",name:"token-handling",className:"mt-0.5",checked:a,disabled:c,onChange:d}),(0,b.jsxs)("div",{children:[(0,b.jsx)("p",{className:"font-medium text-foreground",children:e}),(0,b.jsx)("p",{className:"mt-0.5 text-muted-foreground",children:f})]})]})}function O({currentMode:a,descriptor:d,onSelectMode:f,delegatedBackendCount:g,mainBackend:h,disabled:i=!1,groupId:j}){let[k,l]=(0,c.useState)(()=>new Set),n=j??`mode-explainer-${d.key}`,o=A(d),p=null!=h&&o.includes(h),q=d.supportedModes.includes("native")?h?p?null:`Your main backend (${h}) ships no native connector for ${d.displayName}.`:"Set a main backend first — native binds to it.":null;return(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsx)("p",{className:"text-xs font-medium text-muted-foreground",children:"Mode"}),(0,b.jsx)("ul",{className:"space-y-2",children:d.supportedModes.map(c=>{let j=function(a,b,c=null){let d=b.displayName;if("direct"===a)return{title:"Direct",brief:`The daemon talks to ${d} itself using credentials you provide.`,details:[`Lowest token cost — your conversation backend (Claude / Codex / Gemini) does not pay tokens to fetch ${d} data; the daemon makes the API call directly and hands results to the agent.`,`Built-in safety guardrails apply: the daemon classifies destructive operations (send / delete / overwrite) and routes them through approval flows before they reach ${d}.`,function(a){switch(a){case"gmail":case"google_calendar":return"Requires a Google Cloud OAuth credential — upload the credentials JSON and complete the browser consent step on this screen before the daemon can poll.";case"notion":return"Requires a Notion internal-integration API key — paste it in this app and share each target database with the integration in Notion.";case"git":return"Requires the local git CLI plus a watched-repository list — no credential is stored in this app; the daemon reads the repos with your existing git config.";case"github":return"Requires the local gh CLI authenticated outside the daemon (gh auth login) — no credential is stored in this app; the daemon shells out to gh.";case"outlook_mail":case"outlook_calendar":return"Requires a Microsoft Identity (Azure BYOA) client config plus a per-account MSAL sign-in for each Outlook mailbox.";case"browser_history":return"Requires accepting the on-device browser history consent latch — no external credential is stored; the daemon reads local browser history databases directly."}}(b.key),"Local observers stay on — receipts, travel, calendar-imminent alerts, and FTS5 search continue to run."],footnote:"Recommended when you have the credentials ready and want the lowest token cost."};if("delegated"===a)return{title:"Delegated",brief:`Reuse Claude Code / Gemini CLI / Codex's existing connectors (MCP, plugin, or built-in connector) to reach ${d}.`,details:[`When the agent needs ${d} data, the daemon invokes the chosen CLI (Claude Code / Codex / Gemini) which calls ${d} through its already-configured connector. A small per-call token cost is incurred each time the CLI is invoked.`,`Concrete flow: your main DM agent (e.g. Claude) is asked to read ${d}; it calls this app's API; the daemon invokes the chosen CLI (e.g. Gemini CLI) which uses its already-configured connector to talk to ${d}; the result flows back through the daemon to your main agent.`,`Effective when the backend that handles your DM conversation differs from the backend that has the ${d} connector — for example, a Claude Code main agent borrowing Gemini CLI's Gmail connector to save on Claude tokens or to leverage a connector you already configured there.`,"No extra credentials live in this app — auth is whatever Claude / Codex / Gemini already had configured (claude.ai/connections, ~/.codex MCP entries, ~/.gemini extensions).","Daemon-side safety guardrails run more loosely here because the actual API call happens inside the CLI, not on the daemon. Per-tool deny-lists still apply on the proxy layer."],footnote:"Recommended when you want one backend to handle conversation and another to handle integration access, or when you do not want to manage GCP / Notion credentials yourself."};if("native"===a){let a=function(a){switch(a){case"claude":return"Claude";case"codex":return"Codex";case"gemini":return"Gemini";case"opencode":return"OpenCode";default:return"your main backend"}}(c);return{title:`Native — via ${a}`,brief:`Your DM agent (${a}) reaches ${d} directly through its own connector — no background polling and no daemon-side proxy.`,details:[`Pick this when you already use ${a}'s ${d} connector for ad-hoc work and just want the agent's hourly check and DM replies to use the same connector instead of the daemon. No background poller runs, no delegated worker ticks, no per-call proxy hop — the agent fetches in-turn when it needs ${d}.`,'Token cost moves from the (cheap) delegated worker to your main DM session. Reads sit on the same prompt as the rest of the turn, which raises the medium-tier token bill — typically by an order of magnitude per integration vs. delegated. Worth it when you would otherwise leave the integration "Disabled" and lose hourly-check awareness entirely.',`${a} must already have its ${d} connector configured (e.g. claude.ai/connections for Claude, an MCP entry for Codex, an extension for Gemini). The daemon never sees your ${d} credentials; auth and revocation live in ${a}.`,"Daemon-side safety guardrails (destructive-op confirmation, deny-lists) still cover the absolute-block layer. Per-tool deny lists do NOT apply here — the call never crosses the daemon proxy, so deny enforcement is whatever your backend allows.","If you switch the main backend later, this row is automatically flipped to Disabled and you'll be asked to re-configure. Native is an explicit binding to the backend, not a routing rule."],footnote:`Recommended when ${a} already has the ${d} connector wired up and you want the agent to use it for hourly check / DM, instead of either running a background poller or leaving the integration disabled.`}}return{title:"Disabled",brief:`The daemon does not observe or act on ${d} at all.`,details:[`The agent loses awareness of ${d} entirely — no observers, no skill body, no task-flow guidance. It will not bring up ${d} data on its own.`,`Pick this when the backend you DM with already has ${d} access through its own connectors and you do not need cross-backend delegation. Your agent can still answer ad-hoc questions about ${d} via that backend's native tools, but the daemon will not orchestrate it.`,`Pick this when you simply do not use ${d}.`,"Switching back to direct or delegated later is one click; no data is destroyed."],footnote:"Recommended when this integration is not relevant to you, or your main backend already covers it natively."}}(c,d,h??null),o=c===a,p=k.has(c),r="delegated"===c&&0===g,s="native"===c&&null!==q,t=i||r||s;return(0,b.jsxs)("li",{className:(0,u.cn)("rounded-md border transition-colors",o?"border-primary bg-primary/5":"border-border bg-card",t&&"opacity-60"),children:[(0,b.jsxs)("label",{className:(0,u.cn)("flex cursor-pointer items-start gap-3 p-3",t&&"cursor-not-allowed"),children:[(0,b.jsx)("input",{type:"radio",name:n,className:"mt-1 h-4 w-4 shrink-0",checked:o,disabled:t,onChange:()=>{t||o||f(c)},"aria-label":`Set mode to ${j.title}`}),(0,b.jsxs)("div",{className:"flex-1 space-y-1",children:[(0,b.jsx)("p",{className:"text-sm font-medium text-foreground",children:j.title}),(0,b.jsx)("p",{className:"text-xs text-muted-foreground",children:j.brief}),r&&(0,b.jsx)("p",{className:"text-xs text-amber-700 dark:text-amber-400",children:"No backend connector is registered for this integration — Delegated mode cannot be activated."}),s&&q&&(0,b.jsx)("p",{className:"text-xs text-amber-700 dark:text-amber-400",children:q})]})]}),(0,b.jsxs)(m.Collapsible,{open:p,onOpenChange:a=>{l(b=>{let d=new Set(b);return a?d.add(c):d.delete(c),d})},children:[(0,b.jsxs)(m.CollapsibleTrigger,{type:"button",className:"group flex w-full items-center gap-1 border-t border-border/50 px-3 py-1.5 text-left text-[11px] font-medium text-muted-foreground hover:bg-muted/40 hover:text-foreground","aria-label":`Toggle details for ${j.title} mode`,children:[(0,b.jsx)(e.ChevronDown,{className:(0,u.cn)("h-3 w-3 transition-transform",p&&"rotate-180")}),p?"Hide details":"Show details"]}),(0,b.jsx)(m.CollapsibleContent,{children:(0,b.jsxs)("div",{className:"space-y-2 px-3 pb-3 pt-1 text-xs leading-relaxed",children:[(0,b.jsx)("ul",{className:"list-disc space-y-1.5 pl-5 text-muted-foreground",children:j.details.map((a,c)=>(0,b.jsx)("li",{children:a},c))}),j.footnote&&(0,b.jsx)("p",{className:"rounded bg-muted/50 px-2 py-1 text-[11px] italic text-foreground/80",children:j.footnote})]})})]})]},c)})})]})}var P=a.i(42732),Q=a.i(48033),R=a.i(869);function S(a){let b=new Set,c=[];for(let d of a.split(/\r?\n/)){let a=d.trim();a&&(b.has(a)||(b.add(a),c.push(a)))}return c}let T={gmail:{codex:{heading:"Gmail (delegated to Codex) — pre-populated entries:",entries:[{tool:"send_email",parenNote:"sending a freshly-composed message",verdict:"strictly destructive"},{tool:"delete_emails",parenNote:"move to Trash — the connector's only delete primitive",verdict:"strictly destructive"},{tool:"archive_emails",parenNote:"archive",verdict:'recoverable from "All Mail" but easy to lose track of'},{tool:"apply_labels_to_emails",verdict:"mutating; can hide threads"}]},claude:{heading:"Gmail (delegated to Claude) — the hosted Gmail connector is draft-only (no send / delete / archive). The only mutating ops are label changes:",entries:[{tool:"label_message",verdict:"mutating"},{tool:"label_thread",verdict:"mutating"}]}},google_calendar:{codex:{heading:"Google Calendar — pre-populated entries:",entries:[{tool:"delete_event",verdict:"strictly destructive"},{tool:"update_event",parenNote:"edits to existing events",verdict:"mutating; not strictly destructive but easy to undo wrong"}]},claude:{heading:"Google Calendar — pre-populated entries:",entries:[{tool:"delete_event",verdict:"strictly destructive"},{tool:"update_event",parenNote:"edits to existing events",verdict:"mutating; not strictly destructive but easy to undo wrong"}]}}};function U({integrationKey:a,delegatedBackend:c}){let d=T[a]?.[c];return(0,b.jsxs)(k.Card,{className:"bg-amber-50/40 dark:bg-amber-950/20",children:[(0,b.jsx)("h4",{className:"text-sm font-semibold",children:"Your destructive-action floor"}),(0,b.jsx)("p",{className:"mt-2 text-xs text-muted-foreground",children:"By default, the wizard pre-populated the destructive tools below into your deny list. The agent can still read, search, and draft — it just can't send, archive, or delete unless you remove the corresponding entry."}),d&&(0,b.jsxs)("div",{className:"mt-3 space-y-2 text-xs",children:[(0,b.jsx)("p",{className:"font-medium text-foreground",children:d.heading}),d.preamble&&(0,b.jsx)("p",{className:"text-muted-foreground",children:d.preamble}),(0,b.jsx)("ul",{className:"ml-4 list-disc space-y-1 text-muted-foreground",children:d.entries.map(a=>(0,b.jsxs)("li",{children:[(0,b.jsx)("code",{className:"font-mono text-[11px] text-foreground",children:a.tool}),a.parenNote&&(0,b.jsxs)("span",{children:[" (",a.parenNote,")"]}),(0,b.jsx)("span",{children:" — "}),(0,b.jsx)("em",{children:a.verdict})]},a.tool))})]}),(0,b.jsxs)("div",{className:"mt-3 space-y-2 text-xs text-muted-foreground",children:[(0,b.jsxs)("p",{children:[(0,b.jsx)("span",{className:"font-medium text-foreground",children:"Why these defaults?"})," ","The list errs conservative on purpose: the floor here is what keeps the CLAUDE.md"," ",(0,b.jsx)("em",{children:'"destructive ops require user confirmation"'})," ","invariant intact on a fresh install. If you want the agent to archive freely, remove ",(0,b.jsx)("code",{className:"font-mono",children:"archive_emails"}),". If you trust it to update calendar events, remove"," ",(0,b.jsx)("code",{className:"font-mono",children:"update_event"}),". The strictly-destructive entries (",(0,b.jsx)("code",{className:"font-mono",children:"send_email"}),","," ",(0,b.jsx)("code",{className:"font-mono",children:"delete_emails"}),","," ",(0,b.jsx)("code",{className:"font-mono",children:"delete_event"}),") are the ones we recommend keeping."]}),(0,b.jsxs)("p",{children:["Tool names are bare — no ",(0,b.jsx)("code",{className:"font-mono",children:"mcp__*"})," ","prefix, no leading underscore (the daemon prepends the connector's namespace before forwarding). They match the connector you've delegated to: Codex Gmail uses ",(0,b.jsx)("code",{className:"font-mono",children:"send_email"}),"/",(0,b.jsx)("code",{className:"font-mono",children:"delete_emails"}),"/etc., Claude Gmail uses ",(0,b.jsx)("code",{className:"font-mono",children:"label_message"}),"/",(0,b.jsx)("code",{className:"font-mono",children:"label_thread"}),"/etc. Patterns support ",(0,b.jsx)("code",{className:"font-mono",children:"*"})," as a suffix — for example, ",(0,b.jsx)("code",{className:"font-mono",children:"delete_*"})," matches everything that starts with ",(0,b.jsx)("code",{className:"font-mono",children:"delete_"}),"."]}),(0,b.jsx)("p",{children:"Anything you deny here is rejected at the daemon, regardless of which path the agent takes (direct API, cross-backend proxy, or same-backend native MCP)."})]})]})}function V({integrationKey:a,descriptor:e,delegatedBackend:f,deniedTools:g,currentMode:l}){let[m,n]=(0,c.useState)(g??[]),[o,p]=(0,c.useState)(!1),[r,s]=(0,c.useState)(null),[u,v]=(0,c.useState)(!1),w=(0,q.usePatchIntegration)();(0,c.useEffect)(()=>{let a=[...g??[]];n(b=>!function(a,b){if(a.length!==b.length)return!1;let c=new Set(a);for(let a of b)if(!c.has(a))return!1;return!0}(b,a)?o?b:a:(p(!1),b))},[g,f]),(0,c.useEffect)(()=>{s(null),v(!1)},[f]);let x=(0,c.useMemo)(()=>(function(a,b,c){if(!b)return null;let d=a.backendConnectors[b];if(!d)return null;let e=new Set(c??[]),f=new Set(d.requiredCapabilities),g=new Set,h=[];for(let a of d.optionalCapabilities){if(g.has(a))continue;g.add(a);let b=[...d.capabilityTools[a]??[]],c=b.length>0&&b.every(a=>e.has(a));h.push({capability:a,label:y(a),tools:b,required:f.has(a),denied:c})}for(let a of d.requiredCapabilities){if(g.has(a))continue;g.add(a);let b=[...d.capabilityTools[a]??[]];h.push({capability:a,label:y(a),tools:b,required:!0,denied:!1})}let i=new Set;for(let a of Object.values(d.capabilityTools))for(let b of a)i.add(b);return{rows:h,staleDeniedTools:(c??[]).filter(a=>!i.has(a)),softEnforcement:"claude"!==b}})(e,f,m),[e,f,m]);if("delegated"!