@burdenoff/microfe-vibecontrols 2026.530.1 → 2026.530.2

package/dist/components/gitops/VibeGitOpsTab.js

@@ -5,41 +5,37 @@ import "../shared/index.js";
 import { appendIframeTokenQuery as n, mintIframeToken as r, scheduleIframeTokenRefresh as i } from "../../services/iframeToken.js";
 import { RepoStatsTab as a } from "./RepoStatsTab.js";
 import { CITab as o } from "./CITab.js";
-import { useGitopsContributors as ee, useGitopsIssues as te, useGitopsLanguages as ne, useGitopsPipelineAnalytics as re, useGitopsProviders as ie, useGitopsPullRequests as ae, useGitopsRepos as s, useGitopsRuns as oe, useGitopsSecurityAlerts as c } from "../../hooks/useGitops.js";
-import { GitOpsSetup as se } from "./GitOpsSetup.js";
-import { GitOpsProviderPicker as ce } from "./GitOpsProviderPicker.js";
-import { composeCiStatus as le, composeRepoStats as ue } from "./types.js";
-import { useCallback as de, useEffect as l, useMemo as u, useState as d } from "react";
-import { BarChart3 as f, GitBranch as p, GitMerge as m, Play as h, RefreshCw as g } from "lucide-react";
-import { useQueryClient as fe } from "@tanstack/react-query";
-import { motion as pe } from "framer-motion";
-import { Fragment as _, jsx as v, jsxs as y } from "react/jsx-runtime";
+import { useGitopsContributors as ee, useGitopsIssues as te, useGitopsLanguages as ne, useGitopsPipelineAnalytics as re, useGitopsProviders as ie, useGitopsPullRequests as ae, useGitopsRepos as s, useGitopsRuns as oe, useGitopsSecurityAlerts as se } from "../../hooks/useGitops.js";
+import { GitOpsSetup as ce } from "./GitOpsSetup.js";
+import { GitOpsProviderPicker as le } from "./GitOpsProviderPicker.js";
+import { composeCiStatus as c, composeRepoStats as l } from "./types.js";
+import { useCallback as u, useEffect as d, useMemo as f, useState as p } from "react";
+import { BarChart3 as ue, GitBranch as de, GitMerge as m, Play as h, RefreshCw as g } from "lucide-react";
+import { useQueryClient as _ } from "@tanstack/react-query";
+import { motion as fe } from "framer-motion";
+import { Fragment as v, jsx as y, jsxs as b } from "react/jsx-runtime";
 //#region src/components/gitops/VibeGitOpsTab.tsx
-var b = ({ vibeId: b, agentId: C, profile: w, tunnelUrl: T, apiKey: E, tr: D }) => {
-	let [O, me] = d("repo-stats"), [k, A] = d(!1), [j, M] = d(null), [N, he] = d(null), { workspaceId: P } = e(), F = fe(), I = u(() => ({
-		tunnelUrl: T,
-		apiKey: E,
-		profile: w,
+var x = ({ vibeId: x, agentId: w, profile: T, tunnelUrl: E, tr: D }) => {
+	let [O, pe] = p("repo-stats"), [k, A] = p(!1), [j, M] = p(null), [N, me] = p(null), { workspaceId: P } = e(), F = _(), I = f(() => ({
+		profile: T,
 		workspaceId: P ?? "",
-		agentId: C
+		agentId: w
 	}), [
 		T,
-		E,
-		w,
 		P,
-		C
-	]), L = ie(I), R = u(() => L.data?.filter((e) => e.registered && e.authenticated) ?? [], [L.data]), z = R.length > 0;
-	l(() => {
+		w
+	]), L = ie(I), R = f(() => L.data?.filter((e) => e.registered && e.authenticated) ?? [], [L.data]), z = R.length > 0;
+	d(() => {
 		if (!j && R.length > 0) {
 			let e = R[0];
 			e && M(e.name);
 		}
 	}, [R, j]);
 	let B = s(I, j, { limit: 30 });
-	l(() => {
+	d(() => {
 		if (!N && B.data?.items.length) {
 			let e = B.data.items[0];
-			e && he(e.fqn);
+			e && me(e.fqn);
 		}
 	}, [B.data, N]);
 	let V = s(I, j, { limit: 1 });
@@ -50,11 +46,11 @@ var b = ({ vibeId: b, agentId: C, profile: w, tunnelUrl: T, apiKey: E, tr: D })
 	}), U = te(I, j, N, {
 		state: "open",
 		limit: 100
-	}), W = ne(I, j, N), G = ee(I, j, N, 20), K = c(I, j, N), q = u(() => N ? V.data?.items.find((e) => e.fqn === N) ?? B.data?.items.find((e) => e.fqn === N) ?? null : V.data?.items[0] ?? null, [
+	}), W = ne(I, j, N), G = ee(I, j, N, 20), K = se(I, j, N), q = f(() => N ? V.data?.items.find((e) => e.fqn === N) ?? B.data?.items.find((e) => e.fqn === N) ?? null : V.data?.items[0] ?? null, [
 		V.data,
 		B.data,
 		N
-	]), ge = u(() => ue({
+	]), he = f(() => l({
 		repo: q,
 		pulls: H.data,
 		issues: U.data,
@@ -68,27 +64,27 @@ var b = ({ vibeId: b, agentId: C, profile: w, tunnelUrl: T, apiKey: E, tr: D })
 		W.data,
 		G.data,
 		K.data
-	]), J = oe(I, j, N, { limit: 30 }), Y = re(I, j, N), _e = u(() => le({
+	]), J = oe(I, j, N, { limit: 30 }), Y = re(I, j, N), ge = f(() => c({
 		pipelines: void 0,
 		runs: J.data,
 		analytics: Y.data
-	}), [J.data, Y.data]), ve = H.isLoading || U.isLoading || W.isLoading, ye = J.isLoading || Y.isLoading, be = (H.error || U.error || W.error)?.message, xe = (J.error || Y.error)?.message, Se = de(() => {
+	}), [J.data, Y.data]), _e = H.isLoading || U.isLoading || W.isLoading, ve = J.isLoading || Y.isLoading, ye = (H.error || U.error || W.error)?.message, be = (J.error || Y.error)?.message, xe = u(() => {
 		F.invalidateQueries({ queryKey: [
 			"gitops",
 			P ?? "",
-			C,
-			w
+			w,
+			T
 		] });
 	}, [
 		F,
 		P,
-		C,
-		w
-	]), X = H.isFetching || J.isFetching, Ce = [
+		w,
+		T
+	]), X = H.isFetching || J.isFetching, Se = [
 		{
 			id: "repo-stats",
 			label: D("gitops.repoStats", "Repo Stats"),
-			icon: f
+			icon: ue
 		},
 		{
 			id: "ci",
@@ -98,35 +94,35 @@ var b = ({ vibeId: b, agentId: C, profile: w, tunnelUrl: T, apiKey: E, tr: D })
 		{
 			id: "git-ui",
 			label: D("gitops.gitUI", "Git UI"),
-			icon: p
+			icon: de
 		}
-	], [Z, Q] = d(null), [$, we] = d(null);
-	return l(() => {
+	], [Z, Q] = p(null), [$, Ce] = p(null);
+	return d(() => {
 		let e = !1, t = null;
 		return (async () => {
-			if (!C || !T || O !== "git-ui") {
+			if (!w || !E || O !== "git-ui") {
 				Q(null);
 				return;
 			}
 			try {
-				let a = await r(C, w, "/ungit");
+				let a = await r(w, T, "/ungit");
 				if (e) return;
-				let o = `${T.replace(/\/$/, "")}/ungit/`;
-				Q(n(o, a.token)), t = i(C, w, "/ungit", a, (e) => {
+				let o = `${E.replace(/\/$/, "")}/ungit/`;
+				Q(n(o, a.token)), t = i(w, T, "/ungit", a, (e) => {
 					Q(n(o, e.token));
 				});
 			} catch (t) {
-				e || we(t instanceof Error ? t.message : "Failed to fetch iframe token");
+				e || Ce(t instanceof Error ? t.message : "Failed to fetch iframe token");
 			}
 		})(), () => {
 			e = !0, t?.cancel();
 		};
 	}, [
-		C,
 		w,
 		T,
+		E,
 		O
-	]), /* @__PURE__ */ y(pe.div, {
+	]), /* @__PURE__ */ b(fe.div, {
 		initial: {
 			opacity: 0,
 			y: 8
@@ -141,32 +137,32 @@ var b = ({ vibeId: b, agentId: C, profile: w, tunnelUrl: T, apiKey: E, tr: D })
 		},
 		transition: { duration: .2 },
 		className: "space-y-4",
-		"data-vibe-id": b,
-		children: [/* @__PURE__ */ y("div", {
+		"data-vibe-id": x,
+		children: [/* @__PURE__ */ b("div", {
 			className: "flex items-center justify-between",
-			children: [/* @__PURE__ */ y("div", {
+			children: [/* @__PURE__ */ b("div", {
 				className: "flex items-center gap-2",
-				children: [/* @__PURE__ */ v(m, { className: "size-5 text-text-secondary" }), /* @__PURE__ */ v("h3", {
+				children: [/* @__PURE__ */ y(m, { className: "size-5 text-text-secondary" }), /* @__PURE__ */ y("h3", {
 					className: "font-semibold text-text-primary",
 					children: D("vibeDetails.gitopsTitle", "GitOps")
 				})]
-			}), /* @__PURE__ */ y("div", {
+			}), /* @__PURE__ */ b("div", {
 				className: "flex items-center gap-2",
 				children: [
-					z && /* @__PURE__ */ v(ce, {
+					z && /* @__PURE__ */ y(le, {
 						providers: R.map((e) => e.name),
 						selected: j,
 						onChange: M
 					}),
-					z && (O === "repo-stats" || O === "ci") && /* @__PURE__ */ y("button", {
+					z && (O === "repo-stats" || O === "ci") && /* @__PURE__ */ b("button", {
 						type: "button",
-						onClick: Se,
+						onClick: xe,
 						disabled: X,
 						className: "flex items-center gap-1.5 px-2.5 py-1 text-xs rounded-md border border-border-default text-text-secondary hover:text-text-primary hover:border-border-strong disabled:opacity-50 transition-colors",
 						"data-testid": "gitops-refresh",
-						children: [/* @__PURE__ */ v(g, { className: `size-3 ${X ? "animate-spin" : ""}` }), D("gitops.refresh", "Refresh")]
+						children: [/* @__PURE__ */ y(g, { className: `size-3 ${X ? "animate-spin" : ""}` }), D("gitops.refresh", "Refresh")]
 					}),
-					!k && /* @__PURE__ */ v("button", {
+					!k && /* @__PURE__ */ y("button", {
 						type: "button",
 						onClick: () => A(!0),
 						className: "flex items-center gap-1.5 px-3 py-1.5 text-xs font-medium rounded-md bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bg-hover transition-colors",
@@ -175,45 +171,45 @@ var b = ({ vibeId: b, agentId: C, profile: w, tunnelUrl: T, apiKey: E, tr: D })
 					})
 				]
 			})]
-		}), /* @__PURE__ */ y("div", {
+		}), /* @__PURE__ */ b("div", {
 			className: "flex flex-col gap-4 lg:flex-row lg:gap-6",
-			children: [/* @__PURE__ */ v("nav", {
+			children: [/* @__PURE__ */ y("nav", {
 				className: "w-full flex-shrink-0 rounded-lg border border-border-default bg-bg-surface p-2 lg:w-56",
 				role: "tablist",
 				"aria-label": D("gitops.navigation", "GitOps navigation"),
-				children: Ce.map((e) => {
+				children: Se.map((e) => {
 					let t = e.icon, n = O === e.id;
-					return /* @__PURE__ */ y("button", {
+					return /* @__PURE__ */ b("button", {
 						type: "button",
 						role: "tab",
 						"aria-selected": n,
-						onClick: () => me(e.id),
+						onClick: () => pe(e.id),
 						className: `flex w-full items-center gap-2 rounded-md px-3 py-2 text-left text-sm font-medium transition-colors ${n ? "bg-action-primary-bg text-action-primary-text shadow-sm" : "text-text-secondary hover:bg-action-ghost-bg-hover hover:text-text-primary"}`,
-						children: [/* @__PURE__ */ v(t, { className: "size-4 shrink-0" }), /* @__PURE__ */ v("span", {
+						children: [/* @__PURE__ */ y(t, { className: "size-4 shrink-0" }), /* @__PURE__ */ y("span", {
 							className: "truncate",
 							children: e.label
 						})]
 					}, e.id);
 				})
-			}), /* @__PURE__ */ y("div", {
+			}), /* @__PURE__ */ b("div", {
 				className: "min-w-0 flex-1 space-y-4",
 				children: [
-					k && /* @__PURE__ */ v(se, {
+					k && /* @__PURE__ */ y(ce, {
 						ctx: I,
 						onCreated: () => {
 							A(!1), L.refetch();
 						},
 						onCancel: () => A(!1)
 					}),
-					O === "repo-stats" && !k && /* @__PURE__ */ v(_, { children: z ? !T || !E ? /* @__PURE__ */ v(S, {
+					O === "repo-stats" && !k && /* @__PURE__ */ y(v, { children: z ? w ? /* @__PURE__ */ y(a, {
+						stats: he,
+						loading: _e || L.isLoading,
+						error: ye
+					}) : /* @__PURE__ */ y(C, {
 						tr: D,
 						message: "gitops.noTunnel",
 						fallback: "Waiting for agent tunnel. Make sure the agent is running and a tunnel is active."
