@burdenoff/microfe-vibecontrols 2026.528.9 → 2026.528.11

package/dist/components/plugins/PluginIframeMount.js

@@ -1,86 +1,87 @@
-import { useEffect as e, useRef as t, useState as n } from "react";
-import { Fragment as r, jsx as i, jsxs as a } from "react/jsx-runtime";
-import { PluginIframe as o } from "@burdenoff/fe-libs/shared/plugins";
+import { appendIframeTokenFragment as e } from "../../services/iframeToken.js";
+import { useEffect as t, useRef as n, useState as r } from "react";
+import { Fragment as i, jsx as a, jsxs as o } from "react/jsx-runtime";
+import { PluginIframe as s } from "@burdenoff/fe-libs/shared/plugins";
 //#region src/components/plugins/PluginIframeMount.tsx
-var s = 6e4, c = 3e4;
-function l(l) {
-	let { contribution: u, tunnel: d, restPaths: f, context: p, agentId: m, profile: h, theme: g, locale: _, featureFlags: v, hostVersion: y, loadingNode: b, errorNode: x, style: S } = l, C = f.join("|"), [w, T] = n({
+var c = 6e4, l = 3e4;
+function u(u) {
+	let { contribution: d, tunnel: f, restPaths: p, context: m, agentId: h, profile: g, theme: _, locale: v, featureFlags: y, hostVersion: b, loadingNode: x, errorNode: S, style: C } = u, w = p.join("|"), [T, E] = r({
 		token: null,
 		error: null
-	}), E = t(0), D = t(null), O = async (e) => {
+	}), D = n(0), O = n(null), k = async (e) => {
 		try {
-			let t = await d.mintIframeToken({ pathPrefixes: f });
-			if (e !== E.current) return;
+			let t = await f.mintIframeToken({ pathPrefixes: p });
+			if (e !== D.current) return;
 			let n = Date.parse(t.expiresAt);
 			if (!Number.isFinite(n)) {
-				T({
+				E({
 					token: null,
 					error: "Invalid token expiry from agent"
 				});
 				return;
 			}
-			T({
+			E({
 				token: t,
 				error: null
 			});
 		} catch (t) {
-			if (e !== E.current) return;
-			T({
+			if (e !== D.current) return;
+			E({
 				token: null,
 				error: t instanceof Error ? t.message : String(t)
 			});
 		}
 	};
-	if (e(() => {
-		E.current += 1;
-		let e = E.current;
-		return O(e), () => {
-			E.current += 1, D.current !== null && (clearTimeout(D.current), D.current = null);
+	if (t(() => {
+		D.current += 1;
+		let e = D.current;
+		return k(e), () => {
+			D.current += 1, O.current !== null && (clearTimeout(O.current), O.current = null);
 		};
 	}, [
-		d.tunnelUrl,
-		d.profile,
-		C
-	]), e(() => {
-		let e = w.token;
+		f.tunnelUrl,
+		f.profile,
+		w
+	]), t(() => {
+		let e = T.token;
 		if (!e) return;
 		let t = Date.parse(e.expiresAt);
 		if (!Number.isFinite(t)) return;
-		let n = Math.max(5e3, t - Date.now() - s), r = E.current;
-		return D.current = setTimeout(() => {
-			d.mintIframeToken({ pathPrefixes: f }).then((e) => {
-				if (r !== E.current) return;
+		let n = Math.max(5e3, t - Date.now() - c), r = D.current;
+		return O.current = setTimeout(() => {
+			f.mintIframeToken({ pathPrefixes: p }).then((e) => {
+				if (r !== D.current) return;
 				let t = Date.parse(e.expiresAt);
-				Number.isFinite(t) && T({
+				Number.isFinite(t) && E({
 					token: e,
 					error: null
 				});
 			}).catch(() => {
-				r === E.current && (D.current !== null && clearTimeout(D.current), D.current = setTimeout(() => {
-					O(r);
-				}, c));
+				r === D.current && (O.current !== null && clearTimeout(O.current), O.current = setTimeout(() => {
+					k(r);
+				}, l));
 			});
 		}, n), () => {
