@ashlr/hub 3.7.0 → 3.9.0

package/dist/core/web/public/next/assets/{McpSection-CEUpV_5X.js.map → McpSection-q34T7Tho.js.map}

@@ -1 +1 @@
-{"version":3,"file":"McpSection-CEUpV_5X.js","names":[],"sources":["../../../../../../src/web-ui/routes/verse/mcp/mcp-contract.ts","../../../../../../src/web-ui/routes/verse/mcp/mcp.module.css","../../../../../../src/web-ui/routes/verse/mcp/McpServerDisclosure.tsx","../../../../../../src/web-ui/routes/verse/mcp/mcp-queries.ts","../../../../../../src/web-ui/routes/verse/sections/McpSection.tsx"],"sourcesContent":["/**\n * routes/verse/mcp/mcp-contract.ts — the wire seam for MCP management.\n *\n * Same posture as routes/verse/usage/usage-contract.ts, for the same two\n * reasons:\n *\n *  1. EVERY import from src/core here MUST be type-only. `core/verse/\n *     mcp-seat-view.ts` pulls `node:fs` and `node:os`; a VALUE import of even\n *     one constant drags that graph into the browser bundle and `vite build`\n *     fails. Type-only imports are erased, so the seam guards below cost\n *     nothing at runtime.\n *  2. Nothing is CAST. Every read goes through a structural narrower, so a\n *     field rename in src/core degrades this panel to an honest \"unknown\"\n *     instead of throwing at render time — and the `WIRE_*_KEYS` blocks make\n *     that rename fail `npm run typecheck:web` here, at the seam, first.\n *\n * SECURITY: the server already redacts every env value to '<set>' via\n * `redactEnv` and publishes config files as home-relative refs. This module\n * is the client-side backstop on top of that: {@link narrowServer} FORCES\n * every env value to '<set>' whatever arrived, so a server that ever\n * regressed could not print a secret through this panel.\n *\n * Pure: no React, no I/O.\n */\nimport type {\n  VerseMcpMachineRegistry,\n  VerseMcpSeatView,\n  VerseMcpServerView,\n  VerseMcpSnapshot,\n} from '../../../../core/verse/mcp-seat-view.js';\nimport type { VerseMcpScope } from '../../../../core/verse/mcp-scope.js';\nimport type {\n  VerseAccountCliHealth,\n  VerseCliHealthSnapshot,\n} from '../../../../core/verse/mcp-cli-health.js';\n\n// ---------------------------------------------------------------------------\n// Seam contract — compile-time only, zero runtime cost.\n// ---------------------------------------------------------------------------\n\nconst WIRE_SERVER_KEYS = {\n  name: 'name',\n  command: 'command',\n  args: 'args',\n  env: 'env',\n  sourceRef: 'sourceRef',\n} as const satisfies Record<string, keyof VerseMcpServerView>;\n\nconst WIRE_SEAT_KEYS = {\n  seatId: 'seatId',\n  label: 'label',\n  engine: 'engine',\n  accountId: 'accountId',\n  servers: 'servers',\n  reason: 'reason',\n  configFile: 'configFile',\n  configFormat: 'configFormat',\n  notes: 'notes',\n} as const satisfies Record<string, keyof VerseMcpSeatView>;\n\nconst WIRE_MACHINE_KEYS = {\n  servers: 'servers',\n  configured: 'configured',\n  note: 'note',\n} as const satisfies Record<string, keyof VerseMcpMachineRegistry>;\n\nconst WIRE_SNAPSHOT_KEYS = {\n  sampledAt: 'sampledAt',\n  seats: 'seats',\n  machine: 'machine',\n  scope: 'scope',\n  notes: 'notes',\n} as const satisfies Record<string, keyof VerseMcpSnapshot>;\n\nconst WIRE_HEALTH_KEYS = {\n  accountId: 'accountId',\n  label: 'label',\n  provider: 'provider',\n  authentication: 'authentication',\n  state: 'state',\n  planType: 'planType',\n  reason: 'reason',\n  version: 'version',\n  pinnedVersion: 'pinnedVersion',\n  versionState: 'versionState',\n  usageBlockedByPin: 'usageBlockedByPin',\n  notes: 'notes',\n} as const satisfies Record<string, keyof VerseAccountCliHealth>;\n\nconst WIRE_HEALTH_SNAPSHOT_KEYS = {\n  sampledAt: 'sampledAt',\n  accounts: 'accounts',\n  driftDetected: 'driftDetected',\n  notes: 'notes',\n} as const satisfies Record<string, keyof VerseCliHealthSnapshot>;\n\nconst WIRE_SCOPE_KEYS = {\n  available: 'available',\n  pinned: 'pinned',\n  aliasRef: 'aliasRef',\n  tenantRef: 'tenantRef',\n  principalRef: 'principalRef',\n  reason: 'reason',\n} as const satisfies Record<string, keyof VerseMcpScope>;\n\n// ---------------------------------------------------------------------------\n// Display shapes\n// ---------------------------------------------------------------------------\n\nexport interface McpServer {\n  name: string;\n  command: string;\n  args: string[];\n  /** Keys only. Every value is '<set>' — forced here, not merely trusted. */\n  env: Record<string, string> | null;\n  sourceRef: string;\n}\n\nexport interface McpSeat {\n  seatId: string;\n  label: string;\n  engine: string;\n  accountId: string;\n  servers: McpServer[];\n  reason: string;\n  configFile: string | null;\n  configFormat: string | null;\n  notes: string[];\n}\n\nexport interface McpScope {\n  available: boolean;\n  pinned: boolean;\n  aliasRef: string | null;\n  tenantRef: string | null;\n  principalRef: string | null;\n  reason: string;\n}\n\nexport interface McpSnapshot {\n  sampledAt: string | null;\n  seats: McpSeat[];\n  machine: { servers: McpServer[]; configured: boolean; note: string };\n  scope: McpScope | null;\n  notes: string[];\n}\n\nexport interface CliHealthRow {\n  accountId: string;\n  label: string;\n  provider: string;\n  authentication: string;\n  state: string;\n  planType: string | null;\n  reason: string;\n  version: string | null;\n  pinnedVersion: string | null;\n  versionState: string;\n  usageBlockedByPin: boolean;\n  notes: string[];\n}\n\nexport interface CliHealthSnapshot {\n  sampledAt: string | null;\n  accounts: CliHealthRow[];\n  driftDetected: boolean;\n  notes: string[];\n}\n\n// ---------------------------------------------------------------------------\n// Narrowers\n// ---------------------------------------------------------------------------\n\nfunction record(value: unknown): Record<string, unknown> | null {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : null;\n}\n\nfunction text(value: unknown): string | null {\n  return typeof value === 'string' ? value : null;\n}\n\nfunction strings(value: unknown): string[] {\n  return Array.isArray(value) ? value.filter((item): item is string => typeof item === 'string') : [];\n}\n\nfunction flag(value: unknown): boolean {\n  return value === true;\n}\n\n/**\n * Narrow one server, forcing every env value to '<set>'.\n *\n * The redaction is re-applied rather than trusted. The server already did it;\n * doing it again here means no future server bug can turn this panel into a\n * secret printer, and it costs one map over at most a handful of keys.\n */\nexport function narrowServer(raw: unknown): McpServer | null {\n  const row = record(raw);\n  if (row === null) return null;\n  const name = text(row[WIRE_SERVER_KEYS.name]);\n  const command = text(row[WIRE_SERVER_KEYS.command]);\n  if (name === null || command === null) return null;\n\n  let env: Record<string, string> | null = null;\n  const rawEnv = record(row[WIRE_SERVER_KEYS.env]);\n  if (rawEnv !== null) {\n    const keys = Object.keys(rawEnv);\n    if (keys.length > 0) {\n      env = {};\n      for (const key of keys) env[key] = '<set>';\n    }\n  }\n\n  return {\n    name,\n    command,\n    args: strings(row[WIRE_SERVER_KEYS.args]),\n    env,\n    sourceRef: text(row[WIRE_SERVER_KEYS.sourceRef]) ?? '(unknown source)',\n  };\n}\n\nfunction narrowSeat(raw: unknown): McpSeat | null {\n  const row = record(raw);\n  if (row === null) return null;\n  const seatId = text(row[WIRE_SEAT_KEYS.seatId]);\n  if (seatId === null) return null;\n  const servers = Array.isArray(row[WIRE_SEAT_KEYS.servers])\n    ? (row[WIRE_SEAT_KEYS.servers] as unknown[]).map(narrowServer).filter((s): s is McpServer => s !== null)\n    : [];\n  return {\n    seatId,\n    label: text(row[WIRE_SEAT_KEYS.label]) ?? seatId,\n    engine: text(row[WIRE_SEAT_KEYS.engine]) ?? 'unknown',\n    accountId: text(row[WIRE_SEAT_KEYS.accountId]) ?? seatId,\n    servers,\n    reason: text(row[WIRE_SEAT_KEYS.reason]) ?? 'unknown',\n    configFile: text(row[WIRE_SEAT_KEYS.configFile]),\n    configFormat: text(row[WIRE_SEAT_KEYS.configFormat]),\n    notes: strings(row[WIRE_SEAT_KEYS.notes]),\n  };\n}\n\nfunction narrowScope(raw: unknown): McpScope | null {\n  const row = record(raw);\n  if (row === null) return null;\n  return {\n    available: flag(row[WIRE_SCOPE_KEYS.available]),\n    pinned: flag(row[WIRE_SCOPE_KEYS.pinned]),\n    aliasRef: text(row[WIRE_SCOPE_KEYS.aliasRef]),\n    tenantRef: text(row[WIRE_SCOPE_KEYS.tenantRef]),\n    principalRef: text(row[WIRE_SCOPE_KEYS.principalRef]),\n    reason: text(row[WIRE_SCOPE_KEYS.reason]) ?? 'unknown',\n  };\n}\n\n/** Narrow GET /api/verse/mcp. Null when the body is not this shape at all. */\nexport function projectMcpSnapshot(raw: unknown): McpSnapshot | null {\n  const row = record(raw);\n  if (row === null) return null;\n  if (!Array.isArray(row[WIRE_SNAPSHOT_KEYS.seats])) return null;\n\n  const machine = record(row[WIRE_SNAPSHOT_KEYS.machine]);\n  const machineServers = machine !== null && Array.isArray(machine[WIRE_MACHINE_KEYS.servers])\n    ? (machine[WIRE_MACHINE_KEYS.servers] as unknown[]).map(narrowServer).filter((s): s is McpServer => s !== null)\n    : [];\n\n  return {\n    sampledAt: text(row[WIRE_SNAPSHOT_KEYS.sampledAt]),\n    seats: (row[WIRE_SNAPSHOT_KEYS.seats] as unknown[])\n      .map(narrowSeat)\n      .filter((s): s is McpSeat => s !== null),\n    machine: {\n      servers: machineServers,\n      configured: machine !== null ? flag(machine[WIRE_MACHINE_KEYS.configured]) : machineServers.length > 0,\n      note: (machine !== null ? text(machine[WIRE_MACHINE_KEYS.note]) : null) ?? '',\n    },\n    scope: narrowScope(row[WIRE_SNAPSHOT_KEYS.scope]),\n    notes: strings(row[WIRE_SNAPSHOT_KEYS.notes]),\n  };\n}\n\nfunction narrowHealthRow(raw: unknown): CliHealthRow | null {\n  const row = record(raw);\n  if (row === null) return null;\n  const accountId = text(row[WIRE_HEALTH_KEYS.accountId]);\n  if (accountId === null) return null;\n  return {\n    accountId,\n    label: text(row[WIRE_HEALTH_KEYS.label]) ?? accountId,\n    provider: text(row[WIRE_HEALTH_KEYS.provider]) ?? 'unknown',\n    authentication: text(row[WIRE_HEALTH_KEYS.authentication]) ?? 'unknown',\n    state: text(row[WIRE_HEALTH_KEYS.state]) ?? 'unknown',\n    planType: text(row[WIRE_HEALTH_KEYS.planType]),\n    reason: text(row[WIRE_HEALTH_KEYS.reason]) ?? 'unknown',\n    // A missing version stays NULL. It is never coerced to a string, because\n    // \"no reading\" and \"some version\" are different facts.\n    version: text(row[WIRE_HEALTH_KEYS.version]),\n    pinnedVersion: text(row[WIRE_HEALTH_KEYS.pinnedVersion]),\n    versionState: text(row[WIRE_HEALTH_KEYS.versionState]) ?? 'unverified',\n    usageBlockedByPin: flag(row[WIRE_HEALTH_KEYS.usageBlockedByPin]),\n    notes: strings(row[WIRE_HEALTH_KEYS.notes]),\n  };\n}\n\n/** Narrow GET /api/verse/mcp/cli-health. */\nexport function projectCliHealth(raw: unknown): CliHealthSnapshot | null {\n  const row = record(raw);\n  if (row === null) return null;\n  if (!Array.isArray(row[WIRE_HEALTH_SNAPSHOT_KEYS.accounts])) return null;\n  const accounts = (row[WIRE_HEALTH_SNAPSHOT_KEYS.accounts] as unknown[])\n    .map(narrowHealthRow)\n    .filter((a): a is CliHealthRow => a !== null);\n  return {\n    sampledAt: text(row[WIRE_HEALTH_SNAPSHOT_KEYS.sampledAt]),\n    accounts,\n    // Derived locally as well as read, so a server that forgot the flag still\n    // renders the banner rather than silently hiding a drift.\n    driftDetected:\n      flag(row[WIRE_HEALTH_SNAPSHOT_KEYS.driftDetected]) ||\n      accounts.some((account) => account.versionState === 'drift'),\n    notes: strings(row[WIRE_HEALTH_SNAPSHOT_KEYS.notes]),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Copy for the machine-readable reasons this surface renders\n// ---------------------------------------------------------------------------\n\n/**\n * Plain language for each seat reason. The CODE is still shown next to the\n * sentence — it is the thing to search for — but it is never the sentence.\n * Same split `usage/accounts-model.ts` uses for probe reasons.\n */\nexport const SEAT_REASON_COPY: Record<string, string> = {\n  'mcp-seat-isolated-by-adapter':\n    'Verse launches every turn on this seat with an empty MCP configuration, so it loads no MCP '\n    + 'servers at all — whatever is configured elsewhere on this machine.',\n  'mcp-account-config-absent':\n    'This account has no MCP configuration file of its own, so it starts with none.',\n  'mcp-account-config-not-json':\n    'This account keeps its MCP servers in a TOML config that the provider CLI reads directly. '\n    + 'Hub does not parse or rewrite it, so it cannot list what is in there.',\n  'mcp-account-config-read':\n    'Read from this account\\'s own private configuration.',\n  'mcp-account-config-unreadable':\n    'This account\\'s configuration could not be read, so nothing here is a reading.',\n  'mcp-account-profile-unresolved':\n    'This account\\'s private profile could not be located, so Hub cannot say what it would load.',\n};\n\nexport const SCOPE_REASON_COPY: Record<string, string> = {\n  'mcp-scope-locus-unavailable':\n    'Locus is not reachable on this machine, so writes are not attributable to a tenant.',\n  'mcp-scope-unpinned':\n    'Locus is running but nothing is pinned, so there is no tenant to scope a write to.',\n  'mcp-scope-seal-unverified':\n    'Locus reports a pin whose seal did not verify. Fix the pin before writing anything.',\n  'mcp-scope-expired': 'The Locus pin has expired.',\n  'mcp-scope-pinned': 'Writes are attributed to the pinned Locus tenant shown here.',\n};\n\n/** Prose for a code, or the caller's own sentence. NEVER the raw code alone. */\nexport function reasonSentence(\n  copy: Record<string, string>,\n  reason: string,\n  fallback: string,\n): string {\n  return copy[reason] ?? fallback;\n}\n","/**\n * routes/verse/mcp/mcp.module.css — MCP + CLI management styling.\n *\n * Follows docs/VERSE-DESIGN-V2.md, same as usage.module.css: monochrome\n * ground, 1px hairlines and whitespace for separation (no shadows, no nested\n * rounded boxes), display face for headings, mono for anything the operator\n * has to read character-by-character — which here is the whole point, because\n * the command line is the thing being disclosed.