==l||!x)return null;let z=x.rows.filter(a=>!a.required),A=x.rows.filter(a=>a.required),B=async()=>{s(null),v(!1);try{await w.mutateAsync({key:a,body:{mode:"delegated",delegatedBackend:f,deniedTools:[...m]}}),p(!1),v(!0),window.setTimeout(()=>v(!1),1500)}catch(a){s(function(a){if(a instanceof t.ApiError){let b=a.body;if(b?.error==="unknown_tool")return b.message??`Unknown tool: ${b.tool??"?"}`;if(b?.error==="denial_breaks_required_capability"){let a=b.remainingTools?.join(", ")??"?";return b.message??`Denying these tools breaks required capability '${b.capability??"?"}'. Keep at least one of: ${a}.`}return b?.message??a.message}return a instanceof Error?a.message:"Unexpected error"}(a))}},C="codex"===f?"codex":null,D=z.filter(a=>a.denied).length;return(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(U,{integrationKey:a,delegatedBackend:f}),(0,b.jsxs)(k.Card,{children:[(0,b.jsxs)("div",{className:"mb-2 flex flex-wrap items-center justify-between gap-2",children:[(0,b.jsxs)("div",{className:"flex items-center gap-2",children:[(0,b.jsx)("h4",{className:"text-sm font-medium",children:"Tool permissions"}),D>0&&(0,b.jsxs)(h.Badge,{variant:"amber",className:"h-5 px-1.5 text-[10px]",children:[D," off"]})]}),C&&(0,b.jsx)(R.TooltipProvider,{children:(0,b.jsxs)(R.Tooltip,{children:[(0,b.jsx)(R.TooltipTrigger,{asChild:!0,children:(0,b.jsxs)(h.Badge,{variant:"amber",className:"cursor-help gap-1",children:["Limited enforcement (",C,")"]})}),(0,b.jsx)(R.TooltipContent,{children:(0,b.jsx)("p",{className:"max-w-xs text-xs",children:'Codex doesn\'t expose a per-tool block at the binary level. The agent reads a "denied tools" note in its prompt and is asked to obey it — weaker than the SDK-level block Claude and Gemini provide. Switch to a Claude- or Gemini-backed delegation if you need hard enforcement.'})})]})})]}),(0,b.jsx)("p",{className:"mb-3 text-xs text-muted-foreground",children:"Turn off connector tools the agent should never use for this integration. Required capabilities (search, read, …) can't be disabled — to drop them, switch the integration out of delegated mode."}),0===z.length?(0,b.jsx)("p",{className:"text-xs italic text-muted-foreground",children:"This connector has no optional capabilities to manage."}):(0,b.jsx)("div",{className:"space-y-1",children:z.map(a=>(0,b.jsx)(X,{row:a,onToggle:()=>{a.required||(n(function(a,b,c){let d=new Set(a);if(c)for(let a of b.tools)d.add(a);else for(let a of b.tools)d.delete(a);return[...d]}(m,a,!a.denied)),p(!0),s(null),v(!1))}},a.capability))}),A.length>0&&(0,b.jsx)(Y,{rows:A}),x.staleDeniedTools.length>0&&(0,b.jsx)(j.Alert,{variant:"warning",className:"mt-3",children:(0,b.jsxs)("div",{className:"flex items-start justify-between gap-2",children:[(0,b.jsxs)("div",{className:"space-y-1",children:[(0,b.jsxs)("p",{className:"text-xs font-medium",children:[x.staleDeniedTools.length," stale entr",1===x.staleDeniedTools.length?"y":"ies"," from a previous backend"]}),(0,b.jsx)("ul",{className:"font-mono text-[11px]",children:x.staleDeniedTools.map(a=>(0,b.jsx)("li",{className:"break-all",children:a},a))}),(0,b.jsxs)("p",{className:"text-[11px] text-muted-foreground",children:[`These names don't match any tool in ${f}'s`,"connector. The agent ignores them already; click Clean up to drop them from the saved list."]})]}),(0,b.jsx)(i.Button,{variant:"outline",size:"sm",className:"h-7 shrink-0 px-2 text-xs",onClick:()=>{if(0===x.staleDeniedTools.length)return;let a=new Set(x.staleDeniedTools);n(m.filter(b=>!a.has(b))),p(!0),s(null),v(!1)},children:"Clean up"})]})}),r&&(0,b.jsx)(j.Alert,{variant:"error",className:"mt-3 whitespace-pre-line",children:(0,b.jsx)("p",{className:"text-xs",children:r})}),(o||u)&&(0,b.jsxs)("div",{className:"mt-3 flex items-center justify-end gap-2",children:[u&&!o&&(0,b.jsxs)("span",{className:"flex items-center gap-1 text-xs text-emerald-600 dark:text-emerald-400",children:[(0,b.jsx)(d.Check,{className:"h-3 w-3"})," Saved"]}),o&&(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(i.Button,{variant:"ghost",size:"sm",className:"h-7 px-2 text-xs",onClick:()=>{n(g??[]),p(!1),s(null),v(!1)},disabled:w.isPending,children:"Revert"}),(0,b.jsx)(i.Button,{size:"sm",className:"h-7 px-3 text-xs",onClick:()=>void B(),disabled:w.isPending,children:w.isPending?"Applying…":"Apply"})]})]}),(0,b.jsx)(W,{draft:m,onChange:a=>{n(a),p(!0),s(null),v(!1)}})]})]})}function W({draft:a,onChange:d}){let[f,g]=(0,c.useState)(!1),[h,i]=(0,c.useState)(a.join("\n"));return(0,c.useEffect)(()=>{let b=S(h);b.length===a.length&&b.every((b,c)=>b===a[c])||i(a.join("\n"))},[a]),(0,b.jsxs)("div",{className:"mt-4 border-t pt-3",children:[(0,b.jsxs)("button",{type:"button",className:"flex w-full items-center justify-between text-xs text-muted-foreground hover:text-foreground",onClick:()=>g(a=>!a),"aria-expanded":f,children:[(0,b.jsxs)("span",{className:"flex items-center gap-1",children:[(0,b.jsx)("span",{className:"font-medium",children:"Advanced — raw deny list"}),(0,b.jsxs)("span",{className:"text-[10px]",children:["(",a.length," ",1===a.length?"entry":"entries",")"]})]}),f?(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3"}):(0,b.jsx)(P.ChevronRight,{className:"h-3 w-3"})]}),f&&(0,b.jsxs)("div",{className:"mt-2 space-y-2",children:[(0,b.jsxs)("p",{className:"text-[11px] text-muted-foreground",children:["One tool pattern per line. Suffix glob support: ",(0,b.jsx)("code",{className:"font-mono",children:"delete_*"})," ","matches every tool starting with ",(0,b.jsx)("code",{className:"font-mono",children:"delete_"}),". The list is enforced uniformly across direct, cross-backend proxy, and same-backend native MCP paths."]}),(0,b.jsx)("textarea",{value:h,onChange:a=>{var b;i(b=a.target.value),d(S(b))},spellCheck:!1,rows:Math.max(4,Math.min(12,h.split("\n").length+1)),className:"w-full rounded-md border border-input bg-background p-2 font-mono text-[11px] text-foreground focus:outline-none focus:ring-2 focus:ring-ring",placeholder:"send_email\ndelete_emails\narchive_*"})]})]})}function X({row:a,onToggle:d}){let[f,g]=(0,c.useState)(!1),i=!a.denied;return(0,b.jsxs)("div",{className:(0,u.cn)("rounded-md border p-2 text-xs transition",i?"border-border":"border-dashed border-border/70 bg-muted/20"),children:[(0,b.jsxs)("div",{className:"flex items-center gap-2",children:[(0,b.jsx)("input",{id:`perm-${a.capability}`,type:"checkbox",className:"cursor-pointer",checked:i,onChange:d}),(0,b.jsxs)("label",{htmlFor:`perm-${a.capability}`,className:"flex-1 cursor-pointer",children:[(0,b.jsx)("span",{className:"font-medium text-foreground",children:a.label}),a.denied&&(0,b.jsx)(h.Badge,{variant:"amber",className:"ml-2 h-4 px-1 text-[10px]",children:"off"})]}),a.tools.length>0&&(0,b.jsxs)("button",{type:"button",className:"flex shrink-0 items-center gap-0.5 rounded px-1 py-0.5 text-[10px] text-muted-foreground hover:bg-muted/40 hover:text-foreground",onClick:()=>g(a=>!a),"aria-expanded":f,"aria-label":f?`Hide tools for ${a.label}`:`Show tools for ${a.label}`,children:[f?(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3"}):(0,b.jsx)(P.ChevronRight,{className:"h-3 w-3"}),a.tools.length," tool",1===a.tools.length?"":"s"]})]}),f&&a.tools.length>0&&(0,b.jsx)("ul",{className:"ml-6 mt-1 font-mono text-[10px] text-muted-foreground",children:a.tools.map(a=>(0,b.jsx)("li",{className:"break-all",children:a},a))})]})}function Y({rows:a}){let[f,g]=(0,c.useState)(!1);return(0,b.jsxs)("div",{className:"mt-3 border-t pt-2",children:[(0,b.jsxs)("button",{type:"button",className:"flex w-full items-center justify-between text-xs text-muted-foreground hover:text-foreground",onClick:()=>g(a=>!a),"aria-expanded":f,children:[(0,b.jsxs)("span",{className:"flex items-center gap-1",children:[(0,b.jsx)(Q.Lock,{className:"h-3 w-3"})," Required capabilities (",a.length,")"]}),f?(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3"}):(0,b.jsx)(P.ChevronRight,{className:"h-3 w-3"})]}),f&&(0,b.jsxs)("ul",{className:"mt-2 space-y-1",children:[a.map(a=>(0,b.jsxs)("li",{className:"flex items-center gap-1.5 text-[11px] text-muted-foreground",children:[(0,b.jsx)(d.Check,{className:"h-3 w-3 text-muted-foreground/70"}),(0,b.jsx)("span",{className:"font-medium text-foreground",children:a.label}),a.tools.length>0&&(0,b.jsxs)("span",{className:"font-mono text-[10px]",children:["· ",a.tools.join(", ")]})]},a.capability)),(0,b.jsx)("li",{className:"pt-1 text-[10px] italic text-muted-foreground",children:"To drop these, switch this integration out of delegated mode."})]})]})}function Z({name:a,badge:c,children:d}){return(0,b.jsxs)(k.Card,{children:[(0,b.jsxs)("div",{className:"mb-3 flex items-center justify-between",children:[(0,b.jsx)("h3",{className:"text-sm font-medium",children:a}),c]}),d]})}function $(a){if(a instanceof t.ApiError){let b=a.body;if(b?.error==="missing_variants"){let a=[...b.missingSkills??[],...b.missingTaskFlows??[]],c="native"===b.mode?"native":"delegated";return`Missing variant file(s) for ${c} mode:
-${a.join("\n")}`}if(b?.error==="backend_not_supported_native"){let a=b.supportedNativeBackends?.join(", ")??"—";return`${b.message??"Backend has no native connector."} Supported native backends: ${a}.`}return b?.error==="native_backend_mismatches_main"?b.message??`Native mode must bind to the current main backend (${b.mainBackend??"?"}).`:b?.message??a.message}return a instanceof Error?a.message:"Unexpected error"}function _({descriptor:a,backend:c,mode:d}){let e=c?function(a,b){switch(a){case"claude":return`Claude Code: register an MCP server via \`claude mcp add\` or wire up a connector at claude.ai/connections that exposes ${b}.`;case"codex":return`Codex: add an MCP server entry to your Codex configuration that exposes ${b} so the connector surfaces in Codex's tool list.`;case"gemini":return`Gemini CLI: install an MCP extension that exposes ${b} (e.g. \`gemini mcp add\` or a \`~/.gemini/extensions/<name>/\` directory).`;case"opencode":return`OpenCode: configure an MCP server for ${b} once OpenCode runtime support is enabled.`}}(c,a.displayName):null;return(0,b.jsxs)(j.Alert,{variant:"info",children:[(0,b.jsxs)("p",{className:"text-xs font-medium",children:["User-managed connector — the daemon does not poll, proxy, or store credentials for ",a.displayName,"."]}),(0,b.jsxs)("p",{className:"mt-1 text-xs",children:["native"===d?"Native":"Delegated"," mode requires you to register an MCP server or connector on the ",c??"selected"," backend that gives it access to"," ",a.displayName,". The agent uses those tools directly; no capability probe runs and no daemon-side proxy is exposed."]}),e&&(0,b.jsx)("p",{className:"mt-1 text-[11px] text-muted-foreground",children:e})]})}function aa({integrationKey:a,entry:k,descriptor:l,featureMatrix:n}){let o=n.filter(a=>a.present).length,p=n.length,r=k.lastProbeAt?new Date(k.lastProbeAt).toLocaleString():null,s=k.delegatedBackend;s&&l.backendConnectors[s];let v=(0,q.useIntegrationProbeLive)(),[w,x]=(0,c.useState)(null);if(l.userManagedConnector)return(0,b.jsx)(_,{descriptor:l,backend:s,mode:"delegated"});let y=async()=>{if(s){x(null);try{await v.mutateAsync({key:a,backend:s,liveProbe:!0})}catch(a){if(a instanceof t.ApiError){let b=a.body;b?.error==="live_probe_unsupported"?x(b.message??"Live probe not yet supported on this backend."):x(b?.message??a.message)}else x(a instanceof Error?a.message:"Unexpected error")}}};return(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsxs)("div",{className:"flex flex-wrap items-center gap-x-4 gap-y-1 text-xs text-muted-foreground",children:[(0,b.jsxs)("span",{children:["Tool namespace"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:k.toolNamespace??"?"})]}),(0,b.jsxs)("span",{children:["Capabilities"," ",(0,b.jsxs)("span",{className:"text-foreground",children:[o,"/",p]})]}),(0,b.jsxs)("span",{children:["Probe"," ",(0,b.jsx)("span",{className:"text-foreground",children:r??"defaults (no live probe yet)"})]}),(0,b.jsxs)(i.Button,{variant:"ghost",size:"sm",className:"h-6 gap-1 px-2 text-[11px]",onClick:()=>void y(),disabled:v.isPending||!s,"aria-label":"Re-probe connector",children:[(0,b.jsx)(f.RefreshCw,{className:(0,u.cn)("h-3 w-3",v.isPending&&"animate-spin")}),v.isPending?"Probing…":"Re-probe"]})]}),w&&(0,b.jsx)(j.Alert,{variant:"error",children:(0,b.jsx)("p",{className:"text-xs",children:w})}),p>0&&(0,b.jsxs)(m.Collapsible,{children:[(0,b.jsxs)(m.CollapsibleTrigger,{className:"group flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground",children:[(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3 transition-transform group-data-[state=open]:rotate-180"}),"Feature matrix"]}),(0,b.jsx)(m.CollapsibleContent,{children:(0,b.jsx)("ul",{className:"mt-2 grid grid-cols-1 gap-0.5 sm:grid-cols-2",children:n.map(a=>(0,b.jsxs)("li",{className:(0,u.cn)("flex items-center gap-1.5 text-xs",!a.present&&"text-muted-foreground/70"),children:[a.present?(0,b.jsx)(d.Check,{className:"h-3 w-3 text-emerald-500"}):(0,b.jsx)(g.X,{className:"h-3 w-3 text-muted-foreground"}),(0,b.jsx)("span",{children:a.label}),a.required&&!a.present&&(0,b.jsx)(h.Badge,{variant:"red",className:"h-4 px-1 text-[10px]",children:"required"})]},a.capability))})})]})]})}function ab({integrationKey:a,entry:k,descriptor:l,featureMatrix:n,mainBackend:o}){let p=n.filter(a=>a.present).length,r=n.length,s=k.lastProbeAt?new Date(k.lastProbeAt).toLocaleString():null,v=k.nativeBackend,w=(0,q.useIntegrationProbeLive)(),[x,y]=(0,c.useState)(null);if(l.userManagedConnector)return(0,b.jsx)(_,{descriptor:l,backend:v,mode:"native"});let z=null!==v&&null!==o&&v!==o,A=async()=>{if(v){y(null);try{await w.mutateAsync({key:a,backend:v,liveProbe:!0})}catch(a){if(a instanceof t.ApiError){let b=a.body;b?.error==="live_probe_unsupported"?y(b.message??"Live probe not yet supported on this backend."):y(b?.message??a.message)}else y(a instanceof Error?a.message:"Unexpected error")}}};return(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsxs)("p",{className:"text-xs",children:["Native mode — the agent fetches ",l.displayName," via"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:v??"?"}),"'s connector during DM and hourly_check turns. The daemon does not poll, does not proxy, and does not store"," ",l.displayName," credentials. Destructive operations still require user confirmation via the absolute-block layer."]})}),z&&(0,b.jsx)(j.Alert,{variant:"warning",children:(0,b.jsxs)("p",{className:"text-xs",children:["This row is bound to"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:v})," ","but the current main backend is"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:o}),". The next session refresh will cascade this row to disabled — re-configure on the new main backend."]