-			D.current !== null && (clearTimeout(D.current), D.current = null);
+			O.current !== null && (clearTimeout(O.current), O.current = null);
 		};
 	}, [
-		w.token,
-		C,
-		d
-	]), w.error && !w.token) {
-		let e = () => void O(E.current);
-		return x ? /* @__PURE__ */ i(r, { children: x({
-			message: w.error,
+		T.token,
+		w,
+		f
+	]), T.error && !T.token) {
+		let e = () => void k(D.current);
+		return S ? /* @__PURE__ */ a(i, { children: S({
+			message: T.error,
 			retry: e
-		}) }) : /* @__PURE__ */ a("div", {
+		}) }) : /* @__PURE__ */ o("div", {
 			className: "p-4 text-sm text-status-danger-text",
 			children: [
 				"Failed to load ",
-				u.contribution.title,
+				d.contribution.title,
 				": ",
-				w.error,
+				T.error,
 				" ",
-				/* @__PURE__ */ i("button", {
+				/* @__PURE__ */ a("button", {
 					type: "button",
 					onClick: e,
 					className: "ml-2 underline text-text-secondary hover:text-text-primary",
@@ -89,37 +90,37 @@ function l(l) {
 			]
 		});
 	}
-	if (!w.token) return /* @__PURE__ */ i(r, { children: b ?? /* @__PURE__ */ a("div", {
+	if (!T.token) return /* @__PURE__ */ a(i, { children: x ?? /* @__PURE__ */ o("div", {
 		className: "p-4 text-text-secondary",
 		children: [
 			"Loading ",
-			u.contribution.title,
+			d.contribution.title,
 			"…"
 		]
 	}) });
-	let k = (() => {
+	let A = (() => {
 		try {
-			return new URL(d.tunnelUrl).origin;
+			return new URL(f.tunnelUrl).origin;
 		} catch {
-			return d.tunnelUrl;
+			return f.tunnelUrl;
 		}
 	})();
-	return /* @__PURE__ */ i(o, {
-		src: `${d.tunnelUrl.replace(/\/$/, "")}${u.url}?vt=${encodeURIComponent(w.token.token)}`,
-		origin: k,
-		mountPoint: u.contribution.mountPoint,
-		context: p,
-		agentId: m,
-		profile: h,
-		tunnelUrl: d.tunnelUrl,
-		iframeToken: w.token.token,
-		capabilities: u.capabilities,
-		theme: g,
-		locale: _,
-		featureFlags: v,
-		hostVersion: y,
-		title: u.contribution.title,
-		style: S ?? {
+	return /* @__PURE__ */ a(s, {
+		src: e(`${f.tunnelUrl.replace(/\/$/, "")}${d.url}`, T.token.token),
+		origin: A,
+		mountPoint: d.contribution.mountPoint,
+		context: m,
+		agentId: h,
+		profile: g,
+		tunnelUrl: f.tunnelUrl,
+		iframeToken: T.token.token,
+		capabilities: d.capabilities,
+		theme: _,
+		locale: v,
+		featureFlags: y,
+		hostVersion: b,
+		title: d.contribution.title,
+		style: C ?? {
 			width: "100%",
 			height: "100%"
 		},
@@ -129,6 +130,6 @@ function l(l) {
 	});
 }
 //#endregion
-export { l as PluginIframeMount };
+export { u as PluginIframeMount };
 
 //# sourceMappingURL=PluginIframeMount.js.map

package/dist/components/plugins/PluginIframeMount.js.map

@@ -1 +1 @@
-{"version":3,"file":"PluginIframeMount.js","names":[],"sources":["../../../src/components/plugins/PluginIframeMount.tsx"],"sourcesContent":["import { useEffect, useRef, useState, type CSSProperties } from 'react';\n\nimport {\n  PluginIframe,\n  type DiscoveredContribution,\n  type MountTunnel,\n} from '@burdenoff/fe-libs/shared/plugins';\n\nimport { type IframeTokenResponse } from '@/services/iframeToken';\n\nconst TOKEN_REFRESH_LEEWAY_MS = 60_000;\nconst TOKEN_REFRESH_RETRY_MS = 30_000;\n\nexport interface PluginIframeMountProps {\n  contribution: DiscoveredContribution;\n  tunnel: MountTunnel;\n  restPaths: string[];\n  /** Per-page context the plugin reads via `host:init`. */\n  context: Record<string, unknown>;\n  /** Canonical agent id surfaced in `host:init`. */\n  agentId: string;\n  /** Profile that owns the iframe token (must match `tunnel.profile`). */\n  profile: string;\n  theme: { colorMode: 'light' | 'dark'; tokens: Record<string, string> };\n  locale: string;\n  featureFlags: Record<string, boolean>;\n  /** Real version string. Don't reuse an entity id here. */\n  hostVersion: string;\n  /** Render-prop override for the loading state. */\n  loadingNode?: React.ReactNode;\n  /** Render-prop override for the error state. Receives the error message + a retry callback. */\n  errorNode?: (error: { message: string; retry: () => void }) => React.ReactNode;\n  style?: CSSProperties;\n}\n\ninterface TokenState {\n  token: IframeTokenResponse | null;\n  error: string | null;\n}\n\n/**\n * Shared iframe-mount helper used by the Vibe + Agent detail pages\n * and the standalone `/plugin/:pluginKey` route. Owns the per-\n * contribution scoped-token lifecycle (initial mint + refresh ~60s\n * before expiry + retry-on-failure) and renders the iframe via the\n * fe-libs `<PluginIframe>` primitive.\n *\n * Behaviour:\n *   - Initial mint failure surfaces an error state with a retry\n *     button (no infinite \"Loading…\" spinner).\n *   - Refresh failure keeps the existing token in place + retries\n *     after a short delay; the iframe doesn't unmount.\n *   - Component-level unmount cancels all in-flight + scheduled work\n *     via the alive ref.\n */\nexport function PluginIframeMount(props: PluginIframeMountProps) {\n  const {\n    contribution,\n    tunnel,\n    restPaths,\n    context,\n    agentId,\n    profile,\n    theme,\n    locale,\n    featureFlags,\n    hostVersion,\n    loadingNode,\n    errorNode,\n    style,\n  } = props;\n  const restPathsKey = restPaths.join('|');\n  const [tokenState, setTokenState] = useState<TokenState>({ token: null, error: null });\n  // Monotonic generation counter — incremented on every effect re-run.\n  // In-flight mint promises capture their generation when they started;\n  // a stale promise that resolves after props change won't overwrite\n  // tokenState because its captured generation no longer matches.\n  // The old `aliveRef = true` pattern flipped back on each re-run,\n  // letting a stale resolve from the previous run pass the guard.\n  const generationRef = useRef(0);\n  const refreshHandleRef = useRef<ReturnType<typeof setTimeout> | null>(null);\n\n  const mintOnce = async (gen: number): Promise<void> => {\n    try {\n      const next = await tunnel.mintIframeToken({ pathPrefixes: restPaths });\n      if (gen !== generationRef.current) return;\n      const ts = Date.parse(next.expiresAt);\n      if (!Number.isFinite(ts)) {\n        setTokenState({ token: null, error: 'Invalid token expiry from agent' });\n        return;\n      }\n      setTokenState({ token: next, error: null });\n    } catch (err) {\n      if (gen !== generationRef.current) return;\n      setTokenState({ token: null, error: err instanceof Error ? err.message : String(err) });\n    }\n  };\n\n  // Initial mint + refresh scheduling lifecycle.\n  useEffect(() => {\n    generationRef.current += 1;\n    const gen = generationRef.current;\n    void mintOnce(gen);\n    return () => {\n      // Bumping the generation invalidates any in-flight promise that\n      // started under this run; their resolve handler sees the new\n      // generation and bails.