@bloomscorp/blooms-ai-embed 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -2,6 +2,146 @@
 
 All notable changes to `@bloomscorp/blooms-ai-embed`.
 
+## 0.2.0
+
+Twelve new components, and the bundle is now code-split so adopting one does not
+cost you all of them.
+
+Upgrading is a drop-in **unless you branch on `customElements.get()`** or stage
+`dist/` by hand — see *Action if you are upgrading* below.
+
+### Added
+
+- **Twelve new elements.** `<blooms-login>` is no longer the only thing you can
+  embed:
+
+  | | | |
+  |---|---|---|
+  | `<blooms-crawl-insights>` | `<blooms-sitemap-crawl>` | `<blooms-sitemap-crawl-detail>` |
+  | `<blooms-keywords>` | `<blooms-keyword-detail>` | `<blooms-reports>` |
+  | `<blooms-gmc-analytics>` | `<blooms-social-media-calendar>` | `<blooms-smc-day-detail>` |
+  | `<blooms-influencer-dashboard>` | `<blooms-influencer-detail>` | `<blooms-blog-strategy>` |
+
+  Each takes its state through attributes or properties rather than a URL, since
+  a custom element cannot read the host page's address bar: `project-id` on most,
+  plus `crawl-id`, `keyword-id`, `influencer-id`, `strategy-id`, `event-id`,
+  `date-iso` where the component addresses one record. Components that used to
+  navigate now emit a `bloomsnavigate` event describing where they would have
+  gone — your app decides what that means.
+
+  Declared in `HTMLElementTagNameMap`, so TypeScript knows all thirteen tags.
+
+- **`preload(...features)`.** Fetches a component's code before it is needed:
+
+  ```js
+  await BloomsEmbed.preload('crawl-insights', 'keywords');
+  ```
+
+  Optional and never throws — a failed preload just means the chunk is fetched
+  later, when the component is actually mounted.
+
+### Changed
+
+- **The bundle is code-split: one lazily-fetched chunk per component.** Shipping
+  thirteen components eagerly had grown the download to 162 kB gzipped, with the
+  three largest still unconverted — so every host paid for every component to use
+  one. Now:
+
+  | | Transfer (gzipped) |
+  |---|---|
+  | Loader + shared core | **~65 kB** |
+  | …plus one component | ~69 kB |
+  | …plus all thirteen | ~180 kB |
+
+  `dist/blooms-embed.js` is a ~3 kB loader; the components live in sibling
+  `dist/chunk-*.js` files that it imports by relative path on first use.
+
+- **Elements are defined on demand, not at import.** A tag is registered the
+  first time an instance of it appears, and the browser upgrades the element that
+  was already there. Tags in your HTML behave exactly as before and there is
+  nothing to await. One observable difference:
+
+  ```js
+  import { BloomsEmbed } from '@bloomscorp/blooms-ai-embed';
+  customElements.get('blooms-crawl-insights');   // undefined until one is used
+  ```
+
+  Setting a **property** before a component's chunk arrives is safe — the value
+  is applied once the component is defined. Attributes were never affected.
+
+- **Write actions are enabled** for Social Media Calendar, Influencers and Blog
+  Strategy — create, edit, reschedule, delete, and the AI generation steps. They
+  were read-only in `0.1.x`, with controls that rendered and then returned 403.
+
+### Action if you are upgrading
+
+1. **If you bundle the package** (the recommended setup, and what the Electron
+   guide describes) — nothing to do. Webpack, Vite, esbuild and Rollup all follow
+   the dynamic imports and emit their own chunks.
+
+2. **If you stage `dist/` by hand**, copy **all** of it. `chunk-*.js` must sit in
+   the same directory as `blooms-embed.js`. Copying only the entry leaves you with
+   a package that installs cleanly and renders every component as a blank
+   element, with one console error per component as the only clue.
+
+3. **Remove any `customElements.get()` guard** around showing a component. It was
+   reliable in `0.1.x` because every tag was defined at import; it is not now.
+   Place the tag, or call `mount()`, and let the loader do its work.
+
+### Known gaps, stated so they are not surprises
+
+- `<blooms-keyword-detail>`'s Search Console section is **empty when embedded**.
+  The underlying route takes its project id as a query parameter and carries no
+  authorization of its own, and our allowlist pins project ids in the path — so
+  exposing it would have handed every embedded session cross-project Search
+  Console data. The route is being fixed rather than the allowlist widened.