\n */\n\n.section {\n  display: flex;\n  flex-direction: column;\n  min-height: 0;\n  height: 100%;\n  background: var(--bg-canvas);\n}\n\n.body {\n  flex: 1;\n  min-height: 0;\n  overflow-y: auto;\n  padding: var(--space-5);\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-6);\n}\n\n.panel {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-3);\n}\n\n.panelHead {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-1);\n  padding-bottom: var(--space-2);\n  border-bottom: 1px solid var(--border-subtle);\n}\n\n.panelTitle {\n  margin: 0;\n  font-family: var(--font-display);\n  font-size: var(--text-md-size);\n  font-weight: var(--font-weight-semibold);\n  color: var(--text-primary);\n}\n\n.panelNote,\n.muted {\n  margin: 0;\n  font-size: var(--text-sm-size);\n  color: var(--text-secondary);\n  line-height: 1.5;\n}\n\n/* A fact that changes what the operator should do. Never colour alone: it\n   carries a word (\"Version drift\") as well as the rule. */\n.alert {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-1);\n  padding: var(--space-3) var(--space-4);\n  border: 1px solid var(--border-warning, var(--border-strong));\n  border-left-width: 3px;\n  border-radius: var(--radius-sm);\n  background: var(--bg-subtle);\n}\n\n.alertTitle {\n  font-weight: var(--font-weight-semibold);\n  color: var(--text-primary);\n  font-size: var(--text-sm-size);\n}\n\n.seatList,\n.rowList {\n  display: flex;\n  flex-direction: column;\n  gap: 0;\n}\n\n.seatRow,\n.healthRow {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-2);\n  padding: var(--space-3) 0;\n  border-bottom: 1px solid var(--border-subtle);\n}\n\n.seatHead {\n  display: flex;\n  align-items: baseline;\n  gap: var(--space-2);\n  flex-wrap: wrap;\n}\n\n.seatLabel {\n  font-weight: var(--font-weight-semibold);\n  color: var(--text-primary);\n}\n\n.engineTag,\n.code {\n  font-family: var(--font-mono);\n  font-size: var(--text-xs-size);\n  color: var(--text-tertiary, var(--text-secondary));\n}\n\n/* The machine-readable code is shown BESIDE the sentence, never as it. */\n.code {\n  letter-spacing: 0;\n}\n\n.count {\n  font-size: var(--text-sm-size);\n  color: var(--text-secondary);\n}\n\n/* The disclosure: everything the operator must read before confirming. */\n.disclosure {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-2);\n  padding: var(--space-3) var(--space-4);\n  border: 1px solid var(--border-subtle);\n  border-radius: var(--radius-sm);\n  background: var(--bg-subtle);\n}\n\n.commandLine {\n  font-family: var(--font-mono);\n  font-size: var(--text-sm-size);\n  color: var(--text-primary);\n  word-break: break-all;\n  white-space: pre-wrap;\n  margin: 0;\n}\n\n.envList {\n  display: flex;\n  flex-wrap: wrap;\n  gap: var(--space-2);\n  margin: 0;\n  padding: 0;\n  list-style: none;\n}\n\n.envItem {\n  font-family: var(--font-mono);\n  font-size: var(--text-xs-size);\n  padding: 2px var(--space-2);\n  border: 1px solid var(--border-subtle);\n  border-radius: var(--radius-sm);\n  color: var(--text-secondary);\n}\n\n.warnList {\n  margin: 0;\n  padding-left: var(--space-4);\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-1);\n  font-size: var(--text-sm-size);\n  color: var(--text-primary);\n}\n\n.digest {\n  font-family: var(--font-mono);\n  font-size: var(--text-xs-size);\n  color: var(--text-tertiary, var(--text-secondary));\n  word-break: break-all;\n}\n\n.actions {\n  display: flex;\n  gap: var(--space-2);\n  align-items: center;\n  flex-wrap: wrap;\n}\n","/**\n * routes/verse/mcp/McpServerDisclosure.tsx — what an MCP server IS, rendered\n * so it has to be read.\n *\n * Used in two places and identical in both: listing a server a seat already\n * loads, and previewing one that is about to be written. That sameness is the\n * point — the operator reads the same card either way, so \"what will run\" is\n * never presented differently from \"what runs\".\n *\n * Three rules this component enforces at the render layer:\n *\n *   1. The COMMAND and ARGS are shown in full, in mono, wrapped rather than\n *      truncated. A command with an ellipsis in the middle is exactly the\n *      one worth reading.\n *   2. Environment variables are listed BY KEY, with the value shown as the\n *      literal `<set>` that `redactEnv` produced. The count is stated, so a\n *      server handing over six credentials cannot look like one handing over\n *      none.\n *   3. The source is a home-relative ref, never an absolute path.\n */\nimport type { ReactNode } from 'react';\nimport type { McpServer } from './mcp-contract.js';\nimport styles from './mcp.module.css';\n\nexport function McpServerDisclosure({\n  server,\n  heading,\n}: {\n  server: McpServer;\n  heading?: string;\n}): ReactNode {\n  const envKeys = server.env === null ? [] : Object.keys(server.env);\n\n  return (\n    <div className={styles.disclosure}>\n      {heading === undefined ? null : <p className={styles.alertTitle}>{heading}</p>}\n\n      <p className={styles.commandLine}>\n        {server.command}\n        {server.args.length > 0 ? ` ${server.args.join(' ')}` : ''}\n      </p>\n\n      {envKeys.length === 0 ? (\n        <p className={styles.muted}>No environment variables are passed to this server.</p>\n      ) : (\n        <>\n          <p className={styles.muted}>\n            {envKeys.length} environment variable{envKeys.length === 1 ? '' : 's'} passed to this\n            server. Values are never displayed.\n          </p>\n          <ul className={styles.envList}>\n            {envKeys.map((key) => (\n              <li key={key} className={styles.envItem}>\n                {key}=&lt;set&gt;\n              </li>\n            ))}\n          </ul>\n        </>\n      )}\n\n      <p className={styles.code}>configured in {server.sourceRef}</p>\n    </div>\n  );\n}\n","/**\n * routes/verse/mcp/mcp-queries.ts — the reads and writes behind the MCP panel.\n *\n * Reads use the non-throwing `optionalGet` shape the Usage section\n * established: a server without these routes answers 404, and a 404 means\n * \"this panel is degraded\", not \"Verse is broken\". 401 still propagates,\n * because an expired read session is an unauthorized state for the whole\n * surface, not a degraded one.\n *\n * Writes pull the held mutation token from auth-store and touch the hold on\n * success, exactly like `autonomy/control-queries.ts`. There is one addition\n * this surface needs that the others do not: `applyMcpServer` CANNOT be\n * called without a digest that `proposeMcpServer` returned, because the\n * server refuses without it. That is deliberate and it is why there is no\n * single `installMcpServer()` helper here — a one-call install is exactly the\n * shape docs/VERSE-WORKSPACES.md §3 rules out, and it should be impossible to\n * write by accident at this layer too.\n */\nimport { getMutationToken, touchMutationHold } from '../../../data/auth-store.js';\nimport { ApiError, apiGet, apiPost } from '../../../data/client.js';\nimport { invalidate } from '../../../data/cache.js';\nimport type { QueryDef } from '../../../data/queries.js';\n\nexport const MCP_SNAPSHOT_KEY = 'verse-mcp-snapshot';\nexport const MCP_CLI_HEALTH_KEY = 'verse-mcp-cli-health';\n\n/** A read that is allowed to be absent. `raw` is null when it was. */\nexport interface OptionalRead {\n  raw: unknown;\n  available: boolean;\n  reason: string | null;\n}\n\nfunction describeFailure(path: string, err: unknown): string {\n  if (err instanceof ApiError) {\n    if (err.status === 404) {\n      return `This server does not expose ${path}, so this panel has no source.`;\n    }\n    return `${path} answered HTTP ${err.status}.`;\n  }\n  return `${path} could not be reached.`;\n}\n\nfunction optionalGet(path: string): (signal?: AbortSignal) => Promise<OptionalRead> {\n  return async (signal) => {\n    try {\n      const raw = await apiGet<unknown>(path, signal);\n      return { raw, available: true, reason: null };\n    } catch (err) {\n      if (err instanceof ApiError && err.status === 401) throw err;\n      if (err instanceof DOMException && err.name === 'AbortError') throw err;\n      return { raw: null, available: false, reason: describeFailure(path, err) };\n    }\n  };\n}\n\n/** GET /api/verse/mcp — which servers each seat would load. */\nexport const mcpSnapshotQuery: QueryDef<OptionalRead> = {\n  key: MCP_SNAPSHOT_KEY,\n  fetch: optionalGet('/api/verse/mcp'),\n};\n\n/** GET /api/verse/mcp/cli-health — auth, plan and version drift per account. */\nexport const mcpCliHealthQuery: QueryDef<OptionalRead> = {\n  key: MCP_CLI_HEALTH_KEY,\n  fetch: optionalGet('/api/verse/mcp/cli-health'),\n};\n\n// ---------------------------------------------------------------------------\n// Writes\n// ---------------------------------------------------------------------------\n\nexport class McpLockedError extends Error {\n  constructor() {\n    super('Unlock actions with the mutation token before changing MCP configuration.');\n    this.name = 'McpLockedError';\n  }\n}\n\nasync function post<T>(path: string, body: unknown): Promise<T> {\n  const token = getMutationToken();\n  if (!token) throw new McpLockedError();\n  const result = await apiPost<T>(path, body, token);\n  touchMutationHold();\n  return result;\n}\n\n/** The spec an operator typed. Env VALUES are real here and only here. */\nexport interface McpServerInput {\n  name: string;\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n}\n\n/**\n * POST /api/verse/mcp/proposal — validate and disclose. Writes nothing.\n *\n * The response carries the digest `applyMcpServer` demands back. A refusal is\n * a 409 with a full body, which `apiPost` surfaces as an ApiError whose\n * detail carries the `note`.\n */\nexport function proposeMcpServer(target: string, server: McpServerInput): Promise<unknown> {\n  return post<unknown>('/api/verse/mcp/proposal', { target, server });\n}\n\n/**\n * POST /api/verse/mcp/apply — perform the write the digest confirms.\n *\n * `digest` is not optional and has no default. It must come from a proposal\n * the operator actually saw.\n */\nexport async function applyMcpServer(\n  target: string,\n  server: McpServerInput,\n  digest: string,\n): Promise<unknown> {\n  const result = await post<unknown>('/api/verse/mcp/apply', {\n    target,\n    server,\n    digest,\n    confirm: true,\n  });\n  invalidate(MCP_SNAPSHOT_KEY);\n  return result;\n}\n\n/**\n * POST /api/verse/mcp/cli-probe — read the installed CLI versions.\n *\n * A POST because it launches the provider CLIs. Nothing about it is a read.\n */\nexport async function probeCliVersions(): Promise<unknown> {\n  const result = await post<unknown>('/api/verse/mcp/cli-probe', {});\n  invalidate(MCP_CLI_HEALTH_KEY);\n  return result;\n}\n","/**\n * routes/verse/sections/McpSection.tsx — the MCP and per-account CLI panel.\n *\n * WHY THIS FILE IS HERE AND NOT IN `../mcp/`. The shell mounts rail sections\n * through `import.meta.glob('./sections/*Section.tsx')` (VerseApp.tsx). While\n * this component lived at `mcp/McpSection.tsx` the glob could not see it, so\n * a finished, tested, fully-served feature was unreachable from the app —\n * every other rail section already follows the same split (`sections/\n * UsageSection.tsx` importing `../usage/`, `sections/AutonomySection.tsx`\n * importing `../autonomy/`), and this one was the only surface that did not.\n * Moving it was preferred over teaching the shell a second mounting\n * mechanism: one glob that every section satisfies cannot silently skip a\n * section again. Its model, queries, styles and the shared disclosure card\n * all stay in `../mcp/`.\n *\n * Read-only by construction. There is no install form in this component and\n * no call to `applyMcpServer`: this section answers \"what would each seat\n * load, and is any CLI drifting\", which is the whole of what\n * docs/VERSE-WORKSPACES.md §3 asks for before mutation.\n *\n * The write path exists on the server and in `mcp-queries.ts`\n * (`proposeMcpServer` → `applyMcpServer`, two calls, digest-bound). It is\n * deliberately not wired to a button here. A one-click \"Add server\" control\n * is the exact affordance §3 rules out, and the disclosure card it would need\n * is already built and shared — `McpServerDisclosure` — so the remaining work\n * is a form plus a confirm step that shows that card, not a re-think.\n *\n * Three things this panel refuses to soften:\n *\n *   - When every seat loads nothing and the machine has servers configured,\n *     it SAYS SO, at the top, as the first thing on the page. That is the\n *     single most surprising fact about this machine's MCP setup and burying\n *     it under a list of servers would be the same as hiding it.\n *   - A version drift is an alert with the pinned version quoted, not a grey\n *     \"unknown\". The fix is a one-line constant bump and the operator cannot\n *     make it without being told.\n *   - The seats do not all behave the same way, and the difference bites. A\n *     Claude or local seat loads NO MCP servers (the adapter pins an empty\n *     `--mcp-config` under `--strict-mcp-config`, src/core/verse/adapters/\n *     claude.ts). A Codex or Grok seat inherits its own native profile\n *     config, so a turn there CAN reach an `ashlr__*` MCP write tool — which\n *     `assertMayMutate` (src/core/sandbox/policy.ts) refuses when the chat's\n *     folder is not enrolled. That refusal surfaces as a tool error mid-turn\n *     and nothing else in Verse mentions it, so this panel states it.\n */\nimport type { ReactNode } from 'react';\nimport { useQuery } from '../../../data/hooks.js';\nimport { StatusBadge, type Tone } from '../../../components/primitives/StatusBadge.js';\nimport {\n  SCOPE_REASON_COPY,\n  SEAT_REASON_COPY,\n  projectCliHealth,\n  projectMcpSnapshot,\n  reasonSentence,\n  type CliHealthRow,\n  type McpSeat,\n  type McpSnapshot,\n} from '../mcp/mcp-contract.js';\nimport { McpServerDisclosure } from '../mcp/McpServerDisclosure.js';\nimport { mcpCliHealthQuery, mcpSnapshotQuery } from '../mcp/mcp-queries.js';\nimport styles from '../mcp/mcp.module.css';\n\nfunction versionTone(state: string): Tone {\n  switch (state) {\n    case 'drift':\n      return 'warning';\n    case 'matches-pin':\n      return 'success';\n    case 'reported':\n      return 'info';\n    default:\n      return 'unknown';\n  }\n}\n\nfunction versionLabel(row: CliHealthRow): string {\n  if (row.versionState === 'drift') return 'version drift';\n  if (row.version !== null) return row.version;\n  return 'version not read';\n}\n\n// ---------------------------------------------------------------------------\n// Seats\n// ---------------------------------------------------------------------------\n\nfunction SeatRow({ seat }: { seat: McpSeat }): ReactNode {\n  const sentence = reasonSentence(\n    SEAT_REASON_COPY,\n    seat.reason,\n    'Hub cannot say what this seat would load.',\n  );\n\n  return (\n    <div className={styles.seatRow}>\n      <div className={styles.seatHead}>\n        <span className={styles.seatLabel}>{seat.label}</span>\n        <span className={styles.engineTag}>{seat.engine}</span>\n        <StatusBadge\n          status={seat.servers.length > 0 ? 'ready' : 'neutral'}\n          tone={seat.servers.length > 0 ? 'info' : 'neutral'}\n        >\n          {seat.servers.length === 0\n            ? 