-					}) : /* @__PURE__ */ v(a, {
-						stats: ge,
-						loading: ve || L.isLoading,
-						error: be
-					}) : /* @__PURE__ */ v(x, {
+					}) : /* @__PURE__ */ y(S, {
 						tr: D,
 						icon: m,
 						message: "gitops.noProvidersVibe",
@@ -221,15 +217,15 @@ var b = ({ vibeId: b, agentId: C, profile: w, tunnelUrl: T, apiKey: E, tr: D })
 						ctaLabel: D("gitops.addProvider", "Add Provider"),
 						onCta: () => A(!0)
 					}) }),
-					O === "ci" && !k && /* @__PURE__ */ v(_, { children: z ? !T || !E ? /* @__PURE__ */ v(S, {
+					O === "ci" && !k && /* @__PURE__ */ y(v, { children: z ? w ? /* @__PURE__ */ y(o, {
+						status: ge,
+						loading: ve || L.isLoading,
+						error: be
+					}) : /* @__PURE__ */ y(C, {
 						tr: D,
 						message: "gitops.noTunnelCi",
 						fallback: "Waiting for agent tunnel."
-					}) : /* @__PURE__ */ v(o, {
-						status: _e,
-						loading: ye || L.isLoading,
-						error: xe
-					}) : /* @__PURE__ */ v(x, {
+					}) : /* @__PURE__ */ y(S, {
 						tr: D,
 						icon: h,
 						message: "gitops.noProvidersCi",
@@ -237,26 +233,26 @@ var b = ({ vibeId: b, agentId: C, profile: w, tunnelUrl: T, apiKey: E, tr: D })
 						ctaLabel: D("gitops.addProvider", "Add Provider"),
 						onCta: () => A(!0)
 					}) }),
-					O === "git-ui" && /* @__PURE__ */ v(t, {
-						agentId: C || null,
+					O === "git-ui" && /* @__PURE__ */ y(t, {
+						agentId: w || null,
 						required: ["@vibecontrols/vibe-plugin-tool-git"],
 						mode: "all",
 						eyebrow: D("gitops.ungitEyebrow", "Ungit plugin required"),
 						title: D("gitops.ungitTitle", "Install the visual git client"),
 						description: D("gitops.ungitDescription", "The Git UI embeds the Ungit visual git client served by your agent. Install the plugin to continue."),
-						children: $ ? /* @__PURE__ */ v("div", {
+						children: $ ? /* @__PURE__ */ y("div", {
 							className: "rounded-lg border border-border-default bg-status-error-bg-subtle p-4",
-							children: /* @__PURE__ */ v("p", {
+							children: /* @__PURE__ */ y("p", {
 								className: "text-sm text-status-error-text",
 								children: $
 							})
-						}) : Z ? /* @__PURE__ */ v("iframe", {
+						}) : Z ? /* @__PURE__ */ y("iframe", {
 							src: Z,
 							title: "Ungit",
 							className: "w-full min-h-[600px] rounded-lg border border-border-default"
-						}) : /* @__PURE__ */ v("div", {
+						}) : /* @__PURE__ */ y("div", {
 							className: "rounded-lg border border-border-default bg-bg-sunken p-4",
-							children: /* @__PURE__ */ v("p", {
+							children: /* @__PURE__ */ y("p", {
 								className: "text-sm text-text-secondary",
 								children: D("gitops.ungitLoading", "Loading Ungit…")
 							})
@@ -266,29 +262,29 @@ var b = ({ vibeId: b, agentId: C, profile: w, tunnelUrl: T, apiKey: E, tr: D })
 			})]
 		})]
 	}, "gitops");
-}, x = ({ tr: e, icon: t, message: n, fallback: r, ctaLabel: i, onCta: a }) => /* @__PURE__ */ y("div", {
+}, S = ({ tr: e, icon: t, message: n, fallback: r, ctaLabel: i, onCta: a }) => /* @__PURE__ */ b("div", {
 	className: "rounded-lg border border-border-default bg-bg-surface p-6 text-center",
 	children: [
-		/* @__PURE__ */ v(t, { className: "size-8 text-text-secondary mx-auto mb-3" }),
-		/* @__PURE__ */ v("p", {
+		/* @__PURE__ */ y(t, { className: "size-8 text-text-secondary mx-auto mb-3" }),
+		/* @__PURE__ */ y("p", {
 			className: "text-sm text-text-secondary",
 			children: e(n, r)
 		}),
-		i && a && /* @__PURE__ */ v("button", {
+		i && a && /* @__PURE__ */ y("button", {
 			type: "button",
 			onClick: a,
 			className: "mt-3 px-4 py-2 text-sm font-medium rounded-md bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bg-hover transition-colors",
 			children: i
 		})
 	]
-}), S = ({ tr: e, message: t, fallback: n }) => /* @__PURE__ */ v("div", {
+}), C = ({ tr: e, message: t, fallback: n }) => /* @__PURE__ */ y("div", {
 	className: "rounded-lg border border-border-default bg-bg-sunken p-4",
-	children: /* @__PURE__ */ v("p", {
+	children: /* @__PURE__ */ y("p", {
 		className: "text-sm text-text-secondary",
 		children: e(t, n)
 	})
 });
 //#endregion
-export { b as VibeGitOpsTab };
+export { x as VibeGitOpsTab };
 
 //# sourceMappingURL=VibeGitOpsTab.js.map

package/dist/components/gitops/VibeGitOpsTab.js.map

@@ -1 +1 @@
-{"version":3,"file":"VibeGitOpsTab.js","names":[],"sources":["../../../src/components/gitops/VibeGitOpsTab.tsx"],"sourcesContent":["/**\n * VibeGitOpsTab — GitOps tab content for the Vibe detail page.\n *\n * V2: All data is sourced from the agent over the tunnel via\n * `/api/profiles/<profile>/gitops/<provider>/*`. No backend GraphQL\n * involvement. The backend's old `gitopsProvider` records are deprecated.\n *\n * Sub-tabs:\n * 1. Repo Stats — repo metadata + PR + issue + security counts\n * 2. CI Pipelines — recent runs + analytics percentiles\n * 3. Git UI — Ungit iframe (when vibe-plugin-tool-git is installed)\n */\nimport { useCallback, useEffect, useMemo, useState, type FC } from 'react';\nimport { motion } from 'framer-motion';\nimport { GitMerge, BarChart3, Play, GitBranch, RefreshCw } from 'lucide-react';\nimport { useQueryClient } from '@tanstack/react-query';\n\nimport { RepoStatsTab } from './RepoStatsTab';\nimport { CITab } from './CITab';\nimport { GitOpsSetup } from './GitOpsSetup';\nimport { GitOpsProviderPicker } from './GitOpsProviderPicker';\nimport { PluginGate } from '@/components/shared';\nimport { GIT_PACKAGE } from '@/constants/pluginCatalog';\nimport { useVibeControls } from '@/providers/VibeControlsProvider';\nimport {\n  useGitopsContributors,\n  useGitopsIssues,\n  useGitopsLanguages,\n  useGitopsPipelineAnalytics,\n  useGitopsProviders,\n  useGitopsPullRequests,\n  useGitopsRepos,\n  useGitopsRuns,\n  useGitopsSecurityAlerts,\n} from '@/hooks/useGitops';\nimport { composeCiStatus, composeRepoStats, type ProviderName, type RepoFqn } from './types';\nimport {\n  mintIframeToken,\n  scheduleIframeTokenRefresh,\n  appendIframeTokenQuery,\n  type IframeTokenAutoRefreshHandle,\n  type IframeTokenResponse,\n} from '@/services/iframeToken';\n\ninterface VibeGitOpsTabProps {\n  vibeId: string;\n  agentId: string;\n  /** Canonical agent profile name. */\n  profile: string;\n  tunnelUrl: string | null;\n  apiKey: string | null;\n  tr: (key: string, fallback: string) => string;\n}\n\ntype GitOpsSubTab = 'repo-stats' | 'ci' | 'git-ui';\n\nexport const VibeGitOpsTab: FC<VibeGitOpsTabProps> = ({\n  vibeId,\n  agentId,\n  profile,\n  tunnelUrl,\n  apiKey,\n  tr,\n}) => {\n  const [subTab, setSubTab] = useState<GitOpsSubTab>('repo-stats');\n  const [showSetup, setShowSetup] = useState(false);\n  const [selectedProvider, setSelectedProvider] = useState<ProviderName | null>(null);\n  const [selectedRepoFqn, setSelectedRepoFqn] = useState<RepoFqn | null>(null);\n  const { workspaceId } = useVibeControls();\n  const qc = useQueryClient();\n\n  const ctx = useMemo(\n    () => ({ tunnelUrl, apiKey, profile, workspaceId: workspaceId ?? '', agentId }),\n    [tunnelUrl, apiKey, profile, workspaceId, agentId]\n  );\n\n  // Providers registered on the agent.\n  const providersQ = useGitopsProviders(ctx);\n  const authedProviders = useMemo(\n    () => providersQ.data?.filter((p) => p.registered && p.authenticated) ?? [],\n    [providersQ.data]\n  );\n  const hasProviders = authedProviders.length > 0;\n\n  // Pick a default once data loads.\n  useEffect(() => {\n    if (!selectedProvider && authedProviders.length > 0) {\n      const first = authedProviders[0];\n      if (first) {\n        setSelectedProvider(first.name as ProviderName);\n      }\n    }\n  }, [authedProviders, selectedProvider]);\n\n  // Once a provider is selected, fetch repos for it and pick the first one\n  // by default. The user can switch repos via the picker.