+- Report generation (Crawl Insights) and bulk delete (Reports) are hidden when
+  embedded: their output is delivered to the blooms.ai portal, which a host app
+  cannot reach. Starting a job whose result you cannot collect is worse than not
+  offering it.
+
+## 0.1.1
+
+Everything here came from the first production Electron integration reporting
+against `0.1.0`. No API changes — upgrading is a drop-in.
+
+### Fixed
+
+- **Poppins is now self-hosted.** The stylesheet carried 18 `@font-face` rules
+  pointing at `fonts.gstatic.com`, inherited from a redundant `@import` in the
+  portal's global stylesheet. On a third-party page that is blocked by a
+  `font-src 'self'` CSP — so components silently fell back to a system font and
+  no longer matched blooms.ai — and it needed the network, contradicting the
+  claim that sign-in renders offline.
+
+  The package now ships the Poppins latin subset (400/500/600/700, **31 kB**) in
+  `dist/media/`, referenced relative to the stylesheet so it resolves through
+  `assetBase` in every delivery mode. The stylesheet shrank from 12.6 kB to
+  7.8 kB.
+
+  **Action if you are upgrading:** copy `dist/media/` alongside
+  `dist/blooms-embed.css`. Copying only the CSS leaves the fonts behind and the
+  `@font-face` rules 404. You can now drop `https://fonts.gstatic.com` from your
+  `font-src`.
+
+- **Documentation named a host that does not exist.** Examples used
+  `https://api.blooms.ai`, which has never resolved. The production API origin is
+  `https://z.bloomscorp.com`. Corrected throughout — it matters because this is
+  the value integrators pin in a CSP.
+
+- **Google-provisioned accounts were described wrongly.** The docs said such
+  users should "set a password in the portal first". They cannot: password reset
+  refuses them with `409 PASSWORD_NOT_APPLICABLE` by design, so that an account
+  governed by Google never grows a second credential. There is no self-service
+  path — a blooms.ai admin must provision a separate local account. Embedded
+  Google sign-in is planned, not built.
+
+### Changed
+
+- The `0.1.0` changelog understated what shipped. `mount()`, `projects()`,
+  `project()`, `setProject()` and `can(key, projectId)` were all present in that
+  release's type declarations; they are now listed below.
+
 ## 0.1.0
 
 First release.
@@ -11,7 +151,12 @@ First release.
   components locally instead of loading remote code into a renderer, and work offline.
 - Importing the package defines the custom elements (`<blooms-login>`) as a side effect and
   exports the typed `BloomsEmbed` SDK: `configure`, `mode`, `manifest`, `login`, `session`,
-  `resume`, `can`, `logout`, `on`.
+  `resume`, `can`, `projects`, `project`, `setProject`, `logout`, `on`, `mount`.
+- Multi-project integrations: one token can span several projects, and `projects()` /
+  `setProject()` / `can(key, projectId)` switch between them locally with no re-authentication.
+  `can()` returns `false` for a project the session cannot act on rather than falling back.
+- `mount(target, { feature })` renders a component in whichever mode `configure()` resolved —
+  the custom element directly, or the iframe shell for an opaque origin.
 - Hand-written TypeScript declarations for the whole public surface, including
   `<blooms-login>` in `HTMLElementTagNameMap` and `BloomsEmbed` on `Window`.
 - Importing outside a browser throws an explanatory error naming the likely cause (SSR, or the

package/README.md

@@ -44,7 +44,7 @@ in that project, narrowed further to the features enabled on your token. No sess
 
   BloomsEmbed.configure({
     token: 'blm_embed_9f2c…',
-    apiBase: 'https://api.blooms.ai',
+    apiBase: 'https://z.bloomscorp.com',
   });
 
   BloomsEmbed.on('session', event => {
@@ -59,11 +59,49 @@ That is the whole integration. Importing the package defines the elements and in
 `<blooms-login>` renders the sign-in form, remembers the session across reloads, and revalidates
 it on the next load.