\n      generationRef.current += 1;\n      if (refreshHandleRef.current !== null) {\n        clearTimeout(refreshHandleRef.current);\n        refreshHandleRef.current = null;\n      }\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [tunnel.tunnelUrl, tunnel.profile, restPathsKey]);\n\n  // Schedule a refresh ~60s before expiry. Refresh failure does NOT\n  // null the existing token — keeping it lets the iframe stay\n  // mounted while we retry, instead of silently unmounting.\n  useEffect(() => {\n    const current = tokenState.token;\n    if (!current) return undefined;\n    const expiresAtMs = Date.parse(current.expiresAt);\n    if (!Number.isFinite(expiresAtMs)) return undefined;\n    const delay = Math.max(5_000, expiresAtMs - Date.now() - TOKEN_REFRESH_LEEWAY_MS);\n    const gen = generationRef.current;\n    refreshHandleRef.current = setTimeout(() => {\n      void tunnel\n        .mintIframeToken({ pathPrefixes: restPaths })\n        .then((next) => {\n          if (gen !== generationRef.current) return;\n          const ts = Date.parse(next.expiresAt);\n          if (!Number.isFinite(ts)) return;\n          setTokenState({ token: next, error: null });\n        })\n        .catch(() => {\n          // Keep the existing token in place + retry in a short window.\n          if (gen !== generationRef.current) return;\n          if (refreshHandleRef.current !== null) clearTimeout(refreshHandleRef.current);\n          refreshHandleRef.current = setTimeout(() => {\n            void mintOnce(gen);\n          }, TOKEN_REFRESH_RETRY_MS);\n        });\n    }, delay);\n    return () => {\n      if (refreshHandleRef.current !== null) {\n        clearTimeout(refreshHandleRef.current);\n        refreshHandleRef.current = null;\n      }\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [tokenState.token, restPathsKey, tunnel]);\n\n  if (tokenState.error && !tokenState.token) {\n    // Retry uses the current generation so subsequent state changes\n    // (tab switch / agent change) cancel a stale retry click.\n    const retry = () => void mintOnce(generationRef.current);\n    if (errorNode) {\n      return <>{errorNode({ message: tokenState.error, retry })}</>;\n    }\n    return (\n      <div className=\"p-4 text-sm text-status-danger-text\">\n        Failed to load {contribution.contribution.title}: {tokenState.error}{' '}\n        <button\n          type=\"button\"\n          onClick={retry}\n          className=\"ml-2 underline text-text-secondary hover:text-text-primary\"\n        >\n          Retry\n        </button>\n      </div>\n    );\n  }\n\n  if (!tokenState.token) {\n    return (\n      <>\n        {loadingNode ?? (\n          <div className=\"p-4 text-text-secondary\">Loading {contribution.contribution.title}…</div>\n        )}\n      </>\n    );\n  }\n\n  const origin = (() => {\n    try {\n      return new URL(tunnel.tunnelUrl).origin;\n    } catch {\n      return tunnel.tunnelUrl;\n    }\n  })();\n  const iframeSrc = `${tunnel.tunnelUrl.replace(/\\/$/, '')}${contribution.url}?vt=${encodeURIComponent(tokenState.token.token)}`;\n\n  return (\n    <PluginIframe\n      src={iframeSrc}\n      origin={origin}\n      mountPoint={contribution.contribution.mountPoint}\n      context={context}\n      agentId={agentId}\n      profile={profile}\n      tunnelUrl={tunnel.tunnelUrl}\n      