})}),(0,b.jsxs)("div",{className:"flex flex-wrap items-center gap-x-4 gap-y-1 text-xs text-muted-foreground",children:[(0,b.jsxs)("span",{children:["Tool namespace"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:k.toolNamespace??"?"})]}),r>0&&(0,b.jsxs)("span",{children:["Capabilities"," ",(0,b.jsxs)("span",{className:"text-foreground",children:[p,"/",r]})]}),(0,b.jsxs)("span",{children:["Probe"," ",(0,b.jsx)("span",{className:"text-foreground",children:s??"defaults (no live probe yet)"})]}),(0,b.jsxs)(i.Button,{variant:"ghost",size:"sm",className:"h-6 gap-1 px-2 text-[11px]",onClick:()=>void A(),disabled:w.isPending||!v,"aria-label":"Re-probe connector",children:[(0,b.jsx)(f.RefreshCw,{className:(0,u.cn)("h-3 w-3",w.isPending&&"animate-spin")}),w.isPending?"Probing…":"Re-probe"]})]}),x&&(0,b.jsx)(j.Alert,{variant:"error",children:(0,b.jsx)("p",{className:"text-xs",children:x})}),r>0&&(0,b.jsxs)(m.Collapsible,{children:[(0,b.jsxs)(m.CollapsibleTrigger,{className:"group flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground",children:[(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3 transition-transform group-data-[state=open]:rotate-180"}),"Feature matrix"]}),(0,b.jsx)(m.CollapsibleContent,{children:(0,b.jsx)("ul",{className:"mt-2 grid grid-cols-1 gap-0.5 sm:grid-cols-2",children:n.map(a=>(0,b.jsxs)("li",{className:(0,u.cn)("flex items-center gap-1.5 text-xs",!a.present&&"text-muted-foreground/70"),children:[a.present?(0,b.jsx)(d.Check,{className:"h-3 w-3 text-emerald-500"}):(0,b.jsx)(g.X,{className:"h-3 w-3 text-muted-foreground"}),(0,b.jsx)("span",{children:a.label}),a.required&&!a.present&&(0,b.jsx)(h.Badge,{variant:"red",className:"h-4 px-1 text-[10px]",children:"required"})]},a.capability))})})]})]})}function ac({integrationKey:a,delegatedBackend:d,delegatedModel:e,currentMode:f}){var g,k;let m=(0,q.useProxyModels)(d),n=(0,q.usePatchIntegration)(),[o,p]=(0,c.useState)(null),r=m.data?.options??[],s=m.data?.canonical??null,t=e??B,u=null!==e&&r.length>0&&!r.some(a=>a.modelId===e),v=e?r.find(a=>a.modelId===e):r.find(a=>a.modelId===s)??r.find(a=>"lite"===a.tier)??r[0],w=v?(g=v.usdPer1kIn,k=v.usdPer1kOut,null===g||null===k?null:800*g/1e3+200*k/1e3):null,x=async b=>{p(null);let c=b===B?null:b;if(c!==e)try{await n.mutateAsync({key:a,body:{mode:"delegated",delegatedBackend:d,delegatedModel:c}})}catch(a){p($(a))}};return"delegated"!==f?null:(0,b.jsxs)("div",{className:"space-y-1",children:[(0,b.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,b.jsx)("label",{className:"text-xs font-medium text-muted-foreground",htmlFor:`proxy-model-${a}`,children:"Proxy model"}),(0,b.jsxs)(l.Select,{value:t,onValueChange:a=>void x(a),children:[(0,b.jsx)(l.SelectTrigger,{id:`proxy-model-${a}`,className:"h-8 w-auto min-w-[16rem] text-xs",disabled:m.isLoading||n.isPending,children:(0,b.jsx)(l.SelectValue,{})}),(0,b.jsxs)(l.SelectContent,{children:[(0,b.jsxs)(l.SelectItem,{value:B,children:["Auto (light tier",s?` — ${s}`:"",")"]}),r.map(a=>(0,b.jsxs)(l.SelectItem,{value:a.modelId,children:[a.displayName,"lite"!==a.tier?` \xb7 ${a.tier}`:"",a.deprecated?" · deprecated":""]},a.modelId)),u&&e&&(0,b.jsxs)(l.SelectItem,{value:e,children:[e," · stale"]})]})]}),null!==w&&(0,b.jsxs)(h.Badge,{variant:"gray",title:"Estimate based on a typical proxy call (≈800 in / 200 out tokens). Actual costs vary by tool.",children:["≈ ",w<.001?"<$0.001":w<.01?`$${w.toFixed(4)}`:`$${w.toFixed(3)}`," / call"]})]}),u&&(0,b.jsxs)(j.Alert,{variant:"warning",children:[(0,b.jsxs)("p",{className:"text-xs",children:["Pinned model ",(0,b.jsx)("code",{children:e})," is not registered for backend ",(0,b.jsx)("code",{children:d}),". Calls fall back to the canonical light-tier model until you reset."]}),(0,b.jsx)(i.Button,{variant:"ghost",size:"sm",className:"mt-1 h-6 px-2 text-[11px]",onClick:()=>void x(B),disabled:n.isPending,children:"Reset to default"})]}),o&&(0,b.jsx)(j.Alert,{variant:"error",children:(0,b.jsx)("p",{className:"text-xs",children:o})})]})}function ad({integrationKey:a,credentialsPresent:c}){let d=ae[a].present,e=ae[a].absent;return(0,b.jsx)(j.Alert,{variant:c?"success":"warning",children:(0,b.jsx)("p",{className:"text-xs",children:c?d:e})})}let ae={gmail:{present:"Google OAuth credentials present. The daemon is polling Gmail directly.",absent:"Direct mode requires a Google Cloud OAuth credential. Complete the credential upload + authorize step below."},google_calendar:{present:"Google OAuth credentials present. The daemon is polling Calendar directly.",absent:"Direct mode requires a Google Cloud OAuth credential. Complete the credential upload + authorize step below."},notion:{present:"Notion API key present. The daemon is polling configured databases directly.",absent:"Direct mode requires a Notion internal-integration API key. Paste it below and share each target database with the integration."},git:{present:"Direct mode active. The daemon polls watched repositories with the local git CLI.",absent:"Direct mode uses the local git CLI and watched repository list; no daemon-managed credential is required."},github:{present:"Direct mode active. The daemon polls GitHub through the local gh CLI.",absent:"Direct mode uses gh auth login outside the daemon keychain; no daemon-managed credential is required."},outlook_mail:{present:"Outlook BYOA client config present. The unified mail poller covers authenticated Outlook mailboxes.",absent:"Direct mode requires a Microsoft Identity (BYOA) client config. Register an Azure app and paste the client id below."},outlook_calendar:{present:"Outlook BYOA client config present. Calendar reads are on-demand and reuse the MSAL token from Outlook Mail; no background poller in v1.",absent:"Direct mode requires the BYOA client config used by Outlook Mail. Configure it via the Outlook Mail card; calendar reads reuse the same authenticated session."},browser_history:{present:"Browser history ingest is active. The daemon reads local browser history databases on the configured cadence.",absent:"Direct mode requires accepting the on-device browser history consent latch. No external credentials are required."}};function af({integrationKey:a}){let c=(0,q.useRecentProxyCalls)(a),d=c.data?.calls??[],f=d.some(a=>"failed"===a.result);return(0,b.jsxs)(m.Collapsible,{children:[(0,b.jsxs)(m.CollapsibleTrigger,{className:"group flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground",children:[(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3 transition-transform group-data-[state=open]:rotate-180"}),"Recent proxy calls",!c.isLoading&&(0,b.jsxs)("span",{className:"text-muted-foreground/70",children:["(",d.length,f&&(0,b.jsx)("span",{className:"ml-1 text-amber-600 dark:text-amber-400",children:"· failures"}),")"]})]}),(0,b.jsxs)(m.CollapsibleContent,{className:"pt-2",children:[c.isLoading&&(0,b.jsx)("p",{className:"text-xs text-muted-foreground",children:"Loading…"}),c.error&&(0,b.jsx)(j.Alert,{variant:"error",children:(0,b.jsxs)("p",{className:"text-xs",children:["Could not load recent calls:"," ",c.error instanceof Error?c.error.message:"Unexpected error"]})}),!c.isLoading&&!c.error&&0===d.length&&(0,b.jsx)("p",{className:"text-xs text-muted-foreground",children:"No proxy calls have been recorded for this integration yet. They land here as the agent invokes the connector."}),(0,b.jsxs)("p",{className:"mb-2 text-[11px] text-muted-foreground",children:["Only ",(0,b.jsx)("strong",{children:"cross-backend"}),"delegated calls show up here — calls where your DM session runs on a different backend than the connector's owner. Same-backend delegated calls (for example, a Codex DM session using Codex's own Gmail connector) skip the proxy and roll up under the parent session's totals. Per-tool cost isn't measurable in those cases."]}),d.length>0&&(0,b.jsx)("div",{className:"overflow-x-auto",children:(0,b.jsxs)("table",{className:"w-full min-w-[42rem] border-separate border-spacing-0 text-[11px]",children:[(0,b.jsx)("thead",{children:(0,b.jsxs)("tr",{className:"text-left text-muted-foreground",children:[(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Time"}),(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Tool"}),(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Model"}),(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Duration"}),(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Cost"}),(0,b.jsx)("th",{className:"pb-1 font-medium",children:"Result"})]})}),(0,b.jsx)("tbody",{children:d.map(a=>{var c,d;return(0,b.jsxs)("tr",{className:"border-t border-border/50 align-top",children:[(0,b.jsx)("td",{className:"py-1 pr-3 text-muted-foreground",children:function(a,b=new Date){if(null===a)return"—";let c=new Date(a);return Number.isNaN(c.getTime())?a:c.getFullYear()===b.getFullYear()&&c.getMonth()===b.getMonth()&&c.getDate()===b.getDate()?c.toLocaleTimeString():c.toLocaleString()}(a.startedAt)}),(0,b.jsx)("td",{className:"py-1 pr-3 font-mono",children:function(a){if(!a)return"—";let b=a.split("__"),c=b[b.length-1];return c&&c.length>0?c:a}(a.toolName)}),(0,b.jsx)("td",{className:"py-1 pr-3 text-muted-foreground",children:a.modelId??"—"}),(0,b.jsx)("td",{className:"py-1 pr-3 text-muted-foreground",children:null===(c=a.durationMs)?"—":c<1e3?`${c}ms`:`${(c/1e3).toFixed(1)}s`}),(0,b.jsx)("td",{className:"py-1 pr-3 text-muted-foreground",children:null===(d=a.costUsd)?"—":0===d?"$0":d<.001?"<$0.001":d<.01?`$${d.toFixed(4)}`:`$${d.toFixed(3)}`}),(0,b.jsx)("td",{className:"py-1",children:"success"===a.result?(0,b.jsx)(h.Badge,{variant:"green",className:"h-4 px-1 text-[10px]",children:"ok"}):(0,b.jsx)("span",{className:"text-amber-700 dark:text-amber-300",title:a.errorMessage??void 0,children:a.errorClass??a.result??"failed"})})]},a.id)})})]})})]})]})}a.s(["IntegrationCard",0,function({integrationKey:a,gmailAccountCount:d=0,children:e}){var f,g,k,m,u;let v=(0,q.useIntegrations)(),w=(0,p.useHealth)(),x=(0,o.useConfig)(),B=(0,n.useBackends)(),D=(0,q.useNativeUnboundActions)(),E=(0,q.usePatchIntegration)(),F=(0,q.useIntegrationProbeLive)(),H=(0,r.useConfirm)(),I=(0,s.useQueryClient)(),[L,M]=(0,c.useState)(null),[N,P]=(0,c.useState)("keep"),[Q,R]=(0,c.useState)(null),[S,T]=(0,c.useState)(null),[U,W]=(0,c.useState)(!1),X=(0,c.useMemo)(()=>v.data?.integrations.find(b=>b.key===a),[v.data,a]),Y=w.data?.integrationModes?.[a],_=B.data?.defaultBackend??null;if(v.isLoading||w.isLoading)return(0,b.jsx)(Z,{name:a,children:"Loading…"});if(!X||!Y)return(0,b.jsx)(Z,{name:a,children:(0,b.jsx)(j.Alert,{variant:"error",children:"Could not load integration metadata. The daemon may be offline."})});let ae=z(X),ag=A(X),ah=!!(f=x.data)&&("gmail"===a||"google_calendar"===a?f.googleCalendarCredentialsConfigured&&f.googleCalendarTokenConfigured:"notion"===a?f.notionConfigured:"git"===a||"github"===a||("outlook_mail"===a||"outlook_calendar"===a)&&!!f.outlookClientConfigConfigured),ai=G(X),aj=(D.data??[]).find(b=>b.key===a),ak=function(a){let{mode:b,unboundEntry:c,stateLastChangedAt:d,dismissedLocally:e}=a;if(e||void 0===c||"disabled"!==b)return!1;if(null===c.startedAt)return!0;let f=C(d),g=C(c.startedAt);return null===f||null===g||f<=g}({mode:Y.mode,unboundEntry:aj,stateLastChangedAt:X.state.lastChangedAt,dismissedLocally:U}),al="delegated"===Y.mode&&null!==_&&Y.delegatedBackend===_&&!!X.supportedModes.includes("native")&&!!_&&A(X).includes(_),am=function(a,b,c){if(null===a||null===c)return[];let d=b.backendConnectors[c];if(!d)return[];let e=new Set(d.requiredCapabilities),f=new Set,g=[];for(let b of[...d.requiredCapabilities,...d.optionalCapabilities])f.has(b)||(f.add(b),g.push({capability:b,label:y(b),present:!0===a[b],required:e.has(b)}));return g.sort((a,b)=>{let c=a=>a.present&&a.required?0:a.present?1:a.required?2:3,d=c(a)-c(b);return 0!==d?d:a.label.localeCompare(b.label)})}(Y.features,X,"native"===Y.mode?Y.nativeBackend:Y.delegatedBackend),an=async b=>{if("delegated"===Y.mode&&b!==Y.delegatedBackend){T(null);try{await E.mutateAsync({key:a,body:{mode:"delegated",delegatedBackend:b}}),F.mutateAsync({key:a,backend:b,liveProbe:!0}).catch(()=>void 0)}catch(a){T($(a))}}},ao=async()=>{if(!L)return;if(R(null),"direct"===Y.mode&&"delegated"===L.targetMode&&"purge"===N&&ai&&!await H({title:ai.confirmTitle,description:ai.confirmDescription,confirmLabel:"Purge",cancelLabel:"Keep dormant",variant:"destructive",requireText:"purge"}))return void P("keep");let b={mode:L.targetMode,..."delegated"===L.targetMode&&L.targetBackend?{delegatedBackend:L.targetBackend}:{},..."native"===L.targetMode&&L.targetBackend?{nativeBackend:L.targetBackend}:{}};try{await E.mutateAsync({key:a,body:b}),("delegated"===L.targetMode||"native"===L.targetMode)&&L.targetBackend&&F.mutateAsync({key:a,backend:L.targetBackend,liveProbe:!0}).catch(()=>void 0),"direct"===Y.mode&&"delegated"===L.targetMode&&"purge"===N&&ai&&(await Promise.all(ai.secretKeys.map(a=>t.api.delete(`/secrets/${a}`).catch(()=>{}))),I.invalidateQueries({queryKey:["config"]})),M(null)}catch(a){R($(a))}};return(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(Z,{name:X.displayName,badge:(0,b.jsxs)("div",{className:"flex items-center gap-2",children:[Y.subTier&&(0,b.jsx)(h.Badge,{variant:"blue",children:"draft-only"===(g=Y.subTier)?"Draft-Only":"full-auto"===g?"Full-Auto":null}),(0,b.jsx)(h.Badge,{variant:"direct"===(k=Y.mode)?"green":"delegated"===k?"amber":"native"===k?"blue":"gray",children:(m=Y.mode,u="native"===Y.mode?Y.nativeBackend:Y.delegatedBackend,"direct"===m?"Direct":"disabled"===m?"Disabled":"native"===m?null===u?"Native":`Native — ${u}`:null===u?"Delegated":`Delegated — ${u}`)})]}),children:(0,b.jsxs)("div",{className:"space-y-3",children:[ak&&aj&&(0,b.jsxs)(j.Alert,{variant:"error",children:[(0,b.jsxs)("p",{className:"text-sm font-medium",children:["Native binding lost — re-configure ",X.displayName,"."]}),(0,b.jsxs)("p",{className:"mt-1 text-xs text-muted-foreground",children:[X.displayName," was set to native mode on"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:aj.priorNativeBackend??"?"})," ","but you switched the main backend to"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:aj.newMainBackend??_??"?"}),". Native bindings are explicit — pick a mode below to restore agent awareness."]}),(0,b.jsx)(i.Button,{variant:"ghost",size:"sm",className:"mt-2 h-6 px-2 text-[11px]",onClick:()=>W(!0),children:"Dismiss"})]}),al&&_&&(0,b.jsxs)(j.Alert,{variant:"info",children:[X.userManagedConnector?