\n  const reposQ = useGitopsRepos(ctx, selectedProvider, { limit: 30 });\n  useEffect(() => {\n    if (!selectedRepoFqn && reposQ.data?.items.length) {\n      const first = reposQ.data.items[0];\n      if (first) {\n        setSelectedRepoFqn(first.fqn);\n      }\n    }\n  }, [reposQ.data, selectedRepoFqn]);\n\n  // Repo Stats composite — runs only when active sub-tab is repo-stats.\n  const repoQ = useGitopsRepos(ctx, selectedProvider, { limit: 1 }); // metadata via list (1st item)\n  const repoDetailQ = useGitopsRepos.length ? null : null; // keep TS happy; we use repoQ.items[0]\n  const pullsQ = useGitopsPullRequests(ctx, selectedProvider, selectedRepoFqn, {\n    state: 'open',\n    limit: 100,\n  });\n  const issuesQ = useGitopsIssues(ctx, selectedProvider, selectedRepoFqn, {\n    state: 'open',\n    limit: 100,\n  });\n  const languagesQ = useGitopsLanguages(ctx, selectedProvider, selectedRepoFqn);\n  const contributorsQ = useGitopsContributors(ctx, selectedProvider, selectedRepoFqn, 20);\n  const securityQ = useGitopsSecurityAlerts(ctx, selectedProvider, selectedRepoFqn);\n\n  const activeRepo = useMemo(\n    () =>\n      selectedRepoFqn\n        ? (repoQ.data?.items.find((r) => r.fqn === selectedRepoFqn) ??\n          reposQ.data?.items.find((r) => r.fqn === selectedRepoFqn) ??\n          null)\n        : (repoQ.data?.items[0] ?? null),\n    [repoQ.data, reposQ.data, selectedRepoFqn]\n  );\n\n  const repoStats = useMemo(\n    () =>\n      composeRepoStats({\n        repo: activeRepo,\n        pulls: pullsQ.data,\n        issues: issuesQ.data,\n        languages: languagesQ.data,\n        contributors: contributorsQ.data,\n        securityAlerts: securityQ.data,\n      }),\n    [activeRepo, pullsQ.data, issuesQ.data, languagesQ.data, contributorsQ.data, securityQ.data]\n  );\n\n  // CI Status composite.\n  const runsQ = useGitopsRuns(ctx, selectedProvider, selectedRepoFqn, { limit: 30 });\n  const ciAnalyticsQ = useGitopsPipelineAnalytics(ctx, selectedProvider, selectedRepoFqn);\n  const ciStatus = useMemo(\n    () =>\n      composeCiStatus({\n        pipelines: undefined,\n        runs: runsQ.data,\n        analytics: ciAnalyticsQ.data,\n      }),\n    [runsQ.data, ciAnalyticsQ.data]\n  );\n\n  const repoStatsLoading = pullsQ.isLoading || issuesQ.isLoading || languagesQ.isLoading;\n  const ciStatusLoading = runsQ.isLoading || ciAnalyticsQ.isLoading;\n  const repoStatsError = (pullsQ.error || issuesQ.error || languagesQ.error)?.message;\n  const ciStatusError = (runsQ.error || ciAnalyticsQ.error)?.message;\n\n  const handleRefresh = useCallback(() => {\n    void qc.invalidateQueries({ queryKey: ['gitops', workspaceId ?? '', agentId, profile] });\n  }, [qc, workspaceId, agentId, profile]);\n\n  const isRefreshing = pullsQ.isFetching || runsQ.isFetching;\n\n  const subTabs: { id: GitOpsSubTab; label: string; icon: typeof BarChart3 }[] = [\n    { id: 'repo-stats', label: tr('gitops.repoStats', 'Repo Stats'), icon: BarChart3 },\n    { id: 'ci', label: tr('gitops.ci', 'CI Pipelines'), icon: Play },\n    { id: 'git-ui', label: tr('gitops.gitUI', 'Git UI'), icon: GitBranch },\n  ];\n\n  // Ungit iframe state (unchanged from v1).\n  const [ungitIframeUrl, setUngitIframeUrl] = useState<string | null>(null);\n  const [ungitTokenError, setUngitTokenError] = useState<string | null>(null);\n  useEffect(() => {\n    let cancelled = false;\n    let handle: IframeTokenAutoRefreshHandle | null = null;\n    const setup = async () => {\n      if (!agentId || !tunnelUrl || subTab !== 'git-ui') {\n        setUngitIframeUrl(null);\n        return;\n      }\n      try {\n        // F5 residual — Ungit's reverse proxy lives at `/ungit/` (declared\n        // by the external `vibe-plugin-tool-git` package's publicPaths +\n        // meta.url override). The plugin's createUngitProxy validates the\n        // entry-document auth via `?vt=<token>` (or `?apiKey=`), then\n        // issues its own session cookie for sub-requests. Switching this\n        // to a host-level hash→cookie shim (like F5 does for `/ui/<p>`)\n        // would require an SDK contract change + coordinated republish of\n        // the external plugin package. Until that ships, the iframe-token\n        // sits in the URL once. Mitigations in place: F6 makes it single-\n        // use (replayed token rejected); F7 strips the token before\n        // upstream forwarding so Ungit never sees it; F10 enforces Origin\n        // on non-GET/HEAD sub-requests. Residual surface: one query string\n        // appears in CF logs + browser history for the initial document.\n        const initial: IframeTokenResponse = await mintIframeToken(agentId, profile, '/ungit');\n        if (cancelled) return;\n        const baseUrl = `${tunnelUrl.replace(/\\/$/, '')}/ungit/`;\n        setUngitIframeUrl(appendIframeTokenQuery(baseUrl, initial.token));\n        handle = scheduleIframeTokenRefresh(\n          agentId,\n          profile,\n          '/ungit',\n          initial,\n          (next: IframeTokenResponse) => {\n            setUngitIframeUrl(appendIframeTokenQuery(baseUrl, next.token));\n          }\n        );\n      } catch (err) {\n        if (!cancelled) {\n          setUngitTokenError(err instanceof Error ? err.message : 'Failed to fetch iframe token');\n        }\n      }\n    };\n    void setup();\n    return () => {\n      cancelled = true;\n      handle?.cancel();\n    };\n  }, [agentId, profile, tunnelUrl, subTab]);\n\n  return (\n    <motion.div\n      key=\"gitops\"\n      initial={{ opacity: 0, y: 8 }}\n      animate={{ opacity: 1, y: 0 }}\n      exit={{ opacity: 0, y: -8 }}\n      transition={{ duration: 0.2 }}\n      className=\"space-y-4\"\n      data-vibe-id={vibeId}\n    >\n      <div className=\"flex items-center justify-between\">\n        <div className=\"flex items-center gap-2\">\n          <GitMerge className=\"size-5 text-text-secondary\" />\n          <h3 className=\"font-semibold text-text-primary\">\n            {tr('vibeDetails.gitopsTitle', 'GitOps')}\n          </h3>\n        </div>\n        <div className=\"flex items-center gap-2\">\n          {hasProviders && (\n            <GitOpsProviderPicker\n              providers={authedProviders.map((p) => p.name as ProviderName)}\n              selected={selectedProvider}\n              onChange={setSelectedProvider}\n            />\n          )}\n          {hasProviders && (subTab === 'repo-stats' || subTab === 'ci') && (\n            <button\n              type=\"button\"\n              onClick={handleRefresh}\n              disabled={isRefreshing}\n              className=\"flex items-center gap-1.5 px-2.5 py-1 text-xs rounded-md border border-border-default text-text-secondary hover:text-text-primary hover:border-border-strong disabled:opacity-50 transition-colors\"\n              data-testid=\"gitops-refresh\"\n            >\n              <RefreshCw className={`size-3 ${isRefreshing ? 