iframeToken={tokenState.token.token}\n      capabilities={contribution.capabilities}\n      theme={theme}\n      locale={locale}\n      featureFlags={featureFlags}\n      hostVersion={hostVersion}\n      title={contribution.contribution.title}\n      style={style ?? { width: '100%', height: '100%' }}\n      onRpcRequest={async () => {\n        throw Object.assign(new Error('Host RPC not yet implemented'), {\n          code: 'method_not_found',\n        });\n      }}\n    />\n  );\n}\n"],"mappings":";;;;AAUA,IAAM,IAA0B,KAC1B,IAAyB;AA4C/B,SAAgB,EAAkB,GAA+B;CAC/D,IAAM,EACJ,iBACA,WACA,cACA,YACA,YACA,YACA,UACA,WACA,iBACA,gBACA,gBACA,cACA,aACE,GACE,IAAe,EAAU,KAAK,IAAI,EAClC,CAAC,GAAY,KAAiB,EAAqB;EAAE,OAAO;EAAM,OAAO;EAAM,CAAC,EAOhF,IAAgB,EAAO,EAAE,EACzB,IAAmB,EAA6C,KAAK,EAErE,IAAW,OAAO,MAA+B;AACrD,MAAI;GACF,IAAM,IAAO,MAAM,EAAO,gBAAgB,EAAE,cAAc,GAAW,CAAC;AACtE,OAAI,MAAQ,EAAc,QAAS;GACnC,IAAM,IAAK,KAAK,MAAM,EAAK,UAAU;AACrC,OAAI,CAAC,OAAO,SAAS,EAAG,EAAE;AACxB,MAAc;KAAE,OAAO;KAAM,OAAO;KAAmC,CAAC;AACxE;;AAEF,KAAc;IAAE,OAAO;IAAM,OAAO;IAAM,CAAC;WACpC,GAAK;AACZ,OAAI,MAAQ,EAAc,QAAS;AACnC,KAAc;IAAE,OAAO;IAAM,OAAO,aAAe,QAAQ,EAAI,UAAU,OAAO,EAAI;IAAE,CAAC;;;AA2D3F,KAtDA,QAAgB;AACd,IAAc,WAAW;EACzB,IAAM,IAAM,EAAc;AAE1B,SADK,EAAS,EAAI,QACL;AAKX,GADA,EAAc,WAAW,GACrB,EAAiB,YAAY,SAC/B,aAAa,EAAiB,QAAQ,EACtC,EAAiB,UAAU;;IAI9B;EAAC,EAAO;EAAW,EAAO;EAAS;EAAa,CAAC,EAKpD,QAAgB;EACd,IAAM,IAAU,EAAW;AAC3B,MAAI,CAAC,EAAS;EACd,IAAM,IAAc,KAAK,MAAM,EAAQ,UAAU;AACjD,MAAI,CAAC,OAAO,SAAS,EAAY,CAAE;EACnC,IAAM,IAAQ,KAAK,IAAI,KAAO,IAAc,KAAK,KAAK,GAAG,EAAwB,EAC3E,IAAM,EAAc;AAmB1B,SAlBA,EAAiB,UAAU,iBAAiB;AACrC,KACF,gBAAgB,EAAE,cAAc,GAAW,CAAC,CAC5C,MAAM,MAAS;AACd,QAAI,MAAQ,EAAc,QAAS;IACnC,IAAM,IAAK,KAAK,MAAM,EAAK,UAAU;AAChC,WAAO,SAAS,EAAG,IACxB,EAAc;KAAE,OAAO;KAAM,OAAO;KAAM,CAAC;KAC3C,CACD,YAAY;AAEP,UAAQ,EAAc,YACtB,EAAiB,YAAY,QAAM,aAAa,EAAiB,QAAQ,EAC7E,EAAiB,UAAU,iBAAiB;AACrC,OAAS,EAAI;OACjB,EAAuB;KAC1B;KACH,EAAM,QACI;AACX,GAAI,EAAiB,YAAY,SAC/B,aAAa,EAAiB,QAAQ,EACtC,EAAiB,UAAU;;IAI9B;EAAC,EAAW;EAAO;EAAc;EAAO,CAAC,EAExC,EAAW,SAAS,CAAC,EAAW,OAAO;EAGzC,IAAM,UAAc,KAAK,EAAS,EAAc,QAAQ;AAIxD,SAHI,IACK,kBAAA,GAAA,EAAA,UAAG,EAAU;GAAE,SAAS,EAAW;GAAO;GAAO,CAAC,EAAI,CAAA,GAG7D,kBAAC,OAAD;GAAK,WAAU;aAAf;IAAqD;IACnC,EAAa,aAAa;IAAM;IAAG,EAAW;IAAO;IACrE,kBAAC,UAAD;KACE,MAAK;KACL,SAAS;KACT,WAAU;eACX;KAEQ,CAAA;IACL;;;AAIV,KAAI,CAAC,EAAW,MACd,QACE,kBAAA,GAAA,EAAA,UACG,KACC,kBAAC,OAAD;EAAK,WAAU;YAAf;GAAyC;GAAS,EAAa,aAAa;GAAM;GAAO;KAE1F,CAAA;CAIP,IAAM,WAAgB;AACpB,MAAI;AACF,UAAO,IAAI,IAAI,EAAO,UAAU,CAAC;UAC3B;AACN,UAAO,EAAO;;KAEd;AAGJ,QACE,kBAAC,GAAD;EACE,KAJc,GAAG,EAAO,UAAU,QAAQ,OAAO,GAAG,GAAG,EAAa,IAAI,MAAM,mBAAmB,EAAW,MAAM,MAAM;EAKhH;EACR,YAAY,EAAa,aAAa;EAC7B;EACA;EACA;EACT,WAAW,EAAO;EAClB,aAAa,EAAW,MAAM;EAC9B,cAAc,EAAa;EACpB;EACC;EACM;EACD;EACb,OAAO,EAAa,aAAa;EACjC,OAAO,KAAS;GAAE,OAAO;GAAQ,QAAQ;GAAQ;EACjD,cAAc,YAAY;AACxB,SAAM,OAAO,OAAO,gBAAI,MAAM,+BAA+B,EAAE,EAC7D,MAAM,oBACP,CAAC;;EAEJ,CAAA"}