(0,b.jsxs)("p",{className:"text-sm",children:["You're delegated to your main backend (",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono text-xs",children:_}),"). Switching to ",(0,b.jsx)("strong",{children:"Native"})," swaps the row to an explicit binding against ",_," — the user-installed"," ",X.displayName," MCP is reached the same way, but the mode label honestly reflects that the daemon never proxies this integration, and a future main-backend change will prompt you to re-confirm the binding instead of silently moving the delegation."]}):(0,b.jsxs)("p",{className:"text-sm",children:["You're delegated to your main backend (",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono text-xs",children:_}),"). Switching to ",(0,b.jsx)("strong",{children:"Native"})," stops the background worker cadence and lets the agent fetch"," ",X.displayName," in-turn through ",_,"'s own connector — fewer moving parts, no proxy hop."]}),(0,b.jsx)("div",{className:"mt-2 flex items-center gap-2",children:(0,b.jsx)(i.Button,{variant:"outline",size:"sm",className:"h-7 px-2 text-xs",disabled:E.isPending,onClick:()=>{R(null),P("keep"),M({open:!0,targetMode:"native",targetBackend:_})},children:"Switch to native"})})]}),(0,b.jsx)(O,{currentMode:Y.mode,descriptor:X,delegatedBackendCount:ae.length,mainBackend:_,disabled:E.isPending,onSelectMode:a=>{if(a!==Y.mode){if(R(null),P("keep"),"delegated"===a){let a=ae[0];if(!a)return;M({open:!0,targetMode:"delegated",targetBackend:a});return}if("native"===a){if(!_||!ag.includes(_))return;M({open:!0,targetMode:"native",targetBackend:_});return}M({open:!0,targetMode:a})}}}),"delegated"===Y.mode&&ae.length>0&&(0,b.jsxs)("div",{children:[(0,b.jsx)("label",{className:"mb-1 block text-xs font-medium text-muted-foreground",children:"Backend"}),(0,b.jsxs)(l.Select,{value:Y.delegatedBackend??ae[0],onValueChange:a=>void an(a),disabled:E.isPending,children:[(0,b.jsx)(l.SelectTrigger,{className:"h-8 text-xs",children:(0,b.jsx)(l.SelectValue,{})}),(0,b.jsx)(l.SelectContent,{children:ae.map(a=>{let c=(0,J.isUiPreviewOnlyBackend)(a);return(0,b.jsxs)(l.SelectItem,{value:a,disabled:c,children:[a,c?J.UI_PREVIEW_ONLY_BADGE_SUFFIX:""]},a)})})]}),S&&(0,b.jsx)(j.Alert,{variant:"error",className:"mt-2",children:(0,b.jsx)("p",{className:"text-xs",children:S})})]}),Y.variantsMissing&&Y.variantsMissing.length>0&&(0,b.jsxs)(j.Alert,{variant:"error",children:[(0,b.jsxs)("p",{className:"font-medium",children:["Missing ","native"===Y.mode?"native":"delegated"," ","variant file(s) — agent will silently fall back to the direct- mode skill body."]}),(0,b.jsx)("ul",{className:"mt-1 space-y-0.5 font-mono text-[11px]",children:Y.variantsMissing.map(a=>(0,b.jsx)("li",{className:"break-all",children:a},a))})]}),"delegated"===Y.mode&&(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(aa,{integrationKey:a,entry:Y,descriptor:X,featureMatrix:am}),Y.delegatedBackend&&!X.userManagedConnector&&(0,b.jsx)(ac,{integrationKey:a,delegatedBackend:Y.delegatedBackend,delegatedModel:X.state.delegatedModel??null,currentMode:Y.mode}),Y.delegatedBackend&&!X.userManagedConnector&&(0,b.jsx)(V,{integrationKey:a,descriptor:X,delegatedBackend:Y.delegatedBackend,deniedTools:X.state.deniedTools,currentMode:Y.mode}),!X.userManagedConnector&&(0,b.jsx)(af,{integrationKey:a})]}),"native"===Y.mode&&(0,b.jsx)(ab,{integrationKey:a,entry:Y,descriptor:X,featureMatrix:am,mainBackend:_}),"direct"===Y.mode&&(0,b.jsx)(ad,{integrationKey:a,credentialsPresent:ah}),"disabled"===Y.mode&&(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsx)("p",{children:"Disabled. The agent does not observe or act on this integration. Flip the mode above to re-enable."})}),e]})}),L&&(0,b.jsx)(K,{open:L.open,onOpenChange:a=>{M(b=>b?{...b,open:a}:null),a||R(null)},descriptor:X,currentMode:Y.mode,currentBackend:"native"===Y.mode?Y.nativeBackend:Y.delegatedBackend,targetMode:L.targetMode,targetBackend:L.targetBackend,onTargetBackendChange:a=>M(b=>b?{...b,targetBackend:a}:null),directCredentialsPresent:ah,gmailAccountCount:d,tokenHandling:N,onTokenHandlingChange:P,onConfirm:ao,isPending:E.isPending,error:Q})]})}],36581)}];
+module.exports=[36581,a=>{"use strict";var b=a.i(39752),c=a.i(34542),d=a.i(54506),e=a.i(78019),f=a.i(39293),g=a.i(85857),h=a.i(7384),i=a.i(21218),j=a.i(29629),k=a.i(30400),l=a.i(47696),m=a.i(57216),n=a.i(74794),o=a.i(54150),p=a.i(40410),q=a.i(47026),r=a.i(28314),s=a.i(81130),t=a.i(59974),u=a.i(48558);a.i(70010);var v=a.i(59825),w=a.i(58906);let x={search:"Search",read:"Read",draft:"Drafts",update_draft:"Update drafts",send:"Send",forward:"Forward",delete:"Archive / delete",label:"Labels",create_label:"Create labels",read_attachment:"Read attachments",batch:"Batch operations",list_events:"List events",get_event:"Read event",create_event:"Create event",update_event:"Update event",delete_event:"Delete event",respond_to_event:"RSVP",respond_event:"RSVP",suggest_time:"Suggest time",list_calendars:"List calendars",get_availability:"Check availability",batch_read:"Batch read"};function y(a){let b=x[a];return void 0!==b?b:a.split("_").map(a=>0===a.length?a:a[0].toUpperCase()+a.slice(1)).join(" ")}function z(a){return a.userManagedConnector?[...w.RUNTIME_AVAILABLE_BACKEND_IDS]:Object.keys(a.backendConnectors)}function A(a){return a.userManagedConnector?[...v.NATIVE_CONNECTOR_BACKEND_IDS]:Object.keys(a.backendConnectors)}let B="__auto__";function C(a){let b=Date.parse(a.endsWith("Z")||/[+-]\d{2}:\d{2}$/.test(a)?a:a.replace(" ","T")+"Z");return Number.isNaN(b)?null:b}function D(a){return 0===a?"$0":a<.01?"<$0.01":`$${a.toFixed(2)}`}function E(a,b){if("gmail"!==a||b<=1)return null;let c=b-1;return`Delegated mode supports one Google account. Your other ${c} Gmail ${1===c?"account":"accounts"} will be disabled (tokens kept — re-enable by switching back to direct).`}let F={gmail:{presentClause:"Gmail OAuth tokens are still in the keychain",absentClause:"Gmail has no OAuth tokens yet",setupPhrase:"the 5-step Google Cloud setup"},google_calendar:{presentClause:"Google Calendar OAuth tokens are still in the keychain",absentClause:"Google Calendar has no OAuth tokens yet",setupPhrase:"the 5-step Google Cloud setup"},notion:{presentClause:"The Notion API key is still in the keychain",absentClause:"Notion has no API key in the keychain yet",setupPhrase:"creating a Notion internal integration, pasting the key, and sharing each database with the integration"},git:{presentClause:"Git direct mode uses the local git CLI and watched repository list",absentClause:"Git direct mode needs watched repositories before it can poll",setupPhrase:"adding at least one watched repository"},github:{presentClause:"GitHub direct mode uses the local gh CLI",absentClause:"GitHub direct mode needs gh auth login outside the daemon",setupPhrase:"authenticating the gh CLI and optionally adding watched repositories"},outlook_mail:{presentClause:"The Outlook BYOA client config is still in the keychain",absentClause:"Outlook has no BYOA client config in the keychain yet",setupPhrase:"registering a Microsoft Identity (Azure) app and authenticating each Outlook mailbox"},outlook_calendar:{presentClause:"The Outlook BYOA client config is still in the keychain (shared with Outlook Mail)",absentClause:"Outlook Calendar has no BYOA client config to reuse yet",setupPhrase:"registering a Microsoft Identity (Azure) app via the Outlook Mail card"},browser_history:{presentClause:"Browser history consent is already accepted on this device",absentClause:"Browser history consent has not been accepted yet",setupPhrase:"accepting the on-device browser history consent latch"}};function G(a){let b=a.directSetup?.credentialKeys??[];if(0===b.length)return null;let c=F[a.key],d=b.join(" + ");return{secretKeys:b,optionDescription:`Deletes ${d} from the keychain after the mode flip. Reverting to direct later will require ${c.setupPhrase}. Asks for a second confirmation.`,confirmTitle:`Purge ${a.displayName} credentials?`,confirmDescription:`This removes ${d} from the keychain. To restore direct mode later you will need to redo ${c.setupPhrase}.`}}var H=a.i(92241),I=a.i(61213),J=a.i(40091);function K(a){let{open:c,onOpenChange:d,descriptor:e,currentMode:f,currentBackend:g,targetMode:h,targetBackend:k,onTargetBackendChange:m,directCredentialsPresent:n,gmailAccountCount:o,tokenHandling:p,onTokenHandlingChange:q,onConfirm:r,isPending:s,error:t}=a,u=function(a){try{return function(a,b){let{mode:c,backend:d}=a,{toMode:e,toBackend:f}=b;if(c===e)return"delegated"===c&&f&&f!==d?{kind:"delegated-backend-change",toBackend:f}:{kind:"no-op"};if("native"===e){if(!f)throw Error("toBackend required for native flip");return"direct"!==c&&"delegated"!==c&&"disabled"!==c?{kind:"to-native",fromMode:"disabled",toBackend:f}:{kind:"to-native",fromMode:c,toBackend:f}}if("native"===c){if("direct"===e)return{kind:"native-to-direct",needsOauthSetup:!a.directCredentialsPresent};if("delegated"===e){if(!f)throw Error("toBackend required for native→delegated");return{kind:"native-to-delegated",toBackend:f}}return{kind:"native-to-disabled"}}if("direct"===c&&"delegated"===e){if(!f)throw Error("toBackend required for direct→delegated");return{kind:"direct-to-delegated",toBackend:f}}if("delegated"===c&&"direct"===e)return{kind:"delegated-to-direct",needsOauthSetup:!a.directCredentialsPresent};if("disabled"===c){if("delegated"===e){if(!f)throw Error("toBackend required for delegated flip");return{kind:"enable-from-disabled",to:"delegated",toBackend:f}}return{kind:"enable-from-disabled",to:"direct"}}return{kind:"disable-from-active"}}(a.from,{toMode:a.to.mode,toBackend:a.to.backend})}catch{return null}}({from:{mode:f,backend:g,directCredentialsPresent:n},to:{mode:h,backend:k}}),v=z(e),w="delegated"===h&&v.length>1,x="direct"===f&&"delegated"===h&&n&&null!==e.directSetup;return(0,b.jsx)(I.Sheet,{open:c,onOpenChange:d,children:(0,b.jsx)(I.SheetContent,{children:(0,b.jsxs)("div",{className:"flex h-full flex-col",children:[(0,b.jsx)(I.SheetHeader,{children:(0,b.jsx)(I.SheetTitle,{children:function(a,b){if(!b||"no-op"===b.kind)return`${a} — no change`;if("direct-to-delegated"===b.kind)return`Delegate ${a} to ${b.toBackend}?`;if("delegated-to-direct"===b.kind)return`Switch ${a} to direct mode?`;if("delegated-backend-change"===b.kind)return`Change ${a} delegate to ${b.toBackend}?`;if("enable-from-disabled"===b.kind){let c="direct"===b.to?"direct":`delegated to ${b.toBackend??"?"}`;return`Enable ${a} (${c})?`}return"to-native"===b.kind?`Switch ${a} to native (${b.toBackend})?`:"native-to-direct"===b.kind?`Switch ${a} to direct mode?`:"native-to-delegated"===b.kind?`Switch ${a} to delegated (${b.toBackend})?`:(b.kind,`Disable ${a}?`)}(e.displayName,u)})}),(0,b.jsxs)("div",{className:"mt-4 min-h-0 flex-1 space-y-4 overflow-y-auto px-1",children:[w&&(0,b.jsxs)("div",{children:[(0,b.jsx)("label",{className:"mb-1 block text-xs font-medium text-muted-foreground",children:"Backend"}),(0,b.jsxs)(l.Select,{value:k??v[0],onValueChange:a=>m?.(a),disabled:s,children:[(0,b.jsx)(l.SelectTrigger,{className:"h-8 text-xs",children:(0,b.jsx)(l.SelectValue,{})}),(0,b.jsx)(l.SelectContent,{children:v.map(a=>{let c=(0,J.isUiPreviewOnlyBackend)(a);return(0,b.jsxs)(l.SelectItem,{value:a,disabled:c,children:[a,c?J.UI_PREVIEW_ONLY_BADGE_SUFFIX:""]},a)})})]})]}),u&&(0,b.jsx)(L,{action:u,descriptor:e,gmailAccountCount:o}),x&&(0,b.jsx)(M,{value:p,onChange:q,disabled:s,purgeDescription:G(e)?.optionDescription}),t&&(0,b.jsx)(j.Alert,{variant:"error",children:t})]}),(0,b.jsxs)("div",{className:"mt-6 flex items-center justify-end gap-2 border-t border-border pt-4",children:[(0,b.jsx)(i.Button,{variant:"outline",size:"sm",onClick:()=>d(!1),disabled:s,children:"Cancel"}),(0,b.jsxs)(i.Button,{variant:u?.kind==="disable-from-active"?"destructive":"default",size:"sm",onClick:()=>void r(),disabled:s||null===u||"no-op"===u.kind,children:[s&&(0,b.jsx)(H.Loader2,{className:"mr-1.5 h-3.5 w-3.5 animate-spin"}),function(a){if(!a)return"Apply";switch(a.kind){case"direct-to-delegated":case"enable-from-disabled":return"Apply";case"delegated-to-direct":case"native-to-direct":return a.needsOauthSetup?"Continue to setup":"Resume direct mode";case"delegated-backend-change":return"Change delegate";case"disable-from-active":case"native-to-disabled":return"Disable";case"to-native":return"Switch to native";case"native-to-delegated":return"Switch to delegated";case"no-op":return"—"}}(u)]})]})]})})})}function L({action:a,descriptor:c,gmailAccountCount:d}){var e,f,g,h,i,k,l;if("direct-to-delegated"===a.kind){let e=function(a,b,c){let d=[];"gmail"===a&&d.push({message:"Mail poller stops observing Gmail — receipts, travel, and Kindle classifiers will not run against new messages.",reversible:!0},{message:"Local FTS5 search on Gmail messages is unavailable. The agent searches through its backend connector instead.",reversible:!0},{message:"Only one Google account is reachable at a time. Additional Gmail accounts will be disabled.",reversible:!0}),"google_calendar"===a&&d.push({message:"Calendar poller stops running. Event awareness drops from 5-minute to hourly granularity.",reversible:!0},{message:"15-minute imminent-event alerts are unavailable — the agent learns about new events on the next activity scan.",reversible:!0}),"notion"===a&&d.push({message:"Notion poller stops observing database edits. Recent-edit awareness shifts from per-poll to inline notion-search inside the activity scan, with reduced recall on less-typed databases.",reversible:!0},{message:"Structured property filter on database queries is unavailable. The agent falls back to semantic notion-search plus client-side filtering — fine for small databases, awkward for >100-row workspaces.",reversible:!0},{message:"Native page archive is unavailable. The agent uses workarounds (status-property update, or move-to-trash-page) and DMs you naming the workaround taken.",reversible:!0}),"git"===a&&d.push({message:"GitWatcher stops polling directly. Git lifecycle checks move to a scheduled backend session, so detection is bounded by the delegated cadence and backend quota.",reversible:!0},{message:"Daemon-side project document updates no longer run from direct classifier output. The delegated session must inspect the repo and update context through the project-doc API.",reversible:!0}),"github"===a&&d.push({message:"GitHubPoller stops polling notifications and workflow runs directly. The delegated session uses gh read-only checks on its cadence instead.",reversible:!0},{message:"Review requests, CI failures, assignments, and security alerts may arrive later because they depend on the delegated cron tick.",reversible:!0}),"outlook_mail"===a&&d.push({message:"Mail poller stops observing Outlook accounts; receipts, travel, and Kindle classifiers will not run against new Outlook messages.",reversible:!0},{message:"Local FTS5 search on Outlook messages is unavailable. The agent searches through whichever Outlook MCP / connector you have wired up on the selected backend.",reversible:!0},{message:`You must register an Outlook / Microsoft Graph MCP server on the ${b} backend before the agent can send, read, or label Outlook mail. The daemon does not proxy this integration.