'animate-spin' : ''}`} />\n              {tr('gitops.refresh', 'Refresh')}\n            </button>\n          )}\n          {!showSetup && (\n            <button\n              type=\"button\"\n              onClick={() => setShowSetup(true)}\n              className=\"flex items-center gap-1.5 px-3 py-1.5 text-xs font-medium rounded-md bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bg-hover transition-colors\"\n              data-testid=\"gitops-add-provider\"\n            >\n              {hasProviders\n                ? tr('gitops.addAnotherProvider', 'Add Provider')\n                : tr('gitops.addProvider', 'Add Provider')}\n            </button>\n          )}\n        </div>\n      </div>\n\n      <div className=\"flex flex-col gap-4 lg:flex-row lg:gap-6\">\n        <nav\n          className=\"w-full flex-shrink-0 rounded-lg border border-border-default bg-bg-surface p-2 lg:w-56\"\n          role=\"tablist\"\n          aria-label={tr('gitops.navigation', 'GitOps navigation')}\n        >\n          {subTabs.map((tab) => {\n            const Icon = tab.icon;\n            const isActive = subTab === tab.id;\n            return (\n              <button\n                type=\"button\"\n                key={tab.id}\n                role=\"tab\"\n                aria-selected={isActive}\n                onClick={() => setSubTab(tab.id)}\n                className={`flex w-full items-center gap-2 rounded-md px-3 py-2 text-left text-sm font-medium transition-colors ${\n                  isActive\n                    ? 'bg-action-primary-bg text-action-primary-text shadow-sm'\n                    : 'text-text-secondary hover:bg-action-ghost-bg-hover hover:text-text-primary'\n                }`}\n              >\n                <Icon className=\"size-4 shrink-0\" />\n                <span className=\"truncate\">{tab.label}</span>\n              </button>\n            );\n          })}\n        </nav>\n\n        <div className=\"min-w-0 flex-1 space-y-4\">\n          {showSetup && (\n            <GitOpsSetup\n              ctx={ctx}\n              onCreated={() => {\n                setShowSetup(false);\n                void providersQ.refetch();\n              }}\n              onCancel={() => setShowSetup(false)}\n            />\n          )}\n\n          {subTab === 'repo-stats' && !showSetup && (\n            <>\n              {!hasProviders ? (\n                <EmptyState\n                  tr={tr}\n                  icon={GitMerge}\n                  message=\"gitops.noProvidersVibe\"\n                  fallback=\"No GitOps provider configured. Add a PAT to see repository stats.\"\n                  ctaLabel={tr('gitops.addProvider', 'Add Provider')}\n                  onCta={() => setShowSetup(true)}\n                />\n              ) : !tunnelUrl || !apiKey ? (\n                <Notice\n                  tr={tr}\n                  message=\"gitops.noTunnel\"\n                  fallback=\"Waiting for agent tunnel. Make sure the agent is running and a tunnel is active.\"\n                />\n              ) : (\n                <RepoStatsTab\n                  stats={repoStats}\n                  loading={repoStatsLoading || providersQ.isLoading}\n                  error={repoStatsError}\n                />\n              )}\n            </>\n          )}\n\n          {subTab === 'ci' && !showSetup && (\n            <>\n              {!hasProviders ? (\n                <EmptyState\n                  tr={tr}\n                  icon={Play}\n                  message=\"gitops.noProvidersCi\"\n                  fallback=\"No GitOps provider configured. Add a PAT to see CI pipeline status.\"\n                  ctaLabel={tr('gitops.addProvider', 'Add Provider')}\n                  onCta={() => setShowSetup(true)}\n                />\n              ) : !tunnelUrl || !apiKey ? (\n                <Notice tr={tr} message=\"gitops.noTunnelCi\" fallback=\"Waiting for agent tunnel.\" />\n              ) : (\n                <CITab\n                  status={ciStatus}\n                  loading={ciStatusLoading || providersQ.isLoading}\n                  error={ciStatusError}\n                />\n              )}\n            </>\n          )}\n\n          {subTab === 'git-ui' && (\n            <PluginGate\n              agentId={agentId || null}\n              required={[GIT_PACKAGE]}\n              mode=\"all\"\n              eyebrow={tr('gitops.ungitEyebrow', 'Ungit plugin required')}\n              title={tr('gitops.ungitTitle', 'Install the visual git client')}\n              description={tr(\n                'gitops.ungitDescription',\n                'The Git UI embeds the Ungit visual git client served by your agent. Install the plugin to continue.'\n              )}\n            >\n              {ungitTokenError ? (\n                <div className=\"rounded-lg border border-border-default bg-status-error-bg-subtle p-4\">\n                  <p className=\"text-sm text-status-error-text\">{ungitTokenError}</p>\n                </div>\n              ) : ungitIframeUrl ? (\n                <iframe\n                  src={ungitIframeUrl}\n                  title=\"Ungit\"\n                  className=\"w-full min-h-[600px] rounded-lg border border-border-default\"\n                />\n              ) : (\n                <div className=\"rounded-lg border border-border-default bg-bg-sunken p-4\">\n                  <p className=\"text-sm text-text-secondary\">\n                    {tr('gitops.ungitLoading', 'Loading Ungit…')}\n                  </p>\n                </div>\n              )}\n            </PluginGate>\n          )}\n        </div>\n      </div>\n    </motion.div>\n  );\n};\n\ninterface EmptyStateProps {\n  tr: (key: string, fallback: string) => string;\n  icon: typeof BarChart3;\n  message: string;\n  fallback: string;\n  ctaLabel?: string;\n  onCta?: () => void;\n}\n\nconst EmptyState: FC<EmptyStateProps> = ({\n  tr,\n  icon: Icon,\n  message,\n  fallback,\n  ctaLabel,\n  onCta,\n}) => (\n  <div className=\"rounded-lg border border-border-default bg-bg-surface p-6 text-center\">\n    <Icon className=\"size-8 text-text-secondary mx-auto mb-3\" />\n    <p className=\"text-sm text-text-secondary\">{tr(message, fallback)}</p>\n    {ctaLabel && onCta && (\n      <button\n        type=\"button\"\n        onClick={onCta}\n        className=\"mt-3 px-4 py-2 text-sm font-medium rounded-md bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bg-hover transition-colors\"\n      >\n        {ctaLabel}\n      </button>\n    )}\n  </div>\n);\n\ninterface NoticeProps {\n  tr: (key: string, fallback: string) => string;\n  message: string;\n  fallback: string;\n}\n\nconst Notice: FC<NoticeProps> = ({ tr, message, fallback }) => (\n  <div className=\"rounded-lg border border-border-default bg-bg-sunken p-4\">\n    <p className=\"text-sm text-text-secondary\">{tr(message, fallback)}</p>\n  </div>\n);\n"],"mappings":";;;;;;;;;;;;;;;;;AAwDA,IAAa,KAAyC,EACpD,WACA,YACA,YACA,cACA,WACA,YACI;CACJ,IAAM,CAAC,GAAQ,MAAa,EAAuB,aAAa,EAC1D,CAAC,GAAW,KAAgB,EAAS,GAAM,EAC3C,CAAC,GAAkB,KAAuB,EAA8B,KAAK,EAC7E,CAAC,GAAiB,MAAsB,EAAyB,KAAK,EACtE,EAAE,mBAAgB,GAAiB,EACnC,IAAK,IAAgB,EAErB,IAAM,SACH;EAAE;EAAW;EAAQ;EAAS,aAAa,KAAe;EAAI;EAAS,GAC9E;EAAC;EAAW;EAAQ;EAAS;EAAa;EAAQ,CACnD,EAGK,IAAa,GAAmB,EAAI,EACpC,IAAkB,QAChB,EAAW,MAAM,QAAQ,MAAM,EAAE,cAAc,EAAE,cAAc,IAAI,EAAE,EAC3E,CAAC,EAAW,KAAK,CAClB,EACK,IAAe,EAAgB,SAAS;AAG9C,SAAgB;AACd,MAAI,CAAC,KAAoB,EAAgB,SAAS,GAAG;GACnD,IAAM,IAAQ,EAAgB;AAC9B,GAAI,KACF,EAAoB,EAAM,KAAqB;;IAGlD,CAAC,GAAiB,EAAiB,CAAC;CAIvC,IAAM,IAAS,EAAe,GAAK,GAAkB,EAAE,OAAO,IAAI,CAAC;AACnE,SAAgB;AACd,MAAI,CAAC,KAAmB,EAAO,MAAM,MAAM,QAAQ;GACjD,IAAM,IAAQ,EAAO,KAAK,MAAM;AAChC,GAAI,KACF,GAAmB,EAAM,IAAI;;IAGhC,CAAC,EAAO,MAAM,EAAgB,CAAC;CAGlC,IAAM,IAAQ,EAAe,GAAK,GAAkB,EAAE,OAAO,GAAG,CAAC;AAC7C,GAAe;CACnC,IAAM,IAAS,GAAsB,GAAK,GAAkB,GAAiB;EAC3E,OAAO;EACP,OAAO;EACR,CAAC,EACI,IAAU,GAAgB,GAAK,GAAkB,GAAiB;EACtE,OAAO;EACP,OAAO;EACR,CAAC,EACI,IAAa,GAAmB,GAAK,GAAkB,EAAgB,EACvE,IAAgB,GAAsB,GAAK,GAAkB,GAAiB,GAAG,EACjF,IAAY,EAAwB,GAAK,GAAkB,EAAgB,EAE3E,IAAa,QAEf,IACK,EAAM,MAAM,MAAM,MAAM,MAAM,EAAE,QAAQ,EAAgB,IACzD,EAAO,MAAM,MAAM,MAAM,MAAM,EAAE,QAAQ,EAAgB,IACzD,OACC,EAAM,MAAM,MAAM,MAAM,MAC/B;EAAC,EAAM;EAAM,EAAO;EAAM;EAAgB,CAC3C,EAEK,KAAY,QAEd,GAAiB;EACf,MAAM;EACN,OAAO,EAAO;EACd,QAAQ,EAAQ;EAChB,WAAW,EAAW;EACtB,cAAc,EAAc;EAC5B,gBAAgB,EAAU;EAC3B,CAAC,EACJ;EAAC;EAAY,EAAO;EAAM,EAAQ;EAAM,EAAW;EAAM,EAAc;EAAM,EAAU;EAAK,CAC7F,EAGK,IAAQ,GAAc,GAAK,GAAkB,GAAiB,EAAE,OAAO,IAAI,CAAC,EAC5E,IAAe,GAA2B,GAAK,GAAkB,EAAgB,EACjF,KAAW,QAEb,GAAgB;EACd,WAAW,KAAA;EACX,MAAM,EAAM;EACZ,WAAW,EAAa;EACzB,CAAC,EACJ,CAAC,EAAM,MAAM,EAAa,KAAK,CAChC,EAEK,KAAmB,EAAO,aAAa,EAAQ,aAAa,EAAW,WACvE,KAAkB,EAAM,aAAa,EAAa,WAClD,MAAkB,EAAO,SAAS,EAAQ,SAAS,EAAW,QAAQ,SACtE,MAAiB,EAAM,SAAS,EAAa,QAAQ,SAErD,KAAgB,SAAkB;AACjC,IAAG,kBAAkB,EAAE,UAAU;GAAC;GAAU,KAAe;GAAI;GAAS;GAAQ,EAAE,CAAC;IACvF;EAAC;EAAI;EAAa;EAAS;EAAQ,CAAC,EAEjC,IAAe,EAAO,cAAc,EAAM,YAE1C,KAAyE;EAC7E;GAAE,IAAI;GAAc,OAAO,EAAG,oBAAoB,aAAa;GAAE,MAAM;GAAW;EAClF;GAAE,IAAI;GAAM,OAAO,EAAG,aAAa,eAAe;GAAE,MAAM;GAAM;EAChE;GAAE,IAAI;GAAU,OAAO,EAAG,gBAAgB,SAAS;GAAE,MAAM;GAAW;EACvE,EAGK,CAAC,GAAgB,KAAqB,EAAwB,KAAK,EACnE,CAAC,GAAiB,MAAsB,EAAwB,KAAK;AAiD3E,QAhDA,QAAgB;EACd,IAAI,IAAY,IACZ,IAA8C;AAwClD,UAvCc,YAAY;AACxB,OAAI,CAAC,KAAW,CAAC,KAAa,MAAW,UAAU;AACjD,MAAkB,KAAK;AACvB;;AAEF,OAAI;IAcF,IAAM,IAA+B,MAAM,EAAgB,GAAS,GAAS,SAAS;AACtF,QAAI,EAAW;IACf,IAAM,IAAU,GAAG,EAAU,QAAQ,OAAO,GAAG,CAAC;AAEhD,IADA,EAAkB,EAAuB,GAAS,EAAQ,MAAM,CAAC,EACjE,IAAS,EACP,GACA,GACA,UACA,IACC,MAA8B;AAC7B,OAAkB,EAAuB,GAAS,EAAK,MAAM,CAAC;MAEjE;YACM,GAAK;AACZ,IAAK,KACH,GAAmB,aAAe,QAAQ,EAAI,UAAU,+BAA+B;;MAIjF,QACC;AAEX,GADA,IAAY,IACZ,GAAQ,QAAQ;;IAEjB;EAAC;EAAS;EAAS;EAAW;EAAO,CAAC,EAGvC,kBAAC,GAAO,KAAR;EAEE,SAAS;GAAE,SAAS;GAAG,GAAG;GAAG;EAC7B,SAAS;GAAE,SAAS;GAAG,GAAG;GAAG;EAC7B,MAAM;GAAE,SAAS;GAAG,GAAG;GAAI;EAC3B,YAAY,EAAE,UAAU,IAAK;EAC7B,WAAU;EACV,gBAAc;YAPhB,CASE,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,GAAD,EAAU,WAAU,8BAA+B,CAAA,EACnD,kBAAC,MAAD;KAAI,WAAU;eACX,EAAG,2BAA2B,SAAS;KACrC,CAAA,CACD;OACN,kBAAC,OAAD;IAAK,WAAU;cAAf;KACG,KACC,kBAAC,IAAD;MACE,WAAW,EAAgB,KAAK,MAAM,EAAE,KAAqB;MAC7D,UAAU;MACV,UAAU;MACV,CAAA;KAEH,MAAiB,MAAW,gBAAgB,MAAW,SACtD,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,UAAU;MACV,WAAU;MACV,eAAY;gBALd,CAOE,kBAAC,GAAD,EAAW,WAAW,UAAU,IAAe,iBAAiB,MAAQ,CAAA,EACvE,EAAG,kBAAkB,UAAU,CACzB;;KAEV,CAAC,KACA,kBAAC,UAAD;MACE,MAAK;MACL,eAAe,EAAa,GAAK;MACjC,WAAU;MACV,eAAY;gBAGR,EADH,IACM,8BACA,sBAD6B,eACQ;MACrC,CAAA;KAEP;MACF;MAEN,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD;IACE,WAAU;IACV,MAAK;IACL,cAAY,EAAG,qBAAqB,oBAAoB;cAEvD,GAAQ,KAAK,MAAQ;KACpB,IAAM,IAAO,EAAI,MACX,IAAW,MAAW,EAAI;AAChC,YACE,kBAAC,UAAD;MACE,MAAK;MAEL,MAAK;MACL,iBAAe;MACf,eAAe,GAAU,EAAI,GAAG;MAChC,WAAW,uGACT,IACI,4DACA;gBATR,CAYE,kBAAC,GAAD,EAAM,WAAU,mBAAoB,CAAA,EACpC,kBAAC,QAAD;OAAM,WAAU;iBAAY,EAAI;OAAa,CAAA,CACtC;QAZF,EAAI,GAYF;MAEX;IACE,CAAA,EAEN,kBAAC,OAAD;IAAK,WAAU;cAAf;KACG,KACC,kBAAC,IAAD;MACO;MACL,iBAAiB;AAEV,OADL,EAAa,GAAM,EACd,EAAW,SAAS;;MAE3B,gBAAgB,EAAa,GAAM;MACnC,CAAA;KAGH,MAAW,gBAAgB,CAAC,KAC3B,kBAAA,GAAA,EAAA,UACI,IASE,CAAC,KAAa,CAAC,IACjB,kBAAC,GAAD;MACM;MACJ,SAAQ;MACR,UAAS;MACT,CAAA,GAEF,kBAAC,GAAD;MACE,OAAO;MACP,SAAS,MAAoB,EAAW;MACxC,OAAO;MACP,CAAA,GAnBF,kBAAC,GAAD;MACM;MACJ,MAAM;MACN,SAAQ;MACR,UAAS;MACT,UAAU,EAAG,sBAAsB,eAAe;MAClD,aAAa,EAAa,GAAK;MAC/B,CAAA,EAcH,CAAA;KAGJ,MAAW,QAAQ,CAAC,KACnB,kBAAA,GAAA,EAAA,UACI,IASE,CAAC,KAAa,CAAC,IACjB,kBAAC,GAAD;MAAY;MAAI,SAAQ;MAAoB,UAAS;MAA8B,CAAA,GAEnF,kBAAC,GAAD;MACE,QAAQ;MACR,SAAS,MAAmB,EAAW;MACvC,OAAO;MACP,CAAA,GAfF,kBAAC,GAAD;MACM;MACJ,MAAM;MACN,SAAQ;MACR,UAAS;MACT,UAAU,EAAG,sBAAsB,eAAe;MAClD,aAAa,EAAa,GAAK;MAC/B,CAAA,EAUH,CAAA;KAGJ,MAAW,YACV,kBAAC,GAAD;MACE,SAAS,KAAW;MACpB,UAAU,CAAA,qCAAa;MACvB,MAAK;MACL,SAAS,EAAG,uBAAuB,wBAAwB;MAC3D,OAAO,EAAG,qBAAqB,gCAAgC;MAC/D,aAAa,EACX,2BACA,sGACD;gBAEA,IACC,kBAAC,OAAD;OAAK,WAAU;iBACb,kBAAC,KAAD;QAAG,WAAU;kBAAkC;QAAoB,CAAA;OAC/D,CAAA,GACJ,IACF,kBAAC,UAAD;OACE,KAAK;OACL,OAAM;OACN,WAAU;OACV,CAAA,GAEF,kBAAC,OAAD;OAAK,WAAU;iBACb,kBAAC,KAAD;QAAG,WAAU;kBACV,EAAG,uBAAuB,iBAAiB;QAC1C,CAAA;OACA,CAAA;MAEG,CAAA;KAEX;MACF;KACK;IA9KP,SA8KO;GAaX,KAAmC,EACvC,OACA,MAAM,GACN,YACA,aACA,aACA,eAEA,kBAAC,OAAD;CAAK,WAAU;WAAf;EACE,kBAAC,GAAD,EAAM,WAAU,2CAA4C,CAAA;EAC5D,kBAAC,KAAD;GAAG,WAAU;aAA+B,EAAG,GAAS,EAAS;GAAK,CAAA;EACrE,KAAY,KACX,kBAAC,UAAD;GACE,MAAK;GACL,SAAS;GACT,WAAU;aAET;GACM,CAAA;EAEP;IASF,KAA2B,EAAE,OAAI,YAAS,kBAC9C,kBAAC,OAAD;CAAK,WAAU;WACb,kBAAC,KAAD;EAAG,WAAU;YAA+B,EAAG,GAAS,EAAS;EAAK,CAAA;CAClE,CAAA"}
+{"version":3,"file":"VibeGitOpsTab.js","names":[],"sources":["../../../src/components/gitops/VibeGitOpsTab.tsx"],"sourcesContent":["/**\n * VibeGitOpsTab — GitOps tab content for the Vibe detail page.\n *\n * V2: All data is sourced from the agent over the tunnel via\n * `/api/profiles/<profile>/gitops/<provider>/*`. No backend GraphQL\n * involvement. The backend's old `gitopsProvider` records are deprecated.\n *\n * Sub-tabs:\n * 1. Repo Stats — repo metadata + PR + issue + security counts\n * 2. CI Pipelines — recent runs + analytics percentiles\n * 3. Git UI — Ungit iframe (when vibe-plugin-tool-git is installed)\n */\nimport { useCallback, useEffect, useMemo, useState, type FC } from 'react';\nimport { motion } from 'framer-motion';\nimport { GitMerge, BarChart3, Play, GitBranch, RefreshCw } from 'lucide-react';\nimport { useQueryClient } from '@tanstack/react-query';\n\nimport { RepoStatsTab } from './RepoStatsTab';\nimport { CITab } from './CITab';\nimport { GitOpsSetup } from './GitOpsSetup';\nimport { GitOpsProviderPicker } from './GitOpsProviderPicker';\nimport { PluginGate } from '@/components/shared';\nimport { GIT_PACKAGE } from '@/constants/pluginCatalog';\nimport { useVibeControls } from '@/providers/VibeControlsProvider';\nimport {\n  useGitopsContributors,\n  useGitopsIssues,\n  useGitopsLanguages,\n  useGitopsPipelineAnalytics,\n  useGitopsProviders,\n  useGitopsPullRequests,\n  useGitopsRepos,\n  useGitopsRuns,\n  useGitopsSecurityAlerts,\n} from '@/hooks/useGitops';\nimport { composeCiStatus, composeRepoStats, type ProviderName, type RepoFqn } from './types';\nimport {\n  mintIframeToken,\n  scheduleIframeTokenRefresh,\n  appendIframeTokenQuery,\n  type IframeTokenAutoRefreshHandle,\n  type IframeTokenResponse,\n} from '@/services/iframeToken';\n\ninterface VibeGitOpsTabProps {\n  vibeId: string;\n  agentId: string;\n  /** Canonical agent profile name. */\n  profile: string;\n  /**\n   * Tunnel URL — retained ONLY for the `git-ui` iframe handshake\n   * (ungit subpath) which still bootstraps via a one-time iframe token.\n   * GitOps REST calls no longer use this; they route through the svc\n   * proxy (F4 Wave C).\n   */\n  tunnelUrl: string | null;\n  tr: (key: string, fallback: string) => string;\n}\n\ntype GitOpsSubTab = 'repo-stats' | 'ci' | 'git-ui';\n\nexport const VibeGitOpsTab: FC<VibeGitOpsTabProps> = ({\n  vibeId,\n  agentId,\n  profile,\n  tunnelUrl,\n  tr,\n}) => {\n  const [subTab, setSubTab] = useState<GitOpsSubTab>('repo-stats');\n  const [showSetup, setShowSetup] = useState(false);\n  const [selectedProvider, setSelectedProvider] = useState<ProviderName | null>(null);\n  const [selectedRepoFqn, setSelectedRepoFqn] = useState<RepoFqn | null>(null);\n  const { workspaceId } = useVibeControls();\n  const qc = useQueryClient();\n\n  const ctx = useMemo(\n    () => ({ profile, workspaceId: workspaceId ?? '', agentId }),\n    [profile, workspaceId, agentId]\n  );\n\n  // Providers registered on the agent.\n  const providersQ = useGitopsProviders(ctx);\n  const authedProviders = useMemo(\n    () => providersQ.data?.filter((p) => p.registered && p.authenticated) ?? [],\n    [providersQ.data]\n  );\n  const hasProviders = authedProviders.length > 0;\n\n  // Pick a default once data loads.\n  useEffect(() => {\n    if (!selectedProvider && authedProviders.length > 0) {\n      const first = authedProviders[0];\n      if (first) {\n        setSelectedProvider(first.name as ProviderName);\n      }\n    }\n  }, [authedProviders, selectedProvider]);\n\n  // Once a provider is selected, fetch repos for it and pick the first one\n  // by default. The user can switch repos via the picker.