+{"version":3,"file":"PluginIframeMount.js","names":[],"sources":["../../../src/components/plugins/PluginIframeMount.tsx"],"sourcesContent":["import { useEffect, useRef, useState, type CSSProperties } from 'react';\n\nimport {\n  PluginIframe,\n  type DiscoveredContribution,\n  type MountTunnel,\n} from '@burdenoff/fe-libs/shared/plugins';\n\nimport { appendIframeTokenFragment, type IframeTokenResponse } from '@/services/iframeToken';\n\nconst TOKEN_REFRESH_LEEWAY_MS = 60_000;\nconst TOKEN_REFRESH_RETRY_MS = 30_000;\n\nexport interface PluginIframeMountProps {\n  contribution: DiscoveredContribution;\n  tunnel: MountTunnel;\n  restPaths: string[];\n  /** Per-page context the plugin reads via `host:init`. */\n  context: Record<string, unknown>;\n  /** Canonical agent id surfaced in `host:init`. */\n  agentId: string;\n  /** Profile that owns the iframe token (must match `tunnel.profile`). */\n  profile: string;\n  theme: { colorMode: 'light' | 'dark'; tokens: Record<string, string> };\n  locale: string;\n  featureFlags: Record<string, boolean>;\n  /** Real version string. Don't reuse an entity id here. */\n  hostVersion: string;\n  /** Render-prop override for the loading state. */\n  loadingNode?: React.ReactNode;\n  /** Render-prop override for the error state. Receives the error message + a retry callback. */\n  errorNode?: (error: { message: string; retry: () => void }) => React.ReactNode;\n  style?: CSSProperties;\n}\n\ninterface TokenState {\n  token: IframeTokenResponse | null;\n  error: string | null;\n}\n\n/**\n * Shared iframe-mount helper used by the Vibe + Agent detail pages\n * and the standalone `/plugin/:pluginKey` route. Owns the per-\n * contribution scoped-token lifecycle (initial mint + refresh ~60s\n * before expiry + retry-on-failure) and renders the iframe via the\n * fe-libs `<PluginIframe>` primitive.\n *\n * Behaviour:\n *   - Initial mint failure surfaces an error state with a retry\n *     button (no infinite \"Loading…\" spinner).\n *   - Refresh failure keeps the existing token in place + retries\n *     after a short delay; the iframe doesn't unmount.\n *   - Component-level unmount cancels all in-flight + scheduled work\n *     via the alive ref.\n */\nexport function PluginIframeMount(props: PluginIframeMountProps) {\n  const {\n    contribution,\n    tunnel,\n    restPaths,\n    context,\n    agentId,\n    profile,\n    theme,\n    locale,\n    featureFlags,\n    hostVersion,\n    loadingNode,\n    errorNode,\n    style,\n  } = props;\n  const restPathsKey = restPaths.join('|');\n  const [tokenState, setTokenState] = useState<TokenState>({ token: null, error: null });\n  // Monotonic generation counter — incremented on every effect re-run.\n  // In-flight mint promises capture their generation when they started;\n  // a stale promise that resolves after props change won't overwrite\n  // tokenState because its captured generation no longer matches.\n  // The old `aliveRef = true` pattern flipped back on each re-run,\n  // letting a stale resolve from the previous run pass the guard.\n  const generationRef = useRef(0);\n  const refreshHandleRef = useRef<ReturnType<typeof setTimeout> | null>(null);\n\n  const mintOnce = async (gen: number): Promise<void> => {\n    try {\n      const next = await tunnel.mintIframeToken({ pathPrefixes: restPaths });\n      if (gen !== generationRef.current) return;\n      const ts = Date.parse(next.expiresAt);\n      if (!Number.isFinite(ts)) {\n        setTokenState({ token: null, error: 'Invalid token expiry from agent' });\n        return;\n      }\n      setTokenState({ token: next, error: null });\n    } catch (err) {\n      if (gen !== generationRef.current) return;\n      setTokenState({ token: null, error: err instanceof Error ? err.message : String(err) });\n    }\n  };\n\n  // Initial mint + refresh scheduling lifecycle.