`,reversible:!1}),"outlook_calendar"===a&&d.push({message:"On-demand Outlook calendar reads via /api/calendar/outlook return 410. Calendar awareness depends entirely on the MCP / connector you configure on the selected backend.",reversible:!0},{message:`You must register an Outlook / Microsoft Graph MCP server on the ${b} backend that exposes calendar reads/writes. The daemon does not proxy this integration.`,reversible:!1});let e=c.backendConnectors[b];if(e&&"gmail"===a)for(let a of["send","forward","delete","read_attachment"].filter(a=>!e.optionalCapabilities.includes(a)))d.push({message:`${y(a)} is unavailable on this backend — the agent will draft but not ${function(a){switch(a){case"send":return"send";case"forward":return"forward";case"delete":return"archive or delete";case"read_attachment":return"read attachments";default:return a}}(a)}.`,reversible:!0});return d}(c.key,a.toBackend,c),f=E(c.key,d);return(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)(j.Alert,{variant:"warning",children:[(0,b.jsx)("p",{className:"font-medium",children:"You will lose these direct-mode features"}),(0,b.jsx)("p",{className:"mt-1 text-xs text-muted-foreground",children:"All losses are reversible — OAuth tokens stay in the keychain by default so switching back is frictionless."})]}),f&&(0,b.jsx)(j.Alert,{variant:"warning",children:f}),(0,b.jsx)("ul",{className:"space-y-1.5 text-sm",children:e.map((a,c)=>(0,b.jsxs)("li",{className:"flex items-start gap-2",children:[(0,b.jsx)("span",{className:"mt-1 inline-block h-1.5 w-1.5 shrink-0 rounded-full bg-warning"}),(0,b.jsx)("span",{className:"text-muted-foreground",children:a.message})]},c))})]})}if("delegated-to-direct"===a.kind){let d,g=(c.state.deniedTools?.length??0)>0;return(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsx)(j.Alert,{variant:a.needsOauthSetup?"warning":"success",children:(0,b.jsx)("p",{className:"text-sm",children:(e=c.key,f=!a.needsOauthSetup,d=F[e],f?`${d.presentClause}. Switching back re-enables polling with no re-consent step.`:`${d.absentClause}. Switching to direct will walk through ${d.setupPhrase}.`)})}),g&&(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsx)("p",{className:"text-sm",children:"Your tool deny list will be retained but is inactive in direct mode. Re-enabling delegated mode restores it."})})]})}if("delegated-backend-change"===a.kind)return(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsxs)("p",{className:"text-sm",children:["The integration stays delegated — only the backend changes to"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono text-xs",children:a.toBackend}),". Skills and task-flow variants re-materialize on the next session."]})});if("enable-from-disabled"===a.kind)return(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsx)("p",{className:"text-sm",children:"direct"===a.to?"The integration will poll the service directly. You may need to complete OAuth setup.":`The integration will delegate to the ${a.toBackend} backend connector.`})});if("disable-from-active"===a.kind)return(0,b.jsx)(j.Alert,{variant:"warning",children:(0,b.jsx)("p",{className:"text-sm",children:"The daemon stops observing this integration. Any poller associated with it pauses; the agent's session templates drop the skill / task-flow body that depends on it. Re-enabling is one click — credentials stay in the keychain."})});if("to-native"===a.kind){let e,f,k,l,m,n=(g=a.fromMode,h=a.toBackend,e=[],f=c.displayName,"direct"===g&&(e.push({message:`The daemon's background poller for ${f} stops. The agent fetches via ${h}'s native connector during DM and activity_scan turns instead.`,reversible:!0}),e.push({message:"Local FTS5 search / classifier passes (receipts, travel, Kindle for mail; calendar reconcile for events) stop running. Direct-mode data already in the DB stays searchable; new data lands as in-turn observations only.",reversible:!0}),e.push({message:`Your direct-mode credentials for ${f} stay in the keychain (dormant) so a future flip back to direct re-uses them without re-consent. Delete them explicitly via the direct→delegated "Purge from keychain" flow if you want them gone.`,reversible:!0})),"delegated"===g&&(e.push({message:"The delegated-sync worker stops ticking on its cadence. Observations land at activity_scan granularity instead, fetched by the main DM session itself.",reversible:!0}),e.push({message:"Per-call proxy cost shifts from the (cheap) lite-tier delegated model to your main DM session's medium tier — typically ~20–30× more expensive per fetch.",reversible:!0})),"disabled"===g&&e.push({message:"The integration becomes reachable from activity_scan and DM again — currently it is silent. No background poller runs; the agent fetches in-turn.",reversible:!0}),e.push({message:`${h} must already have its ${f} connector configured (e.g. claude.ai/connections, ~/.codex MCP entry, or ~/.gemini extension). The daemon does not see ${f} credentials.`,reversible:!1}),e.push({message:"Switching the main backend later automatically disables this row (an explicit binding, not a routing rule). You'll be asked to re-configure on the new backend.",reversible:!0}),e),o="direct"===a.fromMode?E(c.key,d):null,p=(l=Math.round((.39-(k=.014*("delegated"===(i=a.fromMode))))*365),m=k>0?Math.round(.39/k):null,{fromDailyUsd:k,toDailyUsd:.39,yearlyDeltaUsd:l,multiplier:m,fromLabel:"delegated"===i?"delegated worker":"direct"===i?"direct poller (no LLM tokens)":"disabled (no fetch at all)"});return(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)(j.Alert,{variant:"info",children:[(0,b.jsxs)("p",{className:"text-sm font-medium",children:["Native mode — the agent fetches ",c.displayName," in-turn via ",a.toBackend,"'s connector. No background poller, no delegated worker."]}),(0,b.jsx)("p",{className:"mt-1 text-xs text-muted-foreground",children:"We run a live capability probe before committing the flip so a missing connector capability surfaces here, not at the next DM / activity_scan turn."})]}),o&&(0,b.jsx)(j.Alert,{variant:"warning",children:o}),(0,b.jsxs)("div",{className:"rounded-md border border-warning/40 bg-warning/10 p-3 text-xs",children:[(0,b.jsx)("p",{className:"font-medium text-warning",children:"Estimated cost shift (typical workload)"}),(0,b.jsxs)("p",{className:"mt-1 text-warning/80",children:["From ",p.fromLabel," ",(0,b.jsxs)("code",{className:"rounded bg-warning/15 px-1 py-0.5 font-mono text-[11px]",children:["≈ ",D(p.fromDailyUsd),"/day"]})," ","→ native MCP on ",a.toBackend," ",(0,b.jsxs)("code",{className:"rounded bg-warning/15 px-1 py-0.5 font-mono text-[11px]",children:["≈ ",D(p.toDailyUsd),"/day"]}),null!==p.multiplier&&(0,b.jsxs)(b.Fragment,{children:[" ","— roughly"," ",(0,b.jsxs)("strong",{children:[p.multiplier,"×"]})," more per integration"]}),"."]}),(0,b.jsxs)("p",{className:"mt-1 text-[11px] text-warning/70",children:["Marginal ~$",p.yearlyDeltaUsd,"/year per integration at typical volume. Native is recommended when the alternative is leaving the integration disabled — not as a free upgrade from delegated."]})]}),(0,b.jsxs)("div",{children:[(0,b.jsx)("p",{className:"mb-2 text-xs font-medium text-muted-foreground",children:"What changes"}),(0,b.jsx)("ul",{className:"space-y-1.5 text-sm",children:n.map((a,c)=>(0,b.jsxs)("li",{className:"flex items-start gap-2",children:[(0,b.jsx)("span",{className:`mt-1 inline-block h-1.5 w-1.5 shrink-0 rounded-full ${a.reversible?"bg-warning":"bg-destructive"}`}),(0,b.jsx)("span",{className:"text-muted-foreground",children:a.message})]},c))})]})]})}if("native-to-direct"===a.kind){let d;return(0,b.jsx)(j.Alert,{variant:a.needsOauthSetup?"warning":"success",children:(0,b.jsx)("p",{className:"text-sm",children:(k=c.key,l=!a.needsOauthSetup,d=F[k],l?`${d.presentClause} from a previous direct-mode setup. Switching back re-enables polling without re-consent.`:`${d.absentClause} — native mode left credential management to the backend. Switching to direct will walk through ${d.setupPhrase}.`)})})}return"native-to-delegated"===a.kind?(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsxs)("p",{className:"text-sm",children:["The agent stops calling ",c.displayName," directly through the main backend. Instead, the daemon proxies through"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono text-xs",children:a.toBackend})," ","and the delegated-sync worker resumes its cadence — observations land server-side again."]})}):"native-to-disabled"===a.kind?(0,b.jsx)(j.Alert,{variant:"warning",children:(0,b.jsxs)("p",{className:"text-sm",children:["The agent loses awareness of ",c.displayName,". No background poller, no in-turn fetch — the activity scan and DM flow drop the integration from their actionable steps. Re-enabling is one click; no data is destroyed."]})}):null}function M({value:a,onChange:c,disabled:d,purgeDescription:e}){return(0,b.jsxs)("div",{className:"rounded-md border border-border bg-muted/30 p-3",children:[(0,b.jsx)("p",{className:"mb-2 text-sm font-medium",children:"Direct-mode credential handling"}),(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsx)(N,{checked:"keep"===a,disabled:d,onSelect:()=>c("keep"),label:"Keep dormant (recommended)",description:"Credentials stay in the keychain. Reverting to direct is a one-click flip with no re-consent step."}),(0,b.jsx)(N,{checked:"purge"===a,disabled:d,onSelect:()=>c("purge"),label:"Purge from keychain",description:e??"Deletes the direct-mode credentials after the mode flip. Reverting to direct later will require redoing the original setup. Asks for a second confirmation."})]})]})}function N({checked:a,disabled:c,onSelect:d,label:e,description:f}){return(0,b.jsxs)("label",{className:`flex cursor-pointer items-start gap-2 rounded-md border p-2 text-xs transition ${a?"border-primary bg-primary/5":"border-border hover:bg-muted/50"} ${c?"pointer-events-none opacity-50":""}`,children:[(0,b.jsx)("input",{type:"radio",name:"token-handling",className:"mt-0.5",checked:a,disabled:c,onChange:d}),(0,b.jsxs)("div",{children:[(0,b.jsx)("p",{className:"font-medium text-foreground",children:e}),(0,b.jsx)("p",{className:"mt-0.5 text-muted-foreground",children:f})]})]})}function O({currentMode:a,descriptor:d,onSelectMode:f,delegatedBackendCount:g,mainBackend:h,disabled:i=!1,groupId:j}){let[k,l]=(0,c.useState)(()=>new Set),n=j??`mode-explainer-${d.key}`,o=A(d),p=null!=h&&o.includes(h),q=d.supportedModes.includes("native")?h?p?null:`Your main backend (${h}) ships no native connector for ${d.displayName}.`:"Set a main backend first — native binds to it.":null;return(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsx)("p",{className:"text-xs font-medium text-muted-foreground",children:"Mode"}),(0,b.jsx)("ul",{className:"space-y-2",children:d.supportedModes.map(c=>{let j=function(a,b,c=null){let d=b.displayName;if("direct"===a)return{title:"Direct",brief:`The daemon talks to ${d} itself using credentials you provide.`,details:[`Lowest token cost — your conversation backend (Claude / Codex / Gemini) does not pay tokens to fetch ${d} data; the daemon makes the API call directly and hands results to the agent.`,`Built-in safety guardrails apply: the daemon classifies destructive operations (send / delete / overwrite) and routes them through approval flows before they reach ${d}.`,function(a){switch(a){case"gmail":case"google_calendar":return"Requires a Google Cloud OAuth credential — upload the credentials JSON and complete the browser consent step on this screen before the daemon can poll.";case"notion":return"Requires a Notion internal-integration API key — paste it in this app and share each target database with the integration in Notion.";case"git":return"Requires the local git CLI plus a watched-repository list — no credential is stored in this app; the daemon reads the repos with your existing git config.";case"github":return"Requires the local gh CLI authenticated outside the daemon (gh auth login) — no credential is stored in this app; the daemon shells out to gh.";case"outlook_mail":case"outlook_calendar":return"Requires a Microsoft Identity (Azure BYOA) client config plus a per-account MSAL sign-in for each Outlook mailbox.";case"browser_history":return"Requires accepting the on-device browser history consent latch — no external credential is stored; the daemon reads local browser history databases directly."}}(b.key),"Local observers stay on — receipts, travel, calendar-imminent alerts, and FTS5 search continue to run."],footnote:"Recommended when you have the credentials ready and want the lowest token cost."};if("delegated"===a)return{title:"Delegated",brief:`Reuse Claude Code / Gemini CLI / Codex's existing connectors (MCP, plugin, or built-in connector) to reach ${d}.`,details:[`When the agent needs ${d} data, the daemon invokes the chosen CLI (Claude Code / Codex / Gemini) which calls ${d} through its already-configured connector. A small per-call token cost is incurred each time the CLI is invoked.`,`Concrete flow: your main DM agent (e.g. Claude) is asked to read ${d}; it calls this app's API; the daemon invokes the chosen CLI (e.g. Gemini CLI) which uses its already-configured connector to talk to ${d}; the result flows back through the daemon to your main agent.`,`Effective when the backend that handles your DM conversation differs from the backend that has the ${d} connector — for example, a Claude Code main agent borrowing Gemini CLI's Gmail connector to save on Claude tokens or to leverage a connector you already configured there.`,"No extra credentials live in this app — auth is whatever Claude / Codex / Gemini already had configured (claude.ai/connections, ~/.codex MCP entries, ~/.gemini extensions).","Daemon-side safety guardrails run more loosely here because the actual API call happens inside the CLI, not on the daemon. Per-tool deny-lists still apply on the proxy layer."],footnote:"Recommended when you want one backend to handle conversation and another to handle integration access, or when you do not want to manage GCP / Notion credentials yourself."