\n  const reposQ = useGitopsRepos(ctx, selectedProvider, { limit: 30 });\n  useEffect(() => {\n    if (!selectedRepoFqn && reposQ.data?.items.length) {\n      const first = reposQ.data.items[0];\n      if (first) {\n        setSelectedRepoFqn(first.fqn);\n      }\n    }\n  }, [reposQ.data, selectedRepoFqn]);\n\n  // Repo Stats composite — runs only when active sub-tab is repo-stats.\n  const repoQ = useGitopsRepos(ctx, selectedProvider, { limit: 1 }); // metadata via list (1st item)\n  const repoDetailQ = useGitopsRepos.length ? null : null; // keep TS happy; we use repoQ.items[0]\n  const pullsQ = useGitopsPullRequests(ctx, selectedProvider, selectedRepoFqn, {\n    state: 'open',\n    limit: 100,\n  });\n  const issuesQ = useGitopsIssues(ctx, selectedProvider, selectedRepoFqn, {\n    state: 'open',\n    limit: 100,\n  });\n  const languagesQ = useGitopsLanguages(ctx, selectedProvider, selectedRepoFqn);\n  const contributorsQ = useGitopsContributors(ctx, selectedProvider, selectedRepoFqn, 20);\n  const securityQ = useGitopsSecurityAlerts(ctx, selectedProvider, selectedRepoFqn);\n\n  const activeRepo = useMemo(\n    () =>\n      selectedRepoFqn\n        ? (repoQ.data?.items.find((r) => r.fqn === selectedRepoFqn) ??\n          reposQ.data?.items.find((r) => r.fqn === selectedRepoFqn) ??\n          null)\n        : (repoQ.data?.items[0] ?? null),\n    [repoQ.data, reposQ.data, selectedRepoFqn]\n  );\n\n  const repoStats = useMemo(\n    () =>\n      composeRepoStats({\n        repo: activeRepo,\n        pulls: pullsQ.data,\n        issues: issuesQ.data,\n        languages: languagesQ.data,\n        contributors: contributorsQ.data,\n        securityAlerts: securityQ.data,\n      }),\n    [activeRepo, pullsQ.data, issuesQ.data, languagesQ.data, contributorsQ.data, securityQ.data]\n  );\n\n  // CI Status composite.\n  const runsQ = useGitopsRuns(ctx, selectedProvider, selectedRepoFqn, { limit: 30 });\n  const ciAnalyticsQ = useGitopsPipelineAnalytics(ctx, selectedProvider, selectedRepoFqn);\n  const ciStatus = useMemo(\n    () =>\n      composeCiStatus({\n        pipelines: undefined,\n        runs: runsQ.data,\n        analytics: ciAnalyticsQ.data,\n      }),\n    [runsQ.data, ciAnalyticsQ.data]\n  );\n\n  const repoStatsLoading = pullsQ.isLoading || issuesQ.isLoading || languagesQ.isLoading;\n  const ciStatusLoading = runsQ.isLoading || ciAnalyticsQ.isLoading;\n  const repoStatsError = (pullsQ.error || issuesQ.error || languagesQ.error)?.message;\n  const ciStatusError = (runsQ.error || ciAnalyticsQ.error)?.message;\n\n  const handleRefresh = useCallback(() => {\n    void qc.invalidateQueries({ queryKey: ['gitops', workspaceId ?? '', agentId, profile] });\n  }, [qc, workspaceId, agentId, profile]);\n\n  const isRefreshing = pullsQ.isFetching || runsQ.isFetching;\n\n  const subTabs: { id: GitOpsSubTab; label: string; icon: typeof BarChart3 }[] = [\n    { id: 'repo-stats', label: tr('gitops.repoStats', 'Repo Stats'), icon: BarChart3 },\n    { id: 'ci', label: tr('gitops.ci', 'CI Pipelines'), icon: Play },\n    { id: 'git-ui', label: tr('gitops.gitUI', 'Git UI'), icon: GitBranch },\n  ];\n\n  // Ungit iframe state (unchanged from v1).\n  const [ungitIframeUrl, setUngitIframeUrl] = useState<string | null>(null);\n  const [ungitTokenError, setUngitTokenError] = useState<string | null>(null);\n  useEffect(() => {\n    let cancelled = false;\n    let handle: IframeTokenAutoRefreshHandle | null = null;\n    const setup = async () => {\n      if (!agentId || !tunnelUrl || subTab !== 'git-ui') {\n        setUngitIframeUrl(null);\n        return;\n      }\n      try {\n        // F5 residual — Ungit's reverse proxy lives at `/ungit/` (declared\n        // by the external `vibe-plugin-tool-git` package's publicPaths +\n        // meta.url override). The plugin's createUngitProxy validates the\n        // entry-document auth via `?vt=<token>` (or `?apiKey=`), then\n        // issues its own session cookie for sub-requests. Switching this\n        // to a host-level hash→cookie shim (like F5 does for `/ui/<p>`)\n        // would require an SDK contract change + coordinated republish of\n        // the external plugin package. Until that ships, the iframe-token\n        // sits in the URL once. Mitigations in place: F6 makes it single-\n        // use (replayed token rejected); F7 strips the token before\n        // upstream forwarding so Ungit never sees it; F10 enforces Origin\n        // on non-GET/HEAD sub-requests. Residual surface: one query string\n        // appears in CF logs + browser history for the initial document.\n        const initial: IframeTokenResponse = await mintIframeToken(agentId, profile, '/ungit');\n        if (cancelled) return;\n        const baseUrl = `${tunnelUrl.replace(/\\/$/, '')}/ungit/`;\n        setUngitIframeUrl(appendIframeTokenQuery(baseUrl, initial.token));\n        handle = scheduleIframeTokenRefresh(\n          agentId,\n          profile,\n          '/ungit',\n          initial,\n          (next: IframeTokenResponse) => {\n            setUngitIframeUrl(appendIframeTokenQuery(baseUrl, next.token));\n          }\n        );\n      } catch (err) {\n        if (!cancelled) {\n          setUngitTokenError(err instanceof Error ? err.message : 'Failed to fetch iframe token');\n        }\n      }\n    };\n    void setup();\n    return () => {\n      cancelled = true;\n      handle?.cancel();\n    };\n  }, [agentId, profile, tunnelUrl, subTab]);\n\n  return (\n    <motion.div\n      key=\"gitops\"\n      initial={{ opacity: 0, y: 8 }}\n      animate={{ opacity: 1, y: 0 }}\n      exit={{ opacity: 0, y: -8 }}\n      transition={{ duration: 0.2 }}\n      className=\"space-y-4\"\n      data-vibe-id={vibeId}\n    >\n      <div className=\"flex items-center justify-between\">\n        <div className=\"flex items-center gap-2\">\n          <GitMerge className=\"size-5 text-text-secondary\" />\n          <h3 className=\"font-semibold text-text-primary\">\n            {tr('vibeDetails.gitopsTitle', 'GitOps')}\n          </h3>\n        </div>\n        <div className=\"flex items-center gap-2\">\n          {hasProviders && (\n            <GitOpsProviderPicker\n              providers={authedProviders.map((p) => p.name as ProviderName)}\n              selected={selectedProvider}\n              onChange={setSelectedProvider}\n            />\n          )}\n          {hasProviders && (subTab === 'repo-stats' || subTab === 'ci') && (\n            <button\n              type=\"button\"\n              onClick={handleRefresh}\n              disabled={isRefreshing}\n              className=\"flex items-center gap-1.5 px-2.5 py-1 text-xs rounded-md border border-border-default text-text-secondary hover:text-text-primary hover:border-border-strong disabled:opacity-50 transition-colors\"\n              data-testid=\"gitops-refresh\"\n            >\n              <RefreshCw className={`size-3 ${isRefreshing ? 'animate-spin' : ''}`} />\n              {tr('gitops.refresh', 'Refresh')}\n            </button>\n          )}\n          {!showSetup && (\n            <button\n              type=\"button\"\n              onClick={() => setShowSetup(true)}\n              className=\"flex items-center gap-1.5 px-3 py-1.5 text-xs font-medium rounded-md bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bg-hover transition-colors\"\n              data-testid=\"gitops-add-provider\"\n            >\n              {hasProviders\n                ? tr('gitops.addAnotherProvider', 'Add Provider')\n                : tr('gitops.addProvider', 'Add Provider')}\n            </button>\n          )}\n        </div>\n      </div>\n\n      <div className=\"flex flex-col gap-4 lg:flex-row lg:gap-6\">\n        <nav\n          className=\"w-full flex-shrink-0 rounded-lg border border-border-default bg-bg-surface p-2 lg:w-56\"\n          role=\"tablist\"\n          aria-label={tr('gitops.navigation', 'GitOps navigation')}\n        >\n          {subTabs.map((tab) => {\n            const Icon = tab.icon;\n            const isActive = subTab === tab.id;\n            return (\n              <button\n                type=\"button\"\n                key={tab.id}\n                role=\"tab\"\n                aria-selected={isActive}\n                onClick={() => setSubTab(tab.id)}\n                className={`flex w-full items-center gap-2 rounded-md px-3 py-2 text-left text-sm font-medium transition-colors ${\n                  isActive\n                    ? 