'loads no MCP servers'\n            : `loads ${seat.servers.length} server${seat.servers.length === 1 ? '' : 's'}`}\n        </StatusBadge>\n      </div>\n\n      <p className={styles.panelNote}>{sentence}</p>\n      {/* The machine code sits beside the sentence — it is what you search\n          for in the logs — but it is never the sentence itself. */}\n      <p className={styles.code}>{seat.reason}</p>\n\n      {seat.servers.map((server) => (\n        <McpServerDisclosure key={server.name} server={server} heading={server.name} />\n      ))}\n    </div>\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Section\n// ---------------------------------------------------------------------------\n\nexport function McpSection(): ReactNode {\n  const snapshotRead = useQuery(mcpSnapshotQuery);\n  const healthRead = useQuery(mcpCliHealthQuery);\n\n  const snapshot: McpSnapshot | null =\n    snapshotRead.data?.available === true ? projectMcpSnapshot(snapshotRead.data.raw) : null;\n  const health =\n    healthRead.data?.available === true ? projectCliHealth(healthRead.data.raw) : null;\n\n  const unreachable = snapshotRead.data?.available === false ? snapshotRead.data.reason : null;\n\n  return (\n    <section className={styles.section} aria-labelledby=\"verse-mcp-heading\">\n      <div className={styles.body}>\n        <div className={styles.panelHead}>\n          <h2 id=\"verse-mcp-heading\" className={styles.panelTitle}>\n            MCP and CLI\n          </h2>\n          <p className={styles.panelNote}>\n            An MCP server is arbitrary code that runs with the agent&rsquo;s privileges. This page\n            shows what each seat would actually load — not what is configured somewhere on this\n            machine.\n          </p>\n        </div>\n\n        {unreachable !== null ? <p className={styles.muted}>{unreachable}</p> : null}\n\n        {/* The loudest fact first, when it is true. */}\n        {snapshot !== null && snapshot.notes.length > 0 ? (\n          <div className={styles.alert} role=\"note\">\n            <span className={styles.alertTitle}>Configured, but unused</span>\n            {snapshot.notes.map((note) => (\n              <p key={note} className={styles.panelNote}>\n                {note}\n              </p>\n            ))}\n            <p className={styles.panelNote}>{snapshot.machine.note}</p>\n          </div>\n        ) : null}\n\n        {/* Version drift, quoted. */}\n        {health !== null && health.driftDetected ? (\n          <div className={styles.alert} role=\"alert\">\n            <span className={styles.alertTitle}>Version drift</span>\n            {health.notes.map((note) => (\n              <p key={note} className={styles.panelNote}>\n                {note}\n              </p>\n            ))}\n          </div>\n        ) : null}\n\n        {/* ── Per-seat view ───────────────────────────────────────────── */}\n        <section className={styles.panel} aria-labelledby=\"verse-mcp-seats\">\n          <div className={styles.panelHead}>\n            <h3 id=\"verse-mcp-seats\" className={styles.panelTitle}>\n              Per seat\n            </h3>\n            <p className={styles.panelNote}>\n              A server configured for one account does not apply to another. Each seat below is\n              answered from its own configuration.\n            </p>\n          </div>\n\n          {/*\n            A STANDING caveat, not a conditional alert — it is true on every\n            machine, whatever the reads below say, and nothing else in Verse\n            says it anywhere. It sits inside \"Per seat\" because that is the\n            question it answers: the seats differ, and the difference has a\n            consequence the operator meets as a failed turn otherwise.\n          */}\n          <div className={styles.alert} role=\"note\" aria-labelledby=\"verse-mcp-enrollment-caveat\">\n            <span id=\"verse-mcp-enrollment-caveat\" className={styles.alertTitle}>\n              MCP writes can be refused on a folder that is not enrolled\n            </span>\n            <p className={styles.panelNote}>\n              Claude and local seats are unaffected. Verse launches every turn on them with an\n              empty MCP configuration under a strict flag, so they load no MCP servers at all and\n              cannot route an edit through one.\n            </p>\n            <p className={styles.code}>--strict-mcp-config --mcp-config {'{\"mcpServers\":{}}'}</p>\n            <p className={styles.panelNote}>\n              Codex and Grok seats are affected. Their adapters add no MCP flag, so each inherits\n              whatever its own native profile config declares. If a chat on one of those seats\n              routes an edit through an ashlr__ MCP write tool and the chat&rsquo;s folder is not\n              enrolled, Ashlr&rsquo;s sandbox gate refuses the write — the turn fails on policy,\n              not on the model, and the refusal reads like a tool error. Enrol the folder first,\n              or keep that chat on a Claude or local seat.\n            </p>\n          </div>\n\n          {snapshot === null ? (\n            <p className={styles.muted}>\n              {snapshotRead.status === 'loading'\n                ? 'Reading each seat’s configuration…'\n                : 'No per-seat reading is available.'}\n            </p>\n          ) : (\n            <div className={styles.seatList}>\n              {snapshot.seats.map((seat) => (\n                <SeatRow key={seat.seatId} seat={seat} />\n              ))}\n            </div>\n          )}\n        </section>\n\n        {/* ── Per-account CLI health ──────────────────────────────────── */}\n        <section className={styles.panel} aria-labelledby=\"verse-mcp-cli\">\n          <div className={styles.panelHead}>\n            <h3 id=\"verse-mcp-cli\" className={styles.panelTitle}>\n              Per account\n            </h3>\n            <p className={styles.panelNote}>\n              Authentication, plan and CLI version. A version is only shown when something actually\n              read one.\n            </p>\n          </div>\n\n          {health === null ? (\n            <p className={styles.muted}>\n              {healthRead.data?.available === false\n                ? healthRead.data.reason\n                : 'No per-account reading is available.'}\n            </p>\n          ) : (\n            <div className={styles.rowList}>\n              {health.accounts.map((row) => (\n                <div key={row.accountId} className={styles.healthRow}>\n                  <div className={styles.seatHead}>\n                    <span className={styles.seatLabel}>{row.label}</span>\n                    <span className={styles.engineTag}>{row.provider}</span>\n                    <StatusBadge status={row.authentication} tone={\n                      row.authentication === 'signed-in' ? 'success'\n                        : row.authentication === 'signed-out' ? 'danger' : 'unknown'\n                    }>\n                      {row.authentication}\n                    </StatusBadge>\n                    <StatusBadge status={row.versionState} tone={versionTone(row.versionState)}>\n                      {versionLabel(row)}\n                    </StatusBadge>\n                    {row.planType === null ? null : (\n                      <span className={styles.count}>plan: {row.planType}</span>\n                    )}\n                  </div>\n\n                  {row.notes.map((note) => (\n                    <p key={note} className={styles.panelNote}>\n                      {note}\n                    </p>\n                  ))}\n\n                  {row.pinnedVersion === null ? null : (\n                    <p className={styles.code}>\n                      usage probe pinned to {row.pinnedVersion}\n                      {row.usageBlockedByPin ? ` · ${row.reason}` : ''}\n                    </p>\n                  )}\n                </div>\n              ))}\n            </div>\n          )}\n        </section>\n\n        {/* ── Scope ───────────────────────────────────────────────────── */}\n        <section className={styles.panel} aria-labelledby=\"verse-mcp-scope\">\n          <div className={styles.panelHead}>\n            <h3 id=\"verse-mcp-scope\" className={styles.panelTitle}>\n              Scope\n            </h3>\n            <p className={styles.panelNote}>\n              Scope is owned by Locus, not by Hub. Hub holds the reference Locus publishes and\n              nothing else.\n            </p>\n          </div>\n          {snapshot?.scope == null ? (\n            <p className={styles.muted}>No scope reading is available.</p>\n          ) : (\n            <>\n              <p className={styles.panelNote}>\n                {reasonSentence(\n                  SCOPE_REASON_COPY,\n                  snapshot.scope.reason,\n                  'Locus did not report a usable scope.',\n                )}\n              </p>\n              {snapshot.scope.tenantRef === null ? null : (\n                <p className={styles.code}>\n                  tenant {snapshot.scope.tenantRef}\n                  {snapshot.scope.aliasRef === null ? '' : ` · alias ${snapshot.scope.aliasRef}`}\n                </p>\n              )}\n            </>\n          )}\n        </section>\n      </div>\n    </section>\n  );\n}\n"],"mappings":"sGAwCA,IAAM,EAAmB,CACvB,KAAM,OACN,QAAS,UACT,KAAM,OACN,IAAK,MACL,UAAW,WACb,EAEM,EAAiB,CACrB,OAAQ,SACR,MAAO,QACP,OAAQ,SACR,UAAW,YACX,QAAS,UACT,OAAQ,SACR,WAAY,aACZ,aAAc,eACd,MAAO,OACT,EAEM,EAAoB,CACxB,QAAS,UACT,WAAY,aACZ,KAAM,MACR,EAEM,EAAqB,CACzB,UAAW,YACX,MAAO,QACP,QAAS,UACT,MAAO,QACP,MAAO,OACT,EAEM,EAAmB,CACvB,UAAW,YACX,MAAO,QACP,SAAU,WACV,eAAgB,iBAChB,MAAO,QACP,SAAU,WACV,OAAQ,SACR,QAAS,UACT,cAAe,gBACf,aAAc,eACd,kBAAmB,oBACnB,MAAO,OACT,EAEM,EAA4B,CAChC,UAAW,YACX,SAAU,WACV,cAAe,gBACf,MAAO,OACT,EAEM,EAAkB,CACtB,UAAW,YACX,OAAQ,SACR,SAAU,WACV,UAAW,YACX,aAAc,eACd,OAAQ,QACV,EAsEA,SAAS,EAAO,EAAgD,CAC9D,OAAyB,OAAO,GAAU,UAAnC,GAA+C,CAAC,MAAM,QAAQ,CAAK,EACrE,EACD,IACN,CAEA,SAAS,EAAK,EAA+B,CAC3C,OAAO,OAAO,GAAU,SAAW,EAAQ,IAC7C,CAEA,SAAS,EAAQ,EAA0B,CACzC,OAAO,MAAM,QAAQ,CAAK,EAAI,EAAM,OAAQ,GAAyB,OAAO,GAAS,QAAQ,EAAI,CAAC,CACpG,CAEA,SAAS,EAAK,EAAyB,CACrC,OAAO,IAAU,EACnB,CASA,SAAgB,EAAa,EAAgC,CAC3D,IAAM,EAAM,EAAO,CAAG,EACtB,GAAI,IAAQ,KAAM,OAAO,KACzB,IAAM,EAAO,EAAK,EAAI,EAAiB,KAAK,EACtC,EAAU,EAAK,EAAI,EAAiB,QAAQ,EAClD,GAAI,IAAS,MAAQ,IAAY,KAAM,OAAO,KAE9C,IAAI,EAAqC,KACnC,EAAS,EAAO,EAAI,EAAiB,IAAI,EAC/C,GAAI,IAAW,KAAM,CACnB,IAAM,EAAO,OAAO,KAAK,CAAM,EAC/B,GAAI,EAAK,OAAS,EAAG,CACnB,EAAM,CAAC,EACP,IAAK,IAAM,KAAO,EAAM,EAAI,GAAO,OACrC,CACF,CAEA,MAAO,CACL,OACA,UACA,KAAM,EAAQ,EAAI,EAAiB,KAAK,EACxC,MACA,UAAW,EAAK,EAAI,EAAiB,UAAU,GAAK,kBACtD,CACF,CAEA,SAAS,EAAW,EAA8B,CAChD,IAAM,EAAM,EAAO,CAAG,EACtB,GAAI,IAAQ,KAAM,OAAO,KACzB,IAAM,EAAS,EAAK,EAAI,EAAe,OAAO,EAC9C,GAAI,IAAW,KAAM,OAAO,KAC5B,IAAM,EAAU,MAAM,QAAQ,EAAI,EAAe,QAAQ,EACpD,EAAI,EAAe,QAAQ,CAAe,IAAI,CAAY,CAAC,CAAC,OAAQ,GAAsB,IAAM,IAAI,EACrG,CAAC,EACL,MAAO,CACL,SACA,MAAO,EAAK,EAAI,EAAe,MAAM,GAAK,EAC1C,OAAQ,EAAK,EAAI,EAAe,OAAO,GAAK,UAC5C,UAAW,EAAK,EAAI,EAAe,UAAU,GAAK,EAClD,UACA,OAAQ,EAAK,EAAI,EAAe,OAAO,GAAK,UAC5C,WAAY,EAAK,EAAI,EAAe,WAAW,EAC/C,aAAc,EAAK,EAAI,EAAe,aAAa,EACnD,MAAO,EAAQ,EAAI,EAAe,MAAM,CAC1C,CACF,CAEA,SAAS,EAAY,EAA+B,CAClD,IAAM,EAAM,EAAO,CAAG,EAEtB,OADI,IAAQ,KAAa,KAClB,CACL,UAAW,EAAK,EAAI,EAAgB,UAAU,EAC9C,OAAQ,EAAK,EAAI,EAAgB,OAAO,EACxC,SAAU,EAAK,EAAI,EAAgB,SAAS,EAC5C,UAAW,EAAK,EAAI,EAAgB,UAAU,EAC9C,aAAc,EAAK,EAAI,EAAgB,aAAa,EACpD,OAAQ,EAAK,EAAI,EAAgB,OAAO,GAAK,SAC/C,CACF,CAGA,SAAgB,EAAmB,EAAkC,CACnE,IAAM,EAAM,EAAO,CAAG,EAEtB,GADI,IAAQ,MACR,CAAC,MAAM,QAAQ,EAAI,EAAmB,MAAM,EAAG,OAAO,KAE1D,IAAM,EAAU,EAAO,EAAI,EAAmB,QAAQ,EAChD,EAAiB,IAAY,MAAQ,MAAM,QAAQ,EAAQ,EAAkB,QAAQ,EACtF,EAAQ,EAAkB,QAAQ,CAAe,IAAI,CAAY,CAAC,CAAC,OAAQ,GAAsB,IAAM,IAAI,EAC5G,CAAC,EAEL,MAAO,CACL,UAAW,EAAK,EAAI,EAAmB,UAAU,EACjD,MAAQ,EAAI,EAAmB,MAAM,CAClC,IAAI,CAAU,CAAC,CACf,OAAQ,GAAoB,IAAM,IAAI,EACzC,QAAS,CACP,QAAS,EACT,WAAY,IAAY,KAAqD,EAAe,OAAS,EAAtE,EAAK,EAAQ,EAAkB,WAAW,EACzE,MAAO,IAAY,KAA+C,KAAxC,EAAK,EAAQ,EAAkB,KAAK,IAAa,EAC7E,EACA,MAAO,EAAY,EAAI,EAAmB,MAAM,EAChD,MAAO,EAAQ,EAAI,EAAmB,MAAM,CAC9C,CACF,CAEA,SAAS,EAAgB,EAAmC,CAC1D,IAAM,EAAM,EAAO,CAAG,EACtB,GAAI,IAAQ,KAAM,OAAO,KACzB,IAAM,EAAY,EAAK,EAAI,EAAiB,UAAU,EAEtD,OADI,IAAc,KAAa,KACxB,CACL,YACA,MAAO,EAAK,EAAI,EAAiB,MAAM,GAAK,EAC5C,SAAU,EAAK,EAAI,EAAiB,SAAS,GAAK,UAClD,eAAgB,EAAK,EAAI,EAAiB,eAAe,GAAK,UAC9D,MAAO,EAAK,EAAI,EAAiB,MAAM,GAAK,UAC5C,SAAU,EAAK,EAAI,EAAiB,SAAS,EAC7C,OAAQ,EAAK,EAAI,EAAiB,OAAO,GAAK,UAG9C,QAAS,EAAK,EAAI,EAAiB,QAAQ,EAC3C,cAAe,EAAK,EAAI,EAAiB,cAAc,EACvD,aAAc,EAAK,EAAI,EAAiB,aAAa,GAAK,aAC1D,kBAAmB,EAAK,EAAI,EAAiB,kBAAkB,EAC/D,MAAO,EAAQ,EAAI,EAAiB,MAAM,CAC5C,CACF,CAGA,SAAgB,EAAiB,EAAwC,CACvE,IAAM,EAAM,EAAO,CAAG,EAEtB,GADI,IAAQ,MACR,CAAC,MAAM,QAAQ,EAAI,EAA0B,SAAS,EAAG,OAAO,KACpE,IAAM,EAAY,EAAI,EAA0B,SAAS,CACtD,IAAI,CAAe,CAAC,CACpB,OAAQ,GAAyB,IAAM,IAAI,EAC9C,MAAO,CACL,UAAW,EAAK,EAAI,EAA0B,UAAU,EACxD,WAGA,cACE,EAAK,EAAI,EAA0B,cAAc,GACjD,EAAS,KAAM,GAAY,EAAQ,eAAiB,OAAO,EAC7D,MAAO,EAAQ,EAAI,EAA0B,MAAM,CACrD,CACF,CAWA,IAAa,EAA2C,CACtD,+BACE,gKAEF,4BACE,iFACF,8BACE,kKAEF,0BACE,sDACF,gCACE,gFACF,iCACE,4FACJ,EAEa,EAA4C,CACvD,8BACE,sFACF,qBACE,qFACF,4BACE,sFACF,oBAAqB,6BACrB,mBAAoB,8DACtB,EAGA,SAAgB,EACd,EACA,EACA,EACQ,CACR,OAAO,EAAK,IAAW,CACzB,4uBE3VA,SAAgB,EAAoB,CAClC,SACA,WAIY,CACZ,IAAM,EAAU,EAAO,MAAQ,KAAO,CAAC,EAAI,OAAO,KAAK,EAAO,GAAG,EAEjE,OACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,WAAvB,SAAA,CACG,IAAY,IAAA,GAAY,MAAO,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,WAAa,SAAA,CAAW,CAAA,GAE7E,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,YAArB,SAAA,CACG,EAAO,QACP,EAAO,KAAK,OAAS,EAAI,IAAI,EAAO,KAAK,KAAK,GAAG,IAAM,EACvD,IAEF,EAAQ,SAAW,GAClB,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAAO,SAAA,qDAAsD,CAAA,GAElF,EAAA,EAAA,KAAA,CAAA,EAAA,SAAA,CAAA,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAArB,SAAA,CACG,EAAQ,OAAO,wBAAsB,EAAQ,SAAW,EAAI,GAAK,IAAI,qDAErE,CACH,CAAA,GAAA,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,UAAW,EAAO,QACnB,SAAA,EAAQ,IAAK,IACZ,EAAA,EAAA,KAAA,CAAC,KAAD,CAAc,UAAW,EAAO,QAAhC,SAAA,CACG,EAAI,QACH,CAFK,EAAA,CAEL,CACL,CACC,CAAA,CACJ,CAAA,CAAA,GAGJ,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CAA2B,iBAAe,EAAO,SAAa,GAC3D,GAET,CCxCA,IAAa,EAAmB,qBACnB,EAAqB,uBASlC,SAAS,EAAgB,EAAc,EAAsB,CAO3D,OANI,aAAe,EACb,EAAI,SAAW,IACV,+BAA+B,EAAK,gCAEtC,GAAG,EAAK,iBAAiB,EAAI,OAAO,GAEtC,GAAG,EAAK,uBACjB,CAEA,SAAS,EAAY,EAA+D,CAClF,OAAO,KAAO,IAAW,CACvB,GAAI,CAEF,MAAO,CAAE,IAAA,MADS,EAAgB,EAAM,CAAM,EAChC,UAAW,GAAM,OAAQ,IAAK,CAC9C,OAAS,EAAK,CAEZ,GADI,aAAe,GAAY,EAAI,SAAW,KAC1C,aAAe,cAAgB,EAAI,OAAS,aAAc,MAAM,EACpE,MAAO,CAAE,IAAK,KAAM,UAAW,GAAO,OAAQ,EAAgB,EAAM,CAAG,CAAE,CAC3E,CACF,CACF,CAGA,IAAa,EAA2C,CACtD,IAAK,EACL,MAAO,EAAY,gBAAgB,CACrC,EAGa,EAA4C,CACvD,IAAK,EACL,MAAO,EAAY,2BAA2B,CAChD,ECJA,SAAS,EAAY,EAAqB,CACxC,OAAQ,EAAR,CACE,IAAK,QACH,MAAO,UACT,IAAK,cACH,MAAO,UACT,IAAK,WACH,MAAO,OACT,QACE,MAAO,SACX,CACF,CAEA,SAAS,EAAa,EAA2B,CAG/C,OAFI,EAAI,eAAiB,QAAgB,gBACrC,EAAI,UAAY,KACb,mBAD0B,EAAI,OAEvC,CAMA,SAAS,EAAQ,CAAE,QAAsC,CACvD,IAAM,EAAW,EACf,EACA,EAAK,OACL,2CACF,EAEA,OACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,QAAvB,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,SAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,UAAY,SAAA,EAAK,KAAY,CAAA,GACrD,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,UAAY,SAAA,EAAK,MAAa,CAAA,GACtD,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,OAAQ,EAAK,QAAQ,OAAS,EAAI,QAAU,UAC5C,KAAM,EAAK,QAAQ,OAAS,EAAI,OAAS,UAExC,SAAA,EAAK,QAAQ,SAAW,EACrB,uBACA,SAAS,EAAK,QAAQ,OAAO,SAAS,EAAK,QAAQ,SAAW,EAAI,GAAK,KAChE,CAAA,CACV,KAEL,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAY,SAAA,CAAY,CAAA,GAG7C,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAAO,SAAA,EAAK,MAAU,CAAA,EAE1C,EAAK,QAAQ,IAAK,IACjB,EAAA,EAAA,IAAA,CAAC,EAAD,CAA+C,SAAQ,QAAS,EAAO,IAAO,EAApD,EAAO,IAA6C,CAC/E,CACE,GAET,CAMA,SAAgB,GAAwB,CACtC,IAAM,EAAe,EAAS,CAAgB,EACxC,EAAa,EAAS,CAAiB,EAEvC,EACJ,EAAa,MAAM,YAAc,GAAO,EAAmB,EAAa,KAAK,GAAG,EAAI,KAChF,EACJ,EAAW,MAAM,YAAc,GAAO,EAAiB,EAAW,KAAK,GAAG,EAAI,KAE1E,EAAc,EAAa,MAAM,YAAc,GAAQ,EAAa,KAAK,OAAS,KAExF,OACE,EAAA,EAAA,IAAA,CAAC,UAAD,CAAS,UAAW,EAAO,QAAS,kBAAgB,oBAClD,UAAA,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,KAAvB,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,UAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,GAAG,oBAAoB,UAAW,EAAO,WAAY,SAAA,aAErD,CAAA,GACJ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,+KAI7B,CAAA,CACA,IAEJ,IAAgB,KAAuD,MAAhD,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAAQ,SAAA,CAAe,CAAA,EAGnE,IAAa,MAAQ,EAAS,MAAM,OAAS,GAC5C,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,MAAO,KAAK,OAAnC,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,WAAY,SAAA,wBAA4B,CAAA,EAC/D,EAAS,MAAM,IAAK,IACnB,EAAA,EAAA,IAAA,CAAC,IAAD,CAAc,UAAW,EAAO,UAC7B,SAAA,CACA,EAFK,CAEL,CACJ,GACD,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAY,SAAA,EAAS,QAAQ,IAAQ,CAAA,CACvD,CACH,CAAA,EAAA,KAGH,IAAW,MAAQ,EAAO,eACzB,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,MAAO,KAAK,QAAnC,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,WAAY,SAAA,eAAmB,CAAA,EACtD,EAAO,MAAM,IAAK,IACjB,EAAA,EAAA,IAAA,CAAC,IAAD,CAAc,UAAW,EAAO,UAC7B,SAAA,CACA,EAFK,CAEL,CACJ,CACE,CACH,CAAA,EAAA,MAGJ,EAAA,EAAA,KAAA,CAAC,UAAD,CAAS,UAAW,EAAO,MAAO,kBAAgB,kBAAlD,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,UAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,GAAG,kBAAkB,UAAW,EAAO,WAAY,SAAA,UAEnD,CAAA,GACJ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,wHAG7B,CAAA,CACA,KASL,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,MAAO,KAAK,OAAO,kBAAgB,8BAA1D,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,GAAG,8BAA8B,UAAW,EAAO,WAAY,SAAA,4DAE/D,CAAA,GACN,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,wMAI7B,CAAA,GACH,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CAA2B,oCAAkC,mBAAuB,KACpF,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,icAO7B,CAAA,CACA,IAEJ,IAAa,MACZ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAClB,SAAA,EAAa,SAAW,UACrB,qCACA,mCACH,CAAA,GAEH,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAW,EAAO,SACpB,SAAA,EAAS,MAAM,IAAK,IACnB,EAAA,EAAA,IAAA,CAAC,EAAD,CAAiC,MAAO,EAA1B,EAAK,MAAqB,CACzC,CACE,CAAA,CAEA,KAGT,EAAA,EAAA,KAAA,CAAC,UAAD,CAAS,UAAW,EAAO,MAAO,kBAAgB,gBAAlD,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,UAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,GAAG,gBAAgB,UAAW,EAAO,WAAY,SAAA,aAEjD,CAAA,GACJ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,iGAG7B,CAAA,CACA,CAEJ,CAAA,EAAA,IAAW,MACV,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAClB,SAAA,EAAW,MAAM,YAAc,GAC5B,EAAW,KAAK,OAChB,sCACH,CAAA,GAEH,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAW,EAAO,QACpB,SAAA,EAAO,SAAS,IAAK,IACpB,EAAA,EAAA,KAAA,CAAC,MAAD,CAAyB,UAAW,EAAO,UAA3C,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,SAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,UAAY,SAAA,EAAI,KAAY,CAAA,GACpD,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,UAAY,SAAA,EAAI,QAAe,CAAA,GACvD,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,OAAQ,EAAI,eAAgB,KACvC,EAAI,iBAAmB,YAAc,UACjC,EAAI,iBAAmB,aAAe,SAAW,UAEpD,SAAA,EAAI,cACM,CAAA,GACb,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,OAAQ,EAAI,aAAc,KAAM,EAAY,EAAI,YAAY,EACtE,SAAA,EAAa,CAAG,CACN,CAAA,EACZ,EAAI,WAAa,KAAO,MACvB,EAAA,EAAA,KAAA,CAAC,OAAD,CAAM,UAAW,EAAO,MAAxB,SAAA,CAA+B,SAAO,EAAI,QAAe,GAExD,IAEJ,EAAI,MAAM,IAAK,IACd,EAAA,EAAA,IAAA,CAAC,IAAD,CAAc,UAAW,EAAO,UAC7B,SAAA,CACA,EAFK,CAEL,CACJ,EAEA,EAAI,gBAAkB,KAAO,MAC5B,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CAA2B,yBACF,EAAI,cAC1B,EAAI,kBAAoB,MAAM,EAAI,SAAW,EAC7C,GAEF,CA9BK,EAAA,EAAI,SA8BT,CACN,CACE,CAAA,CAEA,KAGT,EAAA,EAAA,KAAA,CAAC,UAAD,CAAS,UAAW,EAAO,MAAO,kBAAgB,kBAAlD,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,UAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,GAAG,kBAAkB,UAAW,EAAO,WAAY,SAAA,OAEnD,CAAA,GACJ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,gGAG7B,CAAA,CACA,CACJ,CAAA,EAAA,GAAU,OAAS,MAClB,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAAO,SAAA,gCAAiC,CAAA,GAE7D,EAAA,EAAA,KAAA,CAAA,EAAA,SAAA,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAClB,SAAA,EACC,EACA,EAAS,MAAM,OACf,sCACF,CACC,CAAA,EACF,EAAS,MAAM,YAAc,KAAO,MACnC,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CAA2B,UACjB,EAAS,MAAM,UACtB,EAAS,MAAM,WAAa,KAAO,GAAK,YAAY,EAAS,MAAM,UACnE,CAEL,CAAA,CAAA,CAAA,CAAA,CAEG,GACN,GACE,CAAA,CAEb"}
+{"version":3,"file":"McpSection-q34T7Tho.js","names":[],"sources":["../../../../../../src/web-ui/routes/verse/mcp/mcp-contract.ts","../../../../../../src/web-ui/routes/verse/mcp/mcp.module.css","../../../../../../src/web-ui/routes/verse/mcp/McpServerDisclosure.tsx","../../../../../../src/web-ui/routes/verse/mcp/mcp-queries.ts","../../../../../../src/web-ui/routes/verse/sections/McpSection.tsx"],"sourcesContent":["/**\n * routes/verse/mcp/mcp-contract.ts — the wire seam for MCP management.\n *\n * Same posture as routes/verse/usage/usage-contract.ts, for the same two\n * reasons:\n *\n *  1. EVERY import from src/core here MUST be type-only. `core/verse/\n *     mcp-seat-view.ts` pulls `node:fs` and `node:os`; a VALUE import of even\n *     one constant drags that graph into the browser bundle and `vite build`\n *     fails. Type-only imports are erased, so the seam guards below cost\n *     nothing at runtime.\n *  2. Nothing is CAST. Every read goes through a structural narrower, so a\n *     field rename in src/core degrades this panel to an honest \"unknown\"\n *     instead of throwing at render time — and the `WIRE_*_KEYS` blocks make\n *     that rename fail `npm run typecheck:web` here, at the seam, first.\n *\n * SECURITY: the server already redacts every env value to '<set>' via\n * `redactEnv` and publishes config files as home-relative refs. This module\n * is the client-side backstop on top of that: {@link narrowServer} FORCES\n * every env value to '<set>' whatever arrived, so a server that ever\n * regressed could not print a secret through this panel.\n *\n * Pure: no React, no I/O.\n */\nimport type {\n  VerseMcpMachineRegistry,\n  VerseMcpSeatView,\n  VerseMcpServerView,\n  VerseMcpSnapshot,\n} from '../../../../core/verse/mcp-seat-view.js';\nimport type { VerseMcpScope } from '../../../../core/verse/mcp-scope.js';\nimport type {\n  VerseAccountCliHealth,\n  VerseCliHealthSnapshot,\n} from '../../../../core/verse/mcp-cli-health.js';\n\n// ---------------------------------------------------------------------------\n// Seam contract — compile-time only, zero runtime cost.\n// ---------------------------------------------------------------------------\n\nconst WIRE_SERVER_KEYS = {\n  name: 'name',\n  command: 'command',\n  args: 'args',\n  env: 'env',\n  sourceRef: 'sourceRef',\n} as const satisfies Record<string, keyof VerseMcpServerView>;\n\nconst WIRE_SEAT_KEYS = {\n  seatId: 'seatId',\n  label: 'label',\n  engine: 'engine',\n  accountId: 'accountId',\n  servers: 'servers',\n  reason: 'reason',\n  configFile: 'configFile',\n  configFormat: 'configFormat',\n  notes: 'notes',\n} as const satisfies Record<string, keyof VerseMcpSeatView>;\n\nconst WIRE_MACHINE_KEYS = {\n  servers: 'servers',\n  configured: 'configured',\n  note: 'note',\n} as const satisfies Record<string, keyof VerseMcpMachineRegistry>;\n\nconst WIRE_SNAPSHOT_KEYS = {\n  sampledAt: 'sampledAt',\n  seats: 'seats',\n  machine: 'machine',\n  scope: 'scope',\n  notes: 'notes',\n} as const satisfies Record<string, keyof VerseMcpSnapshot>;\n\nconst WIRE_HEALTH_KEYS = {\n  accountId: 'accountId',\n  label: 'label',\n  provider: 'provider',\n  authentication: 'authentication',\n  state: 'state',\n  planType: 'planType',\n  reason: 'reason',\n  version: 'version',\n  pinnedVersion: 'pinnedVersion',\n  versionState: 'versionState',\n  usageBlockedByPin: 'usageBlockedByPin',\n  notes: 'notes',\n} as const satisfies Record<string, keyof VerseAccountCliHealth>;\n\nconst WIRE_HEALTH_SNAPSHOT_KEYS = {\n  sampledAt: 'sampledAt',\n  accounts: 'accounts',\n  driftDetected: 'driftDetected',\n  notes: 'notes',\n} as const satisfies Record<string, keyof VerseCliHealthSnapshot>;\n\nconst WIRE_SCOPE_KEYS = {\n  available: 'available',\n  pinned: 'pinned',\n  aliasRef: 'aliasRef',\n  tenantRef: 'tenantRef',\n  principalRef: 'principalRef',\n  reason: 'reason',\n} as const satisfies Record<string, keyof VerseMcpScope>;\n\n// ---------------------------------------------------------------------------\n// Display shapes\n// ---------------------------------------------------------------------------\n\nexport interface McpServer {\n  name: string;\n  command: string;\n  args: string[];\n  /** Keys only. Every value is '<set>' — forced here, not merely trusted. */\n  env: Record<string, string> | null;\n  sourceRef: string;\n}\n\nexport interface McpSeat {\n  seatId: string;\n  label: string;\n  engine: string;\n  accountId: string;\n  servers: McpServer[];\n  reason: string;\n  configFile: string | null;\n  configFormat: string | null;\n  notes: string[];\n}\n\nexport interface McpScope {\n  available: boolean;\n  pinned: boolean;\n  aliasRef: string | null;\n  tenantRef: string | null;\n  principalRef: string | null;\n  reason: string;\n}\n\nexport interface McpSnapshot {\n  sampledAt: string | null;\n  seats: McpSeat[];\n  machine: { servers: McpServer[]; configured: boolean; note: string };\n  scope: McpScope | null;\n  notes: string[];\n}\n\nexport interface CliHealthRow {\n  accountId: string;\n  label: string;\n  provider: string;\n  authentication: string;\n  state: string;\n  planType: string | null;\n  reason: string;\n  version: string | null;\n  pinnedVersion: string | null;\n  versionState: string;\n  usageBlockedByPin: boolean;\n  notes: string[];\n}\n\nexport interface CliHealthSnapshot {\n  sampledAt: string | null;\n  accounts: CliHealthRow[];\n  driftDetected: boolean;\n  notes: string[];\n}\n\n// ---------------------------------------------------------------------------\n// Narrowers\n// ---------------------------------------------------------------------------\n\nfunction record(value: unknown): Record<string, unknown> | null {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : null;\n}\n\nfunction text(value: unknown): string | null {\n  return typeof value === 'string' ? value : null;\n}\n\nfunction strings(value: unknown): string[] {\n  return Array.isArray(value) ? value.filter((item): item is string => typeof item === 'string') : [];\n}\n\nfunction flag(value: unknown): boolean {\n  return value === true;\n}\n\n/**\n * Narrow one server, forcing every env value to '<set>'.\n *\n * The redaction is re-applied rather than trusted. The server already did it;\n * doing it again here means no future server bug can turn this panel into a\n * secret printer, and it costs one map over at most a handful of keys.\n */\nexport function narrowServer(raw: unknown): McpServer | null {\n  const row = record(raw);\n  if (row === null) return null;\n  const name = text(row[WIRE_SERVER_KEYS.name]);\n  const command = text(row[WIRE_SERVER_KEYS.command]);\n  if (name === null || command === null) return null;\n\n  let env: Record<string, string> | null = null;\n  const rawEnv = record(row[WIRE_SERVER_KEYS.env]);\n  if (rawEnv !== null) {\n    const keys = Object.keys(rawEnv);\n    if (keys.length > 0) {\n      env = {};\n      for (const key of keys) env[key] = '<set>';\n    }\n  }\n\n  return {\n    name,\n    command,\n    args: strings(row[WIRE_SERVER_KEYS.args]),\n    env,\n    sourceRef: text(row[WIRE_SERVER_KEYS.sourceRef]) ?? '(unknown source)',\n  };\n}\n\nfunction narrowSeat(raw: unknown): McpSeat | null {\n  const row = record(raw);\n  if (row === null) return null;\n  const seatId = text(row[WIRE_SEAT_KEYS.seatId]);\n  if (seatId === null) return null;\n  const servers = Array.isArray(row[WIRE_SEAT_KEYS.servers])\n    ? (row[WIRE_SEAT_KEYS.servers] as unknown[]).map(narrowServer).filter((s): s is McpServer => s !== null)\n    : [];\n  return {\n    seatId,\n    label: text(row[WIRE_SEAT_KEYS.label]) ?? seatId,\n    engine: text(row[WIRE_SEAT_KEYS.engine]) ?? 'unknown',\n    accountId: text(row[WIRE_SEAT_KEYS.accountId]) ?? seatId,\n    servers,\n    reason: text(row[WIRE_SEAT_KEYS.reason]) ?? 'unknown',\n    configFile: text(row[WIRE_SEAT_KEYS.configFile]),\n    configFormat: text(row[WIRE_SEAT_KEYS.configFormat]),\n    notes: strings(row[WIRE_SEAT_KEYS.notes]),\n  };\n}\n\nfunction narrowScope(raw: unknown): McpScope | null {\n  const row = record(raw);\n  if (row === null) return null;\n  return {\n    available: flag(row[WIRE_SCOPE_KEYS.available]),\n    pinned: flag(row[WIRE_SCOPE_KEYS.pinned]),\n    aliasRef: text(row[WIRE_SCOPE_KEYS.aliasRef]),\n    tenantRef: text(row[WIRE_SCOPE_KEYS.tenantRef]),\n    principalRef: text(row[WIRE_SCOPE_KEYS.principalRef]),\n    reason: text(row[WIRE_SCOPE_KEYS.reason]) ?? 'unknown',\n  };\n}\n\n/** Narrow GET /api/verse/mcp. Null when the body is not this shape at all. */\nexport function projectMcpSnapshot(raw: unknown): McpSnapshot | null {\n  const row = record(raw);\n  if (row === null) return null;\n  if (!Array.isArray(row[WIRE_SNAPSHOT_KEYS.seats])) return null;\n\n  const machine = record(row[WIRE_SNAPSHOT_KEYS.machine]);\n  const machineServers = machine !== null && Array.isArray(machine[WIRE_MACHINE_KEYS.servers])\n    ? (machine[WIRE_MACHINE_KEYS.servers] as unknown[]).map(narrowServer).filter((s): s is McpServer => s !== null)\n    : [];\n\n  return {\n    sampledAt: text(row[WIRE_SNAPSHOT_KEYS.sampledAt]),\n    seats: (row[WIRE_SNAPSHOT_KEYS.seats] as unknown[])\n      .map(narrowSeat)\n      .filter((s): s is McpSeat => s !== null),\n    machine: {\n      servers: machineServers,\n      configured: machine !== null ? flag(machine[WIRE_MACHINE_KEYS.configured]) : machineServers.length > 0,\n      note: (machine !