 
+### Elements in this bundle
+
+| Tag | What it renders | Token ceiling it needs |
+|---|---|---|
+| `<blooms-login>` | Sign-in form, session persistence, precise error states | — |
+| `<blooms-crawl-insights>` | Crawl results: pages crawled, broken links, page issues, missing meta, duplicate titles, health score. Starts crawls and re-scans single URLs. | `crawl-insights` (or `crawl`) |
+| `<blooms-sitemap-crawl>` | Crawl from a sitemap: start a run, watch progress, browse history. | `sitemap` (or `crawl`) |
+| `<blooms-sitemap-crawl-detail>` | One sitemap run in detail. Takes `crawl-id`. | `sitemap` (or `crawl`) |
+| `<blooms-keywords>` | Tracked keywords: rank, volume, difficulty, trend. Adds keywords, triggers a rank sync. | `manager` |
+| `<blooms-keyword-detail>` | One keyword in detail. Takes `keyword-id`. Its Search Console section is empty when embedded — see below. | `manager` |
+| `<blooms-reports>` | Report list and downloads. Generation and bulk delete are hidden when embedded. | `manager` |
+| `<blooms-gmc-analytics>` | Google Merchant Centre overview: feed health, disapprovals, account issues. | `manager` |
+| `<blooms-social-media-calendar>` | Content calendar: month and list views, statuses, attachments, assignees. Create, edit, reschedule, delete. Takes `event-id` to deep-link a drawer. | `social-media-calendar` |
+| `<blooms-smc-day-detail>` | One day of the calendar. Takes `date-iso` (`YYYY-MM-DD`), required. | `social-media-calendar` |
+| `<blooms-influencer-dashboard>` | Tracked influencers with tiers, platforms, latest metrics. Create and edit. | `influencer-management` |
+| `<blooms-influencer-detail>` | One influencer: profile, platforms, snapshots. Takes `influencer-id`. | `influencer-management` |
+| `<blooms-blog-strategy>` | The blog authoring workflow: topic → SEO research → outline → draft → visuals → metadata → review → publish → promotion → performance. Takes `strategy-id` and `step`. | `blog-publishing` |
+
+A `manager` or `owner` ceiling covers all of them, so one token needs no edit as
+you adopt more. The keys above matter only for a deliberately narrow ceiling —
+and Keywords, Reports and GMC are gated on `manager` itself, so a narrow ceiling
+cannot include them without including everything. A ceiling is never a grant: the
+signed-in user's own per-project permissions are evaluated on every request.
+
+Components that would navigate emit `bloomsnavigate` instead of routing — the
+detail is in the Electron guide, and the payload is typed.
+
+**Two deliberate gaps.** `<blooms-keyword-detail>`'s Search Console section is
+empty when embedded: that route takes its project id as a query parameter and has
+no authorization of its own, so exposing it would leak cross-project data — being
+fixed server-side. Report generation and bulk delete are hidden because their
+output is delivered to the blooms.ai portal, which your app cannot reach.
+
+Feature elements render a sign-in prompt until a session exists, so you can place them
+unconditionally. Each takes an optional `project-id`; omit it and the element follows the
+session's active project, so `BloomsEmbed.setProject()` moves it.
+
 Three things worth knowing:
 
-- **`configure()` once, early.** Elements placed in your HTML upgrade the moment the package
-  evaluates, which is before your `configure()` call runs. They wait for it rather than failing,
-  showing a skeleton meanwhile — so a slow `configure()` is a slow first paint, not an error.
+- **`configure()` once, early.** An element placed in your HTML is upgraded when its chunk
+  arrives, which may be before or after your `configure()` call. Either order is fine: it waits
+  for configuration rather than failing, showing a skeleton meanwhile — so a slow `configure()`
+  is a slow first paint, not an error.
 - **`apiBase` is optional** when you load the bundle from blooms.ai, because it defaults to the
   bundle's own origin. When you install from npm the bundle's origin is *your* app, so **pass
   `apiBase` explicitly**.
@@ -79,6 +117,7 @@ Three things worth knowing:
 | `version` | `string` | Bundle version. |
 | `configure` | `(config: BloomsEmbedConfig) => void` | Call first. Throws on a missing token or a token that is not `blm_embed_…`. |
 | `mode` | `() => 'element' \| 'iframe' \| null` | The resolved rendering mode; `null` before `configure()`. |
+| `preload` | `(...features: string[]) => Promise<void>` | Warms a component's lazy chunk before it is used. Optional, never throws. |
 | `manifest` | `() => Promise<EmbedManifest>` | Pre-login bootstrap: project name, enabled features, theme, branding flag, session TTL. |
 | `login` | `({ email, password }) => Promise<EmbedSessionState>` | Programmatic alternative to `<blooms-login>`, for hosts with their own form. |
 | `session` | `() => EmbedSessionState \| null` | The current session, restored from storage by `configure()`. Synchronous. |
@@ -167,8 +206,10 @@ The element handles its own states: loading skeleton, signed-out form, signed-in
 distinct messages for a wrong password, an account without access to the project, a deactivated
 or banned account, and rate limiting.