'bg-action-primary-bg text-action-primary-text shadow-sm'\n                    : 'text-text-secondary hover:bg-action-ghost-bg-hover hover:text-text-primary'\n                }`}\n              >\n                <Icon className=\"size-4 shrink-0\" />\n                <span className=\"truncate\">{tab.label}</span>\n              </button>\n            );\n          })}\n        </nav>\n\n        <div className=\"min-w-0 flex-1 space-y-4\">\n          {showSetup && (\n            <GitOpsSetup\n              ctx={ctx}\n              onCreated={() => {\n                setShowSetup(false);\n                void providersQ.refetch();\n              }}\n              onCancel={() => setShowSetup(false)}\n            />\n          )}\n\n          {subTab === 'repo-stats' && !showSetup && (\n            <>\n              {!hasProviders ? (\n                <EmptyState\n                  tr={tr}\n                  icon={GitMerge}\n                  message=\"gitops.noProvidersVibe\"\n                  fallback=\"No GitOps provider configured. Add a PAT to see repository stats.\"\n                  ctaLabel={tr('gitops.addProvider', 'Add Provider')}\n                  onCta={() => setShowSetup(true)}\n                />\n              ) : !agentId ? (\n                <Notice\n                  tr={tr}\n                  message=\"gitops.noTunnel\"\n                  fallback=\"Waiting for agent tunnel. Make sure the agent is running and a tunnel is active.\"\n                />\n              ) : (\n                <RepoStatsTab\n                  stats={repoStats}\n                  loading={repoStatsLoading || providersQ.isLoading}\n                  error={repoStatsError}\n                />\n              )}\n            </>\n          )}\n\n          {subTab === 'ci' && !showSetup && (\n            <>\n              {!hasProviders ? (\n                <EmptyState\n                  tr={tr}\n                  icon={Play}\n                  message=\"gitops.noProvidersCi\"\n                  fallback=\"No GitOps provider configured. Add a PAT to see CI pipeline status.\"\n                  ctaLabel={tr('gitops.addProvider', 'Add Provider')}\n                  onCta={() => setShowSetup(true)}\n                />\n              ) : !agentId ? (\n                <Notice tr={tr} message=\"gitops.noTunnelCi\" fallback=\"Waiting for agent tunnel.\" />\n              ) : (\n                <CITab\n                  status={ciStatus}\n                  loading={ciStatusLoading || providersQ.isLoading}\n                  error={ciStatusError}\n                />\n              )}\n            </>\n          )}\n\n          {subTab === 'git-ui' && (\n            <PluginGate\n              agentId={agentId || null}\n              required={[GIT_PACKAGE]}\n              mode=\"all\"\n              eyebrow={tr('gitops.ungitEyebrow', 'Ungit plugin required')}\n              title={tr('gitops.ungitTitle', 'Install the visual git client')}\n              description={tr(\n                'gitops.ungitDescription',\n                'The Git UI embeds the Ungit visual git client served by your agent. Install the plugin to continue.'\n              )}\n            >\n              {ungitTokenError ? (\n                <div className=\"rounded-lg border border-border-default bg-status-error-bg-subtle p-4\">\n                  <p className=\"text-sm text-status-error-text\">{ungitTokenError}</p>\n                </div>\n              ) : ungitIframeUrl ? (\n                <iframe\n                  src={ungitIframeUrl}\n                  title=\"Ungit\"\n                  className=\"w-full min-h-[600px] rounded-lg border border-border-default\"\n                />\n              ) : (\n                <div className=\"rounded-lg border border-border-default bg-bg-sunken p-4\">\n                  <p className=\"text-sm text-text-secondary\">\n                    {tr('gitops.ungitLoading', 'Loading Ungit…')}\n                  </p>\n                </div>\n              )}\n            </PluginGate>\n          )}\n        </div>\n      </div>\n    </motion.div>\n  );\n};\n\ninterface EmptyStateProps {\n  tr: (key: string, fallback: string) => string;\n  icon: typeof BarChart3;\n  message: string;\n  fallback: string;\n  ctaLabel?: string;\n  onCta?: () => void;\n}\n\nconst EmptyState: FC<EmptyStateProps> = ({\n  tr,\n  icon: Icon,\n  message,\n  fallback,\n  ctaLabel,\n  onCta,\n}) => (\n  <div className=\"rounded-lg border border-border-default bg-bg-surface p-6 text-center\">\n    <Icon className=\"size-8 text-text-secondary mx-auto mb-3\" />\n    <p className=\"text-sm text-text-secondary\">{tr(message, fallback)}</p>\n    {ctaLabel && onCta && (\n      <button\n        type=\"button\"\n        onClick={onCta}\n        className=\"mt-3 px-4 py-2 text-sm font-medium rounded-md bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bg-hover transition-colors\"\n      >\n        {ctaLabel}\n      </button>\n    )}\n  </div>\n);\n\ninterface NoticeProps {\n  tr: (key: string, fallback: string) => string;\n  message: string;\n  fallback: string;\n}\n\nconst Notice: FC<NoticeProps> = ({ tr, message, fallback }) => (\n  <div className=\"rounded-lg border border-border-default bg-bg-sunken p-4\">\n    <p className=\"text-sm text-text-secondary\">{tr(message, fallback)}</p>\n  </div>\n);\n"],"mappings":";;;;;;;;;;;;;;;;;AA6DA,IAAa,KAAyC,EACpD,WACA,YACA,YACA,cACA,YACI;CACJ,IAAM,CAAC,GAAQ,MAAa,EAAuB,aAAa,EAC1D,CAAC,GAAW,KAAgB,EAAS,GAAM,EAC3C,CAAC,GAAkB,KAAuB,EAA8B,KAAK,EAC7E,CAAC,GAAiB,MAAsB,EAAyB,KAAK,EACtE,EAAE,mBAAgB,GAAiB,EACnC,IAAK,GAAgB,EAErB,IAAM,SACH;EAAE;EAAS,aAAa,KAAe;EAAI;EAAS,GAC3D;EAAC;EAAS;EAAa;EAAQ,CAChC,EAGK,IAAa,GAAmB,EAAI,EACpC,IAAkB,QAChB,EAAW,MAAM,QAAQ,MAAM,EAAE,cAAc,EAAE,cAAc,IAAI,EAAE,EAC3E,CAAC,EAAW,KAAK,CAClB,EACK,IAAe,EAAgB,SAAS;AAG9C,SAAgB;AACd,MAAI,CAAC,KAAoB,EAAgB,SAAS,GAAG;GACnD,IAAM,IAAQ,EAAgB;AAC9B,GAAI,KACF,EAAoB,EAAM,KAAqB;;IAGlD,CAAC,GAAiB,EAAiB,CAAC;CAIvC,IAAM,IAAS,EAAe,GAAK,GAAkB,EAAE,OAAO,IAAI,CAAC;AACnE,SAAgB;AACd,MAAI,CAAC,KAAmB,EAAO,MAAM,MAAM,QAAQ;GACjD,IAAM,IAAQ,EAAO,KAAK,MAAM;AAChC,GAAI,KACF,GAAmB,EAAM,IAAI;;IAGhC,CAAC,EAAO,MAAM,EAAgB,CAAC;CAGlC,IAAM,IAAQ,EAAe,GAAK,GAAkB,EAAE,OAAO,GAAG,CAAC;AAC7C,GAAe;CACnC,IAAM,IAAS,GAAsB,GAAK,GAAkB,GAAiB;EAC3E,OAAO;EACP,OAAO;EACR,CAAC,EACI,IAAU,GAAgB,GAAK,GAAkB,GAAiB;EACtE,OAAO;EACP,OAAO;EACR,CAAC,EACI,IAAa,GAAmB,GAAK,GAAkB,EAAgB,EACvE,IAAgB,GAAsB,GAAK,GAAkB,GAAiB,GAAG,EACjF,IAAY,GAAwB,GAAK,GAAkB,EAAgB,EAE3E,IAAa,QAEf,IACK,EAAM,MAAM,MAAM,MAAM,MAAM,EAAE,QAAQ,EAAgB,IACzD,EAAO,MAAM,MAAM,MAAM,MAAM,EAAE,QAAQ,EAAgB,IACzD,OACC,EAAM,MAAM,MAAM,MAAM,MAC/B;EAAC,EAAM;EAAM,EAAO;EAAM;EAAgB,CAC3C,EAEK,KAAY,QAEd,EAAiB;EACf,MAAM;EACN,OAAO,EAAO;EACd,QAAQ,EAAQ;EAChB,WAAW,EAAW;EACtB,cAAc,EAAc;EAC5B,gBAAgB,EAAU;EAC3B,CAAC,EACJ;EAAC;EAAY,EAAO;EAAM,EAAQ;EAAM,EAAW;EAAM,EAAc;EAAM,EAAU;EAAK,CAC7F,EAGK,IAAQ,GAAc,GAAK,GAAkB,GAAiB,EAAE,OAAO,IAAI,CAAC,EAC5E,IAAe,GAA2B,GAAK,GAAkB,EAAgB,EACjF,KAAW,QAEb,EAAgB;EACd,WAAW,KAAA;EACX,MAAM,EAAM;EACZ,WAAW,EAAa;EACzB,CAAC,EACJ,CAAC,EAAM,MAAM,EAAa,KAAK,CAChC,EAEK,KAAmB,EAAO,aAAa,EAAQ,aAAa,