== null ? text(machine[WIRE_MACHINE_KEYS.note]) : null) ?? '',\n    },\n    scope: narrowScope(row[WIRE_SNAPSHOT_KEYS.scope]),\n    notes: strings(row[WIRE_SNAPSHOT_KEYS.notes]),\n  };\n}\n\nfunction narrowHealthRow(raw: unknown): CliHealthRow | null {\n  const row = record(raw);\n  if (row === null) return null;\n  const accountId = text(row[WIRE_HEALTH_KEYS.accountId]);\n  if (accountId === null) return null;\n  return {\n    accountId,\n    label: text(row[WIRE_HEALTH_KEYS.label]) ?? accountId,\n    provider: text(row[WIRE_HEALTH_KEYS.provider]) ?? 'unknown',\n    authentication: text(row[WIRE_HEALTH_KEYS.authentication]) ?? 'unknown',\n    state: text(row[WIRE_HEALTH_KEYS.state]) ?? 'unknown',\n    planType: text(row[WIRE_HEALTH_KEYS.planType]),\n    reason: text(row[WIRE_HEALTH_KEYS.reason]) ?? 'unknown',\n    // A missing version stays NULL. It is never coerced to a string, because\n    // \"no reading\" and \"some version\" are different facts.\n    version: text(row[WIRE_HEALTH_KEYS.version]),\n    pinnedVersion: text(row[WIRE_HEALTH_KEYS.pinnedVersion]),\n    versionState: text(row[WIRE_HEALTH_KEYS.versionState]) ?? 'unverified',\n    usageBlockedByPin: flag(row[WIRE_HEALTH_KEYS.usageBlockedByPin]),\n    notes: strings(row[WIRE_HEALTH_KEYS.notes]),\n  };\n}\n\n/** Narrow GET /api/verse/mcp/cli-health. */\nexport function projectCliHealth(raw: unknown): CliHealthSnapshot | null {\n  const row = record(raw);\n  if (row === null) return null;\n  if (!Array.isArray(row[WIRE_HEALTH_SNAPSHOT_KEYS.accounts])) return null;\n  const accounts = (row[WIRE_HEALTH_SNAPSHOT_KEYS.accounts] as unknown[])\n    .map(narrowHealthRow)\n    .filter((a): a is CliHealthRow => a !== null);\n  return {\n    sampledAt: text(row[WIRE_HEALTH_SNAPSHOT_KEYS.sampledAt]),\n    accounts,\n    // Derived locally as well as read, so a server that forgot the flag still\n    // renders the banner rather than silently hiding a drift.\n    driftDetected:\n      flag(row[WIRE_HEALTH_SNAPSHOT_KEYS.driftDetected]) ||\n      accounts.some((account) => account.versionState === 'drift'),\n    notes: strings(row[WIRE_HEALTH_SNAPSHOT_KEYS.notes]),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Copy for the machine-readable reasons this surface renders\n// ---------------------------------------------------------------------------\n\n/**\n * Plain language for each seat reason. The CODE is still shown next to the\n * sentence — it is the thing to search for — but it is never the sentence.\n * Same split `usage/accounts-model.ts` uses for probe reasons.\n */\nexport const SEAT_REASON_COPY: Record<string, string> = {\n  'mcp-seat-isolated-by-adapter':\n    'Verse launches every turn on this seat with an empty MCP configuration, so it loads no MCP '\n    + 'servers at all — whatever is configured elsewhere on this machine.',\n  'mcp-account-config-absent':\n    'This account has no MCP configuration file of its own, so it starts with none.',\n  'mcp-account-config-not-json':\n    'This account keeps its MCP servers in a TOML config that the provider CLI reads directly. '\n    + 'Hub does not parse or rewrite it, so it cannot list what is in there.',\n  'mcp-account-config-read':\n    'Read from this account\\'s own private configuration.',\n  'mcp-account-config-unreadable':\n    'This account\\'s configuration could not be read, so nothing here is a reading.',\n  'mcp-account-profile-unresolved':\n    'This account\\'s private profile could not be located, so Hub cannot say what it would load.',\n};\n\nexport const SCOPE_REASON_COPY: Record<string, string> = {\n  'mcp-scope-locus-unavailable':\n    'Locus is not reachable on this machine, so writes are not attributable to a tenant.',\n  'mcp-scope-unpinned':\n    'Locus is running but nothing is pinned, so there is no tenant to scope a write to.',\n  'mcp-scope-seal-unverified':\n    'Locus reports a pin whose seal did not verify. Fix the pin before writing anything.',\n  'mcp-scope-expired': 'The Locus pin has expired.',\n  'mcp-scope-pinned': 'Writes are attributed to the pinned Locus tenant shown here.',\n};\n\n/** Prose for a code, or the caller's own sentence. NEVER the raw code alone. */\nexport function reasonSentence(\n  copy: Record<string, string>,\n  reason: string,\n  fallback: string,\n): string {\n  return copy[reason] ?? fallback;\n}\n","/**\n * routes/verse/mcp/mcp.module.css — MCP + CLI management styling.\n *\n * Follows docs/VERSE-DESIGN-V2.md, same as usage.module.css: monochrome\n * ground, 1px hairlines and whitespace for separation (no shadows, no nested\n * rounded boxes), display face for headings, mono for anything the operator\n * has to read character-by-character — which here is the whole point, because\n * the command line is the thing being disclosed.\n */\n\n.section {\n  display: flex;\n  flex-direction: column;\n  min-height: 0;\n  height: 100%;\n  background: var(--bg-canvas);\n}\n\n.body {\n  flex: 1;\n  min-height: 0;\n  overflow-y: auto;\n  padding: var(--space-5);\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-6);\n}\n\n.panel {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-3);\n}\n\n.panelHead {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-1);\n  padding-bottom: var(--space-2);\n  border-bottom: 1px solid var(--border-subtle);\n}\n\n.panelTitle {\n  margin: 0;\n  font-family: var(--font-display);\n  font-size: var(--text-md-size);\n  font-weight: var(--font-weight-semibold);\n  color: var(--text-primary);\n}\n\n.panelNote,\n.muted {\n  margin: 0;\n  font-size: var(--text-sm-size);\n  color: var(--text-secondary);\n  line-height: 1.5;\n}\n\n/* A fact that changes what the operator should do. Never colour alone: it\n   carries a word (\"Version drift\") as well as the rule. */\n.alert {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-1);\n  padding: var(--space-3) var(--space-4);\n  border: 1px solid var(--border-warning, var(--border-strong));\n  border-left-width: 3px;\n  border-radius: var(--radius-sm);\n  background: var(--bg-subtle);\n}\n\n.alertTitle {\n  font-weight: var(--font-weight-semibold);\n  color: var(--text-primary);\n  font-size: var(--text-sm-size);\n}\n\n.seatList,\n.rowList {\n  display: flex;\n  flex-direction: column;\n  gap: 0;\n}\n\n.seatRow,\n.healthRow {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-2);\n  padding: var(--space-3) 0;\n  border-bottom: 1px solid var(--border-subtle);\n}\n\n.seatHead {\n  display: flex;\n  align-items: baseline;\n  gap: var(--space-2);\n  flex-wrap: wrap;\n}\n\n.seatLabel {\n  font-weight: var(--font-weight-semibold);\n  color: var(--text-primary);\n}\n\n.engineTag,\n.code {\n  font-family: var(--font-mono);\n  font-size: var(--text-xs-size);\n  color: var(--text-tertiary, var(--text-secondary));\n}\n\n/* The machine-readable code is shown BESIDE the sentence, never as it. */\n.code {\n  letter-spacing: 0;\n}\n\n.count {\n  font-size: var(--text-sm-size);\n  color: var(--text-secondary);\n}\n\n/* The disclosure: everything the operator must read before confirming. */\n.disclosure {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-2);\n  padding: var(--space-3) var(--space-4);\n  border: 1px solid var(--border-subtle);\n  border-radius: var(--radius-sm);\n  background: var(--bg-subtle);\n}\n\n.commandLine {\n  font-family: var(--font-mono);\n  font-size: var(--text-sm-size);\n  color: var(--text-primary);\n  word-break: break-all;\n  white-space: pre-wrap;\n  margin: 0;\n}\n\n.envList {\n  display: flex;\n  flex-wrap: wrap;\n  gap: var(--space-2);\n  margin: 0;\n  padding: 0;\n  list-style: none;\n}\n\n.envItem {\n  font-family: var(--font-mono);\n  font-size: var(--text-xs-size);\n  padding: 2px var(--space-2);\n  border: 1px solid var(--border-subtle);\n  border-radius: var(--radius-sm);\n  color: var(--text-secondary);\n}\n\n.warnList {\n  margin: 0;\n  padding-left: var(--space-4);\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-1);\n  font-size: var(--text-sm-size);\n  color: var(--text-primary);\n}\n\n.digest {\n  font-family: var(--font-mono);\n  font-size: var(--text-xs-size);\n  color: var(--text-tertiary, var(--text-secondary));\n  word-break: break-all;\n}\n\n.actions {\n  display: flex;\n  gap: var(--space-2);\n  align-items: center;\n  flex-wrap: wrap;\n}\n","/**\n * routes/verse/mcp/McpServerDisclosure.tsx — what an MCP server IS, rendered\n * so it has to be read.\n *\n * Used in two places and identical in both: listing a server a seat already\n * loads, and previewing one that is about to be written. That sameness is the\n * point — the operator reads the same card either way, so \"what will run\" is\n * never presented differently from \"what runs\".\n *\n * Three rules this component enforces at the render layer:\n *\n *   1. The COMMAND and ARGS are shown in full, in mono, wrapped rather than\n *      truncated. A command with an ellipsis in the middle is exactly the\n *      one worth reading.\n *   2. Environment variables are listed BY KEY, with the value shown as the\n *      literal `<set>` that `redactEnv` produced. The count is stated, so a\n *      server handing over six credentials cannot look like one handing over\n *      none.\n *   3. The source is a home-relative ref, never an absolute path.\n */\nimport type { ReactNode } from 'react';\nimport type { McpServer } from './mcp-contract.js';\nimport styles from './mcp.module.css';\n\nexport function McpServerDisclosure({\n  server,\n  heading,\n}: {\n  server: McpServer;\n  heading?: string;\n}): ReactNode {\n  const envKeys = server.env === null ? [] : Object.keys(server.env);\n\n  return (\n    <div className={styles.disclosure}>\n      {heading === undefined ? null : <p className={styles.alertTitle}>{heading}</p>}\n\n      <p className={styles.commandLine}>\n        {server.command}\n        {server.args.length > 0 ? ` ${server.args.join(' ')}` : ''}\n      </p>\n\n      {envKeys.length === 0 ? (\n        <p className={styles.muted}>No environment variables are passed to this server.</p>\n      ) : (\n        <>\n          <p className={styles.muted}>\n            {envKeys.length} environment variable{envKeys.length === 1 ? '' : 's'} passed to this\n            server. Values are never displayed.\n          </p>\n          <ul className={styles.envList}>\n            {envKeys.map((key) => (\n              <li key={key} className={styles.envItem}>\n                {key}=&lt;set&gt;\n              </li>\n            ))}\n          </ul>\n        </>\n      )}\n\n      <p className={styles.code}>configured in {server.sourceRef}</p>\n    </div>\n  );\n}\n","/**\n * routes/verse/mcp/mcp-queries.ts — the reads and writes behind the MCP panel.\n *\n * Reads use the non-throwing `optionalGet` shape the Usage section\n * established: a server without these routes answers 404, and a 404 means\n * \"this panel is degraded\", not \"Verse is broken\". 401 still propagates,\n * because an expired read session is an unauthorized state for the whole\n * surface, not a degraded one.\n *\n * Writes pull the held mutation token from auth-store and touch the hold on\n * success, exactly like `autonomy/control-queries.ts`. There is one addition\n * this surface needs that the others do not: `applyMcpServer` CANNOT be\n * called without a digest that `proposeMcpServer` returned, because the\n * server refuses without it. That is deliberate and it is why there is no\n * single `installMcpServer()` helper here — a one-call install is exactly the\n * shape docs/VERSE-WORKSPACES.md §3 rules out, and it should be impossible to\n * write by accident at this layer too.\n */\nimport { getMutationToken, touchMutationHold } from '../../../data/auth-store.js';\nimport { ApiError, apiGet, apiPost } from '../../../data/client.js';\nimport { invalidate } from '../../../data/cache.js';\nimport type { QueryDef } from '../../../data/queries.js';\n\nexport const MCP_SNAPSHOT_KEY = 'verse-mcp-snapshot';\nexport const MCP_CLI_HEALTH_KEY = 'verse-mcp-cli-health';\n\n/** A read that is allowed to be absent. `raw` is null when it was. */\nexport interface OptionalRead {\n  raw: unknown;\n  available: boolean;\n  reason: string | null;\n}\n\nfunction describeFailure(path: string, err: unknown): string {\n  if (err instanceof ApiError) {\n    if (err.status === 404) {\n      return `This server does not expose ${path}, so this panel has no source.`;\n    }\n    return `${path} answered HTTP ${err.status}.`;\n  }\n  return `${path} could not be reached.`;\n}\n\nfunction optionalGet(path: string): (signal?: AbortSignal) => Promise<OptionalRead> {\n  return async (signal) => {\n    try {\n      const raw = await apiGet<unknown>(path, signal);\n      return { raw, available: true, reason: null };\n    } catch (err) {\n      if (err instanceof ApiError && err.status === 401) throw err;\n      if (err instanceof DOMException && err.name === 'AbortError') throw err;\n      return { raw: null, available: false, reason: describeFailure(path, err) };\n    }\n  };\n}\n\n/** GET /api/verse/mcp — which servers each seat would load. */\nexport const mcpSnapshotQuery: QueryDef<OptionalRead> = {\n  key: MCP_SNAPSHOT_KEY,\n  fetch: optionalGet('/api/verse/mcp'),\n};\n\n/** GET /api/verse/mcp/cli-health — auth, plan and version drift per account. */\nexport const mcpCliHealthQuery: QueryDef<OptionalRead> = {\n  key: MCP_CLI_HEALTH_KEY,\n  fetch: optionalGet('/api/verse/mcp/cli-health'),\n};\n\n// ---------------------------------------------------------------------------\n// Writes\n// ---------------------------------------------------------------------------\n\nexport class McpLockedError extends Error {\n  constructor() {\n    super('Unlock actions with the mutation token before changing MCP configuration.');\n    this.name = 'McpLockedError';\n  }\n}\n\nasync function post<T>(path: string, body: unknown): Promise<T> {\n  const token = getMutationToken();\n  if (!token) throw new McpLockedError();\n  const result = await apiPost<T>(path, body, token);\n  touchMutationHold();\n  return result;\n}\n\n/** The spec an operator typed. Env VALUES are real here and only here. */\nexport interface McpServerInput {\n  name: string;\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n}\n\n/**\n * POST /api/verse/mcp/proposal — validate and disclose. Writes nothing.\n *\n * The response carries the digest `applyMcpServer` demands back. A refusal is\n * a 409 with a full body, which `apiPost` surfaces as an ApiError whose\n * detail carries the `note`.\n */\nexport function proposeMcpServer(target: string, server: McpServerInput): Promise<unknown> {\n  return post<unknown>('/api/verse/mcp/proposal', { target, server });\n}\n\n/**\n * POST /api/verse/mcp/apply — perform the write the digest confirms.\n *\n * `digest` is not optional and has no default. It must come from a proposal\n * the operator actually saw.\n */\nexport async function applyMcpServer(\n  target: string,\n  server: McpServerInput,\n  digest: string,\n): Promise<unknown> {\n  const result = await post<unknown>('/api/verse/mcp/apply', {\n    target,\n    server,\n    digest,\n    confirm: true,\n  });\n  invalidate(MCP_SNAPSHOT_KEY);\n  return result;\n}\n\n/**\n * POST /api/verse/mcp/cli-probe — read the installed CLI versions.