\n  useEffect(() => {\n    generationRef.current += 1;\n    const gen = generationRef.current;\n    void mintOnce(gen);\n    return () => {\n      // Bumping the generation invalidates any in-flight promise that\n      // started under this run; their resolve handler sees the new\n      // generation and bails.\n      generationRef.current += 1;\n      if (refreshHandleRef.current !== null) {\n        clearTimeout(refreshHandleRef.current);\n        refreshHandleRef.current = null;\n      }\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [tunnel.tunnelUrl, tunnel.profile, restPathsKey]);\n\n  // Schedule a refresh ~60s before expiry. Refresh failure does NOT\n  // null the existing token — keeping it lets the iframe stay\n  // mounted while we retry, instead of silently unmounting.\n  useEffect(() => {\n    const current = tokenState.token;\n    if (!current) return undefined;\n    const expiresAtMs = Date.parse(current.expiresAt);\n    if (!Number.isFinite(expiresAtMs)) return undefined;\n    const delay = Math.max(5_000, expiresAtMs - Date.now() - TOKEN_REFRESH_LEEWAY_MS);\n    const gen = generationRef.current;\n    refreshHandleRef.current = setTimeout(() => {\n      void tunnel\n        .mintIframeToken({ pathPrefixes: restPaths })\n        .then((next) => {\n          if (gen !== generationRef.current) return;\n          const ts = Date.parse(next.expiresAt);\n          if (!Number.isFinite(ts)) return;\n          setTokenState({ token: next, error: null });\n        })\n        .catch(() => {\n          // Keep the existing token in place + retry in a short window.\n          if (gen !== generationRef.current) return;\n          if (refreshHandleRef.current !== null) clearTimeout(refreshHandleRef.current);\n          refreshHandleRef.current = setTimeout(() => {\n            void mintOnce(gen);\n          }, TOKEN_REFRESH_RETRY_MS);\n        });\n    }, delay);\n    return () => {\n      if (refreshHandleRef.current !== null) {\n        clearTimeout(refreshHandleRef.current);\n        refreshHandleRef.current = null;\n      }\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [tokenState.token, restPathsKey, tunnel]);\n\n  if (tokenState.error && !tokenState.token) {\n    // Retry uses the current generation so subsequent state changes\n    // (tab switch / agent change) cancel a stale retry click.\n    const retry = () => void mintOnce(generationRef.current);\n    if (errorNode) {\n      return <>{errorNode({ message: tokenState.error, retry })}</>;\n    }\n    return (\n      <div className=\"p-4 text-sm text-status-danger-text\">\n        Failed to load {contribution.contribution.title}: {tokenState.error}{' '}\n        <button\n          type=\"button\"\n          onClick={retry}\n          className=\"ml-2 underline text-text-secondary hover:text-text-primary\"\n        >\n          Retry\n        </button>\n      </div>\n    );\n  }\n\n  if (!tokenState.token) {\n    return (\n      <>\n        {loadingNode ?? (\n          <div className=\"p-4 text-text-secondary\">Loading {contribution.contribution.title}…</div>\n        )}\n      </>\n    );\n  }\n\n  const origin = (() => {\n    try {\n      return new URL(tunnel.tunnelUrl).origin;\n    } catch {\n      return tunnel.tunnelUrl;\n    }\n  })();\n  // F5 — token rides the URL fragment, not the query string. The agent's\n  // bootstrap shim at /ui/<plugin> reads `#vt=` client-side and trades it\n  // for a path-scoped HttpOnly cookie via POST /api/agent/ui-exchange.