};if("native"===a){let a=function(a){switch(a){case"claude":return"Claude";case"codex":return"Codex";case"gemini":return"Gemini";case"opencode":return"OpenCode";default:return"your main backend"}}(c);return{title:`Native — via ${a}`,brief:`Your DM agent (${a}) reaches ${d} directly through its own connector — no background polling and no daemon-side proxy.`,details:[`Pick this when you already use ${a}'s ${d} connector for ad-hoc work and just want the agent's activity scan and DM replies to use the same connector instead of the daemon. No background poller runs, no delegated worker ticks, no per-call proxy hop — the agent fetches in-turn when it needs ${d}.`,'Token cost moves from the (cheap) delegated worker to your main DM session. Reads sit on the same prompt as the rest of the turn, which raises the medium-tier token bill — typically by an order of magnitude per integration vs. delegated. Worth it when you would otherwise leave the integration "Disabled" and lose activity-scan awareness entirely.',`${a} must already have its ${d} connector configured (e.g. claude.ai/connections for Claude, an MCP entry for Codex, an extension for Gemini). The daemon never sees your ${d} credentials; auth and revocation live in ${a}.`,"Daemon-side safety guardrails (destructive-op confirmation, deny-lists) still cover the absolute-block layer. Per-tool deny lists do NOT apply here — the call never crosses the daemon proxy, so deny enforcement is whatever your backend allows.","If you switch the main backend later, this row is automatically flipped to Disabled and you'll be asked to re-configure. Native is an explicit binding to the backend, not a routing rule."],footnote:`Recommended when ${a} already has the ${d} connector wired up and you want the agent to use it for activity scan / DM, instead of either running a background poller or leaving the integration disabled.`}}return{title:"Disabled",brief:`The daemon does not observe or act on ${d} at all.`,details:[`The agent loses awareness of ${d} entirely — no observers, no skill body, no task-flow guidance. It will not bring up ${d} data on its own.`,`Pick this when the backend you DM with already has ${d} access through its own connectors and you do not need cross-backend delegation. Your agent can still answer ad-hoc questions about ${d} via that backend's native tools, but the daemon will not orchestrate it.`,`Pick this when you simply do not use ${d}.`,"Switching back to direct or delegated later is one click; no data is destroyed."],footnote:"Recommended when this integration is not relevant to you, or your main backend already covers it natively."}}(c,d,h??null),o=c===a,p=k.has(c),r="delegated"===c&&0===g,s="native"===c&&null!==q,t=i||r||s;return(0,b.jsxs)("li",{className:(0,u.cn)("rounded-md border transition-colors",o?"border-primary bg-primary/5":"border-border bg-card",t&&"opacity-60"),children:[(0,b.jsxs)("label",{className:(0,u.cn)("flex cursor-pointer items-start gap-3 p-3",t&&"cursor-not-allowed"),children:[(0,b.jsx)("input",{type:"radio",name:n,className:"mt-1 h-4 w-4 shrink-0",checked:o,disabled:t,onChange:()=>{t||o||f(c)},"aria-label":`Set mode to ${j.title}`}),(0,b.jsxs)("div",{className:"flex-1 space-y-1",children:[(0,b.jsx)("p",{className:"text-sm font-medium text-foreground",children:j.title}),(0,b.jsx)("p",{className:"text-xs text-muted-foreground",children:j.brief}),r&&(0,b.jsx)("p",{className:"text-xs text-warning",children:"No backend connector is registered for this integration — Delegated mode cannot be activated."}),s&&q&&(0,b.jsx)("p",{className:"text-xs text-warning",children:q})]})]}),(0,b.jsxs)(m.Collapsible,{open:p,onOpenChange:a=>{l(b=>{let d=new Set(b);return a?d.add(c):d.delete(c),d})},children:[(0,b.jsxs)(m.CollapsibleTrigger,{type:"button",className:"group flex w-full items-center gap-1 border-t border-border/50 px-3 py-1.5 text-left text-[11px] font-medium text-muted-foreground hover:bg-muted/40 hover:text-foreground","aria-label":`Toggle details for ${j.title} mode`,children:[(0,b.jsx)(e.ChevronDown,{className:(0,u.cn)("h-3 w-3 transition-transform",p&&"rotate-180")}),p?"Hide details":"Show details"]}),(0,b.jsx)(m.CollapsibleContent,{children:(0,b.jsxs)("div",{className:"space-y-2 px-3 pb-3 pt-1 text-xs leading-relaxed",children:[(0,b.jsx)("ul",{className:"list-disc space-y-1.5 pl-5 text-muted-foreground",children:j.details.map((a,c)=>(0,b.jsx)("li",{children:a},c))}),j.footnote&&(0,b.jsx)("p",{className:"rounded bg-muted/50 px-2 py-1 text-[11px] italic text-foreground/80",children:j.footnote})]})})]})]},c)})})]})}var P=a.i(42732),Q=a.i(48033),R=a.i(869);function S(a){let b=new Set,c=[];for(let d of a.split(/\r?\n/)){let a=d.trim();a&&(b.has(a)||(b.add(a),c.push(a)))}return c}let T={gmail:{codex:{heading:"Gmail (delegated to Codex) — pre-populated entries:",entries:[{tool:"send_email",parenNote:"sending a freshly-composed message",verdict:"strictly destructive"},{tool:"delete_emails",parenNote:"move to Trash — the connector's only delete primitive",verdict:"strictly destructive"},{tool:"archive_emails",parenNote:"archive",verdict:'recoverable from "All Mail" but easy to lose track of'},{tool:"apply_labels_to_emails",verdict:"mutating; can hide threads"}]},claude:{heading:"Gmail (delegated to Claude) — the hosted Gmail connector is draft-only (no send / delete / archive). The only mutating ops are label changes:",entries:[{tool:"label_message",verdict:"mutating"},{tool:"label_thread",verdict:"mutating"}]}},google_calendar:{codex:{heading:"Google Calendar — pre-populated entries:",entries:[{tool:"delete_event",verdict:"strictly destructive"},{tool:"update_event",parenNote:"edits to existing events",verdict:"mutating; not strictly destructive but easy to undo wrong"}]},claude:{heading:"Google Calendar — pre-populated entries:",entries:[{tool:"delete_event",verdict:"strictly destructive"},{tool:"update_event",parenNote:"edits to existing events",verdict:"mutating; not strictly destructive but easy to undo wrong"}]}}};function U({integrationKey:a,delegatedBackend:c}){let d=T[a]?.[c];return(0,b.jsxs)(k.Card,{className:"bg-warning/5",children:[(0,b.jsx)("h4",{className:"text-sm font-semibold",children:"Your destructive-action floor"}),(0,b.jsx)("p",{className:"mt-2 text-xs text-muted-foreground",children:"By default, the wizard pre-populated the destructive tools below into your deny list. The agent can still read, search, and draft — it just can't send, archive, or delete unless you remove the corresponding entry."}),d&&(0,b.jsxs)("div",{className:"mt-3 space-y-2 text-xs",children:[(0,b.jsx)("p",{className:"font-medium text-foreground",children:d.heading}),d.preamble&&(0,b.jsx)("p",{className:"text-muted-foreground",children:d.preamble}),(0,b.jsx)("ul",{className:"ml-4 list-disc space-y-1 text-muted-foreground",children:d.entries.map(a=>(0,b.jsxs)("li",{children:[(0,b.jsx)("code",{className:"font-mono text-[11px] text-foreground",children:a.tool}),a.parenNote&&(0,b.jsxs)("span",{children:[" (",a.parenNote,")"]}),(0,b.jsx)("span",{children:" — "}),(0,b.jsx)("em",{children:a.verdict})]},a.tool))})]}),(0,b.jsxs)("div",{className:"mt-3 space-y-2 text-xs text-muted-foreground",children:[(0,b.jsxs)("p",{children:[(0,b.jsx)("span",{className:"font-medium text-foreground",children:"Why these defaults?"})," ","The list errs conservative on purpose: the floor here is what keeps the CLAUDE.md"," ",(0,b.jsx)("em",{children:'"destructive ops require user confirmation"'})," ","invariant intact on a fresh install. If you want the agent to archive freely, remove ",(0,b.jsx)("code",{className:"font-mono",children:"archive_emails"}),". If you trust it to update calendar events, remove"," ",(0,b.jsx)("code",{className:"font-mono",children:"update_event"}),". The strictly-destructive entries (",(0,b.jsx)("code",{className:"font-mono",children:"send_email"}),","," ",(0,b.jsx)("code",{className:"font-mono",children:"delete_emails"}),","," ",(0,b.jsx)("code",{className:"font-mono",children:"delete_event"}),") are the ones we recommend keeping."]}),(0,b.jsxs)("p",{children:["Tool names are bare — no ",(0,b.jsx)("code",{className:"font-mono",children:"mcp__*"})," ","prefix, no leading underscore (the daemon prepends the connector's namespace before forwarding). They match the connector you've delegated to: Codex Gmail uses ",(0,b.jsx)("code",{className:"font-mono",children:"send_email"}),"/",(0,b.jsx)("code",{className:"font-mono",children:"delete_emails"}),"/etc., Claude Gmail uses ",(0,b.jsx)("code",{className:"font-mono",children:"label_message"}),"/",(0,b.jsx)("code",{className:"font-mono",children:"label_thread"}),"/etc. Patterns support ",(0,b.jsx)("code",{className:"font-mono",children:"*"})," as a suffix — for example, ",(0,b.jsx)("code",{className:"font-mono",children:"delete_*"})," matches everything that starts with ",(0,b.jsx)("code",{className:"font-mono",children:"delete_"}),"."]}),(0,b.jsx)("p",{children:"Anything you deny here is rejected at the daemon, regardless of which path the agent takes (direct API, cross-backend proxy, or same-backend native MCP)."})]})]})}function V({integrationKey:a,descriptor:e,delegatedBackend:f,deniedTools:g,currentMode:l}){let[m,n]=(0,c.useState)(g??[]),[o,p]=(0,c.useState)(!1),[r,s]=(0,c.useState)(null),[u,v]=(0,c.useState)(!1),w=(0,q.usePatchIntegration)();(0,c.useEffect)(()=>{let a=[...g??[]];n(b=>!function(a,b){if(a.length!==b.length)return!1;let c=new Set(a);for(let a of b)if(!c.has(a))return!1;return!0}(b,a)?o?b:a:(p(!1),b))},[g,f]),(0,c.useEffect)(()=>{s(null),v(!1)},[f]);let x=(0,c.useMemo)(()=>(function(a,b,c){if(!b)return null;let d=a.backendConnectors[b];if(!d)return null;let e=new Set(c??[]),f=new Set(d.requiredCapabilities),g=new Set,h=[];for(let a of d.optionalCapabilities){if(g.has(a))continue;g.add(a);let b=[...d.capabilityTools[a]??[]],c=b.length>0&&b.every(a=>e.has(a));h.push({capability:a,label:y(a),tools:b,required:f.has(a),denied:c})}for(let a of d.requiredCapabilities){if(g.has(a))continue;g.add(a);let b=[...d.capabilityTools[a]??[]];h.push({capability:a,label:y(a),tools:b,required:!0,denied:!1})}let i=new Set;for(let a of Object.values(d.capabilityTools))for(let b of a)i.add(b);return{rows:h,staleDeniedTools:(c??[]).filter(a=>!i.has(a)),softEnforcement:"claude"!==b}})(e,f,m),[e,f,m]);if("delegated"!==l||!x)return null;let z=x.rows.filter(a=>!a.required),A=x.rows.filter(a=>a.required),B=async()=>{s(null),v(!1);try{await w.mutateAsync({key:a,body:{mode:"delegated",delegatedBackend:f,deniedTools:[...m]}}),p(!1),v(!0),window.setTimeout(()=>v(!1),1500)}catch(a){s(function(a){if(a instanceof t.ApiError){let b=a.body;if(b?.error==="unknown_tool")return b.message??`Unknown tool: ${b.tool??"?"}`;if(b?.error==="denial_breaks_required_capability"){let a=b.remainingTools?.join(", ")??"?";return b.message??`Denying these tools breaks required capability '${b.capability??"?"}'. Keep at least one of: ${a}.`}return b?.message??a.message}return a instanceof Error?a.message:"Unexpected error"}(a))}},C="codex"===f?"codex":null,D=z.filter(a=>a.denied).length;return(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(U,{integrationKey:a,delegatedBackend:f}),(0,b.jsxs)(k.Card,{children:[(0,b.jsxs)("div",{className:"mb-2 flex flex-wrap items-center justify-between gap-2",children:[(0,b.jsxs)("div",{className:"flex items-center gap-2",children:[(0,b.jsx)("h4",{className:"text-sm font-medium",children:"Tool permissions"}),D>0&&(0,b.jsxs)(h.Badge,{variant:"amber",className:"h-5 px-1.5 text-[10px]",children:[D," off"]})]}),C&&(0,b.jsx)(R.TooltipProvider,{children:(0,b.jsxs)(R.Tooltip,{children:[(0,b.jsx)(R.TooltipTrigger,{asChild:!0,children:(0,b.jsxs)(h.Badge,{variant:"amber",className:"cursor-help gap-1",children:["Limited enforcement (",C,")"]})}),(0,b.jsx)(R.TooltipContent,{children:(0,b.jsx)("p",{className:"max-w-xs text-xs",children:'Codex doesn\'t expose a per-tool block at the binary level. The agent reads a "denied tools" note in its prompt and is asked to obey it — weaker than the SDK-level block Claude and Gemini provide. Switch to a Claude- or Gemini-backed delegation if you need hard enforcement.'})})]})})]}),(0,b.jsx)("p",{className:"mb-3 text-xs text-muted-foreground",children:"Turn off connector tools the agent should never use for this integration. Required capabilities (search, read, …) can't be disabled — to drop them, switch the integration out of delegated mode."}),0===z.length?(0,b.jsx)("p",{className:"text-xs italic text-muted-foreground",children:"This connector has no optional capabilities to manage."}):(0,b.jsx)("div",{className:"space-y-1",children:z.map(a=>(0,b.jsx)(X,{row:a,onToggle:()=>{a.required||(n(function(a,b,c){let d=new Set(a);if(c)for(let a of b.tools)d.add(a);else for(let a of b.tools)d.delete(a);return[...d]}(m,a,!a.denied)),p(!0),s(null),v(!1))}},a.capability))}),A.length>0&&(0,b.jsx)(Y,{rows:A}),x.staleDeniedTools.length>0&&(0,b.jsx)(j.Alert,{variant:"warning",className:"mt-3",children:(0,b.jsxs)("div",{className:"flex items-start justify-between gap-2",children:[(0,b.jsxs)("div",{className:"space-y-1",children:[(0,b.jsxs)("p",{className:"text-xs font-medium",children:[x.staleDeniedTools.length," stale entr",1===x.staleDeniedTools.length?"y":"ies"," from a previous backend"]}),(0,b.jsx)("ul",{className:"font-mono text-[11px]",children:x.staleDeniedTools.map(a=>(0,b.jsx)("li",{className:"break-all",children:a},a))}),(0,b.jsxs)("p",{className:"text-[11px] text-muted-foreground",children:[`These names don't match any tool in ${f}'s`,"connector. The agent ignores them already; click Clean up to drop them from the saved list."]})]}),(0,b.jsx)(i.Button,{variant:"outline",size:"sm",className:"h-7 shrink-0 px-2 text-xs",onClick:()=>{if(0===x.staleDeniedTools.length)return;let a=new Set(x.staleDeniedTools);n(m.filter(b=>!a.has(b))),p(!0),s(null),v(!1)},children:"Clean up"})]})}),r&&(0,b.jsx)(j.Alert,{variant:"error",className:"mt-3 whitespace-pre-line",children:(0,b.jsx)("p",{className:"text-xs",children:r})}),(o||u)&&(0,b.jsxs)("div",{className:"mt-3 flex items-center justify-end gap-2",children:[u&&!o&&(0,b.jsxs)("span",{className:"flex items-center gap-1 text-xs text-success",children:[(0,b.jsx)(d.Check,{className:"h-3 w-3"})," Saved"]}),o&&(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(i.Button,{variant:"ghost",size:"sm",className:"h-7 px-2 text-xs",onClick:()=>{n(g??