 
-Google sign-in is not offered. Accounts created with Google must set a password in the blooms.ai
-portal before they can use this form.
+Google sign-in is not offered, and accounts created with Google **cannot use this form at all** —
+they have no password and cannot set one (password reset refuses them by design, so that a
+Google-governed account never grows a second credential). A blooms.ai admin must provision such
+users a separate local account. Embedded Google sign-in is planned but not built.
 
 ---
 
@@ -210,7 +251,7 @@ These are read with fallbacks, so set only what you care about:
 ```js
 BloomsEmbed.configure({
   token: 'blm_embed_…',
-  apiBase: 'https://api.blooms.ai',
+  apiBase: 'https://z.bloomscorp.com',
   theme: { '--brand-primary': '#0f766e', '--radius-lg': '10px' },
 });
 ```
@@ -236,7 +277,7 @@ React version):
 import { useEffect } from 'react';
 import { BloomsEmbed } from '@bloomscorp/blooms-ai-embed';
 
-BloomsEmbed.configure({ token: 'blm_embed_…', apiBase: 'https://api.blooms.ai' });
+BloomsEmbed.configure({ token: 'blm_embed_…', apiBase: 'https://z.bloomscorp.com' });
 
 export function Login({ onSession }) {
   useEffect(() => BloomsEmbed.on('session', e => onSession(e.session)), [onSession]);
@@ -339,7 +380,7 @@ cause is an unregistered origin or a missing privileged-scheme registration, not
 
 ```
 default-src 'self' app:;
-connect-src 'self' https://api.blooms.ai;
+connect-src 'self' https://z.bloomscorp.com;
 style-src 'self' 'unsafe-inline';
 img-src 'self' data: https:;
 ```
@@ -381,7 +422,7 @@ and add `BloomsEmbed` to `Window`.
 ```ts
 import { BloomsEmbed, type EmbedSessionState } from '@bloomscorp/blooms-ai-embed';
 
-BloomsEmbed.configure({ token: 'blm_embed_…', apiBase: 'https://api.blooms.ai' });
+BloomsEmbed.configure({ token: 'blm_embed_…', apiBase: 'https://z.bloomscorp.com' });
 
 const session: EmbedSessionState | null = await BloomsEmbed.resume();
 if (session && BloomsEmbed.can('analytics')) { /* … */ }
@@ -407,6 +448,40 @@ In Electron, that also means: import it in the **renderer**, never in the main p
 
 ---
 
+## Lazy loading
+
+The bundle is code-split: a small loader plus one chunk per component, fetched the first time that
+component is used. A page embedding one component downloads one component (~69 kB gzipped, against
+~180 kB for the full set).
+
+Nothing in your markup changes. A tag in your HTML is defined when its chunk arrives and the
+browser upgrades the element that was already there. You never await anything.
+
+Three things worth knowing:
+
+- **Do not gate your UI on `customElements.get(tag)`.** It returns `undefined` until that
+  component has been used once. Before code splitting it was defined immediately, so a check like
+  this used to pass:
+
+  ```js
+  import { BloomsEmbed } from '@bloomscorp/blooms-ai-embed';
+  if (customElements.get('blooms-keywords')) { /* no longer true up front */ }
+  ```
+
+- **Setting properties early is safe.** `el.projectId = '...'` on an element whose chunk has not
+  arrived is preserved and applied once the component is defined. Attributes were never affected.
+
+- **Warm a chunk if you know what is next:**
+
+  ```js
+  await BloomsEmbed.preload('crawl-insights', 'keywords');
+  ```
+
+If you stage `dist/` by hand instead of importing the package, copy **all** of it — `chunk-*.js`
+must stay beside `blooms-embed.js`, and `media/*.woff2` beside the stylesheet.