\n *\n * A POST because it launches the provider CLIs. Nothing about it is a read.\n */\nexport async function probeCliVersions(): Promise<unknown> {\n  const result = await post<unknown>('/api/verse/mcp/cli-probe', {});\n  invalidate(MCP_CLI_HEALTH_KEY);\n  return result;\n}\n","/**\n * routes/verse/sections/McpSection.tsx — the MCP and per-account CLI panel.\n *\n * WHY THIS FILE IS HERE AND NOT IN `../mcp/`. The shell mounts rail sections\n * through `import.meta.glob('./sections/*Section.tsx')` (VerseApp.tsx). While\n * this component lived at `mcp/McpSection.tsx` the glob could not see it, so\n * a finished, tested, fully-served feature was unreachable from the app —\n * every other rail section already follows the same split (`sections/\n * UsageSection.tsx` importing `../usage/`, `sections/AutonomySection.tsx`\n * importing `../autonomy/`), and this one was the only surface that did not.\n * Moving it was preferred over teaching the shell a second mounting\n * mechanism: one glob that every section satisfies cannot silently skip a\n * section again. Its model, queries, styles and the shared disclosure card\n * all stay in `../mcp/`.\n *\n * Read-only by construction. There is no install form in this component and\n * no call to `applyMcpServer`: this section answers \"what would each seat\n * load, and is any CLI drifting\", which is the whole of what\n * docs/VERSE-WORKSPACES.md §3 asks for before mutation.\n *\n * The write path exists on the server and in `mcp-queries.ts`\n * (`proposeMcpServer` → `applyMcpServer`, two calls, digest-bound). It is\n * deliberately not wired to a button here. A one-click \"Add server\" control\n * is the exact affordance §3 rules out, and the disclosure card it would need\n * is already built and shared — `McpServerDisclosure` — so the remaining work\n * is a form plus a confirm step that shows that card, not a re-think.\n *\n * Three things this panel refuses to soften:\n *\n *   - When every seat loads nothing and the machine has servers configured,\n *     it SAYS SO, at the top, as the first thing on the page. That is the\n *     single most surprising fact about this machine's MCP setup and burying\n *     it under a list of servers would be the same as hiding it.\n *   - A version drift is an alert with the pinned version quoted, not a grey\n *     \"unknown\". The fix is a one-line constant bump and the operator cannot\n *     make it without being told.\n *   - The seats do not all behave the same way, and the difference bites. A\n *     Claude or local seat loads NO MCP servers (the adapter pins an empty\n *     `--mcp-config` under `--strict-mcp-config`, src/core/verse/adapters/\n *     claude.ts). A Codex or Grok seat inherits its own native profile\n *     config, so a turn there CAN reach an `ashlr__*` MCP write tool — which\n *     `assertMayMutate` (src/core/sandbox/policy.ts) refuses when the chat's\n *     folder is not enrolled. That refusal surfaces as a tool error mid-turn\n *     and nothing else in Verse mentions it, so this panel states it.\n */\nimport type { ReactNode } from 'react';\nimport { useQuery } from '../../../data/hooks.js';\nimport { StatusBadge, type Tone } from '../../../components/primitives/StatusBadge.js';\nimport {\n  SCOPE_REASON_COPY,\n  SEAT_REASON_COPY,\n  projectCliHealth,\n  projectMcpSnapshot,\n  reasonSentence,\n  type CliHealthRow,\n  type McpSeat,\n  type McpSnapshot,\n} from '../mcp/mcp-contract.js';\nimport { McpServerDisclosure } from '../mcp/McpServerDisclosure.js';\nimport { mcpCliHealthQuery, mcpSnapshotQuery } from '../mcp/mcp-queries.js';\nimport styles from '../mcp/mcp.module.css';\n\nfunction versionTone(state: string): Tone {\n  switch (state) {\n    case 'drift':\n      return 'warning';\n    case 'matches-pin':\n      return 'success';\n    case 'reported':\n      return 'info';\n    default:\n      return 'unknown';\n  }\n}\n\nfunction versionLabel(row: CliHealthRow): string {\n  if (row.versionState === 'drift') return 'version drift';\n  if (row.version !== null) return row.version;\n  return 'version not read';\n}\n\n// ---------------------------------------------------------------------------\n// Seats\n// ---------------------------------------------------------------------------\n\nfunction SeatRow({ seat }: { seat: McpSeat }): ReactNode {\n  const sentence = reasonSentence(\n    SEAT_REASON_COPY,\n    seat.reason,\n    'Hub cannot say what this seat would load.',\n  );\n\n  return (\n    <div className={styles.seatRow}>\n      <div className={styles.seatHead}>\n        <span className={styles.seatLabel}>{seat.label}</span>\n        <span className={styles.engineTag}>{seat.engine}</span>\n        <StatusBadge\n          status={seat.servers.length > 0 ? 'ready' : 'neutral'}\n          tone={seat.servers.length > 0 ? 'info' : 'neutral'}\n        >\n          {seat.servers.length === 0\n            ? 'loads no MCP servers'\n            : `loads ${seat.servers.length} server${seat.servers.length === 1 ? '' : 's'}`}\n        </StatusBadge>\n      </div>\n\n      <p className={styles.panelNote}>{sentence}</p>\n      {/* The machine code sits beside the sentence — it is what you search\n          for in the logs — but it is never the sentence itself. */}\n      <p className={styles.code}>{seat.reason}</p>\n\n      {seat.servers.map((server) => (\n        <McpServerDisclosure key={server.name} server={server} heading={server.name} />\n      ))}\n    </div>\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Section\n// ---------------------------------------------------------------------------\n\nexport function McpSection(): ReactNode {\n  const snapshotRead = useQuery(mcpSnapshotQuery);\n  const healthRead = useQuery(mcpCliHealthQuery);\n\n  const snapshot: McpSnapshot | null =\n    snapshotRead.data?.available === true ? projectMcpSnapshot(snapshotRead.data.raw) : null;\n  const health =\n    healthRead.data?.available === true ? projectCliHealth(healthRead.data.raw) : null;\n\n  const unreachable = snapshotRead.data?.available === false ? snapshotRead.data.reason : null;\n\n  return (\n    <section className={styles.section} aria-labelledby=\"verse-mcp-heading\">\n      <div className={styles.body}>\n        <div className={styles.panelHead}>\n          <h2 id=\"verse-mcp-heading\" className={styles.panelTitle}>\n            MCP and CLI\n          </h2>\n          <p className={styles.panelNote}>\n            An MCP server is arbitrary code that runs with the agent&rsquo;s privileges. This page\n            shows what each seat would actually load — not what is configured somewhere on this\n            machine.\n          </p>\n        </div>\n\n        {unreachable !== null ? <p className={styles.muted}>{unreachable}</p> : null}\n\n        {/* The loudest fact first, when it is true. */}\n        {snapshot !== null && snapshot.notes.length > 0 ? (\n          <div className={styles.alert} role=\"note\">\n            <span className={styles.alertTitle}>Configured, but unused</span>\n            {snapshot.notes.map((note) => (\n              <p key={note} className={styles.panelNote}>\n                {note}\n              </p>\n            ))}\n            <p className={styles.panelNote}>{snapshot.machine.note}</p>\n          </div>\n        ) : null}\n\n        {/* Version drift, quoted. */}\n        {health !== null && health.driftDetected ? (\n          <div className={styles.alert} role=\"alert\">\n            <span className={styles.alertTitle}>Version drift</span>\n            {health.notes.map((note) => (\n              <p key={note} className={styles.panelNote}>\n                {note}\n              </p>\n            ))}\n          </div>\n        ) : null}\n\n        {/* ── Per-seat view ───────────────────────────────────────────── */}\n        <section className={styles.panel} aria-labelledby=\"verse-mcp-seats\">\n          <div className={styles.panelHead}>\n            <h3 id=\"verse-mcp-seats\" className={styles.panelTitle}>\n              Per seat\n            </h3>\n            <p className={styles.panelNote}>\n              A server configured for one account does not apply to another. Each seat below is\n              answered from its own configuration.\n            </p>\n          </div>\n\n          {/*\n            A STANDING caveat, not a conditional alert — it is true on every\n            machine, whatever the reads below say, and nothing else in Verse\n            says it anywhere. It sits inside \"Per seat\" because that is the\n            question it answers: the seats differ, and the difference has a\n            consequence the operator meets as a failed turn otherwise.\n          */}\n          <div className={styles.alert} role=\"note\" aria-labelledby=\"verse-mcp-enrollment-caveat\">\n            <span id=\"verse-mcp-enrollment-caveat\" className={styles.alertTitle}>\n              MCP writes can be refused on a folder that is not enrolled\n            </span>\n            <p className={styles.panelNote}>\n              Claude and local seats are unaffected. Verse launches every turn on them with an\n              empty MCP configuration under a strict flag, so they load no MCP servers at all and\n              cannot route an edit through one.\n            </p>\n            <p className={styles.code}>--strict-mcp-config --mcp-config {'{\"mcpServers\":{}}'}</p>\n            <p className={styles.panelNote}>\n              Codex and Grok seats are affected. Their adapters add no MCP flag, so each inherits\n              whatever its own native profile config declares. If a chat on one of those seats\n              routes an edit through an ashlr__ MCP write tool and the chat&rsquo;s folder is not\n              enrolled, Ashlr&rsquo;s sandbox gate refuses the write — the turn fails on policy,\n              not on the model, and the refusal reads like a tool error. Enrol the folder first,\n              or keep that chat on a Claude or local seat.\n            </p>\n          </div>\n\n          {snapshot === null ? (\n            <p className={styles.muted}>\n              {snapshotRead.status === 'loading'\n                ? 'Reading each seat’s configuration…'\n                : 'No per-seat reading is available.'}\n            </p>\n          ) : (\n            <div className={styles.seatList}>\n              {snapshot.seats.map((seat) => (\n                <SeatRow key={seat.seatId} seat={seat} />\n              ))}\n            </div>\n          )}\n        </section>\n\n        {/* ── Per-account CLI health ──────────────────────────────────── */}\n        <section className={styles.panel} aria-labelledby=\"verse-mcp-cli\">\n          <div className={styles.panelHead}>\n            <h3 id=\"verse-mcp-cli\" className={styles.panelTitle}>\n              Per account\n            </h3>\n            <p className={styles.panelNote}>\n              Authentication, plan and CLI version. A version is only shown when something actually\n              read one.\n            </p>\n          </div>\n\n          {health === null ? (\n            <p className={styles.muted}>\n              {healthRead.data?.available === false\n                ? healthRead.data.reason\n                : 'No per-account reading is available.'}\n            </p>\n          ) : (\n            <div className={styles.rowList}>\n              {health.accounts.map((row) => (\n                <div key={row.accountId} className={styles.healthRow}>\n                  <div className={styles.seatHead}>\n                    <span className={styles.seatLabel}>{row.label}</span>\n                    <span className={styles.engineTag}>{row.provider}</span>\n                    <StatusBadge status={row.authentication} tone={\n                      row.authentication === 'signed-in' ? 'success'\n                        : row.authentication === 'signed-out' ? 'danger' : 'unknown'\n                    }>\n                      {row.authentication}\n                    </StatusBadge>\n                    <StatusBadge status={row.versionState} tone={versionTone(row.versionState)}>\n                      {versionLabel(row)}\n                    </StatusBadge>\n                    {row.planType === null ? null : (\n                      <span className={styles.count}>plan: {row.planType}</span>\n                    )}\n                  </div>\n\n                  {row.notes.map((note) => (\n                    <p key={note} className={styles.panelNote}>\n                      {note}\n                    </p>\n                  ))}\n\n                  {row.pinnedVersion === null ? null : (\n                    <p className={styles.code}>\n                      usage probe pinned to {row.pinnedVersion}\n                      {row.usageBlockedByPin ? ` · ${row.reason}` : ''}\n                    </p>\n                  )}\n                </div>\n              ))}\n            </div>\n          )}\n        </section>\n\n        {/* ── Scope ───────────────────────────────────────────────────── */}\n        <section className={styles.panel} aria-labelledby=\"verse-mcp-scope\">\n          <div className={styles.panelHead}>\n            <h3 id=\"verse-mcp-scope\" className={styles.panelTitle}>\n              Scope\n            </h3>\n            <p className={styles.panelNote}>\n              Scope is owned by Locus, not by Hub. Hub holds the reference Locus publishes and\n              nothing else.\n            </p>\n          </div>\n          {snapshot?.scope == null ? (\n            <p className={styles.muted}>No scope reading is available.