[]),p(!1),s(null),v(!1)},disabled:w.isPending,children:"Revert"}),(0,b.jsx)(i.Button,{size:"sm",className:"h-7 px-3 text-xs",onClick:()=>void B(),disabled:w.isPending,children:w.isPending?"Applying…":"Apply"})]})]}),(0,b.jsx)(W,{draft:m,onChange:a=>{n(a),p(!0),s(null),v(!1)}})]})]})}function W({draft:a,onChange:d}){let[f,g]=(0,c.useState)(!1),[h,i]=(0,c.useState)(a.join("\n"));return(0,c.useEffect)(()=>{let b=S(h);b.length===a.length&&b.every((b,c)=>b===a[c])||i(a.join("\n"))},[a]),(0,b.jsxs)("div",{className:"mt-4 border-t pt-3",children:[(0,b.jsxs)("button",{type:"button",className:"flex w-full items-center justify-between text-xs text-muted-foreground hover:text-foreground",onClick:()=>g(a=>!a),"aria-expanded":f,children:[(0,b.jsxs)("span",{className:"flex items-center gap-1",children:[(0,b.jsx)("span",{className:"font-medium",children:"Advanced — raw deny list"}),(0,b.jsxs)("span",{className:"text-[10px]",children:["(",a.length," ",1===a.length?"entry":"entries",")"]})]}),f?(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3"}):(0,b.jsx)(P.ChevronRight,{className:"h-3 w-3"})]}),f&&(0,b.jsxs)("div",{className:"mt-2 space-y-2",children:[(0,b.jsxs)("p",{className:"text-[11px] text-muted-foreground",children:["One tool pattern per line. Suffix glob support: ",(0,b.jsx)("code",{className:"font-mono",children:"delete_*"})," ","matches every tool starting with ",(0,b.jsx)("code",{className:"font-mono",children:"delete_"}),". The list is enforced uniformly across direct, cross-backend proxy, and same-backend native MCP paths."]}),(0,b.jsx)("textarea",{value:h,onChange:a=>{var b;i(b=a.target.value),d(S(b))},spellCheck:!1,rows:Math.max(4,Math.min(12,h.split("\n").length+1)),className:"w-full rounded-md border border-input bg-background p-2 font-mono text-[11px] text-foreground focus:outline-none focus:ring-2 focus:ring-ring",placeholder:"send_email\ndelete_emails\narchive_*"})]})]})}function X({row:a,onToggle:d}){let[f,g]=(0,c.useState)(!1),i=!a.denied;return(0,b.jsxs)("div",{className:(0,u.cn)("rounded-md border p-2 text-xs transition",i?"border-border":"border-dashed border-border/70 bg-muted/20"),children:[(0,b.jsxs)("div",{className:"flex items-center gap-2",children:[(0,b.jsx)("input",{id:`perm-${a.capability}`,type:"checkbox",className:"cursor-pointer",checked:i,onChange:d}),(0,b.jsxs)("label",{htmlFor:`perm-${a.capability}`,className:"flex-1 cursor-pointer",children:[(0,b.jsx)("span",{className:"font-medium text-foreground",children:a.label}),a.denied&&(0,b.jsx)(h.Badge,{variant:"amber",className:"ml-2 h-4 px-1 text-[10px]",children:"off"})]}),a.tools.length>0&&(0,b.jsxs)("button",{type:"button",className:"flex shrink-0 items-center gap-0.5 rounded px-1 py-0.5 text-[10px] text-muted-foreground hover:bg-muted/40 hover:text-foreground",onClick:()=>g(a=>!a),"aria-expanded":f,"aria-label":f?`Hide tools for ${a.label}`:`Show tools for ${a.label}`,children:[f?(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3"}):(0,b.jsx)(P.ChevronRight,{className:"h-3 w-3"}),a.tools.length," tool",1===a.tools.length?"":"s"]})]}),f&&a.tools.length>0&&(0,b.jsx)("ul",{className:"ml-6 mt-1 font-mono text-[10px] text-muted-foreground",children:a.tools.map(a=>(0,b.jsx)("li",{className:"break-all",children:a},a))})]})}function Y({rows:a}){let[f,g]=(0,c.useState)(!1);return(0,b.jsxs)("div",{className:"mt-3 border-t pt-2",children:[(0,b.jsxs)("button",{type:"button",className:"flex w-full items-center justify-between text-xs text-muted-foreground hover:text-foreground",onClick:()=>g(a=>!a),"aria-expanded":f,children:[(0,b.jsxs)("span",{className:"flex items-center gap-1",children:[(0,b.jsx)(Q.Lock,{className:"h-3 w-3"})," Required capabilities (",a.length,")"]}),f?(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3"}):(0,b.jsx)(P.ChevronRight,{className:"h-3 w-3"})]}),f&&(0,b.jsxs)("ul",{className:"mt-2 space-y-1",children:[a.map(a=>(0,b.jsxs)("li",{className:"flex items-center gap-1.5 text-[11px] text-muted-foreground",children:[(0,b.jsx)(d.Check,{className:"h-3 w-3 text-muted-foreground/70"}),(0,b.jsx)("span",{className:"font-medium text-foreground",children:a.label}),a.tools.length>0&&(0,b.jsxs)("span",{className:"font-mono text-[10px]",children:["· ",a.tools.join(", ")]})]},a.capability)),(0,b.jsx)("li",{className:"pt-1 text-[10px] italic text-muted-foreground",children:"To drop these, switch this integration out of delegated mode."})]})]})}function Z({name:a,badge:c,children:d}){return(0,b.jsxs)(k.Card,{children:[(0,b.jsxs)("div",{className:"mb-3 flex items-center justify-between",children:[(0,b.jsx)("h3",{className:"text-sm font-medium",children:a}),c]}),d]})}function $(a){if(a instanceof t.ApiError){let b=a.body;if(b?.error==="missing_variants"){let a=[...b.missingSkills??[],...b.missingTaskFlows??[]],c="native"===b.mode?"native":"delegated";return`Missing variant file(s) for ${c} mode:
+${a.join("\n")}`}if(b?.error==="backend_not_supported_native"){let a=b.supportedNativeBackends?.join(", ")??"—";return`${b.message??"Backend has no native connector."} Supported native backends: ${a}.`}return b?.error==="native_backend_mismatches_main"?b.message??`Native mode must bind to the current main backend (${b.mainBackend??"?"}).`:b?.message??a.message}return a instanceof Error?a.message:"Unexpected error"}function _({descriptor:a,backend:c,mode:d}){let e=c?function(a,b){switch(a){case"claude":return`Claude Code: register an MCP server via \`claude mcp add\` or wire up a connector at claude.ai/connections that exposes ${b}.`;case"codex":return`Codex: add an MCP server entry to your Codex configuration that exposes ${b} so the connector surfaces in Codex's tool list.`;case"gemini":return`Gemini CLI: install an MCP extension that exposes ${b} (e.g. \`gemini mcp add\` or a \`~/.gemini/extensions/<name>/\` directory).`;case"opencode":return`OpenCode: configure an MCP server for ${b} once OpenCode runtime support is enabled.`}}(c,a.displayName):null;return(0,b.jsxs)(j.Alert,{variant:"info",children:[(0,b.jsxs)("p",{className:"text-xs font-medium",children:["User-managed connector — the daemon does not poll, proxy, or store credentials for ",a.displayName,"."]}),(0,b.jsxs)("p",{className:"mt-1 text-xs",children:["native"===d?"Native":"Delegated"," mode requires you to register an MCP server or connector on the ",c??"selected"," backend that gives it access to"," ",a.displayName,". The agent uses those tools directly; no capability probe runs and no daemon-side proxy is exposed."]}),e&&(0,b.jsx)("p",{className:"mt-1 text-[11px] text-muted-foreground",children:e})]})}function aa({integrationKey:a,entry:k,descriptor:l,featureMatrix:n}){let o=n.filter(a=>a.present).length,p=n.length,r=k.lastProbeAt?new Date(k.lastProbeAt).toLocaleString():null,s=k.delegatedBackend;s&&l.backendConnectors[s];let v=(0,q.useIntegrationProbeLive)(),[w,x]=(0,c.useState)(null);if(l.userManagedConnector)return(0,b.jsx)(_,{descriptor:l,backend:s,mode:"delegated"});let y=async()=>{if(s){x(null);try{await v.mutateAsync({key:a,backend:s,liveProbe:!0})}catch(a){if(a instanceof t.ApiError){let b=a.body;b?.error==="live_probe_unsupported"?x(b.message??"Live probe not yet supported on this backend."):x(b?.message??a.message)}else x(a instanceof Error?a.message:"Unexpected error")}}};return(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsxs)("div",{className:"flex flex-wrap items-center gap-x-4 gap-y-1 text-xs text-muted-foreground",children:[(0,b.jsxs)("span",{children:["Tool namespace"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:k.toolNamespace??"?"})]}),(0,b.jsxs)("span",{children:["Capabilities"," ",(0,b.jsxs)("span",{className:"text-foreground",children:[o,"/",p]})]}),(0,b.jsxs)("span",{children:["Probe"," ",(0,b.jsx)("span",{className:"text-foreground",children:r??"defaults (no live probe yet)"})]}),(0,b.jsxs)(i.Button,{variant:"ghost",size:"sm",className:"h-6 gap-1 px-2 text-[11px]",onClick:()=>void y(),disabled:v.isPending||!s,"aria-label":"Re-probe connector",children:[(0,b.jsx)(f.RefreshCw,{className:(0,u.cn)("h-3 w-3",v.isPending&&"animate-spin")}),v.isPending?"Probing…":"Re-probe"]})]}),w&&(0,b.jsx)(j.Alert,{variant:"error",children:(0,b.jsx)("p",{className:"text-xs",children:w})}),p>0&&(0,b.jsxs)(m.Collapsible,{children:[(0,b.jsxs)(m.CollapsibleTrigger,{className:"group flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground",children:[(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3 transition-transform group-data-[state=open]:rotate-180"}),"Feature matrix"]}),(0,b.jsx)(m.CollapsibleContent,{children:(0,b.jsx)("ul",{className:"mt-2 grid grid-cols-1 gap-0.5 sm:grid-cols-2",children:n.map(a=>(0,b.jsxs)("li",{className:(0,u.cn)("flex items-center gap-1.5 text-xs",!a.present&&"text-muted-foreground/70"),children:[a.present?(0,b.jsx)(d.Check,{className:"h-3 w-3 text-success"}):(0,b.jsx)(g.X,{className:"h-3 w-3 text-muted-foreground"}),(0,b.jsx)("span",{children:a.label}),a.required&&!a.present&&(0,b.jsx)(h.Badge,{variant:"red",className:"h-4 px-1 text-[10px]",children:"required"})]},a.capability))})})]})]})}function ab({integrationKey:a,entry:k,descriptor:l,featureMatrix:n,mainBackend:o}){let p=n.filter(a=>a.present).length,r=n.length,s=k.lastProbeAt?new Date(k.lastProbeAt).toLocaleString():null,v=k.nativeBackend,w=(0,q.useIntegrationProbeLive)(),[x,y]=(0,c.useState)(null);if(l.userManagedConnector)return(0,b.jsx)(_,{descriptor:l,backend:v,mode:"native"});let z=null!==v&&null!==o&&v!==o,A=async()=>{if(v){y(null);try{await w.mutateAsync({key:a,backend:v,liveProbe:!0})}catch(a){if(a instanceof t.ApiError){let b=a.body;b?.error==="live_probe_unsupported"?y(b.message??"Live probe not yet supported on this backend."):y(b?.message??a.message)}else y(a instanceof Error?a.message:"Unexpected error")}}};return(0,b.jsxs)("div",{className:"space-y-2",children:[(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsxs)("p",{className:"text-xs",children:["Native mode — the agent fetches ",l.displayName," via"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:v??"?"}),"'s connector during DM and activity_scan turns. The daemon does not poll, does not proxy, and does not store"," ",l.displayName," credentials. Destructive operations still require user confirmation via the absolute-block layer."]})}),z&&(0,b.jsx)(j.Alert,{variant:"warning",children:(0,b.jsxs)("p",{className:"text-xs",children:["This row is bound to"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:v})," ","but the current main backend is"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:o}),". The next session refresh will cascade this row to disabled — re-configure on the new main backend."]})}),(0,b.jsxs)("div",{className:"flex flex-wrap items-center gap-x-4 gap-y-1 text-xs text-muted-foreground",children:[(0,b.jsxs)("span",{children:["Tool namespace"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:k.toolNamespace??"?"})]}),r>0&&(0,b.jsxs)("span",{children:["Capabilities"," ",(0,b.jsxs)("span",{className:"text-foreground",children:[p,"/",r]})]}),(0,b.jsxs)("span",{children:["Probe"," ",(0,b.jsx)("span",{className:"text-foreground",children:s??"defaults (no live probe yet)"})]}),(0,b.jsxs)(i.Button,{variant:"ghost",size:"sm",className:"h-6 gap-1 px-2 text-[11px]",onClick:()=>void A(),disabled:w.isPending||!v,"aria-label":"Re-probe connector",children:[(0,b.jsx)(f.RefreshCw,{className:(0,u.cn)("h-3 w-3",w.isPending&&"animate-spin")}),w.isPending?"Probing…":"Re-probe"]})]}),x&&(0,b.jsx)(j.Alert,{variant:"error",children:(0,b.jsx)("p",{className:"text-xs",children:x})}),r>0&&(0,b.jsxs)(m.Collapsible,{children:[(0,b.jsxs)(m.CollapsibleTrigger,{className:"group flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground",children:[(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3 transition-transform group-data-[state=open]:rotate-180"}),"Feature matrix"]}),(0,b.jsx)(m.CollapsibleContent,{children:(0,b.jsx)("ul",{className:"mt-2 grid grid-cols-1 gap-0.5 sm:grid-cols-2",children:n.map(a=>(0,b.jsxs)("li",{className:(0,u.cn)("flex items-center gap-1.5 text-xs",!a.present&&"text-muted-foreground/70"),children:[a.present?(0,b.jsx)(d.Check,{className:"h-3 w-3 text-success"}):(0,b.jsx)(g.X,{className:"h-3 w-3 text-muted-foreground"}),(0,b.jsx)("span",{children:a.label}),a.required&&!a.present&&(0,b.jsx)(h.Badge,{variant:"red",className:"h-4 px-1 text-[10px]",children:"required"})]},a.capability))})})]})]})}function ac({integrationKey:a,delegatedBackend:d,delegatedModel:e,currentMode:f}){var g,k;let m=(0,q.useProxyModels)(d),n=(0,q.usePatchIntegration)(),[o,p]=(0,c.useState)(null),r=m.data?.options??[],s=m.data?.canonical??null,t=e??B,u=null!==e&&r.length>0&&!r.some(a=>a.modelId===e),v=e?r.find(a=>a.modelId===e):r.find(a=>a.modelId===s)??r.find(a=>"lite"===a.tier)??r[0],w=v?(g=v.usdPer1kIn,k=v.usdPer1kOut,null===g||null===k?null:800*g/1e3+200*k/1e3):null,x=async b=>{p(null);let c=b===B?null:b;if(c!==e)try{await n.mutateAsync({key:a,body:{mode:"delegated",delegatedBackend:d,delegatedModel:c}})}catch(a){p($(a))}};return"delegated"!==f?null:(0,b.jsxs)("div",{className:"space-y-1",children:[(0,b.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,b.jsx)("label",{className:"text-xs font-medium text-muted-foreground",htmlFor:`proxy-model-${a}`,children:"Proxy model"}),(0,b.jsxs)(l.Select,{value:t,onValueChange:a=>void x(a),children:[(0,b.jsx)(l.SelectTrigger,{id:`proxy-model-${a}`,className:"h-8 w-auto min-w-[16rem] text-xs",disabled:m.isLoading||n.isPending,children:(0,b.jsx)(l.SelectValue,{})}),(0,b.jsxs)(l.SelectContent,{children:[(0,b.jsxs)(l.SelectItem,{value:B,children:["Auto (light tier",s?` — ${s}`:"",")"]}),r.map(a=>(0,b.jsxs)(l.SelectItem,{value:a.modelId,children:[a.displayName,"lite"!==a.tier?` \xb7 ${a.tier}`:"",a.deprecated?" · deprecated":""]},a.modelId)),u&&e&&(0,b.jsxs)(l.SelectItem,{value:e,children:[e," · stale"]})]})]}),null!==w&&(0,b.jsxs)(h.Badge,{variant:"gray",title:"Estimate based on a typical proxy call (≈800 in / 200 out tokens). Actual costs vary by tool.",children:["≈ ",w<.001?"<$0.001":w<.01?`$${w.toFixed(4)}`:`$${w.toFixed(3)}`," / call"]})]}),u&&(0,b.jsxs)(j.Alert,{variant:"warning",children:[(0,b.jsxs)("p",{className:"text-xs",children:["Pinned model ",(0,b.jsx)("code",{children:e})," is not registered for backend ",(0,b.jsx)("code",{children:d}),". Calls fall back to the canonical light-tier model until you reset."]