+
+---
+
 ## Security notes worth reading once
 
 - The embed token is publishable, but it is not a secret to be careless with: it is what ties

package/dist/blooms-embed.css

@@ -1 +1 @@
-@charset "UTF-8";@font-face{font-family:Poppins;font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z11lFc-K.woff2) format("woff2");unicode-range:U+0900-097F,U+1CD0-1CF9,U+200C-200D,U+20A8,U+20B9,U+20F0,U+25CC,U+A830-A839,U+A8E0-A8FF,U+11B00-11B09}@font-face{font-family:Poppins;font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format("woff2");unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Poppins;font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Poppins;font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJbecmNE.woff2) format("woff2");unicode-range:U+0900-097F,U+1CD0-1CF9,U+200C-200D,U+20A8,U+20B9,U+20F0,U+25CC,U+A830-A839,U+A8E0-A8FF,U+11B00-11B09}@font-face{font-family:Poppins;font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format("woff2");unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Poppins;font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Poppins;font-style:normal;font-weight:500;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z11lFc-K.woff2) format("woff2");unicode-range:U+0900-097F,U+1CD0-1CF9,U+200C-200D,U+20A8,U+20B9,U+20F0,U+25CC,U+A830-A839,U+A8E0-A8FF,U+11B00-11B09}@font-face{font-family:Poppins;font-style:normal;font-weight:500;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2) format("woff2");unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Poppins;font-style:normal;font-weight:500;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Poppins;font-style:normal;font-weight:600;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z11lFc-K.woff2) format("woff2");unicode-range:U+0900-097F,U+1CD0-1CF9,U+200C-200D,U+20A8,U+20B9,U+20F0,U+25CC,U+A830-A839,U+A8E0-A8FF,U+11B00-11B09}@font-face{font-family:Poppins;font-style:normal;font-weight:600;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2) format("woff2");unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Poppins;font-style:normal;font-weight:600;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Poppins;font-style:normal;font-weight:700;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z11lFc-K.woff2) format("woff2");unicode-range:U+0900-097F,U+1CD0-1CF9,U+200C-200D,U+20A8,U+20B9,U+20F0,U+25CC,U+A830-A839,U+A8E0-A8FF,U+11B00-11B09}@font-face{font-family:Poppins;font-style:normal;font-weight:700;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2) format("woff2");unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Poppins;font-style:normal;font-weight:700;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Poppins;font-style:normal;font-weight:800;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z11lFc-K.woff2) format("woff2");unicode-range:U+0900-097F,U+1CD0-1CF9,U+200C-200D,U+20A8,U+20B9,U+20F0,U+25CC,U+A830-A839,U+A8E0-A8FF,U+11B00-11B09}@font-face{font-family:Poppins;font-style:normal;font-weight:800;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2) format("woff2");unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Poppins;font-style:normal;font-weight:800;font-display:swap;src:url(https://fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}:root{--color-primary-soft: #E3D8F1;--color-secondary: #DABECA;--color-accent: #E84855;--color-accent-soft: #f5c5c9;--color-text: #5D5F71;--color-text-muted: #9395a5;--color-bg: #f7f5fb;--color-card-bg: #FFFFFF;--color-sidebar-bg: #FFFFFF;--color-rail-bg: #f3f0f8;--color-border: #ede9f6;--color-hover: #f5f2fb;--font-sans: "Poppins", system-ui, -apple-system, sans-serif;--radius-sm: 6px;--radius-md: 10px;--radius-lg: 16px;--radius-full: 9999px;--shadow-sm: 0 1px 4px rgba(0, 0, 0, .06);--shadow-md: 0 4px 16px rgba(0, 0, 0, .08);--shadow-lg: 0 8px 32px rgba(0, 0, 0, .1);--z-agent-button: 9000;--z-agent-widget: 9100;--z-agent-menu: 9200;--z-agent-banner: 9300}@keyframes agent-halo-spin{to{transform:rotate(360deg)}}@keyframes agent-halo-pulse{0%,to{opacity:.8}50%{opacity:1}}*,*:before,*:after{box-sizing:border-box;margin:0;padding:0}html{font-size:16px;-webkit-text-size-adjust:100%;scroll-behavior:smooth}body{font-family:var(--font-sans);font-size:14px;color:var(--color-text);background-color:var(--color-bg);line-height:1.6;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.bui-tooltip{position:fixed;z-index:100000;max-width:260px;padding:7px 