EAAW,WACvE,KAAkB,EAAM,aAAa,EAAa,WAClD,MAAkB,EAAO,SAAS,EAAQ,SAAS,EAAW,QAAQ,SACtE,MAAiB,EAAM,SAAS,EAAa,QAAQ,SAErD,KAAgB,QAAkB;AACjC,IAAG,kBAAkB,EAAE,UAAU;GAAC;GAAU,KAAe;GAAI;GAAS;GAAQ,EAAE,CAAC;IACvF;EAAC;EAAI;EAAa;EAAS;EAAQ,CAAC,EAEjC,IAAe,EAAO,cAAc,EAAM,YAE1C,KAAyE;EAC7E;GAAE,IAAI;GAAc,OAAO,EAAG,oBAAoB,aAAa;GAAE,MAAM;GAAW;EAClF;GAAE,IAAI;GAAM,OAAO,EAAG,aAAa,eAAe;GAAE,MAAM;GAAM;EAChE;GAAE,IAAI;GAAU,OAAO,EAAG,gBAAgB,SAAS;GAAE,MAAM;GAAW;EACvE,EAGK,CAAC,GAAgB,KAAqB,EAAwB,KAAK,EACnE,CAAC,GAAiB,MAAsB,EAAwB,KAAK;AAiD3E,QAhDA,QAAgB;EACd,IAAI,IAAY,IACZ,IAA8C;AAwClD,UAvCc,YAAY;AACxB,OAAI,CAAC,KAAW,CAAC,KAAa,MAAW,UAAU;AACjD,MAAkB,KAAK;AACvB;;AAEF,OAAI;IAcF,IAAM,IAA+B,MAAM,EAAgB,GAAS,GAAS,SAAS;AACtF,QAAI,EAAW;IACf,IAAM,IAAU,GAAG,EAAU,QAAQ,OAAO,GAAG,CAAC;AAEhD,IADA,EAAkB,EAAuB,GAAS,EAAQ,MAAM,CAAC,EACjE,IAAS,EACP,GACA,GACA,UACA,IACC,MAA8B;AAC7B,OAAkB,EAAuB,GAAS,EAAK,MAAM,CAAC;MAEjE;YACM,GAAK;AACZ,IAAK,KACH,GAAmB,aAAe,QAAQ,EAAI,UAAU,+BAA+B;;MAIjF,QACC;AAEX,GADA,IAAY,IACZ,GAAQ,QAAQ;;IAEjB;EAAC;EAAS;EAAS;EAAW;EAAO,CAAC,EAGvC,kBAAC,GAAO,KAAR;EAEE,SAAS;GAAE,SAAS;GAAG,GAAG;GAAG;EAC7B,SAAS;GAAE,SAAS;GAAG,GAAG;GAAG;EAC7B,MAAM;GAAE,SAAS;GAAG,GAAG;GAAI;EAC3B,YAAY,EAAE,UAAU,IAAK;EAC7B,WAAU;EACV,gBAAc;YAPhB,CASE,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,GAAD,EAAU,WAAU,8BAA+B,CAAA,EACnD,kBAAC,MAAD;KAAI,WAAU;eACX,EAAG,2BAA2B,SAAS;KACrC,CAAA,CACD;OACN,kBAAC,OAAD;IAAK,WAAU;cAAf;KACG,KACC,kBAAC,IAAD;MACE,WAAW,EAAgB,KAAK,MAAM,EAAE,KAAqB;MAC7D,UAAU;MACV,UAAU;MACV,CAAA;KAEH,MAAiB,MAAW,gBAAgB,MAAW,SACtD,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,UAAU;MACV,WAAU;MACV,eAAY;gBALd,CAOE,kBAAC,GAAD,EAAW,WAAW,UAAU,IAAe,iBAAiB,MAAQ,CAAA,EACvE,EAAG,kBAAkB,UAAU,CACzB;;KAEV,CAAC,KACA,kBAAC,UAAD;MACE,MAAK;MACL,eAAe,EAAa,GAAK;MACjC,WAAU;MACV,eAAY;gBAGR,EADH,IACM,8BACA,sBAD6B,eACQ;MACrC,CAAA;KAEP;MACF;MAEN,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD;IACE,WAAU;IACV,MAAK;IACL,cAAY,EAAG,qBAAqB,oBAAoB;cAEvD,GAAQ,KAAK,MAAQ;KACpB,IAAM,IAAO,EAAI,MACX,IAAW,MAAW,EAAI;AAChC,YACE,kBAAC,UAAD;MACE,MAAK;MAEL,MAAK;MACL,iBAAe;MACf,eAAe,GAAU,EAAI,GAAG;MAChC,WAAW,uGACT,IACI,4DACA;gBATR,CAYE,kBAAC,GAAD,EAAM,WAAU,mBAAoB,CAAA,EACpC,kBAAC,QAAD;OAAM,WAAU;iBAAY,EAAI;OAAa,CAAA,CACtC;QAZF,EAAI,GAYF;MAEX;IACE,CAAA,EAEN,kBAAC,OAAD;IAAK,WAAU;cAAf;KACG,KACC,kBAAC,IAAD;MACO;MACL,iBAAiB;AAEV,OADL,EAAa,GAAM,EACd,EAAW,SAAS;;MAE3B,gBAAgB,EAAa,GAAM;MACnC,CAAA;KAGH,MAAW,gBAAgB,CAAC,KAC3B,kBAAA,GAAA,EAAA,UACI,IASG,IAOH,kBAAC,GAAD;MACE,OAAO;MACP,SAAS,MAAoB,EAAW;MACxC,OAAO;MACP,CAAA,GAVF,kBAAC,GAAD;MACM;MACJ,SAAQ;MACR,UAAS;MACT,CAAA,GAbF,kBAAC,GAAD;MACM;MACJ,MAAM;MACN,SAAQ;MACR,UAAS;MACT,UAAU,EAAG,sBAAsB,eAAe;MAClD,aAAa,EAAa,GAAK;MAC/B,CAAA,EAcH,CAAA;KAGJ,MAAW,QAAQ,CAAC,KACnB,kBAAA,GAAA,EAAA,UACI,IASG,IAGH,kBAAC,GAAD;MACE,QAAQ;MACR,SAAS,MAAmB,EAAW;MACvC,OAAO;MACP,CAAA,GANF,kBAAC,GAAD;MAAY;MAAI,SAAQ;MAAoB,UAAS;MAA8B,CAAA,GATnF,kBAAC,GAAD;MACM;MACJ,MAAM;MACN,SAAQ;MACR,UAAS;MACT,UAAU,EAAG,sBAAsB,eAAe;MAClD,aAAa,EAAa,GAAK;MAC/B,CAAA,EAUH,CAAA;KAGJ,MAAW,YACV,kBAAC,GAAD;MACE,SAAS,KAAW;MACpB,UAAU,CAAA,qCAAa;MACvB,MAAK;MACL,SAAS,EAAG,uBAAuB,wBAAwB;MAC3D,OAAO,EAAG,qBAAqB,gCAAgC;MAC/D,aAAa,EACX,2BACA,sGACD;gBAEA,IACC,kBAAC,OAAD;OAAK,WAAU;iBACb,kBAAC,KAAD;QAAG,WAAU;kBAAkC;QAAoB,CAAA;OAC/D,CAAA,GACJ,IACF,kBAAC,UAAD;OACE,KAAK;OACL,OAAM;OACN,WAAU;OACV,CAAA,GAEF,kBAAC,OAAD;OAAK,WAAU;iBACb,kBAAC,KAAD;QAAG,WAAU;kBACV,EAAG,uBAAuB,iBAAiB;QAC1C,CAAA;OACA,CAAA;MAEG,CAAA;KAEX;MACF;KACK;IA9KP,SA8KO;GAaX,KAAmC,EACvC,OACA,MAAM,GACN,YACA,aACA,aACA,eAEA,kBAAC,OAAD;CAAK,WAAU;WAAf;EACE,kBAAC,GAAD,EAAM,WAAU,2CAA4C,CAAA;EAC5D,kBAAC,KAAD;GAAG,WAAU;aAA+B,EAAG,GAAS,EAAS;GAAK,CAAA;EACrE,KAAY,KACX,kBAAC,UAAD;GACE,MAAK;GACL,SAAS;GACT,WAAU;aAET;GACM,CAAA;EAEP;IASF,KAA2B,EAAE,OAAI,YAAS,kBAC9C,kBAAC,OAAD;CAAK,WAAU;WACb,kBAAC,KAAD;EAAG,WAAU;YAA+B,EAAG,GAAS,EAAS;EAAK,CAAA;CAClE,CAAA"}

package/dist/components/security/SecurityScanList.js

@@ -132,19 +132,12 @@ function y({ rowKey: e }) {
 		]
 	}, e);
 }
-function b({ vibeId: r, agentId: i, tunnelUrl: a, apiKey: o, profile: c, limit: b = 20 }) {
-	let { data: x, isLoading: S, error: C, isFetching: w, refetch: T } = e(t(() => ({
+function b({ vibeId: r, agentId: i, profile: a, limit: o = 20 }) {
+	let { data: c, isLoading: b, error: x, isFetching: S, refetch: C } = e(t(() => ({
 		agentId: i,
-		tunnelUrl: a,
-		apiKey: o,
-		profile: c
-	}), [
-		i,
-		a,
-		o,
-		c
-	]), r, b);
-	return i && a && o ? /* @__PURE__ */ d("section", {
+		profile: a
+	}), [i, a]), r, o);
+	return i ? /* @__PURE__ */ d("section", {
 		"data-testid": "security-scan-list",
 		className: "rounded-lg border border-border-default bg-bg-surface",
 		children: [
@@ -159,19 +152,19 @@ function b({ vibeId: r, agentId: i, tunnelUrl: a, apiKey: o, profile: c, limit:
 						className: "text-xs text-text-secondary mt-0.5",
 						children: [
 							"Read live from the agent. Showing up to ",
-							b,
+							o,
 							" most recently active runs for this vibe."
 						]
 					})]
 				}), /* @__PURE__ */ u("button", {
 					type: "button",
-					onClick: () => void T(),
-					disabled: w,
+					onClick: () => void C(),
+					disabled: S,
 					className: "px-2.5 py-1 text-xs rounded-md border border-border-default bg-bg-sunken text-text-primary hover:bg-action-primary-bg-hover disabled:opacity-50",
-					children: w ? "Refreshing…" : "Refresh"
+					children: S ? "Refreshing…" : "Refresh"
 				})]
 			}),
-			C && /* @__PURE__ */ d("div", {
+			x && /* @__PURE__ */ d("div", {
 				className: "m-4 flex items-start gap-2 rounded-md border border-status-error-border bg-status-error-bg/10 p-3 text-sm",
 				children: [/* @__PURE__ */ u(n, { className: "size-4 text-status-error-text mt-0.5 shrink-0" }), /* @__PURE__ */ d("div", {
 					className: "text-text-primary",
@@ -180,7 +173,7 @@ function b({ vibeId: r, agentId: i, tunnelUrl: a, apiKey: o, profile: c, limit:
 						children: "Couldn't load scan runs"
 					}), /* @__PURE__ */ u("p", {
 						className: "mt-0.5 text-xs text-text-secondary",
-						children: C.message
+						children: x.message
 					})]
 				})]
 			}),
@@ -221,12 +214,12 @@ function b({ vibeId: r, agentId: i, tunnelUrl: a, apiKey: o, profile: c, limit:
 							})
 						] })
 					}), /* @__PURE__ */ d("tbody", { children: [
-						S && x === void 0 && /* @__PURE__ */ d(l, { children: [
+						b && c === void 0 && /* @__PURE__ */ d(l, { children: [
 							/* @__PURE__ */ u(y, { rowKey: 0 }),
 							/* @__PURE__ */ u(y, { rowKey: 1 }),
 							/* @__PURE__ */ u(y, { rowKey: 2 })
 						] }),
-						!S && (x?.length ?? 0) === 0 && !C && /* @__PURE__ */ u("tr", { children: /* @__PURE__ */ u("td", {
+						!b && (c?.length ?? 0) === 0 && !x && /* @__PURE__ */ u("tr", { children: /* @__PURE__ */ u("td", {
 							colSpan: 7,
 							className: "px-3 py-8",
 							children: /* @__PURE__ */ d("div", {
@@ -244,7 +237,7 @@ function b({ vibeId: r, agentId: i, tunnelUrl: a, apiKey: o, profile: c, limit:
 								]
 							})
 						}) }),
-						(x ?? []).map((e) => /* @__PURE__ */ d("tr", {
+						(c ?? []).map((e) => /* @__PURE__ */ d("tr", {
 							className: "border-t border-border-subtle align-middle",
 							children: [
 								/* @__PURE__ */ u("td", {
@@ -299,7 +292,7 @@ function b({ vibeId: r, agentId: i, tunnelUrl: a, apiKey: o, profile: c, limit:
 	}) : /* @__PURE__ */ u("section", {
 		"data-testid": "security-scan-list",
 		className: "rounded-lg border border-border-default bg-bg-surface p-4 text-sm text-text-secondary",
-		children: "Connect to a reachable agent to load scan history. Scan runs are read directly from the agent over the tunnel — there's no backend cache."
+		children: "Connect to a reachable agent to load scan history. Scan runs are read from the agent via the svc GraphQL proxy — there's no backend cache."
 	});
 }
 //#endregion