}),(0,b.jsx)(i.Button,{variant:"ghost",size:"sm",className:"mt-1 h-6 px-2 text-[11px]",onClick:()=>void x(B),disabled:n.isPending,children:"Reset to default"})]}),o&&(0,b.jsx)(j.Alert,{variant:"error",children:(0,b.jsx)("p",{className:"text-xs",children:o})})]})}function ad({integrationKey:a,credentialsPresent:c}){let d=ae[a].present,e=ae[a].absent;return(0,b.jsx)(j.Alert,{variant:c?"success":"warning",children:(0,b.jsx)("p",{className:"text-xs",children:c?d:e})})}let ae={gmail:{present:"Google OAuth credentials present. The daemon is polling Gmail directly.",absent:"Direct mode requires a Google Cloud OAuth credential. Complete the credential upload + authorize step below."},google_calendar:{present:"Google OAuth credentials present. The daemon is polling Calendar directly.",absent:"Direct mode requires a Google Cloud OAuth credential. Complete the credential upload + authorize step below."},notion:{present:"Notion API key present. The daemon is polling configured databases directly.",absent:"Direct mode requires a Notion internal-integration API key. Paste it below and share each target database with the integration."},git:{present:"Direct mode active. The daemon polls watched repositories with the local git CLI.",absent:"Direct mode uses the local git CLI and watched repository list; no daemon-managed credential is required."},github:{present:"Direct mode active. The daemon polls GitHub through the local gh CLI.",absent:"Direct mode uses gh auth login outside the daemon keychain; no daemon-managed credential is required."},outlook_mail:{present:"Outlook BYOA client config present. The unified mail poller covers authenticated Outlook mailboxes.",absent:"Direct mode requires a Microsoft Identity (BYOA) client config. Register an Azure app and paste the client id below."},outlook_calendar:{present:"Outlook BYOA client config present. Calendar reads are on-demand and reuse the MSAL token from Outlook Mail; no background poller in v1.",absent:"Direct mode requires the BYOA client config used by Outlook Mail. Configure it via the Outlook Mail card; calendar reads reuse the same authenticated session."},browser_history:{present:"Browser history ingest is active. The daemon reads local browser history databases on the configured cadence.",absent:"Direct mode requires accepting the on-device browser history consent latch. No external credentials are required."}};function af({integrationKey:a}){let c=(0,q.useRecentProxyCalls)(a),d=c.data?.calls??[],f=d.some(a=>"failed"===a.result);return(0,b.jsxs)(m.Collapsible,{children:[(0,b.jsxs)(m.CollapsibleTrigger,{className:"group flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground",children:[(0,b.jsx)(e.ChevronDown,{className:"h-3 w-3 transition-transform group-data-[state=open]:rotate-180"}),"Recent proxy calls",!c.isLoading&&(0,b.jsxs)("span",{className:"text-muted-foreground/70",children:["(",d.length,f&&(0,b.jsx)("span",{className:"ml-1 text-warning",children:"· failures"}),")"]})]}),(0,b.jsxs)(m.CollapsibleContent,{className:"pt-2",children:[c.isLoading&&(0,b.jsx)("p",{className:"text-xs text-muted-foreground",children:"Loading…"}),c.error&&(0,b.jsx)(j.Alert,{variant:"error",children:(0,b.jsxs)("p",{className:"text-xs",children:["Could not load recent calls:"," ",c.error instanceof Error?c.error.message:"Unexpected error"]})}),!c.isLoading&&!c.error&&0===d.length&&(0,b.jsx)("p",{className:"text-xs text-muted-foreground",children:"No proxy calls have been recorded for this integration yet. They land here as the agent invokes the connector."}),(0,b.jsxs)("p",{className:"mb-2 text-[11px] text-muted-foreground",children:["Only ",(0,b.jsx)("strong",{children:"cross-backend"}),"delegated calls show up here — calls where your DM session runs on a different backend than the connector's owner. Same-backend delegated calls (for example, a Codex DM session using Codex's own Gmail connector) skip the proxy and roll up under the parent session's totals. Per-tool cost isn't measurable in those cases."]}),d.length>0&&(0,b.jsx)("div",{className:"overflow-x-auto",children:(0,b.jsxs)("table",{className:"w-full min-w-[42rem] border-separate border-spacing-0 text-[11px]",children:[(0,b.jsx)("thead",{children:(0,b.jsxs)("tr",{className:"text-left text-muted-foreground",children:[(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Time"}),(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Tool"}),(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Model"}),(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Duration"}),(0,b.jsx)("th",{className:"pb-1 pr-3 font-medium",children:"Cost"}),(0,b.jsx)("th",{className:"pb-1 font-medium",children:"Result"})]})}),(0,b.jsx)("tbody",{children:d.map(a=>{var c,d;return(0,b.jsxs)("tr",{className:"border-t border-border/50 align-top",children:[(0,b.jsx)("td",{className:"py-1 pr-3 text-muted-foreground",children:function(a,b=new Date){if(null===a)return"—";let c=new Date(a);return Number.isNaN(c.getTime())?a:c.getFullYear()===b.getFullYear()&&c.getMonth()===b.getMonth()&&c.getDate()===b.getDate()?c.toLocaleTimeString():c.toLocaleString()}(a.startedAt)}),(0,b.jsx)("td",{className:"py-1 pr-3 font-mono",children:function(a){if(!a)return"—";let b=a.split("__"),c=b[b.length-1];return c&&c.length>0?c:a}(a.toolName)}),(0,b.jsx)("td",{className:"py-1 pr-3 text-muted-foreground",children:a.modelId??"—"}),(0,b.jsx)("td",{className:"py-1 pr-3 text-muted-foreground",children:null===(c=a.durationMs)?"—":c<1e3?`${c}ms`:`${(c/1e3).toFixed(1)}s`}),(0,b.jsx)("td",{className:"py-1 pr-3 text-muted-foreground",children:null===(d=a.costUsd)?"—":0===d?"$0":d<.001?"<$0.001":d<.01?`$${d.toFixed(4)}`:`$${d.toFixed(3)}`}),(0,b.jsx)("td",{className:"py-1",children:"success"===a.result?(0,b.jsx)(h.Badge,{variant:"green",className:"h-4 px-1 text-[10px]",children:"ok"}):(0,b.jsx)("span",{className:"text-warning",title:a.errorMessage??void 0,children:a.errorClass??a.result??"failed"})})]},a.id)})})]})})]})]})}a.s(["IntegrationCard",0,function({integrationKey:a,gmailAccountCount:d=0,children:e}){var f,g,k,m,u;let v=(0,q.useIntegrations)(),w=(0,p.useHealth)(),x=(0,o.useConfig)(),B=(0,n.useBackends)(),D=(0,q.useNativeUnboundActions)(),E=(0,q.usePatchIntegration)(),F=(0,q.useIntegrationProbeLive)(),H=(0,r.useConfirm)(),I=(0,s.useQueryClient)(),[L,M]=(0,c.useState)(null),[N,P]=(0,c.useState)("keep"),[Q,R]=(0,c.useState)(null),[S,T]=(0,c.useState)(null),[U,W]=(0,c.useState)(!1),X=(0,c.useMemo)(()=>v.data?.integrations.find(b=>b.key===a),[v.data,a]),Y=w.data?.integrationModes?.[a],_=B.data?.defaultBackend??null;if(v.isLoading||w.isLoading)return(0,b.jsx)(Z,{name:a,children:"Loading…"});if(!X||!Y)return(0,b.jsx)(Z,{name:a,children:(0,b.jsx)(j.Alert,{variant:"error",children:"Could not load integration metadata. The daemon may be offline."})});let ae=z(X),ag=A(X),ah=!!(f=x.data)&&("gmail"===a||"google_calendar"===a?f.googleCalendarCredentialsConfigured&&f.googleCalendarTokenConfigured:"notion"===a?f.notionConfigured:"git"===a||"github"===a||("outlook_mail"===a||"outlook_calendar"===a)&&!!f.outlookClientConfigConfigured),ai=G(X),aj=(D.data??[]).find(b=>b.key===a),ak=function(a){let{mode:b,unboundEntry:c,stateLastChangedAt:d,dismissedLocally:e}=a;if(e||void 0===c||"disabled"!==b)return!1;if(null===c.startedAt)return!0;let f=C(d),g=C(c.startedAt);return null===f||null===g||f<=g}({mode:Y.mode,unboundEntry:aj,stateLastChangedAt:X.state.lastChangedAt,dismissedLocally:U}),al="delegated"===Y.mode&&null!==_&&Y.delegatedBackend===_&&!!X.supportedModes.includes("native")&&!!_&&A(X).includes(_),am=function(a,b,c){if(null===a||null===c)return[];let d=b.backendConnectors[c];if(!d)return[];let e=new Set(d.requiredCapabilities),f=new Set,g=[];for(let b of[...d.requiredCapabilities,...d.optionalCapabilities])f.has(b)||(f.add(b),g.push({capability:b,label:y(b),present:!0===a[b],required:e.has(b)}));return g.sort((a,b)=>{let c=a=>a.present&&a.required?0:a.present?1:a.required?2:3,d=c(a)-c(b);return 0!==d?d:a.label.localeCompare(b.label)})}(Y.features,X,"native"===Y.mode?Y.nativeBackend:Y.delegatedBackend),an=async b=>{if("delegated"===Y.mode&&b!==Y.delegatedBackend){T(null);try{await E.mutateAsync({key:a,body:{mode:"delegated",delegatedBackend:b}}),F.mutateAsync({key:a,backend:b,liveProbe:!0}).catch(()=>void 0)}catch(a){T($(a))}}},ao=async()=>{if(!L)return;if(R(null),"direct"===Y.mode&&"delegated"===L.targetMode&&"purge"===N&&ai&&!await H({title:ai.confirmTitle,description:ai.confirmDescription,confirmLabel:"Purge",cancelLabel:"Keep dormant",variant:"destructive",requireText:"purge"}))return void P("keep");let b={mode:L.targetMode,..."delegated"===L.targetMode&&L.targetBackend?{delegatedBackend:L.targetBackend}:{},..."native"===L.targetMode&&L.targetBackend?{nativeBackend:L.targetBackend}:{}};try{await E.mutateAsync({key:a,body:b}),("delegated"===L.targetMode||"native"===L.targetMode)&&L.targetBackend&&F.mutateAsync({key:a,backend:L.targetBackend,liveProbe:!0}).catch(()=>void 0),"direct"===Y.mode&&"delegated"===L.targetMode&&"purge"===N&&ai&&(await Promise.all(ai.secretKeys.map(a=>t.api.delete(`/secrets/${a}`).catch(()=>{}))),I.invalidateQueries({queryKey:["config"]})),M(null)}catch(a){R($(a))}};return(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(Z,{name:X.displayName,badge:(0,b.jsxs)("div",{className:"flex items-center gap-2",children:[Y.subTier&&(0,b.jsx)(h.Badge,{variant:"blue",children:"draft-only"===(g=Y.subTier)?"Draft-Only":"full-auto"===g?"Full-Auto":null}),(0,b.jsx)(h.Badge,{variant:"direct"===(k=Y.mode)?"green":"delegated"===k?"amber":"native"===k?"blue":"gray",children:(m=Y.mode,u="native"===Y.mode?Y.nativeBackend:Y.delegatedBackend,"direct"===m?"Direct":"disabled"===m?"Disabled":"native"===m?null===u?"Native":`Native — ${u}`:null===u?"Delegated":`Delegated — ${u}`)})]}),children:(0,b.jsxs)("div",{className:"space-y-3",children:[ak&&aj&&(0,b.jsxs)(j.Alert,{variant:"error",children:[(0,b.jsxs)("p",{className:"text-sm font-medium",children:["Native binding lost — re-configure ",X.displayName,"."]}),(0,b.jsxs)("p",{className:"mt-1 text-xs text-muted-foreground",children:[X.displayName," was set to native mode on"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:aj.priorNativeBackend??"?"})," ","but you switched the main backend to"," ",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono",children:aj.newMainBackend??_??"?"}),". Native bindings are explicit — pick a mode below to restore agent awareness."]}),(0,b.jsx)(i.Button,{variant:"ghost",size:"sm",className:"mt-2 h-6 px-2 text-[11px]",onClick:()=>W(!0),children:"Dismiss"})]}),al&&_&&(0,b.jsxs)(j.Alert,{variant:"info",children:[X.userManagedConnector?(0,b.jsxs)("p",{className:"text-sm",children:["You're delegated to your main backend (",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono text-xs",children:_}),"). Switching to ",(0,b.jsx)("strong",{children:"Native"})," swaps the row to an explicit binding against ",_," — the user-installed"," ",X.displayName," MCP is reached the same way, but the mode label honestly reflects that the daemon never proxies this integration, and a future main-backend change will prompt you to re-confirm the binding instead of silently moving the delegation."]}):(0,b.jsxs)("p",{className:"text-sm",children:["You're delegated to your main backend (",(0,b.jsx)("code",{className:"rounded bg-muted px-1 py-0.5 font-mono text-xs",children:_}),"). Switching to ",(0,b.jsx)("strong",{children:"Native"})," stops the background worker cadence and lets the agent fetch"," ",X.displayName," in-turn through ",_,"'s own connector — fewer moving parts, no proxy hop."]}),(0,b.jsx)("div",{className:"mt-2 flex items-center gap-2",children:(0,b.jsx)(i.Button,{variant:"outline",size:"sm",className:"h-7 px-2 text-xs",disabled:E.isPending,onClick:()=>{R(null),P("keep"),M({open:!0,targetMode:"native",targetBackend:_})},children:"Switch to native"})})]}),(0,b.jsx)(O,{currentMode:Y.mode,descriptor:X,delegatedBackendCount:ae.length,mainBackend:_,disabled:E.isPending,onSelectMode:a=>{if(a!==Y.mode){if(R(null),P("keep"),"delegated"===a){let a=ae[0];if(!a)return;M({open:!0,targetMode:"delegated",targetBackend:a});return}if("native"===a){if(!_||!ag.includes(_))return;M({open:!0,targetMode:"native",targetBackend:_});return}M({open:!0,targetMode:a})}}}),"delegated"===Y.mode&&ae.length>0&&(0,b.jsxs)("div",{children:[(0,b.jsx)("label",{className:"mb-1 block text-xs font-medium text-muted-foreground",children:"Backend"}),(0,b.jsxs)(l.Select,{value:Y.delegatedBackend??ae[0],onValueChange:a=>void an(a),disabled:E.isPending,children:[(0,b.jsx)(l.SelectTrigger,{className:"h-8 text-xs",children:(0,b.jsx)(l.SelectValue,{})}),(0,b.jsx)(l.SelectContent,{children:ae.map(a=>{let c=(0,J.isUiPreviewOnlyBackend)(a);return(0,b.jsxs)(l.SelectItem,{value:a,disabled:c,children:[a,c?J.UI_PREVIEW_ONLY_BADGE_SUFFIX:""]},a)})})]}),S&&(0,b.jsx)(j.Alert,{variant:"error",className:"mt-2",children:(0,b.jsx)("p",{className:"text-xs",children:S})})]}),Y.variantsMissing&&Y.variantsMissing.length>0&&(0,b.jsxs)(j.Alert,{variant:"error",children:[(0,b.jsxs)("p",{className:"font-medium",children:["Missing ","native"===Y.mode?"native":"delegated"," ","variant file(s) — agent will silently fall back to the direct- mode skill body."]}),(0,b.jsx)("ul",{className:"mt-1 space-y-0.5 font-mono text-[11px]",children:Y.variantsMissing.map(a=>(0,b.jsx)("li",{className:"break-all",children:a},a))})]}),"delegated"===Y.mode&&(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(aa,{integrationKey:a,entry:Y,descriptor:X,featureMatrix:am}),Y.delegatedBackend&&!X.userManagedConnector&&(0,b.jsx)(ac,{integrationKey:a,delegatedBackend:Y.delegatedBackend,delegatedModel:X.state.delegatedModel??null,currentMode:Y.mode}),Y.delegatedBackend&&!X.userManagedConnector&&(0,b.jsx)(V,{integrationKey:a,descriptor:X,delegatedBackend:Y.delegatedBackend,deniedTools:X.state.deniedTools,currentMode:Y.mode}),!X.userManagedConnector&&(0,b.jsx)(af,{integrationKey:a})]}),"native"===Y.mode&&(0,b.jsx)(ab,{integrationKey:a,entry:Y,descriptor:X,featureMatrix:am,mainBackend:_}),"direct"===Y.mode&&(0,b.jsx)(ad,{integrationKey:a,credentialsPresent:ah}),"disabled"===Y.mode&&(0,b.jsx)(j.Alert,{variant:"info",children:(0,b.jsx)("p",{children:"Disabled. The agent does not observe or act on this integration. Flip the mode above to re-enable."})}),e]})}),L&&(0,b.jsx)(K,{open:L.open,onOpenChange:a=>{M(b=>b?{...b,open:a}:null),a||R(null)},descriptor:X,currentMode:Y.mode,currentBackend:"native"===Y.mode?Y.nativeBackend:Y.delegatedBackend,targetMode:L.targetMode,targetBackend:L.targetBackend,onTargetBackendChange:a=>M(b=>b?{...b,targetBackend:a}:null),directCredentialsPresent:ah,gmailAccountCount:d,tokenHandling:N,onTokenHandlingChange:P,onConfirm:ao,isPending:E.isPending,error:Q})]})}],36581)}];
 
 //# sourceMappingURL=packages_dashboard_src_components_connections_integration-card_tsx_0yh1a-~._.js.map