</p>\n          ) : (\n            <>\n              <p className={styles.panelNote}>\n                {reasonSentence(\n                  SCOPE_REASON_COPY,\n                  snapshot.scope.reason,\n                  'Locus did not report a usable scope.',\n                )}\n              </p>\n              {snapshot.scope.tenantRef === null ? null : (\n                <p className={styles.code}>\n                  tenant {snapshot.scope.tenantRef}\n                  {snapshot.scope.aliasRef === null ? '' : ` · alias ${snapshot.scope.aliasRef}`}\n                </p>\n              )}\n            </>\n          )}\n        </section>\n      </div>\n    </section>\n  );\n}\n"],"mappings":"sGAwCA,IAAM,EAAmB,CACvB,KAAM,OACN,QAAS,UACT,KAAM,OACN,IAAK,MACL,UAAW,WACb,EAEM,EAAiB,CACrB,OAAQ,SACR,MAAO,QACP,OAAQ,SACR,UAAW,YACX,QAAS,UACT,OAAQ,SACR,WAAY,aACZ,aAAc,eACd,MAAO,OACT,EAEM,EAAoB,CACxB,QAAS,UACT,WAAY,aACZ,KAAM,MACR,EAEM,EAAqB,CACzB,UAAW,YACX,MAAO,QACP,QAAS,UACT,MAAO,QACP,MAAO,OACT,EAEM,EAAmB,CACvB,UAAW,YACX,MAAO,QACP,SAAU,WACV,eAAgB,iBAChB,MAAO,QACP,SAAU,WACV,OAAQ,SACR,QAAS,UACT,cAAe,gBACf,aAAc,eACd,kBAAmB,oBACnB,MAAO,OACT,EAEM,EAA4B,CAChC,UAAW,YACX,SAAU,WACV,cAAe,gBACf,MAAO,OACT,EAEM,EAAkB,CACtB,UAAW,YACX,OAAQ,SACR,SAAU,WACV,UAAW,YACX,aAAc,eACd,OAAQ,QACV,EAsEA,SAAS,EAAO,EAAgD,CAC9D,OAAyB,OAAO,GAAU,UAAnC,GAA+C,CAAC,MAAM,QAAQ,CAAK,EACrE,EACD,IACN,CAEA,SAAS,EAAK,EAA+B,CAC3C,OAAO,OAAO,GAAU,SAAW,EAAQ,IAC7C,CAEA,SAAS,EAAQ,EAA0B,CACzC,OAAO,MAAM,QAAQ,CAAK,EAAI,EAAM,OAAQ,GAAyB,OAAO,GAAS,QAAQ,EAAI,CAAC,CACpG,CAEA,SAAS,EAAK,EAAyB,CACrC,OAAO,IAAU,EACnB,CASA,SAAgB,EAAa,EAAgC,CAC3D,IAAM,EAAM,EAAO,CAAG,EACtB,GAAI,IAAQ,KAAM,OAAO,KACzB,IAAM,EAAO,EAAK,EAAI,EAAiB,KAAK,EACtC,EAAU,EAAK,EAAI,EAAiB,QAAQ,EAClD,GAAI,IAAS,MAAQ,IAAY,KAAM,OAAO,KAE9C,IAAI,EAAqC,KACnC,EAAS,EAAO,EAAI,EAAiB,IAAI,EAC/C,GAAI,IAAW,KAAM,CACnB,IAAM,EAAO,OAAO,KAAK,CAAM,EAC/B,GAAI,EAAK,OAAS,EAAG,CACnB,EAAM,CAAC,EACP,IAAK,IAAM,KAAO,EAAM,EAAI,GAAO,OACrC,CACF,CAEA,MAAO,CACL,OACA,UACA,KAAM,EAAQ,EAAI,EAAiB,KAAK,EACxC,MACA,UAAW,EAAK,EAAI,EAAiB,UAAU,GAAK,kBACtD,CACF,CAEA,SAAS,EAAW,EAA8B,CAChD,IAAM,EAAM,EAAO,CAAG,EACtB,GAAI,IAAQ,KAAM,OAAO,KACzB,IAAM,EAAS,EAAK,EAAI,EAAe,OAAO,EAC9C,GAAI,IAAW,KAAM,OAAO,KAC5B,IAAM,EAAU,MAAM,QAAQ,EAAI,EAAe,QAAQ,EACpD,EAAI,EAAe,QAAQ,CAAe,IAAI,CAAY,CAAC,CAAC,OAAQ,GAAsB,IAAM,IAAI,EACrG,CAAC,EACL,MAAO,CACL,SACA,MAAO,EAAK,EAAI,EAAe,MAAM,GAAK,EAC1C,OAAQ,EAAK,EAAI,EAAe,OAAO,GAAK,UAC5C,UAAW,EAAK,EAAI,EAAe,UAAU,GAAK,EAClD,UACA,OAAQ,EAAK,EAAI,EAAe,OAAO,GAAK,UAC5C,WAAY,EAAK,EAAI,EAAe,WAAW,EAC/C,aAAc,EAAK,EAAI,EAAe,aAAa,EACnD,MAAO,EAAQ,EAAI,EAAe,MAAM,CAC1C,CACF,CAEA,SAAS,EAAY,EAA+B,CAClD,IAAM,EAAM,EAAO,CAAG,EAEtB,OADI,IAAQ,KAAa,KAClB,CACL,UAAW,EAAK,EAAI,EAAgB,UAAU,EAC9C,OAAQ,EAAK,EAAI,EAAgB,OAAO,EACxC,SAAU,EAAK,EAAI,EAAgB,SAAS,EAC5C,UAAW,EAAK,EAAI,EAAgB,UAAU,EAC9C,aAAc,EAAK,EAAI,EAAgB,aAAa,EACpD,OAAQ,EAAK,EAAI,EAAgB,OAAO,GAAK,SAC/C,CACF,CAGA,SAAgB,EAAmB,EAAkC,CACnE,IAAM,EAAM,EAAO,CAAG,EAEtB,GADI,IAAQ,MACR,CAAC,MAAM,QAAQ,EAAI,EAAmB,MAAM,EAAG,OAAO,KAE1D,IAAM,EAAU,EAAO,EAAI,EAAmB,QAAQ,EAChD,EAAiB,IAAY,MAAQ,MAAM,QAAQ,EAAQ,EAAkB,QAAQ,EACtF,EAAQ,EAAkB,QAAQ,CAAe,IAAI,CAAY,CAAC,CAAC,OAAQ,GAAsB,IAAM,IAAI,EAC5G,CAAC,EAEL,MAAO,CACL,UAAW,EAAK,EAAI,EAAmB,UAAU,EACjD,MAAQ,EAAI,EAAmB,MAAM,CAClC,IAAI,CAAU,CAAC,CACf,OAAQ,GAAoB,IAAM,IAAI,EACzC,QAAS,CACP,QAAS,EACT,WAAY,IAAY,KAAqD,EAAe,OAAS,EAAtE,EAAK,EAAQ,EAAkB,WAAW,EACzE,MAAO,IAAY,KAA+C,KAAxC,EAAK,EAAQ,EAAkB,KAAK,IAAa,EAC7E,EACA,MAAO,EAAY,EAAI,EAAmB,MAAM,EAChD,MAAO,EAAQ,EAAI,EAAmB,MAAM,CAC9C,CACF,CAEA,SAAS,EAAgB,EAAmC,CAC1D,IAAM,EAAM,EAAO,CAAG,EACtB,GAAI,IAAQ,KAAM,OAAO,KACzB,IAAM,EAAY,EAAK,EAAI,EAAiB,UAAU,EAEtD,OADI,IAAc,KAAa,KACxB,CACL,YACA,MAAO,EAAK,EAAI,EAAiB,MAAM,GAAK,EAC5C,SAAU,EAAK,EAAI,EAAiB,SAAS,GAAK,UAClD,eAAgB,EAAK,EAAI,EAAiB,eAAe,GAAK,UAC9D,MAAO,EAAK,EAAI,EAAiB,MAAM,GAAK,UAC5C,SAAU,EAAK,EAAI,EAAiB,SAAS,EAC7C,OAAQ,EAAK,EAAI,EAAiB,OAAO,GAAK,UAG9C,QAAS,EAAK,EAAI,EAAiB,QAAQ,EAC3C,cAAe,EAAK,EAAI,EAAiB,cAAc,EACvD,aAAc,EAAK,EAAI,EAAiB,aAAa,GAAK,aAC1D,kBAAmB,EAAK,EAAI,EAAiB,kBAAkB,EAC/D,MAAO,EAAQ,EAAI,EAAiB,MAAM,CAC5C,CACF,CAGA,SAAgB,EAAiB,EAAwC,CACvE,IAAM,EAAM,EAAO,CAAG,EAEtB,GADI,IAAQ,MACR,CAAC,MAAM,QAAQ,EAAI,EAA0B,SAAS,EAAG,OAAO,KACpE,IAAM,EAAY,EAAI,EAA0B,SAAS,CACtD,IAAI,CAAe,CAAC,CACpB,OAAQ,GAAyB,IAAM,IAAI,EAC9C,MAAO,CACL,UAAW,EAAK,EAAI,EAA0B,UAAU,EACxD,WAGA,cACE,EAAK,EAAI,EAA0B,cAAc,GACjD,EAAS,KAAM,GAAY,EAAQ,eAAiB,OAAO,EAC7D,MAAO,EAAQ,EAAI,EAA0B,MAAM,CACrD,CACF,CAWA,IAAa,EAA2C,CACtD,+BACE,gKAEF,4BACE,iFACF,8BACE,kKAEF,0BACE,sDACF,gCACE,gFACF,iCACE,4FACJ,EAEa,EAA4C,CACvD,8BACE,sFACF,qBACE,qFACF,4BACE,sFACF,oBAAqB,6BACrB,mBAAoB,8DACtB,EAGA,SAAgB,EACd,EACA,EACA,EACQ,CACR,OAAO,EAAK,IAAW,CACzB,4uBE3VA,SAAgB,EAAoB,CAClC,SACA,WAIY,CACZ,IAAM,EAAU,EAAO,MAAQ,KAAO,CAAC,EAAI,OAAO,KAAK,EAAO,GAAG,EAEjE,OACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,WAAvB,SAAA,CACG,IAAY,IAAA,GAAY,MAAO,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,WAAa,SAAA,CAAW,CAAA,GAE7E,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,YAArB,SAAA,CACG,EAAO,QACP,EAAO,KAAK,OAAS,EAAI,IAAI,EAAO,KAAK,KAAK,GAAG,IAAM,EACvD,IAEF,EAAQ,SAAW,GAClB,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAAO,SAAA,qDAAsD,CAAA,GAElF,EAAA,EAAA,KAAA,CAAA,EAAA,SAAA,CAAA,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAArB,SAAA,CACG,EAAQ,OAAO,wBAAsB,EAAQ,SAAW,EAAI,GAAK,IAAI,qDAErE,CACH,CAAA,GAAA,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,UAAW,EAAO,QACnB,SAAA,EAAQ,IAAK,IACZ,EAAA,EAAA,KAAA,CAAC,KAAD,CAAc,UAAW,EAAO,QAAhC,SAAA,CACG,EAAI,QACH,CAFK,EAAA,CAEL,CACL,CACC,CAAA,CACJ,CAAA,CAAA,GAGJ,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CAA2B,iBAAe,EAAO,SAAa,GAC3D,GAET,CCxCA,IAAa,EAAmB,qBACnB,EAAqB,uBASlC,SAAS,EAAgB,EAAc,EAAsB,CAO3D,OANI,aAAe,EACb,EAAI,SAAW,IACV,+BAA+B,EAAK,gCAEtC,GAAG,EAAK,iBAAiB,EAAI,OAAO,GAEtC,GAAG,EAAK,uBACjB,CAEA,SAAS,EAAY,EAA+D,CAClF,OAAO,KAAO,IAAW,CACvB,GAAI,CAEF,MAAO,CAAE,IAAA,MADS,EAAgB,EAAM,CAAM,EAChC,UAAW,GAAM,OAAQ,IAAK,CAC9C,OAAS,EAAK,CAEZ,GADI,aAAe,GAAY,EAAI,SAAW,KAC1C,aAAe,cAAgB,EAAI,OAAS,aAAc,MAAM,EACpE,MAAO,CAAE,IAAK,KAAM,UAAW,GAAO,OAAQ,EAAgB,EAAM,CAAG,CAAE,CAC3E,CACF,CACF,CAGA,IAAa,EAA2C,CACtD,IAAK,EACL,MAAO,EAAY,gBAAgB,CACrC,EAGa,EAA4C,CACvD,IAAK,EACL,MAAO,EAAY,2BAA2B,CAChD,ECJA,SAAS,EAAY,EAAqB,CACxC,OAAQ,EAAR,CACE,IAAK,QACH,MAAO,UACT,IAAK,cACH,MAAO,UACT,IAAK,WACH,MAAO,OACT,QACE,MAAO,SACX,CACF,CAEA,SAAS,EAAa,EAA2B,CAG/C,OAFI,EAAI,eAAiB,QAAgB,gBACrC,EAAI,UAAY,KACb,mBAD0B,EAAI,OAEvC,CAMA,SAAS,EAAQ,CAAE,QAAsC,CACvD,IAAM,EAAW,EACf,EACA,EAAK,OACL,2CACF,EAEA,OACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,QAAvB,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,SAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,UAAY,SAAA,EAAK,KAAY,CAAA,GACrD,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,UAAY,SAAA,EAAK,MAAa,CAAA,GACtD,EAAA,EAAA,IAAA,CAAC,EAAD,CACE,OAAQ,EAAK,QAAQ,OAAS,EAAI,QAAU,UAC5C,KAAM,EAAK,QAAQ,OAAS,EAAI,OAAS,UAExC,SAAA,EAAK,QAAQ,SAAW,EACrB,uBACA,SAAS,EAAK,QAAQ,OAAO,SAAS,EAAK,QAAQ,SAAW,EAAI,GAAK,KAChE,CAAA,CACV,KAEL,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAY,SAAA,CAAY,CAAA,GAG7C,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAAO,SAAA,EAAK,MAAU,CAAA,EAE1C,EAAK,QAAQ,IAAK,IACjB,EAAA,EAAA,IAAA,CAAC,EAAD,CAA+C,SAAQ,QAAS,EAAO,IAAO,EAApD,EAAO,IAA6C,CAC/E,CACE,GAET,CAMA,SAAgB,GAAwB,CACtC,IAAM,EAAe,EAAS,CAAgB,EACxC,EAAa,EAAS,CAAiB,EAEvC,EACJ,EAAa,MAAM,YAAc,GAAO,EAAmB,EAAa,KAAK,GAAG,EAAI,KAChF,EACJ,EAAW,MAAM,YAAc,GAAO,EAAiB,EAAW,KAAK,GAAG,EAAI,KAE1E,EAAc,EAAa,MAAM,YAAc,GAAQ,EAAa,KAAK,OAAS,KAExF,OACE,EAAA,EAAA,IAAA,CAAC,UAAD,CAAS,UAAW,EAAO,QAAS,kBAAgB,oBAClD,UAAA,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,KAAvB,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,UAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,GAAG,oBAAoB,UAAW,EAAO,WAAY,SAAA,aAErD,CAAA,GACJ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,+KAI7B,CAAA,CACA,IAEJ,IAAgB,KAAuD,MAAhD,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAAQ,SAAA,CAAe,CAAA,EAGnE,IAAa,MAAQ,EAAS,MAAM,OAAS,GAC5C,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,MAAO,KAAK,OAAnC,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,WAAY,SAAA,wBAA4B,CAAA,EAC/D,EAAS,MAAM,IAAK,IACnB,EAAA,EAAA,IAAA,CAAC,IAAD,CAAc,UAAW,EAAO,UAC7B,SAAA,CACA,EAFK,CAEL,CACJ,GACD,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAY,SAAA,EAAS,QAAQ,IAAQ,CAAA,CACvD,CACH,CAAA,EAAA,KAGH,IAAW,MAAQ,EAAO,eACzB,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,MAAO,KAAK,QAAnC,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,WAAY,SAAA,eAAmB,CAAA,EACtD,EAAO,MAAM,IAAK,IACjB,EAAA,EAAA,IAAA,CAAC,IAAD,CAAc,UAAW,EAAO,UAC7B,SAAA,CACA,EAFK,CAEL,CACJ,CACE,CACH,CAAA,EAAA,MAGJ,EAAA,EAAA,KAAA,CAAC,UAAD,CAAS,UAAW,EAAO,MAAO,kBAAgB,kBAAlD,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,UAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,GAAG,kBAAkB,UAAW,EAAO,WAAY,SAAA,UAEnD,CAAA,GACJ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,wHAG7B,CAAA,CACA,KASL,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,MAAO,KAAK,OAAO,kBAAgB,8BAA1D,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,GAAG,8BAA8B,UAAW,EAAO,WAAY,SAAA,4DAE/D,CAAA,GACN,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,wMAI7B,CAAA,GACH,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CAA2B,oCAAkC,mBAAuB,KACpF,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,icAO7B,CAAA,CACA,IAEJ,IAAa,MACZ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAClB,SAAA,EAAa,SAAW,UACrB,qCACA,mCACH,CAAA,GAEH,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAW,EAAO,SACpB,SAAA,EAAS,MAAM,IAAK,IACnB,EAAA,EAAA,IAAA,CAAC,EAAD,CAAiC,MAAO,EAA1B,EAAK,MAAqB,CACzC,CACE,CAAA,CAEA,KAGT,EAAA,EAAA,KAAA,CAAC,UAAD,CAAS,UAAW,EAAO,MAAO,kBAAgB,gBAAlD,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,UAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,GAAG,gBAAgB,UAAW,EAAO,WAAY,SAAA,aAEjD,CAAA,GACJ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,iGAG7B,CAAA,CACA,CAEJ,CAAA,EAAA,IAAW,MACV,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAClB,SAAA,EAAW,MAAM,YAAc,GAC5B,EAAW,KAAK,OAChB,sCACH,CAAA,GAEH,EAAA,EAAA,IAAA,CAAC,MAAD,CAAK,UAAW,EAAO,QACpB,SAAA,EAAO,SAAS,IAAK,IACpB,EAAA,EAAA,KAAA,CAAC,MAAD,CAAyB,UAAW,EAAO,UAA3C,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,SAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,UAAY,SAAA,EAAI,KAAY,CAAA,GACpD,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAO,UAAY,SAAA,EAAI,QAAe,CAAA,GACvD,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,OAAQ,EAAI,eAAgB,KACvC,EAAI,iBAAmB,YAAc,UACjC,EAAI,iBAAmB,aAAe,SAAW,UAEpD,SAAA,EAAI,cACM,CAAA,GACb,EAAA,EAAA,IAAA,CAAC,EAAD,CAAa,OAAQ,EAAI,aAAc,KAAM,EAAY,EAAI,YAAY,EACtE,SAAA,EAAa,CAAG,CACN,CAAA,EACZ,EAAI,WAAa,KAAO,MACvB,EAAA,EAAA,KAAA,CAAC,OAAD,CAAM,UAAW,EAAO,MAAxB,SAAA,CAA+B,SAAO,EAAI,QAAe,GAExD,IAEJ,EAAI,MAAM,IAAK,IACd,EAAA,EAAA,IAAA,CAAC,IAAD,CAAc,UAAW,EAAO,UAC7B,SAAA,CACA,EAFK,CAEL,CACJ,EAEA,EAAI,gBAAkB,KAAO,MAC5B,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CAA2B,yBACF,EAAI,cAC1B,EAAI,kBAAoB,MAAM,EAAI,SAAW,EAC7C,GAEF,CA9BK,EAAA,EAAI,SA8BT,CACN,CACE,CAAA,CAEA,KAGT,EAAA,EAAA,KAAA,CAAC,UAAD,CAAS,UAAW,EAAO,MAAO,kBAAgB,kBAAlD,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,UAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,KAAD,CAAI,GAAG,kBAAkB,UAAW,EAAO,WAAY,SAAA,OAEnD,CAAA,GACJ,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAAW,SAAA,gGAG7B,CAAA,CACA,CACJ,CAAA,EAAA,GAAU,OAAS,MAClB,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAAO,SAAA,gCAAiC,CAAA,GAE7D,EAAA,EAAA,KAAA,CAAA,EAAA,SAAA,CAAA,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,UAClB,SAAA,EACC,EACA,EAAS,MAAM,OACf,sCACF,CACC,CAAA,EACF,EAAS,MAAM,YAAc,KAAO,MACnC,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CAA2B,UACjB,EAAS,MAAM,UACtB,EAAS,MAAM,WAAa,KAAO,GAAK,YAAY,EAAS,MAAM,UACnE,CAEL,CAAA,CAAA,CAAA,CAAA,CAEG,GACN,GACE,CAAA,CAEb"}

package/dist/core/web/public/next/assets/{MutationTokenDialog-DA8t97XT.js → MutationTokenDialog-CFAkwOEt.js}

@@ -1,2 +1,2 @@
-import{a as e,n as t,o as n}from"./index-CZamKRUg.js";import{_ as r}from"./global-D6bTxIRn.js";import{t as i}from"./Dialog-CPM9JxBc.js";var a=n(e(),1),o={body:`_body_1kukj_1`,form:`_form_1kukj_8`,label:`_label_1kukj_14`,inputRow:`_inputRow_1kukj_19`,input:`_input_1kukj_19`,reveal:`_reveal_1kukj_40`,error:`_error_1kukj_51`,actions:`_actions_1kukj_56`,cancel:`_cancel_1kukj_63`,submit:`_submit_1kukj_72`},s=t(),c=/^[a-f0-9]{64}$/;function l({open:e,onClose:t,onUnlocked:n,reason:l,tokenLabel:u=`Mutation token`,tokenHelp:d=`the mutation token ashlr serve printed`}){let{setToken:f}=r(),[p,m]=(0,a.useState)(``),[h,g]=(0,a.useState)(!1),[_,v]=(0,a.useState)(null),y=(0,a.useRef)(null),b=(0,a.useId)(),x=(0,a.useId)();function S(e){e.preventDefault();let r=p.trim();if(!c.test(r)){v(`Expected 64 hex characters — ${d}.`);return}f(r),m(``),v(null),t(),n?.()}return(0,s.jsxs)(i,{open:e,onClose:t,titleId:b,title:`Unlock actions`,initialFocusRef:y,children:[(0,s.jsxs)(`p`,{className:o.body,children:[l??`This action mutates the fleet and requires the dispatch token.`,` It is held in memory only, for this browser tab, and is cleared automatically after 20 minutes idle.`]}),(0,s.jsxs)(`form`,{onSubmit:S,className:o.form,noValidate:!0,children:[(0,s.jsx)(`label`,{htmlFor:x,className:o.label,children:u}),(0,s.jsxs)(`div`,{className:o.inputRow,children:[(0,s.jsx)(`input`,{ref:y,id:x,type:h?`text`:`password`,autoComplete:`off`,autoCorrect:`off`,spellCheck:!1,className:o.input,value:p,onChange:e=>m(e.target.value),"aria-invalid":_?!0:void 0,placeholder:`64 hex characters`}),(0,s.jsx)(`button`,{type:`button`,className:o.reveal,onClick:()=>g(e=>!e),"aria-pressed":h,children:h?`Hide`:`Show`})]}),_?(0,s.jsx)(`p`,{className:o.error,role:`alert`,children:_}):null,(0,s.jsxs)(`div`,{className:o.actions,children:[(0,s.jsx)(`button`,{type:`button`,className:o.cancel,onClick:t,children:`Cancel`}),(0,s.jsx)(`button`,{type:`submit`,className:o.submit,disabled:p.trim().length===0,children:`Unlock`})]})]})]})}export{l as t};
-//# sourceMappingURL=MutationTokenDialog-DA8t97XT.js.map
+import{a as e,n as t,o as n}from"./index-D2Eik-zt.js";import{_ as r}from"./global-eaY9GyX3.js";import{t as i}from"./Dialog-BxdIfmFH.js";var a=n(e(),1),o={body:`_body_1kukj_1`,form:`_form_1kukj_8`,label:`_label_1kukj_14`,inputRow:`_inputRow_1kukj_19`,input:`_input_1kukj_19`,reveal:`_reveal_1kukj_40`,error:`_error_1kukj_51`,actions:`_actions_1kukj_56`,cancel:`_cancel_1kukj_63`,submit:`_submit_1kukj_72`},s=t(),c=/^[a-f0-9]{64}$/;function l({open:e,onClose:t,onUnlocked:n,reason:l,tokenLabel:u=`Mutation token`,tokenHelp:d=`the mutation token ashlr serve printed`}){let{setToken:f}=r(),[p,m]=(0,a.useState)(``),[h,g]=(0,a.useState)(!1),[_,v]=(0,a.useState)(null),y=(0,a.useRef)(null),b=(0,a.useId)(),x=(0,a.useId)();function S(e){e.preventDefault();let r=p.trim();if(!c.test(r)){v(`Expected 64 hex characters — ${d}.`);return}f(r),m(``),v(null),t(),n?.()}return(0,s.jsxs)(i,{open:e,onClose:t,titleId:b,title:`Unlock actions`,initialFocusRef:y,children:[(0,s.jsxs)(`p`,{className:o.body,children:[l??`This action mutates the fleet and requires the dispatch token.`,` It is held in memory only, for this browser tab, and is cleared automatically after 20 minutes idle.`]}),(0,s.jsxs)(`form`,{onSubmit:S,className:o.form,noValidate:!0,children:[(0,s.jsx)(`label`,{htmlFor:x,className:o.label,children:u}),(0,s.jsxs)(`div`,{className:o.inputRow,children:[(0,s.jsx)(`input`,{ref:y,id:x,type:h?`text`:`password`,autoComplete:`off`,autoCorrect:`off`,spellCheck:!1,className:o.input,value:p,onChange:e=>m(e.target.value),"aria-invalid":_?!0:void 0,placeholder:`64 hex characters`}),(0,s.jsx)(`button`,{type:`button`,className:o.reveal,onClick:()=>g(e=>!e),"aria-pressed":h,children:h?`Hide`:`Show`})]}),_?(0,s.jsx)(`p`,{className:o.error,role:`alert`,children:_}):null,(0,s.jsxs)(`div`,{className:o.actions,children:[(0,s.jsx)(`button`,{type:`button`,className:o.cancel,onClick:t,children:`Cancel`}),(0,s.jsx)(`button`,{type:`submit`,className:o.submit,disabled:p.trim().length===0,children:`Unlock`})]})]})]})}export{l as t};
+//# sourceMappingURL=MutationTokenDialog-CFAkwOEt.js.map

package/dist/core/web/public/next/assets/{MutationTokenDialog-DA8t97XT.js.map → MutationTokenDialog-CFAkwOEt.js.map}

@@ -1 +1 @@