\n  const iframeSrc = appendIframeTokenFragment(\n    `${tunnel.tunnelUrl.replace(/\\/$/, '')}${contribution.url}`,\n    tokenState.token.token\n  );\n\n  return (\n    <PluginIframe\n      src={iframeSrc}\n      origin={origin}\n      mountPoint={contribution.contribution.mountPoint}\n      context={context}\n      agentId={agentId}\n      profile={profile}\n      tunnelUrl={tunnel.tunnelUrl}\n      iframeToken={tokenState.token.token}\n      capabilities={contribution.capabilities}\n      theme={theme}\n      locale={locale}\n      featureFlags={featureFlags}\n      hostVersion={hostVersion}\n      title={contribution.contribution.title}\n      style={style ?? { width: '100%', height: '100%' }}\n      onRpcRequest={async () => {\n        throw Object.assign(new Error('Host RPC not yet implemented'), {\n          code: 'method_not_found',\n        });\n      }}\n    />\n  );\n}\n"],"mappings":";;;;;AAUA,IAAM,IAA0B,KAC1B,IAAyB;AA4C/B,SAAgB,EAAkB,GAA+B;CAC/D,IAAM,EACJ,iBACA,WACA,cACA,YACA,YACA,YACA,UACA,WACA,iBACA,gBACA,gBACA,cACA,aACE,GACE,IAAe,EAAU,KAAK,IAAI,EAClC,CAAC,GAAY,KAAiB,EAAqB;EAAE,OAAO;EAAM,OAAO;EAAM,CAAC,EAOhF,IAAgB,EAAO,EAAE,EACzB,IAAmB,EAA6C,KAAK,EAErE,IAAW,OAAO,MAA+B;AACrD,MAAI;GACF,IAAM,IAAO,MAAM,EAAO,gBAAgB,EAAE,cAAc,GAAW,CAAC;AACtE,OAAI,MAAQ,EAAc,QAAS;GACnC,IAAM,IAAK,KAAK,MAAM,EAAK,UAAU;AACrC,OAAI,CAAC,OAAO,SAAS,EAAG,EAAE;AACxB,MAAc;KAAE,OAAO;KAAM,OAAO;KAAmC,CAAC;AACxE;;AAEF,KAAc;IAAE,OAAO;IAAM,OAAO;IAAM,CAAC;WACpC,GAAK;AACZ,OAAI,MAAQ,EAAc,QAAS;AACnC,KAAc;IAAE,OAAO;IAAM,OAAO,aAAe,QAAQ,EAAI,UAAU,OAAO,EAAI;IAAE,CAAC;;;AA2D3F,KAtDA,QAAgB;AACd,IAAc,WAAW;EACzB,IAAM,IAAM,EAAc;AAE1B,SADK,EAAS,EAAI,QACL;AAKX,GADA,EAAc,WAAW,GACrB,EAAiB,YAAY,SAC/B,aAAa,EAAiB,QAAQ,EACtC,EAAiB,UAAU;;IAI9B;EAAC,EAAO;EAAW,EAAO;EAAS;EAAa,CAAC,EAKpD,QAAgB;EACd,IAAM,IAAU,EAAW;AAC3B,MAAI,CAAC,EAAS;EACd,IAAM,IAAc,KAAK,MAAM,EAAQ,UAAU;AACjD,MAAI,CAAC,OAAO,SAAS,EAAY,CAAE;EACnC,IAAM,IAAQ,KAAK,IAAI,KAAO,IAAc,KAAK,KAAK,GAAG,EAAwB,EAC3E,IAAM,EAAc;AAmB1B,SAlBA,EAAiB,UAAU,iBAAiB;AACrC,KACF,gBAAgB,EAAE,cAAc,GAAW,CAAC,CAC5C,MAAM,MAAS;AACd,QAAI,MAAQ,EAAc,QAAS;IACnC,IAAM,IAAK,KAAK,MAAM,EAAK,UAAU;AAChC,WAAO,SAAS,EAAG,IACxB,EAAc;KAAE,OAAO;KAAM,OAAO;KAAM,CAAC;KAC3C,CACD,YAAY;AAEP,UAAQ,EAAc,YACtB,EAAiB,YAAY,QAAM,aAAa,EAAiB,QAAQ,EAC7E,EAAiB,UAAU,iBAAiB;AACrC,OAAS,EAAI;OACjB,EAAuB;KAC1B;KACH,EAAM,QACI;AACX,GAAI,EAAiB,YAAY,SAC/B,aAAa,EAAiB,QAAQ,EACtC,EAAiB,UAAU;;IAI9B;EAAC,EAAW;EAAO;EAAc;EAAO,CAAC,EAExC,EAAW,SAAS,CAAC,EAAW,OAAO;EAGzC,IAAM,UAAc,KAAK,EAAS,EAAc,QAAQ;AAIxD,SAHI,IACK,kBAAA,GAAA,EAAA,UAAG,EAAU;GAAE,SAAS,EAAW;GAAO;GAAO,CAAC,EAAI,CAAA,GAG7D,kBAAC,OAAD;GAAK,WAAU;aAAf;IAAqD;IACnC,EAAa,aAAa;IAAM;IAAG,EAAW;IAAO;IACrE,kBAAC,UAAD;KACE,MAAK;KACL,SAAS;KACT,WAAU;eACX;KAEQ,CAAA;IACL;;;AAIV,KAAI,CAAC,EAAW,MACd,QACE,kBAAA,GAAA,EAAA,UACG,KACC,kBAAC,OAAD;EAAK,WAAU;YAAf;GAAyC;GAAS,EAAa,aAAa;GAAM;GAAO;KAE1F,CAAA;CAIP,IAAM,WAAgB;AACpB,MAAI;AACF,UAAO,IAAI,IAAI,EAAO,UAAU,CAAC;UAC3B;AACN,UAAO,EAAO;;KAEd;AASJ,QACE,kBAAC,GAAD;EACE,KAPc,EAChB,GAAG,EAAO,UAAU,QAAQ,OAAO,GAAG,GAAG,EAAa,OACtD,EAAW,MAAM,MAClB;EAKW;EACR,YAAY,EAAa,aAAa;EAC7B;EACA;EACA;EACT,WAAW,EAAO;EAClB,aAAa,EAAW,MAAM;EAC9B,cAAc,EAAa;EACpB;EACC;EACM;EACD;EACb,OAAO,EAAa,aAAa;EACjC,OAAO,KAAS;GAAE,OAAO;GAAQ,QAAQ;GAAQ;EACjD,cAAc,YAAY;AACxB,SAAM,OAAO,OAAO,gBAAI,MAAM,+BAA+B,EAAE,EAC7D,MAAM,oBACP,CAAC;;EAEJ,CAAA"}