11px;border-radius:12px;background:#fff;color:#1d1d1f;border:1px solid rgba(0,0,0,.06);box-shadow:0 8px 26px #00000029,0 2px 6px #0000001a;font-family:var(--font-sans, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif);font-size:12.5px;font-weight:500;line-height:1.45;letter-spacing:.01em;text-align:left;white-space:normal;word-break:break-word;pointer-events:none;opacity:0;transform:scale(.92);transform-origin:center;transition:opacity .13s ease,transform .14s cubic-bezier(.34,1.56,.64,1)}.bui-tooltip--in{opacity:1;transform:scale(1)}.bui-tooltip__tail{position:absolute;z-index:-1;width:9px;height:9px;background:#fff;border:1px solid rgba(0,0,0,.06);border-radius:2px;transform:rotate(45deg)}.bui-tooltip__tail.is-bottom{bottom:-5px}.bui-tooltip__tail.is-top{top:-5px}.bui-tooltip__tail.is-right{right:-5px}.bui-tooltip__tail.is-left{left:-5px}@media (prefers-reduced-motion: reduce){.bui-tooltip{transition:opacity .1s ease;transform:none}.bui-tooltip--in{transform:none}}h1,h2,h3,h4,h5,h6{font-family:var(--font-sans);font-weight:700;line-height:1.3;color:var(--color-text)}a{color:var(--color-accent);text-decoration:none}a:hover{text-decoration:underline}p{line-height:1.7}.btn{display:inline-flex;align-items:center;gap:6px;padding:9px 18px;border-radius:var(--radius-md);font-family:var(--font-sans);font-size:13px;font-weight:600;cursor:pointer;border:1px solid transparent;transition:background .15s,border-color .15s,box-shadow .15s,opacity .15s;text-decoration:none;white-space:nowrap}.btn:disabled{opacity:.5;cursor:not-allowed;pointer-events:none}.btn-primary{background:var(--color-accent);color:#fff;border-color:var(--color-accent)}.btn-primary:hover{background:#d13d4a;border-color:#d13d4a;box-shadow:0 2px 8px #e848554d;text-decoration:none}.btn-outline{background:transparent;color:var(--color-text);border-color:var(--color-border)}.btn-outline:hover{background:var(--color-hover);border-color:#d5d0e4;text-decoration:none}.btn-ghost{background:transparent;color:var(--color-text-muted);border-color:transparent}.btn-ghost:hover{background:var(--color-hover);color:var(--color-text)}.btn-sm{padding:6px 12px;font-size:12px;border-radius:var(--radius-sm)}.btn-lg{padding:12px 24px;font-size:15px;border-radius:12px}input,textarea,select{font-family:var(--font-sans);font-size:14px;color:var(--color-text)}.text-muted{color:var(--color-text-muted)}.text-accent{color:var(--color-accent)}.text-sm{font-size:12px}.text-xs{font-size:11px}.font-semibold{font-weight:600}.font-bold{font-weight:700}.flex{display:flex}.flex-col{flex-direction:column}.items-center{align-items:center}.justify-between{justify-content:space-between}.gap-2{gap:8px}.gap-4{gap:16px}.w-full{width:100%}::-webkit-scrollbar{width:6px;height:6px}::-webkit-scrollbar-track{background:transparent}::-webkit-scrollbar-thumb{background:var(--color-border);border-radius:3px}::-webkit-scrollbar-thumb:hover{background:var(--color-secondary)}router-outlet+*{animation:fadeInUp .2s ease}@keyframes fadeInUp{0%{opacity:0;transform:translateY(6px)}to{opacity:1;transform:translateY(0)}}.pane-section{display:flex;flex-direction:column;gap:24px;max-width:520px}.pane-hd{display:flex;flex-direction:column;gap:4px;padding-bottom:20px;border-bottom:1px solid var(--color-border)}.pane-hd--row{flex-direction:row;align-items:flex-start;justify-content:space-between;gap:16px}.pane-title{font-size:15px;font-weight:700;color:var(--color-text);margin:0}.pane-desc{font-size:12px;color:var(--color-text-muted);margin:0;line-height:1.5}.pane-form{display:flex;flex-direction:column;gap:18px}.pane-success{font-size:12px;font-weight:500;color:#065f46;background:#d1fae5;border:1px solid #a7f3d0;border-radius:var(--radius-sm);padding:8px 12px;margin:0}.field{display:flex;flex-direction:column;gap:6px}.field__label{font-size:12px;font-weight:600;color:var(--color-text);letter-spacing:.02em;text-transform:uppercase}.field__input{padding:9px 13px;border:1px solid