-{"version":3,"file":"MutationTokenDialog-DA8t97XT.js","names":[],"sources":["../../../../../../src/web-ui/components/auth/MutationTokenDialog.module.css","../../../../../../src/web-ui/components/auth/MutationTokenDialog.tsx"],"sourcesContent":[".body {\n  font-size: var(--text-sm-size);\n  line-height: var(--text-sm-line);\n  color: var(--text-secondary);\n  margin-bottom: var(--space-4);\n}\n\n.form {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-2);\n}\n\n.label {\n  font-size: var(--text-sm-size);\n  font-weight: var(--font-weight-medium);\n}\n\n.inputRow {\n  display: flex;\n  gap: var(--space-2);\n}\n\n.input {\n  flex: 1;\n  padding: var(--space-3);\n  border-radius: var(--radius-md);\n  border: 1px solid var(--border-default);\n  background: var(--bg-input);\n  font-family: var(--font-mono);\n  font-size: var(--text-sm-size);\n  min-width: 0;\n}\n\n.input:focus-visible {\n  border-color: var(--border-focus);\n  box-shadow: var(--shadow-focus-ring);\n}\n\n.reveal {\n  padding: 0 var(--space-3);\n  border-radius: var(--radius-md);\n  border: 1px solid var(--border-default);\n  font-size: var(--text-sm-size);\n  color: var(--text-secondary);\n}\n.reveal:hover {\n  background: var(--bg-hover);\n}\n\n.error {\n  color: var(--status-danger-fg);\n  font-size: var(--text-sm-size);\n}\n\n.actions {\n  display: flex;\n  justify-content: flex-end;\n  gap: var(--space-2);\n  margin-top: var(--space-3);\n}\n\n.cancel {\n  padding: var(--space-2) var(--space-4);\n  border-radius: var(--radius-md);\n  color: var(--text-secondary);\n}\n.cancel:hover {\n  background: var(--bg-hover);\n}\n\n.submit {\n  padding: var(--space-2) var(--space-4);\n  border-radius: var(--radius-md);\n  background: var(--accent-500);\n  color: var(--text-on-accent);\n  font-weight: var(--font-weight-medium);\n}\n.submit:hover:not(:disabled) {\n  background: var(--accent-600);\n}\n.submit:disabled {\n  opacity: 0.5;\n  cursor: not-allowed;\n}\n","/**\n * components/auth/MutationTokenDialog.tsx — replaces window.prompt() for\n * the mutation token (foundation brief item 5, the \"biggest reason\n * operators abandon the UI for the CLI\" finding). A focus-managed dialog\n * instead of a blocking native prompt, and a session-scoped hold (see\n * auth-store.ts) so approving 12 proposals is one paste, not twelve.\n *\n * The token is NEVER written to localStorage/sessionStorage/cookies — only\n * held in an in-memory module variable in auth-store.ts, cleared on tab\n * close, idle timeout, or the explicit \"Lock\" action here.\n */\nimport { useId, useRef, useState, type FormEvent } from 'react';\nimport { Dialog } from '../primitives/Dialog.js';\nimport { useMutationHold } from '../../data/hooks.js';\nimport styles from './MutationTokenDialog.module.css';\n\nconst TOKEN_RE = /^[a-f0-9]{64}$/;\n\nexport interface MutationTokenDialogProps {\n  open: boolean;\n  onClose: () => void;\n  onUnlocked?: () => void;\n  /** Human context for why the token is being requested right now. */\n  reason?: string;\n  /** Scoped consoles can name their own startup token without changing the hold. */\n  tokenLabel?: string;\n  tokenHelp?: string;\n}\n\nexport function MutationTokenDialog({ open, onClose, onUnlocked, reason, tokenLabel = 'Mutation token',\n  tokenHelp = 'the mutation token ashlr serve printed' }: MutationTokenDialogProps) {\n  const { setToken } = useMutationHold();\n  const [value, setValue] = useState('');\n  const [reveal, setReveal] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const inputRef = useRef<HTMLInputElement>(null);\n  const titleId = useId();\n  const inputId = useId();\n\n  function submit(e: FormEvent) {\n    e.preventDefault();\n    const trimmed = value.trim();\n    if (!TOKEN_RE.test(trimmed)) {\n      setError(`Expected 64 hex characters — ${tokenHelp}.`);\n      return;\n    }\n    setToken(trimmed);\n    setValue('');\n    setError(null);\n    onClose();\n    onUnlocked?.();\n  }\n\n  return (\n    <Dialog open={open} onClose={onClose} titleId={titleId} title=\"Unlock actions\" initialFocusRef={inputRef}>\n      <p className={styles.body}>\n        {reason ?? 'This action mutates the fleet and requires the dispatch token.'} It is held in\n        memory only, for this browser tab, and is cleared automatically after 20 minutes idle.\n      </p>\n      <form onSubmit={submit} className={styles.form} noValidate>\n        <label htmlFor={inputId} className={styles.label}>\n          {tokenLabel}\n        </label>\n        <div className={styles.inputRow}>\n          <input\n            ref={inputRef}\n            id={inputId}\n            type={reveal ? 'text' : 'password'}\n            autoComplete=\"off\"\n            autoCorrect=\"off\"\n            spellCheck={false}\n            className={styles.input}\n            value={value}\n            onChange={(e) => setValue(e.target.value)}\n            aria-invalid={error ? true : undefined}\n            placeholder=\"64 hex characters\"\n          />\n          <button\n            type=\"button\"\n            className={styles.reveal}\n            onClick={() => setReveal((r) => !r)}\n            aria-pressed={reveal}\n          >\n            {reveal ? 'Hide' : 'Show'}\n          </button>\n        </div>\n        {error ? (\n          <p className={styles.error} role=\"alert\">\n            {error}\n          </p>\n        ) : null}\n        <div className={styles.actions}>\n          <button type=\"button\" className={styles.cancel} onClick={onClose}>\n            Cancel\n          </button>\n          <button type=\"submit\" className={styles.submit} disabled={value.trim().length === 0}>\n            Unlock\n          </button>\n        </div>\n      </form>\n    </Dialog>\n  );\n}\n"],"mappings":"2ZCgBM,EAAW,iBAajB,SAAgB,EAAoB,CAAE,OAAM,UAAS,aAAY,SAAQ,aAAa,iBACpF,YAAY,0CAAsE,CAClF,GAAM,CAAE,YAAa,EAAgB,EAC/B,CAAC,EAAO,IAAA,EAAY,EAAA,SAAA,CAAS,EAAE,EAC/B,CAAC,EAAQ,IAAA,EAAa,EAAA,SAAA,CAAS,EAAK,EACpC,CAAC,EAAO,IAAA,EAAY,EAAA,SAAA,CAAwB,IAAI,EAChD,GAAA,EAAW,EAAA,OAAA,CAAyB,IAAI,EACxC,GAAA,EAAU,EAAA,MAAA,CAAM,EAChB,GAAA,EAAU,EAAA,MAAA,CAAM,EAEtB,SAAS,EAAO,EAAc,CAC5B,EAAE,eAAe,EACjB,IAAM,EAAU,EAAM,KAAK,EAC3B,GAAI,CAAC,EAAS,KAAK,CAAO,EAAG,CAC3B,EAAS,gCAAgC,EAAU,EAAE,EACrD,MACF,CACA,EAAS,CAAO,EAChB,EAAS,EAAE,EACX,EAAS,IAAI,EACb,EAAQ,EACR,IAAa,CACf,CAEA,OACE,EAAA,EAAA,KAAA,CAAC,EAAD,CAAc,OAAe,UAAkB,UAAS,MAAM,iBAAiB,gBAAiB,EAAhG,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CACG,GAAU,iEAAiE,uGAE3E,CACH,CAAA,GAAA,EAAA,EAAA,KAAA,CAAC,OAAD,CAAM,SAAU,EAAQ,UAAW,EAAO,KAAM,WAAA,GAAhD,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,QAAD,CAAO,QAAS,EAAS,UAAW,EAAO,MACxC,SAAA,CACI,CAAA,GACP,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,SAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,QAAD,CACE,IAAK,EACL,GAAI,EACJ,KAAM,EAAS,OAAS,WACxB,aAAa,MACb,YAAY,MACZ,WAAY,GACZ,UAAW,EAAO,MACX,QACP,SAAW,GAAM,EAAS,EAAE,OAAO,KAAK,EACxC,eAAc,EAAQ,GAAO,IAAA,GAC7B,YAAY,mBACb,CAAA,GACD,EAAA,EAAA,IAAA,CAAC,SAAD,CACE,KAAK,SACL,UAAW,EAAO,OAClB,YAAe,EAAW,GAAM,CAAC,CAAC,EAClC,eAAc,EAEb,SAAA,EAAS,OAAS,MACb,CAAA,CACL,IACJ,GACC,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAAO,KAAK,QAC9B,SAAA,CACA,CAAA,EACD,MACJ,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,QAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,SAAD,CAAQ,KAAK,SAAS,UAAW,EAAO,OAAQ,QAAS,EAAS,SAAA,QAE1D,CAAA,GACR,EAAA,EAAA,IAAA,CAAC,SAAD,CAAQ,KAAK,SAAS,UAAW,EAAO,OAAQ,SAAU,EAAM,KAAK,CAAC,CAAC,SAAW,EAAG,SAAA,QAE7E,CAAA,CACL,GACD,CACA,CAAA,CAAA,GAEZ"}
+{"version":3,"file":"MutationTokenDialog-CFAkwOEt.js","names":[],"sources":["../../../../../../src/web-ui/components/auth/MutationTokenDialog.module.css","../../../../../../src/web-ui/components/auth/MutationTokenDialog.tsx"],"sourcesContent":[".body {\n  font-size: var(--text-sm-size);\n  line-height: var(--text-sm-line);\n  color: var(--text-secondary);\n  margin-bottom: var(--space-4);\n}\n\n.form {\n  display: flex;\n  flex-direction: column;\n  gap: var(--space-2);\n}\n\n.label {\n  font-size: var(--text-sm-size);\n  font-weight: var(--font-weight-medium);\n}\n\n.inputRow {\n  display: flex;\n  gap: var(--space-2);\n}\n\n.input {\n  flex: 1;\n  padding: var(--space-3);\n  border-radius: var(--radius-md);\n  border: 1px solid var(--border-default);\n  background: var(--bg-input);\n  font-family: var(--font-mono);\n  font-size: var(--text-sm-size);\n  min-width: 0;\n}\n\n.input:focus-visible {\n  border-color: var(--border-focus);\n  box-shadow: var(--shadow-focus-ring);\n}\n\n.reveal {\n  padding: 0 var(--space-3);\n  border-radius: var(--radius-md);\n  border: 1px solid var(--border-default);\n  font-size: var(--text-sm-size);\n  color: var(--text-secondary);\n}\n.reveal:hover {\n  background: var(--bg-hover);\n}\n\n.error {\n  color: var(--status-danger-fg);\n  font-size: var(--text-sm-size);\n}\n\n.actions {\n  display: flex;\n  justify-content: flex-end;\n  gap: var(--space-2);\n  margin-top: var(--space-3);\n}\n\n.cancel {\n  padding: var(--space-2) var(--space-4);\n  border-radius: var(--radius-md);\n  color: var(--text-secondary);\n}\n.cancel:hover {\n  background: var(--bg-hover);\n}\n\n.submit {\n  padding: var(--space-2) var(--space-4);\n  border-radius: var(--radius-md);\n  background: var(--accent-500);\n  color: var(--text-on-accent);\n  font-weight: var(--font-weight-medium);\n}\n.submit:hover:not(:disabled) {\n  background: var(--accent-600);\n}\n.submit:disabled {\n  opacity: 0.5;\n  cursor: not-allowed;\n}\n","/**\n * components/auth/MutationTokenDialog.tsx — replaces window.prompt() for\n * the mutation token (foundation brief item 5, the \"biggest reason\n * operators abandon the UI for the CLI\" finding). A focus-managed dialog\n * instead of a blocking native prompt, and a session-scoped hold (see\n * auth-store.ts) so approving 12 proposals is one paste, not twelve.\n *\n * The token is NEVER written to localStorage/sessionStorage/cookies — only\n * held in an in-memory module variable in auth-store.ts, cleared on tab\n * close, idle timeout, or the explicit \"Lock\" action here.\n */\nimport { useId, useRef, useState, type FormEvent } from 'react';\nimport { Dialog } from '../primitives/Dialog.js';\nimport { useMutationHold } from '../../data/hooks.js';\nimport styles from './MutationTokenDialog.module.css';\n\nconst TOKEN_RE = /^[a-f0-9]{64}$/;\n\nexport interface MutationTokenDialogProps {\n  open: boolean;\n  onClose: () => void;\n  onUnlocked?: () => void;\n  /** Human context for why the token is being requested right now. */\n  reason?: string;\n  /** Scoped consoles can name their own startup token without changing the hold. */\n  tokenLabel?: string;\n  tokenHelp?: string;\n}\n\nexport function MutationTokenDialog({ open, onClose, onUnlocked, reason, tokenLabel = 'Mutation token',\n  tokenHelp = 'the mutation token ashlr serve printed' }: MutationTokenDialogProps) {\n  const { setToken } = useMutationHold();\n  const [value, setValue] = useState('');\n  const [reveal, setReveal] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const inputRef = useRef<HTMLInputElement>(null);\n  const titleId = useId();\n  const inputId = useId();\n\n  function submit(e: FormEvent) {\n    e.preventDefault();\n    const trimmed = value.trim();\n    if (!TOKEN_RE.test(trimmed)) {\n      setError(`Expected 64 hex characters — ${tokenHelp}.`);\n      return;\n    }\n    setToken(trimmed);\n    setValue('');\n    setError(null);\n    onClose();\n    onUnlocked?.();\n  }\n\n  return (\n    <Dialog open={open} onClose={onClose} titleId={titleId} title=\"Unlock actions\" initialFocusRef={inputRef}>\n      <p className={styles.body}>\n        {reason ?? 'This action mutates the fleet and requires the dispatch token.'} It is held in\n        memory only, for this browser tab, and is cleared automatically after 20 minutes idle.\n      </p>\n      <form onSubmit={submit} className={styles.form} noValidate>\n        <label htmlFor={inputId} className={styles.label}>\n          {tokenLabel}\n        </label>\n        <div className={styles.inputRow}>\n          <input\n            ref={inputRef}\n            id={inputId}\n            type={reveal ? 'text' : 'password'}\n            autoComplete=\"off\"\n            autoCorrect=\"off\"\n            spellCheck={false}\n            className={styles.input}\n            value={value}\n            onChange={(e) => setValue(e.target.value)}\n            aria-invalid={error ? true : undefined}\n            placeholder=\"64 hex characters\"\n          />\n          <button\n            type=\"button\"\n            className={styles.reveal}\n            onClick={() => setReveal((r) => !r)}\n            aria-pressed={reveal}\n          >\n            {reveal ? 'Hide' : 'Show'}\n          </button>\n        </div>\n        {error ? (\n          <p className={styles.error} role=\"alert\">\n            {error}\n          </p>\n        ) : null}\n        <div className={styles.actions}>\n          <button type=\"button\" className={styles.cancel} onClick={onClose}>\n            Cancel\n          </button>\n          <button type=\"submit\" className={styles.submit} disabled={value.trim().length === 0}>\n            Unlock\n          </button>\n        </div>\n      </form>\n    </Dialog>\n  );\n}\n"],"mappings":"2ZCgBM,EAAW,iBAajB,SAAgB,EAAoB,CAAE,OAAM,UAAS,aAAY,SAAQ,aAAa,iBACpF,YAAY,0CAAsE,CAClF,GAAM,CAAE,YAAa,EAAgB,EAC/B,CAAC,EAAO,IAAA,EAAY,EAAA,SAAA,CAAS,EAAE,EAC/B,CAAC,EAAQ,IAAA,EAAa,EAAA,SAAA,CAAS,EAAK,EACpC,CAAC,EAAO,IAAA,EAAY,EAAA,SAAA,CAAwB,IAAI,EAChD,GAAA,EAAW,EAAA,OAAA,CAAyB,IAAI,EACxC,GAAA,EAAU,EAAA,MAAA,CAAM,EAChB,GAAA,EAAU,EAAA,MAAA,CAAM,EAEtB,SAAS,EAAO,EAAc,CAC5B,EAAE,eAAe,EACjB,IAAM,EAAU,EAAM,KAAK,EAC3B,GAAI,CAAC,EAAS,KAAK,CAAO,EAAG,CAC3B,EAAS,gCAAgC,EAAU,EAAE,EACrD,MACF,CACA,EAAS,CAAO,EAChB,EAAS,EAAE,EACX,EAAS,IAAI,EACb,EAAQ,EACR,IAAa,CACf,CAEA,OACE,EAAA,EAAA,KAAA,CAAC,EAAD,CAAc,OAAe,UAAkB,UAAS,MAAM,iBAAiB,gBAAiB,EAAhG,SAAA,EACE,EAAA,EAAA,KAAA,CAAC,IAAD,CAAG,UAAW,EAAO,KAArB,SAAA,CACG,GAAU,iEAAiE,uGAE3E,CACH,CAAA,GAAA,EAAA,EAAA,KAAA,CAAC,OAAD,CAAM,SAAU,EAAQ,UAAW,EAAO,KAAM,WAAA,GAAhD,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,QAAD,CAAO,QAAS,EAAS,UAAW,EAAO,MACxC,SAAA,CACI,CAAA,GACP,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,SAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,QAAD,CACE,IAAK,EACL,GAAI,EACJ,KAAM,EAAS,OAAS,WACxB,aAAa,MACb,YAAY,MACZ,WAAY,GACZ,UAAW,EAAO,MACX,QACP,SAAW,GAAM,EAAS,EAAE,OAAO,KAAK,EACxC,eAAc,EAAQ,GAAO,IAAA,GAC7B,YAAY,mBACb,CAAA,GACD,EAAA,EAAA,IAAA,CAAC,SAAD,CACE,KAAK,SACL,UAAW,EAAO,OAClB,YAAe,EAAW,GAAM,CAAC,CAAC,EAClC,eAAc,EAEb,SAAA,EAAS,OAAS,MACb,CAAA,CACL,IACJ,GACC,EAAA,EAAA,IAAA,CAAC,IAAD,CAAG,UAAW,EAAO,MAAO,KAAK,QAC9B,SAAA,CACA,CAAA,EACD,MACJ,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAO,QAAvB,SAAA,EACE,EAAA,EAAA,IAAA,CAAC,SAAD,CAAQ,KAAK,SAAS,UAAW,EAAO,OAAQ,QAAS,EAAS,SAAA,QAE1D,CAAA,GACR,EAAA,EAAA,IAAA,CAAC,SAAD,CAAQ,KAAK,SAAS,UAAW,EAAO,OAAQ,SAAU,EAAM,KAAK,CAAC,CAAC,SAAW,EAAG,SAAA,QAE7E,CAAA,CACL,GACD,CACA,CAAA,CAAA,GAEZ"}