var(--color-border);border-radius:var(--radius-md);font-family:var(--font-sans);font-size:13px;color:var(--color-text);background:var(--color-bg);outline:none;transition:border-color .15s,box-shadow .15s;width:100%}.field__input:focus{border-color:var(--color-accent);box-shadow:0 0 0 3px #e8485514}.field__input--locked{opacity:.55;cursor:not-allowed;color:var(--color-text-muted)}.field__input:disabled{cursor:not-allowed}.field textarea.field__input{resize:vertical}.field__hint{font-size:11px;color:var(--color-text-muted)}@media (max-width: 768px){.btn{padding:8px 14px}.detail-table-wrap,.pages-table-wrap,.diff-table-wrap{overflow-x:auto;-webkit-overflow-scrolling:touch}.result-summary,.insight-grid,.pr-stats-grid{grid-template-columns:1fr 1fr!important}.sitemap-form{flex-direction:column}.pr-detail__cols,.diff-screen__body{grid-template-columns:1fr!important}.diff-files{display:none}.diff-files.mobile-show{display:block}.pr-filters__top{flex-direction:column;align-items:flex-start}.pr-filters__right{width:100%}.pr-search{max-width:100%!important;flex:1}.repo-card{flex-direction:column;align-items:flex-start}.repo-card__right{align-self:flex-start;flex-wrap:wrap}.history-item{flex-direction:column}.results-toolbar{flex-direction:column;align-items:flex-start}.diff-screen__title-row{flex-direction:column}.diff-screen__header-right{align-self:flex-start}}
+@charset "UTF-8";:root{--color-primary-soft: #E3D8F1;--color-secondary: #DABECA;--color-accent: #E84855;--color-accent-soft: #f5c5c9;--color-text: #5D5F71;--color-text-muted: #9395a5;--color-bg: #f7f5fb;--color-card-bg: #FFFFFF;--color-sidebar-bg: #FFFFFF;--color-rail-bg: #f3f0f8;--color-border: #ede9f6;--color-hover: #f5f2fb;--font-sans: "Poppins", system-ui, -apple-system, sans-serif;--radius-sm: 6px;--radius-md: 10px;--radius-lg: 16px;--radius-full: 9999px;--shadow-sm: 0 1px 4px rgba(0, 0, 0, .06);--shadow-md: 0 4px 16px rgba(0, 0, 0, .08);--shadow-lg: 0 8px 32px rgba(0, 0, 0, .1);--z-agent-button: 9000;--z-agent-widget: 9100;--z-agent-menu: 9200;--z-agent-banner: 9300}@keyframes agent-halo-spin{to{transform:rotate(360deg)}}@keyframes agent-halo-pulse{0%,to{opacity:.8}50%{opacity:1}}*,*:before,*:after{box-sizing:border-box;margin:0;padding:0}html{font-size:16px;-webkit-text-size-adjust:100%;scroll-behavior:smooth}body{font-family:var(--font-sans);font-size:14px;color:var(--color-text);background-color:var(--color-bg);line-height:1.6;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.bui-tooltip{position:fixed;z-index:100000;max-width:260px;padding:7px 11px;border-radius:12px;background:#fff;color:#1d1d1f;border:1px solid rgba(0,0,0,.06);box-shadow:0 8px 26px #00000029,0 2px 6px #0000001a;font-family:var(--font-sans, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif);font-size:12.5px;font-weight:500;line-height:1.45;letter-spacing:.01em;text-align:left;white-space:normal;word-break:break-word;pointer-events:none;opacity:0;transform:scale(.92);transform-origin:center;transition:opacity .13s ease,transform .14s cubic-bezier(.34,1.56,.64,1)}.bui-tooltip--in{opacity:1;transform:scale(1)}.bui-tooltip__tail{position:absolute;z-index:-1;width:9px;height:9px;background:#fff;border:1px solid rgba(0,0,0,.06);border-radius:2px;transform:rotate(45deg)}.bui-tooltip__tail.is-bottom{bottom:-5px}.bui-tooltip__tail.is-top{top:-5px}.bui-tooltip__tail.is-right{right:-5px}.bui-tooltip__tail.is-left{left:-5px}@media (prefers-reduced-motion: reduce){.bui-tooltip{transition:opacity .1s ease;transform:none}.bui-tooltip--in{transform:none}}h1,h2,h3,h4,h5,h6{font-family:var(--font-sans);font-weight:700;line-height:1.3;color:var(--color-text)}a{color:var(--color-accent);text-decoration:none}a:hover{text-decoration:underline}p{line-height:1.7}.btn{display:inline-flex;align-items:center;gap:6px;padding:9px 18px;border-radius:var(--radius-md);font-family:var(--font-sans);font-size:13px;font-weight:600;cursor:pointer;border:1px solid transparent;transition:background .15s,border-color .15s,box-shadow .15s,opacity .15s;text-decoration:none;white-space:nowrap}.btn:disabled{opacity:.5;cursor:not-allowed;pointer-events:none}.btn-primary{background:var(--color-accent);color:#fff;border-color:var(--color-accent)}.btn-primary:hover{background:#d13d4a;border-color:#d13d4a;box-shadow:0 2px 8px #e848554d;text-decoration:none}.btn-outline{background:transparent;color:var(--color-text);border-color:var(--color-border)}.btn-outline:hover{background:var(--color-hover);border-color:#d5d0e4;text-decoration:none}.btn-ghost{background:transparent;color:var(--color-text-muted);border-color:transparent}.btn-ghost:hover{background:var(--color-hover);color:var(--color-text)}.btn-sm{padding:6px 12px;font-size:12px;border-radius:var(--radius-sm)}.btn-lg{padding:12px 24px;font-size:15px;border-radius:12px}input,textarea,select{font-family:var(--font-sans);font-size:14px;color:var(--color-text)}.text-muted{color:var(--color-text-muted)}.text-accent{color:var(--color-accent)}.text-sm{font-size:12px}.text-xs{font-size:11px}.font-semibold{font-weight:600}.font-bold{font-weight:700}.flex{display:flex}.flex-col{flex-direction:column}.items-center{align-items:center}.justify-between{justify-content:space-between}.gap-2{gap:8px}.gap-4{gap:16px}.w-full{width:100%}::-webkit-scrollbar{width:6px;height:6px}::-webkit-scrollbar-track{background:transparent}::-webkit-scrollbar-thumb{background:var(--color-border);border-radius:3px}::-webkit-scrollbar-thumb:hover{background:var(--color-secondary)}router-outlet+*{animation:fadeInUp .2s ease}@keyframes fadeInUp{0%{opacity:0;transform:translateY(6px)}to{opacity:1;transform:translateY(0)}}.pane-section{display:flex;flex-direction:column;gap:24px;max-width:520px}.pane-hd{display:flex;flex-direction:column;gap:4px;padding-bottom:20px;border-bottom:1px solid var(--color-border)}.pane-hd--row{flex-direction:row;align-items:flex-start;justify-content:space-between;gap:16px}.pane-title{font-size:15px;font-weight:700;color:var(--color-text);margin:0}.pane-desc{font-size:12px;color:var(--color-text-muted);margin:0;line-height:1.5}.pane-form{display:flex;flex-direction:column;gap:18px}.pane-success{font-size:12px;font-weight:500;color:#065f46;background:#d1fae5;border:1px solid #a7f3d0;border-radius:var(--radius-sm);padding:8px 12px;margin:0}.field{display:flex;flex-direction:column;gap:6px}.field__label{font-size:12px;font-weight:600;color:var(--color-text);letter-spacing:.02em;text-transform:uppercase}.field__input{padding:9px 13px;border:1px solid var(--color-border);border-radius:var(--radius-md);font-family:var(--font-sans);font-size:13px;color:var(--color-text);background:var(--color-bg);outline:none;transition:border-color .15s,box-shadow .15s;width:100%}.field__input:focus{border-color:var(--color-accent);box-shadow:0 0 0 3px #e8485514}.field__input--locked{opacity:.55;cursor:not-allowed;color:var(--color-text-muted)}.field__input:disabled{cursor:not-allowed}.field textarea.field__input{resize:vertical}.field__hint{font-size:11px;color:var(--color-text-muted)}@media (max-width: 768px){.btn{padding:8px 14px}.detail-table-wrap,.pages-table-wrap,.diff-table-wrap{overflow-x:auto;-webkit-overflow-scrolling:touch}.result-summary,.insight-grid,.pr-stats-grid{grid-template-columns:1fr 1fr!important}.sitemap-form{flex-direction:column}.pr-detail__cols,.diff-screen__body{grid-template-columns:1fr!important}.diff-files{display:none}.diff-files.mobile-show{display:block}.pr-filters__top{flex-direction:column;align-items:flex-start}.pr-filters__right{width:100%}.pr-search{max-width:100%!important;flex:1}.repo-card{flex-direction:column;align-items:flex-start}.repo-card__right{align-self:flex-start;flex-wrap:wrap}.history-item{flex-direction:column}.results-toolbar{flex-direction:column;align-items:flex-start}.diff-screen__title-row{flex-direction:column}.diff-screen__header-right{align-self:flex-start}}@font-face{font-family:Poppins;font-style:normal;font-weight:400;font-display:swap;src:url("./media/poppins-latin-400.woff2") format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Poppins;font-style:normal;font-weight:500;font-display:swap;src:url("./media/poppins-latin-500.woff2") format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Poppins;font-style:normal;font-weight:600;font-display:swap;src:url("./media/poppins-latin-600.woff2") format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:Poppins;font-style:normal;font-weight:700;font-display:swap;src:url("./media/poppins-latin-700.woff2") format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}